pi-subagents 0.69.0 → 0.70.0

package/src/runs/shared/capability-ceiling.d.ts

@@ -0,0 +1,58 @@
+export declare const SUBAGENT_CAPABILITY_CEILING_VERSION: 1;
+export declare const SUBAGENT_CAPABILITY_CEILING_REGISTRY_KEY = "pi-subagents.capability-ceiling.v1";
+export type SubagentCapabilityCeiling = {
+    allowedTools: readonly string[];
+    allowedAgents?: readonly string[];
+    denyExtensions?: boolean;
+} | {
+    allowedTools?: readonly string[];
+    allowedAgents?: readonly string[];
+    denyExtensions: boolean;
+} | {
+    allowedTools?: readonly string[];
+    allowedAgents: readonly string[];
+    denyExtensions?: boolean;
+};
+export interface ResolvedSubagentCapabilityCeiling {
+    version: typeof SUBAGENT_CAPABILITY_CEILING_VERSION;
+    allowedTools?: string[];
+    allowedAgents?: string[];
+    denyExtensions: boolean;
+    sources: string[];
+}
+export interface SubagentCapabilityAudit {
+    ceiling: ResolvedSubagentCapabilityCeiling;
+    requestedTools?: string[];
+    effectiveTools: string[];
+    removedTools: string[];
+    excludeTools?: string[];
+    internalTools: string[];
+    extensionsDenied: boolean;
+    removedExtensionCount: number;
+    requestedMcpToolCount: number;
+    effectiveMcpTools: string[];
+    agentAllowed: boolean;
+    agentRestrictionSources?: string[];
+}
+export interface RegisterSubagentCapabilityCeilingOptions {
+    sessionId: string;
+    source: string;
+    ceiling: SubagentCapabilityCeiling;
+}
+export interface SubagentCapabilityCeilingHandle {
+    update(ceiling: SubagentCapabilityCeiling): void;
+    dispose(): void;
+}
+export declare function normalizeCapabilityCeilingAllowedAgents(values: unknown): string[];
+export declare function parseSubagentCapabilityCeiling(value: unknown, field?: string): ResolvedSubagentCapabilityCeiling;
+export declare function registerSubagentCapabilityCeiling(options: RegisterSubagentCapabilityCeilingOptions): SubagentCapabilityCeilingHandle;
+export declare function intersectSubagentCapabilityCeilings(...ceilings: Array<ResolvedSubagentCapabilityCeiling | undefined>): ResolvedSubagentCapabilityCeiling | undefined;
+export declare function resolveSubagentCapabilityCeiling(sessionId: string | undefined, inherited?: ResolvedSubagentCapabilityCeiling): ResolvedSubagentCapabilityCeiling | undefined;
+export declare function resolveCurrentSubagentCapabilityCeiling(sessionId: string | undefined): ResolvedSubagentCapabilityCeiling | undefined;
+export declare function isAgentAllowedByCapabilityCeiling(agentName: string, ceiling: ResolvedSubagentCapabilityCeiling | undefined): boolean;
+export declare function capabilityCeilingAgentRestrictionMessage(agentName: string, ceiling: ResolvedSubagentCapabilityCeiling | undefined): string | undefined;
+export declare function assertAgentAllowedByCapabilityCeiling(agentName: string, ceiling: ResolvedSubagentCapabilityCeiling | undefined): void;
+export declare function capabilityCeilingAgentRestrictionSources(ceiling: ResolvedSubagentCapabilityCeiling | undefined): string[] | undefined;
+export declare function encodeSubagentCapabilityCeiling(ceiling: ResolvedSubagentCapabilityCeiling | undefined): string | undefined;
+export declare function decodeSubagentCapabilityCeiling(value: string | undefined): ResolvedSubagentCapabilityCeiling | undefined;
+//# sourceMappingURL=capability-ceiling.d.ts.map

package/src/runs/shared/capability-ceiling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-ceiling.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/capability-ceiling.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mCAAmC,EAAG,CAAU,CAAC;AAC9D,eAAO,MAAM,wCAAwC,uCAAuC,CAAC;AAE7F,MAAM,MAAM,yBAAyB,GAClC;IAAE,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAChG;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,GAChG;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpG,MAAM,WAAW,iCAAiC;IACjD,OAAO,EAAE,OAAO,mCAAmC,CAAC;IACpD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,iCAAiC,CAAC;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CAEnC;AAED,MAAM,WAAW,wCAAwC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,yBAAyB,CAAC;CACnC;AAED,MAAM,WAAW,+BAA+B;IAC/C,MAAM,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACjD,OAAO,IAAI,IAAI,CAAC;CAChB;AAsBD,wBAAgB,uCAAuC,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAEjF;AAgCD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAuB,GAAG,iCAAiC,CAS9H;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,wCAAwC,GAAG,+BAA+B,CAgCpI;AAED,wBAAgB,mCAAmC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,iCAAiC,GAAG,SAAS,CAAC,GAAG,iCAAiC,GAAG,SAAS,CAiBpK;AAED,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,iCAAiC,GAAG,iCAAiC,GAAG,SAAS,CAO5K;AAED,wBAAgB,uCAAuC,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,iCAAiC,GAAG,SAAS,CAEpI;AAED,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,GAAG,SAAS,GAAG,OAAO,CAEpI;AAED,wBAAgB,wCAAwC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKtJ;AAED,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,GAAG,SAAS,GAAG,IAAI,CAGrI;AAED,wBAAgB,wCAAwC,CAAC,OAAO,EAAE,iCAAiC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAErI;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG1H;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,iCAAiC,GAAG,SAAS,CAYxH"}

