chorus-codes 0.7.0 → 0.7.2

package/dist/daemon/agents/claude.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * Claude Code agent shim.
+ * Multi-paragraph prompts are fine; no special formatting needed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.claudeShim = void 0;
+const quote_js_1 = require("./quote.js");
+const preflight_js_1 = require("./preflight.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+exports.claudeShim = {
+    lineage: 'anthropic',
+    name: 'claude-code',
+    buildLaunchCommand(opts) {
+        // Pre-trust the chat dir so Claude Code doesn't stop on its first-launch
+        // "Trust this folder?" prompt. Idempotent; safe to call every spawn.
+        (0, preflight_js_1.preTrustClaudeWorkspace)(opts.cwd);
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        let cmd = `cd ${cwd} && claude`;
+        // Sandbox profile mapping. Claude Code itself doesn't expose a
+        // workspace-vs-strict toggle — the existing per-tool permission allow-list
+        // (settings.local.json `permissions.allow[]`) already implements the
+        // "workspace" profile. Full = bypass everything; strict isn't expressible
+        // at spawn time, only via tighter allow-list.
+        if (opts.unsandboxed || opts.sandbox === 'full') {
+            cmd += ` --dangerously-skip-permissions`;
+        }
+        if (opts.model) {
+            cmd += ` --model ${(0, quote_js_1.quoteValue)(opts.model)}`;
+        }
+        return cmd;
+    },
+    formatPrompt(opts) {
+        const sentinel = opts.expectDoneSentinel
+            ? '\n\nWhen finished, end your response with: ## DONE'
+            : '';
+        return (`${opts.task}\n\n` +
+            `Read the prompt at: ${opts.promptFile}\n\n` +
+            `Write your full answer to: ${opts.answerFile}${sentinel}`);
+    },
+    /**
+     * Headless mode (`claude --print --output-format stream-json --verbose`).
+     *
+     * Pipes the full prompt via stdin, parses Anthropic-shape stream-json events,
+     * yields AgentEvents to the runner. No tmux session, no pane scraping, no
+     * permission dialogs (bypassPermissions is set when autoApprove is on).
+     *
+     * Verified format 2026-04-30 against Claude Code 2.1.123. See parsers.ts
+     * for the parsed shapes and inline tests.
+     */
+    runHeadless(opts) {
+        (0, preflight_js_1.preTrustClaudeWorkspace)(opts.cwd);
+        const args = ['--print', '--output-format', 'stream-json', '--verbose'];
+        // Sandbox profile → permission-mode mapping. Headless mode auto-skips the
+        // workspace-trust dialog (per `claude -p` docs) so we don't need preflight
+        // beyond the trust marker write above.
+        if (opts.sandbox === 'strict') {
+            // 'plan' = read-only-ish: no Edit, no Bash. The closest Claude has to
+            // a strict sandbox in headless.
+            args.push('--permission-mode', 'plan');
+        }
+        else if (opts.autoApprove !== false || opts.sandbox === 'full') {
+            // Default for headless reviewer spawns — bypass per-tool prompts so the
+            // agent doesn't hang waiting on stdin for an approval that'll never come.
+            args.push('--permission-mode', 'bypassPermissions');
+        }
+        // 'workspace' (default) without auto-approve: leave Claude in default
+        // permission mode (per-tool prompts). Will hang on the first prompt
+        // unless settings.local.json pre-approves what's needed — which is what
+        // `chorus init` writes into the user's config.
+        if (opts.model) {
+            args.push('--model', opts.model);
+        }
+        // Claude doesn't have a "no network" flag in headless, so networkAccess
+        // is implicitly governed by the user's claude config and any tool the
+        // agent attempts. Strict sandbox + plan mode is our gate.
+        const run = (0, headless_js_1.spawnHeadless)({
+            command: 'claude',
+            args,
+            cwd: opts.cwd,
+            stdinPayload: opts.promptText,
+            parseLine: index_js_1.parseClaude,
+            cli: 'claude',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            // Streaming CLI — no heartbeat needed; text_delta events provide
+            // continuous progress signal.
