@qduc/term2 0.9.3 → 0.10.0

package/dist/services/agent-runtime/agent-handle.js

@@ -0,0 +1,239 @@
+import { createRootBudget } from './execution-budget.js';
+import { validateAttachments, serializeAttachments } from './text-attachment.js';
+import { validateOutputSchema, formatOutputContract, parseAndValidateOutput } from './structured-output.js';
+/**
+ * Deterministically serialize a context record value for injection into
+ * instructions. Accepts Record<string, unknown> (ordinary object literals).
+ * Stable key ordering is ensured via JSON.stringify with sorted keys.
+ *
+ * Functions, symbols, bigints, and circular references are REJECTED
+ * with an Error rather than silently changed.
+ */
+function serializeAgentContext(context) {
+    // Pre-scan for unsupported value types before serialization.
+    // Uses a visited set to detect circular references.
+    function scanUnsupported(value, visited = new WeakSet()) {
+        if (typeof value === 'function')
+            return 'functions';
+        if (typeof value === 'symbol')
+            return 'symbols';
+        if (typeof value === 'bigint')
+            return 'bigints';
+        if (typeof value === 'undefined')
+            return 'undefined';
+        if (value === null || typeof value !== 'object')
+            return undefined;
+        // Detect circular references
+        if (visited.has(value))
+            return 'circular references';
+        visited.add(value);
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                const err = scanUnsupported(item, visited);
+                if (err)
+                    return err;
+            }
+            return undefined;
+        }
+        for (const key of Object.keys(value)) {
+            const err = scanUnsupported(value[key], visited);
+            if (err)
+                return err;
+        }
+        return undefined;
+    }
+    const unsupported = scanUnsupported(context);
+    if (unsupported) {
+        return new Error(`Context contains unsupported value type: ${unsupported}. Only plain JSON-serializable values (strings, numbers, booleans, null, arrays, objects) are accepted.`);
+    }
+    try {
+        // Stable deterministic serialization: sort keys alphabetically.
+        const sorted = {};
+        for (const key of Object.keys(context).sort()) {
+            sorted[key] = context[key];
+        }
+        const serialized = JSON.stringify(sorted);
+        return serialized;
+    }
+    catch (err) {
+        return new Error(err?.message ?? 'Context is not JSON-serializable');
+    }
+}
+function errorResult(status, code, message) {
+    return {
+        status,
+        error: { code, message },
+    };
+}
+/**
+ * Convert internal resolved coarse permissions + scopes back to the
+ * public `AgentPermissions` shape for inspection via `handle.permissions`.
+ */
+function coarseToPublicPermissions(def) {
+    const tools = [];
+    if (def.permissions.canRead) {
+        tools.push('read_file', 'grep', 'glob', 'read_code_outline', 'code_context_search');
+    }
+    if (def.permissions.canWrite) {
+        tools.push('search_replace', 'create_file', 'apply_patch');
+    }
+    if (def.permissions.canRunShell) {
+        tools.push('shell');
+    }
+    if (def.permissions.canSearchWeb) {
+        tools.push('web_search', 'web_fetch');
+    }
+    if (def.permissions.canUseNestedAgents) {
+        tools.push('run_subagent', 'ask_mentor');
+    }
+    // Show filesystem when either coarse flag is on or scopes are defined
+    const hasFilesystemAuth = def.permissions.canRead || def.permissions.canWrite || def.filesystemScope !== undefined;
+    // Show network when either coarse flag is on or scopes are defined
+    const hasNetworkAuth = def.permissions.canSearchWeb || def.networkScope !== undefined;
+    return {
+        tools: tools.length > 0 ? tools : undefined,
+        filesystem: hasFilesystemAuth
+            ? { read: def.filesystemScope?.read ?? [], write: def.filesystemScope?.write ?? [] }
+            : undefined,
+        network: hasNetworkAuth ? { hosts: def.networkScope ?? [] } : undefined,
+        agents: def.permissions.canUseNestedAgents ? { create: true } : undefined,
+    };
+}
+/**
+ * Compose the full model-visible instructions with explicit separate sections:
+ * task, base instructions, skill instructions, context, attachments, output contract.
+ */
+function composeInstructions(baseInstructions, skillInstructions, context, attachmentsStr, outputContract, task) {
+    const parts = [];
+    // Task
+    parts.push(`## Task\n\n${task}`);
+    // Base instructions
+    parts.push(`## Instructions\n\n${baseInstructions}`);
+    // Skill instructions
+    if (skillInstructions) {
+        parts.push(`## Skill Guidance\n\n${skillInstructions}`);
+    }
+    // Context
+    if (context) {
