@xenosystem/agent-interface-host 0.1.3

package/dist/subagents/subagentRunPort.d.ts

@@ -0,0 +1,43 @@
+import type { AgentSubagentRunSummary } from '@xenosystem/agent-interface-contract';
+import type { CancelSubagentRunRequest, CreateSubagentRunRequest, ListSubagentRunsRequest, SubagentRun } from './subagentTypes.js';
+/**
+ * What the host may do with subagent runs — ADE §5.2.
+ *
+ * 🔴 A PORT, and it deliberately spans TWO objects. `createRun` and `listRuns` belong to
+ * `SubagentRunService`; `cancelRun` belongs to `SubagentScheduler`, because cancelling a run whose
+ * adapter has already launched it has to reach that adapter. Handing the host either object alone
+ * would push that distinction onto every caller, and handing it both would put the whole
+ * lifecycle — `claimNextRun`, `markRunning`, `heartbeatRun`, `recoverExpiredRuns` — within reach
+ * of protocol handlers that have no business driving it.
+ *
+ * ⚠️ The omissions are the design. A surface must not be able to mark a run running, heartbeat it,
+ * or settle it: those are the scheduler's, driven by an execution adapter that actually knows
+ * what happened. A protocol that exposed them would let a client report work it never did.
+ */
+export interface SubagentRunPort {
+    createRun(request: CreateSubagentRunRequest): {
+        success: boolean;
+        run?: SubagentRun;
+        error?: string;
+    };
+    listRuns(request: ListSubagentRunsRequest): {
+        success: boolean;
+        runs: SubagentRun[];
+        error?: string;
+    };
+    cancelRun(request: CancelSubagentRunRequest): {
+        success: boolean;
+        run?: SubagentRun;
+        error?: string;
+    };
+}
+/**
+ * Project a run onto the wire shape.
+ *
+ * Deliberately narrow: a `SubagentRun` carries capability matches, tool policy, budgets, queue
+ * metadata and delegation records, none of which a surface needs to render a list and all of
+ * which would become protocol the moment they crossed. Widening this later is additive; narrowing
+ * it after clients depend on it is not.
+ */
+export declare function summariseSubagentRun(run: SubagentRun): AgentSubagentRunSummary;
+//# sourceMappingURL=subagentRunPort.d.ts.map

package/dist/subagents/subagentRunPort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagentRunPort.d.ts","sourceRoot":"","sources":["../../src/subagents/subagentRunPort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAA;AACnF,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,WAAW,EACZ,MAAM,oBAAoB,CAAA;AAE3B;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,OAAO,EAAE,wBAAwB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrG,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrG,SAAS,CAAC,OAAO,EAAE,wBAAwB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtG;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,uBAAuB,CAc9E"}

package/dist/subagents/subagentRunPort.js

@@ -0,0 +1,24 @@
+/**
+ * Project a run onto the wire shape.
+ *
+ * Deliberately narrow: a `SubagentRun` carries capability matches, tool policy, budgets, queue
+ * metadata and delegation records, none of which a surface needs to render a list and all of
+ * which would become protocol the moment they crossed. Widening this later is additive; narrowing
+ * it after clients depend on it is not.
+ */
+export function summariseSubagentRun(run) {
+    return {
+        id: run.id,
+        status: run.status,
+        parentConversationId: run.parentConversationId,
+        childConversationId: run.childConversationId,
+        childAgentId: run.childAgentId,
+        objective: run.objective,
+        createdAt: run.createdAt,
+        updatedAt: run.updatedAt,
+        ...(run.startedAt === undefined ? {} : { startedAt: run.startedAt }),
+        ...(run.endedAt === undefined ? {} : { endedAt: run.endedAt }),
+        ...(run.error === undefined ? {} : { error: run.error }),
+    };
+}
+//# sourceMappingURL=subagentRunPort.js.map

package/dist/subagents/subagentRunPort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagentRunPort.js","sourceRoot":"","sources":["../../src/subagents/subagentRunPort.ts"],"names":[],"mappings":"AA4BA;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACnD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;QAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;KACzD,CAAA;AACH,CAAC"}