+            heartbeat: false,
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Claude Code uses subscription, not per-call API billing
+        return 0;
+    },
+};
+//# sourceMappingURL=claude.js.map

package/dist/daemon/agents/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/daemon/agents/claude.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AASH,yCAAmD;AACnD,iDAAyD;AACzD,gDAA+C;AAC/C,iDAAiD;AAEpC,QAAA,UAAU,GAAc;IACnC,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,aAAa;IAEnB,kBAAkB,CAAC,IAAuB;QACxC,yEAAyE;QACzE,qEAAqE;QACrE,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,MAAM,GAAG,YAAY,CAAC;QAEhC,+DAA+D;QAC/D,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,8CAA8C;QAC9C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,GAAG,IAAI,iCAAiC,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,YAAY,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,IAA0B;QACpC,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAExE,0EAA0E;QAC1E,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,sEAAsE;YACtE,gCAAgC;YAChC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACjE,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACtD,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,+CAA+C;QAE/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,0DAA0D;QAE1D,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,QAAQ;YACjB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,SAAS,EAAE,sBAAW;YACtB,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iEAAiE;YACjE,8BAA8B;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,0DAA0D;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/codex.js

@@ -0,0 +1,160 @@
+"use strict";
+/**
+ * Codex CLI agent shim.
+ * Per-session CODEX_HOME for parallel safety (see feedback_codex_home_per_account.md).
+ * Transport-aware sandbox modes (see feedback_codex_sandbox_modes.md).
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.codexShim = void 0;
+const quote_js_1 = require("./quote.js");
+const preflight_js_1 = require("./preflight.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+/**
+ * Resolve CODEX_HOME for this spawn.
+ *
+ * - `CHORUS_CODEX_HOME` env var (when set) wins on the single-user path.
+ *   Lets users point chorus at a non-rate-limited codex account
+ *   (e.g. `~/.codex-cdx-2`) without forking the shim or wiring multi-account
+ *   isolation. Ignored when `accountId` is explicit — that path already owns
+ *   account selection.
+ * - When `accountId` is undefined/empty AND no env override: reuse the user's
+ *   existing `~/.codex/` (their primary login). v0.5 single-user default.
+ * - When `accountId` is explicit: create/reuse `~/.codex-<accountId>/` for
+ *   parallel multi-account isolation. Copies config.toml from the primary
+ *   home; NEVER copies auth.json (each account must have its own login).
+ */
+function ensureCodexHome(accountId) {
+    const homeDir = os_1.default.homedir();
+    const primary = path_1.default.join(homeDir, '.codex');
+    if (!accountId) {
+        const override = process.env.CHORUS_CODEX_HOME?.trim();
+        if (override && override.length > 0) {
+            // Trust the user — if the dir doesn't exist or has no auth.json, codex
+            // exec will fail loudly (which is now surfaced via quota_exhausted /
+            // cli_error). Better than silently picking the rate-limited primary.
+            return override;
+        }
+        // Single-user fast path — use the user's existing login.
+        return primary;
+    }
+    const codexDir = path_1.default.join(homeDir, `.codex-${accountId}`);
+    if (!fs_1.default.existsSync(codexDir)) {
+        fs_1.default.mkdirSync(codexDir, { recursive: true });
+        const defaultConfigPath = path_1.default.join(primary, 'config.toml');
+        const targetConfigPath = path_1.default.join(codexDir, 'config.toml');
+        if (fs_1.default.existsSync(defaultConfigPath) && !fs_1.default.existsSync(targetConfigPath)) {
+            const content = fs_1.default.readFileSync(defaultConfigPath, 'utf-8');
+            fs_1.default.writeFileSync(targetConfigPath, content, 'utf-8');
+        }
+        // NOTE: NEVER copy auth.json — each CODEX_HOME must have its own.
+        // First launch will prompt for `codex login`.
+    }
+    return codexDir;
+}
+exports.codexShim = {
+    lineage: 'openai',
+    name: 'codex-cli',
+    buildLaunchCommand(opts) {
+        (0, quote_js_1.validateValue)('accountId', opts.accountId);
+        (0, quote_js_1.validateValue)('model', opts.model);
+        const codexHome = ensureCodexHome(opts.accountId);
+        // Pre-trust the chat dir so Codex skips its first-launch trust prompt.
+        (0, preflight_js_1.preTrustCodexWorkspace)(codexHome, opts.cwd);
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        const flags = [];
+        // Sandbox profile from user settings (may be overridden by transport).
