audit-tools 0.28.0

package/dist/shared/providers/codexProvider.js

@@ -0,0 +1,79 @@
+import { readFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { readJsonFile } from "../io/json.js";
+import { spawnLoggedCommand } from "./spawnLoggedCommand.js";
+import { resolveWindowsShimSpawnCommand } from "./opencodeLaunch.js";
+import { applyWorkerTaskLaunchSettings, } from "./workerTaskLaunch.js";
+import { emitProviderLaunchDiagnostic, emitProviderDoneDiagnostic, } from "./providerDiagnostics.js";
+export const CODEX_PROVIDER_NAME = "codex";
+/** Default `codex exec --sandbox` policy: writes confined to the working root. */
+const DEFAULT_CODEX_SANDBOX = "workspace-write";
+/**
+ * Codex CLI backend. Codex is a headless coding CLI in the same family as
+ * claude-code. The non-interactive entrypoint is `codex exec`, which reads the
+ * rendered prompt from STDIN (so very large prompts never hit the command-line
+ * length limit) and runs to completion editing files in its working root. The
+ * invocation shape is verified against codex-cli 0.140.0:
+ *
+ *   codex exec --sandbox <policy> --cd <root> --add-dir <resultDir> [--model M]
+ *
+ * `exec` is inherently non-interactive (it has no `--ask-for-approval` flag); the
+ * sandbox policy governs what it may write. `--cd` roots the agent (and its
+ * sandbox) at the node's isolated worktree; `--add-dir` grants write access to the
+ * result-file directory, which lives outside the worktree. On Windows the `codex`
+ * launcher is a `.cmd`/`.ps1` shim that `spawn` cannot run without a shell, so it
+ * is routed through cmd.exe (no-op on other OSes). Launch/done diagnostics match
+ * the other CLI providers.
+ */
+export class CodexProvider {
+    name = CODEX_PROVIDER_NAME;
+    config;
+    launchCommand;
+    constructor(config, launchCommand = spawnLoggedCommand) {
+        this.config = config ?? {};
+        this.launchCommand = launchCommand;
+    }
+    async launch(input) {
+        const prompt = await readFile(input.promptPath, "utf8");
+        const task = await readJsonFile(input.taskPath);
+        const command = this.config.command ?? "codex";
+        const sandbox = this.config.sandbox_mode ?? DEFAULT_CODEX_SANDBOX;
+        // The prompt is delivered via stdin, so it is NOT appended to argv.
+        const baseArgs = [
+            "exec",
+            "--sandbox",
+            sandbox,
+            // Root the agent + its sandbox at the worker's working root (the node's
+            // isolated worktree); spawn cwd is set to the same path.
+            "--cd",
+            input.repoRoot,
+            // The result file lives outside the worktree (the main artifacts dir), so
+            // grant write access to its directory alongside the workspace.
+            "--add-dir",
+            dirname(input.resultPath),
+            ...(this.config.model ? ["--model", this.config.model] : []),
+            ...(this.config.extra_args ?? []),
+        ];
+        // On Windows the `codex` launcher is a `.cmd`/`.ps1` shim that `spawn` cannot
+        // run without a shell; route it through cmd.exe (no-op on other OSes).
+        const { command: spawnCmd, args } = resolveWindowsShimSpawnCommand(command, baseArgs, ["codex", "npx"]);
+        emitProviderLaunchDiagnostic(this.name, input);
+        const result = await this.launchCommand(spawnCmd, args, {
+            ...applyWorkerTaskLaunchSettings(input, task),
+            stdinText: prompt,
+        });
+        emitProviderDoneDiagnostic(this.name, input, result);
+        return result;
+    }
+    /**
+     * Best-effort, never-throwing. Codex is a hosted backend whose 429/RPM/TPM
+     * ceilings are not introspectable from the CLI, so this returns null today.
+     * Resolution falls back to classifyProvider("codex")=hosted defaults plus the
+     * learned-limits subsystem (which absorbs the real usage-limit signal Codex
+     * surfaces on stderr when a quota is exhausted).
+     */
+    async queryLimits(_model) {
+        return null;
+    }
+}
+//# sourceMappingURL=codexProvider.js.map

