chorus-codes 0.7.0 → 0.7.1

package/dist/cli/runtime-env.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * Detect where chorus is running so the CLI can print the right URL hint.
+ *
+ * The cockpit binds to 127.0.0.1:5050. On a native install that opens fine in
+ * the local browser. On remote-dev setups (VSCode/Cursor Remote-SSH,
+ * Codespaces, dev containers, plain SSH), the user's browser lives on a
+ * different host — they need their editor to forward the port.
+ *
+ * Detection is best-effort and read-only. We never guess; if no signal is
+ * present we report 'native' and let `open()` handle it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectRuntimeEnv = detectRuntimeEnv;
+exports.shouldAutoOpenBrowser = shouldAutoOpenBrowser;
+function detectRuntimeEnv() {
+    const env = process.env;
+    if (env.CODESPACES === 'true') {
+        return {
+            kind: 'codespaces',
+            hint: 'Codespaces will auto-forward port 5050. Open the Ports tab and click 5050.',
+        };
+    }
+    // VSCode and Cursor both set VSCODE_IPC_HOOK_CLI when running through
+    // their integrated terminal. We tell them apart by the binary name in
+    // TERM_PROGRAM (Cursor sets 'cursor', VSCode sets 'vscode').
+    if (env.VSCODE_IPC_HOOK_CLI || env.TERM_PROGRAM === 'vscode') {
+        const isCursor = env.TERM_PROGRAM === 'cursor' || env.CURSOR_TRACE_ID;
+        return {
+            kind: isCursor ? 'cursor-remote' : 'vscode-remote',
+            hint: `${isCursor ? 'Cursor' : 'VSCode'} should auto-forward 5050 — open the Ports tab in the bottom panel and click "Open in Browser" next to the row for 5050. If you don't see it, click "Forward a Port" and enter 5050.`,
+        };
+    }
+    if (env.WSL_DISTRO_NAME) {
+        // WSL2 forwards 127.0.0.1 to the Windows host automatically.
+        return {
+            kind: 'wsl',
+            hint: 'On WSL2, http://localhost:5050 in your Windows browser should just work.',
+        };
+    }
+    if (env.SSH_CONNECTION || env.SSH_TTY) {
+        return {
+            kind: 'ssh',
+            hint: 'Plain SSH session detected — no auto-forwarding. Either:\n' +
+                '    • Run `ssh -L 5050:127.0.0.1:5050 <host>` from your laptop and visit http://localhost:5050, or\n' +
+                '    • Use VSCode/Cursor Remote-SSH which forwards ports automatically.',
+        };
+    }
+    return { kind: 'native', hint: '' };
+}
+/**
+ * Should `chorus start --ui` actually try to spawn a browser?
+ * On remote-dev hosts there's usually no graphical browser; calling `open()`
+ * just emits an `xdg-open` error. Skip it and rely on the printed URL +
+ * the editor's own port-forwarding UI.
+ */
+function shouldAutoOpenBrowser(env) {
+    return env.kind === 'native' || env.kind === 'wsl';
+}
+//# sourceMappingURL=runtime-env.js.map

package/dist/cli/runtime-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../src/cli/runtime-env.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAgBH,4CAyCC;AAQD,sDAEC;AAnDD,SAAgB,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,IAAI,EACF,4EAA4E;SAC/E,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC;QACtE,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;YAClD,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,sLAAsL;SAC9N,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;QACxB,6DAA6D;QAC7D,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,0EAA0E;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI,EACF,4DAA4D;gBAC5D,sGAAsG;gBACtG,wEAAwE;SAC3E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,GAAmB;IACvD,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;AACrD,CAAC"}

package/dist/cli/shared.js

@@ -0,0 +1,54 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pkg = exports.CHORUS_BIN_PATH = exports.DAEMON_URL = exports.COCKPIT_URL = void 0;
+exports.printCockpitAccessHint = printCockpitAccessHint;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const runtime_env_js_1 = require("./runtime-env.js");
+const ui_js_1 = require("./ui.js");
+exports.COCKPIT_URL = 'http://127.0.0.1:5050';
+exports.DAEMON_URL = 'http://127.0.0.1:7707';
+/**
+ * Absolute path to bin/chorus.mjs. Resolved from __dirname so the path
+ * is correct whether the CLI runs via:
+ *   - `npm i -g chorus-codes` → /usr/local/lib/node_modules/chorus-codes/dist/cli/index.js
+ *   - tsx dev mode      → /home/.../chorus/src/cli/index.ts
+ *   - direct dist       → /home/.../chorus/dist/cli/index.js
+ *
+ * `process.argv[1]` would also work for the npm-installed case, but in
+ * tsx dev mode it points at the .ts file which `node` can't execute.
