ace-llm-providers-cli 0.31.7 → 0.33.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6be56a7438a2d8daa7a1081c83ab44733245a52f1028fc1016d920548b69255e
-  data.tar.gz: be8ba7f7231136ef005f35b672fd546fa6d29ea9495784a6b41e41848754b29d
+  metadata.gz: 7410921d087bbcfa634cec60984b2d578de92d92d84fc0730aa4cae054848b4b
+  data.tar.gz: '08b71084f7f13ac67941da17c20e84b34c1dd52673f037a929ac7e896e0c2310'
 SHA512:
-  metadata.gz: 5f624dcdabb360ea555dac5ca0b73a9721cd088ae46e9000a6ae8214000450638be83c258283dd574d4846a27fc9f57ae557e85ec8a0d5ac6a64cbb781402c68
-  data.tar.gz: 535009d237c56c4d93e3b0740376879d71f449f4d5fe22539890f704c6c39c78fe8c6b78687b69fa16b31cf24659813daeace393c52af14b54840479ed711adf
+  metadata.gz: 92613d00db61f1ad8e8a1e99285c478526b38dd998bd26355a543939ba2453da13f23df97479ae9a4186653fce4b31bd4383dc8fa23ff69c9a887ede90d8c339
+  data.tar.gz: 50d6485baf304a089b0311a3f0fe096fc90bb697a1b72b4c43f27d295a21631753e1e1d8be718c89722a71e51d3cbfa296926d49fe46875844d4dd53b4969e0a

data/.ace-defaults/llm/providers/agy.yml

@@ -0,0 +1,29 @@
+name: agy
+last_synced: 2026-08-29
+class: Ace::LLM::Providers::CLI::AgyClient
+gem: ace-llm-providers-cli
+models_dev_id: google
+context_limit: 1000000
+models:
+  - gemini-3.7-flash-high
+  - gemini-3.7-flash-medium
+  - gemini-3.6-flash-high
+  - gemini-3.6-flash-medium
+  - gemini-3.5-flash-medium
+  - gemini-3.1-pro-high
+  - claude-sonnet-4-6
+aliases:
+  global:
+    agy: agy:gemini-3.5-flash-medium
+  model:
+    flash: gemini-3.5-flash-medium
+    flash-medium: gemini-3.5-flash-medium
+    flash-high: gemini-3.7-flash-high
+    pro: gemini-3.1-pro-high
+capabilities:
+  - text_generation
+  - code_generation
+  - streaming
+  - function_calling
+default_options:
+  temperature: 0.7

data/.ace-defaults/llm/providers/pi.yml

@@ -3,11 +3,9 @@ class: Ace::LLM::Providers::CLI::PiClient
 gem: ace-llm-providers-cli
 models:
   # ZAI (default provider)
-  - zai/glm-4.7
-  - zai/glm-4.6
-  - zai/glm-4.5
-  - zai/glm-5.1
-  - zai/glm-5-turbo 
+  - zai/glm-5.3
+  - zai/glm-5.3-flash
+  - zai/glm-5.3-highspeed
   # Anthropic
   - anthropic/claude-opus-4-6
   - anthropic/claude-opus-4-5
@@ -26,10 +24,11 @@ models:
   - openai-codex/gpt-5.1
 aliases:
   global:
-    pi: pi:zai/glm-5.1
+    pi: pi:zai/glm-5.3-flash
   model:
-    glm: zai/glm-5.1
-    glmturbo: zai/glm-5-turbo
+    glm: zai/glm-5.3
+    glmflash: zai/glm-5.3-flash
+    glmhighspeed: zai/glm-5.3-highspeed
     gpt: openai-codex/gpt-5.4
 capabilities:
   - text_generation

