@robota-sdk/agent-subagent-runner 3.0.0-beta.78 → 3.0.0-beta.81

package/dist/node/index.d.ts

@@ -1,43 +1,363 @@
-import { ISubagentJobHandle, ISubagentJobStart, ISubagentRunner, ISubagentSpawnRequest, ISubagentWorktreeAdapter } from "@robota-sdk/agent-executor";
-import { IProviderDefinitionConfig, ISessionUsageTotals, TPermissionMode, TToolArgs } from "@robota-sdk/agent-core";
-import { IAgentDefinition, IInProcessSubagentRunnerDeps, TSubagentRunnerFactory } from "@robota-sdk/agent-framework";
-import { ISerializableProviderProfile } from "@robota-sdk/agent-interface-transport";
-
+import { IConnectionEnvironmentCheck, ISubagentJobHandle, ISubagentJobStart, ISubagentRunner, ISubagentWorktreeAdapter } from "@robota-sdk/agent-executor";
+import { IHookTypeExecutor, IProviderDefinition, IProviderDefinitionConfig, ISessionUsageTotals, IToolWithEventService, TPermissionMode, TToolArgs } from "@robota-sdk/agent-core";
+import { IAgentDefinition, IInProcessSubagentRunnerDeps, IResolvedConfig, ISubagentParentContext, TSubagentRunnerFactory, restoreSessionRecordIntoSession } from "@robota-sdk/agent-framework";
+import { ISerializableProviderProfile, ISubagentSpawnRequest } from "@robota-sdk/agent-interface-execution";
+//#region src/worker-entry.d.ts
+/**
+ * DIST-006: how a subagent worker process is STARTED, stated by the composition root.
+ *
+ * The seam this replaces asked a library "where is my worker file on disk?" — a question it cannot
+ * answer, because the answer is a property of the packaging step, not of the library. It was wrong
+ * twice for the same reason: once when the worker had no bundle entry at all, and again when a
+ * downstream bundler inlined this package into another artifact and moved the resolver's notion of
+ * "next to me" one package along.
+ *
+ * The only party that knows how a process is packaged is that process. So the composition root
+ * states how to start a copy of itself, and this package owns nothing but the IPC contract.
+ */
+/**
+ * The argv flag that puts a composition root's own entry into subagent-worker mode.
+ *
+ * Deliberately not a plausible user flag: it is part of an internal process contract, and a user
+ * who types it gets a loud refusal rather than a half-started worker.
+ */
+declare const SUBAGENT_WORKER_MODE_FLAG = "--__robota-subagent-worker";
+/**
+ * How to spawn a copy of the running artifact in subagent-worker mode.
+ *
+ * `execPath` + `args` is the whole contract, and it is satisfiable by every artifact shape:
+ * - a bundled Node build names the file it is currently executing;
+ * - a `tsx` source run names the same thing and adds `--import tsx` to `execArgv`;
+ * - a single-file compiled binary names NOTHING — `process.execPath` is the binary, and
+ *   re-executing it re-enters its embedded entry.
+ */
+interface ISubagentWorkerEntry {
+  /** The executable to run. `process.execPath` for every artifact this repository ships. */
+  readonly execPath: string;
+  /** Arguments before the worker-mode flag — the entry module, or nothing when it is embedded. */
+  readonly args: readonly string[];
+  /** Extra runtime flags, e.g. `--import tsx` when the entry is TypeScript source. */
+  readonly execArgv?: readonly string[];
+}
+/** True when this process was started as a subagent worker. */
+declare function isSubagentWorkerModeArgv(argv: readonly string[]): boolean;
+//#endregion
 //#region src/child-process-subagent-runner.d.ts
 interface IChildProcessSubagentRunnerOptions {
-  workerPath: string;
+  /**
+   * DIST-006: how to start a copy of the running artifact in subagent-worker mode, stated by the
+   * composition root. It replaced `workerPath`, which asked this package to locate a file whose
+   * location is a property of the packaging step — a question no library can answer, and one that
+   * was answered wrongly twice.
+   */
+  workerEntry: ISubagentWorkerEntry;
   providerConfig?: IProviderDefinitionConfig;
-  execArgv?: string[];
+  /**
+   * The parent's provider registry. Its defaults complete the connection the child is given, and
+   * each definition names the environment its client reads. Required: a job whose provider has no
+   * definition here is refused, because its connection cannot be checked.
+   */
+  providerDefinitions: readonly IProviderDefinition[];
   killGraceMs?: number;
+  /**
+   * How long a spawned worker may take to signal `ready` before the runner gives up. Injectable so
+   * the branch is reachable in a test; without that it is a fix that ships untested.
+   */
+  handshakeBudgetMs?: number;
   env?: NodeJS.ProcessEnv;
   worktreeIsolation?: boolean;
-  worktreeAdapter?: ISubagentWorktreeAdapter;
+  worktreeAdapter: ISubagentWorktreeAdapter;
   logsDir?: string;
 }
 declare function createChildProcessSubagentRunnerFactory(options: IChildProcessSubagentRunnerOptions): TSubagentRunnerFactory;
 declare class ChildProcessSubagentRunner implements ISubagentRunner {
   private readonly deps;
-  private readonly workerPath;
-  private readonly execArgv?;
+  private readonly workerEntry;
   private readonly killGraceMs;
+  private readonly handshakeBudgetMs?;
   private readonly providerConfig?;
+  private readonly providerDefinitions;
   private readonly env?;
   private readonly logsDir?;
   constructor(deps: IInProcessSubagentRunnerDeps, options: IChildProcessSubagentRunnerOptions);
   start(job: ISubagentJobStart): ISubagentJobHandle;
+  /**
+   * The payload the child is started with. The builder lives in
+   * `child-process-subagent-projection.ts` (CLI-1994 moved it there so the ARCH-044 key-set test
+   * pins the code that produces it); review of ARCH-033/ARCH-034 is the reason it is a named
+   * producer at all — both fields were declared on the wire type, read by the worker, and set by
+   * nothing, because this was the only production site that constructs a payload and no test
+   * reached it.
+   */
   private createStartPayload;
   private resolveTranscriptPath;
 }
 //#endregion
+//#region src/subagent-worker-start-dto.d.ts
+/**
+ * The parent's loaded-context RUNTIME model (`ILoadedContext`, which the framework barrel does not
+ * export). Named here for the encoder/restore signatures only — the wire DTO below never references it.
+ */
+type TParentContextModel = IInProcessSubagentRunnerDeps['context'];
+interface ISubagentWorkerAgentDefinitionDto {
+  readonly name: string;
+  readonly description: string;
+  readonly systemPrompt: string;
+  readonly model?: string;
+  readonly effort?: IAgentDefinition['effort'];
+  readonly role?: string;
+  readonly maxTurns?: number;
+  readonly tools?: readonly string[];
+  readonly disallowedTools?: readonly string[];
+}
+interface ISubagentWorkerContextFileEntryDto {
+  readonly filePath: string;
+  readonly content: string;
+  readonly contentHash: string;
+}
+interface ISubagentWorkerParentContextDto {
+  readonly agentsMd: string;
+  readonly projectNotesMd: string;
+  readonly memoryMd?: string;
+  readonly taskContext?: string;
+  readonly compactInstructions?: string;
+  readonly agentsFileEntries?: readonly ISubagentWorkerContextFileEntryDto[];
+  readonly projectNotesFileEntries?: readonly ISubagentWorkerContextFileEntryDto[];
+}
+type TDtoDecodeResult<TDto> = {
+  readonly ok: true;
+  readonly value: TDto;
+} | {
+  readonly ok: false;
+  readonly reason: string;
+};
+declare function encodeAgentDefinition(definition: IAgentDefinition): ISubagentWorkerAgentDefinitionDto;
+declare function decodeAgentDefinitionDto(value: unknown): TDtoDecodeResult<ISubagentWorkerAgentDefinitionDto>;
+/** Explicit restore in the worker: the DTO's fields are the runtime model's, copied, not aliased. */
+declare function restoreAgentDefinition(dto: ISubagentWorkerAgentDefinitionDto): IAgentDefinition;
+/** Accepts the issue #2317 projection (or anything wider, structurally); only declared fields cross. */
+declare function encodeParentContext(context: ISubagentParentContext): ISubagentWorkerParentContextDto;
+declare function decodeParentContextDto(value: unknown): TDtoDecodeResult<ISubagentWorkerParentContextDto>;
+declare function restoreParentContext(dto: ISubagentWorkerParentContextDto): TParentContextModel;
+//#endregion
+//#region src/worker-composition.d.ts
+/**
+ * The session record store a fork job's `resumeSessionId` names a record in, typed FROM the one
+ * function that reads it (`restoreSessionRecordIntoSession`, agent-framework) rather than from the
+ * interface package that declares the port — this package does not depend on that package, and a
+ * type derived from the consumer cannot drift from what the consumer accepts.
