@iowarp/clio-coder 0.4.2 → 0.4.3

package/dist/{chunk-IKSLQ4XV.js → chunk-PAJQJ7BS.js}

@@ -6,11 +6,11 @@ import {
   parseRoutingIntent,
   routePriorForLatencyClass,
   sameRouteIdentity
-} from "./chunk-HIICAHCJ.js";
+} from "./chunk-EKCHAPYA.js";
 import {
   hashToolCall,
   typedValidationSummary
-} from "./chunk-IDNA72AH.js";
+} from "./chunk-RSJ25QSL.js";
 import {
   describeCallAction
 } from "./chunk-NEDJ26B5.js";
@@ -29,14 +29,27 @@ import {
   resolveReadPath
 } from "./chunk-OQE5J4C6.js";
 import {
-  DEFAULT_AUTONOMY_EXPOSURE,
-  DEFAULT_AUTONOMY_LEVEL,
-  autonomyAskRejection,
-  autonomyDenyRejection,
-  evaluateSkillToolSurface,
-  isAutonomyLevel,
-  mapAutonomy
-} from "./chunk-FSP7CMNU.js";
+  PATH_BOUNDARY_MAX_ENTRIES,
+  PathBoundaryError,
+  asDirectoryPathBoundary,
+  normalizePathBoundaryEntry,
+  pathBoundaryCovers,
+  resolvePathBoundary
+} from "./chunk-HHV2GANA.js";
+import {
+  AGENT_AUTOMATION_AUTHORITIES,
+  COUNCIL_BALLOT_SHAPE,
+  COUNCIL_BALLOT_VERDICT_MAX_BYTES,
+  agentSpecFingerprint,
+  classify
+} from "./chunk-B4OAX3SI.js";
+import {
+  commandArgumentSegments,
+  detectValidationCommand,
+  extractCommandDeleteTargets,
+  extractCommandWriteTargets,
+  toolMutationPaths
+} from "./chunk-I7ZPNEJM.js";
 import {
   DEFAULT_MAX_LINES,
   DEFAULT_TOOL_RESULT_MAX_BYTES,
@@ -52,7 +65,7 @@ import {
   toolResultDigestFor,
   truncateHead,
   truncateTail
-} from "./chunk-B7HM5Z7T.js";
+} from "./chunk-JDAY6FIL.js";
 import {
   formatSize
 } from "./chunk-OZNBF4L3.js";
@@ -60,56 +73,47 @@ import {
   byteLength,
   truncateUtf8
 } from "./chunk-6XLNIQDB.js";
-import {
-  BASH_HARD_CAP_BYTES,
-  combineBashOutput,
-  runBashCommand
-} from "./chunk-NMJXSHBJ.js";
-import {
-  PATH_BOUNDARY_MAX_ENTRIES,
-  PathBoundaryError,
-  asDirectoryPathBoundary,
-  normalizePathBoundaryEntry,
-  pathBoundaryCovers,
-  resolvePathBoundary
-} from "./chunk-HHV2GANA.js";
-import {
-  AGENT_AUTOMATION_AUTHORITIES,
-  COUNCIL_BALLOT_SHAPE,
-  COUNCIL_BALLOT_VERDICT_MAX_BYTES,
-  agentSpecFingerprint,
-  classify
-} from "./chunk-PGF63K6I.js";
-import {
-  detectValidationCommand,
-  extractCommandDeleteTargets,
-  extractCommandWriteTargets,
-  tokenizeShellLike,
-  toolMutationPaths
-} from "./chunk-IKOZFYBN.js";
 import {
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
+import {
+  DEFAULT_AUTONOMY_EXPOSURE,
+  DEFAULT_AUTONOMY_LEVEL,
+  autonomyAskRejection,
+  autonomyDenyRejection,
+  evaluateSkillToolSurface,
+  isAutonomyLevel,
+  mapAutonomy
+} from "./chunk-JGRC33J2.js";
 import {
   ToolNames
 } from "./chunk-K6BSR66V.js";
 import {
-  resolveSafeCwd
-} from "./chunk-HJWWJ6IL.js";
+  BASH_HARD_CAP_BYTES,
+  combineBashOutput,
+  runBashCommand
+} from "./chunk-NMJXSHBJ.js";
+import {
+  boundedExternalDiagnostic
+} from "./chunk-VW6DOEDG.js";
 import {
   THINKING_LEVELS
 } from "./chunk-UXCU4E3T.js";
+import {
+  buildSafeToolEnv,
+  resolveSafeCwd
+} from "./chunk-JSC3U7TI.js";
 import {
   GUARDRAIL_DEFAULTS,
   isWorkerToolCallCapExceededReason,
   resolveGuardrail
 } from "./chunk-S66XZJOF.js";
+import {
+  StringEnum
+} from "./chunk-YPC6ZR5L.js";
 import {
   clioStateDir
 } from "./chunk-BYP5D4HI.js";
-import {
-  StringEnum
-} from "./chunk-VXMFAE2W.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -1326,6 +1330,14 @@ function normalizeDispatchIntent(raw, checks) {
 
 // src/domains/dispatch/budget-envelope.ts
 init_esm_shims();
+var NATIVE_CLIO_CONTROLS = ["tool-calls", "read-reserve", "synthesis", "attempt-cap"];
+var EXTERNAL_CLIO_CONTROLS = [
+  "single-launch",
+  "wall-clock",
+  "output-cap",
+  "cancellation",
+  "result-contract"
+];
 var BudgetAdmissionError = class extends Error {
   code;
   constructor(code, message) {
@@ -1368,6 +1380,8 @@ function cloneDispatchBudgetRequest(value, prefix = "budget") {
   return { ...phase, ...retryRevision === void 0 ? {} : { retryRevision } };
 }
 function freezeEnvelope(envelope) {
+  Object.freeze(envelope.enforcement.clioControls);
+  Object.freeze(envelope.enforcement);
   Object.freeze(envelope.policy.default);
   Object.freeze(envelope.policy.maximum);
   Object.freeze(envelope.policy);
@@ -1506,6 +1520,15 @@ function resolveToolBudgetEnvelope(input) {
   const authoredMaximum = input.policy.maximum ?? input.policy;
   return freezeEnvelope({
     version: 1,
+    enforcement: input.enforcement === "external-one-shot" ? {
+      classification: "external-one-shot",
+      perTool: "unobserved-not-enforced",
+      clioControls: [...EXTERNAL_CLIO_CONTROLS]
+    } : {
+      classification: "native-per-tool",
+      perTool: "enforced",
+      clioControls: [...NATIVE_CLIO_CONTROLS]
+    },
     policy: {
       recipeId: input.recipeId,
