@namzu/sdk 46.0.0 → 48.1.0

package/dist/directory/derive-supervisor.js

@@ -1,17 +1,16 @@
 import { DEFAULT_TIMEOUT_MS, DEFAULT_TOKEN_BUDGET } from '../agents/runAgent.js';
-import { ToolRegistry } from '../registry/tool/execute.js';
+import { toolset } from '../toolsets/toolset.js';
 function toolsOf(manifest) {
-    const tools = new ToolRegistry();
-    for (const entry of manifest.tools)
-        tools.register(entry.definition);
-    return tools;
+    return [
+        toolset('directory', manifest.tools.map((entry) => entry.definition)),
+    ];
 }
 function delegatePlan(entry, fallbackModel) {
     return {
         id: entry.id,
         manifest: entry.manifest,
         systemPrompt: entry.manifest.instructions,
-        tools: toolsOf(entry.manifest),
+        toolsets: toolsOf(entry.manifest),
         // A delegate may name its own model — a cheap one for a narrow job is
         // the common case — and inherits the supervisor's only when it does
         // not. Inheriting unconditionally would silently bill every specialist
@@ -53,7 +52,7 @@ export function deriveSupervisorOptions(manifest, input) {
         agentManager: input.agentManager,
         agentIds: delegates.map((d) => d.id),
         systemPrompt: manifest.instructions,
-        tools: toolsOf(manifest),
+        toolsets: toolsOf(manifest),
         // Skills were loaded and then dropped. The manifest reads a whole
         // `skills/` directory and `SupervisorAgentConfig` takes them, and the
         // cast that used to close this object meant nobody was told the field

package/dist/directory/derive-supervisor.js.map

@@ -1 +1 @@
-{"version":3,"file":"derive-supervisor.js","sourceRoot":"","sources":["../../src/directory/derive-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAEhF,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAgD1D,SAAS,OAAO,CAAC,QAA2B;IAC3C,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK;QAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACpE,OAAO,KAAK,CAAA;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB,EAAE,aAAqB;IAChE,OAAO;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC9B,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,6BAA6B;QAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;KACnD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACtC,QAA2B,EAC3B,KAA4B;IAE5B,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACd,yKAAyK,CACzK,CAAA;IACF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,qEAAqE;QACrE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,MAAM,IAAI,KAAK,CACd,GAAG,QAAQ,CAAC,IAAI,yJAAyJ,CACzK,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,IAAI,yEAAyE,CAClH,CAAA;IACF,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAE5E,MAAM,MAAM,GAAG;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC;QACxB,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,2BAA2B;QAC3B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,gEAAgE;QAChE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,6BAA6B;QAC7B,EAAE;QACF,uEAAuE;QACvE,8CAA8C;QAC9C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB;QAChE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB;QAC1D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;KACM,CAAA;IAEjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC"}
+{"version":3,"file":"derive-supervisor.js","sourceRoot":"","sources":["../../src/directory/derive-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAEhF,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAiDhD,SAAS,OAAO,CAAC,QAA2B;IAC3C,OAAO;QACN,OAAO,CACN,WAAW,EACX,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAC/C;KACD,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB,EAAE,aAAqB;IAChE,OAAO;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QACjC,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,6BAA6B;QAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;KACnD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACtC,QAA2B,EAC3B,KAA4B;IAE5B,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACd,yKAAyK,CACzK,CAAA;IACF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,qEAAqE;QACrE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,MAAM,IAAI,KAAK,CACd,GAAG,QAAQ,CAAC,IAAI,yJAAyJ,CACzK,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,IAAI,yEAAyE,CAClH,CAAA;IACF,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAE5E,MAAM,MAAM,GAAG;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC3B,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,2BAA2B;QAC3B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,gEAAgE;QAChE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,6BAA6B;QAC7B,EAAE;QACF,uEAAuE;QACvE,8CAA8C;QAC9C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB;QAChE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB;QAC1D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;KACM,CAAA;IAEjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC"}

package/dist/directory/derive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../src/directory/derive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAG5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE3E;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,sBAAsB,GAC3B,eAAe,CAkEjB"}
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../src/directory/derive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE3E;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,sBAAsB,GAC3B,eAAe,CAsEjB"}

package/dist/directory/derive.js

@@ -1,4 +1,4 @@
-import { ToolRegistry } from '../registry/tool/execute.js';
+import { toolset } from '../toolsets/toolset.js';
 /**
  * Turn a loaded project into the options `runAgent` takes.
  *
@@ -19,14 +19,14 @@ export function deriveTurnOptions(manifest, input) {
     if (!model) {
         throw new Error(`No model. Declare one in ${manifest.root}/agent.ts as \`export default { model: "…" }\`, or pass \`model\` here.`);
     }
-    const tools = new ToolRegistry();
-    for (const entry of manifest.tools)
-        tools.register(entry.definition);
+    const toolsets = [
+        toolset('directory', manifest.tools.map((entry) => entry.definition)),
+    ];
     return {
         provider: input.provider,
         prompt: input.prompt,
         model,
-        tools,
+        toolsets,
         // The one value the project knows and `runAgent` cannot infer. Left
         // unset it would default to the host's own cwd, pointing the file
         // tools' containment at the host's source tree rather than at the

