@usine/agents 0.3.0 → 0.4.0

package/README.md

@@ -1,57 +1,119 @@
 # @usine/agents
 
-The agent runtime for [usine](https://github.com/basaltbytes/usine). Each Attempt starts an in-process Pi parent, which can delegate focused work through the usine-owned `subagent` tool. An agent's brain spec selects Claude Code, Codex, or Pi for the child.
+The agent layer for [usine](https://github.com/basaltbytes/usine): the Claude Code, Codex, and Pi child backends that an attempt's Pi parent delegates to, their prompts, and harness preflight. The parent runs in the orchestrator as a durable task (`@usine/durable`); its `subagent` tool starts the child that the agent's brain spec selects. [Attempt execution](https://docs.usine.dev/architecture/execution/) describes each harness.
 
-`@usine/agents/prompt` and `@usine/agents/runtime` are platform-free: prompt assembly, typed runtime errors, and the `AgentRuntime` and `ChildBackend` service contracts. The Node implementation lives at `@usine/agents/pi/live`:
+0.x APIs can change between minor releases. Supply `effect` at the workspace's pinned version. Harness SDKs and protocols are exact-pinned.
 
-```ts
-import { layer as agentLayer } from "@usine/agents/pi/live";
-```
+## Compose the child backends
 
-Use `@usine/agents/pi` to compose the Pi parent with your own child backend:
+`/prompt` and `/runtime` are platform-free: prompt assembly, typed runtime errors, and the `ChildBackend` contracts. `childDispatcherLayer` (`/children`) picks a backend from the agent's `harness`. Provide its three backends from `/claude`, `/codex`, and `/pi`, which also export their SDK contracts and production SDK layers. `@usine/durable/live` composes them:
 
 ```ts
 import { Layer } from "effect";
-import { piParentLayer, piSdkLive } from "@usine/agents/pi";
-
-// childBackendLayer supplies ChildBackend from @usine/agents/runtime.
-const agentLayer = piParentLayer.pipe(
-  Layer.provide(piSdkLive),
-  Layer.provide(childBackendLayer),
+import { childDispatcherLayer } from "@usine/agents/children";
+import { claudeChildBackendLayer, claudeSdkLive } from "@usine/agents/claude";
+import { codexAppServerLive, codexChildBackendLayer } from "@usine/agents/codex";
+import { piChildBackendLayer, piSdkLive } from "@usine/agents/pi";
+
+const childBackendLayer = childDispatcherLayer.pipe(
+  Layer.provide(
+    Layer.mergeAll(
+      claudeChildBackendLayer.pipe(Layer.provide(claudeSdkLive)),
+      codexChildBackendLayer.pipe(Layer.provide(codexAppServerLive)),
+      piChildBackendLayer.pipe(Layer.provide(piSdkLive)),
+    ),
+  ),
 );
 ```
 
-`@usine/agents/children` provides `childDispatcherLayer`, which selects a child backend by harness. Compose its `ClaudeChildBackend`, `CodexChildBackend`, and `PiChildBackend` requirements with the adapter layers from `/claude`, `/codex`, and `/pi`. These Node entry points also provide their SDK service contracts and production SDK layers for caller-controlled composition. `/pi/live` assembles the parent and all three child backends.
+The Claude backend also needs `ClaudeLoginLock` (`/runtime`), one per worker, which every Claude command that can refresh the worker's login takes. Give the same instance (`claudeLoginLockLayer` from `@usine/executor`) to the backends and the executor running preflight.
 
-The production layer resolves the Pi parent model from the Run spec, installs the subagents extension, and dispatches each child from the rostered `harness` field. The Run spec also defines the per-Attempt child-session budget. Every accepted spawn logs its cumulative count and a 160-character task excerpt; an excess spawn stops the parent with `ChildSessionBudgetExceededError`. The parent accepts API-key-backed Pi models and ChatGPT subscription models from the `openai-codex` provider. Claude Code runs the worker’s `claude` executable through the Agent SDK with `bypassPermissions` and reads only worker-user settings. Codex uses app-server JSON-RPC over standard input and output with `approvalPolicy: never`; it verifies ChatGPT authentication with `account/read` before creating an ephemeral thread and records ChatGPT plan rate-window updates as `PoolRateLimitsUpdated` session events. Pi children remain API-key-only.
+## Harnesses and credentials
 
-The Attempt worktree counts as repository-controlled input. Pi ignores project `.pi/` settings, extensions, prompt templates, skills, and themes. Claude omits project setting sources, while Codex marks the worktree untrusted before starting its thread. AGENTS instructions remain available to the coding harnesses. Worker isolation remains the executor's responsibility.
+- **Parent:** a Pi model with an API key, or an `openai-codex` ChatGPT model through Plus or Pro OAuth. The start log records `apiKeys` or `chatgptPlan`. A child past the run spec's child-session budget stops the parent with `ChildSessionBudgetExceededError`.
+- **Claude Code:** the worker's `claude` through the Agent SDK, with `bypassPermissions`, worker-user settings only, and the CLI login.
+- **Codex:** app-server JSON-RPC over stdio, with `approvalPolicy: never` and the CLI login. It checks the login with `account/read` before creating a thread, and records plan rate windows as `PoolRateLimitsUpdated`. An API-key login, no login, or an unsupported account fails with `PoolUnavailableError`, which needs the operator. A login change ends the session before more rate windows are recorded.
+- **Pi children:** API keys only.
 
