chorus-codes 0.7.0 → 0.7.2

package/dist/daemon/agents/parsers/opencode.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseOpencode = parseOpencode;
+exports.parseOpencodeExit = parseOpencodeExit;
+const shared_js_1 = require("./shared.js");
+function parseOpencode(line) {
+    const obj = (0, shared_js_1.tryJson)(line);
+    if (!obj || obj.type !== 'text')
+        return [];
+    const part = obj.part;
+    const text = part && typeof part.text === 'string' ? part.text : '';
+    if (text.length === 0)
+        return [];
+    return [{ type: 'text_delta', text }];
+}
+/**
+ * Walk every line of opencode JSON-Lines stdout, sum tokens + USD cost
+ * from every `step_finish`, return undefined when no step_finish carried
+ * any usable counts.
+ *
+ * Cost summing rationale: opencode's step_finish carries a per-step
+ * `cost` (USD) computed against opencode-go's published per-token
+ * pricing. Multi-step sessions (tool calls) accrue cost per step; summing
+ * yields total session cost.
+ */
+function aggregateOpencodeUsage(fullStdout) {
+    const acc = {};
+    let any = false;
+    for (const line of fullStdout.split('\n')) {
+        const obj = (0, shared_js_1.tryJson)(line);
+        if (!obj || obj.type !== 'step_finish')
+            continue;
+        const part = obj.part;
+        const tokens = part?.tokens;
+        if (tokens) {
+            if (typeof tokens.input === 'number') {
+                acc.inputTokens = (acc.inputTokens ?? 0) + tokens.input;
+                any = true;
+            }
+            if (typeof tokens.output === 'number') {
+                acc.outputTokens = (acc.outputTokens ?? 0) + tokens.output;
+                any = true;
+            }
+            if (typeof tokens.cache?.read === 'number') {
+                acc.cachedInputTokens = (acc.cachedInputTokens ?? 0) + tokens.cache.read;
+                any = true;
+            }
+        }
+        // Cost is present on every step_finish opencode emits, independent
+        // of whether tokens.* fields were populated. A malformed-tokens-but-
+        // known-cost step still represents real spend.
+        if (typeof part?.cost === 'number') {
+            acc.costUsd = (acc.costUsd ?? 0) + part.cost;
+            any = true;
+        }
+    }
+    return any ? acc : undefined;
+}
+/**
+ * OpenCode on-exit handler. Two responsibilities:
+ *
+ * 1. JSON-Lines path (modern `opencode run --format json`):
+ *    parseOpencode already emitted text_delta events; the runner
+ *    accumulated them. Emit a single synthetic message_done with
+ *    finalText="" (runner falls back to its accumulator) plus the SUM
+ *    of step_finish token counts across the whole session.
+ *
+ * 2. Single-blob path (older opencode builds, fallback shape): parse
+ *    the whole stdout as a JSON object, lift `message`/`result`/`output`
+ *    as finalText. No usage available.
+ *
+ * Either way: ONE message_done — never multiple — so the runner's
+ * participant_done lifecycle fires exactly once.
+ *
+ * Always emit message_done when JSON-Lines is detected, even when no
+ * step_finish was found. Earlier code returned [] when usage was
+ * undefined, which dropped the terminal event entirely and caused the
+ * runner's `for await` loop to exit without firing participant_done —
+ * the phase then sat in `working` until the watchdog timeout.
+ */
+function parseOpencodeExit(fullStdout) {
+    if (fullStdout.trim().length === 0)
+        return [];
+    const firstLine = fullStdout.split('\n').find((l) => l.trim().length > 0);
+    if (firstLine) {
+        const probe = (0, shared_js_1.tryJson)(firstLine);
+        if (probe && typeof probe.type === 'string') {
+            const usage = aggregateOpencodeUsage(fullStdout);
+            return [
+                usage
+                    ? { type: 'message_done', finalText: '', usage }
+                    : { type: 'message_done', finalText: '' },
+            ];
+        }
+    }
+    const obj = (0, shared_js_1.tryJson)(fullStdout);
+    if (!obj)
+        return [{ type: 'message_done', finalText: fullStdout }];
+    const text = (typeof obj.message === 'string' && obj.message) ||
+        (typeof obj.result === 'string' && obj.result) ||
+        (typeof obj.output === 'string' && obj.output) ||
+        fullStdout;
+    return [{ type: 'message_done', finalText: text }];
+}
+//# sourceMappingURL=opencode.js.map

