akemon 0.3.3 → 0.3.5

package/dist/software-agent-peripheral.js

@@ -11,10 +11,13 @@
  * transport to app-server or a true persistent interactive session.
  */
 import { randomUUID } from "crypto";
-import { spawn } from "child_process";
+import { spawn, spawnSync } from "child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
+import { isAbsolute, join, relative, resolve as resolvePath } from "path";
 import { StringDecoder } from "string_decoder";
 import { SIG, sig } from "./types.js";
 import { sendTaskEnd, sendTaskStart, sendTaskStream } from "./relay-client.js";
+import { redactSecrets, StreamingRedactor } from "./redaction.js";
 const defaultTaskRelay = {
     sendTaskStart,
     sendTaskStream,
@@ -30,6 +33,40 @@ const DEFAULT_OWNER_FORBIDDEN_ACTIONS = [
 const ROLE_SCOPES = ["owner", "public", "order", "agent", "system"];
 const MEMORY_SCOPES = ["none", "public", "task", "owner"];
 const RISK_LEVELS = ["low", "medium", "high"];
+const MAX_STREAM_SUMMARY_CHARS = 12_000;
+const STREAM_SUMMARY_HEAD_CHARS = 4_000;
+const DEFAULT_TASK_LEDGER_MAX_RECORDS = 200;
+const CONTEXT_PACKET_FILENAME = "TASK_CONTEXT.md";
+const CONTEXT_SESSION_STATE_FILENAME = "SESSION.json";
+const MAX_CONTEXT_SESSION_ID_LENGTH = 120;
+const MAX_CONTEXT_SESSION_SUMMARY_CHARS = 4_000;
+const DEFAULT_SOFTWARE_AGENT_ENV_POLICY = "inherit";
+const DEFAULT_SOFTWARE_AGENT_ENV_ALLOWLIST = [
+    "PATH",
+    "HOME",
+    "SHELL",
+    "USER",
+    "LOGNAME",
+    "TMPDIR",
+    "TEMP",
+    "TMP",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "TERM",
+    "COLORTERM",
+    "NO_COLOR",
+    "FORCE_COLOR",
+    "OPENAI_API_KEY",
+    "OPENAI_BASE_URL",
+    "OPENAI_ORG_ID",
+    "OPENAI_ORGANIZATION",
+    "OPENAI_PROJECT",
+    "OPENAI_MODEL",
+    "CODEX_HOME",
+    "CODEX_MODEL",
+    "CODEX_PROFILE",
+];
 export class CodexSoftwareAgentPeripheral {
     id;
     name;
@@ -39,9 +76,14 @@ export class CodexSoftwareAgentPeripheral {
     bus = null;
     activeChild = null;
     activeTaskId = null;
+    activeWorkdir = null;
     sessionId = randomUUID();
     constructor(config) {
-        this.config = config;
+        this.config = {
+            ...config,
+            envPolicy: normalizeSoftwareAgentEnvPolicy(config.envPolicy),
+            envAllowlist: normalizeSoftwareAgentEnvAllowlist(config.envAllowlist),
+        };
         this.id = config.id || "software-agent:codex";
         this.name = config.name || "Codex CLI Software Agent";
     }
@@ -59,29 +101,43 @@ export class CodexSoftwareAgentPeripheral {
             this.sessionId = randomUUID();
     }
     async resetSession() {
-        if (this.activeChild?.pid) {
+        const activePid = this.activeChild?.pid;
+        if (activePid) {
+            const processGroupId = -activePid;
             try {
-                process.kill(-this.activeChild.pid, "SIGTERM");
+                process.kill(processGroupId, "SIGTERM");
             }
             catch { }
             setTimeout(() => {
                 try {
-                    process.kill(-this.activeChild.pid, "SIGKILL");
+                    process.kill(processGroupId, "SIGKILL");
                 }
                 catch { }
             }, 3000).unref();
         }
         this.activeChild = null;
         this.activeTaskId = null;
+        this.activeWorkdir = null;
         this.sessionId = randomUUID();
     }
     getState() {
+        const currentWorkdir = this.activeWorkdir || resolvePath(this.config.workdir);
         return {
             id: this.id,
             sessionId: this.sessionId,
             activeTaskId: this.activeTaskId,
+            activeWorkdir: this.activeWorkdir,
             busy: !!this.activeChild,
             transport: "codex-exec",
+            baseWorkdir: resolvePath(this.config.workdir),
+            workdirStatus: this.collectWorkdirStatus(currentWorkdir),
+            taskLedgerDir: this.config.taskLedgerDir,
+            contextSessionDir: this.config.contextSessionDir,
+            environment: buildSoftwareAgentChildEnvironment({
+                policy: this.config.envPolicy,
+                allowlist: this.config.envAllowlist,
+                sourceEnv: this.config.sourceEnv,
+            }).audit,
         };
     }
     async send(signal) {
@@ -97,13 +153,24 @@ export class CodexSoftwareAgentPeripheral {
