@warlock.js/ai-cli 0.0.0-stage → 5.31.0

package/esm/model/cli-model.d.mts

@@ -0,0 +1,48 @@
+import { CliUsage } from "../contracts/events.type.mjs";
+import { CliRunOptions } from "../contracts/options.type.mjs";
+import { CliAgent } from "../cli-agent.mjs";
+import { Message, ModelContract, ModelPricing, Usage } from "@warlock.js/ai";
+
+//#region ../../packages/ai-cli/src/model/cli-model.d.ts
+/** Configuration of a CLI-backed model. Run options apply to every call. */
+type CliModelConfig = CliRunOptions & {
+  /** Model name reported to the agent, reports and observers. Default: `model`, else the adapter name. */name?: string; /** Per-million-token pricing, so the agent computes `Usage.cost` (and USD budgets apply). */
+  pricing?: ModelPricing;
+};
+/**
+ * Render an agent conversation into one CLI prompt. System messages become
+ * a leading instruction block; a single user turn is passed as-is; a longer
+ * history is rendered as a labelled transcript ending with the latest turn.
+ *
+ * @example
+ * renderPrompt([{ role: "system", content: "Be brief." }, { role: "user", content: "Hi" }], "codex");
+ * // "Be brief.\n\nHi"
+ */
+declare function renderPrompt(messages: Message[], adapter: string): string;
+/** Map CLI usage to the framework `Usage` (zeros when the CLI reported none). */
+declare function toUsage(usage: CliUsage | undefined): Usage;
+/**
+ * A `ModelContract` backed by a CLI agent, so `ai.agent({ model })` — and
+ * its budget, guardrail, observer and fallback middleware — can drive a
+ * coding CLI.
+ *
+ * Each call is one fresh CLI session: the conversation is rendered into a
+ * single prompt (see {@link renderPrompt}) and the session's final answer
+ * becomes the response. The CLI runs its own tools; framework tools cannot
+ * be handed to it this way (give the CLI MCP servers with `mcp` instead),
+ * so a call carrying `tools` is refused. `stream()` yields the final answer
+ * once the session ends — read `session.events` from `agent.run()` for live
+ * progress.
+ *
+ * @example
+ * const coder = cli.codex({ cwd: "/srv/repo" });
+ * const reviewer = ai.agent({
+ *   model: cliModel(coder, { name: "codex" }),
+ *   middleware: [budget({ maxTokens: 200_000 })],
+ * });
+ * const { text } = await reviewer.execute("Review the last commit.");
+ */
+declare function cliModel(agent: CliAgent, config?: CliModelConfig): ModelContract;
+//#endregion
+export { CliModelConfig, cliModel, renderPrompt, toUsage };
+//# sourceMappingURL=cli-model.d.mts.map

package/esm/model/cli-model.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-model.d.mts","names":[],"sources":["../../../../../../../../packages/ai-cli/src/model/cli-model.ts"],"mappings":";;;;;;;KAeY,cAAA,GAAiB,aAAA;0GAE3B,IAAA,WAFU;EAIV,OAAA,GAAU,YAAY;AAAA;;;;;;;AAAA;AAgCxB;;iBAAgB,YAAA,CAAa,QAAA,EAAU,OAAO,IAAI,OAAA;;iBA2BlC,OAAA,CAAQ,KAAA,EAAO,QAAA,eAAuB,KAAK;;;;AA3BM;AA2BjE;;;;;;;;AAA2D;AA2C3D;;;;;;;;iBAAgB,QAAA,CAAS,KAAA,EAAO,QAAA,EAAU,MAAA,GAAQ,cAAA,GAAsB,aAAA"}

package/esm/model/cli-model.mjs

@@ -0,0 +1,133 @@
+import { CliError } from "../errors.mjs";
+
+//#region ../../packages/ai-cli/src/model/cli-model.ts
+/** The text of one message; CLI models accept text only. */
+function messageText(message, adapter) {
+	if (typeof message.content === "string") return message.content;
+	return message.content.map((part) => {
+		if (part.type !== "text") throw new CliError(`${adapter}: CLI models accept text only; a "${part.type}" attachment cannot be passed to the CLI.`, {
+			type: "unsupported-option",
+			adapter
+		});
+		return part.text;
+	}).join("\n");
+}
+/**
+* Render an agent conversation into one CLI prompt. System messages become
+* a leading instruction block; a single user turn is passed as-is; a longer
+* history is rendered as a labelled transcript ending with the latest turn.
+*
+* @example
+* renderPrompt([{ role: "system", content: "Be brief." }, { role: "user", content: "Hi" }], "codex");
+* // "Be brief.\n\nHi"
+*/
+function renderPrompt(messages, adapter) {
+	const system = messages.filter((message) => message.role === "system").map((message) => messageText(message, adapter).trim()).filter((text) => text.length > 0);
+	const turns = messages.filter((message) => message.role !== "system");
+	const only = turns.length === 1 ? turns[0] : void 0;
+	const body = only !== void 0 && only.role === "user" ? messageText(only, adapter) : turns.map((message) => {
+		return `${message.role === "user" ? "User" : message.role === "assistant" ? "Assistant" : `Tool result${message.toolCallId ? ` (${message.toolCallId})` : ""}`}:\n${messageText(message, adapter)}`;
+	}).join("\n\n");
+	return [...system, body].filter((part) => part.length > 0).join("\n\n");
+}
+/** Map CLI usage to the framework `Usage` (zeros when the CLI reported none). */
+function toUsage(usage) {
+	if (usage === void 0) return {
+		input: 0,
+		output: 0,
+		total: 0
+	};
+	const mapped = {
+		input: usage.input,
+		output: usage.output,
+		total: usage.total
+	};
+	if (usage.cachedTokens !== void 0) mapped.cachedTokens = usage.cachedTokens;
+	if (usage.cacheWriteTokens !== void 0) mapped.cacheWriteTokens = usage.cacheWriteTokens;
+	if (usage.reasoningTokens !== void 0) mapped.reasoningTokens = usage.reasoningTokens;
+	return mapped;
+}
+function abortError(message) {
+	const error = new Error(message);
+	error.name = "AbortError";
+	return error;
+}
+/**
+* A `ModelContract` backed by a CLI agent, so `ai.agent({ model })` — and
+* its budget, guardrail, observer and fallback middleware — can drive a
+* coding CLI.
+*
+* Each call is one fresh CLI session: the conversation is rendered into a
+* single prompt (see {@link renderPrompt}) and the session's final answer
+* becomes the response. The CLI runs its own tools; framework tools cannot
+* be handed to it this way (give the CLI MCP servers with `mcp` instead),
+* so a call carrying `tools` is refused. `stream()` yields the final answer
+* once the session ends — read `session.events` from `agent.run()` for live
+* progress.
+*
+* @example
+* const coder = cli.codex({ cwd: "/srv/repo" });
+* const reviewer = ai.agent({
+*   model: cliModel(coder, { name: "codex" }),
+*   middleware: [budget({ maxTokens: 200_000 })],
+* });
+* const { text } = await reviewer.execute("Review the last commit.");
+*/
+function cliModel(agent, config = {}) {
+	const { adapter } = agent;
+	const capabilities = { reasoning: adapter.effort === true };
+	const execute = async (messages, options = {}) => {
+		if (options.tools !== void 0 && options.tools.length > 0) throw new CliError(`${adapter.title}: a CLI model runs the CLI's own tools; pass framework tools to the CLI as MCP servers (\`mcp\`) instead of agent \`tools\`.`, {
+			type: "unsupported-option",
+			adapter: adapter.name
+		});
+		const { name: _name, pricing: _pricing, ...runDefaults } = config;
+		const effort = options.reasoning?.effort;
+		const result = await (await agent.run(renderPrompt(messages, adapter.name), {
+			...runDefaults,
+			signal: options.signal ?? runDefaults.signal,
+			effort: adapter.effort === true && effort !== void 0 ? effort : runDefaults.effort
+		})).done();
+		if (result.status === "cancelled") throw abortError(result.error ?? `${adapter.name} run was cancelled`);
+		if (result.status !== "completed") throw new CliError(`${adapter.title}: ${result.error ?? `run ${result.status}`}`, {
+			type: "run-failed",
+			adapter: adapter.name,
+			context: {
+				status: result.status,
+				exitCode: result.exitCode,
+				sessionRef: result.sessionRef
+			}
+		});
+		return result;
+	};
+	return {
+		name: config.name ?? config.model ?? agent.options.model ?? adapter.name,
+		provider: adapter.name,
+		capabilities,
+		pricing: config.pricing,
+		async complete(messages, options) {
+			const result = await execute(messages, options);
+			return {
+				content: result.text,
+				finishReason: "stop",
+				usage: toUsage(result.usage)
+			};
+		},
+		async *stream(messages, options) {
+			const result = await execute(messages, options);
+			if (result.text.length > 0) yield {
+				type: "delta",
+				content: result.text
+			};
+			yield {
+				type: "done",
+				finishReason: "stop",
+				usage: toUsage(result.usage)
+			};
+		}
+	};
+}
+
+//#endregion
+export { cliModel, renderPrompt, toUsage };
+//# sourceMappingURL=cli-model.mjs.map

