@sayknow-cli/coding-agent 0.2.7 → 0.3.1

package/src/tools/subagent.ts

@@ -17,6 +17,8 @@ const MAX_LIST_LIMIT = 50;
 const RECEIPT_PREVIEW_WIDTH = 280;
 const PREVIEW_WIDTH = 2_000;
 const FULL_PREVIEW_WIDTH = 12_000;
+const STEER_QUEUED_GUIDANCE =
+	"The steer message is queued for the subagent's next steering boundary and has not necessarily taken effect yet.";
 
 const subagentSchema = z.object({
 	action: z
@@ -63,6 +65,9 @@ export interface SubagentSnapshot {
 	outputRef?: string;
 	truncated?: boolean;
 	guidance?: string;
+	steerMessage?: string;
+	steerState?: "queued" | "resume_queued" | "resume_started";
+	steerPauseRequested?: boolean;
 	/** Live streaming progress for the awaited subagent (await panel only; UI detail). */
 	progress?: AgentProgress;
 	/** True when a live in-session progress producer exists for this subagent. */
@@ -240,6 +245,7 @@ export class SubagentTool implements AgentTool<typeof subagentSchema, SubagentTo
 			}
 			const records: SubagentRecord[] = [];
 			const missing: SubagentSnapshot[] = [];
+			const steerStates = new Map<string, NonNullable<SubagentSnapshot["steerState"]>>();
 			const record = this.#findVisibleRecord(manager, id, ownerFilter);
 			const verifiedOutputIds = await this.#verifiedOutputIds(record ? [record] : []);
 			if (!record) {
@@ -249,23 +255,41 @@ export class SubagentTool implements AgentTool<typeof subagentSchema, SubagentTo
 				if (record.status === "running") {
 					const handle = manager.getLiveHandle(record.subagentId);
 					if (!handle) throw new ToolError(`Subagent ${record.subagentId} has no live handle.`);
-					await handle.injectMessage(message, "steer");
+					const fromAgentId = this.session.getAgentId?.() ?? undefined;
+					await handle.injectMessage(message, "steer", { fromAgentId });
 					if (params.pause === true) manager.pauseSubagent(record.subagentId, ownerFilter);
+					records.push(manager.getSubagentRecord(record.subagentId, ownerFilter) ?? record);
+					steerStates.set(record.subagentId, "queued");
 				} else {
 					const result = manager.resumeSubagent(record.subagentId, ownerFilter, message);
-					if (!result.ok && result.reason === "context_unavailable") throw new ToolError("context unavailable");
 					if (!result.ok && result.reason === "not_found") {
 						missing.push(this.#missingSnapshot(id, "not_found", "No visible detached subagent matches this id."));
+					} else if (!result.ok) {
+						throw new ToolError(`Failed to resume subagent ${record.subagentId}: ${result.reason ?? "unknown"}.`);
 					} else {
-						records.push(manager.getSubagentRecord(record.subagentId, ownerFilter) ?? record);
+						const snapshotRecord = manager.getSubagentRecord(record.subagentId, ownerFilter) ?? record;
+						records.push(snapshotRecord);
+						steerStates.set(
+							snapshotRecord.subagentId,
+							result.queued === true || result.status === "queued" ? "resume_queued" : "resume_started",
+						);
 					}
 				}
-				if (record.status === "running")
-					records.push(manager.getSubagentRecord(record.subagentId, ownerFilter) ?? record);
 			}
 			return this.#buildSnapshotResult(
 				[
-					...records.map(record => this.#recordSnapshot(manager, record, false, verbosity, verifiedOutputIds)),
+					...records.map(record => {
+						const snapshot = this.#recordSnapshot(manager, record, false, verbosity, verifiedOutputIds);
+						return {
+							...snapshot,
+							steerMessage: message,
+							steerState: steerStates.get(record.subagentId) ?? "queued",
+							steerPauseRequested: params.pause === true,
+							guidance: snapshot.guidance
+								? `${snapshot.guidance} ${STEER_QUEUED_GUIDANCE}`
+								: STEER_QUEUED_GUIDANCE,
+						};
+					}),
 					...missing,
 				],
 				"Subagent steer",
