@gaodefa/daocore 2026.5.51 → 2026.5.53

package/dist/acp-spawn-Bq8RHmXn.js

@@ -0,0 +1,1275 @@
+import { c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-DyL154ka.js";
+import { i as formatErrorMessage } from "./errors-D_oyTIw2.js";
+import { t as appendRegularFile } from "./regular-file-DaVeNX32.js";
+import "./agent-scope-Dx1S0aWX.js";
+import { a as isSubagentSessionKey, c as parseAgentSessionKey } from "./session-key-utils-Ce_xWkNq.js";
+import { d as resolveAgentIdFromSessionKey, l as normalizeAgentId } from "./session-key-Bte0mmcq.js";
+import { c as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig } from "./agent-scope-config-CJUQxn7u.js";
+import "./regular-file-BYUjzGUS.js";
+import { r as logVerbose } from "./globals-DhGeOA1P.js";
+import { t as createSubsystemLogger } from "./subsystem-CppbuBPw.js";
+import { i as getRuntimeConfig } from "./io-Ct2JqgbR.js";
+import { t as parseDurationMs } from "./parse-duration-CD4d_yk2.js";
+import "./config-CLrwLpl0.js";
+import { r as callGateway } from "./call-BFqofFc5.js";
+import { l as onAgentEvent } from "./agent-events-Cfj53GyA.js";
+import { n as deliveryContextFromSession } from "./delivery-context.shared-XybGGRNt.js";
+import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, u as resolveStorePath } from "./paths-8MFrTNIB.js";
+import { t as loadSessionStore } from "./store-load-B817r-3Z.js";
+import "./store-C4uyNaPD.js";
+import { a as resolveSessionTranscriptFile } from "./transcript-CalMl_Y7.js";
+import { i as normalizeAssistantPhase } from "./chat-message-content-DN9xEd6w.js";
+import { i as areHeartbeatsEnabled, o as requestHeartbeat } from "./heartbeat-wake-BEc0M8hq.js";
+import { a as enqueueSystemEvent } from "./system-events-By5h2EoB.js";
+import { h as listTasksForOwnerKey } from "./task-registry-XxKmge32.js";
+import "./runtime-internal-CQ1hy6SS.js";
+import { c as recordTaskRunProgressByRunId, i as createRunningTaskRun } from "./detached-task-runtime-B8jNifvc.js";
+import { t as getAcpSessionManager } from "./manager-HWtsfBUe.js";
+import { n as readAcpSessionEntry } from "./session-meta-D0EJkrLy.js";
+import { n as getSessionBindingService, r as isSessionBindingError } from "./session-binding-service-Dt5NxtK1.js";
+import { a as resolveSubagentCapabilities, c as findAcpUnsupportedInheritedToolAllow, d as formatAcpInheritedToolDenyError, f as inheritedToolAllowPatch, l as findAcpUnsupportedInheritedToolDeny, o as resolveSubagentCapabilityStore, p as inheritedToolDenyPatch, s as getSubagentDepthFromSessionStore, t as isSubagentEnvelopeSession, u as formatAcpInheritedToolAllowError } from "./subagent-capabilities-CL0g3hBY.js";
+import { n as resolveSandboxRuntimeStatus } from "./runtime-status-4ANAM1GR.js";
+import { i as resolveAcpAgentPolicyError, r as isAcpEnabledByPolicy } from "./policy-DO1AVyFV.js";
+import "./heartbeat-0BSacHYL.js";
+import { i as scopedHeartbeatWakeOptionsForPolicy, n as resolveEventSessionRoutingPolicy, t as resolveEventSessionKeyForPolicy } from "./event-session-routing-CiWm70tS.js";
+import { t as formatConversationTarget } from "./delivery-context-BNG7Sxrb.js";
+import { a as resolveSpawnedWorkspaceInheritance, s as resolveSubagentTargetPolicy, t as resolveRequesterOriginForChild } from "./spawn-requester-origin-B3bNw9kY.js";
+import { c as resolveMainSessionAlias, s as resolveInternalSessionKey } from "./sessions-helpers-Ctik-uPl.js";
+import { r as routeToDeliveryFields, t as routeFromBindingRecord } from "./route-projection-Ox5mcy3Q.js";
+import { t as AGENT_LANE_SUBAGENT } from "./lanes-ReZ09_e4.js";
+import { c as resolveThreadBindingMaxAgeMsForChannel, n as formatThreadBindingSpawnDisabledError, o as resolveThreadBindingIdleTimeoutMsForChannel, t as formatThreadBindingDisabledError, u as resolveThreadBindingSpawnPolicy } from "./thread-bindings-policy-BZBsdp3j.js";
+import { r as countActiveRunsForSession, s as getSubagentRunByChildSessionKey } from "./subagent-registry-DTDYUst1.js";
+import { r as resolveInboundConversationResolution, t as resolveChannelDefaultBindingPlacement } from "./conversation-resolution-a-s6MfCv.js";
+import { i as resolveThreadBindingThreadName, r as resolveThreadBindingIntroText } from "./thread-bindings-messages-D73K8IGt.js";
+import { a as resolveAcpThreadSessionDetailLines, n as resolveAcpSessionCwd } from "./session-identifiers-CYNMp_8N.js";
+import path from "node:path";
+import fs, { mkdir } from "node:fs/promises";
+import crypto from "node:crypto";
+//#region src/acp/control-plane/spawn.ts
+async function cleanupFailedAcpSpawn(params) {
+	if (params.runtimeCloseHandle) await params.runtimeCloseHandle.runtime.close({
+		handle: params.runtimeCloseHandle.handle,
+		reason: "spawn-failed"
+	}).catch((err) => {
+		logVerbose(`acp-spawn: runtime cleanup close failed for ${params.sessionKey}: ${String(err)}`);
+	});
+	await getAcpSessionManager().closeSession({
+		cfg: params.cfg,
+		sessionKey: params.sessionKey,
+		reason: "spawn-failed",
+		allowBackendUnavailable: true,
+		requireAcpSession: false
+	}).catch((err) => {
+		logVerbose(`acp-spawn: manager cleanup close failed for ${params.sessionKey}: ${String(err)}`);
+	});
+	await getSessionBindingService().unbind({
+		targetSessionKey: params.sessionKey,
+		reason: "spawn-failed"
+	}).catch((err) => {
+		logVerbose(`acp-spawn: binding cleanup unbind failed for ${params.sessionKey}: ${String(err)}`);
+	});
+	if (!params.shouldDeleteSession) return;
+	await callGateway({