package/dist/subagents/subagentTypes.d.ts

@@ -0,0 +1,330 @@
+import type { AgentTurnWorkspace } from '@xenosystem/agent-interface-contract';
+export type SubagentRunStatus = 'queued' | 'launch-requested' | 'running' | 'waiting-for-permission' | 'waiting-for-user' | 'completed' | 'failed' | 'cancelled';
+export type SubagentAvailability = 'idle' | 'busy' | 'offline' | 'disabled' | 'rate-limited';
+export interface SubagentCapabilityMatch {
+    score: number;
+    reasons: string[];
+    missingCapabilities: string[];
+}
+export interface SubagentToolPolicy {
+    allowedTools: string[];
+    allowedDirectories: string[];
+    allowedApps: string[];
+    permissionMode: 'inherit-parent' | 'ask-parent' | 'ask-user' | 'deny';
+}
+export interface SubagentBudgetPolicy {
+    maxTokens?: number | undefined;
+    maxCredits?: number | undefined;
+    estimatedTokens?: number | undefined;
+    estimatedCredits?: number | undefined;
+    spentTokens?: number | undefined;
+    spentCredits?: number | undefined;
+}
+export type SubagentExpectedArtifactType = 'answer' | 'file' | 'diff' | 'diagnostic' | 'report';
+export interface SubagentDelegationPolicy {
+    maxTokens?: number | undefined;
+    maxCredits?: number | undefined;
+    maxRuntimeMs?: number | undefined;
+    maxConcurrentChildRuns?: number | undefined;
+    maxChildDepth?: number | undefined;
+    allowFurtherDelegation: boolean;
+    cancellationPropagation: boolean;
+}
+export interface SubagentRuntimeSelectionMetadata {
+    providerKind: 'sdk-native' | 'cli-app-server' | 'cli-remote' | 'acp-provider';
+    providerId: string;
+    acpAgentConfigId?: string | undefined;
+    cliAppServerEndpoint?: string | undefined;
+    cliAppServerTokenEnvKey?: string | undefined;
+    remoteBackendId?: string | undefined;
+}
+export interface SubagentDelegationMetadata {
+    routerVersion: 1;
+    routedAt: number;
+    parentConversationId: string;
+    parentRequestId?: string | undefined;
+    parentAgentId: string;
+    targetAgentId: string;
+    workspaceId: string;
+    teamId: string;
+    contextAttachmentIds: string[];
+    expectedArtifacts: SubagentExpectedArtifactType[];
+    targetRuntimeSelection?: SubagentRuntimeSelectionMetadata | undefined;
+    policy: SubagentDelegationPolicy;
+    depth: number;
+}
+export interface SubagentQueueMetadata {
+    queuedAt: number;
+    priority: number;
+    slotKey: string;
+    slotOrdinal: number;
+    maxConcurrentRuns: number;
+}
+export interface SubagentCancellationPropagation {
+    requestedAt: number;
+    requestedBy?: string | undefined;
+    requestedFrom?: 'parent' | 'child' | 'scheduler' | 'user' | 'unknown' | undefined;
+    reason?: string | undefined;
+    parentConversationId: string;
+    parentRequestId?: string | undefined;
+    childConversationId: string;
+    childRequestId?: string | undefined;
+    parentAgentId: string;
+    childAgentId: string;
+    propagateToChild: boolean;
+    propagatedAt?: number | undefined;
+    propagationStatus: 'pending' | 'propagated' | 'not-applicable';
+}
+export interface SubagentArtifact {
+    id: string;
+    type: 'file' | 'diff' | 'terminal' | 'browser' | 'note' | 'unknown';
+    title: string;
+    path?: string | undefined;
+    conversationId?: string | undefined;
+    messageId?: string | undefined;
+    handoff?: SubagentArtifactHandoffMetadata | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    createdAt: number;
+}
+export interface SubagentArtifactHandoffMetadata {
+    subagentRunId: string;
+    parentConversationId: string;
+    childConversationId: string;
+    parentAgentId: string;
+    childAgentId: string;
+    parentRequestId?: string | undefined;
+    childRequestId?: string | undefined;
+    handedOffAt: number;
+    provenance?: {
+        createdByAgentId?: string | undefined;
+        createdByConversationId?: string | undefined;
+        createdByRequestId?: string | undefined;
+        sourcePath?: string | undefined;
+        sourceMessageId?: string | undefined;
+    };
+}
+export interface SubagentRunRecoveryEvent {
+    at: number;
+    action: 'requeued' | 'failed' | 'cancelled';
