@qduc/term2 0.11.0 → 0.12.0

package/dist/non-interactive.js

@@ -1,10 +1,9 @@
 import { createConversationRuntime } from './services/conversation/conversation-runtime-factory.js';
 import { SessionContextService } from './services/session/session-context-service.js';
+import { createCallerOwnedSessionClientFactory, } from './services/session/session-client-factory.js';
 import { randomUUID } from 'node:crypto';
-import { classifyCommandDetailed } from './utils/shell/command-safety/index.js';
-import { SafetyStatus } from './utils/shell/command-safety/constants.js';
-import { evaluateShellAutoApprovalAdvisories } from './services/approval/shell-auto-approval-evaluator.js';
-export const NON_INTERACTIVE_REJECTION_REASON = 'Non-interactive mode: use --auto-approve to allow tool execution';
+import { NonInteractiveApprovalPolicy } from './services/approval/non-interactive-approval-policy.js';
+export { NON_INTERACTIVE_REJECTION_REASON } from './services/approval/non-interactive-approval-policy.js';
 export const createNonInteractiveSessionId = () => `non-interactive-${randomUUID()}`;
 const safePreview = (value, maxLen = 500) => {
     try {
@@ -46,8 +45,16 @@ export async function runWithSession(session, config) {
     const stdout = config.stdout ?? process.stdout;
     const stderr = config.stderr ?? process.stderr;
     const sessionContextService = config.sessionContextService ?? new SessionContextService();
+    const approvalPolicy = new NonInteractiveApprovalPolicy({
+        settingsService: config.settingsService,
+        agentClient: config.agentClient,
+        logger: config.logger,
+        sessionContextService,
+    });
+    let streamedTextLength = 0;
     const onEvent = (event) => {
         if (event.type === 'text_delta') {
+            streamedTextLength += event.delta.length;
             stdout.write(event.delta);
             return;
         }
@@ -55,6 +62,16 @@ export async function runWithSession(session, config) {
             stderr.write(event.delta);
             return;
         }
+        if (event.type === 'final') {
+            // Some completion paths (e.g. tool-only turns, or providers that don't
+            // stream token deltas) deliver the response text solely via `finalText`
+            // rather than `text_delta`. Write whatever wasn't already streamed so
+            // the response isn't silently dropped.
+            if (event.finalText && event.finalText.length > streamedTextLength) {
+                stdout.write(event.finalText.slice(streamedTextLength));
+            }
+            return;
+        }
         const line = formatEventForStderr(event);
         if (line) {
             stderr.write(line);
@@ -73,77 +90,18 @@ export async function runWithSession(session, config) {
             ? await session.sendMessage(config.prompt)
             : await session.sendMessage(config.prompt, { onEvent });
         while (result?.type === 'approval_required') {
-            if (config.autoApprove) {
-                const approval = result.approval;
-                let shouldApprove = true;
-                let rejectionReason;
-                if (approval.toolName === 'shell' || approval.toolName === 'bash') {
-                    const command = approval.argumentsText;
-                    const classification = classifyCommandDetailed(command, config.logger);
-                    if (classification.status === SafetyStatus.RED) {
-                        shouldApprove = false;
-                        rejectionReason = `Heuristic validation failed: command is RED (dangerous) and cannot be executed automatically: ${command}`;
-                    }
-                    else if (classification.status === SafetyStatus.YELLOW) {
-                        const autoApproveModel = config.settingsService && config.agentClient
-                            ? config.settingsService.get('agent.choreModel') ??
-                                config.settingsService.get('agent.autoApproveModel')
-                            : undefined;
-                        if (!autoApproveModel) {
-                            shouldApprove = false;
-                            rejectionReason = `Heuristic validation failed: command is YELLOW (suspicious) and no auto-approve model is configured: ${command}`;
-                        }
-                        else {
-                            const history = session.exportState ? session.exportState().history : [];
-                            try {
-                                const advisories = await evaluateShellAutoApprovalAdvisories({
-                                    commands: [{ id: approval.callId || '__single__', command }],
-                                    history: history,
-                                    settingsService: config.settingsService,
-                                    agentClient: config.agentClient,
-                                    logger: config.logger ??
-                                        {
-                                            debug: () => { },
-                                            info: () => { },
-                                            warn: () => { },
-                                            error: () => { },
-                                            security: () => { },
-                                        },
-                                    sessionContextService,
-                                });
-                                const advisory = advisories.get(approval.callId || '__single__');
-                                if (advisory?.approved) {
-                                    shouldApprove = true;
-                                }
-                                else {
-                                    shouldApprove = false;
-                                    rejectionReason = `LLM evaluation rejected the command: ${advisory?.reasoning ?? 'No reasoning provided'}`;