package/dist/daemon/agents/parsers/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../../../src/daemon/agents/parsers/opencode.ts"],"names":[],"mappings":";;AAiCA,sCAOC;AA4ED,8CAsBC;AA3GD,2CAAsC;AAEtC,SAAgB,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAwC,CAAC;IACjE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AASD;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAAC,UAAkB;IAChD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAwC,CAAC;QACjE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,SAAS;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,EAAE,MAER,CAAC;QACd,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,GAAG,CAAC,WAAW,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;gBACxD,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACtC,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3D,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3C,GAAG,CAAC,iBAAiB,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzE,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAI,IAAI,CAAC,IAAe,CAAC;YACzD,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,iBAAiB,CAAC,UAAkB;IAClD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,SAAS,CAAwC,CAAC;QACxE,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACjD,OAAO;gBACL,KAAK;oBACH,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE;oBAChD,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE;aAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,UAAU,CAAwC,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,MAAM,IAAI,GACR,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC;QAChD,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;QAC9C,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;QAC9C,UAAU,CAAC;IACb,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/daemon/agents/parsers/openrouter.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseOpenRouterSSE = parseOpenRouterSSE;
+const shared_js_1 = require("./shared.js");
+function parseOpenRouterSSE(line) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0)
+        return [];
+    if (trimmed === '[DONE]')
+        return [];
+    // OpenRouter passes through OpenAI-style "OPENROUTER PROCESSING"
+    // comments on slow upstreams as `: <message>` — these aren't JSON.
+    if (trimmed.startsWith(':'))
+        return [];
+    const obj = (0, shared_js_1.tryJson)(trimmed);
+    if (!obj)
+        return [];
+    // Error envelope (e.g. invalid model, rate limit). OpenRouter wraps
+    // these as `{"error":{"message":"...","code":...,"metadata":...}}`.
+    if (obj.error && typeof obj.error === 'object') {
+        const err = obj.error;
+        const message = typeof err.message === 'string' ? err.message : 'OpenRouter stream error';
+        const code = typeof err.code === 'string' || typeof err.code === 'number'
+            ? String(err.code)
+            : 'openrouter_error';
+        return [{ type: 'error', kind: code, message }];
+    }
+    const events = [];
+    const choices = obj.choices;
+    if (Array.isArray(choices) && choices.length > 0) {
+        for (const c of choices) {
+            if (!c || typeof c !== 'object')
+                continue;
+            const choice = c;
+            const delta = choice.delta ?? {};
+            if (typeof delta.content === 'string' && delta.content.length > 0) {
+                events.push({ type: 'text_delta', text: delta.content });
+            }
+            // finish_reason is set ('stop' | 'length' | 'content_filter' |
+            // ...) on the terminal chunk. We don't emit message_done here
+            // because the usage-bearing chunk often arrives AFTER the finish
+            // chunk; the message_done fires on the usage chunk below.
+        }
+    }
+    // Usage chunk — sent LAST when stream_options.include_usage is set.
+    // cost is OpenRouter-specific (USD). Emit a synthetic message_done
+    // with empty finalText so the runner's accumulator (which holds the
+    // assembled finalText) wins, but usage is attached.
+    const usage = obj.usage;
+    if (usage && typeof usage === 'object') {
+        const inputTokens = typeof usage.prompt_tokens === 'number' ? usage.prompt_tokens : undefined;
+        const outputTokens = typeof usage.completion_tokens === 'number'
+            ? usage.completion_tokens
+            : undefined;
+        const cost = typeof usage.cost === 'number' ? usage.cost : undefined;
+        const u = {};
+        if (inputTokens !== undefined)
+            u.inputTokens = inputTokens;
+        if (outputTokens !== undefined)
+            u.outputTokens = outputTokens;
+        if (cost !== undefined)
+            u.costUsd = cost;
+        if (Object.keys(u).length > 0) {
+            events.push({ type: 'message_done', finalText: '', usage: u });
+        }
+    }
+    return events;
+}
+//# sourceMappingURL=openrouter.js.map

