@jini-ai/agent-runtime 0.3.10 → 0.4.0

package/dist/auth.js

@@ -11,12 +11,12 @@
  * `antigravityQuotaGuidance`, `reasonixAuthGuidance`, `claudeAuthGuidance`)
  * and `genericAuthGuidance` took an implicit product name baked into nine
  * literal strings (e.g. "expose CURSOR_API_KEY in the <product>'s process
- * environment" — see `source-map.md` for the exact original text). Each
+ * environment" — see `archived provenance ledger` for the exact original text). Each
  * now takes an optional `hostName`
  * parameter (default `'the host application'`) so the guidance text is
  * product-neutral by default and a consumer can substitute its own name.
  * `classifyAgentAuthFailure`/`probeAgentAuthStatus` thread `hostName`
- * through to whichever guidance function they call. See `source-map.md`.
+ * through to whichever guidance function they call. See `archived provenance ledger`.
  */
 import { execAgentFile } from './invocation.js';
 const DEFAULT_HOST_NAME = 'the host application';
@@ -66,28 +66,28 @@ function claudeAuthGuidanceText(hostName) {
 function geminiAuthGuidanceText(hostName) {
     return `Gemini CLI is installed but has no usable sign-in. Google no longer serves Gemini CLI's "Login with Google" for free, Google AI Pro or Ultra accounts. Use a Gemini API key instead: run \`gemini\` in a terminal, type /auth, choose "Use Gemini API key", and make GEMINI_API_KEY available to ${hostName}'s process environment (or configure Vertex AI). Google's replacement for individual accounts is Antigravity (\`agy\`), which you can pick here instead.`;
 }
-export function cursorAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+export function cursorAuthGuidance({}, { hostName = DEFAULT_HOST_NAME } = {}) {
     return cursorAuthGuidanceText(hostName);
 }
-export function deepseekAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+export function deepseekAuthGuidance({}, { hostName = DEFAULT_HOST_NAME } = {}) {
     return deepseekAuthGuidanceText(hostName);
 }
-export function antigravityAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+export function antigravityAuthGuidance({}, { hostName = DEFAULT_HOST_NAME } = {}) {
     return antigravityAuthGuidanceText(hostName);
 }
 export function antigravityQuotaGuidance() {
     return antigravityQuotaGuidanceText();
 }
-export function reasonixAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+export function reasonixAuthGuidance({}, { hostName = DEFAULT_HOST_NAME } = {}) {
     return reasonixAuthGuidanceText(hostName);
 }
-export function claudeAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+export function claudeAuthGuidance({}, { hostName = DEFAULT_HOST_NAME } = {}) {
     return claudeAuthGuidanceText(hostName);
 }
-export function geminiAuthGuidance(hostName = DEFAULT_HOST_NAME) {
+export function geminiAuthGuidance({}, { hostName = DEFAULT_HOST_NAME } = {}) {
     return geminiAuthGuidanceText(hostName);
 }
-export function isCursorAuthFailureText(text) {
+export function isCursorAuthFailureText({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return false;
@@ -107,7 +107,7 @@ export function isCursorAuthFailureText(text) {
 //   "error getting token source: You are not logged into Antigravity"
 // Any of these is sufficient signal — match conservatively so the regex
 // doesn't fire on prose containing the word "authentication" by accident.
-export function isAntigravityAuthFailureText(text) {
+export function isAntigravityAuthFailureText({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return false;
@@ -116,7 +116,7 @@ export function isAntigravityAuthFailureText(text) {
         /not logged into antigravity/i.test(value) ||
         /accounts\.google\.com\/o\/oauth2\/auth.*antigravity/i.test(value));
 }
-export function isDeepSeekAuthFailureText(text) {
+export function isDeepSeekAuthFailureText({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return false;
@@ -126,7 +126,7 @@ export function isDeepSeekAuthFailureText(text) {
         (/DEEPSEEK_API_KEY/i.test(value) &&
             /auth|api[_ -]?key|missing|not set|required|unauthorized/i.test(value)));
 }
-export function isReasonixAuthFailureText(text) {
+export function isReasonixAuthFailureText({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return false;
@@ -135,7 +135,7 @@ export function isReasonixAuthFailureText(text) {
         (/DEEPSEEK_API_KEY/i.test(value) &&
             /auth|missing|not set|required|unauthorized|invalid/i.test(value)));
 }
-export function isClaudeAuthFailureText(text) {
+export function isClaudeAuthFailureText({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return false;
@@ -159,7 +159,7 @@ export function isClaudeAuthFailureText(text) {
         /authentication required/i.test(value) ||
         /please (?:sign|log)[ _-]?in/i.test(value));
 }
-export function isGeminiAuthFailureText(text) {
+export function isGeminiAuthFailureText({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return false;
