@byfriends/agent-core 0.2.4 → 0.3.0

package/LICENSE

@@ -0,0 +1,28 @@
+BYF PROPRIETARY LICENSE
+
+Copyright (c) 2026-2027 ByronFinn
+
+Permission is hereby granted to copy and redistribute this software in its
+unmodified form, without charge. This permission does not extend to modified
+versions of the software.
+
+Local modification of this software for personal use is permitted, provided
+that such modifications are not distributed to third parties.
+
+Restrictions:
+1. You may NOT redistribute modified versions of this software.
+2. You may NOT use this software for commercial purposes.
+3. You may NOT sublicense, sell, or offer this software as a service.
+
+This software is source-available but NOT open source. The source code is
+made publicly visible for review purposes only.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+For questions about licensing, contact: https://github.com/ByronFinn/byf/issues

package/dist/{index-C2yfSu8d.d.mts → index-BfZezIU5.d.mts}

@@ -214,6 +214,7 @@ declare const LoopControlSchema: z.ZodObject<{
 type LoopControl = z.infer<typeof LoopControlSchema>;
 declare const BackgroundConfigSchema: z.ZodObject<{
   maxRunningTasks: z.ZodOptional<z.ZodNumber>;
+  maxConcurrentSubagents: z.ZodOptional<z.ZodNumber>;
   keepAliveOnExit: z.ZodOptional<z.ZodBoolean>;
   killGracePeriodMs: z.ZodOptional<z.ZodNumber>;
   agentTaskTimeoutS: z.ZodOptional<z.ZodNumber>;
@@ -467,6 +468,7 @@ declare const ByfConfigSchema: z.ZodObject<{
   }, z.core.$strip>>;
   background: z.ZodOptional<z.ZodObject<{
     maxRunningTasks: z.ZodOptional<z.ZodNumber>;
+    maxConcurrentSubagents: z.ZodOptional<z.ZodNumber>;
     keepAliveOnExit: z.ZodOptional<z.ZodBoolean>;
     killGracePeriodMs: z.ZodOptional<z.ZodNumber>;
     agentTaskTimeoutS: z.ZodOptional<z.ZodNumber>;
@@ -605,6 +607,7 @@ declare const ByfConfigPatchSchema: z.ZodObject<{
   }, z.core.$strip>>;
   background: z.ZodOptional<z.ZodObject<{
     maxRunningTasks: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+    maxConcurrentSubagents: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
     keepAliveOnExit: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
     killGracePeriodMs: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
     agentTaskTimeoutS: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
@@ -1151,7 +1154,7 @@ interface BackgroundTaskInfo$1 {
   readonly command: string;
   readonly description: string;
   readonly status: BackgroundTaskStatus;
-  readonly pid: number;
+  readonly pid: number | null;
   readonly exitCode: number | null;
   readonly startedAt: number;
   readonly endedAt: number | null;
@@ -1434,7 +1437,7 @@ declare class BackgroundProcessManager {
   /** Drop a persisted task from disk and ghost map. */
   forgetTask(taskId: string): Promise<void>;
   /**
-   * Persist the current state of a live ManagedProcess. Called from
+   * Persist the current state of a live TaskEntry. Called from
    * `register()` and the lifecycle finally block. No-op unless attached.
    */
   private persistLive;
@@ -1904,6 +1907,13 @@ interface RecordRestoreHandler {
   restoreRecord(record: AgentRecord): void;
 }
 //#endregion
+//#region src/agent/context/projector.d.ts
+interface EphemeralInjection {
+  kind: 'memory_recall' | 'system_reminder' | 'pending_notification';
+  content: string | Record<string, unknown>;
+  position?: 'before_user' | 'after_system';
+}
+//#endregion
 //#region src/agent/context/scratch-manager.d.ts
 interface ScratchManagerConfig {
   /** 每个 session 的最大 scratch 大小 (bytes)，默认 50MB */
@@ -1947,6 +1957,12 @@ declare class ContextMemory implements RecordRestoreHandler {
   get tokenCountWithPending(): number;
   get history(): readonly ContextMessage$1[];
   get messages(): Message[];
+  /**
+   * Project history into provider-ready messages, optionally with
+   * ephemeral injections (e.g. timestamp, permission mode) appended
+   * at the `'before_user'` position.
+   */
+  getMessages(ephemeral?: readonly EphemeralInjection[]): Message[];
   applyObservationMasking(config?: MaskingConfig): MaskingResult;
   applyPruning(config?: {
     effectiveCapacityRatio?: number;
@@ -2485,6 +2501,13 @@ interface AgentMeta {
   readonly homedir: string;
   readonly type: AgentType$1;
   readonly parentAgentId: string | null;
+  /**
+   * The parent agent's tool-call id that spawned this agent. Absent for the
+   * main agent and for sessions persisted before this field existed. The TUI
+   * uses it on resume to map a main-agent `Agent` tool-call back to its child
+   * agent's activity (the child's own replay/usage/text).
+   */
+  readonly parentToolCallId?: string | undefined;
 }
 interface SessionMeta$1 {
   createdAt: string;
@@ -2517,7 +2540,7 @@ declare class Session {
   }>;
   close(): Promise<void>;
   private stopBackgroundTasksOnExit;
-  createAgent(config: Partial<AgentConfig>, profile?: ResolvedAgentProfile, parentAgentId?: string | undefined): Promise<{
+  createAgent(config: Partial<AgentConfig>, profile?: ResolvedAgentProfile, parentAgentId?: string | undefined, parentToolCallId?: string | undefined): Promise<{
     readonly id: string;
     readonly agent: Agent;
   }>;
@@ -2574,10 +2597,13 @@ declare class SessionSubagentHost {
   private readonly ownerAgentId;
   readonly backgroundTaskTimeoutMs?: number | undefined;
   private readonly activeChildren;
-  constructor(session: Session, ownerAgentId: string, backgroundTaskTimeoutMs?: number | undefined);
+  /** Maximum concurrent subagents; exposed for testing and config diagnostics. */
+  readonly maxConcurrentSubagents: number;
+  constructor(session: Session, ownerAgentId: string, backgroundTaskTimeoutMs?: number | undefined, maxConcurrentSubagents?: number | undefined);
   spawn(profileName: string, options: RunSubagentOptions): Promise<SubagentHandle>;
   resume(agentId: string, options: RunSubagentOptions): Promise<SubagentHandle>;
   cancelAll(): void;
+  private assertCanSpawn;
   getProfileName(agentId: string): string | undefined;
   private resolveProfile;
   private runChild;
@@ -2680,6 +2706,7 @@ declare class InjectionManager {
   private readonly injectors;
   constructor(agent: Agent);
   inject(): Promise<void>;
+  getEphemeralInjections(): readonly EphemeralInjection[];
   onContextClear(): void;
   onContextCompacted(compactedCount: number): void;
 }
@@ -3410,6 +3437,13 @@ interface ResumedAgentState {
   readonly tools: readonly ToolInfo[];
   readonly toolStore?: Readonly<Record<string, unknown>>;
   readonly background: readonly BackgroundTaskInfo[];
+  /**
+   * For sub-agents: the parent agent's tool-call id that spawned this agent.
+   * Absent for the main agent and for sessions persisted before this field
+   * existed. The TUI uses it to attach a resumed main-agent `Agent` tool-call
+   * to this child's activity (replay/usage/text).