-                                }
-                            }
-                            catch (err) {
-                                shouldApprove = false;
-                                rejectionReason = `LLM auto-approval evaluation failed: ${err instanceof Error ? err.message : String(err)}`;
-                            }
-                        }
-                    }
-                }
-                if (shouldApprove) {
-                    result = supportsPersistentEventSink
-                        ? await session.handleApprovalDecision('y', undefined)
-                        : await session.handleApprovalDecision('y', undefined, { onEvent });
-                }
-                else {
-                    stderr.write(`Approval Rejected: ${rejectionReason}\n`);
-                    result = supportsPersistentEventSink
-                        ? await session.handleApprovalDecision('n', rejectionReason)
-                        : await session.handleApprovalDecision('n', rejectionReason, { onEvent });
-                }
-            }
-            else {
-                result = supportsPersistentEventSink
-                    ? await session.handleApprovalDecision('n', NON_INTERACTIVE_REJECTION_REASON)
-                    : await session.handleApprovalDecision('n', NON_INTERACTIVE_REJECTION_REASON, { onEvent });
+            const decision = await approvalPolicy.decide({
+                autoApprove: config.autoApprove,
+                approval: result.approval,
+                getHistory: () => session.exportState?.().history ?? [],
+            });
+            const rejectionReason = decision.answer === 'n' ? decision.rejectionReason : undefined;
+            if (decision.answer === 'n' && decision.reportRejection) {
+                stderr.write(`Approval Rejected: ${rejectionReason}\n`);
             }
+            result = supportsPersistentEventSink
+                ? await session.handleApprovalDecision(decision.answer, rejectionReason)
+                : await session.handleApprovalDecision(decision.answer, rejectionReason, { onEvent });
             if (result === null) {
                 stderr.write('error No pending approval context (unexpected in non-interactive mode).\n');
                 return 1;
@@ -169,20 +127,69 @@ export async function runWithSession(session, config) {
 }
 export async function runNonInteractive(config) {
     const sessionContextService = config.sessionContextService ?? new SessionContextService();
-    const { runtime, adapter } = createConversationRuntime({
-        sessionId: createNonInteractiveSessionId(),
-        agentClient: config.agentClient,
-        deps: {
-            logger: config.logger,
-            settingsService: config.settingsService,
-            sessionContextService,
-        },
+    if (!config.sessionClientFactory && !config.agentClient) {
+        throw new Error('runNonInteractive requires an agentClient or sessionClientFactory');
+    }
+    if (!config.sessionClientFactory && !config.toolOwnership) {
+        throw new Error('runNonInteractive requires toolOwnership with an agentClient');
+    }
+    const clientFactory = config.sessionClientFactory ?? createCallerOwnedSessionClientFactory(config.agentClient, config.toolOwnership);
+    const sessionId = createNonInteractiveSessionId();
+    const clientHandle = clientFactory.create(sessionId, { allowBackgroundShell: false });
+    const removeBackgroundShellInterceptor = clientHandle.agentClient.addToolInterceptor(async (name, params) => {
+        if (name === 'shell' &&
+            params !== null &&
+            typeof params === 'object' &&
+            !Array.isArray(params) &&
+            params.background === true) {
+            return 'Error: Background shell execution is unavailable in non-interactive mode.';
+        }
+        return null;
     });
+    let runtime;
+    let fatal = false;
     try {
-        return await runWithSession(adapter, { ...config, sessionContextService });
+        const createdRuntime = createConversationRuntime({
+            sessionId,
+            agentClient: clientHandle.agentClient,
+            toolOwnership: clientHandle.toolOwnership,
+            deps: {
+                logger: config.logger,
+                settingsService: config.settingsService,
+                sessionContextService,
+            },
+            hookLifecycle: config.hookLifecycle ?? clientHandle.hookLifecycle,
+            hookEvents: config.hookEvents ?? clientHandle.hookEvents,
+        });
+        runtime = createdRuntime.runtime;
+        if (config.hookLifecycle && clientHandle.hookEvents) {
+            await config.hookLifecycle.emit(clientHandle.hookEvents.create('session.start', {
+                cwd: process.cwd(),
+                mode: 'non-interactive',
+                providerName: clientHandle.agentClient.getProvider?.() ?? config.settingsService.get('agent.provider'),
+                modelName: config.settingsService.get('agent.model'),
+            }));
+        }
+        return await runWithSession(createdRuntime.adapter, {
+            ...config,
+            agentClient: clientHandle.agentClient,
+            sessionContextService,
+        });
+    }
+    catch (error) {
+        fatal = true;
+        throw error;
     }
     finally {
-        runtime.dispose();
+        removeBackgroundShellInterceptor();
+        if (config.hookLifecycle && clientHandle.hookEvents) {
+            await config.hookLifecycle.emit(clientHandle.hookEvents.create('session.end', {
+                reason: fatal ? 'fatal_error' : 'normal',
+                sessionDuration: runtime ? Math.max(0, Date.now() - Date.parse(runtime.sessionStartedAt)) : 0,
+            }));
+        }
+        await runtime?.shutdown();
+        clientHandle.dispose();
     }
 }
 //# sourceMappingURL=non-interactive.js.map

