@ordewell/core 0.5.6 → 0.6.0

package/dist/{IFileSystem-BkPX7mLD.d.mts → IFileSystem-CFYf4yR2.d.mts}

@@ -1,4 +1,4 @@
-import { I as IApproval } from './Task-Dyxp67s2.mjs';
+import { I as IApproval } from './Task-CZJr6rmz.mjs';
 
 interface ToolOutcome {
     success: boolean;

package/dist/{IFileSystem-C0l-4MGT.d.ts → IFileSystem-D4dAl2r8.d.ts}

@@ -1,4 +1,4 @@
-import { I as IApproval } from './Task-Dyxp67s2.js';
+import { I as IApproval } from './Task-CZJr6rmz.js';
 
 interface ToolOutcome {
     success: boolean;

package/dist/{ModeResolver--16lh7dS.d.mts → ModeResolver-DVYVRbJp.d.ts}

@@ -1,4 +1,4 @@
-import { aG as RunnerId } from './Task-Dyxp67s2.mjs';
+import { aG as RunnerId } from './Task-CZJr6rmz.js';
 
 interface RunnerModeInfo {
     id: string;
@@ -38,7 +38,11 @@ declare function resolveDefaultMode(modes: RunnerModeInfo[] | undefined, autonom
  * either toggle.
  */
 declare function filteredBuildModes(modes: RunnerModeInfo[], autonomousDefault: boolean): RunnerModeInfo[];
+/** The user-facing name of the `autonomousMode` boolean's two states. */
+declare function autonomyLevelLabel(autonomous: boolean): 'Full auto' | 'Auto';
+/** `full`/`auto` name the levels; `on`/`off` are the toggle's old words for them. Null for anything else. */
+declare function parseAutonomyLevel(arg: string | undefined): boolean | null;
 declare function buildModeGuide(runnerModes: Record<RunnerId, RunnerModeInfo[]>, autonomousDefault?: boolean): string;
 declare function resolveTaskMode(emittedMode: string | undefined, runnerId: RunnerId, runnerModes: Record<RunnerId, RunnerModeInfo[]> | undefined, autonomousDefault?: boolean): string;
 
-export { type ManifestLookup as M, type RunnerModeInfo as R, resolveTaskMode as a, buildModeGuide as b, runnerModesFrom as c, filteredBuildModes as f, resolveDefaultMode as r };
+export { type ManifestLookup as M, type RunnerModeInfo as R, autonomyLevelLabel as a, buildModeGuide as b, resolveTaskMode as c, runnerModesFrom as d, filteredBuildModes as f, parseAutonomyLevel as p, resolveDefaultMode as r };

package/dist/{ModeResolver-CjpG5Wli.d.ts → ModeResolver-a4xJFlEp.d.mts}

@@ -1,4 +1,4 @@
-import { aG as RunnerId } from './Task-Dyxp67s2.js';
+import { aG as RunnerId } from './Task-CZJr6rmz.mjs';
 
 interface RunnerModeInfo {
     id: string;
@@ -38,7 +38,11 @@ declare function resolveDefaultMode(modes: RunnerModeInfo[] | undefined, autonom
  * either toggle.
  */
 declare function filteredBuildModes(modes: RunnerModeInfo[], autonomousDefault: boolean): RunnerModeInfo[];
+/** The user-facing name of the `autonomousMode` boolean's two states. */
+declare function autonomyLevelLabel(autonomous: boolean): 'Full auto' | 'Auto';
+/** `full`/`auto` name the levels; `on`/`off` are the toggle's old words for them. Null for anything else. */
+declare function parseAutonomyLevel(arg: string | undefined): boolean | null;
 declare function buildModeGuide(runnerModes: Record<RunnerId, RunnerModeInfo[]>, autonomousDefault?: boolean): string;
 declare function resolveTaskMode(emittedMode: string | undefined, runnerId: RunnerId, runnerModes: Record<RunnerId, RunnerModeInfo[]> | undefined, autonomousDefault?: boolean): string;
 
-export { type ManifestLookup as M, type RunnerModeInfo as R, resolveTaskMode as a, buildModeGuide as b, runnerModesFrom as c, filteredBuildModes as f, resolveDefaultMode as r };
+export { type ManifestLookup as M, type RunnerModeInfo as R, autonomyLevelLabel as a, buildModeGuide as b, resolveTaskMode as c, runnerModesFrom as d, filteredBuildModes as f, parseAutonomyLevel as p, resolveDefaultMode as r };