package/dist/shared/providers/codexProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexProvider.js","sourceRoot":"","sources":["../../../src/shared/providers/codexProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAO7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EACL,6BAA6B,GAE9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAElC,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAgB,CAAC;AAEpD,kFAAkF;AAClF,MAAM,qBAAqB,GAAG,iBAA0B,CAAC;AAEzD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,aAAa;IACxB,IAAI,GAAG,mBAAmB,CAAC;IACV,MAAM,CAAc;IACpB,aAAa,CAA4B;IAE1D,YACE,MAA+B,EAC/B,gBAA2C,kBAAkB;QAE7D,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAwB,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAClE,oEAAoE;QACpE,MAAM,QAAQ,GAAG;YACf,MAAM;YACN,WAAW;YACX,OAAO;YACP,wEAAwE;YACxE,yDAAyD;YACzD,MAAM;YACN,KAAK,CAAC,QAAQ;YACd,0EAA0E;YAC1E,+DAA+D;YAC/D,WAAW;YACX,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;SAClC,CAAC;QACF,8EAA8E;QAC9E,uEAAuE;QACvE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,8BAA8B,CAChE,OAAO,EACP,QAAQ,EACR,CAAC,OAAO,EAAE,KAAK,CAAC,CACjB,CAAC;QACF,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;YACtD,GAAG,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC;YAC7C,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,MAAqB;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/shared/providers/constants.d.ts

@@ -0,0 +1,4 @@
+export declare const LOCAL_SUBPROCESS_PROVIDER_NAME: "local-subprocess";
+export declare const CODEX_PROVIDER_NAME: "codex";
+export declare const ANTIGRAVITY_PROVIDER_NAME: "antigravity";
+//# sourceMappingURL=constants.d.ts.map

package/dist/shared/providers/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,EAAG,kBAA2B,CAAC;AAC1E,eAAO,MAAM,mBAAmB,EAAG,OAAgB,CAAC;AACpD,eAAO,MAAM,yBAAyB,EAAG,aAAsB,CAAC"}

package/dist/shared/providers/constants.js

@@ -0,0 +1,4 @@
+export const LOCAL_SUBPROCESS_PROVIDER_NAME = "local-subprocess";
+export const CODEX_PROVIDER_NAME = "codex";
+export const ANTIGRAVITY_PROVIDER_NAME = "antigravity";
+//# sourceMappingURL=constants.js.map

package/dist/shared/providers/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/shared/providers/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG,kBAA2B,CAAC;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAsB,CAAC"}

package/dist/shared/providers/localSubprocessProvider.d.ts

@@ -0,0 +1,10 @@
+import type { FreshSessionProvider, LaunchFreshSessionInput } from "./types.js";
+import { spawnLoggedCommand } from "./spawnLoggedCommand.js";
+export declare const MISSING_WORKER_COMMAND_MESSAGE = "local-subprocess provider requires task.worker_command.";
+export declare class LocalSubprocessProvider implements FreshSessionProvider {
+    name: string;
+    private readonly launchCommand;
+    constructor(launchCommand?: typeof spawnLoggedCommand);
+    launch(input: LaunchFreshSessionInput): Promise<import("./types.js").LaunchFreshSessionResult>;
+}
+//# sourceMappingURL=localSubprocessProvider.d.ts.map

package/dist/shared/providers/localSubprocessProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localSubprocessProvider.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/localSubprocessProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAM7D,eAAO,MAAM,8BAA8B,4DACgB,CAAC;AAE5D,qBAAa,uBAAwB,YAAW,oBAAoB;IAClE,IAAI,SAAsB;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;gBAE9C,aAAa,GAAE,OAAO,kBAAuC;IAInE,MAAM,CAAC,KAAK,EAAE,uBAAuB;CAY5C"}

package/dist/shared/providers/localSubprocessProvider.js

@@ -0,0 +1,20 @@
+import { readJsonFile } from "../io/json.js";
+import { spawnLoggedCommand } from "./spawnLoggedCommand.js";
+import { applyWorkerTaskLaunchSettings, } from "./workerTaskLaunch.js";
+export const MISSING_WORKER_COMMAND_MESSAGE = "local-subprocess provider requires task.worker_command.";
+export class LocalSubprocessProvider {
+    name = "local-subprocess";
+    launchCommand;
+    constructor(launchCommand = spawnLoggedCommand) {
+        this.launchCommand = launchCommand;
+    }
+    async launch(input) {
+        const task = await readJsonFile(input.taskPath);
+        if (!task.worker_command?.length) {
+            throw new Error(MISSING_WORKER_COMMAND_MESSAGE);
+        }
+        const [command, ...args] = task.worker_command;
+        return await this.launchCommand(command, args, applyWorkerTaskLaunchSettings(input, task));
+    }
+}
+//# sourceMappingURL=localSubprocessProvider.js.map

package/dist/shared/providers/localSubprocessProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localSubprocessProvider.js","sourceRoot":"","sources":["../../../src/shared/providers/localSubprocessProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAK7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACL,6BAA6B,GAE9B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,8BAA8B,GACzC,yDAAyD,CAAC;AAE5D,MAAM,OAAO,uBAAuB;IAClC,IAAI,GAAG,kBAAkB,CAAC;IACT,aAAa,CAA4B;IAE1D,YAAY,gBAA2C,kBAAkB;QACvE,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAwB,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QAC/C,OAAO,MAAM,IAAI,CAAC,aAAa,CAC7B,OAAO,EACP,IAAI,EACJ,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;CACF"}

