@dsh-cc/subagent-task 0.5.0

package/lib/registry.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Per-workspace discovery of Claude Code `.claude/agents` definitions.
+ *
+ * The host process serves many workspaces at once, so discovery is keyed by
+ * the session's cwd (`cwdOf(agent)`) rather than the process cwd — a web host
+ * started from `~/.dsh` must still see `my-repo/.claude/agents`. Results are
+ * cached per root for the process lifetime: the registry does not watch the
+ * filesystem (v1), so editing an agent file takes effect on the next session
+ * for a workspace whose cache entry has not yet been created, and on process
+ * restart otherwise.
+ *
+ * @module @dsh-cc/subagent-task/registry
+ */
+import type { AgentDefinition } from '@dsh-cc/claude-code-agents';
+/** Options for the registry, mostly injectable seams for tests. */
+export interface AgentRegistryOptions {
+    /** Override the user `.claude/agents` layer (hermetic tests). */
+    userDir?: string;
+}
+/**
+ * A process-level cache of discovered agent definitions keyed by workspace
+ * root. Discovery runs lazily on first use of a root; the cached promise is
+ * shared so concurrent pre-steps for the same workspace scan once.
+ */
+export declare class AgentRegistry {
+    private readonly options;
+    private readonly cache;
+    constructor(options?: AgentRegistryOptions);
+    /**
+     * Ensure the definitions for one workspace root are loaded (once).
+     * @param root - the session workspace (the project layer root).
+     * @returns the merged definition map (project shadows user), or an empty map.
+     */
+    ensure(root: string): Promise<ReadonlyMap<string, AgentDefinition>>;
+    /**
+     * List every definition visible from one workspace root.
+     * @param root - the session workspace.
+     * @returns definitions sorted by name (project entries shadow user ones).
+     */
+    list(root: string): Promise<readonly AgentDefinition[]>;
+    /**
+     * Resolve one definition by its frontmatter `name`.
+     * @param root - the session workspace.
+     * @param type - the requested `subagent_type`.
+     * @returns the definition, or undefined when the type is unknown here.
+     */
+    resolve(root: string, type: string): Promise<AgentDefinition | undefined>;
+}
+//# sourceMappingURL=registry.d.ts.map

package/lib/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAEjE,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;GAIG;AACH,qBAAa,aAAa;IAGZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmE;gBAE5D,OAAO,GAAE,oBAAyB;IAE/D;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAenE;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAK7D;;;;;OAKG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;CAIhF"}

package/lib/registry.js

@@ -0,0 +1,66 @@
+/**
+ * Per-workspace discovery of Claude Code `.claude/agents` definitions.
+ *
+ * The host process serves many workspaces at once, so discovery is keyed by
+ * the session's cwd (`cwdOf(agent)`) rather than the process cwd — a web host
+ * started from `~/.dsh` must still see `my-repo/.claude/agents`. Results are
+ * cached per root for the process lifetime: the registry does not watch the
+ * filesystem (v1), so editing an agent file takes effect on the next session
+ * for a workspace whose cache entry has not yet been created, and on process
+ * restart otherwise.
+ *
+ * @module @dsh-cc/subagent-task/registry
+ */
+import { loadClaudeCodeAgents } from '@dsh-cc/claude-code-agents';
+/**
+ * A process-level cache of discovered agent definitions keyed by workspace
+ * root. Discovery runs lazily on first use of a root; the cached promise is
+ * shared so concurrent pre-steps for the same workspace scan once.
+ */
+export class AgentRegistry {
+    options;
+    cache = new Map();
+    constructor(options = {}) {
+        this.options = options;
+    }
+    /**
+     * Ensure the definitions for one workspace root are loaded (once).
+     * @param root - the session workspace (the project layer root).
+     * @returns the merged definition map (project shadows user), or an empty map.
+     */
+    ensure(root) {
+        let pending = this.cache.get(root);
+        if (pending === undefined) {
+            pending = loadClaudeCodeAgents(root, {
+                ...this.options.userDir !== undefined ? { userDir: this.options.userDir } : {},
+            }).then(defs => {
+                const map = new Map();
+                for (const def of defs)
+                    map.set(def.agentType, def);
+                return map;
+            });
+            this.cache.set(root, pending);
+        }
+        return pending;
+    }
+    /**
+     * List every definition visible from one workspace root.
