pi-subagents 0.68.0 → 0.70.0

package/src/runs/shared/model-resolution-diagnostic.d.ts

@@ -0,0 +1,22 @@
+export interface ChildModelResolutionDiagnostic {
+    agent?: string;
+    model?: string;
+    host?: "parent" | "runner";
+    /** The launch's resolved capability ceiling, when one is active. */
+    capabilityCeiling?: {
+        denyExtensions: boolean;
+        sources?: readonly string[];
+    };
+}
+/** True for a core model-resolution failure, which a missing extension can explain. */
+export declare function isChildModelResolutionFailure(error: string | undefined): boolean;
+/**
+ * Explain a child model that did not resolve because the extension serving its
+ * provider never loaded: a foreground child never loads the parent's ambient
+ * extensions, an explicit `extensions` list keeps a background child from
+ * loading them, and a capability ceiling denies extensions to both. The caller
+ * keeps the core error intact and appends this explanation, so a genuinely
+ * unknown model id still reads as one.
+ */
+export declare function formatChildModelResolutionDiagnostic(diagnostic: ChildModelResolutionDiagnostic): string;
+//# sourceMappingURL=model-resolution-diagnostic.d.ts.map

package/src/runs/shared/model-resolution-diagnostic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-resolution-diagnostic.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/model-resolution-diagnostic.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,8BAA8B;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC3B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC7E;AAaD,uFAAuF;AACvF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGhF;AAkBD;;;;;;;GAOG;AACH,wBAAgB,oCAAoC,CAAC,UAAU,EAAE,8BAA8B,GAAG,MAAM,CA0BvG"}

package/src/runs/shared/model-resolution-diagnostic.js

@@ -0,0 +1,65 @@
+/**
+ * Pi core's model-resolution failure text. `resolveCliModel` reports an
+ * unknown provider or model and cannot know which extension would have
+ * registered it, so these two shapes are the ones that mean "the child's
+ * model registry was missing a provider", not "the provider is unhealthy".
+ */
+const MODEL_RESOLUTION_FAILURE_PATTERNS = [
+    /^Model .+ not found\b/i,
+    /^Unknown provider "/i,
+];
+/** True for a core model-resolution failure, which a missing extension can explain. */
+export function isChildModelResolutionFailure(error) {
+    const text = typeof error === "string" ? error.trim() : "";
+    return MODEL_RESOLUTION_FAILURE_PATTERNS.some((pattern) => pattern.test(text));
+}
+/**
+ * A `capabilityCeiling.denyExtensions` launch loads no extension at all:
+ * ambient, listed, and MCP provider extensions are all suppressed, so neither
+ * `async: true` nor a frontmatter list can register the provider. Saying only
+ * the ambient-extension rule would direct the operator at remedies the ceiling
+ * discards.
+ */
+function capabilityCeilingDeniesExtensions(diagnostic) {
+    return diagnostic.capabilityCeiling?.denyExtensions === true;
+}
+function denyExtensionsClause(diagnostic) {
+    const sources = diagnostic.capabilityCeiling?.sources ?? [];
+    return `Capability ceiling from ${sources.length > 0 ? sources.join(", ") : "an unnamed source"} denies extensions`;
+}
+/**
+ * Explain a child model that did not resolve because the extension serving its
+ * provider never loaded: a foreground child never loads the parent's ambient
+ * extensions, an explicit `extensions` list keeps a background child from
+ * loading them, and a capability ceiling denies extensions to both. The caller
+ * keeps the core error intact and appends this explanation, so a genuinely
+ * unknown model id still reads as one.
+ */
+export function formatChildModelResolutionDiagnostic(diagnostic) {
+    const subject = diagnostic.agent ? `Agent '${diagnostic.agent}'` : "Subagent";
+    const model = diagnostic.model ? `'${diagnostic.model}'` : "this model";
+    if (capabilityCeilingDeniesExtensions(diagnostic)) {
+        return (diagnostic.host === "parent"
+            ? [
+                `${subject} ran as a foreground child, which never loads the parent's ambient extensions.`,
+                `${denyExtensionsClause(diagnostic)}, so if ${model} is served by a provider extension, that extension cannot load for this child: \`async: true\` does not help either, and listed \`subagentOnlyExtensions\` or \`extensions\` entries are suppressed.`,
+                "Relax the capability ceiling to allow extensions, or use a model that the parent's model registry already resolves.",
+            ]
+            : [
+                `${subject} ran as a background child without the ambient extensions.`,
+                `${denyExtensionsClause(diagnostic)}, so if ${model} is served by a provider extension, that extension cannot load for this child: listed \`subagentOnlyExtensions\` or \`extensions\` entries are suppressed, and leaving \`extensions\` unset does not enable ambient loading.`,
+                "Relax the capability ceiling to allow extensions, or use a model that the child's model registry already resolves.",
+            ]).join("\n");
+    }
+    if (diagnostic.host === "parent") {
+        return [
+            `${subject} ran as a foreground child, which never loads the parent's ambient extensions but inherits the providers they registered.`,