@@ -288,7 +312,7 @@ export class SubagentTool implements AgentTool<typeof subagentSchema, SubagentTo
 		if (ids.length === 1) return ids[0]!;
 		if (ids.length > 1) {
 			throw new ToolError(
-				`\`${action}\` accepts exactly one target because \`message\` is delivered to one subagent.`,
+				`\`${action}\` accepts exactly one target because \`message\` can be queued for only one subagent.`,
 			);
 		}
 		throw new ToolError(`\`${action}\` requires a single subagent id via \`id\`.`);
@@ -533,6 +557,10 @@ export class SubagentTool implements AgentTool<typeof subagentSchema, SubagentTo
 			if (snapshot.description) lines.push(`Description: ${snapshot.description}`);
 			if (snapshot.outputRef) lines.push(`Output: ${snapshot.outputRef}`);
 			if (snapshot.assignment) lines.push("Assignment:", "```", snapshot.assignment, "```");
+			if (snapshot.steerMessage) {
+				lines.push(`Steer (${snapshot.steerState ?? "queued"}):`, "```", snapshot.steerMessage, "```");
+				lines.push(STEER_QUEUED_GUIDANCE);
+			}
 			if (snapshot.resultPreview) {
 				lines.push(snapshot.errorText ? "Error preview:" : "Result preview:", "```", snapshot.resultPreview, "```");
 				if (snapshot.truncated)
@@ -770,6 +798,9 @@ function canonicalizeSnapshotForSignature(snapshot: SubagentSnapshot): unknown {
 		outputRef: snapshot.outputRef ?? null,
 		truncated: snapshot.truncated ?? false,
 		guidance: snapshot.guidance ?? null,
+		steerMessage: snapshot.steerMessage ?? null,
+		steerState: snapshot.steerState ?? null,
+		steerPauseRequested: snapshot.steerPauseRequested ?? false,
 		liveProgressAvailable: snapshot.liveProgressAvailable ?? null,
 		effectiveModel: snapshot.effectiveModel ?? null,
 		requestedModel: snapshot.requestedModel ?? null,

package/src/tools/telegram-send.ts

@@ -0,0 +1,137 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import type { AgentTool, AgentToolContext, AgentToolResult, AgentToolUpdateCallback } from "@sayknow-cli/agent-core";
+import { z } from "zod/v4";
+import { getTelegramFileSink } from "../notifications/attachment-registry";
+import { getNotificationConfig, isGloballyConfigured } from "../notifications/config";
+import type { ToolSession } from "./index";
+
+const telegramSendSchema = z.object({
+	path: z
+		.string()
+		.describe("file path (absolute or relative to cwd) to send to Telegram; must resolve inside the workspace"),
+	caption: z.string().optional().describe("optional caption"),
+});
+
+type TelegramSendParams = z.infer<typeof telegramSendSchema>;
+
+interface TelegramSendDetails {
+	path: string;
+	caption?: string;
+	ok: boolean;
+	error?: string;
+}
+
+export class TelegramSendTool implements AgentTool<typeof telegramSendSchema, TelegramSendDetails> {
+	readonly name = "telegram_send";
+	readonly label = "TelegramSend";
+	readonly summary = "Send a workspace file to Telegram";
+	readonly loadMode = "discoverable";
+	readonly description =
+		"Send a file from the current workspace to the connected Telegram chat as a document. The path must resolve " +
+		"(after following symlinks) to a regular file inside the project root; paths outside the workspace are rejected.";
+	readonly parameters = telegramSendSchema;
+	readonly strict = true;
+
+	constructor(private readonly session: ToolSession) {}
+
+	static createIf(session: ToolSession): TelegramSendTool | null {
+		return isGloballyConfigured(getNotificationConfig(session.settings)) ? new TelegramSendTool(session) : null;
+	}
+
+	/**
+	 * Resolve `requested` against the workspace root and confine it via realpath:
+	 * blocks absolute paths outside the project, `..` traversal, and symlinks that
+	 * escape the root. Returns the resolved real path of a regular file, or an
+	 * error message. This is the egress safety boundary — the model can only send
+	 * files that genuinely live inside the session workspace.
