@ordewell/core 0.6.1 → 0.6.3

package/dist/index.js

@@ -67,6 +67,7 @@ __export(index_exports, {
   FsPluginStore: () => FsPluginStore,
   GIT_READONLY_SUBCOMMANDS: () => GIT_READONLY_SUBCOMMANDS,
   GREP_DEFAULT_HEAD_LIMIT: () => GREP_DEFAULT_HEAD_LIMIT,
+  GREP_PCRE_PROBE_ARGS: () => GREP_PCRE_PROBE_ARGS,
   GeminiService: () => GeminiService,
   HeadlessRunner: () => HeadlessRunner,
   HeadlessSession: () => HeadlessSession,
@@ -206,6 +207,7 @@ __export(index_exports, {
   dependencyCandidates: () => dependencyCandidates,
   dependentsOf: () => dependentsOf,
   describeMergeResult: () => describeMergeResult,
+  digestTaskLog: () => digestTaskLog,
   discoverGeminiModels: () => discoverGeminiModels,
   drainNext: () => drainNext,
   effectiveAllowlist: () => effectiveAllowlist,
@@ -238,6 +240,7 @@ __export(index_exports, {
   getStateDir: () => getStateDir,
   globalDataDir: () => globalDataDir,
   grantScopeFor: () => grantScopeFor,
+  grepRegexFromProbe: () => grepRegexFromProbe,
   hasHiddenDetail: () => hasHiddenDetail,
   hasTmux: () => hasTmux,
   holdPrompt: () => holdPrompt,
@@ -766,6 +769,8 @@ function plannerContextFill(usage) {
 var HEAD_LINES = 60;
 var TAIL_LINES = 40;
 var MAX_LINE_CHARS = 2e3;
+var DIGEST_ARGS_CHARS = 120;
+var DIGEST_MESSAGE_CHARS = 1e3;
 function capLine(line) {
   return line.length > MAX_LINE_CHARS ? `${line.slice(0, MAX_LINE_CHARS)}\u2026` : line;
 }
@@ -848,6 +853,33 @@ function coalesceTaskLog(events) {
   }
   return out;
 }
+function digestTaskLog(events, maxCalls) {
+  const outcomes = /* @__PURE__ */ new Map();
+  let lastText;
+  let lastError;
+  for (const event of events) {
+    if (event.type === "tool_result") outcomes.set(event.id, event.success);
+    else if (event.type === "text") lastText = event.text;
+    else if (event.type === "error") lastError = event.message;
+  }
+  const lines = [];
+  for (const event of events) {
+    if (event.type !== "tool_call") continue;
+    const outcome = outcomes.get(event.id);
+    const args = event.args.length > DIGEST_ARGS_CHARS ? `${event.args.slice(0, DIGEST_ARGS_CHARS)}\u2026` : event.args;
+    lines.push(`- ${event.name} ${args} \u2192 ${outcome === void 0 ? "no result" : outcome ? "ok" : "failed"}`);
+  }
+  const omitted = lines.length - maxCalls;
+  const out = omitted > 0 ? [`\u2026 ${omitted} earlier call${omitted === 1 ? "" : "s"} omitted \u2026`, ...lines.slice(omitted)] : lines;
+  const gap = () => out.length > 0 ? [""] : [];
+  const said2 = lastText?.trim();
+  if (said2) {
+    const end = said2.length > DIGEST_MESSAGE_CHARS ? `\u2026${said2.slice(-DIGEST_MESSAGE_CHARS)}` : said2;
+    out.push(...gap(), "Its last message:", ...end.split("\n").map((l) => `  ${l}`));
+  }
+  if (lastError) out.push(...gap(), `It stopped with an error: ${lastError}`);
+  return out.join("\n");
+}
 
 // src/interfaces/IFileSystem.ts
 var GREP_DEFAULT_HEAD_LIMIT = 100;
@@ -3085,6 +3117,10 @@ function lex(command, nested, dialect) {
   let unsafeRedirect;
   let processSubstitution = false;
   let unbalanced = false;
+  let grouped = false;
+  let joinedBy;
+  let followable = true;
+  let bareSegment = false;
   let tokens = [];
   let expandable = false;
   let current = "";
@@ -3114,13 +3150,25 @@ function lex(command, nested, dialect) {
     current = "";
     started = false;
   };
-  const endSegment = (nextPiped) => {
+  const endSegment = (nextPiped, next = "other", last = false) => {
     endToken();
-    if (tokens.length > 0) segments.push({ ...toSegment(tokens, piped, dialect), expandable, inputs });
+    if (!last && next === "other") followable = false;
+    if (tokens.length > 0) {
+      const seg = toSegment(tokens, piped, dialect);
+      if (!seg.binary) {
+        followable = false;
+        bareSegment = true;
+      }
+      segments.push({ ...seg, expandable, inputs, joinedBy });
+    } else if (!last || segments.length > 0 || joinedBy !== void 0) {
+      followable = false;
+      bareSegment = true;
+    }
     tokens = [];
     inputs = [];
     expandable = false;
     piped = nextPiped;
+    joinedBy = next;
   };
   let i = 0;
   while (i < command.length) {
@@ -3242,17 +3290,18 @@ function lex(command, nested, dialect) {
     }
     if (c === "(" || c === ")") {
       endToken();
+      grouped = true;
       i++;
       continue;
     }
     if (c === "|") {
       const double = command[i + 1] === "|";
-      endSegment(!double);
+      endSegment(!double, double ? "other" : "pipe");
       i += double || command[i + 1] === "&" ? 2 : 1;
       continue;
     }
     if (c === "&" || c === ";" || c === "\n") {
-      endSegment(false);
+      endSegment(false, c === "&" && command[i + 1] === "&" ? "and" : "other");
       i += command[i + 1] === c ? 2 : 1;
       continue;
     }
@@ -3269,8 +3318,8 @@ function lex(command, nested, dialect) {
     i++;
   }
   if (quote !== "") unbalanced = true;
-  endSegment(false);
-  return { segments, unsafeRedirect, processSubstitution, unbalanced };
+  endSegment(false, "other", true);
+  return { segments, unsafeRedirect, processSubstitution, unbalanced, grouped, followable, bareSegment };
 }
 function binaryName(token, dialect) {
   const base = token.split(/[/\\]/).pop() ?? "";
@@ -3410,10 +3459,12 @@ function unwrap(seg, dialect) {
   }
   return { seg: { ...current, assignments }, wrappers, runner };
 }
-function lexAll(command, dialect) {
+function lexAll(command, dialect, cdpathSet = false) {
   const queue = [];
   const top = lex(command, queue, dialect);
   const all = { ...top, segments: top.segments.filter((s) => s.binary) };
+  markShellState(all.segments, top.bareSegment);
+  if (top.followable && !top.grouped && queue.length === 0 && !cdpathSet) followCd(all.segments);
   for (let depth = 0; depth < 32 && queue.length > 0; depth++) {
     const inner = lex(queue.shift(), queue, dialect);
     all.segments.push(...inner.segments.filter((s) => s.binary));
@@ -3423,15 +3474,61 @@ function lexAll(command, dialect) {
   }
   return all;
 }
+function literalCdTarget(seg) {
+  if (seg.binary !== "cd" || seg.assignments.length > 0 || seg.expandable || seg.inputs.length > 0) return void 0;
+  if (seg.args.length !== 1) return void 0;
+  const [target] = seg.args;
+  return target === "" || target.startsWith("-") || target.startsWith("~") || /[*?[]/.test(target) ? void 0 : target;
+}
+function followCd(segments) {
+  if (segments.some((s) => s.joinedBy === "other" || SHELL_STATE_COMMANDS.has(s.binary))) return;
+  const inPipeline = (i) => segments[i].joinedBy === "pipe" || segments[i + 1]?.joinedBy === "pipe";
+  if (segments.some((s, i) => s.binary === "cd" && !inPipeline(i) && literalCdTarget(s) === void 0)) return;
+  let chain = [];
+  segments.forEach((seg, i) => {
+    seg.cwd = chain;
+    const target = inPipeline(i) ? void 0 : literalCdTarget(seg);
+    if (target !== void 0) chain = [...chain, target];
+  });
+}
+function markShellState(segments, bareSegment) {
+  if (!bareSegment && !segments.some((s) => SHELL_STATE_COMMANDS.has(s.binary))) return;
+  for (const seg of segments) if (seg.binary === "cd") seg.cdSteered = true;
+}
+var SHELL_STATE_COMMANDS = /* @__PURE__ */ new Set([
+  "export",
+  "set",
+  "shopt",
+  "declare",
+  "typeset",
+  "readonly",
+  "local",
+  "unset",
+  "let",
+  "source",
+  ".",
+  "eval",
+  "exec",
+  "pushd",
+  "popd",
+  "alias",
+  "unalias",
+  "builtin",
+  "command",
+  "enable",
+  "hash",
+  "trap"
+]);
 function looksLikePath(arg) {
   if (arg.startsWith("--") && arg.includes("=")) return looksLikePath(arg.slice(arg.indexOf("=") + 1));
   return arg.startsWith("/") || arg.startsWith("~") || arg.startsWith("../") || arg === ".." || arg.startsWith("./") || /^[A-Za-z]:/.test(arg) || arg.startsWith("\\") || arg.startsWith("..\\") || arg.startsWith(".\\") || /(^|[\\/])\.\.([\\/]|$)/.test(arg);
 }
-function pathLikeArgs(command, opts = {}) {
+function pathRefs(command, opts = {}) {
   const dialect = dialectFor(opts.dialect);
-  return lexAll(command, dialect).segments.flatMap((seg) => {
+  return lexAll(command.trim(), dialect, opts.cdpathSet).segments.flatMap((seg) => {
     const patterns = patternArgs(seg);
-    return [...seg.args.filter((_, i) => !patterns.has(i)), ...seg.inputs].flatMap(pathIn);
+    const cwd = seg.cwd ?? [];
+    return [...seg.args.filter((_, i) => !patterns.has(i)), ...seg.inputs].flatMap(pathIn).map((path27) => ({ path: path27, cwd }));
   });
 }
 function pathIn(a) {
@@ -3595,7 +3692,8 @@ function scopeFor(seg) {
   }
   return [seg.binary, ...lead].join(" ");
 }
-function isAuto(seg) {
+function isAuto(seg, opts) {
+  if (seg.binary === "cd") return !opts.cdpathSet && !seg.cdSteered && literalCdTarget(seg) !== void 0;
   if (!AUTO_COMMANDS.includes(seg.binary)) return false;
   if (seg.expandable) return false;
   if (seg.binary !== "git") return true;
@@ -3690,7 +3788,7 @@ function classifyCommand(command, opts = {}) {
   const trimmed = command.trim();
   if (!trimmed) return { tier: "refuse", scope: "", reason: "Empty command." };
   const dialect = dialectFor(opts.dialect);
-  const { segments, unsafeRedirect, processSubstitution, unbalanced } = lexAll(trimmed, dialect);
+  const { segments, unsafeRedirect, processSubstitution, unbalanced } = lexAll(trimmed, dialect, opts.cdpathSet);
   if (unbalanced) {
     return {
       tier: "refuse",
@@ -3727,7 +3825,7 @@ function classifyCommand(command, opts = {}) {
       };
     }
   }
-  const nonAuto = unwrapped.filter((u) => u.runner !== void 0 || !isAuto(u.seg));
+  const nonAuto = unwrapped.filter((u) => u.runner !== void 0 || !isAuto(u.seg, opts));
   if (nonAuto.length === 0) return { tier: "auto", scope: "" };
   const scope = [...new Set(nonAuto.map((u) => u.runner ? `${u.runner} ${scopeFor(u.seg)}` : scopeFor(u.seg)))].sort().join(" + ");
   return { tier: "ask", scope };
@@ -3797,6 +3895,9 @@ function researchShellWarning(shell) {
   if (shell.dialect !== "cmd") return null;
   return "No POSIX shell was found on this machine, so research commands run through cmd.exe, where most read-only tools (ls, cat, wc, head, grep, find) do not exist. Installing Git for Windows provides one and restores the full research toolset.";
 }
+function researchPolicyOptions(shell) {
+  return { dialect: shell.dialect, cdpathSet: !!process.env.CDPATH };
+}
 
 // src/services/pathScope.ts
 var os = __toESM(require("os"));
@@ -3807,11 +3908,15 @@ function expandHome(target) {
