@duckmind/dm-windows-x64 0.60.4 → 0.60.8

package/extensions/dm-subagents/src/runs/shared/chain-outputs.js

@@ -1 +1,104 @@
-function P(J){let Q=[];for(let Z=J.length-1;Z>=0;Z--){let $=J[Z];if($.role!=="assistant")continue;if("errorMessage"in $&&typeof $.errorMessage==="string"&&$.errorMessage.length>0||"stopReason"in $&&$.stopReason==="error")continue;for(let q=$.content.length-1;q>=0;q--){let U=$.content[q];if(U.type!=="text"||U.text.trim().length===0)continue;if(Q.push(U.text),/```acceptance-report\s*\n[\s\S]*?```/i.test(U.text))return U.text;for(let B of U.text.matchAll(/```(?:json|jsonc|json5)\s*\n([\s\S]*?)```/gi)){let j=B[1]??"";if(/"criteriaSatisfied"/.test(j)&&/"(?:changedFiles|testsAddedOrUpdated|commandsRun|validationOutput|residualRisks|noStagedFiles|diffSummary|reviewFindings|manualNotes)"/.test(j))return U.text}if(/ACCEPTANCE_REPORT\s*:/i.test(U.text))return U.text}}return Q[0]??""}function O(J){return J.finalOutput??P(J.messages??[])}import*as V from"node:os";import*as K from"node:path";function _(J){return J.trim().replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"unknown"}function v(J){let Q=J?.env??process.env,Z=J&&Object.hasOwn(J,"getuid")?J.getuid:process.getuid?.bind(process);if(typeof Z==="function")return`uid-${Z()}`;for(let U of["USERNAME","USER","LOGNAME"]){let B=Q[U];if(B)return`user-${_(B)}`}let $=J&&Object.hasOwn(J,"userInfo")?J.userInfo:V.userInfo;try{let U=$?.().username;if(U)return`user-${_(U)}`}catch{}let W=Q.USERPROFILE??Q.HOME;if(W)return`home-${_(W)}`;let q=J&&Object.hasOwn(J,"homedir")?J.homedir:V.homedir;try{let U=q?.();if(U)return`home-${_(U)}`}catch{}return"shared"}var M=K.join(V.tmpdir(),`dm-subagents-${v()}`),jJ=K.join(M,"async-subagent-results"),GJ=K.join(M,"async-subagent-runs"),f=K.join(M,"chain-runs"),VJ=K.join(M,"artifacts");function L(J){return"parallel"in J&&Array.isArray(J.parallel)}function H(J){return"expand"in J&&"collect"in J&&"parallel"in J&&!Array.isArray(J.parallel)}import{Compile as RJ}from"typebox/compile";class X extends Error{}var k=/^[A-Za-z_][A-Za-z0-9_]*$/,h=/^[A-Za-z_][A-Za-z0-9_]*$/,A=/\{([A-Za-z_][A-Za-z0-9_]*)(?:\.([^{}]+))?\}/g,c=new Set(["task","previous","chain_dir","outputs"]),S=new Set(["expand","parallel","collect","concurrency","failFast","phase","label","acceptance"]),g=new Set([...S,"effectiveAcceptance","sessionFiles","thinkingOverrides"]),m=new Set(["from","item","key","maxItems","onEmpty"]),u=new Set(["output","path"]),I=new Set(["agent","task","phase","label","outputSchema","cwd","output","outputMode","reads","progress","skill","model","toolBudget","acceptance"]),d=new Set([...I,"outputName","structured","inheritProjectContext","inheritSkills","skills","outputPath","maxSubagentDepth","structuredOutput","structuredOutputSchema","tools","extensions","subagentOnlyExtensions","mcpDirectTools","completionGuard","systemPrompt","systemPromptMode","thinking","modelCandidates","sessionFile","effectiveAcceptance","parentSessionId"]),p=new Set(["as","outputSchema"]);function N(J){return k.test(J)}function F(J,Q){if(J==="")return;if(!J.startsWith("/"))throw new X(`${Q} must be a JSON Pointer starting with '/'.`);for(let Z of J.slice(1).split("/"))if(/~(?![01])/.test(Z))throw new X(`${Q} contains invalid JSON Pointer escape.`)}function z(J,Q,Z){if(!J||typeof J!=="object"||Array.isArray(J))throw new X(`${Z} must be an object.`);for(let $ of Object.keys(J))if(!Q.has($))throw new X(`${Z} does not support field '${$}'.`)}function o(J,Q,Z){for(let $ of J.matchAll(/\{([^{}]*)\}/g)){let W=$[0],q=$[1];if(q===Q||q.startsWith(`${Q}.`)){if(!A.test(W)||q===`${Q}.`||q.includes(".."))throw new X(`Invalid item reference '${W}' in ${Z}.`);A.lastIndex=0;continue}A.lastIndex=0;let U=q.match(/^[A-Za-z_][A-Za-z0-9_]*/)?.[0];if(U===Q)throw new X(`Invalid item reference '${W}' in ${Z}.`);if(U&&c.has(U))continue;if(U)throw new X(`Unsupported template reference '${W}' in ${Z}.`)}if(A.lastIndex=0,J.includes(`{${Q}.}`)||new RegExp(`\\{${Q}(?:\\.|$)[^}]*$`).test(J))throw new X(`Invalid item reference in ${Z}.`)}function w(J){return!!J&&typeof J==="object"&&!Array.isArray(J)&&(Object.prototype.hasOwnProperty.call(J,"expand")||Object.prototype.hasOwnProperty.call(J,"collect"))}function b(J,Q,Z={}){let $=`Dynamic chain step ${Q+1}`;if(z(J,Z.allowRunnerFields?g:S,$),!J.expand||!J.expand.from)throw new X(`${$} requires expand.from.`);if(z(J.expand,m,`${$} expand`),z(J.expand.from,u,`${$} expand.from`),!N(J.expand.from.output))throw new X(`${$} has invalid expand.from.output '${J.expand.from.output}'.`);if(F(J.expand.from.path,`${$} expand.from.path`),J.expand.key!==void 0)F(J.expand.key,`${$} expand.key`);let W=J.expand.item??"item";if(!h.test(W))throw new X(`${$} has invalid expand.item '${W}'.`);if(J.expand.maxItems===void 0&&Z.maxItems===void 0)throw new X(`${$} requires expand.maxItems or config.chain.dynamicFanout.maxItems.`);if(J.expand.maxItems!==void 0&&(!Number.isInteger(J.expand.maxItems)||J.expand.maxItems<0))throw new X(`${$} expand.maxItems must be an integer >= 0.`);if(Z.maxItems!==void 0&&(!Number.isInteger(Z.maxItems)||Z.maxItems<0))throw new X("config.chain.dynamicFanout.maxItems must be an integer >= 0.");if(!J.parallel||Array.isArray(J.parallel))throw new X(`${$} requires a single parallel template object and cannot mix dynamic expand/collect with static parallel arrays.`);if(z(J.parallel,Z.allowRunnerFields?d:I,`${$} parallel`),"expand"in J.parallel)throw new X(`${$} does not support nested dynamic fanout.`);if(!J.parallel.agent)throw new X(`${$} parallel.agent is required.`);if(!J.collect?.as||!N(J.collect.as))throw new X(`${$} requires collect.as with a safe output name.`);z(J.collect,p,`${$} collect`);for(let[q,U]of[["parallel.task",J.parallel.task],["parallel.label",J.parallel.label]])if(U)o(U,W,`${$} ${q}`)}var x=/\{outputs\.([^}]*)\}/g,R=/^[A-Za-z_][A-Za-z0-9_]*$/;class G extends Error{}function D(J){if(L(J))return J.parallel.map((Z)=>Z.as).filter((Z)=>Boolean(Z));if(H(J))return[J.collect.as];let Q=J.as;return Q?[Q]:[]}function n(J){if(L(J))return J.parallel.map((Q)=>Q.task??"{previous}");if(H(J))return[J.parallel.task??"{previous}",J.parallel.label??""].filter(Boolean);return[J.task??"{previous}"]}function bJ(J,Q={}){l(J,Q)}function l(J,Q={},Z={}){let $=[...Z.priorOutputNames??[]],W=new Set($),q=new Set($);for(let U=0;U<J.length;U++){let B=(Z.startStepIndex??0)+U+1,j=J[U];if(w(j)){if(!H(j))throw new G(`Dynamic chain step ${B} requires expand, a single parallel template object, and collect; dynamic expand/collect cannot be mixed with static parallel arrays.