+ */
+type TResumeSessionStore = Parameters<typeof restoreSessionRecordIntoSession>[0];
+/**
+ * ARCH-021: what the product composes, stated by the composition root.
+ *
+ * This is the sibling of {@link ISubagentWorkerEntry} one level up. That seam answers "how is this
+ * artifact started"; this one answers "what does this product compose" — and the same rule decides
+ * both: **the only party that knows is the product itself.**
+ *
+ * The seam this replaces had a neutral package importing `createDefaultTools()` and
+ * `createDefaultProviderDefinitions()` and building the child's surface from them, while the
+ * composition root had already handed the runner the fully composed surface. So a product's custom
+ * providers and pack-owned tools reached an in-process subagent and not a child-process one, and
+ * ARCH-006's invariant — every tool robota runs comes from a pack — was false in the child.
+ *
+ * **Why a recipe rather than the instances.** A composition cannot be projected across a process
+ * boundary, because it is code: `createProvider` is a function and a tool carries `execute`. The two
+ * structurally sound answers are to proxy the instances or to stop expressing the contract as
+ * instances. Proxying loses on containment — a proxied tool executes in the PARENT, bound to the
+ * parent's checkout, while a worktree-isolated child's execution root is a different directory. So
+ * the recipe crosses and the child builds an equivalent surface at its own root, which is what every
+ * comparable product does.
+ */
+interface ISubagentWorkerComposition {
+  /** Product-selected hook executors for the child session. */
+  createHookTypeExecutors?: () => IHookTypeExecutor[];
+  /**
+   * The product's tool surface for THIS subagent's execution root.
+   *
+   * `cwd` is a required argument for the same reason `ICreateDefaultToolsOptions.cwd` is (ARCH-010):
+   * a tool set built without its root carries a disarmed path guard, and the measured consequence
+   * was a subagent `Read` returning `/etc/hostname`. Passing the root through the call rather than
+   * capturing it in the factory is what stops a child from inheriting the parent's.
+   */
+  createTools(context: {
+    readonly cwd: string;
+    /**
+     * ARCH-034: the tiers session assembly adds ON TOP of the product's tool set.
+     *
+     * The two runners of `ISubagentRunner` were handing a subagent different surfaces, and the
+     * difference was silent because both paths succeed. In-process passes the parent's fully
+     * ASSEMBLED tools; this path rebuilds the product's set at the child's root. For a product whose
+     * packs own the tool surface those agree — but what session assembly adds AFTER the packs did
+     * not cross: the goal tool (`includeGoalTool`) and edit-checkpoint wrapping.
+     *
+     * Choosing a runner is an isolation and packaging decision. It is not supposed to be a capability
+     * decision, so the composition root states which of those tiers the child should also receive and
+     * the recipe carries the answer rather than the parent's live wrappers.
+     */
+    readonly sessionTiers?: {
+      /** Whether the parent's session included the goal-status tool. */
+      readonly includeGoalTool?: boolean;
+    };
+    /**
+     * ARCH-033: the sandbox the child restored, when the parent projected one.
+     *
+     * Threaded rather than captured, for the same reason `cwd` is: a tool surface built without the
+     * sandbox it is supposed to act in would run on the HOST while the parent runs sandboxed, which
+     * is the divergence the composition root's refusal exists to prevent. Absent ⇒ no sandbox, and
+     * the child's tools act on its own confined root.
+     */
+    readonly sandboxClient?: TProjectedSandboxClient;
+  }): IToolWithEventService[];
+  /**
+   * The product's provider registry. Carried as definitions rather than a constructed provider
+   * because `createProvider` is code — the child builds its own provider from the serialized profile
+   * against THIS registry, so a custom provider type resolves instead of throwing `Unknown provider`.
+   */
+  readonly providerDefinitions: readonly IProviderDefinition[];
+  /**
+   * How the child rebuilds a SANDBOX that the parent is running in (ARCH-033).
+   *
+   * The same shape as `providerDefinitions`, and for the same reason. A live `ISandboxClient` is an
+   * open session against a remote machine; it cannot cross a process boundary. What CAN cross is the
+   * pair (which client type, which snapshot) — `ISandboxClient.snapshot()` returns a
+   * provider-owned reference and `restore(id)` hydrates a fresh client from it, and a reference is
+   * just a string.
+   *
+   * So the composition root registers the constructor by type name, exactly as it registers provider
+   * definitions, and the recipe carries `{ type, snapshotId }`. The child looks the type up here and
+   * restores. Neither half works alone: a snapshot with no registry is a reference nothing can open,
+   * and a registry with no snapshot rebuilds an EMPTY sandbox, which is worse than refusing because
+   * the child would look sandboxed while sharing none of the parent's state.
+   *
+   * Absent ⇒ the product composes no sandbox, and `assertChildProcessSubagentsCanReproduce` in the
+   * composition root refuses to start a sandboxed parent that cannot project. That refusal remains
+   * the correct behaviour for a product that has not registered a factory; this seam is what lets one
+   * stop refusing.
+   */
+  readonly sandboxFactories?: Readonly<Record<string, TSandboxClientFactory>>;
+  /**
+   * CLI-1994: how the child opens the session store a fork job's record was written to.
+   *
+   * The same shape as `providerDefinitions` and `sandboxFactories`, and for the same reason: where a
+   * product keeps its session records is the composition root's knowledge, and it cannot be
+   * projected onto the wire without also projecting the records — which is exactly what ARCH-044
+   * keeps off it. So the parent sends the id, and the child asks the composition to open the store
+   * FOR THE PARENT'S cwd (`request.cwd`, not the execution root — a worktree-isolated child runs in
+   * a directory that has no session records of its own).
+   *
+   * Absent ⇒ the product composes no store, and a job that names a record to resume fails, stated
+   * as such, rather than starting with an empty conversation that looks like a fork.
+   */
+  readonly openSessionStore?: (context: {
+    readonly cwd: string;
+  }) => TResumeSessionStore;
+}
+/**
+ * Rebuilds a sandbox client of ONE type from a snapshot reference the parent produced.
+ *
+ * Deliberately not `() => ISandboxClient`: a factory that cannot receive the reference can only make
+ * an empty sandbox, which is the failure mode this seam exists to avoid.
+ */
+type TSandboxClientFactory = (snapshotId: string) => Promise<TProjectedSandboxClient>;
+/**
+ * What the factory hands back, expressed STRUCTURALLY rather than as `ISandboxClient`.
+ *
+ * This package is the neutral runner: it depends on `agent-core`, `agent-executor`,
+ * `agent-framework`, `agent-interface-execution` and `agent-process` — deliberately not on
+ * `agent-tools`, where `ISandboxClient` lives. Importing that type to describe a value this package
+ * only ever passes through would add a dependency edge for a pass-through, which is the shape
+ * ARCH-021 removed from here on the provider axis.
