@memberjunction/ai-agent-harness 0.0.0 → 6.1.0-edge.1

package/dist/adapters/ClaudeCodeCliAdapter.d.ts

@@ -0,0 +1,104 @@
+import { BaseCliHarnessAdapter, HarnessCliRawEvent } from './BaseCliHarnessAdapter.js';
+import { HarnessCapabilities, HarnessPermissionPolicy, HarnessTurnEvent } from '../types.js';
+import { HarnessProcess } from '../sandbox/SandboxExecutor.js';
+/**
+ * Drives Claude Code through its headless CLI. This is the ONLY Claude Code adapter.
+ *
+ * ## Why not the Claude Agent SDK
+ *
+ * An SDK-based adapter was built and then deliberately removed. The SDK offers a programmatic
+ * permission callback (`canUseTool`) and in-process MCP tools, both genuinely useful — but it runs
+ * IN-PROCESS in Node, and no sandbox executor can place an in-process library inside a container.
+ *
+ * That trade does not survive scrutiny: it buys better permission *hooks* at the cost of any
+ * process *isolation*, for a feature whose entire purpose is executing an autonomous agent's shell
+ * commands. Worse, an SDK-backed agent configured with `provider: 'docker'` would run outside its
+ * sandbox while the config claimed otherwise — the same false-containment failure this design
+ * refuses elsewhere. And the asymmetry is decisive: the CLI's missing permission hook is fixable
+ * (an MCP permission-prompt tool), while the SDK's missing containment is not.
+ *
+ * Two incidental findings that removed the remaining arguments for it: the SDK's typing advantage
+ * largely evaporated in practice (its message union is too broad to narrow against, so the adapter
+ * read fields structurally anyway — exactly what the CLI adapter does), and the SDK is not
+ * dependency-free — it ships a ~259 MB platform-specific `claude` binary. It wraps the same program
+ * this adapter invokes.
+ *
+ * So there is one Claude path, and it works in all three deployments: local spawn, local container,
+ * cloud container.
+ */
+export declare class ClaudeCodeCliAdapter extends BaseCliHarnessAdapter {
+    private executable;
+    private systemPrompt;
+    private didResume;
+    private permissionArgs;
+    /**
+     * Maps MJ's posture onto Claude Code's permission vocabulary.
+     *
+     * Conservative at both ends, deliberately:
+     *
+     * - `strict` adds NOTHING, leaving Claude Code's default prompting in place. Headless, those
+     *   prompts have nowhere to go and every call denies — the correct outcome for a posture whose
+     *   contract is "no mutation without a human" when MJ has no approval channel yet. Observably
+     *   useless beats quietly permissive.
+     * - `auto` uses `acceptEdits`, NOT `bypassPermissions`. Edits inside the workspace proceed while
+     *   genuinely dangerous operations still gate; using bypass here would make `auto` and
+     *   `dangerous` the same setting under two names.
+     * - `dangerous` passes `--dangerously-skip-permissions`, which Claude Code's own help restricts
+     *   to sandboxes with no internet access. Pairing it with the LOCAL provider is a
+     *   misconfiguration — that provider does not contain the process at all.
+     *
+     * Allow/deny patterns pass through in Claude Code's own syntax, deny applied last so it wins:
+     * an overlapping policy must fail closed.
+     *
+     * ## Bash patterns are PREFIX-LITERAL — they are hygiene, not a boundary
+     *
+     * `Bash(git commit:*)` matches only commands that *begin* with `git commit`. Proven live: a
+     * `Bash(git:*)` allow paired with a `Bash(git commit:*)` deny let `git -C <path> commit` through,
+     * because any flag before the subcommand defeats the prefix. The run failed only because nothing
+     * happened to be staged.
+     *
+     * The consequence is a rule, not a caveat: **do not use a broad `Bash(<tool>:*)` allow and try to
+     * carve dangerous subcommands back out with denies.** Deny whole tool names (`Bash` — an exact
+     * name match, no prefix involved) or allow only fully-specified commands. Real containment comes
+     * from the sandbox provider; with the LOCAL provider there is none, so the policy is all there is.
+     */
+    ApplyPermissionPolicy(policy: HarnessPermissionPolicy): void;
+    /** @inheritdoc */
+    get DidResumeSession(): boolean;
+    /** @inheritdoc */
+    SetSystemPrompt(systemPrompt: string): void;
+    protected get ExecutablePath(): string;
+    /** @inheritdoc */
+    get Capabilities(): HarnessCapabilities;
+    protected BuildTurnArgs(input: string, isFirstTurn: boolean): string[];
+    protected MapEvent(raw: HarnessCliRawEvent): HarnessTurnEvent | null;
+    /**
+     * Handles a `result` line, which carries BOTH the turn's usage and its outcome.
+     *
+     * MapEvent is one-in-one-out, so usage is returned now and the outcome is parked in
+     * {@link pendingTerminal} for {@link readEvents} to flush immediately after. Emitting usage
+     * first matters: a turn that failed still spent tokens getting there, and the run's cost
+     * accounting should see them either way.
+     */
+    private buildResultEvents;
+    /** Turns a `result` message into either a completed turn or a failed one. */
+    private buildTerminalEvent;
+    /** Concatenates the text blocks of an assistant message. */
+    private extractAssistantText;
+    /** Terminal event held back while its usage event is emitted first. */
+    private pendingTerminal;
+    /** The model Claude reported using on this turn. */
+    private reportedModel;
+    /** @inheritdoc */
+    get ReportedModel(): string | undefined;
+    /**
+     * Flushes the terminal event held back by {@link buildResultEvents}.
+     *
+     * Overridden so a single `result` line can yield both usage and outcome while MapEvent keeps
+     * its simple one-in-one-out shape.
+     */
+    protected readEvents(proc: HarnessProcess): AsyncIterable<HarnessTurnEvent>;
+    /** Points the adapter at a specific binary, from `AIAgentHarness.ExecutablePath`. */
+    SetExecutable(path: string): void;
+}
+//# sourceMappingURL=ClaudeCodeCliAdapter.d.ts.map

