@monoes/monomindcli 2.9.21 → 2.9.22

package/dist/src/orgrt/copilot-runner.js

@@ -0,0 +1,250 @@
+// packages/@monomind/cli/src/orgrt/copilot-runner.ts
+/**
+ * CopilotAgentRunner — AgentRunner impl backed by the GitHub Copilot CLI
+ * (`copilot`, https://docs.github.com/en/copilot/reference/copilot-cli-reference).
+ *
+ * Architectural pattern: SAME as the other subprocess runners — spawn the
+ * CLI, parse its output, normalize to AgentMessage.
+ *
+ * Auth: GitHub's own device/browser login flow (`copilot` handles this
+ * itself on first run). No env vars set here.
+ *
+ * Subprocess protocol — per public docs, NOT byte-verified against a running
+ * binary:
+ *   - Invocation: `copilot -p "<prompt>" --output-format json -s
+ *                 --allow-all-tools --no-ask-user [--model=<model>]`. `-s`
+ *     (silent) suppresses the stats/decoration footer that otherwise mixes
+ *     into stdout (documented GitHub issue: without `-s`, response text can
+ *     be absent from plain stdout entirely — `--output-format json` + `-s`
+ *     is the documented workaround). `--no-ask-user` disables the CLI's
+ *     ask_user tool so a headless run can never block waiting on a question
+ *     with no human to answer it — confirmed by cross-checking a second,
+ *     independent public agentic-CLI wrapper's provider table, which lists
+ *     the identical `-s --allow-all-tools --no-ask-user` combination for
+ *     Copilot's non-interactive mode; this runner was missing `--no-ask-user`
+ *     until that cross-check.
+ *   - Output: NDJSON; assistant text arrives on `assistant.message`-shaped
+ *     events. The exact full field list isn't published, so parseCopilotEvents
+ *     tolerates a couple of plausible shapes (an explicit `type`/`kind` of
+ *     'assistant.message' or 'assistant' carrying `content`/`text`) and
+ *     fails closed (no text extracted) on anything else, rather than
+ *     guessing wrong and emitting garbage.
+ *   - Session/resume: Copilot documents a `--resume=<id>` flag, but nothing
+ *     in this runner's output parsing surfaces a session id to pass back in
+ *     (the same gap the cross-check source above notes about its own
+ *     integration), so resume can't be wired up yet — every mailbox prompt
+ *     is a fresh `copilot -p` invocation, same disclosed limitation as
+ *     CrushAgentRunner. Revisit if a session-id-bearing event/field is found.
+ *   - Token usage: NOT documented for `--output-format json`, and Copilot
+ *     CLI has no documented custom-base-URL override (it talks to GitHub's
+ *     own Copilot backend, not a passthrough-able OpenAI/Anthropic
+ *     endpoint), so this runner does not attempt usage-proxy accounting —
+ *     it always reports 0 tokens. Revisit if GitHub documents a usage field
+ *     or a proxyable endpoint later.
+ *
+ * Org tools — FENCE PROTOCOL: same approach as the other subprocess runners.
+ */
+import { spawn } from 'node:child_process';
+import { buildToolProtocol, parseToolCalls, executeToolCall, formatToolResults, MAX_TOOL_ROUNDS, TOOL_CALL_RE } from './tool-fence.js';
+const TURN_TIMEOUT_MS = 2 * 60 * 60 * 1000;
+/** Distinct from TURN_TIMEOUT_MS: catches a hung first-run interactive prompt
+ *  fast instead of waiting out the full turn timeout. Any output at all
+ *  disarms it. Copilot CLI has a DOCUMENTED bug where its directory-trust
+ *  and path-access prompts can hang indefinitely in CI/headless invocations
+ *  with no way to answer them — this is the primary mitigation for copilot
+ *  specifically, not just a defensive backstop. */
+const STARTUP_GRACE_MS = 45_000;
+function coerceText(v) {
+    if (typeof v === 'string')
+        return v;
+    if (Array.isArray(v)) {
+        return v
+            .filter((b) => !!b && typeof b === 'object' && b.type === 'text')
+            .map((b) => b.text)
+            .join('\n');
+    }
+    return undefined;
+}
+/** Pure NDJSON parser — exported for unit testing against fixture lines
+ *  (copilot-runner.test.ts). */
+export function parseCopilotEvents(lines) {
+    const rawTexts = [];
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || !trimmed.startsWith('{'))
+            continue;
+        let ev;
+        try {
+            ev = JSON.parse(trimmed);
+        }
+        catch {
+            continue;
+        }
+        const kind = ev.type ?? ev.kind;
+        if (kind === 'assistant.message' || kind === 'assistant') {
+            const text = coerceText(ev.content) ?? ev.text ?? coerceText(ev.message?.content) ?? ev.message?.text;
+            if (text)
+                rawTexts.push(text);
+            continue;
+        }
+        if (ev.role === 'assistant') {
+            const text = coerceText(ev.content) ?? ev.text;
+            if (text)
+                rawTexts.push(text);
+        }
+    }
+    const texts = rawTexts.map((t) => t.replace(TOOL_CALL_RE, '').trim());