package/dist/shared/providers/openAiCompatibleProvider.d.ts

@@ -0,0 +1,62 @@
+import type { FreshSessionProvider, LaunchFreshSessionInput, LaunchFreshSessionResult } from "./types.js";
+import type { OpenAiCompatibleConfig } from "../types/sessionConfig.js";
+export declare const OPENAI_COMPATIBLE_PROVIDER_NAME: "openai-compatible";
+type FetchFn = typeof fetch;
+export interface OpenAiCompatibleProviderDeps {
+    /** Injectable fetch for tests; defaults to the global fetch (Node 20+). */
+    fetchFn?: FetchFn;
+    /** Injectable env for key resolution; defaults to process.env. */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * OpenAI-compatible **chat-completions** backend — a first-class, API-driven,
+ * single-shot code-editing worker. Unlike the agentic-CLI providers
+ * (claude-code / codex / opencode), which spawn an external agent that explores
+ * and edits the worktree itself, this provider IS the worker: it sends the
+ * rendered node prompt to any OpenAI-compatible `/chat/completions` endpoint
+ * (NVIDIA NIM, vLLM, LM Studio, OpenRouter, …), the model returns the full set
+ * of file edits plus the run's result artifact as one JSON object, and the
+ * provider applies the edits into `input.repoRoot` (the node's isolated
+ * worktree) and writes the result to `input.resultPath`.
+ *
+ * This is the `llm write` pattern promoted to a provider: it needs no agentic
+ * CLI, so it works wherever an API key + endpoint exist — making it a permanent,
+ * provider-agnostic background dispatch pool. The endpoint, model id, and key
+ * source all come from session config (never hardcoded — INV no-hardcoded-models);
+ * NIM is just one configured instance.
+ *
+ * The provider stays result-schema-agnostic: it relays the prompt verbatim (the
+ * prompt defines the result shape for every worker, agentic or not) and writes
+ * back whatever the model places under `result`. The deterministic merge
+ * downstream is the authority on result contents; an empty/missing/oversize/
+ * unparseable response, a missing result, or a path escaping the worktree all
+ * fail the launch cleanly (`accepted:false`) so the rolling engine routes the
+ * node to error/triage rather than silently closing it.
+ */
+export declare class OpenAiCompatibleProvider implements FreshSessionProvider {
+    name: "openai-compatible";
+    private readonly config;
+    private readonly fetchFn;
+    private readonly env;
+    constructor(config?: OpenAiCompatibleConfig, deps?: OpenAiCompatibleProviderDeps);
+    launch(input: LaunchFreshSessionInput): Promise<LaunchFreshSessionResult>;
+    /**
+     * Best-effort: inline the current contents of repo-relative files the prompt
+     * names, so the model edits real content rather than hallucinating it. Bounded
+     * by per-file and aggregate byte caps and a file-count cap; silently skips
+     * missing / oversized / non-resolving paths. Disabled via
+     * `include_referenced_files:false`.
+     */
+    private gatherReferencedFiles;
+    private appendStdout;
+    private appendStderr;
+}
+/**
+ * Parse JSON that may arrive wrapped in markdown fences or with leading/trailing
+ * prose (reasoning models sometimes do this even under an explicit JSON
+ * instruction). Tries a direct parse, then a fenced block, then the outermost
+ * brace-delimited object.
+ */
+export declare function parseJsonLoose(text: string): unknown;
+export {};
+//# sourceMappingURL=openAiCompatibleProvider.d.ts.map

package/dist/shared/providers/openAiCompatibleProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openAiCompatibleProvider.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/openAiCompatibleProvider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAGxE,eAAO,MAAM,+BAA+B,EAAG,mBAA4B,CAAC;AA2B5E,KAAK,OAAO,GAAG,OAAO,KAAK,CAAC;AAE5B,MAAM,WAAW,4BAA4B;IAC3C,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,wBAAyB,YAAW,oBAAoB;IACnE,IAAI,sBAAmC;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;gBAGtC,MAAM,GAAE,sBAA2B,EACnC,IAAI,GAAE,4BAAiC;IAOnC,MAAM,CACV,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IAmJpC;;;;;;OAMG;YACW,qBAAqB;YA0CrB,YAAY;YAQZ,YAAY;CAO3B;AA+CD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAqBpD"}

