langchain-agentx-python 2.3.8__py3-none-any.whl → 2.4.0__py3-none-any.whl

langchain_agentx/__init__.py

@@ -11,7 +11,7 @@ from langchain_agentx import create_loop_agent
 ```
 """
 
-__version__ = "2.3.8"
+__version__ = "2.4.0"
 
 from .mcp.call import McpToolCaller
 from .mcp.client_manager import McpClientManager, McpConnectedClient

langchain_agentx/loop/loop_abort.py

@@ -45,11 +45,23 @@ class LoopAbortSignal(Exception):
 
 
 def is_cancel_requested() -> bool:
-    """当前 RunContext 是否已请求取消（无 context 则为 False）。"""
+    """当前或祖先 RunContext 是否已请求取消（无 context 则为 False）。
+
+    祖先链：nested Parallelization ctx 下 leaf 可读到 L0 ``cancel_requested``。
+    """
     from .run_context import get_run_context
 
     ctx = get_run_context()
-    return ctx is not None and bool(ctx.cancel_requested)
+    seen: set[int] = set()
+    while ctx is not None:
+        ident = id(ctx)
+        if ident in seen:
+            break
+        seen.add(ident)
+        if bool(ctx.cancel_requested):
+            return True
+        ctx = ctx.parent
+    return False
 
 
 def abort_signal_for_phase(

langchain_agentx/loop/run_context.py

@@ -12,6 +12,9 @@ run_context.py — Workflow/Agent 结构化并发上下文（parent → child ca
     asyncio 为主；thread 仅 bounded join（无法强制中断 LLM）；anyio/trio 不保证 context 传播。
     P1：reset 失败时在仍可见 owner 的 derived logical context 内 force-clear；
     宿主 detached ingest 用 create_task_with_copied_context / run_context_scope。
+    nested Parallelization：child_contexts + 递归 cancel_tree；W4 可用 use_cancel_authority。
+    agent loop 登记：供 skill fork 同步桥 ``run_coroutine_threadsafe`` 解析父 loop
+    （ContextVar 在 ThreadPoolExecutor 上常丢失，故用进程级 stack）。
 """
 
 from __future__ import annotations
@@ -33,6 +36,81 @@ _current_run_context: ContextVar[Optional["RunContext"]] = ContextVar(
     "run_ctx", default=None
 )
 
+# 进程级父 agent loop / RunContext 栈：ThreadPoolExecutor worker 看不见 ContextVar，
+# 须 threadsafe 回父 loop（bug4）并恢复 owner 供 cancel 登记（skill-fork cancel orphan）。
+_agent_loop_lock = threading.Lock()
+_agent_loop_stack: list[asyncio.AbstractEventLoop] = []
+_agent_run_ctx_stack: list["RunContext"] = []
+
+
+def register_agent_loop(loop: asyncio.AbstractEventLoop) -> None:
+    """登记当前存活的 agent/session event loop（可嵌套；同 loop 可重复 push）。"""
+    with _agent_loop_lock:
+        _agent_loop_stack.append(loop)
+
+
+def unregister_agent_loop(loop: asyncio.AbstractEventLoop) -> None:
+    """弹出最近一次与 ``loop`` 相同的登记（LIFO；未见则 no-op）。"""
+    with _agent_loop_lock:
+        for index in range(len(_agent_loop_stack) - 1, -1, -1):
+            if _agent_loop_stack[index] is loop:
+                del _agent_loop_stack[index]
+                return
+
+
+def resolve_agent_loop(
+    *,
+    owner: RunContext | None = None,
+) -> asyncio.AbstractEventLoop | None:
+    """解析仍在跑的父 agent loop；优先 ``owner.root_task``，否则栈顶存活项。"""
+    if owner is not None:
+        try:
+            loop = owner.root_task.get_loop()
+            if not loop.is_closed() and loop.is_running():
+                return loop
+        except Exception:
+            pass
+    with _agent_loop_lock:
+        for loop in reversed(_agent_loop_stack):
+            try:
+                if not loop.is_closed() and loop.is_running():
+                    return loop
+            except Exception:
+                continue
+    return None
+
+
+def resolve_owner_run_context(
+    owner: RunContext | None = None,
+) -> RunContext | None:
+    """解析取消挂接用的 owner：显式参数 → ContextVar → 进程级 install 栈顶。"""
+    if owner is not None:
+        return owner
+    current = get_run_context()
+    if current is not None:
+        return current
+    with _agent_loop_lock:
+        if _agent_run_ctx_stack:
+            return _agent_run_ctx_stack[-1]
+    return None
+
+
+async def run_under_owner_run_context(
+    coro: Awaitable[T],
+    *,
+    owner: RunContext | None,
+) -> T:
+    """在指定 owner 的 ContextVar 下 await（threadsafe 桥恢复父 RunContext）。"""
+    if owner is None:
+        return await coro
+    if get_run_context() is owner:
+        return await coro
+    token = _current_run_context.set(owner)
+    try:
+        return await coro
+    finally:
+        _current_run_context.reset(token)
+
 
 @dataclass
 class RunContext:
@@ -41,10 +119,20 @@ class RunContext:
     root_task: asyncio.Task
     child_tasks: set[asyncio.Task] = field(default_factory=set)
     child_threads: set[threading.Thread] = field(default_factory=set)
+    # nested Parallelization/Chaining 再 install 时登记；cancel_tree 先深取消其 child_tasks。
+    # 用 list：RunContext 含 set/Task 不可哈希，不能放 set。
+    child_contexts: list["RunContext"] = field(default_factory=list, repr=False)
+    parent: Optional["RunContext"] = field(default=None, repr=False, compare=False)
     cancel_requested: bool = False
     # D-EVT-6：宿主在 cancel_tree / killAll 时写入；finish 投影读取；缺省 unknown。
     # 取值：escape | workflow_stop | kill_agents | unknown；禁止从「是否有后台」猜测。
     cancel_source: str | None = None
+    # install 时若成功 register_agent_loop，记下以便 reset 精确 unregister（勿误弹外层）。
+    _registered_agent_loop: asyncio.AbstractEventLoop | None = field(
+        default=None, repr=False, compare=False
+    )
+    # install 时是否 push 进进程级 RunContext 栈（供 worker 解析 owner）。
+    _registered_on_ctx_stack: bool = field(default=False, repr=False, compare=False)
 
     def register_child(self, task: asyncio.Task) -> None:
         self.child_tasks.add(task)
@@ -52,10 +140,42 @@ class RunContext:
     def register_child_thread(self, thread: threading.Thread) -> None:
         self.child_threads.add(thread)
 
-    async def cancel_tree(self, timeout: float = 10.0) -> None:
+    def register_child_context(self, child: "RunContext") -> None:
+        """登记 nested RunContext（install_run_context(parent=…)）。"""
+        if all(existing is not child for existing in self.child_contexts):
+            self.child_contexts.append(child)
+        child.parent = self
+
+    def cancel_authority(self) -> "RunContext":
+        """取消权威：最外层 RunContext（宿主 Stop / cancel_tree 目标）。"""
+        node: RunContext = self
+        seen: set[int] = set()
+        while node.parent is not None:
