openhorse 0.2.18 → 0.2.21

package/dist/runtime/subagents/runtime-integration.js

@@ -0,0 +1,148 @@
+"use strict";
+/**
+ * Turn-level integration: build the runtime-bound `subtask` tool for a root turn.
+ *
+ * This is the bridge between {@link AgentChatController} and the subagent
+ * runtime. It resolves the child tool set from the global runtime tools, builds
+ * the production executeQuery, the budget ledger, the provider gate and the
+ * Supervisor, and returns the `subtask` OpenHorseTool to merge into the root
+ * turn's tool list. Returns null when subagents are off or the LLM is absent,
+ * so the root loop is unchanged.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSubtaskBatch = void 0;
+exports.createSubagentBundleForTurn = createSubagentBundleForTurn;
+exports.createSubagentToolForTurn = createSubagentToolForTurn;
+exports.deriveRootLlmConfig = deriveRootLlmConfig;
+const budget_1 = require("./budget");
+const provider_gate_1 = require("./provider-gate");
+const production_1 = require("./production");
+const supervisor_1 = require("./supervisor");
+Object.defineProperty(exports, "runSubtaskBatch", { enumerable: true, get: function () { return supervisor_1.runSubtaskBatch; } });
+const tool_1 = require("./tool");
+const presets_1 = require("./presets");
+const child_executor_guard_1 = require("./child-executor-guard");
+/**
+ * Lazy accessor for the runtime tool pool.
+ *
+ * Importing `../../tools` at module top-level creates a circular dependency:
+ *   subagents barrel → runtime-integration → tools/index → web → config → subagents/types
+ * When `tools/index` loads before `web.ts` finishes, `WEB_TOOLS` is still
+ * `undefined` and `...WEB_TOOLS` throws "not iterable". Deferring the import
+ * to call-time breaks the cycle because by then all modules have initialized.
+ */
+function lazyRuntimeTools() {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const tools = require('../../tools');
+    return { executeTool: tools.executeTool, getRuntimeTools: tools.getRuntimeTools };
+}
+/**
+ * Build the `subtask` tool for a root turn, or null if disabled.
+ *
+ * Returns a bundle: the tool to merge into the root turn's tool list, plus an
+ * accessor for the aggregate child usage so the root loop can fold child cost
+ * into its loop stats and `/cost`. The bundle is null when subagents are off.
+ */
+function createSubagentBundleForTurn(inputs) {
+    const { config, cwd, rootLlmConfig, abortSignal, onSubtaskEvent } = inputs;
+    if (config.mode === 'off')
+        return null;
+    if (!rootLlmConfig.apiKey)
+        return null;
+    // Resolve child tools: all v0.2.20 roles share the read-only allowlist, so
+    // filter once for 'research'. Assert no forbidden tool slips in as a
+    // defense-in-depth check (the allowlist already excludes them, but this
+    // catches future regressions).
+    const { executeTool, getRuntimeTools } = lazyRuntimeTools();
+    const runtimeTools = getRuntimeTools();
+    const availableNames = runtimeTools.map(t => t.name);
+    const allowedNames = new Set((0, presets_1.filterToolsForRole)(availableNames, 'research', runtimeTools));
+    const childTools = runtimeTools.filter(t => allowedNames.has(t.name));
+    (0, presets_1.assertNoForbiddenTools)(childTools.map(t => t.name));
+    // Defense-in-depth: map tool name -> definition so the executor can re-verify
+    // isReadOnly() on every call. A tool that is not read-only must never execute
+    // in a child context, regardless of what the allowlist says at construction.
+    const childToolByName = new Map();
+    for (const t of childTools)
+        childToolByName.set(t.name, t);
+    // R3: scope holder lets the supervisor set the current packet's scope
+    // before each child runs, so the turn-level guard enforces per-packet
+    // containment without rebuilding the executor.
+    const scopeHolder = new child_executor_guard_1.ScopeHolder();
+    const unguardedExecutor = async (name, args, signal) => {
+        if (!allowedNames.has(name)) {
+            return JSON.stringify({ success: false, error: `Tool ${name} is not available to subagents.` });
+        }
+        // Re-verify read-only at execution time: catches tools whose isReadOnly()
+        // returns false (mutating MCP actions, future regressions).
