pi-subagents 0.69.0 → 0.70.0

package/src/runs/shared/parallel-utils.ts

@@ -1,279 +0,0 @@
-export type ResolvedRunnerConfig = import("../../shared/types.ts").AgentRunnerConfig;
-
-export interface RunnerSubagentStep {
-	/** Session id of the direct parent session for permission-system ask forwarding. */
-	parentSessionId?: string;
-	/** Resolved opt-in rules for native Pi child tool calls. */
-	permissionRules?: import("./permissions.ts").PermissionRules;
-	agent: string;
-	/** Human-readable display name for the child session, derived internally at launch. */
-	sessionName?: string;
-	task: string;
-	runner?: ResolvedRunnerConfig;
-	/** Herdr saved machine this external-cli step runs on; `cwd` is then the directory on that machine. */
-	machine?: import("../../shared/types.ts").HerdrMachineReference;
-	remoteReads?: string[] | false;
-	machineEnv?: Record<string, string>;
-	externalJobFollowUp?: {
-		sourceRunId: string;
-		sourceStepIndex: number;
-		parentProviderJobId: string;
-		requestId: string;
-		requestDigest: string;
-	};
-	/** Resolved launch context for this child. */
-	context?: "fresh" | "fork";
-	importAsyncRoot?: {
-		runId: string;
-		asyncDir: string;
-		resultPath: string;
-		index: number;
-	};
-	phase?: string;
-	label?: string;
-	outputName?: string;
-	structured?: boolean;
-	cwd?: string;
-	/** Original cwd input retained for launch diagnostics. */
-	requestedCwd?: string;
-	model?: string;
-	contextLimit?: number;
-	fast?: boolean;
-	thinking?: string;
-	thinkingCeiling?: import("../../shared/model-info.ts").ThinkingLevel;
-	requestedModel?: string;
-	/** The primary model is inherited from the parent session and should not be verified against the child-reported active registry model. */
-	skipPrimaryModelVerification?: boolean;
-	modelVerificationRegistry?: Array<{ provider: string; id: string; fullId: string; contextWindow?: number }>;
-	modelResponseAliases?: Record<string, string[]>;
-	tools?: string[];
-	excludeTools?: string[];
-	allowNestedSubagents?: boolean;
-	extensions?: string[];
-	subagentOnlyExtensions?: string[];
-	/** Private immutable host policy snapshot serialized to the native runner. */
-	requiredExtensions?: import("../../shared/required-child-extensions.ts").RequiredChildExtensionSnapshot;
-	mcpDirectTools?: string[];
-	mutationTools?: string[];
-	completionGuard?: boolean;
-	systemPrompt?: string | null;
-	systemPromptMode?: "append" | "replace";
-	inheritProjectContext: boolean;
-	inheritGlobalContext: boolean;
-	inheritSkills: boolean;
-	skills?: string[];
-	outputPath?: string;
-	outputClaimPath?: string;
-	/** Defer the authoritative output instruction until a dynamic fanout item is materialized. */
-	namespaceOutputPath?: boolean;
-	outputMode?: "inline" | "file-only";
-	sessionFile?: string;
-	maxSubagentDepth?: number;
-	timeoutMs?: number;
-	/** Resolved configured hard per-tool-call timeout (ms); fast tools still have a default when undefined. */
-	toolTimeoutMs?: number;
-	waitToolEnabled?: boolean;
-	waitToolDefaultTimeoutMs?: number;
-	structuredOutput?: import("./structured-output.ts").StructuredOutputRuntime;
-	structuredOutputSchema?: import("../../shared/types.ts").JsonSchemaObject;
-	agentContract?: import("../../shared/types.ts").AgentContract;
-	definitionDigest?: string;
-	launchBindingTask?: string;
-	launchContractDigest?: string;