+     * @param root - the session workspace.
+     * @returns definitions sorted by name (project entries shadow user ones).
+     */
+    async list(root) {
+        const map = await this.ensure(root);
+        return [...map.values()].sort((a, b) => a.agentType.localeCompare(b.agentType));
+    }
+    /**
+     * Resolve one definition by its frontmatter `name`.
+     * @param root - the session workspace.
+     * @param type - the requested `subagent_type`.
+     * @returns the definition, or undefined when the type is unknown here.
+     */
+    async resolve(root, type) {
+        const map = await this.ensure(root);
+        return map.get(type);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/lib/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AASjE;;;;GAIG;AACH,MAAM,OAAO,aAAa;IAGK;IAFZ,KAAK,GAAG,IAAI,GAAG,EAAyD,CAAA;IAEzF,YAA6B,UAAgC,EAAE;QAAlC,YAAO,GAAP,OAAO,CAA2B;IAAG,CAAC;IAEnE;;;;OAIG;IACH,MAAM,CAAC,IAAY;QACjB,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE;gBACnC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;aAC/E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACb,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAA;gBAC9C,KAAK,MAAM,GAAG,IAAI,IAAI;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;gBACnD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC/B,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACjF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAY;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;CACF"}

package/lib/resume-capture.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Spawn-time resume-pin capture (plan §4.3 + §4.5): build and write the pin
+ * for a continuable background child BEFORE `startContinuable`, and tombstone
+ * it when the creation throws.
+ *
+ * The capture flow lives in the task package (not resume-pins) because it is
+ * cordis-facing: it reads `ctx.llm.resolveCallConfig` for the §4.3 preflight
+ * and `ctx.logger` for the never-fail-the-spawn degradation warnings. Only
+ * pure helpers (`overlayRoute`, `probeWorkspace`) are exported for direct
+ * reuse and testing.
+ *
+ * Failure policy: a capture problem never fails the spawn. An unresolvable
+ * route degrades the pin to explicit-fields-only (`effective.complete:false` +
+ * a warning); an unwriteable pin skips capture entirely (a missing pin reads
+ * as a legacy/foreign child). Only the tombstone path rethrows nothing — the
+ * original `startContinuable` error is rethrown unchanged by the caller.
+ *
+ * @module @dsh-cc/subagent-task/resume-capture
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { AgentDefinition, ToolRestriction } from '@dsh-cc/claude-code-agents';
+import type { DetailedRoute } from '@dsh-cc/model-aliases';
+import { PinStore, type PinWorkspace } from '@dsh-cc/subagent-resume-pins';
+/** The additive `apply(ctx, config)` option that arms spawn-time capture. */
+export interface ResumePinsConfig {
+    /** Directory holding one `<childId>.json` pin file per child. */
+    readonly pinsRoot: string;
+    /** Test seam: inject a store instead of constructing one over `pinsRoot`. */
+    readonly store?: PinStore;
+}
+/** The parent's route fields the harness child-agent spread inherits from. */
+export interface ParentRouteLike {
+    readonly provider?: string;
+    readonly model?: string;
+    readonly maxTokens?: number;
+}
+/**
+ * The pre-preflight effective tuple: parent options overlaid with the alias
+ * route (§4.3). Mirrors the harness child-agent inheritance semantics
+ * (`child-agent.ts:73-79`): the parent's provider/model/maxTokens are spread
+ * conditionally, then the requested route's present fields win — `undefined`
+ * never shadows an inherited value.
+ */
+export declare function overlayRoute(parent: ParentRouteLike, route: DetailedRoute['route']): ParentRouteLike & {
+    readonly reasoningEffort?: string;
+};
+/**
+ * Workspace/worktree identity via ONE best-effort git probe. `cwd` is always
+ * present; on any probe failure (non-repo, git missing, timeout) the git
+ * fields fall back to the `'unknown'` sentinel — the pin schema has no
+ * optional fields, and a sentinel is parseable and visibly not an identity.
