@onepointfour-packs/flaredeck-agent 0.1.0

package/dist/config.js

@@ -0,0 +1,119 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+export const DEFAULTS = {
+    mcpServerName: 'flaredeck',
+    mcpUrl: 'https://mcp.flaredeck.app/mcp',
+    agentServiceUrl: 'https://flaredeck-agent-861259873190.us-central1.run.app',
+};
+const configDir = () => join(process.env['XDG_CONFIG_HOME'] || join(homedir(), '.config'), 'flaredeck-agent');
+/** A readable, collision-free file name for a checkout path. */
+const slug = (repo) => repo.replace(/\/+$/, '').replace(/[^\w.-]+/g, '-').replace(/^-+/, '').slice(-90) || 'default';
+/**
+ * Config per REPO, not per machine.
+ *
+ * One machine runs several agents — a worker on one project, a lead on another, or simply two
+ * checkouts. With a single file they shared an identity: starting the agent in a second repo
+ * picked up the first one's account and listened on its queue, which looks like it is working
+ * and is entirely the wrong agent.
+ *
+ * Keyed by path, so `cd` into a repo and run it and you get that repo's agent.
+ */
+export const configPath = (repo) => join(configDir(), 'repos', `${slug(repo)}.json`);
+/** Where a single machine-wide config used to live, before agents were per repo. */
+const legacyPath = () => join(configDir(), 'config.json');
+export function loadConfig(repo = process.cwd()) {
+    try {
+        const raw = JSON.parse(readFileSync(readableConfig(repo), 'utf8'));
+        return {
+            repo: raw.repo ?? process.cwd(),
+            ...(raw.repos?.length ? { repos: raw.repos } : {}),
+            mcpServerName: raw.mcpServerName ?? DEFAULTS.mcpServerName,
+            mcpUrl: raw.mcpUrl ?? DEFAULTS.mcpUrl,
+            ...(raw.tenantId ? { tenantId: raw.tenantId } : {}),
+            ...(raw.apiKey ? { apiKey: raw.apiKey } : {}),
+            ...(raw.oauth ? { oauth: raw.oauth } : {}),
+            ...(raw.github ? { github: raw.github } : {}),
+            ...(raw.baseBranch ? { baseBranch: raw.baseBranch } : {}),
+            ...(raw.runs ? { runs: raw.runs } : {}),
+            agentServiceUrl: raw.agentServiceUrl ?? DEFAULTS.agentServiceUrl,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * This repo's config, falling back to the old machine-wide one when it names this same repo —
+ * so an existing setup keeps working and is written to the new place on its next save.
+ */
+function readableConfig(repo) {
+    const mine = configPath(repo);
+    if (existsSync(mine))
+        return mine;
+    try {
+        const legacy = JSON.parse(readFileSync(legacyPath(), 'utf8'));
+        if (legacy?.repo === repo)
+            return legacyPath();
+    }
+    catch { /* no legacy config */ }
+    return mine;
+}
+export function saveConfig(config) {
+    const path = configPath(config.repo);
+    mkdirSync(dirname(path), { recursive: true });
+    // 0600: the file holds an API key that can comment on and move cards across the whole tenant.
+    // `mode` on writeFileSync only applies when the file is CREATED, so an existing one keeps
+    // whatever it had — chmod every time instead of trusting the first write.
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    chmodSync(path, 0o600);
+    return path;
+}
+/** Forget this repo's agent, so the next login is a clean choice of account. */
+/**
+ * A PERSON's FlareDeck login on this machine — not any agent's. Kept apart from the repo
+ * configs because it answers for the agents rather than acting as one: the approvals inbox
+ * decides as this account, and the server refuses a verdict from an agent account.
+ */
+const mePath = () => join(configDir(), 'me.json');
+export function loadMe() {
+    try {
+        const raw = JSON.parse(readFileSync(mePath(), 'utf8'));
+        return raw?.accessToken ? raw : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function saveMe(tokens) {
+    const path = mePath();
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(tokens, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    chmodSync(path, 0o600);
+    return path;
+}
+export function forgetConfig(repo) {
+    let removed = false;
+    for (const path of [configPath(repo), legacyPath()]) {
+        try {
+            // Only the legacy file that belongs to THIS repo: a machine-wide config from before
+            // agents were per repo may be another checkout's, and deleting it would be a surprise.
