@orion-agents/orion-code 0.1.4 → 0.1.6

package/README.md

@@ -2,7 +2,7 @@
 
 > **Goal-driven coding agent for the terminal.**
 >
-> v0.1.4 — Goal continuity, model config & shell sandbox POC
+> v0.1.6 — bounded Goal control, deterministic release gates, terminal hardening
 
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D20.0-green.svg)](https://nodejs.org)
@@ -29,14 +29,16 @@ Orion Code is a terminal-based coding agent. It wraps LLM APIs in a harness of s
 
 ### Requirements
 
-- Node.js >= 20.0
+- Node.js 20, 22, or 24 LTS
 - npm >= 9.0
 
 ### Install & Run
 
 ```bash
-# Install the v0.1.4 release:
-npm install -g @orion-agents/orion-code@0.1.4
+# Install the exact audited version:
+npm install -g @orion-agents/orion-code@0.1.6
+# Or use the prerelease channel (next=0.1.6):
+npm install -g @orion-agents/orion-code@next
 
 # Or run from a checked-out source tree:
 npm ci
@@ -66,16 +68,16 @@ orion doctor
 orion diff
 
 # Commit plan
-orion commit
+orion commit-plan
 
 # Experimental non-interactive print mode
 orion -p "review the current git diff"
 echo "summarize this project" | orion --print
 ```
 
-> **Pre-release note.** `0.1.4` is the in-development line on the `v0.1.4` branch and is
-> not on npm yet — `0.1.3` is the current published release. Until `v0.1.4` is tagged and
-> published, install from a source checkout. This note is removed at release.
+> **Release status.** `0.1.6` is published through npm `next`; stable `latest` remains
+> `0.1.4`. The merge, Git tag/GitHub Release, npm publication, registry installation,
+> and stable promotion are recorded as separate delivery states.
 
 ### TUI startup banner
 
@@ -108,7 +110,7 @@ Terminal validation remains part of the release gate.
 | Feature                | Description                                                                   |
 | ---------------------- | ----------------------------------------------------------------------------- |
 | **Tool Orchestration** | 29 built-in tools: file I/O, shell, web, memory, git, LSP, Goal, and planning |
-| **Multi-Model**        | OpenAI-compatible providers with model switching                              |
+| **Multi-Model**        | Provider profiles, model switching, and explicit effort capabilities          |
 | **Context Awareness**  | Per-model context windows, token-based auto-compact                           |
 | **MCP Protocol**       | stdio MCP servers with heartbeat + reconnect                                  |
 | **Memory System**      | User / Project / Session memory with semantic search                          |
@@ -117,7 +119,7 @@ Terminal validation remains part of the release gate.
 | **Safety Boundaries**  | Bash safety checks, audit logging, permission modes                           |
 | **Skills System**      | Builtin + user + project-level skill extensions                               |
 | **Multi-Agent**        | Subagent fork/worker-pool with smart routing                                  |
-| **CLI Utilities**      | `doctor`, `diff`, `commit`, experimental `-p` print mode                      |
+| **CLI Utilities**      | `doctor`, `diff`, `commit-plan`, experimental `-p` print mode                 |
 
 ## Configuration
 
@@ -137,10 +139,18 @@ Terminal validation remains part of the release gate.
       "provider": "my-provider",
       "model": "model-name",
       "contextWindow": 200000,
-      "maxOutputTokens": 64000
+      "maxOutputTokens": 64000,
+      "reasoningCapability": {
+        "kind": "effort-level",
+        "supportedLevels": ["low", "medium", "high"],
+        "defaultLevel": "medium",
+        "adapter": "openai-chat-reasoning-effort",
+        "source": "config"
+      }
     }
   ],
   "defaultModel": "my-model",
+  "defaultEffort": "auto",
   "toolConfirmation": "deny",
   "subagents": { "mode": "auto", "maxParallel": 3 }
 }
@@ -148,17 +158,32 @@ Terminal validation remains part of the release gate.
 
 Configuration: `~/.orion-code/orion.json` | Priority: `CLI flags > config > env vars > defaults`
 
+`reasoningCapability` is an explicit provider contract, not a model-name guess. Only add it
+after the configured endpoint is known to accept the selected adapter and levels. A legacy
+`"reasoning": true` flag does not enable a wire parameter. With no explicit capability Orion
+keeps `/effort` unavailable and sends no reasoning-effort override. Project defaults can be set
+with `projects["<absolute path>"].defaultEffort`; session overrides are changed with `/effort`.
+
 The renderer is a runtime choice rather than a persisted setting: `orion` starts
 the TUI, while `--ui terminal` selects the technical renderer.
 