+    return { texts, rawTexts };
+}
+export class CopilotAgentRunner {
+    copilotBin;
+    constructor(copilotBin) {
+        this.copilotBin = copilotBin;
+    }
+    async *run(args) {
+        const bin = this.copilotBin || process.env.COPILOT_CLI_BIN || 'copilot';
+        try {
+            for await (const p of args.prompt) {
+                const text = typeof p === 'string' ? p : (p?.message?.content ?? String(p ?? ''));
+                let nextPrompt = `${args.systemPrompt}${buildToolProtocol(args.tools)}\n\n---\n\n${text}`;
+                for (let round = 0; round <= MAX_TOOL_ROUNDS; round++) {
+                    const outcome = await this.runTurn(bin, nextPrompt, args);
+                    if (outcome.hangSuspected) {
+                        throw new Error(`CopilotAgentRunner: copilot produced no output within ${STARTUP_GRACE_MS / 1000}s and was ` +
+                            'killed. This is a documented copilot CLI issue: its directory-trust/path-access prompts can ' +
+                            'hang indefinitely in headless invocations with no way to answer them. Run `copilot` once ' +
+                            'manually in a real terminal in this project to accept any prompts (and confirm --add-dir ' +
+                            `covers every path it needs), then retry.${outcome.stderrTail ? `\nstderr: ${outcome.stderrTail.slice(-500)}` : ''}`);
+                    }
+                    if (outcome.exitCode !== 0) {
+                        throw new Error(`CopilotAgentRunner: copilot failed (exit ${outcome.exitCode})` +
+                            (outcome.timedOut ? ` — killed after exceeding the ${TURN_TIMEOUT_MS / 3_600_000}h turn timeout` : '') +
+                            (outcome.stderrTail ? `\nstderr: ${outcome.stderrTail.slice(-500)}` : ''));
+                    }
+                    for (const t of outcome.texts) {
+                        if (t.trim())
+                            yield { type: 'assistant', text: t };
+                    }
+                    const malformed = [];
+                    const calls = parseToolCalls(outcome.rawTexts, (raw, err) => malformed.push(`[monomind] ignored malformed tool_call fence (${err}): ${raw.slice(0, 200)}`));
+                    for (const note of malformed)
+                        yield { type: 'assistant', text: note };
+                    if (calls.length === 0) {
+                        yield { type: 'result', subtype: 'success', input_tokens: 0, output_tokens: 0 };
+                        break;
+                    }
+                    if (round === MAX_TOOL_ROUNDS) {
+                        yield { type: 'assistant', text: `[monomind] tool-call round cap (${MAX_TOOL_ROUNDS}) reached — dropping ${calls.length} pending tool call(s)` };
+                        yield { type: 'result', subtype: 'success', input_tokens: 0, output_tokens: 0 };
+                        break;
+                    }
+                    const results = [];
+                    for (const call of calls)
+                        results.push(await executeToolCall(args.tools, call, args.canUseTool));
+                    nextPrompt = `${args.systemPrompt}${buildToolProtocol(args.tools)}\n\n---\n\n${formatToolResults(calls, results)}`;
+                }
+            }
+        }
+        catch (err) {
+            if (err.code === 'ENOENT') {
+                throw new Error('CopilotAgentRunner requires the GitHub Copilot CLI (copilot) on PATH. ' +
+                    'Install it: npm install -g @github/copilot, then run `copilot` once to ' +
+                    'authenticate. Or unset the runtime to use Claude.');
+            }
+            throw err;
+        }
+    }
+    runTurn(bin, prompt, args) {
+        return new Promise((resolve, reject) => {
+            const cliArgs = ['-p', prompt, '--output-format', 'json', '-s', '--allow-all-tools', '--no-ask-user'];
+            if (args.model)
+                cliArgs.push(`--model=${args.model}`);
+            cliArgs.push('--add-dir', args.cwd);
+            const child = spawn(bin, cliArgs, {
+                cwd: args.cwd,
+                env: { ...process.env, ...args.env },
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            let stderrTail = '';
+            child.stderr?.on('data', (c) => { stderrTail = (stderrTail + c.toString()).slice(-4000); });
+            let sawOutput = false;
+            let timedOut = false;
+            let hangSuspected = false;
+            const KILL_GRACE_MS = 5000;
+            let killTimer;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+                killTimer = setTimeout(() => { try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already gone */ } }, KILL_GRACE_MS);
+                killTimer.unref?.();
+            }, TURN_TIMEOUT_MS);
+            // See STARTUP_GRACE_MS — disarmed by the first stdout chunk below.