       default: {
@@ -1541,7 +1564,8 @@ function formatBudgetRequest(envelope) {
 function formatEffectiveBudget(envelope) {
   const budget = envelope.effective;
   const revision = budget.revision ? `, result revision ${budget.revision.toolCalls}/${budget.revision.readReserve}` : "";
-  return `${budget.toolCalls}/${budget.readReserve}${revision}, lifetime cap ${budget.hardCap}, synthesis=${budget.synthesis ? "on" : "off"}`;
+  const enforcement = envelope.enforcement.classification === "external-one-shot" ? "external one-shot; per-tool unobserved/not enforced" : "native per-tool enforced";
+  return `${budget.toolCalls}/${budget.readReserve}${revision}, lifetime cap ${budget.hardCap}, synthesis=${budget.synthesis ? "on" : "off"}; ${enforcement}`;
 }
 function formatBudgetReasons(envelope) {
   return envelope.reasons.length === 0 ? "none" : envelope.reasons.map((reason) => reason.code).join(",");
@@ -1555,6 +1579,9 @@ var BUDGET_REASON_CODES = /* @__PURE__ */ new Set([
   "revision-growth-authorized",
   "revision-growth-denied"
 ]);
+function isExactStringArray(value, expected) {
+  return value.length === expected.length && value.every((item, index) => item === expected[index]);
+}
 function cloneRunToolBudgetEnvelope(value) {
   try {
     if (!isRecord3(value) || value.version !== 1 || !isRecord3(value.policy) || !isRecord3(value.effective)) {
@@ -1589,8 +1616,40 @@ function cloneRunToolBudgetEnvelope(value) {
       }
       reasons.push({ code: reason.code, detail: reason.detail });
     }
+    const enforcement = (() => {
+      if (value.enforcement === void 0) {
+        return {
+          classification: "native-per-tool",
+          perTool: "enforced",
+          clioControls: [...NATIVE_CLIO_CONTROLS]
+        };
+      }
+      if (!isRecord3(value.enforcement) || !Array.isArray(value.enforcement.clioControls)) return null;
+      if (Object.keys(value.enforcement).some(
+        (key) => key !== "classification" && key !== "perTool" && key !== "clioControls"
+      )) {
+        return null;
+      }
+      if (value.enforcement.classification === "external-one-shot" && value.enforcement.perTool === "unobserved-not-enforced" && isExactStringArray(value.enforcement.clioControls, EXTERNAL_CLIO_CONTROLS)) {
+        return {
+          classification: "external-one-shot",
+          perTool: "unobserved-not-enforced",
+          clioControls: [...EXTERNAL_CLIO_CONTROLS]
+        };
+      }
+      if (value.enforcement.classification === "native-per-tool" && value.enforcement.perTool === "enforced" && isExactStringArray(value.enforcement.clioControls, NATIVE_CLIO_CONTROLS)) {
+        return {
+          classification: "native-per-tool",
+          perTool: "enforced",
+          clioControls: [...NATIVE_CLIO_CONTROLS]
+        };
+      }
+      return null;
+    })();
+    if (enforcement === null) return void 0;
     return freezeEnvelope({
       version: 1,
+      enforcement,
       policy: {
         recipeId,
         default: { ...defaultPhase, synthesis: value.policy.default.synthesis },
@@ -1795,6 +1854,10 @@ var TASK_TYPE_RULES = [
   ["debug", /\b(debug|fix|bug|crash|failure|broken|regression)\b/i],
   ["refactor", /\b(refactor|clean ?up|restructure|rename|extract|simplify)\b/i],
   ["config", /\b(config|configuration|settings|setup|install|ci pipeline|workflow file)\b/i],
+  [
+    "world_knowledge",
+    /\b(?:open[- ]world|ecosystem landscape|industry landscape|state of (?:the )?art|current alternatives|latest alternatives|advisory second opinion)\b/i
+  ],
   ["research", /\b(research|investigate|explore|survey|compare|find out)\b/i],
   ["code_read", /\b(read|explain|understand|summarize|describe|walk through|map|locate|trace)\b/i],
   ["code_write", /\b(write|implement|add|create|build|develop|introduce)\b/i]
@@ -1870,6 +1933,11 @@ function agentRouteCandidates(input) {
 var TASK_SIGNALS = {
   code_read: { ids: ["scout"], tags: ["reconnaissance", "symbols", "codewiki"], contracts: ["scout-report"] },
   research: { ids: ["researcher"], tags: ["sources", "external-context", "papers"], contracts: ["research-report"] },
+  world_knowledge: {
+    ids: ["world-knowledge"],
+    tags: ["open-world", "ecosystem", "current-context", "second-opinion"],
+    contracts: ["world-knowledge-report"]
+  },
   code_review: { ids: ["verifier"], tags: ["review", "verification"], contracts: ["verifier-report"] },
   debug: { ids: ["debugger"], tags: ["debugging", "root-cause"], contracts: ["debugger-report"] },
   test: { ids: ["verifier", "tester"], tags: ["tests", "validation", "regression"], contracts: ["verifier-report"] },
@@ -2836,6 +2904,7 @@ var AUTO_BASELINE_BY_TASK_TYPE = {
   // Read-only shapes.
