@gaodefa/daocore 2026.5.34 → 2026.5.36

package/dist/acp-spawn-Czqyiryw.js

@@ -1,1275 +0,0 @@
-import { c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-DyL154ka.js";
-import { i as formatErrorMessage } from "./errors-D_oyTIw2.js";
-import { t as appendRegularFile } from "./regular-file-DaVeNX32.js";
-import "./agent-scope-Dx1S0aWX.js";
-import { a as isSubagentSessionKey, c as parseAgentSessionKey } from "./session-key-utils-Ce_xWkNq.js";
-import { d as resolveAgentIdFromSessionKey, l as normalizeAgentId } from "./session-key-Bte0mmcq.js";
-import { c as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig } from "./agent-scope-config-CJUQxn7u.js";
-import "./regular-file-BYUjzGUS.js";
-import { r as logVerbose } from "./globals-DhGeOA1P.js";
-import { t as createSubsystemLogger } from "./subsystem-CppbuBPw.js";
-import { i as getRuntimeConfig } from "./io-Ct2JqgbR.js";
-import { t as parseDurationMs } from "./parse-duration-CD4d_yk2.js";
-import "./config-CLrwLpl0.js";
-import { r as callGateway } from "./call-BFqofFc5.js";
-import { l as onAgentEvent } from "./agent-events-Cfj53GyA.js";
-import { n as deliveryContextFromSession } from "./delivery-context.shared-XybGGRNt.js";
-import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, u as resolveStorePath } from "./paths-8MFrTNIB.js";
-import { t as loadSessionStore } from "./store-load-B817r-3Z.js";
-import "./store-C4uyNaPD.js";
-import { a as resolveSessionTranscriptFile } from "./transcript-CalMl_Y7.js";
-import { i as normalizeAssistantPhase } from "./chat-message-content-DN9xEd6w.js";
-import { i as areHeartbeatsEnabled, o as requestHeartbeat } from "./heartbeat-wake-BEc0M8hq.js";
-import { a as enqueueSystemEvent } from "./system-events-By5h2EoB.js";
-import { h as listTasksForOwnerKey } from "./task-registry-XxKmge32.js";
-import "./runtime-internal-CQ1hy6SS.js";
-import { c as recordTaskRunProgressByRunId, i as createRunningTaskRun } from "./detached-task-runtime-B8jNifvc.js";
-import { t as getAcpSessionManager } from "./manager-HWtsfBUe.js";
-import { n as readAcpSessionEntry } from "./session-meta-D0EJkrLy.js";
-import { n as getSessionBindingService, r as isSessionBindingError } from "./session-binding-service-Dt5NxtK1.js";
-import { a as resolveSubagentCapabilities, c as findAcpUnsupportedInheritedToolAllow, d as formatAcpInheritedToolDenyError, f as inheritedToolAllowPatch, l as findAcpUnsupportedInheritedToolDeny, o as resolveSubagentCapabilityStore, p as inheritedToolDenyPatch, s as getSubagentDepthFromSessionStore, t as isSubagentEnvelopeSession, u as formatAcpInheritedToolAllowError } from "./subagent-capabilities-CL0g3hBY.js";
-import { n as resolveSandboxRuntimeStatus } from "./runtime-status-4ANAM1GR.js";
-import { i as resolveAcpAgentPolicyError, r as isAcpEnabledByPolicy } from "./policy-DO1AVyFV.js";
-import "./heartbeat-0BSacHYL.js";
-import { i as scopedHeartbeatWakeOptionsForPolicy, n as resolveEventSessionRoutingPolicy, t as resolveEventSessionKeyForPolicy } from "./event-session-routing-CiWm70tS.js";
-import { t as formatConversationTarget } from "./delivery-context-BNG7Sxrb.js";
-import { a as resolveSpawnedWorkspaceInheritance, s as resolveSubagentTargetPolicy, t as resolveRequesterOriginForChild } from "./spawn-requester-origin-B3bNw9kY.js";
-import { c as resolveMainSessionAlias, s as resolveInternalSessionKey } from "./sessions-helpers-Ctik-uPl.js";
-import { r as routeToDeliveryFields, t as routeFromBindingRecord } from "./route-projection-Ox5mcy3Q.js";
-import { t as AGENT_LANE_SUBAGENT } from "./lanes-ReZ09_e4.js";
-import { c as resolveThreadBindingMaxAgeMsForChannel, n as formatThreadBindingSpawnDisabledError, o as resolveThreadBindingIdleTimeoutMsForChannel, t as formatThreadBindingDisabledError, u as resolveThreadBindingSpawnPolicy } from "./thread-bindings-policy-BZBsdp3j.js";
-import { r as countActiveRunsForSession, s as getSubagentRunByChildSessionKey } from "./subagent-registry-BHt8-wIZ.js";
-import { r as resolveInboundConversationResolution, t as resolveChannelDefaultBindingPlacement } from "./conversation-resolution-a-s6MfCv.js";
-import { i as resolveThreadBindingThreadName, r as resolveThreadBindingIntroText } from "./thread-bindings-messages-D73K8IGt.js";
-import { a as resolveAcpThreadSessionDetailLines, n as resolveAcpSessionCwd } from "./session-identifiers-CYNMp_8N.js";
-import path from "node:path";
-import fs, { mkdir } from "node:fs/promises";
-import crypto from "node:crypto";
-//#region src/acp/control-plane/spawn.ts
-async function cleanupFailedAcpSpawn(params) {
-	if (params.runtimeCloseHandle) await params.runtimeCloseHandle.runtime.close({
-		handle: params.runtimeCloseHandle.handle,
-		reason: "spawn-failed"
-	}).catch((err) => {
-		logVerbose(`acp-spawn: runtime cleanup close failed for ${params.sessionKey}: ${String(err)}`);
-	});
-	await getAcpSessionManager().closeSession({
-		cfg: params.cfg,
-		sessionKey: params.sessionKey,
-		reason: "spawn-failed",
-		allowBackendUnavailable: true,
-		requireAcpSession: false
-	}).catch((err) => {
-		logVerbose(`acp-spawn: manager cleanup close failed for ${params.sessionKey}: ${String(err)}`);
-	});
-	await getSessionBindingService().unbind({
-		targetSessionKey: params.sessionKey,
-		reason: "spawn-failed"
-	}).catch((err) => {
-		logVerbose(`acp-spawn: binding cleanup unbind failed for ${params.sessionKey}: ${String(err)}`);
-	});
-	if (!params.shouldDeleteSession) return;
-	await callGateway({
