@wjarka/cezarion 0.10.0-pr30.54

package/dist/core/opencode-server-runner.js

@@ -0,0 +1,882 @@
+import { spawn as nodeSpawn } from 'node:child_process';
+import { request as httpRequest } from 'node:http';
+import { prependSystemPrompt, trackChildExit } from './agent-runner.js';
+import { buildChildEnv } from './agent-env.js';
+import { parseAskRequest } from './ask.js';
+import { AUTO_END_DELAY_MS, DEFAULT_RUN_TIMEOUT_MS } from './claude-cli-runner.js';
+import { parseModelIdentity } from './model-identity.js';
+import { V1TextCoalescer } from './v1-text-coalescer.js';
+import { createOpencodeUiState, mapOpencodeEvent, opencodeSessionStarted, opencodeTurnStarted, } from './opencode-ui-mapper.js';
+const SERVER_START_TIMEOUT_MS = 30_000;
+/** Grace between the teardown SIGTERM and the SIGKILL that follows it. */
+export const KILL_GRACE_MS = 4_000;
+/**
+ * `AgentRunner` over `opencode serve` — a headless HTTP server (the same one
+ * the opencode TUI talks to) with an SSE event stream. One server per session,
+ * bound to the run's `cwd` (worktree), gives OpenCode the same multi-turn shape
+ * as the Claude runner: each `sendMessage` posts another prompt to the same
+ * session (history is kept server-side), `session/abort` cancels, and reusing
+ * the session id resumes for "Continue".
+ *
+ * Auth = the host's opencode config/logins. The agent runs autonomously
+ * (auto-approved permissions); OpenCode has no per-tool allowlist, so
+ * `spec.allowedTools` is ignored. `spec.model` is `provider/model`.
+ */
+export class OpencodeServerRunner {
+    backend = 'opencode';
+    bin;
+    timeoutMs;
+    lastSession = null;
+    constructor(opts = {}) {
+        this.bin = opts.bin ?? process.env.CEZ_OPENCODE_BIN ?? 'opencode';
+        this.timeoutMs = opts.timeoutMs ?? DEFAULT_RUN_TIMEOUT_MS;
+    }
+    run(spec, onEvent) {
+        return this.startSession(spec, onEvent, { autoEndAfterFirstTurn: true }).result;
+    }
+    async interrupt() {
+        this.lastSession?.interrupt();
+    }
+    startSession(spec, onEvent, opts = {}) {
+        const session = new OpencodeSession(this.bin, this.timeoutMs, spec, onEvent, opts);
+        this.lastSession = session;
+        return session;
+    }
+}
+/** One live `opencode serve` process driving a single session. */
+class OpencodeSession {
+    bin;
+    spec;
+    onEvent;
+    opts;
+    result;
+    child;
+    /** "Has the server actually terminated?" — never `child.killed`, which only
+     *  reports delivery and would disarm the escalation (#844/#858). */
+    hasExited;
+    serverOpen = true;
+    baseUrl;
+    sessionId;
+    ready;
+    resolveExit;
+    exited;
+    sse = new AbortController();
+    toolCalls = [];
+    textChunks = [];
+    /** Per text-part cursor so only newly-appended text is buffered (deltas). */
+    textSeen = new Map();
+    /** Streamed part deltas buffered per part — v1 `text` is emitted once per
+     *  finished part (claude parity: one event per complete block), never per
+     *  delta, so the persisted transcript and the headless CLI get whole
+     *  paragraphs. Streaming display rides protocol v2's `item.delta`. */
+    textCoalescer = new V1TextCoalescer((text) => {
+        this.textChunks.push(text);
+        this.emit({ type: 'text', text });
+    });
+    toolsSeen = new Set();
+    /** messageID → role. Parts carry no role; only assistant parts are surfaced
+     *  (the user's own message also streams as parts over the same SSE feed). */
+    msgRole = new Map();
+    tokensUsed = 0;
+    lastCost = 0;
+    /** A prompt was posted and its `session.idle` has not arrived yet. */
+    turnActive = false;
+    /** `finishTurn` ran for the current turn — repeats and stray idles no-op. */
+    turnEnded = false;
+    /** Monotonic identity used to reject async work completed by an older turn. */
+    turnSerial = 0;
+    /** Settles when the open turn finishes; re-armed at each turn start. The
+     *  gate `prompt` waits on so turns never overlap (see there). */
+    turnFinished = Promise.resolve();
+    turnFinishedResolve = () => { };
