subharness 0.0.1 → 0.0.3

package/dist/runtime/worker-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker-client.js","sourceRoot":"","sources":["../../src/runtime/worker-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAkB,MAAM,cAAc,CAAC;AAG1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB;IACnD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,eAAgB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,SAAS,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACjF,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAC,GAAG,KAAK,CAAC,GAAG,EAAC,kBAAkB,EAAC,KAAK,CAAC,KAAK,EAAC,cAAc,EAAC,QAAQ,CAAC,IAAI;gBAC5F,IAAI,EAAC,QAAQ,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAC;YAC/D,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5E,KAAK,EAAE,CAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,EAAC,KAAK,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACxD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkE,CAAC;IAC1F,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;YAC9C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,4BAA4B,CAAC,CAAC,CAAC;YACtH,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAqD,EAAE,EAAE;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;;YACxF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,MAAa,EAAE,KAAK,GAA0B,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAU,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE;QAC5G,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,oCAAoC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,MAAM,EAAC,GAAG,KAAK,EAAC,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,kCAAkC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjK,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,MAAM,EAAC,EAAC,KAAK,EAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC3G,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAC,EAAC,MAAM,EAAC,CAAoB;QAC3D,KAAK,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAoB;QAClD,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC;KACxG,CAAC;AACJ,CAAC","sourcesContent":["import { fork, type ChildProcess } from 'node:child_process';\nimport { fileURLToPath } from 'node:url';\nimport { delimiter } from 'node:path';\nimport { AgentError, type ErrorInfo } from '../errors.js';\nimport type { NativeSession } from '../adapters/types.js';\nimport type { DriverInput } from './types.js';\nimport { createSessionLauncher } from './session-launcher.js';\n\nexport async function createWorker(input: DriverInput): Promise<NativeSession> {\n  const launcher = await createSessionLauncher(input.env.AGENT_STATE_DIR!,input.token);\n  const extension = import.meta.url.endsWith('.ts') ? 'ts' : 'js';\n  let child: ChildProcess;\n  try {\n    child = fork(fileURLToPath(new URL(`./worker.${extension}`, import.meta.url)), [], {\n      cwd: input.cwd, env: {...input.env,AGENT_PARENT_TOKEN:input.token,AGENT_CLI_PATH:launcher.path,\n        PATH:launcher.directory + delimiter + (input.env.PATH ?? '')},\n      execArgv: extension === 'ts' ? ['--import', import.meta.resolve('tsx')] : [],\n      stdio: ['ignore','ignore','ignore','ipc'],\n    });\n  } catch (error) { await launcher.close(); throw error; }\n  let nextId = 1;\n  const pending = new Map<number, {resolve(value:unknown):void;reject(error:Error):void}>();\n  let exited = false;\n  const exit = () => {\n    if (exited) return;\n    exited = true;\n    void launcher.close().catch(() => {}).then(() => {\n      for (const waiting of pending.values()) waiting.reject(new AgentError('HARNESS_FAILED','The session worker exited.'));\n      pending.clear();\n    });\n  };\n  child.once('error', exit); child.once('exit', exit);\n  child.on('message', (message: {id:number;result?:unknown;error?:ErrorInfo}) => {\n    const request = pending.get(message.id);\n    if (!request) return;\n    pending.delete(message.id);\n    if (message.error) request.reject(new AgentError(message.error.code, message.error.message));\n    else request.resolve(message.result);\n  });\n  const request = (method:string, extra:Record<string,unknown> = {}) => new Promise<unknown>((resolve,reject) => {\n    if (exited) { reject(new AgentError('HARNESS_FAILED','The session worker is unavailable.')); return; }\n    const id = nextId++;\n    pending.set(id,{resolve,reject});\n    child.send({id,method,...extra}, error => { if (error) { pending.delete(id); reject(new AgentError('HARNESS_FAILED','Cannot reach the session worker.')); } });\n  });\n  try { await request('open',{input}); } catch (error) { child.kill(); await launcher.close(); throw error; }\n  return {\n    turn: prompt => request('turn',{prompt}) as Promise<string>,\n    steer: async prompt => { await request('steer',{prompt}); },\n    interrupt: async () => { await request('interrupt'); },\n    resume: () => request('resume') as Promise<string>,\n    close: async () => { try { if (!exited) await request('close'); } finally { await launcher.close(); } },\n  };\n}\n"]}
+{"version":3,"file":"worker-client.js","sourceRoot":"","sources":["../../src/runtime/worker-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAkB,MAAM,cAAc,CAAC;AAI1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAO9D,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,SAAS,UAAU,CAAC,OAAyB,EAAE,OAAe;IAC5D,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,OAAO,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CACV,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAC7C,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,OAAe;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,8CAA8C,CAAC,CAAC,EAAC,OAAO,CAAC,CAAC;QAChI,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjD,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB,EAAE,OAAO,GAAwB,EAAE;IACtF,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,eAAgB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,GAAG,CAAC,YAAY,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnI,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE;YAC5C,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAC,GAAG,KAAK,CAAC,GAAG,EAAC,kBAAkB,EAAC,KAAK,CAAC,KAAK,EAAC,cAAc,EAAC,QAAQ,CAAC,IAAI;gBAC5F,IAAI,EAAC,QAAQ,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAC;YAC/D,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5E,KAAK,EAAE,CAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,EAAC,KAAK,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACxD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkE,CAAC;IAC1F,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,UAAuB,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,UAAU,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACjD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,4BAA4B,CAAC,CAAC,CAAC;YACtH,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAqD,EAAE,EAAE;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;;YACxF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,MAAa,EAAE,KAAK,GAA0B,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAU,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE;QAC5G,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,oCAAoC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,MAAM,EAAC,GAAG,KAAK,EAAC,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAC,kCAAkC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjK,CAAC,CAAC,CAAC;IACH,IAAI,eAA4B,CAAC;IACjC,IAAI,CAAC;QAAC,eAAe,GAAG,MAAM,OAAO,CAAC,MAAM,EAAC,EAAC,KAAK,EAAC,CAAgB,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC5I,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,SAAS;YAAE,IAAI,CAAC;gBAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;QAC/D,IAAI,MAAM,UAAU,CAAC,WAAW,EAAC,OAAO,CAAC;YAAE,OAAO;QAClD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,IAAI,MAAM,UAAU,CAAC,WAAW,EAAC,OAAO,CAAC;YAAE,OAAO;QAClD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,IAAI,MAAM,UAAU,CAAC,WAAW,EAAC,OAAO,CAAC;YAAE,OAAO;QAClD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,iDAAiD,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,OAAO;QACL,eAAe;QACf,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAC,EAAC,MAAM,EAAC,CAAoB;QAC3D,KAAK,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAoB;QAClD,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC;oBAAC,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,sBAAsB,CAAC,CAAC;gBAAC,CAAC;gBACnE,OAAO,KAAK,EAAE,CAAC;oBAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,CAAC;YACpC,CAAC;YACD,IAAI,CAAC;gBAAC,MAAM,UAAU,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,KAAK,CAAC;YAAC,CAAC;YAChE,IAAI,CAAC;gBAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,KAAK,CAAC;YAAC,CAAC;YACpE,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { fork, type ChildProcess } from 'node:child_process';\nimport { fileURLToPath } from 'node:url';\nimport { delimiter } from 'node:path';\nimport { AgentError, type ErrorInfo } from '../errors.js';\nimport type { DriverInput } from './types.js';\nimport type { ManagedNativeSession } from './types.js';\nimport type { HarnessKind } from '../sdk/types.js';\nimport { createSessionLauncher } from './session-launcher.js';\n\ninterface WorkerClientOptions {\n  workerModule?: URL;\n  shutdownTimeoutMs?: number;\n}\n\nconst closeResponseTimeoutMs = 15_000;\nconst shutdownTimeoutMs = 1_000;\n\nfunction waitWithin(promise: Promise<unknown>, timeout: number): Promise<boolean> {\n  return new Promise(resolve => {\n    const timer = setTimeout(() => resolve(false),timeout);\n    promise.then(\n      () => { clearTimeout(timer); resolve(true); },\n      () => { clearTimeout(timer); resolve(true); },\n    );\n  });\n}\n\nfunction withTimeout<T>(promise: Promise<T>, timeout: number): Promise<T> {\n  return new Promise((resolve,reject) => {\n    const timer = setTimeout(() => reject(new AgentError('HARNESS_FAILED','The session worker did not complete cleanup.')),timeout);\n    promise.then(\n      value => { clearTimeout(timer); resolve(value); },\n      error => { clearTimeout(timer); reject(error); },\n    );\n  });\n}\n\nexport async function createWorker(input: DriverInput, options: WorkerClientOptions = {}): Promise<ManagedNativeSession> {\n  const launcher = await createSessionLauncher(input.env.AGENT_STATE_DIR!,input.token);\n  const workerModule = options.workerModule ?? new URL(`./worker.${import.meta.url.endsWith('.ts') ? 'ts' : 'js'}`, import.meta.url);\n  const extension = workerModule.pathname.endsWith('.ts') ? 'ts' : 'js';\n  let child: ChildProcess;\n  try {\n    child = fork(fileURLToPath(workerModule), [], {\n      cwd: input.cwd, env: {...input.env,AGENT_PARENT_TOKEN:input.token,AGENT_CLI_PATH:launcher.path,\n        PATH:launcher.directory + delimiter + (input.env.PATH ?? '')},\n      execArgv: extension === 'ts' ? ['--import', import.meta.resolve('tsx')] : [],\n      stdio: ['ignore','ignore','ignore','ipc'],\n    });\n  } catch (error) { await launcher.close(); throw error; }\n  let nextId = 1;\n  const pending = new Map<number, {resolve(value:unknown):void;reject(error:Error):void}>();\n  let exited = false;\n  let markExited!: () => void;\n  const processExit = new Promise<void>(resolve => { markExited = resolve; });\n  const exit = () => {\n    if (exited) return;\n    exited = true;\n    markExited();\n    void launcher.close().catch(() => {}).finally(() => {\n      for (const waiting of pending.values()) waiting.reject(new AgentError('HARNESS_FAILED','The session worker exited.'));\n      pending.clear();\n    });\n  };\n  child.once('error', exit); child.once('exit', exit);\n  child.on('message', (message: {id:number;result?:unknown;error?:ErrorInfo}) => {\n    const request = pending.get(message.id);\n    if (!request) return;\n    pending.delete(message.id);\n    if (message.error) request.reject(new AgentError(message.error.code, message.error.message));\n    else request.resolve(message.result);\n  });\n  const request = (method:string, extra:Record<string,unknown> = {}) => new Promise<unknown>((resolve,reject) => {\n    if (exited) { reject(new AgentError('HARNESS_FAILED','The session worker is unavailable.')); return; }\n    const id = nextId++;\n    pending.set(id,{resolve,reject});\n    child.send({id,method,...extra}, error => { if (error) { pending.delete(id); reject(new AgentError('HARNESS_FAILED','Cannot reach the session worker.')); } });\n  });\n  let selectedHarness: HarnessKind;\n  try { selectedHarness = await request('open',{input}) as HarnessKind; } catch (error) { child.kill(); await launcher.close(); throw error; }\n  const stopWorker = async () => {\n    if (exited) return;\n    if (child.connected) try { child.disconnect(); } catch { /* Continue to termination escalation. */ }\n    const timeout = options.shutdownTimeoutMs ?? shutdownTimeoutMs;\n    if (await waitWithin(processExit,timeout)) return;\n    child.kill('SIGTERM');\n    if (await waitWithin(processExit,timeout)) return;\n    child.kill('SIGKILL');\n    if (await waitWithin(processExit,timeout)) return;\n    throw new AgentError('HARNESS_FAILED','The session worker did not confirm termination.');\n  };\n  return {\n    selectedHarness,\n    turn: prompt => request('turn',{prompt}) as Promise<string>,\n    steer: async prompt => { await request('steer',{prompt}); },\n    interrupt: async () => { await request('interrupt'); },\n    resume: () => request('resume') as Promise<string>,\n    close: async () => {\n      let failure: unknown;\n      if (!exited) {\n        try { await withTimeout(request('close'),closeResponseTimeoutMs); }\n        catch (error) { failure = error; }\n      }\n      try { await stopWorker(); } catch (error) { failure ??= error; }\n      try { await launcher.close(); } catch (error) { failure ??= error; }\n      if (failure) throw failure;\n    },\n  };\n}\n"]}