-Parent and child output becomes typed session events: `SessionStarted`, `TextOutput`, tool calls, pool observations, and `SessionFinished`. Completed assistant text produces `TextOutput` events; streaming deltas don't enter the Attempt transcript. Parent and child controls support steer and interrupt. A child session always names one parent session, so recursive child events cannot enter the public model.
+Logs record the verified authentication method and pool. On completion or interrupt, usine closes the input of the child's Codex app server and waits for it to exit before publishing, releasing background commands. Scope cleanup does the same, bounded, and logs before force-stopping a stalled process.
 
-Model identifiers stay opaque until the selected harness checks its registry. Agent-reported failures use `AgentResultError`; SDK, process, and protocol failures use `SessionOperationError`. `toAttemptFailure` maps only `SessionOperationError` to retryable infrastructure failure, while `ChildSessionBudgetExceededError` becomes a non-retryable `ChildSessionBudgetFailure`.
+`/pi/authentication` exports the parent's rules for other runtimes: `splitPiModel` (parses `provider/model`), `piAuthentication` (a provider's credential check), `requiredPiPool` (a provider's pool), and `resolvePiPool` (its credential's pool).
 
-Configure Pi with either a provider API key or ChatGPT Plus/Pro OAuth for the parent. Pi children require API keys; Claude and Codex children use their CLI login state. The parent-start log records `apiKeys` or `chatgptPlan` according to the resolved credential. The harness SDK and protocol dependencies use exact versions.
+## Child hosts
 
-`@usine/agents/preflight` provides the Node `preflight(brain)` operation. Supply a `ChildProcessSpawner` layer to check a worker without running a prompt. It accepts Codex CLI **0.144.0 or 0.153.4**, verifies the Codex ChatGPT account, checks `claude auth status --json` for a Claude subscription, and checks Pi’s model and API-key authentication through the installed SDK. `HarnessUnavailableError` identifies a binary, version, or login gap; `SessionOperationError` reports an incomplete check, including a timeout or failed SDK connection. Install and log in as the worker user before starting usine.
+`ChildRequest.host` (`/child-host`) sets where a child runs, and `ChildRequest.worker` names that machine's worker:
 
-A Codex API-key login, absent login, or unsupported account response produces `PoolUnavailableError`, which requires operator action. The verified authentication method and pool appear in structured logs. An authentication change during a running Codex session ends it before further rate windows are recorded.
+- `LocalProcess`: on this machine, with `ChildRequest.environment` as the whole environment.
+- `RemoteShell`: one `ssh <args> <destination> -- <remote command>`, which enters the worktree, exports the request's environment over the machine's own, writes its pid to `<worktree>.child-<n>.pid`, and runs the harness. The SSH client gets only `RemoteShell.sshEnvironment`.
 
-The opt-in live contracts run in disposable directories. They steer a child during a waiting command, assert the changed response and event framing, and interrupt another active command. The Codex contract also requires a real rate-window snapshot. Use a supported Codex CLI with a ChatGPT login; the Pi contract requires API-key authentication for the specified provider.
+Executors run `CHILD_KILL_SCRIPT` remotely to stop every child in those pid files before keeping or removing a worktree. Claude Code runs remotely through `spawnClaudeCodeProcess`, Codex over the same SSH command. Pi children run tools in this process and fail on `RemoteShell` with `AgentResultError`.
 
-Run them with explicit models:
+The worktree is repo-controlled input: Pi ignores the project's `.pi/` settings, extensions, prompt templates, skills, and themes; Claude omits project setting sources; Codex marks the worktree untrusted. AGENTS instructions still apply. The executor isolates the worker.
 