package/dist/non-interactive.js.map

@@ -1 +1 @@
-{"version":3,"file":"non-interactive.js","sourceRoot":"","sources":["../source/non-interactive.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAStF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzE,OAAO,EAAE,mCAAmC,EAAE,MAAM,sDAAsD,CAAC;AAa3G,MAAM,CAAC,MAAM,gCAAgC,GAAG,kEAAkE,CAAC;AAEnH,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAW,EAAE,CAAC,mBAAmB,UAAU,EAAE,EAAE,CAAC;AAa7F,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG,EAAU,EAAE;IAC3D,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAwB,EAAiB,EAAE;IACvE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,cAAc;YACjB,OAAO,gBAAgB,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QAC5E,KAAK,uBAAuB;YAC1B,OAAO,yBAAyB,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QACnG,KAAK,iBAAiB;YACpB,OAAO,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC;QAC9E,KAAK,mBAAmB;YACtB,OAAO,qBAAqB,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC;QAC1D,KAAK,OAAO;YACV,IAAI,KAAK,CAAC,SAAS,KAAK,mBAAmB,EAAE,CAAC;gBAC5C,OAAO,uBAAuB,KAAK,CAAC,YAAY,IAAI,CAAC;YACvD,CAAC;YACD,OAAO,SAAS,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC;QACjG,KAAK,OAAO;YACV,OAAO,SAAS,KAAK,CAAC,OAAO,IAAI,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgC,EAAE,MAA4B;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC/C,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAE1F,MAAM,OAAO,GAAG,CAAC,KAAwB,EAAE,EAAE;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QAIH,MAAM,2BAA2B,GAAG,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,CAAC;QAC/E,IAAI,2BAA2B,EAAE,CAAC;YAChC,OAAO,CAAC,YAAa,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,MAAmC,CAAC;QACxC,MAAM,GAAG,2BAA2B;YAClC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAS,CAAC,CAAC;QAEjE,OAAO,MAAM,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAuB,MAAM,CAAC,QAAQ,CAAC;gBACrD,IAAI,aAAa,GAAG,IAAI,CAAC;gBACzB,IAAI,eAAmC,CAAC;gBAExC,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;oBACvC,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBAEvE,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC;wBAC/C,aAAa,GAAG,KAAK,CAAC;wBACtB,eAAe,GAAG,iGAAiG,OAAO,EAAE,CAAC;oBAC/H,CAAC;yBAAM,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;wBACzD,MAAM,gBAAgB,GACpB,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,WAAW;4BAC1C,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAS,kBAAkB,CAAC;gCACtD,MAAM,CAAC,eAAe,CAAC,GAAG,CAAS,wBAAwB,CAAC;4BAC9D,CAAC,CAAC,SAAS,CAAC;wBAChB,IAAI,CAAC,gBAAgB,EAAE,CAAC;4BACtB,aAAa,GAAG,KAAK,CAAC;4BACtB,eAAe,GAAG,wGAAwG,OAAO,EAAE,CAAC;wBACtI,CAAC;6BAAM,CAAC;4BACN,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;4BACzE,IAAI,CAAC;gCACH,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC;oCAC3D,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;oCAC5D,OAAO,EAAE,OAAc;oCACvB,eAAe,EAAE,MAAM,CAAC,eAAe;oCACvC,WAAW,EAAE,MAAM,CAAC,WAAY;oCAChC,MAAM,EACJ,MAAM,CAAC,MAAM;wCACZ;4CACC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;4CACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;4CACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;4CACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;4CACf,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;yCACX;oCACX,qBAAqB;iCACtB,CAAC,CAAC;gCACH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC;gCACjE,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;oCACvB,aAAa,GAAG,IAAI,CAAC;gCACvB,CAAC;qCAAM,CAAC;oCACN,aAAa,GAAG,KAAK,CAAC;oCACtB,eAAe,GAAG,wCAChB,QAAQ,EAAE,SAAS,IAAI,uBACzB,EAAE,CAAC;gCACL,CAAC;4BACH,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,aAAa,GAAG,KAAK,CAAC;gCACtB,eAAe,GAAG,wCAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,GAAG,2BAA2B;wBAClC,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC;wBACtD,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,EAAS,CAAC,CAAC;gBAC/E,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,sBAAsB,eAAe,IAAI,CAAC,CAAC;oBACxD,MAAM,GAAG,2BAA2B;wBAClC,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,GAAG,EAAE,eAAe,CAAC;wBAC5D,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,OAAO,EAAS,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,2BAA2B;oBAClC,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,GAAG,EAAE,gCAAgC,CAAC;oBAC7E,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,GAAG,EAAE,gCAAgC,EAAE,EAAE,OAAO,EAAS,CAAC,CAAC;YACtG,CAAC;YAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBAC1F,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAIC;IAED,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1F,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC;QACrD,SAAS,EAAE,6BAA6B,EAAE;QAC1C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,qBAAqB;SACtB;KACF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC;AACH,CAAC"}
