@spinabot/brigade 0.1.2 → 1.0.1

package/dist/agents/subagent-spawn.js

@@ -0,0 +1,358 @@
+/**
+ * Sub-agent spawn engine (Step 20).
+ *
+ * Brand-scrubbed analogue of upstream's `src/agents/subagent-spawn.ts`,
+ * scoped to the operations Brigade can perform at this milestone. The
+ * upstream engine is 900+ LOC and references modules Brigade does not
+ * yet have (sandbox runtime status, ACP child runtime, attachment
+ * materialiser, thread-binding hooks, model-and-thinking plan resolver).
+ * Brigade's slim engine focuses on the LOAD-BEARING parts:
+ *
+ *   1. Validate target agent id + reject malformed ids before normalisation.
+ *   2. Enforce depth cap + max-children cap (read from Step 9's session
+ *      store metadata).
+ *   3. Generate the child session key (`agent:<targetAgentId>:subagent:<UUID>`).
+ *   4. Register the run in Step 10's subagent-registry.
+ *   5. Emit a `subagent_lifecycle:subagent_started` agent event (Step 18).
+ *   6. Hand off the initial child turn to the gateway via Step 18's
+ *      `callGateway` (`method: "agent"`, `lane: AGENT_LANE_SUBAGENT`).
+ *   7. On gateway error → registry cleanup + structured error result.
+ *
+ * What this engine DOES NOT do (deferred):
+ *
+ *   - Sandbox-mode validation (Brigade has no sandbox runtime yet).
+ *   - ACP runtime branching (Brigade is sub-agent-only per the locked
+ *     design's R2 Leak #10).
+ *   - Attachment materialisation (per-file copy into child workspace).
+ *   - Thread-binding hook fire-order (waits for Step 25's gateway).
+ *   - Model + thinking-level plan resolution (passes through to gateway).
+ *
+ * Adding any of those is additive — none of the public APIs here need to
+ * change for the deferred layers to slot in later.
+ */
+import crypto from "node:crypto";
+import { createSubsystemLogger } from "../logging/subsystem-logger.js";
+import { emitAgentEvent } from "./agent-events.js";
+import { callGateway } from "./gateway-call.js";
+import { subagentLane } from "../process/lanes.js";
+import { withSubagentSlot } from "./subagent-budget.js";
+import { isValidAgentId, normalizeAgentId, resolveAgentIdFromSessionKey, } from "./routing/session-key.js";
+import { countActiveRunsForSession, registerSubagentRun, releaseSubagentRun, } from "./subagent-registry.js";
+const log = createSubsystemLogger("agents/subagent-spawn");
+const DEFAULT_MAX_SPAWN_DEPTH = 3;
+const DEFAULT_MAX_CHILDREN_PER_AGENT = 5;
+/**
+ * Wave N4 — default per-call wall-clock cap for a gateway-routed sub-agent
+ * run when the caller (typically the `sessions_spawn` tool) does NOT
+ * supply `runTimeoutSeconds`. Pre-Wave-N4 the engine forwarded
+ * `runTimeoutSeconds: undefined` straight to the gateway `agent` handler,
+ * which then ran the child with NO enforced cap — three of five parallel
+ * children were observed timing out at 60s elsewhere in the stack while
+ * the harness sat idle waiting on the missing reply, masking the real
+ * timeout. 180s is generous (above the slow-path tail of any realistic
+ * tool-using turn but well below "model is hung forever") and matches the
+ * documented `agents.defaults.subagents.defaultTimeoutSeconds` knob's
+ * intent of "model can take its time but never pins a slot indefinitely".
+ *
+ * Operators override per-call by passing `runTimeoutSeconds` on the
+ * `sessions_spawn` call; the `cfg.agents.defaults.subagents.defaultTimeoutSeconds`
+ * knob in `brigade.json` is honoured by the in-process `spawn_agent`
+ * path through `resolveSubagentLimits`. The two paths read different
+ * surfaces today; an operator who genuinely wants longer-running children
+ * sets BOTH.
+ */
+export const DEFAULT_SUBAGENT_RUN_TIMEOUT_SECONDS = 180;
+function resolveSpawnMode(params) {
+    if (params.requestedMode === "session")
+        return "session";
+    if (params.threadRequested)
+        return "session";
+    return "run";
+}
+/**
+ * Wave O0.8 GAP 10 — decide whether a spawn's parent is the operator main
+ * session (eligible for synthetic-wake on child completion) or a sub-of-sub
+ * / cron parent (not eligible — wakes would cascade).