package/dist/runtime/worker-server.d.ts

@@ -0,0 +1,7 @@
+import type { ExecutionDefinition } from '../adapters/types.js';
+interface WorkerServerDependencies {
+    removeLauncherDirectory?(path: string): Promise<void>;
+}
+export declare function delegationInstructions(definition: ExecutionDefinition, launcherPath: string): string;
+export declare function startWorker(dependencies?: WorkerServerDependencies): void;
+export {};

package/dist/runtime/worker-server.js

@@ -0,0 +1,101 @@
+import { dirname } from 'node:path';
+import { rm } from 'node:fs/promises';
+import { loadExecutionDefinition } from './definition.js';
+import { loadAccess } from '../config/access.js';
+import { errorInfo } from '../errors.js';
+import { selectNative } from './select-native.js';
+import { NativeOwner } from './native-owner.js';
+import { shellQuote } from '../shell.js';
+export function delegationInstructions(definition, launcherPath) {
+    const children = Object.entries(definition.subagents ?? {});
+    if (children.length === 0)
+        return definition.instructions;
+    const launcher = shellQuote(launcherPath);
+    return definition.instructions + '\n\nAvailable delegated agents:\n' +
+        children.map(([name, child]) => `- subagent:${name}: ${child.description}`).join('\n') +
+        '\nOnly the listed delegated agents are authorized. Do not infer native background-command support from the ' +
+        'harness name, and do not invent native tool parameters.\n' +
+        '\nCopy the launcher path and its quoting exactly from the command below. Do not shorten or replace the path. ' +
+        'Replace only the angle-bracket arguments. Use --prompt-file instead of --prompt when needed.\n' +
+        'When the native host is known to support background commands, use one ordinary run through those controls, ' +
+        'continue independent work, and later collect that hosted command\'s output:\n' +
+        `\n\`\`\`sh\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\n\`\`\`\n` +
+        'That ordinary run already observes the first response. Do not invoke a separate Subharness wait or an ' +
+        'unconditional status for it.\n' +
+        'If native background-command support is unavailable or uncertain, use the detached fallback:\n' +
+        `\n\`\`\`sh\n${launcher} run subagent:<name> --detach --cwd <existing-directory> --prompt <task>\n\`\`\`\n` +
+        'Retain the returned task and session identifiers, continue independent work, and later collect the result with wait:\n' +
+        `\n\`\`\`sh\n${launcher} wait <task-id>\n\`\`\`\n` +
+        'Use status only when a snapshot or additional state is needed:\n' +
+        `\n\`\`\`sh\n${launcher} status <task-id> --full\n\`\`\`\n` +
+        'Confirm its terminal outcome. Detached admission is not completion, and shell `&` does not replace the ' +
+        'managed task record. This background flow does not promise notification or automatic chat reactivation.\n' +
+        'If native permissions block the launcher or coordinator connection, report the exact blocked operation. ' +
+        'Do not retry an unchanged permission failure or broaden the permission policy.\n' +
+        'For follow-ups, queue, steer, interrupt, wait, status, and cancellation, read the help:\n' +
+        `\n\`\`\`sh\n${launcher} --help\n\`\`\`\n` +
+        'Include needed task context; child sessions do not inherit your conversation.';
+}
+export function startWorker(dependencies = {}) {
+    const removeLauncherDirectory = dependencies.removeLauncherDirectory ??
+        ((path) => rm(path, { recursive: true, force: true }));
+    let native;
+    const owner = new NativeOwner();
+    const launcherDirectory = dirname(process.env.AGENT_CLI_PATH);
+    let closing;
+    const close = () => closing ??= (async () => {
+        try {
+            await owner.close();
+        }
+        finally {
+            await removeLauncherDirectory(launcherDirectory);
+        }
+    })();
+    const reply = (message) => { if (process.connected)
+        process.send?.(message, () => { }); };
+    process.on('message', async (message) => {
+        if (message.method === 'close') {
+            try {
+                await close();
+                reply({ id: message.id, result: null });
+            }
+            catch (error) {
+                reply({ id: message.id, error: errorInfo(error) });
+            }
+            finally {
+                if (process.connected)
+                    process.disconnect();
+            }
+            return;
+        }
+        try {
+            let result;
+            if (message.method === 'open') {
+                let selectedHarness;
+                native = await owner.open(async () => {
+                    const input = message.input;
+                    const definition = await loadExecutionDefinition(input.reference);
+                    const instructions = delegationInstructions(definition, process.env.AGENT_CLI_PATH);
+                    return selectNative({ ...definition, instructions }, input.cwd, process.env, await loadAccess(input.cwd), undefined, harness => { selectedHarness = harness; });
+                });
+                result = selectedHarness;
+            }
+            else if (message.method === 'turn')
+                result = await native.turn(message.prompt);
+            else if (message.method === 'steer')
+                result = await native.steer(message.prompt);
+            else if (message.method === 'interrupt')
+                result = await native.interrupt();
+            else if (message.method === 'resume')
+                result = await native.resume();
+            else
+                throw new Error('Unknown worker operation');
+            reply({ id: message.id, result: result ?? null });
+        }
+        catch (error) {
+            reply({ id: message.id, error: errorInfo(error) });
+        }
+    });
+    process.on('disconnect', () => { void close().catch(() => { }).finally(() => process.exit()); });
+}
+//# sourceMappingURL=worker-server.js.map