+            `If ${model} is served by a provider extension, check the parent's \`/model\` list and the child extension diagnostics, or load the extension for this child with \`subagentOnlyExtensions\` or \`extensions\` in the agent frontmatter.`,
+        ].join("\n");
+    }
+    return [
+        `${subject} ran as a background child without the ambient extensions.`,
+        `If ${model} is served by a provider extension, that extension is not loaded for this child: list it in \`subagentOnlyExtensions\` or \`extensions\` in the agent frontmatter, or leave \`extensions\` unset so the child loads the ambient extensions.`,
+    ].join("\n");
+}
+//# sourceMappingURL=model-resolution-diagnostic.js.map

package/src/runs/shared/model-resolution-diagnostic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-resolution-diagnostic.js","sourceRoot":"","sources":["../../../../src/runs/shared/model-resolution-diagnostic.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AACH,MAAM,iCAAiC,GAAG;IACzC,wBAAwB;IACxB,sBAAsB;CACtB,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,6BAA6B,CAAC,KAAyB;IACtE,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,OAAO,iCAAiC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iCAAiC,CAAC,UAA0C;IACpF,OAAO,UAAU,CAAC,iBAAiB,EAAE,cAAc,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,UAA0C;IACvE,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,EAAE,OAAO,IAAI,EAAE,CAAC;IAC5D,OAAO,2BAA2B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,oBAAoB,CAAC;AACrH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oCAAoC,CAAC,UAA0C;IAC9F,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;IACxE,IAAI,iCAAiC,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ;YACnC,CAAC,CAAC;gBACD,GAAG,OAAO,gFAAgF;gBAC1F,GAAG,oBAAoB,CAAC,UAAU,CAAC,WAAW,KAAK,sMAAsM;gBACzP,qHAAqH;aACrH;YACD,CAAC,CAAC;gBACD,GAAG,OAAO,4DAA4D;gBACtE,GAAG,oBAAoB,CAAC,UAAU,CAAC,WAAW,KAAK,8NAA8N;gBACjR,oHAAoH;aACpH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACN,GAAG,OAAO,2HAA2H;YACrI,MAAM,KAAK,8NAA8N;SACzO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO;QACN,GAAG,OAAO,4DAA4D;QACtE,MAAM,KAAK,6OAA6O;KACxP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC"}

package/src/runs/shared/model-resolution.d.ts

@@ -0,0 +1,92 @@
+import { splitKnownThinkingSuffix as splitThinkingSuffix, type ModelInfo as AvailableModelInfo } from "../../shared/model-info.ts";
+import { type ModelScopeCheckRule, type ModelScopeViolation, type ModelSource } from "./model-scope.ts";
+export type { AvailableModelInfo };
+export interface ModelSelectionEvidence {
+    model?: string;
+    requestedModel?: string;
+}
+export { splitThinkingSuffix };
+/** Aliases apply only to the resolved launch candidate (without its thinking suffix) and the exact raw response ID. */
+export declare function formatSubagentModelVerificationError(expectedModel: string, observedModel: string, availableModels: AvailableModelInfo[] | undefined, modelResponseAliases?: Record<string, string[]>): string | undefined;
+/** Sentinel model value requesting that a subagent inherit the parent session's model. */
+export declare const INHERIT_MODEL = "inherit";
+/** Minimal shape of the parent session's in-memory model (`ctx.model`). */
+export interface ParentModel {
+    provider: string;
+    id: string;
+}
+export declare function normalizeParentModel(model: unknown): ParentModel | undefined;
+/**
+ * Normalize a model id or provider segment for fuzzy comparison: case-fold,
+ * treat dots/underscores as dashes (so `4.5` matches `4-5`), and collapse
+ * repeated separators.
+ */
+export declare function normalizeModelSegment(segment: string): string;
+/**
+ * Fuzzy-resolve a base model id (thinking suffix already stripped) against the
+ * registry, tolerating separator, case, and optional date-stamp differences so
+ * users do not have to spell provider/model exactly. A slash is a provider
+ * prefix only when that prefix is a registered provider; otherwise the whole
+ * string is the model id (Hugging Face `owner/name`). A qualified provider
+ * query only matches within the named provider — this never silently switches
+ * providers for security/cost-sensitive configs. Returns the matched `fullId`,
+ * or `undefined` when there is no match or the match is ambiguous across
+ * providers (and no `preferredProvider` disambiguates).
+ */
+export declare function fuzzyResolveModel(baseModel: string, availableModels: AvailableModelInfo[], preferredProvider?: string): string | undefined;
+/**
+ * Resolve a possibly-loose model id to a canonical `provider/id` (plus any
+ * thinking suffix). Exact registry matches win; fuzzy normalization
+ * (separator/case/date-stamp via {@link fuzzyResolveModel}) is a fallback so
+ * spelling differences still resolve. Never switches providers for a qualified
+ * query.
+ */
+export declare function resolveModelCandidate(model: string | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string): string | undefined;
+export interface ResolveSubagentModelOverrideOptions {
+    /** When set with `enforce: true`, out-of-scope models are rejected. */
+    scope?: ModelScopeCheckRule | ModelScopeCheckRule[];
+    /** Origin of the requested model: explicit caller-supplied (hard error) vs inherited (warn). Defaults to `"inherited"`. */
+    source?: ModelSource;
+    /** Called for warn-severity violations instead of `console.warn`. */
+    onWarn?: (violation: ModelScopeViolation) => void;
+}
+/**
+ * Resolve the `--model` override passed to a spawned subagent.
