chorus-codes 0.7.0 → 0.7.1

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;;;AAiKH,oCASC;AAUD,gCAEC;AApLD,2BAA8B;AAI9B,yEAAyE;AACzE,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AA8BF,MAAM,aAAa,GAAW,CAAC,IAAI,EAAE,EAAE;IACrC,0EAA0E;IAC1E,qEAAqE;IACrE,0EAA0E;IAC1E,qCAAqC;IACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;IACjB,IAAI,CAAC;QAAC,OAAO,IAAA,aAAQ,GAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACxD,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;AAExB;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,OAAO,SAAS,IAAI,CAAC,IAAY,EAAE,KAAc;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;YACF,MAAM,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;YAC3C,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;gBAAE,OAAO,YAAY,CAAC;YACnD,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAA6B;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,sBAAsB;YAC3B,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU;IAEK;IACA;IACA;IAHnB,YACmB,KAAgB,EAChB,SAAiB,EACjB,MAAc;QAFd,UAAK,GAAL,KAAK,CAAW;QAChB,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAEI,IAAI,CAAC,KAAe,EAAE,WAA+B,EAAE,GAAY;QACzE,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS;YAAE,OAAO;QAE/C,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAE7C,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,MAAM,IAAI,GAA4B;YACpC,GAAG,IAAI,CAAC,KAAK;YACb,GAAG,MAAM;YACT,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAChB,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAA0B,EAAE,GAAY,IAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,MAA0B,EAAE,GAAY,IAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,MAA0B,EAAE,GAAY,IAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,KAAK,CAAC,MAA0B,EAAE,GAAY,IAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAE1F,KAAK,CAAC,KAAgB;QACpB,OAAO,IAAI,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;CACF;AAED,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC3E,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,IAK5B;IACC,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,IAAI,aAAa,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9E,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACU,QAAA,MAAM,GAAW,YAAY,EAAE,CAAC;AAE7C,qEAAqE;AACrE,SAAgB,UAAU,CAAC,MAAc,EAAE,KAAiB;IAC1D,OAAO,cAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/lib/personas.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * Persona file loader + DB seed.
+ *
+ * Built-in personas live as Markdown files with YAML frontmatter under
+ * `prompts/personas/<id>.md`. The daemon reads them on startup and upserts
+ * each into the `personas` table with `builtin = true`.
+ *
+ * Users can clone a built-in (creates a row with `builtin = false` and
+ * `forked_from = <original-id>`), edit, and save. Re-seeding never overwrites
+ * user rows — only built-in rows track the file.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.seedBuiltinPersonas = seedBuiltinPersonas;
+exports.listPersonas = listPersonas;
+exports.getPersona = getPersona;
+const fs_1 = require("fs");
+const path_1 = __importDefault(require("path"));
+const yaml_1 = __importDefault(require("yaml"));
+const index_js_1 = require("./db/index.js");
+/**
+ * Resolve the prompts/personas directory across dev (tsx, repo-relative)
+ * and published (dist, package-relative) layouts.
+ *
+ * Dev: __dirname = <repo>/src/lib  → prompts dir = <repo>/prompts/personas
+ * Built: __dirname = <repo>/dist/lib → prompts dir = <repo>/prompts/personas (still in repo)
+ * Installed: __dirname = <pkg>/dist/lib → prompts dir = <pkg>/prompts/personas (shipped via "files")
+ */
+function resolvePromptsDir() {
+    const candidates = [
+        path_1.default.resolve(__dirname, '..', '..', 'prompts', 'personas'),
+        path_1.default.resolve(__dirname, '..', 'prompts', 'personas'),
+    ];
+    for (const candidate of candidates) {
+        if ((0, fs_1.existsSync)(candidate))
+            return candidate;
+    }
+    throw new Error(`prompts/personas not found. Looked in:\n  ${candidates.join('\n  ')}`);
+}
+/**
+ * Parse a single persona .md file with YAML frontmatter.
+ * Frontmatter is delimited by `---` lines at the top of the file.
