@zihanw/pi-forge 0.3.2 → 0.4.0

package/dist/subagent/request.js

@@ -0,0 +1,122 @@
+import { validateAgentProfile } from "../agent-profile.js";
+import { subagentPromptStackFingerprint, subagentSourceProfileFingerprint } from "./canonical.js";
+import { SUBAGENT_CONTRACT_VERSION } from "./types.js";
+import { error, isFingerprint, isNonNegativeInteger, isPositiveInteger, isRecord, validateAccessRequest, validateFingerprint, validateLimitRequest, validateMediaReference, validateOpaqueId, validateSelectedContext } from "./validation.js";
+export function validateAgentRequest(value) {
+    const diagnostics = [];
+    if (!isRecord(value))
+        return [error("request.type", "AgentRequest must be an object.", "$")];
+    if (value.schemaVersion !== SUBAGENT_CONTRACT_VERSION)
+        diagnostics.push(error("request.schema-version", "schemaVersion must be 1.", "schemaVersion"));
+    validateOpaqueId(value.requestId, "requestId", diagnostics);
+    validateOpaqueId(value.profileId, "profileId", diagnostics);
+    if (value.expectedProfileFingerprint !== undefined)
+        validateFingerprint(value.expectedProfileFingerprint, "expectedProfileFingerprint", diagnostics);
+    if (!isRecord(value.input)) {
+        diagnostics.push(error("request.input", "input must be an object.", "input"));
+    }
+    else {
+        const text = value.input.text;
+        const media = value.input.media;
+        if (typeof text !== "string")
+            diagnostics.push(error("request.input-text", "input.text must be a string.", "input.text"));
+        if (media !== undefined && !Array.isArray(media))
+            diagnostics.push(error("request.media", "input.media must be an array.", "input.media"));
+        if (Array.isArray(media))
+            media.forEach((item, index) => validateMediaReference(item, `input.media[${index}]`, diagnostics));
+        if (typeof text === "string" && !text.trim() && (!Array.isArray(media) || media.length === 0)) {
+            diagnostics.push(error("request.empty-task", "The delegated task must contain text or media.", "input"));
+        }
+    }
+    if (value.selectedContext !== undefined)
+        validateSelectedContext(value.selectedContext, "selectedContext", diagnostics);
+    validateAccessRequest(value.access, "access", diagnostics);
+    validateLimitRequest(value.limits, "limits", diagnostics);
+    if (!isRecord(value.resultProjection) || !isPositiveInteger(value.resultProjection.maxChars)) {
+        diagnostics.push(error("request.result-projection", "resultProjection.maxChars must be a positive integer.", "resultProjection.maxChars"));
+    }
+    if (!isRecord(value.parent)) {
+        diagnostics.push(error("request.parent", "parent must be an object.", "parent"));
+    }
+    else {
+        if (!isNonNegativeInteger(value.parent.depth))
+            diagnostics.push(error("request.depth", "parent.depth must be a non-negative integer.", "parent.depth"));
+        if (!isPositiveInteger(value.parent.maxDepth))
+            diagnostics.push(error("request.max-depth", "parent.maxDepth must be a positive integer.", "parent.maxDepth"));
+        if (isNonNegativeInteger(value.parent.depth) && isPositiveInteger(value.parent.maxDepth) && value.parent.depth >= value.parent.maxDepth) {
+            diagnostics.push(error("request.depth-limit", "parent.depth must be less than parent.maxDepth.", "parent.depth"));
+        }
+        if (value.parent.runId !== undefined)
+            validateOpaqueId(value.parent.runId, "parent.runId", diagnostics);
+        if (value.parent.sessionId !== undefined)
+            validateOpaqueId(value.parent.sessionId, "parent.sessionId", diagnostics);
+    }
+    if (typeof value.remoteEgressConsent !== "boolean")
+        diagnostics.push(error("request.egress-consent", "remoteEgressConsent must be boolean.", "remoteEgressConsent"));
+    return diagnostics;
+}
+export function validateAgentProfileSnapshot(value) {
+    const diagnostics = [];
+    if (!isRecord(value))
