@retaw106/mmc-oc 0.0.0-stage → 1.2.2

package/dist/shared/status-view-check.d.ts

@@ -0,0 +1,130 @@
+/**
+ * The one place a `/mmc-status` payload is checked before a status surface
+ * draws it.
+ *
+ * The OpenCode status dialog receives its data over RPC from the Magic Context
+ * server, and nothing guarantees that server is the same version as the UI or
+ * that it answered with a full status snapshot at all: it answers
+ * `{ sessionId, disabled: true }` for a directory it keeps no state for, an
+ * error envelope when it cannot read the session, and an older or newer field
+ * set when OpenCode was not restarted after an update. The shared view model
+ * used to read those fields unguarded, so a payload without `usagePercentage`
+ * threw inside the dialog's first render and took the whole TUI down.
+ *
+ * Every payload therefore passes through here first. Required fields are
+ * checked once; a payload missing any of them becomes a named "status
+ * unavailable" reason instead of a view. Optional fields with an unexpected
+ * shape are dropped (and listed) rather than passed on, so `buildStatusView`
+ * only ever sees values it can format. Pi builds its snapshot in process, but
+ * its overlay goes through the same check so both hosts draw from one contract.
+ *
+ * Fork note (upstream port batch 5, 2026-10-01): the warning derivation lives
+ * in status-summary.ts (upstream 44ce0e05b); the upstream shape's embedding
+ * and dreamer inputs are absent here — this fork removed those stacks (T-004)
+ * — and docsTokens/profileTokens are absent from StatusViewSource
+ * (T-005/T-010), so they are not required here.
+ */
+import type { SidebarSnapshot } from "./rpc-types";
+import type { CheckedStatusViewSource } from "./status-view";
+/** Why a status surface shows "status unavailable" instead of the status view. */
+export type StatusUnavailableReason = 
+/** The server could not be reached, or it answered with an error. */
+{
+    readonly kind: "rpc_error";
+    readonly message: string;
+}
+/**
+ * The server answered that it keeps no Magic Context state for this
+ * directory: it is the user's home directory, or no project identity could
+ * be resolved for it (memory features are paused).
+ */
+ | {
+    readonly kind: "not_tracked";
+    readonly cause: "home_directory" | "identity_paused";
+}
+/** The payload lacks fields the view needs, or carries them with the wrong type. */
+ | {
+    readonly kind: "malformed";
+    readonly fields: readonly string[];
+}
+/**
+ * Building the view from a checked payload still threw. The check is meant
+ * to make this impossible; the reason exists so a gap in the check shows up
+ * as a named message in the dialog rather than as a crashed TUI.
+ */
+ | {
+    readonly kind: "view_error";
+    readonly message: string;
+};
+/** Plugin versions on both ends of the status RPC. */
+export interface StatusVersions {
+    /**
+     * Version the Magic Context server reported, or null when it answered
+     * without one: servers older than the `pluginVersion` field. A request that
+     * got no answer carries no versions at all rather than a null here.
+     */
+    readonly server: string | null;
+    /** Version of the package drawing the status view. */
+    readonly ui: string;
+}
+/**
+ * Result of checking one status payload. `extras` carries host-specific values
+ * the host draws outside the shared view model (OpenCode's live recomp progress,
+ * for example); a host with none uses `undefined`.
+ */
+export type StatusCheck<Extras = undefined> = {
+    readonly state: "ready";
+    readonly source: CheckedStatusViewSource;
+    /** Optional fields that were present with an unexpected shape and were left out. */
+    readonly ignoredFields: readonly string[];
+    /** Null on hosts where the status comes from the same process as the view. */
+    readonly versions: StatusVersions | null;
+    readonly extras: Extras;
+} | {
+    readonly state: "unavailable";
+    readonly reason: StatusUnavailableReason;
+    readonly versions: StatusVersions | null;
+};
+/** What the OpenCode dialog draws beyond the shared view model. */
+export interface OpenCodeStatusExtras {
+    readonly recompProgress: NonNullable<SidebarSnapshot["recompProgress"]> | null;
+    /** True when Rust authority has rerouted host tool and historian paths to the module. */
+    readonly hostBackendsModuleSide: boolean;
+    /** Read by OpenCode 2's plain-text status, drawn where no component dialog can be. */
+    readonly historianRunning: boolean;
+    readonly lastTransformError: string | null;
+}
+/**
+ * Checks a status snapshot against what `buildStatusView` reads and returns a
+ * copy holding only those fields. A missing or mistyped required field fails
+ * the check with its name; a malformed optional field is dropped and listed.
+ */
+export declare function checkStatusViewSource(candidate: unknown): {
+    readonly ok: true;
+    readonly source: CheckedStatusViewSource;
+    readonly ignoredFields: string[];
+} | {
+    readonly ok: false;
+    readonly fields: string[];
+};
+/** A host that builds its status in process: no transport, no version to compare. */
+export declare function checkLocalStatusSource(candidate: unknown): StatusCheck;
+/**
+ * An RPC failure (transport error, timeout, or client not started) as a status
+ * result. No server answered, so there is no server version to compare.
+ */
+export declare function statusRpcFailure(message: string): StatusCheck<never>;
+/**
+ * Checks a `status-detail` RPC reply for the OpenCode dialog (both host
+ * generations). `uiVersion` is the version of the package drawing the dialog;
+ * the server reports its own in `pluginVersion`, and a server too old to send
+ * it reports `null`.
+ */
+export declare function checkStatusDetailPayload(raw: unknown, uiVersion: string): StatusCheck<OpenCodeStatusExtras>;
+/**
+ * One line naming a server/UI version difference, or null when both ends run
+ * the same version (or the status comes from the same process). A server that
+ * reports no version predates the field, so it is older than this UI.
+ */
+export declare function statusVersionNotice(versions: StatusVersions | null): string | null;
+//# sourceMappingURL=status-view-check.d.ts.map