package/dist/daemon/agents/parsers/openrouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openrouter.js","sourceRoot":"","sources":["../../../../src/daemon/agents/parsers/openrouter.ts"],"names":[],"mappings":";;AA6BA,gDAiEC;AAnED,2CAAsC;AAEtC,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACpC,iEAAiE;IACjE,mEAAmE;IACnE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAwC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAgC,CAAC;QACjD,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAC5E,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC1D,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAClB,CAAC,CAAC,kBAAkB,CAAC;QACzB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAC1C,MAAM,MAAM,GAAG,CAA4B,CAAC;YAC5C,MAAM,KAAK,GAAI,MAAM,CAAC,KAA6C,IAAI,EAAE,CAAC;YAC1E,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,+DAA+D;YAC/D,8DAA8D;YAC9D,iEAAiE;YACjE,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,oDAAoD;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAA4C,CAAC;IAC/D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,WAAW,GACf,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,YAAY,GAChB,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;YACzC,CAAC,CAAC,KAAK,CAAC,iBAAiB;YACzB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,CAAC,GAAsE,EAAE,CAAC;QAChF,IAAI,WAAW,KAAK,SAAS;YAAE,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;QAC3D,IAAI,YAAY,KAAK,SAAS;YAAE,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;QAC9D,IAAI,IAAI,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/daemon/agents/parsers/shared.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tryJson = tryJson;
+/** JSON.parse → undefined on malformed lines (CLIs sometimes emit blank
+ *  lines, log lines, or partial frames in error paths). */
+function tryJson(line) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=shared.js.map

package/dist/daemon/agents/parsers/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../../src/daemon/agents/parsers/shared.ts"],"names":[],"mappings":";;AAEA,0BAQC;AAVD;2DAC2D;AAC3D,SAAgB,OAAO,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/daemon/agents/preflight.js

@@ -0,0 +1,83 @@
+"use strict";
+/**
+ * Pre-spawn hooks: prepare each CLI's local config so it doesn't stop on
+ * first-launch interactive prompts that would block the runner.
+ *
+ * Currently handles:
+ *   - Claude Code: ~/.claude.json projects.<cwd>.hasTrustDialogAccepted = true
+ *   - Codex CLI: <CODEX_HOME>/config.toml [projects."<cwd>"] trust_level = "trusted"
+ *
+ * Gemini and OpenCode have auth-on-first-launch flows we can't paper over with
+ * config; the user sets those up once during onboarding.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.preTrustClaudeWorkspace = preTrustClaudeWorkspace;
+exports.preTrustCodexWorkspace = preTrustCodexWorkspace;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_os_1 = __importDefault(require("node:os"));
+/**
+ * Pre-suppress every Claude Code first-launch prompt that would block a
+ * spawned doer/reviewer. Currently:
+ *   - projects.<cwd>.hasTrustDialogAccepted (workspace trust dialog)
+ *   - hasCompletedClaudeInChromeOnboarding (top-level "Claude in Chrome (Beta)" splash)
+ *
+ * Add new keys here as Claude Code releases new one-time popups. Each fix is
+ * a small global tax we pay once, vs. one stuck-doer per missed splash.
+ *
+ * Idempotent. Returns early if config is corrupt rather than wiping it.
+ */
+function preTrustClaudeWorkspace(cwd) {
+    const configPath = node_path_1.default.join(node_os_1.default.homedir(), '.claude.json');
+    let config = {};
+    if (node_fs_1.default.existsSync(configPath)) {
+        try {
+            const raw = node_fs_1.default.readFileSync(configPath, 'utf-8');
+            config = JSON.parse(raw);
+        }
+        catch {
+            // Corrupt config — skip rather than wipe the user's file.
+            return;
+        }
+    }
+    const projects = (config.projects && typeof config.projects === 'object'
+        ? config.projects
+        : {});
+    const existing = projects[cwd] ?? {};
+    const trustOk = existing.hasTrustDialogAccepted === true;
+    const chromeOk = config.hasCompletedClaudeInChromeOnboarding === true;
+    if (trustOk && chromeOk)
+        return; // nothing to write
+    projects[cwd] = {
+        ...existing,
+        hasTrustDialogAccepted: true,
+    };
+    node_fs_1.default.writeFileSync(configPath, JSON.stringify({
+        ...config,
+        projects,
+        hasCompletedClaudeInChromeOnboarding: true,
+    }, null, 2), 'utf-8');
+}
+/**
+ * Mark `cwd` as trusted in <CODEX_HOME>/config.toml so Codex skips its
+ * trust prompt. Appends a [projects."<cwd>"] block if missing.
+ */
+function preTrustCodexWorkspace(codexHome, cwd) {
+    const configPath = node_path_1.default.join(codexHome, 'config.toml');
+    let body = '';
+    if (node_fs_1.default.existsSync(configPath)) {
+        body = node_fs_1.default.readFileSync(configPath, 'utf-8');
+    }
+    else {
+        node_fs_1.default.mkdirSync(codexHome, { recursive: true });
+    }
+    const marker = `[projects."${cwd}"]`;
+    if (body.includes(marker))
+        return; // already present
+    const block = `\n${marker}\ntrust_level = "trusted"\n`;
+    node_fs_1.default.writeFileSync(configPath, body + block, 'utf-8');
+}
+//# sourceMappingURL=preflight.js.map