+ *
+ * The operator's main session keys are:
+ *   - `agent:<id>:main`
+ *   - `main`            (legacy default identifier)
+ *   - undefined         (no parent — root operator turn)
+ *
+ * Sub-agent children carry `agent:<id>:subagent:<uuid>`; cron runs land on
+ * `cron:<jobId>:...` keys. Anything else (channel-routed peer sessions,
+ * thread-bound sessions) is treated as non-operator so we don't wake the
+ * wrong inbox.
+ */
+function isOperatorMainSession(sessionKey) {
+    if (!sessionKey)
+        return true;
+    const trimmed = sessionKey.trim();
+    if (!trimmed || trimmed === "main")
+        return true;
+    // `agent:<id>:main` — the standard per-agent operator main session.
+    if (/^agent:[^:]+:main$/i.test(trimmed))
+        return true;
+    return false;
+}
+/**
+ * Build a `DeliveryContext` from the loose channel/account/to/thread
+ * params the caller has at hand. Returns `undefined` when every field is
+ * empty (matches upstream's `normalizeDeliveryContext` for the empty-
+ * input case).
+ */
+function buildRequesterOrigin(ctx) {
+    const channel = ctx.agentChannel?.trim();
+    const accountId = ctx.agentAccountId?.trim();
+    const peer = ctx.agentTo?.trim();
+    const threadId = ctx.agentThreadId != null && String(ctx.agentThreadId).trim()
+        ? String(ctx.agentThreadId).trim()
+        : undefined;
+    if (!channel && !accountId && !peer && !threadId)
+        return undefined;
+    return {
+        ...(channel ? { channel } : {}),
+        ...(accountId ? { accountId } : {}),
+        ...(peer ? { peer } : {}),
+        ...(threadId ? { threadId } : {}),
+    };
+}
+function summarizeError(err) {
+    if (err instanceof Error)
+        return err.message;
+    if (typeof err === "string")
+        return err;
+    return String(err);
+}
+/**
+ * Main spawn entry point. Returns a structured result so the
+ * `sessions_spawn` tool can render success / forbidden / error cleanly.
+ *
+ * The engine NEVER throws — every failure path returns
+ * `{ status: "error" | "forbidden", error }` plus optional `childSessionKey`
+ * / `runId` if the failure happened after either was minted.
+ */
+export async function spawnSubagentDirect(params, ctx) {
+    const task = params.task.trim();
+    if (!task) {
+        return { status: "error", error: "spawn task must be a non-empty string" };
+    }
+    const label = params.label?.trim() ?? "";
+    const requestedAgentId = params.agentId?.trim();
+    // Reject malformed agentId before normalizeAgentId mangles it
+    // (mirroring upstream's gh#31311 fix).
+    if (requestedAgentId && !isValidAgentId(requestedAgentId)) {
+        return {
+            status: "error",
+            error: `Invalid agentId "${requestedAgentId}". Agent IDs must match [a-z0-9][a-z0-9_-]{0,63}.`,
+        };
+    }
+    const requestThreadBinding = params.thread === true;
+    const spawnMode = resolveSpawnMode({
+        requestedMode: params.mode,
+        threadRequested: requestThreadBinding,
+    });
+    if (spawnMode === "session" && !requestThreadBinding) {
+        return {
+            status: "error",
+            error: 'mode="session" requires thread=true so the sub-agent can stay bound to a thread.',
+        };
+    }
+    const cleanup = spawnMode === "session"
+        ? "keep"
+        : params.cleanup === "delete" || params.cleanup === "keep"
+            ? params.cleanup
+            : "keep";
+    const maxSpawnDepth = ctx.maxSpawnDepth ?? DEFAULT_MAX_SPAWN_DEPTH;
+    const maxChildren = ctx.maxChildrenPerAgent ?? DEFAULT_MAX_CHILDREN_PER_AGENT;
+    const callerDepth = ctx.callerDepth ?? 0;
+    // Wave N4 — apply a sane default per-call run timeout when the caller
+    // omits one. Without this, the engine forwards `undefined` to the gateway
+    // `agent` handler and the child runs uncapped (parent waits forever on a
+    // hung tool call). 180s is the documented default — override per-call via
+    // `runTimeoutSeconds`, or by setting `agents.defaults.subagents.defaultTimeoutSeconds`
+    // in `brigade.json` (the in-process `spawn_agent` path reads that knob).
