@lucascouts/claude-agent-tui 0.5.2 → 0.6.0

package/dist/image-vision-smoke.js

@@ -0,0 +1,111 @@
+// === Story 058 / Task 3.1 (R3.1, R3.2) — version-aware image-vision smoke (pure verdict + fail-loud) ==
+//
+// The whole "image input via @path" feature rests on a VERSION-FRAGILE claude behavior: a prompt
+// containing `@<path>` makes the native TUI invoke the Read tool, and Read vision-encodes the image so
+// the model can see it. This was PROVEN on claude 2.1.195 (story 058 research — two-arm proof: a blue
+// image vs a green image under the same filename, each correctly described). It did NOT work on claude
+// 2.1.170 (story 030): there, `@path` did not vision-encode, so an image prompt silently dropped its
+// picture.
+//
+// Because the behavior is version-fragile, this module makes a too-old / unknown `claude` LOUD instead
+// of silently dropping the image. It mirrors story 049's drift discipline:
+//   - the VERDICT is PURE (no I/O — like src/drift-checks.ts's `{surface, ok, detail}` checks), and
+//   - the REPORTER is best-effort + fail-loud one-liner (like src/claude-path.ts's reportVersionDrift,
+//     `[claude-path] …`); here the prefix is `[image-vision]`.
+//
+// CRITICAL — OBSERVABILITY ONLY, NEVER A GATE (R3.1): this smoke NEVER blocks the prompt and NEVER
+// touches `promptCapabilities.image`, which stays literally `image: true` (acp-agent.ts:1413),
+// UNCONDITIONALLY. The verdict's only output is `{confirmed, detail}` — there is deliberately NO field
+// or return shape here that could disable a capability. A too-old `claude` produces a WARNING, not a
+// degraded capability: the image still rides the @path delivery; we just warn that this `claude` is not
+// a version we have confirmed vision-encodes it.
+//
+// LIMITATION (documented honestly): this is an OFFLINE `>= anchor` version-gate. It catches too-old and
+// undetected/unparseable versions, but it CANNOT catch a *future regression* — a hypothetical 2.1.300
+// that re-breaks @path-vision would still parse as `>= 2.1.195` and report confirmed. Catching a future
+// regression needs the LIVE smoke (opt-in — story 058 R4 probe: actually send @image and check the
+// model saw it), which this offline gate intentionally does NOT implement.
+//
+// node:test runner: `node --experimental-strip-types --test test/image-vision-smoke.test.ts`
+/**
+ * The claude version where `@<path>` → Read-vision was PROVEN to work (story 058 research).
+ *
+ * WHY this exact anchor: on claude 2.1.170 a `@path` image prompt did NOT vision-encode the picture —
+ * the TUI did not turn it into a Read the model could see (story 030). On claude 2.1.195 it DOES: the
+ * two-arm proof (a blue vs a green image under the same uuid filename, each described correctly) showed
+ * `@path` → Read vision-encodes. So 2.1.195 is the earliest version we are willing to call "confirmed";
+ * anything below is treated as unconfirmed and warned about.
+ */
+export const VISION_CONFIRMED_CLAUDE_VERSION = "2.1.195";
+/**
+ * Compare two `x.y.z` semver strings: `true` iff `a >= b` componentwise (major, then minor, then patch).
+ *
+ * Splits on `.`, parses the three leading numeric components; a missing/non-numeric component counts as
+ * `0` (so `"2.1"` reads as `2.1.0`). Private to this module — exported only so the unit test can pin the
+ * ordering directly. Pure.
+ */
+export function versionGte(a, b) {
+    const partsA = a.split(".");
+    const partsB = b.split(".");
+    for (let i = 0; i < 3; i++) {
+        const na = toComponent(partsA[i]);
+        const nb = toComponent(partsB[i]);
+        if (na !== nb) {
+            return na > nb;
+        }
+    }
+    return true; // all three components equal → a >= b holds
+}
+/** Parse one semver component to a non-negative integer; missing / non-numeric → 0. */
+function toComponent(part) {
+    if (part === undefined) {
+        return 0;
+    }
+    const n = Number.parseInt(part, 10);
+    return Number.isNaN(n) ? 0 : n;
+}
+/** Matches a leading `x.y.z` triple — same shape parseClaudeVersion extracts (claude-path.ts:58). */
+const SEMVER_RE = /^(\d+\.\d+\.\d+)/;
+/**
+ * PURE verdict: is the running `claude` `version` one we have CONFIRMED vision-encodes `@image` via Read?
+ *
+ * `confirmed: true` IFF `version` is a parseable leading `x.y.z` that is `>= {@link
+ * VISION_CONFIRMED_CLAUDE_VERSION}`. In that case `detail` is a positive one-liner.
+ *
+ * Otherwise (`null` / `undefined` / unparseable, OR a parseable version BELOW the anchor) `confirmed:
+ * false` and `detail` is the fail-loud WARNING text — it NAMES the detected version (or "undetected")
+ * and the confirmed anchor, and states that the image is NOT blocked (R3.1). No I/O; depends only on
+ * its argument.
+ */
+export function imageVisionSmoke(version) {
+    const parsed = typeof version === "string" ? SEMVER_RE.exec(version) : null;
+    if (parsed && versionGte(parsed[1], VISION_CONFIRMED_CLAUDE_VERSION)) {
+        return {
+            confirmed: true,
+            detail: `claude ${parsed[1]} >= ${VISION_CONFIRMED_CLAUDE_VERSION} — @image is confirmed to vision-encode via Read`,
+        };
+    }
+    const named = parsed ? parsed[1] : "undetected";
+    return {
+        confirmed: false,
+        detail: `@image vision-encoding is UNCONFIRMED on this claude (detected ${named}; confirmed at ` +
+            `${VISION_CONFIRMED_CLAUDE_VERSION}+). Sending images anyway — image input is NOT blocked — but ` +
+            `if the picture is ignored, upgrade claude to ${VISION_CONFIRMED_CLAUDE_VERSION} or newer`,
+    };
+}
+/**
+ * Best-effort fail-loud reporter: compute {@link imageVisionSmoke} and, WHEN unconfirmed, log the
+ * verdict's `detail` EXACTLY ONCE via `log` with an `[image-vision]` prefix (mirrors claude-path.ts's
+ * reportVersionDrift `[claude-path] …` style). Returns the verdict.
+ *
+ * Logs NOTHING on a confirmed version (a confirmed `claude` is the expected case — no news is good news,
+ * matching reportVersionDrift which is silent when there is no drift). NEVER blocks and NEVER throws out
+ * of the caller's intent — it is pure aside from the single conditional `log` call (R3.1, R3.2).
+ */
+export function reportImageVisionSmoke(version, log = console.error) {
+    const result = imageVisionSmoke(version);
+    if (!result.confirmed) {
+        log(`[image-vision] ${result.detail}`);
+    }
+    return result;
+}

