@pythonluvr/openwar 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OpenWar contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,297 @@
+<p align="center">
+  <img src="openwar-logo.png" alt="OpenWar" width="160" height="160" />
+</p>
+
+<h1 align="center">OpenWar</h1>
+
+<p align="center"><strong>A framework and a runtime for agent behavior that doesn't go off the rails.</strong></p>
+
+<p align="center">
+  <a href="https://github.com/pythonluvr/openwar/releases"><img src="https://img.shields.io/github/v/release/pythonluvr/openwar?display_name=tag&sort=semver" alt="Latest release"></a>
+  <a href="https://github.com/pythonluvr/openwar/actions"><img src="https://img.shields.io/github/actions/workflow/status/pythonluvr/openwar/test.yml?branch=main" alt="Tests"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT"></a>
+</p>
+
+OpenWar replaces eager-customer-service-rep defaults with the behavior of a senior peer. It confirms briefs before acting, breaks work into phases, asks before doing anything destructive, and writes like an adult who's busy.
+
+This is WarBit. He runs OpenWar. He does not "happily help you with that."
+
+<p align="center">
+  <img src="branding/warbit-story/warbit-04-chaos.png" alt="WarBit buried in TODOs and merge conflicts" width="280" />
+  <br />
+  <em>Default agent behavior. Sycophantic, eager, drowning in half-finished context.</em>
+</p>
+
+You can use OpenWar two ways:
+
+1. **As a runtime** (new in v0.2, expanded in v0.3 with tool calling). Install the package, point it at a brief, watch the phase machine enforce the framework against any BYOK LLM. The runtime is opinionated: no flag to disable Phase 3, no way to skip the Confirmation Summary.
+2. **As a system prompt** (v0.1, still supported). Paste [`openwar.md`](./openwar.md) into Claude Code's CLAUDE.md, Cursor's rules, Hermes, OpenClaw, or anywhere else. The agent's behavior changes; nothing else does.
+
+The framework doc and the runtime are the same source of truth. The doc tells the model what to do. The runtime makes sure it actually does it.
+
+<p align="center">
+  <img src="branding/warbit-story/warbit-02-daily-intel.png" alt="WarBit at a 'Daily Intel' bulletin board" width="280" />
+  <br />
+  <em>Phase 0 in one image. What are you shipping today, ops?</em>
+</p>
+
+## Quick start (runtime)
+
+```bash
+npx @pythonluvr/openwar run examples/creative-brief.md --adapter anthropic
+```
+
+Or install:
+
+```bash
+npm install -g @pythonluvr/openwar
+export ANTHROPIC_API_KEY=...
+openwar run examples/engineering-brief.md
+```
+
+Provide an API key for whichever adapter you pick:
+
+| Adapter         | Env var                  | Default model         |
+|-----------------|--------------------------|-----------------------|
+| `anthropic`     | `ANTHROPIC_API_KEY`      | `claude-sonnet-4-6`   |
+| `openai`        | `OPENAI_API_KEY`         | `gpt-4o`              |
+| `gemini`        | `GEMINI_API_KEY`         | `gemini-2.0-flash`    |
+| `grok`          | `XAI_API_KEY`            | `grok-2-latest`       |
+| `openai-compat` | `OPENAI_COMPAT_API_KEY`  | (specify with `--base-url`) |
+
+`openai-compat` covers OpenRouter, Groq, Together, Ollama, vLLM, llama.cpp, and anything else speaking OpenAI's chat-completions protocol.
+
+## What the runtime enforces
+
+<p align="center">
+  <img src="branding/warbit-story/warbit-05-cockpit.png" alt="WarBit watching a wall of monitors" width="280" />
+  <br />
+  <em>Every turn passes through deterministic detectors. No second LLM, no judging.</em>
+</p>
+
+| Phase   | What happens                                                                                     | What blocks |
+|---------|--------------------------------------------------------------------------------------------------|-------------|
+| Phase 0 | Agent must produce a Confirmation Summary with Objective / Deliverables / Constraints / Tools / Unknowns. | No execution until the operator accepts. |
+| Phase 1 | Agent executes step by step. Gated mode pauses between steps; auto-pilot runs through clean ones. | Banned phrases warn. |
+| Phase 2 | If the agent declares it's blocked, the runtime halts the session and persists state. | Resume with `openwar resume <brief_id>`. |
+| Phase 3 | If the agent announces intent to do something destructive or out-of-directive, the runtime stops and asks for explicit yes. | Authorization can be pre-approved per category in the brief's `authorized_costs`. |
+| Phase 4 | Agent produces a concise completion report. | None. |
+
+If the agent skips the Confirmation Summary, the runtime asks it to restate before letting execution start.