+	 */
+	private async resolveContainedFile(
+		requested: string,
+	): Promise<{ ok: true; path: string } | { ok: false; error: string }> {
+		let root: string;
+		try {
+			root = await fs.promises.realpath(this.session.cwd);
+		} catch {
+			return { ok: false, error: "workspace root is unavailable" };
+		}
+		const absolute = path.isAbsolute(requested) ? requested : path.resolve(root, requested);
+		let real: string;
+		try {
+			real = await fs.promises.realpath(absolute);
+		} catch {
+			return { ok: false, error: `file not found: ${requested}` };
+		}
+		const rel = path.relative(root, real);
+		if (rel === "" || rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
+			return { ok: false, error: "path escapes the workspace root; only files inside the project can be sent" };
+		}
+		let stat: fs.Stats;
+		try {
+			stat = await fs.promises.stat(real);
+		} catch {
+			return { ok: false, error: `file not found: ${requested}` };
+		}
+		if (!stat.isFile()) {
+			return { ok: false, error: "not a regular file" };
+		}
+		return { ok: true, path: real };
+	}
+
+	async execute(
+		_toolCallId: string,
+		params: TelegramSendParams,
+		_signal?: AbortSignal,
+		_onUpdate?: AgentToolUpdateCallback<TelegramSendDetails>,
+		_context?: AgentToolContext,
+	): Promise<AgentToolResult<TelegramSendDetails>> {
+		const sessionId = this.session.getSessionId?.();
+		if (!sessionId) {
+			return {
+				content: [{ type: "text", text: "telegram_send: no active session id" }],
+				details: { path: params.path, caption: params.caption, ok: false, error: "no active session id" },
+				isError: true,
+			};
+		}
+
+		const contained = await this.resolveContainedFile(params.path);
+		if (!contained.ok) {
+			return {
+				content: [{ type: "text", text: `telegram_send: ${contained.error}` }],
+				details: { path: params.path, caption: params.caption, ok: false, error: contained.error },
+				isError: true,
+			};
+		}
+		const abs = contained.path;
+
+		const sink = getTelegramFileSink(sessionId);
+		if (!sink) {
+			return {
+				content: [
+					{ type: "text", text: "telegram_send: Telegram notifications are not connected for this session" },
+				],
+				details: {
+					path: abs,
+					caption: params.caption,
+					ok: false,
+					error: "Telegram notifications are not connected",
+				},
+				isError: true,
+			};
+		}
+
+		const result = await sink({ path: abs, caption: params.caption });
+		if (result.ok) {
+			return {
+				content: [{ type: "text", text: `Sent ${path.basename(abs)} to Telegram.` }],
+				details: { path: abs, caption: params.caption, ok: true },
+			};
+		}
+
+		return {
+			content: [{ type: "text", text: `telegram_send failed: ${result.error}` }],
+			details: { path: abs, caption: params.caption, ok: false, error: result.error },
+			isError: true,
+		};
+	}
+}

package/src/web/insane/bridge.ts

@@ -0,0 +1,350 @@
+/**
+ * Bridge from TypeScript to the vendored insane-search Python engine.
+ *
+ * Invokes `python3 -m engine "<url>" --json` per fallback attempt (cwd + PYTHONPATH
+ * pointed at the vendored engine), validates the JSON envelope, and maps it onto a
+ * discriminated result. Hardened: clamped timeout, AbortSignal propagation that
+ * kills+reaps the child, bounded stdout/stderr capture, and a per-process
+ * concurrency cap so blocked reads cannot fork-storm.
+ *
+ * Fail-closed: missing dependencies / bad output / auth-required never throw past
+ * the caller and never auto-install anything; they return ok:false with a stable,
+ * bounded note so `read` can continue with its normal degraded result.