+ * gitDir/gitCommonDir are cwd-anchored ABSOLUTE paths so pins pin an
+ * identity, not a cwd-relative spelling.
+ */
+export declare function probeWorkspace(cwd: string): PinWorkspace;
+/** Everything one pinned spawn contributes to the pin (§4.5). */
+export interface CaptureInput {
+    readonly parentSessionId: string;
+    readonly label: string;
+    readonly childId: string;
+    /** A named definition (with discovery metadata); undefined for plain spawns. */
+    readonly definition?: AgentDefinition | undefined;
+    /** Atomic provenance resolution of the definition's `model` selector. */
+    readonly selector: DetailedRoute;
+    readonly parentRoute: ParentRouteLike;
+    /** The sanitized tool filter exactly as forwarded to the seam. */
+    readonly toolFilter?: ToolRestriction | undefined;
+    /** The session workspace cwd (workspace-identity probe root). */
+    readonly cwd: string;
+}
+/**
+ * Owns the write-before-spawn and tombstone-on-throw lifecycle for one
+ * mounted `resumePins` config. Never throws on capture trouble — a degraded
+ * or skipped pin is reported through `ctx.logger.warn` and the spawn proceeds.
+ */
+export declare class SpawnPinCapture {
+    private readonly ctx;
+    readonly store: PinStore;
+    constructor(ctx: Context, store: PinStore);
+    /** Preallocate the durable child id (it becomes the child's session id). */
+    preallocateChildId(): string;
+    /** The selector recorded when no route service is mounted: plain inherit. */
+    static inheritSelector(model: string | undefined): DetailedRoute;
+    /**
+     * Build the pin and write it before the spawn. The spawn is NEVER failed by
+     * capture trouble and capture is never silently skipped: resolves
+     * `undefined` on success, or the failure reason on a skipped capture — the
+     * caller MUST surface it as an explicit `captureWarning` line in the
+     * subagent_fork tool result ("this child will resume with legacy
+     * semantics"), so an unpinned launch is never silent.
+     */
+    write(input: CaptureInput): Promise<string | undefined>;
+    /**
+     * Tombstone the pin after a failed `startContinuable`: delete the file; if
+     * the delete fails, rewrite it as blocked so it can never be mistaken for
+     * a live agent. Idempotent; never throws.
+     */
+    tombstone(childId: string): Promise<void>;
+    private build;
+    /**
+     * §4.3 preflight: materialize the complete tuple with explicit nulls for
+     * absent effort/maxTokens. Failure degrades to the explicit overlay fields
+     * with `complete:false` plus a warning — never a spawn failure.
+     */
+    private preflight;
+}
+//# sourceMappingURL=resume-capture.d.ts.map

package/lib/resume-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-capture.d.ts","sourceRoot":"","sources":["../src/resume-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EACL,QAAQ,EAMR,KAAK,YAAY,EAGlB,MAAM,8BAA8B,CAAA;AAErC,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAA;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,GAC5B,eAAe,GAAG;IAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CASzD;AAuBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAuBxD;AAYD,iEAAiE;AACjE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,gFAAgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACjD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAA;IACrC,kEAAkE;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACjD,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,KAAK,EAAE,QAAQ;gBADP,GAAG,EAAE,OAAO,EACpB,KAAK,EAAE,QAAQ;IAG1B,4EAA4E;IAC5E,kBAAkB,IAAI,MAAM;IAI5B,6EAA6E;IAC7E,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa;IAIhE;;;;;;;OAOG;IACG,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAW7D;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAkBjC,KAAK;IA2CnB;;;;OAIG;YACW,SAAS;CAgCxB"}

package/lib/resume-capture.js

@@ -0,0 +1,232 @@
+/**
+ * Spawn-time resume-pin capture (plan §4.3 + §4.5): build and write the pin
+ * for a continuable background child BEFORE `startContinuable`, and tombstone
+ * it when the creation throws.
