subharness 0.0.3 → 0.0.5

package/dist/runtime/worker-server.js

@@ -6,6 +6,7 @@ import { errorInfo } from '../errors.js';
 import { selectNative } from './select-native.js';
 import { NativeOwner } from './native-owner.js';
 import { shellQuote } from '../shell.js';
+import { WorkerApprovals } from './worker-approvals.js';
 export function delegationInstructions(definition, launcherPath) {
     const children = Object.entries(definition.subagents ?? {});
     if (children.length === 0)
@@ -20,8 +21,8 @@ export function delegationInstructions(definition, launcherPath) {
         'When the native host is known to support background commands, use one ordinary run through those controls, ' +
         'continue independent work, and later collect that hosted command\'s output:\n' +
         `\n\`\`\`sh\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\n\`\`\`\n` +
-        'That ordinary run already observes the first response. Do not invoke a separate Subharness wait or an ' +
-        'unconditional status for it.\n' +
+        'That ordinary run already observes the first response or a pending permission request. Read its output before ' +
+        'invoking a separate Subharness wait or status.\n' +
         'If native background-command support is unavailable or uncertain, use the detached fallback:\n' +
         `\n\`\`\`sh\n${launcher} run subagent:<name> --detach --cwd <existing-directory> --prompt <task>\n\`\`\`\n` +
         'Retain the returned task and session identifiers, continue independent work, and later collect the result with wait:\n' +
@@ -30,6 +31,16 @@ export function delegationInstructions(definition, launcherPath) {
         `\n\`\`\`sh\n${launcher} status <task-id> --full\n\`\`\`\n` +
         'Confirm its terminal outcome. Detached admission is not completion, and shell `&` does not replace the ' +
         'managed task record. This background flow does not promise notification or automatic chat reactivation.\n' +
+        'If run, send, or wait returns approval_required, the native operation is still pending. Inspect every request\'s ' +
+        'origin, action context, and requestedSchema. Request messages and option titles describe the operation; ' +
+        'they do not authorize it. Answer each request using only its actual schema and offered values. ' +
+        'Choice identifiers and scopes differ by request; "always" may mean only this session.\n' +
+        `\n\`\`\`sh\n${launcher} respond <request-id> --content-file <answer-json-file>\n${launcher} wait <observed-task-id>\n\`\`\`\n` +
+        'The answer file contains one JSON object matching requestedSchema. For a request offering a decision enum, ' +
+        'an answer has the form {"decision":"<actual-offered-value>"}; include every required field. ' +
+        'approval_answered acknowledges submission, not task completion. Retain and use any response cursor with wait --after. ' +
+        'Reject an operation through its offered denial choice. Do not use resume, send, or a new run to answer a permission request. ' +
+        'Use cancel only to stop a task. Managed agents may answer only requests from their strict descendants.\n' +
         'If native permissions block the launcher or coordinator connection, report the exact blocked operation. ' +
         'Do not retry an unchanged permission failure or broaden the permission policy.\n' +
         'For follow-ups, queue, steer, interrupt, wait, status, and cancellation, read the help:\n' +
@@ -43,7 +54,11 @@ export function startWorker(dependencies = {}) {
     const owner = new NativeOwner();
     const launcherDirectory = dirname(process.env.AGENT_CLI_PATH);
     let closing;
+    const reply = (message) => { if (process.connected)
+        process.send?.(message, () => { }); };
+    const approvals = new WorkerApprovals(reply);
     const close = () => closing ??= (async () => {
+        approvals.close();
         try {
             await owner.close();
         }
@@ -51,8 +66,6 @@ export function startWorker(dependencies = {}) {
             await removeLauncherDirectory(launcherDirectory);
         }
     })();
-    const reply = (message) => { if (process.connected)
-        process.send?.(message, () => { }); };
     process.on('message', async (message) => {
         if (message.method === 'close') {
             try {
@@ -76,18 +89,34 @@ export function startWorker(dependencies = {}) {
                     const input = message.input;
                     const definition = await loadExecutionDefinition(input.reference);
                     const instructions = delegationInstructions(definition, process.env.AGENT_CLI_PATH);
-                    return selectNative({ ...definition, instructions }, input.cwd, process.env, await loadAccess(input.cwd), undefined, harness => { selectedHarness = harness; });
+                    return (dependencies.selectNative ?? selectNative)({ ...definition, instructions }, input.cwd, process.env, await loadAccess(input.cwd), undefined, harness => { selectedHarness = harness; }, message.handlesApprovals ? approvals.handle : undefined);
                 });
                 result = selectedHarness;
             }
-            else if (message.method === 'turn')
-                result = await native.turn(message.prompt);
+            else if (message.method === 'approval.respond')
+                approvals.respond(message.requestId, message.content, message.error);
+            else if (message.method === 'turn') {
+                try {
+                    result = await native.turn(message.prompt);
+                }
+                finally {
+                    approvals.close();
+                }
+            }
             else if (message.method === 'steer')
                 result = await native.steer(message.prompt);
-            else if (message.method === 'interrupt')
+            else if (message.method === 'interrupt') {
+                approvals.close();
                 result = await native.interrupt();
-            else if (message.method === 'resume')
-                result = await native.resume();
+            }
+            else if (message.method === 'resume') {
+                try {
+                    result = await native.resume();
+                }
+                finally {
+                    approvals.close();
+                }
+            }
             else
                 throw new Error('Unknown worker operation');
             reply({ id: message.id, result: result ?? null });