package/dist/index.js

@@ -88,6 +88,12 @@ else {
     // (src/live-subagent-env.ts) so the truth table is unit-checkable; threaded through
     // runAcp → AgentDeps → the agent.
     const liveSubagentWatch = liveSubagentWatchEnabled();
+    // Story 056 / Task 7 (R3.5): enable the live agent-discovery probe in PRODUCTION only. The probe
+    // (agent-catalog.ts) spawns `claude --agent <sentinel>` once per createSession to read `claude`'s
+    // canonical persona list (enabled plugins + built-ins) for the 4th `agent` selector. Gated opt-in so
+    // the unit suite — which imports modules directly without this flag — stays on the hermetic glob
+    // fallback and never spawns the real binary. `??=` keeps a user opt-out (`FORK_AGENT_PROBE=0`).
+    process.env.FORK_AGENT_PROBE ??= "1";
     const { connection, agent } = runAcp({ usageUpdate, gate, liveDiff, liveSubagentWatch });
     async function shutdown() {
         await agent.dispose().catch((err) => {

package/dist/mcp-config-writer.d.ts

@@ -0,0 +1,61 @@
+import type { McpServer } from "@agentclientprotocol/sdk";
+/**
+ * A single entry under claude's `--mcp-config` `mcpServers` map. A discriminated union over the
+ * transport claude understands:
+ *   - http/sse → `{ type, url, headers? }` (headers as a plain `{ [name]: value }` object)
+ *   - stdio    → `{ command, args?, env? }` (NO `type` — claude infers stdio from `command`)
+ * ACP-transport servers have no `--mcp-config` equivalent and are dropped before this shape.
+ */
+export type ClaudeMcpEntry = {
+    type: "http" | "sse";
+    url: string;
+    headers?: Record<string, string>;
+} | {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+};
+/** The full claude `--mcp-config` document: a name-keyed map of {@link ClaudeMcpEntry}. */
+export interface ClaudeMcpConfig {
+    mcpServers: Record<string, ClaudeMcpEntry>;
+}
+/**
+ * Translate the ACP `McpServer[]` union into claude's `--mcp-config` `{ mcpServers: { … } }` shape
+ * (R2.1). PURE and total — never throws; empty/undefined input yields `{ mcpServers: {} }`.
+ *
+ * Discriminator (per the ACP schema): `type === "http"|"sse"|"acp"` selects that transport; a server
+ * with NO `type` field is the bare stdio variant. Per-transport mapping:
+ *   - http / sse → `{ type, url, headers? }`; `headers` is OMITTED when the ACP array is empty.
+ *   - stdio      → `{ command, args?, env? }`; `args` and `env` are each OMITTED when empty; NO `type`.
+ *   - acp        → DROPPED (ACP-channel transport has no `--mcp-config` equivalent); a one-line note
+ *                  is emitted to stderr (no url/headers/env — R2.3).
+ *
+ * Duplicate names collapse onto the same key (last wins) — claude's map is name-keyed, so this matches
+ * how claude itself would resolve a repeated server name.
+ *
+ * @param servers the ACP-declared MCP servers, or `undefined`/`[]` when the client declared none.
+ * @returns the claude `--mcp-config` document (possibly with an empty `mcpServers`).
+ */
+export declare function translateMcpServers(servers: readonly McpServer[] | undefined): ClaudeMcpConfig;
+/**
+ * DURABLY write `config` to a fresh uuid-namespaced scratch file under the OS temp dir with mode
+ * `0600`, and RETURN its absolute path (R2.1, R2.3). The file is `JSON.stringify(config, null, 2)`
+ * plus a trailing newline. The caller passes the returned path to `claude --mcp-config <path>` and
+ * is responsible for removing it on teardown via {@link removeMcpScratch}.
+ *
+ * The file may carry MCP auth headers/env (secrets), so it is created owner-only (0600) and is NEVER
+ * logged here (R2.3).
+ *
+ * @param config the document from {@link translateMcpServers}.
+ * @returns the absolute path of the written scratch file.
+ * @throws {Error} if the durable write fails — the partial temp is cleaned up first (no residue).
+ */
+export declare function writeMcpScratch(config: ClaudeMcpConfig): Promise<string>;
+/**
+ * Idempotently remove a scratch file written by {@link writeMcpScratch} (R2.3 teardown). Uses
+ * `fs.rm(filePath, { force: true })`, so a missing/already-removed path is a no-op and NEVER throws.
+ *
+ * @param filePath the path returned by {@link writeMcpScratch}.
+ */
+export declare function removeMcpScratch(filePath: string): Promise<void>;
+//# sourceMappingURL=mcp-config-writer.d.ts.map

