@selesai/code 0.13.15 → 0.13.18

package/dist/extensions/pi-subagents/test/support/real-session-runner.ts

@@ -1,311 +0,0 @@
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { type AssistantMessage, type Context, type ToolCall } from "@earendil-works/pi-ai";
-import {
-	type FauxContentBlock,
-	type FauxResponseStep,
-	fauxAssistantMessage,
-	fauxText,
-	fauxToolCall,
-	fauxProvider,
-} from "@earendil-works/pi-ai/providers/faux";
-import {
-	type AgentSession,
-	type AgentSessionEvent,
-	createAgentSession,
-	ModelRuntime,
-	DefaultResourceLoader,
-	SessionManager,
-	SettingsManager,
-} from "@selesai/code";
-
-const EXTENSION_PATH = fileURLToPath(new URL("../../src/extension/index.ts", import.meta.url));
-const CHILD_CLI_PATH = fileURLToPath(new URL("./real-session-child-cli.mjs", import.meta.url));
-
-export type FauxReply = string | FauxContentBlock | FauxContentBlock[] | AssistantMessage;
-export type FauxResponder = (context: Context, state: { callCount: number }) => FauxReply | Promise<FauxReply>;
-
-export interface RealSessionRunOptions {
-	prompt: string;
-	childText: string;
-	respond: FauxResponder;
-	timeoutMs?: number;
-	projectFiles?: Record<string, string>;
-	reportChildTools?: boolean;
-}
-
-export interface RealSessionRun {
-	responseText: string;
-	parentSession: AgentSession;
-	modelCalls: number;
-	dispose: () => Promise<void>;
-}
-
-export function subagentCall(args: Record<string, unknown>, id = "call-subagent-e2e"): ToolCall {
-	return fauxToolCall("subagent", args, { id });
-}
-
-export function routeParentThroughSubagent(input: {
-	childMarker: string;
-	subagentArgs: Record<string, unknown>;
-}): FauxResponder {
-	return (context) => {
-		const isParent = (context.tools ?? []).some((tool) => tool.name === "subagent");
-		if (!isParent) return "Unexpected non-parent model call.";
-		const resultText = latestSubagentToolResultText(context.messages as Array<{ role?: string; toolName?: string; content?: unknown }>);
-		if (resultText !== undefined) {
-			return `Parent relays: ${resultText.includes(input.childMarker) ? input.childMarker : "CHILD_MISSING"}`;
-		}
-		return subagentCall(input.subagentArgs);
-	};
-}
-
-export function subagentToolResults(session: AgentSession): string[] {
-	const results: string[] = [];
-	for (const message of session.messages) {
-		if (message.role !== "toolResult") continue;
-		if ((message as { toolName?: string }).toolName !== "subagent") continue;
-		results.push(textFromContent((message as { content?: unknown }).content));
-	}
-	return results;
-}
-
-function latestSubagentToolResultText(messages: Array<{ role?: string; toolName?: string; content?: unknown }>): string | undefined {
-	for (let i = messages.length - 1; i >= 0; i--) {
-		const message = messages[i]!;
-		if (message.role === "toolResult" && message.toolName === "subagent") {
-			return textFromContent(message.content);
-		}
-	}
-	return undefined;
-}
-
-function textFromContent(content: unknown): string {
-	if (!Array.isArray(content)) return "";
-	return content
-		.map((part) => part && typeof part === "object" && (part as { type?: unknown }).type === "text"
-			? String((part as { text?: unknown }).text ?? "")
-			: "")
-		.join("");
-}
-
-function toAssistantMessage(reply: FauxReply): AssistantMessage {
-	if (reply && typeof reply === "object" && "role" in reply) return reply as AssistantMessage;
-	const content: FauxContentBlock[] = typeof reply === "string" ? [fauxText(reply)] : Array.isArray(reply) ? reply : [reply];
-	const hasToolCall = content.some((block) => (block as { type?: string }).type === "toolCall");
