@xingular/harness 0.1.7 → 1.1.1

package/dist/sdk/accounts/store.js

@@ -0,0 +1,255 @@
+// Accounts. One profile (settings, registry, memory) and any number of Pi accounts, each with
+// its own isolated agent folder, stored credentials, sign-in state, limits, health, and audit
+// trail.
+//
+// Device-local layout under `<state dir>/accounts/`:
+//   accounts.json        accounts, the default, pools (no secrets)
+//   <id>/state.json      health, plan, limits, last error (no secrets)
+//   <id>/home/pi/        Pi's own agent folder for this account
+//   _shared/pi/          settings, skills, prompts linked into every account's agent folder
+//   audit.jsonl          append-only account actions (secrets scrubbed)
+//
+// Switching is always manual. A pool only chooses an account when a session starts; a running
+// or resumed session keeps the account it started with.
+import { mkdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { HarnessError, invalid, notFound } from "../core/errors.js";
+import { appendLine, newId, now, readJsonOr, safeId, writeJson } from "../core/fs.js";
+import { charCount, compareText, lines, takeChars } from "../core/text.js";
+/** The only provider the harness runs. Records of other providers are kept in the file and ignored. */
+export const PROVIDER = 'pi';
+export const emptyState = () => ({ health: 'unknown', signedIn: null, authMethod: null, plan: null, identity: null, limits: [], lastError: null, lastCheckedAt: null, cliVersion: null, capabilities: [], piProviders: [] });
+// ---- Files ------------------------------------------------------------------------------
+const registryPath = (dir) => join(dir, 'accounts.json');
+const statePath = (dir, accountId) => join(dir, safeId(accountId), 'state.json');
+export function loadRegistry(dir) {
+    const stored = readJsonOr(registryPath(dir), {}) ?? {};
+    return { accounts: stored.accounts ?? [], defaults: stored.defaults ?? {}, pools: stored.pools ?? [], migratedProviderKeys: stored.migratedProviderKeys ?? false };
+}
+export function saveRegistry(dir, registry) {
+    mkdirSync(dir, { recursive: true });
+    writeJson(registryPath(dir), registry);
+}
+export function loadState(dir, accountId) {
+    try {
+        return { ...emptyState(), ...(readJsonOr(statePath(dir, accountId), {}) ?? {}) };
+    }
+    catch {
+        return emptyState();
+    }
+}
+function saveState(dir, accountId, state) {
+    writeJson(statePath(dir, accountId), state);
+}
+/** Replaces anything that looks like a token so audit lines and stored errors never hold secrets. */
+export function scrub(text) {
+    const words = text.split(' ').map((word) => {
+        const bytes = Buffer.byteLength(word);
+        const tokenLike = bytes >= 24 && (word.match(/[A-Za-z0-9]/g)?.length ?? 0) * 10 >= bytes * 8;
+        return tokenLike || word.startsWith('sk-') || word.startsWith('sess-') ? '[redacted]' : word;
+    });
+    return takeChars(words.join(' '), 500);
+}
+export function audit(dir, accountId, action, detail) {
+    try {
+        mkdirSync(dir, { recursive: true });
+        appendLine(join(dir, 'audit.jsonl'), JSON.stringify({ at: now(), accountId, action, detail: scrub(detail) }));
+    }
+    catch {
+        // An audit line that cannot be written never fails the action it describes.
+    }
+}
+/** The newest audit entries first, optionally for one account. */
+export function readAudit(dir, accountId, limit = 100) {
+    let text = '';
+    try {
+        text = readFileSync(join(dir, 'audit.jsonl'), 'utf8');
+    }
+    catch {
+        text = '';
+    }
+    const entries = lines(text).flatMap((line) => {
+        try {
+            const entry = JSON.parse(line);
+            return entry && typeof entry.at === 'string' && typeof entry.action === 'string' && (!accountId || entry.accountId === accountId) ? [entry] : [];
+        }
+        catch {
+            return [];
+        }
+    });
+    return entries.reverse().slice(0, Math.min(limit, 1000));
+}
+// ---- Health -----------------------------------------------------------------------------
