openhorse 0.2.18 → 0.2.21

package/dist/runtime/subagents/production.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * Production binding for {@link ExecuteChildQuery}.
+ *
+ * Bridges the Supervisor (which is LLM-agnostic) to the real `query()` loop.
+ * Each child gets its own {@link LLMService} so mutable per-request state
+ * (`consecutive529Errors`, `usingFallback`, `lastRequestDiagnostics`) is not
+ * shared across concurrent children. All children still flow through the shared
+ * {@link SubagentProviderGate} for concurrency bounding and cooldown.
+ *
+ * `createLlm` and `runQuery` are injectable so the binding is unit-testable
+ * without a live provider; production wires them to `new LLMService(...)` and
+ * `query()`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createChildLlmConfig = createChildLlmConfig;
+exports.createProductionExecuteQuery = createProductionExecuteQuery;
+const llm_1 = require("../../services/llm");
+const query_1 = require("../../framework/query");
+const types_1 = require("./types");
+/**
+ * Create a per-child LLMService. Children share the provider account but not
+ * the mutable request state, so one child's fallback/retry does not reshape
+ * another child's model choice or diagnostics.
+ */
+function createChildLlmConfig(rootConfig) {
+    return {
+        apiKey: rootConfig.apiKey,
+        baseUrl: rootConfig.baseUrl,
+        model: rootConfig.model,
+        fallbackModel: rootConfig.fallbackModel,
+        timeout: 60000,
+    };
+}
+/**
+ * Build the production {@link ExecuteChildQuery}. The returned function runs one
+ * child to completion: it creates an isolated LLMService, drives `query()` with
+ * the child messages + filtered tools, and returns the final assistant text and
+ * observed usage. Never throws - provider errors surface as an empty result so
+ * the runner normalizes them into a `failed` SubtaskResult.
+ */
+function createProductionExecuteQuery(deps) {
+    const createLlm = deps.createLlm ?? ((config) => new llm_1.LLMService(config));
+    const runQuery = deps.runQuery ?? ((params) => (0, query_1.query)(params));
+    return async (messages, toolSet, abortSignal) => {
+        const llm = createLlm(createChildLlmConfig(deps.rootConfig));
+        let finalContent = '';
+        let usage = { ...types_1.EMPTY_SUBTASK_USAGE };
+        let modelRequests = 0;
+        try {
+            const params = {
+                messages: messages,
+                tools: toolSet.tools,
+                toolExecutor: toolSet.toolExecutor,
+                llm,
+                maxTurns: deps.maxTurnsPerTask,
+                abortSignal,
+                // Children stream nothing to stdout; the root only sees the structured result.
+                streamCallbacks: { onChunk: () => undefined },
+            };
+            for await (const event of runQuery(params)) {
+                if (event.type === 'message' && event.role === 'assistant') {
+                    finalContent = event.content;
+                }
+                else if (event.type === 'complete') {
+                    finalContent = event.content;
+                    usage = loopStatsToUsage(event.stats, modelRequests, event.usage?.promptTokens, event.usage?.completionTokens);
+                }
+                else if (event.type === 'assistant_tool_calls') {
+                    modelRequests += 1;
+                    finalContent = event.content;
+                }
+            }
+        }
+        catch (err) {
+            // A 429 with retry-after should pause siblings; surface the cooldown.
+            if (isRateLimitError(err)) {
+                const retryAfter = extractRetryAfterMs(err);
+                deps.providerGate.enterCooldown(retryAfter);
+            }
+            // Re-throw so the runner normalizes into failed/cancelled. The runner
+            // never lets this propagate to the root loop.