package/dist/runtime/worker-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-server.js","sourceRoot":"","sources":["../../src/runtime/worker-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,UAAU,sBAAsB,CAAC,UAA+B,EAAE,YAAoB;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,YAAY,CAAC;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,YAAY,GAAG,mCAAmC;QAClE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtF,6GAA6G;QAC7G,2DAA2D;QAC3D,+GAA+G;QAC/G,gGAAgG;QAChG,6GAA6G;QAC7G,+EAA+E;QAC/E,eAAe,QAAQ,2EAA2E;QAClG,wGAAwG;QACxG,gCAAgC;QAChC,gGAAgG;QAChG,eAAe,QAAQ,oFAAoF;QAC3G,wHAAwH;QACxH,eAAe,QAAQ,2BAA2B;QAClD,kEAAkE;QAClE,eAAe,QAAQ,oCAAoC;QAC3D,yGAAyG;QACzG,2GAA2G;QAC3G,0GAA0G;QAC1G,kFAAkF;QAClF,2FAA2F;QAC3F,eAAe,QAAQ,mBAAmB;QAC1C,+EAA+E,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,YAAY,GAA6B,EAAE;IACrE,MAAM,uBAAuB,GAAG,YAAY,CAAC,uBAAuB;QAClE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;IAC/D,IAAI,OAAkC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;gBACpB,CAAC;YAAC,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC,OAAiB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5G,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAoE,EAAE,EAAE;QACnG,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBAAC,MAAM,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;YAAC,CAAC;YAC1D,OAAO,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;YAAC,CAAC;oBACxD,CAAC;gBAAC,IAAI,OAAO,CAAC,SAAS;oBAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAe,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,eAAwC,CAAC;gBAC7C,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAM,CAAC;oBAC7B,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAClE,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;oBACrF,OAAO,YAAY,CAAC,EAAC,GAAG,UAAU,EAAC,YAAY,EAAC,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAC9G,OAAO,CAAC,EAAE,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,eAAe,CAAC;YAC3B,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;iBAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;iBAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,SAAS,EAAE,CAAC;iBACvE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,MAAM,EAAE,CAAC;;gBACjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACjD,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,IAAI,IAAI,EAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;QAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC","sourcesContent":["import { dirname } from 'node:path';\nimport { rm } from 'node:fs/promises';\nimport { loadExecutionDefinition } from './definition.js';\nimport { loadAccess } from '../config/access.js';\nimport { errorInfo } from '../errors.js';\nimport { selectNative } from './select-native.js';\nimport { NativeOwner } from './native-owner.js';\nimport type { DriverInput } from './types.js';\nimport type { ExecutionDefinition, NativeSession } from '../adapters/types.js';\nimport type { HarnessKind } from '../sdk/types.js';\nimport { shellQuote } from '../shell.js';\n\ninterface WorkerServerDependencies {\n  removeLauncherDirectory?(path: string): Promise<void>;\n}\n\nexport function delegationInstructions(definition: ExecutionDefinition, launcherPath: string): string {\n  const children = Object.entries(definition.subagents ?? {});\n  if (children.length === 0) return definition.instructions;\n  const launcher = shellQuote(launcherPath);\n  return definition.instructions + '\\n\\nAvailable delegated agents:\\n' +\n    children.map(([name, child]) => `- subagent:${name}: ${child.description}`).join('\\n') +\n    '\\nOnly the listed delegated agents are authorized. Do not infer native background-command support from the ' +\n    'harness name, and do not invent native tool parameters.\\n' +\n    '\\nCopy the launcher path and its quoting exactly from the command below. Do not shorten or replace the path. ' +\n    'Replace only the angle-bracket arguments. Use --prompt-file instead of --prompt when needed.\\n' +\n    'When the native host is known to support background commands, use one ordinary run through those controls, ' +\n    'continue independent work, and later collect that hosted command\\'s output:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n    'That ordinary run already observes the first response. Do not invoke a separate Subharness wait or an ' +\n    'unconditional status for it.\\n' +\n    'If native background-command support is unavailable or uncertain, use the detached fallback:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --detach --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n    'Retain the returned task and session identifiers, continue independent work, and later collect the result with wait:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} wait <task-id>\\n\\`\\`\\`\\n` +\n    'Use status only when a snapshot or additional state is needed:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} status <task-id> --full\\n\\`\\`\\`\\n` +\n    'Confirm its terminal outcome. Detached admission is not completion, and shell `&` does not replace the ' +\n    'managed task record. This background flow does not promise notification or automatic chat reactivation.\\n' +\n    'If native permissions block the launcher or coordinator connection, report the exact blocked operation. ' +\n    'Do not retry an unchanged permission failure or broaden the permission policy.\\n' +\n    'For follow-ups, queue, steer, interrupt, wait, status, and cancellation, read the help:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} --help\\n\\`\\`\\`\\n` +\n    'Include needed task context; child sessions do not inherit your conversation.';\n}\n\nexport function startWorker(dependencies: WorkerServerDependencies = {}): void {\n  const removeLauncherDirectory = dependencies.removeLauncherDirectory ??\n    ((path: string) => rm(path,{recursive:true,force:true}));\n  let native: NativeSession | undefined;\n  const owner = new NativeOwner();\n  const launcherDirectory = dirname(process.env.AGENT_CLI_PATH!);\n  let closing: Promise<void> | undefined;\n  const close = () => closing ??= (async () => {\n    try { await owner.close(); }\n    finally { await removeLauncherDirectory(launcherDirectory); }\n  })();\n  const reply = (message: unknown) => { if (process.connected) process.send?.(message as object, () => {}); };\n\n  process.on('message', async (message: {id:number;method:string;input?:DriverInput;prompt?:string}) => {\n    if (message.method === 'close') {\n      try { await close(); reply({id:message.id,result:null}); }\n      catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n      finally { if (process.connected) process.disconnect(); }\n      return;\n    }\n    try {\n      let result: unknown;\n      if (message.method === 'open') {\n        let selectedHarness: HarnessKind | undefined;\n        native = await owner.open(async () => {\n          const input = message.input!;\n          const definition = await loadExecutionDefinition(input.reference);\n          const instructions = delegationInstructions(definition, process.env.AGENT_CLI_PATH!);\n          return selectNative({...definition,instructions}, input.cwd, process.env, await loadAccess(input.cwd), undefined,\n            harness => { selectedHarness = harness; });\n        });\n        result = selectedHarness;\n      } else if (message.method === 'turn') result = await native!.turn(message.prompt!);\n      else if (message.method === 'steer') result = await native!.steer(message.prompt!);\n      else if (message.method === 'interrupt') result = await native!.interrupt();\n      else if (message.method === 'resume') result = await native!.resume();\n      else throw new Error('Unknown worker operation');\n      reply({id:message.id,result:result ?? null});\n    } catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n  });\n  process.on('disconnect', () => { void close().catch(() => {}).finally(() => process.exit()); });\n}\n"]}

