@sweny-ai/core 0.1.147 → 0.1.149

package/dist/agent-env.d.ts

@@ -57,6 +57,15 @@ export declare const CODEX_ENV_PREFIXES: readonly string[];
  * Pure: returns a copy.
  */
 export declare function resolveCodexAuthEnv(env: Record<string, string>): Record<string, string>;
+/**
+ * pi's provider credentials (badlogic/pi-mono v0.99.2, docs/providers.md).
+ * sweny has no model opinion, so a pi run may need any provider's key; only
+ * these names (never the rest of the env) reach the pi process. A stored
+ * `auth.json` is not used: pi runs with a scratch `PI_CODING_AGENT_DIR`.
+ */
+export declare const PI_AUTH_VARS: readonly string[];
+/** Prefixes for a pi run: locale only. `ANTHROPIC_*` / `CLAUDE_*` beyond the names above never reach pi. */
+export declare const PI_ENV_PREFIXES: readonly string[];
 /** A stored Codex login (`codex login`): `auth.json` under `CODEX_HOME`, default `~/.codex`. */
 export declare function hasCodexLogin(env?: Record<string, string | undefined>, exists?: (p: string) => boolean): boolean;
 export interface BuildAgentEnvOpts {

package/dist/agent-env.js

@@ -158,6 +158,67 @@ export function resolveCodexAuthEnv(env) {
         out.CODEX_API_KEY = out.OPENAI_API_KEY;
     return out;
 }
+/**
+ * pi's provider credentials (badlogic/pi-mono v0.99.2, docs/providers.md).
+ * sweny has no model opinion, so a pi run may need any provider's key; only
+ * these names (never the rest of the env) reach the pi process. A stored
+ * `auth.json` is not used: pi runs with a scratch `PI_CODING_AGENT_DIR`.
+ */
+export const PI_AUTH_VARS = [
+    "ANTHROPIC_API_KEY",
+    "ANTHROPIC_OAUTH_TOKEN",
+    "ANTHROPIC_AUTH_TOKEN",
+    "OPENAI_API_KEY",
+    "GEMINI_API_KEY",
+    "DEEPSEEK_API_KEY",
+    "MISTRAL_API_KEY",
+    "GROQ_API_KEY",
+    "CEREBRAS_API_KEY",
+    "XAI_API_KEY",
+    "OPENROUTER_API_KEY",
+    "AI_GATEWAY_API_KEY",
+    "ZAI_API_KEY",
+    "ZAI_CODING_CN_API_KEY",
+    "OPENCODE_API_KEY",
+    "RADIUS_API_KEY",
+    "TYPESAFE_API_KEY",
+    "HF_TOKEN",
+    "FIREWORKS_API_KEY",
+    "TOGETHER_API_KEY",
+    "BASETEN_API_KEY",
+    "KIMI_API_KEY",
+    "META_API_KEY",
+    "MINIMAX_API_KEY",
+    "MINIMAX_CN_API_KEY",
+    "MOONSHOT_API_KEY",
+    "NVIDIA_API_KEY",
+    "ANT_LING_API_KEY",
+    "QWEN_TOKEN_PLAN_API_KEY",
+    "QWEN_TOKEN_PLAN_CN_API_KEY",
+    "XIAOMI_API_KEY",
+    "XIAOMI_TOKEN_PLAN_CN_API_KEY",
+    "XIAOMI_TOKEN_PLAN_AMS_API_KEY",
+    "XIAOMI_TOKEN_PLAN_SGP_API_KEY",
+    "COPILOT_GITHUB_TOKEN",
+    "AZURE_OPENAI_API_KEY",
+    "AZURE_OPENAI_BASE_URL",
+    "AZURE_OPENAI_RESOURCE_NAME",
+    "CLOUDFLARE_API_KEY",
+    "CLOUDFLARE_ACCOUNT_ID",
+    "CLOUDFLARE_GATEWAY_ID",
+    "GOOGLE_CLOUD_API_KEY",
+    "GOOGLE_CLOUD_PROJECT",
+    "GCLOUD_PROJECT",
+    "GOOGLE_CLOUD_LOCATION",
+    "AWS_ACCESS_KEY_ID",
+    "AWS_SECRET_ACCESS_KEY",
+    "AWS_SESSION_TOKEN",
+    "AWS_BEARER_TOKEN_BEDROCK",
+    "AWS_REGION",
+    "AWS_DEFAULT_REGION",
+];
+/** Prefixes for a pi run: locale only. `ANTHROPIC_*` / `CLAUDE_*` beyond the names above never reach pi. */
+export const PI_ENV_PREFIXES = ["LC_"];
 /** A stored Codex login (`codex login`): `auth.json` under `CODEX_HOME`, default `~/.codex`. */
 export function hasCodexLogin(env = process.env, exists = existsSync) {
     const home = env.CODEX_HOME || path.join(homedir(), ".codex");

