@narumitw/pi-subagents 2.0.1 → 2.0.3

package/dist/chunks/chunk-H3FP6DLR.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/context.ts", "../../src/limits.ts"],
+  "sourcesContent": ["import { createHash } from \"node:crypto\";\nimport { DEFAULT_MAX_CONTEXT_BYTES, truncateUtf8, truncateUtf8Tail } from \"./limits.js\";\n\nexport type ContextMode = \"none\" | \"all\" | \"summary\" | number;\n\nexport interface ContextSnapshot {\n\ttext: string;\n\tturns: number;\n\ttruncated: boolean;\n\tsourceIds: string[];\n}\n\nfunction textParts(content: unknown): string {\n\tif (typeof content === \"string\") return content;\n\tif (!Array.isArray(content)) return \"\";\n\treturn content\n\t\t.filter((part): part is { type: \"text\"; text: string } =>\n\t\t\tBoolean(\n\t\t\t\tpart &&\n\t\t\t\t\ttypeof part === \"object\" &&\n\t\t\t\t\t(part as { type?: unknown }).type === \"text\" &&\n\t\t\t\t\ttypeof (part as { text?: unknown }).text === \"string\",\n\t\t\t),\n\t\t)\n\t\t.map((part) => part.text)\n\t\t.join(\"\\n\");\n}\n\nexport function redactPrivateText(text: string): string {\n\tconst tagPattern = /<\\/?private>/gi;\n\tlet redacted = \"\";\n\tlet cursor = 0;\n\tlet depth = 0;\n\tfor (const match of text.matchAll(tagPattern)) {\n\t\tconst tag = match[0].toLowerCase();\n\t\tconst index = match.index ?? cursor;\n\t\tif (depth === 0) redacted += text.slice(cursor, index);\n\t\tif (tag === \"<private>\") {\n\t\t\tif (depth === 0) redacted += \"[private content omitted]\";\n\t\t\tdepth++;\n\t\t} else if (depth > 0) {\n\t\t\tdepth--;\n\t\t} else {\n\t\t\tredacted += match[0];\n\t\t}\n\t\tcursor = index + match[0].length;\n\t}\n\tif (depth === 0) redacted += text.slice(cursor);\n\treturn redacted\n\t\t.split(\"\\n\")\n\t\t.filter((line) => !line.includes(\"[subagent-private]\"))\n\t\t.join(\"\\n\");\n}\n\nexport function buildContextSnapshot(\n\tentries: readonly unknown[],\n\tmode: ContextMode,\n\tmaxBytes = DEFAULT_MAX_CONTEXT_BYTES,\n\tselectedSourceIds?: readonly string[],\n): ContextSnapshot {\n\tif (mode === \"none\") return { text: \"\", turns: 0, truncated: false, sourceIds: [] };\n\tconst messages: Array<{ role: \"user\" | \"assistant\"; text: string; sourceId: string }> = [];\n\tfor (const entry of entries) {\n\t\tif (!entry || typeof entry !== \"object\") continue;\n\t\tconst candidate = entry as {\n\t\t\tid?: string;\n\t\t\ttype?: string;\n\t\t\trole?: string;\n\t\t\tcontent?: unknown;\n\t\t\tmessage?: { role?: string; content?: unknown };\n\t\t};\n\t\tconst message: { role?: string; content?: unknown } | undefined =\n\t\t\tcandidate.type === \"message\" ? candidate.message : candidate;\n\t\tif (message?.role !== \"user\" && message?.role !== \"assistant\") continue;\n\t\tconst text = redactPrivateText(textParts(message.content));\n\t\tif (text.trim()) {\n\t\t\tconst sourceId =\n\t\t\t\tcandidate.id ??\n\t\t\t\tcreateHash(\"sha256\").update(`${message.role}\\0${text}`).digest(\"hex\").slice(0, 16);\n\t\t\tmessages.push({ role: message.role, text, sourceId });\n\t\t}\n\t}\n\tconst seenSourceIds = new Set<string>();\n\tconst uniqueMessages = messages.filter((message) => {\n\t\tif (seenSourceIds.has(message.sourceId)) return false;\n\t\tseenSourceIds.add(message.sourceId);\n\t\treturn true;\n\t});\n\tconst selectedSet = selectedSourceIds ? new Set(selectedSourceIds) : undefined;\n\tconst eligible = selectedSet\n\t\t? uniqueMessages.filter((message) => selectedSet.has(message.sourceId))\n\t\t: uniqueMessages;\n\tconst turnLimit =\n\t\ttypeof mode === \"number\" ? Math.max(1, Math.floor(mode)) : Number.POSITIVE_INFINITY;\n\tlet userTurns = 0;\n\tlet start = eligible.length;\n\tfor (let index = eligible.length - 1; index >= 0; index--) {\n\t\tif (eligible[index].role === \"user\") userTurns++;\n\t\tif (userTurns > turnLimit) break;\n\t\tstart = index;\n\t}\n\tconst selected = eligible.slice(start);\n\tconst raw =\n\t\tmode === \"summary\" && selected.length > 4\n\t\t\t? [\n\t\t\t\t\t`## Earlier context checkpoint\\n${\n\t\t\t\t\t\ttruncateUtf8(\n\t\t\t\t\t\t\tselected\n\t\t\t\t\t\t\t\t.slice(0, -4)\n\t\t\t\t\t\t\t\t.map((message) => `${message.role}: ${message.text}`)\n\t\t\t\t\t\t\t\t.join(\"\\n\"),\n\t\t\t\t\t\t\tMath.floor(maxBytes / 3),\n\t\t\t\t\t\t).text\n\t\t\t\t\t}`,\n\t\t\t\t\t...selected.slice(-4).map((message) => `## ${message.role}\\n${message.text}`),\n\t\t\t\t].join(\"\\n\\n\")\n\t\t\t: selected.map((message) => `## ${message.role}\\n${message.text}`).join(\"\\n\\n\");\n\tconst bounded =\n\t\tmode === \"summary\" ? truncateUtf8Tail(raw, maxBytes) : truncateUtf8(raw, maxBytes);\n\treturn {\n\t\ttext: bounded.text,\n\t\tturns: selected.filter((message) => message.role === \"user\").length,\n\t\ttruncated: bounded.truncated,\n\t\tsourceIds: selected.map((message) => message.sourceId),\n\t};\n}\n", "import { DEFAULT_MAX_BYTES } from \"@earendil-works/pi-coding-agent\";\n\nexport const DEFAULT_MAX_OUTPUT_BYTES = DEFAULT_MAX_BYTES;\nexport const DEFAULT_MAX_STDERR_BYTES = 16 * 1024;\nexport const DEFAULT_MAX_CONTEXT_BYTES = DEFAULT_MAX_BYTES;\nexport const MAX_SUBAGENT_TIMEOUT_MS = 2_147_483_647;\nexport const DEFAULT_MAX_PARALLEL_TASKS = 