@songtonyli/dsh-cli 0.1.12 → 0.1.13

package/node_modules/@deepseek-ai/dsh-storage-json/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-storage-json",
   "description": "JSON file KV storage backend for the DeepSeek Harness storage hub",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,14 +27,14 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-storage": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-storage": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "3.18.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-storage": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-storage": "0.1.6-alpha.2",
     "@deepseek-ai/cordis": "4.0.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-subagent/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/subagent/subagent/README.md
-README.md: 74cca45462f17e1de74e2fa0132c4e7dccad414b
-README.zh.md: 39e598c3e88d2f82811c85357c3b82d98eec7327
+README.md: 4634f0a33f71709668732b7070a2bccded3db5c0
+README.zh.md: d3d8a597f23153b0c82e663d98142a9966f48c22

package/node_modules/@deepseek-ai/dsh-subagent/README.md

@@ -42,6 +42,18 @@ Mount the service with a provider and the delegation tool. The provider register
 
 An agent that calls the tool gets the child's final answer as the tool result. Mounting the service alone changes nothing: nothing can delegate until a provider and a tool are composed.
 
+### Delegation settings
+
+The limits section on the **Plugins → Subagent** page edits the Host’s `subagent` settings section. User values override this plugin's composition; reset removes the user override. `maxDepth` defaults to `1` and supplies the delegation tools' depth when their own configuration omits it. An explicit tool depth, including `provider-managed`, takes precedence. Depth `0` disables delegation through tools inheriting this setting; depth `1` permits direct children only. Changes apply on the next delegation attempt. Direct service callers continue to supply their own optional request depth.
+
+### Continuable capacity
+
+Set `maxActiveSubagents` on the host `dsh-subagent` plugin to limit live children sharing uninterrupted continuable parent links. It defaults to `8` and accepts positive safe integers. A non-continuable parent starts a separate pool and does not consume a slot; continuable descendants inherit that pool. Fresh creation and cold resume reserve before reconstructing the Agent, and cleanup returns the slot after handle disposal. A waiting parent, pending inbox work, and an Activation being stopped still occupy slots. Messages to a resident child reuse its slot. One-shot and external-provider runs are outside this limit. Pool inheritance does not cross a one-shot parent; its continuable children share a separate pool. Depth remains the delegation tool's separate policy.
+
+The current `maxActiveSubagents` value is sampled before every new or cold-resumed Activation. Raising it admits more children in existing trees; lowering it leaves resident children running and refuses further admissions until usage is below the limit.
+
+At capacity, creation or cold resume rejects with `ACTIVATION_LIMIT_REACHED` (browser prompts receive `subagent/delivery-unavailable`): wait for a child to finish or continue using the existing agents. Admission does not queue, because a parent waiting for descendants must not wait for its own occupied slot. Slots are process-local and do not constrain cumulative Session history or token usage.
+
 ### One-shot and continuable children
 
 One-shot children run once and settle with a single result, plus an optional structured output and a safe diagnostic on failure. A start request may override the child Agent's provider, model, reasoning effort, and output-token limit through `agentOptions`; every requested option requires the provider's matching capability. Continuable children keep a durable session and accept later messages in order: the caller receives a stable child id, sends adjacent-Agent messages, and can interrupt the current turn without destroying the child. The tool row's `backgroundMode` picks the shape (`one-shot` by default, or `continuable` on providers that support it).

package/node_modules/@deepseek-ai/dsh-subagent/README.zh.md

@@ -42,6 +42,18 @@ kind: "package-reference"
 
