@caupulican/pi-adaptative 0.81.40 → 0.81.42

package/dist/core/delegation/worker-actions.js

@@ -1,72 +1,135 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
 import { validateToolArguments } from "@caupulican/pi-ai";
 import { Type } from "typebox";
 import { safeRealpathSync } from "../autonomy/path-scope.js";
 import { CapabilityGatewayDeniedError } from "../orchestration/capability-gateway.js";
-const MAX_ACTIONS = 20;
-const MAX_CONTENT_CHARS = 512 * 1024;
+import { readBoundedTextFileSync } from "../util/bounded-file.js";
+import { isPlainRecord } from "../util/value-guards.js";
+/** Bounded model-to-filesystem mutation contract. All execution callers pass through this owner. */
+export const MAX_WORKER_ACTIONS = 20;
+export const MAX_WORKER_ACTION_PATH_CHARS = 2_048;
+export const MAX_WORKER_ACTION_TEXT_CHARS = 512 * 1024;
+/** Limits all source/replacement payloads for one atomic worker action batch. */
+export const MAX_WORKER_ACTION_PAYLOAD_CHARS = 512 * 1024;
+/**
+ * A structured edit only needs bounded source/replacement text. Limit the target read to 2 MiB:
+ * this admits the largest UTF-8 text payload (512 Ki code units at four bytes each)
+ * without letting a small edit cause an unbounded repository-file allocation.
+ */
+export const MAX_WORKER_ACTION_EDIT_TARGET_BYTES = 2 * 1024 * 1024;
 const workerActionSchema = Type.Union([
     Type.Object({
         op: Type.Literal("write"),
-        path: Type.String({ minLength: 1 }),
-        content: Type.String({ maxLength: MAX_CONTENT_CHARS }),
-    }),
+        path: Type.String({ minLength: 1, maxLength: MAX_WORKER_ACTION_PATH_CHARS }),
+        content: Type.String({ maxLength: MAX_WORKER_ACTION_TEXT_CHARS }),
+    }, { additionalProperties: false }),
     Type.Object({
         op: Type.Literal("edit"),
-        path: Type.String({ minLength: 1 }),
-        old: Type.String({ minLength: 1 }),
-        new: Type.String({ maxLength: MAX_CONTENT_CHARS }),
-    }),
+        path: Type.String({ minLength: 1, maxLength: MAX_WORKER_ACTION_PATH_CHARS }),
+        old: Type.String({ minLength: 1, maxLength: MAX_WORKER_ACTION_TEXT_CHARS }),
+        new: Type.String({ maxLength: MAX_WORKER_ACTION_TEXT_CHARS }),
+    }, { additionalProperties: false }),
 ]);
 const workerActionsTool = {
     name: "worker_actions",
     description: "Worker filesystem action list",
-    parameters: Type.Object({ actions: Type.Array(workerActionSchema) }),
+    parameters: Type.Object({ actions: Type.Array(workerActionSchema, { maxItems: MAX_WORKER_ACTIONS }) }, { additionalProperties: false }),
 };
+function rejectWorkerActions(reasonCode) {
+    const messages = {
+        worker_actions_invalid_shape: "worker actions must be a strict JSON write/edit action list",
+        worker_actions_too_many: `worker actions exceed the ${MAX_WORKER_ACTIONS}-action limit`,
+        worker_actions_path_too_long: "worker action path exceeds the allowed limit",
+        worker_actions_field_too_large: "worker actions contain a field larger than the allowed limit",
+        worker_actions_payload_too_large: "worker actions exceed the aggregate payload limit",
+    };
+    return { kind: "rejected", reasonCode, message: messages[reasonCode] };
+}
 function validateWorkerActions(raw, validation) {
     try {
         const validated = validateToolArguments(workerActionsTool, { type: "toolCall", id: "worker-actions", name: "worker_actions", arguments: { actions: raw } }, validation).actions;
-        return Array.isArray(validated) ? validated : [];
+        return Array.isArray(validated) ? validated : undefined;
     }
     catch {
-        return [];
+        return undefined;
     }
 }
-function sanitizeWorkerActions(raw) {
+/**
+ * Normalizes every model or direct caller before it can reach the gateway, journal, or filesystem.
+ * Any malformed entry rejects the entire batch so a partially malformed request cannot mutate a
+ * surprising prefix.
+ */
+function normalizeWorkerActions(raw) {
+    if (raw.length > MAX_WORKER_ACTIONS)
+        return rejectWorkerActions("worker_actions_too_many");
     const actions = [];
-    for (const entry of raw.slice(0, MAX_ACTIONS)) {
-        if (!entry || typeof entry !== "object")
-            continue;
-        const record = entry;
-        if (record.op !== "write" && record.op !== "edit")
-            continue;
-        if (typeof record.path !== "string" || record.path.length === 0)
-            continue;
-        if (record.op === "write") {
-            if (typeof record.content !== "string" || record.content.length > MAX_CONTENT_CHARS)
-                continue;
-            actions.push({ op: "write", path: record.path, content: record.content });
+    let payloadChars = 0;
+    for (const entry of raw) {
+        if (!isPlainRecord(entry))
+            return rejectWorkerActions("worker_actions_invalid_shape");
+        const descriptors = Object.getOwnPropertyDescriptors(entry);
+        const op = descriptors.op?.value;
+        if (op !== "write" && op !== "edit")
+            return rejectWorkerActions("worker_actions_invalid_shape");
+        const expectedKeys = op === "write" ? ["op", "path", "content"] : ["op", "path", "old", "new"];
+        if (Reflect.ownKeys(entry).length !== expectedKeys.length ||
+            !expectedKeys.every((key) => {
+                const descriptor = descriptors[key];
+                return descriptor?.enumerable === true && "value" in descriptor;
+            }))
+            return rejectWorkerActions("worker_actions_invalid_shape");
+        const actionPath = descriptors.path?.value;
+        if (typeof actionPath !== "string" || actionPath.length === 0)
+            return rejectWorkerActions("worker_actions_invalid_shape");
+        if (actionPath.length > MAX_WORKER_ACTION_PATH_CHARS)
+            return rejectWorkerActions("worker_actions_path_too_long");
+        if (op === "write") {
+            const content = descriptors.content?.value;
+            if (typeof content !== "string")
+                return rejectWorkerActions("worker_actions_invalid_shape");
+            if (content.length > MAX_WORKER_ACTION_TEXT_CHARS)
+                return rejectWorkerActions("worker_actions_field_too_large");
+            if (payloadChars + content.length > MAX_WORKER_ACTION_PAYLOAD_CHARS)
+                return rejectWorkerActions("worker_actions_payload_too_large");
+            payloadChars += content.length;
+            actions.push({ op: "write", path: actionPath, content });
         }
         else {
-            if (typeof record.old !== "string" || record.old.length === 0)
-                continue;
-            if (typeof record.new !== "string" || record.new.length > MAX_CONTENT_CHARS)
-                continue;
-            actions.push({ op: "edit", path: record.path, old: record.old, new: record.new });
+            const old = descriptors.old?.value;
+            const replacement = descriptors.new?.value;
+            if (typeof old !== "string" || old.length === 0 || typeof replacement !== "string")
+                return rejectWorkerActions("worker_actions_invalid_shape");
+            if (old.length > MAX_WORKER_ACTION_TEXT_CHARS || replacement.length > MAX_WORKER_ACTION_TEXT_CHARS)
+                return rejectWorkerActions("worker_actions_field_too_large");
+            if (payloadChars + old.length + replacement.length > MAX_WORKER_ACTION_PAYLOAD_CHARS)
+                return rejectWorkerActions("worker_actions_payload_too_large");