+        if (opts.unsandboxed || opts.sandbox === 'full') {
+            // Full bypass — user explicitly opted into trust-everything.
+            flags.push('--dangerously-bypass-approvals-and-sandbox');
+        }
+        else if (opts.sandbox === 'strict') {
+            // Read-only — codex can't write files or shell-exec.
+            flags.push('-c', 'sandbox_mode="read-only"');
+        }
+        // 'workspace' (default) leaves codex in its config.toml-defined
+        // workspace-write mode. No flag override.
+        // Network access — opt-in. github transport always needs network.
+        if (opts.networkAccess || opts.transport === 'github') {
+            flags.push('-c', 'sandbox_workspace_write.network_access=true');
+        }
+        if (opts.model) {
+            flags.push('--model', (0, quote_js_1.quoteValue)(opts.model));
+        }
+        const flagsStr = flags.length > 0 ? ` ${flags.join(' ')}` : '';
+        return `cd ${cwd} && CODEX_HOME=${(0, quote_js_1.quotePath)(codexHome)} codex${flagsStr}`;
+    },
+    formatPrompt(opts) {
+        const sentinel = opts.expectDoneSentinel
+            ? '\n\nWhen finished, end your response with: ## DONE'
+            : '';
+        return (`${opts.task}\n\n` +
+            `Read the prompt at: ${opts.promptFile}\n\n` +
+            `Write your full answer to: ${opts.answerFile}${sentinel}`);
+    },
+    /**
+     * Headless mode (`codex exec -`).
+     *
+     * Codex `exec` accepts the prompt either as a positional arg or, when `-`
+     * is passed (or no positional), on stdin. We always pipe via stdin so big
+     * diff reviews (chorus self-review on a 100KB+ PR diff) don't hit the OS
+     * argv ceiling — a single large argv string crosses ARG_MAX on some shells
+     * and triggers truncation/silent failure modes upstream.
+     *
+     * Sandbox flags forwarded same as the tmux path. Codex's `exec` honors
+     * `-c sandbox_mode=...` and `-c sandbox_workspace_write.network_access=...`
+     * the same way as the interactive command.
+     */
+    runHeadless(opts) {
+        (0, quote_js_1.validateValue)('accountId', opts.accountId);
+        (0, quote_js_1.validateValue)('model', opts.model);
+        const codexHome = ensureCodexHome(opts.accountId);
+        (0, preflight_js_1.preTrustCodexWorkspace)(codexHome, opts.cwd);
+        const args = ['exec'];
+        // Chorus chat dirs aren't git repos. Without this flag codex exec
+        // exits 1 with "Not inside a trusted directory" — the trust_level
+        // entry in config.toml only suppresses the interactive prompt, not
+        // the git-repo guard. Discovered 2026-05-01 dogfooding tri-review:
+        // codex reviewers wrote 0 bytes because exec aborted pre-LLM.
+        args.push('--skip-git-repo-check');
+        if (opts.sandbox === 'full') {
+            args.push('--dangerously-bypass-approvals-and-sandbox');
+        }
+        else if (opts.sandbox === 'strict') {
+            args.push('-c', 'sandbox_mode="read-only"');
+        }
+        if (opts.networkAccess) {
+            args.push('-c', 'sandbox_workspace_write.network_access=true');
+        }
+        if (opts.model) {
+            args.push('--model', opts.model);
+        }
+        // `-` tells codex exec to read the prompt from stdin.
