@cleanslate/sdk 1.0.7 → 1.0.9

package/dist/node/cleanSlateManagedAuth.js

@@ -0,0 +1,123 @@
+/*---------------------------------------------------------------------------------------------
+ * Copyright (c) CleanSlate. All rights reserved.
+ * Licensed under the MIT License. See License.txt in the project root for license information.
+ *--------------------------------------------------------------------------------------------*/
+import { spawnSync } from 'node:child_process';
+const DEFAULT_API_BASE_URL = 'https://api.thewariend.com/api';
+function resolveApiBaseUrl(value) {
+    const baseUrl = (value?.trim() || process.env['CLEANSLATE_API_BASE_URL']?.trim() || DEFAULT_API_BASE_URL).replace(/\/+$/, '');
+    const parsed = new URL(baseUrl);
+    const localDevelopment = isLocalHostname(parsed.hostname);
+    if (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && localDevelopment)) {
+        throw new Error('CleanSlate authentication requires HTTPS (HTTP is allowed only for local development).');
+    }
+    if (parsed.username || parsed.password || parsed.search || parsed.hash) {
+        throw new Error('CleanSlate authentication API URLs cannot contain credentials, query parameters, or fragments.');
+    }
+    return baseUrl;
+}
+function isLocalHostname(hostname) {
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';
+}
+function seconds(value, fallback, minimum, maximum) {
+    return typeof value === 'number' && Number.isFinite(value)
+        ? Math.min(maximum, Math.max(minimum, value))
+        : fallback;
+}
+async function responseError(response) {
+    const body = await response.json().catch(() => ({}));
+    const validation = body.errors ? Object.values(body.errors)[0]?.[0] : undefined;
+    return new Error(validation || body.message || body.error || `CleanSlate authentication failed (${response.status}).`);
+}
+async function loadEntitlements(baseUrl, token, fetcher, signal) {
+    const response = await fetcher(`${baseUrl}/cleanslate/entitlements`, {
+        headers: { Accept: 'application/json', Authorization: `Bearer ${token}`, 'Cache-Control': 'no-store' },
+        signal
+    });
+    if (!response.ok) {
+        throw await responseError(response);
+    }
+    const body = await response.json();
+    if (!body.data) {
+        throw new Error('CleanSlate authentication succeeded, but no managed-model entitlements were returned.');
+    }
+    return body.data;
+}
+function openSystemBrowser(url) {
+    const command = process.platform === 'darwin' ? '/usr/bin/open' : process.platform === 'win32' ? 'rundll32.exe' : 'xdg-open';
+    const args = process.platform === 'win32' ? ['url.dll,FileProtocolHandler', url] : [url];
+    const result = spawnSync(command, args, { stdio: 'ignore' });
+    if (result.status !== 0) {
+        throw new Error(`Could not open the system browser. Open this URL manually: ${url}`);
+    }
+}
+function wait(milliseconds, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(new Error('CleanSlate sign-in was cancelled.'));
+            return;
+        }
+        const finish = () => {
+            signal?.removeEventListener('abort', cancel);
+            resolve();
+        };
+        const timeout = setTimeout(finish, milliseconds);
+        const cancel = () => {
+            clearTimeout(timeout);
+            signal?.removeEventListener('abort', cancel);
+            reject(new Error('CleanSlate sign-in was cancelled.'));
+        };
+        signal?.addEventListener('abort', cancel, { once: true });
+    });
+}
+/** Open the browser-based device flow and return a token usable by provider `cleanslate`. */
+export async function authenticateCleanSlateInBrowser(options = {}) {
+    const baseUrl = resolveApiBaseUrl(options.apiBaseUrl);
+    const fetcher = options.fetcher ?? fetch;
+    const startResponse = await fetcher(`${baseUrl}/auth/device`, {
+        method: 'POST',
+        headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            device_name: options.deviceName?.trim() || `CleanSlate SDK (${process.platform})`
+        }),
+        signal: options.signal
+    });
+    if (!startResponse.ok) {
+        throw await responseError(startResponse);
+    }
+    const authorization = await startResponse.json();
+    if (!authorization.device_code || !authorization.verification_uri_complete) {
+        throw new Error('The server did not return a valid CleanSlate device authorization.');
+    }
+    const verificationUrl = new URL(authorization.verification_uri_complete);
+    const localVerificationUrl = verificationUrl.protocol === 'http:' && isLocalHostname(verificationUrl.hostname);
+    if ((verificationUrl.protocol !== 'https:' && !localVerificationUrl) || verificationUrl.username || verificationUrl.password) {
+        throw new Error('CleanSlate returned an insecure device authorization URL.');
+    }