package/dist/directory/derive.js.map

@@ -1 +1 @@
-{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../src/directory/derive.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAI1D;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAChC,QAA2B,EAC3B,KAA6B;IAE7B,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACjC,iEAAiE;QACjE,uEAAuE;QACvE,oEAAoE;QACpE,sCAAsC;QACtC,MAAM,IAAI,KAAK,CACd,oKAAoK,CACpK,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,IAAI,yEAAyE,CAClH,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK;QAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAEpE,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,KAAK;QACL,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,qEAAqE;QACrE,oEAAoE;QACpE,uBAAuB;QACvB,gBAAgB,EAAE,QAAQ,CAAC,IAAI;QAC/B,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;KAC1B,CAAA;AACF,CAAC"}
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../src/directory/derive.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAGhD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAChC,QAA2B,EAC3B,KAA6B;IAE7B,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACjC,iEAAiE;QACjE,uEAAuE;QACvE,oEAAoE;QACpE,sCAAsC;QACtC,MAAM,IAAI,KAAK,CACd,oKAAoK,CACpK,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,IAAI,yEAAyE,CAClH,CAAA;IACF,CAAC;IAED,MAAM,QAAQ,GAAG;QAChB,OAAO,CACN,WAAW,EACX,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAC/C;KACD,CAAA;IAED,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,QAAQ;QACR,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,qEAAqE;QACrE,oEAAoE;QACpE,uBAAuB;QACvB,gBAAgB,EAAE,QAAQ,CAAC,IAAI;QAC/B,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACA,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B;aACtE;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;KAC1B,CAAA;AACF,CAAC"}

package/dist/execution/code-runtime/types.d.ts

@@ -18,7 +18,7 @@
  *    backend that cannot withhold those is not a backend for this.
  *  - **Everything it can do, it does by asking.** The only channel out is a
  *    call back into the host, which is what makes NZ-EXEC-06's dispatch
- *    through the turn's own `ToolRegistry` possible — the program cannot
+ *    through the turn's own `ToolManager` possible — the program cannot
  *    reach a tool the turn did not grant, because it cannot reach anything.
  *  - **Bounded.** Wall clock and output, both enforced by the backend
  *    rather than requested of the program.
@@ -53,7 +53,7 @@ export interface HostCallContext {
  * What the host will answer.
  *
  * A function rather than a table, so the host decides per call. NZ-EXEC-06
- * makes this the turn's `ToolRegistry` and its permission gate, which is
+ * makes this the turn's `ToolManager` and its permission gate, which is
  * exactly the point: the program's reach is the turn's reach, resolved at
  * the moment of the call rather than frozen when the program started.
  */

package/dist/execution/code-runtime/types.js

@@ -18,7 +18,7 @@
  *    backend that cannot withhold those is not a backend for this.
  *  - **Everything it can do, it does by asking.** The only channel out is a
  *    call back into the host, which is what makes NZ-EXEC-06's dispatch
- *    through the turn's own `ToolRegistry` possible — the program cannot
+ *    through the turn's own `ToolManager` possible — the program cannot
  *    reach a tool the turn did not grant, because it cannot reach anything.
  *  - **Bounded.** Wall clock and output, both enforced by the backend
  *    rather than requested of the program.

package/dist/invariants/index.d.ts

@@ -1,3 +1,4 @@
+import { RegistryCollisionError } from '../registry/collision.js';
 /**
  * What a module's check said about its own claim, the moment it was asked.
  *
@@ -39,7 +40,7 @@ export type InvariantCheck<TContext = unknown> = (ctx: TContext) => InvariantOut
  * every reference to the other's `id` kept resolving as if it still existed.
  * Mirrors `ProbeNameCollisionError`.
  */
-export declare class InvariantNameCollisionError extends Error {
+export declare class InvariantNameCollisionError extends RegistryCollisionError {
     readonly moduleName: string;
     readonly invariantName: string;
     constructor(moduleName: string, invariantName: string);

