@aiwayds/dsh-tui-pi 2.11.4 → 2.12.0

package/lib/subagent-policy.d.ts

@@ -5,20 +5,33 @@
  * decision point — no watcher needed (the /settings browser hot-applies, so
  * the next guard execution / turn count reads the new value):
  * - `maxAgents` caps concurrent live children. A `tools.guard` registered on
- *   the plugin root ctx denies model-facing spawn tools once the bridge's
- *   live child count meets the cap. The live-child COUNT covers every child
- *   in the process, but the DENIAL scope is "belongs to this TUI": a caller
- *   carrying the surface marker, or any live descendant of a marked root
- *   (the ancestor walk closes the host-created-children hole). Foreign
- *   roots fail open. The workflow/ralph fan-out bypasses the tool pipeline
- *   (its worker thread spawns through the subagent provider directly), so a
- *   `subagent/start` listener prunes any newcomer that slips past the guard
- *   — same ownership scope, decided by the child's parent ancestry.
+ *   the plugin root ctx denies model-facing spawn tools once the EFFECTIVE
+ *   child count meets the cap. The count is synchronous at the spawn
+ *   decision: discovered live children plus an admission ledger of
+ *   allowed-but-not-yet-discovered spawns, so a burst of parallel spawn
+ *   calls inside one assistant message cannot overshoot while the bridge's
+ *   firehose discovery catches up (each allowance enters the ledger the
+ *   moment it is granted; each newly discovered child consumes one entry).
+ *   The count covers every child in the process, but the DENIAL scope is
+ *   "belongs to this TUI": a caller carrying the surface marker, or any
+ *   live descendant of a marked root (the ancestor walk closes the
+ *   host-created-children hole). Foreign roots fail open. A denial tells
+ *   the model to record the task in its todo list and run it once a slot
+ *   frees, instead of retrying the spawn. The workflow/ralph fan-out
+ *   bypasses the tool pipeline (its worker thread spawns through the
+ *   subagent provider directly), so a `subagent/start` listener prunes any
+ *   newcomer that slips past the guard — same ownership scope, decided by
+ *   the child's parent ancestry.
  * - `disableSubagent` disables the plain native `subagent` tool: its calls
  *   are denied for every TUI-scoped caller (and it is hidden from the main
  *   agent's catalog), so delegation goes through registered agent
  *   definitions (`~/.dsh/agents/*.md` via the registry's `use_agent`).
  *   `subagent_fork`, `workflow` and `ralph` stay available.
+ * - `registeredOnly` is the wider fence: EVERY spawn tool except
+ *   `use_agent` is denied for TUI-scoped callers, so no child can exist
+ *   without a registered agent definition behind it (no ad-hoc
+ *   "implement <task>" children). Default off; the fence is read live like
+ *   every other knob.
  * - `maxRounds` caps a child's assistant messages (each LLM round-trip is
  *   one "round") through a TWO-STAGE ladder. Stage 1: at the cap — the
  *   per-agent tier when the child's label resolves to an agent .md
@@ -136,6 +149,23 @@ export interface HardStopRecord {
     /** The grace window that was exhausted. */
     readonly grace: number;
 }
+/**
+ * Cumulative subagent-runtime counters since the policy was installed (this
+ * TUI process), served to the model through the `subagent_status` tool and
+ * to the operator through the /agents limits panel.
+ */
+export interface SubagentPolicyStats {
+    /** Children currently on the bridge's live board (settled excluded). */
+    live: number;
+    /** Spawn-tool calls the guard admitted. */
+    allowed: number;
+    /** Spawn-tool calls denied at the `maxAgents` cap. */
+    denied: number;
+    /** Fan-out children pruned by the `subagent/start` backstop. */
+    pruned: number;
+    /** Allowed-but-undiscovered spawns currently holding an admission slot. */
+    inFlight: number;
+}
 /** The running policy: the bridge's `onRoundCount` sink plus the teardown. */
 export interface SubagentPolicy {
     /** Called by the bridge whenever one child produced another assistant message. */
@@ -145,6 +175,8 @@ export interface SubagentPolicy {
      * force-stopped child shows its `⏻` marker everywhere the view renders.
      */
     onHardStop?(record: HardStopRecord): void;
+    /** Snapshot of the runtime counters (live / allowed / denied / pruned / inFlight). */
+    getStats(): SubagentPolicyStats;
     /** Unwind the guard and event listeners. */
     dispose(): void;
 }

package/lib/subagent-policy.js

@@ -5,20 +5,33 @@
  * decision point — no watcher needed (the /settings browser hot-applies, so
  * the next guard execution / turn count reads the new value):
  * - `maxAgents` caps concurrent live children. A `tools.guard` registered on
- *   the plugin root ctx denies model-facing spawn tools once the bridge's
- *   live child count meets the cap. The live-child COUNT covers every child
- *   in the process, but the DENIAL scope is "belongs to this TUI": a caller
- *   carrying the surface marker, or any live descendant of a marked root
- *   (the ancestor walk closes the host-created-children hole). Foreign
- *   roots fail open. The workflow/ralph fan-out bypasses the tool pipeline
- *   (its worker thread spawns through the subagent provider directly), so a
- *   `subagent/start` listener prunes any newcomer that slips past the guard
- *   — same ownership scope, decided by the child's parent ancestry.
