langchain-agentx-python 2.4.1__py3-none-any.whl → 2.4.4__py3-none-any.whl

langchain_agentx/__init__.py

@@ -11,7 +11,7 @@ from langchain_agentx import create_loop_agent
 ```
 """
 
-__version__ = "2.4.1"
+__version__ = "2.4.4"
 
 from .mcp.call import McpToolCaller
 from .mcp.client_manager import McpClientManager, McpConnectedClient

langchain_agentx/loop/config/interaction_profile.py

@@ -25,7 +25,10 @@ if TYPE_CHECKING:
 _WORKER_CONTAINER_TYPES = frozenset(
     {"background_task", "background", "batch", "worker", "sdk"}
 )
-_INTERACTIVE_HEADLESS_MODES = frozenset({"auto", "dontAsk", "bypassPermissions"})
+# acceptEdits：headless 子图继承父写快路径（与 auto 同属写链放行 mode）
+_INTERACTIVE_HEADLESS_MODES = frozenset(
+    {"auto", "dontAsk", "bypassPermissions", "acceptEdits"}
+)
 _HITL_PROFILE_IDS = frozenset({"code-interactive", "code-plan"})
 _HEADLESS_PROFILE_IDS = frozenset(
     {"qa-auto", "workflow-auto", "worker-deny", "interactive-headless"}
@@ -120,7 +123,8 @@ class InteractionProfileResolver:
                 if mode in ("default", "plan"):
                     raise ValueError(
                         f"interactive + headless=True cannot use permission_mode={mode!r}; "
-                        "use auto, dontAsk, or bypassPermissions (print/script entry)"
+                        "use auto, dontAsk, bypassPermissions, or acceptEdits "
+                        "(interactive-headless / print/script entry)"
                     )
                 if mode not in _INTERACTIVE_HEADLESS_MODES:
                     raise ValueError(

langchain_agentx/loop/graph/factory.py

@@ -985,6 +985,7 @@ class LoopGraphBuilder:
             system_prompt=self._base_prompt,
             capabilities=self._services.capabilities,
             cwd=runtime_cwd,
+            permission_mode=self._config.permission_mode,
             boundary_snapshot=BoundarySnapshotPropagator.from_workspace_boundary(
                 boundary=self._workspace_boundary,
                 runtime_cwd=runtime_cwd,
@@ -1048,6 +1049,7 @@ class LoopGraphBuilder:
             system_prompt=base_prompt,
             capabilities=self._services.capabilities,
             cwd=runtime_cwd,
+            permission_mode=self._config.permission_mode,
             boundary_snapshot=BoundarySnapshotPropagator.from_workspace_boundary(
                 boundary=self._workspace_boundary,
                 runtime_cwd=runtime_cwd,

langchain_agentx/loop/runtime/context_factory.py

@@ -5,8 +5,17 @@ loop/runtime/context_factory.py — RuntimeContextFactory 继承规则单点
       继承优先级（单点定义）：显式 override > SubagentConfig 默认 > 父 ctx 字段。
 在整体链路中的位置：SubagentOrchestrator.invoke_subagent() 调用。
 CC 对照：src/utils/forkedAgent.ts createSubagentContext() 中的字段合并逻辑。
-当前裁剪范围：v1 model / max_steps / available_tools / agent_depth 继承；permission_mode 直通；
+当前裁剪范围：v1 model / max_steps / available_tools / agent_depth 继承；
+      permission_mode 经 read_parent_permission_mode 写入 AgentLoopConfig（derive 侧）；
+      orchestrator 再经 resolve_definition_permission_mode 合并 definition/overrides 后
+      注入 SubagentContext.permission_mode（构图 SSOT；见 dual-track / parent-wins bug 单）；
       ``subagent_effective_cwd`` 由 ``SubagentExecutionPaths.prepare`` 注入（不在此 mkdir）。
+
+编排消费说明（防双轨幻觉）：
+      ``derive`` 返回完整 ``AgentLoopConfig``，但 ``create_subagent_graph`` **不直接吃**该对象；
+      orchestrator 当前只抽出并注入子 ctx 的字段：``model`` / ``max_steps`` /
+      ``agent_depth`` / ``permission_mode``（及 path/workspace 旁路）。子图权限权威在
+      ``SubagentContext.permission_mode``，勿在 graph 再读父 runnable。
 """
 
 from __future__ import annotations
@@ -83,16 +92,22 @@ class RuntimeContextFactory:
             else list(parent_ctx.available_tools or [])
         )
 
-        # 权限：override > 父 ctx.tool_flags["permission_mode"] > "default"
-        parent_permission = (
-            getattr(parent_ctx, "permission_mode", None)
-            or getattr(getattr(parent_ctx, "tool_flags", None), "get", lambda x: None)("permission_mode")
-            or "default"
+        # 权限：override > read_parent_permission_mode > "default"（AgentLoopConfig 侧）。
+        # 子图有效 mode（含 definition 父优先）由 orchestrator._resolve_effective_permission_mode
+        # 写入 SubagentContext.permission_mode；勿把本字段当作 definition merge 结果。
+        from langchain_agentx.tool_runtime.prompt.session_mode import (
+            read_parent_permission_mode,
         )
-        resolved_permission = (
+
+        parent_permission = (
             overrides.permission_mode
             if overrides.permission_mode is not None
-            else parent_permission
+            else read_parent_permission_mode(parent_ctx)
+        )
+        resolved_permission = (
+            parent_permission.strip()
