@xemahq/opencode-xema-plugin 0.3.0 → 0.4.0

package/README.md

@@ -6,7 +6,7 @@
     <path d="M26 12 L41 21 L41 39 L26 48 L11 39 L11 21 Z" fill="#8B5CF6"/>
   </g>
   <text x="92" y="52" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="22" fill="#F8FAFC" font-weight="700">@xemahq/opencode-xema-plugin</text>
-  <text x="92" y="80" font-family="ui-sans-serif,system-ui,sans-serif" font-size="15" fill="#94A3B8">Opencode plugin exposing Xema runtime tools and overlay hook</text>
+  <text x="92" y="80" font-family="ui-sans-serif,system-ui,sans-serif" font-size="15" fill="#94A3B8">OpenCode V2 runtime bridge plugin — hooks only</text>
   <text x="652" y="105" text-anchor="end" font-family="ui-sans-serif,system-ui,sans-serif" font-size="12" fill="#475569">xema.dev</text>
 </svg>
 </p>
@@ -24,68 +24,61 @@
 
 # @xemahq/opencode-xema-plugin
 
-> Opencode plugin exposing Xema runtime tools and overlay hook
+> The `xema-runtime-bridge` OpenCode V2 plugin — hooks only, zero tools
 
 ## Overview
 
-An Opencode plugin that registers Xema-namespaced runtime tools, a dynamic
-system-prompt overlay hook, and the sub-agent fan-out ceiling. The plugin is
-evaluated once at agent startup; it registers its tools unconditionally and
-defers per-role authorization to tool-execution time, where each tool reads the
-invocation context from the worker filesystem and rejects calls the invoking
-role is not permitted to make.
+Builds the OpenCode 2.0.20 directory plugin `xema-runtime-bridge`
+(`plugin/xema-runtime-bridge/`, a `package.json` plus a self-contained
+`index.js` whose default export is `{ id, setup }`). It contributes no
+model-facing tools; everything it does is a hook:
+
+- **System overlay** (`session.hook('context')`) — appends the platform
+  overlay and a live workspace listing to every model request, exactly once.
+- **Compaction invariants** (`session.hook('compaction')`) — tells the
+  summarizer which invocation identifiers and deliverable constraints must
+  survive compaction, without replacing the summary.
+- **Root-turn completion** — when a ROOT session's execution succeeds,
+  notifies workspace-proxy (which performs the auto-commit).
+- **Sub-agent fan-out ceiling** — bounds how many sub-agent children run at
+  once in one worker.
+- **Tool-surface observation** — records the tools OpenCode advertises.
+- **Shell env hygiene** — removes the server password from agent shells.
 
 ## When to use it
 
-- Use it to add the Xema runtime tools and prompt overlay to an Opencode agent
-  runtime.
-- Use it to bound how many sub-agents one worker may run at once.
+- Use it in an OpenCode V2 agent runtime that serves Xema invocations.
+- Use it to bound sub-agent width per worker.
 
 ## The sub-agent fan-out ceiling
 
-Opencode bounds how DEEP delegation may nest (`subagent_depth`). Nothing bounds
-how WIDE a turn may go, so at the platform's declared depth an unbounded
-branching factor is an unbounded process — every `task` call is forked with no
-pool, no semaphore and no queue.
-
-This plugin adds the missing pool cap. It is BACKPRESSURE, not a refusal: when
-the worker is already running its ceiling of sub-agents, the next `task` call
-WAITS for a slot instead of being denied. An agent that cannot spawn a helper
-would produce a wrong answer; one that waits produces a slower right one.
-
-Configuration exists to TIGHTEN, never to enable:
+OpenCode bounds how DEEP delegation may nest. Nothing bounds how WIDE a turn
+may go. This plugin adds a pool cap counted over CHILD SESSION LIFETIME: a slot
+is reserved when the `subagent` tool is called and released when the child
+session's execution ends (succeeded, failed or interrupted). It is
+BACKPRESSURE, not a refusal: at the ceiling the next spawn waits.
 
