@zhihaohong52/sonata 0.4.0

package/dist/adapters/pi.js

@@ -0,0 +1,152 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { isReadOnlyRole } from '../config.js';
+const run = promisify(execFile);
+/**
+ * Pi adapter.
+ *
+ * Pi "intentionally does not include built-in MCP, sub-agents, permission
+ * popups, plan mode, to-dos, or background bash" — there are no approval
+ * prompts and no sandbox to lean on. A write-capable role therefore runs with
+ * all of pi's built-in tools or not at all, and sonata must map `default` mode
+ * the same way it does for opencode: refuse rather than run ungated.
+ *
+ * `--mode json` emits a working NDJSON event stream, which would give sonata
+ * machine-readable output, but text mode keeps `tmux attach` readable — so
+ * sonata sticks with `-p`. JSON mode remains a seam for future work.
+ */
+/**
+ * Empty, and that is the finding rather than an omission.
+ *
+ * Pi documents that it has no permission popups, so no pattern could ever
+ * fire. Its non-interactive modes (`-p`, `--mode json`, `--mode rpc`) never
+ * show a project-trust prompt either, so there is no codex-style trust blocker
+ * to match.
+ */
+const PROMPT_PATTERNS = [];
+function shellQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+function buildScript(input) {
+    const readOnly = isReadOnlyRole(input.role) || input.mode === 'plan';
+    // `default` means "ask before doing anything irreversible". Pi cannot ask —
+    // it has no approval prompts and no sandbox — so honouring the mode is
+    // impossible. Running anyway would make a sonata subagent more permissive
+    // than the session that dispatched it, silently. Refuse instead, and say why.
+    //
+    // Read-only roles are exempt: there is nothing for them to ask about.
+    if (input.mode === 'default' && !readOnly) {
+        throw new Error('sonata: pi cannot ask for approval, so it cannot honour `default` ' +
+            'permission mode. Re-dispatch in acceptEdits or bypassPermissions to run ' +
+            'it ungated, or use a codex model, whose TUI does prompt.');
+    }
+    // `--model` accepts a combined provider/id form as a single flag, e.g.
+    // opencode-go/deepseek-v4-flash; no separate `--provider` flag is needed.
+    // `--no-context-files` stops pi re-reading AGENTS.md / CLAUDE.md: sonata
+    // composes its own instructions and injects repo context, so pi would just
+    // duplicate it.
+    const flags = ['-p', `--model ${shellQuote(input.modelId)}`, '--no-context-files'];
+    // `--tools` is an allowlist, genuinely enforced: a read-only role gets only
+    // the read-side tools and cannot write even in bypassPermissions.
+    if (readOnly)
+        flags.push('--tools read,grep,find,ls');
+    // The instructions path is given in the prompt rather than piped, so stdin
+    // stays free and the prompt survives the harness's own formatting.
+    const prompt = 'Follow the instructions in the attached file.\n\n' +
+        `Instructions file: ${input.instructionsPath}`;
+    const script = [
+        '#!/bin/bash',
+        'set -o pipefail',
+        'export PATH="$HOME/.local/bin:$PATH"',
+        `cd ${shellQuote(input.cwd)} || exit 97`,
+        `pi ${flags.join(' ')} ${shellQuote(prompt)} 2>&1 | tee -a ${shellQuote(`${input.runDir}/harness.log`)}`,
+        `echo $? > ${shellQuote(`${input.runDir}/exit`)}`,
+        '',
+    ].join('\n');
+    // A read-only allowlist removes the write tool outright, so the model cannot
+    // write report.md either. That is the cost of pi's enforcement being real
+    // rather than advisory, and sonata must not report such a run as degraded.
+    return { script, interactive: false, canWriteReport: !readOnly };
+}
+const NO_PROVIDER = {
+    severity: 'error',
+    message: 'pi has no usable model provider configured',
+    fix: 'pi auth check --provider <name>',
+};
+/**
+ * The listing always starts with a `provider  model  context ...` header, so
+ * "output is non-empty" is not evidence that any model exists — the header
+ * alone would report a broken install as healthy.
+ */
+const PI_HEADER = /^provider\s+model\b/;
+/**
+ * Parses `pi --list-models`, a whitespace-aligned table whose first two
+ * columns are the provider and the model.