package/dist/adapters/ClaudeCodeCliAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaudeCodeCliAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ClaudeCodeCliAdapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEvF,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBACa,oBAAqB,SAAQ,qBAAqB;IAC3D,OAAO,CAAC,UAAU,CAAY;IAC9B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,cAAc,CAAgB;IAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACa,qBAAqB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAsB5E,kBAAkB;IAClB,IAAoB,gBAAgB,IAAI,OAAO,CAE9C;IAED,kBAAkB;IACF,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAI3D,SAAS,KAAK,cAAc,IAAI,MAAM,CAErC;IAED,kBAAkB;IAClB,IAAW,YAAY,IAAI,mBAAmB,CAwB7C;IAED,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,EAAE;IAkCtE,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,IAAI;IAiCpE;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IAUzB,6EAA6E;IAC7E,OAAO,CAAC,kBAAkB;IAQ1B,4DAA4D;IAC5D,OAAO,CAAC,oBAAoB;IAiB5B,uEAAuE;IACvE,OAAO,CAAC,eAAe,CAAiC;IAExD,oDAAoD;IACpD,OAAO,CAAC,aAAa,CAAqB;IAE1C,kBAAkB;IAClB,IAAoB,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtD;IAED;;;;;OAKG;cACuB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,aAAa,CAAC,gBAAgB,CAAC;IAW3F,qFAAqF;IAC9E,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAG3C"}