-		method: "sessions.delete",
-		params: {
-			key: params.sessionKey,
-			deleteTranscript: params.deleteTranscript,
-			emitLifecycleHooks: false
-		},
-		timeoutMs: 1e4
-	}).catch(() => {});
-}
-//#endregion
-//#region src/agents/acp-spawn-parent-stream.ts
-const DEFAULT_STREAM_FLUSH_MS = 2500;
-const DEFAULT_NO_OUTPUT_NOTICE_MS = 6e4;
-const DEFAULT_NO_OUTPUT_POLL_MS = 15e3;
-const DEFAULT_MAX_RELAY_LIFETIME_MS = 360 * 60 * 1e3;
-const STREAM_BUFFER_MAX_CHARS = 4e3;
-const STREAM_SNIPPET_MAX_CHARS = 220;
-function compactWhitespace(value) {
-	return value.replace(/\s+/g, " ").trim();
-}
-function truncate(value, maxChars) {
-	if (value.length <= maxChars) return value;
-	if (maxChars <= 1) return value.slice(0, maxChars);
-	return `${value.slice(0, maxChars - 1)}…`;
-}
-function toFiniteNumber(value) {
-	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-function normalizeStringArray(value) {
-	if (!Array.isArray(value)) return [];
-	return value.filter((item) => typeof item === "string" && item.length > 0);
-}
-function formatProxyEnvSummary(keys) {
-	if (keys.length === 0) return "proxy env: none";
-	return `proxy env: ${keys.join(", ")}`;
-}
-function resolveAcpStreamLogPathFromSessionFile(sessionFile, sessionId) {
-	const baseDir = path.dirname(path.resolve(sessionFile));
-	return path.join(baseDir, `${sessionId}.acp-stream.jsonl`);
-}
-function resolveAcpSpawnStreamLogPath(params) {
-	const childSessionKey = normalizeOptionalString(params.childSessionKey);
-	if (!childSessionKey) return;
-	const storeEntry = readAcpSessionEntry({ sessionKey: childSessionKey });
-	const sessionId = normalizeOptionalString(storeEntry?.entry?.sessionId);
-	if (!storeEntry || !sessionId) return;
-	try {
-		return resolveAcpStreamLogPathFromSessionFile(resolveSessionFilePath(sessionId, storeEntry.entry, resolveSessionFilePathOptions({ storePath: storeEntry.storePath })), sessionId);
-	} catch {
-		return;
-	}
-}
-function startAcpSpawnParentStreamRelay(params) {
-	const runId = normalizeOptionalString(params.runId) ?? "";
-	const parentSessionKey = normalizeOptionalString(params.parentSessionKey) ?? "";
-	if (!runId || !parentSessionKey) return {
-		dispose: () => {},
-		notifyStarted: () => {}
-	};
-	const streamFlushMs = typeof params.streamFlushMs === "number" && Number.isFinite(params.streamFlushMs) ? Math.max(0, Math.floor(params.streamFlushMs)) : DEFAULT_STREAM_FLUSH_MS;
-	const noOutputNoticeMs = typeof params.noOutputNoticeMs === "number" && Number.isFinite(params.noOutputNoticeMs) ? Math.max(0, Math.floor(params.noOutputNoticeMs)) : DEFAULT_NO_OUTPUT_NOTICE_MS;
-	const noOutputPollMs = typeof params.noOutputPollMs === "number" && Number.isFinite(params.noOutputPollMs) ? Math.max(250, Math.floor(params.noOutputPollMs)) : DEFAULT_NO_OUTPUT_POLL_MS;
-	const maxRelayLifetimeMs = typeof params.maxRelayLifetimeMs === "number" && Number.isFinite(params.maxRelayLifetimeMs) ? Math.max(1e3, Math.floor(params.maxRelayLifetimeMs)) : DEFAULT_MAX_RELAY_LIFETIME_MS;
-	const relayLabel = truncate(compactWhitespace(params.agentId), 40) || "ACP child";
-	const contextPrefix = `acp-spawn:${runId}`;
-	const logPath = normalizeOptionalString(params.logPath);
-	let logDirReady = false;
-	let pendingLogLines = "";
-	let logFlushScheduled = false;
-	let logWriteChain = Promise.resolve();
-	const flushLogBuffer = () => {
-		if (!logPath || !pendingLogLines) return;
-		const chunk = pendingLogLines;
-		pendingLogLines = "";
-		logWriteChain = logWriteChain.then(async () => {
-			if (!logDirReady) {
-				await mkdir(path.dirname(logPath), { recursive: true });
-				logDirReady = true;
-			}
-			await appendRegularFile({
-				filePath: logPath,
-				content: chunk
-			});
-		}).catch(() => {});
-	};
-	const scheduleLogFlush = () => {
-		if (!logPath || logFlushScheduled) return;
-		logFlushScheduled = true;
-		queueMicrotask(() => {
-			logFlushScheduled = false;
-			flushLogBuffer();
-		});
-	};
-	const writeLogLine = (entry) => {
-		if (!logPath) return;
-		try {
-			pendingLogLines += `${JSON.stringify(entry)}\n`;
-			if (pendingLogLines.length >= 16384) {
-				flushLogBuffer();
-				return;
-			}
-			scheduleLogFlush();
-		} catch {}
-	};
-	const logEvent = (kind, fields) => {
-		writeLogLine({
-			ts: (/* @__PURE__ */ new Date()).toISOString(),
-			epochMs: Date.now(),
-			runId,
-			parentSessionKey,
-			childSessionKey: params.childSessionKey,
-			agentId: params.agentId,
-			kind,
-			...fields
-		});
-	};
-	const shouldSurfaceUpdates = params.surfaceUpdates !== false;
-	const eventRouting = params.eventRouting ?? {
-		mainKey: params.mainKey,
-		sessionScope: params.sessionScope
-	};
-	const wake = () => {
-		if (!shouldSurfaceUpdates) return;
-		requestHeartbeat(scopedHeartbeatWakeOptionsForPolicy(parentSessionKey, {
-			source: "acp-spawn",
-			intent: "event",
-			reason: "acp:spawn:stream"
-		}, eventRouting));
-	};
-	const emit = (text, contextKey) => {
-		const cleaned = text.trim();
-		if (!cleaned) return;
-		logEvent("system_event", {
-			contextKey,
-			text: cleaned
-		});
-		if (!shouldSurfaceUpdates) return;
-		enqueueSystemEvent(cleaned, {
-			sessionKey: resolveEventSessionKeyForPolicy(parentSessionKey, eventRouting),
-			contextKey,
-			deliveryContext: params.deliveryContext
-		});
-		wake();
-	};
-	const emitStartNotice = () => {
-		recordTaskRunProgressByRunId({
-			runId,
-			runtime: "acp",
-			sessionKey: params.childSessionKey,
-			lastEventAt: Date.now(),
-			eventSummary: "Started."
