@tangle-network/cli-agent-registry 0.0.0-stage → 0.14.0

package/dist/native-session-contracts-DWFzgoye.mjs

@@ -0,0 +1,1162 @@
+//#region src/harness-cli-versions.ts
+/** The CLI version infra/nix ships for each registered harness. */
+const HARNESS_CLI_VERSIONS = {
+	"claude-code": "2.1.311",
+	codex: "0.164.0",
+	opencode: "1.19.4",
+	pi: "1.4.0",
+	"kimi-code": "1.49.0",
+	"factory-droids": "0.249.0",
+	amp: "0.0.1793044831-ga1b1a0",
+	prime: "0.10.1",
+	hermes: "0.22.4",
+	forge: "2.14.0",
+	openclaw: "2026.10.7",
+	acp: "claude-agent-acp 0.97.0; codex-acp 0.16.0; gemini-cli 0.65.0"
+};
+//#endregion
+//#region src/harness-contracts/session-stores.ts
+const CLAUDE_PROJECTS = {
+	root: ".claude/projects",
+	files: ["*/{id}.jsonl", "*/{id}/subagents/**/*.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "claude-code.projects-jsonl"
+};
+const CODEX_ROLLOUTS = {
+	root: ".codex/sessions",
+	files: ["*/*/*/rollout-*-{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "codex.rollout-jsonl"
+};
+/**
+* Rollouts codex moved out of `sessions/` when a thread was archived: the same
+* transcript, flat under `archived_sessions/`. Without it an archived
+* session is no store's, so no copy, capture or export carries it.
+*/
+const CODEX_ARCHIVED_ROLLOUTS = {
+	root: ".codex/archived_sessions",
+	files: ["rollout-*-{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "codex.rollout-jsonl"
+};
+const GEMINI_CHATS = {
+	root: ".gemini/tmp",
+	files: ["*/chats/session-*{id}*.json"],
+	write: "json-rewrite",
+	shared: false,
+	format: "gemini.chat-json"
+};
+const KIMI_SESSIONS = {
+	root: ".kimi/sessions",
+	files: ["*/{id}/**", "*/{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "kimi.session-dir"
+};
+const HERMES_STATE = {
+	root: ".hermes",
+	files: [
+		"state.db",
+		"state.db-wal",
+		"state.db-shm"
+	],
+	write: "sqlite-wal",
+	shared: true,
+	format: "hermes.state-sqlite"
+};
+//#endregion
+//#region src/harness-contracts/contracts/acp.ts
+var acp_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: `set -eu
+separator=''
+for entry in claude-agent-acp:claude-agent-acp codex-acp:codex-acp gemini-cli:gemini; do
+  package=\${entry%%:*}
+  binary=\${entry#*:}
+  executable=$(readlink -f "$(command -v "$binary")")
+  case "$executable" in /nix/store/*-"$package"-*/bin/"$binary") ;; *) exit 1 ;; esac
+  store=\${executable#/nix/store/}
+  derivation=\${store%%/*}
+  version=\${derivation#*-"$package"-}
+  test -n "$version"
+  printf '%s%s %s' "$separator" "$package" "$version"
+  separator='; '
+done
+printf '\\n'`,
+			kill: ["-f", "[h]ermes.* acp( |$)"]
+		},
+		contract: {
+			version: 1,
+			stores: [
+				CLAUDE_PROJECTS,
+				CODEX_ROLLOUTS,
+				GEMINI_CHATS,
+				KIMI_SESSIONS,
+				HERMES_STATE
+			],
+			identity: {
+				kind: "api-created",
+				call: "acp session/new"
+			},
+			resume: { kind: "api" },
+			forbiddenArgs: [],
+			storeEnv: {},
+			evidence: {
+				servedModel: "session-record",
+				usage: "per-response",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS.acp
+		},
+		defect: {
+			issue: "#10096",
+			reason: "contract is declared per sub-agent; gemini needs a mock dialect"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "OPENCODE_MODEL_API_KEY",
+			model: "TANGLE_ROUTER_MODEL",
