octoflow-core 1.0.0

package/dist/runtime/bridge/workflows/schedule.d.ts

@@ -0,0 +1,11 @@
+interface CronMatcher {
+    minutes: Set<number>;
+    hours: Set<number>;
+    daysOfMonth: Set<number>;
+    months: Set<number>;
+    daysOfWeek: Set<number>;
+}
+export declare function parseCronExpression(expression: string): CronMatcher;
+export declare function nextCronDate(expression: string, from?: Date): Date;
+export {};
+//# sourceMappingURL=schedule.d.ts.map

package/dist/runtime/bridge/workflows/schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../../../src/runtime/bridge/workflows/schedule.ts"],"names":[],"mappings":"AAGA,UAAU,WAAW;IACnB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACzB;AAmED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,CAenE;AAYD,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,IAAiB,GACtB,IAAI,CAgBN"}

package/dist/runtime/bridge/workflows/schedule.js

@@ -0,0 +1,94 @@
+const FIELD_COUNT = 5;
+const MAX_MINUTES_TO_SCAN = 366 * 24 * 60;
+function range(start, end) {
+  const values = [];
+  for (let value = start; value <= end; value++) {
+    values.push(value);
+  }
+  return values;
+}
+function parseField(field, min, max, opts = {}) {
+  const values = /* @__PURE__ */ new Set();
+  const parts = field.split(",");
+  if (parts.some((part) => part.trim() === "")) {
+    throw new Error(`Invalid cron field "${field}"`);
+  }
+  for (const rawPart of parts) {
+    const [rawBasePart, rawStep] = rawPart.split("/");
+    const rawBase = rawBasePart ?? "";
+    if (rawStep !== void 0 && !/^\d+$/.test(rawStep)) {
+      throw new Error(`Invalid cron step "${rawStep}"`);
+    }
+    const step = rawStep === void 0 ? 1 : Number(rawStep);
+    if (step <= 0) {
+      throw new Error("Cron step must be greater than 0");
+    }
+    let candidates;
+    if (rawBase === "*") {
+      candidates = range(min, max);
+    } else if (rawBase.includes("-")) {
+      const [rawStart, rawEnd] = rawBase.split("-");
+      const start = Number(rawStart);
+      const end = Number(rawEnd);
+      if (!Number.isInteger(start) || !Number.isInteger(end) || start > end) {
+        throw new Error(`Invalid cron range "${rawBase}"`);
+      }
+      candidates = range(start, end);
+    } else {
+      const value = Number(rawBase);
+      if (!Number.isInteger(value)) {
+        throw new Error(`Invalid cron value "${rawBase}"`);
+      }
+      candidates = [value];
+    }
+    for (const candidate of candidates) {
+      const normalized = opts.sundaySeven && candidate === 7 ? 0 : candidate;
+      if (normalized < min || normalized > max) {
+        throw new Error(`Cron value ${candidate} out of range ${min}-${max}`);
+      }
+      const firstCandidate = candidates[0] ?? candidate;
+      if ((candidate - firstCandidate) % step === 0) {
+        values.add(normalized);
+      }
+    }
+  }
+  return values;
+}
+function parseCronExpression(expression) {
+  const fields = expression.trim().split(/\s+/);
+  if (fields.length !== FIELD_COUNT) {
+    throw new Error(
+      "Cron expressions must use five fields: minute hour day-of-month month day-of-week"
+    );
+  }
+  return {
+    minutes: parseField(fields[0], 0, 59),
+    hours: parseField(fields[1], 0, 23),
+    daysOfMonth: parseField(fields[2], 1, 31),
+    months: parseField(fields[3], 1, 12),
+    daysOfWeek: parseField(fields[4], 0, 7, { sundaySeven: true })
+  };
+}
+function matches(date, matcher) {
+  return matcher.minutes.has(date.getMinutes()) && matcher.hours.has(date.getHours()) && matcher.daysOfMonth.has(date.getDate()) && matcher.months.has(date.getMonth() + 1) && matcher.daysOfWeek.has(date.getDay());
+}
+function nextCronDate(expression, from = /* @__PURE__ */ new Date()) {
+  const matcher = parseCronExpression(expression);
+  const cursor = new Date(from);
+  cursor.setSeconds(0, 0);
+  cursor.setMinutes(cursor.getMinutes() + 1);
+  for (let checked = 0; checked < MAX_MINUTES_TO_SCAN; checked++) {
+    if (matches(cursor, matcher)) {
+      return new Date(cursor);
+    }
+    cursor.setMinutes(cursor.getMinutes() + 1);
+  }
+  throw new Error(
+    `Unable to find next cron run for expression "${expression}"`
+  );
+}
+export {
+  nextCronDate,
+  parseCronExpression
+};
+//# sourceMappingURL=schedule.js.map

