@jini-ai/agent-runtime 0.1.0

package/dist/auth.js

@@ -0,0 +1,332 @@
+/**
+ * @module auth
+ *
+ * Agent auth/service-failure classification: probing whether an installed
+ * agent CLI is authenticated, and text-based classification of a CLI's raw
+ * error output into auth/rate-limit/upstream failure classes.
+ *
+ * Ported from OD's `apps/daemon/src/runtimes/auth/auth.ts` with one
+ * de-branding change: the five guidance-text functions
+ * (`cursorAuthGuidance`, `deepseekAuthGuidance`, `antigravityAuthGuidance`,
+ * `antigravityQuotaGuidance`, `reasonixAuthGuidance`, `claudeAuthGuidance`)
+ * and `genericAuthGuidance` took an implicit product name baked into nine
+ * literal strings (e.g. "expose CURSOR_API_KEY in the <product>'s process
+ * environment" — see `source-map.md` for the exact original text). Each
+ * now takes an optional `hostName`
+ * parameter (default `'the host application'`) so the guidance text is
+ * product-neutral by default and a consumer can substitute its own name.
+ * `classifyAgentAuthFailure`/`probeAgentAuthStatus` thread `hostName`
+ * through to whichever guidance function they call. See `source-map.md`.
+ */
+import { execAgentFile } from './invocation.js';
+const DEFAULT_HOST_NAME = 'the host application';
+function cursorAuthGuidanceText(hostName) {
+    return `Cursor Agent is not authenticated. Run \`cursor-agent login\`, then \`cursor-agent status\`, and retry. For automation, ensure CURSOR_API_KEY is set in ${hostName}'s process environment.`;
+}
+function deepseekAuthGuidanceText(hostName) {
+    return `DeepSeek TUI is installed but is not authenticated. Add or verify your API key in \`~/.deepseek/config.toml\` as \`api_key = "..."\`, or expose DEEPSEEK_API_KEY to ${hostName}'s daemon process, then retry. If ${hostName} is launched outside an interactive shell, shell rc files such as ~/.zshrc may not be loaded.`;
+}
+// agy's print mode (`-p`) detects a missing OAuth token, prints the
+// Google sign-in URL to stdout, waits 30s for completion, then exits
+// "Error: authentication timed out." That URL points at a callback page
+// that asks the user to paste the resulting auth code BACK into agy —
+// which only works in the interactive TUI. So surfacing the raw URL in a
+// chat UI is a dead end (no input field to paste the code into). Instead
+// we ask the user to run `agy` in a terminal once, which opens the
+// browser, completes OAuth, and writes the credentials to the system
+// keyring — both `-p` and TUI invocations read from there afterward, so
+// the chat run can succeed on retry.
+function antigravityAuthGuidanceText(hostName) {
+    return `Antigravity needs to sign in. The agy CLI's keyring entry has expired or been cleared, and \`-p\` print mode cannot complete OAuth on its own (it has no field to paste the auth code into).\n\nFix: open a terminal and run \`agy\` once — it will open Google sign-in in your browser, accept the redirect, and store the token in your system keyring. After you finish, return here and retry this chat. You only need to do this once; the keyring entry persists across both terminal and ${hostName} runs.`;
+}
+// agy's account-level quota is per-model (consumer accounts get a
+// separate quota for Gemini 3 Pro vs Flash vs Claude vs GPT-OSS), and
+// when exhausted the upstream returns
+//   RESOURCE_EXHAUSTED (code 429): Individual quota reached. Contact
+//   your administrator to enable overages. Resets in <H>h<M>m<S>s.
+// to the `--log-file`. Print mode emits nothing on stdout/stderr, so
+// without log inspection the failure misreads as missing-OAuth.