+   */
+  readonly parentToolCallId?: string | undefined;
 }
 interface ResumeSessionResult extends SessionSummary {
   readonly sessionMetadata: SessionMeta;

package/dist/index.d.mts

@@ -1,3 +1,3 @@
 import { t as AGENT_WIRE_PROTOCOL_VERSION } from "./index-DitEeLHK.mjs";
-import { $ as CoreInfo, $n as SessionSkillConfig, $r as resolveByfHome, $t as BackgroundTaskUpdatedEvent, A as QuestionAnswers, Ai as ProviderType, An as TurnStepInterruptedEvent, Ar as LoopStepEndEvent, At as SetModelResult, B as SDKSessionAPI, Bi as LogEntry, Bn as ByfError, Br as BackgroundTaskStatus, Bt as Unsubscribe, C as SDKRPCClient, Ci as PermissionConfigSchema, Cn as ToolProgressEvent, Cr as PromptOrigin, Ct as ResumeSessionPayload, D as ApprovalResponse, Di as PermissionRuleScopeSchema, Dn as TurnEndedEvent, Dr as LoopContentPartEvent, Dt as SetActiveToolsPayload, E as ApprovalRequest, Ei as PermissionRuleSchema, En as TurnEndReason, Er as ToolStoreUpdate, Et as SessionSummary, F as QuestionResult, Fi as ThinkingConfigSchema, Fn as ByfErrorPayload, Fr as ExecutableToolSuccessResult, Ft as SkillSummary, G as AgentAPI, Gi as RootLogger, Gn as ErrorCodes, Gr as parseConfigString, Gt as AgentReplayRecord, H as ToolCallRequest, Hi as LogPayload, Hn as BYF_ERROR_INFO, Hr as OAuthTokenProviderResolver, Ht as WithAgentId, I as SDKAPI, Ii as formatConfigValidationError, In as fromByfErrorPayload, Ir as ToolInputDisplay, It as SteerPayload, J as ByfConfigPatch, Jn as SubagentHandle, Jr as writeConfigFile, Jt as AgentEvent, K as BeginCompactionPayload, Ki as SessionAttachInput, Kn as RuntimeConfig, Kr as readConfigFile, Kt as ResumeSessionResult, L as SDKAgentAPI, Li as getDefaultConfig, Ln as isByfError, Lr as BackgroundLifecycleEvent, Lt as StopBackgroundPayload, M as QuestionOption, Mi as ServicesConfig, Mn as TurnStepStartedEvent, Mr as LoopToolResultEvent, Mt as SetThinkingPayload, N as QuestionRequest, Ni as ServicesConfigSchema, Nn as UsageStatus, Nr as ExecutableToolErrorResult, Nt as ShellExecPayload, O as ApprovalScope, Oi as ProviderConfig, On as TurnStartedEvent, Or as LoopRecordedEvent, Ot as SetByfConfigPayload, P as QuestionResponse, Pi as ThinkingConfig, Pn as WarningEvent, Pr as ExecutableToolResult, Pt as ShellExecResult, Q as CoreAPI, Qn as SessionMeta, Qr as ensureByfHome, Qt as BackgroundTaskTerminatedEvent, R as SDKAgentRPC, Ri as validateConfig, Rn as makeErrorPayload, Rr as BackgroundTaskInfo, Rt as TextPromptPart, S as RPCMethods, Si as PermissionConfig, Sn as ToolListUpdatedReason, Sr as ContextMessage, St as RenameSessionPayload, T as ApprovalDecision, Ti as PermissionRuleDecisionSchema, Tn as ToolUpdate, Tr as UserPromptOrigin, Tt as SessionMetadataPatch, U as ToolCallResponse, Ui as Logger, Un as ByfErrorCode, Ur as configToTomlData, Ut as WithSessionId, V as SDKSessionRPC, Vi as LogLevel, Vn as ByfErrorOptions, Vr as BearerTokenProvider, Vt as UpdateSessionMetadataPayload, W as ActivateSkillPayload, Wi as LoggingConfig, Wn as ByfErrorInfo, Wr as ensureConfigFile, Wt as proxyWithExtraPayload, X as CancelPlanPayload, Xn as Session, Xr as parseBooleanEnv, Xt as AssistantDeltaEvent, Y as CancelPayload, Yn as AgentMeta, Yr as ResolveConfigValueInput, Yt as AgentStatusUpdatedEvent, Z as CloseSessionPayload, Zn as SessionConfig, Zr as resolveConfigValue, Zt as BackgroundTaskStartedEvent, _ as ByfCoreOptions, _i as McpServerStdioConfigSchema, _n as SubagentSpawnedEvent, _r as PermissionMode, _t as PromptPart, a as collectFilesRecursive, ai as ByfConfigSchema, an as Event, ar as redact, at as ForkSessionPayload, b as RPCCallOptions, bi as OAuthRef, bn as ToolCallStartedEvent, br as CompactionResult, bt as RegisterToolPayload, c as WIRE_PROTOCOL_VERSION, ci as HookDefConfig, cn as McpOAuthAuthorizationUrlUpdateData, cr as ToolInfo, ct as GetBackgroundPayload, d as normalizeTimestampMs, di as LoopControlSchema, dn as ObservationMaskingAppliedEvent, dr as AgentRecord, dt as JsonValue, ei as resolveConfigPath, en as CompactionBlockedEvent, er as TelemetryClient, et as CreateSessionPayload, f as scanSessionWire, fi as McpServerConfig, fn as PruningAppliedEvent, fr as AgentRecordEvents, ft as ListSessionsPayload, g as ByfCore, gi as McpServerStdioConfig, gn as SubagentFailedEvent, gr as PermissionApprovalResultRecord, gt as PromptInput, h as AgentType, hi as McpServerHttpConfigSchema, hn as SubagentCompletedEvent, hr as UsageRecordScope, ht as PlanData, i as ExtraZipEntry, ii as ByfConfigPatchSchema, in as ErrorEvent, ir as log, it as ExportSessionResult, j as QuestionItem, ji as ProviderTypeSchema, jn as TurnStepRetryingEvent, jr as LoopToolCallEvent, jt as SetPermissionPayload, k as QuestionAnswerMethod, ki as ProviderConfigSchema, kn as TurnStepCompletedEvent, kr as LoopStepBeginEvent, kt as SetModelPayload, l as buildExportManifest, li as HookDefSchema, ln as McpServerStatusEvent, lr as ToolSource, lt as JsonObject, m as AgentConfig, mi as McpServerHttpConfig, mn as SkillActivatedEvent, mr as AgentRecordPersistence, mt as McpStartupMetrics, n as ResolveLoggingInput, ni as BackgroundConfig, nn as CompactionCompletedEvent, nr as flushDiagnosticLogs, nt as ExportSessionManifest, o as writeExportZip, oi as ByfServiceConfig, on as HookResultEvent, or as resolveGlobalLogPath, ot as GetBackgroundOutputPathPayload, p as Agent, pi as McpServerConfigSchema, pn as SessionMetaUpdatedEvent, pr as AgentRecordOf, pt as McpServerInfo, q as ByfConfig, qi as SessionLogHandle, qn as SessionSubagentHost, qr as transformTomlData, qt as ResumedAgentState, r as resolveLoggingConfig, ri as BackgroundConfigSchema, rn as CompactionStartedEvent, rr as getRootLogger, rt as ExportSessionPayload, s as exportSessionDirectory, si as ByfServiceConfigSchema, sn as MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, sr as BuiltinTool, st as GetBackgroundOutputPayload, t as buildPromptPlan, ti as mergeConfigPatch, tn as CompactionCancelledEvent, tr as TelemetryProperties, tt as EmptyPayload, u as SessionWireScan, ui as LoopControl, un as McpServerStatusPayload, ur as UserToolRegistration, ut as JsonPrimitive, v as CoreRPC, vi as ModelAlias, vn as ThinkingDeltaEvent, vr as AgentConfigUpdateData, vt as PromptPayload, w as createRPC, wi as PermissionModeSchema, wn as ToolResultEvent, wr as USER_PROMPT_ORIGIN, wt as SessionAPI, x as RPCClient, xi as OAuthRefSchema, xn as ToolListUpdatedEvent, xr as AgentContextData, xt as RemoveByfProviderPayload, y as CoreRPCClient, yi as ModelAliasSchema, yn as ToolCallDeltaEvent, yr as CompactionBeginData, yt as ReconnectMcpServerPayload, z as SDKRPC, zi as LogContext, zn as toByfErrorPayload, zr as BackgroundTaskKind, zt as UnregisterToolPayload } from "./index-C2yfSu8d.mjs";
+import { $ as CoreInfo, $n as SessionSkillConfig, $r as resolveByfHome, $t as BackgroundTaskUpdatedEvent, A as QuestionAnswers, Ai as ProviderType, An as TurnStepInterruptedEvent, Ar as LoopStepEndEvent, At as SetModelResult, B as SDKSessionAPI, Bi as LogEntry, Bn as ByfError, Br as BackgroundTaskStatus, Bt as Unsubscribe, C as SDKRPCClient, Ci as PermissionConfigSchema, Cn as ToolProgressEvent, Cr as PromptOrigin, Ct as ResumeSessionPayload, D as ApprovalResponse, Di as PermissionRuleScopeSchema, Dn as TurnEndedEvent, Dr as LoopContentPartEvent, Dt as SetActiveToolsPayload, E as ApprovalRequest, Ei as PermissionRuleSchema, En as TurnEndReason, Er as ToolStoreUpdate, Et as SessionSummary, F as QuestionResult, Fi as ThinkingConfigSchema, Fn as ByfErrorPayload, Fr as ExecutableToolSuccessResult, Ft as SkillSummary, G as AgentAPI, Gi as RootLogger, Gn as ErrorCodes, Gr as parseConfigString, Gt as AgentReplayRecord, H as ToolCallRequest, Hi as LogPayload, Hn as BYF_ERROR_INFO, Hr as OAuthTokenProviderResolver, Ht as WithAgentId, I as SDKAPI, Ii as formatConfigValidationError, In as fromByfErrorPayload, Ir as ToolInputDisplay, It as SteerPayload, J as ByfConfigPatch, Jn as SubagentHandle, Jr as writeConfigFile, Jt as AgentEvent, K as BeginCompactionPayload, Ki as SessionAttachInput, Kn as RuntimeConfig, Kr as readConfigFile, Kt as ResumeSessionResult, L as SDKAgentAPI, Li as getDefaultConfig, Ln as isByfError, Lr as BackgroundLifecycleEvent, Lt as StopBackgroundPayload, M as QuestionOption, Mi as ServicesConfig, Mn as TurnStepStartedEvent, Mr as LoopToolResultEvent, Mt as SetThinkingPayload, N as QuestionRequest, Ni as ServicesConfigSchema, Nn as UsageStatus, Nr as ExecutableToolErrorResult, Nt as ShellExecPayload, O as ApprovalScope, Oi as ProviderConfig, On as TurnStartedEvent, Or as LoopRecordedEvent, Ot as SetByfConfigPayload, P as QuestionResponse, Pi as ThinkingConfig, Pn as WarningEvent, Pr as ExecutableToolResult, Pt as ShellExecResult, Q as CoreAPI, Qn as SessionMeta, Qr as ensureByfHome, Qt as BackgroundTaskTerminatedEvent, R as SDKAgentRPC, Ri as validateConfig, Rn as makeErrorPayload, Rr as BackgroundTaskInfo, Rt as TextPromptPart, S as RPCMethods, Si as PermissionConfig, Sn as ToolListUpdatedReason, Sr as ContextMessage, St as RenameSessionPayload, T as ApprovalDecision, Ti as PermissionRuleDecisionSchema, Tn as ToolUpdate, Tr as UserPromptOrigin, Tt as SessionMetadataPatch, U as ToolCallResponse, Ui as Logger, Un as ByfErrorCode, Ur as configToTomlData, Ut as WithSessionId, V as SDKSessionRPC, Vi as LogLevel, Vn as ByfErrorOptions, Vr as BearerTokenProvider, Vt as UpdateSessionMetadataPayload, W as ActivateSkillPayload, Wi as LoggingConfig, Wn as ByfErrorInfo, Wr as ensureConfigFile, Wt as proxyWithExtraPayload, X as CancelPlanPayload, Xn as Session, Xr as