+    reason: 'lease-expired' | 'heartbeat-stale' | 'timeout' | 'manual-cancel' | 'scheduler-cancel';
+    workerId?: string | undefined;
+    attempt?: number | undefined;
+    detail?: string | undefined;
+}
+export type SubagentExecutionAttemptStatus = 'launch-requested' | 'running' | 'completed' | 'failed' | 'cancelled' | 'expired';
+export type SubagentExecutionAdapterAvailability = 'available' | 'degraded' | 'unavailable';
+export interface SubagentExecutionAttempt {
+    attempt: number;
+    workerId: string;
+    adapterId?: string | undefined;
+    adapterVersion?: string | undefined;
+    adapterCapabilities?: string[] | undefined;
+    status: SubagentExecutionAttemptStatus;
+    launchRequestedAt: number;
+    launchRequestExpiresAt?: number | undefined;
+    runningAt?: number | undefined;
+    endedAt?: number | undefined;
+    childRequestId?: string | undefined;
+    error?: string | undefined;
+    metadata?: Record<string, unknown> | undefined;
+}
+export interface SubagentRun {
+    id: string;
+    parentConversationId: string;
+    parentRequestId: string;
+    parentAgentId: string;
+    childConversationId: string;
+    childRequestId?: string | undefined;
+    childAgentId: string;
+    workspaceId: string;
+    teamId: string;
+    createdAt: number;
+    updatedAt: number;
+    startedAt?: number | undefined;
+    endedAt?: number | undefined;
+    status: SubagentRunStatus;
+    objective: string;
+    role?: string | undefined;
+    /** Already bounded by the parent at create time — the adapter passes it through verbatim. */
+    workspace?: AgentTurnWorkspace | undefined;
+    capabilityMatch: SubagentCapabilityMatch;
+    toolPolicy: SubagentToolPolicy;
+    parentAgentName?: string | undefined;
+    childAgentName?: string | undefined;
+    workspaceName?: string | undefined;
+    teamName?: string | undefined;
+    summary?: string | undefined;
+    error?: string | undefined;
+    artifacts: SubagentArtifact[];
+    budget?: SubagentBudgetPolicy | undefined;
+    queue?: SubagentQueueMetadata | undefined;
+    cancellation?: SubagentCancellationPropagation | undefined;
+    tokenUsage?: {
+        input: number;
+        output: number;
+        total: number;
+    } | undefined;
+    delegation?: SubagentDelegationMetadata | undefined;
+    leaseOwner?: string | undefined;
+    leaseExpiresAt?: number | undefined;
+    heartbeatAt?: number | undefined;
+    attempt?: number | undefined;
+    cancellationReason?: string | undefined;
+    cancelledAt?: number | undefined;
+    timedOutAt?: number | undefined;
+    terminalReason?: 'completed' | 'failed' | 'cancelled' | 'timeout' | 'lease-expired' | 'heartbeat-stale' | undefined;
+    recoveryHistory?: SubagentRunRecoveryEvent[] | undefined;
+    launchOwner?: string | undefined;
+    launchRequestedAt?: number | undefined;
+    launchRequestExpiresAt?: number | undefined;
+    executionAdapterId?: string | undefined;
+    executionMetadata?: Record<string, unknown> | undefined;
+    executionAttempts?: SubagentExecutionAttempt[] | undefined;
+}
+export interface CreateSubagentRunRequest {
+    parentConversationId: string;
+    parentRequestId?: string | undefined;
+    parentAgentId: string;
+    childConversationId: string;
+    childAgentId: string;
+    workspaceId: string;
+    teamId: string;
+    objective: string;
+    role?: string | undefined;
+    /** Already bounded by the parent by the caller (`boundSubagentWorkspace`); stored verbatim. */
+    workspace?: AgentTurnWorkspace | undefined;
+    capabilityMatch?: Partial<SubagentCapabilityMatch> | undefined;
+    toolPolicy?: Partial<SubagentToolPolicy> | undefined;
+    parentAgentName?: string | undefined;
+    childAgentName?: string | undefined;
+    workspaceName?: string | undefined;
+    teamName?: string | undefined;
+    requiredCapabilities?: string[] | undefined;
+    budget?: SubagentBudgetPolicy | undefined;
+    queue?: Partial<Pick<SubagentQueueMetadata, 'priority' | 'slotKey' | 'maxConcurrentRuns'>> | undefined;
+    delegation?: Partial<SubagentDelegationMetadata> | undefined;
+}
+export interface UpdateSubagentRunRequest {
+    id: string;
