@mrpatronz/nexusflow 1.9.1 → 2.1.1

package/dist/agent/cliAvailability.d.ts

@@ -0,0 +1,86 @@
+/**
+ * @module agent/cliAvailability
+ * Whether a local CLI agent can actually be driven headlessly.
+ *
+ * The CLI providers previously reported `isConfigured: () => true` with the note
+ * "assume the CLI is installed". That advertises a working provider in the UI even
+ * when it cannot run, so a chat opens, the first turn fails, and the message the
+ * user sees is whatever the CLI happened to print.
+ *
+ * Provider-owned status commands are the source of truth. In particular,
+ * NexusFlow must not infer Claude login from private credential-file shapes:
+ * newer installations may use a keychain or host-managed subscription login.
+ *
+ * Checks are synchronous because `ProviderAdapter.isConfigured()` is. Probe output
+ * is reduced to a closed setup state so account and credential details never cross
+ * the server boundary.
+ */
+export interface CliStatus {
+    /** Whether a turn stands a chance of succeeding. */
+    usable: boolean;
+    /** User-facing explanation. Present whenever `usable` is false. */
+    message?: string;
+    setupIssue?: 'missing-cli' | 'signed-out' | 'probe-failed';
+    recoveryCommand?: string;
+    recoveryLabel?: string;
+}
+export interface DetectOptions {
+    /** Overrides for tests. */
+    env?: NodeJS.ProcessEnv;
+    /** Skips the PATH scan when availability is already known. */
+    hasBinary?: boolean;
+}
+export interface CodexDetectOptions extends DetectOptions {
+    /** Injected command outcome for deterministic tests. */
+    loginStatus?: {
+        exitCode: number | null;
+        error?: string;
+    };
+}
+export interface ClaudeDetectOptions extends DetectOptions {
+    /** Injected command outcome for deterministic tests. */
+    authStatus?: {
+        exitCode: number | null;
+        stdout?: string;
+        error?: string;
+    };
+}
+export interface CopilotDetectOptions extends DetectOptions {
+    /** Injected command outcome for deterministic tests. */
+    helpStatus?: {
+        exitCode: number | null;
+        output?: string;
+        error?: string;
+    };
+}
+/**
+ * Resolves an executable on PATH the way a shell would, honouring PATHEXT on
+ * Windows so `claude.cmd` and `claude.exe` both count.
+ */
+export declare function findExecutable(name: string, env?: NodeJS.ProcessEnv): string | null;
+/**
+ * Whether `claude` can be driven in print mode.
+ *
+ * `claude auth status --json` is the provider-owned authority. NexusFlow only
+ * inspects the boolean `loggedIn` field and never reads or returns credential,
+ * account, auth-method, or provider values.
+ */
+export declare function detectClaudeCliStatus(options?: ClaudeDetectOptions): CliStatus;
+/** Whether the Antigravity CLI is present. It manages its own auth. */
+export declare function detectAntigravityCliStatus(options?: DetectOptions): CliStatus;
+/**
+ * Whether Codex can run non-interactively with the user's existing CLI login.
+ * `codex login status` is the supported auth probe and does not expose or copy
+ * the credential store. A ChatGPT subscription login is sufficient; no API key
+ * is required.
+ */
+export declare function detectCodexCliStatus(options?: CodexDetectOptions): CliStatus;
+/**
+ * Whether the installed Copilot CLI exposes its supported ACP server.
+ *
+ * Copilot has no documented non-interactive login-status command. Session
+ * creation is therefore the authentication authority; this probe only avoids
+ * advertising older installations that cannot speak ACP at all.
+ */
+export declare function detectCopilotCliStatus(options?: CopilotDetectOptions): CliStatus;
+//# sourceMappingURL=cliAvailability.d.ts.map

package/dist/agent/cliAvailability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliAvailability.d.ts","sourceRoot":"","sources":["../../src/agent/cliAvailability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,MAAM,WAAW,SAAS;IACxB,oDAAoD;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,cAAc,CAAC;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,wDAAwD;IACxD,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D;AAED,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,wDAAwD;IACxD,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,wDAAwD;IACxD,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAsBhG;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,mBAAwB,GAAG,SAAS,CAgElF;AAED,uEAAuE;AACvE,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,aAAkB,GAAG,SAAS,CAUjF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,kBAAuB,GAAG,SAAS,CAiDhF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,oBAAyB,GAAG,SAAS,CAgDpF"}