+            payloadChars += old.length + replacement.length;
+            actions.push({ op: "edit", path: actionPath, old, new: replacement });
         }
     }
-    return actions;
+    return { kind: "accepted", actions };
 }
 export function parseWorkerActions(raw, validation) {
-    if (Array.isArray(raw))
-        return sanitizeWorkerActions(validateWorkerActions(sanitizeWorkerActions(raw), validation));
-    return sanitizeWorkerActions(validateWorkerActions(raw, validation));
+    if (raw === undefined)
+        return { kind: "accepted", actions: [] };
+    const candidate = Array.isArray(raw) ? normalizeWorkerActions(raw) : undefined;
+    if (candidate?.kind === "rejected")
+        return candidate;
+    const validated = validateWorkerActions(candidate?.actions ?? raw, validation);
+    if (!validated)
+        return rejectWorkerActions("worker_actions_invalid_shape");
+    return normalizeWorkerActions(validated);
 }
 export function applyWorkerActions(args) {
-    const report = { changedFiles: [], refused: [], failed: [] };
+    const report = { changedFiles: [], refused: [], failed: [], inspectionRequired: [] };
     const manifests = new Map(args.toolManifests.map((manifest) => [manifest.toolName, manifest]));
-    for (const action of args.actions) {
+    const parsedActions = parseWorkerActions(args.actions);
+    if (parsedActions.kind === "rejected") {
+        report.failed.push({ path: "<worker_actions>", reason: `${parsedActions.reasonCode}: ${parsedActions.message}` });
+        return report;
+    }
+    for (const [index, action] of parsedActions.actions.entries()) {
         const manifest = manifests.get(action.op);
         if (!manifest) {
             report.refused.push({
@@ -85,30 +148,92 @@ export function applyWorkerActions(args) {
             }
             throw error;
         }
-        const target = safeRealpathSync(resolve(args.cwd, action.path));
-        const relativePath = relative(args.cwd, target).replaceAll("\\", "/");
+        let target;
+        let relativePath;
+        try {
+            target = safeRealpathSync(resolve(args.cwd, action.path));
+            relativePath = relative(args.cwd, target).replaceAll("\\", "/");
+        }
+        catch {
+            report.failed.push({ path: action.path, reason: "target path could not be resolved" });
+            continue;
+        }
+        let journalPermit;
+        if (args.actionJournal) {
+            try {
+                journalPermit = args.actionJournal.begin({ index, action, targetPath: target });
+            }
+            catch {
+                report.failed.push({ path: action.path, reason: "mutation journal intent could not be persisted" });
+                continue;
+            }
+            if (journalPermit.kind === "inspection_required") {
+                report.inspectionRequired.push({
+                    path: action.path,
+                    actionId: journalPermit.actionId,
+                    state: journalPermit.state,
+                    reasonCode: journalPermit.reasonCode,
+                    ...(journalPermit.evidencePointer ? { evidencePointer: journalPermit.evidencePointer } : {}),
+                });
+                continue;
+            }
+        }
+        let mutationStarted = false;
         try {
             if (action.op === "write") {
+                // mkdir may create one or more parents before an error or process interruption. Once it
+                // is invoked the durable intent is conservatively unknown, never replayed as a precondition failure.
+                mutationStarted = true;
                 mkdirSync(dirname(target), { recursive: true });
                 writeFileSync(target, action.content ?? "", "utf-8");
             }
             else {
                 if (!existsSync(target)) {
-                    report.failed.push({ path: action.path, reason: "file does not exist" });
-                    continue;
+                    throw new Error("worker_action_file_missing");
                 }
-                const current = readFileSync(target, "utf-8");
+                const current = readBoundedTextFileSync(target, MAX_WORKER_ACTION_EDIT_TARGET_BYTES, "Worker action edit target");
                 if (!action.old || !current.includes(action.old)) {
-                    report.failed.push({ path: action.path, reason: "edit old-text not found in file" });
-                    continue;
+                    throw new Error("worker_action_old_text_missing");
                 }
+                mutationStarted = true;
                 writeFileSync(target, current.replace(action.old, () => action.new ?? ""), "utf-8");
             }
             if (!report.changedFiles.includes(relativePath))
                 report.changedFiles.push(relativePath);
+            journalPermit?.kind === "execute" &&
+                args.actionJournal?.recordSucceeded(journalPermit, {
+                    evidencePointer: `workspace:file:${target}`,
+                });
         }
-        catch (error) {
-            report.failed.push({ path: action.path, reason: error instanceof Error ? error.message : String(error) });
+        catch {
+            if (mutationStarted && journalPermit?.kind === "execute") {
+                report.inspectionRequired.push({
+                    path: action.path,
+                    actionId: journalPermit.actionId,
+                    state: "unknown",
+                    reasonCode: "worker_action_outcome_unknown",
+                    evidencePointer: `workspace:file:${target}`,
+                });
+            }
+            else {
+                if (journalPermit?.kind === "execute") {
+                    try {
+                        args.actionJournal?.recordFailed(journalPermit, "worker_action_precondition_failed", {
+                            evidencePointer: `workspace:file:${target}`,
+                        });
+                    }
+                    catch {
+                        report.inspectionRequired.push({
+                            path: action.path,
+                            actionId: journalPermit.actionId,
+                            state: "unknown",
+                            reasonCode: "worker_action_outcome_unknown",
+                            evidencePointer: `workspace:file:${target}`,
+                        });
+                    }
+                }
+                report.failed.push({ path: action.path, reason: "action precondition or filesystem operation failed" });
+            }
         }
     }
     return report;

