@xopcai/xopc 0.0.392 → 0.0.394

package/dist/src/agent/tools/search/providers/xopc-cloud.js

@@ -23,6 +23,9 @@ var XopcCloudSearchProvider = class {
 		return Boolean(this.catalogStore.getSource("xopc-cloud")?.search);
 	}
 	async search(query, count, signal) {
+		return (await this.searchWithMetadata(query, count, signal)).results;
+	}
+	async searchWithMetadata(query, count, signal) {
 		const source = this.catalogStore.getSource("xopc-cloud");
 		if (!source?.search) throw new Error("XOPC Cloud search is not available");
 		const requestSignal = signal ? AbortSignal.any([signal, AbortSignal.timeout(3e4)]) : AbortSignal.timeout(3e4);
@@ -46,7 +49,7 @@ var XopcCloudSearchProvider = class {
 		const body = await response.json().catch(() => null);
 		if (!response.ok) throw searchHttpError(response, typeof body?.error?.message === "string" ? body.error.message : `XOPC Cloud search failed (${response.status})`);
 		if (!Array.isArray(body?.results)) throw new Error("XOPC Cloud search returned an invalid response");
-		return body.results.flatMap((result) => {
+		const results = body.results.flatMap((result) => {
 			if (typeof result.title !== "string" || typeof result.url !== "string" || typeof result.description !== "string") return [];
 			return [{
 				title: result.title,
@@ -55,7 +58,39 @@ var XopcCloudSearchProvider = class {
 				source: this.name
 			}];
 		});
+		const upstream = searchProviderId(response.headers.get("x-xopc-search-upstream")) ?? searchProviderId(body.upstream);
+		const countHeader = response.headers.get("x-xopc-provider-attempts");
+		const attemptCount = countHeader !== null && /^\d{1,4}$/.test(countHeader) && Number(countHeader) > 0 ? Number(countHeader) : void 0;
+		const attempts = Array.isArray(body.trace) ? body.trace.slice(0, 24).flatMap((item) => {
+			if (!item || typeof item !== "object") return [];
+			const row = item;
+			const source = searchProviderId(row.provider);
+			if (!source || ![
+				"success",
+				"empty",
+				"error",
+				"skipped"
+			].includes(String(row.outcome))) return [];
+			const reason = typeof row.reason === "string" && /^[a-z_]{1,64}$/.test(row.reason) ? row.reason : void 0;
+			return [{
+				provider: this.name,
+				upstream: source,
+				outcome: row.outcome,
+				...reason ? { reason } : {}
+			}];
+		}) : void 0;
+		return {
+			results,
+			metadata: {
+				...upstream ? { upstream } : {},
+				...attemptCount ? { attemptCount } : {},
+				...attempts?.length ? { attempts } : {}
+			}
+		};
 	}
 };
+function searchProviderId(value) {
+	return typeof value === "string" && /^[a-z0-9][a-z0-9_-]{0,63}$/.test(value) ? value : void 0;
+}
 //#endregion
 export { XopcCloudSearchProvider };

package/dist/src/agent/tools/search/registry.d.ts

@@ -6,6 +6,7 @@ export declare class SearchProviderRegistry {
     private readonly cache;
     private readonly cachePrefix;
     private readonly requestTimeoutMs;
+    private readonly cloudRequestTimeoutMs;
     private readonly retryDelayMs;
     sourceRequests: number;
     private readonly cooldowns;