+    options.onReady?.(verificationUrl.href);
+    await (options.openBrowser ?? openSystemBrowser)(verificationUrl.href);
+    const deadline = Date.now() + seconds(authorization.expires_in, 600, 1, 3_600) * 1_000;
+    const interval = seconds(authorization.interval, 2, 1, 60) * 1_000;
+    const sleep = options.sleep ?? wait;
+    while (Date.now() < deadline) {
+        if (options.signal?.aborted) {
+            throw new Error('CleanSlate sign-in was cancelled.');
+        }
+        const tokenResponse = await fetcher(`${baseUrl}/auth/device/token`, {
+            method: 'POST',
+            headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
+            body: JSON.stringify({ device_code: authorization.device_code }),
+            signal: options.signal
+        });
+        const tokenBody = await tokenResponse.json().catch(() => ({}));
+        if (tokenResponse.ok && tokenBody.token) {
+            return { token: tokenBody.token, entitlements: await loadEntitlements(baseUrl, tokenBody.token, fetcher, options.signal) };
+        }
+        if (tokenBody.error !== 'authorization_pending') {
+            throw new Error(tokenBody.error || `CleanSlate authentication failed (${tokenResponse.status}).`);
+        }
+        await sleep(interval, options.signal);
+    }
+    throw new Error('CleanSlate browser sign-in timed out.');
+}
+//# sourceMappingURL=cleanSlateManagedAuth.js.map

package/dist/node/cleanSlateManagedAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanSlateManagedAuth.js","sourceRoot":"","sources":["../../src/node/cleanSlateManagedAuth.ts"],"names":[],"mappings":"AAAA;;;gGAGgG;AAEhG,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AA2B9D,SAAS,iBAAiB,CAAC,KAAc;IACxC,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9H,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,gBAAgB,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACxC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,CAAC;AACrF,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe,EAAE,OAAe;IAC7F,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA4E,CAAC;IAChI,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,OAAO,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,qCAAqC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;AACxH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAa,EAAE,OAAqB,EAAE,MAAoB;IAC1G,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,0BAA0B,EAAE;QACpE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;QACtG,MAAM;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA+C,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7H,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8DAA8D,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;AACF,CAAC;AAED,SAAS,IAAI,CAAC,YAAoB,EAAE,MAAoB;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YACvD,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,EAAE;YACnB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACX,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,UAAyC,EAAE;IAE3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,cAAc,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,mBAAmB,OAAO,CAAC,QAAQ,GAAG;SACjF,CAAC;QACF,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,IAAI,EAAmC,CAAC;IAClF,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACzE,MAAM,oBAAoB,GAAG,eAAe,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC/G,IAAI,CAAC,eAAe,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,eAAe,CAAC,QAAQ,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC9H,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,oBAAoB,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuC,CAAC;QACrG,IAAI,aAAa,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5H,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,qCAAqC,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/node/cleanSlateNodeAgentRuntime.d.ts

@@ -1,5 +1,6 @@
 import { CleanSlateStreamPart } from '../agent/cleanSlateAgentTypes.js';
-import { AIProvider, CleanSlateEmbeddingProvider, ICleanSlateConfiguration, ICleanSlateAgentRuntimeSnapshot, ICleanSlateLogger, ICleanSlatePendingAgentInteraction, IChatMessagePart } from '../protocol/cleanSlateAI.js';
+import { AIProvider, CleanSlateEmbeddingProvider, ICleanSlateConfiguration, ICleanSlateAgentRuntimeSnapshot, ICleanSlateLogger, ICleanSlateMainService, ICleanSlateManagedEntitlements, ICleanSlatePendingAgentInteraction, IChatMessagePart } from '../protocol/cleanSlateAI.js';
+import { CleanSlateManagedTokenCoordinator } from '../protocol/cleanSlateManagedTokenCoordinator.js';
 import { ICleanSlateTaskSessionSnapshot } from '../services/cleanSlateTaskSessionService.js';
 import { ICleanSlateThreadMessage } from '../services/cleanSlateThreadService.js';
 import type { CleanSlateTool } from '../tools/types.js';
@@ -7,6 +8,8 @@ import type { ICleanSlateDomainProfile } from '../agent/cleanSlateDomainProfile.