+ */
+function parsePersonaFile(filePath) {
+    const raw = (0, fs_1.readFileSync)(filePath, 'utf-8');
+    if (!raw.startsWith('---\n')) {
+        throw new Error(`${filePath}: missing YAML frontmatter (must start with "---")`);
+    }
+    const fmEnd = raw.indexOf('\n---\n', 4);
+    if (fmEnd === -1) {
+        throw new Error(`${filePath}: unclosed YAML frontmatter (missing closing "---")`);
+    }
+    const fmText = raw.slice(4, fmEnd);
+    const body = raw.slice(fmEnd + 5).trim();
+    const fm = yaml_1.default.parse(fmText);
+    if (!fm?.id)
+        throw new Error(`${filePath}: frontmatter missing required "id"`);
+    if (!fm.label)
+        throw new Error(`${filePath}: frontmatter missing required "label"`);
+    if (!fm.one_liner)
+        throw new Error(`${filePath}: frontmatter missing required "one_liner"`);
+    if (!body)
+        throw new Error(`${filePath}: empty body (the system prompt)`);
+    return { frontmatter: fm, body, source_path: filePath };
+}
+/**
+ * Read every *.md file under prompts/personas and return parsed entries.
+ */
+function loadPersonaFiles() {
+    const dir = resolvePromptsDir();
+    const files = (0, fs_1.readdirSync)(dir).filter((f) => f.endsWith('.md'));
+    return files.map((f) => parsePersonaFile(path_1.default.join(dir, f)));
+}
+/**
+ * Seed/refresh built-in personas in the DB from the prompt files.
+ * - Built-in rows are upserted on every call (file = source of truth).
+ * - User rows (builtin=0) are never touched.
+ *
+ * Returns the count of rows upserted.
+ */
+async function seedBuiltinPersonas() {
+    const parsed = loadPersonaFiles();
+    let count = 0;
+    for (const { frontmatter, body } of parsed) {
+        // Skip rows the user has edited via POST /personas (which sets
+        // builtin=false). Without this guard, INSERT OR REPLACE in upsert()
+        // would clobber the user's edits on every daemon boot. Same tradeoff
+        // as templates: edited rows no longer auto-receive upstream changes.
+        const existing = await index_js_1.personas.getById(frontmatter.id);
+        if (existing && !existing.builtin)
+            continue;
+        await index_js_1.personas.upsert({
+            id: frontmatter.id,
+            label: frontmatter.label,
+            one_liner: frontmatter.one_liner,
+            system_prompt: body,
+            recommended_lineage: frontmatter.recommended_lineage ?? null,
+            builtin: true,
+            forked_from: null,
+        });
+        count++;
+    }
+    return count;
+}
+/**
+ * Public read API used by HTTP / MCP layers.
+ */
+async function listPersonas() {
+    return index_js_1.personas.list();
+}
+async function getPersona(id) {
+    return index_js_1.personas.getById(id);
+}
+//# sourceMappingURL=personas.js.map

package/dist/lib/personas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personas.js","sourceRoot":"","sources":["../../src/lib/personas.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;AAsFH,kDAsBC;AAKD,oCAEC;AAED,gCAEC;AArHD,2BAA2D;AAC3D,gDAAwB;AACxB,gDAAwB;AACxB,4CAA0D;AAgB1D;;;;;;;GAOG;AACH,SAAS,iBAAiB;IACxB,MAAM,UAAU,GAAG;QACjB,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QAC1D,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;KACrD,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6CAA6C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACvE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE5C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oDAAoD,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,qDAAqD,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,EAAE,GAAG,cAAI,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAC;IACpD,IAAI,CAAC,EAAE,EAAE,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,qCAAqC,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,wCAAwC,CAAC,CAAC;IACpF,IAAI,CAAC,EAAE,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,4CAA4C,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,kCAAkC,CAAC,CAAC;IAE1E,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,mBAAmB;IACvC,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QAC3C,+DAA+D;QAC/D,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,QAAQ,GAAG,MAAM,mBAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAS;QAC5C,MAAM,mBAAQ,CAAC,MAAM,CAAC;YACpB,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,WAAW,CAAC,mBAAmB,IAAI,IAAI;YAC5D,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY;IAChC,OAAO,mBAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,EAAU;IACzC,OAAO,mBAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC"}

package/dist/lib/runtime-path.js

@@ -0,0 +1,222 @@
+"use strict";
+/**
+ * Runtime PATH resolution for headless CLI subprocess spawns.