+			baseUrl: "TANGLE_ROUTER_BASE_URL",
+			authFiles: "ACP_AUTH_FILES_JSON"
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/amp.ts
+var amp_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "amp --version",
+			kill: ["-x", "amp"]
+		},
+		contract: {
+			version: 1,
+			stores: [{
+				root: ".local/share/amp/threads",
+				files: ["{id}.json"],
+				write: "json-rewrite",
+				shared: false,
+				format: "amp.thread-json"
+			}],
+			identity: {
+				kind: "first-event",
+				event: "thread",
+				deadlineMs: 6e4
+			},
+			resume: {
+				kind: "args",
+				args: [
+					"threads",
+					"continue",
+					"{id}"
+				]
+			},
+			forbiddenArgs: [],
+			storeEnv: { XDG_DATA_HOME: ".local/share" },
+			evidence: {
+				servedModel: "session-record",
+				usage: "per-response",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS.amp
+		},
+		defect: {
+			issue: "#10096",
+			reason: "threads live on ampcode.com; neither a local copy nor a mock-routable model is proven"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "vendor-only",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "AMP_API_KEY",
+			model: "AMP_MODEL_NAME",
+			authMode: "AMP_AUTH_MODE",
+			authFiles: "AMP_AUTH_FILES_JSON"
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/claude-code.ts
+var claude_code_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "claude --version",
+			kill: ["-x", "claude"]
+		},
+		contract: {
+			version: 1,
+			stores: [CLAUDE_PROJECTS],
+			identity: {
+				kind: "pre-minted",
+				args: ["--session-id", "{id}"]
+			},
+			resume: {
+				kind: "args",
+				args: ["--resume", "{id}"]
+			},
+			forbiddenArgs: ["--no-session-persistence", "--fork-session"],
+			storeEnv: { CLAUDE_CONFIG_DIR: ".claude" },
+			evidence: {
+				servedModel: "provider-response",
+				usage: "per-response",
+				endingError: "session-record"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS["claude-code"]
+		},
+		defect: null
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		assertions: [
+			"managed-full-ladder",
+			"operator-model-first",
+			"named-model-exact"
+		],
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "anthropic-messages",
+		envVars: {
+			apiKey: "ANTHROPIC_API_KEY",
+			model: "CLAUDE_CODE_MODEL_NAME",
+			authMode: "CLAUDE_CODE_AUTH_MODE",
+			authFiles: "CLAUDE_CODE_AUTH_FILES_JSON",
+			oauthToken: "CLAUDE_CODE_OAUTH_TOKEN",
+			baseUrl: "ANTHROPIC_BASE_URL"
+		}
+	},
+	lifecycle: {
+		runtime: {},
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/cli-base.ts
+var cli_base_default = {
+	session: {
+		kind: "no-agent",
+		reason: "This backend runs no agent process"
+	},
+	config: {
+		kind: "no-agent",
+		envVars: {},
+		reason: "This backend accepts no model or provider"
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: {
+			kind: "unsupported",
+			reason: "This backend runs no agent turn"
+		},
+		warmClaim: {
+			kind: "unsupported",
+			reason: "This backend runs no agent turn"
+		},
+		parkResume: {
+			kind: "unsupported",
+			reason: "This backend runs no agent turn"
+		},
+		branchChild: {
+			kind: "unsupported",
+			reason: "This backend runs no agent turn"
+		},
+		killResume: {
+			kind: "unsupported",
+			reason: "The backend exposes no resumable native session"
+		}
