akm-cli 0.9.0-rc.0 → 0.9.0-rc.2

package/dist/integrations/agent/spawn.js

@@ -143,21 +143,93 @@ function buildChildEnv(profile, options) {
     }
     return env;
 }
+const STREAM_READ_TIMEOUT = Symbol("stream-read-timeout");
 async function readStream(stream, opts) {
     if (!stream)
-        return "";
-    const readPromise = new Response(stream).text().catch(() => "");
-    if (!opts?.timeoutMs)
-        return readPromise;
+        return { text: "", timedOut: false };
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let text = "";
+    if (!opts?.timeoutMs) {
+        try {
+            while (true) {
+                const chunk = await reader.read();
+                if (chunk.done)
+                    break;
+                text += decoder.decode(chunk.value, { stream: true });
+            }
+            text += decoder.decode();
+            return { text, timedOut: false };
+        }
+        catch (error) {
+            return { text, timedOut: false, error };
+        }
+        finally {
+            try {
+                reader.releaseLock();
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
     // Race the stream read against a timeout so a process that is killed via
     // SIGTERM/SIGKILL but whose pipe endpoints stay open (e.g. background
     // threads still holding the fd) cannot block the caller indefinitely.
-    // On timeout we return whatever we received so far (empty string here since
-    // `readPromise` is all-or-nothing with `Response.text()`).
+    // On timeout we return whatever was decoded before the pipe stopped draining.
+    const setTimeoutImpl = opts.setTimeoutFn ?? setTimeout;
+    const clearTimeoutImpl = opts.clearTimeoutFn ?? clearTimeout;
+    let timer;
     const timeoutPromise = new Promise((resolve) => {
-        setTimeout(() => resolve(""), opts.timeoutMs);
+        timer = setTimeoutImpl(() => {
+            timer = undefined;
+            resolve(STREAM_READ_TIMEOUT);
+        }, opts.timeoutMs);
+        if (typeof timer !== "number")
+            timer.unref?.();
     });
-    return Promise.race([readPromise, timeoutPromise]);
+    try {
+        while (true) {
+            const chunk = await Promise.race([reader.read(), timeoutPromise]);
+            if (chunk === STREAM_READ_TIMEOUT) {
+                void reader.cancel().catch(() => { });
+                return { text, timedOut: true };
+            }
+            if (chunk.done)
+                break;
+            text += decoder.decode(chunk.value, { stream: true });
+        }
+        text += decoder.decode();
+        return { text, timedOut: false };
+    }
+    catch (error) {
+        return { text, timedOut: false, error };
+    }
+    finally {
+        if (timer !== undefined) {
+            clearTimeoutImpl(timer);
+        }
+        try {
+            reader.releaseLock();
+        }
+        catch {
+            /* ignore */
+        }
+    }
+}
+function streamFailureMessage(profileName, stdout, stderr) {
+    const failures = [];
+    if (stdout.error)
+        failures.push(`stdout read failed: ${stdout.error instanceof Error ? stdout.error.message : String(stdout.error)}`);
+    if (stderr.error)
+        failures.push(`stderr read failed: ${stderr.error instanceof Error ? stderr.error.message : String(stderr.error)}`);
+    if (stdout.timedOut)
+        failures.push("stdout drain timed out");
+    if (stderr.timedOut)
+        failures.push("stderr drain timed out");
+    if (failures.length === 0)
+        return undefined;
+    return `agent CLI "${profileName}" output capture failed: ${failures.join("; ")}`;
 }
 /**
  * Spawn the agent CLI described by `profile` with `prompt` (forwarded as
@@ -179,17 +251,28 @@ async function readStream(stream, opts) {
  */
 export async function runAgent(profile, prompt, options = {}) {
     const stdioMode = options.stdio ?? profile.stdio;
-    // null = explicitly disabled (no kill timer). undefined = inherit from profile/default.
-    const timeoutMs = options.timeoutMs !== undefined ? options.timeoutMs : (profile.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    // null = explicitly disabled (no kill timer). undefined = runtime default.
