aemeathcli 1.0.10 → 1.0.12

package/dist/chunk-NQEUK763.js

@@ -0,0 +1,26 @@
+import { CLI_PROVIDER_ORDER, getCliProviderEntry } from './chunk-LQBALETG.js';
+import { spawnSync } from 'child_process';
+
+function detectInstalledProviders() {
+  const available = [];
+  for (const provider of CLI_PROVIDER_ORDER) {
+    try {
+      const entry = getCliProviderEntry(provider);
+      const args = ["--version"];
+      const result = spawnSync(entry.binary, args, {
+        stdio: "ignore",
+        timeout: 5e3,
+        shell: process.platform === "win32"
+      });
+      if (result.status === 0) {
+        available.push(provider);
+      }
+    } catch {
+    }
+  }
+  return available;
+}
+
+export { detectInstalledProviders };
+//# sourceMappingURL=chunk-NQEUK763.js.map
+//# sourceMappingURL=chunk-NQEUK763.js.map

package/dist/chunk-NQEUK763.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/orchestrator/utils/detect-providers.ts"],"names":[],"mappings":";;;AAsBO,SAAS,wBAAA,GAA8C;AAC5D,EAAA,MAAM,YAA+B,EAAC;AAEtC,EAAA,KAAA,MAAW,YAAY,kBAAA,EAAoB;AACzC,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,oBAAoB,QAAQ,CAAA;AAC1C,MAAA,MAAM,IAAA,GAAO,CAAC,WAAW,CAAA;AACzB,MAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,CAAM,MAAA,EAAQ,IAAA,EAAM;AAAA,QAC3C,KAAA,EAAO,QAAA;AAAA,QACP,OAAA,EAAS,GAAA;AAAA,QACT,KAAA,EAAO,QAAQ,QAAA,KAAa;AAAA,OAC7B,CAAA;AACD,MAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,QAAA,SAAA,CAAU,KAAK,QAAQ,CAAA;AAAA,MACzB;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT","file":"chunk-NQEUK763.js","sourcesContent":["/**\n * Cross-platform CLI provider detection utility.\n *\n * Probes the system PATH for known AI CLI tools by running\n * `<tool> --version` with a 5-second timeout. Returns a list\n * of provider types that are available on the current machine.\n *\n * @see IMPLEMENT_PLAN.md Section 10\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport type { CliProviderType } from \"../constants.js\";\nimport { CLI_PROVIDER_ORDER, getCliProviderEntry } from \"./provider-catalog.js\";\n\n/**\n * Detect which CLI AI providers are installed on the system.\n *\n * Each provider is checked by running its version command. Only\n * providers that exit with status 0 are included in the result.\n *\n * @returns Array of installed CLI provider types.\n */\nexport function detectInstalledProviders(): CliProviderType[] {\n  const available: CliProviderType[] = [];\n\n  for (const provider of CLI_PROVIDER_ORDER) {\n    try {\n      const entry = getCliProviderEntry(provider);\n      const args = [\"--version\"];\n      const result = spawnSync(entry.binary, args, {\n        stdio: \"ignore\",\n        timeout: 5000,\n        shell: process.platform === \"win32\",\n      });\n      if (result.status === 0) {\n        available.push(provider);\n      }\n    } catch {\n      // Not installed — skip\n    }\n  }\n\n  return available;\n}\n"]}

package/dist/chunk-OPWAFS6Y.js

@@ -0,0 +1,38 @@
+import { normalize, resolve, relative, isAbsolute } from 'path';
+
+// src/utils/sanitizer.ts
+function validatePath(filePath, projectRoot) {
+  const normalizedRoot = normalize(resolve(projectRoot));
+  const normalizedPath = normalize(resolve(normalizedRoot, filePath));
+  if (!isSubPath(normalizedRoot, normalizedPath)) {
+    throw new Error(
+      `Path traversal detected: "${filePath}" resolves outside project root "${projectRoot}"`
+    );
+  }
+  return normalizedPath;
+}
+function isPathAllowed(filePath, allowedPaths, projectRoot) {
+  const normalizedRoot = normalize(resolve(projectRoot));
+  const resolved = normalize(resolve(normalizedRoot, filePath));
+  return allowedPaths.some((allowed) => {
+    const resolvedAllowed = normalize(resolve(normalizedRoot, allowed));
+    return isSubPath(resolvedAllowed, resolved);
+  });
+}
+function isSubPath(basePath, candidatePath) {
+  const rel = relative(basePath, candidatePath);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function isCommandBlocked(command, blockedCommands) {
+  const normalizedCommand = command.trim().toLowerCase();
+  return blockedCommands.some(
+    (blocked) => normalizedCommand.includes(blocked.toLowerCase())
+  );
+}
+function redactSecrets(text) {
+  return text.replace(/sk-ant-api\S+/g, "sk-ant-api[REDACTED]").replace(/sk-[a-zA-Z0-9]{20,}/g, "sk-[REDACTED]").replace(/AIza[a-zA-Z0-9_-]{35}/g, "AIza[REDACTED]").replace(/ghp_[a-zA-Z0-9]{36}/g, "ghp_[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9._-]+/gi, "Bearer [REDACTED]");
+}
+
+export { isCommandBlocked, isPathAllowed, redactSecrets, validatePath };
+//# sourceMappingURL=chunk-OPWAFS6Y.js.map
+//# sourceMappingURL=chunk-OPWAFS6Y.js.map