+            if isinstance(parent_permission, str) and parent_permission.strip()
+            else "default"
         )
         workspace_root = getattr(parent_ctx, "workspace_root", None)
         parent_agent_home = getattr(parent_ctx, "agent_home_segment", None)
@@ -150,6 +165,8 @@ class RuntimeContextFactory:
         # 优先读 subagent.agent_depth（嵌套 L1→L2 若只写顶层会误成 0）。
         child_depth = int(getattr(parent_ctx, "agent_depth", 0) or 0) + 1
 
+        # 完整 AgentLoopConfig 供编排/后台路径复用；构图 SSOT 仍经 SubagentContext
+        # （orchestrator 仅透传 model/max_steps/agent_depth/permission_mode 等）。
         return AgentLoopConfig(
             model=resolved_model,
             session_id=getattr(parent_ctx, "session_id", "") or "",

langchain_agentx/loop/subagent/context.py

@@ -54,6 +54,7 @@ from langchain_agentx.loop.subagent.fork_worktree_notice import build_worktree_n
 from langchain_agentx.loop.message_contract import to_record
 from langchain_agentx.tool_runtime.prompt.session_mode import (
     read_parent_loop_config,
+    read_parent_permission_mode,
     resolve_subagent_headless,
 )
 from langchain_agentx.tool_runtime.session_store import AgentSessionStore
@@ -82,6 +83,8 @@ class SubagentContext:
     fork_from_parent: bool = False  # True = fork 模式，initial_messages 含父会话历史
     is_async: bool = False         # True = 走异步路径（coordinate/fork-async）
     headless: bool = True          # CC 对齐：async 强制 True；sync 继承父 loop headless
+    permission_mode: str | None = None
+    """子图 permission_mode SSOT（derive/ctx 工厂写入；create_subagent_graph 只读本字段）。"""
 
     # 共享字段（从父会话继承）
     session_store: Any = None  # SessionStore
@@ -177,6 +180,7 @@ def create_subagent_context(
     is_builtin_subagent: bool = False,
     recovery: RecoveryPolicy | RecoveryPolicyMode | None = None,
     inherit_hooks: bool | frozenset[HookEvent] | None = True,
+    permission_mode: str | None = None,
 ) -> SubagentContext:
     """工厂函数：从父上下文创建子 Agent 上下文
 
@@ -199,6 +203,7 @@ def create_subagent_context(
         fork_worktree_parent_cwd: 父 Agent 工作目录（须在 ``run_with_cwd_override`` 子 cwd 生效前由编排层捕获）。
         fork_worktree_path: 子 Agent 的 worktree 根路径（通常即 ``path_prep.worktree_dir``）。
         thinking_generation_enabled: 是否启用 request-side thinking（由 SubagentOrchestrator 根据 mode 决定）
+        permission_mode: 显式子 mode（orchestrator 传 derive 结果）；None 时从父 runnable/tool_flags 读一次
 
     Returns:
         SubagentContext 实例
@@ -301,6 +306,12 @@ def create_subagent_context(
         is_async=is_async,
     )
 
+    # permission_mode SSOT：显式（derive）> 父 runnable/tool_flags 读一次；构图不再重读父
+    if isinstance(permission_mode, str) and permission_mode.strip():
+        resolved_permission_mode: str | None = permission_mode.strip()
+    else:
+        resolved_permission_mode = read_parent_permission_mode(parent_ctx)
+
     resolved_query_source = (
         query_source
         if isinstance(query_source, str) and query_source.strip()
@@ -331,6 +342,7 @@ def create_subagent_context(
         fork_from_parent=fork_from_parent,
         is_async=is_async,
         headless=resolved_headless,
+        permission_mode=resolved_permission_mode,
         session_store=session_store,
         tool_registry=getattr(parent_ctx, "tool_registry", None),
         tool_loader=getattr(parent_ctx, "tool_loader", None),
@@ -403,6 +415,8 @@ class ForkedParentRuntime:
     cwd: str | None = None
     thinking_generation_enabled: bool | None = None
     boundary_snapshot: BoundarySnapshot | None = None
+    permission_mode: str | None = None
+    """父 loop permission_mode；后台 fork 写入 SubagentContext SSOT。"""
 
 
 def _clone_parent_session_store(parent_store: Any) -> Any:
@@ -510,6 +524,12 @@ class SubagentContextFactory:
             fork_from_parent=True,
             is_async=False,
             headless=True,
+            permission_mode=(
+                parent_runtime.permission_mode.strip()
+                if isinstance(parent_runtime.permission_mode, str)
+                and parent_runtime.permission_mode.strip()
+                else None
+            ),
             session_store=session_store,
             tool_registry=parent_runtime.tool_registry,
             tool_loader=parent_runtime.tool_loader,

langchain_agentx/loop/subagent/definition_permission.py

@@ -0,0 +1,73 @@
+"""loop/subagent/definition_permission.py — 子 Agent 定义 permissionMode 父优先合并
+
+职责：官网 Permission modes 规则核（纯函数）；不读 AppState、不写 ctx。
+链路：SubagentConfig / overrides.declared + 父 mode → orchestrator → SubagentContext SSOT。
+裁剪：auto_available 本期恒 True（LOCK-10）；无 plugin 忽略面；非法枚举由 loader 告警后置 None。
+
+规范化枚举见 ``tool_runtime.prompt.session_mode.normalize_definition_permission_mode``
+（避免 tools.loader → loop 反向依赖）。
+"""
+