-	extensionBindings?: import("./extension-bindings.ts").ExtensionBindings;
-	launchResolvedExtensions?: import("../../shared/types.ts").LaunchResolvedChildExtensions;
-	runtimeAcknowledgedExtensions?: import("../../shared/types.ts").RuntimeAcknowledgedChildExtensions;
-	effectiveAcceptance?: import("../../shared/types.ts").ResolvedAcceptanceConfig;
-	acceptanceInput?: import("../../shared/types.ts").AcceptanceInput;
-	acceptanceRole?: import("../../shared/types.ts").AcceptanceRole;
-	gateOn?: import("../../shared/types.ts").ChainGateLayer;
-	toolBudget?: import("../../shared/types.ts").ResolvedToolBudget;
-	capabilityCeiling?: import("./capability-ceiling.ts").ResolvedSubagentCapabilityCeiling;
-	capabilityAudit?: import("./capability-ceiling.ts").SubagentCapabilityAudit;
-	/** Private stable logical-child path for inherited run fan-out accounting. */
-	runFanoutPath?: string;
-	/** Run this single child in one managed worktree. */
-	worktree?: boolean;
-	/** Bounded launch-declared lane metadata; display/triage only. */
-	lane?: import("../../shared/types.ts").WorkflowLaneMetadata;
-}
-
-export interface ParallelStepGroup {
-	parallel: RunnerSubagentStep[];
-	concurrency?: number;
-	failFast?: boolean;
-	worktree?: boolean;
-}
-
-export interface DynamicRunnerGroup {
-	expand: import("../../shared/settings.ts").DynamicExpandSpec;
-	parallel: RunnerSubagentStep;
-	collect: import("../../shared/settings.ts").DynamicCollectSpec;
-	concurrency?: number;
-	failFast?: boolean;
-	phase?: string;
-	label?: string;
-	sessionFiles?: (string | undefined)[];
-	thinkingOverrides?: (string | undefined)[];
-	effectiveAcceptance?: import("../../shared/types.ts").ResolvedAcceptanceConfig;
-	acceptanceInput?: import("../../shared/types.ts").AcceptanceInput;
-	acceptanceRole?: import("../../shared/types.ts").AcceptanceRole;
-	agentContract?: import("../../shared/types.ts").AgentContract;
-	gateOn?: import("../../shared/types.ts").ChainGateLayer;
-	capabilityCeiling?: import("./capability-ceiling.ts").ResolvedSubagentCapabilityCeiling;
-	capabilityAudit?: import("./capability-ceiling.ts").SubagentCapabilityAudit;
-	thinkingCeiling?: import("../../shared/model-info.ts").ThinkingLevel;
-}
-
-export type RunnerStep = RunnerSubagentStep | ParallelStepGroup | DynamicRunnerGroup;
-
-export function isParallelGroup(step: RunnerStep): step is ParallelStepGroup {
-	return "parallel" in step && Array.isArray(step.parallel);
-}
-
-export function isDynamicRunnerGroup(step: RunnerStep): step is DynamicRunnerGroup {
-	return "expand" in step && "collect" in step && "parallel" in step && !Array.isArray((step as { parallel?: unknown }).parallel);
-}
-
-export function flattenSteps(steps: RunnerStep[]): RunnerSubagentStep[] {
-	const flat: RunnerSubagentStep[] = [];
-	for (const step of steps) {
-		if (isParallelGroup(step)) {
-			for (const task of step.parallel) flat.push(task);
-		} else if (isDynamicRunnerGroup(step)) {
-			continue;
-		} else {
-			flat.push(step);
-		}
-	}
-	return flat;
-}
-
-export const DEFAULT_GLOBAL_CONCURRENCY_LIMIT = 20;
-
-/**
- * A promise-based semaphore for limiting concurrent access across multiple
- * mapConcurrent calls within a single run. Enforces a global cap on the total
- * number of subagent tasks executing simultaneously, regardless of each step's
- * per-step concurrency limit.