package/dist/{Task-Dyxp67s2.d.mts → Task-CZJr6rmz.d.mts}

@@ -7,13 +7,14 @@ import { EventEmitter } from 'events';
  * "run without isolation", while the others fall back to the shared
  * workspace root with a one-line notice.
  */
-type IsolationInactiveReason = 'disabled' | 'git-missing' | 'not-git' | 'no-commits' | 'dirty' | 'nested-repos';
+type IsolationInactiveReason = 'disabled' | 'git-missing' | 'not-git' | 'no-commits' | 'dirty';
 /**
  * `repos` names, relative to the workspace, the repositories behind the answer:
  * when active, the ones that will isolate, with `shared` the paths every task
- * will share live; otherwise the nested ones `nested-repos` refuses, the dirty
- * ones of a `dirty` group, or the commitless ones of a `no-commits` group. A
- * group of one names none.
+ * will share live — loose entries of the workspace root, or, for a lone
+ * repository, the repositories nested inside it; otherwise the dirty ones of a
+ * `dirty` group, or the commitless ones of a `no-commits` group. A group of one
+ * names none.
  */
 type IsolationAvailability = {
     active: true;
@@ -27,7 +28,8 @@ type IsolationAvailability = {
 /**
  * Where a run's tasks work, as the planner is told it: the repos of the group
  * and the paths shared live between tasks. A lone repository is `['.']` with
- * nothing shared.
+ * nothing shared, unless it holds nested repositories, which are shared live
+ * and named in `shared`.
  */
 interface RepoGroupLayout {
     repos: string[];
@@ -49,9 +51,11 @@ interface IsolationTaskRepo {
     /** Absolute path of this repo's worktree: the task workspace joined with the repo's path. */
     worktree: string;
     /**
-     * Paths bootstrapped from the real repo (symlinks, junctions, copies).
-     * Recorded so the commit step can leave them out — a symlink is not matched
-     * by a `node_modules/` ignore rule and would otherwise be committed.
+     * Paths linked from the real workspace and kept out of the task's commit:
+     * the artifacts bootstrapped from the real repo, and a lone repository's
+     * nested repositories (`run.shared`). Recorded because a symlink is not
+     * matched by an ignore rule such as `node_modules/` and would otherwise be
+     * committed.
      */
     linked: string[];
     /** Whether the task brought commits to this repo; unknown until it first integrates. */
@@ -142,7 +146,9 @@ interface IsolationRun {
     /**
      * Workspace paths outside every isolated repo, linked live into each task
      * workspace: loose entries of the workspace root, the entries beside a deeper
-     * repo, and `sharedRepos`. Empty for a group of one.
+     * repo, and `sharedRepos`. For a lone repository, the repositories nested
+     * inside it, which cannot be isolated with it and so are linked live instead.
+     * Empty when a group of one holds no nested repositories.
      */
     shared: string[];
     /** Repos of the group that could not be isolated — no commits, or git refused a worktree — and are among `shared`. */
@@ -817,6 +823,12 @@ interface ApprovalRequest {
      * second file from an already-approved directory does not prompt again.
      */
     scope: string;
+    /**
+     * Every scope one answer settles, when a command needs more than one — its
+     * own and each outside directory it touches — so it prompts once rather than
+     * once per scope. `scope` is the first. Absent means `scope` alone.
+     */
+    scopes?: string[];
     /** One-line context for the prompt. */
     detail?: string;
     /** The task whose runner asked; absent for the planner's own requests. */
@@ -841,6 +853,7 @@ type ApprovalDecision = {
 type ApprovalAnswer = boolean | ApprovalDecision;