+		method: "sessions.delete",
+		params: {
+			key: params.sessionKey,
+			deleteTranscript: params.deleteTranscript,
+			emitLifecycleHooks: false
+		},
+		timeoutMs: 1e4
+	}).catch(() => {});
+}
+//#endregion
+//#region src/agents/acp-spawn-parent-stream.ts
+const DEFAULT_STREAM_FLUSH_MS = 2500;
+const DEFAULT_NO_OUTPUT_NOTICE_MS = 6e4;
+const DEFAULT_NO_OUTPUT_POLL_MS = 15e3;
+const DEFAULT_MAX_RELAY_LIFETIME_MS = 360 * 60 * 1e3;
+const STREAM_BUFFER_MAX_CHARS = 4e3;
+const STREAM_SNIPPET_MAX_CHARS = 220;
+function compactWhitespace(value) {
+	return value.replace(/\s+/g, " ").trim();
+}
+function truncate(value, maxChars) {
+	if (value.length <= maxChars) return value;
+	if (maxChars <= 1) return value.slice(0, maxChars);
+	return `${value.slice(0, maxChars - 1)}…`;
+}
+function toFiniteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function normalizeStringArray(value) {
+	if (!Array.isArray(value)) return [];
+	return value.filter((item) => typeof item === "string" && item.length > 0);
+}
+function formatProxyEnvSummary(keys) {
+	if (keys.length === 0) return "proxy env: none";
+	return `proxy env: ${keys.join(", ")}`;
+}
+function resolveAcpStreamLogPathFromSessionFile(sessionFile, sessionId) {
+	const baseDir = path.dirname(path.resolve(sessionFile));
+	return path.join(baseDir, `${sessionId}.acp-stream.jsonl`);
+}
+function resolveAcpSpawnStreamLogPath(params) {
+	const childSessionKey = normalizeOptionalString(params.childSessionKey);
+	if (!childSessionKey) return;
+	const storeEntry = readAcpSessionEntry({ sessionKey: childSessionKey });
+	const sessionId = normalizeOptionalString(storeEntry?.entry?.sessionId);
+	if (!storeEntry || !sessionId) return;
+	try {
+		return resolveAcpStreamLogPathFromSessionFile(resolveSessionFilePath(sessionId, storeEntry.entry, resolveSessionFilePathOptions({ storePath: storeEntry.storePath })), sessionId);
+	} catch {
+		return;
+	}
+}
+function startAcpSpawnParentStreamRelay(params) {
+	const runId = normalizeOptionalString(params.runId) ?? "";
+	const parentSessionKey = normalizeOptionalString(params.parentSessionKey) ?? "";
+	if (!runId || !parentSessionKey) return {
+		dispose: () => {},
+		notifyStarted: () => {}
+	};
+	const streamFlushMs = typeof params.streamFlushMs === "number" && Number.isFinite(params.streamFlushMs) ? Math.max(0, Math.floor(params.streamFlushMs)) : DEFAULT_STREAM_FLUSH_MS;
+	const noOutputNoticeMs = typeof params.noOutputNoticeMs === "number" && Number.isFinite(params.noOutputNoticeMs) ? Math.max(0, Math.floor(params.noOutputNoticeMs)) : DEFAULT_NO_OUTPUT_NOTICE_MS;
+	const noOutputPollMs = typeof params.noOutputPollMs === "number" && Number.isFinite(params.noOutputPollMs) ? Math.max(250, Math.floor(params.noOutputPollMs)) : DEFAULT_NO_OUTPUT_POLL_MS;
+	const maxRelayLifetimeMs = typeof params.maxRelayLifetimeMs === "number" && Number.isFinite(params.maxRelayLifetimeMs) ? Math.max(1e3, Math.floor(params.maxRelayLifetimeMs)) : DEFAULT_MAX_RELAY_LIFETIME_MS;
+	const relayLabel = truncate(compactWhitespace(params.agentId), 40) || "ACP child";
+	const contextPrefix = `acp-spawn:${runId}`;
+	const logPath = normalizeOptionalString(params.logPath);
+	let logDirReady = false;
+	let pendingLogLines = "";
+	let logFlushScheduled = false;
+	let logWriteChain = Promise.resolve();
+	const flushLogBuffer = () => {
+		if (!logPath || !pendingLogLines) return;
+		const chunk = pendingLogLines;
+		pendingLogLines = "";
+		logWriteChain = logWriteChain.then(async () => {
+			if (!logDirReady) {
+				await mkdir(path.dirname(logPath), { recursive: true });
+				logDirReady = true;
+			}
+			await appendRegularFile({
+				filePath: logPath,
+				content: chunk
+			});
+		}).catch(() => {});
+	};
+	const scheduleLogFlush = () => {
+		if (!logPath || logFlushScheduled) return;
+		logFlushScheduled = true;
+		queueMicrotask(() => {
+			logFlushScheduled = false;
+			flushLogBuffer();
+		});
+	};
+	const writeLogLine = (entry) => {
+		if (!logPath) return;
+		try {
+			pendingLogLines += `${JSON.stringify(entry)}\n`;
+			if (pendingLogLines.length >= 16384) {
+				flushLogBuffer();
+				return;
+			}
+			scheduleLogFlush();
+		} catch {}
+	};
+	const logEvent = (kind, fields) => {
+		writeLogLine({
+			ts: (/* @__PURE__ */ new Date()).toISOString(),
+			epochMs: Date.now(),
+			runId,
+			parentSessionKey,
+			childSessionKey: params.childSessionKey,
+			agentId: params.agentId,
+			kind,
+			...fields
+		});
+	};
+	const shouldSurfaceUpdates = params.surfaceUpdates !== false;
+	const eventRouting = params.eventRouting ?? {
+		mainKey: params.mainKey,
+		sessionScope: params.sessionScope
+	};
+	const wake = () => {
+		if (!shouldSurfaceUpdates) return;
+		requestHeartbeat(scopedHeartbeatWakeOptionsForPolicy(parentSessionKey, {
+			source: "acp-spawn",
+			intent: "event",
+			reason: "acp:spawn:stream"
+		}, eventRouting));
+	};
+	const emit = (text, contextKey) => {
+		const cleaned = text.trim();
+		if (!cleaned) return;
+		logEvent("system_event", {
+			contextKey,
+			text: cleaned
+		});
+		if (!shouldSurfaceUpdates) return;
+		enqueueSystemEvent(cleaned, {
+			sessionKey: resolveEventSessionKeyForPolicy(parentSessionKey, eventRouting),
+			contextKey,
+			deliveryContext: params.deliveryContext
+		});
+		wake();
+	};
+	const emitStartNotice = () => {
+		recordTaskRunProgressByRunId({
+			runId,
+			runtime: "acp",
+			sessionKey: params.childSessionKey,
+			lastEventAt: Date.now(),
+			eventSummary: "Started."