+        const tool = childToolByName.get(name);
+        if (!tool || tool.isReadOnly?.(args) !== true) {
+            return JSON.stringify({ success: false, error: `Tool ${name} is not read-only and cannot run in a subagent.` });
+        }
+        const toolContext = { cwd, config: { name: 'openhorse-subagent', mode: 'subagent' }, abortSignal: signal };
+        return executeTool(name, args, signal, toolContext);
+    };
+    const childToolExecutor = (0, child_executor_guard_1.createChildToolExecutorGuard)(unguardedExecutor, {
+        rootCwd: cwd,
+        scopeHolder,
+    });
+    const providerGate = new provider_gate_1.SubagentProviderGate({ maxConcurrent: config.maxParallel });
+    const budget = new budget_1.SubagentBudgetLedger((0, budget_1.budgetLimitsFromConfig)({
+        maxModelRequestsPerTurn: config.maxModelRequestsPerTurn,
+        maxModelRequestsPerTask: config.maxModelRequestsPerTask,
+        maxToolCallsPerTask: config.maxToolCallsPerTask,
+        timeoutMs: config.timeoutMs,
+    }));
+    // R6: turn-level task counter persists across `subtask` calls so multiple
+    // calls in one root turn cannot exceed `maxTasksPerTurn`.
+    const turnTaskState = new budget_1.TurnTaskState();
+    const executeQuery = (0, production_1.createProductionExecuteQuery)({
+        rootConfig: rootLlmConfig,
+        providerGate,
+        maxTurnsPerTask: config.maxTurnsPerTask,
+    });
+    const supervisorDeps = {
+        config,
+        cwd,
+        budget,
+        providerGate,
+        executeQuery,
+        toolSet: { tools: childTools, toolExecutor: childToolExecutor },
+        scopeHolder,
+        turnTaskState,
+        hasPendingPermission: inputs.hasPendingPermission,
+        onChildUsage: inputs.onChildUsage,
+        parentAbortSignal: abortSignal,
+        rootObjectiveSummary: inputs.rootObjectiveSummary,
+        modelLabel: inputs.modelLabel,
+        onEvent: onSubtaskEvent,
+        onSubtaskResult: inputs.onSubtaskResult,
+    };
+    const tool = (0, tool_1.createSubtaskTool)(supervisorDeps);
+    return {
+        tool,
+        /** Read-only accessor for the reconciled aggregate child usage this turn. */
+        getAggregateUsage: () => budget.aggregateUsage(),
+        /** Number of subtasks that ran (reconciled) this turn. */
+        getSubtaskCount: () => budget.reconciledTaskCount(),
+    };
+}
+/**
+ * Backwards-compatible wrapper returning only the tool. Prefer
+ * {@link createSubagentBundleForTurn} when the root loop needs to fold child
+ * usage into its stats.
+ */
+function createSubagentToolForTurn(inputs) {
+    const bundle = createSubagentBundleForTurn(inputs);
+    return bundle ? bundle.tool : null;
+}
+/** Derive the root LLM config slice from the runtime config. */
+function deriveRootLlmConfig(config) {
+    return {
+        apiKey: config.apiKey,
+        baseUrl: config.apiBaseUrl,
+        model: config.model,
+        fallbackModel: config.fallbackModel,
+    };
+}
+//# sourceMappingURL=runtime-integration.js.map

package/dist/runtime/subagents/runtime-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-integration.js","sourceRoot":"","sources":["../../../src/runtime/subagents/runtime-integration.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAoEH,kEAyFC;AAOD,8DAGC;AAYD,kDAOC;AAvLD,qCAAuF;AACvF,mDAAuD;AACvD,6CAA4D;AAC5D,6CAA4E;AAuLnE,gGAvLA,4BAAe,OAuLA;AAtLxB,iCAA2C;AAC3C,uCAAuE;AACvE,iEAAmF;AAKnF;;;;;;;;GAQG;AACH,SAAS,gBAAgB;IACvB,iEAAiE;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAiC,CAAC;IACrE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;AACpF,CAAC;AAkCD;;;;;;GAMG;AACH,SAAgB,2BAA2B,CAAC,MAA0B;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEvC,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC5D,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAA,4BAAkB,EAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAoB,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAA,gCAAsB,EAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpD,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3D,sEAAsE;IACtE,sEAAsE;IACtE,+CAA+C;IAC/C,MAAM,WAAW,GAAG,IAAI,kCAAW,EAAE,CAAC;IAEtC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAAE,IAA6B,EAAE,MAAoB,EAAmB,EAAE;QACrH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,iCAAiC,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,0EAA0E;QAC1E,4DAA4D;QAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,iDAAiD,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,WAAW,GAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACxH,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAA,mDAA4B,EAAC,iBAAiB,EAAE;QACxE,OAAO,EAAE,GAAG;QACZ,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,oCAAoB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,6BAAoB,CAAC,IAAA,+BAAsB,EAAC;QAC7D,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC,CAAC;IACJ,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,aAAa,GAAG,IAAI,sBAAa,EAAE,CAAC;IAE1C,MAAM,YAAY,GAAG,IAAA,yCAA4B,EAAC;QAChD,UAAU,EAAE,aAAa;QACzB,YAAY;QACZ,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAC;IAEH,MAAM,cAAc,GAA2B;QAC7C,MAAM;QACN,GAAG;QACH,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE;QAC/D,WAAW;QACX,aAAa;QACb,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,iBAAiB,EAAE,WAAW;QAC9B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,cAAc;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC;IAEF,MAAM,IAAI,GAAG,IAAA,wBAAiB,EAAC,cAAc,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI;QACJ,6EAA6E;QAC7E,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;QAChD,0DAA0D;QAC1D,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE;KACpD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,MAA0B;IAClE,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAWD,gEAAgE;AAChE,SAAgB,mBAAmB,CAAC,MAA0B;IAC5D,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,UAAU;QAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC;AACJ,CAAC"}

package/dist/runtime/subagents/supervisor.d.ts

@@ -0,0 +1,79 @@
+/**
+ * SubagentSupervisor: orchestrates a batch of child subtasks.
+ *
+ * Owns the task/batch ID space, the state machine, the concurrency queue and
+ * ordered aggregation. It is the single place that decides when children start,
+ * how they are bounded, and how their results are folded back to the root.
+ *
+ * The supervisor does NOT own LLM state, tool execution, permission policy or
+ * transcript storage. It composes the policy gate, the budget ledger, the
+ * provider gate and the runner, and emits renderer-independent lifecycle
+ * events that the root loop forwards to terminal/Ink/TUI.
+ */
+import { SubagentBudgetLedger, TurnTaskState } from './budget';
+import { type PolicyRejectReason } from './policy';
+import { SubagentProviderGate } from './provider-gate';
+import { type ExecuteChildQuery, type ChildToolSet } from './runner';
+import type { ScopeHolder } from './child-executor-guard';
+import { type RuntimeSubtaskEvent, type SubagentConfig, type SubtaskBatchResult, type SubtaskRequest, type SubtaskResult } from './types';
+export interface SubagentSupervisorDeps {
+    config: SubagentConfig;
+    cwd: string;
+    budget: SubagentBudgetLedger;
+    providerGate: SubagentProviderGate;
+    /** Injectable query binding shared with the runner (tests mock this). */
+    executeQuery: ExecuteChildQuery;
+    /** Filtered, child-safe tool set (already passed through presets). */
+    toolSet: ChildToolSet;
+    /**
+     * R3: mutable scope holder. The supervisor sets the current packet's
+     * canonical scope before running it, so the turn-level executor guard can
+     * enforce per-packet containment. Optional: when absent, only root
+     * containment is enforced.
+     */
+    scopeHolder?: ScopeHolder;
+    /**
+     * R6: turn-level task counter. Persists across `subtask` calls so multiple
+     * calls in one root turn cannot exceed `maxTasksPerTurn`. When absent, the
+     * supervisor falls back to a per-batch counter (weaker; logged).
+     */
+    turnTaskState?: TurnTaskState;
+    /**
+     * R6: live permission state from the root runtime. Returns true when a
+     * permission request is awaiting user decision. When absent, defaults to
+     * false (no pending permission) - the root loop should inject the real
+     * state to prevent background auto-approval bypass.
