@geminixiang/mikan 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/tools/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAI/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AA6BpD,QAAA,MAAM,UAAU;;;;;EASd,CAAC;AAMH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,OAAO,UAAU,CAAC,CA0H/E"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAI/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AA4BpD,QAAA,MAAM,UAAU;;;;;EASd,CAAC;AAMH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,OAAO,UAAU,CAAC,CAuG/E"}

package/dist/tools/read.js

@@ -1,6 +1,5 @@
 import { Type } from "@sinclair/typebox";
 import { extname } from "path";
-import { shellEscape } from "../sandbox/utils.js";
 import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, formatSize, truncateHead, } from "./truncate.js";
 /**
  * Map of file extensions to MIME types for common image formats
@@ -36,12 +35,8 @@ export function createReadTool(executor) {
         execute: async (_toolCallId, { path, offset, limit }, signal) => {
             const mimeType = isImageFile(path);
             if (mimeType) {
-                // Read as image (binary) - use base64
-                const result = await executor.exec(`base64 < ${shellEscape(path)}`, { signal });
-                if (result.code !== 0) {
-                    throw new Error(result.stderr || `Failed to read file: ${path}`);
-                }
-                const base64 = result.stdout.replace(/\s/g, ""); // Remove whitespace from base64
+                // Binary content rides the executor's own transport, never shell argv.
+                const base64 = await executor.readFileBase64(path, { signal });
                 return {
                     content: [
                         { type: "text", text: `Read image file [${mimeType}]` },
@@ -50,12 +45,10 @@ export function createReadTool(executor) {
                     details: undefined,
                 };
             }
-            // Get total line count first
-            const countResult = await executor.exec(`wc -l < ${shellEscape(path)}`, { signal });
-            if (countResult.code !== 0) {
-                throw new Error(countResult.stderr || `Failed to read file: ${path}`);
-            }
-            const totalFileLines = Number.parseInt(countResult.stdout.trim(), 10) + 1; // wc -l counts newlines, not lines
+            // One transport read; line selection is plain code, not shell strings.
+            const fileText = await executor.readFile(path, { signal });
+            const fileLines = fileText.split("\n");
+            const totalFileLines = fileLines.length;
             // Apply offset if specified (1-indexed)
             const startLine = offset ? Math.max(1, offset) : 1;
             const startLineDisplay = startLine;
@@ -63,19 +56,7 @@ export function createReadTool(executor) {
             if (startLine > totalFileLines) {
                 throw new Error(`Offset ${offset} is beyond end of file (${totalFileLines} lines total)`);
             }
-            // Read content with offset
-            let cmd;
-            if (startLine === 1) {
-                cmd = `cat ${shellEscape(path)}`;
-            }
-            else {
-                cmd = `tail -n +${startLine} ${shellEscape(path)}`;
-            }
-            const result = await executor.exec(cmd, { signal });
-            if (result.code !== 0) {
-                throw new Error(result.stderr || `Failed to read file: ${path}`);
-            }
-            let selectedContent = result.stdout;
+            let selectedContent = startLine === 1 ? fileText : fileLines.slice(startLine - 1).join("\n");
             let userLimitedLines;
             // Apply user limit if specified
             if (limit !== undefined) {