package/dist/shared/status-view-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-view-check.d.ts","sourceRoot":"","sources":["../../src/shared/status-view-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,uBAAuB,EAAoB,MAAM,eAAe,CAAC;AAG/E,kFAAkF;AAClF,MAAM,MAAM,uBAAuB;AAC/B,qEAAqE;AACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC1D;;;;GAIG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAAA;CAAE;AACxF,oFAAoF;GAClF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AACpE;;;;GAIG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,SAAS,IACpC;IACI,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B,GACD;IACI,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;CAC5C,CAAC;AAER,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,CAAC;IAC/E,yFAAyF;IACzF,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,sFAAsF;IACtF,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9C;AA6KD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,GAClD;IACI,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;CACpC,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAsDtD;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,CAgBtE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAEpE;AAqDD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACpC,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,GAClB,WAAW,CAAC,oBAAoB,CAAC,CAgEnC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAalF"}

package/dist/shared/status-view.d.ts

@@ -0,0 +1,230 @@
+import { type ConfigParseFailure } from "./config-diagnostics";
+import type { TailHygieneStatus } from "./rpc-types";
+import { type StatusCheck, type StatusUnavailableReason, type StatusVersions } from "./status-view-check";
+import { type UserFacingFailureKey } from "./user-facing-codes";
+import { type WindowGeometryResult } from "./window-geometry";
+/** Theme-independent colour role; each host maps these onto its own palette. */
+export type StatusTone = "accent" | "text" | "muted" | "warning" | "error";
+export interface StatusRow {
+    readonly label: string;
+    readonly value: string;
+    readonly tone: StatusTone;
+}
+export interface StatusSection {
+    readonly title: string;
+    /**
+     * Characters reserved for the label column of this section. Labels are
+     * padded to it and values start after it, so a label can never be squeezed
+     * into a mid-word wrap by a long value next to it.
+     */
+    readonly labelWidth: number;
+    readonly rows: readonly StatusRow[];
+}
+/** One coloured slice of the breakdown bar, sized by its token count. */
+export interface StatusBarSegment {
+    readonly label: string;
+    readonly tokens: number;
+    readonly color: string;
+}
+export interface StatusBreakdownRow {
+    readonly label: string;
+    readonly value: string;
+    readonly color: string;
+}
+export interface StatusWarning {
+    readonly text: string;
+    readonly tone: "warning" | "error";
+}
+export interface StatusHeadlineCell {
+    readonly text: string;
+    readonly tone: StatusTone;
+}
+export interface StatusView {
+    readonly title: string;
+    readonly version: string;
+    /** Left cell is pressure against the threshold, right cell is the absolute count. */
+    readonly headline: {
+        readonly left: StatusHeadlineCell;
+        readonly right: StatusHeadlineCell;
+    };
+    readonly windowLine: string | null;
+    readonly bar: readonly StatusBarSegment[];
+    readonly breakdown: readonly StatusBreakdownRow[];
+    readonly hygiene: StatusRow | null;
+    readonly sections: readonly StatusSection[];
+    readonly warnings: readonly StatusWarning[];
+    readonly footer: string;
+}
+/**
+ * The status fields the view reads. Field names follow the OpenCode RPC
+ * `StatusDetail`, so that host passes its snapshot straight in; Pi builds the
+ * same shape from its own detail (see `statusViewSourceFromPiDetail`).
+ */
