pi-background-tasks 2.5.0 → 2.6.0

package/dist/src/core/delegate/runner.js

@@ -0,0 +1,398 @@
+import { existsSync } from 'node:fs';
+import { readFile, rmdir } from 'node:fs/promises';
+import { canonicalJson } from '../canonical-json.js';
+import { replaceFileDurable } from '../durable-fs.js';
+import { resolveAnthropicAttributionExtensionPath } from '../anthropic-attribution-path.js';
+import { dirname, join } from 'node:path';
+import { DelegateArtifactStore, discardDelegateArtifactRoot } from './artifacts.js';
+import { buildDelegateChildArgv, delegateChildEnv, ensureDelegateChildSessionDir, preflightDelegateLaunch, resolveDelegateChildExtensionPath, } from './launch.js';
+import { DELEGATE_INLINE_ANSWER_BYTES } from './budget.js';
+import { verifyDelegateResultPackage } from './result-package.js';
+import { DelegateError, } from './types.js';
+const PREPARATION_CLEANUP_ERROR_MAX_CHARS = 320;
+function boundedPreparationError(error) {
+    const text = (error instanceof Error ? error.message : String(error))
+        .replace(/\s+/gu, ' ')
+        .trim();
+    if (text.length <= PREPARATION_CLEANUP_ERROR_MAX_CHARS)
+        return text;
+    return `${text.slice(0, PREPARATION_CLEANUP_ERROR_MAX_CHARS)}…`;
+}
+function filesystemErrorCode(error) {
+    if (typeof error !== 'object' || error === null)
+        return undefined;
+    const code = Reflect.get(error, 'code');
+    return typeof code === 'string' ? code : undefined;
+}
+async function removeEmptyDirectory(path) {
+    try {
+        await rmdir(path);
+        return true;
+    }
+    catch (error) {
+        const code = filesystemErrorCode(error);
+        if (code === 'ENOENT')
+            return true;
+        if (code === 'ENOTEMPTY' || code === 'EEXIST')
+            return false;
+        throw error;
+    }
+}
+async function discardUnownedDelegatePreparation(rootAbs) {
+    await discardDelegateArtifactRoot(rootAbs);
+    const runParent = dirname(rootAbs);
+    if (!(await removeEmptyDirectory(runParent)))
+        return;
+    await removeEmptyDirectory(dirname(runParent));
+}
+function throwIfPreparationAborted(signal) {
+    if (signal?.aborted !== true)
+        return;
+    const reason = signal.reason;
+    if (reason instanceof Error)
+        throw reason;
+    throw new Error('delegate launch preparation was cancelled before task registration');
+}
+function preparationCleanupFailure(original, cleanup) {
+    return new AggregateError([original, cleanup], `delegate launch preparation failed and rollback also failed: ${boundedPreparationError(cleanup)}`);
+}
+/**
+ * Prepare a delegate launch.
+ *
+ * Preflight runs first and completes entirely before the artifact directory is
+ * created, so every admission refusal leaves zero children AND zero artifacts.
+ * When a step after directory creation fails or activation cancellation is
+ * observed, the producer removes the unowned directory before rejecting.
+ */
+export async function prepareDelegateLaunch(input) {
+    throwIfPreparationAborted(input.signal);
+    // Resolve the guard extension before anything is created: a package missing
+    // its child guard must refuse rather than spawn an unguarded child.
+    const childExtensionPath = input.childExtensionPath ?? resolveDelegateChildExtensionPath();
+    let attributionExtensionPath;
+    if (input.route.provider === 'anthropic') {
+        try {
+            attributionExtensionPath =
+                input.attributionExtensionPath ?? resolveAnthropicAttributionExtensionPath();
+        }
+        catch (error) {
+            throw new DelegateError(`Anthropic delegate attribution extension could not be resolved: ${error instanceof Error ? error.message : String(error)}`, {
+                code: 'delegate_isolation_unsupported',
+                childCreated: false,
+                remediation: ['Reinstall the package; Anthropic delegates require attribution.'],
+            });
+        }
+    }
+    throwIfPreparationAborted(input.signal);
+    const preflight = preflightDelegateLaunch(input);
+    throwIfPreparationAborted(input.signal);
+    let store;
+    try {
+        store = await DelegateArtifactStore.create({
+            cwd: input.cwd,
+            taskId: preflight.taskId,
+            launchNonce: preflight.launchNonce,
+            sessionId: input.sessionId,
+            childSessionId: preflight.childSessionId,
+            childSessionDir: '',
+            extensionMode: input.extensionMode,
+            route: input.route,
+            limits: preflight.limits,
+            seedSha256: preflight.seed.sha256,
+            ...(input.now === undefined ? {} : { now: input.now }),
+        });
+        throwIfPreparationAborted(input.signal);
+        const seedRef = await store.writeSeed(preflight.seed.serialized);
+        throwIfPreparationAborted(input.signal);
+        // The persisted seed bytes are the bytes the child reads. Nothing
+        // re-serializes them between here and the child, and the child verifies the
+        // hash before its first model call.