- */
-export class Semaphore {
-	private available: number;
-	private readonly queue: Array<() => void> = [];
-
-	constructor(limit: number) {
-		this.available = Math.max(1, Math.floor(limit) || 1);
-	}
-
-	acquire(): Promise<void> {
-		if (this.available > 0) {
-			this.available--;
-			return Promise.resolve();
-		}
-		return new Promise<void>((resolve) => {
-			this.queue.push(resolve);
-		});
-	}
-
-	release(): void {
-		const next = this.queue.shift();
-		if (next) {
-			next();
-		} else {
-			this.available++;
-		}
-	}
-}
-
-export async function mapConcurrent<T, R>(
-	items: T[],
-	limit: number,
-	fn: (item: T, i: number) => Promise<R>,
-	globalSemaphore?: Semaphore,
-	/** Invoked after every worker has stopped, including workers outliving an early rejection. */
-	onSchedulingSettled?: () => void,
-): Promise<R[]> {
-	const safeLimit = Math.max(1, Math.floor(limit) || 1);
-	const results: R[] = new Array(items.length);
-	let next = 0;
-	let liveWorkers = Math.min(safeLimit, items.length);
-	const notifySchedulingSettled = () => {
-		try {
-			onSchedulingSettled?.();
-		} catch {
-			// Scheduling lifecycle cleanup must not replace the worker result.
-		}
-	};
-
-	async function worker(_workerIndex: number): Promise<void> {
-		try {
-			while (next < items.length) {
-				const i = next++;
-				if (!(i in items)) throw new Error(`Missing parallel item at index ${i}`);
-				const item = items[i] as T;
-				if (globalSemaphore) {
-					await globalSemaphore.acquire();
-					try {
-						results[i] = await fn(item, i);
-					} finally {
-						globalSemaphore.release();
-					}
-				} else {
-					results[i] = await fn(item, i);
-				}
-			}
-		} finally {
-			liveWorkers--;
-			if (liveWorkers === 0) notifySchedulingSettled();
-		}
-	}
-
-	if (liveWorkers === 0) notifySchedulingSettled();
-	await Promise.all(
-		Array.from({ length: liveWorkers }, (_, wi) => worker(wi)),
-	);
-	return results;
-}
-
-export interface ParallelTaskResult {
-	agent: string;
-	taskIndex?: number;
-	output: string;
-	exitCode: number | null;
-	error?: string;
-	timedOut?: boolean;
-	model?: string;
-	outputTargetPath?: string;
-	outputTargetExists?: boolean;
-}
-
-export function aggregateParallelOutputs(
-	results: ParallelTaskResult[],
-	headerFormat: (index: number, agent: string) => string = (i, agent) =>
-		`=== Parallel Task ${i + 1} (${agent}) ===`,
-): string {
-	return results
-		.map((r, i) => {
-			const header = headerFormat(r.taskIndex ?? i, r.agent);
-			const hasOutput = Boolean(r.output?.trim());
-			const status =
-				r.timedOut
-					? `TIMED OUT${r.error ? `: ${r.error}` : ""}`
-					: r.exitCode === -1
-					? "SKIPPED"
-					: r.exitCode !== 0 && r.exitCode !== null
-						? `FAILED (exit code ${r.exitCode})${r.error ? `: ${r.error}` : ""}`
-						: r.error
-							? `WARNING: ${r.error}`
-							: !hasOutput && r.outputTargetPath && r.outputTargetExists === false
-								? `EMPTY OUTPUT (expected output file missing: ${r.outputTargetPath})`
-								: !hasOutput && !r.outputTargetPath
-									? "EMPTY OUTPUT (no textual response returned)"
-							: "";
-			const body = status ? (hasOutput ? `${status}\n${r.output}` : status) : r.output;
-			return `${header}\n${body}`;
-		})
-		.join("\n\n");
-}
-
-export const MAX_PARALLEL_CONCURRENCY = 4;

package/src/runs/shared/permissions.ts

@@ -1,86 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-export type PermissionDecision = "allow" | "ask" | "deny";
-export type PermissionRules = Record<string, PermissionDecision>;
-export interface PermissionConfig { rules?: PermissionRules }
-
-const INTERNAL_TOOLS = new Set(["contact_supervisor", "intercom", "bg_wait", "structured_output"]);
-const DECISIONS = new Set<PermissionDecision>(["allow", "ask", "deny"]);
-const MAX_POLICY_BYTES = 16 * 1024;
-const MAX_PREVIEW_BYTES = 2048;
-const SECRET_KEY = /(?:authorization|cookie|credential|password|secret|token|api[-_]?key)/i;