+            let hangTimer = setTimeout(() => {
+                hangSuspected = true;
+                child.kill('SIGTERM');
+                killTimer = setTimeout(() => { try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already gone */ } }, KILL_GRACE_MS);
+                killTimer.unref?.();
+            }, STARTUP_GRACE_MS);
+            const exitPromise = new Promise((res, rej) => {
+                child.on('error', rej);
+                child.on('close', (code) => res(code ?? 1));
+            });
+            exitPromise.catch(() => { });
+            const readLines = (async () => {
+                const lines = [];
+                let buf = '';
+                for await (const chunk of child.stdout) {
+                    if (!sawOutput) {
+                        sawOutput = true;
+                        if (hangTimer) {
+                            clearTimeout(hangTimer);
+                            hangTimer = undefined;
+                        }
+                    }
+                    buf += chunk.toString();
+                    const parts = buf.split('\n');
+                    buf = parts.pop() ?? '';
+                    lines.push(...parts);
+                }
+                if (buf.trim())
+                    lines.push(buf);
+                return lines;
+            })();
+            // Timer cleanup lives in a top-level .finally() (not nested inside a
+            // success-path .then()) so it runs on EITHER path — a stdout stream
+            // error would otherwise skip straight to reject() and leave the
+            // TURN_TIMEOUT_MS/hangTimer/killTimer timers running past the
+            // process's actual lifetime.
+            Promise.all([readLines, exitPromise])
+                .then(([lines, exitCode]) => {
+                const parsed = parseCopilotEvents(lines);
+                resolve({ texts: parsed.texts, rawTexts: parsed.rawTexts, exitCode, stderrTail, timedOut, hangSuspected });
+            }, (err) => {
+                // A stdout stream error (the reject path) means the process is
+                // still ALIVE and unmanaged — none of the timeout/hang timers
+                // would have fired to kill it. Without this, that error would
+                // orphan the child. child.kill() on an already-dead process is a
+                // documented no-op, so this is safe on every path.
+                try {
+                    child.kill('SIGTERM');
+                }
+                catch { /* already gone */ }
+                reject(err);
+            })
+                .finally(() => {
+                clearTimeout(timer);
+                if (hangTimer)
+                    clearTimeout(hangTimer);
+                if (killTimer)
+                    clearTimeout(killTimer);
+            });
+        });
+    }
+}
+//# sourceMappingURL=copilot-runner.js.map

package/dist/src/orgrt/copilot-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-runner.js","sourceRoot":"","sources":["../../../src/orgrt/copilot-runner.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACvI,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C;;;;;mDAKmD;AACnD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAWhC,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC;aACL,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAA6B,CAAC,IAAI,KAAK,MAAM,CAAC;aAClI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;gCACgC;AAChC,MAAM,UAAU,kBAAkB,CAAC,KAAe;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACnD,IAAI,EAAgB,CAAC;QACrB,IAAI,CAAC;YAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAErD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC;QAChC,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YACtG,IAAI,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;YAC/C,IAAI,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAaD,MAAM,OAAO,kBAAkB;IACT,UAAU;IAA9B,YAAoB,UAAmB;0BAAnB,UAAU;IAAY,CAAC;IAE3C,KAAK,CAAC,CAAC,GAAG,CAAC,IAAkB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;QAExE,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAClF,IAAI,UAAU,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;gBAE1F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;oBACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;oBAE1D,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CACb,yDAAyD,gBAAgB,GAAG,IAAI,YAAY;4BAC5F,8FAA8F;4BAC9F,2FAA2F;4BAC3F,2FAA2F;4BAC3F,2CAA2C,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACrH,CAAC;oBACJ,CAAC;oBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,4CAA4C,OAAO,CAAC,QAAQ,GAAG;4BAC/D,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iCAAiC,eAAe,GAAG,SAAS,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;4BACtG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1E,CAAC;oBACJ,CAAC;oBAED,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;wBAC9B,IAAI,CAAC,CAAC,IAAI,EAAE;4BAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACrD,CAAC;oBAED,MAAM,SAAS,GAAa,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CACzE,iDAAiD,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9E,CAAC,CAAC;oBACH,KAAK,MAAM,IAAI,IAAI,SAAS;wBAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACvB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;wBAChF,MAAM;oBACR,CAAC;oBAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;wBAC9B,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,mCAAmC,eAAe,wBAAwB,KAAK,CAAC,MAAM,uBAAuB,EAAE,CAAC;wBACjJ,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;wBAChF,MAAM;oBACR,CAAC;oBAED,MAAM,OAAO,GAAa,EAAE,CAAC;oBAC7B,KAAK,MAAM,IAAI,IAAI,KAAK;wBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjG,UAAU,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACrH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,wEAAwE;oBACxE,yEAAyE;oBACzE,mDAAmD,CACpD,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,MAAc,EAAE,IAAkB;QAC7D,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,OAAO,GAAa,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;YAChH,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;gBAChC,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;gBACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,UAAU,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpG,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC;YAC3B,IAAI,SAAoD,CAAC;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;gBAC7G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,EAAE,eAAe,CAAC,CAAC;YAEpB,mEAAmE;YACnE,IAAI,SAAS,GAA8C,UAAU,CAAC,GAAG,EAAE;gBACzE,aAAa,GAAG,IAAI,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;gBAC7G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAErB,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACnD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAE5B,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAA+B,EAAE,CAAC;oBAChE,IAAI,CAAC,SAAS,EAAE,CAAC;wBAAC,SAAS,GAAG,IAAI,CAAC;wBAAC,IAAI,SAAS,EAAE,CAAC;4BAAC,YAAY,CAAC,SAAS,CAAC,CAAC;4BAAC,SAAS,GAAG,SAAS,CAAC;wBAAC,CAAC;oBAAC,CAAC;oBACxG,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACxB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9B,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;oBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;gBACvB,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,EAAE;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,EAAE,CAAC;YAEL,qEAAqE;YACrE,oEAAoE;YACpE,gEAAgE;YAChE,8DAA8D;YAC9D,6BAA6B;YAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;iBAClC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;gBAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACzC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7G,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;gBACT,+DAA+D;gBAC/D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,iEAAiE;gBACjE,mDAAmD;gBACnD,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/orgrt/crush-runner.d.ts

@@ -0,0 +1,24 @@
+import type { AgentRunner, AgentRunArgs, AgentMessage } from './agent-runner.js';
+/** Strip tool_call fences and normalize whitespace on crush's plain-text
+ *  stdout. Exported for unit testing (crush-runner.test.ts). */
+export declare function parseCrushOutput(stdout: string): {
+    text: string;
+    rawText: string;
+};
+export interface CrushAgentRunnerOptions {
+    crushBin?: string;
+    /** Enable usage-proxy accounting. Off by default since the base-URL env
+     *  var it relies on is an unconfirmed guess (see file header). */
+    usageProxy?: {
+        upstreamBaseUrl: string;
+        baseUrlEnvVar?: string;
+    };
+}
+export declare class CrushAgentRunner implements AgentRunner {
+    private crushBin?;
+    private usageProxyOpts?;
+    constructor(opts?: CrushAgentRunnerOptions);
+    run(args: AgentRunArgs): AsyncIterable<AgentMessage>;
+    private runTurn;
+}
+//# sourceMappingURL=crush-runner.d.ts.map

package/dist/src/orgrt/crush-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crush-runner.d.ts","sourceRoot":"","sources":["../../../src/orgrt/crush-runner.ts"],"names":[],"mappings":"AAoDA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAWjF;gEACgE;AAChE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAIlF;AAaD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;sEACkE;IAClE,UAAU,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE;AAED,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,cAAc,CAAC,CAAqD;IAE5E,YAAY,IAAI,GAAE,uBAA4B,EAQ7C;IAEM,GAAG,CAAC,IAAI,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC,CAyF1D;IAED,OAAO,CAAC,OAAO;CAuFhB"}

package/dist/src/orgrt/crush-runner.js

@@ -0,0 +1,251 @@
+// packages/@monomind/cli/src/orgrt/crush-runner.ts
+/**
+ * CrushAgentRunner — AgentRunner impl backed by the Crush CLI
+ * (`crush`, https://github.com/charmbracelet/crush).
+ *
+ * Architectural difference from the other subprocess runners: `crush run
+ * "<prompt>"` (per its public CLI docs) is a plain one-shot invocation —
+ * text response to stdout, no documented JSON output mode. On the FIRST turn
+ * this runner sends the system prompt + tool protocol; subsequent turns add
+ * `--continue` (resume the most-recently-used session — confirmed by
+ * cross-checking a second, independent public agentic-CLI wrapper's provider
+ * table, which lists `--session <id>` / `--continue` as crush's resume
+ * mechanism) instead of re-sending the full system prompt, so conversational
+ * context is NOT re-derived from scratch every turn the way the original
+ * (pre-cross-check) revision of this runner did.
+ *
+ * RISK, not independently confirmed either way: if crush's "most recently
+ * used session" is scoped GLOBALLY rather than per working directory, two
+ * different crush-backed roles running concurrently in the same org (each
+ * with its OWN cwd via args.cwd) could cross-contaminate — role B's
+ * `--continue` might resume role A's conversation instead of its own. crush
+ * DOES support an explicit `--session <id>` flag per the same source, which
+ * would be the correct fix (capture the session id crush's own output
+ * reports, if any, and pass it explicitly instead of relying on "most
+ * recent") — not implemented here because crush's plain-text stdout doesn't
+ * appear to surface a session id to capture. Validate against a live
+ * install before running multiple concurrent crush roles in one org.