+ *
+ * When no model is requested (`undefined`, `false`, empty, or the `"inherit"`
+ * sentinel), the child must inherit the parent session's *in-memory* model
+ * (`provider/id`) instead of being left to resolve its own model. Without an
+ * explicit `provider/id`, the child falls back to the global
+ * `~/.pi/agent/settings.json` default, which is shared across every open PI
+ * session — so a different session that last changed its model in the TUI would
+ * silently contaminate this session's subagents (see issue #266). Passing an
+ * explicit `provider/id` keeps each session's children isolated to that
+ * session's model.
+ *
+ * An explicitly requested model string is resolved via {@link resolveModelCandidate}.
+ * When `options.scope.enforce` is on, an out-of-scope resolved model throws for
+ * an explicit (`source: "explicit"`) request and warns for an inherited one,
+ * unless strict scope enforcement makes inherited violations hard errors.
+ */
+export declare function resolveSubagentModelOverride(requestedModel: string | boolean | undefined, parentModel: ParentModel | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string, options?: ResolveSubagentModelOverrideOptions): string | undefined;
+export declare function resolveEffectiveSubagentModel(explicitModel: string | boolean | undefined, agentModel: string | boolean | undefined, parentModel: ParentModel | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string, options?: ResolveSubagentModelOverrideOptions): string | undefined;
+export type ModelOrigin = ModelSource | "configured";
+export interface ResolveModelSelectionOptions {
+    scope?: ModelScopeCheckRule | ModelScopeCheckRule[];
+    onWarn?: (violation: ModelScopeViolation) => void;
+    /** The primary model came from the running parent session, not configuration. */
+    primaryModelFromParent?: boolean;
+    /** How the model was selected. */
+    origin?: ModelOrigin;
+}
+export declare function resolveModelOrigin(input: {
+    explicitModel?: string | boolean;
+    agentModel?: string | boolean;
+    parentModel?: ParentModel;
+    fromParent?: boolean;
+    storedOrigin?: ModelOrigin;
+}): ModelOrigin;
+export declare function inheritsParentModel(explicitModel: string | boolean | undefined, agentModel: string | boolean | undefined, parentModel: ParentModel | undefined): boolean;
+export declare function resolveModelSelection(model: string | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string, options?: ResolveModelSelectionOptions): ModelSelectionEvidence;
+export declare function isContextOverflow(error: string | undefined): boolean;
+//# sourceMappingURL=model-resolution.d.ts.map

package/src/runs/shared/model-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-resolution.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/model-resolution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,IAAI,mBAAmB,EAAE,KAAK,SAAS,IAAI,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACnI,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEzH,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,MAAM,WAAW,sBAAsB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,uHAAuH;AACvH,wBAAgB,oCAAoC,CACnD,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAC7C,MAAM,GAAG,SAAS,CAepB;AAED,0FAA0F;AAC1F,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACX;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAM5E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM7D;AAkFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAChC,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,kBAAkB,EAAE,EACrC,iBAAiB,CAAC,EAAE,MAAM,GACxB,MAAM,GAAG,SAAS,CAmBpB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,GACxB,MAAM,GAAG,SAAS,CAYpB;AA2CD,MAAM,WAAW,mCAAmC;IACnD,uEAAuE;IACvE,KAAK,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAAC;IACpD,2HAA2H;IAC3H,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAClD;AAgCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC3C,cAAc,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EAC5C,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CAyBpB;AAED,wBAAgB,6BAA6B,CAC5C,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EACxC,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CAiBpB;AAED,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;AAErD,MAAM,WAAW,4BAA4B;IAC5C,KAAK,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAAC;IACpD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAClD,iFAAiF;IACjF,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,kCAAkC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACzC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,WAAW,CAMd;AAED,wBAAgB,mBAAmB,CAClC,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EACxC,WAAW,EAAE,WAAW,GAAG,SAAS,GAClC,OAAO,CAIT;AAED,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,4BAA4B,GACpC,sBAAsB,CAiBxB;AAgBD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAIpE"}

package/src/runs/shared/model-resolution.js

@@ -0,0 +1,343 @@
+import { splitKnownThinkingSuffix as splitThinkingSuffix } from "../../shared/model-info.js";
+import { checkModelScope } from "./model-scope.js";
+export { splitThinkingSuffix };
+/** Aliases apply only to the resolved launch candidate (without its thinking suffix) and the exact raw response ID. */
+export function formatSubagentModelVerificationError(expectedModel, observedModel, availableModels, modelResponseAliases) {
+    if (!availableModels || availableModels.length === 0)
+        return undefined;
+    const expectedBase = splitThinkingSuffix(expectedModel).baseModel;
+    if (modelResponseAliases && Object.hasOwn(modelResponseAliases, expectedBase)
+        && modelResponseAliases[expectedBase]?.includes(observedModel))
+        return undefined;
+    const observedBase = splitThinkingSuffix(observedModel).baseModel;
+    if (expectedBase === observedBase)
+        return undefined;
+    const expectedEntry = availableModels.find((entry) => entry.fullId === expectedBase);
+    if (expectedEntry) {
+        if (expectedEntry.id === observedBase)
+            return undefined;
+        const expectedIdLeaf = expectedEntry.id.slice(expectedEntry.id.lastIndexOf("/") + 1);
+        const expectedFullIdLeaf = expectedEntry.fullId.slice(expectedEntry.fullId.lastIndexOf("/") + 1);
+        if (expectedIdLeaf === observedBase || expectedFullIdLeaf === observedBase)
+            return undefined;
+    }
+    return `model_verification_failed: native Pi child reported a different model than the launch candidate. Expected '${expectedModel}' but observed '${observedModel}'. If you have independently verified this response ID identifies the requested model, declare the exact mapping in modelResponseAliases in ~/.pi/agent/extensions/subagent/config.json (see docs/configuration.md#modelresponsealiases). Use the resolved provider/model ID without its thinking suffix as the key. This leaves the outgoing request unchanged. Configuration changes affect new independent native runs; resumed native runs retain their launch-time declaration. External CLI adapters do not use this setting.`;
+}
+/** Sentinel model value requesting that a subagent inherit the parent session's model. */
+export const INHERIT_MODEL = "inherit";
+export function normalizeParentModel(model) {
+    if (!model || typeof model !== "object")
+        return undefined;
+    const candidate = model;
+    if (typeof candidate.provider !== "string" || typeof candidate.id !== "string")
+        return undefined;
+    if (!candidate.provider || !candidate.id)
+        return undefined;
+    return { provider: candidate.provider, id: candidate.id };
+}
+/**
+ * Normalize a model id or provider segment for fuzzy comparison: case-fold,
+ * treat dots/underscores as dashes (so `4.5` matches `4-5`), and collapse
+ * repeated separators.