package/dist/runtime/worker.js

@@ -1,67 +1,3 @@
-import { loadExecutionDefinition } from './definition.js';
-import { loadAccess } from '../config/access.js';
-import { errorInfo } from '../errors.js';
-import { selectNative } from './select-native.js';
-import { NativeOwner } from './native-owner.js';
-import { dirname } from 'node:path';
-import { rm } from 'node:fs/promises';
-import { shellQuote } from '../shell.js';
-let native;
-const owner = new NativeOwner();
-const launcherDirectory = dirname(process.env.AGENT_CLI_PATH);
-let closing;
-const close = () => closing ??= (async () => {
-    try {
-        await owner.close();
-    }
-    finally {
-        await rm(launcherDirectory, { recursive: true, force: true });
-    }
-})();
-const reply = (message) => { if (process.connected)
-    process.send?.(message, () => { }); };
-process.on('message', async (message) => {
-    try {
-        let result;
-        if (message.method === 'open') {
-            native = await owner.open(async () => {
-                const input = message.input;
-                const definition = await loadExecutionDefinition(input.reference);
-                const children = Object.entries(definition.subagents ?? {});
-                const launcher = children.length ? shellQuote(process.env.AGENT_CLI_PATH) : '';
-                const instructions = children.length ? definition.instructions + '\n\nAvailable delegated agents:\n' +
-                    children.map(([name, child]) => `- subagent:${name}: ${child.description}`).join('\n') +
-                    '\nCopy the launcher path and its quoting exactly from the command below. Do not shorten or replace the path. ' +
-                    'Replace only the angle-bracket arguments. Use --prompt-file instead of --prompt when needed.\n' +
-                    `\n\`\`\`sh\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\n\`\`\`\n` +
-                    'For follow-ups, queue, steer, interrupt, wait, and cancellation, read the help:\n' +
-                    `\n\`\`\`sh\n${launcher} --help\n\`\`\`\n` +
-                    'Include needed task context; child sessions do not inherit your conversation.' : definition.instructions;
-                return selectNative({ ...definition, instructions }, input.cwd, process.env, await loadAccess(input.cwd));
-            });
-        }
-        else if (message.method === 'turn')
-            result = await native.turn(message.prompt);
-        else if (message.method === 'steer')
-            result = await native.steer(message.prompt);
-        else if (message.method === 'interrupt')
-            result = await native.interrupt();
-        else if (message.method === 'resume')
-            result = await native.resume();
-        else if (message.method === 'close') {
-            await close();
-            reply({ id: message.id, result: null });
-            if (process.connected)
-                process.disconnect();
-            return;
-        }
-        else
-            throw new Error('Unknown worker operation');
-        reply({ id: message.id, result: result ?? null });
-    }
-    catch (error) {
-        reply({ id: message.id, error: errorInfo(error) });
-    }
-});
-process.on('disconnect', () => { void close().catch(() => { }).finally(() => process.exit()); });
+import { startWorker } from './worker-server.js';
+startWorker();
 //# sourceMappingURL=worker.js.map

package/dist/runtime/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/runtime/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,IAAI,MAAiC,CAAC;AACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;AAChC,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;AAC/D,IAAI,OAAkC,CAAC;AACvC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;IAC1C,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;YACpB,CAAC;QAAC,MAAM,EAAE,CAAC,iBAAiB,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;IAAC,CAAC;AACtE,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,SAAS;IAAE,OAAO,CAAC,IAAI,EAAE,CAAC,OAAiB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5G,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAoE,EAAE,EAAE;IACnG,IAAI,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAM,CAAC;gBAC7B,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,GAAG,mCAAmC;oBAClG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtF,+GAA+G;oBAC/G,gGAAgG;oBAChG,eAAe,QAAQ,2EAA2E;oBAClG,mFAAmF;oBACnF,eAAe,QAAQ,mBAAmB;oBAC1C,+EAA+E,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;gBAC5G,OAAO,YAAY,CAAC,EAAC,GAAG,UAAU,EAAC,YAAY,EAAC,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACvG,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,GAAG,MAAM,MAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;aAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,GAAG,MAAM,MAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;aAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,MAAM,GAAG,MAAM,MAAO,CAAC,SAAS,EAAE,CAAC;aACvE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,GAAG,MAAM,MAAO,CAAC,MAAM,EAAE,CAAC;aACjE,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;YAAC,IAAI,OAAO,CAAC,SAAS;gBAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;;YAC3I,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,IAAI,IAAI,EAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;IAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { loadExecutionDefinition } from './definition.js';\nimport { loadAccess } from '../config/access.js';\nimport { errorInfo } from '../errors.js';\nimport { selectNative } from './select-native.js';\nimport { NativeOwner } from './native-owner.js';\nimport type { DriverInput } from './types.js';\nimport type { NativeSession } from '../adapters/types.js';\nimport { dirname } from 'node:path';\nimport { rm } from 'node:fs/promises';\nimport { shellQuote } from '../shell.js';\n\nlet native: NativeSession | undefined;\nconst owner = new NativeOwner();\nconst launcherDirectory = dirname(process.env.AGENT_CLI_PATH!);\nlet closing: Promise<void> | undefined;\nconst close = () => closing ??= (async () => {\n  try { await owner.close(); }\n  finally { await rm(launcherDirectory,{recursive:true,force:true}); }\n})();\nconst reply = (message: unknown) => { if (process.connected) process.send?.(message as object, () => {}); };\nprocess.on('message', async (message: {id:number;method:string;input?:DriverInput;prompt?:string}) => {\n  try {\n    let result: unknown;\n    if (message.method === 'open') {\n      native = await owner.open(async () => {\n      const input = message.input!;\n      const definition = await loadExecutionDefinition(input.reference);\n      const children = Object.entries(definition.subagents ?? {});\n      const launcher = children.length ? shellQuote(process.env.AGENT_CLI_PATH!) : '';\n      const instructions = children.length ? definition.instructions + '\\n\\nAvailable delegated agents:\\n' +\n        children.map(([name, child]) => `- subagent:${name}: ${child.description}`).join('\\n') +\n        '\\nCopy the launcher path and its quoting exactly from the command below. Do not shorten or replace the path. ' +\n        'Replace only the angle-bracket arguments. Use --prompt-file instead of --prompt when needed.\\n' +\n        `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n        'For follow-ups, queue, steer, interrupt, wait, and cancellation, read the help:\\n' +\n        `\\n\\`\\`\\`sh\\n${launcher} --help\\n\\`\\`\\`\\n` +\n        'Include needed task context; child sessions do not inherit your conversation.' : definition.instructions;\n      return selectNative({...definition,instructions}, input.cwd, process.env, await loadAccess(input.cwd));\n      });\n    } else if (message.method === 'turn') result = await native!.turn(message.prompt!);\n    else if (message.method === 'steer') result = await native!.steer(message.prompt!);\n    else if (message.method === 'interrupt') result = await native!.interrupt();\n    else if (message.method === 'resume') result = await native!.resume();\n    else if (message.method === 'close') { await close(); reply({id:message.id,result:null}); if (process.connected) process.disconnect(); return; }\n    else throw new Error('Unknown worker operation');\n    reply({id:message.id,result:result ?? null});\n  } catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n});\nprocess.on('disconnect', () => { void close().catch(() => {}).finally(() => process.exit()); });\n"]}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/runtime/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,WAAW,EAAE,CAAC","sourcesContent":["import { startWorker } from './worker-server.js';\n\nstartWorker();\n"]}