+ *
+ * Usage accounting — crush's plain-text output carries no token counts, so
+ * this runner optionally routes crush's LLM traffic through a
+ * UsageProxyServer (usage-proxy.ts): crush supports pointing its provider at
+ * a custom OpenAI-compatible base URL for BYOK/self-hosted setups, so the
+ * runner sets that env var to the local proxy before spawning and reads
+ * totals() after the turn. The exact env var crush reads for a runtime
+ * base-URL override was not confirmed against a live install (its provider
+ * config is normally a JSON file, `~/.config/crush/crush.json`), so the var
+ * name is an OVERRIDABLE BEST GUESS (`OPENAI_BASE_URL`, constructor param
+ * `baseUrlEnvVar`) — if it doesn't match your crush config, usage simply
+ * stays at 0 (fails closed, never breaks the turn itself). A second,
+ * independent source's own integration notes state more confidently that
+ * crush has NO base-URL env override at all and instead reads a runtime
+ * `provider.base_url` from a generated JSON config file pointed to by an
+ * env var — if true, this env-var guess does nothing (which the fails-closed
+ * design already tolerates) and the real fix is writing that config file
+ * before spawn, not renaming the env var. Left as a known follow-up rather
+ * than implemented here, since that source's own claim isn't independently
+ * confirmed either. Fix the org's provider config or pass the right var
+ * name via `baseUrlEnvVar` once confirmed against a live install.
+ *
+ * Org tools — FENCE PROTOCOL: same approach as the other subprocess runners.
+ */
+import { spawn } from 'node:child_process';
+import { buildToolProtocol, parseToolCalls, executeToolCall, formatToolResults, MAX_TOOL_ROUNDS, TOOL_CALL_RE } from './tool-fence.js';
+import { UsageProxyServer } from './usage-proxy.js';
+const TURN_TIMEOUT_MS = 2 * 60 * 60 * 1000;
+/** Distinct from TURN_TIMEOUT_MS: catches a hung first-run interactive prompt
+ *  (trust/telemetry gate) fast instead of waiting out the full turn timeout.
+ *  Fires only if the process has produced ZERO stdout by this point — any
+ *  output at all disarms it, since a slow model response is not a hang. */
+const STARTUP_GRACE_MS = 45_000;
+/** Strip tool_call fences and normalize whitespace on crush's plain-text
+ *  stdout. Exported for unit testing (crush-runner.test.ts). */
+export function parseCrushOutput(stdout) {
+    const rawText = stdout.trim();
+    const text = rawText.replace(TOOL_CALL_RE, '').trim();
+    return { text, rawText };
+}
+export class CrushAgentRunner {
+    crushBin;
+    usageProxyOpts;
+    constructor(opts = {}) {
+        this.crushBin = opts.crushBin;
+        if (opts.usageProxy) {
+            this.usageProxyOpts = {
+                upstreamBaseUrl: opts.usageProxy.upstreamBaseUrl,
+                baseUrlEnvVar: opts.usageProxy.baseUrlEnvVar ?? 'OPENAI_BASE_URL',
+            };
+        }
+    }
+    async *run(args) {
+        const bin = this.crushBin || process.env.CRUSH_CLI_BIN || 'crush';
+        let proxy;
+        if (this.usageProxyOpts) {
+            proxy = new UsageProxyServer({ upstreamBaseUrl: this.usageProxyOpts.upstreamBaseUrl, apiStyle: 'openai' });
+            await proxy.start();
+        }
+        // Set once the first crush invocation completes — subsequent calls pass
+        // --continue (resume the most-recently-used session) instead of
+        // re-sending the full system prompt from scratch every turn.
+        let sessionStarted = false;
+        try {
+            for await (const p of args.prompt) {
+                const text = typeof p === 'string' ? p : (p?.message?.content ?? String(p ?? ''));
+                let nextPrompt = sessionStarted ? text : `${args.systemPrompt}${buildToolProtocol(args.tools)}\n\n---\n\n${text}`;
+                // Reset ONCE per mailbox prompt, not per tool-call round — totals()
+                // is read after the LAST round below, so resetting inside the round
+                // loop was discarding every round's usage except the final one.