+ */
+export function normalizeModelSegment(segment) {
+    return segment
+        .toLowerCase()
+        .replace(/[._]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-|-$/g, "");
+}
+function isPlausibleDateStamp(year, month, day) {
+    const yyyy = Number(year);
+    const mm = Number(month);
+    const dd = Number(day);
+    return yyyy >= 1900 && yyyy <= 2099 && mm >= 1 && mm <= 12 && dd >= 1 && dd <= 31;
+}
+/** Drop a trailing date stamp (`-20251001` or `-2025-10-01`) so dated and undated ids match. */
+function stripTrailingDateStamp(segment) {
+    const dashed = /^(.*)-(\d{4})-(\d{2})-(\d{2})$/.exec(segment);
+    if (dashed && isPlausibleDateStamp(dashed[2], dashed[3], dashed[4]))
+        return dashed[1];
+    const compact = /^(.*)-(\d{4})(\d{2})(\d{2})$/.exec(segment);
+    if (compact && isPlausibleDateStamp(compact[2], compact[3], compact[4]))
+        return compact[1];
+    return segment;
+}
+function isRegisteredProvider(provider, availableModels) {
+    const normalized = normalizeModelSegment(provider);
+    return availableModels.some((entry) => normalizeModelSegment(entry.provider) === normalized);
+}
+/**
+ * Split `provider/id` only when the first path segment is a registered provider.
+ * Hugging Face-style `owner/name` ids therefore stay intact unless `owner` is
+ * itself a provider in the active registry. `:` and `.` keep the same rule.
+ */
+function splitQualifiedModelQuery(baseModel, availableModels) {
+    const slashIdx = baseModel.indexOf("/");
+    if (slashIdx !== -1) {
+        const providerPart = baseModel.slice(0, slashIdx);
+        if (isRegisteredProvider(providerPart, availableModels)) {
+            return { queryProvider: normalizeModelSegment(providerPart), queryIdRaw: baseModel.slice(slashIdx + 1) };
+        }
+        return { queryIdRaw: baseModel };
+    }
+    const providerSeparators = [":", "."];
+    for (const separator of providerSeparators) {
+        const separatorIdx = baseModel.indexOf(separator);
+        if (separatorIdx <= 0)
+            continue;
+        const providerPart = baseModel.slice(0, separatorIdx);
+        if (!isRegisteredProvider(providerPart, availableModels))
+            continue;
+        return { queryProvider: normalizeModelSegment(providerPart), queryIdRaw: baseModel.slice(separatorIdx + 1) };
+    }
+    return { queryIdRaw: baseModel };
+}
+function resolveExactIdMatches(baseModel, availableModels, preferredProvider) {
+    const exactMatches = availableModels.filter((entry) => entry.id === baseModel);
+    if (preferredProvider) {
+        const preferredMatch = exactMatches.find((entry) => entry.provider === preferredProvider);
+        if (preferredMatch)
+            return preferredMatch.fullId;
+    }
+    if (exactMatches.length === 1)
+        return exactMatches[0].fullId;
+    return undefined;
+}
+function resolveBaseModelCandidate(baseModel, availableModels, preferredProvider) {
+    const exact = availableModels.find((entry) => entry.fullId === baseModel);
+    if (exact)
+        return exact.fullId;
+    const { queryProvider } = splitQualifiedModelQuery(baseModel, availableModels);
+    if (queryProvider === undefined) {
+        const exactId = resolveExactIdMatches(baseModel, availableModels, preferredProvider);
+        if (exactId)
+            return exactId;
+    }
+    return fuzzyResolveModel(baseModel, availableModels, preferredProvider);
+}
+/**
+ * Fuzzy-resolve a base model id (thinking suffix already stripped) against the
+ * registry, tolerating separator, case, and optional date-stamp differences so
+ * users do not have to spell provider/model exactly. A slash is a provider
+ * prefix only when that prefix is a registered provider; otherwise the whole
+ * string is the model id (Hugging Face `owner/name`). A qualified provider
+ * query only matches within the named provider — this never silently switches
+ * providers for security/cost-sensitive configs. Returns the matched `fullId`,
+ * or `undefined` when there is no match or the match is ambiguous across
+ * providers (and no `preferredProvider` disambiguates).