package/dist/chunk-OPWAFS6Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/sanitizer.ts"],"names":[],"mappings":";;;AAoBO,SAAS,YAAA,CAAa,UAAkB,WAAA,EAA6B;AAC1E,EAAA,MAAM,cAAA,GAAiB,SAAA,CAAU,OAAA,CAAQ,WAAW,CAAC,CAAA;AACrD,EAAA,MAAM,cAAA,GAAiB,SAAA,CAAU,OAAA,CAAQ,cAAA,EAAgB,QAAQ,CAAC,CAAA;AAElE,EAAA,IAAI,CAAC,SAAA,CAAU,cAAA,EAAgB,cAAc,CAAA,EAAG;AAC9C,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,0BAAA,EAA6B,QAAQ,CAAA,iCAAA,EAAoC,WAAW,CAAA,CAAA;AAAA,KACtF;AAAA,EACF;AAEA,EAAA,OAAO,cAAA;AACT;AAKO,SAAS,aAAA,CACd,QAAA,EACA,YAAA,EACA,WAAA,EACS;AACT,EAAA,MAAM,cAAA,GAAiB,SAAA,CAAU,OAAA,CAAQ,WAAW,CAAC,CAAA;AACrD,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,OAAA,CAAQ,cAAA,EAAgB,QAAQ,CAAC,CAAA;AAC5D,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,CAAC,OAAA,KAAY;AACpC,IAAA,MAAM,eAAA,GAAkB,SAAA,CAAU,OAAA,CAAQ,cAAA,EAAgB,OAAO,CAAC,CAAA;AAClE,IAAA,OAAO,SAAA,CAAU,iBAAiB,QAAQ,CAAA;AAAA,EAC5C,CAAC,CAAA;AACH;AAEA,SAAS,SAAA,CAAU,UAAkB,aAAA,EAAgC;AACnE,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,QAAA,EAAU,aAAa,CAAA;AAC5C,EAAA,OAAO,GAAA,KAAQ,MAAO,CAAC,GAAA,CAAI,WAAW,IAAI,CAAA,IAAK,CAAC,UAAA,CAAW,GAAG,CAAA;AAChE;AAMO,SAAS,gBAAA,CACd,SACA,eAAA,EACS;AACT,EAAA,MAAM,iBAAA,GAAoB,OAAA,CAAQ,IAAA,EAAK,CAAE,WAAA,EAAY;AACrD,EAAA,OAAO,eAAA,CAAgB,IAAA;AAAA,IAAK,CAAC,OAAA,KAC3B,iBAAA,CAAkB,QAAA,CAAS,OAAA,CAAQ,aAAa;AAAA,GAClD;AACF;AAKO,SAAS,cAAc,IAAA,EAAsB;AAClD,EAAA,OAAO,KACJ,OAAA,CAAQ,gBAAA,EAAkB,sBAAsB,CAAA,CAChD,OAAA,CAAQ,wBAAwB,eAAe,CAAA,CAC/C,QAAQ,wBAAA,EAA0B,gBAAgB,EAClD,OAAA,CAAQ,sBAAA,EAAwB,gBAAgB,CAAA,CAChD,OAAA,CAAQ,8BAA8B,mBAAmB,CAAA;AAC9D","file":"chunk-OPWAFS6Y.js","sourcesContent":["/**\n * Input/output sanitization per PRD section 14.2\n * Zero trust for AI output — treat all model-generated content as untrusted\n */\n\nimport { isAbsolute, normalize, relative, resolve } from \"node:path\";\n\n/**\n * Sanitize shell command arguments to prevent injection.\n * PRD REQ: NO shell injection (section 14.1, 15.7 item 10)\n */\nexport function sanitizeShellArg(arg: string): string {\n  // Escape single quotes by replacing them with escaped version\n  return `'${arg.replace(/'/g, \"'\\\\''\")}'`;\n}\n\n/**\n * Validate a file path is within the allowed project root.\n * Prevents directory traversal attacks (PRD section 14.1).\n */\nexport function validatePath(filePath: string, projectRoot: string): string {\n  const normalizedRoot = normalize(resolve(projectRoot));\n  const normalizedPath = normalize(resolve(normalizedRoot, filePath));\n\n  if (!isSubPath(normalizedRoot, normalizedPath)) {\n    throw new Error(\n      `Path traversal detected: \"${filePath}\" resolves outside project root \"${projectRoot}\"`,\n    );\n  }\n\n  return normalizedPath;\n}\n\n/**\n * Check if a path is safe (within allowed paths).\n */\nexport function isPathAllowed(\n  filePath: string,\n  allowedPaths: readonly string[],\n  projectRoot: string,\n): boolean {\n  const normalizedRoot = normalize(resolve(projectRoot));\n  const resolved = normalize(resolve(normalizedRoot, filePath));\n  return allowedPaths.some((allowed) => {\n    const resolvedAllowed = normalize(resolve(normalizedRoot, allowed));\n    return isSubPath(resolvedAllowed, resolved);\n  });\n}\n\nfunction isSubPath(basePath: string, candidatePath: string): boolean {\n  const rel = relative(basePath, candidatePath);\n  return rel === \"\" || (!rel.startsWith(\"..\") && !isAbsolute(rel));\n}\n\n/**\n * Check if a shell command is on the blocked list.\n * PRD section 14.4: Dangerous commands always require confirmation.\n */\nexport function isCommandBlocked(\n  command: string,\n  blockedCommands: readonly string[],\n): boolean {\n  const normalizedCommand = command.trim().toLowerCase();\n  return blockedCommands.some((blocked) =>\n    normalizedCommand.includes(blocked.toLowerCase()),\n  );\n}\n\n/**\n * Redact potential secrets from text for logging.\n */\nexport function redactSecrets(text: string): string {\n  return text\n    .replace(/sk-ant-api\\S+/g, \"sk-ant-api[REDACTED]\")\n    .replace(/sk-[a-zA-Z0-9]{20,}/g, \"sk-[REDACTED]\")\n    .replace(/AIza[a-zA-Z0-9_-]{35}/g, \"AIza[REDACTED]\")\n    .replace(/ghp_[a-zA-Z0-9]{36}/g, \"ghp_[REDACTED]\")\n    .replace(/Bearer\\s+[a-zA-Z0-9._-]+/gi, \"Bearer [REDACTED]\");\n}\n\n/**\n * Sanitize user input for safe inclusion in prompts.\n */\nexport function sanitizePromptInput(input: string): string {\n  // Strip null bytes\n  return input.replace(/\\0/g, \"\");\n}\n"]}

package/dist/{chunk-6PDJ45T4.js → chunk-PS4WEFW6.js}

@@ -1,6 +1,7 @@
-import { SUPPORTED_MODELS } from './chunk-HCIHOHLX.js';
+import { getModelInfo } from './chunk-VNZ3YTQD.js';
 import { ModelNotFoundError, AuthenticationError } from './chunk-ZGOHARPV.js';
-import { logger } from './chunk-JAXXTYID.js';
+import { SUPPORTED_MODELS } from './chunk-HCIHOHLX.js';
+import { logger } from './chunk-IR5HLBMH.js';
 import { randomUUID } from 'crypto';
 import { execa } from 'execa';
 