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/codex.ts
+var codex_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "codex --version",
+			kill: ["-f", "bin/[c]odex( |$)"]
+		},
+		contract: {
+			version: 1,
+			stores: [CODEX_ROLLOUTS, CODEX_ARCHIVED_ROLLOUTS],
+			identity: {
+				kind: "first-event",
+				event: "thread.started",
+				deadlineMs: 3e4
+			},
+			resume: {
+				kind: "args",
+				args: [
+					"exec",
+					"resume",
+					"{id}"
+				]
+			},
+			forbiddenArgs: ["--ephemeral"],
+			storeEnv: { CODEX_HOME: ".codex" },
+			evidence: {
+				servedModel: "turn-context",
+				usage: "cumulative",
+				endingError: "session-record"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS.codex
+		},
+		defect: null
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		assertions: [
+			"managed-full-ladder",
+			"operator-model-first",
+			"named-model-exact",
+			"responses-config-model-id"
+		],
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-responses",
+		envVars: {
+			apiKey: "OPENAI_API_KEY",
+			model: "CODEX_MODEL_NAME",
+			authMode: "CODEX_AUTH_MODE",
+			authFiles: "CODEX_AUTH_FILES_JSON",
+			baseUrl: "OPENAI_BASE_URL"
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/cursor.ts
+var cursor_default = {
+	session: {
+		kind: "unsupported",
+		defect: {
+			issue: "#10096",
+			reason: "runs the Cursor SDK in process; the cloud runtime stores the session remotely and model calls cannot be mocked"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: ["api-key", "api-key-env"],
+		baseUrl: "vendor-only",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "CURSOR_API_KEY",
+			model: "CURSOR_MODEL_NAME"
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: {
+			kind: "unsupported",
+			reason: "The backend exposes no resumable native session"
+		}
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/factory-droids.ts
+var factory_droids_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "droid --version",
+			kill: ["-x", "droid"]
+		},
+		contract: {
+			version: 1,
+			stores: [{
+				root: ".factory/sessions",
+				files: ["*/{id}.jsonl"],
+				write: "jsonl-append",
+				shared: false,
+				format: "factory.session-jsonl"
+			}, {
+				root: ".factory/sessions",
+				files: ["*/{id}.settings.json"],
+				write: "json-rewrite",
+				shared: false,
+				format: "factory.session-jsonl"
+			}],
+			identity: {
+				kind: "first-event",
+				event: "session_id",
+				deadlineMs: 6e4
+			},
+			resume: {
+				kind: "args",
+				args: ["--session-id", "{id}"]
+			},
+			forbiddenArgs: [],
+			storeEnv: {},
+			evidence: {
+				servedModel: "turn-context",
+				usage: "session-total",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS["factory-droids"]
+		},
+		defect: {
+			issue: "#10096",
+			reason: "droid 0.232.0 resumes with --session-id only after it fetches the session from api.factory.ai, and the reader reads no usage, model or ending error from the session; the other checks pass (2026-10-05)"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "FACTORY_API_KEY",
+			model: "FACTORY_DROIDS_MODEL_NAME"
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/forge.ts
+var forge_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "forgecode --version",
+			kill: ["-x", "forgecode"]
