@bryti/agent 0.0.1 → 0.1.0

package/dist/usage.js

@@ -0,0 +1,124 @@
+/**
+ * Per-message token usage tracking.
+ *
+ * Records input tokens, output tokens, model, cost in USD, and latency for
+ * every agent response. Entries are appended to daily JSONL files under
+ * data/usage/. Used for cost monitoring and operator visibility into model
+ * spending over time.
+ */
+import fs from "node:fs";
+import path from "node:path";
+function toDateString(date) {
+    return date.toISOString().split("T")[0];
+}
+// Round to 6 decimal places ($0.000001 precision). This prevents floating-point
+// drift when accumulating many small cost values in running totals.
+function roundUsd(value) {
+    return Math.round(value * 1_000_000) / 1_000_000;
+}
+export function calculateCostUsd(inputTokens, outputTokens, cost) {
+    if (!cost)
+        return 0;
+    // cost.input / cost.output are prices per million tokens; divide by 1,000,000
+    // to get the per-token rate before multiplying by the actual token count.
+    const input = (inputTokens * cost.input) / 1_000_000;
+    const output = (outputTokens * cost.output) / 1_000_000;
+    return roundUsd(input + output);
+}
+/**
+ * Look up a model's cost config using a three-step cascade.
+ *
+ * The model string returned by the SDK may differ from the config format in
+ * two ways: (1) it may carry an embedded "provider/model" prefix, or (2) the
+ * provider context may only be known separately. The cascade handles both:
+ *
+ * Step 1 — explicit provider + bare model id: use the provider hint (if any)
+ *   and strip any embedded prefix from the model string.
+ * Step 2 — embedded provider prefix: parse "provider/model" from the model
+ *   string itself and look up that pair.
+ * Step 3 — bare id across all providers: fall back to searching every
+ *   configured provider for a model whose id matches the full model string.
+ */
+export function resolveModelCost(config, provider, model) {
+    if (!model)
+        return undefined;
+    // Parse an optional "provider/model" prefix from the model string.
+    const slashIdx = model.indexOf("/");
+    const embeddedProvider = slashIdx !== -1 ? model.slice(0, slashIdx) : undefined;
+    const bareModel = slashIdx !== -1 ? model.slice(slashIdx + 1) : model;
+    // Candidate (providerName, modelId) pairs to try in order.
+    const candidates = [
+        [provider, bareModel],
+        [embeddedProvider, bareModel],
+        [undefined, model], // bare id across all providers
+    ];
+    for (const [providerName, modelId] of candidates) {
+        const providers = providerName
+            ? config.models.providers.filter((p) => p.name === providerName)
+            : config.models.providers;
+        for (const p of providers) {
+            const cost = p.models.find((m) => m.id === modelId)?.cost;
+            if (cost)
+                return cost;
+        }
+    }
+    return undefined;
+}
+export function createUsageTracker(dataDir) {
+    const usageDir = path.join(dataDir, "usage");
+    fs.mkdirSync(usageDir, { recursive: true });
+    function usageFilePath(date) {
+        return path.join(usageDir, `${date}.jsonl`);
+    }
+    return {
+        async append(entry) {
+            const timestamp = new Date().toISOString();
+            const date = toDateString(new Date());
+            const record = { timestamp, ...entry };
+            fs.appendFileSync(usageFilePath(date), `${JSON.stringify(record)}\n`, "utf-8");
+        },
+        async summarize(date) {
+            const day = date || toDateString(new Date());
+            const filePath = usageFilePath(day);
+            const summary = {
+                date: day,
+                total_messages: 0,
+                total_input_tokens: 0,
+                total_output_tokens: 0,
+                total_cost_usd: 0,
+                by_user: {},
+            };
+            if (!fs.existsSync(filePath)) {
+                return summary;
+            }
+            const lines = fs.readFileSync(filePath, "utf-8").split("\n");
+            for (const line of lines) {
+                if (!line.trim())
+                    continue;
+                try {
+                    const record = JSON.parse(line);
+                    summary.total_messages += 1;
+                    summary.total_input_tokens += record.input_tokens;
+                    summary.total_output_tokens += record.output_tokens;
+                    summary.total_cost_usd = roundUsd(summary.total_cost_usd + record.cost_usd);
+                    const userSummary = summary.by_user[record.user_id] || {
+                        messages: 0,
+                        input_tokens: 0,
+                        output_tokens: 0,
+                        cost_usd: 0,
+                    };
+                    userSummary.messages += 1;
+                    userSummary.input_tokens += record.input_tokens;
+                    userSummary.output_tokens += record.output_tokens;
+                    userSummary.cost_usd = roundUsd(userSummary.cost_usd + record.cost_usd);
+                    summary.by_user[record.user_id] = userSummary;
+                }
+                catch {
+                    // Skip malformed JSONL entries.
+                }
+            }
+            return summary;
+        },
+    };
+}
+//# sourceMappingURL=usage.js.map