data/CHANGELOG.md

@@ -7,6 +7,56 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- Hardened `SafeCapture` process group termination for container PID namespaces where background processes reparent to PID 1, ensuring reliable cleanup of descendant processes without ESRCH failures.
+
+## [0.33.0] - 2026-09-04
+
+### Changed
+- Registered the live Pi/Z.AI GLM 5.3 family (`zai/glm-5.3`, `zai/glm-5.3-flash`, `zai/glm-5.3-highspeed`) in the shipped provider registry and removed the obsolete GLM 4.x/5.1/5-turbo entries and `glmturbo` alias.
+- Made `zai/glm-5.3-flash` the routine Pi default: the global `pi` alias and `PiClient` default model now target the flash model, with `glm`, `glmflash`, and `glmhighspeed` model aliases for the three live targets.
+
+### Technical
+- Added focused regression coverage for registry parity between project and shipped defaults, alias and full-slash-selector resolution without truncation, unknown-model fail-closed behavior, and `--no-fallback` preserving exactly one provider/model target.
+
+## [0.32.4] - 2026-09-02
+
+### Technical
+- Included in the coordinated all-package patch release preparation for ACE monorepo review.
+## [0.32.3] - 2026-08-29
+
+### Fixed
+- Split `agy` readiness from headless-auth verification so installed, callable Antigravity CLI setups report as ready without being misclassified as blocked on authentication.
+
+### Technical
+- Added focused readiness regression coverage and updated the retained CLI smoke scenario to exercise the five-provider surface, including the `agy` ready-but-unverified path.
+
+## [0.32.2] - 2026-08-29
+
+### Fixed
+- Switched the Antigravity CLI one-shot prompt guard to enforce the configured limit by byte size, preventing multibyte prompts from bypassing the argv launch safety check.
+- Corrected the `agy` readiness check to report installed-but-unverified headless authentication instead of claiming the provider is already authenticated.
+
+### Technical
+- Added regression coverage for multibyte prompt-limit enforcement and the updated `agy` readiness semantics.
+
+## [0.32.1] - 2026-08-29
+
+### Fixed
+- Rejected oversized Antigravity CLI one-shot prompts with a clear provider error before they can fail at process launch on OS argv-length limits.
+- Treated installed `agy` binaries as configured in readiness checks instead of reporting a hard-coded unauthenticated false negative.
+
+### Technical
+- Added regression coverage for the Antigravity oversized-prompt guard and configured-readiness behavior.
+
+## [0.32.0] - 2026-08-29
+
+### Added
+- Added first-class Antigravity CLI (`agy`) provider support with documented model aliases, one-shot JSON output handling, conversation resume metadata, timeout forwarding, and health-check coverage.
+
+### Technical
+- Added retained provider smoke coverage and deterministic registration/command-construction tests for the new Antigravity adapter.
+
 ## [0.31.7] - 2026-08-12
 
 ### Technical

data/README.md

@@ -12,11 +12,11 @@
 
 </div>
 
-> Works with: Claude Code, Codex CLI, OpenCode, Gemini CLI, pi-agent, and more.
+> Works with: Claude Code, Codex CLI, OpenCode, Gemini CLI, Antigravity CLI, pi-agent, and more.
 
 [ace-llm Usage Guide](../ace-llm/docs/usage.md) | [ace-llm Handbook](../ace-llm/docs/handbook.md) | Part of [ACE](https://github.com/cs3b/ace)
 
-`ace-llm-providers-cli` extends [ace-llm](../ace-llm) with provider clients that execute through installed CLI tools (Claude, Codex, OpenCode, Gemini, pi, Codex OSS) while preserving the shared command interface. Provider defaults live in versioned YAML, and a health-check command verifies local readiness.
+`ace-llm-providers-cli` extends [ace-llm](../ace-llm) with provider clients that execute through installed CLI tools (Antigravity, Claude, Codex, OpenCode, Gemini, pi, Codex OSS) while preserving the shared command interface. Provider defaults live in versioned YAML, and a health-check command verifies local readiness.
 
 This package intentionally does not ship a package-local `docs/` directory. Public usage and operator guidance live in the shared [ace-llm Usage Guide](../ace-llm/docs/usage.md), while `ace-llm-providers-cli-check --help` remains the authoritative runtime help surface for local readiness checks.
 
@@ -28,20 +28,21 @@ This package intentionally does not ship a package-local `docs/` directory. Publ
 
 ## Use Cases
 
-**Use CLI-native providers through one surface** - run prompts against Claude, Codex, OpenCode, Gemini, pi, and Codex OSS via [ace-llm](../ace-llm) without changing calling conventions.
+**Use CLI-native providers through one surface** - run prompts against Antigravity, Claude, Codex, OpenCode, Gemini, pi, and Codex OSS via [ace-llm](../ace-llm) without changing calling conventions.
 
 **Keep provider configuration in versioned YAML** - tune model behavior and provider settings through [ace-support-config](../ace-support-config) instead of custom glue code.
 
 **Diagnose local provider readiness** - run `ace-llm-providers-cli-check` to verify that CLI tools are installed, authenticated, and reachable before starting work.
 