   if (target === "~" || target.startsWith("~/")) return path2.join(home, target.slice(1));
   return path2.join(path2.dirname(home), target.slice(1));
 }
-function resolveWithin(root, target) {
-  const abs = path2.resolve(root, expandHome(target));
+function resolveWithin(root, target, from = root) {
+  const abs = path2.resolve(from, expandHome(target));
   const rel = path2.relative(root, abs);
   return { abs, inside: rel === "" || !rel.startsWith("..") && !path2.isAbsolute(rel) };
 }
+function resolveRef(root, ref) {
+  const from = ref.cwd.reduce((dir, target) => resolveWithin(root, target, dir).abs, root);
+  return resolveWithin(root, ref.path, from);
+}
 function grantScopeFor(abs, kind) {
   if (kind === "directory") return path2.join(abs, "*");
   const parent = path2.dirname(abs);
@@ -4017,14 +4122,17 @@ ${refs.output.trim()}`);
   outsidePaths(command) {
     const root = this.getWorkspaceRoot();
     const found = /* @__PURE__ */ new Map();
-    for (const p of pathLikeArgs(command, { dialect: this.researchShell.dialect })) {
-      const { abs, inside } = resolveWithin(root, p);
+    for (const ref of pathRefs(command, this.policyOptions())) {
+      const { abs, inside } = resolveRef(root, ref);
       if (inside || isInertDevice(abs)) continue;
       const scope = grantScopeFor(abs, "file");
       if (!found.has(scope)) found.set(scope, abs);
     }
     return [...found].map(([scope, abs]) => ({ abs, scope }));
   }
+  policyOptions() {
+    return researchPolicyOptions(this.researchShell);
+  }
   /**
    * Three tiers (see `commandPolicy.ts`): read-only inspection runs silently,
    * anything else asks once and is remembered, and writes are refused outright
@@ -4036,7 +4144,7 @@ ${refs.output.trim()}`);
    * directory the next command names.
    */
   async bash(command, signal) {
-    const { tier, scope, reason } = classifyCommand(command, { dialect: this.researchShell.dialect });
+    const { tier, scope, reason } = classifyCommand(command, this.policyOptions());
     if (tier === "refuse") {
       return { success: false, output: `Command refused: ${reason}`, truncated: false };
     }
@@ -5212,10 +5320,78 @@ function buildGrepArgs(pattern, opts, root) {
 function buildGlobArgs(pattern, root) {
   return ["--files", ...SORT_BY_RECENCY, "--glob", pattern, ...exclusionArgs(), "--", root];
 }
-function buildFallbackGrepArgs(pattern, opts, root) {
+var GREP_PCRE_PROBE_ARGS = ["-P", "-e", "x", "/dev/null"];
+function grepRegexFromProbe(exitCode) {
+  return exitCode === 0 || exitCode === 1 ? "pcre" : "ere";
+}
+function toPosixClasses(pattern) {
+  const CLASS_ESCAPES = { s: "[:space:]", w: "[:alnum:]_", d: "[:digit:]", t: "	" };
+  let out = "";
+  let i = 0;
+  while (i < pattern.length) {
+    const c = pattern[i];
+    if (c === "\\") {
+      out += pattern.slice(i, i + 2);
+      i += 2;
+      continue;
+    }
+    if (c !== "[") {
+      out += c;
+      i++;
+      continue;
+    }
+    const start = i;
+    i++;
+    let negate = false;
+    if (pattern[i] === "^") {
+      negate = true;
+      i++;
+    }
+    let body = "";
+    let closeBracket = false;
+    let openBracket = false;
+    let dash = false;
+    let closed = false;
+    while (i < pattern.length) {
+      const ch = pattern[i];
+      if (ch === "]") {
+        closed = true;
+        i++;
+        break;
+      }
+      if (ch === "[" && pattern[i + 1] === ":") {
+        const end = pattern.indexOf(":]", i + 2);
+        if (end !== -1) {
+          body += pattern.slice(i, end + 2);
+          i = end + 2;
+          continue;
+        }
+      }
+      if (ch === "\\" && i + 1 < pattern.length) {
+        const e = pattern[i + 1];
+        i += 2;
+        if (e in CLASS_ESCAPES) body += CLASS_ESCAPES[e];
+        else if (e === "]") closeBracket = true;
+        else if (e === "[") openBracket = true;
+        else if (e === "-") dash = true;
+        else body += e;
+        continue;
+      }
+      body += ch;
+      i++;
+    }
+    if (!closed) {
+      out += pattern.slice(start);
+      break;
+    }
+    out += `[${negate ? "^" : ""}${closeBracket ? "]" : ""}${body}${openBracket ? "[" : ""}${dash ? "-" : ""}]`;
+  }
+  return out;
+}
+function buildFallbackGrepArgs(pattern, opts, root, regex = "pcre") {
   const args = ["-r", "-n"];
   if (opts.literal) args.push("-F");
-  else args.push("-P");
+  else args.push(regex === "pcre" ? "-P" : "-E");
   if (opts.caseInsensitive) args.push("-i");
   if (opts.outputMode === "files") args.push("-l");
   if (opts.outputMode === "count") args.push("-c");
@@ -5225,7 +5401,7 @@ function buildFallbackGrepArgs(pattern, opts, root) {
   }
   if (opts.include) args.push(`--include=${opts.include}`);
   for (const dir of SEARCH_EXCLUSIONS) args.push(`--exclude-dir=${dir}`);
-  args.push("-e", pattern, root);
+  args.push("-e", !opts.literal && regex === "ere" ? toPosixClasses(pattern) : pattern, root);
   return args;
 }
 function globSegmentToRegex(segment) {
@@ -9264,7 +9440,7 @@ function parseTaskOpsObject(json, text2) {
   }
   return ops;
 }
-function resolveRef(ref, originalScope, liveScope, handleOwner, handleId, opIndex) {
+function resolveRef2(ref, originalScope, liveScope, handleOwner, handleId, opIndex) {
   if (typeof ref !== "string" && typeof ref !== "number") return { error: `invalid reference "${String(ref)}"` };
   const s = String(ref).trim();
   const ownerIdx = handleOwner.get(s);
@@ -9477,7 +9653,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
     const bad = [];
     const liveFlat = flattenTasks(tasks);
     for (const d of Array.isArray(deps) ? deps : []) {
-      const r = resolveRef(d, originalFlatAll, liveFlat, handleOwner, handleId, opIndex);
+      const r = resolveRef2(d, originalFlatAll, liveFlat, handleOwner, handleId, opIndex);
       if ("error" in r) {
         bad.push(`${String(d)} (${r.error})`);
         continue;
@@ -9494,7 +9670,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
     const label = `op ${i + 1} (${op.op})`;
     switch (op.op) {
       case "update": {
-        const ref = resolveRef(op.taskId, originalFlatAll, flattenTasks(tasks), handleOwner, handleId, i);
+        const ref = resolveRef2(op.taskId, originalFlatAll, flattenTasks(tasks), handleOwner, handleId, i);
         if ("error" in ref) {
           errors.push(`${label}: ${ref.error}`);
           break;
@@ -9565,7 +9741,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
         break;
       }
       case "remove": {
-        const ref = resolveRef(op.taskId, originalFlatAll, flattenTasks(tasks), handleOwner, handleId, i);
+        const ref = resolveRef2(op.taskId, originalFlatAll, flattenTasks(tasks), handleOwner, handleId, i);
         if ("error" in ref) {
           errors.push(`${label}: ${ref.error}`);
           break;
@@ -9588,7 +9764,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
         break;
       }
       case "reorder": {
-        const refs = (op.taskIds ?? []).map((r) => resolveRef(r, currentTasks, tasks, handleOwner, handleId, i));
+        const refs = (op.taskIds ?? []).map((r) => resolveRef2(r, currentTasks, tasks, handleOwner, handleId, i));
         const badRef = refs.find((r) => "error" in r);
         if (badRef) {
           errors.push(`${label}: ${badRef.error}`);
@@ -9610,7 +9786,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
         break;
       }
       case "merge": {
-        const refs = (op.taskIds ?? []).map((r) => resolveRef(r, currentTasks, tasks, handleOwner, handleId, i));
+        const refs = (op.taskIds ?? []).map((r) => resolveRef2(r, currentTasks, tasks, handleOwner, handleId, i));
         const badRef = refs.find((r) => "error" in r);
         if (badRef) {
           errors.push(`${label}: ${badRef.error}`);
@@ -9680,7 +9856,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
         break;
       }
       case "split": {
-        const ref = resolveRef(op.taskId, currentTasks, tasks, handleOwner, handleId, i);
+        const ref = resolveRef2(op.taskId, currentTasks, tasks, handleOwner, handleId, i);
         if ("error" in ref) {
           errors.push(`${label}: ${ref.error}`);
           break;
@@ -9759,7 +9935,7 @@ function applyTaskOps(currentTasks, ops, runners, catalog) {
         break;
       }
       case "rearm": {
-        const ref = resolveRef(op.taskId, originalFlatAll, flattenTasks(tasks), handleOwner, handleId, i);
+        const ref = resolveRef2(op.taskId, originalFlatAll, flattenTasks(tasks), handleOwner, handleId, i);
         if ("error" in ref) {
           errors.push(`${label}: ${ref.error}`);
           break;
@@ -10402,15 +10578,15 @@ function nonPromptingFs(fs16) {
     findSymbol: (symbol, opts) => withinWorkspace(opts?.path) ? fs16.findSymbol(symbol, opts) : Promise.resolve(outsideRefusal(opts.path)),
     listDir: (p, depth) => withinWorkspace(p) ? fs16.listDir(p, depth) : Promise.resolve(outsideRefusal(p)),
     bash: async (command, signal) => {
-      const dialect = resolveResearchShell().dialect;
-      const { tier, reason } = classifyCommand(command, { dialect });
+      const policy = researchPolicyOptions(resolveResearchShell());
+      const { tier, reason } = classifyCommand(command, policy);
       if (tier !== "auto") {
         return refused2(
           tier === "refuse" ? `Command refused: ${reason}` : `"${command}" needs user approval, and research agents run in the background where nothing can be approved. Use the read-only research tools, and note in your digest that this command would answer the question.`
         );
       }
-      const escaping = pathLikeArgs(command, { dialect }).find((p) => !withinWorkspace(p));
-      if (escaping) return outsideRefusal(escaping);
+      const escaping = pathRefs(command, policy).map((ref) => resolveRef(fs16.getWorkspaceRoot(), ref)).find((r) => !r.inside);
+      if (escaping) return outsideRefusal(escaping.abs);
       return fs16.bash(command, signal);
     }
   };
@@ -11724,6 +11900,12 @@ var VerdictEngine = class {
   idleSince = /* @__PURE__ */ new Map();
   /** Tasks waiting on the user, whose silence is expected rather than a sign of a stuck runner. */
   idlePaused = /* @__PURE__ */ new Set();
+  /**
+   * Open tool approvals per structured task. They arrive mid-turn and leave the
+   * status alone (ADR-0018, W1), but a task waiting on one is waiting on the
+   * user, so it is not idle either.