+    const effectiveRunTimeoutSeconds = typeof params.runTimeoutSeconds === "number" && params.runTimeoutSeconds > 0
+        ? params.runTimeoutSeconds
+        : DEFAULT_SUBAGENT_RUN_TIMEOUT_SECONDS;
+    const requesterAgentId = ctx.requesterAgentIdOverride
+        ? normalizeAgentId(ctx.requesterAgentIdOverride)
+        : resolveAgentIdFromSessionKey(ctx.agentSessionKey);
+    const targetAgentId = requestedAgentId
+        ? normalizeAgentId(requestedAgentId)
+        : requesterAgentId;
+    if (callerDepth >= maxSpawnDepth) {
+        return {
+            status: "forbidden",
+            error: `sessions_spawn not allowed at this depth (current=${callerDepth}, max=${maxSpawnDepth})`,
+        };
+    }
+    if (ctx.agentSessionKey) {
+        const activeChildren = countActiveRunsForSession(ctx.agentSessionKey);
+        if (activeChildren >= maxChildren) {
+            return {
+                status: "forbidden",
+                error: `sessions_spawn has reached max active children for this session (${activeChildren}/${maxChildren})`,
+            };
+        }
+    }
+    const childSessionKey = `agent:${targetAgentId}:subagent:${crypto.randomUUID()}`;
+    const childDepth = callerDepth + 1;
+    const requesterDisplayKey = ctx.agentSessionKey ?? "main";
+    const requesterOrigin = buildRequesterOrigin(ctx);
+    const runId = crypto.randomUUID();
+    // Wave O0.8 GAP 10 — operator-initiated spawns (parent is the operator
+    // main session) get `wakeOnDescendantSettle: true` so when the child
+    // completes, the bridge fires a synthetic heartbeat that drains the
+    // parent's inbox. Cron-initiated or sub-of-sub spawns get false to
+    // avoid wake storms (the cron service / outer parent already polls).
+    const wakeOnDescendantSettle = isOperatorMainSession(ctx.agentSessionKey);
+    // Register the run BEFORE the gateway handoff so a fast completion
+    // can stamp the entry as ended without racing the registration.
+    registerSubagentRun({
+        runId,
+        childSessionKey,
+        controllerSessionKey: ctx.agentSessionKey,
+        requesterSessionKey: ctx.agentSessionKey ?? "main",
+        requesterOrigin,
+        requesterDisplayKey,
+        task,
+        cleanup,
+        label: label || undefined,
+        model: params.model,
+        workspaceDir: ctx.workspaceDir,
+        runTimeoutSeconds: effectiveRunTimeoutSeconds,
+        expectsCompletionMessage: params.expectsCompletionMessage !== false,
+        spawnMode,
+        wakeOnDescendantSettle,
+        createdAt: Date.now(),
+    });
+    // Persist spawn metadata to the per-agent session store BEFORE the
+    // gateway handoff so post-crash forensics can reconstruct the spawn
+    // tree (depth, parent, workspace, label). Without this the registry
+    // entry is in-memory only and the next spawn's depth check (which
+    // reads from store) reads 0 regardless of nesting.
+    //
+    // Cross-agent workspace inheritance: when the child runs as a DIFFERENT
+    // agent than the parent (per `agentId` override), suppress the parent's
+    // `workspaceDir` so the child resolves its target agent's native
+    // workspace (`~/.brigade/agents/<targetAgentId>/workspace/`). Same-agent
+    // spawns inherit the parent's workspace.
+    const inheritedWorkspaceDir = targetAgentId === requesterAgentId ? ctx.workspaceDir : undefined;
+    try {
+        await callGateway({
+            method: "sessions.patch",
+            params: {
+                sessionKey: childSessionKey,
+                patch: {
+                    subagent: {
+                        spawnDepth: childDepth,
+                        spawnedBy: ctx.agentSessionKey ?? "main",
+                        label: label || undefined,
+                        cleanup,
+                        spawnedAt: new Date(Date.now()).toISOString(),
+                        ...(inheritedWorkspaceDir
+                            ? { spawnedWorkspaceDir: inheritedWorkspaceDir }
+                            : {}),
+                    },
+                    ...(inheritedWorkspaceDir
+                        ? { spawnedWorkspaceDir: inheritedWorkspaceDir }
+                        : {}),
+                    ...(params.model ? { modelId: params.model } : {}),
+                },
+            },
+            timeoutMs: 5_000,
+        });
+    }
+    catch (err) {
+        // Patch failure is non-fatal — the registry entry is still
+        // authoritative for the lifetime of this process. Log + continue.