package/dist/tools/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EAEV,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,kEAAkE;KAChF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IACrF,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC,CAC9E;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC,CAAC;CACtF,CAAC,CAAC;AAMH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,6JAA6J,iBAAiB,aAAa,iBAAiB,GAAG,IAAI,gEAAgE;QAChS,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAoE,EACzF,MAAoB,EAInB,EAAE;YACH,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,sCAAsC;gBACtC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,wBAAwB,IAAI,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,gCAAgC;gBAEjF,OAAO;oBACL,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,QAAQ,GAAG,EAAE;wBACvD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;qBAC1C;oBACD,OAAO,EAAE,SAAS;iBACnB,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpF,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,IAAI,wBAAwB,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,mCAAmC;YAE9G,wCAAwC;YACxC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,gBAAgB,GAAG,SAAS,CAAC;YAEnC,mCAAmC;YACnC,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,2BAA2B,cAAc,eAAe,CAAC,CAAC;YAC5F,CAAC;YAED,2BAA2B;YAC3B,IAAI,GAAW,CAAC;YAChB,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,GAAG,GAAG,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,YAAY,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,wBAAwB,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;YACpC,IAAI,gBAAoC,CAAC;YAEzC,gCAAgC;YAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrD,gBAAgB,GAAG,OAAO,CAAC;YAC7B,CAAC;YAED,wDAAwD;YACxD,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;YAEjD,IAAI,UAAkB,CAAC;YACvB,IAAI,OAAoC,CAAC;YAEzC,IAAI,UAAU,CAAC,qBAAqB,EAAE,CAAC;gBACrC,6DAA6D;gBAC7D,MAAM,aAAa,GAAG,UAAU,CAC9B,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAC3D,CAAC;gBACF,UAAU,GAAG,SAAS,gBAAgB,OAAO,aAAa,aAAa,UAAU,CAAC,iBAAiB,CAAC,6BAA6B,gBAAgB,MAAM,IAAI,cAAc,iBAAiB,GAAG,CAAC;gBAC9L,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;YAC3B,CAAC;iBAAM,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBAChC,gDAAgD;gBAChD,MAAM,cAAc,GAAG,gBAAgB,GAAG,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC;gBACrE,MAAM,UAAU,GAAG,cAAc,GAAG,CAAC,CAAC;gBAEtC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;gBAEhC,IAAI,UAAU,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;oBACvC,UAAU,IAAI,sBAAsB,gBAAgB,IAAI,cAAc,OAAO,cAAc,gBAAgB,UAAU,eAAe,CAAC;gBACvI,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,sBAAsB,gBAAgB,IAAI,cAAc,OAAO,cAAc,KAAK,UAAU,CAAC,iBAAiB,CAAC,uBAAuB,UAAU,eAAe,CAAC;gBAChL,CAAC;gBACD,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;YAC3B,CAAC;iBAAM,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1C,sDAAsD;gBACtD,MAAM,cAAc,GAAG,SAAS,GAAG,CAAC,GAAG,gBAAgB,CAAC;gBACxD,IAAI,cAAc,GAAG,cAAc,EAAE,CAAC;oBACpC,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;oBAClD,MAAM,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAC;oBAEhD,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;oBAChC,UAAU,IAAI,QAAQ,SAAS,mCAAmC,UAAU,eAAe,CAAC;gBAC9F,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;gBAClC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,wCAAwC;gBACxC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;YAClC,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC7C,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport { Type } from \"@sinclair/typebox\";\nimport { extname } from \"path\";\nimport type { Executor } from \"../sandbox/index.js\";\nimport { shellEscape } from \"../sandbox/utils.js\";\nimport {\n  DEFAULT_MAX_BYTES,\n  DEFAULT_MAX_LINES,\n  formatSize,\n  type TruncationResult,\n  truncateHead,\n} from \"./truncate.js\";\n\n/**\n * Map of file extensions to MIME types for common image formats\n */\nconst IMAGE_MIME_TYPES: Record<string, string> = {\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\",\n  \".webp\": \"image/webp\",\n};\n\n/**\n * Check if a file is an image based on its extension\n */\nfunction isImageFile(filePath: string): string | null {\n  const ext = extname(filePath).toLowerCase();\n  return IMAGE_MIME_TYPES[ext] || null;\n}\n\nconst readSchema = Type.Object({\n  label: Type.String({\n    description: \"Brief description of what you're reading and why (shown to user)\",\n  }),\n  path: Type.String({ description: \"Path to the file to read (relative or absolute)\" }),\n  offset: Type.Optional(\n    Type.Number({ description: \"Line number to start reading from (1-indexed)\" }),\n  ),\n  limit: Type.Optional(Type.Number({ description: \"Maximum number of lines to read\" })),\n});\n\ninterface ReadToolDetails {\n  truncation?: TruncationResult;\n}\n\nexport function createReadTool(executor: Executor): AgentTool<typeof readSchema> {\n  return {\n    name: \"read\",\n    label: \"read\",\n    description: `Read the contents of a file. Supports text files and images (jpg, png, gif, webp). Images are sent as attachments. For text files, output is truncated to ${DEFAULT_MAX_LINES} lines or ${DEFAULT_MAX_BYTES / 1024}KB (whichever is hit first). Use offset/limit for large files.`,\n    parameters: readSchema,\n    execute: async (\n      _toolCallId: string,\n      { path, offset, limit }: { label: string; path: string; offset?: number; limit?: number },\n      signal?: AbortSignal,\n    ): Promise<{\n      content: (TextContent | ImageContent)[];\n      details: ReadToolDetails | undefined;\n    }> => {\n      const mimeType = isImageFile(path);\n\n      if (mimeType) {\n        // Read as image (binary) - use base64\n        const result = await executor.exec(`base64 < ${shellEscape(path)}`, { signal });\n        if (result.code !== 0) {\n          throw new Error(result.stderr || `Failed to read file: ${path}`);\n        }\n        const base64 = result.stdout.replace(/\\s/g, \"\"); // Remove whitespace from base64\n\n        return {\n          content: [\n            { type: \"text\", text: `Read image file [${mimeType}]` },\n            { type: \"image\", data: base64, mimeType },\n          ],\n          details: undefined,\n        };\n      }\n\n      // Get total line count first\n      const countResult = await executor.exec(`wc -l < ${shellEscape(path)}`, { signal });\n      if (countResult.code !