`);try{b(j,B-1,Q)}catch(Y){if(Y instanceof X)throw new G(Y.message);throw Y}if(!W.has(j.expand.from.output))throw new G(`Dynamic chain step ${B} references unknown output '${j.expand.from.output}'. Named outputs are only available after producing step/group completes.`)}for(let Y of D(j)){if(!R.test(Y))throw new G(`Invalid chain output name '${Y}' at step ${B}. Use /^[A-Za-z_][A-Za-z0-9_]*$/.`);if(q.has(Y))throw new G(`Duplicate chain output name '${Y}'. Each as name must be unique.`);q.add(Y)}for(let Y of n(j))for(let T of Y.matchAll(x)){let C=T[0],E=T[1];if(!R.test(E))throw new G(`Invalid chain output reference '${C}' at step ${B}. Use {outputs.name} with /^[A-Za-z_][A-Za-z0-9_]*$/ names.`);if(!W.has(E))throw new G(`Unknown chain output reference '${C}' at step ${B}. Named outputs are only available after producing step/group completes.`)}for(let Y of D(j))W.add(Y)}}function DJ(J,Q){return J.replace(x,(Z,$)=>{if(!R.test($))throw new G(`Invalid chain output reference '${Z}'. Use {outputs.name} with /^[A-Za-z_][A-Za-z0-9_]*$/ names.`);let W=Q[$];if(!W)throw new G(`Unknown chain output reference '${Z}'.`);return W.text})}function y(J){return JSON.stringify(J)}function xJ(J,Q){return{text:J.structuredOutput!==void 0?y(J.structuredOutput):O(J),...J.structuredOutput!==void 0?{structured:J.structuredOutput}:{},agent:J.agent,stepIndex:Q}}function yJ(J,Q){return{text:J.structuredOutput!==void 0?y(J.structuredOutput):J.output,...J.structuredOutput!==void 0?{structured:J.structuredOutput}:{},agent:J.agent,stepIndex:Q}}export{l as validateChainOutputBindingsWithContext,bJ as validateChainOutputBindings,DJ as resolveOutputReferences,xJ as outputEntryFromResult,yJ as outputEntryFromAsyncResult,G as ChainOutputValidationError};
+import { isDynamicParallelStep, isParallelStep } from "../../shared/settings.js";
+import { getSingleResultOutput } from "../../shared/utils.js";
+import { DynamicFanoutError, hasDynamicFanoutFields, validateDynamicStepShape } from "./dynamic-fanout.js";
+const OUTPUT_REF_PATTERN = /\{outputs\.([^}]*)\}/g;
+const SAFE_OUTPUT_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+
+export class ChainOutputValidationError extends Error {
+}
+function outputNamesForStep(step) {
+  if (isParallelStep(step))
+    return step.parallel.map((task) => task.as).filter((name) => Boolean(name));
+  if (isDynamicParallelStep(step))
+    return [step.collect.as];
+  const name = step.as;
+  return name ? [name] : [];
+}
+function taskTemplatesForStep(step) {
+  if (isParallelStep(step))
+    return step.parallel.map((task) => task.task ?? "{previous}");
+  if (isDynamicParallelStep(step))
+    return [step.parallel.task ?? "{previous}", step.parallel.label ?? ""].filter(Boolean);
+  return [step.task ?? "{previous}"];
+}
+export function validateChainOutputBindings(steps, dynamicFanoutConfig = {}) {
+  validateChainOutputBindingsWithContext(steps, dynamicFanoutConfig);
+}
+export function validateChainOutputBindingsWithContext(steps, dynamicFanoutConfig = {}, context = {}) {
+  const priorOutputNames = [...context.priorOutputNames ?? []];
+  const available = new Set(priorOutputNames);
+  const seen = new Set(priorOutputNames);
+  for (let stepIndex = 0;stepIndex < steps.length; stepIndex++) {
+    const displayStepIndex = (context.startStepIndex ?? 0) + stepIndex + 1;
+    const step = steps[stepIndex];
+    if (hasDynamicFanoutFields(step)) {
+      if (!isDynamicParallelStep(step)) {
+        throw new ChainOutputValidationError(`Dynamic chain step ${displayStepIndex} requires expand, a single parallel template object, and collect; dynamic expand/collect cannot be mixed with static parallel arrays.`);
+      }
+      try {
+        validateDynamicStepShape(step, displayStepIndex - 1, dynamicFanoutConfig);
+      } catch (error) {
+        if (error instanceof DynamicFanoutError)
+          throw new ChainOutputValidationError(error.message);
+        throw error;
+      }
+      if (!available.has(step.expand.from.output)) {
+        throw new ChainOutputValidationError(`Dynamic chain step ${displayStepIndex} references unknown output '${step.expand.from.output}'. Named outputs are only available after producing step/group completes.`);
+      }
+    }
+    for (const name of outputNamesForStep(step)) {
+      if (!SAFE_OUTPUT_NAME_PATTERN.test(name)) {
+        throw new ChainOutputValidationError(`Invalid chain output name '${name}' at step ${displayStepIndex}. Use /^[A-Za-z_][A-Za-z0-9_]*$/.`);
+      }
+      if (seen.has(name)) {
+        throw new ChainOutputValidationError(`Duplicate chain output name '${name}'. Each as name must be unique.`);
+      }
+      seen.add(name);
+    }
+    for (const template of taskTemplatesForStep(step)) {
+      for (const match of template.matchAll(OUTPUT_REF_PATTERN)) {
+        const rawReference = match[0];
+        const name = match[1];
+        if (!SAFE_OUTPUT_NAME_PATTERN.test(name)) {
+          throw new ChainOutputValidationError(`Invalid chain output reference '${rawReference}' at step ${displayStepIndex}. Use {outputs.name} with /^[A-Za-z_][A-Za-z0-9_]*$/ names.`);
+        }
+        if (!available.has(name)) {
+          throw new ChainOutputValidationError(`Unknown chain output reference '${rawReference}' at step ${displayStepIndex}. Named outputs are only available after producing step/group completes.`);
+        }
+      }
+    }
+    for (const name of outputNamesForStep(step)) {
+      available.add(name);
+    }
+  }
+}
+export function resolveOutputReferences(template, outputs) {
+  return template.replace(OUTPUT_REF_PATTERN, (rawReference, name) => {
+    if (!SAFE_OUTPUT_NAME_PATTERN.test(name)) {
+      throw new ChainOutputValidationError(`Invalid chain output reference '${rawReference}'. Use {outputs.name} with /^[A-Za-z_][A-Za-z0-9_]*$/ names.`);
+    }
+    const entry = outputs[name];
+    if (!entry)
+      throw new ChainOutputValidationError(`Unknown chain output reference '${rawReference}'.`);
+    return entry.text;
+  });
+}
+function compactStructuredText(value) {
+  return JSON.stringify(value);
+}
+export function outputEntryFromResult(result, stepIndex) {
+  return {
+    text: result.structuredOutput !== undefined ? compactStructuredText(result.structuredOutput) : getSingleResultOutput(result),
+    ...result.structuredOutput !== undefined ? { structured: result.structuredOutput } : {},
+    agent: result.agent,
+    stepIndex
+  };
+}
+export function outputEntryFromAsyncResult(result, stepIndex) {
+  return {
+    text: result.structuredOutput !== undefined ? compactStructuredText(result.structuredOutput) : result.output,
+    ...result.structuredOutput !== undefined ? { structured: result.structuredOutput } : {},