+        log.warn("sub-agent sessions.patch failed (continuing)", {
+            runId,
+            childSessionKey,
+            error: summarizeError(err),
+        });
+    }
+    // Emit lifecycle event so Step 18 listeners (control-UI WS, hook
+    // fan-out, channel announcers) can react to the spawn.
+    emitAgentEvent({
+        runId,
+        stream: "subagent_lifecycle",
+        sessionKey: ctx.agentSessionKey,
+        data: {
+            kind: "subagent_started",
+            childSessionKey,
+            requesterSessionKey: ctx.agentSessionKey,
+            runId,
+            label: label || undefined,
+            spawnMode,
+        },
+    });
+    try {
+        await withSubagentSlot(() => callGateway({
+            method: "agent",
+            params: {
+                message: task,
+                sessionKey: childSessionKey,
+                channel: ctx.agentChannel,
+                to: ctx.agentTo,
+                accountId: ctx.agentAccountId,
+                threadId: ctx.agentThreadId,
+                idempotencyKey: runId,
+                deliver: false,
+                // Per-parent FIFO lane so spawns from different parents run in
+                // parallel; the global semaphore in `subagent-budget.ts` caps
+                // total in-flight spawns process-wide.
+                lane: subagentLane(ctx.agentSessionKey),
+                thinking: params.thinking,
+                timeout: effectiveRunTimeoutSeconds,
+                label: label || undefined,
+                spawnedBy: ctx.agentSessionKey ?? "main",
+                ...(params.model ? { model: params.model } : {}),
+                // Per cross-agent workspace inheritance rule: only forward the
+                // parent's `workspaceDir` if the child runs as the SAME agent.
+                // Cross-agent spawns let the target agent resolve its own
+                // workspace via `resolveAgentWorkspaceDir(targetAgentId)`.
+                ...(inheritedWorkspaceDir ? { workspaceDir: inheritedWorkspaceDir } : {}),
+                ...(params.lightContext
+                    ? { bootstrapContextMode: "lightweight" }
+                    : {}),
+            },
+            timeoutMs: 10_000,
+        }));
+    }
+    catch (err) {
+        // Roll back the registration so the registry doesn't grow phantom
+        // entries. Best-effort: a concurrent reader might still see the
+        // entry briefly, which is fine because `endedAt` will be set by
+        // the next completion path or by the sweeper.
+        try {
+            releaseSubagentRun(runId);
+        }
+        catch {
+            // best-effort cleanup
+        }
+        const message = summarizeError(err);
+        log.warn("sub-agent gateway handoff failed", {
+            runId,
+            childSessionKey,
+            error: message,
+        });
+        return {
+            status: "error",
+            error: message,
+            childSessionKey,
+            runId,
+        };
+    }
+    return {
+        status: "accepted",
+        childSessionKey,
+        runId,
+        mode: spawnMode,
+        note: spawnMode === "session"
+            ? "Sub-agent session ready; further messages can target it via sessions_send."
