codedeck 0.2.0 → 0.3.0

package/dist/open/runtime.js

@@ -0,0 +1,597 @@
+import { spawn } from "node:child_process";
+import { randomInt } from "node:crypto";
+import { EventEmitter } from "node:events";
+import fs from "node:fs";
+import { constants } from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { getPaths } from "../config/paths.js";
+import { getCliName } from "../cli/cli-name.js";
+import { INDENT, LOGO, renderFarewell, renderLogo } from "../cli/ui.js";
+import { ptyUnavailableReason, startPtySession } from "./pty.js";
+/**
+ * "replace" drops Claude Code's own hundred-odd verbs instead of adding to
+ * them, so this list is the entire vocabulary and has to be long enough that a
+ * single session does not visibly cycle it.
+ *
+ * The verb is glyphs rather than a word because the spinner symbol itself
+ * cannot be reached. Its frames are module constants (`["·","✢","✳","✶","✻",
+ * "✽"]`, mirrored for the ping-pong) picked only by whether TERM is
+ * xterm-ghostty, and no setting touches them. The verb is the one part of that
+ * line CodeDeck owns, so the character is made there instead.
+ *
+ * Halfwidth katakana on purpose, mixed with digits. It is the one dense
+ * non-latin block that is single width, so a row of it cannot push the elapsed
+ * time and token count out of alignment the way fullwidth kana would, and the
+ * fonts that ship with a terminal carry it.
+ *
+ * Nothing is lost by dropping the words. The line still carries the elapsed
+ * seconds, the token count and the effort, which is the part anyone reads.
+ */
+export const SPINNER_VERBS = [
+    "ﾊ7ｦ2ｲ9ｷ4ｼ1ﾏ8",
+    "ｷ0ｼ9ﾏ3ﾃ6ﾕ1ﾎ8",
+    "ﾃ4ﾅ8ﾆ2ｾ7ﾜ0ﾂ5",
+    "ｦ1ｱ5ｳ8ﾚ2ｻ6ｸ0",
+    "ｵ9ｶ3ｷ7ﾇ1ﾖ5ﾍ8",
+    "ｺ2ｻ7ｼ4ﾈ0ﾓ6ﾀ9",
+    "ｾ8ｿ0ﾀ3ﾊ6ﾘ2ｳ5",
+    "ﾈ5ﾊ1ﾋ4ｿ8ﾔ0ﾃ6",
+    "ﾏ3ﾐ6ﾑ9ｽ1ﾌ5ﾗ8",
+    "ﾓ7ﾔ2ﾕ5ｶ9ﾄ3ﾚ6",
+    "ﾘ0ﾜ4ｦ8ﾆ2ｿ7ﾒ5",
+    "ｳ6ｴ9ｵ2ﾀ5ﾊ8ﾙ1",
+    "ｶ1ｷ8ｹ3ﾇ7ﾌ0ﾖ5",
+    "ｻ4ｼ0ｽ6ﾍ2ﾗ9ﾆ1",
+    "ｿ2ﾀ5ﾂ8ﾏ4ｱ7ﾚ0",
+    "ﾅ9ﾆ3ﾇ6ﾋ1ﾖ8ｴ4",
+    "ﾋ6ﾎ1ﾏ5ﾕ8ｿ2ｷ9",
+    "ﾑ8ﾒ4ﾓ7ｱ0ﾂ6ﾘ1",
+    "ﾕ0ﾗ7ﾘ2ｳ5ﾐ9ﾀ3",
+    "ｱ3ｳ5ｴ8ｶ1ﾖ6ﾎ0",
+    "ｹ7ｺ2ｻ9ﾃ4ﾒ8ﾜ1",
+    "ｽ1ｾ9ｿ3ﾊ6ｷ0ﾔ5",
+    "ﾂ5ﾃ0ﾅ4ﾍ8ﾑ2ｦ7",
+    "ﾇ8ﾈ6ﾊ2ﾐ5ｶ9ﾘ3",
+    "ｦｧｨｩｪｫ1ｰｬｭｮ2",
+    "ｬｭｮｯｰｱ3ｲｳｴｵ4",
+    "ｯｰｱｲｳ5ｴｵｶｷｸ6",
+    "ｰｶｷｸｹｺ7ｻｼｽｾ8",
+    "ｻｼｽｾｿ9ﾀﾁﾂﾃﾄ0",
+    "ﾀﾁﾂﾃﾄ1ﾅﾆﾇﾈﾉ2",
+    "ﾅﾆﾇﾈﾉ3ﾊﾋﾌﾍﾎ4",
+    "ﾊﾋﾌﾍﾎ5ﾏﾐﾑﾒﾓ6",
+    "ﾏﾐﾑﾒﾓ7ﾔﾕﾖﾗﾘ8",
+    "ﾔﾕﾖﾗﾘ9ﾙﾚﾛﾜﾝ0",
+    "ﾙﾚﾛﾜﾝ1ｦｧｨｩｪ2",
+    "ｦｧｨｩｪ3ｫｬｭｮｯ4",
+    "ｱ9ﾝ8ｲ7ﾝ6ｳ5ﾝ4",
+    "ｶ8ﾝ7ｷ6ﾝ5ｸ4ﾝ3",
+    "ｻ7ﾝ6ｼ5ﾝ4ｽ3ﾝ2",
+    "ﾀ6ﾝ5ﾁ4ﾝ3ﾂ2ﾝ1",
+    "ﾅ5ﾝ4ﾆ3ﾝ2ﾇ1ﾝ0",