+ */
+exports.CHORUS_BIN_PATH = path_1.default.resolve(__dirname, '..', '..', 'bin', 'chorus.mjs');
+/**
+ * Read version from the shipped package.json so it can never drift.
+ * __dirname is dist/cli (built) or src/cli (tsx dev); ../../package.json
+ * resolves to the package root in both layouts.
+ */
+exports.pkg = (() => {
+    try {
+        const pkgPath = path_1.default.resolve(__dirname, '..', '..', 'package.json');
+        const raw = fs_1.default.readFileSync(pkgPath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        return {
+            version: parsed.version ?? '0.0.0',
+            name: parsed.name ?? 'chorus',
+        };
+    }
+    catch {
+        return { version: '0.0.0', name: 'chorus' };
+    }
+})();
+function printCockpitAccessHint() {
+    const env = (0, runtime_env_js_1.detectRuntimeEnv)();
+    console.log('');
+    console.log(`   ${ui_js_1.c.gray('Open')}  ${ui_js_1.c.cyan(exports.COCKPIT_URL)}`);
+    if (env.hint) {
+        console.log('');
+        console.log((0, ui_js_1.tip)(env.hint));
+    }
+    console.log('');
+}
+//# sourceMappingURL=shared.js.map

package/dist/cli/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/cli/shared.ts"],"names":[],"mappings":";;;;;;AA6CA,wDASC;AAtDD,4CAAoB;AACpB,gDAAwB;AACxB,qDAAoD;AACpD,mCAAiC;AAEpB,QAAA,WAAW,GAAG,uBAAuB,CAAC;AACtC,QAAA,UAAU,GAAG,uBAAuB,CAAC;AAElD;;;;;;;;;GASG;AACU,QAAA,eAAe,GAAG,cAAI,CAAC,OAAO,CACzC,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,YAAY,CACb,CAAC;AAEF;;;;GAIG;AACU,QAAA,GAAG,GAAsC,CAAC,GAAG,EAAE;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwC,CAAC;QACtE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ;SAC9B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,SAAgB,sBAAsB;IACpC,MAAM,GAAG,GAAG,IAAA,iCAAgB,GAAE,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,SAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,SAAC,CAAC,IAAI,CAAC,mBAAW,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAA,WAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli/ui.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * CLI output helpers — colors, symbols, formatters.
+ * Zero deps — raw ANSI escapes. Respects NO_COLOR env var.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sym = exports.c = void 0;
+exports.header = header;
+exports.kv = kv;
+exports.tip = tip;
+const useColor = !process.env.NO_COLOR && process.stdout.isTTY !== false;
+function ansi(code) {
+    return (s) => (useColor ? `\x1b[${code}m${s}\x1b[0m` : s);
+}
+exports.c = {
+    bold: ansi('1'),
+    dim: ansi('2'),
+    red: ansi('31'),
+    green: ansi('32'),
+    yellow: ansi('33'),
+    blue: ansi('34'),
+    magenta: ansi('35'),
+    cyan: ansi('36'),
+    gray: ansi('90'),
+};
+exports.sym = {
+    ok: exports.c.green('✓'),
+    err: exports.c.red('✗'),
+    bullet: exports.c.cyan('●'),
+    arrow: exports.c.gray('→'),
+    pointer: exports.c.cyan('▶'),
+    rocket: '🚀',
+    info: exports.c.blue('ⓘ'),
+};
+/**
+ * Header line with bold title, optional dim subtitle.
+ *   header(sym.ok, 'Chorus started')  →  ✓ Chorus started
+ *   header(sym.ok, 'Started', 'PID 1234')  →  ✓ Started  (PID 1234)
+ */
+function header(icon, title, sub) {
+    const main = `${icon} ${exports.c.bold(title)}`;
+    return sub ? `${main}  ${exports.c.dim(sub)}` : main;
+}
+/**
+ * Aligned key/value rows. Pads keys to the longest key width.
+ *   kv([['Cockpit', 'http://...'], ['Daemon', 'http://...']])
+ */
+function kv(rows, indent = '   ') {
+    const width = Math.max(...rows.map(([k]) => k.length));
+    return rows
+        .map(([k, v]) => `${indent}${exports.c.gray(k.padEnd(width))}  ${v}`)
+        .join('\n');
+}
+/**
+ * A boxed tip line. Used for one-time hints/footnotes.