@@ -40,13 +41,7 @@ function toJsonLines(output) {
 function buildPrompt(request) {
   const latestUser = [...request.messages].reverse().find((message) => message.role === "user");
   const fallbackLast = request.messages.length > 0 ? request.messages[request.messages.length - 1] : void 0;
-  const latestPrompt = latestUser?.content ?? fallbackLast?.content ?? "";
-  if (request.system !== void 0 && request.system.length > 0) {
-    return `${request.system}
-
-${latestPrompt}`.trim();
-  }
-  return latestPrompt;
+  return latestUser?.content ?? fallbackLast?.content ?? "";
 }
 function computeCost(modelInfo, inputTokens, outputTokens) {
   return inputTokens / 1e6 * modelInfo.inputPricePerMToken + outputTokens / 1e6 * modelInfo.outputPricePerMToken;
@@ -60,11 +55,12 @@ function classifyCliError(provider, error) {
   return error instanceof Error ? error : new Error(message);
 }
 var BaseNativeCLIAdapter = class {
+  supportsToolCalling = false;
   async chat(request) {
     const modelInfo = this.getModelInfo(request.model);
     const prompt = buildPrompt(request);
     try {
-      const result = await this.runCLI(request.model, prompt);
+      const result = await this.runCLI(request.model, prompt, request.system);
       const inputTokens = result.inputTokens ?? Math.ceil(prompt.length / CHARS_PER_TOKEN_ESTIMATE);
       const outputTokens = result.outputTokens ?? Math.ceil(result.text.length / CHARS_PER_TOKEN_ESTIMATE);
       const usage = {
@@ -109,18 +105,18 @@ var BaseNativeCLIAdapter = class {
       yield { type: "done" };
     }
   }
-  async countTokens(text, _model) {
-    return Math.ceil(text.length / CHARS_PER_TOKEN_ESTIMATE);
+  countTokens(text, _model) {
+    return Promise.resolve(Math.ceil(text.length / CHARS_PER_TOKEN_ESTIMATE));
   }
   getModelInfo(model) {
-    const info = SUPPORTED_MODELS[model];
+    const info = SUPPORTED_MODELS[model] ?? getModelInfo(model);
     if (info === void 0 || info.provider !== this.name) {
       throw new ModelNotFoundError(model);
     }
     return info;
   }
-  async listAvailableModels() {
-    return [...this.supportedModels];
+  listAvailableModels() {
+    return Promise.resolve([...this.supportedModels]);
   }
 };
 var ClaudeNativeCLIAdapter = class extends BaseNativeCLIAdapter {
@@ -132,10 +128,30 @@ var ClaudeNativeCLIAdapter = class extends BaseNativeCLIAdapter {
     "claude-sonnet-4-6-1m",
     "claude-haiku-4-5"
   ];
-  async runCLI(model, prompt) {
+  /** Map internal model IDs to valid Claude CLI model IDs. */
+  toCLIModelId(model) {
+    return model.replace(/-1m$/, "");
+  }
+  async runCLI(model, prompt, systemPrompt) {
+    const cliModel = this.toCLIModelId(model);
+    const args = [
+      "-p",
+      "--output-format",
+      "json",
+      "--model",
+      cliModel,
+      // Skip project CLAUDE.md to avoid loading huge project instructions
+      // that make Claude think it's Claude Code doing a codebase audit
+      "--setting-sources",
+      "user"
+    ];
+    if (systemPrompt && systemPrompt.length > 0) {
+      args.push("--system-prompt", systemPrompt);
+    }
+    args.push(prompt);
     const { stdout } = await execa(
       "claude",
-      ["-p", "--output-format", "json", "--model", model, prompt],
+      args,
       {
         timeout: CLI_TIMEOUT_MS,
         stdin: "ignore",
@@ -169,8 +185,11 @@ var CodexNativeCLIAdapter = class extends BaseNativeCLIAdapter {
     "gpt-5.2",
     "gpt-5.1-codex-mini"
   ];
-  async runCLI(model, prompt) {
+  async runCLI(model, prompt, systemPrompt) {
     const sandbox = process.env["AEMEATHCLI_CODEX_SANDBOX"] ?? "read-only";
+    const fullPrompt = systemPrompt ? `${systemPrompt}
+
+${prompt}` : prompt;
     const { stdout } = await execa(
       "codex",
       [
@@ -180,7 +199,7 @@ var CodexNativeCLIAdapter = class extends BaseNativeCLIAdapter {
         "--json",
         "--model",
         model,
-        prompt
+        fullPrompt
       ],
       {
         timeout: CLI_TIMEOUT_MS,
@@ -229,12 +248,15 @@ var GeminiNativeCLIAdapter = class extends BaseNativeCLIAdapter {
     "gemini-2.5-flash",
     "gemini-2.5-flash-lite"
   ];
-  async runCLI(model, prompt) {
+  async runCLI(model, prompt, systemPrompt) {
+    const fullPrompt = systemPrompt ? `${systemPrompt}
+
+${prompt}` : prompt;
     const { stdout } = await execa(
       "gemini",
       [
         "-p",
-        prompt,
+        fullPrompt,
         "--model",
         model,
         "--output-format",
@@ -281,10 +303,13 @@ var GeminiNativeCLIAdapter = class extends BaseNativeCLIAdapter {
 var KimiNativeCLIAdapter = class extends BaseNativeCLIAdapter {
   name = "kimi";
   supportedModels = ["kimi-for-coding"];
-  async runCLI(_model, prompt) {
+  async runCLI(_model, prompt, systemPrompt) {
+    const fullPrompt = systemPrompt ? `${systemPrompt}
+
+${prompt}` : prompt;
     const { stdout } = await execa(
       "kimi",
-      ["--print", "--output-format", "stream-json", "-p", prompt],
+      ["--print", "--output-format", "stream-json", "-p", fullPrompt],
       {
         timeout: CLI_TIMEOUT_MS,
         stdin: "ignore",
@@ -321,5 +346,5 @@ function logNativeAdapterSelection(provider) {
 }
 
 export { ClaudeNativeCLIAdapter, CodexNativeCLIAdapter, GeminiNativeCLIAdapter, KimiNativeCLIAdapter, logNativeAdapterSelection };
-//# sourceMappingURL=chunk-6PDJ45T4.js.map
-//# sourceMappingURL=chunk-6PDJ45T4.js.map
+//# sourceMappingURL=chunk-PS4WEFW6.js.map
+//# sourceMappingURL=chunk-PS4WEFW6.js.map