   code_review: "verifier",
   research: "researcher",
+  world_knowledge: "world-knowledge",
   code_read: "scout",
   unknown: "scout"
 };
@@ -3163,10 +3232,10 @@ function taskViews(args) {
   const sharedNode = str(args.node);
   const sharedTarget = str(args.target);
   return tasks.map((item) => {
-    const record2 = isRecord6(item) ? item : {};
+    const record3 = isRecord6(item) ? item : {};
     const view = {
-      agent: str(record2.agent) ?? sharedAgent,
-      task: str(item) ?? str(record2.task) ?? "(invalid task)",
+      agent: str(record3.agent) ?? sharedAgent,
+      task: str(item) ?? str(record3.task) ?? "(invalid task)",
       routeApproval: null,
       agentSelection: null,
       stepId: null,
@@ -3177,23 +3246,23 @@ function taskViews(args) {
       agentDecision: null,
       wave: null
     };
-    const briefing = "briefing" in record2 ? str(record2.briefing) : str(args.briefing);
+    const briefing = "briefing" in record3 ? str(record3.briefing) : str(args.briefing);
     if (briefing !== void 0) view.briefing = briefing;
-    const worktree = "worktree" in record2 ? record2.worktree : args.worktree;
+    const worktree = "worktree" in record3 ? record3.worktree : args.worktree;
     if (worktree === true) {
       view.worktree = true;
-      const apply = "apply" in record2 ? record2.apply : args.apply;
+      const apply = "apply" in record3 ? record3.apply : args.apply;
       view.apply = apply === "preserve" ? "preserve" : "merge";
     }
-    const model = str(record2.model) ?? sharedModel;
+    const model = str(record3.model) ?? sharedModel;
     if (model !== void 0) view.model = model;
-    const node = str(record2.node) ?? sharedNode;
+    const node = str(record3.node) ?? sharedNode;
     if (node !== void 0) view.node = node;
-    const target = str(record2.target) ?? sharedTarget;
+    const target = str(record3.target) ?? sharedTarget;
     if (target !== void 0) view.target = target;
-    const failover = failoverModeOf(record2.failover) ?? failoverModeOf(args.failover);
+    const failover = failoverModeOf(record3.failover) ?? failoverModeOf(args.failover);
     if (failover !== void 0) view.failover = failover;
-    const rawCandidates = "allowedCandidates" in record2 ? record2.allowedCandidates : args.allowedCandidates;
+    const rawCandidates = "allowedCandidates" in record3 ? record3.allowedCandidates : args.allowedCandidates;
     const candidates = canonicalCandidates(rawCandidates);
     if (failover === "approved" && candidates !== null) view.allowedCandidates = candidates;
     return view;
@@ -3414,6 +3483,7 @@ var RESULT_CONTRACT_KINDS = /* @__PURE__ */ new Set([
   "council-report",
   "debugger-report",
   "research-report",
+  "world-knowledge-report",
   "mutation-report",
   "provenance-report",
   "oracle-report",
@@ -4073,7 +4143,8 @@ ${guidance}`,
   return { kind: "blocked", reason, decision: blocked };
 }
 function skillSurfaceBlockedVerdict(decision, tool, violation) {
-  const reason = violation.disallowedBy.length > 0 ? `${tool} is disallowed by the active skill(s) ${violation.disallowedBy.join(", ")} (disallowed-tools). The narrowing ends when the skill policy's turn or worker run ends. Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.` : `${tool} is outside the tool surface declared by the active skill(s) ${violation.skills.join(", ")}. Tools are narrowed to: ${(violation.mergedAllowedTools ?? []).join(", ")} (plus context and ask_user). The narrowing ends when the skill policy's turn or worker run ends. Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.`;
+  const lifetime = violation.carriedSurface ? "The narrowing stays active for the rest of the session, across the operator's later turns, until a different skill replaces it or the operator clears it with /skill off." : "The narrowing ends when the skill policy's turn or worker run ends.";
+  const reason = violation.disallowedBy.length > 0 ? `${tool} is disallowed by the active skill(s) ${violation.disallowedBy.join(", ")} (disallowed-tools). ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.` : `${tool} is outside the tool surface declared by the active skill(s) ${violation.skills.join(", ")}. Tools are narrowed to: ${(violation.mergedAllowedTools ?? []).join(", ")} (plus context and ask_user). ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.`;
   const blocked = {
     kind: "block",
     classification: decision.classification,
@@ -4230,7 +4301,8 @@ var RUNTIME_API_FAMILIES = [
   "rerank-http",
   "embeddings-http",
   "claude-agent-sdk",
-  "claude-code-subprocess"
+  "claude-code-subprocess",
+  "external-agent-subprocess"
 ];
 var RUNTIME_AUTHS = [
   "api-key",
@@ -4303,15 +4375,15 @@ function readString(value, source, options) {
   if (!options?.allowEmpty && value.length === 0) throw new Error(`${source} must be a non-empty string`);
   return value;
 }
-function readOptionalString(record2, key, source) {
-  if (record2[key] !== void 0) readString(record2[key], `${source}.${key}`);
+function readOptionalString(record3, key, source) {
+  if (record3[key] !== void 0) readString(record3[key], `${source}.${key}`);
 }
-function readOptionalBoolean(record2, key, source) {
-  const value = record2[key];
+function readOptionalBoolean(record3, key, source) {
+  const value = record3[key];
   if (value !== void 0 && typeof value !== "boolean") throw new Error(`${source}.${key} must be a boolean`);
 }
-function readOptionalNumber(record2, key, source) {
-  const value = record2[key];
+function readOptionalNumber(record3, key, source) {
+  const value = record3[key];
   if (value !== void 0 && (typeof value !== "number" || !Number.isFinite(value))) {
     throw new Error(`${source}.${key} must be a finite number`);
   }