 调用该工具的 agent 会把子 agent 的最终答案作为工具结果收到。只挂载服务本身不会改变任何行为：在组合出提供方和工具之前，什么都不能委派。
 
+### 委派设置
+
+**插件 → Subagent** 页面的限制部分编辑 Host 的 `subagent` 设置分节。用户值覆盖本插件的组合配置；恢复默认会删除用户覆盖。`maxDepth` 默认为 `1`，在委派工具自身未配置深度时提供默认值。工具显式指定的深度（包括 `provider-managed`）优先。深度 `0` 禁止继承此设置的工具委派；深度 `1` 只允许直接子代理。修改在下一次委派时生效。直接调用服务的调用方仍自行提供可选的请求深度。
+
+### 可续接子代理容量
+
+在 Host 的 `dsh-subagent` 插件上设置 `maxActiveSubagents`，限制通过连续可续接父子关系共享名额的存活子代理数。默认值为 `8`，接受正安全整数。非可续接父代理建立独立的池，自身不占名额；可续接后代继承该池。新建和冷恢复在重建 Agent 前预占名额，清理在 handle 释放后归还名额。等待后代的父代理、有待处理收件箱内容的代理以及正在停止的 Activation 仍占名额。向驻留子代理发送消息复用其名额。一次性和外部提供方运行不受此限制。池的继承不会跨越一次性父代理；其可续接子代理共享独立的池。深度仍由委派工具的独立策略决定。
+
+每次新建或冷恢复 Activation 前都会读取当前 `maxActiveSubagents`。调高后已有树可接纳更多子代理；调低后驻留子代理继续运行，使用量降至上限以下前拒绝新接纳。
+
+容量耗尽时，新建或冷恢复以 `ACTIVATION_LIMIT_REACHED` 拒绝（浏览器消息返回 `subagent/delivery-unavailable`）：等待子代理完成，或继续使用现有代理。接纳不会排队，避免等待后代的父代理又等待自己占用的名额。名额仅存在于当前进程，不限制累计 Session 历史或 token 用量。
+
 ### 一次性与可继续子级
 
 一次性子 agent 只运行一次，并以单个结果结算，可附带可选的结构化输出与失败时的安全诊断。启动请求可以通过 `agentOptions` 覆盖子 Agent 的提供方、模型、推理强度与输出 token 上限；每个请求的选项都要求提供方声明对应能力。可继续子 agent 保留持久会话并按顺序接受后续消息：调用方收到稳定的子 agent id、发送相邻 Agent 消息，并可中断当前轮次而不销毁子 agent。工具行的 `backgroundMode` 选择形态（默认 `one-shot`，或在支持的提供方上使用 `continuable`）。