+ */
+import { type ChildProcess, spawn as nodeSpawn } from "node:child_process";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { $which } from "@sayknow-cli/utils";
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+/** packages/coding-agent/vendor/insane-search */
+export const INSANE_VENDOR_DIR = path.resolve(HERE, "../../../vendor/insane-search");
+const TEMPLATES_DIR = path.join(INSANE_VENDOR_DIR, "engine", "templates");
+
+const MAX_STDOUT_BYTES = 8 * 1024 * 1024;
+const MAX_STDERR_BYTES = 64 * 1024;
+const DEFAULT_TIMEOUT_MS = 25_000;
+const MIN_TIMEOUT_MS = 1_000;
+const MAX_TIMEOUT_MS = 120_000;
+const DEFAULT_CONCURRENCY = 2;
+const KILL_GRACE_MS = 2_000;
+
+/** Stable note prefixes — tests assert on these without depending on full stderr. */
+export const INSANE_NOTES = {
+	guardBlocked: (reason: string) => `insane fallback blocked: target URL is not public HTTP(S): ${reason}`,
+	vendorMissing: `insane fallback unavailable: vendor engine missing at packages/coding-agent/vendor/insane-search`,
+	noPython: `insane fallback unavailable: python3 not found; install python3 and curl_cffi, then retry with web.insaneFallback=true`,
+	noCurlCffi: `insane fallback unavailable: python3 cannot import curl_cffi; install curl_cffi for Phase 0-2`,
+	noBrowser: `insane fallback unavailable: node/playwright/stealth dependencies missing for Phase 3; install dependencies under packages/coding-agent/vendor/insane-search/engine/templates`,
+	timeout: (seconds: number) => `insane fallback timed out after ${seconds}s; normal read fallback preserved`,
+	invalidJson: `insane fallback failed: engine returned invalid JSON`,
+	authRequired: `insane fallback stopped: authentication required`,
+	verdict: (verdict: string) => `insane fallback failed: engine returned verdict=${verdict}`,
+	untried: (routes: string) => `insane fallback routes not tried: ${routes}`,
+	mustBrowserMcp: `insane fallback requires browser MCP/manual phase: must_invoke_playwright_mcp=true`,
+	concurrency: `insane fallback skipped: max concurrent engine attempts reached`,
+	emptyContent: `insane fallback failed: engine reported ok but returned no content`,
+} as const;
+
+/** Raw JSON envelope produced by `python3 -m engine --json`. */
+export interface InsaneFetchResultRaw {
+	ok?: boolean;
+	verdict?: string;
+	content?: string;
+	profile_used?: string;
+	trace?: unknown;
+	untried_routes?: string[];
+	must_invoke_playwright_mcp?: boolean;
+}
+
+export interface InsaneSuccess {
+	ok: true;
+	content: string;
+	profileUsed?: string;
+	notes: string[];
+}
+
+export interface InsaneFailure {
+	ok: false;
+	reason: string;
+	verdict?: string;
+	notes: string[];
+}
+
+export type InsaneBridgeResult = InsaneSuccess | InsaneFailure;
+
+export interface EngineInvocation {
+	url: string;
+	timeoutMs: number;
+	signal?: AbortSignal;
+}
+
+export interface EngineRawOutput {
+	code: number | null;
+	stdout: string;
+	stderr: string;
+	timedOut: boolean;
+	aborted: boolean;
+}
+
+/** Seam: run the engine subprocess. Default spawns python3. */
+export type EngineRunner = (inv: EngineInvocation) => Promise<EngineRawOutput>;
+
+export interface InsaneDependencyStatus {
+	vendorPresent: boolean;
+	python: boolean;
+	curlCffi: boolean;
+	browser: boolean;
+}
+
+/** Seam: probe dependencies. Default probes the real environment (cached). */
+export type DependencyProber = () => Promise<InsaneDependencyStatus>;
+
+// ---------------------------------------------------------------------------
+// Subprocess runner
+// ---------------------------------------------------------------------------
+
+type SpawnImpl = typeof nodeSpawn;
+
+function clampTimeoutMs(timeoutMs: number | undefined): number {
+	const value = timeoutMs ?? DEFAULT_TIMEOUT_MS;
+	if (!Number.isFinite(value)) return DEFAULT_TIMEOUT_MS;
+	return Math.max(MIN_TIMEOUT_MS, Math.min(MAX_TIMEOUT_MS, Math.floor(value)));
+}
+
+function appendCapped(buffer: string, chunk: string, cap: number): string {