package/dist/shared/providers/openAiCompatibleProvider.js

@@ -0,0 +1,333 @@
+import { readFile, mkdir, writeFile, appendFile, stat } from "node:fs/promises";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { writeJsonFile } from "../io/json.js";
+export const OPENAI_COMPATIBLE_PROVIDER_NAME = "openai-compatible";
+/** Default per-file size cap when inlining referenced file contents. */
+const DEFAULT_REFERENCED_FILE_BYTE_CAP = 64 * 1024;
+/** Default aggregate cap across all inlined referenced files. */
+const DEFAULT_REFERENCED_FILES_TOTAL_BYTE_CAP = 256 * 1024;
+/** Default max number of referenced files inlined into the prompt. */
+const DEFAULT_REFERENCED_FILES_MAX = 24;
+/** Default completion token budget when the config does not set one. */
+const DEFAULT_MAX_OUTPUT_TOKENS = 8192;
+/**
+ * The orchestrator's reserved control-plane / artifact root. A worker edits CODE,
+ * never the tool's own artifact tree. Models frequently echo the result file (and
+ * occasionally other artifacts) into files[] because the embedded prompt says
+ * "write your result to <path>"; committing those into the worktree collides with
+ * the live artifacts on merge. Any files[] entry under this dir is skipped — the
+ * result still lands via the `result` channel / resultPath.
+ */
+const CONTROL_PLANE_DIR = ".audit-tools";
+/**
+ * OpenAI-compatible **chat-completions** backend — a first-class, API-driven,
+ * single-shot code-editing worker. Unlike the agentic-CLI providers
+ * (claude-code / codex / opencode), which spawn an external agent that explores
+ * and edits the worktree itself, this provider IS the worker: it sends the
+ * rendered node prompt to any OpenAI-compatible `/chat/completions` endpoint
+ * (NVIDIA NIM, vLLM, LM Studio, OpenRouter, …), the model returns the full set
+ * of file edits plus the run's result artifact as one JSON object, and the
+ * provider applies the edits into `input.repoRoot` (the node's isolated
+ * worktree) and writes the result to `input.resultPath`.
+ *
+ * This is the `llm write` pattern promoted to a provider: it needs no agentic
+ * CLI, so it works wherever an API key + endpoint exist — making it a permanent,
+ * provider-agnostic background dispatch pool. The endpoint, model id, and key
+ * source all come from session config (never hardcoded — INV no-hardcoded-models);
+ * NIM is just one configured instance.
+ *
+ * The provider stays result-schema-agnostic: it relays the prompt verbatim (the
+ * prompt defines the result shape for every worker, agentic or not) and writes
+ * back whatever the model places under `result`. The deterministic merge
+ * downstream is the authority on result contents; an empty/missing/oversize/
+ * unparseable response, a missing result, or a path escaping the worktree all
+ * fail the launch cleanly (`accepted:false`) so the rolling engine routes the
+ * node to error/triage rather than silently closing it.
+ */
+export class OpenAiCompatibleProvider {
+    name = OPENAI_COMPATIBLE_PROVIDER_NAME;
+    config;
+    fetchFn;
+    env;
+    constructor(config = {}, deps = {}) {
+        this.config = config;
+        this.fetchFn = deps.fetchFn ?? globalThis.fetch;
+        this.env = deps.env ?? process.env;
+    }
+    async launch(input) {
+        const command = `${OPENAI_COMPATIBLE_PROVIDER_NAME}:${this.config.model ?? "?"}`;
+        const fail = async (error) => {
+            await this.appendStderr(input.stderrPath, error);
+            return { accepted: false, exitCode: null, command, error };
+        };
+        const baseUrl = this.config.base_url?.trim().replace(/\/+$/, "");
+        const model = this.config.model?.trim();
+        const apiKey = this.config.api_key?.trim() ||
+            (this.config.api_key_env
+                ? (this.env[this.config.api_key_env] ?? "").trim()
+                : "");
+        if (!baseUrl)
+            return fail("openai-compatible provider requires openai_compatible.base_url.");
+        if (!model)
+            return fail("openai-compatible provider requires openai_compatible.model.");
+        if (!apiKey) {
+            return fail(`openai-compatible provider has no API key — set openai_compatible.api_key_env to a populated env var (e.g. NVIDIA_API_KEY)${this.config.api_key_env ? ` (env "${this.config.api_key_env}" is empty)` : ""}.`);
+        }
+        if (typeof this.fetchFn !== "function") {
+            return fail("openai-compatible provider: no fetch implementation available (Node 20+ provides a global fetch).");
+        }
+        let messages;
+        try {
+            const prompt = await readFile(input.promptPath, "utf8");
+            const referenced = await this.gatherReferencedFiles(prompt, input.repoRoot);
+            messages = [
+                { role: "system", content: SINGLE_SHOT_SYSTEM_PROMPT },
+                { role: "user", content: prompt + referenced },
+            ];
+        }
+        catch (err) {
+            return fail(`openai-compatible provider failed to read the prompt: ${errText(err)}`);
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), input.timeoutMs);
+        let content;
+        try {
+            const res = await this.fetchFn(`${baseUrl}/chat/completions`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${apiKey}`,
+                    ...(this.config.headers ?? {}),
+                },
+                body: JSON.stringify({
+                    model,
+                    messages,
+                    temperature: this.config.temperature ?? 0,
+                    max_tokens: this.config.max_output_tokens ?? DEFAULT_MAX_OUTPUT_TOKENS,
+                    stream: false,
+                    ...(this.config.response_format_json
+                        ? { response_format: { type: "json_object" } }
+                        : {}),
+                }),
+                signal: controller.signal,
+            });
+            if (!res.ok) {
+                const body = await safeText(res);
+                return fail(`openai-compatible endpoint returned HTTP ${res.status}: ${truncate(body, 600)}`);
+            }
+            const json = (await res.json());
+            const raw = json.choices?.[0]?.message?.content;
+            if (typeof raw !== "string" || raw.trim().length === 0) {
+                return fail("openai-compatible endpoint returned an empty completion (no choices[0].message.content).");
+            }
+            content = raw;
+        }
+        catch (err) {
+            const aborted = err instanceof Error && err.name === "AbortError";
+            return fail(aborted
+                ? `openai-compatible request timed out after ${input.timeoutMs}ms.`
+                : `openai-compatible request failed: ${errText(err)}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        // Persist the raw completion for run-correlated observability (parallels the
+        // spawn providers' stdout log).
+        await this.appendStdout(input.stdoutPath, content);
+        let parsed;
+        try {
+            parsed = parseJsonLoose(content);
+        }
+        catch (err) {
+            return fail(`openai-compatible response was not parseable JSON: ${errText(err)}`);
+        }
+        // Apply the file edits into the worktree (repoRoot). The worktree branch diff
+        // is the write-scope ground truth, so out-of-scope edits are caught at merge;
+        // here we only defend against a path escaping the worktree entirely.
+        const files = Array.isArray(parsed.files) ? parsed.files : [];
+        let applied = 0;
+        for (const file of files) {
+            if (typeof file?.path !== "string" || typeof file?.content !== "string") {
