feat: agent summoning system, todo improvements, security fixes, double-execution bug fix

- Add summon/retrieve tools for spawning child agents in new tabs
  - summon: non-blocking, returns agent_id immediately
  - retrieve: blocking, waits for child to finish, returns result
  - Child tools are intersected with parent permissions (no privilege escalation)
  - Working directory validated to stay within workspace
  - Abort controller stops orphaned agents on tab close
- Rename task_list tool to todo with comprehensive usage guidance in system prompt
- Rename PermissionLog.svelte to ToolPermissions.svelte
- Add 'Summon agents' toggle to tool permissions UI
- Redesign TaskListPanel with DaisyUI checkboxes (indeterminate for in-progress)
- Remove 'blocked' status from task system
- Add tab-created WebSocket event for child agent tab visibility
- Add HMR cleanup for WebSocket connections (close stale connections on hot reload)
- Fix ensureAssistantMessage to not throw on closed tabs
- Fix double tool execution: remove execute from AI SDK tool() in registry.ts
  (agent.ts already executes tools manually via executeToolWithStreaming)
- Fix all pre-existing test failures (missing mocks, stale API signatures)
- Add debug info to copy button (tab ID, injected skills, all tab IDs)
- Add tab ID and tools to conversation copy output

1 files changed, 47 insertions, 27 deletions

diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts
index 3b49de9..c5aa81b 100644
--- a/packages/core/src/index.ts
+++ b/packages/core/src/index.ts
@@ -2,38 +2,58 @@
 
 // Agent & LLM
 export { Agent } from "./agent/agent.js";
+// Config
+export {
+	configToRuleset,
+	createConfigWatcher,
+	loadConfig,
+	validateConfig,
+} from "./config/index.js";
+// Credentials
+export * from "./credentials/index.js";
+// Database
+export { closeDatabase, getDatabase, getDatabasePath } from "./db/index.js";
+export {
+	appendMessage,
+	clearMessagesForTab,
+	getMessagesForTab,
+	type MessageRow,
+	updateMessage,
+} from "./db/messages.js";
+export { deleteSetting, getSetting, setSetting } from "./db/settings.js";
+// Tabs & Messages
+export {
+	archiveTab,
+	createTab,
+	getTab,
+	listOpenTabs,
+	type TabRow,
+	updateTabModel,
+	updateTabStatus,
+	updateTabTitle,
+} from "./db/tabs.js";
 export { createProvider } from "./llm/provider.js";
-
+// Models
+export { ModelRegistry } from "./models/index.js";
+export * from "./permission/index.js";
+// Skills
+export {
+	createSkillsWatcher,
+	getSkillByName,
+	loadSkills,
+	parseSkillFile,
+	resolveSkillsForAgent,
+} from "./skills/index.js";
+export { prefix as bashArityPrefix } from "./tools/bash-arity.js";
 // Tools
 export { createListFilesTool } from "./tools/list-files.js";
-export { createRunShellTool } from "./tools/run-shell.js";
-export { analyzeCommand } from "./tools/shell-analyze.js";
-export { prefix as bashArityPrefix } from "./tools/bash-arity.js";
 export { createReadFileTool } from "./tools/read-file.js";
 export { createToolRegistry } from "./tools/registry.js";
+export { createRetrieveTool, type RetrieveCallbacks } from "./tools/retrieve.js";
+export { createRunShellTool } from "./tools/run-shell.js";
+export { analyzeCommand } from "./tools/shell-analyze.js";
+export { createSummonTool, type SummonCallbacks } from "./tools/summon.js";
+export { createTaskListTool, TaskList } from "./tools/task-list.js";
 export { createWriteFileTool } from "./tools/write-file.js";
-export { TaskList, createTaskListTool } from "./tools/task-list.js";
-
 // Types & Permissions
 export * from "./types/index.js";
-export * from "./permission/index.js";
-
-// Config
-export { loadConfig, configToRuleset, validateConfig, createConfigWatcher } from "./config/index.js";
-
-// Skills
-export { parseSkillFile, loadSkills, resolveSkillsForAgent, getSkillByName, createSkillsWatcher } from "./skills/index.js";
-
-// Models
-export { ModelRegistry } from "./models/index.js";
-
-// Credentials
-export * from "./credentials/index.js";
-
-// Database
-export { getDatabase, closeDatabase, getDatabasePath } from "./db/index.js";
-
-// Tabs & Messages
-export { type TabRow, createTab, getTab, listOpenTabs, updateTabTitle, updateTabModel, updateTabStatus, archiveTab } from "./db/tabs.js";
-export { type MessageRow, appendMessage, updateMessage, getMessagesForTab, clearMessagesForTab } from "./db/messages.js";
-export { getSetting, setSetting, deleteSetting } from "./db/settings.js";