+        const contextStr = serializeAgentContext(context);
+        // Error already validated above
+        if (!(contextStr instanceof Error)) {
+            parts.push(`## Context\n\n${contextStr}`);
+        }
+    }
+    // Attachments
+    if (attachmentsStr) {
+        parts.push(attachmentsStr.trimStart());
+    }
+    // Output contract
+    if (outputContract) {
+        parts.push(outputContract.trimStart());
+    }
+    return parts.join('\n\n---\n\n');
+}
+/**
+ * Core AgentHandle implementation bound to a ResolvedAgentDefinition.
+ * Public run() validates resolution errors, attachments, structured output,
+ * and context before composing model-visible instructions and delegating to
+ * the executor.
+ */
+export class AgentHandleImpl {
+    #definition;
+    #logger;
+    #executor;
+    constructor(definition, logger, executor) {
+        this.#definition = definition;
+        this.#logger = logger;
+        this.#executor = executor;
+    }
+    get name() {
+        return this.#definition.name;
+    }
+    get model() {
+        return { ...this.#definition.model };
+    }
+    get permissions() {
+        return coarseToPublicPermissions(this.#definition);
+    }
+    get limits() {
+        return { ...this.#definition.limits };
+    }
+    async run(input) {
+        // ── Resolution errors ──
+        if (this.#definition.resolutionErrors.length > 0) {
+            const fatalCodes = new Set([
+                'invalid_model_policy',
+                'unknown_tool',
+                'permission_denied',
+                'unsupported_permission_scope',
+                'unknown_skill',
+            ]);
+            const fatalError = this.#definition.resolutionErrors.find((e) => fatalCodes.has(e.code));
+            if (fatalError) {
+                return errorResult('failed', fatalError.code, fatalError.message);
+            }
+        }
+        // ── maxCost preflight rejection ──
+        // maxCost cannot be enforced at runtime because reliable provider-neutral
+        // pricing is unavailable. Requesting it produces a typed fatal error
+        // before any execution occurs.
+        if (this.#definition.limits.maxCost !== undefined) {
+            return errorResult('failed', 'limit_validation_error', 'maxCost is not supported. Reliable provider-neutral pricing is unavailable. ' +
+                'Remove maxCost from AgentLimits to proceed.');
+        }
+        // ── Validate context ──
+        if (input.context) {
+            const ctxErr = serializeAgentContext(input.context);
+            if (ctxErr instanceof Error) {
+                return errorResult('failed', 'agent_error', `Invalid context: ${ctxErr.message}`);
+            }
+        }
+        // ── Validate attachments ──
+        let attachmentsStr = '';
+        if (input.attachments && input.attachments.length > 0) {
+            const attachResult = validateAttachments(input.attachments);
+            if (attachResult.errors.length > 0) {
+                return errorResult('failed', 'invalid_attachment', attachResult.errors.join('; '));
+            }
+            attachmentsStr = serializeAttachments(input.attachments);
+        }
+        // ── Validate structured output ──
+        let outputContract = '';
+        if (input.output) {
+            const schemaErr = validateOutputSchema(input.output);
+            if (schemaErr) {
+                return errorResult('failed', schemaErr.code, schemaErr.message);
+            }
+            outputContract = formatOutputContract(input.output);
+        }
+        // ── Compose full instructions ──
+        const instructions = composeInstructions(this.#definition.instructions, this.#definition.skillInstructions, input.context, attachmentsStr, outputContract, input.task);
+        // ── Execute ──
+        const budget = createRootBudget({
+            maxChildren: this.#definition.limits.maxChildren,
+            maxDepth: this.#definition.limits.maxDepth,
+            maxConcurrency: this.#definition.limits.maxConcurrency,
+            maxTokens: this.#definition.limits.maxTokens,
+        });
+        const rawResult = await this.#executor({
+            definition: this.#definition,
+            instructions,
+            input,
+            logger: this.#logger,
+            budget,
+        });
+        // ── Post-process structured output ──
+        if (input.output && rawResult.status === 'completed' && typeof rawResult.output === 'string') {
+            const parsed = parseAndValidateOutput(rawResult.output, input.output);
+            if ('error' in parsed) {
+                return {
+                    status: 'failed',
+                    error: parsed.error,
+                };
+            }
+            rawResult.output = parsed.value;
+        }
+        return rawResult;
+    }
+}
+//# sourceMappingURL=agent-handle.js.map