+                return fail("openai-compatible response files[] entries must be { path: string, content: string }.");
+            }
+            // Never let a worker write into the orchestrator's control plane via files[]
+            // (the result has its own channel). This keeps the worktree commit to genuine
+            // code edits, so the cherry-pick merge doesn't collide with the live artifacts.
+            const relPath = file.path.replace(/\\/g, "/").replace(/^\.\//, "");
+            if (relPath === CONTROL_PLANE_DIR || relPath.startsWith(`${CONTROL_PLANE_DIR}/`)) {
+                await this.appendStderr(input.stderrPath, `skipped control-plane path in files[]: ${file.path}`);
+                continue;
+            }
+            const abs = safeResolveInRepo(input.repoRoot, file.path);
+            if (!abs) {
+                return fail(`openai-compatible response tried to write outside the worktree: ${file.path}`);
+            }
+            try {
+                await mkdir(dirname(abs), { recursive: true });
+                await writeFile(abs, file.content, "utf8");
+                applied += 1;
+            }
+            catch (err) {
+                return fail(`openai-compatible failed writing ${file.path}: ${errText(err)}`);
+            }
+        }
+        if (parsed.result === undefined) {
+            return fail(`openai-compatible response omitted the "result" artifact (applied ${applied} file(s) but produced no result to write to ${input.resultPath}).`);
+        }
+        try {
+            await writeJsonFile(input.resultPath, parsed.result);
+        }
+        catch (err) {
+            return fail(`openai-compatible failed writing the result file: ${errText(err)}`);
+        }
+        return {
+            accepted: true,
+            exitCode: 0,
+            command,
+            args: [baseUrl],
+            stdoutPath: input.stdoutPath,
+            stderrPath: input.stderrPath,
+        };
+    }
+    /**
+     * Best-effort: inline the current contents of repo-relative files the prompt
+     * names, so the model edits real content rather than hallucinating it. Bounded
+     * by per-file and aggregate byte caps and a file-count cap; silently skips
+     * missing / oversized / non-resolving paths. Disabled via
+     * `include_referenced_files:false`.
+     */
+    async gatherReferencedFiles(prompt, repoRoot) {
+        if (this.config.include_referenced_files === false)
+            return "";
+        const perFileCap = DEFAULT_REFERENCED_FILE_BYTE_CAP;
+        const totalCap = DEFAULT_REFERENCED_FILES_TOTAL_BYTE_CAP;
+        const maxFiles = DEFAULT_REFERENCED_FILES_MAX;
+        const candidates = new Set();
+        // Conservative file-ish tokens: a path segment with an extension. Strips
+        // surrounding quotes/backticks/parens the prompt may wrap paths in.
+        const re = /[A-Za-z0-9_./\\-]+\.[A-Za-z0-9]+/g;
+        for (const match of prompt.matchAll(re)) {
+            const token = match[0].replace(/\\/g, "/");
+            if (token.length <= 256)
+                candidates.add(token);
+            if (candidates.size > maxFiles * 4)
+                break;
+        }
+        const parts = [];
+        let total = 0;
+        let count = 0;
+        for (const token of candidates) {
+            if (count >= maxFiles || total >= totalCap)
+                break;
+            const abs = safeResolveInRepo(repoRoot, token);
+            if (!abs)
+                continue;
+            try {
+                const info = await stat(abs);
+                if (!info.isFile() || info.size > perFileCap)
+                    continue;
+                const body = await readFile(abs, "utf8");
+                if (total + body.length > totalCap)
+                    continue;
+                parts.push(`\n--- BEGIN CURRENT FILE ${token} ---\n${body}\n--- END CURRENT FILE ${token} ---`);
+                total += body.length;
+                count += 1;
+            }
+            catch {
+                // missing / binary / unreadable — skip.
+            }
+        }
+        if (parts.length === 0)
+            return "";
+        return `\n\nCURRENT CONTENTS OF REFERENCED FILES (edit these; return their full new contents in \`files\`):${parts.join("")}`;
+    }
+    async appendStdout(path, content) {
+        try {
+            await appendFile(path, content + "\n", "utf8");
+        }
+        catch {
+            // Observability log is best-effort; never fail the launch on a log write.
+        }
+    }
+    async appendStderr(path, message) {
+        try {
+            await appendFile(path, `[openai-compatible] ${message}\n`, "utf8");
+        }
+        catch {
+            // best-effort
+        }
+    }
+}
+const SINGLE_SHOT_SYSTEM_PROMPT = "You are a non-interactive, single-shot code-editing worker. You cannot ask " +
+    "questions, open additional files, or run commands — you must complete the " +
+    "task in ONE response. Read the task in the user message and decide the exact " +
+    "file contents required. Then respond with a SINGLE JSON object and NOTHING " +
+    "else — no prose, no explanation, no markdown, no code fences. The object has " +
+    'exactly two keys: "files" — an array of {"path": string, "content": string} ' +
+    "objects, one per file you create or modify, where `path` is relative to the " +
+    "repository root and `content` is the COMPLETE new contents of that file; and " +
+    '"result" — the exact JSON value the task instructions tell you to write to ' +
+    "the result file (the run's result artifact / item results). Include every " +
+    "file you change in `files`, but do NOT put the result artifact, the result " +
+    "file, or any .audit-tools/ path in `files` — the result belongs ONLY in the " +
+    "`result` key. Output only the JSON object.";
+function errText(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function truncate(text, max) {
+    return text.length > max ? `${text.slice(0, max)}…` : text;
+}
+async function safeText(res) {
+    try {
+        return await res.text();
+    }
+    catch {
+        return "<unreadable body>";
+    }
+}
+/**
+ * Resolve a model-supplied repo-relative path against `repoRoot`, returning the
+ * absolute path only when it stays inside the worktree. Any absolute path or
+ * `..` escape returns null so the caller can reject it.
+ */
+function safeResolveInRepo(repoRoot, candidate) {
+    if (typeof candidate !== "string" || candidate.length === 0)
+        return null;
+    const normalizedRoot = resolve(repoRoot);
+    const abs = resolve(normalizedRoot, candidate);
+    const rel = relative(normalizedRoot, abs);
+    if (rel === "" || rel.startsWith("..") || isAbsolute(rel))
+        return null;
+    return abs;
+}
+/**
+ * Parse JSON that may arrive wrapped in markdown fences or with leading/trailing
+ * prose (reasoning models sometimes do this even under an explicit JSON
+ * instruction). Tries a direct parse, then a fenced block, then the outermost
+ * brace-delimited object.
+ */
+export function parseJsonLoose(text) {
+    const trimmed = text.trim();
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        // fall through
+    }
+    const fence = trimmed.match(/```(?:json)?\s*([\s\S]*?)```/i);
+    if (fence?.[1]) {
+        try {
+            return JSON.parse(fence[1].trim());
+        }
+        catch {
+            // fall through
+        }
+    }
+    const first = trimmed.indexOf("{");
+    const last = trimmed.lastIndexOf("}");
+    if (first !== -1 && last > first) {
+        return JSON.parse(trimmed.slice(first, last + 1));
+    }
+    throw new Error("no JSON object found in response");
+}
+//# sourceMappingURL=openAiCompatibleProvider.js.map

