@jini-ai/agent-runtime 0.1.0

package/dist/opencode-log.js

@@ -0,0 +1,163 @@
+/**
+ * @module opencode-log
+ *
+ * OpenCode swallows provider failures in headless `run --format json` mode:
+ * on a 429 usage-limit (and similar), it marks the error retryable, retries
+ * silently, and emits NOTHING on stdout/stderr — so the caller only sees an
+ * inactivity-watchdog timeout with no reason. The real error is recorded
+ * only in OpenCode's own session log (`service=llm … error={…}`). This
+ * module recovers that signal so a chat UI can show "usage limit reached"
+ * instead of a bare timeout. OpenCode-specific by design.
+ *
+ * Ported verbatim from OD's `apps/daemon/src/runtimes/auth/opencode-log.ts`
+ * — no product coupling (it only reads OpenCode's own on-disk log format).
+ */
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { classifyAgentServiceFailure } from './auth.js';
+// OpenCode resolves its data dir as `$XDG_DATA_HOME/opencode` (when set) or
+// `$HOME/.local/share/opencode`, with session logs under `log/`. Mirror that
+// so we read the same files the spawned CLI wrote. Null when neither var is
+// set (we have no basis to guess a path).
+export function resolveOpenCodeLogDir(env) {
+    const xdg = typeof env.XDG_DATA_HOME === 'string' ? env.XDG_DATA_HOME.trim() : '';
+    const home = typeof env.HOME === 'string' ? env.HOME.trim() : '';
+    const base = xdg || (home ? path.join(home, '.local', 'share') : '');
+    if (!base)
+        return null;
+    return path.join(base, 'opencode', 'log');
+}
+// Read the tail of OpenCode's most recent session log. Filenames are
+// `<ISO-like-timestamp>.log`, so a lexicographic sort orders them by
+// recency. `since` (when provided) binds the lookup to the current run: a
+// file last written before the run started can only belong to an earlier
+// session, so it is skipped rather than risk surfacing a stale provider
+// error for this run. The 2 MB tail comfortably holds the final error frame
+// even though OpenCode embeds the entire request body (system prompt + tool
+// schemas) in each `service=llm` line. Synchronous on purpose: the only
+// callers are a (non-async) run-close handler and an inactivity watchdog,
+// once per failed OpenCode run. Returns null on any fs error (no dir yet,
+// perms).
+export function readLatestOpenCodeLogTail(logDir, options = {}) {
+    const { maxBytes = 2_000_000, since } = options;
+    let names;
+    try {
+        names = readdirSync(logDir).filter((name) => name.endsWith('.log'));
+    }
+    catch {
+        return null;
+    }
+    if (names.length === 0)
+        return null;
+    names.sort().reverse(); // newest filename first
+    for (const name of names) {
+        const full = path.join(logDir, name);
+        if (since != null) {
+            try {
+                if (statSync(full).mtimeMs < since)
+                    continue;
+            }
+            catch {
+                continue;
+            }
+        }
+        try {
+            const buf = readFileSync(full, 'utf8');
+            return buf.length > maxBytes ? buf.slice(-maxBytes) : buf;
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+// Only treat a `"message":"…"` value as the failure reason when it reads
+// like a service error. The embedded request body uses `"content":` for
+// prompt text, but tool schemas and user prompts could still contain a
+// stray `"message"` key, so this keyword gate keeps unrelated payload text
+// from masquerading as the error.
+const SERVICE_ERROR_MESSAGE_RE = /usage limit|rate[ _-]?limit|quota|limit reached|insufficient|credit|balance|overloaded|unavailable|unauthor|authenticat|invalid[ _-]?(?:api[ _-]?)?key|api key|\/login|exhaust|too many requests/i;
+function pickServiceErrorMessage(line) {
+    const re = /"message":"((?:[^"\\]|\\.)*)"/g;
+    let match;
+    while ((match = re.exec(line)) !== null) {
+        let value;
+        try {
+            value = JSON.parse(`"${match[1]}"`);
+        }
+        catch {
+            value = match[1];
+        }
+        value = value.trim();
+        // Conservative by design (SEC-002 / CR-R2): a non-matching "message" value is never
+        // returned, even as a fallback. This line can embed the entire request body (system
+        // prompt + tool schemas — see the module doc), so a "first message seen" fallback would
+        // let unrelated payload content masquerade as the service-failure reason, defeating the
+        // anti-masquerade keyword gate this function exists to enforce. Independently recommended
+        // as the safe default by three separate reviews (code review, security, and a prior model
+        // session) — see ADS-memory/reports/{code-review,security}/*-backend-coverage-push-2026-07-20.md.
+        if (SERVICE_ERROR_MESSAGE_RE.test(value))
+            return value;
+    }
+    return null;
+}
+function codeFromStatus(statusCode) {
+    if (statusCode === 401 || statusCode === 403)
+        return 'AGENT_AUTH_REQUIRED';
+    if (statusCode === 429)
+        return 'RATE_LIMITED';
+    if (statusCode >= 500 && statusCode <= 599)
+        return 'UPSTREAM_UNAVAILABLE';
+    return null;
+}
+function defaultMessageForCode(code) {
+    switch (code) {
+        case 'AGENT_AUTH_REQUIRED':
+            return 'OpenCode could not authenticate with the model provider.';
+        case 'RATE_LIMITED':
+            return 'OpenCode hit a provider usage or rate limit.';
+        case 'UPSTREAM_UNAVAILABLE':
+            return "OpenCode's model provider is temporarily unavailable.";
+    }
+}
+// Classify the latest `service=llm` provider error in an OpenCode log tail.
+// We scope to that single line so the huge request body of *other* lines
+// can't leak in, key the classification on the unambiguous HTTP `statusCode`
+// first, and fall back to keyword matching the extracted message only.
+export function extractOpenCodeServiceFailure(logTail) {
+    if (!logTail || !logTail.trim())
+        return null;
+    const lines = logTail.split(/\r?\n/);
+    let line = null;
+    for (let i = lines.length - 1; i >= 0; i -= 1) {
+        const candidate = lines[i];
+        if (candidate.includes('service=llm') && /\bERROR\b/.test(candidate) && candidate.includes('error=')) {
+            line = candidate;
+            break;
+        }
+    }
+    if (!line)
+        return null;
+    const statusMatch = /"statusCode":\s*(\d{3})/.exec(line);
+    const statusCode = statusMatch ? Number(statusMatch[1]) : null;
+    const message = pickServiceErrorMessage(line);
+    let code = statusCode != null ? codeFromStatus(statusCode) : null;
+    if (!code && message)
+        code = classifyAgentServiceFailure(message);
+    if (!code)
+        return null;
+    return { code, message: message || defaultMessageForCode(code), statusCode };
+}
+// Convenience for a run-close handler / inactivity watchdog: resolve the
+// log dir from the spawned agent's env, read the newest log tail (bound to
+// the current run via `since`), and classify it.
+export function readOpenCodeServiceFailure(env, options = {}) {
+    const logDir = resolveOpenCodeLogDir(env);
+    if (!logDir)
+        return null;
+    const tail = readLatestOpenCodeLogTail(logDir, options);
+    if (!tail)
+        return null;
+    return extractOpenCodeServiceFailure(tail);
+}
+//# sourceMappingURL=opencode-log.js.map