+ *   the plugin root ctx denies model-facing spawn tools once the EFFECTIVE
+ *   child count meets the cap. The count is synchronous at the spawn
+ *   decision: discovered live children plus an admission ledger of
+ *   allowed-but-not-yet-discovered spawns, so a burst of parallel spawn
+ *   calls inside one assistant message cannot overshoot while the bridge's
+ *   firehose discovery catches up (each allowance enters the ledger the
+ *   moment it is granted; each newly discovered child consumes one entry).
+ *   The count covers every child in the process, but the DENIAL scope is
+ *   "belongs to this TUI": a caller carrying the surface marker, or any
+ *   live descendant of a marked root (the ancestor walk closes the
+ *   host-created-children hole). Foreign roots fail open. A denial tells
+ *   the model to record the task in its todo list and run it once a slot
+ *   frees, instead of retrying the spawn. The workflow/ralph fan-out
+ *   bypasses the tool pipeline (its worker thread spawns through the
+ *   subagent provider directly), so a `subagent/start` listener prunes any
+ *   newcomer that slips past the guard — same ownership scope, decided by
+ *   the child's parent ancestry.
  * - `disableSubagent` disables the plain native `subagent` tool: its calls
  *   are denied for every TUI-scoped caller (and it is hidden from the main
  *   agent's catalog), so delegation goes through registered agent
  *   definitions (`~/.dsh/agents/*.md` via the registry's `use_agent`).
  *   `subagent_fork`, `workflow` and `ralph` stay available.
+ * - `registeredOnly` is the wider fence: EVERY spawn tool except
+ *   `use_agent` is denied for TUI-scoped callers, so no child can exist
+ *   without a registered agent definition behind it (no ad-hoc
+ *   "implement <task>" children). Default off; the fence is read live like
+ *   every other knob.
  * - `maxRounds` caps a child's assistant messages (each LLM round-trip is
  *   one "round") through a TWO-STAGE ladder. Stage 1: at the cap — the
  *   per-agent tier when the child's label resolves to an agent .md
@@ -208,6 +221,15 @@ function callerBelongsToTui(ctx, agent) {
 }
 /** Walk depth cap: dsh's native depth default is 3; 4 hops cover it with room. */
 const ANCESTOR_WALK_MAX_DEPTH = 4;
+/**
+ * How long an allowed-but-never-discovered admission may hold its slot.
+ * Discovery normally lands within one bridge reconcile tick (600ms); the
+ * TTL only releases the slot of a spawn that errored after the guard
+ * allowed it, so one failed spawn cannot shrink the budget forever.
+ */
+const INFLIGHT_TTL_MS = 30_000;
+/** Credited-id slack over the live board before stale ids are pruned. */
+const CREDITED_SLACK = 64;
 /**
  * The wrap-up message injected into a child that reached `maxRounds`.
  * English and directive on purpose: it is a policy instruction to the child
@@ -245,14 +267,68 @@ export function applySubagentPolicy(ctx, state, resolveAgentCap) {
     const injected = new Set();
     /** Set by dispose: a pending deferred injection must not fire afterwards. */
     let disposed = false;
-    // maxAgents guard: the live-child count is global (the bridge counts every
-    // child it discovers), but the DENIAL — like the disableSubagent fence —
-    // only fires for agents this bridge created or resumed (the surface
-    // marker; unmarked callers fail open). Zero disables the guard.
-    // The cap is approximate, not a hard admission lock: a burst of parallel
-    // spawn calls can briefly overshoot before the bridge's firehose discovery
-    // counts the newcomers — the subagent/start backstop below prunes the
-    // overshoot, and the next spawn's guard reads the caught-up count.
+    // ---- synchronous admission ledger -------------------------------------
+    //
+    // The maxAgents admission decision must not depend on discovery timing.
+    // Every allowance is recorded here the moment it is granted; every child
+    // the bridge later discovers consumes exactly one record (it is then
+    // counted in `live` directly). The next guard execution therefore always
+    // reads `live.length + inFlight.length`, so a burst of parallel spawn
+    // calls inside ONE assistant message sees itself: with cap 2 the calls
+    // read 0+0, 0+1, then deny at 0+2 — never six "Started" results.
+    const stats = { live: 0, allowed: 0, denied: 0, pruned: 0, inFlight: 0 };
+    /** Live child ids already folded into the ledger (each consumed one in-flight). */
+    const creditedIds = new Set();
+    /** Admission timestamps of allowed spawns not yet discovered in `getLive()`. */
+    const inFlightAt = [];
+    /**
+     * Fold the bridge's current live board into the admission ledger and
+     * return the effective child count the `maxAgents` cap compares against:
+     * discovered children plus allowed-but-undiscovered admissions.
+     *
+     * Each live child absent from `creditedIds` is a fresh discovery and
+     * consumes exactly one in-flight entry. A child the guard never admitted
+     * (workflow/ralph provider spawns, foreign surfaces) consumes a phantom
+     * entry at worst — shifting an empty list is a no-op — which can only
+     * make the estimate MORE conservative, never higher. Entries older than
+     * {@link INFLIGHT_TTL_MS} expire so a spawn that failed after the guard
+     * allowed it releases its slot instead of holding it forever.