@@ -169,36 +169,36 @@ export function isGeminiAuthFailureText(text) {
         /error authenticating/i.test(value) ||
         /api key not valid/i.test(value));
 }
-export function classifyAgentAuthFailure(agentId, text, hostName = DEFAULT_HOST_NAME) {
+export function classifyAgentAuthFailure({ agentId, text }, { hostName = DEFAULT_HOST_NAME } = {}) {
     if (agentId === 'claude') {
-        if (!isClaudeAuthFailureText(text))
+        if (!isClaudeAuthFailureText({ text: text }))
             return null;
-        return { status: 'missing', message: claudeAuthGuidance(hostName) };
+        return { status: 'missing', message: claudeAuthGuidance({}, { hostName: hostName }) };
     }
     if (agentId === 'cursor-agent') {
-        if (!isCursorAuthFailureText(text))
+        if (!isCursorAuthFailureText({ text: text }))
             return null;
-        return { status: 'missing', message: cursorAuthGuidance(hostName) };
+        return { status: 'missing', message: cursorAuthGuidance({}, { hostName: hostName }) };
     }
     if (agentId === 'deepseek') {
-        if (!isDeepSeekAuthFailureText(text))
+        if (!isDeepSeekAuthFailureText({ text: text }))
             return null;
-        return { status: 'missing', message: deepseekAuthGuidance(hostName) };
+        return { status: 'missing', message: deepseekAuthGuidance({}, { hostName: hostName }) };
     }
     if (agentId === 'antigravity') {
-        if (!isAntigravityAuthFailureText(text))
+        if (!isAntigravityAuthFailureText({ text: text }))
             return null;
-        return { status: 'missing', message: antigravityAuthGuidance(hostName) };
+        return { status: 'missing', message: antigravityAuthGuidance({}, { hostName: hostName }) };
     }
     if (agentId === 'reasonix') {
-        if (!isReasonixAuthFailureText(text))
+        if (!isReasonixAuthFailureText({ text: text }))
             return null;
-        return { status: 'missing', message: reasonixAuthGuidance(hostName) };
+        return { status: 'missing', message: reasonixAuthGuidance({}, { hostName: hostName }) };
     }
     if (agentId === 'gemini') {
-        if (!isGeminiAuthFailureText(text))
+        if (!isGeminiAuthFailureText({ text: text }))
             return null;
-        return { status: 'missing', message: geminiAuthGuidance(hostName) };
+        return { status: 'missing', message: geminiAuthGuidance({}, { hostName: hostName }) };
     }
     return null;
 }
@@ -228,7 +228,7 @@ const AGENT_UPSTREAM_FAILURE_RE = new RegExp(`(\\b(overloaded(?:_error)?|service
 // process failure. Auth is checked before rate/upstream so a `401` is never
 // misread as a `5xx`. Pure text match — no agent-specific assumptions — so it
 // applies uniformly to any CLI agent.
-export function classifyAgentServiceFailure(text) {
+export function classifyAgentServiceFailure({ text }) {
     const value = String(text || '');
     if (!value.trim())
         return null;
@@ -303,9 +303,9 @@ function hasProbeSatisfyingApiKey(def, env) {
 // regexes.
 function classifyProbedAuthFailure(def, text, hostName) {
     if (TAILORED_AUTH_AGENTS.has(def.id)) {
-        return classifyAgentAuthFailure(def.id, text, hostName);
+        return classifyAgentAuthFailure({ agentId: def.id, text: text }, { hostName: hostName });
     }
-    if (classifyAgentServiceFailure(text) === 'AGENT_AUTH_REQUIRED') {
+    if (classifyAgentServiceFailure({ text: text }) === 'AGENT_AUTH_REQUIRED') {
         return { status: 'missing', message: genericAuthGuidance(def.name || def.id, hostName) };
     }
     return null;
@@ -314,18 +314,18 @@ function classifyProbedAuthFailure(def, text, hostName) {
 // status/whoami command) and classify the result. Returns null when the
 // adapter declares no `authProbe` — those agents are never actively probed;
 // their auth status is inferred only from a real chat failure's error text.
-export async function probeAgentAuthStatus(def, resolvedBin, env, hostName = DEFAULT_HOST_NAME) {
+export async function probeAgentAuthStatus({ def, resolvedBin, env }, { hostName = DEFAULT_HOST_NAME } = {}) {
     const probe = def.authProbe;
     if (!probe)
         return null;
     if (hasProbeSatisfyingApiKey(def, env))
         return { status: 'ok' };
     try {
-        const { stdout, stderr } = await execAgentFile(resolvedBin, probe.args, {
-            env: env,
-            timeout: probe.timeoutMs ?? 5000,
-            maxBuffer: 1024 * 1024,
-        });
+        const { stdout, stderr } = await execAgentFile({ command: resolvedBin, args: probe.args }, { options: {
+                env: env,
+                timeout: probe.timeoutMs ?? 5000,
+                maxBuffer: 1024 * 1024,
+            } });
         const stdoutText = typeof stdout === 'string' ? stdout : '';
         const stderrText = typeof stderr === 'string' ? stderr : '';
         const output = `${stdoutText}\n${stderrText}`;