+ *
+ * The capture flow lives in the task package (not resume-pins) because it is
+ * cordis-facing: it reads `ctx.llm.resolveCallConfig` for the §4.3 preflight
+ * and `ctx.logger` for the never-fail-the-spawn degradation warnings. Only
+ * pure helpers (`overlayRoute`, `probeWorkspace`) are exported for direct
+ * reuse and testing.
+ *
+ * Failure policy: a capture problem never fails the spawn. An unresolvable
+ * route degrades the pin to explicit-fields-only (`effective.complete:false` +
+ * a warning); an unwriteable pin skips capture entirely (a missing pin reads
+ * as a legacy/foreign child). Only the tombstone path rethrows nothing — the
+ * original `startContinuable` error is rethrown unchanged by the caller.
+ *
+ * @module @dsh-cc/subagent-task/resume-capture
+ */
+import { spawnSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { isAbsolute, join } from 'node:path';
+import { realpathSync } from 'node:fs';
+import { definitionFingerprint, personaHash, } from '@dsh-cc/subagent-resume-pins';
+/**
+ * The pre-preflight effective tuple: parent options overlaid with the alias
+ * route (§4.3). Mirrors the harness child-agent inheritance semantics
+ * (`child-agent.ts:73-79`): the parent's provider/model/maxTokens are spread
+ * conditionally, then the requested route's present fields win — `undefined`
+ * never shadows an inherited value.
+ */
+export function overlayRoute(parent, route) {
+    return {
+        ...parent.provider !== undefined ? { provider: parent.provider } : {},
+        ...parent.model !== undefined ? { model: parent.model } : {},
+        ...parent.maxTokens !== undefined ? { maxTokens: parent.maxTokens } : {},
+        ...route?.provider !== undefined ? { provider: route.provider } : {},
+        ...route?.model !== undefined ? { model: route.model } : {},
+        ...route?.reasoningEffort !== undefined ? { reasoningEffort: route.reasoningEffort } : {},
+    };
+}
+/** The git probe timeout; a hung git must never delay a spawn. */
+const GIT_PROBE_TIMEOUT_MS = 2_000;
+/**
+ * Normalize one `git rev-parse` output to a cwd-anchored absolute path (git
+ * prints repository-relative values like `.git`), realpath'ed when cheap.
+ * Residual limit (documented): two DIFFERENT standalone repos initialized
+ * sequentially at the same path normalize to the same path strings, so that
+ * replacement is not detectable — the worktree↔standalone flip and cwd moves
+ * ARE (the comparison is the --git-dir path pair, per the implemented rule).
+ */
+function normalizeGitPath(cwd, value) {
+    if (value.length === 0)
+        return 'unknown';
+    const absolute = isAbsolute(value) ? value : join(cwd, value);
+    try {
+        return realpathSync(absolute);
+    }
+    catch {
+        return absolute;
+    }
+}
+/**
+ * Workspace/worktree identity via ONE best-effort git probe. `cwd` is always
+ * present; on any probe failure (non-repo, git missing, timeout) the git
+ * fields fall back to the `'unknown'` sentinel — the pin schema has no
+ * optional fields, and a sentinel is parseable and visibly not an identity.
+ * gitDir/gitCommonDir are cwd-anchored ABSOLUTE paths so pins pin an
+ * identity, not a cwd-relative spelling.
+ */
+export function probeWorkspace(cwd) {
+    const fallback = { cwd, gitDir: 'unknown', gitCommonDir: 'unknown', branch: 'unknown' };
+    let result;
+    try {
+        result = spawnSync('git', ['-C', cwd, 'rev-parse', '--git-dir', '--git-common-dir', '--abbrev-ref', 'HEAD'], { timeout: GIT_PROBE_TIMEOUT_MS, encoding: 'utf8' });
+    }
+    catch {
+        return fallback;
+    }
+    if (result.status !== 0 || typeof result.stdout !== 'string')
+        return fallback;
+    const [gitDir, gitCommonDir, branch] = result.stdout.trim().split('\n');
+    if (gitDir === undefined || gitCommonDir === undefined || branch === undefined || branch.length === 0) {
+        return fallback;
+    }
+    return {
+        cwd,
+        gitDir: normalizeGitPath(cwd, gitDir),
+        gitCommonDir: normalizeGitPath(cwd, gitCommonDir),
+        branch,
+    };
+}
+/**
+ * Owns the write-before-spawn and tombstone-on-throw lifecycle for one
+ * mounted `resumePins` config. Never throws on capture trouble — a degraded
+ * or skipped pin is reported through `ctx.logger.warn` and the spawn proceeds.