package/dist/cli/config-file.d.ts

@@ -19,4 +19,4 @@ export type FileConfig = Record<string, string | string[] | Record<string, unkno
  */
 export declare function loadConfigFile(cwd?: string): FileConfig;
 /** Starter config written by `sweny new`. */
-export declare const STARTER_CONFIG = "# .sweny.yml \u2014 SWEny project configuration\n# Commit this file. Secrets (API keys, tokens) go in .env (gitignored).\n#\n# Every key matches a CLI flag: \"time-range: 4h\" is the same as \"--time-range 4h\".\n# CLI flags override this file; env vars override this file; this file overrides defaults.\n\n# \u2500\u2500 Providers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# observability-provider: datadog        # datadog | sentry | cloudwatch | splunk | elastic | newrelic | loki | prometheus | pagerduty | heroku | opsgenie | vercel | supabase | netlify | fly | render | file\n# issue-tracker-provider: github-issues  # github-issues | linear | jira\n# source-control-provider: github        # github | gitlab\n# coding-agent-provider: claude          # claude | codex\n# notification-provider: console         # console | slack | teams | discord | email | webhook\n\n# \u2500\u2500 Investigation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# time-range: 24h\n# severity-focus: errors\n# service-filter: \"*\"\n# investigation-depth: standard          # quick | standard | thorough\n\n# \u2500\u2500 PR / branch \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# base-branch: main\n# pr-labels: agent,triage,needs-review\n\n# \u2500\u2500 Paths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# service-map-path: .github/service-map.yml\n# log-file: ./logs/errors.json           # required when observability-provider is \"file\"\n\n# \u2500\u2500 Cache \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# cache-dir: .sweny/cache\n# cache-ttl: 86400\n\n# \u2500\u2500 Run reporting \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Opt-in and not currently available: token minting is not yet exposed, so\n# leaving this unset means no reporting request is ever made.\n# cloud-token: sweny_pk_...\n# Or set SWENY_CLOUD_TOKEN in your environment.\n\n# \u2500\u2500 Agent sandbox \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# See https://docs.sweny.ai/advanced/agent-sandbox/\n# sandbox: off                           # off (local default) | auto (CI default: sandbox if supported, else warn) | strict\n# sandbox-allowed-domains: [internal.example.com]   # extra hosts agent commands may reach\n# env-scope: off                         # off (local default: full env) | on (CI default: allowlist)\n# env-passthrough: [NPM_TOKEN]           # extra env vars the agent may see when scoped (\"*\" = all)\n\n# \u2500\u2500 MCP servers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Extend the coding agent with additional tools via MCP.\n# Value is a JSON object \u2014 each key is a server name you choose.\n# See https://docs.sweny.ai/advanced/mcp-servers/ for a full catalog with copy-paste configs.\n#\n# Example: GitHub MCP server (query PRs, issues, CI run logs)\n# mcp-servers-json: '{\"github\":{\"type\":\"stdio\",\"command\":\"npx\",\"args\":[\"-y\",\"@modelcontextprotocol/server-github@latest\"],\"env\":{\"GITHUB_PERSONAL_ACCESS_TOKEN\":\"ghp_...\"}}}'\n\n# \u2500\u2500 Local-only quick start \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Uncomment to run without any external services (just an LLM API key):\n# observability-provider: file\n# log-file: ./sample-errors.json\n# issue-tracker-provider: file\n# source-control-provider: file\n# notification-provider: file\n# output-dir: .sweny/output\n\n# \u2500\u2500 Credentials (.env) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Copy the relevant block into your .env file and fill in the values.\n#\n# Claude (coding agent) \u2014 https://console.anthropic.com/settings/api-keys\n#   ANTHROPIC_API_KEY=sk-ant-...\n#\n# GitHub (source control + issue tracker)\n#   GITHUB_TOKEN=ghp_...        # https://github.com/settings/tokens (repo + issues scopes)\n#\n# Datadog (observability) \u2014 https://app.datadoghq.com/organization-settings\n#   DD_API_KEY=...              # Organization Settings > API Keys\n#   DD_APP_KEY=...              # Organization Settings > Application Keys\n#   DD_SITE=datadoghq.com       # or datadoghq.eu, us3.datadoghq.com, etc.\n#\n# Sentry (observability) \u2014 https://sentry.io/settings/auth-tokens/\n#   SENTRY_AUTH_TOKEN=sntrys_...\n#   SENTRY_ORG=your-org-slug    # from sentry.io/organizations/<slug>/\n#   SENTRY_PROJECT=your-project # Project Settings > General > Project Slug\n#\n# Linear (issue tracker) \u2014 https://linear.app/settings/api\n#   LINEAR_API_KEY=lin_api_...