parseBooleanEnv, Xt as AssistantDeltaEvent, Y as CancelPayload, Yn as AgentMeta, Yr as ResolveConfigValueInput, Yt as AgentStatusUpdatedEvent, Z as CloseSessionPayload, Zn as SessionConfig, Zr as resolveConfigValue, Zt as BackgroundTaskStartedEvent, _ as ByfCoreOptions, _i as McpServerStdioConfigSchema, _n as SubagentSpawnedEvent, _r as PermissionMode, _t as PromptPart, a as collectFilesRecursive, ai as ByfConfigSchema, an as Event, ar as redact, at as ForkSessionPayload, b as RPCCallOptions, bi as OAuthRef, bn as ToolCallStartedEvent, br as CompactionResult, bt as RegisterToolPayload, c as WIRE_PROTOCOL_VERSION, ci as HookDefConfig, cn as McpOAuthAuthorizationUrlUpdateData, cr as ToolInfo, ct as GetBackgroundPayload, d as normalizeTimestampMs, di as LoopControlSchema, dn as ObservationMaskingAppliedEvent, dr as AgentRecord, dt as JsonValue, ei as resolveConfigPath, en as CompactionBlockedEvent, er as TelemetryClient, et as CreateSessionPayload, f as scanSessionWire, fi as McpServerConfig, fn as PruningAppliedEvent, fr as AgentRecordEvents, ft as ListSessionsPayload, g as ByfCore, gi as McpServerStdioConfig, gn as SubagentFailedEvent, gr as PermissionApprovalResultRecord, gt as PromptInput, h as AgentType, hi as McpServerHttpConfigSchema, hn as SubagentCompletedEvent, hr as UsageRecordScope, ht as PlanData, i as ExtraZipEntry, ii as ByfConfigPatchSchema, in as ErrorEvent, ir as log, it as ExportSessionResult, j as QuestionItem, ji as ProviderTypeSchema, jn as TurnStepRetryingEvent, jr as LoopToolCallEvent, jt as SetPermissionPayload, k as QuestionAnswerMethod, ki as ProviderConfigSchema, kn as TurnStepCompletedEvent, kr as LoopStepBeginEvent, kt as SetModelPayload, l as buildExportManifest, li as HookDefSchema, ln as McpServerStatusEvent, lr as ToolSource, lt as JsonObject, m as AgentConfig, mi as McpServerHttpConfig, mn as SkillActivatedEvent, mr as AgentRecordPersistence, mt as McpStartupMetrics, n as ResolveLoggingInput, ni as BackgroundConfig, nn as CompactionCompletedEvent, nr as flushDiagnosticLogs, nt as ExportSessionManifest, o as writeExportZip, oi as ByfServiceConfig, on as HookResultEvent, or as resolveGlobalLogPath, ot as GetBackgroundOutputPathPayload, p as Agent, pi as McpServerConfigSchema, pn as SessionMetaUpdatedEvent, pr as AgentRecordOf, pt as McpServerInfo, q as ByfConfig, qi as SessionLogHandle, qn as SessionSubagentHost, qr as transformTomlData, qt as ResumedAgentState, r as resolveLoggingConfig, ri as BackgroundConfigSchema, rn as CompactionStartedEvent, rr as getRootLogger, rt as ExportSessionPayload, s as exportSessionDirectory, si as ByfServiceConfigSchema, sn as MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, sr as BuiltinTool, st as GetBackgroundOutputPayload, t as buildPromptPlan, ti as mergeConfigPatch, tn as CompactionCancelledEvent, tr as TelemetryProperties, tt as EmptyPayload, u as SessionWireScan, ui as LoopControl, un as McpServerStatusPayload, ur as UserToolRegistration, ut as JsonPrimitive, v as CoreRPC, vi as ModelAlias, vn as ThinkingDeltaEvent, vr as AgentConfigUpdateData, vt as PromptPayload, w as createRPC, wi as PermissionModeSchema, wn as ToolResultEvent, wr as USER_PROMPT_ORIGIN, wt as SessionAPI, x as RPCClient, xi as OAuthRefSchema, xn as ToolListUpdatedEvent, xr as AgentContextData, xt as RemoveByfProviderPayload, y as CoreRPCClient, yi as ModelAliasSchema, yn as ToolCallDeltaEvent, yr as CompactionBeginData, yt as ReconnectMcpServerPayload, z as SDKRPC, zi as LogContext, zn as toByfErrorPayload, zr as BackgroundTaskKind, zt as UnregisterToolPayload } from "./index-BfZezIU5.mjs";
 export { AGENT_WIRE_PROTOCOL_VERSION, ActivateSkillPayload, Agent, AgentAPI, AgentConfig, type AgentConfigUpdateData, type AgentContextData, AgentEvent, AgentMeta, type AgentRecord, type AgentRecordEvents, type AgentRecordOf, type AgentRecordPersistence, AgentReplayRecord, AgentStatusUpdatedEvent, AgentType, ApprovalDecision, ApprovalRequest, ApprovalResponse, ApprovalScope, AssistantDeltaEvent, BYF_ERROR_INFO, BackgroundConfig, BackgroundConfigSchema, type BackgroundLifecycleEvent, type BackgroundTaskInfo, type BackgroundTaskKind, BackgroundTaskStartedEvent, type BackgroundTaskStatus, BackgroundTaskTerminatedEvent, BackgroundTaskUpdatedEvent, type BearerTokenProvider, BeginCompactionPayload, type BuiltinTool, ByfConfigPatchSchema, ByfConfigSchema, ByfCore, ByfCoreOptions, ByfError, type ByfErrorCode, type ByfErrorInfo, type ByfErrorOptions, type ByfErrorPayload, ByfServiceConfig, ByfServiceConfigSchema, CancelPayload, CancelPlanPayload, CloseSessionPayload, type CompactionBeginData, CompactionBlockedEvent, CompactionCancelledEvent, CompactionCompletedEvent, CompactionResult, CompactionStartedEvent, type ContextMessage, CoreAPI, CoreInfo, CoreRPC, CoreRPCClient, CreateSessionPayload, EmptyPayload, ErrorCodes, ErrorEvent, Event, type ExecutableToolErrorResult, type ExecutableToolResult, type ExecutableToolSuccessResult, ExportSessionManifest, ExportSessionPayload, ExportSessionResult, ExtraZipEntry, ForkSessionPayload, GetBackgroundOutputPathPayload, GetBackgroundOutputPayload, GetBackgroundPayload, HookDefConfig, HookDefSchema, HookResultEvent, JsonObject, JsonPrimitive, JsonValue, ListSessionsPayload, type LogContext, type LogEntry, type LogLevel, type LogPayload, type Logger, type LoggingConfig, type LoopContentPartEvent, LoopControl, LoopControlSchema, type LoopRecordedEvent, type LoopStepBeginEvent, type LoopStepEndEvent, type LoopToolCallEvent, type LoopToolResultEvent, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, McpOAuthAuthorizationUrlUpdateData, McpServerConfig, McpServerConfigSchema, McpServerHttpConfig, McpServerHttpConfigSchema, McpServerInfo, McpServerStatusEvent, McpServerStatusPayload, McpServerStdioConfig, McpServerStdioConfigSchema, McpStartupMetrics, ModelAlias, ModelAliasSchema, OAuthRef, OAuthRefSchema, type OAuthTokenProviderResolver, ObservationMaskingAppliedEvent, type PermissionApprovalResultRecord, PermissionConfig, PermissionConfigSchema, type PermissionMode, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleSchema, PermissionRuleScopeSchema, PlanData, PromptInput, type PromptOrigin, PromptPart, PromptPayload, ProviderConfig, ProviderConfigSchema, ProviderType, ProviderTypeSchema, PruningAppliedEvent, QuestionAnswerMethod, QuestionAnswers, QuestionItem, QuestionOption, QuestionRequest, QuestionResponse, QuestionResult, RPCCallOptions, RPCClient, RPCMethods, ReconnectMcpServerPayload, RegisterToolPayload, RemoveByfProviderPayload, RenameSessionPayload, ResolveConfigValueInput, type ResolveLoggingInput, ResumeSessionPayload, ResumeSessionResult, ResumedAgentState, type RootLogger, type RuntimeConfig, SDKAPI, SDKAgentAPI, SDKAgentRPC, SDKRPC, SDKRPCClient, SDKSessionAPI, SDKSessionRPC, ServicesConfig, ServicesConfigSchema, Session, SessionAPI, type SessionAttachInput, SessionConfig, type SessionLogHandle, SessionMeta, SessionMetaUpdatedEvent, SessionMetadataPatch, SessionSkillConfig, SessionSubagentHost, SessionSummary, SessionWireScan, SetActiveToolsPayload, SetByfConfigPayload, SetModelPayload, SetModelResult, SetPermissionPayload, SetThinkingPayload, ShellExecPayload, ShellExecResult, SkillActivatedEvent, SkillSummary, SteerPayload, StopBackgroundPayload, SubagentCompletedEvent, SubagentFailedEvent, SubagentHandle, SubagentSpawnedEvent, type TelemetryClient, type TelemetryProperties, TextPromptPart, ThinkingConfig, ThinkingConfigSchema, ThinkingDeltaEvent, ToolCallDeltaEvent, ToolCallRequest, ToolCallResponse, ToolCallStartedEvent, type ToolInfo, type ToolInputDisplay, ToolListUpdatedEvent, ToolListUpdatedReason, ToolProgressEvent, ToolResultEvent, type ToolSource, type ToolStoreUpdate, ToolUpdate, TurnEndReason, TurnEndedEvent, TurnStartedEvent, TurnStepCompletedEvent, TurnStepInterruptedEvent, TurnStepRetryingEvent, TurnStepStartedEvent, USER_PROMPT_ORIGIN, UnregisterToolPayload, Unsubscribe, UpdateSessionMetadataPayload, type UsageRecordScope, UsageStatus, type UserPromptOrigin, type UserToolRegistration, WIRE_PROTOCOL_VERSION, WarningEvent, WithAgentId, WithSessionId, buildExportManifest, buildPromptPlan, collectFilesRecursive, configToTomlData, createRPC, ensureByfHome, ensureConfigFile, exportSessionDirectory, flushDiagnosticLogs, formatConfigValidationError, fromByfErrorPayload, getDefaultConfig, getRootLogger, isByfError, log, makeErrorPayload, mergeConfigPatch, normalizeTimestampMs, parseBooleanEnv, parseConfigString, proxyWithExtraPayload, readConfigFile, redact, resolveByfHome, resolveConfigPath, resolveConfigValue, resolveGlobalLogPath, resolveLoggingConfig, scanSessionWire, toByfErrorPayload, transformTomlData, validateConfig, writeConfigFile, writeExportZip };

package/dist/index.mjs

@@ -843,17 +843,17 @@ async function loadAgentsMd(kaos, workDir) {
 		return true;
 	};
 	const home = kaos.gethome();
-	await collect(joinPath$2(kaos, home, ".byf", "AGENTS.md"));
-	const genericFiles = [joinPath$2(kaos, home, ".agents")].flatMap((dir) => ["AGENTS.md", "agents.md"].map((name) => joinPath$2(kaos, dir, name)));
+	await collect(joinPath$1(kaos, home, ".byf", "AGENTS.md"));
+	const genericFiles = [joinPath$1(kaos, home, ".agents")].flatMap((dir) => ["AGENTS.md", "agents.md"].map((name) => joinPath$1(kaos, dir, name)));
 	for (const file of genericFiles) if (await collect(file)) break;
 	for (const dir of dirs) {
-		await collect(joinPath$2(kaos, dir, ".byf", "AGENTS.md"));
-		for (const fileName of ["AGENTS.md", "agents.md"]) if (await collect(joinPath$2(kaos, dir, fileName))) break;
