botmux 3.10.0 → 3.23.1

package/dist/adapters/cli/types.d.ts

@@ -1,460 +0,0 @@
-import type { CodexAppTurnInput } from '../../types.js';
-export interface PtyHandle {
-    write(data: string): void;
-    /** Send text literally via tmux send-keys -l (tmux mode only).
-     *  Returns `false` when the write was dropped (e.g. send-keys failed while the
-     *  pane is still alive) so callers can surface a non-submission; `void`/`true`
-     *  means the write was issued. Backends that can't tell return void. */
-    sendText?(text: string): void | boolean;
-    /** Send special keys via tmux send-keys, e.g. 'Enter', 'Escape', 'C-c' (tmux mode only).
-     *  Returns `false` on a dropped write (see sendText). */
-    sendSpecialKeys?(...keys: string[]): void | boolean;
-    /**
-     * Epoch-ms timestamp of the most recent Ctrl+C the backend may have injected.
-     * Snapshot transports record this before an ambiguous send so adapters with
-     * double-Ctrl+C exit gestures can keep their own recovery outside the window.
-     */
-    readonly lastInjectedCancelAt?: number;
-    /** Paste text via tmux load-buffer + paste-buffer (auto-brackets if terminal supports it). */
-    pasteText?(text: string): void;
-    /** Absolute path to Claude Code's session JSONL; set by worker for claude-code adapter.
-     *  Used by writeInput to verify a paste+Enter actually committed (new user-content
-     *  line appended) and retry Enter if not — rather than trusting fixed sleep timing. */
-    claudeJsonlPath?: string;
-    /** PID of the spawned CLI child process; set by worker so the claude-code adapter
-     *  can read `~/.claude/sessions/<pid>.json` to follow Claude's authoritative
-     *  current session id (which can rotate on resume / mid-session). */
-    cliPid?: number;
-    /** Working directory the CLI was spawned in; cross-checked against the pid file's
-     *  cwd field to reject pid reuse / unrelated processes. */
-    cliCwd?: string;
-}
-export type SubmitRecheckResult = boolean | {
-    submitted: boolean;
-    cliSessionId?: string;
-};
-/** Optional per-input correlation metadata. Adapters that do not need it may
- * ignore it; runner-based adapters use the immutable botmux/Lark turn id to
- * keep protocol ids separate from reply-routing ids. */
-export interface WriteInputContext {
-    turnId?: string;
-}
-/** A session discovered on disk that botmux can resume (import) into a topic —
- *  surfaced by `/adopt`'s second filter. Unlike an AdoptableSession (a live
- *  tmux/zellij pane botmux *observes*), this is a stored transcript botmux
- *  re-spawns via `<cli> --resume <cliSessionId>` in `cwd`; the original CLI need
- *  not be running. */
-export interface ResumableSession {
-    /** CLI-native session id passed to `--resume` (jsonl basename / rollout
-     *  session_meta id / antigravity conversationId). */
-    cliSessionId: string;
-    /** Working directory the session ran in — where botmux re-spawns the CLI. */
-    cwd: string;
-    /** Human title (first real user prompt, truncated). */
-    title: string;
-    /** Epoch ms of last activity (transcript mtime / last submit), for sort + display. */
-    lastActivityAt: number;
-}
-export interface SkillDeliveryCapability {
-    readonly nativeKind: 'claude-plugin' | 'skill-root';
-    readonly supportsScopedSession: boolean;
-    readonly supportsExclusive: boolean;
-}
-export interface McpGatewayInstallSpec {
-    /** Stable CLI-global config file that receives the single `botmux` entry. */
-    readonly configPath: string;
-    readonly format: 'codex-toml' | 'claude-json';
-}
-export interface CliAdapter {
-    /** Unique identifier */
-    readonly id: string;
-    /** Declarative config target for the process-scoped Botmux MCP Gateway. */
-    readonly mcpGateway?: McpGatewayInstallSpec;
-    /** Resolved absolute path to the CLI binary */
-    readonly resolvedBin: string;
-    /** Build spawn arguments (bin comes from resolvedBin).
-     *  The backend also spawns the process in `workingDir`; adapters may use the
-     *  same value when a CLI needs an explicit workspace-root flag.
-     *  When initialPrompt is provided and the adapter supports it, the prompt
-     *  is baked into CLI args (e.g. Gemini's -i flag) instead of being written
-     *  to stdin after idle detection. */
-    buildArgs(opts: {
-        sessionId: string;
-        resume: boolean;
-        workingDir?: string;
-        /** CLI-native session id used for resume when it differs from botmux's session id. */
-        resumeSessionId?: string;
-        /** When true, resume the `resumeSessionId` transcript but write forward into a
-         *  NEW CLI-native session id instead of the resumed one, leaving the source
-         *  transcript untouched — the native "fork/branch a session" primitive
-         *  (Claude `--fork-session`, `codex fork`). Only meaningful with resume=true
-         *  and a resumeSessionId; adapters whose CLI lacks the primitive ignore it. */
-        forkSession?: boolean;
-        initialPrompt?: string;
-        botName?: string;
-        botOpenId?: string;
-        /** This bot's larkAppId. Lets injectsSessionContext adapters (genius) resolve
-         *  their per-bot built-in skill injection mode for the system-prompt catalog;
-         *  inline-prompt CLIs get theirs from session-manager instead. */
-        larkAppId?: string;
-        /** UI / response language for prompts injected into the CLI (e.g. zh / en). */
-        locale?: import('../../i18n/index.js').Locale;
-        /** Optional model name from BotConfig.model. Adapters whose CLI accepts a
-         *  `--model` flag (or equivalent) inject it here; adapters whose CLI has no
-         *  such concept simply ignore the field. Empty / undefined → CLI default. */
-        model?: string;
-        /** Optional per-turn reasoning effort (codex `model_reasoning_effort`).