\n#   LINEAR_TEAM_ID=...          # Settings > Workspace > Teams > [team] > copy ID from URL\n#   LINEAR_BUG_LABEL_ID=...     # Settings > Labels > [label] > copy ID from URL\n#\n# Jira (issue tracker) \u2014 https://your-org.atlassian.net\n#   JIRA_BASE_URL=https://your-org.atlassian.net\n#   JIRA_EMAIL=you@company.com  # your Atlassian account email\n#   JIRA_API_TOKEN=...          # https://id.atlassian.com/manage-profile/security/api-tokens\n#\n# Vercel (observability) \u2014 https://vercel.com/account/tokens\n#   VERCEL_TOKEN=...\n#   VERCEL_PROJECT_ID=prj_...      # Project Settings > General > Project ID\n#   VERCEL_TEAM_ID=team_...        # optional, for team-owned projects\n#\n# Supabase (observability) \u2014 https://supabase.com/dashboard/account/tokens\n#   SUPABASE_MANAGEMENT_KEY=...\n#   SUPABASE_PROJECT_REF=...       # Project Settings > General > Reference ID\n#\n# Netlify (observability) \u2014 https://app.netlify.com/user/applications#personal-access-tokens\n#   NETLIFY_TOKEN=...\n#   NETLIFY_SITE_ID=...         # Site Settings > General > Site ID\n#\n# Fly.io (observability) \u2014 https://fly.io/user/personal_access_tokens\n#   FLY_TOKEN=...\n#   FLY_APP_NAME=...             # the name of your Fly.io application\n#\n# Render (observability) \u2014 https://dashboard.render.com/u/settings\n#   RENDER_API_KEY=...\n#   RENDER_SERVICE_ID=srv-...    # from your service's Settings page\n#\n# Prometheus (observability) \u2014 self-hosted or Grafana Cloud\n#   PROMETHEUS_URL=http://prometheus.internal:9090\n#   PROMETHEUS_TOKEN=...         # optional, for secured instances\n#\n# PagerDuty (observability) \u2014 https://your-account.pagerduty.com/api_keys\n#   PAGERDUTY_API_KEY=...\n#\n# Honeycomb (observability) \u2014 https://docs.honeycomb.io/api/\n#   HONEYCOMB_API_KEY=...\n#   HONEYCOMB_DATASET=...        # dataset name (e.g. production)\n#\n# Heroku (observability) \u2014 https://devcenter.heroku.com/articles/platform-api-reference\n#   HEROKU_API_KEY=...           # https://dashboard.heroku.com/account\n#   HEROKU_APP_NAME=...          # the name of your Heroku application\n#\n# OpsGenie (observability) \u2014 https://support.atlassian.com/opsgenie/docs/api-key-management/\n#   OPSGENIE_API_KEY=...\n#   OPSGENIE_REGION=us           # or eu for EU-hosted accounts\n#\n# Slack (notifications) \u2014 https://api.slack.com/apps\n#   NOTIFICATION_WEBHOOK_URL=https://hooks.slack.com/services/...\n#   # or use a bot token: SLACK_BOT_TOKEN=xoxb-...\n";
+export declare const STARTER_CONFIG = "# .sweny.yml \u2014 SWEny project configuration\n# Commit this file. Secrets (API keys, tokens) go in .env (gitignored).\n#\n# Every key matches a CLI flag: \"time-range: 4h\" is the same as \"--time-range 4h\".\n# CLI flags override this file; env vars override this file; this file overrides defaults.\n\n# \u2500\u2500 Providers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# observability-provider: datadog        # datadog | sentry | cloudwatch | splunk | elastic | newrelic | loki | prometheus | pagerduty | heroku | opsgenie | vercel | supabase | netlify | fly | render | file\n# issue-tracker-provider: github-issues  # github-issues | linear | jira\n# source-control-provider: github        # github | gitlab\n# coding-agent-provider: claude          # claude | codex | pi\n# notification-provider: console         # console | slack | teams | discord | email | webhook\n\n# \u2500\u2500 Investigation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# time-range: 24h\n# severity-focus: errors\n# service-filter: \"*\"\n# investigation-depth: standard          # quick | standard | thorough\n\n# \u2500\u2500 PR / branch \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# base-branch: main\n# pr-labels: agent,triage,needs-review\n\n# \u2500\u2500 Paths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# service-map-path: .github/service-map.yml\n# log-file: ./logs/errors.json           # required when observability-provider is \"file\"\n\n# \u2500\u2500 Cache \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# cache-dir: .sweny/cache\n# cache-ttl: 86400\n\n# \u2500\u2500 Run reporting \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Opt-in and not currently available: token minting is not yet exposed, so\n# leaving this unset means no reporting request is ever made.\n# cloud-token: sweny_pk_...\n# Or set SWENY_CLOUD_TOKEN in your environment.