+    const timeoutMs = options.timeoutMs !== undefined ? options.timeoutMs : DEFAULT_TIMEOUT_MS;
     const parseOutput = options.parseOutput ?? profile.parseOutput;
     const setTimeoutImpl = options.setTimeoutFn ?? setTimeout;
     const clearTimeoutImpl = options.clearTimeoutFn ?? clearTimeout;
+    // Observability seam — ids/status only, best-effort (see RunAgentOptions.onEvent).
+    const emitSpawnEvent = (type, data) => {
+        if (!options.onEvent)
+            return;
+        try {
+            options.onEvent({ type, data });
+        }
+        catch {
+            // Observability must never break the dispatch.
+        }
+    };
     // Build argv via the platform-specific builder when dispatch params are
     // provided; fall back to the legacy positional-prompt form otherwise.
     let builtArgv;
     let builtEnv;
     if (options.dispatch !== undefined) {
-        const builder = getCommandBuilder(profile.commandBuilder ?? profile.name, options.builderRegistry);
+        const builder = getCommandBuilder(profile.platform ?? profile.name, options.builderRegistry);
         const built = builder.build(profile, options.dispatch);
         builtArgv = built.argv;
         builtEnv = built.env;
@@ -225,9 +308,7 @@ export async function runAgent(profile, prompt, options = {}) {
             stdout: stdioMode === "captured" ? "pipe" : "inherit",
             stderr: stdioMode === "captured" ? "pipe" : "inherit",
             env,
-            // options.cwd wins; dispatch.cwd is the request-level fallback (it was
-            // declared on AgentDispatchRequest but consumed by nothing — P0.5 fix).
-            ...((options.cwd ?? options.dispatch?.cwd) ? { cwd: options.cwd ?? options.dispatch?.cwd } : {}),
+            ...(options.cwd ? { cwd: options.cwd } : {}),
             // Spawn in its own process group so killGroup(-pid, signal) reaches all
             // descendants (e.g. the .opencode binary that opencode's node wrapper forks).
             // Only applied in captured mode — interactive mode inherits the parent
@@ -247,6 +328,10 @@ export async function runAgent(profile, prompt, options = {}) {
             error: err instanceof Error ? err.message : String(err),
         };
     }
+    emitSpawnEvent("spawn_start", {
+        profile: profile.name,
+        ...(typeof proc.pid === "number" ? { pid: proc.pid } : {}),
+    });
     // Hard timeout. We prefer SIGTERM, then SIGKILL if SIGTERM is ignored,
     // but the subprocess only exposes a single .kill() — one signal is enough
     // for the structured-failure contract.
@@ -267,11 +352,13 @@ export async function runAgent(profile, prompt, options = {}) {
             timedOut = true;
             killGroup(proc, "SIGTERM");
             // Follow up with SIGKILL after 5 s in case the process ignores SIGTERM.
-            setTimeoutImpl(() => {
+            const sigkillTimer = setTimeoutImpl(() => {
                 if (!proc || proc.exitCode !== null)
                     return;
                 killGroup(proc, "SIGKILL");
             }, 5000);
+            if (typeof sigkillTimer !== "number")
+                sigkillTimer.unref?.();
         }, timeoutMs);
     }
     // Cooperative cancel: same SIGTERM→SIGKILL discipline as the timeout, but
@@ -308,11 +395,19 @@ export async function runAgent(profile, prompt, options = {}) {
     // When there is no kill timer, allow up to 30 s for streams to drain.
     const streamDrainTimeoutMs = timeoutMs !== null ? timeoutMs + 2_000 : 30_000;
     const stdoutPromise = stdioMode === "captured"
-        ? readStream(proc.stdout ?? null, { timeoutMs: streamDrainTimeoutMs })
-        : Promise.resolve("");
+        ? readStream(proc.stdout ?? null, {
+            timeoutMs: streamDrainTimeoutMs,
+            setTimeoutFn: setTimeoutImpl,
+            clearTimeoutFn: clearTimeoutImpl,
+        })
+        : Promise.resolve({ text: "", timedOut: false });
     const stderrPromise = stdioMode === "captured"
-        ? readStream(proc.stderr ?? null, { timeoutMs: streamDrainTimeoutMs })
-        : Promise.resolve("");
+        ? readStream(proc.stderr ?? null, {
+            timeoutMs: streamDrainTimeoutMs,
+            setTimeoutFn: setTimeoutImpl,
+            clearTimeoutFn: clearTimeoutImpl,
+        })
+        : Promise.resolve({ text: "", timedOut: false });
     // Optional stdin payload (captured mode only).