+     */
+    hasPendingPermission?: () => boolean;
+    /**
+     * R6: called with each child's observed usage (never clamped) so the root
+     * loop can record it into its shared CostTracker. Fires for every terminal
+     * state (completed/failed/cancelled/timed_out), so partial usage before a
+     * failure is still accounted.
+     */
+    onChildUsage?: (taskId: string, role: import('./types').SubagentRole, usage: import('./types').SubtaskUsage, modelLabel?: string) => void;
+    /** Parent turn abort signal; propagated to every child. */
+    parentAbortSignal?: AbortSignal;
+    /** Read-only context forwarded to each child. */
+    rootObjectiveSummary?: string;
+    modelLabel?: string;
+    /** Lifecycle event sink (runtime event + trace). */
+    onEvent?: (event: RuntimeSubtaskEvent) => void;
+    /** Called once per task with its final SubtaskResult (for artifact persistence). */
+    onSubtaskResult?: (result: SubtaskResult, batchId: string) => void;
+}
+export interface RunBatchOutcome {
+    result: SubtaskBatchResult;
+    /** Whether policy rejected the entire batch before any child ran. */
+    rejected: boolean;
+    rejectReason?: PolicyRejectReason;
+}
+/**
+ * Run a batch of subtasks. Returns a {@link SubtaskBatchResult} whose results
+ * are always in request order, regardless of completion order.
+ *
+ * Never throws: policy rejection, child failures, timeouts and cancels are
+ * all normalized into result entries.
+ */
+export declare function runSubtaskBatch(request: SubtaskRequest, deps: SubagentSupervisorDeps): Promise<RunBatchOutcome>;
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/runtime/subagents/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../../src/runtime/subagents/supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAA6C,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAc,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAA2B,MAAM,UAAU,CAAC;AAC1G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAEvB,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,cAAc,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,oBAAoB,CAAC;IAC7B,YAAY,EAAE,oBAAoB,CAAC;IACnC,yEAAyE;IACzE,YAAY,EAAE,iBAAiB,CAAC;IAChC,sEAAsE;IACtE,OAAO,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1I,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,WAAW,CAAC;IAChC,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/C,oFAAoF;IACpF,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpE;AAeD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAyG1B"}

package/dist/runtime/subagents/supervisor.js

@@ -0,0 +1,301 @@
+"use strict";
+/**
+ * SubagentSupervisor: orchestrates a batch of child subtasks.
+ *
+ * Owns the task/batch ID space, the state machine, the concurrency queue and
+ * ordered aggregation. It is the single place that decides when children start,
+ * how they are bounded, and how their results are folded back to the root.
+ *
+ * The supervisor does NOT own LLM state, tool execution, permission policy or
+ * transcript storage. It composes the policy gate, the budget ledger, the
+ * provider gate and the runner, and emits renderer-independent lifecycle
+ * events that the root loop forwards to terminal/Ink/TUI.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSubtaskBatch = runSubtaskBatch;
+const policy_1 = require("./policy");
+const runner_1 = require("./runner");
+const types_1 = require("./types");
+let batchCounter = 0;
+let taskCounter = 0;
+function nextBatchId() {
+    batchCounter += 1;
+    return `batch-${batchCounter}`;
+}
+function nextTaskId() {
+    taskCounter += 1;
+    return `task-${taskCounter}`;
+}
+/**
+ * Run a batch of subtasks. Returns a {@link SubtaskBatchResult} whose results
+ * are always in request order, regardless of completion order.
+ *
+ * Never throws: policy rejection, child failures, timeouts and cancels are
+ * all normalized into result entries.
+ */
+async function runSubtaskBatch(request, deps) {
+    const policyCtx = {
+        depth: 0,
+        cwd: deps.cwd,
+        config: deps.config,
+        rootObjective: deps.rootObjectiveSummary ?? '',
+        // R6: turn-level counter persists across `subtask` calls so multiple
+        // calls in one root turn cannot exceed `maxTasksPerTurn`.
+        tasksStartedThisTurn: deps.turnTaskState?.tasksStarted() ?? 0,
+        runningChildren: deps.providerGate.activeCount(),
+        // R6: live permission state from the root runtime, not a hardcoded false.