+    workerId?: string | undefined;
+    adapterId?: string | undefined;
+    parentRequestId?: string | undefined;
+    childConversationId?: string | undefined;
+    childRequestId?: string | undefined;
+    status?: SubagentRunStatus | undefined;
+    startedAt?: number | undefined;
+    endedAt?: number | undefined;
+    summary?: string | undefined;
+    error?: string | undefined;
+    artifacts?: SubagentArtifact[] | undefined;
+    tokenUsage?: {
+        input: number;
+        output: number;
+        total: number;
+    } | undefined;
+}
+export interface ListSubagentRunsRequest {
+    parentConversationId?: string | undefined;
+    parentAgentId?: string | undefined;
+    childConversationId?: string | undefined;
+    childAgentId?: string | undefined;
+    workspaceId?: string | undefined;
+    teamId?: string | undefined;
+    status?: SubagentRunStatus | undefined;
+    activeOnly?: boolean | undefined;
+    limit?: number | undefined;
+}
+export interface ClaimSubagentRunRequest {
+    id?: string | undefined;
+    workerId: string;
+    workspaceId?: string | undefined;
+    teamId?: string | undefined;
+    childAgentId?: string | undefined;
+    slotKey?: string | undefined;
+    maxConcurrentRuns?: number | undefined;
+    leaseMs?: number | undefined;
+    adapterId?: string | undefined;
+    adapterVersion?: string | undefined;
+    adapterCapabilities?: string[] | undefined;
+    executionMetadata?: Record<string, unknown> | undefined;
+    now?: number | undefined;
+}
+export interface HeartbeatSubagentRunRequest {
+    id: string;
+    workerId: string;
+    adapterId?: string | undefined;
+    childRequestId?: string | undefined;
+    leaseMs?: number | undefined;
+    now?: number | undefined;
+}
+export interface CancelSubagentRunRequest {
+    id: string;
+    reason?: string | undefined;
+    requestedBy?: string | undefined;
+    requestedFrom?: 'parent' | 'child' | 'scheduler' | 'user' | 'unknown' | undefined;
+    propagateToChild?: boolean | undefined;
+    propagatedAt?: number | undefined;
+}
+export interface RecoverExpiredSubagentRunsRequest {
+    now?: number | undefined;
+    maxAttempts?: number | undefined;
+    runTimeoutMs?: number | undefined;
+    staleHeartbeatMs?: number | undefined;
+}
+export interface HydrateSubagentTraceRequest {
+    id: string;
+    afterSequence?: number | undefined;
+    limit?: number | undefined;
+}
+export interface SubagentSchedulerRecoverySnapshot {
+    now: number;
+    queuedCount: number;
+    launchRequestedCount: number;
+    runningCount: number;
+    waitingCount: number;
+    terminalCount: number;
+    activeRunIds: string[];
+    pendingRunIds: string[];
+    launchableRunIds: string[];
+    launchRequestedRunIds: string[];
+    runningRunIds: string[];
+    activeHeartbeats: Array<{
+        runId: string;
+        workerId?: string | undefined;
+        heartbeatAt?: number | undefined;
+        leaseExpiresAt?: number | undefined;
+    }>;
+    recoverableRunIds: string[];
+    timedOutRunIds: string[];
+    staleRunIds: string[];
+    oldestQueuedAt?: number | undefined;
+    oldestLaunchRequestedAt?: number | undefined;
+    oldestRunningAt?: number | undefined;
+}
+export interface SubagentAgentStatus {
+    agentId: string;
+    availability: SubagentAvailability;
+    activeRunCount: number;
+    activeRunIds: string[];
+    activeRuns: SubagentRun[];
+    lastRunAt?: number | undefined;
+}
+export interface CapabilitySource {
+    name?: string | undefined;
+    model?: string | undefined;
+    templateName?: string | undefined;
+    systemPrompt?: string | undefined;
+    capabilities?: Record<string, unknown> | undefined;
+    allowedDirectories?: string[] | undefined;
+    allowedApps?: string[] | undefined;
+    tools?: string[] | undefined;
+}
+export interface CapabilityMatchRequest {
+    target?: CapabilitySource | undefined;
+    objective?: string | undefined;
+    requiredCapabilities?: string[] | undefined;
+    requiredDirectories?: string[] | undefined;
+    requiredApps?: string[] | undefined;
+    busy?: boolean | undefined;
+}
+//# sourceMappingURL=subagentTypes.d.ts.map