package/dist/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAmC7B,SAAS,YAAY,CAAC,IAAU;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,oEAAoE;AACpE,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,YAAoB,EACpB,IAAyB;IAEzB,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACxD,OAAO,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,QAA4B,EAC5B,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,mEAAmE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEtE,2DAA2D;IAC3D,MAAM,UAAU,GAAwC;QACtD,CAAC,QAAQ,EAAE,SAAS,CAAC;QACrB,CAAC,gBAAgB,EAAE,SAAS,CAAC;QAC7B,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,+BAA+B;KACpD,CAAC;IAEF,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,YAAY;YAC5B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC;YAC1D,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,SAAS,aAAa,CAAC,IAAY;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAqC;YAChD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,MAAM,GAAgB,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;YACpD,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,IAAa;YAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,OAAO,GAAiB;gBAC5B,IAAI,EAAE,GAAG;gBACT,cAAc,EAAE,CAAC;gBACjB,kBAAkB,EAAE,CAAC;gBACrB,mBAAmB,EAAE,CAAC;gBACtB,cAAc,EAAE,CAAC;gBACjB,OAAO,EAAE,EAAE;aACZ,CAAC;YAEF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBAC/C,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;oBAC5B,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC,YAAY,CAAC;oBAClD,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,aAAa,CAAC;oBACpD,OAAO,CAAC,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAE5E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;wBACrD,QAAQ,EAAE,CAAC;wBACX,YAAY,EAAE,CAAC;wBACf,aAAa,EAAE,CAAC;wBAChB,QAAQ,EAAE,CAAC;qBACZ,CAAC;oBACF,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;oBAC1B,WAAW,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;oBAChD,WAAW,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;oBAClD,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACxE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/util/math.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shared math utilities.
+ */
+/**
+ * Compute cosine similarity between two vectors.
+ * Returns 0 if either vector has zero magnitude.
+ */
+export declare function cosineSimilarity(a: number[], b: number[]): number;
+//# sourceMappingURL=math.d.ts.map

package/dist/util/math.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"math.d.ts","sourceRoot":"","sources":["../../src/util/math.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAgBjE"}

package/dist/util/math.js

@@ -0,0 +1,22 @@
+/**
+ * Shared math utilities.
+ */
+/**
+ * Compute cosine similarity between two vectors.
+ * Returns 0 if either vector has zero magnitude.
+ */
+export function cosineSimilarity(a, b) {
+    let dotProduct = 0;
+    let normA = 0;
+    let normB = 0;
+    for (let i = 0; i < a.length; i++) {
+        dotProduct += a[i] * b[i];
+        normA += a[i] * a[i];
+        normB += b[i] * b[i];
+    }
+    if (normA === 0 || normB === 0) {
+        return 0;
+    }
+    return dotProduct / (Math.sqrt(normA) * Math.sqrt(normB));
+}
+//# sourceMappingURL=math.js.map

package/dist/util/math.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"math.js","sourceRoot":"","sources":["../../src/util/math.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAW,EAAE,CAAW;IACvD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/util/ssrf.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared SSRF protection utilities.
+ *
+ * Used by fetch_url, skill_install, and anywhere else that fetches external URLs.
+ */
+/**
+ * Check if a resolved IP address is private or reserved.
+ */
+export declare function isPrivateIp(ip: string): boolean;
+/**
+ * Check if a URL's hostname is obviously private (fast, pre-DNS check).
+ */
+export declare function isPrivateHostname(url: string): boolean;
+/**
+ * DNS lookup that rejects private IPs (SSRF protection against DNS rebinding).
+ * Use as the `lookup` option for axios or http.get.
+ *
+ * The callback signature matches dns.lookup with { all: false } (single result).
+ */
+export declare function safeLookup(hostname: string, options: object, callback: (err: Error | null, address: string, family: number) => void): void;
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/util/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../src/util/ssrf.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA2B/C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAYtD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,GACrE,IAAI,CAaN"}