+            throw err;
+        }
+        usage.modelRequests = Math.max(usage.modelRequests, modelRequests);
+        return { content: finalContent, usage };
+    };
+}
+function loopStatsToUsage(stats, modelRequests, promptTokens, completionTokens) {
+    return {
+        modelRequests: Math.max(modelRequests, stats?.llmRequests ?? modelRequests, 1),
+        toolCalls: stats?.toolCalls ?? 0,
+        promptTokens: promptTokens ?? 0,
+        completionTokens: completionTokens ?? 0,
+        durationMs: 0,
+    };
+}
+function isRateLimitError(err) {
+    if (!err || typeof err !== 'object')
+        return false;
+    const e = err;
+    const status = e.status ?? e.statusCode;
+    return status === 429 || /rate.?limit|429|too many requests/i.test(String(e.message ?? ''));
+}
+function extractRetryAfterMs(err) {
+    if (!err || typeof err !== 'object')
+        return 5000;
+    const e = err;
+    const headers = e.headers;
+    const retryAfter = headers?.['retry-after'];
+    if (retryAfter) {
+        const seconds = Number.parseFloat(retryAfter);
+        if (Number.isFinite(seconds))
+            return seconds * 1000;
+    }
+    return 5000; // conservative default cooldown
+}
+//# sourceMappingURL=production.js.map

package/dist/runtime/subagents/production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.js","sourceRoot":"","sources":["../../../src/runtime/subagents/production.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AA4BH,oDAUC;AASD,oEA8CC;AA3FD,4CAA8E;AAE9E,iDAAiF;AAGjF,mCAA8C;AAgB9C;;;;GAIG;AACH,SAAgB,oBAAoB,CAClC,UAA6E;IAE7E,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,OAAO,EAAE,KAAM;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,4BAA4B,CAAC,IAA4B;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,MAAiB,EAAE,EAAE,CAAC,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAK,CAAC,CAAC,MAAmB,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,MAAM,CAAC,CAAwD,CAAC;IACnI,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAqD,EAAE;QACjG,MAAM,GAAG,GAAG,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,KAAK,GAAiB,EAAE,GAAG,2BAAmB,EAAE,CAAC;QACrD,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAgB;gBAC1B,QAAQ,EAAE,QAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,KAA6B;gBAC5C,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,GAAG;gBACH,QAAQ,EAAE,IAAI,CAAC,eAAe;gBAC9B,WAAW;gBACX,+EAA+E;gBAC/E,eAAe,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;aAC9C,CAAC;YAEF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3D,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC/B,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACrC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC7B,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;gBACjH,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBACjD,aAAa,IAAI,CAAC,CAAC;oBACnB,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC;YACD,sEAAsE;YACtE,8CAA8C;YAC9C,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA4B,EAC5B,aAAqB,EACrB,YAAqB,EACrB,gBAAyB;IAEzB,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QAC9E,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC;QAChC,YAAY,EAAE,YAAY,IAAI,CAAC;QAC/B,gBAAgB,EAAE,gBAAgB,IAAI,CAAC;QACvC,UAAU,EAAE,CAAC;KACd,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IACxC,OAAO,MAAM,KAAK,GAAG,IAAI,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,CAAC,OAA6C,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACtD,CAAC;IACD,OAAO,IAAK,CAAC,CAAC,gCAAgC;AAChD,CAAC"}

package/dist/runtime/subagents/provider-gate.d.ts

@@ -0,0 +1,99 @@
+/**
+ * SubagentProviderGate: shared concurrency + cooldown for child LLM requests.
+ *
+ * Each child runs its own loop, but all children draw model requests from the
+ * same provider account. The gate bounds concurrent in-flight child execution
+ * and shares cooldown state so that one child's 429/retry-after pauses new
+ * children rather than letting each independently retry into a storm.
+ *
+ * The gate does NOT own per-request diagnostics or fallback model state - those
+ * live in the child's own LLMService. The gate only owns the shared go/no-go.
+ *
+ * R4 semantics:
+ *   - `canReserve(count)` only reports whether the provider is in an
+ *     unrecoverable state (cooldown). Normal concurrency saturation is NOT a
+ *     reason to reject - the policy should let batches queue and let the FIFO
+ *     semaphore bound actual peak concurrency.
+ *   - `acquire(signal?)` queues when slots are full; resolves in FIFO order.