+ *
+ * So the seam names the minimum it needs to be honest about — the object is opaque to the runner and
+ * meaningful only to the composition root that registered the factory and the tools that receive it.
+ */
+type TProjectedSandboxClient = object;
+/**
+ * The serializable half — what the parent puts in the recipe.
+ *
+ * Both fields are required. `type` selects the factory; `snapshotId` is what the parent's
+ * `snapshot()` returned. Carrying one without the other is the empty-sandbox failure above.
+ */
+interface ISandboxProjection {
+  readonly type: string;
+  readonly snapshotId: string;
+}
+//#endregion
 //#region src/child-process-subagent-ipc.d.ts
 type TSubagentWorkerWireValue = string | number | boolean | null | undefined | object;
+/** ARCH-044: the four config members the child reads. See `projectParentConfig`. */
+interface ISubagentWorkerParentConfig {
+  readonly provider: {
+    readonly model: string;
+  };
+  readonly permissions: IResolvedConfig['permissions'];
+  readonly defaultTrustLevel: IResolvedConfig['defaultTrustLevel'];
+  readonly hooks?: IResolvedConfig['hooks'];
+}
 interface ISubagentWorkerStartPayload {
-  jobId: string;
+  taskId: string;
   request: ISubagentSpawnRequest;
-  agentDefinition: IAgentDefinition;
-  parentConfig: IInProcessSubagentRunnerDeps['config'];
-  parentContext: IInProcessSubagentRunnerDeps['context'];
+  /**
+   * ARCH-031: the worktree the parent's runner prepared, carried across the fork so the child can
+   * answer `subagentExecutionRoot` the same way the parent would. Runner-produced, so it rides beside
+   * the request rather than on it.
+   *
+   * `branch` crosses the fork too, even though nothing reads it here yet: dropping it at the IPC
+   * boundary would make the child's view of its own isolated run poorer than the parent's, for no
+   * reason other than the absence of a present-day consumer.
+   */
+  worktree?: {
+    readonly path: string;
+    readonly branch?: string;
+  };
+  /** ARCH-044 (issue #2047): a JSON-safe DTO owned here, projected from `IAgentDefinition` by the parent. */
+  agentDefinition: ISubagentWorkerAgentDefinitionDto;
+  /**
+   * ARCH-044 (issue #2047): the config members the child reads, declared here rather than indexed
+   * out of the runtime type.
+   *
+   * It was `IInProcessSubagentRunnerDeps['config']`, so the wire shape was the in-process shape and
+   * grew with it — which put the parent's resolved `provider.apiKey` and its `env` map into a second
+   * process where nothing read either. Declaring the members means a new field on `IResolvedConfig`
+   * does not reach the child by default; `projectParentConfig` is what enforces it at runtime,
+   * because structural typing would accept the whole config here.
+   */
+  parentConfig: ISubagentWorkerParentConfig;
+  /**
+   * ARCH-044 (issue #2047): a JSON-safe DTO owned here, decoded totally on the child side. The parent
+   * fills it from `projectParentContext` (issue #2317): the two context members the child reads —
+   * `agentsMd` and `projectNotesMd` — and never the parent's whole `ILoadedContext`, whose file
+   * entries carry the full text of every AGENTS.md and CLAUDE.md the parent loaded.
+   */
+  parentContext: ISubagentWorkerParentContextDto;
   providerProfile: ISerializableProviderProfile;
+  /**
+   * The destination-deciding environment the parent checked before spawning, sealed so the child can
+   * repeat the check before it builds a provider. Values never travel; only a keyed digest does.
+   */
+  connectionCheck: IConnectionEnvironmentCheck;
+  /**
+   * ARCH-033: how the child rebuilds the parent's sandbox, as `(type, snapshotId)`.
+   *
+   * The live client cannot cross a process boundary — it is an open session against a remote machine.
+   * This pair can: the type selects a factory the composition root registered, and the snapshot is a
+   * provider-owned reference the parent's `snapshot()` returned. Both halves are required, because a
+   * snapshot with no registry is a reference nothing opens and a registry with no snapshot rebuilds
+   * an EMPTY sandbox — a child that looks sandboxed while sharing none of the parent's state.
+   *
+   * Absent ⇒ the parent holds no sandbox, which is every product that has not registered one.
+   */
+  sandboxProjection?: ISandboxProjection;
+  /**
+   * ARCH-034: which session-assembly tiers the parent's surface carried.
+   *
+   * A property of the parent's SESSION rather than of the child's root, so it rides on the payload
+   * beside the request instead of being derived at the child. Absent ⇒ the parent had none.
+   */
+  sessionTiers?: {
+    readonly includeGoalTool?: boolean;
+  };
   permissionMode?: TPermissionMode;
   logsDir?: string;
 }
@@ -56,6 +376,15 @@ interface ISubagentWorkerCancelMessage {
 type TSubagentWorkerParentMessage = ISubagentWorkerStartMessage | ISubagentWorkerSendMessage | ISubagentWorkerCancelMessage;
 interface ISubagentWorkerReadyMessage {
   type: 'ready';
+  /**
+   * ARCH-021: the tool names the child actually composed, so "the child has the product's surface"
+   * is VERIFIED per run rather than assumed by construction. Names only — the tools themselves are
+   * code and do not cross this boundary; that is the whole point of the composition port.
+   *
+   * Enumerated at the worker's own cwd before any job arrives, which is sound because a pack's tool
+   * NAMES do not depend on the root (the root binds the path guard, not the name set).
+   */
+  composedToolNames?: readonly string[];
 }
 interface ISubagentWorkerTextDeltaMessage {
   type: 'text_delta';
@@ -89,8 +418,19 @@ type TSubagentWorkerChildMessage = ISubagentWorkerReadyMessage | ISubagentWorker
 declare function isSubagentWorkerParentMessage(value: TSubagentWorkerWireValue): value is TSubagentWorkerParentMessage;
 declare function isSubagentWorkerChildMessage(value: TSubagentWorkerWireValue): value is TSubagentWorkerChildMessage;
 //#endregion
-//#region src/worker-path-resolver.d.ts
-declare function getDefaultSubagentWorkerPath(): string;
+//#region src/child-process-subagent-worker.d.ts
+/**
+ * DIST-006: worker mode is ENTERED, not implied by loading this module.
+ *
+ * These handlers used to run as module top-level side effects, which is what forced the worker to
+ * be a separate file that something had to locate on disk. As a function, the composition root's
+ * own entry can become the worker — so there is no second artifact and no path to get wrong.
+ *
+ * ARCH-021: `composition` is REQUIRED, deliberately. An optional parameter falling back to imported
+ * defaults would reinstate the exact defect this seam removes — and at this line conventions have a
+ * measured failure rate of 100% (ARCH-010 and ARCH-006 are both findings here).
