@zhushanwen/subagent-engine-sdk 0.10.0 → 0.11.0

package/dist/index.cjs

@@ -6574,6 +6574,8 @@ var src_exports = {};
 __export(src_exports, {
   AGENT_EVENT_TYPE_NAMES: () => AGENT_EVENT_TYPE_NAMES,
   CANCEL_SETTLE_GRACE_MS: () => CANCEL_SETTLE_GRACE_MS,
+  CONTROL_ENV_ROOT_SESSION_ID: () => CONTROL_ENV_ROOT_SESSION_ID,
+  CONTROL_ENV_SOCKET: () => CONTROL_ENV_SOCKET,
   DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS: () => DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS,
   DEFAULT_KILL_GRACE_MS: () => DEFAULT_KILL_GRACE_MS,
   DEFAULT_NATIVE_INTERRUPT_GRACE_MS: () => DEFAULT_NATIVE_INTERRUPT_GRACE_MS,
@@ -6589,7 +6591,11 @@ __export(src_exports, {
   ENGINE_PROTOCOL_ERROR_CODES: () => ENGINE_PROTOCOL_ERROR_CODES,
   ENGINE_PROTOCOL_SCHEMAS: () => ENGINE_PROTOCOL_SCHEMAS,
   ENGINE_PROTOCOL_VERSION: () => ENGINE_PROTOCOL_VERSION,
+  ENGINE_SPAWN_DELIVERY_ERROR_CODES: () => ENGINE_SPAWN_DELIVERY_ERROR_CODES,
+  ENGINE_SPAWN_DELIVERY_ERROR_RECOVERY: () => ENGINE_SPAWN_DELIVERY_ERROR_RECOVERY,
   ENGINE_TIMEOUT_RECOVERY: () => ENGINE_TIMEOUT_RECOVERY,
+  ENGINE_TRANSPORT_ERROR_CODES: () => ENGINE_TRANSPORT_ERROR_CODES,
+  ENGINE_TRANSPORT_ERROR_RECOVERY: () => ENGINE_TRANSPORT_ERROR_RECOVERY,
   EngineSdkError: () => EngineSdkError,
   ExecutionNestingContext: () => ExecutionNestingContext,
   FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS: () => FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS,
@@ -6597,17 +6603,8 @@ __export(src_exports, {
   HOST_TIMEOUT_ABORT_REASON: () => HOST_TIMEOUT_ABORT_REASON,
   NESTED_SPAWN_ENV: () => NESTED_SPAWN_ENV,
   NestedSpawnRejectedError: () => NestedSpawnRejectedError,
+  PI_SUBAGENT_TASK_MAX_CHARS: () => PI_SUBAGENT_TASK_MAX_CHARS,
   PROTOCOL_METHODS: () => PROTOCOL_METHODS,
-  RELAY_ENV_NODE: () => RELAY_ENV_NODE,
-  RELAY_ENV_RECORD_ID: () => RELAY_ENV_RECORD_ID,
-  RELAY_ENV_SCRIPT: () => RELAY_ENV_SCRIPT,
-  RELAY_ENV_SESSION_ID: () => RELAY_ENV_SESSION_ID,
-  RELAY_ENV_SOCKET: () => RELAY_ENV_SOCKET,
-  RELAY_EXIT_CODES: () => RELAY_EXIT_CODES,
-  RELAY_FRAME_DIRS: () => RELAY_FRAME_DIRS,
-  RELAY_FRAME_KINDS: () => RELAY_FRAME_KINDS,
-  RELAY_PROTOCOL_VERSION: () => RELAY_PROTOCOL_VERSION,
-  RELAY_REJECT_REASONS: () => RELAY_REJECT_REASONS,
   REVERSE_CHANNELS: () => REVERSE_CHANNELS,
   REVERSE_CHANNEL_TIMEOUT_CLASS: () => REVERSE_CHANNEL_TIMEOUT_CLASS,
   REVERSE_REQUEST_TIMEOUT_MS: () => REVERSE_REQUEST_TIMEOUT_MS,
@@ -6619,11 +6616,15 @@ __export(src_exports, {
   SHARED_POOL_KEY: () => SHARED_POOL_KEY,
   STDERR_TAIL_CHARS: () => STDERR_TAIL_CHARS,
   STDOUT_TAIL_ECHO_CHARS: () => STDOUT_TAIL_ECHO_CHARS,
+  SUBAGENT_CONTROL_CLOSED_REASONS: () => SUBAGENT_CONTROL_CLOSED_REASONS,
+  SUBAGENT_CONTROL_FRAME_KINDS: () => SUBAGENT_CONTROL_FRAME_KINDS,
+  SUBAGENT_CONTROL_PROTOCOL_VERSION: () => SUBAGENT_CONTROL_PROTOCOL_VERSION,
   SUBAGENT_IDENTITY_ENV: () => SUBAGENT_IDENTITY_ENV,
   SUPPORTED_PROTOCOL_RANGE: () => SUPPORTED_PROTOCOL_RANGE,
   TAIJI_DATA_DIR_ENV: () => TAIJI_DATA_DIR_ENV,
   ZCODE_HOST_DB_SUFFIX: () => ZCODE_HOST_DB_SUFFIX,
   ZCODE_ISOLATED_DB_SEGMENTS: () => ZCODE_ISOLATED_DB_SEGMENTS,
+  ZCODE_PI_SYNCED_PROVIDER_CONFIG_SEGMENTS: () => ZCODE_PI_SYNCED_PROVIDER_CONFIG_SEGMENTS,
   abortWithFallback: () => abortWithFallback,
   aggregateUsage: () => aggregateUsage,
   armEngineSelfDestruct: () => armEngineSelfDestruct,
@@ -6648,17 +6649,20 @@ __export(src_exports, {
   extractAndValidateStructuredOutput: () => extractAndValidateStructuredOutput,
   getLogger: () => getLogger,
   hostKindOf: () => hostKindOf,
+  isControlEnvActive: () => isControlEnvActive,
   isEngineErrorPassthroughCode: () => isEngineErrorPassthroughCode,
   isEngineProtocolErrorCode: () => isEngineProtocolErrorCode,
   isNotificationFrame: () => isNotificationFrame,
   isPidAlive: () => isPidAlive,
   isProtocolVersionCompatible: () => isProtocolVersionCompatible,
-  isRelayActive: () => isRelayActive,
   isRequestFrame: () => isRequestFrame,
   isResponseFrame: () => isResponseFrame,
   isReverseRequestFrame: () => isReverseRequestFrame,
+  isSubagentControlClosedReason: () => isSubagentControlClosedReason,
+  isSubagentControlFrameKind: () => isSubagentControlFrameKind,
   isUiResponse: () => isUiResponse,
   killChain: () => killChain,
+  killOwnProcessGroup: () => killOwnProcessGroup,
   killPidChain: () => killPidChain,
   notificationFrameSchema: () => notificationFrameSchema,
   parseChannel: () => parseChannel,
@@ -6667,7 +6671,6 @@ __export(src_exports, {
   probePidAlive: () => probePidAlive,
   protocolErrorSchema: () => protocolErrorSchema,
   pumpNdjsonLines: () => pumpNdjsonLines,
-  readRelayForwardEnv: () => readRelayForwardEnv,
   replayJournal: () => replayJournal,
   requestFrameSchema: () => requestFrameSchema,
   resetDataDirWarnForTests: () => resetDataDirWarnForTests,
@@ -6767,6 +6770,30 @@ var REVERSE_CHANNEL_TIMEOUT_CLASS = {
 };
 
 // src/protocol/error-codes.ts
+var ENGINE_SPAWN_DELIVERY_ERROR_CODES = [
+  "engine_prompt_not_delivered",
+  "engine_prompt_rejected",
+  "engine_spawn_handshake_timeout"
+];
+var ENGINE_TRANSPORT_ERROR_CODES = [
+  "engine_transport_unavailable",
+  "engine_transport_lost",
+  "engine_open_timeout",
+  "engine_frame_too_large",
+  "engine_backpressure_overflow"
+];
+var ENGINE_SPAWN_DELIVERY_ERROR_RECOVERY = {
+  engine_prompt_not_delivered: "The task never reached the child pi (zero stdout after the prompt write, or the engine stdin was unavailable). Re-run the task; if it recurs, inspect the engine/pi logs (the failure carries the delivery diagnostics) and the runtime log.",
+  engine_prompt_rejected: "The child pi explicitly rejected the prompt command (success:false). Check the pi-side reason carried in the error detail (busy/queue/extension takeover states are reported by pi itself), then re-run.",
+  engine_spawn_handshake_timeout: "The engine spawn handshake did not complete in time. Check the runtime log for a spawn/handshake stall, then restart taiji and re-run the task."