+		},
+		contract: {
+			version: 1,
+			stores: [{
+				root: ".forge",
+				files: [
+					".forge.db",
+					".forge.db-wal",
+					".forge.db-shm"
+				],
+				write: "sqlite-wal",
+				shared: true,
+				format: "forge.sqlite"
+			}],
+			identity: {
+				kind: "first-event",
+				event: "conversation",
+				deadlineMs: 6e4
+			},
+			resume: {
+				kind: "args",
+				args: ["--conversation-id", "{id}"]
+			},
+			forbiddenArgs: [],
+			storeEnv: {},
+			evidence: {
+				servedModel: "session-record",
+				usage: "per-response",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS.forge
+		},
+		defect: {
+			issue: "#10096",
+			reason: "needs a SQLite-consistent capture and a .forge.db reader"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "FORGE_API_KEY",
+			model: "FORGE_MODEL_ID",
+			authMode: "FORGE_AUTH_MODE",
+			authFiles: "FORGE_AUTH_FILES_JSON",
+			extras: {
+				FORGE_SESSION__PROVIDER_ID: { parser: "string" },
+				FORGE_SESSION__MODEL_ID: { parser: "string" },
+				FORGE_AGENT_ID: { parser: "string" }
+			}
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/hermes.ts
+var hermes_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "hermes --version",
+			kill: ["-f", "(^|/)[h]ermes( |$)"]
+		},
+		contract: {
+			version: 1,
+			stores: [HERMES_STATE],
+			identity: {
+				kind: "first-event",
+				event: "session_id",
+				deadlineMs: 6e4
+			},
+			resume: {
+				kind: "args",
+				args: ["--resume", "{id}"]
+			},
+			forbiddenArgs: [],
+			storeEnv: { HERMES_HOME: ".hermes" },
+			evidence: {
+				servedModel: "session-record",
+				usage: "session-total",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS.hermes
+		},
+		defect: {
+			issue: "#10096",
+			reason: "HERMES_HOME lives under the workspace, and the session id arrives on stderr after exit"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "HERMES_API_KEY",
+			model: "HERMES_MODEL_NAME",
+			authMode: "HERMES_AUTH_MODE",
+			authFiles: "HERMES_AUTH_FILES_JSON",
+			baseUrl: "HERMES_BASE_URL",
+			extras: { HERMES_INFERENCE_PROVIDER: { parser: "string" } }
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region ../runtime-contracts/dist/harness-warm-transport.js
+/** Set only by the Sandbox API after the OpenCode warm-server rollout decision. */
+const AGENT_INTERNAL_OPENCODE_WARM_SERVER_ENV_VAR = "AGENT_INTERNAL_OPENCODE_WARM_SERVER";
+/**
+* Sidecar switch: after a warm claim, start the first session's OpenCode
+* server before that session's first turn. Effective only with
+* AGENT_INTERNAL_OPENCODE_WARM_SERVER=1. Any value other than "1" is off.
+*/
+const AGENT_INTERNAL_OPENCODE_PREWARM_ENV_VAR = "AGENT_INTERNAL_OPENCODE_PREWARM";
+/** Persistent Kimi wire process and shared create/resume prewarm gates. */
+const AGENT_INTERNAL_KIMI_WARM_SERVER_ENV_VAR = "AGENT_INTERNAL_KIMI_WARM_SERVER";
+/**
+* Per harness, the two switches the Sandbox API sets from its warm-server
+* rollout decision: the long-lived process transport, and prewarm, which
+* starts that process before the turn that uses it and is only meaningful
+* with it. A harness joins the rollout by adding one row; the Sandbox API,
+* the orchestrator's provision guard and its recreate carry all read this
+* table. Values are "1" or "0"; anything else is off.