+ */
+function tip(text, indent = '   ') {
+    return `${indent}${exports.sym.info} ${exports.c.dim(text)}`;
+}
+//# sourceMappingURL=ui.js.map

package/dist/cli/ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../../src/cli/ui.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAmCH,wBAGC;AAMD,gBAKC;AAKD,kBAEC;AAtDD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;AAEzE,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAEY,QAAA,CAAC,GAAG;IACf,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;IACd,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;IACf,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;IAClB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;CACjB,CAAC;AAEW,QAAA,GAAG,GAAG;IACjB,EAAE,EAAE,SAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAChB,GAAG,EAAE,SAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACf,MAAM,EAAE,SAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACnB,KAAK,EAAE,SAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IAClB,OAAO,EAAE,SAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACpB,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,SAAC,CAAC,IAAI,CAAC,GAAG,CAAC;CAClB,CAAC;AAEF;;;;GAIG;AACH,SAAgB,MAAM,CAAC,IAAY,EAAE,KAAa,EAAE,GAAY;IAC9D,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,SAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACxC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,SAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAgB,EAAE,CAAC,IAA6B,EAAE,MAAM,GAAG,KAAK;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,SAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;SAC5D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,GAAG,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;IAC9C,OAAO,GAAG,MAAM,GAAG,WAAG,CAAC,IAAI,IAAI,SAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/C,CAAC"}

package/dist/daemon/agents/claude.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * Claude Code agent shim.
+ * Multi-paragraph prompts are fine; no special formatting needed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.claudeShim = void 0;
+const quote_js_1 = require("./quote.js");
+const preflight_js_1 = require("./preflight.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+exports.claudeShim = {
+    lineage: 'anthropic',
+    name: 'claude-code',
+    buildLaunchCommand(opts) {
+        // Pre-trust the chat dir so Claude Code doesn't stop on its first-launch
+        // "Trust this folder?" prompt. Idempotent; safe to call every spawn.
+        (0, preflight_js_1.preTrustClaudeWorkspace)(opts.cwd);
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        let cmd = `cd ${cwd} && claude`;
+        // Sandbox profile mapping. Claude Code itself doesn't expose a
+        // workspace-vs-strict toggle — the existing per-tool permission allow-list
+        // (settings.local.json `permissions.allow[]`) already implements the
+        // "workspace" profile. Full = bypass everything; strict isn't expressible
+        // at spawn time, only via tighter allow-list.
+        if (opts.unsandboxed || opts.sandbox === 'full') {
+            cmd += ` --dangerously-skip-permissions`;
+        }
+        if (opts.model) {
+            cmd += ` --model ${(0, quote_js_1.quoteValue)(opts.model)}`;
+        }
+        return cmd;
+    },
+    formatPrompt(opts) {
+        const sentinel = opts.expectDoneSentinel
+            ? '\n\nWhen finished, end your response with: ## DONE'
+            : '';
+        return (`${opts.task}\n\n` +
+            `Read the prompt at: ${opts.promptFile}\n\n` +
+            `Write your full answer to: ${opts.answerFile}${sentinel}`);
+    },
+    /**
+     * Headless mode (`claude --print --output-format stream-json --verbose`).
+     *
+     * Pipes the full prompt via stdin, parses Anthropic-shape stream-json events,
+     * yields AgentEvents to the runner. No tmux session, no pane scraping, no
+     * permission dialogs (bypassPermissions is set when autoApprove is on).
+     *
+     * Verified format 2026-04-30 against Claude Code 2.1.123. See parsers.ts
+     * for the parsed shapes and inline tests.
+     */
+    runHeadless(opts) {
+        (0, preflight_js_1.preTrustClaudeWorkspace)(opts.cwd);
+        const args = ['--print', '--output-format', 'stream-json', '--verbose'];
+        // Sandbox profile → permission-mode mapping. Headless mode auto-skips the
+        // workspace-trust dialog (per `claude -p` docs) so we don't need preflight
+        // beyond the trust marker write above.
+        if (opts.sandbox === 'strict') {
+            // 'plan' = read-only-ish: no Edit, no Bash. The closest Claude has to
+            // a strict sandbox in headless.
+            args.push('--permission-mode', 'plan');
+        }
+        else if (opts.autoApprove !== false || opts.sandbox === 'full') {
+            // Default for headless reviewer spawns — bypass per-tool prompts so the
+            // agent doesn't hang waiting on stdin for an approval that'll never come.