-	return fauxAssistantMessage(content, { stopReason: hasToolCall ? "toolUse" : "stop" });
-}
-
-function installChildPiShim(childText: string, reportChildTools = false): () => void {
-	const rootDir = mkdtempSync(path.join(os.tmpdir(), "pi-real-session-cli-"));
-	const binDir = path.join(rootDir, "bin");
-	const piPackageDir = path.join(rootDir, "pi-package");
-	const childCliPath = path.join(piPackageDir, "dist", "cli.mjs");
-	const previousPath = process.env.PATH;
-	const previousPiBinary = process.env.SELESAI_SUBAGENT_SELESAI_BINARY;
-	const previousChildText = process.env.SELESAI_SUBAGENTS_E2E_CHILD_TEXT;
-	const previousReportTools = process.env.SELESAI_SUBAGENTS_E2E_REPORT_CHILD_TOOLS;
-	const previousArgv1 = process.argv[1];
-
-	writeFileSync(path.join(rootDir, ".keep"), "");
-	mkdirSync(binDir, { recursive: true });
-	mkdirSync(path.dirname(childCliPath), { recursive: true });
-	writeFileSync(childCliPath, `import ${JSON.stringify(pathToFileURL(CHILD_CLI_PATH).href)};\n`);
-	writeFileSync(
-		path.join(piPackageDir, "package.json"),
-		JSON.stringify({ name: "@selesai/code" }),
-	);
-	writeFileSync(
-		path.join(binDir, "pi"),
-		`#!/bin/sh\nexec "${process.execPath}" "${childCliPath}" "$@"\n`,
-		{ mode: 0o755 },
-	);
-	writeFileSync(
-		path.join(binDir, "pi.cmd"),
-		`@echo off\r\n"${process.execPath}" "${childCliPath}" %*\r\n`,
-	);
-
-	process.env.PATH = `${binDir}${path.delimiter}${previousPath ?? ""}`;
-	if (process.platform === "win32") {
-		delete process.env.SELESAI_SUBAGENT_SELESAI_BINARY;
-		process.argv[1] = childCliPath;
-	} else {
-		process.env.SELESAI_SUBAGENT_SELESAI_BINARY = path.join(binDir, "pi");
-	}
-	process.env.SELESAI_SUBAGENTS_E2E_CHILD_TEXT = childText;
-	if (reportChildTools) process.env.SELESAI_SUBAGENTS_E2E_REPORT_CHILD_TOOLS = "1";
-	else delete process.env.SELESAI_SUBAGENTS_E2E_REPORT_CHILD_TOOLS;
-
-	return () => {
-		if (previousPath === undefined) delete process.env.PATH;
-		else process.env.PATH = previousPath;
-		if (previousPiBinary === undefined) delete process.env.SELESAI_SUBAGENT_SELESAI_BINARY;
-		else process.env.SELESAI_SUBAGENT_SELESAI_BINARY = previousPiBinary;
-		if (process.platform === "win32") {
-			if (previousArgv1 === undefined) delete process.argv[1];
-			else process.argv[1] = previousArgv1;
-		}
-		if (previousChildText === undefined) delete process.env.SELESAI_SUBAGENTS_E2E_CHILD_TEXT;
-		else process.env.SELESAI_SUBAGENTS_E2E_CHILD_TEXT = previousChildText;
-		if (previousReportTools === undefined) delete process.env.SELESAI_SUBAGENTS_E2E_REPORT_CHILD_TOOLS;
-		else process.env.SELESAI_SUBAGENTS_E2E_REPORT_CHILD_TOOLS = previousReportTools;
-		rmSync(rootDir, { recursive: true, force: true });
-	};
-}
-
-function setEnv(name: string, value: string | undefined): void {
-	if (value === undefined) delete process.env[name];
-	else process.env[name] = value;
-}
-
-function restoreEnv(snapshot: Map<string, string | undefined>): void {
-	for (const [name, value] of snapshot) setEnv(name, value);
-}
-
-export async function runRealSubagentSession(options: RealSessionRunOptions): Promise<RealSessionRun> {
-	const cwd = mkdtempSync(path.join(os.tmpdir(), "pi-real-session-cwd-"));
-	const home = mkdtempSync(path.join(os.tmpdir(), "pi-real-session-home-"));
-	const previousCwd = process.cwd();
-	const envSnapshot = new Map([
-		["HOME", process.env.HOME],
-		["USERPROFILE", process.env.USERPROFILE],
-		["SELESAI_SUBAGENTS_TEMP_ROOT", process.env.SELESAI_SUBAGENTS_TEMP_ROOT],