package/dist/services/agent-runtime/agent-handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-handle.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/agent-handle.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAE5G;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAAC,OAAgC;IAC7D,6DAA6D;IAC7D,oDAAoD;IACpD,SAAS,eAAe,CAAC,KAAc,EAAE,OAAO,GAAoB,IAAI,OAAO,EAAE;QAC/E,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,OAAO,WAAW,CAAC;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,WAAW;YAAE,OAAO,WAAW,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAElE,6BAA6B;QAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAe,CAAC;YAAE,OAAO,qBAAqB,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;QAE7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC3C,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC;YACtB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,eAAe,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9E,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI,KAAK,CACd,4CAA4C,WAAW,yGAAyG,CACjK,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAI,MAA8B,EAAE,IAAkB,EAAE,OAAe;IACzF,OAAO;QACL,MAAM;QACN,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KACzB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,GAA4B;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED,sEAAsE;IACtE,MAAM,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC;IACnH,mEAAmE;IACnE,MAAM,cAAc,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC;IAEtF,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC3C,UAAU,EAAE,iBAAiB;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,EAAE;YACpF,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;QACvE,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,iBAAyB,EACzB,OAA4C,EAC5C,cAAsB,EACtB,cAAsB,EACtB,IAAY;IAEZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,OAAO;IACP,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAEjC,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,sBAAsB,gBAAgB,EAAE,CAAC,CAAC;IAErD,qBAAqB;IACrB,IAAI,iBAAiB,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,wBAAwB,iBAAiB,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,UAAU;IACV,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClD,gCAAgC;QAChC,IAAI,CAAC,CAAC,UAAU,YAAY,KAAK,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,kBAAkB;IAClB,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACjB,WAAW,CAA0B;IACrC,OAAO,CAAkB;IACzB,SAAS,CAAa;IAE/B,YAAY,UAAmC,EAAE,MAAuB,EAAE,QAAoB;QAC5F,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAa,KAAe;QACnC,0BAA0B;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;gBACzB,sBAAsB;gBACtB,cAAc;gBACd,mBAAmB;gBACnB,8BAA8B;gBAC9B,eAAe;aAChB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACzF,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,WAAW,CAAI,QAAQ,EAAE,UAAU,CAAC,IAAoB,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,0EAA0E;QAC1E,qEAAqE;QACrE,+BAA+B;QAC/B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClD,OAAO,WAAW,CAChB,QAAQ,EACR,wBAAwB,EACxB,8EAA8E;gBAC5E,6CAA6C,CAChD,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;gBAC5B,OAAO,WAAW,CAAI,QAAQ,EAAE,aAAa,EAAE,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,cAAc,GAAG,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,WAAW,CAAI,QAAQ,EAAE,oBAAoB,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,mCAAmC;QACnC,IAAI,cAAc,GAAG,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,WAAW,CAAI,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YACrE,CAAC;YACD,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,kCAAkC;QAClC,MAAM,YAAY,GAAG,mBAAmB,CACtC,IAAI,CAAC,WAAW,CAAC,YAAY,EAC7B,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAClC,KAAK,CAAC,OAAO,EACb,cAAc,EACd,cAAc,EACd,KAAK,CAAC,IAAI,CACX,CAAC;QAEF,gBAAgB;QAChB,MAAM,MAAM,GAAG,gBAAgB,CAAC;YAC9B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW;YAChD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ;YAC1C,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc;YACtD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS;SAC7C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAI;YACxC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY;YACZ,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,MAAM;SACP,CAAC,CAAC;QAEH,uCAAuC;QACvC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7F,MAAM,MAAM,GAAG,sBAAsB,CAAI,SAAS,CAAC,MAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAClC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/services/agent-runtime/agent-resolver.d.ts