+export interface StatusViewSource {
+    readonly usagePercentage: number;
+    readonly inputTokens: number;
+    readonly contextLimit: number;
+    readonly executeThreshold: number;
+    readonly executeThresholdClamped?: boolean;
+    readonly windowGeometry?: WindowGeometryResult;
+    readonly tailHygiene?: TailHygieneStatus;
+    readonly systemPromptTokens: number;
+    readonly compartmentTokens: number;
+    readonly compartmentCount: number;
+    readonly factTokens: number;
+    readonly memoryTokens: number;
+    readonly memoryBlockCount: number;
+    readonly conversationTokens: number;
+    readonly toolCallTokens: number;
+    readonly toolDefinitionTokens: number;
+    readonly activeTags: number;
+    readonly droppedTags: number;
+    readonly totalTags: number;
+    readonly activeBytes: number;
+    /** False when only a module-side total is authoritative; active/dropped are then unknown. */
+    readonly tagCountsAuthoritative?: boolean;
+    readonly lastNudgeTokens: number;
+    readonly pendingOpsCount: number;
+    readonly compactionMarker?: {
+        readonly code: "MC-C11" | null;
+        readonly attempts: number;
+        readonly lastError: string | null;
+        readonly pendingSinceMs: number | null;
+    };
+    readonly protectedTagCount: number;
+    readonly isSubagent: boolean;
+    readonly cacheTtl: string;
+    readonly cacheTtlSource?: import("./cache-ttl-display").CacheTtlDisplaySource;
+    readonly cacheTtlModelKey?: string;
+    readonly lastResponseTime: number;
+    readonly cacheRemainingMs: number;
+    readonly cacheExpired: boolean;
+    readonly cacheNeverExpires?: boolean;
+    readonly historyBlockTokens: number;
+    readonly compressionBudget: number | null;
+    readonly compressionUsage: string | null;
+    readonly memoryCount: number;
+    readonly sessionNoteCount?: number;
+    readonly archivedCompartmentCount?: number;
+    readonly configParseFailures?: readonly ConfigParseFailure[];
+    readonly configGeneration?: number;
+    readonly configAdoptedAt?: number;
+    readonly configReloadFailure?: {
+        readonly path: string;
+        readonly message: string;
+    };
+    /** OpenCode spells this `compaction_enabled`; both spellings are accepted. */
+    readonly compaction_enabled?: boolean;
+    readonly compactionEnabled?: boolean;
+    /** Failure codes to print under the sections, already selected by the host. */
+    readonly warnings?: readonly UserFacingFailureKey[];
+    /**
+     * Set when this server migrated the shared store at startup while other
+     * OpenCode servers (these PIDs, from their RPC discovery records) could not
+     * be checked; if one was an older build still running, it now reads a
+     * store newer than it supports.
+     */
+    readonly unconfirmedMigrationHolders?: {
+        readonly pids: readonly number[];
+        readonly fromVersion: number;
+        readonly toVersion: number;
+    };
+    readonly hiddenVariantWarnings?: readonly string[];
+}
+declare const checkedStatusViewSource: unique symbol;
+/**
+ * A `StatusViewSource` that has passed `checkStatusViewSource`. The brand exists
+ * only in the type system: `buildStatusView` accepts nothing else, so a payload
+ * cannot reach the view model without going through the check.
+ */
+export type CheckedStatusViewSource = StatusViewSource & {
+    readonly [checkedStatusViewSource]: true;
+};
+export interface StatusViewOptions {
+    /** Plugin version shown next to the title. */
+    readonly version: string;
+    /** Clock used for the cache "last response"/"remaining" values. */
+    readonly now?: number;
+}
+/**
+ * Category palette for status breakdowns, so one colour means one category
+ * wherever it is drawn.
+ */
+export declare const STATUS_CATEGORY_COLORS: {
+    readonly system: "#c084fc";
+    readonly compartments: "#60a5fa";
+    readonly facts: "#fbbf24";
+    readonly memories: "#34d399";