package/src/runs/shared/capability-ceiling.js

@@ -0,0 +1,179 @@
+import { Buffer } from "node:buffer";
+export const SUBAGENT_CAPABILITY_CEILING_VERSION = 1;
+export const SUBAGENT_CAPABILITY_CEILING_REGISTRY_KEY = "pi-subagents.capability-ceiling.v1";
+function registry() {
+    const key = Symbol.for(SUBAGENT_CAPABILITY_CEILING_REGISTRY_KEY);
+    const store = globalThis;
+    const existing = store[key];
+    if (existing instanceof Map)
+        return existing;
+    const created = new Map();
+    store[key] = created;
+    return created;
+}
+function validateText(value, field) {
+    if (typeof value !== "string" || !value.trim() || /[\u0000-\u001f\u007f]/u.test(value) || Buffer.byteLength(value.trim(), "utf8") > 256) {
+        throw new Error(`Invalid capability ceiling ${field}; expected a non-empty string without control characters (max 256 UTF-8 bytes).`);
+    }
+    return value.trim();
+}
+export function normalizeCapabilityCeilingAllowedAgents(values) {
+    return normalizeCeiling({ allowedAgents: values }).allowedAgents;
+}
+function normalizeCeiling(ceiling) {
+    if (!ceiling || typeof ceiling !== "object" || Array.isArray(ceiling))
+        throw new Error("Invalid capability ceiling; expected an object.");
+    const hasAllowedTools = Object.hasOwn(ceiling, "allowedTools");
+    const hasAllowedAgents = Object.hasOwn(ceiling, "allowedAgents");
+    const hasDenyExtensions = Object.hasOwn(ceiling, "denyExtensions");
+    if (!hasAllowedTools && !hasAllowedAgents && !hasDenyExtensions)
+        throw new Error("Invalid capability ceiling; expected allowedTools, allowedAgents, or denyExtensions.");
+    if (hasDenyExtensions && typeof ceiling.denyExtensions !== "boolean")
+        throw new Error("Invalid capability ceiling denyExtensions; expected a boolean.");
+    const normalizeList = (field, pattern) => {
+        if (!Object.hasOwn(ceiling, field))
+            return undefined;
+        const values = ceiling[field];
+        if (!Array.isArray(values))
+            throw new Error(`Invalid capability ceiling ${field}; expected an array.`);
+        if (values.length > 256)
+            throw new Error(`Invalid capability ceiling ${field}; expected at most 256 names.`);
+        return [...new Set(values.map((entry) => {
+                const name = validateText(entry, `${field} entry`);
+                if (!pattern.test(name))
+                    throw new Error(`Invalid capability ceiling ${field} entry '${name}'.`);
+                if (Buffer.byteLength(name, "utf8") > 128)
+                    throw new Error(`Invalid capability ceiling ${field} entry '${name}'; max 128 UTF-8 bytes.`);
+                return name;
+            }))].sort();
+    };
+    const allowedTools = normalizeList("allowedTools", /^[A-Za-z0-9_.:-]+$/u);
+    const allowedAgents = normalizeList("allowedAgents", /^[A-Za-z0-9_.:-]+$/u);
+    return {
+        version: SUBAGENT_CAPABILITY_CEILING_VERSION,
+        ...(allowedTools !== undefined ? { allowedTools } : {}),
+        ...(allowedAgents !== undefined ? { allowedAgents } : {}),
+        denyExtensions: ceiling.denyExtensions === true,
+        sources: [],
+    };
+}
+export function parseSubagentCapabilityCeiling(value, field = "capability ceiling") {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error(`Invalid ${field}; expected an object.`);
+    const record = value;
+    if (record.version !== SUBAGENT_CAPABILITY_CEILING_VERSION)
+        throw new Error(`Invalid ${field} version.`);
+    const normalized = normalizeCeiling(record);
+    const sources = record.sources;
+    if (!Array.isArray(sources) || sources.some((source) => typeof source !== "string"))
+        throw new Error(`Invalid ${field} sources; expected an array of strings.`);
+    normalized.sources = [...new Set(sources.map((source) => validateText(source, `${field} source`)))].sort();
+    return normalized;
+}
+export function registerSubagentCapabilityCeiling(options) {
+    const sessionId = validateText(options.sessionId, "sessionId");
+    const source = validateText(options.source, "source");
+    let normalized = normalizeCeiling(options.ceiling);
+    const token = Symbol(source);
+    const store = registry();
+    let session = store.get(sessionId);
+    if (!session) {
+        session = new Map();
+        store.set(sessionId, session);
+    }
+    const setRegistration = () => {
+        normalized = normalizeCeiling(normalized);
+        normalized.sources = [source];
+        session.set(token, { source, ceiling: normalized });
+    };
+    setRegistration();
+    let disposed = false;
+    return {
+        update(ceiling) {
+            if (disposed)
+                throw new Error("Cannot update a disposed capability ceiling handle.");
+            normalized = normalizeCeiling(ceiling);
+            normalized.sources = [source];
+            session.set(token, { source, ceiling: normalized });
+        },
+        dispose() {
+            if (disposed)
+                return;
+            disposed = true;
+            session.delete(token);
+            if (session.size === 0)
+                store.delete(sessionId);
+        },
+    };
+}
+export function intersectSubagentCapabilityCeilings(...ceilings) {
+    const active = ceilings.filter((ceiling) => ceiling !== undefined);
+    if (active.length === 0)
+        return undefined;
+    const intersectLists = (field) => {
+        const definedLists = active.filter((ceiling) => ceiling[field] !== undefined).map((ceiling) => new Set(ceiling[field]));
+        if (definedLists.length === 0)
+            return undefined;
+        return [...definedLists[0]].filter((entry) => definedLists.every((list) => list.has(entry))).sort();
+    };
+    const allowedTools = intersectLists("allowedTools");
+    const allowedAgents = intersectLists("allowedAgents");
+    return {
+        version: SUBAGENT_CAPABILITY_CEILING_VERSION,
+        ...(allowedTools !== undefined ? { allowedTools } : {}),
+        ...(allowedAgents !== undefined ? { allowedAgents } : {}),
+        denyExtensions: active.some((ceiling) => ceiling.denyExtensions),
+        sources: [...new Set(active.flatMap((ceiling) => ceiling.sources))].sort(),
+    };
+}
+export function resolveSubagentCapabilityCeiling(sessionId, inherited) {
+    const active = [];
+    if (sessionId) {
+        const registrations = registry().get(sessionId);
+        if (registrations)
+            active.push(...Array.from(registrations.values(), ({ ceiling }) => ceiling));
+    }
+    return intersectSubagentCapabilityCeilings(inherited, ...active);
+}
+export function resolveCurrentSubagentCapabilityCeiling(sessionId) {
+    return resolveSubagentCapabilityCeiling(sessionId, undefined);
+}
+export function isAgentAllowedByCapabilityCeiling(agentName, ceiling) {
+    return ceiling?.allowedAgents === undefined || ceiling.allowedAgents.includes(agentName);
+}
+export function capabilityCeilingAgentRestrictionMessage(agentName, ceiling) {
+    if (isAgentAllowedByCapabilityCeiling(agentName, ceiling))
+        return undefined;
+    const sources = ceiling?.sources.length ? ceiling.sources.join(", ") : "unknown source";
+    const allowed = ceiling?.allowedAgents?.length ? ceiling.allowedAgents.join(", ") : "(none)";
+    return `Capability ceiling from ${sources} does not allow agent '${agentName}'. Allowed agents: ${allowed}.`;
+}
+export function assertAgentAllowedByCapabilityCeiling(agentName, ceiling) {
+    const message = capabilityCeilingAgentRestrictionMessage(agentName, ceiling);
+    if (message)
+        throw new Error(message);
+}
+export function capabilityCeilingAgentRestrictionSources(ceiling) {
+    return ceiling?.allowedAgents === undefined ? undefined : [...ceiling.sources];
+}
+export function encodeSubagentCapabilityCeiling(ceiling) {
+    if (!ceiling)
+        return undefined;
+    return Buffer.from(JSON.stringify(ceiling), "utf8").toString("base64url");
+}
+export function decodeSubagentCapabilityCeiling(value) {
+    if (value === undefined || value === "")
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
+    }
+    catch (error) {
+        throw new Error(`Invalid inherited capability ceiling: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || parsed.version !== SUBAGENT_CAPABILITY_CEILING_VERSION) {
+        throw new Error("Invalid inherited capability ceiling version.");
+    }
+    return parseSubagentCapabilityCeiling(parsed, "inherited capability ceiling");
+}
+//# sourceMappingURL=capability-ceiling.js.map