-```sh
-USINE_CODEX_INTEGRATION_MODEL=gpt-5.6-terra pnpm --filter @usine/agents test:integration:codex
-USINE_PI_INTEGRATION_MODEL=anthropic/claude-sonnet-4-6 pnpm --filter @usine/agents test:integration:pi
+## Session events and operator actions
+
+Child output becomes typed events: `SessionStarted`, `TextOutput` for completed assistant text (streaming deltas stay out of the transcript), tool calls, pool observations, and `SessionFinished`. Each child session has one parent session; recursive child events can't enter the public model.
+
+`RunningSession.intervene(action, onDelivery)` applies steer, interrupt, and holds. A message to an idle or paused child starts a turn and emits `SessionResumed`. A message to a working child joins the turn and returns `InterventionState.queued`; `onDelivery` runs once, with the child's state when the harness reads it, or with none if the child stops first. Pi reads it when the queued steering message starts, Codex when it records a `userMessage` item, and Claude Code with a result whose `queued_turn_count` no longer counts it. A finished turn has read all its queued messages.
+
+## Claude login lock
+
+A Claude child holds the worker's `ClaudeLoginLock` from process start until its first messages prove the login (a rate-limit or thinking update, an API retry, a model answer, or the turn result), for one minute at most. `launch` returns then.
+
+If the first turn ends with `Failed to refresh OAuth token: another Claude Code process ...` and no tokens spent, another process had the refresh lock. The backend stops the process and relaunches after 15, 30, then 60 seconds, logging each retry at info. Only the running launch is transcribed. If the last launch fails the same way, the parent gets Claude's error as the child's report.
+
+## Background work
+
+Claude children use the CLI's background-task snapshots and session-idle signal to wait for background work and its follow-up answer, without an operator hold. Queued user turns delay completion; ambient watchers don't. An output stream that closes without a completed answer fails with `SessionOperationError`.
+
+The prompts tell parents and children, before returning, to run gates, tests, and CI watches in the foreground, wait for background results and pending checks, finish dependent steps, record real blockers on the issue or pull request, and push commits, since cleanup removes the worktree. This also covers older CLIs without background-task or session-state messages.
+
+## Outcome markers
+
+An unresolved blocker starts the final answer with `[usine:blocked]`, then details and incomplete work on that line or the next:
+
+```text
+[usine:blocked]
+Repository permission denied; publishing remains incomplete.
 ```
 
-The protocol conformance gate retains 0.144.0 as its baseline. Codex 0.153.4 was also checked against its generated protocol types and the real steering/interruption contracts, including Astra. Other CLI builds require verification before they are accepted.
+An operator-only decision starts it with `[usine:question]` and the question, which the prompt tells the agent to post on the item first:
 
-Each Codex child owns one app-server process. On completion or interruption, usine closes its input and waits for graceful shutdown before publishing the result, so background commands are released. Scope cleanup uses the same bounded shutdown and logs before forcing a stalled process to stop.
+```text
+[usine:question]
+Should egress use HTTP CONNECT or a SOCKS proxy? Both fit the gateway.
+```
+
+`reportedOutcome` reads markers as `AgentBlockedError` and `AgentQuestionError`, and `reportText` writes them. A parent's blocker becomes a non-retryable `BlockedFailure` and its question a non-retryable `QuestionFailure`: the run fails, its loop suppresses the item, and the run waits for the operator. A child's harness failure (`AgentResultError`) goes to the parent as a `[usine:failed]` report that `reportedOutcome` reads back, so the attempt ends with `AgentFailure` and suppresses nothing: the harness posted nothing.
+
+A child's report returns to the parent's `subagent` call as text opening with its marker, to return verbatim. The parent keeps the first: a later ordinary answer fails with it, and the paraphrase stays in the transcript. Successful siblings don't clear it. Held children can take guidance and replace their answer before release. A marker without details still fails.
+
+Model ids stay opaque until the harness checks its registry. Harness failures use `AgentResultError`. `toAttemptFailure` maps only `SessionOperationError` (SDK, process, and protocol failures) to a retryable infrastructure failure; `ChildSessionBudgetExceededError` becomes a non-retryable `ChildSessionBudgetFailure`.
+
+## GitHub identity and reviews
+
+Agents share the installation's GitHub App identity. The instructions require comment reviews at the reviewed head and the loop's outcome labels. A success label doesn't satisfy GitHub's required review: an independent reviewer approves and the operator merges. See [Write review and fix loops](https://docs.usine.dev/guides/review-fix-loops/).
+
+## Resume a harness session
+
+Claude children save sessions, and Codex threads aren't ephemeral. `SessionStarted.harnessSession` and launch logs (`harnessSessionId`, `sessionId`, `cwd`) give the id and directory. While the worktree and session files exist, run `claude --resume <id>` or `codex resume <id>` there, on the same worker and account.
+
+## Preflight
 
-Everything here is 0.x, so APIs can change between minor releases. Supply `effect` at the version pinned by the usine workspace.
+`preflight(brain, host, environment)` (`/preflight`, Node) checks a worker without a prompt, using a `ChildProcessSpawner` layer. Each check sees `environment` as a child does. On a `RemoteShell` host, checks run over SSH, an SSH failure (exit 255) is an incomplete check rather than a missing harness, and a Pi brain is unavailable.
 