+    agent: result.agent,
+    stepIndex
+  };
+}

package/extensions/dm-subagents/src/runs/shared/completion-guard.js

@@ -1,3 +1,116 @@
-var a=[/(^|[;&|()\s])rm\s+/,/(^|[;&|()\s])mv\s+/,/(^|[;&|()\s])cp\s+/,/(^|[;&|()\s])mkdir\s+/,/(^|[;&|()\s])touch\s+/,/(^|[;&|()\s])git\s+apply\b/,/(^|[;&|()\s])patch\s+/,/(^|[;&|()\s])sed\s+[^\n;&|]*\s-i\b/,/(^|[;&|()\s])perl\s+[^\n;&|]*\s-pi\b/,/(^|[;&|()]|\n)\s*tee\s+[^|&;]+/,/\b(writeFile|writeFileSync|appendFile|appendFileSync)\b/,/\bwrite_text\s*\(/,/\bopen\s*\([^)]*,\s*["'][wa]/];function c(e){let t=!1,n=!1;for(let r=0;r<e.length;r++){let s=e[r];if(s==="'"&&!n){t=!t;continue}if(s==='"'&&!t){n=!n;continue}if(t||n)continue;if(s!==">")continue;if(e[r-1]==="-")continue;let i=e[r+1]===">",u=r+(i?2:1);while(u<e.length&&/\s/.test(e[u]))u++;if(u>=e.length)continue;let o=e[u];if(o==="&"||o==="|"||o===";")continue;if(o==="("||o===")")continue;return!0}return!1}function l(e){return c(e)||a.some((t)=>t.test(e))}var f=[/\breview only\b/i,/\bsuggest fixes only\b/i,/\bonly return findings\b/i,/\breturn findings only\b/i],d=[/\bmust\s+(?:edit|modify|change|fix|patch|apply)\b/i,/\brequired\s+to\s+(?:edit|modify|change|fix|patch|apply)\b/i,/\bregardless\s+of\s+findings\b/i,/\balways\s+(?:edit|modify|change|fix|patch|apply)\b/i,/\bapply\s+(?:the\s+)?fix(?:es)?\s+directly\b/i,/\bmake\s+(?:the\s+)?code\s+changes\b/i],g=[/\bdo not edit\b/i,/\bdon't edit\b/i,/\bdo not modify\b/i,/\bdo not change files\b/i],h=[/\bdo not edit files?\s+outside\b/i,/\bdo not edit\s+outside\b/i,/\bdo not edit\s+unrelated files?\b/i,/\bdo not change\s+unrelated files?\b/i,/\bdo not modify\s+unrelated files?\b/i],F=[/\binvestigate\b/i,/\bscout\b/i,/\bresearch(?:er)?\b/i],b=[/\b(?:implement|fix|edit|modify|patch|refactor|delete)\b/i,/\b(?:update|add|remove|replace|create)\b(?!\s+(?:(?:a|an|the)\s+)?(?:report|summary|findings?)(?:\b|$))/i,/\bapply\s+(?:the\s+)?(?:changes?|fix(?:es)?|patch)\b/i,/\bmake\s+(?:the\s+)?changes\b/i,/\bdo those fixes\b/i],M=[/\b(?:implement|fix|edit|modify|patch|refactor)\b/i,/\bapply\s+(?:the\s+)?(?:changes?|fix(?:es)?|patch)\b/i,/\bmake\s+(?:the\s+)?changes\b/i,/\bdo those fixes\b/i,/\b(?:update|add|remove|replace|delete|create)\s+(?:the\s+)?(?:file|files|code|source|implementation|test|tests|component|function|module|class|method|logic|import|imports|readme|docs?|changelog|package\.json|config|manifest|extension|prompt|command)\b/i],A=new Set(["read","grep","find","ls","web_search","fetch_content","get_search_content","intercom","contact_supervisor"]);function m(e){return e.split(`
-`).filter((t)=>!/^\s*\[(?:Write to|Read from):/i.test(t)).filter((t)=>!/^\s*(?:Create and maintain progress at:|Update progress at:|\*\*Output:\*\*|Write your findings to(?: exactly this path)?:|This path is authoritative for this run\.|Ignore any other output filename or output path mentioned elsewhere)/i.test(t)).join(`
-`)}function v(e){let t=e;for(let n of h)t=t.replace(n," ");return t}function R(e,t){return e!==void 0&&e.length>0&&(t?.length??0)===0&&e.every((n)=>A.has(n))}function P(e,t){let n=m(t),r=v(n);if(f.some((i)=>i.test(r)))return!1;if(g.some((i)=>i.test(r)))return!1;if(F.some((i)=>i.test(e)))return!1;if(/\breviewer\b/i.test(e))return d.some((i)=>i.test(n));if(e==="worker"&&b.some((i)=>i.test(n)))return!0;return M.some((i)=>i.test(n))}function S(e){for(let t of e){if(t.role!=="assistant")continue;for(let n of t.content){if(n.type!=="toolCall")continue;if(n.name==="edit"||n.name==="write")return!0;if(n.name!=="bash")continue;let r=typeof n.arguments==="object"&&n.arguments!==null&&!Array.isArray(n.arguments)?n.arguments:{};if(typeof r.command==="string"&&l(r.command))return!0}}return!1}function _(e){let t=R(e.tools,e.mcpDirectTools)?!1:P(e.agent,e.task),n=S(e.messages);return{expectedMutation:t,attemptedMutation:n,triggered:t&&!n}}export{S as hasMutationToolCall,P as expectsImplementationMutation,_ as evaluateCompletionMutationGuard};
+import { isMutatingBashCommand } from "./long-running-guard.js";
+const REVIEW_ONLY_PATTERNS = [
+  /\breview only\b/i,
+  /\bsuggest fixes only\b/i,
+  /\bonly return findings\b/i,
+  /\breturn findings only\b/i
+];
+const REVIEWER_REQUIRED_EDIT_PATTERNS = [
+  /\bmust\s+(?:edit|modify|change|fix|patch|apply)\b/i,
+  /\brequired\s+to\s+(?:edit|modify|change|fix|patch|apply)\b/i,
+  /\bregardless\s+of\s+findings\b/i,
+  /\balways\s+(?:edit|modify|change|fix|patch|apply)\b/i,
+  /\bapply\s+(?:the\s+)?fix(?:es)?\s+directly\b/i,
+  /\bmake\s+(?:the\s+)?code\s+changes\b/i
+];
+const EXPLICIT_NO_EDIT_PATTERNS = [
+  /\bdo not edit\b/i,
+  /\bdon't edit\b/i,
+  /\bdo not modify\b/i,
+  /\bdo not change files\b/i
+];
+const SCOPED_NO_EDIT_CONSTRAINT_PATTERNS = [
+  /\bdo not edit files?\s+outside\b/i,
+  /\bdo not edit\s+outside\b/i,
+  /\bdo not edit\s+unrelated files?\b/i,
+  /\bdo not change\s+unrelated files?\b/i,
+  /\bdo not modify\s+unrelated files?\b/i
+];
+const RESEARCH_AGENT_PATTERNS = [
+  /\binvestigate\b/i,
+  /\bscout\b/i,
+  /\bresearch(?:er)?\b/i
+];
+const WORKER_IMPLEMENTATION_PATTERNS = [
+  /\b(?:implement|fix|edit|modify|patch|refactor|delete)\b/i,
+  /\b(?:update|add|remove|replace|create)\b(?!\s+(?:(?:a|an|the)\s+)?(?:report|summary|findings?)(?:\b|$))/i,
+  /\bapply\s+(?:the\s+)?(?:changes?|fix(?:es)?|patch)\b/i,
+  /\bmake\s+(?:the\s+)?changes\b/i,
+  /\bdo those fixes\b/i
+];
+const GENERAL_IMPLEMENTATION_PATTERNS = [
+  /\b(?:implement|fix|edit|modify|patch|refactor)\b/i,
+  /\bapply\s+(?:the\s+)?(?:changes?|fix(?:es)?|patch)\b/i,
+  /\bmake\s+(?:the\s+)?changes\b/i,
+  /\bdo those fixes\b/i,
+  /\b(?:update|add|remove|replace|delete|create)\s+(?:the\s+)?(?:file|files|code|source|implementation|test|tests|component|function|module|class|method|logic|import|imports|readme|docs?|changelog|package\.json|config|manifest|extension|prompt|command)\b/i
+];
+const READ_ONLY_BUILTIN_TOOLS = new Set([
+  "read",
+  "grep",
+  "find",
+  "ls",
+  "web_search",
+  "fetch_content",
+  "get_search_content",
+  "intercom",
+  "contact_supervisor"
+]);
+function stripFrameworkInstructions(task) {
+  return task.split(`
+`).filter((line) => !/^\s*\[(?:Write to|Read from):/i.test(line)).filter((line) => !/^\s*(?:Create and maintain progress at:|Update progress at:|\*\*Output:\*\*|Write your findings to(?: exactly this path)?:|This path is authoritative for this run\.|Ignore any other output filename or output path mentioned elsewhere)/i.test(line)).join(`
+`);
+}
+function stripScopedNoEditConstraints(task) {
+  let stripped = task;
+  for (const pattern of SCOPED_NO_EDIT_CONSTRAINT_PATTERNS) {