package/dist/core/delegation/worker-actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker-actions.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAA0B,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAuB9G,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AAErC,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC;QACX,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;KACtD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC;QACX,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACnC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;KAClD,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAS;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+BAA+B;IAC5C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;CACpE,CAAC;AAEF,SAAS,qBAAqB,CAAC,GAAY,EAAE,UAA0C,EAAa;IACnG,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,qBAAqB,CACtC,iBAAiB,EACjB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAC/F,UAAU,CACV,CAAC,OAAO,CAAC;QACV,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AAAA,CACD;AAED,SAAS,qBAAqB,CAAC,GAAuB,EAAkB;IACvE,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM;YAAE,SAAS;QAC5D,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1E,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,iBAAiB;gBAAE,SAAS;YAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACP,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACxE,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,iBAAiB;gBAAE,SAAS;YACtF,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAA0C,EAAkB;IAC5G,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACpH,OAAO,qBAAqB,CAAC,qBAAqB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;AAAA,CACrE;AAWD,MAAM,UAAU,kBAAkB,CAAC,IAKlC,EAAwB;IACxB,MAAM,MAAM,GAAyB,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,+CAA+C;aACnE,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;gBACnD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5F,SAAS;YACV,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtE,IAAI,CAAC;YACJ,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBAC3B,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;oBACzE,SAAS;gBACV,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC;oBACrF,SAAS;gBACV,CAAC;gBACD,aAAa,CACZ,MAAM,EACN,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EACnD,OAAO,CACP,CAAC;YACH,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, relative, resolve } from \"node:path\";\nimport type { Tool, ToolArgumentValidationOptions } from \"@caupulican/pi-ai\";\nimport { validateToolArguments } from \"@caupulican/pi-ai\";\nimport { Type } from \"typebox\";\nimport { safeRealpathSync } from \"../autonomy/path-scope.ts\";\nimport { type CapabilityGateway, CapabilityGatewayDeniedError } from \"../orchestration/capability-gateway.ts\";\nimport type { ToolCapabilityManifest } from \"../orchestration/contracts.ts\";\n\n/**\n * Code-writing workers (G2): the worker MODEL never touches the filesystem — it emits strict-JSON\n * actions, and this RUNNER-side module applies them deterministically through the compiled\n * execution grant. That keeps the structural-contract philosophy (a local model without\n * tool-calling templates can still write code) and makes enforcement execution-time, not\n * validation-only: an out-of-scope action is REFUSED with a reason, never silently dropped, and\n * refusals surface as blockers on the result.\n */\n\nexport interface WorkerAction {\n\top: \"write\" | \"edit\";\n\tpath: string;\n\t/** write: full file content. */\n\tcontent?: string;\n\t/** edit: exact string to replace (must occur in the file). */\n\told?: string;\n\t/** edit: replacement text. */\n\tnew?: string;\n}\n\nconst MAX_ACTIONS = 20;\nconst MAX_CONTENT_CHARS = 512 * 1024;\n\nconst workerActionSchema = Type.Union([\n\tType.Object({\n\t\top: Type.Literal(\"write\"),\n\t\tpath: Type.String({ minLength: 1 }),\n\t\tcontent: Type.String({ maxLength: MAX_CONTENT_CHARS }),\n\t}),\n\tType.Object({\n\t\top: Type.Literal(\"edit\"),\n\t\tpath: Type.String({ minLength: 1 }),\n\t\told: Type.String({ minLength: 1 }),\n\t\tnew: Type.String({ maxLength: MAX_CONTENT_CHARS }),\n\t}),\n]);\n\nconst workerActionsTool: Tool = {\n\tname: \"worker_actions\",\n\tdescription: \"Worker filesystem action list\",\n\tparameters: Type.Object({ actions: Type.Array(workerActionSchema) }),\n};\n\nfunction validateWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): unknown[] {\n\ttry {\n\t\tconst validated = validateToolArguments(\n\t\t\tworkerActionsTool,\n\t\t\t{ type: \"toolCall\", id: \"worker-actions\", name: \"worker_actions\", arguments: { actions: raw } },\n\t\t\tvalidation,\n\t\t).actions;\n\t\treturn Array.isArray(validated) ? validated : [];\n\t} catch {\n\t\treturn [];\n\t}\n}\n\nfunction sanitizeWorkerActions(raw: readonly unknown[]): WorkerAction[] {\n\tconst actions: WorkerAction[] = [];\n\tfor (const entry of raw.slice(0, MAX_ACTIONS)) {\n\t\tif (!entry || typeof entry !== \"object\") continue;\n\t\tconst record = entry as Record<string, unknown>;\n\t\tif (record.op !== \"write\" && record.op !== \"edit\") continue;\n\t\tif (typeof record.path !== \"string\" || record.path.length === 0) continue;\n\t\tif (record.op === \"write\") {\n\t\t\tif (typeof record.content !== \"string\" || record.content.length > MAX_CONTENT_CHARS) continue;\n\t\t\tactions.push({ op: \"write\", path: record.path, content: record.content });\n\t\t} else {\n\t\t\tif (typeof record.old !== \"string\" || record.old.length === 0) continue;\n\t\t\tif (typeof record.new !== \"string\" || record.new.length > MAX_CONTENT_CHARS) continue;\n\t\t\tactions.push({ op: \"edit\", path: record.path, old: record.old, new: record.new });\n\t\t}\n\t}\n\treturn actions;\n}\n\nexport function parseWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): WorkerAction[] {\n\tif (Array.isArray(raw)) return sanitizeWorkerActions(validateWorkerActions(sanitizeWorkerActions(raw), validation));\n\treturn sanitizeWorkerActions(validateWorkerActions(raw, validation));\n}\n\nexport interface AppliedActionsReport {\n\t/** Repo-relative paths actually changed. */\n\tchangedFiles: string[];\n\t/** Grant refusals (execution-time enforcement) — surfaced, never silent. */\n\trefused: Array<{ path: string; reason: string }>;\n\t/** Actions that were in scope but could not be applied (missing file, old-text not found). */\n\tfailed: Array<{ path: string; reason: string }>;\n}\n\nexport function applyWorkerActions(args: {\n\tactions: readonly WorkerAction[];\n\tgateway: CapabilityGateway;\n\ttoolManifests: readonly ToolCapabilityManifest[];\n\tcwd: string;\n}): AppliedActionsReport {\n\tconst report: AppliedActionsReport = { changedFiles: [], refused: [], failed: [] };\n\tconst manifests = new Map(args.toolManifests.map((manifest) => [manifest.toolName, manifest]));\n\tfor (const action of args.actions) {\n\t\tconst manifest = manifests.get(action.op);\n\t\tif (!manifest) {\n\t\t\treport.refused.push({\n\t\t\t\tpath: action.path,\n\t\t\t\treason: `${action.op} is not present in the compiled tool manifest`,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\targs.gateway.authorizeToolCall(manifest, action.op, { path: action.path });\n\t\t} catch (error) {\n\t\t\tif (error instanceof CapabilityGatewayDeniedError) {\n\t\t\t\treport.refused.push({ path: action.path, reason: `${error.reasonCode}: ${error.message}` });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\tconst target = safeRealpathSync(resolve(args.cwd, action.path));\n\t\tconst relativePath = relative(args.cwd, target).replaceAll(\"\\\\\", \"/\");\n\t\ttry {\n\t\t\tif (action.op === \"write\") {\n\t\t\t\tmkdirSync(dirname(target), { recursive: true });\n\t\t\t\twriteFileSync(target, action.content ?? \"\", \"utf-8\");\n\t\t\t} else {\n\t\t\t\tif (!existsSync(target)) {\n\t\t\t\t\treport.failed.push({ path: action.path, reason: \"file does not exist\" });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst current = readFileSync(target, \"utf-8\");\n\t\t\t\tif (!action.old || !current.includes(action.old)) {\n\t\t\t\t\treport.failed.push({ path: action.path, reason: \"edit old-text not found in file\" });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\twriteFileSync(\n\t\t\t\t\ttarget,\n\t\t\t\t\tcurrent.replace(action.old, () => action.new ?? \"\"),\n\t\t\t\t\t\"utf-8\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (!report.changedFiles.includes(relativePath)) report.changedFiles.push(relativePath);\n\t\t} catch (error) {\n\t\t\treport.failed.push({ path: action.path, reason: error instanceof Error ? error.message : String(error) });\n\t\t}\n\t}\n\treturn report;\n}\n"]}