package/dist/runtime/bridge/workflows/schedule.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/runtime/bridge/workflows/schedule.ts"],
+  "sourcesContent": ["const FIELD_COUNT = 5;\nconst MAX_MINUTES_TO_SCAN = 366 * 24 * 60;\n\ninterface CronMatcher {\n  minutes: Set<number>;\n  hours: Set<number>;\n  daysOfMonth: Set<number>;\n  months: Set<number>;\n  daysOfWeek: Set<number>;\n}\n\nfunction range(start: number, end: number): number[] {\n  const values: number[] = [];\n  for (let value = start; value <= end; value++) {\n    values.push(value);\n  }\n  return values;\n}\n\nfunction parseField(\n  field: string,\n  min: number,\n  max: number,\n  opts: { sundaySeven?: boolean } = {}\n): Set<number> {\n  const values = new Set<number>();\n  const parts = field.split(',');\n  if (parts.some((part) => part.trim() === '')) {\n    throw new Error(`Invalid cron field \"${field}\"`);\n  }\n\n  for (const rawPart of parts) {\n    const [rawBasePart, rawStep] = rawPart.split('/');\n    const rawBase = rawBasePart ?? '';\n    if (rawStep !== undefined && !/^\\d+$/.test(rawStep)) {\n      throw new Error(`Invalid cron step \"${rawStep}\"`);\n    }\n    const step = rawStep === undefined ? 1 : Number(rawStep);\n    if (step <= 0) {\n      throw new Error('Cron step must be greater than 0');\n    }\n\n    let candidates: number[];\n    if (rawBase === '*') {\n      candidates = range(min, max);\n    } else if (rawBase.includes('-')) {\n      const [rawStart, rawEnd] = rawBase.split('-');\n      const start = Number(rawStart);\n      const end = Number(rawEnd);\n      if (!Number.isInteger(start) || !Number.isInteger(end) || start > end) {\n        throw new Error(`Invalid cron range \"${rawBase}\"`);\n      }\n      candidates = range(start, end);\n    } else {\n      const value = Number(rawBase);\n      if (!Number.isInteger(value)) {\n        throw new Error(`Invalid cron value \"${rawBase}\"`);\n      }\n      candidates = [value];\n    }\n\n    for (const candidate of candidates) {\n      const normalized = opts.sundaySeven && candidate === 7 ? 0 : candidate;\n      if (normalized < min || normalized > max) {\n        throw new Error(`Cron value ${candidate} out of range ${min}-${max}`);\n      }\n      const firstCandidate = candidates[0] ?? candidate;\n      if ((candidate - firstCandidate) % step === 0) {\n        values.add(normalized);\n      }\n    }\n  }\n\n  return values;\n}\n\nexport function parseCronExpression(expression: string): CronMatcher {\n  const fields = expression.trim().split(/\\s+/);\n  if (fields.length !== FIELD_COUNT) {\n    throw new Error(\n      'Cron expressions must use five fields: minute hour day-of-month month day-of-week'\n    );\n  }\n\n  return {\n    minutes: parseField(fields[0]!, 0, 59),\n    hours: parseField(fields[1]!, 0, 23),\n    daysOfMonth: parseField(fields[2]!, 1, 31),\n    months: parseField(fields[3]!, 1, 12),\n    daysOfWeek: parseField(fields[4]!, 0, 7, { sundaySeven: true }),\n  };\n}\n\nfunction matches(date: Date, matcher: CronMatcher): boolean {\n  return (\n    matcher.minutes.has(date.getMinutes()) &&\n    matcher.hours.has(date.getHours()) &&\n    matcher.daysOfMonth.has(date.getDate()) &&\n    matcher.months.has(date.getMonth() + 1) &&\n    matcher.daysOfWeek.has(date.getDay())\n  );\n}\n\nexport function nextCronDate(\n  expression: string,\n  from: Date = new Date()\n): Date {\n  const matcher = parseCronExpression(expression);\n  const cursor = new Date(from);\n  cursor.setSeconds(0, 0);\n  cursor.setMinutes(cursor.getMinutes() + 1);\n\n  for (let checked = 0; checked < MAX_MINUTES_TO_SCAN; checked++) {\n    if (matches(cursor, matcher)) {\n      return new Date(cursor);\n    }\n    cursor.setMinutes(cursor.getMinutes() + 1);\n  }\n\n  throw new Error(\n    `Unable to find next cron run for expression \"${expression}\"`\n  );\n}\n"],
+  "mappings": "AAAA,MAAM,cAAc;AACpB,MAAM,sBAAsB,MAAM,KAAK;AAUvC,SAAS,MAAM,OAAe,KAAuB;AACnD,QAAM,SAAmB,CAAC;AAC1B,WAAS,QAAQ,OAAO,SAAS,KAAK,SAAS;AAC7C,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,SAAO;AACT;AAEA,SAAS,WACP,OACA,KACA,KACA,OAAkC,CAAC,GACtB;AACb,QAAM,SAAS,oBAAI,IAAY;AAC/B,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MAAI,MAAM,KAAK,CAAC,SAAS,KAAK,KAAK,MAAM,EAAE,GAAG;AAC5C,UAAM,IAAI,MAAM,uBAAuB,KAAK,GAAG;AAAA,EACjD;AAEA,aAAW,WAAW,OAAO;AAC3B,UAAM,CAAC,aAAa,OAAO,IAAI,QAAQ,MAAM,GAAG;AAChD,UAAM,UAAU,eAAe;AAC/B,QAAI,YAAY,UAAa,CAAC,QAAQ,KAAK,OAAO,GAAG;AACnD,YAAM,IAAI,MAAM,sBAAsB,OAAO,GAAG;AAAA,IAClD;AACA,UAAM,OAAO,YAAY,SAAY,IAAI,OAAO,OAAO;AACvD,QAAI,QAAQ,GAAG;AACb,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD;AAEA,QAAI;AACJ,QAAI,YAAY,KAAK;AACnB,mBAAa,MAAM,KAAK,GAAG;AAAA,IAC7B,WAAW,QAAQ,SAAS,GAAG,GAAG;AAChC,YAAM,CAAC,UAAU,MAAM,IAAI,QAAQ,MAAM,GAAG;AAC5C,YAAM,QAAQ,OAAO,QAAQ;AAC7B,YAAM,MAAM,OAAO,MAAM;AACzB,UAAI,CAAC,OAAO,UAAU,KAAK,KAAK,CAAC,OAAO,UAAU,GAAG,KAAK,QAAQ,KAAK;AACrE,cAAM,IAAI,MAAM,uBAAuB,OAAO,GAAG;AAAA,MACnD;AACA,mBAAa,MAAM,OAAO,GAAG;AAAA,IAC/B,OAAO;AACL,YAAM,QAAQ,OAAO,OAAO;AAC5B,UAAI,CAAC,OAAO,UAAU,KAAK,GAAG;AAC5B,cAAM,IAAI,MAAM,uBAAuB,OAAO,GAAG;AAAA,MACnD;AACA,mBAAa,CAAC,KAAK;AAAA,IACrB;AAEA,eAAW,aAAa,YAAY;AAClC,YAAM,aAAa,KAAK,eAAe,cAAc,IAAI,IAAI;AAC7D,UAAI,aAAa,OAAO,aAAa,KAAK;AACxC,cAAM,IAAI,MAAM,cAAc,SAAS,iBAAiB,GAAG,IAAI,GAAG,EAAE;AAAA,MACtE;AACA,YAAM,iBAAiB,WAAW,CAAC,KAAK;AACxC,WAAK,YAAY,kBAAkB,SAAS,GAAG;AAC7C,eAAO,IAAI,UAAU;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,oBAAoB,YAAiC;AACnE,QAAM,SAAS,WAAW,KAAK,EAAE,MAAM,KAAK;AAC5C,MAAI,OAAO,WAAW,aAAa;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS,WAAW,OAAO,CAAC,GAAI,GAAG,EAAE;AAAA,IACrC,OAAO,WAAW,OAAO,CAAC,GAAI,GAAG,EAAE;AAAA,IACnC,aAAa,WAAW,OAAO,CAAC,GAAI,GAAG,EAAE;AAAA,IACzC,QAAQ,WAAW,OAAO,CAAC,GAAI,GAAG,EAAE;AAAA,IACpC,YAAY,WAAW,OAAO,CAAC,GAAI,GAAG,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAChE;AACF;AAEA,SAAS,QAAQ,MAAY,SAA+B;AAC1D,SACE,QAAQ,QAAQ,IAAI,KAAK,WAAW,CAAC,KACrC,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,KACjC,QAAQ,YAAY,IAAI,KAAK,QAAQ,CAAC,KACtC,QAAQ,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,KACtC,QAAQ,WAAW,IAAI,KAAK,OAAO,CAAC;AAExC;AAEO,SAAS,aACd,YACA,OAAa,oBAAI,KAAK,GAChB;AACN,QAAM,UAAU,oBAAoB,UAAU;AAC9C,QAAM,SAAS,IAAI,KAAK,IAAI;AAC5B,SAAO,WAAW,GAAG,CAAC;AACtB,SAAO,WAAW,OAAO,WAAW,IAAI,CAAC;AAEzC,WAAS,UAAU,GAAG,UAAU,qBAAqB,WAAW;AAC9D,QAAI,QAAQ,QAAQ,OAAO,GAAG;AAC5B,aAAO,IAAI,KAAK,MAAM;AAAA,IACxB;AACA,WAAO,WAAW,OAAO,WAAW,IAAI,CAAC;AAAA,EAC3C;AAEA,QAAM,IAAI;AAAA,IACR,gDAAgD,UAAU;AAAA,EAC5D;AACF;",
+  "names": []
+}