+   */
+  openApprovals = /* @__PURE__ */ new Map();
   onVerdict(listener) {
     this.listeners.push(listener);
   }
@@ -11752,7 +11934,7 @@ var VerdictEngine = class {
   }
   /** Restart the silence timer on fresh output; broadcasts the null transition if it was idle. */
   touchIdle(taskId, gen) {
-    if (this.idlePaused.has(taskId)) return;
+    if (this.idlePaused.has(taskId) || this.openApprovals.get(taskId)?.size) return;
     const existing = this.idleTimers.get(taskId);
     if (existing) clearTimeout(existing);
     if (this.idleSince.get(taskId)) {
@@ -11834,7 +12016,10 @@ ${line}
     });
     if (isStructuredSession(session)) {
       session.onEvent((event) => {
-        if (event.type === "turn_start" && this.generations.get(task.id) === gen) this.resumeIdle(task.id);
+        if (this.generations.get(task.id) !== gen) return;
+        if (event.type === "turn_start") this.resumeIdle(task.id);
+        else if (event.type === "permission_request" && !event.decided) this.approvalOpened(task.id, event.id);
+        else if (event.type === "permission_decided" || event.type === "permission_withdrawn") this.approvalClosed(task.id, event.id, gen);
       });
     }
     session.onExit((exitCode) => {
@@ -11845,6 +12030,18 @@ ${line}
       for (const l of this.listeners) l(task.id, verdict);
     });
   }
+  approvalOpened(taskId, approvalId) {
+    const open = this.openApprovals.get(taskId) ?? /* @__PURE__ */ new Set();
+    open.add(approvalId);
+    this.openApprovals.set(taskId, open);
+    this.clearIdle(taskId);
+  }
+  approvalClosed(taskId, approvalId, gen) {
+    const open = this.openApprovals.get(taskId);
+    if (!open?.delete(approvalId) || open.size) return;
+    this.openApprovals.delete(taskId);
+    this.touchIdle(taskId, gen);
+  }
   /** Scan only the new text plus the unmatched carry, so a long run stays linear. */
   scanCheckpoints(taskId, session, text2) {
     const scan = (this.checkpointCarry.get(taskId) ?? "") + text2;
@@ -11866,6 +12063,7 @@ ${line}
     this.checkpointCarry.delete(taskId);
     this.pausedSessions.delete(taskId);
     this.idlePaused.delete(taskId);
+    this.openApprovals.delete(taskId);
     this.clearIdle(taskId);
   }
   /** Manual "Mark complete" override: a pass verdict that bypasses evidence. */
@@ -11903,6 +12101,7 @@ ${line}
     this.idleTimers.clear();
     this.idleSince.clear();
     this.idlePaused.clear();
+    this.openApprovals.clear();
     this.generations.clear();
   }
   decide(task, exitCode) {
@@ -13424,11 +13623,17 @@ function buildShellInvocation(command, args) {
   const inner = [command, ...args].map(posixShellQuote).join(" ");
   return { shellPath: "/bin/bash", shellArgs: ["-lc", inner] };
 }
+var BSD_SCRIPT_PLATFORMS = /* @__PURE__ */ new Set(["darwin", "freebsd", "openbsd", "netbsd"]);
+var BSD_SCRIPT_FEED = 'exec 5<&0; p=$(mktemp) || exit 1; { cat <&5 & echo $! >"$p"; wait; } 2>/dev/null | { script -q -e -F /dev/null /bin/sh -c "$0"; s=$?; kill "$(cat "$p")" 2>/dev/null; rm -f "$p"; exit $s; }';
 function wrapWithPty(command, args, opts = {}) {
   const inner = [command, ...args].map(posixShellQuote).join(" ");
   const watcher = opts.controlChannel ? 'exec 4<&0; ( while read -r C R <&3; do stty cols "$C" rows "$R" <&4; done ) & ' : "";
   const setup = opts.size ? `stty cols ${opts.size.cols} rows ${opts.size.rows}; ` : "";
-  return { command: "script", args: ["-q", "-e", "-f", "-c", `${watcher}${setup}${inner}`, "/dev/null"] };
+  const line = `${watcher}${setup}${inner}`;
+  if (BSD_SCRIPT_PLATFORMS.has(opts.platform ?? process.platform)) {
+    return { command: "/bin/sh", args: ["-c", BSD_SCRIPT_FEED, line] };
+  }
+  return { command: "script", args: ["-q", "-e", "-f", "-c", line, "/dev/null"] };
 }
 
 // src/services/blockingPrompts.ts
@@ -13623,24 +13828,37 @@ var Block = /* @__PURE__ */ ((Block2) => {
   Block2[Block2["IfHeadlessSession"] = 8] = "IfHeadlessSession";
   Block2[Block2["IfInteractiveVariant"] = 9] = "IfInteractiveVariant";
   Block2[Block2["IfProjectTrust"] = 10] = "IfProjectTrust";
+  Block2[Block2["IfHeadlessModel"] = 11] = "IfHeadlessModel";
   return Block2;
 })(Block || {});
 function isInteractive(ctx) {
   return ctx.interactive ?? !ctx.headless;
 }
+function majorVersion(version) {
+  const match = version?.match(/(\d+)\.\d+/);
+  return match ? Number(match[1]) : void 0;
+}
+function versionedInvocation(manifest, ctx) {
+  const major = majorVersion(ctx.runnerVersion);
+  if (major === void 0) return void 0;
+  return (manifest.runner.versioned ?? []).filter((v) => major >= v.minMajor).sort((a, b) => b.minMajor - a.minMajor)[0];
+}
 function resolveArgs(manifest, ctx) {
   const args = [];
   const env = {};
-  if (manifest.runner.env) {
-    for (const [key, value] of Object.entries(manifest.runner.env)) {
+  const versioned = versionedInvocation(manifest, ctx);
+  const argsTemplate = versioned?.argsTemplate ?? manifest.runner.argsTemplate;
+  const envTemplate = versioned ? versioned.env : manifest.runner.env;
+  if (envTemplate) {
+    for (const [key, value] of Object.entries(envTemplate)) {
       const resolved = substituteSimple(value, ctx);
       if (resolved.length > 0) env[key] = resolved;
     }
   }
   let block = 0 /* None */;
   let include = true;
-  for (let i = 0; i < manifest.runner.argsTemplate.length; i++) {
-    const raw = manifest.runner.argsTemplate[i];
+  for (let i = 0; i < argsTemplate.length; i++) {
+    const raw = argsTemplate[i];
     const blockOpen = parseBlockOpen(raw);
     if (blockOpen !== null) {
       if (block !== 0 /* None */) throw new ResolveError(`Nested conditional block at position ${i}: "${raw}"`);
@@ -13699,6 +13917,8 @@ function parseBlockOpen(raw) {
       return 9 /* IfInteractiveVariant */;
     case "{{if projectTrust}}":
       return 10 /* IfProjectTrust */;
+    case "{{if headlessModel}}":
+      return 11 /* IfHeadlessModel */;
     default:
       return null;
   }
@@ -13738,6 +13958,9 @@ function shouldIncludeBlock(block, ctx) {
     // there is no cwd to name.
     case 10 /* IfProjectTrust */:
       return isInteractive(ctx) && !!ctx.cwd;
+    // A model flag that only the non-interactive subcommand takes.