+};
+var ENGINE_TRANSPORT_ERROR_RECOVERY = {
+  engine_transport_unavailable: "The runtime control socket is unreachable (connect or hello failed). The runtime side is failing explicitly instead of silently falling back to local spawn \u2014 restart taiji and re-run the task.",
+  engine_transport_lost: "The control connection to the runtime was lost mid-flight (runtime restart or crash). In-flight requests were rejected; restart taiji (or wait for the runtime to come back) and re-run the task \u2014 the connection is not retried in place.",
+  engine_open_timeout: "The runtime did not finish opening the engine channel in time (spawn/attribution stalled). Check the runtime log (engine opened / kill decision lines), then re-run the task.",
+  engine_frame_too_large: "A single frame exceeded the control-plane size limit and the channel was closed without truncation. Shrink the task/result payload (e.g. point the agent at files instead of inlining them) and re-run.",
+  engine_backpressure_overflow: "The control-plane write queue overflowed (engine consumed frames too slowly) and the overflowed scope was torn down without dropping frames silently. Re-run the task; if it recurs, reduce concurrent subagent fan-out."
+};
 var SET_MODEL_ERROR_CODES = [
   /** 目标模型不在当前进程快照（子进程模型快照冻结于 spawn 时刻——模型本身有效，
    *  下一轮 spawn 现取目录即可用；宿主按「写覆盖意图」处置，设计 §7.2 快照型失败行）。 */
@@ -6811,7 +6838,7 @@ var EngineSdkError = class extends Error {
     this.recovery = recovery;
     this.data = data;
   }
-  /** 协议 error 帧载荷投影。 */
+  /** 协议 error 帧载荷派生视图。 */
   toStructured() {
     return { code: this.code, message: this.message, recovery: this.recovery, data: this.data };
   }
@@ -6862,12 +6889,39 @@ function schemaEmulationFailedDetail(error, tail) {
   return `structured output emulation failed after tolerant extraction and one host-side retry: ${error}. Raw output tail: ${truncate(tail, DETAIL_ECHO_MAX_CHARS)}. Recovery: retry with a strengthened prompt or relax the schema; if it still fails switch to a schema-native engine (engine: pi).`;
 }
 
+// src/protocol/control-protocol.ts
+var SUBAGENT_CONTROL_PROTOCOL_VERSION = 1;
+var SUBAGENT_CONTROL_FRAME_KINDS = {
+  hello: "hello",
+  helloOk: "hello_ok",
+  helloReject: "hello_reject",
+  engineOpen: "engine_open",
+  engineOpened: "engine_opened",
+  engineOpenFailed: "engine_open_failed",
+  engineFrame: "engine_frame",
+  engineClose: "engine_close",
+  engineClosed: "engine_closed",
+  error: "error"
+};
+function isSubagentControlFrameKind(value) {
+  return typeof value === "string" && Object.values(SUBAGENT_CONTROL_FRAME_KINDS).includes(value);
+}
+var SUBAGENT_CONTROL_CLOSED_REASONS = {
+  engineExit: "engine_exit",
+  engineSignal: "engine_signal",
+  killedByControl: "killed_by_control",
+  openTimeout: "open_timeout"
+};
+function isSubagentControlClosedReason(value) {
+  return typeof value === "string" && Object.values(SUBAGENT_CONTROL_CLOSED_REASONS).includes(value);
+}
+
 // src/protocol/contract-types.ts
 var AGENT_EVENT_TYPE_NAMES = [
   "tool_start",
   // noop-safe: 旧宿主 default 分支零写入——丢弃仅缺 tool 起始占位（显示降级），turn 结构不受损
   "tool_end",
-  // noop-safe: 旧宿主 default 分支零写入——丢弃仅缺 result，turn 收口由 turn_end/message_end 承担
+  // noop-safe: 旧宿主 default 分支零写入——丢弃仅缺 result，turn 收尾由 turn_end/message_end 承担
   "text_delta",
   // noop-safe: 旧宿主 default 分支零写入——丢弃仅缺正文增量，不产生半解析状态
   "thinking_delta",
@@ -6875,7 +6929,7 @@ var AGENT_EVENT_TYPE_NAMES = [
   "turn_end",
   // noop-safe: 旧宿主 default 分支零写入——丢弃则该 turn 滞留进行态，journal 重放仍按序重建
   "message_end",
-  // noop-safe: 旧宿主 default 分支零写入——丢弃仅缺 usage 聚合与闭合计量，已累积内容不回滚
+  // noop-safe: 旧宿主 default 分支零写入——丢弃仅缺 usage 聚合与结束计量，已累积内容不回滚
   "compaction",
   // noop-safe: 事件无载荷且现行 reducer 即直接 return——丢弃与处理零差异
   "activity",
@@ -6957,7 +7011,7 @@ var notificationFrameSchema = {
             type: {
               type: "string",
               // 事件 enum 从词表 SSOT 派生（U2 词表锁：union⟷词表互证后，此处不再
-              // 手写字面量集合——手写即漂移面，病灶 1 的第三处同步点）
+              // 手写字面量集合——手写即漂移点，问题点 1 的第三处同步点）
               enum: [...AGENT_EVENT_TYPE_NAMES]
             }
           }
@@ -7542,7 +7596,7 @@ function updateFromEvent(record, event) {
       return applyToolStart(record, event);
     case "tool_end":
       return applyToolEnd(record, event);
-    // ── turn_end：闭合当前 turn ──
+    // ── turn_end：结束当前 turn ──
     case "turn_end":
       return applyTurnEnd(record);
     // ── message_end：usage 增量累加 + totalTokens 累加 ──
@@ -7558,7 +7612,7 @@ function updateFromEvent(record, event) {
     case "activity":
       return;
     // ── armed：武装确认回执（[D3 协议版 P6]，协议语义见 contract-types）——监控
-    //    信号不进 record 投影，消费方 = 宿主等待门 + run 事件 journal（C3 第④步
+    //    信号不进 record 派生视图，消费方 = 宿主等待门 + run 事件 journal（C3 第④步
     //    双侧 reducer no-op 义务的 SDK 侧）
     case "armed":
       return;
@@ -7781,8 +7835,6 @@ var ENGINE_ENV_DENY_LIST = [
   "TAIJI_AGENT_PACKAGED",
   "TAIJI_RUNTIME_TOKEN",
   "TAIJI_AGENT_API_KEY",
-  "TAIJI_SUBAGENT_RELAY_SESSION_ID",
-  "TAIJI_SUBAGENT_RELAY_RECORD_ID",
   // 预设回落事实（env 名 SSOT = shared PRESET_FALLBACK_ENV_KEYS）：「本进程本次运行」
   // 事实只对 runtime 直接 spawn 的 pi 成立，引擎一跳继承会造成子 agent pi 假披露
   "TAIJI_PRESET_FALLBACK_FROM",
@@ -7793,9 +7845,11 @@ var ENGINE_ENV_L0_INFRA_KEYS = [
   "TAIJI_AGENT_ENGINE_NODE",
   "ELECTRON_RUN_AS_NODE",