package/dist/mcp-config-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config-writer.d.ts","sourceRoot":"","sources":["../src/mcp-config-writer.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,SAAS,EAA2B,MAAM,0BAA0B,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACvE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAEvE,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,GAAG,eAAe,CA2C9F;AAqDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAK9E;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtE"}

package/dist/mcp-config-writer.js

@@ -0,0 +1,172 @@
+// Story 057 / Task 2.1 — translate ACP MCP servers → claude `--mcp-config` JSON + scratch-file seam.
+//
+// The fork spawns the real `claude` TUI; claude consumes externally-declared MCP servers via a
+// `--mcp-config <file.json>` flag (a `{ mcpServers: { <name>: { … } } }` document). The Zed client,
+// however, declares its MCP servers over ACP as a `McpServer[]` array (a discriminated union). This
+// module is the standalone, OFFLINE-testable translation + scratch-file seam between the two:
+//
+//   translateMcpServers(servers) → ClaudeMcpConfig   (PURE — array → claude `{mcpServers:{…}}` shape)
+//   writeMcpScratch(config)      → Promise<string>   (DURABLE 0600 write → returns the scratch path)
+//   removeMcpScratch(path)       → Promise<void>     (idempotent unlink on teardown)
+//
+// It owns NO engine wiring — the before-spawn `--mcp-config` plumbing into acp-agent.ts/the engine is
+// a separate Task (2.2/2.3). The scratch-JSON discipline (temp-file → fsync → atomic rename, with a
+// guaranteed 0600 mode) mirrors `gate/settings-writer.ts`'s private `durableWrite`; that pattern is
+// copied here rather than imported (it is not exported there).
+//
+// SECRETS (R2.3): the scratch file may carry MCP auth headers / env / URLs. Its mode is forced to
+// `0600` (owner-only) and it is removable on teardown. The config object, headers, env, and url are
+// NEVER logged — the ONLY log this module emits is a one-line note when an `acp`-transport server is
+// dropped, and that note carries no secret-bearing field.
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import * as os from "node:os";
+import { randomUUID } from "node:crypto";
+/** Convert an ACP `{name,value}[]` list into a plain `{ [name]: value }` object. */
+function pairsToObject(pairs) {
+    const out = {};
+    for (const { name, value } of pairs) {
+        out[name] = value;
+    }
+    return out;
+}
+/**
+ * Translate the ACP `McpServer[]` union into claude's `--mcp-config` `{ mcpServers: { … } }` shape
+ * (R2.1). PURE and total — never throws; empty/undefined input yields `{ mcpServers: {} }`.
+ *
+ * Discriminator (per the ACP schema): `type === "http"|"sse"|"acp"` selects that transport; a server
+ * with NO `type` field is the bare stdio variant. Per-transport mapping:
+ *   - http / sse → `{ type, url, headers? }`; `headers` is OMITTED when the ACP array is empty.
+ *   - stdio      → `{ command, args?, env? }`; `args` and `env` are each OMITTED when empty; NO `type`.
+ *   - acp        → DROPPED (ACP-channel transport has no `--mcp-config` equivalent); a one-line note
+ *                  is emitted to stderr (no url/headers/env — R2.3).
+ *
+ * Duplicate names collapse onto the same key (last wins) — claude's map is name-keyed, so this matches
+ * how claude itself would resolve a repeated server name.
+ *
+ * @param servers the ACP-declared MCP servers, or `undefined`/`[]` when the client declared none.
+ * @returns the claude `--mcp-config` document (possibly with an empty `mcpServers`).
+ */
+export function translateMcpServers(servers) {
+    const mcpServers = {};
+    if (!servers) {
+        return { mcpServers };
+    }
+    for (const server of servers) {
+        // The ACP union is NOT a uniform discriminated union: http/sse/acp carry a `type` tag, but the
+        // stdio variant has NO `type` field at all. So a `"type" in server` guard (not `server.type`)
+        // first splits the tagged members from the bare stdio variant; within the tagged set, `type`
+        // then selects http/sse vs acp.
+        if ("type" in server) {
+            if (server.type === "http" || server.type === "sse") {
+                const entry = { type: server.type, url: server.url };
+                if (server.headers.length > 0) {
+                    entry.headers = pairsToObject(server.headers);
+                }
+                mcpServers[server.name] = entry;
+            }
+            else {
+                // type === "acp": ACP-transport servers ride the ACP channel (mcp/connect…); claude's