package/dist/opencode-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-log.js","sourceRoot":"","sources":["../src/opencode-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAgC,MAAM,WAAW,CAAC;AAQtF,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,0CAA0C;AAC1C,MAAM,UAAU,qBAAqB,CAAC,GAAuC;IAC3E,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,0EAA0E;AAC1E,UAAU;AACV,MAAM,UAAU,yBAAyB,CACvC,MAAc,EACd,UAAiD,EAAE;IAEnD,MAAM,EAAE,QAAQ,GAAG,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAChD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,wBAAwB;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK;oBAAE,SAAS;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,2EAA2E;AAC3E,kCAAkC;AAClC,MAAM,wBAAwB,GAC5B,mMAAmM,CAAC;AAEtM,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,EAAE,GAAG,gCAAgC,CAAC;IAC5C,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,oFAAoF;QACpF,oFAAoF;QACpF,wFAAwF;QACxF,wFAAwF;QACxF,0FAA0F;QAC1F,0FAA0F;QAC1F,kGAAkG;QAClG,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,qBAAqB,CAAC;IAC3E,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC9C,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,sBAAsB,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,IAA6B;IAC1D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,qBAAqB;YACxB,OAAO,0DAA0D,CAAC;QACpE,KAAK,cAAc;YACjB,OAAO,8CAA8C,CAAC;QACxD,KAAK,sBAAsB;YACzB,OAAO,uDAAuD,CAAC;IACnE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrG,IAAI,GAAG,SAAS,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,WAAW,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAE9C,IAAI,IAAI,GAAmC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,IAAI,CAAC,IAAI,IAAI,OAAO;QAAE,IAAI,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;AAC/E,CAAC;AAED,yEAAyE;AACzE,2EAA2E;AAC3E,iDAAiD;AACjD,MAAM,UAAU,0BAA0B,CACxC,GAAuC,EACvC,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,3 @@
+export declare function expandConfiguredEnv(configuredEnv: unknown): Record<string, string>;
+export declare function expandHomePath(value: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAUA,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQlF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD"}