package/src/runs/shared/capability-ceiling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-ceiling.js","sourceRoot":"","sources":["../../../../src/runs/shared/capability-ceiling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,wCAAwC,GAAG,oCAAoC,CAAC;AA6C7F,SAAS,QAAQ;IAChB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,UAA4D,CAAC;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,QAAQ,YAAY,GAAG;QAAE,OAAO,QAAoB,CAAC;IACzD,MAAM,OAAO,GAAa,IAAI,GAAG,EAAE,CAAC;IACpC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACrB,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QACzI,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,iFAAiF,CAAC,CAAC;IACvI,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,MAAe;IACtE,OAAO,gBAAgB,CAAC,EAAE,aAAa,EAAE,MAAM,EAA+B,CAAC,CAAC,aAAc,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAkC;IAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC1I,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACnE,IAAI,CAAC,eAAe,IAAI,CAAC,gBAAgB,IAAI,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IACzK,IAAI,iBAAiB,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACxJ,MAAM,aAAa,GAAG,CAAC,KAAuC,EAAE,OAAe,EAAwB,EAAE;QACxG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,sBAAsB,CAAC,CAAC;QACvG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,+BAA+B,CAAC,CAAC;QAC7G,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;gBACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC;gBACjG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,WAAW,IAAI,yBAAyB,CAAC,CAAC;gBACxI,OAAO,IAAI,CAAC;YACb,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACb,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,aAAa,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,aAAa,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;IAC5E,OAAO;QACN,OAAO,EAAE,mCAAmC;QAC5C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,cAAc,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC/C,OAAO,EAAE,EAAE;KACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,KAAK,GAAG,oBAAoB;IAC1F,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,uBAAuB,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,mCAAmC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAmC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,yCAAyC,CAAC,CAAC;IAChK,UAAU,CAAC,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3G,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,OAAiD;IAClG,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,EAAE;QAC5B,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,UAAU,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,eAAe,EAAE,CAAC;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACN,MAAM,CAAC,OAAO;YACb,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrF,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvC,UAAU,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;YACN,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,IAAI,OAAQ,CAAC,IAAI,KAAK,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,GAAG,QAA8D;IACpH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAgD,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACjH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,cAAc,GAAG,CAAC,KAAuC,EAAwB,EAAE;QACxF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAChD,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IACtD,OAAO;QACN,OAAO,EAAE,mCAAmC;QAC5C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;QAChE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KAC1E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,SAA6B,EAAE,SAA6C;IAC5H,MAAM,MAAM,GAAwC,EAAE,CAAC;IACvD,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,aAAa;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,mCAAmC,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,SAA6B;IACpF,OAAO,gCAAgC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,SAAiB,EAAE,OAAsD;IAC1H,OAAO,OAAO,EAAE,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,SAAiB,EAAE,OAAsD;IACjI,IAAI,iCAAiC,CAAC,SAAS,EAAE,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACxF,MAAM,OAAO,GAAG,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7F,OAAO,2BAA2B,OAAO,0BAA0B,SAAS,sBAAsB,OAAO,GAAG,CAAC;AAC9G,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB,EAAE,OAAsD;IAC9H,MAAM,OAAO,GAAG,wCAAwC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7E,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,OAAsD;IAC9G,OAAO,OAAO,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAsD;IACrG,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAyB;IACxE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAK,MAAgC,CAAC,OAAO,KAAK,mCAAmC,EAAE,CAAC;QACzJ,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,8BAA8B,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;AAC/E,CAAC"}