+            if (path === legacyPath()) {
+                const legacy = JSON.parse(readFileSync(path, 'utf8'));
+                if (legacy?.repo !== repo)
+                    continue;
+            }
+            if (existsSync(path)) {
+                rmSync(path);
+                removed = true;
+            }
+        }
+        catch { /* nothing there */ }
+    }
+    return removed;
+}
+/** Config with defaults filled in — for commands that can run before `login` has written one. */
+export function configOrDefaults(repo = process.cwd()) {
+    return loadConfig(repo) ?? { repo, ...DEFAULTS };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmF1C,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,aAAa,EAAE,WAAW;IAC1B,MAAM,EAAE,+BAA+B;IACvC,eAAe,EAAE,0DAA0D;CACnE,CAAC;AAEX,MAAM,SAAS,GAAG,GAAW,EAAE,CAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAExF,gEAAgE;AAChE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CACpC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;AAEhG;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAErG,oFAAoF;AACpF,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAElE,MAAM,UAAU,UAAU,CAAC,OAAe,OAAO,CAAC,GAAG,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAoB,CAAC;QACtF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE;YAC/B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;YAC1D,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;YACrC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;SACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,EAAE,IAAI,KAAK,IAAI;YAAE,OAAO,UAAU,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,8FAA8F;IAC9F,0FAA0F;IAC1F,0EAA0E;IAC1E,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF;;;;GAIG;AACH,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;AAE1D,MAAM,UAAU,MAAM;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,OAAO,GAAG,EAAE,WAAW,CAAC,CAAC,CAAE,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAc;IACnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,oFAAoF;YACpF,uFAAuF;YACvF,IAAI,IAAI,KAAK,UAAU,EAAE,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBACtD,IAAI,MAAM,EAAE,IAAI,KAAK,IAAI;oBAAE,SAAS;YACtC,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,OAAe,OAAO,CAAC,GAAG,EAAE;IAC3D,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;AACnD,CAAC"}

package/dist/engine-antigravity.d.ts

@@ -0,0 +1,23 @@
+import type { Engine, EngineCapabilities, EngineRun, RunContext } from './engine.js';
+export declare class AntigravityEngine implements Engine {
+    readonly name = "antigravity";
+    /**
+     * Measured against the SDK, not assumed. PreToolCallDecideHook is a DecideHook — it can deny a
+     * call and rewrite its arguments. PostToolCallHook is an InspectHook: it SEES a tool result and
+     * cannot change it, so a secret that comes back in output can be noticed and never redacted.
+     * That is why this is declared rather than hoped for: the harness reads it and refuses to hand
+     * this engine a secret, instead of handing one over and finding out afterwards.
+     */
+    readonly capabilities: EngineCapabilities;
+    run(brief: string, ctx: RunContext): EngineRun;
+}
+export declare function pythonWithSdk(log: (text: string) => void): string;
+/**
+ * How this machine talks to Gemini — worked out, never asked for.
+ *
+ * In order: an explicit Vertex setting, then the Gemini key the harness already keeps for intake
+ * briefs, then Google's application-default credentials, which are on any machine that has run
+ * `gcloud auth application-default login` — which is to say, any machine that deploys this
+ * project. Three ways to already be set up, and a prompt only ever appears if none of them hold.
+ */
+export declare function geminiEnv(): Record<string, string>;

package/dist/engine-antigravity.js

@@ -0,0 +1,357 @@
+import { execFileSync, spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { createServer } from 'node:http';
+import { createInterface } from 'node:readline';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { CouldNotWork } from './engine.js';
+import { judgeCommand } from './jevguard.js';
+import { FLAREDECK_READ_TOOLS } from './permissions.js';
+/**
+ * The writes an agent makes in the ordinary course of working its own card: saying what it did,
+ * leaving a handover, moving the card it holds, asking for a person when it is stuck. None of
+ * these can reach another agent's work or anything outside FlareDeck, so none is worth a person's
+ * attention. Anything NOT listed — production runs, publishing, the shell — still goes to the
+ * decider, which is the whole point of having one.
+ */
+/**
+ * Antigravity's own tools for working in the checkout. Reading, searching and editing files there
+ * is the work itself; `run_command` is deliberately NOT here — it is the one that can reach past
+ * the workspace, and it is judged separately.
+ */
+const WORKSPACE_TOOLS = [
+    'view_file',
+    'find_file',
+    'search_directory',
+    'list_directory',
+    'create_file',
+    'edit_file',
+    'read_url_content',
+    'ask_question',
+    'finish',
+];
+const FLAREDECK_WORK_TOOLS = [
+    'create-card-comment',
+    'set-card-notes',
+    'set-card-meta',
+    'update-card-status',
+    'mark-card-done',
+    'mark-comments-actioned',
+    'set-needs-human',
+    'clear-needs-human',
+    'claim-card',
+    'release-card',
+    'add-timesheet-entry',
+];
+import { loadProviders } from './providers.js';
+/**
+ * Gemini, through the Antigravity SDK.