+                proxy?.reset();
+                for (let round = 0; round <= MAX_TOOL_ROUNDS; round++) {
+                    const outcome = await this.runTurn(bin, nextPrompt, args, proxy, sessionStarted);
+                    sessionStarted = true;
+                    if (outcome.hangSuspected) {
+                        throw new Error(`CrushAgentRunner: crush produced no output within ${STARTUP_GRACE_MS / 1000}s and was killed. ` +
+                            'This usually means it is stuck on a first-run interactive prompt (trust/telemetry gate) ' +
+                            'that headless mode has no way to answer. Run `crush` once manually in a real terminal in ' +
+                            `this project to accept any prompts, then retry.${outcome.stderrTail ? `\nstderr: ${outcome.stderrTail.slice(-500)}` : ''}`);
+                    }
+                    if (outcome.exitCode !== 0) {
+                        throw new Error(`CrushAgentRunner: crush run failed (exit ${outcome.exitCode})` +
+                            (outcome.timedOut ? ` — killed after exceeding the ${TURN_TIMEOUT_MS / 3_600_000}h turn timeout` : '') +
+                            (outcome.stderrTail ? `\nstderr: ${outcome.stderrTail.slice(-500)}` : ''));
+                    }
+                    if (outcome.text)
+                        yield { type: 'assistant', text: outcome.text };
+                    const malformed = [];
+                    const calls = parseToolCalls([outcome.rawText], (raw, err) => malformed.push(`[monomind] ignored malformed tool_call fence (${err}): ${raw.slice(0, 200)}`));
+                    for (const note of malformed)
+                        yield { type: 'assistant', text: note };
+                    if (calls.length === 0) {
+                        const totals = proxy?.totals();
+                        yield {
+                            type: 'result',
+                            subtype: 'success',
+                            input_tokens: totals?.inputTokens ?? 0,
+                            output_tokens: totals?.outputTokens ?? 0,
+                        };
+                        break;
+                    }
+                    if (round === MAX_TOOL_ROUNDS) {
+                        yield { type: 'assistant', text: `[monomind] tool-call round cap (${MAX_TOOL_ROUNDS}) reached — dropping ${calls.length} pending tool call(s)` };
+                        const totals = proxy?.totals();
+                        yield { type: 'result', subtype: 'success', input_tokens: totals?.inputTokens ?? 0, output_tokens: totals?.outputTokens ?? 0 };
+                        break;
+                    }
+                    // sessionStarted is true by now (set right after the first
+                    // runTurn call above) — the retry continues the same crush
+                    // session via --continue instead of re-sending the system prompt.
+                    const results = [];
+                    for (const call of calls)
+                        results.push(await executeToolCall(args.tools, call, args.canUseTool));
+                    nextPrompt = formatToolResults(calls, results);
+                }
+            }
+        }
+        catch (err) {
+            if (err.code === 'ENOENT') {
+                throw new Error('CrushAgentRunner requires the Crush CLI (crush) on PATH. ' +
+                    'Install it per https://github.com/charmbracelet/crush, then configure a provider. ' +
+                    'Or unset the runtime to use Claude.');
+            }
+            throw err;
+        }
+        finally {
+            await proxy?.stop();
+        }
+    }
+    runTurn(bin, prompt, args, proxy, continueSession) {
+        return new Promise((resolve, reject) => {
+            const cliArgs = ['run', prompt, '--yolo'];
+            if (args.model)
+                cliArgs.push('--model', args.model);
+            if (continueSession)
+                cliArgs.push('--continue');
+            // CRUSH_DISABLE_PROVIDER_AUTO_UPDATE: confirmed via crush's own docs —
+            // suppresses a first-run/periodic provider-list update check that would
+            // otherwise add an unpredictable network round-trip to a headless turn.
+            const env = {
+                ...process.env,
+                CRUSH_DISABLE_PROVIDER_AUTO_UPDATE: '1',
+                ...args.env,
+            };
+            if (proxy && this.usageProxyOpts)
+                env[this.usageProxyOpts.baseUrlEnvVar] = proxy.url();
+            const child = spawn(bin, cliArgs, { cwd: args.cwd, env, stdio: ['ignore', 'pipe', 'pipe'] });
+            let stderrTail = '';
+            child.stderr?.on('data', (c) => { stderrTail = (stderrTail + c.toString()).slice(-4000); });
+            let sawOutput = false;
+            let timedOut = false;
+            let hangSuspected = false;
+            const KILL_GRACE_MS = 5000;
+            let killTimer;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+                killTimer = setTimeout(() => { try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already gone */ } }, KILL_GRACE_MS);
+                killTimer.unref?.();
+            }, TURN_TIMEOUT_MS);
+            // See STARTUP_GRACE_MS — disarmed by the first stdout chunk below.
+            let hangTimer = setTimeout(() => {
+                hangSuspected = true;
+                child.kill('SIGTERM');
+                killTimer = setTimeout(() => { try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already gone */ } }, KILL_GRACE_MS);
+                killTimer.unref?.();
+            }, STARTUP_GRACE_MS);
+            const exitPromise = new Promise((res, rej) => {
+                child.on('error', rej);
+                child.on('close', (code) => res(code ?? 1));
+            });
+            exitPromise.catch(() => { });
+            const readStdout = (async () => {
+                let stdout = '';
+                for await (const chunk of child.stdout) {
+                    if (!sawOutput) {
+                        sawOutput = true;
+                        if (hangTimer) {
+                            clearTimeout(hangTimer);
+                            hangTimer = undefined;
+                        }
+                    }
+                    stdout += chunk.toString();
+                }
+                return stdout;
+            })();
+            // Timer cleanup lives in a top-level .finally() (not nested inside a
+            // success-path .then()) so it runs on EITHER path — a stdout stream
+            // error would otherwise skip straight to reject() and leave the
+            // TURN_TIMEOUT_MS/hangTimer/killTimer timers running past the
+            // process's actual lifetime.