-Agents share the installation’s GitHub App identity. Runtime instructions require comment reviews at the reviewed head commit and the outcome labels defined by the Loop. An agent success label does not satisfy GitHub’s required-review rule; an independent reviewer supplies required approval and the operator merges. See the [review/fix guide](../../docs/guides/review-fix-loops.md).
+It accepts Codex CLI **0.144.0 or 0.153.4** with a verified ChatGPT account, a Claude subscription in `claude auth status --json`, and Pi's model and API key through the SDK. `HarnessUnavailableError` reports a missing binary, version, or login; `SessionOperationError` an incomplete check, such as a timeout or failed SDK connection. Install and log in as the worker user before starting usine.
+
+## Live contract tests
+
+The opt-in live contracts, in disposable directories, steer a child during a waiting command, checking the response and event framing, and interrupt another; Codex also needs a real rate-window snapshot. Claude and Codex cases also run through `test/fixtures/ssh-shim.sh`, an SSH stand-in that runs the remote command locally, to check it, its environment, and its pid file with the real CLIs.
+
+They need a supported Codex CLI with a ChatGPT login, a Claude CLI with a subscription login, an API key for the Pi provider, and explicit models:
+
+```sh
+USINE_CLAUDE_INTEGRATION_MODEL=claude-sonnet-5-5 pnpm --filter @usine/agents test:integration:claude
+USINE_CODEX_INTEGRATION_MODEL=gpt-5.6-terra pnpm --filter @usine/agents test:integration:codex
+USINE_PI_INTEGRATION_MODEL=anthropic/claude-sonnet-4-6 pnpm --filter @usine/agents test:integration:pi
+```
 
-Claude children persist their sessions; Codex children start non-ephemeral threads. Their `SessionStarted.harnessSession` records the native session id and worker working directory, and structured launch logs include `harnessSessionId`, `sessionId`, and `cwd`. Resume with `claude --resume <id>` or `codex resume <id>` from that directory on the same worker and account, while its worktree and saved session files still exist. Attempt cleanup removes the worktree.
+The protocol conformance baseline is 0.144.0. Codex 0.153.4 also passed its generated protocol types and the real steering and interruption contracts, including Astra. Other CLI builds need verification first.

package/dist/child-host/child-host.d.ts

@@ -0,0 +1,60 @@
+import type { AgentSessionId } from "@usine/core/agent/session";
+import { Schema } from "effect";
+declare const LocalProcess_base: Schema.Class<LocalProcess, Schema.TaggedStruct<"LocalProcess", {}>, {}>;
+/** A host that runs children as local processes. */
+export declare class LocalProcess extends LocalProcess_base {
+}
+/** The local SSH executable and the options before the destination. */
+export declare const SshCommand: Schema.Struct<{
+    readonly command: Schema.NonEmptyString;
+    readonly args: Schema.$Array<Schema.String>;
+}>;
+export type SshCommand = typeof SshCommand.Type;
+declare const RemoteShell_base: Schema.Class<RemoteShell, Schema.TaggedStruct<"RemoteShell", {
+    readonly ssh: Schema.Struct<{
+        readonly command: Schema.NonEmptyString;
+        readonly args: Schema.$Array<Schema.String>;
+    }>;
+    /**
+     * The SSH client's process environment: what SSH needs to connect, never the orchestrator's
+     * secrets (ADR 0011), plus the variables that `-o SendEnv=` options in `ssh` forward to the
+     * child. Use it for values that must not appear on the command line, such as a Gateway caller
+     * token. Never log this field.
+     */
+    readonly sshEnvironment: Schema.$Record<Schema.String, Schema.String>;
+    /** The SSH destination, passed as one argument. */
+    readonly destination: Schema.NonEmptyString;
+}>, {}>;
+/** A host that runs each child on another machine as one SSH command, through its standard streams. */
+export declare class RemoteShell extends RemoteShell_base {
+}
+/** The host that runs an Attempt's children, chosen by the Worker that prepared its checkout. */
+export declare const ChildHost: Schema.Union<readonly [typeof LocalProcess, typeof RemoteShell]>;
+export type ChildHost = typeof ChildHost.Type;
+/** A command for a host to run. */
+export interface HostInvocation {
+    /** The working directory; defaults to the host user's home directory. */
+    readonly cwd?: string | undefined;
+    /**
+     * The command's complete environment on a local host, or the variables exported on top of a remote
+     * shell's environment; `undefined` values are skipped.
+     */
+    readonly environment?: Readonly<Record<string, string | undefined>> | undefined;
+    /** On a remote shell, the file that contains the command's PID while it runs, so cleanup can stop it after the SSH client exits. */
+    readonly pidFile?: string | undefined;
+    readonly command: string;
+    readonly args: ReadonlyArray<string>;
+}
+/** Returns the SSH client arguments that run `invocation`: the options, the destination, and one remote command line. */
+export declare const sshArguments: (host: RemoteShell, invocation: HostInvocation) => Array<string>;
+/** Returns the PID file path of a remote child: next to its worktree, named by the child number in its session ID. */
+export declare const childPidFile: (worktree: string, session: AgentSessionId) => string;
+/**
+ * A shell script that stops an Attempt's remaining remote children before its worktree is kept or
+ * removed: for each `<worktree>.child-*.pid`, it sends TERM, waits, then sends KILL. Run it with
+ * `sh -c` and the worktree as `$1`; it prints one outcome per PID file. An exited SSH client does
+ * not mean that its remote command stopped.