-### Project tool rules (`allowedTools`)
+### Interactive and scoped tool permissions (`allowedTools`)
+
+When a tool needs confirmation, the TUI, Ink UI, and technical Terminal renderer wait for one
+of four explicit decisions: allow once, always allow this tool in the current project, always
+allow it on this machine for every project, or deny. Persistent approvals are written before
+the waiting tool continues. A write failure denies the call.
 
-Per-project permission rules live under `projects["<absolute path>"].allowedTools`.
-They are scoped to a single repository and are evaluated on top of each tool's own
-policy — they can tighten the gate, never loosen it.
+Machine-wide rules live at root `allowedTools`; project rules live under
+`projects["<absolute path>"].allowedTools`. Both sets are evaluated, and the most restrictive
+matching effect wins (`deny` > `ask` > `allow`). A durable `allow` can skip repeated prompts for
+a tool with known risk metadata, including external tools and explicit file edits, but it cannot
+auto-approve destructive shell/system operations or override a hard tool-policy denial, plan mode,
+an explicit `ask`/`deny` rule, or missing risk metadata.
 
 ```json
 {
+  "allowedTools": ["allow:web_fetch"],
   "projects": {
     "/Users/me/work/api": {
       "allowedTools": [
@@ -177,8 +202,11 @@ policy — they can tighten the gate, never loosen it.
 - The subject is the call's `command` / `file_path` / `path` / `url` / `pattern` / `query`
   argument, whichever comes first.
 - Conflicts resolve most-restrictive-first (`deny` > `ask` > `allow`), independent of order.
+- Interactive persistent choices add an exact tool rule such as `allow:exec_command`; edit
+  `~/.orion-code/orion.json` to audit or revoke a stored rule. `/permissions show` reports the
+  active machine-wide and project rule counts.
 - `allow` only skips an interactive confirmation. It never overrides a tool's own `deny`,
-  never escapes plan mode, and never auto-approves a destructive invocation.
+  never escapes plan mode, and never applies when risk metadata is missing.
 - Malformed entries are ignored and listed by `/config` rather than silently applied.
 
 ### Shell execution sandbox (`sandbox`)
@@ -225,26 +253,29 @@ backend is probed at runtime and a configured-but-unusable sandbox **fails close
 
 ## Interactive Commands
 
-| Command                | Description                                                                 |
-| ---------------------- | --------------------------------------------------------------------------- |
-| `/help`                | Show help                                                                   |
-| `/target` (`/goal`)    | Create, inspect, pause, resume, replace, budget, or clear a persistent goal |
-| `/status`              | System status                                                               |
-| `/model`               | View or switch models                                                       |
-| `/config`              | Show configuration                                                          |
-| `/usage`               | Token usage and cost                                                        |
-| `/compact`             | Trigger context compact                                                     |
-| `/sessions`            | List recent sessions                                                        |
-| `/resume`              | Resume last session                                                         |
-| `/memory`              | Memory system status                                                        |
-| `/skills`              | List loaded skills                                                          |
-| `/mcp`                 | MCP server status                                                           |
-| `/doctor`              | Run diagnostics                                                             |
-| `/diff`                | Workspace diff                                                              |
-| `/commit`              | Commit plan                                                                 |
-| `/clear`               | Clear screen                                                                |
-| `/context-clear --yes` | Clear in-memory model context; preserve the saved session                   |
-| `/exit`                | Exit                                                                        |
+| Command                | Description                                                                |
+| ---------------------- | -------------------------------------------------------------------------- |
+| `/help`                | Show help                                                                  |
+| `/goal` (`/target`)    | Create, inspect, pause, resume, replace, budget, or exit a persistent goal |
+| `/status`              | System status                                                              |
+| `/model`               | View or switch models                                                      |
+| `/effort`              | View or change supported reasoning effort                                  |
+| `/mode`                | View or change agent working mode                                          |
+| `/permissions`         | View or change tool confirmation and edit policy                           |
+| `/config`              | Show configuration                                                         |
+| `/usage`               | Token usage and cost                                                       |
+| `/compact`             | Trigger context compact                                                    |
+| `/session`             | List, inspect, or rename sessions                                          |
+| `/resume`              | Resume last session                                                        |
+| `/memory`              | Memory status, reference validation, and semantic reindexing               |
+| `/skills`              | List loaded skills                                                         |
+| `/mcp`                 | MCP server status                                                          |
+| `/doctor`              | Run diagnostics                                                            |
+| `/diff`                | Workspace diff                                                             |
+| `/commit-plan`         | Create a read-only commit plan                                             |
+| `/clear`               | Clear screen                                                               |
+| `/context clear --yes` | Clear in-memory model context; preserve the saved session                  |
+| `/exit`                | Exit                                                                       |
 
 TUI is the public product interface and the default launch path. `terminal-ui`
 is maintained as a technical diagnostics/compatibility renderer, not a second
@@ -253,7 +284,7 @@ scheduled for removal in v0.2.0.
 
 ### Persistent Goal safety contract
 
-`/target <objective>` creates one active Goal for the current session. Automatic
+`/goal <objective>` creates one active Goal for the current session. Automatic
 continuations are typed runtime requests: they are not echoed or stored as fake
 user messages. After a process restart or `/resume`, an active Goal is restored
 in a visible paused state; run `/target resume` to continue deliberately.
@@ -262,10 +293,14 @@ The model may request `complete` or `blocked`, but cannot set either terminal
 state directly. Orion records runtime/tool evidence and audits every success
 criterion. Missing, failed, unmapped, wrong-kind, expired, or stale evidence keeps the
 Goal open. Criteria that require human acceptance can only receive trusted
-`user` evidence from `/target confirm <criterion-id>`; model tools cannot mint
+`user` evidence from `/goal confirm <criterion-id>`; model tools cannot mint
 that confirmation. v0.1.2 remains single-session and single-active-Goal; it does not
 promise multi-Goal scheduling or unattended background execution.
 
+Use `/goal exit` to abort the active turn, reject any pending permission request,
+and clear the persisted Goal. The old `/goal clear --yes` and `/target clear --yes`
+syntax is intentionally unsupported in v0.1.6.
+
 ## Migration from OpenHorse
 
