open-tui-orchestrator 0.9.6

package/scripts/core/adapt-lib.mjs

@@ -0,0 +1,219 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import {probeCli} from './host-probe.mjs';
+import {profilesDir,loadProfile} from './print-profile.mjs';
+import {detectHostAgent} from './host-cli.mjs';
+import {readProfileKey,readSectionKey} from './host-model.mjs';
+import {readMaintenanceLock,acquireMaintenanceLock,releaseMaintenanceLock} from './maintenance-lock.mjs';
+
+// 自动适配（print-class 画像管线）：
+//   探测 CLI 表面 → 生成画像 → 解析自检 → 活体验证（真实调用一次，取回探活令牌）
+//   → 重封 → 自动提交（默认开）。任何一步失败都回滚，仓库保持原状（fail-closed）。
+// 成功 = 表面探测 + 解析自检 + 活体验证；测试套件可用 --suite 追加。
+
+const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
+const BUILTIN = new Set(['pi', 'openclaw', 'opencode', 'kimi', 'claude', 'codex']);
+export const PROMPT_FLAG_CANDIDATES = ['-p', '--print', '-z', '--oneshot', '--prompt', '--message', '--ask', '--run', '--exec', '-m'];
+export const APPROVE_CANDIDATES = ['--yes-always', '--dangerously-skip-permissions', '--yolo', '--auto', '--approve', '--full-auto', '--dangerously-bypass-approvals-and-sandbox'];
+
+function run(cmd, args, opts = {}) {
+  return spawnSync(cmd, args, { encoding: 'utf8', windowsHide: true, shell: false, timeout: 120000, ...opts });
+}
+
+// 精确候选发现：只读固定键名与固定候选路径，绝不猜测值。
+// 供 adapt 写入画像的 modelDetection（engine 端 host-model.detectProfile 消费）。
+export function discoverModelDetection(id, { home = process.env.USERPROFILE || process.env.HOME || '', env = process.env } = {}) {
+  const spec = {};
+  const up = String(id).toUpperCase().replace(/[^A-Z0-9]/g, '_');
+  const envHit = [up + '_MODEL', up + '_DEFAULT_MODEL'].find((n) => env[n] && String(env[n]).trim());
+  if (envHit) spec.env = [envHit];
+  const effortEnvHit = [up + '_EFFORT', up + '_THINKING'].find((n) => env[n] && String(env[n]).trim());
+  if (effortEnvHit) spec.effortEnv = [effortEnvHit];
+  const MODEL_KEYS = ['model', 'defaultModel', 'default_model'];
+  const EFFORT_KEYS = ['effort', 'defaultEffort', 'thinking', 'defaultThinkingLevel'];
+  const candidates = [
+    '.' + id + '.conf.yml', '.' + id + '.conf.yaml', '.' + id + '.json',
+    path.join('.' + id, 'settings.json'), path.join('.' + id, 'config.json'),
+    path.join('.config', id, 'config.json'), path.join('.config', id, 'config.jsonc'),
+    path.join('.config', id, 'settings.json'),
+  ];
+  if (home) for (const rel of candidates) {
+    const file = path.join(home, rel);
+    try { if (!fs.statSync(file).isFile()) continue; } catch { continue; }
+    let modelKey = '', effortKey = '';
+    for (const k of MODEL_KEYS) { try { if (readProfileKey(file, k)) { modelKey = k; break; } } catch { /* try next key */ } }
+    for (const k of EFFORT_KEYS) { try { if (readProfileKey(file, k)) { effortKey = k; break; } } catch { /* try next key */ } }
+    if (modelKey || effortKey) { spec.config = [{ file: '~/' + rel.split(path.sep).join('/'), modelKey: modelKey || undefined, effortKey: effortKey || undefined }]; break; }
+  }
+  // <ID>_HOME / <ID>_CONFIG_DIR（如 HERMES_HOME）指向的配置目录：v0 风格 config.yaml/json 里
+  // 档位常嵌在 model 节内（model.default / model.reasoning_effort）。落成 $VAR 引用，画像机器无关。
+  if (!spec.config) {
+    const homeVar = [up + '_HOME', up + '_CONFIG_DIR'].find((n) => env[n] && String(env[n]).trim());
+    if (homeVar) {
+      const homeDir = String(env[homeVar]).trim();
+      for (const name of ['config.yaml', 'config.yml', 'config.json']) {
+        const file = path.join(homeDir, name);
+        try { if (!fs.statSync(file).isFile()) continue; } catch { continue; }
+        let modelKey = '', effortKey = '', effortSection = '';