package/dist/invariants/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/invariants/index.ts"],"names":[],"mappings":"AAYA;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GACzB;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,CAAC,QAAQ,GAAG,OAAO,IAAI,CAChD,GAAG,EAAE,QAAQ,KACT,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBAElB,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;CAQrD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOrE;AAwBD;;;;;;;;;;;;;GAaG;AACH,qBAAa,iBAAiB;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsC;;IAQlE;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI;IAc3F,kDAAkD;IAClD,OAAO,IAAI,MAAM,EAAE;IAInB;;;;;OAKG;IACG,QAAQ,CAAC,QAAQ,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOtF;;;;OAIG;IACG,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE,oEAAoE;IACpE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;CAGlC;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,iBAA2C,CAAA;AAEpE,kEAAkE;AAClE,wBAAgB,uBAAuB,IAAI,iBAAiB,CAE3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/invariants/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AAEjE;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GACzB;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,CAAC,QAAQ,GAAG,OAAO,IAAI,CAChD,GAAG,EAAE,QAAQ,KACT,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA4B,SAAQ,sBAAsB;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBAElB,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;CAUrD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOrE;AAwBD;;;;;;;;;;;;;GAaG;AACH,qBAAa,iBAAiB;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsC;;IAQlE;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI;IAc3F,kDAAkD;IAClD,OAAO,IAAI,MAAM,EAAE;IAInB;;;;;OAKG;IACG,QAAQ,CAAC,QAAQ,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOtF;;;;OAIG;IACG,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE,oEAAoE;IACpE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;CAGlC;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,iBAA2C,CAAA;AAEpE,kEAAkE;AAClE,wBAAgB,uBAAuB,IAAI,iBAAiB,CAE3D"}

package/dist/invariants/index.js

@@ -8,6 +8,7 @@
 // module named for deciding whether a tool call is permitted, which is a
 // worse home than the one it started in.
 import { ManagedRegistry } from '../registry/ManagedRegistry.js';
+import { RegistryCollisionError } from '../registry/collision.js';
 /**
  * Thrown by {@link InvariantRegistry.register} when `<moduleName>:<name>` is
  * already taken.
@@ -21,11 +22,11 @@ import { ManagedRegistry } from '../registry/ManagedRegistry.js';
  * every reference to the other's `id` kept resolving as if it still existed.
  * Mirrors `ProbeNameCollisionError`.
  */
-export class InvariantNameCollisionError extends Error {
+export class InvariantNameCollisionError extends RegistryCollisionError {
     moduleName;
     invariantName;
     constructor(moduleName, invariantName) {
-        super(`Invariant "${moduleName}:${invariantName}" is already registered. Two modules picked the same name, or this module registered itself twice — pick a different name, or find the second registration.`);
+        super('InvariantRegistry', `${moduleName}:${invariantName}`, `Invariant "${moduleName}:${invariantName}" is already registered. Two modules picked the same name, or this module registered itself twice — pick a different name, or find the second registration.`);
         this.name = 'InvariantNameCollisionError';
         this.moduleName = moduleName;
         this.invariantName = invariantName;