+    readonly profile: "#a3e635";
+    readonly conversation: "#f87171";
+    readonly toolCalls: "#fb923c";
+    readonly toolDefs: "#f472b6";
+};
+/**
+ * Columns reserved between the two section columns when the grid is drawn.
+ * The dialog draws its two columns at equal width with this gap between them.
+ */
+export declare const STATUS_COLUMN_GAP = 4;
+/**
+ * Columns one section needs so that neither its labels nor its values wrap:
+ * the label column, one separating space, and the longest value in the section.
+ */
+export declare function statusSectionWidth(section: StatusSection): number;
+/** How the sections are laid out at one content width. */
+export interface StatusColumnLayout {
+    /** True when both columns fit; false means the caller draws one column. */
+    readonly twoColumn: boolean;
+    /** Columns the widest section in the left column needs. */
+    readonly leftWidth: number;
+    /** Columns the widest section in the right column needs. */
+    readonly rightWidth: number;
+}
+/**
+ * Whether the sections fit in two columns at this content width, and how wide
+ * each column has to be.
+ *
+ * A value never wraps, so a section needs `labelWidth + 1 + longest value`
+ * columns and the grid is drawn only when both columns' requirements plus the
+ * gap fit the content width. When they do not, the caller draws the same
+ * sections in one column instead of squeezing values into mid-word wraps.
+ *
+ * The returned widths are the columns' own requirements, so a caller that sizes
+ * its columns from them cannot wrap a value even when the two requirements are
+ * very different. Both renderers call this so neither decides the layout on its
+ * own.
+ */
+export declare function statusColumnsFor(sections: readonly StatusSection[], contentWidth: number): StatusColumnLayout;
+/**
+ * Integer column widths for the breakdown bar, summing exactly to `totalWidth`.
+ *
+ * Each segment's proportional share is rounded down and the leftover columns go
+ * to the largest fractional remainders, so the widths always add up to the bar
+ * width. Rounding every segment independently instead leaves the bar short of
+ * its container by up to one column per segment, which paints as blank cells
+ * between the coloured runs.
+ *
+ * Every segment that carries tokens keeps at least one column, so a category
+ * whose share rounds below a column stays visible in the bar.
+ */
+export declare function distributeBarWidths(tokens: readonly number[], totalWidth: number): number[];
+/** Compact token count, e.g. 623K. Shared so every host prints one spelling. */
+export declare function formatStatusTokens(value: number): string;
+/** Builds the full status view from one checked snapshot. */
+export declare function buildStatusView(source: CheckedStatusViewSource, options: StatusViewOptions): StatusView;
+/**
+ * The view drawn instead of the status when there is no usable snapshot. It has
+ * the same shape as a full view (headline, sections, warnings, footer), so a
+ * host draws it with the same code and cannot crash on a missing part.
+ */
+export declare function buildUnavailableStatusView(reason: StatusUnavailableReason, versions: StatusVersions | null, options: StatusViewOptions): StatusView;
+/**
+ * The view for one checked status result: the full status, or the
+ * "status unavailable" view naming why there is none. A version difference
+ * between the server and this UI is named in both. This never throws, so a
+ * host can call it inside a render without guarding it.
+ */
+export declare function buildStatusViewFor(check: StatusCheck<unknown>, options: StatusViewOptions): StatusView;
+/** Pads one row to its section's label column; values print flush right. */
+export declare function formatStatusRowText(row: StatusRow, labelWidth: number, width: number): string;
+export {};
+//# sourceMappingURL=status-view.d.ts.map