package/esm/model/cli-model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-model.mjs","names":[],"sources":["../../../../../../../../packages/ai-cli/src/model/cli-model.ts"],"sourcesContent":["import type {\n  Message,\n  ModelCallOptions,\n  ModelCapabilities,\n  ModelContract,\n  ModelPricing,\n  ModelResponse,\n  ModelStreamChunk,\n  Usage,\n} from \"@warlock.js/ai\";\nimport type { CliAgent } from \"../cli-agent\";\nimport type { CliResult, CliRunOptions, CliUsage } from \"../contracts\";\nimport { CliError } from \"../errors\";\n\n/** Configuration of a CLI-backed model. Run options apply to every call. */\nexport type CliModelConfig = CliRunOptions & {\n  /** Model name reported to the agent, reports and observers. Default: `model`, else the adapter name. */\n  name?: string;\n  /** Per-million-token pricing, so the agent computes `Usage.cost` (and USD budgets apply). */\n  pricing?: ModelPricing;\n};\n\n/** The text of one message; CLI models accept text only. */\nfunction messageText(message: Message, adapter: string): string {\n  if (typeof message.content === \"string\") {\n    return message.content;\n  }\n\n  return message.content\n    .map((part) => {\n      if (part.type !== \"text\") {\n        throw new CliError(\n          `${adapter}: CLI models accept text only; a \"${part.type}\" attachment cannot be passed to the CLI.`,\n          { type: \"unsupported-option\", adapter },\n        );\n      }\n\n      return part.text;\n    })\n    .join(\"\\n\");\n}\n\n/**\n * Render an agent conversation into one CLI prompt. System messages become\n * a leading instruction block; a single user turn is passed as-is; a longer\n * history is rendered as a labelled transcript ending with the latest turn.\n *\n * @example\n * renderPrompt([{ role: \"system\", content: \"Be brief.\" }, { role: \"user\", content: \"Hi\" }], \"codex\");\n * // \"Be brief.\\n\\nHi\"\n */\nexport function renderPrompt(messages: Message[], adapter: string): string {\n  const system = messages\n    .filter((message) => message.role === \"system\")\n    .map((message) => messageText(message, adapter).trim())\n    .filter((text) => text.length > 0);\n  const turns = messages.filter((message) => message.role !== \"system\");\n  const only = turns.length === 1 ? turns[0] : undefined;\n  const body =\n    only !== undefined && only.role === \"user\"\n      ? messageText(only, adapter)\n      : turns\n          .map((message) => {\n            const label =\n              message.role === \"user\"\n                ? \"User\"\n                : message.role === \"assistant\"\n                  ? \"Assistant\"\n                  : `Tool result${message.toolCallId ? ` (${message.toolCallId})` : \"\"}`;\n\n            return `${label}:\\n${messageText(message, adapter)}`;\n          })\n          .join(\"\\n\\n\");\n\n  return [...system, body].filter((part) => part.length > 0).join(\"\\n\\n\");\n}\n\n/** Map CLI usage to the framework `Usage` (zeros when the CLI reported none). */\nexport function toUsage(usage: CliUsage | undefined): Usage {\n  if (usage === undefined) {\n    return { input: 0, output: 0, total: 0 };\n  }\n\n  const mapped: Usage = { input: usage.input, output: usage.output, total: usage.total };\n\n  if (usage.cachedTokens !== undefined) mapped.cachedTokens = usage.cachedTokens;\n  if (usage.cacheWriteTokens !== undefined) mapped.cacheWriteTokens = usage.cacheWriteTokens;\n  if (usage.reasoningTokens !== undefined) mapped.reasoningTokens = usage.reasoningTokens;\n\n  return mapped;\n}\n\nfunction abortError(message: string): Error {\n  const error = new Error(message);\n\n  error.name = \"AbortError\";\n\n  return error;\n}\n\n/**\n * A `ModelContract` backed by a CLI agent, so `ai.agent({ model })` — and\n * its budget, guardrail, observer and fallback middleware — can drive a\n * coding CLI.\n *\n * Each call is one fresh CLI session: the conversation is rendered into a\n * single prompt (see {@link renderPrompt}) and the session's final answer\n * becomes the response. The CLI runs its own tools; framework tools cannot\n * be handed to it this way (give the CLI MCP servers with `mcp` instead),\n * so a call carrying `tools` is refused. `stream()` yields the final answer\n * once the session ends — read `session.events` from `agent.run()` for live\n * progress.\n *\n * @example\n * const coder = cli.codex({ cwd: \"/srv/repo\" });\n * const reviewer = ai.agent({\n *   model: cliModel(coder, { name: \"codex\" }),\n *   middleware: [budget({ maxTokens: 200_000 })],\n * });\n * const { text } = await reviewer.execute(\"Review the last commit.\");\n */\nexport function cliModel(agent: CliAgent, config: CliModelConfig = {}): ModelContract {\n  const { adapter } = agent;\n  const capabilities: ModelCapabilities = { reasoning: adapter.effort === true };\n\n  const execute = async (\n    messages: Message[],\n    options: ModelCallOptions = {},\n  ): Promise<CliResult> => {\n    if (options.tools !== undefined && options.tools.length > 0) {\n      throw new CliError(\n        `${adapter.title}: a CLI model runs the CLI's own tools; pass framework tools to the CLI as MCP servers (\\`mcp\\`) instead of agent \\`tools\\`.`,\n        { type: \"unsupported-option\", adapter: adapter.name },\n      );\n    }\n\n    const { name: _name, pricing: _pricing, ...runDefaults } = config;\n    const effort = options.reasoning?.effort;\n    const session = await agent.run(renderPrompt(messages, adapter.name), {\n      ...runDefaults,\n      signal: options.signal ?? runDefaults.signal,\n      effort: adapter.effort === true && effort !== undefined ? effort : runDefaults.effort,\n    });\n    const result = await session.done();\n\n    if (result.status === \"cancelled\") {\n      throw abortError(result.error ?? `${adapter.name} run was cancelled`);\n    }\n\n    if (result.status !== \"completed\") {\n      throw new CliError(`${adapter.title}: ${result.error ?? `run ${result.status}`}`, {\n        type: \"run-failed\",\n        adapter: adapter.name,\n        context: {\n          status: result.status,\n          exitCode: result.exitCode,\n          sessionRef: result.sessionRef,\n        },\n      });\n    }\n\n    return result;\n  };\n\n  return {\n    name: config.name ?? config.model ?? agent.options.model ?? adapter.name,\n    provider: adapter.name,\n    capabilities,\n    pricing: config.pricing,\n    async complete(messages: Message[], options?: ModelCallOptions): Promise<ModelResponse> {\n      const result = await execute(messages, options);\n\n      return { content: result.text, finishReason: \"stop\", usage: toUsage(result.usage) };\n    },\n    async *stream(\n      messages: Message[],\n      options?: ModelCallOptions,\n    ): AsyncIterable<ModelStreamChunk> {\n      const result = await execute(messages, options);\n\n      if (result.text.length > 0) {\n        yield { type: \"delta\", content: result.text };\n      }\n\n      yield { type: \"done\", finishReason: \"stop\", usage: toUsage(result.usage) };\n    },\n  };\n}\n"],"mappings":";;;;AAuBA,SAAS,YAAY,SAAkB,SAAyB;CAC9D,IAAI,OAAO,QAAQ,YAAY,UAC7B,OAAO,QAAQ;CAGjB,OAAO,QAAQ,QACZ,KAAK,SAAS;EACb,IAAI,KAAK,SAAS,QAChB,MAAM,IAAI,SACR,GAAG,QAAQ,oCAAoC,KAAK,KAAK,4CACzD;GAAE,MAAM;GAAsB;EAAQ,CACxC;EAGF,OAAO,KAAK;CACd,CAAC,CAAC,CACD,KAAK,IAAI;AACd;;;;;;;;;;AAWA,SAAgB,aAAa,UAAqB,SAAyB;CACzE,MAAM,SAAS,SACZ,QAAQ,YAAY,QAAQ,SAAS,QAAQ,CAAC,CAC9C,KAAK,YAAY,YAAY,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CACtD,QAAQ,SAAS,KAAK,SAAS,CAAC;CACnC,MAAM,QAAQ,SAAS,QAAQ,YAAY,QAAQ,SAAS,QAAQ;CACpE,MAAM,OAAO,MAAM,WAAW,IAAI,MAAM,KAAK;CAC7C,MAAM,OACJ,SAAS,UAAa,KAAK,SAAS,SAChC,YAAY,MAAM,OAAO,IACzB,MACG,KAAK,YAAY;EAQhB,OAAO,GANL,QAAQ,SAAS,SACb,SACA,QAAQ,SAAS,cACf,cACA,cAAc,QAAQ,aAAa,KAAK,QAAQ,WAAW,KAAK,KAExD,KAAK,YAAY,SAAS,OAAO;CACnD,CAAC,CAAC,CACD,KAAK,MAAM;CAEpB,OAAO,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM;AACxE;;AAGA,SAAgB,QAAQ,OAAoC;CAC1D,IAAI,UAAU,QACZ,OAAO;EAAE,OAAO;EAAG,QAAQ;EAAG,OAAO;CAAE;CAGzC,MAAM,SAAgB;EAAE,OAAO,MAAM;EAAO,QAAQ,MAAM;EAAQ,OAAO,MAAM;CAAM;CAErF,IAAI,MAAM,iBAAiB,QAAW,OAAO,eAAe,MAAM;CAClE,IAAI,MAAM,qBAAqB,QAAW,OAAO,mBAAmB,MAAM;CAC1E,IAAI,MAAM,oBAAoB,QAAW,OAAO,kBAAkB,MAAM;CAExE,OAAO;AACT;AAEA,SAAS,WAAW,SAAwB;CAC1C,MAAM,QAAQ,IAAI,MAAM,OAAO;CAE/B,MAAM,OAAO;CAEb,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,SAAS,OAAiB,SAAyB,CAAC,GAAkB;CACpF,MAAM,EAAE,YAAY;CACpB,MAAM,eAAkC,EAAE,WAAW,QAAQ,WAAW,KAAK;CAE7E,MAAM,UAAU,OACd,UACA,UAA4B,CAAC,MACN;EACvB,IAAI,QAAQ,UAAU,UAAa,QAAQ,MAAM,SAAS,GACxD,MAAM,IAAI,SACR,GAAG,QAAQ,MAAM,+HACjB;GAAE,MAAM;GAAsB,SAAS,QAAQ;EAAK,CACtD;EAGF,MAAM,EAAE,MAAM,OAAO,SAAS,UAAU,GAAG,gBAAgB;EAC3D,MAAM,SAAS,QAAQ,WAAW;EAMlC,MAAM,SAAS,OAAM,MALC,MAAM,IAAI,aAAa,UAAU,QAAQ,IAAI,GAAG;GACpE,GAAG;GACH,QAAQ,QAAQ,UAAU,YAAY;GACtC,QAAQ,QAAQ,WAAW,QAAQ,WAAW,SAAY,SAAS,YAAY;EACjF,CAAC,EAC2B,CAAC,KAAK;EAElC,IAAI,OAAO,WAAW,aACpB,MAAM,WAAW,OAAO,SAAS,GAAG,QAAQ,KAAK,mBAAmB;EAGtE,IAAI,OAAO,WAAW,aACpB,MAAM,IAAI,SAAS,GAAG,QAAQ,MAAM,IAAI,OAAO,SAAS,OAAO,OAAO,YAAY;GAChF,MAAM;GACN,SAAS,QAAQ;GACjB,SAAS;IACP,QAAQ,OAAO;IACf,UAAU,OAAO;IACjB,YAAY,OAAO;GACrB;EACF,CAAC;EAGH,OAAO;CACT;CAEA,OAAO;EACL,MAAM,OAAO,QAAQ,OAAO,SAAS,MAAM,QAAQ,SAAS,QAAQ;EACpE,UAAU,QAAQ;EAClB;EACA,SAAS,OAAO;EAChB,MAAM,SAAS,UAAqB,SAAoD;GACtF,MAAM,SAAS,MAAM,QAAQ,UAAU,OAAO;GAE9C,OAAO;IAAE,SAAS,OAAO;IAAM,cAAc;IAAQ,OAAO,QAAQ,OAAO,KAAK;GAAE;EACpF;EACA,OAAO,OACL,UACA,SACiC;GACjC,MAAM,SAAS,MAAM,QAAQ,UAAU,OAAO;GAE9C,IAAI,OAAO,KAAK,SAAS,GACvB,MAAM;IAAE,MAAM;IAAS,SAAS,OAAO;GAAK;GAG9C,MAAM;IAAE,MAAM;IAAQ,cAAc;IAAQ,OAAO,QAAQ,OAAO,KAAK;GAAE;EAC3E;CACF;AACF"}