package/dist/claude-code-models.js

@@ -126,7 +126,7 @@ function initializeEntryRows(entry) {
         if (typeof raw !== 'string')
             continue;
         const id = normalizeClaudePickerModelId(raw);
-        if (id === 'default' || sanitizeCustomModel(id) !== id)
+        if (id === 'default' || sanitizeCustomModel({ id: id }) !== id)
             continue;
         const isAlias = !id.startsWith('claude-');
         rows.push({ id, label: isAlias && displayName ? `${displayName} (alias)` : id });
@@ -221,7 +221,7 @@ async function discoverClaudeCodeModels(bin, env) {
         if (!cached?.ok)
             return null;
         return cached.ids
-            .filter((id) => sanitizeCustomModel(id) === id)
+            .filter((id) => sanitizeCustomModel({ id: id }) === id)
             .map((id) => ({ id, label: id }));
     }
     catch {

package/dist/claude-stream.d.ts

@@ -3,7 +3,7 @@
  *
  * Ported verbatim from OD's `apps/daemon/src/runtimes/claude-stream.ts`
  * (only the `role-marker-guard` import path changed — it now resolves
- * within this package instead of two directories up). See `source-map.md`.
+ * within this package instead of two directories up). See `archived provenance ledger`.
  *
  * Parses Claude Code's `--output-format stream-json --verbose` JSONL stream
  * (with or without `--include-partial-messages`) into a small set of
@@ -57,6 +57,8 @@ export type ClaudeStreamEvent = {
     model?: unknown;
     sessionId?: unknown;
     ttftMs?: number;
+    /** Init frames only: each MCP server's connection state as the CLI reported it (see {@link initMcpServers}). */
+    mcpServers?: McpServerStatus[];
 } | {
     type: 'text_delta' | 'thinking_delta';
     delta: string;
@@ -139,6 +141,19 @@ export declare function isUnstreamedTextBlock(block: Record<string, unknown>, al
 export declare function isUnstreamedThinkingBlock(block: Record<string, unknown>, alreadyStreamed: boolean): block is Record<string, unknown> & {
     thinking: string;
 };
+/** One MCP server's state from an init frame's `mcp_servers`, e.g. `{ name: 'jini', status: 'failed' }`. */
+export interface McpServerStatus {
+    readonly name: string;
+    readonly status: string;
+}
+/**
+ * The init frame's `mcp_servers`, reduced to `{name, status}`, or `undefined` when the frame has no
+ * such list. Kept on the event so a host can tell "its bridge did not connect" from "no bridge was
+ * configured": Claude Code times a dead MCP server out, reports it `failed` here, and carries on
+ * without its tools (the 2026-10-01 desktop incident). Entries without a string name and status are
+ * dropped rather than guessed at.
+ */
+export declare function initMcpServers(obj: Record<string, unknown>): McpServerStatus[] | undefined;
 export declare function handleSystemMessage(obj: Record<string, unknown>, onEvent: EventSink): void;
 export declare function stringifyToolResult(content: unknown): string;
 export declare function handleUserMessage(obj: Record<string, unknown>, onEvent: EventSink): void;
@@ -147,8 +162,12 @@ export declare function emitAssistantErrorIfPresent(obj: Record<string, unknown>
 interface ClaudeStreamHandlerOptions {
     suppressHtmlArtifactsAfterFileWrite?: boolean;
 }
-export declare function createClaudeStreamHandler(onEvent: EventSink, options?: ClaudeStreamHandlerOptions): {
-    feed: (chunk: string) => void;
+export declare function createClaudeStreamHandler({ onEvent }: {
+    onEvent: EventSink;
+}, options?: ClaudeStreamHandlerOptions): {
+    feed: ({ chunk }: {
+        chunk: string;
+    }) => void;
     flush: () => void;
 };
 export {};