package/dist/agent/cliAvailability.js

@@ -0,0 +1,231 @@
+/**
+ * @module agent/cliAvailability
+ * Whether a local CLI agent can actually be driven headlessly.
+ *
+ * The CLI providers previously reported `isConfigured: () => true` with the note
+ * "assume the CLI is installed". That advertises a working provider in the UI even
+ * when it cannot run, so a chat opens, the first turn fails, and the message the
+ * user sees is whatever the CLI happened to print.
+ *
+ * Provider-owned status commands are the source of truth. In particular,
+ * NexusFlow must not infer Claude login from private credential-file shapes:
+ * newer installations may use a keychain or host-managed subscription login.
+ *
+ * Checks are synchronous because `ProviderAdapter.isConfigured()` is. Probe output
+ * is reduced to a closed setup state so account and credential details never cross
+ * the server boundary.
+ */
+import * as fsSync from 'node:fs';
+import * as path from 'node:path';
+import { spawnSync } from 'node:child_process';
+/**
+ * Resolves an executable on PATH the way a shell would, honouring PATHEXT on
+ * Windows so `claude.cmd` and `claude.exe` both count.
+ */
+export function findExecutable(name, env = process.env) {
+    const pathValue = env.PATH ?? env.Path ?? '';
+    if (!pathValue)
+        return null;
+    const separator = process.platform === 'win32' ? ';' : ':';
+    const extensions = process.platform === 'win32'
+        ? (env.PATHEXT ?? '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean)
+        : [''];
+    for (const dir of pathValue.split(separator).filter(Boolean)) {
+        const base = path.join(dir.replace(/^"|"$/g, ''), name);
+        const candidates = [base, ...extensions.map((extension) => base + extension.toLowerCase())];
+        for (const candidate of candidates) {
+            try {
+                if (fsSync.statSync(candidate).isFile())
+                    return candidate;
+            }
+            catch {
+                // Not here; keep looking.
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Whether `claude` can be driven in print mode.
+ *
+ * `claude auth status --json` is the provider-owned authority. NexusFlow only
+ * inspects the boolean `loggedIn` field and never reads or returns credential,
+ * account, auth-method, or provider values.
+ */
+export function detectClaudeCliStatus(options = {}) {
+    const env = options.env ?? process.env;
+    const executable = options.hasBinary === false ? null : findExecutable('claude', env);
+    const hasBinary = options.hasBinary ?? executable !== null;
+    if (!hasBinary) {
+        return {
+            usable: false,
+            message: 'The Claude Code CLI was not found on PATH.',
+            setupIssue: 'missing-cli',
+            recoveryCommand: 'npm install -g @anthropic-ai/claude-code',
+            recoveryLabel: 'Copy install command',
+        };
+    }
+    if (env.ANTHROPIC_API_KEY
+        || env.ANTHROPIC_AUTH_TOKEN
+        || env.CLAUDE_CODE_USE_BEDROCK === '1'
+        || env.CLAUDE_CODE_USE_VERTEX === '1'
+        || env.CLAUDE_CODE_USE_FOUNDRY === '1')
+        return { usable: true };
+    let authStatus = options.authStatus;
+    if (!authStatus) {
+        const result = spawnSync(executable ?? 'claude', ['auth', 'status', '--json'], {
+            env,
+            encoding: 'utf-8',
+            timeout: 5_000,
+            windowsHide: true,
+            shell: process.platform === 'win32' && /\.(cmd|bat)$/i.test(executable ?? ''),
+        });
+        authStatus = {
+            exitCode: result.status,
+            stdout: result.stdout ?? '',
+            error: result.error?.message,
+        };
+    }
+    if (!authStatus.error && typeof authStatus.stdout === 'string') {
+        try {
+            const parsed = JSON.parse(authStatus.stdout);
+            if (parsed.loggedIn === true)
+                return { usable: true };
+            if (parsed.loggedIn === false) {
+                return {
+                    usable: false,
+                    message: 'Claude Code is installed but not signed in. Use your Claude subscription; no API key is required.',
+                    setupIssue: 'signed-out',
+                    recoveryCommand: 'claude auth login',
+                    recoveryLabel: 'Copy sign-in command',
+                };
+            }
+        }
+        catch {
+            // A changed or malformed provider response is a compatibility failure,
+            // not evidence that the user is signed out.
+        }
+    }
+    return {
+        usable: false,
+        message: 'NexusFlow could not verify Claude Code login. Check it in a terminal, then recheck.',
+        setupIssue: 'probe-failed',
+        recoveryCommand: 'claude auth status --json',
+        recoveryLabel: 'Copy status command',