+        args.push('-');
+        const run = (0, headless_js_1.spawnHeadless)({
+            command: 'codex',
+            args,
+            cwd: opts.cwd,
+            env: { CODEX_HOME: codexHome },
+            stdinPayload: opts.promptText,
+            parseLine: index_js_1.parseCodex,
+            onExit: (fullStdout, fullStderr, code) => (0, index_js_1.parseCodexExit)(fullStdout, fullStderr, code),
+            cli: 'codex',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            heartbeat: true, // no streaming; heartbeat keeps UI alive
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Codex uses subscription, not per-call API billing
+        return 0;
+    },
+};
+//# sourceMappingURL=codex.js.map

package/dist/daemon/agents/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../../src/daemon/agents/codex.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AASH,yCAAkE;AAClE,iDAAwD;AACxD,gDAA+C;AAC/C,iDAAgE;AAChE,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AAEpB;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,SAA6B;IACpD,MAAM,OAAO,GAAG,YAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,yDAAyD;QACzD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,SAAS,EAAE,CAAC,CAAC;IAE3D,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,YAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,iBAAiB,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAE5D,IAAI,YAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC5D,YAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAED,kEAAkE;QAClE,8CAA8C;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEY,QAAA,SAAS,GAAc;IAClC,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,WAAW;IAEjB,kBAAkB,CAAC,IAAuB;QACxC,IAAA,wBAAa,EAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,uEAAuE;QACvE,IAAA,qCAAsB,EAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,uEAAuE;QACvE,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,6DAA6D;YAC7D,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC/C,CAAC;QACD,gEAAgE;QAChE,0CAA0C;QAE1C,kEAAkE;QAClE,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,6CAA6C,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,GAAG,kBAAkB,IAAA,oBAAS,EAAC,SAAS,CAAC,SAAS,QAAQ,EAAE,CAAC;IAC5E,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,IAA0B;QACpC,IAAA,wBAAa,EAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAA,qCAAsB,EAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,IAAI,GAAa,CAAC,MAAM,CAAC,CAAC;QAEhC,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,OAAO;YAChB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YAC9B,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,SAAS,EAAE,qBAAU;YACrB,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CACvC,IAAA,yBAAc,EAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC;YAC9C,GAAG,EAAE,OAAO;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,EAAE,yCAAyC;SAC3D,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,oDAAoD;QACpD,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/gemini.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * Gemini CLI agent shim.
+ * Single-line prompts only (see feedback_gemini_multiline_prompts.md).
+ * Uses --approval-mode auto_edit (never yolo, see feedback_gemini_yolo_dangerous.md).
+ * File references via @/abs/path inline syntax.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.geminiShim = void 0;
+const quote_js_1 = require("./quote.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+exports.geminiShim = {
+    lineage: 'google',
+    name: 'gemini-cli',
+    buildLaunchCommand(opts) {
+        (0, quote_js_1.validateValue)('model', opts.model);
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        // Map sandbox profile to gemini's approval-mode. Never use yolo —
+        // see feedback_gemini_yolo_dangerous.md (auto_edit is safe-by-default).
+        let approvalMode = 'auto_edit';
+        if (opts.sandbox === 'strict')
+            approvalMode = 'default';
+        // 'workspace' (default) and 'full' both use auto_edit. Going beyond
+        // auto_edit (i.e. yolo) is intentionally NOT supported here — the user
+        // who wants gemini fully unsandboxed can run gemini outside chorus.
+        let cmd = `cd ${cwd} && gemini --approval-mode ${approvalMode}`;
+        if (opts.model) {
+            cmd += ` -m ${(0, quote_js_1.quoteValue)(opts.model)}`;
+        }
+        else {
+            // Default to gemini-3.1-pro-preview (gemini-pro is not valid on current plan)
+            cmd += ` -m gemini-3.1-pro-preview`;
+        }
+        return cmd;
+    },
+    formatPrompt(opts) {
+        // CRITICAL: Single-line only. Gemini submits each \n as a separate query.
+        // Use @/abs/path inline syntax for file references (no plain paths).
+        const sentinel = opts.expectDoneSentinel ? ' End your response with ## DONE.' : '';
+        return (`@${opts.promptFile} Read this file and follow the <ask> XML block, ` +
+            `write your full answer to ${opts.answerFile}.${sentinel}`);
+    },
+    /**
+     * Headless mode (`gemini -p " " --output-format stream-json` + stdin).
+     *
+     * Gemini's `-p`/`--prompt` value is appended to anything piped on stdin
+     * ("Appended to input on stdin (if any)" — verified `gemini --help`
+     * 2026-05-02). We pipe the full multi-line prompt via stdin and pass a
+     * placeholder `" "` (single space) on `-p` to mark the run non-interactive.
+     * This dodges:
+     *   1. argv overflow on big diffs (chorus self-reviews routinely cross
+     *      100KB+ — argv hits ARG_MAX or shell-quoting issues).
+     *   2. The historical "-p with newlines hangs" bug — irrelevant once the
+     *      multi-line content lives on stdin.
+     *
+     * Format verified 2026-04-30; see parseGemini for shape.
+     */
+    runHeadless(opts) {
+        // -p needs a non-empty value to flip gemini into non-interactive mode.
