helixmind 0.5.4

package/dist/cli/agent/sandbox.js

@@ -0,0 +1,298 @@
+import { resolve, normalize, sep } from 'node:path';
+import { statSync, lstatSync, realpathSync } from 'node:fs';
+/** Maximum file size in bytes (10MB) */
+const MAX_FILE_SIZE = 10 * 1024 * 1024;
+/** Maximum content length in characters (5MB) */
+const MAX_CONTENT_LENGTH = 5 * 1024 * 1024;
+/** Sensitive files that should never be read or written by the agent */
+const BLOCKED_FILES = [
+    // Environment files (all variants)
+    '.env', '.env.local', '.env.production', '.env.staging', '.env.development', '.env.test',
+    '.env.production.local', '.env.development.local', '.env.test.local', '.env.local.local',
+    // SSH keys and config
+    'id_rsa', 'id_ed25519', 'id_ecdsa', 'id_dsa',
+    '.ssh/config', '.ssh/authorized_keys', '.ssh/known_hosts', '.ssh/id_rsa', '.ssh/id_ed25519',
+    // Package manager credentials
+    '.npmrc', '.pypirc', '.netrc', '.yarnrc',
+    // Cloud credentials
+    'credentials.json', 'serviceAccountKey.json', 'service-account.json',
+    '.git-credentials', '.docker/config.json',
+    '.aws/credentials', '.aws/config',
+    '.kube/config',
+    '.config/gcloud/credentials.db', '.config/gcloud/application_default_credentials.json',
+    // Shell history
+    '.bash_history', '.zsh_history', '.node_repl_history', '.python_history',
+    // GPG/PGP keys
+    '.gnupg/secring.gpg', '.gnupg/private-keys-v1.d',
+    // Token/secret files
+    '.vault-token', '.terraform/credentials.tfrc.json',
+    // Database files that may contain sensitive data
+    '.pgpass', '.my.cnf',
+];
+/** Dangerous command patterns that require extra confirmation */
+const DANGEROUS_PATTERNS = [
+    /\brm\s+(-rf?|--recursive)/,
+    /\bsudo\b/,
+    /\bchmod\b.*777/,
+    /\bdd\b\s/,
+    /\b>\s*\/dev\//,
+    /\bcurl\b.*\|\s*(ba)?sh/,
+    /\bwget\b.*\|\s*(ba)?sh/,
+    /\bnpm\s+publish/,
+    /\bgit\s+push\s+.*--force/,
+    /\bdrop\s+(database|table)/i,
+    /\btruncate\s+table/i,
+    /\bformat\s+[a-z]:/i,
+    /\bdel\s+\/[sq]/i,
+    /\brmdir\s+\/s/i,
+    // Network tools (reverse shells, data exfiltration)
+    /\b(nc|ncat|netcat)\s.*-[el]/,
+    /\b(curl|wget)\b.*-[oO]\s/,
+    // Package manager installs (supply chain risk)
+    /\bnpm\s+install\s+-g/,
+    /\b(pnpm|yarn)\s+(add\s+-g|global\s+add)/,
+    /\bpip3?\s+install\b/,
+    /\bpipx\s+install\b/,
+    // Docker privileged / host mounts
+    /\bdocker\s+run\b.*--privileged/,
+    /\bdocker\s+run\b.*-v\s*\/:/,
+    // crontab modification
+    /\bcrontab\s+-[re]/,
+    // SSH connections (lateral movement)
+    /\bssh\b.*@/,
+];
+export class SecurityError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SecurityError';
+    }
+}
+/**
+ * Validate a path, allowing external paths (outside project root).
+ * External paths need separate permission approval via the agent loop.
+ * Still blocks: sensitive files, symlinks.