+{"version":3,"file":"worker-actions.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAA0B,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAE9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AA4CxD,oGAAoG;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,GAAG,IAAI,CAAC;AACvD,iFAAiF;AACjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnE,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC;IACrC,IAAI,CAAC,MAAM,CACV;QACC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;KACjE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;IACD,IAAI,CAAC,MAAM,CACV;QACC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;QAC5E,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;QAC3E,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;KAC7D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAS;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+BAA+B;IAC5C,UAAU,EAAE,IAAI,CAAC,MAAM,CACtB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EAAE,EAC7E,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,CAAC;AAEF,SAAS,mBAAmB,CAAC,UAAqC,EAAyB;IAC1F,MAAM,QAAQ,GAA8C;QAC3D,4BAA4B,EAAE,6DAA6D;QAC3F,uBAAuB,EAAE,6BAA6B,kBAAkB,eAAe;QACvF,4BAA4B,EAAE,8CAA8C;QAC5E,8BAA8B,EAAE,8DAA8D;QAC9F,gCAAgC,EAAE,mDAAmD;KACrF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;AAAA,CACvE;AAED,SAAS,qBAAqB,CAC7B,GAAY,EACZ,UAA0C,EACT;IACjC,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,qBAAqB,CACtC,iBAAiB,EACjB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAC/F,UAAU,CACV,CAAC,OAAO,CAAC;QACV,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,GAAuB,EAA4B;IAClF,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC;QACjC,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;QAChG,MAAM,YAAY,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/F,IACC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;YACrD,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,UAAU,EAAE,UAAU,KAAK,IAAI,IAAI,OAAO,IAAI,UAAU,CAAC;YAAA,CAChE,CAAC;YAEF,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;QAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5D,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,UAAU,CAAC,MAAM,GAAG,4BAA4B;YAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;QACjH,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC;YAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;YAC5F,IAAI,OAAO,CAAC,MAAM,GAAG,4BAA4B;gBAChD,OAAO,mBAAmB,CAAC,gCAAgC,CAAC,CAAC;YAC9D,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,+BAA+B;gBAClE,OAAO,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAChE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;YACnC,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;YAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,WAAW,KAAK,QAAQ;gBACjF,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;YAC5D,IAAI,GAAG,CAAC,MAAM,GAAG,4BAA4B,IAAI,WAAW,CAAC,MAAM,GAAG,4BAA4B;gBACjG,OAAO,mBAAmB,CAAC,gCAAgC,CAAC,CAAC;YAC9D,IAAI,YAAY,GAAG,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,+BAA+B;gBACnF,OAAO,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAChE,YAAY,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAAA,CACrC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAA0C,EAA4B;IACtH,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,SAAS,EAAE,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,EAAE,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS;QAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;IAC3E,OAAO,sBAAsB,CAAC,SAAS,CAAC,CAAC;AAAA,CACzC;AAmBD,MAAM,UAAU,kBAAkB,CAAC,IAOlC,EAAwB;IACxB,MAAM,MAAM,GAAyB,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;IAC3G,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,UAAU,KAAK,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,+CAA+C;aACnE,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;gBACnD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5F,SAAS;YACV,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,IAAI,MAAc,CAAC;QACnB,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACvF,SAAS;QACV,CAAC;QACD,IAAI,aAAmE,CAAC;QACxE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACjF,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC,CAAC;gBACpG,SAAS;YACV,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAClD,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC;oBAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,KAAK,EAAE,aAAa,CAAC,KAAK;oBAC1B,UAAU,EAAE,aAAa,CAAC,UAAU;oBACpC,GAAG,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5F,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;QACF,CAAC;QACD,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YACJ,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBAC3B,wFAAwF;gBACxF,qGAAqG;gBACrG,eAAe,GAAG,IAAI,CAAC;gBACvB,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,OAAO,GAAG,uBAAuB,CACtC,MAAM,EACN,mCAAmC,EACnC,2BAA2B,CAC3B,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACnD,CAAC;gBACD,eAAe,GAAG,IAAI,CAAC;gBACvB,aAAa,CACZ,MAAM,EACN,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EACnD,OAAO,CACP,CAAC;YACH,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxF,aAAa,EAAE,IAAI,KAAK,SAAS;gBAChC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE;oBAClD,eAAe,EAAE,kBAAkB,MAAM,EAAE;iBAC3C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,eAAe,IAAI,aAAa,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1D,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC;oBAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,+BAA+B;oBAC3C,eAAe,EAAE,kBAAkB,MAAM,EAAE;iBAC3C,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,IAAI,aAAa,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvC,IAAI,CAAC;wBACJ,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,aAAa,EAAE,mCAAmC,EAAE;4BACpF,eAAe,EAAE,kBAAkB,MAAM,EAAE;yBAC3C,CAAC,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACR,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC;4BAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,QAAQ,EAAE,aAAa,CAAC,QAAQ;4BAChC,KAAK,EAAE,SAAS;4BAChB,UAAU,EAAE,+BAA+B;4BAC3C,eAAe,EAAE,kBAAkB,MAAM,EAAE;yBAC3C,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC;YACzG,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import { existsSync, mkdirSync, writeFileSync } from \"node:fs\";\nimport { dirname, relative, resolve } from \"node:path\";\nimport type { Tool, ToolArgumentValidationOptions } from \"@caupulican/pi-ai\";\nimport { validateToolArguments } from \"@caupulican/pi-ai\";\nimport { Type } from \"typebox\";\nimport { safeRealpathSync } from \"../autonomy/path-scope.ts\";\nimport { type CapabilityGateway, CapabilityGatewayDeniedError } from \"../orchestration/capability-gateway.ts\";\nimport type { ToolCapabilityManifest } from \"../orchestration/contracts.ts\";\nimport { readBoundedTextFileSync } from \"../util/bounded-file.ts\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\nimport type { WorkerActionInspectionRequired, WorkerActionJournal } from \"./worker-action-journal.ts\";\n\n/**\n * Code-writing workers (G2): the worker MODEL never touches the filesystem — it emits strict-JSON\n * actions, and this RUNNER-side module applies them deterministically through the compiled\n * execution grant. That keeps the structural-contract philosophy (a local model without\n * tool-calling templates can still write code) and makes enforcement execution-time, not\n * validation-only: an out-of-scope action is REFUSED with a reason, never silently dropped, and\n * refusals surface as blockers on the result.