+{"version":3,"file":"non-interactive.js","sourceRoot":"","sources":["../source/non-interactive.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EACL,qCAAqC,GAEtC,MAAM,8CAA8C,CAAC;AAUtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,wDAAwD,CAAC;AAsBtG,OAAO,EAAE,gCAAgC,EAAE,MAAM,wDAAwD,CAAC;AAE1G,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAW,EAAE,CAAC,mBAAmB,UAAU,EAAE,EAAE,CAAC;AAa7F,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG,EAAU,EAAE;IAC3D,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAwB,EAAiB,EAAE;IACvE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,cAAc;YACjB,OAAO,gBAAgB,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QAC5E,KAAK,uBAAuB;YAC1B,OAAO,yBAAyB,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QACnG,KAAK,iBAAiB;YACpB,OAAO,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC;QAC9E,KAAK,mBAAmB;YACtB,OAAO,qBAAqB,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC;QAC1D,KAAK,OAAO;YACV,IAAI,KAAK,CAAC,SAAS,KAAK,mBAAmB,EAAE,CAAC;gBAC5C,OAAO,uBAAuB,KAAK,CAAC,YAAY,IAAI,CAAC;YACvD,CAAC;YACD,OAAO,SAAS,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC;QACjG,KAAK,OAAO;YACV,OAAO,SAAS,KAAK,CAAC,OAAO,IAAI,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgC,EAAE,MAA4B;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC/C,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1F,MAAM,cAAc,GAAG,IAAI,4BAA4B,CAAC;QACtD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,qBAAqB;KACtB,CAAC,CAAC;IAEH,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAE3B,MAAM,OAAO,GAAG,CAAC,KAAwB,EAAE,EAAE;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,kBAAkB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,uCAAuC;YACvC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QAIH,MAAM,2BAA2B,GAAG,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,CAAC;QAC/E,IAAI,2BAA2B,EAAE,CAAC;YAChC,OAAO,CAAC,YAAa,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,MAAmC,CAAC;QACxC,MAAM,GAAG,2BAA2B;YAClC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAS,CAAC,CAAC;QAEjE,OAAO,MAAM,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE;aACxD,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,sBAAsB,eAAe,IAAI,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,GAAG,2BAA2B;gBAClC,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;gBACxE,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,OAAO,EAAS,CAAC,CAAC;YAE/F,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBAC1F,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAGC;IAED,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GACjB,MAAM,CAAC,oBAAoB,IAAI,qCAAqC,CAAC,MAAM,CAAC,WAAY,EAAE,MAAM,CAAC,aAAc,CAAC,CAAC;IACnH,MAAM,SAAS,GAAG,6BAA6B,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,gCAAgC,GAAG,YAAY,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAC1G,IACE,IAAI,KAAK,OAAO;YAChB,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,MAAmC,CAAC,UAAU,KAAK,IAAI,EACxD,CAAC;YACD,OAAO,2EAA2E,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,OAA4E,CAAC;IACjF,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,yBAAyB,CAAC;YAC/C,SAAS;YACT,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,qBAAqB;aACtB;YACD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,YAAY,CAAC,aAAa;YACjE,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,YAAY,CAAC,UAAU;SACzD,CAAC,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;QACjC,IAAI,MAAM,CAAC,aAAa,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAC7B,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE;gBAC9C,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE,YAAY,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACtG,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC;aACrD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE;YAClD,GAAG,MAAM;YACT,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,qBAAqB;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,gCAAgC,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,aAAa,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAC7B,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE;gBAC5C,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;gBACxC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC9F,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC1B,YAAY,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/prompts/anthropic.md