     //
     // BUG-H1: race the stdin write/close against `proc.exited` and the
@@ -352,6 +447,12 @@ export async function runAgent(profile, prompt, options = {}) {
         // will not block indefinitely.
         await Promise.allSettled([stdoutPromise, stderrPromise]);
         const durationMs = Date.now() - start;
+        emitSpawnEvent("spawn_exit", {
+            profile: profile.name,
+            ...(typeof proc.pid === "number" ? { pid: proc.pid } : {}),
+            exitCode: null,
+            status: "spawn_failed",
+        });
         return {
             ok: false,
             exitCode: null,
@@ -364,7 +465,15 @@ export async function runAgent(profile, prompt, options = {}) {
     }
     clearTimeoutImpl(timer);
     abortSignal?.removeEventListener("abort", onAbort);
-    const [stdout, stderr] = await Promise.all([stdoutPromise, stderrPromise]);
+    emitSpawnEvent("spawn_exit", {
+        profile: profile.name,
+        ...(typeof proc.pid === "number" ? { pid: proc.pid } : {}),
+        exitCode,
+        status: aborted ? "aborted" : timedOut ? "timeout" : exitCode !== 0 ? "non_zero_exit" : "ok",
+    });
+    const [stdoutRead, stderrRead] = await Promise.all([stdoutPromise, stderrPromise]);
+    const stdout = stdoutRead.text;
+    const stderr = stderrRead.text;
     const durationMs = Date.now() - start;
     if (aborted) {
         return {
@@ -388,6 +497,18 @@ export async function runAgent(profile, prompt, options = {}) {
             error: `agent CLI "${profile.name}" timed out after ${timeoutMs ?? 0}ms`,
         };
     }
+    const captureFailure = streamFailureMessage(profile.name, stdoutRead, stderrRead);
+    if (captureFailure) {
+        return {
+            ok: false,
+            exitCode,
+            stdout,
+            stderr,
+            durationMs,
+            reason: "spawn_failed",
+            error: captureFailure,
+        };
+    }
     if (exitCode !== 0) {
         return {
             ok: false,

package/dist/integrations/harnesses/aider/agent-builder.js

@@ -0,0 +1,112 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * Aider CLI agent command builder (P2, plan §"The adapter contract" step 2 /
+ * §"Capability matrix").
+ *
+ * Translates a platform-agnostic {@link AgentDispatchRequest} into the exact
+ * headless argv the `aider` CLI expects. Per the capability matrix the
+ * headless invocation is:
+ *
+ *   aider -m "<p>" --yes-always
+ *
+ * with `--model <m>` for model selection, NO structured-output mode (Aider is
+ * the "none" tier — prompt-injected schema + embedded-JSON extraction), and
+ * NO session flag (resume is chat-history files, not an id).
+ *
+ * Platform-specific mapping decisions (all localized here, per the adapter
+ * contract):
+ *
+ * - **prompt** — `--message` is Aider's one-shot non-interactive mode (the
+ *   matrix's `-m`; the long form is used for self-documenting argv). Unlike
+ *   claude/codex/pi there is NO positional prompt and NO `--` end-of-options
+ *   separator to hide behind: the prompt is a *flag value*. The glued
+ *   `--message=<payload>` form is therefore used so a payload that begins
+ *   with `-`/`--` binds to the flag lexically and can never be parsed as a
+ *   separate option by Aider's argument parser.
+ * - **--yes-always** — always emitted: auto-confirms every interactive
+ *   prompt (create file? run command? …), which is what makes a captured,
+ *   unattended run possible. This is the matrix's documented headless shape.
+ * - **--no-pretty** — always emitted: disables colored/pretty terminal
+ *   rendering so captured stdout is clean text for `./result-extractor.ts`
+ *   (the same "dispatch is the captured path" reasoning as the Claude
+ *   builder's unconditional `--print` and Codex's unconditional `--json`).
