chorus-codes 0.7.0 → 0.7.2

package/dist/daemon/agents/kimi.js

@@ -0,0 +1,206 @@
+"use strict";
+/**
+ * Kimi CLI (MoonshotAI) agent shim.
+ *
+ * Uses `--afk` flag which auto-dismisses AskUserQuestion AND auto-approves
+ * tool calls. Equivalent to claude's auto-accept and codex's
+ * approval_policy=never. Without it kimi shows a one-time "Allow this tool?"
+ * dialog that would block a chorus-spawned reviewer indefinitely.
+ *
+ * If a new kimi release ever drops `--afk`, the error-detector pattern in
+ * src/daemon/error-detector.ts (kind='permission_prompt') is a defense-in-
+ * depth fallback — runner can capture-pane and send-keys to dismiss it.
+ *
+ * MCP context: kimi spawned as a reviewer doesn't talk to chorus's own MCP
+ * server (that would be circular). It just reads ask.md, writes answer.md.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.kimiShim = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const quote_js_1 = require("./quote.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+const atomic_write_js_1 = require("../../lib/atomic-write.js");
+const opencode_js_1 = require("./opencode.js");
+const sandbox_guard_js_1 = require("./sandbox-guard.js");
+let cachedTransport = null;
+function detectKimiTransport() {
+    if (cachedTransport)
+        return cachedTransport;
+    const override = process.env.CHORUS_KIMI_TRANSPORT;
+    if (override === 'kimi-cli' || override === 'opencode') {
+        cachedTransport = override;
+        return override;
+    }
+    // Probe the standalone kimi config — non-empty `default_model` OR any
+    // `[models.<name>]` table means the user has wired up a real model.
+    const configPath = node_path_1.default.join(node_os_1.default.homedir(), '.kimi', 'config.toml');
+    if (node_fs_1.default.existsSync(configPath)) {
+        try {
+            const body = node_fs_1.default.readFileSync(configPath, 'utf-8');
+            const defaultModel = body.match(/^\s*default_model\s*=\s*["']([^"']+)["']/m);
+            const hasDefault = defaultModel != null && defaultModel[1].length > 0;
+            const hasModelsTable = /^\[models\.[A-Za-z0-9_.-]+\]/m.test(body);
+            if (hasDefault || hasModelsTable) {
+                cachedTransport = 'kimi-cli';
+                return 'kimi-cli';
+            }
+        }
+        catch {
+            /* fall through */
+        }
+    }
+    cachedTransport = 'opencode';
+    return 'opencode';
+}
+/**
+ * Drop a per-participant `_meta.json` sidecar so the cockpit can show
+ * which binary + model actually ran. Without this the run page would
+ * always say "kimi-cli · kimi-k2.6" even when the underlying transport
+ * is opencode + opencode-go/kimi-k2.6. Best-effort — failures are silent
+ * (the sidecar is purely informational).
+ */
+function writeTransportMeta(cwd, binary, model) {
+    try {
+        // Atomic temp+rename — cockpit polls this file; a crash mid-write would
+        // otherwise leave a half-written JSON that the parser rejects. See
+        // src/lib/atomic-write.ts for the rationale.
+        const metaPath = node_path_1.default.join(cwd, '_meta.json');
+        (0, atomic_write_js_1.atomicWriteJsonSync)(metaPath, { binary, model, ts: Date.now() });
+    }
+    catch {
+        /* informational only */
+    }
+}
+exports.kimiShim = {
+    lineage: 'moonshot',
+    name: 'kimi-cli',
+    buildLaunchCommand(opts) {
+        (0, quote_js_1.validateValue)('model', opts.model);
+        // Same fail-closed gate as opencode — kimi-cli mirrors opencode's
+        // codebase and inherits the same gap. Audit D1 BLOCKER.
+        (0, sandbox_guard_js_1.assertSandboxSupported)(opts.sandbox, 'kimi');
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        let cmd = `cd ${cwd} && kimi`;
+        // --afk auto-dismisses prompts and auto-approves tool calls. Default ON
+        // for headless reviewer spawns; user can flip via settings if they want
+        // to be prompted in the kimi terminal session.