+from __future__ import annotations
+
+from langchain_agentx.tool_runtime.prompt.session_mode import (
+    normalize_definition_permission_mode,
+)
+
+_ELEVATED_PARENT_MODES = frozenset(
+    {
+        "bypassPermissions",
+        "acceptEdits",
+        "auto",
+    }
+)
+
+
+def _normalize_parent_mode(parent_mode: str | None) -> str | None:
+    """父 mode：blank→None；manual→default；其余保留（含合法枚举）。"""
+    if parent_mode is None:
+        return None
+    if not isinstance(parent_mode, str):
+        return None
+    stripped = parent_mode.strip()
+    if not stripped:
+        return None
+    if stripped == "manual":
+        return "default"
+    return stripped
+
+
+def resolve_definition_permission_mode(
+    *,
+    parent_mode: str | None,
+    declared: str | None,
+    auto_available: bool = True,
+) -> str | None:
+    """合并父会话 mode 与子定义声明（官网 Permission modes / Nested 链式）。
+
+    LOCK-2：父 ∈ elevated → 忽略子声明。
+    LOCK-3：子 bypass 且父非 bypass → 保持父。
+    LOCK-10：本期 auto_available 默认 True。
+    """
+    parent = _normalize_parent_mode(parent_mode)
+    declared_n = normalize_definition_permission_mode(declared)
+
+    if declared_n is None:
+        return parent
+
+    if parent in _ELEVATED_PARENT_MODES:
+        return parent
+
+    if declared_n == "bypassPermissions" and parent != "bypassPermissions":
+        return parent
+
+    if declared_n == "auto" and not auto_available:
+        return parent
+
+    return declared_n
+
+
+__all__ = [
+    "normalize_definition_permission_mode",
+    "resolve_definition_permission_mode",
+]

langchain_agentx/loop/subagent/graph.py

@@ -24,6 +24,41 @@ if TYPE_CHECKING:
     from .context import SubagentContext
 
 
+def resolve_subagent_permission_mode(
+    *,
+    headless: bool,
+    inherited: str | None,
+) -> str:
+    """解析子图 permission_mode。
+
+    headless 时继承父 mode（父 ``auto`` → 子 ``auto``，写快路径才可通）；
+    无父 mode 时回落 ``dontAsk``（无交互面）。非 headless 无父 mode 回落 ``default``。
+
+    对照：docs/bug/headless-subagent-dontask-blocks-write-roots-2026-10-22.md
+    """
+    if isinstance(inherited, str) and inherited.strip():
+        return inherited.strip()
+    return "dontAsk" if headless else "default"
+
+
+def resolve_subagent_container_type(
+    *,
+    headless: bool,
+    permission_mode: str,
+) -> str:
+    """解析子图 container_type，与 ``InteractionProfileResolver`` 合法三元组对齐。
+
+    ``sdk`` 剖面强制 ``permission_mode=dontAsk``；若子图继承了 ``auto`` /
+    ``acceptEdits`` / ``bypassPermissions``，须改走 ``interactive`` + headless
+    （interactive-headless），否则 normalize 会拒掉。
+    """
+    if not headless:
+        return "interactive"
+    if permission_mode == "dontAsk":
+        return "sdk"
+    return "interactive"
+
+
 def create_subagent_graph(
     ctx: SubagentContext,
     loader: Any,
@@ -58,9 +93,10 @@ def create_subagent_graph(
         sync_tool_policy_roots_from_workspace,
     )
     from langchain_agentx.tool_runtime.loader import ToolRuntimeLoader
-    from langchain_agentx.tool_runtime.prompt.session_mode import read_parent_permission_mode
 
-    inherited_permission_mode = read_parent_permission_mode(ctx)
+    # permission_mode SSOT：只读 SubagentContext（derive/create_subagent_context 写入）
+    # 勿再 read_parent_permission_mode — docs/bug/subagent-permission-mode-dual-track-ssot-2026-10-22.md
+    inherited_permission_mode = ctx.permission_mode
 
     if ctx.boundary_snapshot is not None and isinstance(loader, ToolRuntimeLoader):
         sync_tool_policy_roots_from_workspace(
@@ -89,6 +125,18 @@ def create_subagent_graph(
     else:
         session_id = f"subagent:{ctx.subagent_type}:{ctx.agent_id}"
 
+    # 勿无条件 headless→dontAsk / 一律 sdk：会盖掉父 auto，且与 sdk 剖面冲突
+    # （docs/bug/headless-subagent-dontask-blocks-write-roots-2026-10-22.md）
+    sub_headless = bool(ctx.headless)
+    sub_permission_mode = resolve_subagent_permission_mode(
+        headless=sub_headless,
+        inherited=inherited_permission_mode,
+    )
+    sub_container_type = resolve_subagent_container_type(
+        headless=sub_headless,
+        permission_mode=sub_permission_mode,
+    )
+
     # Phase 3: config-first 模式
     config = AgentLoopConfig(
         session_id=session_id,
@@ -128,13 +176,9 @@ def create_subagent_graph(
             fork_from_parent=bool(ctx.fork_from_parent),
         ),
         max_steps=ctx.max_steps,
-        headless=bool(ctx.headless),
-        container_type="sdk" if ctx.headless else "interactive",
-        permission_mode=(
-            "dontAsk"
-            if ctx.headless
-            else (inherited_permission_mode or "default")
-        ),
+        headless=sub_headless,
+        permission_mode=sub_permission_mode,
+        container_type=sub_container_type,