+function inFuture(timestamp) {
+    const time = timestamp ? Date.parse(timestamp) : Number.NaN;
+    return !Number.isNaN(time) && time > Date.now();
+}
+// How long a limit error that came without a reset time keeps the account limited. Providers
+// report no limit windows, so nothing else would ever lift it.
+const UNTIMED_LIMIT_ERROR_SECS = 3600;
+export const isLimitCategory = (category) => category === 'rate_limited' || category === 'quota';
+/**
+ * Whether a `rate_limited` or `quota` error still counts. With a reset time it counts until
+ * then; without one it counts for a short while after it was recorded.
+ */
+export function limitErrorActive(issue) {
+    if (issue.resetsAt)
+        return inFuture(issue.resetsAt);
+    const at = Date.parse(issue.at);
+    return !Number.isNaN(at) && Math.trunc((Date.now() - at) / 1000) < UNTIMED_LIMIT_ERROR_SECS;
+}
+export function deriveHealth(state) {
+    const limitedByWindow = state.limits.some((limit) => (limit.status === 'rejected' || (limit.usedPercent ?? 0) >= 100) && (!limit.resetsAt || inFuture(limit.resetsAt)));
+    const issue = state.lastError;
+    if (issue?.category === 'auth_expired')
+        return 'auth_expired';
+    if (issue && isLimitCategory(issue.category) && limitErrorActive(issue))
+        return 'limited';
+    if (state.signedIn === false)
+        return 'signed_out';
+    if (limitedByWindow)
+        return 'limited';
+    if (issue && !isLimitCategory(issue.category))
+        return 'error';
+    return state.signedIn === true ? 'ok' : 'unknown';
+}
+/** Read-modify-write on one account's state. Returns the previous health and the new state. */
+export function updateState(dir, accountId, change) {
+    const state = loadState(dir, accountId);
+    const previous = state.health;
+    change(state);
+    state.health = deriveHealth(state);
+    saveState(dir, accountId, state);
+    return { previous, state };
+}
+// ---- Lookup and pinning -----------------------------------------------------------------
+export function find(dir, accountId) {
+    const account = loadRegistry(dir).accounts.find((entry) => entry.id === accountId);
+    if (!account)
+        throw new HarnessError('account_required', "This session's account was removed.", 'Choose another account for it.');
+    return account;
+}
+const usable = (state) => state.health === 'ok' || state.health === 'unknown';
+/**
+ * Chooses the account for a new session: the explicit account, else the pool's first usable
+ * account, else the default, else the first account. It never skips to another one silently.
+ */
+export function resolve(dir, accountId, poolId) {
+    const registry = loadRegistry(dir);
+    if (accountId) {
+        const account = find(dir, accountId);
+        if (account.provider !== PROVIDER)
+            throw invalid('That account belongs to another provider.');
+        return account;
+    }
+    if (poolId) {
+        const pool = registry.pools.find((entry) => entry.id === poolId);
+        if (!pool)
+            throw notFound('Pool');
+        const members = pool.accountIds.flatMap((id) => registry.accounts.find((account) => account.id === id) ?? []);
+        const ready = members.find((account) => usable(loadState(dir, account.id)));
+        if (ready)
+            return ready;
+        const resets = members.flatMap((account) => {
+            const state = loadState(dir, account.id);
+            return [...state.limits.map((limit) => limit.resetsAt), state.lastError?.resetsAt].filter((reset) => Boolean(reset));
+        });
+        const earliest = resets.sort(compareText)[0];
+        throw new HarnessError('account_unavailable', `Every account in ${pool.label} is unavailable.`, earliest ? `The earliest reset is ${earliest}.` : 'Reauthenticate an account in Accounts.');
+    }
+    const account = registry.accounts.find((entry) => entry.id === registry.defaults[PROVIDER]) ?? registry.accounts.find((entry) => entry.provider === PROVIDER);
+    if (!account)
+        throw new HarnessError('account_required', 'Add a Pi account first.', 'Open Accounts (⌘4) to sign in.');