package/dist/src/agent/tools/search/registry.js

@@ -4,6 +4,7 @@ import { executeWithTimeout } from "../../lifecycle/timeout-wrapper.js";
 import { SearchError, classifySearchError, searchFailureInfo } from "./errors.js";
 import { SearchCacheWriteError, currentSearchCache } from "./cache.js";
 import { BraveProvider } from "./providers/brave.js";
+import { DeepSeekProvider } from "./providers/deepseek.js";
 import { TavilyProvider } from "./providers/tavily.js";
 import { BingApiProvider } from "./providers/bing-api.js";
 import { BingHtmlProvider } from "./providers/bing-html.js";
@@ -21,6 +22,7 @@ var SearchProviderRegistry = class {
 	cache;
 	cachePrefix;
 	requestTimeoutMs;
+	cloudRequestTimeoutMs;
 	retryDelayMs;
 	sourceRequests = 0;
 	cooldowns = /* @__PURE__ */ new Map();
@@ -43,6 +45,7 @@ var SearchProviderRegistry = class {
 			this.fallbackProvider?.name
 		])).digest("hex");
 		this.requestTimeoutMs = options.requestTimeoutMs ?? 1e4;
+		this.cloudRequestTimeoutMs = options.requestTimeoutMs ?? 3e4;
 		this.retryDelayMs = options.retryDelayMs ?? 300;
 		log.debug({
 			region: config.region,
@@ -58,6 +61,9 @@ var SearchProviderRegistry = class {
 		for (const p of config.providers) {
 			if (p.disabled) continue;
 			switch (p.type) {
+				case "deepseek":
+					list.push(new DeepSeekProvider(p.apiKey ?? "", p.url));
+					break;
 				case "brave":
 					list.push(new BraveProvider(p.apiKey ?? ""));
 					break;
@@ -91,7 +97,8 @@ var SearchProviderRegistry = class {
 			results: structuredClone(cached.results),
 			provider: cached.provider,
 			cached: true,
-			capturedAt: cached.capturedAt
+			capturedAt: cached.capturedAt,
+			...cached.metadata ? { metadata: structuredClone(cached.metadata) } : {}
 		} : void 0;
 	}
 	remember(query, count, response) {
@@ -102,6 +109,7 @@ var SearchProviderRegistry = class {
 				count,
 				results: structuredClone(response.results),
 				provider: response.provider,
+				...response.metadata ? { metadata: structuredClone(response.metadata) } : {},
 				capturedAt: response.capturedAt ?? Date.now()
 			});
 		} catch (error) {
@@ -117,7 +125,7 @@ var SearchProviderRegistry = class {
 		try {
 			return await executeWithTimeout(() => execute(controller.signal), {
 				toolName: `web_search:${name}`,
-				timeoutMs: this.requestTimeoutMs,
+				timeoutMs: name === "xopc-cloud" ? this.cloudRequestTimeoutMs : this.requestTimeoutMs,
 				signal,
 				onTimeout: (error) => controller.abort(error)
 			});
@@ -139,6 +147,7 @@ var SearchProviderRegistry = class {
 		const hit = this.cached(query, count);
 		if (hit) return hit;
 		let lastError;
+		const attempts = [];
 		for (const provider of [...this.providers, ...this.fallbackProvider ? [this.fallbackProvider] : []]) {
 			signal?.throwIfAborted();
 			authorize();
@@ -152,13 +161,24 @@ var SearchProviderRegistry = class {
 				signal?.throwIfAborted();
 				authorize();
 				try {
-					const results = await this.attempt(provider.name, signal, (requestSignal) => provider.search(query, count, requestSignal));
+					const execution = await this.attempt(provider.name, signal, async (requestSignal) => provider.searchWithMetadata ? provider.searchWithMetadata(query, count, requestSignal) : { results: await provider.search(query, count, requestSignal) });
 					signal?.throwIfAborted();
 					authorize();
+					const metadata = execution.metadata;
+					const route = metadata?.attempts?.length ? metadata.attempts : provider.name === "xopc-cloud" && (metadata?.attemptCount ?? 1) > 1 ? [] : [{
+						provider: provider.name,
+						...metadata?.upstream ? { upstream: metadata.upstream } : {},
+						outcome: execution.results.length ? "success" : "empty"
+					}];
 					const response = {
-						results,
+						results: execution.results,
 						provider: provider.name,
-						capturedAt: Date.now()
+						capturedAt: Date.now(),
+						metadata: {
+							...metadata,
+							attemptCount: attempts.length + (metadata?.attemptCount ?? route.length),
+							attempts: [...attempts, ...route].slice(-24)
+						}
 					};
 					this.remember(query, count, response);
 					return response;
@@ -167,6 +187,11 @@ var SearchProviderRegistry = class {
 					const failure = classifySearchError(error, signal);
 					if (signal?.aborted || failure.kind === "permission_denied" || failure.kind === "cancelled") throw failure;
 					lastError = failure;
+					attempts.push({
+						provider: provider.name,
+						outcome: "error",
+						reason: failure.kind
+					});
 					if (failure.kind === "rate_limited") this.cooldowns.set(provider.name, {
 						until: Date.now() + (failure.retryAfterMs ?? this.retryDelayMs),
 						error: failure
@@ -218,7 +243,8 @@ var SearchProviderRegistry = class {
 					const response = {
 						results: item.results,
 						provider: provider.name,
-						capturedAt: Date.now()
+						capturedAt: Date.now(),
+						metadata: item.metadata
 					};
 					this.remember(request.query, request.count, response);
 					outputs.set(this.key(request.query, request.count), {

