@mcpbridgeapp/cli 0.0.0-stage → 0.1.1

package/dist/agents/openai.js

@@ -0,0 +1,168 @@
+import { effectiveTimeout, failed, truncate } from './types.js';
+/**
+ * An agent reached over an OpenAI-compatible chat-completions API.
+ *
+ * <p>This is the only door some providers leave open — xAI publishes no CLI, so Grok is
+ * reachable this way or not at all. One adapter serves all of them because the request
+ * shape is the same; only the base URL, model and key change.
+ *
+ * <p>The key is never put in a result, a note or a log: errors quote the provider's
+ * message, never the request.
+ */
+export class OpenAiAgent {
+    name;
+    config;
+    maxOutputChars;
+    requires;
+    // an HTTP model sees only what the prompt carries
+    readsFiles = false;
+    writesFiles = false;
+    runsCommands = false;
+    get timeoutMs() {
+        return this.config.timeoutMs ?? 300_000;
+    }
+    constructor(name, config, maxOutputChars) {
+        this.name = name;
+        this.config = config;
+        this.maxOutputChars = maxOutputChars;
+        if (!config.baseUrl)
+            throw new Error(`agent "${name}": baseUrl is required`);
+        this.requires = this.endpoint;
+    }
+    get endpoint() {
+        return `${this.config.baseUrl.replace(/\/$/, '')}/chat/completions`;
+    }
+    get description() {
+        const model = this.config.model ?? 'no model set';
+        return `${this.config.description ?? 'A model over an OpenAI-compatible API'} (${model})`;
+    }
+    /** Resolved at call time, so a key exported after startup is picked up. */
+    key() {
+        if (this.config.apiKeyEnv)
+            return process.env[this.config.apiKeyEnv] || undefined;
+        return this.config.apiKey || undefined;
+    }
+    missingKeyDetail() {
+        return this.config.apiKeyEnv
+            ? `no API key: set the ${this.config.apiKeyEnv} environment variable`
+            : `no API key: add "apiKeyEnv" naming an environment variable that holds one`;
+    }
+    async probe() {
+        if (!this.key()) {
+            return { available: false, detail: this.missingKeyDetail() };
+        }
+        // a key alone does not prove the endpoint answers, and /models is optional on some
+        // providers, so a refusal there is not treated as a failure
+        const models = await this.listModels();
+        if (!this.config.model) {
+            return {
+                available: false,
+                detail: models?.length
+                    ? `no model set. This endpoint offers: ${models.slice(0, 10).join(', ')}`
+                    : 'no model set — add "model" with an id from the provider\'s documentation',
+            };
+        }
+        if (models === null) {
+            return { available: true, detail: `key set for ${this.config.model}; endpoint not verified` };
+        }
+        if (models.length > 0 && !models.includes(this.config.model)) {
+            return {
+                available: false,
+                detail: `the endpoint does not list "${this.config.model}". Available: ${models.slice(0, 8).join(', ')}`,
+            };
+        }
+        return { available: true, detail: `${this.config.model} available at ${this.config.baseUrl}` };
+    }
+    async run(prompt, options) {
+        const started = Date.now();
+        const key = this.key();
+        if (!key)
+            return failed(this.name, this.missingKeyDetail(), Date.now() - started);
+        if (!this.config.model) {
+            return failed(this.name, `no model set for "${this.name}". Add "model" to its config; run \`mcpbridgeapp --agents\` to ` +
+                `see what this endpoint offers.`, Date.now() - started);
+        }
+        const note = options.cwd
+            ? `workingDirectory (${options.cwd}) was ignored: ${this.name} is a model behind an HTTP ` +
+                `API and cannot read files. Inline what it should see in the prompt, or delegate to an ` +
+                `agent that list_agents reports with "readsFiles": true.`
+            : '';
+        const timeoutMs = effectiveTimeout(this.config.timeoutMs, options);
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const response = await fetch(this.endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Authorization: `Bearer ${key}`,
+                    ...(this.config.headers ?? {}),
+                },