+ */
+export function validatePathEx(requestedPath, projectRoot) {
+    // SECURITY: Reject null bytes to prevent path truncation attacks
+    if (requestedPath.includes('\0')) {
+        throw new SecurityError('Access denied: Path contains null byte');
+    }
+    const normalizedPath = normalize(requestedPath);
+    const resolved = resolve(projectRoot, normalizedPath);
+    const normalizedRoot = normalize(projectRoot);
+    // Case-insensitive comparison on Windows (NTFS is case-insensitive)
+    const external = process.platform === 'win32'
+        ? !resolved.toLowerCase().startsWith(normalizedRoot.toLowerCase())
+        : !resolved.startsWith(normalizedRoot);
+    // Sensitive files ALWAYS blocked (internal and external)
+    const lower = resolved.toLowerCase().replace(/\\/g, '/');
+    for (const blocked of BLOCKED_FILES) {
+        if (lower.endsWith('/' + blocked) || lower === blocked) {
+            throw new SecurityError(`Access denied: ${requestedPath} is a sensitive file`);
+        }
+    }
+    // Pattern-based blocks: catch all .env variants and key files
+    const filename = lower.split('/').pop() || '';
+    if (/^\.env(\..+)?$/.test(filename) && !/\.(example|sample|template)$/.test(filename)) {
+        throw new SecurityError(`Access denied: ${requestedPath} is a sensitive file`);
+    }
+    if (/^id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/.test(filename)) {
+        throw new SecurityError(`Access denied: ${requestedPath} is a sensitive file`);
+    }
+    // Symlinks ALWAYS blocked (lstatSync does NOT follow symlinks, unlike statSync)
+    // Also perform realpath verification to mitigate TOCTOU race conditions:
+    // if the real (dereferenced) path differs from the resolved path, a symlink exists.
+    try {
+        const stats = lstatSync(resolved);
+        if (stats.isSymbolicLink()) {
+            throw new SecurityError(`Access denied: Symlinks are not allowed`);
+        }
+        // SECURITY: Double-check via realpath to catch symlinks in parent directories
+        // and reduce the TOCTOU window — if realpath differs, a symlink is present
+        const real = realpathSync(resolved);
+        const realNorm = normalize(real);
+        const resolvedNorm = normalize(resolved);
+        const pathsDiffer = process.platform === 'win32'
+            ? realNorm.toLowerCase() !== resolvedNorm.toLowerCase()
+            : realNorm !== resolvedNorm;
+        if (pathsDiffer) {
+            throw new SecurityError(`Access denied: Path resolves through a symlink`);
+        }
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            if (err instanceof SecurityError)
+                throw err;
+            throw new SecurityError(`Access denied: Invalid path: ${requestedPath}`);
+        }
+    }
+    // Internal paths: depth limit + root check (same as validatePath)
+    if (!external) {
+        if (normalizedPath.split(sep).length > 10) {
+            throw new SecurityError(`Access denied: Path too deep: ${requestedPath}`);
+        }
+        try {
+            const dirStats = statSync(normalizedRoot);
+            if (!dirStats.isDirectory()) {
+                throw new SecurityError(`Access denied: Project root is not a directory`);
+            }
+        }
+        catch (err) {
+            if (err instanceof SecurityError)
+                throw err;
+            throw new SecurityError(`Access denied: Project root not accessible: ${projectRoot}`);
+        }
+    }
+    return { resolved, external };
+}
+/**
+ * Validate that a requested path is within the project root
+ * and not a sensitive file. Returns the resolved absolute path.
+ */
+export function validatePath(requestedPath, projectRoot) {
+    // Normalize the requested path to handle . and .. sequences
+    let normalizedPath = normalize(requestedPath);
+    // Resolve against project root
+    const resolved = resolve(projectRoot, normalizedPath);
+    // Ensure the resolved path starts with the normalized project root
+    const normalizedRoot = normalize(projectRoot);
+    // Case-insensitive comparison on Windows (NTFS is case-insensitive)
+    const isInside = process.platform === 'win32'
+        ? resolved.toLowerCase().startsWith(normalizedRoot.toLowerCase())
+        : resolved.startsWith(normalizedRoot);
+    if (!isInside) {
+        throw new SecurityError(`Access denied: ${requestedPath} is outside the project directory`);
+    }
+    // Check for path traversal attempts (multiple consecutive separators)
+    if (normalizedPath.split(sep).length > 10) {
+        throw new SecurityError(`Access denied: Path too deep: ${requestedPath}`);
+    }
+    // Normalize for case-insensitive blocked file check