package/dist/shared/status-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-view.d.ts","sourceRoot":"","sources":["../../src/shared/status-view.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,kBAAkB,EAA+B,MAAM,sBAAsB,CAAC;AAE5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACH,KAAK,WAAW,EAChB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EAEtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE1F,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3E,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAC;CACvC;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAC7F,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1C,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,qBAAqB,EAAE,qBAAqB,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC7D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,2BAA2B,CAAC,EAAE;QACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;QACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtD;AAED,OAAO,CAAC,MAAM,uBAAuB,EAAE,OAAO,MAAM,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,GAAG;IACrD,QAAQ,CAAC,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC;CAC5C,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;CASzB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAMjE;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC5B,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,YAAY,EAAE,MAAM,GACrB,kBAAkB,CAUpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CA0C3F;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIxD;AAySD,6DAA6D;AAC7D,wBAAgB,eAAe,CAC3B,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,iBAAiB,GAC3B,UAAU,CA6CZ;AA6CD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,uBAAuB,EAC/B,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,OAAO,EAAE,iBAAiB,GAC3B,UAAU,CA+BZ;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAC3B,OAAO,EAAE,iBAAiB,GAC3B,UAAU,CA6BZ;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI7F"}

package/dist/shared/storage-permissions.d.ts

@@ -0,0 +1,29 @@
+import type { WriteStream } from "node:fs";
+import type { FileHandle } from "node:fs/promises";
+export declare function setStoragePrivatePermissionEnforcement(enforce: boolean): void;
+export declare function shouldEnforcePrivateStoragePermissions(): boolean;
+/** Test-only reset for suites that exercise both permission policies in one process. */
+export declare function __resetStoragePrivatePermissionEnforcementForTests(): void;
+/** Create storage directories with owner-only permissions at their creation. */
+export declare function ensureStorageDirectorySync(directory: string, forcePrivate?: boolean, recursive?: boolean): void;
+/** Create or replace a storage file using a private mode from the first byte. */
+export declare function writeStorageFileSync(filePath: string, content: string | Uint8Array, options?: {
+    encoding?: BufferEncoding;
+    flag?: string;
+    forcePrivate?: boolean;
+}): void;
+/** Write a private sibling then atomically publish it without a permissive temp window. */
+export declare function writeStorageFileAtomicSync(filePath: string, content: string | Uint8Array, forcePrivate?: boolean): void;
+export declare function copyStorageFileSync(sourcePath: string, destinationPath: string, forcePrivate?: boolean): void;
+export declare function copyStorageTreeSync(sourcePath: string, destinationPath: string, forcePrivate?: boolean): void;
+export declare function openStorageFileSync(filePath: string, flags: string, forcePrivate?: boolean): number;
+export declare function writeStorageFileAsync(filePath: string, content: string | Uint8Array, forcePrivate?: boolean): Promise<void>;
+export declare function writeStorageFileHandleAsync(handle: FileHandle, content: string): Promise<void>;
+export declare function createStorageWriteStream(filePath: string, forcePrivate?: boolean): WriteStream;
+export declare function createStorageFileHandleAsync(filePath: string, flags: string, forcePrivate?: boolean): Promise<FileHandle>;
+/** Tighten existing entries during storage startup; symlinks are never followed. */
+export declare function tightenStorageTreeSync(root: string): {
+    tightened: number;
+    failures: number;
+};
+//# sourceMappingURL=storage-permissions.d.ts.map

package/dist/shared/storage-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-permissions.d.ts","sourceRoot":"","sources":["../../src/shared/storage-permissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAiB3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAMnD,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE7E;AAED,wBAAgB,sCAAsC,IAAI,OAAO,CAEhE;AAED,wFAAwF;AACxF,wBAAgB,kDAAkD,IAAI,IAAI,CAEzE;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,CACtC,SAAS,EAAE,MAAM,EACjB,YAAY,UAAQ,EACpB,SAAS,UAAO,GACjB,IAAI,CAMN;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACnF,IAAI,CAON;AAED,2FAA2F;AAC3F,wBAAgB,0BAA0B,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,YAAY,UAAQ,GACrB,IAAI,CAUN;AAED,wBAAgB,mBAAmB,CAC/B,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,EACvB,YAAY,UAAQ,GACrB,IAAI,CAuBN;AAED,wBAAgB,mBAAmB,CAC/B,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,EACvB,YAAY,UAAQ,GACrB,IAAI,CAeN;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,MAAM,CAIjG;AAED,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,YAAY,UAAQ,GACrB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,2BAA2B,CAC7C,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,WAAW,CAG5F;AAED,wBAAsB,4BAA4B,CAC9C,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,YAAY,UAAQ,uBAIvB;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAoC5F"}