+	if (buffer.length >= cap) return buffer;
+	const remaining = cap - buffer.length;
+	return buffer + (chunk.length > remaining ? chunk.slice(0, remaining) : chunk);
+}
+
+/** Kill a child and its group, escalating to SIGKILL after a grace period. */
+function killChild(child: ChildProcess): void {
+	try {
+		child.kill("SIGTERM");
+	} catch {
+		// already gone
+	}
+	const timer = setTimeout(() => {
+		try {
+			child.kill("SIGKILL");
+		} catch {
+			// already gone
+		}
+	}, KILL_GRACE_MS);
+	timer.unref?.();
+	child.once("exit", () => clearTimeout(timer));
+}
+
+/** Real engine runner: `python3 -m engine "<url>" --json`. */
+export function runEngineSubprocess(
+	inv: EngineInvocation,
+	options: { spawnImpl?: SpawnImpl } = {},
+): Promise<EngineRawOutput> {
+	const spawnImpl = options.spawnImpl ?? nodeSpawn;
+	return new Promise<EngineRawOutput>(resolve => {
+		let stdout = "";
+		let stderr = "";
+		let settled = false;
+		let timedOut = false;
+		let aborted = false;
+
+		const child = spawnImpl("python3", ["-m", "engine", inv.url, "--json"], {
+			cwd: INSANE_VENDOR_DIR,
+			env: { ...process.env, PYTHONPATH: INSANE_VENDOR_DIR },
+			stdio: ["ignore", "pipe", "pipe"],
+		});
+
+		const finish = (code: number | null): void => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			inv.signal?.removeEventListener("abort", onAbort);
+			resolve({ code, stdout, stderr, timedOut, aborted });
+		};
+
+		const timer = setTimeout(() => {
+			timedOut = true;
+			killChild(child);
+		}, inv.timeoutMs);
+		timer.unref?.();
+
+		const onAbort = (): void => {
+			aborted = true;
+			killChild(child);
+		};
+		if (inv.signal) {
+			if (inv.signal.aborted) onAbort();
+			else inv.signal.addEventListener("abort", onAbort, { once: true });
+		}
+
+		child.stdout?.on("data", (chunk: Buffer) => {
+			stdout = appendCapped(stdout, chunk.toString("utf8"), MAX_STDOUT_BYTES);
+		});
+		child.stderr?.on("data", (chunk: Buffer) => {
+			stderr = appendCapped(stderr, chunk.toString("utf8"), MAX_STDERR_BYTES);
+		});
+		child.on("error", () => finish(null));
+		child.on("close", code => finish(code));
+	});
+}
+
+// ---------------------------------------------------------------------------
+// Dependency probes (cached)
+// ---------------------------------------------------------------------------
+
+let probeCache: Promise<InsaneDependencyStatus> | null = null;
+
+/** Reset the probe cache between tests so probe state never leaks. */
+export function resetInsaneProbeCacheForTest(): void {
+	probeCache = null;
+}
+
+function runProbeCommand(cmd: string, args: string[], cwd?: string): Promise<boolean> {
+	return new Promise<boolean>(resolve => {
+		let settled = false;
+		const done = (ok: boolean): void => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			resolve(ok);
+		};
+		const child = nodeSpawn(cmd, args, { cwd, stdio: "ignore" });
+		const timer = setTimeout(() => {
+			try {
+				child.kill("SIGKILL");
+			} catch {
+				// gone
+			}
+			done(false);
+		}, 10_000);
+		timer.unref?.();
+		child.on("error", () => done(false));
+		child.on("close", code => done(code === 0));
+	});
+}
+
+async function probeRealDependencies(): Promise<InsaneDependencyStatus> {
+	const { existsSync } = await import("node:fs");
+	const vendorPresent = existsSync(path.join(INSANE_VENDOR_DIR, "engine", "__main__.py"));
+	if (!vendorPresent) {
+		return { vendorPresent: false, python: false, curlCffi: false, browser: false };
+	}
+	const python = Boolean($which("python3"));
+	const curlCffi = python ? await runProbeCommand("python3", ["-c", "import curl_cffi"]) : false;
+	const node = Boolean($which("node"));
+	const browser = node
+		? await runProbeCommand(
+				"node",
+				[
+					"-e",
+					"require.resolve('playwright');require.resolve('playwright-extra');require.resolve('puppeteer-extra-plugin-stealth')",
+				],
+				TEMPLATES_DIR,
+			)
+		: false;
+	return { vendorPresent, python, curlCffi, browser };
+}
+