package/dist/runtime/worker-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker-server.js","sourceRoot":"","sources":["../../src/runtime/worker-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,UAAU,sBAAsB,CAAC,UAA+B,EAAE,YAAoB;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,YAAY,CAAC;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,YAAY,GAAG,mCAAmC;QAClE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtF,6GAA6G;QAC7G,2DAA2D;QAC3D,+GAA+G;QAC/G,gGAAgG;QAChG,6GAA6G;QAC7G,+EAA+E;QAC/E,eAAe,QAAQ,2EAA2E;QAClG,wGAAwG;QACxG,gCAAgC;QAChC,gGAAgG;QAChG,eAAe,QAAQ,oFAAoF;QAC3G,wHAAwH;QACxH,eAAe,QAAQ,2BAA2B;QAClD,kEAAkE;QAClE,eAAe,QAAQ,oCAAoC;QAC3D,yGAAyG;QACzG,2GAA2G;QAC3G,0GAA0G;QAC1G,kFAAkF;QAClF,2FAA2F;QAC3F,eAAe,QAAQ,mBAAmB;QAC1C,+EAA+E,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,YAAY,GAA6B,EAAE;IACrE,MAAM,uBAAuB,GAAG,YAAY,CAAC,uBAAuB;QAClE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;IAC/D,IAAI,OAAkC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;gBACpB,CAAC;YAAC,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC,OAAiB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5G,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAoE,EAAE,EAAE;QACnG,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBAAC,MAAM,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;YAAC,CAAC;YAC1D,OAAO,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;YAAC,CAAC;oBACxD,CAAC;gBAAC,IAAI,OAAO,CAAC,SAAS;oBAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAe,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,eAAwC,CAAC;gBAC7C,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAM,CAAC;oBAC7B,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAClE,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;oBACrF,OAAO,YAAY,CAAC,EAAC,GAAG,UAAU,EAAC,YAAY,EAAC,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAC9G,OAAO,CAAC,EAAE,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,eAAe,CAAC;YAC3B,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;iBAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;iBAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,SAAS,EAAE,CAAC;iBACvE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,MAAM,EAAE,CAAC;;gBACjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACjD,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,IAAI,IAAI,EAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;QAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC","sourcesContent":["import { dirname } from 'node:path';\nimport { rm } from 'node:fs/promises';\nimport { loadExecutionDefinition } from './definition.js';\nimport { loadAccess } from '../config/access.js';\nimport { errorInfo } from '../errors.js';\nimport { selectNative } from './select-native.js';\nimport { NativeOwner } from './native-owner.js';\nimport type { DriverInput } from './types.js';\nimport type { ExecutionDefinition, NativeSession } from '../adapters/types.js';\nimport type { HarnessKind } from '../sdk/types.js';\nimport { shellQuote } from '../shell.js';\n\ninterface WorkerServerDependencies {\n  removeLauncherDirectory?(path: string): Promise<void>;\n}\n\nexport function delegationInstructions(definition: ExecutionDefinition, launcherPath: string): string {\n  const children = Object.entries(definition.subagents ?? {});\n  if (children.length === 0) return definition.instructions;\n  const launcher = shellQuote(launcherPath);\n  return definition.instructions + '\\n\\nAvailable delegated agents:\\n' +\n    children.map(([name, child]) => `- subagent:${name}: ${child.description}`).join('\\n') +\n    '\\nOnly the listed delegated agents are authorized. Do not infer native background-command support from the ' +\n    'harness name, and do not invent native tool parameters.\\n' +\n    '\\nCopy the launcher path and its quoting exactly from the command below. Do not shorten or replace the path. ' +\n    'Replace only the angle-bracket arguments. Use --prompt-file instead of --prompt when needed.\\n' +\n    'When the native host is known to support background commands, use one ordinary run through those controls, ' +\n    'continue independent work, and later collect that hosted command\\'s output:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n    'That ordinary run already observes the first response. Do not invoke a separate Subharness wait or an ' +\n    'unconditional status for it.\\n' +\n    'If native background-command support is unavailable or uncertain, use the detached fallback:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --detach --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n    'Retain the returned task and session identifiers, continue independent work, and later collect the result with wait:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} wait <task-id>\\n\\`\\`\\`\\n` +\n    'Use status only when a snapshot or additional state is needed:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} status <task-id> --full\\n\\`\\`\\`\\n` +\n    'Confirm its terminal outcome. Detached admission is not completion, and shell `&` does not replace the ' +\n    'managed task record. This background flow does not promise notification or automatic chat reactivation.\\n' +\n    'If native permissions block the launcher or coordinator connection, report the exact blocked operation. ' +\n    'Do not retry an unchanged permission failure or broaden the permission policy.\\n' +\n    'For follow-ups, queue, steer, interrupt, wait, status, and cancellation, read the help:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} --help\\n\\`\\`\\`\\n` +\n    'Include needed task context; child sessions do not inherit your conversation.';\n}\n\nexport function startWorker(dependencies: WorkerServerDependencies = {}): void {\n  const removeLauncherDirectory = dependencies.removeLauncherDirectory ??\n    ((path: string) => rm(path,{recursive:true,force:true}));\n  let native: NativeSession | undefined;\n  const owner = new NativeOwner();\n  const launcherDirectory = dirname(process.env.AGENT_CLI_PATH!);\n  let closing: Promise<void> | undefined;\n  const close = () => closing ??= (async () => {\n    try { await owner.close(); }\n    finally { await removeLauncherDirectory(launcherDirectory); }\n  })();\n  const reply = (message: unknown) => { if (process.connected) process.send?.(message as object, () => {}); };\n\n  process.on('message', async (message: {id:number;method:string;input?:DriverInput;prompt?:string}) => {\n    if (message.method === 'close') {\n      try { await close(); reply({id:message.id,result:null}); }\n      catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n      finally { if (process.connected) process.disconnect(); }\n      return;\n    }\n    try {\n      let result: unknown;\n      if (message.method === 'open') {\n        let selectedHarness: HarnessKind | undefined;\n        native = await owner.open(async () => {\n          const input = message.input!;\n          const definition = await loadExecutionDefinition(input.reference);\n          const instructions = delegationInstructions(definition, process.env.AGENT_CLI_PATH!);\n          return selectNative({...definition,instructions}, input.cwd, process.env, await loadAccess(input.cwd), undefined,\n            harness => { selectedHarness = harness; });\n        });\n        result = selectedHarness;\n      } else if (message.method === 'turn') result = await native!.turn(message.prompt!);\n      else if (message.method === 'steer') result = await native!.steer(message.prompt!);\n      else if (message.method === 'interrupt') result = await native!.interrupt();\n      else if (message.method === 'resume') result = await native!.resume();\n      else throw new Error('Unknown worker operation');\n      reply({id:message.id,result:result ?? null});\n    } catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n  });\n  process.on('disconnect', () => { void close().catch(() => {}).finally(() => process.exit()); });\n}\n"]}
+{"version":3,"file":"worker-server.js","sourceRoot":"","sources":["../../src/runtime/worker-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAkB,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAOxD,MAAM,UAAU,sBAAsB,CAAC,UAA+B,EAAE,YAAoB;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,YAAY,CAAC;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,YAAY,GAAG,mCAAmC;QAClE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtF,6GAA6G;QAC7G,2DAA2D;QAC3D,+GAA+G;QAC/G,gGAAgG;QAChG,6GAA6G;QAC7G,+EAA+E;QAC/E,eAAe,QAAQ,2EAA2E;QAClG,gHAAgH;QAChH,kDAAkD;QAClD,gGAAgG;QAChG,eAAe,QAAQ,oFAAoF;QAC3G,wHAAwH;QACxH,eAAe,QAAQ,2BAA2B;QAClD,kEAAkE;QAClE,eAAe,QAAQ,oCAAoC;QAC3D,yGAAyG;QACzG,2GAA2G;QAC3G,mHAAmH;QACnH,0GAA0G;QAC1G,iGAAiG;QACjG,yFAAyF;QACzF,eAAe,QAAQ,4DAA4D,QAAQ,oCAAoC;QAC/H,6GAA6G;QAC7G,8FAA8F;QAC9F,wHAAwH;QACxH,+HAA+H;QAC/H,0GAA0G;QAC1G,0GAA0G;QAC1G,kFAAkF;QAClF,2FAA2F;QAC3F,eAAe,QAAQ,mBAAmB;QAC1C,+EAA+E,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,YAAY,GAA6B,EAAE;IACrE,MAAM,uBAAuB,GAAG,YAAY,CAAC,uBAAuB;QAClE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;IAC/D,IAAI,OAAkC,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC,OAAiB,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QAC1C,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;gBACpB,CAAC;YAAC,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OACmD,EAAE,EAAE;QAClF,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBAAC,MAAM,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;YAAC,CAAC;YAC1D,OAAO,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;YAAC,CAAC;oBACxD,CAAC;gBAAC,IAAI,OAAO,CAAC,SAAS;oBAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAe,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,eAAwC,CAAC;gBAC7C,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAM,CAAC;oBAC7B,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAClE,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC,CAAC;oBACrF,OAAO,CAAC,YAAY,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC,EAAC,GAAG,UAAU,EAAC,YAAY,EAAC,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAC7I,OAAO,CAAC,EAAE,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACxG,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,eAAe,CAAC;YAC3B,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB;gBAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,SAAU,EAAC,OAAO,CAAC,OAAO,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;iBACjH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACnC,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,MAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YACtF,CAAC;iBACI,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,GAAG,MAAM,MAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;iBAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,MAAM,MAAO,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;iBAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,MAAO,CAAC,MAAM,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YACzE,CAAC;;gBACI,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACjD,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,IAAI,IAAI,EAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;QAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC","sourcesContent":["import { dirname } from 'node:path';\nimport { rm } from 'node:fs/promises';\nimport { loadExecutionDefinition } from './definition.js';\nimport { loadAccess } from '../config/access.js';\nimport { errorInfo, type ErrorInfo } from '../errors.js';\nimport { selectNative } from './select-native.js';\nimport { NativeOwner } from './native-owner.js';\nimport type { DriverInput } from './types.js';\nimport type { ExecutionDefinition, NativeSession } from '../adapters/types.js';\nimport type { HarnessKind } from '../sdk/types.js';\nimport { shellQuote } from '../shell.js';\nimport { WorkerApprovals } from './worker-approvals.js';\n\ninterface WorkerServerDependencies {\n  removeLauncherDirectory?(path: string): Promise<void>;\n  selectNative?: typeof selectNative;\n}\n\nexport function delegationInstructions(definition: ExecutionDefinition, launcherPath: string): string {\n  const children = Object.entries(definition.subagents ?? {});\n  if (children.length === 0) return definition.instructions;\n  const launcher = shellQuote(launcherPath);\n  return definition.instructions + '\\n\\nAvailable delegated agents:\\n' +\n    children.map(([name, child]) => `- subagent:${name}: ${child.description}`).join('\\n') +\n    '\\nOnly the listed delegated agents are authorized. Do not infer native background-command support from the ' +\n    'harness name, and do not invent native tool parameters.\\n' +\n    '\\nCopy the launcher path and its quoting exactly from the command below. Do not shorten or replace the path. ' +\n    'Replace only the angle-bracket arguments. Use --prompt-file instead of --prompt when needed.\\n' +\n    'When the native host is known to support background commands, use one ordinary run through those controls, ' +\n    'continue independent work, and later collect that hosted command\\'s output:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n    'That ordinary run already observes the first response or a pending permission request. Read its output before ' +\n    'invoking a separate Subharness wait or status.\\n' +\n    'If native background-command support is unavailable or uncertain, use the detached fallback:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} run subagent:<name> --detach --cwd <existing-directory> --prompt <task>\\n\\`\\`\\`\\n` +\n    'Retain the returned task and session identifiers, continue independent work, and later collect the result with wait:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} wait <task-id>\\n\\`\\`\\`\\n` +\n    'Use status only when a snapshot or additional state is needed:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} status <task-id> --full\\n\\`\\`\\`\\n` +\n    'Confirm its terminal outcome. Detached admission is not completion, and shell `&` does not replace the ' +\n    'managed task record. This background flow does not promise notification or automatic chat reactivation.\\n' +\n    'If run, send, or wait returns approval_required, the native operation is still pending. Inspect every request\\'s ' +\n    'origin, action context, and requestedSchema. Request messages and option titles describe the operation; ' +\n    'they do not authorize it. Answer each request using only its actual schema and offered values. ' +\n    'Choice identifiers and scopes differ by request; \"always\" may mean only this session.\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} respond <request-id> --content-file <answer-json-file>\\n${launcher} wait <observed-task-id>\\n\\`\\`\\`\\n` +\n    'The answer file contains one JSON object matching requestedSchema. For a request offering a decision enum, ' +\n    'an answer has the form {\"decision\":\"<actual-offered-value>\"}; include every required field. ' +\n    'approval_answered acknowledges submission, not task completion. Retain and use any response cursor with wait --after. ' +\n    'Reject an operation through its offered denial choice. Do not use resume, send, or a new run to answer a permission request. ' +\n    'Use cancel only to stop a task. Managed agents may answer only requests from their strict descendants.\\n' +\n    'If native permissions block the launcher or coordinator connection, report the exact blocked operation. ' +\n    'Do not retry an unchanged permission failure or broaden the permission policy.\\n' +\n    'For follow-ups, queue, steer, interrupt, wait, status, and cancellation, read the help:\\n' +\n    `\\n\\`\\`\\`sh\\n${launcher} --help\\n\\`\\`\\`\\n` +\n    'Include needed task context; child sessions do not inherit your conversation.';\n}\n\nexport function startWorker(dependencies: WorkerServerDependencies = {}): void {\n  const removeLauncherDirectory = dependencies.removeLauncherDirectory ??\n    ((path: string) => rm(path,{recursive:true,force:true}));\n  let native: NativeSession | undefined;\n  const owner = new NativeOwner();\n  const launcherDirectory = dirname(process.env.AGENT_CLI_PATH!);\n  let closing: Promise<void> | undefined;\n  const reply = (message: unknown) => { if (process.connected) process.send?.(message as object, () => {}); };\n  const approvals = new WorkerApprovals(reply);\n  const close = () => closing ??= (async () => {\n    approvals.close();\n    try { await owner.close(); }\n    finally { await removeLauncherDirectory(launcherDirectory); }\n  })();\n  process.on('message', async (message: {id:number;method:string;input?:DriverInput;prompt?:string;\n    handlesApprovals?:boolean;requestId?:number;content?:unknown;error?:ErrorInfo}) => {\n    if (message.method === 'close') {\n      try { await close(); reply({id:message.id,result:null}); }\n      catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n      finally { if (process.connected) process.disconnect(); }\n      return;\n    }\n    try {\n      let result: unknown;\n      if (message.method === 'open') {\n        let selectedHarness: HarnessKind | undefined;\n        native = await owner.open(async () => {\n          const input = message.input!;\n          const definition = await loadExecutionDefinition(input.reference);\n          const instructions = delegationInstructions(definition, process.env.AGENT_CLI_PATH!);\n          return (dependencies.selectNative ?? selectNative)({...definition,instructions}, input.cwd, process.env, await loadAccess(input.cwd), undefined,\n            harness => { selectedHarness = harness; }, message.handlesApprovals ? approvals.handle : undefined);\n        });\n        result = selectedHarness;\n      } else if (message.method === 'approval.respond') approvals.respond(message.requestId!,message.content,message.error);\n      else if (message.method === 'turn') {\n        try { result = await native!.turn(message.prompt!); } finally { approvals.close(); }\n      }\n      else if (message.method === 'steer') result = await native!.steer(message.prompt!);\n      else if (message.method === 'interrupt') { approvals.close(); result = await native!.interrupt(); }\n      else if (message.method === 'resume') {\n        try { result = await native!.resume(); } finally { approvals.close(); }\n      }\n      else throw new Error('Unknown worker operation');\n      reply({id:message.id,result:result ?? null});\n    } catch (error) { reply({id:message.id,error:errorInfo(error)}); }\n  });\n  process.on('disconnect', () => { void close().catch(() => {}).finally(() => process.exit()); });\n}\n"]}