package/dist/invariants/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/invariants/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,yCAAyC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AA6BhE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC5C,UAAU,CAAQ;IAClB,aAAa,CAAQ;IAE9B,YAAY,UAAkB,EAAE,aAAqB;QACpD,KAAK,CACJ,cAAc,UAAU,IAAI,aAAa,6JAA6J,CACtM,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;QACzC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACnC,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,UAAU,CAAQ;IAClB,aAAa,CAAQ;IACrB,MAAM,CAAQ;IAEvB,YAAY,UAAkB,EAAE,aAAqB,EAAE,MAAc;QACpE,KAAK,CAAC,GAAG,UAAU,gBAAgB,aAAa,gBAAgB,MAAM,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACrB,CAAC;CACD;AAwBD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,iBAAiB;IACZ,WAAW,CAAsC;IAElE;QACC,IAAI,CAAC,WAAW,GAAG,IAAI,eAAe,CAAsB;YAC3D,aAAa,EAAE,mBAAmB;SAClC,CAAC,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAW,UAAkB,EAAE,IAAY,EAAE,KAA+B;QACnF,MAAM,EAAE,GAAG,GAAG,UAAU,IAAI,IAAI,EAAE,CAAA;QAClC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC7B,EAAE;YACF,UAAU;YACV,IAAI;YACJ,KAAK,EAAE,KAA8B;YACrC,UAAU,EAAE,CAAC;SACb,CAAC,CAAA;IACH,CAAC;IAED,kDAAkD;IAClD,OAAO;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAA;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAmB,EAAU,EAAE,GAAa;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAY,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;YAAE,UAAU,CAAC,UAAU,IAAI,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAmB,EAAU,EAAE,GAAa;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,oBAAoB,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;IAED,oEAAoE;IACpE,cAAc,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAA;IAClD,CAAC;CACD;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAsB,IAAI,iBAAiB,EAAE,CAAA;AAEpE,kEAAkE;AAClE,MAAM,UAAU,uBAAuB;IACtC,OAAO,IAAI,iBAAiB,EAAE,CAAA;AAC/B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/invariants/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,yCAAyC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AA6BjE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,2BAA4B,SAAQ,sBAAsB;IAC7D,UAAU,CAAQ;IAClB,aAAa,CAAQ;IAE9B,YAAY,UAAkB,EAAE,aAAqB;QACpD,KAAK,CACJ,mBAAmB,EACnB,GAAG,UAAU,IAAI,aAAa,EAAE,EAChC,cAAc,UAAU,IAAI,aAAa,6JAA6J,CACtM,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;QACzC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACnC,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,UAAU,CAAQ;IAClB,aAAa,CAAQ;IACrB,MAAM,CAAQ;IAEvB,YAAY,UAAkB,EAAE,aAAqB,EAAE,MAAc;QACpE,KAAK,CAAC,GAAG,UAAU,gBAAgB,aAAa,gBAAgB,MAAM,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACrB,CAAC;CACD;AAwBD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,iBAAiB;IACZ,WAAW,CAAsC;IAElE;QACC,IAAI,CAAC,WAAW,GAAG,IAAI,eAAe,CAAsB;YAC3D,aAAa,EAAE,mBAAmB;SAClC,CAAC,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAW,UAAkB,EAAE,IAAY,EAAE,KAA+B;QACnF,MAAM,EAAE,GAAG,GAAG,UAAU,IAAI,IAAI,EAAE,CAAA;QAClC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC7B,EAAE;YACF,UAAU;YACV,IAAI;YACJ,KAAK,EAAE,KAA8B;YACrC,UAAU,EAAE,CAAC;SACb,CAAC,CAAA;IACH,CAAC;IAED,kDAAkD;IAClD,OAAO;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAA;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAmB,EAAU,EAAE,GAAa;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAY,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;YAAE,UAAU,CAAC,UAAU,IAAI,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAmB,EAAU,EAAE,GAAa;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,oBAAoB,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;IAED,oEAAoE;IACpE,cAAc,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAA;IAClD,CAAC;CACD;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAsB,IAAI,iBAAiB,EAAE,CAAA;AAEpE,kEAAkE;AAClE,MAAM,UAAU,uBAAuB;IACtC,OAAO,IAAI,iBAAiB,EAAE,CAAA;AAC/B,CAAC"}

package/dist/manager/agent/lifecycle.d.ts

@@ -97,6 +97,7 @@ interface ChildSpawnRecord {
     /** Removes the child's log from the process-local lookup. */
     releaseLog?: () => void;
     workspaceRef?: WorkspaceRef;
+    workspaceRetention?: 'retain';
     /**
      * What this child was actually granted, after the ancestor union.
      *