 declare function toApprovalDecision(answer: ApprovalAnswer): ApprovalDecision;
 declare function isGranted(decision: ApprovalDecision): boolean;
+declare function approvalScopes(request: ApprovalRequest): string[];
 declare function isRunnerApproval(request: ApprovalRequest): boolean;
 interface IApproval {
     request(req: ApprovalRequest): Promise<boolean>;
@@ -937,6 +950,8 @@ type AgentEvent =
  *
  * `input` and `suggestions` are the raw request; `suggestions` are the
  * agent's own session-scoped grants, what "Allow for this task" answers with.
+ * `decided` marks a request the task's mode already answered — the adapter
+ * replied as the manifest says that mode does — so it is shown, never asked.
  */
  | {
     type: 'permission_request';
@@ -946,6 +961,7 @@ type AgentEvent =
     input?: Record<string, unknown>;
     suggestions?: unknown[];
     toolUseId?: string;
+    decided?: ApprovalDecision;
 }
 /** The agent withdrew an open request — an interrupt cancels the call it was for. It takes no answer now. */
  | {
@@ -1005,8 +1021,10 @@ interface PlannerStartOptions extends AgentStartCommon {
 interface TaskRunnerFlags {
     /** The runner's own permission-mode value for the task's mode. */
     permissionMode: string;
-    /** Thinking/effort arguments, already split into argv entries. */
-    effortArgs: string[];
+    /** The task's raw effort id, present only alongside a model. Each adapter maps it to its own protocol. */
+    effort?: string;
+    /** The manifest's further settings for the task's mode, by setting name — see `PluginFeatures.modeSettings`. */
+    modeSettings: Record<string, string>;
 }
 /** A plan task driven over the runner's programmatic protocol (ADR-0018, C1). */
 interface TaskStartOptions extends AgentStartCommon {
@@ -1059,6 +1077,13 @@ interface TaskModeAgentAdapter extends AgentAdapter {
      * within `timeoutMs`, and the caller must fall back to killing it.
      */
     interrupt(timeoutMs: number): Promise<boolean>;
+    /**
+     * Registers the listener for what the agent does after a turn has ended and
+     * before the next message — a turn it opens itself when background work
+     * finishes, most often. Without one that output is dropped, which is right
+     * for a planner and wrong for a task, whose marker may be said there.
+     */
+    onOutOfTurn?(listener: (event: AgentEvent) => void): void;
     /** Registers a listener for the process ending, for any reason. Fires at most once. */
     onProcessExit(listener: (code: number) => void): void;
     /**
@@ -1158,6 +1183,16 @@ interface PluginFeatures {
     thinkingValueAdaptive?: string;
     /** Maps mode IDs to the CLI --permission-mode value. Used by {{feature:permissionModeVal}}. */
     permissionModeValues?: Record<string, string>;
+    /**
+     * Further per-mode settings for runners whose permission story has more than
+     * one axis (Codex: sandbox, approval policy, approvals reviewer). Keyed by
+     * setting name, then by mode id; a mode a map does not name leaves that
+     * setting to the runner's own default. Codex declares `approvalPolicy`
+     * (`-a` / `approval_policy`) and `approvalsReviewer` (`approvals_reviewer`);
+     * the terminal template reads them too, through `{{feature:approvalPolicyVal}}`
+     * and the `*Config` tokens.
+     */
+    modeSettings?: Record<string, Record<string, string>>;
 }
 type PluginParser = 'claude-help' | 'opencode-models' | 'opencode-models-verbose' | 'anthropic-models' | 'line-by-line' | 'json' | 'json-table';
 interface DiscoveryCommand {
@@ -2083,4 +2118,4 @@ interface ValidationContext {
 type ValidationCheck = (ctx: ValidationContext) => ValidationResult;
 declare function warningsText(w: PlanModificationWarnings): string | null;
 