+    /** Protocol v2 emission — additive alongside v1 (`onEvent` keeps flowing
+     *  byte-identical); the channel is `opts.onUiEvent` (RunManager wiring
+     *  lands in R2 step 2.1). Both streams take their turn-end from the wire
+     *  `session.idle` (v1 since #4 — see `finishTurn`). */
+    uiState = createOpencodeUiState();
+    /** Question tool parts are snapshots. Once capture starts for an identity,
+     * every later state snapshot for that same part/call is already handled. */
+    handledQuestionParts = new Set();
+    pendingQuestion;
+    questionCapture;
+    questionReply;
+    /** User text submitted while a question reply POST is unsettled. It is not
+     * another answer; deliver it as ordinary prompts only after reply success. */
+    queuedQuestionMessages = [];
+    autoEndTimer;
+    spawnFailed = null;
+    timedOut = false;
+    /** One teardown per session — see `terminate()`. */
+    signalled = false;
+    constructor(bin, timeoutMs, spec, onEvent, opts) {
+        this.bin = bin;
+        this.spec = spec;
+        this.onEvent = onEvent;
+        this.opts = opts;
+        // Random high port; the actual bound URL is read back from stdout.
+        const port = 40000 + Math.floor(Math.random() * 20000);
+        try {
+            this.child = nodeSpawn(bin, ['serve', '--hostname', '127.0.0.1', '--port', String(port)], {
+                cwd: spec.cwd,
+                env: buildChildEnv({ backend: 'opencode', extraEnv: spec.env }),
+            });
+        }
+        catch (err) {
+            throw wrapSpawnError(err, bin);
+        }
+        this.hasExited = trackChildExit(this.child);
+        this.child.on('error', (err) => {
+            this.spawnFailed = wrapSpawnError(err, bin);
+        });
+        this.exited = new Promise((resolve) => {
+            this.resolveExit = resolve;
+        });
+        this.child.once('exit', () => this.resolveExit());
+        this.child.once('close', () => this.resolveExit());
+        const stderrChunks = [];
+        this.child.stderr.setEncoding('utf8');
+        this.child.stderr.on('data', (chunk) => stderrChunks.push(chunk));
+        // The server prints its URL on stdout once listening.
+        const urlReady = this.waitForServerUrl(port);
+        const limitMs = spec.timeoutMs ?? timeoutMs;
+        let deadline;
+        if (limitMs > 0) {
+            deadline = setTimeout(() => {
+                this.timedOut = true;
+                this.interrupt();
+            }, limitMs);
+            deadline.unref?.();
+        }
+        this.ready = (async () => {
+            this.baseUrl = await urlReady;
+            await this.bootstrap();
+        })();
+        this.result = (async () => {
+            try {
+                await this.ready;
+                // Live for the whole session; the SSE loop runs until end()/interrupt.
+                await this.exited;
+            }
+            catch (err) {
+                if (!this.timedOut) {
+                    const message = err instanceof Error ? err.message : String(err);
+                    this.emit({ type: 'error', message: `opencode: ${message}` });
+                }
+            }
+            finally {
+                if (deadline)
+                    clearTimeout(deadline);
+                if (this.autoEndTimer)
+                    clearTimeout(this.autoEndTimer);
+                this.sse.abort();
+                this.serverOpen = false;
+                this.terminate();
+            }
+            await this.exited;
+            if (this.spawnFailed)
+                throw this.spawnFailed;
+            // Timeout/interrupt can cut the SSE feed before its `session.idle` —
+            // close the turn (idempotent) so consumers still see the v1 boundary,
+            // and recover prose buffered mid-part.
+            this.finishTurn();
+            this.textCoalescer.flush();
+            // Chunks are whole blocks now (one per finished part), so newline-join
+            // like the other runners, not the old delta concatenation.