+ *
+ * Rows are read only AFTER the header, because pi does not always print a
+ * table. With no provider configured it prints prose, captured verbatim in
+ * `tests/fixtures/pi/no-models.txt`:
+ *
+ *     No models available. Use /login to log into a provider via OAuth or …
+ *
+ * Splitting that on whitespace yielded the phantom model `No/models`, which
+ * `countModelRows` then counted as one real row — so `piHealth` reported an
+ * unconfigured pi as healthy, and `sonata init` offered `No/models` for
+ * selection. Gating on the header rejects every prose form at once, including
+ * `No models matching "<pattern>"` from a search that matched nothing.
+ */
+export function parsePiRefs(stdout) {
+    const out = [];
+    let inTable = false;
+    for (const raw of stdout.split('\n')) {
+        const line = raw.trim();
+        if (line.length === 0)
+            continue;
+        if (!inTable) {
+            // Anything before the header is prose, not a truncated table.
+            if (PI_HEADER.test(line))
+                inTable = true;
+            continue;
+        }
+        const cols = line.split(/\s+/);
+        // A real row carries all six columns. Fewer means the line is not a row,
+        // and must not become a ref with an undefined id.
+        if (cols.length < 2)
+            continue;
+        const [provider, id] = cols;
+        out.push({ harness: 'pi', provider, id, ref: `${provider}/${id}` });
+    }
+    return out;
+}
+/** Counts real model rows, for the health check. */
+export function countModelRows(stdout) {
+    return parsePiRefs(stdout).length;
+}
+async function piHealth(_env) {
+    try {
+        // Hard timeout: pi can block when a provider is unreachable, and doctor
+        // must never hang. `--list-models` needs a configured provider, so an
+        // empty list means there is nothing to run against.
+        const { stdout } = await run('pi', ['--list-models'], { timeout: 5_000 });
+        return countModelRows(stdout) > 0 ? [] : [NO_PROVIDER];
+    }
+    catch {
+        return [NO_PROVIDER];
+    }
+}
+export const piAdapter = {
+    name: 'pi',
+    versionCommand: ['pi', '--version'],
+    supportedVersions: '>=0.84.0 <1.0.0',
+    pathPrepend: ['$HOME/.local/bin'],
+    plan: buildScript,
+    canPromptForApproval: false,
+    promptPatterns: PROMPT_PATTERNS,
+    describePrompt() {
+        return null;
+    },
+    /** Nothing to send: pi never waits for an answer. */
+    approveKeys: { yes: [], no: [] },
+    health: piHealth,
+};
+//# sourceMappingURL=pi.js.map

package/dist/adapters/pi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi.js","sourceRoot":"","sources":["../../src/adapters/pi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC;;;;;;;;;;;;GAYG;AAEH;;;;;;;GAOG;AACH,MAAM,eAAe,GAAa,EAAE,CAAC;AAErC,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAgB;IACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;IAErE,4EAA4E;IAC5E,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,EAAE;IACF,sEAAsE;IACtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,oEAAoE;YACpE,0EAA0E;YAC1E,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,gBAAgB;IAChB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,WAAW,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACnF,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAEtD,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,MAAM,GAAG,mDAAmD;QAChE,sBAAsB,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAEjD,MAAM,MAAM,GAAG;QACb,aAAa;QACb,iBAAiB;QACjB,sCAAsC;QACtC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,kBAAkB,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,cAAc,CAAC,EAAE;QACxG,aAAa,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,CAAC,EAAE;QACjD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,WAAW,GAAmB;IAClC,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,4CAA4C;IACrD,GAAG,EAAE,iCAAiC;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAExC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,8DAA8D;YAC9D,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC;YACzC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,yEAAyE;QACzE,kDAAkD;QAClD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,QAAQ,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAmC;IACzD,IAAI,CAAC;QACH,wEAAwE;QACxE,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC,IAAI,EAAE,IAAI;IACV,cAAc,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;IACnC,iBAAiB,EAAE,iBAAiB;IACpC,WAAW,EAAE,CAAC,kBAAkB,CAAC;IACjC,IAAI,EAAE,WAAW;IACjB,oBAAoB,EAAE,KAAK;IAC3B,cAAc,EAAE,eAAe;IAC/B,cAAc;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,qDAAqD;IACrD,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;IAChC,MAAM,EAAE,QAAQ;CACjB,CAAC"}

package/dist/adapters/reasonix.js

@@ -0,0 +1,358 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { isReadOnlyRole } from '../config.js';
+const run = promisify(execFile);
+/**
+ * Reasonix adapter.