8;\nexport const MAX_CONFIGURABLE_PARALLEL_TASKS = 64;\nexport const MAX_BLOCKING_PARALLEL_CONCURRENCY = 4;\nexport const DEFAULT_MAX_MESSAGES = 200;\nexport const MAX_TOOL_MESSAGE_BYTES = 2 * 1024;\nexport const TRUNCATION_MARKER = \"\\n\u2026 [truncated by pi-subagents]\";\nexport const TAIL_TRUNCATION_MARKER = \"\u2026 [truncated by pi-subagents]\\n\";\n\nexport interface BoundedText {\n\ttext: string;\n\ttruncated: boolean;\n\toriginalBytes: number;\n}\n\nfunction normalizeByteLimit(maxBytes: number): number {\n\tif (maxBytes === Number.POSITIVE_INFINITY) return Number.MAX_SAFE_INTEGER;\n\tif (!Number.isFinite(maxBytes)) return 0;\n\treturn Math.max(0, Math.floor(maxBytes));\n}\n\nexport function truncateUtf8(text: string, maxBytes: number): BoundedText {\n\tconst limit = normalizeByteLimit(maxBytes);\n\tconst originalBytes = Buffer.byteLength(text, \"utf8\");\n\tif (originalBytes <= limit) return { text, truncated: false, originalBytes };\n\tif (limit === 0) return { text: \"\", truncated: true, originalBytes };\n\n\tconst marker = Buffer.from(TRUNCATION_MARKER, \"utf8\");\n\tif (marker.length >= limit) {\n\t\treturn {\n\t\t\ttext: Buffer.from(text, \"utf8\").subarray(0, limit).toString(\"utf8\").replace(/\uFFFD+$/g, \"\"),\n\t\t\ttruncated: true,\n\t\t\toriginalBytes,\n\t\t};\n\t}\n\tconst prefix = Buffer.from(text, \"utf8\")\n\t\t.subarray(0, limit - marker.length)\n\t\t.toString(\"utf8\")\n\t\t.replace(/\uFFFD+$/g, \"\");\n\treturn { text: `${prefix}${TRUNCATION_MARKER}`, truncated: true, originalBytes };\n}\n\nexport function truncateUtf8Tail(text: string, maxBytes: number): BoundedText {\n\tconst limit = normalizeByteLimit(maxBytes);\n\tconst bytes = Buffer.from(text, \"utf8\");\n\tconst originalBytes = bytes.length;\n\tif (originalBytes <= limit) return { text, truncated: false, originalBytes };\n\tif (limit === 0) return { text: \"\", truncated: true, originalBytes };\n\n\tconst marker = Buffer.from(TAIL_TRUNCATION_MARKER, \"utf8\");\n\tif (marker.length >= limit) {\n\t\treturn {\n\t\t\ttext: bytes\n\t\t\t\t.subarray(originalBytes - limit)\n\t\t\t\t.toString(\"utf8\")\n\t\t\t\t.replace(/^\uFFFD+/g, \"\"),\n\t\t\ttruncated: true,\n\t\t\toriginalBytes,\n\t\t};\n\t}\n\tconst suffix = bytes\n\t\t.subarray(originalBytes - (limit - marker.length))\n\t\t.toString(\"utf8\")\n\t\t.replace(/^\uFFFD+/g, \"\");\n\treturn { text: `${TAIL_TRUNCATION_MARKER}${suffix}`, truncated: true, originalBytes };\n}\n\nexport function appendBounded(current: string, addition: string, maxBytes: number): BoundedText {\n\treturn truncateUtf8(current + addition, maxBytes);\n}\n"],
+  "mappings": ";;;;AAAA,SAAS,kBAAkB;;;ACA3B,SAAS,yBAAyB;AAE3B,IAAM,2BAA2B;AACjC,IAAM,2BAA2B,KAAK;AACtC,IAAM,4BAA4B;AAClC,IAAM,0BAA0B;AAChC,IAAM,6BAA6B;AACnC,IAAM,kCAAkC;AACxC,IAAM,oCAAoC;AAC1C,IAAM,uBAAuB;AAC7B,IAAM,yBAAyB,IAAI;AACnC,IAAM,oBAAoB;AAC1B,IAAM,yBAAyB;AAQtC,SAAS,mBAAmB,UAA0B;AACrD,MAAI,aAAa,OAAO,kBAAmB,QAAO,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS,QAAQ,EAAG,QAAO;AACvC,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,CAAC;AACxC;AAEO,SAAS,aAAa,MAAc,UAA+B;AACzE,QAAM,QAAQ,mBAAmB,QAAQ;AACzC,QAAM,gBAAgB,OAAO,WAAW,MAAM,MAAM;AACpD,MAAI,iBAAiB,MAAO,QAAO,EAAE,MAAM,WAAW,OAAO,cAAc;AAC3E,MAAI,UAAU,EAAG,QAAO,EAAE,MAAM,IAAI,WAAW,MAAM,cAAc;AAEnE,QAAM,SAAS,OAAO,KAAK,mBAAmB,MAAM;AACpD,MAAI,OAAO,UAAU,OAAO;AAC3B,WAAO;AAAA,MACN,MAAM,OAAO,KAAK,MAAM,MAAM,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,MAAM,EAAE,QAAQ,QAAQ,EAAE;AAAA,MACtF,WAAW;AAAA,MACX;AAAA,IACD;AAAA,EACD;AACA,QAAM,SAAS,OAAO,KAAK,MAAM,MAAM,EACrC,SAAS,GAAG,QAAQ,OAAO,MAAM,EACjC,SAAS,MAAM,EACf,QAAQ,QAAQ,EAAE;AACpB,SAAO,EAAE,MAAM,GAAG,MAAM,GAAG,iBAAiB,IAAI,WAAW,MAAM,cAAc;AAChF;AAEO,SAAS,iBAAiB,MAAc,UAA+B;AAC7E,QAAM,QAAQ,mBAAmB,QAAQ;AACzC,QAAM,QAAQ,OAAO,KAAK,MAAM,MAAM;AACtC,QAAM,gBAAgB,MAAM;AAC5B,MAAI,iBAAiB,MAAO,QAAO,EAAE,MAAM,WAAW,OAAO,cAAc;AAC3E,MAAI,UAAU,EAAG,QAAO,EAAE,MAAM,IAAI,WAAW,MAAM,cAAc;AAEnE,QAAM,SAAS,OAAO,KAAK,wBAAwB,MAAM;AACzD,MAAI,OAAO,UAAU,OAAO;AAC3B,WAAO;AAAA,MACN,MAAM,MACJ,SAAS,gBAAgB,KAAK,EAC9B,SAAS,MAAM,EACf,QAAQ,QAAQ,EAAE;AAAA,MACpB,WAAW;AAAA,MACX;AAAA,IACD;AAAA,EACD;AACA,QAAM,SAAS,MACb,SAAS,iBAAiB,QAAQ,OAAO,OAAO,EAChD,SAAS,MAAM,EACf,QAAQ,QAAQ,EAAE;AACpB,SAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,MAAM,IAAI,WAAW,MAAM,cAAc;AACrF;AAEO,SAAS,cAAc,SAAiB,UAAkB,UAA+B;AAC/F,SAAO,aAAa,UAAU,UAAU,QAAQ;AACjD;;;AD9DA,SAAS,UAAU,SAA0B;AAC5C,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AACpC,SAAO,QACL;AAAA,IAAO,CAAC,SACR;AAAA,MACC,QACC,OAAO,SAAS,YACf,KAA4B,SAAS,UACtC,OAAQ,KAA4B,SAAS;AAAA,IAC/C;AAAA,EACD,EACC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACZ;AAEO,SAAS,kBAAkB,MAAsB;AACvD,QAAM,aAAa;AACnB,MAAI,WAAW;AACf,MAAI,SAAS;AACb,MAAI,QAAQ;AACZ,aAAW,SAAS,KAAK,SAAS,UAAU,GAAG;AAC9C,UAAM,MAAM,MAAM,CAAC,EAAE,YAAY;AACjC,UAAM,QAAQ,MAAM,SAAS;AAC7B,QAAI,UAAU,EAAG,aAAY,KAAK,MAAM,QAAQ,KAAK;AACrD,QAAI,QAAQ,aAAa;AACxB,UAAI,UAAU,EAAG,aAAY;AAC7B;AAAA,IACD,WAAW,QAAQ,GAAG;AACrB;AAAA,IACD,OAAO;AACN,kBAAY,MAAM,CAAC;AAAA,IACpB;AACA,aAAS,QAAQ,MAAM,CAAC,EAAE;AAAA,EAC3B;AACA,MAAI,UAAU,EAAG,aAAY,KAAK,MAAM,MAAM;AAC9C,SAAO,SACL,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,oBAAoB,CAAC,EACrD,KAAK,IAAI;AACZ;AAEO,SAAS,qBACf,SACA,MACA,WAAW,2BACX,mBACkB;AAClB,MAAI,SAAS,OAAQ,QAAO,EAAE,MAAM,IAAI,OAAO,GAAG,WAAW,OAAO,WAAW,CAAC,EAAE;AAClF,QAAM,WAAkF,CAAC;AACzF,aAAW,SAAS,SAAS;AAC5B,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU;AACzC,UAAM,YAAY;AAOlB,UAAM,UACL,UAAU,SAAS,YAAY,UAAU,UAAU;AACpD,QAAI,SAAS,SAAS,UAAU,SAAS,SAAS,YAAa;AAC/D,UAAM,OAAO,kBAAkB,UAAU,QAAQ,OAAO,CAAC;AACzD,QAAI,KAAK,KAAK,GAAG;AAChB,YAAM,WACL,UAAU,MACV,WAAW,QAAQ,EAAE,OAAO,GAAG,QAAQ,IAAI,KAAK,IAAI,EAAE,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAClF,eAAS,KAAK,EAAE,MAAM,QAAQ,MAAM,MAAM,SAAS,CAAC;AAAA,IACrD;AAAA,EACD;AACA,QAAM,gBAAgB,oBAAI,IAAY;AACtC,QAAM,iBAAiB,SAAS,OAAO,CAAC,YAAY;AACnD,QAAI,cAAc,IAAI,QAAQ,QAAQ,EAAG,QAAO;AAChD,kBAAc,IAAI,QAAQ,QAAQ;AAClC,WAAO;AAAA,EACR,CAAC;AACD,QAAM,cAAc,oBAAoB,IAAI,IAAI,iBAAiB,IAAI;AACrE,QAAM,WAAW,cACd,eAAe,OAAO,CAAC,YAAY,YAAY,IAAI,QAAQ,QAAQ,CAAC,IACpE;AACH,QAAM,YACL,OAAO,SAAS,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,IAAI,OAAO;AACnE,MAAI,YAAY;AAChB,MAAI,QAAQ,SAAS;AACrB,WAAS,QAAQ,SAAS,SAAS,GAAG,SAAS,GAAG,SAAS;AAC1D,QAAI,SAAS,KAAK,EAAE,SAAS,OAAQ;AACrC,QAAI,YAAY,UAAW;AAC3B,YAAQ;AAAA,EACT;AACA,QAAM,WAAW,SAAS,MAAM,KAAK;AACrC,QAAM,MACL,SAAS,aAAa,SAAS,SAAS,IACrC;AAAA,IACA;AAAA,EACC;AAAA,MACC,SACE,MAAM,GAAG,EAAE,EACX,IAAI,CAAC,YAAY,GAAG,QAAQ,IAAI,KAAK,QAAQ,IAAI,EAAE,EACnD,KAAK,IAAI;AAAA,MACX,KAAK,MAAM,WAAW,CAAC;AAAA,IACxB,EAAE,IACH;AAAA,IACA,GAAG,SAAS,MAAM,EAAE,EAAE,IAAI,CAAC,YAAY,MAAM,QAAQ,IAAI;AAAA,EAAK,QAAQ,IAAI,EAAE;AAAA,EAC7E,EAAE,KAAK,MAAM,IACZ,SAAS,IAAI,CAAC,YAAY,MAAM,QAAQ,IAAI;AAAA,EAAK,QAAQ,IAAI,EAAE,EAAE,KAAK,MAAM;AAChF,QAAM,UACL,SAAS,YAAY,iBAAiB,KAAK,QAAQ,IAAI,aAAa,KAAK,QAAQ;AAClF,SAAO;AAAA,IACN,MAAM,QAAQ;AAAA,IACd,OAAO,SAAS,OAAO,CAAC,YAAY,QAAQ,SAAS,MAAM,EAAE;AAAA,IAC7D,WAAW,QAAQ;AAAA,IACnB,WAAW,SAAS,IAAI,CAAC,YAAY,QAAQ,QAAQ;AAAA,EACtD;AACD;",
+  "names": []
+}

package/dist/chunks/chunk-HA36LPCO.ts

@@ -0,0 +1,130 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  safeTerminalLine
+} from "./chunk-SWGQLFSD.ts";
+
+// src/cwd-policy.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { getAgentDir, ProjectTrustStore } from "@earendil-works/pi-coding-agent";
+function targetPolicyAudit(target) {
+  return {
+    cwd: safeTerminalLine(target.cwd),
+    boundary: target.boundary,
+    trust: {
+      ...target.trust,
+      sourcePath: target.trust.sourcePath ? safeTerminalLine(target.trust.sourcePath) : void 0,
+      warning: target.trust.warning ? safeTerminalLine(target.trust.warning, 512) : void 0
+    }
+  };
+}
+function resolveSubagentTarget(options) {
+  const workspace = canonicalDirectory(options.workspace, "Current workspace");
+  const requested = path.resolve(options.workspace, options.requestedCwd ?? options.workspace);
+  const cwd = canonicalDirectory(requested, "Subagent working directory");
+  const boundary = isEqualOrDescendant(cwd, workspace) ? "current-workspace" : "external";
+  if (boundary === "current-workspace") {
+    return {
+      cwd,
+      workspace,
+      boundary,
+      trust: {
+        kind: options.currentProjectTrusted ? "session-trusted" : "session-untrusted",
+        projectTrusted: options.currentProjectTrusted,
+        sourcePath: workspace
+      }
+    };
+  }
+  try {
+    const entry = new ProjectTrustStore(options.agentDir ?? getAgentDir()).getEntry(cwd);
+    if (!entry) {
+      return {
+        cwd,
+        workspace,
+        boundary,
+        trust: { kind: "unsaved", projectTrusted: false }
+      };
+    }
+    return {
+      cwd,
+      workspace,
+      boundary,
+      trust: {
+        kind: entry.decision ? "saved-trusted" : "saved-denied",
+        projectTrusted: entry.decision,
+        sourcePath: entry.path
+      }
+    };
+  } catch {
+    return {
+      cwd,
+      workspace,
+      boundary,
+      trust: {
+        kind: "trust-error",
+        projectTrusted: false,
+        warning: safeTerminalLine(
+          "Could not resolve Pi trust store; protected target resources were disabled. Repair trust with Pi /trust and restart Pi.",
+          512
+        )
+      }
+    };
+  }
+}
+function assertConsultationTargetAllowed(target, policy) {
+  if (policy === "current-workspace" && target.boundary !== "current-workspace") {
+    throw new Error(
+      `Read-only consultation target is outside the current workspace: ${safeTerminalLine(target.cwd)}`
+    );
+  }
+}
+function assertDelegationTargetAllowed(target, policy) {
+  if (target.boundary === "current-workspace" || policy === "anywhere") return;
+  if (policy === "trusted-targets" && target.trust.kind === "saved-trusted") return;
+  if (policy === "current-workspace") {
+    throw new Error(
+      `General delegation target is outside the current workspace: ${safeTerminalLine(target.cwd)}`
+    );
+  }
+  const reason = target.trust.kind === "trust-error" ? target.trust.warning : `Target trust is ${target.trust.kind}.`;
+  throw new Error(
+    [
+      `General delegation target is not a saved-trusted folder: ${safeTerminalLine(target.cwd)}`,
+      reason,
+      "Open Pi in that folder, manage trust with /trust, restart Pi, or choose Anywhere in /subagents settings."