+                body: JSON.stringify({
+                    model: this.config.model,
+                    messages: [{ role: 'user', content: prompt }],
+                    stream: false,
+                    ...(this.config.maxOutputTokens ? { max_tokens: this.config.maxOutputTokens } : {}),
+                }),
+                signal: controller.signal,
+            });
+            const payload = (await response.json().catch(() => ({})));
+            if (!response.ok) {
+                const reason = payload.error?.message ?? `HTTP ${response.status}`;
+                return failed(this.name, response.status === 401 || response.status === 403
+                    ? `the API key was rejected (${reason}). Check ${this.config.apiKeyEnv ?? 'the configured key'}.`
+                    : `${this.name} returned ${response.status}: ${truncate(reason, 500).text}`, Date.now() - started);
+            }
+            const body = truncate(payload.choices?.[0]?.message?.content ?? '', this.maxOutputChars);
+            const usage = payload.usage;
+            // these calls cost money, so what they spent is worth telling the caller
+            const spend = usage?.total_tokens
+                ? `used ${usage.total_tokens} tokens (${usage.prompt_tokens ?? '?'} in, ${usage.completion_tokens ?? '?'} out).`
+                : '';
+            const cut = payload.choices?.[0]?.finish_reason === 'length'
+                ? 'The model stopped at its output limit, so the answer may be incomplete; raise maxOutputTokens.'
+                : '';
+            return {
+                agent: this.name,
+                succeeded: true,
+                output: body.text,
+                diagnostics: '',
+                notes: [note, spend, cut].filter(Boolean).join(' '),
+                durationMs: Date.now() - started,
+                timedOut: false,
+                outputTruncated: body.truncated,
+            };
+        }
+        catch (error) {
+            const aborted = controller.signal.aborted;
+            return failed(this.name, aborted
+                ? `${this.name} did not answer within ${timeoutMs}ms. Try a smaller task.`
+                : `could not reach ${this.config.baseUrl}: ${error.message}`, Date.now() - started, aborted);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /** null means the endpoint does not offer a usable /models listing. */
+    async listModels() {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 5_000);
+        try {
+            const response = await fetch(`${this.config.baseUrl.replace(/\/$/, '')}/models`, {
+                headers: { Authorization: `Bearer ${this.key() ?? ''}`, ...(this.config.headers ?? {}) },
+                signal: controller.signal,
+            });
+            if (!response.ok)
+                return null;
+            const payload = (await response.json());
+            return (payload.data ?? []).map((m) => m.id).filter((id) => Boolean(id));
+        }
+        catch {
+            return null;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=openai.js.map

package/dist/agents/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../src/agents/openai.ts"],"names":[],"mappings":"AACA,OAAO,EAAiD,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAQ/G;;;;;;;;;GASG;AACH,MAAM,OAAO,WAAW;IAYX;IACQ;IACA;IAbV,QAAQ,CAAS;IAC1B,kDAAkD;IACzC,UAAU,GAAG,KAAK,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;IACpB,YAAY,GAAG,KAAK,CAAC;IAE9B,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;IAC1C,CAAC;IAED,YACW,IAAY,EACJ,MAAyB,EACzB,cAAsB;QAF9B,SAAI,GAAJ,IAAI,CAAQ;QACJ,WAAM,GAAN,MAAM,CAAmB;QACzB,mBAAc,GAAd,cAAc,CAAQ;QAEvC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,wBAAwB,CAAC,CAAC;QAC7E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC;IACtE,CAAC;IAED,IAAI,WAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,uCAAuC,KAAK,KAAK,GAAG,CAAC;IAC5F,CAAC;IAED,2EAA2E;IACnE,GAAG;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAClF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IACzC,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS;YAC1B,CAAC,CAAC,uBAAuB,IAAI,CAAC,MAAM,CAAC,SAAS,uBAAuB;YACrE,CAAC,CAAC,2EAA2E,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,mFAAmF;QACnF,4DAA4D;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAEvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