+ * - **systemPrompt** — Aider has no system-prompt flag (its nearest concept
+ *   is conventions files via `--read`, which take a path, not text). Folded
+ *   into the message payload — system text first, blank line, then the task —
+ *   mirroring the codex builder's treatment.
+ * - **schema** — the matrix places Aider in the "via prompt+validate" tier
+ *   with *no* structured output mode at all (plan §"Structured-output
+ *   normalization", tier "none"): there is no schema flag and no JSON output
+ *   flag, so the JSON Schema is injected into the message payload using the
+ *   exact directive wording of the engine's prompt assembly
+ *   (`step-work.ts` `buildUnitPrompt`) and the pi builder, so all
+ *   dispatch paths speak one dialect. Downstream, embedded-JSON extraction +
+ *   the engine's shared retry-until-valid loop supply the validation Aider
+ *   lacks. No temp schema file is written — that is Codex's native-schema
+ *   mechanism (`--output-schema`), which Aider does not have.
+ * - **tools** — deliberately unconsumed. Aider has no per-tool allowlist
+ *   flag; tool-ish behaviour is governed by its own switches (`--yes-always`,
+ *   git integration, shell-command confirmation). A restrictive policy is
+ *   therefore dropped rather than approximated — never silently widened.
+ * - **resume/session** — NOT expressible: Aider persists context in
+ *   chat-history files (`.aider.chat.history.md`), not session ids, so there
+ *   is no flag-shaped `HarnessResumeSupport` to export and the extractor
+ *   never yields a `sessionId`. akm's `workflow_run_units` remains the
+ *   durable source of truth; resume works even against a harness with no
+ *   session model (plan §"Session, MCP, and identity across harnesses" —
+ *   Aider is the plan's named example).
+ * - **effort** — stays unconsumed (reserved; the shared request contract's
+ *   "no builder consumes it yet" note stays true).
+ *
+ * NOT registered anywhere: `builders.ts` / `harnesses/index.ts` wiring is a
+ * follow-up integration task (as is the registry entry declaring
+ * `structuredOutput: "none"` and no `resume`). Exported standalone so that
+ * task only adds a registry entry.
+ */
+import { assertNotFlag, resolveDispatchModel, } from "../../agent/builder-shared.js";
+/** Canonical harness/platform id used for model-alias resolution. */
+export const AIDER_PLATFORM = "aider";
+/**
+ * Assemble the `--message` payload: optional system text, the task prompt,
+ * and — when a schema is requested — the same schema directive the workflow
+ * engine's prompt assembly uses (Aider has no native structured output, so
+ * the prompt is the only channel; plan §"Structured-output normalization",
+ * tier "none").
+ */
+function buildMessagePayload(req) {
+    const sections = [];
+    if (req.systemPrompt)
+        sections.push(req.systemPrompt);
+    sections.push(req.prompt);
+    if (req.schema) {
+        sections.push(`Respond with ONLY a JSON value matching this JSON Schema (no prose, no code fences):\n${JSON.stringify(req.schema)}`);
+    }
+    return sections.join("\n\n");
+}
+/**
+ * Aider builder.
+ * Command shape:
+ *   aider [--model <m>] --yes-always --no-pretty --message=<[system\n\n]prompt[\n\nschema directive]>
+ */
+export const aiderBuilder = {
+    platform: AIDER_PLATFORM,
+    build(profile, req) {
+        assertNotFlag(req.systemPrompt, "systemPrompt");
+        assertNotFlag(req.model, "model");
+        const args = [...profile.args];
+        if (req.model) {
+            const resolved = resolveDispatchModel(req, profile, AIDER_PLATFORM);
+            args.push("--model", resolved);
+        }
+        // Headless essentials (matrix shape): auto-confirm everything, and keep
+        // captured stdout free of pretty/ANSI rendering for the extractor.
+        args.push("--yes-always");
+        args.push("--no-pretty");
+        // Glued form: the payload is a flag VALUE (no positional prompt exists),
+        // so `=` binding keeps a dash-leading payload from parsing as an option.