== 0) {\n        throw new Error(countResult.stderr || `Failed to read file: ${path}`);\n      }\n      const totalFileLines = Number.parseInt(countResult.stdout.trim(), 10) + 1; // wc -l counts newlines, not lines\n\n      // Apply offset if specified (1-indexed)\n      const startLine = offset ? Math.max(1, offset) : 1;\n      const startLineDisplay = startLine;\n\n      // Check if offset is out of bounds\n      if (startLine > totalFileLines) {\n        throw new Error(`Offset ${offset} is beyond end of file (${totalFileLines} lines total)`);\n      }\n\n      // Read content with offset\n      let cmd: string;\n      if (startLine === 1) {\n        cmd = `cat ${shellEscape(path)}`;\n      } else {\n        cmd = `tail -n +${startLine} ${shellEscape(path)}`;\n      }\n\n      const result = await executor.exec(cmd, { signal });\n      if (result.code !== 0) {\n        throw new Error(result.stderr || `Failed to read file: ${path}`);\n      }\n\n      let selectedContent = result.stdout;\n      let userLimitedLines: number | undefined;\n\n      // Apply user limit if specified\n      if (limit !== undefined) {\n        const lines = selectedContent.split(\"\\n\");\n        const endLine = Math.min(limit, lines.length);\n        selectedContent = lines.slice(0, endLine).join(\"\\n\");\n        userLimitedLines = endLine;\n      }\n\n      // Apply truncation (respects both line and byte limits)\n      const truncation = truncateHead(selectedContent);\n\n      let outputText: string;\n      let details: ReadToolDetails | undefined;\n\n      if (truncation.firstLineExceedsLimit) {\n        // First line at offset exceeds 50KB - tell model to use bash\n        const firstLineSize = formatSize(\n          Buffer.byteLength(selectedContent.split(\"\\n\")[0], \"utf-8\"),\n        );\n        outputText = `[Line ${startLineDisplay} is ${firstLineSize}, exceeds ${formatSize(DEFAULT_MAX_BYTES)} limit. Use bash: sed -n '${startLineDisplay}p' ${path} | head -c ${DEFAULT_MAX_BYTES}]`;\n        details = { truncation };\n      } else if (truncation.truncated) {\n        // Truncation occurred - build actionable notice\n        const endLineDisplay = startLineDisplay + truncation.outputLines - 1;\n        const nextOffset = endLineDisplay + 1;\n\n        outputText = truncation.content;\n\n        if (truncation.truncatedBy === \"lines\") {\n          outputText += `\\n\\n[Showing lines ${startLineDisplay}-${endLineDisplay} of ${totalFileLines}. Use offset=${nextOffset} to continue]`;\n        } else {\n          outputText += `\\n\\n[Showing lines ${startLineDisplay}-${endLineDisplay} of ${totalFileLines} (${formatSize(DEFAULT_MAX_BYTES)} limit). Use offset=${nextOffset} to continue]`;\n        }\n        details = { truncation };\n      } else if (userLimitedLines !== undefined) {\n        // User specified limit, check if there's more content\n        const linesFromStart = startLine - 1 + userLimitedLines;\n        if (linesFromStart < totalFileLines) {\n          const remaining = totalFileLines - linesFromStart;\n          const nextOffset = startLine + userLimitedLines;\n\n          outputText = truncation.content;\n          outputText += `\\n\\n[${remaining} more lines in file. Use offset=${nextOffset} to continue]`;\n        } else {\n          outputText = truncation.content;\n        }\n      } else {\n        // No truncation, no user limit exceeded\n        outputText = truncation.content;\n      }\n\n      return {\n        content: [{ type: \"text\", text: outputText }],\n        details,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EAEV,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,kEAAkE;KAChF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IACrF,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC,CAC9E;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC,CAAC;CACtF,CAAC,CAAC;AAMH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,6JAA6J,iBAAiB,aAAa,iBAAiB,GAAG,IAAI,gEAAgE;QAChS,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAoE,EACzF,MAAoB,EAInB,EAAE;YACH,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,uEAAuE;gBACvE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE/D,OAAO;oBACL,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,QAAQ,GAAG,EAAE;wBACvD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;qBAC1C;oBACD,OAAO,EAAE,SAAS;iBACnB,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC;YAExC,wCAAwC;YACxC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,gBAAgB,GAAG,SAAS,CAAC;YAEnC,mCAAmC;YACnC,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,2BAA2B,cAAc,eAAe,CAAC,CAAC;YAC5F,CAAC;YAED,IAAI,eAAe,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7F,IAAI,gBAAoC,CAAC;YAEzC,gCAAgC;YAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrD,gBAAgB,GAAG,OAAO,CAAC;YAC7B,CAAC;YAED,wDAAwD;YACxD,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;YAEjD,IAAI,UAAkB,CAAC;YACvB,IAAI,OAAoC,CAAC;YAEzC,IAAI,UAAU,CAAC,qBAAqB,EAAE,CAAC;gBACrC,6DAA6D;gBAC7D,MAAM,aAAa,GAAG,UAAU,CAC9B,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAC3D,CAAC;gBACF,UAAU,GAAG,SAAS,gBAAgB,OAAO,aAAa,aAAa,UAAU,CAAC,iBAAiB,CAAC,6BAA6B,gBAAgB,MAAM,IAAI,cAAc,iBAAiB,GAAG,CAAC;gBAC9L,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;YAC3B,CAAC;iBAAM,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBAChC,gDAAgD;gBAChD,MAAM,cAAc,GAAG,gBAAgB,GAAG,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC;gBACrE,MAAM,UAAU,GAAG,cAAc,GAAG,CAAC,CAAC;gBAEtC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;gBAEhC,IAAI,UAAU,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;oBACvC,UAAU,IAAI,sBAAsB,gBAAgB,IAAI,cAAc,OAAO,cAAc,gBAAgB,UAAU,eAAe,CAAC;gBACvI,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,sBAAsB,gBAAgB,IAAI,cAAc,OAAO,cAAc,KAAK,UAAU,CAAC,iBAAiB,CAAC,uBAAuB,UAAU,eAAe,CAAC;gBAChL,CAAC;gBACD,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;YAC3B,CAAC;iBAAM,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1C,sDAAsD;gBACtD,MAAM,cAAc,GAAG,SAAS,GAAG,CAAC,GAAG,gBAAgB,CAAC;gBACxD,IAAI,cAAc,GAAG,cAAc,EAAE,CAAC;oBACpC,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;oBAClD,MAAM,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAC;oBAEhD,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;oBAChC,UAAU,IAAI,QAAQ,SAAS,mCAAmC,UAAU,eAAe,CAAC;gBAC9F,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;gBAClC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,wCAAwC;gBACxC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;YAClC,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC7C,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport { Type } from \"@sinclair/typebox\";\nimport { extname } from \"path\";\nimport type { Executor } from \"../sandbox/index.js\";\nimport {\n  DEFAULT_MAX_BYTES,\n  DEFAULT_MAX_LINES,\n  formatSize,\n  type TruncationResult,\n  truncateHead,\n} from \"./truncate.js\";\n\n/**\n * Map of file extensions to MIME types for common image formats\n */\nconst IMAGE_MIME_TYPES: Record<string, string> = {\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\",\n  \".webp\": \"image/webp\",\n};\n\n/**\n * Check if a file is an image based on its extension\n */\nfunction isImageFile(filePath: string): string | null {\n  const ext = extname(filePath).toLowerCase();\n  return IMAGE_MIME_TYPES[ext] || null;\n}\n\nconst readSchema = Type.Object({\n  label: Type.String({\n    description: \"Brief description of what you're reading and why (shown to user)\",\n  }),\n  path: Type.String({ description: \"Path to the file to read (relative or absolute)\" }),\n  offset: Type.Optional(\n    Type.Number({ description: \"Line number to start reading from (1-indexed)\" }),\n  ),\n  limit: Type.Optional(Type.Number({ description: \"Maximum number of lines to read\" })),\n});\n\ninterface ReadToolDetails {\n  truncation?: TruncationResult;\n}\n\nexport function createReadTool(executor: Executor): AgentTool<typeof readSchema> {\n  return {\n    name: \"read\",\n    label: \"read\",\n    description: `Read the contents of a file. Supports text files and images (jpg, png, gif, webp). Images are sent as attachments. For text files, output is truncated to ${DEFAULT_MAX_LINES} lines or ${DEFAULT_MAX_BYTES / 1024}KB (whichever is hit first). Use offset/limit for large files.`,\n    parameters: readSchema,\n    execute: async (\n      _toolCallId: string,\n      { path, offset, limit }: { label: string; path: string; offset?: number; limit?: number },\n      signal?: AbortSignal,\n    ): Promise<{\n      content: (TextContent | ImageContent)[];\n      details: ReadToolDetails | undefined;\n    }> => {\n      const mimeType = isImageFile(path);\n\n      if (mimeType) {\n        // Binary content rides the executor's own transport, never shell argv.\n        const base64 = await executor.readFileBase64(path, { signal });\n\n        return {\n          content: [\n            { type: \"text\", text: `Read image file [${mimeType}]` },\n            { type: \"image\", data: base64, mimeType },\n          ],\n          details: undefined,\n        };\n      }\n\n      // One transport read; line selection is plain code, not shell strings.\n      const fileText = await executor.readFile(path, { signal });\n      const fileLines = fileText.split(\"\\n\");\n      const totalFileLines = fileLines.length;\n\n      // Apply offset if specified (1-indexed)\n      const startLine = offset ? Math.max(1, offset) : 1;\n      const startLineDisplay = startLine;\n\n      // Check if offset is out of bounds\n      if (startLine > totalFileLines) {\n        throw new Error(`Offset ${offset} is beyond end of file (${totalFileLines} lines total)`);\n      }\n\n      let selectedContent = startLine === 1 ? fileText : fileLines.slice(startLine - 1).join(\"\\n\");\n      let userLimitedLines: number | undefined;\n\n      // Apply user limit if specified\n      if (limit !== undefined) {\n        const lines = selectedContent.split(\"\\n\");\n        const endLine = Math.min(limit, lines.length);\n        selectedContent = lines.slice(0, endLine).join(\"\\n\");\n        userLimitedLines = endLine;\n      }\n\n      // Apply truncation (respects both line and byte limits)\n      const truncation = truncateHead(selectedContent);\n\n      let outputText: string;\n      let details: ReadToolDetails | undefined;\n\n      if (truncation.firstLineExceedsLimit) {\n        // First line at offset exceeds 50KB - tell model to use bash\n        const firstLineSize = formatSize(\n          Buffer.byteLength(selectedContent.split(\"\\n\")[0], \"utf-8\"),\n        );\n        outputText = `[Line ${startLineDisplay} is ${firstLineSize}, exceeds ${formatSize(DEFAULT_MAX_BYTES)} limit. Use bash: sed -n '${startLineDisplay}p' ${path} | head -c ${DEFAULT_MAX_BYTES}]`;\n        details = { truncation };\n      } else if (truncation.truncated) {\n        // Truncation occurred - build actionable notice\n        const endLineDisplay = startLineDisplay + truncation.outputLines - 1;\n        const nextOffset = endLineDisplay + 1;\n\n        outputText = truncation.content;\n\n        if (truncation.truncatedBy === \"lines\") {\n          outputText += `\\n\\n[Showing lines ${startLineDisplay}-${endLineDisplay} of ${totalFileLines}. Use offset=${nextOffset} to continue]`;\n        } else {\n          outputText += `\\n\\n[Showing lines ${startLineDisplay}-${endLineDisplay} of ${totalFileLines} (${formatSize(DEFAULT_MAX_BYTES)} limit). Use offset=${nextOffset} to continue]`;\n        }\n        details = { truncation };\n      } else if (userLimitedLines !== undefined) {\n        // User specified limit, check if there's more content\n        const linesFromStart = startLine - 1 + userLimitedLines;\n        if (linesFromStart < totalFileLines) {\n          const remaining = totalFileLines - linesFromStart;\n          const nextOffset = startLine + userLimitedLines;\n\n          outputText = truncation.content;\n          outputText += `\\n\\n[${remaining} more lines in file. Use offset=${nextOffset} to continue]`;\n        } else {\n          outputText = truncation.content;\n        }\n      } else {\n        // No truncation, no user limit exceeded\n        outputText = truncation.content;\n      }\n\n      return {\n        content: [{ type: \"text\", text: outputText }],\n        details,\n      };\n    },\n  };\n}\n"]}

