@ucsandman/legcli 0.8.0 → 0.10.0

package/src/trust.mjs

@@ -1,8 +1,8 @@
 // trust — records the folder-trust answer each agent CLI asks for on its first
-// run in a directory, before Baton spawns that agent.
+// run in a directory, before Leg spawns that agent.
 //
 // Why this exists: the handoff is the product. When claude hits its 5-hour
-// limit at 3am, Baton writes the bundle and starts codex in the same terminal
+// limit at 3am, Leg writes the bundle and starts codex in the same terminal
 // with nobody there. If the incoming agent has never run in that folder it
 // stops on a full-screen "Is this a project you trust?" prompt and waits for a
 // keypress that is not coming, and the handoff the user paid for silently
@@ -10,24 +10,25 @@
 //
 // Each CLI already stores that answer in a file, so the fix is to write the
 // same answer the user would have clicked, for the repository they already
-// chose by typing `baton claude` in it:
+// chose by typing `leg claude` in it:
 //
 //   claude  ~/.claude.json            projects["<repo>"].hasTrustDialogAccepted
 //           (or $CLAUDE_CONFIG_DIR/.claude.json)
 //   codex   ~/.codex/config.toml      [projects."<repo>"] trust_level = "trusted"
-//   agy     ~/.gemini/trustedFolders.json   "<repo>": "TRUST_FOLDER"
+//   agy     ~/.gemini/antigravity-cli/settings.json   trustedWorkspaces: ["<repo>", "<worktree>"]
+//           (~/.gemini/config/projects/default-cli-project.json defense in depth)
 //
 // For claude this is the documented remedy: its own permissions docs say to
 // "set projects[<path>].hasTrustDialogAccepted to true in ~/.claude.json, where
 // <path> is the repository root", and its error text prints the same sentence.
 //
-// Three rules this module holds to, because it writes files Baton does not own:
+// Three rules this module holds to, because it writes files Leg does not own:
 //   1. Never create a config file that is not already there. A missing file
 //      means that CLI has never run here, so its own first-run flow (login,
 //      onboarding) is about to happen with the user present anyway. Skip.
 //   2. Never rewrite a file to say what it already says. No write, no risk.
 //   3. Never lose what is already in the file. Read, add, write atomically,
-//      under the same cross-process lock the rest of Baton uses.
+//      under the same cross-process lock the rest of Leg uses.
 //
 // BATON_TRUST=never turns all of it off; the prompts come back.
 import { existsSync, readFileSync, writeFileSync, renameSync, unlinkSync } from 'node:fs'
@@ -37,7 +38,7 @@ import { realPath, withFileLock, writeJsonAtomic } from './fsx.mjs'
 
 // The repository root is the unit of trust: claude walks up from the working
 // directory to the repo root looking for the flag, so one record covers every
-// worktree Baton creates under <repo>/.baton-worktrees/ as well.
+// worktree Leg creates under <repo>/.baton-worktrees/ as well.
 export function repoRootOf(dir) {
   let at = realPath(dir)
   const stop = parse(at).root
@@ -90,7 +91,7 @@ export function claudeProjectKey(repo) {
 