package/dist/paths.js

@@ -0,0 +1,29 @@
+/**
+ * @module paths
+ *
+ * Home-relative path expansion for configured env values and file paths.
+ * Ported verbatim from OD's `apps/daemon/src/runtimes/core/paths.ts` — no
+ * product coupling.
+ */
+import path from 'node:path';
+import { homedir } from 'node:os';
+export function expandConfiguredEnv(configuredEnv) {
+    const out = {};
+    if (!configuredEnv || typeof configuredEnv !== 'object')
+        return out;
+    for (const [key, value] of Object.entries(configuredEnv)) {
+        if (typeof value !== 'string')
+            continue;
+        out[key] = expandHomePath(value);
+    }
+    return out;
+}
+export function expandHomePath(value) {
+    if (value === '~')
+        return homedir();
+    if (value.startsWith('~/') || value.startsWith('~\\')) {
+        return path.join(homedir(), value.slice(2));
+    }
+    return value;
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,UAAU,mBAAmB,CAAC,aAAsB;IACxD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/pi-models.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @module pi-models
+ *
+ * Parses `pi --list-models`'s TSV table (read from stderr) into model
+ * options. Ported verbatim (pure string parsing, no transport) from OD's
+ * `apps/daemon/src/pi-rpc.ts#parsePiModels` — the surrounding file is the
+ * ~700-line pi-rpc stdio transport (out of this task's scope, same
+ * reasoning as `acp-model-probe.ts`), but this one function has no
+ * dependency on it.
+ */
+import type { RuntimeModelOption } from './types.js';
+export declare function parsePiModels(stdout: unknown): RuntimeModelOption[] | null;
+//# sourceMappingURL=pi-models.d.ts.map

package/dist/pi-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-models.d.ts","sourceRoot":"","sources":["../src/pi-models.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,kBAAkB,EAAE,GAAG,IAAI,CAmC1E"}

package/dist/pi-models.js

@@ -0,0 +1,36 @@
+export function parsePiModels(stdout) {
+    const lines = String(stdout || '')
+        .split('\n')
+        .map((l) => l.trim())
+        .filter((l) => l.length > 0 && !l.startsWith('#'));
+    if (lines.length === 0)
+        return null;
+    const DEFAULT_MODEL_OPTION = { id: 'default', label: 'Default (CLI config)' };
+    // First line is the header; skip it.
+    const entries = [DEFAULT_MODEL_OPTION];
+    const seen = new Set(['default']);
+    for (let i = 1; i < lines.length; i++) {
+        // The loop bound (`i < lines.length`) guarantees `lines[i]` is always
+        // defined; the non-null assertion documents that runtime invariant
+        // instead of a `noUncheckedIndexedAccess`-driven guard that could never
+        // actually trigger (same treatment as this function's other port,
+        // `agent-protocol/pi-rpc/models.ts` — see source-map.md's "Barrel
+        // merge" section for why two copies of this function exist).
+        const line = lines[i];
+        const parts = line.split(/\s+/);
+        if (parts.length < 2)
+            continue;
+        // `parts.length >= 2` (just checked) guarantees both indices are
+        // defined; same non-null-assertion rationale as above.
+        const provider = parts[0];
+        const modelId = parts[1];
+        // Skip duplicates (some providers list the same model under multiple names).
+        const fullId = `${provider}/${modelId}`;
+        if (seen.has(fullId))
+            continue;
+        seen.add(fullId);
+        entries.push({ id: fullId, label: fullId });
+    }
+    return entries.length > 1 ? entries : null;
+}
+//# sourceMappingURL=pi-models.js.map

package/dist/pi-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-models.js","sourceRoot":"","sources":["../src/pi-models.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,aAAa,CAAC,MAAe;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAErD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,oBAAoB,GAAuB,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAElG,qCAAqC;IACrC,MAAM,OAAO,GAAyB,CAAC,oBAAoB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,sEAAsE;QACtE,mEAAmE;QACnE,wEAAwE;QACxE,kEAAkE;QAClE,kEAAkE;QAClE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,iEAAiE;QACjE,uDAAuD;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC1B,6EAA6E;QAC7E,MAAM,MAAM,GAAG,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/prompt-augmenter.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @module prompt-augmenter
+ *
+ * Port replacing OD's `runtimes/prompt/chat-prompt-inputs.ts` (design-system
+ * selection resolution — `resolveEffectiveDesignSystemSelection`,
+ * `designSystemIdFromPluginSnapshot`, `formatDesignFilesWorkspaceHint`,
+ * Codex image-generation prompt overrides, comment-attachment rendering,
+ * research-command-contract composition — all genuinely OD-product prompt
+ * content) and the workspace-context-kind half of OD's
+ * `runtimes/chat-run-context.ts` (not present on this branch as a separate
+ * file, but the same `'design-system'`-as-a-context-kind concept lives
+ * inline in `chat-prompt-inputs.ts`).
+ *
+ * None of that OD logic is ported — per the task charter, this file defines
+ * only the injection seam. The shape below is r1b §1's proposed
+ * `PromptAugmenter` signature, used as-is (it matched the real source: the
+ * engine composes a base prompt and a generic `RunContextSelection`, then
+ * calls out to the host for product-specific augmentation and an optional
+ * system-prompt overlay).
+ */
+/** A single item in the run's attached/selected workspace context. `kind` is host-defined — the engine treats it as an opaque string. */
+export interface WorkspaceContextItem {
+    id: string;
+    kind: string;
+    label: string;
+}
+export interface RunContextSelection {
+    items: WorkspaceContextItem[];
+}
+export interface PromptAugmenter {
+    /**
+     * Which workspace-context `kind` strings this consumer recognizes (OD:
+     * design-system, design-files, live-artifact, …). The engine itself only
+     * knows generic kinds: file, folder, browser, terminal, project,
+     * local-code.
+     */
+    contextKinds(): readonly string[];
+    /**
+     * Inject product context blocks (design-system selection, skills, brand,
+     * …) into the composed user request. The engine passes the base prompt +
+     * selection; the adapter returns the augmented text.
+     */
+    augmentUserRequest(input: {
+        basePrompt: string;
+        selection: RunContextSelection;
+        agentId: string;
+        hasPriorAssistantTurn: boolean;
+    }): Promise<string> | string;
+    /**
+     * Optional system-prompt overlay. Product-specific discovery /
+     * question-form protocols live here, not in the engine.
+     */
+    systemOverlay?(input: {
+        agentId: string;
+        turnIndex: number;
+    }): string | null;
+}
+/** Passes the base prompt through unchanged and adds no system overlay. */
+export declare const noopPromptAugmenter: PromptAugmenter;
+//# sourceMappingURL=prompt-augmenter.d.ts.map