package/dist/src/agent/tools/search/request-gate.d.ts

@@ -0,0 +1,13 @@
+export declare class SearchRateLimitError extends Error {
+    readonly retryAfterMs: number;
+    readonly status = 429;
+    constructor(retryAfterMs: number);
+}
+/** Process-wide callers share a gate, including when credentials belong to one account. */
+export declare class SearchRequestGate {
+    private nextStartAt;
+    private cooldownUntil;
+    private pending;
+    cooldown(ms: number): void;
+    wait(signal?: AbortSignal): Promise<void>;
+}

package/dist/src/agent/tools/search/request-gate.js

@@ -0,0 +1,41 @@
+import { setTimeout } from "node:timers/promises";
+//#region src/agent/tools/search/request-gate.ts
+var SearchRateLimitError = class extends Error {
+	status = 429;
+	constructor(retryAfterMs) {
+		super("Search upstream rate limit exceeded");
+		this.retryAfterMs = retryAfterMs;
+	}
+};
+/** Process-wide callers share a gate, including when credentials belong to one account. */
+var SearchRequestGate = class {
+	nextStartAt = 0;
+	cooldownUntil = 0;
+	pending = 0;
+	cooldown(ms) {
+		this.cooldownUntil = Math.max(this.cooldownUntil, Date.now() + ms);
+	}
+	async wait(signal) {
+		signal?.throwIfAborted();
+		if (this.pending >= 8) throw new SearchRateLimitError(1e3);
+		this.pending++;
+		const queuedAt = Date.now();
+		try {
+			while (true) {
+				signal?.throwIfAborted();
+				const now = Date.now();
+				const waitMs = Math.max(0, this.nextStartAt - now, this.cooldownUntil - now);
+				if (now - queuedAt + waitMs > 2e3) throw new SearchRateLimitError(waitMs || 250);
+				if (!waitMs) {
+					this.nextStartAt = now + 250;
+					return;
+				}
+				await setTimeout(waitMs, void 0, { signal });
+			}
+		} finally {
+			this.pending--;
+		}
+	}
+};
+//#endregion
+export { SearchRateLimitError, SearchRequestGate };

package/dist/src/agent/tools/search/resolve-config.js

@@ -11,7 +11,7 @@ function resolveWebSearchConfig(web) {
 	const search = web?.search;
 	const region = resolveWebSearchRegion(web);
 	const providers = (search?.providers ?? []).map((p) => {
-		const resolvedKey = p.apiKey !== void 0 && p.apiKey !== "" ? resolveKey(p.apiKey) : void 0;
+		const resolvedKey = p.type === "deepseek" && /^[A-Z][A-Z0-9_]*$/.test(p.apiKey ?? "") ? process.env[p.apiKey] : p.apiKey !== void 0 && p.apiKey !== "" ? resolveKey(p.apiKey) : void 0;
 		const url = p.url?.replace(/\/+$/, "");
 		return {
 			type: p.type,

package/dist/src/agent/tools/search/search-info.d.ts

@@ -0,0 +1,8 @@
+import type { SearchMetadata } from './types.js';
+export interface SearchInfo extends SearchMetadata {
+    provider: string;
+    cached?: boolean;
+    capturedAt?: number;
+}
+/** Keep compact provenance through transcript truncation, excluding query and result payloads. */
+export declare function sanitizeSearchInfo(value: unknown): SearchInfo | undefined;