 ```bash

package/README.zh-CN.md

@@ -3,7 +3,7 @@
 > **Orion Code — 通用 Agent 驾驭框架**
 > 一个 CLI 驱动的编码 Agent，具备安全边界、工具编排、记忆系统和上下文管理。
 >
-> v0.1.4 — Goal 连续性、模型配置与命令沙箱 POC
+> v0.1.6 — 有界 Goal 控制、确定性发布门与终端安全加固
 
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D20.0-green.svg)](https://nodejs.org)
@@ -60,7 +60,7 @@
 
 ### 环境要求
 
-- Node.js >= 20.0
+- Node.js 20、22 或 24 LTS
 - npm >= 9.0
 
 ### 安装运行
@@ -104,18 +104,20 @@ npm start -- --print "review the current git diff"
 
 ### 全局安装
 
-固定安装 v0.1.4：
+固定安装审计过的精确版本：
 
 ```bash
-npm install -g @orion-agents/orion-code@0.1.4
+npm install -g @orion-agents/orion-code@0.1.6
+# 或使用预发布渠道（next=0.1.6）：
+npm install -g @orion-agents/orion-code@next
 # 任意目录运行
 orion
 ```
 
 也可以在源码工作树中使用 `npm ci && npm run build && npm start`。
 
-> **预发布说明**：`0.1.4` 是 `v0.1.4` 分支上的开发版本，尚未发布到 npm——当前已发布版本
-> 仍是 `0.1.3`。在 `v0.1.4` 打 tag 并发布之前，请从源码工作树安装。该说明将在发版时移除。
+> **发布状态**：`0.1.6` 已通过 npm `next` 发布；稳定版 `latest` 仍为 `0.1.4`。
+> PR 合并、Git tag/GitHub Release、npm 发布、registry 安装和稳定版提升分别记录。
 
 公众体验、交互优化和新增工作流优先落在 TUI。`terminal-ui` 不作为与
 TUI 并行发展的公众产品；Ink 只保留迁移期兼容，不再增加产品能力。
@@ -132,6 +134,9 @@ TUI 并行发展的公众产品；Ink 只保留迁移期兼容，不再增加产
 evidence，模型工具不能伪造该确认。
 v0.1.2 只覆盖单 Session、单 Active Goal，不承诺多 Goal 调度或无人值守后台执行。
 
+使用 `/goal exit` 会中止当前 turn、拒绝待确认工具并清除持久 Goal。v0.1.6
+明确不再支持旧 `/goal clear --yes` 与 `/target clear --yes` 语法。
+
 ---
 