package/dist/prompt-augmenter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-augmenter.d.ts","sourceRoot":"","sources":["../src/prompt-augmenter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,yIAAyI;AACzI,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,YAAY,IAAI,SAAS,MAAM,EAAE,CAAC;IAClC;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,mBAAmB,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,qBAAqB,EAAE,OAAO,CAAC;KAChC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC7B;;;OAGG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,IAAI,CAAC;CAC9E;AAED,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,EAAE,eAGjC,CAAC"}

package/dist/prompt-augmenter.js

@@ -0,0 +1,26 @@
+/**
+ * @module prompt-augmenter
+ *
+ * Port replacing OD's `runtimes/prompt/chat-prompt-inputs.ts` (design-system
+ * selection resolution — `resolveEffectiveDesignSystemSelection`,
+ * `designSystemIdFromPluginSnapshot`, `formatDesignFilesWorkspaceHint`,
+ * Codex image-generation prompt overrides, comment-attachment rendering,
+ * research-command-contract composition — all genuinely OD-product prompt
+ * content) and the workspace-context-kind half of OD's
+ * `runtimes/chat-run-context.ts` (not present on this branch as a separate
+ * file, but the same `'design-system'`-as-a-context-kind concept lives
+ * inline in `chat-prompt-inputs.ts`).
+ *
+ * None of that OD logic is ported — per the task charter, this file defines
+ * only the injection seam. The shape below is r1b §1's proposed
+ * `PromptAugmenter` signature, used as-is (it matched the real source: the
+ * engine composes a base prompt and a generic `RunContextSelection`, then
+ * calls out to the host for product-specific augmentation and an optional
+ * system-prompt overlay).
+ */
+/** Passes the base prompt through unchanged and adds no system overlay. */
+export const noopPromptAugmenter = {
+    contextKinds: () => ['file', 'folder', 'browser', 'terminal', 'project', 'local-code'],
+    augmentUserRequest: ({ basePrompt }) => basePrompt,
+};
+//# sourceMappingURL=prompt-augmenter.js.map

package/dist/prompt-augmenter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-augmenter.js","sourceRoot":"","sources":["../src/prompt-augmenter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAuCH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;IACtF,kBAAkB,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU;CACnD,CAAC"}

package/dist/prompt-budget.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @module prompt-budget
+ *
+ * Guards against a composed prompt exceeding an adapter's safe argv size
+ * (POSIX per-arg ceilings, and Windows' much tighter CreateProcess
+ * command-line cap, both before and after the specific quote-escaping a
+ * `.cmd`/`.bat` shim vs. a direct `.exe` spawn applies).
+ *
+ * Ported from OD's `apps/daemon/src/runtimes/prompt/prompt-budget.ts` with
+ * the copy stripped per the task charter: the origin's error messages said
+ * "Reduce the selected skills/design-system context…" (OD's own content
+ * catalog). Replaced with the generic "selected context" phrasing so the
+ * message doesn't assume a design-system-shaped host. Mechanics (byte
+ * budgets, Windows quote-doubling math) are unchanged. See `source-map.md`.
+ */
+import type { RuntimeAgentDef, RuntimePromptBudgetError } from './types.js';
+export declare function checkPromptArgvBudget(def: RuntimeAgentDef | null | undefined, composed: unknown, platform?: NodeJS.Platform): RuntimePromptBudgetError | null;
+export declare function checkWindowsCmdShimCommandLineBudget(def: RuntimeAgentDef | null | undefined, resolvedBin: unknown, args: unknown): RuntimePromptBudgetError | null;
+export declare function checkWindowsDirectExeCommandLineBudget(def: RuntimeAgentDef | null | undefined, resolvedBin: unknown, args: unknown): RuntimePromptBudgetError | null;
+//# sourceMappingURL=prompt-budget.d.ts.map