package/dist/tools/sandbox.d.ts

@@ -1,6 +1,6 @@
 import type { AgentTool } from "@earendil-works/pi-agent-core";
-import type { DockerContainerManager } from "../provisioner.js";
 import type { SandboxConfig } from "../sandbox/index.js";
+import type { SandboxResourceController } from "../types.js";
 declare const sandboxSchema: import("@sinclair/typebox").TObject<{
     action: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"status">, import("@sinclair/typebox").TLiteral<"set">]>;
     cpus: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
@@ -12,7 +12,7 @@ interface SandboxToolContext {
 }
 interface SandboxToolController {
     sandbox: SandboxConfig;
-    provisioner?: Pick<DockerContainerManager, "getLimitStatus" | "setLimits">;
+    resourceController?: Pick<SandboxResourceController, "getLimitStatus" | "setLimits">;
 }
 export declare function createSandboxTool(controller: SandboxToolController): {
     tool: AgentTool<typeof sandboxSchema>;

package/dist/tools/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/tools/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,EAAE,sBAAsB,EAAkB,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,QAAA,MAAM,aAAa;;;;EAcjB,CAAC;AAQH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,CAAC,EAAE,IAAI,CAAC,sBAAsB,EAAE,gBAAgB,GAAG,WAAW,CAAC,CAAC;CAC5E;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG;IACpE,IAAI,EAAE,SAAS,CAAC,OAAO,aAAa,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC1D,CA+CA"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/tools/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAkB,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAG7E,QAAA,MAAM,aAAa;;;;EAcjB,CAAC;AAQH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,kBAAkB,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,gBAAgB,GAAG,WAAW,CAAC,CAAC;CACtF;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG;IACpE,IAAI,EAAE,SAAS,CAAC,OAAO,aAAa,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC1D,CAiDA"}

package/dist/tools/sandbox.js

@@ -1,11 +1,11 @@
 import { Type } from "@sinclair/typebox";
-import { resolveActorVaultKey } from "../vault/routing.js";
+import { actorKey } from "../sandbox/identity.js";
 const sandboxSchema = Type.Object({
     action: Type.Union([Type.Literal("status"), Type.Literal("set")], {
         description: "Use status to inspect current limits, or set to apply temporary limits.",
     }),
     cpus: Type.Optional(Type.String({
-        description: "Docker CPU limit for action=set, for example '0.5', '1', or '2'.",
+        description: "CPU limit for action=set, for example '0.5', '1', or '2'.",
     })),
     memory: Type.Optional(Type.String({
         description: "Docker memory limit for action=set, for example '512m', '1g', or '4g'.",
@@ -16,7 +16,7 @@ export function createSandboxTool(controller) {
     const tool = {
         name: "sandbox",
         label: "sandbox",
-        description: "Inspect or temporarily set CPU/memory limits for the current managed image sandbox. Limits apply to this conversation's sandbox container and are cleared when the container stops.",
+        description: "Inspect or temporarily set CPU/memory limits for the current managed sandbox. Limits apply to this conversation's runtime and are cleared when it stops.",
         parameters: sandboxSchema,
         execute: async (_toolCallId, params, signal) => {
             if (signal?.aborted) {
@@ -25,16 +25,20 @@ export function createSandboxTool(controller) {
             if (!sandboxContext) {
                 throw new Error("Sandbox context not configured");
             }
-            if (controller.sandbox.type !== "image" || !controller.provisioner) {
-                throw new Error("The sandbox tool only supports image:* managed sandboxes");
+            if ((controller.sandbox.type !== "image" && controller.sandbox.type !== "gondolin") ||
+                !controller.resourceController) {
+                throw new Error("The sandbox tool only supports image:* and gondolin:* managed sandboxes");
             }
-            const containerKey = resolveActorVaultKey(controller.sandbox, sandboxContext.userId, sandboxContext.conversationId);
+            const containerKey = actorKey(controller.sandbox, {
+                userId: sandboxContext.userId,
+                conversationId: sandboxContext.conversationId,
+            });
             if (params.action === "set") {
                 const limits = normalizeLimits(params);
-                const status = await controller.provisioner.setLimits(containerKey, limits);
-                return textResult(`Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox container stops.`);
+                const status = await controller.resourceController.setLimits(containerKey, limits);
+                return textResult(`Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox runtime stops.`);
             }
-            const status = controller.provisioner.getLimitStatus(containerKey);
+            const status = controller.resourceController.getLimitStatus(containerKey);
             return textResult(`Sandbox limits for ${containerKey}: ${formatLimits(status.limits)}${status.boosted ? " (boosted)" : ""}.`);
         },
     };