package/dist/shared/subagent-runner.d.ts

@@ -0,0 +1,231 @@
+/**
+ * Cross-harness subagent runner abstraction.
+ *
+ * Magic Context spawns the historian
+ * each as a child "session" with its own model/prompt/tools. OpenCode and Pi
+ * have very different APIs for this:
+ *
+ *   - OpenCode: `client.session.create({parentID}) → client.session.prompt() →
+ *     client.session.messages() → client.session.delete()`. The plugin runs
+ *     in-process with the OpenCode server and uses its SDK client directly.
+ *
+ *   - Pi: no in-process child-session API. Instead `pi --print --mode=json`
+ *     spawns a non-interactive subprocess that emits structured JSON events
+ *     and exits when the agent loop finishes. Sessions are JSONL files on
+ *     disk, optionally addressed via `--session <path>`.
+ *
+ * The runner interface below normalizes both into the same shape so the
+ * actual subagent business logic (historian XML parsing)
+ * can stay harness-agnostic. Each harness ships its
+ * own runner implementation; agents take a `SubagentRunner` as a dep instead
+ * of reaching for `client.session.*` directly.
+ *
+ * Step 5a (this commit) defines the contract and ships `PiSubagentRunner`.
+ * Step 5b will refactor the OpenCode-side spawn paths in
+ * `compartment-runner-historian.ts` onto an
+ * `OpenCodeSubagentRunner` so both harnesses
+ * share the agent business logic instead of duplicating it. Until 5b lands,
+ * OpenCode keeps its existing direct `client.session.*` calls untouched —
+ * the runner contract is purely additive on the OpenCode side.
+ */
+import type { ModelInput } from "./model-resolution";
+/**
+ * Configuration for one subagent invocation.
+ *
+ * Mirrors the union of OpenCode's `session.create` + `session.prompt` body
+ * fields and Pi's `--print` CLI flags, picking the shared subset that the
+ * historian subagent actually uses today.
+ *
+ * Fields:
+ * - `agent`: harness-specific agent name. OpenCode looks this up in its
+ *   agent registry (`HISTORIAN_AGENT`).
+ *   Pi has no concept of "agent name" beyond config, so this is ignored
+ *   on the Pi side and used only by `OpenCodeSubagentRunner`.
+ * - `systemPrompt`: full system prompt for this child run. Replaces (not
+ *   appends to) any harness-default system prompt.
+ * - `userMessage`: the single user-turn prompt. Subagent runs are always
+ *   one-shot — no multi-turn conversation in the child.
+ * - `model`: provider/model identifier in the canonical "provider/model"
+ *   shape (e.g. "anthropic/claude-sonnet-4-7"). Each runner is responsible
+ *   for translating to its harness's native model selection.
+ * - `fallbackModels`: ordered list of models to try if `model` fails. Both
+ *   harnesses retry on transient model failures.
+ * - `timeoutMs`: hard cap on the child run. The runner aborts the child on
+ *   exceeding this and returns `{ ok: false, reason: "timeout" }`.
+ * - `cwd`: working directory for the child. OpenCode uses this for
+ *   `query.directory`; Pi uses it as the spawn cwd so that `--cwd`-aware
+ *   tools see the right project root.
+ * - `signal`: optional AbortSignal so callers can cancel an in-flight run.
+ */
+export interface SubagentRunOptions {
+    agent: string;
+    systemPrompt: string;
+    userMessage: string;
+    model?: string | undefined;
+    fallbackModels?: readonly ModelInput[];
+    timeoutMs?: number | undefined;
+    /** Sampling temperature for the provider request when the harness can enforce it. */
+    temperature?: number | undefined;
+    /** Requested output-token budget for the provider request. */
+    maxOutputTokens?: number | undefined;
+    cwd?: string | undefined;
+    signal?: AbortSignal | undefined;
+    /**
+     * Pi only: explicit thinking level, passed as `--thinking <level>` to the
+     * Pi subprocess. OpenCode ignores this field — thinking/reasoning is
+     * controlled via `variant` in the OpenCode agent config instead.
+     *
+     * Required when the configured historian model supports reasoning
+     * (e.g. github-copilot/gpt-5.4) because Pi's own default resolution may
+     * pick a value the provider rejects. Set to "off" to disable thinking for
+     * speed (local models), or "medium"/"high" for better quality.