-		});
-		emit(`Started ${relayLabel} session ${params.childSessionKey}. Streaming progress updates to parent session.`, `${contextPrefix}:start`);
-	};
-	let disposed = false;
-	let pendingText = "";
-	let lastProgressAt = Date.now();
-	let stallNotified = false;
-	let promptSubmittedAt;
-	let firstRuntimeEventAt;
-	let firstVisibleOutputAt;
-	let lastRuntimeEventType;
-	let proxyEnvKeysAtPrompt = [];
-	let flushTimer;
-	let relayLifetimeTimer;
-	const clearFlushTimer = () => {
-		if (!flushTimer) return;
-		clearTimeout(flushTimer);
-		flushTimer = void 0;
-	};
-	const clearRelayLifetimeTimer = () => {
-		if (!relayLifetimeTimer) return;
-		clearTimeout(relayLifetimeTimer);
-		relayLifetimeTimer = void 0;
-	};
-	const flushPending = () => {
-		clearFlushTimer();
-		if (!pendingText) return;
-		const snippet = truncate(compactWhitespace(pendingText), STREAM_SNIPPET_MAX_CHARS);
-		pendingText = "";
-		if (!snippet) return;
-		emit(`${relayLabel}: ${snippet}`, `${contextPrefix}:progress`);
-	};
-	const scheduleFlush = () => {
-		if (disposed || flushTimer || streamFlushMs <= 0) return;
-		flushTimer = setTimeout(() => {
-			flushPending();
-		}, streamFlushMs);
-		flushTimer.unref?.();
-	};
-	const buildNoOutputNotice = () => {
-		const seconds = Math.round(noOutputNoticeMs / 1e3);
-		if (!promptSubmittedAt) return {
-			summary: `No prompt submission observed for ${seconds}s after child start.`,
-			text: `${relayLabel} session started but no prompt submission was observed for ${seconds}s.`
-		};
-		if (!firstRuntimeEventAt) {
-			const proxySummary = formatProxyEnvSummary(proxyEnvKeysAtPrompt);
-			return {
-				summary: `Prompt submitted but no ACP runtime event for ${seconds}s (${proxySummary}).`,
-				text: `${relayLabel} prompt was submitted but no ACP runtime event arrived for ${seconds}s (${proxySummary}). Check upstream connectivity, auth, or proxy/network access in the gateway child environment.`
-			};
-		}
-		if (!firstVisibleOutputAt) {
-			const lastEvent = lastRuntimeEventType ? ` Last ACP event: ${lastRuntimeEventType}.` : "";
-			return {
-				summary: `ACP runtime active but no visible assistant output for ${seconds}s.${lastEvent}`,
-				text: `${relayLabel} has ACP runtime activity but no visible assistant output for ${seconds}s.${lastEvent} It may be working, blocked on a tool, or failing before visible output.`
-			};
-		}
-		return {
-			summary: `No visible output for ${seconds}s. It may be waiting for input.`,
-			text: `${relayLabel} has produced no visible output for ${seconds}s. It may be waiting for interactive input.`
-		};
-	};
-	const noOutputWatcherTimer = setInterval(() => {
-		if (disposed || noOutputNoticeMs <= 0) return;
-		if (stallNotified) return;
-		if (Date.now() - lastProgressAt < noOutputNoticeMs) return;
-		stallNotified = true;
-		const notice = buildNoOutputNotice();
-		recordTaskRunProgressByRunId({
-			runId,
-			runtime: "acp",
-			sessionKey: params.childSessionKey,
-			lastEventAt: Date.now(),
-			eventSummary: notice.summary
-		});
-		emit(notice.text, `${contextPrefix}:stall`);
-	}, noOutputPollMs);
-	noOutputWatcherTimer.unref?.();
-	relayLifetimeTimer = setTimeout(() => {
-		if (disposed) return;
-		emit(`${relayLabel} stream relay timed out after ${Math.max(1, Math.round(maxRelayLifetimeMs / 1e3))}s without completion.`, `${contextPrefix}:timeout`);
-		dispose();
-	}, maxRelayLifetimeMs);
-	relayLifetimeTimer.unref?.();
-	if (params.emitStartNotice !== false) emitStartNotice();
-	const unsubscribe = onAgentEvent((event) => {
-		if (disposed || event.runId !== runId) return;
-		if (event.stream === "assistant") {
-			const data = event.data;
-			const assistantPhase = normalizeAssistantPhase(data?.phase);
-			const deltaCandidate = data?.delta ?? data?.text;
-			const delta = typeof deltaCandidate === "string" ? deltaCandidate : void 0;
-			if (!delta || !delta.trim()) return;
-			logEvent("assistant_delta", {
-				delta,
-				...assistantPhase ? { phase: assistantPhase } : {}
-			});
-			if (assistantPhase === "commentary") {
-				lastProgressAt = Date.now();
-				return;
-			}
-			if (stallNotified) {
-				stallNotified = false;
-				recordTaskRunProgressByRunId({
-					runId,
-					runtime: "acp",
-					sessionKey: params.childSessionKey,
-					lastEventAt: Date.now(),
-					eventSummary: "Resumed output."
-				});
-				emit(`${relayLabel} resumed output.`, `${contextPrefix}:resumed`);
-			}
-			lastProgressAt = Date.now();
-			firstVisibleOutputAt ??= lastProgressAt;
-			pendingText += delta;
-			if (pendingText.length > STREAM_BUFFER_MAX_CHARS) pendingText = pendingText.slice(-4e3);
-			if (pendingText.length >= STREAM_SNIPPET_MAX_CHARS || delta.includes("\n\n")) {
-				flushPending();
-				return;
-			}
-			scheduleFlush();
-			return;
-		}
-		if (event.stream === "acp") {
-			const data = event.data;
-			const phase = normalizeOptionalString(data?.phase);
-			logEvent("acp", {
-				phase: phase ?? "unknown",
-				data: event.data
-			});
-			if (phase === "prompt_submitted") {
-				const at = toFiniteNumber(data?.at) ?? Date.now();
-				promptSubmittedAt ??= at;
-				proxyEnvKeysAtPrompt = normalizeStringArray(data?.proxyEnvKeys);
-				lastProgressAt = Date.now();
-				return;
-			}
-			if (phase === "runtime_event") {
-				const eventType = normalizeOptionalString(data?.eventType);
-				firstRuntimeEventAt ??= Date.now();
-				lastRuntimeEventType = eventType;
-				lastProgressAt = Date.now();
-				return;
-			}
-			return;
-		}
-		if (event.stream !== "lifecycle") return;
-		const phase = normalizeOptionalString(event.data?.phase);
-		logEvent("lifecycle", {
-			phase: phase ?? "unknown",
-			data: event.data
-		});
-		if (phase === "end") {
-			flushPending();
-			const startedAt = toFiniteNumber(event.data?.startedAt);
-			const endedAt = toFiniteNumber(event.data?.endedAt);
-			const durationMs = startedAt != null && endedAt != null && endedAt >= startedAt ? endedAt - startedAt : void 0;
-			if (durationMs != null) emit(`${relayLabel} run completed in ${Math.max(1, Math.round(durationMs / 1e3))}s.`, `${contextPrefix}:done`);
-			else emit(`${relayLabel} run completed.`, `${contextPrefix}:done`);
-			dispose();
-			return;
-		}
-		if (phase === "error") {
-			flushPending();
-			const errorText = normalizeOptionalString(event.data?.error);
-			if (errorText) emit(`${relayLabel} run failed: ${errorText}`, `${contextPrefix}:error`);
-			else emit(`${relayLabel} run failed.`, `${contextPrefix}:error`);
-			dispose();
-		}
-	});
-	const dispose = () => {
-		if (disposed) return;
-		disposed = true;
-		clearFlushTimer();
-		clearRelayLifetimeTimer();
-		flushLogBuffer();
-		clearInterval(noOutputWatcherTimer);
-		unsubscribe();
-	};
-	return {
-		dispose,
-		notifyStarted: emitStartNotice
-	};
-}
-//#endregion
-//#region src/agents/acp-spawn.ts
-const log = createSubsystemLogger("agents/acp-spawn");
-const ACP_SPAWN_MODES = ["run", "session"];
-const ACP_SPAWN_SANDBOX_MODES = ["inherit", "require"];
-const ACP_SPAWN_STREAM_TARGETS = ["parent"];
-const ACP_SPAWN_ERROR_CODES = [
-	"acp_disabled",
-	"requester_session_required",
-	"runtime_policy",
-	"resume_forbidden",
-	"subagent_policy",
-	"thread_required",
-	"target_agent_required",
-	"runtime_agent_mismatch",
-	"agent_forbidden",
-	"cwd_resolution_failed",
-	"thread_binding_invalid",
-	"spawn_failed",
-	"dispatch_failed"
-];
-function isSpawnAcpAcceptedResult(result) {
-	return result.status === "accepted";
-}
-const ACP_SPAWN_ACCEPTED_NOTE = "initial ACP task queued in isolated session; follow-ups continue in the bound thread.";
-const ACP_SPAWN_SESSION_ACCEPTED_NOTE = "thread-bound ACP session stays active after this task; continue in-thread for follow-ups.";
-function resolveAcpSpawnRuntimePolicyError(params) {
-	const sandboxMode = params.sandbox === "require" ? "require" : "inherit";
-	const requesterRuntime = resolveSandboxRuntimeStatus({
-		cfg: params.cfg,
-		sessionKey: params.requesterSessionKey
-	});
-	if (params.requesterSandboxed === true || requesterRuntime.sandboxed) return "Sandboxed sessions cannot spawn ACP sessions because runtime=\"acp\" runs on the host. Use runtime=\"subagent\" from sandboxed sessions.";
-	if (sandboxMode === "require") return "sessions_spawn sandbox=\"require\" is unsupported for runtime=\"acp\" because ACP sessions run outside the sandbox. Use runtime=\"subagent\" or sandbox=\"inherit\".";