+ */
+export class SpawnPinCapture {
+    ctx;
+    store;
+    constructor(ctx, store) {
+        this.ctx = ctx;
+        this.store = store;
+    }
+    /** Preallocate the durable child id (it becomes the child's session id). */
+    preallocateChildId() {
+        return randomUUID();
+    }
+    /** The selector recorded when no route service is mounted: plain inherit. */
+    static inheritSelector(model) {
+        return { selector: model, via: 'inherit', route: undefined };
+    }
+    /**
+     * Build the pin and write it before the spawn. The spawn is NEVER failed by
+     * capture trouble and capture is never silently skipped: resolves
+     * `undefined` on success, or the failure reason on a skipped capture — the
+     * caller MUST surface it as an explicit `captureWarning` line in the
+     * subagent_fork tool result ("this child will resume with legacy
+     * semantics"), so an unpinned launch is never silent.
+     */
+    async write(input) {
+        try {
+            this.store.write(await this.build(input));
+            return undefined;
+        }
+        catch (error) {
+            const reason = error.message;
+            this.ctx.logger.warn(`resume pin capture failed (spawn proceeds unpinned): ${reason}`);
+            return reason;
+        }
+    }
+    /**
+     * Tombstone the pin after a failed `startContinuable`: delete the file; if
+     * the delete fails, rewrite it as blocked so it can never be mistaken for
+     * a live agent. Idempotent; never throws.
+     */
+    async tombstone(childId) {
+        try {
+            this.store.remove(childId);
+            return;
+        }
+        catch {
+            // Fall through to the blocked rewrite.
+        }
+        try {
+            this.store.update(childId, (draft) => {
+                draft.resume = { state: 'blocked', reason: 'spawn-aborted' };
+            });
+        }
+        catch (error) {
+            this.ctx.logger.warn(`resume pin tombstone failed for child ${childId}: ${error.message}`);
+        }
+    }
+    async build(input) {
+        const route = input.selector.route;
+        const overlay = overlayRoute(input.parentRoute, route);
+        if (overlay.provider === undefined || overlay.model === undefined) {
+            throw new Error('no explicit provider/model route to pin');
+        }
+        const effective = await this.preflight(overlay);
+        const definition = input.definition === undefined
+            ? { kind: 'plain' }
+            : {
+                kind: 'named',
+                agentType: input.definition.agentType,
+                source: input.definition.source,
+                fingerprint: definitionFingerprint(input.definition),
+                personaHash: personaHash(input.definition.systemPrompt),
+                // Gate-time re-fingerprinting needs the discovery location (§4.4).
+                baseDir: input.definition.baseDir,
+                filename: input.definition.filename,
+            };
+        const modelSelector = {
+            raw: input.selector.selector ?? 'inherit',
+            via: input.selector.via,
+        };
+        return {
+            version: 1,
+            childId: input.childId,
+            parentSessionId: input.parentSessionId,
+            label: input.label,
+            mode: 'continuable-background',
+            createdAt: new Date().toISOString(),
+            definition,
+            modelSelector,
+            effective,
+            toolFilter: {
+                allow: [...(input.toolFilter?.allow ?? [])],
+                deny: [...(input.toolFilter?.deny ?? [])],
+            },
+            ...input.definition?.maxTurns !== undefined ? { maxTurns: input.definition.maxTurns } : {},
+            workspace: probeWorkspace(input.cwd),
+            resume: { state: 'ok' },
+        };
+    }
+    /**
+     * §4.3 preflight: materialize the complete tuple with explicit nulls for
+     * absent effort/maxTokens. Failure degrades to the explicit overlay fields
+     * with `complete:false` plus a warning — never a spawn failure.
