@skaile/workspaces 4.5.2 → 4.7.0

package/dist/{chunk-PJP2TOCB.js → chunk-NV6R6HJR.js}

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, extractText, extractCost, extractTokens, resolveEnvDriverSession, bindSingleProviderEntry, resolveRegistryBinding } from './chunk-JF77XKD7.js';
-import { getStaticModels, fetchProviderModels } from './chunk-VP2CACF2.js';
-import { getProviderPreset, BUILTIN_DRIVER_CATALOG, getBridgeLogger, entryCredentialValue, registryDriverConfig } from './chunk-C2CYBRYJ.js';
+import { SubprocessCliDriver, extractText, extractCost, extractTokens, resolveEnvDriverSession, bindSingleProviderEntry, resolveRegistryBinding } from './chunk-Q5WGUPC5.js';
+import { getStaticModels, fetchProviderModels } from './chunk-IUVPPJ4T.js';
+import { getProviderPreset, BUILTIN_DRIVER_CATALOG, getBridgeLogger, entryCredentialValue, registryDriverConfig } from './chunk-5GYFYGVW.js';
 import * as z from 'zod';
 
 var GOOGLE_DEFAULT_BASE_URL = getProviderPreset("google")?.base_url;
@@ -183,5 +183,5 @@ var geminiDriverTarget = {
 };
 
 export { GeminiDriver, GeminiFamilyDriver, geminiDriverTarget };
-//# sourceMappingURL=chunk-PJP2TOCB.js.map
-//# sourceMappingURL=chunk-PJP2TOCB.js.map
+//# sourceMappingURL=chunk-NV6R6HJR.js.map
+//# sourceMappingURL=chunk-NV6R6HJR.js.map

package/dist/{chunk-PJP2TOCB.js.map → chunk-NV6R6HJR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../bridge/src/drivers/gemini.ts"],"names":[],"mappings":";;;;;AAuBA,IAAM,uBAAA,GAA0B,iBAAA,CAAkB,QAAQ,CAAA,EAAG,QAAA;AAWtD,IAAe,kBAAA,GAAf,cAA0C,mBAAA,CAAoB;AAAA,EACzD,WAAW,IAAA,EAAiB;AACpC,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,MAAA;AAAA,MACL,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,eAAe,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAA,IAAc,KAAK,EAAE,CAAA;AAChE,QAAA;AAAA,MAEF,KAAK,SAAA;AAAA,MACL,KAAK,WAAA,EAAa;AAChB,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,SAAS,IAAA,IAAQ,WAAA;AAChD,QAAA,IAAI,SAAS,WAAA,EAAa;AAC1B,QAAA,MAAM,IAAA,GAAO,YAAY,IAAI,CAAA;AAC7B,QAAA,IAAI,IAAA,CAAK,SAAS,IAAA,IAAQ,IAAA,CAAK,UAAU,IAAA,IAAQ,IAAA,CAAK,aAAa,IAAA,EAAM;AACvE,UAAA,IAAA,CAAK,iBAAiB,IAAI,CAAA;AAAA,QAC5B,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,mBAAmB,IAAI,CAAA;AAAA,QAC9B;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,UAAA;AAAA,MACL,KAAK,WAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA,EAAQ,IAAA,CAAK,KAAA,IAAS,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA;AACjF,QAAA;AAAA,MAEF,KAAK,aAAA;AACH,QAAA,IAAA,CAAK,cAAA;AAAA,UACH,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA;AAAA,UAC1B,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,OAAA;AAAA,UACnC,QAAQ,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,OAAA,IAAW,KAAK,KAAK;AAAA,SACrD;AACA,QAAA;AAAA,MAEF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,IAAA,CAAK,KAAA,IAAS,OAAO,CAAC,CAAC,CAAA;AAClF,QAAA;AAAA,MAEF,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAU,CAAA;AACrD,QAAA,IAAA,CAAK,UAAA,CAAW;AAAA,UACd,MAAA,EAAQ,cAAc,IAAI,CAAA;AAAA,UAC1B,OAAA,EAAS,YAAY,IAAI,CAAA;AAAA,UACzB,OAAA,EAAS,WAAA,CAAY,IAAI,CAAA,IAAK;AAAA,SAC/B,CAAA;AACD,QAAA;AAAA;AACJ,EACF;AAAA;AAAA,EAIQ,SAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA,GAAkB,KAAA;AAAA;AAAA,EAGhB,eAAA,GAAoC;AAC5C,IAAA,IAAA,CAAK,SAAA,KAAc,uBAAA,CAAwB,IAAA,CAAK,MAAM,CAAA;AACtD,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWU,eAAA,GAAoD;AAC5D,IAAA,IAAI,IAAA,CAAK,eAAA,EAAiB,OAAO,IAAA,CAAK,UAAA;AACtC,IAAA,MAAM,OAAA,GAAU,uBAAA;AAAA,MACd,KAAK,UAAA,CAAW,EAAA;AAAA,MAChB,IAAA,CAAK,WAAA;AAAA,MACL,KAAK,eAAA;AAAgB,KACvB;AACA,IAAA,KAAA,MAAW,OAAA,IAAW,SAAS,QAAA,IAAY,IAAI,IAAA,CAAK,GAAA,CAAI,KAAK,OAAO,CAAA;AACpE,IAAA,IAAA,CAAK,UAAA,GAAa,OAAA;AAClB,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AACvB,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAe,KAAA,GAAuB;AACpC,IAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,IAAA,MAAM,MAAM,KAAA,EAAM;AAAA,EACpB;AAAA,EAES,YAAY,KAAA,EAA0E;AAC7F,IAAA,KAAA,CAAM,YAAY,KAAK,CAAA;AACvB,IAAA,IAAI,KAAA,CAAM,UAAU,MAAA,EAAW;AAC7B,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA;AACjB,MAAA,IAAA,CAAK,eAAA,GAAkB,KAAA;AAAA,IACzB;AAAA,EACF;AAAA;AAAA,EAGS,QAAA,GAA+B;AACtC,IAAA,OAAO,uBAAuB,IAAA,CAAK,eAAA,EAAiB,CAAA,EAAG,eAAA,IAAmB,KAAK,MAAA,CAAO,KAAA;AAAA,EACxF;AACF;AAuBO,IAAM,YAAA,GAAN,cAA2B,kBAAA,CAAmB;AAAA,EAC1C,UAAA,GAAyB;AAAA,IAChC,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,YAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACvB;AAAA,EAEmB,GAAA,GAAc,gBAAgB,QAAQ,CAAA;AAAA,EACtC,UAAA,GAAa,QAAA;AAAA,EACb,WAAA,GAAc,YAAA;AAAA,EACd,SAAA,GAAY,QAAA;AAAA,EAErB,SAAA,CAAU,SAAiB,QAAA,EAAwC;AAC3E,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAA,CAAK,GAAA,CAAI,KAAK,kEAAA,EAAoE;AAAA,QAChF;AAAA,OACD,CAAA;AAAA,IACH;AACA,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAM,OAAA,EAAS,mBAAmB,aAAa,CAAA;AAC7D,IAAA,MAAM,QAAQ,IAAA,CAAK,eAAA,EAAgB,EAAG,eAAA,IAAmB,KAAK,MAAA,CAAO,KAAA;AACrE,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAChC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,QAAA,GAAmC;AAC3C,IAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAC,gBAAA,EAAkB,gBAAA,EAAkB,wBAAwB,CAAC,CAAA;AACvF,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,IAAI,CAAC,SAAS,OAAO,GAAA;AAIrB,IAAA,OAAO,GAAA,CAAI,cAAA;AACX,IAAA,OAAO,GAAA,CAAI,cAAA;AACX,IAAA,OAAO,GAAA,CAAI,sBAAA;AACX,IAAA,MAAM,GAAA,GAAM,oBAAA,CAAqB,OAAA,CAAQ,UAAA,EAAY,QAAQ,KAAA,EAAO;AAAA,MAClE,GAAA,EAAK,IAAA,CAAK,eAAA,EAAgB,CAAE;AAAA,KAC7B,CAAA;AACD,IAAA,IAAI,GAAA,MAAS,cAAA,GAAiB,GAAA;AAG9B,IAAA,IAAI,OAAA,CAAQ,OAAA,IAAW,OAAA,CAAQ,OAAA,KAAY,uBAAA,EAAyB;AAClE,MAAA,GAAA,CAAI,yBAAyB,OAAA,CAAQ,OAAA;AAAA,IACvC;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEU,WAAA,GAAsB;AAC9B,IAAA,OAAO,iHAAA;AAAA,EACT;AAAA,EAEmB,YAAA,CAAa,MAAqB,MAAA,EAA+B;AAClF,IAAA,IAAI,SAAS,EAAA,EAAI;AACf,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,8CAAA;AAAA,QACT,QAAA,EAAU,YAAA;AAAA,QACV,SAAA,EAAW,KAAA;AAAA,QACX,IAAA,EAAM;AAAA,OACR;AAAA,IACF;AACA,IAAA,IAAI,IAAA,KAAS,IAAI,OAAO,IAAA;AACxB,IAAA,OAAO,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAe,UAAA,GAAoC;AACjD,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,MAAM,OAAA,GAAU,uBAAuB,OAAO,CAAA;AAC9C,IAAA,MAAM,GAAA,GAAM,OAAA,GACR,oBAAA,CAAqB,OAAA,CAAQ,YAAY,OAAA,CAAQ,KAAA,EAAO,EAAE,GAAA,EAAK,OAAA,CAAQ,SAAA,EAAW,CAAA,GAClF,QAAQ,SAAA,CAAU,cAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,eAAA,CAAgB,QAAQ,CAAA;AACzC,IAAA,MAAM,SAAS,MAAM,mBAAA;AAAA,MACnB,QAAA;AAAA,MACA,GAAA;AAAA,MACA,OAAA,EAAS,OAAA,IAAW,OAAA,CAAQ,OAAA,KAAY,uBAAA,GACpC,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAQ,GAC3B;AAAC,KACP;AACA,IAAA,OAAO,MAAA,CAAO,MAAM,MAAA,CAAO,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA,CAAO,MAAA,GAAS,eAAA,CAAgB,QAAQ,CAAA;AAAA,EACzF;AACF;AAMO,IAAM,kBAAA,GAAgD;AAAA,EAC3D,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EAAa,sBAAA,CAAuB,MAAA,EAAQ,IAAA,IAAQ,YAAA;AAAA,EACpD,UAAA,EAAY,CAAA;AAAA,EACZ,YAAA,EAAgB,CAAA,CAAA,MAAA,CAAoB,MAAM,IAAI,CAAA;AAAA,EAC9C,QAAQ,OAAO,MAAA,EAAQ,IAAA,KAAS,IAAI,aAAa,MAAM,CAAA;AAAA,EACvD,UAAA,EAAY,OAAO,QAAA,EAAU,OAAA,KAC3B,IAAI,YAAA,CAAa;AAAA,IACf,GAAA,EAAK,QAAQ,GAAA,EAAI;AAAA,IACjB,SAAA,EAAW,YAAA;AAAA,IACX,GAAG,oBAAA,CAAqB,QAAA,EAAU,OAAO;AAAA,GAC1C,EAAE,UAAA;AACP","file":"chunk-PJP2TOCB.js","sourcesContent":["import