package/dist/adapters/ClaudeCodeCliAdapter.js

@@ -0,0 +1,268 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { RegisterClass } from '@memberjunction/global';
+import { BaseCliHarnessAdapter } from './BaseCliHarnessAdapter.js';
+import { BaseHarnessAdapter } from './BaseHarnessAdapter.js';
+/**
+ * Drives Claude Code through its headless CLI. This is the ONLY Claude Code adapter.
+ *
+ * ## Why not the Claude Agent SDK
+ *
+ * An SDK-based adapter was built and then deliberately removed. The SDK offers a programmatic
+ * permission callback (`canUseTool`) and in-process MCP tools, both genuinely useful — but it runs
+ * IN-PROCESS in Node, and no sandbox executor can place an in-process library inside a container.
+ *
+ * That trade does not survive scrutiny: it buys better permission *hooks* at the cost of any
+ * process *isolation*, for a feature whose entire purpose is executing an autonomous agent's shell
+ * commands. Worse, an SDK-backed agent configured with `provider: 'docker'` would run outside its
+ * sandbox while the config claimed otherwise — the same false-containment failure this design
+ * refuses elsewhere. And the asymmetry is decisive: the CLI's missing permission hook is fixable
+ * (an MCP permission-prompt tool), while the SDK's missing containment is not.
+ *
+ * Two incidental findings that removed the remaining arguments for it: the SDK's typing advantage
+ * largely evaporated in practice (its message union is too broad to narrow against, so the adapter
+ * read fields structurally anyway — exactly what the CLI adapter does), and the SDK is not
+ * dependency-free — it ships a ~259 MB platform-specific `claude` binary. It wraps the same program
+ * this adapter invokes.
+ *
+ * So there is one Claude path, and it works in all three deployments: local spawn, local container,
+ * cloud container.
+ */
+let ClaudeCodeCliAdapter = class ClaudeCodeCliAdapter extends BaseCliHarnessAdapter {
+    constructor() {
+        super(...arguments);
+        this.executable = 'claude';
+        this.didResume = false;
+        this.permissionArgs = [];
+        /** Terminal event held back while its usage event is emitted first. */
+        this.pendingTerminal = null;
+    }
+    /**
+     * Maps MJ's posture onto Claude Code's permission vocabulary.
+     *
+     * Conservative at both ends, deliberately:
+     *
+     * - `strict` adds NOTHING, leaving Claude Code's default prompting in place. Headless, those
+     *   prompts have nowhere to go and every call denies — the correct outcome for a posture whose
+     *   contract is "no mutation without a human" when MJ has no approval channel yet. Observably
+     *   useless beats quietly permissive.
+     * - `auto` uses `acceptEdits`, NOT `bypassPermissions`. Edits inside the workspace proceed while
+     *   genuinely dangerous operations still gate; using bypass here would make `auto` and
+     *   `dangerous` the same setting under two names.
+     * - `dangerous` passes `--dangerously-skip-permissions`, which Claude Code's own help restricts
+     *   to sandboxes with no internet access. Pairing it with the LOCAL provider is a
+     *   misconfiguration — that provider does not contain the process at all.
+     *
+     * Allow/deny patterns pass through in Claude Code's own syntax, deny applied last so it wins:
+     * an overlapping policy must fail closed.
+     *
+     * ## Bash patterns are PREFIX-LITERAL — they are hygiene, not a boundary
+     *
+     * `Bash(git commit:*)` matches only commands that *begin* with `git commit`. Proven live: a
+     * `Bash(git:*)` allow paired with a `Bash(git commit:*)` deny let `git -C <path> commit` through,
+     * because any flag before the subcommand defeats the prefix. The run failed only because nothing
+     * happened to be staged.
+     *
+     * The consequence is a rule, not a caveat: **do not use a broad `Bash(<tool>:*)` allow and try to
+     * carve dangerous subcommands back out with denies.** Deny whole tool names (`Bash` — an exact
+     * name match, no prefix involved) or allow only fully-specified commands. Real containment comes
+     * from the sandbox provider; with the LOCAL provider there is none, so the policy is all there is.
+     */
+    ApplyPermissionPolicy(policy) {
+        const args = [];
+        switch (policy.Posture) {
+            case 'auto':
+                args.push('--permission-mode', 'acceptEdits');
+                break;
+            case 'dangerous':
+                args.push('--dangerously-skip-permissions');
+                break;
+            case 'strict':
+            default:
+                break;
+        }
+        if (policy.AllowedTools?.length) {
+            args.push('--allowedTools', ...policy.AllowedTools);
+        }
+        if (policy.DisallowedTools?.length) {
+            args.push('--disallowedTools', ...policy.DisallowedTools);
+        }
+        this.permissionArgs = args;
+    }
+    /** @inheritdoc */
+    get DidResumeSession() {
+        return this.didResume;
+    }
+    /** @inheritdoc */
+    SetSystemPrompt(systemPrompt) {
+        this.systemPrompt = systemPrompt;
+    }
+    get ExecutablePath() {
+        return this.executable;
+    }
+    /** @inheritdoc */
+    get Capabilities() {
+        return {
+            SessionResume: true,
+            // Killing the process ends the turn immediately — the executor owns the process handle.
+            MidTurnCancellation: true,
+            // FALSE, deliberately. `--output-format stream-json` structures the TRANSPORT, not the
+            // model's content — nothing constrains what Claude actually writes inside a turn. Claiming
+            // true here told the runtime it need not compensate, and the harness spent five turns
+            // inventing step names (`complete`, `respond`, `undefined`) before BaseAgent's retry
+            // feedback taught it the Loop vocabulary. Same distinction PiAdapter already documents.
+            StructuredOutput: false,
+            UsageReporting: true,
+            // ApplyPermissionPolicy below translates posture + allow/deny into real launch flags.
+            PermissionPolicy: true,
+            // Claude Code CAN intercept permissions, but only through an MCP permission-prompt tool
+            // that MJ has not stood up yet. Reported false until that exists: claiming interception
+            // the adapter does not implement would let mutating operations through unreviewed while
+            // the strict posture believed it was gating them. This is the one capability the removed