+     */
+    async preflight(overlay) {
+        const llm = this.ctx.get('llm');
+        try {
+            if (llm === undefined)
+                throw new Error('no llm service for the preflight');
+            const config = await llm.resolveCallConfig({
+                provider: overlay.provider,
+                model: overlay.model,
+                ...(overlay.maxTokens !== undefined ? { maxTokens: overlay.maxTokens } : {}),
+                ...(overlay.reasoningEffort !== undefined ? { reasoningEffort: overlay.reasoningEffort } : {}),
+            });
+            return {
+                provider: config.provider,
+                model: config.model,
+                reasoningEffort: config.reasoningEffort ?? null,
+                maxTokens: config.maxTokens ?? null,
+                complete: true,
+            };
+        }
+        catch {
+            this.ctx.logger.warn('resume pin degraded: route not preflightable; only explicit options pinned');
+            return {
+                provider: overlay.provider,
+                model: overlay.model,
+                reasoningEffort: overlay.reasoningEffort ?? null,
+                maxTokens: overlay.maxTokens ?? null,
+                complete: false,
+            };
+        }
+    }
+}
+//# sourceMappingURL=resume-capture.js.map

package/lib/resume-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-capture.js","sourceRoot":"","sources":["../src/resume-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAItC,OAAO,EAEL,qBAAqB,EACrB,WAAW,GAOZ,MAAM,8BAA8B,CAAA;AAiBrC;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAuB,EACvB,KAA6B;IAE7B,OAAO;QACL,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;QACrE,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;QAC5D,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;QACxE,GAAG,KAAK,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;QACpE,GAAG,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;QAC3D,GAAG,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE;KAC1F,CAAA;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,oBAAoB,GAAG,KAAK,CAAA;AAElC;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,GAAW,EAAE,KAAa;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,QAAQ,GAAiB,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACrG,IAAI,MAAoC,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAChB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,CAAC,EACjF,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,CACpD,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7E,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACvE,IAAI,MAAM,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtG,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,OAAO;QACL,GAAG;QACH,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;QACrC,YAAY,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;QACjD,MAAM;KACP,CAAA;AACH,CAAC;AA4BD;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAEP;IACR;IAFX,YACmB,GAAY,EACpB,KAAe;QADP,QAAG,GAAH,GAAG,CAAS;QACpB,UAAK,GAAL,KAAK,CAAU;IACvB,CAAC;IAEJ,4EAA4E;IAC5E,kBAAkB;QAChB,OAAO,UAAU,EAAE,CAAA;IACrB,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,eAAe,CAAC,KAAyB;QAC9C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAC9D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,KAAmB;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YACzC,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAI,KAAe,CAAC,OAAO,CAAA;YACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,MAAM,EAAE,CAAC,CAAA;YACtF,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC1B,OAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAqB,EAAE,EAAE;gBACnD,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;YAC9D,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAClB,yCAAyC,OAAO,KAAM,KAAe,CAAC,OAAO,EAAE,CAChF,CAAA;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAAmB;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAA;QAClC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,UAAU,GAAkB,KAAK,CAAC,UAAU,KAAK,SAAS;YAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;YACnB,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;gBACrC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;gBAC/B,WAAW,EAAE,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC;gBACpD,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;gBACvD,mEAAmE;gBACnE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;gBACjC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ;aACpC,CAAA;QACL,MAAM,aAAa,GAAqB;YACtC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,SAAS;YACzC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG;SACxB,CAAA;QACD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU;YACV,aAAa;YACb,SAAS;YACT,UAAU,EAAE;gBACV,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC3C,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;aAC1C;YACD,GAAG,KAAK,CAAC,UAAU,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;YAC1F,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;YACpC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SACxB,CAAA;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,SAAS,CACrB,OAAgE;QAEhE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAwB,CAAA;QACtD,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAC1E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC;gBACzC,QAAQ,EAAE,OAAO,CAAC,QAAS;gBAC3B,KAAK,EAAE,OAAO,CAAC,KAAM;gBACrB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/F,CAAC,CAAA;YACF,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;gBAC/C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;gBACnC,QAAQ,EAAE,IAAI;aACf,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAClB,4EAA4E,CAC7E,CAAA;YACD,OAAO;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAS;gBAC3B,KAAK,EAAE,OAAO,CAAC,KAAM;gBACrB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;gBAChD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACpC,QAAQ,EAAE,KAAK;aAChB,CAAA;QACH,CAAC;IACH,CAAC;CACF"}

package/lib/sanitize-filter.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Sanitize a Task child's tool restriction against the live restrictable-name
+ * set: MCP wildcards expand, unknown names drop, an emptied allow-list is
+ * deny-all, and ToolSearch is auto-injected when the child holds MCP names.