+ */
+export declare const CHILD_KILL_SCRIPT: string;
+export {};
+//# sourceMappingURL=child-host.d.ts.map

package/dist/child-host/child-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-host.d.ts","sourceRoot":"","sources":["../../src/child-host/child-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;AAEhC,oDAAoD;AACpD,qBAAa,YAAa,SAAQ,iBAGjC;CAAG;AAEJ,uEAAuE;AACvE,eAAO,MAAM,UAAU;;;EAGrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;;;;;;IAO5C;;;;;OAKG;;IAEH,mDAAmD;;;AAZvD,uGAAuG;AACvG,qBAAa,WAAY,SAAQ,gBAchC;CAAG;AAEJ,iGAAiG;AACjG,eAAO,MAAM,SAAS,kEAA4C,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAE9C,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IAChF,oIAAoI;IACpI,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;AA8BD,yHAAyH;AACzH,eAAO,MAAM,YAAY,SAAU,WAAW,cAAc,cAAc,KAAG,KAAK,CAAC,MAAM,CAKxF,CAAC;AAEF,sHAAsH;AACtH,eAAO,MAAM,YAAY,aAAc,MAAM,WAAW,cAAc,KAAG,MACD,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,QAgBtB,CAAC"}

package/dist/child-host/child-host.js

@@ -0,0 +1,84 @@
+import { Schema } from "effect";
+/** A host that runs children as local processes. */
+export class LocalProcess extends Schema.TaggedClass("@usine/agents/LocalProcess")("LocalProcess", {}) {
+}
+/** The local SSH executable and the options before the destination. */
+export const SshCommand = Schema.Struct({
+    command: Schema.NonEmptyString,
+    args: Schema.Array(Schema.String),
+});
+/** A host that runs each child on another machine as one SSH command, through its standard streams. */
+export class RemoteShell extends Schema.TaggedClass("@usine/agents/RemoteShell")("RemoteShell", {
+    ssh: SshCommand,
+    /**
+     * The SSH client's process environment: what SSH needs to connect, never the orchestrator's
+     * secrets (ADR 0011), plus the variables that `-o SendEnv=` options in `ssh` forward to the
+     * child. Use it for values that must not appear on the command line, such as a Gateway caller
+     * token. Never log this field.
+     */
+    sshEnvironment: Schema.Record(Schema.String, Schema.String),
+    /** The SSH destination, passed as one argument. */
+    destination: Schema.NonEmptyString,
+}) {
+}
+/** The host that runs an Attempt's children, chosen by the Worker that prepared its checkout. */
+export const ChildHost = Schema.Union([LocalProcess, RemoteShell]);
+const VARIABLE_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/u;
+const quote = (value) => `'${value.replaceAll("'", `'"'"'`)}'`;
+const quoted = (words) => words.map(quote).join(" ");
+/**
+ * Returns the remote POSIX shell command line for `invocation`, with every word quoted so it passes
+ * through OpenSSH unchanged. Throws if a variable name is not a shell identifier.
+ */
+const remoteShellCommand = (invocation) => {
+    const exports = Object.entries(invocation.environment ?? {}).flatMap(([name, value]) => {
+        if (!VARIABLE_NAME.test(name))
+            throw new Error(`Cannot export ${name} in a remote shell`);
+        return value === undefined ? [] : [`${name}=${quote(value)}`];
+    });
+    const setup = [
+        ...(invocation.cwd === undefined ? [] : [`cd ${quote(invocation.cwd)}`]),
+        ...(exports.length === 0 ? [] : [`export ${exports.join(" ")}`]),
+    ];
+    const command = [invocation.command, ...invocation.args];
+    if (invocation.pidFile === undefined)
+        return [...setup, `exec ${quoted(command)}`].join(" && ");
+    // The inner shell writes its PID, then execs the command. The file exists only while the command
+    // runs, so cleanup never signals a reused PID.
+    const pidFile = quote(invocation.pidFile);
+    const run = `sh -c 'printf %s "$$" > "$0" && exec "$@"' ${pidFile} ${quoted(command)}`;
+    return `${[...setup, run].join(" && ")}; code=$?; rm -f ${pidFile}; exit "$code"`;
+};
+/** Returns the SSH client arguments that run `invocation`: the options, the destination, and one remote command line. */
+export const sshArguments = (host, invocation) => [
+    ...host.ssh.args,
+    host.destination,
+    "--",
+    remoteShellCommand(invocation),
+];
+/** Returns the PID file path of a remote child: next to its worktree, named by the child number in its session ID. */
+export const childPidFile = (worktree, session) => `${worktree}.child-${session.slice(session.lastIndexOf(":") + 1)}.pid`;
+/**
+ * A shell script that stops an Attempt's remaining remote children before its worktree is kept or
+ * removed: for each `<worktree>.child-*.pid`, it sends TERM, waits, then sends KILL. Run it with
+ * `sh -c` and the worktree as `$1`; it prints one outcome per PID file. An exited SSH client does
+ * not mean that its remote command stopped.
+ */
+export const CHILD_KILL_SCRIPT = `
+found=0
+for pidfile in "$1".child-*.pid; do
+  test -f "$pidfile" || continue
+  found=1
+  pid=$(cat "$pidfile" 2>/dev/null)
+  if [ -n "$pid" ] && kill -TERM "$pid" 2>/dev/null; then
+    n=0
+    while kill -0 "$pid" 2>/dev/null && [ "$n" -lt 10 ]; do sleep 0.5; n=$((n+1)); done
+    if kill -0 "$pid" 2>/dev/null; then kill -KILL "$pid" 2>/dev/null; echo "$pidfile killed"; else echo "$pidfile stopped"; fi
+  else
+    echo "$pidfile absent"
+  fi
+  rm -f "$pidfile"
+done
+test "$found" = 1 || echo no-children
+`.trim();
+//# sourceMappingURL=child-host.js.map

