@the-open-engine/zeroshot 6.17.0 → 6.19.0

package/src/agent-cli-provider/adapters/gemini.ts

@@ -1,3 +1,9 @@
+import { randomUUID } from 'node:crypto';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+
+import { UnsupportedProviderCapabilityError } from '../errors';
 import { appendJsonSchemaPrompt } from '../schema';
 import {
   getOrStringFromKeys,
@@ -16,7 +22,7 @@ import {
   type ModelCatalogEntry,
   type ModelLevel,
   type OutputEvent,
-  type ProviderAdapter,
+  type StructuredOutputRecoveryAdapter,
   type ProviderParserState,
   type ResolvedModelSpec,
   type WarningMetadata,
@@ -52,6 +58,7 @@ function detectCliFeatures(helpText?: string | null): GeminiCliFeatures {
     supportsAutoApprove: unknown ? true : /--yolo\b/.test(help),
     supportsCwd: unknown ? true : /--cwd\b/.test(help),
     supportsModel: unknown ? true : /\s-m\b/.test(help) || /--model\b/.test(help),
+    supportsAdminPolicy: !unknown && /--admin-policy\b/.test(help),
     unknown,
   };
 }
@@ -109,6 +116,75 @@ function buildCommand(context: string, options: BuildProviderCommandOptions = {}
   });
 }
 
+function standardAdminPolicyDirectory(): string {
+  if (process.platform === 'darwin') {
+    return '/Library/Application Support/GeminiCli/policies';
+  }
+  if (process.platform === 'win32') {
+    return path.join(process.env.ProgramData || 'C:\\ProgramData', 'gemini-cli', 'policies');
+  }
+  return '/etc/gemini-cli/policies';
+}
+
+function assertSupplementalAdminPolicyEffective(): void {
+  const directory = standardAdminPolicyDirectory();
+  let entries: fs.Dirent[];
+  try {
+    entries = fs.readdirSync(directory, { withFileTypes: true });
+  } catch (error) {
+    if (isRecord(error) && error.code === 'ENOENT') return;
+    throw new UnsupportedProviderCapabilityError(
+      'gemini',
+      'structuredOutputRecovery',
+      `Gemini structured-output recovery cannot inspect the standard admin-policy directory ${directory}; refuse a supplemental policy that may be ignored.`
+    );
+  }
+  if (!entries.some((entry) => entry.isFile() && entry.name.endsWith('.toml'))) return;
+  throw new UnsupportedProviderCapabilityError(
+    'gemini',
+    'structuredOutputRecovery',
+    `Gemini ignores --admin-policy when ${directory} contains TOML policies. Remove the conflict or use an administrator-managed deny-all policy before retrying.`
+  );
+}
+
+function writeRecoveryAdminPolicy(): string {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'zeroshot-gemini-policy-'));
+  const policyPath = path.join(directory, `${randomUUID()}.toml`);
+  fs.writeFileSync(policyPath, '[[rule]]\ntoolName = "*"\ndecision = "deny"\npriority = 999\n', {
+    flag: 'wx',
+    mode: 0o600,
+  });
+  return policyPath;
+}
+
+function buildStructuredOutputRecoveryCommand(
+  context: string,
+  options: BuildProviderCommandOptions = {}
+): CommandSpec {
+  if (optionFeatures(options).supportsAdminPolicy !== true) {
+    throw new UnsupportedProviderCapabilityError(
+      'gemini',
+      'structuredOutputRecovery',
+      'Gemini structured-output recovery requires CLI evidence for --admin-policy. Upgrade @google/gemini-cli before retrying.'
+    );
+  }
+  assertSupplementalAdminPolicyEffective();
+  const recoveryOptions = { ...options };
+  delete recoveryOptions.resumeSessionId;
+  delete recoveryOptions.continueSession;
+  const spec = buildCommand(context, { ...recoveryOptions, autoApprove: false });
+  const policyPath = writeRecoveryAdminPolicy();
+  return {
+    ...spec,
+    args: ['--admin-policy', policyPath, ...spec.args],
+    cleanup: [...(spec.cleanup || []), policyPath],
+    cleanupMetadata: [
+      ...spec.cleanupMetadata,
+      { kind: 'temp-file', provider: 'gemini', path: policyPath, reason: 'admin-policy' },
+    ],
+  };
+}
+
 function normalizeMessageContent(content: unknown): string {
   if (typeof content === 'string') return content;
   if (Array.isArray(content)) {
@@ -148,6 +224,11 @@ function parseToolUseEvent(
   };
 }
 
