@jini-ai/agent-runtime 0.4.0 → 0.4.2

package/dist/defs/amp.js

@@ -1,4 +1,4 @@
-/** Ported verbatim from OD's `apps/daemon/src/runtimes/defs/amp.ts` (import path adjusted only). See `archived provenance ledger`. */
+import { createAgentModelDiscovery } from '../model-discovery.js';
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 // Amp CLI (https://ampcode.com) is a full agentic coding CLI, argv-shaped
 // much like Claude Code: it has a headless execute mode and emits a
@@ -31,6 +31,8 @@ import { DEFAULT_MODEL_OPTION } from './shared.js';
 // "Custom model" input since an arbitrary model id is meaningless here.
 const AMP_MODES = new Set(['deep', 'smart', 'rush']);
 export const ampAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('amp', { fallbackModels: () => ampAgentDef.fallbackModels }),
     id: 'amp',
     name: 'Amp',
     bin: 'amp',
@@ -43,6 +45,8 @@ export const ampAgentDef = {
         { id: 'rush', label: 'Rush (mode)' },
     ],
     supportsCustomModel: false,
+    // Plugin-agent model IDs cannot pin the built-in agent's smart/deep/rush routing.
+    supportsConcreteModelSelection: false,
     buildArgs: ({ prompt: _prompt, imagePaths: _imagePaths }, { extraAllowedDirs: _extraAllowedDirs = [], options = {} } = {}) => {
         // See `RuntimeBuildOptions.permissionMode`'s doc: bypass is the default (unchanged
         // behavior) unless a caller explicitly opts into a restricted run, in which case Amp

package/dist/defs/amr.d.ts

@@ -50,5 +50,20 @@ export declare const amrAgentDef: {
     imageDelivery: "native";
     defaultModelEnvVar: string;
     inactivityTimeoutMs: number;
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=amr.d.ts.map

package/dist/defs/amr.js

@@ -1,4 +1,4 @@
-/** Ported from OD's `apps/daemon/src/runtimes/defs/amr.ts` (two de-branded comments; see `archived provenance ledger`). */
+import { createAgentModelDiscovery } from '../model-discovery.js';
 import { execAgentFile } from './shared.js';
 const AMR_MODELS_TIMEOUT_MS = 10_000;
 const AMR_MODELS_RETRY_DELAYS_MS = [250, 750];
@@ -210,20 +210,9 @@ export async function fetchVelaRemoteModelsWithRetry({ resolvedBin, env }) {
     // `AMR_MODELS_RETRY_DELAYS_MS` whenever we reach the `sleep()` call below
     // (the assertion just satisfies `noUncheckedIndexedAccess`).
     //
-    // Coverage note (re-derived, not merely restated from the paragraph
-    // above): `for (let attempt = 0; ; attempt += 1)` has an empty middle
-    // clause — an unconditional, infinite loop — and its body contains no
-    // `break` (grepped: none). The only two ways out are the `return` on a
-    // successful parse and the `throw` in the catch arm, and the `throw` is
-    // unconditionally forced once `attempt === AMR_MODELS_RETRY_DELAYS_MS.length`
-    // (`AMR_MODELS_RETRY_DELAYS_MS` is the literal 2-element `[250, 750]`
-    // above, so that's guaranteed after at most 3 attempts). So this
-    // function's implicit end-of-body statement (the closing `}` two lines
-    // below) can never execute — v8/istanbul still instruments it because
-    // it can't prove an arbitrary `for(;;)` terminates, but the real control
-    // flow genuinely never reaches it. Documented here (and in
-    // `archived provenance ledger`'s 2026-07-22 entry) instead of forced via a test,
-    // per this repo's no-`/* v8 ignore */` standard.
+    // The empty loop condition and absence of break make the closing statement unreachable:
+    // success returns, and exhaustion throws after at most three attempts. Coverage instrumentation
+    // cannot prove that; document the invariant instead of forcing a test or adding v8 ignore.
     for (let attempt = 0;; attempt += 1) {
         try {
             const { stdout } = await execAgentFile({ command: resolvedBin, args: ['model', 'list', '--format', 'json'] }, { options: {
@@ -270,6 +259,8 @@ export async function fetchVelaBillingSummary({ resolvedBin, env }) {
     return { plan: tier, balanceUsd };
 }
 export const amrAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('amr', { fallbackModels: () => amrAgentDef.fallbackModels, parse: ({ stdout }) => parseVelaModelJson({ stdout, expectedSource: 'remote' }) }),
     id: 'amr',
     name: 'AMR',
     bin: 'vela',