+function antigravityQuotaGuidanceText() {
+    return 'Antigravity returned "RESOURCE_EXHAUSTED: Individual quota reached" for the current model. Each Antigravity model (Gemini 3 Pro / Flash, Claude 4.6, GPT-OSS) has its own quota.\n\nFix: open `agy` in a terminal and use its Switch Model picker (the menu at the bottom of the TUI) to pick a model with available quota, then retry here. Quotas reset automatically on Antigravity\'s schedule.';
+}
+function reasonixAuthGuidanceText(hostName) {
+    return `DeepSeek Reasonix is installed but is not authenticated. Add your API key in \`~/.reasonix/config.json\` under \`apiKey\`, or expose DEEPSEEK_API_KEY to ${hostName}'s daemon process, then retry. If ${hostName} is launched outside an interactive shell, shell rc files such as ~/.zshrc may not be loaded.`;
+}
+function claudeAuthGuidanceText(hostName) {
+    return `Claude Code is installed but is not authenticated. Run \`claude auth login\` or open \`claude\` and complete login in a terminal, then rescan. If ${hostName} was launched outside an interactive shell, your shell rc files (e.g. ~/.zshrc) may not be loaded into its environment.`;
+}
+export function cursorAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+    return cursorAuthGuidanceText(hostName);
+}
+export function deepseekAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+    return deepseekAuthGuidanceText(hostName);
+}
+export function antigravityAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+    return antigravityAuthGuidanceText(hostName);
+}
+export function antigravityQuotaGuidance() {
+    return antigravityQuotaGuidanceText();
+}
+export function reasonixAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+    return reasonixAuthGuidanceText(hostName);
+}
+export function claudeAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+    return claudeAuthGuidanceText(hostName);
+}
+export function isCursorAuthFailureText(text) {
+    const value = String(text || '');
+    if (!value.trim())
+        return false;
+    return (/authentication required/i.test(value) ||
+        /not authenticated/i.test(value) ||
+        /not logged in/i.test(value) ||
+        /unauthenticated/i.test(value) ||
+        /agent login/i.test(value) ||
+        /cursor_api_key/i.test(value));
+}
+// agy's plain-mode output when no keyring credentials are available:
+//   - Top of stdout: "Authentication required. Please visit the URL to log in: <URL>"
+//   - Tail of stdout: "Waiting for authentication (timeout 30s)..."
+//                      "Error: authentication timed out."
+// The same TUI text is logged by `agy --log-file` as
+//   "You are not logged into Antigravity" and
+//   "error getting token source: You are not logged into Antigravity"
+// Any of these is sufficient signal — match conservatively so the regex
+// doesn't fire on prose containing the word "authentication" by accident.
+export function isAntigravityAuthFailureText(text) {
+    const value = String(text || '');
+    if (!value.trim())
+        return false;
+    return (/authentication required.*please visit/i.test(value) ||
+        /authentication timed out/i.test(value) ||
+        /not logged into antigravity/i.test(value) ||
+        /accounts\.google\.com\/o\/oauth2\/auth.*antigravity/i.test(value));
+}
+export function isDeepSeekAuthFailureText(text) {
+    const value = String(text || '');
+    if (!value.trim())
+        return false;
+    return (/KEY=<your-key>/i.test(value) ||
+        /api_key\s*=\s*["']<your-key>["']/i.test(value) ||
+        (/~\/\.deepseek\/config\.toml/i.test(value) && /api[_ -]?key|KEY=/i.test(value)) ||
+        (/DEEPSEEK_API_KEY/i.test(value) &&
+            /auth|api[_ -]?key|missing|not set|required|unauthorized/i.test(value)));
+}
+export function isReasonixAuthFailureText(text) {
+    const value = String(text || '');
+    if (!value.trim())
+        return false;
+    return ((/~\/\.reasonix\/config\.json/i.test(value) &&
+        /api[_ -]?key|missing|not set|required|unauthorized|invalid/i.test(value)) ||
+        (/DEEPSEEK_API_KEY/i.test(value) &&
+            /auth|missing|not set|required|unauthorized|invalid/i.test(value)));
+}
+export function isClaudeAuthFailureText(text) {
+    const value = String(text || '');
+    if (!value.trim())
+        return false;
+    try {
+        const parsed = JSON.parse(value);
+        if (parsed.authenticated === true || parsed.loggedIn === true)
+            return false;
+        if (parsed.authenticated === false || parsed.loggedIn === false)
+            return true;
+    }
+    catch {
+        // Fall through to text matching below.