package/dist/chunk-PS4WEFW6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/providers/native-cli-adapters.ts"],"names":[],"mappings":";;;;;;;AA+BA,IAAM,wBAAA,GAA2B,CAAA;AAOjC,SAAS,mBAAA,GAA8B;AACrC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,kCAAkC,CAAA;AAC1D,EAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,IAAA,OAAO,CAAA;AAAA,EACT;AAEA,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,QAAA,CAAS,GAAA,EAAK,EAAE,CAAA;AACtC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,IAAK,UAAU,CAAA,EAAG;AAC3C,IAAA,OAAO,CAAA;AAAA,EACT;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,iBAAiB,mBAAA,EAAoB;AAE3C,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA;AAChD;AAEA,SAAS,SAAS,KAAA,EAAoC;AACpD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,MAAA;AAC7C;AAEA,SAAS,SAAS,KAAA,EAAoC;AACpD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,QAAA,CAAS,KAAK,IAAI,KAAA,GAAQ,MAAA;AACvE;AAEA,SAAS,YAAY,MAAA,EAA2B;AAC9C,EAAA,MAAM,KAAA,GAAQ,OACX,KAAA,CAAM,QAAQ,EACd,GAAA,CAAI,CAAC,SAAS,IAAA,CAAK,IAAA,EAAM,CAAA,CACzB,MAAA,CAAO,CAAC,IAAA,KAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAC,CAAA;AAE3D,EAAA,MAAM,SAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,IAAI,CAAY,CAAA;AAAA,IACzC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,YAAY,OAAA,EAA+B;AAGlD,EAAA,MAAM,UAAA,GAAa,CAAC,GAAG,OAAA,CAAQ,QAAQ,CAAA,CACpC,OAAA,EAAQ,CACR,IAAA,CAAK,CAAC,OAAA,KAAY,OAAA,CAAQ,SAAS,MAAM,CAAA;AAC5C,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,QAAA,CAAS,MAAA,GAAS,CAAA,GAC3C,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA,GAC5C,MAAA;AAEJ,EAAA,OAAO,UAAA,EAAY,OAAA,IAAW,YAAA,EAAc,OAAA,IAAW,EAAA;AACzD;AAEA,SAAS,WAAA,CAAY,SAAA,EAAuB,WAAA,EAAqB,YAAA,EAA8B;AAC7F,EAAA,OACG,cAAc,GAAA,GAAa,SAAA,CAAU,mBAAA,GACrC,YAAA,GAAe,MAAa,SAAA,CAAU,oBAAA;AAE3C;AAEA,SAAS,gBAAA,CAAiB,UAAwB,KAAA,EAAuB;AACvE,EAAA,MAAM,UAAU,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACrE,EAAA,MAAM,KAAA,GAAQ,QAAQ,WAAA,EAAY;AAElC,EAAA,IACE,KAAA,CAAM,QAAA,CAAS,OAAO,CAAA,IACnB,KAAA,CAAM,QAAA,CAAS,YAAY,CAAA,IAC3B,KAAA,CAAM,QAAA,CAAS,gBAAgB,CAAA,IAC/B,KAAA,CAAM,QAAA,CAAS,cAAc,CAAA,IAC7B,KAAA,CAAM,QAAA,CAAS,WAAW,CAAA,IAC1B,KAAA,CAAM,QAAA,CAAS,SAAS,CAAA,IACxB,KAAA,CAAM,QAAA,CAAS,OAAO,CAAA,EACzB;AACA,IAAA,OAAO,IAAI,mBAAA,CAAoB,QAAA,EAAU,OAAO,CAAA;AAAA,EAClD;AAEA,EAAA,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,MAAM,OAAO,CAAA;AAC3D;AAEA,IAAe,uBAAf,MAA8D;AAAA,EAGnD,mBAAA,GAAsB,KAAA;AAAA,EAI/B,MAAM,KAAK,OAAA,EAA+C;AACxD,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,YAAA,CAAa,OAAA,CAAQ,KAAK,CAAA;AACjD,IAAA,MAAM,MAAA,GAAS,YAAY,OAAO,CAAA;AAElC,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,QAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAEtE,MAAA,MAAM,cAAc,MAAA,CAAO,WAAA,IAAe,KAAK,IAAA,CAAK,MAAA,CAAO,SAAS,wBAAwB,CAAA;AAC5F,MAAA,MAAM,YAAA,GAAe,OAAO,YAAA,IAAgB,IAAA,CAAK,KAAK,MAAA,CAAO,IAAA,CAAK,SAAS,wBAAwB,CAAA;AAEnG,MAAA,MAAM,KAAA,GAAqB;AAAA,QACzB,WAAA;AAAA,QACA,YAAA;AAAA,QACA,aAAa,WAAA,GAAc,YAAA;AAAA,QAC3B,OAAA,EAAS,WAAA,CAAY,SAAA,EAAW,WAAA,EAAa,YAAY;AAAA,OAC3D;AAEA,MAAA,MAAM,eAAA,GAAgC;AAAA,QACpC,IAAI,UAAA,EAAW;AAAA,QACf,IAAA,EAAM,WAAA;AAAA,QACN,SAAS,MAAA,CAAO,IAAA;AAAA,QAChB,OAAO,OAAA,CAAQ,KAAA;AAAA,QACf,UAAU,IAAA,CAAK,IAAA;AAAA,QACf,UAAA,EAAY,KAAA;AAAA,QACZ,SAAA,sBAAe,IAAA;AAAK,OACtB;AAEA,MAAA,OAAO;AAAA,QACL,IAAI,UAAA,EAAW;AAAA,QACf,OAAO,OAAA,CAAQ,KAAA;AAAA,QACf,UAAU,IAAA,CAAK,IAAA;AAAA,QACf,OAAA,EAAS,eAAA;AAAA,QACT,KAAA;AAAA,QACA,YAAA,EAAc,OAAO,YAAA,IAAgB;AAAA,OACvC;AAAA,IACF,SAAS,KAAA,EAAgB;AACvB,MAAA,MAAM,gBAAA,CAAiB,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,OAAO,OAAO,OAAA,EAAoD;AAChE,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA;AACxC,MAAA,IAAI,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AACvC,QAAA,MAAM,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,QAAA,CAAS,QAAQ,OAAA,EAAQ;AAAA,MAC1D;AACA,MAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,SAAS,KAAA,EAAM;AAC7C,MAAA,MAAM,EAAE,MAAM,MAAA,EAAO;AAAA,IACvB,SAAS,KAAA,EAAgB;AAGvB,MAAA,MAAM,SAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACpE,MAAA,MAAM,SAAA,GAAY,OAAO,MAAA,GAAS,GAAA,GAAM,OAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,GAAI,KAAA,GAAQ,MAAA;AACvE,MAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,SAAA,EAAU;AACxC,MAAA,MAAM,EAAE,MAAM,MAAA,EAAO;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,WAAA,CAAY,MAAc,MAAA,EAAiC;AACzD,IAAA,OAAO,QAAQ,OAAA,CAAQ,IAAA,CAAK,KAAK,IAAA,CAAK,MAAA,GAAS,wBAAwB,CAAC,CAAA;AAAA,EAC1E;AAAA,EAEA,aAAa,KAAA,EAA2B;AAEtC,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAK,CAAA,IAAK,aAAoB,KAAK,CAAA;AACjE,IAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,CAAK,QAAA,KAAa,KAAK,IAAA,EAAM;AACrD,MAAA,MAAM,IAAI,mBAAmB,KAAK,CAAA;AAAA,IACpC;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,mBAAA,GAAkD;AAChD,IAAA,OAAO,QAAQ,OAAA,CAAQ,CAAC,GAAG,IAAA,CAAK,eAAe,CAAC,CAAA;AAAA,EAClD;AACF,CAAA;AAEO,IAAM,sBAAA,GAAN,cAAqC,oBAAA,CAAqB;AAAA,EACtD,IAAA,GAAqB,WAAA;AAAA,EACrB,eAAA,GAAkB;AAAA,IACzB,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,mBAAA;AAAA,IACA,sBAAA;AAAA,IACA;AAAA,GACF;AAAA;AAAA,EAGQ,aAAa,KAAA,EAAuB;AAG1C,IAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAAA,EACjC;AAAA,EAEA,MAAgB,MAAA,CAAO,KAAA,EAAe,MAAA,EAAgB,YAAA,EAA4C;AAChG,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,YAAA,CAAa,KAAK,CAAA;AACxC,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,IAAA;AAAA,MACA,iBAAA;AAAA,MAAmB,MAAA;AAAA,MACnB,SAAA;AAAA,MAAW,QAAA;AAAA;AAAA;AAAA,MAGX,mBAAA;AAAA,MAAqB;AAAA,KACvB;AAEA,IAAA,IAAI,YAAA,IAAgB,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAC3C,MAAA,IAAA,CAAK,IAAA,CAAK,mBAAmB,YAAY,CAAA;AAAA,IAC3C;AAEA,IAAA,IAAA,CAAK,KAAK,MAAM,CAAA;AAEhB,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAA;AAAA,MACvB,QAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,QACE,OAAA,EAAS,cAAA;AAAA,QACT,KAAA,EAAO,QAAA;AAAA,QACP,KAAK,EAAE,GAAG,OAAA,CAAQ,GAAA,EAAK,UAAU,GAAA;AAAI;AACvC,KACF;AAEA,IAAA,MAAM,KAAA,GAAQ,YAAY,MAAM,CAAA;AAChC,IAAA,MAAM,QAAA,GAAW,MAAM,MAAA,GAAS,CAAA,GAAI,MAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,GAAI,MAAA;AAE9D,IAAA,IAAI,CAAC,QAAA,CAAS,QAAQ,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AAEA,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,QAAA,CAAS,QAAQ,CAAC,CAAA,IAAK,EAAA;AAC7C,IAAA,MAAM,KAAA,GAAQ,SAAS,QAAA,CAAS,OAAO,CAAC,CAAA,GAAI,QAAA,CAAS,OAAO,CAAA,GAAI,MAAA;AAChE,IAAA,MAAM,cAAc,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,cAAc,CAAC,CAAA,GAAI,MAAA;AAC9D,IAAA,MAAM,eAAe,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,eAAe,CAAC,CAAA,GAAI,MAAA;AAEhE,IAAA,OAAO;AAAA,MACL,IAAA;AAAA,MACA,WAAA;AAAA,MACA,YAAA;AAAA,MACA,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACF;AAEO,IAAM,qBAAA,GAAN,cAAoC,oBAAA,CAAqB;AAAA,EACrD,IAAA,GAAqB,QAAA;AAAA,EACrB,eAAA,GAAkB;AAAA,IACzB,eAAA;AAAA,IACA,qBAAA;AAAA,IACA,eAAA;AAAA,IACA,mBAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AAAA,EAEA,MAAgB,MAAA,CAAO,KAAA,EAAe,MAAA,EAAgB,YAAA,EAA4C;AAGhG,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA,IAAK,WAAA;AAE3D,IAAA,MAAM,UAAA,GAAa,YAAA,GAAe,CAAA,EAAG,YAAY;;AAAA,EAAO,MAAM,CAAA,CAAA,GAAK,MAAA;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAA;AAAA,MACvB,OAAA;AAAA,MACA;AAAA,QACE,MAAA;AAAA,QACA,uBAAA;AAAA,QACA,GAAI,OAAA,KAAY,MAAA,GAAS,CAAC,WAAA,EAAa,OAAO,IAAI,EAAC;AAAA,QACnD,QAAA;AAAA,QACA,SAAA;AAAA,QACA,KAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA;AAAA,QACE,OAAA,EAAS,cAAA;AAAA,QACT,KAAA,EAAO,QAAA;AAAA,QACP,KAAK,EAAE,GAAG,OAAA,CAAQ,GAAA,EAAK,UAAU,GAAA;AAAI;AACvC,KACF;AAEA,IAAA,MAAM,KAAA,GAAQ,YAAY,MAAM,CAAA;AAChC,IAAA,MAAM,YAAsB,EAAC;AAC7B,IAAA,IAAI,WAAA;AACJ,IAAA,IAAI,YAAA;AAEJ,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,CAAC,QAAA,CAAS,IAAI,CAAA,EAAG;AACrB,MAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AAElC,MAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,QAAA,MAAM,IAAA,GAAO,SAAS,IAAA,CAAK,MAAM,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,CAAA,GAAI,MAAA;AACrD,QAAA,IAAI,QAAQ,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,MAAM,eAAA,EAAiB;AACtD,UAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AAClC,UAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG;AAC3B,YAAA,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,QAAA,MAAM,KAAA,GAAQ,SAAS,IAAA,CAAK,OAAO,CAAC,CAAA,GAAI,IAAA,CAAK,OAAO,CAAA,GAAI,MAAA;AACxD,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,WAAA,GAAc,QAAA,CAAS,KAAA,CAAM,cAAc,CAAC,CAAA,IAAK,WAAA;AACjD,UAAA,YAAA,GAAe,QAAA,CAAS,KAAA,CAAM,eAAe,CAAC,CAAA,IAAK,YAAA;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,SAAA,CAAU,IAAA,CAAK,IAAI,EAAE,IAAA,EAAK;AAAA,MAChC,WAAA;AAAA,MACA,YAAA;AAAA,MACA,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACF;AAEO,IAAM,sBAAA,GAAN,cAAqC,oBAAA,CAAqB;AAAA,EACtD,IAAA,GAAqB,QAAA;AAAA,EACrB,eAAA,GAAkB;AAAA,IACzB,sBAAA;AAAA,IACA,wBAAA;AAAA,IACA,gBAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,GACF;AAAA,EAEA,MAAgB,MAAA,CAAO,KAAA,EAAe,MAAA,EAAgB,YAAA,EAA4C;AAEhG,IAAA,MAAM,UAAA,GAAa,YAAA,GAAe,CAAA,EAAG,YAAY;;AAAA,EAAO,MAAM,CAAA,CAAA,GAAK,MAAA;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAA;AAAA,MACvB,QAAA;AAAA,MACA;AAAA,QACE,IAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA,KAAA;AAAA,QACA,iBAAA;AAAA,QACA,aAAA;AAAA,QACA,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA;AAAA,QACE,OAAA,EAAS,cAAA;AAAA,QACT,KAAA,EAAO,QAAA;AAAA,QACP,KAAK,EAAE,GAAG,OAAA,CAAQ,GAAA,EAAK,UAAU,GAAA;AAAI;AACvC,KACF;AAEA,IAAA,MAAM,KAAA,GAAQ,YAAY,MAAM,CAAA;AAChC,IAAA,IAAI,IAAA,GAAO,EAAA;AACX,IAAA,IAAI,WAAA;AACJ,IAAA,IAAI,YAAA;AAEJ,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,CAAC,QAAA,CAAS,IAAI,CAAA,EAAG;AACrB,MAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AAElC,MAAA,IAAI,SAAS,SAAA,IAAa,QAAA,CAAS,KAAK,MAAM,CAAC,MAAM,WAAA,EAAa;AAChE,QAAA,MAAM,OAAA,GAAU,QAAA,CAAS,IAAA,CAAK,SAAS,CAAC,CAAA;AACxC,QAAA,IAAI,YAAY,MAAA,EAAW;AACzB,UAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAO,CAAA,KAAM,IAAA;AAChC,UAAA,IAAA,GAAO,KAAA,GAAQ,CAAA,EAAG,IAAI,CAAA,EAAG,OAAO,CAAA,CAAA,GAAK,OAAA;AAAA,QACvC;AAAA,MACF;AAEA,MAAA,IAAI,SAAS,QAAA,EAAU;AACrB,QAAA,MAAM,KAAA,GAAQ,SAAS,IAAA,CAAK,OAAO,CAAC,CAAA,GAAI,IAAA,CAAK,OAAO,CAAA,GAAI,MAAA;AACxD,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,WAAA,GAAc,QAAA,CAAS,KAAA,CAAM,cAAc,CAAC,CAAA,IAAK,WAAA;AACjD,UAAA,YAAA,GAAe,QAAA,CAAS,KAAA,CAAM,eAAe,CAAC,CAAA,IAAK,YAAA;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,WAAA;AAAA,MACA,YAAA;AAAA,MACA,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACF;AAEO,IAAM,oBAAA,GAAN,cAAmC,oBAAA,CAAqB;AAAA,EACpD,IAAA,GAAqB,MAAA;AAAA,EACrB,eAAA,GAAkB,CAAC,iBAAiB,CAAA;AAAA,EAE7C,MAAgB,MAAA,CAAO,MAAA,EAAgB,MAAA,EAAgB,YAAA,EAA4C;AACjG,IAAA,MAAM,UAAA,GAAa,YAAA,GAAe,CAAA,EAAG,YAAY;;AAAA,EAAO,MAAM,CAAA,CAAA,GAAK,MAAA;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAA;AAAA,MACvB,MAAA;AAAA,MACA,CAAC,SAAA,EAAW,iBAAA,EAAmB,aAAA,EAAe,MAAM,UAAU,CAAA;AAAA,MAC9D;AAAA,QACE,OAAA,EAAS,cAAA;AAAA,QACT,KAAA,EAAO,QAAA;AAAA,QACP,KAAK,EAAE,GAAG,OAAA,CAAQ,GAAA,EAAK,UAAU,GAAA;AAAI;AACvC,KACF;AAEA,IAAA,MAAM,KAAA,GAAQ,YAAY,MAAM,CAAA;AAChC,IAAA,IAAI,IAAA,GAAO,EAAA;AAEX,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,CAAC,QAAA,CAAS,IAAI,CAAA,EAAG;AACrB,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,MAAM,WAAA,EAAa;AAE5C,MAAA,MAAM,OAAA,GAAU,KAAK,SAAS,CAAA;AAC9B,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAE7B,MAAA,MAAM,YAAsB,EAAC;AAC7B,MAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,QAAA,IAAI,CAAC,QAAA,CAAS,IAAI,CAAA,EAAG;AACrB,QAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,MAAM,MAAA,EAAQ;AACrC,UAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AACnC,UAAA,IAAI,KAAA,EAAO,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA;AAAA,QACjC;AAAA,MACF;AAEA,MAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,QAAA,IAAA,GAAO,SAAA,CAAU,KAAK,EAAE,CAAA;AAAA,MAC1B;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACF;AAEO,SAAS,0BAA0B,QAAA,EAA8B;AACtE,EAAA,MAAA,CAAO,IAAA,CAAK,EAAE,QAAA,EAAS,EAAG,0BAA0B,CAAA;AACtD","file":"chunk-PS4WEFW6.js","sourcesContent":["/**\n * Native CLI-backed provider adapters.\n * Uses official provider CLIs in non-interactive mode when credentials come from native login.\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { execa } from \"execa\";\nimport {\n  AuthenticationError,\n  ModelNotFoundError,\n} from \"../types/errors.js\";\nimport { SUPPORTED_MODELS } from \"../types/model.js\";\nimport { getModelInfo as getDynamicModelInfo } from \"./model-discovery.js\";\nimport { logger } from \"../utils/logger.js\";\nimport type { IModelInfo, ProviderName } from \"../types/model.js\";\nimport type {\n  IChatMessage,\n  IChatRequest,\n  IChatResponse,\n  IStreamChunk,\n  ITokenUsage,\n} from \"../types/message.js\";\nimport type { IModelProvider } from \"./types.js\";\n\ninterface ICLIResult {\n  readonly text: string;\n  readonly inputTokens?: number | undefined;\n  readonly outputTokens?: number | undefined;\n  readonly finishReason?: IChatResponse[\"finishReason\"] | undefined;\n}\n\nconst CHARS_PER_TOKEN_ESTIMATE = 4;\n\n/**\n * Resolve CLI timeout from environment. Default is 0 (no timeout) so that\n * long-running agent tasks are never prematurely killed.\n * Set AEMEATHCLI_NATIVE_CLI_TIMEOUT_MS to a positive integer to enforce a limit.