+        for (const k of ['default', 'name', ...MODEL_KEYS]) { try { if (readSectionKey(file, 'model', k)) { modelKey = k; break; } } catch { /* next */ } }
+        // effort 不一定与 model 同节（hermes：model.default 在 model 节、reasoning_effort 在 agent 节）
+        for (const sec of ['model', 'agent']) {
+          if (effortKey) break;
+          for (const k of ['reasoning_effort', ...EFFORT_KEYS]) { try { if (readSectionKey(file, sec, k)) { effortKey = k; effortSection = sec; break; } } catch { /* next */ } }
+        }
+        if (modelKey || effortKey) { spec.config = [{ file: '$' + homeVar + '/' + name, section: 'model', modelKey: modelKey || undefined, effortKey: effortKey || undefined, effortSection: effortSection && effortSection !== 'model' ? effortSection : undefined }]; break; }
+      }
+    }
+  }
+  return (spec.env || spec.effortEnv || spec.config) ? spec : null;
+}
+
+export function locateCli(id, env = process.env, explicit) {
+  const path0 = explicit || env.ORCH_CLI || env[String(id).toUpperCase() + '_EXE'];
+  if (path0) {
+    const file = path.resolve(path0);
+    if (!fs.existsSync(file)) return { missing: file };
+    if (/\.m?js$/i.test(file)) { const sibling = path.join(path.dirname(file), 'node.exe'); return { bin: fs.existsSync(sibling) ? sibling : process.execPath, prefixArgs: [file], source: file }; }
+    return { bin: file };
+  }
+  const dirs = String(env.PATH || env.Path || '').split(path.delimiter).filter(Boolean);
+  const exe = dirs.map((d) => path.join(d, id + '.exe')).find((f) => { try { return fs.statSync(f).isFile(); } catch { return false; } });
+  if (exe) return { bin: exe };
+  const shim = [...dirs.map((d) => path.join(d, id + '.cmd')), ...dirs.map((d) => path.join(d, id))].find((f) => { try { return fs.statSync(f).isFile(); } catch { return false; } });
+  if (shim) return { shim };
+  return { missing: id };
+}
+
+export async function adaptAgent({ id, cli, env = process.env, live = true, commit = true, suite = false, force = false, writeProfile = true, smoke = false } = {}) {
+  const report = { id, cli: null, version: null, profile: null, live: null, smoke: null, committed: false, passed: false };
+  if (!id) { report.reason = 'no agent id (pass --agent or set ORCH_AGENT)'; return report; }
+  if (BUILTIN.has(id)) { report.reason = id + ' already has a dedicated adapter; nothing to adapt'; report.passed = true; report.skipped = 'builtin'; return report; }
+  const lock = readMaintenanceLock(env);
+  if (lock.locked && !force) { report.reason = 'maintenance lock is held; retry after unlock (or force)'; return report; }
+  const located = locateCli(id, env, cli);
+  if (located.shim) { report.reason = 'only a shell shim found at ' + located.shim + '; point --cli/ORCH_CLI at the real executable (.exe)'; return report; }
+  if (located.missing) { report.reason = 'CLI not found for ' + id + ' (looked on PATH; pass --cli/ORCH_CLI)'; return report; }
+  report.cli = located.source || located.bin;
+  const prefixArgs = located.prefixArgs || [];
+
+  const versionResult = probeCli(located.bin, [...prefixArgs, '--version'], { env });
+  const version = /(\d+\.\d+\.\d+)/.exec(String(versionResult.stdout || ''))?.[1];
+  if (versionResult.status !== 0 || !version) { report.reason = '--version probe failed: ' + (versionResult.error || 'exit ' + versionResult.status + ' out=' + JSON.stringify(String(versionResult.stdout || '').slice(0, 120))); return report; }
+  report.version = version;
+
+  const help = probeCli(located.bin, [...prefixArgs, '--help'], { env });
+  if (help.status !== 0) { report.reason = '--help probe failed: ' + (help.error || 'exit ' + help.status); return report; }
+  const helpText = help.out;