+            ident = id(node)
+            if ident in seen:
+                break
+            seen.add(ident)
+            node = node.parent
+        return node
+
+    def _mark_cancel_requested(self, *, source: str | None) -> None:
+        """本层 + 全部 nested 写入 cancel_requested（协作闸可立即看到）。"""
         self.cancel_requested = True
+        if source is not None and self.cancel_source is None:
+            self.cancel_source = source
+        for nested in list(self.child_contexts):
+            nested._mark_cancel_requested(source=source or self.cancel_source)
+
+    async def cancel_tree(self, timeout: float = 10.0) -> None:
+        """取消本层 child_tasks，并递归 nested child_contexts（W4 / leaf producer）。"""
+        self._mark_cancel_requested(source=self.cancel_source)
         deadline = time.monotonic() + timeout
 
+        # 深取消：先砍 nested 内 W4 producer，再 cancel 本层（含 nested.root_task）。
+        for nested in list(self.child_contexts):
+            remaining = max(0.0, deadline - time.monotonic())
+            await nested.cancel_tree(timeout=remaining)
+
         for child in list(self.child_tasks):
             child.cancel()
         if self.child_tasks:
@@ -128,7 +248,20 @@ def install_run_context(
         ctx = RunContext(root_task=current)
     if parent is not None:
         parent.register_child(ctx.root_task)
+        parent.register_child_context(ctx)
     token = _current_run_context.set(ctx)
+    try:
+        loop = ctx.root_task.get_loop()
+        register_agent_loop(loop)
+        ctx._registered_agent_loop = loop
+    except Exception:
+        logger.debug(
+            "register_agent_loop skipped at install_run_context",
+            exc_info=True,
+        )
+    with _agent_loop_lock:
+        _agent_run_ctx_stack.append(ctx)
+        ctx._registered_on_ctx_stack = True
     return ctx, token
 
 
@@ -139,33 +272,53 @@ def reset_run_context(token: Token, *, owner: RunContext | None = None) -> None:
     P1：若当前 logical context 仍可见 ``owner``（derived context 继承值但 token 无效），
     显式 ``set(None)`` 清理本层，避免 workflow finally 后 run_ctx 悬挂。
     """
+    source = owner if owner is not None else get_run_context()
+    loop_to_unreg: asyncio.AbstractEventLoop | None = None
+    ctx_to_unreg: RunContext | None = None
+    if source is not None and source._registered_agent_loop is not None:
+        loop_to_unreg = source._registered_agent_loop
+        source._registered_agent_loop = None
+    if source is not None and source._registered_on_ctx_stack:
+        ctx_to_unreg = source
+        source._registered_on_ctx_stack = False
+
     try:
-        _current_run_context.reset(token)
-        return
-    except ValueError:
-        pass
+        try:
+            _current_run_context.reset(token)
+            return
+        except ValueError:
+            pass
+
+        current = get_run_context()
+        if owner is not None and current is owner:
+            _current_run_context.set(None)
+            logger.warning(
+                "run_ctx force-cleared: token reset failed in derived logical context "
+                "(task=%r)",
+                owner.root_task.get_name(),
+            )
+            return
 
-    current = get_run_context()
-    if owner is not None and current is owner:
-        _current_run_context.set(None)
-        logger.warning(
-            "run_ctx force-cleared: token reset failed in derived logical context "
-            "(task=%r)",
-            owner.root_task.get_name(),
-        )
-        return
+        if owner is not None and owner.root_task.done():
+            logger.debug(
+                "run_ctx reset skipped: owner task %r already done; context discarded",
+                owner.root_task.get_name(),
+            )
+            return
 
-    if owner is not None and owner.root_task.done():
-        logger.debug(
-            "run_ctx reset skipped: owner task %r already done; context discarded",
-            owner.root_task.get_name(),
+        logger.warning(
+            "run_ctx reset skipped: token created in a different context",
+            exc_info=True,
         )
-        return
-
-    logger.warning(
-        "run_ctx reset skipped: token created in a different context",
-        exc_info=True,
-    )
+    finally:
+        if loop_to_unreg is not None:
+            unregister_agent_loop(loop_to_unreg)
+        if ctx_to_unreg is not None:
+            with _agent_loop_lock:
+                for index in range(len(_agent_run_ctx_stack) - 1, -1, -1):
+                    if _agent_run_ctx_stack[index] is ctx_to_unreg:
+                        del _agent_run_ctx_stack[index]
+                        break
 
 
 @asynccontextmanager
@@ -205,15 +358,32 @@ async def drive_async_iterator_in_current_task(
         yield item
 
 
+def resolve_cancel_authority(
+    ctx: RunContext | None = None,
+) -> RunContext | None:
+    """解析取消权威 ctx；缺省取当前 ContextVar 的 outermost。"""
+    current = ctx if ctx is not None else get_run_context()
+    if current is None:
+        return None
+    return current.cancel_authority()
+
+
 def register_spawned_task(
     task: asyncio.Task,
     *,
     owner: RunContext | None = None,
+    use_cancel_authority: bool = False,
 ) -> None:
-    """将 spawn 出的 asyncio task 注册到 RunContext（无 context 时 no-op）。"""
+    """将 spawn 出的 asyncio task 注册到 RunContext（无 context 时 no-op）。
+
+    ``use_cancel_authority=True``：挂到 outermost（Workflow W4），避免仅挂在
+    nested Parallelization ctx 上导致 L0 ``cancel_tree`` 砍不到 producer。
+    """
     ctx = owner if owner is not None else get_run_context()
     if ctx is None:
         return
+    if use_cancel_authority:
+        ctx = ctx.cancel_authority()
     try:
         owner_loop = ctx.root_task.get_loop()
         task_loop = task.get_loop()
@@ -249,5 +419,6 @@ __all__ = [
     "register_spawned_task",
     "register_spawned_thread",
     "reset_run_context",
+    "resolve_cancel_authority",
     "run_context_scope",
 ]

langchain_agentx/loop/stream/loop_driver.py

@@ -11,6 +11,7 @@ loop_driver.py — Loop-aware shared stream driver.