package/dist/manager/agent/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/manager/agent/lifecycle.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AACxE,OAAO,EACN,KAAK,iBAAiB,EACtB,0BAA0B,EAC1B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAA;AACtF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAOnF,OAAO,KAAK,EAEX,sBAAsB,EACtB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,KAAK,EACX,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,MAAM,2BAA2B,CAAA;AAGlC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAa,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAC9F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAE3D,OAAO,EAAE,KAAK,WAAW,EAAiB,MAAM,qCAAqC,CAAA;AACrF,OAAO,KAAK,EAAgB,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAG9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAMhE,OAAO,EAAE,KAAK,MAAM,EAAiB,MAAM,uBAAuB,CAAA;AAElE,OAAO,EAAE,KAAK,sBAAsB,EAAuB,MAAM,wBAAwB,CAAA;AAIzF;;;;;;;;;;;;;;;;;;GAkBG;AACH,UAAU,oBAAoB;IAC7B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;IACpD,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAA;IACxD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IAEpC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CAAA;AAc5E,UAAU,gBAAgB;IACzB,YAAY,EAAE,YAAY,CAAA;IAC1B,cAAc,EAAE,SAAS,CAAA;IACzB,QAAQ,EAAE,QAAQ,CAAA;IAClB,eAAe,EAAE,SAAS,CAAA;IAC1B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,SAAS,CAAA;IACxB,wGAAwG;IACxG,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE;QACX,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACtC;AAyCD,qBAAa,YAAY;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,YAAY,CAA2C;IAC/D,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,cAAc,CAAwD;IAC9E,0EAA0E;IAC1E,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;IACrE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,cAAc,CAA2C;IACjE,OAAO,CAAC,QAAQ,CAAQ;gBAGvB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,EAC/C,IAAI,EAAE,gBAAgB;IAcjB,WAAW,CAChB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,SAAS,CAAC;YAOP,cAAc;IA4E5B,OAAO,CAAC,cAAc;YAwBR,eAAe;IAqC7B,OAAO,CAAC,aAAa;YAiCP,YAAY;YAwhBZ,sBAAsB;YAiDtB,sBAAsB;IA0BpC,uFAAuF;IACvF,OAAO,CAAC,eAAe;IAKvB,yEAAyE;IACzE,OAAO,CAAC,aAAa;IAOrB,mEAAmE;IACnE,OAAO,CAAC,SAAS;IAmBjB;;;;;;;;;;;;;;OAcG;YACW,iBAAiB;IAuC/B;;;;;;;;;OASG;YACW,oBAAoB;IAmClC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI;IAmBjD,SAAS,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,GAAE,WAAsB,GAAG,IAAI;IASpE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAclE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAapD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE;IAOxC,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAehD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIlD,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI5D,YAAY,CAAC,eAAe,EAAE,SAAS,GAAG,SAAS,EAAE;IAMrD,UAAU,IAAI,SAAS,EAAE;IAIzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIpD,WAAW,IAAI,aAAa;IAI5B,EAAE,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAI1C,GAAG,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAK3C,OAAO,IAAI,IAAI;IAUf,OAAO,IAAI,IAAI;IAwBf;;;;;;;;;;;;;OAaG;YACW,cAAc;YA0Bd,aAAa;YAoEb,sBAAsB;YA+HtB,QAAQ;IAwBtB;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;YAmBX,aAAa;IA2E3B;;;;;;;;;;OAUG;YACW,kBAAkB;IA+ChC,OAAO,CAAC,aAAa;IAoBrB,OAAO,CAAC,UAAU;YAkDJ,cAAc;IAc5B;;;;;;;;;;;;;OAaG;YACW,qBAAqB;IAmBnC,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,gBAAgB;CAiBxB;AA6GD,OAAO,EAAE,0BAA0B,EAAE,CAAA"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/manager/agent/lifecycle.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AACxE,OAAO,EACN,KAAK,iBAAiB,EACtB,0BAA0B,EAC1B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAA;AAEtF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAOnF,OAAO,KAAK,EAEX,sBAAsB,EACtB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,KAAK,EACX,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,MAAM,2BAA2B,CAAA;AAGlC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAa,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAC9F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAE3D,OAAO,EAAE,KAAK,WAAW,EAAiB,MAAM,qCAAqC,CAAA;AACrF,OAAO,KAAK,EAAgB,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAG9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAMhE,OAAO,EAAE,KAAK,MAAM,EAAiB,MAAM,uBAAuB,CAAA;AAElE,OAAO,EAAE,KAAK,sBAAsB,EAAuB,MAAM,wBAAwB,CAAA;AAIzF;;;;;;;;;;;;;;;;;;GAkBG;AACH,UAAU,oBAAoB;IAC7B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;IACpD,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAA;IACxD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IAEpC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CAAA;AAc5E,UAAU,gBAAgB;IACzB,YAAY,EAAE,YAAY,CAAA;IAC1B,cAAc,EAAE,SAAS,CAAA;IACzB,QAAQ,EAAE,QAAQ,CAAA;IAClB,eAAe,EAAE,SAAS,CAAA;IAC1B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,SAAS,CAAA;IACxB,wGAAwG;IACxG,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE;QACX,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;IACvB,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACtC;AAoHD,qBAAa,YAAY;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,YAAY,CAA2C;IAC/D,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,cAAc,CAAwD;IAC9E,0EAA0E;IAC1E,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;IACrE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,cAAc,CAA2C;IACjE,OAAO,CAAC,QAAQ,CAAQ;gBAGvB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,EAC/C,IAAI,EAAE,gBAAgB;IAcjB,WAAW,CAChB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,SAAS,CAAC;YAOP,cAAc;IA8E5B,OAAO,CAAC,cAAc;YAwBR,eAAe;IAqC7B,OAAO,CAAC,aAAa;YAiCP,YAAY;YA0iBZ,sBAAsB;YAoDtB,sBAAsB;IA0BpC,uFAAuF;IACvF,OAAO,CAAC,eAAe;IAKvB,yEAAyE;IACzE,OAAO,CAAC,aAAa;IAOrB,mEAAmE;IACnE,OAAO,CAAC,SAAS;IAmBjB;;;;;;;;;;;;;;OAcG;YACW,iBAAiB;IAuC/B;;;;;;;;;OASG;YACW,oBAAoB;IAsClC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI;IAmBjD,SAAS,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,GAAE,WAAsB,GAAG,IAAI;IASpE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAclE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAapD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE;IAOxC,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAehD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIlD,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI5D,YAAY,CAAC,eAAe,EAAE,SAAS,GAAG,SAAS,EAAE;IAMrD,UAAU,IAAI,SAAS,EAAE;IAIzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIpD,WAAW,IAAI,aAAa;IAI5B,EAAE,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAI1C,GAAG,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAK3C,OAAO,IAAI,IAAI;IAUf,OAAO,IAAI,IAAI;IAwBf;;;;;;;;;;;;;OAaG;YACW,cAAc;YA0Bd,aAAa;YAoEb,sBAAsB;YA8JtB,QAAQ;IAiCtB;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;YAmBX,aAAa;IA2E3B;;;;;;;;;;OAUG;YACW,kBAAkB;IA+ChC,OAAO,CAAC,aAAa;IAoBrB,OAAO,CAAC,UAAU;YAqDJ,cAAc;IAc5B;;;;;;;;;;;;;OAaG;YACW,qBAAqB;IAoBnC,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,gBAAgB;CAiBxB;AA6GD,OAAO,EAAE,0BAA0B,EAAE,CAAA"}