+ *
+ * Why this module exists
+ * ----------------------
+ * The chorus daemon spawns reviewer CLIs (claude, codex, gemini, opencode,
+ * kimi) as headless subprocesses. Those subprocesses inherit the daemon's
+ * PATH — which is whatever PATH was set for the process that launched the
+ * daemon.
+ *
+ * That PATH is frequently INSUFFICIENT for finding the CLIs:
+ *
+ *   - Linux opencode installs to `~/.opencode/bin/`, exported via .bashrc.
+ *     The daemon usually starts from a non-interactive shell that skips
+ *     .bashrc (early-return on `[ -z "$PS1" ]`), so opencode is missing.
+ *   - macOS Homebrew installs to /opt/homebrew/bin (Apple Silicon) or
+ *     /usr/local/bin (Intel). LaunchAgent / tray-app starts inherit a
+ *     minimal PATH that may exclude either.
+ *   - asdf / volta / pnpm shim dirs live under $HOME/.tool-versions/...
+ *     and only land on PATH via shellenv hooks.
+ *
+ * The fix has three layers, all stacked here:
+ *
+ *   1. **Captured interactive PATH** — `chorus init` and `chorus start`
+ *      run `$SHELL -lic 'echo $PATH'` once and stash the result in the
+ *      `runtime.captured_path` setting. Subsequent daemon spawns merge
+ *      it in, so if the user can run `opencode` from their terminal, the
+ *      daemon can run it too.
+ *   2. **Known-install dirs** — common per-tool install locations
+ *      (`~/.opencode/bin`, `~/.codex/bin`, `/opt/homebrew/bin`, …) are
+ *      auto-prepended when they exist on disk. Belt-and-braces for tray-
+ *      app launches that have no terminal to capture from.
+ *   3. **Manual paths** — when the user pastes a custom path in the
+ *      onboarding "I know where it is" affordance, the dirname of that
+ *      path is added too. Ensures bare-binary spawns still work even when
+ *      the binary lives in a fully custom location.
+ *
+ * This module is import-time stateful but reads `settings` lazily, so
+ * tests can swap CHORUS_DB_PATH without restarting the process.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureInteractivePath = captureInteractivePath;
+exports.persistCapturedPath = persistCapturedPath;
+exports.loadCapturedPath = loadCapturedPath;
+exports.buildRuntimePath = buildRuntimePath;
+exports.buildRuntimeEnv = buildRuntimeEnv;
+const node_child_process_1 = require("node:child_process");
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const settings_js_1 = require("./db/settings.js");
+const SETTINGS_KEY_CAPTURED_PATH = 'runtime.captured_path';
+/**
+ * Per-tool install locations that live OUTSIDE the typical /usr/local/bin
+ * default PATH. Order matters only when two contain the same binary; we
+ * dedupe on output. macOS-only paths are kept on Linux too — fs.existsSync
+ * filters them out so there's no harm in leaving them in the list.
+ */
+const KNOWN_INSTALL_DIRS = [
+    '~/.opencode/bin',
+    '~/.codex/bin',
+    '~/.gemini/bin',
+    '~/.kimi/bin',
+    '~/.claude/local',
+    '~/.bun/bin',
+    '~/.deno/bin',
+    '~/.cargo/bin',
+    '~/.local/bin',
+    '/opt/homebrew/bin',
+    '/usr/local/bin',
+];
+function expandHome(p) {
+    if (p.startsWith('~/'))
+        return path.join(os.homedir(), p.slice(2));
+    if (p === '~')
+        return os.homedir();
+    return p;
+}
+/**
+ * Run the user's interactive login shell and ask for its PATH. Captures
+ * everything PATH-modifying init scripts add — .bashrc, .zshrc, asdf
+ * shims, fnm/nvm setup, fish abbreviations.
+ *
+ * Returns null when:
+ *   - $SHELL is unset (e.g. some CI environments)
+ *   - The shell exec itself fails (timeout, missing binary)
+ *   - The shell prints something that doesn't look like a PATH
+ *
+ * Caller is expected to fall back gracefully on null — e.g. keep the
+ * previously-saved value or use process.env.PATH as-is.
+ */
+function captureInteractivePath() {
+    const shell = process.env.SHELL;
+    if (!shell)
+        return null;
+    if (process.platform === 'win32')
+        return null; // PowerShell capture is a different code path; not implemented yet.