+            const text = this.textChunks.join('\n').trim();
+            const base = {
+                text,
+                toolCalls: this.toolCalls,
+                tokensUsed: this.tokensUsed,
+                sessionId: this.sessionId ?? spec.sessionId,
+            };
+            if (this.timedOut) {
+                const mins = Math.round((limitMs / 60_000) * 10) / 10;
+                this.emit({ type: 'error', message: `opencode timed out after ${mins}m and was killed` });
+            }
+            this.emit({ type: 'done' });
+            return base;
+        })();
+    }
+    get open() {
+        return this.serverOpen;
+    }
+    get pid() {
+        return this.child.pid;
+    }
+    sendMessage(content) {
+        if (!this.serverOpen)
+            return false;
+        this.cancelAutoEnd();
+        const text = textOf(content);
+        if (!text)
+            return true;
+        if (this.questionReply) {
+            this.queuedQuestionMessages.push(text);
+            return true;
+        }
+        if (this.pendingQuestion) {
+            const pending = this.pendingQuestion;
+            const reply = this.replyQuestion(pending, text);
+            this.questionReply = reply;
+            const clearReply = () => {
+                if (this.questionReply === reply)
+                    this.questionReply = undefined;
+            };
+            void reply.then(clearReply, clearReply);
+            return true;
+        }
+        // `prompt` already emitted the note and closed the turn before rethrowing,
+        // and a rejected `ready` already failed the session on the result path —
+        // there is nothing left to report here.
+        this.deliverPrompt(text);
+        return true;
+    }
+    deliverPrompt(text) {
+        void this.ready.then(() => this.prompt(text)).catch(() => undefined);
+    }
+    cancelAutoEnd() {
+        if (!this.autoEndTimer)
+            return;
+        clearTimeout(this.autoEndTimer);
+        this.autoEndTimer = undefined;
+    }
+    scheduleAutoEnd() {
+        if (!this.opts.autoEndAfterFirstTurn || !this.serverOpen || this.autoEndTimer)
+            return;
+        this.autoEndTimer = setTimeout(() => this.end(), AUTO_END_DELAY_MS);
+        this.autoEndTimer.unref?.();
+    }
+    end() {
+        if (!this.serverOpen)
+            return;
+        this.serverOpen = false;
+        this.sse.abort();
+        this.terminate();
+    }
+    interrupt() {
+        this.serverOpen = false;
+        if (this.baseUrl && this.sessionId) {
+            void this.http('POST', `/session/${this.sessionId}/abort`, undefined).catch(() => undefined);
+        }
+        this.sse.abort();
+        this.terminate();
+    }
+    /**
+     * The one place either signal is sent: SIGTERM now, SIGKILL once the grace
+     * window elapses.
+     *
+     * Both steps gate on `hasExited()`, never on `child.killed` — the latter
+     * flips the moment SIGTERM is *delivered*, so the old nested
+     * `exitCode == null && !killed` guard disarmed the escalation for exactly the
+     * server it was written for: one that installs its own SIGTERM handler stayed
+     * alive with `killed = true` and `exitCode === null`, outliving the whole
+     * window (#858, the same defect #844 fixed for the other two backends). Every
+     * caller here is followed by `await this.exited`, so a server that survived
+     * SIGTERM did not just leak — it hung the session's result forever.
+     *
+     * One teardown per session: all three call sites can run for the same session
+     * (`interrupt()` on the deadline, then the result promise's `finally`), and
+     * once SIGTERM is out with SIGKILL armed there is nothing a second pass adds.
+     * The old `!child.killed` test deduplicated this as a side effect of being
+     * wrong; `signalled` keeps that property on purpose.
+     */
+    terminate() {
+        if (this.signalled || this.hasExited())
+            return;
+        this.signalled = true;
+        this.child.kill('SIGTERM');
+        setTimeout(() => {
+            if (this.hasExited())
+                return;
+            this.child.kill('SIGKILL');
+        }, KILL_GRACE_MS).unref?.();
+    }
+    // ---- server lifecycle ---------------------------------------------------
+    waitForServerUrl(fallbackPort) {
+        return new Promise((resolve, reject) => {
+            let buffer = '';
+            const timer = setTimeout(() => {
+                cleanup();
+                // Nothing parsed — try the port we asked for.