     root closeout 捕获、synthetic error/finish、orphan tool_result repair（stream surface）。
     正常结束但缺 root on_chain_end(LangGraph) 时打 anomaly WARNING（不伪造 synthetic finish）。
     R1 反应恢复：单次 drain 内 budgeted continue 重入（S2，对齐 CC queryLoop continue）。
+    进入/退出时登记 agent loop，供 Ask 路径无 Workflow RunContext 时 fork 同步桥解析。
 """
 
 from __future__ import annotations
@@ -22,6 +23,7 @@ from typing import Any, AsyncIterator, Literal
 from langgraph.errors import GraphRecursionError
 
 from langchain_agentx.loop.loop_abort import LoopAbortSignal, is_cancel_requested
+from langchain_agentx.loop.run_context import register_agent_loop, unregister_agent_loop
 from ..exit.reason_codes import (
     TERMINAL_REASON_ABORTED_STREAMING,
     TERMINAL_REASON_ABORTED_TOOLS,
@@ -84,6 +86,8 @@ class LoopStreamDriver:
         self.result.reactive_continue_drains = 0
         current_input = dict(graph_input)
         reactive_continues = 0
+        agent_loop = asyncio.get_running_loop()
+        register_agent_loop(agent_loop)
         try:
             while True:
                 async for event in self._stream_single_drain(
@@ -113,6 +117,7 @@ class LoopStreamDriver:
                     (self.result.graph_output or {}).get("transition", {}).get("reason"),
                 )
         finally:
+            unregister_agent_loop(agent_loop)
             self._log_stream_closeout_summary()
 
     async def _stream_single_drain(

langchain_agentx/loop/subagent/orchestrator.py

@@ -666,6 +666,7 @@ class SubagentOrchestrator:
                     loader=child_loader,
                     model=runtime_ctx.model,
                     allowed_tool_names=allowed_tool_names,
+                    owner_run_ctx=get_run_context(),
                 )
 
         return AgentToolOutput(
@@ -1015,13 +1016,17 @@ class SubagentOrchestrator:
         model: Any,
         allowed_tool_names: set[str],
     ) -> Any:
-        owner_run_ctx = get_run_context()
+        from langchain_agentx.loop.run_context import resolve_owner_run_context
+
+        # worker 上 ContextVar 常空；进程级 install 栈仍可解析父 RunContext（cancel 挂接）。
+        owner_run_ctx = resolve_owner_run_context()
         return _run_coroutine_sync(
             run_subagent(
                 ctx=subagent_ctx,
                 loader=loader,
                 model=model,
                 allowed_tool_names=allowed_tool_names,
+                owner_run_ctx=owner_run_ctx,
             ),
             owner_run_ctx=owner_run_ctx,
         )

langchain_agentx/loop/subagent/runner.py

@@ -119,23 +119,43 @@ def _is_abort_like_terminal_reason(reason: str | None) -> bool:
 
 
 def _run_coroutine_sync(coro: Any, *, owner_run_ctx: Any | None = None) -> Any:
-    """在无 running loop 的同步上下文用 asyncio.run 跑协程。
-
-    P0（Doc-35）：已有 running loop 时禁止 Thread+asyncio.run（C2）；须改走
-    ``await`` / ``ainvoke_subagent``。``owner_run_ctx`` 保留签名兼容，有 loop 时不再使用。
+    """同步桥：无当前线程 running loop 时跑协程。
+
+    - 当前线程已有 running loop：禁止阻塞桥接（会死锁）→ 须 ``await`` /
+      ``ainvoke_subagent``（Doc-35 / C2）。
+    - 进程内已有存活的父 agent loop（``resolve_agent_loop``）：
+      ``run_coroutine_threadsafe`` 提交回父 loop（skill fork 对齐 CC 同 loop；
+      避免 worker ``asyncio.run`` 新 loop + 共享 httpx 池毒化，bug4）；
+      并 ``run_under_owner_run_context`` 恢复父 RunContext（cancel 登记，bug cancel-orphan）。
+    - 否则：``asyncio.run``（纯同步脚本、无父会话）。
     """
-    del owner_run_ctx  # C2 删除后同步路径不再登记 worker thread
     try:
         asyncio.get_running_loop()
     except RuntimeError:
-        return asyncio.run(coro)
+        pass
+    else:
+        raise RuntimeError(
+            "cannot run subagent coroutine via thread while an asyncio event loop "
+            "is running (C2 removed, Doc-35 P0). Use await run_subagent / "
+            "ainvoke_subagent on the same loop instead of sync invoke."
+        )
 
-    raise RuntimeError(
-        "cannot run subagent coroutine via thread while an asyncio event loop "
-        "is running (C2 removed, Doc-35 P0). Use await run_subagent / "
-        "ainvoke_subagent on the same loop instead of sync invoke."
+    from langchain_agentx.loop.run_context import (
+        resolve_agent_loop,
+        resolve_owner_run_context,
+        run_under_owner_run_context,
     )
 
+    owner = resolve_owner_run_context(owner_run_ctx)
+    target = resolve_agent_loop(owner=owner)
+    if target is not None and target.is_running():
+        return asyncio.run_coroutine_threadsafe(
+            run_under_owner_run_context(coro, owner=owner),
+            target,
+        ).result()
+
+    return asyncio.run(coro)
+
 
 @dataclass
 class BackgroundLaunchedResult:
@@ -815,7 +835,12 @@ async def run_subagent(
             ),
             name=f"agentx-subagent-fg-{ctx.agent_id or 'anon'}",
         )
-        register_spawned_task(task, owner=owner_run_ctx)
+        # Skill fork / nested Parallelization：挂 cancel authority（L0），对齐 D-REG-1。
+        register_spawned_task(
+            task,
+            owner=owner_run_ctx,
+            use_cancel_authority=True,
+        )
         return await task
     return await _run_subagent_body(
         ctx=ctx,

langchain_agentx/tools/bash/ast_security.py

@@ -219,6 +219,18 @@ class BashPermissionSegmenter:
     def __init__(self, node_helper: BashAstNodeHelper) -> None:
         self._node_helper = node_helper
 
+    # 控制结构整段保留：避免 for/while 的变量名与 in-list 词被拆成伪 command 段
+    # （否则 ``for i in 1 2; do echo; done`` → segments ``i``/``1``/``2``…，
+    #  触发 bash_passthrough ask 误阻只读循环）。
+    _ATOMIC_CONTROL_TYPES = frozenset({
+        "for_statement",
+        "while_statement",
+        "until_statement",
+        "if_statement",
+        "case_statement",
+        "function_definition",
+    })
+
     def collect_segments(self, node: Node) -> list[str]:
         if node.type == "program":
             return self._collect_from_container(node)
@@ -226,7 +238,13 @@ class BashPermissionSegmenter:
         if node.type in {"pipeline", "list"}:
             return self._collect_from_container(node)
 
-        if node.type in {"command", "redirected_statement", "subshell", "compound_statement"}:
+        if node.type in {
+            "command",
+            "redirected_statement",
+            "subshell",
+            "compound_statement",
+            *self._ATOMIC_CONTROL_TYPES,
+        }:
             text = self._node_helper.text(node).strip()
             return [text] if text else []
 

langchain_agentx/tools/bash/command_allow_rules.py

@@ -10,6 +10,8 @@ tools/bash/command_allow_rules.py — Bash 内容级 allow 匹配（slash comman
 
 from __future__ import annotations
 
+import re
+import shlex
 from typing import TYPE_CHECKING
 
 from langchain_agentx.tools.bash.shell_rule_matching import match_shell_permission_rule
@@ -29,6 +31,8 @@ from langchain_agentx.tool_runtime.policy import PolicyEngine, resolve_default_p
 if TYPE_CHECKING:
     from langchain_agentx.tool_runtime.policy import DefaultPolicyEngine
 
+_ENV_ASSIGNMENT_RE = re.compile(r"^[A-Za-z_][A-Za-z0-9_]*=.*$")
+
 
 def bash_command_matches_allow_rule(command: str, rule_content: str) -> bool:
     """CC shellRuleMatching（prefix / wildcard / exact）。"""
@@ -105,6 +109,27 @@ def registry_has_cliarg_bash_allow(registry: PermissionRuleRegistry) -> bool:
     return False
 
 
+def _is_pure_cd_segment(command: str) -> bool:
+    """``cd`` / ``cd <path>``（可带前导 ``VAR=``）不 promote。
+
+    G4：``cd`` 本身非只读，但段级静默 allow 是 cwd 语义的必要通路；
+    若 promote 为 ask，会抢在 ``compound_cd_write`` / 后续只读段之前，
+    导致 ``cd && touch`` / ``cd && pwd`` / session cwd 合并用例被 headless 误阻。
+    """
+    try:
+        tokens = shlex.split(command.strip())
+    except ValueError:
+        tokens = command.strip().split()
+    index = 0
+    while index < len(tokens) and _ENV_ASSIGNMENT_RE.match(tokens[index]):
+        index += 1
+    rest = tokens[index:]
+    if not rest or rest[0].rsplit("/", 1)[-1] != "cd":
+        return False
+    # 段级调用不应含 list/pipe；若整串被误传，拒绝当作 pure cd
+    return not any(tok in {"&&", "||", "|", ";"} for tok in rest)
+
+
 def promote_unscoped_bash_passthrough_to_ask(
     decision: AuthorizationDecision,
     *,
@@ -126,6 +151,8 @@ def promote_unscoped_bash_passthrough_to_ask(
         shell_ops_already_resolved=True,
     ).is_read_only:
         return decision
+    if _is_pure_cd_segment(command):
+        return decision
     # 显式规则 / mode / safety 等已标 policy_id 的 allow 不降级
     if decision.policy_id not in (None, "", "write_roots"):
         return decision

langchain_agentx/tools/bash/read_only_validation.py

@@ -36,6 +36,10 @@ class BashReadOnlyClassifier:
     def __init__(self, *, host_detector: HostPlatformDetector | None = None) -> None:
         self._host = host_detector or default_host_platform_detector()
 
+    # 前导 ``VAR=value``（与 bash_hardening.BashCommandCanonicalizer 同形），
+    # 避免 ``LANG=C git status`` 被误判为未知二进制 ``LANG=C``。
+    _ENV_ASSIGNMENT_RE = re.compile(r"^[A-Za-z_][A-Za-z0-9_]*=.*$")
+
     # ------------------------------------------------------------------
     # 大 allowlist：常见只读/观测类命令（不含必然写盘的工具如 tee/dd of=）
     # ------------------------------------------------------------------
@@ -52,7 +56,8 @@ class BashReadOnlyClassifier:
         "zipinfo",
         "nl", "cut", "tr", "uniq", "expand", "unexpand", "fold", "fmt", "pr", "rev", "tac",
         "look", "basename", "dirname", "readlink", "realpath",
-        "true", "false", "test", "expr", "seq",
+        # exit/sleep：进程控制/等待，无写盘；与 true/false 同属只读观测/控制面
+        "true", "false", "exit", "sleep", "test", "expr", "seq",
         "iconv", "locale", "locales", "getconf",
         "sw_vers", "sysctl", "system_profiler", "pbpaste",
         "ver",
@@ -137,7 +142,7 @@ class BashReadOnlyClassifier:
         if not shell_ops_already_resolved and self._shell_compound_or_pipeline(command):
             return BashReadOnlyClassification(False, "shell_compound_or_pipeline")
 
-        tokens = self._split(command)
+        tokens = self._strip_leading_assignments(self._split(command))
         if not tokens:
             return BashReadOnlyClassification(False, "empty_command")
 
@@ -146,6 +151,9 @@ class BashReadOnlyClassifier:
         if base in {"cmd", "cmd.exe", "powershell", "powershell.exe", "pwsh", "pwsh.exe"}:
             return BashReadOnlyClassification(False, f"{base}_shell_not_classified")
 
+        if base in {"for", "while", "until", "if", "case"}:
+            return self._classify_control_structure_body(command, base)
+
         if base == "git":
             return self._classify_git(tokens)
 
@@ -218,6 +226,30 @@ class BashReadOnlyClassifier:
 
         return BashReadOnlyClassification(False, f"{base}_unknown")
 
+    def _classify_control_structure_body(
+        self,
+        command: str,
+        base: str,
+    ) -> BashReadOnlyClassification:
+        """``for``/``while``/``if``/``case``：体中 simple command 全只读则整段只读。"""
+        from .ast_security import BashAstAnalyzer
+
+        analysis = BashAstAnalyzer().analyze(command)
+        body_cmds = analysis.simple_commands
+        if not body_cmds:
+            return BashReadOnlyClassification(False, f"{base}_empty_body")
+        for sc in body_cmds:
+            text = (sc.text or "").strip()
+            if not text:
+                continue
+            sub = self.classify(text, shell_ops_already_resolved=True)
+            if not sub.is_read_only:
+                return BashReadOnlyClassification(
+                    False,
+                    f"{base}_body_{sub.reason or 'not_readonly'}",
+                )
+        return BashReadOnlyClassification(True, f"{base}_readonly_body")
+
     @staticmethod
     def _shell_compound_or_pipeline(command: str) -> bool:
         """单 segment 内的 `|` / `&&` / `||` 保守视为非只读（不含 `;`，避免 awk/sed 脚本误判）。"""
@@ -551,6 +583,12 @@ class BashReadOnlyClassifier:
         except ValueError:
             return command.split()
 
+    def _strip_leading_assignments(self, tokens: list[str]) -> list[str]:
+        index = 0
+        while index < len(tokens) and self._ENV_ASSIGNMENT_RE.match(tokens[index]):
+            index += 1
+        return tokens[index:]
+
     @staticmethod
     def _basename(token: str) -> str:
         return token.rsplit("/", 1)[-1]

langchain_agentx/tools/skill/fork.py

@@ -5,8 +5,12 @@ tools/skill/fork.py — Skill fork 执行（对齐 CC executeForkedSkill）
     frontmatter ``context: fork`` 时在隔离子 loop 中执行 skill 正文，
     父 loop 仅收到摘要结果（不注入 meta HumanMessage / 父级 contextModifier）。
 
+链路位置：
+    SkillRuntimeTool.ainvoke（主路径 · C1）→ aexecute → ainvoke_subagent；
+    SkillRuntimeTool.invoke（纯 sync）→ execute → invoke_subagent(force_sync)。
+
 CC 对照：
-    SkillTool.executeForkedSkill + prepareForkedCommandContext + runAgent(isAsync=false)
+    SkillTool.executeForkedSkill（async）+ runAgent(isAsync=false) 共享父 Abort。
 """
 
 from __future__ import annotations
@@ -16,7 +20,7 @@ from typing import Any
 from langchain_agentx.tool_runtime.loop_runtime_context import resolve_skill_model_override
 from langchain_agentx.tool_runtime.models import ToolExecutionContext
 from langchain_agentx.tools.agent.builtin_subagent_loader import DefaultSubagentRegistryProvider
-from langchain_agentx.tools.agent.models import AgentToolInput
+from langchain_agentx.tools.agent.models import AgentToolInput, AgentToolOutput
 from langchain_agentx.tools.agent.registry.config import SubagentConfig
 from langchain_agentx.tools.agent.registry.registry import SubagentRegistry
 
@@ -31,7 +35,7 @@ def is_fork_execution_context(frontmatter: dict[str, Any]) -> bool:
 
 
 class SkillForkExecutor:
-    """在子 agent loop 中同步执行 fork skill。"""
+    """在子 agent loop 中执行 fork skill（首选 async / C1）。"""
 
     def __init__(self, registry: SubagentRegistry | None = None) -> None:
         self._registry_override = registry
@@ -49,17 +53,14 @@ class SkillForkExecutor:
             return self._registry_override
         return DefaultSubagentRegistryProvider.get()
 
-    def execute(
+    def _build_agent_input(
         self,
         *,
         cmd: SkillCommand,
         content: str,
         ctx: ToolExecutionContext,
         model_override: str | None,
-        effort_override: str | None,
-        allowed_tools: list[str],
-        constraints_applied: dict[str, Any],
-    ) -> SkillToolOutput:
+    ) -> tuple[AgentToolInput, SubagentConfig, str]:
         subagent_type = self._resolve_subagent_type(cmd.frontmatter)
         subagent_config = self._resolve_subagent_config(subagent_type)
         resolved_model = (
@@ -74,17 +75,20 @@ class SkillForkExecutor:
             model=resolved_model,
             run_in_background=False,
         )
-        agent_out = self._get_orchestrator().invoke_subagent(
-            inp,
-            ctx,
-            subagent_config,
-            skill_allowed_tools=allowed_tools or None,
-            skill_effort_override=effort_override,
-            skill_hook_frontmatter=cmd.frontmatter,
-            skill_hook_root=cmd.path.parent,
-            skill_hook_name=cmd.name,
-            force_sync=True,
-        )
+        return inp, subagent_config, subagent_type
+
+    def _to_skill_output(
+        self,
+        *,
+        cmd: SkillCommand,
+        content: str,
+        model_override: str | None,
+        effort_override: str | None,