-const SECRET_VALUE = /\b(?:Bearer\s+\S+|(?:sk|ghp|github_pat|xox[baprs])[-_A-Za-z0-9]{8,})\b/gi;
-
-export function redactSecretValues(value: string): string {
-	return value.replace(SECRET_VALUE, "[redacted]");
-}
-
-export function validatePermissionRules(value: unknown, label: string): PermissionRules | undefined {
-	if (value === undefined) return undefined;
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object mapping tool names to allow, ask, or deny.`);
-	const result: PermissionRules = {};
-	for (const [tool, decision] of Object.entries(value)) {
-		if (!tool.trim()) throw new Error(`${label} contains an empty tool name.`);
-		if (tool === "bash") throw new Error(`${label}.bash is unsupported; pi-subagents leaves bash policy to pi-guard.`);
-		if (INTERNAL_TOOLS.has(tool)) throw new Error(`${label}.${tool} is reserved for child coordination and cannot be gated.`);
-		if (!DECISIONS.has(decision as PermissionDecision)) throw new Error(`${label}.${tool} must be allow, ask, or deny.`);
-		result[tool] = decision as PermissionDecision;
-	}
-	return Object.keys(result).length ? result : undefined;
-}
-
-export function validatePermissionConfig(value: unknown, label = "config.permissions"): PermissionConfig | undefined {
-	if (value === undefined) return undefined;
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object.`);
-	const object = value as Record<string, unknown>;
-	const unknown = Object.keys(object).filter((key) => key !== "rules");
-	if (unknown.length) throw new Error(`${label} has unsupported fields: ${unknown.join(", ")}.`);
-	return { rules: validatePermissionRules(object.rules, `${label}.rules`) };
-}
-
-export function resolvePermissionRules(globalConfig?: PermissionConfig, agentRules?: PermissionRules): PermissionRules | undefined {
-	const merged = { ...(globalConfig?.rules ?? {}), ...(agentRules ?? {}) };
-	for (const [tool, decision] of Object.entries(merged)) if (decision === "allow") delete merged[tool];
-	return Object.keys(merged).length ? merged : undefined;
-}
-
-export function permissionDecision(rules: PermissionRules | undefined, toolName: string): PermissionDecision {
-	if (toolName === "bash" || INTERNAL_TOOLS.has(toolName)) return "allow";
-	return rules?.[toolName] ?? "allow";
-}
-
-
-function redact(value: unknown, key = "", depth = 0): unknown {
-	if (SECRET_KEY.test(key)) return "[redacted]";
-	if (depth >= 3) return "[truncated]";
-	if (Array.isArray(value)) return value.slice(0, 10).map((item) => redact(item, "", depth + 1));
-	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value as Record<string, unknown>).slice(0, 20).map(([entryKey, entryValue]) => [entryKey, redact(entryValue, entryKey, depth + 1)]));
-	if (typeof value === "string") {
-		const redacted = redactSecretValues(value);
-		return redacted.length > 500 ? `${redacted.slice(0, 500)}…` : redacted;
-	}
-	return value;
-}
-
-export function permissionArgsPreview(input: unknown): string {
-	const serialized = JSON.stringify(redact(input));
-	if (!serialized) return "{}";
-	if (Buffer.byteLength(serialized, "utf-8") <= MAX_PREVIEW_BYTES) return serialized;
-	const maxContentBytes = MAX_PREVIEW_BYTES - Buffer.byteLength("…", "utf-8");
-	let preview = "";
-	let previewBytes = 0;
-	for (const character of serialized) {
-		const characterBytes = Buffer.byteLength(character, "utf-8");
-		if (previewBytes + characterBytes > maxContentBytes) break;
-		preview += character;
-		previewBytes += characterBytes;
-	}
-	return `${preview}…`;
-}
-
-export function appendPermissionAudit(filePath: string | undefined, record: Record<string, unknown>): void {
-	if (!filePath) return;
-	fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
-	fs.appendFileSync(filePath, `${JSON.stringify(record)}\n`, { encoding: "utf-8", mode: 0o600 });
-}

package/src/runs/shared/pi-spawn.ts

@@ -1,207 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { fileURLToPath } from "node:url";