package/dist/claude-stream.js

@@ -3,7 +3,7 @@
  *
  * Ported verbatim from OD's `apps/daemon/src/runtimes/claude-stream.ts`
  * (only the `role-marker-guard` import path changed — it now resolves
- * within this package instead of two directories up). See `source-map.md`.
+ * within this package instead of two directories up). See `archived provenance ledger`.
  *
  * Parses Claude Code's `--output-format stream-json --verbose` JSONL stream
  * (with or without `--include-partial-messages`) into a small set of
@@ -86,7 +86,7 @@ function nextGeneratedRuntimeTaskId(counter) {
     // increases, it can never equal an id already present in the map at
     // this point. Removed per the coverage skill's Phase 6.5 "dead
     // branch" classification rather than fake a test for an unreachable
-    // loop; see source-map.md.
+    // loop; see archived provenance ledger.
     const id = String(counter.next);
     counter.next += 1;
     return id;
@@ -161,7 +161,7 @@ export function emitCanonicalTaskSnapshot(toolUseId, name, input, registry, onEv
     // reaching here (so the "changed" flag those returns guarded was
     // always true here). Removed the dead double-guard per the coverage
     // skill's Phase 6.5 "dead branch" classification rather than fake a
-    // test for an unreachable condition; see source-map.md.
+    // test for an unreachable condition; see archived provenance ledger.
     registry.seenToolUseIds.add(toolUseId);
     onEvent({
         type: 'tool_use',
@@ -197,7 +197,7 @@ export function isFileWriteToolUse(name, input) {
 // already made. Removed the runtime early-return per the coverage
 // skill's Phase 6.5 "dead branch" classification rather than fake a
 // test with a non-record `input` neither function can ever actually
-// receive (see source-map.md), replaced by a one-line type assertion
+// receive (see archived provenance ledger), replaced by a one-line type assertion
 // (classification 4: TS-required, no real runtime path) so the
 // parameter can stay `unknown` without disturbing the call sites.
 export function fileWriteContent(input) {
@@ -260,13 +260,29 @@ export function isUnstreamedTextBlock(block, alreadyStreamed) {
 export function isUnstreamedThinkingBlock(block, alreadyStreamed) {
     return (!alreadyStreamed && block.type === 'thinking' && typeof block.thinking === 'string' && block.thinking.length > 0);
 }
+/**
+ * The init frame's `mcp_servers`, reduced to `{name, status}`, or `undefined` when the frame has no
+ * such list. Kept on the event so a host can tell "its bridge did not connect" from "no bridge was
+ * configured": Claude Code times a dead MCP server out, reports it `failed` here, and carries on
+ * without its tools (the 2026-10-01 desktop incident). Entries without a string name and status are
+ * dropped rather than guessed at.
+ */
+export function initMcpServers(obj) {
+    if (!Array.isArray(obj.mcp_servers))
+        return undefined;
+    return obj.mcp_servers.flatMap((server) => isRecord(server) && typeof server.name === 'string' && typeof server.status === 'string'
+        ? [{ name: server.name, status: server.status }]
+        : []);
+}
 export function handleSystemMessage(obj, onEvent) {
     if (obj.subtype === 'init') {
+        const mcpServers = initMcpServers(obj);
         onEvent({
             type: 'status',
             label: 'initializing',
             model: obj.model ?? null,
             sessionId: obj.session_id ?? null,
+            ...(mcpServers !== undefined ? { mcpServers } : {}),
         });
         return;
     }
@@ -324,7 +340,7 @@ export function emitAssistantErrorIfPresent(obj, content, onEvent) {
         code: obj.error,
     });
 }
-export function createClaudeStreamHandler(onEvent, options = {}) {
+export function createClaudeStreamHandler({ onEvent }, options = {}) {
     let buffer = '';
     // Per-content-block scratch, keyed by `${messageId}:${blockIndex}`.
     const blocks = new Map();
@@ -431,7 +447,7 @@ export function createClaudeStreamHandler(onEvent, options = {}) {
     function getOrCreateRoleGuard(msgId) {
         let guard = roleGuards.get(msgId);
         if (!guard) {
-            guard = createRoleMarkerGuard(msgId);
+            guard = createRoleMarkerGuard({ messageId: msgId });
             roleGuards.set(msgId, guard);
         }
         return guard;
@@ -449,7 +465,7 @@ export function createClaudeStreamHandler(onEvent, options = {}) {
         const guard = getOrCreateRoleGuard(msgId);
         if (guard.contaminated)
             return;
-        const safe = guard.feedText(text);
+        const safe = guard.feedText({ text: text });
         if (safe.length > 0) {
             onEvent({ type: eventType, delta: safe });
         }
@@ -523,7 +539,7 @@ export function createClaudeStreamHandler(onEvent, options = {}) {
         }
         return startDuplicateArtifactCandidate(current, openIndex);
     }
-    function feed(chunk) {
+    function feed({ chunk }) {
         buffer += chunk;
         let nl;
         while ((nl = buffer.indexOf('\n')) !== -1) {