 ## 配置
@@ -409,7 +414,7 @@ ctxPercent = (promptTokens / 模型上下文窗口) × 100
 | 命令                   | 说明                                                |
 | ---------------------- | --------------------------------------------------- |
 | `/help`                | 显示当前 renderer 可用的完整命令列表                |
-| `/target`（`/goal`）   | 创建、查看、暂停、恢复、替换或清除持久 Goal         |
+| `/target`（`/goal`）   | 创建、查看、暂停、恢复、替换、预算或退出持久 Goal   |
 | `/status`              | 系统状态总览                                        |
 | `/model`               | 查看或切换模型                                      |
 | `/config`              | 显示当前生效配置                                    |
@@ -417,7 +422,7 @@ ctxPercent = (promptTokens / 模型上下文窗口) × 100
 | `/compact`             | 手动触发上下文压缩                                  |
 | `/sessions`            | 列出或搜索最近会话                                  |
 | `/resume`              | 恢复已有会话                                        |
-| `/memory`              | 查看记忆状态；`/memory reindex` 重建语义索引        |
+| `/memory`              | 记忆状态、引用漂移校验与语义索引重建                |
 | `/skills`              | 列出已加载技能                                      |
 | `/tools`               | 列出内置和 MCP 工具                                 |
 | `/mcp`                 | 查看 MCP Server 状态                                |
@@ -465,7 +470,24 @@ orion-code/
 
 ## 版本历史
 
-### v0.1.4（开发中，未发布）
+### v0.1.6（已发布至 next）
+
+- Goal 创建需要显式用户授权，自动 continuation 有界，`/goal exit` 提供确定退出路径；
+- 修复 native migration、测试确定性、seatbelt/exec cwd 与 terminal control-sequence 安全问题；
+- 已合并、创建 `v0.1.6` tag 和 GitHub Release，并通过 npm `next` 发布；未移动稳定版 `latest`。
+
+### v0.1.5（已发布至 next）
+
+- 统一类型化命令描述、TUI 命令控制面与 Provider-aware Effort；
+- 修复 Goal/TUI 展示与授权边界，并加强跨进程持久化、安全和发布门禁；
+- 以 npm `next` dist-tag 发布，不移动稳定版 `latest`。
+
+### v0.1.4-2（已发布至 next）
+
+- 汇总 v0.1.4 后续的安全、持久化、Goal/runtime、Research、依赖与发布门禁修复；
+- 以 npm `next` dist-tag 发布，不移动稳定版 `latest`。
+
+### v0.1.4（已发布）
 
 - 版本元数据对齐：`package.json` / `package-lock.json` 升至 `0.1.4`，`orion --version`、
   出站 `User-Agent` 与崩溃/遥测上报不再误报 `0.1.3`；
@@ -473,7 +495,7 @@ orion-code/
   类型守卫，顺带修复被 `any` 掩盖的真实缺陷；
 - 可靠性：持久化与鉴权路径不再静默吞掉异常，ESLint 启用 `no-empty` 门禁。
 
-### v0.1.3（最新已发布版本）
+### v0.1.3（已发布）
 
 - `/model` 与 `/models` 拆分：`/model` 只显示当前模型信息，`/models` 承接交互式切换；
 - `modelRegistry` 成为模型展示与切换的唯一事实源，静态 catalog 退为 legacy fallback；

package/dist/agents/coder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coder.d.ts","sourceRoot":"","sources":["../../src/agents/coder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEzE,qBAAa,UAAW,SAAQ,SAAS;gBAC3B,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAUnC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;YAwBhC,aAAa;CAO5B"}
+{"version":3,"file":"coder.d.ts","sourceRoot":"","sources":["../../src/agents/coder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAkB,MAAM,eAAe,CAAC;AAOzF,qBAAa,UAAW,SAAQ,SAAS;gBAC3B,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAUnC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;YAwBhC,aAAa;CAO5B"}

package/dist/agents/coder.js.map

@@ -1 +1 @@
-{"version":3,"file":"coder.js","sourceRoot":"","sources":["../../src/agents/coder.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,yCAAyE;AAEzE,MAAa,UAAW,SAAQ,iBAAS;IACvC,YAAY,MAA6B;QACvC,KAAK,CAAC;YACJ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,OAAO;YACzB,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,OAAO;YAC7B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,8BAA8B;YAClE,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC;YAC3F,GAAG,MAAM;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAU;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAExD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAU;QACpC,OAAO;QACP,OAAO;YACL,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,aAAa;YAC/C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF;AA1CD,gCA0CC"}
+{"version":3,"file":"coder.js","sourceRoot":"","sources":["../../src/agents/coder.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,yCAAyF;AAOzF,MAAa,UAAW,SAAQ,iBAAS;IACvC,YAAY,MAA6B;QACvC,KAAK,CAAC;YACJ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,OAAO;YACzB,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,OAAO;YAC7B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,8BAA8B;YAClE,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC;YAC3F,GAAG,MAAM;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAU;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAExD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAU;QACpC,OAAO;QACP,OAAO;YACL,OAAO,EAAE,gBAAgB,IAAI,CAAC,IAAI,aAAa;YAC/C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF;AA1CD,gCA0CC"}