         name=f"subagent:{ctx.subagent_type}:{ctx.agent_id[:8]}",
     )
     services = LoopServices(

langchain_agentx/loop/subagent/orchestrator.py

@@ -26,6 +26,9 @@ from langchain_agentx.loop.runtime.subagent_execution_paths import (
     resolve_subagent_workspace_root,
 )
 from langchain_agentx.loop.subagent.context import SubagentContext, create_subagent_context
+from langchain_agentx.loop.subagent.definition_permission import (
+    resolve_definition_permission_mode,
+)
 from langchain_agentx.loop.subagent.hooks_pipeline import (
     _apply_agent_frontmatter_hooks as _pipeline_apply_agent_hooks,
     _apply_skill_fork_hooks as _pipeline_apply_skill_hooks,
@@ -37,6 +40,7 @@ from langchain_agentx.loop.subagent.mcp_child_servers import McpChildServerSessi
 from langchain_agentx.loop.subagent.prompt import enhance_system_prompt_with_env
 from langchain_agentx.tool_runtime.prompt.session_mode import (
     read_parent_loop_config,
+    read_parent_permission_mode,
     resolve_subagent_headless,
 )
 from langchain_agentx.utils.cwd import run_with_cwd_override
@@ -433,6 +437,11 @@ class SubagentOrchestrator:
                     thinking_generation_enabled=thinking_generation_enabled,
                     is_builtin_subagent=getattr(subagent_config, "is_builtin", False),
                     inherit_hooks=True if inherit_hooks is None else inherit_hooks,
+                    permission_mode=self._resolve_effective_permission_mode(
+                        parent_ctx=ctx,
+                        overrides=overrides,
+                        subagent_config=subagent_config,
+                    ),
                 )
                 _apply_skill_fork_progress_host(
                     subagent_ctx,
@@ -709,6 +718,11 @@ class SubagentOrchestrator:
                     thinking_generation_enabled=thinking_generation_enabled,
                     is_builtin_subagent=getattr(subagent_config, "is_builtin", False),
                     inherit_hooks=True if inherit_hooks is None else inherit_hooks,
+                    permission_mode=self._resolve_effective_permission_mode(
+                        parent_ctx=ctx,
+                        overrides=overrides,
+                        subagent_config=subagent_config,
+                    ),
                 )
                 _apply_skill_fork_progress_host(
                     subagent_ctx,
@@ -854,6 +868,25 @@ class SubagentOrchestrator:
         )
         return overrides, runtime_ctx, prepared
 
+    @staticmethod
+    def _resolve_effective_permission_mode(
+        *,
+        parent_ctx: "ToolExecutionContext",
+        overrides: SubagentContextOverrides,
+        subagent_config: "SubagentConfig",
+    ) -> str | None:
+        """LOCK-8/9：overrides > definition×parent merge > 仅父；禁止裸传 derive。"""
+        parent_mode = read_parent_permission_mode(parent_ctx)
+        if overrides.permission_mode is not None:
+            declared = overrides.permission_mode
+        else:
+            declared = getattr(subagent_config, "permission_mode", None)
+        return resolve_definition_permission_mode(
+            parent_mode=parent_mode,
+            declared=declared,
+            auto_available=True,
+        )
+
     @staticmethod
     def _resolve_child_loader_headless(
         *,

langchain_agentx/tool_runtime/prompt/session_mode.py

@@ -1,9 +1,10 @@
 """
-prompt/session_mode.py — 会话 headless 推断（对齐 CC shouldAvoidPermissionPrompts）
+prompt/session_mode.py — 会话 headless / permission_mode 共享原语
 
 职责：
     在 session / loop 创建时推断是否应避免交互式 permission prompt；
-    子代理派生时继承/强制 headless（对齐 CC runAgent.ts agentGetAppState）。
+    子代理派生时继承/强制 headless（对齐 CC runAgent.ts agentGetAppState）；
+    规范化子 Agent 定义 permissionMode（供 loader 与 loop merge 共用，避免 tools→loop）。
 """
 
 from __future__ import annotations
@@ -13,6 +14,17 @@ from typing import Any
 
 _HEADLESS_CONTAINER_TYPES = frozenset({"background", "batch", "worker", "sdk"})
 
+_DEFINITION_PERMISSION_MODES = frozenset(
+    {
+        "default",
+        "acceptEdits",
+        "auto",
+        "dontAsk",
+        "bypassPermissions",
+        "plan",
+    }
+)
+
 
 def infer_session_headless(
     *,
@@ -64,10 +76,19 @@ def read_parent_loop_config(parent_ctx: Any) -> tuple[bool | None, str | None]:
 
 
 def read_parent_permission_mode(parent_ctx: Any) -> str | None:
-    """从父 ctx / runnable_config 读取 permission_mode（子 Agent compile 继承用）。"""
+    """从父 ctx / tool_flags / runnable_config 读取 permission_mode（子 Agent 继承用）。
+
+    读序：显式字段 > tool_flags > configurable > loop_config。
+    与 RuntimeContextFactory.derive / create_subagent_context 共用，避免双轨分歧。
+    """
     direct = getattr(parent_ctx, "permission_mode", None)