   "TAIJI_AGENT_SUBAGENT",
-  "TAIJI_SUBAGENT_RELAY_SOCKET",
-  "TAIJI_SUBAGENT_RELAY_NODE",
-  "TAIJI_SUBAGENT_RELAY_SCRIPT"
+  // [M3] control 两键（键名 SSOT = src/control-env.ts）：runtime 注入主 pi 与引擎的
+  // L0 基础设施键，嵌套 task pi 经引擎出站 env 继承同值。刻意不进 ENGINE_ENV_DENY_LIST：
+  // 引擎/嵌套 extension 是合法读者（transport 选择谓词 + engine_open 归属键）。
+  "TAIJI_SUBAGENT_CONTROL_SOCKET",
+  "TAIJI_SUBAGENT_CONTROL_ROOT_SESSION_ID"
 ];
 var ENV_PREFIX_SHAPE_RE = /^[A-Za-z0-9_]+$/;
 function deleteEnvKeysCaseInsensitive(env, names) {
@@ -7849,11 +7903,6 @@ function injectL0InfraKeys(env, opts) {
   if (opts.engineNode !== void 0) env.TAIJI_AGENT_ENGINE_NODE = opts.engineNode;
   if (opts.electronRunAsNode === true) env.ELECTRON_RUN_AS_NODE = "1";
   env.TAIJI_AGENT_SUBAGENT = "1";
-  if (opts.relay !== void 0) {
-    env.TAIJI_SUBAGENT_RELAY_SOCKET = opts.relay.socket;
-    env.TAIJI_SUBAGENT_RELAY_NODE = opts.relay.node;
-    env.TAIJI_SUBAGENT_RELAY_SCRIPT = opts.relay.script;
-  }
   if (opts.identityEnv !== void 0) {
     for (const [key, value] of Object.entries(opts.identityEnv)) {
       if (value !== void 0) env[key] = value;
@@ -7919,6 +7968,7 @@ var SUBAGENT_IDENTITY_ENV = {
   /** worktree 隔离标志（"true" = 是）。 */
   worktree: "PI_SUBAGENT_WORKTREE"
 };
+var PI_SUBAGENT_TASK_MAX_CHARS = 2e3;
 
 // src/spawn.ts
 var import_node_child_process = require("child_process");
@@ -7972,13 +8022,40 @@ function resolveHostRequestTimeoutMs(opts) {
   }
   return parsed;
 }
-function killOwnProcessGroup() {
+function killOwnProcessGroup(deps = {}) {
   const pid = process.pid;
+  const kill = deps.killFn ?? ((targetPid, signal) => process.kill(targetPid, signal));
+  if ((deps.platform ?? process.platform) === "win32") {
+    const fallbackSelfKill = (reason) => {
+      logger4.warn(`taskkill self-tree failed (${reason}); falling back to self SIGKILL`);
+      try {
+        kill(pid, "SIGKILL");
+      } catch (err) {
+        logger4.warn(
+          `self SIGKILL fallback failed (${String(err)}); descendant pi may linger until runtime sweep`
+        );
+      }
+    };
+    const spawnFn = deps.spawnFn ?? ((command, args, options) => (0, import_node_child_process.spawn)(command, [...args], options));
+    try {
+      const child = spawnFn("taskkill", ["/PID", String(pid), "/T", "/F"], {
+        stdio: "ignore",
+        windowsHide: true
+      });
+      child.on("error", (err) => {
+        fallbackSelfKill(String(err));
+      });
+      child.unref?.();
+    } catch (err) {
+      fallbackSelfKill(`spawn threw: ${String(err)}`);
+    }
+    return;
+  }
   try {
-    process.kill(-pid, "SIGKILL");
+    kill(-pid, "SIGKILL");
   } catch (err) {
     logger4.warn(`process-group kill failed (${String(err)}), falling back to self kill`);
-    process.kill(pid, "SIGKILL");
+    kill(pid, "SIGKILL");
   }
 }
 function armEngineSelfDestruct(opts) {
@@ -8268,63 +8345,19 @@ function cleanupSiblingStderrLogs(logPath, env, prefix, now) {
 // src/zcode-db-paths.ts
 var ZCODE_HOST_DB_SUFFIX = [".zcode", "cli", "db", "db.sqlite"];
 var ZCODE_ISOLATED_DB_SEGMENTS = ["engines", "zcode", "session-db", "db.sqlite"];
+var ZCODE_PI_SYNCED_PROVIDER_CONFIG_SEGMENTS = [
+  "engines",
+  "zcode",
+  "pi-synced-provider-config.json"
+];
 
-// src/relay-env.ts
-var RELAY_ENV_SOCKET = "TAIJI_SUBAGENT_RELAY_SOCKET";
-var RELAY_ENV_NODE = "TAIJI_SUBAGENT_RELAY_NODE";
-var RELAY_ENV_SCRIPT = "TAIJI_SUBAGENT_RELAY_SCRIPT";
-var RELAY_ENV_SESSION_ID = "TAIJI_SUBAGENT_RELAY_SESSION_ID";
-var RELAY_ENV_RECORD_ID = "TAIJI_SUBAGENT_RELAY_RECORD_ID";
-var RELAY_PROTOCOL_VERSION = 1;
-var RELAY_EXIT_CODES = {
-  /** 握手被拒：协议版本不匹配（安装损坏，重装应用）。 */
-  VERSION_MISMATCH: 10,
-  /** relay socket 不可达（runtime 未运行或已重启）。 */
-  SOCKET_UNREACHABLE: 11,
-  /** socket 中途断开（runtime 崩溃等）——代理生命线断即退。 */
-  SOCKET_CLOSED: 12,
-  /** 归属 env（SESSION_ID/RECORD_ID）缺失——防无归属帧污染广播。 */
-  MISSING_IDENTITY: 13
-};
-function isRelayActive(env) {
-  return Boolean(env[RELAY_ENV_SOCKET] && env[RELAY_ENV_NODE] && env[RELAY_ENV_SCRIPT]);
-}
-function readRelayForwardEnv(env) {
-  const socket = env[RELAY_ENV_SOCKET];
-  const node = env[RELAY_ENV_NODE];
-  const script = env[RELAY_ENV_SCRIPT];
-  if (!isRelayActive(env)) return void 0;
-  return { socket, node, script };
+// src/control-env.ts
+var CONTROL_ENV_SOCKET = "TAIJI_SUBAGENT_CONTROL_SOCKET";
+var CONTROL_ENV_ROOT_SESSION_ID = "TAIJI_SUBAGENT_CONTROL_ROOT_SESSION_ID";
+function isControlEnvActive(env) {
+  return Boolean(env[CONTROL_ENV_SOCKET]);
 }
 
-// src/relay-frames.ts
-var RELAY_FRAME_KINDS = {
-  handshake: "handshake",
-  accept: "accept",
-  reject: "reject",
-  data: "data",
-  exit: "exit",
-  /**
-   * goodbye（代理 → runtime，v1）：代理被宿主终止（SIGTERM/SIGINT）前的预告帧——
-   * 宿主侧的正常收割（agent_settled 后杀代理）与异常断连（宿主崩溃/主 pi 死）在
-   * runtime 侧都表现为 socket close，无法区分；goodbye 让正常收割显式自报，runtime
-   * 据此把后续 close 的日志从 warn（kill-on-disconnect）降级为 info（reaped，正常
-   * teardown）。kill 行为本身不变（预告后 child 仍由 runtime 收割）。
-   */
-  goodbye: "goodbye"
-};
-var RELAY_FRAME_DIRS = {
-  down: "down",
-  up: "up",
-  upStderr: "up-stderr"
-};
-var RELAY_REJECT_REASONS = {
-  version: "version",
-  identity: "identity",
-  duplicate: "duplicate",
-  malformed: "malformed"
-};
-
 // src/best-effort.ts
 var logger5 = getLogger("subagents");