@@ -0,0 +1,25 @@
+import type { ISettingsService, ILoggingService } from '../service-interfaces.js';
+import type { SkillsService } from '../skills/skills-service.js';
+import type { AgentConfig, AgentPermissions, AgentLimits, ModelPolicy } from './types.js';
+import type { ResolvedAgentDefinition } from './resolved-agent.js';
+export interface AgentResolverDeps {
+    settings: ISettingsService;
+    logger: ILoggingService;
+    skillsService?: SkillsService;
+    /** Parent agent permissions (for nested agents). */
+    parentPermissions?: AgentPermissions;
+    /** Parent agent limits (for nested agents). */
+    parentLimits?: AgentLimits;
+    /** Parent model policy (for relative tier resolution). */
+    parentModelPolicy?: ModelPolicy;
+}
+/**
+ * Resolve an AgentConfig into a fully-resolved ResolvedAgentDefinition.
+ * All model/tool/permission/limit/skill decisions happen here.
+ *
+ * Resolution errors are accumulated but do NOT prevent returning a
+ * definition. The handle must check `resolutionErrors` before execution
+ * and refuse to run if any fatal resolution errors exist.
+ */
+export declare function resolveAgent(config: AgentConfig, deps: AgentResolverDeps): ResolvedAgentDefinition;
+//# sourceMappingURL=agent-resolver.d.ts.map

package/dist/services/agent-runtime/agent-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-resolver.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/agent-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAMnE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IACrC,+CAA+C;IAC/C,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,WAAW,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,GAAG,uBAAuB,CAmFlG"}

package/dist/services/agent-runtime/agent-resolver.js

@@ -0,0 +1,86 @@
+import { resolveModelPolicy } from './model-resolver.js';
+import { resolvePermissions, resolveLimits } from './permission-resolver.js';
+import { resolveSkills } from './skill-resolver.js';
+import { resolveTools } from './tools-resolver.js';
+/**
+ * Resolve an AgentConfig into a fully-resolved ResolvedAgentDefinition.
+ * All model/tool/permission/limit/skill decisions happen here.
+ *
+ * Resolution errors are accumulated but do NOT prevent returning a
+ * definition. The handle must check `resolutionErrors` before execution
+ * and refuse to run if any fatal resolution errors exist.
+ */
+export function resolveAgent(config, deps) {
+    const errors = [];
+    // ── Model ─────────────────────────────────────────────
+    const modelPolicy = config.model ?? 'balanced';
+    let model;
+    try {
+        model = resolveModelPolicy(modelPolicy, deps.settings, deps.parentModelPolicy);
+    }
+    catch (err) {
+        // Do NOT silently fall back. Accumulate the error and use balanced
+        // as a placeholder so we can return a definition that reports the
+        // error to the caller. The handle will refuse execution.
+        model = resolveModelPolicy('balanced', deps.settings);
+        errors.push({
+            code: 'invalid_model_policy',
+            message: err.message,
+        });
+    }
+    // ── Permissions (public shape → internal coarse + scopes) ──
+    const { permissions: resolvedPerms, filesystemScope, networkScope, agentsMaxDepth, errors: permErrors, } = resolvePermissions(config.permissions, deps.parentPermissions);
+    for (const err of permErrors) {
+        errors.push({
+            code: err.code,
+            message: `${err.message} (field: ${err.field})`,
+        });
+    }
+    // ── Limits ────────────────────────────────────────────
+    let limits = resolveLimits(config.limits, deps.parentLimits);
+    // Intersect resolved agents.maxDepth with limits.maxDepth.
+    // The permission-level agents.maxDepth acts as an additional ceiling on
+    // the execution-tree nesting depth. It is clamped to the smaller of the two.
+    if (agentsMaxDepth !== undefined) {
+        limits = {
+            ...limits,
+            maxDepth: limits.maxDepth !== undefined ? Math.min(limits.maxDepth, agentsMaxDepth) : agentsMaxDepth,
+        };
+    }
+    // ── Tools (config.tools ∩ permissions.tools ∩ coarse perms) ──
+    const requestedTools = config.tools;
+    const authorizedTools = config.permissions?.tools;
+    const toolResult = resolveTools(requestedTools, resolvedPerms, authorizedTools);
+    for (const err of toolResult.errors) {
+        errors.push({
+            code: err.code,
+            message: `${err.message} (tool: ${err.toolName})`,
+        });
+    }
+    const tools = toolResult.resolved;
+    // ── Skills ────────────────────────────────────────────
+    let skillInstructions = '';
+    if (deps.skillsService && config.skills && config.skills.length > 0) {
+        const skillResult = resolveSkills(config.skills, deps.skillsService);
+        skillInstructions = skillResult.instructions;
+        for (const err of skillResult.errors) {
+            errors.push({
+                code: err.code,
+                message: `${err.message} (skill: ${err.skillName})`,
+            });
+        }
+    }
+    return {
+        name: config.name ?? 'agent',
+        instructions: config.instructions,
+        model,
+        permissions: resolvedPerms,
+        limits,
+        tools,
+        skillInstructions,
+        filesystemScope,
+        networkScope,
+        resolutionErrors: errors,
+    };
+}
+//# sourceMappingURL=agent-resolver.js.map