package/dist/copilot-stream.d.ts

@@ -4,7 +4,7 @@
  * Ported verbatim from OD's top-level `apps/daemon/src/copilot-stream.ts`
  * (relocated under `runtimes/` in Jini's daemon per r1's recon; grouped
  * with the other stream parsers here). Self-contained — no imports, no
- * product coupling. See `source-map.md`.
+ * product coupling. See `archived provenance ledger`.
  *
  * Parses GitHub Copilot CLI's `--output-format json` JSONL stream into the
  * same UI-friendly events that claude-stream.js emits, so the chat panel
@@ -58,8 +58,12 @@ export type CopilotStreamEvent = {
     durationMs: unknown;
 };
 type EventSink = (event: CopilotStreamEvent) => void;
-export declare function createCopilotStreamHandler(onEvent: EventSink): {
-    feed: (chunk: string) => void;
+export declare function createCopilotStreamHandler({ onEvent }: {
+    onEvent: EventSink;
+}): {
+    feed: ({ chunk }: {
+        chunk: string;
+    }) => void;
     flush: () => void;
 };
 export {};

package/dist/copilot-stream.js

@@ -4,7 +4,7 @@
  * Ported verbatim from OD's top-level `apps/daemon/src/copilot-stream.ts`
  * (relocated under `runtimes/` in Jini's daemon per r1's recon; grouped
  * with the other stream parsers here). Self-contained — no imports, no
- * product coupling. See `source-map.md`.
+ * product coupling. See `archived provenance ledger`.
  *
  * Parses GitHub Copilot CLI's `--output-format json` JSONL stream into the
  * same UI-friendly events that claude-stream.js emits, so the chat panel
@@ -30,9 +30,9 @@
 function isRecord(value) {
     return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
 }
-export function createCopilotStreamHandler(onEvent) {
+export function createCopilotStreamHandler({ onEvent }) {
     let buffer = '';
-    function feed(chunk) {
+    function feed({ chunk }) {
         buffer += chunk;
         let nl;
         while ((nl = buffer.indexOf('\n')) !== -1) {

package/dist/defs/aider.d.ts

@@ -5,7 +5,14 @@ export declare const aiderAgentDef: {
     versionArgs: string[];
     fallbackModels: import("../types.js").RuntimeModelOption[];
     fallbackModelsAssertedAt: string;
-    buildArgs: (prompt: string, _imagePaths: string[], _extra: string[] | undefined, options?: import("../types.js").RuntimeBuildOptions | undefined) => string[];
+    buildArgs: ({ prompt, imagePaths: _imagePaths }: {
+        prompt: string;
+        imagePaths: string[];
+    }, { extraAllowedDirs: _extra, options }?: {
+        extraAllowedDirs?: string[];
+        options?: import("../types.js").RuntimeBuildOptions;
+        runtimeContext?: import("../types.js").RuntimeContext;
+    } | undefined) => string[];
     maxPromptArgBytes: number;
     streamFormat: string;
     installUrl: string;