package/node_modules/@deepseek-ai/dsh-subagent/lib/index.js

@@ -1,9 +1,10 @@
+import z from "@deepseek-ai/schemastery";
 import { scopeTarget } from "@deepseek-ai/dsh-scope";
 import { assertObjectJsonSchema } from "@deepseek-ai/dsh-tools";
 import { canonicalClientTimeZone } from "@deepseek-ai/dsh-util-time";
 import { Remote, RemoteError, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { AttachmentError } from "@deepseek-ai/dsh-attachment";
-import { z } from "zod";
+import { z as z$1 } from "zod";
 import { HarnessError, ReasoningEffortId, boundContextSummary, contentHasImage, createUserMessage, errorChain, joinAssistantStreamText } from "@deepseek-ai/dsh-llm";
 import { randomUUID } from "node:crypto";
 import { foldConsumedWork } from "@deepseek-ai/dsh-agent";
@@ -35,19 +36,19 @@ var SubagentError = class extends HarnessError {
 *
 * @module @deepseek-ai/dsh-subagent
 */
-const SESSION_ID_SCHEMA = z.string().min(1);
+const SESSION_ID_SCHEMA = z$1.string().min(1);
 const CONTROL_ID_SCHEMAS = {
-	"subagent.list": z.object({ parentSessionId: SESSION_ID_SCHEMA }),
-	"subagent.prompt": z.object({
+	"subagent.list": z$1.object({ parentSessionId: SESSION_ID_SCHEMA }),
+	"subagent.prompt": z$1.object({
 		parentSessionId: SESSION_ID_SCHEMA,
 		childSessionId: SESSION_ID_SCHEMA,
-		mode: z.literal("continuable"),
-		delivery: z.enum(["queue", "steer"])
+		mode: z$1.literal("continuable"),
+		delivery: z$1.enum(["queue", "steer"])
 	}),
-	"subagent.interrupt": z.object({
+	"subagent.interrupt": z$1.object({
 		parentSessionId: SESSION_ID_SCHEMA,
 		childSessionId: SESSION_ID_SCHEMA,
-		mode: z.literal("continuable")
+		mode: z$1.literal("continuable")
 	})
 };
 /**
@@ -113,6 +114,7 @@ function rejectPrompt(error, childSessionId, signal) {
 		case "UNAUTHORIZED": throw new RemoteError("subagent/unauthorized", "subagent does not belong to this parent", { childSessionId }, { cause: error });
 		case "DRAINING":
 		case "ACTIVATION_CLOSING":
+		case "ACTIVATION_LIMIT_REACHED":
 		case "CONTINUATION_UNAVAILABLE":
 		case "PERSISTENCE_UNAVAILABLE": throw new RemoteError("subagent/delivery-unavailable", "subagent follow-up is temporarily unavailable", { childSessionId }, { cause: error });
 		default: break;
@@ -752,6 +754,19 @@ var SubagentInbox = class {
 *
 * @module @deepseek-ai/dsh-subagent/continuation-activation
 */
+/** Process-local slots shared through uninterrupted continuable parent links. */
+var ActivationPool = class {
+	slots = /* @__PURE__ */ new Set();
+	/** Reserve before reconstruction; the returned release also tolerates unpublished rollback. */
+	reserve(capacity) {
+		if (this.slots.size >= capacity) throw new SubagentError(`subagent limit reached (active child limit: ${capacity}); wait for an existing child to finish or complete this work with the current agents`, "ACTIVATION_LIMIT_REACHED");
+		const slot = Symbol();
+		this.slots.add(slot);
+		return () => {
+			this.slots.delete(slot);
+		};
+	}
+};
 /** Serialize each durable child's delivery, release, and disposal. */
 var ChildLock = class {
 	tails = /* @__PURE__ */ new Map();
@@ -775,8 +790,11 @@ var ChildLock = class {
 var ContinuableActivationRegistry = class {
 	ctx;
 	observeActivation;
+	maxActiveSubagents;
 	/** Child session id → its live Activation. Process-local, never durable. */
 	resident = /* @__PURE__ */ new Map();
+	/** Root identities retain their pool across child settlement without retaining dead roots. */
+	rootPools = /* @__PURE__ */ new WeakMap();
 	/** Materializations admitted before drain, tracked through publication or rollback. */
 	materializations = /* @__PURE__ */ new Set();
 	/** Per-child serializer shared by delivery, release, and disposal. */
@@ -796,9 +814,10 @@ var ContinuableActivationRegistry = class {
