@loops-adk/core 0.1.0 → 0.2.0

package/dist/{claude-cli-U7WEVAOL.js → claude-cli-75AOQUKG.js}

@@ -1,6 +1,6 @@
 import { redactSecrets } from './chunk-JFTXJ7I2.js';
 import { newAccumulator, mapMessage } from './chunk-CXEPZHSR.js';
-import { SUBAGENT_TOOLS } from './chunk-XC46B4FD.js';
+import { SUBAGENT_TOOLS } from './chunk-MA6NDQMO.js';
 import { LoopError } from './chunk-I3STY7U6.js';
 import { execa } from 'execa';
 
@@ -120,5 +120,5 @@ ${stdout}`);
 };
 
 export { ClaudeCliEngine, buildClaudeArgs, classifyCliLimit };
-//# sourceMappingURL=claude-cli-U7WEVAOL.js.map
-//# sourceMappingURL=claude-cli-U7WEVAOL.js.map
+//# sourceMappingURL=claude-cli-75AOQUKG.js.map
+//# sourceMappingURL=claude-cli-75AOQUKG.js.map

package/dist/{claude-cli-U7WEVAOL.js.map → claude-cli-75AOQUKG.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/engines/claude-cli.ts"],"names":[],"mappings":";;;;;;AAmCO,SAAS,iBAAiB,IAAA,EAAqC;AACpE,EAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,EAAY;AAC/B,EAAA,MAAM,OAAA,GACJ,+DAAA,CAAgE,IAAA,CAAK,KAAK,CAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,6CAAA,CAA8C,IAAA,CAAK,KAAK,CAAA;AACvE,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,MAAA,EAAQ,OAAO,MAAA;AAEhC,EAAA,MAAM,OAAA,GAAU,aAAa,IAAI,CAAA;AACjC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,IAAI,SAAA,CAAU;AAAA,MACnB,IAAA,EAAM,OAAA;AAAA,MACN,KAAA,EAAO,QAAA;AAAA,MACP,OAAA,EAAS,uBAAuB,IAAI,CAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAI,SAAA,CAAU;AAAA,IACnB,IAAA,EAAM,YAAA;AAAA,IACN,KAAA,EAAO,QAAA;AAAA,IACP,OAAA,EAAS,wBAAwB,IAAI,CAAA,CAAA;AAAA,IACrC;AAAA,GACD,CAAA;AACH;AAQA,SAAS,aAAa,IAAA,EAAkC;AACtD,EAAA,MAAM,CAAA,GAAI,sDAAA,CAAuD,IAAA,CAAK,IAAI,CAAA;AAC1E,EAAA,IAAI,CAAC,GAAG,OAAO,MAAA;AACf,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AACrB,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,CAAC,GAAG,OAAO,MAAA;AAEhC,EAAA,OAAO,EAAE,CAAC,CAAA,CAAG,MAAA,IAAU,EAAA,GAAK,IAAI,GAAA,GAAO,CAAA;AACzC;AAOO,SAAS,eAAA,CACd,KACA,IAAA,EACU;AACV,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,YAAA;AAChC,EAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAM,iBAAA,EAAmB,eAAe,WAAW,CAAA;AACjE,EAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AACrC,EAAA,IAAI,IAAI,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,wBAAA,EAA0B,IAAI,MAAM,CAAA;AAC9D,EAAA,IAAI,IAAI,YAAA,EAAc,MAAA;AACpB,IAAA,IAAA,CAAK,KAAK,gBAAA,EAAkB,GAAA,CAAI,YAAA,CAAa,IAAA,CAAK,GAAG,CAAC,CAAA;AAExD,EAAA,IAAI,GAAA,CAAI,MAAM,IAAA,CAAK,IAAA,CAAK,qBAAqB,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA;AACrE,EAAA,IAAI,KAAK,cAAA,EAAgB,IAAA,CAAK,IAAA,CAAK,mBAAA,EAAqB,KAAK,cAAc,CAAA;AAC3E,EAAA,IAAI,KAAK,OAAA,EAAS,MAAA,OAAa,IAAA,CAAK,GAAG,KAAK,OAAO,CAAA;AAGnD,EAAA,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,GAAA,CAAI,MAAM,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT;AAEO,IAAM,kBAAN,MAAwC;AAAA,EAE7C,WAAA,CAA6B,IAAA,GAAsB,EAAC,EAAG;AAA1B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA2B;AAAA,EAA3B,IAAA;AAAA,EADpB,IAAA,GAAO,YAAA;AAAA,EAGhB,MAAM,GAAA,CACJ,GAAA,EACA,OAAA,EACA,MAAA,EACsB;AACtB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,SAAA,IAAa,QAAA;AACnC,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,IAAA,CAAK,YAAA;AACrC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,GAAA,EAAK,IAAA,CAAK,IAAI,CAAA;AAE3C,IAAA,MAAM,GAAA,GAAM,cAAA,CAAe,KAAA,IAAS,YAAY,CAAA;AAGhD,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM;AAAA,MAC3B,KAAK,GAAA,CAAI,GAAA;AAAA,MACT,YAAA,EAAc,MAAA;AAAA;AAAA;AAAA,MAGd,KAAA,EAAO,QAAA;AAAA;AAAA;AAAA,MAGP,mBAAA,EAAqB,GAAA;AAAA,MACrB,MAAA,EAAQ,KAAA;AAAA,MACR,SAAS,GAAA,CAAI,SAAA;AAAA,MACb,iBAAA,EAAmB;AAAA,KACpB,CAAA;AAED,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,KAAA,GAAQ,CAAC,IAAA,KAAiB;AAC9B,MAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI;AACF,QAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG,KAAK,OAAO,CAAA;AAAA,MAC9C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA;AACA,IAAA,GAAA,CAAI,MAAA,EAAQ,YAAY,MAAM,CAAA;AAC9B,IAAA,GAAA,CAAI,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACxC,MAAA,MAAA,IAAU,KAAA;AACV,MAAA,IAAI,GAAA;AACJ,MAAA,OAAA,CAAQ,GAAA,GAAM,MAAA,CAAO,OAAA,CAAQ,IAAI,MAAM,CAAA,EAAG;AACxC,QAAA,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAC1B,QAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAAA,MAC/B;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,SAAS,MAAM,GAAA;AACrB,IAAA,IAAI,MAAA,QAAc,MAAM,CAAA;AAExB,IAAA,IAAI,MAAA,CAAO,OAAA;AACT,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,SAAA;AAAA,QACN,KAAA,EAAO,QAAA;AAAA,QACP,OAAA,EAAS;AAAA,OACV,CAAA;AACH,IAAA,IAAI,OAAO,MAAA,EAAQ;AAGjB,MAAA,MAAM,MAAA,GACJ,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,GACrB,aAAA,CAAc,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,GACzC,EAAA;AAGN,MAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,QAAA,MAAM,MAAA,GACJ,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,GACrB,aAAA,CAAc,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,GACzC,EAAA;AACN,QAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,CAAA,EAAG,MAAM;AAAA,EAAK,MAAM,CAAA,CAAE,CAAA;AACrD,QAAA,IAAI,OAAO,MAAM,KAAA;AAAA,MACnB;AACA,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,MAAA,CAAO,QAAA,GAAW,SAAA,GAAY,QAAA;AAAA,QACpC,KAAA,EAAO,QAAA;AAAA,QACP,OAAA,EAAS,CAAA,cAAA,EAAiB,MAAA,CAAO,QAAA,IAAY,GAAG,GAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,OAC/E,CAAA;AAAA,IACH;AAEA,IAAA,OAAA,CAAQ,EAAE,MAAM,OAAA,EAAS,KAAA,EAAO,IAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,KAAA,EAAO,CAAA;AAC7D,IAAA,OAAO;AAAA,MACL,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,YAAY,GAAA,CAAI;AAAA,KAClB;AAAA,EACF;AACF","file":"claude-cli-U7WEVAOL.js","sourcesContent":["/**\n * Engine adapter: the `claude` CLI as a subprocess. A fresh process per call =\n * a fresh context. Robust spawning + abort + timeout via `execa`; output is the\n * same stream-json schema the Agent SDK emits, so we reuse `mapMessage`.