+        if (seedRef.sha256 !== preflight.seed.sha256) {
+            throw new DelegateError('delegate seed hash changed between construction and persistence', {
+                code: 'seed_persist_failed',
+                childCreated: false,
+                taskId: preflight.taskId,
+                artifactDir: store.artifactDir,
+            });
+        }
+        await store.writeLedger(preflight.seed.ledger);
+        throwIfPreparationAborted(input.signal);
+        await store.writeBudgetPlan(preflight.plan);
+        throwIfPreparationAborted(input.signal);
+        const childSessionDirAbs = await ensureDelegateChildSessionDir(store.artifactDirAbs);
+        throwIfPreparationAborted(input.signal);
+        const seedPathAbs = join(store.artifactDirAbs, 'seed.json');
+        const argv = buildDelegateChildArgv({
+            route: input.route,
+            capability: input.capability,
+            extensionMode: input.extensionMode,
+            childSessionId: preflight.childSessionId,
+            childSessionDir: childSessionDirAbs,
+            childExtensionPath,
+            attributionExtensionPath,
+            systemPrompt: preflight.childSystemPrompt,
+        });
+        const env = delegateChildEnv({
+            artifactDirAbs: store.artifactDirAbs,
+            seedPathAbs,
+            seedSha256: preflight.seed.sha256,
+            taskId: preflight.taskId,
+            launchNonce: preflight.launchNonce,
+        }, input.env ?? process.env);
+        const facts = {
+            taskId: preflight.taskId,
+            launchNonce: preflight.launchNonce,
+            artifactDir: store.artifactDir,
+            artifactDirAbs: store.artifactDirAbs,
+            seedSha256: preflight.seed.sha256,
+            childSessionId: preflight.childSessionId,
+            route: {
+                provider: input.route.provider,
+                model: input.route.model,
+                qualifiedId: input.route.qualified_id,
+            },
+            budget: {
+                family: preflight.plan.route.family,
+                rate_source: preflight.plan.route.rate_source,
+                conservative_rate_source: preflight.plan.conservative_estimate.rateSource,
+            },
+            extensionMode: input.extensionMode,
+            autoDeliver: input.autoDeliver,
+        };
+        const stdinBytes = Buffer.from(preflight.childPrompt, 'utf8');
+        // The persisted prompt bytes must equal the bytes sent to the child, so the
+        // artifact is evidence of what the child actually received.
+        await store.writeChildPrompt(stdinBytes);
+        throwIfPreparationAborted(input.signal);
+        const artifactDirAbs = store.artifactDirAbs;
+        let rollbackPromise;
+        const rollback = () => {
+            rollbackPromise ??= discardUnownedDelegatePreparation(artifactDirAbs);
+            return rollbackPromise;
+        };
+        return {
+            preflight,
+            store,
+            argv,
+            env,
+            facts,
+            childSessionDirAbs,
+            seedPathAbs,
+            stdinBytes,
+            rollback,
+        };
+    }
+    catch (error) {
+        if (store === undefined)
+            throw error;
+        try {
+            await discardUnownedDelegatePreparation(store.artifactDirAbs);
+        }
+        catch (cleanupError) {
+            throw preparationCleanupFailure(error, cleanupError);
+        }
+        throw error;
+    }
+}
+/**
+ * Evaluate a finished delegate child.
+ *
+ * The committed result package is the sole answer data plane. Its presence under
+ * its final name is the success signal; its absence means no answer was
+ * accepted, whatever the process exit code happened to be. A child that exits 0
+ * without committing is a typed `child_exited_without_commit`, never a silent
+ * empty success.
+ */
+export async function evaluateDelegateTerminal(input) {
+    const evaluation = await adjudicateDelegateTerminal(input);
+    // Record the parent's adjudicated view separately from the child-written
+    // result package, so neither writer can overwrite the other's claim.
+    try {
+        await replaceFileDurable(join(input.artifactDirAbs, 'outcome.json'), `${canonicalJson({
+            schema_version: 'pi-background-tasks.delegate-outcome.v1',
+            task_id: input.taskId,
+            launch_nonce: input.launchNonce,
+            observed_task_status: input.taskStatus,
+            outcome: evaluation.outcome,
+            error_code: evaluation.error?.code ?? null,
+        })}\n`);
+    }
+    catch {
+        // Failing to record the adjudication must not change the adjudication
+        // itself, which is returned to the caller either way.
+    }
+    return evaluation;
+}
+async function adjudicateDelegateTerminal(input) {
+    const resultPath = join(input.artifactDirAbs, 'result.json');
+    const terminalPath = join(input.artifactDirAbs, 'child-terminal.json');
+    if (!existsSync(resultPath)) {
+        const recorded = existsSync(terminalPath) ? await readChildTerminal(terminalPath) : undefined;
+        const cancelled = input.taskStatus === 'killed';
+        const code = recorded?.code ?? (cancelled ? 'child_cancelled' : 'child_exited_without_commit');
+        const detail = recorded?.message ??
+            input.taskError ??
+            'the delegate child exited without committing a result package';
+        const preserved = [
+            'seed.json',
+            'budget-plan.json',
+            'child-terminal.json',
+            'runtime-budget.json',
+        ].filter((name) => existsSync(join(input.artifactDirAbs, name)));
+        if (input.taskOutputPath !== undefined &&
+            input.taskOutputAbsPath !== undefined &&
+            existsSync(input.taskOutputAbsPath)) {
+            preserved.push(input.taskOutputPath);
+        }
+        const diagnosticTargets = preserved.filter((name) => name === 'child-terminal.json' ||
+            name === 'runtime-budget.json' ||
+            name === input.taskOutputPath);
+        const diagnostic = diagnosticTargets.length === 0
+            ? 'No child terminal record or merged task output exists; inspect the preserved launch artifacts listed above.'