+            Promise.all([readStdout, exitPromise])
+                .then(([stdout, exitCode]) => {
+                const parsed = parseCrushOutput(stdout);
+                resolve({ text: parsed.text, rawText: parsed.rawText, exitCode, stderrTail, timedOut, hangSuspected });
+            }, (err) => {
+                // A stdout stream error (the reject path) means the process is
+                // still ALIVE and unmanaged — none of the timeout/hang timers
+                // would have fired to kill it. Without this, that error would
+                // orphan the child. child.kill() on an already-dead process is a
+                // documented no-op, so this is safe on every path.
+                try {
+                    child.kill('SIGTERM');
+                }
+                catch { /* already gone */ }
+                reject(err);
+            })
+                .finally(() => {
+                clearTimeout(timer);
+                if (hangTimer)
+                    clearTimeout(hangTimer);
+                if (killTimer)
+                    clearTimeout(killTimer);
+            });
+        });
+    }
+}
+//# sourceMappingURL=crush-runner.js.map

package/dist/src/orgrt/crush-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crush-runner.js","sourceRoot":"","sources":["../../../src/orgrt/crush-runner.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACvI,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C;;;2EAG2E;AAC3E,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC;gEACgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAoBD,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAU;IAClB,cAAc,CAAsD;IAE5E,YAAY,IAAI,GAA4B,EAAE;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,cAAc,GAAG;gBACpB,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe;gBAChD,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,iBAAiB;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,GAAG,CAAC,IAAkB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC;QAElE,IAAI,KAAmC,CAAC;QACxC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3G,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,wEAAwE;QACxE,gEAAgE;QAChE,6DAA6D;QAC7D,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAClF,IAAI,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;gBAElH,oEAAoE;gBACpE,oEAAoE;gBACpE,gEAAgE;gBAChE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAEf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;oBACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;oBACjF,cAAc,GAAG,IAAI,CAAC;oBAEtB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CACb,qDAAqD,gBAAgB,GAAG,IAAI,oBAAoB;4BAChG,0FAA0F;4BAC1F,2FAA2F;4BAC3F,kDAAkD,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5H,CAAC;oBACJ,CAAC;oBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,4CAA4C,OAAO,CAAC,QAAQ,GAAG;4BAC/D,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iCAAiC,eAAe,GAAG,SAAS,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;4BACtG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1E,CAAC;oBACJ,CAAC;oBAED,IAAI,OAAO,CAAC,IAAI;wBAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;oBAElE,MAAM,SAAS,GAAa,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAC1E,iDAAiD,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9E,CAAC,CAAC;oBACH,KAAK,MAAM,IAAI,IAAI,SAAS;wBAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACvB,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;wBAC/B,MAAM;4BACJ,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,SAAS;4BAClB,YAAY,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC;4BACtC,aAAa,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC;yBACzC,CAAC;wBACF,MAAM;oBACR,CAAC;oBAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;wBAC9B,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,mCAAmC,eAAe,wBAAwB,KAAK,CAAC,MAAM,uBAAuB,EAAE,CAAC;wBACjJ,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;wBAC/B,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,EAAE,CAAC;wBAC/H,MAAM;oBACR,CAAC;oBAED,2DAA2D;oBAC3D,2DAA2D;oBAC3D,kEAAkE;oBAClE,MAAM,OAAO,GAAa,EAAE,CAAC;oBAC7B,KAAK,MAAM,IAAI,IAAI,KAAK;wBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjG,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,2DAA2D;oBAC3D,oFAAoF;oBACpF,qCAAqC,CACtC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,OAAO,CACb,GAAW,EACX,MAAc,EACd,IAAkB,EAClB,KAAmC,EACnC,eAAwB;QAExB,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,OAAO,GAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,eAAe;gBAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEhD,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,GAAG,GAAuC;gBAC9C,GAAG,OAAO,CAAC,GAAG;gBACd,kCAAkC,EAAE,GAAG;gBACvC,GAAG,IAAI,CAAC,GAAG;aACZ,CAAC;YACF,IAAI,KAAK,IAAI,IAAI,CAAC,cAAc;gBAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YAEvF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAE7F,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,UAAU,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpG,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC;YAC3B,IAAI,SAAoD,CAAC;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;gBAC7G