@@ -4322,15 +4394,15 @@ function readEnum(value, source, allowed) {
   }
   return value;
 }
-function readOptionalEnum(record2, key, source, allowed) {
-  if (record2[key] !== void 0) readEnum(record2[key], `${source}.${key}`, allowed);
+function readOptionalEnum(record3, key, source, allowed) {
+  if (record3[key] !== void 0) readEnum(record3[key], `${source}.${key}`, allowed);
 }
 function readStringArray(value, source) {
   if (!Array.isArray(value)) throw new Error(`${source} must be an array`);
   return value.map((item, index) => readString(item, `${source}[${index}]`));
 }
-function readOptionalStringArray(record2, key, source) {
-  if (record2[key] !== void 0) readStringArray(record2[key], `${source}.${key}`);
+function readOptionalStringArray(record3, key, source) {
+  if (record3[key] !== void 0) readStringArray(record3[key], `${source}.${key}`);
 }
 function validateProtectedModels(value) {
   if (value === void 0) return;
@@ -4397,6 +4469,9 @@ function validateCapabilityPatch(value, source) {
   for (const key of ["contextWindow", "maxTokens"]) {
     readOptionalNumber(caps, key, source);
   }
+  if (caps.thinkingControlRuntime !== void 0) {
+    readEnum(caps.thinkingControlRuntime, `${source}.thinkingControlRuntime`, ["lmstudio", "llamacpp"]);
+  }
   for (const key of ["toolCallFormat", "thinkingFormat", "structuredOutputs"]) {
     readOptionalString(caps, key, source);
   }
@@ -4698,31 +4773,112 @@ import { spawn } from "node:child_process";
 
 // src/engine/external-subprocess.ts
 init_esm_shims();
+async function* readBoundedLines(readable, options) {
+  let segments = [];
+  let lineBytes = 0;
+  let totalBytes = 0;
+  let discarding = false;
+  const finishLine = () => {
+    if (discarding) {
+      segments = [];
+      lineBytes = 0;
+      discarding = false;
+      return { kind: "oversized" };
+    }
+    if (lineBytes === 0) return { kind: "line", line: "" };
+    const joined = Buffer.concat(segments, lineBytes);
+    segments = [];
+    lineBytes = 0;
+    const end = joined.at(-1) === 13 ? joined.length - 1 : joined.length;
+    return { kind: "line", line: joined.subarray(0, end).toString("utf8") };
+  };
+  for await (const raw of readable) {
+    const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(String(raw));
+    totalBytes += chunk.byteLength;
+    if (totalBytes > options.maxTotalBytes) throw new Error("external stdout exceeded the cumulative output limit");
+    let offset = 0;
+    while (offset < chunk.length) {
+      const newline = chunk.indexOf(10, offset);
+      const end = newline === -1 ? chunk.length : newline;
+      const piece = chunk.subarray(offset, end);
+      if (!discarding && piece.length > 0) {
+        if (lineBytes + piece.length > options.maxLineBytes) {
+          segments = [];
+          lineBytes = 0;
+          discarding = true;
+        } else {
+          segments.push(piece);
+          lineBytes += piece.length;
+        }
+      }
+      if (newline === -1) break;
+      const line = finishLine();
+      if (line) yield line;
+      offset = newline + 1;
+    }
+  }
+  if (discarding || lineBytes > 0) {
+    const line = finishLine();
+    if (line) yield line;
+  }
+}
 async function readStderr(child) {
-  let stderr = "";
+  let tail = Buffer.alloc(0);
   for await (const chunk of child.stderr) {
-    stderr += String(chunk);
-    if (stderr.length > 8192) stderr = stderr.slice(-8192);
-  }
-  return stderr;
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+    tail = Buffer.concat([tail, bytes]);
+    if (tail.byteLength > 8192) tail = tail.subarray(tail.byteLength - 8192);
+  }
+  return boundedExternalDiagnostic(tail.toString("utf8"));
+}
+function createProcessTreeTerminator(child, graceMs = 1500) {
+  let sent = false;
+  let timer = null;
+  const signal = (name) => {
+    if (child.exitCode !== null) return;
+    if (child.pid && process.platform !== "win32") {
+      try {
+        process.kill(-child.pid, name);
+        return;
+      } catch {
+      }
+    }
+    child.kill(name);
+  };
+  return {
+    terminate() {
+      if (sent) return;
+      sent = true;
+      signal("SIGTERM");
+      timer = setTimeout(() => signal("SIGKILL"), graceMs);
+    },
+    cleanup() {
+      if (timer) clearTimeout(timer);
+      timer = null;
+    }
+  };
 }
 function waitForClose(child) {
   return new Promise((resolve) => {
-    child.once("error", () => resolve(1));
-    child.once("close", (code) => resolve(code ?? 1));
+    let settled = false;
+    const finish = (code) => {
+      if (settled) return;
+      settled = true;
+      resolve(code);
+    };
+    child.once("error", () => finish(1));
+    child.once("close", (code) => finish(code ?? 1));
   });
 }
 
 // src/engine/antigravity/subprocess-runtime.ts
 var ANTIGRAVITY_BINARY = "agy";
-var ZERO_USAGE = {
-  input: 0,
-  output: 0,
-  cacheRead: 0,
-  cacheWrite: 0,
-  totalTokens: 0,
-  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 }
-};
+var ANTIGRAVITY_MAX_STREAM_LINE_BYTES = 1024 * 1024;
+var ANTIGRAVITY_MAX_STREAM_BYTES = 8 * 1024 * 1024;
+var ANTIGRAVITY_MAX_RESPONSE_BYTES = 4 * 1024 * 1024;
+var ANTIGRAVITY_MAX_PROMPT_BYTES = 4 * 1024 * 1024;
+var MAX_PROTOCOL_DIAGNOSTICS = 32;
+var MAX_CONVERSATION_ID_BYTES = 4096;
 function antigravitySubprocessConfigForAutonomy(level, env = process.env) {
   if (level === "full-auto" && env.CLIO_CODER_ALLOW_EXTERNAL_FULL_ACCESS === "1") {
     return {
@@ -4739,7 +4895,7 @@ function antigravitySubprocessConfigForAutonomy(level, env = process.env) {
   if (level === "read-only") {
     return { extraArgs: ["--mode", "plan", "--sandbox"], dangerousBypass: false, externalMode: "plan+sandbox" };
   }
-  return { extraArgs: [], dangerousBypass: false, externalMode: "agy-settings-default" };