+    ].filter(Boolean).join(" ")
+  );
+}
+function canonicalDirectory(value, label) {
+  let canonical;
+  try {
+    canonical = fs.realpathSync(value);
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      throw new Error(`${label} does not exist: ${safeTerminalLine(value)}`);
+    }
+    throw new Error(
+      `${label} cannot be resolved: ${safeTerminalLine(value)}: ${formatError(error)}`
+    );
+  }
+  if (!fs.statSync(canonical).isDirectory()) {
+    throw new Error(`${label} is not a directory: ${safeTerminalLine(canonical)}`);
+  }
+  return canonical;
+}
+function isEqualOrDescendant(candidate, workspace) {
+  const relative2 = path.relative(workspace, candidate);
+  return relative2 === "" || !relative2.startsWith(`..${path.sep}`) && relative2 !== ".." && !path.isAbsolute(relative2);
+}
+function formatError(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+export {
+  targetPolicyAudit,
+  resolveSubagentTarget,
+  assertConsultationTargetAllowed,
+  assertDelegationTargetAllowed
+};
+//# sourceMappingURL=chunk-HA36LPCO.ts.map

package/dist/chunks/chunk-HA36LPCO.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cwd-policy.ts"],
+  "sourcesContent": ["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { getAgentDir, ProjectTrustStore } from \"@earendil-works/pi-coding-agent\";\nimport type { ConsultationCwdPolicy, DelegationCwdPolicy } from \"./agents/types.js\";\nimport { safeTerminalLine } from \"./safe-text.js\";\n\nexport type TargetBoundary = \"current-workspace\" | \"external\";\nexport type TargetTrustKind =\n\t| \"session-trusted\"\n\t| \"session-untrusted\"\n\t| \"saved-trusted\"\n\t| \"saved-denied\"\n\t| \"unsaved\"\n\t| \"trust-error\";\n\nexport interface ResolvedTargetTrust {\n\tkind: TargetTrustKind;\n\tprojectTrusted: boolean;\n\tsourcePath?: string;\n\twarning?: string;\n}\n\nexport interface ResolvedSubagentTarget {\n\tcwd: string;\n\tworkspace: string;\n\tboundary: TargetBoundary;\n\ttrust: ResolvedTargetTrust;\n}\n\nexport interface TargetPolicyAudit {\n\tcwd: string;\n\tboundary: TargetBoundary;\n\ttrust: {\n\t\tkind: TargetTrustKind;\n\t\tprojectTrusted: boolean;\n\t\tsourcePath?: string;\n\t\twarning?: string;\n\t};\n}\n\nexport function targetPolicyAudit(target: ResolvedSubagentTarget): TargetPolicyAudit {\n\treturn {\n\t\tcwd: safeTerminalLine(target.cwd),\n\t\tboundary: target.boundary,\n\t\ttrust: {\n\t\t\t...target.trust,\n\t\t\tsourcePath: target.trust.sourcePath ? safeTerminalLine(target.trust.sourcePath) : undefined,\n\t\t\twarning: target.trust.warning ? safeTerminalLine(target.trust.warning, 512) : undefined,\n\t\t},\n\t};\n}\n\nexport interface ResolveSubagentTargetOptions {\n\tworkspace: string;\n\trequestedCwd?: string;\n\tcurrentProjectTrusted: boolean;\n\tagentDir?: string;\n}\n\nexport function resolveSubagentTarget(\n\toptions: ResolveSubagentTargetOptions,\n): ResolvedSubagentTarget {\n\tconst workspace = canonicalDirectory(options.workspace, \"Current workspace\");\n\tconst requested = path.resolve(options.workspace, options.requestedCwd ?? options.workspace);\n\tconst cwd = canonicalDirectory(requested, \"Subagent working directory\");\n\tconst boundary: TargetBoundary = isEqualOrDescendant(cwd, workspace)\n\t\t? \"current-workspace\"\n\t\t: \"external\";\n\tif (boundary === \"current-workspace\") {\n\t\treturn {\n\t\t\tcwd,\n\t\t\tworkspace,\n\t\t\tboundary,\n\t\t\ttrust: {\n\t\t\t\tkind: options.currentProjectTrusted ? \"session-trusted\" : \"session-untrusted\",\n\t\t\t\tprojectTrusted: options.currentProjectTrusted,\n\t\t\t\tsourcePath: workspace,\n\t\t\t},\n\t\t};\n\t}\n\ttry {\n\t\tconst entry = new ProjectTrustStore(options.agentDir ?? getAgentDir()).getEntry(cwd);\n\t\tif (!entry) {\n\t\t\treturn {\n\t\t\t\tcwd,\n\t\t\t\tworkspace,\n\t\t\t\tboundary,\n\t\t\t\ttrust: { kind: \"unsaved\", projectTrusted: false },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tcwd,\n\t\t\tworkspace,\n\t\t\tboundary,\n\t\t\ttrust: {\n\t\t\t\tkind: entry.decision ? \"saved-trusted\" : \"saved-denied\",\n\t\t\t\tprojectTrusted: entry.decision,\n\t\t\t\tsourcePath: entry.path,\n\t\t\t},\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tcwd,\n\t\t\tworkspace,\n\t\t\tboundary,\n\t\t\ttrust: {\n\t\t\t\tkind: \"trust-error\",\n\t\t\t\tprojectTrusted: false,\n\t\t\t\twarning: safeTerminalLine(\n\t\t\t\t\t\"Could not resolve Pi trust store; protected target resources were disabled. Repair trust with Pi /trust and restart Pi.\",\n\t\t\t\t\t512,\n\t\t\t\t),\n\t\t\t},\n\t\t};\n\t}\n}\n\nexport function assertConsultationTargetAllowed(\n\ttarget: ResolvedSubagentTarget,\n\tpolicy: ConsultationCwdPolicy,\n): void {\n\tif (policy === \"current-workspace\" && target.boundary !== \"current-workspace\") {\n\t\tthrow new Error(\n\t\t\t`Read-only consultation target is outside the current workspace: ${safeTerminalLine(target.cwd)}`,\n\t\t);\n\t}\n}\n\nexport function assertDelegationTargetAllowed(\n\ttarget: ResolvedSubagentTarget,\n\tpolicy: DelegationCwdPolicy,\n): void {\n\tif (target.boundary === \"current-workspace\" || policy === \"anywhere\") return;\n\tif (policy === \"trusted-targets\" && target.trust.kind === \"saved-trusted\") return;\n\tif (policy === \"current-workspace\") {\n\t\tthrow new Error(\n\t\t\t`General delegation target is outside the current workspace: ${safeTerminalLine(target.cwd)}`,\n\t\t);\n\t}\n\tconst reason =\n\t\ttarget.trust.kind === \"trust-error\"\n\t\t\t? target.trust.warning\n\t\t\t: `Target trust is ${target.trust.kind}.`;\n\tthrow new Error(\n\t\t[\n\t\t\t`General delegation target is not a saved-trusted folder: ${safeTerminalLine(target.cwd)}`,\n\t\t\treason,\n\t\t\t\"Open Pi in that folder, manage trust with /trust, restart Pi, or choose Anywhere in /subagents settings.\",\n\t\t]\n\t\t\t.filter(Boolean)\n\t\t\t.join(\" \"),\n\t);\n}\n\nfunction canonicalDirectory(value: string, label: string): string {\n\tlet canonical: string;\n\ttry {\n\t\tcanonical = fs.realpathSync(value);\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n\t\t\tthrow new Error(`${label} does not exist: ${safeTerminalLine(value)}`);\n\t\t}\n\t\tthrow new Error(\n\t\t\t`${label} cannot be resolved: ${safeTerminalLine(value)}: ${formatError(error)}`,\n\t\t);\n\t}\n\tif (!fs.statSync(canonical).isDirectory()) {\n\t\tthrow new Error(`${label} is not a directory: ${safeTerminalLine(canonical)}`);\n\t}\n\treturn canonical;\n}\n\nfunction isEqualOrDescendant(candidate: string, workspace: string): boolean {\n\tconst relative = path.relative(workspace, candidate);\n\treturn (\n\t\trelative === \"\" ||\n\t\t(!relative.startsWith(`..${path.sep}`) && relative !== \"..\" && !path.isAbsolute(relative))\n\t);\n}\n\nfunction formatError(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n"],