package/dist/runtime/bridge/workflows/types.d.ts

@@ -0,0 +1,36 @@
+import type { BridgeSendMessageParams, BridgeSendResult } from '../../../domain/bridge-api.js';
+import type { BridgeMetadata } from '../../../domain/core-task.js';
+export type WorkflowSchedule = 'once' | 'cron';
+export interface WorkflowCronOptions {
+    /** Five-field cron expression: minute hour day-of-month month day-of-week. */
+    cron: string;
+    /** Run once immediately before waiting for the first cron tick. Default: false. */
+    immediate?: boolean;
+    timeoutMs?: number;
+    contextId?: string;
+    tenant?: string;
+    metadata?: BridgeMetadata;
+    onError?: BridgeSendMessageParams['onError'];
+}
+export interface WorkflowRunSnapshot {
+    runNumber: number;
+    taskId: string | null;
+    startedAt: string;
+    completedAt?: string;
+}
+export interface WorkflowHandle {
+    readonly id: string;
+    readonly context: string;
+    readonly schedule: WorkflowSchedule;
+    readonly cron: string | null;
+    readonly lastTaskId: string | null;
+    readonly lastRunAt: string | null;
+    readonly nextRunAt: string | null;
+    readonly runCount: number;
+    /** Resolves with the first submitted run. For one-shot workflows this is the only run. */
+    readonly done: Promise<BridgeSendResult>;
+    runNow(): Promise<BridgeSendResult>;
+    stop(): Promise<void>;
+}
+export type WorkflowSender = (params: BridgeSendMessageParams) => Promise<BridgeSendResult>;
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/bridge/workflows/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/runtime/bridge/workflows/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzC,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,MAAM,EAAE,uBAAuB,KAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/runtime/bridge/workflows/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/dist/runtime/bridge/workflows/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/runtime/isolation/managed-worktree.d.ts

@@ -0,0 +1,20 @@
+export interface ManagedWorktreeOptions {
+    readonly name?: string;
+    readonly baseRef?: string;
+    readonly root?: string;
+    readonly cleanup?: 'always' | 'never';
+    readonly dirty?: 'copy' | 'fail' | 'ignore';
+    readonly reuse?: boolean;
+}
+export type ManagedWorktreeRequest = boolean | string | ManagedWorktreeOptions | undefined;
+export interface ManagedWorktreeResolution {
+    readonly workspace: string;
+    readonly cleanup?: () => Promise<void>;
+    readonly managed: boolean;
+}
+export declare function resolveManagedWorktree(options: {
+    readonly workspace: string;
+    readonly worktree: ManagedWorktreeRequest;
+    readonly sessionId?: string | null;
+}): Promise<ManagedWorktreeResolution>;
+//# sourceMappingURL=managed-worktree.d.ts.map

package/dist/runtime/isolation/managed-worktree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-worktree.d.ts","sourceRoot":"","sources":["../../../src/runtime/isolation/managed-worktree.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAAC;AAE3F,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAqID,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAiDrC"}