package/dist/sdk/definitions.js

@@ -1,18 +1,25 @@
 import { invalid, nonempty, object, validName } from "./validation.js";
+import { permissionOptionFields, validateHarnessPermissions } from "./permission-validation.js";
 import { validateTool } from "./tools.js";
-function validateHarness(value, configured = false) {
-    object(value, configured ? ["kind", "model", "effort", "fast"] : ["model", "effort", "fast"]);
+function validateHarness(value, configured = false, expectedKind) {
+    object(value);
+    const candidate = configured ? value.kind : expectedKind;
+    if (candidate !== "codex" && candidate !== "claudeCode" && candidate !== "fx")
+        invalid("Unsupported harness kind.");
+    const kind = candidate;
+    const fields = ["model", "effort"];
+    if (kind === "codex" || kind === "claudeCode")
+        fields.push("fast");
+    fields.push(...permissionOptionFields(kind));
+    object(value, configured ? ["kind", ...fields] : fields);
     nonempty(value.model, "Model");
     if (value.effort !== undefined)
         nonempty(value.effort, "Effort");
     if (value.fast !== undefined && typeof value.fast !== "boolean")
         invalid("fast must be a boolean.");
-    if (configured && value.kind !== "codex" && value.kind !== "claudeCode" && value.kind !== "fx")
-        invalid("Unsupported harness kind.");
-    if (configured && value.kind === "fx" && "fast" in value)
-        invalid("Unknown configuration field.");
     if (configured && value.kind === "claudeCode")
         validateClaudeEffort(value.effort);
+    validateHarnessPermissions(kind, value);
 }
 function validateClaudeEffort(effort) {
     if (effort !== undefined && !["low", "medium", "high", "xhigh", "max"].includes(effort)) {
@@ -20,19 +27,22 @@ function validateClaudeEffort(effort) {
     }
 }
 export function codex(options) {
-    validateHarness(options);
+    validateHarness(options, false, "codex");
     return Object.freeze({ ...options, kind: "codex", fast: options.fast ?? false });
 }
 export function claudeCode(options) {
-    validateHarness(options);
+    validateHarness(options, false, "claudeCode");
     validateClaudeEffort(options.effort);
-    return Object.freeze({ ...options, kind: "claudeCode", fast: options.fast ?? false });
+    return Object.freeze({
+        ...options,
+        ...(options.allowedTools ? { allowedTools: Object.freeze([...options.allowedTools]) } : {}),
+        ...(options.disallowedTools ? { disallowedTools: Object.freeze([...options.disallowedTools]) } : {}),
+        kind: "claudeCode",
+        fast: options.fast ?? false,
+    });
 }
 export function fx(options) {
-    object(options, ["model", "effort"]);
-    nonempty(options.model, "Model");
-    if (options.effort !== undefined)
-        nonempty(options.effort, "Effort");
+    validateHarness(options, false, "fx");
     return Object.freeze({ ...options, kind: "fx" });
 }
 export function agent(definition) {