+    };
+}
+/** Whether the Antigravity CLI is present. It manages its own auth. */
+export function detectAntigravityCliStatus(options = {}) {
+    const env = options.env ?? process.env;
+    const hasBinary = options.hasBinary ?? findExecutable('agy', env) !== null;
+    return hasBinary
+        ? { usable: true }
+        : {
+            usable: false,
+            message: 'The Antigravity CLI (`agy`) was not found on PATH.',
+        };
+}
+/**
+ * Whether Codex can run non-interactively with the user's existing CLI login.
+ * `codex login status` is the supported auth probe and does not expose or copy
+ * the credential store. A ChatGPT subscription login is sufficient; no API key
+ * is required.
+ */
+export function detectCodexCliStatus(options = {}) {
+    const env = options.env ?? process.env;
+    const executable = options.hasBinary === false ? null : findExecutable('codex', env);
+    const hasBinary = options.hasBinary ?? executable !== null;
+    if (!hasBinary) {
+        return {
+            usable: false,
+            message: 'The Codex CLI was not found on PATH.',
+            setupIssue: 'missing-cli',
+            recoveryCommand: 'npm install -g @openai/codex',
+            recoveryLabel: 'Copy install command',
+        };
+    }
+    let loginStatus = options.loginStatus;
+    if (!loginStatus) {
+        const result = spawnSync(executable ?? 'codex', ['login', 'status'], {
+            env,
+            encoding: 'utf-8',
+            timeout: 5_000,
+            windowsHide: true,
+            shell: process.platform === 'win32' && /\.(cmd|bat)$/i.test(executable ?? ''),
+        });
+        loginStatus = {
+            exitCode: result.status,
+            error: result.error?.message,
+        };
+    }
+    if (!loginStatus.error && loginStatus.exitCode === 0)
+        return { usable: true };
+    if (!loginStatus.error && loginStatus.exitCode === 1) {
+        return {
+            usable: false,
+            message: 'Codex is installed but not signed in. Use your ChatGPT account; no API key is required.',
+            setupIssue: 'signed-out',
+            recoveryCommand: 'codex login',
+            recoveryLabel: 'Copy sign-in command',
+        };
+    }
+    return {
+        usable: false,
+        message: 'NexusFlow could not verify Codex login. Check it in a terminal, then recheck.',
+        setupIssue: 'probe-failed',
+        recoveryCommand: 'codex login status',
+        recoveryLabel: 'Copy status command',
+    };
+}
+/**
+ * Whether the installed Copilot CLI exposes its supported ACP server.
+ *
+ * Copilot has no documented non-interactive login-status command. Session
+ * creation is therefore the authentication authority; this probe only avoids
+ * advertising older installations that cannot speak ACP at all.
+ */
+export function detectCopilotCliStatus(options = {}) {
+    const env = options.env ?? process.env;
+    const executable = options.hasBinary === false ? null : findExecutable('copilot', env);
+    const hasBinary = options.hasBinary ?? executable !== null;
+    if (!hasBinary) {
+        return {
+            usable: false,
+            message: 'The GitHub Copilot CLI was not found on PATH. Install it, then run `copilot login`.',
+        };
+    }
+    // A classic PAT takes precedence over saved OAuth but is unsupported by the
+    // Copilot CLI, so this is one credential failure we can identify safely.
+    const token = env.COPILOT_GITHUB_TOKEN ?? env.GH_TOKEN ?? env.GITHUB_TOKEN;
+    if (token?.startsWith('ghp_')) {
+        return {
+            usable: false,
+            message: 'GitHub Copilot CLI does not support classic `ghp_` tokens. Remove the overriding token and run `copilot login`.',
+        };
+    }
+    let helpStatus = options.helpStatus;
+    if (!helpStatus) {
+        const result = spawnSync(executable ?? 'copilot', ['help'], {
+            env,
+            encoding: 'utf-8',
+            timeout: 5_000,
+            windowsHide: true,
+            shell: process.platform === 'win32' && /\.(cmd|bat)$/i.test(executable ?? ''),
+        });
+        helpStatus = {
+            exitCode: result.status,
+            output: `${result.stdout ?? ''}\n${result.stderr ?? ''}`,
+            error: result.error?.message,
+        };
+    }
+    if (helpStatus.exitCode === 0 && /--acp\b/.test(helpStatus.output ?? '')) {
+        return { usable: true };
+    }
+    return {
+        usable: false,
+        message: helpStatus.error
+            ? `NexusFlow could not inspect GitHub Copilot CLI ACP support (${helpStatus.error}). Update Copilot CLI and try again.`
+            : 'The installed GitHub Copilot CLI does not expose ACP. Update it, then run `copilot login`.',
+    };
+}
+//# sourceMappingURL=cliAvailability.js.map