+    "ﾊ4ﾝ3ﾋ2ﾝ1ﾌ0ﾝ9",
+    "ﾏ3ﾝ2ﾐ1ﾝ0ﾑ9ﾝ8",
+    "ﾔ2ﾝ1ﾕ0ﾝ9ﾖ8ﾝ7",
+    "ﾙ1ﾝ0ﾚ9ﾝ8ﾛ7ﾝ6",
+    "ｱｲ2ｳｴ3ｵｶ4ｷｸ5",
+    "ｹｺ6ｻｼ7ｽｾ8ｿﾀ9",
+    "ﾁﾂ0ﾃﾄ1ﾅﾆ2ﾇﾈ3",
+    "ﾉﾊ4ﾋﾌ5ﾍﾎ6ﾏﾐ7",
+    "ﾑﾒ8ﾓﾔ9ﾕﾖ0ﾗﾘ1",
+    "ﾙﾚ2ﾛﾜ3ﾝｦ4ｧｨ5",
+    "ｩｪ6ｫｬ7ｭｮ8ｯｰ9",
+    "0ｱ1ｲ2ｳ3ｴ4ｵ5ｶ",
+    "6ｷ7ｸ8ｹ9ｺ0ｻ1ｼ",
+    "1ｼ2ｽ3ｾ4ｿ5ﾀ6ﾁ",
+    "7ﾂ8ﾃ9ﾄ0ﾅ1ﾆ2ﾇ",
+    "2ﾇ3ﾈ4ﾉ5ﾊ6ﾋ7ﾌ",
+    "8ﾌ9ﾍ0ﾎ1ﾏ2ﾐ3ﾑ",
+    "3ﾑ4ﾒ5ﾓ6ﾔ7ﾕ8ﾖ",
+    "9ﾖ0ﾗ1ﾘ2ﾙ3ﾚ4ﾛ",
+    "5ﾛ6ﾜ7ﾝ8ｦ9ｧ0ﾜ",
+    "ｨ1ｩ2ｪ3ｫ4ｬ5ｭ6",
+    "ｮ7ｯ8ｰ9ｱ0ｲ1ｳｴ",
+    "ｴ2ｵ3ｶ4ｷ5ｸ6ｹｵ",
+];
+/**
+ * Shown under the spinner as "ULTRA: <tip>". Every one of these names a command
+ * this repository actually ships, because a tip that describes a flag nobody
+ * has is worse than no tip at all.
+ */
+export function spinnerTips() {
+    const cli = getCliName();
+    return [
+        `${cli} run --bg hands work to another harness so this session keeps its own context.`,
+        `${cli} run --worktree gives each session its own checkout, so two of them cannot fight over a file.`,
+        `${cli} ps lists the recent sessions with the harness and model each one ran on.`,
+        `${cli} logs <id> prints what a background session actually reported.`,
+        `${cli} wait <id> --json blocks until a session reaches a terminal state.`,
+        `${cli} diff <id> shows what a worktree session changed, against its base commit.`,
+        `${cli} stop <id> interrupts a session, then escalates to SIGTERM and SIGKILL.`,
+        `${cli} send <id> continues a session with a new message instead of restarting it.`,
+        `${cli} show <id> prints one session in full: status, worktree, usage, recent events.`,
+        `${cli} open reviewer opens a session that can read and run but never edit.`,
+        `${cli} setup binds each role to a harness and a model, one screen per role.`,
+        `${cli} run --role auditor sends a one-off deep review to another harness.`,
+    ];
+}
+/**
+ * statusLine.command is handed to a shell, so an install directory carrying a
+ * space, a `$`, a backtick or a quote would break the command or inject into
+ * it. Single quotes take every one of those literally, and the only character
+ * that can end them is a quote, which is why that one is spliced.
+ */
+export function shellQuote(value) {
+    return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+/**
+ * Gives Claude's child sessions a `codedeck` command even when this CLI came
+ * from a checkout or an npx process that never installed a global shim.