\n */\n\nexport interface WorkerAction {\n\top: \"write\" | \"edit\";\n\tpath: string;\n\t/** write: full file content. */\n\tcontent?: string;\n\t/** edit: exact string to replace (must occur in the file). */\n\told?: string;\n\t/** edit: replacement text. */\n\tnew?: string;\n}\n\nexport type WorkerActionRejectionCode =\n\t| \"worker_actions_invalid_shape\"\n\t| \"worker_actions_too_many\"\n\t| \"worker_actions_path_too_long\"\n\t| \"worker_actions_field_too_large\"\n\t| \"worker_actions_payload_too_large\";\n\nexport interface AcceptedWorkerActions {\n\tkind: \"accepted\";\n\tactions: WorkerAction[];\n}\n\nexport interface RejectedWorkerActions {\n\tkind: \"rejected\";\n\treasonCode: WorkerActionRejectionCode;\n\tmessage: string;\n}\n\n/** The sole structured-action admission result used before execution or worker-result projection. */\nexport type WorkerActionParseOutcome = AcceptedWorkerActions | RejectedWorkerActions;\n\n/** Bounded model-to-filesystem mutation contract. All execution callers pass through this owner. */\nexport const MAX_WORKER_ACTIONS = 20;\nexport const MAX_WORKER_ACTION_PATH_CHARS = 2_048;\nexport const MAX_WORKER_ACTION_TEXT_CHARS = 512 * 1024;\n/** Limits all source/replacement payloads for one atomic worker action batch. */\nexport const MAX_WORKER_ACTION_PAYLOAD_CHARS = 512 * 1024;\n/**\n * A structured edit only needs bounded source/replacement text. Limit the target read to 2 MiB:\n * this admits the largest UTF-8 text payload (512 Ki code units at four bytes each)\n * without letting a small edit cause an unbounded repository-file allocation.\n */\nexport const MAX_WORKER_ACTION_EDIT_TARGET_BYTES = 2 * 1024 * 1024;\n\nconst workerActionSchema = Type.Union([\n\tType.Object(\n\t\t{\n\t\t\top: Type.Literal(\"write\"),\n\t\t\tpath: Type.String({ minLength: 1, maxLength: MAX_WORKER_ACTION_PATH_CHARS }),\n\t\t\tcontent: Type.String({ maxLength: MAX_WORKER_ACTION_TEXT_CHARS }),\n\t\t},\n\t\t{ additionalProperties: false },\n\t),\n\tType.Object(\n\t\t{\n\t\t\top: Type.Literal(\"edit\"),\n\t\t\tpath: Type.String({ minLength: 1, maxLength: MAX_WORKER_ACTION_PATH_CHARS }),\n\t\t\told: Type.String({ minLength: 1, maxLength: MAX_WORKER_ACTION_TEXT_CHARS }),\n\t\t\tnew: Type.String({ maxLength: MAX_WORKER_ACTION_TEXT_CHARS }),\n\t\t},\n\t\t{ additionalProperties: false },\n\t),\n]);\n\nconst workerActionsTool: Tool = {\n\tname: \"worker_actions\",\n\tdescription: \"Worker filesystem action list\",\n\tparameters: Type.Object(\n\t\t{ actions: Type.Array(workerActionSchema, { maxItems: MAX_WORKER_ACTIONS }) },\n\t\t{ additionalProperties: false },\n\t),\n};\n\nfunction rejectWorkerActions(reasonCode: WorkerActionRejectionCode): RejectedWorkerActions {\n\tconst messages: Record<WorkerActionRejectionCode, string> = {\n\t\tworker_actions_invalid_shape: \"worker actions must be a strict JSON write/edit action list\",\n\t\tworker_actions_too_many: `worker actions exceed the ${MAX_WORKER_ACTIONS}-action limit`,\n\t\tworker_actions_path_too_long: \"worker action path exceeds the allowed limit\",\n\t\tworker_actions_field_too_large: \"worker actions contain a field larger than the allowed limit\",\n\t\tworker_actions_payload_too_large: \"worker actions exceed the aggregate payload limit\",\n\t};\n\treturn { kind: \"rejected\", reasonCode, message: messages[reasonCode] };\n}\n\nfunction validateWorkerActions(\n\traw: unknown,\n\tvalidation?: ToolArgumentValidationOptions,\n): readonly unknown[] | undefined {\n\ttry {\n\t\tconst validated = validateToolArguments(\n\t\t\tworkerActionsTool,\n\t\t\t{ type: \"toolCall\", id: \"worker-actions\", name: \"worker_actions\", arguments: { actions: raw } },\n\t\t\tvalidation,\n\t\t).actions;\n\t\treturn Array.isArray(validated) ? validated : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Normalizes every model or direct caller before it can reach the gateway, journal, or filesystem.\n * Any malformed entry rejects the entire batch so a partially malformed request cannot mutate a\n * surprising prefix.\n */\nfunction normalizeWorkerActions(raw: readonly unknown[]): WorkerActionParseOutcome {\n\tif (raw.length > MAX_WORKER_ACTIONS) return rejectWorkerActions(\"worker_actions_too_many\");\n\tconst actions: WorkerAction[] = [];\n\tlet payloadChars = 0;\n\tfor (const entry of raw) {\n\t\tif (!isPlainRecord(entry)) return rejectWorkerActions(\"worker_actions_invalid_shape\");\n\t\tconst descriptors = Object.getOwnPropertyDescriptors(entry);\n\t\tconst op = descriptors.op?.value;\n\t\tif (op !== \"write\" && op !== \"edit\") return rejectWorkerActions(\"worker_actions_invalid_shape\");\n\t\tconst expectedKeys = op === \"write\" ? [\"op\", \"path\", \"content\"] : [\"op\", \"path\", \"old\", \"new\"];\n\t\tif (\n\t\t\tReflect.ownKeys(entry).length !== expectedKeys.length ||\n\t\t\t!expectedKeys.every((key) => {\n\t\t\t\tconst descriptor = descriptors[key];\n\t\t\t\treturn descriptor?.enumerable === true && \"value\" in descriptor;\n\t\t\t})\n\t\t)\n\t\t\treturn rejectWorkerActions(\"worker_actions_invalid_shape\");\n\t\tconst actionPath = descriptors.path?.value;\n\t\tif (typeof actionPath !== \"string\" || actionPath.length === 0)\n\t\t\treturn rejectWorkerActions(\"worker_actions_invalid_shape\");\n\t\tif (actionPath.length > MAX_WORKER_ACTION_PATH_CHARS) return rejectWorkerActions(\"worker_actions_path_too_long\");\n\t\tif (op === \"write\") {\n\t\t\tconst content = descriptors.content?.value;\n\t\t\tif (typeof content !== \"string\") return rejectWorkerActions(\"worker_actions_invalid_shape\");\n\t\t\tif (content.length > MAX_WORKER_ACTION_TEXT_CHARS)\n\t\t\t\treturn rejectWorkerActions(\"worker_actions_field_too_large\");\n\t\t\tif (payloadChars + content.length > MAX_WORKER_ACTION_PAYLOAD_CHARS)\n\t\t\t\treturn rejectWorkerActions(\"worker_actions_payload_too_large\");\n\t\t\tpayloadChars += content.length;\n\t\t\tactions.push({ op: \"write\", path: actionPath, content });\n\t\t} else {\n\t\t\tconst old = descriptors.old?.value;\n\t\t\tconst replacement = descriptors.new?.value;\n\t\t\tif (typeof old !== \"string\" || old.length === 0 || typeof replacement !