+ *     An abort signal atomically removes the waiter and rejects, with no leaked
+ *     active slot or listener.
+ *   - cooldown has a single wake timer that re-arms on extension; when it
+ *     fires it drains queued waiters so they do not hang after the last
+ *     release during cooldown.
+ */
+export interface ProviderGateOptions {
+    /** Maximum children running concurrently. */
+    maxConcurrent: number;
+    /** Optional clock, injectable for deterministic tests. */
+    now?: () => number;
+    /** Optional timer scheduler (defaults to setTimeout). Injectable for tests. */
+    scheduleTimer?: (fn: () => void, ms: number) => {
+        clear(): void;
+    };
+}
+/** Thrown when an acquire is aborted via its signal. */
+export declare class AcquireAbortedError extends Error {
+    constructor();
+}
+export declare class SubagentProviderGate {
+    private readonly maxConcurrent;
+    private readonly now;
+    private readonly scheduleTimer;
+    private active;
+    private cooldownUntil;
+    private waiters;
+    private cooldownTimer;
+    constructor(options: ProviderGateOptions);
+    /** Whether the provider is currently in a cooldown window. */
+    isInCooldown(): boolean;
+    /** Remaining ms in the current cooldown, or 0. */
+    cooldownRemainingMs(): number;
+    /**
+     * Enter a cooldown after a rate-limit response. New acquires will wait until
+     * the window expires. A longer requested cooldown extends; a shorter one is
+     * ignored if an active cooldown is longer. Re-arms the wake timer so queued
+     * waiters are drained when the cooldown expires (R4: no permanent hang).
+     */
+    enterCooldown(retryAfterMs: number): void;
+    /**
+     * R4: whether the provider can accept new children. Returns false ONLY during
+     * cooldown — normal concurrency saturation is not a rejection reason, because
+     * the FIFO semaphore queues excess tasks and bounds actual peak concurrency
+     * at acquire time.
+     *
+     * NOTE: the `count` parameter is currently unused. It is reserved for future
+     * per-slot reservation checks. Today, policy only needs to know whether the
+     * provider is in an unrecoverable state (cooldown).
+     */
+    canReserve(_count: number): boolean;
+    /** Number of children currently holding a slot. */
+    activeCount(): number;
+    /**
+     * Acquire a slot. Resolves once a slot is free and the provider is not in
+     * cooldown. The caller MUST call `release()` when the child finishes.
+     *
+     * R4: if `signal` is provided and aborts while queued, the waiter is removed
+     * atomically and the promise rejects with {@link AcquireAbortedError}. No
+     * active slot is leaked and the abort listener is removed.
+     *
+     * The slot is claimed synchronously before the waiter's microtask runs, so
+     * `drainWaiters` never over-allocates beyond `maxConcurrent`.
+     */
+    acquire(signal?: AbortSignal): Promise<void>;
+    /** Release a slot and wake the next waiter (if not in cooldown). */
+    release(): void;
+    /**
+     * Wake waiters in FIFO order. For each waiter, the slot is claimed
+     * synchronously (active += 1) BEFORE the promise is resolved, so the
+     * next iteration of the while-loop sees the updated count and won't
+     * over-allocate.
+     */
+    private drainWaiters;
+    /**
+     * Arm (or re-arm) a single timer that fires when the current cooldown
+     * expires, then drains queued waiters. Re-arming on extension keeps a
+     * single pending timer at all times.