+    stripped = stripped.replace(pattern, " ");
+  }
+  return stripped;
+}
+function declaresOnlyReadOnlyTools(tools, mcpDirectTools) {
+  return tools !== undefined && tools.length > 0 && (mcpDirectTools?.length ?? 0) === 0 && tools.every((tool) => READ_ONLY_BUILTIN_TOOLS.has(tool));
+}
+export function expectsImplementationMutation(agent, task) {
+  const taskText = stripFrameworkInstructions(task);
+  const taskTextWithoutScopedConstraints = stripScopedNoEditConstraints(taskText);
+  if (REVIEW_ONLY_PATTERNS.some((pattern) => pattern.test(taskTextWithoutScopedConstraints)))
+    return false;
+  if (EXPLICIT_NO_EDIT_PATTERNS.some((pattern) => pattern.test(taskTextWithoutScopedConstraints)))
+    return false;
+  if (RESEARCH_AGENT_PATTERNS.some((pattern) => pattern.test(agent)))
+    return false;
+  if (/\breviewer\b/i.test(agent))
+    return REVIEWER_REQUIRED_EDIT_PATTERNS.some((pattern) => pattern.test(taskText));
+  const workerIntent = agent === "worker" && WORKER_IMPLEMENTATION_PATTERNS.some((pattern) => pattern.test(taskText));
+  if (workerIntent)
+    return true;
+  return GENERAL_IMPLEMENTATION_PATTERNS.some((pattern) => pattern.test(taskText));
+}
+export function hasMutationToolCall(messages) {
+  for (const message of messages) {
+    if (message.role !== "assistant")
+      continue;
+    for (const part of message.content) {
+      if (part.type !== "toolCall")
+        continue;
+      if (part.name === "edit" || part.name === "write")
+        return true;
+      if (part.name !== "bash")
+        continue;
+      const args = typeof part.arguments === "object" && part.arguments !== null && !Array.isArray(part.arguments) ? part.arguments : {};
+      if (typeof args.command === "string" && isMutatingBashCommand(args.command))
+        return true;
+    }
+  }
+  return false;
+}
+export function evaluateCompletionMutationGuard(input) {
+  const expectedMutation = declaresOnlyReadOnlyTools(input.tools, input.mcpDirectTools) ? false : expectsImplementationMutation(input.agent, input.task);
+  const attemptedMutation = hasMutationToolCall(input.messages);
+  return {
+    expectedMutation,
+    attemptedMutation,
+    triggered: expectedMutation && !attemptedMutation
+  };
+}

package/extensions/dm-subagents/src/runs/shared/dm-args.js

@@ -1 +1,208 @@
-import*as A from"node:fs";import*as P from"node:os";import*as X from"node:path";import{fileURLToPath as Ef}from"node:url";import*as k from"node:path";var Kf=128,Gf=4;function Vf(f){return typeof f==="string"&&f.length>0&&f.length<=Kf&&!k.isAbsolute(f)&&!f.includes("/")&&!f.includes("\\")&&!f.includes("..")}function h(f){return typeof f==="number"&&Number.isFinite(f)?f:void 0}function g(f,j){return typeof f==="string"&&f.length>0?f.slice(0,j):void 0}function u(f){if(!Array.isArray(f))return[];return f.map((j)=>{if(!j||typeof j!=="object")return;let $=j;if(!Vf($.runId))return;return{runId:$.runId,...h($.stepIndex)!==void 0?{stepIndex:h($.stepIndex)}:{},...g($.agent,128)?{agent:g($.agent,128)}:{}}}).filter((j)=>Boolean(j)).slice(0,Gf)}function w(f){if(!f)return[];try{return u(JSON.parse(f))}catch{return[]}}function r(f){let j=u(f);return j.length?JSON.stringify(j):""}import{createHash as bf}from"node:crypto";import*as S from"node:fs";import*as K from"node:os";import*as Q from"node:path";import*as q from"node:fs";import*as C from"node:os";import*as M from"node:path";import*as c from"node:os";import*as R from"node:path";function N(f){return f.trim().replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"unknown"}function yf(f){let j=f?.env??process.env,$=f&&Object.hasOwn(f,"getuid")?f.getuid:process.getuid?.bind(process);if(typeof $==="function")return`uid-${$()}`;for(let Z of["USERNAME","USER","LOGNAME"]){let G=j[Z];if(G)return`user-${N(G)}`}let T=f&&Object.hasOwn(f,"userInfo")?f.userInfo:c.userInfo;try{let Z=T?.().username;if(Z)return`user-${N(Z)}`}catch{}let J=j.USERPROFILE??j.HOME;if(J)return`home-${N(J)}`;let O=f&&Object.hasOwn(f,"homedir")?f.homedir:c.homedir;try{let Z=O?.();if(Z)return`home-${N(Z)}`}catch{}return"shared"}var L=R.join(c.tmpdir(),`dm-subagents-${yf()}`),qj=R.join(L,"async-subagent-results"),Uj=R.join(L,"async-subagent-runs"),Hf=R.join(L,"chain-runs"),Mj=R.join(L,"artifacts");var cf=".dm",Rf="@duckmind/dm-coding-agent",Lf="DM_SUBAGENTS_PI_CODING_AGENT_PACKAGE_ROOT";function p(f){return typeof f==="string"&&f.trim()?f:void 0}function d(f){if(!f)return;try{let j=JSON.parse(q.readFileSync(M.join(f,"package.json"),"utf-8"));if(j.name!==Rf)return;return p(j.piConfig?.configDir)}catch{return}}function Sf(f=process.argv[1],j=process.env[Lf]){let $=d(j);if($)return $;if(!f)return;try{let T=M.dirname(q.realpathSync(f));while(T!==M.dirname(T)){let J=d(T);if(J)return J;T=M.dirname(T)}}catch{}return}function Cf(f,j,$){return(f&&typeof f==="object"?p(f.CONFIG_DIR_NAME):void 0)??Sf(j,$)??cf}function t(){return Cf()}function I(f){return M.join(f,t())}function z(){let f=process.env.DM_CODING_AGENT_DIR;if(f==="~")return C.homedir();if(f?.startsWith("~/"))return M.join(C.homedir(),f.slice(2));return f||M.join(C.homedir(),t(),"agent")}var Ff=1,zf=604800000,s=new Set(["read","bash","edit","write","grep","find","ls","mcp"]),e=Q.join(K.homedir(),".config","mcp","mcp.json"),a={cursor:[Q.join(K.homedir(),".cursor","mcp.json")],"claude-code":[Q.join(K.homedir(),".claude","mcp.json"),Q.join(K.homedir(),".claude.json"),Q.join(K.homedir(),".claude","claude_desktop_config.json")],"claude-desktop":[Q.join(K.homedir(),"Library","Application Support","Claude","claude_desktop_config.json")],codex:[Q.join(K.homedir(),".codex","config.json")],windsurf:[Q.join(K.homedir(),".windsurf","mcp.json")],vscode:[".vscode/mcp.json"]};function ff(f,j=process.cwd()){if(!f?.length)return[];try{let $=wf(j),T=Nf();if(!T)return[];return mf($,T,uf($.settings?.toolPrefix),f)}catch{return[]}}function Nf(){let f=Q.join(z(),"mcp-cache.json"),j;try{j=JSON.parse(S.readFileSync(f,"utf-8"))}catch{return null}if(!j||typeof j!=="object")return null;let $=j;if($.version!==Ff||!$.servers||typeof $.servers!=="object"||Array.isArray($.servers))return null;return $}function wf(f){let j={mcpServers:{}};for(let $ of If(f)){let T=nf($);if(!T)continue;j=Df(j,of(T,f))}return j}function If(f){let j=Q.join(z(),"mcp.json"),$=Q.resolve(f,".mcp.json"),T=Q.resolve(I(f),"mcp.json"),J=[];if(e!==j)J.push(e);if(J.push(j),$!==j)J.push($);if(T!==j&&T!==$)J.push(T);return J}function nf(f){let j;try{j=JSON.parse(S.readFileSync(f,"utf-8"))}catch{return null}return xf(j)}function xf(f){if(!f||typeof f!=="object"||Array.isArray(f))return{mcpServers:{}};let j=f,$=j.mcpServers??j["mcp-servers"]??