+            : `Inspect the preserved diagnostic evidence: ${diagnosticTargets.join(', ')}.`;
+        const error = new DelegateError(`bg_delegate produced no committed answer: ${detail}`, {
+            code: isDelegateErrorCode(code) ? code : 'child_exited_without_commit',
+            childCreated: true,
+            taskId: input.taskId,
+            artifactDir: input.artifactDirAbs,
+            preserved,
+            remediation: [
+                diagnostic,
+                'No partial answer is returned; nothing was truncated to look like success.',
+            ],
+        });
+        const outcome = {
+            status: cancelled ? 'cancelled' : 'failed',
+            errorCode: error.code,
+        };
+        return { outcome, error };
+    }
+    let raw;
+    try {
+        raw = await readFile(resultPath, 'utf8');
+    }
+    catch (error) {
+        const failure = new DelegateError(`bg_delegate could not read its committed result package: ${error instanceof Error ? error.message : String(error)}`, {
+            code: 'artifact_read_failed',
+            childCreated: true,
+            taskId: input.taskId,
+            artifactDir: input.artifactDirAbs,
+        });
+        return { outcome: { status: 'failed', errorCode: failure.code }, error: failure };
+    }
+    try {
+        const verified = verifyDelegateResultPackage(raw, {
+            taskId: input.taskId,
+            launchNonce: input.launchNonce,
+            seedSha256: input.seedSha256,
+            route: input.route,
+        });
+        return {
+            outcome: {
+                status: 'committed',
+                answerBytes: verified.package.answer.byte_length,
+                answerSha256: verified.package.answer.sha256,
+                turns: verified.package.turns,
+                toolCalls: verified.package.tool_calls,
+            },
+            result: verified,
+        };
+    }
+    catch (error) {
+        if (error instanceof DelegateError) {
+            return { outcome: { status: 'failed', errorCode: error.code }, error };
+        }
+        throw error;
+    }
+}
+async function readChildTerminal(path) {
+    try {
+        const parsed = JSON.parse(await readFile(path, 'utf8'));
+        if (typeof parsed !== 'object' || parsed === null)
+            return undefined;
+        const code = Reflect.get(parsed, 'code');
+        const message = Reflect.get(parsed, 'message');
+        if (typeof code !== 'string' || typeof message !== 'string')
+            return undefined;
+        return { code, message };
+    }
+    catch {
+        // A missing or malformed child-terminal record must not mask the primary
+        // "no committed answer" failure, which is reported by the caller either way.
+        return undefined;
+    }
+}
+const DELEGATE_ERROR_CODE_SET = new Set([
+    'delegate_hook_contract_unsupported',
+    'delegate_isolation_unsupported',
+    'route_unresolved',
+    'route_capacity_unknown',
+    'seed_projection_failed',
+    'seed_budget_exceeded',
+    'seed_persist_failed',
+    'invalid_arguments',
+    'child_spawn_failed',
+    'child_startup_failed',
+    'child_timeout',
+    'child_cancelled',
+    'child_turn_limit',
+    'child_tool_call_limit',
+    'child_exited_without_commit',
+    'provider_context_budget_exhausted',
+    'aggregate_tool_output_cap',
+    'child_model_output_limit',
+    'child_capture_limit',
+    'child_result_invalid',
+    'child_result_encoding_invalid',
+    'route_attestation_missing',
+    'route_mismatch',
+    'seed_hash_mismatch',
+    'answer_hash_mismatch',
+    'artifact_spill_failed',
+    'artifact_read_failed',
+    'artifact_error',
+    'result_not_ready',
+    'result_unavailable',
+    'result_too_large_for_inline',
+    'task_unknown',
+]);
+function isDelegateErrorCode(value) {
+    return DELEGATE_ERROR_CODE_SET.has(value);
+}
+/**
+ * Decide inline versus artifact delivery.
+ *
+ * The cap is applied to the exact serialized answer bytes. An answer over the
+ * cap degrades to an artifact reference explicitly and is never shortened to
+ * fit.