@@ -6,7 +6,7 @@ You are an interactive CLI tool that helps users with software engineering tasks
 - Your output will be displayed on a command line interface. Your responses should be short and concise. You can use Github-flavored markdown for formatting, and will be rendered in a monospace font using the CommonMark specification.
 - Output text to communicate with the user; all text you output outside of tool use is displayed to the user. Only use tools to complete tasks. Never use tools like `shell` or code comments as means to communicate with the user during the session.
 - Unsandboxed shell commands require explicit user approval and must be run directly by the main agent. Do not delegate unsandboxed work to subagents; if a subagent needs it, it must report back.
-- NEVER create files unless they're absolutely necessary for achieving your goal. ALWAYS prefer editing an existing file to creating a new one. This includes markdown files.
+- Prefer editing an existing file over creating a new one. Create new files when the work genuinely calls for them, not as a default — this applies to markdown and other documentation as much as to code.
 
 # Professional objectivity
 
@@ -16,65 +16,16 @@ Prioritize technical accuracy and truthfulness over validating the user's belief
 
 When planning tasks, provide concrete implementation steps without time estimates. Never suggest timelines like "this will take 2-3 weeks" or "we can do this later." Focus on what needs to be done, not when. Break work into actionable steps and let users decide scheduling.
 
-# Task Management
-
-Create a plan to manage your tasks. Use this frequently to track progress and keep the user informed about what you're doing.
-Planning is critical for breaking down complex tasks into manageable steps. Without proper planning, you risk missing important subtasks.
-Maintain a short, step-by-step plan for each task. Keep each step concise (5–7 words maximum) and assign it one of three statuses: pending, in progress, or completed.
-Update the plan as you work. When you finish a step, mark it as completed and move the next step to in progress. Only one step should be in progress at a time until the task is complete.
-Once you've finished all steps, verify that every step shows completed status.
-
-Examples:
-
-<example>
-user: Run the build and fix any type errors
-assistant: I'm going to write the following items to the todo list:
-- Run the build
-- Fix any type errors
-
-I'm now going to run the build using `shell`.
-
-Looks like I found 10 type errors. I'm going to create a todo list.
-
-marking the first todo as in_progress
-
-Let me start working on the first item...
-
-The first item has been fixed, let me mark the first todo as completed, and move on to the second item...
-..
-..
-</example>
-In the above example, the assistant completes all the tasks, including the 10 error fixes and running the build and fixing all errors.
-
-<example>
-user: Help me write a new feature that allows users to track their usage metrics and export them to various formats
-assistant: I'll help you implement a usage metrics tracking and export feature. Let me first plan this task.
-1. Research existing metrics tracking in the codebase
-2. Design the metrics collection system
-3. Implement core metrics tracking functionality
-4. Create export functionality for different formats
-
-Let me start by researching the existing codebase to understand what metrics we might already be tracking and how we can build on that.
-
-I'm going to search for any existing metrics or telemetry code in the project.
-
-I've found some existing telemetry code. Let me mark the first todo as in_progress and start designing our metrics tracking system based on what I've learned...
-
-[Assistant continues implementing the feature step by step, marking todos as in_progress and completed as they go]
-</example>
-
 # Asking questions as you work
 
 You can ask the user questions when you need clarification, want to validate assumptions, or need to make a decision you're unsure about. When presenting options or plans, never include time estimates - focus on what each option involves, not how long it takes.
 
 # Doing tasks
 
-The user will primarily request you perform software engineering tasks. This includes solving bugs, adding new functionality, refactoring code, explaining code, and more. For these tasks the following steps are recommended:
+The user will primarily request you perform software engineering tasks: solving bugs, adding functionality, refactoring, explaining code, and more.
 
-- NEVER propose changes to code you haven't read. If a user asks about or wants you to modify a file, read it first. Understand existing code before suggesting modifications.
+- Ground changes in the code as it actually is. Read a file before proposing modifications to it, and verify paths and APIs rather than recalling them.
+- Write code that reads like the code around it: match its comment density, naming, error-handling posture, and level of abstraction. A file that documents every function and a file that documents none are both telling you what to do.
+- Make the smallest coherent change that fully accomplishes the request. Judge scope by what the user asked for, not by what you notice along the way — mention adjacent problems rather than fixing them uninvited.
 - Be careful not to introduce security vulnerabilities such as command injection, XSS, SQL injection, and other OWASP top 10 vulnerabilities. If you notice that you wrote insecure code, immediately fix it.
-- Avoid over-engineering. Only make changes that are directly requested or clearly necessary. Keep solutions simple and focused.
-- Don't add features, refactor code, or make "improvements" beyond what was asked. A bug fix doesn't need surrounding code cleaned up. A simple feature doesn't need extra configurability. Don't add docstrings, comments, or type annotations to code you didn't change. Only add comments where the logic isn't self-evident.
-- Don't add error handling, fallbacks, or validation for scenarios that can't happen. Trust internal code and framework guarantees. Only validate at system boundaries (user input, external APIs). Don't use feature flags or backwards-compatibility shims when you can just change the code.
-- Don't create helpers, utilities, or abstractions for one-time operations. Don't design for hypothetical future requirements. The right amount of complexity is the minimum needed for the current task—three similar lines of code is better than a premature abstraction.
-- Avoid backwards-compatibility hacks like renaming unused \`\_vars\`, re-exporting types, adding \`// removed\` comments for removed code, etc. If something is unused, delete it completely.
+- When you remove something, remove it completely. Leaving renamed-but-unused variables, re-exported types, or `// removed` markers behind is worse than either keeping or deleting the code outright.