-}
-function isActiveTaskStatus(status) {
-	return status === "queued" || status === "running";
-}
-function countUntrackedActiveAcpRunsForOwner(ownerKey) {
-	const normalizedOwnerKey = normalizeOptionalString(ownerKey);
-	if (!normalizedOwnerKey) return 0;
-	const tasks = listTasksForOwnerKey(normalizedOwnerKey);
-	const trackedChildSessionKeys = new Set(tasks.filter((task) => task.runtime === "subagent" && isActiveTaskStatus(task.status) && normalizeOptionalString(task.childSessionKey)).map((task) => normalizeOptionalString(task.childSessionKey)));
-	return new Set(tasks.flatMap((task) => {
-		const childSessionKey = normalizeOptionalString(task.childSessionKey);
-		const trackedRun = childSessionKey ? getSubagentRunByChildSessionKey(childSessionKey) : null;
-		const hasActiveRegistryRun = Boolean(trackedRun && typeof trackedRun.endedAt !== "number");
-		return task.runtime === "acp" && isActiveTaskStatus(task.status) && childSessionKey !== void 0 && !hasActiveRegistryRun && !trackedChildSessionKeys.has(childSessionKey) ? [childSessionKey] : [];
-	})).size;
-}
-function resolvePlacementWithoutChannelPlugin(params) {
-	return params.capabilities.placements.includes("child") ? "child" : "current";
-}
-function resolveSpawnMode(params) {
-	if (params.requestedMode === "run" || params.requestedMode === "session") return params.requestedMode;
-	return params.threadRequested ? "session" : "run";
-}
-function resolveAcpSessionMode(mode) {
-	return mode === "session" ? "persistent" : "oneshot";
-}
-function isHeartbeatEnabledForSessionAgent(params) {
-	if (!areHeartbeatsEnabled()) return false;
-	const requesterAgentId = parseAgentSessionKey(params.sessionKey)?.agentId;
-	if (!requesterAgentId) return true;
-	const agentEntries = Array.isArray(params.cfg.agents?.list) ? params.cfg.agents.list : [];
-	if (!(agentEntries.some((entry) => Boolean(entry?.heartbeat)) ? agentEntries.some((entry) => Boolean(entry?.heartbeat) && normalizeAgentId(entry?.id) === requesterAgentId) : requesterAgentId === resolveDefaultAgentId(params.cfg))) return false;
-	const trimmedEvery = normalizeOptionalString(resolveAgentConfig(params.cfg, requesterAgentId)?.heartbeat?.every ?? params.cfg.agents?.defaults?.heartbeat?.every ?? "30m") ?? "";
-	if (!trimmedEvery) return false;
-	try {
-		return parseDurationMs(trimmedEvery, { defaultUnit: "m" }) > 0;
-	} catch {
-		return false;
-	}
-}
-function resolveHeartbeatConfigForAgent(params) {
-	const defaults = params.cfg.agents?.defaults?.heartbeat;
-	const overrides = resolveAgentConfig(params.cfg, params.agentId)?.heartbeat;
-	if (!defaults && !overrides) return;
-	return {
-		...defaults,
-		...overrides
-	};
-}
-function hasSessionLocalHeartbeatRelayRoute(params) {
-	if ((params.cfg.session?.scope ?? "per-sender") === "global") return false;
-	const heartbeat = resolveHeartbeatConfigForAgent({
-		cfg: params.cfg,
-		agentId: params.requesterAgentId
-	});
-	if ((heartbeat?.target ?? "none") !== "last") return false;
-	if (normalizeOptionalString(heartbeat?.to)) return false;
-	if (normalizeOptionalString(heartbeat?.accountId)) return false;
-	const parentEntry = loadSessionStore(resolveStorePath(params.cfg.session?.store, { agentId: params.requesterAgentId }))[params.parentSessionKey];
-	const parentDeliveryContext = deliveryContextFromSession(parentEntry);
-	return Boolean(parentDeliveryContext?.channel && parentDeliveryContext.to);
-}
-function resolveTargetAcpAgentId(params) {
-	const requested = normalizeOptionalAgentId(params.requestedAgentId);
-	if (requested) {
-		const configuredAgent = params.cfg.agents?.list?.find((agent) => normalizeOptionalAgentId(agent.id) === requested);
-		if (configuredAgent?.runtime?.type === "acp") return {
-			ok: true,
-			agentId: normalizeOptionalAgentId(configuredAgent.runtime.acp?.agent) ?? requested
-		};
-		if (configuredAgent && !isExplicitlyAllowedAcpAgent(params.cfg, requested)) return {
-			ok: false,
-			error: `agentId "${requested}" is an DaoCore config agent, not an ACP harness. Use runtime="subagent" or omit runtime for DaoCore config agents. Use runtime="acp" only with external ACP harness ids such as codex, claude, droid, gemini, or opencode, or configure agents.list[].runtime.type="acp" with runtime.acp.agent.`
-		};
-		return {
-			ok: true,
-			agentId: requested
-		};
-	}
-	const configuredDefault = normalizeOptionalAgentId(params.cfg.acp?.defaultAgent);
-	if (configuredDefault) return {
-		ok: true,
-		agentId: configuredDefault
-	};
-	return {
-		ok: false,
-		error: "ACP target agent is not configured. Pass `agentId` in `sessions_spawn` or set `acp.defaultAgent` in config."
-	};
-}
-function isExplicitlyAllowedAcpAgent(cfg, agentId) {
-	return (cfg.acp?.allowedAgents ?? []).some((entry) => {
-		if (entry.trim() === "*") return true;
-		return normalizeOptionalAgentId(entry) === agentId;
-	});
-}
-function resolveConfiguredAcpSubagentTargetIds(cfg) {
-	const ids = new Set(listAgentIds(cfg));
-	for (const agent of cfg.agents?.list ?? []) {
-		if (agent.runtime?.type !== "acp") continue;
-		const acpAgent = normalizeOptionalAgentId(agent.runtime.acp?.agent);
-		if (acpAgent) ids.add(acpAgent);
-	}
-	const defaultAgent = normalizeOptionalAgentId(cfg.acp?.defaultAgent);
-	if (defaultAgent) ids.add(defaultAgent);
-	for (const entry of cfg.acp?.allowedAgents ?? []) {
-		if (entry.trim() === "*") continue;
-		const id = normalizeOptionalAgentId(entry);
-		if (id) ids.add(id);
-	}
-	return Array.from(ids);
-}
-function normalizeOptionalAgentId(value) {
-	const trimmed = normalizeOptionalString(value) ?? "";
-	if (!trimmed) return;
-	return normalizeAgentId(trimmed);
-}
-function summarizeError(err) {
-	return formatErrorMessage(err);
-}
-function createAcpSpawnFailure(params) {
-	return {
-		status: params.status,
-		errorCode: params.errorCode,
-		error: params.error,
-		...params.childSessionKey ? { childSessionKey: params.childSessionKey } : {}
-	};
-}
-function isMissingPathError(error) {
-	const code = error instanceof Error ? error.code : void 0;
-	return code === "ENOENT" || code === "ENOTDIR";
-}
-async function resolveRuntimeCwdForAcpSpawn(params) {
-	if (!params.resolvedCwd) return;
-	if (normalizeOptionalString(params.explicitCwd)) return params.resolvedCwd;
-	try {
-		await fs.access(params.resolvedCwd);
-		return params.resolvedCwd;
-	} catch (error) {
-		if (isMissingPathError(error)) return;
-		throw error;
-	}
-}
-function resolveRequesterInternalSessionKey(params) {
-	const { mainKey, alias } = resolveMainSessionAlias(params.cfg);
-	const requesterSessionKey = normalizeOptionalString(params.requesterSessionKey);
-	return requesterSessionKey ? resolveInternalSessionKey({
-		key: requesterSessionKey,
-		alias,
-		mainKey
-	}) : alias;
-}
-async function persistAcpSpawnSessionFileBestEffort(params) {
-	try {
-		return (await resolveSessionTranscriptFile({
-			sessionId: params.sessionId,
-			sessionKey: params.sessionKey,
-			sessionEntry: params.sessionEntry,
-			sessionStore: params.sessionStore,
-			storePath: params.storePath,
-			agentId: params.agentId,
-			threadId: params.threadId
-		})).sessionEntry;
-	} catch (error) {
-		log.warn(`ACP session-file persistence failed during ${params.stage} for ${params.sessionKey}: ${summarizeError(error)}`);
-		return params.sessionEntry;
-	}
-}
-function resolveConversationRefForThreadBinding(params) {
-	return resolveInboundConversationResolution({
-		cfg: params.cfg,
-		channel: params.channel,
-		accountId: params.accountId,
-		to: params.to,
-		threadId: params.threadId,
-		groupId: params.groupId,
-		isGroup: true
-	})?.canonical ?? null;
-}
-function resolveAcpSpawnChannelAccountId(params) {
-	const channel = normalizeOptionalLowercaseString(params.channel);
-	const explicitAccountId = normalizeOptionalString(params.accountId);
-	if (explicitAccountId) return explicitAccountId;
-	if (!channel) return;
-	const configuredDefaultAccountId = params.cfg.channels?.[channel]?.defaultAccount;
-	return normalizeOptionalString(configuredDefaultAccountId) ?? "default";
-}
-function prepareAcpThreadBinding(params) {
-	const channel = normalizeOptionalLowercaseString(params.channel);
-	if (!channel) return {
-		ok: false,
-		error: "thread=true for ACP sessions requires a channel context."