\n */\n\nimport { execa } from 'execa';\nimport {\n  SUBAGENT_TOOLS,\n  type AgentRequest,\n  type AgentResult,\n  type Engine,\n  type EngineEventSink,\n  type EngineOptions,\n} from './engine.ts';\nimport { mapMessage, newAccumulator } from './message-map.ts';\nimport { LoopError } from '../core/errors.ts';\nimport { redactSecrets } from '../core/redact.ts';\n\n/**\n * Classify a failed `claude` subprocess into a provider-limit `LoopError`, or\n * return `undefined` to fall through to the generic ENGINE/TIMEOUT mapping. The\n * CLI has no structured limit channel on a hard failure, so we read its\n * (already-redacted) output text:\n *   - a usage/quota limit (\"usage limit reached\", \"out of credits\") → QUOTA.\n *     A reset time, when the message states one (epoch seconds or an absolute\n *     time the CLI prints), makes it auto-waitable; otherwise QUOTA has no\n *     reset and the loop policy checkpoints-and-pauses.\n *   - a plain \"rate limit\" → RATE_LIMIT (resets on its own).\n * Order matters: usage/quota is checked first so a usage message that also\n * contains the words \"rate limit\" is not mis-tagged as a transient throttle.\n *\n * Exported for unit testing without spawning a subprocess (mirrors\n * `buildClaudeArgs`).\n */\nexport function classifyCliLimit(text: string): LoopError | undefined {\n  const lower = text.toLowerCase();\n  const isUsage =\n    /usage limit|out of credits|insufficient credits|quota|billing/.test(lower);\n  const isRate = /rate limit|rate-limit|too many requests|429/.test(lower);\n  if (!isUsage && !isRate) return undefined;\n\n  const resetAt = parseResetAt(text);\n  if (isUsage) {\n    return new LoopError({\n      code: 'QUOTA',\n      phase: 'engine',\n      message: `claude usage limit: ${text}`,\n      resetAt,\n    });\n  }\n  return new LoopError({\n    code: 'RATE_LIMIT',\n    phase: 'engine',\n    message: `claude rate limited: ${text}`,\n    resetAt,\n  });\n}\n\n/**\n * Pull a reset time (epoch ms) out of CLI limit text. The CLI states a reset as\n * an epoch-seconds value (e.g. `resets at 1700000000`); convert to ms. Returns\n * `undefined` when no reset is stated — a quota with no parseable reset is not\n * auto-waitable.\n */\nfunction parseResetAt(text: string): number | undefined {\n  const m = /(?:reset|resets|retry|available)\\D{0,20}(\\d{10,13})/i.exec(text);\n  if (!m) return undefined;\n  const n = Number(m[1]);\n  if (!Number.isFinite(n)) return undefined;\n  // 10-digit values are epoch seconds; 13-digit are already ms.\n  return m[1]!.length <= 10 ? n * 1000 : n;\n}\n\n/**\n * Build the `claude` argv for one run. Extracted (and exported) so the flag\n * wiring — model, system prompt, tool allowlist, permission mode, the `--`\n * argument-smuggling guard — is unit-testable without spawning a process.\n */\nexport function buildClaudeArgs(\n  req: AgentRequest,\n  opts: EngineOptions,\n): string[] {\n  const model = req.model ?? opts.defaultModel;\n  const args = ['-p', '--output-format', 'stream-json', '--verbose'];\n  if (model) args.push('--model', model);\n  if (req.system) args.push('--append-system-prompt', req.system);\n  if (req.allowedTools?.length)\n    args.push('--allowedTools', req.allowedTools.join(','));\n  // A leaf agent may not spawn sub-agents — disallow the spawn tool (wins over any allowlist).\n  if (req.leaf) args.push('--disallowedTools', SUBAGENT_TOOLS.join(','));\n  if (opts.permissionMode) args.push('--permission-mode', opts.permissionMode);\n  if (opts.cliArgs?.length) args.push(...opts.cliArgs);\n  // `--` ends option parsing so a prompt starting with `-` can't be\n  // mis-interpreted by `claude` as a flag (argument smuggling).\n  args.push('--', req.prompt);\n  return args;\n}\n\nexport class ClaudeCliEngine implements Engine {\n  readonly name = 'claude-cli';\n  constructor(private readonly opts: EngineOptions = {}) {}\n\n  async run(\n    req: AgentRequest,\n    onEvent: EngineEventSink,\n    signal: AbortSignal,\n  ): Promise<AgentResult> {\n    const bin = this.opts.cliBinary ?? 'claude';\n    const model = req.model ?? this.opts.defaultModel;\n    const args = buildClaudeArgs(req, this.opts);\n\n    const acc = newAccumulator(model ?? 'claude-cli');\n    // Buffered (default) so `stderr` is a string for error messages; we still\n    // attach a `data` listener to stream stdout line-by-line as it arrives.\n    const sub = execa(bin, args, {\n      cwd: req.cwd,\n      cancelSignal: signal,\n      // The prompt is passed as an argument, not piped — don't let `claude -p`\n      // stall waiting on stdin.\n      stdin: 'ignore',\n      // If the child ignores the SIGTERM from an abort/timeout, escalate to\n      // SIGKILL so a wedged subprocess can't make Ctrl-C hang.\n      forceKillAfterDelay: 5000,\n      reject: false,\n      timeout: req.timeoutMs,\n      stripFinalNewline: false,\n    });\n\n    let buffer = '';\n    const flush = (line: string) => {\n      const trimmed = line.trim();\n      if (!trimmed) return;\n      try {\n        mapMessage(JSON.parse(trimmed), acc, onEvent);\n      } catch {\n        /* ignore non-JSON banner lines */\n      }\n    };\n    sub.stdout?.setEncoding('utf8');\n    sub.stdout?.on('data', (chunk: string) => {\n      buffer += chunk;\n      let idx: number;\n      while ((idx = buffer.indexOf('\\n')) >= 0) {\n        flush(buffer.slice(0, idx));\n        buffer = buffer.slice(idx + 1);\n      }\n    });\n\n    const result = await sub;\n    if (buffer) flush(buffer);\n\n    if (signal.aborted)\n      throw new LoopError({\n        code: 'ABORTED',\n        phase: 'engine',\n        message: 'claude-cli run aborted',\n      });\n    if (result.failed) {\n      // The child's stderr is outside our control and may echo credentials on\n      // an auth failure — redact before it lands in events/logs/the summary.\n      const stderr =\n        typeof result.stderr === 'string'\n          ? redactSecrets(result.stderr.slice(0, 400))\n          : '';\n      // A rate/usage limit can land on either stream; check both (redacted)\n      // before falling through to the generic exit-code error.\n      if (!result.timedOut) {\n        const stdout =\n          typeof result.stdout === 'string'\n            ? redactSecrets(result.stdout.slice(0, 400))\n            : '';\n        const limit = classifyCliLimit(`${stderr}\\n${stdout}`);\n        if (limit) throw limit;\n      }\n      throw new LoopError({\n        code: result.timedOut ? 'TIMEOUT' : 'ENGINE',\n        phase: 'engine',\n        message: `claude exited ${result.exitCode ?? '?'}${stderr ? `: ${stderr}` : ''}`,\n      });\n    }\n\n    onEvent({ type: 'usage', usage: acc.usage, model: acc.model });\n    return {\n      text: acc.text,\n      usage: acc.usage,\n      model: acc.model,\n      stopReason: acc.stopReason,\n    };\n  }\n}\n"]}