package/dist/runtime/isolation/managed-worktree.js

@@ -0,0 +1,147 @@
+import { execFile } from "node:child_process";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+function isOptions(value) {
+  return typeof value === "object" && value != null;
+}
+function sanitizeName(value) {
+  const sanitized = value.replace(/[^a-zA-Z0-9._-]/g, "-").replace(/^-+|-+$/g, "");
+  return sanitized || `agent-${crypto.randomUUID()}`;
+}
+async function gitRaw(args, cwd) {
+  const { stdout } = await execFileAsync("git", args, {
+    cwd,
+    maxBuffer: 10 * 1024 * 1024
+  });
+  return String(stdout);
+}
+async function git(args, cwd) {
+  return (await gitRaw(args, cwd)).trim();
+}
+async function resolveGitRoot(workspace) {
+  return git(["rev-parse", "--show-toplevel"], workspace);
+}
+async function removeWorktree(gitRoot, worktreePath) {
+  try {
+    await git(["worktree", "remove", "--force", worktreePath], gitRoot);
+  } catch {
+    await fs.promises.rm(worktreePath, { recursive: true, force: true });
+  }
+}
+function toGitPath(relativePath) {
+  return relativePath.split(path.sep).join("/");
+}
+function sourcePathspecs(gitRoot, managedRoot) {
+  if (!managedRoot) return ["."];
+  const relativeRoot = path.relative(gitRoot, managedRoot);
+  if (relativeRoot.length === 0 || relativeRoot.startsWith("..") || path.isAbsolute(relativeRoot)) {
+    return ["."];
+  }
+  const gitPath = toGitPath(relativeRoot);
+  return [".", `:!${gitPath}`, `:!${gitPath}/**`];
+}
+async function gitStatus(workspace, managedRoot) {
+  return gitRaw(
+    ["status", "--porcelain", "--untracked-files=normal", "--", ...sourcePathspecs(workspace, managedRoot)],
+    workspace
+  );
+}
+async function ensureCleanTarget(worktreePath) {
+  const status = (await gitStatus(worktreePath)).trim();
+  if (status.length > 0) {
+    throw new Error(
+      `Managed worktree dirty copy requires a clean target worktree: ${worktreePath}`
+    );
+  }
+}
+function assertRelativeGitPath(relativePath) {
+  if (relativePath.length === 0 || relativePath.startsWith("..") || path.isAbsolute(relativePath)) {
+    throw new Error(`Unsafe git path reported by repository: ${relativePath}`);
+  }
+}
+async function copyUntrackedFiles(gitRoot, worktreePath, managedRoot) {
+  const raw = await gitRaw(
+    [
+      "ls-files",
+      "--others",
+      "--exclude-standard",
+      "-z",
+      "--",
+      ...sourcePathspecs(gitRoot, managedRoot)
+    ],
+    gitRoot
+  );
+  const files = raw.split("\0").filter(Boolean);
+  for (const file of files) {
+    assertRelativeGitPath(file);
+    const source = path.join(gitRoot, file);
+    const target = path.join(worktreePath, file);
+    const stat = await fs.promises.stat(source).catch(() => null);
+    if (!stat?.isFile()) continue;
+    await fs.promises.mkdir(path.dirname(target), { recursive: true });
+    await fs.promises.copyFile(source, target);
+  }
+}
+async function applyTrackedDiff(gitRoot, worktreePath) {
+  const patch = await gitRaw(["diff", "--binary", "HEAD", "--"], gitRoot);
+  if (patch.trim().length === 0) return;
+  const patchPath = path.join(
+    worktreePath,
+    `.octoflow-dirty-${crypto.randomUUID()}.patch`
+  );
+  await fs.promises.writeFile(patchPath, patch);
+  try {
+    await git(["apply", "--binary", patchPath], worktreePath);
+  } finally {
+    await fs.promises.rm(patchPath, { force: true });
+  }
+}
+async function copyDirtyState(gitRoot, worktreePath, managedRoot) {
+  await ensureCleanTarget(worktreePath);
+  await applyTrackedDiff(gitRoot, worktreePath);
+  await copyUntrackedFiles(gitRoot, worktreePath, managedRoot);
+}
+async function resolveManagedWorktree(options) {
+  if (!options.worktree) {
+    return { workspace: options.workspace, managed: false };
+  }
+  const config = isOptions(options.worktree) ? options.worktree : {};
+  const explicitName = typeof options.worktree === "string" ? options.worktree : isOptions(options.worktree) ? options.worktree.name : void 0;
+  const name = sanitizeName(explicitName ?? options.sessionId ?? `agent-${crypto.randomUUID()}`);
+  const gitRoot = await resolveGitRoot(options.workspace);
+  const dirty = config.dirty ?? "ignore";
+  const root = path.resolve(config.root ?? path.join(gitRoot, ".octoflow", "worktrees"));
+  if (dirty === "fail" && (await gitStatus(gitRoot, root)).trim().length > 0) {
+    throw new Error(
+      "Managed worktree refused to run because the source repository has uncommitted changes."
+    );
+  }
+  const worktreePath = path.join(root, name);
+  const relative = path.relative(root, worktreePath);
+  if (relative.startsWith("..") || path.isAbsolute(relative)) {
+    throw new Error(`Managed worktree path escapes root: ${worktreePath}`);
+  }
+  await fs.promises.mkdir(root, { recursive: true });
+  if (fs.existsSync(worktreePath)) {
+    if (!config.reuse) {
+      throw new Error(`Managed worktree already exists: ${worktreePath}`);
+    }
+  } else {
+    const baseRef = config.baseRef ?? "HEAD";
+    await git(["worktree", "add", "--detach", worktreePath, baseRef], gitRoot);
+  }
+  if (dirty === "copy") {
+    await copyDirtyState(gitRoot, worktreePath, root);
+  }
+  const cleanup = config.cleanup === "never" ? void 0 : async () => {
+    await removeWorktree(gitRoot, worktreePath);
+  };
+  return { workspace: worktreePath, cleanup, managed: true };
+}
+export {
+  resolveManagedWorktree
+};
+//# sourceMappingURL=managed-worktree.js.map