+*/
+const HARNESS_WARM_TRANSPORT_ENV = {
+	opencode: {
+		warmServer: AGENT_INTERNAL_OPENCODE_WARM_SERVER_ENV_VAR,
+		prewarm: AGENT_INTERNAL_OPENCODE_PREWARM_ENV_VAR
+	},
+	"kimi-code": {
+		warmServer: AGENT_INTERNAL_KIMI_WARM_SERVER_ENV_VAR,
+		prewarm: "AGENT_INTERNAL_KIMI_PREWARM"
+	},
+	"claude-code": {
+		warmServer: "AGENT_INTERNAL_CLAUDE_CODE_WARM_SERVER",
+		prewarm: "AGENT_INTERNAL_CLAUDE_CODE_PREWARM"
+	},
+	codex: {
+		warmServer: "AGENT_INTERNAL_CODEX_WARM_SERVER",
+		prewarm: "AGENT_INTERNAL_CODEX_PREWARM"
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/kimi-code.ts
+var kimi_code_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "kimi --version",
+			kill: ["-f", "^[K]imi Code"]
+		},
+		contract: {
+			version: 1,
+			stores: [KIMI_SESSIONS],
+			identity: {
+				kind: "pre-minted",
+				args: ["--session", "{id}"]
+			},
+			resume: {
+				kind: "args",
+				args: ["--session", "{id}"]
+			},
+			forbiddenArgs: [],
+			storeEnv: {},
+			evidence: {
+				servedModel: "session-record",
+				usage: "per-response",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS["kimi-code"]
+		},
+		defect: {
+			issue: "#10096",
+			reason: "kimi-cli 1.49.0 records no model id, served or requested, in its session files, and the reader reads the ending HTTP 500 as aborted; the other checks pass (2026-10-05)"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		assertions: ["moonshot-provider-lock"],
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "MOONSHOT_API_KEY",
+			model: "KIMI_CODE_MODEL_NAME",
+			authMode: "KIMI_CODE_AUTH_MODE",
+			authFiles: "KIMI_CODE_AUTH_FILES_JSON",
+			extras: { OPENAI_BASE_URL: { parser: "string" } }
+		}
+	},
+	lifecycle: {
+		runtime: { warmRetention: {
+			envVar: AGENT_INTERNAL_KIMI_WARM_SERVER_ENV_VAR,
+			enabledByDefault: false
+		} },
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/nanoclaw.ts
+var nanoclaw_default = {
+	session: {
+		kind: "unsupported",
+		defect: {
+			issue: "#10096",
+			reason: "runs chat.ts against a NanoClaw daemon over a Unix socket: no session id, no resume, and the store belongs to the daemon"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "OPENCODE_MODEL_API_KEY",
+			model: "TANGLE_ROUTER_MODEL",
+			authMode: "NANOCLAW_AUTH_MODE",
+			baseUrl: "TANGLE_ROUTER_BASE_URL",
+			extras: {
+				NANOCLAW_PROJECT_ROOT: { parser: "string" },
+				NANOCLAW_NATIVE_CREDENTIALS: { parser: "string" },
+				OPENCODE_MODEL_PROVIDER: {
+					parser: "string",
+					role: "provider"
+				}
+			}
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: {
+			kind: "unsupported",
+			reason: "The backend exposes no resumable native session"
+		}
+	}
+};
+//#endregion
+//#region src/harness-contracts/contracts/openclaw.ts
+var openclaw_default = {
+	session: {
+		kind: "native",
+		processProbe: {
+			versionCommand: "openclaw --version",
+			kill: ["-f", "[o]penclaw(\\.mjs)?( |$)"]
+		},
+		contract: {
+			version: 1,
+			stores: [{
+				root: ".openclaw/agents",
+				files: ["**/{id}.jsonl"],
+				write: "jsonl-append",
+				shared: false,
+				format: "openclaw.session-jsonl"
+			}],
+			identity: {
+				kind: "first-event",
+				event: "session",
+				deadlineMs: 6e4
+			},
+			resume: {
+				kind: "args",
+				args: ["--session-id", "{id}"]
+			},
+			forbiddenArgs: [],
+			storeEnv: {},