-export { type IsolationRun as $, AbstractRunner as A, type BlockingPrompt as B, CMD_EXE_MAX_COMMAND_LINE as C, DENY_ALL as D, EmbeddedNewlineError as E, type FetchAllProviderModelsOptions as F, HeadlessSession as G, HeadlessRunner as H, type IApproval as I, type IConfig as J, type IPluginStore as K, type ITerminalRunner as L, type ITerminalSession as M, type IWorktreeIsolation as N, type IntegrationDisposal as O, type IsolationAvailability as P, type IsolationHandoff as Q, type IsolationHandoffRepo as R, type IsolationInactiveReason as S, type IsolationLandedTask as T, type IsolationLanding as U, type IsolationMergeBlock as V, type IsolationMergeBlockReason as W, type IsolationMergeResult as X, type IsolationOutcome as Y, type IsolationPruneResult as Z, type IsolationRepo as _, AbstractTerminalSession as a, type TaskOutputSummary as a$, type IsolationTaskRecord as a0, type IsolationTaskRepo as a1, type IsolationTaskStatus as a2, type IsolationView as a3, type LaunchDeps as a4, type LaunchPlan as a5, type LegacyPlanState as a6, LineBuffer as a7, type Message as a8, ModelCatalog as a9, type ResearchLogEntry as aA, type ResearchProgress as aB, type ResearchStep as aC, type ResearchStepOutcome as aD, type ResearchToolType as aE, type ResolveContext as aF, type RunnerId as aG, type RunnerInvocation as aH, type RunnerPluginManifest as aI, RunnerRegistry as aJ, type RunnerSpawnOptions as aK, type RunnerTransport as aL, type StreamEvent as aM, type StreamStepEvent as aN, type StreamThinkingEvent as aO, type StructuredEvent as aP, type StructuredSessionCapability as aQ, type StructuredTurnEnd as aR, type SubagentLogEntry as aS, type SubagentOutcome as aT, type Task as aU, type TaskIsolation as aV, type TaskIsolationState as aW, type TaskMode as aX, type TaskModeAgentAdapter as aY, TaskModeUnsupportedError as aZ, type TaskModelAssignment as a_, type ModelShortcut as aa, ORCHESTRATOR_SHORTCUTS as ab, type OrchestratorOption as ac, type PlanIsolation as ad, type PlanModificationWarnings as ae, type PlanState as af, type PlanStatus as ag, type PlannerStartOptions as ah, type PlannerUsage as ai, type PluginCloneFn as aj, type PluginEntry as ak, type PluginFeatures as al, type PluginMode as am, type PluginModelDiscovery as an, type PluginRunnerDef as ao, type PreparedLaunch as ap, type PreparedTask as aq, type ProviderCredentialSource as ar, type ProviderModelLists as as, type ProviderModelsResult as at, type PtySize as au, type PtyWrapOptions as av, type QueuedMessage as aw, type QueuedTaskMessage as ax, type RepairEvidence as ay, type RepoGroupLayout as az, type ActiveTaskSession as b, type TaskRunnerFlags as b0, type TaskSnapshot as b1, type TaskStartOptions as b2, type TaskStatus as b3, type TaskTransport as b4, type TaskType as b5, type TaskWithParent as b6, type ThinkingBlock as b7, type UsageLine as b8, type UsageRecord as b9, isRunnerApproval as bA, isRunnerTransport as bB, isStructuredSession as bC, keepExecutionState as bD, knownModelId as bE, migrateLegacyPlan as bF, migratePlanState as bG, migrateTask as bH, partedPromptUsage as bI, planDirectLaunch as bJ, planShellLaunch as bK, plannerContextFill as bL, posixShellQuote as bM, removeTaskFromPlan as bN, renumberTasks as bO, resolveModelShortcut as bP, resolveProvider as bQ, stripAnsi as bR, toApprovalDecision as bS, toOrchestratorOptions as bT, updateTaskInPlan as bU, usageLine as bV, validateModifiedPlan as bW, warningsText as bX, windowsCommandLine as bY, wrapWithPty as bZ, type UsageTotals as ba, type UserPromptEntry as bb, type UserStep as bc, type ValidationCheck as bd, type ValidationContext as be, type ValidationResult as bf, type Verdict as bg, type VerificationCheck as bh, WINDOWS_MAX_COMMAND_LINE as bi, addPlannerUsage as bj, addTaskToPlan as bk, addUsage as bl, buildShellInvocation as bm, collectProviderCredentials as bn, createEmptyPlan as bo, createTask as bp, emptyWarnings as bq, enabledRunners as br, fetchAllProviderModels as bs, flattenTasks as bt, flattenTasksWithParents as bu, isAwaitingReason as bv, isExecutableResolved as bw, isGranted as bx, isMeasured as by, isReservedRunnerName as bz, type AgentAdapter as c, type AgentAdapterFactory as d, type AgentEvent as e, type AgentProcessDeps as f, type AgentStartOptions as g, type AiProvider as h, type AllProviderModels as i, type ApprovalAnswer as j, type ApprovalDecision as k, type ApprovalKind as l, type ApprovalMode as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type AwaitingReason as r, type CatalogModel as s, CommandLineTooLongError as t, type ConversationMessage as u, type DiscoveredMode as v, type DiscoveredModel as w, type DiscoveryCommand as x, ExecutableNotFoundError as y, type HeadlessRunnerDeps as z };