+        // The single-space placeholder is harmless once stdin carries the real
+        // prompt (gemini concatenates them with the stdin content first).
+        const args = [
+            '-p',
+            ' ',
+            '--output-format',
+            'stream-json',
+            '--skip-trust',
+        ];
+        // Sandbox profile → approval-mode mapping. Never use yolo
+        // (see feedback_gemini_yolo_dangerous.md — empty-content overwrites).
+        if (opts.sandbox === 'strict') {
+            args.push('--approval-mode', 'plan'); // read-only
+        }
+        else {
+            args.push('--approval-mode', 'auto_edit');
+        }
+        // Model — Gemini CLI requires an explicit model on current API; default
+        // to gemini-3.1-pro-preview (the verified-working model).
+        args.push('-m', opts.model || 'gemini-3.1-pro-preview');
+        const run = (0, headless_js_1.spawnHeadless)({
+            command: 'gemini',
+            args,
+            cwd: opts.cwd,
+            stdinPayload: opts.promptText,
+            env: {
+                // Defense in depth: env-var trust override matches the --skip-trust flag.
+                GEMINI_CLI_TRUST_WORKSPACE: 'true',
+            },
+            parseLine: index_js_1.parseGemini,
+            // gemini-cli logs upstream API errors (notably 429 quota
+            // exhaustion) to stderr without mirroring them in the JSON
+            // result line. parseGeminiExit scans the captured stderr on
+            // exit and emits a `quota_exhausted` event with the parsed
+            // reset window — without this, the cockpit only sees the
+            // generic "Gemini result status=error" from the parser and
+            // the user can't tell when their quota will reset.
+            onExit: (out, err, code) => (0, index_js_1.parseGeminiExit)(out, err, code),
+            cli: 'gemini',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            heartbeat: false, // streaming
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Gemini via CLI may use subscription or API key; assume 0 for now
+        return 0;
+    },
+};
+//# sourceMappingURL=gemini.js.map

package/dist/daemon/agents/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../../src/daemon/agents/gemini.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AASH,yCAAkE;AAClE,gDAA+C;AAC/C,iDAAkE;AAErD,QAAA,UAAU,GAAc;IACnC,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,YAAY;IAElB,kBAAkB,CAAC,IAAuB;QACxC,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhC,kEAAkE;QAClE,wEAAwE;QACxE,IAAI,YAAY,GAAG,WAAW,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,YAAY,GAAG,SAAS,CAAC;QACxD,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QAEpE,IAAI,GAAG,GAAG,MAAM,GAAG,8BAA8B,YAAY,EAAE,CAAC;QAEhE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,OAAO,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,8EAA8E;YAC9E,GAAG,IAAI,4BAA4B,CAAC;QACtC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnF,OAAO,CACL,IAAI,IAAI,CAAC,UAAU,kDAAkD;YACrE,6BAA6B,IAAI,CAAC,UAAU,IAAI,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,IAA0B;QACpC,uEAAuE;QACvE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,GAAG;YACH,iBAAiB;YACjB,aAAa;YACb,cAAc;SACf,CAAC;QAEF,0DAA0D;QAC1D,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY;QACpD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC;QAED,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC;QAExD,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,QAAQ;YACjB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,GAAG,EAAE;gBACH,0EAA0E;gBAC1E,0BAA0B,EAAE,MAAM;aACnC;YACD,SAAS,EAAE,sBAAW;YACtB,yDAAyD;YACzD,2DAA2D;YAC3D,4DAA4D;YAC5D,2DAA2D;YAC3D,yDAAyD;YACzD,2DAA2D;YAC3D,mDAAmD;YACnD,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAA,0BAAe,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC;YAC3D,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,KAAK,EAAE,YAAY;SAC/B,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,mEAAmE;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/index.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Agent shim registry: lineage → shim implementation.