{};return{mcpServers:$&&typeof $==="object"&&!Array.isArray($)?$:{},imports:Array.isArray(j.imports)?j.imports.filter((T)=>rf(T)):void 0,settings:j.settings&&typeof j.settings==="object"&&!Array.isArray(j.settings)?j.settings:void 0}}function Df(f,j){let $=[...f.imports??[],...j.imports??[]];return{mcpServers:{...f.mcpServers,...j.mcpServers},imports:$.length?[...new Set($)]:void 0,settings:j.settings?{...f.settings,...j.settings}:f.settings}}function of(f,j){if(!f.imports?.length)return f;let $={};for(let T of f.imports){let J=vf(T,j);if(!J)continue;let O;try{O=JSON.parse(S.readFileSync(J,"utf-8"))}catch{continue}for(let[Z,G]of Object.entries(Pf(O,T)))if(!$[Z])$[Z]=G}return{imports:f.imports,settings:f.settings,mcpServers:{...$,...f.mcpServers}}}function vf(f,j){for(let $ of a[f]){let T=$.startsWith(".")?Q.resolve(j,$):$;if(S.existsSync(T))return T}return null}function Pf(f,j){if(!f||typeof f!=="object"||Array.isArray(f))return{};let $=f,T=j==="cursor"||j==="windsurf"||j==="vscode"?$.mcpServers??$["mcp-servers"]:$.mcpServers;return T&&typeof T==="object"&&!Array.isArray(T)?T:{}}function mf(f,j,$,T){let J=[],O=new Set,{servers:Z,tools:G}=hf(T);for(let[Y,B]of Object.entries(f.mcpServers)){let y=j.servers[Y];if(!gf(y,B))continue;let V=Z.has(Y)?!0:G.get(Y);if(!V)continue;for(let _ of Array.isArray(y.tools)?y.tools:[]){if(typeof _?.name!=="string"||!_.name)continue;if(V!==!0&&!V.has(_.name))continue;if(i(_.name,Y,$,B.excludeTools))continue;let U=F(_.name,Y,$);if(s.has(U)||O.has(U))continue;O.add(U),J.push(U)}if(B.exposeResources===!1)continue;for(let _ of Array.isArray(y.resources)?y.resources:[]){if(typeof _?.name!=="string"||!_.name||typeof _.uri!=="string"||!_.uri)continue;let U=`get_${pf(_.name)}`;if(V!==!0&&!V.has(U))continue;if(i(U,Y,$,B.excludeTools))continue;let H=F(U,Y,$);if(s.has(H)||O.has(H))continue;O.add(H),J.push(H)}}return J}function hf(f){let j=new Set,$=new Map;for(let T of f)if(T=T.replace(/\/+$/,""),T.includes("/")){let[J,O]=T.split("/",2);if(J&&O){if(!$.has(J))$.set(J,new Set);$.get(J).add(O)}else if(J)j.add(J)}else if(T)j.add(T);return{servers:j,tools:$}}function gf(f,j){if(!f||f.configHash!==kf(j))return!1;if(!f.cachedAt||typeof f.cachedAt!=="number")return!1;return Date.now()-f.cachedAt<=zf}function kf(f){let j={command:f.command,args:f.args,env:l(f.env),cwd:tf(f.cwd),url:f.url,headers:l(f.headers),auth:f.auth,bearerToken:sf(f),bearerTokenEnv:f.bearerTokenEnv,exposeResources:f.exposeResources,excludeTools:f.excludeTools};return bf("sha256").update(n(j)).digest("hex")}function uf(f){return f==="none"||f==="short"||f==="server"?f:"server"}function rf(f){return typeof f==="string"&&Object.hasOwn(a,f)}function df(f,j){if(j==="none")return"";if(j==="short")return f.replace(/-?mcp$/i,"").replace(/-/g,"_")||"mcp";return f.replace(/-/g,"_")}function F(f,j,$){let T=df(j,$);return T?`${T}_${f}`:f}function i(f,j,$,T){if(!Array.isArray(T)||T.length===0)return!1;let J=new Set([b(f),b(F(f,j,$)),b(F(f,j,"server")),b(F(f,j,"short"))]);return T.some((O)=>typeof O==="string"&&J.has(b(O)))}function b(f){return f.replace(/-/g,"_")}function pf(f){let j=f.replace(/[^a-zA-Z0-9]/g,"_").replace(/_+/g,"_").replace(/^_+/,"").replace(/_+$/,"").toLowerCase();if(!j||/^\d/.test(j))j=`resource${j?`_${j}`:""}`;return j}function l(f){if(!f||typeof f!=="object"||Array.isArray(f))return;let j={};for(let[$,T]of Object.entries(f))if(typeof T==="string")j[$]=x(T);return j}function x(f){return f.replace(/\$\{(\w+)\}/g,(j,$)=>process.env[$]??"").replace(/\$env:(\w+)/g,(j,$)=>process.env[$]??"")}function tf(f){if(typeof f!=="string")return;let j=x(f);if(j==="~")return K.homedir();if(j.startsWith("~/")||j.startsWith("~\\"))return Q.join(K.homedir(),j.slice(2));return j}function sf(f){if(typeof f.bearerToken==="string")return x(f.bearerToken);return typeof f.bearerTokenEnv==="string"?process.env[f.bearerTokenEnv]:void 0}function n(f){if(f===null||f===void 0||typeof f!=="object"){let $=JSON.stringify(f);return $===void 0?"undefined":$}if(Array.isArray(f))return`[${f.map(($)=>n($)).join(",")}]`;let j=f;return`{${Object.keys(j).sort().map(($)=>`${JSON.stringify($)}:${n(j[$])}`).join(",")}}`}import{Compile as kj}from"typebox/compile";var jf="DM_SUBAGENT_STRUCTURED_OUTPUT_SCHEMA",$f="DM_SUBAGENT_STRUCTURED_OUTPUT_CAPTURE";var Tf="DM_SUBAGENT_TOOL_BUDGET";function Jf(f){return f?JSON.stringify(f):void 0}var ef=["off","minimal","low","medium","high","xhigh"],lf=8000;function qf(f,j){let $=Ef(f),T=X.extname($),J=[".js",".mjs",".cjs",".ts",".mts",".cts"].includes(T)?T:".ts";return X.join(X.dirname($),`${j}${J}`)}function Uf(f){return X.basename(Ef(f)).startsWith("dm-args.")}function af(f=import.meta.url){let j=Uf(f)?"subagent-prompt-runtime":X.join("..","runs","shared","subagent-prompt-runtime");return qf(f,j)}function fj(f=import.meta.url){let j=Uf(f)?X.join("..","..","extension","fanout-child"):"fanout-child";return qf(f,j)}var Bf=af(),jj=fj(),$j="DM_SUBAGENT_CHILD",Tj="DM_SUBAGENT_ORCHESTRATOR_TARGET",Jj="DM_SUBAGENT_ORCHESTRATOR_SESSION_ID",Bj="DM_SUBAGENT_SUPERVISOR_CHANNEL_DIR",Of="DM_SUBAGENT_RUN_ID",Oj="DM_SUBAGENT_CHILD_AGENT",Wj="DM_SUBAGENT_CHILD_INDEX",Xj="DM_SUBAGENT_FANOUT_CHILD",D="DM_SUBAGENT_PARENT_EVENT_SINK",Wf="DM_SUBAGENT_PARENT_CONTROL_INBOX",o="DM_SUBAGENT_PARENT_ROOT_RUN_ID",Xf="DM_SUBAGENT_PARENT_RUN_ID",Zf="DM_SUBAGENT_PARENT_CHILD_INDEX",_f="DM_SUBAGENT_PARENT_DEPTH",Qf="DM_SUBAGENT_PARENT_PATH",v="DM_SUBAGENT_PARENT_CAPABILITY_TOKEN",Yf="DM_SUBAGENT_PARENT_SESSION",Zj="DM_SUBAGENT_STEER_INBOX";function Af(f){return f.trim().replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"unknown"}function _j(f,j,$){return X.join(L,"supervisor-channels",`${Af(f)}-${Af(j)}-${$}`)}function Qj(f,j,$=!1){if(!f||!j)return f;let T=f.lastIndexOf(":");if(T!==-1&&ef.includes(f.substring(T+1)))return $?`${f.slice(0,T)}:${j}`:f;return`${f}:${j}`}function lj(f){let j=[...f.baseArgs];if(f.sessionFile)A.mkdirSync(X.dirname(f.sessionFile),{recursive:!0}),j.push("--session",f.sessionFile);else{if(!f.sessionEnabled)j.push("--no-session");if(f.sessionDir)A.mkdirSync(f.sessionDir,{recursive:!0}),j.push("--session-dir",f.sessionDir)}let $=Qj(f.model,f.thinking);if($)j.push("--model",$);let T=f.tools?.filter((W)=>!(W.includes("/")||W.endsWith(".ts")||W.endsWith(".js")))??[],J=f.requireReadTool&&f.tools?.length&&!T.includes("read")?["read",...T]:T,O=J.includes("subagent"),Z=[];if(f.tools?.length){let W=[...J];for(let E of f.tools)if(!J.includes(E)&&(E.includes("/")||E.endsWith(".ts")||E.endsWith(".js")))Z.push(E);if(W.length>0){if(f.mcpDirectTools?.length)W.push(...ff(f.mcpDirectTools,f.cwd));j.push("--tools",W.join(","))}}let G=O?