+            // SDK adapter had and this one does not, and it is a prerequisite for `strict`.
+            PermissionHooks: false,
+            McpClient: true,
+            WorkspaceScoping: true,
+            ModelSelection: true,
+        };
+    }
+    BuildTurnArgs(input, isFirstTurn) {
+        const args = ['-p', input, '--output-format', 'stream-json', '--verbose'];
+        // Claude Code persists sessions to its own on-disk store, so resuming needs no live process
+        // — which is why this works at all despite the process dying after every turn. If the store
+        // has pruned the session the CLI starts fresh rather than failing, so an optimistic resume
+        // degrades to a cold session instead of breaking the run.
+        if (isFirstTurn && this.config?.ResumeSessionId) {
+            this.sessionId = this.config.ResumeSessionId;
+            this.didResume = true;
+        }
+        // APPEND rather than replace: Claude Code's own system prompt carries its tool definitions
+        // and sandbox conventions, and replacing it would break the harness to enforce our envelope.
+        // Appending puts MJ's contract at system level, where it outranks the conversational habit
+        // that was costing a retry on turn one.
+        if (isFirstTurn && this.systemPrompt) {
+            args.push('--append-system-prompt', this.systemPrompt);
+        }
+        // Pass --resume when continuing WITHIN a run (turn 2+) OR when continuing a PRIOR run's
+        // session on turn 1. Gating on `!isFirstTurn` alone silently defeated cross-run resume: the
+        // session id was looked up and assigned, the log said "Resuming...", and the flag was never
+        // actually passed — so Claude started cold and MapEvent overwrote the id with the new one.
+        // The run then recorded a different session than the one it claimed to resume.
+        if (this.sessionId && (!isFirstTurn || this.didResume)) {
+            args.push('--resume', this.sessionId);
+        }
+        if (this.config?.Model) {
+            args.push('--model', this.config.Model);
+        }
+        // Per-invocation, not per-session: the process is new every turn, so a policy applied only
+        // at session start would silently lapse from turn 2 onward.
+        args.push(...this.permissionArgs);
+        return args;
+    }
+    MapEvent(raw) {
+        const session = this.readString(raw, 'session_id');
+        if (session) {
+            this.sessionId = session;
+        }
+        switch (this.readString(raw, 'type')) {
+            case 'assistant': {
+                // Claude reports the model it actually used on each assistant message. Capture it so
+                // accounting reflects reality rather than the model we assumed.
+                const message = this.readObject(raw, 'message');
+                const model = message ? this.readString(message, 'model') : undefined;
+                if (model) {
+                    this.reportedModel = model;
+                }
+                const text = this.extractAssistantText(raw);
+                return text ? { Type: 'assistant-text', Text: text } : null;
+            }
+            case 'result': {
+                const usage = this.readObject(raw, 'usage');
+                if (usage) {
+                    // Usage arrives on the same message as the result. It is emitted as its own
+                    // event so the accumulation loop stays uniform across every adapter, and so a
+                    // turn that errors still reports what it spent getting there.
+                    return this.buildResultEvents(raw, usage);
+                }
+                return this.buildTerminalEvent(raw);
+            }
+            default:
+                return null;
+        }
+    }
+    /**
+     * Handles a `result` line, which carries BOTH the turn's usage and its outcome.
+     *
+     * MapEvent is one-in-one-out, so usage is returned now and the outcome is parked in
+     * {@link pendingTerminal} for {@link readEvents} to flush immediately after. Emitting usage
+     * first matters: a turn that failed still spent tokens getting there, and the run's cost
+     * accounting should see them either way.
+     */
+    buildResultEvents(raw, usage) {
+        this.pendingTerminal = this.buildTerminalEvent(raw);
+        return {
+            Type: 'usage',
+            InputTokens: this.readNumber(usage, 'input_tokens') ?? 0,
+            OutputTokens: this.readNumber(usage, 'output_tokens') ?? 0,
+            CostUsd: this.readNumber(raw, 'total_cost_usd'),
+        };
+    }
+    /** Turns a `result` message into either a completed turn or a failed one. */
+    buildTerminalEvent(raw) {
+        const text = this.readString(raw, 'result') ?? '';
+        const isError = raw['is_error'] === true;
+        return isError
+            ? { Type: 'session-error', Error: text || 'Claude Code reported an error' }
+            : { Type: 'turn-complete', RawText: text };
+    }
+    /** Concatenates the text blocks of an assistant message. */
+    extractAssistantText(raw) {
+        const message = this.readObject(raw, 'message');
+        const content = message?.['content'];
+        if (!Array.isArray(content)) {
+            return '';
+        }
+        return content
+            .map((block) => {
+            if (block === null || typeof block !== 'object') {
+                return '';
+            }
+            const asRecord = block;
+            return asRecord['type'] === 'text' ? (this.readString(asRecord, 'text') ?? '') : '';
+        })
+            .join('');
+    }
+    /** @inheritdoc */
+    get ReportedModel() {
+        return this.reportedModel;
+    }
+    /**
+     * Flushes the terminal event held back by {@link buildResultEvents}.
+     *
+     * Overridden so a single `result` line can yield both usage and outcome while MapEvent keeps
+     * its simple one-in-one-out shape.
+     */
+    async *readEvents(proc) {
+        for await (const event of super.readEvents(proc)) {
+            yield event;
+            if (this.pendingTerminal) {
+                const terminal = this.pendingTerminal;
+                this.pendingTerminal = null;
+                yield terminal;
+            }
+        }
+    }
+    /** Points the adapter at a specific binary, from `AIAgentHarness.ExecutablePath`. */
+    SetExecutable(path) {
+        this.executable = path;
+    }
+};
+ClaudeCodeCliAdapter = __decorate([
+    RegisterClass(BaseHarnessAdapter, 'ClaudeCodeCliAdapter')
+], ClaudeCodeCliAdapter);
+export { ClaudeCodeCliAdapter };
+//# sourceMappingURL=ClaudeCodeCliAdapter.js.map