 import type { AgentDefinition } from '../composer/registry/agentSchema.js';
 export interface ICleanSlateNodeAgentRuntimeOptions {
     rootPath: string;
+    /** A desktop host can reuse its authenticated transport and runtime endpoints. */
+    mainService?: ICleanSlateMainService;
     /** Private host directory for per-workspace state such as edit recovery history. */
     workspaceStorageHome?: string;
     configuration: ICleanSlateConfiguration;
@@ -20,6 +23,9 @@ export interface ICleanSlateNodeAgentRuntimeOptions {
     instructions?: string | ((task: string) => string | Promise<string>);
     /** Whether browser automation should run without a visible browser window. */
     browserHeadless?: boolean;
+    browserAutomationService?: import('../host/browserAutomation.js').ICleanSlateBrowserAutomationService;
+    /** Child runtimes share the parent's desktop browser without owning its lifetime. */
+    disposeBrowserAutomationService?: boolean;
     approveCommand?: (request: {
         command: string;
         cwd?: string;
@@ -29,7 +35,18 @@ export interface ICleanSlateNodeAgentRuntimeOptions {
         type: string;
         [key: string]: any;
     }) => void;
+    /** Desktop hosts present artifacts in their own views instead of an external viewer. */
+    onArtifact?: (artifact: {
+        id: string;
+        type: string;
+        content: string;
+        metadata?: any;
+    }) => void;
     onManagedTokenRefresh?: (token: string) => void | Promise<void>;
+    /** Shared authority for hosted conversations, workers and account settings. */
+    managedTokenCoordinator?: CleanSlateManagedTokenCoordinator;
+    /** Surface-specific recovery copy. CLI hosts default to the setup command. */
+    managedSessionExpiredMessage?: string;
     fetcher?: typeof fetch;
     logger?: Partial<ICleanSlateLogger>;
     sessionId?: string;
@@ -43,6 +60,15 @@ export interface ICleanSlateNodeAgentRuntimeOptions {
     }) => boolean | Promise<boolean>;
     /** Multimodal parts explicitly attached by the host for a user turn. */
     resolveAttachments?: (task: string) => IChatMessagePart[] | Promise<IChatMessagePart[]>;
+    /** Maximum child agents owned by this runtime at once. */
+    maxConcurrentAgents?: number;
+    /** Receives portable child-agent lifecycle events for a host UI or logger. */
+    onAgentEvent?: (event: {
+        type: string;
+        [key: string]: any;
+    }) => void;
+    /** @internal Prevents recursive worker trees. */
+    workerDepth?: number;
 }
 export interface ICleanSlateNodeAgentSessionSnapshot {
     version: 1;
@@ -51,6 +77,12 @@ export interface ICleanSlateNodeAgentSessionSnapshot {
     task?: ICleanSlateTaskSessionSnapshot;
     threadHistory: ICleanSlateThreadMessage[];
 }
+export interface ICleanSlateNodeSideChat {
+    id: string;
+    title: string;
+    createdAt: number;
+    runtime: CleanSlateNodeAgentRuntime;
+}
 /**
  * Wires CleanSlate's existing execution loop to the Node host and complete tool registry.