package/dist/prompts/async-subagent-delegation.d.ts

@@ -1,9 +1,7 @@
-/**
- * Guidance for the asynchronous subagent tools (`run_subagent_async` and
- * `get_subagent_result`). Injected when both tools are available.
- */
-export declare function getAsyncSubagentDelegationAddendum({ memoryEnabled, orchestratorMode, }?: {
+/** @deprecated Compatibility wrapper for callers not yet using the unified delegation prompt builder. */
+export declare function getAsyncSubagentDelegationAddendum({ memoryEnabled, orchestratorMode, controlsEnabled, }?: {
     memoryEnabled?: boolean;
     orchestratorMode?: boolean;
+    controlsEnabled?: boolean;
 }): string;
 //# sourceMappingURL=async-subagent-delegation.d.ts.map

package/dist/prompts/async-subagent-delegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"async-subagent-delegation.d.ts","sourceRoot":"","sources":["../../source/prompts/async-subagent-delegation.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,EACjD,aAAoB,EACpB,gBAAwB,GACzB,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAmCvE"}
+{"version":3,"file":"async-subagent-delegation.d.ts","sourceRoot":"","sources":["../../source/prompts/async-subagent-delegation.ts"],"names":[],"mappings":"AAEA,yGAAyG;AACzG,wBAAgB,kCAAkC,CAAC,EACjD,aAAoB,EACpB,gBAAwB,EACxB,eAAuB,GACxB,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAQlG"}

package/dist/prompts/async-subagent-delegation.js

@@ -1,36 +1,12 @@
-import { getSubagentsRolesSection } from '../tools/agent/run-subagent.js';
-/**
- * Guidance for the asynchronous subagent tools (`run_subagent_async` and
- * `get_subagent_result`). Injected when both tools are available.
- */
-export function getAsyncSubagentDelegationAddendum({ memoryEnabled = true, orchestratorMode = false, } = {}) {
-    const header = `### Asynchronous subagents
-
-You have two tools for running subagents in the background:
-
-- \`run_subagent_async\`: starts a subagent and returns a \`runId\` immediately.
-- \`get_subagent_result\`: blocks until the started subagent finishes and returns the final \`SubagentResult\`.
-
-Use these when you want to start a background investigation, return control while it runs, and collect the result after the automatic completion notification.`;
-    const rules = `**Rules for async subagents:**
-- Fresh async runs support explorer, worker, researcher, mentor, and librarian.
-- Runs persist across parent turns in process memory until their 30-minute sliding TTL expires or the 50-session cap evicts them. Ordinary turn completion does not cancel them.
-- A returned handle with \`status: "running"\` means delegation succeeded.
-- Use \`get_subagent_result\` with the exact \`runId\` returned by \`run_subagent_async\`.
-- Mentor and librarian fresh calls reuse their default session. Explorer and researcher fresh calls start a new session; pass \`continue_run_id\` to explicitly continue a completed explorer or researcher run. Worker runs are always fresh and cannot be continued.
-- Only completed runs can be continued. A continuation uses the same runId; do not invent runIds or continue an active, failed, cancelled, missing, or evicted run.
-- The result uses the structured \`SubagentResult\` shape: status, final text, tools used, and files changed.`;
-    const triggers = `**When to use async subagents:**
-- A codebase exploration or web research task can run in parallel with other reasoning.
-- You want to keep your context focused while a mentor pressure-tests a plan in the background.
-- The result is needed later, not immediately, and you have other useful work to do first.${orchestratorMode
-        ? `
-
-In Orchestrator mode, use \`run_subagent_async\` for delegable work. A returned handle with \`status: "running"\` means delegation succeeded. Do not duplicate or independently perform the delegated unit. After a successful launch, end the current turn and wait for the automatic completion notification. Use \`get_subagent_result\` from that notification turn, or call it earlier only when the result is explicitly needed immediately.`
-        : ''}`;
-    const framing = `**Task framing:** Describe the goal, relevant context, and constraints—not implementation steps. Do not repeat automatically supplied context: role instructions, generic tool guidance, worktree hygiene, environment metadata, root \`AGENTS.md\`, or skills catalog.`;
-    return `${header}\n\n${rules}\n\n${triggers}\n\n${framing}\n\n${getSubagentsRolesSection({
-        includeLibrarian: memoryEnabled,
-    })}`;
+import { getSubagentDelegationAddendum } from './subagent-delegation.js';
+/** @deprecated Compatibility wrapper for callers not yet using the unified delegation prompt builder. */
+export function getAsyncSubagentDelegationAddendum({ memoryEnabled = true, orchestratorMode = false, controlsEnabled = false, } = {}) {
+    return getSubagentDelegationAddendum({
+        memoryEnabled,
+        orchestratorMode,
+        foregroundEnabled: false,
+        backgroundEnabled: true,
+        controlsEnabled,
+    });
 }
 //# sourceMappingURL=async-subagent-delegation.js.map