+     */
+    function reconcileAdmission(live) {
+        let discovered = 0;
+        for (const view of live) {
+            const id = view.childId;
+            if (typeof id !== 'string' || id === '')
+                continue;
+            if (!creditedIds.has(id)) {
+                creditedIds.add(id);
+                discovered += 1;
+            }
+        }
+        for (let i = 0; i < discovered; i += 1)
+            inFlightAt.shift();
+        const now = Date.now();
+        while (inFlightAt.length > 0 && now - inFlightAt[0] > INFLIGHT_TTL_MS)
+            inFlightAt.shift();
+        if (creditedIds.size > live.length + CREDITED_SLACK) {
+            const liveIds = new Set(live.map(view => view.childId));
+            for (const id of creditedIds) {
+                if (!liveIds.has(id))
+                    creditedIds.delete(id);
+            }
+        }
+        stats.inFlight = inFlightAt.length;
+        stats.live = live.length;
+        return live.length + inFlightAt.length;
+    }
+    // maxAgents guard: the effective child count is global (the bridge counts
+    // every child it discovers; the admission ledger adds the
+    // allowed-but-undiscovered spawns so a same-step burst cannot overshoot),
+    // but the DENIAL — like the disableSubagent fence — only fires for agents
+    // this bridge created or resumed (the surface marker; unmarked callers
+    // fail open). Zero disables the guard. The subagent/start backstop below
+    // still covers the workflow/ralph provider path, which never reaches this
+    // guard at all.
     //
     // disableSubagent fence: the plain native `subagent` tool is denied —
     // but ONLY for agents this bridge created or resumed (the surface marker
@@ -280,6 +356,21 @@ export function applySubagentPolicy(ctx, state, resolveAgentCap) {
             // roots still fail open.
             if (!callerBelongsToTui(ctx, exec.agent))
                 return undefined;
+            // registeredOnly fence: EVERY spawn tool except the registry's
+            // use_agent is denied — a child may only ever be backed by a
+            // registered agent definition (~/.dsh/agents/*.md). Stricter than the
+            // disableSubagent fence: subagent_fork/workflow/ralph are fenced too,
+            // so the model cannot sidestep the roster with ad-hoc or forked
+            // spawns (the "实现 <task description>" label shape is exactly the
+            // leak this closes).
+            if (readSubagentLimits(ctx).registeredOnly && exec.name !== 'use_agent') {
+                return `Ad-hoc subagents are disabled here — the "${exec.name}" tool is not available. `
+                    + 'Delegation goes through the use_agent tool with one of the REGISTERED agent names '
+                    + '(~/.dsh/agents/*.md) only — it covers the same ground: background:true for a durable '
+                    + 'background child, resume/fresh for continuation, parallel use_agent calls for fan-out. '
+                    + 'If no registered agent fits this task, do it yourself or record it with todo_write and '
+                    + 'surface it to the operator.';
+            }
             if (readSubagentLimits(ctx).disableSubagent && NATIVE_SPAWN_TOOLS.includes(exec.name)) {
                 return `Tool "subagent" is disabled here - delegation goes through registered agents. `
                     + 'Dispatch the work through the use_agent tool with one of the registered agent names instead.';
@@ -288,10 +379,21 @@ export function applySubagentPolicy(ctx, state, resolveAgentCap) {
             if (maxAgents <= 0)
                 return undefined;
             const live = state.getLive();
-            if (live.length < maxAgents)
+            // SYNCHRONOUS admission: the effective count folds in the ledger of
+            // spawns this guard already allowed but the bridge has not discovered
+            // yet — the burst window that let six parallel use_agent calls through
+            // a cap of two (2026-09-10 session 9c777e88).
+            const effective = reconcileAdmission(live);
+            if (effective < maxAgents) {
+                inFlightAt.push(Date.now());
+                stats.allowed += 1;
                 return undefined;
+            }
+            stats.denied += 1;
             const running = live.map((agent) => agent.label).join(', ');
-            return `Agent limit reached (${live.length}/${maxAgents}): ${running} still running — wait for them to finish before spawning more.`;
+            return `Agent limit reached (${effective}/${maxAgents}): ${running} still running — do NOT retry the spawn now. `
+                + 'Call subagent_status for the live board, record this task in the todo list (todo_write, status pending), '
+                + 'and execute it after a running agent finishes and frees a slot.';
         }));
     }
     // Workflow/ralph backstop: the worker thread fans children out through the
@@ -329,7 +431,11 @@ export function applySubagentPolicy(ctx, state, resolveAgentCap) {
             : ctx.agents.get(SessionId(parentSession));
         if (parent === undefined || !callerBelongsToTui(ctx, parent))
             return;
-        ctx.agents.get(info.id)?.cancel({
+        const newcomerAgent = ctx.agents.get(info.id);
+        if (newcomerAgent === undefined)
+            return;
+        stats.pruned += 1;
+        newcomerAgent.cancel({
             kind: 'hook',
             reason: 'over the dsh-tui maxAgents policy cap — prune a fan-out child',
         });
@@ -496,6 +602,13 @@ export function applySubagentPolicy(ctx, state, resolveAgentCap) {
         set onHardStop(sink) {
             onHardStopSink = sink;
         },
+        getStats() {
+            return {
+                ...stats,
+                live: state.getLive().length,
+                inFlight: inFlightAt.length,
+            };
+        },
         dispose() {
             disposed = true;
             for (const dispose of disposers.splice(0)) {