package/dist/src/agent/tools/search/search-info.js

@@ -0,0 +1,34 @@
+//#region src/agent/tools/search/search-info.ts
+/** Keep compact provenance through transcript truncation, excluding query and result payloads. */
+function sanitizeSearchInfo(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const row = value;
+	const id = (v) => typeof v === "string" && /^[a-z0-9][a-z0-9_-]{0,63}$/.test(v);
+	if (!id(row.provider)) return void 0;
+	const attempts = Array.isArray(row.attempts) ? row.attempts.slice(0, 24).flatMap((item) => {
+		if (!item || typeof item !== "object") return [];
+		const step = item;
+		if (!id(step.provider) || ![
+			"success",
+			"empty",
+			"error",
+			"skipped"
+		].includes(String(step.outcome))) return [];
+		return [{
+			provider: step.provider,
+			outcome: step.outcome,
+			...id(step.upstream) ? { upstream: step.upstream } : {},
+			...typeof step.reason === "string" && /^[a-z_]{1,64}$/.test(step.reason) ? { reason: step.reason } : {}
+		}];
+	}) : void 0;
+	return {
+		provider: row.provider,
+		...id(row.upstream) ? { upstream: row.upstream } : {},
+		...typeof row.cached === "boolean" ? { cached: row.cached } : {},
+		...typeof row.capturedAt === "number" && Number.isSafeInteger(row.capturedAt) && row.capturedAt > 0 ? { capturedAt: row.capturedAt } : {},
+		...typeof row.attemptCount === "number" && Number.isSafeInteger(row.attemptCount) && row.attemptCount > 0 && row.attemptCount <= 1e4 ? { attemptCount: row.attemptCount } : {},
+		...attempts?.length ? { attempts } : {}
+	};
+}
+//#endregion
+export { sanitizeSearchInfo };

package/dist/src/agent/tools/search/types.d.ts

@@ -11,11 +11,12 @@ export interface SearchProvider {
     isAvailable(): boolean;
     cacheIdentity?(): string;
     search(query: string, count: number, signal?: AbortSignal): Promise<SearchResult[]>;
+    searchWithMetadata?(query: string, count: number, signal?: AbortSignal): Promise<SearchExecution>;
     /** Optional host-implemented batch transport; ids must be echoed for partial results. */
     searchBatch?(requests: SearchRequest[], signal?: AbortSignal): Promise<SearchBatchItem[]>;
 }
 export interface ResolvedSearchProviderEntry {
-    type: 'brave' | 'tavily' | 'bing' | 'searxng';
+    type: 'brave' | 'tavily' | 'bing' | 'searxng' | 'deepseek';
     apiKey?: string;
     url?: string;
     disabled?: boolean;
@@ -35,12 +36,29 @@ export interface SearchBatchItem {
     id: string;
     results?: SearchResult[];
     error?: SearchFailureInfo;
+    metadata?: SearchMetadata;
+}
+export interface SearchAttempt {
+    provider: string;
+    upstream?: string;
+    outcome: 'success' | 'empty' | 'error' | 'skipped';
+    reason?: string;
+}
+export interface SearchMetadata {
+    upstream?: string;
+    attemptCount?: number;
+    attempts?: SearchAttempt[];
+}
+export interface SearchExecution {
+    results: SearchResult[];
+    metadata?: SearchMetadata;
 }
 export interface SearchResponse {
     results: SearchResult[];
     provider: string;
     cached?: boolean;
     capturedAt?: number;
+    metadata?: SearchMetadata;
 }
 export interface SearchBatchResponse extends SearchRequest {
     response?: SearchResponse;

package/dist/src/agent/tools/skills-tools.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { init_paths } from "../../config/paths.js";
-import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 import { createSkillConfigManager, isSkillEnabled, resolveSkillConfig } from "../skills/config.js";
+import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 import { resolveSkillReadablePath } from "../skills/skill-view-path.js";
 import { readFileSync, statSync } from "fs";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/task-collaboration-tool.js

@@ -6,11 +6,11 @@ import { init_request_repository, personalRequestForExecution } from "../../pers
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
-import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
-import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
+import { assertTaskHandoffAccess, assertTaskHandoffExecutorAccess, getTaskHandoff, materializeTaskHandoffFile, readTaskHandoffSource } from "../../tasks/task-handoff.js";
 import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
+import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { taskResearchEvidence } from "../../tasks/task-research-result.js";
-import { assertTaskHandoffAccess, assertTaskHandoffExecutorAccess, getTaskHandoff, materializeTaskHandoffFile, readTaskHandoffSource } from "../../tasks/task-handoff.js";
+import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { createXopcUseTool } from "./xopc-use-tool.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/task-collaboration-tool.ts