package/dist/util/ssrf.js

@@ -0,0 +1,77 @@
+/**
+ * Shared SSRF protection utilities.
+ *
+ * Used by fetch_url, skill_install, and anywhere else that fetches external URLs.
+ */
+import dns from "node:dns";
+/**
+ * Check if a resolved IP address is private or reserved.
+ */
+export function isPrivateIp(ip) {
+    // IPv4-mapped IPv6 (::ffff:x.x.x.x): extract the IPv4 part
+    const v4Mapped = ip.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i);
+    const addr = v4Mapped ? v4Mapped[1] : ip;
+    // Localhost
+    if (addr === "127.0.0.1" || addr === "::1" || addr.startsWith("127."))
+        return true;
+    // Private IPv4 ranges
+    if (addr.startsWith("10."))
+        return true;
+    if (addr.startsWith("192.168."))
+        return true;
+    if (addr.startsWith("172.")) {
+        const parts = addr.split(".");
+        if (parts.length >= 2) {
+            const second = parseInt(parts[1], 10);
+            if (second >= 16 && second <= 31)
+                return true;
+        }
+    }
+    // Link-local
+    if (addr.startsWith("169.254."))
+        return true;
+    // IPv6 private ranges
+    if (ip.startsWith("fc") || ip.startsWith("fd"))
+        return true; // ULA
+    if (ip.startsWith("fe80"))
+        return true; // link-local
+    return false;
+}
+/**
+ * Check if a URL's hostname is obviously private (fast, pre-DNS check).
+ */
+export function isPrivateHostname(url) {
+    try {
+        const parsed = new URL(url);
+        const hostname = parsed.hostname;
+        if (hostname === "localhost")
+            return true;
+        // If hostname is an IP literal, check it directly
+        if (/^\d+\.\d+\.\d+\.\d+$/.test(hostname))
+            return isPrivateIp(hostname);
+        if (hostname.startsWith("["))
+            return isPrivateIp(hostname.slice(1, -1));
+        return false;
+    }
+    catch {
+        return true; // Invalid URLs are treated as private
+    }
+}
+/**
+ * DNS lookup that rejects private IPs (SSRF protection against DNS rebinding).
+ * Use as the `lookup` option for axios or http.get.
+ *
+ * The callback signature matches dns.lookup with { all: false } (single result).
+ */
+export function safeLookup(hostname, options, callback) {
+    dns.lookup(hostname, { ...options, all: false }, (err, address, family) => {
+        if (err)
+            return callback(err, "", 0);
+        const addr = typeof address === "string" ? address : "";
+        if (isPrivateIp(addr)) {
+            return callback(Object.assign(new Error(`SSRF: ${hostname} resolved to private IP ${addr}`), { code: "ECONNREFUSED" }), "", 0);
+        }
+        callback(null, addr, family);
+    });
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/util/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../src/util/ssrf.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzC,YAAY;IACZ,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnF,sBAAsB;IACtB,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,sBAAsB;IACtB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,MAAM;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IAErD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,QAAQ,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC1C,kDAAkD;QAClD,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,sCAAsC;IACrD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,OAAe,EACf,QAAsE;IAEtE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,EAAuB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7F,IAAI,GAAG;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,QAAQ,CACb,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,QAAQ,2BAA2B,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EACtG,EAAE,EACF,CAAC,CACF,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAgB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/workers/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Workers: background task execution for long-running jobs.
+ */
+export { createWorkerRegistry } from "./registry.js";
+export type { WorkerRegistry, WorkerEntry, WorkerStatus } from "./registry.js";
+export { createWorkerTools } from "./tools.js";
+export { createWorkerScopedTools } from "./scoped-tools.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/workers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/workers/index.js

@@ -0,0 +1,7 @@
+/**
+ * Workers: background task execution for long-running jobs.
+ */
+export { createWorkerRegistry } from "./registry.js";
+export { createWorkerTools } from "./tools.js";
+export { createWorkerScopedTools } from "./scoped-tools.js";
+//# sourceMappingURL=index.js.map