package/esm/probe/probe.d.mts

@@ -0,0 +1,18 @@
+//#region ../../packages/ai-cli/src/probe/probe.d.ts
+/**
+ * Whether a help screen lists a flag or subcommand. Flags (`--json`, `-p`)
+ * must appear as a whole token — `--json` does not match `--json-schema`;
+ * a bare word (`exec`) is matched as a whole word.
+ *
+ * @example
+ * helpLists("  -p, --print  Print response", "--print"); // true
+ * helpLists("  --output-format <format>", "--output"); // false
+ */
+declare function helpLists(help: string, flag: string): boolean;
+/** The first version-looking token of `--version` output, else its first line. */
+declare function parseVersion(output: string): string;
+/** Flags a plan requires that the help screen does not list. */
+declare function missingFlags(help: string, required: readonly string[]): string[];
+//#endregion
+export { helpLists, missingFlags, parseVersion };
+//# sourceMappingURL=probe.d.mts.map

package/esm/probe/probe.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.mts","names":[],"sources":["../../../../../../../../packages/ai-cli/src/probe/probe.ts"],"mappings":";;;;AA0BoD;AAapD;;;;AAA2C;iBAb3B,SAAA,CAAU,IAAA,UAAc,IAAY;;iBAapC,YAAA,CAAa,MAAc;;iBAa3B,YAAA,CAAa,IAAA,UAAc,QAA2B"}