package/dist/manager/agent/lifecycle.js

@@ -1,4 +1,5 @@
-import { rm } from 'node:fs/promises';
+import { realpath, rm, stat } from 'node:fs/promises';
+import { isAbsolute, relative, resolve, sep } from 'node:path';
 import { AGENT_MANAGER_DEFAULTS } from '../../constants/agent/index.js';
 import { EMPTY_TOKEN_USAGE } from '../../constants/limits.js';
 import { GENAI } from '../../constants/telemetry/index.js';
@@ -35,6 +36,73 @@ function mergeEnv(base, override) {
         return undefined;
     return { ...base, ...override };
 }
+/** A requested isolated child must never resolve to its caller's directory. */
+async function requireIsolatedWorktreePath(ref, callerCwd, subdirectory) {
+    const meta = ref?.meta;
+    if (typeof ref?.id !== 'string' ||
+        ref.id.length === 0 ||
+        meta?.backend !== 'git-worktree' ||
+        typeof meta.repoRoot !== 'string' ||
+        !isAbsolute(meta.repoRoot) ||
+        typeof meta.branch !== 'string' ||
+        meta.branch.length === 0 ||
+        typeof meta.worktreePath !== 'string' ||
+        !isAbsolute(meta.worktreePath) ||
+        resolve(meta.worktreePath) === resolve(callerCwd ?? process.cwd())) {
+        throw new Error('Isolated git-worktree driver returned an invalid workspace ref or path');
+    }
+    // A custom driver can return a different absolute spelling of the same
+    // directory (for example, a symlink to the caller). Both paths must exist
+    // before the child is admitted, and their physical roots must differ.
+    let physicalPaths;
+    try {
+        physicalPaths = await Promise.all([
+            realpath(meta.worktreePath),
+            realpath(resolve(callerCwd ?? process.cwd())),
+        ]);
+        if (!(await stat(physicalPaths[0])).isDirectory()) {
+            throw new Error('The worktree path is not a directory');
+        }
+    }
+    catch (cause) {
+        throw new Error('Isolated git-worktree driver returned an invalid workspace ref or path', {
+            cause,
+        });
+    }
+    if (physicalPaths[0] === physicalPaths[1]) {
+        throw new Error('Isolated git-worktree driver returned an invalid workspace ref or path');
+    }
+    if (subdirectory === undefined)
+        return meta.worktreePath;
+    if (typeof subdirectory !== 'string' || subdirectory.length === 0 || isAbsolute(subdirectory)) {
+        throw new Error('Isolated workspace subdirectory must be a nonempty relative path');
+    }
+    const lexicalChild = resolve(meta.worktreePath, subdirectory);
+    const lexicalRelative = relative(resolve(meta.worktreePath), lexicalChild);
+    if (isAbsolute(lexicalRelative) ||
+        lexicalRelative === '..' ||
+        lexicalRelative.startsWith(`..${sep}`)) {
+        throw new Error('Isolated workspace subdirectory escapes the worktree');
+    }
+    let physicalChild;
+    try {
+        physicalChild = await realpath(lexicalChild);
+        if (!(await stat(physicalChild)).isDirectory()) {
+            throw new Error('The selected worktree path is not a directory');
+        }
+    }
+    catch (cause) {
+        throw new Error('Isolated workspace subdirectory is missing or not a directory', { cause });
+    }
+    const physicalRelative = relative(physicalPaths[0], physicalChild);
+    if (physicalRelative === '' ||
+        isAbsolute(physicalRelative) ||
+        physicalRelative === '..' ||
+        physicalRelative.startsWith(`..${sep}`)) {
+        throw new Error('Isolated workspace subdirectory resolves outside its worktree');
+    }
+    return physicalChild;
+}
 /**
  * One `reviewAllowedCalls` that answers `true` when any of `sources` does.
  *
@@ -121,7 +189,9 @@ export class AgentManager {
             if (task.context === context || context.parentAbortController.signal.aborted)
                 this.cancel(task.taskId, 'parent');
         };
-        task.childAbortController.signal.addEventListener('abort', onAbort, { once: true });
+        task.childAbortController.signal.addEventListener('abort', onAbort, {
+            once: true,
+        });
         const entry = {
             ready: false,
             task,
@@ -331,9 +401,21 @@ export class AgentManager {
             await childBudget.flush();
             throw error;
         }
+        let childOptions = options;
         let childAbortController;
         let agentTask;
         try {
+            // Explicit isolation is the child's execution root, not a side
+            // resource. Keep validation in this rollback envelope too.
+            if (options.workspace?.mode === 'isolated') {
+                childOptions = {
+                    ...options,
+                    input: {
+                        ...options.input,
+                        workingDirectory: await requireIsolatedWorktreePath(spawnRecord.workspaceRef, options.input.workingDirectory, options.workspace.subdirectory),
+                    },
+                };
+            }