+ *
+ * Reasonix is the second harness after codex that can genuinely ask a human for
+ * approval, so it is the second that can honour `default` mode instead of
+ * refusing it. Everything below was probed against reasonix v1.26.0; the
+ * captured panes are in tests/fixtures/panes/reasonix-*.txt.
+ *
+ * The mode mapping is not the obvious one:
+ *
+ * - `plan` is REFUSED by `reasonix run` — "--permission-mode plan requires an
+ *   interactive session", exit 2. Read-only work therefore uses `dontAsk`,
+ *   which denies without prompting, rather than plan mode.
+ * - `dontAsk` is real enforcement. Probed: a run asked to read a file and then
+ *   write one read it fine and was refused both the write tool AND the shell
+ *   fallback (`printf … > report.md`), reporting "denied by permission policy".
+ *   It cannot write report.md either, hence `canWriteReport: false`.
+ * - `acceptEdits` and `bypassPermissions` write unprompted, probed both ways.
+ * - `-y` / `--auto` is NOT used anywhere here. It is an alias for reasonix's
+ *   own `auto` mode, which is wider than Claude Code's `auto` — it skips
+ *   risk-based prompts for things like `git push`. Since sonata maps Claude's
+ *   `auto` onto `acceptEdits`, reaching for the similarly named flag would
+ *   silently widen permissions. Always pass `--permission-mode` explicitly.
+ */
+/**
+ * Written from real captured output, never from the docs. Three shapes block a
+ * run, and the third is the one that would otherwise be missed: the model
+ * asking the *user* a question stops a dispatch just as hard as an approval.
+ *
+ * Deliberately narrow. Reasonix relays the model's own prose into the pane, so
+ * a loose /allow|deny/ would park a run in PAUSED over a sentence the model
+ * merely wrote.
+ */
+const PROMPT_PATTERNS = [
+    // The tool approval card: "Will call tool write file report.md."
+    /^\s*will call tool\b/i,
+    // Every reasonix selection list prints this footer, and only when waiting.
+    /↑\/↓\s*navigate\s*·\s*enter select/i,
+    // The plan-confirmation prompt. The adapter never selects plan mode, but a
+    // user attached to the pane can switch into it with Shift+Tab, and a run
+    // parked here is stalled until somebody answers.
+    /^\s*⏸\s*plan ready above/i,
+    // The model asking the user a multi-select question mid-run.
+    /↑\/↓\s*move\s*·\s*number to pick/i,
+];
+/** Longest prompt block worth relaying; reasonix's lists are far shorter. */
+const MAX_PROMPT_LINES = 14;
+/** Line that introduces a block, used to walk back up from a matched footer. */
+const PROMPT_HEAD = /^\s*(will call tool\b|⏸\s*plan ready above)/i;
+/**
+ * The pane text reasonix prints only when it is idle and ready for input.
+ *
+ * Used by the interactive launch script to know when the composer exists.
+ * Matching the composer glyph instead would fire on any selection list, which
+ * also draws `❯`.
+ */
+const READY_MARKER = 'Shift+Tab ask/auto/plan';
+function shellQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * `reasonix run --permission-mode <x>`, for everything except `default`.
+ *
+ * Read-only roles pin `dontAsk` whatever the session mode says, so a review or
+ * explore dispatch can never write even under bypassPermissions.
+ */
+function permissionModeFor(input, readOnly) {
+    if (readOnly)
+        return 'dontAsk';
+    switch (input.mode) {
+        case 'acceptEdits':
+            return 'acceptEdits';
+        case 'bypassPermissions':
+            return 'bypassPermissions';
+        default:
+            // `plan` never reaches here — it is read-only, so it took the branch
+            // above. Anything unrecognised fails closed.
+            return 'dontAsk';
+    }
+}
+function buildScript(input) {
+    // A read-only role must never be able to write, whatever the session mode
+    // says. `plan` mode is read-only for every role.