 // The canonical key, plus the spellings Claude Code used in older versions.
 // Older spellings are updated when they are already in the file and never
-// created, so Baton corrects a stale entry without littering the config.
+// created, so Leg corrects a stale entry without littering the config.
 export function projectKeys(repo, existing = {}) {
   const key = claudeProjectKey(repo)
   const out = [key]
@@ -100,7 +101,7 @@ export function projectKeys(repo, existing = {}) {
   // The older spelling is the same path written with Windows separators, so it
   // is recognised by its spelling rather than by asking the host to resolve it:
   // matching on the exact string only worked on a host where a backslash is a
-  // separator, and the entry Baton was meant to correct was left stale
+  // separator, and the entry Leg was meant to correct was left stale
   // anywhere else. Nothing is created here — an entry is only ever brought up
   // to date when it is already in the file.
   for (const k of Object.keys(existing)) {
@@ -113,7 +114,7 @@ export function projectKeys(repo, existing = {}) {
 // is what triggers the second prompt ("Allow external CLAUDE.md file imports?").
 // Claude Code reads a CLAUDE.md from every ancestor directory of the working
 // directory, so an import in C:\Projects\CLAUDE.md is external to a session in
-// C:\Projects\some-repo. Returns the resolved paths, so Baton can print exactly
+// C:\Projects\some-repo. Returns the resolved paths, so Leg can print exactly
 // what it approved instead of approving something invisible.
 export function externalImports(cwd) {
   const start = realPath(cwd)
@@ -200,7 +201,7 @@ export function ensureClaudeTrust(repo, { env = process.env, cwd = repo } = {})
     wrote = [...new Set(changed)]
   })
   if (wrote === null) return { agent: 'claude', file, wrote: [], imports, skipped: 'claude config is not readable json' }
-  if (wrote === 'declined') return { agent: 'claude', file, root, wrote: [], imports, skipped: 'you answered no for this folder; Baton leaves that answer alone' }
+  if (wrote === 'declined') return { agent: 'claude', file, root, wrote: [], imports, skipped: 'you answered no for this folder; Leg leaves that answer alone' }
   return { agent: 'claude', file, root, wrote, imports, skipped: null }
 }
 
@@ -225,7 +226,7 @@ export function ensureCodexTrust(repo, { env = process.env } = {}) {
     if (codexTrustedPaths(text).some((p) => samePath(p, root))) return
     const block = `\n[projects."${tomlPath(root)}"]\ntrust_level = "trusted"\n`
     // Append only: a TOML table added at the end cannot change the meaning of
-    // a table above it, and Baton never reformats a file it did not write.
+    // a table above it, and Leg never reformats a file it did not write.
     writeTextAtomic(file, text.endsWith('\n') ? text + block : text + '\n' + block)
     wrote = ['trust_level']
   })
@@ -246,7 +247,12 @@ export function codexTrustedPaths(text) {
 }
 
 function samePath(a, b) {
-  return process.platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b
+  if (typeof a !== 'string' || typeof b !== 'string') return false
+  const normA = a.replace(/\\/g, '/')
+  const normB = b.replace(/\\/g, '/')
+  if (process.platform === 'win32') return normA.toLowerCase() === normB.toLowerCase()
+  if (DRIVE_ABS.test(a) && DRIVE_ABS.test(b)) return normA.toLowerCase() === normB.toLowerCase()
+  return normA === normB
 }
 
 function writeTextAtomic(file, text) {
@@ -255,7 +261,7 @@ function writeTextAtomic(file, text) {
   for (let i = 0; i < 20; i++) {
     try { renameSync(tmp, file); return } catch (err) {
       // Windows holds a brief lock on a file another process has open; the
-      // same retry the rest of Baton uses rather than lose the config.
+      // same retry the rest of Leg uses rather than lose the config.
       if (!['EPERM', 'EBUSY', 'EACCES', 'EEXIST'].includes(err.code)) { try { unlinkSync(tmp) } catch {} throw err }
       const until = Date.now() + 25
       while (Date.now() < until) { /* spin */ }
@@ -267,31 +273,194 @@ function writeTextAtomic(file, text) {
 
 // ---- agy ----
 
+export function agySettingsFile(env = process.env) {
+  if (env.ANTIGRAVITY_APP_DATA_DIR) {
+    const p = resolve(env.ANTIGRAVITY_APP_DATA_DIR)
+    return p.endsWith('settings.json') ? p : join(p, 'settings.json')
+  }
+  const base = env.GEMINI_CONFIG_DIR ? resolve(env.GEMINI_CONFIG_DIR) : join(homedir(), '.gemini')
+  if (base.endsWith('settings.json')) return base
+  if (base.endsWith('antigravity-cli')) return join(base, 'settings.json')
+  return join(base, 'antigravity-cli', 'settings.json')
+}
+
 export function agyTrustFile(env = process.env) {
-  const dir = env.GEMINI_CONFIG_DIR ? resolve(env.GEMINI_CONFIG_DIR) : join(homedir(), '.gemini')
-  return join(dir, 'trustedFolders.json')
+  const base = env.GEMINI_CONFIG_DIR ? resolve(env.GEMINI_CONFIG_DIR) : join(homedir(), '.gemini')
+  if (base.endsWith('default-cli-project.json')) return base
+  if (base.endsWith('projects')) return join(base, 'default-cli-project.json')
+  if (base.endsWith('config')) return join(base, 'projects', 'default-cli-project.json')
+  return join(base, 'config', 'projects', 'default-cli-project.json')
 }
 