package/dist/child-host/child-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-host.js","sourceRoot":"","sources":["../../src/child-host/child-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,oDAAoD;AACpD,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,CAAe,4BAA4B,CAAC,CAC9F,cAAc,EACd,EAAE,CACH;CAAG;AAEJ,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;CAClC,CAAC,CAAC;AAGH,uGAAuG;AACvG,MAAM,OAAO,WAAY,SAAQ,MAAM,CAAC,WAAW,CAAc,2BAA2B,CAAC,CAC3F,aAAa,EACb;IACE,GAAG,EAAE,UAAU;IACf;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;IAC3D,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC,cAAc;CACnC,CACF;CAAG;AAEJ,iGAAiG;AACjG,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAkBnE,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAE/E,MAAM,MAAM,GAAG,CAAC,KAA4B,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEpF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,UAA0B,EAAU,EAAE;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,CAAC,CAAC;QAC1F,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACjE,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,KAAK,EAAE,QAAQ,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChG,iGAAiG;IACjG,+CAA+C;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,8CAA8C,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IACvF,OAAO,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,OAAO,gBAAgB,CAAC;AACpF,CAAC,CAAC;AAEF,yHAAyH;AACzH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAiB,EAAE,UAA0B,EAAiB,EAAE,CAAC;IAC5F,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI;IAChB,IAAI,CAAC,WAAW;IAChB,IAAI;IACJ,kBAAkB,CAAC,UAAU,CAAC;CAC/B,CAAC;AAEF,sHAAsH;AACtH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,OAAuB,EAAU,EAAE,CAChF,GAAG,QAAQ,UAAU,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBhC,CAAC,IAAI,EAAE,CAAC"}

package/dist/child-host/command.d.ts

@@ -0,0 +1,11 @@
+import { ChildProcess } from "effect/unstable/process";
+import { type ChildHost, type HostInvocation } from "./child-host.ts";
+/**
+ * Returns the local process command that runs `invocation` on `host`: the command itself with
+ * exactly `environment` on a local host, or one SSH command whose client gets only `sshEnvironment`
+ * on a remote host.
+ */
+export declare const hostCommand: (host: ChildHost, invocation: HostInvocation & {
+    readonly environment: Readonly<Record<string, string>>;
+}, options: ChildProcess.CommandOptions) => ChildProcess.Command;
+//# sourceMappingURL=command.d.ts.map

package/dist/child-host/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/child-host/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAgB,MAAM,iBAAiB,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAChB,SAAS,cACH,cAAc,GAAG;IAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,WAC9E,YAAY,CAAC,cAAc,KACnC,YAAY,CAAC,OAgBf,CAAC"}

package/dist/child-host/command.js

@@ -0,0 +1,26 @@
+import { ChildProcess } from "effect/unstable/process";
+import { homedir } from "node:os";
+import { sshArguments } from "./child-host.js";
+/**
+ * Returns the local process command that runs `invocation` on `host`: the command itself with
+ * exactly `environment` on a local host, or one SSH command whose client gets only `sshEnvironment`
+ * on a remote host.
+ */
+export const hostCommand = (host, invocation, options) => {
+    switch (host._tag) {
+        case "LocalProcess":
+            return ChildProcess.make(invocation.command, invocation.args, {
+                ...options,
+                cwd: invocation.cwd ?? homedir(),
+                env: { ...invocation.environment },
+                extendEnv: false,
+            });
+        case "RemoteShell":
+            return ChildProcess.make(host.ssh.command, sshArguments(host, invocation), {
+                ...options,
+                env: { ...host.sshEnvironment },
+                extendEnv: false,
+            });
+    }
+};
+//# sourceMappingURL=command.js.map

package/dist/child-host/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/child-host/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAuC,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,IAAe,EACf,UAAuF,EACvF,OAAoC,EACd,EAAE;IACxB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE;gBAC5D,GAAG,OAAO;gBACV,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,OAAO,EAAE;gBAChC,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;QACL,KAAK,aAAa;YAChB,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE;gBACzE,GAAG,OAAO;gBACV,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE;gBAC/B,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC"}

package/dist/pi/authentication.d.ts

@@ -6,8 +6,17 @@ export type PiAuthentication = {
     readonly subscription: boolean;
 };
 export type PiPool = Extract<BillingPool, "apiKeys" | "chatgptPlan">;
-/** The billing pool the chosen Pi provider spends from, checked before launch. */
+/** Splits `provider/model` into provider and model ID; `undefined` unless both parts are present. */
+export declare const splitPiModel: (model: string) => {
+    readonly provider: string;
+    readonly modelId: string;
+} | undefined;
+/** Converts Pi's credential check, with `subscription` set if the OAuth login is a subscription; returns `undefined` if Pi found no credential. */
+export declare const piAuthentication: (check: {
+    readonly type: "api_key" | "oauth";
+} | undefined, subscription: boolean) => PiAuthentication | undefined;
+/** Returns the billing pool that a Pi provider requires; checked before launch. */
 export declare const requiredPiPool: (provider: string) => PiPool;
-/** Returns the billing pool of the credential that pays for the model request. */
+/** Returns the billing pool of the credential used for the model request, or `undefined` if it is neither an API key nor a subscription login to `openai-codex`. */
 export declare const resolvePiPool: (provider: string, authentication: PiAuthentication | undefined) => PiPool | undefined;
 //# sourceMappingURL=authentication.d.ts.map

package/dist/pi/authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../src/pi/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAC/D,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,GAAG,aAAa,CAAC,CAAC;AAErE,kFAAkF;AAClF,eAAO,MAAM,cAAc,aAAc,MAAM,KAAG,MACO,CAAC;AAE1D,kFAAkF;AAClF,eAAO,MAAM,aAAa,aACd,MAAM,kBACA,gBAAgB,GAAG,SAAS,KAC3C,MAAM,GAAG,SAUX,CAAC"}
