botmux 3.10.0 → 3.23.1

package/dist/adapters/cli/read-isolation.js

@@ -1,335 +0,0 @@
-/**
- * Per-bot local read isolation (v2) — the CLI-agnostic core.
- *
- * Model (HYBRID): each isolated bot's CLI data is relocated into its own
- * BOT_HOME (`<botmuxHome>/bots/<appId>`, via CLAUDE_CONFIG_DIR / CODEX_HOME),
- * then the whole CLI process is wrapped in an OS sandbox (macOS Seatbelt via
- * `sandbox-exec -f <profile>`) that denies reads of: the GLOBAL CLI data dirs,
- * system credential stores, and every cross-bot-sensitive part of ~/.botmux —
- * with the bot's OWN slice re-allowed by carve-outs. The wrapped CLI bypasses
- * its own built-in sandbox, so the outer Seatbelt profile is the sole enforcer
- * (covers the main process + every Bash subprocess — no escape).
- *
- * This module is pure (no fs / no spawn) so it is fully unit-testable and
- * shared across adapters; the worker resolves the impure inputs (realpath,
- * platform, adapter capability) and emits the profile.
- *
- * Threat model: a semi-trusted Feishu user driving bot A's agent must not be
- * able to read bot B's session data or credentials (bots.json is the full
- * multi-bot cred file; each bot's lark-cli config holds its app secret in
- * plaintext). See the design doc for the two-layer rationale.
- */
-import { DEVICE_AUTHORITY_DIRECTORY, DEVICE_CREDENTIAL_FILE, DEVICE_ENROLLMENT_JOURNAL_FILE, } from '../../platform/device-paths.js';
-/** Normalize a path for the deny/allow lists: require ABSOLUTE, strip trailing
- *  slashes, reject `..` traversal. Returns null for anything unusable so the
- *  caller drops it (a silently-ignored relative path is a fail-open trap).
- *  NOTE: symlink resolution (realpath) is the caller's job — this is pure. */
-export function normalizeIsolationPath(p) {
-    if (!p)
-        return null;
-    const t = p.replace(/\/+$/, '');
-    if (!t.startsWith('/'))
-        return null;
-    if (t.split('/').includes('..'))
-        return null;
-    return t;
-}
-/** Path of the per-bot `botmux send` credential file the worker writes under read
- *  isolation. Lives INSIDE the bot's BOT_HOME ({@link botHomePath}) — the same
- *  per-bot private storage as its redirected CLI data — so the bot reads its OWN
- *  while every OTHER bot's is already covered by the whole-BOT_HOME deny (no
- *  separate per-file deny needed). This makes BOT_HOME the single private-storage
- *  primitive for any per-bot secret (send cred, future github token, …). The
- *  secret reaches `botmux send` only through this file — never env/argv — so it is
- *  not exposed to sibling bots via `ps aux` / `tmux show-environment`.
- *
- *  Takes SESSION_DATA_DIR (what every caller has) and derives BOTMUX_HOME as its
- *  parent — the SAME definition the worker uses for BOT_HOME
- *  (`botHomePath(dirname(SESSION_DATA_DIR))`). Centralizing the derivation here
- *  keeps worker-write / CLI-read / deny in lock-step even for a customized
- *  SESSION_DATA_DIR. */
-export function sendCredFilePath(sessionDataDir, appId) {
-    const botmuxHome = sessionDataDir.replace(/\/+$/, '').replace(/\/[^/]+$/, '');
-    return `${botHomePath(botmuxHome, appId)}/send-cred.json`;
-}
-/** A Feishu app id is safe to use as a path segment. Enforced because appId is
- *  concatenated into BOT_HOME (and its send-cred.json) / sessions-<appId>.json paths and
- *  into Seatbelt allow rules — a `/` or `..` (from a hand-edited bots.json) would
- *  traverse out of BOTMUX_HOME or mis-scope a carve-out. Real Feishu app ids match. */
-const SAFE_APP_ID = /^[A-Za-z0-9._-]+$/;
-export function assertSafeAppId(appId) {
-    // Reject the char-class violators AND any all-dots id (`.`/`..`/`...`): the latter pass
-    // the class but are path-traversal segments — as a carve-out subpath `bots/..` resolves
-    // to the PARENT and re-opens sensitive roots.