+  return { extraArgs: ["--mode", "accept-edits"], dangerousBypass: false, externalMode: "accept-edits" };
 }
 function buildAntigravityPrompt(input) {
   const parts = [];
@@ -4752,114 +4908,314 @@ function buildAntigravityPrompt(input) {
   parts.push(input.task);
   return parts.join("\n\n");
 }
-function buildAgyArgs(input) {
+function buildAgyStdinLine(input) {
+  const content = buildAntigravityPrompt(input);
+  if (Buffer.byteLength(content, "utf8") > ANTIGRAVITY_MAX_PROMPT_BYTES) {
+    throw new Error(`Antigravity work order exceeded ${ANTIGRAVITY_MAX_PROMPT_BYTES} bytes`);
+  }
+  return `${JSON.stringify({ event: "user", message: { content } })}
+`;
+}
+function buildAgyArgs(input, gateEnv = process.env) {
   assertToolProfileEnforceable(input.toolProfile, "antigravity-code");
-  const permission = antigravitySubprocessConfigForAutonomy(input.autonomy);
-  const args = ["--print", ...permission.extraArgs];
+  const permission = antigravitySubprocessConfigForAutonomy(input.autonomy, gateEnv);
+  const args = [
+    ...permission.extraArgs,
+    "--input-format",
+    "stream-json",
+    "--output-format",
+    "stream-json",
+    "--disable-slash-commands"
+  ];
   if (input.wireModelId.trim().length > 0) args.push("--model", input.wireModelId.trim());
-  args.push(buildAntigravityPrompt(input));
   return args;
 }
-function buildAssistantMessage(input) {
-  const message = {
-    role: "assistant",
-    content: [{ type: "text", text: input.text }],
-    api: "google-generative-ai",
-    provider: "google",
-    model: input.model,
-    usage: ZERO_USAGE,
-    stopReason: input.aborted ? "aborted" : input.exitCode === 0 ? "stop" : "error",
-    timestamp: Date.now()
+function record2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function parseAntigravityStreamLine(line) {
+  let decoded;
+  try {
+    decoded = JSON.parse(line);
+  } catch {
+    return null;
+  }
+  const envelope = record2(decoded);
+  if (!envelope || typeof envelope.event !== "string") return null;
+  if (envelope.event === "init") {
+    return {
+      event: "init",
+      conversationId: typeof envelope.conversation_id === "string" ? envelope.conversation_id : null,
+      model: typeof envelope.model === "string" ? envelope.model : null
+    };
+  }
+  if (envelope.event === "step_update") {
+    const update = record2(envelope.step_update);
+    if (!update) return null;
+    if (update.step_type !== "agent_response" || typeof update.text_delta !== "string") {
+      return { event: "other" };
+    }
+    return {
+      event: "text",
+      conversationId: typeof update.conversation_id === "string" ? update.conversation_id : null,
+      delta: update.text_delta
+    };
+  }
+  if (envelope.event === "result") {
+    const result = record2(envelope.result);
+    return result ? { event: "result", result } : null;
+  }
+  return { event: "other" };
+}
+function finite(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.min(value, Number.MAX_SAFE_INTEGER) : 0;
+}
+function normalizeUsage(raw) {
+  const source = record2(raw) ?? {};
+  const input = finite(source.input_tokens);
+  const output = finite(source.output_tokens);
+  const cacheRead = finite(source.cache_read_tokens);
+  const reasoningTokens = finite(source.thinking_tokens);
+  const usage = {
+    input,
+    output,
+    cacheRead,
+    cacheWrite: 0,
+    totalTokens: finite(source.total_tokens) || input + output + reasoningTokens,
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 }
   };
-  if (input.exitCode !== 0 && !input.aborted) {
-    const detail = input.stderr.trim();
-    if (detail.length > 0) message.errorMessage = detail;
+  if (reasoningTokens > 0) usage.reasoningTokens = reasoningTokens;
+  return usage;
+}
+function appendBoundedText(current, delta) {
+  if (Buffer.byteLength(current, "utf8") + Buffer.byteLength(delta, "utf8") > ANTIGRAVITY_MAX_RESPONSE_BYTES) {
+    throw new Error(`Antigravity response exceeded ${ANTIGRAVITY_MAX_RESPONSE_BYTES} bytes`);
   }
-  return message;
+  return current + delta;
+}
+function boundedProviderField(value, field) {
+  if (typeof value !== "string") return "";
+  if (Buffer.byteLength(value, "utf8") > ANTIGRAVITY_MAX_RESPONSE_BYTES) {
+    throw new Error(`Antigravity terminal ${field} exceeded ${ANTIGRAVITY_MAX_RESPONSE_BYTES} bytes`);
+  }
+  return value;
+}
+function boundedConversationId(value) {
+  if (typeof value !== "string" || value.length === 0) return null;
+  return Buffer.byteLength(value, "utf8") <= MAX_CONVERSATION_ID_BYTES ? value : null;
+}
+function protocolFailure(state, detail) {
+  if (state.protocolDiagnostics.length < MAX_PROTOCOL_DIAGNOSTICS) state.protocolDiagnostics.push(detail);
 }
 function emitTextDelta(emit, state, delta) {
   if (delta.length === 0) return;
-  state.text += delta;
-  const message = buildAssistantMessage({
-    model: state.model,
-    text: state.text,
-    exitCode: 0,
-    aborted: false,
-    stderr: ""
-  });
+  state.text = appendBoundedText(state.text, delta);
   if (!state.started) {
     state.started = true;
-    emit({ type: "message_start", message });
+    emit({
+      type: "message_start",
+      message: buildAssistantMessage({
+        model: state.model,
+        text: "",
+        result: null,
+        conversationId: null,
+        exitCode: 0,
+        aborted: false,
+        diagnostic: ""
+      })
+    });
   }
   emit({
     type: "message_update",
-    message,
-    assistantMessageEvent: {
-      type: "text_delta",
-      contentIndex: 0,
-      delta,
-      partial: message
-    }
+    assistantMessageEvent: { type: "text_delta", contentIndex: 0, delta }
   });
 }
-async function readStdout(child, emit, state) {
-  for await (const chunk of child.stdout) {
