7 Commits

Author	SHA1	Message	Date
Tianyi Cui	bb3f6bd736	refactor(subagent): unify async readiness and cancellation	2026-07-12 22:41:59 +08:00
Tianyi Cui	cb03c8c284	fix(scope): align trust and input boundaries ... Rewrite the agent-scope RFC with executable examples and an explicit security non-goal. Harden subagent scalar and depth validation, and pin live tool-filter semantics across code, tests, and generated docs.	2026-07-12 11:17:57 +08:00
Tianyi Cui	d427478c44	fix(subagent): validate direct depth boundaries	2026-07-12 10:48:20 +08:00
Tianyi Cui	a9cb70d896	fix(scope): harden final ownership boundaries	2026-07-12 05:13:17 +08:00
Tianyi Cui	36b8370027	fix(scope): close remaining ownership boundaries	2026-07-12 03:51:55 +08:00
Tianyi Cui	3263dab822	fix(core): enforce agent-scoped ownership boundaries	2026-07-11 22:55:26 +08:00
Tianyi Cui	0c9ea3145f	Extract the shared in-process driver into dsh-subagent-inprocess (review feedback) ... The shared run driver lived inside dsh-subagent-spawn, so the spawn package carried fork-aware seeding logic and dsh-subagent-fork depended backward on dsh-subagent-spawn — the two in-process backends were not independent. Move the driver (startInProcessRun, depthOf, SubagentDepthError, InProcessRunOptions) into a new pure-library package @deepseek-ai/dsh-subagent-inprocess that registers nothing. spawn and fork now both depend only on that driver and neither knows about the other; spawn no longer re-exports it and fork no longer imports from spawn. Also wire BOTH backends in examples/coding-agent/cordis.yml (config-only): load dsh-subagent-spawn + dsh-subagent-fork + two dsh-tool-subagent instances with distinct toolNames (subagent → spawn, subagent_fork → fork), demonstrating that exposing multiple transports needs no code change.	2026-06-22 14:27:38 +08:00