+		});
+		emit(`Started ${relayLabel} session ${params.childSessionKey}. Streaming progress updates to parent session.`, `${contextPrefix}:start`);
+	};
+	let disposed = false;
+	let pendingText = "";
+	let lastProgressAt = Date.now();
+	let stallNotified = false;
+	let promptSubmittedAt;
+	let firstRuntimeEventAt;
+	let firstVisibleOutputAt;
+	let lastRuntimeEventType;
+	let proxyEnvKeysAtPrompt = [];
+	let flushTimer;
+	let relayLifetimeTimer;
+	const clearFlushTimer = () => {
+		if (!flushTimer) return;
+		clearTimeout(flushTimer);
+		flushTimer = void 0;
+	};
+	const clearRelayLifetimeTimer = () => {
+		if (!relayLifetimeTimer) return;
+		clearTimeout(relayLifetimeTimer);
+		relayLifetimeTimer = void 0;
+	};
+	const flushPending = () => {
+		clearFlushTimer();
+		if (!pendingText) return;
+		const snippet = truncate(compactWhitespace(pendingText), STREAM_SNIPPET_MAX_CHARS);
+		pendingText = "";
+		if (!snippet) return;
+		emit(`${relayLabel}: ${snippet}`, `${contextPrefix}:progress`);
+	};
+	const scheduleFlush = () => {
+		if (disposed || flushTimer || streamFlushMs <= 0) return;
+		flushTimer = setTimeout(() => {
+			flushPending();
+		}, streamFlushMs);
+		flushTimer.unref?.();
+	};
+	const buildNoOutputNotice = () => {
+		const seconds = Math.round(noOutputNoticeMs / 1e3);
+		if (!promptSubmittedAt) return {
+			summary: `No prompt submission observed for ${seconds}s after child start.`,
+			text: `${relayLabel} session started but no prompt submission was observed for ${seconds}s.`
+		};
+		if (!firstRuntimeEventAt) {
+			const proxySummary = formatProxyEnvSummary(proxyEnvKeysAtPrompt);
+			return {
+				summary: `Prompt submitted but no ACP runtime event for ${seconds}s (${proxySummary}).`,
+				text: `${relayLabel} prompt was submitted but no ACP runtime event arrived for ${seconds}s (${proxySummary}). Check upstream connectivity, auth, or proxy/network access in the gateway child environment.`
+			};
+		}
+		if (!firstVisibleOutputAt) {
+			const lastEvent = lastRuntimeEventType ? ` Last ACP event: ${lastRuntimeEventType}.` : "";
+			return {
+				summary: `ACP runtime active but no visible assistant output for ${seconds}s.${lastEvent}`,
+				text: `${relayLabel} has ACP runtime activity but no visible assistant output for ${seconds}s.${lastEvent} It may be working, blocked on a tool, or failing before visible output.`
+			};
+		}
+		return {
+			summary: `No visible output for ${seconds}s. It may be waiting for input.`,
+			text: `${relayLabel} has produced no visible output for ${seconds}s. It may be waiting for interactive input.`
+		};
+	};
+	const noOutputWatcherTimer = setInterval(() => {
+		if (disposed || noOutputNoticeMs <= 0) return;
+		if (stallNotified) return;
+		if (Date.now() - lastProgressAt < noOutputNoticeMs) return;
+		stallNotified = true;
+		const notice = buildNoOutputNotice();
+		recordTaskRunProgressByRunId({
+			runId,
+			runtime: "acp",
+			sessionKey: params.childSessionKey,
+			lastEventAt: Date.now(),
+			eventSummary: notice.summary
+		});
+		emit(notice.text, `${contextPrefix}:stall`);
+	}, noOutputPollMs);
+	noOutputWatcherTimer.unref?.();
+	relayLifetimeTimer = setTimeout(() => {
+		if (disposed) return;
+		emit(`${relayLabel} stream relay timed out after ${Math.max(1, Math.round(maxRelayLifetimeMs / 1e3))}s without completion.`, `${contextPrefix}:timeout`);
+		dispose();
+	}, maxRelayLifetimeMs);
+	relayLifetimeTimer.unref?.();
+	if (params.emitStartNotice !== false) emitStartNotice();
+	const unsubscribe = onAgentEvent((event) => {
+		if (disposed || event.runId !== runId) return;
+		if (event.stream === "assistant") {
+			const data = event.data;
+			const assistantPhase = normalizeAssistantPhase(data?.phase);
+			const deltaCandidate = data?.delta ?? data?.text;
+			const delta = typeof deltaCandidate === "string" ? deltaCandidate : void 0;
+			if (!delta || !delta.trim()) return;
+			logEvent("assistant_delta", {
+				delta,
+				...assistantPhase ? { phase: assistantPhase } : {}
+			});
+			if (assistantPhase === "commentary") {
+				lastProgressAt = Date.now();
+				return;
+			}
+			if (stallNotified) {
+				stallNotified = false;
+				recordTaskRunProgressByRunId({
+					runId,
+					runtime: "acp",
+					sessionKey: params.childSessionKey,
+					lastEventAt: Date.now(),
+					eventSummary: "Resumed output."
+				});
+				emit(`${relayLabel} resumed output.`, `${contextPrefix}:resumed`);
+			}
+			lastProgressAt = Date.now();
+			firstVisibleOutputAt ??= lastProgressAt;
+			pendingText += delta;
+			if (pendingText.length > STREAM_BUFFER_MAX_CHARS) pendingText = pendingText.slice(-4e3);
+			if (pendingText.length >= STREAM_SNIPPET_MAX_CHARS || delta.includes("\n\n")) {
+				flushPending();
+				return;
+			}
+			scheduleFlush();
+			return;
+		}
+		if (event.stream === "acp") {
+			const data = event.data;
+			const phase = normalizeOptionalString(data?.phase);
+			logEvent("acp", {
+				phase: phase ?? "unknown",
+				data: event.data
+			});
+			if (phase === "prompt_submitted") {
+				const at = toFiniteNumber(data?.at) ?? Date.now();
+				promptSubmittedAt ??= at;
+				proxyEnvKeysAtPrompt = normalizeStringArray(data?.proxyEnvKeys);
+				lastProgressAt = Date.now();
+				return;
+			}
+			if (phase === "runtime_event") {
+				const eventType = normalizeOptionalString(data?.eventType);
+				firstRuntimeEventAt ??= Date.now();
+				lastRuntimeEventType = eventType;
+				lastProgressAt = Date.now();
+				return;
+			}
+			return;
+		}
+		if (event.stream !== "lifecycle") return;
+		const phase = normalizeOptionalString(event.data?.phase);
+		logEvent("lifecycle", {
+			phase: phase ?? "unknown",
+			data: event.data
+		});
+		if (phase === "end") {
+			flushPending();
+			const startedAt = toFiniteNumber(event.data?.startedAt);
+			const endedAt = toFiniteNumber(event.data?.endedAt);
+			const durationMs = startedAt != null && endedAt != null && endedAt >= startedAt ? endedAt - startedAt : void 0;
+			if (durationMs != null) emit(`${relayLabel} run completed in ${Math.max(1, Math.round(durationMs / 1e3))}s.`, `${contextPrefix}:done`);
+			else emit(`${relayLabel} run completed.`, `${contextPrefix}:done`);
+			dispose();
+			return;
+		}
+		if (phase === "error") {
+			flushPending();
+			const errorText = normalizeOptionalString(event.data?.error);
+			if (errorText) emit(`${relayLabel} run failed: ${errorText}`, `${contextPrefix}:error`);
+			else emit(`${relayLabel} run failed.`, `${contextPrefix}:error`);
+			dispose();
+		}
+	});
+	const dispose = () => {
+		if (disposed) return;
+		disposed = true;
+		clearFlushTimer();
+		clearRelayLifetimeTimer();
+		flushLogBuffer();
+		clearInterval(noOutputWatcherTimer);
+		unsubscribe();
+	};
+	return {
+		dispose,
+		notifyStarted: emitStartNotice
+	};
+}
+//#endregion
+//#region src/agents/acp-spawn.ts
+const log = createSubsystemLogger("agents/acp-spawn");
+const ACP_SPAWN_MODES = ["run", "session"];
+const ACP_SPAWN_SANDBOX_MODES = ["inherit", "require"];
+const ACP_SPAWN_STREAM_TARGETS = ["parent"];
+const ACP_SPAWN_ERROR_CODES = [
+	"acp_disabled",
+	"requester_session_required",
+	"runtime_policy",
+	"resume_forbidden",
+	"subagent_policy",
+	"thread_required",
+	"target_agent_required",
+	"runtime_agent_mismatch",
+	"agent_forbidden",
+	"cwd_resolution_failed",
+	"thread_binding_invalid",
+	"spawn_failed",
+	"dispatch_failed"
+];
+function isSpawnAcpAcceptedResult(result) {
+	return result.status === "accepted";
+}
+const ACP_SPAWN_ACCEPTED_NOTE = "initial ACP task queued in isolated session; follow-ups continue in the bound thread.";
+const ACP_SPAWN_SESSION_ACCEPTED_NOTE = "thread-bound ACP session stays active after this task; continue in-thread for follow-ups.";
+function resolveAcpSpawnRuntimePolicyError(params) {
+	const sandboxMode = params.sandbox === "require" ? "require" : "inherit";
+	const requesterRuntime = resolveSandboxRuntimeStatus({
+		cfg: params.cfg,
+		sessionKey: params.requesterSessionKey
+	});
+	if (params.requesterSandboxed === true || requesterRuntime.sandboxed) return "Sandboxed sessions cannot spawn ACP sessions because runtime=\"acp\" runs on the host. Use runtime=\"subagent\" from sandboxed sessions.";
+	if (sandboxMode === "require") return "sessions_spawn sandbox=\"require\" is unsupported for runtime=\"acp\" because ACP sessions run outside the sandbox. Use runtime=\"subagent\" or sandbox=\"inherit\".";