         const result = await this.sendTask(envelope);
         return sig(SIG.SOFTWARE_AGENT_RESPONSE, { ...result }, this.id);
     }
-    async sendTask(envelope, signal) {
+    async sendTask(envelope, taskOptions) {
         if (this.activeChild) {
             throw new Error(`Software agent busy (task=${this.activeTaskId})`);
         }
+        const { signal, observer } = normalizeSoftwareAgentTaskOptions(taskOptions);
         const taskId = envelope.taskId || `sw_${Date.now()}_${randomUUID().slice(0, 8)}`;
-        const workdir = envelope.workdir || this.config.workdir;
-        const prompt = buildTaskEnvelopePrompt({ ...envelope, taskId, workdir });
+        const contextSessionId = normalizeContextSessionId(envelope.contextSessionId) || taskId;
+        const workdirSafety = resolveWorkdirSafety(this.config.workdir, envelope.workdir || this.config.workdir, envelope.workdirSafety?.allowOutsideWorkdir || false);
+        const workdir = workdirSafety.effectiveWorkdir;
+        let effectiveEnvelope = { ...envelope, taskId, contextSessionId, workdir, workdirSafety };
+        const contextSession = this.config.contextSessionDir
+            ? writeSoftwareAgentContextPacket(this.config.contextSessionDir, effectiveEnvelope)
+            : undefined;
+        if (contextSession)
+            effectiveEnvelope = contextSession.envelope;
+        const prompt = contextSession
+            ? buildContextPacketLaunchPrompt(effectiveEnvelope, contextSession.audit.packetPath)
+            : buildTaskEnvelopePrompt(effectiveEnvelope);
         const { cmd, args } = buildCodexExecCommand({
             command: this.config.command || "codex",
             workdir,
@@ -111,17 +178,45 @@ export class CodexSoftwareAgentPeripheral {
             sandbox: this.config.sandbox || "workspace-write",
         });
         const startedAt = Date.now();
+        const startedAtIso = new Date(startedAt).toISOString();
         const relay = this.config.taskRelay || defaultTaskRelay;
         const commandLine = [cmd, ...args].join(" ");
         const spawnImpl = this.config.spawnImpl || spawn;
         const timeoutMs = envelope.timeoutMs || this.config.defaultTimeoutMs || DEFAULT_TIMEOUT_MS;
+        const workdirStatus = this.collectWorkdirStatus(workdir);
+        const childEnvironment = buildSoftwareAgentChildEnvironment({
+            policy: this.config.envPolicy,
+            allowlist: this.config.envAllowlist,
+            sourceEnv: this.config.sourceEnv,
+        });
+        const baseTaskRecord = () => ({
+            schemaVersion: 1,
+            taskId,
+            agentId: this.id,
+            sessionId: this.sessionId,
+            transport: "codex-exec",
+            commandLine,
+            envelope: effectiveEnvelope,
+            startedAt: startedAtIso,
+            environment: childEnvironment.audit,
+            contextSession: contextSession?.audit,
+            workdirStatus,
+        });
         return new Promise((resolve) => {
             this.activeTaskId = taskId;
-            relay.sendTaskStart(taskId, "software_agent", commandLine);
+            this.activeWorkdir = workdir;
+            this.writeTaskRecord({
+                ...baseTaskRecord(),
+                status: "running",
+                updatedAt: startedAtIso,
+            });
+            const origin = "software_agent";
+            relay.sendTaskStart(taskId, origin, commandLine);
+            observer?.onStart?.({ taskId, origin, commandLine });
             this.bus?.emit(SIG.TASK_STARTED, sig(SIG.TASK_STARTED, {
                 taskId,
                 taskType: "software_agent",
-                description: envelope.goal,
+                description: effectiveEnvelope.goal,
                 peripheral: this.id,
                 sessionId: this.sessionId,
             }, this.id));
@@ -129,7 +224,7 @@ export class CodexSoftwareAgentPeripheral {
             try {
                 child = spawnImpl(cmd, args, {
                     cwd: workdir,
-                    env: process.env,
+                    env: childEnvironment.env,
                     stdio: ["pipe", "pipe", "pipe"],
                     detached: true,
                 });
@@ -137,8 +232,8 @@ export class CodexSoftwareAgentPeripheral {
             catch (err) {
                 this.activeChild = null;