-		["SELESAI_CODING_AGENT_DIR", process.env.SELESAI_CODING_AGENT_DIR],
-		["SELESAI_SUBAGENT_EXTRA_AGENT_DIRS", process.env.SELESAI_SUBAGENT_EXTRA_AGENT_DIRS],
-		["SELESAI_SUBAGENT_CHILD", process.env.SELESAI_SUBAGENT_CHILD],
-		["SELESAI_SUBAGENT_FANOUT_CHILD", process.env.SELESAI_SUBAGENT_FANOUT_CHILD],
-		["SELESAI_SUBAGENT_DEPTH", process.env.SELESAI_SUBAGENT_DEPTH],
-		["SELESAI_SUBAGENT_MAX_DEPTH", process.env.SELESAI_SUBAGENT_MAX_DEPTH],
-		["SELESAI_SUBAGENT_PARENT_SESSION", process.env.SELESAI_SUBAGENT_PARENT_SESSION],
-		["SELESAI_SUBAGENT_SELESAI_BINARY", process.env.SELESAI_SUBAGENT_SELESAI_BINARY],
-		["SELESAI_SUBAGENTS_CODING_AGENT_PACKAGE_ROOT", process.env.SELESAI_SUBAGENTS_CODING_AGENT_PACKAGE_ROOT],
-	]);
-	const uninstallChildPi = installChildPiShim(options.childText, options.reportChildTools);
-	let session: AgentSession | undefined;
-	let disposed = false;
-
-	const dispose = async () => {
-		if (disposed) return;
-		disposed = true;
-		try {
-			await session?.extensionRunner.emit({ type: "session_shutdown", reason: "quit" });
-		} catch {}
-		try {
-			session?.dispose();
-		} catch {}
-		uninstallChildPi();
-		restoreEnv(envSnapshot);
-		try {
-			process.chdir(previousCwd);
-		} catch {}
-		rmSync(cwd, { recursive: true, force: true });
-		rmSync(home, { recursive: true, force: true });
-	};
-
-	try {
-		process.chdir(cwd);
-		process.env.HOME = home;
-		process.env.USERPROFILE = home;
-		process.env.SELESAI_SUBAGENTS_TEMP_ROOT ??= path.join(home, "pi-subagents-temp");
-		process.env.SELESAI_CODING_AGENT_DIR = home;
-		delete process.env.SELESAI_SUBAGENT_EXTRA_AGENT_DIRS;
-		delete process.env.SELESAI_SUBAGENT_CHILD;
-		delete process.env.SELESAI_SUBAGENT_FANOUT_CHILD;
-		delete process.env.SELESAI_SUBAGENT_DEPTH;
-		delete process.env.SELESAI_SUBAGENT_MAX_DEPTH;
-		delete process.env.SELESAI_SUBAGENT_PARENT_SESSION;
-		delete process.env.SELESAI_SUBAGENTS_CODING_AGENT_PACKAGE_ROOT;
-		for (const [relativePath, content] of Object.entries(options.projectFiles ?? {})) {
-			const target = path.resolve(cwd, relativePath);
-			if (target !== cwd && !target.startsWith(`${cwd}${path.sep}`)) throw new Error(`E2E project file escapes cwd: ${relativePath}`);
-			mkdirSync(path.dirname(target), { recursive: true });
-			writeFileSync(target, content, "utf-8");
-		}
-
-		const faux = fauxProvider({
-			provider: "faux-e2e-parent",
-			models: [{ id: "parent", contextWindow: 200_000 }],
-		});
-		const modelRuntime = await ModelRuntime.create({
-			authPath: path.join(home, "auth.json"),
-			modelsPath: null,
-			allowModelNetwork: false,
-		});
-		modelRuntime.registerProvider(faux.provider.id, {
-			name: faux.provider.name,
-			api: faux.api,
-			apiKey: "faux",
-			streamSimple: faux.provider.streamSimple,
-			models: [...faux.models],
-		});
-		const model = modelRuntime.getModel(faux.provider.id, "parent");
-		if (!model) throw new Error("faux parent model was not registered");
-		const respond = options.respond;
-		const responseFactory: FauxResponseStep = async (context, _streamOptions, state) => toAssistantMessage(await respond(context, state));
-		faux.setResponses(Array.from({ length: 8 }, () => responseFactory));
-
-		const settingsManager = SettingsManager.inMemory({
-			compaction: { enabled: false },
-			retry: { enabled: false },
-		});
-		const loader = new DefaultResourceLoader({
-			cwd,
-			agentDir: home,
-			settingsManager,
-			additionalExtensionPaths: [EXTENSION_PATH],
-			noSkills: true,
-			noPromptTemplates: true,
-			noThemes: true,
-			noContextFiles: true,