-	};
-	const accountId = resolveAcpSpawnChannelAccountId({
-		cfg: params.cfg,
-		channel,
-		accountId: params.accountId
-	});
-	const policy = resolveThreadBindingSpawnPolicy({
-		cfg: params.cfg,
-		channel,
-		accountId,
-		kind: "acp"
-	});
-	if (!policy.enabled) return {
-		ok: false,
-		error: formatThreadBindingDisabledError({
-			channel: policy.channel,
-			accountId: policy.accountId,
-			kind: "acp"
-		})
-	};
-	if (!policy.spawnEnabled) return {
-		ok: false,
-		error: formatThreadBindingSpawnDisabledError({
-			channel: policy.channel,
-			accountId: policy.accountId,
-			kind: "acp"
-		})
-	};
-	const capabilities = getSessionBindingService().getCapabilities({
-		channel: policy.channel,
-		accountId: policy.accountId
-	});
-	if (!capabilities.adapterAvailable) return {
-		ok: false,
-		error: `Thread bindings are unavailable for ${policy.channel}.`
-	};
-	const placementToUse = resolveChannelDefaultBindingPlacement(policy.channel) ?? resolvePlacementWithoutChannelPlugin({ capabilities });
-	if (!capabilities.bindSupported || !capabilities.placements.includes(placementToUse)) return {
-		ok: false,
-		error: `Thread bindings do not support ${placementToUse} placement for ${policy.channel}.`
-	};
-	const conversationRef = resolveConversationRefForThreadBinding({
-		cfg: params.cfg,
-		channel: policy.channel,
-		accountId: policy.accountId,
-		to: params.to,
-		threadId: params.threadId,
-		groupId: params.groupId
-	});
-	if (!conversationRef?.conversationId) return {
-		ok: false,
-		error: `Could not resolve a ${policy.channel} conversation for ACP thread spawn.`
-	};
-	return {
-		ok: true,
-		binding: {
-			channel: policy.channel,
-			accountId: policy.accountId,
-			placement: placementToUse,
-			conversationId: conversationRef.conversationId,
-			...conversationRef.parentConversationId ? { parentConversationId: conversationRef.parentConversationId } : {}
-		}
-	};
-}
-function resolveAcpSpawnRequesterState(params) {
-	const bindingService = getSessionBindingService();
-	const requesterParsedSession = parseAgentSessionKey(params.parentSessionKey);
-	const isSubagentSession = Boolean(requesterParsedSession) && isSubagentSessionKey(params.parentSessionKey);
-	const hasActiveSubagentBinding = isSubagentSession && params.parentSessionKey ? bindingService.listBySession(params.parentSessionKey).some((record) => record.targetKind === "subagent" && record.status !== "ended") : false;
-	const hasThreadContext = typeof params.ctx.agentThreadId === "string" ? Boolean(normalizeOptionalString(params.ctx.agentThreadId)) : params.ctx.agentThreadId != null;
-	const requesterAgentId = requesterParsedSession?.agentId;
-	return {
-		parentSessionKey: params.parentSessionKey,
-		isSubagentSession,
-		hasActiveSubagentBinding,
-		hasThreadContext,
-		heartbeatEnabled: isHeartbeatEnabledForSessionAgent({
-			cfg: params.cfg,
-			sessionKey: params.parentSessionKey
-		}),
-		heartbeatRelayRouteUsable: params.parentSessionKey && requesterAgentId ? hasSessionLocalHeartbeatRelayRoute({
-			cfg: params.cfg,
-			parentSessionKey: params.parentSessionKey,
-			requesterAgentId
-		}) : false,
-		origin: resolveRequesterOriginForChild({
-			cfg: params.cfg,
-			targetAgentId: params.targetAgentId,
-			requesterAgentId: normalizeAgentId(requesterAgentId),
-			requesterChannel: params.ctx.agentChannel,
-			requesterAccountId: params.ctx.agentAccountId,
-			requesterTo: params.ctx.agentTo,
-			requesterThreadId: params.ctx.agentThreadId,
-			requesterGroupSpace: params.ctx.agentGroupSpace,
-			requesterMemberRoleIds: params.ctx.agentMemberRoleIds
-		})
-	};
-}
-function resolveAcpSubagentEnvelopeState(params) {
-	const requesterSessionKey = normalizeOptionalString(params.requesterSessionKey);
-	if (!requesterSessionKey) return {};
-	if (!isSubagentEnvelopeSession(requesterSessionKey, {
-		cfg: params.cfg,
-		store: params.subagentStore
-	})) return {};
-	const callerDepth = getSubagentDepthFromSessionStore(requesterSessionKey, { cfg: params.cfg });
-	const maxSpawnDepth = params.cfg.agents?.defaults?.subagents?.maxSpawnDepth ?? 1;
-	if (callerDepth >= maxSpawnDepth) return { error: `sessions_spawn is not allowed at this depth (current depth: ${callerDepth}, max: ${maxSpawnDepth})` };
-	const maxChildren = params.cfg.agents?.defaults?.subagents?.maxChildrenPerAgent ?? 5;
-	const activeChildren = countActiveRunsForSession(requesterSessionKey) + countUntrackedActiveAcpRunsForOwner(requesterSessionKey);
-	if (activeChildren >= maxChildren) return { error: `sessions_spawn has reached max active children for this session (${activeChildren}/${maxChildren})` };
-	const requesterAgentId = normalizeAgentId(parseAgentSessionKey(requesterSessionKey)?.agentId);
-	if ((resolveAgentConfig(params.cfg, requesterAgentId)?.subagents?.requireAgentId ?? params.cfg.agents?.defaults?.subagents?.requireAgentId ?? false) && !params.requestedAgentId?.trim()) return { error: "sessions_spawn requires explicit agentId when requireAgentId is configured. Use agents_list to see allowed agent ids." };
-	const targetPolicy = resolveSubagentTargetPolicy({
-		requesterAgentId,
-		targetAgentId: params.targetAgentId,
-		requestedAgentId: params.requestedAgentId,
-		allowAgents: resolveAgentConfig(params.cfg, requesterAgentId)?.subagents?.allowAgents ?? params.cfg.agents?.defaults?.subagents?.allowAgents,
-		configuredAgentIds: resolveConfiguredAcpSubagentTargetIds(params.cfg)
-	});
-	if (!targetPolicy.ok) return { error: targetPolicy.error };
-	const childCapabilities = resolveSubagentCapabilities({
-		depth: callerDepth + 1,
-		maxSpawnDepth
-	});
-	return { childSessionPatch: {
-		spawnDepth: childCapabilities.depth,
-		subagentRole: childCapabilities.role === "main" ? null : childCapabilities.role,
-		subagentControlScope: childCapabilities.controlScope
-	} };
-}
-function resolveAcpSpawnStreamPlan(params) {
-	const implicitStreamToParent = !params.streamToParentRequested && params.spawnMode === "run" && !params.requestThreadBinding && params.requester.isSubagentSession && !params.requester.hasActiveSubagentBinding && !params.requester.hasThreadContext && params.requester.heartbeatEnabled && params.requester.heartbeatRelayRouteUsable;
-	return {
-		implicitStreamToParent,
-		effectiveStreamToParent: params.streamToParentRequested || implicitStreamToParent
-	};
-}
-function sessionEntryMatchesAcpResumeSessionId(entry, resumeSessionId) {
-	const identity = entry?.acp?.identity;
-	return normalizeOptionalString(identity?.agentSessionId) === resumeSessionId || normalizeOptionalString(identity?.acpxSessionId) === resumeSessionId;
-}
-function sessionEntryIsOwnedByRequester(params) {
-	return params.sessionKey === params.requesterSessionKey || normalizeOptionalString(params.entry?.spawnedBy) === params.requesterSessionKey || normalizeOptionalString(params.entry?.parentSessionKey) === params.requesterSessionKey;
-}
-function validateAcpResumeSessionOwnership(params) {
-	const resumeSessionId = normalizeOptionalString(params.resumeSessionId);
-	if (!resumeSessionId) return { ok: true };
-	const requesterSessionKey = normalizeOptionalString(params.requesterSessionKey);
-	if (!requesterSessionKey) return {
-		ok: false,
-		error: "sessions_spawn resumeSessionId requires an active requester session context."