+{"version":3,"sources":["../src/engines/claude-cli.ts"],"names":[],"mappings":";;;;;;AAmCO,SAAS,iBAAiB,IAAA,EAAqC;AACpE,EAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,EAAY;AAC/B,EAAA,MAAM,OAAA,GACJ,+DAAA,CAAgE,IAAA,CAAK,KAAK,CAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,6CAAA,CAA8C,IAAA,CAAK,KAAK,CAAA;AACvE,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,MAAA,EAAQ,OAAO,MAAA;AAEhC,EAAA,MAAM,OAAA,GAAU,aAAa,IAAI,CAAA;AACjC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,IAAI,SAAA,CAAU;AAAA,MACnB,IAAA,EAAM,OAAA;AAAA,MACN,KAAA,EAAO,QAAA;AAAA,MACP,OAAA,EAAS,uBAAuB,IAAI,CAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAI,SAAA,CAAU;AAAA,IACnB,IAAA,EAAM,YAAA;AAAA,IACN,KAAA,EAAO,QAAA;AAAA,IACP,OAAA,EAAS,wBAAwB,IAAI,CAAA,CAAA;AAAA,IACrC;AAAA,GACD,CAAA;AACH;AAQA,SAAS,aAAa,IAAA,EAAkC;AACtD,EAAA,MAAM,CAAA,GAAI,sDAAA,CAAuD,IAAA,CAAK,IAAI,CAAA;AAC1E,EAAA,IAAI,CAAC,GAAG,OAAO,MAAA;AACf,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AACrB,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,CAAC,GAAG,OAAO,MAAA;AAEhC,EAAA,OAAO,EAAE,CAAC,CAAA,CAAG,MAAA,IAAU,EAAA,GAAK,IAAI,GAAA,GAAO,CAAA;AACzC;AAOO,SAAS,eAAA,CACd,KACA,IAAA,EACU;AACV,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,YAAA;AAChC,EAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAM,iBAAA,EAAmB,eAAe,WAAW,CAAA;AACjE,EAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AACrC,EAAA,IAAI,IAAI,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,wBAAA,EAA0B,IAAI,MAAM,CAAA;AAC9D,EAAA,IAAI,IAAI,YAAA,EAAc,MAAA;AACpB,IAAA,IAAA,CAAK,KAAK,gBAAA,EAAkB,GAAA,CAAI,YAAA,CAAa,IAAA,CAAK,GAAG,CAAC,CAAA;AAExD,EAAA,IAAI,GAAA,CAAI,MAAM,IAAA,CAAK,IAAA,CAAK,qBAAqB,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA;AACrE,EAAA,IAAI,KAAK,cAAA,EAAgB,IAAA,CAAK,IAAA,CAAK,mBAAA,EAAqB,KAAK,cAAc,CAAA;AAC3E,EAAA,IAAI,KAAK,OAAA,EAAS,MAAA,OAAa,IAAA,CAAK,GAAG,KAAK,OAAO,CAAA;AAGnD,EAAA,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,GAAA,CAAI,MAAM,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT;AAEO,IAAM,kBAAN,MAAwC;AAAA,EAE7C,WAAA,CAA6B,IAAA,GAAsB,EAAC,EAAG;AAA1B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA2B;AAAA,EAA3B,IAAA;AAAA,EADpB,IAAA,GAAO,YAAA;AAAA,EAGhB,MAAM,GAAA,CACJ,GAAA,EACA,OAAA,EACA,MAAA,EACsB;AACtB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,SAAA,IAAa,QAAA;AACnC,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,IAAA,CAAK,YAAA;AACrC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,GAAA,EAAK,IAAA,CAAK,IAAI,CAAA;AAE3C,IAAA,MAAM,GAAA,GAAM,cAAA,CAAe,KAAA,IAAS,YAAY,CAAA;AAGhD,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM;AAAA,MAC3B,KAAK,GAAA,CAAI,GAAA;AAAA,MACT,YAAA,EAAc,MAAA;AAAA;AAAA;AAAA,MAGd,KAAA,EAAO,QAAA;AAAA;AAAA;AAAA,MAGP,mBAAA,EAAqB,GAAA;AAAA,MACrB,MAAA,EAAQ,KAAA;AAAA,MACR,SAAS,GAAA,CAAI,SAAA;AAAA,MACb,iBAAA,EAAmB;AAAA,KACpB,CAAA;AAED,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,KAAA,GAAQ,CAAC,IAAA,KAAiB;AAC9B,MAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI;AACF,QAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG,KAAK,OAAO,CAAA;AAAA,MAC9C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA;AACA,IAAA,GAAA,CAAI,MAAA,EAAQ,YAAY,MAAM,CAAA;AAC9B,IAAA,GAAA,CAAI,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACxC,MAAA,MAAA,IAAU,KAAA;AACV,MAAA,IAAI,GAAA;AACJ,MAAA,OAAA,CAAQ,GAAA,GAAM,MAAA,CAAO,OAAA,CAAQ,IAAI,MAAM,CAAA,EAAG;AACxC,QAAA,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAC1B,QAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAAA,MAC/B;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,SAAS,MAAM,GAAA;AACrB,IAAA,IAAI,MAAA,QAAc,MAAM,CAAA;AAExB,IAAA,IAAI,MAAA,CAAO,OAAA;AACT,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,SAAA;AAAA,QACN,KAAA,EAAO,QAAA;AAAA,QACP,OAAA,EAAS;AAAA,OACV,CAAA;AACH,IAAA,IAAI,OAAO,MAAA,EAAQ;AAGjB,MAAA,MAAM,MAAA,GACJ,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,GACrB,aAAA,CAAc,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,GACzC,EAAA;AAGN,MAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,QAAA,MAAM,MAAA,GACJ,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,GACrB,aAAA,CAAc,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,GACzC,EAAA;AACN,QAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,CAAA,EAAG,MAAM;AAAA,EAAK,MAAM,CAAA,CAAE,CAAA;AACrD,QAAA,IAAI,OAAO,MAAM,KAAA;AAAA,MACnB;AACA,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,MAAA,CAAO,QAAA,GAAW,SAAA,GAAY,QAAA;AAAA,QACpC,KAAA,EAAO,QAAA;AAAA,QACP,OAAA,EAAS,CAAA,cAAA,EAAiB,MAAA,CAAO,QAAA,IAAY,GAAG,GAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,OAC/E,CAAA;AAAA,IACH;AAEA,IAAA,OAAA,CAAQ,EAAE,MAAM,OAAA,EAAS,KAAA,EAAO,IAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,KAAA,EAAO,CAAA;AAC7D,IAAA,OAAO;AAAA,MACL,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,YAAY,GAAA,CAAI;AAAA,KAClB;AAAA,EACF;AACF","file":"claude-cli-75AOQUKG.js","sourcesContent":["/**\n * Engine adapter: the `claude` CLI as a subprocess. A fresh process per call =\n * a fresh context. Robust spawning + abort + timeout via `execa`; output is the\n * same stream-json schema the Agent SDK emits, so we reuse `mapMessage`.\n */\n\nimport { execa } from 'execa';\nimport {\n  SUBAGENT_TOOLS,\n  type AgentRequest,\n  type AgentResult,\n  type Engine,\n  type EngineEventSink,\n  type EngineOptions,\n} from './engine.ts';\nimport { mapMessage, newAccumulator } from './message-map.ts';\nimport { LoopError } from '../core/errors.ts';\nimport { redactSecrets } from '../core/redact.ts';\n\n/**\n * Classify a failed `claude` subprocess into a provider-limit `LoopError`, or\n * return `undefined` to fall through to the generic ENGINE/TIMEOUT mapping. The\n * CLI has no structured limit channel on a hard failure, so we read its\n * (already-redacted) output text:\n *   - a usage/quota limit (\"usage limit reached\", \"out of credits\") → QUOTA.\n *     A reset time, when the message states one (epoch seconds or an absolute\n *     time the CLI prints), makes it auto-waitable; otherwise QUOTA has no\n *     reset and the loop policy checkpoints-and-pauses.\n *   - a plain \"rate limit\" → RATE_LIMIT (resets on its own).\n * Order matters: usage/quota is checked first so a usage message that also\n * contains the words \"rate limit\" is not mis-tagged as a transient throttle.\n *\n * Exported for unit testing without spawning a subprocess (mirrors\n * `buildClaudeArgs`).\n */\nexport function classifyCliLimit(text: string): LoopError | undefined {\n  const lower = text.toLowerCase();\n  const isUsage =\n    /usage limit|out of credits|insufficient credits|quota|billing/.test(lower);\n  const isRate = /rate limit|rate-limit|too many requests|429/.test(lower);\n  if (!isUsage && !isRate) return undefined;\n\n  const resetAt = parseResetAt(text);\n  if (isUsage) {\n    return new LoopError({\n      code: 'QUOTA',\n      phase: 'engine',\n      message: `claude usage limit: ${text}`,\n      resetAt,\n    });\n  }\n  return new LoopError({\n    code: 'RATE_LIMIT',\n    phase: 'engine',\n    message: `claude rate limited: ${text}`,\n    resetAt,\n  });\n}\n\n/**\n * Pull a reset time (epoch ms) out of CLI limit text. The CLI states a reset as\n * an epoch-seconds value (e.g. `resets at 1700000000`); convert to ms. Returns\n * `undefined` when no reset is stated — a quota with no parseable reset is not\n * auto-waitable.\n */\nfunction parseResetAt(text: string): number | undefined {\n  const m = /(?:reset|resets|retry|available)\\D{0,20}(\\d{10,13})/i.exec(text);\n  if (!m) return undefined;\n  const n = Number(m[1]);\n  if (!Number.isFinite(n)) return undefined;\n  // 10-digit values are epoch seconds; 13-digit are already ms.\n  return m[1]!.length <= 10 ? n * 1000 : n;\n}\n\n/**\n * Build the `claude` argv for one run. Extracted (and exported) so the flag\n * wiring — model, system prompt, tool allowlist, permission mode, the `--`\n * argument-smuggling guard — is unit-testable without spawning a process.\n */\nexport function buildClaudeArgs(\n  req: AgentRequest,\n  opts: EngineOptions,\n): string[] {\n  const model = req.model ?? opts.defaultModel;\n  const args = ['-p', '--output-format', 'stream-json', '--verbose'];\n  if (model) args.push('--model', model);\n  if (req.system) args.push('--append-system-prompt', req.system);\n  if (req.allowedTools?.length)\n    args.push('--allowedTools', req.allowedTools.join(','));\n  // A leaf agent may not spawn sub-agents — disallow the spawn tool (wins over any allowlist).\n  if (req.leaf) args.push('--disallowedTools', SUBAGENT_TOOLS.join(','));\n  if (opts.permissionMode) args.push('--permission-mode', opts.permissionMode);\n  if (opts.cliArgs?.length) args.push(...opts.cliArgs);\n  // `--` ends option parsing so a prompt starting with `-` can't be\n  // mis-interpreted by `claude` as a flag (argument smuggling).\n  args.push('--', req.prompt);\n  return args;\n}\n\nexport class ClaudeCliEngine implements Engine {\n  readonly name = 'claude-cli';\n  constructor(private readonly opts: EngineOptions = {}) {}\n\n  async run(\n    req: AgentRequest,\n    onEvent: EngineEventSink,\n    signal: AbortSignal,\n  ): Promise<AgentResult> {\n    const bin = this.opts.cliBinary ?? 'claude';\n    const model = req.model ?? this.opts.defaultModel;\n    const args = buildClaudeArgs(req, this.opts);\n\n    const acc = newAccumulator(model ?? 'claude-cli');\n    // Buffered (default) so `stderr` is a string for error messages; we still\n    // attach a `data` listener to stream stdout line-by-line as it arrives.\n    const sub = execa(bin, args, {\n      cwd: req.cwd,\n      cancelSignal: signal,\n      // The prompt is passed as an argument, not piped — don't let `claude -p`\n      // stall waiting on stdin.\n      stdin: 'ignore',\n      // If the child ignores the SIGTERM from an abort/timeout, escalate to\n      // SIGKILL so a wedged subprocess can't make Ctrl-C hang.\n      forceKillAfterDelay: 5000,\n      reject: false,\n      timeout: req.timeoutMs,\n      stripFinalNewline: false,\n    });\n\n    let buffer = '';\n    const flush = (line: string) => {\n      const trimmed = line.trim();\n      if (!trimmed) return;\n      try {\n        mapMessage(JSON.parse(trimmed), acc, onEvent);\n      } catch {\n        /* ignore non-JSON banner lines */\n      }\n    };\n    sub.stdout?.setEncoding('utf8');\n    sub.stdout?.on('data', (chunk: string) => {\n      buffer += chunk;\n      let idx: number;\n      while ((idx = buffer.indexOf('\\n')) >= 0) {\n        flush(buffer.slice(0, idx));\n        buffer = buffer.slice(idx + 1);\n      }\n    });\n\n    const result = await sub;\n    if (buffer) flush(buffer);\n\n    if (signal.aborted)\n      throw new LoopError({\n        code: 'ABORTED',\n        phase: 'engine',\n        message: 'claude-cli run aborted',\n      });\n    if (result.failed) {\n      // The child's stderr is outside our control and may echo credentials on\n      // an auth failure — redact before it lands in events/logs/the summary.\n      const stderr =\n        typeof result.stderr === 'string'\n          ? redactSecrets(result.stderr.slice(0, 400))\n          : '';\n      // A rate/usage limit can land on either stream; check both (redacted)\n      // before falling through to the generic exit-code error.\n      if (!result.timedOut) {\n        const stdout =\n          typeof result.stdout === 'string'\n            ? redactSecrets(result.stdout.slice(0, 400))\n            : '';\n        const limit = classifyCliLimit(`${stderr}\\n${stdout}`);\n        if (limit) throw limit;\n      }\n      throw new LoopError({\n        code: result.timedOut ? 'TIMEOUT' : 'ENGINE',\n        phase: 'engine',\n        message: `claude exited ${result.exitCode ?? '?'}${stderr ? `: ${stderr}` : ''}`,\n      });\n    }\n\n    onEvent({ type: 'usage', usage: acc.usage, model: acc.model });\n    return {\n      text: acc.text,\n      usage: acc.usage,\n      model: acc.model,\n      stopReason: acc.stopReason,\n    };\n  }\n}\n"]}