-         *  Only codex/codex-app adapters honor it; others ignore. */
-        reasoningEffort?: 'low' | 'medium' | 'high' | 'xhigh';
-        /** When true, do not add adapter-default flags that bypass CLI approvals or disable sandboxing. */
-        disableCliBypass?: boolean;
-        /** Codex-family only: when true (default from the global `bypassCodexHookTrust`
-         *  toggle, still ANDed with `!disableCliBypass` by the worker), pass
-         *  `--dangerously-bypass-hook-trust` so a headless plain-TUI launch does not
-         *  wedge on Codex 0.14x's interactive "Press t to trust" gate. Undefined ⇒
-         *  treated as false by adapters (the worker always sends an explicit boolean
-         *  for codex/traex). Does NOT apply to `--remote`/app-server/exec paths. */
-        bypassHookTrust?: boolean;
-        /** Optional session-scoped skill plugin/root prepared by botmux. */
-        skillPluginDir?: string;
-        /** True when this session runs under per-bot read isolation (the worker
-         *  wraps the whole CLI process in a Seatbelt sandbox). Adapters use it for
-         *  isolation-specific spawn tweaks only (e.g. Codex forwards its env to
-         *  shell subprocesses so `botmux send` finds its cred file) — the isolation
-         *  itself is enforced worker-side, not via CLI args. */
-        readIsolation?: boolean;
-        /** Hybrid Codex input mode. When set, the codex adapter launches the TUI as
-         *  a client of an external app-server (`--remote <ws>`) and resumes the
-         *  botmux-owned thread, so user input is delivered via JSON-RPC (turn/start)
-         *  instead of a drop-prone tmux paste. Both are set together or neither. */
-        remoteWsUrl?: string;
-        remoteThreadId?: string;
-    }): string[];
-    /** Adapter-specific chance to rewrite the first prompt before buildArgs sees
-     *  it. Used for CLIs that support file positional args for long prompts: the
-     *  worker can still treat the prompt as args-baked and skip stdin fallback. */
-    prepareInitialPromptArg?(opts: {
-        initialPrompt: string;
-        sessionId: string;
-        sessionDataDir?: string;
-    }): {
-        initialPrompt: string;
-        readonlyRoots?: string[];
-        cleanupPaths?: string[];
-        cleanupDirs?: string[];
-        /** Safe, short TUI input used only when worker policy must defer this
-         * prepared argv prompt (startup commands, durable cold-start, etc.). */
-        deferredInput?: {
-            content: string;
-            additionalArgs?: string[];
-            env?: Record<string, string>;
-        };
-    };
-    /** When true, the adapter passes the initial prompt via CLI args (e.g. -i).
-     *  The worker skips queuing the prompt for stdin write unless another
-     *  defer condition routes it through the post-start input queue. */
-    readonly passesInitialPromptViaArgs?: boolean;
-    /** Only meaningful with passesInitialPromptViaArgs. If set, prompts whose
-     *  UTF-8 byte length is GREATER than this adapter-specific limit are not
-     *  baked into launch args; the worker defers them to the normal post-start
-     *  input queue. This guards backend launchers (notably tmux) whose command
-     *  string limit can be much lower than OS ARG_MAX. */
-    readonly maxInitialPromptArgBytes?: number;
-    /** Only meaningful with passesInitialPromptViaArgs. When true, the CLI
-     *  silently drops its initial-prompt launch flag on a RESUME spawn (e.g.
-     *  OpenCode applies `--prompt` to new sessions only and ignores it with
-     *  `-s <id>`), so the worker routes the initial prompt through the normal
-     *  input queue instead of baking it into args — otherwise the message that
-     *  triggered the resume would be lost. */
-    readonly initialPromptArgsIgnoredOnResume?: boolean;
-    /** Build a shell command string the user can paste into a terminal to
-     *  resume this CLI session locally — independent of botmux. Used by the
-     *  "session closed" card so users have an obvious way to keep the
-     *  conversation outside the bot.
-     *
-     *  Returns `null` when the CLI doesn't support precise per-session resume
-     *  from CLI args (e.g. gemini's "latest only" mode), or when the CLI-native
-     *  session id can't be resolved (e.g. codex history file is missing).
-     *  The card falls back to a static note in those cases.
-     *
-     *  Implementations should print the *default* binary name (`claude`,
-     *  `codex`, etc.) rather than `cliPathOverride` — the override is a
-     *  server-side setting and users running the command on their own
-     *  laptop usually have the default binary on PATH. */
-    buildResumeCommand?(opts: {
-        sessionId: string;
-        /** CLI-native session id from session.cliSessionId, when available. */
-        cliSessionId?: string;
-    }): string | null;
-    /** Write user input to PTY. May fire writes asynchronously (e.g. Aiden delayed Enter).
-     *  Resolves when all writes are complete.
-     *
-     *  Return value is optional: adapters that can verify the submit (e.g. Claude
-     *  Code via session JSONL) return `{ submitted: false }` when all retries
-     *  failed, so the worker can surface that to the user. `void` / undefined
-     *  means "no verification performed, assume OK".