 	* @param ctx - context providing Agents, Sessions, and teardown ownership.
 	* @param observeActivation - build the lifecycle observer for one residency epoch.
 	*/
-	constructor(ctx, observeActivation) {
+	constructor(ctx, observeActivation, maxActiveSubagents) {
 		this.ctx = ctx;
 		this.observeActivation = observeActivation;
+		this.maxActiveSubagents = maxActiveSubagents;
 		const scope = ctx.plugin(function activationOwner() {});
 		this.ownerCtx = scope.ctx;
 		ctx.on("agent/disposed", ({ agent }) => {
@@ -979,14 +998,20 @@ var ContinuableActivationRegistry = class {
 	*/
 	materialize(inputs) {
 		this.assertAdmitting(inputs.parent);
-		const settled = Promise.withResolvers();
+		inputs.signal.throwIfAborted();
 		const lineage = this.liveLineage(inputs.parent);
+		const pool = this.resident.get(inputs.parent.id)?.pool ?? this.rootPool(inputs.parent);
+		const releaseSlot = pool.reserve(this.maxActiveSubagents());
+		const settled = Promise.withResolvers();
 		const materialization = {
 			lineage,
 			settled: settled.promise
 		};
 		this.materializations.add(materialization);
-		return this.materializeTracked(inputs, lineage).finally(() => {
+		return this.materializeTracked(inputs, lineage, pool, releaseSlot).catch((error) => {
+			releaseSlot();
+			throw error;
+		}).finally(() => {
 			this.materializations.delete(materialization);
 			settled.resolve();
 		});
@@ -1061,8 +1086,17 @@ var ContinuableActivationRegistry = class {
 		const lineage = this.liveLineage(agent);
 		for (const [root, members] of this.closingScopes) if (members.has(agent) || lineage.includes(root)) return root;
 	}
+	/** Resolve a root's pool once; descendants inherit their resident parent's pool directly. */
+	rootPool(parent) {
+		let pool = this.rootPools.get(parent);
+		if (pool === void 0) {
+			pool = new ActivationPool();
+			this.rootPools.set(parent, pool);
+		}
+		return pool;
+	}
 	/** Perform one tracked materialization through publication or rollback. */
-	async materializeTracked(inputs, parentLineage) {
+	async materializeTracked(inputs, parentLineage, pool, releaseSlot) {
 		const { childId, provider, parent, create } = inputs;
 		inputs.signal.throwIfAborted();
 		const setup = (childCtx, child) => {
@@ -1090,6 +1124,8 @@ var ContinuableActivationRegistry = class {
 			setup
 		});
 		const activation = {
+			pool,
+			releaseSlot,
 			childId,
 			parentSession: parent.id,
 			provider,
@@ -1128,6 +1164,7 @@ var ContinuableActivationRegistry = class {
 				await activation.handle.dispose();
 			} finally {
 				this.resident.delete(activation.childId);
+				activation.releaseSlot();
 				this.releaseOwnership(activation.childId);
 			}
 		});
@@ -1241,6 +1278,7 @@ var ContinuableActivationRegistry = class {
 		if (failures.length === 1) failure = failures[0];
 		else if (failures.length > 1) failure = new SubagentError(`subagent "${childId}" activation teardown failed at ${failures.length} boundaries: ` + failures.map((item) => errorChain(item)).join("; "), "ACTIVATION_TEARDOWN_FAILED", { cause: new AggregateError(failures) });
 		this.resident.delete(childId);
+		activation.releaseSlot();
 		this.notifySettlement(activation, activation.observer.terminal(failure));
 		this.releaseOwnership(childId);
 		activation.observer.settle(failure);
@@ -1432,23 +1470,23 @@ function foldSubagentDescriptor(events) {
 	if (event === void 0) return void 0;
 	return parseSubagentDescriptor(event.data);
 }
-const sessionIdSchema = z.string();
-const oneShotCatalogSchema = z.object({
-	version: z.literal(0),
+const sessionIdSchema = z$1.string();
+const oneShotCatalogSchema = z$1.object({
+	version: z$1.literal(0),
 	childId: sessionIdSchema,
-	childCreatedAt: z.number().int().nonnegative(),
-	mode: z.literal("one-shot"),
-	label: z.string().optional()
+	childCreatedAt: z$1.number().int().nonnegative(),