+ *
+ * @module @dsh-cc/subagent-task/sanitize-filter
+ */
+import type { ToolRestriction } from '@dsh-cc/claude-code-agents';
+/**
+ * Sanitize a definition's tool restriction against the LIVE set of names the
+ * tools registry knows (registered or reserved — `ctx.tools.view(callingAgent)
+ * .restrictableNames`, read at execute time so deferred MCP reservations on
+ * the standing-scope layer are included).
+ *
+ * Rules:
+ * - A name survives only when the registry knows it. Everything else is
+ *   dropped with a warning; there is no static legal-names set, so mounted
+ *   MCP tools and any future registered row are accepted without code churn.
+ * - If the filter carried an `allow` list and any kept allow name is an MCP
+ *   tool while `ToolSearch` is itself restrictable, `ToolSearch` is appended
+ *   (deduped): the child otherwise holds MCP names with no load path.
+ * - If the filter carried an `allow` list and sanitization left nothing, the
+ *   result is `{ allow: [] }` — omitting `allow` would WIDEN the child to
+ *   every tool, so an emptied allow-list is pinned as deny-all, loudly.
+ */
+export declare function sanitizeToolFilter(filter: ToolRestriction, warn: (m: string) => void, knownNames: ReadonlySet<string>): ToolRestriction;
+//# sourceMappingURL=sanitize-filter.d.ts.map

package/lib/sanitize-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-filter.d.ts","sourceRoot":"","sources":["../src/sanitize-filter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AA4CjE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EACzB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,eAAe,CA+BjB"}

package/lib/sanitize-filter.js

@@ -0,0 +1,95 @@
+/**
+ * Sanitize a Task child's tool restriction against the live restrictable-name
+ * set: MCP wildcards expand, unknown names drop, an emptied allow-list is
+ * deny-all, and ToolSearch is auto-injected when the child holds MCP names.
+ *
+ * @module @dsh-cc/subagent-task/sanitize-filter
+ */
+/**
+ * The MCP public-name prefix every bridged MCP tool carries on `ctx.tools`.
+ */
+const MCP_PUBLIC_PREFIX = 'mcp__';
+/**
+ * Expand one raw filter entry into the concrete names it asks for.
+ *
+ * - Anything not MCP-qualified passes through untouched (it is then gated by
+ *   the `knownNames` check).
+ * - A bare `mcp__` (no server segment) is dropped with a loud warning — it
+ *   can never name a mounted tool.
+ * - `mcp__<server>` (no third segment) and `mcp__<server>__*` expand to every
+ *   known MCP tool of that server (`mcp__<server>__` prefix), so frontmatter
+ *   survives servers publishing new tools without a hash-suffix dance.
+ * - An exact `mcp__<server>__<tool>` passes through as written (the caller
+ *   must use the public name, including any identity-hash suffix).