+ */
+export function fuzzyResolveModel(baseModel, availableModels, preferredProvider) {
+    const { queryProvider, queryIdRaw } = splitQualifiedModelQuery(baseModel, availableModels);
+    const queryId = normalizeModelSegment(queryIdRaw);
+    const queryIdNoDate = stripTrailingDateStamp(queryId);
+    const candidates = availableModels.filter((entry) => {
+        const entryId = normalizeModelSegment(entry.id);
+        if (entryId !== queryId && stripTrailingDateStamp(entryId) !== queryIdNoDate)
+            return false;
+        if (queryProvider !== undefined && normalizeModelSegment(entry.provider) !== queryProvider)
+            return false;
+        return true;
+    });
+    if (candidates.length === 0)
+        return undefined;
+    if (preferredProvider) {
+        const preferredProviderNorm = normalizeModelSegment(preferredProvider);
+        const preferred = candidates.find((entry) => normalizeModelSegment(entry.provider) === preferredProviderNorm);
+        if (preferred)
+            return preferred.fullId;
+    }
+    if (candidates.length === 1)
+        return candidates[0].fullId;
+    return undefined;
+}
+/**
+ * Resolve a possibly-loose model id to a canonical `provider/id` (plus any
+ * thinking suffix). Exact registry matches win; fuzzy normalization
+ * (separator/case/date-stamp via {@link fuzzyResolveModel}) is a fallback so
+ * spelling differences still resolve. Never switches providers for a qualified
+ * query.
+ */
+export function resolveModelCandidate(model, availableModels, preferredProvider) {
+    if (!model)
+        return undefined;
+    if (!availableModels || availableModels.length === 0)
+        return model;
+    const resolvedWhole = resolveBaseModelCandidate(model, availableModels, preferredProvider);
+    if (resolvedWhole)
+        return resolvedWhole;
+    const { baseModel, thinkingSuffix } = splitThinkingSuffix(model);
+    if (!thinkingSuffix)
+        return model;
+    const resolvedBase = resolveBaseModelCandidate(baseModel, availableModels, preferredProvider);
+    if (resolvedBase)
+        return `${resolvedBase}${thinkingSuffix}`;
+    return model;
+}
+function resolveSubagentModelCandidate(model, availableModels, preferredProvider) {
+    if (!availableModels || availableModels.length === 0)
+        return model;
+    const resolvedWhole = resolveBaseModelCandidate(model, availableModels, preferredProvider);
+    if (resolvedWhole)
+        return resolvedWhole;
+    const { baseModel, thinkingSuffix } = splitThinkingSuffix(model);
+    const resolvedBase = thinkingSuffix ? resolveBaseModelCandidate(baseModel, availableModels, preferredProvider) : undefined;
+    return resolvedBase ? `${resolvedBase}${thinkingSuffix}` : undefined;
+}
+function suggestAlternateProviderModel(model, availableModels) {
+    if (!availableModels || availableModels.length === 0)
+        return undefined;
+    const { baseModel, thinkingSuffix } = splitThinkingSuffix(model);
+    const { queryProvider, queryIdRaw } = splitQualifiedModelQuery(baseModel, availableModels);
+    if (queryProvider === undefined)
+        return undefined;
+    const suggestion = resolveBaseModelCandidate(queryIdRaw, availableModels);
+    if (!suggestion)
+        return undefined;
+    const matched = availableModels.find((entry) => entry.fullId === suggestion);
+    if (!matched || normalizeModelSegment(matched.provider) === queryProvider)
+        return undefined;
+    return `${suggestion}${thinkingSuffix}`;
+}
+function resolveRequiredSubagentModelCandidate(model, availableModels, preferredProvider) {
+    const resolved = resolveSubagentModelCandidate(model, availableModels, preferredProvider);
+    if (resolved)
+        return resolved;
+    const suggestion = suggestAlternateProviderModel(model, availableModels);
+    throw new Error(`Unknown subagent model '${model}' in the active Pi model registry.${suggestion ? ` Did you mean '${suggestion}'?` : ""}`);
+}
+function defaultScopeWarn(violation) {
+    console.warn(`[pi-subagents] ${violation.message}`);
+}
+function configuredScopes(scope) {
+    return scope ? (Array.isArray(scope) ? scope : [scope]) : [];
+}
+function throwForUnresolvedEnforcedInheritScope(scope, includeMixed = false) {
+    const unresolvedInheritScope = configuredScopes(scope)
+        .find((entry) => entry.enforce === true && (includeMixed ? entry.allow?.includes(INHERIT_MODEL) : entry.allow?.length === 1 && entry.allow[0] === INHERIT_MODEL));
+    if (!unresolvedInheritScope)
+        return;
+    const origin = unresolvedInheritScope.origin ?? "modelScope";
+    throw new Error(`Cannot enforce subagent model scope (${origin}): 'inherit' requires a current parent session model.`);
+}
+function enforceModelScopes(model, scope, source, onWarn) {
+    const violations = configuredScopes(scope)
+        .map((entry) => checkModelScope(model, entry, source))
+        .filter((violation) => violation !== undefined);
+    const error = violations.find((violation) => violation.severity === "error");
+    if (error)
+        throw new Error(error.message);
+    for (const violation of violations)
+        (onWarn ?? defaultScopeWarn)(violation);
+}
+/**
+ * Resolve the `--model` override passed to a spawned subagent.