+    const readOnly = isReadOnlyRole(input.role) || input.mode === 'plan';
+    const interactive = input.mode === 'default' && !readOnly;
+    const script = interactive ? interactiveScript(input) : headlessScript(input, readOnly);
+    // Under `dontAsk` the model is refused the write tool and the shell fallback
+    // alike, so it cannot write report.md. Nothing went wrong; sonata takes the
+    // terminal output as the report and must not mark such a run degraded.
+    return { script, interactive, canWriteReport: !readOnly };
+}
+function headlessScript(input, readOnly) {
+    // The instructions path is given in the prompt rather than piped, so stdin
+    // stays free and the prompt survives the harness's own formatting.
+    const prompt = 'Follow the instructions in the attached file.\n\n' +
+        `Instructions file: ${input.instructionsPath}`;
+    // `--output-format text` rather than json: the pane is what `tmux attach` and
+    // sonata's progress diffing both read, and json collapses a whole run into a
+    // single unreadable line at the end. The final message is the last thing
+    // printed either way.
+    const flags = [
+        'run',
+        `--dir ${shellQuote(input.cwd)}`,
+        `--model ${shellQuote(input.modelId)}`,
+        `--permission-mode ${permissionModeFor(input, readOnly)}`,
+        '--output-format text',
+    ];
+    return [
+        '#!/bin/bash',
+        'set -o pipefail',
+        `cd ${shellQuote(input.cwd)} || exit 97`,
+        `reasonix ${flags.join(' ')} ${shellQuote(prompt)} 2>&1 | tee -a ${shellQuote(`${input.runDir}/harness.log`)}`,
+        `echo $? > ${shellQuote(`${input.runDir}/exit`)}`,
+        '',
+    ].join('\n');
+}
+/**
+ * `default` mode: the interactive TUI, which is the only way reasonix will ask
+ * before acting.
+ *
+ * Two things make this script unlike every other adapter's.
+ *
+ * First, the TUI ignores positional task text — probed, the composer comes up
+ * empty — so the task has to be typed in. The script addresses its own tmux
+ * session (`display-message -p '#S'` resolves from inside the pane) and types
+ * the prompt once the composer exists. It polls for the ready marker rather
+ * than sleeping a fixed interval, because model and machine both move the
+ * startup time around.
+ *
+ * Second, there is no `tee`. Probed: piping the TUI's stdout leaves the pane
+ * completely blank — the renderer needs a terminal. A log file is not worth a
+ * run nobody can see or answer, and nothing reads harness.log as the report.
+ *
+ * Third, the TUI is a chat session: it does not exit when the task is done, it
+ * waits for the next message. Left alone it never writes the exit sentinel, so
+ * a finished run sits at PROGRESS until the stall timeout and is then killed
+ * and reported degraded — with its report sitting right there. The same
+ * watcher therefore quits the TUI once the report appears, which is the
+ * harness's own signal that the task is over.
+ */
+function interactiveScript(input) {
+    // Single line: send-keys types this literally, so an embedded newline would
+    // submit the message halfway through.
+    const prompt = `Follow the instructions in the attached file: ${input.instructionsPath}`;
+    const reportPath = `${input.runDir}/report.md`;
+    const exitPath = `${input.runDir}/exit`;
+    const flags = [
+        `--dir ${shellQuote(input.cwd)}`,
+        `--model ${shellQuote(input.modelId)}`,
+        // Explicit, because the user's own config may default to another mode.
+        '--permission-mode ask',
+    ];
+    return [
+        '#!/bin/bash',
+        'set -o pipefail',
+        `cd ${shellQuote(input.cwd)} || exit 97`,
+        `SESSION="$(tmux display-message -p '#S')"`,
+        '(',
+        // 60 seconds of half-second polls. If the TUI never becomes ready the
+        // prompt is simply never typed, and the run stalls visibly rather than
+        // typing a task into whatever is on screen instead.
+        '  for _ in $(seq 1 120); do',
+        `    tmux capture-pane -p -t "$SESSION" | grep -qF ${shellQuote(READY_MARKER)} && break`,
+        '    sleep 0.5',
+        '  done',
+        `  tmux send-keys -t "$SESSION" -l ${shellQuote(prompt)}`,
+        // Enter is sent separately: -l types literally, and the composer needs a
+        // beat to register the text before it will submit it.