+		await collect(joinPath$1(kaos, dir, ".byf", "AGENTS.md"));
+		for (const fileName of ["AGENTS.md", "agents.md"]) if (await collect(joinPath$1(kaos, dir, fileName))) break;
 	}
 	return renderAgentFiles(discovered);
 }
 async function findProjectRoot$1(kaos, workDir) {
-	const path = pathMod$6(kaos);
+	const path = pathMod$5(kaos);
 	const initial = kaos.normpath(workDir);
 	let current = initial;
 	while (true) {
@@ -864,7 +864,7 @@ async function findProjectRoot$1(kaos, workDir) {
 	}
 }
 function dirsRootToLeaf(kaos, workDir, projectRoot) {
-	const path = pathMod$6(kaos);
+	const path = pathMod$5(kaos);
 	const dirs = [];
 	let current = kaos.normpath(workDir);
 	while (true) {
@@ -939,10 +939,10 @@ function byteLength(text) {
 function annotationFor(path) {
 	return `<!-- From: ${path} -->\n`;
 }
-function joinPath$2(kaos, ...parts) {
-	return pathMod$6(kaos).join(...parts);
+function joinPath$1(kaos, ...parts) {
+	return pathMod$5(kaos).join(...parts);
 }
-function pathMod$6(kaos) {
+function pathMod$5(kaos) {
 	return kaos.pathClass() === "win32" ? win32Path : posixPath;
 }
 //#endregion
@@ -1195,7 +1195,7 @@ const PROFILE_SOURCES = {
 	"profile/default/agent.yaml": agent_default$1,
 	"profile/default/coder.yaml": coder_default,
 	"profile/default/explore.yaml": explore_default,
-	"profile/default/system.md": "You are BYF, an AI agent running on the user's computer. Your job is to help\nusers accomplish tasks by taking action — read, write, search, and execute to\nmake real changes on the user's system. Answer questions when asked; otherwise,\nact.\n\nWhen responding, use the same language as the user unless explicitly instructed\notherwise.\n\n{{ ROLE_ADDITIONAL }}\n\n# First Principles\n\nThink from first principles. Strip away assumptions and conventions; every\naction must be traceable to a verifiable fact — the actual file contents,\ncommand output, data, or the user's explicit words. When in doubt, read\nbefore guessing, ask before assuming, verify before claiming.\n\n# Tool Use\n\nUse tools only when the task requires them. If the request can be answered\nwithout reading files, running commands, or searching the web, reply in text\ndirectly. When a request is ambiguous, prefer action — the user can see your\noutput and correct course.\n\nCode that only appears in your text response is NOT saved to the file system\nand will not take effect. To create or modify files, use `Write` or `Edit`.\nTo run commands, use `Bash`.\n\n# Protocol\n\n<system> tags in user or tool messages provide supplementary context. Treat\nthem as background information.\n\n<system-reminder> tags are authoritative directives that override default\nbehavior. They are unrelated to the messages they appear in. Always comply.\n\n# Safety\n\nThe environment is not a sandbox — your actions immediately affect the user's\nsystem.\n\n- Stay within the working directory unless explicitly instructed otherwise.\n- Git operations are destructive and may affect remote repositories. Never\n  execute git mutations unless explicitly asked; confirm each time.\n- Avoid installing or deleting anything outside the working directory. If\n  necessary, ask for confirmation first.\n\n# Working Environment\n\n## Operating System\n\nYou are running on **{{ BYF_OS }}**. The Bash tool executes commands using **{{ BYF_SHELL }}**.\n{% if BYF_OS == \"Windows\" %}\n\nIMPORTANT: You are on Windows. The Bash tool runs through Git Bash, so use Unix shell syntax inside Bash commands — `/dev/null` not `NUL`, and forward slashes in paths. For file operations, always prefer the built-in tools (Read, Write, Edit, Glob, Grep) over Bash commands — they work reliably across all platforms.\n{% endif %}\n\n## Working Directory\n\nThe current working directory is `{{ BYF_WORK_DIR }}`. This should be considered as the project root if you are instructed to perform tasks on the project. Every file system operation will be relative to the working directory if you do not explicitly specify the absolute path. Tools may require absolute paths for some parameters, IF SO, YOU MUST use absolute paths for these parameters.\n{% if BYF_ADDITIONAL_DIRS_INFO %}\n\n## Additional Directories\n\nThe following directories have been added to the workspace. You can read, write, search, and glob files in these directories as part of your workspace scope.\n\n{{ BYF_ADDITIONAL_DIRS_INFO }}\n{% endif %}\n\n# Project Information\n\n`AGENTS.md` files contain project-specific context, styles, and conventions for agents. They may exist at different locations in the project — each file governs its directory and all subdirectories beneath it. Deeper files take precedence over parent files.\n\nIf instructions conflict:\n- `<system-reminder>` directives override all other instructions, including user messages.\n- Safety rules are hard constraints and must never be violated, even if a user message or AGENTS.md says otherwise.\n- Beyond those two, user messages > AGENTS.md > default system instructions.\n\n{% if BYF_AGENTS_MD_TOO_LONG %}\n> ⚠️ The merged AGENTS.md content exceeds 4,000 tokens. Consider compressing project instructions to reduce context usage.\n{% endif %}\n\nThe `AGENTS.md` instructions (merged from all applicable directories):\n\n`````````\n{{ BYF_AGENTS_MD }}\n`````````\n\nIf you modified anything mentioned in `AGENTS.md` files, update the corresponding files to keep them up-to-date.\n\n# Skills\n\nSkills are reusable capabilities. When a skill from the listing matches the user's request, you MUST call the `Skill` tool (not free-form text).\n\n{{ BYF_SKILLS }}\n"
+	"profile/default/system.md": "You are BYF, an AI agent running on the user's computer. Your job is to help\nusers accomplish tasks by taking action — read, write, search, and execute to\nmake real changes on the user's system. Answer questions when asked; otherwise,\nact.\n\nWhen responding, use the same language as the user unless explicitly instructed\notherwise.\n\n{{ ROLE_ADDITIONAL }}\n\n# First Principles\n\nThink from first principles. Strip away assumptions and conventions; every\naction must be traceable to a verifiable fact — the actual file contents,\ncommand output, data, or the user's explicit words. When in doubt, read\nbefore guessing, ask before assuming, verify before claiming.\n\n# Tool Use\n\nUse tools only when the task requires them. If the request can be answered\nwithout reading files, running commands, or searching the web, reply in text\ndirectly. When a request is ambiguous, prefer action — the user can see your\noutput and correct course.\n\nCode that only appears in your text response is NOT saved to the file system\nand will not take effect. To create or modify files, use `Write` or `Edit`.\nTo run commands, use `Bash`.\n\n# Protocol\n\n<system> tags in user or tool messages provide supplementary context. Treat\nthem as background information.\n\n<system-reminder> tags are authoritative directives that override default\nbehavior. They are unrelated to the messages they appear in. Always comply.\n\n# Safety\n\nThe environment is not a sandbox — your actions immediately affect the user's\nsystem.\n\n- Stay within the working directory unless explicitly instructed otherwise.\n- Git operations are destructive and may affect remote repositories. Never\n  execute git mutations unless explicitly asked; confirm each time.\n- Avoid installing or deleting anything outside the working directory. If\n  necessary, ask for confirmation first.\n\n# Project Information\n\n`AGENTS.md` files contain project-specific context, styles, and conventions for agents. They may exist at different locations in the project — each file governs its directory and all subdirectories beneath it. Deeper files take precedence over parent files.\n\nIf instructions conflict:\n- `<system-reminder>` directives override all other instructions, including user messages.\n- Safety rules are hard constraints and must never be violated, even if a user message or AGENTS.md says otherwise.\n- Beyond those two, user messages > AGENTS.md > default system instructions.\n\n{% if BYF_AGENTS_MD_TOO_LONG %}\n> ⚠️ The merged AGENTS.md content exceeds 4,000 tokens. Consider compressing project instructions to reduce context usage.\n{% endif %}\n\nThe `AGENTS.md` instructions (merged from all applicable directories):\n\n`````````\n{{ BYF_AGENTS_MD }}\n`````````\n\nIf you modified anything mentioned in `AGENTS.md` files, update the corresponding files to keep them up-to-date.\n\n# Working Environment\n\n## Operating System\n\nYou are running on **{{ BYF_OS }}**. The Bash tool executes commands using **{{ BYF_SHELL }}**.\n{% if BYF_OS == \"Windows\" %}\n\nIMPORTANT: You are on Windows. The Bash tool runs through Git Bash, so use Unix shell syntax inside Bash commands — `/dev/null` not `NUL`, and forward slashes in paths. For file operations, always prefer the built-in tools (Read, Write, Edit, Glob, Grep) over Bash commands — they work reliably across all platforms.\n{% endif %}\n\n## Working Directory\n\nThe current working directory is `{{ BYF_WORK_DIR }}`. This should be considered as the project root if you are instructed to perform tasks on the project. Every file system operation will be relative to the working directory if you do not explicitly specify the absolute path. Tools may require absolute paths for some parameters, IF SO, YOU MUST use absolute paths for these parameters.\n{% if BYF_ADDITIONAL_DIRS_INFO %}\n\n## Additional Directories\n\nThe following directories have been added to the workspace. You can read, write, search, and glob files in these directories as part of your workspace scope.\n\n{{ BYF_ADDITIONAL_DIRS_INFO }}\n{% endif %}\n\n# Skills\n\nSkills are reusable capabilities. When a skill from the listing matches the user's request, you MUST call the `Skill` tool (not free-form text).\n\n{{ BYF_SKILLS }}\n"