+    try {
+        // -l: login shell (loads .profile / .zprofile)
+        // -i: interactive (loads .bashrc / .zshrc — most rc files early-return
+        //     on non-interactive, so this flag is essential)
+        // -c: command + exit
+        const out = (0, node_child_process_1.execSync)(`${shell} -lic 'echo $PATH'`, {
+            timeout: 5_000,
+            stdio: ['ignore', 'pipe', 'ignore'],
+        })
+            .toString('utf-8')
+            .trim();
+        if (!out || !out.includes('/'))
+            return null;
+        return out;
+    }
+    catch {
+        // Common failure modes:
+        //   - User's rc file errors on non-tty stdout
+        //   - 5s timeout (rc does network I/O)
+        //   - SHELL points at a binary that doesn't exist
+        return null;
+    }
+}
+/**
+ * Persist the captured interactive PATH so the daemon can read it on
+ * boot. Called from `chorus init` and `chorus start`. Best-effort:
+ * settings write failures don't block startup — the daemon falls back
+ * to known-install dirs + process.env.PATH.
+ */
+async function persistCapturedPath(value) {
+    await settings_js_1.settings.set(SETTINGS_KEY_CAPTURED_PATH, value);
+}
+async function loadCapturedPath() {
+    const raw = await settings_js_1.settings.get(SETTINGS_KEY_CAPTURED_PATH);
+    return typeof raw === 'string' && raw.length > 0 ? raw : null;
+}
+/**
+ * Build the merged PATH for a daemon-spawned subprocess. Composition,
+ * front-to-back (front wins on duplicate binaries):
+ *
+ *   1. Existing process.env.PATH      — daemon's own runtime
+ *   2. Captured interactive PATH      — what the user's shell sees
+ *   3. Known install dirs (existing)  — ~/.opencode/bin, etc.
+ *   4. Manual-path dirs               — dirnames of saved cli_paths
+ *
+ * Dedup on output. Caller is expected to pass `additionalDirs` from
+ * `cli-paths.ts` — keeping the dependency one-way (this module doesn't
+ * import from cli-paths to avoid a circular import on the settings
+ * helpers).
+ */
+async function buildRuntimePath(opts) {
+    const parts = [];
+    if (process.env.PATH)
+        parts.push(process.env.PATH);
+    const captured = await loadCapturedPath();
+    if (captured)
+        parts.push(captured);
+    for (const dir of KNOWN_INSTALL_DIRS) {
+        const expanded = expandHome(dir);
+        if (fs.existsSync(expanded))
+            parts.push(expanded);
+    }
+    for (const dir of opts?.additionalDirs ?? []) {
+        if (dir && fs.existsSync(dir))
+            parts.push(dir);
+    }
+    // Dedupe while preserving first-occurrence order.
+    const seen = new Set();
+    const out = [];
+    for (const part of parts) {
+        for (const dir of part.split(path.delimiter)) {
+            if (!dir || seen.has(dir))
+                continue;
+            seen.add(dir);
+            out.push(dir);
+        }
+    }
+    return out.join(path.delimiter);
+}
+/**
+ * Convenience wrapper for the common spawn case — merge the runtime
+ * PATH into a copy of process.env. Subprocess inherits everything else
+ * unchanged.
+ */
+async function buildRuntimeEnv(opts) {
+    return {
+        ...process.env,
+        PATH: await buildRuntimePath(opts),
+    };
+}
+//# sourceMappingURL=runtime-path.js.map

package/dist/lib/runtime-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-path.js","sourceRoot":"","sources":["../../src/lib/runtime-path.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDH,wDAyBC;AAQD,kDAEC;AAED,4CAGC;AAgBD,4CA8BC;AAOD,0CAOC;AApJD,2DAA8C;AAC9C,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAElC,kDAA4C;AAE5C,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG;IACzB,iBAAiB;IACjB,cAAc;IACd,eAAe;IACf,aAAa;IACb,iBAAiB;IACjB,YAAY;IACZ,aAAa;IACb,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,gBAAgB;CACjB,CAAC;AAEF,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,oEAAoE;IAEnH,IAAI,CAAC;QACH,+CAA+C;QAC/C,uEAAuE;QACvE,qDAAqD;QACrD,qBAAqB;QACrB,MAAM,GAAG,GAAG,IAAA,6BAAQ,EAAC,GAAG,KAAK,oBAAoB,EAAE;YACjD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACC,QAAQ,CAAC,OAAO,CAAC;aACjB,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;QACxB,8CAA8C;QAC9C,uCAAuC;QACvC,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CAAC,KAAa;IACrD,MAAM,sBAAQ,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,gBAAgB;IACpC,MAAM,GAAG,GAAG,MAAM,sBAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC3D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,gBAAgB,CAAC,IAEtC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEnC,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,cAAc,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,GAAG,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,kDAAkD;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,IAErC;IACC,OAAO;QACL,GAAG,OAAO,CAAC,GAAG;QACd,IAAI,EAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/lib/settings/billing.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Billing-mode setting. Captures whether the user pays for the CLIs
+ * chorus drives via per-token API keys, monthly subscriptions, or a mix.