+                resolve(`http://127.0.0.1:${fallbackPort}`);
+            }, SERVER_START_TIMEOUT_MS);
+            timer.unref?.();
+            const onData = (chunk) => {
+                buffer += chunk;
+                const m = /https?:\/\/[\d.]+:\d+/.exec(buffer);
+                if (m) {
+                    cleanup();
+                    resolve(m[0]);
+                }
+            };
+            const onExit = () => {
+                cleanup();
+                reject(new Error('opencode serve exited before it started listening'));
+            };
+            const cleanup = () => {
+                clearTimeout(timer);
+                this.child.stdout.off('data', onData);
+                this.child.off('exit', onExit);
+            };
+            this.child.stdout.setEncoding('utf8');
+            this.child.stdout.on('data', onData);
+            this.child.once('exit', onExit);
+        });
+    }
+    async bootstrap() {
+        const created = await this.http('POST', '/session', { title: 'cezar task' });
+        this.sessionId = stringField(created, 'id');
+        if (!this.sessionId)
+            throw new Error('opencode did not return a session id');
+        this.emit({ type: 'session', sessionId: this.sessionId });
+        const sessionId = this.sessionId;
+        this.emitUi((state) => opencodeSessionStarted(sessionId, state));
+        // The SSE subscription must be LIVE before the first prompt posts —
+        // events the server emits while the POST is in flight would otherwise be
+        // lost (a race this await closes; the bundled mock made it visible).
+        await this.consumeEvents();
+        const first = prependSystemPrompt(this.spec.systemPrompt, this.spec.userPrompt);
+        await this.prompt(first);
+    }
+    async prompt(text) {
+        // One turn at a time. `prompt_async` acknowledges before the turn runs,
+        // so `ready` no longer serializes prompts the way the long-poll did — a
+        // follow-up posted mid-turn would share the turnActive/turnEnded pair
+        // with the running turn and let that turn's idle close this one. Waiters
+        // resume in FIFO order; a teardown (`finishTurn` runs on every exit
+        // path) releases them into the `serverOpen` check below.
+        while (this.turnActive)
+            await this.turnFinished;
+        // A queued prompt may have started waiting before the preceding idle armed
+        // auto-end. Cancel at actual delivery time, not only at sendMessage time.
+        this.cancelAutoEnd();
+        if (!this.sessionId || !this.serverOpen)
+            return;
+        this.turnActive = true;
+        this.turnEnded = false;
+        this.turnSerial += 1;
+        this.turnFinished = new Promise((resolve) => {
+            this.turnFinishedResolve = resolve;
+        });
+        // Turn boundary, v1 and v2 alike — the prompt POST is the turn start
+        // (§7.1); the end comes from the SSE `session.idle`, never from the HTTP
+        // response below. `POST /session/:id/message` long-polled the whole turn,
+        // and undici's default 300s headers timeout ended it as `prompt failed:
+        // fetch failed` (#4, upstream #897); `prompt_async` returns immediately.
+        this.emitUi(opencodeTurnStarted);
+        const body = { parts: [{ type: 'text', text }] };
+        // `spec.model` arrives already normalised to canonical `provider/model`
+        // (the run wiring's fail-loud gate). Split it with the shared parser — the
+        // one every runner uses — into opencode's `{ providerID, modelID }`.
+        const id = parseModelIdentity(this.spec.model);
+        if (id)
+            body.model = { providerID: id.provider, modelID: id.model };
+        try {
+            await this.http('POST', `/session/${this.sessionId}/prompt_async`, body);
+        }
+        catch (err) {
+            // No turn started server-side, so no `session.idle` will ever close it —
+            // surface the failure and end the turn here instead of parking the run.
+            const message = err instanceof Error ? err.message : String(err);
+            this.emit({ type: 'note', message: `opencode: prompt failed: ${message}` });
+            this.finishTurn();
+            // Rethrow so `bootstrap` still rejects when the FIRST prompt cannot be
+            // posted: the run's result path turns that into a v1 `error`, which is
+            // the only event run.ts records failure from — a swallowed rejection
+            // would let an empty result mark the step successful. `sendMessage`
+            // discards the rethrow (the note + turn-end above already told the
+            // session's user), so a mid-session failure stays non-fatal, as before.
+            throw err;
+        }
+    }
+    /** The single v1 turn-end: from the session's own `session.idle`, the
+     *  prompt-POST failure path, or the teardown safety net — whichever comes
+     *  first; the guards make every later call a no-op. */
+    finishTurn() {
+        if (!this.turnActive || this.turnEnded)
+            return;
+        this.turnEnded = true;
+        this.turnActive = false;
+        this.questionCapture = undefined;
+        // SSE idle can beat the independent reply HTTP response. The active reply
+        // owns pending-question cleanup; without one, the pending ask is stale.