package/dist/tools/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/tools/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;QAChE,WAAW,EAAE,yEAAyE;KACvF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,kEAAkE;KAChF,CAAC,CACH;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,wEAAwE;KACtF,CAAC,CACH;CACF,CAAC,CAAC;AAkBH,MAAM,UAAU,iBAAiB,CAAC,UAAiC;IAIjE,IAAI,cAAc,GAA8B,IAAI,CAAC;IAErD,MAAM,IAAI,GAAoC;QAC5C,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,WAAW,EACT,qLAAqL;QACvL,UAAU,EAAE,aAAa;QACzB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAyB,EAAE,MAAoB,EAAE,EAAE;YACtF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,YAAY,GAAG,oBAAoB,CACvC,UAAU,CAAC,OAAO,EAClB,cAAc,CAAC,MAAM,EACrB,cAAc,CAAC,cAAc,CAC9B,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAC5E,OAAO,UAAU,CACf,8BAA8B,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,wEAAwE,CACnJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YACnE,OAAO,UAAU,CACf,sBAAsB,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAC3G,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,iBAAiB,EAAE,CAAC,OAA2B,EAAE,EAAE;YACjD,cAAc,GAAG,OAAO,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAyB;IAClE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sDAAsD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAkC;IACtD,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAI9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACnE,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport type { DockerContainerManager, ResourceLimits } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport { resolveActorVaultKey } from \"../vault/routing.js\";\n\nconst sandboxSchema = Type.Object({\n  action: Type.Union([Type.Literal(\"status\"), Type.Literal(\"set\")], {\n    description: \"Use status to inspect current limits, or set to apply temporary limits.\",\n  }),\n  cpus: Type.Optional(\n    Type.String({\n      description: \"Docker CPU limit for action=set, for example '0.5', '1', or '2'.\",\n    }),\n  ),\n  memory: Type.Optional(\n    Type.String({\n      description: \"Docker memory limit for action=set, for example '512m', '1g', or '4g'.\",\n    }),\n  ),\n});\n\ntype SandboxToolParams = {\n  action: \"status\" | \"set\";\n  cpus?: string;\n  memory?: string;\n};\n\ninterface SandboxToolContext {\n  userId: string;\n  conversationId: string;\n}\n\ninterface SandboxToolController {\n  sandbox: SandboxConfig;\n  provisioner?: Pick<DockerContainerManager, \"getLimitStatus\" | \"setLimits\">;\n}\n\nexport function createSandboxTool(controller: SandboxToolController): {\n  tool: AgentTool<typeof sandboxSchema>;\n  setSandboxContext: (context: SandboxToolContext) => void;\n} {\n  let sandboxContext: SandboxToolContext | null = null;\n\n  const tool: AgentTool<typeof sandboxSchema> = {\n    name: \"sandbox\",\n    label: \"sandbox\",\n    description:\n      \"Inspect or temporarily set CPU/memory limits for the current managed image sandbox. Limits apply to this conversation's sandbox container and are cleared when the container stops.\",\n    parameters: sandboxSchema,\n    execute: async (_toolCallId: string, params: SandboxToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n      if (!sandboxContext) {\n        throw new Error(\"Sandbox context not configured\");\n      }\n      if (controller.sandbox.type !== \"image\" || !controller.provisioner) {\n        throw new Error(\"The sandbox tool only supports image:* managed sandboxes\");\n      }\n\n      const containerKey = resolveActorVaultKey(\n        controller.sandbox,\n        sandboxContext.userId,\n        sandboxContext.conversationId,\n      );\n\n      if (params.action === \"set\") {\n        const limits = normalizeLimits(params);\n        const status = await controller.provisioner.setLimits(containerKey, limits);\n        return textResult(\n          `Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox container stops.`,\n        );\n      }\n\n      const status = controller.provisioner.getLimitStatus(containerKey);\n      return textResult(\n        `Sandbox limits for ${containerKey}: ${formatLimits(status.limits)}${status.boosted ? \" (boosted)\" : \"\"}.`,\n      );\n    },\n  };\n\n  return {\n    tool,\n    setSandboxContext: (context: SandboxToolContext) => {\n      sandboxContext = context;\n    },\n  };\n}\n\nfunction normalizeLimits(params: SandboxToolParams): ResourceLimits {\n  const cpus = normalizeLimitValue(\"cpus\", params.cpus);\n  const memory = normalizeLimitValue(\"memory\", params.memory);\n  if (!cpus && !memory) {\n    throw new Error(\"action=set requires cpus and/or memory\");\n  }\n  return { ...(cpus ? { cpus } : {}), ...(memory ? { memory } : {}) };\n}\n\nfunction normalizeLimitValue(name: string, value: string | undefined): string | undefined {\n  if (value === undefined) return undefined;\n  const trimmed = value.trim();\n  if (!trimmed) return undefined;\n  if (!/^[A-Za-z0-9_.-]+$/.test(trimmed)) {\n    throw new Error(`${name} must not contain whitespace or shell metacharacters`);\n  }\n  return trimmed;\n}\n\nfunction formatLimits(limits: ResourceLimits | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n\nfunction textResult(text: string): {\n  content: Array<{ type: \"text\"; text: string }>;\n  details: undefined;\n} {\n  return { content: [{ type: \"text\", text }], details: undefined };\n}\n"]}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/tools/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;QAChE,WAAW,EAAE,yEAAyE;KACvF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,2DAA2D;KACzE,CAAC,CACH;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,wEAAwE;KACtF,CAAC,CACH;CACF,CAAC,CAAC;AAkBH,MAAM,UAAU,iBAAiB,CAAC,UAAiC;IAIjE,IAAI,cAAc,GAA8B,IAAI,CAAC;IAErD,MAAM,IAAI,GAAoC;QAC5C,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,WAAW,EACT,0JAA0J;QAC5J,UAAU,EAAE,aAAa;QACzB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAyB,EAAE,MAAoB,EAAE,EAAE;YACtF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IACE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;gBAC/E,CAAC,UAAU,CAAC,kBAAkB,EAC9B,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE;gBAChD,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,cAAc,EAAE,cAAc,CAAC,cAAc;aAC9C,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBACnF,OAAO,UAAU,CACf,8BAA8B,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,sEAAsE,CACjJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YAC1E,OAAO,UAAU,CACf,sBAAsB,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAC3G,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,iBAAiB,EAAE,CAAC,OAA2B,EAAE,EAAE;YACjD,cAAc,GAAG,OAAO,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAyB;IAClE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sDAAsD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAkC;IACtD,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAI9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACnE,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { ResourceLimits, SandboxResourceController } from \"../types.js\";\nimport { actorKey } from \"../sandbox/identity.js\";\n\nconst sandboxSchema = Type.Object({\n  action: Type.Union([Type.Literal(\"status\"), Type.Literal(\"set\")], {\n    description: \"Use status to inspect current limits, or set to apply temporary limits.\",\n  }),\n  cpus: Type.Optional(\n    Type.String({\n      description: \"CPU limit for action=set, for example '0.5', '1', or '2'.\",\n    }),\n  ),\n  memory: Type.Optional(\n    Type.String({\n      description: \"Docker memory limit for action=set, for example '512m', '1g', or '4g'.\",\n    }),\n  ),\n});\n\ntype SandboxToolParams = {\n  action: \"status\" | \"set\";\n  cpus?: string;\n  memory?: string;\n};\n\ninterface SandboxToolContext {\n  userId: string;\n  conversationId: string;\n}\n\ninterface SandboxToolController {\n  sandbox: SandboxConfig;\n  resourceController?: Pick<SandboxResourceController, \"getLimitStatus\" | \"setLimits\">;\n}\n\nexport function createSandboxTool(controller: SandboxToolController): {\n  tool: AgentTool<typeof sandboxSchema>;\n  setSandboxContext: (context: SandboxToolContext) => void;\n} {\n  let sandboxContext: SandboxToolContext | null = null;\n\n  const tool: AgentTool<typeof sandboxSchema> = {\n    name: \"sandbox\",\n    label: \"sandbox\",\n    description:\n      \"Inspect or temporarily set CPU/memory limits for the current managed sandbox. Limits apply to this conversation's runtime and are cleared when it stops.\",\n    parameters: sandboxSchema,\n    execute: async (_toolCallId: string, params: SandboxToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n      if (!sandboxContext) {\n        throw new Error(\"Sandbox context not configured\");\n      }\n      if (\n        (controller.sandbox.type !== \"image\" && controller.sandbox.type !== \"gondolin\") ||\n        !controller.resourceController\n      ) {\n        throw new Error(\"The sandbox tool only supports image:* and gondolin:* managed sandboxes\");\n      }\n\n      const containerKey = actorKey(controller.sandbox, {\n        userId: sandboxContext.userId,\n        conversationId: sandboxContext.conversationId,\n      });\n\n      if (params.action === \"set\") {\n        const limits = normalizeLimits(params);\n        const status = await controller.resourceController.setLimits(containerKey, limits);\n        return textResult(\n          `Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox runtime stops.`,\n        );\n      }\n\n      const status = controller.resourceController.getLimitStatus(containerKey);\n      return textResult(\n        `Sandbox limits for ${containerKey}: ${formatLimits(status.limits)}${status.boosted ? \" (boosted)\" : \"\"}.`,\n      );\n    },\n  };\n\n  return {\n    tool,\n    setSandboxContext: (context: SandboxToolContext) => {\n      sandboxContext = context;\n    },\n  };\n}\n\nfunction normalizeLimits(params: SandboxToolParams): ResourceLimits {\n  const cpus = normalizeLimitValue(\"cpus\", params.cpus);\n  const memory = normalizeLimitValue(\"memory\", params.memory);\n  if (!cpus && !memory) {\n    throw new Error(\"action=set requires cpus and/or memory\");\n  }\n  return { ...(cpus ? { cpus } : {}), ...(memory ? { memory } : {}) };\n}\n\nfunction normalizeLimitValue(name: string, value: string | undefined): string | undefined {\n  if (value === undefined) return undefined;\n  const trimmed = value.trim();\n  if (!trimmed) return undefined;\n  if (!/^[A-Za-z0-9_.-]+$/.test(trimmed)) {\n    throw new Error(`${name} must not contain whitespace or shell metacharacters`);\n  }\n  return trimmed;\n}\n\nfunction formatLimits(limits: ResourceLimits | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n\nfunction textResult(text: string): {\n  content: Array<{ type: \"text\"; text: string }>;\n  details: undefined;\n} {\n  return { content: [{ type: \"text\", text }], details: undefined };\n}\n"]}

