@capybara-hq/kernel 0.1.0-rc.4 → 0.1.0-rc.5

package/dist/runtime/subagents/dispatch.d.ts

@@ -1,15 +1,15 @@
 import type { Logger } from "@capybara-hq/plugin-sdk";
-import { type AgentDefinition } from "../../agents/definition.js";
+import type { AgentDefinition } from "../../agents/definition.js";
 import type { EventLog } from "../../conversations/event-log.js";
 import type { ConversationEvent, EventPayload } from "../../conversations/events.js";
 import type { ConversationKind, KernelSchemaDb } from "../../db/kernel-schema.js";
 import type { KernelConfigService } from "../../infra/config/kernel-config.service.js";
 import type { ModelPurposesService } from "../../models/purposes.js";
-import { type AgentToolInputT } from "../../tools/builtins/agent.js";
+import { AGENT_REFUSALS, type AgentToolInputT } from "../../tools/builtins/agent.js";
 import type { ToolStepContext } from "../../tools/pipeline.js";
 import type { ProviderRegistry } from "../providers.js";
 import { type RunJobData } from "../run-jobs.js";
-import { type CheckedOrgAgent } from "./definition.js";
+import { type CheckedOrgAgent, type FollowUpNarrowing } from "./definition.js";
 import { type RosterEntry } from "./roster.js";
 export interface DispatchDeps {
     /** The context's handle: inside {@link commitDispatchIn} it is the dispatch's transaction. */
@@ -33,7 +33,31 @@ export interface DispatchArgs {
     callId: string;
     input: AgentToolInputT;
     forSkill?: SkillForkDispatch;
+    /**
+     * The `Agent` call's own record (not for a fork invocation): the logged key its `tool_result`
+     * keeps (the rc `agent` for a call logged before the rename), the `tool.called` audit's
+     * authorization fields, and when the pipeline started it (the audit's duration).
+     */
+    call?: {
+        toolKey: string;
+        authorization: Record<string, unknown>;
+        startedAt: number;
+    };
+    /**
+     * A `SendMessage` that starts an idle sub-agent again (agent map spec §5.1, §6): its call's
+     * immediate result, written with the dispatch instead of `agentStartedText`, and the texts of
+     * the limit refusals. `input.description` is the sub-agent's task label, `input.prompt` the
+     * message.
+     */
+    sent?: {
+        content: string;
+        refusals: LimitRefusals;
+    };
 }
+/** The texts of the limit refusals of a dispatch (§4.5, agent map spec §6), and of a stopped run. */
+export type LimitRefusals = Pick<typeof AGENT_REFUSALS, "depthLimit" | "budget" | "tooManyDispatches" | "tooManyConcurrent"> & {
+    notAvailableHere: string;
+};
 /**
  * Writes the child's events in the dispatch's transaction (`db` is its handle); `checked` is the
  * org agent version the in-lock gates passed. Null refuses.
@@ -42,6 +66,9 @@ export type ChildWriter = (db: KernelSchemaDb, checked?: CheckedOrgAgent) => Pro
 export type DispatchOutcome = {
     kind: "dispatched";
     childRunId: string;
+    childConversationId: string;
+    /** The call's immediate result (`agentStartedText`). */
+    content: string;
 } | {
     kind: "refused";
     content: string;
@@ -62,6 +89,11 @@ export interface SkillForkDispatch {
     /** The task for the sub-agent's effective definition (replaces `input.prompt`). */
     task: (child: AgentDefinition) => string;
 }
+/**
+ * The depth of the run behind `ctx` below the root (agent map spec §6): 0 for a root
+ * conversation's run, its parent's depth plus one for a sub-agent's.
+ */
+export declare const runDepth: (ctx: Pick<ToolStepContext, "parent">) => number;
 /** Idempotency key of the parent's `subagent_dispatched` event. */
 export declare const dispatchedIdemKey: (runId: string, callId: string) => string;
 /** What one dispatch writes, decided before its transaction. */
@@ -83,28 +115,74 @@ export interface DispatchPlan {
     tierFallback: boolean;
 }
 /**
- * Dispatches the sub-agent of one `Agent` call (spec §7.1), after the pipeline's validation,
- * policy, approval and `tool.preExecute` stages. A new sub-agent: resolves its type and effective
- * definition, then in one transaction (holding the parent run's row lock, so the dispatches of one
- * run serialize) inserts the child conversation, appends `subagent_started` and the task message,
- * inserts the child run (`queued`) and the `subagent_dispatches` row, appends `subagent_dispatched`
- * to the parent and audits `subagent.dispatched`. A `resume` appends the follow-up message and
- * starts the child's next run the same way. After commit the child run is enqueued; a failed
- * enqueue only logs (the dispatch is durable, the wait sweep re-enqueues it).
+ * Dispatches the sub-agent of one `Agent` call (spec §7.1, agent map spec §4.1), after the
+ * pipeline's validation, policy, approval and `tool.preExecute` stages: resolves its type and
+ * effective definition, then in one transaction (holding the parent run's row lock, so the
+ * dispatches of one run serialize) inserts the child conversation, appends `subagent_started` and
+ * the task message, inserts the child run (`queued`) and the `subagent_dispatches` row, appends
+ * `subagent_dispatched` and the call's `tool_result` ({@link agentStartedText}: the sub-agent runs
+ * in the background) to the parent and audits `subagent.dispatched` and `tool.called`. After
+ * commit the child run is enqueued; a failed enqueue only logs (the dispatch is durable, the wait
+ * sweep re-enqueues it). A fork invocation (`forSkill`) writes no `tool_result`: its run waits on
+ * the child (`advanceSkillForks`).