+**Antigravity contract note** - the `agy` adapter follows Antigravity's documented headless contract as verified on August 29, 2026, including `-p`, `--model`, JSON output, and conversation resume flags forwarded through `cli_args`.
+
 ## Testing
 
 - `ace-test ace-llm-providers-cli` runs deterministic fast coverage from `test/fast/`.
 - `ace-test ace-llm-providers-cli feat` runs deterministic feature coverage from `test/feat/`.
 - `ace-test ace-llm-providers-cli all` runs fast + feat deterministic coverage.
 - `ace-test-e2e ace-llm-providers-cli` runs retained workflow scenarios from `test/e2e/`.
-- E2E provider-discovery scenarios avoid helper interception: the no-tools path uses a baseline PATH
-  (`/usr/bin:/bin`), and success-path stubs are kept as text scripts in a dedicated sandbox stub directory.
+- E2E provider-discovery scenarios avoid helper interception: the no-tools path uses a baseline PATH (`/usr/bin:/bin`), and success-path stubs are kept as text scripts in a dedicated sandbox stub directory.
 
 The package no longer uses legacy `test/integration` naming and does not use
 `ace-test ace-llm-providers-cli e2e` as a deterministic test path.

data/exe/ace-llm-providers-cli-check

@@ -12,6 +12,7 @@ if ARGV.include?("--help") || ARGV.include?("-h") || ARGV.include?("help")
       -h, --help    Display this help message
 
     This utility checks for the following CLI tools:
+      - Antigravity (agy)
       - Claude Code (claude)
       - Codex (codex)
       - OpenCode (opencode)
@@ -36,7 +37,7 @@ max_name_length = results.map { |r| r[:name].length }.max
 results.each do |result|
   name_padded = result[:name].ljust(max_name_length)
   status_icon = result[:available] ? "✅" : "❌"
-  auth_icon = result[:authenticated] ? "🔓" : "🔒"
+  auth_icon = result[:ready] ? "🔓" : "🔒"
   config = result[:config]
 
   puts "#{status_icon} #{name_padded} (#{result[:provider]})"
@@ -56,16 +57,18 @@ end
 # Summary
 available_count = results.count { |r| r[:available] }
 authenticated_count = results.count { |r| r[:authenticated] }
+ready_count = results.count { |r| r[:ready] }
 
 puts "─" * 50
 puts "\n📊 Summary:"
 puts "   Available: #{available_count}/#{results.size} CLI tools installed"
 puts "   Authenticated: #{authenticated_count}/#{available_count} tools authenticated" if available_count > 0
+puts "   Ready: #{ready_count}/#{available_count} tools ready for use" if available_count > 0
 
 if available_count == 0
   puts "\n💡 To use CLI providers, install at least one tool from above."
   puts "   After installation, run this check again to verify authentication."
-elsif authenticated_count < available_count
+elsif ready_count < available_count
   puts "\n💡 Some tools need authentication. Run the auth commands shown above."
 else
   puts "\n🎉 All installed CLI tools are ready to use with ace-llm!"