-    if (!SAFE_APP_ID.test(appId) || /^\.+$/.test(appId)) {
-        throw new Error(`[read-isolation] unsafe app id used as path segment: ${JSON.stringify(appId)}`);
-    }
-    return appId;
-}
-/** A bot's private home under BOTMUX_HOME: `<botmuxHome>/bots/<appId>`. Holds the
- *  bot's redirected CLI config/transcripts/memory (CLAUDE_CONFIG_DIR=<here>/claude,
- *  CODEX_HOME=<here>/codex). The ONLY thing under BOTMUX_HOME v2 re-allows. */
-export function botHomePath(botmuxHome, appId) {
-    return `${botmuxHome.replace(/\/+$/, '')}/bots/${assertSafeAppId(appId)}`;
-}
-/**
- * Minimal read carve-outs needed to launch a CLI whose executable itself lives
- * under a globally denied data root. The standalone Codex installer exposes
- * `~/.local/bin/codex` as a symlink through
- * `~/.codex/packages/standalone/current`; allowing only the final canonical
- * binary is insufficient because Seatbelt must read the intermediate `current`
- * symlink while resolving execvp(). Re-open the executable package tree only —
- * auth.json, config.toml, sessions and the rest of ~/.codex remain denied.
- *
- * Inputs must already be canonicalized by the worker (this module stays pure).
- */
-export function buildCliExecutableReadCarveOuts(input) {
-    if (input.cliId !== 'codex')
-        return [];
-    const h = input.homeDir.replace(/\/+$/, '');
-    const bin = normalizeIsolationPath(input.resolvedBin);
-    const standaloneRoot = `${h}/.codex/packages/standalone`;
-    if (!bin || (bin !== standaloneRoot && !bin.startsWith(`${standaloneRoot}/`)))
-        return [];
-    return [standaloneRoot];
-}
-/** Host device-authority files must never be visible to a chat-driven CLI.
- * New credentials live below DEVICE_AUTHORITY_DIRECTORY; the exact legacy
- * files remain covered for upgrades from older layouts. */
-export const HOST_DEVICE_CREDENTIAL_FILES = [
-    'platform.json',
-    DEVICE_CREDENTIAL_FILE,
-    DEVICE_ENROLLMENT_JOURNAL_FILE,
-];
-export const DEVICE_CREDENTIAL_ISOLATION_MARKER_BASENAME = '.device-credential-isolation';
-function hostDeviceAuthorityPaths(root) {
-    return [
-        `${root}/${DEVICE_AUTHORITY_DIRECTORY}`,
-        ...HOST_DEVICE_CREDENTIAL_FILES.map(file => `${root}/${file}`),
-    ];
-}
-/** Fixed host marker; deliberately independent of SESSION_DATA_DIR and child env. */
-export function deviceCredentialIsolationMarkerPath(homeDir) {
-    return `${homeDir.replace(/\/+$/, '')}/.botmux/${DEVICE_CREDENTIAL_ISOLATION_MARKER_BASENAME}`;
-}
-/** Match current atomic-write sidecars and legacy backups as well as the
- * dedicated authority directory. */
-export function isCredentialIsolationReservedBasename(name) {
-    return name === DEVICE_AUTHORITY_DIRECTORY
-        || name === DEVICE_CREDENTIAL_ISOLATION_MARKER_BASENAME
-        || name.startsWith(`${DEVICE_CREDENTIAL_ISOLATION_MARKER_BASENAME}.`)
-        || HOST_DEVICE_CREDENTIAL_FILES.some(file => name === file || name.startsWith(`${file}.`));
-}
-export function credentialIsolationRequired(input) {
-    return input.markerExists || input.deviceCredentialExists;
-}
-/** Mandatory device-credential isolation is independent of the optional bot
- * sandbox toggle: once enrolled, every local child must be confined. */
-export function evaluateCredentialOnlyIsolationGate(input) {
-    const required = credentialIsolationRequired(input);
-    if (!required)
-        return { required: false, mode: 'off' };
-    if (input.remoteBackend)
-        return { required: true, mode: 'remote-bypass' };
-    if (input.fullIsolationCoversCredentials)
-        return { required: true, mode: 'covered' };
-    if (input.platform !== 'darwin' && input.platform !== 'linux') {
-        return {
-            required: true,
-            mode: 'blocked',
-            failClosedReason: `credential isolation unsupported on ${input.platform}`,
-        };
-    }
-    if (!input.mechanismAvailable) {
-        return {
-            required: true,
-            mode: 'blocked',
-            failClosedReason: input.platform === 'darwin'
-                ? 'sandbox-exec is unavailable'
-                : 'bubblewrap is unavailable',
-        };
-    }
-    return { required: true, mode: input.platform === 'darwin' ? 'seatbelt' : 'bwrap' };
-}
-function escapeForRegex(p) {
-    return p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-/** Legacy credential-only Seatbelt/bwrap rule shape. Full fs-policy sessions
- * consume the same authority paths through buildFsPolicy instead. */
-export function buildCredentialIsolationRules(ctx) {
-    const h = ctx.homeDir.replace(/\/+$/, '');
-    const bh = ctx.botmuxHome.replace(/\/+$/, '');
-    const defaultBh = (ctx.defaultBotmuxHome ?? `${h}/.botmux`).replace(/\/+$/, '');
-    const roots = dedupe([defaultBh, bh]);
-    const credentialPaths = roots.flatMap(hostDeviceAuthorityPaths);
-    const markerPath = `${defaultBh}/${DEVICE_CREDENTIAL_ISOLATION_MARKER_BASENAME}`;
-    const denyRegexes = roots.flatMap(root => HOST_DEVICE_CREDENTIAL_FILES.map(file => `^${escapeForRegex(root)}/${escapeForRegex(file)}(?:\\.|$)`));
-    denyRegexes.push(`^${escapeForRegex(defaultBh)}/${escapeForRegex(DEVICE_CREDENTIAL_ISOLATION_MARKER_BASENAME)}(?:\\.|$)`);
-    return {
-        roots,
-        denyPaths: dedupe([...credentialPaths, markerPath]),
-        denyRegexes: dedupe(denyRegexes),
-        denyWritePaths: dedupe([...credentialPaths, markerPath]),
-        denyWriteRegexes: dedupe(denyRegexes),
-        denyWriteLiterals: roots,
-    };
-}
-/**
- * Decide whether read isolation is enabled for a session, or fail-closed.