+        args.push(`--message=${buildMessagePayload(req)}`);
+        return { argv: [profile.bin, ...args] };
+    },
+};

package/dist/integrations/harnesses/aider/index.js

@@ -0,0 +1,57 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * Aider CLI harness (P2 integration, plan §"The adapter contract").
+ *
+ * Per-harness barrel gathering the Aider integration surfaces:
+ *   - agent command builder → ./agent-builder.ts    (aiderBuilder)
+ *   - result extractor      → ./result-extractor.ts (aiderResultExtractor)
+ *
+ * It also defines {@link AiderHarness}, the {@link AkmHarness} descriptor that
+ * `HARNESS_REGISTRY` registers. Dispatch-only: no native session-log reader or
+ * config importer yet.
+ */
+import { BaseHarness } from "../types.js";
+import { aiderBuilder } from "./agent-builder.js";
+import { aiderResultExtractor } from "./result-extractor.js";
+export { AIDER_PLATFORM, aiderBuilder } from "./agent-builder.js";
+export { aiderResultExtractor } from "./result-extractor.js";
+function caps(c) {
+    return {
+        sessionLogs: false,
+        agentDispatch: false,
+        detection: false,
+        configImport: false,
+        runtimeIdentity: false,
+        ...c,
+    };
+}
+/**
+ * Aider.
+ *
+ * Canonical id is `'aider'`; no alias or distinct runtime identity.
+ */
+export class AiderHarness extends BaseHarness {
+    id = "aider";
+    displayName = "Aider";
+    aliases = [];
+    agentBuilder = aiderBuilder;
+    resultExtractor = aiderResultExtractor;
+    // ── Workflow-engine descriptor (plan §"Capability matrix", P2) ────────────
+    // akm spawns the `aider` CLI locally per unit ⇒ local-runner.
+    pattern = "local-runner";
+    // No structured-output mode at all (the matrix's "none — parse output"):
+    // akm injects the schema into the prompt and extracts embedded JSON.
+    structuredOutput = "none";
+    // No `resume`: Aider persists context in chat-history files
+    // (`.aider.chat.history.md`), not session ids — the plan's named example of
+    // a harness with no session model. akm's `workflow_run_units` remains the
+    // durable resume source of truth.
+    // No `identityEnv`: the matrix lists Aider's identity markers as uncertain,
+    // and Aider stamps no session var onto child processes.
+    capabilities = caps({
+        agentDispatch: true,
+        detection: true,
+    });
+}

package/dist/integrations/harnesses/aider/result-extractor.js

@@ -0,0 +1,53 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * ANSI escape sequences (CSI color/cursor codes). Defensive only: the builder
+ * always passes `--no-pretty`, but a user profile may override that.
+ * Constructed from a char code so no literal control character appears in
+ * source (lint-friendly, same bytes).
+ */
+const ANSI_ESCAPE_RE = new RegExp(`${String.fromCharCode(27)}\\[[0-9;?]*[ -/]*[@-~]`, "g");
+/**
+ * Aider's own announcement lines — banner, model/repo configuration echo,
+ * chat-history notices, edit/commit/usage reports. All patterns are anchored
+ * at line start and match documented phrasings only; anything else is treated
+ * as reply content.
+ */
+const NOISE_LINE_PATTERNS = [
+    /^aider v\d/, // version banner
+    /^(Main model|Weak model|Editor model|Model):\s/, // model announcements
+    /^Git repo:\s/, // repo detection
+    /^Repo-map:\s/, // repo-map status
+    /^Added .+ to the chat\.?$/, // file add notices
+    /^Restored previous conversation history\.?$/, // chat-history reload notice
+    /^Use \/help\b/, // onboarding hint line
+    /^Tokens: .+/, // usage/cost footer
+    /^Cost: .+/, // standalone cost footer
+    /^Applied edit to .+/, // edit application notices
+    /^Commit [0-9a-f]{6,}\b/, // auto-commit notices
+    /^You can use \/undo\b/, // undo hint after auto-commit
+    /^[─━-]{4,}$/, // ── / ━━ / ---- separator rules
+];
+function isNoiseLine(line) {
+    return NOISE_LINE_PATTERNS.some((pattern) => pattern.test(line));
+}
+/**
+ * Normalize a raw aider run result into `{ text, sessionId? }`.