-     *
-     *  When `submitted === false`, adapters may attach a `recheck` closure that
-     *  re-scans the transcript on demand. The worker calls it after a delay so
-     *  slow-path submits (cold-start, slow UserPromptSubmit hooks, busy disk)
-     *  that landed *after* the in-band retry budget exhausted are recognised
-     *  and the user_notify warning is suppressed. The closure must be cheap
-     *  and idempotent — worker may invoke it multiple times. */
-    writeInput(pty: PtyHandle, content: string, context?: WriteInputContext): Promise<void | {
-        submitted: boolean;
-        cliSessionId?: string;
-        /** Non-transient reason when the adapter knows submission is impossible
-         *  without waiting for transcript confirmation (for example an unsupported
-         *  terminal keybinding). Worker surfaces this immediately. */
-        failureReason?: string;
-        recheck?: () => SubmitRecheckResult | Promise<SubmitRecheckResult>;
-    }>;
-    /** Optional structured input path for adapters whose protocol can keep
-     * application context out of the visible user message. The worker calls this
-     * only when a typed sidecar is present; every other adapter continues through
-     * writeInput with byte-for-byte legacy content. */
-    writeStructuredInput?(pty: PtyHandle, content: string, codexAppInput: CodexAppTurnInput, context?: WriteInputContext): Promise<void | {
-        submitted: boolean;
-        cliSessionId?: string;
-        failureReason?: string;
-        recheck?: () => SubmitRecheckResult | Promise<SubmitRecheckResult>;
-    }>;
-    /** Optional: absolute path (with ~ expansion handled by caller) to the CLI's
-     *  skill directory.  When set, `ensureSkills` will write/refresh skill files
-     *  into `{skillsDir}/<skillName>/SKILL.md`.  Undefined = this CLI does not
-     *  support skills (or has a non-standard layout not yet integrated). */
-    readonly skillsDir?: string;
-    /** Optional: absolute path (with ~ expansion handled by caller) to a Claude
-     *  Code *plugin* root. When set, built-in skills are written into
-     *  `{pluginDir}/skills/<name>/SKILL.md` alongside a `.claude-plugin/plugin.json`
-     *  manifest, and the adapter passes `--plugin-dir {pluginDir}` at spawn so the
-     *  skills are scoped to botmux-spawned sessions only — they never land in the
-     *  user's global `~/.claude/skills`, so a standalone `claude` won't surface
-     *  (and mis-fire) them. Mutually exclusive with `skillsDir`. */
-    readonly pluginDir?: string;
-    /** Optional native skill delivery support for user/team custom skills.
-     *  This is separate from `skillsDir`/`pluginDir`, which are still used by
-     *  botmux-owned built-in bridge skills. */
-    readonly skillDelivery?: SkillDeliveryCapability;
-    /** hook 安装描述：spawn 时写入各 CLI 的 hook 配置，使 askUserQuestion 事件转发到
-     *  `botmux hook <cliId>`。undefined = 不通过 hook 接管 askUserQuestion。 */
-    readonly hookInstall?: {
-        /** 待写入的配置文件路径（~ 由 installer 展开）。 */
-        readonly configPath: string;
-        /** 写入格式：决定 installer 如何合并进既有配置。 */
-        readonly format: 'claude-settings' | 'opencode-plugin' | 'grok-hooks';
-        /** 可选：SessionStart「真就绪」hook 命令。
-         *  - claude-settings：写进全局 settings.json（兼进程级 --settings）
-         *  - grok-hooks：写进 `~/.grok/hooks/*.json` 的 SessionStart
-         *  命令缺 BOTMUX_* env 时静默 exit 0，不扰独立 CLI。 */
-        readonly sessionStartCommand?: string;
-    };
-    /** true = 该 CLI 的 Hook 已接管 askUserQuestion（不再装 botmux-ask
-     *  skill 兜底）。注入机制由各 adapter 自行决定（Claude 走 --settings、
-     *  OpenCode 走插件、CoCo 走 ensureAskHook）。 */
-    readonly asksViaHook?: boolean;
-    /** 命令式 hook 安装钩子：适用于无法靠纯写文件完成、需要 spawn CLI 子命令的场景
-     *  （CoCo 需要 `coco plugin install`）。声明式写文件的 CLI 用 `hookInstall`；本方法
-     *  与 `hookInstall` 互斥。每个 daemon 生命周期由 ensureCliSkills 调用一次。
-     *  实现内部自行 try/catch，失败只 warn 不抛。 */
-    ensureAskHook?(): void;
-    /** Completion marker regex (beyond generic quiescence). undefined = quiescence only. */
-    readonly completionPattern?: RegExp;
-    /** Busy marker regex — matches when the CLI is explicitly rendering a
-     *  still-running state. Used for re-attached persistent sessions where there
-     *  may be no new PTY output: if the current screen does NOT match this marker,
-     *  the worker may safely let quiescence mark the session idle. */
-    readonly busyPattern?: RegExp;
-    /** Opt-in positive marker for an idle→working edge observed in PTY output.
-     *  Kept separate from busyPattern because transcript/full-screen redraws may
-     *  contain old busy text; existing adapters remain opt-out by default. */
-    readonly idleToBusyPattern?: RegExp;
-    /** Ready marker regex — matches when the CLI's input prompt is rendered and
-     *  functional.  When set, the idle detector suppresses quiescence-based idle
-     *  until this pattern appears in the PTY output.  Checked every cycle (reset
-     *  after each prompt), so it gates EVERY idle detection, not just startup.