+        if (opts.autoApprove !== false) {
+            cmd += ` --afk`;
+        }
+        if (opts.model) {
+            cmd += ` -m ${(0, quote_js_1.quoteValue)(opts.model)}`;
+        }
+        return cmd;
+    },
+    // Defense-in-depth recovery if --afk is dropped or a future kimi rev shows
+    // a different prompt shape. The kimi standalone CLI mirrors opencode's
+    // 2-step dialog UX (it's the same upstream codebase) so we send the same
+    // 3-key sequence: `Right` highlights "Allow always", first `Enter` opens
+    // the nested "Confirm/Cancel" dialog (default = Confirm), second `Enter`
+    // confirms it. See opencode.ts for the full per-key rationale.
+    recoverKeys: {
+        permission_prompt: ['Right', 'Enter', 'Enter'],
+    },
+    formatPrompt(opts) {
+        const sentinel = opts.expectDoneSentinel
+            ? '\n\nWhen finished, end your response with: ## DONE'
+            : '';
+        return (`${opts.task}\n\n` +
+            `Read the prompt at: ${opts.promptFile}\n\n` +
+            `Write your full answer to: ${opts.answerFile}${sentinel}`);
+    },
+    /**
+     * Headless mode — branches on detected transport (see top-of-file
+     * comment for the kimi-cli vs opencode-go decision tree).
+     *
+     *   - kimi-cli: streaming `kimi --print --output-format stream-json`,
+     *     parsed via parseKimi (Claude-Code-compatible JSON events).
+     *
+     *   - opencode: one-shot `opencode run --format json --model
+     *     opencode-go/kimi-k2.6 "<prompt>"`, parsed via parseOpencode
+     *     (JSON-Lines, one text event per LLM message).
+     *
+     * Model normalisation: templates pass `kimi-k2.6` (plain). For the
+     * opencode path we prepend `opencode-go/` so the CLI routes through
+     * the Go subscription gateway.
+     */
+    runHeadless(opts) {
+        const sandboxError = (0, sandbox_guard_js_1.sandboxFailClosed)(opts.sandbox, 'kimi');
+        if (sandboxError)
+            return sandboxError;
+        const transport = detectKimiTransport();
+        if (transport === 'kimi-cli') {
+            const model = opts.model ?? 'kimi-k2.6';
+            writeTransportMeta(opts.cwd, 'kimi-cli', model);
+            const args = ['--print', '--output-format', 'stream-json'];
+            if (opts.model)
+                args.push('-m', opts.model);
+            const run = (0, headless_js_1.spawnHeadless)({
+                command: 'kimi',
+                args,
+                cwd: opts.cwd,
+                stdinPayload: opts.promptText,
+                parseLine: index_js_1.parseKimi,
+                // cli tag is the binary that actually ran — error messages quote
+                // it as "{cli} exited N", so misattributing failures to the wrong
+                // binary sends the user looking at the wrong PATH/auth/install.
+                cli: 'kimi',
+                timeoutMs: opts.timeoutMs,
+                abortSignal: opts.abortSignal,
+                heartbeat: false,
+            });
+            return run.events;
+        }
+        // opencode path — qualify the model with the opencode-go/ prefix.
+        const rawModel = opts.model ?? 'kimi-k2.6';
+        const model = rawModel.startsWith('opencode-go/')
+            ? rawModel
+            : `opencode-go/${rawModel}`;
+        writeTransportMeta(opts.cwd, 'opencode-cli', model);
+        // Argv-overflow guard: stash the prompt on disk and pass a tiny argv
+        // directive instead of the full prompt. Mirrors opencodeShim — see its
+        // runHeadless for why (opencode `run` only takes a positional argv).
+        const promptPath = node_path_1.default.join(opts.cwd, 'prompt.md');
+        node_fs_1.default.writeFileSync(promptPath, opts.promptText, 'utf-8');
+        const directive = `Open the file at this absolute path using your read tool: ${promptPath} ` +
+            `— follow the instructions inside exactly and respond with your full answer in this conversation, ending with ## DONE.`;
+        const opencodeArgs = ['run', '--format', 'json', '--model', model, directive];
+        // PTY-wrap the spawn — opencode 1.14.x's `run --format json` checks
+        // isatty(stdout) and emits zero bytes when piped (model still runs to
+        // completion, just no JSON output). The opencode shim's runHeadless
+        // wraps for the same reason. Without this, every Kimi reviewer routed
+        // through the opencode-go transport (the default when no standalone
+        // kimi config exists) silently produces 0-byte answer.md — exactly the
+        // failure mode the opencode PTY fix was written to prevent. Confirmed
+        // launch-eve by both deepseek and gemini reviewing the shims; the bug
+        // was a copy-paste oversight when the PTY fix landed in opencode.ts.