-import { PI_CODING_AGENT_PACKAGE_ROOT_ENV } from "../../shared/utils.ts";
-
-export const PI_CODING_AGENT_PACKAGE = "@earendil-works/pi-coding-agent";
-export const PI_SUBAGENT_PI_BINARY_ENV = "PI_SUBAGENT_PI_BINARY";
-
-export function findPiPackageRootFromEntry(
-	entryPoint: string,
-): string | undefined {
-	let dir = path.dirname(entryPoint);
-	while (dir !== path.dirname(dir)) {
-		const packageJsonPath = path.join(dir, "package.json");
-		if (fs.existsSync(packageJsonPath)) {
-			const pkg = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8")) as {
-				name?: unknown;
-			};
-			if (pkg.name === PI_CODING_AGENT_PACKAGE) return dir;
-		}
-		dir = path.dirname(dir);
-	}
-	return undefined;
-}
-
-export function resolveInstalledPiPackageRoot(): string | undefined {
-	try {
-		return findPiPackageRootFromEntry(
-			fileURLToPath(import.meta.resolve(PI_CODING_AGENT_PACKAGE)),
-		);
-	} catch {
-		return undefined;
-	}
-}
-
-export function resolvePiPackageRoot(): string | undefined {
-	try {
-		const entry = process.argv[1];
-		return entry
-			? findPiPackageRootFromEntry(fs.realpathSync(entry))
-			: undefined;
-	} catch {
-		// process.argv[1] probing is best-effort; callers can fall back to PATH/package resolution.
-		return undefined;
-	}
-}
-
-export interface PiSpawnDeps {
-	platform?: NodeJS.Platform;
-	execPath?: string;
-	argv1?: string;
-	bunVersion?: string;
-	existsSync?: (filePath: string) => boolean;
-	realpathSync?: (filePath: string) => string;
-	readFileSync?: (filePath: string, encoding: "utf-8") => string;
-	resolvePackageJson?: () => string;
-	resolvePackageEntry?: () => string;
-	piPackageRoot?: string;
-	env?: NodeJS.ProcessEnv;
-}
-
-/** Compiled Pi's entrypoint is virtual; execPath is the real (possibly renamed) image. */
-export function resolveBunPiExecutable(deps: PiSpawnDeps = {}): string | undefined {
-	const bunVersion = deps.bunVersion ?? process.versions.bun;
-	const entry = deps.argv1 ?? process.argv[1];
-	if (!bunVersion || !entry || !/^(?:\/\$bunfs\/|B:[\\/]~BUN[\\/])/.test(entry)) return undefined;
-	const env = deps.env ?? process.env;
-	return env[PI_SUBAGENT_PI_BINARY_ENV]?.trim() || (deps.execPath ?? process.execPath);
-}
-
-interface PiSpawnCommand {
-	command: string;
-	args: string[];
-}
-
-interface PiPackageJson {
-	name?: unknown;
-	bin?: string | Record<string, string>;
-}
-
-function isNodeScriptPath(filePath: string): boolean {
-	return /\.(?:mjs|cjs|js)$/i.test(filePath);
-}
-
-function isRunnableNodeScript(
-	filePath: string,
-	existsSync: (filePath: string) => boolean,
-): boolean {
-	if (!existsSync(filePath)) return false;
-	return isNodeScriptPath(filePath);
-}
-
-function normalizePath(filePath: string): string {
-	return path.isAbsolute(filePath) ? filePath : path.resolve(filePath);
-}
-
-function isStandalonePiExecutable(execPath: string): boolean {
-	const executableName = execPath.split(/[\\/]/).pop();
-	return /^pi(?:\.exe)?$/i.test(executableName ?? "");
-}
-
-function resolvePiCliScriptFromPackageJson(
-	packageJsonPath: string,
-	readFileSync: (filePath: string, encoding: "utf-8") => string,
-	existsSync: (filePath: string) => boolean,
-): string | undefined {
-	const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8")) as PiPackageJson;
-	if (packageJson.name !== PI_CODING_AGENT_PACKAGE) return undefined;
-	const binField = packageJson.bin;
-	const binPath =
-		typeof binField === "string"
-			? binField
-			: (binField?.pi ?? Object.values(binField ?? {})[0]);
-	if (!binPath) return undefined;
-	const candidate = path.resolve(path.dirname(packageJsonPath), binPath);
-	return isRunnableNodeScript(candidate, existsSync) ? candidate : undefined;
-}
-
-export function resolvePiCliScript(
-	deps: PiSpawnDeps = {},
-): string | undefined {
-	const existsSync = deps.existsSync ?? fs.existsSync;
-	const realpathSync = deps.realpathSync ?? fs.realpathSync;
-	const readFileSync =
-		deps.readFileSync ??