\n */\nfunction resolveCliTimeoutMs(): number {\n  const raw = process.env[\"AEMEATHCLI_NATIVE_CLI_TIMEOUT_MS\"];\n  if (raw === undefined) {\n    return 0;\n  }\n\n  const parsed = Number.parseInt(raw, 10);\n  if (!Number.isFinite(parsed) || parsed <= 0) {\n    return 0;\n  }\n\n  return parsed;\n}\n\nconst CLI_TIMEOUT_MS = resolveCliTimeoutMs();\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction asString(value: unknown): string | undefined {\n  return typeof value === \"string\" ? value : undefined;\n}\n\nfunction asNumber(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : undefined;\n}\n\nfunction toJsonLines(output: string): unknown[] {\n  const lines = output\n    .split(/\\r?\\n/u)\n    .map((line) => line.trim())\n    .filter((line) => line.length > 0 && line.startsWith(\"{\"));\n\n  const parsed: unknown[] = [];\n  for (const line of lines) {\n    try {\n      parsed.push(JSON.parse(line) as unknown);\n    } catch {\n      // Ignore non-JSON lines\n    }\n  }\n  return parsed;\n}\n\nfunction buildPrompt(request: IChatRequest): string {\n  // Extract only the user message text — system prompt is passed separately\n  // via the provider's native --system-prompt flag.\n  const latestUser = [...request.messages]\n    .reverse()\n    .find((message) => message.role === \"user\");\n  const fallbackLast = request.messages.length > 0\n    ? request.messages[request.messages.length - 1]\n    : undefined;\n\n  return latestUser?.content ?? fallbackLast?.content ?? \"\";\n}\n\nfunction computeCost(modelInfo: IModelInfo, inputTokens: number, outputTokens: number): number {\n  return (\n    (inputTokens / 1_000_000) * modelInfo.inputPricePerMToken +\n    (outputTokens / 1_000_000) * modelInfo.outputPricePerMToken\n  );\n}\n\nfunction classifyCliError(provider: ProviderName, error: unknown): Error {\n  const message = error instanceof Error ? error.message : String(error);\n  const lower = message.toLowerCase();\n\n  if (\n    lower.includes(\"login\")\n    || lower.includes(\"credential\")\n    || lower.includes(\"authentication\")\n    || lower.includes(\"unauthorized\")\n    || lower.includes(\"forbidden\")\n    || lower.includes(\"api key\")\n    || lower.includes(\"token\")\n  ) {\n    return new AuthenticationError(provider, message);\n  }\n\n  return error instanceof Error ? error : new Error(message);\n}\n\nabstract class BaseNativeCLIAdapter implements IModelProvider {\n  abstract readonly name: ProviderName;\n  abstract readonly supportedModels: readonly string[];\n  readonly supportsToolCalling = false;\n\n  protected abstract runCLI(model: string, prompt: string, systemPrompt?: string): Promise<ICLIResult>;\n\n  async chat(request: IChatRequest): Promise<IChatResponse> {\n    const modelInfo = this.getModelInfo(request.model);\n    const prompt = buildPrompt(request);\n\n    try {\n      const result = await this.runCLI(request.model, prompt, request.system);\n\n      const inputTokens = result.inputTokens ?? Math.ceil(prompt.length / CHARS_PER_TOKEN_ESTIMATE);\n      const outputTokens = result.outputTokens ?? Math.ceil(result.text.length / CHARS_PER_TOKEN_ESTIMATE);\n\n      const usage: ITokenUsage = {\n        inputTokens,\n        outputTokens,\n        totalTokens: inputTokens + outputTokens,\n        costUsd: computeCost(modelInfo, inputTokens, outputTokens),\n      };\n\n      const responseMessage: IChatMessage = {\n        id: randomUUID(),\n        role: \"assistant\",\n        content: result.text,\n        model: request.model,\n        provider: this.name,\n        tokenUsage: usage,\n        createdAt: new Date(),\n      };\n\n      return {\n        id: randomUUID(),\n        model: request.model,\n        provider: this.name,\n        message: responseMessage,\n        usage,\n        finishReason: result.finishReason ?? \"stop\",\n      };\n    } catch (error: unknown) {\n      throw classifyCliError(this.name, error);\n    }\n  }\n\n  async *stream(request: IChatRequest): AsyncIterable<IStreamChunk> {\n    try {\n      const response = await this.chat(request);\n      if (response.message.content.length > 0) {\n        yield { type: \"text\", content: response.message.content };\n      }\n      yield { type: \"usage\", usage: response.usage };\n      yield { type: \"done\" };\n    } catch (error: unknown) {\n      // Execa errors can include raw stdout/stderr in the message.\n      // Truncate to prevent raw CLI protocol output from leaking through.\n      const rawMsg = error instanceof Error ? error.message : String(error);\n      const truncated = rawMsg.length > 500 ? rawMsg.slice(0, 500) + \"...\" : rawMsg;\n      yield { type: \"error\", error: truncated };\n      yield { type: \"done\" };\n    }\n  }\n\n  countTokens(text: string, _model: string): Promise<number> {\n    return Promise.resolve(Math.ceil(text.length / CHARS_PER_TOKEN_ESTIMATE));\n  }\n\n  getModelInfo(model: string): IModelInfo {\n    // Check hardcoded registry first, then dynamic discovery\n    const info = SUPPORTED_MODELS[model] ?? getDynamicModelInfo(model);\n    if (info === undefined || info.provider !== this.name) {\n      throw new ModelNotFoundError(model);\n    }\n    return info;\n  }\n\n  listAvailableModels(): Promise<readonly string[]> {\n    return Promise.resolve([...this.supportedModels]);\n  }\n}\n\nexport class ClaudeNativeCLIAdapter extends BaseNativeCLIAdapter {\n  readonly name: ProviderName = \"anthropic\";\n  readonly supportedModels = [\n    \"claude-opus-4-6\",\n    \"claude-opus-4-6-1m\",\n    \"claude-sonnet-4-6\",\n    \"claude-sonnet-4-6-1m\",\n    \"claude-haiku-4-5\",\n  ] as const;\n\n  /** Map internal model IDs to valid Claude CLI model IDs. */\n  private toCLIModelId(model: string): string {\n    // The Claude CLI doesn't recognize the \"-1m\" context suffix.\n    // Strip it — the API handles context window sizing automatically.