- * Pure: the caller resolves the impure inputs. This is the SINGLE decision
- * point — the worker computes it once and uses it for BOT_HOME redirection,
- * provisioning, and the Seatbelt wrapper alike.
- *  - not configured → `{ enabled: false }` (no error).
- *  - configured but unenforceable → `{ enabled: false, failClosedReason }` — the
- *    caller MUST refuse to start the session rather than run unisolated.
- *  - all satisfied → `{ enabled: true }`.
- */
-export function evaluateReadIsolationGate(opts) {
-    if (!opts.configured)
-        return { enabled: false };
-    if (!opts.adapterSupports)
-        return { enabled: false, failClosedReason: 'the CLI adapter does not support read isolation' };
-    if (opts.wrapperCliSet)
-        return { enabled: false, failClosedReason: 'wrapperCli strips the CLI spawn args, read isolation cannot be enforced' };
-    if (opts.platform !== 'darwin' && opts.platform !== 'linux')
-        return { enabled: false, failClosedReason: `read isolation unsupported on ${opts.platform}` };
-    if (!opts.sessionDataDirSet)
-        return { enabled: false, failClosedReason: 'missing SESSION_DATA_DIR' };
-    return { enabled: true };
-}
-/** Legacy allow-default profile retained only for mandatory credential-only
- * confinement when the full fs-policy sandbox is disabled. */
-export function buildSeatbeltProfile(denyPaths, allowPaths = [], finalDenyPaths = [], traverseDirs = [], denyRegexes = [], writeSandbox, protectedWrites) {
-    const esc = (p) => p.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
-    const escRe = (r) => r.replace(/"/g, '.');
-    const lines = ['(version 1)', '(allow default)'];
-    for (const p of denyPaths)
-        lines.push(`(deny file-read* (subpath "${esc(p)}"))`);
-    for (const r of denyRegexes)
-        lines.push(`(deny file-read* (regex #"${escRe(r)}"))`);
-    for (const p of traverseDirs)
-        lines.push(`(allow file-read-metadata (literal "${esc(p)}"))`);
-    for (const p of allowPaths)
-        lines.push(`(allow file-read* (subpath "${esc(p)}"))`);
-    for (const p of finalDenyPaths)
-        lines.push(`(deny file-read* (subpath "${esc(p)}"))`);
-    if (writeSandbox) {
-        lines.push('(deny file-write* (subpath "/"))');
-        for (const p of writeSandbox.allowWritePaths)
-            lines.push(`(allow file-write* (subpath "${esc(p)}"))`);
-        for (const r of writeSandbox.allowWriteRegexes ?? [])
-            lines.push(`(allow file-write* (regex #"${escRe(r)}"))`);
-        for (const p of writeSandbox.denyWritePaths)
-            lines.push(`(deny file-write* (subpath "${esc(p)}"))`);
-        for (const r of writeSandbox.denyWriteRegexes ?? [])
-            lines.push(`(deny file-write* (regex #"${escRe(r)}"))`);
-    }
-    for (const p of protectedWrites?.denyWritePaths ?? []) {
-        lines.push(`(deny file-write* (subpath "${esc(p)}"))`);
-    }
-    for (const r of protectedWrites?.denyWriteRegexes ?? []) {
-        lines.push(`(deny file-write* (regex #"${escRe(r)}"))`);
-    }
-    for (const p of protectedWrites?.denyWriteLiterals ?? []) {
-        lines.push(`(deny file-write* (literal "${esc(p)}"))`);
-    }
-    return lines.join('\n') + '\n';
-}
-// A marker records which confinement capabilities are attached to the live
-// process. Credential-only panes must cold-spawn when a full sandbox is enabled.