+ */
+function writeShim(file, entry, cliName) {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    // Rewriting is deliberate because the Node binary or checkout can move
+    // after a previous launch, and writeFileSync preserves an existing mode.
+    // The alias shim carries its own name so it prints right even when the
+    // parent environment did not propagate CODEDECK_CLI_NAME.
+    const rename = cliName !== undefined ? `export CODEDECK_CLI_NAME=${shellQuote(cliName)}\n` : "";
+    fs.writeFileSync(file, `#!/usr/bin/env sh\n${rename}exec ${shellQuote(process.execPath)} ${shellQuote(entry)} "$@"\n`, { mode: 0o700 });
+    fs.chmodSync(file, 0o700);
+}
+export function ensureCodedeckShim() {
+    try {
+        const binDir = path.join(getPaths().base, "bin");
+        const entry = fileURLToPath(new URL("../cli/index.js", import.meta.url));
+        // The shim leads PATH so a stale global install cannot take over from the
+        // CLI instance that is running this checkout.
+        writeShim(path.join(binDir, "codedeck"), entry);
+        // A renamed alias (CODEDECK_CLI_NAME) gets its own shim so workers type
+        // the same name they were launched with.
+        const alias = getCliName();
+        if (alias !== "codedeck" && /^[A-Za-z0-9][A-Za-z0-9_.-]*$/.test(alias)) {
+            writeShim(path.join(binDir, alias), entry, alias);
+        }
+        return binDir;
+    }
+    catch {
+        // A missing shim must not turn an otherwise valid Claude launch into a
+        // failure.
+    }
+}
+export function sanitizeEnv(env) {
+    const sanitized = { ...env };
+    delete sanitized.CLAUDE_CODE_CHILD_SESSION;
+    // A mise shim announces the tool it resolved on every run. It costs 36ms,
+    // which nobody would notice, and one line of output, which lands on top of
+    // the boot screen. Only the line matters. A setting of the user's own is left
+    // alone, since silencing mise everywhere is not this command's call.
+    sanitized.MISE_QUIET ??= "1";
+    return sanitized;
+}
+export function withCodedeckOnPath(env, binDir) {
+    const currentPath = env.PATH;
+    const entries = currentPath ? currentPath.split(path.delimiter) : [];
+    if (entries[0] === binDir)
+        return { ...env };
+    return {
+        ...env,
+        PATH: [binDir, ...entries].join(path.delimiter),
+    };
+}
+/**
+ * What to say once the session is over, so the id is there when it is wanted
+ * rather than buried in a picker.
+ *
+ * It cannot be said any earlier. The id does not exist when the boot screen
+ * prints, and the launcher cannot read it off the session either, because
+ * stdout is inherited by the terminal so that the TUI can paint straight to it.
+ * A SessionStart hook is the one thing that sees it, and it can only leave it
+ * in a file for afterwards.
+ */
+export function resumeHint(role, id) {
+    if (id === undefined || !/^[0-9a-fA-F-]{8,}$/.test(id))
+        return undefined;
+    return `${INDENT}resume: ${getCliName()} open ${role} --resume ${id}\n`;
+}
+/**
+ * The way out, on the primary screen the alternate one just handed back.
+ *
+ * Drawn even when there is no id to offer, because the sign-off is the point
+ * and a session that ended without one still ended.
+ */
+export function renderExit(role, id) {
+    const farewell = renderFarewell()
+        .split("\n")
+        .map((line) => (line.trim() === "" ? line : blood(line)))
+        .join("\n");
+    const hint = resumeHint(role, id);
+    return hint ? `${farewell}${muted(hint)}` : farewell;
+}
+/** Reads what the SessionStart hook left, and takes both sidecars with it. */
+function takeSessionId(file) {
+    let id;
+    try {
+        id = fs.readFileSync(file, "utf8").trim() || undefined;
+        return id;
+    }
+    catch {
+        // No file means the hook never ran: an older Claude Code, a session that
+        // died before startup, or a plugin the launch could not load. None of those
+        // are worth a diagnostic on the way out of a session that otherwise worked.
+    }
+    finally {
+        try {
+            fs.rmSync(file, { force: true });
+        }
+        catch { }
+        if (id && /^[0-9a-fA-F-]{8,}$/.test(id)) {
+            try {
+                fs.rmSync(`${file}.${id}.name`, { force: true });
+            }
+            catch { }
+        }
+    }
+}
+const SIGINT_ESCALATION_COUNT = 3;
+const SIGINT_KILL_GRACE_MS = 1000;
+/**
+ * Keeps the parent alive while Claude leaves the terminal and CodeDeck writes
+ * the resume hint.