+    const lower = resolved.toLowerCase().replace(/\\/g, '/');
+    for (const blocked of BLOCKED_FILES) {
+        if (lower.endsWith('/' + blocked) || lower === blocked) {
+            throw new SecurityError(`Access denied: ${requestedPath} is a sensitive file`);
+        }
+    }
+    // Pattern-based blocks: catch all .env variants and key files
+    const filename = lower.split('/').pop() || '';
+    if (/^\.env(\..+)?$/.test(filename) && !/\.(example|sample|template)$/.test(filename)) {
+        throw new SecurityError(`Access denied: ${requestedPath} is a sensitive file`);
+    }
+    if (/^id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/.test(filename)) {
+        throw new SecurityError(`Access denied: ${requestedPath} is a sensitive file`);
+    }
+    // Check if path exists and is not a symlink (lstatSync does NOT follow symlinks)
+    try {
+        const stats = lstatSync(resolved);
+        if (stats.isSymbolicLink()) {
+            throw new SecurityError(`Access denied: Symlinks are not allowed`);
+        }
+    }
+    catch (err) {
+        // Path doesn't exist yet, that's fine for new files
+        if (err.code !== 'ENOENT') {
+            if (err instanceof SecurityError)
+                throw err;
+            throw new SecurityError(`Access denied: Invalid path: ${requestedPath}`);
+        }
+    }
+    // Verify the directory exists (or can be created)
+    try {
+        const dirStats = statSync(normalizedRoot);
+        if (!dirStats.isDirectory()) {
+            throw new SecurityError(`Access denied: Project root is not a directory`);
+        }
+    }
+    catch (err) {
+        throw new SecurityError(`Access denied: Project root not accessible: ${projectRoot}`);
+    }
+    return resolved;
+}
+/**
+ * Classify a shell command's danger level.
+ */
+export function classifyCommand(cmd) {
+    const trimmed = cmd.trim();
+    if (!trimmed || trimmed.length === 0) {
+        throw new SecurityError('Command cannot be empty');
+    }
+    if (trimmed.length > 10000) {
+        throw new SecurityError('Command too long');
+    }
+    // Check for blocked commands on the ORIGINAL command (not sanitized)
+    if (isBlockedCommand(trimmed)) {
+        throw new SecurityError('This command is blocked');
+    }
+    // Detect shell metacharacter abuse (backticks, $(), $VAR, heredocs, aliases, BASH_ENV)
+    if (/`[^`]+`/.test(trimmed) || /\$\([^)]+\)/.test(trimmed))
+        return 'dangerous';
+    if (/\$[A-Za-z_]/.test(trimmed))
+        return 'dangerous'; // bare variable expansion
+    if (/<<<?\s/.test(trimmed))
+        return 'dangerous'; // heredoc/herestring
+    if (/\b(alias|export\s+\w+=)/.test(trimmed))
+        return 'dangerous'; // alias/export injection
+    if (/\b(BASH_ENV|ENV|BASH_FUNC_)=/.test(trimmed))
+        return 'dangerous'; // env injection
+    // Check for dangerous patterns on the ORIGINAL command
+    if (DANGEROUS_PATTERNS.some(p => p.test(trimmed)))
+        return 'dangerous';
+    // PowerShell-specific dangerous patterns (Windows)
+    if (/powershell|pwsh/i.test(trimmed))
+        return 'dangerous';
+    if (/Remove-Item\s.*-Recurse/i.test(trimmed))
+        return 'dangerous';
+    if (/Invoke-(WebRequest|Expression|RestMethod)/i.test(trimmed))
+        return 'dangerous';
+    if (/Set-ExecutionPolicy/i.test(trimmed))
+        return 'dangerous';
+    // Additional blocked system commands
+    if (/\b(shutdown|reboot)\b/.test(trimmed))
+        return 'dangerous';
+    if (/\btaskkill\s+\/f/i.test(trimmed))
+        return 'dangerous';
+    // Language interpreter code execution (bypass vector for shell sandbox)
+    if (/\b(python3?|ruby|perl|lua)\s+-[ce]\b/.test(trimmed))
+        return 'dangerous';
+    if (/\bnode\s+-e\b/.test(trimmed))
+        return 'dangerous';
+    if (/\beval\s/.test(trimmed))
+        return 'dangerous';
+    // Encoded/obfuscated payload execution
+    if (/base64\s.*\|\s*(ba)?sh/i.test(trimmed))
+        return 'dangerous';
+    if (/powershell.*-e(nc(odedcommand)?)?/i.test(trimmed))
+        return 'dangerous';
+    if (/\[Net\.WebClient\]|\[System\.Net\.WebClient\]/i.test(trimmed))
+        return 'dangerous';
+    // Windows system commands
+    if (/\bwmic\b.*\bdelete\b/i.test(trimmed))
+        return 'dangerous';
+    if (/\breg\s+delete/i.test(trimmed))
+        return 'dangerous';
+    if (/\bsc\s+delete/i.test(trimmed))
+        return 'dangerous';
+    // Check for potentially dangerous operations
+    if (/\brm\s/.test(trimmed) || /\bmv\s/.test(trimmed) || /\bgit\s+push/.test(trimmed))
+        return 'ask';
+    return 'safe';
+}
+/**
+ * Check if a command is blocked entirely (should never run).