package/dist/{codex-6I5UZ2HM.js → codex-LYZF52WL.js}

@@ -1,9 +1,29 @@
+import { redactSecrets } from './chunk-JFTXJ7I2.js';
 import { LoopError } from './chunk-I3STY7U6.js';
 import { mkdtempSync, readFileSync, rmSync } from 'fs';
 import { tmpdir } from 'os';
 import { join } from 'path';
 import { execa } from 'execa';
 
+function buildCodexArgs(req, opts, outFile) {
+  const model = req.model ?? opts.defaultModel;
+  const prompt = req.system ? `${req.system}
+
+---
+
+${req.prompt}` : req.prompt;
+  const args = ["exec", "--ephemeral", "--skip-git-repo-check", "--color", "never"];
+  if (opts.permissionMode === "bypassPermissions") {
+    args.push("--dangerously-bypass-approvals-and-sandbox");
+  } else {
+    args.push("-s", "read-only");
+  }
+  if (req.cwd) args.push("-C", req.cwd);
+  if (model) args.push("-m", model);
+  if (opts.cliArgs?.length) args.push(...opts.cliArgs);
+  args.push("-o", outFile, prompt);
+  return args;
+}
 var CodexEngine = class {
   constructor(opts = {}) {
     this.opts = opts;
@@ -14,15 +34,7 @@ var CodexEngine = class {
     const model = req.model ?? this.opts.defaultModel;
     const dir = mkdtempSync(join(tmpdir(), "loops-codex-"));
     const outFile = join(dir, "last.txt");
-    const prompt = req.system ? `${req.system}
-
----
-
-${req.prompt}` : req.prompt;
-    const args = ["exec", "--ephemeral", "-s", "read-only", "--skip-git-repo-check"];
-    if (req.cwd) args.push("-C", req.cwd);
-    if (model) args.push("-m", model);
-    args.push("-o", outFile, prompt);
+    const args = buildCodexArgs(req, this.opts, outFile);
     try {
       const sub = await execa(this.opts.cliBinary ?? "codex", args, {
         stdin: "ignore",
@@ -43,7 +55,7 @@ ${req.prompt}` : req.prompt;
         throw new LoopError({
           code: sub.timedOut ? "TIMEOUT" : "ENGINE",
           phase: "engine",
-          message: `codex exited ${sub.exitCode ?? "?"}${typeof sub.stderr === "string" ? `: ${sub.stderr.slice(0, 300)}` : ""}`
+          message: `codex exited ${sub.exitCode ?? "?"}${typeof sub.stderr === "string" ? `: ${redactSecrets(sub.stderr.slice(0, 300))}` : ""}`
         });
       const usage = { inputTokens: 0, outputTokens: 0 };
       if (text) onEvent({ type: "text", delta: text });
@@ -55,6 +67,6 @@ ${req.prompt}` : req.prompt;
   }
 };
 
-export { CodexEngine };
-//# sourceMappingURL=codex-6I5UZ2HM.js.map
-//# sourceMappingURL=codex-6I5UZ2HM.js.map
+export { CodexEngine, buildCodexArgs };
+//# sourceMappingURL=codex-LYZF52WL.js.map
+//# sourceMappingURL=codex-LYZF52WL.js.map