package/dist/src/agent/tools/toolExposure.d.ts

@@ -0,0 +1,3 @@
+import type { AgentTool } from '@earendil-works/pi-agent-core';
+/** Defer declarations, not permissions. pi tool_search loads the unchanged contract on demand. */
+export declare function withCoreToolExposure(tool: AgentTool): AgentTool;

package/dist/src/agent/tools/toolExposure.js

@@ -0,0 +1,25 @@
+import { getXopcToolMetadata, setXopcToolMetadata } from "../embedded/tool-metadata.js";
+//#region src/agent/tools/toolExposure.ts
+const EAGER_CORE_TOOLS = new Set([
+	"read_file",
+	"write_file",
+	"apply_patch",
+	"grep",
+	"find",
+	"list_dir",
+	"exec_command",
+	"review_workspace",
+	"publish_artifacts",
+	"task_collaboration",
+	"publish_task_result"
+]);
+/** Defer declarations, not permissions. pi tool_search loads the unchanged contract on demand. */
+function withCoreToolExposure(tool) {
+	if (EAGER_CORE_TOOLS.has(tool.name) || getXopcToolMetadata(tool)?.exposure !== void 0) return tool;
+	return setXopcToolMetadata(tool, {
+		...getXopcToolMetadata(tool),
+		exposure: "deferred"
+	});
+}
+//#endregion
+export { withCoreToolExposure };

package/dist/src/agent/tools/web.js

@@ -1,6 +1,7 @@
 import { SearchError, classifySearchError, searchFailureInfo } from "./search/errors.js";
 import { SearchProviderRegistry } from "./search/registry.js";
 import { resolveWebSearchConfig } from "./search/resolve-config.js";
+import { sanitizeSearchInfo } from "./search/search-info.js";
 import { fetchPublicText } from "./fetch-text.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/web.ts
@@ -23,7 +24,13 @@ function searchToolResult(query, count, response) {
 			query,
 			count,
 			cached: response.cached ?? false,
-			capturedAt: response.capturedAt
+			capturedAt: response.capturedAt,
+			searchInfo: sanitizeSearchInfo({
+				...response.metadata,
+				provider: response.provider,
+				cached: response.cached ?? false,
+				capturedAt: response.capturedAt
+			})
 		}
 	};
 }

package/dist/src/agent/tools/write.js

@@ -1,9 +1,9 @@
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { writeWorkspaceFile } from "../sandbox/fileAccess.js";
 import { checkFileSafety } from "../prompt/safety.js";
 import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
-import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { basename, relative, sep } from "path";
 import { realpath } from "fs/promises";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/xopc-use-tool.js

@@ -11,22 +11,22 @@ import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import "../../activity/index.js";
-import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
-import { resolveTaskLocale } from "../../tasks/task-language.js";
-import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
-import { TaskOriginRepository } from "../../tasks/task-origin-repository.js";
-import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import "../../capabilities/runtime/dispatcher.js";
+import { hasUnlocalizedTaskText, resolveTaskLocale } from "../../tasks/task-language.js";
+import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
+import { TaskOriginRepository } from "../../tasks/task-origin-repository.js";
+import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
+import { parseTaskHandoffReferences } from "../../tasks/task-handoff.js";
 import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
+import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { defineTaskContract } from "../../tasks/task-contract-definition.js";
+import { TaskApplicationService } from "../../tasks/task-application-service.js";
 import { resolveResponseLanguageForSession } from "../prompt/response-language.js";
 import { TaskDeletionService } from "../../tasks/task-deletion-service.js";
 import { TaskDeleteOutputSchema } from "../../tasks/capabilities/management.js";
-import { parseTaskHandoffReferences } from "../../tasks/task-handoff.js";
-import { TaskApplicationService } from "../../tasks/task-application-service.js";
 import { AutomationCreateCapabilityInputSchema, AutomationUpdatePatchSchema } from "../../automations/capabilities/write.js";
 import { TaskMutationOutputSchema } from "../../tasks/capabilities/write.js";
 import { createProductDispatcher } from "../../capabilities/runtime/product.js";
@@ -1425,6 +1425,10 @@ async function handleTask(command, args, deps, dryRun, capabilities) {
 				ok: false,
 				error: `Invalid ${field}: pass a flat list of strings or omit this optional field`
 			};
+			if (hasUnlocalizedTaskText(value, taskLocale)) return {
+				ok: false,
+				error: `Write ${field} in Simplified Chinese to match the task language. Preserve all requirements, paths, URLs and proper nouns; translate only explanatory prose.`
+			};
 			contract[field] = value;
 		}
 		const originConversationId = deps.getCurrentConversationId?.();