+ *
+ * When no model is requested (`undefined`, `false`, empty, or the `"inherit"`
+ * sentinel), the child must inherit the parent session's *in-memory* model
+ * (`provider/id`) instead of being left to resolve its own model. Without an
+ * explicit `provider/id`, the child falls back to the global
+ * `~/.pi/agent/settings.json` default, which is shared across every open PI
+ * session — so a different session that last changed its model in the TUI would
+ * silently contaminate this session's subagents (see issue #266). Passing an
+ * explicit `provider/id` keeps each session's children isolated to that
+ * session's model.
+ *
+ * An explicitly requested model string is resolved via {@link resolveModelCandidate}.
+ * When `options.scope.enforce` is on, an out-of-scope resolved model throws for
+ * an explicit (`source: "explicit"`) request and warns for an inherited one,
+ * unless strict scope enforcement makes inherited violations hard errors.
+ */
+export function resolveSubagentModelOverride(requestedModel, parentModel, availableModels, preferredProvider, options) {
+    const trimmed = typeof requestedModel === "string" ? requestedModel.trim() : "";
+    const explicit = trimmed && trimmed !== INHERIT_MODEL ? trimmed : undefined;
+    if (!parentModel)
+        throwForUnresolvedEnforcedInheritScope(options?.scope, explicit === undefined || options?.source === "inherited");
+    let resolved;
+    let resolvedFromRegistry = explicit === undefined;
+    if (explicit === undefined) {
+        resolved = parentModel ? `${parentModel.provider}/${parentModel.id}` : undefined;
+    }
+    else {
+        const candidate = resolveSubagentModelCandidate(explicit, availableModels, preferredProvider);
+        if (options?.source === "explicit") {
+            resolved = candidate ?? resolveRequiredSubagentModelCandidate(explicit, availableModels, preferredProvider);
+            resolvedFromRegistry = true;
+        }
+        else if (candidate) {
+            resolved = candidate;
+            resolvedFromRegistry = true;
+        }
+        else {
+            resolved = explicit;
+        }
+    }
+    if (resolved && options?.scope && resolvedFromRegistry) {
+        const source = explicit === undefined ? "inherited" : (options.source ?? "inherited");
+        enforceModelScopes(resolved, options.scope, source, options.onWarn);
+    }
+    return resolved;
+}
+export function resolveEffectiveSubagentModel(explicitModel, agentModel, parentModel, availableModels, preferredProvider, options) {
+    const source = options?.source ?? (explicitModel !== undefined ? "explicit" : "inherited");
+    const resolved = resolveSubagentModelOverride(explicitModel ?? agentModel, parentModel, availableModels, preferredProvider, { ...options, source });
+    if (resolved || explicitModel === undefined)
+        return resolved;
+    return resolveSubagentModelOverride(agentModel, parentModel, availableModels, preferredProvider, { ...options, source: options?.source ?? "inherited" });
+}
+export function resolveModelOrigin(input) {
+    if (input.storedOrigin)
+        return input.storedOrigin;
+    if (input.fromParent)
+        return "inherited";
+    if (inheritsParentModel(input.explicitModel, input.agentModel, input.parentModel))
+        return "inherited";
+    const trimmed = typeof input.explicitModel === "string" ? input.explicitModel.trim() : "";
+    return trimmed && trimmed !== INHERIT_MODEL ? "explicit" : "configured";
+}
+export function inheritsParentModel(explicitModel, agentModel, parentModel) {
+    const requestedModel = explicitModel ?? agentModel;
+    const trimmed = typeof requestedModel === "string" ? requestedModel.trim() : "";
+    return Boolean(parentModel && (!trimmed || trimmed === INHERIT_MODEL));
+}
+export function resolveModelSelection(model, availableModels, preferredProvider, options) {
+    if (!model)
+        throwForUnresolvedEnforcedInheritScope(options?.scope, true);
+    const origin = options?.origin ?? (options?.primaryModelFromParent ? "inherited" : "configured");
+    const requestedModel = origin === "inherited" ? undefined : model;
+    const scopes = configuredScopes(options?.scope);
+    if (origin === "explicit" && model) {
+        const normalized = resolveRequiredSubagentModelCandidate(model.trim(), availableModels, preferredProvider);
+        enforceModelScopes(normalized, scopes, "explicit", options?.onWarn);
+        model = normalized;
+    }
+    const resolved = model && (origin === "inherited" || origin === "explicit" || options?.primaryModelFromParent)
+        ? model.trim()
+        : model ? resolveRequiredSubagentModelCandidate(model.trim(), availableModels, preferredProvider) : undefined;
+    if (resolved && scopes.some((scope) => scope.enforce === true && scope.strict === true)) {
+        enforceModelScopes(resolved, scopes, "inherited", options?.onWarn);
+    }
+    return { ...(resolved ? { model: resolved } : {}), ...(requestedModel ? { requestedModel } : {}) };
+}
+/** Context-overflow signals used to surface a clear input-too-large error. */
+const CONTEXT_OVERFLOW_PATTERNS = [
+    /context(?: length| window| limit)? (?:exceed|overflow|too long)/i,
+    /maximum context length/i,
+    /too many tokens/i,
+    /token limit/i,
+    /context_length_exceeded/i,
+    /length_required/i,
+    /maximum.*tokens/i,
+    /prompt.*too long/i,
+    /input.*too long/i,
+    /exceeded.*context/i,
+    /context.*overflow/i,
+];
+export function isContextOverflow(error) {
+    if (!error)
+        return false;
+    if (/^[\w.:@/-]+ failed (?:(?:\(exit \d+\):)|(?:with exit code \d+))(?:\s|$)/i.test(error.trim()))
+        return false;
+    return CONTEXT_OVERFLOW_PATTERNS.some((pattern) => pattern.test(error));
+}
+//# sourceMappingURL=model-resolution.js.map