package/dist/runtime/isolation/managed-worktree.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/isolation/managed-worktree.ts"],
+  "sourcesContent": ["import { execFile } from 'node:child_process';\nimport crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { promisify } from 'node:util';\n\nconst execFileAsync = promisify(execFile);\n\nexport interface ManagedWorktreeOptions {\n  readonly name?: string;\n  readonly baseRef?: string;\n  readonly root?: string;\n  readonly cleanup?: 'always' | 'never';\n  readonly dirty?: 'copy' | 'fail' | 'ignore';\n  readonly reuse?: boolean;\n}\n\nexport type ManagedWorktreeRequest = boolean | string | ManagedWorktreeOptions | undefined;\n\nexport interface ManagedWorktreeResolution {\n  readonly workspace: string;\n  readonly cleanup?: () => Promise<void>;\n  readonly managed: boolean;\n}\n\nfunction isOptions(value: ManagedWorktreeRequest): value is ManagedWorktreeOptions {\n  return typeof value === 'object' && value != null;\n}\n\nfunction sanitizeName(value: string): string {\n  const sanitized = value.replace(/[^a-zA-Z0-9._-]/g, '-').replace(/^-+|-+$/g, '');\n  return sanitized || `agent-${crypto.randomUUID()}`;\n}\n\nasync function gitRaw(args: string[], cwd: string): Promise<string> {\n  const { stdout } = await execFileAsync('git', args, {\n    cwd,\n    maxBuffer: 10 * 1024 * 1024,\n  });\n  return String(stdout);\n}\n\nasync function git(args: string[], cwd: string): Promise<string> {\n  return (await gitRaw(args, cwd)).trim();\n}\n\nasync function resolveGitRoot(workspace: string): Promise<string> {\n  return git(['rev-parse', '--show-toplevel'], workspace);\n}\n\nasync function removeWorktree(gitRoot: string, worktreePath: string): Promise<void> {\n  try {\n    await git(['worktree', 'remove', '--force', worktreePath], gitRoot);\n  } catch {\n    await fs.promises.rm(worktreePath, { recursive: true, force: true });\n  }\n}\n\nfunction toGitPath(relativePath: string): string {\n  return relativePath.split(path.sep).join('/');\n}\n\nfunction sourcePathspecs(gitRoot: string, managedRoot?: string): string[] {\n  if (!managedRoot) return ['.'];\n  const relativeRoot = path.relative(gitRoot, managedRoot);\n  if (\n    relativeRoot.length === 0 ||\n    relativeRoot.startsWith('..') ||\n    path.isAbsolute(relativeRoot)\n  ) {\n    return ['.'];\n  }\n\n  const gitPath = toGitPath(relativeRoot);\n  return ['.', `:!${gitPath}`, `:!${gitPath}/**`];\n}\n\nasync function gitStatus(workspace: string, managedRoot?: string): Promise<string> {\n  return gitRaw(\n    ['status', '--porcelain', '--untracked-files=normal', '--', ...sourcePathspecs(workspace, managedRoot)],\n    workspace\n  );\n}\n\nasync function ensureCleanTarget(worktreePath: string): Promise<void> {\n  const status = (await gitStatus(worktreePath)).trim();\n  if (status.length > 0) {\n    throw new Error(\n      `Managed worktree dirty copy requires a clean target worktree: ${worktreePath}`\n    );\n  }\n}\n\nfunction assertRelativeGitPath(relativePath: string): void {\n  if (\n    relativePath.length === 0 ||\n    relativePath.startsWith('..') ||\n    path.isAbsolute(relativePath)\n  ) {\n    throw new Error(`Unsafe git path reported by repository: ${relativePath}`);\n  }\n}\n\nasync function copyUntrackedFiles(\n  gitRoot: string,\n  worktreePath: string,\n  managedRoot: string\n): Promise<void> {\n  const raw = await gitRaw(\n    [\n      'ls-files',\n      '--others',\n      '--exclude-standard',\n      '-z',\n      '--',\n      ...sourcePathspecs(gitRoot, managedRoot),\n    ],\n    gitRoot\n  );\n  const files = raw.split('\\0').filter(Boolean);\n  for (const file of files) {\n    assertRelativeGitPath(file);\n    const source = path.join(gitRoot, file);\n    const target = path.join(worktreePath, file);\n    const stat = await fs.promises.stat(source).catch(() => null);\n    if (!stat?.isFile()) continue;\n    await fs.promises.mkdir(path.dirname(target), { recursive: true });\n    await fs.promises.copyFile(source, target);\n  }\n}\n\nasync function applyTrackedDiff(gitRoot: string, worktreePath: string): Promise<void> {\n  const patch = await gitRaw(['diff', '--binary', 'HEAD', '--'], gitRoot);\n  if (patch.trim().length === 0) return;\n  const patchPath = path.join(\n    worktreePath,\n    `.octoflow-dirty-${crypto.randomUUID()}.patch`\n  );\n  await fs.promises.writeFile(patchPath, patch);\n  try {\n    await git(['apply', '--binary', patchPath], worktreePath);\n  } finally {\n    await fs.promises.rm(patchPath, { force: true });\n  }\n}\n\nasync function copyDirtyState(\n  gitRoot: string,\n  worktreePath: string,\n  managedRoot: string\n): Promise<void> {\n  await ensureCleanTarget(worktreePath);\n  await applyTrackedDiff(gitRoot, worktreePath);\n  await copyUntrackedFiles(gitRoot, worktreePath, managedRoot);\n}\n\nexport async function resolveManagedWorktree(options: {\n  readonly workspace: string;\n  readonly worktree: ManagedWorktreeRequest;\n  readonly sessionId?: string | null;\n}): Promise<ManagedWorktreeResolution> {\n  if (!options.worktree) {\n    return { workspace: options.workspace, managed: false };\n  }\n\n  const config = isOptions(options.worktree) ? options.worktree : {};\n  const explicitName =\n    typeof options.worktree === 'string'\n      ? options.worktree\n      : isOptions(options.worktree)\n        ? options.worktree.name\n        : undefined;\n  const name = sanitizeName(explicitName ?? options.sessionId ?? `agent-${crypto.randomUUID()}`);\n  const gitRoot = await resolveGitRoot(options.workspace);\n  const dirty = config.dirty ?? 