package/dist/shared/providers/openAiCompatibleProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openAiCompatibleProvider.js","sourceRoot":"","sources":["../../../src/shared/providers/openAiCompatibleProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOnE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,CAAC,MAAM,+BAA+B,GAAG,mBAA4B,CAAC;AAE5E,wEAAwE;AACxE,MAAM,gCAAgC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,iEAAiE;AACjE,MAAM,uCAAuC,GAAG,GAAG,GAAG,IAAI,CAAC;AAC3D,sEAAsE;AACtE,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,wEAAwE;AACxE,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAiBzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,wBAAwB;IACnC,IAAI,GAAG,+BAA+B,CAAC;IACtB,MAAM,CAAyB;IAC/B,OAAO,CAAU;IACjB,GAAG,CAAoB;IAExC,YACE,SAAiC,EAAE,EACnC,OAAqC,EAAE;QAEvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAA8B;QAE9B,MAAM,OAAO,GAAG,GAAG,+BAA+B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAa,EAAqC,EAAE;YACtE,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE;YAC3B,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;gBACtB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC,CAAC;QAEV,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,8DAA8D,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CACT,6HAA6H,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAC9M,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,mGAAmG,CAAC,CAAC;QACnH,CAAC;QAED,IAAI,QAAkD,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5E,QAAQ,GAAG;gBACT,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yBAAyB,EAAE;gBACtD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE;aAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,yDAAyD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,mBAAmB,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;oBACjC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC/B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK;oBACL,QAAQ;oBACR,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC;oBACzC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,yBAAyB;oBACtE,MAAM,EAAE,KAAK;oBACb,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB;wBAClC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;wBAC9C,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC,4CAA4C,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;YAChD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC,0FAA0F,CAAC,CAAC;YAC1G,CAAC;YACD,OAAO,GAAG,GAAG,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;YAClE,OAAO,IAAI,CACT,OAAO;gBACL,CAAC,CAAC,6CAA6C,KAAK,CAAC,SAAS,KAAK;gBACnE,CAAC,CAAC,qCAAqC,OAAO,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,6EAA6E;QAC7E,gCAAgC;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEnD,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,cAAc,CAAC,OAAO,CAAiB,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,sDAAsD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,8EAA8E;QAC9E,8EAA8E;QAC9E,qEAAqE;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,uFAAuF,CAAC,CAAC;YACvG,CAAC;YACD,6EAA6E;YAC7E,8EAA8E;YAC9E,gFAAgF;YAChF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI,OAAO,KAAK,iBAAiB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,0CAA0C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjG,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC,mEAAmE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,oCAAoC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CACT,qEAAqE,OAAO,+CAA+C,KAAK,CAAC,UAAU,IAAI,CAChJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,qDAAqD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC;YACX,OAAO;YACP,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,qBAAqB,CACjC,MAAc,EACd,QAAgB;QAEhB,IAAI,IAAI,CAAC,MAAM,CAAC,wBAAwB,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,gCAAgC,CAAC;QACpD,MAAM,QAAQ,GAAG,uCAAuC,CAAC;QACzD,MAAM,QAAQ,GAAG,4BAA4B,CAAC;QAE9C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,EAAE,GAAG,mCAAmC,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;gBAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,UAAU,CAAC,IAAI,GAAG,QAAQ,GAAG,CAAC;gBAAE,MAAM;QAC5C,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,QAAQ;gBAAE,MAAM;YAClD,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,UAAU;oBAAE,SAAS;gBACvD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ;oBAAE,SAAS;gBAC7C,KAAK,CAAC,IAAI,CAAC,4BAA4B,KAAK,SAAS,IAAI,0BAA0B,KAAK,MAAM,CAAC,CAAC;gBAChG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;gBACrB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,sGAAsG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAChI,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,OAAe;QACtD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,OAAe;QACtD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,uBAAuB,OAAO,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;CACF;AAED,MAAM,yBAAyB,GAC7B,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4CAA4C,CAAC;AAE/C,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoC;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,SAAiB;IAC5D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACf,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtD,CAAC"}