                 this.activeTaskId = null;
+                this.activeWorkdir = null;
                 const durationMs = Date.now() - startedAt;
-                relay.sendTaskEnd(taskId, null, durationMs);
                 const result = {
                     success: false,
                     taskId,
@@ -147,6 +242,22 @@ export class CodexSoftwareAgentPeripheral {
                     exitCode: null,
                     durationMs,
                 };
+                relay.sendTaskEnd(taskId, null, durationMs);
+                observer?.onEnd?.({ taskId, exitCode: null, durationMs, result: redactSecrets(result) });
+                const completedAt = new Date().toISOString();
+                this.writeTaskRecord({
+                    ...baseTaskRecord(),
+                    status: "failed",
+                    updatedAt: completedAt,
+                    completedAt,
+                    durationMs,
+                    result,
+                    stdoutSummary: summarizeText(""),
+                    stderrSummary: summarizeText(result.error || ""),
+                });
+                if (contextSession) {
+                    writeSoftwareAgentContextSessionState(contextSession.audit.statePath, effectiveEnvelope, result, completedAt);
+                }
                 this.bus?.emit(SIG.TASK_FAILED, sig(SIG.TASK_FAILED, result, this.id));
                 resolve(result);
                 return;
@@ -158,6 +269,14 @@ export class CodexSoftwareAgentPeripheral {
             let aborted = false;
             const outDecoder = new StringDecoder("utf8");
             const errDecoder = new StringDecoder("utf8");
+            const outRedactor = new StreamingRedactor();
+            const errRedactor = new StreamingRedactor();
+            const emitSafeStream = (stream, text) => {
+                if (!text)
+                    return;
+                relay.sendTaskStream(taskId, stream, text);
+                observer?.onStream?.({ taskId, stream, chunk: text });
+            };
             const finish = (exitCode, error) => {
                 if (finished)
                     return;
@@ -168,16 +287,18 @@ export class CodexSoftwareAgentPeripheral {
                 const tailErr = errDecoder.end();
                 if (tailOut) {
                     stdout += tailOut;
-                    relay.sendTaskStream(taskId, "stdout", tailOut);
+                    emitSafeStream("stdout", outRedactor.push(tailOut));
                 }
                 if (tailErr) {
                     stderr += tailErr;
-                    relay.sendTaskStream(taskId, "stderr", tailErr);
+                    emitSafeStream("stderr", errRedactor.push(tailErr));
                 }
+                emitSafeStream("stdout", outRedactor.flush());
+                emitSafeStream("stderr", errRedactor.flush());
                 const durationMs = Date.now() - startedAt;
-                relay.sendTaskEnd(taskId, exitCode, durationMs);
                 this.activeChild = null;
                 this.activeTaskId = null;
+                this.activeWorkdir = null;
                 const output = stdout.trim() || stderr.trim();
                 const success = !error && !aborted && exitCode === 0;
                 const result = {
@@ -188,6 +309,22 @@ export class CodexSoftwareAgentPeripheral {
                     exitCode,
                     durationMs,
                 };
+                relay.sendTaskEnd(taskId, exitCode, durationMs);
+                observer?.onEnd?.({ taskId, exitCode, durationMs, result: redactSecrets(result) });
+                const completedAt = new Date().toISOString();
+                this.writeTaskRecord({
+                    ...baseTaskRecord(),
+                    status: success ? "completed" : "failed",
+                    updatedAt: completedAt,
+                    completedAt,
+                    durationMs,
+                    result,
+                    stdoutSummary: summarizeText(stdout),
+                    stderrSummary: summarizeText(stderr),
+                });
+                if (contextSession) {
+                    writeSoftwareAgentContextSessionState(contextSession.audit.statePath, effectiveEnvelope, result, completedAt);
+                }