-export function ensureAgyTrust(repo, { env = process.env } = {}) {
-  const file = agyTrustFile(env)
+export function agyTrustedFoldersFile(env = process.env) {
+  const base = env.GEMINI_CONFIG_DIR ? resolve(env.GEMINI_CONFIG_DIR) : join(homedir(), '.gemini')
+  if (base.endsWith('trustedFolders.json')) return base
+  return join(base, 'trustedFolders.json')
+}
+
+export function normalizeWorkspacePath(raw) {
+  const s = String(raw)
+  let p
+  if (DRIVE_ABS.test(s)) {
+    p = process.platform === 'win32' ? realPath(s) : s
+    p = p.replace(/\//g, '\\')
+    if (/^[a-z]:/i.test(p)) p = p[0].toUpperCase() + p.slice(1)
+    return p.length > 3 ? p.replace(/\\+$/, '') : p
+  }
+  p = realPath(s)
+  if (process.platform === 'win32') {
+    p = p.replace(/\//g, '\\')
+    if (/^[a-z]:/i.test(p)) p = p[0].toUpperCase() + p.slice(1)
+    return p.length > 3 ? p.replace(/\\+$/, '') : p
+  }
+  p = p.replace(/\\/g, '/')
+  return p.length > 1 ? p.replace(/\/+$/, '') : p
+}
+
+export function agyFolderUri(repo) {
   const root = repoRootOf(repo)
-  // agy keeps trust in its own small file rather than a big config, so an
-  // absent file next to an existing ~/.gemini is just an empty answer sheet.
-  if (!existsSync(dirname(file))) return { agent: 'agy', file, wrote: [], imports: [], skipped: 'no agy config yet' }
+  let p = root.replace(/\\/g, '/')
+  if (!p.startsWith('/')) p = '/' + p
+  return `file://${p}`
+}
+
+export function agyUriMatches(uri, root) {
+  if (typeof uri !== 'string') return false
+  let p = uri.replace(/^file:\/\//, '').replace(/%3A/gi, ':')
+  if (/^\/[A-Za-z]:/.test(p)) p = p.slice(1)
+  return samePath(p, root)
+}
+
+export function ensureAgyTrust(repo, { env = process.env, cwd = repo } = {}) {
+  const settingsFile = agySettingsFile(env)
+  const projectFile = agyTrustFile(env)
+  const trustedFoldersFile = agyTrustedFoldersFile(env)
+
+  const settingsDir = dirname(settingsFile)
+  const projectDir = dirname(projectFile)
+
+  if (!existsSync(settingsDir) && !existsSync(projectDir) && !existsSync(settingsFile) && !existsSync(projectFile)) {
+    return { agent: 'agy', file: settingsFile, wrote: [], imports: [], skipped: 'no agy config yet' }
+  }
+
+  const root = normalizeWorkspacePath(repoRootOf(repo))
+  const workDir = normalizeWorkspacePath(cwd || repo)
+  const targets = samePath(root, workDir) ? [root] : [root, workDir]
+
+  // Rule 4: refusal preservation. If user answered "no" in any existing config, respect it.
+  if (existsSync(projectFile)) {
+    const project = readJson(projectFile)
+    if (project?.projectResources?.resources && Array.isArray(project.projectResources.resources)) {
+      const declined = project.projectResources.resources.some((res) => {
+        const uri = res.gitFolder?.folderUri ?? res.folderUri
+        return targets.some((t) => agyUriMatches(uri, t)) && res.gitFolder?.allowWrite === false
+      })
+      if (declined) {
+        return { agent: 'agy', file: settingsFile, root, wrote: [], imports: [], skipped: 'you answered no for this folder; Leg leaves that answer alone' }
+      }
+    }
+  }
+  if (existsSync(trustedFoldersFile)) {
+    const tf = readJson(trustedFoldersFile)
+    if (tf && typeof tf === 'object') {
+      const declined = targets.some((t) => tf[t] === 'DENY' || tf[t] === 'DONT_TRUST' || tf[t] === false)
+      if (declined) {
+        return { agent: 'agy', file: settingsFile, root, wrote: [], imports: [], skipped: 'you answered no for this folder; Leg leaves that answer alone' }
+      }
+    }
+  }
+
   let wrote = []
-  withFileLock(`${file}.baton-lock`, () => {
-    const map = existsSync(file) ? readJson(file) : {}
-    if (map === null || typeof map !== 'object') { wrote = null; return }
-    // Rule 4: a folder already in this file has been answered, whatever the
-    // answer was. Only an absent key is an unanswered question; anything else
-    // (DO_NOT_TRUST included) is the user's decision and stays.
-    if (Object.prototype.hasOwnProperty.call(map, root)) { if (map[root] !== 'TRUST_FOLDER') wrote = 'declined'; return }