package/dist/services/agent-runtime/agent-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-resolver.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/agent-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAcnD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,IAAuB;IACvE,MAAM,MAAM,GAA6C,EAAE,CAAC;IAE5D,yDAAyD;IACzD,MAAM,WAAW,GAAgB,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC;IAC5D,IAAI,KAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,mEAAmE;QACnE,kEAAkE;QAClE,yDAAyD;QACzD,KAAK,GAAG,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,MAAM,EACJ,WAAW,EAAE,aAAa,EAC1B,eAAe,EACf,YAAY,EACZ,cAAc,EACd,MAAM,EAAE,UAAU,GACnB,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,YAAY,GAAG,CAAC,KAAK,GAAG;SAChD,CAAC,CAAC;IACL,CAAC;IACD,yDAAyD;IACzD,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAE7D,2DAA2D;IAC3D,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG;YACP,GAAG,MAAM;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc;SACrG,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC;IACpC,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC;IAClD,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,WAAW,GAAG,CAAC,QAAQ,GAAG;SAClD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAa,UAAU,CAAC,QAAQ,CAAC;IAE5C,yDAAyD;IACzD,IAAI,iBAAiB,GAAG,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,iBAAiB,GAAG,WAAW,CAAC,YAAY,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,YAAY,GAAG,CAAC,SAAS,GAAG;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,OAAO;QAC5B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK;QACL,WAAW,EAAE,aAAa;QAC1B,MAAM;QACN,KAAK;QACL,iBAAiB;QACjB,eAAe;QACf,YAAY;QACZ,gBAAgB,EAAE,MAAM;KACzB,CAAC;AACJ,CAAC"}