+ */
+export function decideDelegateDelivery(answerBytes, requested, cap = DELEGATE_INLINE_ANSWER_BYTES) {
+    if (requested === 'artifact') {
+        return { mode: 'artifact', reason: 'artifact delivery was requested explicitly' };
+    }
+    if (answerBytes <= cap) {
+        return {
+            mode: 'inline',
+            reason: `the answer is ${String(answerBytes)} bytes, within the ${String(cap)}-byte inline cap`,
+        };
+    }
+    return {
+        mode: 'artifact',
+        reason: `the answer is ${String(answerBytes)} bytes, over the ${String(cap)}-byte inline cap`,
+    };
+}
+/** Raised when inline delivery was explicitly requested for an oversized answer. */
+export function inlineTooLarge(taskId, artifactDir, answerBytes, cap = DELEGATE_INLINE_ANSWER_BYTES) {
+    return new DelegateError(`bg_result cannot return this answer inline: it is ${String(answerBytes)} bytes, over the ${String(cap)}-byte inline cap. The complete verified answer is preserved at ${join(artifactDir, 'result.json')}. It is not truncated to fit.`, {
+        code: 'result_too_large_for_inline',
+        childCreated: true,
+        taskId,
+        artifactDir,
+        preserved: [join(artifactDir, 'result.json')],
+        remediation: [
+            'Call bg_result with delivery:"artifact" to receive the verified metadata plus the artifact reference.',
+            'Read the answer from the artifact path directly if the full text is required.',
+        ],
+    });
+}
+//# sourceMappingURL=runner.js.map

package/dist/src/core/delegate/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../../src/core/delegate/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,wCAAwC,EAAE,MAAM,kCAAkC,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AACpF,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,GAGlC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAA+B,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EACL,aAAa,GAId,MAAM,YAAY,CAAC;AAsCpB,MAAM,mCAAmC,GAAG,GAAG,CAAC;AAEhD,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAClE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,IAAI,EAAE,CAAC;IACV,IAAI,IAAI,CAAC,MAAM,IAAI,mCAAmC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mCAAmC,CAAC,GAAG,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,OAAe;IAC9D,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO;IACrD,MAAM,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA+B;IAChE,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO;IACrC,MAAM,MAAM,GAAY,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,MAAM,YAAY,KAAK;QAAE,MAAM,MAAM,CAAC;IAC1C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAiB,EAAE,OAAgB;IACpE,OAAO,IAAI,cAAc,CACvB,CAAC,QAAQ,EAAE,OAAO,CAAC,EACnB,gEAAgE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CACnG,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAiC;IAEjC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,iCAAiC,EAAE,CAAC;IAC3F,IAAI,wBAA4C,CAAC;IACjD,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,wBAAwB;gBACtB,KAAK,CAAC,wBAAwB,IAAI,wCAAwC,EAAE,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CACrB,mEAAmE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3H;gBACE,IAAI,EAAE,gCAAgC;gBACtC,YAAY,EAAE,KAAK;gBACnB,WAAW,EAAE,CAAC,iEAAiE,CAAC;aACjF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACjD,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,KAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC;YACzC,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;YACjC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,kEAAkE;QAClE,4EAA4E;QAC5E,oCAAoC;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,iEAAiE,EAAE;gBACzF,IAAI,EAAE,qBAAqB;gBAC3B,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,kBAAkB,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACrF,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,sBAAsB,CAAC;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,kBAAkB;YACnC,kBAAkB;YAClB,wBAAwB;YACxB,YAAY,EAAE,SAAS,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,CAC1B;YACE,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;YACjC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,EACD,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CACzB,CAAC;QACF,MAAM,KAAK,GAAsB;YAC/B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;YACjC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;gBACxB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;aACtC;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;gBACnC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW;gBAC7C,wBAAwB,EAAE,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU;aAC1E;YACD,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9D,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,KAAK,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACzC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC5C,IAAI,eAA0C,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAkB,EAAE;YACnC,eAAe,KAAK,iCAAiC,CAAC,cAAc,CAAC,CAAC;YACtE,OAAO,eAAe,CAAC;QACzB,CAAC,CAAC;QACF,OAAO;YACL,SAAS;YACT,KAAK;YACL,IAAI;YACJ,GAAG;YACH,KAAK;YACL,kBAAkB;YAClB,WAAW;YACX,UAAU;YACV,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,iCAAiC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,yBAAyB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAoC;IAEpC,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC3D,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,CAAC;QACH,MAAM,kBAAkB,CACtB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,EAC1C,GAAG,aAAa,CAAC;YACf,cAAc