+  "mappings": ";;;;;;;AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,aAAa,yBAAyB;AAsCxC,SAAS,kBAAkB,QAAmD;AACpF,SAAO;AAAA,IACN,KAAK,iBAAiB,OAAO,GAAG;AAAA,IAChC,UAAU,OAAO;AAAA,IACjB,OAAO;AAAA,MACN,GAAG,OAAO;AAAA,MACV,YAAY,OAAO,MAAM,aAAa,iBAAiB,OAAO,MAAM,UAAU,IAAI;AAAA,MAClF,SAAS,OAAO,MAAM,UAAU,iBAAiB,OAAO,MAAM,SAAS,GAAG,IAAI;AAAA,IAC/E;AAAA,EACD;AACD;AASO,SAAS,sBACf,SACyB;AACzB,QAAM,YAAY,mBAAmB,QAAQ,WAAW,mBAAmB;AAC3E,QAAM,YAAiB,aAAQ,QAAQ,WAAW,QAAQ,gBAAgB,QAAQ,SAAS;AAC3F,QAAM,MAAM,mBAAmB,WAAW,4BAA4B;AACtE,QAAM,WAA2B,oBAAoB,KAAK,SAAS,IAChE,sBACA;AACH,MAAI,aAAa,qBAAqB;AACrC,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,QACN,MAAM,QAAQ,wBAAwB,oBAAoB;AAAA,QAC1D,gBAAgB,QAAQ;AAAA,QACxB,YAAY;AAAA,MACb;AAAA,IACD;AAAA,EACD;AACA,MAAI;AACH,UAAM,QAAQ,IAAI,kBAAkB,QAAQ,YAAY,YAAY,CAAC,EAAE,SAAS,GAAG;AACnF,QAAI,CAAC,OAAO;AACX,aAAO;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,EAAE,MAAM,WAAW,gBAAgB,MAAM;AAAA,MACjD;AAAA,IACD;AACA,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,QACN,MAAM,MAAM,WAAW,kBAAkB;AAAA,QACzC,gBAAgB,MAAM;AAAA,QACtB,YAAY,MAAM;AAAA,MACnB;AAAA,IACD;AAAA,EACD,QAAQ;AACP,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,QACN,MAAM;AAAA,QACN,gBAAgB;AAAA,QAChB,SAAS;AAAA,UACR;AAAA,UACA;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,EACD;AACD;AAEO,SAAS,gCACf,QACA,QACO;AACP,MAAI,WAAW,uBAAuB,OAAO,aAAa,qBAAqB;AAC9E,UAAM,IAAI;AAAA,MACT,mEAAmE,iBAAiB,OAAO,GAAG,CAAC;AAAA,IAChG;AAAA,EACD;AACD;AAEO,SAAS,8BACf,QACA,QACO;AACP,MAAI,OAAO,aAAa,uBAAuB,WAAW,WAAY;AACtE,MAAI,WAAW,qBAAqB,OAAO,MAAM,SAAS,gBAAiB;AAC3E,MAAI,WAAW,qBAAqB;AACnC,UAAM,IAAI;AAAA,MACT,+DAA+D,iBAAiB,OAAO,GAAG,CAAC;AAAA,IAC5F;AAAA,EACD;AACA,QAAM,SACL,OAAO,MAAM,SAAS,gBACnB,OAAO,MAAM,UACb,mBAAmB,OAAO,MAAM,IAAI;AACxC,QAAM,IAAI;AAAA,IACT;AAAA,MACC,4DAA4D,iBAAiB,OAAO,GAAG,CAAC;AAAA,MACxF;AAAA,MACA;AAAA,IACD,EACE,OAAO,OAAO,EACd,KAAK,GAAG;AAAA,EACX;AACD;AAEA,SAAS,mBAAmB,OAAe,OAAuB;AACjE,MAAI;AACJ,MAAI;AACH,gBAAe,gBAAa,KAAK;AAAA,EAClC,SAAS,OAAO;AACf,QAAK,MAAgC,SAAS,UAAU;AACvD,YAAM,IAAI,MAAM,GAAG,KAAK,oBAAoB,iBAAiB,KAAK,CAAC,EAAE;AAAA,IACtE;AACA,UAAM,IAAI;AAAA,MACT,GAAG,KAAK,wBAAwB,iBAAiB,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC;AAAA,IAC/E;AAAA,EACD;AACA,MAAI,CAAI,YAAS,SAAS,EAAE,YAAY,GAAG;AAC1C,UAAM,IAAI,MAAM,GAAG,KAAK,wBAAwB,iBAAiB,SAAS,CAAC,EAAE;AAAA,EAC9E;AACA,SAAO;AACR;AAEA,SAAS,oBAAoB,WAAmB,WAA4B;AAC3E,QAAMA,YAAgB,cAAS,WAAW,SAAS;AACnD,SACCA,cAAa,MACZ,CAACA,UAAS,WAAW,KAAU,QAAG,EAAE,KAAKA,cAAa,QAAQ,CAAM,gBAAWA,SAAQ;AAE1F;AAEA,SAAS,YAAY,OAAwB;AAC5C,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC7D;",
+  "names": ["relative"]
+}

package/dist/chunks/chunk-HKC4ES4B.ts

@@ -0,0 +1,65 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  isExecutionPlan
+} from "./chunk-DSOOH73Y.ts";
+
+// src/capability-grant.ts
+import { createHash } from "node:crypto";
+var CAPABILITY_GRANT_VERSION = "pi-subagents:capability-grant:v1";
+function grantId(projection) {
+  return createHash("sha256").update(JSON.stringify(projection)).digest("hex");
+}
+function issueCapabilityGrant(plan, issuedAt, lifetimeMs) {
+  if (!Number.isFinite(issuedAt) || !Number.isFinite(lifetimeMs) || lifetimeMs <= 0) {
+    throw new Error("Capability grant requires finite issuance and lifetime bounds");
+  }
+  const expiresAt = issuedAt + lifetimeMs;
+  const projection = {
+    executionPlanId: plan.id,
+    taskGeneration: plan.taskGeneration,
+    effectiveTools: plan.effectiveTools,
+    issuedAt,
+    expiresAt
+  };
+  return {
+    version: CAPABILITY_GRANT_VERSION,
+    id: grantId(projection),
+    ...projection,
+    state: "active"
+  };
+}
+function revokeCapabilityGrant(grant, reason, revokedAt) {
+  if (grant.state === "revoked") throw new Error("Capability grant is already revoked");
+  grant.state = "revoked";
+  grant.revokedAt = revokedAt;
+  grant.revocationReason = reason.slice(0, 256);
+  return structuredClone(grant);
+}
+function isCapabilityGrant(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const grant = value;
+  const validShape = grant.version === CAPABILITY_GRANT_VERSION && typeof grant.id === "string" && /^[a-f0-9]{64}$/u.test(grant.id) && typeof grant.executionPlanId === "string" && /^[a-f0-9]{64}$/u.test(grant.executionPlanId) && Number.isSafeInteger(grant.taskGeneration) && Number(grant.taskGeneration) >= 0 && Number.isFinite(grant.issuedAt) && Number.isFinite(grant.expiresAt) && Number(grant.expiresAt) >= Number(grant.issuedAt) && (grant.state === "active" || grant.state === "revoked") && (grant.state === "active" ? grant.revokedAt === void 0 && grant.revocationReason === void 0 : Number.isFinite(grant.revokedAt) && typeof grant.revocationReason === "string" && grant.revocationReason.length > 0) && (grant.effectiveTools === void 0 || Array.isArray(grant.effectiveTools) && grant.effectiveTools.every((tool) => typeof tool === "string"));
+  if (!validShape) return false;
+  const validated = grant;
+  const expectedId = grantId({
+    executionPlanId: validated.executionPlanId,
+    taskGeneration: validated.taskGeneration,
+    effectiveTools: validated.effectiveTools,
+    issuedAt: validated.issuedAt,
+    expiresAt: validated.expiresAt
+  });
+  return validated.id === expectedId;
+}
+function isCapabilityGrantActive(grant, plan, now) {
+  return isCapabilityGrant(grant) && isExecutionPlan(plan) && grant.state === "active" && grant.executionPlanId === plan.id && grant.taskGeneration === plan.taskGeneration && JSON.stringify(grant.effectiveTools ?? null) === JSON.stringify(plan.effectiveTools ?? null) && now >= grant.issuedAt && now <= grant.expiresAt;
+}
+
+export {
+  CAPABILITY_GRANT_VERSION,
+  issueCapabilityGrant,
+  revokeCapabilityGrant,
+  isCapabilityGrant,
+  isCapabilityGrantActive
+};
+//# sourceMappingURL=chunk-HKC4ES4B.ts.map

package/dist/chunks/chunk-HKC4ES4B.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/capability-grant.ts"],