+ *
+ * Claude inherits stdin and stays in the parent's foreground process group
+ * (`detached: false`), so a tty sends Ctrl+C to both processes. This listener
+ * absorbs only the parent's copy. Claude still receives the first Ctrl+C and
+ * can exit normally. A flood eventually escalates the child itself so a stuck
+ * session cannot prevent the hint from being written.
+ */
+export function installSigintGuard(getChild, signalHost = process) {
+    let signals = 0;
+    let escalationStarted = false;
+    let childClosed = false;
+    let disposed = false;
+    let killTimer;
+    const clearKillTimer = () => {
+        if (killTimer === undefined)
+            return;
+        clearTimeout(killTimer);
+        killTimer = undefined;
+    };
+    const send = (signal) => {
+        const child = getChild();
+        if (!child)
+            return;
+        try {
+            child.kill(signal);
+        }
+        catch { }
+    };
+    const onSigint = () => {
+        if (disposed || childClosed || escalationStarted)
+            return;
+        signals += 1;
+        if (signals < SIGINT_ESCALATION_COUNT || !getChild())
+            return;
+        escalationStarted = true;
+        send("SIGTERM");
+        killTimer = setTimeout(() => {
+            killTimer = undefined;
+            if (disposed || childClosed)
+                return;
+            send("SIGKILL");
+        }, SIGINT_KILL_GRACE_MS);
+    };
+    signalHost.on("SIGINT", onSigint);
+    return {
+        childClosed() {
+            childClosed = true;
+            clearKillTimer();
+        },
+        dispose() {
+            if (disposed)
+                return;
+            disposed = true;
+            clearKillTimer();
+            signalHost.removeListener("SIGINT", onSigint);
+        },
+    };
+}
+export function writeStdoutSync(text) {
+    try {
+        const bytes = Buffer.from(text);
+        let offset = 0;
+        while (offset < bytes.length) {
+            const written = fs.writeSync(1, bytes, offset, bytes.length - offset);
+            if (written <= 0)
+                break;
+            offset += written;
+        }
+    }
+    catch { }
+}
+/** Takes the session id and writes the farewell while the SIGINT guard is live. */
+export function finishOpenSession(role, sessionFile, write = writeStdoutSync) {
+    try {
+        write(renderExit(role, takeSessionId(sessionFile)));
+    }
+    catch { }
+}
+/**
+ * The boot screen, and it works because of the fullscreen renderer rather than
+ * in spite of it.
+ *
+ * Claude Code takes a moment to paint, and until it does the terminal shows
+ * whatever stood there. Since it opens on the alternate screen, this is drawn
+ * on the primary one, replaced the instant Claude takes over and restored,
+ * unseen, when the session ends. So it fills exactly the gap and cleans itself
+ * up, with nothing to tear down and no escape of ours left interleaved with
+ * Claude's output.
+ *
+ * Colour is written by hand here for the same reason the status line writes its
+ * own: this runs before Claude Code exists, so no theme is loaded yet.
+ */
+/**
+ * The logo resolving out of katakana noise, one frame at a time.
+ *
+ * Same alphabet as the spinner, so the launch and the session read as one
+ * thing. Blanks in the logo stay blank: the mark keeps its silhouette the whole
+ * way through and the noise fills only the strokes, which is what makes it look
+ * like the letters arriving rather than a rectangle of static.
+ *
+ * Pure, with the noise supplied by the caller, so a test can pin an exact frame
+ * instead of asserting around randomness.
+ */
+export function bootFrame(progress, noise) {
+    const width = LOGO[0].length;
+    const settled = Math.round(width * Math.min(1, Math.max(0, progress)));
+    return LOGO.map((line) => [...line]
+        .map((glyph, column) => {
+        if (column < settled || glyph === " ")
+            return glyph;
+        return noise(column);
+    })
+        .join(""));
+}
+const BOOT_STEPS = 18;
+const BOOT_STEP_MS = 40;
+const KATAKANA = [
+    ...new Set([...SPINNER_VERBS.join("")].filter((glyph) => !/[0-9]/.test(glyph))),
+];
+const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Plays the launch animation, then leaves the finished banner on screen.
+ *
+ * It runs BEFORE the spawn, and that ordering is the whole design. Once Claude
+ * Code is spawned the two processes share one terminal, and the moment it
+ * switches to the alternate screen anything written here lands inside its TUI.
+ * There is no layer to sit on top of, so the choice is before or corrupted.
+ * The cost is honest: this animation is time added to the launch, not time
+ * borrowed from Claude Code starting up.
+ *
+ * A pipe gets the still banner. Cursor movement assumes a terminal that is
+ * showing the last thing written, which a redirect into a file is not.