\n    return model.replace(/-1m$/, \"\");\n  }\n\n  protected async runCLI(model: string, prompt: string, systemPrompt?: string): Promise<ICLIResult> {\n    const cliModel = this.toCLIModelId(model);\n    const args = [\n      \"-p\",\n      \"--output-format\", \"json\",\n      \"--model\", cliModel,\n      // Skip project CLAUDE.md to avoid loading huge project instructions\n      // that make Claude think it's Claude Code doing a codebase audit\n      \"--setting-sources\", \"user\",\n    ];\n\n    if (systemPrompt && systemPrompt.length > 0) {\n      args.push(\"--system-prompt\", systemPrompt);\n    }\n\n    args.push(prompt);\n\n    const { stdout } = await execa(\n      \"claude\",\n      args,\n      {\n        timeout: CLI_TIMEOUT_MS,\n        stdin: \"ignore\",\n        env: { ...process.env, NO_COLOR: \"1\" },\n      },\n    );\n\n    const lines = toJsonLines(stdout);\n    const lastJson = lines.length > 0 ? lines[lines.length - 1] : undefined;\n\n    if (!isRecord(lastJson)) {\n      throw new Error(\"Claude CLI returned no JSON result\");\n    }\n\n    const text = asString(lastJson[\"result\"]) ?? \"\";\n    const usage = isRecord(lastJson[\"usage\"]) ? lastJson[\"usage\"] : undefined;\n    const inputTokens = usage ? asNumber(usage[\"input_tokens\"]) : undefined;\n    const outputTokens = usage ? asNumber(usage[\"output_tokens\"]) : undefined;\n\n    return {\n      text,\n      inputTokens,\n      outputTokens,\n      finishReason: \"stop\",\n    };\n  }\n}\n\nexport class CodexNativeCLIAdapter extends BaseNativeCLIAdapter {\n  readonly name: ProviderName = \"openai\";\n  readonly supportedModels = [\n    \"gpt-5.3-codex\",\n    \"gpt-5.3-codex-spark\",\n    \"gpt-5.2-codex\",\n    \"gpt-5.1-codex-max\",\n    \"gpt-5.2\",\n    \"gpt-5.1-codex-mini\",\n  ] as const;\n\n  protected async runCLI(model: string, prompt: string, systemPrompt?: string): Promise<ICLIResult> {\n    // Allow agent panes to set a writable sandbox so codex can write to the\n    // shared board directory.  Default to \"read-only\" for normal usage.\n    const sandbox = process.env[\"AEMEATHCLI_CODEX_SANDBOX\"] ?? \"read-only\";\n    // Prepend system prompt for Codex (no native --system-prompt flag)\n    const fullPrompt = systemPrompt ? `${systemPrompt}\\n\\n${prompt}` : prompt;\n    const { stdout } = await execa(\n      \"codex\",\n      [\n        \"exec\",\n        \"--skip-git-repo-check\",\n        ...(sandbox !== \"none\" ? [\"--sandbox\", sandbox] : []),\n        \"--json\",\n        \"--model\",\n        model,\n        fullPrompt,\n      ],\n      {\n        timeout: CLI_TIMEOUT_MS,\n        stdin: \"ignore\",\n        env: { ...process.env, NO_COLOR: \"1\" },\n      },\n    );\n\n    const lines = toJsonLines(stdout);\n    const textParts: string[] = [];\n    let inputTokens: number | undefined;\n    let outputTokens: number | undefined;\n\n    for (const line of lines) {\n      if (!isRecord(line)) continue;\n      const type = asString(line[\"type\"]);\n\n      if (type === \"item.completed\") {\n        const item = isRecord(line[\"item\"]) ? line[\"item\"] : undefined;\n        if (item && asString(item[\"type\"]) === \"agent_message\") {\n          const text = asString(item[\"text\"]);\n          if (text && text.length > 0) {\n            textParts.push(text);\n          }\n        }\n      }\n\n      if (type === \"turn.completed\") {\n        const usage = isRecord(line[\"usage\"]) ? line[\"usage\"] : undefined;\n        if (usage) {\n          inputTokens = asNumber(usage[\"input_tokens\"]) ?? inputTokens;\n          outputTokens = asNumber(usage[\"output_tokens\"]) ?? outputTokens;\n        }\n      }\n    }\n\n    return {\n      text: textParts.join(\"\\n\").trim(),\n      inputTokens,\n      outputTokens,\n      finishReason: \"stop\",\n    };\n  }\n}\n\nexport class GeminiNativeCLIAdapter extends BaseNativeCLIAdapter {\n  readonly name: ProviderName = \"google\";\n  readonly supportedModels = [\n    \"gemini-3-pro-preview\",\n    \"gemini-3-flash-preview\",\n    \"gemini-2.5-pro\",\n    \"gemini-2.5-flash\",\n    \"gemini-2.5-flash-lite\",\n  ] as const;\n\n  protected async runCLI(model: string, prompt: string, systemPrompt?: string): Promise<ICLIResult> {\n    // Prepend system prompt for Gemini (no native --system-prompt flag)\n    const fullPrompt = systemPrompt ? `${systemPrompt}\\n\\n${prompt}` : prompt;\n    const { stdout } = await execa(\n      \"gemini\",\n      [\n        \"-p\",\n        fullPrompt,\n        \"--model\",\n        model,\n        \"--output-format\",\n        \"stream-json\",\n        \"--approval-mode\",\n        \"yolo\",\n      ],\n      {\n        timeout: CLI_TIMEOUT_MS,\n        stdin: \"ignore\",\n        env: { ...process.env, NO_COLOR: \"1\" },\n      },\n    );\n\n    const lines = toJsonLines(stdout);\n    let text = \"\";\n    let inputTokens: number | undefined;\n    let outputTokens: number | undefined;\n\n    for (const line of lines) {\n      if (!isRecord(line)) continue;\n      const type = asString(line[\"type\"]);\n\n      if (type === \"message\" && asString(line[\"role\"]) === \"assistant\") {\n        const content = asString(line[\"content\"]);\n        if (content !== undefined) {\n          const delta = line[\"delta\"] === true;\n          text = delta ? `${text}${content}` : content;\n        }\n      }\n\n      if (type === \"result\") {\n        const stats = isRecord(line[\"stats\"]) ? line[\"stats\"] : undefined;\n        if (stats) {\n          inputTokens = asNumber(stats[\"input_tokens\"]) ?? inputTokens;\n          outputTokens = asNumber(stats[\"output_tokens\"]) ?? outputTokens;\n        }\n      }\n    }\n\n    return {\n      text: text.trim(),\n      inputTokens,\n      outputTokens,\n      finishReason: \"stop\",\n    };\n  }\n}\n\nexport class KimiNativeCLIAdapter extends BaseNativeCLIAdapter {\n  readonly name: ProviderName = \"kimi\";\n  readonly supportedModels = [\"kimi-for-coding\"] as const;\n\n  protected async runCLI(_model: string, prompt: string, systemPrompt?: string): Promise<ICLIResult> {\n    const fullPrompt = systemPrompt ? `${systemPrompt}\\n\\n${prompt}` : prompt;\n    const { stdout } = await execa(\n      \"kimi\",\n      [\"--print\", \"--output-format\", \"stream-json\", \"-p\", fullPrompt],\n      {\n        timeout: CLI_TIMEOUT_MS,\n        stdin: \"ignore\",\n        env: { ...process.env, NO_COLOR: \"1\" },\n      },\n    );\n\n    const lines = toJsonLines(stdout);\n    let text = \"\";\n\n    for (const line of lines) {\n      if (!isRecord(line)) continue;\n      if (asString(line[\"role\"]) !== \"assistant\") continue;\n\n      const content = line[\"content\"];\n      if (!Array.isArray(content)) continue;\n\n      const textParts: string[] = [];\n      for (const part of content) {\n        if (!isRecord(part)) continue;\n        if (asString(part[\"type\"]) === \"text\") {\n          const piece = asString(part[\"text\"]);\n          if (piece) textParts.push(piece);\n        }\n      }\n\n      if (textParts.length > 0) {\n        text = textParts.join(\"\");\n      }\n    }\n\n    return {\n      text: text.trim(),\n      finishReason: \"stop\",\n    };\n  }\n}\n\nexport function logNativeAdapterSelection(provider: ProviderName): void {\n  logger.info({ provider }, \"Using native CLI adapter\");\n}\n"]}