+  "sourcesContent": ["import { createHash } from \"node:crypto\";\nimport { type ExecutionPlan, isExecutionPlan } from \"./execution-plan.js\";\n\nexport const CAPABILITY_GRANT_VERSION = \"pi-subagents:capability-grant:v1\" as const;\n\nexport interface CapabilityGrant {\n\tversion: typeof CAPABILITY_GRANT_VERSION;\n\tid: string;\n\texecutionPlanId: string;\n\ttaskGeneration: number;\n\teffectiveTools?: string[];\n\tissuedAt: number;\n\texpiresAt: number;\n\tstate: \"active\" | \"revoked\";\n\trevokedAt?: number;\n\trevocationReason?: string;\n}\n\nfunction grantId(projection: {\n\texecutionPlanId: string;\n\ttaskGeneration: number;\n\teffectiveTools?: string[];\n\tissuedAt: number;\n\texpiresAt: number;\n}): string {\n\treturn createHash(\"sha256\").update(JSON.stringify(projection)).digest(\"hex\");\n}\n\nexport function issueCapabilityGrant(\n\tplan: ExecutionPlan,\n\tissuedAt: number,\n\tlifetimeMs: number,\n): CapabilityGrant {\n\tif (!Number.isFinite(issuedAt) || !Number.isFinite(lifetimeMs) || lifetimeMs <= 0) {\n\t\tthrow new Error(\"Capability grant requires finite issuance and lifetime bounds\");\n\t}\n\tconst expiresAt = issuedAt + lifetimeMs;\n\tconst projection = {\n\t\texecutionPlanId: plan.id,\n\t\ttaskGeneration: plan.taskGeneration,\n\t\teffectiveTools: plan.effectiveTools,\n\t\tissuedAt,\n\t\texpiresAt,\n\t};\n\treturn {\n\t\tversion: CAPABILITY_GRANT_VERSION,\n\t\tid: grantId(projection),\n\t\t...projection,\n\t\tstate: \"active\",\n\t};\n}\n\nexport function revokeCapabilityGrant(\n\tgrant: CapabilityGrant,\n\treason: string,\n\trevokedAt: number,\n): CapabilityGrant {\n\tif (grant.state === \"revoked\") throw new Error(\"Capability grant is already revoked\");\n\tgrant.state = \"revoked\";\n\tgrant.revokedAt = revokedAt;\n\tgrant.revocationReason = reason.slice(0, 256);\n\treturn structuredClone(grant);\n}\n\nexport function isCapabilityGrant(value: unknown): value is CapabilityGrant {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return false;\n\tconst grant = value as Partial<CapabilityGrant>;\n\tconst validShape =\n\t\tgrant.version === CAPABILITY_GRANT_VERSION &&\n\t\ttypeof grant.id === \"string\" &&\n\t\t/^[a-f0-9]{64}$/u.test(grant.id) &&\n\t\ttypeof grant.executionPlanId === \"string\" &&\n\t\t/^[a-f0-9]{64}$/u.test(grant.executionPlanId) &&\n\t\tNumber.isSafeInteger(grant.taskGeneration) &&\n\t\tNumber(grant.taskGeneration) >= 0 &&\n\t\tNumber.isFinite(grant.issuedAt) &&\n\t\tNumber.isFinite(grant.expiresAt) &&\n\t\tNumber(grant.expiresAt) >= Number(grant.issuedAt) &&\n\t\t(grant.state === \"active\" || grant.state === \"revoked\") &&\n\t\t(grant.state === \"active\"\n\t\t\t? grant.revokedAt === undefined && grant.revocationReason === undefined\n\t\t\t: Number.isFinite(grant.revokedAt) &&\n\t\t\t\ttypeof grant.revocationReason === \"string\" &&\n\t\t\t\tgrant.revocationReason.length > 0) &&\n\t\t(grant.effectiveTools === undefined ||\n\t\t\t(Array.isArray(grant.effectiveTools) &&\n\t\t\t\tgrant.effectiveTools.every((tool) => typeof tool === \"string\")));\n\tif (!validShape) return false;\n\tconst validated = grant as CapabilityGrant;\n\tconst expectedId = grantId({\n\t\texecutionPlanId: validated.executionPlanId,\n\t\ttaskGeneration: validated.taskGeneration,\n\t\teffectiveTools: validated.effectiveTools,\n\t\tissuedAt: validated.issuedAt,\n\t\texpiresAt: validated.expiresAt,\n\t});\n\treturn validated.id === expectedId;\n}\n\nexport function isCapabilityGrantActive(\n\tgrant: CapabilityGrant,\n\tplan: ExecutionPlan,\n\tnow: number,\n): boolean {\n\treturn (\n\t\tisCapabilityGrant(grant) &&\n\t\tisExecutionPlan(plan) &&\n\t\tgrant.state === \"active\" &&\n\t\tgrant.executionPlanId === plan.id &&\n\t\tgrant.taskGeneration === plan.taskGeneration &&\n\t\tJSON.stringify(grant.effectiveTools ?? null) === JSON.stringify(plan.effectiveTools ?? null) &&\n\t\tnow >= grant.issuedAt &&\n\t\tnow <= grant.expiresAt\n\t);\n}\n"],
+  "mappings": ";;;;;;;AAAA,SAAS,kBAAkB;AAGpB,IAAM,2BAA2B;AAexC,SAAS,QAAQ,YAMN;AACV,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,UAAU,CAAC,EAAE,OAAO,KAAK;AAC5E;AAEO,SAAS,qBACf,MACA,UACA,YACkB;AAClB,MAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,CAAC,OAAO,SAAS,UAAU,KAAK,cAAc,GAAG;AAClF,UAAM,IAAI,MAAM,+DAA+D;AAAA,EAChF;AACA,QAAM,YAAY,WAAW;AAC7B,QAAM,aAAa;AAAA,IAClB,iBAAiB,KAAK;AAAA,IACtB,gBAAgB,KAAK;AAAA,IACrB,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AACA,SAAO;AAAA,IACN,SAAS;AAAA,IACT,IAAI,QAAQ,UAAU;AAAA,IACtB,GAAG;AAAA,IACH,OAAO;AAAA,EACR;AACD;AAEO,SAAS,sBACf,OACA,QACA,WACkB;AAClB,MAAI,MAAM,UAAU,UAAW,OAAM,IAAI,MAAM,qCAAqC;AACpF,QAAM,QAAQ;AACd,QAAM,YAAY;AAClB,QAAM,mBAAmB,OAAO,MAAM,GAAG,GAAG;AAC5C,SAAO,gBAAgB,KAAK;AAC7B;AAEO,SAAS,kBAAkB,OAA0C;AAC3E,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,QAAQ;AACd,QAAM,aACL,MAAM,YAAY,4BAClB,OAAO,MAAM,OAAO,YACpB,kBAAkB,KAAK,MAAM,EAAE,KAC/B,OAAO,MAAM,oBAAoB,YACjC,kBAAkB,KAAK,MAAM,eAAe,KAC5C,OAAO,cAAc,MAAM,cAAc,KACzC,OAAO,MAAM,cAAc,KAAK,KAChC,OAAO,SAAS,MAAM,QAAQ,KAC9B,OAAO,SAAS,MAAM,SAAS,KAC/B,OAAO,MAAM,SAAS,KAAK,OAAO,MAAM,QAAQ,MAC/C,MAAM,UAAU,YAAY,MAAM,UAAU,eAC5C,MAAM,UAAU,WACd,MAAM,cAAc,UAAa,MAAM,qBAAqB,SAC5D,OAAO,SAAS,MAAM,SAAS,KAChC,OAAO,MAAM,qBAAqB,YAClC,MAAM,iBAAiB,SAAS,OACjC,MAAM,mBAAmB,UACxB,MAAM,QAAQ,MAAM,cAAc,KAClC,MAAM,eAAe,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ;AAChE,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,YAAY;AAClB,QAAM,aAAa,QAAQ;AAAA,IAC1B,iBAAiB,UAAU;AAAA,IAC3B,gBAAgB,UAAU;AAAA,IAC1B,gBAAgB,UAAU;AAAA,IAC1B,UAAU,UAAU;AAAA,IACpB,WAAW,UAAU;AAAA,EACtB,CAAC;AACD,SAAO,UAAU,OAAO;AACzB;AAEO,SAAS,wBACf,OACA,MACA,KACU;AACV,SACC,kBAAkB,KAAK,KACvB,gBAAgB,IAAI,KACpB,MAAM,UAAU,YAChB,MAAM,oBAAoB,KAAK,MAC/B,MAAM,mBAAmB,KAAK,kBAC9B,KAAK,UAAU,MAAM,kBAAkB,IAAI,MAAM,KAAK,UAAU,KAAK,kBAAkB,IAAI,KAC3F,OAAO,MAAM,YACb,OAAO,MAAM;AAEf;",
+  "names": []
+}

package/dist/chunks/chunk-HOP5FXDT.ts

@@ -0,0 +1,27 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+
+// src/cached-module-loader.ts
+function cachedModuleLoader(load) {
+  let pending;
+  return () => {
+    if (!pending) {
+      pending = load().catch((error) => {
+        pending = void 0;
+        throw error;
+      });
+    }
+    return pending;
+  };
+}
+function throwIfAborted(signal, message) {
+  if (!signal?.aborted) return;
+  if (signal.reason instanceof Error) throw signal.reason;
+  throw new DOMException(message, "AbortError");
+}
+
+export {
+  cachedModuleLoader,
+  throwIfAborted
+};
+//# sourceMappingURL=chunk-HOP5FXDT.ts.map

package/dist/chunks/chunk-HOP5FXDT.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cached-module-loader.ts"],
+  "sourcesContent": ["export function cachedModuleLoader<Module>(load: () => Promise<Module>): () => Promise<Module> {\n\tlet pending: Promise<Module> | undefined;\n\treturn () => {\n\t\tif (!pending) {\n\t\t\tpending = load().catch((error) => {\n\t\t\t\tpending = undefined;\n\t\t\t\tthrow error;\n\t\t\t});\n\t\t}\n\t\treturn pending;\n\t};\n}\n\nexport function throwIfAborted(signal: AbortSignal | undefined, message: string): void {\n\tif (!signal?.aborted) return;\n\tif (signal.reason instanceof Error) throw signal.reason;\n\tthrow new DOMException(message, \"AbortError\");\n}\n"],
+  "mappings": ";;;;AAAO,SAAS,mBAA2B,MAAoD;AAC9F,MAAI;AACJ,SAAO,MAAM;AACZ,QAAI,CAAC,SAAS;AACb,gBAAU,KAAK,EAAE,MAAM,CAAC,UAAU;AACjC,kBAAU;AACV,cAAM;AAAA,MACP,CAAC;AAAA,IACF;AACA,WAAO;AAAA,EACR;AACD;AAEO,SAAS,eAAe,QAAiC,SAAuB;AACtF,MAAI,CAAC,QAAQ,QAAS;AACtB,MAAI,OAAO,kBAAkB,MAAO,OAAM,OAAO;AACjD,QAAM,IAAI,aAAa,SAAS,YAAY;AAC7C;",