 | | |
 |---|---|
-| Default | 8 concurrent `task` calls per worker |
+| Default | 8 concurrent sub-agent children per worker |
 | Tighten with | `XEMA_SUBAGENT_FANOUT_LIMIT` (1..8) |
 | Unset or empty | the platform default — never zero, never "off" |
 | Above the default | refused at boot, with the reason |
 
-Every degradation is logged: a task that waits says so and for how long, and
-both leak backstops (a `session.idle` sweep and a per-permit TTL) name what they
-reclaimed. A ceiling that silently stops binding is indistinguishable from
-working software until somebody asks.
-
 ## Installation
 
-```bash
-pnpm add @xemahq/opencode-xema-plugin
-```
-
-## Usage
-
-```ts
-import XemaPlugin from '@xemahq/opencode-xema-plugin';
+The runtime artifact is the directory `plugin/xema-runtime-bridge/` inside the
+published tarball. Copy it into the worker image and enable it by path:
 
-// Register the plugin with your Opencode runtime configuration.
-export const plugins = [XemaPlugin];
+```jsonc
+{
+  "plugins": [{ "package": "file:///opt/xema/opencode-plugins/xema-runtime-bridge" }]
+}
 ```
 
 ## Peer requirements
 
-- `@opencode-ai/plugin` >=1.0.0
-- `zod` >=4
+- `@opencode/plugin` 2.0.20 (types only)
 
 ## License
 

package/dist/.source-stamp.json

@@ -1,5 +1,5 @@
 {
   "algorithm": "sha256/len-framed-v1",
-  "hash": "91dded28129122882a0e5cd97ec25a1d294fd8f648c614ff68e6f520cd42e13f",
-  "fileCount": 10
+  "hash": "c405e6f7436c100dcaa147a25cf104ea9c45c33b87d946a3670692b9e846bd41",
+  "fileCount": 14
 }

package/dist/context.d.ts

@@ -23,6 +23,7 @@ declare const ContextJsonSchema: z.ZodObject<{
             "pipeline-run": "pipeline-run";
             "gate-review": "gate-review";
         }>>;
+        stageKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>;
     project: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         orgId: z.ZodString;
@@ -40,20 +41,10 @@ declare const ContextJsonSchema: z.ZodObject<{
             "full-write": "full-write";
         }>;
     }, z.core.$strip>;
-    git: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-        autoCommit: z.ZodEnum<{
-            enabled: "enabled";
-            disabled: "disabled";
-        }>;
-        repoSubPath: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, z.core.$strip>>>;
-    actor: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-        kind: z.ZodEnum<{
-            org_user: "org_user";
-        }>;
-        subjectRef: z.ZodString;
-        displayName: z.ZodString;
-    }, z.core.$strip>>>;
+    workingFiles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        slug: z.ZodString;
+        path: z.ZodString;
+    }, z.core.$loose>>>;
 }, z.core.$strip>;
 export type InvocationContext = z.infer<typeof ContextJsonSchema>;
 export type InvocationRole = InvocationContext['invocation']['role'];

package/dist/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgGrB,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAUrE,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,GACnB,iBAAiB,GAAG,IAAI,CAQ1B;AAUD,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,iBAAiB,GAAG,IAAI,CAiB1B"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuErB,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AASrE,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,GACnB,iBAAiB,GAAG,IAAI,CAQ1B;AAUD,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,iBAAiB,GAAG,IAAI,CAiB1B"}

package/dist/context.js

@@ -23,6 +23,7 @@ const ContextJsonSchema = z.object({
         surface: z
             .enum(['pipeline-run', 'agent-session', 'design-system-builder', 'gate-review'])
             .optional(),
+        stageKey: z.string().nullish(),
     }),
     project: z
         .object({
@@ -38,19 +39,9 @@ const ContextJsonSchema = z.object({
         mayEditRepos: z.boolean().default(false),
         writePolicy: z.enum(['read-only', 'own-pages-only', 'full-write']),
     }),
-    git: z
-        .object({
-        autoCommit: z.enum(['enabled', 'disabled']),
-        repoSubPath: z.string().nullish(),
-    })
-        .nullish(),
-    actor: z
-        .object({