package/dist/codex-LYZF52WL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/engines/codex.ts"],"names":[],"mappings":";;;;;;;AAyBO,SAAS,cAAA,CACd,GAAA,EACA,IAAA,EACA,OAAA,EACU;AACV,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,YAAA;AAChC,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,GAAS,CAAA,EAAG,IAAI,MAAM;;AAAA;;AAAA,EAAc,GAAA,CAAI,MAAM,CAAA,CAAA,GAAK,GAAA,CAAI,MAAA;AAC1E,EAAA,MAAM,OAAO,CAAC,MAAA,EAAQ,aAAA,EAAe,uBAAA,EAAyB,WAAW,OAAO,CAAA;AAEhF,EAAA,IAAI,IAAA,CAAK,mBAAmB,mBAAA,EAAqB;AAC/C,IAAA,IAAA,CAAK,KAAK,4CAA4C,CAAA;AAAA,EACxD,CAAA,MAAO;AACL,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,WAAW,CAAA;AAAA,EAC7B;AAEA,EAAA,IAAI,IAAI,GAAA,EAAK,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,IAAI,GAAG,CAAA;AACpC,EAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAChC,EAAA,IAAI,KAAK,OAAA,EAAS,MAAA,OAAa,IAAA,CAAK,GAAG,KAAK,OAAO,CAAA;AACnD,EAAA,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,MAAM,CAAA;AAC/B,EAAA,OAAO,IAAA;AACT;AAEO,IAAM,cAAN,MAAoC;AAAA,EAEzC,WAAA,CAA6B,IAAA,GAAsB,EAAC,EAAG;AAA1B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA2B;AAAA,EAA3B,IAAA;AAAA,EADpB,IAAA,GAAO,OAAA;AAAA,EAGhB,MAAM,GAAA,CACJ,GAAA,EACA,OAAA,EACA,MAAA,EACsB;AACtB,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,IAAA,CAAK,YAAA;AACrC,IAAA,MAAM,MAAM,WAAA,CAAY,IAAA,CAAK,MAAA,EAAO,EAAG,cAAc,CAAC,CAAA;AACtD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,EAAK,UAAU,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,cAAA,CAAe,GAAA,EAAK,IAAA,CAAK,MAAM,OAAO,CAAA;AAEnD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA,CAAM,KAAK,IAAA,CAAK,SAAA,IAAa,SAAS,IAAA,EAAM;AAAA,QAC5D,KAAA,EAAO,QAAA;AAAA;AAAA,QACP,YAAA,EAAc,MAAA;AAAA,QACd,mBAAA,EAAqB,GAAA;AAAA,QACrB,MAAA,EAAQ,KAAA;AAAA,QACR,SAAS,GAAA,CAAI;AAAA,OACd,CAAA;AACD,MAAA,IAAI,MAAA,CAAO,OAAA;AACT,QAAA,MAAM,IAAI,UAAU,EAAE,IAAA,EAAM,WAAW,KAAA,EAAO,QAAA,EAAU,OAAA,EAAS,mBAAA,EAAqB,CAAA;AAExF,MAAA,IAAI,IAAA,GAAO,EAAA;AACX,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,YAAA,CAAa,OAAA,EAAS,MAAM,CAAA,CAAE,IAAA,EAAK;AAAA,MAC5C,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,IAAI,CAAC,QAAQ,GAAA,CAAI,MAAA;AACf,QAAA,MAAM,IAAI,SAAA,CAAU;AAAA,UAClB,IAAA,EAAM,GAAA,CAAI,QAAA,GAAW,SAAA,GAAY,QAAA;AAAA,UACjC,KAAA,EAAO,QAAA;AAAA,UACP,OAAA,EAAS,gBAAgB,GAAA,CAAI,QAAA,IAAY,GAAG,CAAA,EAC1C,OAAO,IAAI,MAAA,KAAW,QAAA,GAAW,KAAK,aAAA,CAAc,GAAA,CAAI,OAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAC,KAAK,EACpF,CAAA;AAAA,SACD,CAAA;AAIH,MAAA,MAAM,KAAA,GAAQ,EAAE,WAAA,EAAa,CAAA,EAAG,cAAc,CAAA,EAAE;AAChD,MAAA,IAAI,MAAM,OAAA,CAAQ,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,MAAM,CAAA;AAC/C,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,OAAA,EAAS,OAAO,KAAA,EAAO,KAAA,IAAS,SAAS,CAAA;AACzD,MAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,OAAO,KAAA,IAAS,OAAA,EAAS,YAAY,UAAA,EAAW;AAAA,IACxE,CAAA,SAAE;AACA,MAAA,MAAA,CAAO,KAAK,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,IAC9C;AAAA,EACF;AACF","file":"codex-LYZF52WL.js","sourcesContent":["/**\n * Engine adapter: the `codex` CLI (GPT-5) as a non-interactive subprocess. The\n * point is a genuinely DIFFERENT model behind the same `Engine` seam — point any\n * reviewer at `engine: 'codex'` for a second-model adversarial signal, with no\n * bespoke integration. Read-only by default: a report-only reviewer never edits,\n * so the sandbox forbids writes and the run cannot touch the workspace.\n *\n * `codex exec` is non-interactive but blocks on an open stdin, so stdin is always\n * ignored; the final assistant message is captured via `-o <file>` rather than\n * scraped from the event stream.\n */\nimport { mkdtempSync, readFileSync, rmSync } from 'node:fs';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\nimport { execa } from 'execa';\nimport type {\n  AgentRequest,\n  AgentResult,\n  Engine,\n  EngineEventSink,\n  EngineOptions,\n} from './engine.ts';\nimport { LoopError } from '../core/errors.ts';\nimport { redactSecrets } from '../core/redact.ts';\n\nexport function buildCodexArgs(\n  req: AgentRequest,\n  opts: EngineOptions,\n  outFile: string,\n): string[] {\n  const model = req.model ?? opts.defaultModel;\n  const prompt = req.system ? `${req.system}\\n\\n---\\n\\n${req.prompt}` : req.prompt;\n  const args = ['exec', '--ephemeral', '--skip-git-repo-check', '--color', 'never'];\n\n  if (opts.permissionMode === 'bypassPermissions') {\n    args.push('--dangerously-bypass-approvals-and-sandbox');\n  } else {\n    args.push('-s', 'read-only');\n  }\n\n  if (req.cwd) args.push('-C', req.cwd);\n  if (model) args.push('-m', model);\n  if (opts.cliArgs?.length) args.push(...opts.cliArgs);\n  args.push('-o', outFile, prompt);\n  return args;\n}\n\nexport class CodexEngine implements Engine {\n  readonly name = 'codex';\n  constructor(private readonly opts: EngineOptions = {}) {}\n\n  async run(\n    req: AgentRequest,\n    onEvent: EngineEventSink,\n    signal: AbortSignal,\n  ): Promise<AgentResult> {\n    const model = req.model ?? this.opts.defaultModel;\n    const dir = mkdtempSync(join(tmpdir(), 'loops-codex-'));\n    const outFile = join(dir, 'last.txt');\n    const args = buildCodexArgs(req, this.opts, outFile);\n\n    try {\n      const sub = await execa(this.opts.cliBinary ?? 'codex', args, {\n        stdin: 'ignore', // codex exec stalls on an open stdin\n        cancelSignal: signal,\n        forceKillAfterDelay: 5000,\n        reject: false,\n        timeout: req.timeoutMs,\n      });\n      if (signal.aborted)\n        throw new LoopError({ code: 'ABORTED', phase: 'engine', message: 'codex run aborted' });\n\n      let text = '';\n      try {\n        text = readFileSync(outFile, 'utf8').trim();\n      } catch {\n        /* no final message written */\n      }\n      if (!text && sub.failed)\n        throw new LoopError({\n          code: sub.timedOut ? 'TIMEOUT' : 'ENGINE',\n          phase: 'engine',\n          message: `codex exited ${sub.exitCode ?? '?'}${\n            typeof sub.stderr === 'string' ? `: ${redactSecrets(sub.stderr.slice(0, 300))}` : ''\n          }`,\n        });\n\n      // codex bills a separate (GPT-5) account, so its tokens are out-of-band for\n      // the loops token budget — report zero rather than conflate providers.\n      const usage = { inputTokens: 0, outputTokens: 0 };\n      if (text) onEvent({ type: 'text', delta: text });\n      onEvent({ type: 'usage', usage, model: model ?? 'codex' });\n      return { text, usage, model: model ?? 'codex', stopReason: 'end_turn' };\n    } finally {\n      rmSync(dir, { recursive: true, force: true });\n    }\n  }\n}\n"]}

package/dist/env/command.d.ts

@@ -1,4 +1,4 @@
-import { W as Workspace, E as Environment } from '../types-B4wGVpqo.js';
+import { W as Workspace, E as Environment } from '../types-Cv_3ymr9.js';
 
 /**
  * `commandEnvironment` — a generic, CLI-driven Environment. Every IaC tool

package/dist/env/docker.d.ts

@@ -1,4 +1,4 @@
-import { W as Workspace, E as Environment } from '../types-B4wGVpqo.js';
+import { W as Workspace, E as Environment } from '../types-Cv_3ymr9.js';
 
 /**
  * `dockerEnvironment` — a local environment via Docker Compose, a thin preset

package/dist/env/sst.d.ts

@@ -1,4 +1,4 @@
-import { W as Workspace, E as Environment } from '../types-B4wGVpqo.js';
+import { W as Workspace, E as Environment } from '../types-Cv_3ymr9.js';
 import { Cmd } from './command.js';
 