+ *
+ * The SDK is Python with a compiled runtime binary, so it cannot be a library call from a
+ * TypeScript harness — it runs as a child process speaking JSON Lines. What matters is which side
+ * owns the decisions: the sidecar owns none. Every tool call it is about to make comes back here
+ * over localhost, so gitGuard, secretGuard and the Jev gate have one implementation and cannot
+ * drift between engines. The cost of the process boundary is a protocol; the cost of the
+ * alternative is maintaining the guards twice, which is worse.
+ */
+/**
+ * Which Gemini answers which size of card. Flash for everything above the smallest: the Pro line
+ * on this key is `gemini-3.1-pro-preview` — a preview id, which is the kind that disappears and
+ * takes an unattended agent down with it — and `gemini-2.5-pro` is older than these.
+ */
+const GEMINI_MODELS = {
+    small: 'gemini-3.5-flash-lite',
+    medium: 'gemini-3.8-flash',
+    large: 'gemini-3.8-flash',
+};
+const HERE = dirname(fileURLToPath(import.meta.url));
+const SIDECAR = resolve(join(HERE, '..', 'python', 'sidecar.py'));
+export class AntigravityEngine {
+    name = 'antigravity';
+    /**
+     * Measured against the SDK, not assumed. PreToolCallDecideHook is a DecideHook — it can deny a
+     * call and rewrite its arguments. PostToolCallHook is an InspectHook: it SEES a tool result and
+     * cannot change it, so a secret that comes back in output can be noticed and never redacted.
+     * That is why this is declared rather than hoped for: the harness reads it and refuses to hand
+     * this engine a secret, instead of handing one over and finding out afterwards.
+     */
+    capabilities = {
+        denyToolCall: true,
+        rewriteToolInput: true,
+        redactToolOutput: false,
+        // One turn per `agent.chat()` today. Mid-turn steering needs the SDK's streaming API, which
+        // is the next increment; saying false here means a typed line is reported as undeliverable
+        // rather than silently dropped.
+        steerMidTurn: false,
+        resumeSession: true,
+    };
+    run(brief, ctx) {
+        let child = null;
+        let guard = null;
+        const events = (async function* () {
+            const pending = [];
+            const { server, url } = await startGuard(ctx);
+            guard = server;
+            const python = pythonWithSdk((t) => { pending.push({ kind: 'tool', name: t }); });
+            while (pending.length)
+                yield pending.shift();
+            child = spawn(python, [SIDECAR], {
+                cwd: ctx.config.repo,
+                env: { ...process.env, ...geminiEnv() },
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            // The sidecar's stderr is the SDK's own complaints — a missing wheel, a bad key. Losing it
+            // would turn every failure into "the agent did nothing".
+            let stderr = '';
+            child.stderr.on('data', (d) => { stderr += String(d); });
+            // A sidecar that dies before saying anything — a missing wheel, the wrong interpreter, a
+            // bad key — would otherwise end this generator with no events and no error, which reads as
+            // "the agent did nothing" and is the worst way to fail. Its exit is recorded here and
+            // raised below, with whatever it printed.
+            const ended = { at: null };
+            child.on('exit', (code, signal) => { ended.at = { code, signal }; });
+            child.stdin.write(`${JSON.stringify({
+                type: 'run',
+                brief,
+                cwd: ctx.config.repo,
+                guard_url: url,
+                // FlareDeck over HTTP with the harness's own token, rather than reimplementing the tools
+                // in Python. The in-process sets (git publishing, team, runs, schedules) are not bridged
+                // yet — see the note on this class.
+                mcp: [{
+                        name: ctx.config.mcpServerName,
+                        url: ctx.config.mcpUrl,
+                        headers: { Authorization: `Bearer ${ctx.token}` },
+                    }],
+                // What the harness discovered on this server moments ago. The SDK exposes no way to ask a
+                // live session what tools it has, and the daemon refuses a card when the count is zero —
+                // rightly, since a session that silently lost FlareDeck would work the card blind.
+                tool_names: ctx.tools.flaredeck?.toolNames ?? [],
+                ...(ctx.resume ? { resume: ctx.resume } : {}),
+                // Mapped from the SIZE, never from `ctx.model` — that is the other engine's name for the
+                // same decision, and `claude-sonnet-5-5` is a 404 here that fails the card on every retry.