+            : "Sub-agent run started; result will announce when the run completes.",
+    };
+}
+//# sourceMappingURL=subagent-spawn.js.map

package/dist/agents/subagent-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-spawn.js","sourceRoot":"","sources":["../../src/agents/subagent-spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACN,cAAc,EACd,gBAAgB,EAChB,4BAA4B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,wBAAwB,CAAC;AAOhC,MAAM,GAAG,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;AAE3D,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AACzC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AA6CxD,SAAS,gBAAgB,CAAC,MAGzB;IACA,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,MAAM,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,qBAAqB,CAAC,UAAqC;IACnE,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,oEAAoE;IACpE,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,GAAyB;IACtD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACjC,MAAM,QAAQ,GACb,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE;QAC5D,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE;QAClC,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO;QACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IACnC,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAA2B,EAC3B,GAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IAEhD,8DAA8D;IAC9D,uCAAuC;IACvC,IAAI,gBAAgB,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3D,OAAO;YACN,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,oBAAoB,gBAAgB,mDAAmD;SAC9F,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;IACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QAClC,aAAa,EAAE,MAAM,CAAC,IAAI;QAC1B,eAAe,EAAE,oBAAoB;KACrC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACtD,OAAO;YACN,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,kFAAkF;SACzF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GACZ,SAAS,KAAK,SAAS;QACtB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;YACzD,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,MAAM,CAAC;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACnE,MAAM,WAAW,GAAG,GAAG,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;IAC9E,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;IACzC,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,uFAAuF;IACvF,yEAAyE;IACzE,MAAM,0BAA0B,GAC/B,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC;QAC3E,CAAC,CAAC,MAAM,CAAC,iBAAiB;QAC1B,CAAC,CAAC,oCAAoC,CAAC;IAEzC,MAAM,gBAAgB,GAAG,GAAG,CAAC,wBAAwB;QACpD,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAChD,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,gBAAgB;QACrC,CAAC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;QACpC,CAAC,CAAC,gBAAgB,CAAC;IAEpB,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;QAClC,OAAO;YACN,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,qDAAqD,WAAW,SAAS,aAAa,GAAG;SAChG,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;QACzB,MAAM,cAAc,GAAG,yBAAyB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;YACnC,OAAO;gBACN,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,oEAAoE,cAAc,IAAI,WAAW,GAAG;aAC3G,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,eAAe,GAAG,SAAS,aAAa,aAAa,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,CAAC;IACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;IAC1D,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAElD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAElC,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE1E,mEAAmE;IACnE,gEAAgE;IAChE,mBAAmB,CAAC;QACnB,KAAK;QACL,eAAe;QACf,oBAAoB,EAAE,GAAG,CAAC,eAAe;QACzC,mBAAmB,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;QAClD,eAAe;QACf,mBAAmB;QACnB,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,KAAK,IAAI,SAAS;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,iBAAiB,EAAE,0BAA0B;QAC7C,wBAAwB,EAAE,MAAM,CAAC,wBAAwB,KAAK,KAAK;QACnE,SAAS;QACT,sBAAsB;QACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC,CAAC;IAEH,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,mDAAmD;IACnD,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,iEAAiE;IACjE,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,qBAAqB,GAC1B,aAAa,KAAK,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,CAAC;QACJ,MAAM,WAAW,CAAC;YACjB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE;gBACP,UAAU,EAAE,eAAe;gBAC3B,KAAK,EAAE;oBACN,QAAQ,EAAE;wBACT,UAAU,EAAE,UAAU;wBACtB,SAAS,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;wBACxC,KAAK,EAAE,KAAK,IAAI,SAAS;wBACzB,OAAO;wBACP,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;wBAC7C,GAAG,CAAC,qBAAqB;4BACxB,CAAC,CAAC,EAAE,mBAAmB,EAAE,qBAAqB,EAAE;4BAChD,CAAC,CAAC,EAAE,CAAC;qBACN;oBACD,GAAG,CAAC,qBAAqB;wBACxB,CAAC,CAAC,EAAE,mBAAmB,EAAE,qBAAqB,EAAE;wBAChD,CAAC,CAAC,EAAE,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD;aACD;YACD,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,2DAA2D;QAC3D,kEAAkE;QAClE,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;YACxD,KAAK;YACL,eAAe;YACf,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,uDAAuD;IACvD,cAAc,CAAC;QACd,KAAK;QACL,MAAM,EAAE,oBAAoB;QAC5B,UAAU,EAAE,GAAG,CAAC,eAAe;QAC/B,IAAI,EAAE;YACL,IAAI,EAAE,kBAAkB;YACxB