@blulotus/trellis 0.7.0

package/dist/commands/channel/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/channel/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQtD,OAAO,EAQL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM9C,MAAM,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAE5E,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa,CAAC,GAAG,GAAG,UAAU;IAC7C,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CAAC;IAC1C,4DAA4D;IAC5D,SAAS,IAAI,GAAG,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,CAAC,IAAI,EAAE;QACf,KAAK,EAAE,WAAW,CAAC;QACnB,GAAG,EAAE,GAAG,CAAC;QACT,IAAI,EAAE,cAAc,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;IAC3B,0EAA0E;IAC1E,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC;IAC/C;;;OAGG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC;IAClD;;;OAGG;IACH,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC;CACxD;AAoFD;;;;;GAKG;AACH,QAAA,MAAM,QAAQ;;;CAGJ,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,QAAQ,CAAC;AAE7C,qEAAqE;AACrE,wBAAgB,aAAa,IAAI,QAAQ,EAAE,CAE1C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,QAAQ,CAE3D;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAQxE"}

package/dist/commands/channel/adapters/index.js

@@ -0,0 +1,115 @@
+/**
+ * Worker adapter factory.
+ *
+ * Each provider (claude, codex, future: opencode, gemini, …) implements a
+ * `WorkerAdapter` describing how to:
+ *
+ *   - launch the worker CLI (`buildArgs`)
+ *   - create a per-worker mutable context (`createCtx`)
+ *   - optionally run a handshake before user messages flow (`handshake`)
+ *   - report readiness for user input (`isReady`)
+ *   - parse a line of stdout into channel events (`parseLine`)
+ *   - encode a channel user message for stdin (`encodeUserMessage`)
+ *
+ * `getAdapter(name)` returns the right adapter. supervisor.ts and spawn.ts
+ * stay provider-agnostic — adding a new provider means writing a new
+ * `<name>.ts` adapter and registering it here.
+ */
+import { buildClaudeArgs, encodeClaudeInterruptMessage, encodeClaudeUserMessage, parseClaudeLine, } from "./claude.js";
+import { buildCodexArgs, buildCodexThreadStartParams, createCodexCtx, encodeCodexInterruptMessage, encodeCodexRequest, encodeCodexUserMessage, parseCodexLine, } from "./codex.js";
+/** Claude adapter — stream-json over stdio, no handshake. */
+const claudeAdapter = {
+    provider: "claude",
+    buildArgs(view) {
+        return buildClaudeArgs({
+            resumeSessionId: view.resume,
+            model: view.model,
+            systemPrompt: view.systemPrompt,
+        });
+    },
+    createCtx() {
+        return undefined;
+    },
+    isReady() {
+        return true;
+    },
+    parseLine(line) {
+        return parseClaudeLine(line);
+    },
+    encodeUserMessage(text) {
+        return encodeClaudeUserMessage(text);
+    },
+    encodeInterruptMessage(text) {
+        return encodeClaudeInterruptMessage(text);
+    },
+};
+/** Codex adapter — JSON-RPC 2.0 via `app-server`, requires handshake. */
+const codexAdapter = {
+    provider: "codex",
+    buildArgs(view) {
+        return buildCodexArgs({ model: view.model });
+    },
+    createCtx() {
+        return createCodexCtx();
+    },
+    async handshake({ child, ctx, view }) {
+        // 1. initialize
+        const init = encodeCodexRequest(ctx, "initialize", {
+            clientInfo: { name: "trellis-channel", version: "0.1" },
+            capabilities: {},
+        }, "initialize");
+        child.stdin.write(init.line);
+        // 2. wait briefly so initialize lands first
+        await sleep(150);
+        const ts = encodeCodexRequest(ctx, "thread/start", buildCodexThreadStartParams(view.cwd, view.systemPrompt, view.sandbox), "thread/start");