package/dist/daemon/agents/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../../src/daemon/agents/preflight.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;AAiBH,0DAyCC;AAMD,wDAeC;AA7ED,sDAAyB;AACzB,0DAA6B;AAC7B,sDAAyB;AAEzB;;;;;;;;;;GAUG;AACH,SAAgB,uBAAuB,CAAC,GAAW;IACjD,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,MAAM,GAA4B,EAAE,CAAC;IAEzC,IAAI,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACtE,CAAC,CAAE,MAAM,CAAC,QAAoD;QAC9D,CAAC,CAAC,EAAE,CAAC,CAAC;IAER,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,sBAAsB,KAAK,IAAI,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,oCAAoC,KAAK,IAAI,CAAC;IACtE,IAAI,OAAO,IAAI,QAAQ;QAAE,OAAO,CAAC,mBAAmB;IAEpD,QAAQ,CAAC,GAAG,CAAC,GAAG;QACd,GAAG,QAAQ;QACX,sBAAsB,EAAE,IAAI;KAC7B,CAAC;IAEF,iBAAE,CAAC,aAAa,CACd,UAAU,EACV,IAAI,CAAC,SAAS,CACZ;QACE,GAAG,MAAM;QACT,QAAQ;QACR,oCAAoC,EAAE,IAAI;KAC3C,EACD,IAAI,EACJ,CAAC,CACF,EACD,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,SAAiB,EAAE,GAAW;IACnE,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,IAAI,GAAG,EAAE,CAAC;IAEd,IAAI,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,GAAG,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,kBAAkB;IAErD,MAAM,KAAK,GAAG,KAAK,MAAM,6BAA6B,CAAC;IACvD,iBAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC"}

package/dist/daemon/agents/quote.js

@@ -0,0 +1,45 @@
+"use strict";
+/**
+ * Shell-quoting and validation helpers.
+ * Used by all agent shims to safely quote values for tmux launch commands.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.quotePath = void 0;
+exports.quoteValue = quoteValue;
+exports.validateValue = validateValue;
+const SHELL_METACHARACTERS = /[$\`;|&<>()\\"']/;
+class InvalidValueError extends Error {
+    constructor(field, value) {
+        super(`Invalid ${field}: contains shell metacharacters. ` +
+            `Got: ${value}`);
+        this.name = 'InvalidValueError';
+    }
+}
+/**
+ * Quote a string for safe use in shell commands (bash %q equivalent).
+ * Uses single-quote wrapping with escaped embedded quotes.
+ * Safe to pass to `tmux new-session -d -s <name> "..."`.
+ */
+function quoteValue(s) {
+    // Wrap in single quotes, escape any embedded single quotes
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * Quote a filesystem path for safe use in shell commands.
+ * Identical to quoteValue; kept separate for semantic clarity.
+ */
+exports.quotePath = quoteValue;
+/**
+ * Validate a value against shell metacharacters.
+ * Throws InvalidValueError if validation fails.
+ * Use BEFORE building launch commands to catch bad input early.
+ */
+function validateValue(field, value) {
+    if (value === undefined || value === '') {
+        return; // empty/undefined is OK
+    }
+    if (SHELL_METACHARACTERS.test(value)) {
+        throw new InvalidValueError(field, value);
+    }
+}
+//# sourceMappingURL=quote.js.map