  */
@@ -59,29 +91,47 @@ export declare class CleanSlateNodeAgentRuntime {
     private readonly rootPath;
     private readonly mainService;
     private readonly configService;
+    private readonly managedTokenCoordinator;
     private readonly headlessRuntime;
     private readonly queryRunner;
     private readonly cleanSlateService;
     private readonly agentSession;
     private readonly threadService;
     private readonly taskSessionService;
+    private readonly agentCoordinator;
+    private readonly sideChats;
     private readonly sessionId;
     private readonly contextService;
     constructor(options: ICleanSlateNodeAgentRuntimeOptions);
     run(task: string, signal?: AbortSignal): AsyncIterable<CleanSlateStreamPart>;
+    configureRun(configuration: ICleanSlateConfiguration, agentDefinition?: AgentDefinition): Promise<void>;
     plan(task: string, signal?: AbortSignal): AsyncIterable<CleanSlateStreamPart>;
     private runInPhase;
     resumePendingQuestion(answer: string, signal?: AbortSignal): AsyncIterable<CleanSlateStreamPart>;
     approvePlan(signal?: AbortSignal): AsyncIterable<CleanSlateStreamPart>;
     getPendingQuestion(): ICleanSlatePendingAgentInteraction | undefined;
+    rejectPlan(): void;
     getSessionSnapshot(): ICleanSlateNodeAgentSessionSnapshot;
     restoreSessionSnapshot(snapshot: ICleanSlateNodeAgentSessionSnapshot | undefined): void;
     clearConversation(): void;
+    /** Creates an independent conversational runtime attached to this session. */
+    createSideChat(options?: {
+        id?: string;
+        title?: string;
+        inheritContext?: boolean;
+    }): ICleanSlateNodeSideChat;
+    listSideChats(): Array<Omit<ICleanSlateNodeSideChat, 'runtime'>>;
+    getSideChat(id: string): ICleanSlateNodeSideChat | undefined;
+    closeSideChat(id: string): boolean;
     getModels(): Promise<string[]>;
+    getManagedEntitlements(): Promise<ICleanSlateManagedEntitlements>;
     private runMessages;
     getAvailableToolCount(): number;
     getResult(): import("./cleanSlateHeadlessRunner.js").ICleanSlateHeadlessRunResult;
     dispose(): void;
+    listChildAgents(): import("../services/cleanSlateAgentCoordinator.js").ICleanSlateChildAgentSnapshot[];
+    cancelChildAgent(agentId: string): boolean;
+    private runChildAgent;
     private buildPromptContext;
     private workspaceIsEmpty;
     private getToolDescriptions;

package/dist/node/cleanSlateNodeAgentRuntime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleanSlateNodeAgentRuntime.d.ts","sourceRoot":"","sources":["../../src/node/cleanSlateNodeAgentRuntime.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAKxE,OAAO,EACN,UAAU,EACV,2BAA2B,EAC3B,wBAAwB,EAExB,+BAA+B,EAC/B,iBAAiB,EAGjB,kCAAkC,EAClC,gBAAgB,EAChB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAgC,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAC3H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAIlF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAI3E,MAAM,WAAW,kCAAkC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,aAAa,EAAE,wBAAwB,CAAC;IACxC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,yEAAyE;IACzE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,iFAAiF;IACjF,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnG,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,uEAAuE;IACvE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/G,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,mCAAmC;IACnD,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,+BAA+B,CAAC;IACxC,IAAI,CAAC,EAAE,8BAA8B,CAAC;IACtC,aAAa,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AA4GD;;GAEG;AACH,qBAAa,0BAA0B;IAgB1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAfpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IACzE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG7B;gBAE2B,OAAO,EAAE,kCAAkC;IAkDjE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;IAI5E,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;YAIrE,UAAU;IA6BlB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;IAahG,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;IAgB7E,kBAAkB,IAAI,kCAAkC,GAAG,SAAS;IAIpE,kBAAkB,IAAI,mCAAmC;IAUzD,sBAAsB,CAAC,QAAQ,EAAE,mCAAmC,GAAG,SAAS,GAAG,IAAI;IASvF,iBAAiB,IAAI,IAAI;IAMzB,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAIf,WAAW;IAiC1B,qBAAqB,IAAI,MAAM;IAI/B,SAAS;IAIT,OAAO,IAAI,IAAI;YAOD,kBAAkB;IAchC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,mBAAmB;CAM3B;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACxD,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACtC,GAAG,wBAAwB,CA4E3B"}