+}
+function isActiveTaskStatus(status) {
+	return status === "queued" || status === "running";
+}
+function countUntrackedActiveAcpRunsForOwner(ownerKey) {
+	const normalizedOwnerKey = normalizeOptionalString(ownerKey);
+	if (!normalizedOwnerKey) return 0;
+	const tasks = listTasksForOwnerKey(normalizedOwnerKey);
+	const trackedChildSessionKeys = new Set(tasks.filter((task) => task.runtime === "subagent" && isActiveTaskStatus(task.status) && normalizeOptionalString(task.childSessionKey)).map((task) => normalizeOptionalString(task.childSessionKey)));
+	return new Set(tasks.flatMap((task) => {
+		const childSessionKey = normalizeOptionalString(task.childSessionKey);
+		const trackedRun = childSessionKey ? getSubagentRunByChildSessionKey(childSessionKey) : null;
+		const hasActiveRegistryRun = Boolean(trackedRun && typeof trackedRun.endedAt !== "number");
+		return task.runtime === "acp" && isActiveTaskStatus(task.status) && childSessionKey !== void 0 && !hasActiveRegistryRun && !trackedChildSessionKeys.has(childSessionKey) ? [childSessionKey] : [];
+	})).size;
+}
+function resolvePlacementWithoutChannelPlugin(params) {
+	return params.capabilities.placements.includes("child") ? "child" : "current";
+}
+function resolveSpawnMode(params) {
+	if (params.requestedMode === "run" || params.requestedMode === "session") return params.requestedMode;
+	return params.threadRequested ? "session" : "run";
+}
+function resolveAcpSessionMode(mode) {
+	return mode === "session" ? "persistent" : "oneshot";
+}
+function isHeartbeatEnabledForSessionAgent(params) {
+	if (!areHeartbeatsEnabled()) return false;
+	const requesterAgentId = parseAgentSessionKey(params.sessionKey)?.agentId;
+	if (!requesterAgentId) return true;
+	const agentEntries = Array.isArray(params.cfg.agents?.list) ? params.cfg.agents.list : [];
+	if (!(agentEntries.some((entry) => Boolean(entry?.heartbeat)) ? agentEntries.some((entry) => Boolean(entry?.heartbeat) && normalizeAgentId(entry?.id) === requesterAgentId) : requesterAgentId === resolveDefaultAgentId(params.cfg))) return false;
+	const trimmedEvery = normalizeOptionalString(resolveAgentConfig(params.cfg, requesterAgentId)?.heartbeat?.every ?? params.cfg.agents?.defaults?.heartbeat?.every ?? "30m") ?? "";
+	if (!trimmedEvery) return false;
+	try {
+		return parseDurationMs(trimmedEvery, { defaultUnit: "m" }) > 0;
+	} catch {
+		return false;
+	}
+}
+function resolveHeartbeatConfigForAgent(params) {
+	const defaults = params.cfg.agents?.defaults?.heartbeat;
+	const overrides = resolveAgentConfig(params.cfg, params.agentId)?.heartbeat;
+	if (!defaults && !overrides) return;
+	return {
+		...defaults,
+		...overrides
+	};
+}
+function hasSessionLocalHeartbeatRelayRoute(params) {
+	if ((params.cfg.session?.scope ?? "per-sender") === "global") return false;
+	const heartbeat = resolveHeartbeatConfigForAgent({
+		cfg: params.cfg,
+		agentId: params.requesterAgentId
+	});
+	if ((heartbeat?.target ?? "none") !== "last") return false;
+	if (normalizeOptionalString(heartbeat?.to)) return false;
+	if (normalizeOptionalString(heartbeat?.accountId)) return false;
+	const parentEntry = loadSessionStore(resolveStorePath(params.cfg.session?.store, { agentId: params.requesterAgentId }))[params.parentSessionKey];
+	const parentDeliveryContext = deliveryContextFromSession(parentEntry);
+	return Boolean(parentDeliveryContext?.channel && parentDeliveryContext.to);
+}
+function resolveTargetAcpAgentId(params) {
+	const requested = normalizeOptionalAgentId(params.requestedAgentId);
+	if (requested) {
+		const configuredAgent = params.cfg.agents?.list?.find((agent) => normalizeOptionalAgentId(agent.id) === requested);
+		if (configuredAgent?.runtime?.type === "acp") return {
+			ok: true,
+			agentId: normalizeOptionalAgentId(configuredAgent.runtime.acp?.agent) ?? requested
+		};
+		if (configuredAgent && !isExplicitlyAllowedAcpAgent(params.cfg, requested)) return {
+			ok: false,
+			error: `agentId "${requested}" is an DaoCore config agent, not an ACP harness. Use runtime="subagent" or omit runtime for DaoCore config agents. Use runtime="acp" only with external ACP harness ids such as codex, claude, droid, gemini, or opencode, or configure agents.list[].runtime.type="acp" with runtime.acp.agent.`
+		};
+		return {
+			ok: true,
+			agentId: requested
+		};
+	}
+	const configuredDefault = normalizeOptionalAgentId(params.cfg.acp?.defaultAgent);
+	if (configuredDefault) return {
+		ok: true,
+		agentId: configuredDefault
+	};
+	return {
+		ok: false,
+		error: "ACP target agent is not configured. Pass `agentId` in `sessions_spawn` or set `acp.defaultAgent` in config."
+	};
+}
+function isExplicitlyAllowedAcpAgent(cfg, agentId) {
+	return (cfg.acp?.allowedAgents ?? []).some((entry) => {
+		if (entry.trim() === "*") return true;
+		return normalizeOptionalAgentId(entry) === agentId;
+	});
+}
+function resolveConfiguredAcpSubagentTargetIds(cfg) {
+	const ids = new Set(listAgentIds(cfg));
+	for (const agent of cfg.agents?.list ?? []) {
+		if (agent.runtime?.type !== "acp") continue;
+		const acpAgent = normalizeOptionalAgentId(agent.runtime.acp?.agent);
+		if (acpAgent) ids.add(acpAgent);
+	}
+	const defaultAgent = normalizeOptionalAgentId(cfg.acp?.defaultAgent);
+	if (defaultAgent) ids.add(defaultAgent);
+	for (const entry of cfg.acp?.allowedAgents ?? []) {
+		if (entry.trim() === "*") continue;
+		const id = normalizeOptionalAgentId(entry);
+		if (id) ids.add(id);
+	}
+	return Array.from(ids);
+}
+function normalizeOptionalAgentId(value) {
+	const trimmed = normalizeOptionalString(value) ?? "";
+	if (!trimmed) return;
+	return normalizeAgentId(trimmed);
+}
+function summarizeError(err) {
+	return formatErrorMessage(err);
+}
+function createAcpSpawnFailure(params) {
+	return {
+		status: params.status,
+		errorCode: params.errorCode,
+		error: params.error,
+		...params.childSessionKey ? { childSessionKey: params.childSessionKey } : {}
+	};
+}
+function isMissingPathError(error) {
+	const code = error instanceof Error ? error.code : void 0;
+	return code === "ENOENT" || code === "ENOTDIR";
+}
+async function resolveRuntimeCwdForAcpSpawn(params) {
+	if (!params.resolvedCwd) return;
+	if (normalizeOptionalString(params.explicitCwd)) return params.resolvedCwd;
+	try {
+		await fs.access(params.resolvedCwd);
+		return params.resolvedCwd;
+	} catch (error) {
+		if (isMissingPathError(error)) return;
+		throw error;
+	}
+}
+function resolveRequesterInternalSessionKey(params) {
+	const { mainKey, alias } = resolveMainSessionAlias(params.cfg);
+	const requesterSessionKey = normalizeOptionalString(params.requesterSessionKey);
+	return requesterSessionKey ? resolveInternalSessionKey({
+		key: requesterSessionKey,
+		alias,
+		mainKey
+	}) : alias;
+}
+async function persistAcpSpawnSessionFileBestEffort(params) {
+	try {
+		return (await resolveSessionTranscriptFile({
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			sessionEntry: params.sessionEntry,
+			sessionStore: params.sessionStore,
+			storePath: params.storePath,
+			agentId: params.agentId,
+			threadId: params.threadId
+		})).sessionEntry;
+	} catch (error) {
+		log.warn(`ACP session-file persistence failed during ${params.stage} for ${params.sessionKey}: ${summarizeError(error)}`);
+		return params.sessionEntry;
+	}
+}
+function resolveConversationRefForThreadBinding(params) {
+	return resolveInboundConversationResolution({
+		cfg: params.cfg,
+		channel: params.channel,
+		accountId: params.accountId,
+		to: params.to,
+		threadId: params.threadId,
+		groupId: params.groupId,
+		isGroup: true
+	})?.canonical ?? null;
+}
+function resolveAcpSpawnChannelAccountId(params) {
+	const channel = normalizeOptionalLowercaseString(params.channel);
+	const explicitAccountId = normalizeOptionalString(params.accountId);
+	if (explicitAccountId) return explicitAccountId;
+	if (!channel) return;
+	const configuredDefaultAccountId = params.cfg.channels?.[channel]?.defaultAccount;
+	return normalizeOptionalString(configuredDefaultAccountId) ?? "default";
+}
+function prepareAcpThreadBinding(params) {
+	const channel = normalizeOptionalLowercaseString(params.channel);
+	if (!channel) return {
+		ok: false,
+		error: "thread=true for ACP sessions requires a channel context."