+            args.push('--permission-mode', 'bypassPermissions');
+        }
+        // 'workspace' (default) without auto-approve: leave Claude in default
+        // permission mode (per-tool prompts). Will hang on the first prompt
+        // unless settings.local.json pre-approves what's needed — which is what
+        // `chorus init` writes into the user's config.
+        if (opts.model) {
+            args.push('--model', opts.model);
+        }
+        // Claude doesn't have a "no network" flag in headless, so networkAccess
+        // is implicitly governed by the user's claude config and any tool the
+        // agent attempts. Strict sandbox + plan mode is our gate.
+        const run = (0, headless_js_1.spawnHeadless)({
+            command: 'claude',
+            args,
+            cwd: opts.cwd,
+            stdinPayload: opts.promptText,
+            parseLine: index_js_1.parseClaude,
+            cli: 'claude',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            // Streaming CLI — no heartbeat needed; text_delta events provide
+            // continuous progress signal.
+            heartbeat: false,
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Claude Code uses subscription, not per-call API billing
+        return 0;
+    },
+};
+//# sourceMappingURL=claude.js.map

package/dist/daemon/agents/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/daemon/agents/claude.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AASH,yCAAmD;AACnD,iDAAyD;AACzD,gDAA+C;AAC/C,iDAAiD;AAEpC,QAAA,UAAU,GAAc;IACnC,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,aAAa;IAEnB,kBAAkB,CAAC,IAAuB;QACxC,yEAAyE;QACzE,qEAAqE;QACrE,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,MAAM,GAAG,YAAY,CAAC;QAEhC,+DAA+D;QAC/D,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,8CAA8C;QAC9C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,GAAG,IAAI,iCAAiC,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,YAAY,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,IAA0B;QACpC,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAExE,0EAA0E;QAC1E,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,sEAAsE;YACtE,gCAAgC;YAChC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACjE,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACtD,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,+CAA+C;QAE/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,0DAA0D;QAE1D,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,QAAQ;YACjB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,SAAS,EAAE,sBAAW;YACtB,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iEAAiE;YACjE,8BAA8B;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,0DAA0D;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/codex.js

@@ -0,0 +1,160 @@
+"use strict";
+/**
+ * Codex CLI agent shim.
+ * Per-session CODEX_HOME for parallel safety (see feedback_codex_home_per_account.md).
+ * Transport-aware sandbox modes (see feedback_codex_sandbox_modes.md).
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.codexShim = void 0;
+const quote_js_1 = require("./quote.js");
+const preflight_js_1 = require("./preflight.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+/**
+ * Resolve CODEX_HOME for this spawn.
+ *
+ * - `CHORUS_CODEX_HOME` env var (when set) wins on the single-user path.
+ *   Lets users point chorus at a non-rate-limited codex account
+ *   (e.g. `~/.codex-cdx-2`) without forking the shim or wiring multi-account
+ *   isolation. Ignored when `accountId` is explicit — that path already owns
+ *   account selection.
+ * - When `accountId` is undefined/empty AND no env override: reuse the user's
+ *   existing `~/.codex/` (their primary login). v0.5 single-user default.
+ * - When `accountId` is explicit: create/reuse `~/.codex-<accountId>/` for
+ *   parallel multi-account isolation. Copies config.toml from the primary
+ *   home; NEVER copies auth.json (each account must have its own login).
+ */
+function ensureCodexHome(accountId) {
+    const homeDir = os_1.default.homedir();
+    const primary = path_1.default.join(homeDir, '.codex');
+    if (!accountId) {
+        const override = process.env.CHORUS_CODEX_HOME?.trim();
+        if (override && override.length > 0) {
+            // Trust the user — if the dir doesn't exist or has no auth.json, codex
+            // exec will fail loudly (which is now surfaced via quota_exhausted /
+            // cli_error). Better than silently picking the rate-limited primary.
+            return override;
+        }
+        // Single-user fast path — use the user's existing login.
+        return primary;
+    }
+    const codexDir = path_1.default.join(homeDir, `.codex-${accountId}`);
+    if (!fs_1.default.existsSync(codexDir)) {
+        fs_1.default.mkdirSync(codexDir, { recursive: true });
+        const defaultConfigPath = path_1.default.join(primary, 'config.toml');
+        const targetConfigPath = path_1.default.join(codexDir, 'config.toml');
+        if (fs_1.default.existsSync(defaultConfigPath) && !fs_1.default.existsSync(targetConfigPath)) {
+            const content = fs_1.default.readFileSync(defaultConfigPath, 'utf-8');
+            fs_1.default.writeFileSync(targetConfigPath, content, 'utf-8');
+        }
+        // NOTE: NEVER copy auth.json — each CODEX_HOME must have its own.