-		((filePath, encoding) => fs.readFileSync(filePath, encoding));
-	const argv1 = deps.argv1 ?? process.argv[1];
-	const env = deps.env ?? process.env;
-
-	if (argv1) {
-		const argvPath = normalizePath(argv1);
-		if (isRunnableNodeScript(argvPath, existsSync)) {
-			try {
-				const canonicalArgvPath = realpathSync(argvPath);
-				if (isRunnableNodeScript(canonicalArgvPath, existsSync) && findPiPackageRootFromEntry(canonicalArgvPath)) {
-					return canonicalArgvPath;
-				}
-			} catch {
-				// Host package metadata is untrusted here; keep resolving the installed Pi CLI.
-			}
-		}
-	}
-
-	const packageJsonCandidates: Array<() => string | undefined> = [];
-	if (deps.resolvePackageJson) packageJsonCandidates.push(deps.resolvePackageJson);
-	for (const root of [deps.piPackageRoot, env[PI_CODING_AGENT_PACKAGE_ROOT_ENV], resolvePiPackageRoot()]) {
-		const trimmed = root?.trim();
-		if (trimmed) packageJsonCandidates.push(() => path.join(trimmed, "package.json"));
-	}
-	packageJsonCandidates.push(() => {
-		const packageRoot = deps.resolvePackageEntry
-			? findPiPackageRootFromEntry(deps.resolvePackageEntry())
-			: resolveInstalledPiPackageRoot();
-		return packageRoot ? path.join(packageRoot, "package.json") : undefined;
-	});
-
-	for (const candidatePackageJson of packageJsonCandidates) {
-		try {
-			const packageJsonPath = candidatePackageJson();
-			if (!packageJsonPath) continue;
-			const candidate = resolvePiCliScriptFromPackageJson(packageJsonPath, readFileSync, existsSync);
-			if (candidate) return candidate;
-		} catch {
-			// Keep resolving; callers decide whether a PATH fallback is safe.