package/esm/probe/probe.mjs

@@ -0,0 +1,148 @@
+import { CliError } from "../errors.mjs";
+import { killProcessTree } from "../spawn/process-tree.mjs";
+import { buildInvocation } from "../spawn/invocation.mjs";
+import { spawn } from "node:child_process";
+
+//#region ../../packages/ai-cli/src/probe/probe.ts
+/** How long a single `--help`/`--version` call may take. */
+const PROBE_TIMEOUT_MS = 3e4;
+/** Output cap per probe call; help screens are a few KiB. */
+const PROBE_OUTPUT_LIMIT = 1024 * 1024;
+function escapeRegExp(text) {
+	return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/**
+* Whether a help screen lists a flag or subcommand. Flags (`--json`, `-p`)
+* must appear as a whole token — `--json` does not match `--json-schema`;
+* a bare word (`exec`) is matched as a whole word.
+*
+* @example
+* helpLists("  -p, --print  Print response", "--print"); // true
+* helpLists("  --output-format <format>", "--output"); // false
+*/
+function helpLists(help, flag) {
+	const escaped = escapeRegExp(flag);
+	if (flag.startsWith("-")) return new RegExp(`(^|[\\s,\\[(|/"'\`])${escaped}(?=$|[\\s,=\\])|<\\[.:;"'\`])`, "m").test(help);
+	return new RegExp(`(^|[^\\w-])${escaped}(?=$|[^\\w-])`, "m").test(help);
+}
+/** The first version-looking token of `--version` output, else its first line. */
+function parseVersion(output) {
+	const match = /\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?/.exec(output);
+	if (match) return match[0];
+	const firstLine = output.trim().split(/\r?\n/)[0]?.trim();
+	return firstLine && firstLine.length > 0 ? firstLine : "unknown";
+}
+/** Flags a plan requires that the help screen does not list. */
+function missingFlags(help, required) {
+	return required.filter((flag) => !helpLists(help, flag));
+}
+/** Run a probe invocation and capture stdout + stderr (help is printed to either). */
+function capture(input) {
+	return new Promise((resolve) => {
+		const invocation = buildInvocation(input.target, input.args, input.comspec);
+		if ("refused" in invocation) {
+			resolve({
+				output: "",
+				exitCode: null,
+				error: new Error(invocation.refused)
+			});
+			return;
+		}
+		const child = spawn(invocation.file, invocation.args, {
+			cwd: input.cwd,
+			env: input.env,
+			shell: false,
+			windowsHide: true,
+			windowsVerbatimArguments: invocation.windowsVerbatimArguments,
+			detached: input.platform !== "win32",
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		const chunks = [];
+		let size = 0;
+		let settled = false;
+		const collect = (chunk) => {
+			if (size < PROBE_OUTPUT_LIMIT) {
+				chunks.push(chunk);
+				size += chunk.length;
+			}
+		};
+		const timer = setTimeout(() => {
+			killProcessTree(child, input.platform, 0);
+		}, PROBE_TIMEOUT_MS);
+		const finish = (exitCode, error) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			resolve({
+				output: Buffer.concat(chunks).toString("utf8"),
+				exitCode,
+				error
+			});
+		};
+		child.stdout?.on("data", collect);
+		child.stderr?.on("data", collect);
+		child.on("error", (error) => finish(null, error));
+		child.on("close", (code) => finish(code));
+	});
+}
+/**
+* Read the CLI's version and help screens. A help invocation that cannot
+* run at all (spawn error, no output) fails the probe; a non-zero exit with
+* output is accepted, because several CLIs exit 1 after printing help.
+*/
+async function probeCli(input) {
+	const { adapter } = input;
+	const versionRun = await capture({
+		...input,
+		args: adapter.probe.version
+	});
+	if (versionRun.error !== void 0) throw new CliError(`${adapter.title}: could not run "${input.target.executable} ${adapter.probe.version.join(" ")}": ${versionRun.error.message}`, {
+		type: "probe-failed",
+		adapter: adapter.name,
+		executable: input.target.executable,
+		cause: versionRun.error
+	});
+	const version = parseVersion(versionRun.output);
+	const helps = [];
+	for (const args of adapter.probe.help) {
+		const helpRun = await capture({
+			...input,
+			args
+		});
+		if (helpRun.error !== void 0 || helpRun.output.trim().length === 0) throw new CliError(`${adapter.title} ${version}: "${input.target.executable} ${args.join(" ")}" printed no help` + (helpRun.error ? ` (${helpRun.error.message})` : "") + "; the capability probe cannot verify the flags this adapter needs.", {
+			type: "probe-failed",
+			adapter: adapter.name,
+			version,
+			executable: input.target.executable,
+			cause: helpRun.error
+		});
+		helps.push(helpRun.output);
+	}
+	return {
+		executable: input.target.executable,
+		version,
+		help: helps.join("\n")
+	};
+}
+/** Throw a `capability` error naming the first required flag the help does not list. */
+function assertCapabilities(adapter, probe, required) {
+	const missing = missingFlags(probe.help, required);
+	const flag = missing[0];
+	if (flag === void 0) return;
+	const helpCommands = adapter.probe.help.map((args) => `${adapter.command} ${args.join(" ")}`).join(", ");
+	throw new CliError(`${adapter.title} ${probe.version} (${probe.executable}) does not support ${missing.join(", ")}: not listed in "${helpCommands}". This adapter was verified against ${adapter.title} ${adapter.verification.version}; install a compatible version or drop the option that needs ${flag}.`, {
+		type: "capability",
+		adapter: adapter.name,
+		flag,
+		version: probe.version,
+		executable: probe.executable
+	});
+}
+
+//#endregion
+export { assertCapabilities, helpLists, missingFlags, parseVersion, probeCli };
+//# sourceMappingURL=probe.mjs.map