package/dist/services/agent-runtime/agent-runtime.d.ts

@@ -0,0 +1,97 @@
+import type { ILoggingService, ISettingsService } from '../service-interfaces.js';
+import type { SkillsService } from '../skills/skills-service.js';
+import type { AgentConfig, AgentHandle, AgentPermissions, AgentLimits, ModelPolicy } from './types.js';
+import { type ExecutorFn } from './agent-handle.js';
+export interface AgentRuntimeDeps {
+    settings: ISettingsService;
+    logger: ILoggingService;
+    skillsService?: SkillsService;
+    /** Executor that actually runs resolved agents. */
+    executor: ExecutorFn;
+    /** Parent agent context for nested agent creation. */
+    parent?: {
+        permissions?: AgentPermissions;
+        limits?: AgentLimits;
+        modelPolicy?: ModelPolicy;
+    };
+}
+/**
+ * Public facade for creating and running one-shot agents with typed
+ * permissions, resource limits, file/network scopes, and nested-agent
+ * authority.
+ *
+ * ## Quick start
+ *
+ * ```ts
+ * import { AgentRuntime, createAgentRuntime } from './services/agent-runtime/index.js';
+ *
+ * // Compose a runtime backed by real subagent infrastructure:
+ * const { runtime } = createAgentRuntime({
+ *   settings, logger, sessionContextService, createClient,
+ * });
+ *
+ * // Create a read-only agent restricted to src/
+ * const handle = runtime.agent({
+ *   name: 'code-reviewer',
+ *   instructions: 'Review code for issues. Report findings concisely.',
+ *   model: 'balanced',
+ *   tools: ['read_file', 'grep', 'glob', 'read_code_outline'],
+ *   permissions: {
+ *     tools: ['read_file', 'grep', 'glob', 'read_code_outline'],
+ *     filesystem: { read: ['src/**'] },
+ *   },
+ *   limits: { maxTurns: 10, timeoutMs: 30_000 },
+ * });
+ *
+ * // Run one-shot
+ * const result = await handle.run({
+ *   task: 'Find potential null-pointer issues in the auth module.',
+ *   context: { module: 'auth', language: 'typescript' },
+ * });
+ *
+ * if (result.status === 'completed') {
+ *   console.log(result.output);
+ * } else {
+ *   console.error(result.error?.code, result.error?.message);
+ * }
+ * ```
+ *
+ * ## Permission model
+ *
+ * Permissions are **narrowing only**: a child agent can never exceed its
+ * parent's authority. Coarse flags (`canRead`, `canWrite`, `canRunShell`,
+ * `canSearchWeb`, `canUseNestedAgents`) are intersected with the parent.
+ * Fine-grained filesystem globs and network host scopes further restrict
+ * coarse authority.
+ *
+ * | Field                  | Effect                                               |
+ * |------------------------|------------------------------------------------------|
+ * | `permissions.tools`    | Allowlisted tool names (subset of `config.tools`)    |
+ * | `permissions.filesystem.read/write` | Glob patterns relative to workspace root |
+ * | `permissions.network.hosts` | Allowed host[:port] patterns, or `['*']` for all |
+ * | `permissions.agents.create` | `false` explicitly denies nested agent tools    |
+ * | `permissions.agents.maxDepth` | Clamped with `limits.maxDepth`               |
+ *
+ * ## Limits
+ *
+ * All limit fields are **clamped** to parent maxima. The root
+ * `AgentHandle.run()` call does NOT consume a child slot, so `maxChildren`
+ * limits actual nested agents, not the root itself.
+ *
+ * Unsupported limits produce typed preflight rejections:
+ * - `maxCost` → `limit_validation_error` (no provider-neutral pricing)
+ * - `agents.allowedModels` → `unsupported_permission_scope`
+ * - `web_fetch` with finite host scope → runtime `Permission denied` error
+ *   (redirect-following not enforceable; use `hosts: ['*']`)
+ */
+export declare class AgentRuntime {
+    #private;
+    constructor(deps: AgentRuntimeDeps);
+    /**
+     * Resolve an AgentConfig into a runnable AgentHandle.
+     * The handle is cheap to create; the expensive work (execution)
+     * happens in handle.run().
+     */
+    agent(config: AgentConfig): AgentHandle;
+}
+//# sourceMappingURL=agent-runtime.d.ts.map

package/dist/services/agent-runtime/agent-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/agent-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEvG,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAErE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,EAAE,UAAU,CAAC;IACrB,sDAAsD;IACtD,MAAM,CAAC,EAAE;QACP,WAAW,CAAC,EAAE,gBAAgB,CAAC;QAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,WAAW,CAAC,EAAE,WAAW,CAAC;KAC3B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,qBAAa,YAAY;;IAGvB,YAAY,IAAI,EAAE,gBAAgB,EAEjC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAYtC;CACF"}