+ * These are hard-blocked even in YOLO mode.
+ */
+export function isBlockedCommand(cmd) {
+    const blocked = [
+        /\bformat\s+c:/i,
+        /:\(\)\s*\{[^}]*\|\s*:.*&\s*\}\s*;/, // fork bomb
+        /\brm\s+(-rf?|--recursive)\s+\/(\s|$)/, // rm -rf / (root, with or without trailing flags)
+        /\bdd\b.*of=\/dev\/[sh]d/, // overwrite disk devices
+        /\bmkfs\b/, // format filesystems
+        /\bfdisk\b/, // partition table modification
+        /\bbcdedit\b/i, // Windows boot config
+        /\bdiskpart\b/i, // Windows disk partition
+    ];
+    return blocked.some(p => p.test(cmd));
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/cli/agent/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/cli/agent/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAyB,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnF,wCAAwC;AACxC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,iDAAiD;AACjD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,wEAAwE;AACxE,MAAM,aAAa,GAAG;IACpB,mCAAmC;IACnC,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW;IACxF,uBAAuB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB;IACxF,sBAAsB;IACtB,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ;IAC5C,aAAa,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB;IAC3F,8BAA8B;IAC9B,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS;IACxC,oBAAoB;IACpB,kBAAkB,EAAE,wBAAwB,EAAE,sBAAsB;IACpE,kBAAkB,EAAE,qBAAqB;IACzC,kBAAkB,EAAE,aAAa;IACjC,cAAc;IACd,+BAA+B,EAAE,qDAAqD;IACtF,gBAAgB;IAChB,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB;IACxE,eAAe;IACf,oBAAoB,EAAE,0BAA0B;IAChD,qBAAqB;IACrB,cAAc,EAAE,kCAAkC;IAClD,iDAAiD;IACjD,SAAS,EAAE,SAAS;CACrB,CAAC;AAEF,iEAAiE;AACjE,MAAM,kBAAkB,GAAG;IACzB,2BAA2B;IAC3B,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,wBAAwB;IACxB,wBAAwB;IACxB,iBAAiB;IACjB,0BAA0B;IAC1B,4BAA4B;IAC5B,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,oDAAoD;IACpD,6BAA6B;IAC7B,0BAA0B;IAC1B,+CAA+C;IAC/C,sBAAsB;IACtB,yCAAyC;IACzC,qBAAqB;IACrB,oBAAoB;IACpB,kCAAkC;IAClC,gCAAgC;IAChC,4BAA4B;IAC5B,uBAAuB;IACvB,mBAAmB;IACnB,qCAAqC;IACrC,YAAY;CACb,CAAC;AAEF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAOD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB,EAAE,WAAmB;IACvE,iEAAiE;IACjE,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAE9C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC3C,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QAClE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEzC,yDAAyD;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,sBAAsB,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,sBAAsB,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,sBAAsB,CAAC,CAAC;IACjF,CAAC;IAED,gFAAgF;IAChF,yEAAyE;IACzE,oFAAoF;IACpF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;QACrE,CAAC;QACD,8EAA8E;QAC9E,2EAA2E;QAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC9C,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE;YACvD,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC;QAC9B,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,gCAAgC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,aAAa,CAAC,iCAAiC,aAAa,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,+CAA+C,WAAW,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,aAAqB,EAAE,WAAmB;IACrE,4DAA4D;IAC5D,IAAI,cAAc,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAE9C,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAEtD,mEAAmE;IACnE,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC3C,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QACjE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IAED,sEAAsE;IACtE,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,aAAa,CAAC,iCAAiC,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,oDAAoD;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,sBAAsB,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,sBAAsB,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,aAAa,CAAC,kBAAkB,aAAa,sBAAsB,CAAC,CAAC;IACjF,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oDAAoD;QACpD,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,gCAAgC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,+CAA+C,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IAED,qEAAqE;IACrE,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACrD,CAAC;IAED,uFAAuF;IACvF,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/E,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,0BAA0B;IAC/E,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,qBAAqB;IACrE,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,yBAAyB;IAC1F,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,gBAAgB;IAEtF,uDAAuD;IACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAEtE,mDAAmD;IACnD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACzD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACjE,IAAI,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACnF,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAE7D,qCAAqC;IACrC,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAE1D,wEAAwE;IACxE,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC7E,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAEjD,uCAAuC;IACvC,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAChE,IAAI,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3E,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAEvF,0BAA0B;IAC1B,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACxD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAEvD,6CAA6C;IAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG;QACd,gBAAgB;QAChB,mCAAmC,EAAG,YAAY;QAClD,sCAAsC,EAAI,kDAAkD;QAC5F,yBAAyB,EAAe,yBAAyB;QACjE,UAAU,EAA+B,qBAAqB;QAC9D,WAAW,EAA8B,+BAA+B;QACxE,cAAc,EAA2B,sBAAsB;QAC/D,eAAe,EAA0B,yBAAyB;KACnE,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/cli/agent/swarm.d.ts

@@ -0,0 +1,75 @@
+import type { TaskOrchestrator } from '../jarvis/orchestrator.js';
+import type { ParallelExecutor } from '../jarvis/parallel.js';
+import type { SessionManager } from '../sessions/manager.js';
+import type { Session } from '../sessions/session.js';
+import type { LLMProvider } from '../providers/types.js';
+import type { PermissionManager } from './permissions.js';
+import type { CheckpointStore } from '../checkpoints/store.js';
+import { type AgentIdentity } from './plan-types.js';
+import type { SwarmInfo } from '@helixmind/protocol';
+export interface SwarmOptions {
+    provider: LLMProvider;
+    project: any;
+    spiralEngine: any;
+    config: any;
+    permissions: PermissionManager;
+    checkpointStore: CheckpointStore;
+    onTokens: (input: number, output: number) => void;
+    onToolCall: () => void;
+    /** Called when swarm status changes (for statusbar) */
+    onStatusChange?: (active: number, total: number) => void;
+    /** Assembler + agent runner injected from chat.ts */
+    runWorkerSession: (session: Session, prompt: string, agentIdentity: AgentIdentity) => Promise<{
+        text: string;
+        errors: string[];
+    }>;
+    /** LLM message sender for orchestrator plan decomposition */
+    sendPlanMessage: (prompt: string) => Promise<string>;
+    /** Push swarm events to brain server */
+    pushSwarmCreated?: (swarm: SwarmInfo) => void;
+    pushSwarmUpdated?: (swarm: SwarmInfo) => void;
+    pushSwarmCompleted?: (swarm: SwarmInfo) => void;
+    /** Push worker events to brain server */
+    pushWorkerStarted?: (worker: {
+        workerId: number;
+        taskId: number;
+        taskTitle: string;
+        status: 'running';
+        startedAt: number;
+    }) => void;
+    pushWorkerCompleted?: (worker: {
+        workerId: number;
+        taskId: number;
+        taskTitle: string;
+        status: 'completed' | 'failed';
+        startedAt: number;
+        completedAt: number;
+    }) => void;
+}
+export declare class SwarmController {
+    private orchestrator;
+    private executor;
+    private sessionMgr;
+    private opts;
+    private swarmInfo;
+    private aborted;
+    private workerSessions;
+    constructor(orchestrator: TaskOrchestrator, executor: ParallelExecutor, sessionMgr: SessionManager, opts: SwarmOptions);
+    /** Heuristic check — delegates to orchestrator (NO LLM call) */
+    shouldSwarm(userMessage: string): boolean;
+    /** Get current swarm status */
+    getStatus(): SwarmInfo | null;
+    /** Abort all workers and mark swarm as aborted */
+    abort(): void;
+    /**
+     * Main entry point: decompose → execute in parallel → return summary.
+     * Returns empty string '' if the request is too simple for swarm.