package/dist/defs/antigravity.d.ts

@@ -8,7 +8,7 @@ import type { RuntimeModelOption } from '../types.js';
  * already has an owner — `auth.ts`'s `classifyAgentAuthFailure` /
  * `isAntigravityAuthFailureText`, consumed by whatever surfaces a structured
  * auth error — and duplicating the decision here would mean this def silently
- * rewrites assistant text into instructions. See `archived provenance ledger`.
+ * rewrites assistant text into instructions.
  *
  * @param fullText - The concatenation of every stdout chunk agy produced.
  * @returns The same text with every sign-in URL replaced by a placeholder.
@@ -74,5 +74,20 @@ export declare const antigravityAgentDef: {
     installUrl: string;
     docsUrl: string;
     externalMcpInjection: "env-passthrough";
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=antigravity.d.ts.map

package/dist/defs/antigravity.js

@@ -1,4 +1,4 @@
-/** Ported verbatim from OD's `apps/daemon/src/runtimes/defs/antigravity.ts` (import path adjusted only). See `archived provenance ledger`. */
+import { createAgentModelDiscovery } from '../model-discovery.js';
 import { redactOAuthUrls } from '@jini-ai/oauth';
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 // `agy` v1.1.24 has a real `--model <id>` flag (`agy --help`: "Model for the current CLI
@@ -69,7 +69,7 @@ const OAUTH_URL_PLACEHOLDER = '[redacted sign-in URL]';
  * already has an owner — `auth.ts`'s `classifyAgentAuthFailure` /
  * `isAntigravityAuthFailureText`, consumed by whatever surfaces a structured
  * auth error — and duplicating the decision here would mean this def silently
- * rewrites assistant text into instructions. See `archived provenance ledger`.
+ * rewrites assistant text into instructions.
  *
  * @param fullText - The concatenation of every stdout chunk agy produced.
  * @returns The same text with every sign-in URL replaced by a placeholder.
@@ -121,6 +121,7 @@ export function parseAgyModels({ stdout }) {
     return out.length > 1 ? out : null;
 }
 export const antigravityAgentDef = {
+    ...createAgentModelDiscovery('antigravity', { fallbackModels: () => antigravityAgentDef.fallbackModels, args: ['models'], parse: (input) => antigravityAgentDef.listModels.parse(input) }),
     id: 'antigravity',
     name: 'Antigravity',
     bin: 'agy',

package/dist/defs/auggie.d.ts

@@ -12,5 +12,20 @@ export declare const auggieAgentDef: {
     streamFormat: string;
     externalMcpInjection: "acp-merge";
     imageDelivery: "native";
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=auggie.d.ts.map

package/dist/defs/auggie.js

@@ -1,3 +1,4 @@
+import { createAgentModelDiscovery } from '../model-discovery.js';
 /**
  * @module defs/auggie
  *
@@ -8,6 +9,8 @@
  */
 import { detectAcpModels, DEFAULT_MODEL_OPTION } from './shared.js';
 export const auggieAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('auggie', { fallbackModels: () => auggieAgentDef.fallbackModels }),
     id: 'auggie',
     name: 'Auggie CLI',
     bin: 'auggie',

package/dist/defs/claude.d.ts

@@ -48,5 +48,20 @@ export declare const claudeAgentDef: {
     };
     resumesSessionViaCli: true;
     imageDelivery: "prompt-path";
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=claude.d.ts.map