+    return account;
+}
+/** The default account, if any exists. */
+export function defaultAccount(dir) {
+    try {
+        return resolve(dir);
+    }
+    catch {
+        return null;
+    }
+}
+export function summaryAuthentication(dir) {
+    const states = loadRegistry(dir).accounts.filter((account) => account.provider === PROVIDER).map((account) => loadState(dir, account.id));
+    if (states.some((state) => state.signedIn === true))
+        return 'authenticated';
+    return states.some((state) => state.signedIn === false) ? 'unauthenticated' : 'unknown';
+}
+export function overview(dir) {
+    const registry = loadRegistry(dir);
+    return {
+        accounts: registry.accounts.filter((account) => account.provider === PROVIDER).map((account) => ({ ...account, isDefault: registry.defaults[account.provider] === account.id, state: loadState(dir, account.id) })),
+        pools: registry.pools.filter((pool) => pool.provider === PROVIDER),
+        defaults: registry.defaults
+    };
+}
+// ---- Changes ----------------------------------------------------------------------------
+export function cleanLabel(label) {
+    const cleaned = label.trim();
+    if (!cleaned || charCount(cleaned) > 60)
+        throw invalid('Give the account a name of 1–60 characters.');
+    return cleaned;
+}
+export function addAccount(dir, label, authKind) {
+    if (authKind !== 'subscription' && authKind !== 'apiKey')
+        throw invalid('Unknown sign-in type.');
+    const account = { id: newId(), provider: PROVIDER, label: cleanLabel(label), authKind, credentialStore: 'keyring', createdAt: now() };
+    const registry = loadRegistry(dir);
+    registry.defaults[PROVIDER] ??= account.id;
+    registry.accounts.push(account);
+    saveRegistry(dir, registry);
+    return account;
+}
+export function renameAccount(dir, accountId, label) {
+    const cleaned = cleanLabel(label);
+    const registry = loadRegistry(dir);
+    const account = registry.accounts.find((entry) => entry.id === accountId);
+    if (!account)
+        throw notFound('Account');
+    account.label = cleaned;
+    saveRegistry(dir, registry);
+}
+export function setDefault(dir, accountId) {
+    const account = find(dir, accountId);
+    const registry = loadRegistry(dir);
+    registry.defaults[account.provider] = account.id;
+    saveRegistry(dir, registry);
+    return account;
+}
+/** Drops the account from the registry, its pools, and the default. Its folder and secrets are the caller's to remove. */
+export function forgetAccount(dir, account) {
+    const registry = loadRegistry(dir);
+    registry.accounts = registry.accounts.filter((entry) => entry.id !== account.id);
+    if (registry.defaults[account.provider] === account.id) {
+        const next = registry.accounts.find((entry) => entry.provider === account.provider);
+        if (next)
+            registry.defaults[account.provider] = next.id;
+        else
+            delete registry.defaults[account.provider];
+    }
+    for (const pool of registry.pools)
+        pool.accountIds = pool.accountIds.filter((id) => id !== account.id);
+    saveRegistry(dir, registry);
+}
+export function savePool(dir, pool) {
+    const label = cleanLabel(pool.label);
+    const registry = loadRegistry(dir);
+    for (const id of pool.accountIds) {
+        const account = registry.accounts.find((entry) => entry.id === id);
+        if (!account)
+            throw notFound('Account');
+        if (account.provider !== PROVIDER)
+            throw invalid('A pool holds accounts of one provider.');
+    }
+    const next = { id: pool.id ? safeId(pool.id) : newId(), provider: PROVIDER, label, accountIds: [...pool.accountIds] };
+    registry.pools = [...registry.pools.filter((existing) => existing.id !== next.id), next];
+    saveRegistry(dir, registry);
+    return next;
+}
+export function removePool(dir, poolId) {
+    const registry = loadRegistry(dir);
+    registry.pools = registry.pools.filter((pool) => pool.id !== poolId);
+    saveRegistry(dir, registry);
+}