+ */
+export async function playBoot(role, model, effort) {
+    const out = process.stdout;
+    if (!out.isTTY) {
+        out.write(renderBanner(role, model, effort));
+        return;
+    }
+    const noise = () => KATAKANA[randomInt(KATAKANA.length)];
+    out.write("\n");
+    for (let step = 0; step <= BOOT_STEPS; step++) {
+        if (step > 0)
+            out.write(`\x1b[${LOGO.length}A`);
+        for (const line of bootFrame(step / BOOT_STEPS, noise)) {
+            out.write(`\r\x1b[2K${INDENT}${blood(line)}\n`);
+        }
+        await delay(BOOT_STEP_MS);
+    }
+    out.write(`${INDENT}${muted(`${role} · ${model} · ${effort}`)}\n`);
+    out.write(`${INDENT}${muted("booting…")}\n`);
+}
+const blood = (value) => `\x1b[38;2;225;29;72m${value}\x1b[0m`;
+const muted = (value) => `\x1b[38;2;163;139;143m${value}\x1b[0m`;
+export function renderBanner(role, model, effort) {
+    const logo = renderLogo()
+        .split("\n")
+        .map((line) => (line.trim() === "" ? line : blood(line)))
+        .join("\n");
+    return `${logo}${INDENT}${muted(`${role} · ${model} · ${effort}`)}\n${INDENT}${muted("booting…")}\n`;
+}
+export function assertPluginDirectory(pluginDir) {
+    try {
+        if (fs.statSync(pluginDir).isDirectory())
+            return;
+    }
+    catch { }
+    throw new Error(`CodeDeck plugin directory not found at ${pluginDir}. Rebuild or reinstall CodeDeck before running open.`);
+}
+export function currentWorkingDirectory() {
+    try {
+        const cwd = process.cwd();
+        if (fs.statSync(cwd).isDirectory())
+            return cwd;
+    }
+    catch { }
+    throw new Error("Cannot launch Claude Code: the current working directory no longer exists.");
+}
+export function errorDetails(error) {
+    if (typeof error !== "object" || error === null)
+        return { text: String(error) };
+    const value = error;
+    const text = [value.stderr, value.stdout, value.message]
+        .filter((part) => typeof part === "string" && part.length > 0)
+        .join("\n");
+    return {
+        code: typeof value.code === "string" ? value.code : undefined,
+        text: text || String(error),
+    };
+}
+/**
+ * Only stderr is piped, and only because Claude Code reports an unusable model
+ * there as a tagged line rather than a distinct exit code. stdout stays
+ * inherited so the TUI paints straight to the terminal, which also means
+ * `child.stdout` is null and there is nothing to relay.
+ */
+function relayStderr(child, output) {
+    const stream = child.stderr;
+    if (!stream)
+        return;
+    stream.setEncoding?.("utf8");
+    stream.on("data", (chunk) => {
+        output.value += typeof chunk === "string" ? chunk : chunk.toString();
+        process.stderr.write(chunk);
+    });
+}
+/**
+ * How much of a pty session's output is kept for the entitlement check. Under
+ * a pty the harness's stderr is merged into stdout, so the tagged refusal
+ * arrives in the same stream the TUI paints with — and that stream never ends.
+ * The refusal is written before the first frame, so a small window is enough
+ * and the session does not accumulate its own transcript in memory.
+ */
+const PTY_SCAN_LIMIT = 64 * 1024;
+/**
+ * The pty variant of relayStderr: bytes are written through to the terminal
+ * untouched, and only the opening window is remembered.
+ */
+function relayPtyOutput(child, output, stdout) {
+    child.stdout?.pipe(stdout, { end: false });
+    child.stdout?.on("data", (chunk) => {
+        if (output.value.length >= PTY_SCAN_LIMIT)
+            return;
+        output.value += typeof chunk === "string" ? chunk : chunk.toString();
+    });
+    relayStderr(child, output);
+}
+/**
+ * A signalled death carries no exit code, and collapsing it to 1 tells a caller
+ * the session failed rather than that it was killed. Shells report this as
+ * 128 plus the signal number, so Ctrl+C stays 130 and a SIGKILL stays 137.
+ */
+export function exitCodeFor(code, signal) {
+    if (code !== null)
+        return code;
+    if (!signal)
+        return 1;
+    const number = constants.signals[signal];
+    return typeof number === "number" ? 128 + number : 1;
+}
+/** Left as a seam so a test can assert the fallback without a real terminal. */
+export function ptyLaunchFor(opts) {
+    if (!opts.pty)
+        return undefined;
+    const reason = ptyUnavailableReason({
+        shim: opts.pty.shim,
+        stdinIsTty: process.stdin.isTTY === true,
+        stdoutIsTty: process.stdout.isTTY === true,
+    });
+    return reason === undefined ? opts.pty : undefined;
+}
+export function spawnHarness(bin, args, opts) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const output = { value: "" };
+        const binDir = ensureCodedeckShim();
+        const childEnv = binDir === undefined
+            ? sanitizeEnv(process.env)
+            : withCodedeckOnPath(sanitizeEnv(process.env), binDir);
+        let child;
+        let pty;
+        const launch = ptyLaunchFor(opts);
+        const signalHost = opts.signalHost ?? process;
+        // Under a pty the terminal is in raw mode, so Ctrl+C never reaches this
+        // process as a signal: it is a byte on the way to the harness. The
+        // escalation that kills a wedged session is fed from that byte instead,
+        // through the same guard, so the escape hatch behaves as it always did.