\n\n# \u2500\u2500 Agent sandbox \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# See https://docs.sweny.ai/advanced/agent-sandbox/\n# sandbox: off                           # off (local default) | auto (CI default: sandbox if supported, else warn) | strict\n# sandbox-allowed-domains: [internal.example.com]   # extra hosts agent commands may reach\n# env-scope: off                         # off (local default: full env) | on (CI default: allowlist)\n# env-passthrough: [NPM_TOKEN]           # extra env vars the agent may see when scoped (\"*\" = all)\n\n# \u2500\u2500 MCP servers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Extend the coding agent with additional tools via MCP.\n# Value is a JSON object \u2014 each key is a server name you choose.\n# See https://docs.sweny.ai/advanced/mcp-servers/ for a full catalog with copy-paste configs.\n#\n# Example: GitHub MCP server (query PRs, issues, CI run logs)\n# mcp-servers-json: '{\"github\":{\"type\":\"stdio\",\"command\":\"npx\",\"args\":[\"-y\",\"@modelcontextprotocol/server-github@latest\"],\"env\":{\"GITHUB_PERSONAL_ACCESS_TOKEN\":\"ghp_...\"}}}'\n\n# \u2500\u2500 Local-only quick start \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Uncomment to run without any external services (just an LLM API key):\n# observability-provider: file\n# log-file: ./sample-errors.json\n# issue-tracker-provider: file\n# source-control-provider: file\n# notification-provider: file\n# output-dir: .sweny/output\n\n# \u2500\u2500 Credentials (.env) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Copy the relevant block into your .env file and fill in the values.\n#\n# Claude (coding agent) \u2014 https://console.anthropic.com/settings/api-keys\n#   ANTHROPIC_API_KEY=sk-ant-...\n#\n# GitHub (source control + issue tracker)\n#   GITHUB_TOKEN=ghp_...        # https://github.com/settings/tokens (repo + issues scopes)\n#\n# Datadog (observability) \u2014 https://app.datadoghq.com/organization-settings\n#   DD_API_KEY=...              # Organization Settings > API Keys\n#   DD_APP_KEY=...              # Organization Settings > Application Keys\n#   DD_SITE=datadoghq.com       # or datadoghq.eu, us3.datadoghq.com, etc.\n#\n# Sentry (observability) \u2014 https://sentry.io/settings/auth-tokens/\n#   SENTRY_AUTH_TOKEN=sntrys_...\n#   SENTRY_ORG=your-org-slug    # from sentry.io/organizations/<slug>/\n#   SENTRY_PROJECT=your-project # Project Settings > General > Project Slug\n#\n# Linear (issue tracker) \u2014 https://linear.app/settings/api\n#   LINEAR_API_KEY=lin_api_...\n#   LINEAR_TEAM_ID=...          # Settings > Workspace > Teams > [team] > copy ID from URL\n#   LINEAR_BUG_LABEL_ID=...     # Settings > Labels > [label] > copy ID from URL\n#\n# Jira (issue tracker) \u2014 https://your-org.atlassian.net\n#   JIRA_BASE_URL=https://your-org.atlassian.net\n#   JIRA_EMAIL=you@company.com  # your Atlassian account email\n#   JIRA_API_TOKEN=...          # https://id.atlassian.com/manage-profile/security/api-tokens\n#\n# Vercel (observability) \u2014 https://vercel.com/account/tokens\n#   VERCEL_TOKEN=...\n#   VERCEL_PROJECT_ID=prj_...      # Project Settings > General > Project ID\n#   VERCEL_TEAM_ID=team_...        # optional, for team-owned projects\n#\n# Supabase (observability) \u2014 https://supabase.com/dashboard/account/tokens\n#   SUPABASE_MANAGEMENT_KEY=...\n#   SUPABASE_PROJECT_REF=...       # Project Settings > General > Reference ID\n#\n# Netlify (observability) \u2014 https://app.netlify.com/user/applications#personal-access-tokens\n#   NETLIFY_TOKEN=...\n#   NETLIFY_SITE_ID=...         # Site Settings > General > Site ID\n#\n# Fly.io (observability) \u2014 https://fly.io/user/personal_access_tokens\n#   FLY_TOKEN=...\n#   FLY_APP_NAME=...             # the name of your Fly.io application\n#\n# Render (observability) \u2014 https://dashboard.render.com/u/settings\n#   RENDER_API_KEY=...\n#   RENDER_SERVICE_ID=srv-...    # from your service's Settings page\n#\n# Prometheus (observability) \u2014 self-hosted or Grafana Cloud\n#   PROMETHEUS_URL=http://prometheus.internal:9090\n#   PROMETHEUS_TOKEN=...         # optional, for secured instances\n#\n# PagerDuty (observability) \u2014 https://your-account.pagerduty.com/api_keys\n#   PAGERDUTY_API_KEY=...\n#\n# Honeycomb (observability) \u2014 https://docs.honeycomb.io/api/\n#   HONEYCOMB_API_KEY=...\n#   HONEYCOMB_DATASET=...        # dataset name (e.g. production)\n#\n# Heroku (observability) \u2014 https://devcenter.heroku.com/articles/platform-api-reference\n#   HEROKU_API_KEY=...           # https://dashboard.heroku.com/account\n#   HEROKU_APP_NAME=...          # the name of your Heroku application\n#\n# OpsGenie (observability) \u2014 https://support.atlassian.com/opsgenie/docs/api-key-management/\n#   OPSGENIE_API_KEY=...\n#   OPSGENIE_REGION=us           # or eu for EU-hosted accounts\n#\n# Slack (notifications) \u2014 https://api.slack.com/apps\n#   NOTIFICATION_WEBHOOK_URL=https://hooks.slack.com/services/...\n#   # or use a bot token: SLACK_BOT_TOKEN=xoxb-...\n";