+export { type IsolationRun as $, AbstractRunner as A, type BlockingPrompt as B, CMD_EXE_MAX_COMMAND_LINE as C, DENY_ALL as D, EmbeddedNewlineError as E, type FetchAllProviderModelsOptions as F, HeadlessSession as G, HeadlessRunner as H, type IApproval as I, type IConfig as J, type IPluginStore as K, type ITerminalRunner as L, type ITerminalSession as M, type IWorktreeIsolation as N, type IntegrationDisposal as O, type IsolationAvailability as P, type IsolationHandoff as Q, type IsolationHandoffRepo as R, type IsolationInactiveReason as S, type IsolationLandedTask as T, type IsolationLanding as U, type IsolationMergeBlock as V, type IsolationMergeBlockReason as W, type IsolationMergeResult as X, type IsolationOutcome as Y, type IsolationPruneResult as Z, type IsolationRepo as _, AbstractTerminalSession as a, type TaskOutputSummary as a$, type IsolationTaskRecord as a0, type IsolationTaskRepo as a1, type IsolationTaskStatus as a2, type IsolationView as a3, type LaunchDeps as a4, type LaunchPlan as a5, type LegacyPlanState as a6, LineBuffer as a7, type Message as a8, ModelCatalog as a9, type ResearchLogEntry as aA, type ResearchProgress as aB, type ResearchStep as aC, type ResearchStepOutcome as aD, type ResearchToolType as aE, type ResolveContext as aF, type RunnerId as aG, type RunnerInvocation as aH, type RunnerPluginManifest as aI, RunnerRegistry as aJ, type RunnerSpawnOptions as aK, type RunnerTransport as aL, type StreamEvent as aM, type StreamStepEvent as aN, type StreamThinkingEvent as aO, type StructuredEvent as aP, type StructuredSessionCapability as aQ, type StructuredTurnEnd as aR, type SubagentLogEntry as aS, type SubagentOutcome as aT, type Task as aU, type TaskIsolation as aV, type TaskIsolationState as aW, type TaskMode as aX, type TaskModeAgentAdapter as aY, TaskModeUnsupportedError as aZ, type TaskModelAssignment as a_, type ModelShortcut as aa, ORCHESTRATOR_SHORTCUTS as ab, type OrchestratorOption as ac, type PlanIsolation as ad, type PlanModificationWarnings as ae, type PlanState as af, type PlanStatus as ag, type PlannerStartOptions as ah, type PlannerUsage as ai, type PluginCloneFn as aj, type PluginEntry as ak, type PluginFeatures as al, type PluginMode as am, type PluginModelDiscovery as an, type PluginRunnerDef as ao, type PreparedLaunch as ap, type PreparedTask as aq, type ProviderCredentialSource as ar, type ProviderModelLists as as, type ProviderModelsResult as at, type PtySize as au, type PtyWrapOptions as av, type QueuedMessage as aw, type QueuedTaskMessage as ax, type RepairEvidence as ay, type RepoGroupLayout as az, type ActiveTaskSession as b, type TaskRunnerFlags as b0, type TaskSnapshot as b1, type TaskStartOptions as b2, type TaskStatus as b3, type TaskTransport as b4, type TaskType as b5, type TaskWithParent as b6, type ThinkingBlock as b7, type UsageLine as b8, type UsageRecord as b9, isReservedRunnerName as bA, isRunnerApproval as bB, isRunnerTransport as bC, isStructuredSession as bD, keepExecutionState as bE, knownModelId as bF, migrateLegacyPlan as bG, migratePlanState as bH, migrateTask as bI, partedPromptUsage as bJ, planDirectLaunch as bK, planShellLaunch as bL, plannerContextFill as bM, posixShellQuote as bN, removeTaskFromPlan as bO, renumberTasks as bP, resolveModelShortcut as bQ, resolveProvider as bR, stripAnsi as bS, toApprovalDecision as bT, toOrchestratorOptions as bU, updateTaskInPlan as bV, usageLine as bW, validateModifiedPlan as bX, warningsText as bY, windowsCommandLine as bZ, wrapWithPty as b_, type UsageTotals as ba, type UserPromptEntry as bb, type UserStep as bc, type ValidationCheck as bd, type ValidationContext as be, type ValidationResult as bf, type Verdict as bg, type VerificationCheck as bh, WINDOWS_MAX_COMMAND_LINE as bi, addPlannerUsage as bj, addTaskToPlan as bk, addUsage as bl, approvalScopes as bm, buildShellInvocation as bn, collectProviderCredentials as bo, createEmptyPlan as bp, createTask as bq, emptyWarnings as br, enabledRunners as bs, fetchAllProviderModels as bt, flattenTasks as bu, flattenTasksWithParents as bv, isAwaitingReason as bw, isExecutableResolved as bx, isGranted as by, isMeasured as bz, type AgentAdapter as c, type AgentAdapterFactory as d, type AgentEvent as e, type AgentProcessDeps as f, type AgentStartOptions as g, type AiProvider as h, type AllProviderModels as i, type ApprovalAnswer as j, type ApprovalDecision as k, type ApprovalKind as l, type ApprovalMode as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type AwaitingReason as r, type CatalogModel as s, CommandLineTooLongError as t, type ConversationMessage as u, type DiscoveredMode as v, type DiscoveredModel as w, type DiscoveryCommand as x, ExecutableNotFoundError as y, type HeadlessRunnerDeps as z };