+        child.stdin.write(ts.line);
+        // 3. wait for thread/start response to populate threadId
+        const deadline = Date.now() + 30_000;
+        while (!ctx.threadId && Date.now() < deadline) {
+            await sleep(50);
+        }
+        if (!ctx.threadId) {
+            throw new Error("Codex thread/start did not produce a threadId within 30s");
+        }
+    },
+    isReady(ctx) {
+        return Boolean(ctx.threadId);
+    },
+    parseLine(line, ctx) {
+        return parseCodexLine(line, ctx);
+    },
+    encodeUserMessage(text, ctx) {
+        return encodeCodexUserMessage(ctx, text).line;
+    },
+    encodeInterruptMessage(text, ctx) {
+        return encodeCodexInterruptMessage(ctx, text).line;
+    },
+};
+/**
+ * Single source of truth for known providers. Adding a new adapter:
+ *   1. write `adapters/<name>.ts`
+ *   2. add `<name>: <name>Adapter` here
+ * No other file in the runtime needs to change.
+ */
+const REGISTRY = {
+    claude: claudeAdapter,
+    codex: codexAdapter,
+};
+/** Runtime list of registered providers — used by CLI validation. */
+export function listProviders() {
+    return Object.keys(REGISTRY);
+}
+export function isProvider(value) {
+    return value in REGISTRY;
+}
+export function getAdapter(provider) {
+    const a = REGISTRY[provider];
+    if (!a) {
+        throw new Error(`Unknown provider '${provider}' (registered: ${listProviders().join(", ")})`);
+    }
+    return a;
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/channel/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/channel/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,uBAAuB,EACvB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,GAGf,MAAM,YAAY,CAAC;AA2DpB,6DAA6D;AAC7D,MAAM,aAAa,GAA6B;IAC9C,QAAQ,EAAE,QAAQ;IAClB,SAAS,CAAC,IAAI;QACZ,OAAO,eAAe,CAAC;YACrB,eAAe,EAAE,IAAI,CAAC,MAAM;YAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IACD,SAAS;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IACD,SAAS,CAAC,IAAI;QACZ,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,iBAAiB,CAAC,IAAI;QACpB,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,sBAAsB,CAAC,IAAI;QACzB,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,YAAY,GAA4B;IAC5C,QAAQ,EAAE,OAAO;IACjB,SAAS,CAAC,IAAI;QACZ,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,SAAS;QACP,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE;QAClC,gBAAgB;QAChB,MAAM,IAAI,GAAG,kBAAkB,CAC7B,GAAG,EACH,YAAY,EACZ;YACE,UAAU,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE;YACvD,YAAY,EAAE,EAAE;SACjB,EACD,YAAY,CACb,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,4CAA4C;QAC5C,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,EAAE,GAAG,kBAAkB,CAC3B,GAAG,EACH,cAAc,EACd,2BAA2B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EACtE,cAAc,CACf,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3B,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG;QACT,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,GAAG;QACjB,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,iBAAiB,CAAC,IAAI,EAAE,GAAG;QACzB,OAAO,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IACD,sBAAsB,CAAC,IAAI,EAAE,GAAG;QAC9B,OAAO,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;CACX,CAAC;AAIX,qEAAqE;AACrE,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAe,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,IAAI,QAAQ,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAkB;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,kBAAkB,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,CAA8B,CAAC;AACxC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/commands/channel/adapters/types.d.ts