package/dist/services/agent-runtime/agent-runtime.js

@@ -0,0 +1,95 @@
+import { resolveAgent } from './agent-resolver.js';
+import { AgentHandleImpl } from './agent-handle.js';
+/**
+ * Public facade for creating and running one-shot agents with typed
+ * permissions, resource limits, file/network scopes, and nested-agent
+ * authority.
+ *
+ * ## Quick start
+ *
+ * ```ts
+ * import { AgentRuntime, createAgentRuntime } from './services/agent-runtime/index.js';
+ *
+ * // Compose a runtime backed by real subagent infrastructure:
+ * const { runtime } = createAgentRuntime({
+ *   settings, logger, sessionContextService, createClient,
+ * });
+ *
+ * // Create a read-only agent restricted to src/
+ * const handle = runtime.agent({
+ *   name: 'code-reviewer',
+ *   instructions: 'Review code for issues. Report findings concisely.',
+ *   model: 'balanced',
+ *   tools: ['read_file', 'grep', 'glob', 'read_code_outline'],
+ *   permissions: {
+ *     tools: ['read_file', 'grep', 'glob', 'read_code_outline'],
+ *     filesystem: { read: ['src/**'] },
+ *   },
+ *   limits: { maxTurns: 10, timeoutMs: 30_000 },
+ * });
+ *
+ * // Run one-shot
+ * const result = await handle.run({
+ *   task: 'Find potential null-pointer issues in the auth module.',
+ *   context: { module: 'auth', language: 'typescript' },
+ * });
+ *
+ * if (result.status === 'completed') {
+ *   console.log(result.output);
+ * } else {
+ *   console.error(result.error?.code, result.error?.message);
+ * }
+ * ```
+ *
+ * ## Permission model
+ *
+ * Permissions are **narrowing only**: a child agent can never exceed its
+ * parent's authority. Coarse flags (`canRead`, `canWrite`, `canRunShell`,
+ * `canSearchWeb`, `canUseNestedAgents`) are intersected with the parent.
+ * Fine-grained filesystem globs and network host scopes further restrict
+ * coarse authority.
+ *
+ * | Field                  | Effect                                               |
+ * |------------------------|------------------------------------------------------|
+ * | `permissions.tools`    | Allowlisted tool names (subset of `config.tools`)    |
+ * | `permissions.filesystem.read/write` | Glob patterns relative to workspace root |
+ * | `permissions.network.hosts` | Allowed host[:port] patterns, or `['*']` for all |
+ * | `permissions.agents.create` | `false` explicitly denies nested agent tools    |
+ * | `permissions.agents.maxDepth` | Clamped with `limits.maxDepth`               |
+ *
+ * ## Limits
+ *
+ * All limit fields are **clamped** to parent maxima. The root
+ * `AgentHandle.run()` call does NOT consume a child slot, so `maxChildren`
+ * limits actual nested agents, not the root itself.
+ *
+ * Unsupported limits produce typed preflight rejections:
+ * - `maxCost` → `limit_validation_error` (no provider-neutral pricing)
+ * - `agents.allowedModels` → `unsupported_permission_scope`
+ * - `web_fetch` with finite host scope → runtime `Permission denied` error
+ *   (redirect-following not enforceable; use `hosts: ['*']`)
+ */
+export class AgentRuntime {
+    #deps;
+    constructor(deps) {
+        this.#deps = deps;
+    }
+    /**
+     * Resolve an AgentConfig into a runnable AgentHandle.
+     * The handle is cheap to create; the expensive work (execution)
+     * happens in handle.run().
+     */
+    agent(config) {
+        const resolverDeps = {
+            settings: this.#deps.settings,
+            logger: this.#deps.logger,
+            skillsService: this.#deps.skillsService,
+            parentPermissions: this.#deps.parent?.permissions,
+            parentLimits: this.#deps.parent?.limits,
+            parentModelPolicy: this.#deps.parent?.modelPolicy,
+        };
+        const definition = resolveAgent(config, resolverDeps);
+        return new AgentHandleImpl(definition, this.#deps.logger, this.#deps.executor);
+    }
+}
+//# sourceMappingURL=agent-runtime.js.map

package/dist/services/agent-runtime/agent-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/agent-runtime.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAA0B,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAmB,MAAM,mBAAmB,CAAC;AAgBrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,MAAM,OAAO,YAAY;IACvB,KAAK,CAAmB;IAExB,YAAY,IAAsB;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAmB;QACvB,MAAM,YAAY,GAAsB;YACtC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACzB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;YACvC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW;YACjD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM;YACvC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW;SAClD,CAAC;QAEF,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtD,OAAO,IAAI,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/services/agent-runtime/compose-agent-runtime.d.ts