+    case 11 /* IfHeadlessModel */:
+      return !!ctx.model && !isInteractive(ctx);
     default:
       return true;
   }
@@ -13783,6 +14006,10 @@ function resolveToken(token, manifest, ctx) {
   if (token === "{{model}}") return ctx.model || "";
   if (token === "{{thinkingEffort}}") return ctx.thinkingEffort || "";
   if (token === "{{mode}}") return ctx.mode || "build";
+  if (token === "{{modelWithVariant}}") {
+    if (!ctx.model) return "";
+    return ctx.thinkingEffort ? `${ctx.model}#${ctx.thinkingEffort}` : ctx.model;
+  }
   if (token === "{{projectTrust}}") {
     if (!ctx.cwd) return "";
     return `projects.${JSON.stringify(ctx.cwd)}.trust_level="trusted"`;
@@ -13857,13 +14084,21 @@ function resolveOpencodeVariantConfig(ctx) {
   }
   return JSON.stringify(config);
 }
+function resolveOpencodeSessionConfig(ctx) {
+  const mode = ctx.mode || "build";
+  const pinned = resolveOpencodeVariantConfig(ctx);
+  const config = pinned ? JSON.parse(pinned) : {};
+  config.default_agent = mode;
+  if (ctx.model && !pinned) config.agent = { [mode]: { model: ctx.model } };
+  return JSON.stringify(config);
+}
 function substituteSimple(value, ctx) {
   const conditioned = value.replace(/\{\{if (\w+)\}\}([\s\S]*?)\{\{\/if\}\}/g, (match, name, body) => {
     const block = parseBlockOpen(`{{if ${name}}}`);
     if (block === null) return match;
     return shouldIncludeBlock(block, ctx) ? body : "";
   });
-  return conditioned.replace(/\{\{opencodeVariantConfig\}\}/g, () => resolveOpencodeVariantConfig(ctx)).replace(/\{\{prompt\}\}/g, ctx.prompt).replace(/\{\{model\}\}/g, ctx.model || "").replace(/\{\{thinkingEffort\}\}/g, ctx.thinkingEffort || "").replace(/\{\{mode\}\}/g, ctx.mode || "build");
+  return conditioned.replace(/\{\{opencodeVariantConfig\}\}/g, () => resolveOpencodeVariantConfig(ctx)).replace(/\{\{opencodeSessionConfig\}\}/g, () => resolveOpencodeSessionConfig(ctx)).replace(/\{\{prompt\}\}/g, ctx.prompt).replace(/\{\{model\}\}/g, ctx.model || "").replace(/\{\{thinkingEffort\}\}/g, ctx.thinkingEffort || "").replace(/\{\{mode\}\}/g, ctx.mode || "build");
 }
 
 // src/utils/launch.ts
@@ -15566,9 +15801,502 @@ ${item.text}` : item.text });
 
 // src/services/harness/OpenCodeAdapter.ts
 var import_crypto2 = require("crypto");
+
+// src/services/harness/OpenCodeV2.ts
+var STREAM_CONNECT_TIMEOUT_MS = 5e3;
+var ACTIVE_POLL_INTERVAL_MS = 1e3;
+var IDLE_POLLS_BEFORE_START = 3;
+var PLANNER_RULES = [
+  { action: "question", resource: "*", effect: "deny" },
+  { action: "edit", resource: "*", effect: "deny" }
+];
+var TASK_RULES = [{ action: "question", resource: "*", effect: "deny" }];
+var AUTO_APPROVALS = "auto";
+function newTurnState() {
+  return { seen: /* @__PURE__ */ new Set(), toolNames: /* @__PURE__ */ new Map(), stepModels: /* @__PURE__ */ new Map(), textRuns: /* @__PURE__ */ new Map(), children: /* @__PURE__ */ new Map(), briefs: /* @__PURE__ */ new Map(), heldFrames: /* @__PURE__ */ new Map(), streamedMessages: /* @__PURE__ */ new Set() };
+}
+function splitModelId(id) {
+  const slash = id.indexOf("/");
+  if (slash <= 0 || slash === id.length - 1) return null;
+  return { providerID: id.slice(0, slash), id: id.slice(slash + 1) };
+}
+function delay(ms, signal) {
+  return new Promise((resolve7) => {
+    const timer = setTimeout(resolve7, ms);
+    timer.unref?.();
+    signal?.addEventListener("abort", () => {
+      clearTimeout(timer);
+      resolve7();
+    }, { once: true });
+  });
+}
+function contentText(content) {
+  return (content ?? []).filter((c) => c.type === "text" && typeof c.text === "string").map((c) => c.text).join("\n");
+}
+function subagentDigest(output) {
+  const inner = output.match(/<subagent[^>]*>\n?([\s\S]*?)\n?<\/subagent>/);
+  return inner ? inner[1] : output;
+}
+function permissionReply(decision) {
+  if (decision.decision === "allow") return { decision: "once" };
+  if (decision.decision === "allowForTask") return { decision: "always" };
+  const note = decision.note?.trim();
+  return note ? { decision: "reject", message: note } : { decision: "reject" };
+}
+var OpenCodeV2 = class {
+  constructor(host, opts, role) {
+    this.host = host;
+    this.opts = opts;
+    this.role = role;
+    this.agent = opts.kind === "task" ? opts.flags.permissionMode : "plan";
+    const split = opts.model ? splitModelId(opts.model) : null;
+    const variant = opts.kind === "task" ? opts.flags.effort : opts.effort;
+    if (split) this.model = { ...split, ...variant ? { variant } : {} };
+  }
+  host;
+  opts;
+  role;
+  sessionId = null;
+  model = null;
+  agent;
+  turn = null;
+  turnHasText = false;
+  interruptRequested = false;
+  /** A task's requests waiting for an answer, by request id, with the session that asked. */
+  openPermissions = /* @__PURE__ */ new Map();
+  nativeSessionId() {
+    return this.sessionId;
+  }
+  async start() {
+    const resume = this.opts.resumeSessionId;
+    if (resume) {
+      const existing = await this.host.json("GET", `/api/session/${resume}`).catch(() => null);
+      if (existing?.data?.id) {
+        this.sessionId = existing.data.id;
+        if (this.model) await this.host.request("POST", `/api/session/${this.sessionId}/model`, { model: this.model }).catch(() => void 0);
+        await this.host.request("POST", `/api/session/${this.sessionId}/agent`, { agent: this.agent }).catch(() => void 0);
+        await this.applyInstructions();
+        return;
+      }
+      if (this.opts.kind === "task") throw new Error(`OpenCode could not resume session ${resume}: the server does not know it.`);
+    }
+    const created = await this.host.json("POST", "/api/session", {
+      agent: this.agent,
+      ...this.model ? { model: this.model } : {},
+      permissions: this.role === "planner" ? PLANNER_RULES : TASK_RULES
+    });
+    if (!created?.data?.id) throw new Error(`The OpenCode ${this.role} server did not return a session id.`);
+    this.sessionId = created.data.id;
+    await this.applyInstructions();
+  }
+  /** The planner's system prompt rides on the session as an instruction entry — a prompt has no system field. */
+  async applyInstructions() {
+    if (this.opts.kind !== "planner" || !this.opts.systemPrompt) return;
+    const response = await this.host.request("PUT", `/api/experimental/session/${this.sessionId}/instructions/entries/ordewell-planner`, { value: this.opts.systemPrompt });
+    if (!response.ok) throw new Error(`OpenCode did not take the planner instructions: ${response.status} ${response.statusText}`);
+  }
+  async send(message, onEvent, signal, onActivity) {
+    if (!this.sessionId) throw new Error(`OpenCode ${this.role} session is not started`);
+    if (this.host.isExited()) {
+      onEvent({ type: "error", message: this.host.exitMessage() });
+      return;
+    }
+    const state = newTurnState();
+    this.turnHasText = false;
+    this.interruptRequested = false;
+    let markDone = () => {
+    };
+    const ended = new Promise((resolve7) => {
+      markDone = resolve7;
+    });
+    const turn = { live: false, done: false, outcome: null, failure: null, ended, finish: () => {
+      turn.done = true;
+      markDone();
+    } };
+    this.turn = turn;
+    const closeStream = await this.openStream(state, turn, onEvent, onActivity);
+    const poll = new AbortController();
+    try {
+      try {
+        await this.host.json("POST", `/api/session/${this.sessionId}/prompt`, { text: message }, signal);
+      } catch (err) {
+        if (signal?.aborted) return;
+        onEvent({ type: "error", message: `OpenCode did not take the message: ${err instanceof Error ? err.message : String(err)}` });
+        return;
+      }
+      void this.pollActive(turn, poll.signal);
+      const aborted = new Promise((resolve7) => {
+        if (signal?.aborted) resolve7();
+        signal?.addEventListener("abort", () => resolve7(), { once: true });
+      });
+      await Promise.race([turn.ended, aborted, this.host.processEnded]);
+      if (signal?.aborted) return;
+      if (!turn.done) {
+        onEvent({ type: "error", message: this.host.exitMessage() });
+        return;
+      }
+      await this.readBack(state, onEvent);
+      for (const id of [...this.openPermissions.keys()]) {
+        this.openPermissions.delete(id);
+        onEvent({ type: "permission_cancelled", id });
+      }
+      if (turn.outcome === "interrupted" || this.interruptRequested) onEvent({ type: "turn_end", interrupted: true });
+      else if (turn.outcome === "failed") onEvent({ type: "error", message: turn.failure ?? "OpenCode reported that the turn failed." });
+      else onEvent({ type: "turn_end" });
+    } finally {
+      this.turn = null;
+      poll.abort();
+      await closeStream();
+    }
+  }
+  /**
+   * The stream can drop the end frame while still delivering the rest, so the
+   * turn also asks which sessions are running. A session that is not, after
+   * this turn's work was seen, is over; one never seen working after a few
+   * polls had already finished before the stream connected.
+   */
+  async pollActive(turn, signal) {
+    let idlePolls = 0;
+    while (!turn.done && !signal.aborted) {
+      await delay(ACTIVE_POLL_INTERVAL_MS, signal);
+      if (turn.done || signal.aborted) return;
+      const active = await this.host.json("GET", "/api/session/active").catch(() => null);
+      if (!active?.data) continue;
+      if (this.sessionId && this.sessionId in active.data) {
+        turn.live = true;
+        idlePolls = 0;
+        continue;
+      }
+      idlePolls++;
+      if (turn.live || idlePolls >= IDLE_POLLS_BEFORE_START) {
+        const messages = await this.messages();
+        const idle = [...messages ?? []].reverse().find((m) => m.type === "idle");
+        if (idle?.outcome === "failed" || idle?.outcome === "interrupted" || idle?.outcome === "succeeded") turn.outcome ??= idle.outcome;
+        turn.outcome ??= "succeeded";
+        if (!turn.done) turn.finish();
+      }
+    }
+  }
+  async messages() {
+    const response = await this.host.json("GET", `/api/session/${this.sessionId}/message`).catch(() => null);
+    return Array.isArray(response?.data) ? response.data : null;
+  }
+  /**
+   * Whatever of the turn's own replies the stream missed. A message whose text
+   * the stream delivered adds nothing here; one that lost its text frames still
+   * reaches the plain-text channel, where the done marker is looked for.