,eAAe;YACf,mBAAmB,EAAE,GAAG,CAAC,eAAe;YACxC,KAAK;YACL,KAAK,EAAE,KAAK,IAAI,SAAS;YACzB,SAAS;SACT;KACD,CAAC,CAAC;IAEH,IAAI,CAAC;QACJ,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;YACxC,MAAM,EAAE,OAAO;YACf,MAAM,EAAE;gBACP,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,eAAe;gBAC3B,OAAO,EAAE,GAAG,CAAC,YAAY;gBACzB,EAAE,EAAE,GAAG,CAAC,OAAO;gBACf,SAAS,EAAE,GAAG,CAAC,cAAc;gBAC7B,QAAQ,EAAE,GAAG,CAAC,aAAa;gBAC3B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,KAAK;gBACd,+DAA+D;gBAC/D,8DAA8D;gBAC9D,uCAAuC;gBACvC,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC;gBACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,0BAA0B;gBACnC,KAAK,EAAE,KAAK,IAAI,SAAS;gBACzB,SAAS,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;gBACxC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,+DAA+D;gBAC/D,+DAA+D;gBAC/D,0DAA0D;gBAC1D,2DAA2D;gBAC3D,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,MAAM,CAAC,YAAY;oBACtB,CAAC,CAAC,EAAE,oBAAoB,EAAE,aAAsB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;aACN;YACD,SAAS,EAAE,MAAM;SACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,kEAAkE;QAClE,gEAAgE;QAChE,gEAAgE;QAChE,8CAA8C;QAC9C,IAAI,CAAC;YACJ,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,sBAAsB;QACvB,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC5C,KAAK;YACL,eAAe;YACf,KAAK,EAAE,OAAO;SACd,CAAC,CAAC;QACH,OAAO;YACN,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,OAAO;YACd,eAAe;YACf,KAAK;SACL,CAAC;IACH,CAAC;IAED,OAAO;QACN,MAAM,EAAE,UAAU;QAClB,eAAe;QACf,KAAK;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EACH,SAAS,KAAK,SAAS;YACtB,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,qEAAqE;KACzE,CAAC;AACH,CAAC"}

package/dist/agents/thinking-fallback.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Thinking-fallback — when the model rejects a turn because the active
+ * thinking level isn't supported, silently downgrade to "off" and retry
+ * ONCE. The reason this matters in practice:
+ *
+ *   - Static capability inference (`model.reasoning` flag in Pi's catalog)
+ *     can be WRONG. Ollama doesn't report capabilities — we infer from the
+ *     model name. `qwen3-coder` looks like qwen3-family (which has
+ *     reasoning) but the coder variant is text-only.
+ *   - OpenRouter / aggregator-prefixed models route through different
+ *     backends per slug. Pi's flag may say "yes thinking" but the actual
+ *     route may be a model that doesn't expose thinking. The error fires
+ *     at runtime; the static catalog never sees it.
+ *
+ * Without this wrapper, every wrong guess = a hard failure for the user.
+ * One retry-with-thinking=off is enough to recover the common cases.
+ *
+ * Hard-capped at one retry — if the second attempt also fails, the error
+ * propagates normally (caller's model-fallback layer can rotate
+ * candidates from there).
+ *
+ * Ported from `core/agent.ts:1319-1371` (Runtime A) — same logic.
+ */
+import type { AgentSession } from "@mariozechner/pi-coding-agent";
+/**
+ * Detector for the family of "thinking not supported" error messages
+ * across providers. Conservative — false positives just trigger an
+ * extra retry on a model we'd have failed anyway, which is fine.
+ *
+ * Patterns observed across Anthropic / Gemini / Ollama / OpenRouter
+ * routes that ended up at non-reasoning models.
+ */
+export declare function looksLikeThinkingNotSupported(message: string): boolean;
+export interface ThinkingFallbackOptions {
+    /** Called just before the auto-downgrade retry. */
+    onDowngrade?: (originalLevel: string, errorMessage: string) => void;
+}
+/**
+ * Run a prompt body. If the model rejects with "doesn't support
+ * thinking", downgrade `thinkingLevel` to "off" and retry once with the
+ * same user message.
+ *
+ * Re-extracts the last user message from session history because Pi
+ * doesn't expose the user's input as a return value from `prompt()` —
+ * the prompt is queued and the function settles on the assistant
+ * response.
+ */
+export declare function runWithThinkingFallback(session: AgentSession, body: () => Promise<void>, options?: ThinkingFallbackOptions): Promise<void>;
+//# sourceMappingURL=thinking-fallback.d.ts.map

package/dist/agents/thinking-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinking-fallback.d.ts","sourceRoot":"","sources":["../../src/agents/thinking-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAKtE;AAqBD,MAAM,WAAW,uBAAuB;IACvC,mDAAmD;IACnD,WAAW,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;CACpE;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EACzB,OAAO,GAAE,uBAA4B,GACnC,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/agents/thinking-fallback.js

@@ -0,0 +1,97 @@
+/**
+ * Thinking-fallback — when the model rejects a turn because the active
+ * thinking level isn't supported, silently downgrade to "off" and retry
+ * ONCE. The reason this matters in practice:
+ *
+ *   - Static capability inference (`model.reasoning` flag in Pi's catalog)
+ *     can be WRONG. Ollama doesn't report capabilities — we infer from the
+ *     model name. `qwen3-coder` looks like qwen3-family (which has
+ *     reasoning) but the coder variant is text-only.