== \"string\")\n\t\t\t\treturn rejectWorkerActions(\"worker_actions_invalid_shape\");\n\t\t\tif (old.length > MAX_WORKER_ACTION_TEXT_CHARS || replacement.length > MAX_WORKER_ACTION_TEXT_CHARS)\n\t\t\t\treturn rejectWorkerActions(\"worker_actions_field_too_large\");\n\t\t\tif (payloadChars + old.length + replacement.length > MAX_WORKER_ACTION_PAYLOAD_CHARS)\n\t\t\t\treturn rejectWorkerActions(\"worker_actions_payload_too_large\");\n\t\t\tpayloadChars += old.length + replacement.length;\n\t\t\tactions.push({ op: \"edit\", path: actionPath, old, new: replacement });\n\t\t}\n\t}\n\treturn { kind: \"accepted\", actions };\n}\n\nexport function parseWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): WorkerActionParseOutcome {\n\tif (raw === undefined) return { kind: \"accepted\", actions: [] };\n\tconst candidate = Array.isArray(raw) ? normalizeWorkerActions(raw) : undefined;\n\tif (candidate?.kind === \"rejected\") return candidate;\n\tconst validated = validateWorkerActions(candidate?.actions ?? raw, validation);\n\tif (!validated) return rejectWorkerActions(\"worker_actions_invalid_shape\");\n\treturn normalizeWorkerActions(validated);\n}\n\nexport interface AppliedActionsReport {\n\t/** Repo-relative paths actually changed. */\n\tchangedFiles: string[];\n\t/** Grant refusals (execution-time enforcement) — surfaced, never silent. */\n\trefused: Array<{ path: string; reason: string }>;\n\t/** Actions that were in scope but could not be applied (missing file, old-text not found). */\n\tfailed: Array<{ path: string; reason: string }>;\n\t/** Durable replay blocks. The parent must inspect workspace/evidence instead of re-executing. */\n\tinspectionRequired: Array<{\n\t\tpath: string;\n\t\tactionId: string;\n\t\tstate: WorkerActionInspectionRequired[\"state\"];\n\t\treasonCode: string;\n\t\tevidencePointer?: string;\n\t}>;\n}\n\nexport function applyWorkerActions(args: {\n\tactions: readonly WorkerAction[];\n\tgateway: CapabilityGateway;\n\ttoolManifests: readonly ToolCapabilityManifest[];\n\tcwd: string;\n\t/** Optional durable mutation journal for one fenced worker attempt. */\n\tactionJournal?: WorkerActionJournal;\n}): AppliedActionsReport {\n\tconst report: AppliedActionsReport = { changedFiles: [], refused: [], failed: [], inspectionRequired: [] };\n\tconst manifests = new Map(args.toolManifests.map((manifest) => [manifest.toolName, manifest]));\n\tconst parsedActions = parseWorkerActions(args.actions);\n\tif (parsedActions.kind === \"rejected\") {\n\t\treport.failed.push({ path: \"<worker_actions>\", reason: `${parsedActions.reasonCode}: ${parsedActions.message}` });\n\t\treturn report;\n\t}\n\tfor (const [index, action] of parsedActions.actions.entries()) {\n\t\tconst manifest = manifests.get(action.op);\n\t\tif (!manifest) {\n\t\t\treport.refused.push({\n\t\t\t\tpath: action.path,\n\t\t\t\treason: `${action.op} is not present in the compiled tool manifest`,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\targs.gateway.authorizeToolCall(manifest, action.op, { path: action.path });\n\t\t} catch (error) {\n\t\t\tif (error instanceof CapabilityGatewayDeniedError) {\n\t\t\t\treport.refused.push({ path: action.path, reason: `${error.reasonCode}: ${error.message}` });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\tlet target: string;\n\t\tlet relativePath: string;\n\t\ttry {\n\t\t\ttarget = safeRealpathSync(resolve(args.cwd, action.path));\n\t\t\trelativePath = relative(args.cwd, target).replaceAll(\"\\\\\", \"/\");\n\t\t} catch {\n\t\t\treport.failed.push({ path: action.path, reason: \"target path could not be resolved\" });\n\t\t\tcontinue;\n\t\t}\n\t\tlet journalPermit: ReturnType<WorkerActionJournal[\"begin\"]> | undefined;\n\t\tif (args.actionJournal) {\n\t\t\ttry {\n\t\t\t\tjournalPermit = args.actionJournal.begin({ index, action, targetPath: target });\n\t\t\t} catch {\n\t\t\t\treport.failed.push({ path: action.path, reason: \"mutation journal intent could not be persisted\" });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (journalPermit.kind === \"inspection_required\") {\n\t\t\t\treport.inspectionRequired.push({\n\t\t\t\t\tpath: action.path,\n\t\t\t\t\tactionId: journalPermit.actionId,\n\t\t\t\t\tstate: journalPermit.state,\n\t\t\t\t\treasonCode: journalPermit.reasonCode,\n\t\t\t\t\t...(journalPermit.evidencePointer ? { evidencePointer: journalPermit.evidencePointer } : {}),\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\tlet mutationStarted = false;\n\t\ttry {\n\t\t\tif (action.op === \"write\") {\n\t\t\t\t// mkdir may create one or more parents before an error or process interruption. Once it\n\t\t\t\t// is invoked the durable intent is conservatively unknown, never replayed as a precondition failure.\n\t\t\t\tmutationStarted = true;\n\t\t\t\tmkdirSync(dirname(target), { recursive: true });\n\t\t\t\twriteFileSync(target, action.content ?? \"\", \"utf-8\");\n\t\t\t} else {\n\t\t\t\tif (!existsSync(target)) {\n\t\t\t\t\tthrow new Error(\"worker_action_file_missing\");\n\t\t\t\t}\n\t\t\t\tconst current = readBoundedTextFileSync(\n\t\t\t\t\ttarget,\n\t\t\t\t\tMAX_WORKER_ACTION_EDIT_TARGET_BYTES,\n\t\t\t\t\t\"Worker action edit target\",\n\t\t\t\t);\n\t\t\t\tif (!action.old || !current.includes(action.old)) {\n\t\t\t\t\tthrow new Error(\"worker_action_old_text_missing\");\n\t\t\t\t}\n\t\t\t\tmutationStarted = true;\n\t\t\t\twriteFileSync(\n\t\t\t\t\ttarget,\n\t\t\t\t\tcurrent.replace(action.old, () => action.new ?? \"\"),\n\t\t\t\t\t\"utf-8\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (!report.changedFiles.includes(relativePath)) report.changedFiles.push(relativePath);\n\t\t\tjournalPermit?.kind === \"execute\" &&\n\t\t\t\targs.actionJournal?.recordSucceeded(journalPermit, {\n\t\t\t\t\tevidencePointer: `workspace:file:${target}`,\n\t\t\t\t});\n\t\t} catch {\n\t\t\tif (mutationStarted && journalPermit?.kind === \"execute\") {\n\t\t\t\treport.inspectionRequired.push({\n\t\t\t\t\tpath: action.path,\n\t\t\t\t\tactionId: journalPermit.actionId,\n\t\t\t\t\tstate: \"unknown\",\n\t\t\t\t\treasonCode: \"worker_action_outcome_unknown\",\n\t\t\t\t\tevidencePointer: `workspace:file:${target}`,\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\tif (journalPermit?.kind === \"execute\") {\n\t\t\t\t\ttry {\n\t\t\t\t\t\targs.actionJournal?.recordFailed(journalPermit, \"worker_action_precondition_failed\", {\n\t\t\t\t\t\t\tevidencePointer: `workspace:file:${target}`,\n\t\t\t\t\t\t});\n\t\t\t\t\t} catch {\n\t\t\t\t\t\treport.inspectionRequired.push({\n\t\t\t\t\t\t\tpath: action.path,\n\t\t\t\t\t\t\tactionId: journalPermit.actionId,\n\t\t\t\t\t\t\tstate: \"unknown\",\n\t\t\t\t\t\t\treasonCode: \"worker_action_outcome_unknown\",\n\t\t\t\t\t\t\tevidencePointer: `workspace:file:${target}`,\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treport.failed.push({ path: action.path, reason: \"action precondition or filesystem operation failed\" });\n\t\t\t}\n\t\t}\n\t}\n\treturn report;\n}\n"]}

package/dist/core/delegation/worker-agent-control-coordinator.d.ts

@@ -0,0 +1,75 @@
+import type { AgentMessage } from "@caupulican/pi-agent-core";
+import type { WorkerDelegationRunOutcome } from "../agent-session-contracts.ts";
+import type { LaneRecord } from "../autonomy/lane-tracker.ts";
+import type { AttemptRuntimeState } from "../orchestration/task-runtime.ts";
+import { type WorkerAgentControlPort } from "./worker-agent-control.ts";
+import type { WorkerConversation } from "./worker-conversation-store.ts";
+import type { WorkerDelegationRequest } from "./worker-delegation-request.ts";
+import type { WorkerDispatchScheduler } from "./worker-dispatch-scheduler.ts";
+import type { WorkerLifecycle } from "./worker-lifecycle.ts";
+export interface WorkerAgentControlCoordinatorOptions {
+    agentDir: string;
+    parentSessionId: string;
+    processOwnerId: string;
+    isControlAvailable(): boolean;
+    getLifecycle(): WorkerLifecycle;
+    recoveredRequest(attempt: AttemptRuntimeState): WorkerDelegationRequest;
+    run(request: WorkerDelegationRequest, record: LaneRecord): Promise<WorkerDelegationRunOutcome>;
+    scheduler: Pick<WorkerDispatchScheduler, "enqueue" | "track" | "drain">;
+    statusChanged(): void;
+    abortLane(laneId: string, reasonCode: string): void;
+    cancelLane(laneId: string, reasonCode: string): LaneRecord | undefined;
+}
+/**
+ * Sole owner of model-facing logical-agent controls and their durable inboxes.
+ *
+ * It deliberately owns no worker execution policy, provider loop, or terminal persistence. Those
+ * controller-owned callbacks keep this narrow port from becoming a second lifecycle authority.