+   */
+  async readBack(state, onEvent) {
+    const messages = await this.messages();
+    if (!messages) return;
+    const latestUser = messages.findIndex((m) => m.type === "user");
+    const own = latestUser < 0 ? messages : messages.slice(0, latestUser);
+    for (const message of [...own].reverse()) {
+      if (message.type !== "assistant" || !message.id || state.streamedMessages.has(message.id)) continue;
+      (message.content ?? []).forEach((part, index) => {
+        if (part.type === "text" && part.text) this.emitText(`${message.id}:readback:${index}`, part.text, state, onEvent);
+      });
+    }
+  }
+  /**
+   * Abort the running turn, keeping the server and its session. OpenCode
+   * acknowledges with `session.execution.interrupted`, which also ends the turn.
+   */
+  async interrupt(timeoutMs) {
+    if (!this.sessionId || this.host.isExited()) return false;
+    const turn = this.turn;
+    this.interruptRequested = true;
+    const response = await this.host.json("POST", `/api/session/${this.sessionId}/interrupt`).catch(() => null);
+    if (!response) return false;
+    if (!turn || turn.done) return true;
+    let timer;
+    const timedOut = new Promise((resolve7) => {
+      timer = setTimeout(() => resolve7(false), timeoutMs);
+      timer.unref?.();
+    });
+    const acknowledged = await Promise.race([turn.ended.then(() => true), this.host.processEnded.then(() => false), timedOut]);
+    clearTimeout(timer);
+    return acknowledged;
+  }
+  answerPermission(id, decision) {
+    const sessionId = this.openPermissions.get(id);
+    if (sessionId === void 0) return false;
+    this.openPermissions.delete(id);
+    void this.replyPermission(id, sessionId, permissionReply(decision)).catch(() => {
+    });
+    return true;
+  }
+  async replyPermission(id, sessionId, reply) {
+    await this.host.request("POST", `/api/session/${sessionId}/permission/${id}/reply`, reply);
+  }
+  async openStream(state, turn, onEvent, onActivity) {
+    const streamAbort = new AbortController();
+    let connected = () => {
+    };
+    const ready = new Promise((resolve7) => {
+      connected = resolve7;
+    });
+    const live = this.streamEvents(streamAbort.signal, (frame) => this.onFrame(frame, state, turn, onEvent), connected, onActivity);
+    await Promise.race([ready, new Promise((r) => {
+      const t = setTimeout(r, STREAM_CONNECT_TIMEOUT_MS);
+      t.unref?.();
+    })]);
+    return async () => {
+      streamAbort.abort();
+      await live.catch(() => {
+      });
+    };
+  }
+  async streamEvents(signal, onFrame, onConnected, onActivity) {
+    const response = await this.host.openEvents(signal).catch(() => null);
+    const body = response?.body;
+    if (!body) {
+      onConnected();
+      return;
+    }
+    onConnected();
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    for (; ; ) {
+      const { done, value } = await reader.read().catch(() => ({ done: true, value: void 0 }));
+      if (done) return;
+      onActivity?.();
+      buffer += decoder.decode(value, { stream: true });
+      let newline;
+      while ((newline = buffer.indexOf("\n")) >= 0) {
+        const line = buffer.slice(0, newline).trim();
+        buffer = buffer.slice(newline + 1);
+        if (!line.startsWith("data:")) continue;
+        try {
+          onFrame(JSON.parse(line.slice(5).trim()));
+        } catch {
+        }
+      }
+    }
+  }
+  /**
+   * One frame. Only this session and its children are followed: the stream is
+   * the whole server's, and another client's session is none of this turn's business.
+   */
+  onFrame(frame, state, turn, onEvent) {
+    const data = frame.data;
+    if (!data || !frame.type) return;
+    if (frame.type === "session.created") {
+      if (data.parentID && data.parentID === this.sessionId && data.sessionID && !state.children.has(data.sessionID)) state.children.set(data.sessionID, null);
+      return;
+    }
+    const session = data.sessionID;
+    if (!session) return;
+    const isChild = session !== this.sessionId;
+    if (isChild && !state.children.has(session)) return;
+    if (!isChild) {
+      if (frame.type === "session.execution.started") {
+        turn.live = true;
+        return;
+      }
+      if (frame.type === "session.execution.succeeded" || frame.type === "session.execution.failed" || frame.type === "session.execution.interrupted") {
+        if (!turn.live || turn.done) return;
+        turn.outcome = frame.type === "session.execution.succeeded" ? "succeeded" : frame.type === "session.execution.failed" ? "failed" : "interrupted";
+        if (turn.outcome === "failed") turn.failure = data.error?.message ?? data.error?.type ?? null;
+        turn.finish();
+        return;
+      }
+    }
+    if (frame.type === "permission.asked") {
+      if (this.role === "task") this.askPermission(data, session, state, onEvent);
+      else this.denyPermission(data, session, state, onEvent);
+      return;
+    }
+    if (frame.type === "permission.replied") {
+      const id = data.requestID;
+      if (id && this.openPermissions.delete(id)) onEvent({ type: "permission_cancelled", id });
+      return;
+    }
+    let subagentId;
+    if (isChild) {
+      const owner = state.children.get(session);
+      if (!owner) {
+        state.heldFrames.set(session, [...state.heldFrames.get(session) ?? [], frame]);
+        return;
+      }
+      subagentId = owner;
+    }
+    this.onContentFrame(frame, data, state, turn, onEvent, subagentId);
+  }
+  onContentFrame(frame, data, state, turn, onEvent, subagentId) {
+    const message = data.assistantMessageID ?? "";
+    switch (frame.type) {
+      case "session.step.started":
+        if (message && data.model?.providerID && data.model.id) state.stepModels.set(message, `${data.model.providerID}/${data.model.id}`);
+        return;
+      case "session.reasoning.delta":
+        if (data.delta) onEvent({ type: "thinking_delta", text: data.delta, subagentId });
+        return;
+      case "session.reasoning.ended": {
+        const key = `reasoning:${message}:${data.ordinal ?? 0}`;
+        if (!data.text || state.seen.has(key)) return;
+        state.seen.add(key);
+        onEvent({ type: "thinking", text: data.text, subagentId });
+        return;
+      }
+      case "session.text.delta":
+        if (!subagentId && data.delta) this.onTextDelta(`${message}:${data.ordinal ?? 0}`, data.delta, state, onEvent);
+        return;
+      case "session.text.ended":
+        if (subagentId || !data.text) return;
+        if (message) state.streamedMessages.add(message);
+        this.emitText(`${message}:${data.ordinal ?? 0}`, data.text, state, onEvent);
+        return;
+      case "session.tool.input.started":
+        if (data.id && data.name) state.toolNames.set(data.id, data.name);
+        return;
+      case "session.tool.called": {
+        const id = data.id;
+        if (!id || state.seen.has(`call:${id}`)) return;
+        state.seen.add(`call:${id}`);
+        const input = data.input ?? {};
+        const name = state.toolNames.get(id) ?? "tool";
+        const brief = typeof input.description === "string" ? input.description : typeof input.prompt === "string" ? input.prompt : "";
+        state.briefs.set(id, brief);
+        onEvent({ type: "tool_call", id, name, args: input, subagentId });
+        return;
+      }
+      case "session.tool.progress":
+        if (!subagentId) this.adoptChild(data, state, onEvent, turn);
+        return;
+      case "session.tool.success":
+      case "session.tool.failed": {
+        const id = data.id;
+        if (!id || state.seen.has(`result:${id}`)) return;
+        state.seen.add(`result:${id}`);
+        const success = frame.type === "session.tool.success";
+        const output = success ? contentText(data.content) : data.error?.message ?? data.error?.type ?? "";
+        onEvent({ type: "tool_result", id, name: state.toolNames.get(id) ?? "tool", output, success, subagentId });
+        if (!subagentId) this.finishChild(id, success, output, state, onEvent);
+        return;
+      }
+      case "session.step.ended":
+      case "session.step.failed":
+        this.countUsage(data, state, onEvent, subagentId);
+        return;
+      default:
+    }
+  }
+  adoptChild(data, state, onEvent, turn) {
+    const child = data.metadata?.sessionID;
+    const callId = data.id;
+    if (!child || !callId || state.children.get(child)) return;
+    const model = state.stepModels.get(data.assistantMessageID ?? "");
+    onEvent({ type: "subagent_started", subagentId: callId, brief: state.briefs.get(callId) ?? "", ...model ? { model } : {} });
+    state.children.set(child, callId);
+    const held = state.heldFrames.get(child) ?? [];
+    state.heldFrames.delete(child);
+    for (const frame of held) this.onFrame(frame, state, turn, onEvent);
+  }
+  finishChild(callId, success, output, state, onEvent) {
+    if (![...state.children.values()].includes(callId)) return;
+    onEvent({ type: "subagent_finished", subagentId: callId, outcome: success ? "done" : "failed", digest: subagentDigest(output) });
+  }
+  /** One model call's usage, once, when its step ends. Zeros mean the call failed before the provider answered. */
+  countUsage(data, state, onEvent, subagentId) {
+    const message = data.assistantMessageID;
+    const tokens = data.tokens;
+    if (!message || !tokens || state.seen.has(`usage:${message}`)) return;
+    state.seen.add(`usage:${message}`);
+    const prompt = partedPromptUsage({ uncached: tokens.input, cacheRead: tokens.cache?.read, cacheWrite: tokens.cache?.write });
+    const outputTokens = (tokens.output ?? 0) + (tokens.reasoning ?? 0);
+    if ((prompt.inputTokens ?? 0) + outputTokens === 0) return;
+    const record = { source: "opencode", ...prompt, outputTokens };
+    const model = state.stepModels.get(message);
+    if (model) record.model = model;
+    if (typeof data.cost === "number" && data.cost > 0) record.reportedCost = { amount: data.cost, currency: "USD" };
+    if (subagentId) record.subagentId = subagentId;
+    onEvent({ type: "usage", record });
+  }
+  /** One complete reply text, once. A message can carry text on both sides of a tool call, so each run after the first opens a paragraph. */
+  emitText(id, text2, state, onEvent) {
+    if (state.seen.has(`text:${id}`)) return;
+    state.seen.add(`text:${id}`);
+    if (!text2.trim()) return;
+    const lead = state.textRuns.get(id)?.lead ?? (this.turnHasText ? "\n\n" : "");
+    onEvent({ type: "assistant_text", text: `${lead}${text2}` });
+    this.turnHasText = true;
+  }
+  /**
+   * Stream one piece of a reply text. The paragraph break goes out with the
+   * first visible delta, so the deltas add up to exactly the text the completed
+   * run then re-sends; a run that is only whitespace so far is held back.