+                // --mcp-config cannot express them, so drop. Log ONLY the (non-secret) name — never
+                // id/url/headers/env (R2.3).
+                console.error(`[mcp-config-writer] dropping ACP-transport MCP server ${JSON.stringify(server.name)}: ` +
+                    `no --mcp-config equivalent (ACP-channel transport is not supported by the claude CLI).`);
+            }
+            continue;
+        }
+        // No `type` field → the bare stdio variant: `{ command, args, env }`. NO `type` is emitted
+        // (claude infers stdio from `command`); empty `args`/`env` are omitted.
+        const entry = { command: server.command };
+        if (server.args.length > 0) {
+            entry.args = [...server.args];
+        }
+        if (server.env.length > 0) {
+            entry.env = pairsToObject(server.env);
+        }
+        mcpServers[server.name] = entry;
+    }
+    return { mcpServers };
+}
+/**
+ * Durably write `text` to `filePath` with mode `0600` via a temp-file → fsync → atomic `rename` so a
+ * reader (claude on startup) never observes a partial file. The 0600 mode is GUARANTEED twice: the
+ * temp is created with `mode: 0o600`, and `chmod(0o600)` is re-applied after the rename so a permissive
+ * umask cannot loosen it. On any failure the partial temp is removed before the error propagates.
+ *
+ * Mirrors `gate/settings-writer.ts`'s private `durableWrite` (copied — that helper is not exported),
+ * with the added 0600 guarantee this scratch file requires (R2.3).
+ */
+async function durableWrite0600(filePath, text) {
+    const dir = path.dirname(filePath);
+    const tmp = path.join(dir, `.${path.basename(filePath)}.fork-tmp-${process.pid}-${Date.now()}`);
+    let handle = null;
+    try {
+        // Create the temp owner-only from the outset so its bytes are never world-readable, even briefly.
+        handle = await fs.open(tmp, "w", 0o600);
+        await handle.writeFile(text, "utf8");
+        await handle.sync(); // flush the file's own bytes to disk before the rename
+        await handle.close();
+        handle = null;
+        await fs.rename(tmp, filePath); // atomic swap into place
+        // Re-assert 0600 AFTER the rename so the active umask cannot have loosened the open() mode.
+        await fs.chmod(filePath, 0o600);
+        // Best-effort fsync of the directory entry so the rename itself is durable.
+        try {
+            const dirHandle = await fs.open(dir, "r");
+            try {
+                await dirHandle.sync();
+            }
+            finally {
+                await dirHandle.close();
+            }
+        }
+        catch {
+            // Some platforms reject O_RDONLY dir fsync; the file fsync above is the load-bearing one.
+        }
+    }
+    catch (err) {
+        if (handle !== null) {
+            try {
+                await handle.close();
+            }
+            catch {
+                // ignore
+            }
+        }
+        try {
+            await fs.rm(tmp, { force: true });
+        }
+        catch {
+            // ignore — nothing durable to clean
+        }
+        throw err;
+    }
+}
+/**
+ * DURABLY write `config` to a fresh uuid-namespaced scratch file under the OS temp dir with mode
+ * `0600`, and RETURN its absolute path (R2.1, R2.3). The file is `JSON.stringify(config, null, 2)`
+ * plus a trailing newline. The caller passes the returned path to `claude --mcp-config <path>` and
+ * is responsible for removing it on teardown via {@link removeMcpScratch}.
+ *
+ * The file may carry MCP auth headers/env (secrets), so it is created owner-only (0600) and is NEVER
+ * logged here (R2.3).
+ *
+ * @param config the document from {@link translateMcpServers}.
+ * @returns the absolute path of the written scratch file.
+ * @throws {Error} if the durable write fails — the partial temp is cleaned up first (no residue).
+ */
+export async function writeMcpScratch(config) {
+    const filePath = path.join(os.tmpdir(), `fork-acp-mcp-${randomUUID()}.json`);
+    const text = `${JSON.stringify(config, null, 2)}\n`;
+    await durableWrite0600(filePath, text);
+    return filePath;
+}
+/**
+ * Idempotently remove a scratch file written by {@link writeMcpScratch} (R2.3 teardown). Uses
+ * `fs.rm(filePath, { force: true })`, so a missing/already-removed path is a no-op and NEVER throws.
+ *
+ * @param filePath the path returned by {@link writeMcpScratch}.
+ */
+export async function removeMcpScratch(filePath) {
+    await fs.rm(filePath, { force: true });
+}