+     */
+    private armCooldownTimer;
+}
+//# sourceMappingURL=provider-gate.d.ts.map

package/dist/runtime/subagents/provider-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-gate.d.ts","sourceRoot":"","sources":["../../../src/runtime/subagents/provider-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK;QAAE,KAAK,IAAI,IAAI,CAAA;KAAE,CAAC;CACnE;AAED,wDAAwD;AACxD,qBAAa,mBAAoB,SAAQ,KAAK;;CAK7C;AAUD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoD;IAClF,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,aAAa,CAAkC;gBAE3C,OAAO,EAAE,mBAAmB;IAUxC,8DAA8D;IAC9D,YAAY,IAAI,OAAO;IAIvB,kDAAkD;IAClD,mBAAmB,IAAI,MAAM;IAI7B;;;;;OAKG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAQzC;;;;;;;;;OASG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAInC,mDAAmD;IACnD,WAAW,IAAI,MAAM;IAIrB;;;;;;;;;;OAUG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAgClD,oEAAoE;IACpE,OAAO,IAAI,IAAI;IAKf;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAapB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;CAgBzB"}

package/dist/runtime/subagents/provider-gate.js

@@ -0,0 +1,186 @@
+"use strict";
+/**
+ * SubagentProviderGate: shared concurrency + cooldown for child LLM requests.
+ *
+ * Each child runs its own loop, but all children draw model requests from the
+ * same provider account. The gate bounds concurrent in-flight child execution
+ * and shares cooldown state so that one child's 429/retry-after pauses new
+ * children rather than letting each independently retry into a storm.
+ *
+ * The gate does NOT own per-request diagnostics or fallback model state - those
+ * live in the child's own LLMService. The gate only owns the shared go/no-go.
+ *
+ * R4 semantics:
+ *   - `canReserve(count)` only reports whether the provider is in an
+ *     unrecoverable state (cooldown). Normal concurrency saturation is NOT a
+ *     reason to reject - the policy should let batches queue and let the FIFO
+ *     semaphore bound actual peak concurrency.
+ *   - `acquire(signal?)` queues when slots are full; resolves in FIFO order.
+ *     An abort signal atomically removes the waiter and rejects, with no leaked
+ *     active slot or listener.
+ *   - cooldown has a single wake timer that re-arms on extension; when it
+ *     fires it drains queued waiters so they do not hang after the last
+ *     release during cooldown.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SubagentProviderGate = exports.AcquireAbortedError = void 0;
+/** Thrown when an acquire is aborted via its signal. */
+class AcquireAbortedError extends Error {
+    constructor() {
+        super('Subagent provider gate acquire was aborted');
+        this.name = 'AcquireAbortedError';
+    }
+}
+exports.AcquireAbortedError = AcquireAbortedError;
+class SubagentProviderGate {
+    constructor(options) {
+        this.active = 0;
+        this.cooldownUntil = 0;
+        this.waiters = [];
+        this.cooldownTimer = null;
+        const maxConcurrent = Number(options.maxConcurrent);
+        // N12: guard against NaN/undefined/negative — clamp to 1 as safe minimum.
+        this.maxConcurrent = Number.isFinite(maxConcurrent) && maxConcurrent >= 1
+            ? Math.floor(maxConcurrent)
+            : 1;
+        this.now = options.now ?? (() => Date.now());
+        this.scheduleTimer = options.scheduleTimer ?? defaultScheduleTimer;
+    }
+    /** Whether the provider is currently in a cooldown window. */
+    isInCooldown() {
+        return this.now() < this.cooldownUntil;
+    }
+    /** Remaining ms in the current cooldown, or 0. */
+    cooldownRemainingMs() {
+        return Math.max(0, this.cooldownUntil - this.now());
+    }
+    /**
+     * Enter a cooldown after a rate-limit response. New acquires will wait until
+     * the window expires. A longer requested cooldown extends; a shorter one is
+     * ignored if an active cooldown is longer. Re-arms the wake timer so queued
+     * waiters are drained when the cooldown expires (R4: no permanent hang).
+     */
+    enterCooldown(retryAfterMs) {
+        const until = this.now() + Math.max(0, retryAfterMs);
+        if (until > this.cooldownUntil) {
+            this.cooldownUntil = until;
+            this.armCooldownTimer();
+        }
+    }
+    /**
+     * R4: whether the provider can accept new children. Returns false ONLY during
+     * cooldown — normal concurrency saturation is not a rejection reason, because
+     * the FIFO semaphore queues excess tasks and bounds actual peak concurrency
+     * at acquire time.