+        allowed_tools: list[str],
+        constraints_applied: dict[str, Any],
+        agent_out: AgentToolOutput,
+        subagent_type: str,
+    ) -> SkillToolOutput:
         result_text = (agent_out.content or "").strip() or "Skill execution completed"
         return SkillToolOutput(
             skill_name=cmd.name,
@@ -105,6 +109,88 @@ class SkillForkExecutor:
             },
         )
 
+    async def aexecute(
+        self,
+        *,
+        cmd: SkillCommand,
+        content: str,
+        ctx: ToolExecutionContext,
+        model_override: str | None,
+        effort_override: str | None,
+        allowed_tools: list[str],
+        constraints_applied: dict[str, Any],
+    ) -> SkillToolOutput:
+        """异步 fork（对齐 CC executeForkedSkill）：同 loop await，可被 cancel_tree 停住。"""
+        inp, subagent_config, subagent_type = self._build_agent_input(
+            cmd=cmd,
+            content=content,
+            ctx=ctx,
+            model_override=model_override,
+        )
+        # force_sync=True ≡ CC isAsync:false（禁止后台）；ainvoke_subagent 仍同 loop await（C1），
+        # 不会走 Thread+_run_coroutine_sync。
+        agent_out = await self._get_orchestrator().ainvoke_subagent(
+            inp,
+            ctx,
+            subagent_config,
+            skill_allowed_tools=allowed_tools or None,
+            skill_effort_override=effort_override,
+            skill_hook_frontmatter=cmd.frontmatter,
+            skill_hook_root=cmd.path.parent,
+            skill_hook_name=cmd.name,
+            force_sync=True,
+        )
+        return self._to_skill_output(
+            cmd=cmd,
+            content=content,
+            model_override=model_override,
+            effort_override=effort_override,
+            allowed_tools=allowed_tools,
+            constraints_applied=constraints_applied,
+            agent_out=agent_out,
+            subagent_type=subagent_type,
+        )
+
+    def execute(
+        self,
+        *,
+        cmd: SkillCommand,
+        content: str,
+        ctx: ToolExecutionContext,
+        model_override: str | None,
+        effort_override: str | None,
+        allowed_tools: list[str],
+        constraints_applied: dict[str, Any],
+    ) -> SkillToolOutput:
+        """同步 fork（无父 loop / 纯 sync 调用方）；有父会话时应走 ``aexecute``。"""
+        inp, subagent_config, subagent_type = self._build_agent_input(
+            cmd=cmd,
+            content=content,
+            ctx=ctx,
+            model_override=model_override,
+        )
+        agent_out = self._get_orchestrator().invoke_subagent(
+            inp,
+            ctx,
+            subagent_config,
+            skill_allowed_tools=allowed_tools or None,
+            skill_effort_override=effort_override,
+            skill_hook_frontmatter=cmd.frontmatter,
+            skill_hook_root=cmd.path.parent,
+            skill_hook_name=cmd.name,
+            force_sync=True,
+        )
+        return self._to_skill_output(
+            cmd=cmd,
+            content=content,
+            model_override=model_override,
+            effort_override=effort_override,
+            allowed_tools=allowed_tools,
+            constraints_applied=constraints_applied,
+            agent_out=agent_out,
+            subagent_type=subagent_type,
+        )
+
     def _resolve_subagent_type(self, frontmatter: dict[str, Any]) -> str:
         raw = frontmatter.get("agent")
         if isinstance(raw, str) and raw.strip():

langchain_agentx/tools/skill/tool.py

@@ -19,6 +19,7 @@ CC 对照：
 
 from __future__ import annotations
 
+import asyncio
 from pathlib import Path
 from typing import Any
 
@@ -299,6 +300,57 @@ class SkillRuntimeTool(RuntimeTool):
             constraints_applied=constraints_applied,
         )
 
+    async def ainvoke(self, data: dict[str, Any], ctx: ToolExecutionContext) -> SkillToolOutput:
+        """异步执行；``context: fork`` 走 C1（同 loop await），对齐 CC executeForkedSkill。
+
+        非 fork 仍委托默认同步 ``invoke``（经 executor），避免重复展开逻辑。
+        """
+        inp = SkillToolInput.model_validate(data)
+        cmd = self._resolve_skill_command(inp.skill_name, ctx)
+        if cmd is None:
+            raise ValueError(f"Unknown skill: {inp.skill_name}")
+        if not is_fork_execution_context(cmd.frontmatter):
+            loop = asyncio.get_running_loop()
+            return await loop.run_in_executor(None, lambda: self.invoke(data, ctx))
+
+        dynamic = get_dynamic_skill_catalog(
+            ctx.session_store,
+            agent_home_segment=self._agent_home_segment,
+        )
+        expanded = self._catalog.expand_for_invoke(
+            inp.skill_name,
+            inp.args,
+            dynamic_catalog=dynamic,
+            session_store=ctx.session_store,
+            agent_home_segment=self._agent_home_segment,
+        )
+        content = expanded.content
+        frontmatter = cmd.frontmatter
+        allowed_tools = frontmatter.get("allowed-tools")
+        parsed_model, parsed_effort = self._parse_frontmatter_overrides(frontmatter)
+        constraints_applied = {
+            "has_allowed_tools": isinstance(allowed_tools, list) and len(allowed_tools) > 0,
+            "has_paths": isinstance(frontmatter.get("paths"), list) and len(frontmatter.get("paths")) > 0,
+            "has_model_override": parsed_model is not None,
+            "has_effort_override": parsed_effort is not None,
+        }
+        resolved_scope = self._resolve_tool_scope(data, ctx)
+        constraints_applied["tool_scope_resolution"] = {
+            "auto_approved": sorted(resolved_scope.auto_approved),
+            "final_allowed": sorted(resolved_scope.final_allowed),
+            "explain": list(resolved_scope.explain),
+        }
+        allowed_list = [str(x) for x in allowed_tools] if isinstance(allowed_tools, list) else []
+        return await self._fork_executor.aexecute(
+            cmd=cmd,
+            content=content,
+            ctx=ctx,
+            model_override=parsed_model,
+            effort_override=parsed_effort,
+            allowed_tools=allowed_list,
+            constraints_applied=constraints_applied,
+        )
+
     @staticmethod
     def _parse_frontmatter_overrides(
         frontmatter: dict[str, Any],

langchain_agentx/workflow/execution.py

@@ -445,7 +445,9 @@ class WorkflowAgentLoopExecutor:
                 await queue.put(None)
 
         task = asyncio.create_task(_producer())
-        register_spawned_task(task)
+        # W4：挂到 cancel authority（outermost），避免 Parallelization nested
+        # install 后 L0.cancel_tree 只看见 nested.root、砍不到 leaf producer。
+        register_spawned_task(task, use_cancel_authority=True)
         try:
             while True:
                 event = await queue.get()

langchain_agentx/workspace/project_memory_layout.py

@@ -39,7 +39,8 @@ def _mkdir_p(path: Path) -> None:
     """跨平台 ``mkdir -p``；Windows 近 MAX_PATH 时用 ``\\\\?\\`` 扩展前缀。"""
     target = Path(path)
     if os.name == "nt":
-        abs_path = os.path.abspath(str(target))
+        # Windows MAX_PATH 探测：仅取绝对长度，不参与 workspace 语义解析
+        abs_path = os.path.abspath(str(target))  # noqa: workspace-boundary reason="Windows MAX_PATH length probe only; not workspace path SSOT"
         if len(abs_path) >= _WIN_CREATE_DIR_MAX and not abs_path.startswith("\\\\?\\"):
             Path("\\\\?\\" + abs_path).mkdir(parents=True, exist_ok=True)
             return

{langchain_agentx_python-2.3.8.dist-info → langchain_agentx_python-2.4.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: langchain-agentx-python
-Version: 2.3.8
+Version: 2.4.0
 Summary: LangChain/LangGraph-based agent utilities for CodeBaseX.