package/dist/src/agent/workflow/subagent-runner.d.ts

@@ -20,6 +20,7 @@ import { type BuildChildToolsOptions } from '../child-agent-factory.js';
 import type { ToolExecutorConfig } from '../tools/executor.js';
 import type { SubagentRunOptions, SubagentRunner } from './types.js';
 export interface DelegateSubagentRunnerDeps {
+    isWorkspaceTrusted?: (workspaceDir: string) => boolean | null | undefined;
     workspace: string;
     bus: MessageBus;
     agentId?: string;

package/dist/src/agent/workflow/subagent-runner.js

@@ -4,7 +4,7 @@ import { createSqliteTranscriptRuntime } from "../embedded/transcript-runtime.js
 import { createDelegateChildHandle } from "../child-agent-factory.js";
 import { DELEGATION_TOOL_CAPABILITIES, protectDelegatedTool, resolveDelegationTools } from "../tools/delegation-policy.js";
 import { DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
-import { createDelegationParentPolicy } from "../tools/delegation-parent-policy.js";
+import { createNoninteractiveToolPolicy } from "../tools/noninteractive-tool-policy.js";
 import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 //#region src/agent/workflow/subagent-runner.ts
 init_logger();
@@ -30,6 +30,7 @@ var DelegateSubagentRunner = class {
 		const fullPrompt = buildPrompt(prompt, opts, wantStructured);
 		const streamMode = resolveSubagentStreamMode(this.deps.getConfig);
 		const childOptions = {
+			isWorkspaceTrusted: this.deps.isWorkspaceTrusted,
 			workspace: this.deps.workspace,
 			goal: fullPrompt,
 			requesterConversationId: opts.sessionMetadata?.parentConversationId,
@@ -41,9 +42,8 @@ var DelegateSubagentRunner = class {
 			agentId: this.deps.agentId,
 			getConfig: this.deps.getConfig,
 			toolExecutorConfig: this.deps.toolExecutorConfig,
-			authorizeToolCall: createDelegationParentPolicy({
+			authorizeToolCall: createNoninteractiveToolPolicy({
 				getConfig: this.deps.getConfig,
-				conversationId: opts.sessionMetadata?.parentConversationId,
 				agentId: this.deps.agentId
 			}).beforeToolCall,
 			buildChildTools: (childOpts) => {

package/dist/src/agent/workflow/workflow-child-tools.js

@@ -1,30 +1,35 @@
-import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
+import { resolveEffectiveAgentProfile } from "../../config/agent-profile.js";
 import { AgentToolsFactory } from "../tools/factory.js";
 //#region src/agent/workflow/workflow-child-tools.ts
 /** Builds the tool set for workflow child agents (wired from gateway to avoid cycles). */
 function buildWorkflowChildTools(childOptions) {
-	const profile = childOptions.getConfig() ? childOptions.browserConversationId ? resolveEffectiveAgentProfileForSession(childOptions.browserConversationId) : childOptions.agentId ? resolveEffectiveAgentProfile(childOptions.agentId) : resolveEffectiveAgentProfileForSession(void 0) : void 0;
+	const config = childOptions.getConfig();
+	if (config && !childOptions.agentId) throw new Error("Workflow execution requires a configured Agent");
+	const profile = config && childOptions.agentId ? resolveEffectiveAgentProfile(childOptions.agentId) : void 0;
 	return new AgentToolsFactory({
 		workspace: childOptions.workspace,
 		bus: childOptions.bus,
-		getCurrentContext: () => childOptions.browserConversationId ? {
-			conversationId: childOptions.browserConversationId,
+		getCurrentContext: () => ({
+			conversationId: childOptions.conversationId,
 			channel: "workflow",
-			chatId: childOptions.browserConversationId,
+			chatId: childOptions.conversationId,
 			origin: {
 				type: "system",
 				source: "workflow"
 			}
-		} : null,
+		}),
 		getConfig: childOptions.getConfig,
 		getPrimaryModel: () => childOptions.model,
 		endpointTools: childOptions.endpointTools,
-		toolExecutorConfig: childOptions.toolExecutorConfig
+		toolExecutorConfig: {
+			...childOptions.toolExecutorConfig,
+			resolveTimeoutMs: (name) => childOptions.getConfig() && childOptions.agentId ? resolveEffectiveAgentProfile(childOptions.agentId).config.tools[name]?.timeoutMs : void 0
+		}
 	}).createAllTools({
 		workspace: childOptions.workspace,
 		getPrimaryModel: () => childOptions.model,
 		agentId: childOptions.agentId,
-		conversationId: childOptions.browserConversationId,
+		conversationId: childOptions.conversationId,
 		disabledTools: profile?.tools.denied,
 		toolAllowlist: profile?.config.toolAllowlist
 	});