+
+## Tools (new in v0.3)
+
+<p align="center">
+  <img src="branding/warbit-story/warbit-06-new-tools.png" alt="WarBit opening a glowing 'New Tools' chest" width="280" />
+  <br />
+  <em>v0.3 turned OpenWar from "constrained chat wrapper" into "real agent." The runtime now calls tools.</em>
+</p>
+
+The runtime ships six native tools plus a hand-rolled MCP client. Every tool call goes through:
+
+1. Schema translation in the adapter to the provider's native function-calling format.
+2. Authorization check against the brief's `authorized_costs` and any session-approved categories.
+3. Sandbox execution: workdir-bounded paths, timeout enforcement, output caps, HTTP host allowlist.
+4. Result fed back to the LLM for the next round.
+
+If a tool requires an unauthorized category, the runtime halts into Phase 3 and prompts for `y` / `Y` / `n` (one-shot, session-wide, deny).
+
+### Native tools
+
+| Name          | Categories required | Notes |
+|---------------|---------------------|-------|
+| `read_file`   | `filesystem_read`   | Default-allowed. Caps at `max_bytes` (1 MB default). |
+| `write_file`  | `filesystem_write`  | Atomic via tmp+rename. Creates parent dirs. |
+| `list_dir`    | `filesystem_read`   | Skips `.git`, `node_modules`, etc. Honors `.openwarignore`. |
+| `shell_exec`  | `shell_exec`        | SIGTERM then SIGKILL on timeout. `--no-shell` disables entirely. |
+| `http_fetch`  | `http_fetch`        | HTTPS only by default. Optional `~/.openwar/http-allow.json` host allowlist. |
+| `apply_patch` | `filesystem_write`  | Unified-diff applier. Rolls back on hunk failure. |
+
+List them with `openwar tools`.
+
+### MCP servers
+
+Configure once with `openwar mcp add <name> <command...>` (writes to `~/.openwar/mcp.json`) or per-brief:
+
+```yaml
+mcp_servers:
+  - filesystem=npx -y @modelcontextprotocol/server-filesystem /allowed/dir
+```
+
+Each MCP server's tools auto-register under `<name>:<tool>` and require `mcp_tool:<name>:<tool>` to call. Use `mcp_tool:<name>:*` in `authorized_costs` to pre-approve everything a server exposes.
+
+Test a server before relying on it:
+
+```bash
+openwar mcp test filesystem
+```
+
+## Multi-agent orchestration (new in v0.4)
+
+When a brief opts into multi-agent by setting `roles:` in its frontmatter, the runtime stops running one agent against the whole brief and instead drives a small team:
+
+- **planner** decomposes the brief into linear sub-tasks with acceptance criteria.
+- **executor** runs each sub-task with the full v0.3 tool layer, gated by the brief's `authorized_costs`.
+- **reviewer** evaluates the executor's output against the sub-task's acceptance criteria. Read-only file access for verification.
+- **critic** (optional fourth role) gives an independent second-opinion review. Disagreement with the reviewer halts the run for an operator decision.
+
+The framework applies recursively. Every role's output passes through the same detectors as a single-agent run. Every sub-task gets its own Phase 0. Phase 2 / Phase 3 fire inside the role that triggered them.
+
+Try it without spending execution tokens first:
+
+```bash
+openwar plan examples/multi-agent-brief.md --adapter anthropic
+```
+
+Full run:
+
+```bash
+openwar run examples/multi-agent-brief.md --adapter anthropic
+```
+
+Single-agent mode (omitting `roles:` or passing `--single`) keeps the v0.3 behavior. Sessions from v0.3 resume cleanly under v0.4; the schema migration is automatic.