+        // First launch will prompt for `codex login`.
+    }
+    return codexDir;
+}
+exports.codexShim = {
+    lineage: 'openai',
+    name: 'codex-cli',
+    buildLaunchCommand(opts) {
+        (0, quote_js_1.validateValue)('accountId', opts.accountId);
+        (0, quote_js_1.validateValue)('model', opts.model);
+        const codexHome = ensureCodexHome(opts.accountId);
+        // Pre-trust the chat dir so Codex skips its first-launch trust prompt.
+        (0, preflight_js_1.preTrustCodexWorkspace)(codexHome, opts.cwd);
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        const flags = [];
+        // Sandbox profile from user settings (may be overridden by transport).
+        if (opts.unsandboxed || opts.sandbox === 'full') {
+            // Full bypass — user explicitly opted into trust-everything.
+            flags.push('--dangerously-bypass-approvals-and-sandbox');
+        }
+        else if (opts.sandbox === 'strict') {
+            // Read-only — codex can't write files or shell-exec.
+            flags.push('-c', 'sandbox_mode="read-only"');
+        }
+        // 'workspace' (default) leaves codex in its config.toml-defined
+        // workspace-write mode. No flag override.
+        // Network access — opt-in. github transport always needs network.
+        if (opts.networkAccess || opts.transport === 'github') {
+            flags.push('-c', 'sandbox_workspace_write.network_access=true');
+        }
+        if (opts.model) {
+            flags.push('--model', (0, quote_js_1.quoteValue)(opts.model));
+        }
+        const flagsStr = flags.length > 0 ? ` ${flags.join(' ')}` : '';
+        return `cd ${cwd} && CODEX_HOME=${(0, quote_js_1.quotePath)(codexHome)} codex${flagsStr}`;
+    },
+    formatPrompt(opts) {
+        const sentinel = opts.expectDoneSentinel
+            ? '\n\nWhen finished, end your response with: ## DONE'
+            : '';
+        return (`${opts.task}\n\n` +
+            `Read the prompt at: ${opts.promptFile}\n\n` +
+            `Write your full answer to: ${opts.answerFile}${sentinel}`);
+    },
+    /**
+     * Headless mode (`codex exec -`).
+     *
+     * Codex `exec` accepts the prompt either as a positional arg or, when `-`
+     * is passed (or no positional), on stdin. We always pipe via stdin so big
+     * diff reviews (chorus self-review on a 100KB+ PR diff) don't hit the OS
+     * argv ceiling — a single large argv string crosses ARG_MAX on some shells
+     * and triggers truncation/silent failure modes upstream.
+     *
+     * Sandbox flags forwarded same as the tmux path. Codex's `exec` honors
+     * `-c sandbox_mode=...` and `-c sandbox_workspace_write.network_access=...`
+     * the same way as the interactive command.
+     */
+    runHeadless(opts) {
+        (0, quote_js_1.validateValue)('accountId', opts.accountId);
+        (0, quote_js_1.validateValue)('model', opts.model);
+        const codexHome = ensureCodexHome(opts.accountId);
+        (0, preflight_js_1.preTrustCodexWorkspace)(codexHome, opts.cwd);
+        const args = ['exec'];
+        // Chorus chat dirs aren't git repos. Without this flag codex exec
+        // exits 1 with "Not inside a trusted directory" — the trust_level
+        // entry in config.toml only suppresses the interactive prompt, not
+        // the git-repo guard. Discovered 2026-05-01 dogfooding tri-review:
+        // codex reviewers wrote 0 bytes because exec aborted pre-LLM.
+        args.push('--skip-git-repo-check');
+        if (opts.sandbox === 'full') {
+            args.push('--dangerously-bypass-approvals-and-sandbox');
+        }
+        else if (opts.sandbox === 'strict') {
+            args.push('-c', 'sandbox_mode="read-only"');
+        }
+        if (opts.networkAccess) {
+            args.push('-c', 'sandbox_workspace_write.network_access=true');
+        }
+        if (opts.model) {
+            args.push('--model', opts.model);
+        }
+        // `-` tells codex exec to read the prompt from stdin.