+                ...(GEMINI_MODELS[ctx.size ?? 'small'] ? { model: GEMINI_MODELS[ctx.size ?? 'small'] } : {}),
+            })}\n`);
+            let sawEvent = false;
+            try {
+                for await (const line of createInterface({ input: child.stdout })) {
+                    if (!line.trim())
+                        continue;
+                    let msg;
+                    try {
+                        msg = JSON.parse(line);
+                    }
+                    catch {
+                        continue;
+                    }
+                    if (msg.type === 'fatal') {
+                        const detail = `${msg.message}${stderr ? `\n${stderr.slice(-2000)}` : ''}`;
+                        // Before the first event means no model ever saw the brief, so the card's event must
+                        // survive to be tried again. After it, the turn happened and owns its outcome.
+                        throw sawEvent ? new Error(detail) : new CouldNotWork(detail);
+                    }
+                    if (msg.type === 'event') {
+                        sawEvent = true;
+                        const { type: _t, ...event } = msg;
+                        yield event;
+                    }
+                }
+                if (!sawEvent) {
+                    const why = ended.at ? `exited ${ended.at.code ?? ended.at.signal}` : 'produced nothing';
+                    throw new CouldNotWork(`The Gemini sidecar ${why} without starting.\n` +
+                        `${stderr.trim().slice(-2000) || '(it printed nothing)'}\n\n` +
+                        `Check that ${python} has the SDK: \`pip install google-antigravity\`, or point ` +
+                        `FLAREDECK_AGENT_PYTHON at an interpreter that does.`);
+                }
+            }
+            finally {
+                guard?.close();
+                child?.kill();
+            }
+        })();
+        return {
+            events,
+            async steer() {
+                // Declared false above, so the caller reports it rather than losing what was typed.
+                return false;
+            },
+            async stop() {
+                try {
+                    child?.stdin.write(`${JSON.stringify({ type: 'stop' })}\n`);
+                }
+                catch { /* already gone */ }
+                child?.kill();
+                guard?.close();
+            },
+        };
+    }
+}
+/**
+ * An interpreter that actually has the SDK, found or built — because nobody should have to type a
+ * path to a virtualenv to run an agent.
+ *
+ * The Antigravity wheel carries a compiled runtime binary, so "python3" is usually the wrong
+ * answer: the system interpreter rarely has it, and when it does not the sidecar dies on import.
+ * So: an explicit override wins, then a managed virtualenv beside the agent's own config, then the
+ * system interpreter if it happens to have it — and if none of them do, the virtualenv is built
+ * once, here, and reused forever after.
+ *
+ * Checked by IMPORTING the package rather than by looking for a directory: a half-finished install
+ * leaves the directory behind, and the failure then arrives much later and much less clearly.
+ */
+const CONFIG_DIR = join(process.env['XDG_CONFIG_HOME'] || join(homedir(), '.config'), 'flaredeck-agent');
+const MANAGED_VENV = join(CONFIG_DIR, 'python-antigravity');
+const MANAGED_PYTHON = join(MANAGED_VENV, 'bin', 'python');
+let resolvedPython = null;
+function hasSdk(python) {
+    try {
+        execFileSync(python, ['-c', 'import google.antigravity'], { stdio: 'ignore', timeout: 60_000 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function pythonWithSdk(log) {
+    if (resolvedPython)
+        return resolvedPython;
+    const explicit = process.env['FLAREDECK_AGENT_PYTHON'];
+    if (explicit) {
+        if (!hasSdk(explicit)) {
+            throw new Error(`FLAREDECK_AGENT_PYTHON points at ${explicit}, which cannot import google.antigravity.`);
+        }
+        return (resolvedPython = explicit);
+    }
+    if (existsSync(MANAGED_PYTHON) && hasSdk(MANAGED_PYTHON))
+        return (resolvedPython = MANAGED_PYTHON);
+    if (hasSdk('python3'))
+        return (resolvedPython = 'python3');
+    // First --agy on this machine. Say so: a silent minute looks like a hang.