package/dist/model-catalog.d.ts

@@ -1,9 +1,36 @@
 import type { ModelInfo } from "@anthropic-ai/claude-agent-sdk";
+/**
+ * Effort levels offered for reasoning-capable models — the SDK's `supportedEffortLevels` vocabulary.
+ * Story 060: exported so the ultracode guard test can assert membership stays the five real levels
+ * (it must NEVER contain {@link ULTRACODE_EFFORT}; the real `--effort` enum is exactly this set).
+ */
+export declare const REASONING_EFFORT_LEVELS: NonNullable<ModelInfo["supportedEffortLevels"]>;
+/**
+ * Story 060 — the "ultracode" pseudo-level sentinel for the effort selector. NOT a real `--effort`
+ * value (claude 2.1.195 rejects `--effort ultracode`; the enum stays {@link REASONING_EFFORT_LEVELS}).
+ * Selecting it maps to `--effort xhigh` PLUS activating the ultracode keyword-trigger for the session
+ * (story 060 Task 3). Kept OUT of REASONING_EFFORT_LEVELS so no real-effort code path ever emits it.
+ */
+export declare const ULTRACODE_EFFORT = "ultracode";
+/** The real effort level the ultracode pseudo-level maps to (its documented effort component). */
+export declare const ULTRACODE_EFFORT_LEVEL = "xhigh";
+/** Selector label — makes clear it is xhigh + orchestration, NOT a duplicate of the plain `xhigh` entry. */
+export declare const ULTRACODE_EFFORT_LABEL = "ultracode (xhigh + orchestration)";
 /**
  * The static curated catalog advertised to the Zed Agent Panel's `model` selector. Each `value` is a
  * `claude` TUI alias accepted by `/model <alias>` (live) and `--model <alias>` (spawn). `default` is
- * first and is the safe fallback. Effort-capable models (`sonnet`, `opus`) carry the metadata that
- * surfaces the effort selector; `default`/`haiku`/`opusplan` advertise no effort levels.
+ * first and is the safe fallback.
+ *
+ * ORDER + membership mirror the ORIGINAL's `/model` picker, LIVE-VERIFIED against 2.1.195 (PTY probe):
+ * `Default (recommended)`, `Opus`, `Sonnet`, `Sonnet (1M context)`, `Haiku`. The original gets this
+ * from the SDK `supportedModels()` the fork cut, so we curate it statically. The 1M alias is literally
+ * `sonnet[1m]` (`/model sonnet[1m]` accepted; `sonnet-1m` → "not found"). `opusplan` is a fork-only
+ * EXTRA (a real `claude` plan-mode preset the original does not list) kept as the trailing entry.
+ *
+ * Effort-capable models (`default`/`opus`/`sonnet`/`sonnet[1m]`) carry `supportsEffort` +
+ * `supportedEffortLevels`; `haiku`/`opusplan` advertise none. `supportsAutoMode: true` on the same four
+ * surfaces the `auto` permission mode (a model classifier) — the original drops `auto` on `haiku`
+ * (the SDK signal `reconcileModeFromTranscript` clamps), so haiku/opusplan omit it.
  */
 export declare const MODEL_CATALOG: ModelInfo[];
 /** The safe fallback entry, kept as a named export so callers can seed/anchor on it without a lookup. */

package/dist/model-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../src/model-catalog.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAShE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EA8BpC,CAAC;AAEF,yGAAyG;AACzG,eAAO,MAAM,kBAAkB,EAAE,SAA4B,CAAC"}
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../src/model-catalog.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAMnF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAE5C,kGAAkG;AAClG,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C,4GAA4G;AAC5G,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAE1E;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EA6CpC,CAAC;AAEF,yGAAyG;AACzG,eAAO,MAAM,kBAAkB,EAAE,SAA4B,CAAC"}