-	};
-	const sessionStore = loadSessionStore(resolveStorePath(params.cfg.session?.store, { agentId: params.targetAgentId }));
-	for (const [sessionKey, entry] of Object.entries(sessionStore)) {
-		if (!sessionEntryMatchesAcpResumeSessionId(entry, resumeSessionId)) continue;
-		if (sessionEntryIsOwnedByRequester({
-			sessionKey,
-			entry,
-			requesterSessionKey
-		})) return { ok: true };
-		break;
-	}
-	return {
-		ok: false,
-		error: "sessions_spawn resumeSessionId is only allowed for ACP sessions previously recorded for this requester. Omit resumeSessionId to start a fresh ACP session."
-	};
-}
-async function initializeAcpSpawnRuntime(params) {
-	const storePath = resolveStorePath(params.cfg.session?.store, { agentId: params.targetAgentId });
-	const sessionStore = loadSessionStore(storePath);
-	let sessionEntry = sessionStore[params.sessionKey];
-	const sessionId = sessionEntry?.sessionId;
-	if (sessionId) sessionEntry = await persistAcpSpawnSessionFileBestEffort({
-		sessionId,
-		sessionKey: params.sessionKey,
-		sessionStore,
-		storePath,
-		sessionEntry,
-		agentId: params.targetAgentId,
-		stage: "spawn"
-	});
-	const initialized = await getAcpSessionManager().initializeSession({
-		cfg: params.cfg,
-		sessionKey: params.sessionKey,
-		agent: params.targetAgentId,
-		mode: params.runtimeMode,
-		resumeSessionId: params.resumeSessionId,
-		runtimeOptions: params.model || params.thinking || params.runTimeoutSeconds ? {
-			...params.model ? { model: params.model } : {},
-			...params.thinking ? { thinking: params.thinking } : {},
-			...params.runTimeoutSeconds ? { timeoutSeconds: params.runTimeoutSeconds } : {}
-		} : void 0,
-		cwd: params.cwd,
-		backendId: params.cfg.acp?.backend
-	});
-	return {
-		initialized,
-		runtimeCloseHandle: {
-			runtime: initialized.runtime,
-			handle: initialized.handle
-		},
-		sessionId,
-		sessionEntry,
-		sessionStore,
-		storePath
-	};
-}
-async function bindPreparedAcpThread(params) {
-	const binding = await getSessionBindingService().bind({
-		targetSessionKey: params.sessionKey,
-		targetKind: "session",
-		conversation: {
-			channel: params.preparedBinding.channel,
-			accountId: params.preparedBinding.accountId,
-			conversationId: params.preparedBinding.conversationId,
-			...params.preparedBinding.parentConversationId ? { parentConversationId: params.preparedBinding.parentConversationId } : {}
-		},
-		placement: params.preparedBinding.placement,
-		metadata: {
-			threadName: resolveThreadBindingThreadName({
-				agentId: params.targetAgentId,
-				label: params.label || params.targetAgentId
-			}),
-			agentId: params.targetAgentId,
-			label: params.label || void 0,
-			boundBy: "system",
-			introText: resolveThreadBindingIntroText({
-				agentId: params.targetAgentId,
-				label: params.label || void 0,
-				idleTimeoutMs: resolveThreadBindingIdleTimeoutMsForChannel({
-					cfg: params.cfg,
-					channel: params.preparedBinding.channel,
-					accountId: params.preparedBinding.accountId
-				}),
-				maxAgeMs: resolveThreadBindingMaxAgeMsForChannel({
-					cfg: params.cfg,
-					channel: params.preparedBinding.channel,
-					accountId: params.preparedBinding.accountId
-				}),
-				sessionCwd: resolveAcpSessionCwd(params.initializedRuntime.initialized.meta),
-				sessionDetails: resolveAcpThreadSessionDetailLines({
-					sessionKey: params.sessionKey,
-					meta: params.initializedRuntime.initialized.meta
-				})
-			})
-		}
-	});
-	if (!binding.conversation.conversationId) throw new Error(params.preparedBinding.placement === "child" ? `Failed to create and bind a ${params.preparedBinding.channel} thread for this ACP session.` : `Failed to bind the current ${params.preparedBinding.channel} conversation for this ACP session.`);
-	let sessionEntry = params.initializedRuntime.sessionEntry;
-	if (params.initializedRuntime.sessionId && params.preparedBinding.placement === "child") {
-		const boundThreadId = normalizeOptionalString(binding.conversation.conversationId);
-		if (boundThreadId) sessionEntry = await persistAcpSpawnSessionFileBestEffort({
-			sessionId: params.initializedRuntime.sessionId,
-			sessionKey: params.sessionKey,
-			sessionStore: params.initializedRuntime.sessionStore,
-			storePath: params.initializedRuntime.storePath,
-			sessionEntry,
-			agentId: params.targetAgentId,
-			threadId: boundThreadId,
-			stage: "thread-bind"
-		});
-	}
-	return {
-		binding,
-		sessionEntry
-	};
-}
-function resolveAcpSpawnBootstrapDeliveryPlan(params) {
-	const boundThreadIdRaw = params.binding?.conversation.conversationId;
-	const boundThreadId = boundThreadIdRaw ? normalizeOptionalString(boundThreadIdRaw) : void 0;
-	const fallbackThreadIdRaw = params.requester.origin?.threadId;
-	const fallbackThreadId = fallbackThreadIdRaw != null ? normalizeOptionalString(String(fallbackThreadIdRaw)) : void 0;
-	const deliveryThreadId = boundThreadId ?? fallbackThreadId;
-	const requesterConversationRef = resolveConversationRefForThreadBinding({
-		cfg: params.cfg,
-		channel: params.requester.origin?.channel,
-		accountId: params.requester.origin?.accountId,
-		threadId: fallbackThreadId,
-		to: params.requester.origin?.to
-	});
-	const requesterAccountId = resolveAcpSpawnChannelAccountId({
-		cfg: params.cfg,
-		channel: params.requester.origin?.channel,
-		accountId: params.requester.origin?.accountId
-	});
-	const bindingMatchesRequesterConversation = Boolean(params.requester.origin?.channel && params.binding?.conversation.channel === params.requester.origin.channel && params.binding?.conversation.accountId === requesterAccountId && requesterConversationRef?.conversationId && params.binding?.conversation.conversationId === requesterConversationRef.conversationId && (params.binding?.conversation.parentConversationId ?? void 0) === (requesterConversationRef.parentConversationId ?? void 0));
-	const boundDeliveryTarget = routeToDeliveryFields(routeFromBindingRecord(params.binding));
-	const inferredDeliveryTo = (bindingMatchesRequesterConversation ? normalizeOptionalString(params.requester.origin?.to) : void 0) ?? boundDeliveryTarget.to ?? normalizeOptionalString(params.requester.origin?.to) ?? formatConversationTarget({