 };
 const DEFAULT_INIT_PROMPT = init_default;
 const DEFAULT_AGENT_PROFILES = loadAgentProfilesFromSources([
@@ -1621,6 +1621,7 @@ var BackgroundProcessManager = class {
 		const kind = opts?.kind;
 		const taskId = generateTaskId(kind ?? "bash");
 		const entry = {
+			kind: "process",
 			taskId,
 			command,
 			description,
@@ -1820,9 +1821,10 @@ var BackgroundProcessManager = class {
 		entry.approvalReason = void 0;
 		entry.stopRequested = true;
 		entry.stopReason = stopReason;
-		try {
+		if (entry.kind === "process") try {
 			await entry.proc.kill("SIGTERM");
 		} catch {}
+		else entry.abort();
 		let graceTimer;
 		const graceful = await Promise.race([entry.lifecyclePromise.then(() => true, () => true), new Promise((resolve) => {
 			graceTimer = setTimeout(() => {
@@ -1834,9 +1836,11 @@ var BackgroundProcessManager = class {
 			await entry.persistWriteQueue;
 			return this.toInfo(entry);
 		}
-		if (!graceful && entry.proc.exitCode === null) try {
-			await entry.proc.kill("SIGKILL");
-		} catch {}
+		if (!graceful) if (entry.kind === "process") {
+			if (entry.proc.exitCode === null) try {
+				await entry.proc.kill("SIGKILL");
+			} catch {}
+		} else entry.abort();
 		if (TERMINAL_STATUSES.has(entry.status)) {
 			await entry.persistWriteQueue;
 			return this.toInfo(entry);
@@ -1894,32 +1898,15 @@ var BackgroundProcessManager = class {
 		else this.assertCanRegister();
 		const taskId = generateTaskId("agent");
 		const entry = {
+			kind: "promise",
 			taskId,
 			command: `[agent] ${description}`,
 			description,
 			timeoutMs: opts.timeoutMs,
+			completion,
+			abort: () => opts.abort?.(),
 			agentId: opts.agentId ?? taskId,
 			subagentType: opts.subagentType ?? "agent",
-			proc: {
-				stdin: {
-					write: () => false,
-					end: () => {}
-				},
-				stdout: {
-					setEncoding: () => {},
-					on: () => {}
-				},
-				stderr: {
-					setEncoding: () => {},
-					on: () => {}
-				},
-				pid: 0,
-				exitCode: null,
-				wait: () => completion.then(() => 0),
-				kill: async () => {
-					opts.abort?.();
-				}
-			},
 			outputChunks: [],
 			outputSizeBytes: 0,
 			status: "running",
@@ -2095,7 +2082,7 @@ var BackgroundProcessManager = class {
 		if (this.sessionDir !== void 0) await removeTask(this.sessionDir, taskId);
 	}
 	/**
-	* Persist the current state of a live ManagedProcess. Called from
+	* Persist the current state of a live TaskEntry. Called from
 	* `register()` and the lifecycle finally block. No-op unless attached.
 	*/
 	persistLive(entry) {
@@ -2105,7 +2092,7 @@ var BackgroundProcessManager = class {
 			task_id: entry.taskId,
 			command: entry.command,
 			description: entry.description,
-			pid: entry.proc.pid,
+			pid: entry.kind === "process" ? entry.proc.pid : 0,
 			started_at: entry.startedAt,
 			ended_at: entry.endedAt,
 			exit_code: entry.exitCode,
@@ -2151,7 +2138,7 @@ var BackgroundProcessManager = class {
 	}
 	observedExitCompletions() {
 		const completions = [];
-		for (const entry of this.processes.values()) if (!TERMINAL_STATUSES.has(entry.status) && entry.proc.exitCode !== null) completions.push(entry.lifecyclePromise);
+		for (const entry of this.processes.values()) if (entry.kind === "process" && !TERMINAL_STATUSES.has(entry.status) && entry.proc.exitCode !== null) completions.push(entry.lifecyclePromise);
 		return completions;
 	}
 	toInfo(entry) {
@@ -2160,7 +2147,7 @@ var BackgroundProcessManager = class {
 			command: entry.command,
 			description: entry.description,
 			status: entry.status,
-			pid: entry.proc.pid,
+			pid: entry.kind === "process" ? entry.proc.pid : null,
 			exitCode: entry.exitCode,
 			startedAt: entry.startedAt,
 			endedAt: entry.endedAt,
@@ -2208,7 +2195,7 @@ function infoToPersisted(info) {
 		task_id: info.taskId,
 		command: info.command,
 		description: info.description,
-		pid: info.pid,
+		pid: info.pid ?? 0,
 		started_at: info.startedAt,
 		ended_at: info.endedAt,
 		exit_code: info.exitCode,
@@ -2612,7 +2599,7 @@ var agent_background_disabled_default = "Background agent execution is disabled
 var agent_background_enabled_default = "When `run_in_background=true`, the subagent runs detached from this turn. The completion arrives in a later turn as a synthetic user-role message containing its result — you do not need to poll, sleep, or check on its progress. Continue with other work or respond to the user. Never fabricate or predict what the result will say.\n\nFor a background task, when `timeout` is omitted it falls back to the operator-configured background timeout, if one is set. If the operator has not configured a background timeout, an omitted `timeout` means the task runs with no time limit.\n";
 //#endregion
 //#region src/tools/builtin/collaboration/agent.md
-var agent_default = "Launch a subagent to handle a task. The subagent starts with zero context — it has not seen this conversation. Brief it with the goal, what you already know, and exact paths or commands.\n\n- When the task continues earlier work a subagent already did, prefer resuming that agent (pass its `resume` id) over spawning a fresh instance.\n- A subagent's result is only visible to you, not to the user. Summarize the relevant parts yourself when the user needs to see them.\n- Skip delegation for trivial work you can do directly — reading a known file, searching a small set of files, or any one-step task.\n- Once a subagent is running, do not redo its searches or reads in parallel, and do not abandon it midway and finish the job manually.\n";
+var agent_default = "Launch a subagent to handle a task. The subagent starts with zero context — it has not seen this conversation. Brief it with the goal, what you already know, and exact paths or commands.\n\n- When the task continues earlier work a subagent already did, prefer resuming that agent (pass its `resume` id) over spawning a fresh instance.\n- A subagent's result is only visible to you, not to the user. Summarize the relevant parts yourself when the user needs to see them.\n- Skip delegation for trivial work you can do directly — reading a known file, searching a small set of files, or any one-step task.\n- Once a subagent is running, do not redo its searches or reads in parallel, and do not abandon it midway and finish the job manually.\n- There is a concurrency limit on parallel subagents. If the limit is reached, wait for a running subagent to complete before launching another.\n";
 //#endregion
 //#region src/tools/builtin/collaboration/agent.ts
 /**
@@ -3605,14 +3592,14 @@ const SENSITIVE_DOT_VARIANT_SUFFIXES = [
 ];
 const SENSITIVE_DOT_VARIANT_SUFFIX_SET = new Set(SENSITIVE_DOT_VARIANT_SUFFIXES);
 const DEFAULT_PATH_CLASS$1 = nativePath.sep === "\\" ? "win32" : "posix";
-function pathMod$5(pathClass) {
+function pathMod$4(pathClass) {
 	return pathClass === "win32" ? win32Path : posixPath;
 }
 function comparable(path, pathClass) {
 	return pathClass === "win32" ? path.toLowerCase() : path;
 }
 function isSensitiveFile(path, pathClass = DEFAULT_PATH_CLASS$1) {
-	const mod = pathMod$5(pathClass);
+	const mod = pathMod$4(pathClass);
 	const comparableName = comparable(mod.basename(path), pathClass);
 	const comparablePath = comparable(path, pathClass);
 	if (ENV_EXEMPTIONS.has(comparableName)) return false;
@@ -3666,7 +3653,7 @@ var PathSecurityError = class extends Error {
 	}
 };
 const DEFAULT_PATH_CLASS = nativePath.sep === "\\" ? "win32" : "posix";
-function pathMod$4(pathClass) {
+function pathMod$3(pathClass) {
 	return pathClass === "win32" ? win32Path : posixPath;
 }
 function comparablePath(path, pathClass) {
@@ -3696,7 +3683,7 @@ function normalizeUserPath(path, pathClass = DEFAULT_PATH_CLASS) {
 function expandUserPath$1(path, homeDir, pathClass) {
 	if (homeDir === void 0) return path;
 	if (path === "~") return homeDir;
-	if (path.startsWith("~/") || pathClass === "win32" && path.startsWith("~\\")) return pathMod$4(pathClass).join(homeDir, path.slice(2));
+	if (path.startsWith("~/") || pathClass === "win32" && path.startsWith("~\\")) return pathMod$3(pathClass).join(homeDir, path.slice(2));
 	return path;
 }
 /**
@@ -3705,7 +3692,7 @@ function expandUserPath$1(path, homeDir, pathClass) {
 */
 function canonicalizePath(path, cwd, pathClass = DEFAULT_PATH_CLASS) {
 	if (path === "") throw new PathSecurityError("PATH_INVALID", path, path, "Path cannot be empty");
-	const mod = pathMod$4(pathClass);
+	const mod = pathMod$3(pathClass);
 	const normalizedPath = normalizeUserPath(path, pathClass);
 	if (pathClass === "win32" && isWin32DriveRelative(normalizedPath)) throw new PathSecurityError("PATH_INVALID", path, normalizedPath, `"${path}" is a drive-relative Windows path. Use an absolute path like C:\\path or a path relative to the working directory.`);
 	if (!mod.isAbsolute(normalizedPath) && !mod.isAbsolute(cwd)) throw new PathSecurityError("PATH_INVALID", path, normalizedPath, `Cannot resolve "${path}" against non-absolute cwd "${cwd}".`);
@@ -3717,7 +3704,7 @@ function canonicalizePath(path, cwd, pathClass = DEFAULT_PATH_CLASS) {
 * on path-component boundaries. Both arguments must already be canonical.