package/dist/defs/claude.js

@@ -1,31 +1,9 @@
+import { createAgentModelDiscovery } from '../model-discovery.js';
 /**
- * Ported verbatim from OD's `apps/daemon/src/runtimes/defs/claude.ts` (import
- * path adjusted only). See `archived provenance ledger`.
- *
- * **Image delivery (added 2026-08-03):** `buildArgs` below takes an
- * `_imagePaths` parameter but never references it — the Claude Code CLI has
- * no dedicated image-attachment flag or wire mechanism this adapter could
- * forward to. It is not, however, blind to images: confirmed live by piping
- * `Tell me what this image is as best you can: /tmp/probe-image.png` into a
- * real `claude -p` and getting an accurate description back — the CLI reads
- * a local file itself once its path is named in the prompt text. The one
- * real precondition, also confirmed live: the path's directory has to be in
- * the CLI's allowed-directory list (`claude -p` first refused the identical
- * probe when the path was under `/Users/la/Desktop`, reporting that
- * directory as outside its allowed working directories) — which is exactly
- * what `buildArgs`'s existing `extraAllowedDirs` -> `--add-dir` handling
- * below already provides, unmodified.
- *
- * `imageDelivery: 'prompt-path'` (declared below) is what turns this into
- * real behavior: `@jini-ai/daemon`'s `agent-executor.ts` reads that field and,
- * before `buildArgs` ever runs, (1) appends an attachment-naming section to
- * the prompt text via `image-prompt-delivery.ts#augmentPromptWithImageAttachments`
- * and (2) widens `extraAllowedDirs` with each image's containing directory —
- * so this file needed no change to its own `dirs`/`--add-dir` logic at all,
- * only the one-line `imageDelivery` declaration. See
- * `types.ts#RuntimeAgentDef.imageDelivery`'s doc for the full mode contract
- * and why 'native'-delivery defs (ACP, pi-rpc, qoder) must never also get
- * this treatment.
+ * Claude Code has no dedicated image-attachment flag. imageDelivery: 'prompt-path' makes the
+ * executor append local image paths to the prompt and add their directories to extraAllowedDirs;
+ * buildArgs then grants --add-dir access so the CLI can read them itself. Native-delivery defs
+ * must not also receive this augmentation; see RuntimeAgentDef.imageDelivery for that contract.
  */
 import { agentCapabilities } from '../capabilities.js';
 import { buildClaudeMcpConfigArgs, DEFAULT_MODEL_OPTION } from './shared.js';
@@ -46,13 +24,16 @@ const CLAUDE_EFFORT_LEVELS = new Set([
  * The list a picker renders when nothing live is available — no `~/.config/mms/model-routes.json`,
  * the CLI's own picker catalog unreadable (see `claude-code-models.ts`), and no `ANTHROPIC_API_KEY`
  * in the agent's environment or a failed live call. Not the primary source: see `fetchModels` below.
- * Every live source is unioned ON TOP of this list, so it is also the floor that never shrinks.
+ * Historically every live source was unioned on top of this list. Packaged hints are now
+ * offline-only: successful native discovery can remove retired models.
  *
  * Ordered current-first, then the still-active-but-superseded generations, which are KEPT rather
  * than dropped — an installed CLI may be pinned to one via its own config, and removing a working
  * selection out from under a user is worse than listing it last.
  *
- * Every id below is verified present in the installed Claude Code binary's own embedded model
+ * The current picker cache was rechecked on 2026-10-07; its four newer selectable IDs are
+ * included first. The previous verification below still explains why older IDs remain.
+ * Every older id below is verified present in the installed Claude Code binary's own embedded model
  * table (2.1.261), and `claude-fable-5-1` is additionally the value in `~/.claude.json`'s
  * server-fetched `additionalModelOptionsCache`. `claude-fable-5-mythos-5` appears in the binary but
  * NOT in that server-fetched picker list, so it is deliberately omitted: an id in the binary is not
@@ -71,6 +52,11 @@ const CLAUDE_FALLBACK_MODELS = [
     { id: 'sonnet', label: 'Sonnet (alias)' },