,MAAM,EAAE,MAAM;oBACpB,CAAC,CAAC,uCAAuC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzE,CAAC,CAAC,0EAA0E;aAC/E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,KAAK,yBAAyB,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,+BAA+B,IAAI,CAAC,MAAM,CAAC,KAAK,iBAAiB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACzG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,iBAAiB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,OAAmB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EACrB,qBAAqB,IAAI,CAAC,IAAI,iEAAiE;gBAC/F,gCAAgC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG;YACtB,CAAC,CAAC,qBAAqB,OAAO,CAAC,GAAG,kBAAkB,IAAI,CAAC,IAAI,6BAA6B;gBACxF,wFAAwF;gBACxF,yDAAyD;YAC3D,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,GAAG,EAAE;oBAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC/B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;oBACxB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;oBAC7C,MAAM,EAAE,KAAK;oBACb,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpF,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAmB,CAAC;YAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACnE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EACrB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;oBAChD,CAAC,CAAC,6BAA6B,MAAM,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,oBAAoB,GAAG;oBACjG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAC7E,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,yEAAyE;YACzE,MAAM,KAAK,GAAG,KAAK,EAAE,YAAY;gBAC/B,CAAC,CAAC,QAAQ,KAAK,CAAC,YAAY,YAAY,KAAK,CAAC,aAAa,IAAI,GAAG,QAAQ,KAAK,CAAC,iBAAiB,IAAI,GAAG,QAAQ;gBAChH,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,KAAK,QAAQ;gBAC1D,CAAC,CAAC,gGAAgG;gBAClG,CAAC,CAAC,EAAE,CAAC;YAEP,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,WAAW,EAAE,EAAE;gBACf,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAChC,QAAQ,EAAE,KAAK;gBACf,eAAe,EAAE,IAAI,CAAC,SAAS;aAChC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EACrB,OAAO;gBACL,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,0BAA0B,SAAS,yBAAyB;gBAC1E,CAAC,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,OAAO,KAAM,KAAe,CAAC,OAAO,EAAE,EACzE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,uEAAuE;IAC/D,KAAK,CAAC,UAAU;QACtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE;gBAC/E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;gBACxF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiC,CAAC;YACxE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/agents/outcome.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Reading what an agent's run actually amounted to, beyond its exit code.
+ *
+ * <p>A field report from a real session found the gap: an agent whose every tool call was
+ * blocked by a broken hook exited 0 after 75 seconds with a polite paragraph explaining
+ * that it had read nothing, and the bridge reported `succeeded: true`. A caller that
+ * branches on that field -- which is what it is for -- would have recorded a non-answer
+ * as an answer. The same report found a failed call returning ~350 words of the caller's
+ * own prompt in `diagnostics`, plus the CLI banner, plus the error twice. These helpers
+ * address both, without pretending to understand the agent's reasoning.
+ */
+export type FailureKind = 'quota' | 'auth' | 'trust' | 'other';
+/** What kind of failure this was, so a durable one can be remembered and shown up front. */
+export declare function classifyFailure(text: string): {
+    kind: FailureKind;
+    retryAt?: string;
+};
+/**
+ * stderr as worth reading: the caller's own prompt removed (some CLIs echo it back),
+ * repeated lines dropped, and -- when it is long -- the lines that look like errors kept
+ * ahead of the banner, within a hard cap.
+ */
+export declare function cleanDiagnostics(stderr: string, prompt: string, maxChars?: number): string;
+export declare function selfReportedFailure(output: string): string | null;
+/**
+ * An answer that is nothing but an announcement -- "I'll read payment.ts and report only
+ * what the file actually does." -- with nothing after it. That is what an agent leaves
+ * when it stops at its first tool step, typically one it was not allowed to take, and it
+ * read as `succeeded: true` with no answer in it. Short, opening with an intention, and
+ * without a single line that looks like a finding.