+ *
+ * Why this matters: chorus's cost estimate on the /new page used to assume
+ * everyone paid spot API rates (Opus ~$15/M input, GPT-5.5 ~$3/M, etc.),
+ * which produced fictional dollar amounts for users on Claude Pro
+ * ($20/mo flat) or ChatGPT Plus. Subscription users should see "Subscription
+ * quota" not "$0.47" — the latter implies they're charged when they aren't.
+ *
+ * v0.7 keeps this as a single global enum. v0.8 will split into per-lineage
+ * overrides (Claude on subscription, Gemini on API) once we have the
+ * onboarding UI for it.
+ *
+ * Default is 'subscription' — the path-of-least-cost-shock for new users.
+ * Most people land here from a Claude Pro / ChatGPT Plus / Gemini Advanced
+ * subscription they already pay for; showing "$0.47 estimate" on every
+ * /new chat would imply per-call billing they don't owe and scare them
+ * off. Subscription users see "Subscription quota — ~12,000 input tokens"
+ * instead. API-key users flip the toggle once and never look back.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BILLING_MODE_LABELS = exports.DEFAULT_BILLING_MODE = void 0;
+exports.getBillingMode = getBillingMode;
+exports.setBillingMode = setBillingMode;
+const db_1 = require("../db");
+const BILLING_MODE_KEY = 'billing_mode';
+exports.DEFAULT_BILLING_MODE = 'subscription';
+exports.BILLING_MODE_LABELS = {
+    api: {
+        label: 'Pay-per-token API keys',
+        description: 'You bring API keys (Anthropic, OpenAI, Google) and pay per request. Cost estimates are accurate.',
+    },
+    subscription: {
+        label: 'CLI subscriptions',
+        description: 'You run Claude Code, Codex, Gemini CLI etc. through their monthly subscriptions (Claude Pro, ChatGPT Plus, Gemini Advanced). Chorus calls them through the CLI; no per-call cost. Cost shown as "Subscription quota."',
+    },
+    mixed: {
+        label: 'Mixed — some subscription, some API',
+        description: 'A subset of CLIs are on subscriptions and a subset on API keys. Estimates show worst-case API cost; real bill may be lower.',
+    },
+};
+function isBillingMode(value) {
+    return value === 'api' || value === 'subscription' || value === 'mixed';
+}
+async function getBillingMode() {
+    const raw = await db_1.settings.get(BILLING_MODE_KEY);
+    return isBillingMode(raw) ? raw : exports.DEFAULT_BILLING_MODE;
+}
+async function setBillingMode(value) {
+    if (!isBillingMode(value)) {
+        throw new Error(`invalid billing mode: ${value}`);
+    }
+    await db_1.settings.set(BILLING_MODE_KEY, value);
+    return getBillingMode();
+}
+//# sourceMappingURL=billing.js.map

package/dist/lib/settings/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../../src/lib/settings/billing.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AA+BH,wCAGC;AAED,wCAMC;AAxCD,8BAAiC;AAIjC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAC3B,QAAA,oBAAoB,GAAgB,cAAc,CAAC;AAEnD,QAAA,mBAAmB,GAAgE;IAC9F,GAAG,EAAE;QACH,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,kGAAkG;KACrG;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,uNAAuN;KAC1N;IACD,KAAK,EAAE;QACL,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EACT,6HAA6H;KAChI;CACF,CAAC;AAEF,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,OAAO,CAAC;AAC1E,CAAC;AAEM,KAAK,UAAU,cAAc;IAClC,MAAM,GAAG,GAAG,MAAM,aAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,4BAAoB,CAAC;AACzD,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,KAAkB;IACrD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,aAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC"}

package/dist/lib/settings/permissions.js

@@ -0,0 +1,81 @@
+"use strict";
+/**
+ * Typed accessor for chorus's permission/sandbox settings.