+        const keyboard = launch ? new EventEmitter() : undefined;
+        const relayInterrupt = keyboard ? () => keyboard.emit("SIGINT") : undefined;
+        if (relayInterrupt)
+            signalHost.on("SIGINT", relayInterrupt);
+        const sigintGuard = installSigintGuard(() => child, keyboard ?? signalHost);
+        const releaseKeyboard = () => {
+            if (relayInterrupt)
+                signalHost.removeListener("SIGINT", relayInterrupt);
+        };
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            pty?.dispose();
+            releaseKeyboard();
+            sigintGuard.childClosed();
+            sigintGuard.dispose();
+            reject(error);
+        };
+        const spawnChild = opts.spawnChild ?? spawn;
+        const env = { ...childEnv, CODEDECK_SESSION_FILE: opts.sessionFile, ...(opts.envExtra ?? {}) };
+        try {
+            if (launch) {
+                pty = startPtySession({
+                    target: { bin, args },
+                    launch,
+                    cwd: opts.cwd,
+                    env,
+                    spawnChild,
+                    onInterrupt: relayInterrupt,
+                });
+                child = pty.child;
+            }
+            else {
+                child = spawnChild(bin, args, {
+                    cwd: opts.cwd,
+                    env,
+                    // Keep Claude in the foreground process group so the terminal sends
+                    // the first Ctrl+C to it as well as to this parent guard.
+                    detached: false,
+                    stdio: ["inherit", "inherit", "pipe"],
+                });
+            }
+        }
+        catch (error) {
+            fail(error);
+            return;
+        }
+        if (pty)
+            relayPtyOutput(child, output, process.stdout);
+        else
+            relayStderr(child, output);
+        child.once("error", (error) => {
+            if (settled)
+                return;
+            const details = errorDetails(error);
+            if (details.code === "ENOENT") {
+                fail(new Error(opts.notFoundMessage));
+            }
+            else {
+                fail(error);
+            }
+        });
+        child.once("close", (code, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            pty?.dispose();
+            releaseKeyboard();
+            sigintGuard.childClosed();
+            const entitlement = opts.entitlementError?.(opts.model ?? "", output.value);
+            if (entitlement) {
+                sigintGuard.dispose();
+                reject(new Error(entitlement));
+                return;
+            }
+            process.exitCode = exitCodeFor(code, signal);
+            try {
+                opts.onClose();
+                sigintGuard.dispose();
+                resolve();
+            }
+            catch (error) {
+                sigintGuard.dispose();
+                reject(error);
+            }
+        });
+    });
+}
+//# sourceMappingURL=runtime.js.map

package/dist/open/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/open/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAW,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAmC,MAAM,UAAU,CAAC;AAElG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;CACf,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,OAAO;QACL,GAAG,GAAG,gFAAgF;QACtF,GAAG,GAAG,+FAA+F;QACrG,GAAG,GAAG,2EAA2E;QACjF,GAAG,GAAG,gEAAgE;QACtE,GAAG,GAAG,oEAAoE;QAC1E,GAAG,GAAG,4EAA4E;QAClF,GAAG,GAAG,yEAAyE;QAC/E,GAAG,GAAG,6EAA6E;QACnF,GAAG,GAAG,gFAAgF;QACtF,GAAG,GAAG,sEAAsE;QAC5E,GAAG,GAAG,uEAAuE;QAC7E,GAAG,GAAG,qEAAqE;KAC5E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,OAAgB;IAC9D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,0DAA0D;IAC1D,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,4BAA4B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,sBAAsB,MAAM,QAAQ,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,EAC9F,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzE,0EAA0E;QAC1E,8CAA8C;QAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QAChD,wEAAwE;QACxE,yCAAyC;QACzC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,UAAU,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,WAAW;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAsB;IAChD,MAAM,SAAS,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,OAAO,SAAS,CAAC,yBAAyB,CAAC;IAE3C,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,qEAAqE;IACrE,SAAS,CAAC,UAAU,KAAK,GAAG,CAAC;IAC7B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAsB,EAAE,MAAc;IACvE,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;IAE7C,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,EAAsB;IAC3D,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,GAAG,MAAM,WAAW,UAAU,EAAE,SAAS,IAAI,aAAa,EAAE,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,EAAsB;IAC3D,MAAM,QAAQ,GAAG,cAAc,EAAE;SAC9B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QACvD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;IAC9E,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAclC;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAyC,EACzC,aAAyB,OAAO;IAEhC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAoD,CAAC;IAEzD,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QACpC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,SAAS,GAAG,SAAS,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