+ */
+export declare function onlyAnnounced(output: string): boolean;
+/** Errors a CLI printed while still exiting 0 -- a failing hook is the case that prompted this. */
+export declare function troubleOnSuccess(stderr: string): string | null;

package/dist/agents/outcome.js

@@ -0,0 +1,96 @@
+import { stripAnsi } from './types.js';
+const QUOTA = /usage limit|rate[ -]?limit|quota|insufficient[ _]balance|balance (is )?exhausted|payment required|\b402\b|\b429\b|too many requests|out of credits|credits? (are )?exhausted/i;
+const AUTH = /not (logged|signed) in|please (log|sign) ?in|authenticat|unauthori[sz]ed|\b401\b|ineligible|invalid api key|api key (was )?rejected|login required|session expired|re-?authenticate/i;
+const TRUST = /trusted (directory|folder|workspace)|skip-trust|TRUST_WORKSPACE/i;
+/** What kind of failure this was, so a durable one can be remembered and shown up front. */
+export function classifyFailure(text) {
+    const retry = /try again (?:at|in|after) ([^.\n"]{1,40})/i.exec(text)?.[1]?.trim();
+    // quota first: "you've hit your usage limit, log in to upgrade" is a quota problem
+    const kind = QUOTA.test(text) ? 'quota' : TRUST.test(text) ? 'trust' : AUTH.test(text) ? 'auth' : 'other';
+    return retry ? { kind, retryAt: retry } : { kind };
+}
+/**
+ * stderr as worth reading: the caller's own prompt removed (some CLIs echo it back),
+ * repeated lines dropped, and -- when it is long -- the lines that look like errors kept
+ * ahead of the banner, within a hard cap.
+ */
+export function cleanDiagnostics(stderr, prompt, maxChars = 1_500) {
+    const promptLines = new Set(prompt.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length >= 12));
+    const flatPrompt = prompt.trim();
+    const seen = new Set();
+    const lines = [];
+    for (const raw of stripAnsi(stderr).split(/\r?\n/)) {
+        let line = raw.trimEnd();
+        if (flatPrompt.length >= 12 && line.includes(flatPrompt))
+            line = line.replace(flatPrompt, '[your prompt]');
+        const key = line.trim();
+        if (!key || promptLines.has(key) || seen.has(key))
+            continue;
+        seen.add(key);
+        lines.push(line);
+    }
+    const joined = lines.join('\n');
+    if (joined.length <= maxChars)
+        return joined;
+    const important = lines.filter((l) => /error|fail|denied|refus|limit|quota|cannot|can't|not (found|logged|signed|trusted)|invalid|unauthori|forbidden|expired|exhausted/i.test(l));
+    const tail = lines.slice(-5).filter((l) => !important.includes(l));
+    const picked = [...important, ...tail].join('\n');
+    const body = picked.length > 0 ? picked : joined;
+    return body.length <= maxChars ? body : `${body.slice(0, maxChars)}\n...[trimmed]`;
+}
+/**
+ * The agent saying, in its own words, that it could not do the work. Deliberately narrow
+ * -- first person, about reading or running things -- so an answer that merely discusses
+ * a permissions error in someone's code is not mistaken for one.
+ */
+const SELF_REPORTED = [
+    /\bI(?:'m| am| was)? (?:currently |still )?(?:unable|not able|blocked|prevented|not permitted) (?:from |to )?(?:read|access|inspect|open|view|run|use|execute|see)\w*/i,
+    /\bI (?:cannot|can't|could not|couldn't) (?:read|access|inspect|open|view|run|use|execute|see) (?:any|the|your|these|those|this)\b/i,
+    /\bevery tool (?:call|execution|invocation)s? (?:is |are |was |were )?(?:failing|blocked|failed)/i,
+    /\b(?:all|my) tool (?:calls|executions) (?:are|were|keep) (?:failing|blocked|failed)/i,
+];
+export function selfReportedFailure(output) {
+    const head = output.slice(0, 4_000);
+    for (const pattern of SELF_REPORTED) {
+        const match = pattern.exec(head);
+        if (!match)
+            continue;
+        // quote the sentence it sits in, so the caller sees the agent's own reason
+        const start = Math.max(head.lastIndexOf('.', match.index) + 1, head.lastIndexOf('\n', match.index) + 1, 0);
+        const endDot = head.indexOf('.', match.index + match[0].length);
+        const end = endDot === -1 ? Math.min(head.length, match.index + 240) : endDot + 1;
+        return head.slice(start, end).trim().slice(0, 400);
+    }
+    return null;
+}
+/**
+ * An answer that is nothing but an announcement -- "I'll read payment.ts and report only
+ * what the file actually does." -- with nothing after it. That is what an agent leaves
+ * when it stops at its first tool step, typically one it was not allowed to take, and it
+ * read as `succeeded: true` with no answer in it. Short, opening with an intention, and
+ * without a single line that looks like a finding.