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,EAAE,eAAe,CAAC,CAAC;YAEpB,mEAAmE;YACnE,IAAI,SAAS,GAA8C,UAAU,CAAC,GAAG,EAAE;gBACzE,aAAa,GAAG,IAAI,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;gBAC7G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAErB,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACnD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAE5B,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAA+B,EAAE,CAAC;oBAChE,IAAI,CAAC,SAAS,EAAE,CAAC;wBAAC,SAAS,GAAG,IAAI,CAAC;wBAAC,IAAI,SAAS,EAAE,CAAC;4BAAC,YAAY,CAAC,SAAS,CAAC,CAAC;4BAAC,SAAS,GAAG,SAAS,CAAC;wBAAC,CAAC;oBAAC,CAAC;oBACxG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,EAAE,CAAC;YAEL,qEAAqE;YACrE,oEAAoE;YACpE,gEAAgE;YAChE,8DAA8D;YAC9D,6BAA6B;YAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;iBACnC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE;gBAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;YACzG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;gBACT,+DAA+D;gBAC/D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,iEAAiE;gBACjE,mDAAmD;gBACnD,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/orgrt/daemon.d.ts

@@ -14,7 +14,19 @@ import { type RoleFence } from './fence.js';
  *  undefined for the default path keeps Claude/Antigravity orgs byte-for-byte
  *  unchanged. Callers pass `role.runtime ?? def.runtime` as `orgRuntime`
  *  (see resolveRoleRunner). */
-export type RuntimeKind = 'claude' | 'kimicode' | 'opencode' | 'vercel' | 'codex' | 'antigravity';
+export type RuntimeKind = 'claude' | 'kimicode' | 'opencode' | 'vercel' | 'codex' | 'antigravity' | 'grok' | 'qwen' | 'crush' | 'copilot' | 'pi'
+/** Opt-in alternate to 'pi': keeps the pi subprocess alive for the whole
+ *  mailbox session (--mode rpc) instead of spawning fresh per turn — see
+ *  pi-rpc-runner.ts's header for the protocol source and its one
+ *  documented-but-unverified heuristic (turn-completion detection via
+ *  get_state polling). Prefer plain 'pi' unless you specifically want
+ *  session-lifetime context continuity and have validated this against a
+ *  live pi install. No 'qwen-rpc' equivalent exists yet — qwen's
+ *  --input-format stream-json is real but its exact message schema wasn't
+ *  independently confirmed the way pi's rpc.md was, so implementing it
+ *  would mean guessing at a wire format rather than building against a
+ *  literal, sourced example. */
+ | 'pi-rpc';
 export type ProviderKind = 'subscription' | 'api-key' | 'base-url' | 'bedrock' | 'vertex' | 'gemini' | 'openai' | 'vercel-api-key' | 'codex' | 'antigravity';
 export declare function resolveRunner(orgRuntime?: RuntimeKind, providerKind?: ProviderKind): AgentRunner | undefined;
 /** Per-session variant: a role's own `runtime` field wins over the org-level
@@ -26,6 +38,33 @@ export declare function resolveRoleRunner(roleRuntime?: RuntimeKind, orgRuntime?
 /** Per-role token budget: a role's own `budget_tokens` wins; otherwise the
  *  even split of run_config.budget_tokens across all roles. */
 export declare function roleTokenBudget(role: OrgRole, def: OrgDef): number;
+/** Idle watchdog's per-tick recovery check: given the previous nudge timestamp,
+ *  the cumulative nudge count, and the timestamp of the most recent real tool
+ *  call, returns the nudge count that should carry forward now that fresh
+ *  activity means the org is no longer idle.
+ *
+ *  `nudgedAt !== 0` means we're recovering from an outstanding nudge. Resetting
+ *  the counter here means it only ever tracks UNRESOLVED idle spells in a row,
+ *  not a lifetime total — a long-running org that goes idle and recovers any
+ *  number of times (e.g. periodic checkpoints on a slow background task) is
+ *  never punished for having had several separate, healthy idle spells over
+ *  its lifetime. Before this existed, `nudges` only ever incremented, so a run
+ *  that answered every single nudge with real work still hit the "org idle
+ *  again after 3 nudges" cap and got force-stopped on its 4th idle spell —
+ *  observed live killing an in-progress 24h soak test under 90 minutes in.
+ *
+ *  But "recovering" must mean genuine forward progress, not just any bus
+ *  event — a bare, content-free reply to the nudge (a boss that answers with
+ *  "✓ Complete" and calls no tools at all) still updates lastActivity, so the
+ *  org isn't flagged as silent, but it accomplishes nothing: nobody outside
+ *  the boss's own turn ever sees it, since role coordination only happens via
+ *  tool calls (org_send, org_task, ...). Requiring `lastToolActivity >=
+ *  nudgedAt` — a real tool call happened AFTER this nudge was sent — closes
+ *  that gap: observed live, a boss stuck responding to four consecutive
+ *  10-minute nudges with one-line acknowledgments and zero tool calls looped
+ *  indefinitely making no progress, because every trivial reply reset the cap
+ *  that was supposed to catch exactly this. */
+export declare function resolvedIdleNudgeCount(nudgedAt: number, nudges: number, lastToolActivity: number): number;
 /** Bounded ring buffer for agent terminal scrollback. */
 export declare class ScrollbackBuffer {
     private maxLines;