+   */
+  onTextDelta(id, delta, state, onEvent) {
+    if (state.seen.has(`text:${id}`)) return;
+    const run = state.textRuns.get(id) ?? { held: "", lead: null };
+    state.textRuns.set(id, run);
+    if (run.lead !== null) {
+      onEvent({ type: "assistant_text_delta", text: delta });
+      return;
+    }
+    run.held += delta;
+    if (!run.held.trim()) return;
+    run.lead = this.turnHasText ? "\n\n" : "";
+    this.turnHasText = true;
+    onEvent({ type: "assistant_text_delta", text: `${run.lead}${run.held}` });
+  }
+  permissionRequest(ask) {
+    const id = ask.id;
+    if (!id) return null;
+    const scope = (ask.resources ?? []).join(", ");
+    return {
+      type: "permission_request",
+      id,
+      name: ask.action ?? "permission",
+      detail: JSON.stringify(scope ? { scope } : {}),
+      input: ask.resources ? { resources: ask.resources } : {},
+      // The patterns `always` would grant: the runner's own offer, and the only grounds for "Allow for this task".
+      ...ask.save?.length ? { suggestions: ask.save } : {},
+      ...ask.source?.id ? { toolUseId: ask.source.id } : {}
+    };
+  }
+  /**
+   * Deny one planner request. OpenCode blocks the turn until it is answered, so
+   * this must answer: `reject` rather than a silent drop is the "absent answer
+   * is a denial" invariant ADR-0008 states. The refusal is announced so the
+   * timeline shows the planner reaching for something it may not have.
+   */
+  denyPermission(ask, session, state, onEvent) {
+    const request = this.permissionRequest(ask);
+    if (!request || state.seen.has(`perm:${request.id}`)) return;
+    state.seen.add(`perm:${request.id}`);
+    onEvent(request);
+    void this.replyPermission(request.id, session, { decision: "reject" }).catch(() => {
+    });
+  }
+  /**
+   * A task's request. Under a mode whose manifest sets `approvals: auto` it is
+   * answered at once with what `opencode run --auto` answers, so the same plan
+   * behaves the same on both transports (ADR-0001), and announced already
+   * decided so the log still shows it. Any other mode leaves it open for an
+   * approval card.
+   */
+  askPermission(ask, session, state, onEvent) {
+    const request = this.permissionRequest(ask);
+    if (!request || state.seen.has(`perm:${request.id}`)) return;
+    state.seen.add(`perm:${request.id}`);
+    if (this.opts.kind === "task" && this.opts.flags.modeSettings.approvals === AUTO_APPROVALS) {
+      onEvent({ ...request, decided: { decision: "allow" } });
+      void this.replyPermission(request.id, session, { decision: "once" }).catch(() => {
+      });
+      return;
+    }
+    this.openPermissions.set(request.id, session);
+    onEvent(request);
+  }
+};
+
+// src/services/harness/OpenCodeAdapter.ts
 var SERVER_READY_TIMEOUT_MS = 3e4;
 var STDERR_TAIL_CHARS2 = 4e3;
-var STREAM_CONNECT_TIMEOUT_MS = 5e3;
+var STREAM_CONNECT_TIMEOUT_MS2 = 5e3;
 var RECOVERY_POLL_INTERVAL_MS = 2e3;
 var RECOVERY_TIMEOUT_MS = 9e5;
 var STATUS_POLL_INTERVAL_MS = 1e3;
@@ -15581,8 +16309,8 @@ var DISABLED_TOOLS = {
   todowrite: false
 };
 var TASK_DISABLED_TOOLS = { question: false };
-var AUTO_APPROVALS = "auto";
-function splitModelId(id) {
+var AUTO_APPROVALS2 = "auto";
+function splitModelId2(id) {
   const slash = id.indexOf("/");
   if (slash <= 0 || slash === id.length - 1) return null;
   return { providerID: id.slice(0, slash), modelID: id.slice(slash + 1) };
@@ -15638,7 +16366,7 @@ function unwrapFileToolOutput(output) {
   const inner = output.match(/<content>\n?([\s\S]*?)\n?<\/content>/);
   return inner ? inner[1] : output;
 }
-function delay(ms, signal) {
+function delay2(ms, signal) {
   return new Promise((resolve7) => {
     const timer = setTimeout(resolve7, ms);
     timer.unref?.();
@@ -15648,10 +16376,10 @@ function delay(ms, signal) {
     }, { once: true });
   });
 }
-function newTurnState() {
+function newTurnState2() {
   return { seen: /* @__PURE__ */ new Set(), assistantMessages: /* @__PURE__ */ new Set(), partTypes: /* @__PURE__ */ new Map(), textRuns: /* @__PURE__ */ new Map(), children: /* @__PURE__ */ new Map(), heldFrames: /* @__PURE__ */ new Map() };
 }
-function permissionReply(decision) {
+function permissionReply2(decision) {
   if (decision.decision === "allow") return { reply: "once" };
   if (decision.decision === "allowForTask") return { reply: "always" };
   const note = decision.note?.trim();
@@ -15688,6 +16416,8 @@ var OpenCodeAdapter = class {
   interruptRequested = false;
   /** A task's requests waiting for an answer, by request id, with the session that asked. */
   openPermissions = /* @__PURE__ */ new Map();
+  /** Set once the server turns out to speak the 2.x API, which then owns the session. */
+  v2 = null;
   async start(opts) {
     if (opts.kind === "task") this.task = opts;
     else this.planner = opts;
@@ -15702,14 +16432,14 @@ var OpenCodeAdapter = class {
       throw new ExecutableNotFoundError("opencode", PATH);
     }
     const workspaceEnv = await (this.deps.workspaceEnv ?? workspaceEnvOf)(opts.cwd);
-    const password = opts.kind === "task" ? (0, import_crypto2.randomBytes)(24).toString("base64url") : null;
+    const password = (0, import_crypto2.randomBytes)(24).toString("base64url");
     this.process = this.deps.spawn(launch.file, launch.args, {
-      env: runnerEnv(PATH, password ? { ...workspaceEnv, OPENCODE_SERVER_USERNAME: SERVER_USERNAME, OPENCODE_SERVER_PASSWORD: password } : workspaceEnv),
+      env: runnerEnv(PATH, { ...workspaceEnv, OPENCODE_SERVER_USERNAME: SERVER_USERNAME, OPENCODE_SERVER_PASSWORD: password }),
       stdio: ["pipe", "pipe", "pipe"],
       cwd: opts.cwd,
       windowsVerbatimArguments: launch.verbatim
     });
-    if (password) this.authorization = `Basic ${Buffer.from(`${SERVER_USERNAME}:${password}`).toString("base64")}`;
+    this.authorization = `Basic ${Buffer.from(`${SERVER_USERNAME}:${password}`).toString("base64")}`;
     this.process.stdin?.on("error", () => {
     });
     const banner = new Promise((resolve7) => {
@@ -15746,6 +16476,24 @@ ${err.message}`).slice(-STDERR_TAIL_CHARS2);
 
 ${this.stderrTail.trim()}` : ""}`);
     }
+    if (await this.speaksV2()) {
+      this.v2 = new OpenCodeV2({
+        request: (method, path27, body, signal) => this.request(method, path27, body, signal),
+        json: (method, path27, body, signal) => this.json(method, path27, body, signal),
+        openEvents: (signal) => this.deps.fetch(`${this.baseUrl}/api/event`, { signal, headers: this.headers() }),
+        processEnded: this.processEnded,
+        isExited: () => this.exited,
+        exitMessage: () => this.exitMessage()
+      }, opts, this.role());
+      try {
+        await this.v2.start();
+      } catch (err) {
+        this.dispose();
+        throw err;
+      }
+      this.sessionId = this.v2.nativeSessionId();
+      return;
+    }
     if (opts.resumeSessionId) {
       const existing = await this.json("GET", `/session/${opts.resumeSessionId}`).catch(() => null);
       if (existing?.id) {
@@ -15769,12 +16517,17 @@ ${this.stderrTail.trim()}` : ""}`);
       onEvent({ type: "error", message: this.exitMessage() });
       return;
     }
+    if (this.v2) {
+      await this.v2.send(message, onEvent, signal, onActivity);
+      if (signal?.aborted) this.dispose();
+      return;
+    }
     if (this.task) return this.sendTask(this.task, message, onEvent, signal, onActivity);
-    const turn = newTurnState();
+    const turn = newTurnState2();
     this.turnHasText = false;
     const closeStream = await this.openStream(turn, onEvent, onActivity);
     try {
-      const model = this.planner?.model ? splitModelId(this.planner.model) : null;
+      const model = this.planner?.model ? splitModelId2(this.planner.model) : null;
       const body = {
         parts: [{ type: "text", text: message }],
         // The read-only guarantee: OpenCode's own plan agent has no write tools.
@@ -15815,7 +16568,7 @@ ${this.stderrTail.trim()}` : ""}`);
    * {@link recoverReply}, never applies.
    */
   async sendTask(task, message, onEvent, signal, onActivity) {
-    const state = newTurnState();
+    const state = newTurnState2();
     this.turnHasText = false;
     this.interruptRequested = false;
     let markDone = () => {
@@ -15831,7 +16584,7 @@ ${this.stderrTail.trim()}` : ""}`);
     const closeStream = await this.openStream(state, onEvent, onActivity);
     const poll = new AbortController();
     try {
-      const model = task.model ? splitModelId(task.model) : null;
+      const model = task.model ? splitModelId2(task.model) : null;
       const body = {
         parts: [{ type: "text", text: message }],
         // The manifest's meaning of the task's mode (ADR-0001): for OpenCode a mode is an agent.