package/dist/workers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/workers/registry.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Worker registry: in-memory tracking of active and recently-completed workers.
+ * Each entry records status, timing, file paths, and the timeout handle.
+ */
+export type WorkerStatus = "running" | "complete" | "failed" | "timeout" | "cancelled";
+export interface WorkerEntry {
+    workerId: string;
+    status: WorkerStatus;
+    /** Short summary of what the worker is doing. */
+    task: string;
+    /** Absolute path to the worker's result file. */
+    resultPath: string;
+    /** Absolute path to the worker's directory. */
+    workerDir: string;
+    startedAt: Date;
+    completedAt: Date | null;
+    /** Error message if status is "failed" or "timeout". */
+    error: string | null;
+    /** Model used for this worker. */
+    model: string;
+    /**
+     * Abort the running session. Set asynchronously after session creation in
+     * spawnWorkerSession — it is null in the brief window between registry.register()
+     * and the session coming up. Always check for null before calling.
+     */
+    abort: (() => Promise<void>) | null;
+    /**
+     * Handle for the forced-termination timer set in spawnWorkerSession.
+     * Null when the worker has already finished (timer was cleared) or has not
+     * yet started. Stored here so worker_interrupt can cancel it.
+     */
+    timeoutHandle: ReturnType<typeof setTimeout> | null;
+}
+export interface WorkerRegistry {
+    /** Register a new worker. Returns the entry. */
+    register(entry: Omit<WorkerEntry, "completedAt">): WorkerEntry;
+    /** Get a worker by id. Returns null if not found. */
+    get(workerId: string): WorkerEntry | null;
+    /** Update mutable fields of a worker entry. */
+    update(workerId: string, updates: Partial<Pick<WorkerEntry, "status" | "completedAt" | "error" | "abort" | "timeoutHandle">>): void;
+    /**
+     * Count workers with status "running".
+     * Used by worker_dispatch in tools.ts to enforce the max_concurrent limit
+     * before spawning a new session.
+     */
+    runningCount(): number;
+    /** Remove a worker entry from the registry. */
+    remove(workerId: string): void;
+    /** List all entries (for worker_check). */
+    list(): WorkerEntry[];
+}
+export declare function createWorkerRegistry(): WorkerRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/workers/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/workers/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEvF,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,wDAAwD;IACxD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACpC;;;;OAIG;IACH,aAAa,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;CACrD;AAED,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,WAAW,CAAC;IAE/D,qDAAqD;IACrD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAE1C,+CAA+C;IAC/C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC;IAEpI;;;;OAIG;IACH,YAAY,IAAI,MAAM,CAAC;IAEvB,+CAA+C;IAC/C,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,2CAA2C;IAC3C,IAAI,IAAI,WAAW,EAAE,CAAC;CACvB;AAED,wBAAgB,oBAAoB,IAAI,cAAc,CAoCrD"}

package/dist/workers/registry.js

@@ -0,0 +1,38 @@
+/**
+ * Worker registry: in-memory tracking of active and recently-completed workers.
+ * Each entry records status, timing, file paths, and the timeout handle.
+ */
+export function createWorkerRegistry() {
+    const entries = new Map();
+    return {
+        register(entry) {
+            const full = { ...entry, completedAt: null };
+            entries.set(entry.workerId, full);
+            return full;
+        },
+        get(workerId) {
+            return entries.get(workerId) ?? null;
+        },
+        update(workerId, updates) {
+            const entry = entries.get(workerId);
+            if (!entry)
+                return;
+            Object.assign(entry, updates);
+        },
+        runningCount() {
+            let count = 0;
+            for (const entry of entries.values()) {
+                if (entry.status === "running")
+                    count++;
+            }
+            return count;
+        },
+        remove(workerId) {
+            entries.delete(workerId);
+        },
+        list() {
+            return Array.from(entries.values());
+        },
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/workers/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/workers/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyDH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,OAAO;QACL,QAAQ,CAAC,KAAK;YACZ,MAAM,IAAI,GAAgB,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,GAAG,CAAC,QAAQ;YACV,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;QACvC,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,OAAO;YACtB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,YAAY;YACV,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,QAAQ;YACb,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/workers/scoped-tools.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Scoped tools for workers.
+ *
+ * Workers get a minimal tool set: read and write files in their own directory.
+ * No access to other directories, no shell, no memory. Which tools a worker
+ * gets will eventually be operator-configurable; for now it's hardcoded.
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+/**
+ * Create scoped file tools (write_file, read_file) for a worker session.
+ *
+ * Isolation guarantees:
+ *   - Workers can only write to their own workerDir (flat layout, no subdirectories).
+ *   - Workers can only read files that live in the same workerDir, which means
+ *     only files they wrote themselves plus task.md and steering.md. There is no
+ *     cross-worker access and no parent-directory traversal.
+ *   - Reserved filenames (status.json, task.md, steering.md) are blocked from
+ *     writes so the runtime's control files cannot be corrupted.
+ */
+export declare function createWorkerScopedTools(workerDir: string): AgentTool<any>[];
+//# sourceMappingURL=scoped-tools.d.ts.map