+        '  sleep 1',
+        '  tmux send-keys -t "$SESSION" Enter',
+        // The report is the harness's own "task over" signal. Until it lands, the
+        // model may still be working or waiting on an approval, and quitting would
+        // throw the run away. If it never lands, this waits forever and the
+        // watchdog ends the run — the same outcome as any harness that hangs.
+        `  while [ ! -f ${shellQuote(reportPath)} ]; do sleep 2; done`,
+        // Ctrl-D, never the documented `exit` + Enter. Typing blind into a TUI
+        // races with it: if a selection list happens to be open, the letters are
+        // swallowed by the list and the Enter picks whatever row is highlighted.
+        // Observed — a run typed `exit` into an approval card and carried on.
+        // Ctrl-D cannot select anything, so at worst it is ignored and retried.
+        //
+        // The exit sentinel is the acknowledgement: it is written the moment
+        // reasonix returns, so it doubles as "the quit landed".
+        '  for _ in $(seq 1 20); do',
+        `    [ -f ${shellQuote(exitPath)} ] && break`,
+        // A stray key can remain in the composer after a prompt is answered. A
+        // run observed with `1` in the composer ignored every Ctrl-D until the
+        // line was cleared, so kill the line before each quit attempt.
+        '    tmux send-keys -t "$SESSION" C-u',
+        '    tmux send-keys -t "$SESSION" C-d',
+        '    sleep 3',
+        '  done',
+        ') >/dev/null 2>&1 &',
+        `reasonix ${flags.join(' ')}`,
+        `echo $? > ${shellQuote(`${input.runDir}/exit`)}`,
+        '',
+    ].join('\n');
+}
+/**
+ * Parses `reasonix doctor --json` into refs.
+ *
+ * Reasonix's `--model` takes `<provider>` or `<provider>/<model>`, and a
+ * provider can serve many models — the probe machine had one serving twelve —
+ * so the qualified form is what sonata stores. That makes reasonix
+ * opencode-shaped rather than codex-shaped, which `parseConfig` enforces.
+ *
+ * Read `models[]`, never the singular `model`: that key is absent entirely from
+ * a provider entry that serves more than one model, so keying off it would drop
+ * every multi-model provider and keep only the single-model ones.
+ */
+export function parseReasonixRefs(stdout) {
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch {
+        return [];
+    }
+    const providers = parsed?.providers;
+    if (!Array.isArray(providers))
+        return [];
+    const out = [];
+    for (const p of providers) {
+        if (p === null || typeof p !== 'object')
+            continue;
+        if (typeof p.name !== 'string' || p.name.length === 0)
+            continue;
+        // A provider whose key is missing cannot run anything. Offering it would
+        // put a model in the picker that fails on first dispatch.
+        if (p.key_present !== true)
+            continue;
+        const models = Array.isArray(p.models) ? p.models : [];
+        for (const id of models) {
+            if (typeof id !== 'string' || id.length === 0)
+                continue;
+            out.push({
+                harness: 'reasonix',
+                provider: p.name,
+                id,
+                ref: `${p.name}/${id}`,
+            });
+        }
+    }
+    return out;
+}
+/** Asks reasonix for its own diagnostics, bounded so doctor never hangs. */
+export async function reasonixDoctorJson(timeoutMs = 10_000) {
+    try {
+        const { stdout } = await run('reasonix', ['doctor', '--json'], { timeout: timeoutMs });
+        return stdout;
+    }
+    catch {
+        return null;
+    }
+}
+const NO_PROVIDER = {
+    severity: 'error',
+    message: 'reasonix has no provider with a usable API key',
+    fix: 'reasonix setup',
+};
+/**
+ * Whether the telemetry consent question has been answered.
+ *
+ * On a machine that has never answered it, the very first invocation blocks on
+ * "Allow anonymous CLI usage statistics? [Y/n]:" before the agent starts at
+ * all — so an unattended dispatch hangs there forever, which looks exactly like
+ * a model that never said anything. Probed on a fresh install.