,QAAQ,IAAI,WAAW,IAAI,iBAAiB;YAAE,OAAO;QACzD,OAAO,IAAI,CAAC,CAAC;QACb,IAAI,OAAO,GAAG,uBAAuB,IAAI,CAAC,QAAQ,EAAE;YAAE,OAAO;QAE7D,iBAAiB,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,CAAC;QAChB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,SAAS,GAAG,SAAS,CAAC;YACtB,IAAI,QAAQ,IAAI,WAAW;gBAAE,OAAO;YACpC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClB,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAElC,OAAO;QACL,WAAW;YACT,WAAW,GAAG,IAAI,CAAC;YACnB,cAAc,EAAE,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,UAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;YACtE,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM;YACxB,MAAM,IAAI,OAAO,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAC/B,IAAU,EACV,WAAmB,EACnB,QAAgC,eAAe;IAE/C,IAAI,CAAC;QACH,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,KAAiC;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,CAAC,GAAG,IAAI,CAAC;SACN,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACrB,IAAI,MAAM,GAAG,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,QAAQ,GAAG;IACf,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;CAChF,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAU,EAAE,KAAa,EAAE,MAAc;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAG,CAAC;YAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,YAAY,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,KAAK,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,uBAAuB,KAAK,SAAS,CAAC;AACvE,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,yBAAyB,KAAK,SAAS,CAAC;AAEzE,MAAM,UAAU,YAAY,CAAC,IAAU,EAAE,KAAa,EAAE,MAAc;IACpE,MAAM,IAAI,GAAG,UAAU,EAAE;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,KAAK,MAAM,MAAM,EAAE,CAAC,KAAK,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO;IACnD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,MAAM,IAAI,KAAK,CACb,0CAA0C,SAAS,sDAAsD,CAC1G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,GAAG,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,KAKb,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;SACrD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7E,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC7D,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAmB,EAAE,MAAyB;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QAC3C,MAAM,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC;;;GAGG;AACH,SAAS,cAAc,CAAC,KAAmB,EAAE,MAAyB,EAAE,MAA0B;IAChG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc;YAAE,OAAO;QAClD,MAAM,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,MAA6B;IAC5E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAqBD,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,IAAyB;IACpD,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QACnB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;KAC3C,CAAC,CAAC;IACH,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,IAAc,EACd,IAAyB;IAEzB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,MAAM,QAAQ,GACZ,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1B,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,KAA+B,CAAC;QACpC,IAAI,GAA2B,CAAC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;QAE9C,wEAAwE;QACxE,mEAAmE;QACnE,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,cAAc;YAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,GAAG,EAAE;YAC3B,IAAI,cAAc;gBAAE,UAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC1E,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,EAAE,OAAO,EAAE,CAAC;YACf,eAAe,EAAE,CAAC;YAClB,WAAW,CAAC,WAAW,EAAE,CAAC;YAC1B,WAAW,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;QAC5C,MAAM,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,qBAAqB,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/F,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,GAAG,GAAG,eAAe,CAAC;oBACpB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;oBACrB,MAAM;oBACN,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG;oBACH,UAAU;oBACV,WAAW,EAAE,cAAc;iBAC5B,CAAC,CAAC;gBACH,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG;oBACH,oEAAoE;oBACpE,0DAA0D;oBAC1D,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,GAAG;YAAE,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;YAClD,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEhC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,EAAE,OAAO,EAAE,CAAC;YACf,eAAe,EAAE,CAAC;YAClB,WAAW,CAAC,WAAW,EAAE,CAAC;YAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,WAAW,EAAE,CAAC;gBAChB,WAAW,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,WAAW,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/plugin/agents/auditor.md

@@ -6,13 +6,19 @@ tools: Read, Grep, Glob, Bash, WebFetch, WebSearch, Task
 
 You are the CodeDeck auditor. You review a scope large enough that one pass would miss things, by splitting it and consolidating what comes back. You are read only, and so is everyone you dispatch: nothing in this review edits, stages, commits, or pushes.
 
+Once the task is clear in a `codedeck run` worker, rename your session with `codedeck rename "$CODEDECK_SESSION_ID" <short-task-slug>`.
+
 ## Splitting
 
 - Slice by **dimension**, never by file. One agent per file duplicates findings, multiplies the spend, and still misses anything that spans two files. Dimensions look like: correctness on real inputs, error and failure paths, test coverage, contracts between modules, resource and lifecycle handling, security surface.