+        return [error("snapshot.type", "AgentProfileSnapshot must be an object.", "$")];
+    if (value.schemaVersion !== SUBAGENT_CONTRACT_VERSION)
+        diagnostics.push(error("snapshot.schema-version", "schemaVersion must be 1.", "schemaVersion"));
+    if (!isRecord(value.profile))
+        diagnostics.push(error("snapshot.profile", "profile must be an object.", "profile"));
+    else {
+        try {
+            for (const profileDiagnostic of validateAgentProfile(value.profile)) {
+                diagnostics.push({
+                    level: profileDiagnostic.level,
+                    code: "snapshot.profile-validation",
+                    path: profileDiagnostic.field ? `profile.${profileDiagnostic.field}` : "profile",
+                    message: profileDiagnostic.message,
+                });
+            }
+        }
+        catch (validationError) {
+            diagnostics.push(error("snapshot.profile-malformed", `Malformed profile: ${validationError instanceof Error ? validationError.message : String(validationError)}`, "profile"));
+        }
+    }
+    if (!(value.promptStack === null || isRecord(value.promptStack)))
+        diagnostics.push(error("snapshot.stack", "promptStack must be an object or null.", "promptStack"));
+    if (!Array.isArray(value.dependencies))
+        diagnostics.push(error("snapshot.dependencies", "dependencies must be an array.", "dependencies"));
+    else {
+        const identities = new Set();
+        value.dependencies.forEach((dependency, index) => {
+            if (!isRecord(dependency) || (dependency.kind !== "macro" && dependency.kind !== "slot") || typeof dependency.name !== "string" || typeof dependency.identity !== "string") {
+                diagnostics.push(error("snapshot.dependency", "Dependency requires kind, name, and identity.", `dependencies[${index}]`));
+                return;
+            }
+            if (identities.has(dependency.identity))
+                diagnostics.push(error("snapshot.duplicate-dependency", `Duplicate dependency identity: ${dependency.identity}`, `dependencies[${index}].identity`));
+            identities.add(dependency.identity);
+        });
+    }
+    validateFingerprint(value.profileFingerprint, "profileFingerprint", diagnostics);
+    if (value.promptStackFingerprint !== null)
+        validateFingerprint(value.promptStackFingerprint, "promptStackFingerprint", diagnostics);
+    if (isRecord(value.profile) && isFingerprint(value.profileFingerprint)) {
+        if (subagentSourceProfileFingerprint(value.profile) !== value.profileFingerprint) {
+            diagnostics.push(error("snapshot.profile-fingerprint", "profileFingerprint does not match profile.", "profileFingerprint"));
+        }
+    }
+    if (isRecord(value.promptStack) && isFingerprint(value.promptStackFingerprint)) {
+        if (subagentPromptStackFingerprint(value.promptStack) !== value.promptStackFingerprint) {
+            diagnostics.push(error("snapshot.stack-fingerprint", "promptStackFingerprint does not match promptStack.", "promptStackFingerprint"));
+        }
+    }
+    if (value.promptStack === null && value.promptStackFingerprint !== null) {
+        diagnostics.push(error("snapshot.null-stack-fingerprint", "A null promptStack must have a null promptStackFingerprint.", "promptStackFingerprint"));
+    }
+    if (isRecord(value.profile)) {
+        const referencedStack = value.profile.promptStack;
+        if (referencedStack === null && value.promptStack !== null)
+            diagnostics.push(error("snapshot.unexpected-stack", "Profile references no prompt stack, but the snapshot contains one.", "promptStack"));
+        if (typeof referencedStack === "string" && (!isRecord(value.promptStack) || value.promptStack.id !== referencedStack))
+            diagnostics.push(error("snapshot.stack-reference", "Snapshot promptStack does not match profile.promptStack.", "promptStack"));
+    }
+    return diagnostics;
+}
+//# sourceMappingURL=request.js.map