+{"version":3,"file":"cleanSlateNodeAgentRuntime.d.ts","sourceRoot":"","sources":["../../src/node/cleanSlateNodeAgentRuntime.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAKxE,OAAO,EACN,UAAU,EACV,2BAA2B,EAC3B,wBAAwB,EAExB,+BAA+B,EAC/B,iBAAiB,EACjB,sBAAsB,EAEtB,8BAA8B,EAC9B,kCAAkC,EAClC,gBAAgB,EAChB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,iCAAiC,EAA+C,MAAM,kDAAkD,CAAC;AAClJ,OAAO,EAAgC,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAC3H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAKlF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAI3E,MAAM,WAAW,kCAAkC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,oFAAoF;IACpF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,aAAa,EAAE,wBAAwB,CAAC;IACxC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,yEAAyE;IACzE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,iFAAiF;IACjF,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB,CAAC,EAAE,OAAO,8BAA8B,EAAE,mCAAmC,CAAC;IACtG,qFAAqF;IACrF,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnG,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE,wFAAwF;IACxF,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,GAAG,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/F,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,iCAAiC,CAAC;IAC5D,8EAA8E;IAC9E,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,uEAAuE;IACvE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/G,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxF,0DAA0D;IAC1D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,KAAK,IAAI,CAAC;IACrE,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mCAAmC;IACnD,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,+BAA+B,CAAC;IACxC,IAAI,CAAC,EAAE,8BAA8B,CAAC;IACtC,aAAa,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,0BAA0B,CAAC;CACpC;AAyID;;GAEG;AACH,qBAAa,0BAA0B;IAmB1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAlBpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAoC;IAC5E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IACzE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IACxE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG7B;gBAE2B,OAAO,EAAE,kCAAkC;IA4EjE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;IAI7E,YAAY,CAAC,aAAa,EAAE,wBAAwB,EAAE,eAAe,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;YAIrE,UAAU;IA6BlB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;IAahG,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC;IAgB7E,kBAAkB,IAAI,kCAAkC,GAAG,SAAS;IAIpE,UAAU,IAAI,IAAI;IAKlB,kBAAkB,IAAI,mCAAmC;IAUzD,sBAAsB,CAAC,QAAQ,EAAE,mCAAmC,GAAG,SAAS,GAAG,IAAI;IASvF,iBAAiB,IAAI,IAAI;IAMzB,8EAA8E;IAC9E,cAAc,CAAC,OAAO,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,uBAAuB;IAkChH,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IAIhE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS;IAI5D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAUlC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAI9B,sBAAsB,IAAI,OAAO,CAAC,8BAA8B,CAAC;YAIlD,WAAW;IAiC1B,qBAAqB,IAAI,MAAM;IAI/B,SAAS;IAIT,OAAO,IAAI,IAAI;IAgBf,eAAe;IAIf,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;YAI5B,aAAa;YAmDb,kBAAkB;IAchC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,mBAAmB;CAM3B;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACxD,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACtC,GAAG,wBAAwB,CA4E3B"}

package/dist/node/cleanSlateNodeAgentRuntime.js

@@ -13,38 +13,68 @@ import { CleanSlateQueryRunner } from '../agent/cleanSlateQueryRunner.js';
 import { Event } from '../core/event.js';
 import { getCleanSlateContextDefaults } from '../protocol/cleanSlateModelCapabilities.js';
 import { CleanSlateService } from '../protocol/cleanSlateService.js';
+import { CleanSlateManagedTokenCoordinator } from '../protocol/cleanSlateManagedTokenCoordinator.js';
 import { CleanSlateTaskSessionService } from '../services/cleanSlateTaskSessionService.js';
 import { CleanSlateTaskKind, CleanSlateWorkspaceShape } from '../services/cleanSlateTaskState.js';
 import { CleanSlateThreadService } from '../services/cleanSlateThreadService.js';
+import { CleanSlateAgentCoordinator, formatCleanSlateChildAgentNotification } from '../services/cleanSlateAgentCoordinator.js';
 import { ALL_TOOLS } from '../tools/registry.js';
 import { CleanSlateHeadlessRuntime } from './cleanSlateHeadlessRunner.js';
 import { NodeCleanSlateMainService } from './cleanSlateNodeMainService.js';
 class NodeConfigurationService {
-    constructor(configuration, mainService, onManagedTokenRefresh, fetcher = fetch) {
+    constructor(configuration, mainService, onManagedTokenRefresh, managedSessionExpiredMessage = 'Your CleanSlate session expired. Run cleanslate --setup to sign in again.', fetcher = fetch, managedTokenCoordinator) {
         this.configuration = configuration;
         this.mainService = mainService;
         this.onManagedTokenRefresh = onManagedTokenRefresh;
+        this.managedSessionExpiredMessage = managedSessionExpiredMessage;
         this.fetcher = fetcher;
         this.onDidChangeConfiguration = Event.None;
+        this.managedTokenCoordinator = managedTokenCoordinator ?? new CleanSlateManagedTokenCoordinator(token => this.rotateManagedToken(token));