+        if (!this.questionReply)
+            this.pendingQuestion = undefined;
+        this.turnFinishedResolve();
+        // A part that never saw `time.end` (abort, server quirk) still surfaces
+        // its prose before the turn boundary (run.ts reads markers there).
+        this.textCoalescer.flush();
+        this.emit({ type: 'turn-end' });
+        if (!this.questionReply)
+            this.scheduleAutoEnd();
+    }
+    // ---- SSE stream ---------------------------------------------------------
+    /** Resolves once the SSE stream is CONNECTED (headers in) — the frames are
+     *  then drained in the background. Callers await the connection so no
+     *  event emitted after this resolves can be missed.
+     *
+     *  Speaks node:http, not fetch: undici's default Agent cuts a response
+     *  body idle for 300s, which would sever a quiet turn's bus mid-run (#4) —
+     *  node's own client has no idle timeout. (`process.getBuiltinModule`
+     *  cannot fix that: undici is bundled into node but not exposed as a
+     *  built-in, so there is no no-timeout dispatcher to hand fetch without
+     *  taking undici as a real dependency.)
+     *
+     *  A connection that cannot be established throws, failing `bootstrap`:
+     *  with `prompt_async` this stream is the only source of turn-ends, so a
+     *  session that cannot hear it is dead on arrival, not degraded. */
+    async consumeEvents() {
+        if (!this.baseUrl)
+            return;
+        let res;
+        try {
+            res = await new Promise((resolve, reject) => {
+                const req = httpRequest(`${this.baseUrl}/event`, { headers: { accept: 'text/event-stream' }, signal: this.sse.signal }, resolve);
+                req.on('error', reject);
+                req.end();
+            });
+        }
+        catch (err) {
+            if (this.sse.signal.aborted)
+                return; // torn down during bootstrap — not a failure
+            const message = err instanceof Error ? err.message : String(err);
+            throw new Error(`event stream failed to connect: ${message}`);
+        }
+        // node:http hands over EVERY response, error statuses included — a proxy's
+        // 401 or a non-SSE 500 body is not an event bus, however well it parses.
+        const status = res.statusCode ?? 0;
+        if (status < 200 || status >= 300) {
+            res.resume(); // discard the body so the socket is released
+            throw new Error(`event stream failed to connect: HTTP ${status}`);
+        }
+        void this.readEvents(res);
+    }
+    async readEvents(res) {
+        // StringDecoder under the hood — multi-byte characters split across
+        // chunks arrive whole, like the TextDecoder streaming mode did.
+        res.setEncoding('utf8');
+        let buffer = '';
+        try {
+            for await (const chunk of res) {
+                buffer += chunk;
+                let sep;
+                while ((sep = buffer.indexOf('\n\n')) >= 0) {
+                    const frame = buffer.slice(0, sep);
+                    buffer = buffer.slice(sep + 2);
+                    this.handleFrame(frame);
+                }
+            }
+        }
+        catch {
+            // aborted — normal on end()/interrupt
+        }
+        finally {
+            // `session.idle` rides this stream and nothing else — a feed that dies
+            // while the server is still up would otherwise park the current turn
+            // forever and leave every later prompt unanswerable. An `error`, not a
+            // note: the turn's remaining output is lost, so the step must record a
+            // failure (run.ts classifies from v1 `error` only), never pass as an
+            // empty success. Then close the turn (flushing what did arrive) and end
+            // the session; "Continue" resumes it on a fresh server.
+            if (this.serverOpen && !this.sse.signal.aborted) {
+                this.emit({ type: 'error', message: 'opencode: event stream closed unexpectedly' });
+                this.finishTurn();
+                this.end();
+            }
+        }
+    }
+    handleFrame(frame) {
+        const dataLines = frame
+            .split('\n')
+            .filter((l) => l.startsWith('data:'))
+            .map((l) => l.slice(5).trim());
+        if (dataLines.length === 0)
+            return;
+        let evt;
+        try {
+            evt = JSON.parse(dataLines.join('\n'));
+        }
+        catch {
+            return;
+        }
+        this.emitUi((state) => mapOpencodeEvent(evt, state));
+        this.handleEvent(evt);
+    }
+    handleEvent(evt) {
+        const type = evt.type ?? '';
+        const props = evt.properties ?? {};
+        if (type === 'message.updated' || type === 'message.created' || type === 'message.completed') {
+            const info = props.info ?? props;
+            const mid = stringField(info, 'id');
+            const role = stringField(info, 'role');
+            if (mid && role)
+                this.msgRole.set(mid, role);
+            this.absorbUsage(info);
+        }
+        else if (type === 'message.part.updated' || type === 'message.part.created') {
+            this.handlePart(props.part ?? props);
+        }
+        else if (type === 'session.idle') {
+            // THE turn-end signal. The SSE bus is server-wide, so a child session's
+            // (sub-agent's) idle must not close the main turn; an idle with no
+            // sessionID is treated as ours, like the v2 mapper does.