-     *
-     *  Examples: CoCo `⏵⏵` status bar, Codex `›` prompt indicator. */
-    readonly readyPattern?: RegExp;
-    /** When true, the adapter injects a `SessionStart` hook that calls
-     *  `botmux session-ready` once the CLI's input box is genuinely rendered —
-     *  Claude-family via its effective settings.json, Grok via its global
-     *  `hooks/*.json` (see `hookInstall`). The worker arms
-     *  a ready-gate on this flag and holds the FIRST prompt until the signal
-     *  arrives (or a fallback timeout), so a startup launcher's selector `❯` —
-     *  which falsely matches `readyPattern` — can't trip an early flush that
-     *  the selector eats. undefined/false → no gate (every other CLI behaves
-     *  exactly as before). */
-    readonly injectsReadyHook?: boolean;
-    /** CLI-specific system hints injected into the initial prompt.
-     *  e.g. "use Read tool for attachments", "don't use PlanMode" */
-    readonly systemHints: string[];
-    /** When true, the adapter injects Lark session context (instructions +
-     *  session ID) via CLI flags (Claude/genius: --append-system-prompt;
-     *  Grok: --rules).  The session manager skips the inline <botmux_routing>
-     *  / <identity> / <session_id> envelope on user messages. */
-    readonly injectsSessionContext?: boolean;
-    /** When true, the CLI accepts input while busy (type-ahead). Worker writes
-     *  queued messages immediately instead of waiting for idle detection.
-     *  Only set for CLIs whose input handling is known to tolerate this —
-     *  Claude Code buffers input internally and processes it after the current
-     *  turn; CoCo (0.120.32+) parks it in its TUI queue and writes the transcript
-     *  user event only at dequeue time (transcript stays interleaved); Codex
-     *  (0.134.0+) parks it too but STEERS it into the active turn — a tool-running
-     *  turn can merge the queued input into one final (rollout: user1 → user2 →
-     *  assistant_final). CodexBridgeQueue's HOL-block-drop keeps attribution
-     *  correct for both shapes. */
-    readonly supportsTypeAhead?: boolean;
-    /** The adapter exposes a transcript-backed end-of-turn boundary that the
-     *  worker can report independently of whether fallback output is visible.
-     *  Durable meeting delivery is fail-closed for adapters without this
-     *  capability; `queued` and `final_output` are not completion receipts. */
-    readonly reliableTurnTerminal?: boolean;
-    /** True when this adapter supports running under per-bot read isolation (its
-     *  data root is redirectable into BOT_HOME — CLAUDE_CONFIG_DIR / CODEX_HOME —
-     *  and it runs correctly under the worker's whole-process Seatbelt wrapper,
-     *  with its own built-in sandbox bypassed so nested sandboxing can't hang).
-     *  The worker gates on this: a bot with `readIsolation` on but an adapter
-     *  that does NOT support it is fail-closed (refuse to start) rather than run
-     *  silently unisolated. */
-    readonly supportsReadIsolation?: boolean;
-    /** CLI 支持会话内移动工作目录（如 Claude Code ≥2.1.205 的 /cd）。
-     *  ⚠️ 历史能力位，**已从角色切换路由退场**：`botmux role switch` 现统一走「杀 CLI +
-     *  `--resume` 在新 cwd respawn」（适配器无关，见 dashboard-ipc-server 的 cd 路由与
-     *  worker 的 restart case），不再按本字段分流 idle 注入 vs 冷启动。字段保留仅供未来
-     *  可能的会话内移动复用，当前无生产读取点。 */
-    readonly supportsSessionCwdMove?: boolean;
-    /** When true, the worker's soft first-prompt timeout keeps queued input held
-     *  until this adapter's `readyPattern` appears. Use only for CLIs whose startup
-     *  screens can accept and swallow stdin before the real composer exists; the
-     *  worker still enforces a longer hard timeout so the first prompt cannot hang
-     *  forever if the ready marker changes or the CLI stalls. */
-    readonly deferFirstPromptTimeoutUntilReady?: boolean;
-    /** When true, worker may squash additional queued Lark messages into the
-     *  pending tail instead of preserving one botmux turn per queued message.