package/dist/sdk/definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/sdk/definitions.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,SAAS,eAAe,CAAC,KAAc,EAAE,UAAU,GAAG,KAAK;IACzD,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9F,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpG,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACrI,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAClG,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAe;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,OAAkB;IACnC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,UAA2B;IAC/C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,GAAG,EAAW;IAC1E,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IACxF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC/F,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACpE,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type {\n  AgentDefinition,\n  ClaudeCodeConfig,\n  ClaudeCodeOptions,\n  CodexConfig,\n  CodexOptions,\n  FxConfig,\n  FxOptions,\n  HarnessConfig,\n} from \"./types.js\";\nimport { invalid, nonempty, object, validName } from \"./validation.js\";\nimport { validateTool } from \"./tools.js\";\n\nfunction validateHarness(value: unknown, configured = false): void {\n  object(value, configured ? [\"kind\", \"model\", \"effort\", \"fast\"] : [\"model\", \"effort\", \"fast\"]);\n  nonempty(value.model, \"Model\");\n  if (value.effort !== undefined) nonempty(value.effort, \"Effort\");\n  if (value.fast !== undefined && typeof value.fast !== \"boolean\") invalid(\"fast must be a boolean.\");\n  if (configured && value.kind !== \"codex\" && value.kind !== \"claudeCode\" && value.kind !== \"fx\") invalid(\"Unsupported harness kind.\");\n  if (configured && value.kind === \"fx\" && \"fast\" in value) invalid(\"Unknown configuration field.\");\n  if (configured && value.kind === \"claudeCode\") validateClaudeEffort(value.effort);\n}\n\nfunction validateClaudeEffort(effort: unknown): void {\n  if (effort !== undefined && ![\"low\", \"medium\", \"high\", \"xhigh\", \"max\"].includes(effort as string)) {\n    invalid(\"Claude effort must be low, medium, high, xhigh, or max.\");\n  }\n}\n\nexport function codex(options: CodexOptions): CodexConfig {\n  validateHarness(options);\n  return Object.freeze({ ...options, kind: \"codex\", fast: options.fast ?? false });\n}\n\nexport function claudeCode(options: ClaudeCodeOptions): ClaudeCodeConfig {\n  validateHarness(options);\n  validateClaudeEffort(options.effort);\n  return Object.freeze({ ...options, kind: \"claudeCode\", fast: options.fast ?? false });\n}\n\nexport function fx(options: FxOptions): FxConfig {\n  object(options, [\"model\", \"effort\"]);\n  nonempty(options.model, \"Model\");\n  if (options.effort !== undefined) nonempty(options.effort, \"Effort\");\n  return Object.freeze({ ...options, kind: \"fx\" });\n}\n\nexport function agent(definition: AgentDefinition): AgentDefinition {\n  validateAgent(definition);\n  return Object.freeze({\n    ...definition,\n    ...(Array.isArray(definition.harness) ? { harness: Object.freeze([...definition.harness]) } : {}),\n    ...(definition.tools ? { tools: Object.freeze({ ...definition.tools }) } : {}),\n    ...(definition.subagents ? { subagents: Object.freeze({ ...definition.subagents }) } : {}),\n  });\n}\n\nexport function validateAgent(value: unknown, ancestors = new Set<unknown>()): asserts value is AgentDefinition {\n  object(value, [\"name\", \"description\", \"instructions\", \"harness\", \"tools\", \"subagents\"]);\n  if (ancestors.has(value)) invalid(\"Subagent definitions cannot contain recursive references.\");\n  validName(value.name);\n  nonempty(value.description, \"Description\");\n  nonempty(value.instructions, \"Instructions\");\n  const harnesses = Array.isArray(value.harness) ? value.harness : [value.harness];\n  if (!harnesses.length) invalid(\"At least one harness is required.\");\n  harnesses.forEach((harness) => validateHarness(harness, true));\n  if (value.tools !== undefined) {\n    object(value.tools);\n    Object.keys(value.tools).forEach(validName);\n    Object.values(value.tools).forEach(validateTool);\n  }\n  if (value.subagents !== undefined) {\n    object(value.subagents);\n    const next = new Set(ancestors).add(value);\n    for (const [name, child] of Object.entries(value.subagents)) {\n      validName(name);\n      validateAgent(child, next);\n    }\n  }\n}\n"]}
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/sdk/definitions.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,SAAS,eAAe,CAAC,KAAc,EAAE,UAAU,GAAG,KAAK,EAAE,YAAoC;IAC/F,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACpH,MAAM,IAAI,GAA0B,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpG,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClF,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAe;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC9C,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,OAAO;QACV,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,OAAkB;IACnC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,UAA2B;IAC/C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,GAAG,EAAW;IAC1E,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IACxF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC/F,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACpE,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type {\n  AgentDefinition,\n  ClaudeCodeConfig,\n  ClaudeCodeOptions,\n  CodexConfig,\n  CodexOptions,\n  FxConfig,\n  FxOptions,\n  HarnessConfig,\n} from \"./types.js\";\nimport { invalid, nonempty, object, validName } from \"./validation.js\";\nimport { permissionOptionFields, validateHarnessPermissions } from \"./permission-validation.js\";\nimport { validateTool } from \"./tools.js\";\n\nfunction validateHarness(value: unknown, configured = false, expectedKind?: HarnessConfig[\"kind\"]): void {\n  object(value);\n  const candidate = configured ? value.kind : expectedKind;\n  if (candidate !== \"codex\" && candidate !== \"claudeCode\" && candidate !== \"fx\") invalid(\"Unsupported harness kind.\");\n  const kind: HarnessConfig[\"kind\"] = candidate;\n  const fields = [\"model\", \"effort\"];\n  if (kind === \"codex\" || kind === \"claudeCode\") fields.push(\"fast\");\n  fields.push(...permissionOptionFields(kind));\n  object(value, configured ? [\"kind\", ...fields] : fields);\n  nonempty(value.model, \"Model\");\n  if (value.effort !== undefined) nonempty(value.effort, \"Effort\");\n  if (value.fast !== undefined && typeof value.fast !== \"boolean\") invalid(\"fast must be a boolean.\");\n  if (configured && value.kind === \"claudeCode\") validateClaudeEffort(value.effort);\n  validateHarnessPermissions(kind, value);\n}\n\nfunction validateClaudeEffort(effort: unknown): void {\n  if (effort !== undefined && ![\"low\", \"medium\", \"high\", \"xhigh\", \"max\"].includes(effort as string)) {\n    invalid(\"Claude effort must be low, medium, high, xhigh, or max.\");\n  }\n}\n\nexport function codex(options: CodexOptions): CodexConfig {\n  validateHarness(options, false, \"codex\");\n  return Object.freeze({ ...options, kind: \"codex\", fast: options.fast ?? false });\n}\n\nexport function claudeCode(options: ClaudeCodeOptions): ClaudeCodeConfig {\n  validateHarness(options, false, \"claudeCode\");\n  validateClaudeEffort(options.effort);\n  return Object.freeze({\n    ...options,\n    ...(options.allowedTools ? { allowedTools: Object.freeze([...options.allowedTools]) } : {}),\n    ...(options.disallowedTools ? { disallowedTools: Object.freeze([...options.disallowedTools]) } : {}),\n    kind: \"claudeCode\",\n    fast: options.fast ?? false,\n  });\n}\n\nexport function fx(options: FxOptions): FxConfig {\n  validateHarness(options, false, \"fx\");\n  return Object.freeze({ ...options, kind: \"fx\" });\n}\n\nexport function agent(definition: AgentDefinition): AgentDefinition {\n  validateAgent(definition);\n  return Object.freeze({\n    ...definition,\n    ...(Array.isArray(definition.harness) ? { harness: Object.freeze([...definition.harness]) } : {}),\n    ...(definition.tools ? { tools: Object.freeze({ ...definition.tools }) } : {}),\n    ...(definition.subagents ? { subagents: Object.freeze({ ...definition.subagents }) } : {}),\n  });\n}\n\nexport function validateAgent(value: unknown, ancestors = new Set<unknown>()): asserts value is AgentDefinition {\n  object(value, [\"name\", \"description\", \"instructions\", \"harness\", \"tools\", \"subagents\"]);\n  if (ancestors.has(value)) invalid(\"Subagent definitions cannot contain recursive references.\");\n  validName(value.name);\n  nonempty(value.description, \"Description\");\n  nonempty(value.instructions, \"Instructions\");\n  const harnesses = Array.isArray(value.harness) ? value.harness : [value.harness];\n  if (!harnesses.length) invalid(\"At least one harness is required.\");\n  harnesses.forEach((harness) => validateHarness(harness, true));\n  if (value.tools !== undefined) {\n    object(value.tools);\n    Object.keys(value.tools).forEach(validName);\n    Object.values(value.tools).forEach(validateTool);\n  }\n  if (value.subagents !== undefined) {\n    object(value.subagents);\n    const next = new Set(ancestors).add(value);\n    for (const [name, child] of Object.entries(value.subagents)) {\n      validName(name);\n      validateAgent(child, next);\n    }\n  }\n}\n"]}

package/dist/sdk/permission-validation.d.ts

@@ -0,0 +1,4 @@
+import type { HarnessKind } from "./types.js";
+export declare function permissionOptionFields(kind: HarnessKind): readonly string[];
+/** Validates only native permission fields, ignoring unrelated caller-owned fields. */
+export declare function validateHarnessPermissions(kind: HarnessKind, value: Readonly<Record<string, unknown>>): void;

package/dist/sdk/permission-validation.js

@@ -0,0 +1,55 @@
+import { invalid } from "./validation.js";
+const fields = {
+    codex: Object.freeze(["approvalPolicy", "sandboxMode", "networkAccessEnabled"]),
+    claudeCode: Object.freeze(["permissionMode", "allowedTools", "disallowedTools"]),
+    fx: Object.freeze(["permissionMode"]),
+};
+const allFields = new Set(Object.values(fields).flat());
+export function permissionOptionFields(kind) {
+    return fields[kind];
+}
+/** Validates only native permission fields, ignoring unrelated caller-owned fields. */
+export function validateHarnessPermissions(kind, value) {
+    const supported = new Set(fields[kind]);
+    if ([...allFields].some(field => Object.hasOwn(value, field) && !supported.has(field))) {
+        invalid("Unknown configuration field.");
+    }
+    if (kind === "codex") {
+        if (value.approvalPolicy !== undefined && !["never", "on-request", "untrusted"].includes(value.approvalPolicy)) {
+            invalid("Codex approvalPolicy must be never, on-request, or untrusted.");
+        }
+        if (value.sandboxMode !== undefined && !["read-only", "workspace-write", "danger-full-access"].includes(value.sandboxMode)) {
+            invalid("Codex sandboxMode must be read-only, workspace-write, or danger-full-access.");
+        }
+        if (value.networkAccessEnabled !== undefined && typeof value.networkAccessEnabled !== "boolean") {
+            invalid("Codex networkAccessEnabled must be a boolean.");
+        }
+        if (value.networkAccessEnabled !== undefined && value.sandboxMode !== "workspace-write") {
+            invalid("Codex networkAccessEnabled requires sandboxMode workspace-write.");
+        }
+        return;
+    }
+    if (kind === "claudeCode") {
+        if (value.permissionMode !== undefined && !["default", "acceptEdits", "bypassPermissions", "plan", "dontAsk", "auto"].includes(value.permissionMode)) {
+            invalid("Claude permissionMode is unsupported.");
+        }
+        for (const field of ["allowedTools", "disallowedTools"]) {
+            const rules = value[field];
+            if (rules === undefined)
+                continue;
+            if (!Array.isArray(rules))
+                invalid(`Claude ${field} must be an array of nonempty strings.`);
+            for (let index = 0; index < rules.length; index++) {
+                const rule = rules[index];
+                if (typeof rule !== "string" || !rule.trim()) {
+                    invalid(`Claude ${field} must be an array of nonempty strings.`);
+                }
+            }
+        }
+        return;
+    }
+    if (value.permissionMode !== undefined && !["ask", "auto", "full-access"].includes(value.permissionMode)) {
+        invalid("fx permissionMode must be ask, auto, or full-access.");
+    }
+}
+//# sourceMappingURL=permission-validation.js.map