-        kind: z.enum(['org_user']),
-        subjectRef: z.string().min(1),
-        displayName: z.string().min(1),
-    })
-        .nullish(),
+    workingFiles: z
+        .array(z.object({ slug: z.string(), path: z.string() }).loose())
+        .optional(),
 });
 export function readInvocationContext(workspaceDir) {
     const path = join(workspaceDir, 'context.json');

package/dist/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YACX,aAAa;YACb,aAAa;YACb,eAAe;YACf,2BAA2B;YAC3B,iBAAiB;YACjB,eAAe;YACf,uBAAuB;YACvB,UAAU;YACV,eAAe;YACf,SAAS;YAKT,UAAU;SACX,CAAC;QACF,OAAO,EAAE,CAAC;aACP,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,uBAAuB,EAAE,aAAa,CAAC,CAAC;aAC/E,QAAQ,EAAE;KACd,CAAC;IACF,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QAK/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;KACrC,CAAC;SACD,OAAO,EAAE;IACZ,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC3E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;KAmBnE,CAAC;IAcF,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;KAClC,CAAC;SACD,OAAO,EAAE;IASZ,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,OAAO,EAAE;CACb,CAAC,CAAC;AAaH,MAAM,UAAU,qBAAqB,CACnC,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAUD,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CACF,QAAQ,QAAQ,6BAA6B,IAAI,KAAK,OAAO,IAAI;YAC/D,gFAAgF,CACnF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YACX,aAAa;YACb,aAAa;YACb,eAAe;YACf,2BAA2B;YAC3B,iBAAiB;YACjB,eAAe;YACf,uBAAuB;YACvB,UAAU;YACV,eAAe;YACf,SAAS;YAKT,UAAU;SACX,CAAC;QACF,OAAO,EAAE,CAAC;aACP,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,uBAAuB,EAAE,aAAa,CAAC,CAAC;aAC/E,QAAQ,EAAE;QACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;KAC/B,CAAC;IACF,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QAK/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;KACrC,CAAC;SACD,OAAO,EAAE;IACZ,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC3E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;KAmBnE,CAAC;IAMF,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC/D,QAAQ,EAAE;CACd,CAAC,CAAC;AAYH,MAAM,UAAU,qBAAqB,CACnC,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAUD,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CACF,QAAQ,QAAQ,6BAA6B,IAAI,KAAK,OAAO,IAAI;YAC/D,gFAAgF,CACnF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/hooks/compaction-invariants.d.ts

@@ -0,0 +1,8 @@
+import type { SessionCompaction } from '@opencode/plugin/promise/session';
+import { type InvocationContext } from '../context.js';
+export type CompactionHookInput = Pick<SessionCompaction, 'sessionID' | 'system'>;
+export declare const XEMA_COMPACTION_METADATA_KEY = "xema.compaction-invariants";
+export declare const MAX_COMPACTION_INVARIANTS_CHARS = 2000;
+export declare function buildCompactionInvariantsHook(directory: string): (input: CompactionHookInput) => void;
+export declare function renderCompactionInvariants(ctx: InvocationContext): string;
+//# sourceMappingURL=compaction-invariants.d.ts.map

package/dist/hooks/compaction-invariants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compaction-invariants.d.ts","sourceRoot":"","sources":["../../src/hooks/compaction-invariants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EAAgC,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASrF,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;AAElF,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AAOzE,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAgCrD,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,IACrD,OAAO,mBAAmB,KAAG,IAAI,CAqB1C;AASD,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CA0BzE"}

package/dist/hooks/compaction-invariants.js

@@ -0,0 +1,60 @@
+import { readInvocationContextForHook } from '../context.js';
+import { debug } from '../logger.js';
+export const XEMA_COMPACTION_METADATA_KEY = 'xema.compaction-invariants';
+export const MAX_COMPACTION_INVARIANTS_CHARS = 2_000;
+const MAX_LISTED_ITEMS = 20;
+export function buildCompactionInvariantsHook(directory) {
+    return (input) => {
+        const ctx = readInvocationContextForHook(directory, 'session.compaction');
+        if (!ctx) {