package/dist/subagent/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/subagent/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAqB,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAyE,MAAM,YAAY,CAAC;AAC9H,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/O,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,aAAa,KAAK,yBAAyB;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,EAAE,eAAe,CAAC,CAAC,CAAC;IACtJ,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,0BAA0B,KAAK,SAAS;QAAE,mBAAmB,CAAC,KAAK,CAAC,0BAA0B,EAAE,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAErJ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAChC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,8BAA8B,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1H,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,+BAA+B,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3I,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,eAAe,KAAK,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAC7H,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/F,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,gDAAgD,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1G,CAAC;IACF,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,uBAAuB,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;IACxH,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3D,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9F,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,uDAAuD,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC5I,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,8CAA8C,EAAE,cAAc,CAAC,CAAC,CAAC;QACxJ,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,6CAA6C,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC9J,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,iDAAiD,EAAE,cAAc,CAAC,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QACxG,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,SAAS;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,sCAAsC,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrK,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IAC1D,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtG,IAAI,KAAK,CAAC,aAAa,KAAK,yBAAyB;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,0BAA0B,EAAE,eAAe,CAAC,CAAC,CAAC;IACvJ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,4BAA4B,EAAE,SAAS,CAAC,CAAC,CAAC;SAC9G,CAAC;QACL,IAAI,CAAC;YACJ,KAAK,MAAM,iBAAiB,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAkC,CAAC,EAAE,CAAC;gBAChG,WAAW,CAAC,IAAI,CAAC;oBAChB,KAAK,EAAE,iBAAiB,CAAC,KAAK;oBAC9B,IAAI,EAAE,6BAA6B;oBACnC,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;oBAChF,OAAO,EAAE,iBAAiB,CAAC,OAAO;iBAClC,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,sBAAsB,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAChL,CAAC;IACF,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,wCAAwC,EAAE,aAAa,CAAC,CAAC,CAAC;IACrK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,gCAAgC,EAAE,cAAc,CAAC,CAAC,CAAC;SACtI,CAAC;QACL,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;YAChD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC5K,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,+CAA+C,EAAE,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC1H,OAAO;YACR,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE,kCAAkC,UAAU,CAAC,QAAQ,EAAE,EAAE,gBAAgB,KAAK,YAAY,CAAC,CAAC,CAAC;YAC9L,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,mBAAmB,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI;QAAE,mBAAmB,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,EAAE,WAAW,CAAC,CAAC;IACpI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,IAAI,gCAAgC,CAAC,KAAK,CAAC,OAAkC,CAAC,KAAK,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7G,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,4CAA4C,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC7H,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAChF,IAAI,8BAA8B,CAAC,KAAK,CAAC,WAAqC,CAAC,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAClH,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,oDAAoD,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACvI,CAAC;IACF,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;QACzE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,iCAAiC,EAAE,6DAA6D,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACrJ,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAClD,IAAI,eAAe,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,oEAAoE,EAAE,aAAa,CAAC,CAAC,CAAC;QACtM,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,eAAe,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,0DAA0D,EAAE,aAAa,CAAC,CAAC,CAAC;IACvP,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC"}

package/dist/subagent/response.d.ts

@@ -0,0 +1,8 @@
+import { type AgentExecutionPlan, type AgentRequest, type SubagentDiagnostic } from "./types.ts";
+export declare function validateAgentResponse(response: unknown, context?: {
+    request?: AgentRequest;
+    plan?: AgentExecutionPlan;
+}): SubagentDiagnostic[];
+export declare function validateSubagentArtifactReference(value: unknown, path?: string): SubagentDiagnostic[];
+export declare function validateSubagentTraceReference(value: unknown, path?: string): SubagentDiagnostic[];
+//# sourceMappingURL=response.d.ts.map

package/dist/subagent/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../src/subagent/response.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,KAAK,kBAAkB,EAAE,KAAK,YAAY,EAAE,KAAK,kBAAkB,EAA0B,MAAM,YAAY,CAAC;AAGpJ,wBAAgB,qBAAqB,CACpC,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAC7D,kBAAkB,EAAE,CAiDtB;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAa,GAAG,kBAAkB,EAAE,CAUzG;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAU,GAAG,kBAAkB,EAAE,CAQnG"}