+			evidence: {
+				servedModel: "session-record",
+				usage: "per-response",
+				endingError: "none"
+			},
+			cliVersion: HARNESS_CLI_VERSIONS.openclaw
+		},
+		defect: {
+			issue: "#10096",
+			reason: "config is pinned outside the runtime HOME; store layout unverified"
+		}
+	},
+	config: {
+		kind: "model",
+		providerRequiresModel: true,
+		keySources: [
+			"managed",
+			"api-key",
+			"api-key-env",
+			"cli-auth"
+		],
+		baseUrl: "caller-or-managed",
+		modelWire: "openai-compat",
+		envVars: {
+			apiKey: "OPENCODE_MODEL_API_KEY",
+			model: "TANGLE_ROUTER_MODEL",
+			baseUrl: "TANGLE_ROUTER_BASE_URL",
+			authMode: "OPENCLAW_AUTH_MODE",
+			authFiles: "OPENCLAW_AUTH_FILES_JSON"
+		}
+	},
+	lifecycle: {
+		runtime: void 0,
+		coldCreate: { kind: "required" },
+		warmClaim: { kind: "required" },
+		parkResume: { kind: "required" },
+		branchChild: { kind: "required" },
+		killResume: { kind: "required" }
+	}
+};
+//#endregion
+//#region src/harness-contracts/index.ts
+const HARNESSES = {
+	"claude-code": claude_code_default,
+	codex: codex_default,
+	opencode: {
+		session: {
+			kind: "native",
+			processProbe: {
+				versionCommand: "opencode --version",
+				kill: ["-x", "opencode"]
+			},
+			contract: {
+				version: 1,
+				stores: [{
+					root: ".local/share/opencode",
+					files: [
+						"opencode.db",
+						"opencode.db-wal",
+						"opencode.db-shm"
+					],
+					write: "sqlite-wal",
+					shared: true,
+					format: "opencode.sqlite"
+				}],
+				identity: {
+					kind: "first-event",
+					event: "sessionID",
+					deadlineMs: 3e5
+				},
+				resume: {
+					kind: "args",
+					args: ["--session", "{id}"]
+				},
+				forbiddenArgs: [],
+				storeEnv: { XDG_DATA_HOME: ".local/share" },
+				evidence: {
+					servedModel: "turn-context",
+					usage: "per-response",
+					endingError: "session-record"
+				},
+				cliVersion: HARNESS_CLI_VERSIONS.opencode
+			},
+			defect: null
+		},
+		config: {
+			kind: "model",
+			providerRequiresModel: true,
+			keySources: [
+				"managed",
+				"api-key",
+				"api-key-env"
+			],
+			baseUrl: "caller-or-managed",
+			modelWire: "openai-compat",
+			envVars: {
+				apiKey: "OPENCODE_MODEL_API_KEY",
+				model: "OPENCODE_MODEL_NAME",
+				baseUrl: "OPENCODE_MODEL_BASE_URL",
+				extras: {
+					OPENCODE_MODEL_PROVIDER: {
+						parser: "string",
+						role: "provider"
+					},
+					OPENCODE_MODEL_MODE: {
+						parser: "string",
+						role: "mode"
+					}
+				}
+			}
+		},
+		lifecycle: {
+			runtime: {
+				redactsHostEnv: true,
+				supportsToolDisabledTurns: true
+			},
+			coldCreate: { kind: "required" },
+			warmClaim: { kind: "required" },
+			parkResume: { kind: "required" },
+			branchChild: { kind: "required" },
+			killResume: { kind: "required" }
+		}
+	},
+	pi: {
+		session: {
+			kind: "native",
+			processProbe: {
+				versionCommand: "pi --version",
+				kill: ["-x", "pi"]
+			},
+			contract: {
+				version: 1,
+				stores: [{
+					root: ".pi/agent/sessions",
+					files: ["**/*_{id}.jsonl"],
+					write: "jsonl-append",
+					shared: false,
+					format: "pi.session-jsonl"
+				}],
+				identity: {
+					kind: "pre-minted",
+					args: ["--session-id", "{id}"]
+				},
+				resume: {
+					kind: "args",
+					args: ["--session", "{id}"]
+				},
+				forbiddenArgs: [