package/dist/cli/config-file.js

@@ -148,7 +148,7 @@ export const STARTER_CONFIG = `# .sweny.yml — SWEny project configuration
 # observability-provider: datadog        # datadog | sentry | cloudwatch | splunk | elastic | newrelic | loki | prometheus | pagerduty | heroku | opsgenie | vercel | supabase | netlify | fly | render | file
 # issue-tracker-provider: github-issues  # github-issues | linear | jira
 # source-control-provider: github        # github | gitlab
-# coding-agent-provider: claude          # claude | codex
+# coding-agent-provider: claude          # claude | codex | pi
 # notification-provider: console         # console | slack | teams | discord | email | webhook
 
 # ── Investigation ────────────────────────────────────────────────────

package/dist/cli/config.js

@@ -1,14 +1,14 @@
 import { execSync } from "node:child_process";
 import * as fs from "node:fs";
 import { hasCodexLogin } from "../agent-env.js";
-import { unsupportedAgentError } from "../harness/agents.js";
+import { parseAcpAgent, unsupportedAgentError } from "../harness/agents.js";
 export function registerTriageCommand(program) {
     // NOTE: File-eligible options omit Commander defaults so parseCliInputs() can
     // distinguish "user passed flag" from "not passed" and fall through to .sweny.yml.
     return program
         .command("triage")
         .description("Run the SWEny triage workflow")
-        .option("--agent <provider>", "Coding agent: claude (default) or codex")
+        .option("--agent <provider>", "Coding agent: claude (default), codex, pi (experimental), or acp:<command> for any ACP agent (experimental)")
         .option("--coding-agent-provider <provider>", "Coding agent provider (alias for --agent)")
         .option("--observability-provider <provider>", "Observability provider (default: none)")
         .option("--issue-tracker-provider <provider>", "Issue tracker provider (default: github-issues)")
@@ -238,7 +238,14 @@ export function validateInputs(config) {
                 errors.push("Missing: CODEX_API_KEY or OPENAI_API_KEY, or a Codex login (`codex login`), for --agent codex");
             }
             break;
+        case "pi":
+            // pi takes any provider's key, or none (a local model in models.json), so
+            // there is no single credential to check here; pi reports its own auth error.
+            break;
         default:
+            // An ACP agent (`acp:<command>`, #416) brings its own auth; it says so itself when it is missing.
+            if (parseAcpAgent(config.codingAgentProvider) !== undefined)
+                break;
             // Honest --agent (#330): only agents with an adapter are accepted.
             // Anything else would silently run a different agent under that name.
             errors.push(unsupportedAgentError(config.codingAgentProvider));
@@ -658,7 +665,7 @@ export function registerImplementCommand(program) {
     return program
         .command("implement <issueId>")
         .description("Implement a fix for a specific issue and open a PR")
-        .option("--agent <provider>", "Coding agent: claude (default) or codex")
+        .option("--agent <provider>", "Coding agent: claude (default), codex, pi (experimental), or acp:<command> for any ACP agent (experimental)")
         .option("--coding-agent-provider <provider>", "Coding agent provider (alias for --agent)")
         .option("--issue-tracker-provider <provider>", "Issue tracker (linear|jira|github-issues|file)")
         .option("--source-control-provider <provider>", "Source control (github|gitlab|file)")

package/dist/cli/run-output.js

@@ -215,7 +215,7 @@ export const WORKFLOW_RUN_OPTIONS = [
         "Write a PR-comment markdown (run receipt, status-colored DAG, per-node table; metadata only) to <path> so any CI can post it",
     ],
     ["--input <json>", "JSON string of input data to pass to the workflow"],
-    ["--agent <id>", "Coding agent that runs the nodes: claude (default) or codex"],
+    ["--agent <id>", "Coding agent that runs the nodes: claude (default), codex, or pi (experimental)"],
     [
         "--harness-policy <mode>",
         "strict: refuse a node whose policy the agent cannot enforce; warn: run it and report what was not enforced (default: strict under GitHub Actions, warn elsewhere; env SWENY_HARNESS_POLICY)",

package/dist/harness/acp-rpc.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Newline-delimited JSON-RPC 2.0 over a child process's stdio: the ACP stdio
+ * transport (agentclientprotocol.com/protocol/v1/transports, schema v1.24.1).
+ *
+ * - The client launches the agent as a subprocess and writes one JSON-RPC
+ *   message per line to its stdin; the agent answers on stdout.
+ * - Messages MUST NOT contain embedded newlines (`JSON.stringify` never emits
+ *   one).
+ * - The agent MAY log on stderr. It MUST NOT write anything but ACP messages
+ *   to stdout; real agents sometimes do, so a stdout line that is not JSON is
+ *   logged and skipped instead of ending the run.
+ *
+ * Hand-rolled on purpose: the wire is four message shapes, so sweny takes no
+ * SDK dependency for it, and the contract fake speaks the raw wire, which means
+ * the suite checks the protocol itself and not an SDK's reading of it.
+ *
+ * No agent SDK imports.
+ */
+import type { ChildProcess } from "node:child_process";
+/** JSON-RPC / ACP error codes (schema `ErrorCode`). */
+export declare const RPC_ERROR: {
+    readonly parse: -32700;
+    readonly invalidRequest: -32600;
+    readonly methodNotFound: -32601;
+    readonly invalidParams: -32602;
+    readonly internal: -32603;
+    readonly requestCancelled: -32800;
+    readonly authRequired: -32000;
+    readonly resourceNotFound: -32002;
+};
+/** An error response from the peer (or a local failure reaching it). */
+export declare class RpcError extends Error {
+    readonly code: number;
+    readonly data?: unknown | undefined;
+    constructor(message: string, code: number, data?: unknown | undefined);
+}
+export interface RpcHandlers {
+    /** A request from the peer. Resolve with the `result`, or throw {@link RpcError} for an error response. */
+    onRequest(method: string, params: unknown): Promise<unknown>;
+    /** A notification from the peer. */
+    onNotification(method: string, params: unknown): void;
+    /** A stdout line that was not a JSON-RPC message (debug only). */
+    onJunk?(line: string): void;
+}
+/**
+ * One JSON-RPC connection. Requests from us are matched to responses by id;
+ * requests from the peer are answered through {@link RpcHandlers.onRequest}.
+ * When the peer goes away every pending request rejects.
+ */
+export declare class RpcPeer {
+    private readonly child;
+    private readonly handlers;
+    private nextId;
+    private pending;
+    private buf;
+    private ended;
+    constructor(child: Pick<ChildProcess, "stdin" | "stdout">, handlers: RpcHandlers);
+    private onData;
+    private onLine;
+    private answer;
+    private write;
+    /** Send a request and wait for its response. */
+    request<T = unknown>(method: string, params: unknown): Promise<T>;
+    /** Send a notification (no response). */
+    notify(method: string, params: unknown): void;
+    /** The peer is gone: reject everything still waiting. Idempotent. */
+    end(reason: string): void;
+}
+/**
+ * Split a command line into argv: whitespace separates words, single and
+ * double quotes group, backslash escapes the next character outside single
+ * quotes. No expansion of any kind (no globbing, no variables, no shell), so
+ * the string after `acp:` can never run anything but the program it names.
+ */
+export declare function splitCommandLine(input: string): string[];