                 this.bus?.emit(success ? SIG.TASK_COMPLETED : SIG.TASK_FAILED, sig(success ? SIG.TASK_COMPLETED : SIG.TASK_FAILED, {
                     ...result,
                     taskLabel: `software_agent:${this.id}`,
@@ -238,14 +375,14 @@ export class CodexSoftwareAgentPeripheral {
                 if (!text)
                     return;
                 stdout += text;
-                relay.sendTaskStream(taskId, "stdout", text);
+                emitSafeStream("stdout", outRedactor.push(text));
             });
             child.stderr?.on("data", (chunk) => {
                 const text = errDecoder.write(chunk);
                 if (!text)
                     return;
                 stderr += text;
-                relay.sendTaskStream(taskId, "stderr", text);
+                emitSafeStream("stderr", errRedactor.push(text));
             });
             child.on("close", (code) => {
                 child.unref();
@@ -257,23 +394,79 @@ export class CodexSoftwareAgentPeripheral {
             });
         });
     }
+    writeTaskRecord(record) {
+        const dir = this.config.taskLedgerDir;
+        if (!dir)
+            return;
+        try {
+            mkdirSync(dir, { recursive: true });
+            const safeTaskId = safeTaskFilename(record.taskId);
+            writeFileSync(join(dir, `${safeTaskId}.json`), `${JSON.stringify(redactSecrets(record), null, 2)}\n`);
+            pruneSoftwareAgentTaskRecords(dir, this.config.taskLedgerMaxRecords, record.taskId);
+        }
+        catch (err) {
+            console.error(`[software-agent] Failed to write task ledger: ${err.message || String(err)}`);
+        }
+    }
+    collectWorkdirStatus(workdir) {
+        const impl = this.config.gitStatusImpl || readGitWorktreeStatus;
+        return impl(workdir);
+    }
+}
+export function summarizeText(text, maxChars = MAX_STREAM_SUMMARY_CHARS) {
+    const normalized = text || "";
+    const chars = normalized.length;
+    const bytes = Buffer.byteLength(normalized, "utf8");
+    const lines = normalized ? normalized.split(/\r\n|\r|\n/).length : 0;
+    if (chars <= maxChars) {
+        return { chars, bytes, lines, text: normalized, truncated: false };
+    }
+    const headChars = Math.min(STREAM_SUMMARY_HEAD_CHARS, maxChars);
+    const tailChars = Math.max(0, maxChars - headChars);
+    const omittedChars = chars - headChars - tailChars;
+    const tailText = tailChars > 0 ? normalized.slice(-tailChars) : "";
+    return {
+        chars,
+        bytes,
+        lines,
+        text: [
+            normalized.slice(0, headChars),
+            `[truncated ${omittedChars} chars]`,
+            tailText,
+        ].join("\n"),
+        truncated: true,
+        omittedChars,
+    };
 }
 export function buildTaskEnvelopePrompt(envelope) {
     const lines = [
         "[Akemon Software Peripheral Task Envelope]",
         "",
         `Task ID: ${envelope.taskId || "(unspecified)"}`,
+        `Akemon context session: ${envelope.contextSessionId || "(one-shot)"}`,
         `Source module: ${envelope.sourceModule}`,
         `Purpose: ${envelope.purpose}`,
         `Role scope: ${envelope.roleScope}`,
         `Memory scope: ${envelope.memoryScope}`,
         `Risk level: ${envelope.riskLevel}`,
         `Workdir: ${envelope.workdir}`,
-        "",
-        "Goal:",
-        envelope.goal,
-        "",
     ];
+    if (envelope.contextPacketPath) {
+        lines.push(`Context packet path: ${envelope.contextPacketPath}`);
+    }
+    if (envelope.workdirSafety) {
+        lines.push(`Base workdir: ${envelope.workdirSafety.baseWorkdir}`);
+        lines.push(`Requested workdir: ${envelope.workdirSafety.requestedWorkdir}`);
+        lines.push(`Effective workdir: ${envelope.workdirSafety.effectiveWorkdir}`);
+        lines.push(`Outside base workdir: ${envelope.workdirSafety.outsideBaseWorkdir ? "yes" : "no"}`);
+        lines.push(`Outside workdir explicitly allowed: ${envelope.workdirSafety.allowOutsideWorkdir ? "yes" : "no"}`);
+    }
+    lines.push("", "Goal:", envelope.goal, "");
+    if (envelope.previousTaskSummary?.trim()) {
+        lines.push("Previous task summary for this Akemon context session:");
+        lines.push(envelope.previousTaskSummary.trim());
+        lines.push("");
+    }
     if (envelope.memorySummary?.trim()) {
         lines.push("Visible Akemon memory/context:");