,EAAE,yCAAyC;YACzD,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,oBAAoB,EAAE,KAAK,CAAC,UAAU;YACtC,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI;SAC3C,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sDAAsD;IACxD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAoC;IAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;QAC/F,MAAM,MAAM,GACV,QAAQ,EAAE,OAAO;YACjB,KAAK,CAAC,SAAS;YACf,+DAA+D,CAAC;QAClE,MAAM,SAAS,GAAG;YAChB,WAAW;YACX,kBAAkB;YAClB,qBAAqB;YACrB,qBAAqB;SACtB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,IACE,KAAK,CAAC,cAAc,KAAK,SAAS;YAClC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACrC,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACnC,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CACxC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,qBAAqB;YAC9B,IAAI,KAAK,qBAAqB;YAC9B,IAAI,KAAK,KAAK,CAAC,cAAc,CAChC,CAAC;QACF,MAAM,UAAU,GACd,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,6GAA6G;YAC/G,CAAC,CAAC,8CAA8C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,6CAA6C,MAAM,EAAE,EAAE;YACrF,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B;YACtE,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,cAAc;YACjC,SAAS;YACT,WAAW,EAAE;gBACX,UAAU;gBACV,4EAA4E;aAC7E;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAwB;YACnC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YAC1C,SAAS,EAAE,KAAK,CAAC,IAAI;SACtB,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,aAAa,CAC/B,4DAA4D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpH;YACE,IAAI,EAAE,sBAAsB;YAC5B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,cAAc;SAClC,CACF,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,2BAA2B,CAAC,GAAG,EAAE;YAChD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW;gBAChD,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM;gBAC5C,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;gBAC7B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;aACvC;YACD,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,6EAA6E;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS;IAC9C,oCAAoC;IACpC,gCAAgC;IAChC,kBAAkB;IAClB,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;IACvB,6BAA6B;IAC7B,mCAAmC;IACnC,2BAA2B;IAC3B,0BAA0B;IAC1B,qBAAqB;IACrB,sBAAsB;IACtB,+BAA+B;IAC/B,2BAA2B;IAC3B,gBAAgB;IAChB,oBAAoB;IACpB,sBAAsB;IACtB,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,6BAA6B;IAC7B,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,SAA4C,EAC5C,GAAG,GAAG,4BAA4B;IAElC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,iBAAiB,MAAM,CAAC,WAAW,CAAC,sBAAsB,MAAM,CAAC,GAAG,CAAC,kBAAkB;SAChG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,iBAAiB,MAAM,CAAC,WAAW,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,kBAAkB;KAC9F,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,WAAmB,EACnB,WAAmB,EACnB,GAAG,GAAG,4BAA4B;IAElC,OAAO,IAAI,aAAa,CACtB,qDAAqD,MAAM,CAAC,WAAW,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,kEAAkE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,+BAA+B,EACxO;QACE,IAAI,EAAE,6BAA6B;QACnC,YAAY,EAAE,IAAI;QAClB,MAAM;QACN,WAAW;QACX,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC7C,WAAW,EAAE;YACX,uGAAuG;YACvG,+EAA+E;SAChF;KACF,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { existsSync } from 'node:fs';\nimport { readFile, rmdir } from 'node:fs/promises';\nimport { canonicalJson } from '../canonical-json.js';\nimport { replaceFileDurable } from '../durable-fs.js';\nimport { resolveAnthropicAttributionExtensionPath } from '../anthropic-attribution-path.js';\nimport { dirname, join } from 'node:path';\nimport { DelegateArtifactStore, discardDelegateArtifactRoot } from './artifacts.js';\nimport {\n  buildDelegateChildArgv,\n  delegateChildEnv,\n  ensureDelegateChildSessionDir,\n  preflightDelegateLaunch,\n  resolveDelegateChildExtensionPath,\n  type DelegatePreflightInput,\n  type DelegatePreflightResult,\n} from './launch.js';\nimport { DELEGATE_INLINE_ANSWER_BYTES } from './budget.js';\nimport { verifyDelegateResultPackage, type VerifiedDelegateResult } from './result-package.js';\nimport {\n  DelegateError,\n  type DelegateAutoDeliverMode,\n  type DelegateExtensionMode,\n  type DelegateResultPackageV1,\n} from './types.js';\nimport type { DelegateTaskFacts, DelegateTaskOutcome } from '../common.js';\n\n/**\n * Delegate launch preparation and terminal evaluation.\n *\n * Separated from the background-task registry so the ordering property that\n * matters most — preflight refusals create nothing — is testable without\n * spawning anything.\n */\n\nexport interface PreparedDelegateLaunch {\n  preflight: DelegatePreflightResult;\n  store: DelegateArtifactStore;\n  argv: readonly string[];\n  env: NodeJS.ProcessEnv;\n  facts: DelegateTaskFacts;\n  childSessionDirAbs: string;\n  seedPathAbs: string;\n  /** Exact prompt bytes delivered to the child over stdin. */\n  stdinBytes: Buffer;\n  /** Remove this complete preparation while it is still unowned by a task. */\n  rollback: () => Promise<void>;\n}\n\nexport interface PrepareDelegateLaunchInput extends DelegatePreflightInput {\n  cwd: string;\n  sessionId: string | undefined;\n  autoDeliver: DelegateAutoDeliverMode;\n  extensionMode: DelegateExtensionMode;\n  childExtensionPath?: string | undefined;\n  attributionExtensionPath?: string | undefined;\n  env?: NodeJS.ProcessEnv | undefined;\n  now?: (() => Date) | undefined;\n  /** Activation closure cancels preparation before task ownership transfers. */\n  signal?: AbortSignal | undefined;\n}\n\nconst PREPARATION_CLEANUP_ERROR_MAX_CHARS = 320;\n\nfunction boundedPreparationError(error: unknown): string {\n  const text = (error instanceof Error ? error.message : String(error))\n    .replace(/\\s+/gu, ' ')\n    .trim();\n  if (text.length <= PREPARATION_CLEANUP_ERROR_MAX_CHARS) return text;\n  return `${text.slice(0, PREPARATION_CLEANUP_ERROR_MAX_CHARS)}…`;\n}\n\nfunction filesystemErrorCode(error: unknown): string | undefined {\n  if (typeof error !