type { DriverTarget } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport { getBridgeLogger } from \"../logger.js\";\nimport { fetchProviderModels, getStaticModels, type ModelEntry } from \"../models.js\";\nimport { getProviderPreset } from \"../provider-catalog.js\";\nimport { entryCredentialValue } from \"../provider-materialize/credential-env.js\";\nimport {\n  bindSingleProviderEntry,\n  type EnvDriverSession,\n  type RegistryModelBinding,\n  resolveEnvDriverSession,\n  resolveRegistryBinding,\n} from \"../provider-materialize/env-drivers.js\";\nimport { registryDriverConfig } from \"../provider-registry-derive.js\";\nimport { BUILTIN_DRIVER_CATALOG } from \"../registry.js\";\nimport type { AgentConfig, DriverInfo } from \"../types.js\";\nimport { extractCost, extractText, extractTokens, SubprocessCliDriver } from \"./_subprocess-cli.js\";\n\n/**\n * The Gemini API host the CLI talks to unless told otherwise — the catalog's\n * `google` preset, so the two can never drift apart.\n */\nconst GOOGLE_DEFAULT_BASE_URL = getProviderPreset(\"google\")?.base_url;\n\n/**\n * Shared base for the Gemini-CLI event family. Gemini CLI and Qwen Code (a fork\n * of Gemini CLI) emit the same `stream-json` event shape, so both dispatch the\n * same {@link handleJson}: `init`/`system` → session capture, `message`/\n * `assistant` → streamed assistant text, `tool_use` / `tool_result` → tool\n * events, `result` → tokens + cost.\n *\n * @docLink packages/bridge/drivers#gemini-driver\n */\nexport abstract class GeminiFamilyDriver extends SubprocessCliDriver {\n  protected handleJson(json: any): void {\n    switch (json?.type) {\n      case \"init\":\n      case \"system\":\n        this.captureSession(json.sessionId ?? json.session_id ?? json.id);\n        break;\n\n      case \"message\":\n      case \"assistant\": {\n        const role = json.role ?? json.message?.role ?? \"assistant\";\n        if (role !== \"assistant\") break;\n        const text = extractText(json);\n        if (json.done === true || json.final === true || json.finished === true) {\n          this.pushAssistantEnd(text);\n        } else {\n          this.pushAssistantDelta(text);\n        }\n        break;\n      }\n\n      case \"tool_use\":\n      case \"tool_call\":\n        this.pushToolCall(json.name ?? json.tool ?? \"tool\", json.input ?? json.args ?? {});\n        break;\n\n      case \"tool_result\":\n        this.pushToolResult(\n          json.name ?? json.tool ?? \"tool\",\n          json.result ?? json.output ?? json.content,\n          Boolean(json.is_error ?? json.isError ?? json.error),\n        );\n        break;\n\n      case \"error\":\n        this.pushError(this.classifyMessage(String(json.message ?? json.error ?? \"error\")));\n        break;\n\n      case \"result\":\n        this.captureSession(json.sessionId ?? json.session_id);\n        this.pushResult({\n          tokens: extractTokens(json),\n          costUsd: extractCost(json),\n          summary: extractText(json) || \"Task completed\",\n        });\n        break;\n    }\n  }\n\n  // ── Registry binding ──────────────────────────────────────────────────────\n\n  private providers?: EnvDriverSession;\n  private boundEntry?: RegistryModelBinding;\n  private bindingResolved = false;\n\n  /** This session's AI providers, resolved once from the config. */\n  protected providerSession(): EnvDriverSession {\n    this.providers ??= resolveEnvDriverSession(this.config);\n    return this.providers;\n  }\n\n  /**\n   * The AI provider entry this session's model selector names, memoized until\n   * the model changes.\n   *\n   * Gemini CLI and Qwen Code are `single`-plurality backends (§2.3): they\n   * address one endpoint, so the bound entry supplies both the credential and\n   * the base URL. Resolving through {@link bindSingleProviderEntry} is what\n   * puts the surface check — which throws — on the start path.\n   */\n  protected registryBinding(): RegistryModelBinding | undefined {\n    if (this.bindingResolved) return this.boundEntry;\n    const binding = bindSingleProviderEntry(\n      this.driverInfo.id,\n      this.productName,\n      this.providerSession(),\n    );\n    for (const warning of binding?.warnings ?? []) this.log.warn(warning);\n    this.boundEntry = binding;\n    this.bindingResolved = true;\n    return binding;\n  }\n\n  /**\n   * Fail before the first spawn when the bound entry speaks a surface this\n   * backend cannot — the error names the surface.\n   */\n  override async start(): Promise<void> {\n    this.registryBinding();\n    await super.start();\n  }\n\n  override reconfigure(patch: Partial<Pick<AgentConfig, \"model\" | \"thinking\" | \"effort\">>): void {\n    super.reconfigure(patch);\n    if (patch.model !== undefined) {\n      this.providers = undefined;\n      this.bindingResolved = false;\n    }\n  }\n\n  /** The provider-side model id the backend is actually run with. */\n  override getModel(): string | undefined {\n    return resolveRegistryBinding(this.providerSession())?.providerModelId ?? this.config.model;\n  }\n}\n\n/**\n * Agent driver for the Google **Gemini CLI** (`gemini`).\n *\n * Spawns `gemini -p \"<prompt>\" --output-format stream-json` per turn and maps\n * the stream-json events to the unified {@link AgentEvent} stream. Google\n * models only (`surface: google-generative-ai`): the AI provider entry the\n * session's model selector names supplies `GEMINI_API_KEY`, the `-m` model id\n * and — for a non-default endpoint — `GOOGLE_GEMINI_BASE_URL`.\n *\n * @remarks\n * - **Requires Gemini CLI ≥ v0.6.1** — earlier versions reject\n *   `--output-format`. A too-old CLI surfaces as a `process`-category exit error.\n * - **Session resume is not available in headless (`-p`) mode** — the CLI errors\n *   if asked to resume non-interactively, so this driver runs single-turn per\n *   process and logs a warning when a resume id is present.\n * - Exit codes: `42` → input/validation error, `53` → turn-limit (treated as a\n *   completed turn).