@ashx-j/lunr 0.1.4 → 0.1.6

package/dist/builtin-extensions/pi-subagents/src/runs/background/subagent-runner.js

@@ -21,6 +21,7 @@ import { DEFAULT_MAX_OUTPUT, SUBAGENT_LIFECYCLE_ARTIFACT_VERSION, truncateOutput
 import { DEFAULT_CONTROL_CONFIG, buildControlEvent, deriveActivityState, claimControlNotification, formatControlIntercomMessage, formatControlNoticeMessage, } from "../shared/subagent-control.js";
 import { isDynamicRunnerGroup, isParallelGroup, flattenSteps, mapConcurrent, aggregateParallelOutputs, MAX_PARALLEL_CONCURRENCY, DEFAULT_GLOBAL_CONCURRENCY_LIMIT, Semaphore, } from "../shared/parallel-utils.js";
 import { applyThinkingSuffix, buildPiArgs, cleanupTempDir } from "../shared/pi-args.js";
+import { filterToolsForInheritedChild, snapshotParentPermissionMode } from "../../../../../core/subagent-permission-inherit.js";
 import { outputEntryFromAsyncResult, resolveOutputReferences } from "../shared/chain-outputs.js";
 import { createStructuredOutputRuntime, readStructuredOutput } from "../shared/structured-output.js";
 import { readChildToolDiagnosticError } from "../shared/tool-availability.js";
@@ -851,6 +852,7 @@ async function runSingleStep(step, ctx) {
                 childIndex: ctx.flatIndex,
             })
             : undefined;
+        const parentPermissionMode = step.parentPermissionMode ?? snapshotParentPermissionMode(step.parentSessionId);
         const { args, env, tempDir, toolDiagnosticPath } = buildPiArgs({
             parentSessionId: step.parentSessionId,
             baseArgs: ["--mode", "json", "-p"],
@@ -862,7 +864,7 @@ async function runSingleStep(step, ctx) {
             inheritProjectContext: step.inheritProjectContext,
             inheritSkills: step.inheritSkills,
             requireReadTool: Boolean(step.skills?.length),
-            tools: step.tools,
+            tools: filterToolsForInheritedChild(step.tools, parentPermissionMode),
             extensions: step.extensions,
             subagentOnlyExtensions: step.subagentOnlyExtensions,
             systemPrompt: appendTurnBudgetSystemPrompt(step.systemPrompt ?? "", ctx.turnBudget),
@@ -886,6 +888,7 @@ async function runSingleStep(step, ctx) {
             toolBudget: step.toolBudget,
             childWatchdog,
             waitToolEnabled: step.waitToolEnabled,
+            parentPermissionMode,
         });
         const run = await runPiStreaming(args, step.cwd ?? ctx.cwd, ctx.outputFile, env, ctx.piPackageRoot, ctx.piArgv1, step.maxSubagentDepth, { eventsPath, runId: ctx.id, stepIndex: ctx.flatIndex, agent: step.agent }, ctx.registerInterrupt, ctx.onChildEvent, transcriptWriter, ctx.registerTimeout, ctx.timeoutMessage, ctx.registerStop, ctx.stopMessage, ctx.registerTurnBudgetAbort, ctx.onWriterProcess);
         if (run.turnBudget)