+ */
+function expandFilterName(rawName, knownNames, warn) {
+    if (!rawName.startsWith(MCP_PUBLIC_PREFIX))
+        return [rawName];
+    const rest = rawName.slice(MCP_PUBLIC_PREFIX.length);
+    if (rest.length === 0) {
+        warn('cc-task: invalid MCP wildcard "mcp__" in a subagent toolFilter — expected mcp__<server> or mcp__<server>__<tool>');
+        return [];
+    }
+    const server = rest.endsWith('__*')
+        ? rest.slice(0, -'__*'.length)
+        : rest.includes('__')
+            ? undefined
+            : rest;
+    if (server === undefined)
+        return [rawName];
+    if (server.length === 0) {
+        warn(`cc-task: invalid MCP wildcard "${rawName}" in a subagent toolFilter — expected mcp__<server> or mcp__<server>__<tool>`);
+        return [];
+    }
+    return [...knownNames].filter(name => name.startsWith(`${MCP_PUBLIC_PREFIX}${server}__`));
+}
+/**
+ * Sanitize a definition's tool restriction against the LIVE set of names the
+ * tools registry knows (registered or reserved — `ctx.tools.view(callingAgent)
+ * .restrictableNames`, read at execute time so deferred MCP reservations on
+ * the standing-scope layer are included).
+ *
+ * Rules:
+ * - A name survives only when the registry knows it. Everything else is
+ *   dropped with a warning; there is no static legal-names set, so mounted
+ *   MCP tools and any future registered row are accepted without code churn.
+ * - If the filter carried an `allow` list and any kept allow name is an MCP
+ *   tool while `ToolSearch` is itself restrictable, `ToolSearch` is appended
+ *   (deduped): the child otherwise holds MCP names with no load path.
+ * - If the filter carried an `allow` list and sanitization left nothing, the
+ *   result is `{ allow: [] }` — omitting `allow` would WIDEN the child to
+ *   every tool, so an emptied allow-list is pinned as deny-all, loudly.
+ */
+export function sanitizeToolFilter(filter, warn, knownNames) {
+    const clean = (names) => {
+        const out = [];
+        for (const rawName of names) {
+            for (const expanded of expandFilterName(rawName, knownNames, warn)) {
+                if (knownNames.has(expanded)) {
+                    if (!out.includes(expanded))
+                        out.push(expanded);
+                }
+                else {
+                    warn(`cc-task: dropping unknown tool name "${expanded}" from a subagent toolFilter`);
+                }
+            }
+        }
+        return out;
+    };
+    const hadAllow = filter.allow !== undefined;
+    const allow = filter.allow !== undefined ? clean(filter.allow) : undefined;
+    const deny = filter.deny !== undefined ? clean(filter.deny) : undefined;
+    if (hadAllow && allow !== undefined && allow.length > 0 && allow.some(name => name.startsWith(MCP_PUBLIC_PREFIX))
+        && knownNames.has('ToolSearch') && !allow.includes('ToolSearch')) {
+        allow.push('ToolSearch');
+    }
+    if (hadAllow && (allow === undefined || allow.length === 0)) {
+        warn('cc-task: a subagent toolFilter allow-list matched no mounted tools '
+            + `(originals: ${(filter.allow ?? []).join(', ')}); the child will run with zero tools`);
+    }
+    return {
+        ...(hadAllow ? { allow: allow ?? [] } : {}),
+        ...(deny !== undefined && deny.length > 0 ? { deny } : {}),
+    };
+}
+//# sourceMappingURL=sanitize-filter.js.map

package/lib/sanitize-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-filter.js","sourceRoot":"","sources":["../src/sanitize-filter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;GAEG;AACH,MAAM,iBAAiB,GAAG,OAAO,CAAA;AAEjC;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,UAA+B,EAC/B,IAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,kHAAkH,CAAC,CAAA;QACxH,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAA;IACV,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,kCAAkC,OAAO,8EAA8E,CAAC,CAAA;QAC7H,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,MAAM,IAAI,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAuB,EACvB,IAAyB,EACzB,UAA+B;IAE/B,MAAM,KAAK,GAAG,CAAC,KAAwB,EAAY,EAAE;QACnD,MAAM,GAAG,GAAa,EAAE,CAAA;QACxB,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnE,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACjD,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,wCAAwC,QAAQ,8BAA8B,CAAC,CAAA;gBACtF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAA;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;WAC5G,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC1B,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CACF,qEAAqE;cACnE,eAAe,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CACxF,CAAA;IACH,CAAC;IACD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAA;AACH,CAAC"}