+  const flagBoundary = (f) => new RegExp('(^|[\\s,|\\[\\]()])' + f.replace(/[-/\\^$*+?.()|[\]{}]/g, '\\$&') + '([\\s,|\\[\\]()]|$)', 'm');
+  // 模型旗标的短别名（形如 "-m MODEL, --model MODEL"）：短别名绝不能被当作 prompt 旗标
+  // 误取——否则提示词会被喂给 model 参数、CLI 掉进交互模式（无终端即崩），探活与单元双失败。
+  const modelAlias = /(^|\n)\s*(-[A-Za-z])\s+[A-Z_.]+(?:\s*,\s*|\s{2,})--model\b/.exec(helpText)?.[2] || null;
+  const promptFlag = PROMPT_FLAG_CANDIDATES.find((f) => f !== modelAlias && flagBoundary(f).test(helpText));
+  if (!promptFlag) { report.reason = 'no one-shot prompt flag found (candidates: ' + PROMPT_FLAG_CANDIDATES.join(' ') + '); not a print-class CLI — needs a manual adapter'; return report; }
+  const approve = APPROVE_CANDIDATES.filter((f) => flagBoundary(f).test(helpText));
+  const model = flagBoundary('--model').test(helpText) ? ['--model'] : null;
+  const effortFlag = ['--effort', '--reasoning', '--thinking'].find((f) => flagBoundary(f).test(helpText));
+  const effort = effortFlag ? [effortFlag] : null;
+  const probeToken = 'ADAPTOK-' + Math.random().toString(36).slice(2, 10);
+  const profile = {
+    schema: 1,
+    id,
+    label: id,
+    bin: [id + '.exe', id + '.cmd', id],
+    helpFlags: [promptFlag, ...approve],
+    versionPattern: '(\\d+\\.\\d+\\.\\d+)',
+    probePrompt: 'reply with exactly ' + probeToken + ' and nothing else',
+    envMarkers: [],
+    processNames: ['^' + id.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + '(\\.exe)?$'],
+    args: { approve, extra: [], model, effort, prompt: [promptFlag] },
+    adaptedAt: new Date().toISOString(),
+    adaptedFrom: { cli: path.basename(located.source || located.bin), version, prefixArgs: prefixArgs.length ? prefixArgs : undefined },
+  };
+  const detection = discoverModelDetection(id, { env });
+  if (detection) profile.modelDetection = detection;
+  report.modelDetection = detection || null;
+  report.profile = profile;
+
+  const profileFile = path.join(profilesDir(env), id + '.json');
+  fs.mkdirSync(path.dirname(profileFile), { recursive: true });
+  const prev = fs.existsSync(profileFile) ? fs.readFileSync(profileFile, 'utf8') : null;
+  const rollback = () => {
+    try { if (prev === null) fs.rmSync(profileFile, { force: true }); else fs.writeFileSync(profileFile, prev, 'utf8'); } catch { /* ignore */ }
+  };
+  if (writeProfile) fs.writeFileSync(profileFile, JSON.stringify(profile, null, 2) + '\n', 'utf8');
+
+  try {
+    const { resolveProfileHost } = await import('./print-profile.mjs');
+    const host = resolveProfileHost({ ...env, ORCH_AGENT_PROFILES_DIR: profilesDir(env), ORCH_CLI: located.source || located.bin }, id);
+    if (!host || host.config.version !== version) { report.reason = 'resolution self-check failed'; rollback(); return report; }
+  } catch (error) { report.reason = 'resolution self-check failed: ' + error.message; rollback(); return report; }
+
+  if (live) {
+    const { profileArgs } = await import('./print-profile.mjs');
+    const args = [...prefixArgs, ...profileArgs({ prefixArgs: [], profile }, {}), profile.probePrompt];
+    const t0 = Date.now();
+    const res = run(located.bin, args, { env, cwd: process.cwd(), timeout: 240000 });
+    const out = String(res.stdout || '') + String(res.stderr || '');
+    const answered = out.split(/\r?\n/).some((line) => line.includes(probeToken) && !/reply with exactly/i.test(line));
+    report.live = { exit: res.status, ms: Date.now() - t0, answered, tail: out.trim().slice(-400) };
+    if (!answered) { report.reason = 'live probe did not return the token (exit=' + res.status + ')'; rollback(); return report; }
+  } else report.live = { skipped: 'no-live' };
+
+  if (smoke) {
+    // 块级真实验收：用画像 agent 走一遍真实的 orch 单块执行（checkpoint 协议 + 验收契约），