     { id: 'opus', label: 'Opus (alias)' },
     { id: 'haiku', label: 'Haiku (alias)' },
+    // Current picker cache additions; older selectable IDs remain below for pinned installs.
+    { id: 'claude-opus-5-5', label: 'claude-opus-5-5' },
+    { id: 'claude-sonnet-5-5', label: 'claude-sonnet-5-5' },
+    { id: 'claude-haiku-5-5', label: 'claude-haiku-5-5' },
+    { id: 'claude-haiku-4-5-20251001', label: 'claude-haiku-4-5-20251001' },
     { id: 'claude-fable-5-1', label: 'claude-fable-5-1' },
     { id: 'claude-fable-5', label: 'claude-fable-5' },
     { id: 'claude-opus-5', label: 'claude-opus-5' },
@@ -84,6 +70,7 @@ const CLAUDE_FALLBACK_MODELS = [
     { id: 'claude-sonnet-4-5', label: 'claude-sonnet-4-5' },
 ];
 export const claudeAgentDef = {
+    ...createAgentModelDiscovery('claude', { fallbackModels: () => claudeAgentDef.fallbackModels }),
     id: 'claude',
     name: 'Claude Code',
     bin: 'claude',
@@ -122,18 +109,20 @@ export const claudeAgentDef = {
     //         falling back to `~/.claude.json`'s `additionalModelOptionsCache`. Cached per process.
     //      b. The account's live Anthropic catalog, when `ANTHROPIC_API_KEY` is in this agent's
     //         environment (makes no network call at all without a key).
-    //      Both are merged ON TOP of the static list, never in place of it; neither shadows the other.
+    //      Successful discovery replaces packaged hints. The snapshot layer labels caches separately.
     //   3. The static list, when neither live source answers.
     //
     // Returning `null` from any step is "nothing to add", and `detection.ts#fetchModels` renders
-    // `fallbackModels` for it — so a live-discovery failure can never empty or shrink the picker.
+    // `fallbackModels` for it in legacy callers. The required discovery port uses the shared
+    // snapshot layer instead: configured routes are not proof of live availability.
     fallbackModels: CLAUDE_FALLBACK_MODELS,
-    // Asserted against the installed Claude Code 2.1.261 binary's embedded model table and
+    // Reasserted on 2026-10-07 against the local picker cache, retaining the previous
+    // assertion against the installed Claude Code 2.1.261 binary's embedded model table and
     // `~/.claude.json`'s server-fetched `additionalModelOptionsCache`. See
     // `RuntimeAgentDef.fallbackModelsAssertedAt` and `scripts/check-model-fallback-freshness.ts`.
-    fallbackModelsAssertedAt: '2026-09-05',
+    fallbackModelsAssertedAt: '2026-10-07',
     fetchModels: async ({ resolvedBin, env }) => {
-        const routed = await loadMmdRouteModels({ env: env, fallbackModels: CLAUDE_FALLBACK_MODELS });
+        const routed = await loadMmdRouteModels({ env: env, fallbackModels: [] });
         if (routed)
             return routed;
         const [fromCli, fromApi] = await Promise.all([
@@ -151,7 +140,8 @@ export const claudeAgentDef = {
     // the CLI, which would warn on stderr and silently fall back to the default.
     reasoningOptions: [
         // Spelled out rather than reusing DEFAULT_MODEL_OPTION: its label reads
-        // "Default (CLI config)", which is right for a model row and wrong here.
+        // "Default (CLI config)". Reasoning retains its Default option; model defaults now use
+        // a pre-selected concrete entry, and never display that historical model label.
         { id: 'default', label: 'Default' },
         { id: 'low', label: 'Low' },
         { id: 'medium', label: 'Medium' },
@@ -164,7 +154,7 @@ export const claudeAgentDef = {
     // `spawn ENAMETOOLONG` (CreateProcess caps the full command line at
     // ~32 KB direct, ~8 KB via .cmd shim). `claude -p` with no positional
     // prompt reads the prompt from stdin under `--input-format text` (the
-    // default), which has no length cap. Mirrors the codex/gemini/opencode/
+    // default), which has no length cap. Mirrors the codex/opencode/
     // cursor/qwen entries below.
     buildArgs: ({ prompt: _prompt, imagePaths: _imagePaths }, { extraAllowedDirs = [], options = {}, runtimeContext = {} } = {}) => {
         const caps = agentCapabilities.get('claude') || {};