+					"--no-session",
+					"--fork",
+					"--continue"
+				],
+				storeEnv: {
+					PI_CODING_AGENT_DIR: ".pi/agent",
+					PI_CODING_AGENT_SESSION_DIR: ".pi/agent/sessions",
+					"--session-dir": ".pi/agent/sessions"
+				},
+				evidence: {
+					servedModel: "session-record",
+					usage: "per-response",
+					endingError: "session-record"
+				},
+				cliVersion: HARNESS_CLI_VERSIONS.pi
+			},
+			defect: null
+		},
+		config: {
+			kind: "model",
+			providerRequiresModel: true,
+			keySources: [
+				"managed",
+				"api-key",
+				"api-key-env",
+				"cli-auth"
+			],
+			baseUrl: "caller-or-managed",
+			modelWire: "openai-compat",
+			envVars: {
+				apiKey: "OPENCODE_MODEL_API_KEY",
+				model: "TANGLE_ROUTER_MODEL",
+				baseUrl: "TANGLE_ROUTER_BASE_URL"
+			}
+		},
+		lifecycle: {
+			runtime: {},
+			coldCreate: { kind: "required" },
+			warmClaim: { kind: "required" },
+			parkResume: { kind: "required" },
+			branchChild: { kind: "required" },
+			killResume: { kind: "required" }
+		}
+	},
+	"kimi-code": kimi_code_default,
+	"factory-droids": factory_droids_default,
+	amp: amp_default,
+	prime: {
+		session: {
+			kind: "native",
+			processProbe: {
+				versionCommand: "prime-agent --version",
+				kill: ["-f", "[p]rime-agent"]
+			},
+			contract: {
+				version: 1,
+				stores: [{
+					root: ".prime-provider/prime-agent-dirs",
+					files: ["**/*_{id}.jsonl"],
+					write: "jsonl-append",
+					shared: false,
+					format: "prime.session-jsonl"
+				}],
+				identity: {
+					kind: "api-created",
+					call: "acp session/new"
+				},
+				resume: { kind: "api" },
+				forbiddenArgs: ["--no-session"],
+				storeEnv: {},
+				evidence: {
+					servedModel: "session-record",
+					usage: "per-response",
+					endingError: "session-record"
+				},
+				cliVersion: HARNESS_CLI_VERSIONS.prime
+			},
+			defect: {
+				issue: "#10096",
+				reason: "no conformance receipt for the runtime-HOME agent dir yet"
+			}
+		},
+		config: {
+			kind: "model",
+			providerRequiresModel: true,
+			keySources: [
+				"managed",
+				"api-key",
+				"api-key-env"
+			],
+			baseUrl: "caller-or-managed",
+			modelWire: "openai-compat",
+			envVars: {
+				apiKey: "OPENCODE_MODEL_API_KEY",
+				model: "TANGLE_ROUTER_MODEL",
+				baseUrl: "TANGLE_ROUTER_BASE_URL"
+			}
+		},
+		lifecycle: {
+			runtime: void 0,
+			coldCreate: { kind: "required" },
+			warmClaim: { kind: "required" },
+			parkResume: { kind: "required" },
+			branchChild: { kind: "required" },
+			killResume: { kind: "required" }
+		}
+	},
+	hermes: hermes_default,
+	forge: forge_default,
+	openclaw: openclaw_default,
+	nanoclaw: nanoclaw_default,
+	acp: acp_default,
+	cursor: cursor_default,
+	"cli-base": cli_base_default
+};
+//#endregion
+//#region src/native-session-contracts.ts
+/**
+* The native session projection of the per-harness declarations in harness-contracts/. Each entry is
+* proven by a conformance receipt (tests/harness/receipts) for
+* its pinned CLI version, or is listed in HARNESS_CONFORMANCE_PENDING.
+*
+* CLI versions are the pins in infra/nix (agent-clis.json and flake.nix),
+* generated into harness-cli-versions.ts by the bump. The registry test
+* tests/harness-session-contract.test.ts fails when a pin, a contract or an
+* adapter's source moves without a new receipt.