+        const { command, args } = (0, opencode_js_1.wrapWithPty)('opencode', opencodeArgs);
+        const run = (0, headless_js_1.spawnHeadless)({
+            command,
+            args,
+            cwd: opts.cwd,
+            parseLine: index_js_1.parseOpencode,
+            onExit: (fullStdout) => (0, index_js_1.parseOpencodeExit)(fullStdout),
+            // Tag the failure as 'opencode' — that's the binary that runs.
+            // The previous 'kimi' tag emitted "kimi exited 127: opencode:
+            // command not found" which sent the user hunting for a kimi-CLI
+            // PATH issue when the actual missing binary is opencode.
+            cli: 'opencode',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            heartbeat: true,
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // Kimi CLI uses Moonshot subscription on the user's plan, not metered API.
+        return 0;
+    },
+};
+//# sourceMappingURL=kimi.js.map

package/dist/daemon/agents/kimi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi.js","sourceRoot":"","sources":["../../../src/daemon/agents/kimi.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;AAEH,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAQ7B,yCAAkE;AAClE,gDAA+C;AAC/C,iDAAiF;AACjF,+DAAgE;AAChE,+CAA4C;AAC5C,yDAA+E;AAuB/E,IAAI,eAAe,GAAyB,IAAI,CAAC;AAEjD,SAAS,mBAAmB;IAC1B,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACvD,eAAe,GAAG,QAAQ,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACnE,IAAI,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7E,MAAM,UAAU,GAAG,YAAY,IAAI,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;gBACjC,eAAe,GAAG,UAAU,CAAC;gBAC7B,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,eAAe,GAAG,UAAU,CAAC;IAC7B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,MAAc,EAAE,KAAa;IACpE,IAAI,CAAC;QACH,wEAAwE;QACxE,mEAAmE;QACnE,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC9C,IAAA,qCAAmB,EAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAEY,QAAA,QAAQ,GAAc;IACjC,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,UAAU;IAEhB,kBAAkB,CAAC,IAAuB;QACxC,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,kEAAkE;QAClE,wDAAwD;QACxD,IAAA,yCAAsB,EAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE7C,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,MAAM,GAAG,UAAU,CAAC;QAE9B,wEAAwE;QACxE,wEAAwE;QACxE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,GAAG,IAAI,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,OAAO,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,+DAA+D;IAC/D,WAAW,EAAE;QACX,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU;KACxD;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,IAA0B;QACpC,MAAM,YAAY,GAAG,IAAA,oCAAiB,EAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QAEtC,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QAExC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC;YACxC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;gBACxB,OAAO,EAAE,MAAM;gBACf,IAAI;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,UAAU;gBAC7B,SAAS,EAAE,oBAAS;gBACpB,iEAAiE;gBACjE,kEAAkE;gBAClE,gEAAgE;gBAChE,GAAG,EAAE,MAAM;gBACX,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAED,kEAAkE;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;YAC/C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,eAAe,QAAQ,EAAE,CAAC;QAC9B,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QACpD,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACpD,iBAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,GACb,6DAA6D,UAAU,GAAG;YAC1E,uHAAuH,CAAC;QAC1H,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9E,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAW,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO;YACP,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,wBAAa;YACxB,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,4BAAiB,EAAC,UAAU,CAAC;YACrD,+DAA+D;YAC/D,8DAA8D;YAC9D,gEAAgE;YAChE,yDAAyD;YACzD,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,2EAA2E;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/dist/daemon/agents/opencode.js

@@ -0,0 +1,228 @@
+"use strict";
+/**
+ * OpenCode agent shim (Kimi/DeepSeek via OpenCode Go plan).
+ * Single-line prompts, plain text paths (see feedback_gemini_multiline_prompts.md).
+ * Always /clear between rounds (see feedback_opencode_clear_always.md).