     }
     getConfiguration() {
+        const token = this.configuration.providers?.cleanslate?.apiKey;
+        const resolved = token ? this.managedTokenCoordinator.resolve(token) : token;
+        if (resolved !== token) {
+            this.configuration = {
+                ...this.configuration,
+                providers: {
+                    ...this.configuration.providers,
+                    cleanslate: { ...this.configuration.providers?.cleanslate, apiKey: resolved }
+                }
+            };
+        }
         return this.configuration;
     }
     getResolvedConfiguration() {
-        return Promise.resolve(this.configuration);
+        return Promise.resolve(this.getConfiguration());
     }
     updateConfiguration(config) {
-        this.configuration = { ...this.configuration, ...config };
+        const incomingManagedToken = config.providers?.cleanslate?.apiKey;
+        this.configuration = {
+            ...this.configuration,
+            ...config,
+            providers: config.providers ? {
+                ...config.providers,
+                cleanslate: config.providers.cleanslate ? {
+                    ...config.providers.cleanslate,
+                    apiKey: incomingManagedToken ? this.managedTokenCoordinator.resolve(incomingManagedToken) : incomingManagedToken
+                } : config.providers.cleanslate
+            } : this.configuration.providers
+        };
         return Promise.resolve();
     }
     async refreshManagedToken(rejectedToken) {
-        const current = this.configuration.providers?.cleanslate?.apiKey;
+        const current = this.getConfiguration().providers?.cleanslate?.apiKey;
         if (!current) {
             throw new Error('Sign in to CleanSlate again.');
         }
         if (rejectedToken && current !== rejectedToken) {
             return current;
         }
+        const response = await this.managedTokenCoordinator.refresh(current);
+        return response.token;
+    }
+    async rotateManagedToken(current) {
         const runtimeConfig = await this.mainService.getRuntimeConfig();
         const response = await this.fetcher(`${runtimeConfig.apiBaseUrl}/auth/refresh`, {
             method: 'POST',
@@ -52,24 +82,21 @@ class NodeConfigurationService {
         });
         const body = await this.readJson(response);
         if (response.status === 401) {
-            throw new Error('Your CleanSlate session expired. Run cleanslate --setup to sign in again.');
+            throw new Error(this.managedSessionExpiredMessage);
         }
         if (!response.ok || typeof body?.token !== 'string' || !body.token) {
             throw new Error(body?.message || `Unable to refresh the CleanSlate session (${response.status}).`);
         }
         const token = body.token;
-        this.configuration = {
-            ...this.configuration,
-            providers: {
-                ...this.configuration.providers,
-                cleanslate: { ...this.configuration.providers?.cleanslate, apiKey: token }
-            }
-        };
         await this.onManagedTokenRefresh?.(token);
-        return token;
+        return {
+            token,
+            expires_at: typeof body.expires_at === 'string' ? body.expires_at : undefined,
+            expires_in: typeof body.expires_in === 'number' || typeof body.expires_in === 'string' ? body.expires_in : undefined
+        };
     }
     async getManagedEntitlements() {
-        let token = this.configuration.providers?.cleanslate?.apiKey;
+        let token = this.getConfiguration().providers?.cleanslate?.apiKey;
         if (!token) {
             throw new Error('Sign in to CleanSlate to view your managed models.');
         }
@@ -128,21 +155,38 @@ export class CleanSlateNodeAgentRuntime {
         this.agentSession = new CleanSlateAgentSession();
         this.threadService = new CleanSlateThreadService();
         this.taskSessionService = new CleanSlateTaskSessionService();
+        this.sideChats = new Map();
         this.contextService = {
             _serviceBrand: undefined,
             getContext: async () => ({ activeFile: undefined, openFiles: [] })
         };
         this.rootPath = path.resolve(options.rootPath);
         this.sessionId = options.sessionId?.trim() || `cli-${process.pid}-${Date.now()}`;
-        this.mainService = new NodeCleanSlateMainService(this.rootPath);
-        this.configService = new NodeConfigurationService(options.configuration, this.mainService, options.onManagedTokenRefresh, options.fetcher);
+        this.mainService = options.mainService ?? new NodeCleanSlateMainService(this.rootPath);
+        this.configService = new NodeConfigurationService(options.configuration, this.mainService, options.onManagedTokenRefresh, options.managedSessionExpiredMessage, options.fetcher, options.managedTokenCoordinator);