'ignore';\n  const root = path.resolve(config.root ?? path.join(gitRoot, '.octoflow', 'worktrees'));\n  if (dirty === 'fail' && (await gitStatus(gitRoot, root)).trim().length > 0) {\n    throw new Error(\n      'Managed worktree refused to run because the source repository has uncommitted changes.'\n    );\n  }\n  const worktreePath = path.join(root, name);\n  const relative = path.relative(root, worktreePath);\n  if (relative.startsWith('..') || path.isAbsolute(relative)) {\n    throw new Error(`Managed worktree path escapes root: ${worktreePath}`);\n  }\n\n  await fs.promises.mkdir(root, { recursive: true });\n  if (fs.existsSync(worktreePath)) {\n    if (!config.reuse) {\n      throw new Error(`Managed worktree already exists: ${worktreePath}`);\n    }\n  } else {\n    const baseRef = config.baseRef ?? 'HEAD';\n    await git(['worktree', 'add', '--detach', worktreePath, baseRef], gitRoot);\n  }\n\n  if (dirty === 'copy') {\n    await copyDirtyState(gitRoot, worktreePath, root);\n  }\n\n  const cleanup =\n    config.cleanup === 'never'\n      ? undefined\n      : async () => {\n          await removeWorktree(gitRoot, worktreePath);\n        };\n\n  return { workspace: worktreePath, cleanup, managed: true };\n}\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;AACzB,OAAO,YAAY;AACnB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAE1B,MAAM,gBAAgB,UAAU,QAAQ;AAmBxC,SAAS,UAAU,OAAgE;AACjF,SAAO,OAAO,UAAU,YAAY,SAAS;AAC/C;AAEA,SAAS,aAAa,OAAuB;AAC3C,QAAM,YAAY,MAAM,QAAQ,oBAAoB,GAAG,EAAE,QAAQ,YAAY,EAAE;AAC/E,SAAO,aAAa,SAAS,OAAO,WAAW,CAAC;AAClD;AAEA,eAAe,OAAO,MAAgB,KAA8B;AAClE,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,OAAO,MAAM;AAAA,IAClD;AAAA,IACA,WAAW,KAAK,OAAO;AAAA,EACzB,CAAC;AACD,SAAO,OAAO,MAAM;AACtB;AAEA,eAAe,IAAI,MAAgB,KAA8B;AAC/D,UAAQ,MAAM,OAAO,MAAM,GAAG,GAAG,KAAK;AACxC;AAEA,eAAe,eAAe,WAAoC;AAChE,SAAO,IAAI,CAAC,aAAa,iBAAiB,GAAG,SAAS;AACxD;AAEA,eAAe,eAAe,SAAiB,cAAqC;AAClF,MAAI;AACF,UAAM,IAAI,CAAC,YAAY,UAAU,WAAW,YAAY,GAAG,OAAO;AAAA,EACpE,QAAQ;AACN,UAAM,GAAG,SAAS,GAAG,cAAc,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACrE;AACF;AAEA,SAAS,UAAU,cAA8B;AAC/C,SAAO,aAAa,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AAC9C;AAEA,SAAS,gBAAgB,SAAiB,aAAgC;AACxE,MAAI,CAAC,YAAa,QAAO,CAAC,GAAG;AAC7B,QAAM,eAAe,KAAK,SAAS,SAAS,WAAW;AACvD,MACE,aAAa,WAAW,KACxB,aAAa,WAAW,IAAI,KAC5B,KAAK,WAAW,YAAY,GAC5B;AACA,WAAO,CAAC,GAAG;AAAA,EACb;AAEA,QAAM,UAAU,UAAU,YAAY;AACtC,SAAO,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,OAAO,KAAK;AAChD;AAEA,eAAe,UAAU,WAAmB,aAAuC;AACjF,SAAO;AAAA,IACL,CAAC,UAAU,eAAe,4BAA4B,MAAM,GAAG,gBAAgB,WAAW,WAAW,CAAC;AAAA,IACtG;AAAA,EACF;AACF;AAEA,eAAe,kBAAkB,cAAqC;AACpE,QAAM,UAAU,MAAM,UAAU,YAAY,GAAG,KAAK;AACpD,MAAI,OAAO,SAAS,GAAG;AACrB,UAAM,IAAI;AAAA,MACR,iEAAiE,YAAY;AAAA,IAC/E;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,cAA4B;AACzD,MACE,aAAa,WAAW,KACxB,aAAa,WAAW,IAAI,KAC5B,KAAK,WAAW,YAAY,GAC5B;AACA,UAAM,IAAI,MAAM,2CAA2C,YAAY,EAAE;AAAA,EAC3E;AACF;AAEA,eAAe,mBACb,SACA,cACA,aACe;AACf,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,gBAAgB,SAAS,WAAW;AAAA,IACzC;AAAA,IACA;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,MAAM,IAAI,EAAE,OAAO,OAAO;AAC5C,aAAW,QAAQ,OAAO;AACxB,0BAAsB,IAAI;AAC1B,UAAM,SAAS,KAAK,KAAK,SAAS,IAAI;AACtC,UAAM,SAAS,KAAK,KAAK,cAAc,IAAI;AAC3C,UAAM,OAAO,MAAM,GAAG,SAAS,KAAK,MAAM,EAAE,MAAM,MAAM,IAAI;AAC5D,QAAI,CAAC,MAAM,OAAO,EAAG;AACrB,UAAM,GAAG,SAAS,MAAM,KAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACjE,UAAM,GAAG,SAAS,SAAS,QAAQ,MAAM;AAAA,EAC3C;AACF;AAEA,eAAe,iBAAiB,SAAiB,cAAqC;AACpF,QAAM,QAAQ,MAAM,OAAO,CAAC,QAAQ,YAAY,QAAQ,IAAI,GAAG,OAAO;AACtE,MAAI,MAAM,KAAK,EAAE,WAAW,EAAG;AAC/B,QAAM,YAAY,KAAK;AAAA,IACrB;AAAA,IACA,mBAAmB,OAAO,WAAW,CAAC;AAAA,EACxC;AACA,QAAM,GAAG,SAAS,UAAU,WAAW,KAAK;AAC5C,MAAI;AACF,UAAM,IAAI,CAAC,SAAS,YAAY,SAAS,GAAG,YAAY;AAAA,EAC1D,UAAE;AACA,UAAM,GAAG,SAAS,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;AAAA,EACjD;AACF;AAEA,eAAe,eACb,SACA,cACA,aACe;AACf,QAAM,kBAAkB,YAAY;AACpC,QAAM,iBAAiB,SAAS,YAAY;AAC5C,QAAM,mBAAmB,SAAS,cAAc,WAAW;AAC7D;AAEA,eAAsB,uBAAuB,SAIN;AACrC,MAAI,CAAC,QAAQ,UAAU;AACrB,WAAO,EAAE,WAAW,QAAQ,WAAW,SAAS,MAAM;AAAA,EACxD;AAEA,QAAM,SAAS,UAAU,QAAQ,QAAQ,IAAI,QAAQ,WAAW,CAAC;AACjE,QAAM,eACJ,OAAO,QAAQ,aAAa,WACxB,QAAQ,WACR,UAAU,QAAQ,QAAQ,IACxB,QAAQ,SAAS,OACjB;AACR,QAAM,OAAO,aAAa,gBAAgB,QAAQ,aAAa,SAAS,OAAO,WAAW,CAAC,EAAE;AAC7F,QAAM,UAAU,MAAM,eAAe,QAAQ,SAAS;AACtD,QAAM,QAAQ,OAAO,SAAS;AAC9B,QAAM,OAAO,KAAK,QAAQ,OAAO,QAAQ,KAAK,KAAK,SAAS,aAAa,WAAW,CAAC;AACrF,MAAI,UAAU,WAAW,MAAM,UAAU,SAAS,IAAI,GAAG,KAAK,EAAE,SAAS,GAAG;AAC1E,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,eAAe,KAAK,KAAK,MAAM,IAAI;AACzC,QAAM,WAAW,KAAK,SAAS,MAAM,YAAY;AACjD,MAAI,SAAS,WAAW,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AAC1D,UAAM,IAAI,MAAM,uCAAuC,YAAY,EAAE;AAAA,EACvE;AAEA,QAAM,GAAG,SAAS,MAAM,MAAM,EAAE,WAAW,KAAK,CAAC;AACjD,MAAI,GAAG,WAAW,YAAY,GAAG;AAC/B,QAAI,CAAC,OAAO,OAAO;AACjB,YAAM,IAAI,MAAM,oCAAoC,YAAY,EAAE;AAAA,IACpE;AAAA,EACF,OAAO;AACL,UAAM,UAAU,OAAO,WAAW;AAClC,UAAM,IAAI,CAAC,YAAY,OAAO,YAAY,cAAc,OAAO,GAAG,OAAO;AAAA,EAC3E;AAEA,MAAI,UAAU,QAAQ;AACpB,UAAM,eAAe,SAAS,cAAc,IAAI;AAAA,EAClD;AAEA,QAAM,UACJ,OAAO,YAAY,UACf,SACA,YAAY;AACV,UAAM,eAAe,SAAS,YAAY;AAAA,EAC5C;AAEN,SAAO,EAAE,WAAW,cAAc,SAAS,SAAS,KAAK;AAC3D;",
+  "names": []
+}