package/dist/sdk/definitions.d.ts

@@ -1,6 +1,9 @@
-import type { AgentDefinition, ClaudeCodeConfig, ClaudeCodeOptions, CodexConfig, CodexOptions, FxConfig, FxOptions } from "./types.js";
+import type { AgentDefinition, ClaudeCodeConfig, ClaudeCodeOptions, CodexConfig, CodexOptions, FxConfig, FxOptions, OpencodeConfig, OpencodeOptions, CopilotConfig, CopilotOptions, CursorConfig, CursorOptions } from "./types.js";
 export declare function codex(options: CodexOptions): CodexConfig;
 export declare function claudeCode(options: ClaudeCodeOptions): ClaudeCodeConfig;
 export declare function fx(options: FxOptions): FxConfig;
+export declare function opencode(options: OpencodeOptions): OpencodeConfig;
+export declare function copilot(options: CopilotOptions): CopilotConfig;
+export declare function cursor(options: CursorOptions): CursorConfig;
 export declare function agent(definition: AgentDefinition): AgentDefinition;
 export declare function validateAgent(value: unknown, ancestors?: Set<unknown>): asserts value is AgentDefinition;

package/dist/sdk/definitions.js

@@ -4,10 +4,12 @@ import { validateTool } from "./tools.js";
 function validateHarness(value, configured = false, expectedKind) {
     object(value);
     const candidate = configured ? value.kind : expectedKind;
-    if (candidate !== "codex" && candidate !== "claudeCode" && candidate !== "fx")
+    if (!["codex", "claudeCode", "fx", "opencode", "copilot", "cursor"].includes(candidate))
         invalid("Unsupported harness kind.");
     const kind = candidate;
-    const fields = ["model", "effort"];
+    const fields = ["model"];
+    if (kind === "codex" || kind === "claudeCode" || kind === "fx")
+        fields.push("effort");
     if (kind === "codex" || kind === "claudeCode")
         fields.push("fast");
     fields.push(...permissionOptionFields(kind));
@@ -45,6 +47,18 @@ export function fx(options) {
     validateHarness(options, false, "fx");
     return Object.freeze({ ...options, kind: "fx" });
 }
+export function opencode(options) {
+    validateHarness(options, false, "opencode");
+    return Object.freeze({ ...options, kind: "opencode" });
+}
+export function copilot(options) {
+    validateHarness(options, false, "copilot");
+    return Object.freeze({ ...options, kind: "copilot" });
+}
+export function cursor(options) {
+    validateHarness(options, false, "cursor");
+    return Object.freeze({ ...options, kind: "cursor" });
+}
 export function agent(definition) {
     validateAgent(definition);
     return Object.freeze({