package/dist/adapters/ClaudeCodeCliAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaudeCodeCliAdapter.js","sourceRoot":"","sources":["../../src/adapters/ClaudeCodeCliAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAsB,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAI7D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,qBAAqB;IAAxD;;QACK,eAAU,GAAG,QAAQ,CAAC;QAEtB,cAAS,GAAG,KAAK,CAAC;QAClB,mBAAc,GAAa,EAAE,CAAC;QAgNtC,uEAAuE;QAC/D,oBAAe,GAA4B,IAAI,CAAC;IA+B5D,CAAC;IA9OG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACa,qBAAqB,CAAC,MAA+B;QACjE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,MAAM;gBACP,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;gBAC9C,MAAM;YACV,KAAK,WAAW;gBACZ,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC5C,MAAM;YACV,KAAK,QAAQ,CAAC;YACd;gBACI,MAAM;QACd,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,kBAAkB;IAClB,IAAoB,gBAAgB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,kBAAkB;IACF,eAAe,CAAC,YAAoB;QAChD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,IAAc,cAAc;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,kBAAkB;IAClB,IAAW,YAAY;QACnB,OAAO;YACH,aAAa,EAAE,IAAI;YACnB,wFAAwF;YACxF,mBAAmB,EAAE,IAAI;YACzB,uFAAuF;YACvF,2FAA2F;YAC3F,sFAAsF;YACtF,qFAAqF;YACrF,wFAAwF;YACxF,gBAAgB,EAAE,KAAK;YACvB,cAAc,EAAE,IAAI;YACpB,sFAAsF;YACtF,gBAAgB,EAAE,IAAI;YACtB,wFAAwF;YACxF,wFAAwF;YACxF,wFAAwF;YACxF,yFAAyF;YACzF,gFAAgF;YAChF,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;SACvB,CAAC;IACN,CAAC;IAES,aAAa,CAAC,KAAa,EAAE,WAAoB;QACvD,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAC1E,4FAA4F;QAC5F,4FAA4F;QAC5F,2FAA2F;QAC3F,0DAA0D;QAC1D,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;YAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,2FAA2F;QAC3F,6FAA6F;QAC7F,2FAA2F;QAC3F,wCAAwC;QACxC,IAAI,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;QACD,wFAAwF;QACxF,4FAA4F;QAC5F,4FAA4F;QAC5F,2FAA2F;QAC3F,+EAA+E;QAC/E,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,2FAA2F;QAC3F,4DAA4D;QAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,QAAQ,CAAC,GAAuB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACnD,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,WAAW,CAAC,CAAC,CAAC;gBACf,qFAAqF;gBACrF,gEAAgE;gBAChE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAChD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtE,IAAI,KAAK,EAAE,CAAC;oBACR,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC/B,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC5C,IAAI,KAAK,EAAE,CAAC;oBACR,4EAA4E;oBAC5E,8EAA8E;oBAC9E,8DAA8D;oBAC9D,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;YACD;gBACI,OAAO,IAAI,CAAC;QACpB,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,GAAuB,EAAE,KAAyB;QACxE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO;YACH,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC;YACxD,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;YAC1D,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC;SAClD,CAAC;IACN,CAAC;IAED,6EAA6E;IACrE,kBAAkB,CAAC,GAAuB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;QACzC,OAAO,OAAO;YACV,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,IAAI,+BAA+B,EAAE;YAC3E,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,4DAA4D;IACpD,oBAAoB,CAAC,GAAuB;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO,OAAO;aACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACX,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,EAAE,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,KAA2B,CAAC;YAC7C,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAQD,kBAAkB;IAClB,IAAoB,aAAa;QAC7B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACgB,KAAK,CAAC,CAAC,UAAU,CAAC,IAAoB;QACrD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC;YACZ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;gBACtC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,MAAM,QAAQ,CAAC;YACnB,CAAC;QACL,CAAC;IACL,CAAC;IAED,qFAAqF;IAC9E,aAAa,CAAC,IAAY;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IAC3B,CAAC;CACJ,CAAA;AApPY,oBAAoB;IADhC,aAAa,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;GAC7C,oBAAoB,CAoPhC"}