+ * Never lead with `/` (slash-command) or `@` (file-attach popup).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.opencodeShim = void 0;
+exports.wrapWithPty = wrapWithPty;
+const quote_js_1 = require("./quote.js");
+const headless_js_1 = require("../headless.js");
+const index_js_1 = require("./parsers/index.js");
+const sandbox_guard_js_1 = require("./sandbox-guard.js");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+/**
+ * Wrap a command in a PTY using `script` so the child sees stdout as a TTY.
+ *
+ * Why opencode needs this: opencode 1.14.x's `run --format json` calls
+ * isatty(stdout) before emitting any output. When stdout is a pipe (which
+ * is always true under our spawnHeadless path), it produces zero bytes —
+ * the model still runs to completion (visible in opencode's debug log)
+ * but nothing reaches our parser. PTY wrapping is the only known fix
+ * short of upstream patching opencode.
+ *
+ * Cross-platform notes:
+ *   - Linux (util-linux script ≥2.39): `script -qfec "<quoted>" /dev/null`
+ *     -q suppresses header/footer, -f flushes after every write (no JSON
+ *     buffering), -e forwards the child's exit code so cli_failed
+ *     detection still works, -c runs a single command instead of a shell.
+ *   - macOS (BSD script): `script -q /dev/null <cmd> <args...>` — the
+ *     command is positional, no -c, no -f (BSD script always flushes).
+ *   - Anywhere else (Windows, missing `script`): pass through unwrapped.
+ *     The reviewer runner's "no events at all" safety net (added in the
+ *     same fix) will surface a `## REVIEWER FAILED · no_output` instead
+ *     of a silent 0-byte answer.
+ */
+function wrapWithPty(cmd, args) {
+    const platform = os.platform();
+    if (platform === 'linux') {
+        // Shell-quote each arg; util-linux script -c parses the string with shell rules.
+        const quoted = [cmd, ...args]
+            .map((a) => `'${a.replace(/'/g, `'\\''`)}'`)
+            .join(' ');
+        return { command: 'script', args: ['-qfec', quoted, '/dev/null'] };
+    }
+    if (platform === 'darwin') {
+        return { command: 'script', args: ['-q', '/dev/null', cmd, ...args] };
+    }
+    return { command: cmd, args: [...args] };
+}
+exports.opencodeShim = {
+    lineage: 'opencode',
+    name: 'opencode-cli',
+    // clearKeys are sent by the runner via mgr.sendKeys() before nudging.
+    // Pattern: Escape twice to dismiss overlays, then /clear + Enter.
+    clearKeys: ['Escape', 'Escape', '/clear', 'Enter'],
+    // Auto-recovery for OpenCode's permission dialog (bash command, file read,
+    // subagent spawn — same dialog shape, different triggers).
+    //
+    // OpenCode 1.14.x shows a TWO-STEP dialog when the user picks "Allow always":
+    //   1. First dialog (3 buttons, default = leftmost "Allow once"):
+    //          Allow once   Allow always   Reject
+    //      → `Right` moves the highlight from "Allow once" to "Allow always".
+    //      → `Enter` confirms and pops the second dialog.
+    //   2. Nested confirm (2 buttons, default = leftmost "Confirm"):
+    //          △ Always allow
+    //          This will allow the following patterns until OpenCode is restarted:
+    //          - cat *
+    //          Confirm   Cancel
+    //      → `Enter` confirms (default selection is "Confirm"). Dialog dismisses.
+    //
+    // Earlier `[Right, Enter]` only cleared step 1; step 2 sat there forever, the
+    // detector's dedup suppressed re-emission of `permission_prompt` (same kind),
+    // and the reviewer phase eventually timed out with no answer. Worse: if the
+    // dedup ever cleared (e.g. pane redraw scrolled "Always allow" off-screen)
+    // and a fresh recovery fired on dialog 2, `Right` would move "Confirm" →
+    // "Cancel" and `Enter` would REJECT the command. This sequence sends all
+    // three keys atomically via a single `tmux send-keys` call — bubbletea
+    // queues them and processes one at a time, so even if dialog 2 hasn't
+    // rendered yet when the third Enter arrives, it's queued and consumed when
+    // the input loop next polls.
+    //
+    // Same dialog shape covers every recoverable opencode prompt we've seen
+    // (git diff, Read on external path, Task subagent spawn). If a future
+    // opencode reorders buttons or adds a step 3, this sequence may fail
+    // safely (extra Enters land as harmless newlines in chat input) — phase
+    // timeout will catch it. See error-detector.ts for the matching narrowed
+    // regex that prevents false-positives on the nested step-2 heading.