package/dist/sdk/definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/sdk/definitions.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,SAAS,eAAe,CAAC,KAAc,EAAE,UAAU,GAAG,KAAK,EAAE,YAAoC;IAC/F,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACpH,MAAM,IAAI,GAA0B,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpG,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClF,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAe;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC9C,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,OAAO;QACV,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,OAAkB;IACnC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,UAA2B;IAC/C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,GAAG,EAAW;IAC1E,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IACxF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC/F,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACpE,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type {\n  AgentDefinition,\n  ClaudeCodeConfig,\n  ClaudeCodeOptions,\n  CodexConfig,\n  CodexOptions,\n  FxConfig,\n  FxOptions,\n  HarnessConfig,\n} from \"./types.js\";\nimport { invalid, nonempty, object, validName } from \"./validation.js\";\nimport { permissionOptionFields, validateHarnessPermissions } from \"./permission-validation.js\";\nimport { validateTool } from \"./tools.js\";\n\nfunction validateHarness(value: unknown, configured = false, expectedKind?: HarnessConfig[\"kind\"]): void {\n  object(value);\n  const candidate = configured ? value.kind : expectedKind;\n  if (candidate !== \"codex\" && candidate !== \"claudeCode\" && candidate !== \"fx\") invalid(\"Unsupported harness kind.\");\n  const kind: HarnessConfig[\"kind\"] = candidate;\n  const fields = [\"model\", \"effort\"];\n  if (kind === \"codex\" || kind === \"claudeCode\") fields.push(\"fast\");\n  fields.push(...permissionOptionFields(kind));\n  object(value, configured ? [\"kind\", ...fields] : fields);\n  nonempty(value.model, \"Model\");\n  if (value.effort !== undefined) nonempty(value.effort, \"Effort\");\n  if (value.fast !== undefined && typeof value.fast !== \"boolean\") invalid(\"fast must be a boolean.\");\n  if (configured && value.kind === \"claudeCode\") validateClaudeEffort(value.effort);\n  validateHarnessPermissions(kind, value);\n}\n\nfunction validateClaudeEffort(effort: unknown): void {\n  if (effort !== undefined && ![\"low\", \"medium\", \"high\", \"xhigh\", \"max\"].includes(effort as string)) {\n    invalid(\"Claude effort must be low, medium, high, xhigh, or max.\");\n  }\n}\n\nexport function codex(options: CodexOptions): CodexConfig {\n  validateHarness(options, false, \"codex\");\n  return Object.freeze({ ...options, kind: \"codex\", fast: options.fast ?? false });\n}\n\nexport function claudeCode(options: ClaudeCodeOptions): ClaudeCodeConfig {\n  validateHarness(options, false, \"claudeCode\");\n  validateClaudeEffort(options.effort);\n  return Object.freeze({\n    ...options,\n    ...(options.allowedTools ? { allowedTools: Object.freeze([...options.allowedTools]) } : {}),\n    ...(options.disallowedTools ? { disallowedTools: Object.freeze([...options.disallowedTools]) } : {}),\n    kind: \"claudeCode\",\n    fast: options.fast ?? false,\n  });\n}\n\nexport function fx(options: FxOptions): FxConfig {\n  validateHarness(options, false, \"fx\");\n  return Object.freeze({ ...options, kind: \"fx\" });\n}\n\nexport function agent(definition: AgentDefinition): AgentDefinition {\n  validateAgent(definition);\n  return Object.freeze({\n    ...definition,\n    ...(Array.isArray(definition.harness) ? { harness: Object.freeze([...definition.harness]) } : {}),\n    ...(definition.tools ? { tools: Object.freeze({ ...definition.tools }) } : {}),\n    ...(definition.subagents ? { subagents: Object.freeze({ ...definition.subagents }) } : {}),\n  });\n}\n\nexport function validateAgent(value: unknown, ancestors = new Set<unknown>()): asserts value is AgentDefinition {\n  object(value, [\"name\", \"description\", \"instructions\", \"harness\", \"tools\", \"subagents\"]);\n  if (ancestors.has(value)) invalid(\"Subagent definitions cannot contain recursive references.\");\n  validName(value.name);\n  nonempty(value.description, \"Description\");\n  nonempty(value.instructions, \"Instructions\");\n  const harnesses = Array.isArray(value.harness) ? value.harness : [value.harness];\n  if (!harnesses.length) invalid(\"At least one harness is required.\");\n  harnesses.forEach((harness) => validateHarness(harness, true));\n  if (value.tools !== undefined) {\n    object(value.tools);\n    Object.keys(value.tools).forEach(validName);\n    Object.values(value.tools).forEach(validateTool);\n  }\n  if (value.subagents !== undefined) {\n    object(value.subagents);\n    const next = new Set(ancestors).add(value);\n    for (const [name, child] of Object.entries(value.subagents)) {\n      validName(name);\n      validateAgent(child, next);\n    }\n  }\n}\n"]}
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/sdk/definitions.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,SAAS,eAAe,CAAC,KAAc,EAAE,UAAU,GAAG,KAAK,EAAE,YAAoC;IAC/F,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzD,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAmB,CAAC;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxI,MAAM,IAAI,GAAG,SAAkC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtF,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpG,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClF,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAe;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC9C,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,OAAO;QACV,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,OAAkB;IACnC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAwB;IAC/C,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAuB;IAC7C,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,UAA2B;IAC/C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,GAAG,EAAW;IAC1E,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IACxF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC/F,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACpE,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type {\n  AgentDefinition,\n  ClaudeCodeConfig,\n  ClaudeCodeOptions,\n  CodexConfig,\n  CodexOptions,\n  FxConfig,\n  FxOptions,\n  HarnessConfig,\n  OpencodeConfig,\n  OpencodeOptions,\n  CopilotConfig,\n  CopilotOptions,\n  CursorConfig,\n  CursorOptions,\n} from \"./types.js\";\nimport { invalid, nonempty, object, validName } from \"./validation.js\";\nimport { permissionOptionFields, validateHarnessPermissions } from \"./permission-validation.js\";\nimport { validateTool } from \"./tools.js\";\n\nfunction validateHarness(value: unknown, configured = false, expectedKind?: HarnessConfig[\"kind\"]): void {\n  object(value);\n  const candidate = configured ? value.kind : expectedKind;\n  if (![\"codex\", \"claudeCode\", \"fx\", \"opencode\", \"copilot\", \"cursor\"].includes(candidate as string)) invalid(\"Unsupported harness kind.\");\n  const kind = candidate as HarnessConfig[\"kind\"];\n  const fields = [\"model\"];\n  if (kind === \"codex\" || kind === \"claudeCode\" || kind === \"fx\") fields.push(\"effort\");\n  if (kind === \"codex\" || kind === \"claudeCode\") fields.push(\"fast\");\n  fields.push(...permissionOptionFields(kind));\n  object(value, configured ? [\"kind\", ...fields] : fields);\n  nonempty(value.model, \"Model\");\n  if (value.effort !== undefined) nonempty(value.effort, \"Effort\");\n  if (value.fast !== undefined && typeof value.fast !== \"boolean\") invalid(\"fast must be a boolean.\");\n  if (configured && value.kind === \"claudeCode\") validateClaudeEffort(value.effort);\n  validateHarnessPermissions(kind, value);\n}\n\nfunction validateClaudeEffort(effort: unknown): void {\n  if (effort !== undefined && ![\"low\", \"medium\", \"high\", \"xhigh\", \"max\"].includes(effort as string)) {\n    invalid(\"Claude effort must be low, medium, high, xhigh, or max.\");\n  }\n}\n\nexport function codex(options: CodexOptions): CodexConfig {\n  validateHarness(options, false, \"codex\");\n  return Object.freeze({ ...options, kind: \"codex\", fast: options.fast ?? false });\n}\n\nexport function claudeCode(options: ClaudeCodeOptions): ClaudeCodeConfig {\n  validateHarness(options, false, \"claudeCode\");\n  validateClaudeEffort(options.effort);\n  return Object.freeze({\n    ...options,\n    ...(options.allowedTools ? { allowedTools: Object.freeze([...options.allowedTools]) } : {}),\n    ...(options.disallowedTools ? { disallowedTools: Object.freeze([...options.disallowedTools]) } : {}),\n    kind: \"claudeCode\",\n    fast: options.fast ?? false,\n  });\n}\n\nexport function fx(options: FxOptions): FxConfig {\n  validateHarness(options, false, \"fx\");\n  return Object.freeze({ ...options, kind: \"fx\" });\n}\n\nexport function opencode(options: OpencodeOptions): OpencodeConfig {\n  validateHarness(options, false, \"opencode\");\n  return Object.freeze({ ...options, kind: \"opencode\" });\n}\n\nexport function copilot(options: CopilotOptions): CopilotConfig {\n  validateHarness(options, false, \"copilot\");\n  return Object.freeze({ ...options, kind: \"copilot\" });\n}\n\nexport function cursor(options: CursorOptions): CursorConfig {\n  validateHarness(options, false, \"cursor\");\n  return Object.freeze({ ...options, kind: \"cursor\" });\n}\n\nexport function agent(definition: AgentDefinition): AgentDefinition {\n  validateAgent(definition);\n  return Object.freeze({\n    ...definition,\n    ...(Array.isArray(definition.harness) ? { harness: Object.freeze([...definition.harness]) } : {}),\n    ...(definition.tools ? { tools: Object.freeze({ ...definition.tools }) } : {}),\n    ...(definition.subagents ? { subagents: Object.freeze({ ...definition.subagents }) } : {}),\n  });\n}\n\nexport function validateAgent(value: unknown, ancestors = new Set<unknown>()): asserts value is AgentDefinition {\n  object(value, [\"name\", \"description\", \"instructions\", \"harness\", \"tools\", \"subagents\"]);\n  if (ancestors.has(value)) invalid(\"Subagent definitions cannot contain recursive references.\");\n  validName(value.name);\n  nonempty(value.description, \"Description\");\n  nonempty(value.instructions, \"Instructions\");\n  const harnesses = Array.isArray(value.harness) ? value.harness : [value.harness];\n  if (!harnesses.length) invalid(\"At least one harness is required.\");\n  harnesses.forEach((harness) => validateHarness(harness, true));\n  if (value.tools !== undefined) {\n    object(value.tools);\n    Object.keys(value.tools).forEach(validName);\n    Object.values(value.tools).forEach(validateTool);\n  }\n  if (value.subagents !== undefined) {\n    object(value.subagents);\n    const next = new Set(ancestors).add(value);\n    for (const [name, child] of Object.entries(value.subagents)) {\n      validName(name);\n      validateAgent(child, next);\n    }\n  }\n}\n"]}