package/src/runs/shared/chain-outputs.d.ts

@@ -0,0 +1,19 @@
+import { type ChainStep } from "../../shared/settings.ts";
+import type { ChainOutputMap, ChainOutputMapEntry, SingleResult } from "../../shared/types.ts";
+import { type DynamicFanoutConfig } from "./dynamic-fanout.ts";
+export declare class ChainOutputValidationError extends Error {
+}
+export interface ChainOutputValidationContext {
+    priorOutputNames?: Iterable<string>;
+    startStepIndex?: number;
+}
+export declare function validateChainOutputBindings(steps: ChainStep[], dynamicFanoutConfig?: DynamicFanoutConfig): void;
+export declare function validateChainOutputBindingsWithContext(steps: ChainStep[], dynamicFanoutConfig?: DynamicFanoutConfig, context?: ChainOutputValidationContext): void;
+export declare function resolveOutputReferences(template: string, outputs: ChainOutputMap): string;
+export declare function outputEntryFromResult(result: SingleResult, stepIndex: number): ChainOutputMapEntry;
+export declare function outputEntryFromAsyncResult(result: {
+    agent: string;
+    output: string;
+    structuredOutput?: unknown;
+}, stepIndex: number): ChainOutputMapEntry;
+//# sourceMappingURL=chain-outputs.d.ts.map

package/src/runs/shared/chain-outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-outputs.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/chain-outputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,KAAK,SAAS,EAAuB,MAAM,0BAA0B,CAAC;AACtH,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE/F,OAAO,EAA8C,KAAK,mBAAmB,EAA4B,MAAM,qBAAqB,CAAC;AAKrI,qBAAa,0BAA2B,SAAQ,KAAK;CAAG;AAExD,MAAM,WAAW,4BAA4B;IAC5C,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAeD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,mBAAmB,GAAE,mBAAwB,GAAG,IAAI,CAEnH;AAED,wBAAgB,sCAAsC,CACrD,KAAK,EAAE,SAAS,EAAE,EAClB,mBAAmB,GAAE,mBAAwB,EAC7C,OAAO,GAAE,4BAAiC,GACxC,IAAI,CA8CN;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CASzF;AAMD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,CAOlG;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,CAOxJ"}