-    writeJsonAtomic(file, { ...map, [root]: 'TRUST_FOLDER' })
-    wrote = ['TRUST_FOLDER']
-  })
-  if (wrote === null) return { agent: 'agy', file, wrote: [], imports: [], skipped: 'agy trust file is not readable json' }
-  if (wrote === 'declined') return { agent: 'agy', file, root, wrote: [], imports: [], skipped: 'you answered no for this folder; Baton leaves that answer alone' }
-  return { agent: 'agy', file, root, wrote, imports: [], skipped: null }
+
+  // 1. ~/.gemini/antigravity-cli/settings.json -> trustedWorkspaces
+  // agy checks this file on startup: workspaceTrusted iterates settings.TrustedWorkspaces
+  // and does an exact string match (runtime.memequal) against Store.workspacePath.
+  const hasSettings = existsSync(settingsFile) || existsSync(settingsDir)
+  if (hasSettings) {
+    withFileLock(`${settingsFile}.baton-lock`, () => {
+      const settings = existsSync(settingsFile) ? readJson(settingsFile) : {}
+      if (!settings || typeof settings !== 'object') { wrote = null; return }
+      const list = Array.isArray(settings.trustedWorkspaces) ? [...settings.trustedWorkspaces] : []
+      let changed = false
+      for (const target of targets) {
+        const idx = list.findIndex((item) => typeof item === 'string' && samePath(item, target))
+        if (idx === -1) {
+          list.push(target)
+          changed = true
+        } else if (list[idx] !== target) {
+          // Fix casing / separator normalization so exact memequal matches in Go
+          list[idx] = target
+          changed = true
+        }
+      }
+      if (changed) {
+        settings.trustedWorkspaces = list
+        writeJsonAtomic(settingsFile, settings)
+        wrote.push('trustedWorkspaces')
+      }
+    })
+    if (wrote === null) {
+      return { agent: 'agy', file: settingsFile, wrote: [], imports: [], skipped: 'agy settings file is not readable json' }
+    }
+  }
+
+  // 2. ~/.gemini/config/projects/default-cli-project.json (Gemini project resources)
+  const hasProject = existsSync(projectFile) || existsSync(projectDir)
+  if (hasProject) {
+    withFileLock(`${projectFile}.baton-lock`, () => {
+      const project = existsSync(projectFile)
+        ? readJson(projectFile)
+        : { id: 'default-cli-project', name: 'CLI Project', projectResources: { resources: [] } }
+      if (!project || typeof project !== 'object') return
+      if (!project.projectResources || typeof project.projectResources !== 'object') {
+        project.projectResources = {}
+      }
+      if (!Array.isArray(project.projectResources.resources)) {
+        project.projectResources.resources = []
+      }
+      let changed = false
+      for (const target of targets) {
+        const alreadyTrusted = project.projectResources.resources.some((res) => {
+          const uri = res.gitFolder?.folderUri ?? res.folderUri
+          return agyUriMatches(uri, target)
+        })
+        if (!alreadyTrusted) {
+          project.projectResources.resources.push({
+            gitFolder: {
+              folderUri: agyFolderUri(target),
+              defaultBranch: 'main',
+              allowWrite: true,
+            },
+          })
+          changed = true
+        }
+      }
+      if (changed) {
+        writeJsonAtomic(projectFile, project)
+        wrote.push('gitFolder')
+      }
+    })
+  }
+
+  // 3. ~/.gemini/trustedFolders.json (legacy / extension support)
+  if (existsSync(trustedFoldersFile)) {
+    try {
+      withFileLock(`${trustedFoldersFile}.baton-lock`, () => {
+        const tf = readJson(trustedFoldersFile) || {}
+        let changed = false
+        for (const target of targets) {
+          if (tf[target] !== 'TRUST_FOLDER') {
+            tf[target] = 'TRUST_FOLDER'
+            changed = true
+          }
+        }
+        if (changed) writeJsonAtomic(trustedFoldersFile, tf)
+      })
+    } catch {}
+  }
+
+  const primaryFile = hasSettings ? settingsFile : projectFile
+  return { agent: 'agy', file: primaryFile, root, wrote, imports: [], skipped: null }
 }
 