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../src/pi/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAC/D,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,GAAG,aAAa,CAAC,CAAC;AAErE,qGAAqG;AACrG,eAAO,MAAM,YAAY,UAChB,MAAM,KACZ;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAK5D,CAAC;AAEF,mJAAmJ;AACnJ,eAAO,MAAM,gBAAgB,UACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;CAAE,GAAG,SAAS,gBAC3C,OAAO,KACpB,gBAAgB,GAAG,SAKL,CAAC;AAElB,mFAAmF;AACnF,eAAO,MAAM,cAAc,aAAc,MAAM,KAAG,MACO,CAAC;AAE1D,oKAAoK;AACpK,eAAO,MAAM,aAAa,aACd,MAAM,kBACA,gBAAgB,GAAG,SAAS,KAC3C,MAAM,GAAG,SAUX,CAAC"}

package/dist/pi/authentication.js

@@ -1,6 +1,19 @@
-/** The billing pool the chosen Pi provider spends from, checked before launch. */
+/** Splits `provider/model` into provider and model ID; `undefined` unless both parts are present. */
+export const splitPiModel = (model) => {
+    const separator = model.indexOf("/");
+    return separator <= 0 || separator === model.length - 1
+        ? undefined
+        : { provider: model.slice(0, separator), modelId: model.slice(separator + 1) };
+};
+/** Converts Pi's credential check, with `subscription` set if the OAuth login is a subscription; returns `undefined` if Pi found no credential. */
+export const piAuthentication = (check, subscription) => check?.type === "api_key"
+    ? { _tag: "ApiKey" }
+    : check?.type === "oauth"
+        ? { _tag: "OAuth", subscription }
+        : undefined;
+/** Returns the billing pool that a Pi provider requires; checked before launch. */
 export const requiredPiPool = (provider) => provider === "openai-codex" ? "chatgptPlan" : "apiKeys";
-/** Returns the billing pool of the credential that pays for the model request. */
+/** Returns the billing pool of the credential used for the model request, or `undefined` if it is neither an API key nor a subscription login to `openai-codex`. */
 export const resolvePiPool = (provider, authentication) => {
     if (authentication?._tag === "ApiKey")
         return "apiKeys";

package/dist/pi/authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../src/pi/authentication.ts"],"names":[],"mappings":"AAOA,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAU,EAAE,CACzD,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AAE1D,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,QAAgB,EAChB,cAA4C,EACxB,EAAE;IACtB,IAAI,cAAc,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,IACE,cAAc,EAAE,IAAI,KAAK,OAAO;QAChC,cAAc,CAAC,YAAY;QAC3B,QAAQ,KAAK,cAAc,EAC3B,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC"}
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../src/pi/authentication.ts"],"names":[],"mappings":"AAOA,qGAAqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAa,EACwD,EAAE;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,SAAS,IAAI,CAAC,IAAI,SAAS,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QACrD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC,CAAC;AAEF,mJAAmJ;AACnJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAyD,EACzD,YAAqB,EACS,EAAE,CAChC,KAAK,EAAE,IAAI,KAAK,SAAS;IACvB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;IACpB,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO;QACvB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE;QACjC,CAAC,CAAC,SAAS,CAAC;AAElB,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAU,EAAE,CACzD,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AAE1D,oKAAoK;AACpK,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,QAAgB,EAChB,cAA4C,EACxB,EAAE;IACtB,IAAI,cAAc,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,IACE,cAAc,EAAE,IAAI,KAAK,OAAO;QAChC,cAAc,CAAC,YAAY;QAC3B,QAAQ,KAAK,cAAc,EAC3B,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC"}

package/dist/pi/children.d.ts

@@ -1,8 +1,5 @@
 import { Layer } from "effect";
 import { ChildBackend, ClaudeChildBackend, CodexChildBackend, PiChildBackend } from "../runtime.ts";
-/**
- * Selects Claude Code, Codex, or Pi for each delegated task from the Agent's harness.
- * Supply the three backend layers here, or use a concrete backend directly.
- */
+/** Dispatches each delegated task to the Claude Code, Codex, or Pi backend according to the Agent's harness; requires all three backend layers. */
 export declare const childDispatcherLayer: Layer.Layer<ChildBackend, never, ClaudeChildBackend | CodexChildBackend | PiChildBackend>;
 //# sourceMappingURL=children.d.ts.map

package/dist/pi/children.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/pi/children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAyBpG;;;GAGG;AACH,eAAO,MAAM,oBAAoB,2FAAkD,CAAC"}
+{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/pi/children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAyBpG,mJAAmJ;AACnJ,eAAO,MAAM,oBAAoB,2FAAkD,CAAC"}

package/dist/pi/children.js

@@ -21,9 +21,6 @@ const makeChildDispatcher = Effect.gen(function* () {
         }),
     });
 });
-/**
- * Selects Claude Code, Codex, or Pi for each delegated task from the Agent's harness.
- * Supply the three backend layers here, or use a concrete backend directly.
- */
+/** Dispatches each delegated task to the Claude Code, Codex, or Pi backend according to the Agent's harness; requires all three backend layers. */
 export const childDispatcherLayer = Layer.effect(ChildBackend, makeChildDispatcher);
 //# sourceMappingURL=children.js.map

package/dist/pi/children.js.map

@@ -1 +1 @@