package/src/runs/shared/chain-outputs.js

@@ -0,0 +1,105 @@
+import { isDynamicParallelStep, isParallelStep } from "../../shared/settings.js";
+import { getSingleResultOutput } from "../../shared/utils.js";
+import { DynamicFanoutError, hasDynamicFanoutFields, validateDynamicStepShape } from "./dynamic-fanout.js";
+const OUTPUT_REF_PATTERN = /\{outputs\.([^}]*)\}/g;
+const SAFE_OUTPUT_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export class ChainOutputValidationError extends Error {
+}
+function outputNamesForStep(step) {
+    if (isParallelStep(step))
+        return step.parallel.map((task) => task.as).filter((name) => Boolean(name));
+    if (isDynamicParallelStep(step))
+        return [step.collect.as];
+    const name = step.as;
+    return name ? [name] : [];
+}
+function taskTemplatesForStep(step) {
+    if (isParallelStep(step))
+        return step.parallel.map((task) => task.task ?? "{previous}");
+    if (isDynamicParallelStep(step))
+        return [step.parallel.task ?? "{previous}", step.parallel.label ?? ""].filter(Boolean);
+    return [step.task ?? "{previous}"];
+}
+export function validateChainOutputBindings(steps, dynamicFanoutConfig = {}) {
+    validateChainOutputBindingsWithContext(steps, dynamicFanoutConfig);
+}
+export function validateChainOutputBindingsWithContext(steps, dynamicFanoutConfig = {}, context = {}) {
+    const priorOutputNames = [...(context.priorOutputNames ?? [])];
+    const available = new Set(priorOutputNames);
+    const seen = new Set(priorOutputNames);
+    for (let stepIndex = 0; stepIndex < steps.length; stepIndex++) {
+        const displayStepIndex = (context.startStepIndex ?? 0) + stepIndex + 1;
+        const step = steps[stepIndex];
+        if (hasDynamicFanoutFields(step)) {
+            if (!isDynamicParallelStep(step)) {
+                throw new ChainOutputValidationError(`Dynamic chain step ${displayStepIndex} requires expand, a single parallel template object, and collect; dynamic expand/collect cannot be mixed with static parallel arrays.`);
+            }
+            try {
+                validateDynamicStepShape(step, displayStepIndex - 1, dynamicFanoutConfig);
+            }
+            catch (error) {
+                if (error instanceof DynamicFanoutError)
+                    throw new ChainOutputValidationError(error.message);
+                throw error;
+            }
+            if (!available.has(step.expand.from.output)) {
+                throw new ChainOutputValidationError(`Dynamic chain step ${displayStepIndex} references unknown output '${step.expand.from.output}'. Named outputs are only available after producing step/group completes.`);
+            }
+        }
+        for (const name of outputNamesForStep(step)) {
+            if (!SAFE_OUTPUT_NAME_PATTERN.test(name)) {
+                throw new ChainOutputValidationError(`Invalid chain output name '${name}' at step ${displayStepIndex}. Use /^[A-Za-z_][A-Za-z0-9_]*$/.`);
+            }
+            if (seen.has(name)) {
+                throw new ChainOutputValidationError(`Duplicate chain output name '${name}'. Each as name must be unique.`);
+            }
+            seen.add(name);
+        }
+        for (const template of taskTemplatesForStep(step)) {
+            for (const match of template.matchAll(OUTPUT_REF_PATTERN)) {
+                const rawReference = match[0];
+                const name = match[1];
+                if (!SAFE_OUTPUT_NAME_PATTERN.test(name)) {
+                    throw new ChainOutputValidationError(`Invalid chain output reference '${rawReference}' at step ${displayStepIndex}. Use {outputs.name} with /^[A-Za-z_][A-Za-z0-9_]*$/ names.`);
+                }
+                if (!available.has(name)) {
+                    throw new ChainOutputValidationError(`Unknown chain output reference '${rawReference}' at step ${displayStepIndex}. Named outputs are only available after producing step/group completes.`);
+                }
+            }
+        }
+        for (const name of outputNamesForStep(step)) {
+            available.add(name);
+        }
+    }
+}
+export function resolveOutputReferences(template, outputs) {
+    return template.replace(OUTPUT_REF_PATTERN, (rawReference, name) => {
+        if (!SAFE_OUTPUT_NAME_PATTERN.test(name)) {
+            throw new ChainOutputValidationError(`Invalid chain output reference '${rawReference}'. Use {outputs.name} with /^[A-Za-z_][A-Za-z0-9_]*$/ names.`);
+        }
+        const entry = outputs[name];
+        if (!entry)
+            throw new ChainOutputValidationError(`Unknown chain output reference '${rawReference}'.`);
+        return entry.text;
+    });
+}
+function compactStructuredText(value) {
+    return JSON.stringify(value);
+}
+export function outputEntryFromResult(result, stepIndex) {
+    return {
+        text: result.structuredOutput !== undefined ? compactStructuredText(result.structuredOutput) : getSingleResultOutput(result),
+        ...(result.structuredOutput !== undefined ? { structured: result.structuredOutput } : {}),
+        agent: result.agent,
+        stepIndex,
+    };
+}
+export function outputEntryFromAsyncResult(result, stepIndex) {
+    return {
+        text: result.structuredOutput !== undefined ? compactStructuredText(result.structuredOutput) : result.output,
+        ...(result.structuredOutput !== undefined ? { structured: result.structuredOutput } : {}),
+        agent: result.agent,
+        stepIndex,
+    };
+}
+//# sourceMappingURL=chain-outputs.js.map