+ */
+declare function runSubagentWorkerMain(composition: ISubagentWorkerComposition): void;
 //#endregion
-export { ChildProcessSubagentRunner, type IChildProcessSubagentRunnerOptions, type ISubagentWorkerStartPayload, type TSubagentWorkerChildMessage, type TSubagentWorkerParentMessage, type TSubagentWorkerWireValue, createChildProcessSubagentRunnerFactory, getDefaultSubagentWorkerPath, isSubagentWorkerChildMessage, isSubagentWorkerParentMessage };
+export { ChildProcessSubagentRunner, type IChildProcessSubagentRunnerOptions, type ISubagentWorkerAgentDefinitionDto, type ISubagentWorkerComposition, type ISubagentWorkerContextFileEntryDto, type ISubagentWorkerEntry, type ISubagentWorkerParentContextDto, type ISubagentWorkerStartPayload, SUBAGENT_WORKER_MODE_FLAG, type TResumeSessionStore, type TSubagentWorkerChildMessage, type TSubagentWorkerParentMessage, type TSubagentWorkerWireValue, createChildProcessSubagentRunnerFactory, decodeAgentDefinitionDto, decodeParentContextDto, encodeAgentDefinition, encodeParentContext, isSubagentWorkerChildMessage, isSubagentWorkerModeArgv, isSubagentWorkerParentMessage, restoreAgentDefinition, restoreParentContext, runSubagentWorkerMain };
 //# sourceMappingURL=index.d.ts.map

package/dist/node/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/child-process-subagent-runner.ts","../../src/child-process-subagent-ipc.ts","../../src/worker-path-resolver.ts"],"mappings":";;;;;;UA4CiB,kCAAA;EACf,UAAA;EACA,cAAA,GAAiB,yBAAA;EACjB,QAAA;EACA,WAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,iBAAA;EACA,eAAA,GAAkB,wBAAA;EAClB,OAAA;AAAA;AAAA,iBAGc,uCAAA,CACd,OAAA,EAAS,kCAAA,GACR,sBAAsB;AAAA,cAaZ,0BAAA,YAAsC,eAAA;EAAA,iBAS9B,IAAA;EAAA,iBARF,UAAA;EAAA,iBACA,QAAA;EAAA,iBACA,WAAA;EAAA,iBACA,cAAA;EAAA,iBACA,GAAA;EAAA,iBACA,OAAA;cAGE,IAAA,EAAM,4BAAA,EACvB,OAAA,EAAS,kCAAA;EAUX,KAAA,CAAM,GAAA,EAAK,iBAAA,GAAoB,kBAAA;EAAA,QA+CvB,kBAAA;EAAA,QAcA,qBAAA;AAAA;;;KClJE,wBAAA;AAAA,UAIK,2BAAA;EACf,KAAA;EACA,OAAA,EAAS,qBAAA;EACT,eAAA,EAAiB,gBAAA;EACjB,YAAA,EAAc,4BAAA;EACd,aAAA,EAAe,4BAAA;EACf,eAAA,EAAiB,4BAAA;EACjB,cAAA,GAAiB,eAAA;EACjB,OAAA;AAAA;AAAA,UAGe,2BAAA;EACf,IAAA;EACA,OAAA,EAAS,2BAA2B;AAAA;AAAA,UAGrB,0BAAA;EACf,IAAA;EACA,MAAM;AAAA;AAAA,UAGS,4BAAA;EACf,IAAA;EACA,MAAM;AAAA;AAAA,KAGI,4BAAA,GACR,2BAAA,GACA,0BAAA,GACA,4BAAA;AAAA,UAEa,2BAAA;EACf,IAAI;AAAA;AAAA,UAGW,+BAAA;EACf,IAAA;EACA,KAAK;AAAA;AAAA,UAGU,+BAAA;EACf,IAAA;EACA,QAAA;EACA,QAAA,GAAW,SAAS;AAAA;AAAA,UAGL,6BAAA;EACf,IAAA;EACA,QAAA;EACA,OAAA;AAAA;AAAA,UAGe,4BAAA;EACf,IAAA;EACA,MAAA;EDgBmB;ECdnB,KAAA,GAAQ,mBAAmB;AAAA;AAAA,UAGZ,2BAAA;EACf,IAAA;EACA,OAAO;AAAA;AAAA,UAGQ,+BAAA;EACf,IAAA;EACA,MAAM;AAAA;AAAA,KAGI,2BAAA,GACR,2BAAA,GACA,+BAAA,GACA,+BAAA,GACA,6BAAA,GACA,4BAAA,GACA,2BAAA,GACA,+BAAA;AAAA,iBA0CY,6BAAA,CACd,KAAA,EAAO,wBAAA,GACN,KAAA,IAAS,4BAA4B;AAAA,iBAcxB,4BAAA,CACd,KAAA,EAAO,wBAAA,GACN,KAAA,IAAS,2BAA2B;;;iBC9IvB,4BAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/worker-entry.ts","../../src/child-process-subagent-runner.ts","../../src/subagent-worker-start-dto.ts","../../src/worker-composition.ts","../../src/child-process-subagent-ipc.ts","../../src/child-process-subagent-worker.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;cAmBa;;;;;;;;;;UAWI;;WAEN;;WAEA;;WAEA;;;iBAIK,yBAAyB;;;UCMxB;;;;;;;EAOf,aAAa;EACb,iBAAiB;;;;;;EAMjB,8BAA8B;EAC9B;;;;;EAKA;EACA,MAAM,OAAO;EACb;EACA,iBAAiB;EACjB;;iBAGc,wCACd,SAAS,qCACR;cAaU,sCAAsC;mBAU9B;mBATF;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAGE,YAAA,MAAM,8BACvB,SAAS;EAWX,MAAM,KAAK,oBAAoB;;;;;;;;;UAsFvB;UAWA;;;;;;;;KClLL,sBAAsB;UAEV;WACN;WACA;WACA;WACA;WACA,SAAS;WACT;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA;WACA;WACA,6BAA6B;WAC7B,mCAAmC;;KAmClC,iBAAiB;WAChB;WAAmB,OAAO;;WAAoB;WAAoB;;iBAmE/D,sBACd,YAAY,mBACX;iBAOa,yBACd,iBACC,iBAAiB;;iBASJ,uBAAuB,KAAK,oCAAoC;;iBAgBhE,oBACd,SAAS,yBACR;iBAOa,uBACd,iBACC,iBAAiB;iBAIJ,qBAAqB,KAAK,kCAAkC;;;;;;;;;KCrMhE,sBAAsB,kBAAkB;;;;;;;;;;;;;;;;;;;;;;UAuBnC;;EAEf,gCAAgC;;;;;;;;;EAShC,YAAY;aACD;;;;;;;;;;;;;;aAcA;;eAEE;;;;;;;;;;aAUF,gBAAgB;MACvB;;;;;;WAOK,8BAA8B;;;;;;;;;;;;;;;;;;;;;WAsB9B,mBAAmB,SAAS,eAAe;;;;;;;;;;;;;;WAe3C,oBAAoB;aAAoB;QAAkB;;;;;;;;KASzD,yBAAyB,uBAAuB,QAAQ;;;;;;;;;;;;;KAcxD;;;;;;;UAQK;WACN;WACA;;;;KCxIC;;UAKK;WACN;aAAqB;;WACrB,aAAa;WACb,mBAAmB;WACnB,QAAQ;;UAGF;EACf;EACA,SAAS;;;;;;;;;;EAUT;aAAsB;aAAuB;;;EAE7C,iBAAiB;;;;;;;;;;;EAWjB,cAAc;;;;;;;EAOd,eAAe;EACf,iBAAiB;;;;;EAKjB,iBAAiB;;;;;;;;;;;;EAYjB,oBAAoB;;;;;;;EAOpB;aAA0B;;EAC1B,iBAAiB;EACjB;;UAGe;EACf;EACA,SAAS;;UAGM;EACf;EACA;;UAGe;EACf;EACA;;KAGU,+BACV,8BAA8B,6BAA6B;UAE5C;EACf;;;;;;;;;EASA;;UAGe;EACf;EACA;;UAGe;EACf;EACA;EACA,WAAW;;UAGI;EACf;EACA;EACA;;UAGe;EACf;EACA;;EAEA,QAAQ;;UAGO;EACf;EACA;;UAGe;EACf;EACA;;KAGU,8BACR,8BACA,kCACA,kCACA,gCACA,+BACA,8BACA;iBA+GY,8BACd,OAAO,2BACN,SAAS;iBAcI,6BACd,OAAO,2BACN,SAAS;;;;;;;;;;;;;;iBCpCI,sBAAsB,aAAa"}

package/dist/node/index.js

@@ -1,2 +1,3 @@
-import{n as e,t}from"./child-process-subagent-ipc-BKEo2kRL.js";import{fork as n}from"node:child_process";import{existsSync as r,readFileSync as i}from"node:fs";import{dirname as a,join as o}from"node:path";import{BackgroundTaskError as s,createBackgroundTaskLogPage as c,createGitWorktreeIsolationAdapter as l,createWorktreeSubagentRunner as u}from"@robota-sdk/agent-executor";import{getBuiltInAgent as d}from"@robota-sdk/agent-framework";import{DEFAULT_KILL_GRACE_MS as f,killProcessTree as p}from"@robota-sdk/agent-process";import{fileURLToPath as m}from"node:url";const h=process.platform!==`win32`;function g(e,t){return new Promise(n=>{if(e.exitCode!==null||e.signalCode!==null){n();return}let r=setTimeout(()=>{e.removeListener(`exit`,i),n()},t);r.unref?.();let i=()=>{clearTimeout(r),n()};e.once(`exit`,i)})}function _(e,t,n,r,i){switch(e.type){case`ready`:t();break;case`result`:n(e);break;case`error`:r(new s(`runner`,e.message));break;case`cancelled`:r(new s(`runner`,e.reason??`Subagent worker cancelled`));break;case`text_delta`:i?.({type:`background_task_text_delta`,delta:e.delta});break;case`tool_start`:i?.({type:`background_task_tool_start`,toolName:e.toolName,firstArg:v(e.toolArgs)});break;case`tool_end`:i?.