package/dist/subagent/response.js

@@ -0,0 +1,155 @@
+import { canonicalSubagentJson } from "./canonical.js";
+import { SUBAGENT_CONTRACT_VERSION } from "./types.js";
+import { SUBAGENT_LIMIT_NAMES, error, isIsoDate, isNonNegativeFinite, isPositiveInteger, isRecord, isSafeRelativePath, validateAccessReceipt, validateFingerprint, validateLimitReceipt, validateModelReference, validateNamespace, validateOpaqueId, validateUniqueStringArray, validateUsage } from "./validation.js";
+export function validateAgentResponse(response, context) {
+    const diagnostics = [];
+    if (!isRecord(response))
+        return [error("response.type", "AgentResponse must be an object.", "$")];
+    if (!SUBAGENT_RESPONSE_STATUSES.includes(response.status))
+        diagnostics.push(error("response.status", "Unsupported response status.", "status"));
+    if (response.schemaVersion !== SUBAGENT_CONTRACT_VERSION)
+        diagnostics.push(error("response.schema-version", "schemaVersion must be 1.", "schemaVersion"));
+    for (const id of ["requestId", "runId", "backendId"])
+        validateOpaqueId(response[id], id, diagnostics);
+    validateFingerprint(response.profileFingerprint, "profileFingerprint", diagnostics);
+    validateFingerprint(response.executionFingerprint, "executionFingerprint", diagnostics);
+    validateModelReference(response.model, "model", diagnostics);
+    if (!Array.isArray(response.effectiveToolIds))
+        diagnostics.push(error("response.tools", "effectiveToolIds must be a string array.", "effectiveToolIds"));
+    else
+        validateUniqueStringArray(response.effectiveToolIds, "effectiveToolIds", diagnostics);
+    if (!isNonNegativeFinite(response.durationMs))
+        diagnostics.push(error("response.duration", "durationMs must be a non-negative finite number.", "durationMs"));
+    if (!Array.isArray(response.artifacts))
+        diagnostics.push(error("response.artifacts", "artifacts must be an array.", "artifacts"));
+    else
+        response.artifacts.forEach((artifact, index) => diagnostics.push(...validateSubagentArtifactReference(artifact, `artifacts[${index}]`)));
+    if (response.trace !== undefined) {
+        diagnostics.push(...validateSubagentTraceReference(response.trace, "trace"));
+        if (isRecord(response.trace) && response.trace.backendId !== response.backendId)
+            diagnostics.push(error("response.trace-backend", "Trace backendId must match response backendId.", "trace.backendId"));
+    }
+    if (response.usage !== undefined)
+        validateUsage(response.usage, "usage", diagnostics);
+    if (!isRecord(response.enforcement))
+        diagnostics.push(error("response.enforcement", "enforcement must be an object.", "enforcement"));
+    else {
+        validateAccessReceipt(response.enforcement.access, "enforcement.access", diagnostics);
+        validateLimitReceipt(response.enforcement.limits, "enforcement.limits", diagnostics);
+    }
+    validateResponseStatusMatrix(response, diagnostics);
+    if (context?.request && response.requestId !== context.request.requestId)
+        diagnostics.push(error("response.request-id", "requestId does not match the request.", "requestId"));
+    if (context?.plan) {
+        if (response.requestId !== context.plan.requestId)
+            diagnostics.push(error("response.request-plan-id", "requestId does not match the execution plan.", "requestId"));
+        if (response.runId !== context.plan.runId)
+            diagnostics.push(error("response.run-id", "runId does not match the execution plan.", "runId"));
+        if (response.backendId !== context.plan.backendId)
+            diagnostics.push(error("response.backend-id", "backendId does not match the execution plan.", "backendId"));
+        if (response.executionFingerprint !== context.plan.executionFingerprint)
+            diagnostics.push(error("response.execution-fingerprint", "executionFingerprint does not match the execution plan.", "executionFingerprint"));