package/dist/prompt-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-budget.d.ts","sourceRoot":"","sources":["../src/prompt-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAiC5E,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EACvC,QAAQ,EAAE,OAAO,EACjB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,wBAAwB,GAAG,IAAI,CAMjC;AA2FD,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EACvC,WAAW,EAAE,OAAO,EACpB,IAAI,EAAE,OAAO,GACZ,wBAAwB,GAAG,IAAI,CAqBjC;AA+CD,wBAAgB,sCAAsC,CACpD,GAAG,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EACvC,WAAW,EAAE,OAAO,EACpB,IAAI,EAAE,OAAO,GACZ,wBAAwB,GAAG,IAAI,CA0BjC"}

package/dist/prompt-budget.js

@@ -0,0 +1,226 @@
+function promptArgvBudgetMessage(def, bytes, limit) {
+    if (def.id === 'deepseek') {
+        return (`${def.name} currently accepts prompts only as a command-line argument, and this run's composed prompt exceeds the safe size (${bytes} > ${limit} bytes). ` +
+            'Reduce the selected context or conversation length, or use DeepSeek through an API/provider model connection for large contexts. Pick a stdin-capable adapter when the prompt must include large local context.');
+    }
+    return (`${def.name} requires the prompt as a command-line argument and this run's composed prompt exceeds the safe size (${bytes} > ${limit} bytes). ` +
+        'Reduce the selected context, shorten the conversation, or pick an adapter with stdin support.');
+}
+// `maxPromptArgBytes` is sized for Windows' ~32 KB CreateProcess
+// command-line limit. On POSIX the per-arg ceiling is far higher — Linux's
+// MAX_ARG_STRLEN is 128 KB and macOS's ARG_MAX is 256 KB (total argv+env)
+// — and the *real* Windows command-line cap is guarded precisely
+// post-buildArgs by checkWindowsCmdShim/DirectExeCommandLineBudget. So
+// applying the conservative Windows byte budget unconditionally on
+// macOS/Linux false-positives on normal-sized prompts with a confusing
+// "prompt too long". On POSIX we keep a much larger guard — headroom
+// under Linux's 128 KB per-arg ceiling — purely so a runaway prompt still
+// fails fast with the actionable message instead of a generic spawn
+// E2BIG.
+const POSIX_ARGV_PROMPT_BUDGET = 100_000;
+function resolveArgvPromptBudget(maxPromptArgBytes, platform) {
+    if (platform === 'win32')
+        return maxPromptArgBytes;
+    return Math.max(maxPromptArgBytes, POSIX_ARGV_PROMPT_BUDGET);
+}
+export function checkPromptArgvBudget(def, composed, platform = process.platform) {
+    if (!def || typeof def.maxPromptArgBytes !== 'number')
+        return null;
+    const bytes = Buffer.byteLength(typeof composed === 'string' ? composed : '', 'utf8');
+    const limit = resolveArgvPromptBudget(def.maxPromptArgBytes, platform);
+    if (bytes <= limit)
+        return null;
+    return { code: 'AGENT_PROMPT_TOO_LARGE', message: promptArgvBudgetMessage(def, bytes, limit), bytes, limit };
+}
+// Mirror of `@jini-ai/platform`'s internal `quoteWindowsCommandArg`, kept
+// local so `checkWindowsCmdShimCommandLineBudget` can run on macOS/Linux
+// against a fake `.cmd` path in tests without forking on `process.platform`.
+// Must stay byte-for-byte identical to the platform copy — the helper's
+// whole point is to compute the exact `cmd.exe /d /s /c "<inner>"` line
+// the spawn path will produce on Windows. The `%` → `"^%"` substitution
+// neutralizes cmd.exe's percent-expansion for prompts that ride argv
+// (DeepSeek TUI today): `%name%` pairs would otherwise be expanded from
+// the host environment before the child reads them, leaking secrets like
+// `%DEEPSEEK_API_KEY%` whenever the prompt mentions an env-var name.
+function quoteForWindowsCmdShim(value) {
+    const str = String(value ?? '');
+    if (!/[\s"&<>|^%]/.test(str))
+        return str;
+    const escaped = str.replace(/"/g, '""').replace(/%/g, '"^%"');
+    return `"${escaped}"`;
+}
+// Mirror of libuv's `quote_cmd_arg` (process-stdio.c), the exact rule Node
+// uses on Windows when it composes a CreateProcess command line for a
+// direct executable spawn (not a `.cmd` / `.bat` shim, which goes through
+// `quoteForWindowsCmdShim` above). Each embedded `"` becomes `\"`, every
+// backslash that ends up adjacent to a quote (or to the closing wrap
+// quote) gets doubled, and an arg with whitespace or a quote is wrapped in
+// outer `"..."`. Kept local so the budget check works on macOS/Linux test