+function geminiErrorMessage(event: Record<string, unknown>, fallback: string): string {
+  const error = isRecord(event.error) ? event.error : null;
+  return (error && getString(error, 'message')) || getString(event, 'message') || fallback;
+}
+
 function parseToolResultEvent(
   event: Record<string, unknown>,
   state: ProviderParserState
@@ -157,20 +238,32 @@ function parseToolResultEvent(
     ['tool_call_id', 'tool_id', 'id'],
     state.lastToolId
   );
+  const isError = getString(event, 'status') === 'error';
   return {
     type: 'tool_result',
     toolId,
-    content: event.output ?? event.content ?? '',
-    isError: event.success === false,
+    content: event.output ?? (isError ? geminiErrorMessage(event, 'Tool failed') : ''),
+    isError,
   };
 }
 
 function parseResultEvent(event: Record<string, unknown>): OutputEvent {
+  const success = getString(event, 'status') === 'success';
   return {
     type: 'result',
-    success: event.success !== false,
+    success,
     result: event.result || '',
-    error: event.success === false ? (getString(event, 'error') ?? 'Result failed') : null,
+    error: success ? null : geminiErrorMessage(event, 'Result failed'),
+  };
+}
+
+function parseErrorEvent(event: Record<string, unknown>): OutputEvent | null {
+  if (getString(event, 'severity') !== 'error') return null;
+  return {
+    type: 'result',
+    success: false,
+    result: '',
+    error: getString(event, 'message') || 'Gemini CLI error',
   };
 }
 
@@ -189,6 +282,8 @@ function parseEvent(line: string, state: ProviderParserState): OutputEvent | nul
       return parseToolResultEvent(event, state);
     case 'result':
       return parseResultEvent(event);
+    case 'error':
+      return parseErrorEvent(event);
     default:
       return null;
   }
@@ -229,7 +324,7 @@ function classifyError(error: unknown): ErrorClassification {
   );
 }
 
-export const geminiAdapter: ProviderAdapter = {
+export const geminiAdapter: StructuredOutputRecoveryAdapter = {
   id: 'gemini',
   displayName: 'Gemini',
   binary: 'gemini',
@@ -242,6 +337,7 @@ export const geminiAdapter: ProviderAdapter = {
   defaultMinLevel: 'level1',
   detectCliFeatures,
   buildCommand,
+  buildStructuredOutputRecoveryCommand,
   parseEvent,
   createParserState: () => createParserState('gemini'),
   resolveModelSpec,

package/src/agent-cli-provider/adapters/opencode.ts

@@ -1,4 +1,8 @@
 import { contractError } from '../contract-errors';
+import { randomUUID } from 'node:crypto';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
 import { UnsupportedProviderCapabilityError } from '../errors';
 import { appendJsonSchemaPrompt } from '../schema';
 import {
@@ -15,7 +19,7 @@ import {
   type ErrorClassification,
   type OpencodeCliFeatures,
   type OutputEvent,
-  type ProviderAdapter,
+  type StructuredOutputRecoveryAdapter,
   type WarningMetadata,
 } from '../types';
 import {
@@ -49,7 +53,9 @@ function detectCliFeatures(
     supportsCwd: unknown ? false : /--cwd\b/.test(help),
     supportsAutoApprove: false,
     supportsResume: !unknown && /--session\b/.test(help) && /--continue\b/.test(help),
+    supportsAgent: !unknown && /--agent\b/.test(help),
     supportsWebSearch: isCliVersionAtLeast(versionText, '1.0.137'),
+    supportsRecoveryIsolation: isCliVersionAtLeast(versionText, '1.17.20'),
     unknown,
   };
 }
@@ -162,6 +168,82 @@ function buildCommand(context: string, options: BuildProviderCommandOptions = {}
   });
 }
 