package/src/runs/shared/chain-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-outputs.js","sourceRoot":"","sources":["../../../../src/runs/shared/chain-outputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAuC,MAAM,0BAA0B,CAAC;AAEtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAA4B,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAErI,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAE5D,MAAM,OAAO,0BAA2B,SAAQ,KAAK;CAAG;AAOxD,SAAS,kBAAkB,CAAC,IAAe;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtH,IAAI,qBAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAI,IAAuB,CAAC,EAAE,CAAC;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAe;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC;IACxF,IAAI,qBAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxH,OAAO,CAAE,IAAuB,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAkB,EAAE,sBAA2C,EAAE;IAC5G,sCAAsC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,sCAAsC,CACrD,KAAkB,EAClB,sBAA2C,EAAE,EAC7C,UAAwC,EAAE;IAE1C,MAAM,gBAAgB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;IAC/C,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAE,CAAC;QAC/B,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,gBAAgB,uIAAuI,CAAC,CAAC;YACrN,CAAC;YACD,IAAI,CAAC;gBACJ,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,kBAAkB;oBAAE,MAAM,IAAI,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7F,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,gBAAgB,+BAA+B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,2EAA2E,CAAC,CAAC;YAC/M,CAAC;QACF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,IAAI,aAAa,gBAAgB,mCAAmC,CAAC,CAAC;YAC1I,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,IAAI,iCAAiC,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3D,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACvB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,0BAA0B,CAAC,mCAAmC,YAAY,aAAa,gBAAgB,6DAA6D,CAAC,CAAC;gBACjL,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,0BAA0B,CAAC,mCAAmC,YAAY,aAAa,gBAAgB,0EAA0E,CAAC,CAAC;gBAC9L,CAAC;YACF,CAAC;QACF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAAuB;IAChF,OAAO,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,YAAY,EAAE,IAAY,EAAE,EAAE;QAC1E,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,0BAA0B,CAAC,mCAAmC,YAAY,8DAA8D,CAAC,CAAC;QACrJ,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,0BAA0B,CAAC,mCAAmC,YAAY,IAAI,CAAC,CAAC;QACtG,OAAO,KAAK,CAAC,IAAI,CAAC;IACnB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAoB,EAAE,SAAiB;IAC5E,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAC5H,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS;KACT,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAqE,EAAE,SAAiB;IAClI,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;QAC5G,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS;KACT,CAAC;AACH,CAAC"}

package/src/runs/shared/child-hooks.d.ts

@@ -0,0 +1,34 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { ChildRuntimeConfig } from "./child-runtime-config.ts";
+import type { ChildToolDiagnostic } from "./tool-availability.ts";
+import type { ChildSessionLaunch } from "./child-session.ts";
+import type { ArbiterModelContext } from "./llm-intent-arbiter.ts";
+import type { ChildTranscriptWriter } from "../../shared/child-transcript.ts";
+/** Inline extension shape accepted by pi's resource loader (`extensionFactories`). */
+export interface ChildHookExtension {
+    name: string;
+    factory: (pi: ExtensionAPI) => void;
+}
+/** The host's mandatory transcript reporting, owned by the existing hook certificate. */
+export declare function withChildSessionErrorReporting(session: Omit<ChildSessionLaunch, "onExtensionError">, transcriptWriter: ChildTranscriptWriter | undefined): ChildSessionLaunch;
+export declare function isReadonlyChildSessionReporting(launch: ChildSessionLaunch): boolean;
+/** Internal proof of the captured closure/config, not its caller-controlled display name. */
+export declare function isReadonlyChildHookProfile(hooks: ChildHookExtension[], config: ChildRuntimeConfig): boolean;
+/** Arm just the next installation; ordinary installations retain the original API/handlers. */
+export declare function observeReadonlyChildHookDrain(hooks: ChildHookExtension[], enabled: boolean, sessionFile: string): void;
+export declare function captureReadonlyChildDrain(hooks: ChildHookExtension[]): (() => boolean);
+/**
+ * The child-side hooks pi-subagents installs in every child, keyed off the
+ * launch config. The registrations live in `subagent-prompt-runtime.ts`,
+ * `fast-mode-extension.ts`, and `fanout-child.ts`.
+ */
+export declare function createChildHooks(config: ChildRuntimeConfig): ChildHookExtension[];
+/** Launch-owned bookkeeping, paired with the same private hook certificate (no callback registration API). */
+export declare function createCapturedChildHooks(config: ChildRuntimeConfig, runner?: boolean): {
+    hooks: ChildHookExtension[];
+    completionIntentContext: () => ArbiterModelContext | undefined;
+    toolDiagnostic: () => ChildToolDiagnostic | undefined;
+    runtimeAcknowledgedExtensions: () => import("../../shared/types.ts").RuntimeAcknowledgedChildExtensions | undefined;
+    finalDrainHeld: () => boolean;
+};
+//# sourceMappingURL=child-hooks.d.ts.map