+     *
+     * NOTE: the `count` parameter is currently unused. It is reserved for future
+     * per-slot reservation checks. Today, policy only needs to know whether the
+     * provider is in an unrecoverable state (cooldown).
+     */
+    canReserve(_count) {
+        return !this.isInCooldown();
+    }
+    /** Number of children currently holding a slot. */
+    activeCount() {
+        return this.active;
+    }
+    /**
+     * Acquire a slot. Resolves once a slot is free and the provider is not in
+     * cooldown. The caller MUST call `release()` when the child finishes.
+     *
+     * R4: if `signal` is provided and aborts while queued, the waiter is removed
+     * atomically and the promise rejects with {@link AcquireAbortedError}. No
+     * active slot is leaked and the abort listener is removed.
+     *
+     * The slot is claimed synchronously before the waiter's microtask runs, so
+     * `drainWaiters` never over-allocates beyond `maxConcurrent`.
+     */
+    async acquire(signal) {
+        // Already aborted before we even start.
+        if (signal?.aborted)
+            throw new AcquireAbortedError();
+        if (this.canReserve(1) && this.active < this.maxConcurrent) {
+            this.active += 1;
+            return;
+        }
+        await new Promise((resolve, reject) => {
+            const waiter = { resolve, reject, signal };
+            this.waiters.push(waiter);
+            if (signal) {
+                const onAbort = () => {
+                    // Atomically remove this waiter; if it was already claimed by
+                    // drainWaiters (no longer in the queue), the abort is a no-op.
+                    const idx = this.waiters.indexOf(waiter);
+                    if (idx >= 0) {
+                        this.waiters.splice(idx, 1);
+                        reject(new AcquireAbortedError());
+                    }
+                    signal.removeEventListener('abort', onAbort);
+                };
+                waiter.onAbort = onAbort;
+                signal.addEventListener('abort', onAbort, { once: true });
+            }
+        });
+        // NOTE: `this.active` was already incremented by drainWaiters when the
+        // slot was claimed synchronously, so we do NOT increment here.
+    }
+    /** Release a slot and wake the next waiter (if not in cooldown). */
+    release() {
+        this.active = Math.max(0, this.active - 1);
+        this.drainWaiters();
+    }
+    /**
+     * Wake waiters in FIFO order. For each waiter, the slot is claimed
+     * synchronously (active += 1) BEFORE the promise is resolved, so the
+     * next iteration of the while-loop sees the updated count and won't
+     * over-allocate.
+     */
+    drainWaiters() {
+        while (this.waiters.length > 0 && !this.isInCooldown() && this.active < this.maxConcurrent) {
+            const next = this.waiters.shift();
+            if (!next)
+                continue;
+            this.active += 1; // claim synchronously before resolving
+            // Remove the abort listener (if any) - the waiter is being fulfilled.
+            if (next.signal && next.onAbort) {
+                next.signal.removeEventListener('abort', next.onAbort);
+            }
+            next.resolve();
+        }
+    }
+    /**
+     * Arm (or re-arm) a single timer that fires when the current cooldown
+     * expires, then drains queued waiters. Re-arming on extension keeps a
+     * single pending timer at all times.
+     */
+    armCooldownTimer() {
+        if (this.cooldownTimer) {
+            this.cooldownTimer.clear();
+            this.cooldownTimer = null;
+        }
+        const remaining = this.cooldownRemainingMs();
+        if (remaining <= 0) {
+            // Cooldown already over - drain immediately.
+            this.drainWaiters();
+            return;
+        }
+        this.cooldownTimer = this.scheduleTimer(() => {
+            this.cooldownTimer = null;
+            this.drainWaiters();
+        }, remaining);
+    }
+}
+exports.SubagentProviderGate = SubagentProviderGate;
+function defaultScheduleTimer(fn, ms) {
+    const handle = setTimeout(fn, ms);
+    // Don't keep the event loop alive solely for a cooldown wake.