package/dist/{Task-Dyxp67s2.d.ts → Task-CZJr6rmz.d.ts}

@@ -7,13 +7,14 @@ import { EventEmitter } from 'events';
  * "run without isolation", while the others fall back to the shared
  * workspace root with a one-line notice.
  */
-type IsolationInactiveReason = 'disabled' | 'git-missing' | 'not-git' | 'no-commits' | 'dirty' | 'nested-repos';
+type IsolationInactiveReason = 'disabled' | 'git-missing' | 'not-git' | 'no-commits' | 'dirty';
 /**
  * `repos` names, relative to the workspace, the repositories behind the answer:
  * when active, the ones that will isolate, with `shared` the paths every task
- * will share live; otherwise the nested ones `nested-repos` refuses, the dirty
- * ones of a `dirty` group, or the commitless ones of a `no-commits` group. A
- * group of one names none.
+ * will share live — loose entries of the workspace root, or, for a lone
+ * repository, the repositories nested inside it; otherwise the dirty ones of a
+ * `dirty` group, or the commitless ones of a `no-commits` group. A group of one
+ * names none.
  */
 type IsolationAvailability = {
     active: true;
@@ -27,7 +28,8 @@ type IsolationAvailability = {
 /**
  * Where a run's tasks work, as the planner is told it: the repos of the group
  * and the paths shared live between tasks. A lone repository is `['.']` with
- * nothing shared.
+ * nothing shared, unless it holds nested repositories, which are shared live
+ * and named in `shared`.
  */
 interface RepoGroupLayout {
     repos: string[];
@@ -49,9 +51,11 @@ interface IsolationTaskRepo {
     /** Absolute path of this repo's worktree: the task workspace joined with the repo's path. */
     worktree: string;
     /**
-     * Paths bootstrapped from the real repo (symlinks, junctions, copies).
-     * Recorded so the commit step can leave them out — a symlink is not matched
-     * by a `node_modules/` ignore rule and would otherwise be committed.
+     * Paths linked from the real workspace and kept out of the task's commit:
+     * the artifacts bootstrapped from the real repo, and a lone repository's
+     * nested repositories (`run.shared`). Recorded because a symlink is not
+     * matched by an ignore rule such as `node_modules/` and would otherwise be
+     * committed.
      */
     linked: string[];
     /** Whether the task brought commits to this repo; unknown until it first integrates. */
@@ -142,7 +146,9 @@ interface IsolationRun {
     /**
      * Workspace paths outside every isolated repo, linked live into each task
      * workspace: loose entries of the workspace root, the entries beside a deeper
-     * repo, and `sharedRepos`. Empty for a group of one.
+     * repo, and `sharedRepos`. For a lone repository, the repositories nested
+     * inside it, which cannot be isolated with it and so are linked live instead.
+     * Empty when a group of one holds no nested repositories.
      */
     shared: string[];
     /** Repos of the group that could not be isolated — no commits, or git refused a worktree — and are among `shared`. */
@@ -817,6 +823,12 @@ interface ApprovalRequest {
      * second file from an already-approved directory does not prompt again.
      */
     scope: string;
+    /**
+     * Every scope one answer settles, when a command needs more than one — its
+     * own and each outside directory it touches — so it prompts once rather than
+     * once per scope. `scope` is the first. Absent means `scope` alone.
+     */
+    scopes?: string[];
     /** One-line context for the prompt. */
     detail?: string;
     /** The task whose runner asked; absent for the planner's own requests. */
@@ -841,6 +853,7 @@ type ApprovalDecision = {
 type ApprovalAnswer = boolean | ApprovalDecision;
 declare function toApprovalDecision(answer: ApprovalAnswer): ApprovalDecision;
 declare function isGranted(decision: ApprovalDecision): boolean;
+declare function approvalScopes(request: ApprovalRequest): string[];
 declare function isRunnerApproval(request: ApprovalRequest): boolean;
 interface IApproval {
     request(req: ApprovalRequest): Promise<boolean>;
@@ -937,6 +950,8 @@ type AgentEvent =
  *
  * `input` and `suggestions` are the raw request; `suggestions` are the
  * agent's own session-scoped grants, what "Allow for this task" answers with.
+ * `decided` marks a request the task's mode already answered — the adapter
+ * replied as the manifest says that mode does — so it is shown, never asked.
  */
  | {
     type: 'permission_request';
@@ -946,6 +961,7 @@ type AgentEvent =
     input?: Record<string, unknown>;
     suggestions?: unknown[];
     toolUseId?: string;
+    decided?: ApprovalDecision;
 }
 /** The agent withdrew an open request — an interrupt cancels the call it was for. It takes no answer now. */
  | {
@@ -1005,8 +1021,10 @@ interface PlannerStartOptions extends AgentStartCommon {
 interface TaskRunnerFlags {
     /** The runner's own permission-mode value for the task's mode. */
     permissionMode: string;
-    /** Thinking/effort arguments, already split into argv entries. */
-    effortArgs: string[];
+    /** The task's raw effort id, present only alongside a model. Each adapter maps it to its own protocol. */
+    effort?: string;
+    /** The manifest's further settings for the task's mode, by setting name — see `PluginFeatures.modeSettings`. */
+    modeSettings: Record<string, string>;
 }
 /** A plan task driven over the runner's programmatic protocol (ADR-0018, C1). */
 interface TaskStartOptions extends AgentStartCommon {
@@ -1059,6 +1077,13 @@ interface TaskModeAgentAdapter extends AgentAdapter {
      * within `timeoutMs`, and the caller must fall back to killing it.
      */
     interrupt(timeoutMs: number): Promise<boolean>;
+    /**
+     * Registers the listener for what the agent does after a turn has ended and
+     * before the next message — a turn it opens itself when background work
+     * finishes, most often. Without one that output is dropped, which is right
+     * for a planner and wrong for a task, whose marker may be said there.
+     */
+    onOutOfTurn?(listener: (event: AgentEvent) => void): void;
     /** Registers a listener for the process ending, for any reason. Fires at most once. */
     onProcessExit(listener: (code: number) => void): void;
     /**
@@ -1158,6 +1183,16 @@ interface PluginFeatures {
     thinkingValueAdaptive?: string;
     /** Maps mode IDs to the CLI --permission-mode value. Used by {{feature:permissionModeVal}}. */
     permissionModeValues?: Record<string, string>;
+    /**
+     * Further per-mode settings for runners whose permission story has more than
+     * one axis (Codex: sandbox, approval policy, approvals reviewer). Keyed by
+     * setting name, then by mode id; a mode a map does not name leaves that
+     * setting to the runner's own default. Codex declares `approvalPolicy`
+     * (`-a` / `approval_policy`) and `approvalsReviewer` (`approvals_reviewer`);
+     * the terminal template reads them too, through `{{feature:approvalPolicyVal}}`
+     * and the `*Config` tokens.
+     */
+    modeSettings?: Record<string, Record<string, string>>;
 }
 type PluginParser = 'claude-help' | 'opencode-models' | 'opencode-models-verbose' | 'anthropic-models' | 'line-by-line' | 'json' | 'json-table';
 interface DiscoveryCommand {
@@ -2083,4 +2118,4 @@ interface ValidationContext {
 type ValidationCheck = (ctx: ValidationContext) => ValidationResult;
 declare function warningsText(w: PlanModificationWarnings): string | null;
 