-//
-// BUMP THIS whenever the START-TIME sandbox contract of an isolated CLI changes
-// in a way a still-running process cannot satisfy — warm reattach preserves the
-// live process + its original bwrap mounts/env untouched, so a new mount/env the
-// reattach path relies on but the old process lacks makes reattach unsafe.
-//   · 7 → 8 (#709): isolated CLIs must carry host-injected BOTMUX_READ_ISOLATION
-//     / BOTMUX_API_ONLY env (bots.json EPERM fix). Panes spawned by v3.8.0 have a
-//     v7 marker but a process with NEITHER key, so `botmux` inside them dies on
-//     the denied bots.json read; reattaching leaves the regression unfixed after
-//     a plain `daemon:restart`.
-//   · 8 → 9 (#714): traex/coco now bind ~/.trae migration done-markers read-only
-//     (sandboxReadonlyPaths) so goal-mode stops wedging on the TRAE first-run
-//     migration prompt. That is a new spawn-time mount; a pane predating it warm-
-//     reattaches with the old mount set and still wedges, so it must cold-spawn.
-// #709 (→8) merged first; this PR (#714) rebased on top and takes 9. Numbers stay
-// strictly monotonic — a pane at any intermediate version must be rejected so it
-// cold-spawns under the current contract rather than bypassing a migration.
-export const ISOLATION_PANE_MARKER_VERSION = 9;
-const ALL_ISOLATION_CAPABILITIES = [
-    'credential',
-    'read',
-    'write',
-];
-function normalizeIsolationCapabilities(capabilities) {
-    const requested = new Set(capabilities);
-    return ALL_ISOLATION_CAPABILITIES.filter(capability => requested.has(capability));
-}
-export function isolationPaneMarkerContent(bootId, capabilities) {
-    return JSON.stringify({
-        version: ISOLATION_PANE_MARKER_VERSION,
-        bootId,
-        capabilities: normalizeIsolationCapabilities(capabilities),
-    });
-}
-/**
- * Decide whether a live persistent pane (tmux/zellij/herdr) may be reattached for
- * an isolated bot. Isolation is injected at CLI *spawn* time (the Seatbelt
- * wrapper) and lives on the RUNNING process, so a pane that was spawned isolated
- * STAYS isolated for its whole lifetime — including across daemon restarts (the
- * sandbox is on the CLI process, independent of the daemon).
- *
- * We stamp a versioned marker file when we spawn an isolated CLI. A reattach is
- * safe only when the live process was launched with the current policy version.
- * This matters during security upgrades: a legacy Seatbelt process keeps its old
- * permissions across daemon restarts and must be cold-spawned under the new
- * profile. The boot id remains diagnostic and is not compared across restarts.
- */
-export function isolatedPaneReattachSafe(markerContent, requiredCapabilities = []) {
-    try {
-        const parsed = JSON.parse(markerContent ?? '');
-        if (!Array.isArray(parsed.capabilities)
-            || parsed.capabilities.some(capability => typeof capability !== 'string'
-                || !ALL_ISOLATION_CAPABILITIES.includes(capability))) {
-            return false;
-        }
-        const actual = new Set(parsed.capabilities);
-        return parsed.version === ISOLATION_PANE_MARKER_VERSION
-            && typeof parsed.bootId === 'string'
-            && parsed.bootId.trim().length > 0
-            && requiredCapabilities.every(capability => actual.has(capability));
-    }
-    catch {
-        return false;
-    }
-}
-function dedupe(xs) {
-    return Array.from(new Set(xs));
-}
-/**
- * True when this process is a CLI the worker spawned for a bot under READ
- * ISOLATION (the sandbox), where `~/.botmux/bots.json` is denied ON PURPOSE (it
- * holds every sibling bot's app secret). Callers use it to tell that EXPECTED
- * denial apart from a genuine unreadable-config fault.
- *
- * The signal is `BOTMUX_READ_ISOLATION`, which the worker sets (and otherwise
- * explicitly DELETES) on the child env, gated on `sandboxRequested`. It has to
- * come from the host; two CLI-side guesses were tried and are both wrong:
- *
- *   · `SESSION_DATA_DIR` + `BOTMUX_LARK_APP_ID` — injected for EVERY
- *     worker-spawned CLI, sandboxed or not. Matches ordinary bots, so a real
- *     "bots.json is unreadable" fault would be silently downgraded to "there are
- *     no bots" on a normal host.
- *   · existence of `<BOT_HOME>/send-cred.json` — wrong in BOTH directions: a
- *     no-transport (apiOnly) bot has its own copy denied by fs-policy
- *     (`push([`${ctx.botHome}/send-cred.json`], 'deny', 'mandatory')` in the
- *     `!larkTransport` branch), so a genuinely sandboxed bot reads as
- *     not-isolated; and the file is never cleaned up, so flipping a bot from
- *     `sandbox: true` back to `false` leaves a stale one behind that makes an
- *     ordinary CLI look isolated.