+    log('first run with Gemini — setting up its Python sidecar, about a minute');
+    try {
+        execFileSync('python3', ['-m', 'venv', MANAGED_VENV], { stdio: 'ignore', timeout: 180_000 });
+        execFileSync(MANAGED_PYTHON, ['-m', 'pip', 'install', '-q', 'google-antigravity'], { stdio: 'ignore', timeout: 900_000 });
+    }
+    catch (e) {
+        throw new Error(`Could not set up the Gemini sidecar in ${MANAGED_VENV}: ${e instanceof Error ? e.message : String(e)}\n` +
+            'Install it yourself with `pip install google-antigravity` and point FLAREDECK_AGENT_PYTHON at that interpreter.');
+    }
+    if (!hasSdk(MANAGED_PYTHON)) {
+        throw new Error(`The sidecar install finished but ${MANAGED_PYTHON} still cannot import google.antigravity.`);
+    }
+    log('Gemini sidecar ready');
+    return (resolvedPython = MANAGED_PYTHON);
+}
+/**
+ * How this machine talks to Gemini — worked out, never asked for.
+ *
+ * In order: an explicit Vertex setting, then the Gemini key the harness already keeps for intake
+ * briefs, then Google's application-default credentials, which are on any machine that has run
+ * `gcloud auth application-default login` — which is to say, any machine that deploys this
+ * project. Three ways to already be set up, and a prompt only ever appears if none of them hold.
+ */
+export function geminiEnv() {
+    if (process.env['GOOGLE_GENAI_USE_VERTEXAI'])
+        return {};
+    const key = loadProviders().gemini?.apiKey;
+    if (key)
+        return { GEMINI_API_KEY: key };
+    const adc = join(homedir(), '.config', 'gcloud', 'application_default_credentials.json');
+    if (existsSync(adc)) {
+        const project = process.env['GOOGLE_CLOUD_PROJECT'] || gcloudProject();
+        if (project) {
+            return {
+                GOOGLE_GENAI_USE_VERTEXAI: 'True',
+                GOOGLE_CLOUD_PROJECT: project,
+                GOOGLE_CLOUD_LOCATION: process.env['GOOGLE_CLOUD_LOCATION'] || 'us-central1',
+            };
+        }
+    }
+    throw new Error('No way to reach Gemini on this machine: no GEMINI_API_KEY in the harness providers, and no ' +
+        'Google application-default credentials with a project. Either is enough — `gcloud auth ' +
+        'application-default login` is the one that needs no key.');
+}
+/** The project gcloud is pointed at, when there is one. Never fatal — the caller has other routes. */
+function gcloudProject() {
+    try {
+        return execFileSync('gcloud', ['config', 'get-value', 'project'], { encoding: 'utf8', timeout: 15_000 })
+            .trim()
+            .replace(/^\(unset\)$/, '');
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * The guard, served to the sidecar on loopback.
+ *
+ * Port 0 so the OS picks a free one — several agents run on this machine at once and a fixed port
+ * would have them answering each other's tool calls. Bound to 127.0.0.1 so nothing off this
+ * machine can reach it.
+ */
+async function startGuard(ctx) {
+    const server = createServer((req, res) => {
+        let body = '';
+        req.on('data', (d) => { body += d; });
+        req.on('end', async () => {
+            let payload = {};
+            try {
+                payload = JSON.parse(body || '{}');
+            }
+            catch { /* answered as a denial below */ }
+            const reply = (o) => { res.writeHead(200, { 'Content-Type': 'application/json' }); res.end(JSON.stringify(o)); };
+            if (req.url === '/tool-call') {
+                // The same pre-approval the other engine gets from `allowedTools`: FlareDeck's READ tools
+                // never reach the decider. Without this every get-card-details would post an approval
+                // request on a card and wait for a person, which is not an agent.
+                const name = String(payload.name ?? '');
+                const fromFlaredeck = String(payload.server ?? '') === ctx.config.mcpServerName;
+                if (fromFlaredeck && FLAREDECK_READ_TOOLS.includes(name)) {
+                    return reply({ allow: true });
+                }
+                // Working in its own checkout is the job too. These are Antigravity's built-in tools, and
+                // they reach only the workspace the harness handed it — a worktree cut for this card. The
+                // other engine gets the same freedom from auto mode; without it a Gemini agent could not
+                // open a file, and "can it actually do the job" answered itself: no.
+                if (!payload.server && WORKSPACE_TOOLS.includes(name)) {
+                    return reply({ allow: true });
+                }
+                // The shell is the one built-in that can reach past the checkout, so it goes through the
+                // SAME Jev gate the other engine's Bash does — not a second copy of the rules.