package/dist/sdk/permission-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-validation.js","sourceRoot":"","sources":["../../src/sdk/permission-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;CACoB,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,IAAiB,EAAE,KAAwC;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YACzH,OAAO,CAAC,+DAA+D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACrI,OAAO,CAAC,8EAA8E,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAChG,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACxF,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YAC/J,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;YAC5F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;QACnH,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC","sourcesContent":["import type { HarnessKind } from \"./types.js\";\nimport { invalid } from \"./validation.js\";\n\nconst fields = {\n  codex: Object.freeze([\"approvalPolicy\", \"sandboxMode\", \"networkAccessEnabled\"]),\n  claudeCode: Object.freeze([\"permissionMode\", \"allowedTools\", \"disallowedTools\"]),\n  fx: Object.freeze([\"permissionMode\"]),\n} as const satisfies Record<HarnessKind, readonly string[]>;\n\nconst allFields = new Set(Object.values(fields).flat());\n\nexport function permissionOptionFields(kind: HarnessKind): readonly string[] {\n  return fields[kind];\n}\n\n/** Validates only native permission fields, ignoring unrelated caller-owned fields. */\nexport function validateHarnessPermissions(kind: HarnessKind, value: Readonly<Record<string, unknown>>): void {\n  const supported = new Set<string>(fields[kind]);\n  if ([...allFields].some(field => Object.hasOwn(value, field) && !supported.has(field))) {\n    invalid(\"Unknown configuration field.\");\n  }\n\n  if (kind === \"codex\") {\n    if (value.approvalPolicy !== undefined && ![\"never\", \"on-request\", \"untrusted\"].includes(value.approvalPolicy as string)) {\n      invalid(\"Codex approvalPolicy must be never, on-request, or untrusted.\");\n    }\n    if (value.sandboxMode !== undefined && ![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(value.sandboxMode as string)) {\n      invalid(\"Codex sandboxMode must be read-only, workspace-write, or danger-full-access.\");\n    }\n    if (value.networkAccessEnabled !== undefined && typeof value.networkAccessEnabled !== \"boolean\") {\n      invalid(\"Codex networkAccessEnabled must be a boolean.\");\n    }\n    if (value.networkAccessEnabled !== undefined && value.sandboxMode !== \"workspace-write\") {\n      invalid(\"Codex networkAccessEnabled requires sandboxMode workspace-write.\");\n    }\n    return;\n  }\n\n  if (kind === \"claudeCode\") {\n    if (value.permissionMode !== undefined && ![\"default\", \"acceptEdits\", \"bypassPermissions\", \"plan\", \"dontAsk\", \"auto\"].includes(value.permissionMode as string)) {\n      invalid(\"Claude permissionMode is unsupported.\");\n    }\n    for (const field of [\"allowedTools\", \"disallowedTools\"] as const) {\n      const rules = value[field];\n      if (rules === undefined) continue;\n      if (!Array.isArray(rules)) invalid(`Claude ${field} must be an array of nonempty strings.`);\n      for (let index = 0; index < rules.length; index++) {\n        const rule = rules[index];\n        if (typeof rule !== \"string\" || !rule.trim()) {\n          invalid(`Claude ${field} must be an array of nonempty strings.`);\n        }\n      }\n    }\n    return;\n  }\n\n  if (value.permissionMode !== undefined && ![\"ask\", \"auto\", \"full-access\"].includes(value.permissionMode as string)) {\n    invalid(\"fx permissionMode must be ask, auto, or full-access.\");\n  }\n}\n"]}

package/dist/sdk/types.d.ts

@@ -5,17 +5,24 @@ export interface CodexConfig {
     readonly model: string;
     readonly effort?: string;
     readonly fast: boolean;
+    readonly approvalPolicy?: "never" | "on-request" | "untrusted";
+    readonly sandboxMode?: "read-only" | "workspace-write" | "danger-full-access";
+    readonly networkAccessEnabled?: boolean;
 }
 export interface ClaudeCodeConfig {
     readonly kind: "claudeCode";
     readonly model: string;
     readonly effort?: "low" | "medium" | "high" | "xhigh" | "max";
     readonly fast: boolean;
+    readonly permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "dontAsk" | "auto";
+    readonly allowedTools?: readonly string[];
+    readonly disallowedTools?: readonly string[];
 }
 export interface FxConfig {
     readonly kind: "fx";
     readonly model: string;
     readonly effort?: string;
+    readonly permissionMode?: "ask" | "auto" | "full-access";
 }
 export type HarnessConfig = CodexConfig | ClaudeCodeConfig | (FxConfig & {
     readonly fast?: never;
@@ -24,15 +31,22 @@ export interface CodexOptions {
     readonly model: string;
     readonly effort?: string;
     readonly fast?: boolean;
+    readonly approvalPolicy?: "never" | "on-request" | "untrusted";
+    readonly sandboxMode?: "read-only" | "workspace-write" | "danger-full-access";
+    readonly networkAccessEnabled?: boolean;
 }
 export interface ClaudeCodeOptions {
     readonly model: string;
     readonly effort?: "low" | "medium" | "high" | "xhigh" | "max";
     readonly fast?: boolean;
+    readonly permissionMode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "dontAsk" | "auto";
+    readonly allowedTools?: readonly string[];
+    readonly disallowedTools?: readonly string[];
 }
 export interface FxOptions {
     readonly model: string;
     readonly effort?: string;
+    readonly permissionMode?: "ask" | "auto" | "full-access";
 }
 export interface ToolDefinition<S extends z.ZodObject = z.ZodObject> {
     readonly description: string;