\n *\n * @see https://github.com/google-gemini/gemini-cli\n * @docLink packages/bridge/drivers#gemini-driver\n */\nexport class GeminiDriver extends GeminiFamilyDriver {\n  readonly driverInfo: DriverInfo = {\n    id: \"gemini\",\n    name: \"Gemini CLI\",\n    modelAgnostic: false,\n    supportsInBandAbort: false,\n  };\n\n  protected readonly log: Logger = getBridgeLogger(\"gemini\");\n  protected readonly defaultBin = \"gemini\";\n  protected readonly productName = \"Gemini CLI\";\n  protected readonly envPrefix = \"GEMINI\";\n\n  protected buildArgs(message: string, resumeId: string | undefined): string[] {\n    if (resumeId) {\n      this.log.warn(\"Gemini CLI cannot resume in headless mode; starting a fresh turn\", {\n        resumeId,\n      });\n    }\n    const args = [\"-p\", message, \"--output-format\", \"stream-json\"];\n    const model = this.registryBinding()?.providerModelId ?? this.config.model;\n    if (model) args.push(\"-m\", model);\n    return args;\n  }\n\n  protected buildEnv(): Record<string, string> {\n    const env = this.baseEnv([\"GEMINI_API_KEY\", \"GOOGLE_API_KEY\", \"GOOGLE_GEMINI_BASE_URL\"]);\n    const binding = this.registryBinding();\n    if (!binding) return env;\n\n    // The entry is the authority: inherited Google carriers are dropped so an\n    // ambient key cannot authenticate a session pointed somewhere else.\n    delete env.GEMINI_API_KEY;\n    delete env.GOOGLE_API_KEY;\n    delete env.GOOGLE_GEMINI_BASE_URL;\n    const key = entryCredentialValue(binding.providerId, binding.entry, {\n      env: this.providerSession().lookupEnv,\n    });\n    if (key) env.GEMINI_API_KEY = key;\n    // Only a non-default endpoint is worth naming: Gemini CLI reads\n    // GOOGLE_GEMINI_BASE_URL as an override of its own default host.\n    if (binding.baseUrl && binding.baseUrl !== GOOGLE_DEFAULT_BASE_URL) {\n      env.GOOGLE_GEMINI_BASE_URL = binding.baseUrl;\n    }\n    return env;\n  }\n\n  protected installHint(): string {\n    return \"Gemini CLI is not installed or not on your PATH. Install it with `npm i -g @google/gemini-cli` (≥ v0.6.1).\";\n  }\n\n  protected override classifyExit(code: number | null, signal: NodeJS.Signals | null) {\n    if (code === 42) {\n      return {\n        message: \"Gemini CLI reported an input error (exit 42)\",\n        category: \"validation\" as const,\n        retryable: false,\n        hint: \"The prompt or flags were rejected by Gemini CLI. Check the model name and arguments.\",\n      };\n    }\n    if (code === 53) return null; // turn-limit — the result was already emitted.\n    return super.classifyExit(code, signal);\n  }\n\n  /**\n   * Discovery runs against the bound entry: its credential and, for a\n   * non-default endpoint, its base URL. Without an entry the ambient\n   * `GEMINI_API_KEY` is the last resort, and an unreachable API falls back to\n   * the static Google catalog.\n   */\n  override async listModels(): Promise<ModelEntry[]> {\n    const session = this.providerSession();\n    const binding = resolveRegistryBinding(session);\n    const key = binding\n      ? entryCredentialValue(binding.providerId, binding.entry, { env: session.lookupEnv })\n      : session.lookupEnv.GEMINI_API_KEY;\n    if (!key) return getStaticModels(\"google\");\n    const result = await fetchProviderModels(\n      \"google\",\n      key,\n      binding?.baseUrl && binding.baseUrl !== GOOGLE_DEFAULT_BASE_URL\n        ? { baseUrl: binding.baseUrl }\n        : {},\n    );\n    return result.ok && result.models.length > 0 ? result.models : getStaticModels(\"google\");\n  }\n}\n\n/**\n * `DriverTarget` wrapper for the gemini driver. Registered into the plugin\n * registry by `registerBuiltinDrivers()`.\n */\nexport const geminiDriverTarget: DriverTarget<AgentConfig> = {\n  id: \"gemini\",\n  displayName: BUILTIN_DRIVER_CATALOG.gemini?.name ?? \"Gemini CLI\",\n  apiVersion: 1,\n  configSchema: z.custom<AgentConfig>(() => true),\n  create: async (config, _ctx) => new GeminiDriver(config),\n  listModels: async (registry, options) =>\n    new GeminiDriver({\n      cwd: process.cwd(),\n      sessionId: \"model-list\",\n      ...registryDriverConfig(registry, options),\n    }).listModels(),\n};\n"]}
+{"version":3,"sources":["../bridge/src/drivers/gemini.ts"],"names":[],"mappings":";;;;;AAuBA,IAAM,uBAAA,GAA0B,iBAAA,CAAkB,QAAQ,CAAA,EAAG,QAAA;AAWtD,IAAe,kBAAA,GAAf,cAA0C,mBAAA,CAAoB;AAAA,EACzD,WAAW,IAAA,EAAiB;AACpC,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,MAAA;AAAA,MACL,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,eAAe,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAA,IAAc,KAAK,EAAE,CAAA;AAChE,QAAA;AAAA,MAEF,KAAK,SAAA;AAAA,MACL,KAAK,WAAA,EAAa;AAChB,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,SAAS,IAAA,IAAQ,WAAA;AAChD,QAAA,IAAI,SAAS,WAAA,EAAa;AAC1B,QAAA,MAAM,IAAA,GAAO,YAAY,IAAI,CAAA;AAC7B,QAAA,IAAI,IAAA,CAAK,SAAS,IAAA,IAAQ,IAAA,CAAK,UAAU,IAAA,IAAQ,IAAA,CAAK,aAAa,IAAA,EAAM;AACvE,UAAA,IAAA,CAAK,iBAAiB,IAAI,CAAA;AAAA,QAC5B,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,mBAAmB,IAAI,CAAA;AAAA,QAC9B;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,UAAA;AAAA,MACL,KAAK,WAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA,EAAQ,IAAA,CAAK,KAAA,IAAS,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA;AACjF,QAAA;AAAA,MAEF,KAAK,aAAA;AACH,QAAA,IAAA,CAAK,cAAA;AAAA,UACH,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA;AAAA,UAC1B,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,OAAA;AAAA,UACnC,QAAQ,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,OAAA,IAAW,KAAK,KAAK;AAAA,SACrD;AACA,QAAA;AAAA,MAEF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,IAAA,CAAK,KAAA,IAAS,OAAO,CAAC,CAAC,CAAA;AAClF,QAAA;AAAA,MAEF,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAU,CAAA;AACrD,QAAA,IAAA,CAAK,UAAA,CAAW;AAAA,UACd,MAAA,EAAQ,cAAc,IAAI,CAAA;AAAA,UAC1B,OAAA,EAAS,YAAY,IAAI,CAAA;AAAA,UACzB,OAAA,EAAS,WAAA,CAAY,IAAI,CAAA,IAAK;AAAA,SAC/B,CAAA;AACD,QAAA;AAAA;AACJ,EACF;AAAA;AAAA,EAIQ,SAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA,GAAkB,KAAA;AAAA;AAAA,EAGhB,eAAA,GAAoC;AAC5C,IAAA,IAAA,CAAK,SAAA,KAAc,uBAAA,CAAwB,IAAA,CAAK,MAAM,CAAA;AACtD,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWU,eAAA,GAAoD;AAC5D,IAAA,IAAI,IAAA,CAAK,eAAA,EAAiB,OAAO,IAAA,CAAK,UAAA;AACtC,IAAA,MAAM,OAAA,GAAU,uBAAA;AAAA,MACd,KAAK,UAAA,CAAW,EAAA;AAAA,MAChB,IAAA,CAAK,WAAA;AAAA,MACL,KAAK,eAAA;AAAgB,KACvB;AACA,IAAA,KAAA,MAAW,OAAA,IAAW,SAAS,QAAA,IAAY,IAAI,IAAA,CAAK,GAAA,CAAI,KAAK,OAAO,CAAA;AACpE,IAAA,IAAA,CAAK,UAAA,GAAa,OAAA;AAClB,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AACvB,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAe,KAAA,GAAuB;AACpC,IAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,IAAA,MAAM,MAAM,KAAA,EAAM;AAAA,EACpB;AAAA,EAES,YAAY,KAAA,EAA0E;AAC7F,IAAA,KAAA,CAAM,YAAY,KAAK,CAAA;AACvB,IAAA,IAAI,KAAA,CAAM,UAAU,MAAA,EAAW;AAC7B,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA;AACjB,MAAA,IAAA,CAAK,eAAA,GAAkB,KAAA;AAAA,IACzB;AAAA,EACF;AAAA;AAAA,EAGS,QAAA,GAA+B;AACtC,IAAA,OAAO,uBAAuB,IAAA,CAAK,eAAA,EAAiB,CAAA,EAAG,eAAA,IAAmB,KAAK,MAAA,CAAO,KAAA;AAAA,EACxF;AACF;AAuBO,IAAM,YAAA,GAAN,cAA2B,kBAAA,CAAmB;AAAA,EAC1C,UAAA,GAAyB;AAAA,IAChC,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,YAAA;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACvB;AAAA,EAEmB,GAAA,GAAc,gBAAgB,QAAQ,CAAA;AAAA,EACtC,UAAA,GAAa,QAAA;AAAA,EACb,WAAA,GAAc,YAAA;AAAA,EACd,SAAA,GAAY,QAAA;AAAA,EAErB,SAAA,CAAU,SAAiB,QAAA,EAAwC;AAC3E,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAA,CAAK,GAAA,CAAI,KAAK,kEAAA,EAAoE;AAAA,QAChF;AAAA,OACD,CAAA;AAAA,IACH;AACA,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAM,OAAA,EAAS,mBAAmB,aAAa,CAAA;AAC7D,IAAA,MAAM,QAAQ,IAAA,CAAK,eAAA,EAAgB,EAAG,eAAA,IAAmB,KAAK,MAAA,CAAO,KAAA;AACrE,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAChC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,QAAA,GAAmC;AAC3C,IAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAC,gBAAA,EAAkB,gBAAA,EAAkB,wBAAwB,CAAC,CAAA;AACvF,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,IAAI,CAAC,SAAS,OAAO,GAAA;AAIrB,IAAA,OAAO,GAAA,CAAI,cAAA;AACX,IAAA,OAAO,GAAA,CAAI,cAAA;AACX,IAAA,OAAO,GAAA,CAAI,sBAAA;AACX,IAAA,MAAM,GAAA,GAAM,oBAAA,CAAqB,OAAA,CAAQ,UAAA,EAAY,QAAQ,KAAA,EAAO;AAAA,MAClE,GAAA,EAAK,IAAA,CAAK,eAAA,EAAgB,CAAE;AAAA,KAC7B,CAAA;AACD,IAAA,IAAI,GAAA,MAAS,cAAA,GAAiB,GAAA;AAG9B,IAAA,IAAI,OAAA,CAAQ,OAAA,IAAW,OAAA,CAAQ,OAAA,KAAY,uBAAA,EAAyB;AAClE,MAAA,GAAA,CAAI,yBAAyB,OAAA,CAAQ,OAAA;AAAA,IACvC;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEU,WAAA,GAAsB;AAC9B,IAAA,OAAO,iHAAA;AAAA,EACT;AAAA,EAEmB,YAAA,CAAa,MAAqB,MAAA,EAA+B;AAClF,IAAA,IAAI,SAAS,EAAA,EAAI;AACf,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,8CAAA;AAAA,QACT,QAAA,EAAU,YAAA;AAAA,QACV,SAAA,EAAW,KAAA;AAAA,QACX,IAAA,EAAM;AAAA,OACR;AAAA,IACF;AACA,IAAA,IAAI,IAAA,KAAS,IAAI,OAAO,IAAA;AACxB,IAAA,OAAO,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAe,UAAA,GAAoC;AACjD,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,MAAM,OAAA,GAAU,uBAAuB,OAAO,CAAA;AAC9C,IAAA,MAAM,GAAA,GAAM,OAAA,GACR,oBAAA,CAAqB,OAAA,CAAQ,YAAY,OAAA,CAAQ,KAAA,EAAO,EAAE,GAAA,EAAK,OAAA,CAAQ,SAAA,EAAW,CAAA,GAClF,QAAQ,SAAA,CAAU,cAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,eAAA,CAAgB,QAAQ,CAAA;AACzC,IAAA,MAAM,SAAS,MAAM,mBAAA;AAAA,MACnB,QAAA;AAAA,MACA,GAAA;AAAA,MACA,OAAA,EAAS,OAAA,IAAW,OAAA,CAAQ,OAAA,KAAY,uBAAA,GACpC,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAQ,GAC3B;AAAC,KACP;AACA,IAAA,OAAO,MAAA,CAAO,MAAM,MAAA,CAAO,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA,CAAO,MAAA,GAAS,eAAA,CAAgB,QAAQ,CAAA;AAAA,EACzF;AACF;AAMO,IAAM,kBAAA,GAAgD;AAAA,EAC3D,EAAA,EAAI,QAAA;AAAA,EACJ,WAAA,EAAa,sBAAA,CAAuB,MAAA,EAAQ,IAAA,IAAQ,YAAA;AAAA,EACpD,UAAA,EAAY,CAAA;AAAA,EACZ,YAAA,EAAgB,CAAA,CAAA,MAAA,CAAoB,MAAM,IAAI,CAAA;AAAA,EAC9C,QAAQ,OAAO,MAAA,EAAQ,IAAA,KAAS,IAAI,aAAa,MAAM,CAAA;AAAA,EACvD,UAAA,EAAY,OAAO,QAAA,EAAU,OAAA,KAC3B,IAAI,YAAA,CAAa;AAAA,IACf,GAAA,EAAK,QAAQ,GAAA,EAAI;AAAA,IACjB,SAAA,EAAW,YAAA;AAAA,IACX,GAAG,oBAAA,CAAqB,QAAA,EAAU,OAAO;AAAA,GAC1C,EAAE,UAAA;AACP","file":"chunk-NV6R6HJR.js","sourcesContent":["import type { DriverTarget } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport { getBridgeLogger } from \"../logger.js\";\nimport { fetchProviderModels, getStaticModels, type ModelEntry } from \"../models.js\";\nimport { getProviderPreset } from \"../provider-catalog.js\";\nimport { entryCredentialValue } from \"../provider-materialize/credential-env.js\";\nimport {\n  bindSingleProviderEntry,\n  type EnvDriverSession,\n  type RegistryModelBinding,\n  resolveEnvDriverSession,\n  resolveRegistryBinding,\n} from \"../provider-materialize/env-drivers.js\";\nimport { registryDriverConfig } from \"../provider-registry-derive.js\";\nimport { BUILTIN_DRIVER_CATALOG } from \"../registry.js\";\nimport type { AgentConfig, DriverInfo } from \"../types.js\";\nimport { extractCost, extractText, extractTokens, SubprocessCliDriver } from \"./_subprocess-cli.js\";\n\n/**\n * The Gemini API host the CLI talks to unless told otherwise — the catalog's\n * `google` preset, so the two can never drift apart.\n */\nconst GOOGLE_DEFAULT_BASE_URL = getProviderPreset(\"google\")?.base_url;\n\n/**\n * Shared base for the Gemini-CLI event family. Gemini CLI and Qwen Code (a fork\n * of Gemini CLI) emit the same `stream-json` event shape, so both dispatch the\n * same {@link handleJson}: `init`/`system` → session capture, `message`/\n * `assistant` → streamed assistant text, `tool_use` / `tool_result` → tool\n * events, `result` → tokens + cost.\n *\n * @docLink packages/bridge/drivers#gemini-driver\n */\nexport abstract class GeminiFamilyDriver extends SubprocessCliDriver {\n  protected handleJson(json: any): void {\n    switch (json?.type) {\n      case \"init\":\n      case \"system\":\n        this.captureSession(json.sessionId ?? json.session_id ?? json.id);\n        break;\n\n      case \"message\":\n      case \"assistant\": {\n        const role = json.role ?? json.message?.role ?? \"assistant\";\n        if (role !== \"assistant\") break;\n        const text = extractText(json);\n        if (json.done === true || json.final === true || json.finished === true) {\n          this.pushAssistantEnd(text);\n        } else {\n          this.pushAssistantDelta(text);\n        }\n        break;\n      }\n\n      case \"tool_use\":\n      case \"tool_call\":\n        this.pushToolCall(json.name ?? json.tool ?? \"tool\", json.input ?? json.args ?? {});\n        break;\n\n      case \"tool_result\":\n        this.pushToolResult(\n          json.name ?? json.tool ?? \"tool\",\n          json.result ?? json.output ?? json.content,\n          Boolean(json.is_error ?? json.isError ?? json.error),\n        );\n        break;\n\n      case \"error\":\n        this.pushError(this.classifyMessage(String(json.message ?? json.error ?? \"error\")));\n        break;\n\n      case \"result\":\n        this.captureSession(json.sessionId ?? json.session_id);\n        this.pushResult({\n          tokens: extractTokens(json),\n          costUsd: extractCost(json),\n          summary: extractText(json) || \"Task completed\",\n        });\n        break;\n    }\n  }\n\n  // ── Registry binding ──────────────────────────────────────────────────────\n\n  private providers?: EnvDriverSession;\n  private boundEntry?: RegistryModelBinding;\n  private bindingResolved = false;\n\n  /** This session's AI providers, resolved once from the config. */\n  protected providerSession(): EnvDriverSession {\n    this.providers ??= resolveEnvDriverSession(this.config);\n    return this.providers;\n  }\n\n  /**\n   * The AI provider entry this session's model selector names, memoized until\n   * the model changes.\n   *\n   * Gemini CLI and Qwen Code are `single`-plurality backends (§2.3): they\n   * address one endpoint, so the bound entry supplies both the credential and\n   * the base URL. Resolving through {@link bindSingleProviderEntry} is what\n   * puts the surface check — which throws — on the start path.