+ * See the module doc for the stdout shape handled.
+ */
+export const aiderResultExtractor = (result) => {
+    const raw = result.stdout.replace(ANSI_ESCAPE_RE, "").trim();
+    const kept = raw
+        .split("\n")
+        .filter((line) => !isNoiseLine(line.trim()))
+        .join("\n")
+        .trim();
+    // Never return empty text when stdout had content: an all-noise filter
+    // outcome means the patterns over-matched for this capture, so fall back to
+    // the full trimmed stdout (downstream parsing still gets material).
+    const text = kept.length > 0 ? kept : raw;
+    // No session model (chat-history files, not ids): only a spawn-layer id
+    // passes through; output never supplies one.
+    return result.sessionId === undefined ? { text } : { text, sessionId: result.sessionId };
+};

package/dist/integrations/harnesses/amazonq/agent-builder.js

@@ -0,0 +1,152 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * Amazon Q Developer CLI agent command builder (P2, plan §"The adapter
+ * contract" step 2 / §"Capability matrix").
+ *
+ * Translates a platform-agnostic {@link AgentDispatchRequest} into the exact
+ * headless argv the `q` CLI expects. Per the capability matrix the headless
+ * invocation is:
+ *
+ *   q chat --no-interactive --trust-all-tools "<prompt>"
+ *
+ * with `--model <m>` for model selection and `--resume` for resume. Resume is
+ * registry-side (`AkmHarness.resume`, {@link AMAZONQ_RESUME_FLAG}) — and NOTE:
+ * unlike every other harness's resume, Q's `--resume` is a bare flag that
+ * replays the previous conversation *of the working directory*; it takes no
+ * session id. There is nothing to thread from `workflow_run_units` — akm's own
+ * unit rows remain the durable resume source of truth regardless (plan
+ * §"Session, MCP, and identity across harnesses").
+ *
+ * Platform-specific mapping decisions (all localized here, per the adapter
+ * contract):
+ *
+ * - **subcommand** — headless dispatch is the `chat` subcommand. The builder
+ *   prepends `chat` itself (mirroring the codex builder's `exec` handling); a
+ *   user profile that already pins `chat` as its first arg is not doubled.
+ * - **prompt** — the trailing positional `[INPUT]` argument of `q chat`,
+ *   preceded by the `--` end-of-options separator (mirroring the
+ *   claude/codex/pi builders) so a prompt whose text begins with `-`/`--` can
+ *   never be parsed as flags. `--no-interactive` makes Q print the response
+ *   and exit instead of opening the REPL.
+ * - **systemPrompt** — `q chat` has no system-prompt flag (persona/context
+ *   comes from Q's own agent config files), so the system prompt is folded
+ *   into the positional payload ahead of the task prompt, separated by a
+ *   blank line. `assertNotFlag` still guards it.
+ * - **schema** — the matrix places Q in the NO-structured-output tier
+ *   ("via prompt+validate": *(none documented)* — there is no `--json` or
+ *   `--output-format` to ask for). The JSON Schema is therefore passed
+ *   through the prompt: a directive matching the engine's wording
+ *   (`step-work.ts` `buildUnitPrompt`) is appended to the payload.
+ *   Stdout stays plain text; `./result-extractor.ts` strips terminal framing
+ *   and the engine's shared embedded-JSON parse + retry-until-valid loop does
+ *   the rest. No schema temp file is written — that seam is codex-only
+ *   (`--output-schema`); inventing a flag here would produce a silently
+ *   broken command.
+ * - **tools** — a string/array tool policy maps to Q's documented
+ *   `--trust-tools=<t1,t2>` allowlist flag (equals-joined, per `q chat
+ *   --help`). With no policy at all, headless runs need autonomy, so
+ *   `--trust-all-tools` is emitted per the matrix. A *structured* policy
+ *   object is NOT expressible as Q flags; it is deliberately dropped without
+ *   falling back to `--trust-all-tools` (never silently widen a restriction)
+ *   — Q then refuses untrusted tool actions in non-interactive mode, which is
+ *   the conservative failure mode.
+ * - **effort** — stays unconsumed (reserved; the shared request contract's
+ *   "no builder consumes it yet" note stays true).