-export { type IsolationRun as $, AbstractRunner as A, type BlockingPrompt as B, CMD_EXE_MAX_COMMAND_LINE as C, DENY_ALL as D, EmbeddedNewlineError as E, type FetchAllProviderModelsOptions as F, HeadlessSession as G, HeadlessRunner as H, type IApproval as I, type IConfig as J, type IPluginStore as K, type ITerminalRunner as L, type ITerminalSession as M, type IWorktreeIsolation as N, type IntegrationDisposal as O, type IsolationAvailability as P, type IsolationHandoff as Q, type IsolationHandoffRepo as R, type IsolationInactiveReason as S, type IsolationLandedTask as T, type IsolationLanding as U, type IsolationMergeBlock as V, type IsolationMergeBlockReason as W, type IsolationMergeResult as X, type IsolationOutcome as Y, type IsolationPruneResult as Z, type IsolationRepo as _, AbstractTerminalSession as a, type TaskOutputSummary as a$, type IsolationTaskRecord as a0, type IsolationTaskRepo as a1, type IsolationTaskStatus as a2, type IsolationView as a3, type LaunchDeps as a4, type LaunchPlan as a5, type LegacyPlanState as a6, LineBuffer as a7, type Message as a8, ModelCatalog as a9, type ResearchLogEntry as aA, type ResearchProgress as aB, type ResearchStep as aC, type ResearchStepOutcome as aD, type ResearchToolType as aE, type ResolveContext as aF, type RunnerId as aG, type RunnerInvocation as aH, type RunnerPluginManifest as aI, RunnerRegistry as aJ, type RunnerSpawnOptions as aK, type RunnerTransport as aL, type StreamEvent as aM, type StreamStepEvent as aN, type StreamThinkingEvent as aO, type StructuredEvent as aP, type StructuredSessionCapability as aQ, type StructuredTurnEnd as aR, type SubagentLogEntry as aS, type SubagentOutcome as aT, type Task as aU, type TaskIsolation as aV, type TaskIsolationState as aW, type TaskMode as aX, type TaskModeAgentAdapter as aY, TaskModeUnsupportedError as aZ, type TaskModelAssignment as a_, type ModelShortcut as aa, ORCHESTRATOR_SHORTCUTS as ab, type OrchestratorOption as ac, type PlanIsolation as ad, type PlanModificationWarnings as ae, type PlanState as af, type PlanStatus as ag, type PlannerStartOptions as ah, type PlannerUsage as ai, type PluginCloneFn as aj, type PluginEntry as ak, type PluginFeatures as al, type PluginMode as am, type PluginModelDiscovery as an, type PluginRunnerDef as ao, type PreparedLaunch as ap, type PreparedTask as aq, type ProviderCredentialSource as ar, type ProviderModelLists as as, type ProviderModelsResult as at, type PtySize as au, type PtyWrapOptions as av, type QueuedMessage as aw, type QueuedTaskMessage as ax, type RepairEvidence as ay, type RepoGroupLayout as az, type ActiveTaskSession as b, type TaskRunnerFlags as b0, type TaskSnapshot as b1, type TaskStartOptions as b2, type TaskStatus as b3, type TaskTransport as b4, type TaskType as b5, type TaskWithParent as b6, type ThinkingBlock as b7, type UsageLine as b8, type UsageRecord as b9, isRunnerApproval as bA, isRunnerTransport as bB, isStructuredSession as bC, keepExecutionState as bD, knownModelId as bE, migrateLegacyPlan as bF, migratePlanState as bG, migrateTask as bH, partedPromptUsage as bI, planDirectLaunch as bJ, planShellLaunch as bK, plannerContextFill as bL, posixShellQuote as bM, removeTaskFromPlan as bN, renumberTasks as bO, resolveModelShortcut as bP, resolveProvider as bQ, stripAnsi as bR, toApprovalDecision as bS, toOrchestratorOptions as bT, updateTaskInPlan as bU, usageLine as bV, validateModifiedPlan as bW, warningsText as bX, windowsCommandLine as bY, wrapWithPty as bZ, type UsageTotals as ba, type UserPromptEntry as bb, type UserStep as bc, type ValidationCheck as bd, type ValidationContext as be, type ValidationResult as bf, type Verdict as bg, type VerificationCheck as bh, WINDOWS_MAX_COMMAND_LINE as bi, addPlannerUsage as bj, addTaskToPlan as bk, addUsage as bl, buildShellInvocation as bm, collectProviderCredentials as bn, createEmptyPlan as bo, createTask as bp, emptyWarnings as bq, enabledRunners as br, fetchAllProviderModels as bs, flattenTasks as bt, flattenTasksWithParents as bu, isAwaitingReason as bv, isExecutableResolved as bw, isGranted as bx, isMeasured as by, isReservedRunnerName as bz, type AgentAdapter as c, type AgentAdapterFactory as d, type AgentEvent as e, type AgentProcessDeps as f, type AgentStartOptions as g, type AiProvider as h, type AllProviderModels as i, type ApprovalAnswer as j, type ApprovalDecision as k, type ApprovalKind as l, type ApprovalMode as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type AwaitingReason as r, type CatalogModel as s, CommandLineTooLongError as t, type ConversationMessage as u, type DiscoveredMode as v, type DiscoveredModel as w, type DiscoveryCommand as x, ExecutableNotFoundError as y, type HeadlessRunnerDeps as z };