+/** Probe (and cache) the insane-search runtime dependencies. */
+export function probeInsaneDependencies(): Promise<InsaneDependencyStatus> {
+	if (!probeCache) probeCache = probeRealDependencies();
+	return probeCache;
+}
+
+// ---------------------------------------------------------------------------
+// Concurrency gate
+// ---------------------------------------------------------------------------
+
+let inFlight = 0;
+
+export function resetInsaneConcurrencyForTest(): void {
+	inFlight = 0;
+}
+
+// ---------------------------------------------------------------------------
+// High-level bridge
+// ---------------------------------------------------------------------------
+
+export interface TryInsaneFetchOptions {
+	timeoutMs?: number;
+	signal?: AbortSignal;
+	concurrencyLimit?: number;
+	/** Seam: dependency prober (default real, cached). */
+	prober?: DependencyProber;
+	/** Seam: engine runner (default real subprocess). */
+	runner?: EngineRunner;
+}
+
+function mapEngineOutput(raw: EngineRawOutput, timeoutMs: number): InsaneBridgeResult {
+	const notes: string[] = [];
+	if (raw.aborted) {
+		return { ok: false, reason: "aborted", notes };
+	}
+	if (raw.timedOut) {
+		notes.push(INSANE_NOTES.timeout(Math.round(timeoutMs / 1000)));
+		return { ok: false, reason: "timeout", notes };
+	}
+	let parsed: InsaneFetchResultRaw;
+	try {
+		parsed = JSON.parse(raw.stdout) as InsaneFetchResultRaw;
+	} catch {
+		notes.push(INSANE_NOTES.invalidJson);
+		return { ok: false, reason: "invalid-json", notes };
+	}
+
+	const verdict = parsed.verdict?.trim();
+	// The engine emits the Verdict enum value `auth_required` (401/407); also tolerate
+	// the human-readable phrase defensively. Either is a terminal public-content boundary.
+	if (verdict && /^(?:auth_required|authentication required)$/i.test(verdict)) {
+		notes.push(INSANE_NOTES.authRequired);
+		return { ok: false, reason: "auth-required", verdict, notes };
+	}
+
+	if (parsed.untried_routes && parsed.untried_routes.length > 0) {
+		notes.push(INSANE_NOTES.untried(parsed.untried_routes.slice(0, 8).join(", ")));
+	}
+	if (parsed.must_invoke_playwright_mcp) {
+		notes.push(INSANE_NOTES.mustBrowserMcp);
+	}
+
+	if (parsed.ok && typeof parsed.content === "string" && parsed.content.trim().length > 0) {
+		return { ok: true, content: parsed.content, profileUsed: parsed.profile_used, notes };
+	}
+	if (parsed.ok) {
+		notes.push(INSANE_NOTES.emptyContent);
+		return { ok: false, reason: "empty-content", notes };
+	}
+	notes.push(INSANE_NOTES.verdict(verdict || "unknown"));
+	return { ok: false, reason: "engine-failed", verdict, notes };
+}
+
+/**
+ * Attempt to read `url` through the insane-search engine. The caller is
+ * responsible for the opt-in gate, raw-mode skip, and the public-URL guard
+ * (which MUST run before this is called). Never throws; always returns a result.
+ */
+export async function tryInsaneFetch(url: string, options: TryInsaneFetchOptions = {}): Promise<InsaneBridgeResult> {
+	const prober = options.prober ?? probeInsaneDependencies;
+	const runner = options.runner ?? (inv => runEngineSubprocess(inv));
+	const limit = options.concurrencyLimit ?? DEFAULT_CONCURRENCY;
+
+	const deps = await prober();
+	if (!deps.vendorPresent) return { ok: false, reason: "vendor-missing", notes: [INSANE_NOTES.vendorMissing] };
+	if (!deps.python) return { ok: false, reason: "no-python", notes: [INSANE_NOTES.noPython] };
+	if (!deps.curlCffi) return { ok: false, reason: "no-curl-cffi", notes: [INSANE_NOTES.noCurlCffi] };
+	if (!deps.browser) return { ok: false, reason: "no-browser", notes: [INSANE_NOTES.noBrowser] };
+
+	if (inFlight >= limit) {
+		return { ok: false, reason: "concurrency", notes: [INSANE_NOTES.concurrency] };
+	}
+
+	inFlight++;
+	try {
+		const timeoutMs = clampTimeoutMs(options.timeoutMs);
+		const raw = await runner({ url, timeoutMs, signal: options.signal });
+		return mapEngineOutput(raw, timeoutMs);
+	} finally {
+		inFlight--;
+	}
+}