+            return;
+        }
+        const text = renderCompactionInvariants(ctx);
+        const part = {
+            type: 'text',
+            text,
+            metadata: { [XEMA_COMPACTION_METADATA_KEY]: true },
+        };
+        const existing = input.system.findIndex((entry) => entry.metadata?.[XEMA_COMPACTION_METADATA_KEY] === true);
+        if (existing === -1) {
+            input.system.push(part);
+        }
+        else {
+            input.system[existing] = part;
+        }
+        debug(`session.compaction: contributed ${text.length} chars of continuation invariants`);
+    };
+}
+function listed(items) {
+    const shown = items.slice(0, MAX_LISTED_ITEMS).join(', ');
+    const more = items.length - MAX_LISTED_ITEMS;
+    return more > 0 ? `${shown} (+${more} more)` : shown;
+}
+export function renderCompactionInvariants(ctx) {
+    const inv = ctx.invocation;
+    const lines = [
+        'Xema continuation invariants. Preserve these facts verbatim in the summary ' +
+            '(under "## Additional Context"); they identify the invocation and its ' +
+            'deliverable contract and must survive compaction. Do not invent anything ' +
+            'beyond them.',
+        `- invocation: role=${inv.role}` +
+            (inv.surface ? `, surface=${inv.surface}` : '') +
+            (inv.runId ? `, runId=${inv.runId}` : '') +
+            (inv.stageKey ? `, stageKey=${inv.stageKey}` : '') +
+            (inv.sessionId ? `, sessionId=${inv.sessionId}` : '') +
+            `, attempt=${inv.attempt}`,
+        `- writePolicy: ${ctx.authority.writePolicy}`,
+    ];
+    if (ctx.authority.mayWriteSlugs.length > 0) {
+        lines.push(`- deliverable slugs: ${listed(ctx.authority.mayWriteSlugs)}`);
+    }
+    const files = ctx.workingFiles ?? [];
+    if (files.length > 0) {
+        lines.push(`- working files: ${listed(files.map((file) => `${file.slug} → ${file.path}`))}`);
+    }
+    const text = lines.join('\n');
+    return text.length > MAX_COMPACTION_INVARIANTS_CHARS
+        ? `${text.slice(0, MAX_COMPACTION_INVARIANTS_CHARS - 1)}…`
+        : text;
+}
+//# sourceMappingURL=compaction-invariants.js.map

package/dist/hooks/compaction-invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compaction-invariants.js","sourceRoot":"","sources":["../../src/hooks/compaction-invariants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAA0B,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAUrC,MAAM,CAAC,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AAOzE,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AACrD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AA+B5B,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,OAAO,CAAC,KAA0B,EAAQ,EAAE;QAC1C,MAAM,GAAG,GAAG,4BAA4B,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAsB;YAC9B,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,QAAQ,EAAE,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE;SACnD,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CACrC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,4BAA4B,CAAC,KAAK,IAAI,CACnE,CAAC;QACF,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,mCAAmC,IAAI,CAAC,MAAM,mCAAmC,CAAC,CAAC;IAC3F,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAwB;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC;IAC7C,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAGD,MAAM,UAAU,0BAA0B,CAAC,GAAsB;IAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC;IAC3B,MAAM,KAAK,GAAG;QACZ,6EAA6E;YAC3E,wEAAwE;YACxE,2EAA2E;YAC3E,cAAc;QAChB,sBAAsB,GAAG,CAAC,IAAI,EAAE;YAC9B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,aAAa,GAAG,CAAC,OAAO,EAAE;QAC5B,kBAAkB,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KAC9C,CAAC;IACF,IAAI,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,MAAM,GAAG,+BAA+B;QAClD,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,+BAA+B,GAAG,CAAC,CAAC,GAAG;QAC1D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/hooks/root-turn-completion.d.ts

@@ -0,0 +1,14 @@
+import { SessionExecutionOutcome } from '../runtime-events.js';
+export declare const TURN_COMPLETED_PATH = "/runtime/turn-completed";
+export declare const WORKSPACE_PROXY_URL_ENV = "WORKSPACE_PROXY_URL";
+export declare const SERVER_PASSWORD_ENV = "OPENCODE_SERVER_PASSWORD";
+export interface RootTurnCompletionOptions {
+    readonly resolveParentId: (runtimeSessionId: string) => Promise<string | undefined>;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}
+export interface RootTurnCompletion {
+    readonly onSessionCreated: (sessionId: string, parentId: string | undefined) => void;
+    readonly onSessionTerminal: (sessionId: string, outcome: SessionExecutionOutcome, executionId: string) => Promise<void>;
+}
+export declare function createRootTurnCompletion(options: RootTurnCompletionOptions): RootTurnCompletion;
+//# sourceMappingURL=root-turn-completion.d.ts.map

package/dist/hooks/root-turn-completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-turn-completion.d.ts","sourceRoot":"","sources":["../../src/hooks/root-turn-completion.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAC7D,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAI9D,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,eAAe,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEpF,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;IACrF,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,EAChC,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAqF/F"}

package/dist/hooks/root-turn-completion.js

@@ -0,0 +1,84 @@
+import { debug, warn } from '../logger.js';
+import { SessionExecutionOutcome } from '../runtime-events.js';
+const HOOK_NAME = 'turn-completed';
+export const TURN_COMPLETED_PATH = '/runtime/turn-completed';
+export const WORKSPACE_PROXY_URL_ENV = 'WORKSPACE_PROXY_URL';
+export const SERVER_PASSWORD_ENV = 'OPENCODE_SERVER_PASSWORD';
+const MAX_REMEMBERED_KEYS = 1_000;
+export function createRootTurnCompletion(options) {
+    const parentBySession = new Map();
+    const delivered = new Set();
+    async function isRoot(sessionId) {
+        if (parentBySession.has(sessionId))
+            return parentBySession.get(sessionId) === undefined;
+        try {
+            const parent = await options.resolveParentId(sessionId);
+            parentBySession.set(sessionId, parent);
+            return parent === undefined;
+        }
+        catch (err) {
+            warn(`hook=${HOOK_NAME}: cannot tell whether session=${sessionId} is a root ` +
+                `(${err instanceof Error ? err.message : String(err)}); skipping rather than guessing.`);
+            return undefined;
+        }
+    }
+    function remember(key) {
+        delivered.add(key);
+        if (delivered.size > MAX_REMEMBERED_KEYS) {
+            const oldest = delivered.values().next().value;
+            if (oldest !== undefined)
+                delivered.delete(oldest);
+        }
+    }
+    async function onSessionTerminal(sessionId, outcome, executionId) {
+        try {
+            if (outcome !== SessionExecutionOutcome.Succeeded) {
+                debug(`hook=${HOOK_NAME}: session=${sessionId} ended ${outcome}; not a commit point`);
+                return;
+            }
+            const key = `${sessionId}:${executionId}`;
+            if (delivered.has(key)) {
+                debug(`hook=${HOOK_NAME}: ${key} already notified`);
+                return;
+            }
+            if ((await isRoot(sessionId)) !== true)
+                return;
+            const env = options.env ?? process.env;
+            const base = env[WORKSPACE_PROXY_URL_ENV];
+            const password = env[SERVER_PASSWORD_ENV];
+            if (!base || !password) {
+                warn(`hook=${HOOK_NAME}: ${!base ? WORKSPACE_PROXY_URL_ENV : SERVER_PASSWORD_ENV} is not set; ` +
+                    `cannot notify workspace-proxy that session=${sessionId} completed a turn.`);
+                return;
+            }
+            const url = `${base.replace(/\/$/, '')}${TURN_COMPLETED_PATH}`;
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Authorization: `Basic ${Buffer.from(`opencode:${password}`).toString('base64')}`,
+                    'Idempotency-Key': key,
+                },