+ */
+export function telemetryAnswered(configText) {
+    return /^\s*cli_metrics\s*=/m.test(configText);
+}
+async function reasonixHealth(env) {
+    const problems = [];
+    const configPath = join(env.home, '.reasonix', 'config.toml');
+    const configText = existsSync(configPath) ? readFileSync(configPath, 'utf8') : '';
+    if (!telemetryAnswered(configText)) {
+        problems.push({
+            severity: 'error',
+            message: 'reasonix has not been told whether it may send usage statistics, so its first run will block on that question before starting',
+            fix: 'reasonix config telemetry off',
+        });
+    }
+    const json = await reasonixDoctorJson();
+    if (json === null) {
+        problems.push({
+            severity: 'error',
+            message: 'reasonix doctor failed or timed out',
+            fix: 'reasonix doctor',
+        });
+        return problems;
+    }
+    if (parseReasonixRefs(json).length === 0)
+        problems.push(NO_PROVIDER);
+    // Reasonix loads the working directory's .mcp.json on top of its own config.
+    // In this repository that hands a foreign model sonata's own run/tail/approve
+    // tools, so a dispatched model can dispatch further models. Probed: `doctor`
+    // in /tmp lists no plugins; the same command here lists `sonata`.
+    if (existsSync(join(env.cwd, '.mcp.json'))) {
+        problems.push({
+            severity: 'warn',
+            message: `reasonix will load the MCP servers in ${join(env.cwd, '.mcp.json')} — a dispatched model gets those tools too`,
+            fix: 'Check what they expose. If one of them is sonata itself, a run can dispatch further runs.',
+        });
+    }
+    return problems;
+}
+export const reasonixAdapter = {
+    name: 'reasonix',
+    versionCommand: ['reasonix', '--version'],
+    supportedVersions: '>=1.26.0 <2.0.0',
+    pathPrepend: [],
+    plan: buildScript,
+    canPromptForApproval: true,
+    promptPatterns: PROMPT_PATTERNS,
+    /**
+     * Returns the whole block rather than the matched line. The line that matches
+     * is often the footer, and "↑/↓ navigate · Enter select" tells the caller
+     * nothing about what it is being asked to allow.
+     */
+    describePrompt(lines) {
+        for (let i = lines.length - 1; i >= 0; i--) {
+            if (!PROMPT_PATTERNS.some((re) => re.test(lines[i])))
+                continue;
+            let start = i;
+            while (start > 0 && start > i - MAX_PROMPT_LINES && !PROMPT_HEAD.test(lines[start])) {
+                start--;
+            }
+            const block = lines
+                .slice(start, start + MAX_PROMPT_LINES)
+                .map((l) => l.trimEnd())
+                .filter((l) => l.length > 0);
+            return block.length > 0 ? block.join('\n') : lines[i].trim();
+        }
+        return null;
+    },
+    /**
+     * `1` is "Allow once" on the tool approval card, and the digits on that card
+     * act immediately — no trailing Enter, which would fall through to the
+     * composer and submit an empty message.
+     *
+     * `Escape` rather than `4` for deny, even though `4` is the Deny row and was
+     * probed to work. Escape is the documented deny key on the approval card
+     * ("n/Esc deny") AND the only key that behaves correctly on the plan
+     * confirmation prompt: there, selecting the third option records
+     * `revise_plan` and silently flips the session from Plan to Auto, whether it
+     * is chosen by digit or by arrow keys. One key that is right everywhere beats
+     * two that are right in one place each.