+        hasPendingPermission: deps.hasPendingPermission ? deps.hasPendingPermission() : false,
+        parentAborted: Boolean(deps.parentAbortSignal?.aborted),
+        remainingModelRequests: deps.budget.availableModelRequests(),
+        providerCanReserve: (count) => deps.providerGate.canReserve(count),
+    };
+    const verdict = (0, policy_1.evaluateSubtaskPolicy)(request, policyCtx);
+    if (!verdict.allowed) {
+        const batchId = nextBatchId();
+        const results = request.tasks.map(packet => {
+            const result = buildRejectedResult(packet, verdict.reason);
+            // R7: finalize (trace/artifact/usage) exactly once even for rejected tasks.
+            finalizeTask(deps, batchId, result.id, packet, result);
+            return result;
+        });
+        return {
+            result: { batchId, results, aggregateUsage: (0, types_1.sumSubtaskUsage)([]) },
+            rejected: true,
+            rejectReason: verdict.reason,
+        };
+    }
+    // R6: account for the accepted tasks in the turn-level counter so the
+    // next `subtask` call in the same turn sees the updated total.
+    deps.turnTaskState?.addStarted(request.tasks.length);
+    const batchId = nextBatchId();
+    const tasks = request.tasks;
+    const taskIds = tasks.map(() => nextTaskId());
+    // Reserve a fair share per task: the per-task cap, but no more than an even
+    // slice of the turn budget. This lets a 3-task batch fit when the turn limit
+    // is smaller than 3x the per-task cap, while the per-task cap still binds at
+    // reconcile time. Reserving the full per-task cap for every task would
+    // reject batches that would actually fit once real usage is known.
+    const reservePerTask = Math.max(1, Math.min(deps.config.maxModelRequestsPerTask, Math.floor(deps.config.maxModelRequestsPerTurn / tasks.length)));
+    // Reserve budget for every task up front; abort the batch if any reserve fails.
+    for (let i = 0; i < tasks.length; i++) {
+        const reserved = deps.budget.reserve(taskIds[i], reservePerTask);
+        if (!reserved) {
+            // Release what we reserved and reject the rest.
+            for (let j = 0; j <= i; j++)
+                deps.budget.release(taskIds[j]);
+            const results = tasks.map((packet, i) => {
+                const result = buildRejectedResult(packet, 'budget_exhausted', taskIds[i]);
+                // R7: finalize rejected tasks too.
+                finalizeTask(deps, batchId, result.id, packet, result);
+                return result;
+            });
+            return {
+                result: { batchId, results, aggregateUsage: (0, types_1.sumSubtaskUsage)([]) },
+                rejected: true,
+                rejectReason: 'budget_exhausted',
+            };
+        }
+        emit(deps, {
+            batchId, taskId: taskIds[i], role: tasks[i].role, state: 'queued',
+            objective: tasks[i].objective,
+        });
+    }
+    const runnerDeps = (i) => ({
+        cwd: deps.cwd,
+        canonicalScopePaths: verdict.canonicalScope.get(i),
+        toolSet: deps.toolSet,
+        executeQuery: deps.executeQuery,
+        timeoutMs: deps.config.timeoutMs,
+        parentAbortSignal: deps.parentAbortSignal,
+        rootObjectiveSummary: deps.rootObjectiveSummary,
+        modelLabel: deps.modelLabel,
+    });
+    let outcomes;
+    if (request.execution === 'parallel') {
+        outcomes = await runParallel(tasks, taskIds, batchId, deps, runnerDeps);
+    }
+    else {
+        outcomes = await runSerial(tasks, taskIds, batchId, deps, runnerDeps);
+    }
+    // Reconcile budget for each task with its real usage.
+    for (const outcome of outcomes) {
+        deps.budget.reconcile(outcome.result.id, outcome.result.usage);
+    }
+    const results = outcomes.map(o => o.result);
+    const aggregateUsage = (0, types_1.sumSubtaskUsage)(results.map(r => r.usage));
+    return {
+        result: { batchId, results, aggregateUsage },
+        rejected: false,
+    };
+}
+async function runParallel(tasks, taskIds, batchId, deps, runnerDeps) {
+    // Launch each child; the provider gate bounds actual concurrency. Collect
+    // by index so the final order matches the request order.
