@crewhaus/tool-task 0.1.8 → 0.2.1

package/dist/index.js

@@ -14,9 +14,19 @@
  *      becomes `instructions`.
  *   3. Built-in `general-purpose` fallback.
  *
- * Concurrency: marked `concurrencySafe: true` because parallel sub-agents
- * are independent — each gets its own IsolatedContext. T7 in
- * sub-agent-spawner exercises 10-way parallelism end-to-end.
+ * Concurrency: a Task dispatch runs in parallel with its siblings ONLY
+ * when the specific sub-agent it spawns is itself entirely read-only —
+ * that per-call decision can't be a static flag, so Task stays statically
+ * `readOnly: false` (never eligible by flags) and supplies a
+ * `concurrencyClassifier` that opts a call back in iff the resolved
+ * sub-agent's whole effective tool catalog is read-only + concurrency-safe
+ * + non-destructive. Each eligible spawn gets its own IsolatedContext
+ * (fresh crypto-random sessionId/runId, own event log), and the parent's
+ * append-only log serialises writes at the syscall, so concurrent spawns
+ * don't collide. A child that can write/edit/bash, spawn its own Task, or
+ * touch module-level tool state (TodoWrite, Remember) is excluded and
+ * serialises. The runtime bounds how many run at once (see
+ * `runChatLoop({ maxConcurrentTools })`, default 4).
  *
  * The bridge is opaque from `tool-catalog`'s perspective; we cast inside
  * `execute` so ordinary tools (which never touch `ctx.bridge`) keep their
@@ -193,6 +203,32 @@ export function createTaskTool(opts = {}) {
         concurrencySafe: true,
         readOnly: false,
         destructive: false,
+        // Per-call parallel eligibility (see the module header). A dispatch is
+        // parallel-safe iff the resolved sub-agent's ENTIRE effective tool set
+        // is read-only + concurrency-safe + non-destructive. Fail-closed: an
+        // unresolvable/unsafe `subagent_type`, a malformed input, or an
+        // inherit-the-whole-catalog child (which would include write/bash/Task)
+        // all return false and route the call serial. `catalog` is the parent
+        // tool set, from which `buildChildCatalog` derives the child's tools.
+        concurrencyClassifier: (input, catalog) => {
+            const parsed = taskInputSchema.safeParse(input);
+            if (!parsed.success)
+                return false;
+            let def;
+            try {
+                def = resolveSubAgentDefinition(parsed.data.subagent_type, opts);
+            }
+            catch {
+                return false;
+            }
+            const childTools = buildChildCatalog(catalog, def);
+            // An empty child catalog is not provably safe (it means "inherit
+            // nothing" or an unresolved filter) — require an explicit, non-empty,
+            // uniformly-read-only tool set.
+            if (childTools.length === 0)
+                return false;
+            return childTools.every((t) => t.concurrencySafe && t.readOnly && !t.destructive);
+        },
         execute: async (input, ctx) => {
             const bridge = ctx?.bridge;
             if (bridge === undefined || bridge.spawnSubAgent === undefined) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewhaus/tool-task",
-  "version": "0.1.8",
+  "version": "0.2.1",
   "type": "module",
   "description": "Task(description, prompt, subagent_type?) tool — spawns a sub-agent and returns its final message (Section 13)",
   "main": "dist/index.js",
@@ -15,18 +15,18 @@
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/agent-context-isolation": "0.1.8",
-    "@crewhaus/errors": "0.1.8",
-    "@crewhaus/sub-agent-permission-inheritance": "0.1.8",
-    "@crewhaus/tool-builder": "0.1.8",
-    "@crewhaus/tool-catalog": "0.1.8",
+    "@crewhaus/agent-context-isolation": "0.2.1",
+    "@crewhaus/errors": "0.2.1",
+    "@crewhaus/sub-agent-permission-inheritance": "0.2.1",
+    "@crewhaus/tool-builder": "0.2.1",
+    "@crewhaus/tool-catalog": "0.2.1",
     "yaml": "^2.6.0",
     "zod": "^3.23.8"
   },
   "devDependencies": {
-    "@crewhaus/event-log": "0.1.8",
-    "@crewhaus/permission-engine": "0.1.8",
-    "@crewhaus/run-context": "0.1.8"
+    "@crewhaus/event-log": "0.2.1",
+    "@crewhaus/permission-engine": "0.2.1",
+    "@crewhaus/run-context": "0.2.1"
   },
   "license": "Apache-2.0",
   "author": {