+
+### Budgets
+
+Briefs may declare cost ceilings in `budgets:`. Hitting any ceiling halts the coordinator cleanly with state persisted; the operator can extend and resume.
+
+```yaml
+budgets:
+  max_tokens: 80000
+  max_wall_clock_minutes: 25
+  max_tool_calls_per_subtask: 12
+  max_retries_per_subtask: 3
+```
+
+Defaults if omitted: 50k tokens, 20 minutes, 15 tool calls per sub-task, 3 retries per sub-task.
+
+## CLI
+
+```text
+openwar run <brief.md> [--adapter <id>] [--model <name>] [--mode gated|auto]
+                       [--workdir <path>] [--no-shell]
+                       [--mcp-server name=command] [--resume] [--ephemeral]
+                       [--roles planner,executor,reviewer[,critic]]
+                       [--max-tokens N] [--max-minutes N] [--single]
+openwar plan <brief.md>                     # planner dry-run; no execution
+openwar resume <brief_id>                   # auto-detects single-agent vs multi-agent
+openwar list
+openwar inspect <brief_id> [--transcript]
+openwar validate <brief.md>
+openwar roles                                # list registered roles
+openwar adapters
+openwar tools
+openwar mcp list | add <name> <cmd...> | remove <name> | test <name>
+openwar version
+```
+
+Sessions persist to `~/.openwar/sessions/` as JSON + JSONL transcript. Resume with `openwar resume <brief_id>`. `--ephemeral` skips persistence (used by tests and integrators).
+
+## Use as a library
+
+```ts
+import { run, MockAdapter, AnthropicAdapter } from "openwar";
+
+const adapter = new AnthropicAdapter({ id: "anthropic", model: "claude-sonnet-4-6" });
+const result = await run({ briefPath: "./brief.md", adapter });
+
+if (!result.completed) {
+  console.error(`Halted at ${result.final_phase}: ${result.halt_reason}`);
+}
+```
+
+War Room and other integrators consume OpenWar this way; the runtime is the framework's enforcement surface.
+
+## Brief format
+
+Briefs are markdown with required frontmatter. A reference template ships at [`templates/brief.md`](./templates/brief.md).
+
+```yaml
+---
+project: <slug>                    # required, kebab-case
+brief_id: YYYY-MM-DD-NNN           # optional; auto-generated if absent
+deadline: YYYY-MM-DD               # optional
+scope_locked: true|false           # if true, refuse out-of-scope additions
+mode: gated|auto                   # optional override of per-step-vs-auto
+workdir: ./relative-or-absolute    # optional. All filesystem tools sandboxed here.
+authorized_costs:                  # pre-approves these destructive categories
+  - filesystem_write
+  - shell_exec
+  - http_fetch
+  - mcp_tool:filesystem
+mcp_servers:                       # optional. name=command, one per entry.
+  - filesystem=npx -y @modelcontextprotocol/server-filesystem /allowed/dir
+---
+```
+
+Recognized `authorized_costs` categories: `filesystem_read` (default-allowed), `filesystem_write`, `filesystem_delete`, `shell_exec`, `http_fetch`, `paid_api_call`, `git_write`, `git_push`, `deploy`, `external_message`, plus `mcp_tool:<server>` and `mcp_tool:<server>:<tool>`. Wildcards: `*` matches every category, `mcp_tool:*` matches any MCP tool, `mcp_tool:server:*` matches any tool from a server. `*` triggers a brief-lint warning; almost always you want specific entries.
+
+Body sections: **Objective**, **Deliverables**, **Constraints**, **Tools required**, **Notes / unknowns**.
+
+Validate a brief without running it:
+
+```bash
+openwar validate brief.md
+```
+
+## Still want just the system prompt?
+
+Paste [`openwar.md`](./openwar.md) into your agent's system prompt. The framework remains a single markdown file. You lose enforcement (the model is on the honor system), but you keep the behavior overlay.