- *
- * (Both caught in review, 2026-08-03. Do not "simplify" this back to either.)
- */
-export function underReadIsolation() {
-    return process.env.BOTMUX_READ_ISOLATION === '1';
-}
-//# sourceMappingURL=read-isolation.js.map

package/dist/adapters/cli/read-isolation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-isolation.js","sourceRoot":"","sources":["../../../src/adapters/cli/read-isolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AAExC;;;8EAG8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,CAAS;IAC9C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;wBAawB;AACxB,MAAM,UAAU,gBAAgB,CAAC,cAAsB,EAAE,KAAa;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC;AAC5D,CAAC;AAED;;;uFAGuF;AACvF,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,wFAAwF;IACxF,wFAAwF;IACxF,8CAA8C;IAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;+EAE+E;AAC/E,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,KAAa;IAC3D,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,GAAG,CAAC,6BAA6B,CAAC;IACzD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,cAAc,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACzF,OAAO,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED;;2DAE2D;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,eAAe;IACf,sBAAsB;IACtB,8BAA8B;CACtB,CAAC;AACX,MAAM,CAAC,MAAM,2CAA2C,GAAG,8BAA8B,CAAC;AAE1F,SAAS,wBAAwB,CAAC,IAAY;IAC5C,OAAO;QACL,GAAG,IAAI,IAAI,0BAA0B,EAAE;QACvC,GAAG,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mCAAmC,CAAC,OAAe;IACjE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,2CAA2C,EAAE,CAAC;AACjG,CAAC;AAED;oCACoC;AACpC,MAAM,UAAU,qCAAqC,CAAC,IAAY;IAChE,OAAO,IAAI,KAAK,0BAA0B;WACrC,IAAI,KAAK,2CAA2C;WACpD,IAAI,CAAC,UAAU,CAAC,GAAG,2CAA2C,GAAG,CAAC;WAClE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,OAAO,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,sBAAsB,CAAC;AAC5D,CAAC;AASD;wEACwE;AACxE,MAAM,UAAU,mCAAmC,CAAC,KAOnD;IACC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,8BAA8B;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACrF,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC9D,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,uCAAuC,KAAK,CAAC,QAAQ,EAAE;SAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAC3C,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,2BAA2B;SAChC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACtF,CAAC;AAQD,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,6BAA6B,CAAC,GAA+B;IAQ3E,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,2CAA2C,EAAE,CAAC;IACjF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACvC,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACtC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAClE,WAAW,CAAC,IAAI,CACd,IAAI,cAAc,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,2CAA2C,CAAC,WAAW,CACxG,CAAC;IACF,OAAO;QACL,KAAK;QACL,SAAS,EAAE,MAAM,CAAC,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC;QAChC,cAAc,EAAE,MAAM,CAAC,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC,CAAC;QACxD,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC;QACrC,iBAAiB,EAAE,KAAK;KACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAWzC;IACC,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,eAAe;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,iDAAiD,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,aAAa;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,yEAAyE,EAAE,CAAC;IACzH,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;QACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,iCAAiC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChG,IAAI,CAAC,IAAI,CAAC,iBAAiB;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,CAAC;IAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;8DAC8D;AAC9D,MAAM,UAAU,oBAAoB,CAClC,SAAmB,EACnB,aAAuB,EAAE,EACzB,iBAA2B,EAAE,EAC7B,eAAyB,EAAE,EAC3B,cAAwB,EAAE,EAC1B,YAKC,EACD,eAIC;IAED,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,uCAAuC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtG,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,iBAAiB,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/G,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,cAAc;YAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpG,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,gBAAgB,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,cAAc,IAAI,EAAE,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,iFAAiF;AACjF,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,iFAAiF;AACjF,gCAAgC;AAChC,iFAAiF;AACjF,8EAA8E;AAC9E,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAI/C,MAAM,0BAA0B,GAAmC;IACjE,YAAY;IACZ,MAAM;IACN,OAAO;CACC,CAAC;AAEX,SAAS,8BAA8B,CACrC,YAA4C;IAE5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,YAA4C;IAE5C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,6BAA6B;QACtC,MAAM;QACN,YAAY,EAAE,8BAA8B,CAAC,YAAY,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAwC,EACxC,uBAAuD,EAAE;IAEzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAI5C,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;eAClC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CACvC,OAAO,UAAU,KAAK,QAAQ;mBAC3B,CAAC,0BAA0B,CAAC,QAAQ,CAAC,UAAiC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAqC,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,OAAO,KAAK,6BAA6B;eAClD,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;eACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;eAC/B,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,EAAY;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;AACnD,CAAC"}

package/dist/adapters/cli/reasonix.d.ts

@@ -1,35 +0,0 @@
-import type { CliAdapter } from './types.js';
-/** Return the Reasonix session directory for a working directory. */
-export declare function reasonixSessionsDir(cwd: string, sessionRoot?: string): string;
-/**
- * Check whether pid belongs to ancestorPid's process tree. Linux reads the
- * parent chain from procfs; other POSIX platforms use one `ps` snapshot.