+    if (typeof handle === 'object' && handle && 'unref' in handle && typeof handle.unref === 'function') {
+        handle.unref();
+    }
+    return {
+        clear() {
+            clearTimeout(handle);
+        },
+    };
+}
+//# sourceMappingURL=provider-gate.js.map

package/dist/runtime/subagents/provider-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-gate.js","sourceRoot":"","sources":["../../../src/runtime/subagents/provider-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAWH,wDAAwD;AACxD,MAAa,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AAUD,MAAa,oBAAoB;IAS/B,YAAY,OAA4B;QALhC,WAAM,GAAG,CAAC,CAAC;QACX,kBAAa,GAAG,CAAC,CAAC;QAClB,YAAO,GAAa,EAAE,CAAC;QACvB,kBAAa,GAA6B,IAAI,CAAC;QAGrD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpD,0EAA0E;QAC1E,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC;QACN,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAC;IACrE,CAAC;IAED,8DAA8D;IAC9D,YAAY;QACV,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,kDAAkD;IAClD,mBAAmB;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,YAAoB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU,CAAC,MAAc;QACvB,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;IAC9B,CAAC;IAED,mDAAmD;IACnD,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,wCAAwC;QACxC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAErD,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE1B,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,8DAA8D;oBAC9D,+DAA+D;oBAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;wBACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;wBAC5B,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;oBACpC,CAAC;oBACD,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC,CAAC;gBACF,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,uEAAuE;QACvE,+DAA+D;IACjE,CAAC;IAED,oEAAoE;IACpE,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACK,YAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,uCAAuC;YACzD,sEAAsE;YACtE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,gBAAgB;QACtB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,6CAA6C;YAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;YAC3C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;CACF;AAvJD,oDAuJC;AAED,SAAS,oBAAoB,CAAC,EAAc,EAAE,EAAU;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,8DAA8D;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACnG,MAAyB,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,KAAK;YACH,YAAY,CAAC,MAAwB,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/subagents/result-parser.d.ts

@@ -0,0 +1,40 @@
+/**
+ * SubagentResultParser: normalize a child's final text into a fixed schema.
+ *
+ * Children are instructed to emit a single JSON object. In practice they may
+ * wrap it in prose, emit invalid JSON, or omit fields. This parser is the
+ * single chokepoint that produces a well-typed {@link SubtaskResult} regardless
+ * of provider quirks, so the root Agent only ever sees structured data.
+ */
+import type { SubagentRole, SubtaskResult, SubtaskResultStatus } from './types';
+export interface ParsedSubtaskPayload {
+    summary?: unknown;
+    findings?: unknown;
+    files?: unknown;
+    commands?: unknown;
+    verification?: unknown;
+    risks?: unknown;
+}
+/**
+ * Extract the first balanced JSON object from text that may contain prose
+ * around it. Returns the parsed object or null if none is found / invalid.
+ */
+export declare function extractJsonObject(text: string): unknown;
+/**
+ * Parse a child's final text into a {@link SubtaskResult}.
+ *
+ * @param id         Runtime-generated task id.
+ * @param role       The role the child ran as.
+ * @param content    The child's final assistant text (may contain prose + JSON).
+ * @param status     Terminal status. `completed` requires parseable JSON;
+ *                   otherwise the summary records the failure mode.
+ * @param usage      Observed usage; defaults to empty.
+ */
+export declare function parseSubtaskResult(args: {
+    id: string;
+    role: SubagentRole;
+    content: string;
+    status: SubtaskResultStatus;
+    usage?: SubtaskResult['usage'];
+}): SubtaskResult;
+//# sourceMappingURL=result-parser.d.ts.map

package/dist/runtime/subagents/result-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result-parser.d.ts","sourceRoot":"","sources":["../../../src/runtime/subagents/result-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,YAAY,EAEZ,aAAa,EACb,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAUjB,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAqCvD;AAgED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;CAChC,GAAG,aAAa,CAgEhB"}