package/dist/agents/fork.d.ts

@@ -4,16 +4,24 @@
  * Fork 一个子 Agent 继承父上下文，执行独立任务后返回结果。
  * 参考 OpenClaude 的 forkSubagent.ts 实现。
  */
-import type { Message } from '../services/llm';
-import type { OpenHorseTool } from '../framework/tool';
+import type { LLMService, Message } from '../services/llm';
+import type { OrionCodeTool } from '../framework/tool';
 import type { PermissionMode } from '../commands/types';
+import type { ToolConfirmationPolicy } from '../services/config';
+import type { ToolAllowlistEvaluator } from '../services/tool-allowlist';
 export interface ForkOptions {
     /** 继承父上下文（messages + systemPrompt） */
     inheritContext: boolean;
     /** 权限模式 */
     permissionMode?: PermissionMode;
-    /** 可用工具（默认 TOOLS） */
-    tools?: OpenHorseTool[];
+    /** LLM 服务实例。Fork 不会从 CLI 单例中隐式加载。 */
+    llm?: LLMService;
+    /** 可用工具（默认最小只读工具集） */
+    tools?: OrionCodeTool[];
+    /** 需要交互确认时的无 UI 回退策略 */
+    toolConfirmation?: ToolConfirmationPolicy;
+    /** 项目级工具 allow/ask/deny 规则 */
+    toolAllowlist?: ToolAllowlistEvaluator;
     /** 最大轮次 */
     maxTurns?: number;
     /** 后台执行（不阻塞父 Agent） */

package/dist/agents/fork.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fork.d.ts","sourceRoot":"","sources":["../../src/agents/fork.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQxD,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW;IACX,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,qBAAqB;IACrB,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,WAAW;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY;IACZ,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,YAAY;IACZ,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AAMD;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA+H5E;AA6BD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAMD,OAAO,EAAE,WAAW,IAAI,mBAAmB,EAAE,UAAU,IAAI,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"fork.d.ts","sourceRoot":"","sources":["../../src/agents/fork.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAQzE,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW;IACX,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,qCAAqC;IACrC,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,sBAAsB;IACtB,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,8BAA8B;IAC9B,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,WAAW;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY;IACZ,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,YAAY;IACZ,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AAMD;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA0I5E;AAoBD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAMD,OAAO,EAAE,WAAW,IAAI,mBAAmB,EAAE,UAAU,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/agents/fork.js

@@ -18,7 +18,7 @@ const tools_1 = require("../tools");
  * Fork 子 Agent 执行任务
  */
 async function forkSubagent(options) {
-    const { inheritContext = true, tools = tools_1.TOOLS, maxTurns = 5, background = false, taskDescription, parentMessages = [], parentSystemPrompt, cwd = process.cwd(), memoryContent = '', skillsContent = '', } = options;
+    const { inheritContext = true, llm, tools = getDefaultForkTools(), permissionMode = 'plan', toolConfirmation, toolAllowlist, maxTurns = 5, background = false, taskDescription, parentMessages = [], parentSystemPrompt, cwd = process.cwd(), memoryContent = '', skillsContent = '', } = options;
     const startTime = Date.now();
     // 构建子 Agent 的消息历史
     let messages;
@@ -47,26 +47,27 @@ async function forkSubagent(options) {
             { role: 'user', content: taskDescription },
         ];
     }
-    // 工具执行器
+    const toolContext = {
+        cwd,
+        config: { name: 'orion-code', mode: 'development' },
+        permissionMode,
+        toolAllowlist,
+    };
+    // query scheduler 在调用执行器前统一应用 tool policy、permission mode 与 allowlist。
     const toolExecutor = async (name, args) => {
-        // 简化版：直接执行工具
         const tool = tools.find(t => t.name === name);
         if (!tool) {
             return JSON.stringify({ success: false, error: `Unknown tool: ${name}` });
         }
-        // 调用工具的 execute
-        const context = { cwd, config: { name: 'orion-code', mode: 'development' } };
         try {
-            const result = await tool.execute(args, context);
+            const result = await tool.execute(args, toolContext);
             return JSON.stringify(result);
         }
-        catch (err) {
-            return JSON.stringify({ success: false, error: err.message });
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return JSON.stringify({ success: false, error: message });
         }
     };
-    // 简化的 LLM（不使用完整 LLMService，避免依赖）
-    // 这里假设有全局的 llm 实例可用
-    const llm = getGlobalLLM();
     if (!llm) {
         return {
             success: false,
@@ -86,6 +87,10 @@ async function forkSubagent(options) {
             toolExecutor,
             llm,
             maxTurns,
+            permissionMode,
+            toolConfirmation,
+            toolAllowlist,
+            toolContext,
             streamCallbacks: {
                 onChunk: (chunk) => {
                     if (!background) {
@@ -120,34 +125,25 @@ async function forkSubagent(options) {
             tokenUsage: finalUsage,
         };
     }
-    catch (err) {
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
         return {
             success: false,
             content: '',
-            error: err.message,
+            error: message,
             duration: Date.now() - startTime,
         };
     }
 }
-// ============================================================================
-// 辅助函数
-// ============================================================================
-/**
- * 获取全局 LLM 实例（从 CLI 模块）
- * 注意：这是一个简化实现，实际应该通过参数传递 LLM
- */
-function getGlobalLLM() {
-    // 尝试从全局获取
-    try {
-        const cliModule = require('../cli');
-        if (cliModule.llm) {
-            return cliModule.llm;
-        }
-    }
-    catch {
-        // ignore
-    }
-    return null;
+const DEFAULT_FORK_TOOL_NAMES = new Set([
+    'read_file',
+    'list_files',
+    'glob',
+    'grep',
+    'batch_read',
+]);
+function getDefaultForkTools() {
+    return tools_1.TOOLS.filter(tool => DEFAULT_FORK_TOOL_NAMES.has(tool.name));
 }
 // ============================================================================
 // 防递归保护