     if isinstance(direct, str) and direct.strip():
         return direct.strip()
+    tool_flags = getattr(parent_ctx, "tool_flags", None)
+    if isinstance(tool_flags, dict):
+        flag_mode = tool_flags.get("permission_mode")
+        if isinstance(flag_mode, str) and flag_mode.strip():
+            return flag_mode.strip()
     runnable_config = getattr(parent_ctx, "runnable_config", None)
     if not isinstance(runnable_config, dict):
         return None
@@ -83,6 +104,25 @@ def read_parent_permission_mode(parent_ctx: Any) -> str | None:
     return None
 
 
+def normalize_definition_permission_mode(value: str | None) -> str | None:
+    """规范化子声明 permissionMode：blank→None；manual→default；非法→None。
+
+    供 Agent markdown loader 与 ``resolve_definition_permission_mode`` 共用。
+    """
+    if value is None:
+        return None
+    if not isinstance(value, str):
+        return None
+    stripped = value.strip()
+    if not stripped:
+        return None
+    if stripped == "manual":
+        return "default"
+    if stripped not in _DEFINITION_PERMISSION_MODES:
+        return None
+    return stripped
+
+
 def resolve_subagent_headless(
     *,
     parent_headless: bool | None,

langchain_agentx/tools/agent/loader.py

@@ -8,7 +8,8 @@ tools/agent/loader.py — 用户自定义 Agent 加载器
 CC 对照：src/tools/AgentTool/loadAgentsDir.ts getAgentDefinitionsWithOverrides()
          + parseAgentFromMarkdown()
 当前裁剪范围：v1 Markdown 解析 + YAML frontmatter + 优先级合并；
-             tools/disallowedTools/maxTurns/background/mcpServers/requiredMcpServers 字段支持；
+             tools/disallowedTools/maxTurns/background/mcpServers/requiredMcpServers/
+             permissionMode 字段支持（非法枚举 → None + warning，LOCK-11）；
              agents 目录下 ``.md`` 扩展名 **大小写不敏感**（``*.MD`` / ``*.Md`` 与 ``*.md`` 同等）；
              v2 memoization / file watcher
 
@@ -23,6 +24,7 @@ CC 对照：src/tools/AgentTool/loadAgentsDir.ts getAgentDefinitionsWithOverride
   disallowedTools: [Edit] # 可选，denylist（优先级高于 tools）
   maxTurns: 30            # 可选，default_max_steps
   background: false       # 可选，allow_async
+  permissionMode: dontAsk # 可选；与父 mode 合并见 resolve_definition_permission_mode
   hooks: {...}            # 可选，与 skill frontmatter 同结构（子 loop SUBAGENT_STOP）
   ---
   系统提示词 body...
@@ -203,6 +205,10 @@ class AgentDefinitionLoader:
         mcp_servers = mcp_parser.parse_servers(
             frontmatter.get("mcpServers", frontmatter.get("mcp_servers"))
         )
+        permission_mode = _parse_permission_mode(
+            frontmatter.get("permissionMode", frontmatter.get("permission_mode")),
+            file_path=file_path,
+        )
 
         return SubagentConfig(
             name=name.strip(),
@@ -221,6 +227,7 @@ class AgentDefinitionLoader:
             mcp_servers=mcp_servers,
             hooks=hooks,
             hooks_root=str(file_path.parent) if hooks else None,
+            permission_mode=permission_mode,
         )
 
     def _split_frontmatter(self, text: str) -> tuple[dict | None, str]:
@@ -380,6 +387,31 @@ def _parse_agent_memory_scope(raw: Any, file_path: Path):
     return scope  # type: AgentMemoryScope
 
 
+def _parse_permission_mode(raw: Any, *, file_path: Path) -> str | None:
+    """解析 frontmatter permissionMode；非法 → None + warning（LOCK-11）。"""
+    from langchain_agentx.tool_runtime.prompt.session_mode import (
+        normalize_definition_permission_mode,
+    )
+
+    if raw is None:
+        return None
+    if not isinstance(raw, str):
+        logger.warning(
+            "Agent file %s invalid permissionMode %r, ignoring",
+            file_path,
+            raw,
+        )
+        return None
+    normalized = normalize_definition_permission_mode(raw)
+    if normalized is None and raw.strip():
+        logger.warning(
+            "Agent file %s invalid permissionMode %r, ignoring",
+            file_path,
+            raw,
+        )
+    return normalized
+
+
 def _describe_tools(tools_raw: Any, disallowed_raw: Any) -> str:
     if tools_raw is None or tools_raw == ["*"]:
         base = "All tools"

langchain_agentx/tools/agent/registry/config.py

@@ -51,3 +51,5 @@ class SubagentConfig:
     """Frontmatter ``hooks:``（与 skill 结构相同）；子 loop 由 orchestrator 注册。"""
     hooks_root: str | None = None
     """Agent 定义文件所在目录（``CLAUDE_AGENT_DIR`` / command env 根）。"""
+    permission_mode: str | None = None
+    """Frontmatter ``permissionMode``；与父 mode 经 ``resolve_definition_permission_mode`` 合并后写入 SSOT。"""

{langchain_agentx_python-2.4.1.dist-info → langchain_agentx_python-2.4.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: langchain-agentx-python
-Version: 2.4.1
+Version: 2.4.4
 Summary: LangChain/LangGraph-based agent utilities for CodeBaseX.