package/dist/defs/aider.js

@@ -1,4 +1,4 @@
-/** Ported from OD's `apps/daemon/src/runtimes/defs/aider.ts` (one de-branded comment; see `source-map.md`). */
+/** Ported from OD's `apps/daemon/src/runtimes/defs/aider.ts` (one de-branded comment; see `archived provenance ledger`). */
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 export const aiderAgentDef = {
     id: 'aider',
@@ -49,7 +49,7 @@ export const aiderAgentDef = {
     //   --no-show-model-warnings           — suppresses model-compat banners
     //                                        that would otherwise prefix every
     //                                        run with noise
-    buildArgs: (prompt, _imagePaths, _extra, options = {}) => {
+    buildArgs: ({ prompt, imagePaths: _imagePaths }, { extraAllowedDirs: _extra, options = {} } = {}) => {
         const args = [
             // See `RuntimeBuildOptions.permissionMode`'s doc: bypass is the default (unchanged
             // behavior) unless a caller explicitly opts into a restricted run. Without

package/dist/defs/amp.d.ts

@@ -5,7 +5,14 @@ export declare const ampAgentDef: {
     versionArgs: string[];
     fallbackModels: import("../types.js").RuntimeModelOption[];
     supportsCustomModel: false;
-    buildArgs: (_prompt: string, _imagePaths: string[], _extraAllowedDirs?: string[] | undefined, options?: import("../types.js").RuntimeBuildOptions | undefined) => string[];
+    buildArgs: ({ prompt: _prompt, imagePaths: _imagePaths }: {
+        prompt: string;
+        imagePaths: string[];
+    }, { extraAllowedDirs: _extraAllowedDirs, options }?: {
+        extraAllowedDirs?: string[];
+        options?: import("../types.js").RuntimeBuildOptions;
+        runtimeContext?: import("../types.js").RuntimeContext;
+    } | undefined) => string[];
     promptViaStdin: true;
     streamFormat: string;
 };

package/dist/defs/amp.js

@@ -1,4 +1,4 @@
-/** Ported verbatim from OD's `apps/daemon/src/runtimes/defs/amp.ts` (import path adjusted only). See `source-map.md`. */
+/** Ported verbatim from OD's `apps/daemon/src/runtimes/defs/amp.ts` (import path adjusted only). See `archived provenance ledger`. */
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 // Amp CLI (https://ampcode.com) is a full agentic coding CLI, argv-shaped
 // much like Claude Code: it has a headless execute mode and emits a
@@ -43,7 +43,7 @@ export const ampAgentDef = {
         { id: 'rush', label: 'Rush (mode)' },
     ],
     supportsCustomModel: false,
-    buildArgs: (_prompt, _imagePaths, _extraAllowedDirs = [], options = {}) => {
+    buildArgs: ({ prompt: _prompt, imagePaths: _imagePaths }, { extraAllowedDirs: _extraAllowedDirs = [], options = {} } = {}) => {
         // See `RuntimeBuildOptions.permissionMode`'s doc: bypass is the default (unchanged
         // behavior) unless a caller explicitly opts into a restricted run, in which case Amp
         // blocks on tool calls that would need approval rather than auto-running them.