package/lib/subagent-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"subagent-policy.js","sourceRoot":"","sources":["../src/subagent-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAGxD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,UAAU;IACV,eAAe;IACf,UAAU;IACV,OAAO;IACP,WAAW;CACZ,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,UAAU;CACX,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAgF,CAAA;IAClH,IAAI,KAAK,EAAE,QAAQ,KAAK,SAAS;QAAE,OAAM;IACzC,IAAI,CAAC;QACH,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAA;AAE9C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,GAAG,GAAI,KAAoC,CAAC,GAAG,CAAA;IACrD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAAyB,CAAC,GAAG,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IACjH,IAAI,CAAC;QACH,OAAQ,GAAsC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,CAAA;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAYD;;GAEG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,kBAAkB,CAAC,GAAY,EAAE,KAAc;IACtD,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACzC,mEAAmE;IACnE,IAAI,MAA+B,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,GAAI,KAAmC,EAAE,OAAO,EAAE,MAAM,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,IAAI,QAAQ,GAAG,MAAM,EAAE,aAAa,CAAA;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,uBAAuB,IAAI,QAAQ,KAAK,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,QAAmC,CAAA;QACvC,IAAI,CAAC;YACH,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAkB,CAAC,CAA8B,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACxC,IAAI,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5C,mEAAmE;QACnE,wEAAwE;QACxE,gCAAgC;QAChC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA;QAC5D,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,CAAC,CAAA;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,wBAAwB,SAAS,0DAA0D;UACpG,iGAAiG;UACjG,kFAAkF,CAAA;IACtF,OAAO,KAAK,GAAG,CAAC;QACd,CAAC,CAAC,GAAG,IAAI,aAAa,KAAK,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oCAAoC;QACnG,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAqED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,KAA0B,EAC1B,eAAuD;IAEvD,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,6EAA6E;IAC7E,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,2EAA2E;IAC3E,yEAAyE;IACzE,oEAAoE;IACpE,gEAAgE;IAChE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,mEAAmE;IACnE,EAAE;IACF,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,8DAA8D;IAC9D,EAAE;IACF,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAA6B,CAAA;IAC1D,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;YAClC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YACtD,uEAAuE;YACvE,oEAAoE;YACpE,sEAAsE;YACtE,yBAAyB;YACzB,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC1D,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,eAAe,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtF,OAAO,gFAAgF;sBACnF,8FAA8F,CAAA;YACpG,CAAC;YACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;YACnD,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;YAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3D,OAAO,wBAAwB,IAAI,CAAC,MAAM,IAAI,SAAS,MAAM,OAAO,gEAAgE,CAAA;QACtI,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,sBAAsB;IACtB,EAAE;IACF,mEAAmE;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,IAAuB,EAAE,EAAE;QAChF,IAAI,IAAI,EAAE,EAAE,KAAK,SAAS;YAAE,OAAM;QAClC,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;QACnD,IAAI,SAAS,IAAI,CAAC;YAAE,OAAM;QAC1B,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,0DAA0D;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;YAAE,OAAM;QACnC,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAA8B,CAAA;QAClE,MAAM,aAAa,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAA;QAC3D,MAAM,MAAM,GAAG,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,EAAE;YACtE,CAAC,CAAC,SAAS;YACX,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAA+B,CAAA;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,OAAM;QACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;YAC9B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;QAClD,IAAI,QAAQ;YAAE,OAAM;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,KAAK;eACtE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAM;QAC9B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QAC3B,IAAI,KAAK,GAAG,GAAG;YAAE,OAAM;QACvB,kEAAkE;QAClE,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAM,CAAC,wCAAwC;YAC/D,IAAI,KAAK,GAAG,GAAG,GAAG,KAAK;gBAAE,OAAM;YAC/B,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAM;YACpC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAM,CAAC,mCAAmC;YACxE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,iEAAiE;YACnE,CAAC;YACD,OAAM;QACR,CAAC;QACD,yEAAyE;QACzE,sEAAsE;QACtE,oEAAoE;QACpE,iBAAiB;QACjB,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAM;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAA+B,CAAA;QAC9E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAM;QAC/B,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,mBAAmB;QACnB,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAM;YAC7C,oEAAoE;YACpE,oEAAoE;YACpE,2CAA2C;YAC3C,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAM;YACpF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,iBAAiB,CAAC;oBAChC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC5D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;iBACjD,CAAC,CAAA;gBACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;;oBAC/C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,+DAA+D;gBAC/D,oCAAoC;gBACpC,OAAM;YACR,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACrB,sEAAsE;YACtE,uDAAuD;YACvD,IAAI,KAAK,KAAK,SAAS;gBAAE,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAA;IACpD,kFAAkF;IAClF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,iFAAiF;IACjF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,sEAAsE;IACtE,IAAI,cAA8D,CAAA;IAElE;;;;;;;;OAQG;IACH,SAAS,WAAW,CAAC,OAAe,EAAE,KAAyB;QAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QAClC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QACpC,IAAI,GAAG,GAAG,SAAS,CAAA;QACnB,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;gBACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,CAAC;oBAAE,GAAG,GAAG,QAAQ,CAAA;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;QAChE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,YAAY;QACZ,IAAI,UAAU;YACZ,OAAO,cAAc,CAAA;QACvB,CAAC;QACD,IAAI,UAAU,CAAC,IAAoD;YACjE,cAAc,GAAG,IAAI,CAAA;QACvB,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC;oBAAC,OAAO,EAAE,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"subagent-policy.js","sourceRoot":"","sources":["../src/subagent-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAGxD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,UAAU;IACV,eAAe;IACf,UAAU;IACV,OAAO;IACP,WAAW;CACZ,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,UAAU;CACX,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAgF,CAAA;IAClH,IAAI,KAAK,EAAE,QAAQ,KAAK,SAAS;QAAE,OAAM;IACzC,IAAI,CAAC;QACH,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAA;AAE9C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,GAAG,GAAI,KAAoC,CAAC,GAAG,CAAA;IACrD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAAyB,CAAC,GAAG,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IACjH,IAAI,CAAC;QACH,OAAQ,GAAsC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,CAAA;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAYD;;GAEG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,kBAAkB,CAAC,GAAY,EAAE,KAAc;IACtD,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACzC,mEAAmE;IACnE,IAAI,MAA+B,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,GAAI,KAAmC,EAAE,OAAO,EAAE,MAAM,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,IAAI,QAAQ,GAAG,MAAM,EAAE,aAAa,CAAA;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,uBAAuB,IAAI,QAAQ,KAAK,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,QAAmC,CAAA;QACvC,IAAI,CAAC;YACH,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAkB,CAAC,CAA8B,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACxC,IAAI,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5C,mEAAmE;QACnE,wEAAwE;QACxE,gCAAgC;QAChC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA;QAC5D,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,CAAC,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,eAAe,GAAG,MAAM,CAAA;AAE9B,yEAAyE;AACzE,MAAM,cAAc,GAAG,EAAE,CAAA;AAEzB;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,wBAAwB,SAAS,0DAA0D;UACpG,iGAAiG;UACjG,kFAAkF,CAAA;IACtF,OAAO,KAAK,GAAG,CAAC;QACd,CAAC,CAAC,GAAG,IAAI,aAAa,KAAK,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oCAAoC;QACnG,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAyFD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,KAA0B,EAC1B,eAAuD;IAEvD,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,6EAA6E;IAC7E,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,0EAA0E;IAC1E,EAAE;IACF,wEAAwE;IACxE,yEAAyE;IACzE,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,KAAK,GAAwB,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;IAC7F,mFAAmF;IACnF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,gFAAgF;IAChF,MAAM,UAAU,GAAa,EAAE,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,SAAS,kBAAkB,CAAC,IAA6C;QACvE,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAA;YACvB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAQ;YACjD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACnB,UAAU,IAAI,CAAC,CAAA;YACjB,CAAC;QACH,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,KAAK,EAAE,CAAA;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,eAAe;YAAE,UAAU,CAAC,KAAK,EAAE,CAAA;QACzF,IAAI,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;YACvD,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAA;QAClC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAA;QACxB,OAAO,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACxC,CAAC;IAED,0EAA0E;IAC1E,0DAA0D;IAC1D,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,gBAAgB;IAChB,EAAE;IACF,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,8DAA8D;IAC9D,EAAE;IACF,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAA6B,CAAA;IAC1D,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;YAClC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YACtD,uEAAuE;YACvE,oEAAoE;YACpE,sEAAsE;YACtE,yBAAyB;YACzB,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC1D,+DAA+D;YAC/D,6DAA6D;YAC7D,sEAAsE;YACtE,sEAAsE;YACtE,gEAAgE;YAChE,iEAAiE;YACjE,qBAAqB;YACrB,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxE,OAAO,6CAA6C,IAAI,CAAC,IAAI,2BAA2B;sBACpF,oFAAoF;sBACpF,uFAAuF;sBACvF,yFAAyF;sBACzF,yFAAyF;sBACzF,6BAA6B,CAAA;YACnC,CAAC;YACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,eAAe,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtF,OAAO,gFAAgF;sBACnF,8FAA8F,CAAA;YACpG,CAAC;YACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;YACnD,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;YAC5B,oEAAoE;YACpE,sEAAsE;YACtE,uEAAuE;YACvE,8CAA8C;YAC9C,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;YAC1C,IAAI,SAAS,GAAG,SAAS,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;gBAC3B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;gBAClB,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3D,OAAO,wBAAwB,SAAS,IAAI,SAAS,MAAM,OAAO,+CAA+C;kBAC7G,2GAA2G;kBAC3G,iEAAiE,CAAA;QACvE,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,sBAAsB;IACtB,EAAE;IACF,mEAAmE;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,IAAuB,EAAE,EAAE;QAChF,IAAI,IAAI,EAAE,EAAE,KAAK,SAAS;YAAE,OAAM;QAClC,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;QACnD,IAAI,SAAS,IAAI,CAAC;YAAE,OAAM;QAC1B,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,0DAA0D;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;YAAE,OAAM;QACnC,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAA8B,CAAA;QAClE,MAAM,aAAa,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAA;QAC3D,MAAM,MAAM,GAAG,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,EAAE;YACtE,CAAC,CAAC,SAAS;YACX,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAA+B,CAAA;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,OAAM;QACpE,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7C,IAAI,aAAa,KAAK,SAAS;YAAE,OAAM;QACvC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA;QACjB,aAAa,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;QAClD,IAAI,QAAQ;YAAE,OAAM;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,KAAK;eACtE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAM;QAC9B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QAC3B,IAAI,KAAK,GAAG,GAAG;YAAE,OAAM;QACvB,kEAAkE;QAClE,