 Author-email: GoodMood2008 <GoodMood2008@users.noreply.github.com>
 License: Apache License

{langchain_agentx_python-2.4.1.dist-info → langchain_agentx_python-2.4.4.dist-info}/RECORD

@@ -1,4 +1,4 @@
-langchain_agentx/__init__.py,sha256=Zd9ZNHTop9xajkMeEv5kx083EBWUjZUH5LfYbtWXTXQ,2014
+langchain_agentx/__init__.py,sha256=gX9uh5HhQBKt0DLInVlFKZmLGU6UFTHBPQmjVNSMRKo,2014
 langchain_agentx/command/__init__.py,sha256=Ej260S5uFQcmEtGZQG_NH7BYjHoStrpBLtGUsBTxyZk,631
 langchain_agentx/command/allowed_tools.py,sha256=TVA0VM8rm98H-QbLK_GRiX5RhEAZFxKawliMi4kk96A,3359
 langchain_agentx/command/context.py,sha256=DIGOGPBw5UGDBm0WNNJlKx1h_9rCRmcdROv4DT61Qug,731
@@ -34,7 +34,7 @@ langchain_agentx/loop/run_context.py,sha256=QPnd3M36uq8UqD9HrZyydDkG6jAbTGx9IP1n
 langchain_agentx/loop/config/__init__.py,sha256=0pf3Mml7LZpQ1C3_AtROFQClrBQegaGCG4YCTfSr9v8,1137
 langchain_agentx/loop/config/agent_config.py,sha256=tOnAHFor6dkle3FvUOVx0YsmiYVTH11UrWSyTmOLV0c,3100
 langchain_agentx/loop/config/compaction_config.py,sha256=MmXqY47-9nPDhdXvnU92Xp0XeaZ605ErQwX9d2emEkM,1176
-langchain_agentx/loop/config/interaction_profile.py,sha256=UWrlI3aTWjYRq1mDeXL-xL-iCrQU-bXDXhETP6q9icY,10020
+langchain_agentx/loop/config/interaction_profile.py,sha256=eAOzYDkk08WauAemXkb2AQD_Ok_9iZppFh5CFDA4bVE,10195
 langchain_agentx/loop/config/loop_config.py,sha256=Y7c5pluniarT3eKD8T51c8CWfTDJo_Fi3vJJDtQHGA4,16762
 langchain_agentx/loop/config/loop_runtime_overlay.py,sha256=PuB4vFdqCHXRbAFhAJIrtwq9pUIrHafyn0ApD4s06KU,2440
 langchain_agentx/loop/config/model_context_resolver.py,sha256=o9RR0Vnu07TD4Y3V8jk5V1NfkMcPcLjE8uaaLOe22Qo,4067
@@ -71,7 +71,7 @@ langchain_agentx/loop/exit/terminal.py,sha256=_DAZk-kS4Xd0nxMlayLo60-uj1Y5ozgBjL
 langchain_agentx/loop/exit/withheld_error.py,sha256=LfX3j7Rgd9VoMzlz7GOs9TPuRe7RXr_Gxweyotx3tqQ,1846
 langchain_agentx/loop/graph/__init__.py,sha256=9pUUqn7G87n3lV45iYIU24j0wcTHyCD--SSdtv3urh4,136
 langchain_agentx/loop/graph/builtin_loop_control.py,sha256=31o4H6SDGC_vECSliXecuVEnzlD1ahlVZ5JzEpxYY04,9248
-langchain_agentx/loop/graph/factory.py,sha256=cBioPj3uIqDsDAPha1g4dbR3ZGiHffr9NcdqUT22goE,113570
+langchain_agentx/loop/graph/factory.py,sha256=ec13qBe_CVHXK2U15_75R2RdIGn9o7JefDr9M9FHyEo,113686
 langchain_agentx/loop/graph/graph_edges.py,sha256=kW6Npx-nMIPzcaisCxVPkTwf5Y9GOKy1NWCNkJWeJBQ,47370
 langchain_agentx/loop/graph/reactive_compact_node.py,sha256=633b5hTnR3BK8GBEKWhzOwGB0BQrVRKozNxDomWFjLo,8762
 langchain_agentx/loop/graph/runtime_tools_node.py,sha256=wQkbc0ophyefpPZEc0q1vKoJOIdS4S6d6hSsrkdRLDk,7387
@@ -133,7 +133,7 @@ langchain_agentx/loop/prompt/tool_aware_sections.py,sha256=vST7Z5y2eoITTTcsBo9ol
 langchain_agentx/loop/prompt/using_your_tools.py,sha256=NVLscfx2jzCHOx5R1jcoTwcOMsFkPx2Y9p_XD0Von3U,5251
 langchain_agentx/loop/runtime/__init__.py,sha256=7FEIC1nvNHIbe2azfJzg5AWH9GWYfCQopQWx8a5OMqM,555
 langchain_agentx/loop/runtime/context.py,sha256=dJHQvhs79c6xJZMrkB6-aUNFVax2R7V20Oj48nFePJs,1242
-langchain_agentx/loop/runtime/context_factory.py,sha256=cjrC29wfeVs_b25kqJ_nn9bBHfBz7NPTK6hIcIptJDA,8193
+langchain_agentx/loop/runtime/context_factory.py,sha256=KWD0ojHxhE3PgG-TBrY6KsBDjDpYPrhgD_B11rE66rg,9404
 langchain_agentx/loop/runtime/subagent_execution_paths.py,sha256=Bgyiom48uta1FZcnIE7fIxyrD-VFCRsw7s8IxIxmLb4,4033
 langchain_agentx/loop/stream/graph_driver.py,sha256=qMZHEw3wJ19Tfbz31-VPLy8Mt6e90xKougIjAoaEFCE,3935