+function buildStructuredOutputRecoveryCommand(
+  context: string,
+  options: BuildProviderCommandOptions = {}
+): CommandSpec {
+  const features = optionFeatures(options);
+  if (features.supportsAgent !== true || features.supportsRecoveryIsolation !== true) {
+    throw new UnsupportedProviderCapabilityError(
+      'opencode',
+      'structuredOutputRecovery',
+      'OpenCode structured-output recovery requires CLI evidence for --agent and isolation controls available in OpenCode >= 1.17.20. Upgrade OpenCode before retrying.'
+    );
+  }
+  const agentName = `zeroshot-output-reformatter-${randomUUID()}`;
+  const profile = {
+    description: 'Convert supplied text to schema-valid JSON without external actions',
+    mode: 'primary',
+    permission: { '*': 'deny' },
+    tools: { '*': false },
+  };
+  const recoveryOptions = { ...options };
+  delete recoveryOptions.resumeSessionId;
+  delete recoveryOptions.continueSession;
+  const isolatedConfigHome = fs.mkdtempSync(path.join(os.tmpdir(), 'zeroshot-opencode-config-'));
+
+  try {
+    const spec = buildCommand(context, {
+      ...recoveryOptions,
+      agentName,
+      autoApprove: false,
+      webSearch: false,
+    });
+    const restrictedConfig = {
+      default_agent: agentName,
+      permission: { '*': 'deny' },
+      tools: { '*': false },
+      agent: { [agentName]: profile },
+      mode: { [agentName]: profile },
+      mcp: {},
+      instructions: [],
+      plugin: [],
+      command: {},
+    };
+    return {
+      ...spec,
+      env: {
+        ...spec.env,
+        ZEROSHOT_OPENCODE_AGENT: agentName,
+        XDG_CONFIG_HOME: isolatedConfigHome,
+        OPENCODE_DB: ':memory:',
+        OPENCODE_CONFIG: '',
+        OPENCODE_CONFIG_DIR: isolatedConfigHome,
+        OPENCODE_CONFIG_CONTENT: JSON.stringify(restrictedConfig),
+        OPENCODE_PERMISSION: JSON.stringify({ '*': 'deny' }),
+        OPENCODE_DISABLE_PROJECT_CONFIG: '1',
+        OPENCODE_PURE: '1',
+        OPENCODE_DISABLE_DEFAULT_PLUGINS: '1',
+        OPENCODE_DISABLE_EXTERNAL_SKILLS: '1',
+        OPENCODE_DISABLE_CLAUDE_CODE: '1',
+      },
+      cleanup: [...(spec.cleanup || []), isolatedConfigHome],
+      cleanupMetadata: [
+        ...(spec.cleanupMetadata || []),
+        {
+          kind: 'temp-directory',
+          provider: 'opencode',
+          path: isolatedConfigHome,
+          reason: 'isolated-config',
+        },
+      ],
+    };
+  } catch (error) {
+    fs.rmSync(isolatedConfigHome, { recursive: true, force: true });
+    throw error;
+  }
+}
+
 function parseToolPart(part: Record<string, unknown>): OutputEvent | null {
   const state = getRecord(part, 'state') ?? {};
   const status = getString(state, 'status');
@@ -262,7 +344,7 @@ function classifyError(error: unknown): ErrorClassification {
   return classifyBaseProviderError(error, [], []);
 }
 
-export const opencodeAdapter: ProviderAdapter = {
+export const opencodeAdapter: StructuredOutputRecoveryAdapter = {
   id: 'opencode',
   displayName: 'Opencode',
   binary: 'opencode',
@@ -281,6 +363,7 @@ export const opencodeAdapter: ProviderAdapter = {
   defaultMinLevel: 'level1',
   detectCliFeatures,
   buildCommand,
+  buildStructuredOutputRecoveryCommand,
   extractSessionId,
   parseEvent,
   createParserState: () => createParserState('opencode'),

package/src/agent-cli-provider/contract-options.ts

@@ -24,6 +24,9 @@ const CLI_FEATURE_FIELDS = [
   'supportsModel',
   'supportsEffort',
   'supportsSettings',
+  'supportsTools',
+  'supportsStrictMcpConfig',
+  'supportsNoSessionPersistence',
   'supportsJson',
   'supportsOutputSchema',
   'supportsDir',
@@ -31,8 +34,16 @@ const CLI_FEATURE_FIELDS = [
   'supportsConfigOverride',
   'supportsSkipGitRepoCheck',
   'supportsVariant',
+  'supportsSandbox',
+  'supportsEphemeral',
+  'supportsIgnoreUserConfig',
+  'supportsIgnoreRules',
+  'supportsStrictConfig',
   'supportsJsonMode',
+  'supportsAdminPolicy',
   'supportsNoSession',
+  'supportsAgent',
+  'supportsRecoveryIsolation',
   'supportsNoExtensions',
   'supportsNoSkills',
   'supportsNoPromptTemplates',
@@ -229,6 +240,11 @@ function normalizeBuildOptions(value: Record<string, unknown>): BuildProviderCom
     'strictSchema',
     optionalBooleanValue(value.strictSchema, 'options.strictSchema')
   );
+  addDefined(
+    result,
+    'structuredOutputRecovery',
+    optionalBooleanValue(value.structuredOutputRecovery, 'options.structuredOutputRecovery')
+  );
   addDefined(
     result,
     'gateway',