+    }
+    if (/"authenticated"\s*:\s*true/i.test(value) || /"loggedIn"\s*:\s*true/i.test(value)) {
+        return false;
+    }
+    return (/"authenticated"\s*:\s*false/i.test(value) ||
+        /"loggedIn"\s*:\s*false/i.test(value) ||
+        /not authenticated/i.test(value) ||
+        /not logged[ _-]?in/i.test(value) ||
+        /authentication required/i.test(value) ||
+        /please (?:sign|log)[ _-]?in/i.test(value));
+}
+export function classifyAgentAuthFailure(agentId, text, hostName = DEFAULT_HOST_NAME) {
+    if (agentId === 'claude') {
+        if (!isClaudeAuthFailureText(text))
+            return null;
+        return { status: 'missing', message: claudeAuthGuidance(hostName) };
+    }
+    if (agentId === 'cursor-agent') {
+        if (!isCursorAuthFailureText(text))
+            return null;
+        return { status: 'missing', message: cursorAuthGuidance(hostName) };
+    }
+    if (agentId === 'deepseek') {
+        if (!isDeepSeekAuthFailureText(text))
+            return null;
+        return { status: 'missing', message: deepseekAuthGuidance(hostName) };
+    }
+    if (agentId === 'antigravity') {
+        if (!isAntigravityAuthFailureText(text))
+            return null;
+        return { status: 'missing', message: antigravityAuthGuidance(hostName) };
+    }
+    if (agentId === 'reasonix') {
+        if (!isReasonixAuthFailureText(text))
+            return null;
+        return { status: 'missing', message: reasonixAuthGuidance(hostName) };
+    }
+    return null;
+}
+// A bare HTTP status number (`500`, `429`, …) is too noisy to trust on its own
+// — agent stderr is full of unrelated numbers (`line 500`, `read 502 bytes`,
+// `took 503ms`, `exit code 401`, `process exited with code 429`). Only treat a
+// status number as a signal when it carries explicit HTTP-status context
+// (`HTTP 500`, `status 429`, `status code 401`, `error code 502`,
+// `server error 503`, or a punctuation-bound `code: 401`). Crucially `code`
+// alone is NOT enough — that would still match process-exit lines like `exit
+// code 401`; it only counts when qualified (status/error/response code) or
+// immediately followed by `:`/`=`/`#`.
+const STATUS_CTX = '(?:' +
+    '\\bhttp(?:[ /]?\\d(?:\\.\\d)?)?\\b' + // HTTP, HTTP/1.1
+    '|\\b(?:status|error|response)(?:[ _-]?code)?\\b' + // status / status code / error code / response code
+    '|\\bcode(?=\\s*[:=#])' + // code: 401 / code=429  (NOT "exit code 401")
+    '|\\b(?:server|http)[ _-]?error\\b' + // server error / http error
+    ')[\\s:=#-]*';
+// Authentication / authorization: a missing, invalid, or expired credential.
+const AGENT_AUTH_FAILURE_RE = new RegExp(`(\\b(unauthor(?:ized|ised)|authenticat(?:e|ed|ion)|invalid[ _-]?(?:api[ _-]?)?key|incorrect api key|x-api-key|not (?:authenticated|logged[ _-]?in)|please (?:sign|log)[ _-]?in|oauth token (?:has )?expired|session expired|credentials? (?:are )?(?:missing|invalid|required))\\b|\\/login\\b|${STATUS_CTX}401\\b)`, 'i');
+// Quota / rate limit / billing balance — the wall a hosted gateway avoids.