package/dist/daemon/agents/quote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.js","sourceRoot":"","sources":["../../../src/daemon/agents/quote.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAmBH,gCAGC;AAaD,sCAOC;AAxCD,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEhD,MAAM,iBAAkB,SAAQ,KAAK;IACnC,YAAY,KAAa,EAAE,KAAa;QACtC,KAAK,CACH,WAAW,KAAK,mCAAmC;YACnD,QAAQ,KAAK,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,CAAS;IAClC,2DAA2D;IAC3D,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED;;;GAGG;AACU,QAAA,SAAS,GAAG,UAAU,CAAC;AAEpC;;;;GAIG;AACH,SAAgB,aAAa,CAAC,KAAa,EAAE,KAAyB;IACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,CAAC,wBAAwB;IAClC,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/daemon/agents/sandbox-guard.js

@@ -0,0 +1,69 @@
+"use strict";
+/**
+ * Fail-closed sandbox enforcement for shims that can't translate the
+ * 'strict' sandbox profile to a CLI flag.
+ *
+ * Audit D1 (pre-launch dogfood) found that opencode + kimi shims
+ * accepted but ignored `opts.sandbox`. The "Strict" cockpit label
+ * became decorative for ~40% of reviewers — a doer running through
+ * an opencode-go gateway could write files and execute shell
+ * regardless of the visual setting.
+ *
+ * Long-term fix is to map 'strict' to upstream CLI flags as those
+ * land. Until then, refuse to spawn rather than silently misrepresent
+ * the sandbox state. The tmux path throws (the runner converts to a
+ * cli_error event); the headless path returns a one-shot async
+ * iterable that emits the same error event shape.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertSandboxSupported = assertSandboxSupported;
+exports.sandboxFailClosed = sandboxFailClosed;
+/**
+ * Throw on `strict`; otherwise no-op. Use from `buildLaunchCommand`
+ * where the shim returns a string (tmux path). The runner catches the
+ * throw and surfaces it as a cli_error to the cockpit.
+ */
+function assertSandboxSupported(sandbox, cli) {
+    if (sandbox === 'strict') {
+        throw new Error(`${cli} shim cannot enforce sandbox=strict (no upstream read-only flag yet). ` +
+            `Switch to a lineage that supports strict (claude / codex / gemini), or relax to 'workspace'.`);
+    }
+}
+/**
+ * Return a one-shot AsyncIterable<AgentEvent> that emits a
+ * `sandbox_unsupported` error when the shim can't enforce strict.
+ * Call from `runHeadless` like:
+ *
+ *   const sb = sandboxFailClosed(opts.sandbox, 'opencode');
+ *   if (sb) return sb;
+ *
+ * Returns null when the requested sandbox is supported (or undefined),
+ * letting the caller proceed with the normal spawn path.
+ */
+function sandboxFailClosed(sandbox, cli) {
+    if (sandbox !== 'strict')
+        return null;
+    const message = `${cli} shim cannot enforce sandbox=strict (no upstream read-only flag yet). ` +
+        `Switch to a lineage that supports strict (claude / codex / gemini), or relax to 'workspace'.`;
+    return {
+        [Symbol.asyncIterator]() {
+            let yielded = false;
+            return {
+                async next() {
+                    if (yielded)
+                        return { value: undefined, done: true };
+                    yielded = true;
+                    return {
+                        value: {
+                            type: 'error',
+                            kind: 'sandbox_unsupported',
+                            message,
+                        },
+                        done: false,
+                    };
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=sandbox-guard.js.map

package/dist/daemon/agents/sandbox-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-guard.js","sourceRoot":"","sources":["../../../src/daemon/agents/sandbox-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAYH,wDAUC;AAaD,8CA2BC;AAvDD;;;;GAIG;AACH,SAAgB,sBAAsB,CACpC,OAAmC,EACnC,GAAW;IAEX,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,wEAAwE;YAC5E,8FAA8F,CACjG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,iBAAiB,CAC/B,OAAmC,EACnC,GAAW;IAEX,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GACX,GAAG,GAAG,wEAAwE;QAC9E,8FAA8F,CAAC;IACjG,OAAO;QACL,CAAC,MAAM,CAAC,aAAa,CAAC;YACpB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,IAAI,OAAO;wBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBACrD,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO;wBACL,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,qBAAqB;4BAC3B,OAAO;yBACR;wBACD,IAAI,EAAE,KAAK;qBACZ,CAAC;gBACJ,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/daemon/agents/types.js