+ *
+ * Stored in the `settings` SQLite table as JSON-encoded values keyed by:
+ *   - sandbox_profile: 'strict' | 'workspace' | 'full'
+ *   - auto_approve_prompts: boolean
+ *   - network_access: boolean (overlay on top of sandbox_profile)
+ *
+ * Defaults are conservative:
+ *   - workspace: read+write inside chat dir, no network. Reviewers can't
+ *     escape the chat scope or call out to the public internet.
+ *   - auto_approve_prompts: true. We pre-approve everything we can so that
+ *     headless reviewer spawns don't hang on UI prompts. Users on a shared
+ *     box can flip this to false.
+ *   - network_access: false unless template/transport specifically needs it.
+ *
+ * The runner consults these before each spawn and forwards them as
+ * AgentSpawnOptions to the shim. Each shim translates the abstract setting
+ * into the appropriate CLI flag (e.g. codex `-c sandbox_mode=read-only`,
+ * kimi `--afk`, gemini `--approval-mode auto_edit`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROFILE_DESCRIPTIONS = exports.DEFAULT_PERMISSIONS = void 0;
+exports.getPermissions = getPermissions;
+exports.setPermissions = setPermissions;
+const db_1 = require("../db");
+const zod_1 = require("zod");
+const SandboxProfileSchema = zod_1.z.enum(['strict', 'workspace', 'full']);
+exports.DEFAULT_PERMISSIONS = {
+    sandboxProfile: 'workspace',
+    autoApprovePrompts: true,
+    networkAccess: false,
+};
+const SANDBOX_KEY = 'sandbox_profile';
+const AUTO_APPROVE_KEY = 'auto_approve_prompts';
+const NETWORK_KEY = 'network_access';
+async function getPermissions() {
+    const [sandboxRaw, autoApproveRaw, networkRaw] = await Promise.all([
+        db_1.settings.get(SANDBOX_KEY),
+        db_1.settings.get(AUTO_APPROVE_KEY),
+        db_1.settings.get(NETWORK_KEY),
+    ]);
+    const sandboxProfile = SandboxProfileSchema.safeParse(sandboxRaw);
+    return {
+        sandboxProfile: sandboxProfile.success ? sandboxProfile.data : exports.DEFAULT_PERMISSIONS.sandboxProfile,
+        autoApprovePrompts: typeof autoApproveRaw === 'boolean' ? autoApproveRaw : exports.DEFAULT_PERMISSIONS.autoApprovePrompts,
+        networkAccess: typeof networkRaw === 'boolean' ? networkRaw : exports.DEFAULT_PERMISSIONS.networkAccess,
+    };
+}
+async function setPermissions(input) {
+    if (input.sandboxProfile !== undefined) {
+        SandboxProfileSchema.parse(input.sandboxProfile);
+        await db_1.settings.set(SANDBOX_KEY, input.sandboxProfile);
+    }
+    if (input.autoApprovePrompts !== undefined) {
+        await db_1.settings.set(AUTO_APPROVE_KEY, input.autoApprovePrompts);
+    }
+    if (input.networkAccess !== undefined) {
+        await db_1.settings.set(NETWORK_KEY, input.networkAccess);
+    }
+    return getPermissions();
+}
+/**
+ * Human-readable description of each profile, used by onboarding + /settings UI.