package/dist/workers/scoped-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-tools.d.ts","sourceRoot":"","sources":["../../src/workers/scoped-tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,6BAA6B,CAAC;AA8C9E;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAgE3E"}

package/dist/workers/scoped-tools.js

@@ -0,0 +1,111 @@
+/**
+ * Scoped tools for workers.
+ *
+ * Workers get a minimal tool set: read and write files in their own directory.
+ * No access to other directories, no shell, no memory. Which tools a worker
+ * gets will eventually be operator-configurable; for now it's hardcoded.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "@sinclair/typebox";
+import { toolError, toolSuccess } from "../tools/result.js";
+const MAX_FILE_SIZE = 100 * 1024; // 100KB — workers may write longer research docs
+const writeResultSchema = Type.Object({
+    filename: Type.String({
+        description: 'Filename to write (e.g., "result.md", "sources.md"). No subdirectories allowed.',
+    }),
+    content: Type.String({ description: "Content to write to the file." }),
+});
+const readResultSchema = Type.Object({
+    filename: Type.String({
+        description: 'Filename to read (e.g., "result.md"). Must be a file the worker previously wrote.',
+    }),
+});
+/**
+ * Validate filename: no path separators, no traversal, no hidden files.
+ *
+ * Reserved filenames that workers must not overwrite:
+ *   - status.json  : written by spawn.ts to record worker status; read by
+ *                    worker_check to report progress back to the main agent.
+ *   - task.md      : the initial task brief written by worker_dispatch; treated
+ *                    as read-only so the worker always has access to its original
+ *                    instructions even if steering changes direction.
+ *   - steering.md  : the communication channel from the main agent to a running
+ *                    worker; written exclusively by worker_steer so the worker
+ *                    can safely poll it without racing against its own writes.
+ */
+function isValidFilename(filename) {
+    if (!filename || filename.length > 255)
+        return false;
+    if (filename.includes("/") || filename.includes("\\"))
+        return false;
+    if (filename.startsWith("."))
+        return false;
+    if (filename === "status.json" || filename === "task.md" || filename === "steering.md")
+        return false; // reserved
+    return true;
+}
+/**
+ * Create scoped file tools (write_file, read_file) for a worker session.
+ *
+ * Isolation guarantees:
+ *   - Workers can only write to their own workerDir (flat layout, no subdirectories).
+ *   - Workers can only read files that live in the same workerDir, which means
+ *     only files they wrote themselves plus task.md and steering.md. There is no
+ *     cross-worker access and no parent-directory traversal.
+ *   - Reserved filenames (status.json, task.md, steering.md) are blocked from
+ *     writes so the runtime's control files cannot be corrupted.
+ */
+export function createWorkerScopedTools(workerDir) {
+    const writeTool = {
+        name: "write_file",
+        label: "write_file",
+        description: "Write content to a file in your working directory. " +
+            "Use result.md for your main findings. You can also create additional files like sources.md or notes.md.",
+        parameters: writeResultSchema,
+        async execute(_toolCallId, { filename, content }) {
+            if (!isValidFilename(filename)) {
+                return toolError("Invalid filename. Use a simple name like 'result.md'. No paths, no hidden files.");
+            }
+            if (Buffer.byteLength(content, "utf-8") > MAX_FILE_SIZE) {
+                return toolError(`File too large. Maximum size is ${MAX_FILE_SIZE / 1024}KB.`);
+            }
+            try {
+                const filePath = path.join(workerDir, filename);
+                fs.writeFileSync(filePath, content, "utf-8");
+                return toolSuccess({
+                    success: true,
+                    filename,
+                    bytes: Buffer.byteLength(content, "utf-8"),
+                });
+            }
+            catch (error) {
+                return toolError(error, "Failed to write file");
+            }
+        },
+    };
+    const readTool = {
+        name: "read_file",
+        label: "read_file",
+        description: "Read a file you previously wrote in your working directory.",
+        parameters: readResultSchema,
+        async execute(_toolCallId, { filename }) {
+            if (!isValidFilename(filename)) {
+                return toolError("Invalid filename.");
+            }
+            try {
+                const filePath = path.join(workerDir, filename);
+                if (!fs.existsSync(filePath)) {
+                    return toolError(`File not found: ${filename}`);
+                }
+                const content = fs.readFileSync(filePath, "utf-8");
+                return toolSuccess({ filename, content });
+            }
+            catch (error) {
+                return toolError(error, "Failed to read file");
+            }
+        },
+    };
+    return [writeTool, readTool];
+}
+//# sourceMappingURL=scoped-tools.js.map