+                body: JSON.stringify({ runtimeSessionId: sessionId, executionId, outcome }),
+            });
+            if (!res.ok) {
+                const text = await res.text().catch(() => '<unreadable body>');
+                warn(`hook=${HOOK_NAME}: POST ${url} responded ${res.status}: ${text.slice(0, 512)}`);
+                return;
+            }
+            remember(key);
+            debug(`hook=${HOOK_NAME}: notified ${key}`);
+        }
+        catch (err) {
+            warn(`hook=${HOOK_NAME}: unexpected error swallowed (best-effort): ` +
+                (err instanceof Error ? err.message : String(err)));
+        }
+    }
+    return {
+        onSessionCreated: (sessionId, parentId) => {
+            parentBySession.set(sessionId, parentId);
+        },
+        onSessionTerminal,
+    };
+}
+//# sourceMappingURL=root-turn-completion.js.map

package/dist/hooks/root-turn-completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-turn-completion.js","sourceRoot":"","sources":["../../src/hooks/root-turn-completion.ts"],"names":[],"mappings":"AA+CA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAkBlC,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,MAAM,eAAe,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,UAAU,MAAM,CAAC,SAAiB;QACrC,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACxD,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,MAAM,KAAK,SAAS,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CACF,QAAQ,SAAS,iCAAiC,SAAS,aAAa;gBACtE,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAC1F,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,QAAQ,CAAC,GAAW;QAC3B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,OAAgC,EAChC,WAAmB;QAEnB,IAAI,CAAC;YACH,IAAI,OAAO,KAAK,uBAAuB,CAAC,SAAS,EAAE,CAAC;gBAClD,KAAK,CAAC,QAAQ,SAAS,aAAa,SAAS,UAAU,OAAO,sBAAsB,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;YAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,SAAS,KAAK,GAAG,mBAAmB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO;YAE/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACvB,IAAI,CACF,QAAQ,SAAS,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,eAAe;oBACxF,8CAA8C,SAAS,oBAAoB,CAC9E,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mBAAmB,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAChF,iBAAiB,EAAE,GAAG;iBACvB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;aAC5E,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ,SAAS,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,CAAC,QAAQ,SAAS,cAAc,GAAG,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CACF,QAAQ,SAAS,8CAA8C;gBAC7D,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;YACxC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QACD,iBAAiB;KAClB,CAAC;AACJ,CAAC"}

package/dist/hooks/shell-env-hygiene.d.ts

@@ -0,0 +1,6 @@
+export declare const SERVER_PASSWORD_ENV_KEYS: readonly string[];
+export interface ShellCreateBeforeInput {
+    env: Record<string, string | undefined>;
+}
+export declare function scrubShellEnv(input: ShellCreateBeforeInput): void;
+//# sourceMappingURL=shell-env-hygiene.d.ts.map

package/dist/hooks/shell-env-hygiene.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-env-hygiene.d.ts","sourceRoot":"","sources":["../../src/hooks/shell-env-hygiene.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAGpD,CAAC;AAEH,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAIjE"}

package/dist/hooks/shell-env-hygiene.js

@@ -0,0 +1,10 @@
+export const SERVER_PASSWORD_ENV_KEYS = Object.freeze([
+    'OPENCODE_PASSWORD',
+    'OPENCODE_SERVER_PASSWORD',
+]);
+export function scrubShellEnv(input) {
+    for (const key of SERVER_PASSWORD_ENV_KEYS) {
+        delete input.env[key];
+    }
+}
+//# sourceMappingURL=shell-env-hygiene.js.map

package/dist/hooks/shell-env-hygiene.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-env-hygiene.js","sourceRoot":"","sources":["../../src/hooks/shell-env-hygiene.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,MAAM,wBAAwB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACvE,mBAAmB;IACnB,0BAA0B;CAC3B,CAAC,CAAC;AAMH,MAAM,UAAU,aAAa,CAAC,KAA6B;IACzD,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/hooks/subagent-fanout-ceiling.d.ts