package/dist/sdk/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sdk/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { z } from \"zod\";\n\nexport type HarnessKind = \"codex\" | \"claudeCode\" | \"fx\";\n\nexport interface CodexConfig {\n  readonly kind: \"codex\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast: boolean;\n}\n\nexport interface ClaudeCodeConfig {\n  readonly kind: \"claudeCode\";\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast: boolean;\n}\n\nexport interface FxConfig {\n  readonly kind: \"fx\";\n  readonly model: string;\n  readonly effort?: string;\n}\n\nexport type HarnessConfig = CodexConfig | ClaudeCodeConfig | (FxConfig & { readonly fast?: never });\n\nexport interface CodexOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast?: boolean;\n}\n\nexport interface ClaudeCodeOptions {\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast?: boolean;\n}\n\nexport interface FxOptions {\n  readonly model: string;\n  readonly effort?: string;\n}\n\nexport interface ToolDefinition<S extends z.ZodObject = z.ZodObject> {\n  readonly description: string;\n  readonly inputSchema: S;\n  readonly execute: (input: z.output<S>) => unknown | Promise<unknown>;\n}\n\nexport interface AgentDefinition {\n  readonly name: string;\n  readonly description: string;\n  readonly instructions: string;\n  readonly harness: HarnessConfig | readonly HarnessConfig[];\n  readonly tools?: Readonly<Record<string, ToolDefinition<any>>>;\n  readonly subagents?: Readonly<Record<string, AgentDefinition>>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sdk/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { z } from \"zod\";\n\nexport type HarnessKind = \"codex\" | \"claudeCode\" | \"fx\";\n\nexport interface CodexConfig {\n  readonly kind: \"codex\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast: boolean;\n  readonly approvalPolicy?: \"never\" | \"on-request\" | \"untrusted\";\n  readonly sandboxMode?: \"read-only\" | \"workspace-write\" | \"danger-full-access\";\n  readonly networkAccessEnabled?: boolean;\n}\n\nexport interface ClaudeCodeConfig {\n  readonly kind: \"claudeCode\";\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast: boolean;\n  readonly permissionMode?: \"default\" | \"acceptEdits\" | \"bypassPermissions\" | \"plan\" | \"dontAsk\" | \"auto\";\n  readonly allowedTools?: readonly string[];\n  readonly disallowedTools?: readonly string[];\n}\n\nexport interface FxConfig {\n  readonly kind: \"fx\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly permissionMode?: \"ask\" | \"auto\" | \"full-access\";\n}\n\nexport type HarnessConfig = CodexConfig | ClaudeCodeConfig | (FxConfig & { readonly fast?: never });\n\nexport interface CodexOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast?: boolean;\n  readonly approvalPolicy?: \"never\" | \"on-request\" | \"untrusted\";\n  readonly sandboxMode?: \"read-only\" | \"workspace-write\" | \"danger-full-access\";\n  readonly networkAccessEnabled?: boolean;\n}\n\nexport interface ClaudeCodeOptions {\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast?: boolean;\n  readonly permissionMode?: \"default\" | \"acceptEdits\" | \"bypassPermissions\" | \"plan\" | \"dontAsk\" | \"auto\";\n  readonly allowedTools?: readonly string[];\n  readonly disallowedTools?: readonly string[];\n}\n\nexport interface FxOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly permissionMode?: \"ask\" | \"auto\" | \"full-access\";\n}\n\nexport interface ToolDefinition<S extends z.ZodObject = z.ZodObject> {\n  readonly description: string;\n  readonly inputSchema: S;\n  readonly execute: (input: z.output<S>) => unknown | Promise<unknown>;\n}\n\nexport interface AgentDefinition {\n  readonly name: string;\n  readonly description: string;\n  readonly instructions: string;\n  readonly harness: HarnessConfig | readonly HarnessConfig[];\n  readonly tools?: Readonly<Record<string, ToolDefinition<any>>>;\n  readonly subagents?: Readonly<Record<string, AgentDefinition>>;\n}\n"]}

package/package.json

@@ -1,9 +1,6 @@
 {
   "name": "subharness",
-  "version": "0.0.1",
-  "workspaces": [
-    "apps/docs"
-  ],
+  "version": "0.0.3",
   "type": "module",
   "engines": {
     "node": ">=22.18.0"
@@ -23,29 +20,20 @@
     "sdk",
     "README.md"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.build.json && node --input-type=module -e \"import { chmodSync } from 'node:fs'; chmodSync('dist/cli/main.js', 0o755)\"",
-    "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test test/*.test.ts",
-    "check": "npm run build && npm run typecheck && npm test",
-    "dev:site": "npm run dev --workspace @subharness/docs --",
-    "build:site": "npm run build --workspace @subharness/docs",
-    "check:site": "npm run check --workspace @subharness/docs",
-    "prepack": "npm run build",
-    "check:package": "node --test test/package-consumer/package.test.mjs"
-  },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.278",
     "@modelcontextprotocol/sdk": "^1.30.0",
+    "string-width": "8.2.1",
     "tsx": "4.23.15",
     "zod": "4.6.5"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
+    "errore": "0.14.1",
     "typescript": "7.0.2"
   },
   "description": "Run native coding agents and coordinate optional specialists through a local CLI.",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vercel-labs/subharness.git"
@@ -57,5 +45,17 @@
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && node --input-type=module -e \"import { chmodSync } from 'node:fs'; chmodSync('dist/cli/main.js', 0o755)\"",
+    "typecheck": "tsc --noEmit",
+    "test": "node --import tsx --test test/*.test.ts",
+    "test:evals": "node --import tsx --test test/eval-*.test.ts",
+    "evals": "node --import tsx evals/main.ts",
+    "check": "pnpm run build && pnpm run typecheck && pnpm test",
+    "dev:site": "pnpm --filter @subharness/docs run dev",
+    "build:site": "pnpm --filter @subharness/docs run build",
+    "check:site": "pnpm --filter @subharness/docs run check",
+    "check:package": "node --test test/package-consumer/package.test.mjs"
   }
-}
+}

package/sdk/access-config.md

@@ -1,6 +1,6 @@
 # Personal Access Configuration
 
-The optional `.agents/agents.local.json` file selects access independently of versioned agent definitions. In linked Git worktrees it is read from the main checkout. Without Git, it is read from the execution project root. Global definitions still use the selected project's access preferences.
+The optional `.subharness/agents.local.json` file selects access independently of versioned agent definitions. In linked Git worktrees it is read from the main checkout. Without Git, it is read from the execution project root. Global definitions still use the selected project's access preferences.
 
 ```json
 {
@@ -37,6 +37,8 @@ Without `envFile`, the named variable is read from the invoking environment. Wit
 
 Omitting `codex` or `claudeCode` retains native subscription discovery. A nonempty array replaces discovery with the listed connections in order. An empty array disables that harness. Supported keys are `codex`, `claudeCode`, and `fx`. Omitting `fx` does not enable any connection because its adapter requires explicit Gateway access; see [fx access](fx.md). Missing credentials make a connection unavailable before submission; malformed settings, malformed tokens, expired tokens, and project mismatches are errors. Only known unavailability permits advancing to another explicitly enabled connection or harness. Failures after submission never automatically migrate or replay the task.
 
+`subharness check` resolves these settings and tries eligible connections and declared harness alternatives exactly as `run` does before submission. It does not infer readiness from environment variables or duplicate adapter authentication checks. A successful check applies only to the connection and harness selected by that fallback process at that moment.
+
 ## OIDC project selection
 
 The selected project directory must contain `.vercel/project.json` with `projectId` and `orgId`. In a deployment without local linkage, `VERCEL_PROJECT_ID` and `VERCEL_ORG_ID` identify the expected project and organization when `project` is omitted. A supplied `project` always requires its explicit linkage. Token claims must match the expected project and organization and be within their validity interval. Local claim checks prevent accidental selection errors; the Gateway authenticates the token.
@@ -47,6 +49,6 @@ Gateway API keys and OIDC are distinct routes. An API key does not acquire proje
 
 ## Local file management
 
-The file can be edited directly; no library login wizard is required. Before using an existing personal settings file in Git, the CLI ensures `/.agents/agents.local.json` is excluded through the repository's local Git exclude file. A tracked personal settings file is rejected with instructions to remove it from the index. The library never copies secrets or personal settings into worktrees.
+The file can be edited directly; no library login wizard is required. Before using an existing personal settings file in Git, the CLI ensures `/.subharness/agents.local.json` is excluded through the repository's local Git exclude file. This can update Git's local exclude file during `run` or `check`. A tracked personal settings file is rejected with instructions to remove it from the index. The library never copies secrets or personal settings into worktrees. A file left at the former `.agents/agents.local.json` location is not read.
 
 Native login remains external: the CLI reports which harness needs login when no eligible access exists. It never extracts a subscription token for use by another harness. Explicit API/Gateway startup prevents ambient credentials from silently selecting a competing billing route. Native subscription access and accelerated modes remain subject to provider eligibility and spending controls; the library is not a spending cap.