package/dist/workers/scoped-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-tools.js","sourceRoot":"","sources":["../../src/workers/scoped-tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,iDAAiD;AAEnF,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,WAAW,EACT,iFAAiF;KACpF,CAAC;IACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;CACvE,CAAC,CAAC;AAIH,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,mFAAmF;KACjG,CAAC;CACH,CAAC,CAAC;AAIH;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC,CAAC,WAAW;IACjH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,MAAM,SAAS,GAAwC;QACrD,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,qDAAqD;YACrD,yGAAyG;QAC3G,UAAU,EAAE,iBAAiB;QAC7B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,QAAQ,EAAE,OAAO,EAAoB;YAEvC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,SAAS,CACd,kFAAkF,CACnF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,aAAa,EAAE,CAAC;gBACxD,OAAO,SAAS,CAAC,mCAAmC,aAAa,GAAG,IAAI,KAAK,CAAC,CAAC;YACjF,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,OAAO,WAAW,CAAC;oBACjB,OAAO,EAAE,IAAI;oBACb,QAAQ;oBACR,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,MAAM,QAAQ,GAAuC;QACnD,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EACT,6DAA6D;QAC/D,UAAU,EAAE,gBAAgB;QAC5B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,QAAQ,EAAmB;YAE7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,OAAO,SAAS,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,OAAO,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC"}

package/dist/workers/spawn.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Worker session spawner and lifecycle management.
+ *
+ * Extracted from tools.ts to reduce file size and separate concerns:
+ * - tools.ts handles the tool definitions (public API)
+ * - spawn.ts handles session creation and lifecycle
+ */
+import type { Config } from "../config.js";
+import type { MemoryStore } from "../memory/store.js";
+import type { WorkerRegistry } from "./registry.js";
+import type { ProjectionStore } from "../projection/store.js";
+export interface WorkerStatusFile {
+    worker_id: string;
+    status: "running" | "complete" | "failed" | "timeout" | "cancelled";
+    task: string;
+    started_at: string;
+    completed_at: string | null;
+    model: string;
+    error: string | null;
+    result_path: string;
+}
+/**
+ * Write (or overwrite) the status.json file in the worker directory.
+ *
+ * This is the primary way the main agent reads worker status via worker_check.
+ * worker_check first consults the in-memory registry; if the worker is no
+ * longer there (e.g. after a restart or 24-hour cleanup) it falls back to
+ * reading this file from disk. Writing is best-effort: failures are swallowed
+ * so they never abort a completion or timeout handler.
+ */
+export declare function writeStatusFile(workerDir: string, data: WorkerStatusFile): void;
+declare const ALLOWED_TOOLS: readonly ["web_search", "fetch_url"];
+type AllowedTool = (typeof ALLOWED_TOOLS)[number];
+/**
+ * Callback invoked when a worker's completion fact triggers projections.
+ * Injects an immediate message into the agent queue instead of waiting
+ * for the 5-minute cron tick.
+ */
+export type WorkerTriggerCallback = (triggered: Array<{
+    id: string;
+    summary: string;
+}>) => void;
+export declare function spawnWorkerSession(opts: {
+    config: Config;
+    workerId: string;
+    workerDir: string;
+    task: string;
+    modelOverride: string | undefined;
+    toolNames: AllowedTool[];
+    memoryStore: MemoryStore;
+    projectionStore?: ProjectionStore;
+    registry: WorkerRegistry;
+    timeoutMs: number;
+    onTrigger?: WorkerTriggerCallback;
+}): Promise<void>;
+/**
+ * Remove the worker's registry entry after 24 hours. Result files stay on
+ * disk; only the in-memory tracking is cleared.
+ */
+export declare function scheduleCleanup(registry: WorkerRegistry, workerId: string, _workerDir: string): void;
+export {};
+//# sourceMappingURL=spawn.d.ts.map

package/dist/workers/spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/workers/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA0D9D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAU/E;AAMD,QAAA,MAAM,aAAa,sCAAuC,CAAC;AAC3D,KAAK,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,KAAK,IAAI,CAAC;AAMhG,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CA+OhB;AAMD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,IAAI,CAMN"}