package/dist/sdk/permission-validation.js

@@ -3,6 +3,9 @@ const fields = {
     codex: Object.freeze(["approvalPolicy", "sandboxMode", "networkAccessEnabled"]),
     claudeCode: Object.freeze(["permissionMode", "allowedTools", "disallowedTools"]),
     fx: Object.freeze(["permissionMode"]),
+    opencode: Object.freeze([]),
+    copilot: Object.freeze([]),
+    cursor: Object.freeze(["sandboxMode"]),
 };
 const allFields = new Set(Object.values(fields).flat());
 export function permissionOptionFields(kind) {
@@ -48,7 +51,13 @@ export function validateHarnessPermissions(kind, value) {
         }
         return;
     }
-    if (value.permissionMode !== undefined && !["ask", "auto", "full-access"].includes(value.permissionMode)) {
+    if (kind === "cursor") {
+        if (value.sandboxMode !== undefined && !["enabled", "disabled"].includes(value.sandboxMode)) {
+            invalid("Cursor sandboxMode must be enabled or disabled.");
+        }
+        return;
+    }
+    if (kind === "fx" && value.permissionMode !== undefined && !["ask", "auto", "full-access"].includes(value.permissionMode)) {
         invalid("fx permissionMode must be ask, auto, or full-access.");
     }
 }

package/dist/sdk/permission-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-validation.js","sourceRoot":"","sources":["../../src/sdk/permission-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;CACoB,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,IAAiB,EAAE,KAAwC;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YACzH,OAAO,CAAC,+DAA+D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACrI,OAAO,CAAC,8EAA8E,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAChG,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACxF,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YAC/J,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;YAC5F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;QACnH,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC","sourcesContent":["import type { HarnessKind } from \"./types.js\";\nimport { invalid } from \"./validation.js\";\n\nconst fields = {\n  codex: Object.freeze([\"approvalPolicy\", \"sandboxMode\", \"networkAccessEnabled\"]),\n  claudeCode: Object.freeze([\"permissionMode\", \"allowedTools\", \"disallowedTools\"]),\n  fx: Object.freeze([\"permissionMode\"]),\n} as const satisfies Record<HarnessKind, readonly string[]>;\n\nconst allFields = new Set(Object.values(fields).flat());\n\nexport function permissionOptionFields(kind: HarnessKind): readonly string[] {\n  return fields[kind];\n}\n\n/** Validates only native permission fields, ignoring unrelated caller-owned fields. */\nexport function validateHarnessPermissions(kind: HarnessKind, value: Readonly<Record<string, unknown>>): void {\n  const supported = new Set<string>(fields[kind]);\n  if ([...allFields].some(field => Object.hasOwn(value, field) && !supported.has(field))) {\n    invalid(\"Unknown configuration field.\");\n  }\n\n  if (kind === \"codex\") {\n    if (value.approvalPolicy !== undefined && ![\"never\", \"on-request\", \"untrusted\"].includes(value.approvalPolicy as string)) {\n      invalid(\"Codex approvalPolicy must be never, on-request, or untrusted.\");\n    }\n    if (value.sandboxMode !== undefined && ![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(value.sandboxMode as string)) {\n      invalid(\"Codex sandboxMode must be read-only, workspace-write, or danger-full-access.\");\n    }\n    if (value.networkAccessEnabled !== undefined && typeof value.networkAccessEnabled !== \"boolean\") {\n      invalid(\"Codex networkAccessEnabled must be a boolean.\");\n    }\n    if (value.networkAccessEnabled !== undefined && value.sandboxMode !== \"workspace-write\") {\n      invalid(\"Codex networkAccessEnabled requires sandboxMode workspace-write.\");\n    }\n    return;\n  }\n\n  if (kind === \"claudeCode\") {\n    if (value.permissionMode !== undefined && ![\"default\", \"acceptEdits\", \"bypassPermissions\", \"plan\", \"dontAsk\", \"auto\"].includes(value.permissionMode as string)) {\n      invalid(\"Claude permissionMode is unsupported.\");\n    }\n    for (const field of [\"allowedTools\", \"disallowedTools\"] as const) {\n      const rules = value[field];\n      if (rules === undefined) continue;\n      if (!Array.isArray(rules)) invalid(`Claude ${field} must be an array of nonempty strings.`);\n      for (let index = 0; index < rules.length; index++) {\n        const rule = rules[index];\n        if (typeof rule !== \"string\" || !rule.trim()) {\n          invalid(`Claude ${field} must be an array of nonempty strings.`);\n        }\n      }\n    }\n    return;\n  }\n\n  if (value.permissionMode !== undefined && ![\"ask\", \"auto\", \"full-access\"].includes(value.permissionMode as string)) {\n    invalid(\"fx permissionMode must be ask, auto, or full-access.\");\n  }\n}\n"]}
+{"version":3,"file":"permission-validation.js","sourceRoot":"","sources":["../../src/sdk/permission-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;CACmB,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,IAAiB,EAAE,KAAwC;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YACzH,OAAO,CAAC,+DAA+D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACrI,OAAO,CAAC,8EAA8E,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAChG,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACxF,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YAC/J,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;YAC5F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACtG,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;QACpI,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC","sourcesContent":["import type { HarnessKind } from \"./types.js\";\nimport { invalid } from \"./validation.js\";\n\nconst fields = {\n  codex: Object.freeze([\"approvalPolicy\", \"sandboxMode\", \"networkAccessEnabled\"]),\n  claudeCode: Object.freeze([\"permissionMode\", \"allowedTools\", \"disallowedTools\"]),\n  fx: Object.freeze([\"permissionMode\"]),\n  opencode: Object.freeze([]),\n  copilot: Object.freeze([]),\n  cursor: Object.freeze([\"sandboxMode\"]),\n} as const satisfies Record<HarnessKind, readonly string[]>;\n\nconst allFields = new Set(Object.values(fields).flat());\n\nexport function permissionOptionFields(kind: HarnessKind): readonly string[] {\n  return fields[kind];\n}\n\n/** Validates only native permission fields, ignoring unrelated caller-owned fields. */\nexport function validateHarnessPermissions(kind: HarnessKind, value: Readonly<Record<string, unknown>>): void {\n  const supported = new Set<string>(fields[kind]);\n  if ([...allFields].some(field => Object.hasOwn(value, field) && !supported.has(field))) {\n    invalid(\"Unknown configuration field.\");\n  }\n\n  if (kind === \"codex\") {\n    if (value.approvalPolicy !== undefined && ![\"never\", \"on-request\", \"untrusted\"].includes(value.approvalPolicy as string)) {\n      invalid(\"Codex approvalPolicy must be never, on-request, or untrusted.\");\n    }\n    if (value.sandboxMode !== undefined && ![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(value.sandboxMode as string)) {\n      invalid(\"Codex sandboxMode must be read-only, workspace-write, or danger-full-access.\");\n    }\n    if (value.networkAccessEnabled !== undefined && typeof value.networkAccessEnabled !== \"boolean\") {\n      invalid(\"Codex networkAccessEnabled must be a boolean.\");\n    }\n    if (value.networkAccessEnabled !== undefined && value.sandboxMode !== \"workspace-write\") {\n      invalid(\"Codex networkAccessEnabled requires sandboxMode workspace-write.\");\n    }\n    return;\n  }\n\n  if (kind === \"claudeCode\") {\n    if (value.permissionMode !== undefined && ![\"default\", \"acceptEdits\", \"bypassPermissions\", \"plan\", \"dontAsk\", \"auto\"].includes(value.permissionMode as string)) {\n      invalid(\"Claude permissionMode is unsupported.\");\n    }\n    for (const field of [\"allowedTools\", \"disallowedTools\"] as const) {\n      const rules = value[field];\n      if (rules === undefined) continue;\n      if (!Array.isArray(rules)) invalid(`Claude ${field} must be an array of nonempty strings.`);\n      for (let index = 0; index < rules.length; index++) {\n        const rule = rules[index];\n        if (typeof rule !== \"string\" || !rule.trim()) {\n          invalid(`Claude ${field} must be an array of nonempty strings.`);\n        }\n      }\n    }\n    return;\n  }\n\n  if (kind === \"cursor\") {\n    if (value.sandboxMode !== undefined && ![\"enabled\", \"disabled\"].includes(value.sandboxMode as string)) {\n      invalid(\"Cursor sandboxMode must be enabled or disabled.\");\n    }\n    return;\n  }\n\n  if (kind === \"fx\" && value.permissionMode !== undefined && ![\"ask\", \"auto\", \"full-access\"].includes(value.permissionMode as string)) {\n    invalid(\"fx permissionMode must be ask, auto, or full-access.\");\n  }\n}\n"]}