package/dist/shared/providers/opencodeLaunch.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Resolve how to spawn a package-manager-installed CLI shim per platform. On
+ * Windows an npm/pnpm/bun-installed CLI on PATH is a `.cmd` / `.ps1` batch shim
+ * (or the bare launcher name) that Node's `spawn` cannot execute without a
+ * shell, so it must go through `cmd.exe`. On every other platform the command
+ * and args pass through unchanged. Single-sourced so every provider that drives
+ * such a shim (opencode, codex, …) routes through identical, correctly-quoted
+ * logic rather than each re-deriving — and accidentally diverging on — it.
+ *
+ * `shimBaseNames` are the bare launcher names that must be wrapped even without a
+ * recognized extension (e.g. `opencode`, `codex`, `npx`). The per-token cmd.exe
+ * quoting reuses the canonical `quoteForShellInterpreterCmd` from exec.ts.
+ */
+export declare function resolveWindowsShimSpawnCommand(command: string, args: string[], shimBaseNames: readonly string[], platform?: NodeJS.Platform, shellCommand?: string): {
+    command: string;
+    args: string[];
+};
+/**
+ * Resolve how to spawn an `opencode` invocation per platform. Thin wrapper over
+ * the shared {@link resolveWindowsShimSpawnCommand} with opencode's launcher
+ * names. Shared by the opencode provider in both orchestrators so neither
+ * silently loses the Windows shim.
+ */
+export declare function resolveOpenCodeSpawnCommand(command: string, args: string[], platform?: NodeJS.Platform, shellCommand?: string): {
+    command: string;
+    args: string[];
+};
+//# sourceMappingURL=opencodeLaunch.d.ts.map