 // ---- the one entry point ----
@@ -306,13 +475,13 @@ export function ensureTrust(agent, repo, { env = process.env, cwd = repo } = {})
   try {
     return fn(repo, { env, cwd })
   } catch (err) {
-    // A trust record Baton could not write is a prompt the user will answer
+    // A trust record Leg could not write is a prompt the user will answer
     // themselves. It is never a reason to fail the session.
     return { agent, wrote: [], imports: [], skipped: `could not write the trust record: ${err.message}` }
   }
 }
 
-// The line Baton prints. Null when there is nothing worth saying.
+// The line Leg prints. Null when there is nothing worth saying.
 export function trustLine(result) {
   if (!result || !result.wrote?.length) return null
   const what = result.agent === 'claude' && result.imports?.length

package/src/usage.mjs

@@ -158,10 +158,14 @@ export function candidates({ agent, account = 'default', accounts, order = AGENT
 }
 
 // → { next: {agent, account} | null, out: [{agent, account, resets_at}] sorted by reset }
-export function chooseNext({ agent, account, accounts, installed, order = AGENTS, nowS = Math.floor(Date.now() / 1000) }) {
+// `exclude` names (agent, account) pairs this choice must skip: a destination
+// the strict harness policy refused is neither available nor out, it is off
+// the list for this hand-off.
+export function chooseNext({ agent, account, accounts, installed, order = AGENTS, nowS = Math.floor(Date.now() / 1000), exclude = [] }) {
   const out = []
   for (const c of candidates({ agent, account, accounts, order })) {
     if (installed && installed[c.agent] === false) continue
+    if (exclude.some((x) => x.agent === c.agent && x.account === c.account)) continue
     const u = readUsage(c.agent, c.account)
     if (isAvailable(u, nowS)) return { next: c, out }
     out.push({ ...c, resets_at: u.limited_until, reason: u.limited_reason })

package/src/worktree.mjs

@@ -1,7 +1,8 @@
-// worktree — one git worktree per card under <repo>/.baton-worktrees/<cardId>,
-// on branch baton/<cardId>. Every git call runs with MSYS_NO_PATHCONV=1 (see
+// worktree — one git worktree per card under <repo>/.leg-worktrees/<cardId>,
+// on branch leg/<cardId> (legacy .baton-worktrees/ and baton/<id> still
+// resolved). Every git call runs with MSYS_NO_PATHCONV=1 (see
 // git-snapshot.mjs) so Git Bash on Windows never rewrites an absolute path
-// argument. Never pushes; never deletes outside <repo>/.baton-worktrees/.
+// argument. Never pushes; never deletes outside those worktree dirs.
 import { execFileSync } from 'node:child_process'
 import { existsSync, statSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs'
 import { join, resolve, sep, isAbsolute } from 'node:path'
@@ -63,7 +64,7 @@ export function validateRepo(repo) {
   return resolved
 }
 
-function parseWorktreeList(output) {
+export function parseWorktreeList(output) {
   const entries = []
   let current = null
   for (const line of output.split(/\r?\n/)) {
@@ -85,7 +86,7 @@ export function list(repo) {
   return parseWorktreeList(out)
 }
 