\n   */\n  protected registryBinding(): RegistryModelBinding | undefined {\n    if (this.bindingResolved) return this.boundEntry;\n    const binding = bindSingleProviderEntry(\n      this.driverInfo.id,\n      this.productName,\n      this.providerSession(),\n    );\n    for (const warning of binding?.warnings ?? []) this.log.warn(warning);\n    this.boundEntry = binding;\n    this.bindingResolved = true;\n    return binding;\n  }\n\n  /**\n   * Fail before the first spawn when the bound entry speaks a surface this\n   * backend cannot — the error names the surface.\n   */\n  override async start(): Promise<void> {\n    this.registryBinding();\n    await super.start();\n  }\n\n  override reconfigure(patch: Partial<Pick<AgentConfig, \"model\" | \"thinking\" | \"effort\">>): void {\n    super.reconfigure(patch);\n    if (patch.model !== undefined) {\n      this.providers = undefined;\n      this.bindingResolved = false;\n    }\n  }\n\n  /** The provider-side model id the backend is actually run with. */\n  override getModel(): string | undefined {\n    return resolveRegistryBinding(this.providerSession())?.providerModelId ?? this.config.model;\n  }\n}\n\n/**\n * Agent driver for the Google **Gemini CLI** (`gemini`).\n *\n * Spawns `gemini -p \"<prompt>\" --output-format stream-json` per turn and maps\n * the stream-json events to the unified {@link AgentEvent} stream. Google\n * models only (`surface: google-generative-ai`): the AI provider entry the\n * session's model selector names supplies `GEMINI_API_KEY`, the `-m` model id\n * and — for a non-default endpoint — `GOOGLE_GEMINI_BASE_URL`.\n *\n * @remarks\n * - **Requires Gemini CLI ≥ v0.6.1** — earlier versions reject\n *   `--output-format`. A too-old CLI surfaces as a `process`-category exit error.\n * - **Session resume is not available in headless (`-p`) mode** — the CLI errors\n *   if asked to resume non-interactively, so this driver runs single-turn per\n *   process and logs a warning when a resume id is present.\n * - Exit codes: `42` → input/validation error, `53` → turn-limit (treated as a\n *   completed turn).\n *\n * @see https://github.com/google-gemini/gemini-cli\n * @docLink packages/bridge/drivers#gemini-driver\n */\nexport class GeminiDriver extends GeminiFamilyDriver {\n  readonly driverInfo: DriverInfo = {\n    id: \"gemini\",\n    name: \"Gemini CLI\",\n    modelAgnostic: false,\n    supportsInBandAbort: false,\n  };\n\n  protected readonly log: Logger = getBridgeLogger(\"gemini\");\n  protected readonly defaultBin = \"gemini\";\n  protected readonly productName = \"Gemini CLI\";\n  protected readonly envPrefix = \"GEMINI\";\n\n  protected buildArgs(message: string, resumeId: string | undefined): string[] {\n    if (resumeId) {\n      this.log.warn(\"Gemini CLI cannot resume in headless mode; starting a fresh turn\", {\n        resumeId,\n      });\n    }\n    const args = [\"-p\", message, \"--output-format\", \"stream-json\"];\n    const model = this.registryBinding()?.providerModelId ?? this.config.model;\n    if (model) args.push(\"-m\", model);\n    return args;\n  }\n\n  protected buildEnv(): Record<string, string> {\n    const env = this.baseEnv([\"GEMINI_API_KEY\", \"GOOGLE_API_KEY\", \"GOOGLE_GEMINI_BASE_URL\"]);\n    const binding = this.registryBinding();\n    if (!binding) return env;\n\n    // The entry is the authority: inherited Google carriers are dropped so an\n    // ambient key cannot authenticate a session pointed somewhere else.\n    delete env.GEMINI_API_KEY;\n    delete env.GOOGLE_API_KEY;\n    delete env.GOOGLE_GEMINI_BASE_URL;\n    const key = entryCredentialValue(binding.providerId, binding.entry, {\n      env: this.providerSession().lookupEnv,\n    });\n    if (key) env.GEMINI_API_KEY = key;\n    // Only a non-default endpoint is worth naming: Gemini CLI reads\n    // GOOGLE_GEMINI_BASE_URL as an override of its own default host.\n    if (binding.baseUrl && binding.baseUrl !== GOOGLE_DEFAULT_BASE_URL) {\n      env.GOOGLE_GEMINI_BASE_URL = binding.baseUrl;\n    }\n    return env;\n  }\n\n  protected installHint(): string {\n    return \"Gemini CLI is not installed or not on your PATH. Install it with `npm i -g @google/gemini-cli` (≥ v0.6.1).\";\n  }\n\n  protected override classifyExit(code: number | null, signal: NodeJS.Signals | null) {\n    if (code === 42) {\n      return {\n        message: \"Gemini CLI reported an input error (exit 42)\",\n        category: \"validation\" as const,\n        retryable: false,\n        hint: \"The prompt or flags were rejected by Gemini CLI. Check the model name and arguments.\",\n      };\n    }\n    if (code === 53) return null; // turn-limit — the result was already emitted.\n    return super.classifyExit(code, signal);\n  }\n\n  /**\n   * Discovery runs against the bound entry: its credential and, for a\n   * non-default endpoint, its base URL. Without an entry the ambient\n   * `GEMINI_API_KEY` is the last resort, and an unreachable API falls back to\n   * the static Google catalog.\n   */\n  override async listModels(): Promise<ModelEntry[]> {\n    const session = this.providerSession();\n    const binding = resolveRegistryBinding(session);\n    const key = binding\n      ? entryCredentialValue(binding.providerId, binding.entry, { env: session.lookupEnv })\n      : session.lookupEnv.GEMINI_API_KEY;\n    if (!key) return getStaticModels(\"google\");\n    const result = await fetchProviderModels(\n      \"google\",\n      key,\n      binding?.baseUrl && binding.baseUrl !== GOOGLE_DEFAULT_BASE_URL\n        ? { baseUrl: binding.baseUrl }\n        : {},\n    );\n    return result.ok && result.models.length > 0 ? result.models : getStaticModels(\"google\");\n  }\n}\n\n/**\n * `DriverTarget` wrapper for the gemini driver. Registered into the plugin\n * registry by `registerBuiltinDrivers()`.\n */\nexport const geminiDriverTarget: DriverTarget<AgentConfig> = {\n  id: \"gemini\",\n  displayName: BUILTIN_DRIVER_CATALOG.gemini?.name ?? \"Gemini CLI\",\n  apiVersion: 1,\n  configSchema: z.custom<AgentConfig>(() => true),\n  create: async (config, _ctx) => new GeminiDriver(config),\n  listModels: async (registry, options) =>\n    new GeminiDriver({\n      cwd: process.cwd(),\n      sessionId: \"model-list\",\n      ...registryDriverConfig(registry, options),\n    }).listModels(),\n};\n"]}

package/dist/{chunk-Y5E6LHSQ.js → chunk-NYRLSXTB.js}

@@ -1,16 +1,17 @@
-import { resolveAuthRef } from './chunk-KW7YIRYL.js';
-import { EventNormalizer } from './chunk-GVOPQBGM.js';
-import { resolveModelTier } from './chunk-VP2CACF2.js';
-import { createDriver } from './chunk-C2CYBRYJ.js';