+ */
+exports.PROFILE_DESCRIPTIONS = {
+    strict: {
+        label: 'Strict',
+        description: 'Reviewers can only read code. No file writes, no shell exec, no network. Safest, but limits what reviewers can do (e.g. can\'t run the test suite they\'re reviewing).',
+    },
+    workspace: {
+        label: 'Workspace (recommended)',
+        description: 'Reviewers can read+write inside the chat dir and run scoped shell commands. No network. Default — fits most teams.',
+    },
+    full: {
+        label: 'Full access',
+        description: 'Reviewers run with no sandbox: write anywhere, run any command, full network. Only enable on a personal machine you trust.',
+    },
+};
+//# sourceMappingURL=permissions.js.map

package/dist/lib/settings/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/lib/settings/permissions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAyBH,wCAeC;AAED,wCAYC;AApDD,8BAAiC;AACjC,6BAAwB;AAIxB,MAAM,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAQxD,QAAA,mBAAmB,GAAuB;IACrD,cAAc,EAAE,WAAW;IAC3B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,KAAK;CACrB,CAAC;AAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAChD,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAE9B,KAAK,UAAU,cAAc;IAClC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjE,aAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACzB,aAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9B,aAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,oBAAoB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAElE,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,2BAAmB,CAAC,cAAc;QACjG,kBAAkB,EAChB,OAAO,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,2BAAmB,CAAC,kBAAkB;QAC/F,aAAa,EACX,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,2BAAmB,CAAC,aAAa;KACnF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,KAAkC;IACrE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,aAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,aAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,aAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACU,QAAA,oBAAoB,GAAmE;IAClG,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,WAAW,EACT,wKAAwK;KAC3K;IACD,SAAS,EAAE;QACT,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,oHAAoH;KACvH;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,4HAA4H;KAC/H;CACF,CAAC"}

package/dist/lib/settings/transport.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * Typed accessor for chorus's transport setting — how shims invoke the
+ * underlying CLI. Two modes:
+ *
+ *   - 'headless' (default): spawn the CLI in `--print` / `exec` / `run` mode,
+ *     pipe prompt to stdin or argv, parse stream-json from stdout. No tmux,
+ *     no TUI process resident, ~80% lower RAM, no permission prompts (the
+ *     CLIs auto-approve in headless mode).
+ *
+ *   - 'tmux' (opt-in): spawn the CLI in its interactive TUI inside a tmux
+ *     session, send the prompt via send-keys, watch answer.md for completion.
+ *     Higher RAM, fragile pane-scraping, but humans can attach to the tmux
+ *     session for visual debugging — useful if you want to watch the AI
+ *     work step-by-step.
+ *
+ * Settings UI: cockpit /settings exposes this as "Show live terminal sessions"
+ * (off=headless, on=tmux). No deprecation timeline — both modes are first-
+ * class.
+ *
+ * The runner reads this once per chat (not per phase) so flipping the
+ * setting mid-run is intentionally inert.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRANSPORT_DESCRIPTIONS = exports.DEFAULT_TRANSPORT = exports.TMUX_AVAILABLE = void 0;
+exports.getTransport = getTransport;
+exports.setTransport = setTransport;
+const db_1 = require("../db");
+const zod_1 = require("zod");
+const os_1 = require("os");
+const child_process_1 = require("child_process");
+const TransportSchema = zod_1.z.enum(['headless', 'tmux']);
+const TRANSPORT_KEY = 'transport';
+/**
+ * tmux availability check.
+ *
+ *   1. Windows has no tmux equivalent — false unconditionally.
+ *   2. On Unix, probe `tmux -V` once at module load. If the binary isn't on
+ *      PATH, return false so `setTransport('tmux')` can refuse with an
+ *      actionable install hint instead of silently letting the user opt into
+ *      a mode whose first chat hangs.
+ *
+ * Cached at module load — tmux is rarely installed/uninstalled mid-process.
+ * Restart the daemon after `apt install tmux` to pick up the new state.
+ */
+function detectTmuxBinary() {
+    if ((0, os_1.platform)() === 'win32')
+        return false;
+    const result = (0, child_process_1.spawnSync)('tmux', ['-V'], { stdio: 'ignore' });
+    return result.status === 0;
+}
+exports.TMUX_AVAILABLE = detectTmuxBinary();
+/**
+ * v0.5 default is 'headless' — the migration target. Existing users who had
+ * tmux working will see the same outputs in the cockpit; only the spawn
+ * mechanism differs. To revert, flip the toggle in /settings or set the env
+ * override `CHORUS_TRANSPORT=tmux` (env wins over settings — useful for CI
+ * and per-user overrides without DB writes).
+ */
+exports.DEFAULT_TRANSPORT = 'headless';
+// Module-level dedup so we warn once per process, not once per chat. The
+// daemon reads getTransport() per-chat, and a stuck typo in CHORUS_TRANSPORT
+// would otherwise spam stderr for every new chat.
+let envWarnFired = false;
+async function getTransport() {
+    // Env override takes precedence — operator escape hatch.