package/dist/agent/cliAvailability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliAvailability.js","sourceRoot":"","sources":["../../src/agent/cliAvailability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAkC/C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC7C,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACnE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAET,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,SAAS,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAA+B,EAAE;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC;IAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,4CAA4C;YACrD,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,0CAA0C;YAC3D,aAAa,EAAE,sBAAsB;SACtC,CAAC;IACJ,CAAC;IAED,IACE,GAAG,CAAC,iBAAiB;WAClB,GAAG,CAAC,oBAAoB;WACxB,GAAG,CAAC,uBAAuB,KAAK,GAAG;WACnC,GAAG,CAAC,sBAAsB,KAAK,GAAG;WAClC,GAAG,CAAC,uBAAuB,KAAK,GAAG;QACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE1B,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;YAC7E,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,UAAU,GAAG;YACX,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAA2B,CAAC;YACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACtD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,mGAAmG;oBAC5G,UAAU,EAAE,YAAY;oBACxB,eAAe,EAAE,mBAAmB;oBACpC,aAAa,EAAE,sBAAsB;iBACtC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,4CAA4C;QAC9C,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,qFAAqF;QAC9F,UAAU,EAAE,cAAc;QAC1B,eAAe,EAAE,2BAA2B;QAC5C,aAAa,EAAE,qBAAqB;KACrC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,0BAA0B,CAAC,UAAyB,EAAE;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;IAE3E,OAAO,SAAS;QACd,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;QAClB,CAAC,CAAC;YACA,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,oDAAoD;SAC9D,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAA8B,EAAE;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC;IAE3D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,sCAAsC;YAC/C,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,8BAA8B;YAC/C,aAAa,EAAE,sBAAsB;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACtC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,IAAI,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;YACnE,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,WAAW,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE9E,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,yFAAyF;YAClG,UAAU,EAAE,YAAY;YACxB,eAAe,EAAE,aAAa;YAC9B,aAAa,EAAE,sBAAsB;SACtC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,+EAA+E;QACxF,UAAU,EAAE,cAAc;QAC1B,eAAe,EAAE,oBAAoB;QACrC,aAAa,EAAE,qBAAqB;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAgC,EAAE;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC;IAE3D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,qFAAqF;SAC/F,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,CAAC;IAC3E,IAAI,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,iHAAiH;SAC3H,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;YAC1D,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,UAAU,GAAG;YACX,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE;YACxD,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,UAAU,CAAC,KAAK;YACvB,CAAC,CAAC,+DAA+D,UAAU,CAAC,KAAK,sCAAsC;YACvH,CAAC,CAAC,4FAA4F;KACjG,CAAC;AACJ,CAAC"}

package/dist/agent/cliAvailability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cliAvailability.test.d.ts.map

package/dist/agent/cliAvailability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliAvailability.test.d.ts","sourceRoot":"","sources":["../../src/agent/cliAvailability.test.ts"],"names":[],"mappings":""}