@@ -15911,7 +16664,7 @@ ${this.stderrTail.trim()}` : ""}`);
    */
   async pollStatus(turn, signal) {
     while (!turn.done && !signal.aborted) {
-      await delay(STATUS_POLL_INTERVAL_MS, signal);
+      await delay2(STATUS_POLL_INTERVAL_MS, signal);
       if (turn.done || signal.aborted) return;
       const busy = await this.sessionBusy();
       if (busy === true) turn.live = true;
@@ -15958,6 +16711,7 @@ ${this.stderrTail.trim()}` : ""}`);
    */
   async interrupt(timeoutMs) {
     if (!this.process || !this.sessionId || this.exited) return false;
+    if (this.v2) return this.v2.interrupt(timeoutMs);
     const turn = this.taskTurn;
     this.interruptRequested = true;
     const posted = await this.json("POST", `/session/${this.sessionId}/abort`).then(() => true, () => false);
@@ -15978,13 +16732,23 @@ ${this.stderrTail.trim()}` : ""}`);
     void this.processEnded.then(() => listener(this.exitCode));
   }
   answerPermission(id, decision) {
+    if (this.v2) return this.process ? this.v2.answerPermission(id, decision) : false;
     const sessionId = this.openPermissions.get(id);
     if (sessionId === void 0 || !this.process) return false;
     this.openPermissions.delete(id);
-    void this.replyPermission(id, sessionId, permissionReply(decision)).catch(() => {
+    void this.replyPermission(id, sessionId, permissionReply2(decision)).catch(() => {
     });
     return true;
   }
+  /**
+   * OpenCode 2.x replaced the 1.x HTTP surface rather than extending it, and
+   * only 2.x answers `/api/info` with its version. A 1.x server — or one that
+   * answers with anything else — keeps the 1.x protocol this class speaks.
+   */
+  async speaksV2() {
+    const info = await this.json("GET", "/api/info").catch(() => null);
+    return typeof info === "object" && info !== null && typeof info.version === "string";
+  }
   role() {
     return this.task ? "task" : "planner";
   }
@@ -16035,7 +16799,7 @@ ${this.stderrTail.trim()}` : ""}`);
       if (pending?.info?.time?.completed || pending?.info?.error) return pending;
       if (pending) onActivity?.();
       if (Date.now() >= deadline) return null;
-      await delay(RECOVERY_POLL_INTERVAL_MS, signal);
+      await delay2(RECOVERY_POLL_INTERVAL_MS, signal);
     }
   }
   newestAssistantId(messages) {
@@ -16248,7 +17012,7 @@ ${this.stderrTail.trim()}` : ""}`);
       ...ask.always?.length ? { suggestions: ask.always } : {},
       ...ask.tool?.callID ? { toolUseId: ask.tool.callID } : {}
     };
-    if (this.task?.flags.modeSettings.approvals === AUTO_APPROVALS) {
+    if (this.task?.flags.modeSettings.approvals === AUTO_APPROVALS2) {
       onEvent({ ...request, decided: { decision: "allow" } });
       void this.replyPermission(id, sessionId, { reply: "once" }).catch(() => {
       });
@@ -16282,7 +17046,7 @@ ${this.stderrTail.trim()}` : ""}`);
     });
     const live = this.streamEvents(streamAbort.signal, (frame) => this.onFrame(frame, turn, onEvent), connected, onActivity);
     await Promise.race([streamReady, new Promise((r) => {
-      const t = setTimeout(r, STREAM_CONNECT_TIMEOUT_MS);
+      const t = setTimeout(r, STREAM_CONNECT_TIMEOUT_MS2);
       t.unref?.();
     })]);
     return async () => {
@@ -16487,6 +17251,7 @@ var TaskOrchestrator = class _TaskOrchestrator {
   observers = [];
   tddEnabled;
   readRunnerTransport;
+  previousAttemptFromLog;
   /**
    * The setting as the latest run copied it when it opened. Every spawn of
    * that run uses this, so flipping the setting mid-run changes the next run
@@ -16506,6 +17271,7 @@ var TaskOrchestrator = class _TaskOrchestrator {
     this.workspaceEnv = deps.workspaceEnv;
     this.tddEnabled = deps.tddEnabled;
     this.readRunnerTransport = deps.runnerTransport;
+    this.previousAttemptFromLog = deps.previousAttemptFromLog;
     this.store.onMutate = () => this.emit("onTaskChanged");
     this.verifier.onVerdict((taskId, verdict) => this.onVerdict(taskId, verdict));
     this.verifier.onCheckpoint((taskId, summary) => {
@@ -16561,7 +17327,8 @@ var TaskOrchestrator = class _TaskOrchestrator {
       workspaceRoot,
       workspaceEnv: options.workspaceEnv ?? ((cwd) => resolveWorkspaceEnv(cwd)),
       tddEnabled: options.tddEnabled ?? (() => false),
-      runnerTransport: options.runnerTransport ?? (() => "terminal")
+      runnerTransport: options.runnerTransport ?? (() => "terminal"),
+      previousAttemptFromLog: options.previousAttemptFromLog ?? (() => null)
     });
     return orchestrator;
   }
@@ -16569,6 +17336,18 @@ var TaskOrchestrator = class _TaskOrchestrator {
   getIdleSince(taskId) {
     return this.verifier.getIdleSince(taskId);
   }
+  /**
+   * What an ops retry is told about the attempt before. The saved log is read
+   * whether or not the session was reloaded, so both behave alike; the terminal
+   * buffer is the fallback for a runner that has no log. A reload clears the
+   * attempt count along with the buffer, so a retry made since is what says
+   * there was an attempt to report on.
+   */
+  opsPreviousAttempt(taskId) {
+    const saved = this.previousAttemptFromLog(taskId) ?? this.output.liveTail(taskId, { maxLines: OPS_RETRY_TAIL_LINES })?.text;
+    if (saved !== void 0) return saved;
+    return (this.retryCounts.get(taskId) ?? 0) > 0 ? "Its output is not available: this session was reloaded since it ran." : void 0;
+  }
   /** Recent clean output of a task's latest attempt, running or ended; null if it never ran. */
   getLiveOutput(taskId, opts) {
     return this.output.liveTail(taskId, opts);
@@ -17426,7 +18205,7 @@ ${summary || "(empty \u2014 no output captured)"}`);
         tddEnabled: !attempt.repair && this.tddEnabled(),
         // An ops task's effects outlive a failed attempt and are never rolled
         // back, so the next one is told what the last one did (ADR-0020).
-        previousAttempt: attempt.ops ? this.output.liveTail(task.id, { maxLines: OPS_RETRY_TAIL_LINES })?.text : void 0
+        previousAttempt: attempt.ops ? this.opsPreviousAttempt(task.id) : void 0
       });
       this.lingering.close(task.id);
       const env = await this.envForTask(cwd);
@@ -21107,6 +21886,13 @@ var PlanEditError = class extends Error {
     this.name = "PlanEditError";
   }
 };
+var OPS_RETRY_DIGEST_CALLS = 20;
+function lastAttemptDigest(location, taskId) {
+  const attempt = listTaskLogAttempts(location, taskId).pop();
+  if (attempt === void 0) return null;
+  const events = readTaskLog(location, taskId, attempt);
+  return events.length > 0 ? digestTaskLog(events, OPS_RETRY_DIGEST_CALLS) : null;
+}
 function sessionRuntimeSettings(settings) {
   return { ...plannerRuntimeToggles(settings), modelAllowlist: settings.modelAllowlist, runnerTransport: settings.runnerTransport };
 }
@@ -21191,7 +21977,8 @@ function createSession(deps) {
     registry: deps.registry,
     workspaceRoot: deps.workspaceRoot,
     tddEnabled: () => deps.settings().tddEnabled,
-    runnerTransport: () => deps.settings().runnerTransport ?? "terminal"
+    runnerTransport: () => deps.settings().runnerTransport ?? "terminal",
+    previousAttemptFromLog: (taskId) => lastAttemptDigest(session.taskLogLocation, taskId)
   });
   const usage = new PlannerUsageLedger();
   const events = new SessionEventRelay({
@@ -22739,12 +23526,32 @@ function buildRunnerInvocation(opts) {
     mode: opts.mode ?? "build",
     headless: opts.headless,
     interactive: opts.interactive,
-    cwd: opts.cwd
+    cwd: opts.cwd,
+    runnerVersion: opts.runnerVersion
   });
 }
 
 // src/services/HeadlessRunner.ts
+var import_child_process9 = require("child_process");
+
+// src/services/runnerVersion.ts
 var import_child_process8 = require("child_process");
+var VERSION_TIMEOUT_MS = 5e3;
+var cache = /* @__PURE__ */ new Map();
+var probeRunnerVersion = (command, PATH) => {
+  const key = `${command}\0${PATH}`;
+  let pending = cache.get(key);
+  if (!pending) {
+    pending = new Promise((resolve7) => {
+      (0, import_child_process8.execFile)(command, ["--version"], { env: { ...process.env, PATH }, timeout: VERSION_TIMEOUT_MS }, (err, stdout) => {
+        const line = String(stdout ?? "").trim();
+        resolve7(err || !line ? void 0 : line);
+      });
+    });
+    cache.set(key, pending);
+  }
+  return pending;
+};
 
 // src/services/AbstractRunner.ts
 var import_events = require("events");
@@ -22799,7 +23606,7 @@ var AbstractRunner = class {
 function defaultHasScriptCmd() {
   if (process.platform === "win32") return false;
   try {
-    (0, import_child_process8.execSync)("which script", { stdio: "ignore" });
+    (0, import_child_process9.execSync)("which script", { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -22866,6 +23673,10 @@ Process error: ${err.message}
       this.process.stdin.write(text2);
     }
   }
+  /** Closes the runner's stdin: what it has read so far is all it will get. */
+  endInput() {
+    this.process?.stdin?.end();
+  }
   /** PTY resize requests from a surface that owns the terminal rendering the wrapper. */
   writeControl(text2) {
     if (this.controlStream && !this.controlStream.destroyed) {
@@ -22878,6 +23689,7 @@ var HeadlessRunner = class extends AbstractRunner {
   hasScriptCmd;
   resolvePath;
   launchDeps;
+  runnerVersion;
   spawnCount = 0;
   /**
    * Session shape: a piped subprocess is not a terminal, so runners get their
@@ -22889,10 +23701,11 @@ var HeadlessRunner = class extends AbstractRunner {
   defaultInteractive = false;
   constructor(deps = {}) {
     super();
-    this.spawnImpl = deps.spawnImpl ?? import_child_process8.spawn;