package/dist/prompts/async-subagent-delegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"async-subagent-delegation.js","sourceRoot":"","sources":["../../source/prompts/async-subagent-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,EACjD,aAAa,GAAG,IAAI,EACpB,gBAAgB,GAAG,KAAK,GACzB,GAA4D,EAAE;IAC7D,MAAM,MAAM,GAAG;;;;;;;+JAO8I,CAAC;IAE9J,MAAM,KAAK,GAAG;;;;;;;8GAO8F,CAAC;IAE7G,MAAM,QAAQ,GAAG;;;4FAIf,gBAAgB;QACd,CAAC,CAAC;;mbAE2a;QAC7a,CAAC,CAAC,EACN,EAAE,CAAC;IAEH,MAAM,OAAO,GAAG,yQAAyQ,CAAC;IAE1R,OAAO,GAAG,MAAM,OAAO,KAAK,OAAO,QAAQ,OAAO,OAAO,OAAO,wBAAwB,CAAC;QACvF,gBAAgB,EAAE,aAAa;KAChC,CAAC,EAAE,CAAC;AACP,CAAC"}
+{"version":3,"file":"async-subagent-delegation.js","sourceRoot":"","sources":["../../source/prompts/async-subagent-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,yGAAyG;AACzG,MAAM,UAAU,kCAAkC,CAAC,EACjD,aAAa,GAAG,IAAI,EACpB,gBAAgB,GAAG,KAAK,EACxB,eAAe,GAAG,KAAK,GACxB,GAAuF,EAAE;IACxF,OAAO,6BAA6B,CAAC;QACnC,aAAa;QACb,gBAAgB;QAChB,iBAAiB,EAAE,KAAK;QACxB,iBAAiB,EAAE,IAAI;QACvB,eAAe;KAChB,CAAC,CAAC;AACL,CAAC"}

package/dist/prompts/async-subagent-delegation.ts

@@ -1,45 +1,16 @@
-import { getSubagentsRolesSection } from '../tools/agent/run-subagent.js';
+import { getSubagentDelegationAddendum } from './subagent-delegation.js';
 
-/**
- * Guidance for the asynchronous subagent tools (`run_subagent_async` and
- * `get_subagent_result`). Injected when both tools are available.
- */
+/** @deprecated Compatibility wrapper for callers not yet using the unified delegation prompt builder. */
 export function getAsyncSubagentDelegationAddendum({
   memoryEnabled = true,
   orchestratorMode = false,
-}: { memoryEnabled?: boolean; orchestratorMode?: boolean } = {}): string {
-  const header = `### Asynchronous subagents
-
-You have two tools for running subagents in the background:
-
-- \`run_subagent_async\`: starts a subagent and returns a \`runId\` immediately.
-- \`get_subagent_result\`: blocks until the started subagent finishes and returns the final \`SubagentResult\`.
-
-Use these when you want to start a background investigation, return control while it runs, and collect the result after the automatic completion notification.`;
-
-  const rules = `**Rules for async subagents:**
-- Fresh async runs support explorer, worker, researcher, mentor, and librarian.
-- Runs persist across parent turns in process memory until their 30-minute sliding TTL expires or the 50-session cap evicts them. Ordinary turn completion does not cancel them.
-- A returned handle with \`status: "running"\` means delegation succeeded.
-- Use \`get_subagent_result\` with the exact \`runId\` returned by \`run_subagent_async\`.
-- Mentor and librarian fresh calls reuse their default session. Explorer and researcher fresh calls start a new session; pass \`continue_run_id\` to explicitly continue a completed explorer or researcher run. Worker runs are always fresh and cannot be continued.
-- Only completed runs can be continued. A continuation uses the same runId; do not invent runIds or continue an active, failed, cancelled, missing, or evicted run.
-- The result uses the structured \`SubagentResult\` shape: status, final text, tools used, and files changed.`;
-
-  const triggers = `**When to use async subagents:**
-- A codebase exploration or web research task can run in parallel with other reasoning.
-- You want to keep your context focused while a mentor pressure-tests a plan in the background.
-- The result is needed later, not immediately, and you have other useful work to do first.${
-    orchestratorMode
-      ? `
-
-In Orchestrator mode, use \`run_subagent_async\` for delegable work. A returned handle with \`status: "running"\` means delegation succeeded. Do not duplicate or independently perform the delegated unit. After a successful launch, end the current turn and wait for the automatic completion notification. Use \`get_subagent_result\` from that notification turn, or call it earlier only when the result is explicitly needed immediately.`
-      : ''
-  }`;
-
-  const framing = `**Task framing:** Describe the goal, relevant context, and constraints—not implementation steps. Do not repeat automatically supplied context: role instructions, generic tool guidance, worktree hygiene, environment metadata, root \`AGENTS.md\`, or skills catalog.`;
-
-  return `${header}\n\n${rules}\n\n${triggers}\n\n${framing}\n\n${getSubagentsRolesSection({
-    includeLibrarian: memoryEnabled,
-  })}`;
+  controlsEnabled = false,
+}: { memoryEnabled?: boolean; orchestratorMode?: boolean; controlsEnabled?: boolean } = {}): string {
+  return getSubagentDelegationAddendum({
+    memoryEnabled,
+    orchestratorMode,
+    foregroundEnabled: false,
+    backgroundEnabled: true,
+    controlsEnabled,
+  });
 }