+     */
+    run(userMessage: string): Promise<string>;
+    private spawnWorker;
+    private buildWorkerMessage;
+    private buildInitialSwarmInfo;
+    private toSwarmSubTask;
+    private buildSummary;
+}
+//# sourceMappingURL=swarm.d.ts.map

package/dist/cli/agent/swarm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swarm.d.ts","sourceRoot":"","sources":["../../../src/cli/agent/swarm.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3E,OAAO,KAAK,EAAE,SAAS,EAAoB,MAAM,qBAAqB,CAAC;AAMvE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC;IACb,YAAY,EAAE,GAAG,CAAC;IAClB,MAAM,EAAE,GAAG,CAAC;IACZ,WAAW,EAAE,iBAAiB,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,uDAAuD;IACvD,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,qDAAqD;IACrD,gBAAgB,EAAE,CAChB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,KACzB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACjD,6DAA6D;IAC7D,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAC9C,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAC9C,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAChD,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpI,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACzK;AAMD,qBAAa,eAAe;IAC1B,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,UAAU,CAAiB;IACnC,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAAmC;gBAGvD,YAAY,EAAE,gBAAgB,EAC9B,QAAQ,EAAE,gBAAgB,EAC1B,UAAU,EAAE,cAAc,EAC1B,IAAI,EAAE,YAAY;IAQpB,gEAAgE;IAChE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAIzC,+BAA+B;IAC/B,SAAS,IAAI,SAAS,GAAG,IAAI;IAI7B,kDAAkD;IAClD,KAAK,IAAI,IAAI;IAwBb;;;OAGG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAmEjC,WAAW;IAqHzB,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,YAAY;CAkBrB"}

package/dist/cli/agent/swarm.js

@@ -0,0 +1,272 @@
+/**
+ * SwarmController — connects TaskOrchestrator + ParallelExecutor + SessionManager
+ * to auto-decompose complex requests and execute them via parallel worker sessions.
+ *
+ * This is the single glue file that wires existing infrastructure together:
+ * - TaskOrchestrator: heuristic detection + LLM decomposition (from jarvis/)
+ * - ParallelExecutor: file locking + worker lifecycle (from jarvis/)
+ * - SessionManager: background session spawning (from sessions/)
+ * - Brain events: swarm_created/updated/completed push to web dashboard
+ */
+import { randomUUID } from 'node:crypto';
+import { resolveAgentIdentity } from './plan-types.js';
+// ---------------------------------------------------------------------------
+// SwarmController
+// ---------------------------------------------------------------------------
+export class SwarmController {
+    orchestrator;
+    executor;
+    sessionMgr;
+    opts;
+    swarmInfo = null;
+    aborted = false;
+    workerSessions = new Map();
+    constructor(orchestrator, executor, sessionMgr, opts) {
+        this.orchestrator = orchestrator;
+        this.executor = executor;
+        this.sessionMgr = sessionMgr;
+        this.opts = opts;
+    }
+    /** Heuristic check — delegates to orchestrator (NO LLM call) */
+    shouldSwarm(userMessage) {
+        return this.orchestrator.shouldOrchestrate(userMessage);
+    }
+    /** Get current swarm status */
+    getStatus() {
+        return this.swarmInfo;
+    }
+    /** Abort all workers and mark swarm as aborted */
+    abort() {
+        this.aborted = true;
+        this.orchestrator.abortAll();
+        this.executor.abortAll();
+        // Abort all worker sessions
+        for (const session of this.workerSessions.values()) {
+            session.abort();
+        }
+        if (this.swarmInfo) {
+            this.swarmInfo.status = 'aborted';
+            this.swarmInfo.completedAt = Date.now();
+            for (const task of this.swarmInfo.subTasks) {
+                if (task.status === 'pending' || task.status === 'running') {
+                    task.status = 'failed';
+                    task.result = 'Aborted';
+                    task.completedAt = Date.now();
+                }
+            }
+            this.opts.pushSwarmCompleted?.(this.swarmInfo);
+        }
+    }
+    /**
+     * Main entry point: decompose → execute in parallel → return summary.
+     * Returns empty string '' if the request is too simple for swarm.