+	};
+	const accountId = resolveAcpSpawnChannelAccountId({
+		cfg: params.cfg,
+		channel,
+		accountId: params.accountId
+	});
+	const policy = resolveThreadBindingSpawnPolicy({
+		cfg: params.cfg,
+		channel,
+		accountId,
+		kind: "acp"
+	});
+	if (!policy.enabled) return {
+		ok: false,
+		error: formatThreadBindingDisabledError({
+			channel: policy.channel,
+			accountId: policy.accountId,
+			kind: "acp"
+		})
+	};
+	if (!policy.spawnEnabled) return {
+		ok: false,
+		error: formatThreadBindingSpawnDisabledError({
+			channel: policy.channel,
+			accountId: policy.accountId,
+			kind: "acp"
+		})
+	};
+	const capabilities = getSessionBindingService().getCapabilities({
+		channel: policy.channel,
+		accountId: policy.accountId
+	});
+	if (!capabilities.adapterAvailable) return {
+		ok: false,
+		error: `Thread bindings are unavailable for ${policy.channel}.`
+	};
+	const placementToUse = resolveChannelDefaultBindingPlacement(policy.channel) ?? resolvePlacementWithoutChannelPlugin({ capabilities });
+	if (!capabilities.bindSupported || !capabilities.placements.includes(placementToUse)) return {
+		ok: false,
+		error: `Thread bindings do not support ${placementToUse} placement for ${policy.channel}.`
+	};
+	const conversationRef = resolveConversationRefForThreadBinding({
+		cfg: params.cfg,
+		channel: policy.channel,
+		accountId: policy.accountId,
+		to: params.to,
+		threadId: params.threadId,
+		groupId: params.groupId
+	});
+	if (!conversationRef?.conversationId) return {
+		ok: false,
+		error: `Could not resolve a ${policy.channel} conversation for ACP thread spawn.`
+	};
+	return {
+		ok: true,
+		binding: {
+			channel: policy.channel,
+			accountId: policy.accountId,
+			placement: placementToUse,
+			conversationId: conversationRef.conversationId,
+			...conversationRef.parentConversationId ? { parentConversationId: conversationRef.parentConversationId } : {}
+		}
+	};
+}
+function resolveAcpSpawnRequesterState(params) {
+	const bindingService = getSessionBindingService();
+	const requesterParsedSession = parseAgentSessionKey(params.parentSessionKey);
+	const isSubagentSession = Boolean(requesterParsedSession) && isSubagentSessionKey(params.parentSessionKey);
+	const hasActiveSubagentBinding = isSubagentSession && params.parentSessionKey ? bindingService.listBySession(params.parentSessionKey).some((record) => record.targetKind === "subagent" && record.status !== "ended") : false;
+	const hasThreadContext = typeof params.ctx.agentThreadId === "string" ? Boolean(normalizeOptionalString(params.ctx.agentThreadId)) : params.ctx.agentThreadId != null;
+	const requesterAgentId = requesterParsedSession?.agentId;
+	return {
+		parentSessionKey: params.parentSessionKey,
+		isSubagentSession,
+		hasActiveSubagentBinding,
+		hasThreadContext,
+		heartbeatEnabled: isHeartbeatEnabledForSessionAgent({
+			cfg: params.cfg,
+			sessionKey: params.parentSessionKey
+		}),
+		heartbeatRelayRouteUsable: params.parentSessionKey && requesterAgentId ? hasSessionLocalHeartbeatRelayRoute({
+			cfg: params.cfg,
+			parentSessionKey: params.parentSessionKey,
+			requesterAgentId
+		}) : false,
+		origin: resolveRequesterOriginForChild({
+			cfg: params.cfg,
+			targetAgentId: params.targetAgentId,
+			requesterAgentId: normalizeAgentId(requesterAgentId),
+			requesterChannel: params.ctx.agentChannel,
+			requesterAccountId: params.ctx.agentAccountId,
+			requesterTo: params.ctx.agentTo,
+			requesterThreadId: params.ctx.agentThreadId,
+			requesterGroupSpace: params.ctx.agentGroupSpace,
+			requesterMemberRoleIds: params.ctx.agentMemberRoleIds
+		})
+	};
+}
+function resolveAcpSubagentEnvelopeState(params) {
+	const requesterSessionKey = normalizeOptionalString(params.requesterSessionKey);
+	if (!requesterSessionKey) return {};
+	if (!isSubagentEnvelopeSession(requesterSessionKey, {
+		cfg: params.cfg,
+		store: params.subagentStore
+	})) return {};
+	const callerDepth = getSubagentDepthFromSessionStore(requesterSessionKey, { cfg: params.cfg });
+	const maxSpawnDepth = params.cfg.agents?.defaults?.subagents?.maxSpawnDepth ?? 1;
+	if (callerDepth >= maxSpawnDepth) return { error: `sessions_spawn is not allowed at this depth (current depth: ${callerDepth}, max: ${maxSpawnDepth})` };
+	const maxChildren = params.cfg.agents?.defaults?.subagents?.maxChildrenPerAgent ?? 5;
+	const activeChildren = countActiveRunsForSession(requesterSessionKey) + countUntrackedActiveAcpRunsForOwner(requesterSessionKey);
+	if (activeChildren >= maxChildren) return { error: `sessions_spawn has reached max active children for this session (${activeChildren}/${maxChildren})` };
+	const requesterAgentId = normalizeAgentId(parseAgentSessionKey(requesterSessionKey)?.agentId);
+	if ((resolveAgentConfig(params.cfg, requesterAgentId)?.subagents?.requireAgentId ?? params.cfg.agents?.defaults?.subagents?.requireAgentId ?? false) && !params.requestedAgentId?.trim()) return { error: "sessions_spawn requires explicit agentId when requireAgentId is configured. Use agents_list to see allowed agent ids." };
+	const targetPolicy = resolveSubagentTargetPolicy({
+		requesterAgentId,
+		targetAgentId: params.targetAgentId,
+		requestedAgentId: params.requestedAgentId,
+		allowAgents: resolveAgentConfig(params.cfg, requesterAgentId)?.subagents?.allowAgents ?? params.cfg.agents?.defaults?.subagents?.allowAgents,
+		configuredAgentIds: resolveConfiguredAcpSubagentTargetIds(params.cfg)
+	});
+	if (!targetPolicy.ok) return { error: targetPolicy.error };
+	const childCapabilities = resolveSubagentCapabilities({
+		depth: callerDepth + 1,
+		maxSpawnDepth
+	});
+	return { childSessionPatch: {
+		spawnDepth: childCapabilities.depth,
+		subagentRole: childCapabilities.role === "main" ? null : childCapabilities.role,
+		subagentControlScope: childCapabilities.controlScope
+	} };
+}
+function resolveAcpSpawnStreamPlan(params) {
+	const implicitStreamToParent = !params.streamToParentRequested && params.spawnMode === "run" && !params.requestThreadBinding && params.requester.isSubagentSession && !params.requester.hasActiveSubagentBinding && !params.requester.hasThreadContext && params.requester.heartbeatEnabled && params.requester.heartbeatRelayRouteUsable;
+	return {
+		implicitStreamToParent,
+		effectiveStreamToParent: params.streamToParentRequested || implicitStreamToParent
+	};
+}
+function sessionEntryMatchesAcpResumeSessionId(entry, resumeSessionId) {
+	const identity = entry?.acp?.identity;
+	return normalizeOptionalString(identity?.agentSessionId) === resumeSessionId || normalizeOptionalString(identity?.acpxSessionId) === resumeSessionId;
+}
+function sessionEntryIsOwnedByRequester(params) {
+	return params.sessionKey === params.requesterSessionKey || normalizeOptionalString(params.entry?.spawnedBy) === params.requesterSessionKey || normalizeOptionalString(params.entry?.parentSessionKey) === params.requesterSessionKey;
+}
+function validateAcpResumeSessionOwnership(params) {
+	const resumeSessionId = normalizeOptionalString(params.resumeSessionId);
+	if (!resumeSessionId) return { ok: true };
+	const requesterSessionKey = normalizeOptionalString(params.requesterSessionKey);
+	if (!requesterSessionKey) return {
+		ok: false,
+		error: "sessions_spawn resumeSessionId requires an active requester session context."