data/lib/ace/llm/providers/cli/agy_client.rb

@@ -0,0 +1,275 @@
+# frozen_string_literal: true
+
+require "json"
+
+require_relative "cli_args_support"
+require_relative "atoms/execution_context"
+
+module Ace
+  module LLM
+    module Providers
+      module CLI
+        # Client for interacting with Antigravity CLI
+        class AgyClient < Ace::LLM::Organisms::BaseClient
+          include CliArgsSupport
+
+          API_BASE_URL = "https://antigravity.google"
+          DEFAULT_GENERATION_CONFIG = {}.freeze
+          DEFAULT_MODEL = "gemini-3.5-flash-medium"
+          DEFAULT_MAX_PROMPT_LENGTH = 100_000
+
+          def initialize(model: nil, **options)
+            @model = model || DEFAULT_MODEL
+            @options = options
+            @generation_config = options[:generation_config] || {}
+          end
+
+          def self.provider_name
+            "agy"
+          end
+
+          def needs_credentials?
+            false
+          end
+
+          def list_models
+            [
+              {id: "gemini-3.7-flash-high", name: "Gemini 3.7 Flash (High)", context_size: 1_000_000},
+              {id: "gemini-3.7-flash-medium", name: "Gemini 3.7 Flash (Medium)", context_size: 1_000_000},
+              {id: "gemini-3.6-flash-high", name: "Gemini 3.6 Flash (High)", context_size: 1_000_000},
+              {id: "gemini-3.6-flash-medium", name: "Gemini 3.6 Flash (Medium)", context_size: 1_000_000},
+              {id: "gemini-3.5-flash-medium", name: "Gemini 3.5 Flash (Medium)", context_size: 1_000_000},
+              {id: "gemini-3.1-pro-high", name: "Gemini 3.1 Pro (High)", context_size: 1_000_000},
+              {id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6 (Thinking)", context_size: 200_000}
+            ]
+          end
+
+          def generate(messages, **options)
+            validate_agy_availability!
+            validate_supported_options!(options)
+
+            prompt = format_messages_as_prompt(prepare_messages(messages, options))
+            prompt = build_full_prompt(prompt, options)
+            subprocess_env = options[:subprocess_env]
+            working_dir = Atoms::ExecutionContext.resolve_working_dir(
+              working_dir: options[:working_dir],
+              subprocess_env: subprocess_env
+            )
+
+            cmd = build_agy_command(prompt, options)
+            stdout, stderr, status = execute_agy_command(cmd, working_dir: working_dir, options: options)
+
+            parse_agy_response(stdout, stderr, status, prompt)
+          rescue => e
+            handle_agy_error(e)
+          end
+
+          private
+
+          def prepare_messages(messages, options)
+            return messages if messages.is_a?(String)
+
+            process_messages_with_system_append(messages, options[:system_append])
+          end
+
+          def format_messages_as_prompt(messages)
+            return messages if messages.is_a?(String)
+
+            messages.map do |msg|
+              role = msg[:role] || msg["role"]
+              content = msg[:content] || msg["content"]
+
+              case role
+              when "system"
+                "System: #{content}"
+              when "user"
+                "User: #{content}"
+              when "assistant"
+                "Assistant: #{content}"
+              else
+                content
+              end
+            end.join("\n\n")
+          end
+
+          def build_full_prompt(prompt, options)
+            prompt_str = prompt.to_s
+            return prompt_str if prompt_str.start_with?("System:")
+
+            system_content = options[:system_instruction] ||
+              options[:system] ||
+              options[:system_prompt] ||
+              @generation_config[:system_prompt]
+
+            return prompt_str unless system_content
+
+            "System: #{system_content}\n\n#{prompt_str}"
+          end
+
+          def agy_available?
+            system("which", "agy", out: File::NULL, err: File::NULL)
+          end
+
+          def validate_agy_availability!
+            return if agy_available?
+
+            raise Ace::LLM::ProviderError,
+              "Antigravity CLI not found. Install with: curl -fsSL https://antigravity.google/cli/install.sh | bash"
+          end
+
+          def validate_supported_options!(options)
+            unsupported = %i[temperature max_tokens top_p top_k]
+              .select { |key| options[key] }
+            return if unsupported.empty?
+
+            raise Ace::LLM::ProviderError,
+              "Antigravity CLI does not support #{unsupported.join(", ")} through ace-llm; use documented cli_args instead"
+          end
+
+          def build_agy_command(prompt, options)
+            args = normalized_cli_args(options)
+            reject_stream_input_args!(args)
+            reject_oversized_prompt!(prompt)
+
+            cmd = ["agy", "-p", prompt.to_s, "--output-format", "json"]
+            cmd << "--model" << @model if @model
+            cmd << "--print-timeout" << normalize_print_timeout(options[:timeout]) if options[:timeout]
+            cmd << "--sandbox" if options[:sandbox]
+            cmd.concat(args)
+            cmd
+          end
+
+          def reject_stream_input_args!(args)