-			systemPrompt: "You are an E2E parent. Delegate with the subagent tool, then report the tool result.",
-		});
-		await loader.reload();
-
-		const created = await createAgentSession({
-			cwd,
-			agentDir: home,
-			model,
-			modelRuntime,
-			resourceLoader: loader,
-			sessionManager: SessionManager.create(cwd, path.join(home, "sessions")),
-			settingsManager,
-		});
-		session = created.session;
-		session.setSessionName("real-session-e2e-parent");
-
-		let responseText = "";
-		const unsubscribe = session.subscribe((event: AgentSessionEvent) => {
-			if (event.type === "message_start") responseText = "";
-			if (event.type === "message_update" && event.assistantMessageEvent.type === "text_delta") {
-				responseText += event.assistantMessageEvent.delta;
-			}
-		});
-
-		await session.bindExtensions({});
-		const timeoutMs = options.timeoutMs ?? 30_000;
-		let timer: ReturnType<typeof setTimeout> | undefined;
-		try {
-			await Promise.race([
-				session.prompt(options.prompt, { expandPromptTemplates: false }),
-				new Promise<never>((_, reject) => {
-					timer = setTimeout(() => reject(new Error(`real-session E2E timed out after ${timeoutMs}ms`)), timeoutMs);
-				}),
-			]);
-		} finally {
-			if (timer) clearTimeout(timer);
-			unsubscribe();
-		}
-
-		return {
-			responseText: responseText.trim() || session.getLastAssistantText()?.trim() || "",
-			parentSession: session,
-			modelCalls: faux.state.callCount,
-			dispose,
-		};
-	} catch (error) {
-		await dispose();
-		throw error;
-	}
-}

package/dist/extensions/pi-subagents/test/unit/capability-ceiling-pi-args.test.ts

@@ -1,84 +0,0 @@
-import assert from "node:assert/strict";
-import { describe, it } from "node:test";
-import { buildPiArgs } from "../../src/runs/shared/pi-args.ts";
-
-describe("capability ceiling child launch enforcement", () => {
-	const base = {
-		baseArgs: [] as string[],
-		task: "test",
-		sessionEnabled: false,
-		inheritProjectContext: false,
-		inheritSkills: false,
-	};
-
-	it("intersects declared tools and preserves structured output as an internal tool", () => {
-		const { args, env } = buildPiArgs({
-			...base,
-			tools: ["read", "write", "subagent"],
-			capabilityCeiling: { version: 1, allowedTools: ["read", "structured_output"], denyExtensions: false, sources: ["test"] },
-			structuredOutput: { schema: {}, schemaPath: "/tmp/schema.json", outputPath: "/tmp/output.json" },
-		});
-		assert.deepEqual(args.slice(args.indexOf("--tools") + 1, args.indexOf("--tools") + 2), ["read,structured_output"]);
-		assert.equal(env.SELESAI_SUBAGENT_CAPABILITY_CEILING_V1 !== undefined, true);
-		assert.equal(args.includes("write"), false);
-		assert.equal(args.includes("subagent"), false);
-	});
-
-	it("allows a valid empty intersection and denies configured extensions", () => {
-		const { args } = buildPiArgs({
-			...base,
-			tools: ["read", "/tmp/provider.ts"],
-			extensions: ["/tmp/extension.ts"],
-			capabilityCeiling: { version: 1, allowedTools: [], denyExtensions: true, sources: ["plan"] },
-		});
-		assert.ok(args.includes("--no-tools"));
-		assert.ok(args.includes("--no-extensions"));
-		assert.equal(args.includes("/tmp/provider.ts"), false);
-		assert.equal(args.includes("/tmp/extension.ts"), false);
-	});
-
-	it("restricts omitted tool declarations without requiring every allowed name", () => {
-		const { args, env } = buildPiArgs({
-			...base,
-			capabilityCeiling: { version: 1, allowedTools: ["read", "grep"], denyExtensions: true, sources: ["plan"] },
-		});
-		assert.ok(args.includes("--tools"));