[Bf,jj]:[Bf];if(f.extensions!==void 0){j.push("--no-extensions");for(let W of[...new Set([...G,...Z,...f.extensions,...f.subagentOnlyExtensions??[]])])j.push("--extension",W)}else for(let W of[...new Set([...G,...Z,...f.subagentOnlyExtensions??[]])])j.push("--extension",W);if(!f.inheritSkills)j.push("--no-skills");let Y;if(f.systemPrompt!==void 0&&f.systemPrompt!==null){Y=A.mkdtempSync(X.join(P.tmpdir(),"dm-subagent-"));let W=(f.promptFileStem??"prompt").replace(/[^\w.-]/g,"_"),E=X.join(Y,`${W}.md`);A.writeFileSync(E,f.systemPrompt,{mode:384}),j.push(f.systemPromptMode==="replace"?"--system-prompt":"--append-system-prompt",E)}if(f.task.length>lf){if(!Y)Y=A.mkdtempSync(X.join(P.tmpdir(),"dm-subagent-"));let W=X.join(Y,"task.md");A.writeFileSync(W,`Task: ${f.task}`,{mode:384}),j.push(`@${W}`)}else j.push(`Task: ${f.task}`);let B={};B[$j]="1",B[Xj]=O?"1":"0";let y=Boolean(process.env[D]&&process.env[o]&&process.env[v]),V=f.parentRunId??f.runId??(y?process.env[Of]:void 0)??process.env[Xf]??"",_=f.parentChildIndex!==void 0?String(f.parentChildIndex):f.childIndex!==void 0?String(f.childIndex):process.env[Zf]??"",U=Number(process.env[_f]),H=f.parentDepth??(y&&Number.isFinite(U)?U+1:1),Mf=f.parentPath??[...w(process.env[Qf]),...V?[{runId:V,..._&&/^\d+$/.test(_)?{stepIndex:Number(_)}:{},...f.childAgentName?{agent:f.childAgentName}:{}}]:[]];if(B[D]=O?f.parentEventSink??process.env[D]??"":"",B[Wf]=O?f.parentControlInbox??process.env[Wf]??"":"",B[o]=O?f.parentRootRunId??process.env[o]??f.runId??"":"",B[Xf]=O?V:"",B[Zf]=O?_:"",B[_f]=O?String(H):"",B[Qf]=O?r(Mf):"",B[v]=O?f.parentCapabilityToken??process.env[v]??"":"",B.DM_SUBAGENT_INHERIT_PROJECT_CONTEXT=f.inheritProjectContext?"1":"0",B.DM_SUBAGENT_INHERIT_SKILLS=f.inheritSkills?"1":"0",f.intercomSessionName)B.DM_SUBAGENT_INTERCOM_SESSION_NAME=f.intercomSessionName;if(f.orchestratorIntercomTarget)B[Tj]=f.orchestratorIntercomTarget;if(f.parentSessionId)B[Jj]=f.parentSessionId;if(f.orchestratorIntercomTarget&&f.parentSessionId&&f.runId&&f.childAgentName){let W=f.childIndex??0,E=_j(f.runId,f.childAgentName,W);A.mkdirSync(X.join(E,"requests"),{recursive:!0}),A.mkdirSync(X.join(E,"replies"),{recursive:!0}),B[Bj]=E}if(f.runId)B[Of]=f.runId;if(f.childAgentName)B[Oj]=f.childAgentName;if(f.childIndex!==void 0)B[Wj]=String(f.childIndex);if(f.mcpDirectTools?.length)B.MCP_DIRECT_TOOLS=f.mcpDirectTools.join(",");else B.MCP_DIRECT_TOOLS="__none__";if(f.structuredOutput)B[$f]=f.structuredOutput.outputPath,B[jf]=f.structuredOutput.schemaPath;if(f.steerInboxDir)B[Zj]=f.steerInboxDir;let m=Jf(f.toolBudget);if(m)B[Tf]=m;return B[Yf]=f.parentSessionId??process.env[Yf]??"",{args:j,env:B,tempDir:Y}}var aj=w;function f$(f){if(!f)return;try{A.rmSync(f,{recursive:!0,force:!0})}catch{}}export{qf as resolveRuntimeExtensionPath,af as resolvePromptRuntimePath,fj as resolveFanoutChildPath,aj as parseParentPathEnv,f$ as cleanupTempDir,lj as buildPiArgs,Qj as applyThinkingSuffix,Bj as SUBAGENT_SUPERVISOR_CHANNEL_DIR_ENV,Zj as SUBAGENT_STEER_INBOX_ENV,Of as SUBAGENT_RUN_ID_ENV,Yf as SUBAGENT_PARENT_SESSION_ENV,Xf as SUBAGENT_PARENT_RUN_ID_ENV,o as SUBAGENT_PARENT_ROOT_RUN_ID_ENV,Qf as SUBAGENT_PARENT_PATH_ENV,D as SUBAGENT_PARENT_EVENT_SINK_ENV,_f as SUBAGENT_PARENT_DEPTH_ENV,Wf as SUBAGENT_PARENT_CONTROL_INBOX_ENV,Zf as SUBAGENT_PARENT_CHILD_INDEX_ENV,v as SUBAGENT_PARENT_CAPABILITY_TOKEN_ENV,Tj as SUBAGENT_ORCHESTRATOR_TARGET_ENV,Jj as SUBAGENT_ORCHESTRATOR_SESSION_ID_ENV,Xj as SUBAGENT_FANOUT_CHILD_ENV,Wj as SUBAGENT_CHILD_INDEX_ENV,$j as SUBAGENT_CHILD_ENV,Oj as SUBAGENT_CHILD_AGENT_ENV};
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { encodeNestedPathEnv, parseNestedPathEnv } from "./nested-path.js";
+import { resolveMcpDirectToolNames } from "./mcp-direct-tool-allowlist.js";
+import { STRUCTURED_OUTPUT_CAPTURE_ENV, STRUCTURED_OUTPUT_SCHEMA_ENV } from "./structured-output.js";
+import { TEMP_ROOT_DIR } from "../../shared/types.js";
+import { TOOL_BUDGET_ENV, encodeToolBudgetEnv } from "./tool-budget.js";
+const THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh"];
+const TASK_ARG_LIMIT = 8000;
+export function resolveRuntimeExtensionPath(moduleUrl, relativeStem) {
+  const modulePath = fileURLToPath(moduleUrl);
+  const moduleSuffix = path.extname(modulePath);
+  const runtimeSuffix = [".js", ".mjs", ".cjs", ".ts", ".mts", ".cts"].includes(moduleSuffix) ? moduleSuffix : ".ts";
+  return path.join(path.dirname(modulePath), `${relativeStem}${runtimeSuffix}`);
+}
+function isStandaloneDmArgsModule(moduleUrl) {
+  return path.basename(fileURLToPath(moduleUrl)).startsWith("dm-args.");
+}
+export function resolvePromptRuntimePath(moduleUrl = import.meta.url) {
+  const promptStem = isStandaloneDmArgsModule(moduleUrl) ? "subagent-prompt-runtime" : path.join("..", "runs", "shared", "subagent-prompt-runtime");
+  return resolveRuntimeExtensionPath(moduleUrl, promptStem);
+}
+export function resolveFanoutChildPath(moduleUrl = import.meta.url) {
+  const fanoutStem = isStandaloneDmArgsModule(moduleUrl) ? path.join("..", "..", "extension", "fanout-child") : "fanout-child";
+  return resolveRuntimeExtensionPath(moduleUrl, fanoutStem);
+}
+const PROMPT_RUNTIME_EXTENSION_PATH = resolvePromptRuntimePath();
+const FANOUT_CHILD_EXTENSION_PATH = resolveFanoutChildPath();
+export const SUBAGENT_CHILD_ENV = "DM_SUBAGENT_CHILD";
+export const SUBAGENT_ORCHESTRATOR_TARGET_ENV = "DM_SUBAGENT_ORCHESTRATOR_TARGET";
+export const SUBAGENT_ORCHESTRATOR_SESSION_ID_ENV = "DM_SUBAGENT_ORCHESTRATOR_SESSION_ID";
+export const SUBAGENT_SUPERVISOR_CHANNEL_DIR_ENV = "DM_SUBAGENT_SUPERVISOR_CHANNEL_DIR";
+export const SUBAGENT_RUN_ID_ENV = "DM_SUBAGENT_RUN_ID";
+export const SUBAGENT_CHILD_AGENT_ENV = "DM_SUBAGENT_CHILD_AGENT";
+export const SUBAGENT_CHILD_INDEX_ENV = "DM_SUBAGENT_CHILD_INDEX";
+export const SUBAGENT_FANOUT_CHILD_ENV = "DM_SUBAGENT_FANOUT_CHILD";
+export const SUBAGENT_PARENT_EVENT_SINK_ENV = "DM_SUBAGENT_PARENT_EVENT_SINK";
+export const SUBAGENT_PARENT_CONTROL_INBOX_ENV = "DM_SUBAGENT_PARENT_CONTROL_INBOX";
+export const SUBAGENT_PARENT_ROOT_RUN_ID_ENV = "DM_SUBAGENT_PARENT_ROOT_RUN_ID";
+export const SUBAGENT_PARENT_RUN_ID_ENV = "DM_SUBAGENT_PARENT_RUN_ID";
+export const SUBAGENT_PARENT_CHILD_INDEX_ENV = "DM_SUBAGENT_PARENT_CHILD_INDEX";
+export const SUBAGENT_PARENT_DEPTH_ENV = "DM_SUBAGENT_PARENT_DEPTH";
+export const SUBAGENT_PARENT_PATH_ENV = "DM_SUBAGENT_PARENT_PATH";
+export const SUBAGENT_PARENT_CAPABILITY_TOKEN_ENV = "DM_SUBAGENT_PARENT_CAPABILITY_TOKEN";
+export const SUBAGENT_PARENT_SESSION_ENV = "DM_SUBAGENT_PARENT_SESSION";
+export const SUBAGENT_STEER_INBOX_ENV = "DM_SUBAGENT_STEER_INBOX";