         lines.push(envelope.memorySummary.trim());
@@ -303,31 +496,281 @@ export function buildTaskEnvelopePrompt(envelope) {
     lines.push("- Report what changed, what you verified, and any remaining risk.");
     return lines.join("\n");
 }
+export function buildContextPacketLaunchPrompt(envelope, contextPacketPath) {
+    return [
+        "[Akemon Software Peripheral Task]",
+        "",
+        `Task ID: ${envelope.taskId || "(unspecified)"}`,
+        `Akemon context session: ${envelope.contextSessionId || "(one-shot)"}`,
+        `Context packet: ${contextPacketPath}`,
+        `Workdir: ${envelope.workdir}`,
+        "",
+        "Goal:",
+        envelope.goal,
+        "",
+        "Instructions:",
+        "- Read the context packet first before doing repository work.",
+        "- Treat that file as the complete Akemon-provided context for this task.",
+        "- Do not read Akemon private memory outside the context packet.",
+        "- Work only in the stated workdir unless the packet explicitly allows otherwise.",
+        "- Report what changed, what you verified, and any remaining risk.",
+    ].join("\n");
+}
 export function createOwnerTaskEnvelope(body, defaultWorkdir) {
     const goal = typeof body?.goal === "string" ? body.goal.trim() : "";
     if (!goal)
         throw new Error("Missing required string field: goal");
-    const callerForbiddenActions = readOptionalStringArray(body.forbiddenActions, "forbiddenActions");
+    const callerForbiddenActions = readOptionalStringArray(body?.forbiddenActions, "forbiddenActions");
+    const requestedWorkdir = readOptionalString(body?.workdir, "workdir") || defaultWorkdir;
+    const workdirSafety = resolveWorkdirSafety(defaultWorkdir, requestedWorkdir, readOptionalBoolean(body?.allowOutsideWorkdir, "allowOutsideWorkdir") || false);
     return {
-        taskId: readOptionalString(body.taskId, "taskId"),
+        taskId: readOptionalString(body?.taskId, "taskId"),
         sourceModule: "owner-http",
-        purpose: readOptionalString(body.purpose, "purpose") || "owner software-agent task",
+        purpose: readOptionalString(body?.purpose, "purpose") || "owner software-agent task",
         goal,
-        workdir: readOptionalString(body.workdir, "workdir") || defaultWorkdir,
-        roleScope: readEnum(body.roleScope, "roleScope", ROLE_SCOPES, "owner"),
-        memoryScope: readEnum(body.memoryScope, "memoryScope", MEMORY_SCOPES, "owner"),
-        riskLevel: readEnum(body.riskLevel, "riskLevel", RISK_LEVELS, "medium"),
-        allowedActions: body.allowedActions !== undefined
-            ? readOptionalStringArray(body.allowedActions, "allowedActions")
+        workdir: workdirSafety.effectiveWorkdir,
+        workdirSafety,
+        roleScope: readEnum(body?.roleScope, "roleScope", ROLE_SCOPES, "owner"),
+        memoryScope: readEnum(body?.memoryScope, "memoryScope", MEMORY_SCOPES, "owner"),
+        riskLevel: readEnum(body?.riskLevel, "riskLevel", RISK_LEVELS, "medium"),
+        allowedActions: body?.allowedActions !== undefined
+            ? readOptionalStringArray(body?.allowedActions, "allowedActions")
             : [...DEFAULT_OWNER_ALLOWED_ACTIONS],
         forbiddenActions: [...new Set([...DEFAULT_OWNER_FORBIDDEN_ACTIONS, ...callerForbiddenActions])],
-        memorySummary: typeof body.memorySummary === "string" ? body.memorySummary : "",
-        deliverable: typeof body.deliverable === "string"
+        memorySummary: typeof body?.memorySummary === "string" ? body.memorySummary : "",
+        contextSessionId: readOptionalContextSessionId(body?.contextSessionId ?? body?.sessionId, "contextSessionId"),
+        deliverable: typeof body?.deliverable === "string"
             ? body.deliverable
             : "Return a concise engineering summary with changes, verification, and remaining risks.",
-        timeoutMs: readTimeoutMs(body.timeoutMs),
+        timeoutMs: readTimeoutMs(body?.timeoutMs),
+    };
+}
+export function resolveWorkdirSafety(baseWorkdir, requestedWorkdir, allowOutsideWorkdir = false) {
+    const base = resolvePath(baseWorkdir);
+    const requested = isAbsolute(requestedWorkdir)
+        ? resolvePath(requestedWorkdir)
+        : resolvePath(base, requestedWorkdir);
+    const rel = relative(base, requested);
+    const outsideBaseWorkdir = !!rel && (rel.startsWith("..") || isAbsolute(rel));