 function bestEffort(err, context, level = "debug") {
@@ -8424,6 +8457,8 @@ function runEngineCliEntry(opts) {
 0 && (module.exports = {
   AGENT_EVENT_TYPE_NAMES,
   CANCEL_SETTLE_GRACE_MS,
+  CONTROL_ENV_ROOT_SESSION_ID,
+  CONTROL_ENV_SOCKET,
   DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS,
   DEFAULT_KILL_GRACE_MS,
   DEFAULT_NATIVE_INTERRUPT_GRACE_MS,
@@ -8439,7 +8474,11 @@ function runEngineCliEntry(opts) {
   ENGINE_PROTOCOL_ERROR_CODES,
   ENGINE_PROTOCOL_SCHEMAS,
   ENGINE_PROTOCOL_VERSION,
+  ENGINE_SPAWN_DELIVERY_ERROR_CODES,
+  ENGINE_SPAWN_DELIVERY_ERROR_RECOVERY,
   ENGINE_TIMEOUT_RECOVERY,
+  ENGINE_TRANSPORT_ERROR_CODES,
+  ENGINE_TRANSPORT_ERROR_RECOVERY,
   EngineSdkError,
   ExecutionNestingContext,
   FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS,
@@ -8447,17 +8486,8 @@ function runEngineCliEntry(opts) {
   HOST_TIMEOUT_ABORT_REASON,
   NESTED_SPAWN_ENV,
   NestedSpawnRejectedError,
+  PI_SUBAGENT_TASK_MAX_CHARS,
   PROTOCOL_METHODS,
-  RELAY_ENV_NODE,
-  RELAY_ENV_RECORD_ID,
-  RELAY_ENV_SCRIPT,
-  RELAY_ENV_SESSION_ID,
-  RELAY_ENV_SOCKET,
-  RELAY_EXIT_CODES,
-  RELAY_FRAME_DIRS,
-  RELAY_FRAME_KINDS,
-  RELAY_PROTOCOL_VERSION,
-  RELAY_REJECT_REASONS,
   REVERSE_CHANNELS,
   REVERSE_CHANNEL_TIMEOUT_CLASS,
   REVERSE_REQUEST_TIMEOUT_MS,
@@ -8469,11 +8499,15 @@ function runEngineCliEntry(opts) {
   SHARED_POOL_KEY,
   STDERR_TAIL_CHARS,
   STDOUT_TAIL_ECHO_CHARS,
+  SUBAGENT_CONTROL_CLOSED_REASONS,
+  SUBAGENT_CONTROL_FRAME_KINDS,
+  SUBAGENT_CONTROL_PROTOCOL_VERSION,
   SUBAGENT_IDENTITY_ENV,
   SUPPORTED_PROTOCOL_RANGE,
   TAIJI_DATA_DIR_ENV,
   ZCODE_HOST_DB_SUFFIX,
   ZCODE_ISOLATED_DB_SEGMENTS,
+  ZCODE_PI_SYNCED_PROVIDER_CONFIG_SEGMENTS,
   abortWithFallback,
   aggregateUsage,
   armEngineSelfDestruct,
@@ -8498,17 +8532,20 @@ function runEngineCliEntry(opts) {
   extractAndValidateStructuredOutput,
   getLogger,
   hostKindOf,
+  isControlEnvActive,
   isEngineErrorPassthroughCode,
   isEngineProtocolErrorCode,
   isNotificationFrame,
   isPidAlive,
   isProtocolVersionCompatible,
-  isRelayActive,
   isRequestFrame,
   isResponseFrame,
   isReverseRequestFrame,
+  isSubagentControlClosedReason,
+  isSubagentControlFrameKind,
   isUiResponse,
   killChain,
+  killOwnProcessGroup,
   killPidChain,
   notificationFrameSchema,
   parseChannel,
@@ -8517,7 +8554,6 @@ function runEngineCliEntry(opts) {
   probePidAlive,
   protocolErrorSchema,
   pumpNdjsonLines,
-  readRelayForwardEnv,
   replayJournal,
   requestFrameSchema,
   resetDataDirWarnForTests,

package/dist/index.d.cts

@@ -1,7 +1,7 @@
-export { CANCEL_SETTLE_GRACE_MS, ENGINE_PROTOCOL_SCHEMAS, ENGINE_PROTOCOL_VERSION, FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS, HANDSHAKE_TIMEOUT_MS, HostAskUserParams, HostAskUserResult, HostChildSpawnedParams, HostChildStateChangedParams, HostHandleReadyParams, HostLogParams, HostStreamDeltaParams, REVERSE_CHANNELS, REVERSE_CHANNEL_TIMEOUT_CLASS, REVERSE_REQUEST_TIMEOUT_MS, ReverseChannel, ReverseRequestTimeoutClass, SET_MODEL_REQUEST_TIMEOUT_MS, SET_MODEL_STAGE_TIMEOUT_MS, STDERR_TAIL_CHARS, SUPPORTED_PROTOCOL_RANGE, errorResponseFrameSchema, isProtocolVersionCompatible, notificationFrameSchema, protocolErrorSchema, requestFrameSchema, reverseRequestFrameSchema, runSessionParamsSchema, successResponseFrameSchema } from './protocol/index.cjs';
-export { a as ENGINE_ERROR_CODE_PREFIX, b as ENGINE_PROTOCOL_ERROR_CODES, c as ENGINE_TIMEOUT_RECOVERY, d as EngineProtocolErrorCode, E as EngineSdkError, e as ErrorResponseFrame, f as EventNotificationParams, N as NotificationFrame, P as ProtocolError, R as RequestFrame, g as ResponseFrame, h as ReverseRequestFrame, i as ReverseResponseResult, S as SET_MODEL_ERROR_CODES, j as SET_MODEL_NOT_ACTIVE_CODE, k as STDOUT_TAIL_ECHO_CHARS, l as SetModelErrorCode, m as SuccessResponseFrame, n as assertChatConversationSupported, o as engineConversationUnsupportedError, p as engineProtocolMismatchError, q as engineSetModelUnsupportedError, r as engineTimeoutDetail, s as isEngineErrorPassthroughCode, t as isEngineProtocolErrorCode, u as isNotificationFrame, v as isRequestFrame, w as isResponseFrame, x as isReverseRequestFrame, y as schemaEmulationFailedDetail } from './error-codes-f-UO4a8D.cjs';
-export { C as CancelParams, c as CancelResult, D as DisposeParams, d as DisposeResult, b as InitializeParams, I as InitializeResult, L as ListModelsParams, e as ListModelsResult, P as PROTOCOL_METHODS, f as PingParams, g as PingResult, h as ProbeParams, i as ProtocolMethod, j as ProtocolParamsMap, k as ProtocolResultMap, l as ReadParams, R as RunContextParams, m as RunParams, n as RunResult, o as RunResumeParams, S as SetModelParams, a as SetModelResult, V as ValidateModelParams, p as ValidateModelResult } from './methods-BLxg4ZFr.cjs';
-export { g as AGENT_EVENT_TYPE_NAMES, b as AgentCallOpts, A as AgentEvent, h as AgentEventTypeName, i as AgentFailureKind, c as AgentOutcome, j as AgentOutcomeUsage, k as AgentUsage, a as AgentUsageTotal, l as AssertMutuallyAssignable, d as EngineCapabilities, E as EngineHandleData, m as EngineProcessModel, I as InternalToolCall, f as ModelCatalogEntry, M as ModelRef, P as ProbeReport, R as ReplayedTurn, e as ResumeAnchor, S as SessionView, n as ToolCall, o as ToolCallEntry, p as ToolCallResult, T as Turn, W as WorktreeHandle } from './contract-types-jSa1g28F.cjs';