package/dist/shared/providers/opencodeLaunch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencodeLaunch.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/opencodeLaunch.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,YAAY,GAAE,MAAyC,GACtD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAgBrC;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,YAAY,GAAE,MAAyC,GACtD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAQrC"}

package/dist/shared/providers/opencodeLaunch.js

@@ -0,0 +1,39 @@
+import { quoteForShellInterpreterCmd } from "../tooling/exec.js";
+/**
+ * Resolve how to spawn a package-manager-installed CLI shim per platform. On
+ * Windows an npm/pnpm/bun-installed CLI on PATH is a `.cmd` / `.ps1` batch shim
+ * (or the bare launcher name) that Node's `spawn` cannot execute without a
+ * shell, so it must go through `cmd.exe`. On every other platform the command
+ * and args pass through unchanged. Single-sourced so every provider that drives
+ * such a shim (opencode, codex, …) routes through identical, correctly-quoted
+ * logic rather than each re-deriving — and accidentally diverging on — it.
+ *
+ * `shimBaseNames` are the bare launcher names that must be wrapped even without a
+ * recognized extension (e.g. `opencode`, `codex`, `npx`). The per-token cmd.exe
+ * quoting reuses the canonical `quoteForShellInterpreterCmd` from exec.ts.
+ */
+export function resolveWindowsShimSpawnCommand(command, args, shimBaseNames, platform = process.platform, shellCommand = process.env.ComSpec ?? "cmd.exe") {
+    if (platform !== "win32") {
+        return { command, args };
+    }
+    const base = command.replace(/\.(cmd|bat|exe|ps1)$/i, "").toLowerCase();
+    if (shimBaseNames.includes(base) ||
+        command.endsWith(".cmd") ||
+        command.endsWith(".ps1")) {
+        return {
+            command: shellCommand,
+            args: ["/d", "/s", "/c", [command, ...args].map(quoteForShellInterpreterCmd).join(" ")],
+        };
+    }
+    return { command, args };
+}
+/**
+ * Resolve how to spawn an `opencode` invocation per platform. Thin wrapper over
+ * the shared {@link resolveWindowsShimSpawnCommand} with opencode's launcher
+ * names. Shared by the opencode provider in both orchestrators so neither
+ * silently loses the Windows shim.
+ */
+export function resolveOpenCodeSpawnCommand(command, args, platform = process.platform, shellCommand = process.env.ComSpec ?? "cmd.exe") {
+    return resolveWindowsShimSpawnCommand(command, args, ["opencode", "npx"], platform, shellCommand);
+}
+//# sourceMappingURL=opencodeLaunch.js.map

package/dist/shared/providers/opencodeLaunch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencodeLaunch.js","sourceRoot":"","sources":["../../../src/shared/providers/opencodeLaunch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,IAAc,EACd,aAAgC,EAChC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,eAAuB,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS;IAEvD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,IACE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxB,CAAC;QACD,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACxF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAe,EACf,IAAc,EACd,WAA4B,OAAO,CAAC,QAAQ,EAC5C,eAAuB,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS;IAEvD,OAAO,8BAA8B,CACnC,OAAO,EACP,IAAI,EACJ,CAAC,UAAU,EAAE,KAAK,CAAC,EACnB,QAAQ,EACR,YAAY,CACb,CAAC;AACJ,CAAC"}