+        if (response.profileFingerprint !== context.plan.profile.profileFingerprint)
+            diagnostics.push(error("response.profile-fingerprint", "profileFingerprint does not match the execution plan.", "profileFingerprint"));
+        if (response.status === "timed-out" && response.enforcedTimeoutMs !== context.plan.limits.timeoutMs?.value)
+            diagnostics.push(error("response.timeout-receipt", "enforcedTimeoutMs does not match the execution plan timeout receipt.", "enforcedTimeoutMs"));
+        if (response.status === "limit-reached" && !context.plan.limits[response.reachedLimit])
+            diagnostics.push(error("response.limit-receipt-missing", "reachedLimit has no enforcement receipt in the execution plan.", "reachedLimit"));
+        if (response.trace !== undefined && !context.plan.preflight.backend.capabilities.traceInspection)
+            diagnostics.push(error("response.trace-capability", "Backend returned a trace without advertising traceInspection.", "trace"));
+        if (Array.isArray(response.artifacts) && response.artifacts.length > 0 && !context.plan.preflight.backend.capabilities.artifactRetention)
+            diagnostics.push(error("response.artifact-capability", "Backend returned artifacts without advertising artifactRetention.", "artifacts"));
+        try {
+            if (canonicalSubagentJson(response.model) !== canonicalSubagentJson(context.plan.model))
+                diagnostics.push(error("response.model-mismatch", "Response model does not match the execution plan.", "model"));
+            if (Array.isArray(response.effectiveToolIds) && canonicalSubagentJson(response.effectiveToolIds) !== canonicalSubagentJson(context.plan.effectiveToolIds))
+                diagnostics.push(error("response.tools-mismatch", "effectiveToolIds do not match the execution plan.", "effectiveToolIds"));
+            if (isRecord(response.enforcement)) {
+                if (canonicalSubagentJson(response.enforcement.access) !== canonicalSubagentJson(context.plan.access))
+                    diagnostics.push(error("response.access-receipt", "Access enforcement receipt does not match the execution plan.", "enforcement.access"));
+                if (canonicalSubagentJson(response.enforcement.limits) !== canonicalSubagentJson(context.plan.limits))
+                    diagnostics.push(error("response.limit-receipt", "Limit enforcement receipt does not match the execution plan.", "enforcement.limits"));
+            }
+        }
+        catch (validationError) {
+            diagnostics.push(error("response.malformed", `Cannot compare malformed response with plan: ${validationError instanceof Error ? validationError.message : String(validationError)}`, "$"));
+        }
+    }
+    return diagnostics;
+}
+export function validateSubagentArtifactReference(value, path = "artifact") {
+    const diagnostics = [];
+    if (!isRecord(value))
+        return [error("artifact.type", "Artifact reference must be an object.", path)];
+    validateOpaqueId(value.id, `${path}.id`, diagnostics);
+    validateNamespace(value.workspaceNamespace, `${path}.workspaceNamespace`, diagnostics);
+    if (!isSafeRelativePath(value.path))
+        diagnostics.push(error("artifact.path", "Artifact path must be a normalized relative POSIX path without dot segments.", `${path}.path`));
+    if (value.authorization !== "read" && value.authorization !== "write")
+        diagnostics.push(error("artifact.authorization", "authorization must be read or write.", `${path}.authorization`));
+    if (!SUBAGENT_ARTIFACT_LIFETIMES.includes(value.lifetime))
+        diagnostics.push(error("artifact.lifetime", "Unsupported artifact lifetime.", `${path}.lifetime`));
+    if (!SUBAGENT_ARTIFACT_CLEANUP.includes(value.cleanup))
+        diagnostics.push(error("artifact.cleanup", "Unsupported artifact cleanup owner.", `${path}.cleanup`));
+    return diagnostics;
+}
+export function validateSubagentTraceReference(value, path = "trace") {