package/dist/prompts/gpt-5.6.md

@@ -0,0 +1,49 @@
+You are a coding agent working in a terminal alongside the user. You share one workspace with them, and your job is to carry their goal through to a genuinely handled state.
+
+# Autonomy and approval
+
+- For requests to answer, explain, review, diagnose, or plan: inspect the relevant materials and report the result. Do not implement changes unless the request also asks for them.
+- For requests to change, build, or fix: make the requested in-scope changes and run relevant non-destructive validation without asking first. Reading files, searching the repo, inspecting logs, editing in-scope code, and running tests, builds, and linters are all safe local actions — take them.
+- Require confirmation before: unsandboxed shell commands, git mutations (`commit`, `push`, `reset`, `rebase`, force operations), deleting or overwriting files outside the intended edit set, anything reaching an external service, and any material expansion of scope beyond what was asked.
+
+Carry work to completion within the turn when feasible. If you hit a blocker, work it yourself before handing it back. When you finish, say what you did and what you verified.
+
+Unsandboxed work must be run by you directly — do not delegate it to a subagent. If a subagent needs it, it reports back and you run it.
+
+# Engineering judgment
+
+When the user leaves implementation details open, choose conservatively and in sympathy with the code already in front of you.
+
+- Prefer the repo's existing patterns, frameworks, and local helpers over a new style of abstraction. Add an abstraction only when it removes real complexity or matches an established local pattern.
+- Keep edits scoped to the modules and behavioral surface the request implies. Leave unrelated refactors and metadata churn alone.
+- Use structured APIs or parsers for structured data rather than ad hoc string manipulation.
+- Let test coverage scale with blast radius: focused for narrow changes, broader when you touch shared behavior or cross-module contracts.
+- Never claim a test, build, or check passed unless you ran it and it succeeded. If you could not run something, say so.
+
+# Editing
+
+- Use `apply_patch` for code edits. Do not write files with `cat`, heredocs, or other shell tricks. Bulk mechanical rewrites and formatter runs do not need `apply_patch`.
+- Read a file before proposing changes to it. Verify paths and APIs rather than recalling them.
+- Add comments only where the code is not self-explanatory, and match the comment density of the surrounding file.
+- Default to ASCII unless the file already uses a broader character set.
+- You may be in a dirty worktree. Changes you did not make came from the user — do not revert them. Ignore them if unrelated; work with them if they affect your task. Ask how to proceed only if they make the task impossible.
+
+# Delegating
+
+`run_subagent` runs a focused subtask in its own context and returns a summary. Use `role="explorer"` for read-only codebase investigation that would otherwise take many searches, and launch several concurrently for independent questions. A subagent sees none of your context, so give it a complete, self-contained prompt.
+
+# Mode notices
+
+The system may prefix a `<system-notice>` tag to a user message to signal an operational mode change, such as entering read-only plan mode. Treat it as a system-level instruction that can constrain your normal behavior, handle the rest of the message as the user's actual request, and do not treat the notice as part of that request.
+
+# Response style
+
+Your output is rendered in a terminal as GitHub-flavored Markdown. Add structure only when the shape of the answer calls for it; a small task may warrant a single line. Keep lists flat, use fenced code blocks with an info string for snippets, and use backticks for commands, paths, and identifiers.
+
+When an answer needs to be short, lead with the conclusion, then the evidence supporting it, any material caveat, and the next action. Preserve required facts, decisions, caveats, and next steps; trim introductions, repetition, generic reassurance, and optional background first.
+
+State the answer directly. If the user reports a problem, name the specific issue before giving the next step. Use reassurance only when it is warranted by the situation. Omit generic praise, filler openers, and sign-offs.
+
+The user cannot see command output. When it matters to the answer, relay the important lines rather than referring to them. The user is on this machine with access to the same files, so never tell them to save or copy something.
+
+Report outcomes faithfully. If something failed, is unverified, or was left out, say so plainly rather than rounding up to success.