package/esm/probe/probe.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.mjs","names":[],"sources":["../../../../../../../../packages/ai-cli/src/probe/probe.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport type { CliAdapter, CliProbeResult } from \"../contracts\";\nimport { CliError } from \"../errors\";\nimport { killProcessTree } from \"../spawn/process-tree\";\nimport { buildInvocation } from \"../spawn/invocation\";\nimport type { SpawnTarget } from \"../spawn/resolve-command\";\n\n/** How long a single `--help`/`--version` call may take. */\nexport const PROBE_TIMEOUT_MS = 30_000;\n\n/** Output cap per probe call; help screens are a few KiB. */\nconst PROBE_OUTPUT_LIMIT = 1024 * 1024;\n\nfunction escapeRegExp(text: string): string {\n  return text.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\n/**\n * Whether a help screen lists a flag or subcommand. Flags (`--json`, `-p`)\n * must appear as a whole token — `--json` does not match `--json-schema`;\n * a bare word (`exec`) is matched as a whole word.\n *\n * @example\n * helpLists(\"  -p, --print  Print response\", \"--print\"); // true\n * helpLists(\"  --output-format <format>\", \"--output\"); // false\n */\nexport function helpLists(help: string, flag: string): boolean {\n  const escaped = escapeRegExp(flag);\n\n  if (flag.startsWith(\"-\")) {\n    return new RegExp(`(^|[\\\\s,\\\\[(|/\"'\\`])${escaped}(?=$|[\\\\s,=\\\\])|<\\\\[.:;\"'\\`])`, \"m\").test(\n      help,\n    );\n  }\n\n  return new RegExp(`(^|[^\\\\w-])${escaped}(?=$|[^\\\\w-])`, \"m\").test(help);\n}\n\n/** The first version-looking token of `--version` output, else its first line. */\nexport function parseVersion(output: string): string {\n  const match = /\\d+\\.\\d+(?:\\.\\d+)?(?:[-+][0-9A-Za-z.-]+)?/.exec(output);\n\n  if (match) {\n    return match[0];\n  }\n\n  const firstLine = output.trim().split(/\\r?\\n/)[0]?.trim();\n\n  return firstLine && firstLine.length > 0 ? firstLine : \"unknown\";\n}\n\n/** Flags a plan requires that the help screen does not list. */\nexport function missingFlags(help: string, required: readonly string[]): string[] {\n  return required.filter((flag) => !helpLists(help, flag));\n}\n\ntype CaptureInput = {\n  target: SpawnTarget;\n  args: string[];\n  env: Record<string, string>;\n  cwd: string;\n  comspec: string;\n  platform: NodeJS.Platform;\n};\n\n/** Run a probe invocation and capture stdout + stderr (help is printed to either). */\nfunction capture(\n  input: CaptureInput,\n): Promise<{ output: string; exitCode: number | null; error?: Error }> {\n  return new Promise((resolve) => {\n    const invocation = buildInvocation(input.target, input.args, input.comspec);\n\n    if (\"refused\" in invocation) {\n      resolve({ output: \"\", exitCode: null, error: new Error(invocation.refused) });\n\n      return;\n    }\n\n    const child = spawn(invocation.file, invocation.args, {\n      cwd: input.cwd,\n      env: input.env,\n      shell: false,\n      windowsHide: true,\n      windowsVerbatimArguments: invocation.windowsVerbatimArguments,\n      detached: input.platform !== \"win32\",\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    const chunks: Buffer[] = [];\n    let size = 0;\n    let settled = false;\n\n    const collect = (chunk: Buffer): void => {\n      if (size < PROBE_OUTPUT_LIMIT) {\n        chunks.push(chunk);\n        size += chunk.length;\n      }\n    };\n\n    const timer = setTimeout(() => {\n      killProcessTree(child, input.platform, 0);\n    }, PROBE_TIMEOUT_MS);\n\n    const finish = (exitCode: number | null, error?: Error): void => {\n      if (settled) {\n        return;\n      }\n\n      settled = true;\n      clearTimeout(timer);\n      resolve({ output: Buffer.concat(chunks).toString(\"utf8\"), exitCode, error });\n    };\n\n    child.stdout?.on(\"data\", collect);\n    child.stderr?.on(\"data\", collect);\n    child.on(\"error\", (error) => finish(null, error));\n    child.on(\"close\", (code) => finish(code));\n  });\n}\n\nexport type ProbeInput = Omit<CaptureInput, \"args\"> & { adapter: CliAdapter };\n\n/**\n * Read the CLI's version and help screens. A help invocation that cannot\n * run at all (spawn error, no output) fails the probe; a non-zero exit with\n * output is accepted, because several CLIs exit 1 after printing help.\n */\nexport async function probeCli(input: ProbeInput): Promise<CliProbeResult> {\n  const { adapter } = input;\n  const versionRun = await capture({ ...input, args: adapter.probe.version });\n\n  if (versionRun.error !== undefined) {\n    throw new CliError(\n      `${adapter.title}: could not run \"${input.target.executable} ${adapter.probe.version.join(\" \")}\": ${versionRun.error.message}`,\n      {\n        type: \"probe-failed\",\n        adapter: adapter.name,\n        executable: input.target.executable,\n        cause: versionRun.error,\n      },\n    );\n  }\n\n  const version = parseVersion(versionRun.output);\n  const helps: string[] = [];\n\n  for (const args of adapter.probe.help) {\n    const helpRun = await capture({ ...input, args });\n\n    if (helpRun.error !== undefined || helpRun.output.trim().length === 0) {\n      throw new CliError(\n        `${adapter.title} ${version}: \"${input.target.executable} ${args.join(\" \")}\" printed no help` +\n          (helpRun.error ? ` (${helpRun.error.message})` : \"\") +\n          \"; the capability probe cannot verify the flags this adapter needs.\",\n        {\n          type: \"probe-failed\",\n          adapter: adapter.name,\n          version,\n          executable: input.target.executable,\n          cause: helpRun.error,\n        },\n      );\n    }\n\n    helps.push(helpRun.output);\n  }\n\n  return { executable: input.target.executable, version, help: helps.join(\"\\n\") };\n}\n\n/** Throw a `capability` error naming the first required flag the help does not list. */\nexport function assertCapabilities(\n  adapter: CliAdapter,\n  probe: CliProbeResult,\n  required: readonly string[],\n): void {\n  const missing = missingFlags(probe.help, required);\n  const flag = missing[0];\n\n  if (flag === undefined) {\n    return;\n  }\n\n  const helpCommands = adapter.probe.help\n    .map((args) => `${adapter.command} ${args.join(\" \")}`)\n    .join(\", \");\n\n  throw new CliError(\n    `${adapter.title} ${probe.version} (${probe.executable}) does not support ${missing.join(\", \")}: ` +\n      `not listed in \"${helpCommands}\". This adapter was verified against ${adapter.title} ` +\n      `${adapter.verification.version}; install a compatible version or drop the option that needs ${flag}.`,\n    {\n      type: \"capability\",\n      adapter: adapter.name,\n      flag,\n      version: probe.version,\n      executable: probe.executable,\n    },\n  );\n}\n"],"mappings":";;;;;;;AAQA,MAAa,mBAAmB;;AAGhC,MAAM,qBAAqB,OAAO;AAElC,SAAS,aAAa,MAAsB;CAC1C,OAAO,KAAK,QAAQ,uBAAuB,MAAM;AACnD;;;;;;;;;;AAWA,SAAgB,UAAU,MAAc,MAAuB;CAC7D,MAAM,UAAU,aAAa,IAAI;CAEjC,IAAI,KAAK,WAAW,GAAG,GACrB,OAAO,IAAI,OAAO,uBAAuB,QAAQ,gCAAgC,GAAG,CAAC,CAAC,KACpF,IACF;CAGF,OAAO,IAAI,OAAO,cAAc,QAAQ,gBAAgB,GAAG,CAAC,CAAC,KAAK,IAAI;AACxE;;AAGA,SAAgB,aAAa,QAAwB;CACnD,MAAM,QAAQ,4CAA4C,KAAK,MAAM;CAErE,IAAI,OACF,OAAO,MAAM;CAGf,MAAM,YAAY,OAAO,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK;CAExD,OAAO,aAAa,UAAU,SAAS,IAAI,YAAY;AACzD;;AAGA,SAAgB,aAAa,MAAc,UAAuC;CAChF,OAAO,SAAS,QAAQ,SAAS,CAAC,UAAU,MAAM,IAAI,CAAC;AACzD;;AAYA,SAAS,QACP,OACqE;CACrE,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,aAAa,gBAAgB,MAAM,QAAQ,MAAM,MAAM,MAAM,OAAO;EAE1E,IAAI,aAAa,YAAY;GAC3B,QAAQ;IAAE,QAAQ;IAAI,UAAU;IAAM,OAAO,IAAI,MAAM,WAAW,OAAO;GAAE,CAAC;GAE5E;EACF;EAEA,MAAM,QAAQ,MAAM,WAAW,MAAM,WAAW,MAAM;GACpD,KAAK,MAAM;GACX,KAAK,MAAM;GACX,OAAO;GACP,aAAa;GACb,0BAA0B,WAAW;GACrC,UAAU,MAAM,aAAa;GAC7B,OAAO;IAAC;IAAU;IAAQ;GAAM;EAClC,CAAC;EAED,MAAM,SAAmB,CAAC;EAC1B,IAAI,OAAO;EACX,IAAI,UAAU;EAEd,MAAM,WAAW,UAAwB;GACvC,IAAI,OAAO,oBAAoB;IAC7B,OAAO,KAAK,KAAK;IACjB,QAAQ,MAAM;GAChB;EACF;EAEA,MAAM,QAAQ,iBAAiB;GAC7B,gBAAgB,OAAO,MAAM,UAAU,CAAC;EAC1C,GAAG,gBAAgB;EAEnB,MAAM,UAAU,UAAyB,UAAwB;GAC/D,IAAI,SACF;GAGF,UAAU;GACV,aAAa,KAAK;GAClB,QAAQ;IAAE,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;IAAG;IAAU;GAAM,CAAC;EAC7E;EAEA,MAAM,QAAQ,GAAG,QAAQ,OAAO;EAChC,MAAM,QAAQ,GAAG,QAAQ,OAAO;EAChC,MAAM,GAAG,UAAU,UAAU,OAAO,MAAM,KAAK,CAAC;EAChD,MAAM,GAAG,UAAU,SAAS,OAAO,IAAI,CAAC;CAC1C,CAAC;AACH;;;;;;AASA,eAAsB,SAAS,OAA4C;CACzE,MAAM,EAAE,YAAY;CACpB,MAAM,aAAa,MAAM,QAAQ;EAAE,GAAG;EAAO,MAAM,QAAQ,MAAM;CAAQ,CAAC;CAE1E,IAAI,WAAW,UAAU,QACvB,MAAM,IAAI,SACR,GAAG,QAAQ,MAAM,mBAAmB,MAAM,OAAO,WAAW,GAAG,QAAQ,MAAM,QAAQ,KAAK,GAAG,EAAE,KAAK,WAAW,MAAM,WACrH;EACE,MAAM;EACN,SAAS,QAAQ;EACjB,YAAY,MAAM,OAAO;EACzB,OAAO,WAAW;CACpB,CACF;CAGF,MAAM,UAAU,aAAa,WAAW,MAAM;CAC9C,MAAM,QAAkB,CAAC;CAEzB,KAAK,MAAM,QAAQ,QAAQ,MAAM,MAAM;EACrC,MAAM,UAAU,MAAM,QAAQ;GAAE,GAAG;GAAO;EAAK,CAAC;EAEhD,IAAI,QAAQ,UAAU,UAAa,QAAQ,OAAO,KAAK,CAAC,CAAC,WAAW,GAClE,MAAM,IAAI,SACR,GAAG,QAAQ,MAAM,GAAG,QAAQ,KAAK,MAAM,OAAO,WAAW,GAAG,KAAK,KAAK,GAAG,EAAE,sBACxE,QAAQ,QAAQ,KAAK,QAAQ,MAAM,QAAQ,KAAK,MACjD,sEACF;GACE,MAAM;GACN,SAAS,QAAQ;GACjB;GACA,YAAY,MAAM,OAAO;GACzB,OAAO,QAAQ;EACjB,CACF;EAGF,MAAM,KAAK,QAAQ,MAAM;CAC3B;CAEA,OAAO;EAAE,YAAY,MAAM,OAAO;EAAY;EAAS,MAAM,MAAM,KAAK,IAAI;CAAE;AAChF;;AAGA,SAAgB,mBACd,SACA,OACA,UACM;CACN,MAAM,UAAU,aAAa,MAAM,MAAM,QAAQ;CACjD,MAAM,OAAO,QAAQ;CAErB,IAAI,SAAS,QACX;CAGF,MAAM,eAAe,QAAQ,MAAM,KAChC,KAAK,SAAS,GAAG,QAAQ,QAAQ,GAAG,KAAK,KAAK,GAAG,GAAG,CAAC,CACrD,KAAK,IAAI;CAEZ,MAAM,IAAI,SACR,GAAG,QAAQ,MAAM,GAAG,MAAM,QAAQ,IAAI,MAAM,WAAW,qBAAqB,QAAQ,KAAK,IAAI,EAAE,mBAC3E,aAAa,uCAAuC,QAAQ,MAAM,GACjF,QAAQ,aAAa,QAAQ,+DAA+D,KAAK,IACtG;EACE,MAAM;EACN,SAAS,QAAQ;EACjB;EACA,SAAS,MAAM;EACf,YAAY,MAAM;CACpB,CACF;AACF"}