@@ -0,0 +1,33 @@
+import type { ChannelEventKind } from "../store/events.js";
+/**
+ * Event emitted by an adapter from a single line of worker stdout.
+ *
+ * The adapter never assigns `seq` / `ts` / `by` — supervisor adds those before
+ * appending to events.jsonl. Adapter only decides `kind` + payload.
+ */
+export interface AdapterEvent {
+    kind: ChannelEventKind;
+    /** Free-form payload merged into the event. */
+    payload?: Record<string, unknown>;
+}
+/**
+ * Side effects the adapter requested while parsing this line.
+ * Supervisor performs them after appending the events.
+ */
+export interface AdapterSideEffect {
+    persistSessionId?: string;
+    persistThreadId?: string;
+    /** Lines (already newline-terminated) the adapter wants written to worker stdin. */
+    reply?: string[];
+    /** Resolutions to pending outgoing requests, keyed by id. */
+    resolved?: {
+        id: number;
+        result?: unknown;
+        error?: unknown;
+    }[];
+}
+export interface ParseResult {
+    events: AdapterEvent[];
+    side?: AdapterSideEffect;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/commands/channel/adapters/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/channel/adapters/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,iBAAiB,CAAC;CAC1B"}

package/dist/commands/channel/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/commands/channel/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/commands/channel/adapters/types.ts"],"names":[],"mappings":""}

package/dist/commands/channel/agent-loader.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Load a Trellis agent definition from `.trellis/agents/<name>.md`.
+ *
+ * Format: YAML frontmatter (between `---` fences) + markdown body.
+ *   The body becomes the system prompt injected into the worker.
+ *
+ *   ---
+ *   name: architect
+ *   description: System architect ...
+ *   provider: claude       # claude | codex; used as default --provider
+ *   model: claude-opus-4-7 # CLI-specific model id; optional
+ *   labels: [design]       # optional metadata
+ *   ---
+ *
+ *   You are a senior system architect ...
+ *
+ * Unknown frontmatter fields are preserved as metadata but ignored by
+ * channel runtime (they may be consumed by other Trellis layers).
+ */
+export interface AgentDefinition {
+    name: string;
+    description?: string;
+    provider?: "claude" | "codex";
+    model?: string;
+    labels?: string[];
+    systemPrompt: string;
+    raw: Record<string, string>;
+    filePath: string;
+}
+export declare function findAgentFile(name: string, cwd: string, trustedRoots?: string[]): string | null;
+export declare function loadAgent(name: string, cwd?: string, trustedRoots?: string[]): AgentDefinition;
+//# sourceMappingURL=agent-loader.d.ts.map

package/dist/commands/channel/agent-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-loader.d.ts","sourceRoot":"","sources":["../../../src/commands/channel/agent-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAAM,EAAO,GAC1B,MAAM,GAAG,IAAI,CA8Bf;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAsB,EAC3B,YAAY,GAAE,MAAM,EAAO,GAC1B,eAAe,CAyCjB"}