+            const sid = stringField(props, 'sessionID');
+            if (sid === undefined || sid === this.sessionId)
+                this.finishTurn();
+        }
+        else if (type === 'session.error') {
+            // The wire's only failure signal, now that the prompt POST returns
+            // before the turn runs: forward it to v1, whose `error` events are what
+            // run.ts records failed steps from — dropped, the terminal idle would
+            // file a provider/auth failure as a successful step. The idle that
+            // follows still closes the turn.
+            const sid = stringField(props, 'sessionID');
+            if (sid === undefined || sid === this.sessionId) {
+                this.emit({ type: 'error', message: `opencode: ${sessionErrorText(props.error)}` });
+            }
+        }
+    }
+    handlePart(part) {
+        // The SSE bus carries every session on the server — drop parts that
+        // belong to another one (a sub-agent's stream is surfaced by v2 only).
+        const partSession = stringField(part, 'sessionID');
+        if (partSession !== undefined && this.sessionId !== undefined && partSession !== this.sessionId)
+            return;
+        // Only surface parts of assistant messages — the user's own message streams
+        // over the same feed. Role is known early (the message.updated event
+        // precedes its parts); an unknown role means "not assistant yet" → skip.
+        const messageID = stringField(part, 'messageID');
+        if (messageID && this.msgRole.get(messageID) !== 'assistant')
+            return;
+        const kind = stringField(part, 'type');
+        const id = stringField(part, 'id') ?? messageID ?? '';
+        if (kind === 'text') {
+            const full = stringField(part, 'text') ?? '';
+            const seen = this.textSeen.get(id) ?? 0;
+            if (full.length > seen) {
+                this.textSeen.set(id, full.length);
+                this.textCoalescer.append(id, full.slice(seen));
+            }
+            // `time.end` marks the part finished (same signal the v2 mapper uses) —
+            // emit the whole block once, preferring the snapshot's full text.
+            const time = part.time;
+            if (time && typeof time === 'object' && typeof time.end === 'number') {
+                this.textCoalescer.complete(id, full);
+            }
+        }
+        else if (kind === 'tool') {
+            const state = part.state ?? {};
+            const status = stringField(state, 'status');
+            const name = stringField(part, 'tool') ?? stringField(part, 'name') ?? 'tool';
+            const questionPartId = stringField(part, 'id') ?? stringField(part, 'callID') ?? messageID;
+            const questionInput = state.input ?? state;
+            const questionReady = name === 'question' && (toCezarQuestions(questionInput) !== null || status !== 'pending');
+            if (questionReady &&
+                this.turnActive &&
+                this.pendingQuestion === undefined &&
+                this.questionCapture === undefined &&
+                this.questionReply === undefined &&
+                (questionPartId === undefined || !this.handledQuestionParts.has(questionPartId))) {
+                if (questionPartId)
+                    this.handledQuestionParts.add(questionPartId);
+                const capture = this.captureQuestion(questionInput);
+                this.questionCapture = capture;
+                const clearCapture = () => {
+                    if (this.questionCapture === capture)
+                        this.questionCapture = undefined;
+                };
+                void capture.then(clearCapture, clearCapture);
+            }
+            const callId = id || `${name}-${this.toolsSeen.size}`;
+            if (!this.toolsSeen.has(callId)) {
+                this.toolsSeen.add(callId);
+                this.toolCalls.push({ id: callId, name, input: state.input ?? state });
+                this.emit({ type: 'tool-call', id: callId, tool: name, input: state.input ?? state });
+            }
+            if (status === 'completed' || status === 'error') {
+                this.emit({
+                    type: 'tool-result',
+                    toolCallId: callId,
+                    result: safeStringify(state.output ?? state.result ?? state),
+                    isError: status === 'error',
+                });
+            }
+        }
+    }
+    /** Pull cumulative tokens/cost out of an assistant message info object. */
+    absorbUsage(info) {
+        if (!info)
+            return;
+        const tokens = info.tokens;
+        if (tokens) {