+            flag = find_conflicting_cli_arg(args, ["--input-format"])
+            return unless flag
+
+            raise Ace::LLM::ProviderError,
+              "Antigravity one-shot mode does not support cli arg #{flag}; stream-json input requires stdin-driven sessions"
+          end
+
+          def reject_oversized_prompt!(prompt)
+            prompt_bytesize = prompt.to_s.bytesize
+            max_length = @generation_config[:max_prompt_length] || @options[:max_prompt_length] || DEFAULT_MAX_PROMPT_LENGTH
+            return if prompt_bytesize <= max_length
+
+            raise Ace::LLM::ProviderError,
+              "Antigravity CLI prompt bytesize #{prompt_bytesize} exceeds configured limit #{max_length}. " \
+              "Use a provider with file/stdin prompt delivery or lower the prompt size."
+          end
+
+          def normalize_print_timeout(timeout)
+            value = timeout.to_s
+            return "#{value}s" if value.match?(/\A\d+\z/)
+
+            value
+          end
+
+          def execute_agy_command(cmd, working_dir:, options:)
+            timeout_val = options[:timeout] || @options[:timeout] || 120
+            Molecules::SafeCapture.call(
+              cmd,
+              timeout: timeout_val,
+              stdin_data: "",
+              chdir: working_dir,
+              env: options[:subprocess_env],
+              command_prefix: options[:subprocess_command_prefix],
+              provider_name: "Antigravity"
+            )
+          end
+
+          def parse_agy_response(stdout, stderr, status, prompt)
+            response = if stream_json_output?(stdout)
+              parse_stream_json(stdout)
+            else
+              parse_json_or_text(stdout)
+            end
+
+            error_message = response["error"].to_s
+            run_status = response.fetch("status", status.success? ? "SUCCESS" : "ERROR")
+            if !status.success? || run_status != "SUCCESS"
+              raise Ace::LLM::ProviderError, build_failure_message(error_message, stderr, stdout, run_status)
+            end
+
+            text = extract_response_text(response)
+            {
+              text: text,
+              metadata: build_metadata(response, text, prompt)
+            }
+          end
+
+          def stream_json_output?(stdout)
+            stdout.each_line.lazy.map(&:strip).reject(&:empty?).first.to_s.include?("\"event\"")
+          end
+
+          def parse_stream_json(stdout)
+            text = +""
+            result_payload = nil
+
+            stdout.each_line do |line|
+              line = line.strip
+              next if line.empty?
+
+              entry = JSON.parse(line)
+              case entry["event"]
+              when "step_update"
+                text << entry.dig("step_update", "text_delta").to_s
+              when "result"
+                result_payload = entry["result"] || {}
+              end
+            end
+
+            response = result_payload || {}
+            response["response"] = text unless text.empty? || response["response"]
+            response
+          rescue JSON::ParserError
+            {"response" => stdout.to_s.strip}
+          end
+
+          def parse_json_or_text(stdout)
+            JSON.parse(stdout)
+          rescue JSON::ParserError
+            {"response" => stdout.to_s.strip}
+          end
+
+          def build_failure_message(error_message, stderr, stdout, run_status)
+            detail = [error_message, stderr.to_s.strip, stdout.to_s.strip].reject(&:empty?).first
+            detail = run_status if detail.nil? || detail.empty?
+            "Antigravity CLI failed: #{detail}"
+          end
+
+          def extract_response_text(response)
+            response["response"] || response["text"] || response.dig("result", "response") || ""
+          end
+
+          def build_metadata(response, text, prompt)
+            usage = response["usage"] || {}
+            prompt_tokens = usage["input_tokens"] || (prompt.to_s.length / 4.0).ceil
+            output_tokens = usage["output_tokens"] || (text.to_s.length / 4.0).ceil
+            conversation_id = response["conversation_id"]
+
+            metadata = {
+              provider: "agy",
+              model: @model || DEFAULT_MODEL,
+              input_tokens: prompt_tokens,
+              output_tokens: output_tokens,
+              total_tokens: usage["total_tokens"] || prompt_tokens + output_tokens,
+              finish_reason: response["status"]&.downcase || "success",
+              timestamp: Time.now.utc.iso8601
+            }
+            metadata[:thinking_tokens] = usage["thinking_tokens"] if usage["thinking_tokens"]
+            metadata[:cache_read_tokens] = usage["cache_read_tokens"] if usage["cache_read_tokens"]
+            metadata[:duration_seconds] = response["duration_seconds"] if response["duration_seconds"]
+            metadata[:num_turns] = response["num_turns"] if response["num_turns"]
+            metadata[:conversation_id] = conversation_id if conversation_id
+            metadata[:session_id] = conversation_id if conversation_id
+            metadata
+          end
+
+          def handle_agy_error(error)
+            raise error
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ace/llm/providers/cli/atoms/auth_checker.rb