- */
-export declare function isDescendantOf(pid: number, ancestorPid: number): boolean;
-/** Match a lease pid against a host process tree, including nested PID namespaces. */
-export declare function pidBelongsToProcessTree(pid: number, rootPid: number, procRoot?: string): boolean;
-/**
- * Find the session lease owned by the current CLI process tree. The lease file
- * is created at CLI startup, so its stem — the identifier `--resume` accepts —
- * is available before the first prompt. The npm launcher may add an
- * intermediate process; bwrap may add a PID namespace.
- */
-export declare function findSessionStemForCli(sessionsDir: string, cliPid: number): string | undefined;
-/**
- * Adapter for the Reasonix Bubble Tea TUI.
- *
- * Reasonix does not emit a stable ready marker after each turn, so input uses
- * the standard quiescence detector. Sessions live under
- * `~/.reasonix/projects/<cwd-hash>/sessions`. The lease pid identifies the
- * session file owned by this process tree, and its stem — the same identifier
- * `--resume` accepts, alongside a transcript path or a free-text query — is
- * persisted as the cliSessionId. `reasonix session list` is deliberately NOT
- * used: it reports opaque `session_<hmac>` machine ids that only the
- * `session show|status|recovery` query surface accepts, and it omits a session
- * until its first turn has been persisted. If capture fails, a later restart
- * opens a fresh session because cwd-scoped `--continue` can select another
- * topic's session.
- */
-export declare function createReasonixAdapter(pathOverride?: string): CliAdapter;
-export declare const create: typeof createReasonixAdapter;
-//# sourceMappingURL=reasonix.d.ts.map

package/dist/adapters/cli/reasonix.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reasonix.d.ts","sourceRoot":"","sources":["../../../src/adapters/cli/reasonix.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,YAAY,CAAC;AAMxD,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,SAA+B,GAAG,MAAM,CAMnG;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAsCxE;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAyBjG;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAiB7F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,UAAU,CAoFvE;AAED,eAAO,MAAM,MAAM,8BAAwB,CAAC"}

package/dist/adapters/cli/reasonix.js

@@ -1,236 +0,0 @@
-import { execFileSync } from 'node:child_process';
-import { existsSync, readdirSync, readFileSync, realpathSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { resolveCommand } from './registry.js';
-import { BOTMUX_SHELL_HINTS } from './shared-hints.js';
-import { delay } from '../../utils/timing.js';
-const LEASE_SUFFIX = '.jsonl.lease.json';
-/** Return the Reasonix session directory for a working directory. */
-export function reasonixSessionsDir(cwd, sessionRoot = join(homedir(), '.reasonix')) {
-    // Reasonix hashes getcwd(3), so resolve symlinks before deriving the bucket.
-    // Keep the supplied path when it has disappeared during teardown.
-    let canonicalCwd = cwd;
-    try {
-        canonicalCwd = realpathSync(cwd);
-    }
-    catch { /* best effort */ }
-    return join(sessionRoot, 'projects', canonicalCwd.replaceAll('/', '-'), 'sessions');
-}
-/**
- * Check whether pid belongs to ancestorPid's process tree. Linux reads the
- * parent chain from procfs; other POSIX platforms use one `ps` snapshot.
- */
-export function isDescendantOf(pid, ancestorPid) {
-    if (pid === ancestorPid)
-        return true;
-    if (process.platform === 'linux') {
-        let cur = pid;
-        for (let depth = 0; depth < 16; depth++) {
-            try {
-                const stat = readFileSync(`/proc/${cur}/stat`, 'utf-8');
-                // `comm` may contain spaces and `)`, so split after its final `)`.