package/esm/session/aggregate.mjs

@@ -0,0 +1,86 @@
+//#region ../../packages/ai-cli/src/session/aggregate.ts
+function sum(a, b) {
+	return a === void 0 && b === void 0 ? void 0 : (a ?? 0) + (b ?? 0);
+}
+/** Add two usages field by field; optional fields stay absent unless either side has them. */
+function addUsage(left, right) {
+	if (left === void 0) return { ...right };
+	const merged = {
+		input: left.input + right.input,
+		output: left.output + right.output,
+		total: left.total + right.total
+	};
+	const cachedTokens = sum(left.cachedTokens, right.cachedTokens);
+	const cacheWriteTokens = sum(left.cacheWriteTokens, right.cacheWriteTokens);
+	const reasoningTokens = sum(left.reasoningTokens, right.reasoningTokens);
+	const costUSD = sum(left.costUSD, right.costUSD);
+	if (cachedTokens !== void 0) merged.cachedTokens = cachedTokens;
+	if (cacheWriteTokens !== void 0) merged.cacheWriteTokens = cacheWriteTokens;
+	if (reasoningTokens !== void 0) merged.reasoningTokens = reasoningTokens;
+	if (costUSD !== void 0) merged.costUSD = costUSD;
+	return merged;
+}
+/**
+* Folds parsed events into the pieces of a `CliResult`: the session ref,
+* usage, every complete message, and the final answer.
+*
+* Final-answer rule: the last `final: true` message (the vendor's own
+* result record) wins; otherwise the newest assistant text — a complete
+* message, or the deltas streamed since the last message or tool activity.
+*/
+var ResultAggregator = class {
+	constructor(resume) {
+		this.messages = [];
+		this.deltaBuffer = "";
+		this.sessionRef = resume;
+	}
+	add(event) {
+		switch (event.type) {
+			case "session.started":
+				if (event.sessionRef) this.sessionRef = event.sessionRef;
+				break;
+			case "message":
+				if (event.delta) {
+					this.deltaBuffer += event.text;
+					break;
+				}
+				if (event.final) {
+					this.finalText = event.text;
+					break;
+				}
+				this.messages.push(event.text);
+				this.lastCompleteText = event.text;
+				this.deltaBuffer = "";
+				break;
+			case "tool.call":
+			case "tool.result":
+				this.flushDeltas();
+				break;
+			case "usage":
+				this.usage = event.cumulative ? { ...event.usage } : addUsage(this.usage, event.usage);
+				break;
+			case "error":
+				if (event.fatal && this.fatalError === void 0) this.fatalError = event.message;
+				break;
+		}
+	}
+	/** Close the stream: deltas never followed by a complete message count as one. */
+	finish() {
+		this.flushDeltas();
+	}
+	get text() {
+		if (this.finalText !== void 0) return this.finalText;
+		return this.deltaBuffer.length > 0 ? this.deltaBuffer : this.lastCompleteText ?? "";
+	}
+	flushDeltas() {
+		if (this.deltaBuffer.trim().length > 0) {
+			this.messages.push(this.deltaBuffer);
+			this.lastCompleteText = this.deltaBuffer;
+		}
+		this.deltaBuffer = "";
+	}
+};
+
+//#endregion
+export { ResultAggregator };
+//# sourceMappingURL=aggregate.mjs.map