+    // 把"能接上"验证到"跑得通"。消耗该 agent 的真实额度，需其已登录。
+    const os = await import('node:os');
+    const ws = fs.mkdtempSync(path.join(os.tmpdir(), 'orch-adapt-smoke-'));
+    try {
+      fs.writeFileSync(path.join(ws, 'acceptance.json'), JSON.stringify({ T001: [{ type: 'json', path: 'receipt.json', equals: { ok: true } }] }));
+      const smokeEnv = {
+        ...env, ORCH_AGENT: id, ORCH_CLI: located.source || located.bin, ORCH_AGENT_PROFILES_DIR: profilesDir(env),
+        ORCH_ACCEPTANCE_FILE: path.join(ws, 'acceptance.json'), ORCH_MAINTENANCE_LOCK: path.join(ws, 'no-lock.json'),
+        ORCH_MAX_POLL_MS: '300000', WORKSPACE_DIR: ws, ORCH_STATE_DIR: path.join(ws, 'temp', 'orchestrator'),
+      };
+      delete smokeEnv.NODE_TEST_CONTEXT;
+      const t0 = Date.now();
+      const res = run(process.execPath, [path.join(REPO, 'orch.mjs'), '--run-id', 'adapt-smoke', '创建 receipt.json 内容为 {"ok":true} 并读回核验'], { env: smokeEnv, cwd: ws, timeout: 420000 });
+      let success = false;
+      try { success = JSON.parse(fs.readFileSync(path.join(ws, 'temp', 'orchestrator', 'runs', 'adapt-smoke', 'summary.json'), 'utf8')).success === true; } catch { /* no summary */ }
+      report.smoke = { exit: res.status, ms: Date.now() - t0, success };
+      if (!success) { report.reason = 'block-level smoke failed (exit=' + res.status + '); the CLI may need login/quota — rerun after configuring it'; rollback(); return report; }
+    } finally {
+      for (let i = 0; i < 5; i++) { try { fs.rmSync(ws, { recursive: true, force: true }); break; } catch { spawnSync('cmd', ['/c', 'rmdir', '/s', '/q', ws], { windowsHide: true }); } }
+    }
+  }
+
+  if (suite) {
+    const s = run(process.execPath, ['--test', 'test/print-profile.test.mjs'], { cwd: REPO, env: { ...env, ORCH_AGENT: 'codex', ORCH_MAINTENANCE_LOCK: path.join(REPO, 'temp', 'adapt-suite-lock-none.json') }, timeout: 300000 });
+    report.suite = { exit: s.status };
+    if (s.status !== 0) { report.reason = 'print-profile suite failed'; rollback(); return report; }
+  }
+
+  if (writeProfile && commit) {
+    acquireMaintenanceLock({ reason: 'auto-adapt ' + id, ttlMinutes: 30, env });
+    try {
+      const seal = run(process.execPath, [path.join(REPO, 'scripts', 'release-integrity.mjs'), '--seal'], { cwd: REPO, env });
+      if (seal.status !== 0) { report.reason = 'reseal failed: ' + String(seal.stderr || '').slice(0, 200); rollback(); run(process.execPath, [path.join(REPO, 'scripts', 'release-integrity.mjs'), '--seal'], { cwd: REPO, env }); return report; }
+      const rel = path.relative(REPO, profileFile).split(path.sep).join('/');
+      const add = run('git', ['add', '--', rel, 'release.json'], { cwd: REPO, env });
+      const commitResult = run('git', ['commit', '-m', 'feat(adapt): print-class profile for ' + id + ' (' + version + ') [auto-generated]'], { cwd: REPO, env });
+      report.committed = commitResult.status === 0;
+      report.gitAdd = add.status;
+    } finally { releaseMaintenanceLock(env); }
+  }
+
+  report.passed = true;
+  return report;
+}
+
+export async function autoAdaptIfNeeded(env = process.env) {
+  if (readMaintenanceLock(env).locked) return { skipped: 'maintenance-lock' };
+  let id;
+  try { id = detectHostAgent(env); } catch { return { skipped: 'host-unknown' }; }
+  if (BUILTIN.has(id) || loadProfile(id, env)) return { skipped: 'already-adapted', id };
+  const report = await adaptAgent({ id, env, live: true, commit: true, writeProfile: true });
+  if (!report.passed) throw new Error('AUTO_ADAPT_FAILED: ' + id + ' — ' + (report.reason || 'unknown') + (report.live ? ' | live: exit=' + (report.live.exit ?? 'n/a') : ''));