+import { declaredConnectErrorKind, ClassifiedConnectError, withConnectErrorKind } from './chunk-SDNGG6FB.js';
+import { OAuthRequiredError, ConnectorFieldMissingError, LegacyAuthGrammarError, resolveAuthRef, readUnavailableMarker, ConnectorStartupError } from './chunk-DYT3AQBM.js';
+import { EventNormalizer } from './chunk-U4LC6PLI.js';
+import { resolveModelTier } from './chunk-IUVPPJ4T.js';
+import { createDriver } from './chunk-5GYFYGVW.js';
 import { pluginRegistry } from './chunk-6E6PKKAD.js';
 import { computeStimulus } from './chunk-IFGTRL2I.js';
-import { interpolateNodeInstruction, resolveNodeBindings, getConsumedOutputSchema, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-NWZQMJTI.js';
+import { interpolateNodeInstruction, resolveNodeBindings, getConsumedOutputSchema, validateConsumedNodeOutput, appendAttempt, resolveTerminalFailureStatus, remainingActiveExecutionMs, deriveCheckEvidence, computeFlowStateFromSnapshots, availableRouterFrontier, evaluateRouterSelection, routerSelectionOutput, planRouterSkips, unsettledRouterBranchIds, countFailedAttempts, hasAutomaticRetryBudget, persistedRouterSelection } from './chunk-NIHNZC6E.js';
 import { INPUT_SCHEMA_SHAPES_HINT, coerceInputSchema } from './chunk-TIOT3ZOQ.js';
 import { classifierDecision, withoutReservedClassifierFields, parseFlowDefinition } from './chunk-53ORCYPJ.js';
 import { describeStimulus, buildOrchestratorPrompt, renderSubpromptPrompt, renderStimulusPrompt } from './chunk-2D5BYAL6.js';
 import { deterministicNodeKindLabel, nodeInstruction, flowDefaults, isAgentNode, isGateNode, isCheckNode, nodeRequiresApproval, isSubFlowNode, isFunctionNode, isSubpromptNode, isRouterNode, isActiveRuntimeNode, nodeIsOptional, nodeLabel, nodeAssets } from './chunk-ELPR5XBG.js';
-import { withActivityLabelDefs } from './chunk-U4AA7MOV.js';
-import { processAlive } from './chunk-UJPVUN6H.js';
+import { withActivityLabelDefs } from './chunk-QAH24E5U.js';
+import { processAlive } from './chunk-BCXZ74DM.js';
 import { withFsDeadline, tryWithFsDeadline, FsDeadlineError, fsDeadlineMs } from './chunk-MKZOK4JU.js';
 import { portableSpawn } from './chunk-KSIRR5PL.js';
 import { createLogger } from './chunk-W4IPN3DD.js';
@@ -734,6 +735,16 @@ function runIsolatedPrompt(driver, prompt) {
     driver.prompt(prompt).catch(done);
   });
 }
+
+// connectors/src/classify-connect-error.ts
+function classifyConnectError(err) {
+  const declared = declaredConnectErrorKind(err);
+  if (declared) return declared;
+  if (err instanceof OAuthRequiredError) return "credential";
+  if (err instanceof ConnectorFieldMissingError) return "config";
+  if (err instanceof LegacyAuthGrammarError) return "config";
+  return void 0;
+}
 var execFileAsync = promisify(execFile);
 var GIT_REV_PARSE_TIMEOUT_MS = 15e3;
 var DeployConnector = class extends AbstractConnector {
@@ -1663,6 +1674,15 @@ async function clearStaleIndexLock(targetDir, log) {
     log.warn("removed an abandoned .git/index.lock", { lockPath, ageMs });
   }
 }
+function isIndexLockFailure(err) {
+  const stderr = err?.stderr;
+  return typeof stderr === "string" && /index\.lock/.test(stderr);
+}
+function gitLocalCheckout(args, cwd) {
+  return git(["checkout", ...args], cwd).catch((err) => {
+    throw typeof err?.code === "number" ? withConnectErrorKind(err, "repo-state") : err;
+  });
+}
 async function syncSubmodules(cwd, log) {
   if (!await pathExists(join(cwd, ".gitmodules"))) return;
   try {
@@ -1743,6 +1763,8 @@ async function commitAll(cwd, message) {
   return gitCommitting(["commit", "-m", message], cwd);
 }
 var TokenMediatorError = class extends Error {
+  /** Every mediator refusal is fixed where the credential lives, whatever its code. */
+  skaileConnectErrorKind = "credential";
   code;
   constructor(message, code, connectorId) {
     super(`Git connector '${connectorId}': backend mediator ${code} \u2014 ${message}`);
@@ -1804,10 +1826,10 @@ var GitConnector = class extends AbstractConnector {
     let credentialAlignmentAttempted = false;
     if (!url) {
       this.log.error("connect failed: missing mount.source URL", void 0);
-      throw new Error("Git connector requires a mount.source URL");
+      throw new ClassifiedConnectError("Git connector requires a mount.source URL", "config");
     }
     if (!isValidGitRefOrSha(branch)) {
-      throw new Error(`Git connector: invalid branch name "${branch}"`);
+      throw new ClassifiedConnectError(`Git connector: invalid branch name "${branch}"`, "config");
     }
     try {
       this.log.info("mount start", { url, branch, targetDir });
@@ -1888,6 +1910,7 @@ var GitConnector = class extends AbstractConnector {
         }
       }
       this.registerUnavailableCredentialHelper(declaration, credentialScopeUrl, err);
+      if (isIndexLockFailure(err)) withConnectErrorKind(err, "repo-state");
       throw err;
     }
   }
@@ -1976,11 +1999,14 @@ var GitConnector = class extends AbstractConnector {
   async checkoutSessionBranch(state, session, targetDir) {
     const sessionBranch = `${session.branchPrefix}${session.slug}`;
     if (!isValidGitRefOrSha(sessionBranch)) {
-      throw new Error(`Git connector: invalid session branch name "${sessionBranch}"`);
+      throw new ClassifiedConnectError(
+        `Git connector: invalid session branch name "${sessionBranch}"`,
+        "config"
+      );
     }
     let created = false;
     if (await localBranchExists(sessionBranch, targetDir)) {
-      await git(["checkout", sessionBranch], targetDir);
+      await gitLocalCheckout([sessionBranch], targetDir);
       this.log.info("reusing existing local session branch", { sessionBranch });
     } else {
       let originHasBranch = false;
@@ -1990,9 +2016,9 @@ var GitConnector = class extends AbstractConnector {
       } catch {
       }
       if (originHasBranch) {
-        await git(["checkout", "-B", sessionBranch, `origin/${sessionBranch}`], targetDir);
+        await gitLocalCheckout(["-B", sessionBranch, `origin/${sessionBranch}`], targetDir);
       } else if (!await this.branchFromRef(session, sessionBranch, targetDir)) {
-        await git(["checkout", "-b", sessionBranch], targetDir);
+        await gitLocalCheckout(["-b", sessionBranch], targetDir);
         created = true;
       } else {
         created = true;
@@ -2312,8 +2338,9 @@ var GitConnector = class extends AbstractConnector {
     }
     if (authRef.kind === "backend") {
       if (!tokenMediator) {
-        throw new Error(
-          `Connector '${declaration.id}' uses 'auth: backend' but no token mediator is wired (standalone CLI does not have one \u2014 use 'pat:env:NAME' instead).`
+        throw new ClassifiedConnectError(
+          `Connector '${declaration.id}' uses 'auth: backend' but no token mediator is wired (standalone CLI does not have one \u2014 use 'pat:env:NAME' instead).`,