 - Read enough of the scope yourself to choose the dimensions. Splitting before you know what is in there produces slices that do not match the work.
 - Choose the mechanism by what the slice needs, not by an assumed cost gap. There is no measured one: `docs/harness-behaviour.md` records the attempt and why its two columns cannot be compared.
 - Neither mechanism starts with your context. A native subagent inherits this conversation only when it is a fork, and a separate worker begins around 80% cache reads rather than from nothing. Either way the briefing carries the whole task, and neither one is cheap because it already knows something.
-- Native subagents are the default for reading and research: no worktree, no second process, nothing to clean up. Reach for `codedeck run --no-worktree` when a slice wants a different harness or model, or a genuinely independent read. Never `--worktree`: there is nothing here to diff.
+- Native subagents are the default for reading and research: no worktree, no second process, nothing to clean up. When a slice needs a separate process, use `codedeck run --role reviewer --no-worktree "<briefing>"`.
+- `--role` selects the harness and model the human configured for that role. It also loads the role's contract into the worker prompt, including for non-Claude harnesses.
+- Without `--role`, `codedeck run` uses the default harness and sends only a loose briefing. It ignores the user's role binding and gives a more expensive worker less direction.
+- The role owns the harness and the model. `--agent` and `--model` are ignored for a bound role (run warns and keeps the binding), so you cannot swap the worker onto another harness. Changing the pairing is a `codedeck setup` decision, not a dispatch flag.
+- A file-changing worker uses the canonical form `codedeck run --role <role> --worktree "<briefing>"`, but this review is read only. Never use `--worktree` for an audit slice.
 - Every slice carries the full reviewer contract: open the real file, cite `file:line` you actually opened, prove runtime claims with a probe you ran, valid only when it ties to a reproducible failure or a stated contract, and close with what you did not cover.
 
 ## Consolidating

package/dist/plugin/agents/general.md

@@ -13,10 +13,21 @@ You are the CodeDeck general session. You do the work yourself, here. Delegation
 - Preserve unrelated work in the worktree. Do not revert, reformat, or normalize files outside the task.
 - Scope every test run to what you touched, by file or by test name. Never run a whole suite to check one change.
 - Verify before you claim. Run the focused command and quote its output.
+- Once the task is clear in a `codedeck run` worker, rename your session with `codedeck rename "$CODEDECK_SESSION_ID" <short-task-slug>`.
+- When a branch or pull request has merge conflicts, inspect both sides. If the resolution is simple and mechanical, such as a clear union of both sides, resolve it and leave a short footnote in the report or pull request describing what was merged and why. If the resolution is semantically risky or ambiguous, stop and report it instead of guessing.
+- After you push a branch or open or update a pull request, run 'gh pr checks <n>' and/or 'gh pr view <n>' and read external quality gates such as SonarCloud. A failing check, gate, or threshold means the deliverable is not done. Report it as incomplete, never round it to success.
 
 ## When you do delegate
 
-- Use `codedeck run --worktree` so the worker has an attributable worktree and diff.
+- Before declaring a file-changing task ready, dispatch `codedeck run --role reviewer --no-worktree "<briefing>"` on your own change.
+- The review is read-only, so use `--no-worktree`. The briefing names what changed and where because the reviewer starts with no conversation context.
+- Act on the review result before declaring the task ready.
+- If the human waived review, or the change is small enough that review would be wasteful, say that you skipped it and why. Do not skip silently.
+- Use `codedeck run --role <role> --worktree "<briefing>"` so the worker has an attributable worktree, diff, and role contract.
+- Worktree is a choice, not a default. `--worktree` is a fresh checkout of the current repo at HEAD, so it cannot reach another repository or an uncommitted working tree elsewhere. A slice that reproduces or fixes a bug in place, or that touches a different repo, runs `--no-worktree --cwd <target>` instead, on a harness whose file access can reach that target.
+- Always include `--role`. It selects the harness and model the human configured for that role. It also loads that role's contract into the worker prompt, including for non-Claude harnesses.
+- Without `--role`, `codedeck run` uses the default harness and sends only a loose briefing. It ignores the user's role binding and gives a more expensive worker less direction.
+- The role owns the harness and the model. `--agent` and `--model` are ignored for a bound role (run warns and keeps the binding), so you cannot swap the worker onto another harness. Changing the pairing is a `codedeck setup` decision, not a dispatch flag.
 - Slice by ownership. A worker owns its files end to end. Two workers in one file is a merge you will pay for.
 - Workers start with none of this context. The briefing carries the goal, the files it owns, the interface it must produce, what is out of scope, and how it verifies itself. Never write "see the conversation".
 - Read `codedeck diff <id>` yourself before believing any worker. The artifact is authoritative, the success message is not.