+	};
+	const sessionStore = loadSessionStore(resolveStorePath(params.cfg.session?.store, { agentId: params.targetAgentId }));
+	for (const [sessionKey, entry] of Object.entries(sessionStore)) {
+		if (!sessionEntryMatchesAcpResumeSessionId(entry, resumeSessionId)) continue;
+		if (sessionEntryIsOwnedByRequester({
+			sessionKey,
+			entry,
+			requesterSessionKey
+		})) return { ok: true };
+		break;
+	}
+	return {
+		ok: false,
+		error: "sessions_spawn resumeSessionId is only allowed for ACP sessions previously recorded for this requester. Omit resumeSessionId to start a fresh ACP session."
+	};
+}
+async function initializeAcpSpawnRuntime(params) {
+	const storePath = resolveStorePath(params.cfg.session?.store, { agentId: params.targetAgentId });
+	const sessionStore = loadSessionStore(storePath);
+	let sessionEntry = sessionStore[params.sessionKey];
+	const sessionId = sessionEntry?.sessionId;
+	if (sessionId) sessionEntry = await persistAcpSpawnSessionFileBestEffort({
+		sessionId,
+		sessionKey: params.sessionKey,
+		sessionStore,
+		storePath,
+		sessionEntry,
+		agentId: params.targetAgentId,
+		stage: "spawn"
+	});
+	const initialized = await getAcpSessionManager().initializeSession({
+		cfg: params.cfg,
+		sessionKey: params.sessionKey,
+		agent: params.targetAgentId,
+		mode: params.runtimeMode,
+		resumeSessionId: params.resumeSessionId,
+		runtimeOptions: params.model || params.thinking || params.runTimeoutSeconds ? {
+			...params.model ? { model: params.model } : {},
+			...params.thinking ? { thinking: params.thinking } : {},
+			...params.runTimeoutSeconds ? { timeoutSeconds: params.runTimeoutSeconds } : {}
+		} : void 0,
+		cwd: params.cwd,
+		backendId: params.cfg.acp?.backend
+	});
+	return {
+		initialized,
+		runtimeCloseHandle: {
+			runtime: initialized.runtime,
+			handle: initialized.handle
+		},
+		sessionId,
+		sessionEntry,
+		sessionStore,
+		storePath
+	};
+}
+async function bindPreparedAcpThread(params) {
+	const binding = await getSessionBindingService().bind({
+		targetSessionKey: params.sessionKey,
+		targetKind: "session",
+		conversation: {
+			channel: params.preparedBinding.channel,
+			accountId: params.preparedBinding.accountId,
+			conversationId: params.preparedBinding.conversationId,
+			...params.preparedBinding.parentConversationId ? { parentConversationId: params.preparedBinding.parentConversationId } : {}
+		},
+		placement: params.preparedBinding.placement,
+		metadata: {
+			threadName: resolveThreadBindingThreadName({
+				agentId: params.targetAgentId,
+				label: params.label || params.targetAgentId
+			}),
+			agentId: params.targetAgentId,
+			label: params.label || void 0,
+			boundBy: "system",
+			introText: resolveThreadBindingIntroText({
+				agentId: params.targetAgentId,
+				label: params.label || void 0,
+				idleTimeoutMs: resolveThreadBindingIdleTimeoutMsForChannel({
+					cfg: params.cfg,
+					channel: params.preparedBinding.channel,
+					accountId: params.preparedBinding.accountId
+				}),
+				maxAgeMs: resolveThreadBindingMaxAgeMsForChannel({
+					cfg: params.cfg,
+					channel: params.preparedBinding.channel,
+					accountId: params.preparedBinding.accountId
+				}),
+				sessionCwd: resolveAcpSessionCwd(params.initializedRuntime.initialized.meta),
+				sessionDetails: resolveAcpThreadSessionDetailLines({
+					sessionKey: params.sessionKey,
+					meta: params.initializedRuntime.initialized.meta
+				})
+			})
+		}
+	});
+	if (!binding.conversation.conversationId) throw new Error(params.preparedBinding.placement === "child" ? `Failed to create and bind a ${params.preparedBinding.channel} thread for this ACP session.` : `Failed to bind the current ${params.preparedBinding.channel} conversation for this ACP session.`);
+	let sessionEntry = params.initializedRuntime.sessionEntry;
+	if (params.initializedRuntime.sessionId && params.preparedBinding.placement === "child") {
+		const boundThreadId = normalizeOptionalString(binding.conversation.conversationId);
+		if (boundThreadId) sessionEntry = await persistAcpSpawnSessionFileBestEffort({
+			sessionId: params.initializedRuntime.sessionId,
+			sessionKey: params.sessionKey,
+			sessionStore: params.initializedRuntime.sessionStore,
+			storePath: params.initializedRuntime.storePath,
+			sessionEntry,
+			agentId: params.targetAgentId,
+			threadId: boundThreadId,
+			stage: "thread-bind"
+		});
+	}
+	return {
+		binding,
+		sessionEntry
+	};
+}
+function resolveAcpSpawnBootstrapDeliveryPlan(params) {
+	const boundThreadIdRaw = params.binding?.conversation.conversationId;
+	const boundThreadId = boundThreadIdRaw ? normalizeOptionalString(boundThreadIdRaw) : void 0;
+	const fallbackThreadIdRaw = params.requester.origin?.threadId;
+	const fallbackThreadId = fallbackThreadIdRaw != null ? normalizeOptionalString(String(fallbackThreadIdRaw)) : void 0;
+	const deliveryThreadId = boundThreadId ?? fallbackThreadId;
+	const requesterConversationRef = resolveConversationRefForThreadBinding({
+		cfg: params.cfg,
+		channel: params.requester.origin?.channel,
+		accountId: params.requester.origin?.accountId,
+		threadId: fallbackThreadId,
+		to: params.requester.origin?.to
+	});
+	const requesterAccountId = resolveAcpSpawnChannelAccountId({
+		cfg: params.cfg,
+		channel: params.requester.origin?.channel,
+		accountId: params.requester.origin?.accountId
+	});
+	const bindingMatchesRequesterConversation = Boolean(params.requester.origin?.channel && params.binding?.conversation.channel === params.requester.origin.channel && params.binding?.conversation.accountId === requesterAccountId && requesterConversationRef?.conversationId && params.binding?.conversation.conversationId === requesterConversationRef.conversationId && (params.binding?.conversation.parentConversationId ?? void 0) === (requesterConversationRef.parentConversationId ?? void 0));
+	const boundDeliveryTarget = routeToDeliveryFields(routeFromBindingRecord(params.binding));
+	const inferredDeliveryTo = (bindingMatchesRequesterConversation ? normalizeOptionalString(params.requester.origin?.to) : void 0) ?? boundDeliveryTarget.to ?? normalizeOptionalString(params.requester.origin?.to) ?? formatConversationTarget({