({type:`background_task_tool_end`,toolName:e.toolName,success:e.success});break;default:r(new s(`runner`,`Unhandled subagent worker message`))}}function v(e){if(!e)return;let t=Object.values(e)[0];if(t!==void 0)return typeof t==`object`?JSON.stringify(t):String(t)}function y(e,t){return new Promise((n,r)=>{if(!e.connected){r(new s(`crash`,`Subagent worker IPC channel is closed`));return}e.send(t,e=>{if(e){r(e);return}n()})})}async function b(e,t){await p(e.child,{graceMs:e.killGraceMs,processGroup:h,preKill:async()=>{e.child.connected&&(await y(e.child,{type:`cancel`,reason:t}).catch(()=>void 0),await g(e.child,e.killGraceMs))}})}function x(e){return new Promise((t,n)=>{new S(e,t,n).start()})}var S=class{options;resolve;reject;settled=!1;started=!1;timeoutTimer;constructor(e,t,n){this.options=e,this.resolve=t,this.reject=n,this.timeoutTimer=w(this.options.runtime,e=>this.rejectOnce(e))}start(){let{child:e}=this.options.runtime;e.on(`message`,this.onMessage),e.on(`error`,this.onError),e.on(`exit`,this.onExit),e.once(`spawn`,()=>{setImmediate(this.startWorker)})}startWorker=()=>{if(this.started)return;this.started=!0;let{child:e}=this.options.runtime;y(e,{type:`start`,payload:this.options.payload}).catch(e=>{this.rejectOnce(e instanceof Error?e:Error(String(e)))})};onMessage=e=>{if(!t(e)){this.rejectOnce(new s(`runner`,`Received malformed subagent worker message`));return}let{job:n}=this.options.runtime;_(e,this.startWorker,this.resolveOnce,this.rejectOnce,n.emit)};onError=e=>{this.rejectOnce(new s(`crash`,e.message))};onExit=(e,t)=>{this.settled||this.rejectOnce(new s(`crash`,E(e,t)))};resolveOnce=e=>{if(this.settled)return;this.settled=!0,this.clearTimers(),this.cleanup();let{runtime:t,resolveTranscriptPath:n}=this.options;this.resolve(T(t.job,e,n))};rejectOnce=e=>{this.settled||(this.settled=!0,this.clearTimers(),this.cleanup(),this.reject(e))};clearTimers(){this.timeoutTimer&&clearTimeout(this.timeoutTimer)}cleanup(){let{child:e}=this.options.runtime;e.off(`message`,this.onMessage),e.off(`error`,this.onError),e.off(`exit`,this.onExit)}};function C(e){let t=!1,n=()=>{};return{promise:new Promise((e,t)=>{n=t}),reject(r){t||(t=!0,n(new s(`runner`,r??`Subagent job cancelled: ${e}`)))}}}function w(e,t){if(e.job.request.timeoutMs)return setTimeout(()=>{b(e,`Subagent worker timed out`),t(new s(`timeout`,`Subagent worker timed out`))},e.job.request.timeoutMs)}function T(e,t,n){let r=n(e);return{jobId:e.jobId,output:t.output,...r?{metadata:{transcriptPath:r,logPath:r}}:{},...t.usage?{usage:t.usage}:{}}}function E(e,t){return`Subagent worker exited before result: ${t===null?`exit code ${e===null?`unknown`:e}`:`signal ${t}`}`}const D=process.platform!==`win32`;function O(e){return t=>{let n=new k(t,e);return e.worktreeIsolation===!1?n:u({runner:n,worktreeAdapter:e.worktreeAdapter??l(),hooks:t.config.hooks,hookTypeExecutors:t.hookTypeExecutors})}}var k=class{deps;workerPath;execArgv;killGraceMs;providerConfig;env;logsDir;constructor(e,t){this.deps=e,this.workerPath=t.workerPath,this.execArgv=t.execArgv,this.killGraceMs=t.killGraceMs??f,this.providerConfig=t.providerConfig,this.env=t.env,this.logsDir=t.logsDir}start(e){let t=n(this.workerPath,[],{cwd:e.request.cwd,env:{...process.env,...this.env??{}},execArgv:this.execArgv??N(this.workerPath),stdio:[`ignore`,`ignore`,`ignore`,`ipc`],detached:D}),r={job:e,child:t,killGraceMs:this.killGraceMs},i=x({runtime:r,payload:this.createStartPayload(e),resolveTranscriptPath:e=>this.resolveTranscriptPath(e)}),a=C(e.jobId);i.catch(()=>void 0);let o=Promise.race([i,a.promise]);o.catch(()=>void 0);let s=this.resolveTranscriptPath(e);return{jobId:e.jobId,...t.pid!==void 0&&{pid:t.pid},...s!==void 0&&{transcriptPath:s,logPath:s},result:o,cancel:async e=>{a.reject(e),await b(r,e)},send:async e=>{await y(t,{type:`send`,prompt:e})},...s!==void 0&&{readLog:async t=>P(e.jobId,s,t)}}}createStartPayload(e){let t=A(e.request.type,this.deps.customAgentRegistry);return{jobId:e.jobId,request:e.request,agentDefinition:j(t,e),parentConfig:this.deps.config,parentContext:this.deps.context,providerProfile:M(this.providerConfig,this.deps,e),permissionMode:this.deps.permissionMode,...this.logsDir?{logsDir:this.logsDir}:{}}}resolveTranscriptPath(e){if(this.logsDir)return o(this.logsDir,e.request.parentSessionId,`subagents`,`${e.jobId}.jsonl`)}};function A(e,t){let n=t?.(e)??d(e);if(!n)throw new s(`validation`,`Unknown agent type: ${e}`);return n}function j(e,t){return{...e,...t.request.model?{model:t.request.model}:{},...t.request.allowedTools?{tools:t.request.allowedTools}:{},...t.request.disallowedTools?{disallowedTools:t.request.disallowedTools}:{}}}function M(e,t,n){let r=e??t.config.provider;return{profileName:t.config.currentProvider,type:r.name,model:n.request.model??r.model,apiKey:r.apiKey,baseURL:r.baseURL,timeout:r.timeout,options:r.options}}function N(e){return!e.endsWith(`.ts`)||process.execArgv.some(e=>e.includes(`tsx`))?process.execArgv:[...process.execArgv,`--import`,`tsx`]}function P(e,t,n){return r(t)?c(e,i(t,`utf8`).split(/\r?\n/).filter(Boolean),n):{taskId:e,cursor:n,lines:[]}}function F(){return o(a(m(import.meta.url)),`child-process-subagent-worker.js`)}export{k as ChildProcessSubagentRunner,O as createChildProcessSubagentRunnerFactory,F as getDefaultSubagentWorkerPath,t as isSubagentWorkerChildMessage,e as isSubagentWorkerParentMessage};