+          "config"
         );
       }
       const result = await tokenMediator({ connectorId: declaration.id, reason: "initial" });
@@ -2342,8 +2369,9 @@ var GitConnector = class extends AbstractConnector {
       token = inner;
     }
     if (!token) {
-      throw new Error(
-        `PAT auth ref '${authRef.raw}' did not resolve to a token. Provision '${authRef.value}' in the SecretProviderChain.`
+      throw new ClassifiedConnectError(
+        `PAT auth ref '${authRef.raw}' did not resolve to a token. Provision '${authRef.value}' in the SecretProviderChain.`,
+        "credential"
       );
     }
     return { authRef, token, expiresAt: null };
@@ -6261,34 +6289,6 @@ function ensureBuiltinsRegistered() {
   }
 }
 
-// connectors/src/connector-types.ts
-var ConnectorFieldMissingError = class extends Error {
-  connectorId;
-  field;
-  triedRef;
-  availableProviders;
-  constructor(opts) {
-    super(
-      `Connector "${opts.connectorId}" is missing required field "${opts.field.key}" (tried: ${opts.triedRef || "(none)"}). Available providers: ${opts.availableProviders.join(", ") || "(none)"}`
-    );
-    this.name = "ConnectorFieldMissingError";
-    this.connectorId = opts.connectorId;
-    this.field = opts.field;
-    this.triedRef = opts.triedRef;
-    this.availableProviders = opts.availableProviders;
-  }
-};
-var ConnectorStartupError = class extends Error {
-  report;
-  failedReadWrite;
-  constructor(message, report, failedReadWrite) {
-    super(message);
-    this.name = "ConnectorStartupError";
-    this.report = report;
-    this.failedReadWrite = failedReadWrite;
-  }
-};
-
 // connectors/src/connector-manager.ts
 var KNOWN_PREFIXES = ["env:", "forge:", "op:", "kp:", "oauth:"];
 function hasKnownPrefix(ref) {
@@ -6491,16 +6491,18 @@ var ConnectorManager = class {
     if (registered) return registered;
     const entry = this.catalogEntries.find((e) => e.kind === "connector" && e.name === driver);
     if (!entry) {
-      throw new Error(
-        `Unknown connector: "${driver}". Run 'skaile search connector' to see available connectors.`
+      throw new ClassifiedConnectError(
+        `Unknown connector: "${driver}". Run 'skaile search connector' to see available connectors.`,
+        "config"
       );
     }
     const entryPoint = entry.metadata?.entry ?? "./connector.ts";
     const connectorPath = resolve(dirname(entry.source), entryPoint);
     const mod = await import(connectorPath);
     if (typeof mod.createConnector !== "function") {
-      throw new Error(
-        `Connector "${driver}" at ${connectorPath} does not export createConnector()`
+      throw new ClassifiedConnectError(
+        `Connector "${driver}" at ${connectorPath} does not export createConnector()`,
+        "config"
       );
     }
     const connector = mod.createConnector();
@@ -6535,8 +6537,9 @@ var ConnectorManager = class {
     const owner = this.mountTargets.get(absPath);
     if (owner === id) return;
     if (owner !== void 0) {
-      throw new Error(
-        `Mount target collision: connectors "${owner}" and "${id}" both resolve to "${absPath}". Each filesystem connector needs a distinct mount.target.`
+      throw new ClassifiedConnectError(
+        `Mount target collision: connectors "${owner}" and "${id}" both resolve to "${absPath}". Each filesystem connector needs a distinct mount.target.`,
+        "config"
       );
     }
     for (const [otherPath, otherId] of this.mountTargets) {
@@ -6556,7 +6559,7 @@ var ConnectorManager = class {
    * Remember a connect failure so the agent can be told about it. Called from
    * both the bulk (`attemptConnect`) and hot-plug (`connect`) failure paths.
    */
-  recordFailure(decl, error) {
+  recordFailure(decl, error, unavailable) {
     if (this.active.has(decl.id)) return;
     let mountPath;
     if (decl.mount != null) {
@@ -6572,9 +6575,29 @@ var ConnectorManager = class {
       ...decl.label !== void 0 ? { label: decl.label } : {},
       ...decl.mount?.source !== void 0 ? { source: decl.mount.source } : {},
       ...mountPath !== void 0 ? { mountPath } : {},
-      required: decl.access === "read-write" && decl.mount != null,
-      error
+      // A host-declared unavailable connector is never fail-fast material.
+      required: unavailable === void 0 && decl.access === "read-write" && decl.mount != null,
+      error,
+      ...unavailable !== void 0 ? { unavailable } : {}
+    });
+  }
+  /**
+   * Record a host-declared unavailable connector as failed without touching its
+   * driver or mount target. Returns the failure message.
+   *
+   * No `connector_status` is emitted: the host that wrote the marker already
+   * holds this failure with its own typed reason, and an echoed event would be
+   * newer than that record and replace it in a host's newest-wins failure view.
+   */
+  recordUnavailable(decl, unavailable) {
+    const msg = `Not attached by the host (${unavailable.reason})` + (unavailable.detail ? `: ${unavailable.detail}` : "");
+    this.recordFailure(decl, msg, unavailable);
+    this.mgrLog.warn("connector declared unavailable by the host", {
+      id: decl.id,
+      driver: decl.driver,
+      reason: unavailable.reason
     });
+    return msg;
   }
   /** Release every mount target owned by `id` (on disconnect). */
   releaseMountTarget(id) {
@@ -6656,7 +6679,7 @@ var ConnectorManager = class {
     const claimed = [];
     try {
       for (const decl of declarations) {
-        if (decl.mount == null) continue;
+        if (decl.mount == null || readUnavailableMarker(decl.unavailable)) continue;
         const absPath = this.resolveMountTarget(decl);
         const isNew = !this.mountTargets.has(absPath);
         this.reserveMountTarget(decl.id, absPath);
@@ -6677,9 +6700,10 @@ var ConnectorManager = class {
     });
     if (options?.failOnReadWriteError) {
       const declById = new Map(declarations.map((d) => [d.id, d]));
-      const failedRw = results.filter(
-        (r) => !r.connected && r.access === "read-write" && declById.get(r.id)?.mount != null
-      ).map((r) => ({ id: r.id, error: r.error ?? "unknown error" }));
+      const failedRw = results.filter((r) => {
+        const decl = declById.get(r.id);
+        return !r.connected && r.access === "read-write" && decl?.mount != null && !readUnavailableMarker(decl.unavailable);
+      }).map((r) => ({ id: r.id, error: r.error ?? "unknown error" }));
       if (failedRw.length > 0) {
         const summary = failedRw.map((f) => `"${f.id}": ${f.error}`).join("; ");
         this.mgrLog.error("connectAll failed: required read-write connector(s) failed", void 0, {
@@ -6700,6 +6724,11 @@ var ConnectorManager = class {
    * can keep going.