package/dist/defs/amr.d.ts

@@ -1,10 +1,23 @@
 import type { RuntimeModelOption } from '../types.js';
 export type VelaModelJsonSource = 'preset' | 'remote';
-export declare function normalizeVelaModelId(rawId: string): string | null;
-export declare function parseVelaModels(stdout: string): RuntimeModelOption[];
-export declare function parseVelaModelJson(stdout: string, expectedSource: VelaModelJsonSource): RuntimeModelOption[];
-export declare function fetchVelaPresetModels(resolvedBin: string, env: NodeJS.ProcessEnv): Promise<RuntimeModelOption[]>;
-export declare function fetchVelaRemoteModelsWithRetry(resolvedBin: string, env: NodeJS.ProcessEnv): Promise<RuntimeModelOption[]>;
+export declare function normalizeVelaModelId({ rawId }: {
+    rawId: string;
+}): string | null;
+export declare function parseVelaModels({ stdout }: {
+    stdout: string;
+}): RuntimeModelOption[];
+export declare function parseVelaModelJson({ stdout, expectedSource }: {
+    stdout: string;
+    expectedSource: VelaModelJsonSource;
+}): RuntimeModelOption[];
+export declare function fetchVelaPresetModels({ resolvedBin, env }: {
+    resolvedBin: string;
+    env: NodeJS.ProcessEnv;
+}): Promise<RuntimeModelOption[]>;
+export declare function fetchVelaRemoteModelsWithRetry({ resolvedBin, env }: {
+    resolvedBin: string;
+    env: NodeJS.ProcessEnv;
+}): Promise<RuntimeModelOption[]>;
 /** Live account fields parsed from `vela billing summary --format json`. */
 export interface VelaBillingSummary {
     /** Real subscription tier (e.g. "max"); absent for free accounts. */
@@ -18,7 +31,10 @@ export interface VelaBillingSummary {
  * contract rather than a separate HTTP call. Returns total available balance
  * and the real membership tier.
  */
-export declare function fetchVelaBillingSummary(resolvedBin: string, env: NodeJS.ProcessEnv): Promise<VelaBillingSummary>;
+export declare function fetchVelaBillingSummary({ resolvedBin, env }: {
+    resolvedBin: string;
+    env: NodeJS.ProcessEnv;
+}): Promise<VelaBillingSummary>;
 export declare const amrAgentDef: {
     id: string;
     name: string;