  *
- * Refusals (§4.5) start nothing: a call from a sub-agent, an unknown type, an org agent that fails
- * one of its gates ({@link orgAgentGates}, at every dispatch and follow-up; audited
- * `subagent.refused`), `resume` with `subagent_type` / `model`, a `resume` id that is not a
- * sub-agent of this conversation (whatever it is otherwise: no detail about other conversations),
- * or one whose run is still active.
+ * Refusals (§4.5) start nothing: a call from a run at `subagents.maxDepth` (agent map spec §4.1:
+ * its definition has no `Agent`, so only a forged call or a lowered limit gets here), an unknown
+ * type, or an org agent that fails one of its gates ({@link orgAgentGates}, checked at every
+ * level; audited `subagent.refused`).
+ */
+export declare function dispatchSubagent(d: DispatchDeps, a: DispatchArgs): Promise<DispatchOutcome>;
+/**
+ * The gates of an org agent sub-agent (§5.5) for this call: the allowlist of the parent agent's
+ * **current** version (R5), the agent's `dispatchable`, its visibility to the person who started
+ * the parent run, and not deleted. A refusal is audited `subagent.refused` and answers with the
+ * §4.5 text, which names only the roster type. Checked before the dispatch transaction (a new
+ * sub-agent freezes the definition read here) and again inside it under the parent run's row lock
+ * ({@link commit}), so a gate revoked in between refuses (batch 9 review M1).
  */
-export declare function dispatchSubagent(d: DispatchDeps, a: {
+export declare function orgAgentGates(db: KernelSchemaDb, a: {
     ctx: ToolStepContext;
     callId: string;
-    input: AgentToolInputT;
-    /** Phase D: a person's fork invocation (see {@link SkillForkDispatch}). */
-    forSkill?: SkillForkDispatch;
-}): Promise<DispatchOutcome>;
+}, agentId: string, agentType: string, resumed: boolean): Promise<{
+    checked: CheckedOrgAgent;
+} | {
+    refused: DispatchOutcome;
+}>;
+/**
+ * A sub-agent's task message, or (`message`) a `SendMessage` from its parent (agent map spec
+ * §5.1: `dispatch.kind: "message"`, idempotent by the sending call, with the follow-up narrowing
+ * the run it triggers uses).
+ */
+export declare const taskMessage: (ctx: ToolStepContext, callId: string, prompt: string, narrowed?: FollowUpNarrowing, skill?: SkillForkDispatch["skill"], message?: boolean) => {
+    type: "user_message";
+    idemKey?: string;
+    payload: {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        skill?: {
+            id: string;
+            version: number;
+            source: string;
+            name: string;
+            plugin?: string | undefined;
+            arguments: string;
+            mode: "fork" | "inline";
+            agentType?: string | undefined;
+        };
+        authorAccountId: string;
+        dispatch: {
+            parentConversationId: string;
+            parentRunId: string;
+            callId: string;
+            kind?: "message";
+            narrowed?: FollowUpNarrowing;
+        };
+    };
+};
+/** Idempotency key of a `SendMessage`'s `user_message` in the sub-agent's log. */
+export declare const sentMessageIdemKey: (runId: string, callId: string) => string;
 /**
  * The dispatch transaction shared by new sub-agents and follow-ups: locks the parent conversation
  * row, then the parent run row (the order every terminal path uses),
@@ -115,20 +193,27 @@ export declare function dispatchSubagent(d: DispatchDeps, a: {
  *
  * Under the parent run's row lock it first re-checks what the pipeline checked without it: a call
  * already dispatched (a second holder of the same step, e.g. after a stalled-job takeover) gets
- * the existing child run back and writes nothing, and a parent run that is no longer `running`
- * (stopped, orphaned) dispatches nothing. Then the run's limits (§8.2, {@link subagentLimits}),
- * read fresh: its children's token counter at or over the cap, its dispatches (follow-ups
- * included) at the cap, or as many active children as may run at once each refuse with the §4.5
- * text. The lock serializes the dispatches of one run, so the counts cannot race.
+ * the existing child run back and writes nothing but a missing `Agent` result, and a parent run that is no longer `running`
+ * (stopped, orphaned) dispatches nothing. Then the limits (§8.2, agent map spec §6,
+ * {@link subagentLimits}), read fresh: the depth, the tree's token counter at or over the cap,
+ * its dispatches (follow-ups included) at the cap, or as many active children of the parent
+ * conversation as may run at once each refuse with the §4.5 text. The budget run's row lock
+ * serializes the dispatches of one tree, so the counts cannot race.
  */
 /** What the dispatch transaction did. */
 export type DispatchCommit = {
     kind: "existing";
     childRunId: string;
+    childConversationId: string;
     requeue: {
         conversationId: string;
         seq: number;
     } | null;
+    /** The call's logged result (null for a fork dispatch) and its seq, to notify. */
+    result: {
+        content: string;
+        seq: number;
+    } | null;
 } | {
     kind: "stopped";
 } | {
@@ -142,9 +227,13 @@ export type DispatchCommit = {
     childRunId: string;
     childSeq: number;
     parentSeq: number;
+    content: string;
 };
 /**
  * {@link commit}'s transaction (run by `SubagentsService.commitDispatch`, `d.db` its handle).
  * Null when `child` refused.
  */
 export declare function commitDispatchIn(d: Pick<DispatchDeps, "db" | "eventLog" | "config">, a: DispatchArgs, plan: DispatchPlan, child: ChildWriter): Promise<DispatchCommit | null>;
+export declare function commit(d: Pick<DispatchDeps, "commitDispatch" | "enqueue" | "log" | "eventLog">, a: DispatchArgs, plan: DispatchPlan, 
+/** Writes the child's events; `checked` is the org agent version the in-lock gates passed. */
+child: ChildWriter): Promise<DispatchOutcome | null>;