+ */
+export function onlyAnnounced(output) {
+    const text = output.trim();
+    if (!text || text.length > 500)
+        return false;
+    // an intention to go and look at something, not "I'll be brief: ..." followed by an answer
+    if (!PREAMBLE_OPENING.test(text))
+        return false;
+    // anything with structure or code is an answer, however it opens
+    if (/```|^\s*[-*•]\s|^\s*\d+[.)]\s|\w\.\w+:\d+|\n\s*\n/m.test(text))
+        return false;
+    const sentences = text.split(/(?<=[.!?])\s+/).filter((s) => s.trim());
+    return sentences.every((s) => INTENTION.test(s) || s.length < 60);
+}
+const STEP = '(?:read|check|look|inspect|review|confirm|examine|open|run|analy[sz]e|go through|explore|search|scan|start|begin|investigate|verify|find|trace|walk through|take a look)';
+const PREAMBLE_OPENING = new RegExp(`^(?:(?:okay|ok|sure|alright|first|now|great),?\\s+)?(?:I'll|I will|I'm going to|I am going to|Let me|I need to|I'm about to)\\s+(?:first\\s+|now\\s+|start by\\s+|begin by\\s+)?${STEP}`, 'i');
+const INTENTION = new RegExp(`\\b(?:I'll|I will|I'm going to|I am going to|Let me|I need to)\\s+(?:\\w+\\s+){0,3}?${STEP}`, 'i');
+/** Errors a CLI printed while still exiting 0 -- a failing hook is the case that prompted this. */
+export function troubleOnSuccess(stderr) {
+    const lines = stripAnsi(stderr).split(/\r?\n/).filter((l) => /PreToolUse|PostToolUse|hook.*(fail|error)|(fail|error).*hook|Cannot find module|MODULE_NOT_FOUND|tool (call|execution) failed/i.test(l));
+    if (lines.length === 0)
+        return null;
+    return [...new Set(lines.map((l) => l.trim()))].slice(0, 5).join('\n').slice(0, 800);
+}
+//# sourceMappingURL=outcome.js.map

package/dist/agents/outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../src/agents/outcome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAgBvC,MAAM,KAAK,GAAG,+KAA+K,CAAC;AAC9L,MAAM,IAAI,GAAG,sLAAsL,CAAC;AACpM,MAAM,KAAK,GAAG,kEAAkE,CAAC;AAEjF,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACnF,mFAAmF;IACnF,MAAM,IAAI,GAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACvH,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,QAAQ,GAAG,KAAK;IAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CACzE,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE7C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mIAAmI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnL,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAG;IACpB,uKAAuK;IACvK,oIAAoI;IACpI,kGAAkG;IAClG,sFAAsF;CACvF,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7C,2FAA2F;IAC3F,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,iEAAiE;IACjE,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,IAAI,GAAG,0KAA0K,CAAC;AACxL,MAAM,gBAAgB,GAAG,IAAI,MAAM,CACjC,mLAAmL,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAClM,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,uFAAuF,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAEjI,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,gIAAgI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5I,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvF,CAAC"}

package/dist/agents/permissions.d.ts

@@ -0,0 +1,44 @@
+import type { CliAgentConfig } from '../config.js';
+/**
+ * What a coding CLI may do when it runs unattended, and the flags that grant it.
+ *
+ * <p>Every one of these CLIs is cautious by default when there is no person to approve a
+ * step: Codex runs in a read-only sandbox, Antigravity asks before each tool, Claude Code denies edits and shell commands it
+ * was not pre-approved for, Grok Build and Gemini CLI stop at their approval prompts. That
+ * is the right default for a bridge any connected client can call -- but a second field
+ * report showed the cost of leaving it unsaid: five detailed briefs asking agents to write
+ * a test file and run it, against agents that could do neither, discovered only because
+ * one of them happened to explain itself. So the bridge now says, per agent, whether it
+ * can write files and run commands, and lets the owner switch that on per agent.