package/src/runs/shared/model-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-resolution.js","sourceRoot":"","sources":["../../../../src/runs/shared/model-resolution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,IAAI,mBAAmB,EAAwC,MAAM,4BAA4B,CAAC;AACnI,OAAO,EAAE,eAAe,EAAwE,MAAM,kBAAkB,CAAC;AASzH,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,uHAAuH;AACvH,MAAM,UAAU,oCAAoC,CACnD,aAAqB,EACrB,aAAqB,EACrB,eAAiD,EACjD,oBAA+C;IAE/C,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,oBAAoB,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,YAAY,CAAC;WACzE,oBAAoB,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,aAAa,EAAE,CAAC;QACnB,IAAI,aAAa,CAAC,EAAE,KAAK,YAAY;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,cAAc,GAAG,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACrF,MAAM,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjG,IAAI,cAAc,KAAK,YAAY,IAAI,kBAAkB,KAAK,YAAY;YAAE,OAAO,SAAS,CAAC;IAC9F,CAAC;IACD,OAAO,8GAA8G,aAAa,mBAAmB,aAAa,qgBAAqgB,CAAC;AACzqB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAQvC,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAA6C,CAAC;IAChE,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,OAAO,OAAO;SACZ,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;AACnF,CAAC;AAED,gGAAgG;AAChG,SAAS,sBAAsB,CAAC,OAAe;IAC9C,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;IAC1F,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IAC/F,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,eAAqC;IACpF,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAChC,SAAiB,EACjB,eAAqC;IAErC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,oBAAoB,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,aAAa,EAAE,qBAAqB,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1G,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,YAAY,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,eAAe,CAAC;YAAE,SAAS;QACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,qBAAqB,CAC7B,SAAiB,EACjB,eAAqC,EACrC,iBAA0B;IAE1B,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAC/E,IAAI,iBAAiB,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC;QAC1F,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC,MAAM,CAAC;IAClD,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC9D,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CACjC,SAAiB,EACjB,eAAqC,EACrC,iBAA0B;IAE1B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC1E,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAE/B,MAAM,EAAE,aAAa,EAAE,GAAG,wBAAwB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC/E,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACrF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC7B,CAAC;IAED,OAAO,iBAAiB,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAChC,SAAiB,EACjB,eAAqC,EACrC,iBAA0B;IAE1B,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,wBAAwB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAC3F,IAAI,aAAa,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QACzG,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,iBAAiB,EAAE,CAAC;QACvB,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,CAAC;QAC9G,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC1D,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACpC,KAAyB,EACzB,eAAiD,EACjD,iBAA0B;IAE1B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnE,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,YAAY,GAAG,yBAAyB,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC9F,IAAI,YAAY;QAAE,OAAO,GAAG,YAAY,GAAG,cAAc,EAAE,CAAC;IAC5D,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CACrC,KAAa,EACb,eAAiD,EACjD,iBAA0B;IAE1B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3H,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,6BAA6B,CACrC,KAAa,EACb,eAAiD;IAEjD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,wBAAwB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3F,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAC7E,IAAI,CAAC,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAC5F,OAAO,GAAG,UAAU,GAAG,cAAc,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,qCAAqC,CAC7C,KAAa,EACb,eAAiD,EACjD,iBAA0B;IAE1B,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC1F,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,UAAU,GAAG,6BAA6B,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,IAAI,KAAK,CACd,2BAA2B,KAAK,qCAAqC,UAAU,CAAC,CAAC,CAAC,kBAAkB,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACzH,CAAC;AACH,CAAC;AAWD,SAAS,gBAAgB,CAAC,SAA8B;IACvD,OAAO,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA8D;IACvF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,sCAAsC,CAAC,KAA8D,EAAE,YAAY,GAAG,KAAK;IACnI,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,KAAK,CAAC;SACpD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC;IACnK,IAAI,CAAC,sBAAsB;QAAE,OAAO;IACpC,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,IAAI,YAAY,CAAC;IAC7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,uDAAuD,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,kBAAkB,CAC1B,KAAa,EACb,KAA8D,EAC9D,MAAmB,EACnB,MAA8D;IAE9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC;SACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,SAAS,EAAoC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC7E,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,UAAU;QAAE,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAC3C,cAA4C,EAC5C,WAAoC,EACpC,eAAiD,EACjD,iBAA0B,EAC1B,OAA6C;IAE7C,MAAM,OAAO,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,WAAW;QAAE,sCAAsC,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,SAAS,IAAI,OAAO,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC;IACpI,IAAI,QAA4B,CAAC;IACjC,IAAI,oBAAoB,GAAG,QAAQ,KAAK,SAAS,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;SAAM,CAAC;QACP,MAAM,SAAS,GAAG,6BAA6B,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC9F,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,QAAQ,GAAG,SAAS,IAAI,qCAAqC,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAC5G,oBAAoB,GAAG,IAAI,CAAC;QAC7B,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACtB,QAAQ,GAAG,SAAS,CAAC;YACrB,oBAAoB,GAAG,IAAI,CAAC;QAC7B,CAAC;aAAM,CAAC;YACP,QAAQ,GAAG,QAAQ,CAAC;QACrB,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,EAAE,