+function sanitizeSupervisorChannelSegment(value) {
+  return value.trim().replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "unknown";
+}
+function supervisorChannelDir(runId, agent, childIndex) {
+  return path.join(TEMP_ROOT_DIR, "supervisor-channels", `${sanitizeSupervisorChannelSegment(runId)}-${sanitizeSupervisorChannelSegment(agent)}-${childIndex}`);
+}
+export function applyThinkingSuffix(model, thinking, replaceExisting = false) {
+  if (!model || !thinking)
+    return model;
+  const colonIdx = model.lastIndexOf(":");
+  if (colonIdx !== -1 && THINKING_LEVELS.includes(model.substring(colonIdx + 1))) {
+    return replaceExisting ? `${model.slice(0, colonIdx)}:${thinking}` : model;
+  }
+  return `${model}:${thinking}`;
+}
+export function buildPiArgs(input) {
+  const args = [...input.baseArgs];
+  if (input.sessionFile) {
+    fs.mkdirSync(path.dirname(input.sessionFile), { recursive: true });
+    args.push("--session", input.sessionFile);
+  } else {
+    if (!input.sessionEnabled) {
+      args.push("--no-session");
+    }
+    if (input.sessionDir) {
+      fs.mkdirSync(input.sessionDir, { recursive: true });
+      args.push("--session-dir", input.sessionDir);
+    }
+  }
+  const modelArg = applyThinkingSuffix(input.model, input.thinking);
+  if (modelArg) {
+    args.push("--model", modelArg);
+  }
+  const declaredBuiltinToolsBase = input.tools?.filter((tool) => !(tool.includes("/") || tool.endsWith(".ts") || tool.endsWith(".js"))) ?? [];
+  const declaredBuiltinTools = input.requireReadTool && input.tools?.length && !declaredBuiltinToolsBase.includes("read") ? ["read", ...declaredBuiltinToolsBase] : declaredBuiltinToolsBase;
+  const fanoutAuthorized = declaredBuiltinTools.includes("subagent");
+  const toolExtensionPaths = [];
+  if (input.tools?.length) {
+    const builtinTools = [...declaredBuiltinTools];
+    for (const tool of input.tools) {
+      if (!declaredBuiltinTools.includes(tool) && (tool.includes("/") || tool.endsWith(".ts") || tool.endsWith(".js"))) {
+        toolExtensionPaths.push(tool);
+      }
+    }
+    if (builtinTools.length > 0) {
+      if (input.mcpDirectTools?.length) {
+        builtinTools.push(...resolveMcpDirectToolNames(input.mcpDirectTools, input.cwd));
+      }
+      args.push("--tools", builtinTools.join(","));
+    }
+  }
+  const runtimeExtensions = fanoutAuthorized ? [PROMPT_RUNTIME_EXTENSION_PATH, FANOUT_CHILD_EXTENSION_PATH] : [PROMPT_RUNTIME_EXTENSION_PATH];
+  if (input.extensions !== undefined) {
+    args.push("--no-extensions");
+    for (const extPath of [...new Set([...runtimeExtensions, ...toolExtensionPaths, ...input.extensions, ...input.subagentOnlyExtensions ?? []])]) {
+      args.push("--extension", extPath);
+    }
+  } else {
+    for (const extPath of [...new Set([...runtimeExtensions, ...toolExtensionPaths, ...input.subagentOnlyExtensions ?? []])]) {
+      args.push("--extension", extPath);
+    }
+  }
+  if (!input.inheritSkills) {
+    args.push("--no-skills");
+  }
+  let tempDir;
+  if (input.systemPrompt !== undefined && input.systemPrompt !== null) {
+    tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "dm-subagent-"));
+    const stem = (input.promptFileStem ?? "prompt").replace(/[^\w.-]/g, "_");
+    const promptPath = path.join(tempDir, `${stem}.md`);
+    fs.writeFileSync(promptPath, input.systemPrompt, { mode: 384 });
+    args.push(input.systemPromptMode === "replace" ? "--system-prompt" : "--append-system-prompt", promptPath);
+  }
+  if (input.task.length > TASK_ARG_LIMIT) {
+    if (!tempDir) {
+      tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "dm-subagent-"));
+    }
+    const taskFilePath = path.join(tempDir, "task.md");
+    fs.writeFileSync(taskFilePath, `Task: ${input.task}`, { mode: 384 });
+    args.push(`@${taskFilePath}`);
+  } else {
+    args.push(`Task: ${input.task}`);
+  }
+  const env = {};
+  env[SUBAGENT_CHILD_ENV] = "1";
+  env[SUBAGENT_FANOUT_CHILD_ENV] = fanoutAuthorized ? "1" : "0";
+  const inheritedNestedRoute = Boolean(process.env[SUBAGENT_PARENT_EVENT_SINK_ENV] && process.env[SUBAGENT_PARENT_ROOT_RUN_ID_ENV] && process.env[SUBAGENT_PARENT_CAPABILITY_TOKEN_ENV]);
+  const parentRunId = input.parentRunId ?? input.runId ?? (inheritedNestedRoute ? process.env[SUBAGENT_RUN_ID_ENV] : undefined) ?? process.env[SUBAGENT_PARENT_RUN_ID_ENV] ?? "";
+  const parentChildIndex = input.parentChildIndex !== undefined ? String(input.parentChildIndex) : input.childIndex !== undefined ? String(input.childIndex) : process.env[SUBAGENT_PARENT_CHILD_INDEX_ENV] ?? "";
+  const inheritedDepth = Number(process.env[SUBAGENT_PARENT_DEPTH_ENV]);
+  const parentDepth = input.parentDepth ?? (inheritedNestedRoute && Number.isFinite(inheritedDepth) ? inheritedDepth + 1 : 1);
+  const parentPath = input.parentPath ?? [
+    ...parseNestedPathEnv(process.env[SUBAGENT_PARENT_PATH_ENV]),
+    ...parentRunId ? [{
+      runId: parentRunId,
+      ...parentChildIndex && /^\d+$/.test(parentChildIndex) ? { stepIndex: Number(parentChildIndex) } : {},
+      ...input.childAgentName ? { agent: input.childAgentName } : {}
+    }] : []
+  ];
+  env[SUBAGENT_PARENT_EVENT_SINK_ENV] = fanoutAuthorized ? input.parentEventSink ?? process.env[SUBAGENT_PARENT_EVENT_SINK_ENV] ?? "" : "";
+  env[SUBAGENT_PARENT_CONTROL_INBOX_ENV] = fanoutAuthorized ? input.parentControlInbox ?? process.env[SUBAGENT_PARENT_CONTROL_INBOX_ENV] ?? "" : "";
+  env[SUBAGENT_PARENT_ROOT_RUN_ID_ENV] = fanoutAuthorized ? input.parentRootRunId ?? process.env[SUBAGENT_PARENT_ROOT_RUN_ID_ENV] ?? input.runId ?? "" : "";
+  env[SUBAGENT_PARENT_RUN_ID_ENV] = fanoutAuthorized ? parentRunId : "";
+  env[SUBAGENT_PARENT_CHILD_INDEX_ENV] = fanoutAuthorized ? parentChildIndex : "";
+  env[SUBAGENT_PARENT_DEPTH_ENV] = fanoutAuthorized ? String(parentDepth) : "";
+  env[SUBAGENT_PARENT_PATH_ENV] = fanoutAuthorized ? encodeNestedPathEnv(parentPath) : "";
+  env[SUBAGENT_PARENT_CAPABILITY_TOKEN_ENV] = fanoutAuthorized ? input.parentCapabilityToken ?? process.env[SUBAGENT_PARENT_CAPABILITY_TOKEN_ENV] ?? "" : "";
+  env.DM_SUBAGENT_INHERIT_PROJECT_CONTEXT = input.inheritProjectContext ? "1" : "0";
+  env.DM_SUBAGENT_INHERIT_SKILLS = input.inheritSkills ? "1" : "0";
+  if (input.intercomSessionName) {
+    env.DM_SUBAGENT_INTERCOM_SESSION_NAME = input.intercomSessionName;
+  }
+  if (input.orchestratorIntercomTarget) {
+    env[SUBAGENT_ORCHESTRATOR_TARGET_ENV] = input.orchestratorIntercomTarget;
+  }
+  if (input.parentSessionId) {
+    env[SUBAGENT_ORCHESTRATOR_SESSION_ID_ENV] = input.parentSessionId;
+  }