-		assert.ok(args.includes("grep,read"));
-		assert.equal(env.SELESAI_SUBAGENT_REQUIRED_TOOLS, undefined);
-	});
-
-
-	it("does not report retained extension paths as removed tools", () => {
-		const { capabilityAudit } = buildPiArgs({
-			...base,
-			tools: ["read", "/tmp/provider.ts"],
-			extensions: ["/tmp/extension.ts"],
-			capabilityCeiling: { version: 1, allowedTools: ["read"], denyExtensions: false, sources: ["plan"] },
-		});
-		assert.deepEqual(capabilityAudit?.requestedTools, ["read"]);
-		assert.deepEqual(capabilityAudit?.removedTools, []);
-		assert.equal(capabilityAudit?.removedExtensionCount, 0);
-	});
-
-	it("counts denied extension entries without exposing them as tool names", () => {
-		const { capabilityAudit } = buildPiArgs({
-			...base,
-			tools: ["read", "/tmp/provider.ts"],
-			extensions: ["/tmp/extension.ts"],
-			subagentOnlyExtensions: ["/tmp/child-only.ts"],
-			capabilityCeiling: { version: 1, allowedTools: ["read"], denyExtensions: true, sources: ["plan"] },
-		});
-		assert.deepEqual(capabilityAudit?.requestedTools, ["read"]);
-		assert.deepEqual(capabilityAudit?.removedTools, []);
-		assert.equal(capabilityAudit?.removedExtensionCount, 3);
-	});
-
-	it("fails closed when lazy skills require a denied read tool", () => {
-		assert.throws(() => buildPiArgs({
-			...base,
-			tools: ["grep"],
-			requireReadTool: true,
-			capabilityCeiling: { version: 1, allowedTools: ["grep"], denyExtensions: false, sources: ["plan"] },
-		}), /excludes required tool 'read'/);
-	});
-});

package/dist/extensions/pi-subagents/test/unit/child-protocol.test.ts

@@ -1,202 +0,0 @@
-import assert from "node:assert/strict";
-import { Buffer } from "node:buffer";
-import { describe, it } from "node:test";
-import {
-	createBoundedByteTail,
-	createBoundedLineReader,
-	formatProtocolOutputLimit,
-	MAX_CHILD_PENDING_LINE_BYTES,
-	PI_AGGREGATE_EVENT_PROJECTOR,
-	projectChildLifecycle,
-	type ProtocolOutputLimit,
-} from "../../src/runs/shared/child-protocol.ts";
-
-describe("bounded child protocol reader", () => {
-	it("reassembles fragmented lines and flushes a final unterminated line", () => {
-		const lines: string[] = [];
-		const reader = createBoundedLineReader({ maxPendingLineBytes: 100, onLine: (line) => lines.push(line), onLimit: () => assert.fail("unexpected limit") });
-		reader.push('{"type":"message');
-		reader.push('_end"}\n{"type":"agent_settled"}');
-		reader.end();
-		assert.deepEqual(lines, ['{"type":"message_end"}', '{"type":"agent_settled"}']);
-	});
-
-	it("preserves UTF-8 characters split across byte chunks", () => {
-		const lines: string[] = [];
-		const bytes = Buffer.from('{"text":"你好"}\n');
-		const split = bytes.indexOf(Buffer.from("你")) + 1;
-		const reader = createBoundedLineReader({ maxPendingLineBytes: 100, onLine: (line) => lines.push(line), onLimit: () => assert.fail("unexpected limit") });
-		reader.push(bytes.subarray(0, split));
-		reader.push(bytes.subarray(split));
-		reader.end();
-		assert.deepEqual(lines, ['{"text":"你好"}']);
-	});
-
-	it("accepts Pi-sized image payload lines by default", () => {
-		const lines: string[] = [];
-		const reader = createBoundedLineReader({ onLine: (line) => lines.push(line), onLimit: () => assert.fail("unexpected limit") });
-		const imageSizedLine = "x".repeat(5 * 1024 * 1024);
-		reader.push(imageSizedLine);
-		reader.push("\n");
-		reader.end();
-		assert.equal(MAX_CHILD_PENDING_LINE_BYTES, 16 * 1024 * 1024);
-		assert.equal(lines.length, 1);
-		assert.equal(lines[0]?.length, imageSizedLine.length);
-	});
-