+     */
+    approveKeys: { yes: ['1'], no: ['Escape'] },
+    health: reasonixHealth,
+};
+//# sourceMappingURL=reasonix.js.map

package/dist/adapters/reasonix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasonix.js","sourceRoot":"","sources":["../../src/adapters/reasonix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAa;IAChC,iEAAiE;IACjE,uBAAuB;IACvB,2EAA2E;IAC3E,qCAAqC;IACrC,2EAA2E;IAC3E,yEAAyE;IACzE,iDAAiD;IACjD,2BAA2B;IAC3B,6DAA6D;IAC7D,mCAAmC;CACpC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,gFAAgF;AAChF,MAAM,WAAW,GAAG,8CAA8C,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAE/C,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAgB,EAAE,QAAiB;IAC5D,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,mBAAmB;YACtB,OAAO,mBAAmB,CAAC;QAC7B;YACE,qEAAqE;YACrE,6CAA6C;YAC7C,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAgB;IACnC,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;IACrE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC;IAE1D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAExF,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB,EAAE,QAAiB;IACzD,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,MAAM,GAAG,mDAAmD;QAChE,sBAAsB,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAEjD,8EAA8E;IAC9E,6EAA6E;IAC7E,yEAAyE;IACzE,sBAAsB;IACtB,MAAM,KAAK,GAAG;QACZ,KAAK;QACL,SAAS,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QAChC,WAAW,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QACtC,qBAAqB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE;QACzD,sBAAsB;KACvB,CAAC;IAEF,OAAO;QACL,aAAa;QACb,iBAAiB;QACjB,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;QACxC,YAAY,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,kBAAkB,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,cAAc,CAAC,EAAE;QAC9G,aAAa,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,CAAC,EAAE;QACjD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,iBAAiB,CAAC,KAAgB;IACzC,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,MAAM,GAAG,iDAAiD,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzF,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,MAAM,YAAY,CAAC;IAC/C,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,MAAM,OAAO,CAAC;IAExC,MAAM,KAAK,GAAG;QACZ,SAAS,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QAChC,WAAW,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QACtC,uEAAuE;QACvE,uBAAuB;KACxB,CAAC;IAEF,OAAO;QACL,aAAa;QACb,iBAAiB;QACjB,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;QACxC,2CAA2C;QAC3C,GAAG;QACH,sEAAsE;QACtE,uEAAuE;QACvE,oDAAoD;QACpD,6BAA6B;QAC7B,qDAAqD,UAAU,CAAC,YAAY,CAAC,WAAW;QACxF,eAAe;QACf,QAAQ;QACR,qCAAqC,UAAU,CAAC,MAAM,CAAC,EAAE;QACzD,yEAAyE;QACzE,sDAAsD;QACtD,WAAW;QACX,sCAAsC;QACtC,0EAA0E;QAC1E,2EAA2E;QAC3E,oEAAoE;QACpE,sEAAsE;QACtE,kBAAkB,UAAU,CAAC,UAAU,CAAC,sBAAsB;QAC9D,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,EAAE;QACF,qEAAqE;QACrE,wDAAwD;QACxD,4BAA4B;QAC5B,YAAY,UAAU,CAAC,QAAQ,CAAC,aAAa;QAC7C,uEAAuE;QACvE,uEAAuE;QACvE,+DAA+D;QAC/D,sCAAsC;QACtC,sCAAsC;QACtC,aAAa;QACb,QAAQ;QACR,qBAAqB;QACrB,YAAY,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC7B,aAAa,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,CAAC,EAAE;QACjD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAClD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChE,yEAAyE;QACzE,0DAA0D;QAC1D,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACxD,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,CAAC,CAAC,IAAI;gBAChB,EAAE;gBACF,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAS,GAAG,MAAM;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAmB;IAClC,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,gDAAgD;IACzD,GAAG,EAAE,gBAAgB;CACtB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAkC;IAC9D,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,+HAA+H;YACxI,GAAG,EAAE,+BAA+B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,qCAAqC;YAC9C,GAAG,EAAE,iBAAiB;SACvB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAErE,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,yCAAyC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,4CAA4C;YACxH,GAAG,EAAE,2FAA2F;SACjG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,IAAI,EAAE,UAAU;IAChB,cAAc,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACzC,iBAAiB,EAAE,iBAAiB;IACpC,WAAW,EAAE,EAAE;IACf,IAAI,EAAE,WAAW;IACjB,oBAAoB,EAAE,IAAI;IAC1B,cAAc,EAAE,eAAe;IAC/B;;;;OAIG;IACH,cAAc,CAAC,KAAe;QAC5B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC/D,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,GAAG,gBAAgB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpF,KAAK,EAAE,CAAC;YACV,CAAC;YACD,MAAM,KAAK,GAAG,KAAK;iBAChB,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD;;;;;;;;;;;;OAYG;IACH,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE;IAC3C,MAAM,EAAE,cAAc;CACvB,CAAC"}

package/dist/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":""}

package/dist/agent-markers.js

@@ -0,0 +1,3 @@
+/** Marker shared by generated tier agents and ownership detection. */
+export const TIER_AGENT_MARKER = 'Generated by `sonata sync` from [tiers] in sonata.toml';
+//# sourceMappingURL=agent-markers.js.map

package/dist/agent-markers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-markers.js","sourceRoot":"","sources":["../src/agent-markers.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,wDAAwD,CAAC"}

package/dist/aipricing.js

@@ -0,0 +1,109 @@
+/**
+ * Scraped per-token prices from ai-pricing.fyi.