+    // allSettled guarantees every task is accounted for even if a future
+    // refactor breaks the "runOne never throws" contract.
+    const slots = tasks.map((task, i) => runOne(task, taskIds[i], batchId, i, deps, runnerDeps(i)));
+    const settled = await Promise.allSettled(slots);
+    return settled.map((s, i) => {
+        if (s.status === 'fulfilled')
+            return s.value;
+        // Defensive: construct a failed result for any slot that threw unexpectedly.
+        const task = tasks[i];
+        const result = {
+            id: taskIds[i],
+            role: task.role,
+            status: 'failed',
+            summary: 'Unexpected runner error.',
+            findings: [],
+            files: [],
+            commands: [],
+            verification: [],
+            risks: ['runner threw unexpectedly'],
+            usage: { modelRequests: 0, toolCalls: 0, promptTokens: 0, completionTokens: 0, durationMs: 0 },
+        };
+        finalizeTask(deps, batchId, taskIds[i], task, result);
+        return { result, parentCancelled: false };
+    });
+}
+async function runSerial(tasks, taskIds, batchId, deps, runnerDeps) {
+    const outcomes = [];
+    for (let i = 0; i < tasks.length; i++) {
+        if (deps.parentAbortSignal?.aborted) {
+            // Mark remaining as cancelled without running them.
+            // R7: finalize each cancelled result (trace/artifact/usage) exactly
+            // once, same as a ran task, so resume sees the cancelled state.
+            for (let j = i; j < tasks.length; j++) {
+                const cancelled = cancelledResult(taskIds[j], tasks[j]);
+                finalizeTask(deps, batchId, taskIds[j], tasks[j], cancelled);
+                outcomes.push({
+                    result: cancelled,
+                    parentCancelled: true,
+                });
+            }
+            break;
+        }
+        const outcome = await runOne(tasks[i], taskIds[i], batchId, i, deps, runnerDeps(i));
+        outcomes.push(outcome);
+    }
+    return outcomes;
+}
+async function runOne(task, taskId, batchId, _index, deps, runnerDeps) {
+    // R4: pass the parent abort signal so a queued waiter is removed and
+    // rejected when the user hits Ctrl+C, instead of hanging until a slot
+    // frees. A rejected acquire yields a cancelled result, not a hung batch.
+    try {
+        await deps.providerGate.acquire(deps.parentAbortSignal);
+    }
+    catch {
+        // AcquireAbortedError: parent aborted while queued. Treat as cancelled.
+        // R7: finalize the cancelled result so trace/artifact/usage are recorded
+        // exactly once, same as any other terminal state.
+        const cancelled = cancelledResult(taskId, task);
+        finalizeTask(deps, batchId, taskId, task, cancelled);
+        return { result: cancelled, parentCancelled: true };
+    }
+    try {
+        // R3: set the current packet's canonical scope so the executor guard
+        // enforces per-packet containment. Cleared in finally.
+        if (deps.scopeHolder) {
+            deps.scopeHolder.setScope(runnerDeps.canonicalScopePaths ?? []);
+        }
+        emit(deps, { batchId, taskId, role: task.role, state: 'running', objective: task.objective });
+        const outcome = await (0, runner_1.runSubtask)(task, runnerDeps, taskId);
+        // R7: single finalize path - terminal event + result callback + usage
+        // callback all happen here, exactly once, with errors isolated so a
+        // throwing sink cannot reject the batch or corrupt sibling aggregation.
+        finalizeTask(deps, batchId, taskId, task, outcome.result);
+        return outcome;
+    }
+    finally {
+        deps.providerGate.release();
+        deps.scopeHolder?.clear();
+    }
+}
+/**
+ * R7: finalize exactly once per task. Emits the terminal lifecycle event,
+ * persists the result (artifact), and reports observed usage to the root
+ * CostTracker. Sink errors (event/trace/artifact/usage) are isolated into
+ * diagnostics: they must NOT change the child's business terminal state or
+ * reject the batch, so a failing sink cannot corrupt sibling aggregation.
+ */
+function finalizeTask(deps, batchId, taskId, task, result) {
+    // Terminal lifecycle event - isolated.