+  "names": []
+}

package/dist/chunks/chunk-I2FAK44T.ts

@@ -0,0 +1,324 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  DEFAULT_MAX_CONTEXT_BYTES,
+  MAX_SUBAGENT_TIMEOUT_MS,
+  redactPrivateText,
+  truncateUtf8
+} from "./chunk-H3FP6DLR.ts";
+
+// src/delegation-contract.ts
+import { StringEnum } from "@earendil-works/pi-ai";
+import { Type } from "typebox";
+var DELEGATION_CONTRACT_VERSION = "pi-subagents:delegation:v2";
+var DELEGATION_CONTRACT_LEVELS = ["minimal", "full"];
+var DELEGATION_ENFORCEMENT_MODES = ["audit", "enforce"];
+var AUTHORITY_REQUIREMENTS = ["unspecified", "denied", "required"];
+var DELEGATION_SIDE_EFFECT_POLICIES = ["read-only", "idempotent", "mutating"];
+var MAX_IDENTIFIER_BYTES = 256;
+var MAX_TEXT_BYTES = 16 * 1024;
+var MAX_ITEM_BYTES = 4 * 1024;
+var MAX_ITEMS = 50;
+var MAX_TURNS_OR_TOOLS = 1e6;
+var BoundedString = Type.String({ maxLength: MAX_TEXT_BYTES });
+var BoundedItem = Type.String({ maxLength: MAX_ITEM_BYTES });
+var BoundedItems = Type.Array(BoundedItem, { maxItems: MAX_ITEMS });
+var DependencySchema = Type.Object(
+  {
+    taskId: Type.String({ minLength: 1, maxLength: MAX_IDENTIFIER_BYTES }),
+    artifactId: Type.Optional(Type.String({ minLength: 1, maxLength: MAX_IDENTIFIER_BYTES })),
+    version: Type.Optional(Type.String({ minLength: 1, maxLength: MAX_IDENTIFIER_BYTES }))
+  },
+  { additionalProperties: false }
+);
+var DelegationContractSchema = Type.Object(
+  {
+    version: Type.Literal(DELEGATION_CONTRACT_VERSION),
+    level: StringEnum(DELEGATION_CONTRACT_LEVELS),
+    taskId: Type.String({ minLength: 1, maxLength: MAX_IDENTIFIER_BYTES }),
+    objective: BoundedString,
+    nonGoals: Type.Optional(BoundedItems),
+    dependencies: Type.Optional(Type.Array(DependencySchema, { maxItems: MAX_ITEMS })),
+    requiredInputs: Type.Optional(BoundedItems),
+    requestedAuthority: Type.Optional(
+      Type.Object(
+        {
+          capabilities: Type.Optional(BoundedItems),
+          tools: Type.Optional(BoundedItems),
+          readPaths: Type.Optional(BoundedItems),
+          writePaths: Type.Optional(BoundedItems),
+          network: Type.Optional(StringEnum(AUTHORITY_REQUIREMENTS)),
+          secrets: Type.Optional(StringEnum(AUTHORITY_REQUIREMENTS))
+        },
+        { additionalProperties: false }
+      )
+    ),
+    acceptanceCriteria: Type.Optional(BoundedItems),
+    requiredEvidence: Type.Optional(BoundedItems),
+    budget: Type.Optional(
+      Type.Object(
+        {
+          timeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: MAX_SUBAGENT_TIMEOUT_MS })),
+          maxTurns: Type.Optional(Type.Integer({ minimum: 1, maximum: MAX_TURNS_OR_TOOLS })),
+          maxToolCalls: Type.Optional(Type.Integer({ minimum: 1, maximum: MAX_TURNS_OR_TOOLS }))
+        },
+        { additionalProperties: false }
+      )
+    ),
+    admission: Type.Optional(
+      Type.Object(
+        {
+          contextPressure: StringEnum(["low", "medium", "high"]),
+          independentWorkItems: Type.Integer({ minimum: 1, maximum: 2 }),
+          coupling: StringEnum(["dense", "sparse"]),
+          verificationRequired: Type.Boolean(),
+          verificationAvailable: Type.Boolean(),
+          budgetAllowsChildren: Type.Boolean(),
+          requirementsComplete: Type.Boolean()
+        },
+        { additionalProperties: false }
+      )
+    ),
+    sideEffectPolicy: Type.Optional(StringEnum(DELEGATION_SIDE_EFFECT_POLICIES)),
+    enforcement: Type.Optional(StringEnum(DELEGATION_ENFORCEMENT_MODES))
+  },
+  { additionalProperties: false }
+);
+function normalizeDelegationContract(value) {
+  if (!isPlainObject(value)) return void 0;
+  if (!hasOnlyKeys(value, [
+    "version",
+    "level",
+    "taskId",
+    "objective",
+    "nonGoals",
+    "dependencies",
+    "requiredInputs",
+    "requestedAuthority",
+    "acceptanceCriteria",
+    "requiredEvidence",
+    "budget",
+    "admission",
+    "sideEffectPolicy",
+    "enforcement"
+  ])) {
+    return void 0;
+  }
+  if (value.version !== DELEGATION_CONTRACT_VERSION || typeof value.level !== "string" || !DELEGATION_CONTRACT_LEVELS.includes(
+    value.level
+  ) || typeof value.taskId !== "string" || !value.taskId.trim() || typeof value.objective !== "string") {
+    return void 0;
+  }
+  const taskId = bounded(value.taskId, MAX_IDENTIFIER_BYTES);
+  const objective = bounded(value.objective, MAX_TEXT_BYTES);
+  if (!taskId || !objective) return void 0;
+  const nonGoals = normalizeStrings(value.nonGoals);
+  const requiredInputs = normalizeStrings(value.requiredInputs);
+  const acceptanceCriteria = normalizeStrings(value.acceptanceCriteria);
+  const requiredEvidence = normalizeStrings(value.requiredEvidence);
+  if (!nonGoals || !requiredInputs || !acceptanceCriteria || !requiredEvidence) return void 0;
+  const dependencies = normalizeDependencies(value.dependencies);
+  if (!dependencies) return void 0;
+  const authority = normalizeAuthority(value.requestedAuthority);
+  if (authority === false) return void 0;
+  const budget = normalizeBudget(value.budget);
+  if (budget === false) return void 0;
+  const admission = normalizeAdmission(value.admission);
+  if (admission === false) return void 0;
+  const sideEffectPolicy = value.sideEffectPolicy ?? "mutating";
+  if (typeof sideEffectPolicy !== "string" || !DELEGATION_SIDE_EFFECT_POLICIES.includes(
+    sideEffectPolicy
+  )) {
+    return void 0;
+  }
+  const enforcement = value.enforcement ?? "audit";
+  if (typeof enforcement !== "string" || !DELEGATION_ENFORCEMENT_MODES.includes(
+    enforcement
+  )) {
+    return void 0;
+  }
+  return {
+    version: DELEGATION_CONTRACT_VERSION,
+    level: value.level,
+    taskId,
+    objective,
+    nonGoals,
+    dependencies,
+    requiredInputs,
+    ...authority === void 0 ? {} : { requestedAuthority: authority },
+    acceptanceCriteria,
+    requiredEvidence,
+    ...budget === void 0 ? {} : { budget },
+    ...admission === void 0 ? {} : { admission },
+    sideEffectPolicy,
+    enforcement
+  };
+}
+function appendDelegationContract(prompt, value, maxBytes = DEFAULT_MAX_CONTEXT_BYTES) {
+  const contract = normalizeDelegationContract(value);
+  if (!contract) return { text: prompt, truncated: false };
+  const suffix = [
+    "",
+    "Delegation contract:",
+    JSON.stringify(contract),
+    "The requested authority is advisory until an executor-owned ExecutionPlan confirms which controls are enforceable and effective.",
+    "Acknowledge missing inputs, authority, capabilities, or verification instead of guessing."