-// Never committed by a landing: Baton's own directories, and the local state a
+// Never committed by a landing: Leg's own directories, and the local state a
 // DashClaw hook writes into every directory an agent runs in.
 export function ensureExcludeEntries(repo) {
   // a linked worktree or submodule has `.git` as a FILE, so the shared info dir

package/fixtures/live/agy/attempt-1-scratch-workspace.out.log

@@ -1 +0,0 @@
-{"conversation_id":"f7ff607d-9831-4f28-83d2-f50fb07ad8a1","status":"SUCCESS","response":"Done. Both files created in `~\\.gemini\\antigravity-cli\\scratch\\`:\n\n- [hello-agy.txt](file:///~/.gemini/antigravity-cli/scratch/hello-agy.txt) — contains `hi`\n- [.baton/DONE](file:///~/.gemini/antigravity-cli/scratch/.baton/DONE) — contains `done`\n","duration_seconds":17.670068,"num_turns":1,"usage":{"input_tokens":39133,"output_tokens":542,"thinking_tokens":0,"cache_read_tokens":37387,"total_tokens":39675}}

package/fixtures/live/agy/out.log

@@ -1 +0,0 @@
-{"conversation_id":"e36f7b41-8a0f-4666-a690-b49062d53de0","status":"SUCCESS","response":"Done. Created [hello-agy.txt](file:///~/AppData/Local/Temp/claude/C--Projects/49952fac-5ff4-486c-8395-9973cebdfdcb/scratchpad/toy-probe/hello-agy.txt) and [.baton/DONE](file:///~/AppData/Local/Temp/claude/C--Projects/49952fac-5ff4-486c-8395-9973cebdfdcb/scratchpad/toy-probe/.baton/DONE).\n","duration_seconds":36.3828431,"num_turns":1,"usage":{"input_tokens":39475,"output_tokens":600,"thinking_tokens":0,"cache_read_tokens":37477,"total_tokens":40075}}

package/fixtures/live/agy/supervisor.log

@@ -1,2 +0,0 @@
-2026-09-11T00:39:34.549Z spawning leg: adapter=agy run=1 mode=accept-edits cwd=~\AppData\Local\Temp\claude\C--Projects\49952fac-5ff4-486c-8395-9973cebdfdcb\scratchpad\toy-probe
-2026-09-11T00:40:15.643Z leg exited code 0, session e36f7b41-8a0f-4666-a690-b49062d53de0

package/fixtures/live/claude/out.log

@@ -1 +0,0 @@
-{"duration_api_ms":7804,"stop_reason":"end_turn","session_id":"d9e19d78-1502-4f88-8ded-81c5bbbda8c2","total_cost_usd":1.0015022500000001,"usage":{"input_tokens":34,"cache_creation_input_tokens":48486,"cache_read_input_tokens":47217,"output_tokens":372,"output_tokens_details":{"thinking_tokens":0},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":48486,"ephemeral_5m_input_tokens":0},"inference_geo":"not_available","iterations":[{"input_tokens":32,"output_tokens":45,"cache_read_input_tokens":47217,"cache_creation_input_tokens":1269,"cache_creation":{"ephemeral_5m_input_tokens":0,"ephemeral_1h_input_tokens":1269},"type":"message"}],"speed":"standard"},"modelUsage":{"claude-haiku-4-5-20251001":{"inputTokens":948,"outputTokens":18,"cacheReadInputTokens":0,"cacheCreationInputTokens":0,"webSearchRequests":0,"costUSD":0.0010379999999999999,"contextWindow":200000,"maxOutputTokens":32000,"thinkingTokens":0,"canonicalModel":"claude-haiku-4-5","provider":"firstParty","costBasis":"list"},"claude-fable-5-1":{"inputTokens":34,"outputTokens":372,"cacheReadInputTokens":47217,"cacheCreationInputTokens":48486,"webSearchRequests":0,"costUSD":1.00046425,"contextWindow":1000000,"maxOutputTokens":64000,"thinkingTokens":0,"canonicalModel":"claude-fable-5-1","provider":"firstParty","costBasis":"list"}},"permission_denials":[],"terminal_reason":"completed","fast_mode_state":"off","fast_mode_disabled_reason":"sdk_opt_in_required","subagent_stats":{"spawned":0,"requested":{"background":0,"foreground":0,"unset":0},"started_in_background":0,"max_depth":0,"spawned_by_subagents":0,"completed":0,"failed":0,"killed":{"parent":0,"user":0,"system":0},"refused":{"depth_limit":0,"concurrency_limit":0,"budget":0},"by_type":{}},"is_error":false,"num_turns":3,"subtype":"success","api_error_status":null,"result":"Done. Both files exist:\n\n- `hello-claude.txt` contains `hi`\n- `.baton/DONE` contains `done`","ttft_ms":2791,"type":"result","duration_ms":11899,"uuid":"d70f3d4c-5a7f-4675-a734-d05edf37b1ed","ttft_stream_ms":1846,"time_to_request_ms":338,"first_content_frame_ms":1846,"queued_turn_count":0,"result_index":0}