+*/
+const NATIVE_SESSION_CONTRACTS = {
+	"claude-code": HARNESSES["claude-code"].session.contract,
+	codex: HARNESSES["codex"].session.contract,
+	opencode: HARNESSES["opencode"].session.contract,
+	pi: HARNESSES["pi"].session.contract,
+	"kimi-code": HARNESSES["kimi-code"].session.contract,
+	"factory-droids": HARNESSES["factory-droids"].session.contract,
+	amp: HARNESSES["amp"].session.contract,
+	prime: HARNESSES["prime"].session.contract,
+	hermes: HARNESSES["hermes"].session.contract,
+	forge: HARNESSES["forge"].session.contract,
+	openclaw: HARNESSES["openclaw"].session.contract,
+	acp: HARNESSES["acp"].session.contract
+};
+const HOME_KEYED_RUNTIMES = new Set(["opencode"]);
+/**
+* The child environment of a harness whose contract can move every native
+* store off HOME, or undefined when it cannot.
+*
+* HOME becomes the shared agent home, so toolchains and repos the agent puts
+* under ~ persist across sessions and restarts. Each declared store env and
+* the XDG roots stay in the private runtime home, so credentials, config and
+* session records do not collide between sessions. A harness whose contract
+* declares no store env (kimi-code, factory-droids, forge, openclaw, acp,
+* prime) writes credentials straight under HOME and keeps the private HOME.
+* So does OpenCode: its warm-server pool, spare adoption, plugin dependencies
+* and correlation file all use HOME as the session's runtime identity, and a
+* shared HOME would merge those identities across sessions.
+*/
+function configDirHomeEnv(harness, runtimeHome, agentHome) {
+	const contract = NATIVE_SESSION_CONTRACTS[harness];
+	const stores = Object.entries(contract?.storeEnv ?? {}).filter(([name]) => !name.startsWith("--"));
+	if (stores.length === 0 || HOME_KEYED_RUNTIMES.has(harness)) return void 0;
+	const home = runtimeHome.replace(/\/+$/u, "");
+	return {
+		HOME: agentHome,
+		XDG_CONFIG_HOME: `${home}/.config`,
+		XDG_CACHE_HOME: `${home}/.cache`,
+		XDG_DATA_HOME: `${home}/.local/share`,
+		XDG_STATE_HOME: `${home}/.local/state`,
+		...Object.fromEntries(stores.map(([name, relative]) => [name, `${home}/${relative}`]))
+	};
+}
+/**
+* Harnesses whose declared contract has no conformance receipt yet, with
+* the reason. They keep running with persistence-disabling flags refused,
+* but the store-location and identity-deadline checks wait for their
+* receipt. This list may only shrink: tests/harness-session-contract.test.ts
+* fails on a new entry, and on an entry whose receipt now passes.
+*/
+const HARNESS_CONFORMANCE_PENDING = {
+	"kimi-code": HARNESSES["kimi-code"].session.defect.reason,
+	"factory-droids": HARNESSES["factory-droids"].session.defect.reason,
+	amp: HARNESSES["amp"].session.defect.reason,
+	prime: HARNESSES["prime"].session.defect.reason,
+	hermes: HARNESSES["hermes"].session.defect.reason,
+	forge: HARNESSES["forge"].session.defect.reason,
+	openclaw: HARNESSES["openclaw"].session.defect.reason,
+	acp: HARNESSES["acp"].session.defect.reason
+};
+/**
+* Harnesses that cannot meet the contract at all. They stay listed until
+* their product surfaces (sandbox web launch list, CLI connect, SDK
+* placement) drop them, and no capture claims their sessions.
+*/
+const HARNESS_SESSION_UNSUPPORTED = {
+	nanoclaw: HARNESSES["nanoclaw"].session.defect.reason,
+	cursor: HARNESSES["cursor"].session.defect.reason
+};
+//#endregion
+export { HARNESSES as a, configDirHomeEnv as i, HARNESS_SESSION_UNSUPPORTED as n, HARNESS_WARM_TRANSPORT_ENV as o, NATIVE_SESSION_CONTRACTS as r, HARNESS_CONFORMANCE_PENDING as t };
+
+//# sourceMappingURL=native-session-contracts-DWFzgoye.mjs.map