package/dist/agents/fork.js.map

@@ -1 +1 @@
-{"version":3,"file":"fork.js","sourceRoot":"","sources":["../../src/agents/fork.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAoDH,oCA+HC;AAgCD,sDAEC;AAKD,0DAEC;AAvND,4CAA0E;AAC1E,oCAAiC;AAuCjC,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;GAEG;AACI,KAAK,UAAU,YAAY,CAAC,OAAoB;IACrD,MAAM,EACJ,cAAc,GAAG,IAAI,EACrB,KAAK,GAAG,aAAK,EACb,QAAQ,GAAG,CAAC,EACZ,UAAU,GAAG,KAAK,EAClB,eAAe,EACf,cAAc,GAAG,EAAE,EACnB,kBAAkB,EAClB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,aAAa,GAAG,EAAE,EAClB,aAAa,GAAG,EAAE,GACnB,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,kBAAkB;IAClB,IAAI,QAAmB,CAAC;IAExB,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,iBAAiB;QACjB,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAC/B,eAAe;QACf,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,eAAe,eAAe,iJAAiJ;SACzL,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,UAAU;QACV,MAAM,SAAS,GAAkB;YAC/B,GAAG;YACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,KAAK;YACL,aAAa;YACb,aAAa;SACd,CAAC;QACF,MAAM,YAAY,GAAG,kBAAkB,IAAI,IAAA,2BAAe,EAAC,SAAS,CAAC,CAAC;QACtE,QAAQ,GAAG;YACT,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,QAAQ;IACR,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,IAA6B,EAAE,EAAE;QACzE,aAAa;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,gBAAgB;QAChB,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IAEF,iCAAiC;IACjC,oBAAoB;IACpB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,oCAAoC;YAC3C,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;IAED,OAAO;IACP,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,UAA0E,CAAC;IAC/E,MAAM,SAAS,GAA2E,EAAE,CAAC;IAE7F,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAA,iBAAK,EAAC;YAC9B,QAAQ;YACR,KAAK;YACL,YAAY;YACZ,GAAG;YACH,QAAQ;YACR,eAAe,EAAE;gBACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,mBAAmB;wBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;aACF;SACF,CAAC,EAAE,CAAC;YACH,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,WAAW;oBACd,SAAS;oBACT,MAAM;gBACR,KAAK,aAAa;oBAChB,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,UAAU;oBACb,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC7B,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;oBACzB,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,YAAY;YACrB,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,YAAY;IACnB,UAAU;IACV,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,GAAG,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAE/C;;GAEG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,OAAO,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,OAAO,GAAG,oBAAoB,KAAK,OAAO,EAAE,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"fork.js","sourceRoot":"","sources":["../../src/agents/fork.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA4DH,oCA0IC;AAuBD,sDAEC;AAKD,0DAEC;AA/ND,4CAA0E;AAC1E,oCAAiC;AA6CjC,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;GAEG;AACI,KAAK,UAAU,YAAY,CAAC,OAAoB;IACrD,MAAM,EACJ,cAAc,GAAG,IAAI,EACrB,GAAG,EACH,KAAK,GAAG,mBAAmB,EAAE,EAC7B,cAAc,GAAG,MAAM,EACvB,gBAAgB,EAChB,aAAa,EACb,QAAQ,GAAG,CAAC,EACZ,UAAU,GAAG,KAAK,EAClB,eAAe,EACf,cAAc,GAAG,EAAE,EACnB,kBAAkB,EAClB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,aAAa,GAAG,EAAE,EAClB,aAAa,GAAG,EAAE,GACnB,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,kBAAkB;IAClB,IAAI,QAAmB,CAAC;IAExB,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,iBAAiB;QACjB,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAC/B,eAAe;QACf,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,eAAe,eAAe,iJAAiJ;SACzL,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,UAAU;QACV,MAAM,SAAS,GAAkB;YAC/B,GAAG;YACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,KAAK;YACL,aAAa;YACb,aAAa;SACd,CAAC;QACF,MAAM,YAAY,GAAG,kBAAkB,IAAI,IAAA,2BAAe,EAAC,SAAS,CAAC,CAAC;QACtE,QAAQ,GAAG;YACT,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAgB;QAC/B,GAAG;QACH,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE;QACnD,cAAc;QACd,aAAa;KACd,CAAC;IAEF,uEAAuE;IACvE,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,IAA6B,EAAE,EAAE;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,oCAAoC;YAC3C,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;IAED,OAAO;IACP,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,UAA0E,CAAC;IAC/E,MAAM,SAAS,GAA2E,EAAE,CAAC;IAE7F,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAA,iBAAK,EAAC;YAC9B,QAAQ;YACR,KAAK;YACL,YAAY;YACZ,GAAG;YACH,QAAQ;YACR,cAAc;YACd,gBAAgB;YAChB,aAAa;YACb,WAAW;YACX,eAAe,EAAE;gBACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,mBAAmB;wBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;aACF;SACF,CAAC,EAAE,CAAC;YACH,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,WAAW;oBACd,SAAS;oBACT,MAAM;gBACR,KAAK,aAAa;oBAChB,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,UAAU;oBACb,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC7B,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;oBACzB,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,YAAY;YACrB,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,WAAW;IACX,YAAY;IACZ,MAAM;IACN,MAAM;IACN,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,mBAAmB;IAC1B,OAAO,aAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAE/C;;GAEG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,OAAO,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,OAAO,GAAG,oBAAoB,KAAK,OAAO,EAAE,CAAC;AAC/C,CAAC"}