package/dist/commands/channel/agent-loader.js

@@ -0,0 +1,158 @@
+/**
+ * Load a Trellis agent definition from `.trellis/agents/<name>.md`.
+ *
+ * Format: YAML frontmatter (between `---` fences) + markdown body.
+ *   The body becomes the system prompt injected into the worker.
+ *
+ *   ---
+ *   name: architect
+ *   description: System architect ...
+ *   provider: claude       # claude | codex; used as default --provider
+ *   model: claude-opus-4-7 # CLI-specific model id; optional
+ *   labels: [design]       # optional metadata
+ *   ---
+ *
+ *   You are a senior system architect ...
+ *
+ * Unknown frontmatter fields are preserved as metadata but ignored by
+ * channel runtime (they may be consumed by other Trellis layers).
+ */
+import fs from "node:fs";
+import path from "node:path";
+const FRONTMATTER_FENCE = /^---\s*\n([\s\S]*?)\n---\s*\n?([\s\S]*)$/;
+const SAFE_AGENT_NAME = /^[A-Za-z0-9._-]+$/;
+export function findAgentFile(name, cwd, trustedRoots = []) {
+    // Reject path-traversal attempts (`..`, `/`, etc.) — agent names must be
+    // a single safe identifier. Without this, `--agent ../../etc/passwd`
+    // would read arbitrary host files into the worker system prompt.
+    if (!SAFE_AGENT_NAME.test(name)) {
+        throw new Error(`Agent name '${name}' is not allowed (must match ${SAFE_AGENT_NAME.source})`);
+    }
+    const agentsRoot = path.resolve(cwd, ".trellis", "agents");
+    const candidates = [
+        path.join(agentsRoot, `${name}.md`),
+        path.join(agentsRoot, name, "AGENT.md"),
+    ];
+    for (const p of candidates) {
+        // Defense in depth: confirm the resolved path stays under agentsRoot,
+        // or one of the trusted roots (see context-trust.ts) — accommodates
+        // `.trellis/agents` reached through a trusted `.trellis` symlink.
+        const real = fs.existsSync(p) ? fs.realpathSync(p) : p;
+        const inAgentsRoot = real === agentsRoot || real.startsWith(agentsRoot + path.sep);
+        const inTrustedRoot = trustedRoots.some((root) => real === root || real.startsWith(root + path.sep));
+        if (!inAgentsRoot && !inTrustedRoot) {
+            continue;
+        }
+        if (fs.existsSync(p))
+            return p;
+    }
+    return null;
+}
+export function loadAgent(name, cwd = process.cwd(), trustedRoots = []) {
+    const file = findAgentFile(name, cwd, trustedRoots);
+    if (!file) {
+        throw new Error(`Agent '${name}' not found. Looked in:\n  ${[
+            path.join(cwd, ".trellis", "agents", `${name}.md`),
+            path.join(cwd, ".trellis", "agents", name, "AGENT.md"),
+        ].join("\n  ")}`);
+    }
+    const raw = fs.readFileSync(file, "utf-8");
+    const m = FRONTMATTER_FENCE.exec(raw);
+    if (!m) {
+        throw new Error(`Agent '${name}' at ${file} has no YAML frontmatter (expected --- ... --- block at top)`);
+    }
+    const fm = parseFrontmatter(m[1] ?? "");
+    const body = (m[2] ?? "").trim();
+    const provider = normalizeProvider(fm.provider);
+    const labels = fm.labels
+        ? fm.labels
+            .replace(/[[\]]/g, "")
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean)
+        : undefined;
+    return {
+        name: fm.name?.trim() || name,
+        description: fm.description?.trim() || undefined,
+        provider,
+        model: fm.model?.trim() || undefined,
+        labels,
+        systemPrompt: body,
+        raw: fm,
+        filePath: file,
+    };
+}
+function normalizeProvider(v) {
+    if (!v)
+        return undefined;
+    const t = v.trim().toLowerCase();
+    if (t === "claude" || t === "codex")
+        return t;
+    return undefined;
+}
+/**
+ * Very small flat-YAML parser for the frontmatter dialect we expect:
+ *   key: value
+ *   multiline_key: |
+ *     line one
+ *     line two
+ *
+ * Lists / nested objects beyond this are returned as their raw string form.
+ */
+// Dangerous keys that would corrupt Object.prototype if assigned naïvely.
+// We use Object.create(null) as the bag, but also reject these to keep
+// callers safe when they iterate / spread the result.
+const FORBIDDEN_KEYS = new Set(["__proto__", "prototype", "constructor"]);
+function parseFrontmatter(text) {
+    // Prototype-less object: assignment to `__proto__` etc. won't traverse
+    // up to Object.prototype.
+    const out = Object.create(null);
+    const lines = text.split("\n");
+    let i = 0;
+    while (i < lines.length) {
+        const line = lines[i];
+        if (!line.trim() || line.trim().startsWith("#")) {
+            i++;
+            continue;
+        }
+        const m = /^([A-Za-z0-9_-]+)\s*:\s*(.*)$/.exec(line);
+        if (!m) {
+            i++;
+            continue;
+        }
+        const key = m[1];
+        const inline = m[2];
+        if (FORBIDDEN_KEYS.has(key)) {
+            process.stderr.write(`[channel agent-loader] refusing dangerous frontmatter key '${key}'\n`);
+            // Still need to consume any block scalar continuation lines.
+            if (inline === "|" || inline === ">") {
+                i++;
+                while (i < lines.length && !lines[i].match(/^\S/))
+                    i++;
+            }
+            else {
+                i++;
+            }
+            continue;
+        }
+        if (inline === "|" || inline === ">") {
+            // Block scalar — collect indented continuation lines
+            const block = [];
+            i++;
+            while (i < lines.length) {
+                const cont = lines[i];
+                if (cont.match(/^\S/))
+                    break;
+                block.push(cont.replace(/^ {2}/, ""));
+                i++;
+            }
+            out[key] = block.join("\n").trim();
+        }
+        else {
+            out[key] = inline.trim();
+            i++;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=agent-loader.js.map