-    emitTextDelta(emit, state, String(chunk));
+async function readStream(child, emit, state) {
+  for await (const bounded of readBoundedLines(child.stdout, {
+    maxLineBytes: ANTIGRAVITY_MAX_STREAM_LINE_BYTES,
+    maxTotalBytes: ANTIGRAVITY_MAX_STREAM_BYTES
+  })) {
+    if (bounded.kind === "oversized") {
+      protocolFailure(state, "oversized structured output line");
+      continue;
+    }
+    const line = bounded.line;
+    if (!line.trim()) continue;
+    const event = parseAntigravityStreamLine(line);
+    if (!event) {
+      protocolFailure(state, "unreadable structured output line");
+      continue;
+    }
+    if (state.terminalSeen) {
+      protocolFailure(state, "event after terminal result");
+      continue;
+    }
+    switch (event.event) {
+      case "init":
+        if (state.initSeen) {
+          protocolFailure(state, "duplicate init event");
+          break;
+        }
+        state.initSeen = true;
+        state.conversationId = boundedConversationId(event.conversationId);
+        if (event.model?.trim()) state.model = event.model.trim();
+        break;
+      case "text":
+        if (!state.initSeen) {
+          protocolFailure(state, "text event before init");
+          break;
+        }
+        state.conversationId = boundedConversationId(event.conversationId) ?? state.conversationId;
+        emitTextDelta(emit, state, event.delta);
+        break;
+      case "result":
+        if (!state.initSeen) {
+          protocolFailure(state, "terminal result before init");
+          break;
+        }
+        state.terminalSeen = true;
+        state.result = event.result;
+        state.conversationId = boundedConversationId(event.result.conversation_id) ?? state.conversationId;
+        break;
+      case "other":
+        if (!state.initSeen) protocolFailure(state, "event before init");
+        break;
+    }
   }
 }
-function startAntigravityWorkerRun(input, emit) {
-  const args = buildAgyArgs(input);
-  const child = spawn(ANTIGRAVITY_BINARY, args, {
-    cwd: process.cwd(),
-    env: process.env,
-    stdio: ["ignore", "pipe", "pipe"]
+function resultDiagnostic(input) {
+  if (input.aborted) return "Antigravity run was cancelled";
+  if (input.spawnError) return input.spawnError;
+  if (input.streamError) return input.streamError;
+  if (input.protocolDiagnostics.length > 0) {
+    return `Antigravity structured output violated the protocol: ${input.protocolDiagnostics.join("; ")}`;
+  }
+  if (input.result === null) {
+    return "Antigravity CLI ended without a terminal stream result. Update `agy` and verify stream-json support.";
+  }
+  if (input.result.status !== "SUCCESS") {
+    const providerError = boundedProviderField(input.result.error, "error").trim();
+    return providerError || `Antigravity returned terminal status ${String(input.result.status ?? "missing")}`;
+  }
+  if (input.exitCode !== 0) return `Antigravity returned SUCCESS but exited with status ${input.exitCode}`;
+  if (typeof input.result.response !== "string") return "Antigravity SUCCESS result omitted its required response";
+  return "";
+}
+function buildAssistantMessage(input) {
+  const succeeded = !input.aborted && input.exitCode === 0 && input.result?.status === "SUCCESS" && typeof input.result.response === "string" && input.diagnostic.length === 0;
+  const message = {
+    role: "assistant",
+    content: [{ type: "text", text: input.text }],
+    api: "external-agent-subprocess",
+    provider: "antigravity",
+    model: input.model,
+    usage: normalizeUsage(input.result?.usage),
+    stopReason: input.aborted ? "aborted" : succeeded ? "stop" : "error",
+    timestamp: Date.now()
+  };
+  if (input.conversationId) message.responseId = input.conversationId;
+  if (input.diagnostic) message.errorMessage = boundedExternalDiagnostic(input.diagnostic);
+  return message;
+}
+function startAntigravityWorkerRun(input, emit, dependencies = {}) {
+  const sourceEnv = dependencies.environment ?? process.env;
+  const args = buildAgyArgs(input, sourceEnv);
+  const stdinLine = buildAgyStdinLine(input);
+  const workspaceRoot = dependencies.workspaceRoot ?? process.cwd();
+  const cwd = resolveSafeCwd(input.cwd, workspaceRoot);
+  const child = spawn(dependencies.binary ?? ANTIGRAVITY_BINARY, args, {
+    cwd,
+    env: buildSafeToolEnv({}, sourceEnv),
+    detached: process.platform !== "win32",
+    stdio: ["pipe", "pipe", "pipe"]
   });
-  const streamState = { started: false, text: "", model: input.wireModelId };
+  const streamState = {
+    started: false,
+    text: "",
+    model: input.wireModelId,
+    result: null,
+    conversationId: null,
+    initSeen: false,
+    terminalSeen: false,
+    protocolDiagnostics: []
+  };
   let aborted = false;
-  let killTimer = null;
+  let spawnError = "";
+  let streamError = "";
+  const terminator = createProcessTreeTerminator(child, dependencies.killGraceMs ?? 1500);
   const abort = () => {
+    if (child.exitCode !== null) return;
     aborted = true;
-    if (child.killed) return;
-    child.kill("SIGTERM");
-    killTimer = setTimeout(() => {
-      if (!child.killed) child.kill("SIGKILL");
-    }, 1500);
+    terminator.terminate();
   };
-  if (input.signal) {
-    if (input.signal.aborted) abort();
-    else input.signal.addEventListener("abort", abort, { once: true });
-  }
+  const onAbort = () => abort();
+  if (input.signal?.aborted) abort();
+  else input.signal?.addEventListener("abort", onAbort, { once: true });
+  child.once("error", (cause) => {
+    spawnError = cause.code === "ENOENT" ? "Antigravity CLI (`agy`) is not installed or not on PATH." : boundedExternalDiagnostic(cause.message);
+  });
+  child.stdin.on("error", (cause) => {