+ */
+export declare class WorkerAgentControlCoordinator implements WorkerAgentControlPort {
+    private readonly options;
+    private readonly mailboxes;
+    private readonly stateListeners;
+    constructor(options: WorkerAgentControlCoordinatorOptions);
+    getProcessOwnerId(): string;
+    sendWorkerAgentMessage(agentId: string, message: string): {
+        messageId: string;
+        queued: true;
+    };
+    followUpWorkerAgent(agentId: string, message: string): {
+        started: boolean;
+        steering: boolean;
+        messageId: string;
+        record?: LaneRecord;
+        skipReason?: string;
+    };
+    interruptWorkerAgent(agentId: string): {
+        interrupted: boolean;
+        reason?: string;
+    };
+    resumeWorkerAgent(agentId: string): {
+        started: boolean;
+        record?: LaneRecord;
+        skipReason?: string;
+    };
+    cancelWorkerAgent(agentId: string, reasonCode?: string): LaneRecord | undefined;
+    /** Event-driven wait: durable projection plus state/mailbox notifications, never output polling. */
+    waitForWorkerAgent(agentId: string, timeoutMs?: number): Promise<{
+        status: "active" | "suspended" | "idle" | "unknown";
+    }>;
+    /** Read mailbox items at a safe boundary and reconcile the narrow append-before-ack crash window. */
+    mailboxMessagesForConversation(agentId: string, conversation: WorkerConversation, includeFollowUp: boolean): AgentMessage[];
+    /** Acknowledge only after the exact child transcript message has been durably appended. */
+    acknowledgeMailboxMessage(agentId: string, message: {
+        role: string;
+        content: unknown;
+    }): void;
+    /** Called by controller-owned execution transitions after lifecycle state changed. */
+    signalStateChanged(): void;
+    private requireControl;
+    private requireKnownAgent;
+    private getMailbox;
+    private subscribeStateChanges;
+    private mailboxMessage;
+}
+//# sourceMappingURL=worker-agent-control-coordinator.d.ts.map

package/dist/core/delegation/worker-agent-control-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-agent-control-coordinator.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-agent-control-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,KAAK,sBAAsB,EAA+C,MAAM,2BAA2B,CAAC;AACrH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,WAAW,oCAAoC;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,IAAI,OAAO,CAAC;IAC9B,YAAY,IAAI,eAAe,CAAC;IAChC,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,uBAAuB,CAAC;IACxE,GAAG,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/F,SAAS,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC;IACxE,aAAa,IAAI,IAAI,CAAC;IACtB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;CACvE;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,YAAW,sBAAsB;IAC3E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IACnE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;IAExD,YAAY,OAAO,EAAE,oCAAoC,EAExD;IAED,iBAAiB,IAAI,MAAM,CAE1B;IAED,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,CAAA;KAAE,CAM5F;IAED,mBAAmB,CAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACb;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAiCtG;IAED,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAgB/E;IAED,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAYjG;IAED,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,SAAoB,GAAG,UAAU,GAAG,SAAS,CAUzF;IAED,oGAAoG;IACpG,kBAAkB,CACjB,OAAO,EAAE,MAAM,EACf,SAAS,SAAS,GAChB,OAAO,CAAC;QAAE,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAsClE;IAED,qGAAqG;IACrG,8BAA8B,CAC7B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,kBAAkB,EAChC,eAAe,EAAE,OAAO,GACtB,YAAY,EAAE,CAUhB;IAED,2FAA2F;IAC3F,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAI5F;IAED,sFAAsF;IACtF,kBAAkB,IAAI,IAAI,CAEzB;IAED,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,cAAc;CAOtB","sourcesContent":["import type { AgentMessage } from \"@caupulican/pi-agent-core\";\nimport type { WorkerDelegationRunOutcome } from \"../agent-session-contracts.ts\";\nimport type { LaneRecord } from \"../autonomy/lane-tracker.ts\";\nimport type { AgentBindingContract } from \"../orchestration/contracts.ts\";\nimport type { AttemptRuntimeState } from \"../orchestration/task-runtime.ts\";\nimport { type WorkerAgentControlPort, WorkerAgentMailbox, type WorkerAgentMessage } from \"./worker-agent-control.ts\";\nimport type { WorkerConversation } from \"./worker-conversation-store.ts\";\nimport type { WorkerDelegationRequest } from \"./worker-delegation-request.ts\";\nimport type { WorkerDispatchScheduler } from \"./worker-dispatch-scheduler.ts\";\nimport type { WorkerLifecycle } from \"./worker-lifecycle.ts\";\n\nexport interface WorkerAgentControlCoordinatorOptions {\n\tagentDir: string;\n\tparentSessionId: string;\n\tprocessOwnerId: string;\n\tisControlAvailable(): boolean;\n\tgetLifecycle(): WorkerLifecycle;\n\trecoveredRequest(attempt: AttemptRuntimeState): WorkerDelegationRequest;\n\trun(request: WorkerDelegationRequest, record: LaneRecord): Promise<WorkerDelegationRunOutcome>;\n\tscheduler: Pick<WorkerDispatchScheduler, \"enqueue\" | \"track\" | \"drain\">;\n\tstatusChanged(): void;\n\tabortLane(laneId: string, reasonCode: string): void;\n\tcancelLane(laneId: string, reasonCode: string): LaneRecord | undefined;\n}\n\n/**\n * Sole owner of model-facing logical-agent controls and their durable inboxes.\n *\n * It deliberately owns no worker execution policy, provider loop, or terminal persistence. Those\n * controller-owned callbacks keep this narrow port from becoming a second lifecycle authority.\n */\nexport class WorkerAgentControlCoordinator implements WorkerAgentControlPort {\n\tprivate readonly options: WorkerAgentControlCoordinatorOptions;\n\tprivate readonly mailboxes = new Map<string, WorkerAgentMailbox>();\n\tprivate readonly stateListeners = new Set<() => void>();\n\n\tconstructor(options: WorkerAgentControlCoordinatorOptions) {\n\t\tthis.options = options;\n\t}\n\n\tgetProcessOwnerId(): string {\n\t\treturn this.options.processOwnerId;\n\t}\n\n\tsendWorkerAgentMessage(agentId: string, message: string): { messageId: string; queued: true } {\n\t\tthis.requireControl();\n\t\tconst agent = this.requireKnownAgent(agentId);\n\t\tconst queued = this.getMailbox(agent.agentId).enqueue({ kind: \"follow_up\", content: message });\n\t\tthis.signalStateChanged();\n\t\treturn { messageId: queued.messageId, queued: true };\n\t}\n\n\tfollowUpWorkerAgent(\n\t\tagentId: string,\n\t\tmessage: string,\n\t): { started: boolean; steering: boolean; messageId: string; record?: LaneRecord; skipReason?: string } {\n\t\tthis.requireControl();\n\t\tconst agent = this.requireKnownAgent(agentId);\n\t\tconst canonicalAgentId = agent.agentId;\n\t\tconst active = agent.activeAttemptId\n\t\t\t? this.options.getLifecycle().getTaskRuntimeSnapshot().attempts[agent.activeAttemptId]\n\t\t\t: undefined;\n\t\tif (active?.status === \"running\" || active?.status === \"leased\") {\n\t\t\tconst queued = this.getMailbox(canonicalAgentId).enqueue({ kind: \"steer\", content: message });\n\t\t\tthis.signalStateChanged();\n\t\t\treturn { started: false, steering: true, messageId: queued.messageId };\n\t\t}\n\t\tif (agent.status !