-	it("projects an oversized turn_end aggregate and resumes at the next record", () => {
-		const lines: string[] = [];
-		const reader = createBoundedLineReader({
-			maxPendingLineBytes: 64,
-			oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-			onLine: (line) => lines.push(line),
-			onLimit: () => assert.fail("redundant aggregate must not fail"),
-		});
-		const aggregate = JSON.stringify({ type: "turn_end", toolResults: ["x".repeat(256)] });
-		const settled = JSON.stringify({ type: "agent_settled" });
-		const bytes = Buffer.from(`${aggregate}\n${settled}\n`);
-		for (let offset = 0; offset < bytes.length; offset += 37) reader.push(bytes.subarray(offset, offset + 37));
-		reader.end();
-		assert.deepEqual(lines, ['{"type":"turn_end"}', settled]);
-		assert.equal(reader.exceeded(), false);
-	});
-
-	it("projects oversized agent_end aggregates without losing retry lifecycle metadata", () => {
-		for (const willRetry of [true, false]) {
-			const lines: string[] = [];
-			const reader = createBoundedLineReader({
-				maxPendingLineBytes: 64,
-				oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-				onLine: (line) => lines.push(line),
-				onLimit: () => assert.fail("valid agent_end aggregate must not fail"),
-			});
-			reader.push(`${JSON.stringify({ type: "agent_end", messages: ["x".repeat(256)], willRetry })}\n`);
-			reader.end();
-			assert.deepEqual(lines.map((line) => JSON.parse(line)), [{ type: "agent_end", willRetry }]);
-		}
-	});
-
-	it("projects oversized compaction_end aggregates without losing retry lifecycle metadata", () => {
-		const lines: string[] = [];
-		const reader = createBoundedLineReader({
-			maxPendingLineBytes: 64,
-			oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-			onLine: (line) => lines.push(line),
-			onLimit: () => assert.fail("valid compaction_end aggregate must not fail"),
-		});
-		reader.push(`${JSON.stringify({ type: "compaction_end", result: { summary: "x".repeat(256) }, willRetry: true })}\n`);
-		reader.end();
-		assert.deepEqual(lines.map((line) => JSON.parse(line)), [{ type: "compaction_end", willRetry: true }]);
-	});
-
-	it("fails closed when an oversized agent_end aggregate lacks lifecycle metadata", () => {
-		let failure: ProtocolOutputLimit | undefined;
-		const reader = createBoundedLineReader({
-			maxPendingLineBytes: 64,
-			oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-			onLine: () => assert.fail("malformed aggregate must not emit"),
-			onLimit: (limit) => { failure = limit; },
-		});
-		reader.push(`${JSON.stringify({ type: "agent_end", messages: ["x".repeat(256)] })}\n`);
-		reader.end();
-		assert.equal(reader.exceeded(), true);
-		assert.equal(failure?.code, "protocol_output_limit");
-	});
-
-	it("fails closed for malformed or truncated oversized turn_end aggregates", () => {
-		for (const aggregate of [
-			`{"type":"turn_end","toolResults":["${"x".repeat(256)}"`,
-			`{"type":"turn_end","toolResults":[${"x".repeat(256)}]}`,
-		]) {
-			let failure: ProtocolOutputLimit | undefined;
-			const reader = createBoundedLineReader({
-				maxPendingLineBytes: 64,
-				oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-				onLine: () => assert.fail("invalid turn_end must not emit"),
-				onLimit: (limit) => { failure = limit; },
-			});
-			reader.push(aggregate);
-			reader.end();
-			assert.equal(reader.exceeded(), true);
-			assert.equal(failure?.code, "protocol_output_limit");
-		}
-	});
-
-	it("fails closed when malformed agent_end content carries an apparent willRetry tail", () => {
-		let failure: ProtocolOutputLimit | undefined;