+    const diagnostics = [];
+    if (!isRecord(value))
+        return [error("trace.type", "Trace reference must be an object.", path)];
+    validateOpaqueId(value.handle, `${path}.handle`, diagnostics);
+    validateOpaqueId(value.backendId, `${path}.backendId`, diagnostics);
+    validateNamespace(value.authorizationScope, `${path}.authorizationScope`, diagnostics);
+    if (value.expiresAt !== undefined && !isIsoDate(value.expiresAt))
+        diagnostics.push(error("trace.expiry", "expiresAt must be an ISO date-time string.", `${path}.expiresAt`));
+    return diagnostics;
+}
+const SUBAGENT_RESPONSE_STATUSES = ["completed", "failed", "cancelled", "timed-out", "limit-reached"];
+const SUBAGENT_ARTIFACT_LIFETIMES = ["run", "session", "persistent"];
+const SUBAGENT_ARTIFACT_CLEANUP = ["backend", "host", "user"];
+function validateResponseStatusMatrix(response, diagnostics) {
+    const output = response.output;
+    if (output !== undefined) {
+        if (!isRecord(output) || typeof output.text !== "string" || typeof output.partial !== "boolean")
+            diagnostics.push(error("response.output", "output must contain text and partial.", "output"));
+    }
+    if (response.status === "completed") {
+        if (response.error !== undefined || response.reason !== undefined || response.reachedLimit !== undefined || response.enforcedTimeoutMs !== undefined)
+            diagnostics.push(error("response.completed-fields", "Completed responses cannot contain terminal error/reason/limit fields.", "status"));
+        if (isRecord(output) && output.partial !== false)
+            diagnostics.push(error("response.completed-partial", "Completed output cannot be partial.", "output.partial"));
+    }
+    else {
+        if (isRecord(output) && output.partial !== true)
+            diagnostics.push(error("response.partial", "Non-completed output must be marked partial.", "output.partial"));
+        if (response.status === "failed") {
+            if (!isRecord(response.error) || typeof response.error.code !== "string" || typeof response.error.message !== "string")
+                diagnostics.push(error("response.failed-error", "Failed responses require a structured error.", "error"));
+            forbidResponseFields(response, ["reason", "reachedLimit", "enforcedTimeoutMs"], diagnostics);
+        }
+        if (response.status === "cancelled") {
+            if (typeof response.reason !== "string" || !response.reason.trim())
+                diagnostics.push(error("response.reason", "cancelled responses require a reason.", "reason"));
+            forbidResponseFields(response, ["error", "reachedLimit", "enforcedTimeoutMs"], diagnostics);
+        }
+        if (response.status === "timed-out") {
+            if (typeof response.reason !== "string" || !response.reason.trim())
+                diagnostics.push(error("response.reason", "timed-out responses require a reason.", "reason"));
+            if (!isPositiveInteger(response.enforcedTimeoutMs))
+                diagnostics.push(error("response.timeout", "Timed-out responses require enforcedTimeoutMs.", "enforcedTimeoutMs"));
+            forbidResponseFields(response, ["error", "reachedLimit"], diagnostics);
+        }
+        if (response.status === "limit-reached") {
+            if (!SUBAGENT_LIMIT_NAMES.includes(response.reachedLimit))
+                diagnostics.push(error("response.reached-limit", "limit-reached responses require a valid reachedLimit.", "reachedLimit"));
+            forbidResponseFields(response, ["error", "reason", "enforcedTimeoutMs"], diagnostics);
+        }
+    }
+}
+function forbidResponseFields(response, fields, diagnostics) {
+    for (const field of fields) {
+        if (response[field] !== undefined)
+            diagnostics.push(error("response.forbidden-field", `${response.status} response cannot contain ${field}.`, field));
+    }
+}
+//# sourceMappingURL=response.js.map