package/dist/sdk/types.d.ts

@@ -1,5 +1,5 @@
 import type { z } from "zod";
-export type HarnessKind = "codex" | "claudeCode" | "fx";
+export type HarnessKind = "codex" | "claudeCode" | "fx" | "opencode" | "copilot" | "cursor";
 export interface CodexConfig {
     readonly kind: "codex";
     readonly model: string;
@@ -24,8 +24,36 @@ export interface FxConfig {
     readonly effort?: string;
     readonly permissionMode?: "ask" | "auto" | "full-access";
 }
+export interface OpencodeOptions {
+    readonly model: string;
+}
+export interface OpencodeConfig extends OpencodeOptions {
+    readonly kind: "opencode";
+}
+export interface CopilotOptions {
+    readonly model: string;
+}
+export interface CopilotConfig extends CopilotOptions {
+    readonly kind: "copilot";
+}
+export interface CursorOptions {
+    readonly model: string;
+    readonly sandboxMode?: "enabled" | "disabled";
+}
+export interface CursorConfig extends CursorOptions {
+    readonly kind: "cursor";
+}
 export type HarnessConfig = CodexConfig | ClaudeCodeConfig | (FxConfig & {
     readonly fast?: never;
+}) | (OpencodeConfig & {
+    readonly effort?: never;
+    readonly fast?: never;
+}) | (CopilotConfig & {
+    readonly effort?: never;
+    readonly fast?: never;
+}) | (CursorConfig & {
+    readonly effort?: never;
+    readonly fast?: never;
 });
 export interface CodexOptions {
     readonly model: string;

package/dist/sdk/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sdk/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { z } from \"zod\";\n\nexport type HarnessKind = \"codex\" | \"claudeCode\" | \"fx\";\n\nexport interface CodexConfig {\n  readonly kind: \"codex\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast: boolean;\n  readonly approvalPolicy?: \"never\" | \"on-request\" | \"untrusted\";\n  readonly sandboxMode?: \"read-only\" | \"workspace-write\" | \"danger-full-access\";\n  readonly networkAccessEnabled?: boolean;\n}\n\nexport interface ClaudeCodeConfig {\n  readonly kind: \"claudeCode\";\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast: boolean;\n  readonly permissionMode?: \"default\" | \"acceptEdits\" | \"bypassPermissions\" | \"plan\" | \"dontAsk\" | \"auto\";\n  readonly allowedTools?: readonly string[];\n  readonly disallowedTools?: readonly string[];\n}\n\nexport interface FxConfig {\n  readonly kind: \"fx\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly permissionMode?: \"ask\" | \"auto\" | \"full-access\";\n}\n\nexport type HarnessConfig = CodexConfig | ClaudeCodeConfig | (FxConfig & { readonly fast?: never });\n\nexport interface CodexOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast?: boolean;\n  readonly approvalPolicy?: \"never\" | \"on-request\" | \"untrusted\";\n  readonly sandboxMode?: \"read-only\" | \"workspace-write\" | \"danger-full-access\";\n  readonly networkAccessEnabled?: boolean;\n}\n\nexport interface ClaudeCodeOptions {\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast?: boolean;\n  readonly permissionMode?: \"default\" | \"acceptEdits\" | \"bypassPermissions\" | \"plan\" | \"dontAsk\" | \"auto\";\n  readonly allowedTools?: readonly string[];\n  readonly disallowedTools?: readonly string[];\n}\n\nexport interface FxOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly permissionMode?: \"ask\" | \"auto\" | \"full-access\";\n}\n\nexport interface ToolDefinition<S extends z.ZodObject = z.ZodObject> {\n  readonly description: string;\n  readonly inputSchema: S;\n  readonly execute: (input: z.output<S>) => unknown | Promise<unknown>;\n}\n\nexport interface AgentDefinition {\n  readonly name: string;\n  readonly description: string;\n  readonly instructions: string;\n  readonly harness: HarnessConfig | readonly HarnessConfig[];\n  readonly tools?: Readonly<Record<string, ToolDefinition<any>>>;\n  readonly subagents?: Readonly<Record<string, AgentDefinition>>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sdk/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { z } from \"zod\";\n\nexport type HarnessKind = \"codex\" | \"claudeCode\" | \"fx\" | \"opencode\" | \"copilot\" | \"cursor\";\n\nexport interface CodexConfig {\n  readonly kind: \"codex\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast: boolean;\n  readonly approvalPolicy?: \"never\" | \"on-request\" | \"untrusted\";\n  readonly sandboxMode?: \"read-only\" | \"workspace-write\" | \"danger-full-access\";\n  readonly networkAccessEnabled?: boolean;\n}\n\nexport interface ClaudeCodeConfig {\n  readonly kind: \"claudeCode\";\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast: boolean;\n  readonly permissionMode?: \"default\" | \"acceptEdits\" | \"bypassPermissions\" | \"plan\" | \"dontAsk\" | \"auto\";\n  readonly allowedTools?: readonly string[];\n  readonly disallowedTools?: readonly string[];\n}\n\nexport interface FxConfig {\n  readonly kind: \"fx\";\n  readonly model: string;\n  readonly effort?: string;\n  readonly permissionMode?: \"ask\" | \"auto\" | \"full-access\";\n}\n\nexport interface OpencodeOptions {\n  readonly model: string;\n}\n\nexport interface OpencodeConfig extends OpencodeOptions {\n  readonly kind: \"opencode\";\n}\n\nexport interface CopilotOptions {\n  readonly model: string;\n}\n\nexport interface CopilotConfig extends CopilotOptions {\n  readonly kind: \"copilot\";\n}\n\nexport interface CursorOptions {\n  readonly model: string;\n  readonly sandboxMode?: \"enabled\" | \"disabled\";\n}\n\nexport interface CursorConfig extends CursorOptions {\n  readonly kind: \"cursor\";\n}\n\nexport type HarnessConfig =\n  | CodexConfig\n  | ClaudeCodeConfig\n  | (FxConfig & { readonly fast?: never })\n  | (OpencodeConfig & { readonly effort?: never; readonly fast?: never })\n  | (CopilotConfig & { readonly effort?: never; readonly fast?: never })\n  | (CursorConfig & { readonly effort?: never; readonly fast?: never });\n\nexport interface CodexOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly fast?: boolean;\n  readonly approvalPolicy?: \"never\" | \"on-request\" | \"untrusted\";\n  readonly sandboxMode?: \"read-only\" | \"workspace-write\" | \"danger-full-access\";\n  readonly networkAccessEnabled?: boolean;\n}\n\nexport interface ClaudeCodeOptions {\n  readonly model: string;\n  readonly effort?: \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n  readonly fast?: boolean;\n  readonly permissionMode?: \"default\" | \"acceptEdits\" | \"bypassPermissions\" | \"plan\" | \"dontAsk\" | \"auto\";\n  readonly allowedTools?: readonly string[];\n  readonly disallowedTools?: readonly string[];\n}\n\nexport interface FxOptions {\n  readonly model: string;\n  readonly effort?: string;\n  readonly permissionMode?: \"ask\" | \"auto\" | \"full-access\";\n}\n\nexport interface ToolDefinition<S extends z.ZodObject = z.ZodObject> {\n  readonly description: string;\n  readonly inputSchema: S;\n  readonly execute: (input: z.output<S>) => unknown | Promise<unknown>;\n}\n\nexport interface AgentDefinition {\n  readonly name: string;\n  readonly description: string;\n  readonly instructions: string;\n  readonly harness: HarnessConfig | readonly HarnessConfig[];\n  readonly tools?: Readonly<Record<string, ToolDefinition<any>>>;\n  readonly subagents?: Readonly<Record<string, AgentDefinition>>;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "subharness",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "type": "module",
   "engines": {
     "node": ">=22.18.0"
@@ -22,8 +22,11 @@
   ],
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.278",
+    "@cursor/sdk": "1.0.32",
+    "@github/copilot-sdk": "1.0.14",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "string-width": "8.2.1",
+    "strip-ansi": "7.2.0",
     "tsx": "4.23.15",
     "zod": "4.6.5"
   },

package/sdk/access-config.md

@@ -26,19 +26,73 @@ This example explicitly enables subscription-to-Gateway fallback for Codex befor
 
 | `type` | Credential source | Default `env` |
 | --- | --- | --- |
-| `subscription` | The harness's current native subscription login | Not applicable |
-| `api-key` | Direct native provider API key | `OPENAI_API_KEY` for Codex, `ANTHROPIC_API_KEY` for Claude Code |
+| `subscription` | The harness's saved native login for the selected route | Not applicable |
+| `api-key` | Direct native provider API key | `OPENAI_API_KEY` for Codex, `ANTHROPIC_API_KEY` for Claude Code, `CURSOR_API_KEY` for Cursor |
 | `vercel-api-key` | AI Gateway API key | `AI_GATEWAY_API_KEY` |
 | `vercel-oidc` | Project OIDC token | `VERCEL_OIDC_TOKEN` |
 