+ *
+ * The site publishes no licence, so this is treated exactly like the
+ * Artificial Analysis catalog: fetched with an explicit `sonata catalog
+ * update`, cached under the user's own config directory, and never committed
+ * to this repository. Only a hand-written fixture is.
+ *
+ * Rows are keyed model -> provider, never flattened to model alone: one model
+ * spans an 8x price range across serving providers, so which provider a
+ * gateway resells is information sonata cannot infer and must be told.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { normalizeModelName } from './catalog.js';
+export const AI_PRICING_URL = 'https://ai-pricing.fyi/v1/prices/current?limit=1000';
+export const AI_PRICING_ATTRIBUTION = 'Prices from ai-pricing.fyi — https://ai-pricing.fyi';
+export function aiPricingPath(home) {
+    return join(home, '.config', 'sonata', 'ai-pricing.json');
+}
+const METRIC = {
+    input_token: 'input',
+    output_token: 'output',
+    cached_input_token: 'cachedInput',
+};
+export function normalizeAiPricingRows(rows) {
+    const out = {};
+    for (const raw of rows) {
+        if (raw === null || typeof raw !== 'object')
+            continue;
+        const row = raw;
+        const field = typeof row.metric === 'string' ? METRIC[row.metric] : undefined;
+        if (field === undefined)
+            continue;
+        // A batch or EUR row priced into the same slot would be a wrong number
+        // wearing the right label.
+        if (row.unit !== 'per_1m_tokens' || row.currency !== 'USD')
+            continue;
+        if (row.batch_flag === 1 || (row.tier_key !== null && row.tier_key !== undefined && row.tier_key !== 'standard'))
+            continue;
+        const slug = row.canonical_slug;
+        const provider = row.provider_slug;
+        const price = row.price_numeric;
+        if (typeof slug !== 'string' || typeof provider !== 'string')
+            continue;
+        if (typeof price !== 'number' || !Number.isFinite(price) || price < 0)
+            continue;
+        const model = normalizeModelName(slug);
+        out[model] ??= {};
+        out[model][provider] ??= {};
+        out[model][provider][field] = price;
+    }
+    return out;
+}
+export function loadAiPricing(home) {
+    const path = aiPricingPath(home);
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const doc = JSON.parse(readFileSync(path, 'utf8'));
+        if (typeof doc.fetchedAt !== 'string')
+            return undefined;
+        if (doc.models === null || typeof doc.models !== 'object' || Array.isArray(doc.models))
+            return undefined;
+        if (!modelsAreValid(doc.models))
+            return undefined;
+        return doc;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * A provider record must be non-empty and contain no unrecognized rate keys
+ * and at least one recognized one, with every present rate a finite,
+ * non-negative number — otherwise `costOf` would silently price volume at 0
+ * (empty record, or one with no recognized key) or produce a wrong `totalUsd`
+ * from a string/non-finite value.
+ */
+const RATE_KEYS = new Set(['input', 'cachedInput', 'output']);
+function modelsAreValid(models) {
+    for (const providers of Object.values(models)) {
+        if (providers === null || typeof providers !== 'object' || Array.isArray(providers))
+            return false;
+        const entries = Object.entries(providers);
+        if (entries.length === 0)
+            return false;
+        for (const [provider, rates] of entries) {
+            if (rates === null || typeof rates !== 'object' || Array.isArray(rates))
+                return false;
+            const entries2 = Object.entries(rates);
+            let recognized = 0;
+            for (const [key, value] of entries2) {
+                // A key outside `Rates` (e.g. `{ unexpected: 1 }`) reads as an empty
+                // record to `costOf` — every recognized field defaults to 0 — so it
+                // must be rejected rather than silently billing $0.
+                if (!RATE_KEYS.has(key))
+                    return false;
+                recognized += 1;
+                if (typeof value !== 'number' || !Number.isFinite(value) || value < 0)
+                    return false;
+            }
+            if (recognized === 0)
+                return false; // an empty record prices nothing, so `costOf` would say 0
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=aipricing.js.map