package/src/agent-cli-provider/index.ts

@@ -53,6 +53,7 @@ export {
   providerRegistry,
   resolveProviderCommand,
   supportsProviderCapability,
+  supportsProviderOutputReformatting,
 } from './provider-registry';
 
 export type {
@@ -93,6 +94,9 @@ export type {
   ProviderCliFeatures,
   ProviderId,
   ProviderRegistryEntry,
+  StructuredOutputRecoveryAdapter,
+  StructuredOutputProviderRegistryEntry,
+  UnstructuredOutputProviderRegistryEntry,
   RedactionMetadata,
   ReasoningEffort,
   ResolvedGatewayBuildOptions,

package/src/agent-cli-provider/omp-release.ts

@@ -0,0 +1,63 @@
+export const OMP_SUPPORTED_VERSION = '17.2.1' as const;
+export const OMP_PACKAGE_NAME = '@oh-my-pi/pi-coding-agent' as const;
+export const OMP_BINARY_NAME = 'omp' as const;
+export const OMP_INSTALL_COMMAND =
+  `npm install -g --ignore-scripts ${OMP_PACKAGE_NAME}@${OMP_SUPPORTED_VERSION}` as const;
+export const OMP_RELEASE_DOWNLOAD_BASE_URL =
+  `https://github.com/can1357/oh-my-pi/releases/download/v${OMP_SUPPORTED_VERSION}` as const;
+
+export type OmpReleasePlatform =
+  | 'darwin-arm64'
+  | 'darwin-x64'
+  | 'linux-arm64'
+  | 'linux-musl-arm64'
+  | 'linux-musl-x64'
+  | 'linux-x64';
+
+export interface OmpReleaseAsset {
+  readonly name: string;
+  readonly platform: OmpReleasePlatform;
+  readonly sha256: string;
+}
+
+// Verified via `gh api repos/can1357/oh-my-pi/releases/tags/v17.2.1`. Windows is excluded (Unix-only).
+export const OMP_RELEASE_ASSETS: readonly OmpReleaseAsset[] = [
+  {
+    name: 'omp-darwin-arm64',
+    platform: 'darwin-arm64',
+    sha256: 'b75eddb19ba9ec401fee5ecb35b3ceb5ddc48708e98b5a113136df5d65f2bed8',
+  },
+  {
+    name: 'omp-darwin-x64',
+    platform: 'darwin-x64',
+    sha256: 'd23c197d93243122ef9a35a247bdd85075c4c1356dd1fa4a080faaa2dae4b905',
+  },
+  {
+    name: 'omp-linux-arm64',
+    platform: 'linux-arm64',
+    sha256: 'd34883744bb54476f7268aad4b561ea9b1cd826f201d044b337c5a96713fa83d',
+  },
+  {
+    name: 'omp-linux-musl-arm64',
+    platform: 'linux-musl-arm64',
+    sha256: '3babfe15664f32fcc03dc91d92a10341baf6e65b9868351de21c5aa3218e139d',
+  },
+  {
+    name: 'omp-linux-musl-x64',
+    platform: 'linux-musl-x64',
+    sha256: '8f05f7eed2940b11c29d7aaf0e641b100c014db5bfbee00afa5dd4929ad5dd6a',
+  },
+  {
+    name: 'omp-linux-x64',
+    platform: 'linux-x64',
+    sha256: 'ac0285a571aa79c58d59482561a3871befe7333dba3a3bdc2e90682653ee33b2',
+  },
+];
+
+export function findOmpReleaseAsset(platform: string): OmpReleaseAsset | undefined {
+  return OMP_RELEASE_ASSETS.find((asset) => asset.platform === platform);
+}
+
+export function ompReleaseAssetDownloadUrl(asset: OmpReleaseAsset): string {
+  return `${OMP_RELEASE_DOWNLOAD_BASE_URL}/${asset.name}`;
+}