+	mode: z$1.literal("one-shot"),
+	label: z$1.string().optional()
 }).strict();
-const continuableCatalogSchema = z.object({
-	version: z.literal(0),
+const continuableCatalogSchema = z$1.object({
+	version: z$1.literal(0),
 	childId: sessionIdSchema,
-	childCreatedAt: z.number().int().nonnegative(),
-	mode: z.literal("continuable"),
-	label: z.string()
+	childCreatedAt: z$1.number().int().nonnegative(),
+	mode: z$1.literal("continuable"),
+	label: z$1.string()
 }).strict();
-const eventDataSchema = z.union([oneShotCatalogSchema, continuableCatalogSchema]);
-const viewSchema = z.array(z.union([oneShotCatalogSchema.omit({
+const eventDataSchema = z$1.union([oneShotCatalogSchema, continuableCatalogSchema]);
+const viewSchema = z$1.array(z$1.union([oneShotCatalogSchema.omit({
 	version: true,
 	childId: true,
 	childCreatedAt: true
@@ -1463,8 +1501,8 @@ const viewSchema = z.array(z.union([oneShotCatalogSchema.omit({
 	id: sessionIdSchema,
 	createdAt: continuableCatalogSchema.shape.childCreatedAt
 })]));
-const stateSchema = z.object({
-	inheritedEventCount: z.number().int().nonnegative(),
+const stateSchema = z$1.object({
+	inheritedEventCount: z$1.number().int().nonnegative(),
 	head: chunkedListSchema(eventDataSchema).optional()
 }).strict();
 /**
@@ -1633,10 +1671,10 @@ var SubagentContinuationManager = class {
 	ctx;
 	host;
 	activations;
-	constructor(ctx, host) {
+	constructor(ctx, host, maxActiveSubagents) {
 		this.ctx = ctx;
 		this.host = host;
-		this.activations = new ContinuableActivationRegistry(ctx, (provider, childId, parent) => host.observeActivation(provider, childId, parent));
+		this.activations = new ContinuableActivationRegistry(ctx, (provider, childId, parent) => host.observeActivation(provider, childId, parent), maxActiveSubagents);
 	}
 	/**
 	* Start one continuable background child and resolve at initial inbox acceptance.
@@ -2322,12 +2360,12 @@ function sessionQueryCode(error) {
 *
 * @module @deepseek-ai/dsh-subagent/projection
 */
-const activeIntervalSchema = z.object({
-	since: z.number().int().nonnegative(),
-	through: z.number().int().nonnegative()
+const activeIntervalSchema = z$1.object({
+	since: z$1.number().int().nonnegative(),
+	through: z$1.number().int().nonnegative()
 }).strict();
-const projectionSchema = z.object({
-	settledMs: z.number().int().nonnegative(),
+const projectionSchema = z$1.object({
+	settledMs: z$1.number().int().nonnegative(),
 	active: activeIntervalSchema.optional()
 }).strict().transform(({ settledMs, active }) => ({
 	settledMs,
@@ -2343,11 +2381,11 @@ const projectionSchema = z.object({
 */
 const subagentTimingProjectionDefinition = {
 	key: "subagentTiming",
-	stateSchema: z.object({
-		settledMs: z.number().int().nonnegative(),
+	stateSchema: z$1.object({
+		settledMs: z$1.number().int().nonnegative(),
 		active: activeIntervalSchema.optional(),
-		pendingTurnStart: z.number().int().nonnegative().optional(),
-		descriptorSeen: z.boolean()
+		pendingTurnStart: z$1.number().int().nonnegative().optional(),
+		descriptorSeen: z$1.boolean()
 	}).strict(),
 	init: () => ({
 		descriptorSeen: false,
@@ -2406,17 +2444,17 @@ const subagentTimingProjectionDefinition = {
 	},
 	stateVersion: 2
 };
-const identityValueSchema = z.discriminatedUnion("mode", [z.object({
-	mode: z.literal("one-shot"),
-	label: z.string().optional(),
-	seq: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).transform(SessionSeq)
-}).strict(), z.object({
-	mode: z.literal("continuable"),
-	label: z.string(),
-	seq: z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).transform(SessionSeq)
+const identityValueSchema = z$1.discriminatedUnion("mode", [z$1.object({
+	mode: z$1.literal("one-shot"),
+	label: z$1.string().optional(),
+	seq: z$1.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).transform(SessionSeq)