package/fixtures/live/claude/supervisor.log

@@ -1,2 +0,0 @@
-2026-09-11T00:33:13.404Z spawning leg: adapter=claude run=1 mode=acceptEdits cwd=~\AppData\Local\Temp\claude\C--Projects\49952fac-5ff4-486c-8395-9973cebdfdcb\scratchpad\toy-probe
-2026-09-11T00:33:33.400Z leg exited code 0, session d9e19d78-1502-4f88-8ded-81c5bbbda8c2

package/fixtures/live/codex/err.log

@@ -1 +0,0 @@
-Reading additional input from stdin...

package/fixtures/live/codex/out.log

@@ -1,8 +0,0 @@
-{"type":"thread.started","thread_id":"01a08de2-7611-7ff1-b0da-1e6e2cb7ca90"}
-{"type":"turn.started"}
-{"type":"item.completed","item":{"id":"item_0","type":"error","message":"Skill descriptions were shortened to fit the skills context budget. Codex can still see every skill, but some descriptions are shorter. Disable unused skills or plugins to leave more room for the rest."}}
-{"type":"item.completed","item":{"id":"item_1","type":"agent_message","text":"`New-Item -ItemType File -Path hello-codex.txt -Value hi -Force` and `Set-Content` via `New-Item` in `.baton` (creating it only if missing), then writing `.baton/DONE` as `done`; I’m applying it now."}}
-{"type":"item.started","item":{"id":"item_2","type":"command_execution","command":"\"~\\\\AppData\\\\Local\\\\Microsoft\\\\WindowsApps\\\\pwsh.exe\" -Command '$ErrorActionPreference = '\"'Stop'; Set-Content -Path .\\\\hello-codex.txt -NoNewline -Value 'hi'; if (-not (Test-Path .\\\\.baton)) { New-Item -ItemType Directory -Path .\\\\.baton | Out-Null }; Set-Content -Path .\\\\.baton\\\\DONE -NoNewline -Value 'done'\"","aggregated_output":"","exit_code":null,"status":"in_progress"}}
-{"type":"item.completed","item":{"id":"item_2","type":"command_execution","command":"\"~\\\\AppData\\\\Local\\\\Microsoft\\\\WindowsApps\\\\pwsh.exe\" -Command '$ErrorActionPreference = '\"'Stop'; Set-Content -Path .\\\\hello-codex.txt -NoNewline -Value 'hi'; if (-not (Test-Path .\\\\.baton)) { New-Item -ItemType Directory -Path .\\\\.baton | Out-Null }; Set-Content -Path .\\\\.baton\\\\DONE -NoNewline -Value 'done'\"","aggregated_output":"","exit_code":0,"status":"completed"}}
-{"type":"item.completed","item":{"id":"item_3","type":"agent_message","text":"Done.  \n`hello-codex.txt` now contains exactly `hi`, and `.baton/DONE` contains exactly `done`."}}
-{"type":"turn.completed","usage":{"input_tokens":58585,"cached_input_tokens":10880,"cache_write_input_tokens":0,"output_tokens":853,"reasoning_output_tokens":650}}