package/dist/tools/subagent-slots.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Process-wide subagent fan-out account. The per-conversation queues
+ * serialize agent runs, and each run's subagent tool bounds its own fan-out
+ * — but without a shared ceiling, N busy conversations hold N × per-run-cap
+ * live subagent sessions. Every subagent launch draws a slot from one shared
+ * pool; the per-run cap and this global ceiling are the two bounds, both
+ * enforced at the same seam (the tool's slot acquisition).
+ */
+/** Default process-wide ceiling on concurrently live subagent sessions. */
+export declare const DEFAULT_GLOBAL_SUBAGENT_SLOTS = 8;
+/** Async slot pool: at most `capacity` concurrent holders, FIFO waiters. */
+export declare class SubagentSlotPool {
+    readonly capacity: number;
+    private held;
+    private waiters;
+    constructor(capacity: number);
+    /** Currently held slots (for tests and capacity reporting). */
+    get inFlight(): number;
+    /**
+     * Resolve with a release function once a slot frees up. Call the release
+     * exactly once; releasing hands the slot to the oldest waiter.
+     */
+    acquire(): Promise<() => void>;
+    private releaser;
+}
+/** A pool that never blocks — the default when no shared ceiling is wired. */
+export declare function unboundedSlotPool(): SubagentSlotPool;
+//# sourceMappingURL=subagent-slots.d.ts.map

package/dist/tools/subagent-slots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-slots.d.ts","sourceRoot":"","sources":["../../src/tools/subagent-slots.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,4EAA4E;AAC5E,qBAAa,gBAAgB;IAIf,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAHrC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,OAAO,CAAyB;IAExC,YAAqB,QAAQ,EAAE,MAAM,EAIpC;IAED,+DAA+D;IAC/D,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAUnC;IAED,OAAO,CAAC,QAAQ;CAUjB;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,IAAI,gBAAgB,CAEpD"}

package/dist/tools/subagent-slots.js

@@ -0,0 +1,57 @@
+/**
+ * Process-wide subagent fan-out account. The per-conversation queues
+ * serialize agent runs, and each run's subagent tool bounds its own fan-out
+ * — but without a shared ceiling, N busy conversations hold N × per-run-cap
+ * live subagent sessions. Every subagent launch draws a slot from one shared
+ * pool; the per-run cap and this global ceiling are the two bounds, both
+ * enforced at the same seam (the tool's slot acquisition).
+ */
+/** Default process-wide ceiling on concurrently live subagent sessions. */
+export const DEFAULT_GLOBAL_SUBAGENT_SLOTS = 8;
+/** Async slot pool: at most `capacity` concurrent holders, FIFO waiters. */
+export class SubagentSlotPool {
+    constructor(capacity) {
+        this.capacity = capacity;
+        this.held = 0;
+        this.waiters = [];
+        if (!(capacity >= 1)) {
+            throw new Error(`SubagentSlotPool capacity must be >= 1, got ${capacity}`);
+        }
+    }
+    /** Currently held slots (for tests and capacity reporting). */
+    get inFlight() {
+        return this.held;
+    }
+    /**
+     * Resolve with a release function once a slot frees up. Call the release
+     * exactly once; releasing hands the slot to the oldest waiter.
+     */
+    async acquire() {
+        if (this.held < this.capacity) {
+            this.held += 1;
+            return this.releaser();
+        }
+        await new Promise((resolve) => {
+            this.waiters.push(resolve);
+        });
+        this.held += 1;
+        return this.releaser();
+    }
+    releaser() {
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            this.held -= 1;
+            const next = this.waiters.shift();
+            if (next)
+                next();
+        };
+    }
+}
+/** A pool that never blocks — the default when no shared ceiling is wired. */
+export function unboundedSlotPool() {
+    return new SubagentSlotPool(Number.MAX_SAFE_INTEGER);
+}
+//# sourceMappingURL=subagent-slots.js.map