+import{spawn as e}from"node:child_process";import{existsSync as t,readFileSync as n}from"node:fs";import{join as r}from"node:path";import{BackgroundTaskError as i,connectionEnvironmentNames as a,createBackgroundTaskLogPage as o,createProviderFromExactProfile as s,createWorktreeSubagentRunner as c,findConnectionEnvironmentDivergence as l,sealConnectionEnvironment as u,subagentExecutionRoot as d,verifyConnectionEnvironment as f}from"@robota-sdk/agent-executor";import{DEFAULT_KILL_GRACE_MS as p,killProcessTree as ee}from"@robota-sdk/agent-process";import{createBoundedOutput as te,findProviderDefinition as m,isModelEffort as ne,sumHistoryUsage as re}from"@robota-sdk/agent-core";import{createSubagentLogger as ie,createSubagentSession as ae,restoreSessionRecordIntoSession as oe}from"@robota-sdk/agent-framework";function se(e){return{provider:{model:e.provider.model},permissions:e.permissions,defaultTrustLevel:e.defaultTrustLevel,...e.hooks===void 0?{}:{hooks:e.hooks}}}function ce(e){return{agentsMd:e.agentsMd,projectNotesMd:e.projectNotesMd}}const h={name:{kind:`string`,required:!0},description:{kind:`string`,required:!0},systemPrompt:{kind:`string`,required:!0},model:{kind:`string`,required:!1},effort:{kind:`effort`,required:!1},role:{kind:`string`,required:!1},maxTurns:{kind:`number`,required:!1},tools:{kind:`string[]`,required:!1},disallowedTools:{kind:`string[]`,required:!1}},g={agentsMd:{kind:`string`,required:!0},projectNotesMd:{kind:`string`,required:!0},memoryMd:{kind:`string`,required:!1},taskContext:{kind:`string`,required:!1},compactInstructions:{kind:`string`,required:!1},agentsFileEntries:{kind:`file-entry[]`,required:!1},projectNotesFileEntries:{kind:`file-entry[]`,required:!1}};function _(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function v(e){return Array.isArray(e)&&e.every(e=>typeof e==`string`)}function y(e){return _(e)&&typeof e.filePath==`string`&&typeof e.content==`string`&&typeof e.contentHash==`string`}function b(e,t){switch(e){case`string`:return typeof t==`string`;case`number`:return typeof t==`number`&&Number.isFinite(t);case`effort`:return typeof t==`string`&&ne(t);case`string[]`:return v(t);case`file-entry[]`:return Array.isArray(t)&&t.every(y)}}function x(e,t){let n={};for(let r of Object.keys(t)){let t=e[r];t!==void 0&&(n[r]=t)}return n}function S(e,t,n){if(!_(t))return{ok:!1,reason:`${e}: expected an object`};for(let[r,i]of Object.entries(n)){let n=t[r];if(n===void 0){if(i.required)return{ok:!1,reason:`${e}.${r}: required`};continue}if(!b(i.kind,n))return{ok:!1,reason:`${e}.${r}: expected ${i.kind}`}}return{ok:!0,value:x(t,n)}}function C(e){return x(e,h)}function w(e){return S(`agentDefinition`,e,h)}function T(e){let t={name:e.name,description:e.description,systemPrompt:e.systemPrompt};return e.model!==void 0&&(t.model=e.model),e.effort!==void 0&&(t.effort=e.effort),e.role!==void 0&&(t.role=e.role),e.maxTurns!==void 0&&(t.maxTurns=e.maxTurns),e.tools!==void 0&&(t.tools=[...e.tools]),e.disallowedTools!==void 0&&(t.disallowedTools=[...e.disallowedTools]),t}function E(e){return x(e,g)}function D(e){return S(`parentContext`,e,g)}function O(e){let t={agentsMd:e.agentsMd,projectNotesMd:e.projectNotesMd};return e.memoryMd!==void 0&&(t.memoryMd=e.memoryMd),e.taskContext!==void 0&&(t.taskContext=e.taskContext),e.compactInstructions!==void 0&&(t.compactInstructions=e.compactInstructions),e.agentsFileEntries!==void 0&&(t.agentsFileEntries=e.agentsFileEntries.map(e=>({...e}))),e.projectNotesFileEntries!==void 0&&(t.projectNotesFileEntries=e.projectNotesFileEntries.map(e=>({...e}))),t}function le(e){return e.sessionTiers===void 0?{}:{sessionTiers:e.sessionTiers}}async function ue(e){let{sandboxClient:t,sandboxType:n}=e;return t?.snapshot===void 0||n===void 0?{}:{sandboxProjection:{type:n,snapshotId:await t.snapshot()}}}function k(e,t,n,r,o){let s=n.providerDefinitions,c=(n.providerConfig??t.config.provider).name;if(m(s,c)===void 0)throw new i(`validation`,`No provider definition for "${c}" was given to the subagent runner, so the connection a child would make cannot be checked; the subagent was not started.`);let d=j(n.providerConfig,t,e,s),f=a(d,s),p=l(f,r,o);if(p!==void 0)throw new i(`validation`,`The subagent's environment sets ${p} differently from this session, which would change where its provider connects or which credential it sends; the subagent was not started.`);return{providerProfile:d,connectionCheck:u(f,o)}}function de(e,t,n){let r=fe(e.request.agentType,t.customAgentRegistry,t.builtInAgents,t.agentDefinitions),i={taskId:e.taskId,request:e.request,...e.worktree?{worktree:e.worktree}:{},agentDefinition:C(pe(r,e)),parentConfig:se(t.getParentPermissionRules===void 0?t.config:{...t.config,permissions:t.getParentPermissionRules()}),parentContext:E(ce(t.context)),...n.connection??k(e,t,n,process.env,process.env),permissionMode:t.permissionMode,...le(t),...n.logsDir?{logsDir:n.logsDir}:{}};return ue(t).then(e=>({...i,...e}))}function fe(e,t,n,r){let a=t?.(e)??n?.find(t=>t.name===e)??r?.find(t=>t.name===e);if(!a)throw new i(`validation`,`Unknown agent type: ${e}`);return a}function pe(e,t){return{...e,...t.request.model?{model:t.request.model}:{},...t.request.effort===void 0?{}:{effort:t.request.effort},...t.request.allowedTools?{tools:t.request.allowedTools}:{},...t.request.disallowedTools?{disallowedTools:t.request.disallowedTools}:{}}}function A(e,t){return e.apiKeyEnv===void 0?e.apiKey===void 0?t===void 0?{}:t.startsWith(`$ENV:`)?{apiKeyEnv:t.slice(5)}:{apiKey:t}:{apiKey:e.apiKey}:{apiKeyEnv:e.apiKeyEnv}}function j(e,t,n,r){let i=e??t.config.provider,a=m(r,i.name)?.defaults??{},o=i.baseURL??a.baseURL,s=i.options??a.options,c=A(i,a.apiKey);return{...e===void 0&&t.config.currentProvider!==void 0?{profileName:t.config.currentProvider}:{},type:i.name,model:n.request.model??i.model,...c,...o===void 0?{}:{baseURL:o},...i.timeout===void 0?{}:{timeout:i.timeout},...s===void 0?{}:{options:s}}}function M(e){return typeof e==`object`&&!!e}function N(e){if(!M(e)||!P(e,`nonce`)||!P(e,`digest`))return!1;let t=e.names;return Array.isArray(t)&&t.every(e=>typeof e==`string`)}function P(e,t){return typeof e[t]==`string`}function F(e,t){return P(e,t)}function I(e,t){return P(e,t)}function L(e,t){return e[t]===void 0||typeof e[t]==`string`}function R(e){if(e.usage===void 0)return!0;let t=e.usage;return M(t)?typeof t.promptTokens==`number`&&typeof t.completionTokens==`number`&&typeof t.totalTokens==`number`:!1}function z(e){if(e.composedToolNames===void 0)return!0;let t=e.composedToolNames;return Array.isArray(t)?t.every(e=>typeof e==`string`):!1}function B(e){return!M(e)||!I(e,`taskId`)||!M(e.request)||!F(e.request,`agentType`)||!F(e.request,`prompt`)||!F(e.request,`permissionPolicy`)||!F(e.request,`cwd`)||!L(e.request,`resumeSessionId`)||e.worktree!