== 'object' || error === null) return undefined;\n  const code: unknown = Reflect.get(error, 'code');\n  return typeof code === 'string' ? code : undefined;\n}\n\nasync function removeEmptyDirectory(path: string): Promise<boolean> {\n  try {\n    await rmdir(path);\n    return true;\n  } catch (error) {\n    const code = filesystemErrorCode(error);\n    if (code === 'ENOENT') return true;\n    if (code === 'ENOTEMPTY' || code === 'EEXIST') return false;\n    throw error;\n  }\n}\n\nasync function discardUnownedDelegatePreparation(rootAbs: string): Promise<void> {\n  await discardDelegateArtifactRoot(rootAbs);\n  const runParent = dirname(rootAbs);\n  if (!(await removeEmptyDirectory(runParent))) return;\n  await removeEmptyDirectory(dirname(runParent));\n}\n\nfunction throwIfPreparationAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted !== true) return;\n  const reason: unknown = signal.reason;\n  if (reason instanceof Error) throw reason;\n  throw new Error('delegate launch preparation was cancelled before task registration');\n}\n\nfunction preparationCleanupFailure(original: unknown, cleanup: unknown): AggregateError {\n  return new AggregateError(\n    [original, cleanup],\n    `delegate launch preparation failed and rollback also failed: ${boundedPreparationError(cleanup)}`,\n  );\n}\n\n/**\n * Prepare a delegate launch.\n *\n * Preflight runs first and completes entirely before the artifact directory is\n * created, so every admission refusal leaves zero children AND zero artifacts.\n * When a step after directory creation fails or activation cancellation is\n * observed, the producer removes the unowned directory before rejecting.\n */\nexport async function prepareDelegateLaunch(\n  input: PrepareDelegateLaunchInput,\n): Promise<PreparedDelegateLaunch> {\n  throwIfPreparationAborted(input.signal);\n  // Resolve the guard extension before anything is created: a package missing\n  // its child guard must refuse rather than spawn an unguarded child.\n  const childExtensionPath = input.childExtensionPath ?? resolveDelegateChildExtensionPath();\n  let attributionExtensionPath: string | undefined;\n  if (input.route.provider === 'anthropic') {\n    try {\n      attributionExtensionPath =\n        input.attributionExtensionPath ?? resolveAnthropicAttributionExtensionPath();\n    } catch (error) {\n      throw new DelegateError(\n        `Anthropic delegate attribution extension could not be resolved: ${error instanceof Error ? error.message : String(error)}`,\n        {\n          code: 'delegate_isolation_unsupported',\n          childCreated: false,\n          remediation: ['Reinstall the package; Anthropic delegates require attribution.'],\n        },\n      );\n    }\n  }\n\n  throwIfPreparationAborted(input.signal);\n  const preflight = preflightDelegateLaunch(input);\n  throwIfPreparationAborted(input.signal);\n\n  let store: DelegateArtifactStore | undefined;\n  try {\n    store = await DelegateArtifactStore.create({\n      cwd: input.cwd,\n      taskId: preflight.taskId,\n      launchNonce: preflight.launchNonce,\n      sessionId: input.sessionId,\n      childSessionId: preflight.childSessionId,\n      childSessionDir: '',\n      extensionMode: input.extensionMode,\n      route: input.route,\n      limits: preflight.limits,\n      seedSha256: preflight.seed.sha256,\n      ...(input.now === undefined ? {} : { now: input.now }),\n    });\n    throwIfPreparationAborted(input.signal);\n\n    const seedRef = await store.writeSeed(preflight.seed.serialized);\n    throwIfPreparationAborted(input.signal);\n    // The persisted seed bytes are the bytes the child reads. Nothing\n    // re-serializes them between here and the child, and the child verifies the\n    // hash before its first model call.\n    if (seedRef.sha256 !== preflight.seed.sha256) {\n      throw new DelegateError('delegate seed hash changed between construction and persistence', {\n        code: 'seed_persist_failed',\n        childCreated: false,\n        taskId: preflight.taskId,\n        artifactDir: store.artifactDir,\n      });\n    }\n    await store.writeLedger(preflight.seed.ledger);\n    throwIfPreparationAborted(input.signal);\n    await store.writeBudgetPlan(preflight.plan);\n    throwIfPreparationAborted(input.signal);\n    const childSessionDirAbs = await ensureDelegateChildSessionDir(store.artifactDirAbs);\n    throwIfPreparationAborted(input.signal);\n    const seedPathAbs = join(store.artifactDirAbs, 'seed.json');\n    const argv = buildDelegateChildArgv({\n      route: input.route,\n      capability: input.capability,\n      extensionMode: input.extensionMode,\n      childSessionId: preflight.childSessionId,\n      childSessionDir: childSessionDirAbs,\n      childExtensionPath,\n      attributionExtensionPath,\n      systemPrompt: preflight.childSystemPrompt,\n    });\n    const env = delegateChildEnv(\n      {\n        artifactDirAbs: store.artifactDirAbs,\n        seedPathAbs,\n        seedSha256: preflight.seed.sha256,\n        taskId: preflight.taskId,\n        launchNonce: preflight.launchNonce,\n      },\n      input.env ?? process.env,\n    );\n    const facts: DelegateTaskFacts = {\n      taskId: preflight.taskId,\n      launchNonce: preflight.launchNonce,\n      artifactDir: store.artifactDir,\n      artifactDirAbs: store.artifactDirAbs,\n      seedSha256: preflight.seed.sha256,\n      childSessionId: preflight.childSessionId,\n      route: {\n        provider: input.route.provider,\n        model: input.route.model,\n        qualifiedId: input.route.qualified_id,\n      },\n      budget: {\n        family: preflight.plan.route.family,\n        rate_source: preflight.plan.route.rate_source,\n        conservative_rate_source: preflight.plan.conservative_estimate.rateSource,\n      },\n      extensionMode: input.extensionMode,\n      autoDeliver: input.autoDeliver,\n    };\n    const stdinBytes = Buffer.from(preflight.childPrompt, 'utf8');\n    // The persisted prompt bytes must equal the bytes sent to the child, so the\n    // artifact is evidence of what the child actually received.\n    await store.writeChildPrompt(stdinBytes);\n    throwIfPreparationAborted(input.signal);\n    const artifactDirAbs = store.artifactDirAbs;\n    let rollbackPromise: Promise<void> | undefined;\n    const rollback = (): Promise<void> => {\n      rollbackPromise ??= discardUnownedDelegatePreparation(artifactDirAbs);\n      return rollbackPromise;\n    };\n    return {\n      preflight,\n      store,\n      argv,\n      env,\n      facts,\n      childSessionDirAbs,\n      seedPathAbs,\n      stdinBytes,\n      rollback,\n    };\n  } catch (error) {\n    if (store === undefined) throw error;\n    try {\n      await discardUnownedDelegatePreparation(store.artifactDirAbs);\n    } catch (cleanupError) {\n      throw preparationCleanupFailure(error, cleanupError);\n    }\n    throw error;\n  }\n}\n\nexport interface DelegateTerminalEvaluation {\n  outcome: DelegateTaskOutcome;\n  result?: VerifiedDelegateResult | undefined;\n  error?: DelegateError | undefined;\n}\n\nexport interface EvaluateDelegateTerminalInput {\n  artifactDirAbs: string;\n  taskId: string;\n  launchNonce: string;\n  seedSha256: string;\n  route: { provider: string; model: string };\n  /** Terminal status observed by the background task registry. */\n  taskStatus: 'completed' | 'failed' | 'killed';\n  taskError: string | undefined;\n  /** Real merged child output owned by the background-task registry. */\n  taskOutputPath?: string | undefined;\n  taskOutputAbsPath?: string | undefined;\n}\n\n/**\n * Evaluate a finished delegate child.\n *\n * The committed result package is the sole answer data plane. Its presence under\n * its final name is the success signal; its absence means no answer was\n * accepted, whatever the process exit code happened to be. A child that exits 0\n * without committing is a typed `child_exited_without_commit`, never a silent\n * empty success.\n */\nexport async function evaluateDelegateTerminal(\n  input: EvaluateDelegateTerminalInput,\n): Promise<DelegateTerminalEvaluation> {\n  const evaluation = await adjudicateDelegateTerminal(input);\n  // Record the parent's adjudicated view separately from the child-written\n  // result package, so neither writer can overwrite the other's claim.\n  try {\n    await replaceFileDurable(\n      join(input.artifactDirAbs, 'outcome.json'),\n      `${canonicalJson({\n        schema_version: 'pi-background-tasks.delegate-outcome.v1',\n        task_id: input.taskId,\n        launch_nonce: input.launchNonce,\n        observed_task_status: input.taskStatus,\n        outcome: evaluation.outcome,\n        error_code: evaluation.error?.code ?? null,\n      })}\\n`,\n    );\n  } catch {\n    // Failing to record the adjudication must not change the adjudication\n    // itself, which is returned to the caller either way.\n  }\n  return evaluation;\n}\n\nasync function adjudicateDelegateTerminal(\n  input: EvaluateDelegateTerminalInput,\n): Promise<DelegateTerminalEvaluation> {\n  const resultPath = join(input.artifactDirAbs, 'result.json');\n  const terminalPath = join(input.artifactDirAbs, 'child-terminal.json');\n  if (!existsSync(resultPath)) {\n    const recorded = existsSync(terminalPath) ? await readChildTerminal(terminalPath) : undefined;\n    const cancelled = input.taskStatus === 'killed';\n    const code = recorded?.code ?? (cancelled ? 'child_cancelled' : 'child_exited_without_commit');\n    const detail =\n      recorded?.message ??\n      input.taskError ??\n      'the delegate child exited without committing a result package';\n    const preserved = [\n      'seed.json',\n      'budget-plan.json',\n      'child-terminal.json',\n      'runtime-budget.json',\n    ].filter((name) => existsSync(join(input.artifactDirAbs, name)));\n    if (\n      input.taskOutputPath !== undefined &&\n      input.taskOutputAbsPath !== undefined &&\n      existsSync(input.taskOutputAbsPath)\n    ) {\n      preserved.push(input.taskOutputPath);\n    }\n    const diagnosticTargets = preserved.filter(\n      (name) =>\n        name === 'child-terminal.json' ||\n        name === 'runtime-budget.json' ||\n        name === input.taskOutputPath,\n    );\n    const diagnostic =\n      diagnosticTargets.length === 0\n        ? 'No child terminal record or merged task output exists; inspect the preserved launch artifacts listed above.'\n        : `Inspect the preserved diagnostic evidence: ${diagnosticTargets.join(', ')}.