 /**

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { renderPlan, jobMeta, run, exitCodeFor, loop, agentJob, agentCheck, bodyPassed, gateJob } from './chunk-3BPU34DE.js';
+import { jobMeta, renderPlan, listRuns, runsHome, readRunStatus, runEventsPath, formatEvent, run, exitCodeFor, loop, runSemanticRecordsPath, agentJob, agentCheck, bodyPassed, gateJob } from './chunk-WM5QVHM2.js';
 import './chunk-JFTXJ7I2.js';
-import './chunk-XC46B4FD.js';
+import './chunk-MA6NDQMO.js';
 import './chunk-Y2SD7GBL.js';
 import './chunk-I3STY7U6.js';
 import fs from 'fs';
@@ -474,6 +474,7 @@ async function execute(file, flags) {
     recordTo: flags.record,
     checkpoint: flags.checkpoint,
     resumeFrom: flags.resume,
+    supervise: flags.supervise,
     onLimit,
     maxWaitMs,
     resumeCommand
@@ -540,6 +541,67 @@ Paused at a limit. Resume with:
     );
   }
 }
+function relAge(ms2) {
+  const s = Math.max(0, Math.round(ms2 / 1e3));
+  if (s < 60) return `${s}s`;
+  const m = Math.round(s / 60);
+  if (m < 60) return `${m}m`;
+  const h = Math.round(m / 60);
+  if (h < 48) return `${h}h`;
+  return `${Math.round(h / 24)}d`;
+}
+function readSemanticRecords(runId) {
+  const path2 = runSemanticRecordsPath(runId);
+  if (!fs.existsSync(path2)) return void 0;
+  const raw = fs.readFileSync(path2, "utf8").trim();
+  if (!raw) return [];
+  const records = [];
+  for (const line of raw.split("\n")) {
+    try {
+      records.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  return records;
+}
+function parsePositiveIntFlag(value, flag) {
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0) {
+    throw new Error(`${flag} must be a positive integer, got "${value}"`);
+  }
+  return parsed;
+}
+function parseSinceFlag(value) {
+  const trimmed = value.trim();
+  if (/^\d+$/.test(trimmed)) return Number(trimmed);
+  const parsed = Date.parse(trimmed);
+  if (!Number.isFinite(parsed)) {
+    throw new Error(`--since must be epoch ms or an ISO timestamp, got "${value}"`);
+  }
+  return parsed;
+}
+function normalizeRecordPath(value) {
+  return value.split(/[\/›>]+/).map((part) => part.trim()).filter(Boolean).join("/");
+}
+function matchesRecordPath(record, prefix) {
+  const path2 = record.path.join("/");
+  return path2 === prefix || path2.startsWith(`${prefix}/`);
+}
+function formatSemanticRecord(record) {
+  const at = record.path.length ? `${record.path.join(" \u203A ")} ` : "";
+  switch (record.kind) {
+    case "dispatch":
+      return `${at}dispatch ${record.unit}${record.label ? ` ${record.label}` : ""}${record.node ? ` ${record.node}` : ""}`;
+    case "completion":
+      return `${at}completion ${record.unit}${record.label ? ` ${record.label}` : ""}: ${record.outcome.status}${record.outcome.summary ? ` \u2014 ${record.outcome.summary}` : ""}`;
+    case "surfacing":
+      return `${at}surfacing ${record.source} ${record.decision}${record.severity ? ` [${record.severity}]` : ""}: ${record.reason}`;
+    case "revision-emitted":
+      return `${at}revision emitted ${record.sourceEvent}${record.revision.target ? ` -> ${record.revision.target}` : ""}: ${record.revision.reason}`;
+    case "revision-routed":
+      return `${at}revision routed ${record.sourceEvent} ${record.decision}${record.revision.target ? ` -> ${record.revision.target}` : ""}: ${record.revision.reason}`;
+  }
+}
 async function main(argv = process.argv) {
   const program = new Command();
   program.name("loops").description(
@@ -553,7 +615,7 @@ async function main(argv = process.argv) {
     "read the worker prompt from a file (no-file mode)"
   ).option(
     "-e, --engine <name>",
-    "default engine: agent-sdk | claude-cli | anthropic-api"
+    "default engine: codex | agent-sdk | claude-cli | anthropic-api"
   ).option("--default-model <id>", "fallback model id for engines").option("--worker-model <id>", "model for the worker job").option(
     "--validator-model <id>",
     "small model for agent-validated conditions"
@@ -566,13 +628,13 @@ async function main(argv = process.argv) {
     "0.85"
   ).option("-i, --interval <dur>", "delay between iterations (e.g. 30s, 5m)").option("--max-tokens <n>", "max output tokens per agent turn").option("--api-key <key>", "Anthropic API key (anthropic-api engine)").option(
     "--cli-binary <path>",
-    "path to the claude binary (claude-cli engine)"
+    "path to a CLI engine binary"
   ).option(
     "--permission-mode <mode>",
-    "tool permission mode for claude-cli/agent-sdk (default | acceptEdits | bypassPermissions | plan | dontAsk | auto)"
+    "tool permission mode for CLI/SDK engines (default | acceptEdits | bypassPermissions | plan | dontAsk | auto)"
   ).option(
     "--engine-arg <arg>",
-    "extra arg forwarded to the claude-cli engine (repeatable)",
+    "extra arg forwarded to CLI-backed engines (repeatable)",
     (v, acc) => acc.concat(v),
     []
   ).option("--state <json>", "seed the shared run state (JSON)").option("--budget <tokens>", "cap total tokens (input+output) for the run").option("--record <path>", "append a JSONL run record to this path").option(
@@ -587,14 +649,25 @@ async function main(argv = process.argv) {
   ).option(
     "--max-wait <dur>",
     "cap an auto/wait limit-wait (e.g. 5m, 30s); default 5m"
-  ).option("--json", "emit NDJSON events to stdout (no TUI)").option("--no-tui", "plain line output instead of the Ink TUI").action(
+  ).option("--json", "emit NDJSON events to stdout (no TUI)").option("--no-tui", "plain line output instead of the Ink TUI").option(
+    "--supervise",
+    "register this run in ~/.loops/runs so `loops list`/`status`/`tail` can observe it from another process"
+  ).action(
     (file, flags) => execute(file, flags)
   );
   program.command("validate").argument("<file>", "a loop-definition file to check").description(
     "load a .loop.ts and print its shape without running it: the cheap, no-model pre-flight an agent runs before `loops run`"
-  ).action(async (file) => {
+  ).option("--json", "emit JSON with the loaded job shape").action(async (file, flags) => {
     const { job } = await loadJob(file);
-    const plan = renderPlan(jobMeta(job));
+    const shape = jobMeta(job);
+    if (flags.json) {
+      process.stdout.write(
+        `${JSON.stringify({ file, ok: true, executed: false, shape }, null, 2)}
+`
+      );
+      return;
+    }
+    const plan = renderPlan(shape);
     process.stdout.write(
       `\u2713 ${file} loads (not executed)
 ${plan.map((l) => `  ${l}`).join("\n")}
@@ -603,10 +676,175 @@ ${plan.map((l) => `  ${l}`).join("\n")}
   });