+                if (!payload.server && name === 'run_command') {
+                    const command = String(payload.args?.CommandLine ?? '');
+                    const verdict = await judgeCommand({
+                        apiKey: loadProviders().openrouter?.apiKey ?? '',
+                        decider: ctx.decider,
+                        log: () => { },
+                        agent: ctx.config.mcpServerName,
+                        repo: ctx.config.repo,
+                        card: () => null,
+                    }, command);
+                    return reply(verdict.allow ? { allow: true } : { allow: false, message: verdict.reason });
+                }
+                // Reporting on its own card is the JOB, not a privilege. The other engine runs in auto
+                // mode, where a classifier waves routine calls through before they ever reach a decider;
+                // there is no classifier here, so without this every comment an agent writes became an
+                // approval request posted on the card, waiting for a person who was never going to be
+                // asked about a comment. That is why Bob picked cards up, moved them, and never reported:
+                // it tried, and the harness turned each attempt into a question nobody answered.
+                if (fromFlaredeck && FLAREDECK_WORK_TOOLS.includes(name)) {
+                    return reply({ allow: true });
+                }
+                const decision = await ctx.decider({ toolName: String(payload.name ?? 'unknown'), input: payload.args ?? {} }, { signal: new AbortController().signal });
+                return reply(decision.allow ? { allow: true } : { allow: false, message: decision.reason });
+            }
+            // The engine cannot redact, so this is a report, not a rewrite — the harness decides what
+            // to do about it, and at minimum it is in the log rather than nowhere.
+            if (req.url === '/tool-result')
+                return reply({ ok: true });
+            return reply({ allow: false, message: 'unknown guard endpoint' });
+        });
+    });
+    await new Promise((ok) => server.listen(0, '127.0.0.1', ok));
+    const port = server.address().port;
+    return { server, url: `http://127.0.0.1:${port}` };
+}
+//# sourceMappingURL=engine-antigravity.js.map

package/dist/engine-antigravity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-antigravity.js","sourceRoot":"","sources":["../src/engine-antigravity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD;;;;;;GAMG;AACH;;;;GAIG;AACH,MAAM,eAAe,GAAG;IACtB,WAAW;IACX,WAAW;IACX,kBAAkB;IAClB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,QAAQ;CACA,CAAC;AAEX,MAAM,oBAAoB,GAAG;IAC3B,qBAAqB;IACrB,gBAAgB;IAChB,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,mBAAmB;IACnB,YAAY;IACZ,cAAc;IACd,qBAAqB;CACb,CAAC;AACX,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,aAAa,GAAiD;IAClE,KAAK,EAAE,uBAAuB;IAC9B,MAAM,EAAE,kBAAkB;IAC1B,KAAK,EAAE,kBAAkB;CAC1B,CAAC;AAEF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAElE,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,aAAa,CAAC;IAE9B;;;;;;OAMG;IACM,YAAY,GAAuB;QAC1C,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,KAAK;QACvB,4FAA4F;QAC5F,2FAA2F;QAC3F,gCAAgC;QAChC,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,GAAG,CAAC,KAAa,EAAE,GAAe;QAChC,IAAI,KAAK,GAA0C,IAAI,CAAC;QACxD,IAAI,KAAK,GAAkB,IAAI,CAAC;QAEhC,MAAM,MAAM,GAAG,CAAC,KAAK,SAAS,CAAC;YAC7B,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9C,KAAK,GAAG,MAAM,CAAC;YAEf,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO,OAAO,CAAC,MAAM;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAG,CAAC;YAC9C,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;gBAC/B,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;gBACpB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE;gBACvC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,2FAA2F;YAC3F,yDAAyD;YACzD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,yFAAyF;YACzF,2FAA2F;YAC3F,sFAAsF;YACtF,0CAA0C;YAC1C,MAAM,KAAK,GAA0E,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAClG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAErE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAClC,IAAI,EAAE,KAAK;gBACX,KAAK;gBACL,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;gBACpB,SAAS,EAAE,GAAG;gBACd,yFAAyF;gBACzF,yFAAyF;gBACzF,oCAAoC;gBACpC,GAAG,EAAE,CAAC;wBACJ,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa;wBAC9B,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;wBACtB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE;qBAClD,CAAC;gBACF,0FAA0F;gBAC1F,yFAAyF;gBACzF,mFAAmF;gBACnF,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE;gBAChD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,yFAAyF;gBACzF,2FAA2F;gBAC3F,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7F,CAAC,IAAI,CAAC,CAAC;YAER,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;oBAClE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAAE,SAAS;oBAC3B,IAAI,GAAQ,CAAC;oBACb,IAAI,CAAC;wBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACnD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACzB,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBAC3E,qFAAqF;wBACrF,+EAA+E;wBAC/E,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;oBAChE,CAAC;oBACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACzB,QAAQ,GAAG,IAAI,CAAC;wBAChB,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,GAAG,CAAC;wBACnC,MAAM,KAAmB,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;oBACzF,MAAM,IAAI,YAAY,CACpB,sBAAsB,GAAG,sBAAsB;wBAC/C,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,sBAAsB,MAAM;wBAC7D,cAAc,MAAM,6DAA6D;wBACjF,qDAAqD,CACtD,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,KAAK,EAAE,KAAK,EAAE,CAAC;gBACf,KAAK,EAAE,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO;YACL,MAAM;YACN,KAAK,CAAC,KAAK;gBACT,oFAAoF;gBACpF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,IAAI,CAAC;oBAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBACjG,KAAK,EAAE,IAAI,EAAE,CAAC;gBACd,KAAK,EAAE,KAAK,EAAE,CAAC;YACjB,CAAC;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACzG,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;AAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAE3D,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAA2B;IACvD,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAE1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,2CAA2C,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO,CAAC,cAAc,GAAG,cAAc,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAE3D,0EAA0E;IAC1E,GAAG,CAAC,uEAAuE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,YAAY,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5H,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0CAA0C,YAAY,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACzG,iHAAiH,CAClH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,cAAc,0CAA0C,CAAC,CAAC;IAChH,CAAC;IACD,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5B,OAAO,CAAC,cAAc,GAAG,cAAc,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAAE,OAAO,EAAE,CAAC;IAExD,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IAC3C,IAAI,GAAG;QAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IAExC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,sCAAsC,CAAC,CAAC;IACzF,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,aAAa,EAAE,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,yBAAyB,EAAE,MAAM;gBACjC,oBAAoB,EAAE,OAAO;gBAC7B,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,aAAa;aAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,6FAA6F;QAC7F,yFAAyF;QACzF,0DAA0D,CAC3D,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aACrG,IAAI,EAAE;aACN,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,UAAU,CAAC,GAAe;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YACvB,IAAI,OAAO,GAAQ,EAAE,CAAC;YACtB,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1H,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;gBAC7B,0FAA0F;gBAC1F,sFAAsF;gBACtF,kEAAkE;gBAClE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;gBAChF,IAAI,aAAa,IAAK,oBAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChF,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChC,CAAC;gBACD,0FAA0F;gBAC1F,0FAA0F;gBAC1F,yFAAyF;gBACzF,qEAAqE;gBACrE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAK,eAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7E,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChC,CAAC;gBAED,yFAAyF;gBACzF,+EAA+E;gBAC/E,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC;wBACE,MAAM,EAAE,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,IAAI,EAAE;wBAChD,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;wBACb,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa;wBAC/B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;wBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;qBACjB,EACD,OAAO,CACR,CAAC;oBACF,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5F,CAAC;gBAED,uFAAuF;gBACvF,yFAAyF;gBACzF,uFAAuF;gBACvF,sFAAsF;gBACtF,0FAA0F;gBAC1F,iFAAiF;gBACjF,IAAI,aAAa,IAAK,oBAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChF,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChC,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAChC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,EAC1E,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,CACzC,CAAC;gBACF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,0FAA0F;YAC1F,uEAAuE;YACvE,IAAI,GAAG,CAAC,GAAG,KAAK,cAAc;gBAAE,OAAO,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC;AACrD,CAAC"}

package/dist/engine-claude.d.ts

@@ -0,0 +1,18 @@
+import type { Engine, EngineCapabilities, EngineRun, RunContext } from './engine.js';
+/**
+ * The Claude Agent SDK, behind the common interface.
+ *
+ * This is a wrapper and nothing more: it builds the options the way `cmdServe` always did and
+ * hands back the same generator. Nothing about how a card is worked changes by moving the call
+ * here — which is the point of doing this step on its own, because a refactor that also changes
+ * behaviour cannot be proved by the agents simply carrying on working.
+ */
+export declare class ClaudeEngine implements Engine {
+    readonly name = "claude";
+    /**
+     * All five, which is why this harness could assume them. The next engine will not have all
+     * five — see engine.ts — and the harness should read this rather than assume again.
+     */
+    readonly capabilities: EngineCapabilities;
+    run(brief: string, ctx: RunContext): EngineRun;
+}

package/dist/engine-claude.js

@@ -0,0 +1,64 @@
+import { buildOptions, runTask } from './agent.js';
+/**
+ * The Claude Agent SDK, behind the common interface.