package/dist/defs/cline.d.ts

@@ -12,5 +12,20 @@ export declare const clineAgentDef: {
     streamFormat: string;
     externalMcpInjection: "acp-merge";
     imageDelivery: "native";
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=cline.d.ts.map

package/dist/defs/cline.js

@@ -1,3 +1,4 @@
+import { createAgentModelDiscovery } from '../model-discovery.js';
 /**
  * @module defs/cline
  *
@@ -10,6 +11,8 @@
  */
 import { detectAcpModels, DEFAULT_MODEL_OPTION } from './shared.js';
 export const clineAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('cline', { fallbackModels: () => clineAgentDef.fallbackModels }),
     id: 'cline',
     name: 'Cline',
     bin: 'cline',

package/dist/defs/codebuddy.d.ts

@@ -29,5 +29,20 @@ export declare const codebuddyAgentDef: {
     resumesSessionViaCli: true;
     installUrl: string;
     docsUrl: string;
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=codebuddy.d.ts.map

package/dist/defs/codebuddy.js

@@ -1,4 +1,4 @@
-/** Ported verbatim from OD's `apps/daemon/src/runtimes/defs/codebuddy.ts` (import path adjusted only). See `archived provenance ledger`. */
+import { createAgentModelDiscovery } from '../model-discovery.js';
 import { agentCapabilities } from '../capabilities.js';
 import { buildClaudeMcpConfigArgs, DEFAULT_MODEL_OPTION } from './shared.js';
 // Codebuddy Code (https://www.codebuddy.cn) — a Claude Code–compatible CLI
@@ -42,6 +42,8 @@ const CODEBUDDY_FALLBACK_MODELS = [
     { id: 'minimax-m2.7-ioa', label: 'minimax-m2.7-ioa' },
 ];
 export const codebuddyAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('codebuddy', { fallbackModels: () => codebuddyAgentDef.fallbackModels }),
     id: 'codebuddy',
     name: 'Codebuddy Code',
     bin: 'codebuddy',

package/dist/defs/codex.d.ts

@@ -61,5 +61,20 @@ export declare const codexAgentDef: {
     eventParser: string;
     imageDelivery: "native";
     externalMcpInjection: "codex-toml";
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=codex.d.ts.map