+		channel: params.requester.origin?.channel,
+		conversationId: deliveryThreadId
+	});
+	const resolvedDeliveryThreadId = bindingMatchesRequesterConversation ? fallbackThreadId : boundDeliveryTarget.threadId ?? deliveryThreadId;
+	const useInlineDelivery = Boolean(params.requester.origin?.channel && inferredDeliveryTo) && !params.effectiveStreamToParent && params.spawnMode === "session";
+	return {
+		useInlineDelivery,
+		channel: useInlineDelivery ? params.requester.origin?.channel : void 0,
+		accountId: useInlineDelivery ? requesterAccountId : void 0,
+		to: useInlineDelivery ? inferredDeliveryTo : void 0,
+		threadId: useInlineDelivery && resolvedDeliveryThreadId != null ? normalizeOptionalString(String(resolvedDeliveryThreadId)) : void 0
+	};
+}
+async function spawnAcpDirect(params, ctx) {
+	const cfg = getRuntimeConfig();
+	const requesterInternalKey = resolveRequesterInternalSessionKey({
+		cfg,
+		requesterSessionKey: ctx.agentSessionKey
+	});
+	if (!isAcpEnabledByPolicy(cfg)) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "acp_disabled",
+		error: "ACP is disabled by policy (`acp.enabled=false`)."
+	});
+	const streamToParentRequested = params.streamTo === "parent";
+	const parentSessionKey = normalizeOptionalString(ctx.agentSessionKey);
+	if (streamToParentRequested && !parentSessionKey) return createAcpSpawnFailure({
+		status: "error",
+		errorCode: "requester_session_required",
+		error: "sessions_spawn streamTo=\"parent\" requires an active requester session context."
+	});
+	let requestThreadBinding = params.thread === true;
+	const runtimePolicyError = resolveAcpSpawnRuntimePolicyError({
+		cfg,
+		requesterSessionKey: ctx.agentSessionKey,
+		requesterSandboxed: ctx.sandboxed,
+		sandbox: params.sandbox
+	});
+	if (runtimePolicyError) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "runtime_policy",
+		error: runtimePolicyError
+	});
+	const acpUnsupportedInheritedTool = findAcpUnsupportedInheritedToolDeny(ctx.inheritedToolDenylist);
+	if (acpUnsupportedInheritedTool) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "runtime_policy",
+		error: formatAcpInheritedToolDenyError(acpUnsupportedInheritedTool)
+	});
+	const acpUnsupportedInheritedAllow = findAcpUnsupportedInheritedToolAllow(ctx.inheritedToolAllowlist);
+	if (acpUnsupportedInheritedAllow) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "runtime_policy",
+		error: formatAcpInheritedToolAllowError(acpUnsupportedInheritedAllow)
+	});
+	const spawnMode = resolveSpawnMode({
+		requestedMode: params.mode,
+		threadRequested: requestThreadBinding
+	});
+	if (spawnMode === "session" && !requestThreadBinding) return createAcpSpawnFailure({
+		status: "error",
+		errorCode: "thread_required",
+		error: "sessions_spawn(runtime=\"acp\", mode=\"session\") requires thread=true so the ACP session can stay bound to a channel thread. Retry with { mode: \"session\", thread: true } on a channel that exposes threads (e.g. Discord, Slack, Telegram topics), or use mode=\"run\" for one-shot work."
+	});
+	const targetAgentResult = resolveTargetAcpAgentId({
+		requestedAgentId: params.agentId,
+		cfg
+	});
+	if (!targetAgentResult.ok) return createAcpSpawnFailure({
+		status: "error",
+		errorCode: params.agentId && normalizeOptionalAgentId(params.agentId) ? "runtime_agent_mismatch" : "target_agent_required",
+		error: targetAgentResult.error
+	});
+	const targetAgentId = targetAgentResult.agentId;
+	const agentPolicyError = resolveAcpAgentPolicyError(cfg, targetAgentId);
+	if (agentPolicyError) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "agent_forbidden",
+		error: agentPolicyError.message
+	});
+	const subagentStore = resolveSubagentCapabilityStore(parentSessionKey, { cfg });
+	const requesterState = resolveAcpSpawnRequesterState({
+		cfg,
+		parentSessionKey,
+		targetAgentId,
+		ctx,
+		subagentStore
+	});
+	const subagentEnvelopeState = resolveAcpSubagentEnvelopeState({
+		cfg,
+		requesterSessionKey: requesterInternalKey,
+		targetAgentId,
+		requestedAgentId: params.agentId,
+		subagentStore
+	});
+	if (subagentEnvelopeState.error) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "subagent_policy",
+		error: subagentEnvelopeState.error
+	});
+	const resumeAuthorization = validateAcpResumeSessionOwnership({
+		cfg,
+		targetAgentId,
+		requesterSessionKey: requesterInternalKey,
+		resumeSessionId: params.resumeSessionId
+	});
+	if (!resumeAuthorization.ok) return createAcpSpawnFailure({
+		status: "forbidden",
+		errorCode: "resume_forbidden",
+		error: resumeAuthorization.error
+	});
+	const { effectiveStreamToParent } = resolveAcpSpawnStreamPlan({
+		spawnMode,
+		requestThreadBinding,
+		streamToParentRequested,
+		requester: requesterState
+	});
+	const sessionKey = `agent:${targetAgentId}:acp:${crypto.randomUUID()}`;
+	const runtimeMode = resolveAcpSessionMode(spawnMode);
+	const resolvedCwd = resolveSpawnedWorkspaceInheritance({
+		config: cfg,
+		targetAgentId,
+		requesterSessionKey: ctx.agentSessionKey,
+		explicitWorkspaceDir: params.cwd
+	});
+	let runtimeCwd;
+	try {
+		runtimeCwd = await resolveRuntimeCwdForAcpSpawn({
+			resolvedCwd,
+			explicitCwd: params.cwd
+		});
+	} catch (error) {
+		return createAcpSpawnFailure({
+			status: "error",
+			errorCode: "cwd_resolution_failed",
+			error: summarizeError(error)
+		});
+	}
+	let preparedBinding = null;
+	if (requestThreadBinding) {
+		const prepared = prepareAcpThreadBinding({
+			cfg,
+			channel: requesterState.origin?.channel,
+			accountId: requesterState.origin?.accountId,
+			to: requesterState.origin?.to,
+			threadId: requesterState.origin?.threadId,
+			groupId: ctx.agentGroupId
+		});
+		if (!prepared.ok) return createAcpSpawnFailure({
+			status: "error",
+			errorCode: "thread_binding_invalid",
+			error: prepared.error
+		});
+		preparedBinding = prepared.binding;
+	}
+	let binding = null;
+	let sessionCreated = false;
+	let initializedRuntime;
+	try {
+		await callGateway({
+			method: "sessions.patch",
+			params: {
+				key: sessionKey,