package/dist/agents/leader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"leader.d.ts","sourceRoot":"","sources":["../../src/agents/leader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEzE,qBAAa,WAAY,SAAQ,SAAS;gBAC5B,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAUnC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;YAyBhC,cAAc;CAO7B"}
+{"version":3,"file":"leader.d.ts","sourceRoot":"","sources":["../../src/agents/leader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAkB,MAAM,eAAe,CAAC;AAOzF,qBAAa,WAAY,SAAQ,SAAS;gBAC5B,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAUnC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;YAyBhC,cAAc;CAO7B"}

package/dist/agents/leader.js.map

@@ -1 +1 @@
-{"version":3,"file":"leader.js","sourceRoot":"","sources":["../../src/agents/leader.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,yCAAyE;AAEzE,MAAa,WAAY,SAAQ,iBAAS;IACxC,YAAY,MAA6B;QACvC,KAAK,CAAC;YACJ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,QAAQ;YAC1B,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,QAAQ;YAC9B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,yBAAyB;YAC7D,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,mBAAmB,EAAE,cAAc,EAAE,YAAY,CAAC;YACzF,GAAG,MAAM;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAU;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAExD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAU;QACrC,cAAc;QACd,OAAO;YACL,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,yBAAyB;YACpD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF;AA3CD,kCA2CC"}
+{"version":3,"file":"leader.js","sourceRoot":"","sources":["../../src/agents/leader.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,yCAAyF;AAOzF,MAAa,WAAY,SAAQ,iBAAS;IACxC,YAAY,MAA6B;QACvC,KAAK,CAAC;YACJ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,QAAQ;YAC1B,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,QAAQ;YAC9B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,yBAAyB;YAC7D,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,mBAAmB,EAAE,cAAc,EAAE,YAAY,CAAC;YACzF,GAAG,MAAM;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAU;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAExD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAU;QACrC,cAAc;QACd,OAAO;YACL,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,yBAAyB;YACpD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF;AA3CD,kCA2CC"}