-                const after = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
-                const ppid = Number(after[1]);
-                if (!Number.isFinite(ppid))
-                    return false;
-                if (ppid === ancestorPid)
-                    return true;
-                if (ppid <= 1)
-                    return false;
-                cur = ppid;
-            }
-            catch {
-                return false;
-            }
-        }
-        return false;
-    }
-    try {
-        const raw = execFileSync('ps', ['-axo', 'pid=,ppid='], { encoding: 'utf-8' });
-        const ppidOf = new Map();
-        for (const line of raw.split('\n')) {
-            const m = line.trim().match(/^(\d+)\s+(\d+)$/);
-            if (m)
-                ppidOf.set(Number(m[1]), Number(m[2]));
-        }
-        let cur = pid;
-        for (let depth = 0; depth < 16 && cur !== undefined; depth++) {
-            const parent = ppidOf.get(cur);
-            if (parent === undefined)
-                return false;
-            if (parent === ancestorPid)
-                return true;
-            cur = parent;
-        }
-        return false;
-    }
-    catch {
-        return false;
-    }
-}
-/** Match a lease pid against a host process tree, including nested PID namespaces. */
-export function pidBelongsToProcessTree(pid, rootPid, procRoot = '/proc') {
-    if (isDescendantOf(pid, rootPid))
-        return true;
-    if (process.platform !== 'linux')
-        return false;
-    const pending = [rootPid];
-    const seen = new Set();
-    for (let scanned = 0; pending.length > 0 && scanned < 256; scanned++) {
-        const hostPid = pending.shift();
-        if (seen.has(hostPid))
-            continue;
-        seen.add(hostPid);
-        try {
-            const status = readFileSync(join(procRoot, String(hostPid), 'status'), 'utf-8');
-            const nspid = status.match(/^NSpid:\s+(.+)$/m)?.[1]
-                ?.trim().split(/\s+/).map(Number).filter(Number.isFinite) ?? [];
-            if (nspid.includes(pid))
-                return true;
-        }
-        catch { /* process may exit during the scan */ }
-        try {
-            const children = readFileSync(join(procRoot, String(hostPid), 'task', String(hostPid), 'children'), 'utf-8');
-            for (const child of children.trim().split(/\s+/)) {
-                const childPid = Number(child);
-                if (Number.isFinite(childPid) && childPid > 0 && !seen.has(childPid))
-                    pending.push(childPid);
-            }
-        }
-        catch { /* leaf or exited process */ }
-    }
-    return false;
-}
-/**
- * Find the session lease owned by the current CLI process tree. The lease file
- * is created at CLI startup, so its stem — the identifier `--resume` accepts —
- * is available before the first prompt. The npm launcher may add an
- * intermediate process; bwrap may add a PID namespace.
- */
-export function findSessionStemForCli(sessionsDir, cliPid) {
-    let files;
-    try {
-        files = readdirSync(sessionsDir);
-    }
-    catch {
-        return undefined;
-    }
-    for (const f of files) {
-        if (!f.endsWith(LEASE_SUFFIX))
-            continue;
-        try {
-            const lease = JSON.parse(readFileSync(join(sessionsDir, f), 'utf-8'));
-            if (lease.pid !== undefined && pidBelongsToProcessTree(lease.pid, cliPid)) {
-                return f.slice(0, -LEASE_SUFFIX.length);
-            }
-        }
-        catch { /* ignore incomplete lease files */ }
-    }
-    return undefined;
-}
-/**
- * Adapter for the Reasonix Bubble Tea TUI.
- *
- * Reasonix does not emit a stable ready marker after each turn, so input uses
- * the standard quiescence detector. Sessions live under
- * `~/.reasonix/projects/<cwd-hash>/sessions`. The lease pid identifies the
- * session file owned by this process tree, and its stem — the same identifier
- * `--resume` accepts, alongside a transcript path or a free-text query — is
- * persisted as the cliSessionId. `reasonix session list` is deliberately NOT
- * used: it reports opaque `session_<hmac>` machine ids that only the
- * `session show|status|recovery` query surface accepts, and it omits a session
- * until its first turn has been persisted. If capture fails, a later restart
- * opens a fresh session because cwd-scoped `--continue` can select another
- * topic's session.
- */
-export function createReasonixAdapter(pathOverride) {
-    const rawBin = pathOverride ?? 'reasonix';
-    let cachedBin;
-    // A fresh spawn captures its own session stem on the first input that lands.
-    let capturePending = false;
-    return {
-        id: 'reasonix',
-        // Config, machine identity, sessions, leases, and skills share this root.
-        authPaths: ['~/.reasonix'],
-        get resolvedBin() { return (cachedBin ??= resolveCommand(rawBin)); },
-        buildArgs({ resume, resumeSessionId, model, disableCliBypass }) {
-            // A missing native id cannot be recovered safely from cwd alone.
-            const preciseResume = resume && !!resumeSessionId;
-            capturePending = !preciseResume;
-            const args = [];
-            if (!disableCliBypass) {
-                args.push('--yolo');
-            }
-            if (model && model.trim()) {
-                args.push('--model', model.trim());
-            }
-            if (preciseResume)
-                return [...args, '--resume', resumeSessionId];
-            return args;
-        },
-        buildResumeCommand({ cliSessionId }) {
-            if (!cliSessionId)
-                return null;
-            return `reasonix --resume ${cliSessionId}`;
-        },
-        async writeInput(pty, content) {
-            if (pty.sendText && pty.sendSpecialKeys) {
-                if (pty.sendText(content) === false)
-                    return { submitted: false };
-                await delay(200);
-                if (pty.sendSpecialKeys('Enter') === false)
-                    return { submitted: false };
-            }
-            else {
-                pty.write(content);
-                await delay(1000);
-                pty.write('\r');
-            }
-            // The lease exists from CLI startup, so the stem is already on disk by the
-            // first submit. Stay armed until it resolves: an early miss must be retried
-            // on the next input instead of costing the whole session its resume id.