+    recoverKeys: {
+        permission_prompt: ['Right', 'Enter', 'Enter'],
+    },
+    buildLaunchCommand(opts) {
+        (0, quote_js_1.validateValue)('model', opts.model);
+        // Fail-closed when the user requested strict sandbox: the opencode
+        // CLI doesn't expose a read-only flag we can map to. Pre-fix we
+        // silently spawned anyway and the "Strict" label became decorative
+        // for any opencode-routed reviewer (Audit D1 BLOCKER). Throwing
+        // here surfaces in the runner as a `cli_error` with an actionable
+        // message; the user can switch to a lineage that supports strict
+        // (claude / codex / gemini) or fall back to workspace.
+        (0, sandbox_guard_js_1.assertSandboxSupported)(opts.sandbox, 'opencode');
+        const cwd = (0, quote_js_1.quotePath)(opts.cwd);
+        let cmd = `cd ${cwd} && opencode`;
+        if (opts.model) {
+            cmd += ` --model ${opts.model}`;
+        }
+        return cmd;
+    },
+    formatPrompt(opts) {
+        // CRITICAL: Single-line only. Never lead with `/` or `@`.
+        // Plain text path reference: "at /abs/path" form.
+        const sentinel = opts.expectDoneSentinel ? ' End with ## DONE.' : '';
+        return (`Open the file at this absolute path using your read tool: ${opts.promptFile} ` +
+            `— follow the <ask> block, write your full answer to ${opts.answerFile}.${sentinel}`);
+    },
+    /**
+     * Headless mode (`opencode run --format json "<tiny argv> @prompt.md"`).
+     *
+     * OpenCode `run` is one-shot — emits a single JSON blob at the end with
+     * the final message. parseOpencode returns [] on every line; the on-exit
+     * handler parses the full blob into a message_done event. Heartbeat is on
+     * so the UI shows the agent is alive during the silent run.
+     *
+     * Argv-overflow guard: opencode's `run` only accepts the prompt as a
+     * positional argv (no stdin support — verified 2026-05-02 with `opencode
+     * run --help`). For chorus self-reviews on real PR diffs the prompt
+     * crosses 100KB and shell-quoting / ARG_MAX bites. Workaround mirrors
+     * the tmux path: write the prompt to `<cwd>/prompt.md` and pass a tiny
+     * directive on argv telling opencode to read that file using its read
+     * tool. The chat dir is always the cwd, so the relative path resolves
+     * inside opencode's allowed workspace.
+     */
+    runHeadless(opts) {
+        // Same fail-closed gate as the tmux path. See buildLaunchCommand
+        // above for rationale. Returns a single-shot async iterable that
+        // yields one error event so the runner records cli_error and the
+        // cockpit shows the user a clear "switch lineage" message instead
+        // of pretending the run completed normally.
+        const sandboxError = (0, sandbox_guard_js_1.sandboxFailClosed)(opts.sandbox, 'opencode');
+        if (sandboxError)
+            return sandboxError;
+        // Sidestep both ARG_MAX and shell-escape pitfalls by stashing the prompt
+        // on disk. The chat dir already exists (the runner creates it before
+        // spawning), so this never fails on first call.
+        const promptPath = path.join(opts.cwd, 'prompt.md');
+        fs.writeFileSync(promptPath, opts.promptText, 'utf-8');
+        // CRITICAL: Single-line message. Never lead with `/` or `@`.
+        // Plain text path reference matches the tmux formatPrompt pattern.
+        // Don't tell opencode to write answer.md — the runner captures stdout
+        // JSON via parseOpencodeExit and writes the file itself; a tool-side
+        // write would race with the runner's clobber on message_done.
+        const directive = `Open the file at this absolute path using your read tool: ${promptPath} ` +
+            `— follow the instructions inside exactly and respond with your full answer in this conversation, ending with ## DONE.`;
+        const opencodeArgs = ['run', '--format', 'json'];
+        if (opts.model)
+            opencodeArgs.push('--model', opts.model);
+        opencodeArgs.push(directive);
+        // PTY wrapping is non-optional: opencode 1.14.x's `run --format json`
+        // checks isatty(stdout) and refuses to emit JSON when stdout is a pipe.