+    if (!aborted) spawnError ||= boundedExternalDiagnostic(`could not send work order to Antigravity: ${cause.message}`);
+  });
+  child.stdin.end(stdinLine);
   const promise = (async () => {
     emit({ type: "agent_start" });
-    const stderrPromise = readStderr(child);
-    const stdoutPromise = readStdout(child, emit, streamState);
-    const exitCode = await waitForClose(child);
-    await stdoutPromise.catch(() => {
-    });
-    const stderr = await stderrPromise.catch(() => "");
-    if (killTimer) clearTimeout(killTimer);
-    const finalText = streamState.text || (exitCode === 0 ? "" : stderr.trim());
-    const finalMessage = buildAssistantMessage({
-      model: streamState.model,
-      text: finalText,
-      exitCode,
-      aborted,
-      stderr
-    });
-    if (!streamState.started) emit({ type: "message_start", message: finalMessage });
-    emit({ type: "message_end", message: finalMessage });
-    const messages = [finalMessage];
-    emit({ type: "agent_end", messages });
-    if (exitCode !== 0 && stderr.trim().length > 0 && !aborted) {
-      process.stderr.write(`[worker:antigravity-code] ${stderr.trim()}
+    try {
+      const stderrPromise = readStderr(child);
+      const stdoutPromise = readStream(child, emit, streamState).catch((cause) => {
+        streamError = boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause));
+        terminator.terminate();
+      });
+      const exitCode = await waitForClose(child);
+      await stdoutPromise;
+      const stderr = await stderrPromise.catch(
+        (cause) => boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause))
+      );
+      let terminalResponse = "";
+      try {
+        terminalResponse = boundedProviderField(streamState.result?.response, "response");
+      } catch (cause) {
+        streamError ||= boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause));
+      }
+      let diagnostic = "";
+      try {
+        diagnostic = resultDiagnostic({
+          result: streamState.result,
+          exitCode,
+          spawnError,
+          stderr,
+          protocolDiagnostics: streamState.protocolDiagnostics,
+          streamError,
+          aborted
+        });
+      } catch (cause) {
+        diagnostic = boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause));
+      }
+      const finalText = terminalResponse || streamState.text;
+      const finalMessage = buildAssistantMessage({
+        model: streamState.model,
+        text: finalText,
+        result: streamState.result,
+        conversationId: streamState.conversationId,
+        exitCode,
+        aborted,
+        diagnostic
+      });
+      if (!streamState.started) emit({ type: "message_start", message: finalMessage });
+      emit({ type: "message_end", message: finalMessage });
+      const messages = [finalMessage];
+      emit({ type: "agent_end", messages });
+      if (finalMessage.stopReason === "error" && diagnostic && !aborted) {
+        process.stderr.write(`[worker:antigravity-code] ${boundedExternalDiagnostic(diagnostic)}
 `);
+      }
+      return { messages, exitCode: finalMessage.stopReason === "stop" ? 0 : 1 };
+    } finally {
+      terminator.cleanup();
+      input.signal?.removeEventListener("abort", onAbort);
     }
-    return { messages, exitCode: exitCode === 0 ? 0 : 1 };
   })();
-  return {
-    promise,
-    abort
-  };
+  return { promise, abort };
 }
 
 // src/engine/claude/subprocess-runtime.ts
@@ -4926,17 +5282,17 @@ function buildClaudeCodeArgs(input) {
   args.push(buildClaudeCodePrompt(input));
   return args;
 }
-function finite(value) {
+function finite2(value) {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
 }
-function normalizeUsage(raw, totalCostUsd = 0) {
-  const record2 = typeof raw === "object" && raw !== null ? raw : {};
-  const input = finite(record2.input_tokens) + finite(record2.inputTokens) + finite(record2.input) + finite(record2.prompt_tokens) + finite(record2.promptTokens);
-  const output = finite(record2.output_tokens) + finite(record2.outputTokens) + finite(record2.output) + finite(record2.completion_tokens) + finite(record2.completionTokens);
-  const cacheRead = finite(record2.cache_read_input_tokens) + finite(record2.cacheReadInputTokens) + finite(record2.cacheRead) + finite(record2.cacheReadTokens);
-  const cacheWrite = finite(record2.cache_creation_input_tokens) + finite(record2.cacheCreationInputTokens) + finite(record2.cacheWrite) + finite(record2.cacheWriteTokens);
+function normalizeUsage2(raw, totalCostUsd = 0) {
+  const record3 = typeof raw === "object" && raw !== null ? raw : {};
+  const input = finite2(record3.input_tokens) + finite2(record3.inputTokens) + finite2(record3.input) + finite2(record3.prompt_tokens) + finite2(record3.promptTokens);
+  const output = finite2(record3.output_tokens) + finite2(record3.outputTokens) + finite2(record3.output) + finite2(record3.completion_tokens) + finite2(record3.completionTokens);
+  const cacheRead = finite2(record3.cache_read_input_tokens) + finite2(record3.cacheReadInputTokens) + finite2(record3.cacheRead) + finite2(record3.cacheReadTokens);
+  const cacheWrite = finite2(record3.cache_creation_input_tokens) + finite2(record3.cacheCreationInputTokens) + finite2(record3.cacheWrite) + finite2(record3.cacheWriteTokens);
   const totalTokens = input + output + cacheRead + cacheWrite;
-  const total = finite(totalCostUsd) + finite(record2.costUSD) + finite(record2.cost_usd);
+  const total = finite2(totalCostUsd) + finite2(record3.costUSD) + finite2(record3.cost_usd);
   return {
     input,
     output,
@@ -4946,8 +5302,8 @@ function normalizeUsage(raw, totalCostUsd = 0) {
     cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total }
   };
 }
-function nestedRecord(record2, key) {
-  const value = record2[key];