+ *
+ * This is a wrapper and nothing more: it builds the options the way `cmdServe` always did and
+ * hands back the same generator. Nothing about how a card is worked changes by moving the call
+ * here — which is the point of doing this step on its own, because a refactor that also changes
+ * behaviour cannot be proved by the agents simply carrying on working.
+ */
+export class ClaudeEngine {
+    name = 'claude';
+    /**
+     * All five, which is why this harness could assume them. The next engine will not have all
+     * five — see engine.ts — and the harness should read this rather than assume again.
+     */
+    capabilities = {
+        denyToolCall: true,
+        rewriteToolInput: true,
+        // PostToolUse → updatedToolOutput. The secret scrubber depends on this one.
+        redactToolOutput: true,
+        steerMidTurn: true,
+        resumeSession: true,
+    };
+    run(brief, ctx) {
+        const options = buildOptions(ctx.config, ctx.decider, { ...(ctx.resume ? { resume: ctx.resume } : {}), ...(ctx.model ? { model: ctx.model } : {}) }, ctx.sandbox, ctx.tools.git, ctx.token, ctx.tools.team, ctx.tools.flaredeck, ctx.tools.runs, ctx.tools.schedules, ctx.guard);
+        let live = null;
+        const events = runTask(brief, options, (q) => { live = q; });
+        return {
+            events,
+            /**
+             * `origin: human` and `priority: 'next'` are both load-bearing, and the second one bit this
+             * project before: a 'now' message interrupts the tools in flight, the CLI closes the turn
+             * with a result, streamInput treats that result as the end of the conversation and closes
+             * stdin — the channel every permission verdict and every in-process FlareDeck call comes
+             * back on. The agent then concludes FlareDeck is down. 'next' lands at the tool boundary
+             * with nothing cut off.
+             */
+            async steer(text) {
+                if (!live?.streamInput)
+                    return false;
+                await live.streamInput((async function* () {
+                    yield {
+                        type: 'user',
+                        message: { role: 'user', content: text },
+                        parent_tool_use_id: null,
+                        // Always human: BOTH existing callers stamp it that way on purpose — a line typed
+                        // at the pane and the harness's own wrap-up nudge each deserve a person's weight,
+                        // where an unattributed message is treated as untrusted.
+                        origin: { kind: 'human' },
+                        priority: 'next',
+                    };
+                })());
+                return true;
+            },
+            async stop() {
+                try {
+                    await live?.interrupt?.();
+                }
+                catch { /* a turn that will not stop is the caller's problem */ }
+            },
+        };
+    }
+}
+//# sourceMappingURL=engine-claude.js.map

package/dist/engine-claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-claude.js","sourceRoot":"","sources":["../src/engine-claude.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGnD;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,QAAQ,CAAC;IAEzB;;;OAGG;IACM,YAAY,GAAuB;QAC1C,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;QACtB,4EAA4E;QAC5E,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,GAAG,CAAC,KAAa,EAAE,GAAe;QAChC,MAAM,OAAO,GAAG,YAAY,CAC1B,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,OAAO,EACX,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC7F,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,KAAK,CAAC,GAAU,EACpB,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,KAAK,CAAC,IAAW,EACrB,GAAG,CAAC,KAAK,CAAC,SAAgB,EAC1B,GAAG,CAAC,KAAK,CAAC,IAAW,EACrB,GAAG,CAAC,KAAK,CAAC,SAAgB,EAC1B,GAAG,CAAC,KAAsE,CAC3E,CAAC;QAEF,IAAI,IAAI,GAA+F,IAAI,CAAC;QAC5G,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,CAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5E,OAAO;YACL,MAAM;YACN;;;;;;;eAOG;YACH,KAAK,CAAC,KAAK,CAAC,IAAY;gBACtB,IAAI,CAAC,IAAI,EAAE,WAAW;oBAAE,OAAO,KAAK,CAAC;gBACrC,MAAM,IAAI,CAAC,WAAW,CACpB,CAAC,KAAK,SAAS,CAAC;oBACd,MAAM;wBACJ,IAAI,EAAE,MAAe;wBACrB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,IAAI,EAAE;wBACjD,kBAAkB,EAAE,IAAI;wBACxB,kFAAkF;wBAClF,kFAAkF;wBAClF,yDAAyD;wBACzD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAgB,EAAE;wBAClC,QAAQ,EAAE,MAAe;qBAC1B,CAAC;gBACJ,CAAC,CAAC,EAAE,CACL,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,IAAI,CAAC;oBAAC,MAAM,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,uDAAuD,CAAC,CAAC;YACtG,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}