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAM,CAAC,wCAAwC;YAC/D,IAAI,KAAK,GAAG,GAAG,GAAG,KAAK;gBAAE,OAAM;YAC/B,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAM;YACpC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAM,CAAC,mCAAmC;YACxE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,iEAAiE;YACnE,CAAC;YACD,OAAM;QACR,CAAC;QACD,yEAAyE;QACzE,sEAAsE;QACtE,oEAAoE;QACpE,iBAAiB;QACjB,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAM;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAA+B,CAAA;QAC9E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAM;QAC/B,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,mBAAmB;QACnB,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAM;YAC7C,oEAAoE;YACpE,oEAAoE;YACpE,2CAA2C;YAC3C,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAM;YACpF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,iBAAiB,CAAC;oBAChC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC5D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;iBACjD,CAAC,CAAA;gBACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;;oBAC/C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,+DAA+D;gBAC/D,oCAAoC;gBACpC,OAAM;YACR,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACrB,sEAAsE;YACtE,uDAAuD;YACvD,IAAI,KAAK,KAAK,SAAS;gBAAE,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAA;IACpD,kFAAkF;IAClF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,iFAAiF;IACjF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,sEAAsE;IACtE,IAAI,cAA8D,CAAA;IAElE;;;;;;;;OAQG;IACH,SAAS,WAAW,CAAC,OAAe,EAAE,KAAyB;QAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QAClC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QACpC,IAAI,GAAG,GAAG,SAAS,CAAA;QACnB,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;gBACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,CAAC;oBAAE,GAAG,GAAG,QAAQ,CAAA;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;QAChE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,YAAY;QACZ,IAAI,UAAU;YACZ,OAAO,cAAc,CAAA;QACvB,CAAC;QACD,IAAI,UAAU,CAAC,IAAoD;YACjE,cAAc,GAAG,IAAI,CAAA;QACvB,CAAC;QACD,QAAQ;YACN,OAAO;gBACL,GAAG,KAAK;gBACR,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM;gBAC5B,QAAQ,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAA;QACH,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC;oBAAC,OAAO,EAAE,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/subagent-status-tool.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The `subagent_status` model-facing tool: a read-only live board of this
+ * TUI's subagent runtime, served straight from the bridge's real-time views
+ * and the policy's admission counters.
+ *
+ * Why a tool: the runtime state already exists in-process (the bridge folds
+ * every child's firehose events and reconciles against the host's
+ * authoritative descendant listing every 600ms), but before this tool the
+ * model had no cheap way to READ it — it had to probe the spawn tool and
+ * read denial strings, or re-derive state from transcripts. One call here
+ * returns the whole board: cap headroom, per-child progress (rounds,
+ * tokens, context, last tool), the recent settles, and the admission
+ * counters (admitted / denied / pruned / in-flight). The maxAgents denial
+ * message points here, so the reject → check → todo_write → retry-later
+ * loop needs no other discovery.
+ *
+ * Read-only by design: steering and stopping stay on the human surfaces
+ * (Ctrl+G viewer, stop-everything dialog) — the model observing the board
+ * can plan around it but cannot reach through it.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { AgentView } from './dsh-events.ts';
+import type { SubagentPolicyStats } from './subagent-policy.ts';
+/** The global tool name — deliberately NOT in SPAWN_TOOLS: this spawns nothing. */
+export declare const SUBAGENT_STATUS_TOOL_NAME = "subagent_status";
+/**
+ * Where the board reads from: the bridge's real-time views and the policy's
+ * admission counters. Both are plain synchronous reads — the runtime state
+ * is maintained continuously, never computed on demand.
+ */
+export interface SubagentRuntimeSource {
+    /** The bridge's child views (live and recently settled). */
+    views(): readonly AgentView[];
+    /** The policy's admission counters. */
+    stats(): SubagentPolicyStats;
+}
+/**
+ * Build the tool definition. `parameters` is empty — the board takes no
+ * arguments; every call is a full snapshot.
+ */
+export declare function buildSubagentStatusTool(ctx: Context, runtime: SubagentRuntimeSource): import("@deepseek-ai/dsh-tools").ToolDefinition;
+/**
+ * Register the board tool on the plugin root ctx. Best-effort like the
+ * policy's guard wiring: a tools-less deployment skips silently (the TUI's
+ * runtime management surfaces — viewer, limits panel — remain).
+ *
+ * @returns the registration disposer, or `undefined` when there is no tools
+ * service to register with.
+ */
+export declare function installSubagentStatusTool(ctx: Context, runtime: SubagentRuntimeSource): (() => void) | undefined;

package/lib/subagent-status-tool.js

@@ -0,0 +1,125 @@
+/**
+ * The `subagent_status` model-facing tool: a read-only live board of this
+ * TUI's subagent runtime, served straight from the bridge's real-time views
+ * and the policy's admission counters.
+ *
+ * Why a tool: the runtime state already exists in-process (the bridge folds
+ * every child's firehose events and reconciles against the host's
+ * authoritative descendant listing every 600ms), but before this tool the
+ * model had no cheap way to READ it — it had to probe the spawn tool and
+ * read denial strings, or re-derive state from transcripts. One call here
+ * returns the whole board: cap headroom, per-child progress (rounds,
+ * tokens, context, last tool), the recent settles, and the admission
+ * counters (admitted / denied / pruned / in-flight). The maxAgents denial
+ * message points here, so the reject → check → todo_write → retry-later
+ * loop needs no other discovery.
+ *
+ * Read-only by design: steering and stopping stay on the human surfaces
+ * (Ctrl+G viewer, stop-everything dialog) — the model observing the board
+ * can plan around it but cannot reach through it.