+
+### Claude Code
+
+```bash
+mkdir -p ~/.claude
+curl -fsSL https://raw.githubusercontent.com/pythonluvr/openwar/main/openwar.md >> ~/.claude/CLAUDE.md
+```
+
+### Cursor
+
+Settings → Rules for AI → paste the contents of `openwar.md`.
+
+### War Room
+
+War Room ships OpenWar as its default framework. v0.7+ adopts the runtime; earlier versions used the system prompt only.
+
+## Why both
+
+Behavioral overlays are easy to ignore. A model that's been told "always produce a Confirmation Summary" will sometimes skip it under context pressure or specific phrasing. The runtime catches the skip and asks the model to restate.
+
+System prompts cost nothing to install and work with any runtime. The runtime is heavier, but it actually enforces the rules.
+
+<p align="center">
+  <img src="branding/warbit-story/warbit-03-success.png" alt="WarBit celebrating in front of a 'SUCCESS' screen" width="280" />
+  <br />
+  <em>Phase 4 completion. WarBit ships.</em>
+</p>
+
+## Versioning
+
+Current: **v0.4.0**.
+
+- v0.1: framework doc only (single markdown file).
+- v0.2: runtime, CLI, BYOK adapters for Anthropic, OpenAI, Gemini, Grok, OpenAI-compat.
+- v0.3: six native tools (read_file, write_file, list_dir, shell_exec, http_fetch, apply_patch), hand-rolled MCP client, per-adapter tool-call translation, Phase 3 destructive flag for unauthorized tool calls.
+- v0.4: multi-agent orchestration. Coordinator FSM, planner / executor / reviewer / critic roles, typed handoffs, per-role tool scoping, budgets, schema v3 with v2 migration, `openwar plan` and `openwar roles` subcommands.
+- v0.5: persistent project memory across briefs.
+- v0.6: observability dashboards / tracing UI.
+
+Framework doc is versioned with the package. Drop-in upgrades preserve compatibility within a major version; major bumps may rename phases or change the brief format.
+
+## Community
+
+Questions, bug reports, framework discussion: [Discord](https://discord.gg/ku6GJS92V2). Issues and PRs welcome on this repo too.
+
+## License
+
+[MIT](./LICENSE). Use it, modify it, fork it, ship your own variants, paste it into commercial products. No obligations beyond keeping the copyright notice.
+
+## Authorship
+
+OpenWar is the framework that ships inside [War Room](https://github.com/pythonluvr/war-room), authored across many iterations of running real agent work. This standalone repo exists so people who don't use War Room can still adopt the framework.
+
+<p align="center">
+  <img src="branding/warbit-story/warbit-01-sunset.png" alt="WarBit sitting in front of a sunset over the city" width="280" />
+  <br />
+  <em>Issues and PRs welcome. WarBit will read them in the morning.</em>
+</p>

package/bin/openwar

@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+// Resolves whether to run compiled dist (preferred) or tsx-compile src on the
+// fly (for development inside the repo before `npm run build` has run).