package/dist/subagents/subagentTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagentTypes.d.ts","sourceRoot":"","sources":["../../src/subagents/subagentTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,kBAAkB,GAClB,SAAS,GACT,wBAAwB,GACxB,kBAAkB,GAClB,WAAW,GACX,QAAQ,GACR,WAAW,CAAA;AAEf,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,CAAA;AAE5F,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,cAAc,EAAE,gBAAgB,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAA;CACtE;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAClC;AAED,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,QAAQ,CAAA;AAE/F,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3C,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,sBAAsB,EAAE,OAAO,CAAA;IAC/B,uBAAuB,EAAE,OAAO,CAAA;CACjC;AAED,MAAM,WAAW,gCAAgC;IAC/C,YAAY,EAAE,YAAY,GAAG,gBAAgB,GAAG,YAAY,GAAG,cAAc,CAAA;IAC7E,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5C,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,iBAAiB,EAAE,4BAA4B,EAAE,CAAA;IACjD,sBAAsB,CAAC,EAAE,gCAAgC,GAAG,SAAS,CAAA;IACrE,MAAM,EAAE,wBAAwB,CAAA;IAChC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,aAAa,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACjF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,mBAAmB,EAAE,MAAM,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,iBAAiB,EAAE,SAAS,GAAG,YAAY,GAAG,gBAAgB,CAAA;CAC/D;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACnE,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAA;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IAC9C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAA;IACrB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE;QACX,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACrC,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC5C,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACrC,CAAA;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAA;IAC3C,MAAM,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS,GAAG,eAAe,GAAG,kBAAkB,CAAA;IAC9F,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,MAAM,8BAA8B,GACtC,kBAAkB,GAClB,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,GACX,SAAS,CAAA;AAEb,MAAM,MAAM,oCAAoC,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAA;AAE3F,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC1C,MAAM,EAAE,8BAA8B,CAAA;IACtC,iBAAiB,EAAE,MAAM,CAAA;IACzB,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;CAC/C;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,oBAAoB,EAAE,MAAM,CAAA;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,iBAAiB,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC1C,eAAe,EAAE,uBAAuB,CAAA;IACxC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,SAAS,EAAE,gBAAgB,EAAE,CAAA;IAC7B,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACzC,KAAK,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAA;IACzC,YAAY,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAA;IAC1D,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,KAAK,EAAE,MAAM,CAAA;KACd,GAAG,SAAS,CAAA;IACb,UAAU,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAA;IACnD,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,SAAS,CAAA;IACnH,eAAe,CAAC,EAAE,wBAAwB,EAAE,GAAG,SAAS,CAAA;IACxD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3C,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IACvD,iBAAiB,CAAC,EAAE,wBAAwB,EAAE,GAAG,SAAS,CAAA;CAC3D;AAED,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,+FAA+F;IAC/F,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC1C,eAAe,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAA;IAC9D,UAAU,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAA;IACpD,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACzC,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,UAAU,GAAG,SAAS,GAAG,mBAAmB,CAAC,CAAC,GAAG,SAAS,CAAA;IACtG,UAAU,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAA;CAC7D;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACtC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,SAAS,CAAC,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAA;IAC1C,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,KAAK,EAAE,MAAM,CAAA;KACd,GAAG,SAAS,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,MAAM,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACtC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IACvD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,aAAa,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACjF,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAClC;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAA;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,KAAK,CAAC;QACtB,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACpC,CAAC,CAAA;IACF,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5C,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,oBAAoB,CAAA;IAClC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,WAAW,EAAE,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IAClD,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACzC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAClC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC3C,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC3B"}