-		channel: params.requester.origin?.channel,
-		conversationId: deliveryThreadId
-	});
-	const resolvedDeliveryThreadId = bindingMatchesRequesterConversation ? fallbackThreadId : boundDeliveryTarget.threadId ?? deliveryThreadId;
-	const useInlineDelivery = Boolean(params.requester.origin?.channel && inferredDeliveryTo) && !params.effectiveStreamToParent && params.spawnMode === "session";
-	return {
-		useInlineDelivery,
-		channel: useInlineDelivery ? params.requester.origin?.channel : void 0,
-		accountId: useInlineDelivery ? requesterAccountId : void 0,
-		to: useInlineDelivery ? inferredDeliveryTo : void 0,
-		threadId: useInlineDelivery && resolvedDeliveryThreadId != null ? normalizeOptionalString(String(resolvedDeliveryThreadId)) : void 0
-	};
-}
-async function spawnAcpDirect(params, ctx) {
-	const cfg = getRuntimeConfig();
-	const requesterInternalKey = resolveRequesterInternalSessionKey({
-		cfg,
-		requesterSessionKey: ctx.agentSessionKey
-	});
-	if (!isAcpEnabledByPolicy(cfg)) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "acp_disabled",
-		error: "ACP is disabled by policy (`acp.enabled=false`)."
-	});
-	const streamToParentRequested = params.streamTo === "parent";
-	const parentSessionKey = normalizeOptionalString(ctx.agentSessionKey);
-	if (streamToParentRequested && !parentSessionKey) return createAcpSpawnFailure({
-		status: "error",
-		errorCode: "requester_session_required",
-		error: "sessions_spawn streamTo=\"parent\" requires an active requester session context."
-	});
-	let requestThreadBinding = params.thread === true;
-	const runtimePolicyError = resolveAcpSpawnRuntimePolicyError({
-		cfg,
-		requesterSessionKey: ctx.agentSessionKey,
-		requesterSandboxed: ctx.sandboxed,
-		sandbox: params.sandbox
-	});
-	if (runtimePolicyError) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "runtime_policy",
-		error: runtimePolicyError
-	});
-	const acpUnsupportedInheritedTool = findAcpUnsupportedInheritedToolDeny(ctx.inheritedToolDenylist);
-	if (acpUnsupportedInheritedTool) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "runtime_policy",
-		error: formatAcpInheritedToolDenyError(acpUnsupportedInheritedTool)
-	});
-	const acpUnsupportedInheritedAllow = findAcpUnsupportedInheritedToolAllow(ctx.inheritedToolAllowlist);
-	if (acpUnsupportedInheritedAllow) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "runtime_policy",
-		error: formatAcpInheritedToolAllowError(acpUnsupportedInheritedAllow)
-	});
-	const spawnMode = resolveSpawnMode({
-		requestedMode: params.mode,
-		threadRequested: requestThreadBinding
-	});
-	if (spawnMode === "session" && !requestThreadBinding) return createAcpSpawnFailure({
-		status: "error",
-		errorCode: "thread_required",
-		error: "sessions_spawn(runtime=\"acp\", mode=\"session\") requires thread=true so the ACP session can stay bound to a channel thread. Retry with { mode: \"session\", thread: true } on a channel that exposes threads (e.g. Discord, Slack, Telegram topics), or use mode=\"run\" for one-shot work."
-	});
-	const targetAgentResult = resolveTargetAcpAgentId({
-		requestedAgentId: params.agentId,
-		cfg
-	});
-	if (!targetAgentResult.ok) return createAcpSpawnFailure({
-		status: "error",
-		errorCode: params.agentId && normalizeOptionalAgentId(params.agentId) ? "runtime_agent_mismatch" : "target_agent_required",
-		error: targetAgentResult.error
-	});
-	const targetAgentId = targetAgentResult.agentId;
-	const agentPolicyError = resolveAcpAgentPolicyError(cfg, targetAgentId);
-	if (agentPolicyError) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "agent_forbidden",
-		error: agentPolicyError.message
-	});
-	const subagentStore = resolveSubagentCapabilityStore(parentSessionKey, { cfg });
-	const requesterState = resolveAcpSpawnRequesterState({
-		cfg,
-		parentSessionKey,
-		targetAgentId,
-		ctx,
-		subagentStore
-	});
-	const subagentEnvelopeState = resolveAcpSubagentEnvelopeState({
-		cfg,
-		requesterSessionKey: requesterInternalKey,
-		targetAgentId,
-		requestedAgentId: params.agentId,
-		subagentStore
-	});
-	if (subagentEnvelopeState.error) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "subagent_policy",
-		error: subagentEnvelopeState.error
-	});
-	const resumeAuthorization = validateAcpResumeSessionOwnership({
-		cfg,
-		targetAgentId,
-		requesterSessionKey: requesterInternalKey,
-		resumeSessionId: params.resumeSessionId
-	});
-	if (!resumeAuthorization.ok) return createAcpSpawnFailure({
-		status: "forbidden",
-		errorCode: "resume_forbidden",
-		error: resumeAuthorization.error
-	});
-	const { effectiveStreamToParent } = resolveAcpSpawnStreamPlan({
-		spawnMode,
-		requestThreadBinding,
-		streamToParentRequested,
-		requester: requesterState
-	});
-	const sessionKey = `agent:${targetAgentId}:acp:${crypto.randomUUID()}`;
-	const runtimeMode = resolveAcpSessionMode(spawnMode);
-	const resolvedCwd = resolveSpawnedWorkspaceInheritance({
-		config: cfg,
-		targetAgentId,
-		requesterSessionKey: ctx.agentSessionKey,
-		explicitWorkspaceDir: params.cwd
-	});
-	let runtimeCwd;
-	try {
-		runtimeCwd = await resolveRuntimeCwdForAcpSpawn({
-			resolvedCwd,
-			explicitCwd: params.cwd
-		});
-	} catch (error) {
-		return createAcpSpawnFailure({
-			status: "error",
-			errorCode: "cwd_resolution_failed",
-			error: summarizeError(error)
-		});
-	}
-	let preparedBinding = null;
-	if (requestThreadBinding) {
-		const prepared = prepareAcpThreadBinding({
-			cfg,
-			channel: requesterState.origin?.channel,
-			accountId: requesterState.origin?.accountId,
-			to: requesterState.origin?.to,
-			threadId: requesterState.origin?.threadId,
-			groupId: ctx.agentGroupId
-		});
-		if (!prepared.ok) return createAcpSpawnFailure({
-			status: "error",
-			errorCode: "thread_binding_invalid",
-			error: prepared.error
-		});
-		preparedBinding = prepared.binding;
-	}
-	let binding = null;
-	let sessionCreated = false;
-	let initializedRuntime;
-	try {
-		await callGateway({
-			method: "sessions.patch",
-			params: {
-				key: sessionKey,