+ *   - OpenRouter / aggregator-prefixed models route through different
+ *     backends per slug. Pi's flag may say "yes thinking" but the actual
+ *     route may be a model that doesn't expose thinking. The error fires
+ *     at runtime; the static catalog never sees it.
+ *
+ * Without this wrapper, every wrong guess = a hard failure for the user.
+ * One retry-with-thinking=off is enough to recover the common cases.
+ *
+ * Hard-capped at one retry — if the second attempt also fails, the error
+ * propagates normally (caller's model-fallback layer can rotate
+ * candidates from there).
+ *
+ * Ported from `core/agent.ts:1319-1371` (Runtime A) — same logic.
+ */
+/**
+ * Detector for the family of "thinking not supported" error messages
+ * across providers. Conservative — false positives just trigger an
+ * extra retry on a model we'd have failed anyway, which is fine.
+ *
+ * Patterns observed across Anthropic / Gemini / Ollama / OpenRouter
+ * routes that ended up at non-reasoning models.
+ */
+export function looksLikeThinkingNotSupported(message) {
+    if (!message)
+        return false;
+    return /not support(?:ed)? (?:extended )?thinking|thinking is not enabled|thinking_config|does not allow thinking|requires thinking_off/i.test(message);
+}
+/**
+ * Pull the error message off the last assistant turn IFF it ended with
+ * `stopReason === "error"`. Returns undefined for healthy turns.
+ *
+ * Pi sets `errorMessage` on the assistant message object when the turn
+ * fails partway through — that's what we inspect to decide whether to
+ * downgrade and retry.
+ */
+function lastAssistantErrorMessage(session) {
+    const last = [...session.messages]
+        .reverse()
+        .find((m) => m.role === "assistant");
+    if (!last)
+        return undefined;
+    const stop = last.stopReason;
+    const errMsg = last.errorMessage;
+    if (stop !== "error" || typeof errMsg !== "string")
+        return undefined;
+    return errMsg;
+}
+/**
+ * Run a prompt body. If the model rejects with "doesn't support
+ * thinking", downgrade `thinkingLevel` to "off" and retry once with the
+ * same user message.
+ *
+ * Re-extracts the last user message from session history because Pi
+ * doesn't expose the user's input as a return value from `prompt()` —
+ * the prompt is queued and the function settles on the assistant
+ * response.
+ */
+export async function runWithThinkingFallback(session, body, options = {}) {
+    await body();
+    const errMsg = lastAssistantErrorMessage(session);
+    if (!errMsg || !looksLikeThinkingNotSupported(errMsg))
+        return;
+    // Already on off — retry would loop.
+    if (session.thinkingLevel === "off")
+        return;
+    const originalLevel = session.thinkingLevel;
+    options.onDowngrade?.(originalLevel, errMsg);
+    session.setThinkingLevel("off");
+    // Retry once with thinking off. Re-prompt with the same user
+    // message — we extract from session history.
+    const lastUser = [...session.messages]
+        .reverse()
+        .find((m) => m.role === "user");
+    if (!lastUser)
+        return;
+    const content = lastUser.content;
+    if (!Array.isArray(content))
+        return;
+    const text = content
+        .filter((b) => b && typeof b === "object" && b.type === "text"
+        && typeof b.text === "string")
+        .map((b) => b.text)
+        .join("");
+    if (!text)
+        return;
+    await session.prompt(text);
+}
+//# sourceMappingURL=thinking-fallback.js.map

package/dist/agents/thinking-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinking-fallback.js","sourceRoot":"","sources":["../../src/agents/thinking-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC5D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,kIAAkI,CAAC,IAAI,CAC7I,OAAO,CACP,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,OAAqB;IACvD,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;SAChC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAI,IAAiC,CAAC,UAAU,CAAC;IAC3D,MAAM,MAAM,GAAI,IAAmC,CAAC,YAAY,CAAC;IACjE,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrE,OAAO,MAAM,CAAC;AACf,CAAC;AAOD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAAqB,EACrB,IAAyB,EACzB,UAAmC,EAAE;IAErC,MAAM,IAAI,EAAE,CAAC;IAEb,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC;QAAE,OAAO;IAC9D,qCAAqC;IACrC,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK;QAAE,OAAO;IAE5C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,OAAO,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAEhC,6DAA6D;IAC7D,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;SACpC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,MAAM,OAAO,GAAI,QAAkC,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IACpC,MAAM,IAAI,GAAG,OAAO;SAClB,MAAM,CACN,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAwB,CAAC,IAAI,KAAK,MAAM;WACpE,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CACtD;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC;SACxC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/agents/tool-guard.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Tool-call guard — refuses problematic tool invocations BEFORE they
+ * execute. Wired into Pi's `session.agent.beforeToolCall` hook.