package/dist/agents/worker-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-pool.d.ts","sourceRoot":"","sources":["../../src/agents/worker-pool.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAgB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AAMzE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACpD,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3C;AAMD,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,kBAAkB,CAAuB;IACjD,OAAO,CAAC,YAAY,CAAK;gBAEb,MAAM,CAAC,EAAE,gBAAgB;IAMrC;;;OAGG;IACG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAqCjF;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAetG;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAShC;;OAEG;IACH,cAAc,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;IAIzC;;OAEG;IACH,YAAY,IAAI,IAAI;IAQpB;;OAEG;IACH,SAAS,IAAI;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB;IAUD;;OAEG;IACH,OAAO,IAAI,IAAI;IAaf,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,cAAc;YAyBR,WAAW;CAwD1B;AAQD,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAKnE;AAED,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}
+{"version":3,"file":"worker-pool.d.ts","sourceRoot":"","sources":["../../src/agents/worker-pool.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAgB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AAMzE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACpD,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3C;AAaD,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,kBAAkB,CAAuB;IACjD,OAAO,CAAC,YAAY,CAAK;gBAEb,MAAM,CAAC,EAAE,gBAAgB;IAMrC;;;OAGG;IACG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAmCjF;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAetG;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAShC;;OAEG;IACH,cAAc,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;IAIzC;;OAEG;IACH,YAAY,IAAI,IAAI;IAQpB;;OAEG;IACH,SAAS,IAAI;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB;IAUD;;OAEG;IACH,OAAO,IAAI,IAAI;IAsBf,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,cAAc;YAyBR,WAAW;CAwD1B;AAQD,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAKnE;AAED,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/agents/worker-pool.js

@@ -32,29 +32,28 @@ class WorkerPool {
         if (idleWorkers.length > 0 || this.workers.size < this.maxWorkers) {
             // 有空闲 Worker 或未达到上限：直接执行
             const workerId = this.allocateWorker(task);
-            const result = await this.executeTask(workerId, task, forkOptions);
-            return result;
+            return this.executeTask(workerId, task, forkOptions);
         }
-        // 无空闲 Worker：加入队列
-        this.taskQueue.push(task);
-        // 等待有空闲 Worker
+        // 无空闲 Worker：入队，待某个 Worker 完成任务后由 drainQueue 取出执行。
+        // 每个入队任务携带自己的 resolver，确保只被执行一次，避免重复执行。
         return new Promise((resolve) => {
-            const checkInterval = setInterval(() => {
-                if (this.getIdleWorkers().length > 0) {
-                    clearInterval(checkInterval);
-                    const workerId = this.allocateWorker(task);
-                    this.executeTask(workerId, task, forkOptions).then(resolve);
+            const finish = (result) => {
+                clearTimeout(timer);
+                resolve(result);
+            };
+            this.taskQueue.push({ task, forkOptions, resolve: finish });
+            // 超时保护：仍未被取出执行时才以超时失败结束。
+            const timer = setTimeout(() => {
+                const idx = this.taskQueue.findIndex(q => q.task === task && q.resolve === finish);
+                if (idx !== -1) {
+                    this.taskQueue.splice(idx, 1);
+                    finish({
+                        success: false,
+                        content: '',
+                        error: 'Task queue timeout',
+                        duration: this.taskTimeout,
+                    });
                 }
-            }, 100);
-            // 超时处理
-            setTimeout(() => {
-                clearInterval(checkInterval);
-                resolve({
-                    success: false,
-                    content: '',
-                    error: 'Task queue timeout',
-                    duration: this.taskTimeout,
-                });
             }, this.taskTimeout);
         });
     }
@@ -119,7 +118,16 @@ class WorkerPool {
                 this.workers.set(workerId, { ...info, status: 'failed' });
             }
         }
-        this.taskQueue = [];
+        // 解除仍在队列中的任务，避免 submit 返回的 Promise 永远挂起。
+        while (this.taskQueue.length > 0) {
+            const item = this.taskQueue.shift();
+            item.resolve({
+                success: false,
+                content: '',
+                error: 'Worker pool stopped',
+                duration: 0,
+            });
+        }
     }
     // ============================================================================
     // 内部方法
@@ -169,14 +177,15 @@ class WorkerPool {
             });
             // 保存结果
             this.results.set(task.id, result);
-            // 处理队列中的下一个任务
+            // 处理队列中的下一个任务（每个任务只会被 shift 一次，保证只执行一次）
             if (this.taskQueue.length > 0) {
-                const nextTask = this.taskQueue.shift();
-                if (nextTask) {
-                    this.executeTask(workerId, nextTask, forkOptions).catch(() => {
-                        // Prevent unhandled rejection from recursive call.
-                    });
-                }
+                const next = this.taskQueue.shift();
+                if (!next)
+                    return result;
+                const nextWorkerId = this.allocateWorker(next.task);
+                this.executeTask(nextWorkerId, next.task, next.forkOptions)
+                    .then(next.resolve)
+                    .catch(next.resolve);
             }
             return result;
         }
@@ -190,7 +199,7 @@ class WorkerPool {
             const result = {
                 success: false,
                 content: '',
-                error: err.message,
+                error: err instanceof Error ? err.message : String(err),
                 duration: Date.now() - (this.workers.get(workerId)?.startTime || Date.now()),
             };
             this.results.set(task.id, result);