 langchain_agentx/loop/stream/helpers.py,sha256=b2sqtwrAa5ic5B5AzNqItU8pmDHw13iGs3hBiShSIZk,1390
@@ -146,18 +146,19 @@ langchain_agentx/loop/subagent/active_run_registry.py,sha256=KurhAMDTBnRkdxNidaM
 langchain_agentx/loop/subagent/async_runner.py,sha256=ZJu6DztRmg0SNEapEuPyQbsk8SprXiMKWDWDHb9L7yQ,14124
 langchain_agentx/loop/subagent/boundary_snapshot.py,sha256=9cQuqN29nJDRnHnx9c8b09KRmODE2zv15Z06QyjVJps,10008
 langchain_agentx/loop/subagent/cache_safe_params.py,sha256=-qcgdazEYRy6s4ILQuttpxraE3gsxq17Ro7LYBnuv3E,4460
-langchain_agentx/loop/subagent/context.py,sha256=tR2QQfNBKci0_rOm6e_p5wNXlo1gZntHpgkFfIuTLHE,24000
+langchain_agentx/loop/subagent/context.py,sha256=cSyXYu9l5MnHQMEJkCQFTZKhn3pnIR6nGgGKzd_vhr8,25099
+langchain_agentx/loop/subagent/definition_permission.py,sha256=_Y30FA0EDTgqpqjw5luIiwbpABLo17myC3aY4NWbGIw,2188
 langchain_agentx/loop/subagent/display_projector.py,sha256=AKsGWS1c9reH0kuD5u4oQ24KsBgyt7X10iZM3ere6Fs,3504
 langchain_agentx/loop/subagent/fork_boilerplate.py,sha256=2Uh3cwegL7V-DvtLIxjX7ik5uW5mXfY2NBzP-biREso,5005
 langchain_agentx/loop/subagent/fork_ports.py,sha256=hZATCvlYOxNVZtR3PoOVbI1GkA0KhHEyux6lUIjG5_4,1323
 langchain_agentx/loop/subagent/fork_worktree_notice.py,sha256=WKAJVxvRMJfbzRe_07Mgrm_zQIQCYx4RwsUnWSSOnkg,1389
 langchain_agentx/loop/subagent/forked_runner.py,sha256=dgzXA3nw9lG-3Dx24ovulPCK3ztRStmO_e8IubQ_MIo,7083
-langchain_agentx/loop/subagent/graph.py,sha256=io964LA8JIzaTSkphLklmnJcX5w3McwSj0MwhFqlH4g,5542
+langchain_agentx/loop/subagent/graph.py,sha256=Cjij51QWUwqO4bJtXYUSWfLidM7URJ73FB81bZLILV0,7151
 langchain_agentx/loop/subagent/hook_attachment_messages.py,sha256=em3VXaUfURou_YzxXrnJwK5hNtGtp3Vu0I6HJhC9pd8,1451
 langchain_agentx/loop/subagent/hooks_compose.py,sha256=enPKRsAbqjB5HqACE-YFzM8K3Job7azi4wpqI1kmgl8,2515
 langchain_agentx/loop/subagent/hooks_pipeline.py,sha256=4OweLS52TRbcaUO56YpE-qX71ZPCjPRS0j9KzIcx5ls,6399
 langchain_agentx/loop/subagent/mcp_child_servers.py,sha256=UJ9FtIZroYvP6KfNLUnHKbb7bqg2qSmo15MkzHcVKME,4395
-langchain_agentx/loop/subagent/orchestrator.py,sha256=yWmLUBu43PQjjlx_bPeYddvj6AxnViPpfr8_lKklgo0,49313
+langchain_agentx/loop/subagent/orchestrator.py,sha256=ceMY0wjSDsmnzcofz1ln6orZqfBGr3SgLHTQJaI1k7M,50672
 langchain_agentx/loop/subagent/parent_hook_snapshot.py,sha256=cwBC2eXvx1evc6QPpI42zq-iKThpObyoyWmkDNj9E7Q,2095
 langchain_agentx/loop/subagent/progress.py,sha256=nef3VVT9QmB2ZWCDAO86cmtVwCJIR8lXMr6jczQKqOY,6650
 langchain_agentx/loop/subagent/progress_dispatcher.py,sha256=KD5EdfoGplIaT8xvt5vgfXgSLPbvn9KqvY85wLpOX7A,4603
@@ -540,7 +541,7 @@ langchain_agentx/tool_runtime/prompt/headless.py,sha256=CcRNmshgICZY4RJjKWHqE2cw
 langchain_agentx/tool_runtime/prompt/legacy_resolver_adapter.py,sha256=wFMSSaJrOxGxEfPrRfSD_JK2izvrV0IRmwpOUkAwB0A,1915
 langchain_agentx/tool_runtime/prompt/messages.py,sha256=IYkQPRSHTW87pZ6u31phWX45ooAG0cqn3OnZ4UyJPOU,1569
 langchain_agentx/tool_runtime/prompt/race.py,sha256=kNNHxP1CLI3ysVx8T0i8UM_ya190837bSngJYhEsTP4,11326
-langchain_agentx/tool_runtime/prompt/session_mode.py,sha256=Zzje9JdzD1zzFFP8jz_mryiFCgnyc8DFm_bwNe6hBZw,3440
+langchain_agentx/tool_runtime/prompt/session_mode.py,sha256=jc8nprtKiXfTI3Q3u3vtKuvh4DKoOSqAXfBKnHGFSno,4706
 langchain_agentx/tool_runtime/prompt/types.py,sha256=mvPk6HSxKlngihpRnNut1VDbmKsAejHxCKvihzXIREA,5334