@@ -11,9 +11,10 @@ module Ace
           class AuthChecker
             # Check authentication for a specific provider
             # @param provider [String] Provider name (claude, codex, opencode, codexoss)
-            # @return [Hash] Result with :authenticated and :message
+            # @return [Hash] Result with :authenticated, :ready, and :message
             def self.check(provider)
               case provider
+              when "agy" then check_agy
               when "claude" then check_claude
               when "codex" then check_codex
               when "opencode" then check_opencode
@@ -34,6 +35,21 @@ module Ace
               {authenticated: false, message: "Authentication check failed"}
             end
 
+            def self.check_agy
+              _, _, status = Open3.capture3("agy", "--help")
+              if status.success?
+                {
+                  authenticated: false,
+                  ready: true,
+                  message: "Installed, but headless authentication is not verified (interactive agy auth may still need to be completed before the first headless run)"
+                }
+              else
+                {authenticated: false, ready: false, message: "Run: agy"}
+              end
+            rescue Errno::ENOENT, Errno::EACCES
+              {authenticated: false, ready: false, message: "Authentication check failed"}
+            end
+
             def self.check_codex
               _, _, status = Open3.capture3("codex", "--help")
               if status.success?

data/lib/ace/llm/providers/cli/molecules/health_checker.rb

@@ -11,6 +11,13 @@ module Ace
           # Orchestrates provider detection and authentication checking
           class HealthChecker
             PROVIDERS = {
+              "agy" => {
+                name: "Antigravity",
+                provider: "agy",
+                check_cmd: ["agy", "--help"],
+                install_cmd: "curl -fsSL https://antigravity.google/cli/install.sh | bash",
+                install_url: "https://antigravity.google/product/antigravity-cli"
+              },
               "claude" => {
                 name: "Claude Code",
                 provider: "claude",
@@ -57,6 +64,7 @@ module Ace
                 config: config,
                 available: false,
                 authenticated: false,
+                ready: false,
                 version: nil,
                 auth_status: "Not checked"
               }
@@ -67,6 +75,7 @@ module Ace
 
                 auth_result = Atoms::AuthChecker.check(config[:provider])
                 result[:authenticated] = auth_result[:authenticated]
+                result[:ready] = auth_result.fetch(:ready, auth_result[:authenticated])
                 result[:auth_status] = auth_result[:message]
               end
 

data/lib/ace/llm/providers/cli/molecules/process_supervisor.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+# Linux normally reparents orphaned grandchildren to PID 1. Container
+# entrypoints do not always reap them, leaving killed descendants as observable
+# zombies. This supervisor becomes a child subreaper before spawning the provider
+# command, so it owns and reaps the complete isolated command group before exit.
+module Ace
+  module LLM
+    module Providers
+      module CLI
+        module Molecules
+          module ProcessSupervisor
+            PR_SET_CHILD_SUBREAPER = 36
+
+            module_function
+
+            def run(command)
+              enable_child_subreaper
+              ready_fd = Integer(ENV.delete("ACE_SAFE_CAPTURE_READY_FD"))
+              command_pid = Process.spawn(*command, pgroup: true, ready_fd => :close)
+              command_pgid = command_pid
+              IO.for_fd(ready_fd).tap { |io| io.write("1"); io.close }
+
+              Signal.trap("TERM") { terminate_group(command_pgid) }
+
+              _pid, status = Process.wait2(command_pid)
+              terminate_group(command_pgid)
+              reap_group(command_pgid)
+
+              exit(status.exitstatus || 128 + status.termsig)
+            end
+
+            def enable_child_subreaper
+              previous_deprecated = Warning[:deprecated]
+              Warning[:deprecated] = false
+              require "fiddle"
+              Warning[:deprecated] = previous_deprecated
+
+              prctl = Fiddle::Function.new(
+                Fiddle::Handle::DEFAULT["prctl"],
+                [Fiddle::TYPE_INT, Fiddle::TYPE_LONG, Fiddle::TYPE_LONG, Fiddle::TYPE_LONG, Fiddle::TYPE_LONG],
+                Fiddle::TYPE_INT
+              )
+              raise "unable to become a child subreaper" unless prctl.call(PR_SET_CHILD_SUBREAPER, 1, 0, 0, 0).zero?
+            ensure
+              Warning[:deprecated] = previous_deprecated unless previous_deprecated.nil?
+            end
+
+            def terminate_group(pgid)
+              Process.kill("TERM", -pgid)
+              Process.kill("KILL", -pgid)
+            rescue Errno::ESRCH, Errno::EPERM
+              nil
+            end
+
+            def reap_group(pgid)
+              loop { Process.waitpid(-pgid) }
+            rescue Errno::ECHILD
+              nil
+            end
+          end
+        end
+      end
+    end
+  end
+end
+
+Ace::LLM::Providers::CLI::Molecules::ProcessSupervisor.run(ARGV) if $PROGRAM_NAME == __FILE__

data/lib/ace/llm/providers/cli/molecules/safe_capture.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "open3"
+require "rbconfig"
 