package/src/runs/shared/child-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-hooks.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/child-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAMpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAG9E,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAAC;CACpC;AAWD,yFAAyF;AACzF,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,qBAAqB,GAAG,SAAS,GAAG,kBAAkB,CAO7K;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAKnF;AAmDD,6FAA6F;AAC7F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAM3G;AAED,+FAA+F;AAC/F,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAQtH;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,CAItF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,EAAE,CAEjF;AAED,8GAA8G;AAC9G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,UAAQ;;;;;;EA8BlF"}

package/src/runs/shared/child-hooks.js

@@ -0,0 +1,188 @@
+import { listBackgroundWorkProviders } from "../../api/background-work.js";
+import { ReadonlyDrainObservation } from "./readonly-drain-observation.js";
+import registerFanoutChildSubagentExtension, { createChildSafeState } from "../../extension/fanout-child.js";
+import registerSubagentFastModeExtension from "./fast-mode-extension.js";
+import registerSubagentPromptRuntime from "./subagent-prompt-runtime.js";
+import { projectRuntimeAcknowledgedExtensions } from "./runtime-acknowledged-extensions.js";
+const promptProofs = new WeakMap();
+function ownedProof(hooks) {
+    const proof = hooks[0] && promptProofs.get(hooks[0].factory);
+    return proof?.factories?.length === hooks.length && proof.factories.every((factory, index) => hooks[index]?.factory === factory) ? proof : undefined;
+}
+/** The host's mandatory transcript reporting, owned by the existing hook certificate. */
+export function withChildSessionErrorReporting(session, transcriptWriter) {
+    const launch = { ...session, onExtensionError: (error) => {
+            transcriptWriter?.writeStderrLine(`Extension error (${error.extensionPath}, ${error.event}): ${error.error instanceof Error ? error.error.message : String(error.error)}`);
+        } };
+    const proof = ownedProof(launch.hooks);
+    if (proof?.capture && proof.config === launch.runtime)
+        proof.reporting = { launch, callback: launch.onExtensionError };
+    return launch;
+}
+export function isReadonlyChildSessionReporting(launch) {
+    const proof = ownedProof(launch.hooks);
+    const descriptor = Object.getOwnPropertyDescriptor(launch, "onExtensionError");
+    if (descriptor && (!descriptor.enumerable || !("value" in descriptor)))
+        return false;
+    return proof?.reporting ? proof.reporting.launch === launch && proof.reporting.callback === descriptor?.value : !descriptor && !("onExtensionError" in launch);
+}
+/** Admit only own enumerable data: inspecting descriptors must not invoke getters. */
+function dataKeys(value) {
+    if (!value || typeof value !== "object" || Object.getPrototypeOf(value) !== Object.prototype)
+        return undefined;
+    const keys = Reflect.ownKeys(value);
+    for (const key of keys) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (typeof key !== "string" || !descriptor.enumerable || !("value" in descriptor))
+            return undefined;
+    }
+    return keys;
+}
+/** Only reviewed data and the capture callbacks constructed below; no caller callback opt-in. */
+function readonlyConfig(config, capture) {
+    const strings = ["runId", "agent", "sessionName", "forkCacheKey", "parentSessionId", "orchestratorSessionId"];
+    const numbers = ["childIndex", "depth", "maxDepth"];
+    const booleans = ["inheritProjectContext", "inheritGlobalContext", "inheritSkills"];
+    const keys = dataKeys(config);
+    if (!keys)
+        return undefined;
+    if (capture && (config.toolDiagnostic !== capture.toolDiagnostic || config.runtimeAcknowledgements !== capture.runtimeAcknowledgements))
+        return undefined;
+    const waitKeys = dataKeys(config.waitTool);
+    if (!waitKeys || waitKeys.some((key) => key !== "enabled"))
+        return undefined;
+    if (config.fast !== false || config.fanoutChild !== false || config.waitTool.enabled !== false)
+        return undefined;
+    for (const key of keys) {
+        const value = Object.getOwnPropertyDescriptor(config, key).value;
+        if (["fast", "fanoutChild", "waitTool"].includes(key))
+            continue;
+        if (capture && (key === "toolDiagnostic" || key === "runtimeAcknowledgements"))
+            continue;
+        if (capture && key === "requiredTools" && Array.isArray(value) && Object.getPrototypeOf(value) === Array.prototype) {
+            const descriptors = Object.getOwnPropertyDescriptors(value);
+            if (Reflect.ownKeys(descriptors).length !== value.length + 1)
+                return undefined;
+            for (let i = 0; i < value.length; i++) {
+                const descriptor = descriptors[String(i)];
+                if (!descriptor?.enumerable || !("value" in descriptor) || !["read", "ls"].includes(descriptor.value))
+                    return undefined;
+            }
+            continue;
+        }
+        if (strings.includes(key) && (value === undefined || typeof value === "string"))
+            continue;