package/dist/sdk/agents/builtin.d.ts

@@ -0,0 +1,2 @@
+import type { ProfileDefinition } from "./profiles.js";
+export declare const BUILTIN_PROFILES: readonly ProfileDefinition[];

package/dist/sdk/agents/builtin.js

@@ -0,0 +1,34 @@
+const RECALL = ['history_search', 'history_read', 'trajectory_search', 'trajectory_read', 'wiki_search', 'wiki_read', 'wiki_list', 'skill_load'];
+const PROGRESS = ['checklist_write', 'session_name'];
+const WEB = ['web_search', 'web_fetch'];
+export const BUILTIN_PROFILES = [
+    {
+        name: 'worker',
+        description: 'Carries out a well-defined change: reads, edits and writes files and runs commands.',
+        color: 'green',
+        instructions: [
+            'You carry out one piece of work from your brief, end to end.',
+            '- Read the code you change first and follow the conventions you find.',
+            '- Keep a checklist with checklist_write when the brief has more than one step, and name your session with session_name.',
+            '- Make the change, then check it: run the relevant tests, type checks or commands.',
+            '- Stay inside the brief. If something outside it blocks you, stop and say so instead of widening the change.',
+            '- Finish with a short report: what you changed (files), how you checked it, and anything left open.'
+        ].join('\n'),
+        tools: ['read', 'grep', 'find', 'ls', 'edit', 'write', 'bash', ...PROGRESS, ...RECALL, ...WEB],
+        plugins: null, variant: null, model: null, effort: null
+    },
+    {
+        name: 'explorer',
+        description: 'Finds and explains code, files and history without changing anything.',
+        color: 'cyan',
+        instructions: [
+            'You answer a question about the code, files or history in your brief. You never change anything.',
+            '- Search broadly first, then read the parts that matter.',
+            '- Keep a checklist with checklist_write when the search has several parts, and name your session with session_name.',
+            '- Cite what you found as path:line.',
+            '- Return conclusions, not file dumps: what you found, where, and how sure you are.'
+        ].join('\n'),
+        tools: ['read', 'grep', 'find', 'ls', ...PROGRESS, ...RECALL, ...WEB],
+        plugins: null, variant: null, model: null, effort: null
+    }
+];

package/dist/sdk/agents/narrow.d.ts

@@ -0,0 +1,13 @@
+import type { CapabilitySet } from "../capabilities/types.js";
+import type { PluginDescriptor } from "../plugins/types.js";
+import type { AgentProfile } from "./profiles.js";
+export interface NarrowedCapabilities {
+    capabilities: CapabilitySet;
+    /** Tools the profile names that the parent does not have here. */
+    unavailable: string[];
+}
+/**
+ * The parent's set narrowed by the profile's tools and plugins and by the tools the spawn call
+ * asked for. A required plugin always stays; a tool whose plugin was dropped goes with it.
+ */
+export declare function narrowForProfile(parent: CapabilitySet, profile: Pick<AgentProfile, 'tools' | 'plugins'> | null, requested: readonly string[] | undefined, descriptors: readonly PluginDescriptor[]): NarrowedCapabilities;

package/dist/sdk/agents/narrow.js

@@ -0,0 +1,29 @@
+function pluginOf(id) {
+    return id.split('/')[0] ?? '';
+}
+/**
+ * The parent's set narrowed by the profile's tools and plugins and by the tools the spawn call
+ * asked for. A required plugin always stays; a tool whose plugin was dropped goes with it.
+ */
+export function narrowForProfile(parent, profile, requested, descriptors) {
+    let tools = parent.tools.filter((name) => !requested || requested.includes(name));
+    let contributions = parent.contributions;
+    const unavailable = profile?.tools?.filter((name) => !parent.tools.includes(name)) ?? [];
+    if (profile?.tools)
+        tools = tools.filter((name) => profile.tools.includes(name));
+    if (profile?.plugins) {
+        const allowed = new Set([...profile.plugins, ...descriptors.filter((descriptor) => descriptor.required).map((descriptor) => descriptor.id)]);
+        contributions = contributions.filter((id) => allowed.has(pluginOf(id)));
+        const owner = new Map();
+        for (const descriptor of descriptors)
+            for (const tool of descriptor.tools ?? [])
+                owner.set(tool.name, descriptor.id);
+        for (const id of parent.contributions) {
+            const [plugin, kind, name] = id.split('/');
+            if (kind === 'tool' && plugin && name)
+                owner.set(name, plugin);
+        }
+        tools = tools.filter((name) => !owner.has(name) || allowed.has(owner.get(name)));
+    }
+    return { capabilities: { ...parent, tools, contributions }, unavailable };
+}