+const AGENT_RATE_FAILURE_RE = new RegExp(`(\\b(rate[ _-]?limit|too many requests|quota|insufficient[ _-]?(?:quota|balance|credit|funds)|credit balance is too low|exceeded your current quota|usage limit|session limit|limit reached|billing (?:hard )?limit)\\b|${STATUS_CTX}429\\b)`, 'i');
+// Upstream model/provider problems: overloaded, 5xx, temporarily unavailable.
+const AGENT_UPSTREAM_FAILURE_RE = new RegExp(`(\\b(overloaded(?:_error)?|service (?:is )?(?:temporarily )?unavailable|bad gateway|gateway timeout|internal server error|upstream (?:error|unavailable)|provider (?:error|unavailable)|temporarily unavailable|model is currently overloaded|5xx)\\b|${STATUS_CTX}5\\d\\d\\b|\\b5\\d\\d\\s+(?:bad gateway|service unavailable|internal server error|gateway timeout))`, 'i');
+// Returns the model-service failure class implied by an agent's combined
+// stdout/stderr/error text, or null when the text looks like an ordinary
+// process failure. Auth is checked before rate/upstream so a `401` is never
+// misread as a `5xx`. Pure text match — no agent-specific assumptions — so it
+// applies uniformly to any CLI agent.
+export function classifyAgentServiceFailure(text) {
+    const value = String(text || '');
+    if (!value.trim())
+        return null;
+    if (AGENT_AUTH_FAILURE_RE.test(value))
+        return 'AGENT_AUTH_REQUIRED';
+    if (AGENT_RATE_FAILURE_RE.test(value))
+        return 'RATE_LIMITED';
+    if (AGENT_UPSTREAM_FAILURE_RE.test(value))
+        return 'UPSTREAM_UNAVAILABLE';
+    return null;
+}
+// Tail length matches a smoke-test sink so the diagnostics block stays
+// compact when it folds probe output back into its overrides.
+const PROBE_TAIL_BYTES = 400;
+// Both real call sites (`withProbeTails`, immediately below) already hold a
+// `string` — `probeAgentAuthStatus` normalizes `stdout`/`stderr` to `''` via
+// `typeof stdout === 'string' ? stdout : ''` before either ever reaches here
+// — so a `value: unknown` parameter plus a runtime `typeof` guard was dead
+// code for every real caller. Narrowed to `string` to remove the
+// unreachable branch instead of padding a test around it.
+function tailString(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.length > PROBE_TAIL_BYTES ? trimmed.slice(-PROBE_TAIL_BYTES) : trimmed;
+}
+function withProbeTails(base, stdoutText, stderrText) {
+    const result = { ...base };
+    const stdoutTail = tailString(stdoutText);
+    const stderrTail = tailString(stderrText);
+    if (stdoutTail)
+        result.stdoutTail = stdoutTail;
+    if (stderrTail)
+        result.stderrTail = stderrTail;
+    return result;
+}
+// Default generic sign-in hint for adapters that declare an `authProbe` but
+// ship no tailored guidance (cursor / deepseek / antigravity / reasonix each
+// have their own via `classifyAgentAuthFailure`). Kept agent-agnostic so a
+// newly-onboarded CLI gets an actionable banner the moment it opts into auth
+// probing, without bespoke copy.
+function genericAuthGuidance(agentName, hostName) {
+    return `${agentName} appears to be installed but is not authenticated. Sign in with the CLI in a terminal, then rescan. If ${hostName} was launched outside an interactive shell, your shell rc files (e.g. ~/.zshrc) may not be loaded into its environment.`;
+}
+// Agents that ship a bespoke auth-failure classifier + tailored sign-in hint
+// via `classifyAgentAuthFailure`. For these, a null result is authoritative
+// ("authenticated"); we must NOT second-guess it with the broad generic
+// regex (e.g. cursor-agent's healthy `status` output mentions "login" in
+// ways the generic matcher would misread). The generic classifier is only a
+// fallback for adapters with no tailored classifier of their own.