 Author-email: GoodMood2008 <GoodMood2008@users.noreply.github.com>
 License: Apache License

{langchain_agentx_python-2.3.8.dist-info → langchain_agentx_python-2.4.0.dist-info}/RECORD

@@ -1,4 +1,4 @@
-langchain_agentx/__init__.py,sha256=gtvKFAWnCZTzCzgO9-k_SOm0i5QAt-QQKXfYx8noXtw,2014
+langchain_agentx/__init__.py,sha256=nekQFWWhUqeV0DS8CHFYpK9w0n3NvKObBPoWWU2WHmo,2014
 langchain_agentx/command/__init__.py,sha256=Ej260S5uFQcmEtGZQG_NH7BYjHoStrpBLtGUsBTxyZk,631
 langchain_agentx/command/allowed_tools.py,sha256=TVA0VM8rm98H-QbLK_GRiX5RhEAZFxKawliMi4kk96A,3359
 langchain_agentx/command/context.py,sha256=DIGOGPBw5UGDBm0WNNJlKx1h_9rCRmcdROv4DT61Qug,731
@@ -28,9 +28,9 @@ langchain_agentx/health/models.py,sha256=lHwdvn0w-qs-c8mI6I3nlnoCk8--y7gADj7C9u7
 langchain_agentx/health/preflight.py,sha256=wGysAnhT-jR1LfyjdaX9diO573Zzt5Z1M3vxDbpdcK0,5612
 langchain_agentx/loop/__init__.py,sha256=JoFPFrlllvGCYFEk2RUuqq9AfUIdLVSNbrRdTRy6g_I,1428
 langchain_agentx/loop/benchmark_frozen_config.py,sha256=YI4IaDVMBOEucF36F2oNv5mw1TqMG_rm_LJSpKAnFWM,13942
-langchain_agentx/loop/loop_abort.py,sha256=cKlHxZh0u7-drCVqEiRtzkO270MHw6grJuZ1NpKoGfo,3250
+langchain_agentx/loop/loop_abort.py,sha256=wFlvCLjE9Avs83_8hqmUq0DlP58LSjtxOge-g1K4oPQ,3547
 langchain_agentx/loop/message_contract.py,sha256=Twl83TneU2PRdxgGRBxs6S9_ovRT6cb5WeCUzd6oJnE,2196
-langchain_agentx/loop/run_context.py,sha256=dhNiLhvqD_QYacGMA0B5P3wWpSe3O6wU_XcVEzb86Z4,8303
+langchain_agentx/loop/run_context.py,sha256=LQ4T8KrBPcjuNPsepFNcKcoS5ZDE5Ek7eI-_6oEmdWg,15410
 langchain_agentx/loop/config/__init__.py,sha256=0pf3Mml7LZpQ1C3_AtROFQClrBQegaGCG4YCTfSr9v8,1137
 langchain_agentx/loop/config/agent_config.py,sha256=tOnAHFor6dkle3FvUOVx0YsmiYVTH11UrWSyTmOLV0c,3100
 langchain_agentx/loop/config/compaction_config.py,sha256=MmXqY47-9nPDhdXvnU92Xp0XeaZ605ErQwX9d2emEkM,1176
@@ -137,7 +137,7 @@ langchain_agentx/loop/runtime/context_factory.py,sha256=m3ics_dOTqEKNlf6ETIOnVj6
 langchain_agentx/loop/runtime/subagent_execution_paths.py,sha256=Bgyiom48uta1FZcnIE7fIxyrD-VFCRsw7s8IxIxmLb4,4033
 langchain_agentx/loop/stream/graph_driver.py,sha256=qMZHEw3wJ19Tfbz31-VPLy8Mt6e90xKougIjAoaEFCE,3935
 langchain_agentx/loop/stream/helpers.py,sha256=b2sqtwrAa5ic5B5AzNqItU8pmDHw13iGs3hBiShSIZk,1390
-langchain_agentx/loop/stream/loop_driver.py,sha256=v9XbmYv4O9ad-SLBXM3FN50V96_77bY8Tlvam13GnzQ,25028
+langchain_agentx/loop/stream/loop_driver.py,sha256=IE8IGcgdiLMqLZr32Ag9Q5vhbo1g7UxY1eUYsy7r98M,25357
 langchain_agentx/loop/stream/result.py,sha256=xQb9r1cxGCQpoAZ0gNo71CjhSE3eYOiYp5KnoOBzBF8,1131
 langchain_agentx/loop/stream/synthetic_events.py,sha256=Z3JT3iTuB9UQOoQXUprAYvaFV0vXEAuf5iqXYH9YSyI,2175
 langchain_agentx/loop/stream/transcript_gate.py,sha256=4AH3O0l8OrY_GQdqf-TOKOVS3selPLUC0jYLWQUTfkg,4690
@@ -157,13 +157,13 @@ langchain_agentx/loop/subagent/hook_attachment_messages.py,sha256=em3VXaUfURou_Y
 langchain_agentx/loop/subagent/hooks_compose.py,sha256=enPKRsAbqjB5HqACE-YFzM8K3Job7azi4wpqI1kmgl8,2515
 langchain_agentx/loop/subagent/hooks_pipeline.py,sha256=4OweLS52TRbcaUO56YpE-qX71ZPCjPRS0j9KzIcx5ls,6399
 langchain_agentx/loop/subagent/mcp_child_servers.py,sha256=UJ9FtIZroYvP6KfNLUnHKbb7bqg2qSmo15MkzHcVKME,4395
-langchain_agentx/loop/subagent/orchestrator.py,sha256=35gaY6gzdlCxEogyYiTRos5KtSpsSOADJBZIHazsQbc,41785
+langchain_agentx/loop/subagent/orchestrator.py,sha256=6VR5yxnUD4q9lEhI7JVPdo_BdlEBD_ObfTxAnrIaVAg,42085
 langchain_agentx/loop/subagent/parent_hook_snapshot.py,sha256=cwBC2eXvx1evc6QPpI42zq-iKThpObyoyWmkDNj9E7Q,2095
 langchain_agentx/loop/subagent/progress.py,sha256=nef3VVT9QmB2ZWCDAO86cmtVwCJIR8lXMr6jczQKqOY,6650
 langchain_agentx/loop/subagent/progress_dispatcher.py,sha256=KD5EdfoGplIaT8xvt5vgfXgSLPbvn9KqvY85wLpOX7A,4603
 langchain_agentx/loop/subagent/prompt.py,sha256=p7RgzibNfEJdfX8nBnZGEwQLa3_EgOn4E56T9MBRIEc,1722
 langchain_agentx/loop/subagent/reasoning_extractor.py,sha256=KrCQtBdKzsjAEfA7H5COuXzBhuGGonT2Su8IEKYlUpA,1334