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACxD,MAAM,MAAM,GAAgB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC;QACnG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC5C,aAA2C,EAC3C,UAAwC,EACxC,WAAoC,EACpC,eAAiD,EACjD,iBAA0B,EAC1B,OAA6C;IAE7C,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,4BAA4B,CAC5C,aAAa,IAAI,UAAU,EAC3B,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,QAAQ,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,4BAA4B,CAClC,UAAU,EACV,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,CACtD,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,kBAAkB,CAAC,KAMlC;IACA,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAClD,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,WAAW,CAAC;IACzC,IAAI,mBAAmB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IACtG,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,OAAO,OAAO,IAAI,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,aAA2C,EAC3C,UAAwC,EACxC,WAAoC;IAEpC,MAAM,cAAc,GAAG,aAAa,IAAI,UAAU,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,KAAyB,EACzB,eAAiD,EACjD,iBAA0B,EAC1B,OAAsC;IAEtC,IAAI,CAAC,KAAK;QAAE,sCAAsC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACjG,MAAM,cAAc,GAAG,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,UAAU,IAAI,KAAK,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,qCAAqC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC3G,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,KAAK,GAAG,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,UAAU,IAAI,OAAO,EAAE,sBAAsB,CAAC;QAC7G,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;QACzF,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpG,CAAC;AACD,8EAA8E;AAC9E,MAAM,yBAAyB,GAAG;IACjC,kEAAkE;IAClE,yBAAyB;IACzB,kBAAkB;IAClB,cAAc;IACd,0BAA0B;IAC1B,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;CACpB,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,0EAA0E,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChH,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC"}

package/src/runs/shared/model-scope.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Optional model-scope enforcement for subagent model resolution.
+ *
+ * When `subagents.modelScope.enforce` is enabled in settings, a resolved model
+ * that does not match any `allow` pattern is rejected. The severity depends on
+ * where the model came from: an explicit caller-supplied model (`--model`,
+ * tool-call `model`, or a TUI clarify pick) is a hard error, while a model
+ * inherited from agent frontmatter / `defaultModel` / the parent session only
+ * emits a warning so existing configurations keep working. Optional strict
+ * enforcement makes inherited models hard errors too.
+ *
+ * The decision logic ({@link checkModelScope}) is a pure function of its
+ * inputs so it can be unit-tested without touching the filesystem or config.
+ */
+export interface ModelScopeRule {
+    enforce?: boolean;
+    /** Reject inherited models outside the allowlist instead of warning. */
+    strict?: boolean;
+    /** Glob-style allow patterns (only `*` is special), matched against `provider/id`. */
+    allow?: string[];
+}
+export interface ModelScopeConfig extends ModelScopeRule {
+    /** Additional restrictions keyed by canonical agent name. */
+    agents?: Record<string, ModelScopeRule>;
+}
+export interface ModelScopeCheckRule extends ModelScopeRule {
+    origin?: string;
+}
+export interface ResolvedModelScope extends ModelScopeCheckRule {
+    origin: string;
+}
+/** Where a resolved model originated, deciding enforcement severity. */
+export type ModelSource = "explicit" | "inherited";
+export interface ModelScopeViolation {
+    /** Resolved model id (without thinking suffix) that fell outside the scope. */
+    model: string;
+    severity: "warn" | "error";
+    message: string;
+    allowedPatterns: string[];
+    origin: string;
+}
+/**
+ * Test whether a resolved model matches a single allow pattern. Both sides are
+ * compared case-insensitively against the full `provider/id` (thinking suffix
+ * stripped from the model).
+ */
+export declare function matchesScopePattern(model: string, pattern: string): boolean;
+/**
+ * Pure scope decision. Returns a {@link ModelScopeViolation} when the model is
+ * out of scope and enforcement is on, otherwise `undefined`. Enforcement with
+ * no `allow` list is a no-op (the settings parser rejects that combination, but
+ * this stays defensive for callers that build configs programmatically).
+ */
+export declare function checkModelScope(model: string | undefined, scope: ModelScopeCheckRule | undefined, source: ModelSource): ModelScopeViolation | undefined;
+/** Resolve the global and matching agent policies into independent launch-time checks. */
+export declare function resolveModelScopesForAgent(config: ModelScopeConfig | undefined, agentName: string, parentModel: {
+    provider: string;
+    id: string;
+} | undefined): ResolvedModelScope[];
+/**
+ * Validate and normalize a raw `subagents.modelScope` value from settings.
+ * Throws a descriptive error for malformed configs (matching the surrounding
+ * settings-parsing style). Returns `undefined` when the field is absent.
+ */
+export declare function parseModelScopeConfig(value: unknown, meta: {
+    filePath: string;
+}): ModelScopeConfig | undefined;
+//# sourceMappingURL=model-scope.d.ts.map

package/src/runs/shared/model-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-scope.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/model-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAmB,SAAQ,mBAAmB;IAC9D,MAAM,EAAE,MAAM,CAAC;CACf;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IACnC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CACf;AAYD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,MAAM,EAAE,WAAW,GACjB,mBAAmB,GAAG,SAAS,CAkBjC;AA6CD,0FAA0F;AAC1F,wBAAgB,0BAA0B,CACzC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GACvD,kBAAkB,EAAE,CAqBtB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxB,gBAAgB,GAAG,SAAS,CA0B9B"}