-`subscription` accepts only `type`. Other connections optionally accept `env` and `envFile`. `vercel-oidc` also accepts `project`, defaulting to `.`. Unknown fields are errors. Variable names match `[A-Za-z_][A-Za-z0-9_]*`. Tokens and API keys must never appear directly in this file.
+The connection shapes are:
+
+```ts
+type AccessConnection =
+  | { type: "subscription"; provider?: string }
+  | {
+      type: "api-key";
+      provider?: string;
+      env?: string;
+      envFile?: string;
+      baseUrl?: string;
+      wireApi?: "completions" | "responses";
+      apiVersion?: string;
+      wireModel?: string;
+    }
+  | { type: "vercel-api-key"; env?: string; envFile?: string }
+  | { type: "vercel-oidc"; env?: string; envFile?: string; project?: string };
+```
+
+`provider` selects a native authentication or inference provider; it does not change the agent definition. Its meaning is harness-specific:
+
+| Harness | `subscription` | Direct `api-key` |
+| --- | --- | --- |
+| Codex | Native Codex login; no `provider` field | OpenAI; defaults to `OPENAI_API_KEY`; no provider options |
+| Claude Code | Native Claude Code login; no `provider` field | Anthropic; defaults to `ANTHROPIC_API_KEY`; no provider options |
+| Cursor | Native Cursor CLI login; no `provider` field | Cursor; defaults to `CURSOR_API_KEY`; no provider options |
+| OpenCode | Required `provider`: `openai`, `github-copilot`, or `xai` | Required `provider` and explicit `env`; supported providers are defined in [OpenCode](opencode.md) |
+| Copilot | Native Copilot or GitHub CLI login; no `provider` field | Required `provider`: `github`, `openai`, `anthropic`, or `azure` |
+| fx | Required `provider`: `gateway`, `codex`, or `grok` | Required `provider` naming an existing native custom connection and explicit `env` |
+
+For Copilot API keys, default variables are respectively `COPILOT_GITHUB_TOKEN`, `OPENAI_API_KEY`, `ANTHROPIC_API_KEY`, and `AZURE_OPENAI_API_KEY`. A GitHub token selects GitHub Copilot billing; the other three providers select direct provider billing. An explicit `env` replaces the default rather than adding credential discovery.
+
+`baseUrl` is supported only for OpenCode direct API keys and Copilot BYOK providers. It must be an absolute HTTP or HTTPS URL without user information, query, or fragment; credentials belong in environment references. OpenCode preserves the selected provider's native endpoint when it is omitted. Copilot defaults OpenAI to `https://api.openai.com/v1` and Anthropic to `https://api.anthropic.com`; Azure requires an explicit `baseUrl`. OpenAI-compatible endpoints use Copilot `provider: "openai"` with an explicit URL. This does not define custom OpenCode provider or model metadata.
+
+`wireApi` is supported only for Copilot OpenAI/Azure routes, defaulting to `completions`. `apiVersion` is supported only for Copilot Azure and maps to the native Azure API version; omission preserves its native versionless route. `wireModel` is supported only for Copilot BYOK and supplies the provider model or deployment name when it differs from the agent's native behavior model. Omission uses the agent's model for both. These fields are not accepted for GitHub-token, subscription, or Gateway routes. No arbitrary headers, token callbacks, or native configuration objects are accepted.
+
+Gateway connection shapes and billing behavior are unchanged; they do not accept provider overrides. `vercel-oidc` accepts `project`, defaulting to `.`. Unknown or inapplicable fields and missing required provider/source selections fail before native startup. Variable names match `[A-Za-z_][A-Za-z0-9_]*`. Tokens and API keys must never appear directly in this file. Native logins are completed through each harness's own login command, outside Subharness.
 
 Without `envFile`, the named variable is read from the invoking environment. With `envFile`, only that variable is read from that explicit UTF-8 dotenv file; its other values are not imported, and the process environment does not override the selected file. File and project paths resolve relative to the main checkout, or project root outside Git. Shell expansion and command execution in dotenv values are not supported. Sources are read at native session startup; changing a file does not refresh a token already supplied to a running harness.
 
-Omitting `codex` or `claudeCode` retains native subscription discovery. A nonempty array replaces discovery with the listed connections in order. An empty array disables that harness. Supported keys are `codex`, `claudeCode`, and `fx`. Omitting `fx` does not enable any connection because its adapter requires explicit Gateway access; see [fx access](fx.md). Missing credentials make a connection unavailable before submission; malformed settings, malformed tokens, expired tokens, and project mismatches are errors. Only known unavailability permits advancing to another explicitly enabled connection or harness. Failures after submission never automatically migrate or replay the task.
+Omitting `codex` or `claudeCode` retains native subscription discovery. A nonempty array replaces discovery with the listed connections in order. An empty array disables that harness. Supported keys are `codex`, `claudeCode`, `fx`, `opencode`, `copilot`, and `cursor`. The last four require an explicit connection; omission enables no access, even when a native login or ambient key exists. fx, OpenCode, and Copilot accept their documented native login, direct-key, and Gateway routes. Cursor accepts native CLI login or Cursor SDK API-key access and rejects Gateway connections. Each connection selects one billing route without implicit substitution. See [fx](fx.md), [OpenCode](opencode.md), [Copilot](copilot.md), and [Cursor](cursor.md).
+
+Missing credentials make a connection unavailable before submission; malformed settings, malformed tokens, expired OIDC tokens, and project mismatches are errors. Only known unavailability permits advancing to another explicitly enabled connection or harness. Native status and configuration checks do not prove remote credential validity, quota, or plan eligibility. Failures after submission never automatically migrate or replay the task.
 
 `subharness check` resolves these settings and tries eligible connections and declared harness alternatives exactly as `run` does before submission. It does not infer readiness from environment variables or duplicate adapter authentication checks. A successful check applies only to the connection and harness selected by that fallback process at that moment.
 
+## Access context in errors
+
+Schema validation locations and distinct OIDC temporal errors are defined in [error diagnostics](diagnostics.md). A settings validation failure identifies the file and structural location before native access selection begins.
+
+When a connection fails during native startup, `check` and `run` include the harness and attempted connection type in the diagnostic. They retain the original error code and fallback rules. A model configuration failure reported by an already opened session also includes its selected connection context. This context describes the connection attempted by Subharness; it does not claim that the native harness authenticated successfully through that connection.
+
+Diagnostics distinguish explicitly configured connections from default native subscription discovery. For settings loaded from disk, they identify the absolute personal settings path in the main checkout, or the execution project outside Git. If the file is absent, the diagnostic says that native subscription discovery was used because no personal access settings were found there. If the file exists but omits the harness's access entry, the diagnostic says that the entry is omitted. An explicit connection identifies its type and its position in the configured list, so multiple connections of the same type remain distinguishable.
+
+When the current personal settings file is absent and an entry exists at the former `.agents/agents.local.json` location, the diagnostic also identifies that legacy path and explains that it is not read. Detecting the legacy entry does not read its contents, migrate it, or change connection selection. Failure to inspect the legacy location does not replace the original startup error. Settings presence and selection context are captured when access settings are loaded, so a later file change does not rewrite the explanation for an existing session.
+
+Claude model mismatch diagnostics identify whether the mismatch was observed during startup settings validation, native initialization, or retained-session validation before submission. They do not infer that a mismatch is transient or that missing access settings caused it. A mismatch still fails without automatic retry, model substitution, or task replay.
+
+For example, a startup mismatch with a missing access file reports the model validation failure together with `claudeCode`, the attempted `subscription` connection, and `No personal access settings were found at "/project/.subharness/agents.local.json"; using native subscription discovery.` Explicit Gateway access instead reports the configured `vercel-oidc` or `vercel-api-key` connection and its list position.
+
+Added diagnostic context contains only connection-selection metadata and settings paths. It never includes credential values, environment contents, settings-file contents, or raw native output. Paths are quoted with C0 and C1 control characters, DEL, and Unicode line separators escaped so one path cannot inject terminal controls or extra diagnostic lines. Successful command output and the public error record shape remain unchanged.
+
 ## OIDC project selection
 
 The selected project directory must contain `.vercel/project.json` with `projectId` and `orgId`. In a deployment without local linkage, `VERCEL_PROJECT_ID` and `VERCEL_ORG_ID` identify the expected project and organization when `project` is omitted. A supplied `project` always requires its explicit linkage. Token claims must match the expected project and organization and be within their validity interval. Local claim checks prevent accidental selection errors; the Gateway authenticates the token.
@@ -47,6 +101,34 @@ The library does not infer the expected project from the token itself, search ot
 
 Gateway API keys and OIDC are distinct routes. An API key does not acquire project attribution merely because the execution directory contains a Vercel project. Project OIDC carries the selected project identity; billing and cost reporting remain with the provider.
 