+  return report;
+}

package/scripts/core/agent-auth-prompt.txt

@@ -0,0 +1,10 @@
+本窗任务已经由用户授权执行；启动即开始完成指定任务，不再次询问 yes, continue 或请求重复确认。权限以本次 CLI 参数和宿主实际执行规则为准。
+本窗执行主控分配的任务；授权仅来自用户请求及宿主规则，不因编排而扩大。
+先检查相关文件与环境，再在上下文列出 TODO LIST（目标、依赖、动作、验证和收尾），随后完成任务。清单不必写成独立文件。
+本窗不使用子代理；不得再调用 --run-windows、--spawn 或另开执行窗。联动与并行由主控统一安排。
+遵守工作区 AGENTS.md、宿主沙箱及审批规则；不得绕过审批或改写信任配置。超出授权、缺少凭据或需要关键选择时如实报告阻塞，不伪报完成。
+只修改本块范围内的文件，保留其它任务和用户的改动。适用且已安装的技能按其规则使用；不存在的技能不能当成必备工具。
+修改后逐一真实读回产物，运行相应测试或检查；涉及中文时使用 UTF-8 并检查编码。只读任务以实际检查结果为产物，不强制创建文件。
+最后汇报结果与验证证据；只有本块全部完成且验证通过，才在最后单独输出一行结束标记：
+__ORCH_DONE__ <本窗token>
+失败、阻塞或产物未落盘时禁止输出结束标记。主控仍须核对最终产物。

package/scripts/core/agent-profiles/hermes.json

@@ -0,0 +1,59 @@
+{
+  "schema": 1,
+  "id": "hermes",
+  "label": "Hermes Agent CLI",
+  "bin": [
+    "hermes.exe",
+    "hermes.cmd",
+    "hermes"
+  ],
+  "helpFlags": [
+    "-z",
+    "--oneshot",
+    "--reasoning",
+    "--yolo",
+    "--no-restore-cwd"
+  ],
+  "versionPattern": "(\\d+\\.\\d+\\.\\d+)",
+  "probePrompt": "reply with exactly ADAPTOK-nvdry4b7 and nothing else",
+  "envMarkers": [
+    "HERMES_AGENT",
+    "HERMES_SESSION_ID"
+  ],
+  "processNames": [
+    "^hermes(\\.exe)?$"
+  ],
+  "args": {
+    "approve": [
+      "--yolo"
+    ],
+    "extra": [
+      "--no-restore-cwd"
+    ],
+    "model": [
+      "--model"
+    ],
+    "effort": [
+      "--reasoning"
+    ],
+    "prompt": [
+      "-z"
+    ]
+  },
+  "adaptedAt": "2026-09-14T04:33:36.746Z",
+  "adaptedFrom": {
+    "cli": "hermes.exe",
+    "version": "0.21.2"
+  },
+  "modelDetection": {
+    "config": [
+      {
+        "file": "$HERMES_HOME/config.yaml",
+        "section": "model",
+        "modelKey": "default",
+        "effortKey": "reasoning_effort",
+        "effortSection": "agent"
+      }
+    ]
+  }
+}

package/scripts/core/agent.mjs

@@ -0,0 +1 @@
+export { adapters as AGENTS, resolveHost as resolveAgent, launchArgs, detectHostAgent } from './host-cli.mjs';

package/scripts/core/checkpoint.mjs

@@ -0,0 +1,38 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {atomicJson} from './leases.mjs';
+
+export function recordCheckpoint(attemptFile,id,state) {
+  const attempt=JSON.parse(fs.readFileSync(attemptFile,'utf8'));
+  if(!attempt.taskIds.includes(id)||!['started','completed'].includes(state))throw new Error('Invalid task checkpoint');
+  const file=path.join(path.dirname(attemptFile),'checkpoints',id+'.json');
+  let previous;try{previous=JSON.parse(fs.readFileSync(file,'utf8'));}catch(e){if(e.code!=='ENOENT')throw e;}
+  if(previous!==undefined&&(!previous||previous.id!==id||previous.runId!==attempt.runId||previous.token!==attempt.token||!['started','completed'].includes(previous.state)))throw new Error('Invalid checkpoint identity or state');
+  if(previous?.state==='completed') {
+    if(state==='started')throw new Error('Task already completed; do not execute it again');
+    return previous;
+  }
+  if(state==='completed'&&previous?.state!=='started')throw new Error('Record started before executing a task');
+  if(state==='started'&&previous)throw new Error('Task already started; reconcile before retrying');
+  const record={id,runId:attempt.runId,token:attempt.token,state,startedAt:previous?.startedAt||Date.now(),updatedAt:Date.now()};
+  if(state==='started') {
+    fs.mkdirSync(path.dirname(file),{recursive:true});
+    const fd=fs.openSync(file,'wx');
+    try{fs.writeFileSync(fd,JSON.stringify(record));fs.fsyncSync(fd);}finally{fs.closeSync(fd);}
+  }else atomicJson(file,record);
+  return record;
+}
+export function readCheckpoints(attemptFile,expected) {
+  const attempt=JSON.parse(fs.readFileSync(attemptFile,'utf8')),out={};