package/dist/sdk/agents/profiles.d.ts

@@ -0,0 +1,80 @@
+import { type Effort } from "../core/effort.js";
+export declare const PROFILE_NAME: RegExp;
+export declare const PROFILE_COLORS: readonly ["blue", "green", "yellow", "red", "magenta", "cyan", "orange", "purple"];
+export type ProfileColor = (typeof PROFILE_COLORS)[number];
+export type ProfileSource = 'builtin' | 'global' | 'project' | 'variant';
+/** Where a person's own profile file lives. */
+export type ProfileScope = 'global' | 'project';
+/** Which variant a profile's subagent runs: a scope's head or version, none, or the parent's (null). */
+export type ProfileVariant = {
+    scope: string;
+    version: string | null;
+} | 'none' | null;
+export interface AgentProfile {
+    name: string;
+    description: string;
+    color: ProfileColor;
+    /** The role instructions: the file's body. */
+    instructions: string;
+    /** Tool allowlist; null keeps every tool the parent has. */
+    tools: string[] | null;
+    /** Plugin ids whose contributions the subagent keeps; null keeps all. Required plugins always stay. */
+    plugins: string[] | null;
+    variant: ProfileVariant;
+    model: string | null;
+    effort: Effort | null;
+    source: ProfileSource;
+    /** The file it was read from; null for built-ins. */
+    path: string | null;
+}
+export interface ProfileProblem {
+    name: string;
+    source: ProfileSource;
+    path: string;
+    error: string;
+}
+export interface ProfileListing {
+    profiles: AgentProfile[];
+    problems: ProfileProblem[];
+}
+/** The built-in profile definitions, before a source is attached. */
+export type ProfileDefinition = Omit<AgentProfile, 'source' | 'path'>;
+/** Nearest folder above `cwd` that holds `.git`, or `cwd` itself. */
+export declare function projectRoot(cwd: string): string;
+export declare function profileDirs(root: string, cwd?: string | null): {
+    global: string;
+    project: string | null;
+};
+export declare function parseVariant(value: unknown): ProfileVariant;
+export declare function formatVariant(variant: ProfileVariant): string | null;
+/** Reads one profile file. Throws an `invalid_request` error that names what is wrong. */
+export declare function parseProfile(text: string, name: string, source: ProfileSource, path: string | null): AgentProfile;
+/** The file text for a profile, as `createProfile` writes it. */
+export declare function profileText(profile: ProfileDefinition): string;
+/**
+ * Every profile a session in `cwd` can use. An unreadable file is reported in `problems`; it hides
+ * nothing, so a broken project file leaves the global or built-in profile of that name in force.
+ */
+export declare function listProfiles(root: string, cwd?: string | null, variantDir?: string | null): ProfileListing;
+export declare function resolveProfile(root: string, cwd: string | null | undefined, name: string, variantDir?: string | null): AgentProfile | null;
+/** Writes a new profile file from the template, or a copy of `from`. Refuses to overwrite one. */
+export declare function createProfile(root: string, cwd: string | null | undefined, input: {
+    name: string;
+    scope: ProfileScope;
+    from?: string | null;
+}): AgentProfile;
+/** Deletes a person's own profile file. Built-ins and variant subagents cannot be removed here. */
+export declare function removeProfile(root: string, cwd: string | null | undefined, input: {
+    name: string;
+    scope: ProfileScope;
+}): void;
+/** Where the profile list sits among the prompt sections: the slot a variant's subagents used. */
+export declare const PROFILE_SECTION_ORDER = 64;
+/** The prompt section that lists the profiles a run can start subagents from. */
+export declare function profileSection(root: string, cwd: string | null | undefined, variantDir?: string | null): {
+    id: string;
+    title: string;
+    body: string;
+    budget: number;
+    order: number;
+};