+     */
+    thinkingLevel?: string | undefined;
+    /**
+     * Optional progress callback. The runner invokes it for milestone events
+     * during the run: spawn, first event received, terminal stop reason
+     * detected, child exit. Used by the historian to write
+     * lifecycle entries to the magic-context.log without polluting the
+     * normal stdout stream.
+     *
+     * Implementations must be non-throwing and fast — they're called on the
+     * runner's hot path. Errors are swallowed.
+     */
+    onProgress?: (event: SubagentProgressEvent) => void;
+    /** Optional token accounting metadata. When present, harness runners persist subagent_invocations. */
+    accountingSessionId?: string | undefined;
+    accountingSubagent?: "historian" | "historian_editor" | "compressor" | "recomp" | undefined;
+    accountingTask?: string | null | undefined;
+    accountingParentInvocationId?: number | null | undefined;
+}
+/**
+ * Progress events emitted by a runner during a run. Distinct from the final
+ * `SubagentRunResult` — these are mid-run milestones plus (optionally) every
+ * raw event the underlying harness emits, so callers can write a complete
+ * trace to the log when diagnosing hangs.
+ *
+ * Categories:
+ * - `spawned` / `child_exit` / `stderr` — process lifecycle.
+ * - `first_event` — convenience: first event received from the child, useful
+ *   for measuring auth/network warmup time.
+ * - `terminal` — runner detected the final assistant turn (Pi: assistant
+ *   message_end with terminal stopReason and no toolCall; OpenCode: SDK
+ *   `agent_end` equivalent).
+ * - `raw_event` — every parsed event from the harness's structured output
+ *   stream (Pi NDJSON / OpenCode SDK events). Emitted unconditionally so
+ *   debug logs can capture the full timeline. The `event` payload is
+ *   harness-shaped — callers should treat it as `unknown` and log it raw.
+ */
+export type SubagentProgressEvent = {
+    type: "spawned";
+    argv: readonly string[];
+    pid: number | undefined;
+} | {
+    type: "first_event";
+    eventType: string;
+    ms: number;
+} | {
+    type: "raw_event";
+    eventType: string | undefined;
+    event: unknown;
+    ms: number;
+} | {
+    type: "terminal";
+    stopReason: string | undefined;
+    textLength: number;
+    hasToolCall: boolean;
+    ms: number;
+} | {
+    type: "stderr";
+    chunk: string;
+} | {
+    type: "child_exit";
+    code: number | null;
+    signal: string | null;
+    ms: number;
+};
+/**
+ * Result of one subagent invocation.
+ *
+ * The runner contract is "fail soft": transient errors, timeouts, model
+ * failures, and aborts all surface as `{ ok: false, reason }` with a
+ * machine-readable reason and a human-readable message. Throwing is
+ * reserved for programmer errors (bad arguments, missing dependencies)
+ * that the agent code couldn't have caused.
+ *
+ * Fields:
+ * - `ok`: true iff the child produced a final assistant message.
+ * - `assistantText`: concatenated text content from the final assistant
+ *   message, with leading/trailing whitespace trimmed. Empty assistant text is
+ *   reported as `ok: false, reason: "no_assistant"` so callers can try fallback
+ *   models instead of accepting an unusable success.
+ * - `reason`: failure category, one of:
+ *     - `"invalid_prompt"`: a known zero-tool child was given no system prompt
+ *     - `"timeout"`: hit `timeoutMs` before the child finished
+ *     - `"abort"`: caller's `signal` was triggered
+ *     - `"model_failed"`: every configured model + fallback returned an error
+ *     - `"truncated"`: child stopped because model output hit length limits
+ *     - `"spawn_failed"`: subprocess couldn't start (Pi only — binary missing,
+ *       permission denied, etc.)
+ *     - `"non_zero_exit"`: child exited unsuccessfully before a final answer
+ *     - `"no_assistant"`: child completed without a final assistant message
+ *     - `"parse_failed"`: child emitted output we couldn't parse (Pi only —
+ *       JSON malformed or unexpected event ordering)
+ * - `error`: human-readable detail; safe to log, may include stack info.
+ * - `durationMs`: wall-clock time from runner-call to runner-return.