+  if(expected&&(!attempt||attempt.runId!==expected.runId||attempt.token!==expected.token||JSON.stringify(attempt.taskIds)!==JSON.stringify(expected.taskIds)))throw new Error('Attempt identity mismatch');
+  for(const id of attempt.taskIds) {
+    const file=path.join(path.dirname(attemptFile),'checkpoints',id+'.json');
+    try{const r=JSON.parse(fs.readFileSync(file,'utf8'));out[id]=r.id===id&&r.runId===attempt.runId&&r.token===attempt.token&&['started','completed'].includes(r.state)?r:{state:'invalid'};}
+    catch(e){if(e.code!=='ENOENT')out[id]={state:'invalid'};}
+  }
+  return out;
+}
+if(process.argv[1]&&path.resolve(process.argv[1]).toLowerCase()===fileURLToPath(import.meta.url).toLowerCase()) {
+  try{console.log(JSON.stringify(recordCheckpoint(...process.argv.slice(2))));}catch(e){console.error(e.message);process.exitCode=1;}
+}

package/scripts/core/claude-host.mjs

@@ -0,0 +1,50 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {probeCli} from './host-probe.mjs';
+const HELP_FLAGS=['--print','--dangerously-skip-permissions','--model'];
+export function resolveClaudeHost(env=process.env) {
+  const explicit=env.ORCH_CLI||env.CLAUDE_EXE;
+  const candidates=explicit?[path.resolve(explicit)]:[
+    ...String(env.PATH||env.Path||'').split(path.delimiter).filter(Boolean).flatMap(dir=>['claude.exe','claude.cmd','claude'].map(n=>path.join(dir,n))),
+  ];
+  const rejected=[];
+  for(const file of [...new Set(candidates)]) {
+    if(!fs.existsSync(file)||!fs.statSync(file).isFile())continue;
+    let bin=file,prefixArgs=[];
+    if(!/\.exe$/i.test(file)) {
+      if(/\.[cm]?js$/i.test(file)) {
+        const sibling=path.join(path.dirname(file),'node.exe');bin=fs.existsSync(sibling)?sibling:process.execPath;prefixArgs=[file];
+      } else {
+        // npm/shell shim (`claude`, `claude.cmd`) -> resolve the packaged claude.exe.
+        let entry=null;
+        try {
+          const shim=fs.readFileSync(file,'utf8');
+          const match=shim.match(/node_modules[\\/]@anthropic-ai[\\/]claude-code[\\/]bin[\\/]claude\.exe/i);
+          if(match)entry=path.join(path.dirname(file),match[0]);
+        } catch { /* not a text shim */ }
+        if(!entry||!fs.existsSync(entry))continue;
+        bin=entry;
+      }
+    }
+    const label=[bin,...prefixArgs].join(' ');
+    const help=probeCli(bin,[...prefixArgs,'--help'],{env});
+    const missing=HELP_FLAGS.filter(f=>!help.out.includes(f));
+    if(help.status!==0||missing.length){rejected.push(`${label}: --help ${help.error?'probe error '+help.error:'exit '+help.status}${missing.length?'; missing '+missing.join(' '):''}`);continue;}
+    const versionResult=probeCli(bin,[...prefixArgs,'--version'],{env});
+    const version=/^(\d+\.\d+\.\d+)/.exec(versionResult.stdout.trim())?.[1];
+    if(versionResult.status!==0||!version){rejected.push(`${label}: --version ${versionResult.error?'probe error '+versionResult.error:'exit '+versionResult.status+'; unusable output '+JSON.stringify(versionResult.stdout.trim().slice(0,120))}`);continue;}
+    return {agent:'claude',config:{id:'claude',label:'Claude Code CLI',version,bin,prefixArgs,available:true,native:prefixArgs.length===0,completionMarker:'__ORCH_DONE__',modelEnv:'ORCH_MODEL',effortEnv:'ORCH_EFFORT'}};
+  }
+  throw new Error(`CLI_MISSING: claude; no supported installed Claude Code CLI found. No fallback or automatic install. Tried: ${rejected.join(' | ')||'no candidate found on disk'}`);
+}
+// Base argv for `claude -p` (print mode, non-interactive; the orchestrator has
+// already normalized authorization, so permission prompts are skipped). The
+// prompt is appended by the caller right after -p, mirroring the kimi adapter.