   program.command("describe").argument("<file>", "a loop-definition file").description(
     "print a loop's shape (its gate, body, and dag nodes) without running it"
-  ).action(async (file) => {
+  ).option("--json", "emit the job shape as JSON").action(async (file, flags) => {
     const { job } = await loadJob(file);
-    process.stdout.write(`${renderPlan(jobMeta(job)).join("\n")}
+    const shape = jobMeta(job);
+    process.stdout.write(
+      flags.json ? `${JSON.stringify(shape, null, 2)}
+` : `${renderPlan(shape).join("\n")}
+`
+    );
+  });
+  program.command("list").alias("ls").description("list supervised runs (start one with `loops run --supervise`)").action(() => {
+    const runs = listRuns();
+    if (!runs.length) {
+      process.stdout.write(
+        `no supervised runs in ${runsHome()}
+(start one with: loops run --supervise <file>)
+`
+      );
+      return;
+    }
+    for (const r of runs) {
+      const state = r.status === "running" ? r.alive ? "running" : "dead" : r.status;
+      const age = relAge(Date.now() - (r.endedAt ?? r.updatedAt));
+      process.stdout.write(
+        `${r.runId.padEnd(26)}  ${state.padEnd(9)}  iter ${String(r.live.iteration).padStart(3)}  ${age.padStart(4)}  ${r.title}
+`
+      );
+    }
+  });
+  program.command("status").argument("<runId>", "a run id from `loops list`").description("show a supervised run's live state and shape").action((runId) => {
+    const r = readRunStatus(runId);
+    if (!r) {
+      process.stderr.write(`no run "${runId}" in ${runsHome()}
 `);
+      process.exitCode = 1;
+      return;
+    }
+    const state = r.status === "running" ? r.alive ? "running" : "dead (process gone)" : r.status;
+    const g = r.live.lastGate;
+    const o = r.live.lastOutcome;
+    const lines = [
+      `${r.runId}  [${state}]`,
+      `  title:   ${r.title}`,
+      `  cwd:     ${r.cwd}`,
+      `  pid:     ${r.pid}`,
+      r.live.iteration ? `  at:      ${r.live.path.join(" \u203A ")} (iteration ${r.live.iteration})` : "",
+      g ? `  gate:    ${g.which} ${g.met ? "met" : "not met"}${g.confidence != null ? ` @ ${g.confidence.toFixed(2)}` : ""}: ${g.reason}` : "",
+      o ? `  last:    ${o.status}${o.summary ? `: ${o.summary}` : ""}` : "",
+      `  tokens:  ${r.live.usage.inputTokens} in / ${r.live.usage.outputTokens} out (${r.live.usage.calls} calls)`
+    ].filter(Boolean);
+    process.stdout.write(`${lines.join("\n")}
+`);
+    if (r.shape)
+      process.stdout.write(
+        `
+  shape:
+${renderPlan(r.shape).map((l) => `    ${l}`).join("\n")}
+`
+      );
+  });
+  program.command("tail").argument("<runId>", "a run id from `loops list`").description("stream a supervised run's events live (Ctrl-C to stop)").action(async (runId) => {
+    const path2 = runEventsPath(runId);
+    if (!fs.existsSync(path2)) {
+      process.stderr.write(`no run "${runId}" in ${runsHome()}
+`);
+      process.exitCode = 1;
+      return;
+    }
+    let offset = 0;
+    let stop = false;
+    const onSig = () => {
+      stop = true;
+    };
+    process.once("SIGINT", onSig);
+    for (; ; ) {
+      const buf = fs.readFileSync(path2, "utf8");
+      if (buf.length > offset) {
+        const chunk = buf.slice(offset);
+        const lastNl = chunk.lastIndexOf("\n");
+        if (lastNl >= 0) {
+          offset += lastNl + 1;
+          for (const line of chunk.slice(0, lastNl).split("\n")) {
+            if (!line.trim()) continue;
+            try {
+              process.stdout.write(`${formatEvent(JSON.parse(line))}
+`);
+            } catch {
+            }
+          }
+        }
+      }
+      if (stop) break;
+      const st = readRunStatus(runId);
+      if (st && st.status !== "running") {
+        process.stdout.write(`\u25C2 ${st.status}
+`);
+        break;
+      }
+      if (st && !st.alive) {
+        process.stdout.write("\u25C2 process gone (no terminal status)\n");
+        break;
+      }
+      await new Promise((res) => setTimeout(res, 200));
+    }
+    process.removeListener("SIGINT", onSig);
+  });
+  program.command("records").argument("<runId>", "a run id from `loops list`").description("show a supervised run's semantic records").option(
+    "--kind <kind>",
+    "filter by record kind: dispatch | completion | surfacing | revision-emitted | revision-routed | revision"
+  ).option("--path <path>", "filter by slash-separated record path prefix").option("--since <time>", "show records at or after an epoch ms or ISO timestamp").option("--last <n>", "show only the last n matching records").option("--json", "emit matching semantic records as JSONL").action((runId, flags) => {
+    const records = readSemanticRecords(runId);
+    if (!records) {
+      process.stderr.write(`no semantic records for run "${runId}" in ${runsHome()}
+`);
+      process.exitCode = 1;
+      return;
+    }
+    const validKinds = [
+      "dispatch",
+      "completion",
+      "surfacing",
+      "revision-emitted",
+      "revision-routed",
+      "revision"
+    ];
+    if (flags.kind && !validKinds.includes(flags.kind)) {
+      process.stderr.write(
+        `--kind must be one of ${validKinds.join(" | ")}, got "${flags.kind}"
+`
+      );
+      process.exitCode = 1;
+      return;
+    }
+    let pathPrefix;
+    if (flags.path != null) {
+      pathPrefix = normalizeRecordPath(flags.path);
+      if (!pathPrefix) {
+        process.stderr.write("--path must contain at least one path segment\n");
+        process.exitCode = 1;
+        return;
+      }
+    }
+    let since;
+    let last2;
+    try {
+      if (flags.since != null) since = parseSinceFlag(flags.since);
+      if (flags.last != null) last2 = parsePositiveIntFlag(flags.last, "--last");
+    } catch (e) {
+      process.stderr.write(`${e instanceof Error ? e.message : String(e)}
+`);
+      process.exitCode = 1;
+      return;
+    }
+    let filtered = flags.kind ? flags.kind === "revision" ? records.filter(
+      (r) => r.kind === "revision-emitted" || r.kind === "revision-routed"
+    ) : records.filter((r) => r.kind === flags.kind) : records;
+    if (pathPrefix) filtered = filtered.filter((r) => matchesRecordPath(r, pathPrefix));
+    if (since != null) filtered = filtered.filter((r) => r.ts >= since);
+    if (last2 != null) filtered = filtered.slice(-last2);
+    if (flags.json) {
+      for (const record of filtered) {
+        process.stdout.write(`${JSON.stringify(record)}
+`);
+      }
+      return;
+    }
+    for (const record of filtered) {
+      process.stdout.write(`${formatSemanticRecord(record)}
+`);
+    }
   });
   await program.parseAsync(argv);
 }