+    try {
+        emit(deps, {
+            batchId, taskId, role: task.role,
+            state: toEventState(result.status),
+            objective: task.objective,
+            summary: result.summary,
+            durationMs: result.usage.durationMs,
+            usage: result.usage,
+        });
+    }
+    catch {
+        // Sink failure must not affect the result.
+    }
+    // Persist the structured result for trace/resume durability - isolated.
+    try {
+        deps.onSubtaskResult?.(result, batchId);
+    }
+    catch {
+        // An artifact/trace sink throwing cannot reject the batch.
+    }
+    // Report observed usage (never clamped) to the root CostTracker - isolated.
+    try {
+        deps.onChildUsage?.(taskId, task.role, result.usage, deps.modelLabel);
+    }
+    catch {
+        // CostTracker failure must not affect the result.
+    }
+}
+function toEventState(status) {
+    switch (status) {
+        case 'completed': return 'completed';
+        case 'failed': return 'failed';
+        case 'cancelled': return 'cancelled';
+        case 'timed_out': return 'timed_out';
+        case 'rejected': return 'rejected';
+    }
+}
+/** Build a rejected result (does not emit - finalizeTask handles that). */
+function buildRejectedResult(packet, reason, taskId) {
+    const id = taskId ?? nextTaskId();
+    return {
+        id,
+        role: packet.role,
+        status: 'rejected',
+        summary: `Rejected by policy: ${reason}`,
+        findings: [],
+        files: [],
+        commands: [],
+        verification: [],
+        risks: [`policy rejected: ${reason}`],
+        usage: { modelRequests: 0, toolCalls: 0, promptTokens: 0, completionTokens: 0, durationMs: 0 },
+    };
+}
+function cancelledResult(taskId, packet) {
+    return {
+        id: taskId,
+        role: packet.role,
+        status: 'cancelled',
+        summary: 'Cancelled: parent turn aborted before this task started.',
+        findings: [],
+        files: [],
+        commands: [],
+        verification: [],
+        risks: ['parent turn aborted'],
+        usage: { modelRequests: 0, toolCalls: 0, promptTokens: 0, completionTokens: 0, durationMs: 0 },
+    };
+}
+function emit(deps, event) {
+    // R7: an event sink throwing must never reject the batch or corrupt
+    // sibling aggregation - isolate it as a diagnostic.
+    try {
+        deps.onEvent?.(event);
+    }
+    catch {
+        // Event sink failure is best-effort; the result is unaffected.
+    }
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/runtime/subagents/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../../src/runtime/subagents/supervisor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AA2FH,0CA4GC;AApMD,qCAA8F;AAE9F,qCAA0G;AAE1G,mCAQiB;AAiDjB,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB,SAAS,WAAW;IAClB,YAAY,IAAI,CAAC,CAAC;IAClB,OAAO,SAAS,YAAY,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,UAAU;IACjB,WAAW,IAAI,CAAC,CAAC;IACjB,OAAO,QAAQ,WAAW,EAAE,CAAC;AAC/B,CAAC;AASD;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,IAA4B;IAE5B,MAAM,SAAS,GAAkB;QAC/B,KAAK,EAAE,CAAC;QACR,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,oBAAoB,IAAI,EAAE;QAC9C,qEAAqE;QACrE,0DAA0D;QAC1D,oBAAoB,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC;QAC7D,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;QAChD,0EAA0E;QAC1E,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,KAAK;QACrF,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC;QACvD,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;QAC5D,kBAAkB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC;KAC3E,CAAC;IAEF,MAAM,OAAO,GAAG,IAAA,8BAAqB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACzC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,4EAA4E;YAC5E,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAA,uBAAe,EAAC,EAAE,CAAC,EAAE;YACjE,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,OAAO,CAAC,MAAM;SAC7B,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,+DAA+D;IAC/D,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAE9C,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAC7B,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAC9G,CAAC;IAEF,gFAAgF;IAChF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,gDAAgD;YAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3E,mCAAmC;gBACnC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACvD,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAA,uBAAe,EAAC,EAAE,CAAC,EAAE;gBACjE,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,kBAAkB;aACjC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ;YACjE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,CAAC;QACrD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,mBAAmB,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;QAChC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,IAAI,QAAoE,CAAC;IACzE,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