package/dist/subagents/subagentTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=subagentTypes.js.map

package/dist/subagents/subagentTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagentTypes.js","sourceRoot":"","sources":["../../src/subagents/subagentTypes.ts"],"names":[],"mappings":""}

package/dist/subagents/subagentWorkspaceAuthority.d.ts

@@ -0,0 +1,29 @@
+import type { AgentTurnWorkspace } from '@xenosystem/agent-interface-contract';
+export type SubagentWorkspaceDecision = {
+    granted: true;
+    workspace?: AgentTurnWorkspace;
+} | {
+    granted: false;
+    safeError: string;
+};
+/**
+ * Is `child` the same directory as `parent`, or inside it?
+ *
+ * ⚠️ NOT a string prefix test. `startsWith` says `/repo/secrets` is inside `/repo/sec`, which is
+ * how path checks in this ecosystem have gone wrong before. Comparing SEGMENTS cannot make that
+ * mistake, because `secrets` and `sec` are different segments.
+ */
+export declare function isWithinDirectory(parent: string, child: string): boolean;
+/**
+ * Bound a requested subagent workspace by the parent turn's workspace.
+ *
+ * `parent` absent means the host does not know what the spawning turn was running with — which
+ * happens when a run is created outside a turn, or by a surface that declared no workspace. The
+ * answer then is NO workspace, not the requested one: an unknown bound cannot authorise anything.
+ * That preserves exactly today's behaviour for every existing caller.
+ */
+export declare function boundSubagentWorkspace(input: {
+    requested?: AgentTurnWorkspace | undefined;
+    parent?: AgentTurnWorkspace | undefined;
+}): SubagentWorkspaceDecision;
+//# sourceMappingURL=subagentWorkspaceAuthority.d.ts.map

package/dist/subagents/subagentWorkspaceAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagentWorkspaceAuthority.d.ts","sourceRoot":"","sources":["../../src/subagents/subagentWorkspaceAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAkC9E,MAAM,MAAM,yBAAyB,GACjC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,kBAAkB,CAAA;CAAE,GACjD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAoCzC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC1C,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;CACxC,GAAG,yBAAyB,CAuF5B"}