+ *
+ * Three failure modes caught here:
+ *
+ *   1. UNKNOWN TOOL — model hallucinated a name not in the allowlist.
+ *      Returns a refusal listing the real tools so it self-corrects on
+ *      the next turn.
+ *
+ *   2. WHITESPACE-WRAPPED NAME — provider emitted `"  read  "` instead
+ *      of `"read"`. Pi treats this as unknown. We trim before checking.
+ *      The error message tells the model to drop the spaces.
+ *
+ *   3. MALFORMED ARGS — empty args for a tool that needs params (xAI
+ *      sometimes emits broken JSON; Pi parses what it can, leaves us
+ *      with `{}`). Refuse with explicit instruction to retry.
+ *
+ * Ported from `core/agent.ts:807-929` (Runtime A) — same logic, no
+ * functional change. Lives here so Runtime B can use it without
+ * importing from Runtime A.
+ */
+import type { BeforeToolCallContext, BeforeToolCallResult } from "@mariozechner/pi-agent-core";
+/**
+ * Hook signature matches Pi's exact contract — strictly async, returns
+ * `Promise<BeforeToolCallResult | undefined>`. Pi awaits the result so
+ * making it async (vs `sync | async`) avoids TS variance issues at the
+ * assignment site (`session.agent.beforeToolCall = guard`).
+ */
+export type BrigadeBeforeToolCallHook = (ctx: BeforeToolCallContext, signal?: AbortSignal) => Promise<BeforeToolCallResult | undefined>;
+export declare function trimToolCallName(name: unknown): string;
+/**
+ * Canonical tool-name normaliser shared by every `beforeToolCall` hook
+ * in the chain (unknown-tool guard, loop detector, exec gate). Lowercase
+ * + trim, so a provider that emits `Read`, `READ`, or `  read  ` is
+ * handled identically across all three layers. Without a shared
+ * helper, the layers diverge — earlier audits caught the bash gate
+ * doing lowercase matching while the path guards used raw casing.
+ *
+ */
+export declare function normalizeToolName(name: unknown): string;
+/**
+ * Heuristic detector for malformed tool arguments. Returns true when
+ * the call looks suspiciously empty (likely a streaming JSON parse
+ * failure) for a tool that typically requires arguments.
+ *
+ * Pure approximation — true repair would need stream-level intervention
+ * (see `wrapStreamFnWithToolCallRepair` in `stream-wrappers.ts`). This
+ * surface-level check is the second-line defence: even if the stream
+ * wrapper missed it, the guard still refuses execution.
+ */
+export declare function isLikelyMalformedArgs(args: unknown, toolName: string): boolean;
+/**
+ * Build a `beforeToolCall` hook that blocks problematic tool calls
+ * before they execute.
+ *
+ * Wire via:
+ *   session.agent.beforeToolCall = makeUnknownToolGuard(toolNames);
+ *
+ * To compose with another `beforeToolCall` hook (e.g. operator-defined
+ * audit policy), wrap manually:
+ *   const guard = makeUnknownToolGuard(toolNames);
+ *   const userHook = ...;
+ *   session.agent.beforeToolCall = async (ctx, signal) => {
+ *     const guarded = await guard(ctx, signal);
+ *     if (guarded?.block) return guarded;        // hard refusal wins
+ *     return userHook(ctx, signal);              // otherwise user policy
+ *   };
+ */
+export declare function makeUnknownToolGuard(allowedToolNames: string[]): BrigadeBeforeToolCallHook;
+//# sourceMappingURL=tool-guard.d.ts.map

package/dist/agents/tool-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../src/agents/tool-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACvC,GAAG,EAAE,qBAAqB,EAC1B,MAAM,CAAC,EAAE,WAAW,KAChB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;AAsB/C,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAGtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAGvD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAW9E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,yBAAyB,CA0D1F"}