+            const input = numField(tokens, 'input');
+            const output = numField(tokens, 'output');
+            const reasoning = numField(tokens, 'reasoning');
+            const total = input + output + reasoning;
+            if (total > this.tokensUsed) {
+                this.tokensUsed = total;
+                this.emit({ type: 'token-usage', tokensUsed: this.tokensUsed });
+            }
+        }
+        const cost = numField(info, 'cost');
+        if (cost > this.lastCost) {
+            this.emit({ type: 'cost', usd: cost - this.lastCost });
+            this.lastCost = cost;
+        }
+    }
+    async captureQuestion(input) {
+        const questions = toCezarQuestions(input);
+        const turnSerial = this.turnSerial;
+        let requestId;
+        for (let attempt = 0; attempt < 8; attempt += 1) {
+            if (!this.turnActive || this.turnSerial !== turnSerial)
+                return;
+            requestId = await this.pendingQuestionId().catch(() => undefined);
+            if (requestId)
+                break;
+            if (attempt < 7)
+                await sleep(150);
+        }
+        if (!this.turnActive || this.turnSerial !== turnSerial)
+            return;
+        if (!questions) {
+            if (!requestId) {
+                this.emit({
+                    type: 'error',
+                    message: 'opencode: unsupported native question could not be rejected: no pending question id',
+                });
+                this.finishTurn();
+                this.end();
+                return;
+            }
+            try {
+                await this.http('POST', `/question/${encodeURIComponent(requestId)}/reject`, undefined);
+                this.emit({ type: 'note', message: 'opencode: unsupported native question rejected' });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                this.emit({
+                    type: 'error',
+                    message: `opencode: unsupported native question rejection failed: ${message}`,
+                });
+                this.finishTurn();
+                this.end();
+            }
+            return;
+        }
+        const pending = {
+            requestId,
+            askRequestId: requestId ?? `opencode-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+            questions,
+        };
+        this.pendingQuestion = pending;
+        this.emitQuestion(pending);
+    }
+    emitQuestion(pending) {
+        this.emitUi((state) => ({
+            state,
+            events: [
+                {
+                    type: 'ask.requested',
+                    requestId: pending.askRequestId,
+                    questions: pending.questions,
+                },
+            ],
+        }));
+    }
+    async pendingQuestionId() {
+        const value = await this.http('GET', '/question', undefined);
+        if (!Array.isArray(value))
+            return undefined;
+        for (const entry of value) {
+            if (!isRecord(entry) || stringField(entry, 'sessionID') !== this.sessionId)
+                continue;
+            const id = stringField(entry, 'id');
+            if (id)
+                return id;
+        }
+        return undefined;
+    }
+    async replyQuestion(pending, text) {
+        try {
+            const requestId = pending.requestId ?? (await this.pendingQuestionId());
+            if (!requestId)
+                throw new Error('no pending question id');
+            pending.requestId = requestId;
+            await this.http('POST', `/question/${encodeURIComponent(requestId)}/reply`, {
+                answers: questionAnswers(pending.questions, text),
+            });
+            if (this.pendingQuestion === pending)
+                this.pendingQuestion = undefined;
+            const queued = this.queuedQuestionMessages.splice(0);
+            for (const message of queued)
+                this.deliverPrompt(message);
+            if (queued.length === 0 && this.turnEnded)
+                this.scheduleAutoEnd();
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            this.emit({ type: 'note', message: `opencode: question reply failed: ${message}` });
+            if (this.pendingQuestion === pending)
+                this.emitQuestion(pending);
+        }
+    }
+    // ---- http ---------------------------------------------------------------
+    async http(method, path, body) {
+        if (!this.baseUrl)
+            throw new Error('opencode server not ready');
+        // Plain fetch is fine here: every call is a short round-trip now that
+        // prompts go through `prompt_async` — nothing long-polls anymore.