package/dist/tools/subagent-slots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-slots.js","sourceRoot":"","sources":["../../src/tools/subagent-slots.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,OAAO,gBAAgB;IAI3B,YAAqB,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAH7B,SAAI,GAAG,CAAC,CAAC;QACT,YAAO,GAAsB,EAAE,CAAC;QAGtC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACf,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEO,QAAQ;QACd,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI;gBAAE,IAAI,EAAE,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACvD,CAAC","sourcesContent":["/**\n * Process-wide subagent fan-out account. The per-conversation queues\n * serialize agent runs, and each run's subagent tool bounds its own fan-out\n * — but without a shared ceiling, N busy conversations hold N × per-run-cap\n * live subagent sessions. Every subagent launch draws a slot from one shared\n * pool; the per-run cap and this global ceiling are the two bounds, both\n * enforced at the same seam (the tool's slot acquisition).\n */\n\n/** Default process-wide ceiling on concurrently live subagent sessions. */\nexport const DEFAULT_GLOBAL_SUBAGENT_SLOTS = 8;\n\n/** Async slot pool: at most `capacity` concurrent holders, FIFO waiters. */\nexport class SubagentSlotPool {\n  private held = 0;\n  private waiters: Array<() => void> = [];\n\n  constructor(readonly capacity: number) {\n    if (!(capacity >= 1)) {\n      throw new Error(`SubagentSlotPool capacity must be >= 1, got ${capacity}`);\n    }\n  }\n\n  /** Currently held slots (for tests and capacity reporting). */\n  get inFlight(): number {\n    return this.held;\n  }\n\n  /**\n   * Resolve with a release function once a slot frees up. Call the release\n   * exactly once; releasing hands the slot to the oldest waiter.\n   */\n  async acquire(): Promise<() => void> {\n    if (this.held < this.capacity) {\n      this.held += 1;\n      return this.releaser();\n    }\n    await new Promise<void>((resolve) => {\n      this.waiters.push(resolve);\n    });\n    this.held += 1;\n    return this.releaser();\n  }\n\n  private releaser(): () => void {\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      this.held -= 1;\n      const next = this.waiters.shift();\n      if (next) next();\n    };\n  }\n}\n\n/** A pool that never blocks — the default when no shared ceiling is wired. */\nexport function unboundedSlotPool(): SubagentSlotPool {\n  return new SubagentSlotPool(Number.MAX_SAFE_INTEGER);\n}\n"]}

package/dist/tools/subagent.d.ts

@@ -0,0 +1,74 @@
+import type { AgentTool } from "@earendil-works/pi-agent-core";
+import { type TSchema } from "@sinclair/typebox";
+import type { SubagentRunOutput, SubagentRunRequest, SubagentRunResult } from "../harness/types.js";
+import { type SubagentSlotPool } from "./subagent-slots.js";
+declare const subagentSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+    task: import("@sinclair/typebox").TString;
+    label: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    systemPrompt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    input: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;
+    model: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        provider: import("@sinclair/typebox").TString;
+        id: import("@sinclair/typebox").TString;
+    }>>;
+    tools: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    outputSchema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    budget: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        maxTurns: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        maxTokens: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        maxCostUsd: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        maxDurationMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>>;
+}>, import("@sinclair/typebox").TObject<{
+    model: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        provider: import("@sinclair/typebox").TString;
+        id: import("@sinclair/typebox").TString;
+    }>>;
+    tools: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    outputSchema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    budget: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        maxTurns: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        maxTokens: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        maxCostUsd: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        maxDurationMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>>;
+    tasks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        task: import("@sinclair/typebox").TString;
+        label: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        systemPrompt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        input: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;
+    }>>;
+}>, import("@sinclair/typebox").TObject<{
+    model: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        provider: import("@sinclair/typebox").TString;
+        id: import("@sinclair/typebox").TString;
+    }>>;
+    tools: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    outputSchema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    budget: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        maxTurns: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        maxTokens: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        maxCostUsd: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        maxDurationMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>>;
+    dag: import("@sinclair/typebox").TObject<{
+        nodes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            task: import("@sinclair/typebox").TString;
+            label: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            systemPrompt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            input: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;
+            id: import("@sinclair/typebox").TString;
+            dependsOn: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        }>>;
+        maxConcurrency: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>;
+}>]>;
+type RunSubagent = <TOutputSchema extends TSchema | undefined = undefined>(request: SubagentRunRequest<TOutputSchema>) => Promise<SubagentRunResult<SubagentRunOutput<TOutputSchema>>>;
+/**
+ * Create the normal agent's bounded subagent delegation and DAG tool.
+ * `globalSlots` is the process-wide fan-out account shared across every
+ * conversation's tool instance; omitted, fan-out is bounded per run only.
+ */
+export declare function createSubagentTool(runSubagent: RunSubagent, globalSlots?: SubagentSlotPool): AgentTool<typeof subagentSchema>;
+export {};
+//# sourceMappingURL=subagent.d.ts.map

package/dist/tools/subagent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent.d.ts","sourceRoot":"","sources":["../../src/tools/subagent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAA2B,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAqB,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAqD/E,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwBlB,CAAC;AAMH,KAAK,WAAW,GAAG,CAAC,aAAa,SAAS,OAAO,GAAG,SAAS,GAAG,SAAS,EACvE,OAAO,EAAE,kBAAkB,CAAC,aAAa,CAAC,KACvC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AA8RlE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,WAAW,EACxB,WAAW,GAAE,gBAAsC,GAClD,SAAS,CAAC,OAAO,cAAc,CAAC,CAgElC"}