+}).strict(), z$1.object({
+	mode: z$1.literal("continuable"),
+	label: z$1.string(),
+	seq: z$1.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).transform(SessionSeq)
 }).strict()]);
 const identitySchema = identityValueSchema.nullable();
-const identityStateSchema = z.object({ identity: identityValueSchema.optional() }).strict();
+const identityStateSchema = z$1.object({ identity: identityValueSchema.optional() }).strict();
 /** Interpret one `subagent/descriptor` event's identity; no value when the payload cannot be trusted. */
 function descriptorIdentity(event) {
 	let descriptor;
@@ -2846,7 +2884,12 @@ let SubagentRuntime = (() => {
 				value: _metadata
 			});
 		}
-		providers = (__runInitializers(this, _instanceExtraInitializers), /* @__PURE__ */ new Map());
+		static Config = z.object({
+			maxDepth: z.number().step(1).min(0).max(Number.MAX_SAFE_INTEGER).default(1),
+			maxActiveSubagents: z.number().step(1).min(1).max(Number.MAX_SAFE_INTEGER).default(8)
+		});
+		settingsSource = __runInitializers(this, _instanceExtraInitializers);
+		providers = /* @__PURE__ */ new Map();
 		continuations;
 		/**
 		* The contained lifecycle-edge publisher. Built here because scoped dispatch
@@ -2854,14 +2897,27 @@ let SubagentRuntime = (() => {
 		* composes into the carrier.
 		*/
 		emitLifecycle;
-		constructor(ctx) {
+		constructor(ctx, config) {
 			super(ctx, "subagents");
+			assertSubagentMaxDepth(config.maxDepth);
+			this.settingsSource = () => config;
+			ctx.inject(["settings"], (settingsCtx) => {
+				settingsCtx.settings.installSection(ctx, "subagent", SubagentRuntime.Config, config, {
+					validate: (value) => {
+						assertSubagentMaxDepth(value.maxDepth);
+					},
+					setSource: (source) => {
+						this.settingsSource = source;
+					},
+					onChange: () => {}
+				});
+			});
 			this.emitLifecycle = createLifecycleEmitter(this.ctx, (parent) => scopeTarget(this, parent));
 			ctx.inject(["agents"], (childCtx) => {
 				const manager = new SubagentContinuationManager(childCtx, {
 					prepareContinuable: (name, request) => this.prepareContinuable(name, request),
 					observeActivation: (provider, childId, parent) => this.observeActivation(provider, childId, parent)
-				});
+				}, () => this.settingsSource().maxActiveSubagents);
 				this.continuations = manager;
 				childCtx.effect(() => () => {
 					/* v8 ignore else -- one injected binding owns the slot until its fiber disposes. */
@@ -2875,6 +2931,15 @@ let SubagentRuntime = (() => {
 			});
 		}
 		/**
+		* Resolve a delegation tool's depth policy against the current user setting.
+		* @param configured - Explicit tool limit, or provider-managed for external delegation.
+		* @returns The numeric limit, or undefined when the provider owns depth enforcement.
+		*/
+		resolveMaxDepth(configured) {
+			if (configured === "provider-managed") return void 0;
+			return configured ?? this.settingsSource().maxDepth;
+		}
+		/**
 		* Establish one durable continuable child and deliver its initial prompt.
 		* Resolves when the child's inbox accepts that prompt, without waiting for the
 		* turn to start or for the message to reach the Session log; any earlier
@@ -3034,6 +3099,7 @@ let SubagentRuntime = (() => {
 		* nearest step and retains the Agent loop's best-effort fallback semantics.
 		* Image parts are admitted and persisted through the attachment store
 		* before delivery, and the child's model must accept image input.
+		* Cold resume at capacity rejects with `subagent/delivery-unavailable`.
 		* @param request - durable address, delivery, minted identity, content, and optional browser zone.
 		* @param signal - carrier cancellation, owning the call until inbox acceptance.
 		* @returns the accepted message's inbox identity.