 */
 function isWithinDirectory(candidate, base, pathClass = DEFAULT_PATH_CLASS) {
-	const mod = pathMod$4(pathClass);
+	const mod = pathMod$3(pathClass);
 	const comparableCandidate = comparablePath(candidate, pathClass);
 	const comparableBase = comparablePath(base, pathClass);
 	if (comparableCandidate === comparableBase) return true;
@@ -3743,7 +3730,7 @@ function relativeOutsideMessage(path, operation) {
 }
 function resolvePathAccess(path, cwd, config, options) {
 	const pathClass = options.pathClass ?? DEFAULT_PATH_CLASS;
-	const mod = pathMod$4(pathClass);
+	const mod = pathMod$3(pathClass);
 	const expandedPath = expandUserPath$1(normalizeUserPath(path, pathClass), options.homeDir, pathClass);
 	const rawIsAbsolute = mod.isAbsolute(expandedPath);
 	const canonical = canonicalizePath(expandedPath, cwd, pathClass);
@@ -3898,11 +3885,11 @@ var EditTool = class {
 		}
 	}
 };
-async function collectEntries$1(kaos, dirPath, maxWidth, pathClass) {
+async function collectEntries(kaos, dirPath, maxWidth, pathClass) {
 	const all = [];
 	try {
 		for await (const fullPath of kaos.iterdir(dirPath)) {
-			const name = basename$2(fullPath, pathClass);
+			const name = basename$1(fullPath, pathClass);
 			let isDir = false;
 			try {
 				isDir = ((await kaos.stat(fullPath)).stMode & 61440) === 16384;
@@ -3929,11 +3916,11 @@ async function collectEntries$1(kaos, dirPath, maxWidth, pathClass) {
 		readable: true
 	};
 }
-function pathMod$3(pathClass) {
+function pathMod$2(pathClass) {
 	return pathClass === "win32" ? win32Path : posixPath;
 }
-function basename$2(p, pathClass) {
-	return pathMod$3(pathClass).basename(p);
+function basename$1(p, pathClass) {
+	return pathMod$2(pathClass).basename(p);
 }
 /**
 * Return a 2-level tree listing of `workDir` suitable for inclusion in a
@@ -3943,7 +3930,7 @@ function basename$2(p, pathClass) {
 async function listDirectory(kaos, workDir) {
 	const lines = [];
 	const pathClass = kaos.pathClass();
-	const { entries, total, readable } = await collectEntries$1(kaos, workDir, 30, pathClass);
+	const { entries, total, readable } = await collectEntries(kaos, workDir, 30, pathClass);
 	if (!readable) return "[not readable]";
 	const remaining = total - entries.length;
 	for (let i = 0; i < entries.length; i++) {
@@ -3955,7 +3942,7 @@ async function listDirectory(kaos, workDir) {
 		if (isDir) {
 			lines.push(`${connector}${name}/`);
 			const childPrefix = isLast ? "    " : "│   ";
-			const child = await collectEntries$1(kaos, joinPath$1(workDir, name, pathClass), 10, pathClass);
+			const child = await collectEntries(kaos, joinPath(workDir, name, pathClass), 10, pathClass);
 			if (!child.readable) {
 				lines.push(`${childPrefix}└── [not readable]`);
 				continue;
@@ -3974,8 +3961,8 @@ async function listDirectory(kaos, workDir) {
 	if (remaining > 0) lines.push(`└── ... and ${String(remaining)} more entries`);
 	return lines.length > 0 ? lines.join("\n") : "(empty directory)";
 }
-function joinPath$1(parent, child, pathClass) {
-	return pathMod$3(pathClass).join(parent, child);
+function joinPath(parent, child, pathClass) {
+	return pathMod$2(pathClass).join(parent, child);
 }
 //#endregion
 //#region src/tools/builtin/file/glob.md
@@ -5955,7 +5942,7 @@ var write_default = "Overwrite or append to a file with content exactly as provi
 const S_IFMT$2 = 61440;
 /** File-type bits of a directory. */
 const S_IFDIR$1 = 16384;
-function pathMod$2(pathClass) {
+function pathMod$1(pathClass) {
 	return pathClass === "win32" ? win32Path : posixPath;
 }
 const WriteInputSchema = z.object({
@@ -6022,7 +6009,7 @@ var WriteTool = class {
 	* skipped and the write proceeds, surfacing the real I/O error if any.
 	*/
 	async checkParentDirectory(safePath) {
-		const parent = pathMod$2(this.kaos.pathClass()).dirname(safePath);
+		const parent = pathMod$1(this.kaos.pathClass()).dirname(safePath);
 		let stat;
 		try {
 			stat = await this.kaos.stat(parent);
@@ -6935,8 +6922,14 @@ function project(history, ephemeralInjections) {
 		if (isBlockedUserPrompt(message)) return false;
 		return !isTranscriptOnlyHookResult(message) && message.partial !== true && !(message.role === "assistant" && message.content.length === 0 && message.toolCalls.length === 0);
 	}));
-	const injectionMessages = ephemeralInjections?.map((injection) => renderInjection(injection));
-	return injectionMessages ? [...injectionMessages, ...merged] : merged;
+	if (!ephemeralInjections?.length) return merged;
+	const afterSystemMsgs = ephemeralInjections.filter((injection) => !injection.position || injection.position === "after_system").map((injection) => renderInjection(injection));
+	const beforeUserMsgs = ephemeralInjections.filter((injection) => injection.position === "before_user").map((injection) => renderInjection(injection));
+	return [
+		...afterSystemMsgs,
+		...merged,
+		...beforeUserMsgs
+	];
 }
 function isTranscriptOnlyHookResult(message) {
 	return message.origin?.kind === "hook_result" && TRANSCRIPT_ONLY_HOOK_RESULT_EVENTS.has(message.origin.event ?? "");
@@ -7926,7 +7919,15 @@ var ContextMemory = class {
 		return this._history;
 	}
 	get messages() {
-		return project(this.history);
+		return this.getMessages();
+	}
+	/**
+	* Project history into provider-ready messages, optionally with
+	* ephemeral injections (e.g. timestamp, permission mode) appended
+	* at the `'before_user'` position.