package/esm/session/aggregate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregate.mjs","names":[],"sources":["../../../../../../../../packages/ai-cli/src/session/aggregate.ts"],"sourcesContent":["import type { CliParsedEvent, CliUsage } from \"../contracts\";\n\nfunction sum(a: number | undefined, b: number | undefined): number | undefined {\n  return a === undefined && b === undefined ? undefined : (a ?? 0) + (b ?? 0);\n}\n\n/** Add two usages field by field; optional fields stay absent unless either side has them. */\nexport function addUsage(left: CliUsage | undefined, right: CliUsage): CliUsage {\n  if (left === undefined) {\n    return { ...right };\n  }\n\n  const merged: CliUsage = {\n    input: left.input + right.input,\n    output: left.output + right.output,\n    total: left.total + right.total,\n  };\n\n  const cachedTokens = sum(left.cachedTokens, right.cachedTokens);\n  const cacheWriteTokens = sum(left.cacheWriteTokens, right.cacheWriteTokens);\n  const reasoningTokens = sum(left.reasoningTokens, right.reasoningTokens);\n  const costUSD = sum(left.costUSD, right.costUSD);\n\n  if (cachedTokens !== undefined) merged.cachedTokens = cachedTokens;\n  if (cacheWriteTokens !== undefined) merged.cacheWriteTokens = cacheWriteTokens;\n  if (reasoningTokens !== undefined) merged.reasoningTokens = reasoningTokens;\n  if (costUSD !== undefined) merged.costUSD = costUSD;\n\n  return merged;\n}\n\n/**\n * Folds parsed events into the pieces of a `CliResult`: the session ref,\n * usage, every complete message, and the final answer.\n *\n * Final-answer rule: the last `final: true` message (the vendor's own\n * result record) wins; otherwise the newest assistant text — a complete\n * message, or the deltas streamed since the last message or tool activity.\n */\nexport class ResultAggregator {\n  public sessionRef?: string;\n  public usage?: CliUsage;\n  public readonly messages: string[] = [];\n  public fatalError?: string;\n  private finalText?: string;\n  private deltaBuffer = \"\";\n  private lastCompleteText?: string;\n\n  public constructor(resume?: string) {\n    this.sessionRef = resume;\n  }\n\n  public add(event: CliParsedEvent): void {\n    switch (event.type) {\n      case \"session.started\":\n        if (event.sessionRef) {\n          this.sessionRef = event.sessionRef;\n        }\n        break;\n      case \"message\":\n        if (event.delta) {\n          this.deltaBuffer += event.text;\n          break;\n        }\n\n        if (event.final) {\n          this.finalText = event.text;\n          break;\n        }\n\n        this.messages.push(event.text);\n        this.lastCompleteText = event.text;\n        this.deltaBuffer = \"\";\n        break;\n      case \"tool.call\":\n      case \"tool.result\":\n        this.flushDeltas();\n        break;\n      case \"usage\":\n        this.usage = event.cumulative ? { ...event.usage } : addUsage(this.usage, event.usage);\n        break;\n      case \"error\":\n        if (event.fatal && this.fatalError === undefined) {\n          this.fatalError = event.message;\n        }\n        break;\n    }\n  }\n\n  /** Close the stream: deltas never followed by a complete message count as one. */\n  public finish(): void {\n    this.flushDeltas();\n  }\n\n  public get text(): string {\n    if (this.finalText !== undefined) {\n      return this.finalText;\n    }\n\n    return this.deltaBuffer.length > 0 ? this.deltaBuffer : (this.lastCompleteText ?? \"\");\n  }\n\n  private flushDeltas(): void {\n    if (this.deltaBuffer.trim().length > 0) {\n      this.messages.push(this.deltaBuffer);\n      this.lastCompleteText = this.deltaBuffer;\n    }\n\n    this.deltaBuffer = \"\";\n  }\n}\n"],"mappings":";AAEA,SAAS,IAAI,GAAuB,GAA2C;CAC7E,OAAO,MAAM,UAAa,MAAM,SAAY,UAAa,KAAK,MAAM,KAAK;AAC3E;;AAGA,SAAgB,SAAS,MAA4B,OAA2B;CAC9E,IAAI,SAAS,QACX,OAAO,EAAE,GAAG,MAAM;CAGpB,MAAM,SAAmB;EACvB,OAAO,KAAK,QAAQ,MAAM;EAC1B,QAAQ,KAAK,SAAS,MAAM;EAC5B,OAAO,KAAK,QAAQ,MAAM;CAC5B;CAEA,MAAM,eAAe,IAAI,KAAK,cAAc,MAAM,YAAY;CAC9D,MAAM,mBAAmB,IAAI,KAAK,kBAAkB,MAAM,gBAAgB;CAC1E,MAAM,kBAAkB,IAAI,KAAK,iBAAiB,MAAM,eAAe;CACvE,MAAM,UAAU,IAAI,KAAK,SAAS,MAAM,OAAO;CAE/C,IAAI,iBAAiB,QAAW,OAAO,eAAe;CACtD,IAAI,qBAAqB,QAAW,OAAO,mBAAmB;CAC9D,IAAI,oBAAoB,QAAW,OAAO,kBAAkB;CAC5D,IAAI,YAAY,QAAW,OAAO,UAAU;CAE5C,OAAO;AACT;;;;;;;;;AAUA,IAAa,mBAAb,MAA8B;CAS5B,AAAO,YAAY,QAAiB;kBANC,CAAC;qBAGhB;EAIpB,KAAK,aAAa;CACpB;CAEA,AAAO,IAAI,OAA6B;EACtC,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,IAAI,MAAM,YACR,KAAK,aAAa,MAAM;IAE1B;GACF,KAAK;IACH,IAAI,MAAM,OAAO;KACf,KAAK,eAAe,MAAM;KAC1B;IACF;IAEA,IAAI,MAAM,OAAO;KACf,KAAK,YAAY,MAAM;KACvB;IACF;IAEA,KAAK,SAAS,KAAK,MAAM,IAAI;IAC7B,KAAK,mBAAmB,MAAM;IAC9B,KAAK,cAAc;IACnB;GACF,KAAK;GACL,KAAK;IACH,KAAK,YAAY;IACjB;GACF,KAAK;IACH,KAAK,QAAQ,MAAM,aAAa,EAAE,GAAG,MAAM,MAAM,IAAI,SAAS,KAAK,OAAO,MAAM,KAAK;IACrF;GACF,KAAK;IACH,IAAI,MAAM,SAAS,KAAK,eAAe,QACrC,KAAK,aAAa,MAAM;IAE1B;EACJ;CACF;;CAGA,AAAO,SAAe;EACpB,KAAK,YAAY;CACnB;CAEA,IAAW,OAAe;EACxB,IAAI,KAAK,cAAc,QACrB,OAAO,KAAK;EAGd,OAAO,KAAK,YAAY,SAAS,IAAI,KAAK,cAAe,KAAK,oBAAoB;CACpF;CAEA,AAAQ,cAAoB;EAC1B,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,SAAS,GAAG;GACtC,KAAK,SAAS,KAAK,KAAK,WAAW;GACnC,KAAK,mBAAmB,KAAK;EAC/B;EAEA,KAAK,cAAc;CACrB;AACF"}

package/esm/session/environment.mjs

@@ -0,0 +1,71 @@
+//#region ../../packages/ai-cli/src/session/environment.ts
+/**
+* Variables a CLI needs to start at all: executable lookup, home and temp
+* directories, locale, TLS/proxy settings and the Windows system set.
+* Passed through even with `inheritEnv: false`.
+*/
+const MINIMAL_ENV = [
+	"PATH",
+	"PATHEXT",
+	"HOME",
+	"USERPROFILE",
+	"HOMEDRIVE",
+	"HOMEPATH",
+	"APPDATA",
+	"LOCALAPPDATA",
+	"SYSTEMROOT",
+	"SYSTEMDRIVE",
+	"WINDIR",
+	"COMSPEC",
+	"TEMP",
+	"TMP",
+	"TMPDIR",
+	"LANG",
+	"LC_ALL",
+	"LC_CTYPE",
+	"TERM",
+	"SHELL",
+	"USER",
+	"LOGNAME",
+	"XDG_RUNTIME_DIR",
+	"HTTP_PROXY",
+	"HTTPS_PROXY",
+	"NO_PROXY",
+	"http_proxy",
+	"https_proxy",
+	"no_proxy",
+	"NODE_EXTRA_CA_CERTS",
+	"SSL_CERT_FILE",
+	"SSL_CERT_DIR"
+];
+/**
+* Build a CLI's environment. Precedence, lowest first: inherited variables
+* (minus the adapter's managed home variables), the adapter plan, the API
+* key, then the caller's `env`. Windows variable names compare
+* case-insensitively.
+*/
+function buildEnvironment(input) {
+	const normalize = (name) => input.platform === "win32" ? name.toUpperCase() : name;
+	const managed = new Set(input.managed.map(normalize));
+	const allowed = input.inherit === true ? void 0 : new Set([...MINIMAL_ENV, ...input.inherit === false ? [] : input.inherit].map(normalize));
+	const environment = {};
+	for (const [name, value] of Object.entries(input.source)) {
+		if (value === void 0 || managed.has(normalize(name))) continue;
+		if (allowed !== void 0 && !allowed.has(normalize(name))) continue;
+		environment[name] = value;
+	}
+	const assign = (name, value) => {
+		if (input.platform === "win32") {
+			for (const existing of Object.keys(environment)) if (existing.toUpperCase() === name.toUpperCase()) delete environment[existing];
+		}
+		environment[name] = value;
+	};
+	for (const [name, value] of Object.entries(input.plan ?? {})) assign(name, value);
+	if (input.apiKey !== void 0) assign(input.apiKey.name, input.apiKey.value);
+	for (const [name, value] of Object.entries(input.user ?? {})) assign(name, value);
+	return environment;
+}
+
+//#endregion
+export { buildEnvironment };
+//# sourceMappingURL=environment.mjs.map