package/dist/{chunk-HMJRPNPZ.js → chunk-QK7TKNHV.js}

@@ -1,7 +1,7 @@
 import { getEventBus } from './chunk-YL5XFHR3.js';
-import { getIPCSocketPath, getTasksDir, ensureDirectory, getTeamsDir } from './chunk-NBR3GHMT.js';
 import { AgentSpawnError } from './chunk-ZGOHARPV.js';
-import { logger } from './chunk-JAXXTYID.js';
+import { logger } from './chunk-IR5HLBMH.js';
+import { getIPCSocketPath, getTasksDir, ensureDirectory, getTeamsDir } from './chunk-D275MCIH.js';
 import { join } from 'path';
 import { writeFileSync, renameSync, unlinkSync, existsSync, readFileSync, readdirSync, rmSync } from 'fs';
 import { randomUUID } from 'crypto';
@@ -9,6 +9,49 @@ import { fork } from 'child_process';
 
 var DEFAULT_SHUTDOWN_TIMEOUT_MS = 1e4;
 var DEFAULT_REGISTRATION_TIMEOUT_MS = 15e3;
+var BASE_ENV_KEYS = [
+  "PATH",
+  "HOME",
+  "SHELL",
+  "TERM",
+  "TMPDIR",
+  "TMP",
+  "TEMP",
+  "LANG",
+  "LC_ALL",
+  "LC_CTYPE",
+  "USER",
+  "LOGNAME",
+  "PWD",
+  "XDG_CONFIG_HOME",
+  "XDG_CACHE_HOME",
+  "XDG_DATA_HOME",
+  "APPDATA",
+  "LOCALAPPDATA",
+  "PROGRAMDATA",
+  "SYSTEMROOT",
+  "COMSPEC",
+  "PATHEXT",
+  "COLORTERM",
+  "CI",
+  "NO_COLOR",
+  "FORCE_COLOR",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "SSH_AUTH_SOCK"
+];
+var FORWARDED_ENV_PREFIXES = [
+  "AEMEATHCLI_",
+  "ANTHROPIC_",
+  "OPENAI_",
+  "GOOGLE_",
+  "GEMINI_",
+  "MOONSHOT_",
+  "KIMI_",
+  "OLLAMA_",
+  "NODE_"
+];
 var AgentProcess = class {
   config;
   teamName;
@@ -51,21 +94,7 @@ var AgentProcess = class {
       this.config.role
     ];
     const socketPath = getIPCSocketPath(this.sessionId);
-    const env = {
-      ...process.env,
-      ...this.customEnv,
-      AEMEATHCLI_AGENT_MODE: "1",
-      AEMEATHCLI_TEAM_NAME: this.teamName,
-      AEMEATHCLI_AGENT_ID: this.config.agentId,
-      AEMEATHCLI_AGENT_NAME: this.config.name,
-      AEMEATHCLI_IPC_SOCKET: socketPath,
-      // Prefer SDK adapters when API keys are available (not OAuth/native login).
-      // Native login credentials always use native CLI adapters regardless of
-      // this flag — the registry enforces this to avoid "invalid API key" errors.
-      AEMEATHCLI_PREFER_SDK: "1",
-      // Increase timeout for native CLI fallback (agent tasks can be long).
-      AEMEATHCLI_NATIVE_CLI_TIMEOUT_MS: "300000"
-    };
+    const env = this.buildChildEnv(socketPath);
     try {
       this.child = fork(this.cliEntryPoint, args, {
         stdio: ["pipe", "pipe", "pipe", "ipc"],
@@ -96,6 +125,30 @@ var AgentProcess = class {
       throw new AgentSpawnError(this.config.name, reason);
     }
   }
+  buildChildEnv(socketPath) {
+    const env = {
+      ...pickInheritedEnv(process.env),
+      ...this.customEnv,
+      AEMEATHCLI_AGENT_MODE: "1",
+      AEMEATHCLI_TEAM_NAME: this.teamName,
+      AEMEATHCLI_AGENT_ID: this.config.agentId,
+      AEMEATHCLI_AGENT_NAME: this.config.name,
+      AEMEATHCLI_IPC_SOCKET: socketPath,
+      // Prefer SDK adapters when API keys are available (not OAuth/native login).
+      // Native login credentials always use native CLI adapters regardless of
+      // this flag — the registry enforces this to avoid "invalid API key" errors.
+      AEMEATHCLI_PREFER_SDK: "1",
+      // Increase timeout for native CLI fallback (agent tasks can be long).
+      AEMEATHCLI_NATIVE_CLI_TIMEOUT_MS: "300000"
+    };
+    const sanitized = {};
+    for (const [key, value] of Object.entries(env)) {
+      if (typeof value === "string" && value.length > 0) {
+        sanitized[key] = value;
+      }
+    }
+    return sanitized;
+  }
   /** Gracefully stop the agent. Falls back to SIGTERM after timeout. */
   async stop() {
     if (!this.child) return;
@@ -298,6 +351,24 @@ var AgentProcess = class {
     this.messageCallbacks.clear();
   }
 };
+function pickInheritedEnv(env) {
+  const filtered = {};
+  for (const key of BASE_ENV_KEYS) {
+    const value = env[key];
+    if (typeof value === "string" && value.length > 0) {
+      filtered[key] = value;
+    }
+  }
+  for (const [key, value] of Object.entries(env)) {
+    if (typeof value !== "string" || value.length === 0) {
+      continue;
+    }
+    if (FORWARDED_ENV_PREFIXES.some((prefix) => key.startsWith(prefix))) {
+      filtered[key] = value;
+    }
+  }
+  return filtered;
+}
 function isIPCMessage(value) {
   if (typeof value !== "object" || value === null) return false;
   const obj = value;
@@ -786,7 +857,7 @@ var TEAM_NAME_PATTERN = /^[\w-]+$/;
 var TeamManager = class {
   activeTeams = /* @__PURE__ */ new Map();
   /** Create a new team: config, directories, and agent process handles. */
-  async createTeam(name, options) {
+  createTeam(name, options) {
     if (this.activeTeams.has(name)) {
       throw new Error(`Team already exists: ${name}`);
     }
@@ -826,7 +897,8 @@ var TeamManager = class {
       const processOptions = {
         teamName: name,
         sessionId,
-        cliEntryPoint: options.cliEntryPoint
+        cliEntryPoint: options.cliEntryPoint,
+        ...options.agentEnv !== void 0 ? { env: options.agentEnv } : {}
       };
       const agentProcess = new AgentProcess(member, processOptions);
       processes.set(member.name, agentProcess);
@@ -1027,5 +1099,5 @@ var TeamManager = class {
 };
 
 export { AgentProcess, MessageBus, PlanApproval, TaskStore, TeamManager };
-//# sourceMappingURL=chunk-HMJRPNPZ.js.map
-//# sourceMappingURL=chunk-HMJRPNPZ.js.map
+//# sourceMappingURL=chunk-QK7TKNHV.js.map
+//# sourceMappingURL=chunk-QK7TKNHV.js.map