;IAED,sDAAsD;IACtD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAElE,OAAO;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;QAC5C,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAsB,EACtB,OAAiB,EACjB,OAAe,EACf,IAA4B,EAC5B,UAA6C;IAE7C,0EAA0E;IAC1E,yDAAyD;IACzD,qEAAqE;IACrE,sDAAsD;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QAC7C,6EAA6E;QAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,MAAM,GAAkB;YAC5B,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,0BAA0B;YACnC,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,CAAC,2BAA2B,CAAC;YACpC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;SAC/F,CAAC;QACF,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAsB,EACtB,OAAiB,EACjB,OAAe,EACf,IAA4B,EAC5B,UAA6C;IAE7C,MAAM,QAAQ,GAA+D,EAAE,CAAC;IAChF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC;YACpC,oDAAoD;YACpD,oEAAoE;YACpE,gEAAgE;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,SAAS;oBACjB,eAAe,EAAE,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,IAAmB,EACnB,MAAc,EACd,OAAe,EACf,MAAc,EACd,IAA4B,EAC5B,UAA8B;IAE9B,qEAAqE;IACrE,sEAAsE;IACtE,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChD,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,CAAC;QACH,qEAAqE;QACrE,uDAAuD;QACvD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAU,EAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3D,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,IAA4B,EAC5B,OAAe,EACf,MAAc,EACd,IAAmB,EACnB,MAAqB;IAErB,uCAAuC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;YAChC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;YACnC,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC;QACH,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,CAAC;QACrC,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,CAAC;QACrC,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;IACrC,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,mBAAmB,CAAC,MAAqB,EAAE,MAAc,EAAE,MAAe;IACjF,MAAM,EAAE,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC;IAClC,OAAO;QACL,EAAE;QACF,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,uBAAuB,MAAM,EAAE;QACxC,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,KAAK,EAAE,CAAC,oBAAoB,MAAM,EAAE,CAAC;QACrC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;KAC/F,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,MAAqB;IAC5D,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,KAAK,EAAE,CAAC,qBAAqB,CAAC;QAC9B,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;KAC/F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAA4B,EAAE,KAA0B;IACpE,oEAAoE;IACpE,oDAAoD;IACpD,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC"}

package/dist/runtime/subagents/tool.d.ts

@@ -0,0 +1,38 @@
+/**
+ * createSubtaskTool: the runtime-bound `subtask` tool factory.
+ *
+ * Unlike global stateless tools, this tool is created per root turn and bound
+ * to a {@link SubagentSupervisor}. It is the only way the root Agent can
+ * request child investigations; children themselves never receive it (the
+ * preset allowlist strips `subtask`), so delegation depth is structurally 1.
+ *
+ * The tool is read-only orchestration: it never writes, and its result is the
+ * structured batch summary the root Agent consumes to continue its own work.
+ */
+import { type OpenHorseTool } from '../../framework/tool';
+import { type SubagentSupervisorDeps } from './supervisor';
+import type { SubtaskRequest } from './types';
+/** Coerce model-provided args into a validated SubtaskRequest. */
+export declare function coerceSubtaskRequest(args: Record<string, unknown>): SubtaskRequest | null;
+/**
+ * Create the runtime-bound `subtask` tool. The supervisor is captured in the
+ * closure so the tool is stateless from the scheduler's perspective.
+ */
+export declare function createSubtaskTool(supervisorDeps: SubagentSupervisorDeps): OpenHorseTool;
+/** Produce a compact, model-facing summary of a batch result. */
+export declare function summarizeBatchForModel(batch: {
+    batchId: string;
+    results: Array<{
+        role: string;
+        status: string;
+        summary: string;
+        findings: unknown[];
+        risks: string[];
+    }>;
+    aggregateUsage: {
+        modelRequests: number;
+        toolCalls: number;
+        durationMs: number;
+    };
+}): string;
+//# sourceMappingURL=tool.d.ts.map

package/dist/runtime/subagents/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../../src/runtime/subagents/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAa,KAAK,aAAa,EAA4B,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAmB,KAAK,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,SAAS,CAAC;AAyC3E,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,GAAG,IAAI,CA4BzF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,sBAAsB,GAAG,aAAa,CA4DvF;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAAC,cAAc,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,CAWpQ"}