+        this.managedTokenCoordinator = this.configService.managedTokenCoordinator;
         const cleanSlateService = new CleanSlateService(this.configService, this.mainService, createLogger(options.logger));
         this.cleanSlateService = cleanSlateService;
+        this.agentCoordinator = new CleanSlateAgentCoordinator((request, context) => this.runChildAgent(request, context.id, context.signal, context.emitStreamPart), { maxConcurrentAgents: options.maxConcurrentAgents });
+        this.agentCoordinator.onDidChangeAgent(event => {
+            options.onAgentEvent?.({
+                type: 'child_agent',
+                eventType: event.type,
+                agent: event.agent,
+                delta: event.delta,
+                streamPart: event.streamPart
+            });
+            if (event.agent.parentAgentId === this.sessionId
+                && (event.agent.status === 'completed' || event.agent.status === 'failed' || event.agent.status === 'cancelled')) {
+                this.agentSession.appendMessage({ role: 'system', content: formatCleanSlateChildAgentNotification(event.agent) });
+            }
+        });
         this.headlessRuntime = new CleanSlateHeadlessRuntime({
             rootPath: this.rootPath,
             workspaceStorageHome: options.workspaceStorageHome,
             configuration: options.configuration,
             browserHeadless: options.browserHeadless,
+            browserAutomationService: options.browserAutomationService,
             fetcher: options.fetcher,
             tools: options.tools ?? ALL_TOOLS,
             cleanSlateService,
@@ -152,8 +196,15 @@ export class CleanSlateNodeAgentRuntime {
             onProgress: options.onProgress
         });
         const toolContext = this.headlessRuntime.getToolContext();
+        // Tools (including spawn_worker) must use the same owner as model calls.
+        toolContext.sessionId = this.sessionId;
+        if (options.onArtifact) {
+            toolContext.artifactPresentationHost = { openArtifact: async () => { } };
+            toolContext.artifactService.onDidArtifactChange(options.onArtifact);
+        }
         toolContext.cleanSlateMainService = this.mainService;
         toolContext.contextService = this.contextService;
+        toolContext.agentCoordinator = this.agentCoordinator;
         const parsingSupport = new CleanSlateAgentParsingSupport(this.configService);
         const executionSupport = new CleanSlateAgentExecutionSupport(toolContext.workspaceContextService, toolContext.markerService, this.contextService);
         this.queryRunner = new CleanSlateQueryRunner({
@@ -179,6 +230,11 @@ export class CleanSlateNodeAgentRuntime {
     async *run(task, signal) {
         yield* this.runInPhase(task, AgentPhase.EXECUTION, signal);
     }
+    async configureRun(configuration, agentDefinition) {
+        this.options.agentDefinition = agentDefinition;
+        await this.configService.updateConfiguration(configuration);
+        this.options.configuration = this.configService.getConfiguration();
+    }
     async *plan(task, signal) {
         yield* this.runInPhase(task, AgentPhase.PLANNING, signal);
     }
@@ -236,6 +292,10 @@ export class CleanSlateNodeAgentRuntime {
     getPendingQuestion() {
         return this.agentSession.getSnapshot()?.pendingInteraction;
     }
+    rejectPlan() {
+        this.taskSessionService.setAwaitingApproval(false);
+        this.taskSessionService.setPhase(AgentPhase.PLANNING);
+    }
     getSessionSnapshot() {
         return {
             version: 1,
@@ -258,9 +318,61 @@ export class CleanSlateNodeAgentRuntime {
         this.taskSessionService.reset();
         this.threadService.clearHistory();
     }
+    /** Creates an independent conversational runtime attached to this session. */
+    createSideChat(options = {}) {
+        const id = options.id?.trim() || `${this.sessionId}-side-${Date.now()}-${Math.random().toString(36).slice(2, 7)}`;
+        if (this.sideChats.has(id)) {
+            throw new Error(`Side chat already exists: ${id}`);
+        }
+        const inheritedHistory = options.inheritContext === false
+            ? ''
+            : this.threadService.getActiveTaskHistory()
+                .filter(message => !message.isInternalState && (message.role === 'user' || message.role === 'assistant'))
+                .slice(-8)
+                .map(message => `${message.role}: ${message.content}`)
+                .join('\n\n');
+        const parentAdditionalContext = this.options.additionalContext;
+        const runtime = new CleanSlateNodeAgentRuntime({
+            ...this.options,
+            configuration: this.configService.getConfiguration(),
+            managedTokenCoordinator: this.managedTokenCoordinator,
+            sessionId: id,
+            disposeBrowserAutomationService: !this.options.browserAutomationService,