+ */
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { readSubagentLimits } from "./theme-settings.js";
+/** The global tool name — deliberately NOT in SPAWN_TOOLS: this spawns nothing. */
+export const SUBAGENT_STATUS_TOOL_NAME = 'subagent_status';
+/** How many settled rows the board shows after the live rows (most recent first). */
+const SETTLED_ROWS = 8;
+/** Format one ms duration as a compact `4m02s` / `1h12m` / `37s` stamp. */
+function formatDuration(ms) {
+    const totalSeconds = Math.max(0, Math.floor(ms / 1000));
+    const hours = Math.floor(totalSeconds / 3600);
+    const minutes = Math.floor((totalSeconds % 3600) / 60);
+    const seconds = totalSeconds % 60;
+    if (hours > 0)
+        return `${hours}h${String(minutes).padStart(2, '0')}m`;
+    if (minutes > 0)
+        return `${minutes}m${String(seconds).padStart(2, '0')}s`;
+    return `${seconds}s`;
+}
+/** One board row: status, short id, label, progress, activity. */
+function renderRow(prefix, view, now) {
+    const id = `#${view.childId.slice(0, 8)}`;
+    const parts = [
+        `${prefix} ${id} ${view.label}`,
+        `rounds ${view.rounds}`,
+        `tok ${view.tokens}`,
+    ];
+    if (view.contextWindow !== undefined && view.contextWindow > 0) {
+        parts.push(`ctx ${Math.round((view.contextTokens / view.contextWindow) * 100)}%`);
+    }
+    parts.push(formatDuration(now - view.startedAt));
+    if (view.lastTool !== undefined)
+        parts.push(`last=${view.lastTool}`);
+    if (view.retries > 0)
+        parts.push(`retry ${view.retries}`);
+    if (view.outcome !== undefined)
+        parts.push(`outcome=${view.outcome}`);
+    return parts.join('  ');
+}
+/**
+ * Build the tool definition. `parameters` is empty — the board takes no
+ * arguments; every call is a full snapshot.
+ */
+export function buildSubagentStatusTool(ctx, runtime) {
+    return defineTool({
+        name: SUBAGENT_STATUS_TOOL_NAME,
+        description: 'Live board of this session\'s subagents: who is running, how far each has got '
+            + '(rounds, tokens, context, last tool), who settled, and the admission counters '
+            + '(admitted / denied by the maxAgents cap). Read-only, zero cost, always current — '
+            + 'call this INSTEAD of probing spawn tools or re-reading transcripts. '
+            + 'After an "Agent limit reached" denial: check the board, record the pending task '
+            + 'with todo_write, and dispatch it once a running agent finishes and frees a slot.',
+        parameters: {},
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    kind: { type: 'string', required: true },
+                    text: { type: 'string', required: true },
+                },
+            },
+            render: (_args, value) => {
+                const text = value.text;
+                return [{ type: 'text', text: typeof text === 'string' ? text : 'subagent board unavailable' }];
+            },
+        },
+        isConcurrencySafe: () => true,
+        async execute() {
+            const views = runtime.views();
+            const stats = runtime.stats();
+            const cap = readSubagentLimits(ctx).maxAgents;
+            const now = Date.now();
+            const live = views.filter(view => view.outcome === undefined).sort((a, b) => a.startedAt - b.startedAt);
+            const settled = views.filter(view => view.outcome !== undefined)
+                .sort((a, b) => (b.endedAt ?? b.startedAt) - (a.endedAt ?? a.startedAt))
+                .slice(0, SETTLED_ROWS);
+            const head = `subagent board — live ${stats.live}/${cap} (dsh-tui.maxAgents, 0 = unlimited)`
+                + ` · admitted ${stats.allowed} · denied ${stats.denied} · pruned ${stats.pruned} · in-flight ${stats.inFlight}`;
+            const rows = [
+                ...live.map(view => renderRow('live', view, now)),
+                ...(settled.length > 0 ? ['--- recent settles ---'] : []),
+                ...settled.map(view => renderRow('done', view, now)),
+            ];
+            const text = rows.length === 0
+                ? `${head}\n(no children yet — the board is empty)`
+                : `${head}\n${rows.join('\n')}`;
+            return { kind: 'subagent_status', text };
+        },
+    });
+}
+/**
+ * Register the board tool on the plugin root ctx. Best-effort like the
+ * policy's guard wiring: a tools-less deployment skips silently (the TUI's
+ * runtime management surfaces — viewer, limits panel — remain).
+ *
+ * @returns the registration disposer, or `undefined` when there is no tools
+ * service to register with.