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method,
+            headers: body !== undefined ? { 'content-type': 'application/json' } : {},
+            body: body !== undefined ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const detail = await res.text().catch(() => '');
+            throw new Error(`${method} ${path} → ${res.status} ${detail.slice(0, 200)}`);
+        }
+        const text = await res.text();
+        if (!text)
+            return {};
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return {};
+        }
+    }
+    emit(event) {
+        this.onEvent?.(event);
+    }
+    /** The mapper never throws, but a defect in it must still never disturb
+     *  the v1 stream — hence the belt-and-braces try. */
+    emitUi(map) {
+        try {
+            const mapped = map(this.uiState);
+            this.uiState = mapped.state;
+            if (this.opts.onUiEvent) {
+                for (const event of mapped.events)
+                    this.opts.onUiEvent(event);
+            }
+        }
+        catch {
+            // v2 mapping is best-effort; v1 consumers stay unaffected.
+        }
+    }
+}
+function textOf(content) {
+    return content
+        .filter((b) => b.type === 'text')
+        .map((b) => b.text)
+        .join('\n')
+        .trim();
+}
+function toCezarQuestions(value) {
+    if (!isRecord(value) || !Array.isArray(value.questions))
+        return null;
+    if (value.questions.length < 1 || value.questions.length > 4)
+        return null;
+    const questions = [];
+    for (const rawQuestion of value.questions) {
+        if (!isRecord(rawQuestion))
+            return null;
+        const header = clippedString(rawQuestion.header, 12);
+        const question = clippedString(rawQuestion.question, 400);
+        if (!header || !question || !Array.isArray(rawQuestion.options))
+            return null;
+        const options = [];
+        for (const rawOption of rawQuestion.options) {
+            if (options.length === 4)
+                break;
+            if (!isRecord(rawOption))
+                continue;
+            const label = clippedString(rawOption.label, 60);
+            if (!label)
+                continue;
+            const description = clippedString(rawOption.description, 280);
+            options.push({ label, ...(description ? { description } : {}) });
+        }
+        if (options.length < 2)
+            return null;
+        questions.push({
+            header,
+            question,
+            options,
+            ...(rawQuestion.multiple === true ? { multiSelect: true } : {}),
+        });
+    }
+    return parseAskRequest({ questions })?.questions ?? null;
+}
+function questionAnswers(questions, text) {
+    const answers = questions.map(() => []);
+    const matched = new Set();
+    for (const line of text.split('\n')) {
+        const trimmed = line.trim();
+        const index = questions.findIndex((question, questionIndex) => !matched.has(questionIndex) && trimmed.startsWith(`${question.header}:`));
+        if (index < 0)
+            continue;
+        matched.add(index);
+        answers[index] = trimmed
+            .slice(questions[index].header.length + 1)
+            .split(',')
+            .map((answer) => answer.trim())
+            .filter(Boolean);
+    }
+    if (matched.size === 0 && answers[0])
+        answers[0] = [text.trim()];
+    return answers;
+}
+function clippedString(value, max) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed ? trimmed.slice(0, max) : undefined;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function stringField(obj, key) {
+    const v = obj[key];
+    return typeof v === 'string' ? v : undefined;
+}
+/** Same reading of the wire error shape as the v2 mapper's `errorText`
+ *  (`opencode-ui-mapper.ts`): a bare string, `{message}`, `{data:{message}}`
+ *  (the real server's `ProviderAuthError` shape), or `{name}` as a last resort. */
+function sessionErrorText(error) {
+    if (typeof error === 'string')
+        return error;
+    if (typeof error !== 'object' || error === null)
+        return 'session error';
+    const rec = error;
+    const data = typeof rec.data === 'object' && rec.data !== null ? rec.data : undefined;
+    return (stringField(rec, 'message') ??
+        (data && stringField(data, 'message')) ??
+        stringField(rec, 'name') ??
+        'session error');
+}
+function numField(obj, key) {
+    const v = obj[key];
+    return typeof v === 'number' ? v : 0;
+}
+function safeStringify(value) {
+    if (typeof value === 'string')
+        return value;
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+function wrapSpawnError(err, bin) {
+    const code = err?.code;
+    if (code === 'ENOENT') {
+        return new Error(`\`${bin}\` not found on PATH — install OpenCode (https://opencode.ai) and run \`opencode\` once to configure a provider`);
+    }
+    return err instanceof Error ? err : new Error(String(err));
+}
+//# sourceMappingURL=opencode-server-runner.js.map