 module Ace
   module LLM
@@ -13,8 +14,9 @@ module Ace
           # which causes "stream closed in another thread (IOError)" when the
           # timeout fires while Open3's internal reader threads hold pipe handles.
           #
-          # Uses Open3.popen3 + Process.kill so the child process is terminated
-          # directly — no thread interruption, no IOError.
+          # Uses Open3.popen3 and, on Linux, a dedicated child-subreaper supervisor
+          # so the complete command tree is terminated and reaped without thread
+          # interruption or closed-stream races.
           class SafeCapture
             # @param cmd [Array<String>] Command arguments
             # @param timeout [Integer] Timeout in seconds
@@ -23,7 +25,7 @@ module Ace
             # @param env [Hash, nil] Environment variables (merged with current env)
             # @param provider_name [String] Provider name for error messages
             # @param isolate_process_group [Boolean] Spawn subprocess in isolated process group
-            # @param cleanup_group_on_exit [Boolean] Best-effort cleanup of descendants on success
+            # @param cleanup_group_on_exit [Boolean] Clean up descendants on success
             # @return [Array(String, String, Process::Status)] [stdout, stderr, status]
             # @raise [Ace::LLM::ProviderError] on timeout
             def self.call(cmd, timeout:, stdin_data: nil, chdir: nil, env: nil, provider_name: "CLI",
@@ -35,9 +37,19 @@ module Ace
               opts[:pgroup] = true if isolate_process_group
 
               full_cmd = Array(command_prefix) + cmd
-              args = env ? [env, *full_cmd] : full_cmd
+              supervised = isolate_process_group && cleanup_group_on_exit && RUBY_PLATFORM.include?("linux")
+              full_cmd = supervisor_command(full_cmd) if supervised
+              ready_reader, ready_writer = IO.pipe if supervised
+              opts[ready_writer.fileno] = ready_writer if supervised
+              spawn_env = env&.dup || {}
+              spawn_env["ACE_SAFE_CAPTURE_READY_FD"] = ready_writer.fileno.to_s if supervised
+              args = spawn_env.empty? ? full_cmd : [spawn_env, *full_cmd]
 
               Open3.popen3(*args, **opts) do |stdin, stdout, stderr, wait_thr|
+                ready_writer&.close
+                ready_reader&.read(1)
+                ready_reader&.close
+
                 pid = wait_thr.pid
                 pgid = safe_getpgid(pid)
                 debug_log(provider_name, "spawn pid=#{pid} pgid=#{pgid || "n/a"}")
@@ -56,8 +68,13 @@ module Ace
 
                 unless wait_thr.join(normalized_timeout)
                   # Timeout: kill subprocess group (and descendants), then clean up
-                  terminate_subprocess_tree(pid: pid, pgid: pgid, provider_name: provider_name)
-                  wait_thr.join(5)
+                  terminate_subprocess_tree(
+                    pid: pid, pgid: pgid, provider_name: provider_name, supervised: supervised
+                  )
+                  unless wait_thr.join(5)
+                    terminate_group_or_pid("KILL", pid, pgid)
+                    wait_thr.join(5)
+                  end
 
                   stdout.close unless stdout.closed?
                   stderr.close unless stderr.closed?
@@ -70,12 +87,15 @@ module Ace
                 end
 
                 status = wait_thr.value
-                if isolate_process_group && cleanup_group_on_exit
+                if isolate_process_group && cleanup_group_on_exit && !supervised
                   terminate_descendants_after_success(pid: pid, pgid: pgid, provider_name: provider_name)
                 end
 
                 [out_reader.value, err_reader.value, status]
               end
+            ensure
+              ready_reader&.close unless ready_reader&.closed?
+              ready_writer&.close unless ready_writer&.closed?
             end
 
             class << self
@@ -99,21 +119,24 @@ module Ace
                 raise ArgumentError, "timeout must be a positive numeric value, got #{value.inspect}"
               end
 
-              def terminate_subprocess_tree(pid:, pgid:, provider_name:)
+              def supervisor_command(command)
+                supervisor = File.expand_path("process_supervisor.rb", __dir__)
+                [RbConfig.ruby, "-W0", supervisor, *command]
+              end
+
+              def terminate_subprocess_tree(pid:, pgid:, provider_name:, supervised: false)
                 debug_log(provider_name, "timeout cleanup pid=#{pid} pgid=#{pgid || "n/a"}")
                 terminate_group_or_pid("TERM", pid, pgid)
-                sleep(0.1)
-                terminate_group_or_pid("KILL", pid, pgid)
+                terminate_group_or_pid("KILL", pid, pgid) unless supervised
               end
 
               def terminate_descendants_after_success(pid:, pgid:, provider_name:)
                 return unless pgid
-                return unless group_alive?(pgid)
 
                 debug_log(provider_name, "post-exit cleanup pgid=#{pgid}")
-                terminate_group_or_pid("TERM", pid, pgid)
-                sleep(0.05)
-                terminate_group_or_pid("KILL", pid, pgid) if group_alive?(pgid)
+                safe_kill_group(pgid, "TERM")
+                safe_kill_group(pgid, "KILL")
+                reap_terminated_group(pgid)
               end
 
               def terminate_group_or_pid(signal, pid, pgid)
@@ -122,6 +145,13 @@ module Ace
                 else
                   Process.kill(signal, pid)
                 end
+                true
+              rescue Errno::ESRCH, Errno::EPERM
+                nil
+              end
+
+              def safe_kill_group(pgid, signal)
+                Process.kill(signal, -pgid)
               rescue Errno::ESRCH, Errno::EPERM
                 nil
               end
@@ -132,13 +162,10 @@ module Ace
                 nil
               end
 