package/dist/subagents/subagentWorkspaceAuthority.js

@@ -0,0 +1,173 @@
+/**
+ * What authority a subagent turn runs with — bounded by its PARENT, never derived from the
+ * request alone.
+ *
+ * 🔴 WHY THIS EXISTS. `HostTurnSubagentExecutionAdapter` started every child turn with no
+ * `workspace` at all. That is not a security hole — all three lanes fail safe on an absent
+ * workspace (ACP resolves `read-only`, Cloud resolves `default`, SDK-native gets an empty
+ * allowed-directory list) — but it means a subagent could only ever do read-only work with no
+ * directory access. So the host could schedule, route and observe a delegated run and could not
+ * let it edit anything, which is most of what delegation is for.
+ *
+ * The fix is not "pass the requested workspace through". A child that can ask for its own
+ * authority can ask for MORE than the parent that spawned it, and a fan-out is precisely where
+ * that matters: the parent is the thing an operator granted access to.
+ *
+ * ⚠️ NO INVENTED TOTAL ORDER OVER PROFILES. The obvious design ranks every profile on an
+ * autonomy ladder and permits anything lower. Writing that ladder requires deciding whether
+ * `standard` outranks `edit-with-approval`, and whether `plan` is narrower than `read-only` —
+ * judgements this codebase has never made and that would silently become policy. So the rule is
+ * narrower and defensible:
+ *
+ *   - INHERIT the parent's profile (the default, and the common case), or
+ *   - narrow to `read-only` or `plan`, which are unambiguously narrower than everything, or
+ *   - be REFUSED.
+ *
+ * Anything unrecognised is refused rather than passed, because "I do not know how these compare"
+ * must not resolve to "allow".
+ */
+/** Profiles a child may narrow to regardless of what the parent holds. */
+const UNAMBIGUOUSLY_NARROWER = new Set(['read-only', 'plan']);
+/**
+ * Split an absolute path into comparable segments, or return undefined if it is not absolute.
+ *
+ * 🔴 NO `node:path`. This module is reachable from the host's BROWSER-SAFE barrel, and
+ * `browserBarrelPurity.test.ts` refuses a `node:` import on that path.
+ *
+ * ⚠️ RELATIVE PATHS ARE REFUSED, NOT RESOLVED. `path.resolve()` would resolve one against
+ * `process.cwd()` — the HOST's working directory, which has nothing to do with the surface that
+ * sent the request. Resolving it would invent an answer and then authorise against the invention.
+ *
+ * ⚠️ Case is deliberately NOT folded. Two agents on paths differing only by case on a
+ * case-insensitive filesystem is a real hazard, but folding would refuse a legitimately distinct
+ * directory on Linux, and refusing legitimate work is the worse error here.
+ */
+function absoluteSegments(value) {
+    const unified = value.replace(/\\/g, '/');
+    // POSIX root, or a Windows drive (`C:/...`) or UNC share (`//server/share`).
+    const isAbsolutePath = unified.startsWith('/') || /^[A-Za-z]:\//.test(unified);
+    if (!isAbsolutePath)
+        return undefined;
+    const segments = [];
+    for (const raw of unified.split('/')) {
+        if (raw === '' || raw === '.')
+            continue;
+        if (raw === '..') {
+            // A `..` that would escape the root is refused rather than clamped: clamping turns
+            // `/repo/../../etc` into `/etc` silently, which is the traversal it exists to stop.
+            if (segments.length === 0)
+                return undefined;
+            segments.pop();
+            continue;
+        }
+        segments.push(raw);
+    }
+    return segments;
+}
+/**
+ * Is `child` the same directory as `parent`, or inside it?
+ *
+ * ⚠️ NOT a string prefix test. `startsWith` says `/repo/secrets` is inside `/repo/sec`, which is
+ * how path checks in this ecosystem have gone wrong before. Comparing SEGMENTS cannot make that
+ * mistake, because `secrets` and `sec` are different segments.
+ */
+export function isWithinDirectory(parent, child) {
+    const from = absoluteSegments(parent);
+    const to = absoluteSegments(child);
+    if (!from || !to)
+        return false;
+    if (to.length < from.length)
+        return false;
+    return from.every((segment, index) => to[index] === segment);
+}
+/**
+ * Bound a requested subagent workspace by the parent turn's workspace.
+ *
+ * `parent` absent means the host does not know what the spawning turn was running with — which
+ * happens when a run is created outside a turn, or by a surface that declared no workspace. The
+ * answer then is NO workspace, not the requested one: an unknown bound cannot authorise anything.
+ * That preserves exactly today's behaviour for every existing caller.
+ */
+export function boundSubagentWorkspace(input) {
+    const { requested, parent } = input;
+    // Nothing asked for: inherit the parent's authority verbatim. A child of a writable parent is
+    // writable by default, which is what makes delegation useful; a child of a read-only parent
+    // stays read-only for the same reason.
+    if (!requested)
+        return parent ? { granted: true, workspace: { ...parent } } : { granted: true };
+    if (!parent) {
+        return {
+            granted: false,
+            safeError: 'This subagent run asked for workspace access, but the host does not know what the '
+                + 'spawning turn was permitted to do, so it cannot bound the request. Start the subagent '
+                + 'from a turn that declares its workspace, or create it without one.',
+        };
+    }
+    const parentDirs = directoriesOf(parent);
+    const requestedDirs = directoriesOf(requested);
+    const escaping = requestedDirs.filter((dir) => !parentDirs.some((allowed) => isWithinDirectory(allowed, dir)));
+    if (escaping.length > 0) {
+        return {
+            granted: false,
+            safeError: `This subagent run asked for ${escaping.length} director${escaping.length === 1 ? 'y' : 'ies'} `
+                + 'outside what the turn that spawned it is allowed to reach. A subagent cannot be granted '
+                + 'more access than its parent.',
+        };
+    }
+    if (requested.filesystem === 'workspace-write' && parent.filesystem !== 'workspace-write') {
+        return {
+            granted: false,
+            safeError: 'This subagent run asked to write to the workspace, but the turn that spawned it is '
+                + 'read-only. A subagent cannot be granted more access than its parent.',
+        };
+    }
+    const profile = requested.permissionProfile;
+    if (profile !== undefined
+        && profile !== parent.permissionProfile
+        && !UNAMBIGUOUSLY_NARROWER.has(profile)) {
+        return {
+            granted: false,
+            safeError: `This subagent run asked for the '${profile}' permission profile, which the host cannot `
+                + `prove is narrower than its parent's `
+                + `${parent.permissionProfile ? `'${parent.permissionProfile}'` : 'profile'}. Inherit the `
+                + "parent's profile, or narrow to 'read-only' or 'plan'.",
+        };
+    }
+    // Every field is bounded, so the granted workspace is the requested one with anything it left
+    // unstated filled in from the parent — never widened.
+    return {
+        granted: true,
+        workspace: {
+            ...(requestedDirs.length > 0
+                ? {
+                    ...((requested.primaryDirectory ?? parent.primaryDirectory) === undefined
+                        ? {}
+                        : { primaryDirectory: (requested.primaryDirectory ?? parent.primaryDirectory) }),
+                    ...(requested.additionalDirectories
+                        ? { additionalDirectories: [...requested.additionalDirectories] }
+                        : {}),
+                }
+                : {
+                    ...(parent.primaryDirectory === undefined
+                        ? {}
+                        : { primaryDirectory: parent.primaryDirectory }),
+                    ...(parent.additionalDirectories
+                        ? { additionalDirectories: [...parent.additionalDirectories] }
+                        : {}),
+                }),
+            ...(profile === undefined
+                ? (parent.permissionProfile === undefined ? {} : { permissionProfile: parent.permissionProfile })
+                : { permissionProfile: profile }),
+            ...(requested.filesystem === undefined
+                ? (parent.filesystem === undefined ? {} : { filesystem: parent.filesystem })
+                : { filesystem: requested.filesystem }),
+        },
+    };
+}
+function directoriesOf(workspace) {
+    return [
+        ...(workspace.primaryDirectory ? [workspace.primaryDirectory] : []),
+        ...(workspace.additionalDirectories || []),
+    ];
+}
+//# sourceMappingURL=subagentWorkspaceAuthority.js.map