+// hosts against a fake `C:\…\foo.exe` path.
+function quoteForWindowsDirectExe(value) {
+    const str = String(value ?? '');
+    // libuv emits a literal `""` for an empty argv entry so it survives
+    // CommandLineToArgvW round-tripping; mirror that.
+    if (str.length === 0)
+        return '""';
+    // Fast path: no whitespace and no quote — pass through unchanged. This
+    // matches libuv's `wcspbrk(source, L" \t\"")` early return.
+    if (!/[\s"]/.test(str))
+        return str;
+    // No quote, no backslash: simple wrap, no per-char escaping needed.
+    if (!/[\\"]/.test(str))
+        return `"${str}"`;
+    // Slow path: walk the string, counting consecutive backslashes so we
+    // can double them whenever they precede a `"` or the closing wrap
+    // quote. Following the documented Windows convention:
+    //   - 2n  backslashes + `"`  →  emit `\\` × 2n  + `\"`
+    //   - 2n+1 backslashes + `"` →  emit `\\` × (2n+1) + `\"`
+    //   - n backslashes not before `"`  →  emit `\\` × n unchanged
+    //   - trailing backslashes (before the closing wrap quote)  →  doubled
+    let result = '"';
+    let backslashes = 0;
+    for (let i = 0; i < str.length; i++) {
+        const ch = str[i];
+        if (ch === '\\') {
+            backslashes++;
+        }
+        else if (ch === '"') {
+            result += '\\'.repeat(2 * backslashes + 1) + '"';
+            backslashes = 0;
+        }
+        else {
+            result += '\\'.repeat(backslashes) + ch;
+            backslashes = 0;
+        }
+    }
+    result += '\\'.repeat(2 * backslashes) + '"';
+    return result;
+}
+// Windows' CreateProcess caps `lpCommandLine` at 32_767 chars. Going
+// through a `.cmd` / `.bat` shim adds a `cmd.exe /d /s /c "<inner>"`
+// wrapper, and `quoteForWindowsCmdShim` doubles every embedded `"` plus
+// wraps any whitespace/special-char arg in outer quotes — so a prompt
+// well under `maxPromptArgBytes` can still expand past the kernel cap
+// once it's run through the shim. Leave headroom for any per-CLI flag the
+// adapter might tack on at exec time and for cmd.exe's own framing.
+const WINDOWS_CREATE_PROCESS_LIMIT = 32_767;
+const WINDOWS_CREATE_PROCESS_HEADROOM = 256;
+// Post-buildArgs guard for argv-bound adapters whose binary resolves to a
+// Windows `.cmd` / `.bat` shim. Computes the exact command line shape
+// `@jini-ai/platform`'s `createCommandInvocation` hands to `spawn` —
+// `cmd.exe /d /s /c "<quoted command + quoted args>"` — and refuses the
+// run when that line would exceed the CreateProcess limit (less a small
+// headroom). Returns the same `AGENT_PROMPT_TOO_LARGE` shape as
+// `checkPromptArgvBudget` so an error-response path doesn't have to
+// special-case it.
+//
+// No-op when:
+//   - the adapter doesn't declare `maxPromptArgBytes` (stdin adapters
+//     never go through this path);
+//   - the resolved binary isn't a `.cmd` / `.bat` (POSIX hosts and direct
+//     `.exe` resolutions on Windows skip the cmd.exe wrap);
+//   - the assembled line fits comfortably under the kernel cap.
+//
+// Pure: takes `resolvedBin` explicitly so a test on macOS can pass a fake
+// `C:\\…\\deepseek.cmd` path and exercise the same math the daemon would
+// run on Windows.
+export function checkWindowsCmdShimCommandLineBudget(def, resolvedBin, args) {
+    if (!def || typeof def.maxPromptArgBytes !== 'number')
+        return null;
+    if (typeof resolvedBin !== 'string' || !/\.(bat|cmd)$/i.test(resolvedBin))
+        return null;
+    const argList = Array.isArray(args) ? args : [];
+    const inner = [resolvedBin, ...argList].map(quoteForWindowsCmdShim).join(' ');
+    // `cmd.exe /d /s /c "<inner>"` — same shape `@jini-ai/platform`'s
+    // `createCommandInvocation` builds; the leading 'cmd.exe ' + '/d /s /c '
+    // framing plus the two outer quote chars rounds out the full command
+    // line.
+    const commandLineLength = 'cmd.exe /d /s /c '.length + inner.length + 2;
+    const safeLimit = WINDOWS_CREATE_PROCESS_LIMIT - WINDOWS_CREATE_PROCESS_HEADROOM;
+    if (commandLineLength <= safeLimit)
+        return null;
+    return {
+        code: 'AGENT_PROMPT_TOO_LARGE',
+        message: `${def.name} on Windows runs through a .cmd shim and this run's prompt would expand past the CreateProcess command-line limit ` +
+            `after cmd.exe quote-doubling (${commandLineLength} > ${safeLimit} chars). ` +