-            if (capturePending && pty.cliCwd && pty.cliPid) {
-                const stem = findSessionStemForCli(reasonixSessionsDir(pty.cliCwd), pty.cliPid);
-                if (stem) {
-                    capturePending = false;
-                    return { submitted: true, cliSessionId: stem };
-                }
-            }
-        },
-        /**
-         * The stem is the transcript file name, so presence is a plain stat. A stem
-         * whose `.jsonl` is absent is genuinely unresumable — before the first turn
-         * persists, only the lease exists and `--resume <stem>` exits 1 with
-         * `no session matches` — so answering false there correctly sends the worker
-         * to a fresh session. Anything unrecognizable stays undefined.
-         */
-        checkResumeTargetExists({ cliSessionId, workingDir }) {
-            if (!cliSessionId || !workingDir)
-                return undefined;
-            // A path or free-text query is not a stem; only stems can be checked here.
-            if (cliSessionId.includes('/'))
-                return undefined;
-            try {
-                return existsSync(join(reasonixSessionsDir(workingDir), `${cliSessionId}.jsonl`));
-            }
-            catch {
-                return undefined;
-            }
-        },
-        completionPattern: undefined,
-        readyPattern: undefined,
-        systemHints: BOTMUX_SHELL_HINTS,
-        // Reasonix 1.19.3 always enters the alternate screen and provides no
-        // no-alt-screen option. Its transcript lives in the Bubble Tea viewport,
-        // so tmux has no scrollback available for transcript paging.
-        altScreen: true,
-        skillsDir: '~/.reasonix/skills',
-        modelChoices: [
-            'deepseek-flash/deepseek-v4-flash',
-            'deepseek-pro/deepseek-v4-pro',
-        ],
-    };
-}
-export const create = createReasonixAdapter;
-//# sourceMappingURL=reasonix.js.map

package/dist/adapters/cli/reasonix.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reasonix.js","sourceRoot":"","sources":["../../../src/adapters/cli/reasonix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC;IACzF,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,YAAY,GAAG,GAAG,CAAC;IACvB,IAAI,CAAC;QAAC,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,WAAmB;IAC7D,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxD,mEAAmE;gBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACzC,IAAI,IAAI,KAAK,WAAW;oBAAE,OAAO,IAAI,CAAC;gBACtC,IAAI,IAAI,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC5B,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC/C,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,GAAG,GAAuB,GAAG,CAAC;QAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,IAAI,GAAG,KAAK,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,MAAM,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YACxC,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,OAAe,EAAE,QAAQ,GAAG,OAAO;IACtF,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAE/C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAG,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7G,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,MAAc;IACvE,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAqB,CAAC;YAC1F,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC1E,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAqB;IACzD,MAAM,MAAM,GAAG,YAAY,IAAI,UAAU,CAAC;IAC1C,IAAI,SAA6B,CAAC;IAClC,6EAA6E;IAC7E,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,OAAO;QACL,EAAE,EAAE,UAAU;QACd,0EAA0E;QAC1E,SAAS,EAAE,CAAC,aAAa,CAAC;QAC1B,IAAI,WAAW,KAAa,OAAO,CAAC,SAAS,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5E,SAAS,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE;YAC5D,iEAAiE;YACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,CAAC,eAAe,CAAC;YAClD,cAAc,GAAG,CAAC,aAAa,CAAC;YAChC,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YACD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,aAAa;gBAAE,OAAO,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kBAAkB,CAAC,EAAE,YAAY,EAAE;YACjC,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC/B,OAAO,qBAAqB,YAAY,EAAE,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,GAAc,EAAE,OAAe;YAC9C,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;gBACxC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK;oBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gBACjE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjB,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,KAAK;oBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACnB,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,2EAA2E;YAC3E,4EAA4E;YAC5E,wEAAwE;YACxE,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,qBAAqB,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChF,IAAI,IAAI,EAAE,CAAC;oBACT,cAAc,GAAG,KAAK,CAAC;oBACvB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAED;;;;;;WAMG;QACH,uBAAuB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE;YAClD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YACnD,2EAA2E;YAC3E,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjD,IAAI,CAAC;gBACH,OAAO,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,iBAAiB,EAAE,SAAS;QAC5B,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,kBAAkB;QAC/B,qEAAqE;QACrE,yEAAyE;QACzE,6DAA6D;QAC7D,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,oBAAoB;QAC/B,YAAY,EAAE;YACZ,kCAAkC;YAClC,8BAA8B;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,qBAAqB,CAAC"}