    */
   async attemptConnect(decl, preResolved) {
+    const unavailable = readUnavailableMarker(decl.unavailable);
+    if (unavailable) {
+      const msg = this.recordUnavailable(decl, unavailable);
+      return { id: decl.id, connected: false, error: msg, access: decl.access };
+    }
     this.opts.onStatusChange?.({
       type: "connector_status",
       connectorId: decl.id,
@@ -6744,12 +6773,18 @@ var ConnectorManager = class {
       if (!this.active.has(decl.id)) this.releaseMountTarget(decl.id);
       const msg = err instanceof Error ? err.message : String(err);
       this.recordFailure(decl, msg);
-      this.mgrLog.error("connect failed", err, { id: decl.id, driver: decl.driver });
+      const errorKind = classifyConnectError(err);
+      this.mgrLog.error("connect failed", err, {
+        id: decl.id,
+        driver: decl.driver,
+        ...errorKind ? { errorKind } : {}
+      });
       this.opts.onStatusChange?.({
         type: "connector_status",
         connectorId: decl.id,
         status: "error",
-        error: msg
+        error: msg,
+        ...errorKind ? { errorKind } : {}
       });
       return {
         id: decl.id,
@@ -6799,6 +6834,20 @@ var ConnectorManager = class {
    * @returns The `ConnectorHandle` for subsequent operations.
    */
   async connect(declaration) {
+    const unavailable = readUnavailableMarker(declaration.unavailable);
+    if (unavailable) {
+      if (this.active.has(declaration.id)) {
+        try {
+          await this.disconnect(declaration.id);
+        } catch (err) {
+          this.mgrLog.warn("disconnect before marking unavailable failed", {
+            id: declaration.id,
+            error: err instanceof Error ? err.message : String(err)
+          });
+        }
+      }
+      throw new Error(this.recordUnavailable(declaration, unavailable));
+    }
     this.opts.onStatusChange?.({
       type: "connector_status",
       connectorId: declaration.id,
@@ -6834,11 +6883,13 @@ var ConnectorManager = class {
       this.releaseMountTarget(declaration.id);
       const msg = err instanceof Error ? err.message : String(err);
       this.recordFailure(declaration, msg);
+      const errorKind = classifyConnectError(err);
       this.opts.onStatusChange?.({
         type: "connector_status",
         connectorId: declaration.id,
         status: "error",
-        error: msg
+        error: msg,
+        ...errorKind ? { errorKind } : {}
       });
       throw err;
     }
@@ -7565,16 +7616,17 @@ function buildFailedConnectorSection(failed) {
   const lines = [
     "## Mount failures \u2014 read this first",
     "",
-    "The following connectors **failed to connect** in this session. Their directories are ordinary local folders: **not** connected, **not** synced, and **not** backend-managed git worktrees. Any other statement in this prompt \u2014 including the host platform's own description of the workspace \u2014 that describes these paths as a managed, synced, or version-controlled workspace **is superseded by this section**.",
+    "The following connectors **failed to connect** in this session. Their directories, where they exist, are ordinary local folders: **not** connected, **not** synced, and **not** backend-managed git worktrees. Any other statement in this prompt \u2014 including the host platform's own description of the workspace \u2014 that describes these paths as a managed, synced, or version-controlled workspace **is superseded by this section**.",
     "",
     "| Mount | Driver | Path | Access | Required | Failure |",
     "|---|---|---|---|---|---|"
   ];
   for (const f of failed) {
-    const path = f.mountPath ?? f.source ?? "(no mount)";
+    const where = f.mountPath ?? f.source;
+    const path = where === void 0 ? "`(no mount)`" : f.unavailable !== void 0 ? `\`${where}\` (not created by this declaration \u2014 do not write here)` : `\`${where}\``;
     const required = f.required ? "yes" : "no";
     lines.push(
-      `| ${f.id} | ${f.driver} | \`${path}\` | ${f.access} | ${required} | ${oneLine(f.error)} |`
+      `| ${f.id} | ${f.driver} | ${path} | ${f.access} | ${required} | ${oneLine(f.error)} |`
     );
   }
   lines.push("");
@@ -7585,6 +7637,12 @@ function buildFailedConnectorSection(failed) {
   lines.push(
     "**There is nothing to fix inside this workspace.** The credential for a mount is minted by the host platform, not by anything in here and not by any project setting \u2014 there is no credential field to fill in. Report the failure text above verbatim to the user and ask them to reconnect the connector's provider link on the platform, then restart the session. Do not retry the connection yourself; a connector that failed at startup stays failed until the session restarts."
   );
+  if (failed.some((f) => f.unavailable !== void 0)) {
+    lines.push("");
+    lines.push(
+      "**`Not attached by the host`** means the host platform declined the mount before this session started, so no connection was attempted here. The reason and detail are the platform's own: pass them on, since the fix may be the mount's declaration in the platform's settings rather than its credential. Such a mount's directory was **not created by this declaration**, so reading it normally fails with `ENOENT` (a directory left by an earlier, replaced connection may remain). Do not create it or write there: a path inside the primary workspace would put the files into that workspace, where they are synced and committed as if they belonged to it."
+    );
+  }
   if (failed.some((f) => f.driver === "git")) {
     lines.push("");
     lines.push(
@@ -11081,6 +11139,6 @@ function describeFlowOperations() {
   return new FlowAdapter().tools.describeOperations({ access: "read-write" });
 }
 
-export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, ClassifierSubpromptRunner, ConnectorFieldMissingError, ConnectorManager, ConnectorStartupError, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, MAX_REARM_MS, MIN_REFRESH_DELAY_MS, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, REFRESH_LEAD_MS, S3Connector, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, classifierQuestion, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
-//# sourceMappingURL=chunk-Y5E6LHSQ.js.map
-//# sourceMappingURL=chunk-Y5E6LHSQ.js.map
+export { AbstractConnector, BUILTIN_CONNECTOR_CATALOG, BoxConnector, ClassifierSubpromptRunner, ConnectorManager, DeployConnector, DevServerConnector, FlowAdapter, GitConnector, GmailConnector, GoogleDriveConnector, LocalConnector, LogBuffer, MAX_REARM_MS, MIN_REFRESH_DELAY_MS, ManagedGitconfigCollisionError, MattermostConnector, MemoryConnector, MinIOConnector, NO_ACTIVE_FLOW_ERROR, PortPool, PostgresConnector, REFRESH_LEAD_MS, S3Connector, SQLiteConnector, SessionInlineSubFlowRunner, SessionNodeExecutor, SessionSubpromptRunner, SharePointConnector, StaticServerConnector, TunnelConnector, WebDAVConnector, XStateConnector, XStateStoreConnector, __test, atomicReplaceCredential, buildConnectorPromptSection, buildConnectorToolDefs, buildFlowPromptEvent, buildFlowToolDefs, buildLazyFlowToolDefs, buildLazySdkFlowTools, buildSdkConnectorTools, buildSdkFlowTools, classifierQuestion, classifyConnectError, createConnector, createConnector10, createConnector11, createConnector12, createConnector13, createConnector14, createConnector15, createConnector16, createConnector17, createConnector18, createConnector19, createConnector2, createConnector20, createConnector3, createConnector4, createConnector5, createConnector6, createConnector7, createConnector8, createConnector9, createFsWatcher, createWorktree, defaultSpawn, describeFlowOperations, driveOrchestratorTurn, ensureDirMode, ensureFleetMounted, ensureRefreshAttemptStamp, findGitRoot, findMissingPackages, getConnector, installNpmPackages, isFleetManaged, isPackageResolvable, listConnectors, listWorktrees, readGitSyncStatus, registerBuiltinConnectors, removeMountBlock, removeUnavailableMountBlock, renderCredentialHelperScript, tryGetConnector, worktreeRegistry, writeHelperScript, writeMountBlock, writeUnavailableMountBlock };
+//# sourceMappingURL=chunk-NYRLSXTB.js.map
+//# sourceMappingURL=chunk-NYRLSXTB.js.map