+            'Reduce quote-heavy content in the selected context, shorten the conversation, or pick an adapter with stdin support.',
+        commandLineLength,
+        limit: safeLimit,
+    };
+}
+// Heuristic: does `resolvedBin` look like a Windows path? Used by the
+// direct-exe guard so a test on a POSIX host can drive a fake
+// `C:\…\foo.exe` path through the same math the daemon would run on
+// Windows, while still skipping POSIX-shaped paths (which never go
+// through CreateProcess).
+//
+// Takes `p: string`, not `unknown`: this function's only real call site
+// (`checkWindowsDirectExeCommandLineBudget`, below) already runs
+// `if (typeof resolvedBin !== 'string' || resolvedBin.length === 0) return
+// null;` before ever calling in, so `p` is always a non-empty string here —
+// a runtime `typeof`/`.length` guard was dead code for the one real caller.
+// Narrowed the parameter type to remove the branch instead of padding a
+// test around unreachable data.
+function looksLikeWindowsPath(p) {
+    // Drive-letter (`C:\…`, `C:/…`) or UNC (`\\server\share\…`).
+    return /^[a-zA-Z]:[\\/]/.test(p) || p.startsWith('\\\\');
+}
+// Companion to `checkWindowsCmdShimCommandLineBudget` for argv-bound
+// adapters whose binary resolves directly to a Windows executable. Node's
+// `createCommandInvocation` does *not* wrap the call in
+// `cmd.exe /d /s /c "<inner>"` for those — but Node/libuv still composes a
+// CreateProcess `lpCommandLine` by walking each argv entry through
+// `quote_cmd_arg`, which doubles backslashes adjacent to quotes and
+// escapes every embedded `"` as `\"`. A quote-heavy prompt that fits under
+// the raw `maxPromptArgBytes` budget can therefore still expand past the
+// kernel's 32_767-char `lpCommandLine` cap on a direct `.exe` spawn,
+// surfacing as a generic `spawn ENAMETOOLONG` instead of the
+// adapter-named `AGENT_PROMPT_TOO_LARGE` the budget guard exists to emit.
+// Returns the same error shape as the cmd-shim guard so an error-response
+// path doesn't have to special-case it.
+//
+// No-op when:
+//   - the adapter doesn't declare `maxPromptArgBytes` (stdin adapters
+//     never go through this path);
+//   - the resolved binary is a `.cmd` / `.bat` shim — that's handled by
+//     `checkWindowsCmdShimCommandLineBudget` so we don't double-emit;
+//   - the resolved binary is not a Windows path (no CreateProcess
+//     command-line shape to budget);
+//   - the assembled command line fits under the safe limit.
+//
+// Pure: takes `resolvedBin` and `args` explicitly so a test on macOS can
+// pass a fake `C:\…\deepseek.exe` and exercise the same math the daemon
+// would run on Windows. The libuv quoting math lives in
+// `quoteForWindowsDirectExe` above.
+export function checkWindowsDirectExeCommandLineBudget(def, resolvedBin, args) {
+    if (!def || typeof def.maxPromptArgBytes !== 'number')
+        return null;
+    if (typeof resolvedBin !== 'string' || resolvedBin.length === 0)
+        return null;
+    // The cmd-shim guard owns `.bat` / `.cmd`; skip those here so a single
+    // oversized prompt doesn't trip both guards.
+    if (/\.(bat|cmd)$/i.test(resolvedBin))
+        return null;
+    // Only fire for Windows-shaped resolved binaries. On POSIX-shaped
+    // paths, `execvp` accepts each argv entry as a separate buffer —
+    // there's no command-line concatenation step that could expand past a
+    // kernel cap, so we have nothing to guard.
+    if (!looksLikeWindowsPath(resolvedBin))
+        return null;
+    const argList = Array.isArray(args) ? args : [];
+    // `[command, ...args].map(quote).join(' ')` is the exact shape libuv
+    // builds before handing it to CreateProcess.
+    const commandLineLength = [resolvedBin, ...argList].map(quoteForWindowsDirectExe).join(' ').length;
+    const safeLimit = WINDOWS_CREATE_PROCESS_LIMIT - WINDOWS_CREATE_PROCESS_HEADROOM;
+    if (commandLineLength <= safeLimit)
+        return null;
+    return {
+        code: 'AGENT_PROMPT_TOO_LARGE',
+        message: `${def.name} on Windows builds a CreateProcess command line and this run's prompt would expand past the limit ` +
+            `after libuv quote-escaping (${commandLineLength} > ${safeLimit} chars). ` +
+            'Reduce quote-heavy content in the selected context, shorten the conversation, or pick an adapter with stdin support.',
+        commandLineLength,
+        limit: safeLimit,
+    };
+}
+//# sourceMappingURL=prompt-budget.js.map