+export { CANCEL_SETTLE_GRACE_MS, ENGINE_PROTOCOL_SCHEMAS, ENGINE_PROTOCOL_VERSION, FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS, HANDSHAKE_TIMEOUT_MS, HostAskUserParams, HostAskUserResult, HostChildSpawnedParams, HostChildStateChangedParams, HostHandleReadyParams, HostLogParams, HostStreamDeltaParams, REVERSE_CHANNELS, REVERSE_CHANNEL_TIMEOUT_CLASS, REVERSE_REQUEST_TIMEOUT_MS, ReverseChannel, ReverseRequestTimeoutClass, SET_MODEL_REQUEST_TIMEOUT_MS, SET_MODEL_STAGE_TIMEOUT_MS, STDERR_TAIL_CHARS, SUBAGENT_CONTROL_CLOSED_REASONS, SUBAGENT_CONTROL_FRAME_KINDS, SUBAGENT_CONTROL_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_RANGE, SubagentControlClosedReason, SubagentControlFrameKind, errorResponseFrameSchema, isProtocolVersionCompatible, isSubagentControlClosedReason, isSubagentControlFrameKind, notificationFrameSchema, protocolErrorSchema, requestFrameSchema, reverseRequestFrameSchema, runSessionParamsSchema, successResponseFrameSchema } from './protocol/index.cjs';
+export { a as ENGINE_ERROR_CODE_PREFIX, b as ENGINE_PROTOCOL_ERROR_CODES, c as ENGINE_SPAWN_DELIVERY_ERROR_CODES, d as ENGINE_SPAWN_DELIVERY_ERROR_RECOVERY, e as ENGINE_TIMEOUT_RECOVERY, f as ENGINE_TRANSPORT_ERROR_CODES, g as ENGINE_TRANSPORT_ERROR_RECOVERY, h as EngineProtocolErrorCode, E as EngineSdkError, i as EngineSpawnDeliveryErrorCode, j as EngineTransportErrorCode, k as ErrorResponseFrame, l as EventNotificationParams, N as NotificationFrame, P as ProtocolError, R as RequestFrame, m as ResponseFrame, n as ReverseRequestFrame, o as ReverseResponseResult, S as SET_MODEL_ERROR_CODES, p as SET_MODEL_NOT_ACTIVE_CODE, q as STDOUT_TAIL_ECHO_CHARS, r as SetModelErrorCode, s as SuccessResponseFrame, t as assertChatConversationSupported, u as engineConversationUnsupportedError, v as engineProtocolMismatchError, w as engineSetModelUnsupportedError, x as engineTimeoutDetail, y as isEngineErrorPassthroughCode, z as isEngineProtocolErrorCode, A as isNotificationFrame, B as isRequestFrame, C as isResponseFrame, D as isReverseRequestFrame, F as schemaEmulationFailedDetail } from './error-codes-D_aPibUt.cjs';
+export { C as CancelParams, c as CancelResult, D as DisposeParams, d as DisposeResult, b as InitializeParams, I as InitializeResult, L as ListModelsParams, e as ListModelsResult, P as PROTOCOL_METHODS, f as PingParams, g as PingResult, h as ProbeParams, i as ProtocolMethod, j as ProtocolParamsMap, k as ProtocolResultMap, l as ReadParams, R as RunContextParams, m as RunParams, n as RunResult, o as RunResumeParams, S as SetModelParams, a as SetModelResult, V as ValidateModelParams, p as ValidateModelResult } from './methods-CHiDwvRK.cjs';
+export { g as AGENT_EVENT_TYPE_NAMES, b as AgentCallOpts, A as AgentEvent, h as AgentEventTypeName, i as AgentFailureKind, c as AgentOutcome, j as AgentOutcomeUsage, k as AgentUsage, a as AgentUsageTotal, l as AssertMutuallyAssignable, d as EngineCapabilities, E as EngineHandleData, m as EngineProcessModel, I as InternalToolCall, f as ModelCatalogEntry, M as ModelRef, P as ProbeReport, R as ReplayedTurn, e as ResumeAnchor, S as SessionView, n as ToolCall, o as ToolCallEntry, p as ToolCallResult, T as Turn, W as WorktreeHandle } from './contract-types-BUHUMF9R.cjs';
 export { SCHEMA_EMULATION_TAIL_CHARS, StructuredOutputResult, buildSchemaEmulationSegment, extractAndValidateStructuredOutput } from './schema-emulation.cjs';
 export { ExecutionNestingContext, ExecutionNestingState, NESTED_SPAWN_ENV, NestedSpawnRejectedError, SpawnEnv, assertNotNestedSpawn, buildNestedSpawnEnv } from './nesting-guard.cjs';
 export { CoreLogger, LogLevel, LoggerSink, configureLoggerSink, getLogger, resetLoggerSinkForTests } from './logger.cjs';
@@ -11,12 +11,11 @@ export { TAIJI_DATA_DIR_ENV, resetDataDirWarnForTests, resolveEngineDataDir } fr
 export { resolveEngineDir, resolveEnginesRoot, resolveJournalPath, resolvePoolDir, sanitizeSeg } from './paths.cjs';
 export { UiMethod, UiRequest, UiRequestHandler, UiResponse, isUiResponse } from './ui-types.cjs';
 export { ChannelHandler, ExtensionUiRequestLike, ParsedChannel, UiChannelRegistry, createUiChannelRegistry, parseChannel } from './ui-channels.cjs';
-export { BuildOutboundChildEnvOptions, ENGINE_ENV_DENY_LIST, ENGINE_ENV_L0_INFRA_KEYS, ENGINE_ENV_PREFIXES, EngineChildEnvOptions, EngineRelayEnv, buildEngineChildEnv, buildOutboundChildEnv } from './env.cjs';
-export { DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS, ENGINE_ABORT_KILL_GRACE_MS, ENGINE_HOST_REQUEST_TIMEOUT_ENV, EngineChildEnv, EngineSelfDestructOptions, ReverseRequestClock, SpawnEngineChildOptions, armEngineSelfDestruct, pumpNdjsonLines, spawnEngineChild } from './spawn.cjs';
+export { BuildOutboundChildEnvOptions, ENGINE_ENV_DENY_LIST, ENGINE_ENV_L0_INFRA_KEYS, ENGINE_ENV_PREFIXES, EngineChildEnvOptions, buildEngineChildEnv, buildOutboundChildEnv } from './env.cjs';
+export { DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS, ENGINE_ABORT_KILL_GRACE_MS, ENGINE_HOST_REQUEST_TIMEOUT_ENV, EngineChildEnv, EngineSelfDestructOptions, KillOwnProcessGroupDeps, KillOwnProcessGroupSpawnResult, ReverseRequestClock, SpawnEngineChildOptions, armEngineSelfDestruct, killOwnProcessGroup, pumpNdjsonLines, spawnEngineChild } from './spawn.cjs';