package/dist/sdk/agents/profiles.js

@@ -0,0 +1,221 @@
+// Agent profiles (PROP-0029): named bundles a subagent starts from, with its instructions, colour,
+// tools, plugins, variant, model and effort. They come from four places, later ones winning:
+// built-ins in code, `<data root>/agents/*.md`, `<project>/.xingular/agents/*.md`; a variant's own
+// c5 subagents fill in names nobody else took. Profiles only narrow what the parent has.
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { EFFORTS } from "../core/effort.js";
+import { invalid, notFound } from "../core/errors.js";
+import { parse, serialize } from "../core/frontmatter.js";
+import { atomicWrite } from "../core/fs.js";
+import { subagentOf } from "../variant/materialise.js";
+import { BUILTIN_PROFILES } from "./builtin.js";
+export const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]*$/;
+export const PROFILE_COLORS = ['blue', 'green', 'yellow', 'red', 'magenta', 'cyan', 'orange', 'purple'];
+/** Nearest folder above `cwd` that holds `.git`, or `cwd` itself. */
+export function projectRoot(cwd) {
+    let dir = cwd;
+    for (;;) {
+        if (existsSync(join(dir, '.git')))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return cwd;
+        dir = parent;
+    }
+}
+export function profileDirs(root, cwd) {
+    return { global: join(root, 'agents'), project: cwd ? join(projectRoot(cwd), '.xingular', 'agents') : null };
+}
+function stringList(value, field) {
+    if (value === undefined || value === null)
+        return null;
+    const list = typeof value === 'string' ? value.split(/[\s,]+/u) : value;
+    if (!Array.isArray(list) || list.some(item => typeof item !== 'string'))
+        throw invalid(`${field} must be a list of names.`);
+    return [...new Set(list.map(item => item.trim()).filter(Boolean))];
+}
+function optionalText(value, field) {
+    if (value === undefined || value === null || value === '')
+        return null;
+    if (typeof value !== 'string')
+        throw invalid(`${field} must be text.`);
+    return value.trim() || null;
+}
+export function parseVariant(value) {
+    const text = optionalText(value, 'variant');
+    if (!text)
+        return null;
+    if (text === 'none')
+        return 'none';
+    const [scope, version, ...rest] = text.split('@');
+    if (!scope || rest.length || (version !== undefined && !version))
+        throw invalid('variant must be <scope>, <scope>@<version> or none.');
+    return { scope, version: version ?? null };
+}
+export function formatVariant(variant) {
+    if (!variant)
+        return null;
+    if (variant === 'none')
+        return 'none';
+    return variant.version ? `${variant.scope}@${variant.version}` : variant.scope;
+}
+/** Reads one profile file. Throws an `invalid_request` error that names what is wrong. */
+export function parseProfile(text, name, source, path) {
+    if (!PROFILE_NAME.test(name))
+        throw invalid('A profile name uses lowercase letters, digits, - and _, and starts with a letter or digit.');
+    const parsed = parse(text);
+    if (!parsed)
+        throw invalid('The profile needs a frontmatter block between --- lines.');
+    const front = parsed.front;
+    if (front.name !== undefined && front.name !== name)
+        throw invalid(`The file is named ${name} but its frontmatter says ${String(front.name)}.`);
+    const description = optionalText(front.description, 'description');
+    if (!description)
+        throw invalid('The profile needs a description.');
+    const color = optionalText(front.color, 'color') ?? 'blue';
+    if (!PROFILE_COLORS.includes(color))
+        throw invalid(`color must be one of ${PROFILE_COLORS.join(', ')}.`);
+    const effort = optionalText(front.effort, 'effort');
+    if (effort && !EFFORTS.includes(effort))
+        throw invalid(`effort must be one of ${EFFORTS.join(', ')}.`);
+    return {
+        name, description, color: color, instructions: parsed.body.trim(),
+        tools: stringList(front.tools, 'tools'), plugins: stringList(front.plugins, 'plugins'),
+        variant: parseVariant(front.variant), model: optionalText(front.model, 'model'), effort: effort,
+        source, path
+    };
+}
+/** The file text for a profile, as `createProfile` writes it. */
+export function profileText(profile) {
+    const front = { name: profile.name, description: profile.description, color: profile.color };
+    if (profile.tools)
+        front.tools = profile.tools;
+    if (profile.plugins)
+        front.plugins = profile.plugins;
+    const variant = formatVariant(profile.variant);
+    if (variant)
+        front.variant = variant;
+    if (profile.model)
+        front.model = profile.model;
+    if (profile.effort)
+        front.effort = profile.effort;
+    return serialize(front, profile.instructions);
+}
+function readFolder(dir, source, into, problems) {
+    if (!dir || !existsSync(dir))
+        return;
+    for (const file of readdirSync(dir).filter(entry => entry.endsWith('.md')).sort()) {
+        const path = join(dir, file);
+        const name = file.slice(0, -3);
+        try {
+            if (!statSync(path).isFile())
+                continue;