@@ -1,38 +1,39 @@
-export declare const TASK_TOOL_ID = "task";
+export declare const SUBAGENT_TOOL_ID = "subagent";
 export declare const DEFAULT_SUBAGENT_FANOUT_LIMIT = 8;
 export declare const DEFAULT_FANOUT_WAIT_TIMEOUT_MS: number;
-export declare const DEFAULT_PERMIT_TTL_MS: number;
+export declare const DEFAULT_ACTIVE_CHILD_TTL_MS: number;
+export declare const DEFAULT_PENDING_SLOT_TTL_MS: number;
 export declare const FANOUT_LIMIT_ENV = "XEMA_SUBAGENT_FANOUT_LIMIT";
 export declare function resolveSubagentFanoutLimit(env?: Readonly<Record<string, string | undefined>>): number;
 export interface FanoutCeilingStats {
     readonly limit: number;
-    readonly inFlight: number;
+    readonly pending: number;
+    readonly active: number;
     readonly waiting: number;
     readonly waitedCount: number;
     readonly timedOutCount: number;
-    readonly sweptCount: number;
-    readonly ttlReclaimedCount: number;
+    readonly pendingTtlReclaimedCount: number;
+    readonly activeTtlReclaimedCount: number;
     readonly armedTimers: number;
 }
+export interface SubagentCallInput {
+    readonly tool: string;
+    readonly sessionID: string;
+    readonly id: string;
+}
 export interface SubagentFanoutCeiling {
-    readonly before: (input: {
-        tool: string;
-        sessionID: string;
-        callID: string;
-    }) => Promise<void>;
-    readonly after: (input: {
-        tool: string;
-        sessionID: string;
-        callID: string;
-    }) => void;
-    readonly onSessionIdle: (sessionId: string) => void;
+    readonly beforeToolCall: (input: SubagentCallInput) => Promise<void>;
+    readonly afterToolCall: (input: SubagentCallInput) => void;
+    readonly onSessionCreated: (sessionId: string, parentId: string | undefined) => void;
+    readonly onSessionTerminal: (sessionId: string) => void;
     readonly dispose: () => void;
     readonly stats: () => FanoutCeilingStats;
 }
 export interface FanoutCeilingOptions {
     readonly limit: number;
     readonly waitTimeoutMs?: number;
-    readonly permitTtlMs?: number;
+    readonly pendingSlotTtlMs?: number;
+    readonly activeChildTtlMs?: number;
     readonly now?: () => number;
 }
 export declare function createSubagentFanoutCeiling(options: FanoutCeilingOptions): SubagentFanoutCeiling;

package/dist/hooks/subagent-fanout-ceiling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subagent-fanout-ceiling.d.ts","sourceRoot":"","sources":["../../src/hooks/subagent-fanout-ceiling.ts"],"names":[],"mappings":"AA0FA,eAAO,MAAM,YAAY,SAAS,CAAC;AA6CnC,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAW/C,eAAO,MAAM,8BAA8B,QAAiB,CAAC;AAU7D,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAGpD,eAAO,MAAM,gBAAgB,+BAA+B,CAAC;AAyB7D,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CA8BR;AAoBD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAiBnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpB,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,IAAI,CAAC;IAEX,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAgBpD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAOD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,GAC5B,qBAAqB,CAgPvB"}
+{"version":3,"file":"subagent-fanout-ceiling.d.ts","sourceRoot":"","sources":["../../src/hooks/subagent-fanout-ceiling.ts"],"names":[],"mappings":"AA+DA,eAAO,MAAM,gBAAgB,aAAa,CAAC;AA6C3C,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAW/C,eAAO,MAAM,8BAA8B,QAAiB,CAAC;AAU7D,eAAO,MAAM,2BAA2B,QAAiB,CAAC;AAU1D,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AAGzD,eAAO,MAAM,gBAAgB,+BAA+B,CAAC;AAyB7D,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CA8BR;AA2BD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAOzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAE3D,QAAQ,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;IAErF,QAAQ,CAAC,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAExD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAMD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,GAC5B,qBAAqB,CAyMvB"}