==void 0&&(!M(e.worktree)||!P(e.worktree,`path`))||!w(e.agentDefinition).ok||!M(e.parentConfig)||!D(e.parentContext).ok||!M(e.providerProfile)||!P(e.providerProfile,`type`)||!P(e.providerProfile,`model`)?!1:N(e.connectionCheck)}function V(e){if(!M(e)||!P(e,`type`))return!1;switch(e.type){case`start`:return B(e.payload);case`send`:return P(e,`prompt`);case`cancel`:return e.reason===void 0||typeof e.reason==`string`;default:return!1}}function H(e){if(!M(e)||!P(e,`type`))return!1;switch(e.type){case`ready`:return z(e);case`text_delta`:return P(e,`delta`);case`tool_start`:return P(e,`toolName`);case`tool_end`:return P(e,`toolName`)&&typeof e.success==`boolean`;case`result`:return P(e,`output`)&&R(e);case`error`:return P(e,`message`);case`cancelled`:return e.reason===void 0||typeof e.reason==`string`;default:return!1}}const me=process.platform!==`win32`;function he(e,t){return new Promise(n=>{if(e.exitCode!==null||e.signalCode!==null){n();return}let r=setTimeout(()=>{e.removeListener(`exit`,i),n()},t);r.unref?.();let i=()=>{clearTimeout(r),n()};e.once(`exit`,i)})}const U=new WeakMap;function ge(e){let t=e.stderr;if(!t)return;let n=te({maxBytes:4096,retain:`tail`,truncationMarker:()=>``});U.set(e,n),t.on(`error`,()=>{}),t.on(`data`,e=>n.append(e))}function _e(e){return(U.get(e)?.toString()??``).trim()}function ve(e,t,n,r,a){switch(e.type){case`ready`:t();break;case`result`:n(e);break;case`error`:r(new i(`runner`,e.message));break;case`cancelled`:r(new i(`runner`,e.reason??`Subagent worker cancelled`));break;case`text_delta`:a?.({type:`background_task_text_delta`,delta:e.delta});break;case`tool_start`:a?.({type:`background_task_tool_start`,toolName:e.toolName,firstArg:ye(e.toolArgs)});break;case`tool_end`:a?.({type:`background_task_tool_end`,toolName:e.toolName,success:e.success});break;default:r(new i(`runner`,`Unhandled subagent worker message`))}}function ye(e){if(!e)return;let t=Object.values(e)[0];if(t!==void 0)return typeof t==`object`?JSON.stringify(t):String(t)}function W(e,t){return new Promise((n,r)=>{if(!e.connected){r(new i(`crash`,`Subagent worker IPC channel is closed`));return}e.send(t,e=>{if(e){r(e);return}n()})})}async function G(e,t){await ee(e.child,{graceMs:e.killGraceMs,processGroup:me,preKill:async()=>{e.child.connected&&(await W(e.child,{type:`cancel`,reason:t}).catch(()=>void 0),await he(e.child,e.killGraceMs))}})}function be(e){return new Promise((t,n)=>{new xe(e,t,n).start()})}var xe=class{options;resolve;reject;settled=!1;started=!1;ready=!1;timeoutTimer;handshakeTimer;handshakeBudgetMs;payload;constructor(e,t,n){this.options=e,this.resolve=t,this.reject=n;let r=e.handshakeBudgetMs;this.handshakeBudgetMs=r!==void 0&&r>0?r:3e4,this.payload=e.payload.catch(e=>{this.rejectOnce(e instanceof Error?e:Error(String(e)))}),this.timeoutTimer=Ce(this.options.runtime,e=>this.rejectOnce(e)),this.handshakeTimer=setTimeout(()=>{this.ready||this.settled||(G(this.options.runtime,`Subagent worker never signalled ready`),this.rejectOnce(new i(`runner`,`Subagent worker never signalled ready within ${this.handshakeBudgetMs}ms. Its entry must dispatch worker mode before starting the host application.`)))},this.handshakeBudgetMs),this.handshakeTimer.unref?.()}start(){let{child:e}=this.options.runtime;e.on(`message`,this.onMessage),e.on(`error`,this.onError),e.on(`exit`,this.onExit),e.once(`spawn`,()=>{setImmediate(this.startWorker)})}startWorker=()=>{if(this.started)return;this.started=!0;let{child:e}=this.options.runtime;this.payload.then(t=>t===void 0?void 0:W(e,{type:`start`,payload:t})).catch(e=>{this.rejectOnce(e instanceof Error?e:Error(String(e)))})};onMessage=e=>{if(!H(e)){this.rejectOnce(new i(`runner`,`Received malformed subagent worker message`));return}this.ready=!0,clearTimeout(this.handshakeTimer);let{job:t}=this.options.runtime;ve(e,this.startWorker,this.resolveOnce,this.rejectOnce,t.emit)};onError=e=>{this.rejectOnce(new i(`crash`,e.message))};onExit=(e,t)=>{this.settled||this.rejectOnce(new i(`crash`,Te(e,t,_e(this.options.runtime.child))))};resolveOnce=e=>{if(this.settled)return;this.settled=!0,this.clearTimers(),this.cleanup();let{runtime:t,resolveTranscriptPath:n}=this.options;this.resolve(we(t.job,e,n))};rejectOnce=e=>{this.settled||(this.settled=!0,this.clearTimers(),this.cleanup(),this.reject(e))};clearTimers(){this.timeoutTimer&&clearTimeout(this.timeoutTimer),clearTimeout(this.handshakeTimer)}cleanup(){let{child:e}=this.options.runtime;e.off(`message`,this.onMessage),e.off(`error`,this.onError),e.off(`exit`,this.onExit)}};function Se(e){let t=!1,n=()=>{};return{promise:new Promise((e,t)=>{n=t}),reject(r){t||(t=!0,n(new i(`runner`,r??`Subagent job cancelled: ${e}`)))}}}function Ce(e,t){if(e.job.request.timeoutMs)return setTimeout(()=>{G(e,`Subagent worker timed out`),t(new i(`timeout`,`Subagent worker timed out`))},e.job.request.timeoutMs)}function we(e,t,n){let r=n(e);return{taskId:e.taskId,output:t.output,...r?{metadata:{transcriptPath:r,logPath:r}}:{},...t.usage?{usage:t.usage}:{}}}function Te(e,t,n){return`Subagent worker exited before result: ${t===null?`exit code ${e===null?`unknown`:e}`:`signal ${t}`}${n.length>0?`: ${n}`:``}`}const K=`--__robota-subagent-worker`;function Ee(e){return e.includes(K)}const De=process.platform!==`win32`;function Oe(e){return t=>{let n=new q(t,e);return e.worktreeIsolation===!1?n:c({runner:n,worktreeAdapter:e.worktreeAdapter,hooks:t.config.hooks,hookTypeExecutors:t.hookTypeExecutors})}}var q=class{deps;workerEntry;killGraceMs;handshakeBudgetMs;providerConfig;providerDefinitions;env;logsDir;constructor(e,t){this.deps=e,this.workerEntry=t.workerEntry,this.killGraceMs=t.killGraceMs??p,this.handshakeBudgetMs=t.handshakeBudgetMs,this.providerConfig=t.providerConfig,this.providerDefinitions=t.providerDefinitions,this.env=t.env,this.logsDir=t.logsDir}start(t){let n=this.workerEntry,r={...process.env,...this.env??{}},i=k(t,this.deps,{...this.providerConfig===void 0?{}:{providerConfig:this.providerConfig},providerDefinitions:this.providerDefinitions},process.env,r),a=e(n.execPath,[...n.execArgv??[],...n.args,K],{cwd:d(t),env:r,stdio:[`ignore`,`ignore`,`pipe`,`ipc`],detached:De});ge(a);let o={job:t,child:a,killGraceMs:this.killGraceMs},s=be({runtime:o,payload:this.createStartPayload(t,i),...this.handshakeBudgetMs===void 0?