package/dist/adapters/CodexAdapter.d.ts

@@ -0,0 +1,27 @@
+import { BaseCliHarnessAdapter, HarnessCliRawEvent } from './BaseCliHarnessAdapter.js';
+import { HarnessCapabilities, HarnessTurnEvent } from '../types.js';
+/**
+ * Drives OpenAI's Codex CLI (`@openai/codex`).
+ *
+ * Codex ships as a CLI only — the npm package exposes a `bin` and no library entry point — so this
+ * goes through {@link BaseCliHarnessAdapter} rather than an SDK.
+ *
+ * ## About the argv defaults
+ *
+ * `codex exec --json` is the documented headless form, but coding-agent CLIs move fast and flag
+ * names drift between minor versions. Everything version-sensitive is confined to
+ * {@link BuildTurnArgs} and the event names in {@link MapEvent}, so adapting to a new Codex release
+ * is a change in one small place rather than a redesign — and `AIAgentHarness.ExecutablePath` lets a
+ * deployment pin a specific binary without touching code at all.
+ */
+export declare class CodexAdapter extends BaseCliHarnessAdapter {
+    protected get ExecutablePath(): string;
+    private executable;
+    /** @inheritdoc */
+    get Capabilities(): HarnessCapabilities;
+    protected BuildTurnArgs(input: string, isFirstTurn: boolean): string[];
+    protected MapEvent(raw: HarnessCliRawEvent): HarnessTurnEvent | null;
+    /** Points the adapter at a specific binary, from `AIAgentHarness.ExecutablePath`. */
+    SetExecutable(path: string): void;
+}
+//# sourceMappingURL=CodexAdapter.d.ts.map

package/dist/adapters/CodexAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodexAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/CodexAdapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEvF,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AACH,qBACa,YAAa,SAAQ,qBAAqB;IACnD,SAAS,KAAK,cAAc,IAAI,MAAM,CAErC;IAED,OAAO,CAAC,UAAU,CAAW;IAE7B,kBAAkB;IAClB,IAAW,YAAY,IAAI,mBAAmB,CAoB7C;IAED,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,EAAE;IAYtE,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,IAAI;IA8CpE,qFAAqF;IAC9E,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAG3C"}

package/dist/adapters/CodexAdapter.js

@@ -0,0 +1,117 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { RegisterClass } from '@memberjunction/global';
+import { BaseCliHarnessAdapter } from './BaseCliHarnessAdapter.js';
+import { BaseHarnessAdapter } from './BaseHarnessAdapter.js';
+/**
+ * Drives OpenAI's Codex CLI (`@openai/codex`).
+ *
+ * Codex ships as a CLI only — the npm package exposes a `bin` and no library entry point — so this
+ * goes through {@link BaseCliHarnessAdapter} rather than an SDK.
+ *
+ * ## About the argv defaults
+ *
+ * `codex exec --json` is the documented headless form, but coding-agent CLIs move fast and flag
+ * names drift between minor versions. Everything version-sensitive is confined to
+ * {@link BuildTurnArgs} and the event names in {@link MapEvent}, so adapting to a new Codex release
+ * is a change in one small place rather than a redesign — and `AIAgentHarness.ExecutablePath` lets a
+ * deployment pin a specific binary without touching code at all.
+ */
+let CodexAdapter = class CodexAdapter extends BaseCliHarnessAdapter {
+    constructor() {
+        super(...arguments);
+        this.executable = 'codex';
+    }
+    get ExecutablePath() {
+        return this.executable;
+    }
+    /** @inheritdoc */
+    get Capabilities() {
+        return {
+            // Codex resumes by threading its session id back on the next invocation.
+            SessionResume: true,
+            // No constrained-output mode: the turn-end JSON envelope is coaxed by prompt and
+            // recovered by BaseAgent's malformed-response retry when the model drifts into prose.
+            StructuredOutput: false,
+            UsageReporting: true,
+            // FALSE: this adapter does not translate MJ's permission policy into harness flags, so a
+            // configured posture is INERT here and the runtime warns about it. Not an oversight —
+            // Codex CLI's permission flags could not be verified against a real install, and
+            // guessing them produces the exact failure this flag exists to surface: a policy that
+            // looks applied and is not. Verify against the CLI, then implement
+            // ApplyPermissionPolicy and flip this to true.
+            PermissionPolicy: false,
+            PermissionHooks: false,
+            McpClient: true,
+            WorkspaceScoping: true,
+            ModelSelection: true,
+        };
+    }
+    BuildTurnArgs(input, isFirstTurn) {
+        const args = ['exec', '--json'];
+        if (!isFirstTurn && this.sessionId) {
+            args.push('--resume', this.sessionId);
+        }
+        if (this.config?.Model) {
+            args.push('--model', this.config.Model);
+        }
+        args.push(input);
+        return args;
+    }
+    MapEvent(raw) {
+        // Capture the session id wherever it first appears so the next turn can resume, and so the
+        // run can persist it to AIAgentRun.ExternalSessionID for vendor-side log correlation.
+        const session = this.readString(raw, 'session_id') ?? this.readString(raw, 'sessionId');
+        if (session) {
+            this.sessionId = session;
+        }
+        switch (this.readString(raw, 'type')) {
+            case 'assistant_message':
+            case 'agent_message': {
+                const text = this.readString(raw, 'message') ?? this.readString(raw, 'text');
+                return text ? { Type: 'assistant-text', Text: text } : null;
+            }
+            case 'tool_call':
+            case 'exec_command': {
+                const description = this.readString(raw, 'command') ?? this.readString(raw, 'name') ?? 'sandbox activity';
+                return { Type: 'sandbox-activity', Description: description };
+            }
+            case 'token_count':
+            case 'usage': {
+                const usage = this.readObject(raw, 'usage') ?? raw;
+                return {
+                    Type: 'usage',
+                    InputTokens: this.readNumber(usage, 'input_tokens') ?? 0,
+                    OutputTokens: this.readNumber(usage, 'output_tokens') ?? 0,
+                    CostUsd: this.readNumber(usage, 'cost_usd'),
+                };
+            }
+            case 'task_complete':
+            case 'turn_complete': {
+                const text = this.readString(raw, 'last_agent_message') ??
+                    this.readString(raw, 'message') ??
+                    this.readString(raw, 'text') ??
+                    '';
+                return { Type: 'turn-complete', RawText: text };
+            }
+            case 'error': {
+                return { Type: 'session-error', Error: this.readString(raw, 'message') ?? 'Codex reported an error' };
+            }
+            default:
+                return null;
+        }
+    }
+    /** Points the adapter at a specific binary, from `AIAgentHarness.ExecutablePath`. */
+    SetExecutable(path) {
+        this.executable = path;
+    }
+};
+CodexAdapter = __decorate([
+    RegisterClass(BaseHarnessAdapter, 'CodexAdapter')
+], CodexAdapter);
+export { CodexAdapter };
+//# sourceMappingURL=CodexAdapter.js.map