`;\n    const error = new DelegateError(`bg_delegate produced no committed answer: ${detail}`, {\n      code: isDelegateErrorCode(code) ? code : 'child_exited_without_commit',\n      childCreated: true,\n      taskId: input.taskId,\n      artifactDir: input.artifactDirAbs,\n      preserved,\n      remediation: [\n        diagnostic,\n        'No partial answer is returned; nothing was truncated to look like success.',\n      ],\n    });\n    const outcome: DelegateTaskOutcome = {\n      status: cancelled ? 'cancelled' : 'failed',\n      errorCode: error.code,\n    };\n    return { outcome, error };\n  }\n\n  let raw: string;\n  try {\n    raw = await readFile(resultPath, 'utf8');\n  } catch (error) {\n    const failure = new DelegateError(\n      `bg_delegate could not read its committed result package: ${error instanceof Error ? error.message : String(error)}`,\n      {\n        code: 'artifact_read_failed',\n        childCreated: true,\n        taskId: input.taskId,\n        artifactDir: input.artifactDirAbs,\n      },\n    );\n    return { outcome: { status: 'failed', errorCode: failure.code }, error: failure };\n  }\n\n  try {\n    const verified = verifyDelegateResultPackage(raw, {\n      taskId: input.taskId,\n      launchNonce: input.launchNonce,\n      seedSha256: input.seedSha256,\n      route: input.route,\n    });\n    return {\n      outcome: {\n        status: 'committed',\n        answerBytes: verified.package.answer.byte_length,\n        answerSha256: verified.package.answer.sha256,\n        turns: verified.package.turns,\n        toolCalls: verified.package.tool_calls,\n      },\n      result: verified,\n    };\n  } catch (error) {\n    if (error instanceof DelegateError) {\n      return { outcome: { status: 'failed', errorCode: error.code }, error };\n    }\n    throw error;\n  }\n}\n\ninterface ChildTerminalRecord {\n  code: string;\n  message: string;\n}\n\nasync function readChildTerminal(path: string): Promise<ChildTerminalRecord | undefined> {\n  try {\n    const parsed: unknown = JSON.parse(await readFile(path, 'utf8'));\n    if (typeof parsed !== 'object' || parsed === null) return undefined;\n    const code: unknown = Reflect.get(parsed, 'code');\n    const message: unknown = Reflect.get(parsed, 'message');\n    if (typeof code !== 'string' || typeof message !== 'string') return undefined;\n    return { code, message };\n  } catch {\n    // A missing or malformed child-terminal record must not mask the primary\n    // \"no committed answer\" failure, which is reported by the caller either way.\n    return undefined;\n  }\n}\n\nconst DELEGATE_ERROR_CODE_SET = new Set<string>([\n  'delegate_hook_contract_unsupported',\n  'delegate_isolation_unsupported',\n  'route_unresolved',\n  'route_capacity_unknown',\n  'seed_projection_failed',\n  'seed_budget_exceeded',\n  'seed_persist_failed',\n  'invalid_arguments',\n  'child_spawn_failed',\n  'child_startup_failed',\n  'child_timeout',\n  'child_cancelled',\n  'child_turn_limit',\n  'child_tool_call_limit',\n  'child_exited_without_commit',\n  'provider_context_budget_exhausted',\n  'aggregate_tool_output_cap',\n  'child_model_output_limit',\n  'child_capture_limit',\n  'child_result_invalid',\n  'child_result_encoding_invalid',\n  'route_attestation_missing',\n  'route_mismatch',\n  'seed_hash_mismatch',\n  'answer_hash_mismatch',\n  'artifact_spill_failed',\n  'artifact_read_failed',\n  'artifact_error',\n  'result_not_ready',\n  'result_unavailable',\n  'result_too_large_for_inline',\n  'task_unknown',\n]);\n\nfunction isDelegateErrorCode(value: string): value is DelegateError['code'] {\n  return DELEGATE_ERROR_CODE_SET.has(value);\n}\n\nexport interface DelegateInlineDecision {\n  mode: 'inline' | 'artifact';\n  reason: string;\n}\n\n/**\n * Decide inline versus artifact delivery.\n *\n * The cap is applied to the exact serialized answer bytes. An answer over the\n * cap degrades to an artifact reference explicitly and is never shortened to\n * fit.\n */\nexport function decideDelegateDelivery(\n  answerBytes: number,\n  requested: 'inline' | 'artifact' | undefined,\n  cap = DELEGATE_INLINE_ANSWER_BYTES,\n): DelegateInlineDecision {\n  if (requested === 'artifact') {\n    return { mode: 'artifact', reason: 'artifact delivery was requested explicitly' };\n  }\n  if (answerBytes <= cap) {\n    return {\n      mode: 'inline',\n      reason: `the answer is ${String(answerBytes)} bytes, within the ${String(cap)}-byte inline cap`,\n    };\n  }\n  return {\n    mode: 'artifact',\n    reason: `the answer is ${String(answerBytes)} bytes, over the ${String(cap)}-byte inline cap`,\n  };\n}\n\n/** Raised when inline delivery was explicitly requested for an oversized answer. */\nexport function inlineTooLarge(\n  taskId: string,\n  artifactDir: string,\n  answerBytes: number,\n  cap = DELEGATE_INLINE_ANSWER_BYTES,\n): DelegateError {\n  return new DelegateError(\n    `bg_result cannot return this answer inline: it is ${String(answerBytes)} bytes, over the ${String(cap)}-byte inline cap. The complete verified answer is preserved at ${join(artifactDir, 'result.json')}. It is not truncated to fit.`,\n    {\n      code: 'result_too_large_for_inline',\n      childCreated: true,\n      taskId,\n      artifactDir,\n      preserved: [join(artifactDir, 'result.json')],\n      remediation: [\n        'Call bg_result with delivery:\"artifact\" to receive the verified metadata plus the artifact reference.',\n        'Read the answer from the artifact path directly if the full text is required.',\n      ],\n    },\n  );\n}\n\nexport type { DelegateResultPackageV1 };\n"]}