+	*/
+	getMessages(ephemeral) {
+		return project(this.history, ephemeral);
 	}
 	applyObservationMasking(config) {
 		const effectiveConfig = config ?? DEFAULT_MASKING_CONFIG;
@@ -8587,146 +8588,55 @@ var DynamicInjector = class {
 	}
 };
 //#endregion
-//#region src/agent/injection/directory-tree.ts
-const EXCLUDED_DIRS = new Set([
-	"node_modules",
-	".git",
-	"dist",
-	"build",
-	".next",
-	".nuxt",
-	".vite",
-	"target",
-	".turbo",
-	"coverage",
-	".cache",
-	".DS_Store",
-	".idea",
-	".vscode",
-	"venv",
-	".venv"
-]);
-const HIDDEN_DIR_WHITELIST = new Set([
-	".github",
-	".byf",
-	".agents",
-	".changeset",
-	".husky"
-]);
-var DirectoryTreeInjector = class extends DynamicInjector {
-	injectionVariant = "directory_tree";
-	lastTree;
-	hasInjected = false;
-	capturedTimestamp;
-	async getInjection() {
-		const kaos = this.agent.runtime.kaos;
-		const workDir = this.agent.config.cwd || kaos.getcwd();
-		const tree = await buildTree(kaos, workDir);
-		if (this.hasInjected && tree === this.lastTree) return;
-		this.lastTree = tree;
-		this.hasInjected = true;
-		if (this.capturedTimestamp === void 0) this.capturedTimestamp = (/* @__PURE__ */ new Date()).toISOString();
-		return `Current working directory structure (${workDir}):\n${tree}\n\nThe current date and time in ISO format is \`${this.capturedTimestamp}\`. This is only a reference for you when searching the web or checking file modification time, etc. If you need the exact time, use Bash tool with proper command.`;
-	}
-};
-async function buildTree(kaos, workDir) {
-	const lines = [];
-	const pathClass = kaos.pathClass();
-	const { entries, total, readable } = await collectEntries(kaos, workDir, 30, pathClass);
-	if (!readable) return "[not readable]";
-	const remaining = total - entries.length;
-	for (let i = 0; i < entries.length; i++) {
-		const entry = entries[i];
-		if (entry === void 0) continue;
-		const { name, isDir } = entry;
-		const isLast = i === entries.length - 1 && remaining === 0;
-		const connector = isLast ? "└── " : "├── ";
-		if (isDir) {
-			lines.push(`${connector}${name}/`);
-			const childPrefix = isLast ? "    " : "│   ";
-			const child = await collectEntries(kaos, joinPath(workDir, name, pathClass), 10, pathClass);
-			if (!child.readable) {
-				lines.push(`${childPrefix}└── [not readable]`);
-				continue;
-			}
-			const childRemaining = child.total - child.entries.length;
-			for (let j = 0; j < child.entries.length; j++) {
-				const ce = child.entries[j];
-				if (ce === void 0) continue;
-				const cConnector = j === child.entries.length - 1 && childRemaining === 0 ? "└── " : "├── ";
-				const suffix = ce.isDir ? "/" : "";
-				lines.push(`${childPrefix}${cConnector}${ce.name}${suffix}`);
-			}
-			if (childRemaining > 0) lines.push(`${childPrefix}└── ... and ${String(childRemaining)} more`);
-		} else lines.push(`${connector}${name}`);
-	}
-	if (remaining > 0) lines.push(`└── ... and ${String(remaining)} more entries`);
-	return lines.length > 0 ? lines.join("\n") : "(empty directory)";
-}
-async function collectEntries(kaos, dirPath, maxWidth, pathClass) {
-	const all = [];
-	try {
-		for await (const fullPath of kaos.iterdir(dirPath)) {
-			const name = basename$1(fullPath, pathClass);
-			if (shouldExclude(name)) continue;
-			let isDir = false;
-			try {
-				isDir = ((await kaos.stat(fullPath)).stMode & 61440) === 16384;
-			} catch {}
-			all.push({
-				name,
-				isDir
-			});
-		}
-	} catch {
-		return {
-			entries: [],
-			total: 0,
-			readable: false
-		};
-	}
-	all.sort((a, b) => {
-		if (a.isDir !== b.isDir) return a.isDir ? -1 : 1;
-		return a.name.localeCompare(b.name);
-	});
-	return {
-		entries: all.slice(0, maxWidth),
-		total: all.length,
-		readable: true
-	};
-}
-function shouldExclude(name) {
-	if (EXCLUDED_DIRS.has(name)) return true;
-	if (name.startsWith(".") && !HIDDEN_DIR_WHITELIST.has(name)) return true;
-	return false;
-}
-function pathMod$1(pathClass) {
-	return pathClass === "win32" ? win32Path : posixPath;
-}
-function basename$1(p, pathClass) {
-	return pathMod$1(pathClass).basename(p);
-}
-function joinPath(parent, child, pathClass) {
-	return pathMod$1(pathClass).join(parent, child);
-}
-//#endregion
 //#region src/agent/injection/permission-mode.ts
-const AUTO_MODE_ENTER_REMINDER = [
+const AUTO_MODE_REMINDER = [
 	"Auto permission mode is active. Tool approvals will be handled automatically while this mode remains enabled.",
 	"  - Continue normally without pausing for approval prompts.",
 	"  - Do NOT call AskUserQuestion while auto mode is active. Make a reasonable decision and continue without asking the user."
 ].join("\n");
-const AUTO_MODE_EXIT_REMINDER = ["Auto permission mode is no longer active. Tool approvals and permission checks are back to the current mode.", "  - Continue normally, but expect approval prompts or denials when a tool requires them."].join("\n");
+/**
+* Ephemeral injector for permission mode state.
+*
+* Emits the current permission mode as an ephemeral injection placed at
+* the `'before_user'` position. Unlike the previous persistent approach
+* (which recorded transition events into history), the ephemeral approach
+* always reflects the current state — surviving compaction and avoiding
+* history pollution.
+*
+* Only auto mode produces an injection; in all other modes the absence
+* of a reminder signals that normal approval prompts apply.
+*/
 var PermissionModeInjector = class extends DynamicInjector {
 	injectionVariant = "permission_mode";
-	lastMode;
-	getInjection() {
-		const mode = this.agent.permission.mode;
-		const previousMode = this.lastMode;
-		if (mode === previousMode) return void 0;
-		this.lastMode = mode;
-		if (mode === "auto") return AUTO_MODE_ENTER_REMINDER;
-		if (previousMode === "auto") return AUTO_MODE_EXIT_REMINDER;
+	getInjection() {}
+	getEphemeral() {
+		if (this.agent.permission.mode !== "auto") return [];
+		return [{
+			kind: "system_reminder",
+			content: AUTO_MODE_REMINDER,
+			position: "before_user"
+		}];
+	}
+};
+//#endregion
+//#region src/agent/injection/timestamp.ts
+/**
+* Ephemeral injector that provides the current timestamp at request time.
+*
+* The timestamp is rendered fresh on every step (not frozen) and placed
+* at the `'before_user'` position so it never breaks the cached prefix.
+* This aligns with the prompt-cache best practice of keeping per-request
+* dynamic content out of the cacheable system-prompt blocks.
+*/
+var TimestampInjector = class extends DynamicInjector {
+	injectionVariant = "timestamp";
+	getInjection() {}
+	getEphemeral() {
+		return [{
+			kind: "system_reminder",
+			content: `The current date and time in ISO format is \`${(/* @__PURE__ */ new Date()).toISOString()}\`. This is only a reference for you when searching the web or checking file modification time, etc. If you need the exact time, use Bash tool with proper command.`,
+			position: "before_user"
+		}];
 	}
 };
 //#endregion
@@ -8736,11 +8646,20 @@ var InjectionManager = class {
 	injectors;
 	constructor(agent) {
 		this.agent = agent;
-		this.injectors = [new PermissionModeInjector(agent), new DirectoryTreeInjector(agent)];
+		this.injectors = [new PermissionModeInjector(agent), new TimestampInjector(agent)];
 	}
 	async inject() {
 		for (const injector of this.injectors) await injector.inject();
 	}
+	getEphemeralInjections() {
+		return this.injectors.flatMap((injector) => {
+			try {
+				return injector.getEphemeral?.() ?? [];
+			} catch {
+				return [];
+			}
+		});
+	}
 	onContextClear() {
 		for (const injector of this.injectors) injector.onContextClear();
 	}
@@ -11628,7 +11547,7 @@ var SkillManager = class {
 		const skill = this.registry.getSkill(input.name);
 		if (skill === void 0) throw new ByfError(ErrorCodes.SKILL_NOT_FOUND, `Skill "${input.name}" was not found`);
 		if (!isUserActivatableSkillType(skill.metadata.type)) throw new ByfError(ErrorCodes.SKILL_TYPE_UNSUPPORTED, `Skill "${skill.name}" cannot be activated by the user`);
-		this.recordActivation({
+		const origin = {
 			kind: "skill_activation",
 			activationId: randomUUID(),
 			skillName: skill.name,
@@ -11637,10 +11556,13 @@ var SkillManager = class {
 			skillPath: skill.path,
 			skillSource: skill.source,
 			skillArgs: input.args
-		}, [{
+		};
+		const skillContent = this.registry.renderSkillPrompt(skill, input.args ?? "");
+		this.recordActivation(origin, [{
 			type: "text",
-			text: this.registry.renderSkillPrompt(skill, input.args ?? "")
+			text: skillContent
 		}]);
+		this.agent.context.appendSystemReminder(`<byf-skill-loaded name="${skill.name}">\n${skillContent}\n</byf-skill-loaded>`, origin);
 	}
 	recordActivation(origin, input) {
 		this.agent.emitEvent({
@@ -12404,9 +12326,8 @@ function createChatStreamingCallbacks(deps) {
 * enforcement, usage aggregation, optional continuation after non-tool stops,
 * and final `TurnResult` mapping. One-step execution lives in `turn-step.ts`.
 */
-const DEFAULT_MAX_STEPS = 1e3;
 async function runTurn(input) {
-	const { turnId, signal, llm, buildMessages, dispatchEvent, tools, hooks, log, maxSteps = DEFAULT_MAX_STEPS, maxRetryAttempts } = input;
+	const { turnId, signal, llm, buildMessages, dispatchEvent, tools, hooks, log, maxSteps, maxRetryAttempts } = input;
 	let usage = emptyUsage();
 	let steps = 0;
 	let stopReason = "end_turn";
@@ -12417,7 +12338,7 @@ async function runTurn(input) {
 	try {
 		while (true) {
 			signal.throwIfAborted();
-			if (steps >= maxSteps) throw createMaxStepsExceededError(maxSteps);
+			if (maxSteps !== void 0 && steps >= maxSteps) throw createMaxStepsExceededError(maxSteps);
 			steps += 1;
 			activeStep = steps;
 			const stepResult = await executeLoopStep({
@@ -13716,20 +13637,25 @@ const CACHE_BOUNDARY_MARKER = "__CACHE_BOUNDARY__";
 *
 * These headers mark natural breaks in the system prompt where cache boundaries should be placed:
 * - "# Project Information" marks the start of project-specific content
+* - "# Working Environment" marks the start of session-specific environment (OS, working directory)
 * - "# Skills" marks the start of session-specific skills listing
 */
-const IMPLICIT_BOUNDARY_HEADERS = ["# Project Information", "# Skills"];
+const IMPLICIT_BOUNDARY_HEADERS = [
+	"# Project Information",
+	"# Working Environment",
+	"# Skills"
+];
 /**
 * Block names by position.
 *
 * - First block (before first marker): 'base'
 * - Last block (after last marker): 'sessionContext'
-* - Intermediate blocks: Sequential names from 'projectInstructions', 'skillsListing', etc.