+    this.spawnImpl = deps.spawnImpl ?? import_child_process9.spawn;
     this.hasScriptCmd = deps.hasScriptCmd ?? defaultHasScriptCmd;
     this.resolvePath = deps.resolvePath ?? augmentedPath;
     this.launchDeps = { resolvePath: this.resolvePath, ...deps.launchDeps };
+    this.runnerVersion = deps.runnerVersion ?? probeRunnerVersion;
   }
   /**
    * Unique per spawn, not per task: a retry reuses its task id and ids often
@@ -22910,6 +23723,9 @@ var HeadlessRunner = class extends AbstractRunner {
   /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
   async prepareLaunch(opts, ptyOptions) {
     const interactive = this.defaultInteractive;
+    const resolvedPath = await this.resolvePath();
+    const manifest = opts.registry?.get(opts.runner)?.manifest;
+    const runnerVersion = manifest?.runner.versioned?.length ? await this.runnerVersion(manifest.runner.command, resolvedPath) : void 0;
     const invocation = buildRunnerInvocation({
       runner: opts.runner,
       prompt: opts.prompt,
@@ -22920,18 +23736,18 @@ var HeadlessRunner = class extends AbstractRunner {
       headless: opts.headless ?? true,
       interactive,
       cwd: opts.cwd,
+      runnerVersion,
       registry: opts.registry
     });
-    const manifest = opts.registry?.get(opts.runner)?.manifest;
     const pty = (manifest?.runner.requiresTty === true || interactive) && this.hasScriptCmd();
-    const resolvedPath = await this.resolvePath();
-    const { command, args } = pty ? wrapWithPty(invocation.command, invocation.args, ptyOptions) : { command: invocation.command, args: invocation.args };
+    const { command, args } = pty ? wrapWithPty(invocation.command, invocation.args, { platform: this.launchDeps.platform, ...ptyOptions }) : { command: invocation.command, args: invocation.args };
     return {
       launch: await planDirectLaunch(command, args, this.launchDeps),
       resolvedPath,
       env: { ...opts.env, ...invocation.env },
       pty,
-      submitPromptKey: invocation.submitPromptKey
+      submitPromptKey: invocation.submitPromptKey,
+      closeStdin: !pty && !interactive && invocation.promptInArgs
     };
   }
   async spawn(opts) {
@@ -22942,20 +23758,21 @@ var HeadlessRunner = class extends AbstractRunner {
     console.error(`[headless] Starting ${opts.runner} [${modeStr}] (${opts.modelId || "default"}) for task ${opts.taskId.slice(0, 8)}${prepared.pty ? " (PTY)" : ""}`);
     session.start(prepared.launch, opts.cwd, prepared.resolvedPath, prepared.env);
     if (prepared.submitPromptKey) session.write("\r");
+    if (prepared.closeStdin) session.endInput();
     this.registerSession(id, session);
     return session;
   }
 };
 
 // src/services/TmuxRunner.ts
-var import_child_process10 = require("child_process");
+var import_child_process11 = require("child_process");
 var import_util5 = require("util");
 var import_os = require("os");
 var import_path2 = require("path");
 var import_fs3 = require("fs");
 
 // src/utils/tmux.ts
-var import_child_process9 = require("child_process");
+var import_child_process10 = require("child_process");
 function tmuxSessionName(port) {
   return `ordewell-${port}`;
 }
@@ -22968,7 +23785,7 @@ function tmuxWindowName(taskId, planSessionId) {
   return `t-${scope}${slug(taskId).slice(0, 16)}`;
 }
 var defaultProbe = () => {
-  (0, import_child_process9.execSync)(process.platform === "win32" ? "where tmux" : "which tmux", { stdio: "ignore" });
+  (0, import_child_process10.execSync)(process.platform === "win32" ? "where tmux" : "which tmux", { stdio: "ignore" });
 };
 function hasTmux(probe = defaultProbe) {
   try {
@@ -22980,7 +23797,7 @@ function hasTmux(probe = defaultProbe) {
 }
 var defaultHasBin = (bin) => {
   try {
-    (0, import_child_process9.execSync)(`${process.platform === "win32" ? "where" : "which"} ${bin}`, { stdio: "ignore" });
+    (0, import_child_process10.execSync)(`${process.platform === "win32" ? "where" : "which"} ${bin}`, { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -23005,7 +23822,7 @@ function clipboardCopyCommand(hasBin = defaultHasBin, platform = process.platfor
 var EXIT_RE = /<<<ORDEWELL_TMUX_EXIT:(\d+)>>>/;
 var LIVENESS_INTERVAL_MS = 5e3;
 var LIVENESS_MISSES = 2;
-var execFileAsync2 = (0, import_util5.promisify)(import_child_process10.execFile);
+var execFileAsync2 = (0, import_util5.promisify)(import_child_process11.execFile);
 var defaultExecFile3 = async (command, args) => {
   const { stdout, stderr } = await execFileAsync2(command, args);
   return { stdout: String(stdout), stderr: String(stderr) };
@@ -23155,6 +23972,7 @@ var TmuxRunner = class extends AbstractRunner {
   pollIntervalMs;
   logDir;
   clipboardCommand;
+  runnerVersion;
   /** Retries get a freshly named window so a failed attempt's output stays inspectable. */
   attempts = /* @__PURE__ */ new Map();
   ready = null;
@@ -23167,6 +23985,7 @@ var TmuxRunner = class extends AbstractRunner {
     this.pollIntervalMs = deps.pollIntervalMs ?? 500;
     this.logDir = deps.logDir ?? (0, import_os.tmpdir)();
     this.clipboardCommand = deps.clipboardCommand ?? (() => clipboardCopyCommand());
+    this.runnerVersion = deps.runnerVersion ?? probeRunnerVersion;
   }
   /**
    * Reaps a session orphaned by a crashed prior daemon on the same port, then
@@ -23250,6 +24069,8 @@ var TmuxRunner = class extends AbstractRunner {
     }
   }
   async spawn(opts) {
+    const manifest = opts.registry?.get(opts.runner)?.manifest;
+    const runnerVersion = manifest?.runner.versioned?.length ? await this.runnerVersion(manifest.runner.command, await this.resolvePath()) : void 0;
     const invocation = buildRunnerInvocation({
       runner: opts.runner,
       prompt: opts.prompt,
@@ -23265,6 +24086,7 @@ var TmuxRunner = class extends AbstractRunner {
       headless: opts.headless ?? true,
       interactive: true,
       cwd: opts.cwd,
+      runnerVersion,
       registry: opts.registry
     });
     await this.ensureSession();
@@ -23294,7 +24116,7 @@ var TmuxRunner = class extends AbstractRunner {
 
 // src/services/StructuredRunner.ts
 var import_events2 = require("events");
-var import_child_process11 = require("child_process");
+var import_child_process12 = require("child_process");
 var DEFAULT_INTERRUPT_GRACE_MS = 5e3;
 var TOOL_ARG_MAX_CHARS = 120;
 var TURN_OPENING_EVENTS = /* @__PURE__ */ new Set(["assistant_text", "assistant_text_delta", "thinking", "thinking_delta", "tool_call"]);
@@ -23668,7 +24490,7 @@ var StructuredRunner = class extends AbstractRunner {
     const session = new StructuredSession(id, opts.taskId, {
       runner: opts.runner,
       deps: {
-        spawn: import_child_process11.spawn,
+        spawn: import_child_process12.spawn,
         fetch: globalThis.fetch,
         ...this.processDeps,
         // Already resolved by the caller (ADR-0016); resolving it again here
@@ -23763,7 +24585,7 @@ function tokensMatch(presented, expected) {
 var fs13 = __toESM(require("fs"));
 var path24 = __toESM(require("path"));
 var os6 = __toESM(require("os"));
-var import_child_process12 = require("child_process");
+var import_child_process13 = require("child_process");
 var import_crypto6 = require("crypto");
 
 // src/plugins/FsPluginStore.ts
@@ -24181,6 +25003,37 @@ var OPENCODE_MANIFEST = {
     env: {
       OPENCODE_CONFIG_CONTENT: "{{if interactiveVariant}}{{opencodeVariantConfig}}{{/if}}"
     },
+    // OpenCode 2.x changed both shapes. Its TUI takes no `--model`/`--agent`,
+    // so they ride on OPENCODE_CONFIG_CONTENT instead, and its `run` has no
+    // `--variant` — the variant is a `#suffix` on the model id. Both run
+    // `--standalone`: without it the TUI and `run` attach to the user's
+    // background service, which neither reads this process's config nor
+    // starts in the task's directory and environment.
+    versioned: [{
+      minMajor: 2,
+      argsTemplate: [
+        "{{if headlessSession}}",
+        "run",
+        "--agent",
+        "{{mode}}",
+        "{{/if}}",
+        "{{if headlessModel}}",
+        "--model",
+        "{{modelWithVariant}}",
+        "{{/if}}",
+        "--standalone",
+        "{{if buildMode}}",
+        "--auto",
+        "{{/if}}",
+        "{{if interactive}}",
+        "--prompt",
+        "{{/if}}",
+        "{{prompt}}"
+      ],
+      env: {
+        OPENCODE_CONFIG_CONTENT: "{{if interactive}}{{opencodeSessionConfig}}{{/if}}"
+      }
+    }],
     promptInArgs: true,
     requiresTty: true,
     // `--prompt` only pre-fills the TUI's composer; it does not submit it.
@@ -24299,7 +25152,7 @@ function isReservedRunnerName(name) {
   return RESERVED_RUNNER_NAMES.has(name.toLowerCase());
 }
 function gitClone(url, destDir) {
-  (0, import_child_process12.execFileSync)("git", ["clone", "--depth", "1", "--", url, destDir], {
+  (0, import_child_process13.execFileSync)("git", ["clone", "--depth", "1", "--", url, destDir], {
     stdio: "pipe",
     timeout: 3e4,
     // A repository that demands credentials should fail, not hang on a prompt.
@@ -24780,6 +25633,7 @@ var PlannerModelMemory = class {
   FsPluginStore,
   GIT_READONLY_SUBCOMMANDS,
   GREP_DEFAULT_HEAD_LIMIT,
+  GREP_PCRE_PROBE_ARGS,
   GeminiService,
   HeadlessRunner,
   HeadlessSession,
@@ -24919,6 +25773,7 @@ var PlannerModelMemory = class {
   dependencyCandidates,
   dependentsOf,
   describeMergeResult,
+  digestTaskLog,
   discoverGeminiModels,
   drainNext,
   effectiveAllowlist,
@@ -24951,6 +25806,7 @@ var PlannerModelMemory = class {
   getStateDir,
   globalDataDir,
   grantScopeFor,
+  grepRegexFromProbe,
   hasHiddenDetail,
   hasTmux,
   holdPrompt,