+    if (outsideBaseWorkdir && !allowOutsideWorkdir) {
+        throw new Error(`Invalid workdir: ${requested} is outside base workdir ${base}`);
+    }
+    return {
+        baseWorkdir: base,
+        requestedWorkdir,
+        effectiveWorkdir: requested,
+        allowOutsideWorkdir,
+        outsideBaseWorkdir,
     };
 }
+export function readGitWorktreeStatus(workdir) {
+    const resolvedWorkdir = resolvePath(workdir);
+    try {
+        const rootResult = spawnSync("git", ["-C", resolvedWorkdir, "rev-parse", "--show-toplevel"], {
+            encoding: "utf8",
+            timeout: 5000,
+        });
+        if (rootResult.status !== 0) {
+            return {
+                workdir: resolvedWorkdir,
+                isRepo: false,
+                dirty: false,
+                changedFiles: [],
+                error: summarizeGitError(rootResult.stderr, rootResult.error),
+            };
+        }
+        const root = String(rootResult.stdout || "").trim();
+        const statusResult = spawnSync("git", ["-C", resolvedWorkdir, "status", "--short"], {
+            encoding: "utf8",
+            timeout: 5000,
+        });
+        if (statusResult.status !== 0) {
+            return {
+                workdir: resolvedWorkdir,
+                isRepo: true,
+                dirty: false,
+                changedFiles: [],
+                root,
+                error: summarizeGitError(statusResult.stderr, statusResult.error),
+            };
+        }
+        const changedFiles = String(statusResult.stdout || "")
+            .split(/\r?\n/)
+            .map((line) => line.trimEnd())
+            .filter(Boolean)
+            .map((line) => line.slice(3).trim())
+            .filter(Boolean);
+        return {
+            workdir: resolvedWorkdir,
+            isRepo: true,
+            dirty: changedFiles.length > 0,
+            changedFiles,
+            root,
+        };
+    }
+    catch (err) {
+        return {
+            workdir: resolvedWorkdir,
+            isRepo: false,
+            dirty: false,
+            changedFiles: [],
+            error: err.message || String(err),
+        };
+    }
+}
+export function listSoftwareAgentTaskRecords(taskLedgerDir, limit = 20) {
+    const safeLimit = normalizeTaskRecordLimit(limit);
+    try {
+        if (!existsSync(taskLedgerDir))
+            return [];
+        return readdirSync(taskLedgerDir, { withFileTypes: true })
+            .filter((entry) => entry.isFile() && entry.name.endsWith(".json"))
+            .map((entry) => readSoftwareAgentTaskRecordFile(join(taskLedgerDir, entry.name)))
+            .filter((record) => !!record)
+            .sort(compareSoftwareAgentTaskRecords)
+            .slice(0, safeLimit);
+    }
+    catch {
+        return [];
+    }
+}
+export function readSoftwareAgentTaskRecord(taskLedgerDir, taskId) {
+    const file = join(taskLedgerDir, `${safeTaskFilename(taskId)}.json`);
+    return readSoftwareAgentTaskRecordFile(file);
+}
+export function pruneSoftwareAgentTaskRecords(taskLedgerDir, maxRecords = DEFAULT_TASK_LEDGER_MAX_RECORDS, preserveTaskId) {
+    const safeMaxRecords = normalizeTaskLedgerMaxRecords(maxRecords);
+    try {
+        if (!existsSync(taskLedgerDir))
+            return 0;
+        const records = readdirSync(taskLedgerDir, { withFileTypes: true })
+            .filter((entry) => entry.isFile() && entry.name.endsWith(".json"))
+            .map((entry) => {
+            const file = join(taskLedgerDir, entry.name);
+            const record = readSoftwareAgentTaskRecordFile(file);
+            return record ? { file, record } : null;
+        })
+            .filter((entry) => !!entry)
+            .sort((a, b) => compareSoftwareAgentTaskRecords(a.record, b.record));
+        const keepTaskIds = new Set(records.slice(0, safeMaxRecords).map((entry) => entry.record.taskId));
+        if (preserveTaskId)
+            keepTaskIds.add(preserveTaskId);
+        let deleted = 0;
+        for (const entry of records) {
+            if (keepTaskIds.has(entry.record.taskId))
+                continue;
+            try {
+                unlinkSync(entry.file);
+                deleted++;
+            }
+            catch {
+                // Best effort: retention should not break task completion.