+        args.push('-');
+        const run = (0, headless_js_1.spawnHeadless)({
+            command: 'codex',
+            args,
+            cwd: opts.cwd,
+            env: { CODEX_HOME: codexHome },
+            stdinPayload: opts.promptText,
+            parseLine: index_js_1.parseCodex,
+            onExit: (fullStdout, fullStderr, code) => (0, index_js_1.parseCodexExit)(fullStdout, fullStderr, code),
+            cli: 'codex',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            heartbeat: true, // no streaming; heartbeat keeps UI alive
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Codex uses subscription, not per-call API billing
+        return 0;
+    },
+};
+//# sourceMappingURL=codex.js.map

package/dist/daemon/agents/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../../src/daemon/agents/codex.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AASH,yCAAkE;AAClE,iDAAwD;AACxD,gDAA+C;AAC/C,iDAAgE;AAChE,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AAEpB;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,SAA6B;IACpD,MAAM,OAAO,GAAG,YAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,yDAAyD;QACzD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,SAAS,EAAE,CAAC,CAAC;IAE3D,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,YAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,iBAAiB,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAE5D,IAAI,YAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC5D,YAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAED,kEAAkE;QAClE,8CAA8C;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEY,QAAA,SAAS,GAAc;IAClC,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,WAAW;IAEjB,kBAAkB,CAAC,IAAuB;QACxC,IAAA,wBAAa,EAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,uEAAuE;QACvE,IAAA,qCAAsB,EAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,uEAAuE;QACvE,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,6DAA6D;YAC7D,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC/C,CAAC;QACD,gEAAgE;QAChE,0CAA0C;QAE1C,kEAAkE;QAClE,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,6CAA6C,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,GAAG,kBAAkB,IAAA,oBAAS,EAAC,SAAS,CAAC,SAAS,QAAQ,EAAE,CAAC;IAC5E,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,IAA0B;QACpC,IAAA,wBAAa,EAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAA,qCAAsB,EAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,IAAI,GAAa,CAAC,MAAM,CAAC,CAAC;QAEhC,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,OAAO;YAChB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YAC9B,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,SAAS,EAAE,qBAAU;YACrB,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CACvC,IAAA,yBAAc,EAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC;YAC9C,GAAG,EAAE,OAAO;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,EAAE,yCAAyC;SAC3D,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,oDAAoD;QACpD,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/gemini.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * Gemini CLI agent shim.
+ * Single-line prompts only (see feedback_gemini_multiline_prompts.md).
+ * Uses --approval-mode auto_edit (never yolo, see feedback_gemini_yolo_dangerous.md).
+ * File references via @/abs/path inline syntax.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.geminiShim = void 0;
+const quote_js_1 = require("./quote.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+exports.geminiShim = {
+    lineage: 'google',
+    name: 'gemini-cli',
+    buildLaunchCommand(opts) {
+        (0, quote_js_1.validateValue)('model', opts.model);
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        // Map sandbox profile to gemini's approval-mode. Never use yolo —
+        // see feedback_gemini_yolo_dangerous.md (auto_edit is safe-by-default).
+        let approvalMode = 'auto_edit';
+        if (opts.sandbox === 'strict')
+            approvalMode = 'default';
+        // 'workspace' (default) and 'full' both use auto_edit. Going beyond
+        // auto_edit (i.e. yolo) is intentionally NOT supported here — the user
+        // who wants gemini fully unsandboxed can run gemini outside chorus.
+        let cmd = `cd ${cwd} && gemini --approval-mode ${approvalMode}`;
+        if (opts.model) {
+            cmd += ` -m ${(0, quote_js_1.quoteValue)(opts.model)}`;
+        }
+        else {
+            // Default to gemini-3.1-pro-preview (gemini-pro is not valid on current plan)
+            cmd += ` -m gemini-3.1-pro-preview`;
+        }
+        return cmd;
+    },
+    formatPrompt(opts) {
+        // CRITICAL: Single-line only. Gemini submits each \n as a separate query.
+        // Use @/abs/path inline syntax for file references (no plain paths).
+        const sentinel = opts.expectDoneSentinel ? ' End your response with ## DONE.' : '';
+        return (`@${opts.promptFile} Read this file and follow the <ask> XML block, ` +
+            `write your full answer to ${opts.answerFile}.${sentinel}`);
+    },
+    /**
+     * Headless mode (`gemini -p " " --output-format stream-json` + stdin).
+     *
+     * Gemini's `-p`/`--prompt` value is appended to anything piped on stdin
+     * ("Appended to input on stdin (if any)" — verified `gemini --help`
+     * 2026-05-02). We pipe the full multi-line prompt via stdin and pass a
+     * placeholder `" "` (single space) on `-p` to mark the run non-interactive.