package/dist/agent/cliAvailability.test.js

@@ -0,0 +1,192 @@
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { detectAntigravityCliStatus, detectClaudeCliStatus, detectCodexCliStatus, detectCopilotCliStatus, findExecutable, } from './cliAvailability.js';
+let home = '';
+beforeEach(async () => {
+    home = await fs.mkdtemp(path.join(os.tmpdir(), 'nexusflow-cliavail-'));
+});
+afterEach(async () => {
+    await fs.rm(home, { recursive: true, force: true, maxRetries: 5, retryDelay: 200 });
+});
+describe('findExecutable', () => {
+    it('finds a file on PATH', async () => {
+        const name = process.platform === 'win32' ? 'thing.cmd' : 'thing';
+        await fs.writeFile(path.join(home, name), '', 'utf-8');
+        expect(findExecutable('thing', { PATH: home, PATHEXT: '.CMD' })).not.toBeNull();
+    });
+    it('returns null when the name is not on PATH', () => {
+        expect(findExecutable('definitely-not-here', { PATH: home })).toBeNull();
+    });
+    it('returns null when PATH is empty', () => {
+        expect(findExecutable('claude', {})).toBeNull();
+    });
+});
+describe('detectClaudeCliStatus', () => {
+    it('is unusable when the binary is missing, and says so', () => {
+        const status = detectClaudeCliStatus({ hasBinary: false, env: {} });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/not found on PATH/);
+        expect(status).toMatchObject({
+            setupIssue: 'missing-cli',
+            recoveryCommand: 'npm install -g @anthropic-ai/claude-code',
+        });
+    });
+    it('is usable when an API key is set without inspecting auth status', () => {
+        const status = detectClaudeCliStatus({
+            hasBinary: true,
+            env: { ANTHROPIC_API_KEY: 'sk-test' },
+            authStatus: { exitCode: 1, stdout: '{not json', error: 'must not leak' },
+        });
+        expect(status).toEqual({ usable: true });
+    });
+    it.each([
+        { ANTHROPIC_AUTH_TOKEN: 'gateway-token' },
+        { CLAUDE_CODE_USE_BEDROCK: '1' },
+        { CLAUDE_CODE_USE_VERTEX: '1' },
+        { CLAUDE_CODE_USE_FOUNDRY: '1' },
+    ])('accepts a declared provider-owned external auth mode', (externalEnv) => {
+        expect(detectClaudeCliStatus({
+            hasBinary: true,
+            env: externalEnv,
+            authStatus: { exitCode: 1, stdout: JSON.stringify({ loggedIn: false }) },
+        })).toEqual({ usable: true });
+    });
+    it('accepts provider-owned subscription login without returning account metadata', () => {
+        const status = detectClaudeCliStatus({
+            hasBinary: true,
+            env: {},
+            authStatus: {
+                exitCode: 0,
+                stdout: JSON.stringify({ loggedIn: true, authMethod: 'claude.ai', apiProvider: 'firstParty', email: 'private@example.test' }),
+            },
+        });
+        expect(status).toEqual({ usable: true });
+    });
+    it('maps a parsed signed-out response to keyless Claude login recovery', () => {
+        const status = detectClaudeCliStatus({
+            hasBinary: true,
+            env: {},
+            authStatus: { exitCode: 1, stdout: JSON.stringify({ loggedIn: false }) },
+        });
+        expect(status).toMatchObject({
+            usable: false,
+            setupIssue: 'signed-out',
+            recoveryCommand: 'claude auth login',
+            recoveryLabel: 'Copy sign-in command',
+        });
+        expect(status.message).toMatch(/no API key is required/i);
+    });
+    it.each([
+        { name: 'malformed output', authStatus: { exitCode: 0, stdout: '{ not json' } },
+        { name: 'unknown schema', authStatus: { exitCode: 0, stdout: '{"authenticated":true}' } },
+        { name: 'timeout', authStatus: { exitCode: null, stdout: '', error: 'timed out at C:\\private\\path' } },
+    ])('sanitizes a $name auth probe failure', ({ authStatus }) => {
+        const status = detectClaudeCliStatus({ hasBinary: true, env: {}, authStatus });
+        expect(status).toMatchObject({
+            usable: false,
+            setupIssue: 'probe-failed',
+            recoveryCommand: 'claude auth status --json',
+        });
+        expect(status.message).not.toContain('private');
+        expect(status).not.toHaveProperty('stdout');
+    });
+});
+describe('detectAntigravityCliStatus', () => {
+    it('is usable when agy is on PATH', () => {
+        expect(detectAntigravityCliStatus({ hasBinary: true }).usable).toBe(true);
+    });
+    it('reports the missing binary otherwise', () => {
+        const status = detectAntigravityCliStatus({ hasBinary: false });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/agy/);
+    });
+});
+describe('detectCodexCliStatus', () => {
+    it('is unusable when the binary is missing', () => {
+        const status = detectCodexCliStatus({ hasBinary: false, env: {} });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/not found on PATH/i);
+        expect(status).toMatchObject({
+            setupIssue: 'missing-cli',
+            recoveryCommand: 'npm install -g @openai/codex',
+        });
+    });
+    it('accepts a saved ChatGPT or API login reported by the CLI', () => {
+        const status = detectCodexCliStatus({
+            hasBinary: true,
+            env: {},
+            loginStatus: { exitCode: 0 },
+        });
+        expect(status).toEqual({ usable: true });
+    });
+    it('directs signed-out users to ChatGPT login without demanding an API key', () => {
+        const status = detectCodexCliStatus({
+            hasBinary: true,
+            env: {},
+            loginStatus: { exitCode: 1 },
+        });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/no API key is required/i);
+        expect(status).toMatchObject({
+            setupIssue: 'signed-out',
+            recoveryCommand: 'codex login',
+        });
+    });
+    it('reports a timed-out or failed auth probe actionably', () => {
+        const status = detectCodexCliStatus({
+            hasBinary: true,
+            env: {},
+            loginStatus: { exitCode: null, error: 'timed out' },
+        });
+        expect(status.usable).toBe(false);
+        expect(status).toMatchObject({
+            setupIssue: 'probe-failed',
+            recoveryCommand: 'codex login status',
+        });
+        expect(status.message).not.toMatch(/timed out/);
+    });
+});
+describe('detectCopilotCliStatus', () => {
+    it('is unusable when the binary is missing', () => {
+        const status = detectCopilotCliStatus({ hasBinary: false, env: {} });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/not found on PATH/i);
+    });
+    it('accepts an installation whose help advertises ACP', () => {
+        expect(detectCopilotCliStatus({
+            hasBinary: true,
+            env: {},
+            helpStatus: { exitCode: 0, output: '  --acp  Start Agent Client Protocol server' },
+        })).toEqual({ usable: true });
+    });
+    it('asks users with an older CLI to update it', () => {
+        const status = detectCopilotCliStatus({
+            hasBinary: true,
+            env: {},
+            helpStatus: { exitCode: 0, output: 'Usage: copilot' },
+        });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/does not expose ACP/i);
+    });
+    it('reports a failed or timed-out capability probe', () => {
+        const status = detectCopilotCliStatus({
+            hasBinary: true,
+            env: {},
+            helpStatus: { exitCode: null, error: 'timed out' },
+        });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/timed out/);
+    });
+    it('rejects an overriding classic PAT that Copilot cannot use', () => {
+        const status = detectCopilotCliStatus({
+            hasBinary: true,
+            env: { COPILOT_GITHUB_TOKEN: 'ghp_classic' },
+            helpStatus: { exitCode: 0, output: '--acp' },
+        });
+        expect(status.usable).toBe(false);
+        expect(status.message).toMatch(/classic/i);
+    });
+});
+//# sourceMappingURL=cliAvailability.test.js.map