package/dist/model-catalog.js

@@ -1,20 +1,58 @@
-/** Effort levels offered for reasoning-capable models — the SDK's `supportedEffortLevels` vocabulary. */
-const REASONING_EFFORT_LEVELS = [
+/**
+ * Effort levels offered for reasoning-capable models — the SDK's `supportedEffortLevels` vocabulary.
+ * Story 060: exported so the ultracode guard test can assert membership stays the five real levels
+ * (it must NEVER contain {@link ULTRACODE_EFFORT}; the real `--effort` enum is exactly this set).
+ */
+export const REASONING_EFFORT_LEVELS = [
     "low",
     "medium",
     "high",
+    "xhigh",
+    "max",
 ];
+/**
+ * Story 060 — the "ultracode" pseudo-level sentinel for the effort selector. NOT a real `--effort`
+ * value (claude 2.1.195 rejects `--effort ultracode`; the enum stays {@link REASONING_EFFORT_LEVELS}).
+ * Selecting it maps to `--effort xhigh` PLUS activating the ultracode keyword-trigger for the session
+ * (story 060 Task 3). Kept OUT of REASONING_EFFORT_LEVELS so no real-effort code path ever emits it.
+ */
+export const ULTRACODE_EFFORT = "ultracode";
+/** The real effort level the ultracode pseudo-level maps to (its documented effort component). */
+export const ULTRACODE_EFFORT_LEVEL = "xhigh";
+/** Selector label — makes clear it is xhigh + orchestration, NOT a duplicate of the plain `xhigh` entry. */
+export const ULTRACODE_EFFORT_LABEL = "ultracode (xhigh + orchestration)";
 /**
  * The static curated catalog advertised to the Zed Agent Panel's `model` selector. Each `value` is a
  * `claude` TUI alias accepted by `/model <alias>` (live) and `--model <alias>` (spawn). `default` is
- * first and is the safe fallback. Effort-capable models (`sonnet`, `opus`) carry the metadata that
- * surfaces the effort selector; `default`/`haiku`/`opusplan` advertise no effort levels.
+ * first and is the safe fallback.
+ *
+ * ORDER + membership mirror the ORIGINAL's `/model` picker, LIVE-VERIFIED against 2.1.195 (PTY probe):
+ * `Default (recommended)`, `Opus`, `Sonnet`, `Sonnet (1M context)`, `Haiku`. The original gets this
+ * from the SDK `supportedModels()` the fork cut, so we curate it statically. The 1M alias is literally
+ * `sonnet[1m]` (`/model sonnet[1m]` accepted; `sonnet-1m` → "not found"). `opusplan` is a fork-only
+ * EXTRA (a real `claude` plan-mode preset the original does not list) kept as the trailing entry.
+ *
+ * Effort-capable models (`default`/`opus`/`sonnet`/`sonnet[1m]`) carry `supportsEffort` +
+ * `supportedEffortLevels`; `haiku`/`opusplan` advertise none. `supportsAutoMode: true` on the same four
+ * surfaces the `auto` permission mode (a model classifier) — the original drops `auto` on `haiku`
+ * (the SDK signal `reconcileModeFromTranscript` clamps), so haiku/opusplan omit it.
  */
 export const MODEL_CATALOG = [
     {
         value: "default",
-        displayName: "Default",
-        description: "Use the model the claude TUI is configured with (safe fallback).",
+        displayName: "Default (recommended)",
+        description: "Use the model the claude TUI is configured with (safe fallback); supports reasoning effort.",
+        supportsEffort: true,
+        supportedEffortLevels: REASONING_EFFORT_LEVELS,
+        supportsAutoMode: true,
+    },
+    {
+        value: "opus",
+        displayName: "Opus",
+        description: "Claude Opus — highest capability; supports reasoning effort.",
+        supportsEffort: true,
+        supportedEffortLevels: REASONING_EFFORT_LEVELS,
+        supportsAutoMode: true,
     },
     {
         value: "sonnet",
@@ -22,13 +60,15 @@ export const MODEL_CATALOG = [
         description: "Claude Sonnet — balanced speed and capability; supports reasoning effort.",
         supportsEffort: true,
         supportedEffortLevels: REASONING_EFFORT_LEVELS,
+        supportsAutoMode: true,
     },
     {
-        value: "opus",
-        displayName: "Opus",
-        description: "Claude Opus — highest capability; supports reasoning effort.",
+        value: "sonnet[1m]",
+        displayName: "Sonnet (1M context)",
+        description: "Claude Sonnet with a 1M-token context window; draws from usage credits; supports reasoning effort.",
         supportsEffort: true,
         supportedEffortLevels: REASONING_EFFORT_LEVELS,
+        supportsAutoMode: true,
     },
     {
         value: "haiku",
@@ -38,7 +78,7 @@ export const MODEL_CATALOG = [
     {
         value: "opusplan",
         displayName: "Opus Plan",
-        description: "Opus while planning, Sonnet for execution (plan-mode workflow).",
+        description: "Opus while planning, Sonnet for execution (plan-mode workflow; fork extra).",
     },
 ];
 /** The safe fallback entry, kept as a named export so callers can seed/anchor on it without a lookup. */

package/dist/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,gCAAgC,CAAC;AA0BxC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;QAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC7E;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAa;IAC9B,OAAO,CAAC,MAAM,CAAqE;IACnF,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,WAAW,CAA8B;gBAErC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB;IAMzD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBjC;;;OAGG;IACH,OAAO,CAAC,eAAe;IASvB;;;OAGG;YACW,eAAe;IAU7B;;OAEG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;OAEG;IACH,WAAW,IAAI,QAAQ;IAIvB;;OAEG;IACH,MAAM,IAAI,MAAM;IAIhB;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxC;;OAEG;IACH,OAAO,IAAI,IAAI;CAehB"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,gCAAgC,CAAC;AA0BxC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;QAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC7E;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAa;IAC9B,OAAO,CAAC,MAAM,CAAqE;IACnF,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,WAAW,CAA8B;gBAErC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB;IAMzD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBjC;;;OAGG;IACH,OAAO,CAAC,eAAe;IASvB;;;OAGG;YACW,eAAe;IAU7B;;OAEG;IACH,OAAO,CAAC,aAAa;IAgCrB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;IACH,WAAW,IAAI,QAAQ;IAIvB;;OAEG;IACH,MAAM,IAAI,MAAM;IAIhB;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxC;;OAEG;IACH,OAAO,IAAI,IAAI;CAehB"}