+ *
+ * <p>The flags are each CLI's documented ones at the time of writing. A CLI the bridge
+ * does not know gets no flags; its owner can declare what it can do with "capabilities".
+ */
+export interface Allow {
+    /** let it create and change files in the working directory */
+    edits?: boolean;
+    /** let it run shell commands (tests, builds) */
+    commands?: boolean;
+    /** treat the working directory as trusted, for CLIs that refuse untrusted ones */
+    trustDirectory?: boolean;
+}
+export interface Permissions {
+    /** appended after the configured command */
+    args: string[];
+    env: Record<string, string>;
+    writesFiles: boolean;
+    runsCommands: boolean;
+    /** which switches mean anything for this CLI, so the control panel shows only those */
+    supports: {
+        edits: boolean;
+        commands: boolean;
+        trustDirectory: boolean;
+    };
+    /** e.g. that one switch implies the other for this CLI */
+    note: string;
+}
+type Known = 'claude' | 'codex' | 'grok' | 'gemini' | 'agy';
+/** The CLI a command runs, by executable name, whatever path or extension it has. */
+export declare function knownCli(executable: string): Known | null;
+export declare function permissionsFor(config: CliAgentConfig): Permissions;
+export {};

package/dist/agents/permissions.js

@@ -0,0 +1,68 @@
+import { basename } from 'node:path';
+/** The CLI a command runs, by executable name, whatever path or extension it has. */
+export function knownCli(executable) {
+    const name = basename(executable.replace(/\\/g, '/')).toLowerCase().replace(/\.(exe|cmd|bat|ps1)$/, '');
+    return name === 'claude' || name === 'codex' || name === 'grok' || name === 'gemini' || name === 'agy' ? name : null;
+}
+export function permissionsFor(config) {
+    const allow = config.allow ?? {};
+    const declared = config.capabilities ?? {};
+    const none = { args: [], env: {}, note: '' };
+    switch (knownCli(config.command[0] ?? '')) {
+        case 'claude': {
+            const args = [
+                ...(allow.edits ? ['--permission-mode', 'acceptEdits'] : []),
+                ...(allow.commands ? ['--allowedTools', 'Bash'] : []),
+            ];
+            return {
+                args, env: {}, writesFiles: Boolean(allow.edits), runsCommands: Boolean(allow.commands),
+                supports: { edits: true, commands: true, trustDirectory: false }, note: '',
+            };
+        }
+        case 'codex': {
+            // one sandbox switch covers both: workspace-write lets it change files and run
+            // commands inside the working directory, still without network access
+            const on = Boolean(allow.edits || allow.commands);
+            return {
+                args: on ? ['--sandbox', 'workspace-write'] : [], env: {}, writesFiles: on, runsCommands: on,
+                supports: { edits: true, commands: true, trustDirectory: false },
+                note: 'For Codex, edits and commands are one sandbox setting: turning on either turns on both.',
+            };
+        }
+        case 'grok': {
+            const on = Boolean(allow.edits || allow.commands);
+            return {
+                args: on ? ['--always-approve'] : [], env: {}, writesFiles: on, runsCommands: on,
+                supports: { edits: true, commands: true, trustDirectory: false },
+                note: 'Grok Build approves everything or nothing: turning on either turns on both.',
+            };
+        }
+        case 'gemini': {
+            const mode = allow.commands ? 'yolo' : allow.edits ? 'auto_edit' : null;
+            return {
+                args: mode ? ['--approval-mode', mode] : [],
+                env: allow.trustDirectory ? { GEMINI_CLI_TRUST_WORKSPACE: 'true' } : {},
+                writesFiles: mode !== null, runsCommands: mode === 'yolo',
+                supports: { edits: true, commands: true, trustDirectory: true },
+                note: 'Allowing commands also allows edits for Gemini CLI.',
+            };
+        }
+        case 'agy': {
+            // Antigravity: accept-edits mode approves file changes only; skipping permissions
+            // approves every tool, commands included
+            const args = allow.commands ? ['--dangerously-skip-permissions'] : allow.edits ? ['--mode', 'accept-edits'] : [];
+            return {
+                args, env: {}, writesFiles: args.length > 0, runsCommands: Boolean(allow.commands),
+                supports: { edits: true, commands: true, trustDirectory: false },
+                note: 'Allowing commands also allows edits for Antigravity.',