package/dist/harness/acp-rpc.js

@@ -0,0 +1,204 @@
+/**
+ * Newline-delimited JSON-RPC 2.0 over a child process's stdio: the ACP stdio
+ * transport (agentclientprotocol.com/protocol/v1/transports, schema v1.24.1).
+ *
+ * - The client launches the agent as a subprocess and writes one JSON-RPC
+ *   message per line to its stdin; the agent answers on stdout.
+ * - Messages MUST NOT contain embedded newlines (`JSON.stringify` never emits
+ *   one).
+ * - The agent MAY log on stderr. It MUST NOT write anything but ACP messages
+ *   to stdout; real agents sometimes do, so a stdout line that is not JSON is
+ *   logged and skipped instead of ending the run.
+ *
+ * Hand-rolled on purpose: the wire is four message shapes, so sweny takes no
+ * SDK dependency for it, and the contract fake speaks the raw wire, which means
+ * the suite checks the protocol itself and not an SDK's reading of it.
+ *
+ * No agent SDK imports.
+ */
+/** JSON-RPC / ACP error codes (schema `ErrorCode`). */
+export const RPC_ERROR = {
+    parse: -32700,
+    invalidRequest: -32600,
+    methodNotFound: -32601,
+    invalidParams: -32602,
+    internal: -32603,
+    requestCancelled: -32800,
+    authRequired: -32000,
+    resourceNotFound: -32002,
+};
+/** An error response from the peer (or a local failure reaching it). */
+export class RpcError extends Error {
+    code;
+    data;
+    constructor(message, code, data) {
+        super(message);
+        this.code = code;
+        this.data = data;
+        this.name = "RpcError";
+    }
+}
+/**
+ * One JSON-RPC connection. Requests from us are matched to responses by id;
+ * requests from the peer are answered through {@link RpcHandlers.onRequest}.
+ * When the peer goes away every pending request rejects.
+ */
+export class RpcPeer {
+    child;
+    handlers;
+    nextId = 1;
+    pending = new Map();
+    buf = "";
+    ended;
+    constructor(child, handlers) {
+        this.child = child;
+        this.handlers = handlers;
+        child.stdout?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => this.onData(chunk));
+        child.stdin?.on("error", () => {
+            // The agent exited before reading; the exit handling reports why.
+        });
+    }
+    onData(chunk) {
+        this.buf += chunk;
+        let nl;
+        while ((nl = this.buf.indexOf("\n")) !== -1) {
+            const line = this.buf.slice(0, nl);
+            this.buf = this.buf.slice(nl + 1);
+            this.onLine(line);
+        }
+    }
+    onLine(raw) {
+        const line = raw.trim();
+        if (!line)
+            return;
+        let msg;
+        try {
+            const parsed = JSON.parse(line);
+            if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+                throw new Error("not an object");
+            msg = parsed;
+        }
+        catch {
+            this.handlers.onJunk?.(line.length > 200 ? line.slice(0, 199) + "..." : line);
+            return;
+        }
+        const id = msg.id;
+        const hasId = typeof id === "number" || typeof id === "string";
+        if (typeof msg.method === "string") {
+            if (hasId)
+                void this.answer(id, msg.method, msg.params);
+            else
+                this.handlers.onNotification(msg.method, msg.params);
+            return;
+        }
+        if (!hasId)
+            return;
+        const p = this.pending.get(id);
+        if (!p)
+            return;
+        this.pending.delete(id);
+        const err = msg.error;
+        if (err && typeof err === "object") {
+            p.reject(new RpcError(typeof err.message === "string" ? err.message : `${p.method} failed`, typeof err.code === "number" ? err.code : RPC_ERROR.internal, err.data));
+        }
+        else {
+            p.resolve(msg.result);
+        }
+    }
+    async answer(id, method, params) {
+        try {
+            const result = await this.handlers.onRequest(method, params);
+            this.write({ jsonrpc: "2.0", id, result: result ?? null });
+        }
+        catch (err) {
+            const e = err instanceof RpcError
+                ? err
+                : new RpcError(err instanceof Error ? err.message : String(err), RPC_ERROR.internal);
+            this.write({ jsonrpc: "2.0", id, error: { code: e.code, message: e.message } });
+        }
+    }
+    write(msg) {
+        const stdin = this.child.stdin;
+        if (!stdin || stdin.destroyed || !stdin.writable)
+            return;
+        stdin.write(JSON.stringify(msg) + "\n");
+    }
+    /** Send a request and wait for its response. */
+    request(method, params) {
+        if (this.ended !== undefined)
+            return Promise.reject(new RpcError(this.ended, RPC_ERROR.internal));
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            this.pending.set(id, { resolve: (v) => resolve(v), reject, method });
+            this.write({ jsonrpc: "2.0", id, method, params });
+        });
+    }
+    /** Send a notification (no response). */
+    notify(method, params) {
+        if (this.ended !== undefined)
+            return;
+        this.write({ jsonrpc: "2.0", method, params });
+    }
+    /** The peer is gone: reject everything still waiting. Idempotent. */
+    end(reason) {
+        if (this.ended !== undefined)
+            return;
+        this.ended = reason;
+        // A final line without a newline is complete only if it parses.
+        if (this.buf.trim())
+            this.onLine(this.buf);
+        this.buf = "";
+        const pending = [...this.pending.values()];
+        this.pending.clear();
+        for (const p of pending)
+            p.reject(new RpcError(reason, RPC_ERROR.internal));
+    }
+}
+/**
+ * Split a command line into argv: whitespace separates words, single and
+ * double quotes group, backslash escapes the next character outside single
+ * quotes. No expansion of any kind (no globbing, no variables, no shell), so
+ * the string after `acp:` can never run anything but the program it names.
+ */
+export function splitCommandLine(input) {
+    const out = [];
+    let cur = "";
+    let started = false;
+    let quote = null;
+    for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (quote) {
+            if (ch === quote)
+                quote = null;
+            else if (ch === "\\" && quote === '"' && i + 1 < input.length)
+                cur += input[++i];
+            else
+                cur += ch;
+        }
+        else if (ch === '"' || ch === "'") {
+            quote = ch;
+            started = true;
+        }
+        else if (ch === "\\" && i + 1 < input.length) {
+            cur += input[++i];
+            started = true;
+        }
+        else if (/\s/.test(ch)) {
+            if (started) {
+                out.push(cur);
+                cur = "";
+                started = false;
+            }
+        }
+        else {
+            cur += ch;
+            started = true;
+        }
+    }
+    if (quote)
+        throw new Error(`unterminated ${quote} quote in "${input}"`);
+    if (started)
+        out.push(cur);
+    return out;
+}