+
+import { existsSync } from "node:fs";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { dirname, join, resolve } from "node:path";
+
+const here = dirname(fileURLToPath(import.meta.url));
+const repoRoot = resolve(here, "..");
+const dist = join(repoRoot, "dist", "cli.js");
+const srcCli = join(repoRoot, "src", "cli.ts");
+
+async function loadCli() {
+  if (existsSync(dist)) {
+    return await import(pathToFileURL(dist).href);
+  }
+  if (existsSync(srcCli)) {
+    try {
+      const tsx = await import("tsx/esm/api");
+      tsx.register();
+      return await import(pathToFileURL(srcCli).href);
+    } catch {
+      process.stderr.write(
+        "openwar: dist/cli.js not found and tsx is not installed. Run `npm install` and `npm run build`.\n",
+      );
+      process.exit(1);
+    }
+  }
+  process.stderr.write("openwar: cannot locate cli (no dist/cli.js or src/cli.ts).\n");
+  process.exit(1);
+}
+
+const mod = await loadCli();
+if (typeof mod.main !== "function") {
+  process.stderr.write("openwar: cli module did not export main().\n");
+  process.exit(1);
+}
+try {
+  const code = await mod.main(process.argv.slice(2));
+  process.exit(code ?? 0);
+} catch (err) {
+  process.stderr.write(`openwar: ${(err && err.message) || err}\n`);
+  process.exit(1);
+}

package/dist/adapters/anthropic.d.ts

@@ -0,0 +1,15 @@
+import type { AgentAdapter, SendMessageOptions, StreamEvent, AdapterConfig, ToolDefinition, ToolResultForRound } from "../types.js";
+export declare function formatToolsForAnthropic(tools: ToolDefinition[]): unknown[];
+export declare function formatMessagesForAnthropic(opts: SendMessageOptions): unknown[];
+export declare function formatToolResultForAnthropicMessage(r: ToolResultForRound): unknown;
+export declare class AnthropicAdapter implements AgentAdapter {
+    readonly id = "anthropic";
+    readonly name = "Anthropic (Claude)";
+    readonly model: string;
+    private readonly apiKey;
+    private readonly baseUrl;
+    constructor(config?: AdapterConfig);
+    isConfigured(): boolean;
+    sendMessage(opts: SendMessageOptions): AsyncIterable<StreamEvent>;
+}
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/adapters/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,cAAc,EAEd,kBAAkB,EACnB,MAAM,aAAa,CAAC;AASrB,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAM1E;AAGD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,EAAE,CAyB9E;AAED,wBAAgB,mCAAmC,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAOlF;AASD,qBAAa,gBAAiB,YAAW,YAAY;IACnD,QAAQ,CAAC,EAAE,eAAe;IAC1B,QAAQ,CAAC,IAAI,wBAAwB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,GAAE,aAAmC;IAMvD,YAAY,IAAI,OAAO;IAIhB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,aAAa,CAAC,WAAW,CAAC;CAqHzE"}

package/dist/adapters/anthropic.js

@@ -0,0 +1,179 @@
+import { parseSseStream } from "./sse.js";
+const DEFAULT_MODEL = "claude-sonnet-4-6";
+const DEFAULT_BASE_URL = "https://api.anthropic.com";
+const ANTHROPIC_VERSION = "2023-06-01";
+// Translate OpenWar ToolDefinition[] into Anthropic's "tools" request shape.
+// https://docs.anthropic.com/claude/docs/tool-use
+export function formatToolsForAnthropic(tools) {
+    return tools.map(t => ({
+        name: t.name,
+        description: t.description,
+        input_schema: t.input_schema,
+    }));
+}
+// Build the messages array including prior tool_use / tool_result blocks.
+export function formatMessagesForAnthropic(opts) {
+    const out = [];
+    for (const m of opts.messages) {
+        if (m.role === "system")
+            continue;
+        out.push({ role: m.role, content: m.content });
+    }
+    if (opts.prior_tool_calls && opts.prior_tool_calls.length > 0) {
+        const blocks = opts.prior_tool_calls.map(c => ({
+            type: "tool_use",
+            id: c.id,
+            name: c.name,
+            input: c.arguments ?? {},
+        }));
+        out.push({ role: "assistant", content: blocks });
+    }
+    if (opts.prior_tool_results && opts.prior_tool_results.length > 0) {
+        const blocks = opts.prior_tool_results.map(r => ({
+            type: "tool_result",
+            tool_use_id: r.call_id,
+            content: r.content,
+            ...(r.is_error && { is_error: true }),
+        }));
+        out.push({ role: "user", content: blocks });
+    }
+    return out;
+}
+export function formatToolResultForAnthropicMessage(r) {
+    return {
+        type: "tool_result",
+        tool_use_id: r.call_id,
+        content: r.content,
+        ...(r.is_error && { is_error: true }),
+    };
+}
+export class AnthropicAdapter {
+    id = "anthropic";
+    name = "Anthropic (Claude)";
+    model;
+    apiKey;
+    baseUrl;
+    constructor(config = { id: "anthropic" }) {
+        this.model = config.model ?? DEFAULT_MODEL;
+        this.apiKey = config.apiKey ?? process.env.ANTHROPIC_API_KEY;