-langchain_agentx/loop/subagent/runner.py,sha256=GCYWWMZtkJRH8L1sJAwrVwe0yOqO-6kBT-6p5J1w_s0,35142
+langchain_agentx/loop/subagent/runner.py,sha256=iwLvLLHlzNluSWx0xTvPpB4yPRsScKxqngX6LGGxAm0,36089
 langchain_agentx/loop/subagent/subagent_start_hooks.py,sha256=HIyW7_ta9JNxiyrgL8scNpZzcJrAyld4qaRehYx36GY,1359
 langchain_agentx/loop/subagent/subagent_termination_classifier.py,sha256=ULArQeAibgy6ETSf4vRR0L6X1rsDM7-ZuLzRWQ_pmeY,3158
 langchain_agentx/loop/subagent/transcript.py,sha256=-S0VjZcvqlJQGkVGu8VDMTYwTwOePdjDHfjYi3uu7BY,7187
@@ -584,14 +584,14 @@ langchain_agentx/tools/ask_user_question/prompt.py,sha256=0RdVuUeNzQBzPeVrLcbiBq
 langchain_agentx/tools/ask_user_question/tool.py,sha256=DgU7OBAqrJBb77ewQ76okoUFJxTThAiN6PRMPa8_FvU,13467
 langchain_agentx/tools/ask_user_question/validators.py,sha256=Uc88cBzqUp0PNG_Jf2yX2WtKP8hzBsnkMb_KUXh9C4M,6088
 langchain_agentx/tools/bash/__init__.py,sha256=molPHFDylE2wWG_aQx7fb0ciAx3wWpdXzIixTZV5ne4,214
-langchain_agentx/tools/bash/ast_security.py,sha256=6DFd_TwT986dbGkKT3UnDIZioBdmi8mbJcYSI-XEtdM,22444
+langchain_agentx/tools/bash/ast_security.py,sha256=vMP1lAi2bHrsHojun64eu1-Ym8hGW00dSVe3PexbVxc,22999
 langchain_agentx/tools/bash/auto_mode_adapter.py,sha256=7-yb_kGmpytBYkD2Hn5YWPIceo_YN4PatEKj8O7HKsM,4243
 langchain_agentx/tools/bash/backend.py,sha256=E0DMBAENZLUSLvuEh6RubNJ6iCVnx1d2VGsQzVuLA5k,65361
 langchain_agentx/tools/bash/bash_hardening.py,sha256=KEYKRC7kS_to4mzXuChvCmOIIb4dSUkOb9K1MBDtWDc,29296
 langchain_agentx/tools/bash/bash_registry_content.py,sha256=YHE3PwuLBeFrEux4xNaDZjJpYtUSMFPLYr6A7g-fFxk,3569
 langchain_agentx/tools/bash/bash_runtime_contract.py,sha256=s8vrvMl7405KLGw2hPFbzlzWohm5JX3c9cImMBgqh8I,1511
 langchain_agentx/tools/bash/boundary_check.py,sha256=k9Bv-baIAUDE3-c_Brw3VSXXYMv_g3lTM0mabIadnwc,8822
-langchain_agentx/tools/bash/command_allow_rules.py,sha256=CDdfF--gs1SpLU01L1d2Hho9ovk0-lVw1HnxZISGf5Y,7832
+langchain_agentx/tools/bash/command_allow_rules.py,sha256=5WohbA_UT57oqEtwVPBCH0IIP6hjM-FYCYLt4hWX3mk,8853
 langchain_agentx/tools/bash/cwd_reporter.py,sha256=mASbKWLb4MiX4zLKY3w1ocIdfhmwj5KRgX4OW_PcAns,2642
 langchain_agentx/tools/bash/events.py,sha256=xDpPA3zhne2cnlYTmiiPTsV423-h-Nw-VKDR_rlnbGE,6065
 langchain_agentx/tools/bash/l1_decision_reason.py,sha256=MOL9HBBpJEgypuTiYdNojQBl8eIsTwRge5CtGeYRJKI,5365
@@ -603,7 +603,7 @@ langchain_agentx/tools/bash/output_tracker.py,sha256=JJv_PVKEoFJljUrjlIjzlRx6GVo
 langchain_agentx/tools/bash/output_utils.py,sha256=WYU2vVOjo9HQKSeQ_z88KxJsrvlFm0wf7USCMvuifZ8,6638
 langchain_agentx/tools/bash/path_security.py,sha256=wUJ4RED77-urSwsIuaaZ0IcjYTHYUYSLpvIyMac7sn0,98788
 langchain_agentx/tools/bash/prompt.py,sha256=28WBRLt5G6e-OUildOFbeEyw7eL3iI8T40pEwmWVYxo,12527
-langchain_agentx/tools/bash/read_only_validation.py,sha256=q1_Gr7rxE6TFk3hH3APPJE4uRb1nrQjc_NPmxeWHcGo,25180
+langchain_agentx/tools/bash/read_only_validation.py,sha256=Y_9cn01m2hGrohqAg7_4riV3hDfOsyyE4pIFIbXiPe4,26878
 langchain_agentx/tools/bash/redirect_classifier.py,sha256=Xbmrb1VfZMdvlzvsI1YoOk57MkRLlwhf23GP90UNFqQ,8188
 langchain_agentx/tools/bash/result_presenter.py,sha256=OkJid40AmrAsRxhY7jSaw_PgRMoIfMcj6BNXaqcryTo,14946
 langchain_agentx/tools/bash/sandbox_decision.py,sha256=T_JaTfPADDcH2mRtrpKTBbIVo2Q6CHkzg_aUXCuDhLQ,4612
@@ -680,7 +680,7 @@ langchain_agentx/tools/skill/catalog.py,sha256=fhIsxJ5qq5RgFoav6OU_sFw0z6lBMYixv
 langchain_agentx/tools/skill/dynamic_catalog.py,sha256=kc9tcAJMbvieIaO0SN89b58I0OIjPRsccKv8pLVoyXI,5409
 langchain_agentx/tools/skill/dynamic_discoverer.py,sha256=1zUcWHJn96UFJeDY9NPsjpZAJ3iQFAq_Y7REyUGXfMo,2978
 langchain_agentx/tools/skill/file_discovery.py,sha256=mEMSg5eqGbv0bU7ZWY_i7WdYZsL618pMo0wMrbunbSc,2202
-langchain_agentx/tools/skill/fork.py,sha256=QQ5I1MNX9CUx_-wafXmj0zl5Q3FO-J5eY5POYl14Mo0,4804
+langchain_agentx/tools/skill/fork.py,sha256=zOHrO-bgfXA4PH5f1dM5hIxpScSmVQeHAt_eV6u8SCI,7846
 langchain_agentx/tools/skill/guards.py,sha256=tO6hLncKW0eMpWLrdnZLeMzfknL0ufbE8NxqfP91LGc,1484