+            };
+        }
+        default:
+            return {
+                ...none,
+                writesFiles: Boolean(declared.writesFiles), runsCommands: Boolean(declared.runsCommands),
+                supports: { edits: false, commands: false, trustDirectory: false },
+            };
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/dist/agents/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/agents/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AA0CrC,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CAAC,UAAkB;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACxG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAE7C,QAAQ,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1C,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACvF,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE;aAC3E,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,+EAA+E;YAC/E,sEAAsE;YACtE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;gBAC5F,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;gBAChE,IAAI,EAAE,yFAAyF;aAChG,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;gBAChF,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;gBAChE,IAAI,EAAE,6EAA6E;aACpF,CAAC;QACJ,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YACxE,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC3C,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;gBACvE,WAAW,EAAE,IAAI,KAAK,IAAI,EAAE,YAAY,EAAE,IAAI,KAAK,MAAM;gBACzD,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;gBAC/D,IAAI,EAAE,qDAAqD;aAC5D,CAAC;QACJ,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,kFAAkF;YAClF,yCAAyC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjH,OAAO;gBACL,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClF,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;gBAChE,IAAI,EAAE,sDAAsD;aAC7D,CAAC;QACJ,CAAC;QACD;YACE,OAAO;gBACL,GAAG,IAAI;gBACP,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACxF,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE;aACnE,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/agents/registry.d.ts

@@ -0,0 +1,56 @@
+import type { Config } from '../config.js';
+import { HealthStore, type AgentState } from './health.js';
+import { type Agent } from './types.js';
+export interface AgentStatus {
+    name: string;
+    description: string;
+    requires: string;
+    /**
+     * Whether the agent can be started — its command resolves, or its endpoint has a key.
+     * Not whether its account works: checking that would mean spending a call on every
+     * listing, so a signed-out CLI lists as available and explains itself when asked.
+     */
+    available: boolean;
+    /**
+     * What to expect from a call, combining the probe with what earlier calls showed:
+     * "ready", "unavailable" (not installed or not configured), or a remembered durable
+     * failure -- "quota-exhausted", "sign-in-failed", "directory-not-trusted". Anything but
+     * "ready" also makes `available` false.
+     */
+    status: AgentState;
+    /** whether pointing it at a directory actually lets it read those files */
+    readsFiles: boolean;
+    /**
+     * Whether, as configured, it may change files and run commands. Both are off unless the
+     * owner allowed them for this agent; a task that needs either belongs with an agent
+     * that has it, or should ask only for a reading and a report.
+     */
+    writesFiles: boolean;
+    runsCommands: boolean;
+    /** the longest one call may run before it is stopped */
+    timeoutSeconds: number;
+    detail: string;
+    /** the most recent failed call, if any, and when; ISO timestamps */
+    lastError?: string;
+    lastErrorAt?: string;
+    /** when the agent said, e.g., "try again at 4:22 AM" */
+    retryAt?: string;
+    lastSuccessAt?: string;
+    calls: number;
+}
+export declare class AgentRegistry {
+    readonly health: HealthStore;
+    private readonly agents;
+    /**
+     * The health store is passed in so it can outlive a registry: the control panel rebuilds
+     * the registry whenever the config changes, and what was learned must survive that.
+     */
+    private readonly misconfigured;
+    constructor(config: Config, health?: HealthStore);
+    /** Why an agent's configuration was rejected, or null if it was accepted. */
+    configError(name: string): string | null;
+    find(name: string): Agent | undefined;
+    names(): string[];
+    /** Probes every agent at once, since each probe is a filesystem or socket check. */
+    statuses(): Promise<AgentStatus[]>;
+}