+        this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    }
+    isConfigured() {
+        return Boolean(this.apiKey);
+    }
+    async *sendMessage(opts) {
+        if (!this.apiKey) {
+            yield { type: "error", error: new Error("ANTHROPIC_API_KEY not set") };
+            return;
+        }
+        const body = {
+            model: this.model,
+            max_tokens: 4096,
+            system: opts.system,
+            stream: true,
+            messages: formatMessagesForAnthropic(opts),
+        };
+        if (opts.tools && opts.tools.length > 0) {
+            body.tools = formatToolsForAnthropic(opts.tools);
+        }
+        let res;
+        try {
+            res = await fetch(`${this.baseUrl}/v1/messages`, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json",
+                    "anthropic-version": ANTHROPIC_VERSION,
+                    "x-api-key": this.apiKey,
+                },
+                body: JSON.stringify(body),
+                signal: opts.signal,
+            });
+        }
+        catch (err) {
+            yield { type: "error", error: err instanceof Error ? err : new Error(String(err)) };
+            return;
+        }
+        if (!res.ok || !res.body) {
+            const txt = await res.text().catch(() => "");
+            yield {
+                type: "error",
+                error: new Error(`Anthropic ${res.status}: ${txt.slice(0, 500)}`),
+            };
+            return;
+        }
+        let assembled = "";
+        const toolCallsByIndex = new Map();
+        const completedCalls = [];
+        try {
+            for await (const ev of parseSseStream(res.body)) {
+                if (!ev.data || ev.data === "[DONE]")
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(ev.data);
+                }
+                catch {
+                    continue;
+                }
+                if (parsed.type === "content_block_start" && parsed.content_block?.type === "tool_use") {
+                    const idx = parsed.index ?? 0;
+                    toolCallsByIndex.set(idx, {
+                        index: idx,
+                        id: parsed.content_block.id ?? `call_${idx}`,
+                        name: parsed.content_block.name ?? "",
+                        argsJson: "",
+                    });
+                }
+                else if (parsed.type === "content_block_delta" &&
+                    parsed.delta?.type === "input_json_delta") {
+                    const idx = parsed.index ?? 0;
+                    const slot = toolCallsByIndex.get(idx);
+                    if (slot) {
+                        const fragment = parsed.delta.partial_json ?? "";
+                        slot.argsJson += fragment;
+                        yield {
+                            type: "tool_call_arg_delta",
+                            tool_call_id: slot.id,
+                            name: slot.name,
+                            arg_delta: fragment,
+                        };
+                    }
+                }
+                else if (parsed.type === "content_block_delta" &&
+                    parsed.delta?.type === "text_delta") {
+                    const delta = parsed.delta.text ?? "";
+                    if (delta) {
+                        assembled += delta;
+                        yield { type: "text_delta", delta };
+                    }
+                }
+                else if (parsed.type === "content_block_stop") {
+                    const idx = parsed.index ?? 0;
+                    const slot = toolCallsByIndex.get(idx);
+                    if (slot) {
+                        let args = {};
+                        try {
+                            args = slot.argsJson.length > 0 ? JSON.parse(slot.argsJson) : {};
+                        }
+                        catch {
+                            args = { __parse_error: slot.argsJson };
+                        }
+                        const call = { id: slot.id, name: slot.name, arguments: args };
+                        completedCalls.push(call);
+                        yield { type: "tool_call_complete", call };
+                        toolCallsByIndex.delete(idx);
+                    }
+                }
+                else if (parsed.type === "message_stop") {
+                    yield { type: "done", message: assembled, tool_calls: completedCalls };
+                    return;
+                }
+            }
+            yield { type: "done", message: assembled, tool_calls: completedCalls };
+        }
+        catch (err) {
+            yield { type: "error", error: err instanceof Error ? err : new Error(String(err)) };
+        }
+    }