+ *
+ * NOT registered anywhere: `builders.ts` / `harnesses/index.ts` wiring is a
+ * follow-up integration task (as is the registry-side capability entry —
+ * pattern `local-runner`, structuredOutput `none`). Exported standalone so
+ * that task only adds a registry entry.
+ */
+import { assertNotFlag, resolveDispatchModel, } from "../../agent/builder-shared.js";
+/** Canonical harness/platform id used for model-alias resolution. */
+export const AMAZONQ_PLATFORM = "amazonq";
+/**
+ * Resume flag per the capability matrix (`--resume`). Exported for the
+ * integration task's `AkmHarness.resume` registry entry. Bare flag: Q resumes
+ * the previous conversation of the current working directory and takes NO
+ * session id value — do not append one after it.
+ */
+export const AMAZONQ_RESUME_FLAG = "--resume";
+/**
+ * Split a tool policy into individual tool names for `--trust-tools`.
+ * Strings are comma-separated lists; arrays are taken as-is. Structured
+ * policy objects return `undefined` (not expressible as Q flags — see
+ * module doc).
+ */
+function toolPolicyEntries(tools) {
+    if (typeof tools === "string") {
+        return tools
+            .split(",")
+            .map((t) => t.trim())
+            .filter(Boolean);
+    }
+    if (Array.isArray(tools)) {
+        return tools.map((t) => t.trim()).filter(Boolean);
+    }
+    return undefined;
+}
+/**
+ * Assemble the positional prompt payload: optional system prompt, the task
+ * prompt, and — when a schema is requested — the same schema directive the
+ * workflow engine's prompt assembly uses, so both dispatch paths speak one
+ * dialect.
+ */
+function buildPromptPayload(req) {
+    const sections = [];
+    if (req.systemPrompt)
+        sections.push(req.systemPrompt);
+    sections.push(req.prompt);
+    if (req.schema) {
+        sections.push(`Respond with ONLY a JSON value matching this JSON Schema (no prose, no code fences):\n${JSON.stringify(req.schema)}`);
+    }
+    return sections.join("\n\n");
+}
+/**
+ * Amazon Q Developer CLI builder.
+ * Command shape:
+ *   q chat --no-interactive (--trust-all-tools | --trust-tools=<t1,t2>)
+ *          [--model <m>] -- "<systemPrompt?\n\nprompt\n\nschema directive?>"
+ */
+export const amazonqBuilder = {
+    platform: AMAZONQ_PLATFORM,
+    build(profile, req) {
+        assertNotFlag(req.systemPrompt, "systemPrompt");
+        assertNotFlag(req.model, "model");
+        // Built-in q profiles would ship `args: []`; headless dispatch is the
+        // `chat` subcommand. Don't double it when a user profile already pins it.
+        const extra = profile.args[0] === "chat" ? profile.args.slice(1) : [...profile.args];
+        const args = ["chat", ...extra];
+        // Print the response and exit — required for captured dispatch.
+        args.push("--no-interactive");
+        if (req.tools) {
+            // Structured policy objects (entries === undefined) emit NO trust
+            // flags: dropping a restriction must never widen to --trust-all-tools.
+            const entries = toolPolicyEntries(req.tools);
+            if (entries !== undefined) {
+                for (const tool of entries) {
+                    assertNotFlag(tool, "tools entry");
+                }
+                // Q's documented allowlist form is equals-joined and comma-separated
+                // (`--trust-tools=fs_read,fs_write`); an empty list trusts no tools.
+                args.push(`--trust-tools=${entries.join(",")}`);
+            }
+        }
+        else {
+            // Headless default per the capability matrix: units must run without
+            // interactive tool-approval prompts.
+            args.push("--trust-all-tools");
+        }
+        if (req.model) {
+            const resolved = resolveDispatchModel(req, profile, AMAZONQ_PLATFORM);
+            args.push("--model", resolved);
+        }
+        // No system-prompt / schema flags exist on `q chat` — both travel in the
+        // positional payload, after the end-of-options separator.
+        args.push("--");
+        args.push(buildPromptPayload(req));
+        return { argv: [profile.bin, ...args] };
+    },
+};