 export { ENGINE_NODE_ENV, EngineNodeHostKind, EngineNodeLaunch, EngineNodeLaunchOptions, hostKindOf, probeNodeExecutor, resetEngineNodeProbeCache, resolveEngineNodeLaunch } from './node-executor.cjs';
 export { CleanupResult, DEFAULT_STDERR_KEEP_DAYS, DEFAULT_STDERR_MAX_BYTES, StderrRotationParams, cleanupSiblingStderrLogs, cleanupStaleStderrLogs, isPidAlive, rotateStderrLogIfNeeded, stderrLogPathFor, stderrLogPidOf, stderrRotationParams } from './logs/stderr-rotation.cjs';
-export { ZCODE_HOST_DB_SUFFIX, ZCODE_ISOLATED_DB_SEGMENTS } from './zcode-db-paths.cjs';
-export { RELAY_ENV_NODE, RELAY_ENV_RECORD_ID, RELAY_ENV_SCRIPT, RELAY_ENV_SESSION_ID, RELAY_ENV_SOCKET, RELAY_EXIT_CODES, RELAY_PROTOCOL_VERSION, isRelayActive, readRelayForwardEnv } from './relay-env.cjs';
+export { ZCODE_HOST_DB_SUFFIX, ZCODE_ISOLATED_DB_SEGMENTS, ZCODE_PI_SYNCED_PROVIDER_CONFIG_SEGMENTS } from './zcode-db-paths.cjs';
 export { toErrorMessage } from './error-message.cjs';
 export { BestEffortLevel, bestEffort } from './best-effort.cjs';
 export { replayJournal } from './journal-io.cjs';
@@ -50,38 +49,27 @@ declare const SUBAGENT_IDENTITY_ENV: {
     /** worktree 隔离标志（"true" = 是）。 */
     readonly worktree: "PI_SUBAGENT_WORKTREE";
 };
+/**
+ * [M1 D2] 任务文本进 env 的截断上限（字符数）：写入点 = pi 引擎 spawn-runner 的
+ * applyContentIdentityKeys——写 `params.task` 前 2000 字符 + 截断标记
+ * `…[truncated N chars]`；env 读取点（appendSubagentIdentityEntry）零改动（读 env 值
+ * 即用）。全文以 pi session 文件首条 user 消息与父侧 manifest 为准（manifest 主路径
+ * 保留全文；截断只影响 manifest 缺席时的重建链/P-fallback 投影，降级面逐层判定登记
+ * 见设计 D2 消费方矩阵与 §3.7）。目的：控制面（握手帧）与 execve env 不再随任务正文
+ * 线性膨胀（ARG_MAX/E2BIG 族无界暴露的写入点根因修复）。
+ */
+declare const PI_SUBAGENT_TASK_MAX_CHARS = 2000;
 
-/** 帧类型判别值（kind 字段词表）。as const 值即字面量类型——类型位置同样可用。 */
-declare const RELAY_FRAME_KINDS: {
-    readonly handshake: "handshake";
-    readonly accept: "accept";
-    readonly reject: "reject";
-    readonly data: "data";
-    readonly exit: "exit";
-    /**
-     * goodbye（代理 → runtime，v1）：代理被宿主终止（SIGTERM/SIGINT）前的预告帧——
-     * 宿主侧的正常收割（agent_settled 后杀代理）与异常断连（宿主崩溃/主 pi 死）在
-     * runtime 侧都表现为 socket close，无法区分；goodbye 让正常收割显式自报，runtime
-     * 据此把后续 close 的日志从 warn（kill-on-disconnect）降级为 info（reaped，正常
-     * teardown）。kill 行为本身不变（预告后 child 仍由 runtime 收割）。
-     */
-    readonly goodbye: "goodbye";
-};
-/** 数据泵方向（data 帧 dir 字段词表）。 */
-declare const RELAY_FRAME_DIRS: {
-    readonly down: "down";
-    readonly up: "up";
-    readonly upStderr: "up-stderr";
-};
-/** reject 帧 reason 词表（runtime→代理的拒绝理由；代理对 version 以退出码 10 应答）。 */
-declare const RELAY_REJECT_REASONS: {
-    readonly version: "version";
-    readonly identity: "identity";
-    readonly duplicate: "duplicate";
-    readonly malformed: "malformed";
-};
-type RelayFrameKind = (typeof RELAY_FRAME_KINDS)[keyof typeof RELAY_FRAME_KINDS];
-type RelayFrameDir = (typeof RELAY_FRAME_DIRS)[keyof typeof RELAY_FRAME_DIRS];
-type RelayRejectReason = (typeof RELAY_REJECT_REASONS)[keyof typeof RELAY_REJECT_REASONS];
+/** control socket 路径（runtime 监听 `<dataDir>/run/subagent-<pid>.sock`；Windows 为 named pipe）。 */
+declare const CONTROL_ENV_SOCKET = "TAIJI_SUBAGENT_CONTROL_SOCKET";
+/** 主会话根 id（runtime 注入；嵌套链所有层同值——连接归属与 channel 树的归属键）。 */
+declare const CONTROL_ENV_ROOT_SESSION_ID = "TAIJI_SUBAGENT_CONTROL_ROOT_SESSION_ID";
+/**
+ * transport 选择谓词（D5 选择逻辑的单一实现）：SOCKET 非空 = 托管态 → runtime
+ * transport；空串/缺失 = standalone → local transport（调用方 warn）。消费方 =
+ * EngineClient transport 选择（u-m3-rt-transport）；缺失即 local，不存在
+ * 「注入了一半」的中间态。
+ */
+declare function isControlEnvActive(env: NodeJS.ProcessEnv | Record<string, string | undefined>): boolean;
 
-export { RELAY_FRAME_DIRS, RELAY_FRAME_KINDS, RELAY_REJECT_REASONS, type RelayFrameDir, type RelayFrameKind, type RelayRejectReason, SUBAGENT_IDENTITY_ENV };
+export { CONTROL_ENV_ROOT_SESSION_ID, CONTROL_ENV_SOCKET, PI_SUBAGENT_TASK_MAX_CHARS, SUBAGENT_IDENTITY_ENV, isControlEnvActive };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-export { CANCEL_SETTLE_GRACE_MS, ENGINE_PROTOCOL_SCHEMAS, ENGINE_PROTOCOL_VERSION, FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS, HANDSHAKE_TIMEOUT_MS, HostAskUserParams, HostAskUserResult, HostChildSpawnedParams, HostChildStateChangedParams, HostHandleReadyParams, HostLogParams, HostStreamDeltaParams, REVERSE_CHANNELS, REVERSE_CHANNEL_TIMEOUT_CLASS, REVERSE_REQUEST_TIMEOUT_MS, ReverseChannel, ReverseRequestTimeoutClass, SET_MODEL_REQUEST_TIMEOUT_MS, SET_MODEL_STAGE_TIMEOUT_MS, STDERR_TAIL_CHARS, SUPPORTED_PROTOCOL_RANGE, errorResponseFrameSchema, isProtocolVersionCompatible, notificationFrameSchema, protocolErrorSchema, requestFrameSchema, reverseRequestFrameSchema, runSessionParamsSchema, successResponseFrameSchema } from './protocol/index.js';
-export { a as ENGINE_ERROR_CODE_PREFIX, b as ENGINE_PROTOCOL_ERROR_CODES, c as ENGINE_TIMEOUT_RECOVERY, d as EngineProtocolErrorCode, E as EngineSdkError, e as ErrorResponseFrame, f as EventNotificationParams, N as NotificationFrame, P as ProtocolError, R as RequestFrame, g as ResponseFrame, h as ReverseRequestFrame, i as ReverseResponseResult, S as SET_MODEL_ERROR_CODES, j as SET_MODEL_NOT_ACTIVE_CODE, k as STDOUT_TAIL_ECHO_CHARS, l as SetModelErrorCode, m as SuccessResponseFrame, n as assertChatConversationSupported, o as engineConversationUnsupportedError, p as engineProtocolMismatchError, q as engineSetModelUnsupportedError, r as engineTimeoutDetail, s as isEngineErrorPassthroughCode, t as isEngineProtocolErrorCode, u as isNotificationFrame, v as isRequestFrame, w as isResponseFrame, x as isReverseRequestFrame, y as schemaEmulationFailedDetail } from './error-codes-DnFru4L4.js';