+    const envOverride = process.env.CHORUS_TRANSPORT;
+    let resolved;
+    if (envOverride === 'headless' || envOverride === 'tmux') {
+        resolved = envOverride;
+    }
+    else {
+        if (envOverride !== undefined && envOverride !== '' && !envWarnFired) {
+            // Operator-typo aid: silent fallback used to mean a misspelled
+            // CHORUS_TRANSPORT (e.g. "headles") just inherited DB/default with no
+            // signal. Surface once on stderr; one line, no stack, no rotation.
+            console.warn(`[chorus] CHORUS_TRANSPORT=${JSON.stringify(envOverride)} is not 'headless' or 'tmux' — ignoring env, falling back to settings/default.`);
+            envWarnFired = true;
+        }
+        const raw = await db_1.settings.get(TRANSPORT_KEY);
+        const parsed = TransportSchema.safeParse(raw);
+        resolved = parsed.success ? parsed.data : exports.DEFAULT_TRANSPORT;
+    }
+    // Cross-platform safety net — see TMUX_AVAILABLE doc.
+    if (resolved === 'tmux' && !exports.TMUX_AVAILABLE)
+        return 'headless';
+    return resolved;
+}
+async function setTransport(value) {
+    TransportSchema.parse(value);
+    if (value === 'tmux' && !exports.TMUX_AVAILABLE) {
+        if ((0, os_1.platform)() === 'win32') {
+            throw new Error('tmux transport is not available on Windows — headless transport works for everything tmux does plus more.');
+        }
+        throw new Error('tmux is not installed on this host. Install it first (macOS: `brew install tmux` · Ubuntu/Debian: `sudo apt install tmux` · Fedora/RHEL: `sudo dnf install tmux`), then restart the chorus daemon and try again.');
+    }
+    await db_1.settings.set(TRANSPORT_KEY, value);
+    return getTransport();
+}
+/**
+ * Human-readable description for the /settings UI toggle.
+ */
+exports.TRANSPORT_DESCRIPTIONS = {
+    headless: {
+        label: 'Headless (faster, default)',
+        description: 'Each CLI runs as a one-shot subprocess. ~80% less RAM, faster cold start, no permission dialogs. Recommended for everyday use.',
+    },
+    tmux: {
+        label: 'Tmux — attach & take over',
+        description: 'Each CLI runs in a persistent tmux session you can attach to (`tmux attach -t <name>`) to watch step-by-step or take over mid-run. Uses more RAM. Requires tmux installed on the host (brew/apt/dnf).',
+    },
+};
+//# sourceMappingURL=transport.js.map

package/dist/lib/settings/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/lib/settings/transport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AA+CH,oCAuBC;AAED,oCAcC;AApFD,8BAAiC;AACjC,6BAAwB;AACxB,2BAA8B;AAC9B,iDAA0C;AAI1C,MAAM,eAAe,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAErD,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB;IACvB,IAAI,IAAA,aAAQ,GAAE,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAEY,QAAA,cAAc,GAAY,gBAAgB,EAAE,CAAC;AAE1D;;;;;;GAMG;AACU,QAAA,iBAAiB,GAAc,UAAU,CAAC;AAEvD,yEAAyE;AACzE,6EAA6E;AAC7E,kDAAkD;AAClD,IAAI,YAAY,GAAG,KAAK,CAAC;AAElB,KAAK,UAAU,YAAY;IAChC,yDAAyD;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACjD,IAAI,QAAmB,CAAC;IACxB,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACzD,QAAQ,GAAG,WAAW,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YACrE,+DAA+D;YAC/D,sEAAsE;YACtE,mEAAmE;YACnE,OAAO,CAAC,IAAI,CACV,6BAA6B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,gFAAgF,CACzI,CAAC;YACF,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,aAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAiB,CAAC;IAC9D,CAAC;IACD,sDAAsD;IACtD,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,sBAAc;QAAE,OAAO,UAAU,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,KAAgB;IACjD,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,sBAAc,EAAE,CAAC;QACxC,IAAI,IAAA,aAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kNAAkN,CACnN,CAAC;IACJ,CAAC;IACD,MAAM,aAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACU,QAAA,sBAAsB,GAA8D;IAC/F,QAAQ,EAAE;QACR,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,gIAAgI;KACnI;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,uMAAuM;KAC1M;CACF,CAAC"}