-				spawnedBy: requesterInternalKey,
-				...subagentEnvelopeState.childSessionPatch,
-				...inheritedToolAllowPatch(ctx.inheritedToolAllowlist),
-				...inheritedToolDenyPatch(ctx.inheritedToolDenylist),
-				...params.label ? { label: params.label } : {}
-			},
-			timeoutMs: 1e4
-		});
-		sessionCreated = true;
-		const initializedSession = await initializeAcpSpawnRuntime({
-			cfg,
-			sessionKey,
-			targetAgentId,
-			runtimeMode,
-			resumeSessionId: params.resumeSessionId,
-			model: params.model,
-			thinking: params.thinking,
-			runTimeoutSeconds: params.runTimeoutSeconds,
-			cwd: runtimeCwd
-		});
-		initializedRuntime = initializedSession.runtimeCloseHandle;
-		if (preparedBinding) ({binding} = await bindPreparedAcpThread({
-			cfg,
-			sessionKey,
-			targetAgentId,
-			label: params.label,
-			preparedBinding,
-			initializedRuntime: initializedSession
-		}));
-	} catch (err) {
-		await cleanupFailedAcpSpawn({
-			cfg,
-			sessionKey,
-			shouldDeleteSession: sessionCreated,
-			deleteTranscript: true,
-			runtimeCloseHandle: initializedRuntime
-		});
-		return createAcpSpawnFailure({
-			status: "error",
-			errorCode: isSessionBindingError(err) ? "thread_binding_invalid" : "spawn_failed",
-			error: isSessionBindingError(err) ? err.message : summarizeError(err)
-		});
-	}
-	const deliveryPlan = resolveAcpSpawnBootstrapDeliveryPlan({
-		cfg,
-		spawnMode,
-		requestThreadBinding,
-		effectiveStreamToParent,
-		requester: requesterState,
-		binding
-	});
-	const childIdem = crypto.randomUUID();
-	let childRunId = childIdem;
-	const streamLogPath = effectiveStreamToParent && parentSessionKey ? resolveAcpSpawnStreamLogPath({ childSessionKey: sessionKey }) : void 0;
-	const parentDeliveryCtx = effectiveStreamToParent && parentSessionKey ? deliveryContextFromSession(loadSessionStore(resolveStorePath(cfg.session?.store, { agentId: resolveAgentIdFromSessionKey(parentSessionKey) }))[parentSessionKey]) : void 0;
-	let parentRelay;
-	const parentEventRouting = parentSessionKey ? resolveEventSessionRoutingPolicy({
-		cfg,
-		sessionKey: parentSessionKey
-	}) : void 0;
-	if (effectiveStreamToParent && parentSessionKey) parentRelay = startAcpSpawnParentStreamRelay({
-		runId: childIdem,
-		parentSessionKey,
-		childSessionKey: sessionKey,
-		agentId: targetAgentId,
-		mainKey: cfg.session?.mainKey,
-		sessionScope: cfg.session?.scope,
-		eventRouting: parentEventRouting,
-		logPath: streamLogPath,
-		deliveryContext: parentDeliveryCtx,
-		emitStartNotice: false
-	});
-	try {
-		const responseRunId = normalizeOptionalString((await callGateway({
-			method: "agent",
-			params: {
-				message: params.task,
-				sessionKey,
-				channel: deliveryPlan.channel,
-				to: deliveryPlan.to,
-				accountId: deliveryPlan.accountId,
-				threadId: deliveryPlan.threadId,
-				idempotencyKey: childIdem,
-				deliver: deliveryPlan.useInlineDelivery,
-				lane: AGENT_LANE_SUBAGENT,
-				acpTurnSource: "manual_spawn",
-				...params.runTimeoutSeconds != null ? { timeout: params.runTimeoutSeconds } : {},
-				label: params.label || void 0
-			},
-			timeoutMs: 1e4
-		}))?.runId);
-		if (responseRunId) childRunId = responseRunId;
-	} catch (err) {
-		parentRelay?.dispose();
-		await cleanupFailedAcpSpawn({
-			cfg,
-			sessionKey,
-			shouldDeleteSession: true,
-			deleteTranscript: true,
-			runtimeCloseHandle: initializedRuntime
-		});
-		return createAcpSpawnFailure({
-			status: "error",
-			errorCode: "dispatch_failed",
-			error: summarizeError(err),
-			childSessionKey: sessionKey
-		});
-	}
-	if (effectiveStreamToParent && parentSessionKey) {
-		if (parentRelay && childRunId !== childIdem) {
-			parentRelay.dispose();
-			parentRelay = startAcpSpawnParentStreamRelay({
-				runId: childRunId,
-				parentSessionKey,
-				childSessionKey: sessionKey,
-				agentId: targetAgentId,
-				mainKey: cfg.session?.mainKey,
-				sessionScope: cfg.session?.scope,
-				eventRouting: parentEventRouting,
-				logPath: streamLogPath,
-				deliveryContext: parentDeliveryCtx,
-				emitStartNotice: false
-			});
-		}
-		parentRelay?.notifyStarted();
-		try {
-			createRunningTaskRun({
-				runtime: "acp",
-				sourceId: childRunId,
-				ownerKey: requesterInternalKey,
-				scopeKind: "session",
-				requesterOrigin: requesterState.origin,
-				childSessionKey: sessionKey,
-				runId: childRunId,
-				label: params.label,
-				task: params.task,
-				preferMetadata: true,
-				deliveryStatus: requesterInternalKey ? "pending" : "parent_missing",
-				startedAt: Date.now()
-			});
-		} catch (error) {
-			log.warn("Failed to create background task for ACP spawn", {
-				sessionKey,
-				runId: childRunId,
-				error
-			});
-		}
-		return {
-			status: "accepted",
-			childSessionKey: sessionKey,
-			runId: childRunId,
-			mode: spawnMode,
-			...streamLogPath ? { streamLogPath } : {},
-			note: spawnMode === "session" ? ACP_SPAWN_SESSION_ACCEPTED_NOTE : ACP_SPAWN_ACCEPTED_NOTE
-		};
-	}
-	try {
-		createRunningTaskRun({
-			runtime: "acp",
-			sourceId: childRunId,
-			ownerKey: requesterInternalKey,
-			scopeKind: "session",
-			requesterOrigin: requesterState.origin,
-			childSessionKey: sessionKey,
-			runId: childRunId,
-			label: params.label,
-			task: params.task,
-			preferMetadata: true,
-			deliveryStatus: requesterInternalKey ? "pending" : "parent_missing",
-			startedAt: Date.now()
-		});
-	} catch (error) {
-		log.warn("Failed to create background task for ACP spawn", {
-			sessionKey,
-			runId: childRunId,
-			error
-		});
-	}
-	return {
-		status: "accepted",
-		childSessionKey: sessionKey,
-		runId: childRunId,
-		mode: spawnMode,
-		...deliveryPlan.useInlineDelivery ? { inlineDelivery: true } : {},
-		note: spawnMode === "session" ? ACP_SPAWN_SESSION_ACCEPTED_NOTE : ACP_SPAWN_ACCEPTED_NOTE
-	};
-}
-//#endregion
-export { ACP_SPAWN_SESSION_ACCEPTED_NOTE as a, resolveAcpSpawnRuntimePolicyError as c, ACP_SPAWN_SANDBOX_MODES as i, spawnAcpDirect as l, ACP_SPAWN_ERROR_CODES as n, ACP_SPAWN_STREAM_TARGETS as o, ACP_SPAWN_MODES as r, isSpawnAcpAcceptedResult as s, ACP_SPAWN_ACCEPTED_NOTE as t, cleanupFailedAcpSpawn as u };