package/dist/runtime/isolation/workspace-boundary.d.ts

@@ -0,0 +1,6 @@
+export interface WorkspaceBoundaryOptions {
+    readonly workspace: string;
+}
+export declare function resolveWorkspacePath(input: string | undefined, options: WorkspaceBoundaryOptions): string;
+export declare function assertWorkspacePath(input: string | undefined, options: WorkspaceBoundaryOptions): string;
+//# sourceMappingURL=workspace-boundary.d.ts.map

package/dist/runtime/isolation/workspace-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-boundary.d.ts","sourceRoot":"","sources":["../../../src/runtime/isolation/workspace-boundary.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,wBAAwB,GAChC,MAAM,CAGR;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,wBAAwB,GAChC,MAAM,CAOR"}

package/dist/runtime/isolation/workspace-boundary.js

@@ -0,0 +1,19 @@
+import path from "node:path";
+import { PathTraversalError, safePath } from "../../utils/safe-path.js";
+function resolveWorkspacePath(input, options) {
+  if (!input || input.length === 0) return path.resolve(options.workspace);
+  return safePath(input, { base: options.workspace });
+}
+function assertWorkspacePath(input, options) {
+  try {
+    return resolveWorkspacePath(input, options);
+  } catch (error) {
+    if (error instanceof PathTraversalError) throw error;
+    throw error;
+  }
+}
+export {
+  assertWorkspacePath,
+  resolveWorkspacePath
+};
+//# sourceMappingURL=workspace-boundary.js.map