+     * This dodges:
+     *   1. argv overflow on big diffs (chorus self-reviews routinely cross
+     *      100KB+ — argv hits ARG_MAX or shell-quoting issues).
+     *   2. The historical "-p with newlines hangs" bug — irrelevant once the
+     *      multi-line content lives on stdin.
+     *
+     * Format verified 2026-04-30; see parseGemini for shape.
+     */
+    runHeadless(opts) {
+        // -p needs a non-empty value to flip gemini into non-interactive mode.
+        // The single-space placeholder is harmless once stdin carries the real
+        // prompt (gemini concatenates them with the stdin content first).
+        const args = [
+            '-p',
+            ' ',
+            '--output-format',
+            'stream-json',
+            '--skip-trust',
+        ];
+        // Sandbox profile → approval-mode mapping. Never use yolo
+        // (see feedback_gemini_yolo_dangerous.md — empty-content overwrites).
+        if (opts.sandbox === 'strict') {
+            args.push('--approval-mode', 'plan'); // read-only
+        }
+        else {
+            args.push('--approval-mode', 'auto_edit');
+        }
+        // Model — Gemini CLI requires an explicit model on current API; default
+        // to gemini-3.1-pro-preview (the verified-working model).
+        args.push('-m', opts.model || 'gemini-3.1-pro-preview');
+        const run = (0, headless_js_1.spawnHeadless)({
+            command: 'gemini',
+            args,
+            cwd: opts.cwd,
+            stdinPayload: opts.promptText,
+            env: {
+                // Defense in depth: env-var trust override matches the --skip-trust flag.
+                GEMINI_CLI_TRUST_WORKSPACE: 'true',
+            },
+            parseLine: index_js_1.parseGemini,
+            // gemini-cli logs upstream API errors (notably 429 quota
+            // exhaustion) to stderr without mirroring them in the JSON
+            // result line. parseGeminiExit scans the captured stderr on
+            // exit and emits a `quota_exhausted` event with the parsed
+            // reset window — without this, the cockpit only sees the
+            // generic "Gemini result status=error" from the parser and
+            // the user can't tell when their quota will reset.
+            onExit: (out, err, code) => (0, index_js_1.parseGeminiExit)(out, err, code),
+            cli: 'gemini',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            heartbeat: false, // streaming
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Gemini via CLI may use subscription or API key; assume 0 for now
+        return 0;
+    },
+};
+//# sourceMappingURL=gemini.js.map

package/dist/daemon/agents/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../../src/daemon/agents/gemini.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AASH,yCAAkE;AAClE,gDAA+C;AAC/C,iDAAkE;AAErD,QAAA,UAAU,GAAc;IACnC,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,YAAY;IAElB,kBAAkB,CAAC,IAAuB;QACxC,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhC,kEAAkE;QAClE,wEAAwE;QACxE,IAAI,YAAY,GAAG,WAAW,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,YAAY,GAAG,SAAS,CAAC;QACxD,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QAEpE,IAAI,GAAG,GAAG,MAAM,GAAG,8BAA8B,YAAY,EAAE,CAAC;QAEhE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,OAAO,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,8EAA8E;YAC9E,GAAG,IAAI,4BAA4B,CAAC;QACtC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnF,OAAO,CACL,IAAI,IAAI,CAAC,UAAU,kDAAkD;YACrE,6BAA6B,IAAI,CAAC,UAAU,IAAI,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,IAA0B;QACpC,uEAAuE;QACvE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,GAAG;YACH,iBAAiB;YACjB,aAAa;YACb,cAAc;SACf,CAAC;QAEF,0DAA0D;QAC1D,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY;QACpD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC;QAED,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC;QAExD,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,QAAQ;YACjB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,GAAG,EAAE;gBACH,0EAA0E;gBAC1E,0BAA0B,EAAE,MAAM;aACnC;YACD,SAAS,EAAE,sBAAW;YACtB,yDAAyD;YACzD,2DAA2D;YAC3D,4DAA4D;YAC5D,2DAA2D;YAC3D,yDAAyD;YACzD,2DAA2D;YAC3D,mDAAmD;YACnD,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAA,0BAAe,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC;YAC3D,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,KAAK,EAAE,YAAY;SAC/B,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,mEAAmE;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/index.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Agent shim registry: lineage → shim implementation.