+  ].join("\n");
+  const suffixBytes = Buffer.byteLength(suffix, "utf8");
+  const boundedPrompt = truncateUtf8(
+    redactPrivateText(prompt),
+    Math.max(0, maxBytes - suffixBytes)
+  );
+  const text = truncateUtf8(`${boundedPrompt.text}${suffix}`, maxBytes);
+  return {
+    text: text.text,
+    contract,
+    truncated: boundedPrompt.truncated || text.truncated
+  };
+}
+function normalizeAdmission(value) {
+  if (value === void 0) return void 0;
+  if (!isPlainObject(value)) return false;
+  if (!hasOnlyKeys(value, [
+    "contextPressure",
+    "independentWorkItems",
+    "coupling",
+    "verificationRequired",
+    "verificationAvailable",
+    "budgetAllowsChildren",
+    "requirementsComplete"
+  ]) || !["low", "medium", "high"].includes(String(value.contextPressure)) || !Number.isSafeInteger(value.independentWorkItems) || Number(value.independentWorkItems) < 1 || Number(value.independentWorkItems) > 2 || !["dense", "sparse"].includes(String(value.coupling)) || typeof value.verificationRequired !== "boolean" || typeof value.verificationAvailable !== "boolean" || typeof value.budgetAllowsChildren !== "boolean" || typeof value.requirementsComplete !== "boolean") {
+    return false;
+  }
+  return {
+    contextPressure: value.contextPressure,
+    independentWorkItems: Number(value.independentWorkItems),
+    coupling: value.coupling,
+    verificationRequired: value.verificationRequired,
+    verificationAvailable: value.verificationAvailable,
+    budgetAllowsChildren: value.budgetAllowsChildren,
+    requirementsComplete: value.requirementsComplete
+  };
+}
+function normalizeDependencies(value) {
+  if (value === void 0) return [];
+  if (!Array.isArray(value) || value.length > MAX_ITEMS) return void 0;
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const item of value) {
+    if (!isPlainObject(item) || !hasOnlyKeys(item, ["taskId", "artifactId", "version"]) || typeof item.taskId !== "string") {
+      return void 0;
+    }
+    const taskId = bounded(item.taskId, MAX_IDENTIFIER_BYTES);
+    if (!taskId || seen.has(taskId)) return void 0;
+    seen.add(taskId);
+    const artifactId = optionalString(item.artifactId, MAX_IDENTIFIER_BYTES);
+    const version = optionalString(item.version, MAX_IDENTIFIER_BYTES);
+    if (artifactId === false || version === false) return void 0;
+    result.push({
+      taskId,
+      ...artifactId === void 0 ? {} : { artifactId },
+      ...version === void 0 ? {} : { version }
+    });
+  }
+  return result;
+}
+function normalizeAuthority(value) {
+  if (value === void 0) return void 0;
+  if (!isPlainObject(value)) return false;
+  if (!hasOnlyKeys(value, ["capabilities", "tools", "readPaths", "writePaths", "network", "secrets"])) {
+    return false;
+  }
+  const capabilities = normalizeOptionalStrings(value.capabilities);
+  const tools = normalizeOptionalStrings(value.tools);
+  const readPaths = normalizeOptionalStrings(value.readPaths);
+  const writePaths = normalizeOptionalStrings(value.writePaths);
+  if (capabilities === false || tools === false || readPaths === false || writePaths === false) {
+    return false;
+  }
+  const network = normalizeAuthorityRequirement(value.network);
+  const secrets = normalizeAuthorityRequirement(value.secrets);
+  if (network === false || secrets === false) return false;
+  return {
+    ...capabilities === void 0 ? {} : { capabilities },
+    ...tools === void 0 ? {} : { tools },
+    ...readPaths === void 0 ? {} : { readPaths },
+    ...writePaths === void 0 ? {} : { writePaths },
+    ...network === void 0 ? {} : { network },
+    ...secrets === void 0 ? {} : { secrets }
+  };
+}
+function normalizeBudget(value) {
+  if (value === void 0) return void 0;
+  if (!isPlainObject(value) || !hasOnlyKeys(value, ["timeoutMs", "maxTurns", "maxToolCalls"])) {
+    return false;
+  }
+  const timeoutMs = optionalInteger(value.timeoutMs, MAX_SUBAGENT_TIMEOUT_MS);
+  const maxTurns = optionalInteger(value.maxTurns, MAX_TURNS_OR_TOOLS);
+  const maxToolCalls = optionalInteger(value.maxToolCalls, MAX_TURNS_OR_TOOLS);
+  if (timeoutMs === false || maxTurns === false || maxToolCalls === false) return false;
+  return {
+    ...timeoutMs === void 0 ? {} : { timeoutMs },
+    ...maxTurns === void 0 ? {} : { maxTurns },
+    ...maxToolCalls === void 0 ? {} : { maxToolCalls }
+  };
+}
+function normalizeStrings(value) {
+  if (value === void 0) return [];
+  const normalized = normalizeOptionalStrings(value);
+  return normalized === false ? void 0 : normalized;
+}
+function normalizeOptionalStrings(value) {
+  if (value === void 0) return void 0;
+  if (!Array.isArray(value) || value.length > MAX_ITEMS) return false;
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const item of value) {
+    if (typeof item !== "string") return false;
+    const normalized = bounded(item, MAX_ITEM_BYTES);
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+  }
+  return result;
+}
+function normalizeAuthorityRequirement(value) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "string" || !AUTHORITY_REQUIREMENTS.includes(value)) {
+    return false;
+  }
+  return value;
+}
+function optionalString(value, maxBytes) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "string") return false;
+  const normalized = bounded(value, maxBytes);
+  return normalized || false;
+}
+function optionalInteger(value, max) {
+  if (value === void 0) return void 0;
+  if (!Number.isSafeInteger(value) || value < 1 || value > max)
+    return false;
+  return value;
+}
+function bounded(value, maxBytes) {
+  return truncateUtf8(redactPrivateText(value), maxBytes).text.trim();
+}
+function hasOnlyKeys(value, allowed) {
+  return Object.keys(value).every((key) => allowed.includes(key));
+}
+function isPlainObject(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+
+export {
+  DELEGATION_CONTRACT_VERSION,
+  DELEGATION_CONTRACT_LEVELS,
+  DELEGATION_ENFORCEMENT_MODES,
+  AUTHORITY_REQUIREMENTS,
+  DELEGATION_SIDE_EFFECT_POLICIES,
+  DelegationContractSchema,
+  normalizeDelegationContract,
+  appendDelegationContract
+};
+//# sourceMappingURL=chunk-I2FAK44T.ts.map