@@ -0,0 +1,6 @@
+"use strict";
+// Agent shim interface — every CLI lineage implements this.
+// Pattern ported from openbridge's lib/agents/<name>.sh; see
+// /home/ubuntu/.claude/projects/-home-ubuntu/memory/openbridge_architecture.md
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/daemon/agents/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/daemon/agents/types.ts"],"names":[],"mappings":";AAAA,4DAA4D;AAC5D,6DAA6D;AAC7D,+EAA+E"}

package/dist/daemon/api-response.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * Wire envelope shared by every daemon HTTP response.
+ *
+ * Why a uniform envelope: the cockpit's fetchFromDaemon helper inspects
+ * `ok` and either returns `data` or throws a DaemonError carrying
+ * `error.code` + `error.message`. Keeping these types in one place lets
+ * the route modules and the chats-flow code in index.ts stay aligned
+ * without each importing fastify or redefining the shape inline.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorResponse = errorResponse;
+exports.successResponse = successResponse;
+exports.listEnvelope = listEnvelope;
+exports.sendError = sendError;
+function errorResponse(code, message, details) {
+    return {
+        ok: false,
+        error: details ? { code, message, details } : { code, message },
+    };
+}
+function successResponse(data) {
+    return {
+        ok: true,
+        data,
+    };
+}
+function listEnvelope(items, hasMore = false) {
+    return { items, total: items.length, hasMore };
+}
+/**
+ * Default HTTP status per ErrorCode. Routes can override but should
+ * very rarely need to — these match standard REST semantics.
+ */
+const DEFAULT_STATUS = {
+    validation: 400,
+    bad_request: 400,
+    parse_error: 400,
+    not_found: 404,
+    conflict: 409,
+    cli_failed: 502,
+    connection_failed: 502,
+    openrouter_error: 502,
+    db_error: 500,
+    stats_error: 500,
+    internal: 500,
+};
+/**
+ * Send an error response with the right HTTP status code AND the
+ * canonical envelope. Replaces the older pattern of returning the body
+ * from `errorResponse(...)` without setting `reply.code`, which left
+ * 4xx-shaped errors arriving as HTTP 200.
+ *
+ * Use this in route handlers from now on. Existing `errorResponse(...)`
+ * call-sites that still bare-return the body keep working (HTTP 200 +
+ * `ok: false`) until migrated; cockpit + MCP both read the envelope, not
+ * the status. New code should use `sendError` so we can drop the legacy
+ * pattern in v0.8.
+ */
+function sendError(reply, code, message, details, statusOverride) {
+    const status = statusOverride ?? DEFAULT_STATUS[code] ?? 500;
+    reply.code(status);
+    return errorResponse(code, message, details);
+}
+//# sourceMappingURL=api-response.js.map

package/dist/daemon/api-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-response.js","sourceRoot":"","sources":["../../src/daemon/api-response.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAsDH,sCASC;AAED,0CAKC;AAiBD,oCAEC;AAgCD,8BAUC;AA7ED,SAAgB,aAAa,CAC3B,IAAwB,EACxB,OAAe,EACf,OAAiC;IAEjC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;KAChE,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAI,IAAO;IACxC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI;KACL,CAAC;AACJ,CAAC;AAiBD,SAAgB,YAAY,CAAI,KAAU,EAAE,OAAO,GAAG,KAAK;IACzD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAA2B;IAC7C,UAAU,EAAE,GAAG;IACf,WAAW,EAAE,GAAG;IAChB,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,UAAU,EAAE,GAAG;IACf,iBAAiB,EAAE,GAAG;IACtB,gBAAgB,EAAE,GAAG;IACrB,QAAQ,EAAE,GAAG;IACb,WAAW,EAAE,GAAG;IAChB,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CACvB,KAAmB,EACnB,IAAe,EACf,OAAe,EACf,OAAiC,EACjC,cAAuB;IAEvB,MAAM,MAAM,GAAG,cAAc,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC"}