+ */
+export function installSubagentStatusTool(ctx, runtime) {
+    const tools = ctx.get('tools');
+    if (tools?.register === undefined)
+        return undefined;
+    return tools.register(buildSubagentStatusTool(ctx, runtime));
+}
+//# sourceMappingURL=subagent-status-tool.js.map

package/lib/subagent-status-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-status-tool.js","sourceRoot":"","sources":["../src/subagent-status-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAExD,mFAAmF;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAA;AAE1D,qFAAqF;AACrF,MAAM,YAAY,GAAG,CAAC,CAAA;AAmBtB,2EAA2E;AAC3E,SAAS,cAAc,CAAC,EAAU;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,YAAY,GAAG,EAAE,CAAA;IACjC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;IACrE,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;IACzE,OAAO,GAAG,OAAO,GAAG,CAAA;AACtB,CAAC;AAED,kEAAkE;AAClE,SAAS,SAAS,CAAC,MAAc,EAAE,IAAe,EAAE,GAAW;IAC7D,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE;QAC/B,UAAU,IAAI,CAAC,MAAM,EAAE;QACvB,OAAO,IAAI,CAAC,MAAM,EAAE;KACrB,CAAA;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;IACnF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;IACpE,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACzD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACrE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY,EAAE,OAA8B;IAClF,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,gFAAgF;cAC9E,gFAAgF;cAChF,mFAAmF;cACnF,sEAAsE;cACtE,kFAAkF;cAClF,kFAAkF;QACtF,UAAU,EAAE,EAAE;QACd,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACxC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBACzC;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAI,KAAqC,CAAC,IAAI,CAAA;gBACxD,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC,CAAA;YACjG,CAAC;SACF;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI;QAC7B,KAAK,CAAC,OAAO;YACX,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;YAC7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;YACvG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;iBAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;iBACvE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;YACzB,MAAM,IAAI,GAAG,yBAAyB,KAAK,CAAC,IAAI,IAAI,GAAG,qCAAqC;kBACxF,eAAe,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,QAAQ,EAAE,CAAA;YAClH,MAAM,IAAI,GAAG;gBACX,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACjD,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;aACrD,CAAA;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,CAAC,GAAG,IAAI,0CAA0C;gBACnD,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;YACjC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAA;QAC1C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY,EAAE,OAA8B;IACpF,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAA8B,CAAA;IAC3D,IAAI,KAAK,EAAE,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACnD,OAAO,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAA;AAC9D,CAAC"}

package/lib/theme-settings.d.ts

@@ -68,6 +68,17 @@ export interface SubagentLimits {
      * plain one-shot spawn the TUI's user wants fenced off).
      */
     disableSubagent: boolean;
+    /**
+     * Fence EVERY spawn tool except the registry's `use_agent`: delegation may
+     * only create subagents backed by a registered agent definition
+     * (`~/.dsh/agents/*.md`), and the ad-hoc paths — native `subagent`,
+     * `subagent_fork`, `workflow`, `ralph` — are denied at the guard. This is
+     * the "no subagents we did not define" lever: any child whose label is a
+     * task description rather than a registered agent's display name is a
+     * fence miss this knob closes. Default off (the narrower
+     * `disableSubagent` fence stays the out-of-the-box stance).
+     */
+    registeredOnly: boolean;
 }
 /**
  * Default subagent limits, applied whenever the settings service, namespace,
@@ -239,7 +250,7 @@ export declare function readSubagentLimits(ctx: Context): SubagentLimits;
  * failure message for the caller.
  * @returns undefined on success, the failure message otherwise.
  */
-export declare function writeSubagentLimit(ctx: Context, key: 'maxAgents' | 'maxRounds' | 'maxRoundsGrace' | 'disableSubagent', value: number | boolean): Promise<string | undefined>;
+export declare function writeSubagentLimit(ctx: Context, key: 'maxAgents' | 'maxRounds' | 'maxRoundsGrace' | 'disableSubagent' | 'registeredOnly', value: number | boolean): Promise<string | undefined>;
 /** Persisted favorite/hidden model keys (`provider/id` composites). */
 export interface ModelPrefs {
     /** Models pinned to the top of the /model picker, in join order. */

package/lib/theme-settings.js

@@ -57,6 +57,7 @@ export const DEFAULT_SUBAGENT_LIMITS = Object.freeze({
     maxRounds: 75,
     maxRoundsGrace: 7,
     disableSubagent: true,
+    registeredOnly: false,
 });
 /** Schema of the `dsh-tui` settings section. */
 const THEME_SETTINGS_SCHEMA = z.object({
@@ -92,6 +93,13 @@ const THEME_SETTINGS_SCHEMA = z.object({
         .description('Disable the native subagent tool (delegation goes through registered '
         + 'agents, ~/.dsh/agents/*.md via use_agent); subagent_fork/workflow/'
         + 'ralph stay available'),
+    registeredOnly: z
+        .boolean()
+        .default(DEFAULT_SUBAGENT_LIMITS.registeredOnly)
+        .description('Fence EVERY spawn tool except use_agent: delegation may only create '
+        + 'subagents backed by a registered agent definition (~/.dsh/agents/'
+        + '*.md); the ad-hoc paths (subagent, subagent_fork, workflow, ralph) '
+        + 'are denied at the guard'),
     footerHints: z
         .object({
         send: z.boolean().default(true).description('Show "Enter: send" in the footer hint bar'),
@@ -186,6 +194,7 @@ const THEME_SETTINGS_ENTRY = {
     maxRounds: DEFAULT_SUBAGENT_LIMITS.maxRounds,
     maxRoundsGrace: DEFAULT_SUBAGENT_LIMITS.maxRoundsGrace,
     disableSubagent: DEFAULT_SUBAGENT_LIMITS.disableSubagent,
+    registeredOnly: DEFAULT_SUBAGENT_LIMITS.registeredOnly,
     footerHints: { ...DEFAULT_FOOTER_HINTS },
     cacheHitMode: DEFAULT_CACHE_HIT_MODE,
     iconSet: 'auto',
@@ -558,6 +567,9 @@ export function readSubagentLimits(ctx) {
         disableSubagent: typeof section?.disableSubagent === 'boolean'
             ? section.disableSubagent
             : DEFAULT_SUBAGENT_LIMITS.disableSubagent,
+        registeredOnly: typeof section?.registeredOnly === 'boolean'
+            ? section.registeredOnly
+            : DEFAULT_SUBAGENT_LIMITS.registeredOnly,
     };
 }
 /**