+ * Each CLI lineage (anthropic, openai, google, xai) has a corresponding shim
+ * that handles launch commands, prompt formatting, and cost estimation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openrouterShim = exports.kimiShim = exports.opencodeShim = exports.geminiShim = exports.codexShim = exports.claudeShim = void 0;
+exports.pickShimForVoice = pickShimForVoice;
+exports.isHttpDispatchedShim = isHttpDispatchedShim;
+const claude_js_1 = require("./claude.js");
+Object.defineProperty(exports, "claudeShim", { enumerable: true, get: function () { return claude_js_1.claudeShim; } });
+const codex_js_1 = require("./codex.js");
+Object.defineProperty(exports, "codexShim", { enumerable: true, get: function () { return codex_js_1.codexShim; } });
+const gemini_js_1 = require("./gemini.js");
+Object.defineProperty(exports, "geminiShim", { enumerable: true, get: function () { return gemini_js_1.geminiShim; } });
+const opencode_js_1 = require("./opencode.js");
+Object.defineProperty(exports, "opencodeShim", { enumerable: true, get: function () { return opencode_js_1.opencodeShim; } });
+const kimi_js_1 = require("./kimi.js");
+Object.defineProperty(exports, "kimiShim", { enumerable: true, get: function () { return kimi_js_1.kimiShim; } });
+const openrouter_js_1 = require("./openrouter.js");
+Object.defineProperty(exports, "openrouterShim", { enumerable: true, get: function () { return openrouter_js_1.openrouterShim; } });
+const SHIMS = {
+    anthropic: claude_js_1.claudeShim,
+    openai: codex_js_1.codexShim,
+    google: gemini_js_1.geminiShim,
+    opencode: opencode_js_1.opencodeShim,
+    moonshot: kimi_js_1.kimiShim,
+    openrouter: openrouter_js_1.openrouterShim,
+    any: claude_js_1.claudeShim, // Fallback to Claude
+};
+const registry = {
+    pickShim(lineage) {
+        return SHIMS[lineage] ?? SHIMS.any;
+    },
+    listAvailable() {
+        return Object.values(SHIMS);
+    },
+};
+/**
+ * Pick a shim taking the model id into account. When the model has the
+ * `openrouter:` prefix, dispatch goes through the HTTP shim regardless of
+ * the slot's declared lineage — the lineage is preserved on the voice row
+ * for diversity scoring, but the actual transport is OpenRouter's
+ * chat-completions API.
+ *
+ * Callers that have a model hint (runner doer + reviewer dispatch) should
+ * use this; callers that don't (legacy paths) can keep using `registry.pickShim`.
+ */
+function pickShimForVoice(lineage, model) {
+    if (model && model.startsWith('openrouter:'))
+        return openrouter_js_1.openrouterShim;
+    return registry.pickShim(lineage);
+}
+/** True when this voice should bypass CLI-credential precheck (HTTP-auth instead). */
+function isHttpDispatchedShim(shim) {
+    return shim === openrouter_js_1.openrouterShim;
+}
+//# sourceMappingURL=index.js.map

package/dist/daemon/agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/daemon/agents/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAwCH,4CAGC;AAGD,oDAEC;AA7CD,2CAAyC;AAgDhC,2FAhDA,sBAAU,OAgDA;AA/CnB,yCAAuC;AA+ClB,0FA/CZ,oBAAS,OA+CY;AA9C9B,2CAAyC;AA8CT,2FA9CvB,sBAAU,OA8CuB;AA7C1C,+CAA6C;AA6CD,6FA7CnC,0BAAY,OA6CmC;AA5CxD,uCAAqC;AA4CqB,yFA5CjD,kBAAQ,OA4CiD;AA3ClE,mDAAiD;AA2CmB,+FA3C3D,8BAAc,OA2C2D;AAzClF,MAAM,KAAK,GAA+B;IACxC,SAAS,EAAE,sBAAU;IACrB,MAAM,EAAE,oBAAS;IACjB,MAAM,EAAE,sBAAU;IAClB,QAAQ,EAAE,0BAAY;IACtB,QAAQ,EAAE,kBAAQ;IAClB,UAAU,EAAE,8BAAc;IAC1B,GAAG,EAAE,sBAAU,EAAE,qBAAqB;CACvC,CAAC;AAEF,MAAM,QAAQ,GAAkB;IAC9B,QAAQ,CAAC,OAAgB;QACvB,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC;IACrC,CAAC;IAED,aAAa;QACX,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,KAAc;IAC/D,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,8BAAc,CAAC;IACpE,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,sFAAsF;AACtF,SAAgB,oBAAoB,CAAC,IAAe;IAClD,OAAO,IAAI,KAAK,8BAAc,CAAC;AACjC,CAAC"}