             childAbortController =
                 queuedTask?.childAbortController ??
                     createChildAbortController(context.parentAbortController);
@@ -399,6 +481,7 @@ export class AgentManager {
                 state: 'pending',
                 pendingMessages: queuedTask?.pendingMessages ?? [],
                 createdAt: queuedTask?.createdAt ?? Date.now(),
+                workspace: options.workspace?.mode === 'isolated' ? spawnRecord.workspaceRef : undefined,
                 sessionEventListener: listener,
             });
             childAbortController.signal.throwIfAborted();
@@ -473,6 +556,7 @@ export class AgentManager {
                         ...(context.factoryOptions ?? {}),
                         tokenBudget: allocatedTokens,
                         timeoutMs: options.budgetAllocation?.timeoutMs ?? this.config.childTimeoutMs,
+                        workingDirectory: childOptions.input.workingDirectory,
                         sessionId: spawnRecord.childSessionId,
                         parentSessionId: spawnRecord.parentSessionId,
                         parentTurnId: spawnRecord.parentTurnId,
@@ -661,9 +745,9 @@ export class AgentManager {
             // under its parent (`<parent>/subagents/<child-id>.jsonl`) with its
             // meta document beside it. A child config that names a session log
             // or paths of its own chose where it goes, and keeps it.
-            const childLog = await this.placeChildSession(spawnRecord, childConfig, context, options, taskId);
+            const childLog = await this.placeChildSession(spawnRecord, childConfig, context, childOptions, taskId);
             if (childLog) {
-                await this.startChildSessionLog(childLog, spawnRecord, context, options, taskId, {
+                await this.startChildSessionLog(childLog, spawnRecord, context, childOptions, taskId, {
                     id: agent.metadata.id,
                     name: agent.metadata.name,
                 });
@@ -688,7 +772,7 @@ export class AgentManager {
             childAbortController.signal.throwIfAborted();
             this.executingTasks.add(taskId);
             const runningTask = agentTask;
-            this.runChild(runningTask, options, childConfig, listener)
+            this.runChild(runningTask, childOptions, childConfig, listener)
                 .catch(async (err) => {
                 // A thrown invocation supplied no final usage receipt. Keep its
                 // reservation, including when its task handle was canceled or evicted.
@@ -780,6 +864,9 @@ export class AgentManager {
         else
             this.instances.delete(agentTask.taskId);
         this.dropSpawnRecord(agentTask.taskId);
+        // Admission never completed. The checkout is rollback-owned, not a
+        // retained result that a terminal handle may advertise.
+        agentTask.workspace = undefined;
         this.resolveCompletionCallbacks(agentTask.taskId);
         await this.rollbackSpawnResources(spawnRecord);
     }
@@ -793,7 +880,7 @@ export class AgentManager {
                 'exception.message': toErrorMessage(err),
             }));
         }
-        await this.disposeChildWorkspace(spawnRecord);
+        await this.disposeChildWorkspace({ ...spawnRecord, workspaceRetention: undefined });
         try {
             // The edge must be removed before its child: stores reject deletion
             // of a session that still has a subsession reference.
@@ -898,7 +985,10 @@ export class AgentManager {
      * and appends after it. A log that already has records is left alone.
      */
     async startChildSessionLog(log, spawnRecord, context, options, taskId, agent) {
-        const lease = await log.claim({ holder: `namzu:agent-manager:${taskId}`, ttlMs: 30_000 });
+        const lease = await log.claim({
+            holder: `namzu:agent-manager:${taskId}`,
+            ttlMs: 30_000,
+        });
         if (lease === null) {
             throw new Error(`Child session ${spawnRecord.childSessionId} is already leased`);
         }
@@ -1170,6 +1260,7 @@ export class AgentManager {
         // parent but counted against `maxDelegationWidth`.
         let subSession;
         let workspaceRef;
+        let workspaceDriver;
         try {
             // Flip to 'active' so the materializer's atomic write + status flip
             // lands on terminal — §5.3: pending→active→idle.
@@ -1189,10 +1280,25 @@ export class AgentManager {
             // provisioning: an unregistered backend leaves `workspaceRef:
             // undefined` on the spawn record, not a hard error — the registry
             // is the capability surface.
-            const backend = options.workspaceBackend ?? 'git-worktree';
-            if (this.deps.workspaceRegistry.has(backend)) {
+            const request = options.workspace;
+            const backend = request?.mode === 'shared'
+                ? undefined