+function nestedRecord(record3, key) {
+  const value = record3[key];
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function extractContentText(content) {
@@ -4955,34 +5311,34 @@ function extractContentText(content) {
   let out = "";
   for (const block of content) {
     if (typeof block !== "object" || block === null) continue;
-    const record2 = block;
-    if (record2.type === "text" && typeof record2.text === "string") out += record2.text;
+    const record3 = block;
+    if (record3.type === "text" && typeof record3.text === "string") out += record3.text;
   }
   return out;
 }
-function extractDelta(record2) {
-  const delta = nestedRecord(record2, "delta");
+function extractDelta(record3) {
+  const delta = nestedRecord(record3, "delta");
   if (delta && typeof delta.text === "string") return delta.text;
   if (delta && typeof delta.thinking === "string") return "";
-  const contentBlock = nestedRecord(record2, "content_block");
+  const contentBlock = nestedRecord(record3, "content_block");
   if (contentBlock && contentBlock.type === "text" && typeof contentBlock.text === "string") return contentBlock.text;
-  if (typeof record2.delta === "string") return record2.delta;
+  if (typeof record3.delta === "string") return record3.delta;
   return "";
 }
-function assistantTextFromEvent(record2) {
-  const message = nestedRecord(record2, "message");
+function assistantTextFromEvent(record3) {
+  const message = nestedRecord(record3, "message");
   if (message) return extractContentText(message.content);
-  return extractContentText(record2.content);
+  return extractContentText(record3.content);
 }
-function resultText(record2) {
-  if (!record2) return "";
-  return typeof record2.result === "string" ? record2.result : "";
+function resultText(record3) {
+  if (!record3) return "";
+  return typeof record3.result === "string" ? record3.result : "";
 }
-function resultError(record2, stderr) {
-  if (record2) {
-    if (typeof record2.error === "string") return record2.error;
-    if (Array.isArray(record2.errors)) return record2.errors.map(String).join("; ");
-    if (record2.subtype !== void 0 && record2.subtype !== "success") return String(record2.subtype);
+function resultError(record3, stderr) {
+  if (record3) {
+    if (typeof record3.error === "string") return record3.error;
+    if (Array.isArray(record3.errors)) return record3.errors.map(String).join("; ");
+    if (record3.subtype !== void 0 && record3.subtype !== "success") return String(record3.subtype);
   }
   return stderr.trim();
 }
@@ -4994,7 +5350,7 @@ function buildAssistantMessage2(input) {
     api: "claude-code-subprocess",
     provider: "anthropic",
     model: input.model,
-    usage: normalizeUsage(input.result?.usage, finite(input.result?.total_cost_usd)),
+    usage: normalizeUsage2(input.result?.usage, finite2(input.result?.total_cost_usd)),
     stopReason: input.aborted ? "aborted" : input.exitCode === 0 ? "stop" : "error",
     timestamp: Date.now()
   };
@@ -5041,18 +5397,18 @@ async function readJsonLines(child, emit, state) {
       continue;
     }
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) continue;
-    const record2 = parsed;
-    if (record2.type === "system" && typeof record2.model === "string") state.model = record2.model;
-    if (record2.type === "result") {
-      state.result = record2;
+    const record3 = parsed;
+    if (record3.type === "system" && typeof record3.model === "string") state.model = record3.model;
+    if (record3.type === "result") {
+      state.result = record3;
       continue;
     }
-    if (record2.type === "assistant") {
-      const text = assistantTextFromEvent(record2);
+    if (record3.type === "assistant") {
+      const text = assistantTextFromEvent(record3);
       if (text.length > 0 && text.length >= state.text.length) state.text = text;
       continue;
     }
-    emitTextDelta2(emit, state, extractDelta(record2));
+    emitTextDelta2(emit, state, extractDelta(record3));
   }
 }
 function startClaudeCodeWorkerRun(input, emit) {
@@ -5815,7 +6171,7 @@ function toolWritesOpaquely(toolName) {
 var GIT_PATH_MUTATIONS = /* @__PURE__ */ new Set(["mv", "rm"]);
 function gitPathOperands(command) {
   const targets = [];
-  for (const segment of splitCommandSegments(command)) {
+  for (const segment of commandArgumentSegments(command)) {
     if (segment[0] !== "git") continue;
     const subcommand = segment[1];
     if (subcommand === void 0 || !GIT_PATH_MUTATIONS.has(subcommand)) continue;
@@ -5826,20 +6182,6 @@ function gitPathOperands(command) {
   }
   return targets;
 }
-function splitCommandSegments(command) {
-  const segments = [];
-  let current = [];
-  for (const token of tokenizeShellLike(command)) {
-    if (token === ";" || token === "&&" || token === "||" || token === "|") {
-      if (current.length > 0) segments.push(current);
-      current = [];
-      continue;
-    }
-    current.push(token);
-  }
-  if (current.length > 0) segments.push(current);
-  return segments;
-}
 function commandOf(args) {
   const command = args?.command;
   return typeof command === "string" && command.length > 0 ? command : null;
@@ -6042,9 +6384,9 @@ import { performance as performance2 } from "node:perf_hooks";
 function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function stringField(record2, ...keys) {
+function stringField(record3, ...keys) {
   for (const key of keys) {
-    const value = record2[key];
+    const value = record3[key];
     if (typeof value === "string" && value.trim().length > 0) return value.trim();
   }
   return void 0;
@@ -6417,4 +6759,4 @@ export {
   isTerminalRunEnvelope,
   runKindSupportsLiveSteering
 };
-//# sourceMappingURL=chunk-IKSLQ4XV.js.map
+//# sourceMappingURL=chunk-PAJQJ7BS.js.map