+ * - `meta`: optional harness-specific debug payload. Currently unused; left
+ *   here so the OpenCode runner can surface the child session ID for log
+ *   correlation when Step 5b lands.
+ */
+export interface CompletedSubagentToolCall {
+    name: string;
+    arguments: Record<string, unknown>;
+}
+export type SubagentRunResult = {
+    ok: true;
+    assistantText: string;
+    durationMs: number;
+    /**
+     * Number of tool invocations the agent made during the run. Pi reports
+     * this so callers that gate on "did the agent actually investigate vs
+     * just paraphrase" (refresh-primers' grounding gate) work on Pi, whose
+     * facade otherwise surfaces only the final assistant text. OpenCode
+     * leaves it undefined — its callers read tool-call parts straight off
+     * the real session messages.
+     */
+    toolCallCount?: number;
+    /** Completed, non-error tool results preserved by runners that can
+     *  reconstruct invocation/result pairs from their transcript. */
+    completedToolCalls?: CompletedSubagentToolCall[];
+    meta?: Record<string, unknown>;
+} | {
+    ok: false;
+    reason: "invalid_prompt" | "timeout" | "abort" | "model_failed" | "truncated" | "spawn_failed" | "non_zero_exit" | "no_assistant" | "parse_failed";
+    error: string;
+    durationMs: number;
+    /** True when the caller should retry the task rather than advance its schedule. */
+    transient?: boolean;
+    meta?: Record<string, unknown>;
+};
+/**
+ * Abstract runner contract.
+ *
+ * Each harness ships a single instance — the OpenCode plugin wires
+ * `OpenCodeSubagentRunner` and the Pi plugin wires `PiSubagentRunner` in
+ * its `extension` boot path. Agent code (the historian)
+ * receives the runner as a dep and never reaches for harness-specific
+ * client APIs directly.
+ */
+export interface SubagentRunner {
+    /** Human-readable harness name, for logging (`"opencode"` or `"pi"`). */
+    readonly harness: string;
+    /**
+     * Run one subagent invocation to completion.
+     *
+     * Always resolves with a `SubagentRunResult` — never throws for
+     * runtime/transport/model failures. Throwing is reserved for caller
+     * misuse (e.g. missing required option fields).
+     */
+    run(options: SubagentRunOptions): Promise<SubagentRunResult>;
+}
+//# sourceMappingURL=subagent-runner.d.ts.map

package/dist/shared/subagent-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-runner.d.ts","sourceRoot":"","sources":["../../src/shared/subagent-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,kBAAkB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAEpD,sGAAsG;IACtG,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,kBAAkB,CAAC,EAAE,WAAW,GAAG,kBAAkB,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5F,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,4BAA4B,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CAC5D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,qBAAqB,GAC3B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACtD;IACI,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACd,GACD;IACI,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACd,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,yBAAyB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,MAAM,iBAAiB,GACvB;IACI,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;qEACiE;IACjE,kBAAkB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GACD;IACI,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACA,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,cAAc,GACd,WAAW,GACX,cAAc,GACd,eAAe,GACf,cAAc,GACd,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAER;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;;;;;OAMG;IACH,GAAG,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAChE"}

package/dist/shared/summarize-child-stderr.d.ts

@@ -0,0 +1,2 @@
+export declare function summarizeChildStderr(stderr: string): string;
+//# sourceMappingURL=summarize-child-stderr.d.ts.map

package/dist/shared/summarize-child-stderr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summarize-child-stderr.d.ts","sourceRoot":"","sources":["../../src/shared/summarize-child-stderr.ts"],"names":[],"mappings":"AAaA,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmB3D"}