package/fixtures/live/codex/supervisor.log

@@ -1,2 +0,0 @@
-2026-09-11T00:33:42.787Z spawning leg: adapter=codex run=1 mode=workspace-write cwd=~\AppData\Local\Temp\claude\C--Projects\49952fac-5ff4-486c-8395-9973cebdfdcb\scratchpad\toy-probe
-2026-09-11T00:34:10.757Z leg exited code 0, session 01a08de2-7611-7ff1-b0da-1e6e2cb7ca90

package/fixtures/live/grok/err.log

@@ -1,32 +0,0 @@
-
-To sign in, open this URL in your browser:
-
-  https://accounts.x.ai/oauth2/device?user_code=S3S6-5YEF
-
-Confirm this code in your browser:
-
-  S3S6-5YEF
-
-Only continue with a code you requested. Don't share it with anyone.
-
-Waiting for authorization...
-2026-09-11T00:37:22.879885Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.aggregate server=mole reason=tool name 'mole__mole.aggregate' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.879980Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.citations server=mole reason=tool name 'mole__mole.citations' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880166Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.claim_add server=mole reason=tool name 'mole__mole.claim_add' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880194Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.claims_list server=mole reason=tool name 'mole__mole.claims_list' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880215Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.connect_list server=mole reason=tool name 'mole__mole.connect_list' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880237Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.dataset server=mole reason=tool name 'mole__mole.dataset' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880264Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.edge_add server=mole reason=tool name 'mole__mole.edge_add' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880280Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.fetch server=mole reason=tool name 'mole__mole.fetch' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880298Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.pairs_candidates server=mole reason=tool name 'mole__mole.pairs_candidates' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880319Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.rows_add server=mole reason=tool name 'mole__mole.rows_add' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880339Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.search server=mole reason=tool name 'mole__mole.search' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880354Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.session_close server=mole reason=tool name 'mole__mole.session_close' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880412Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.session_open server=mole reason=tool name 'mole__mole.session_open' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880437Z ERROR Skipping MCP tool with invalid name tool_name=mole__mole.verify_quote server=mole reason=tool name 'mole__mole.verify_quote' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880460Z ERROR Skipping MCP tool with invalid name tool_name=mole__research.ask server=mole reason=tool name 'mole__research.ask' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880482Z ERROR Skipping MCP tool with invalid name tool_name=mole__research.cancel server=mole reason=tool name 'mole__research.cancel' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880502Z ERROR Skipping MCP tool with invalid name tool_name=mole__research.report server=mole reason=tool name 'mole__research.report' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880519Z ERROR Skipping MCP tool with invalid name tool_name=mole__research.result server=mole reason=tool name 'mole__research.result' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880541Z ERROR Skipping MCP tool with invalid name tool_name=mole__research.sessions.list server=mole reason=tool name 'mole__research.sessions.list' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)
-2026-09-11T00:37:22.880557Z ERROR Skipping MCP tool with invalid name tool_name=mole__research.status server=mole reason=tool name 'mole__research.status' is invalid — must match ^[a-zA-Z_][a-zA-Z0-9_-]{0,63}$ (start with letter/underscore, max 64 chars)

package/fixtures/live/grok/out.log

@@ -1,7 +0,0 @@
-{
-  "text": "Creating `hello-grok.txt` and `.baton/DONE`.",
-  "stopReason": "Cancelled",
-  "sessionId": "01a08de5-c64c-7a31-ac58-1c11c2dd7332",
-  "requestId": "fb815c5a-2e96-47c4-8bcc-30669f38e844",
-  "thought": "The user wants me to:\n\n1. Create a file named hello-grok.txt in the current directory containing exactly the word hi"
-}

package/fixtures/live/grok/supervisor.log

@@ -1,2 +0,0 @@
-2026-09-11T00:36:48.222Z spawning leg: adapter=grok run=1 mode=acceptEdits cwd=~\AppData\Local\Temp\claude\C--Projects\49952fac-5ff4-486c-8395-9973cebdfdcb\scratchpad\toy-probe
-2026-09-11T00:37:45.845Z leg exited code 0, session 01a08de5-c64c-7a31-ac58-1c11c2dd7332