 langchain_agentx/tool_runtime/resolvers/__init__.py,sha256=3nr1ouLHAF1O17Zfg1yKrZ5qAezDwRdVSWKN0lu-Iik,818
 langchain_agentx/tool_runtime/resolvers/agent_session.py,sha256=ZcQga1itCTX2TgNoIaCfVzV20w7nQjSkgDYRU4AWHto,3855
@@ -557,7 +558,7 @@ langchain_agentx/tools/agent/backend.py,sha256=10cpfnDHbbaCRkqEtyoQupPsXf25HsvNS
 langchain_agentx/tools/agent/builtin_subagent_loader.py,sha256=pIc-FcUrrnxjPmJT8lGy_xdgcMa-s6Tb39qpCQPaytw,3665
 langchain_agentx/tools/agent/cwd_resolution.py,sha256=glM_2k8Nd_N5IrCCJ5GHTPzVmo43SHigGf5wh2RK0NA,4802
 langchain_agentx/tools/agent/limits.py,sha256=UHjwkwf6ONeRw3FMu-uA4ueekG5jr9_e3EDhPcZ61NU,3828
-langchain_agentx/tools/agent/loader.py,sha256=BCR5VWbkWan4aR1Rrg7xnPaceL4oVsG1Td0SBM5HWQU,15342
+langchain_agentx/tools/agent/loader.py,sha256=KyKNFtllYIo7kwcf0Ky8_yLz3VQzAcUbsjNfIyZPhNc,16511
 langchain_agentx/tools/agent/memory_paths.py,sha256=5EASlk9hQf3440tm5NnZ8MXO4Lg1_9pcd8KBUkV0Ilc,3235
 langchain_agentx/tools/agent/memory_prompt.py,sha256=jK0mDCL0tEzflyKhcorusKxhayUQYG0G4zyF_M83gRE,2251
 langchain_agentx/tools/agent/memory_snapshot.py,sha256=gmygz7mC-Zlck_nhhuBe6QfhTOMBIS5HMcYDr-oT-2M,14100
@@ -575,7 +576,7 @@ langchain_agentx/tools/agent/built_in/plan.py,sha256=sTq3r6NZg-9mhqXU9gvEPwpVSeS
 langchain_agentx/tools/agent/built_in/statusline_setup.py,sha256=LuC1O6UVLaKRmcGR7GoANv790vMWyHN2O1nY83Fhdvg,2639
 langchain_agentx/tools/agent/built_in/verification.py,sha256=y956nSeUGak-lrF1_CpZMHtlqOhHhhzhtp7_uDnXQLU,5671
 langchain_agentx/tools/agent/registry/__init__.py,sha256=Ts5_OJzTnbiqZDxXqMI1UnFaWxXvaQgMIGM6UMgY51s,643
-langchain_agentx/tools/agent/registry/config.py,sha256=BBQnI2s3it8ZK8pKGxHs3WR0TwtJLoU6R_q5Gj3zgjg,2192
+langchain_agentx/tools/agent/registry/config.py,sha256=6I7OGKP_EBIRBZpnClSCTU7tq65dIHQuzgNxdbqEewY,2353
 langchain_agentx/tools/agent/registry/registry.py,sha256=knii6XWFZvPkcqzTK3Y4PX5evGcDmto4SsZ7VzUsPSI,1544
 langchain_agentx/tools/ask_user_question/__init__.py,sha256=bDHVPc4dHBw___7rbaTxClsbDpQ-jLt5Obj8R2VBLAc,444
 langchain_agentx/tools/ask_user_question/constants.py,sha256=rqlL31BTSNY2spn8f2i-MtKjy3y3QoLFAeqenFmYe6Q,1283
@@ -838,8 +839,8 @@ langchain_agentx/workspace/root_grant_manager.py,sha256=W3gy8HTevbERbXqIgRcjzOXO
 langchain_agentx/workspace/tool_boundary.py,sha256=UDwX6swpSLsx9HNkYuuRRiV5o7ZZG_Bru2Yn0c5kNX8,5724
 langchain_agentx/workspace/validators.py,sha256=tQt-6TOcL8Fw7Ig5ebA9S7vGWh1rby920eFW6x8Tk9E,1439
 langchain_agentx/workspace/view.py,sha256=PGasqTaqhlD03SXXazHuw4RHfV681AIdlsYqL70pEjc,4774
-langchain_agentx_python-2.4.1.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-langchain_agentx_python-2.4.1.dist-info/METADATA,sha256=S3olBaOihP0sVvV9jwsr4jyqGWc5ktRS2AdD0WIzD0g,23971
-langchain_agentx_python-2.4.1.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
-langchain_agentx_python-2.4.1.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
-langchain_agentx_python-2.4.1.dist-info/RECORD,,
+langchain_agentx_python-2.4.4.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+langchain_agentx_python-2.4.4.dist-info/METADATA,sha256=yKso1obM03vdYTdmgAAiSaPpXk2sVBOUFq8_CzLm9MQ,23971
+langchain_agentx_python-2.4.4.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
+langchain_agentx_python-2.4.4.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
+langchain_agentx_python-2.4.4.dist-info/RECORD,,