+     */
+    async run(userMessage) {
+        this.aborted = false;
+        // Phase 1: LLM decomposition
+        this.swarmInfo = this.buildInitialSwarmInfo(userMessage);
+        this.swarmInfo.status = 'planning';
+        this.opts.pushSwarmCreated?.(this.swarmInfo);
+        let plan;
+        try {
+            plan = await this.orchestrator.createPlan(userMessage, this.opts.sendPlanMessage);
+        }
+        catch (err) {
+            this.swarmInfo.status = 'failed';
+            this.swarmInfo.reason = err instanceof Error ? err.message : String(err);
+            this.swarmInfo.completedAt = Date.now();
+            this.opts.pushSwarmCompleted?.(this.swarmInfo);
+            return '';
+        }
+        // If LLM says no orchestration needed or only 1 task, bail to normal flow
+        if (!plan.shouldOrchestrate || plan.subTasks.length <= 1) {
+            this.swarmInfo.status = 'completed';
+            this.swarmInfo.reason = plan.reason || 'Single task — normal flow';
+            this.swarmInfo.completedAt = Date.now();
+            this.opts.pushSwarmCompleted?.(this.swarmInfo);
+            return '';
+        }
+        // Phase 2: Build SwarmInfo from plan
+        this.swarmInfo.status = 'executing';
+        this.swarmInfo.reason = plan.reason;
+        this.swarmInfo.subTasks = plan.subTasks.map(t => this.toSwarmSubTask(t));
+        this.swarmInfo.parallelGroups = plan.parallelGroups;
+        this.opts.pushSwarmUpdated?.(this.swarmInfo);
+        this.opts.onStatusChange?.(0, plan.subTasks.length);
+        // Phase 3: Execute via orchestrator (iterates parallel groups)
+        const spawnWorker = async (subTask) => {
+            return this.spawnWorker(subTask);
+        };
+        const { completed, failed } = await this.orchestrator.execute(plan, spawnWorker, this.executor);
+        // Phase 4: Finalize
+        this.swarmInfo.totalCompleted = completed;
+        this.swarmInfo.totalFailed = failed;
+        this.swarmInfo.status = failed > 0 && completed === 0 ? 'failed' : 'completed';
+        this.swarmInfo.completedAt = Date.now();
+        // Sync final task statuses from plan
+        for (const subTask of plan.subTasks) {
+            const swarmTask = this.swarmInfo.subTasks.find(t => t.id === subTask.id);
+            if (swarmTask) {
+                swarmTask.status = subTask.status === 'completed' ? 'completed' : subTask.status === 'failed' ? 'failed' : swarmTask.status;
+                swarmTask.result = subTask.result;
+            }
+        }
+        this.opts.pushSwarmCompleted?.(this.swarmInfo);
+        this.opts.onStatusChange?.(0, 0);
+        // Build summary
+        return this.buildSummary(plan);
+    }
+    // ─── Private ────────────────────────────────────────────────────────
+    async spawnWorker(subTask) {
+        if (this.aborted) {
+            return { success: false, result: 'Aborted' };
+        }
+        const workerName = `Worker-${subTask.id}`;
+        const session = this.sessionMgr.create(workerName, '\u{1F41D}', []);
+        session.swarmId = this.swarmInfo.id;
+        session.swarmTaskId = subTask.id;
+        this.workerSessions.set(subTask.id, session);
+        // Update swarm info
+        const swarmTask = this.swarmInfo.subTasks.find(t => t.id === subTask.id);
+        if (swarmTask) {
+            swarmTask.status = 'running';
+            swarmTask.sessionId = session.id;
+            swarmTask.startedAt = Date.now();
+        }
+        this.opts.pushSwarmUpdated?.(this.swarmInfo);
+        // Push worker started event
+        const workerInfo = {
+            workerId: subTask.id,
+            taskId: subTask.id,
+            taskTitle: subTask.title,
+            status: 'running',
+            startedAt: Date.now(),
+        };
+        this.opts.pushWorkerStarted?.(workerInfo);
+        // Update statusbar
+        const running = this.swarmInfo.subTasks.filter(t => t.status === 'running').length;
+        this.opts.onStatusChange?.(running, this.swarmInfo.subTasks.length);
+        // Resolve agent identity for colored output
+        const agentIdentity = resolveAgentIdentity(workerName) ?? {
+            name: `@${workerName.toLowerCase()}`,
+            displayName: workerName,
+            color: '#ffd700',
+            icon: '\u{1F41D}',
+        };
+        // Build focused worker prompt
+        const workerPrompt = this.buildWorkerMessage(subTask);
+        session.start();
+        try {
+            const { text, errors } = await this.opts.runWorkerSession(session, workerPrompt, agentIdentity);