+  if (input.orchestratorIntercomTarget && input.parentSessionId && input.runId && input.childAgentName) {
+    const childIndex = input.childIndex ?? 0;
+    const channelDir = supervisorChannelDir(input.runId, input.childAgentName, childIndex);
+    fs.mkdirSync(path.join(channelDir, "requests"), { recursive: true });
+    fs.mkdirSync(path.join(channelDir, "replies"), { recursive: true });
+    env[SUBAGENT_SUPERVISOR_CHANNEL_DIR_ENV] = channelDir;
+  }
+  if (input.runId) {
+    env[SUBAGENT_RUN_ID_ENV] = input.runId;
+  }
+  if (input.childAgentName) {
+    env[SUBAGENT_CHILD_AGENT_ENV] = input.childAgentName;
+  }
+  if (input.childIndex !== undefined) {
+    env[SUBAGENT_CHILD_INDEX_ENV] = String(input.childIndex);
+  }
+  if (input.mcpDirectTools?.length) {
+    env.MCP_DIRECT_TOOLS = input.mcpDirectTools.join(",");
+  } else {
+    env.MCP_DIRECT_TOOLS = "__none__";
+  }
+  if (input.structuredOutput) {
+    env[STRUCTURED_OUTPUT_CAPTURE_ENV] = input.structuredOutput.outputPath;
+    env[STRUCTURED_OUTPUT_SCHEMA_ENV] = input.structuredOutput.schemaPath;
+  }
+  if (input.steerInboxDir) {
+    env[SUBAGENT_STEER_INBOX_ENV] = input.steerInboxDir;
+  }
+  const encodedToolBudget = encodeToolBudgetEnv(input.toolBudget);
+  if (encodedToolBudget)
+    env[TOOL_BUDGET_ENV] = encodedToolBudget;
+  env[SUBAGENT_PARENT_SESSION_ENV] = input.parentSessionId ?? process.env[SUBAGENT_PARENT_SESSION_ENV] ?? "";
+  return { args, env, tempDir };
+}
+export const parseParentPathEnv = parseNestedPathEnv;
+export function cleanupTempDir(tempDir) {
+  if (!tempDir)
+    return;
+  try {
+    fs.rmSync(tempDir, { recursive: true, force: true });
+  } catch {}
+}

package/extensions/dm-subagents/src/runs/shared/dm-spawn.js

@@ -1 +1,90 @@
-import*as X from"node:fs";import*as Q from"node:path";import{fileURLToPath as O}from"node:url";var V="@duckmind/dm-coding-agent",B="DM_SUBAGENT_PI_BINARY";function Y(j){let q=Q.dirname(j);while(q!==Q.dirname(q)){let H=Q.join(q,"package.json");if(X.existsSync(H)){if(JSON.parse(X.readFileSync(H,"utf-8")).name===V)return q}q=Q.dirname(q)}return}function D(){return Y(O(import.meta.resolve(V)))}function J(){try{let j=process.argv[1];return j?Y(X.realpathSync(j)):void 0}catch{return}}function K(j,q){if(!q(j))return!1;return/\.(?:mjs|cjs|js)$/i.test(j)}function m(j){return Q.isAbsolute(j)?j:Q.resolve(j)}function u(j={}){let q=j.existsSync??X.existsSync,H=j.readFileSync??((z,Z)=>X.readFileSync(z,Z)),$=j.argv1??process.argv[1];if($){let z=m($);if(K(z,q))return z}try{let Z=(j.resolvePackageJson??(()=>{let U=j.piPackageRoot??J();if(U)return Q.join(U,"package.json");let W=j.resolvePackageEntry?Y(j.resolvePackageEntry()):D();if(!W)throw Error(`Could not resolve ${V} package root`);return Q.join(W,"package.json")}))(),M=JSON.parse(H(Z,"utf-8")).bin,w=typeof M==="string"?M:M?.pi??Object.values(M??{})[0];if(!w)return;let L=Q.resolve(Q.dirname(Z),w);if(K(L,q))return L}catch{return}return}function v(j,q={}){let $=(q.env??process.env)[B]?.trim();if($)return{command:$,args:j};if((q.platform??process.platform)==="win32"){let Z=u(q);if(Z)return{command:q.execPath??process.execPath,args:[Z,...j]}}return{command:"dm",args:j}}export{u as resolveWindowsPiCliScript,J as resolvePiPackageRoot,D as resolveInstalledPiPackageRoot,v as getPiSpawnCommand,Y as findPiPackageRootFromEntry,V as PI_CODING_AGENT_PACKAGE,B as DM_SUBAGENT_PI_BINARY_ENV};
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+export const PI_CODING_AGENT_PACKAGE = "@duckmind/dm-coding-agent";
+export const DM_SUBAGENT_PI_BINARY_ENV = "DM_SUBAGENT_PI_BINARY";
+export function findPiPackageRootFromEntry(entryPoint) {
+  let dir = path.dirname(entryPoint);
+  while (dir !== path.dirname(dir)) {
+    const packageJsonPath = path.join(dir, "package.json");
+    if (fs.existsSync(packageJsonPath)) {
+      const pkg = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8"));
+      if (pkg.name === PI_CODING_AGENT_PACKAGE)
+        return dir;
+    }
+    dir = path.dirname(dir);
+  }
+  return;
+}
+export function resolveInstalledPiPackageRoot() {
+  return findPiPackageRootFromEntry(fileURLToPath(import.meta.resolve(PI_CODING_AGENT_PACKAGE)));
+}
+export function resolvePiPackageRoot() {
+  try {
+    const entry = process.argv[1];
+    return entry ? findPiPackageRootFromEntry(fs.realpathSync(entry)) : undefined;
+  } catch {
+    return;
+  }
+}
+function isRunnableNodeScript(filePath, existsSync) {
+  if (!existsSync(filePath))
+    return false;
+  return /\.(?:mjs|cjs|js)$/i.test(filePath);
+}
+function normalizePath(filePath) {
+  return path.isAbsolute(filePath) ? filePath : path.resolve(filePath);
+}
+export function resolveWindowsPiCliScript(deps = {}) {
+  const existsSync = deps.existsSync ?? fs.existsSync;
+  const readFileSync = deps.readFileSync ?? ((filePath, encoding) => fs.readFileSync(filePath, encoding));
+  const argv1 = deps.argv1 ?? process.argv[1];
+  if (argv1) {
+    const argvPath = normalizePath(argv1);
+    if (isRunnableNodeScript(argvPath, existsSync)) {
+      return argvPath;
+    }
+  }
+  try {
+    const resolvePackageJson = deps.resolvePackageJson ?? (() => {
+      const root = deps.piPackageRoot ?? resolvePiPackageRoot();
+      if (root)
+        return path.join(root, "package.json");
+      const packageRoot = deps.resolvePackageEntry ? findPiPackageRootFromEntry(deps.resolvePackageEntry()) : resolveInstalledPiPackageRoot();
+      if (!packageRoot)
+        throw new Error(`Could not resolve ${PI_CODING_AGENT_PACKAGE} package root`);
+      return path.join(packageRoot, "package.json");
+    });
+    const packageJsonPath = resolvePackageJson();
+    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    const binField = packageJson.bin;
+    const binPath = typeof binField === "string" ? binField : binField?.pi ?? Object.values(binField ?? {})[0];
+    if (!binPath)
+      return;
+    const candidate = path.resolve(path.dirname(packageJsonPath), binPath);
+    if (isRunnableNodeScript(candidate, existsSync)) {
+      return candidate;
+    }
+  } catch {
+    return;
+  }
+  return;
+}
+export function getPiSpawnCommand(args, deps = {}) {
+  const env = deps.env ?? process.env;
+  const piBinary = env[DM_SUBAGENT_PI_BINARY_ENV]?.trim();
+  if (piBinary) {
+    return { command: piBinary, args };
+  }
+  const platform = deps.platform ?? process.platform;
+  if (platform === "win32") {
+    const piCliPath = resolveWindowsPiCliScript(deps);
+    if (piCliPath) {
+      return {
+        command: deps.execPath ?? process.execPath,
+        args: [piCliPath, ...args]
+      };
+    }
+  }
+  return { command: "dm", args };
+}