package/dist/subagent/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../src/subagent/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAA+F,MAAM,YAAY,CAAC;AACpJ,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAExT,MAAM,UAAU,qBAAqB,CACpC,QAAiB,EACjB,OAA+D;IAE/D,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAe,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,8BAA8B,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzJ,IAAI,QAAQ,CAAC,aAAa,KAAK,yBAAyB;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,0BAA0B,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1J,KAAK,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAU;QAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/G,mBAAmB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IACpF,mBAAmB,CAAC,QAAQ,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,WAAW,CAAC,CAAC;IACxF,sBAAsB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,0CAA0C,EAAE,kBAAkB,CAAC,CAAC,CAAC;;QACpJ,yBAAyB,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,kDAAkD,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9J,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,6BAA6B,EAAE,WAAW,CAAC,CAAC,CAAC;;QAC7H,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,iCAAiC,CAAC,QAAQ,EAAE,aAAa,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9I,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClC,WAAW,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,gDAAgD,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACzM,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,gCAAgC,EAAE,aAAa,CAAC,CAAC,CAAC;SACjI,CAAC;QACL,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;QACtF,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IACtF,CAAC;IAED,4BAA4B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,OAAO,EAAE,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,uCAAuC,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/K,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QACnB,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,8CAA8C,EAAE,WAAW,CAAC,CAAC,CAAC;QACpK,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,0CAA0C,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3I,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,8CAA8C,EAAE,WAAW,CAAC,CAAC,CAAC;QAC/J,IAAI,QAAQ,CAAC,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,oBAAoB;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,gCAAgC,EAAE,yDAAyD,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACtN,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,uDAAuD,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACpN,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,sEAAsE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC7P,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAiC,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,gCAAgC,EAAE,gEAAgE,EAAE,cAAc,CAAC,CAAC,CAAC;QACzP,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,+DAA+D,EAAE,OAAO,CAAC,CAAC,CAAC;QACjO,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,iBAAiB;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,mEAAmE,EAAE,WAAW,CAAC,CAAC,CAAC;QACpR,IAAI,CAAC;YACJ,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,mDAAmD,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1M,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,mDAAmD,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACvR,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,+DAA+D,EAAE,oBAAoB,CAAC,CAAC,CAAC;gBACjP,IAAI,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,8DAA8D,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAChP,CAAC;QACF,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,gDAAgD,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5L,CAAC;IACF,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAc,EAAE,IAAI,GAAG,UAAU;IAClF,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,uCAAuC,EAAE,IAAI,CAAC,CAAC,CAAC;IACrG,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,IAAI,KAAK,EAAE,WAAW,CAAC,CAAC;IACtD,iBAAiB,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,IAAI,qBAAqB,EAAE,WAAW,CAAC,CAAC;IACvF,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,8EAA8E,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC;IAC9K,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,sCAAsC,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC;IAC1L,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAiB,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,gCAAgC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC;IACvK,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAgB,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,qCAAqC,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC;IACvK,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,IAAI,GAAG,OAAO;IAC5E,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,oCAAoC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/F,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,WAAW,CAAC,CAAC;IACpE,iBAAiB,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,IAAI,qBAAqB,EAAE,WAAW,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,4CAA4C,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC;IAC7K,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,MAAM,0BAA0B,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,CAAU,CAAC;AAE/G,MAAM,2BAA2B,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAU,CAAC;AAE9E,MAAM,yBAAyB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEvE,SAAS,4BAA4B,CAAC,QAAiC,EAAE,WAAiC;IACzG,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,uCAAuC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChM,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,wEAAwE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/R,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,qCAAqC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClK,CAAC;SAAM,CAAC;QACP,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,8CAA8C,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC/J,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,8CAA8C,EAAE,OAAO,CAAC,CAAC,CAAC;YAClO,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,WAAW,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,uCAAuC,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClK,oBAAoB,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,WAAW,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,uCAAuC,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClK,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,gDAAgD,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACvK,oBAAoB,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAiC,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,uDAAuD,EAAE,cAAc,CAAC,CAAC,CAAC;YAC3M,oBAAoB,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,WAAW,CAAC,CAAC;QACvF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAiC,EAAE,MAAgB,EAAE,WAAiC;IACnH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,QAAQ,CAAC,MAAM,4BAA4B,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACvJ,CAAC;AACF,CAAC"}