package/dist/settings.js

@@ -106,6 +106,13 @@ export class SettingsManager {
                             this.handleSettingsChange();
                         }
                     });
+                    // Story 059: a best-effort settings watcher must NOT keep the Node event loop alive on its
+                    // own. A settingsManager that escapes dispose() (an initialize/re-spawn race — see the
+                    // pre-existing-leak note in acp-agent.ts createSession) otherwise leaves a live fs.watch
+                    // handle that hangs `node:test` on process exit (the live ACP process is held open by its
+                    // stdio, never by this watcher). unref() detaches it from the loop's keep-alive set while
+                    // leaving the subscription fully functional.
+                    watcher.unref?.();
                     watcher.on("error", (error) => {
                         this.logger.error(`Settings watcher error for ${filePath}:`, error);
                     });
@@ -139,6 +146,8 @@ export class SettingsManager {
                 this.logger.error("Failed to reload settings:", error);
             }
         }, 100);
+        // Story 059: same rationale as the watcher unref — a pending debounce timer must not block exit.
+        this.debounceTimer?.unref?.();
     }
     /**
      * Returns the current merged settings

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACT,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAQL,eAAe,EACf,gBAAgB,EAChB,eAAe,EAIhB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAGL,oBAAoB,EAEpB,6BAA6B,EAE9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,yCAAyC,EAGzC,qCAAqC,EAGrC,kCAAkC,EAGlC,+CAA+C,EAI/C,wBAAwB,EACxB,kCAAkC,EAIlC,gCAAgC,EAEhC,iCAAiC,EAClC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AA0BxC,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,UAAU,UAAU;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE;QACN,aAAa,CAAC,EAAE;YACd,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,eAAe,CAAC,EAAE;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC;SACd,CAAC;QACF,aAAa,CAAC,EAAE;YACd,WAAW,EAAE,MAAM,CAAC;YACpB,SAAS,EAAE,MAAM,CAAC;YAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;SACvB,CAAC;KACH,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAQpE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,MAAM,CAER;AAED,kFAAkF;AAClF,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,UAAU,EACnB,sBAAsB,GAAE,OAAe,EACvC,GAAG,CAAC,EAAE,MAAM,GACX,QAAQ,CAgUV;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EACN,oBAAoB,GACpB,wBAAwB,GACxB,iCAAiC,GACjC,gCAAgC,GAChC,6BAA6B,GAC7B,qCAAqC,GACrC,yCAAyC,GACzC,+CAA+C,GAC/C,kCAAkC,GAClC,kCAAkC,EACtC,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACtC,sBAAsB,GAAE,OAAe,GACtC,UAAU,CA6HZ;AA0GD,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;IAChD,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,eAAe,EAAE,CAAA;CAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAMxF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AACF,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAiCpF;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,IAAI,CASN;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAiB1F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,CAMpE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQnD;AAeD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,OAAO,GAAG;IACrE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAoCA;AAcD,eAAO,MAAM,oBAAoB,GAC/B,WAAW,MAAM,EACjB,wBAEG;IACD,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,OAAO,EAClB,YAAY,EAAE,OAAO,KAClB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,SAKF,CAAC;AAGF,eAAO,MAAM,qBAAqB,GAE9B,SAAQ,MAAgB,EACxB,UAAU;IACR,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,KACA,YAoBF,CAAC;AAEJ;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GACxB,SAAS;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,KAAG,YAsBpE,CAAC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACT,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAQL,eAAe,EACf,gBAAgB,EAChB,eAAe,EAIhB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAGL,oBAAoB,EAEpB,6BAA6B,EAE9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,yCAAyC,EAGzC,qCAAqC,EAGrC,kCAAkC,EAGlC,+CAA+C,EAI/C,wBAAwB,EACxB,kCAAkC,EAIlC,gCAAgC,EAEhC,iCAAiC,EAClC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AA0BxC,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,UAAU,UAAU;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE;QACN,aAAa,CAAC,EAAE;YACd,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,eAAe,CAAC,EAAE;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC;SACd,CAAC;QACF,aAAa,CAAC,EAAE;YACd,WAAW,EAAE,MAAM,CAAC;YACpB,SAAS,EAAE,MAAM,CAAC;YAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;SACvB,CAAC;KACH,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAQpE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,MAAM,CAER;AAED,kFAAkF;AAClF,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,UAAU,EACnB,sBAAsB,GAAE,OAAe,EACvC,GAAG,CAAC,EAAE,MAAM,GACX,QAAQ,CAgUV;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EACN,oBAAoB,GACpB,wBAAwB,GACxB,iCAAiC,GACjC,gCAAgC,GAChC,6BAA6B,GAC7B,qCAAqC,GACrC,yCAAyC,GACzC,+CAA+C,GAC/C,kCAAkC,GAClC,kCAAkC,EACtC,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACtC,sBAAsB,GAAE,OAAe,GACtC,UAAU,CAiIZ;AA0GD,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;IAChD,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,eAAe,EAAE,CAAA;CAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAMxF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AACF,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAiCpF;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,IAAI,CASN;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAiB1F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,CAMpE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQnD;AAeD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,OAAO,GAAG;IACrE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAoCA;AAcD,eAAO,MAAM,oBAAoB,GAC/B,WAAW,MAAM,EACjB,wBAEG;IACD,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,OAAO,EAClB,YAAY,EAAE,OAAO,KAClB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,SAKF,CAAC;AAGF,eAAO,MAAM,qBAAqB,GAE9B,SAAQ,MAAgB,EACxB,UAAU;IACR,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,KACA,YAoBF,CAAC;AAEJ;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GACxB,SAAS;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,KAAG,YAsBpE,CAAC"}