+            additionalContext: async (task) => {
+                const base = typeof parentAdditionalContext === 'function'
+                    ? await parentAdditionalContext(task)
+                    : parentAdditionalContext;
+                return [
+                    base?.trim(),
+                    inheritedHistory ? `Parent conversation context (read-only):\n${inheritedHistory}` : ''
+                ].filter(Boolean).join('\n\n');
+            }
+        });
+        const sideChat = { id, title: options.title?.trim() || 'Side chat', createdAt: Date.now(), runtime };
+        this.sideChats.set(id, sideChat);
+        return sideChat;
+    }
+    listSideChats() {
+        return Array.from(this.sideChats.values()).map(({ id, title, createdAt }) => ({ id, title, createdAt }));
+    }
+    getSideChat(id) {
+        return this.sideChats.get(id);
+    }
+    closeSideChat(id) {
+        const sideChat = this.sideChats.get(id);
+        if (!sideChat) {
+            return false;
+        }
+        sideChat.runtime.dispose();
+        this.sideChats.delete(id);
+        return true;
+    }
     getModels() {
         return this.cleanSlateService.getModels();
     }
+    getManagedEntitlements() {
+        return this.configService.getManagedEntitlements();
+    }
     async *runMessages(messages, objective, phase, signal) {
         const parsingSupport = new CleanSlateAgentParsingSupport(this.configService);
         const budget = new CleanSlateExecutionBudget(parsingSupport.getExecutionLoopSettings().maxTurns);
@@ -285,10 +397,69 @@ export class CleanSlateNodeAgentRuntime {
         return this.headlessRuntime.getResult();
     }
     dispose() {
+        for (const sideChat of this.sideChats.values()) {
+            sideChat.runtime.dispose();
+        }
+        this.sideChats.clear();
         const context = this.headlessRuntime.getToolContext();
         context.commandExecutionService.dispose?.();
-        void context.browserAutomationService.dispose?.();
+        if (this.options.disposeBrowserAutomationService !== false) {
+            void context.browserAutomationService.dispose?.();
+        }
         void context.mcpClientService.dispose?.();
+        if (!this.options.managedTokenCoordinator) {
+            this.managedTokenCoordinator.clear();
+        }
+    }
+    listChildAgents() {
+        return this.agentCoordinator.listAgents(this.sessionId);
+    }
+    cancelChildAgent(agentId) {
+        return this.agentCoordinator.cancelAgent(agentId);
+    }
+    async runChildAgent(request, agentId, signal, emitStreamPart) {
+        const workerDepth = this.options.workerDepth ?? 0;
+        if (workerDepth >= 1) {
+            throw new Error('Nested child agents are disabled. Return the work to the parent agent instead.');
+        }
+        const child = new CleanSlateNodeAgentRuntime({
+            ...this.options,
+            configuration: this.configService.getConfiguration(),
+            managedTokenCoordinator: this.managedTokenCoordinator,
+            sessionId: agentId,
+            workerDepth: workerDepth + 1,
+            disposeBrowserAutomationService: !this.options.browserAutomationService,
+            // A child receives the same capabilities, but not delegation authority.
+            tools: (this.options.tools ?? ALL_TOOLS).filter(tool => tool.name !== 'spawn_worker'
+                && tool.name !== 'wait_worker'
+                && tool.name !== 'list_workers'
+                && tool.name !== 'cancel_worker'),
+            instructions: async (task) => {
+                const base = typeof this.options.instructions === 'function'
+                    ? await this.options.instructions(task)
+                    : this.options.instructions;
+                return [
+                    base?.trim(),
+                    `You are a ${request.kind ?? 'worker'} child agent. Complete only this bounded assignment and return a concise, evidence-backed result to the parent.`,
+                    `Assignment label: ${request.description}`
+                ].filter(Boolean).join('\n\n');
+            },
+            onProgress: event => this.options.onProgress?.({ ...event, agentId }),
+            onAgentEvent: event => this.options.onAgentEvent?.(event)
+        });
+        let output = '';
+        try {
+            for await (const part of child.run(request.prompt, signal)) {
+                emitStreamPart(part);
+                if ((part.type === 'chat_text' || part.type === 'text') && part.content) {
+                    output += part.content;
+                }
+            }
+            return output.trim();
+        }
+        finally {
+            child.dispose();
+        }
     }
     async buildPromptContext(task = '') {
         const instructions = typeof this.options.instructions === 'function'