+export { type IsolationRun as $, AbstractRunner as A, type BlockingPrompt as B, CMD_EXE_MAX_COMMAND_LINE as C, DENY_ALL as D, EmbeddedNewlineError as E, type FetchAllProviderModelsOptions as F, HeadlessSession as G, HeadlessRunner as H, type IApproval as I, type IConfig as J, type IPluginStore as K, type ITerminalRunner as L, type ITerminalSession as M, type IWorktreeIsolation as N, type IntegrationDisposal as O, type IsolationAvailability as P, type IsolationHandoff as Q, type IsolationHandoffRepo as R, type IsolationInactiveReason as S, type IsolationLandedTask as T, type IsolationLanding as U, type IsolationMergeBlock as V, type IsolationMergeBlockReason as W, type IsolationMergeResult as X, type IsolationOutcome as Y, type IsolationPruneResult as Z, type IsolationRepo as _, AbstractTerminalSession as a, type TaskOutputSummary as a$, type IsolationTaskRecord as a0, type IsolationTaskRepo as a1, type IsolationTaskStatus as a2, type IsolationView as a3, type LaunchDeps as a4, type LaunchPlan as a5, type LegacyPlanState as a6, LineBuffer as a7, type Message as a8, ModelCatalog as a9, type ResearchLogEntry as aA, type ResearchProgress as aB, type ResearchStep as aC, type ResearchStepOutcome as aD, type ResearchToolType as aE, type ResolveContext as aF, type RunnerId as aG, type RunnerInvocation as aH, type RunnerPluginManifest as aI, RunnerRegistry as aJ, type RunnerSpawnOptions as aK, type RunnerTransport as aL, type StreamEvent as aM, type StreamStepEvent as aN, type StreamThinkingEvent as aO, type StructuredEvent as aP, type StructuredSessionCapability as aQ, type StructuredTurnEnd as aR, type SubagentLogEntry as aS, type SubagentOutcome as aT, type Task as aU, type TaskIsolation as aV, type TaskIsolationState as aW, type TaskMode as aX, type TaskModeAgentAdapter as aY, TaskModeUnsupportedError as aZ, type TaskModelAssignment as a_, type ModelShortcut as aa, ORCHESTRATOR_SHORTCUTS as ab, type OrchestratorOption as ac, type PlanIsolation as ad, type PlanModificationWarnings as ae, type PlanState as af, type PlanStatus as ag, type PlannerStartOptions as ah, type PlannerUsage as ai, type PluginCloneFn as aj, type PluginEntry as ak, type PluginFeatures as al, type PluginMode as am, type PluginModelDiscovery as an, type PluginRunnerDef as ao, type PreparedLaunch as ap, type PreparedTask as aq, type ProviderCredentialSource as ar, type ProviderModelLists as as, type ProviderModelsResult as at, type PtySize as au, type PtyWrapOptions as av, type QueuedMessage as aw, type QueuedTaskMessage as ax, type RepairEvidence as ay, type RepoGroupLayout as az, type ActiveTaskSession as b, type TaskRunnerFlags as b0, type TaskSnapshot as b1, type TaskStartOptions as b2, type TaskStatus as b3, type TaskTransport as b4, type TaskType as b5, type TaskWithParent as b6, type ThinkingBlock as b7, type UsageLine as b8, type UsageRecord as b9, isReservedRunnerName as bA, isRunnerApproval as bB, isRunnerTransport as bC, isStructuredSession as bD, keepExecutionState as bE, knownModelId as bF, migrateLegacyPlan as bG, migratePlanState as bH, migrateTask as bI, partedPromptUsage as bJ, planDirectLaunch as bK, planShellLaunch as bL, plannerContextFill as bM, posixShellQuote as bN, removeTaskFromPlan as bO, renumberTasks as bP, resolveModelShortcut as bQ, resolveProvider as bR, stripAnsi as bS, toApprovalDecision as bT, toOrchestratorOptions as bU, updateTaskInPlan as bV, usageLine as bW, validateModifiedPlan as bX, warningsText as bY, windowsCommandLine as bZ, wrapWithPty as b_, type UsageTotals as ba, type UserPromptEntry as bb, type UserStep as bc, type ValidationCheck as bd, type ValidationContext as be, type ValidationResult as bf, type Verdict as bg, type VerificationCheck as bh, WINDOWS_MAX_COMMAND_LINE as bi, addPlannerUsage as bj, addTaskToPlan as bk, addUsage as bl, approvalScopes as bm, buildShellInvocation as bn, collectProviderCredentials as bo, createEmptyPlan as bp, createTask as bq, emptyWarnings as br, enabledRunners as bs, fetchAllProviderModels as bt, flattenTasks as bu, flattenTasksWithParents as bv, isAwaitingReason as bw, isExecutableResolved as bx, isGranted as by, isMeasured as bz, type AgentAdapter as c, type AgentAdapterFactory as d, type AgentEvent as e, type AgentProcessDeps as f, type AgentStartOptions as g, type AiProvider as h, type AllProviderModels as i, type ApprovalAnswer as j, type ApprovalDecision as k, type ApprovalKind as l, type ApprovalMode as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type AwaitingReason as r, type CatalogModel as s, CommandLineTooLongError as t, type ConversationMessage as u, type DiscoveredMode as v, type DiscoveredModel as w, type DiscoveryCommand as x, ExecutableNotFoundError as y, type HeadlessRunnerDeps as z };

package/dist/{chunk-ROVYWEBI.mjs → chunk-2SOVKO7P.mjs}

@@ -676,7 +676,8 @@ function decideApproval(view, { approvalId, decision, note }) {
 }
 function startTurn(view, { message, messageId }) {
   const queued = messageId ? view.queued.filter((m) => m.id !== messageId) : view.queued;
-  return append({ ...view, queued, working: true }, (id) => settledMessage(id, "user", message));
+  const working = { ...view, queued, working: true };
+  return message ? append(working, (id) => settledMessage(id, "user", message)) : working;
 }
 var CUT = { completed: null, interrupted: "stopped", failed: "failed" };
 function endTurn(view, { reason }) {
@@ -2112,4 +2113,4 @@ export {
   hasHiddenDetail,
   taskStartedNotice
 };
-//# sourceMappingURL=chunk-ROVYWEBI.mjs.map
+//# sourceMappingURL=chunk-2SOVKO7P.mjs.map