package/dist/subagents/subagentWorkspaceAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagentWorkspaceAuthority.js","sourceRoot":"","sources":["../../src/subagents/subagentWorkspaceAuthority.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,0EAA0E;AAC1E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;AAM7D;;;;;;;;;;;;;GAaG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACzC,6EAA6E;IAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,CAAC,cAAc;QAAE,OAAO,SAAS,CAAA;IACrC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAQ;QACvC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,mFAAmF;YACnF,oFAAoF;YACpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC3C,QAAQ,CAAC,GAAG,EAAE,CAAA;YACd,SAAQ;QACV,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,KAAa;IAC7D,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAA;IAC9B,IAAI,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACnC,8FAA8F;IAC9F,4FAA4F;IAC5F,uCAAuC;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAE/F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EACP,oFAAoF;kBAClF,wFAAwF;kBACxF,oEAAoE;SACzE,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CACnC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CACxE,CAAA;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EACP,+BAA+B,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;kBAC9F,0FAA0F;kBAC1F,8BAA8B;SACnC,CAAA;IACH,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,KAAK,iBAAiB,IAAI,MAAM,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC1F,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EACP,qFAAqF;kBACnF,sEAAsE;SAC3E,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,iBAAiB,CAAA;IAC3C,IACE,OAAO,KAAK,SAAS;WAClB,OAAO,KAAK,MAAM,CAAC,iBAAiB;WACpC,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,EACvC,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EACP,oCAAoC,OAAO,8CAA8C;kBACvF,sCAAsC;kBACtC,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,SAAS,gBAAgB;kBACzF,uDAAuD;SAC5D,CAAA;IACH,CAAC;IAED,8FAA8F;IAC9F,sDAAsD;IACtD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE;YACT,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC1B,CAAC,CAAC;oBACE,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,SAAS;wBACvE,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,CAAW,EAAE,CAAC;oBAC5F,GAAG,CAAC,SAAS,CAAC,qBAAqB;wBACjC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC,qBAAqB,CAAC,EAAE;wBACjE,CAAC,CAAC,EAAE,CAAC;iBACR;gBACH,CAAC,CAAC;oBACE,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAClD,GAAG,CAAC,MAAM,CAAC,qBAAqB;wBAC9B,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE;wBAC9D,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;YACN,GAAG,CAAC,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACjG,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;YACnC,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS;gBACpC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC5E,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;SAC1C;KACF,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,SAA6B;IAClD,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,SAAS,CAAC,qBAAqB,IAAI,EAAE,CAAC;KAC3C,CAAA;AACH,CAAC"}