+            }
+        }
+        return deleted;
+    }
+    catch {
+        return 0;
+    }
+}
+export function buildSoftwareAgentChildEnvironment(opts = {}) {
+    const policy = normalizeSoftwareAgentEnvPolicy(opts.policy);
+    const sourceEnv = opts.sourceEnv || process.env;
+    if (policy === "inherit") {
+        return {
+            env: sourceEnv,
+            audit: { policy },
+        };
+    }
+    const allowlist = normalizeSoftwareAgentEnvAllowlist([
+        ...DEFAULT_SOFTWARE_AGENT_ENV_ALLOWLIST,
+        ...(opts.allowlist || []),
+    ]);
+    const env = {};
+    for (const key of allowlist) {
+        if (isForbiddenSoftwareAgentEnvKey(key))
+            continue;
+        const value = sourceEnv[key];
+        if (value !== undefined)
+            env[key] = value;
+    }
+    return {
+        env,
+        audit: {
+            policy,
+            allowedKeys: Object.keys(env).sort(),
+        },
+    };
+}
+function writeSoftwareAgentContextPacket(contextSessionDir, envelope) {
+    const sessionId = normalizeContextSessionId(envelope.contextSessionId) || envelope.taskId || randomUUID();
+    const sessionDir = join(contextSessionDir, sessionId);
+    const packetPath = join(sessionDir, CONTEXT_PACKET_FILENAME);
+    const statePath = join(sessionDir, CONTEXT_SESSION_STATE_FILENAME);
+    const previousTaskSummary = readSoftwareAgentContextSessionSummary(statePath);
+    const packetEnvelope = {
+        ...envelope,
+        contextSessionId: sessionId,
+        contextPacketPath: packetPath,
+        previousTaskSummary,
+    };
+    mkdirSync(sessionDir, { recursive: true });
+    const content = buildTaskEnvelopePrompt(packetEnvelope);
+    writeFileSync(packetPath, `${redactSecrets(content)}\n`);
+    return {
+        envelope: packetEnvelope,
+        audit: { sessionId, packetPath, statePath },
+    };
+}
+function writeSoftwareAgentContextSessionState(statePath, envelope, result, updatedAt) {
+    try {
+        const state = {
+            schemaVersion: 1,
+            sessionId: envelope.contextSessionId,
+            updatedAt,
+            lastTaskId: result.taskId,
+            lastGoal: envelope.goal,
+            lastResult: {
+                success: result.success,
+                exitCode: result.exitCode,
+                durationMs: result.durationMs,
+                outputSummary: summarizeText(result.output || "", MAX_CONTEXT_SESSION_SUMMARY_CHARS),
+                errorSummary: result.error ? summarizeText(result.error, MAX_CONTEXT_SESSION_SUMMARY_CHARS) : undefined,
+            },
+        };
+        writeFileSync(statePath, `${JSON.stringify(redactSecrets(state), null, 2)}\n`);
+    }
+    catch (err) {
+        console.error(`[software-agent] Failed to write context session state: ${err.message || String(err)}`);
+    }
+}
+function readSoftwareAgentContextSessionSummary(statePath) {
+    try {
+        if (!existsSync(statePath))
+            return undefined;
+        const parsed = JSON.parse(readFileSync(statePath, "utf8"));
+        if (!parsed || parsed.schemaVersion !== 1 || !parsed.lastTaskId || !parsed.lastResult)
+            return undefined;
+        const result = parsed.lastResult;
+        const status = result.success === true ? "completed" : "failed";
+        const lines = [
+            `Previous task: ${parsed.lastTaskId}`,
+            parsed.lastGoal ? `Previous goal: ${parsed.lastGoal}` : "",
+            `Status: ${status}`,
+            Number.isInteger(result.exitCode) ? `Exit code: ${result.exitCode}` : "Exit code: null",
+            Number.isInteger(result.durationMs) ? `Duration: ${result.durationMs}ms` : "",
+            result.outputSummary?.text ? "Previous output summary:" : "",
+            result.outputSummary?.text || "",
+            result.errorSummary?.text ? "Previous error summary:" : "",
+            result.errorSummary?.text || "",
+        ].filter(Boolean);
+        const summary = lines.join("\n").trim();
+        return summary ? summarizeText(summary, MAX_CONTEXT_SESSION_SUMMARY_CHARS).text : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 function readOptionalString(value, field) {
     if (value === undefined || value === null)
         return undefined;
@@ -336,6 +779,72 @@ function readOptionalString(value, field) {
     const trimmed = value.trim();
     return trimmed || undefined;
 }
+function readOptionalContextSessionId(value, field) {
+    if (value === undefined || value === null || value === "")
+        return undefined;
+    if (typeof value !== "string")