{}:{handshakeBudgetMs:this.handshakeBudgetMs},resolveTranscriptPath:e=>this.resolveTranscriptPath(e)}),c=Se(t.taskId);s.catch(()=>void 0);let l=Promise.race([s,c.promise]);l.catch(()=>void 0);let u=this.resolveTranscriptPath(t);return{taskId:t.taskId,...a.pid!==void 0&&{pid:a.pid},...u!==void 0&&{transcriptPath:u,logPath:u},result:l,cancel:async e=>{c.reject(e),await G(o,e)},send:async e=>{await W(a,{type:`send`,prompt:e})},...u!==void 0&&{readLog:async e=>ke(t.taskId,u,e)}}}createStartPayload(e,t){return de(e,this.deps,{connection:t,providerDefinitions:this.providerDefinitions,...this.logsDir===void 0?{}:{logsDir:this.logsDir}})}resolveTranscriptPath(e){if(this.logsDir)return r(this.logsDir,e.request.parentSessionId,`subagents`,`${e.taskId}.jsonl`)}};function ke(e,r,i){return t(r)?o(e,n(r,`utf8`).split(/\r?\n/).filter(Boolean),i):{taskId:e,cursor:i,lines:[]}}function Ae(e,t,n){let r=e.request.resumeSessionId;if(r!==void 0){if(n===void 0)throw Error(`subagent worker: job ${e.taskId} asks to resume session ${r}, but this composition opens no session store. Register ISubagentWorkerComposition.openSessionStore at the composition root — the same place providerDefinitions is registered.`);oe(n,r,t)}}function je(e,t){let n=e.request.resumeSessionId;if(n!==void 0){if(t.openSessionStore===void 0)throw Error(`subagent worker: job ${e.taskId} asks to resume session ${n}, but this composition opens no session store. Register ISubagentWorkerComposition.openSessionStore at the composition root — the same place providerDefinitions is registered.`);return t.openSessionStore({cwd:e.request.cwd})}}async function Me(e,t){if(e===void 0)return;let n=t?.[e.type];if(n===void 0)throw Error(`subagent worker: sandbox type "${e.type}" is not registered in the worker composition. The parent is sandboxed and passed a snapshot reference, but this child cannot construct that client type. Register it in ISubagentWorkerComposition.sandboxFactories at the composition root — the same place providerDefinitions is registered, and for the same reason.`);return n(e.snapshotId)}const J={write:()=>{},writeLine:()=>{},writeMarkdown:()=>{},writeError:()=>{},prompt:()=>Promise.resolve(``),select:()=>Promise.resolve(0),spinner:()=>({stop:()=>{},update:()=>{}})};let Y=null,X=!1,Z=Promise.resolve();function Q(e){process.send&&process.send(e)}function $(e,t){let n=!1,r=()=>{n||(n=!0,process.exit(t))};if(process.send){let t=setTimeout(r,2e3);t.unref?.(),process.send(e,void 0,void 0,()=>{clearTimeout(t),r()})}else r()}function Ne(e){try{return re(e.getFullHistory())}catch{return}}async function Pe(e,t){try{if(!f(e.connectionCheck,process.env))throw Error(`The provider connection environment changed after the parent checked it; the subagent was not started.`);let n=await Me(e.sandboxProjection,t.sandboxFactories),r=s(e.providerProfile,e.request.model,t.providerDefinitions),i=e.logsDir?ie(e.request.parentSessionId,e.taskId,e.logsDir):void 0,a=je(e,t);Y=ae({agentDefinition:T(e.agentDefinition),parentConfig:e.parentConfig,parentContext:O(e.parentContext),parentTools:t.createTools({cwd:d(e),...n===void 0?{}:{sandboxClient:n},...e.sessionTiers===void 0?{}:{sessionTiers:e.sessionTiers}}),cwd:d(e),provider:r,terminal:J,sessionId:e.request.resumeSessionId??e.taskId,...a===void 0?{}:{sessionStore:a},...i?{sessionLogger:i}:{},permissionMode:e.permissionMode,...e.request.permissionPolicy===void 0?{}:{permissionPolicy:e.request.permissionPolicy},...e.request.allowedTools===void 0?{}:{taskAllowedTools:e.request.allowedTools},...e.request.disallowedTools===void 0?{}:{taskDisallowedTools:e.request.disallowedTools},hooks:e.parentConfig.hooks,...t.createHookTypeExecutors===void 0?{}:{hookTypeExecutors:t.createHookTypeExecutors()},onTextDelta:e=>Q({type:`text_delta`,delta:e}),onToolExecution:Fe}),Ae(e,Y,a);let o=await Y.run(e.request.prompt);if(X){$({type:`cancelled`,reason:`Subagent worker cancelled`},130);return}let c=Ne(Y);$({type:`result`,output:o,...c?{usage:c}:{}},0)}catch(e){if(X){$({type:`cancelled`,reason:`Subagent worker cancelled`},130);return}$({type:`error`,message:e instanceof Error?e.message:String(e)},0)}}function Fe(e){if(e.type===`start`){Q({type:`tool_start`,toolName:e.toolName,toolArgs:e.toolArgs});return}Q({type:`tool_end`,toolName:e.toolName,success:e.success??!0})}function Ie(e){if(Y===null){Q({type:`error`,message:`Subagent worker has not started`});return}Z=Z.then(async()=>{try{await Y?.run(e)}catch(e){Q({type:`error`,message:e instanceof Error?e.message:String(e)})}})}async function Le(e){X=!0,Y?.abort(),Q({type:`cancelled`,reason:e}),await Y?.shutdown({reason:`other`}).catch(()=>void 0),setTimeout(()=>process.exit(130),0)}function Re(e){try{return e.createTools({cwd:process.cwd()}).map(e=>e.getName())}catch(e){process.stderr.write(`robota: could not enumerate the composed tool surface: ${e instanceof Error?e.message:String(e)}\n`);return}}function ze(e){process.send===void 0&&(process.stderr.write(`robota: subagent worker mode requires an IPC channel; it is started by the agent runtime, not by hand.
+`),process.exit(2)),process.on(`message`,t=>{if(!V(t)){Q({type:`error`,message:`Malformed subagent worker parent message`});return}switch(t.type){case`start`:Z=Z.then(()=>Pe(t.payload,e));break;case`send`:Ie(t.prompt);break;case`cancel`:Le(t.reason);break;default:Q({type:`error`,message:`Unhandled subagent worker parent message`})}}),process.on(`disconnect`,()=>{X=!0,Y?.abort(),Y?.shutdown({reason:`other`}).catch(()=>void 0)});let t=Re(e);Q({type:`ready`,...t?{composedToolNames:t}:{}})}export{q as ChildProcessSubagentRunner,K as SUBAGENT_WORKER_MODE_FLAG,Oe as createChildProcessSubagentRunnerFactory,w as decodeAgentDefinitionDto,D as decodeParentContextDto,C as encodeAgentDefinition,E as encodeParentContext,H as isSubagentWorkerChildMessage,Ee as isSubagentWorkerModeArgv,V as isSubagentWorkerParentMessage,T as restoreAgentDefinition,O as restoreParentContext,ze as runSubagentWorkerMain};
 //# sourceMappingURL=index.js.map