package/dist/harness/acp.d.ts

@@ -0,0 +1,189 @@
+/**
+ * ACP harness (#416): runs a node on any Agent Client Protocol agent
+ * (`--agent acp:<command>`, for example `acp:opencode acp`,
+ * `acp:hermes acp`, `acp:goose acp`, `acp:gemini --experimental-acp`).
+ *
+ * ACP is the long-tail adapter. It is JSON-RPC 2.0 over the agent's stdio and
+ * carries a prompt and a stream of updates; it does not carry sweny's
+ * opinions. Read from agentclientprotocol/agent-client-protocol at tag
+ * schema-v1.24.1 (`schema/v1/schema.json`, `docs/protocol/v1/*.mdx`):
+ * - transports: newline-delimited JSON over stdio (`transports.mdx`).
+ * - `initialize` negotiates `protocolVersion` (1) and capabilities
+ *   (`initialization.mdx`); `InitializeRequest` / `InitializeResponse`.
+ * - `session/new {cwd, mcpServers}` returns `{sessionId}`; every agent MUST
+ *   support stdio MCP servers, http and sse are optional
+ *   (`session-setup.mdx`, `McpServerStdio`, `McpServerHttp`).
+ * - `session/prompt {sessionId, prompt: ContentBlock[]}` streams
+ *   `session/update` notifications (`agent_message_chunk`, `tool_call`,
+ *   `tool_call_update`, `usage_update`, ...) and ends with
+ *   `{stopReason}`; `PromptResponse` has no other field (`prompt-turn.mdx`).
+ * - `session/cancel` (notification) ends a turn with stopReason `cancelled`
+ *   (`prompt-turn.mdx`, Cancellation); pending permission requests get the
+ *   `cancelled` outcome.
+ * - `session/request_permission {toolCall, options}` is how an agent MAY ask
+ *   before a tool runs; the client picks an option or answers `cancelled`
+ *   (`tool-calls.mdx`, `RequestPermissionResponse`).
+ * - `fs/read_text_file` and `fs/write_text_file` are client methods an agent
+ *   may use only when the client advertised them (`file-system.mdx`).
+ *
+ * Every sweny opinion is enforced by sweny here, refused or reported as
+ * `degraded` by `policyGate` (see ACP_CAPABILITIES for the honest list):
+ * - Structured output: the schema rides in the prompt; sweny parses the last
+ *   JSON object, checks it and asks once more before giving up.
+ * - Tool deny and read-only: best effort through `session/request_permission`
+ *   (denied classes and every non-read tool under `readOnly` are rejected),
+ *   plus a refusal of every `fs/write_text_file`. The protocol has no deny list
+ *   and an agent that does not ask is not stopped, so `policyGate` still
+ *   reports deny and read-only as unenforced; strict refuses the node unless
+ *   the process wrapper provides the read-only mount.
+ * - Sandbox and egress: none in the protocol. The whole agent process runs
+ *   inside the sandbox wrapper (sandbox-wrapper.ts); strict refuses without it.
+ * - Env: sweny spawns the agent with the scoped env (agent-env.ts).
+ * - Skill tools: passed in `session/new` as the stdio MCP server of the tool
+ *   bridge (#414), so the executor still observes every call.
+ * - Turn limit: a watchdog counts tool calls and cancels past the budget.
+ * - Timeout: `session/cancel`, a grace period, then the process is killed.
+ */
+import type { Logger, McpServerConfig, ToolContext } from "../types.js";
+import { type SandboxMode } from "../agent-env.js";
+import type { AgentHarness, HarnessCapabilities, HarnessCompleteRequest, HarnessId, HarnessInfo, HarnessRunRequest, HarnessRunResult, ToolClass } from "./types.js";
+import { ACP_CAPABILITIES } from "./capabilities.js";
+import { type HarnessPolicyMode } from "./policy.js";
+import { type SandboxWrapper } from "./sandbox-wrapper.js";
+export { ACP_CAPABILITIES };
+/** The ACP major version sweny speaks (`InitializeRequest.protocolVersion`). */
+export declare const ACP_PROTOCOL_VERSION = 1;
+export interface AcpHarnessOptions {
+    /**
+     * The agent to run: a command line (`"opencode acp"`, the part after `acp:`)
+     * or an explicit `{command, args}`. Never run through a shell.
+     */
+    acpCommand?: string | {
+        command: string;
+        args: string[];
+    };
+    /** Tool-call budget the watchdog enforces when a node sets no `max_turns` (default: 20). */
+    maxTurns?: number;
+    /** Working directory (default: process.cwd()). */
+    cwd?: string;
+    logger?: Logger;
+    /** Default tool context for standalone usage (not via the executor). */
+    defaultContext?: ToolContext;
+    /** Catalog defaults, overridden by per-run skill servers and explicit mcpServers. */
+    defaultMcpServers?: Record<string, McpServerConfig>;
+    /** Explicit external MCP servers, overriding defaults and per-run skill servers. */
+    mcpServers?: Record<string, McpServerConfig>;
+    /** Extra env var names passed through (see agent-env.ts). Default: `SWENY_ENV_PASSTHROUGH`. */
+    envPassthrough?: string[];
+    /** The agent's own auth env var names, always passed through when scoping (none are assumed). */