package/dist/runtime/isolation/workspace-boundary.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/isolation/workspace-boundary.ts"],
+  "sourcesContent": ["import path from 'node:path';\n\nimport { PathTraversalError, safePath } from '../../utils/safe-path.js';\n\nexport interface WorkspaceBoundaryOptions {\n  readonly workspace: string;\n}\n\nexport function resolveWorkspacePath(\n  input: string | undefined,\n  options: WorkspaceBoundaryOptions\n): string {\n  if (!input || input.length === 0) return path.resolve(options.workspace);\n  return safePath(input, { base: options.workspace });\n}\n\nexport function assertWorkspacePath(\n  input: string | undefined,\n  options: WorkspaceBoundaryOptions\n): string {\n  try {\n    return resolveWorkspacePath(input, options);\n  } catch (error) {\n    if (error instanceof PathTraversalError) throw error;\n    throw error;\n  }\n}\n"],
+  "mappings": "AAAA,OAAO,UAAU;AAEjB,SAAS,oBAAoB,gBAAgB;AAMtC,SAAS,qBACd,OACA,SACQ;AACR,MAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO,KAAK,QAAQ,QAAQ,SAAS;AACvE,SAAO,SAAS,OAAO,EAAE,MAAM,QAAQ,UAAU,CAAC;AACpD;AAEO,SAAS,oBACd,OACA,SACQ;AACR,MAAI;AACF,WAAO,qBAAqB,OAAO,OAAO;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,iBAAiB,mBAAoB,OAAM;AAC/C,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/runtime/orchestration/pack/coordination-types.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Agent Task Coordination & Hierarchy — types.
+ *
+ * Extends the existing Pack model with pull-based task claiming,
+ * inter-agent idle signaling, background agent support, and
+ * fork/spawn primitives.
+ */
+import type { AgentDefinition, AgentIsolationStrategy, AgentLineage } from '../../../adapters/agents/registry/types.js';
+import type { Message } from '../../../domain/core-task.js';
+import type { BridgePort } from '../../bridge/bridge-port.js';
+import type { FabricInheritOptions } from '../../bridge/fabric-types.js';
+export type IdleReason = 'completed' | 'waiting' | 'no-tasks';
+export interface IdleNotification {
+    agentId: string;
+    agentName: string;
+    reason: IdleReason;
+    completedTaskId?: string;
+    summary?: string;
+    timestamp: string;
+}
+export type IdleListener = (notification: IdleNotification) => void;
+export interface InProcessRunnerOptions {
+    agentName: string;
+    parentSessionId: string;
+    agentDefinition?: AgentDefinition;
+    pollIntervalMs?: number;
+    /** Maximum tasks to claim before stopping. 0 = unlimited. */
+    maxTasks?: number;
+}
+export type RunnerState = 'idle' | 'claiming' | 'running' | 'stopped';
+export interface ForkInheritOptions {
+    history?: boolean | {
+        maxMessages?: number;
+    };
+    memory?: boolean;
+    tools?: boolean;
+    /** Copy parent backend routing/runtime defaults such as priority, API keys, workspace, and cache. */
+    runtime?: boolean;
+    systemPrompt?: boolean;
+    plugins?: boolean;
+    fabric?: FabricInheritOptions;
+    /**
+     * When true, child Bridge inherits the parent's guardrails. Hard guardrails
+     * remain integrity-protected; transitively propagates A→B→C.
+     */
+    guardrails?: boolean;
+}
+export interface ForkOptions {
+    agentName: string;
+    isolation?: AgentIsolationStrategy;
+    inherit?: ForkInheritOptions;
+}
+export interface SpawnOptions extends ForkOptions {
+    agentDefinition?: AgentDefinition;
+    background?: boolean;
+    parentBridge?: BridgePort;
+    /** Tenant used when reading inherited parent history from a scoped store. */
+    tenant?: string;
+    /**
+     * When true, the child bridge shares the parent's task store instead of
+     * creating an isolated in-memory store. Enables child task visibility on
+     * the parent and survivability across parent restarts.
+     */
+    inheritTaskStore?: boolean;
+}
+export interface ForkResult {
+    contextId: string;
+    lineage: AgentLineage;
+}
+export interface SpawnResult {
+    agent: AgentLike;
+    lineage: AgentLineage;
+    bridge: BridgePort;
+    inheritedHistory?: Message[];
+}
+export interface AgentLike {
+    invoke(input: string, config?: unknown): Promise<unknown>;
+    stream(input: string, config?: unknown): AsyncGenerator<unknown>;
+    close(): Promise<void>;
+}
+export type CoordinationEventKind = 'idle' | 'task-claimed' | 'task-completed' | 'agent-spawned' | 'agent-stopped';
+export interface CoordinationEvent {
+    kind: CoordinationEventKind;
+    agentId: string;
+    agentName: string;
+    taskId?: string;
+    timestamp: string;
+}
+//# sourceMappingURL=coordination-types.d.ts.map

package/dist/runtime/orchestration/pack/coordination-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination-types.d.ts","sourceRoot":"","sources":["../../../../src/runtime/orchestration/pack/coordination-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,YAAY,EACb,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,gBAAgB,KAAK,IAAI,CAAC;AACpE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AACtE,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qGAAqG;IACrG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,YAAa,SAAQ,WAAW;IAC/C,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,UAAU,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACjE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AACD,MAAM,MAAM,qBAAqB,GAC7B,MAAM,GACN,cAAc,GACd,gBAAgB,GAChB,eAAe,GACf,eAAe,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/runtime/orchestration/pack/coordination-types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=coordination-types.js.map

package/dist/runtime/orchestration/pack/coordination-types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/runtime/orchestration/pack/coordination.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Agent coordination primitives.
+ *
+ * - forkSession() — create a child context with lineage
+ * - spawnAgent() — fork + create a Bridge for the child
+ * - buildAgentTree() — assemble hierarchical tree from task metadata
+ */
+import type { AgentLineage, AgentTreeNode } from '../../../adapters/agents/registry/types.js';
+import type { Message, Task } from '../../../domain/core-task.js';
+import type { BridgePort } from '../../bridge/bridge-port.js';
+import type { ForkOptions, ForkResult, SpawnOptions } from './coordination-types.js';
+export declare function forkSession(parentLineage: AgentLineage, parentContextId: string, options: ForkOptions): ForkResult;
+interface SpawnAgentResult {
+    lineage: AgentLineage;
+    bridge: BridgePort;
+    contextId: string;
+    background: boolean;
+    inheritedHistory?: Message[];
+}
+export declare function spawnAgent(parentLineage: AgentLineage, parentContextId: string, options: SpawnOptions): Promise<SpawnAgentResult>;
+export declare function buildAgentTree(rootAgentId: string, tasks: Task[]): AgentTreeNode | undefined;
+export {};
+//# sourceMappingURL=coordination.d.ts.map

package/dist/runtime/orchestration/pack/coordination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination.d.ts","sourceRoot":"","sources":["../../../../src/runtime/orchestration/pack/coordination.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAEV,YAAY,EAEZ,aAAa,EACd,MAAM,4CAA4C,CAAC;AAEpD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAa,MAAM,8BAA8B,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAK9D,OAAO,KAAK,EAEV,WAAW,EACX,UAAU,EACV,YAAY,EACb,MAAM,yBAAyB,CAAC;AAuCjC,wBAAgB,WAAW,CACzB,aAAa,EAAE,YAAY,EAC3B,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,WAAW,GACnB,UAAU,CAUZ;AAmMD,UAAU,gBAAgB;IACxB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;CAC9B;AAED,wBAAsB,UAAU,CAC9B,aAAa,EAAE,YAAY,EAC3B,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAsC3B;AAmBD,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,IAAI,EAAE,GACZ,aAAa,GAAG,SAAS,CAyB3B"}