-		}
-	}
-
-	return undefined;
-}
-
-export function getPiSpawnCommand(
-	args: string[],
-	deps: PiSpawnDeps = {},
-): PiSpawnCommand {
-	const platform = deps.platform ?? process.platform;
-	const env = deps.env ?? process.env;
-	const piBinary = env[PI_SUBAGENT_PI_BINARY_ENV]?.trim();
-	if (piBinary) {
-		if (platform === "win32" && isNodeScriptPath(piBinary)) {
-			return {
-				command: deps.execPath ?? process.execPath,
-				args: [piBinary, ...args],
-			};
-		}
-		return { command: piBinary, args };
-	}
-
-	const execPath = deps.execPath ?? process.execPath;
-	if (isStandalonePiExecutable(execPath)) {
-		return { command: execPath, args };
-	}
-
-	const piCliPath = resolvePiCliScript(deps);
-	if (piCliPath) {
-		return {
-			command: execPath,
-			args: [piCliPath, ...args],
-		};
-	}
-	if (platform === "win32") {
-		throw new Error(
-			`Could not resolve the Pi CLI on Windows. Set ${PI_SUBAGENT_PI_BINARY_ENV} or ensure ${PI_CODING_AGENT_PACKAGE} is installed.`,
-		);
-	}
-
-	return { command: "pi", args };
-}

package/src/runs/shared/process-signal.ts

@@ -1,35 +0,0 @@
-export function formatProcessSignalError(signal: string): string {
-	return `Subagent process terminated by signal ${signal}.`;
-}
-
-export function formatMidToolExitError(input: {
-	toolName: string;
-	exitCode?: number | null;
-	processSignal?: string | null;
-}): string {
-	if (input.exitCode === undefined && !input.processSignal) {
-		return `Subagent session ended during '${input.toolName}' tool execution before the tool completed. Earlier assistant output is not a terminal result.`;
-	}
-	const terminal = [`exit ${input.exitCode ?? "unknown"}`, ...(input.processSignal ? [`signal ${input.processSignal}`] : [])].join(", ");
-	return `Subagent process exited during '${input.toolName}' tool execution (${terminal}) before the tool completed. Earlier assistant output is not a terminal result.`;
-}
-
-export function isOrdinaryToolForMidToolExit(toolName: string): boolean {
-	return toolName !== "intercom" && toolName !== "contact_supervisor";
-}
-
-export function isUnexplainedProcessSignal(input: {
-	processSignal?: string | null;
-	interrupted?: boolean;
-	timedOut?: boolean;
-	stopped?: boolean;
-	turnBudgetExceeded?: boolean;
-	forcedDrainAfterFinalSuccess?: boolean;
-}): boolean {
-	return Boolean(input.processSignal)
-		&& input.interrupted !== true
-		&& input.timedOut !== true
-		&& input.stopped !== true
-		&& input.turnBudgetExceeded !== true
-		&& input.forcedDrainAfterFinalSuccess !== true;
-}

package/src/runs/shared/readonly-drain-observation.ts

@@ -1,42 +0,0 @@
-const knownStates = new Set(["queued", "running", "complete", "failed", "partial", "paused", "stopped", "rejected"]);
-
-/**
- * Private, installation-owned evidence. Never changes drain/query behavior or retains statuses.
- * Observes the ordinary indexed drain, not historical ownership or outside work appearing later.
- */
-export class ReadonlyDrainObservation {
-	private state: "pending" | "empty" | "denied" = "pending";
-	private started = false;
-	private first = false;
-	private readonly file: string;
-	private readonly guard: () => boolean;
-	constructor(file: string, guard: () => boolean) { this.file = file; this.guard = guard; }
-	deny(): void { this.state = "denied"; }
-	check(): boolean {
-		try { if (!this.guard()) this.deny(); } catch { this.deny(); }
-		return this.state !== "denied";
-	}
-	begin(file: string | null, native: boolean): void {
-		if (this.started || file !== this.file || !native) this.deny();
-		this.started = true;
-		this.check();
-	}
-	/** Called at the existing initial read, before reconciliation or filtering. */
-	readonly status: RawDrainStatusObserver = (status) => {
-		if (!status || typeof status.sessionId !== "string" || !status.sessionId
-			|| !knownStates.has(status.state as string)) this.deny();
-		else if (status.sessionId === this.file && (status.state === "queued" || status.state === "running")) this.deny();
-	};
-	predicate(hasWork: boolean): void {
-		if (this.first) return;
-		this.first = true;
-		if (hasWork) this.deny();
-	}
-	complete(): void {
-		if (this.started && this.first && this.check()) this.state = "empty";
-	}
-	settled(): boolean { return this.check() && this.state === "empty"; }
-}
-
-/** Internal synchronous sink; null means an existing query encountered uncertainty. */
-export type RawDrainStatusObserver = (status: { sessionId?: unknown; state?: unknown } | null) => void;