+        if (numbers.includes(key) && (value === undefined || (typeof value === "number" && Number.isInteger(value) && value >= 0)))
+            continue;
+        if (booleans.includes(key) && (value === undefined || typeof value === "boolean"))
+            continue;
+        return undefined;
+    }
+    return JSON.stringify(config);
+}
+function noBackgroundProviders() {
+    try {
+        return listBackgroundWorkProviders().length === 0;
+    }
+    catch {
+        return false;
+    }
+}
+/** Internal proof of the captured closure/config, not its caller-controlled display name. */
+export function isReadonlyChildHookProfile(hooks, config) {
+    const proof = ownedProof(hooks);
+    if (!proof)
+        return false;
+    const valid = proof.config === config && readonlyConfig(config, proof.capture) === proof.snapshot && noBackgroundProviders();
+    if (!valid)
+        proof.observation?.deny();
+    return valid && (proof.observation?.check() ?? true);
+}
+/** Arm just the next installation; ordinary installations retain the original API/handlers. */
+export function observeReadonlyChildHookDrain(hooks, enabled, sessionFile) {
+    const proof = ownedProof(hooks);
+    if (!proof)
+        return;
+    if (enabled) {
+        proof.observation?.deny();
+        proof.observation = undefined;
+    }
+    proof.observeNext = enabled ? new ReadonlyDrainObservation(sessionFile, () => readonlyConfig(proof.config, proof.capture) === proof.snapshot && noBackgroundProviders()) : undefined;
+}
+export function captureReadonlyChildDrain(hooks) {
+    const proof = ownedProof(hooks);
+    const observation = proof?.observation;
+    return () => !!observation && proof?.observation === observation && observation.settled();
+}
+/**
+ * The child-side hooks pi-subagents installs in every child, keyed off the
+ * launch config. The registrations live in `subagent-prompt-runtime.ts`,
+ * `fast-mode-extension.ts`, and `fanout-child.ts`.
+ */
+export function createChildHooks(config) {
+    return childHooks(config);
+}
+/** Launch-owned bookkeeping, paired with the same private hook certificate (no callback registration API). */
+export function createCapturedChildHooks(config, runner = false) {
+    let diagnostic;
+    let acknowledgedIds;
+    let completionIntentContext;
+    let finalDrainHeld = false;
+    const capture = {
+        toolDiagnostic: (value) => { diagnostic = value; },
+        runtimeAcknowledgements: (ids) => { acknowledgedIds = ids; },
+    };
+    Object.assign(config, capture);
+    const hooks = childHooks(config, capture, (held) => { finalDrainHeld = held; });
+    if (runner) {
+        hooks.push({ name: "pi-subagents:completion-intent", factory: (pi) => pi.on("session_start", (_event, childCtx) => {
+                // Retain only attempt model services and the session id string, not the live child session.
+                completionIntentContext = {
+                    model: childCtx.model,
+                    modelRegistry: childCtx.modelRegistry,
+                    sessionId: childCtx.sessionManager.getSessionId(),
+                };
+            }) });
+        const proof = promptProofs.get(hooks[0].factory);
+        if (proof)
+            proof.factories = hooks.map((hook) => hook.factory);
+    }
+    return {
+        hooks,
+        completionIntentContext: () => completionIntentContext,
+        toolDiagnostic: () => diagnostic,
+        runtimeAcknowledgedExtensions: () => acknowledgedIds ? projectRuntimeAcknowledgedExtensions(acknowledgedIds) : undefined,
+        finalDrainHeld: () => finalDrainHeld,
+    };
+}
+function childHooks(config, capture, holdFinalDrain) {
+    const snapshot = readonlyConfig(config, capture);
+    const proof = snapshot === undefined ? undefined : { config, snapshot, capture };
+    const runtime = Object.create(config);
+    const ownedState = Object.getOwnPropertyDescriptor(config, "runtimeState");
+    if (!ownedState || !("value" in ownedState) || ownedState.value == null) {
+        Object.defineProperty(runtime, "runtimeState", { configurable: true, enumerable: true, writable: true, value: createChildSafeState() });
+    }
+    if (holdFinalDrain) {
+        Object.defineProperty(runtime, "holdFinalDrain", { configurable: true, enumerable: true, writable: true, value: holdFinalDrain });
+    }
+    const hooks = [
+        { name: "pi-subagents:prompt-runtime", factory: function promptRuntime(pi) {
+                if (!proof?.observeNext)
+                    return registerSubagentPromptRuntime(pi, runtime);
+                proof.observation = proof.observeNext;
+                proof.observeNext = undefined;
+                registerSubagentPromptRuntime(pi, runtime, proof.observation);
+            } },
+    ];
+    if (proof) {
+        proof.factories = hooks.map((hook) => hook.factory);
+        promptProofs.set(hooks[0].factory, proof);
+    }
+    if (config.fast)
+        hooks.push({ name: "pi-subagents:fast-mode", factory: (pi) => registerSubagentFastModeExtension(pi) });
+    if (config.fanoutChild)
+        hooks.push({ name: "pi-subagents:fanout-child", factory: (pi) => registerFanoutChildSubagentExtension(pi, runtime) });
+    return hooks;
+}
+//# sourceMappingURL=child-hooks.js.map