+        throw new Error(`Invalid ${field}: expected string`);
+    return normalizeContextSessionId(value, field);
+}
+function normalizeContextSessionId(value, field = "contextSessionId") {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    if (trimmed.length > MAX_CONTEXT_SESSION_ID_LENGTH) {
+        throw new Error(`Invalid ${field}: expected at most ${MAX_CONTEXT_SESSION_ID_LENGTH} characters`);
+    }
+    if (!/^[A-Za-z0-9][A-Za-z0-9_.-]*$/.test(trimmed)) {
+        throw new Error(`Invalid ${field}: expected letters, numbers, dot, underscore, or hyphen`);
+    }
+    return trimmed;
+}
+function normalizeSoftwareAgentTaskOptions(options) {
+    if (!options)
+        return {};
+    if (isAbortSignal(options)) {
+        return { signal: options };
+    }
+    return options;
+}
+function normalizeSoftwareAgentEnvPolicy(value) {
+    if (value === undefined || value === null || value === "")
+        return DEFAULT_SOFTWARE_AGENT_ENV_POLICY;
+    if (value === "inherit" || value === "allowlist")
+        return value;
+    throw new Error("Invalid software-agent env policy: expected inherit or allowlist");
+}
+function normalizeSoftwareAgentEnvAllowlist(values) {
+    if (!values)
+        return [];
+    const seen = new Set();
+    for (const value of values) {
+        if (typeof value !== "string") {
+            throw new Error("Invalid software-agent env allowlist entry: expected string");
+        }
+        const key = value.trim();
+        if (!key)
+            continue;
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+            throw new Error(`Invalid software-agent env allowlist entry: ${key}`);
+        }
+        seen.add(key);
+    }
+    return [...seen];
+}
+function isForbiddenSoftwareAgentEnvKey(key) {
+    const upper = key.toUpperCase();
+    if (upper.startsWith("AKEMON_"))
+        return true;
+    const looksLikeCredential = /(?:SECRET|TOKEN|ACCESS|KEY|CREDENTIAL)/.test(upper);
+    return looksLikeCredential && (upper.includes("RELAY") || upper.includes("OWNER"));
+}
+function isAbortSignal(value) {
+    return !!value
+        && typeof value.aborted === "boolean"
+        && typeof value.addEventListener === "function";
+}
 function readOptionalStringArray(value, field) {
     if (value === undefined || value === null)
         return [];
@@ -348,6 +857,13 @@ function readOptionalStringArray(value, field) {
         return item.trim();
     });
 }
+function readOptionalBoolean(value, field) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== "boolean")
+        throw new Error(`Invalid ${field}: expected boolean`);
+    return value;
+}
 function readEnum(value, field, allowed, fallback) {
     if (value === undefined || value === null || value === "")
         return fallback;
@@ -367,6 +883,56 @@ function readTimeoutMs(value) {
     }
     return value;
 }
+function safeTaskFilename(taskId) {
+    const safe = taskId.replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 200);
+    return safe || "task";
+}
+function summarizeGitError(stderr, error) {
+    if (error)
+        return error.message;
+    const text = typeof stderr === "string" ? stderr.trim() : "";
+    return text || undefined;
+}
+function normalizeTaskRecordLimit(limit) {
+    if (!Number.isInteger(limit) || limit <= 0)
+        return 20;
+    return Math.min(limit, 100);
+}
+function normalizeTaskLedgerMaxRecords(limit) {
+    if (!Number.isInteger(limit) || limit <= 0)
+        return DEFAULT_TASK_LEDGER_MAX_RECORDS;
+    return Math.min(limit, 10_000);
+}
+function readSoftwareAgentTaskRecordFile(file) {
+    try {
+        if (!existsSync(file))
+            return null;
+        const parsed = JSON.parse(readFileSync(file, "utf8"));
+        if (!isSoftwareAgentTaskRecord(parsed))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function isSoftwareAgentTaskRecord(value) {
+    return value
+        && value.schemaVersion === 1
+        && typeof value.taskId === "string"
+        && (value.status === "running" || value.status === "completed" || value.status === "failed")
+        && typeof value.startedAt === "string"
+        && typeof value.updatedAt === "string"
+        && value.envelope
+        && typeof value.envelope.goal === "string";
+}
+function compareSoftwareAgentTaskRecords(a, b) {
+    const bTime = Date.parse(b.updatedAt || b.startedAt) || 0;
+    const aTime = Date.parse(a.updatedAt || a.startedAt) || 0;
+    if (bTime !== aTime)
+        return bTime - aTime;
+    return b.taskId.localeCompare(a.taskId);
+}
 function buildCodexExecCommand(opts) {
     const args = [
         "exec",