package/dist/agent/cliAvailability.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliAvailability.test.js","sourceRoot":"","sources":["../../src/agent/cliAvailability.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,IAAI,IAAI,GAAG,EAAE,CAAC;AAEd,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAEvD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,0CAA0C;SAC5D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE;YACrC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE;SACzE,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,EAAE,oBAAoB,EAAE,eAAe,EAAE;QACzC,EAAE,uBAAuB,EAAE,GAAG,EAAE;QAChC,EAAE,sBAAsB,EAAE,GAAG,EAAE;QAC/B,EAAE,uBAAuB,EAAE,GAAG,EAAE;KACjC,CAAC,CAAC,sDAAsD,EAAE,CAAC,WAAW,EAAE,EAAE;QACzE,MAAM,CAAC,qBAAqB,CAAC;YAC3B,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,WAAW;YAChB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE;SACzE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,UAAU,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;aAC9H;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE;SACzE,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,YAAY;YACxB,eAAe,EAAE,mBAAmB;YACpC,aAAa,EAAE,sBAAsB;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAC/E,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE;QACzF,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE;KACzG,CAAC,CAAC,sCAAsC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAE/E,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,2BAA2B;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,0BAA0B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,0BAA0B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,8BAA8B;SAChD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,UAAU,EAAE,YAAY;YACxB,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,oBAAoB;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,sBAAsB,CAAC;YAC5B,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,6CAA6C,EAAE;SACnF,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE;SACtD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE,oBAAoB,EAAE,aAAa,EAAE;YAC5C,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent/session.d.ts