+    authVars?: string[];
+    /** Scope the agent env to the allowlist. Default: `SWENY_ENV_SCOPE`, else on in CI. */
+    envScope?: boolean;
+    /** Process sandbox mode. Default: `SWENY_SANDBOX`, else `auto` in CI and `off` locally. */
+    sandbox?: SandboxMode;
+    /** The host's process sandbox wrapper (#360 step 2). `undefined` = detect srt once per process; `null` = none (test seam). */
+    sandboxWrapper?: SandboxWrapper | null;
+    /** `strict` refuses a node with unenforceable opinions. Default: {@link resolveHarnessPolicy}. */
+    policy?: HarnessPolicyMode;
+    /** Hosts the agent itself needs (its model API), allowed through the sandbox wrapper. */
+    egress?: string[];
+    /** Shim command override for the tool bridge (test seam). */
+    toolBridgeShim?: {
+        command: string;
+        args: string[];
+    };
+    /** Grace period between SIGTERM and SIGKILL, and for the agent to exit on its own (default: 2000 ms). */
+    killGraceMs?: number;
+    /** How long the agent gets to answer `session/cancel` before it is killed (default: 5000 ms). */
+    cancelGraceMs?: number;
+    /** How long `initialize` and `session/new` may take (default: 60000 ms). */
+    startupTimeoutMs?: number;
+}
+/** Portable tool classes an ACP tool call can be, from its `kind` (schema `ToolKind`) and name. */
+export declare function classifyAcpTool(kind: string | null | undefined, name: string | null | undefined): {
+    classes: ToolClass[];
+    readOnlySafe: boolean;
+};
+/** Does this tool call name one of sweny's skill tools (they reach the agent as MCP tools of the tool bridge)? */
+export declare function isSkillToolCall(names: readonly (string | null | undefined)[], skillTools: readonly string[]): boolean;
+interface PermissionOption {
+    optionId: string;
+    kind: string;
+}
+/** The permission outcome for an option list: the first option of a wanted kind, else `cancelled`. */
+export declare function pickPermissionOutcome(options: readonly PermissionOption[], allow: boolean): {
+    outcome: "selected";
+    optionId: string;
+} | {
+    outcome: "cancelled";
+};
+/** A loosely typed JSON object, for reading what the agent sends. */
+type Obj = Record<string, any>;
+/** `McpServerConfig` map to the ACP `mcpServers` array (schema `McpServer`). Returns what the agent cannot load too. */
+export declare function toAcpMcpServers(servers: Record<string, McpServerConfig>, agentHttp: boolean): {
+    list: Obj[];
+    unsupported: string[];
+};
+export declare class AcpHarness implements AgentHarness {
+    readonly id: HarnessId;
+    readonly capabilities: HarnessCapabilities;
+    /** Empty on purpose: judges use the agent's own default model. */
+    readonly defaultJudgeModel = "";
+    readonly logger: Logger;
+    private agent;
+    private maxTurns;
+    private cwd;
+    private defaultContext;
+    private mcpServers;
+    private defaultMcpServers;
+    private envPassthrough;
+    private authVars;
+    private envScope;
+    private sandboxMode;
+    private sandboxWrapper;
+    private policyMode;
+    private egress;
+    private toolBridgeShim;
+    private killGraceMs;
+    private cancelGraceMs;
+    private startupTimeoutMs;
+    private agentVersion;
+    constructor(opts?: AcpHarnessOptions);
+    info(): HarnessInfo;
+    /**
+     * Is the agent command there? Deliberately does not start it: it would run
+     * outside the sandbox wrapper. The version comes from `initialize` on the
+     * first run (`agentInfo.version`).
+     */
+    preflight(): Promise<{
+        ok: true;
+        version: string;
+    } | {
+        ok: false;
+        reason: string;
+    }>;
+    /** Env for the agent process: scoped like Claude Code's, with only the auth vars the operator named. */
+    private buildEnv;
+    /** The node policy, with the harness policy mode and the watchdog budget applied. */
+    private compilePolicy;
+    /**
+     * Talk to one agent process from `initialize` to the last `session/prompt`
+     * response, then stop it. Never throws: every failure is on the result.
+     */
+    private converse;
+    /**
+     * Run a node. The gate runs first: in strict mode a node whose opinions an
+     * ACP agent cannot honor is refused before the agent starts. The agent
+     * process runs inside the host's sandbox wrapper (#360 step 2) when the
+     * sandbox mode asks for one and the host has one.
+     */
+    run(req: HarnessRunRequest): Promise<HarnessRunResult>;
+    /** Map one conversation onto a NodeResult with Claude Code's semantics. */
+    private toResult;
+    /**
+     * One completion: a fresh session with no MCP servers, every permission
+     * request rejected, and any tool call over budget. null when it failed
+     * (callers fail closed).
+     */
+    complete(req: HarnessCompleteRequest): Promise<string | null>;
+}