-              def group_alive?(pgid)
-                Process.kill(0, -pgid)
-                true
-              rescue Errno::ESRCH
-                false
-              rescue Errno::EPERM
-                true
+              def reap_terminated_group(pgid)
+                loop { Process.waitpid(-pgid) }
+              rescue Errno::ECHILD
+                nil
               end
 
               def debug_log(provider_name, message)

data/lib/ace/llm/providers/cli/pi_client.rb

@@ -27,7 +27,7 @@ module Ace
             "pi"
           end
 
-          DEFAULT_MODEL = "zai/glm-4.7"
+          DEFAULT_MODEL = "zai/glm-5.3-flash"
 
           def initialize(model: nil, **options)
             @model = model || DEFAULT_MODEL
@@ -67,7 +67,9 @@ module Ace
           # List available Pi models
           def list_models
             [
-              {id: "zai/glm-4.7", name: "GLM 4.7", description: "ZAI default model", context_size: 128_000},
+              {id: "zai/glm-5.3", name: "GLM 5.3", description: "ZAI flagship model", context_size: 1_000_000},
+              {id: "zai/glm-5.3-flash", name: "GLM 5.3 Flash", description: "ZAI routine default", context_size: 1_000_000},
+              {id: "zai/glm-5.3-highspeed", name: "GLM 5.3 Highspeed", description: "ZAI low-latency model", context_size: 1_000_000},
               {id: "anthropic/claude-opus-4-6", name: "Claude Opus 4.6", description: "Anthropic flagship", context_size: 200_000},
               {id: "anthropic/claude-sonnet-4-5", name: "Claude Sonnet 4.5", description: "Anthropic balanced", context_size: 200_000},
               {id: "anthropic/claude-haiku-4-5", name: "Claude Haiku 4.5", description: "Anthropic fast", context_size: 200_000},

data/lib/ace/llm/providers/cli/version.rb

@@ -4,7 +4,7 @@ module Ace
   module LLM
     module Providers
       module CLI
-        VERSION = "0.31.7"
+        VERSION = "0.33.0"
       end
     end
   end

data/lib/ace/llm/providers/cli.rb

@@ -22,6 +22,7 @@ module Ace
           def require_cli_providers
             # Require each CLI provider client
             providers = %w[
+              agy_client
               claude_code_client
               claude_oai_client
               codex_client

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-llm-providers-cli
 version: !ruby/object:Gem::Version
-  version: 0.31.7
+  version: 0.33.0
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-08-12 00:00:00.000000000 Z
+date: 2026-09-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ace-llm
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.38'
+        version: '0.39'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.38'
+        version: '0.39'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -74,6 +74,7 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- ".ace-defaults/llm/providers/agy.yml"
 - ".ace-defaults/llm/providers/claude.yml"
 - ".ace-defaults/llm/providers/claudeoai.yml"
 - ".ace-defaults/llm/providers/codex.yml"
@@ -88,6 +89,7 @@ files:
 - Rakefile
 - exe/ace-llm-providers-cli-check
 - lib/ace/llm/providers/cli.rb
+- lib/ace/llm/providers/cli/agy_client.rb
 - lib/ace/llm/providers/cli/atoms/args_normalizer.rb
 - lib/ace/llm/providers/cli/atoms/auth_checker.rb
 - lib/ace/llm/providers/cli/atoms/command_formatters.rb
@@ -109,6 +111,7 @@ files:
 - lib/ace/llm/providers/cli/codex_oai_client.rb
 - lib/ace/llm/providers/cli/gemini_client.rb
 - lib/ace/llm/providers/cli/molecules/health_checker.rb
+- lib/ace/llm/providers/cli/molecules/process_supervisor.rb
 - lib/ace/llm/providers/cli/molecules/safe_capture.rb
 - lib/ace/llm/providers/cli/molecules/session_finder.rb
 - lib/ace/llm/providers/cli/molecules/skill_name_reader.rb