package/dist/prompt-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-budget.js","sourceRoot":"","sources":["../src/prompt-budget.ts"],"names":[],"mappings":"AAiBA,SAAS,uBAAuB,CAAC,GAAoB,EAAE,KAAa,EAAE,KAAa;IACjF,IAAI,GAAG,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,CACL,GAAG,GAAG,CAAC,IAAI,qHAAqH,KAAK,MAAM,KAAK,WAAW;YAC3J,iNAAiN,CAClN,CAAC;IACJ,CAAC;IACD,OAAO,CACL,GAAG,GAAG,CAAC,IAAI,yGAAyG,KAAK,MAAM,KAAK,WAAW;QAC/I,+FAA+F,CAChG,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,2EAA2E;AAC3E,0EAA0E;AAC1E,iEAAiE;AACjE,uEAAuE;AACvE,mEAAmE;AACnE,uEAAuE;AACvE,qEAAqE;AACrE,0EAA0E;AAC1E,oEAAoE;AACpE,SAAS;AACT,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,SAAS,uBAAuB,CAAC,iBAAyB,EAAE,QAAyB;IACnF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAuC,EACvC,QAAiB,EACjB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACvE,IAAI,KAAK,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,uBAAuB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC/G,CAAC;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,6EAA6E;AAC7E,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,qEAAqE;AACrE,wEAAwE;AACxE,yEAAyE;AACzE,qEAAqE;AACrE,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,IAAI,OAAO,GAAG,CAAC;AACxB,CAAC;AAED,2EAA2E;AAC3E,sEAAsE;AACtE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,2EAA2E;AAC3E,0EAA0E;AAC1E,4CAA4C;AAC5C,SAAS,wBAAwB,CAAC,KAAc;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAChC,oEAAoE;IACpE,kDAAkD;IAClD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,oEAAoE;IACpE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,GAAG,CAAC;IAC1C,qEAAqE;IACrE,kEAAkE;IAClE,sDAAsD;IACtD,uDAAuD;IACvD,0DAA0D;IAC1D,+DAA+D;IAC/D,uEAAuE;IACvE,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,WAAW,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;YACjD,WAAW,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YACxC,WAAW,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,0EAA0E;AAC1E,oEAAoE;AACpE,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAE5C,0EAA0E;AAC1E,sEAAsE;AACtE,qEAAqE;AACrE,wEAAwE;AACxE,wEAAwE;AACxE,gEAAgE;AAChE,oEAAoE;AACpE,mBAAmB;AACnB,EAAE;AACF,cAAc;AACd,sEAAsE;AACtE,mCAAmC;AACnC,0EAA0E;AAC1E,4DAA4D;AAC5D,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,kBAAkB;AAClB,MAAM,UAAU,oCAAoC,CAClD,GAAuC,EACvC,WAAoB,EACpB,IAAa;IAEb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9E,kEAAkE;IAClE,yEAAyE;IACzE,qEAAqE;IACrE,QAAQ;IACR,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,4BAA4B,GAAG,+BAA+B,CAAC;IACjF,IAAI,iBAAiB,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EACL,GAAG,GAAG,CAAC,IAAI,oHAAoH;YAC/H,iCAAiC,iBAAiB,MAAM,SAAS,WAAW;YAC5E,sHAAsH;QACxH,iBAAiB;QACjB,KAAK,EAAE,SAAS;KACjB,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,8DAA8D;AAC9D,oEAAoE;AACpE,mEAAmE;AACnE,0BAA0B;AAC1B,EAAE;AACF,wEAAwE;AACxE,iEAAiE;AACjE,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,gCAAgC;AAChC,SAAS,oBAAoB,CAAC,CAAS;IACrC,6DAA6D;IAC7D,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,qEAAqE;AACrE,0EAA0E;AAC1E,wDAAwD;AACxD,2EAA2E;AAC3E,mEAAmE;AACnE,oEAAoE;AACpE,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,6DAA6D;AAC7D,0EAA0E;AAC1E,0EAA0E;AAC1E,wCAAwC;AACxC,EAAE;AACF,cAAc;AACd,sEAAsE;AACtE,mCAAmC;AACnC,wEAAwE;AACxE,sEAAsE;AACtE,kEAAkE;AAClE,qCAAqC;AACrC,4DAA4D;AAC5D,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,wDAAwD;AACxD,oCAAoC;AACpC,MAAM,UAAU,sCAAsC,CACpD,GAAuC,EACvC,WAAoB,EACpB,IAAa;IAEb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,uEAAuE;IACvE,6CAA6C;IAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,kEAAkE;IAClE,iEAAiE;IACjE,sEAAsE;IACtE,2CAA2C;IAC3C,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,qEAAqE;IACrE,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnG,MAAM,SAAS,GAAG,4BAA4B,GAAG,+BAA+B,CAAC;IACjF,IAAI,iBAAiB,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EACL,GAAG,GAAG,CAAC,IAAI,oGAAoG;YAC/G,+BAA+B,iBAAiB,MAAM,SAAS,WAAW;YAC1E,sHAAsH;QACxH,iBAAiB;QACjB,KAAK,EAAE,SAAS;KACjB,CAAC;AACJ,CAAC"}