+export function claudeArgs(config,{model,effort}={}) {
+  const hasEffort=effort&&String(effort).trim()&&!/\s/.test(String(effort));
+  return [...(config.prefixArgs||[]),
+    '--dangerously-skip-permissions',
+    ...(model&&String(model).trim()&&!/\s/.test(String(model))?['--model',String(model).trim()]:[]),
+    ...(hasEffort?['--effort',String(effort).trim()]:[]),
+    '-p'];
+}

package/scripts/core/claude-runtime.mjs

@@ -0,0 +1,111 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawn} from 'node:child_process';
+import {claudeArgs} from './claude-host.mjs';
+import {nativeArgumentLines} from './native-argv.mjs';
+
+const quote=(s)=>"'"+String(s).replaceAll("'","''")+"'";
+
+// Claude Code cold start can be slower than the 60s codex default; keep the same
+// explicit knob as the kimi adapter.
+export const CLAUDE_DECOMPOSE_TIMEOUT_DEFAULT_MS = 240000;
+export function claudePlannerTimeoutMs(env = process.env) {
+  const v = Number(env.ORCH_DECOMPOSE_TIMEOUT_MS);
+  return Number.isFinite(v) && v > 0 ? v : CLAUDE_DECOMPOSE_TIMEOUT_DEFAULT_MS;
+}
+
+// Planner: `claude -p` prints the final assistant text on stdout in print mode.
+export async function runClaudePlanner(config,prompt,cwd) {
+  const args=[...claudeArgs(config,{model:process.env.ORCH_MODEL,effort:process.env.ORCH_EFFORT}),prompt];
+  return new Promise((resolve,reject)=>{
+    const child=spawn(config.bin,args,{cwd,env:process.env,windowsHide:true,shell:false,stdio:['ignore','pipe','pipe']});
+    let raw='',errorText='',timedOut=false;
+    const timer=setTimeout(()=>{timedOut=true;child.kill();},claudePlannerTimeoutMs());
+    child.stdout.on('data',(b)=>{raw+=b;if(raw.length>8000000)child.kill();});
+    child.stderr.on('data',(b)=>{errorText+=b;});
+    child.on('error',(e)=>{clearTimeout(timer);reject(e);});
+    child.on('exit',(code)=>{
+      clearTimeout(timer);
+      try {
+        if(timedOut||code!==0)throw new Error(timedOut?'CLAUDE_PLANNER_TIMEOUT':'CLAUDE_PLANNER_FAILED: exit '+code+(errorText?': '+String(errorText).slice(0,300):''));
+        const final=String(raw||'').trim();
+        if(!final)throw new Error('CLAUDE_PLANNER_EMPTY_RESPONSE'+(errorText?': '+String(errorText).slice(0,300):''));
+        resolve({final});
+      } catch(e){reject(e);}
+    });
+  });
+}
+
+export function writeClaudeLauncher(config,{key,prompt,suffix,workspace,temp}) {
+  const stem=String(key+'-'+suffix).replace(/[^a-zA-Z0-9_-]/g,'-');
+  const token=/【本块唯一标识】\s*([A-Za-z0-9][A-Za-z0-9_-]*)/.exec(prompt)?.[1];
+  if(!token)throw new Error('Claude window requires a completion token');
+  fs.mkdirSync(temp,{recursive:true});
+  const lp=path.join(temp,'win-launch-'+stem+'.ps1');
+  const pidf=path.join(temp,'window-'+stem+'.pid');
+  const pf=path.join(temp,'agent-win-'+stem+'.md');
+  const rf=path.join(temp,'win-'+stem+'.result.json');
+  const log=path.join(temp,'win-'+stem+'.out.log');
+  fs.writeFileSync(pf,prompt,'utf8');
+  const args=claudeArgs(config,{model:process.env.ORCH_MODEL,effort:process.env.ORCH_EFFORT});
+  const body=[