+ * Each CLI lineage (anthropic, openai, google, xai) has a corresponding shim
+ * that handles launch commands, prompt formatting, and cost estimation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openrouterShim = exports.kimiShim = exports.opencodeShim = exports.geminiShim = exports.codexShim = exports.claudeShim = void 0;
+exports.pickShimForVoice = pickShimForVoice;
+exports.isHttpDispatchedShim = isHttpDispatchedShim;
+const claude_js_1 = require("./claude.js");
+Object.defineProperty(exports, "claudeShim", { enumerable: true, get: function () { return claude_js_1.claudeShim; } });
+const codex_js_1 = require("./codex.js");
+Object.defineProperty(exports, "codexShim", { enumerable: true, get: function () { return codex_js_1.codexShim; } });
+const gemini_js_1 = require("./gemini.js");
+Object.defineProperty(exports, "geminiShim", { enumerable: true, get: function () { return gemini_js_1.geminiShim; } });
+const opencode_js_1 = require("./opencode.js");
+Object.defineProperty(exports, "opencodeShim", { enumerable: true, get: function () { return opencode_js_1.opencodeShim; } });
+const kimi_js_1 = require("./kimi.js");
+Object.defineProperty(exports, "kimiShim", { enumerable: true, get: function () { return kimi_js_1.kimiShim; } });
+const openrouter_js_1 = require("./openrouter.js");
+Object.defineProperty(exports, "openrouterShim", { enumerable: true, get: function () { return openrouter_js_1.openrouterShim; } });
+const SHIMS = {
+    anthropic: claude_js_1.claudeShim,
+    openai: codex_js_1.codexShim,
+    google: gemini_js_1.geminiShim,
+    opencode: opencode_js_1.opencodeShim,
+    moonshot: kimi_js_1.kimiShim,
+    openrouter: openrouter_js_1.openrouterShim,
+    any: claude_js_1.claudeShim, // Fallback to Claude
+};
+const registry = {
+    pickShim(lineage) {
+        return SHIMS[lineage] ?? SHIMS.any;
+    },
+    listAvailable() {
+        return Object.values(SHIMS);
+    },
+};
+/**
+ * Pick a shim taking the model id into account. When the model has the
+ * `openrouter:` prefix, dispatch goes through the HTTP shim regardless of
+ * the slot's declared lineage — the lineage is preserved on the voice row
+ * for diversity scoring, but the actual transport is OpenRouter's
+ * chat-completions API.
+ *
+ * Callers that have a model hint (runner doer + reviewer dispatch) should
+ * use this; callers that don't (legacy paths) can keep using `registry.pickShim`.
+ */
+function pickShimForVoice(lineage, model) {
+    if (model && model.startsWith('openrouter:'))
+        return openrouter_js_1.openrouterShim;
+    return registry.pickShim(lineage);
+}
+/** True when this voice should bypass CLI-credential precheck (HTTP-auth instead). */
+function isHttpDispatchedShim(shim) {
+    return shim === openrouter_js_1.openrouterShim;
+}
+//# sourceMappingURL=index.js.map

package/dist/daemon/agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/daemon/agents/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAwCH,4CAGC;AAGD,oDAEC;AA7CD,2CAAyC;AAgDhC,2FAhDA,sBAAU,OAgDA;AA/CnB,yCAAuC;AA+ClB,0FA/CZ,oBAAS,OA+CY;AA9C9B,2CAAyC;AA8CT,2FA9CvB,sBAAU,OA8CuB;AA7C1C,+CAA6C;AA6CD,6FA7CnC,0BAAY,OA6CmC;AA5CxD,uCAAqC;AA4CqB,yFA5CjD,kBAAQ,OA4CiD;AA3ClE,mDAAiD;AA2CmB,+FA3C3D,8BAAc,OA2C2D;AAzClF,MAAM,KAAK,GAA+B;IACxC,SAAS,EAAE,sBAAU;IACrB,MAAM,EAAE,oBAAS;IACjB,MAAM,EAAE,sBAAU;IAClB,QAAQ,EAAE,0BAAY;IACtB,QAAQ,EAAE,kBAAQ;IAClB,UAAU,EAAE,8BAAc;IAC1B,GAAG,EAAE,sBAAU,EAAE,qBAAqB;CACvC,CAAC;AAEF,MAAM,QAAQ,GAAkB;IAC9B,QAAQ,CAAC,OAAgB;QACvB,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC;IACrC,CAAC;IAED,aAAa;QACX,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,KAAc;IAC/D,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,8BAAc,CAAC;IACpE,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,sFAAsF;AACtF,SAAgB,oBAAoB,CAAC,IAAe;IAClD,OAAO,IAAI,KAAK,8BAAc,CAAC;AACjC,CAAC"}