package/dist/adapters/CodexAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodexAdapter.js","sourceRoot":"","sources":["../../src/adapters/CodexAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAsB,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D;;;;;;;;;;;;;GAaG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,qBAAqB;IAAhD;;QAKK,eAAU,GAAG,OAAO,CAAC;IAuFjC,CAAC;IA3FG,IAAc,cAAc;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAID,kBAAkB;IAClB,IAAW,YAAY;QACnB,OAAO;YACH,yEAAyE;YACzE,aAAa,EAAE,IAAI;YACnB,iFAAiF;YACjF,sFAAsF;YACtF,gBAAgB,EAAE,KAAK;YACvB,cAAc,EAAE,IAAI;YACpB,yFAAyF;YACzF,sFAAsF;YACtF,iFAAiF;YACjF,sFAAsF;YACtF,mEAAmE;YACnE,+CAA+C;YAC/C,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;SACvB,CAAC;IACN,CAAC;IAES,aAAa,CAAC,KAAa,EAAE,WAAoB;QACvD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,QAAQ,CAAC,GAAuB;QACtC,2FAA2F;QAC3F,sFAAsF;QACtF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxF,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,mBAAmB,CAAC;YACzB,KAAK,eAAe,CAAC,CAAC,CAAC;gBACnB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,CAAC;YACD,KAAK,WAAW,CAAC;YACjB,KAAK,cAAc,CAAC,CAAC,CAAC;gBAClB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,kBAAkB,CAAC;gBAC1G,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;YAClE,CAAC;YACD,KAAK,aAAa,CAAC;YACnB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC;gBACnD,OAAO;oBACH,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC;oBACxD,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;oBAC1D,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;iBAC9C,CAAC;YACN,CAAC;YACD,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe,CAAC,CAAC,CAAC;gBACnB,MAAM,IAAI,GACN,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC;oBAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;oBAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;oBAC5B,EAAE,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACpD,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,yBAAyB,EAAE,CAAC;YAC1G,CAAC;YACD;gBACI,OAAO,IAAI,CAAC;QACpB,CAAC;IACL,CAAC;IAED,qFAAqF;IAC9E,aAAa,CAAC,IAAY;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IAC3B,CAAC;CACJ,CAAA;AA5FY,YAAY;IADxB,aAAa,CAAC,kBAAkB,EAAE,cAAc,CAAC;GACrC,YAAY,CA4FxB"}

package/dist/adapters/GeminiCliAdapter.d.ts

@@ -0,0 +1,25 @@
+import { BaseCliHarnessAdapter, HarnessCliRawEvent } from './BaseCliHarnessAdapter.js';
+import { HarnessCapabilities, HarnessTurnEvent } from '../types.js';
+/**
+ * Drives Google's Gemini CLI (`@google/gemini-cli`).
+ *
+ * `@google/gemini-cli-core` does expose a compilable entry point, but it is the CLI's internals
+ * rather than a supported embedding API — depending on it would couple MJ to a package with no
+ * stability contract. The CLI surface is the supported one, so this adapter uses it.
+ *
+ * Gemini CLI is the weakest of the five on session continuity: it is built around one-shot
+ * invocations. {@link Capabilities} reports `SessionResume: false` accordingly, which makes the
+ * runtime replay accumulated context into each turn — correct, but the token cost grows with turn
+ * count, and reporting it honestly here is what lets the run's cost guardrail see that.
+ */
+export declare class GeminiCliAdapter extends BaseCliHarnessAdapter {
+    private executable;
+    protected get ExecutablePath(): string;
+    /** @inheritdoc */
+    get Capabilities(): HarnessCapabilities;
+    protected BuildTurnArgs(input: string, _isFirstTurn: boolean): string[];
+    protected MapEvent(raw: HarnessCliRawEvent): HarnessTurnEvent | null;
+    /** Points the adapter at a specific binary, from `AIAgentHarness.ExecutablePath`. */
+    SetExecutable(path: string): void;
+}
+//# sourceMappingURL=GeminiCliAdapter.d.ts.map

package/dist/adapters/GeminiCliAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GeminiCliAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/GeminiCliAdapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEvF,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,qBACa,gBAAiB,SAAQ,qBAAqB;IACvD,OAAO,CAAC,UAAU,CAAY;IAE9B,SAAS,KAAK,cAAc,IAAI,MAAM,CAErC;IAED,kBAAkB;IAClB,IAAW,YAAY,IAAI,mBAAmB,CAkB7C;IAED,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,MAAM,EAAE;IAUvE,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,IAAI;IAgCpE,qFAAqF;IAC9E,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAG3C"}