+* - Intermediate blocks: Sequential names from 'projectInstructions', 'workingEnvironment', etc.
 */
 const BLOCK_NAMES = [
 	"base",
 	"projectInstructions",
-	"skillsListing",
+	"workingEnvironment",
 	"sessionContext"
 ];
 /**
@@ -14553,8 +14479,8 @@ var TurnFlow = class {
 						completionBudgetConfig
 					}),
 					buildMessages: () => {
-						const messages = this.agent.context.messages;
-						return applyCacheStaking(messages, { previousTurnMessageCount: this._previousTurnMessageCount });
+						const ephemeral = this.agent.injection.getEphemeralInjections();
+						return applyCacheStaking(this.agent.context.getMessages(ephemeral), { previousTurnMessageCount: this._previousTurnMessageCount });
 					},
 					dispatchEvent: this.buildDispatchEvent(turnId),
 					tools: this.agent.tools.loopTools,
@@ -15083,7 +15009,7 @@ var Agent = class {
 		this.usage = new UsageRecorder(this);
 		this.tools = new ToolManager(this);
 		this.background = new BackgroundManager(this, {
-			maxRunningTasks: config.backgroundMaxRunningTasks,
+			maxRunningTasks: config.backgroundMaxRunningTasks ?? 10,
 			sessionDir: config.backgroundSessionDir
 		});
 		this.replayBuilder = new ReplayBuilder(this);
@@ -15455,6 +15381,7 @@ const LoopControlSchema = z.object({
 });
 const BackgroundConfigSchema = z.object({
 	maxRunningTasks: z.number().int().min(1).optional(),
+	maxConcurrentSubagents: z.number().int().min(1).optional(),
 	keepAliveOnExit: z.boolean().optional(),
 	killGracePeriodMs: z.number().int().min(0).optional(),
 	agentTaskTimeoutS: z.number().int().min(1).optional(),
@@ -16838,25 +16765,34 @@ const SUMMARY_MAX_LENGTH = 8e3;
 const SUMMARY_CONTINUATION_ATTEMPTS = 1;
 const HOOK_TEXT_PREVIEW_LENGTH = 500;
 const SUBAGENT_MAX_TOKENS_ERROR = "Subagent turn failed before completing its final summary: reason=max_tokens";
+/**
+* Maximum number of concurrently running subagents per parent.
+* Prevents cascading subagent proliferation that exhausts LLM bandwidth.
+*/
+const DEFAULT_MAX_CONCURRENT_SUBAGENTS = 5;
 var SessionSubagentHost = class {
 	session;
 	ownerAgentId;
 	backgroundTaskTimeoutMs;
 	activeChildren = /* @__PURE__ */ new Map();
-	constructor(session, ownerAgentId, backgroundTaskTimeoutMs) {
+	/** Maximum concurrent subagents; exposed for testing and config diagnostics. */
+	maxConcurrentSubagents;
+	constructor(session, ownerAgentId, backgroundTaskTimeoutMs, maxConcurrentSubagents = void 0) {
 		this.session = session;
 		this.ownerAgentId = ownerAgentId;
 		this.backgroundTaskTimeoutMs = backgroundTaskTimeoutMs;
+		this.maxConcurrentSubagents = maxConcurrentSubagents ?? DEFAULT_MAX_CONCURRENT_SUBAGENTS;
 	}
 	async spawn(profileName, options) {
 		options.signal.throwIfAborted();
+		this.assertCanSpawn();
 		const parent = this.session.agents.get(this.ownerAgentId);
 		if (parent === void 0) throw new Error(`Parent agent "${this.ownerAgentId}" was not found`);
 		const profile = this.resolveProfile(parent, profileName);
 		const { id, agent } = await this.session.createAgent({
 			type: "sub",
 			generate: parent.rawGenerate
-		}, void 0, this.ownerAgentId);
+		}, void 0, this.ownerAgentId, options.parentToolCallId);
 		const controller = new AbortController();
 		const unlinkAbortSignal = linkAbortSignal(options.signal, controller);
 		this.activeChildren.set(id, {
@@ -16879,6 +16815,7 @@ var SessionSubagentHost = class {
 	}
 	async resume(agentId, options) {
 		options.signal.throwIfAborted();
+		this.assertCanSpawn();
 		const parent = this.session.agents.get(this.ownerAgentId);
 		if (parent === void 0) throw new Error(`Parent agent "${this.ownerAgentId}" was not found`);
 		const child = this.session.agents.get(agentId);
@@ -16917,6 +16854,9 @@ var SessionSubagentHost = class {
 			child.controller.abort();
 		}
 	}
+	assertCanSpawn() {
+		if (this.activeChildren.size >= this.maxConcurrentSubagents) throw new Error(`Too many concurrent subagents (${this.activeChildren.size} running, maximum ${this.maxConcurrentSubagents}).`);
+	}
 	getProfileName(agentId) {
 		const metadata = this.session.metadata.agents[agentId];
 		if (metadata?.type !== "sub" || metadata.parentAgentId !== this.ownerAgentId) return;
@@ -17151,7 +17091,7 @@ var Session = class {
 		})) return;
 		await Promise.all(Array.from(this.agents.values(), (agent) => agent.background.stopAll("Session closed")));
 	}
-	async createAgent(config, profile, parentAgentId) {
+	async createAgent(config, profile, parentAgentId, parentToolCallId) {
 		await this.skillsReady;
 		const type = config.type ?? "main";
 		const id = type === "main" ? "main" : this.nextGeneratedAgentId();
@@ -17163,7 +17103,8 @@ var Session = class {
 		this.metadata.agents[id] = {
 			homedir,
 			type,
-			parentAgentId: parentAgentId ?? null
+			parentAgentId: parentAgentId ?? null,
+			parentToolCallId
 		};
 		this.writeMetadata();
 		return {
@@ -17314,7 +17255,7 @@ var Session = class {
 			providerManager: this.config.providerManager,
 			sessionId: this.config.id,
 			hookEngine: config.hookEngine ?? this.hookEngine,
-			subagentHost: config.subagentHost ?? new SessionSubagentHost(this, id, this.backgroundTaskTimeoutMs()),
+			subagentHost: config.subagentHost ?? new SessionSubagentHost(this, id, this.backgroundTaskTimeoutMs(), this.config.background?.maxConcurrentSubagents),
 			mcp: this.mcp,
 			backgroundMaxRunningTasks: this.config.background?.maxRunningTasks,
 			backgroundSessionDir: homedir,
@@ -20108,7 +20049,8 @@ async function resumeSessionResult(summary, session, warning) {
 			usage,
 			tools: await api.getTools({ agentId }),
 			toolStore: agent.tools.storeData(),
-			background: agent.background.list(false)
+			background: agent.background.list(false),
+			parentToolCallId: session.metadata.agents[agentId]?.parentToolCallId
 		};
 	}
 	return {

package/dist/session/store/index.d.mts

@@ -1,4 +1,4 @@
-import { Et as SessionSummary, ft as ListSessionsPayload, lt as JsonObject } from "../../index-C2yfSu8d.mjs";
+import { Et as SessionSummary, ft as ListSessionsPayload, lt as JsonObject } from "../../index-BfZezIU5.mjs";
 
 //#region src/session/store/session-store.d.ts
 interface CreateSessionRecordInput {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byfriends/agent-core",
-  "version": "0.2.4",
+  "version": "0.3.0",
   "description": "Unified agent engine for BYF",
   "license": "Proprietary",
   "author": "ByronFinn",
@@ -32,49 +32,26 @@
   },
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "default": "./src/index.ts"
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
     },
     "./agent/records/migration": {
-      "types": "./src/agent/records/migration/index.ts",
-      "default": "./src/agent/records/migration/index.ts"
+      "types": "./dist/agent/records/migration/index.d.mts",
+      "import": "./dist/agent/records/migration/index.mjs",
+      "default": "./dist/agent/records/migration/index.mjs"
     },
     "./session/store": {
-      "types": "./src/session/store/index.ts",
-      "default": "./src/session/store/index.ts"
+      "types": "./dist/session/store/index.d.mts",
+      "import": "./dist/session/store/index.mjs",
+      "default": "./dist/session/store/index.mjs"
     }
   },
   "publishConfig": {
-    "access": "public",
-    "exports": {
-      ".": {
-        "types": "./dist/index.d.mts",
-        "import": "./dist/index.mjs",
-        "default": "./dist/index.mjs"
-      },
-      "./agent/records/migration": {
-        "types": "./dist/agent/records/migration/index.d.mts",
-        "import": "./dist/agent/records/migration/index.mjs",
-        "default": "./dist/agent/records/migration/index.mjs"
-      },
-      "./session/store": {
-        "types": "./dist/session/store/index.d.mts",
-        "import": "./dist/session/store/index.mjs",
-        "default": "./dist/session/store/index.mjs"
-      }
-    }
-  },
-  "scripts": {
-    "build": "tsdown",
-    "test": "vitest run",
-    "test:baseline": "vitest run",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "clean": "rm -rf dist"
+    "access": "public"
   },
   "dependencies": {
     "@antfu/utils": "^9.3.0",
-    "@byfriends/kaos": "workspace:^",
-    "@byfriends/kosong": "workspace:^",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
     "ajv": "^8.18.0",
@@ -91,7 +68,9 @@
     "tar": "^7.5.13",
     "undici": "^8.4.1",
     "yauzl": "^3.3.0",
-    "zod": "catalog:"
+    "zod": "^4.3.6",
+    "@byfriends/kaos": "^0.2.2",
+    "@byfriends/kosong": "^0.2.3"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
@@ -104,5 +83,12 @@
     "@types/yauzl": "^2.10.3",
     "@types/yazl": "^2.4.6",
     "yazl": "^3.3.1"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "test": "vitest run",
+    "test:baseline": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf dist"
   }
-}
+}