package/dist/defs/codex.js

@@ -1,11 +1,6 @@
-/**
- * Ported from OD's `apps/daemon/src/runtimes/defs/codex.ts` with one
- * de-branding change: the two operator-override env vars (originally
- * product-prefixed) are renamed to `CODEX_SANDBOX_MODE` /
- * `CODEX_DISABLE_PLUGINS` — these are already codex-adapter-scoped
- * operator knobs, so no product namespacing is needed. See
- * `archived provenance ledger` for the exact original names.
- */
+import { createAgentModelDiscovery } from '../model-discovery.js';
+/** CODEX_SANDBOX_MODE and CODEX_DISABLE_PLUGINS are adapter-scoped operator overrides;
+ * no product-specific environment naming is required. */
 import { DEFAULT_MODEL_OPTION, clampCodexReasoning } from './shared.js';
 /**
  * The `visibility` values that mean "reachable by id, but do not render in a picker".
@@ -182,6 +177,7 @@ export function codexNeedsDangerFullAccessSandbox({}, { platform = process.platf
     return Boolean(env.WSL_DISTRO_NAME?.trim());
 }
 export const codexAgentDef = {
+    ...createAgentModelDiscovery('codex', { fallbackModels: () => codexAgentDef.fallbackModels, args: ['debug', 'models'], parse: (input) => codexAgentDef.listModels.parse(input) }),
     id: 'codex',
     name: 'Codex CLI',
     bin: 'codex',
@@ -359,47 +355,14 @@ export const codexAgentDef = {
     capturesSessionIdFromStream: true,
     streamFormat: 'json-event-stream',
     eventParser: 'codex',
-    // Own dedicated `-i/--image <FILE>` argv flag, built above — a real
-    // native CLI mechanism, not a workaround. See
-    // `types.ts#RuntimeAgentDef.imageDelivery`'s doc. Before this, no
-    // `imageDelivery` was declared at all, which per that field's own
-    // `undefined` doc means "images are silently dropped exactly as they
-    // were previously" — confirmed live: `buildArgs` never read the paths,
-    // and no other def-specific mechanism named them to the model either.
+    // Native -i/--image <FILE> arguments carry the paths; see RuntimeAgentDef.imageDelivery.
     imageDelivery: 'native',
-    // `'codex-toml'`: Codex CLI's native MCP config is a `[mcp_servers.<name>]` TOML table under
-    // `CODEX_HOME` (`~/.codex/config.toml` by default) — TOML, not the JSON any of the other four
-    // wired strategies produce, and `codex mcp add`/`-c mcp_servers.<name>...=` both write to (or
-    // resolve against) the OPERATOR'S REAL global config, which this driver must never touch on a
-    // routine agent spawn.
-    //
-    // Confirmed against a real installed Codex CLI (0.151.0), not assumed from docs:
-    //   - `codex mcp add`/`codex mcp list` against a scratch `CODEX_HOME` round-tripped the exact
-    //     `[mcp_servers.<name>]` / `command` / `args` / `[mcp_servers.<name>.env]` TOML shape
-    //     `@jini-ai/daemon`'s `buildCodexMcpServerToml` now serializes.
-    //   - Relocating `CODEX_HOME` (env var) to a fresh scratch directory containing a copied
-    //     `auth.json` plus a `config.toml` carrying `[mcp_servers.jini]` produced a normal, fast
-    //     `codex exec --json` turn — no interactive trust prompt, no hang. `-C` pointing at an
-    //     unrelated, untrusted project directory under `--skip-git-repo-check` behaved identically:
-    //     headless `codex exec` never blocks on the "trust this project" prompt that gates
-    //     *auto-discovered* project `.codex/config.toml` (the exact hazard that ruled out
-    //     `claude-mcp-json`'s auto-discovery-based approach for Claude) — it silently records the
-    //     directory as trusted and proceeds.
-    //   - A scratch `CODEX_HOME` with **no** `auth.json` at all does not hang either: the spawned
-    //     CLI fails fast with a structured `turn.failed` stream event carrying a real `401
-    //     Unauthorized`, after a bounded handful of reconnect attempts (~20s) — never an interactive
-    //     login prompt. This is why `prepareCodexHomeForRun`'s `auth.json` copy is allowed to be
-    //     best-effort: a missing/unreadable source credential degrades to an observable run failure,
-    //     never a stuck run.
-    //   - Using the REAL `CODEX_HOME` at all — even read-only via `-c` override flags, never writing
-    //     through `codex mcp add` — was rejected after live testing showed every `codex exec`
-    //     invocation appends a `[projects."<cwd>"]` trust-tracking entry to the real
-    //     `~/.codex/config.toml` as an undocumented side effect of being run at all, regardless of
-    //     `-c` flags. A relocated, run-scoped `CODEX_HOME` (this strategy) is the only mechanism
-    //     that keeps the operator's real config untouched by routine daemon spawns.
-    //
-    // See `@jini-ai/daemon`'s `agent-executor.ts` (`prepareCodexHomeForRun`, `buildCodexHomeConfigToml`)
-    // for the staging/cleanup implementation and `archived provenance ledger` for the full verification transcript.
+    // Codex uses [mcp_servers.<name>] TOML under CODEX_HOME. Use a run-scoped home: even read-only
+    // -c overrides leave Codex free to append project-trust entries to the operator's real config.
+    // A staged config plus best-effort auth.json copy supports headless exec without a trust/login
+    // prompt. Missing credentials fail observably through turn.failed instead of blocking a run.
+    // The staged shape includes command, args and a nested env table. Staging and cleanup belong
+    // to daemon's prepareCodexHomeForRun/buildCodexHomeConfigToml.
     externalMcpInjection: 'codex-toml',
 };
 //# sourceMappingURL=codex.js.map

package/dist/defs/copilot.d.ts

@@ -15,5 +15,20 @@ export declare const copilotAgentDef: {
     promptViaStdin: true;
     streamFormat: string;
     inactivityTimeoutMs: number;
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=copilot.d.ts.map