package/dist/commands/channel/agent-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-loader.js","sourceRoot":"","sources":["../../../src/commands/channel/agent-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AAErE,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAE5C,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,GAAW,EACX,eAAyB,EAAE;IAE3B,yEAAyE;IACzE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,gCAAgC,eAAe,CAAC,MAAM,GAAG,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,KAAK,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC;KACxC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,YAAY,GAChB,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAC5D,CAAC;QACF,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,eAAyB,EAAE;IAE3B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,8BAA8B;YAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,KAAK,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC;SACvD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,QAAQ,IAAI,8DAA8D,CACzF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM;QACtB,CAAC,CAAC,EAAE,CAAC,MAAM;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;aACrB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI;QAC7B,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS;QAChD,QAAQ;QACR,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;QACpC,MAAM;QACN,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,EAAE;QACP,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,CAAqB;IAErB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,0EAA0E;AAC1E,uEAAuE;AACvE,sDAAsD;AACtD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAE1E,SAAS,gBAAgB,CAAC,IAAY;IACpC,uEAAuE;IACvE,0BAA0B;IAC1B,MAAM,GAAG,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAGrD,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8DAA8D,GAAG,KAAK,CACvE,CAAC;YACF,6DAA6D;YAC7D,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,CAAC,EAAE,CAAC;gBACJ,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,CAAC,EAAE,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,qDAAqD;YACrD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,MAAM;gBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;gBACtC,CAAC,EAAE,CAAC;YACN,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/channel/context-loader.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Resolve a list of `--file` / `--jsonl` specs into the concatenated context
+ * string to be embedded in the worker's system prompt.
+ *
+ * --file <path-or-glob>     direct file inclusion (glob expanded via fs.globSync)
+ * --jsonl <path>            parse a Trellis jsonl manifest where each line is
+ *                           {"file": "<path>", "reason": "<why>"} and include
+ *                           each referenced file (reason becomes part of header)
+ *
+ * All paths are resolved relative to `cwd` (the spawn caller's cwd).
+ * Missing files are skipped with a stderr warning, not fatal.
+ * Each block is delimited with a header so the model can attribute content
+ * to its source file.
+ */
+export interface AssembledContext {
+    /** Composed prompt body for `# CONTEXT FILES` (or "" if nothing loaded). */
+    prompt: string;
+    /** Relative paths of every file actually injected — surfaced on `spawned`. */
+    paths: string[];
+    /** Relative paths of every `--jsonl` manifest processed (regardless of
+     *  whether the manifest yielded any entries) — surfaced on `spawned`
+     *  so users can see "I passed --jsonl X but the manifest was empty". */
+    manifests: string[];
+}
+export declare function assembleContext(cwd: string, files?: string[], jsonls?: string[], trustedRoots?: string[]): AssembledContext;
+//# sourceMappingURL=context-loader.d.ts.map

package/dist/commands/channel/context-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-loader.d.ts","sourceRoot":"","sources":["../../../src/commands/channel/context-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiEH,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;4EAEwE;IACxE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,MAAM,EAAO,EACpB,MAAM,GAAE,MAAM,EAAO,EACrB,YAAY,GAAE,MAAM,EAAO,GAC1B,gBAAgB,CAoFlB"}