@@ -2,6 +2,7 @@
  * @module agent/session
  * Session identity for chat agents that support resumable conversations.
  */
+import type { AgentExecutionProfile } from './ProviderRegistry.js';
 /** A chat session to create or resume. `resume` means the session already has turns on disk. */
 export interface AgentSession {
     id: string;
@@ -21,5 +22,5 @@ export declare function isValidSessionUuid(id: unknown): id is string;
  * --session-id on the first turn and every later turn resumes that id;
  * resumed sessions use --resume from the start.
  */
-export declare function buildClaudeTurnArgs(isFirstTurn: boolean, session?: AgentSession): string[];
+export declare function buildClaudeTurnArgs(isFirstTurn: boolean, session?: AgentSession, executionProfile?: AgentExecutionProfile): string[];
 //# sourceMappingURL=session.d.ts.map

package/dist/agent/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/agent/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,gGAAgG;AAChG,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;CACjB;AAID;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,GAAG,EAAE,IAAI,MAAM,CAE5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,MAAM,EAAE,CAQ1F"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/agent/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,gGAAgG;AAChG,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;CACjB;AAID;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,GAAG,EAAE,IAAI,MAAM,CAE5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,OAAO,EACpB,OAAO,CAAC,EAAE,YAAY,EACtB,gBAAgB,GAAE,qBAAgC,GACjD,MAAM,EAAE,CAmBV"}

package/dist/agent/session.js

@@ -19,13 +19,24 @@ export function isValidSessionUuid(id) {
  * --session-id on the first turn and every later turn resumes that id;
  * resumed sessions use --resume from the start.
  */
-export function buildClaudeTurnArgs(isFirstTurn, session) {
+export function buildClaudeTurnArgs(isFirstTurn, session, executionProfile = 'review') {
+    const outputArgs = [
+        '--output-format', 'stream-json',
+        '--verbose',
+        '--include-partial-messages',
+    ];
+    const permissionArgs = [
+        '--permission-mode',
+        executionProfile === 'workspace-write' ? 'acceptEdits' : 'plan',
+    ];
     if (!session) {
-        return isFirstTurn ? ['-p'] : ['-c', '-p'];
+        return isFirstTurn
+            ? ['-p', ...outputArgs, ...permissionArgs]
+            : ['-c', '-p', ...outputArgs, ...permissionArgs];
     }
     if (!session.resume && isFirstTurn) {
-        return ['-p', '--session-id', session.id];
+        return ['-p', ...outputArgs, ...permissionArgs, '--session-id', session.id];
     }
-    return ['-p', '--resume', session.id];
+    return ['-p', ...outputArgs, ...permissionArgs, '--resume', session.id];
 }
 //# sourceMappingURL=session.js.map

package/dist/agent/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/agent/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAW;IAC5C,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAoB,EAAE,OAAsB;IAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/agent/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAW;IAC5C,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAoB,EACpB,OAAsB,EACtB,mBAA0C,QAAQ;IAElD,MAAM,UAAU,GAAG;QACjB,iBAAiB,EAAE,aAAa;QAChC,WAAW;QACX,4BAA4B;KAC7B,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,mBAAmB;QACnB,gBAAgB,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;KAChE,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,WAAW;YAChB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,cAAc,CAAC;YAC1C,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,cAAc,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC"}