+            into.set(name, parseProfile(readFileSync(path, 'utf8'), name, source, path));
+        }
+        catch (error) {
+            problems.push({ name, source, path, error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+}
+function variantDefinitions(variantDir) {
+    const folder = variantDir ? join(variantDir, 'sub_agents') : null;
+    if (!folder || !existsSync(folder))
+        return [];
+    return readdirSync(folder).sort().flatMap(name => {
+        const definition = subagentOf(variantDir, name);
+        if (!definition)
+            return [];
+        return [{
+                name, description: definition.description || name, color: 'blue', instructions: definition.instructions || definition.description,
+                tools: null, plugins: null, variant: null, model: null, effort: null,
+                source: 'variant', path: join(folder, name, 'AGENT.md')
+            }];
+    });
+}
+/**
+ * Every profile a session in `cwd` can use. An unreadable file is reported in `problems`; it hides
+ * nothing, so a broken project file leaves the global or built-in profile of that name in force.
+ */
+export function listProfiles(root, cwd, variantDir) {
+    const profiles = new Map();
+    const problems = [];
+    for (const definition of BUILTIN_PROFILES)
+        profiles.set(definition.name, { ...definition, source: 'builtin', path: null });
+    const dirs = profileDirs(root, cwd);
+    readFolder(dirs.global, 'global', profiles, problems);
+    readFolder(dirs.project, 'project', profiles, problems);
+    for (const definition of variantDefinitions(variantDir))
+        if (!profiles.has(definition.name))
+            profiles.set(definition.name, definition);
+    return { profiles: [...profiles.values()].sort((left, right) => left.name.localeCompare(right.name)), problems };
+}
+export function resolveProfile(root, cwd, name, variantDir) {
+    if (!PROFILE_NAME.test(name))
+        return null;
+    return listProfiles(root, cwd, variantDir).profiles.find(profile => profile.name === name) ?? null;
+}
+function scopeDir(root, cwd, scope) {
+    const dirs = profileDirs(root, cwd);
+    if (scope === 'global')
+        return dirs.global;
+    if (!dirs.project)
+        throw invalid('A project profile needs a working folder.');
+    return dirs.project;
+}
+const TEMPLATE = {
+    description: 'What this agent is for, in one line.',
+    color: 'blue',
+    instructions: 'Describe how this agent should work: what to do with a brief, what to avoid, and what to report back.',
+    tools: null, plugins: null, variant: null, model: null, effort: null
+};
+/** Writes a new profile file from the template, or a copy of `from`. Refuses to overwrite one. */
+export function createProfile(root, cwd, input) {
+    const name = typeof input.name === 'string' ? input.name.trim() : '';
+    if (!PROFILE_NAME.test(name))
+        throw invalid('A profile name uses lowercase letters, digits, - and _, and starts with a letter or digit.');
+    if (input.scope !== 'global' && input.scope !== 'project')
+        throw invalid('scope must be global or project.');
+    const dir = scopeDir(root, cwd, input.scope);
+    const path = join(dir, `${name}.md`);
+    if (existsSync(path))
+        throw invalid(`There is already a ${input.scope} profile named ${name}.`);
+    let source = { ...TEMPLATE, name };
+    if (input.from) {
+        const original = resolveProfile(root, cwd, input.from);
+        if (!original)
+            throw notFound(`The profile ${input.from}`);
+        source = { ...original, name };
+    }
+    mkdirSync(dir, { recursive: true });
+    const text = profileText(source);
+    atomicWrite(path, text);
+    return parseProfile(text, name, input.scope, path);
+}
+/** Deletes a person's own profile file. Built-ins and variant subagents cannot be removed here. */
+export function removeProfile(root, cwd, input) {
+    if (!PROFILE_NAME.test(input.name))
+        throw invalid('That is not a profile name.');
+    if (input.scope !== 'global' && input.scope !== 'project')
+        throw invalid('scope must be global or project.');
+    const path = join(scopeDir(root, cwd, input.scope), `${input.name}.md`);
+    if (!existsSync(path))
+        throw notFound(`The ${input.scope} profile ${input.name}`);
+    rmSync(path);
+}
+/** Where the profile list sits among the prompt sections: the slot a variant's subagents used. */
+export const PROFILE_SECTION_ORDER = 64;
+/** The prompt section that lists the profiles a run can start subagents from. */
+export function profileSection(root, cwd, variantDir) {
+    const { profiles } = listProfiles(root, cwd, variantDir);
+    return {
+        id: 'subagents',
+        title: 'Subagents',
+        body: [
+            'Start one with spawn_subagent and agent set to a profile name, or omit agent for a copy of yourself. Each works in its own context with a complete brief from you, keeps its own checklist the user can follow, and returns text. A profile can only narrow your tools.',
+            ...profiles.map((profile) => `- ${profile.name} — ${profile.description}`)
+        ].join('\n'),
+        budget: 6_000,
+        order: PROFILE_SECTION_ORDER
+    };
+}