@@ -0,0 +1,89 @@
+import type { ILoggingService, ISettingsService, ISessionContextService } from '../service-interfaces.js';
+import type { ExecutionContext } from '../execution-context.js';
+import type { ConversationEvent } from '../conversation/conversation-events.js';
+import type { ISubagentClientFactory, ISubagentClient } from '../subagents/subagent-client-types.js';
+import type { SkillsService } from '../skills/skills-service.js';
+import type { AgentPermissions, AgentLimits, ModelPolicy } from './types.js';
+import type { SupportedSubagentRole, SubagentDefinition } from '../subagents/types.js';
+import { AgentRuntime } from './agent-runtime.js';
+import { ExecutionSubagentRunner } from '../subagents/execution-runner.js';
+import { MentorRunner } from '../subagents/mentor-runner.js';
+/**
+ * Dependencies for creating a production-ready AgentRuntime that wires
+ * through the existing subagent / session / approval / retry infrastructure.
+ */
+export interface CreateAgentRuntimeDeps {
+    settings: ISettingsService;
+    logger: ILoggingService;
+    sessionContextService: ISessionContextService;
+    executionContext?: ExecutionContext;
+    /** Agent client for shell auto-approval evaluation in SubagentToolPolicy. */
+    agentClient?: ISubagentClient;
+    /** Factory for creating transient AgentClient instances for subagent runs. */
+    createClient: ISubagentClientFactory['createClient'];
+    /** Skills service for skill instruction resolution. */
+    skillsService?: SkillsService;
+    /** Event sink for subagent lifecycle events. */
+    onEvent?: (event: ConversationEvent) => void;
+    /** Parent agent context for nested agent creation. */
+    parent?: {
+        permissions?: AgentPermissions;
+        limits?: AgentLimits;
+        modelPolicy?: ModelPolicy;
+    };
+}
+/**
+ * Create a fully-wired AgentRuntime backed by the production
+ * ExecutionSubagentRunner infrastructure.
+ *
+ * Usage:
+ *   const runtime = createAgentRuntime({
+ *     settings, logger, sessionContextService, createClient,
+ *   });
+ *   const handle = runtime.agent({ instructions: "...", permissions: {...} });
+ *   const result = await handle.run({ task: "..." });
+ */
+export interface AgentRuntimeComposition {
+    runtime: AgentRuntime;
+    executionRunner: ExecutionSubagentRunner;
+    mentorRunner: MentorRunner;
+    resolveRoleDefinition: (role: SupportedSubagentRole | string) => SubagentDefinition;
+}
+/**
+ * Minimal deps needed to create an AgentRuntime from an existing
+ * SubagentRuntime (avoids duplicating tool policies).
+ */
+export interface AgentRuntimeFromSubagentRuntimeDeps {
+    settings: ISettingsService;
+    logger: ILoggingService;
+    skillsService?: SkillsService;
+    executionRunner: ExecutionSubagentRunner;
+    mentorRunner: MentorRunner;
+    /** Event sink for public AgentRuntime child lifecycle events. */
+    onEvent?: (event: ConversationEvent) => void;
+    parent?: {
+        permissions?: AgentPermissions;
+        limits?: AgentLimits;
+        modelPolicy?: ModelPolicy;
+    };
+}
+/**
+ * Create an AgentRuntime backed by an existing SubagentRuntime's
+ * execution and mentor runners. This avoids creating duplicate
+ * independent tool policies when a SubagentManager (which owns a
+ * SubagentRuntime) is already composed.
+ */
+export declare function createAgentRuntimeFromSubagentRuntime(deps: AgentRuntimeFromSubagentRuntimeDeps): AgentRuntime;
+/**
+ * Create a fully-wired AgentRuntime backed by the production
+ * ExecutionSubagentRunner and MentorRunner infrastructure.
+ *
+ * The returned composition provides:
+ * - runtime.agent(config) for one-shot custom agent handles.
+ * - executionRunner and mentorRunner for trusted preset/role execution
+ *   used by compatibility code (SubagentManager).
+ * - resolveRoleDefinition for the shared ResolvedAgentDefinition
+ *   adaptation path consumed by NestedSubagentRunner.
+ */
+export declare function createAgentRuntime(deps: CreateAgentRuntimeDeps): AgentRuntimeComposition;
+//# sourceMappingURL=compose-agent-runtime.d.ts.map