package/node_modules/@deepseek-ai/dsh-subagent/lib/typert.host.js

@@ -110,7 +110,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-subagent/client#SubagentInterruptReceipt',
         create: _deepseek_ai_dsh_subagent_subagents_interruptByParent_result$schema,
       },
-      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":480,"column":3},
+      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":515,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-subagent#subagents/list',
@@ -137,7 +137,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-subagent/client#SubagentCatalog',
         create: _deepseek_ai_dsh_subagent_subagents_list_result$schema,
       },
-      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":386,"column":9},
+      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":420,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-subagent#subagents/prompt',
@@ -163,7 +163,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-subagent/client#SubagentPromptReceipt',
         create: _deepseek_ai_dsh_subagent_subagents_prompt_result$schema,
       },
-      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":413,"column":9},
+      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":448,"column":9},
     },
   ],
   model: {
@@ -176,6 +176,13 @@ export const TYPERT = {
         "key": "subagents",
         "exportName": "SubagentRuntime",
         "members": [
+          {
+            "kind": "method",
+            "name": "resolveMaxDepth",
+            "signature": "resolveMaxDepth(configured?: number | 'provider-managed'): number | undefined",
+            "summary": "Resolve a delegation tool's depth policy against the current user setting.",
+            "jsDoc": "/**\n * Resolve a delegation tool's depth policy against the current user setting.\n * @param configured - Explicit tool limit, or provider-managed for external delegation.\n * @returns The numeric limit, or undefined when the provider owns depth enforcement.\n */"
+          },
           {
             "kind": "method",
             "name": "startContinuable",
@@ -237,7 +244,7 @@ export const TYPERT = {
             "name": "prompt",
             "signature": "@Remote('prompt') async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>",
             "summary": "Deliver one browser-authored message to a continuable child through the exact live direct parent, retaining the caller-minted request identity and validated browser zone on the accepted message.",
-            "jsDoc": "/**\n * Deliver one browser-authored message to a continuable child through the\n * exact live direct parent, retaining the caller-minted request identity and\n * validated browser zone on the accepted message. Success identifies the\n * message the child's inbox accepted; later execution is independent of this\n * call. Queue delivery targets a later turn; steer delivery targets the\n * nearest step and retains the Agent loop's best-effort fallback semantics.\n * Image parts are admitted and persisted through the attachment store\n * before delivery, and the child's model must accept image input.\n * @param request - durable address, delivery, minted identity, content, and optional browser zone.\n * @param signal - carrier cancellation, owning the call until inbox acceptance.\n * @returns the accepted message's inbox identity.\n * @throws {RemoteError} `gateway/bad-request`, `subagent/attachment-invalid`,\n *   `subagent/invalid-time-zone`, `subagent/parent-unavailable`,\n *   `subagent/not-resumable`, `subagent/unauthorized`,\n *   `subagent/delivery-unavailable`, `gateway/cancelled`, or `gateway/internal`.\n */"
+            "jsDoc": "/**\n * Deliver one browser-authored message to a continuable child through the\n * exact live direct parent, retaining the caller-minted request identity and\n * validated browser zone on the accepted message. Success identifies the\n * message the child's inbox accepted; later execution is independent of this\n * call. Queue delivery targets a later turn; steer delivery targets the\n * nearest step and retains the Agent loop's best-effort fallback semantics.\n * Image parts are admitted and persisted through the attachment store\n * before delivery, and the child's model must accept image input.\n * Cold resume at capacity rejects with `subagent/delivery-unavailable`.\n * @param request - durable address, delivery, minted identity, content, and optional browser zone.\n * @param signal - carrier cancellation, owning the call until inbox acceptance.\n * @returns the accepted message's inbox identity.\n * @throws {RemoteError} `gateway/bad-request`, `subagent/attachment-invalid`,\n *   `subagent/invalid-time-zone`, `subagent/parent-unavailable`,\n *   `subagent/not-resumable`, `subagent/unauthorized`,\n *   `subagent/delivery-unavailable`, `gateway/cancelled`, or `gateway/internal`.\n */"
           },
           {
             "kind": "method",