-export { C as CancelParams, c as CancelResult, D as DisposeParams, d as DisposeResult, b as InitializeParams, I as InitializeResult, L as ListModelsParams, e as ListModelsResult, P as PROTOCOL_METHODS, f as PingParams, g as PingResult, h as ProbeParams, i as ProtocolMethod, j as ProtocolParamsMap, k as ProtocolResultMap, l as ReadParams, R as RunContextParams, m as RunParams, n as RunResult, o as RunResumeParams, S as SetModelParams, a as SetModelResult, V as ValidateModelParams, p as ValidateModelResult } from './methods-C2zvZqhP.js';
-export { g as AGENT_EVENT_TYPE_NAMES, b as AgentCallOpts, A as AgentEvent, h as AgentEventTypeName, i as AgentFailureKind, c as AgentOutcome, j as AgentOutcomeUsage, k as AgentUsage, a as AgentUsageTotal, l as AssertMutuallyAssignable, d as EngineCapabilities, E as EngineHandleData, m as EngineProcessModel, I as InternalToolCall, f as ModelCatalogEntry, M as ModelRef, P as ProbeReport, R as ReplayedTurn, e as ResumeAnchor, S as SessionView, n as ToolCall, o as ToolCallEntry, p as ToolCallResult, T as Turn, W as WorktreeHandle } from './contract-types-jSa1g28F.js';
+export { CANCEL_SETTLE_GRACE_MS, ENGINE_PROTOCOL_SCHEMAS, ENGINE_PROTOCOL_VERSION, FORBIDDEN_CREDENTIAL_KEY_FRAGMENTS, HANDSHAKE_TIMEOUT_MS, HostAskUserParams, HostAskUserResult, HostChildSpawnedParams, HostChildStateChangedParams, HostHandleReadyParams, HostLogParams, HostStreamDeltaParams, REVERSE_CHANNELS, REVERSE_CHANNEL_TIMEOUT_CLASS, REVERSE_REQUEST_TIMEOUT_MS, ReverseChannel, ReverseRequestTimeoutClass, SET_MODEL_REQUEST_TIMEOUT_MS, SET_MODEL_STAGE_TIMEOUT_MS, STDERR_TAIL_CHARS, SUBAGENT_CONTROL_CLOSED_REASONS, SUBAGENT_CONTROL_FRAME_KINDS, SUBAGENT_CONTROL_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_RANGE, SubagentControlClosedReason, SubagentControlFrameKind, errorResponseFrameSchema, isProtocolVersionCompatible, isSubagentControlClosedReason, isSubagentControlFrameKind, notificationFrameSchema, protocolErrorSchema, requestFrameSchema, reverseRequestFrameSchema, runSessionParamsSchema, successResponseFrameSchema } from './protocol/index.js';
+export { a as ENGINE_ERROR_CODE_PREFIX, b as ENGINE_PROTOCOL_ERROR_CODES, c as ENGINE_SPAWN_DELIVERY_ERROR_CODES, d as ENGINE_SPAWN_DELIVERY_ERROR_RECOVERY, e as ENGINE_TIMEOUT_RECOVERY, f as ENGINE_TRANSPORT_ERROR_CODES, g as ENGINE_TRANSPORT_ERROR_RECOVERY, h as EngineProtocolErrorCode, E as EngineSdkError, i as EngineSpawnDeliveryErrorCode, j as EngineTransportErrorCode, k as ErrorResponseFrame, l as EventNotificationParams, N as NotificationFrame, P as ProtocolError, R as RequestFrame, m as ResponseFrame, n as ReverseRequestFrame, o as ReverseResponseResult, S as SET_MODEL_ERROR_CODES, p as SET_MODEL_NOT_ACTIVE_CODE, q as STDOUT_TAIL_ECHO_CHARS, r as SetModelErrorCode, s as SuccessResponseFrame, t as assertChatConversationSupported, u as engineConversationUnsupportedError, v as engineProtocolMismatchError, w as engineSetModelUnsupportedError, x as engineTimeoutDetail, y as isEngineErrorPassthroughCode, z as isEngineProtocolErrorCode, A as isNotificationFrame, B as isRequestFrame, C as isResponseFrame, D as isReverseRequestFrame, F as schemaEmulationFailedDetail } from './error-codes-DrNf0gwT.js';
+export { C as CancelParams, c as CancelResult, D as DisposeParams, d as DisposeResult, b as InitializeParams, I as InitializeResult, L as ListModelsParams, e as ListModelsResult, P as PROTOCOL_METHODS, f as PingParams, g as PingResult, h as ProbeParams, i as ProtocolMethod, j as ProtocolParamsMap, k as ProtocolResultMap, l as ReadParams, R as RunContextParams, m as RunParams, n as RunResult, o as RunResumeParams, S as SetModelParams, a as SetModelResult, V as ValidateModelParams, p as ValidateModelResult } from './methods-BdIH3FwS.js';
+export { g as AGENT_EVENT_TYPE_NAMES, b as AgentCallOpts, A as AgentEvent, h as AgentEventTypeName, i as AgentFailureKind, c as AgentOutcome, j as AgentOutcomeUsage, k as AgentUsage, a as AgentUsageTotal, l as AssertMutuallyAssignable, d as EngineCapabilities, E as EngineHandleData, m as EngineProcessModel, I as InternalToolCall, f as ModelCatalogEntry, M as ModelRef, P as ProbeReport, R as ReplayedTurn, e as ResumeAnchor, S as SessionView, n as ToolCall, o as ToolCallEntry, p as ToolCallResult, T as Turn, W as WorktreeHandle } from './contract-types-BUHUMF9R.js';
 export { SCHEMA_EMULATION_TAIL_CHARS, StructuredOutputResult, buildSchemaEmulationSegment, extractAndValidateStructuredOutput } from './schema-emulation.js';
 export { ExecutionNestingContext, ExecutionNestingState, NESTED_SPAWN_ENV, NestedSpawnRejectedError, SpawnEnv, assertNotNestedSpawn, buildNestedSpawnEnv } from './nesting-guard.js';
 export { CoreLogger, LogLevel, LoggerSink, configureLoggerSink, getLogger, resetLoggerSinkForTests } from './logger.js';
@@ -11,12 +11,11 @@ export { TAIJI_DATA_DIR_ENV, resetDataDirWarnForTests, resolveEngineDataDir } fr