package/esm/session/environment.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.mjs","names":[],"sources":["../../../../../../../../packages/ai-cli/src/session/environment.ts"],"sourcesContent":["/**\n * Variables a CLI needs to start at all: executable lookup, home and temp\n * directories, locale, TLS/proxy settings and the Windows system set.\n * Passed through even with `inheritEnv: false`.\n */\nexport const MINIMAL_ENV = [\n  \"PATH\",\n  \"PATHEXT\",\n  \"HOME\",\n  \"USERPROFILE\",\n  \"HOMEDRIVE\",\n  \"HOMEPATH\",\n  \"APPDATA\",\n  \"LOCALAPPDATA\",\n  \"SYSTEMROOT\",\n  \"SYSTEMDRIVE\",\n  \"WINDIR\",\n  \"COMSPEC\",\n  \"TEMP\",\n  \"TMP\",\n  \"TMPDIR\",\n  \"LANG\",\n  \"LC_ALL\",\n  \"LC_CTYPE\",\n  \"TERM\",\n  \"SHELL\",\n  \"USER\",\n  \"LOGNAME\",\n  \"XDG_RUNTIME_DIR\",\n  \"HTTP_PROXY\",\n  \"HTTPS_PROXY\",\n  \"NO_PROXY\",\n  \"http_proxy\",\n  \"https_proxy\",\n  \"no_proxy\",\n  \"NODE_EXTRA_CA_CERTS\",\n  \"SSL_CERT_FILE\",\n  \"SSL_CERT_DIR\",\n] as const;\n\nexport type BuildEnvironmentInput = {\n  source: Record<string, string | undefined>;\n  inherit: boolean | readonly string[];\n  /** Variables the adapter manages (config home); never inherited from `source`. */\n  managed: readonly string[];\n  /** Adapter plan variables (config home, …). */\n  plan?: Record<string, string>;\n  /** Caller variables; win over everything else. */\n  user?: Record<string, string>;\n  /** API key and the variable it goes to. */\n  apiKey?: { name: string; value: string };\n  platform: NodeJS.Platform;\n};\n\n/**\n * Build a CLI's environment. Precedence, lowest first: inherited variables\n * (minus the adapter's managed home variables), the adapter plan, the API\n * key, then the caller's `env`. Windows variable names compare\n * case-insensitively.\n */\nexport function buildEnvironment(input: BuildEnvironmentInput): Record<string, string> {\n  const normalize = (name: string): string =>\n    input.platform === \"win32\" ? name.toUpperCase() : name;\n  const managed = new Set(input.managed.map(normalize));\n  const allowed =\n    input.inherit === true\n      ? undefined\n      : new Set([...MINIMAL_ENV, ...(input.inherit === false ? [] : input.inherit)].map(normalize));\n\n  const environment: Record<string, string> = {};\n\n  for (const [name, value] of Object.entries(input.source)) {\n    if (value === undefined || managed.has(normalize(name))) {\n      continue;\n    }\n\n    if (allowed !== undefined && !allowed.has(normalize(name))) {\n      continue;\n    }\n\n    environment[name] = value;\n  }\n\n  const assign = (name: string, value: string): void => {\n    if (input.platform === \"win32\") {\n      for (const existing of Object.keys(environment)) {\n        if (existing.toUpperCase() === name.toUpperCase()) {\n          delete environment[existing];\n        }\n      }\n    }\n\n    environment[name] = value;\n  };\n\n  for (const [name, value] of Object.entries(input.plan ?? {})) {\n    assign(name, value);\n  }\n\n  if (input.apiKey !== undefined) {\n    assign(input.apiKey.name, input.apiKey.value);\n  }\n\n  for (const [name, value] of Object.entries(input.user ?? {})) {\n    assign(name, value);\n  }\n\n  return environment;\n}\n"],"mappings":";;;;;;AAKA,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;;;AAsBA,SAAgB,iBAAiB,OAAsD;CACrF,MAAM,aAAa,SACjB,MAAM,aAAa,UAAU,KAAK,YAAY,IAAI;CACpD,MAAM,UAAU,IAAI,IAAI,MAAM,QAAQ,IAAI,SAAS,CAAC;CACpD,MAAM,UACJ,MAAM,YAAY,OACd,SACA,IAAI,IAAI,CAAC,GAAG,aAAa,GAAI,MAAM,YAAY,QAAQ,CAAC,IAAI,MAAM,OAAQ,CAAC,CAAC,IAAI,SAAS,CAAC;CAEhG,MAAM,cAAsC,CAAC;CAE7C,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,MAAM,MAAM,GAAG;EACxD,IAAI,UAAU,UAAa,QAAQ,IAAI,UAAU,IAAI,CAAC,GACpD;EAGF,IAAI,YAAY,UAAa,CAAC,QAAQ,IAAI,UAAU,IAAI,CAAC,GACvD;EAGF,YAAY,QAAQ;CACtB;CAEA,MAAM,UAAU,MAAc,UAAwB;EACpD,IAAI,MAAM,aAAa,SACrB;QAAK,MAAM,YAAY,OAAO,KAAK,WAAW,GAC5C,IAAI,SAAS,YAAY,MAAM,KAAK,YAAY,GAC9C,OAAO,YAAY;EAEvB;EAGF,YAAY,QAAQ;CACtB;CAEA,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,MAAM,QAAQ,CAAC,CAAC,GACzD,OAAO,MAAM,KAAK;CAGpB,IAAI,MAAM,WAAW,QACnB,OAAO,MAAM,OAAO,MAAM,MAAM,OAAO,KAAK;CAG9C,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,MAAM,QAAQ,CAAC,CAAC,GACzD,OAAO,MAAM,KAAK;CAGpB,OAAO;AACT"}

package/esm/session/run-directory.mjs

@@ -0,0 +1,74 @@
+import path from "node:path";
+import { chmod, mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+
+//#region ../../packages/ai-cli/src/session/run-directory.ts
+/**
+* Create the run's private directory and resolve its config home.
+*
+* The run directory is `mkdtemp`'d under the OS temp dir with mode 0700, so
+* other local users cannot read the MCP config (and the tokens in it)
+* written there. A `"private"` home is a `home/` folder inside it.
+*/
+async function createRunDirectories(home, cwd) {
+	const runDir = await mkdtemp(path.join(tmpdir(), "warlock-cli-"));
+	await chmod(runDir, 448);
+	const dispose = async () => {
+		await rm(runDir, {
+			recursive: true,
+			force: true
+		});
+	};
+	if (home === "inherit") return {
+		runDir,
+		homeIsPrivate: false,
+		dispose
+	};
+	if (home === "private") {
+		const privateHome = path.join(runDir, "home");
+		await mkdir(privateHome, { mode: 448 });
+		return {
+			runDir,
+			home: privateHome,
+			homeIsPrivate: true,
+			dispose
+		};
+	}
+	const ownedHome = path.resolve(cwd, home);
+	await mkdir(ownedHome, {
+		recursive: true,
+		mode: 448
+	});
+	return {
+		runDir,
+		home: ownedHome,
+		homeIsPrivate: false,
+		dispose
+	};
+}
+/**
+* Write launch files with owner-only permissions (0600; parent directories
+* 0700). Only paths inside the run directory or a private home are
+* accepted, so an adapter can never overwrite a file in a caller-owned
+* home or elsewhere on disk.
+*/
+async function writeLaunchFiles(files, directories) {
+	const roots = [directories.runDir];
+	for (const file of files) {
+		const target = path.resolve(file.path);
+		if (!roots.some((root) => {
+			const relative = path.relative(root, target);
+			return relative.length > 0 && !relative.startsWith("..") && !path.isAbsolute(relative);
+		})) throw new Error(`Refusing to write ${target}: launch files must live inside the run directory.`);
+		await mkdir(path.dirname(target), {
+			recursive: true,
+			mode: 448
+		});
+		await writeFile(target, file.content, { mode: 384 });
+		await chmod(target, 384);
+	}
+}
+
+//#endregion
+export { createRunDirectories, writeLaunchFiles };
+//# sourceMappingURL=run-directory.mjs.map