package/dist/defs/copilot.js

@@ -1,15 +1,8 @@
-/**
- * Ported from OD's `apps/daemon/src/runtimes/defs/copilot.ts` with two
- * de-branding edits to comments (no behavior change): a product-named
- * prompt-size example reworded to generic phrasing, and a
- * product-prefixed operator-override env var name replaced with generic
- * phrasing (this package's `types.ts` already documents
- * `inactivityTimeoutMs` as "callers may still allow an operator override
- * via their own env var"). See `archived provenance ledger` for the exact original
- * wording.
- */
+import { createAgentModelDiscovery } from '../model-discovery.js';
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 export const copilotAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('copilot', { fallbackModels: () => copilotAgentDef.fallbackModels }),
     id: 'copilot',
     name: 'GitHub Copilot CLI',
     bin: 'copilot',
@@ -26,10 +19,8 @@ export const copilotAgentDef = {
     // per upstream copilot-cli issue #1046 (closed as already supported,
     // confirmed working on Copilot CLI for `echo "..." | copilot
     // --model <id>` and `cat prompt.txt | copilot --model <id>`). The
-    // earlier `-p -` attempt (PR #351) and the argv-bound revert
-    // (PR #466) both pre-dated that confirmation: `-p -` made Copilot
-    // interpret `-` as a literal one-character prompt, but omitting
-    // `-p` entirely is a separate code path that does delegate to
+    // `-p -` form is a literal one-character prompt; omitting
+    // `-p` entirely is the separate code path that delegates to
     // stdin under a non-TTY pipe — which is exactly how the daemon
     // spawns the child (`stdio: ['pipe', 'pipe', 'pipe']`).
     //

package/dist/defs/crush.d.ts

@@ -14,5 +14,20 @@ export declare const crushAgentDef: {
     } | undefined) => string[];
     promptViaStdin: true;
     streamFormat: string;
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=crush.d.ts.map

package/dist/defs/crush.js

@@ -1,3 +1,4 @@
+import { createAgentModelDiscovery } from '../model-discovery.js';
 /**
  * @module defs/crush
  *
@@ -12,6 +13,8 @@
  */
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 export const crushAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('crush', { fallbackModels: () => crushAgentDef.fallbackModels }),
     id: 'crush',
     name: 'Crush',
     bin: 'crush',

package/dist/defs/cursor-agent.d.ts

@@ -34,5 +34,20 @@ export declare const cursorAgentDef: {
         args: string[];
         timeoutMs: number;
     };
+    discoverModels(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        force?: boolean;
+        staleWhileRevalidate?: boolean;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").ModelCatalogSnapshot>;
+    resolveDefaultModel(requiredArgs: {
+        context: import("../model-discovery-types.js").ModelDiscoveryContext;
+        catalog: import("../model-discovery-types.js").ModelCatalogSnapshot;
+    }, optionalArgs?: {
+        signal?: AbortSignal;
+        deps?: import("../model-discovery-types.js").ModelDiscoveryDeps;
+    }): Promise<import("../model-discovery-types.js").DefaultModelResolution>;
 };
 //# sourceMappingURL=cursor-agent.d.ts.map

package/dist/defs/cursor-agent.js

@@ -1,4 +1,4 @@
-/** Ported verbatim from OD's `apps/daemon/src/runtimes/defs/cursor-agent.ts` (import path adjusted only). See `archived provenance ledger`. */
+import { createAgentModelDiscovery } from '../model-discovery.js';
 import { DEFAULT_MODEL_OPTION } from './shared.js';
 import { agentCapabilities } from '../capabilities.js';
 export function parseCursorAgentModels({ stdout }) {
@@ -26,6 +26,8 @@ export function parseCursorAgentModels({ stdout }) {
     return out.length > 1 ? out : null;
 }
 export const cursorAgentDef = {
+    // UNVERIFIED live integration locally; source/category and limits are documented in model-discovery-adapters.ts.
+    ...createAgentModelDiscovery('cursor-agent', { fallbackModels: () => cursorAgentDef.fallbackModels, args: ['models'], parse: (input) => cursorAgentDef.listModels.parse(input) }),
     id: 'cursor-agent',
     name: 'Cursor Agent',
     bin: 'cursor-agent',