 export { resolveEngineDir, resolveEnginesRoot, resolveJournalPath, resolvePoolDir, sanitizeSeg } from './paths.js';
 export { UiMethod, UiRequest, UiRequestHandler, UiResponse, isUiResponse } from './ui-types.js';
 export { ChannelHandler, ExtensionUiRequestLike, ParsedChannel, UiChannelRegistry, createUiChannelRegistry, parseChannel } from './ui-channels.js';
-export { BuildOutboundChildEnvOptions, ENGINE_ENV_DENY_LIST, ENGINE_ENV_L0_INFRA_KEYS, ENGINE_ENV_PREFIXES, EngineChildEnvOptions, EngineRelayEnv, buildEngineChildEnv, buildOutboundChildEnv } from './env.js';
-export { DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS, ENGINE_ABORT_KILL_GRACE_MS, ENGINE_HOST_REQUEST_TIMEOUT_ENV, EngineChildEnv, EngineSelfDestructOptions, ReverseRequestClock, SpawnEngineChildOptions, armEngineSelfDestruct, pumpNdjsonLines, spawnEngineChild } from './spawn.js';
+export { BuildOutboundChildEnvOptions, ENGINE_ENV_DENY_LIST, ENGINE_ENV_L0_INFRA_KEYS, ENGINE_ENV_PREFIXES, EngineChildEnvOptions, buildEngineChildEnv, buildOutboundChildEnv } from './env.js';
+export { DEFAULT_ENGINE_HOST_REQUEST_TIMEOUT_MS, ENGINE_ABORT_KILL_GRACE_MS, ENGINE_HOST_REQUEST_TIMEOUT_ENV, EngineChildEnv, EngineSelfDestructOptions, KillOwnProcessGroupDeps, KillOwnProcessGroupSpawnResult, ReverseRequestClock, SpawnEngineChildOptions, armEngineSelfDestruct, killOwnProcessGroup, pumpNdjsonLines, spawnEngineChild } from './spawn.js';
 export { ENGINE_NODE_ENV, EngineNodeHostKind, EngineNodeLaunch, EngineNodeLaunchOptions, hostKindOf, probeNodeExecutor, resetEngineNodeProbeCache, resolveEngineNodeLaunch } from './node-executor.js';
 export { CleanupResult, DEFAULT_STDERR_KEEP_DAYS, DEFAULT_STDERR_MAX_BYTES, StderrRotationParams, cleanupSiblingStderrLogs, cleanupStaleStderrLogs, isPidAlive, rotateStderrLogIfNeeded, stderrLogPathFor, stderrLogPidOf, stderrRotationParams } from './logs/stderr-rotation.js';
-export { ZCODE_HOST_DB_SUFFIX, ZCODE_ISOLATED_DB_SEGMENTS } from './zcode-db-paths.js';
-export { RELAY_ENV_NODE, RELAY_ENV_RECORD_ID, RELAY_ENV_SCRIPT, RELAY_ENV_SESSION_ID, RELAY_ENV_SOCKET, RELAY_EXIT_CODES, RELAY_PROTOCOL_VERSION, isRelayActive, readRelayForwardEnv } from './relay-env.js';
+export { ZCODE_HOST_DB_SUFFIX, ZCODE_ISOLATED_DB_SEGMENTS, ZCODE_PI_SYNCED_PROVIDER_CONFIG_SEGMENTS } from './zcode-db-paths.js';
 export { toErrorMessage } from './error-message.js';
 export { BestEffortLevel, bestEffort } from './best-effort.js';
 export { replayJournal } from './journal-io.js';
@@ -50,38 +49,27 @@ declare const SUBAGENT_IDENTITY_ENV: {
     /** worktree 隔离标志（"true" = 是）。 */
     readonly worktree: "PI_SUBAGENT_WORKTREE";
 };
+/**
+ * [M1 D2] 任务文本进 env 的截断上限（字符数）：写入点 = pi 引擎 spawn-runner 的
+ * applyContentIdentityKeys——写 `params.task` 前 2000 字符 + 截断标记
+ * `…[truncated N chars]`；env 读取点（appendSubagentIdentityEntry）零改动（读 env 值
+ * 即用）。全文以 pi session 文件首条 user 消息与父侧 manifest 为准（manifest 主路径
+ * 保留全文；截断只影响 manifest 缺席时的重建链/P-fallback 投影，降级面逐层判定登记
+ * 见设计 D2 消费方矩阵与 §3.7）。目的：控制面（握手帧）与 execve env 不再随任务正文
+ * 线性膨胀（ARG_MAX/E2BIG 族无界暴露的写入点根因修复）。
+ */
+declare const PI_SUBAGENT_TASK_MAX_CHARS = 2000;
 
-/** 帧类型判别值（kind 字段词表）。as const 值即字面量类型——类型位置同样可用。 */
-declare const RELAY_FRAME_KINDS: {
-    readonly handshake: "handshake";
-    readonly accept: "accept";
-    readonly reject: "reject";
-    readonly data: "data";
-    readonly exit: "exit";
-    /**
-     * goodbye（代理 → runtime，v1）：代理被宿主终止（SIGTERM/SIGINT）前的预告帧——
-     * 宿主侧的正常收割（agent_settled 后杀代理）与异常断连（宿主崩溃/主 pi 死）在
-     * runtime 侧都表现为 socket close，无法区分；goodbye 让正常收割显式自报，runtime
-     * 据此把后续 close 的日志从 warn（kill-on-disconnect）降级为 info（reaped，正常
-     * teardown）。kill 行为本身不变（预告后 child 仍由 runtime 收割）。
-     */
-    readonly goodbye: "goodbye";
-};
-/** 数据泵方向（data 帧 dir 字段词表）。 */
-declare const RELAY_FRAME_DIRS: {
-    readonly down: "down";
-    readonly up: "up";
-    readonly upStderr: "up-stderr";
-};
-/** reject 帧 reason 词表（runtime→代理的拒绝理由；代理对 version 以退出码 10 应答）。 */
-declare const RELAY_REJECT_REASONS: {
-    readonly version: "version";
-    readonly identity: "identity";
-    readonly duplicate: "duplicate";
-    readonly malformed: "malformed";
-};
-type RelayFrameKind = (typeof RELAY_FRAME_KINDS)[keyof typeof RELAY_FRAME_KINDS];
-type RelayFrameDir = (typeof RELAY_FRAME_DIRS)[keyof typeof RELAY_FRAME_DIRS];
-type RelayRejectReason = (typeof RELAY_REJECT_REASONS)[keyof typeof RELAY_REJECT_REASONS];
+/** control socket 路径（runtime 监听 `<dataDir>/run/subagent-<pid>.sock`；Windows 为 named pipe）。 */
+declare const CONTROL_ENV_SOCKET = "TAIJI_SUBAGENT_CONTROL_SOCKET";
+/** 主会话根 id（runtime 注入；嵌套链所有层同值——连接归属与 channel 树的归属键）。 */
+declare const CONTROL_ENV_ROOT_SESSION_ID = "TAIJI_SUBAGENT_CONTROL_ROOT_SESSION_ID";
+/**
+ * transport 选择谓词（D5 选择逻辑的单一实现）：SOCKET 非空 = 托管态 → runtime
+ * transport；空串/缺失 = standalone → local transport（调用方 warn）。消费方 =
+ * EngineClient transport 选择（u-m3-rt-transport）；缺失即 local，不存在
+ * 「注入了一半」的中间态。
+ */
+declare function isControlEnvActive(env: NodeJS.ProcessEnv | Record<string, string | undefined>): boolean;
 
-export { RELAY_FRAME_DIRS, RELAY_FRAME_KINDS, RELAY_REJECT_REASONS, type RelayFrameDir, type RelayFrameKind, type RelayRejectReason, SUBAGENT_IDENTITY_ENV };
+export { CONTROL_ENV_ROOT_SESSION_ID, CONTROL_ENV_SOCKET, PI_SUBAGENT_TASK_MAX_CHARS, SUBAGENT_IDENTITY_ENV, isControlEnvActive };