== \"registered\") {\n\t\t\treturn { started: false, steering: false, messageId: \"\", skipReason: `agent_${agent.status}` };\n\t\t}\n\t\tconst queued = this.getMailbox(canonicalAgentId).enqueue({ kind: \"follow_up\", content: message });\n\t\ttry {\n\t\t\tconst prepared = this.options\n\t\t\t\t.getLifecycle()\n\t\t\t\t.prepareAgentTurn({ agentId: canonicalAgentId, instructions: message });\n\t\t\tthis.options.scheduler.enqueue(prepared.record, this.options.recoveredRequest(prepared.attempt));\n\t\t\tthis.options.statusChanged();\n\t\t\tthis.options.scheduler.drain();\n\t\t\tthis.signalStateChanged();\n\t\t\treturn { started: true, steering: false, messageId: queued.messageId, record: prepared.record };\n\t\t} catch (error) {\n\t\t\treturn {\n\t\t\t\tstarted: false,\n\t\t\t\tsteering: false,\n\t\t\t\tmessageId: queued.messageId,\n\t\t\t\tskipReason: error instanceof Error ? error.message : String(error),\n\t\t\t};\n\t\t}\n\t}\n\n\tinterruptWorkerAgent(agentId: string): { interrupted: boolean; reason?: string } {\n\t\tthis.requireControl();\n\t\tconst agent = this.requireKnownAgent(agentId);\n\t\tconst attemptId = agent.activeAttemptId;\n\t\tconst attempt = attemptId ? this.options.getLifecycle().getTaskRuntimeSnapshot().attempts[attemptId] : undefined;\n\t\tif (!attempt || (attempt.status !== \"running\" && attempt.status !== \"leased\")) {\n\t\t\treturn { interrupted: false, reason: \"agent_not_running\" };\n\t\t}\n\t\ttry {\n\t\t\tthis.options.getLifecycle().suspendAgent(attempt.taskId, agent.agentId, this.options.processOwnerId);\n\t\t\tthis.options.abortLane(attempt.taskId, \"agent_interrupted\");\n\t\t\tthis.signalStateChanged();\n\t\t\treturn { interrupted: true };\n\t\t} catch (error) {\n\t\t\treturn { interrupted: false, reason: error instanceof Error ? error.message : String(error) };\n\t\t}\n\t}\n\n\tresumeWorkerAgent(agentId: string): { started: boolean; record?: LaneRecord; skipReason?: string } {\n\t\tthis.requireControl();\n\t\tconst agent = this.requireKnownAgent(agentId);\n\t\tconst attemptId = agent.activeAttemptId;\n\t\tconst attempt = attemptId ? this.options.getLifecycle().getTaskRuntimeSnapshot().attempts[attemptId] : undefined;\n\t\tif (!attempt || attempt.status !== \"suspended\") return { started: false, skipReason: \"agent_not_suspended\" };\n\t\tconst record = this.options.getLifecycle().getRecord(attempt.taskId);\n\t\tif (!record) return { started: false, skipReason: \"orchestration_projection_missing\" };\n\t\tconst promise = this.options.run(this.options.recoveredRequest(attempt), record);\n\t\tthis.options.scheduler.track(record.laneId, promise);\n\t\tthis.signalStateChanged();\n\t\treturn { started: true, record };\n\t}\n\n\tcancelWorkerAgent(agentId: string, reasonCode = \"agent_cancelled\"): LaneRecord | undefined {\n\t\tthis.requireControl();\n\t\tconst agent = this.requireKnownAgent(agentId);\n\t\tconst attemptId = agent.activeAttemptId;\n\t\tconst attempt = attemptId ? this.options.getLifecycle().getTaskRuntimeSnapshot().attempts[attemptId] : undefined;\n\t\tif (!attempt) return undefined;\n\t\tthis.options.abortLane(attempt.taskId, reasonCode);\n\t\tconst record = this.options.cancelLane(attempt.taskId, reasonCode);\n\t\tthis.signalStateChanged();\n\t\treturn record;\n\t}\n\n\t/** Event-driven wait: durable projection plus state/mailbox notifications, never output polling. */\n\twaitForWorkerAgent(\n\t\tagentId: string,\n\t\ttimeoutMs = 30_000,\n\t): Promise<{ status: \"active\" | \"suspended\" | \"idle\" | \"unknown\" }> {\n\t\tthis.requireControl();\n\t\tconst canonicalAgentId = agentId.trim();\n\t\tconst boundedTimeoutMs = Number.isFinite(timeoutMs)\n\t\t\t? Math.max(1, Math.min(Math.floor(timeoutMs), 300_000))\n\t\t\t: 30_000;\n\t\tconst currentStatus = (): \"active\" | \"suspended\" | \"idle\" | \"unknown\" => {\n\t\t\tconst agent = this.options.getLifecycle().getAgent(canonicalAgentId);\n\t\t\tif (!agent) return \"unknown\";\n\t\t\tif (agent.status === \"active\" || agent.status === \"resuming\") return \"active\";\n\t\t\tif (agent.status === \"suspended\") return \"suspended\";\n\t\t\treturn \"idle\";\n\t\t};\n\t\tconst immediate = currentStatus();\n\t\tif (immediate !== \"active\") return Promise.resolve({ status: immediate });\n\t\treturn new Promise((resolve) => {\n\t\t\tlet settled = false;\n\t\t\tconst settle = () => {\n\t\t\t\tif (settled) return;\n\t\t\t\tconst next = currentStatus();\n\t\t\t\tif (next === \"active\") return;\n\t\t\t\tsettled = true;\n\t\t\t\tunsubscribeMailbox();\n\t\t\t\tunsubscribeState();\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tresolve({ status: next });\n\t\t\t};\n\t\t\tconst unsubscribeMailbox = this.getMailbox(canonicalAgentId).subscribe(settle);\n\t\t\tconst unsubscribeState = this.subscribeStateChanges(settle);\n\t\t\tconst timeout = setTimeout(() => {\n\t\t\t\tif (settled) return;\n\t\t\t\tsettled = true;\n\t\t\t\tunsubscribeMailbox();\n\t\t\t\tunsubscribeState();\n\t\t\t\tresolve({ status: currentStatus() });\n\t\t\t}, boundedTimeoutMs);\n\t\t\tif (typeof timeout === \"object\" && \"unref\" in timeout) timeout.unref();\n\t\t});\n\t}\n\n\t/** Read mailbox items at a safe boundary and reconcile the narrow append-before-ack crash window. */\n\tmailboxMessagesForConversation(\n\t\tagentId: string,\n\t\tconversation: WorkerConversation,\n\t\tincludeFollowUp: boolean,\n\t): AgentMessage[] {\n\t\tconst mailbox = this.getMailbox(agentId);\n\t\tconst pending = mailbox.pending();\n\t\tif (pending.length === 0) return [];\n\t\tconst delivered = conversation.findDeliveredWorkerControlMessageIds(pending.map((message) => message.messageId));\n\t\tfor (const messageId of delivered) mailbox.acknowledgeDelivered(messageId);\n\t\treturn mailbox\n\t\t\t.pending()\n\t\t\t.filter((message) => message.kind === \"steer\" || includeFollowUp)\n\t\t\t.map((message) => this.mailboxMessage(message));\n\t}\n\n\t/** Acknowledge only after the exact child transcript message has been durably appended. */\n\tacknowledgeMailboxMessage(agentId: string, message: { role: string; content: unknown }): void {\n\t\tif (message.role !== \"user\" || typeof message.content !== \"string\") return;\n\t\tconst messageId = /^\\[Worker control (worker-message-[^\\]]+)\\]\\n/.exec(message.content)?.[1];\n\t\tif (messageId) this.getMailbox(agentId).acknowledgeDelivered(messageId);\n\t}\n\n\t/** Called by controller-owned execution transitions after lifecycle state changed. */\n\tsignalStateChanged(): void {\n\t\tfor (const listener of this.stateListeners) listener();\n\t}\n\n\tprivate requireControl(): void {\n\t\tif (!this.options.isControlAvailable()) {\n\t\t\tthrow new Error(\"Worker delegation control is unavailable in this UAC surface.\");\n\t\t}\n\t}\n\n\tprivate requireKnownAgent(agentId: string): AgentBindingContract {\n\t\tconst normalized = agentId.trim();\n\t\tif (!normalized) throw new Error(\"Logical worker agent id is required.\");\n\t\tconst agent = this.options.getLifecycle().getAgent(normalized);\n\t\tif (!agent) throw new Error(`Unknown logical worker agent '${normalized}'.`);\n\t\treturn agent;\n\t}\n\n\tprivate getMailbox(agentId: string): WorkerAgentMailbox {\n\t\tlet mailbox = this.mailboxes.get(agentId);\n\t\tif (!mailbox) {\n\t\t\tmailbox = new WorkerAgentMailbox({\n\t\t\t\tagentDir: this.options.agentDir,\n\t\t\t\tparentSessionId: this.options.parentSessionId,\n\t\t\t\tagentId,\n\t\t\t});\n\t\t\tthis.mailboxes.set(agentId, mailbox);\n\t\t}\n\t\treturn mailbox;\n\t}\n\n\tprivate subscribeStateChanges(listener: () => void): () => void {\n\t\tthis.stateListeners.add(listener);\n\t\treturn () => this.stateListeners.delete(listener);\n\t}\n\n\tprivate mailboxMessage(message: WorkerAgentMessage): AgentMessage {\n\t\treturn {\n\t\t\trole: \"user\",\n\t\t\tcontent: `[Worker control ${message.messageId}]\\n${message.content}`,\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t}\n}\n"]}