package/dist/subagent/tools.d.ts

@@ -0,0 +1,4 @@
+import type { PromptResourcePolicy } from "../types.ts";
+import type { SubagentAccessRequest, SubagentBackendTool, SubagentToolNegotiationResult } from "./types.ts";
+export declare function negotiateSubagentTools(catalog: readonly SubagentBackendTool[], policy: PromptResourcePolicy | undefined, access: SubagentAccessRequest): SubagentToolNegotiationResult;
+//# sourceMappingURL=tools.d.ts.map

package/dist/subagent/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/subagent/tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAsB,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAGhI,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,MAAM,EAAE,oBAAoB,GAAG,SAAS,EACxC,MAAM,EAAE,qBAAqB,GAC3B,6BAA6B,CAyB/B"}

package/dist/subagent/tools.js

@@ -0,0 +1,42 @@
+import { applyResourcePolicy, resourcePatternMatches } from "../policy.js";
+import { validateToolCatalog } from "./validation.js";
+export function negotiateSubagentTools(catalog, policy, access) {
+    const diagnostics = [];
+    validateToolCatalog(catalog, diagnostics);
+    const names = catalog.map((tool) => tool.name);
+    const stackSelectedToolNames = applyResourcePolicy(names, policy);
+    const selected = new Set(stackSelectedToolNames);
+    const effective = catalog.filter((tool) => selected.has(tool.name) && toolAllowedByAccess(tool, access));
+    const unmatchedAllowPatterns = policy && "allow" in policy
+        ? (policy.allow ?? []).filter((pattern) => pattern !== "*" && !names.some((name) => resourcePatternMatches(name, pattern)))
+        : [];
+    for (const pattern of unmatchedAllowPatterns) {
+        diagnostics.push({ level: "warning", code: "tools.unmatched-allow", path: "tools.allow", message: `Tool allow pattern matches no backend tools: ${pattern}` });
+    }
+    for (const tool of catalog) {
+        if (selected.has(tool.name) && !effective.includes(tool)) {
+            diagnostics.push({ level: "info", code: "tools.access-filtered", path: `tools.${tool.name}`, message: `Tool ${tool.name} was removed by request access policy.` });
+        }
+    }
+    return {
+        effectiveToolIds: effective.map((tool) => tool.id),
+        effectiveToolNames: effective.map((tool) => tool.name),
+        stackSelectedToolNames,
+        unmatchedAllowPatterns,
+        diagnostics,
+    };
+}
+function toolAllowedByAccess(tool, access) {
+    for (const effect of tool.effects) {
+        if (effect === "network" && access.network !== "allow")
+            return false;
+        if (effect === "process" && access.allowProcess !== true)
+            return false;
+        if (effect === "filesystem-read" && access.level === "none")
+            return false;
+        if (effect === "filesystem-write" && access.level !== "workspace-write")
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=tools.js.map

package/dist/subagent/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/subagent/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAG3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,UAAU,sBAAsB,CACrC,OAAuC,EACvC,MAAwC,EACxC,MAA6B;IAE7B,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,sBAAsB,GAAG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,MAAM,sBAAsB,GAAG,MAAM,IAAI,OAAO,IAAI,MAAM;QACzD,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3H,CAAC,CAAC,EAAE,CAAC;IACN,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC9C,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gDAAgD,OAAO,EAAE,EAAE,CAAC,CAAC;IAChK,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,wCAAwC,EAAE,CAAC,CAAC;QACpK,CAAC;IACF,CAAC;IACD,OAAO;QACN,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,kBAAkB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QACtD,sBAAsB;QACtB,sBAAsB;QACtB,WAAW;KACX,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAyB,EAAE,MAA6B;IACpF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,MAAM,KAAK,kBAAkB,IAAI,MAAM,CAAC,KAAK,KAAK,iBAAiB;YAAE,OAAO,KAAK,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}