+            const success = errors.length === 0;
+            session.complete({
+                text: text.slice(0, 2000),
+                steps: [],
+                errors,
+                durationMs: session.elapsed,
+            });
+            // Update swarm task
+            if (swarmTask) {
+                swarmTask.status = success ? 'completed' : 'failed';
+                swarmTask.completedAt = Date.now();
+                swarmTask.result = text.slice(0, 500);
+            }
+            this.opts.pushSwarmUpdated?.(this.swarmInfo);
+            // Push worker completed event
+            this.opts.pushWorkerCompleted?.({
+                workerId: subTask.id,
+                taskId: subTask.id,
+                taskTitle: subTask.title,
+                status: success ? 'completed' : 'failed',
+                startedAt: workerInfo.startedAt,
+                completedAt: Date.now(),
+            });
+            // Update statusbar
+            const nowRunning = this.swarmInfo.subTasks.filter(t => t.status === 'running').length;
+            this.opts.onStatusChange?.(nowRunning, this.swarmInfo.subTasks.length);
+            this.sessionMgr.complete(session.id, session.result);
+            this.workerSessions.delete(subTask.id);
+            return { success, result: text };
+        }
+        catch (err) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            session.complete({
+                text: errorMsg,
+                steps: [],
+                errors: [errorMsg],
+                durationMs: session.elapsed,
+            });
+            if (swarmTask) {
+                swarmTask.status = 'failed';
+                swarmTask.completedAt = Date.now();
+                swarmTask.result = errorMsg;
+            }
+            this.opts.pushSwarmUpdated?.(this.swarmInfo);
+            this.opts.pushWorkerCompleted?.({
+                workerId: subTask.id,
+                taskId: subTask.id,
+                taskTitle: subTask.title,
+                status: 'failed',
+                startedAt: workerInfo.startedAt,
+                completedAt: Date.now(),
+            });
+            this.sessionMgr.complete(session.id, session.result);
+            this.workerSessions.delete(subTask.id);
+            return { success: false, result: errorMsg };
+        }
+    }
+    buildWorkerMessage(subTask) {
+        const files = subTask.affectedFiles.length > 0
+            ? `\nTarget files: ${subTask.affectedFiles.join(', ')}`
+            : '';
+        return `You are Worker-${subTask.id}, a focused coding agent.
+
+YOUR TASK: ${subTask.title}
+
+DESCRIPTION: ${subTask.description}${files}
+
+IMPORTANT:
+- Focus ONLY on this specific task. Do not do anything else.
+- If a file is locked by another agent, skip it and note that in your response.
+- Be concise in your responses. Complete the task and report what you did.`;
+    }
+    buildInitialSwarmInfo(userMessage) {
+        return {
+            id: randomUUID(),
+            originalRequest: userMessage.slice(0, 500),
+            status: 'idle',
+            reason: '',
+            subTasks: [],
+            parallelGroups: [],
+            startedAt: Date.now(),
+            totalCompleted: 0,
+            totalFailed: 0,
+        };
+    }
+    toSwarmSubTask(subTask) {
+        return {
+            id: subTask.id,
+            title: subTask.title,
+            description: subTask.description,
+            affectedFiles: subTask.affectedFiles,
+            dependencies: subTask.dependencies,
+            status: subTask.status === 'completed' ? 'completed' : subTask.status === 'failed' ? 'failed' : subTask.status === 'running' ? 'running' : 'pending',
+        };
+    }
+    buildSummary(plan) {
+        const completed = plan.subTasks.filter(t => t.status === 'completed');
+        const failed = plan.subTasks.filter(t => t.status === 'failed');
+        let summary = `\u{1F41D} **Swarm Complete** — ${completed.length}/${plan.subTasks.length} tasks succeeded`;
+        if (failed.length > 0) {
+            summary += `, ${failed.length} failed`;
+        }
+        summary += '\n\n';
+        for (const task of plan.subTasks) {
+            const icon = task.status === 'completed' ? '\u2705' : '\u274C';
+            const result = task.result ? `: ${task.result.slice(0, 200)}` : '';
+            summary += `${icon} **${task.title}**${result}\n`;
+        }
+        return summary;
+    }
+}
+//# sourceMappingURL=swarm.js.map