-     *  Keep this opt-in: most adapters rely on distinct turnId / card routing. */
-    readonly mergeQueuedInput?: boolean;
-    /** Whether CLI uses alternate screen buffer */
-    readonly altScreen: boolean;
-    /** Curated model candidates surfaced in `botmux setup`. When undefined the
-     *  setup flow skips the model prompt for this CLI entirely (e.g. CLIs whose
-     *  model is fixed or set via a config file we don't manage). The order is
-     *  presented as-is; the setup prompt always appends an "Other / custom"
-     *  free-text option, so this list is curation, not a hard whitelist. */
-    readonly modelChoices?: readonly string[];
-    /** Claude-family CLIs only (claude-code, seed). The data root holding
-     *  `projects/<hash>/<id>.jsonl`, `sessions/<pid>.json`, `tasks/`,
-     *  `keybindings.json` and `settings.json`. When set, the worker drives the
-     *  JSONL submit-confirmation, bridge fallback and pid resolution against this
-     *  dir (instead of hardcoding `~/.claude`). undefined → not Claude-family. */
-    readonly claudeDataDir?: string;
-    /** Claude-family CLIs only. Path to the `.claude.json` folder-trust / state
-     *  file (pre-accepted at spawn so a fresh workingDir doesn't block on the
-     *  interactive trust dialog). `~/.claude.json` for Claude Code; inside the
-     *  data root for forks that set CLAUDE_CONFIG_DIR. */
-    readonly claudeStateJsonPath?: string;
-    /** Paths (files or dirs) holding THIS CLI's auth / login state that must stay
-     *  REAL + writable inside the file sandbox. The sandbox isolates the filesystem
-     *  to a deny-by-default whitelist (so the agent only sees the rule paths), but a
-     *  CLI's token refresh / login must PERSIST to the real auth — otherwise the
-     *  sandboxed CLI loses its login (see seed's `bytecloud-auth`). The sandbox binds
-     *  each existing path rw (real host path) so auth reads/refreshes/logins hit the
-     *  real files. `~` is expanded. Default to NARROW (auth only) so session history
-     *  stays out of the sandbox — but widen to the CLI's whole state dir when it keeps
-     *  SQLite DBs there (e.g. codex): only whitelisted paths exist in the sandbox, so
-     *  a narrow carve-out leaves the DB dir absent and the CLI unable to start.
-     *  undefined / empty → no carve-out. */
-    readonly authPaths?: readonly string[];
-    /** Absolute paths of ADDITIONAL executables this adapter spawns as a SECOND
-     *  stage INSIDE the file sandbox, beyond `resolvedBin` (the bwrap target). The
-     *  sandbox masks `/run` with a fresh tmpfs; any such binary living under
-     *  `/run/...` (fnm/nvm/volta bin symlink farms) would then vanish and crash-loop
-     *  the CLI, so the sandbox re-exposes their containing dirs read-only.
-     *
-     *  Most adapters omit this — their `resolvedBin` IS the binary that runs. It is
-     *  for adapters whose `resolvedBin` is a launcher: codex-app's `resolvedBin` is
-     *  node running the runner, while the REAL `codex` (spawned later for the
-     *  app-server) is the one that must survive `--tmpfs /run`.
-     *
-     *  Return ONLY executable paths — never plain path args like the working dir,
-     *  whose parent dir re-bind would shadow the project bind and widen exposure.
-     *  Resolved lazily / read AFTER buildArgs() (so a lazily-resolved bin is cached).
-     *  Missing/empty → no extra re-expose. */
-    sandboxExtraExecPaths?(): readonly string[];
-    /** Absolute paths (files or dirs) this adapter needs visible READ-ONLY inside
-     *  the file sandbox — distinct from `authPaths`, which are bound READ-WRITE.
-     *  Use this for host state the CLI only READS (e.g. traex/coco's first-run
-     *  migration done-markers at the ~/.trae root): exposing them read-only lets
-     *  the CLI see them without widening the writable surface to sibling
-     *  hook/plugin/skill code. Wired into the fs-policy `readonlyRoots` channel
-     *  (→ readOnly rule). `~`-expanded + existence-filtered by the worker, so
-     *  listing a path absent on this host is a no-op. Missing/empty → nothing extra
-     *  exposed. Return ONLY paths safe to reveal read-only (never credentials). */
-    sandboxReadonlyPaths?(): readonly string[];
-    /** Extra env merged into the spawned child's environment. Used by Claude-family
-     *  forks to point the CLI at its data root (e.g. Seed's `CLAUDE_CONFIG_DIR`).
-     *  Keys placed here are also forwarded through the tmux backend (see
-     *  BOTMUX_INJECTED_ENV_KEYS). undefined → inherit the worker env unchanged. */
-    readonly spawnEnv?: Readonly<Record<string, string>>;
-    /** Optional: pre-flight check for resume targets.
-     *
-     *  Called with `resume=true` before spawn so a missing conversation JSONL /
-     *  rollout / DB entry does not produce a CLI-level "No conversation found"
-     *  exit code 1 — which would otherwise be amplified into an auto-restart
-     *  crash loop by the daemon's claude_exit handler.
-     *
-     *  Return `true` = resume target looks present (spawn normally with --resume).
-     *  Return `false` = target is provably missing → worker will fall back to a
-     *  FRESH session (resume=false, drop cliSessionId, log + user_notify once).
-     *  Return `undefined` / omit = adapter cannot tell cheaply → rely on the
-     *  worker's SECONDARY guard (2nd restart forces fresh) so unknown-shape CLIs
-     *  still degrade without crash-looping.
-     *
-     *  Must be synchronous, cheap, and conservative. An adapter that can verify
-     *  the resume target without spawning a subprocess implements this; others
-     *  simply leave it undefined (the secondary guard is always active). */
-    checkResumeTargetExists?(opts: {
-        sessionId: string;
-        /** CLI-native session id from session.cliSessionId, when available. */
-        cliSessionId?: string;
-        /** Working directory the CLI will spawn in. Used by Claude-family to
-         *  locate <projects>/<cwdHash>/<id>.jsonl. */
-        workingDir?: string;
-        /** Claude-family data dir (~/.claude, ~/.claude-runtime, …) so the probe
-         *  targets the SAME root the adapter will actually write into. */
-        dataDir?: string;
-        /** Optional CLI-specific resume store path resolved by the worker after
-         *  applying per-bot env/profile settings (for example Hermes state.db). */
-        stateDbPath?: string;
-    }): boolean | undefined;
-    /** Optional: discover sessions resumable from this CLI's on-disk transcript
-     *  store (powers `/adopt`'s second filter — paseo-style import). Daemon-side,
-     *  pure filesystem (no PTY / subprocess), most-recent first, capped to `limit`.