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/adapters/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AACrD,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC,6EAA6E;AAC7E,kDAAkD;AAClD,MAAM,UAAU,uBAAuB,CAAC,KAAuB;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,0BAA0B,CAAC,IAAwB;IACjE,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;SACzB,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,CAAC,CAAC,OAAO;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACtC,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,CAAqB;IACvE,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,CAAC,CAAC,OAAO;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AASD,MAAM,OAAO,gBAAgB;IAClB,EAAE,GAAG,WAAW,CAAC;IACjB,IAAI,GAAG,oBAAoB,CAAC;IAC5B,KAAK,CAAS;IACN,MAAM,CAAqB;IAC3B,OAAO,CAAS;IAEjC,YAAY,SAAwB,EAAE,EAAE,EAAE,WAAW,EAAE;QACrD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,YAAY;QACV,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,CAAC,WAAW,CAAC,IAAwB;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACvE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,0BAA0B,CAAC,IAAI,CAAC;SAC3C,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,EAAE;gBAC/C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,mBAAmB,EAAE,iBAAiB;oBACtC,WAAW,EAAE,IAAI,CAAC,MAAM;iBACzB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;aAClE,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsC,CAAC;QACvE,MAAM,cAAc,GAAe,EAAE,CAAC;QAEtC,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAC/C,IAAI,MAKH,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBAED,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;oBACvF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;oBAC9B,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;wBACxB,KAAK,EAAE,GAAG;wBACV,EAAE,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,QAAQ,GAAG,EAAE;wBAC5C,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE;wBACrC,QAAQ,EAAE,EAAE;qBACb,CAAC,CAAC;gBACL,CAAC;qBAAM,IACL,MAAM,CAAC,IAAI,KAAK,qBAAqB;oBACrC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,kBAAkB,EACzC,CAAC;oBACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;oBAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvC,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;wBACjD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;wBAC1B,MAAM;4BACJ,IAAI,EAAE,qBAAqB;4BAC3B,YAAY,EAAE,IAAI,CAAC,EAAE;4BACrB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,SAAS,EAAE,QAAQ;yBACpB,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,IACL,MAAM,CAAC,IAAI,KAAK,qBAAqB;oBACrC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY,EACnC,CAAC;oBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBACtC,IAAI,KAAK,EAAE,CAAC;wBACV,SAAS,IAAI,KAAK,CAAC;wBACnB,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;oBACtC,CAAC;gBACH,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBAChD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;oBAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvC,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,IAAI,GAAY,EAAE,CAAC;wBACvB,IAAI,CAAC;4BACH,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,CAAC;wBAAC,MAAM,CAAC;4BACP,IAAI,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAC1C,CAAC;wBACD,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;wBACzE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1B,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;wBAC3C,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;oBACvE,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtF,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/gemini.d.ts

@@ -0,0 +1,15 @@
+import type { AgentAdapter, SendMessageOptions, StreamEvent, AdapterConfig, ToolDefinition, ToolResultForRound } from "../types.js";
+export declare function formatToolsForGemini(tools: ToolDefinition[]): unknown;
+export declare function formatMessagesForGemini(opts: SendMessageOptions): unknown[];
+export declare function formatToolResultForGeminiMessage(r: ToolResultForRound): unknown;
+export declare class GeminiAdapter implements AgentAdapter {
+    readonly id = "gemini";
+    readonly name = "Google Gemini";
+    readonly model: string;
+    private readonly apiKey;
+    private readonly baseUrl;
+    constructor(config?: AdapterConfig);
+    isConfigured(): boolean;
+    sendMessage(opts: SendMessageOptions): AsyncIterable<StreamEvent>;
+}
+//# sourceMappingURL=gemini.d.ts.map

package/dist/adapters/gemini.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.d.ts","sourceRoot":"","sources":["../../src/adapters/gemini.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,cAAc,EAEd,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAOrB,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,CAUrE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,EAAE,CA6B3E;AAED,wBAAgB,gCAAgC,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAO/E;AAED,qBAAa,aAAc,YAAW,YAAY;IAChD,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,GAAE,aAAgC;IAMpD,YAAY,IAAI,OAAO;IAIhB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,aAAa,CAAC,WAAW,CAAC;CA6EzE"}