package/dist/defs/amr.js

@@ -1,4 +1,4 @@
-/** Ported from OD's `apps/daemon/src/runtimes/defs/amr.ts` (two de-branded comments; see `source-map.md`). */
+/** Ported from OD's `apps/daemon/src/runtimes/defs/amr.ts` (two de-branded comments; see `archived provenance ledger`). */
 import { execAgentFile } from './shared.js';
 const AMR_MODELS_TIMEOUT_MS = 10_000;
 const AMR_MODELS_RETRY_DELAYS_MS = [250, 750];
@@ -11,7 +11,7 @@ const PREFERRED_AMR_CHAT_MODEL_ORDER = [
 const PREFERRED_AMR_CHAT_MODEL_RANK = new Map(PREFERRED_AMR_CHAT_MODEL_ORDER.map((id, index) => [id, index]));
 // AMR is the vela CLI's ACP stdio mode. `vela agent run --runtime opencode`
 // starts a private OpenCode server and forwards stream-json over ACP JSON-RPC.
-// Required env (set on the daemon process or via Settings → CLI env):
+// Required env (supplied by the host process environment):
 //   VELA_RUNTIME_KEY  — OpenRouter (or compatible) API key
 //   VELA_LINK_URL     — OpenAI-compatible endpoint, e.g. https://openrouter.ai/api/v1
 //   VELA_OPENCODE_BIN — optional; absolute path to opencode when not on PATH
@@ -30,7 +30,7 @@ const PREFERRED_AMR_CHAT_MODEL_RANK = new Map(PREFERRED_AMR_CHAT_MODEL_ORDER.map
 //      the link-facing slug (`deepseek-v3.2` / `glm-5.1`), so this adapter
 //      normalizes those public ids at the spawn boundary until Vela exposes
 //      canonical ACP ids directly.
-export function normalizeVelaModelId(rawId) {
+export function normalizeVelaModelId({ rawId }) {
     const trimmed = rawId.trim();
     if (!trimmed)
         return null;
@@ -108,7 +108,7 @@ function isVelaChatModelId(modelId) {
         return false;
     return true;
 }
-export function parseVelaModels(stdout) {
+export function parseVelaModels({ stdout }) {
     const seen = new Set();
     const models = [];
     for (const line of String(stdout || '').split('\n')) {
@@ -118,7 +118,7 @@ export function parseVelaModels(stdout) {
         // `trimmed` is already non-empty and has no leading whitespace (checked
         // above), so its first whitespace-split token is always non-empty too.
         const rawId = trimmed.split(/\s+/)[0];
-        const id = normalizeVelaModelId(rawId);
+        const id = normalizeVelaModelId({ rawId: rawId });
         if (!id || seen.has(id) || !isVelaChatModelId(id))
             continue;
         seen.add(id);
@@ -126,7 +126,7 @@ export function parseVelaModels(stdout) {
     }
     return orderAmrChatModels(models);
 }
-export function parseVelaModelJson(stdout, expectedSource) {
+export function parseVelaModelJson({ stdout, expectedSource }) {
     let parsed;
     try {
         parsed = JSON.parse(stdout);
@@ -193,15 +193,15 @@ function isRetriableVelaModelsError(error) {
         '504',
     ].some((pattern) => message.includes(pattern));
 }
-export async function fetchVelaPresetModels(resolvedBin, env) {
-    const { stdout } = await execAgentFile(resolvedBin, ['model', 'preset', '--format', 'json'], {
-        env,
-        timeout: AMR_MODELS_TIMEOUT_MS,
-        maxBuffer: 1024 * 1024,
-    });
-    return parseVelaModelJson(String(stdout), 'preset');
+export async function fetchVelaPresetModels({ resolvedBin, env }) {
+    const { stdout } = await execAgentFile({ command: resolvedBin, args: ['model', 'preset', '--format', 'json'] }, { options: {
+            env,
+            timeout: AMR_MODELS_TIMEOUT_MS,
+            maxBuffer: 1024 * 1024,
+        } });
+    return parseVelaModelJson({ stdout: String(stdout), expectedSource: 'preset' });
 }
-export async function fetchVelaRemoteModelsWithRetry(resolvedBin, env) {
+export async function fetchVelaRemoteModelsWithRetry({ resolvedBin, env }) {
     // The internal exhaustion check below (`attempt === AMR_MODELS_RETRY_DELAYS_MS.length`)
     // always throws on the last allowed attempt — strictly before the `for`
     // condition itself would ever end the loop — so there's no way to fall
@@ -222,16 +222,16 @@ export async function fetchVelaRemoteModelsWithRetry(resolvedBin, env) {
     // below) can never execute — v8/istanbul still instruments it because
     // it can't prove an arbitrary `for(;;)` terminates, but the real control
     // flow genuinely never reaches it. Documented here (and in
-    // `source-map.md`'s 2026-07-22 entry) instead of forced via a test,
+    // `archived provenance ledger`'s 2026-07-22 entry) instead of forced via a test,
     // per this repo's no-`/* v8 ignore */` standard.
     for (let attempt = 0;; attempt += 1) {
         try {
-            const { stdout } = await execAgentFile(resolvedBin, ['model', 'list', '--format', 'json'], {
-                env,
-                timeout: AMR_MODELS_TIMEOUT_MS,
-                maxBuffer: 1024 * 1024,
-            });
-            return parseVelaModelJson(String(stdout), 'remote');
+            const { stdout } = await execAgentFile({ command: resolvedBin, args: ['model', 'list', '--format', 'json'] }, { options: {
+                    env,
+                    timeout: AMR_MODELS_TIMEOUT_MS,
+                    maxBuffer: 1024 * 1024,
+                } });
+            return parseVelaModelJson({ stdout: String(stdout), expectedSource: 'remote' });
         }
         catch (error) {
             if (attempt === AMR_MODELS_RETRY_DELAYS_MS.length ||
@@ -248,8 +248,8 @@ export async function fetchVelaRemoteModelsWithRetry(resolvedBin, env) {
  * contract rather than a separate HTTP call. Returns total available balance
  * and the real membership tier.
  */
-export async function fetchVelaBillingSummary(resolvedBin, env) {
-    const { stdout } = await execAgentFile(resolvedBin, ['billing', 'summary', '--format', 'json'], { env, timeout: AMR_MODELS_TIMEOUT_MS, maxBuffer: 1024 * 1024 });
+export async function fetchVelaBillingSummary({ resolvedBin, env }) {
+    const { stdout } = await execAgentFile({ command: resolvedBin, args: ['billing', 'summary', '--format', 'json'] }, { options: { env, timeout: AMR_MODELS_TIMEOUT_MS, maxBuffer: 1024 * 1024 } });
     const data = JSON.parse(String(stdout));
     // Use `balanceUsd` — the same field the console wallet page renders as the
     // headline "余额" — so the two surfaces always agree. Fall back to the total