-     *  undefined = this CLI has no discoverable per-session store (resume only via
-     *  botmux's own id, an opaque store, or no per-session resume at all). */
-    listResumableSessions?(opts: {
-        limit: number;
-        /** CLI-native session ids to skip (sessions botmux already runs live). Applied
-         *  BEFORE truncating to `limit` — and, where the id is the on-disk filename
-         *  (claude-family), before parsing — so a host with many live sessions still
-         *  surfaces `limit` resumable ones instead of being starved by exclusion. */
-        exclude?: ReadonlySet<string>;
-    }): Promise<ResumableSession[]>;
-    /** Optional CLI version command override. Defaults to `[resolvedBin, '--version']`. */
-    versionCommand?(): {
-        bin: string;
-        args: string[];
-    };
-    /** Slash commands this CLI natively supports and botmux should pass through
-     *  by default for this adapter. Unlike the global passthrough allowlist, these
-     *  are scoped to the current CLI so unsupported commands do not leak to other
-     *  adapters. */
-    readonly defaultPassthroughCommands?: readonly string[];
-    /** Build the CLI-native command that renames the current interactive session.
-     *  The title has already been normalized to one control-character-free line
-     *  by the daemon. Undefined means this adapter has no proven native rename
-     *  command and must never receive a best-guess slash command. */
-    buildSessionRenameCommand?(title: string): string;
-}
-export type CliId = 'claude-code' | 'seed' | 'relay' | 'aiden' | 'coco' | 'codex' | 'codex-app' | 'cursor' | 'gemini' | 'genius' | 'opencode' | 'antigravity' | 'mtr' | 'hermes' | 'mira' | 'mir' | 'traex' | 'pi' | 'copilot' | 'oh-my-pi' | 'kimi' | 'grok' | 'kiro-cli' | 'riff' | 'reasonix';
-//# sourceMappingURL=types.d.ts.map

package/dist/adapters/cli/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/adapters/cli/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;4EAGwE;IACxE,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACxC;6DACyD;IACzD,eAAe,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,8FAA8F;IAC9F,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;2FAEuF;IACvF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;yEAEqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;+DAC2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG;IAC1C,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;wDAEwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;sBAIsB;AACtB,MAAM,WAAW,gBAAgB;IAC/B;yDACqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,eAAe,GAAG,YAAY,CAAC;IACpD,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,aAAa,CAAC;CAC/C;AAED,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAE5C,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;;;yCAKqC;IACrC,SAAS,CAAC,IAAI,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,sFAAsF;QACtF,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;uFAI+E;QAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB;;0EAEkE;QAClE,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,+EAA+E;QAC/E,MAAM,CAAC,EAAE,OAAO,qBAAqB,EAAE,MAAM,CAAC;QAC9C;;qFAE6E;QAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;qEAC6D;QAC7D,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;QACtD,mGAAmG;QACnG,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B;;;;;oFAK4E;QAC5E,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,oEAAoE;QACpE,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;gEAIwD;QACxD,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB;;;oFAG4E;QAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,MAAM,EAAE,CAAC;IAEb;;mFAE+E;IAC/E,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC7B,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG;QACF,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB;gFACwE;QACxE,aAAa,CAAC,EAAE;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC9B,CAAC;KACH,CAAC;IAEF;;wEAEoE;IACpE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAE9C;;;;0DAIsD;IACtD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAE3C;;;;;8CAK0C;IAC1C,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAEpD;;;;;;;;;;;;;0DAasD;IACtD,kBAAkB,CAAC,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,uEAAuE;QACvE,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,MAAM,GAAG,IAAI,CAAC;IAElB;;;;;;;;;;;;;gEAa4D;IAC5D,UAAU,CACR,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,GAAG;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB;;sEAE8D;QAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;KACpE,CAAC,CAAC;IAEH;;;uDAGmD;IACnD,oBAAoB,CAAC,CACnB,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,iBAAiB,EAChC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,GAAG;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;KACpE,CAAC,CAAC;IAEH;;;4EAGwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;;oEAMgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;+CAE2C;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IAEjD;yEACqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,oCAAoC;QACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,mCAAmC;QACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,YAAY,CAAC;QACtE;;;oDAG4C;QAC5C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;KACvC,CAAC;IAEF;;8CAE0C;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;wCAGoC;IACpC,aAAa,CAAC,IAAI,IAAI,CAAC;IAEvB,wFAAwF;IACxF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAEpC;;;sEAGkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;8EAE0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAEpC;;;;;sEAKkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;;;;8BAQ0B;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAEpC;qEACiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAE/B;;;iEAG6D;IAC7D,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEzC;;;;;;;;;mCAS+B;IAC/B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAErC;;;+EAG2E;IAC3E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAExC;;;;;;+BAM2B;IAC3B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEzC;;;;+BAI2B;IAC3B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAE1C;;;;iEAI6D;IAC7D,QAAQ,CAAC,iCAAiC,CAAC,EAAE,OAAO,CAAC;IAErD;;kFAE8E;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAEpC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B;;;;4EAIwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C;;;;kFAI8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;0DAGsD;IACtD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAEtC;;;;;;;;;;4CAUwC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;;;;;;;;;;;;8CAc0C;IAC1C,qBAAqB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAC;IAE5C;;;;;;;;mFAQ+E;IAC/E,oBAAoB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAC;IAE3C;;;mFAG+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAErD;;;;;;;;;;;;;;;;4EAgBwE;IACxE,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,uEAAuE;QACvE,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB;sDAC8C;QAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;0EACkE;QAClE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;mFAC2E;QAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,GAAG,SAAS,CAAC;IAExB;;;;8EAI0E;IAC1E,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAC3B,KAAK,EAAE,MAAM,CAAC;QACd;;;qFAG6E;QAC7E,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEhC,uFAAuF;IACvF,cAAc,CAAC,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAEnD;;;oBAGgB;IAChB,QAAQ,CAAC,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAExD;;;qEAGiE;IACjE,yBAAyB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CACnD;AAED,MAAM,MAAM,KAAK,GAAG,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC"}

package/dist/adapters/cli/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/adapters/cli/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/cli/types.ts"],"names":[],"mappings":""}

package/dist/adapters/coco-ask-plugin.d.ts

@@ -1,25 +0,0 @@
-/**
- * coco-ask-plugin.ts
- *
- * 把 botmux 的 AskUserQuestion hook 以 **CoCo 插件** 形式安装到 CoCo (Trae CLI)。
- *
- * 为什么是插件而不是写配置文件：CoCo 0.120.x 把 hook 模型迁到了「插件 +
- * marketplace」——老的 traecli.yaml 顶层 `hooks:` 在迁移时被丢弃，现在 hook 要么
- * 内联进 traecli.toml（无 matcher，会对每个 tool 调用都触发，浪费），要么打包进
- * 插件的 hooks.json（**支持 matcher**，可精确只拦 AskUserQuestion）。我们选后者。
- *
- * 插件目录结构（与 CoCo 官方插件一致）：
- *   <pluginDir>/.codex-plugin/plugin.json   —— 清单，hooks 指向 ./hooks.json
- *   <pluginDir>/hooks.json                  —— Claude settings.json 同构：
- *     { hooks: { PreToolUse: [ { matcher:"AskUserQuestion",
- *                                hooks:[ {type:"command", command:<botmux hook coco>, timeout} ] } ] } }
- *
- * 安装走 `coco plugin install <dir> --type local --yes`（幂等：同名插件覆盖；
- * 每个 daemon 生命周期由 ensureCliSkills 调用一次）。这是全局安装（写
- * ~/.trae 的 traecli.toml 信任哈希 + plugins 缓存），所有 CoCo 会话都会装上这条
- * hook——但 hook 客户端在缺 BOTMUX_* env 时直接 passthrough，不影响用户自己跑的
- * CoCo（与 Claude 写全局 settings.json 的安全模型一致）。
- */
-/** 幂等地构建插件目录并 `coco plugin install` 安装。失败只 warn 不抛。 */
-export declare function installCocoAskPlugin(cocoBin: string): void;
-//# sourceMappingURL=coco-ask-plugin.d.ts.map

package/dist/adapters/coco-ask-plugin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"coco-ask-plugin.d.ts","sourceRoot":"","sources":["../../src/adapters/coco-ask-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAaH,uDAAuD;AACvD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAgD1D"}

package/dist/adapters/coco-ask-plugin.js

@@ -1,73 +0,0 @@
-/**
- * coco-ask-plugin.ts
- *
- * 把 botmux 的 AskUserQuestion hook 以 **CoCo 插件** 形式安装到 CoCo (Trae CLI)。
- *
- * 为什么是插件而不是写配置文件：CoCo 0.120.x 把 hook 模型迁到了「插件 +
- * marketplace」——老的 traecli.yaml 顶层 `hooks:` 在迁移时被丢弃，现在 hook 要么
- * 内联进 traecli.toml（无 matcher，会对每个 tool 调用都触发，浪费），要么打包进
- * 插件的 hooks.json（**支持 matcher**，可精确只拦 AskUserQuestion）。我们选后者。
- *
- * 插件目录结构（与 CoCo 官方插件一致）：
- *   <pluginDir>/.codex-plugin/plugin.json   —— 清单，hooks 指向 ./hooks.json
- *   <pluginDir>/hooks.json                  —— Claude settings.json 同构：
- *     { hooks: { PreToolUse: [ { matcher:"AskUserQuestion",
- *                                hooks:[ {type:"command", command:<botmux hook coco>, timeout} ] } ] } }
- *