+				spawnedBy: requesterInternalKey,
+				...subagentEnvelopeState.childSessionPatch,
+				...inheritedToolAllowPatch(ctx.inheritedToolAllowlist),
+				...inheritedToolDenyPatch(ctx.inheritedToolDenylist),
+				...params.label ? { label: params.label } : {}
+			},
+			timeoutMs: 1e4
+		});
+		sessionCreated = true;
+		const initializedSession = await initializeAcpSpawnRuntime({
+			cfg,
+			sessionKey,
+			targetAgentId,
+			runtimeMode,
+			resumeSessionId: params.resumeSessionId,
+			model: params.model,
+			thinking: params.thinking,
+			runTimeoutSeconds: params.runTimeoutSeconds,
+			cwd: runtimeCwd
+		});
+		initializedRuntime = initializedSession.runtimeCloseHandle;
+		if (preparedBinding) ({binding} = await bindPreparedAcpThread({
+			cfg,
+			sessionKey,
+			targetAgentId,
+			label: params.label,
+			preparedBinding,
+			initializedRuntime: initializedSession
+		}));
+	} catch (err) {
+		await cleanupFailedAcpSpawn({
+			cfg,
+			sessionKey,
+			shouldDeleteSession: sessionCreated,
+			deleteTranscript: true,
+			runtimeCloseHandle: initializedRuntime
+		});
+		return createAcpSpawnFailure({
+			status: "error",
+			errorCode: isSessionBindingError(err) ? "thread_binding_invalid" : "spawn_failed",
+			error: isSessionBindingError(err) ? err.message : summarizeError(err)
+		});
+	}
+	const deliveryPlan = resolveAcpSpawnBootstrapDeliveryPlan({
+		cfg,
+		spawnMode,
+		requestThreadBinding,
+		effectiveStreamToParent,
+		requester: requesterState,
+		binding
+	});
+	const childIdem = crypto.randomUUID();
+	let childRunId = childIdem;
+	const streamLogPath = effectiveStreamToParent && parentSessionKey ? resolveAcpSpawnStreamLogPath({ childSessionKey: sessionKey }) : void 0;
+	const parentDeliveryCtx = effectiveStreamToParent && parentSessionKey ? deliveryContextFromSession(loadSessionStore(resolveStorePath(cfg.session?.store, { agentId: resolveAgentIdFromSessionKey(parentSessionKey) }))[parentSessionKey]) : void 0;
+	let parentRelay;
+	const parentEventRouting = parentSessionKey ? resolveEventSessionRoutingPolicy({
+		cfg,
+		sessionKey: parentSessionKey
+	}) : void 0;
+	if (effectiveStreamToParent && parentSessionKey) parentRelay = startAcpSpawnParentStreamRelay({
+		runId: childIdem,
+		parentSessionKey,
+		childSessionKey: sessionKey,
+		agentId: targetAgentId,
+		mainKey: cfg.session?.mainKey,
+		sessionScope: cfg.session?.scope,
+		eventRouting: parentEventRouting,
+		logPath: streamLogPath,
+		deliveryContext: parentDeliveryCtx,
+		emitStartNotice: false
+	});
+	try {
+		const responseRunId = normalizeOptionalString((await callGateway({
+			method: "agent",
+			params: {
+				message: params.task,
+				sessionKey,
+				channel: deliveryPlan.channel,
+				to: deliveryPlan.to,
+				accountId: deliveryPlan.accountId,
+				threadId: deliveryPlan.threadId,
+				idempotencyKey: childIdem,
+				deliver: deliveryPlan.useInlineDelivery,
+				lane: AGENT_LANE_SUBAGENT,
+				acpTurnSource: "manual_spawn",
+				...params.runTimeoutSeconds != null ? { timeout: params.runTimeoutSeconds } : {},
+				label: params.label || void 0
+			},
+			timeoutMs: 1e4
+		}))?.runId);
+		if (responseRunId) childRunId = responseRunId;
+	} catch (err) {
+		parentRelay?.dispose();
+		await cleanupFailedAcpSpawn({
+			cfg,
+			sessionKey,
+			shouldDeleteSession: true,
+			deleteTranscript: true,
+			runtimeCloseHandle: initializedRuntime
+		});
+		return createAcpSpawnFailure({
+			status: "error",
+			errorCode: "dispatch_failed",
+			error: summarizeError(err),
+			childSessionKey: sessionKey
+		});
+	}
+	if (effectiveStreamToParent && parentSessionKey) {
+		if (parentRelay && childRunId !== childIdem) {
+			parentRelay.dispose();
+			parentRelay = startAcpSpawnParentStreamRelay({
+				runId: childRunId,
+				parentSessionKey,
+				childSessionKey: sessionKey,
+				agentId: targetAgentId,
+				mainKey: cfg.session?.mainKey,
+				sessionScope: cfg.session?.scope,
+				eventRouting: parentEventRouting,
+				logPath: streamLogPath,
+				deliveryContext: parentDeliveryCtx,
+				emitStartNotice: false
+			});
+		}
+		parentRelay?.notifyStarted();
+		try {
+			createRunningTaskRun({
+				runtime: "acp",
+				sourceId: childRunId,
+				ownerKey: requesterInternalKey,
+				scopeKind: "session",
+				requesterOrigin: requesterState.origin,
+				childSessionKey: sessionKey,
+				runId: childRunId,
+				label: params.label,
+				task: params.task,
+				preferMetadata: true,
+				deliveryStatus: requesterInternalKey ? "pending" : "parent_missing",
+				startedAt: Date.now()
+			});
+		} catch (error) {
+			log.warn("Failed to create background task for ACP spawn", {
+				sessionKey,
+				runId: childRunId,
+				error
+			});
+		}
+		return {
+			status: "accepted",
+			childSessionKey: sessionKey,
+			runId: childRunId,
+			mode: spawnMode,
+			...streamLogPath ? { streamLogPath } : {},
+			note: spawnMode === "session" ? ACP_SPAWN_SESSION_ACCEPTED_NOTE : ACP_SPAWN_ACCEPTED_NOTE
+		};
+	}
+	try {
+		createRunningTaskRun({
+			runtime: "acp",
+			sourceId: childRunId,
+			ownerKey: requesterInternalKey,
+			scopeKind: "session",
+			requesterOrigin: requesterState.origin,
+			childSessionKey: sessionKey,
+			runId: childRunId,
+			label: params.label,
+			task: params.task,
+			preferMetadata: true,
+			deliveryStatus: requesterInternalKey ? "pending" : "parent_missing",
+			startedAt: Date.now()
+		});
+	} catch (error) {
+		log.warn("Failed to create background task for ACP spawn", {
+			sessionKey,
+			runId: childRunId,
+			error
+		});
+	}
+	return {
+		status: "accepted",
+		childSessionKey: sessionKey,
+		runId: childRunId,
+		mode: spawnMode,
+		...deliveryPlan.useInlineDelivery ? { inlineDelivery: true } : {},
+		note: spawnMode === "session" ? ACP_SPAWN_SESSION_ACCEPTED_NOTE : ACP_SPAWN_ACCEPTED_NOTE
+	};
+}
+//#endregion
+export { ACP_SPAWN_SESSION_ACCEPTED_NOTE as a, resolveAcpSpawnRuntimePolicyError as c, ACP_SPAWN_SANDBOX_MODES as i, spawnAcpDirect as l, ACP_SPAWN_ERROR_CODES as n, ACP_SPAWN_STREAM_TARGETS as o, ACP_SPAWN_MODES as r, isSpawnAcpAcceptedResult as s, ACP_SPAWN_ACCEPTED_NOTE as t, cleanupFailedAcpSpawn as u };