+                : request?.mode === 'isolated'
+                    ? request.backend
+                    : (options.workspaceBackend ??
+                        (this.config.workspaceDefault === 'shared' ? undefined : 'git-worktree'));
+            if (request?.mode === 'isolated' && !this.deps.workspaceRegistry.has(request.backend)) {
+                throw new Error(`Isolated workspace backend ${request.backend} is unavailable`);
+            }
+            if (backend && this.deps.workspaceRegistry.has(backend)) {
                 const driver = this.deps.workspaceRegistry.get(backend);
-                workspaceRef = await driver.create({ label: subSession.id });
+                workspaceDriver = driver;
+                workspaceRef = await driver.create({
+                    label: subSession.id,
+                    ...(request?.mode === 'isolated' && request.baseRef ? { baseRef: request.baseRef } : {}),
+                });
+                if (request?.mode === 'isolated')
+                    await requireIsolatedWorktreePath(workspaceRef, options.input.workingDirectory, request.subdirectory);
                 // Write the workspace onto the record that outlives this process.
                 //
                 // The ref was kept only on the in-memory `ChildSpawnRecord`, so
@@ -1208,17 +1314,22 @@ export class AgentManager {
                 // exist before the record it is named after. Inside the try, so
                 // the compensating rollback below covers it like every other
                 // mutation here.
-                subSession = { ...subSession, workspaceId: workspaceRef.id };
+                subSession = {
+                    ...subSession,
+                    workspaceId: workspaceRef.id,
+                    ...(request?.mode === 'isolated' && request.retention === 'retain'
+                        ? { workspaceRetention: 'retain' }
+                        : {}),
+                };
                 await store.updateSubSession(subSession, context.tenantId);
             }
         }
         catch (err) {
-            if (workspaceRef && subSession) {
-                await this.disposeChildWorkspace({
-                    workspaceRef,
-                    subSessionId: subSession.id,
-                });
-            }
+            if (workspaceRef && workspaceDriver)
+                await workspaceDriver.dispose(workspaceRef).catch((disposeErr) => this.log.warn('Unstarted workspace dispose failed', {
+                    'namzu.sub_session.id': subSession?.id,
+                    'exception.message': toErrorMessage(disposeErr),
+                }));
             // Compensating rollback order is mandated by the store's
             // deny-by-default cascade policy (Convention #5): `deleteSession`
             // throws when any subsession still references it, so the subsession
@@ -1245,6 +1356,9 @@ export class AgentManager {
             ancestry: parentAncestry,
             childDepth,
             workspaceRef,
+            ...(options.workspace?.mode === 'isolated' && options.workspace.retention === 'retain'
+                ? { workspaceRetention: 'retain' }
+                : {}),
         };
     }
     async runChild(agentTask, options, childConfig, listener) {
@@ -1253,6 +1367,15 @@ export class AgentManager {
         const input = {
             ...options.input,
             signal: agentTask.childAbortController.signal,
+            // The admitted child session is the authority. A caller-supplied input
+            // cannot redirect its turn to another tenant, project, topic or session.
+            managedScope: {
+                kind: 'managed',
+                sessionId: agentTask.context.sessionId,
+                topicId: agentTask.context.topicId,
+                projectId: agentTask.context.projectId,
+                tenantId: agentTask.context.tenantId,
+            },
         };
         const spawnRecord = this.spawnRecords.get(agentTask.taskId);
         const childListener = this.wrapChildListener(listener, spawnRecord);
@@ -1430,7 +1553,10 @@ export class AgentManager {
             status: 'failed',
             usage: agentTask.context.budget.ownUsage,
             budget: agentTask.context.budget.summary(),
-            cost: { ...ZERO_COST, unpricedTokens: agentTask.context.budget.ownTokens },
+            cost: {
+                ...ZERO_COST,
+                unpricedTokens: agentTask.context.budget.ownTokens,
+            },
             iterations: 0,
             durationMs: Date.now() - agentTask.createdAt,
             messages: [],
@@ -1486,6 +1612,8 @@ export class AgentManager {
      * removed is an operator's problem and silence is how it stays one.
      */
     async disposeChildWorkspace(spawnRecord) {
+        if (spawnRecord.workspaceRetention === 'retain')
+            return;
         if (!spawnRecord.workspaceRef)
             return;
         const backend = spawnRecord.workspaceRef.meta.backend;