package/dist/src/agent/workspace-runtime/registry.js

@@ -1,5 +1,5 @@
-import { init_agent_session_key, normalizeAgentId } from "../../routing/agent-session-key.js";
 import { init_agent_scope, resolveAgentIdForWorkspacePath } from "../agent-scope.js";
+import { init_agent_session_key, normalizeAgentId } from "../../routing/agent-session-key.js";
 import { SkillManager } from "../skills/skill-manager.js";
 import { SystemPromptBuilder } from "../prompt/service-prompt-builder.js";
 import { UserContextRuntimeRegistry } from "../../user-context/runtime.js";

package/dist/src/agent-catalog/capabilities.js

@@ -1,10 +1,10 @@
 import { AgentEntrySchema, EffectiveAgentConfigSchema } from "../agent-config/schema.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { AgentCatalogRepository, init_repository } from "./repository.js";
-import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
+import { AgentCatalogRepository, init_repository } from "./repository.js";
+import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { AgentCatalogService } from "./service.js";
 import { z } from "zod";
 //#region src/agent-catalog/capabilities.ts

package/dist/src/agent-matching/delegation-service.js

@@ -4,8 +4,8 @@ import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "
 import { TaskRunRepository, init_task_run_repository } from "../tasks/task-run-repository.js";
 import { TaskReadModelProjector } from "../tasks/task-read-model-projector.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
-import { assessSpecialist } from "./service.js";
 import { AgentSelectionRepository, selectionRequestHash } from "./selection-repository.js";
+import { assessSpecialist } from "./service.js";
 //#region src/agent-matching/delegation-service.ts
 init_logger();
 init_transaction();

package/dist/src/ai-assist/text-assist.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createResolvedModelStream, isLocalModelBaseUrl, resolveModelCallApiKey } from "../providers/model-call.js";
-import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 //#region src/ai-assist/text-assist.ts
 init_providers();
 init_logger();

package/dist/src/auth/oauth/xopc-cloud.js

@@ -1,10 +1,10 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { generatePKCE, init_pkce } from "./pkce.js";
 import { init_resolution, resolveConnectedPlatformEndpoint } from "../../platform/resolution.js";
+import { generatePKCE, init_pkce } from "./pkce.js";
 import { hostname } from "node:os";
 import { randomBytes } from "node:crypto";
-import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import http from "node:http";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
 //#region src/auth/oauth/xopc-cloud.ts
 function consoleUrl() {
 	return (process.env.XOPC_CONSOLE_URL ?? resolveConnectedPlatformEndpoint("authorizationServer") ?? DEFAULT_CONSOLE_URL).replace(/\/+$/, "");

package/dist/src/auth/sync-provider-auth.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { assertCurrentModelProvider, init_provider_policy } from "../providers/provider-policy.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { existsSync, readFileSync } from "node:fs";

package/dist/src/automations/capabilities/drafts.js

@@ -3,10 +3,10 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_trust_policy, resolveAutomationSafetyForTrust } from "../../user-context/trust-policy.js";
 import { getUserTrustPolicy } from "../../storage/sqlite/user-trust-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError } from "../../capabilities/runtime/external-operations.js";
 import { defineExternalCapability, defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { AutomationCreateCapabilityInputSchema } from "./write.js";
 import { simulateAutomation } from "../draft/automation-draft-validator.js";
 import { AutomationDraftService } from "../draft/automation-draft-service.js";