+const TAILORED_AUTH_AGENTS = new Set(['claude', 'cursor-agent', 'deepseek', 'antigravity', 'reasonix']);
+function hasNonEmptyEnv(env, keys) {
+    return keys.some((key) => {
+        const value = env[key];
+        return typeof value === 'string' && value.trim().length > 0;
+    });
+}
+function hasProbeSatisfyingApiKey(def, env) {
+    if (def.id === 'codex') {
+        return hasNonEmptyEnv(env, ['CODEX_API_KEY', 'OPENAI_API_KEY']);
+    }
+    if (def.id === 'claude') {
+        return hasNonEmptyEnv(env, ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN']);
+    }
+    return false;
+}
+// Classify an auth-probe's combined output into a missing-auth result, or
+// null when the output does not look like an auth failure. Agents with a
+// tailored classifier use only that (null === authenticated); every other
+// adapter that opts into probing falls back to the generic, agent-agnostic
+// HTTP/text classifier so it still gets a usable signal without bespoke
+// regexes.
+function classifyProbedAuthFailure(def, text, hostName) {
+    if (TAILORED_AUTH_AGENTS.has(def.id)) {
+        return classifyAgentAuthFailure(def.id, text, hostName);
+    }
+    if (classifyAgentServiceFailure(text) === 'AGENT_AUTH_REQUIRED') {
+        return { status: 'missing', message: genericAuthGuidance(def.name || def.id, hostName) };
+    }
+    return null;
+}
+// Run an adapter's declared authentication probe (a cheap, side-effect-free
+// status/whoami command) and classify the result. Returns null when the
+// adapter declares no `authProbe` — those agents are never actively probed;
+// their auth status is inferred only from a real chat failure's error text.
+export async function probeAgentAuthStatus(def, resolvedBin, env, hostName = DEFAULT_HOST_NAME) {
+    const probe = def.authProbe;
+    if (!probe)
+        return null;
+    if (hasProbeSatisfyingApiKey(def, env))
+        return { status: 'ok' };
+    try {
+        const { stdout, stderr } = await execAgentFile(resolvedBin, probe.args, {
+            env: env,
+            timeout: probe.timeoutMs ?? 5000,
+            maxBuffer: 1024 * 1024,
+        });
+        const stdoutText = typeof stdout === 'string' ? stdout : '';
+        const stderrText = typeof stderr === 'string' ? stderr : '';
+        const output = `${stdoutText}\n${stderrText}`;
+        const failure = classifyProbedAuthFailure(def, output, hostName);
+        if (failure) {
+            return withProbeTails({ ...failure, exitCode: 0, signal: null }, stdoutText, stderrText);
+        }
+        return { status: 'ok' };
+    }
+    catch (error) {
+        const err = error;
+        const stdoutText = typeof err.stdout === 'string' ? err.stdout : '';
+        const stderrText = typeof err.stderr === 'string' ? err.stderr : '';
+        const output = [err.message, stdoutText, stderrText].join('\n');
+        // util.promisify(execFile) attaches `code` and `signal` to the
+        // rejection error. `code` may be a number (real non-zero exit) or a
+        // Node ErrnoException string ("ENOENT"); only the numeric form is
+        // meaningful as an exit code.