 langchain_agentx/tools/skill/hook_registration.py,sha256=M8ZTykK7ubN4j-SSbwg9WAzq5OpFaRI-IrnRwyiknSs,6261
 langchain_agentx/tools/skill/loader.py,sha256=E0P90vvja5thi-1nPT4OkWtOniBkISvumA5agV150XU,10086
@@ -694,7 +694,7 @@ langchain_agentx/tools/skill/prompt.py,sha256=tvSqvCGroVdloveiWIYxIPQmpESqzPAs5Z
 langchain_agentx/tools/skill/registry_permission.py,sha256=ns_S6IBOdacrZcgHzCOj9rjlPOIecavF5hW-pHmalcY,3258
 langchain_agentx/tools/skill/repository_factory.py,sha256=aFYIw65ctz1sLfEmn8E3YfpgTvTc1YI9XkueWpeiXtA,1359
 langchain_agentx/tools/skill/source_paths.py,sha256=x-WHorUgt2xyI5hcvALT2e6Ra-HDpKgIv7plQezRkws,5324
-langchain_agentx/tools/skill/tool.py,sha256=6VHUrNsolANQDiNo0UWnxYLLLkt-yvKoMH0p8wKAD7U,19786
+langchain_agentx/tools/skill/tool.py,sha256=a1-uUtNraWy6stcZ-hourI73hCGawzVIPE_2pFtHvFw,22202
 langchain_agentx/tools/skill/bundled/__init__.py,sha256=gaCH_mROpv0lIgLjin1VIFu-8hbP2nY1PHoF7vZt2Ns,4516
 langchain_agentx/tools/skill/bundled/prompts.py,sha256=gcaTnNRlWfHNPgO3EfZxU9vMYbOapMrAduvgaVc-_Fc,4838
 langchain_agentx/tools/skill/bundled/registry.py,sha256=oxvvFeeUzM-qVPtayVaQp5tfRiMazyln2-rCM86AYa8,6274
@@ -778,7 +778,7 @@ langchain_agentx/workflow/catalog_registry.py,sha256=tYUny5FkHwQU-RRUxOdxaJhiRV_
 langchain_agentx/workflow/dag.py,sha256=Y1IR1IwnM79Xuev6HZnOvAE3Q23MRnA9lu4vg2Cie48,4469
 langchain_agentx/workflow/display_enricher.py,sha256=2HJ4xJI8H4hwBoWHAi6D_LwE-dcbZD_pafnS7DMDYZ4,6147
 langchain_agentx/workflow/display_resolver.py,sha256=hEaljqprjubG82zeqLOEeQ32AMAxaZwvwaLq3v-yt3c,10119
-langchain_agentx/workflow/execution.py,sha256=iCEkPgLkaoEM4cB6o7KAqIaBpFuY5HtGGISMNm0tr4A,18954
+langchain_agentx/workflow/execution.py,sha256=1exCcD1zxZ8vSx4js6ygnJ4xXAnK1UwT8rpIAYAfxxc,19155
 langchain_agentx/workflow/loop_factory.py,sha256=hCShf_gDnesW2A9JspaUY3upp3NCIguII_wRiXnSIUM,3954
 langchain_agentx/workflow/memory_drain_registry.py,sha256=Xm_ytbB-BbRIu3-h-KhptsCsmmueOiNZePUuG1hk8zk,1681
 langchain_agentx/workflow/memory_session_policy.py,sha256=2FI0ZbAA6MnxJexnLYLadQpiqipPQwVnUrTWgl55A74,3333
@@ -831,14 +831,14 @@ langchain_agentx/workspace/path_canonical.py,sha256=Z_mmDJQMP4WmBhjBpRUGKGg7XCsK
 langchain_agentx/workspace/path_key_normalizer.py,sha256=ICk9uGiiNFH-zaXJG3_vx91uOpgWmgOPIjJoSYevKOc,1113
 langchain_agentx/workspace/plans.py,sha256=wo0ogpErnmwBrNwsHHCzARnIfHM7xnhpAMiN39SjCCI,11813
 langchain_agentx/workspace/project_key.py,sha256=iA_C6oLM8ebWX6C4GXpJp-SO_n6O1heNcyNebC513QA,2808
-langchain_agentx/workspace/project_memory_layout.py,sha256=cQDHBTEHwn7nvbVQ6LFlsRGkwZT6csiETej0Cvc7HNA,8660
+langchain_agentx/workspace/project_memory_layout.py,sha256=v7Xva8v8E6zjkCRuUy6gAWMkRaicndPJoM5AvuyIFCA,8847
 langchain_agentx/workspace/resolver.py,sha256=stWBxa-jkNO2nZKEJr89Qb4805FcEFm76NpybWb-LYs,6444
 langchain_agentx/workspace/root_grant_manager.py,sha256=W3gy8HTevbERbXqIgRcjzOXOUBGr1Gjnl8CfCoTIuYc,7558
 langchain_agentx/workspace/tool_boundary.py,sha256=UDwX6swpSLsx9HNkYuuRRiV5o7ZZG_Bru2Yn0c5kNX8,5724
 langchain_agentx/workspace/validators.py,sha256=tQt-6TOcL8Fw7Ig5ebA9S7vGWh1rby920eFW6x8Tk9E,1439
 langchain_agentx/workspace/view.py,sha256=PGasqTaqhlD03SXXazHuw4RHfV681AIdlsYqL70pEjc,4774
-langchain_agentx_python-2.3.8.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-langchain_agentx_python-2.3.8.dist-info/METADATA,sha256=LQpK-C85dJ_lAdk9w7weRSeVJKKWJzEnBuDdytblGEY,23971
-langchain_agentx_python-2.3.8.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
-langchain_agentx_python-2.3.8.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
-langchain_agentx_python-2.3.8.dist-info/RECORD,,
+langchain_agentx_python-2.4.0.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+langchain_agentx_python-2.4.0.dist-info/METADATA,sha256=8umkqCu3uA5-5h8qh8wIatqM0aMpj_UV_b6j1MKgF6A,23971
+langchain_agentx_python-2.4.0.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
+langchain_agentx_python-2.4.0.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
+langchain_agentx_python-2.4.0.dist-info/RECORD,,