-		const reader = createBoundedLineReader({
-			maxPendingLineBytes: 64,
-			oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-			onLine: () => assert.fail("invalid agent_end must not emit"),
-			onLimit: (limit) => { failure = limit; },
-		});
-		reader.push(`{"type":"agent_end","messages":[${"x".repeat(256)}],"willRetry":true}\n`);
-		reader.end();
-		assert.equal(reader.exceeded(), true);
-		assert.equal(failure?.code, "protocol_output_limit");
-	});
-
-	it("uses only trustworthy top-level lifecycle fields in syntactically valid JSON", () => {
-		for (const aggregate of [
-			JSON.stringify({ type: "agent_end", messages: [{ willRetry: true, data: "x".repeat(256) }] }),
-			`{"type":"agent_end","messages":["${"x".repeat(256)}"],"willRetry":"false"}`,
-			`{"type":"turn_end","toolResults":["${"x".repeat(256)}"],"t\\u0079pe":"other"}`,
-			`{"type":"turn_end","toolResults":["${"x".repeat(256)}",]}`,
-		]) {
-			const reader = createBoundedLineReader({
-				maxPendingLineBytes: 64,
-				oversizedLineProjector: PI_AGGREGATE_EVENT_PROJECTOR,
-				onLine: () => assert.fail("untrustworthy lifecycle metadata must not emit"),
-				onLimit: () => {},
-			});
-			reader.push(`${aggregate}\n`);
-			reader.end();
-			assert.equal(reader.exceeded(), true);
-		}
-	});
-
-	it("stops buffering an oversized line and returns bounded diagnostics", () => {
-		let failure: ProtocolOutputLimit | undefined;
-		const reader = createBoundedLineReader({ maxPendingLineBytes: 8, onLine: () => assert.fail("oversized line must not emit"), onLimit: (limit) => { failure = limit; } });
-		reader.push("prefix-");
-		reader.push("oversized-tail");
-		reader.push("ignored");
-		reader.end();
-		assert.equal(reader.exceeded(), true);
-		assert.equal(failure?.code, "protocol_output_limit");
-		assert.equal(failure?.limitBytes, 8);
-		assert.equal(failure?.observedBytes, 21);
-		assert.match(failure?.diagnosticPrefix ?? "", /^prefix-/);
-		assert.match(failure?.diagnosticTail ?? "", /tail$/);
-		assert.match(formatProtocolOutputLimit(failure!), /protocol_output_limit.*exceeded 8 bytes/);
-	});
-});
-
-describe("bounded child stderr tail", () => {
-	it("keeps only the configured UTF-8-safe byte tail", () => {
-		const tail = createBoundedByteTail(8);
-		const bytes = Buffer.from("old-你好-tail");
-		tail.push(bytes.subarray(0, 7));
-		tail.push(bytes.subarray(7));
-		assert.ok(tail.byteLength() <= 8);
-		assert.equal(tail.text(), "好-tail");
-	});
-});
-
-describe("child lifecycle projection", () => {
-	it("cancels legacy drain for retries and starts it when settled", () => {
-		assert.equal(projectChildLifecycle({ type: "message_end" }, true), "start-drain");
-		assert.equal(projectChildLifecycle({ type: "agent_end", willRetry: true }), "cancel-drain");
-		assert.equal(projectChildLifecycle({ type: "agent_end", willRetry: false }), "none");
-		assert.equal(projectChildLifecycle({ type: "agent_settled" }), "start-drain");
-		assert.equal(projectChildLifecycle({ type: "tool_execution_start" }), "none");
-	});
-
-	it("ignores settlement from a compaction attempt that will retry", () => {
-		const state = { compactionRetryActive: false };
-		assert.equal(projectChildLifecycle({ type: "compaction_end", willRetry: true }, false, state), "cancel-drain");
-		assert.equal(projectChildLifecycle({ type: "agent_settled" }, false, state), "none");
-		assert.equal(projectChildLifecycle({ type: "agent_start" }, false, state), "none");
-		assert.equal(projectChildLifecycle({ type: "agent_settled" }, false, state), "start-drain");
-	});
-});