+        const numericExit = typeof err.code === 'number' ? err.code : null;
+        const childSignal = typeof err.signal === 'string' ? err.signal : null;
+        const failure = classifyProbedAuthFailure(def, output, hostName);
+        if (failure) {
+            return withProbeTails({ ...failure, exitCode: numericExit, signal: childSignal }, stdoutText, stderrText);
+        }
+        return withProbeTails({
+            status: 'unknown',
+            message: `${def.name || def.id} authentication status could not be verified with \`${def.id} ${probe.args.join(' ')}\`.`,
+            exitCode: numericExit,
+            signal: childSignal,
+        }, stdoutText, stderrText);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAiBhD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,OAAO,2JAA2J,QAAQ,yBAAyB,CAAC;AACtM,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAChD,OAAO,uKAAuK,QAAQ,qCAAqC,QAAQ,+FAA+F,CAAC;AACrU,CAAC;AAED,oEAAoE;AACpE,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,yEAAyE;AACzE,mEAAmE;AACnE,qEAAqE;AACrE,wEAAwE;AACxE,qCAAqC;AACrC,SAAS,2BAA2B,CAAC,QAAgB;IACnD,OAAO,meAAme,QAAQ,QAAQ,CAAC;AAC7f,CAAC;AAED,kEAAkE;AAClE,sEAAsE;AACtE,sCAAsC;AACtC,qEAAqE;AACrE,mEAAmE;AACnE,qEAAqE;AACrE,gEAAgE;AAChE,SAAS,4BAA4B;IACnC,OAAO,qYAAqY,CAAC;AAC/Y,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAChD,OAAO,4JAA4J,QAAQ,qCAAqC,QAAQ,+FAA+F,CAAC;AAC1T,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,OAAO,qJAAqJ,QAAQ,yHAAyH,CAAC;AAChS,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,iBAAiB;IACrE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,iBAAiB;IACvE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAAmB,iBAAiB;IAC1E,OAAO,2BAA2B,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,4BAA4B,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,iBAAiB;IACvE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,iBAAiB;IACrE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,CACL,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,sFAAsF;AACtF,oEAAoE;AACpE,0DAA0D;AAC1D,qDAAqD;AACrD,8CAA8C;AAC9C,sEAAsE;AACtE,wEAAwE;AACxE,0EAA0E;AAC1E,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,CACL,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,CACL,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/C,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9B,0DAA0D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,CACL,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QACzC,6DAA6D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9B,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAoD,CAAC;QACpF,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IACD,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACrC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QACjC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,IAAY,EACZ,WAAmB,iBAAiB;IAEpC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,kEAAkE;AAClE,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,uCAAuC;AACvC,MAAM,UAAU,GACd,KAAK;IACL,oCAAoC,GAAG,iBAAiB;IACxD,iDAAiD,GAAG,oDAAoD;IACxG,uBAAuB,GAAG,8CAA8C;IACxE,mCAAmC,GAAG,4BAA4B;IAClE,aAAa,CAAC;AAEhB,6EAA6E;AAC7E,MAAM,qBAAqB,GAAG,IAAI,MAAM,CACtC,kSAAkS,UAAU,SAAS,EACrT,GAAG,CACJ,CAAC;AAEF,2EAA2E;AAC3E,MAAM,qBAAqB,GAAG,IAAI,MAAM,CACtC,2NAA2N,UAAU,SAAS,EAC9O,GAAG,CACJ,CAAC;AAEF,8EAA8E;AAC9E,MAAM,yBAAyB,GAAG,IAAI,MAAM,CAC1C,yPAAyP,UAAU,qGAAqG,EACxW,GAAG,CACJ,CAAC;AAEF,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAC5E,8EAA8E;AAC9E,sCAAsC;AACtC,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACpE,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAC7D,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,8DAA8D;AAC9D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,iEAAiE;AACjE,0DAA0D;AAC1D,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,IAA0B,EAAE,UAAkB,EAAE,UAAkB;IACxF,MAAM,MAAM,GAAyB,EAAE,GAAG,IAAI,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,iCAAiC;AACjC,SAAS,mBAAmB,CAAC,SAAiB,EAAE,QAAgB;IAC9D,OAAO,GAAG,SAAS,0GAA0G,QAAQ,yHAAyH,CAAC;AACjQ,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,kEAAkE;AAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAExG,SAAS,cAAc,CAAC,GAAe,EAAE,IAAc;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAgC,EAAE,GAAe;IACjF,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,WAAW;AACX,SAAS,yBAAyB,CAChC,GAAyC,EACzC,IAAY,EACZ,QAAgB;IAEhB,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,wBAAwB,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,qBAAqB,EAAE,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAuD,EACvD,WAAmB,EACnB,GAAe,EACf,WAAmB,iBAAiB;IAEpC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE;YACtE,GAAG,EAAE,GAAwB;YAC7B,OAAO,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAChC,SAAS,EAAE,IAAI,GAAG,IAAI;SACvB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,GAAG,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAKX,CAAC;QACF,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,+DAA+D;QAC/D,oEAAoE;QACpE,kEAAkE;QAClE,8BAA8B;QAC9B,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,cAAc,CACnB;YACE,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,uDAAuD,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;YACxH,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,WAAW;SACpB,EACD,UAAU,EACV,UAAU,CACX,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/capabilities.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @module capabilities
+ *
+ * Per-agent `--help`-probed capability flags, cached by agent id. Ported
+ * verbatim from OD's `apps/daemon/src/runtimes/core/capabilities.ts`.
+ */
+import type { RuntimeCapabilityMap } from './types.js';
+export declare const agentCapabilities: Map<string, RuntimeCapabilityMap>;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,eAAO,MAAM,iBAAiB,mCAA0C,CAAC"}

package/dist/capabilities.js

@@ -0,0 +1,2 @@
+export const agentCapabilities = new Map();
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAgC,CAAC"}

package/dist/claude-stream.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @module claude-stream
+ *
+ * Ported verbatim from OD's `apps/daemon/src/runtimes/stream/claude-stream.ts`
+ * (only the `role-marker-guard` import path changed — it now resolves
+ * within this package instead of two directories up). See `source-map.md`.
+ *
+ * Parses Claude Code's `--output-format stream-json --verbose` JSONL stream
+ * (with or without `--include-partial-messages`) into a small set of
+ * UI-friendly events. With partial messages on, text arrives as
+ * `stream_event` deltas; without it (older builds <1.0.86, or any build
+ * where the flag isn't passed) text arrives only in the final `assistant`
+ * wrapper. We handle both. The UI only needs to know five things:
+ *
+ *   - status        : high-level lifecycle ("initializing", "requesting",
+ *                     "thinking")
+ *   - text_delta    : assistant text chunk (gets fed to the artifact parser)
+ *   - thinking_delta: extended-thinking chunk (shown in a collapsed block)
+ *   - tool_use      : { id, name, input }     (fires when input is complete)
+ *   - tool_result   : { tool_use_id, content, is_error }
+ *   - usage         : aggregated input/output/cache tokens + cost
+ *
+ * Callers give us `onEvent({ type, ...payload })`. We track per-content-block
+ * state to accumulate partial tool_use input JSON and emit a single
+ * `tool_use` event when that block stops.
+ */
+type StreamEvent = Record<string, unknown>;
+type EventSink = (event: StreamEvent) => void;
+interface ClaudeStreamHandlerOptions {
+    suppressHtmlArtifactsAfterFileWrite?: boolean;
+}
+export declare function createClaudeStreamHandler(onEvent: EventSink, options?: ClaudeStreamHandlerOptions): {
+    feed: (chunk: string) => void;
+    flush: () => void;
+};
+export {};
+//# sourceMappingURL=claude-stream.d.ts.map

package/dist/claude-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-stream.d.ts","sourceRoot":"","sources":["../src/claude-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3C,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAmB9C,UAAU,0BAA0B;IAClC,mCAAmC,CAAC,EAAE,OAAO,CAAC;CAC/C;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,EAClB,OAAO,GAAE,0BAA+B;kBA0VnB,MAAM;;EAsR5B"}