package/dist/tools.js

@@ -325,7 +325,11 @@ export function toolUpdateFromToolResult(toolResult, toolUse, supportsTerminalOu
     if ("is_error" in toolResult &&
         toolResult.is_error &&
         toolResult.content &&
-        toolResult.content.length > 0) {
+        toolResult.content.length > 0 &&
+        // Story 056 (#776): a FAILED Bash with a negotiated terminal must still render as terminal
+        // output (terminal_output + terminal_exit exit_code 1 via `case "Bash"`), not markdown — so it
+        // is excluded from this error-only early-return. Every other errored result is unchanged.
+        !(toolUse?.name === "Bash" && supportsTerminalOutput)) {
         // Only return errors
         return toAcpContentUpdate(toolResult.content, true);
     }

package/dist/usage.d.ts

@@ -32,6 +32,9 @@ export interface UsageOptions {
  *   • R3.1 — the optional `cost` field is INTENTIONALLY OMITTED and must NEVER be fabricated:
  *     the JSONL usage block carries only token counts, and `cost` is optional in the Zed v1 struct,
  *     so omitting it is contract-correct (an invented cost would violate §1 "never fabricate").
+ *     Story 059 EVIDENCE (2026-06-28): an audit of 5169 local transcripts found 0 carrying
+ *     `total_cost_usd` as a JSON key — it lives only in the SDK `result` envelope (`claude -p`), never
+ *     in the interactive PTY+tail JSONL mapped here (the 68 substring hits were all conversation text).
  */
 export declare function toUsageUpdate(message: UsageCarrier, options?: UsageOptions): UsageUpdateNotification | undefined;
 export interface UsageFlagOptions extends UsageOptions {

package/dist/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,iFAAiF;AACjF,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,aAAa,EAAE;IAAE,aAAa,EAAE,cAAc,CAAA;CAAE,CAAC,CAAC;AAEhG,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAChF;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,YAAiB,GACzB,uBAAuB,GAAG,SAAS,CAUrC;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,wFAAwF;IACxF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,gBAAqB,GAC7B,uBAAuB,EAAE,CAI3B"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,iFAAiF;AACjF,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,aAAa,EAAE;IAAE,aAAa,EAAE,cAAc,CAAA;CAAE,CAAC,CAAC;AAEhG,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAChF;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,YAAiB,GACzB,uBAAuB,GAAG,SAAS,CAUrC;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,wFAAwF;IACxF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,gBAAqB,GAC7B,uBAAuB,EAAE,CAI3B"}

package/dist/usage.js

@@ -22,6 +22,9 @@
  *   • R3.1 — the optional `cost` field is INTENTIONALLY OMITTED and must NEVER be fabricated:
  *     the JSONL usage block carries only token counts, and `cost` is optional in the Zed v1 struct,
  *     so omitting it is contract-correct (an invented cost would violate §1 "never fabricate").
+ *     Story 059 EVIDENCE (2026-06-28): an audit of 5169 local transcripts found 0 carrying
+ *     `total_cost_usd` as a JSON key — it lives only in the SDK `result` envelope (`claude -p`), never
+ *     in the interactive PTY+tail JSONL mapped here (the 68 substring hits were all conversation text).
  */
 export function toUsageUpdate(message, options = {}) {
     const input = message.usage?.input_tokens;

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.5.2",
+  "version": "0.6.0",
   "description": "Run the official Claude Code TUI in Zed's agent panel on your Claude Pro/Max subscription — an ACP-over-PTY bridge created for Anthropic's billing split (paused June 15; see README).",
   "main": "dist/lib.js",
   "types": "dist/lib.d.ts",
@@ -60,20 +60,20 @@
   "author": "lucascouts",
   "license": "Apache-2.0",
   "dependencies": {
-    "@agentclientprotocol/sdk": "0.28.1",
-    "@anthropic-ai/claude-agent-sdk": "0.3.183",
+    "@agentclientprotocol/sdk": "1.0.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.191",
     "node-pty": "1.1.0",
     "zod": "^3.25.0 || ^4.0.0"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "0.105.0",
+    "@anthropic-ai/sdk": "0.106.0",
     "@eslint/js": "10.0.1",
-    "@types/node": "26.0.0",
-    "@typescript-eslint/eslint-plugin": "8.61.1",
-    "@typescript-eslint/parser": "8.61.1",
+    "@types/node": "26.0.1",
+    "@typescript-eslint/eslint-plugin": "8.62.0",
+    "@typescript-eslint/parser": "8.62.0",
     "eslint": "10.5.0",
     "eslint-config-prettier": "10.1.8",
-    "globals": "17.6.0",
+    "globals": "17.7.0",
     "prettier": "3.8.4",
     "ts-node": "10.9.2",
     "typescript": "6.0.3"