package/node_modules/@deepseek-ai/dsh-subagent/lib/typert.remote-client.js

@@ -107,7 +107,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-subagent/client#SubagentInterruptReceipt',
         create: _deepseek_ai_dsh_subagent_subagents_interruptByParent_result$schema,
       },
-      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":480,"column":3},
+      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":515,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-subagent#subagents/list',
@@ -134,7 +134,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-subagent/client#SubagentCatalog',
         create: _deepseek_ai_dsh_subagent_subagents_list_result$schema,
       },
-      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":386,"column":9},
+      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":420,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-subagent#subagents/prompt',
@@ -160,7 +160,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-subagent/client#SubagentPromptReceipt',
         create: _deepseek_ai_dsh_subagent_subagents_prompt_result$schema,
       },
-      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":413,"column":9},
+      sourceLocation: {"file":"packages/subagent/subagent/src/index.ts","line":448,"column":9},
     },
   ],
 }

package/node_modules/@deepseek-ai/dsh-subagent/lib/types/continuation-activation.js

@@ -13,6 +13,20 @@ import { appendDelegatedPolicyOverrides, applyChildComposition, } from "./child-
 import { createSettlementMessage } from "./continuation-messages.js";
 import { SubagentError } from "./error.js";
 import { SubagentInbox } from "./inbox.js";
+/** Process-local slots shared through uninterrupted continuable parent links. */
+class ActivationPool {
+    slots = new Set();
+    /** Reserve before reconstruction; the returned release also tolerates unpublished rollback. */
+    reserve(capacity) {
+        if (this.slots.size >= capacity) {
+            throw new SubagentError(`subagent limit reached (active child limit: ${capacity}); wait for an existing child to finish `
+                + 'or complete this work with the current agents', 'ACTIVATION_LIMIT_REACHED');
+        }
+        const slot = Symbol();
+        this.slots.add(slot);
+        return () => { this.slots.delete(slot); };
+    }
+}
 /** Serialize each durable child's delivery, release, and disposal. */
 export class ChildLock {
     tails = new Map();
@@ -40,8 +54,11 @@ export class ChildLock {
 export class ContinuableActivationRegistry {
     ctx;
     observeActivation;
+    maxActiveSubagents;
     /** Child session id → its live Activation. Process-local, never durable. */
     resident = new Map();
+    /** Root identities retain their pool across child settlement without retaining dead roots. */
+    rootPools = new WeakMap();
     /** Materializations admitted before drain, tracked through publication or rollback. */
     materializations = new Set();
     /** Per-child serializer shared by delivery, release, and disposal. */
@@ -61,9 +78,10 @@ export class ContinuableActivationRegistry {
      * @param ctx - context providing Agents, Sessions, and teardown ownership.
      * @param observeActivation - build the lifecycle observer for one residency epoch.
      */
-    constructor(ctx, observeActivation) {
+    constructor(ctx, observeActivation, maxActiveSubagents) {
         this.ctx = ctx;
         this.observeActivation = observeActivation;
+        this.maxActiveSubagents = maxActiveSubagents;
         // Ordinary Cordis owner effects unwind in reverse registration order, which
         // cannot express the dynamic child graph. Register the private scope's
         // structural disposer FIRST and the drain SECOND, so reverse unwind invokes
@@ -305,14 +323,20 @@ export class ContinuableActivationRegistry {
      */
     materialize(inputs) {
         this.assertAdmitting(inputs.parent);
-        const settled = Promise.withResolvers();
+        inputs.signal.throwIfAborted();
         const lineage = this.liveLineage(inputs.parent);
+        const pool = this.resident.get(inputs.parent.id)?.pool ?? this.rootPool(inputs.parent);
+        const releaseSlot = pool.reserve(this.maxActiveSubagents());
+        const settled = Promise.withResolvers();
         const materialization = {
             lineage,
             settled: settled.promise,
         };
         this.materializations.add(materialization);
-        return this.materializeTracked(inputs, lineage).finally(() => {
+        return this.materializeTracked(inputs, lineage, pool, releaseSlot).catch((error) => {
+            releaseSlot();
+            throw error;
+        }).finally(() => {
             this.materializations.delete(materialization);
             settled.resolve();
         });
@@ -400,8 +424,17 @@ export class ContinuableActivationRegistry {
         }
         return undefined;
     }
+    /** Resolve a root's pool once; descendants inherit their resident parent's pool directly. */
+    rootPool(parent) {
+        let pool = this.rootPools.get(parent);
+        if (pool === undefined) {
+            pool = new ActivationPool();
+            this.rootPools.set(parent, pool);
+        }
+        return pool;
+    }
     /** Perform one tracked materialization through publication or rollback. */
-    async materializeTracked(inputs, parentLineage) {
+    async materializeTracked(inputs, parentLineage, pool, releaseSlot) {
         const { childId, provider, parent, create } = inputs;
         inputs.signal.throwIfAborted();
         const setup = (childCtx, child) => {
@@ -433,6 +466,8 @@ export class ContinuableActivationRegistry {
                 setup,
             });
         const activation = {
+            pool,
+            releaseSlot,
             childId,
             parentSession: parent.id,
             provider,
@@ -471,6 +506,7 @@ export class ContinuableActivationRegistry {
             }
             finally {
                 this.resident.delete(activation.childId);
+                activation.releaseSlot();
                 this.releaseOwnership(activation.childId);
             }
         });
@@ -622,6 +658,7 @@ export class ContinuableActivationRegistry {
                 + failures.map(item => errorChain(item)).join('; '), 'ACTIVATION_TEARDOWN_FAILED', { cause: new AggregateError(failures) });
         }
         this.resident.delete(childId);
+        activation.releaseSlot();
         this.notifySettlement(activation, activation.observer.terminal(failure));
         this.releaseOwnership(childId);
         activation.observer.settle(failure);

package/node_modules/@deepseek-ai/dsh-subagent/lib/types/continuation.js

@@ -86,10 +86,10 @@ export class SubagentContinuationManager {
     ctx;
     host;
     activations;
-    constructor(ctx, host) {
+    constructor(ctx, host, maxActiveSubagents) {
         this.ctx = ctx;
         this.host = host;
-        this.activations = new ContinuableActivationRegistry(ctx, (provider, childId, parent) => host.observeActivation(provider, childId, parent));
+        this.activations = new ContinuableActivationRegistry(ctx, (provider, childId, parent) => host.observeActivation(provider, childId, parent), maxActiveSubagents);
     }
     /**
      * Start one continuable background child and resolve at initial inbox acceptance.

package/node_modules/@deepseek-ai/dsh-subagent/lib/types/control.js

@@ -100,6 +100,7 @@ export function rejectPrompt(error, childSessionId, signal) {
                 throw new RemoteError('subagent/unauthorized', 'subagent does not belong to this parent', { childSessionId }, { cause: error });
             case 'DRAINING':
             case 'ACTIVATION_CLOSING':
+            case 'ACTIVATION_LIMIT_REACHED':
             case 'CONTINUATION_UNAVAILABLE':
             case 'PERSISTENCE_UNAVAILABLE':
                 throw new RemoteError('subagent/delivery-unavailable', 'subagent follow-up is temporarily unavailable', { childSessionId }, { cause: error });