+    "$ErrorActionPreference = 'Continue'",
+    'trap { exit 0 }',
+    `$PID | Set-Content -LiteralPath ${quote(pidf)} -Encoding UTF8`,
+    '[Console]::OutputEncoding = [System.Text.Encoding]::UTF8',
+    '$OutputEncoding = [System.Text.Encoding]::UTF8',
+    'chcp 65001 | Out-Null',
+    '[Console]::InputEncoding = [System.Text.Encoding]::UTF8',
+    'Write-Host "============================================="',
+    'Write-Host "  CLAUDE CODE TASK RUNNING - closes automatically on completion"',
+    'Write-Host "============================================="',
+    `Set-Location -LiteralPath ${quote(workspace)}`,
+    `$env:ORCH_WINDOW = '1'`,
+    `$token = ${quote(token)}`,
+    `$log = ${quote(log)}`,
+    `$resultFile = ${quote(rf)}`,
+    "function Write-Result {",
+    "  param([int]$code,[string]$report)",
+    "  try {",
+    "    $json = '{\"__EXIT__\":' + $code + ',\"__DONE__\":true,\"__REPORT__\":' + (ConvertTo-Json $report -Compress) + '}'",
+    "    $d = Split-Path -Parent $resultFile; if ($d -and -not (Test-Path -LiteralPath $d)) { New-Item -ItemType Directory -Force -Path $d | Out-Null }",
+    "    Set-Content -LiteralPath $resultFile -Value ($json + \"`r`n__EXIT__=\" + $code) -Encoding UTF8",
+    "    try { Set-Content -LiteralPath ($resultFile + '.self-closed') -Value '1' -Encoding ASCII } catch { }",
+    "  } catch { }",
+    "}",
+    "$p = (Get-Content -Raw -Encoding UTF8 '"+String(pf).replace(/'/g,"''")+"').Trim()",
+    "if ([string]::IsNullOrWhiteSpace($p)) { Write-Result 2 ''; exit 0 }",
+    "$agentArgs = @(" + args.map(quote).join(',') + ') + @($p)',
+    ...nativeArgumentLines(),
+    `& ${quote(config.bin)} @agentArgs 2>&1 | ForEach-Object { if ($_ -is [System.Management.Automation.ErrorRecord]) { $_.TargetObject } else { $_ } } | Tee-Object -FilePath $log`,
+    "$code = $LASTEXITCODE",
+    "$report = ''",
+    "if (Test-Path -LiteralPath $log) {",
+    "  $lines = Get-Content -LiteralPath $log -Encoding UTF8 -ErrorAction SilentlyContinue",
+    "  $hit = $lines | Where-Object { $_.Contains($token) } | Select-Object -Last 1",
+    "  if ($hit) { $report = $hit } else { $report = ($lines | Select-Object -Last 3) -join \"`n\" }",
+    "}",
+    "Write-Result $code $report",
+    'exit 0',
+  ].join('\r\n');
+  fs.writeFileSync(lp,'\uFEFF'+body,'utf8');
+  return {lp,pidf,pf,rf,log};
+}
+
+export async function waitClaudeResult(rf,timeoutMs,pidf) {
+  const end=Date.now()+timeoutMs;
+  while(Date.now()<end) {
+    if(fs.existsSync(rf)) {
+      try {
+        const r=JSON.parse(fs.readFileSync(rf,'utf8').replace(/^\uFEFF/,'').split(/\r?\n/)[0]);
+        return {done:true,exitCode:r.__EXIT__,text:r.__REPORT__||''};
+      } catch {}
+    }
+    if(fs.existsSync(pidf)) {
+      const pid=Number(fs.readFileSync(pidf,'utf8').replace(/^\uFEFF/,''));
+      try{process.kill(pid,0);}catch{return {done:true,exitCode:1,text:'Claude launcher exited without result'};}
+    }
+    await new Promise((r)=>setTimeout(r,300));
+  }
+  return {done:false,exitCode:null,text:'Claude completion timeout'};
+}