- * 安装走 `coco plugin install <dir> --type local --yes`（幂等：同名插件覆盖；
- * 每个 daemon 生命周期由 ensureCliSkills 调用一次）。这是全局安装（写
- * ~/.trae 的 traecli.toml 信任哈希 + plugins 缓存），所有 CoCo 会话都会装上这条
- * hook——但 hook 客户端在缺 BOTMUX_* env 时直接 passthrough，不影响用户自己跑的
- * CoCo（与 Claude 写全局 settings.json 的安全模型一致）。
- */
-import { mkdirSync } from 'node:fs';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { execFileSync } from 'node:child_process';
-import { logger } from '../utils/logger.js';
-import { hookCommandFor } from './hook-command.js';
-/** botmux 生成的 CoCo ask 插件目录（不放进 ~/.trae，安装时由 coco 拷进 plugins 缓存）。 */
-const COCO_ASK_PLUGIN_DIR = join(homedir(), '.botmux', 'coco-ask-plugin');
-/** 幂等地构建插件目录并 `coco plugin install` 安装。失败只 warn 不抛。 */
-export function installCocoAskPlugin(cocoBin) {
-    try {
-        const hookCommand = hookCommandFor('coco'); // 形如：'"<node>" "<cli.js>" hook coco'
-        const manifest = {
-            name: 'botmux-ask',
-            version: '1.0.0',
-            description: 'Route CoCo AskUserQuestion to a Lark selection card (botmux).',
-            hooks: './hooks.json',
-            interface: {
-                displayName: 'botmux ask',
-                shortDescription: 'Route AskUserQuestion to Lark',
-                category: 'Productivity',
-            },
-        };
-        // 只拦 AskUserQuestion；hook 客户端对其它事件/非 botmux 会话自行 passthrough。
-        const hooks = {
-            hooks: {
-                PreToolUse: [
-                    {
-                        matcher: 'AskUserQuestion',
-                        hooks: [{ type: 'command', command: hookCommand, timeout: 86400 }],
-                    },
-                ],
-            },
-        };
-        mkdirSync(join(COCO_ASK_PLUGIN_DIR, '.codex-plugin'), { recursive: true });
-        // 原子写：多个 daemon（一 bot 一进程）启动时会并发刷同一份共享插件目录。
-        atomicWriteFileSync(join(COCO_ASK_PLUGIN_DIR, '.codex-plugin', 'plugin.json'), JSON.stringify(manifest, null, 2) + '\n');
-        atomicWriteFileSync(join(COCO_ASK_PLUGIN_DIR, 'hooks.json'), JSON.stringify(hooks, null, 2) + '\n');
-        // 幂等安装（--yes 跳过确认）。stdio 忽略，避免污染 daemon 日志；超时兜底。
-        execFileSync(cocoBin, ['plugin', 'install', COCO_ASK_PLUGIN_DIR, '--type', 'local', '--yes'], {
-            stdio: 'ignore',
-            timeout: 60_000,
-        });
-        logger.info(`[hook] CoCo ask 插件已安装 → ${COCO_ASK_PLUGIN_DIR}`);
-    }
-    catch (err) {
-        logger.warn(`[hook] CoCo ask 插件安装失败：${err instanceof Error ? err.message : String(err)}`);
-    }
-}
-//# sourceMappingURL=coco-ask-plugin.js.map

package/dist/adapters/coco-ask-plugin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"coco-ask-plugin.js","sourceRoot":"","sources":["../../src/adapters/coco-ask-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAE1E,uDAAuD;AACvD,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC;QACjF,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,+DAA+D;YAC5E,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE;gBACT,WAAW,EAAE,YAAY;gBACzB,gBAAgB,EAAE,+BAA+B;gBACjD,QAAQ,EAAE,cAAc;aACzB;SACF,CAAC;QACF,8DAA8D;QAC9D,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV;wBACE,OAAO,EAAE,iBAAiB;wBAC1B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;qBACnE;iBACF;aACF;SACF,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,4CAA4C;QAC5C,mBAAmB,CACjB,IAAI,CAAC,mBAAmB,EAAE,eAAe,EAAE,aAAa,CAAC,EACzD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACzC,CAAC;QACF,mBAAmB,CACjB,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACtC,CAAC;QAEF,iDAAiD;QACjD,YAAY,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;YAC5F,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,2BAA2B,mBAAmB,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/adapters/hook-command.d.ts

@@ -1,27 +0,0 @@
-/**
- * 构造 `botmux hook <cliId>` 的 argv 形式 `{ cmd, args }`——规范形态。
- * 调用方用 `spawn(cmd, args)` 直接执行：无需 shell 解析、不怕路径含空格。
- * OpenCode 插件用它（spawnSync），避免「拼成带引号字符串再 split」把路径拆坏。
- */
-export declare function hookCommandParts(cliId: string): {
-    cmd: string;
-    args: string[];
-};
-/**
- * 构造 `botmux hook <cliId>` 的 **shell 命令字符串**（仅可执行路径与 cli.js 路径加引号，
- * 容忍空格；`hook` 子命令名与 cliId 不加引号）。
- * 仅用于「按 shell 字符串执行」的场景，例如写进 Claude Code 的 `~/.claude/settings.json`
- * （其 `command` 字段由 Claude 经 shell 执行）。需要 argv 的场景请用 `hookCommandParts`，
- * 切勿对本字符串再 `.split(' ')`。
- */
-export declare function hookCommandFor(cliId: string): string;
-/**
- * 构造 Claude 家族 `SessionStart` hook 的 **shell 命令字符串** → `botmux session-ready`。
- * 与 `hookCommandFor` 同源的路径解析与加引号策略（仅可执行路径与 cli.js 路径加引号），
- * 因为它被写进 Claude 进程级 `--settings` 的 `command` 字段、由 Claude 经 shell 执行。
- *
- * 无 cliId 参数：session-ready 只靠 hook 子进程继承的 `BOTMUX_SESSION_ID` /
- * `BOTMUX_LARK_APP_ID` env 定位会话与 daemon，不需要 CLI 类型。
- */
-export declare function sessionReadyHookCommand(): string;
-//# sourceMappingURL=hook-command.d.ts.map

package/dist/adapters/hook-command.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-command.d.ts","sourceRoot":"","sources":["../../src/adapters/hook-command.ts"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAG/E;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAGhD"}