-{"version":3,"file":"children.js","sourceRoot":"","sources":["../../src/pi/children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpG,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACvC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IAEjC,OAAO,YAAY,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO;YACzD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE;gBAClD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACtC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;aAC9B,CAAC,CAAC;YACH,QAAQ,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtC,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,KAAK,OAAO;oBACV,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtC,KAAK,IAAI;oBACP,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"children.js","sourceRoot":"","sources":["../../src/pi/children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpG,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACvC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IAEjC,OAAO,YAAY,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO;YACzD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE;gBAClD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACtC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;aAC9B,CAAC,CAAC;YACH,QAAQ,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtC,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,KAAK,OAAO;oBACV,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtC,KAAK,IAAI;oBACP,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mJAAmJ;AACnJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC"}

package/dist/pi/claude.d.ts

@@ -1,6 +1,6 @@
 import { type Options } from "@anthropic-ai/claude-agent-sdk";
 import { Context, Layer, Schema } from "effect";
-import { ClaudeChildBackend, ChildBackend } from "../runtime.ts";
+import { ClaudeChildBackend, ClaudeLoginLock, ChildBackend } from "../runtime.ts";
 export interface ClaudeUserMessage {
     readonly type: "user";
     readonly message: {
@@ -9,12 +9,12 @@ export interface ClaudeUserMessage {
     };
     readonly parent_tool_use_id: null;
 }
-export type ClaudeQueryOptions = Pick<Options, "allowDangerouslySkipPermissions" | "cwd" | "effort" | "model" | "pathToClaudeCodeExecutable" | "permissionMode" | "persistSession" | "settingSources" | "thinking" | "hooks">;
+export type ClaudeQueryOptions = Pick<Options, "allowDangerouslySkipPermissions" | "cwd" | "effort" | "env" | "model" | "pathToClaudeCodeExecutable" | "permissionMode" | "persistSession" | "settingSources" | "spawnClaudeCodeProcess" | "thinking" | "hooks">;
 export interface ClaudeModelInfo {
     readonly value: string;
     readonly resolvedModel?: string;
 }
-/** A live Claude Code session with its messages, model discovery, and stop controls. */
+/** A running Claude Code session: its message stream, model list, and stop controls. */
 export interface ClaudeQuery extends AsyncIterable<Schema.Json> {
     readonly close: () => void;
     readonly interrupt: () => Promise<void>;
@@ -23,14 +23,13 @@ export interface ClaudeQuery extends AsyncIterable<Schema.Json> {
 declare const ClaudeSdk_base: Context.ServiceClass<ClaudeSdk, "@usine/agents/pi/ClaudeSdk", {
     readonly open: (input: AsyncIterable<ClaudeUserMessage>, options: ClaudeQueryOptions) => ClaudeQuery;
 }>;
-/** Opens Claude Code sessions with the supplied task input and session settings. */
+/** The service that opens Claude Code sessions. */
 export declare class ClaudeSdk extends ClaudeSdk_base {
 }
-/** Provides Claude Code's session creation and model discovery. */
 export declare const claudeSdkLive: Layer.Layer<ClaudeSdk, never, never>;
-/** Uses Claude Code for every task delegated through `ChildBackend`. */
-export declare const claudeChildLayer: Layer.Layer<ChildBackend, never, ClaudeSdk>;
-/** Provides the Claude Code backend for direct use or harness-based dispatch. */
-export declare const claudeChildBackendLayer: Layer.Layer<ClaudeChildBackend, never, ClaudeSdk>;
+/** Provides `ChildBackend` with Claude Code for every delegated task. */
+export declare const claudeChildLayer: Layer.Layer<ChildBackend, never, ClaudeLoginLock | ClaudeSdk>;
+/** Provides `ClaudeChildBackend` for direct use or harness-based dispatch. */
+export declare const claudeChildBackendLayer: Layer.Layer<ClaudeChildBackend, never, ClaudeLoginLock | ClaudeSdk>;
 export {};
 //# sourceMappingURL=claude.d.ts.map

package/dist/pi/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/pi/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,OAAO,EAIb,MAAM,gCAAgC,CAAC;AAaxC,OAAO,EAAE,OAAO,EAA2B,KAAK,EAAe,MAAM,EAAU,MAAM,QAAQ,CAAC;AAC9F,OAAO,EAEL,kBAAkB,EAClB,YAAY,EAKb,MAAM,eAAe,CAAC;AAKvB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,OAAO,EACL,iCAAiC,GACjC,KAAK,GACL,QAAQ,GACR,OAAO,GACP,4BAA4B,GAC5B,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,UAAU,GACV,OAAO,CACV,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,wFAAwF;AACxF,MAAM,WAAW,WAAY,SAAQ,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC;CACzE;;mBAMkB,CACb,KAAK,EAAE,aAAa,CAAC,iBAAiB,CAAC,EACvC,OAAO,EAAE,kBAAkB,KACxB,WAAW;;AAPpB,oFAAoF;AACpF,qBAAa,SAAU,SAAQ,cAQE;CAAG;AAOpC,mEAAmE;AACnE,eAAO,MAAM,aAAa,sCAexB,CAAC;AA0VH,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,6CAA8C,CAAC;AAC5E,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,mDAAoD,CAAC"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/pi/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,OAAO,EAMb,MAAM,gCAAgC,CAAC;AAiBxC,OAAO,EAEL,OAAO,EAMP,KAAK,EAKL,MAAM,EAGP,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,kBAAkB,EAClB,eAAe,EACf,YAAY,EAKb,MAAM,eAAe,CAAC;AAMvB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,OAAO,EACL,iCAAiC,GACjC,KAAK,GACL,QAAQ,GACR,KAAK,GACL,OAAO,GACP,4BAA4B,GAC5B,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,wBAAwB,GACxB,UAAU,GACV,OAAO,CACV,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,wFAAwF;AACxF,MAAM,WAAW,WAAY,SAAQ,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC;CACzE;;mBAMkB,CACb,KAAK,EAAE,aAAa,CAAC,iBAAiB,CAAC,EACvC,OAAO,EAAE,kBAAkB,KACxB,WAAW;;AAPpB,mDAAmD;AACnD,qBAAa,SAAU,SAAQ,cAQE;CAAG;AAOpC,eAAO,MAAM,aAAa,sCAexB,CAAC;AAsvBH,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,+DAA8C,CAAC;AAC5E,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,qEAAoD,CAAC"}