+        // The headless path here always pipes stdout (spawn child_process), so
+        // without a PTY the child runs the model to completion (visible in the
+        // opencode log under `service=bus type=message.part.delta publishing`)
+        // but never writes a single byte to our pipe. The watcher then sees an
+        // empty stream, no message_done, no error — answer.md ends up 0 bytes
+        // and the reviewer card renders "errored — didn't produce any output".
+        //
+        // util-linux `script -qfec "<cmd>" /dev/null` allocates a PTY on stdout
+        // for the wrapped command; -q suppresses script's header/footer; -f
+        // flushes after every write so JSON-Lines arrive in real time; -e
+        // forwards the child exit code so cli_failed detection still works.
+        // Header/footer are absent under -q, so parseOpencode (which already
+        // tryJson's every line and discards non-JSON) needs no change.
+        const { command, args } = wrapWithPty('opencode', opencodeArgs);
+        const run = (0, headless_js_1.spawnHeadless)({
+            command,
+            args,
+            cwd: opts.cwd,
+            parseLine: index_js_1.parseOpencode,
+            onExit: (fullStdout) => (0, index_js_1.parseOpencodeExit)(fullStdout),
+            cli: 'opencode',
+            timeoutMs: opts.timeoutMs,
+            abortSignal: opts.abortSignal,
+            heartbeat: true, // one-shot — heartbeat keeps UI alive
+        });
+        return run.events;
+    },
+    estimateCostUsd() {
+        // OpenCode Go subscription plan (Kimi/DeepSeek), not per-call API
+        return 0;
+    },
+};
+//# sourceMappingURL=opencode.js.map

package/dist/daemon/agents/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../../src/daemon/agents/opencode.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCH,kCAgBC;AA9CD,yCAAsD;AACtD,gDAA+C;AAC/C,iDAAsE;AACtE,yDAA+E;AAC/E,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,WAAW,CACzB,GAAW,EACX,IAAuB;IAEvB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,iFAAiF;QACjF,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;aAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AAC3C,CAAC;AAEY,QAAA,YAAY,GAAc;IACrC,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,cAAc;IAEpB,sEAAsE;IACtE,kEAAkE;IAClE,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAU;IAE3D,2EAA2E;IAC3E,2DAA2D;IAC3D,EAAE;IACF,8EAA8E;IAC9E,kEAAkE;IAClE,8CAA8C;IAC9C,0EAA0E;IAC1E,sDAAsD;IACtD,iEAAiE;IACjE,0BAA0B;IAC1B,+EAA+E;IAC/E,mBAAmB;IACnB,4BAA4B;IAC5B,8EAA8E;IAC9E,EAAE;IACF,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,2EAA2E;IAC3E,6BAA6B;IAC7B,EAAE;IACF,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,WAAW,EAAE;QACX,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU;KACxD;IAED,kBAAkB,CAAC,IAAuB;QACxC,IAAA,wBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,mEAAmE;QACnE,gEAAgE;QAChE,mEAAmE;QACnE,gEAAgE;QAChE,kEAAkE;QAClE,iEAAiE;QACjE,uDAAuD;QACvD,IAAA,yCAAsB,EAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,MAAM,GAAG,cAAc,CAAC;QAElC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,YAAY,IAAI,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,0DAA0D;QAC1D,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAErE,OAAO,CACL,6DAA6D,IAAI,CAAC,UAAU,GAAG;YAC/E,uDAAuD,IAAI,CAAC,UAAU,IAAI,QAAQ,EAAE,CACrF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,IAA0B;QACpC,iEAAiE;QACjE,iEAAiE;QACjE,iEAAiE;QACjE,kEAAkE;QAClE,4CAA4C;QAC5C,MAAM,YAAY,GAAG,IAAA,oCAAiB,EAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjE,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QAEtC,yEAAyE;QACzE,qEAAqE;QACrE,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACpD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEvD,6DAA6D;QAC7D,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,8DAA8D;QAC9D,MAAM,SAAS,GACb,6DAA6D,UAAU,GAAG;YAC1E,uHAAuH,CAAC;QAE1H,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7B,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,EAAE;QACF,wEAAwE;QACxE,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO;YACP,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,wBAAa;YACxB,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,4BAAiB,EAAC,UAAU,CAAC;YACrD,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,EAAE,sCAAsC;SACxD,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,kEAAkE;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}