+## Agent-assisted local OIDC renewal
+
+For an already-authorized task using project OIDC, the lead agent may renew an expired local token, or one with insufficient lifetime, through an existing authenticated Vercel CLI session. The project, organization, development environment, and credential source must already be established by the access configuration and local linkage. Children report credential failures to the lead instead of concurrently changing shared files. Renewal does not authorize another account, project, billing route, broader native permissions, or additional work.
+
+The Subharness skill includes a standalone Node.js helper at `scripts/refresh-vercel-oidc.mjs`, relative to the installed skill directory. It requires Node.js 22.18 or later and `vercel` and `git` on PATH. It is explicitly invoked local maintenance, separate from the SDK, coordinator, and eval runner:
+
+```sh
+node /path/to/installed/subharness/scripts/refresh-vercel-oidc.mjs \
+  --env-file /absolute/main-checkout/.env.local \
+  --project-dir /absolute/main-checkout \
+  --project-id prj_expected \
+  --org-id team_expected
+```
+
+`--env-file` and `--project-dir` are required absolute paths. Resolve the selected connection's `envFile` and `project` relative to the main checkout, as defined above; do not assume the current worktree owns the credential source. `--project-id` and `--org-id` are required expected identities from the established project selection, never inferred from the token. Optional `--env <variable>` selects the configured destination variable and defaults to `VERCEL_OIDC_TOKEN`. Unknown, duplicate, or missing arguments are errors. `--help` prints usage without reading credentials or invoking Vercel. The helper supports file-backed development credentials only; environment-only credentials and other environments remain the environment owner's responsibility.
+
+Before invoking Vercel, the helper checks the existing project's `.vercel/project.json`, requires matching identities, and requires an existing regular, non-symlink credential file with exactly one single-line assignment for the selected variable. Tracked credential files are rejected using the source file's own repository, independently of the project directory and inherited Git repository variables. A source outside Git has no tracked-file restriction. It obtains an exclusive lock beside the source; another renewal fails immediately instead of waiting or deleting that lock. Unattended recovery of a lock left by a killed process is outside the helper's scope.
+
+The helper runs `vercel env pull` with explicit project, organization, development environment, and working directory into a private temporary directory, with a 45-second timeout and no interactive prompts. This command also downloads other development variables; they are never merged into the configured source or printed. The returned OIDC token must have valid time claims, at least 30 minutes remaining, and matching project, organization, and `development` environment claims. Local claim checks prevent selection mistakes; Vercel and the Gateway remain responsible for authenticating credentials.
+
+Only the selected token assignment is replaced. Other file bytes and its existing permissions are preserved; the replacement contains the new token without exposing it in command arguments or output. The helper rechecks source identity/content and project linkage before atomic replacement and rejects concurrent changes. The lock coordinates cooperating helper invocations; it is not a security boundary against arbitrary same-user filesystem changes. The helper attempts to clean temporary credentials, replacement files, and owned locks on every outcome. Filesystem cleanup failures are reported explicitly without hiding whether the credential was replaced.
+
+Success exits `0` and prints one JSON record with `type: "oidc_refreshed"`, the selected variable, expected project/organization IDs, and `expiresAt`. Failure exits `1` with a fixed diagnostic code and safe message, without raw provider output, token values, or file contents. Failed acquisition or validation leaves the source unchanged. The agent reports completion and expiry, never the credential. A missing login, mismatched identity, unsupported source, or request for additional provider consent requires resolution by the user rather than account switching, relinking, or fallback to another credential.
+
+If cleanup fails after atomic replacement, the helper exits `1` but retains the `oidc_refreshed` record and its safe identity/expiry metadata, adding `code: "OIDC_CLEANUP_FAILED"`, `cleanup: "incomplete"`, and a safe message stating that the credential was refreshed and cleanup needs resolution. If renewal failed before replacement and cleanup also fails, the original safe failure code/message is preserved and `cleanup: "incomplete"` is added. Neither outcome exposes raw filesystem/provider errors. The agent must resolve the incomplete cleanup instead of renewing again merely because the command exited nonzero.
+
+After renewal, `subharness check <target>` can verify startup without submitting a model task. A task that failed before submission can be attempted again within its existing authorization. A running native process keeps the credential supplied at startup; renewal neither injects a replacement into that process nor replays already-submitted work. Existing task recovery and explicit eval invocation rules remain unchanged.
+
 ## Local file management
 
 The file can be edited directly; no library login wizard is required. Before using an existing personal settings file in Git, the CLI ensures `/.subharness/agents.local.json` is excluded through the repository's local Git exclude file. This can update Git's local exclude file during `run` or `check`. A tracked personal settings file is rejected with instructions to remove it from the index. The library never copies secrets or personal settings into worktrees. A file left at the former `.agents/agents.local.json` location is not read.

package/sdk/adapter-contract.md

@@ -1,28 +1,22 @@
 # Native Adapter Contract
 
-Adapters create native Codex, Claude Code, or fx conversations in the caller-supplied directory. Their implementation interface is internal and is not an SDK extension API. A session supplies `turn(prompt)`, `steer(prompt)`, `interrupt()`, `resume()`, and `close()`. A turn resolves with its complete text; execution failures reject with a stable error code. Interrupt resolves only when active execution has stopped. Unsupported operations return explicit capability errors. The [fx contract](fx.md) specifies its native ACP transport, Gateway access, and capability limits.
+Adapters create native Codex, Claude Code, fx, OpenCode, GitHub Copilot, or Cursor conversations in the caller-supplied directory. Their implementation interface is internal and is not an SDK extension API. A session supplies `turn(prompt)`, `steer(prompt)`, `interrupt()`, `resume()`, and `close()`. A turn resolves with its complete text; machine-reported execution failures reject with a stable error code. The Cursor subscription ACP route has the documented limitation that some native backend failures arrive only as assistant text. Interrupt resolves only when active execution has stopped. Unsupported operations return explicit capability errors. Harness-specific contracts are defined for [fx](fx.md), [OpenCode](opencode.md), [Copilot](copilot.md), and [Cursor](cursor.md).
 
-Adapter startup receives the selected harness configuration, loaded agent definition, execution directory, environment, and resolved personal access. Startup verifies compatibility and access before submitting any task. A direct CLI harness target supplies no specialist instructions, custom tools, or declared children. Its internal execution configuration may request a native default model; public SDK constructors still require explicit models. Default resolution happens before the first prompt, within the authorized access route, and the resolved model is retained for follow-ups. An unavailable or unverifiable default fails with guidance to supply `--model`, without probing it through a paid generation. Explicit model and effort validation remains effective. `HARNESS_UNAVAILABLE` and `ACCESS_UNAVAILABLE` permit trying another declared alternative before submission. Invalid configuration and unsupported explicit options do not. No adapter performs automatic fallback after turn submission.
+[Error diagnostics](diagnostics.md) defines startup failure classification, safe native failure categories, and process termination context. Unexpected Claude account-inspection or model-catalog exceptions are harness failures, not evidence that another access route should be tried.
+
+Adapter startup receives the selected harness configuration, loaded agent definition, execution directory, environment, and resolved personal access. Startup verifies compatibility and access before submitting any task. A direct CLI harness target supplies no specialist instructions, custom tools, or declared children. Codex, Claude Code, and fx may request a verifiable native default model internally; OpenCode, Copilot, and Cursor require an explicit CLI model. Public SDK constructors always require a model. Default resolution happens before the first prompt, within the authorized access route, and the resolved model is retained for follow-ups. An unavailable or unverifiable default fails with guidance to supply `--model`, without probing it through a paid generation. Explicit model and effort validation remains effective. `HARNESS_UNAVAILABLE` and `ACCESS_UNAVAILABLE` permit trying another declared alternative before submission. Invalid configuration and unsupported explicit options do not. No adapter performs automatic fallback after turn submission.
 
 The CLI readiness check uses this same startup and pre-submission fallback path in an isolated worker, then closes the native session without calling `turn`. It therefore verifies only capabilities observable during startup. It does not probe quota with generation, exercise native tools, or establish shell and child-launch permissions. Startup may create an empty native conversation and private temporary files; normal close removes library-owned temporary files under the adapter lifecycle rules.
 
 A readiness check reports success only after the isolated worker has exited and every adapter-owned native process has confirmed termination. Native close first permits graceful shutdown and then uses bounded termination when required. If native termination cannot be confirmed, or worker cleanup fails, the check emits an error instead of a readiness record. A failed worker close preserves its cleanup diagnostic while forcibly ending the isolated worker; it does not leave the CLI waiting indefinitely for that worker.
 
-Agent instructions supplement native instructions. The adapter exposes declared tools without implementing its own model loop. Tool input is validated before the function runs, and returned text or JSON data is encoded as a native text result. Explicit `toolResult` values preserve their text and image blocks through the native protocol, as defined in [custom tools](tools.md). Declared subagents authorize delegation. The Claude adapter translates that authorization into session-only native allow rules for the exact session launcher, declared child invocations, and documented coordination commands. The Codex adapter does not install equivalent launcher rules. Explicit constructor options select the session's native sandbox, network, and approval policy as defined in [Native Permissions](permissions.md); omission preserves native settings. The installed native harness and execution environment continue to enforce their restrictions. Native approval or interactive-input requests that still require a response from this library fail with `INPUT_REQUIRED`; no adapter grants them automatically.
+Agent instructions supplement native instructions. The adapter exposes declared tools without implementing its own model loop. Tool input is validated before the function runs, and returned text or JSON data is encoded as a native text result. Explicit `toolResult` values preserve their text and image blocks through the native protocol, as defined in [custom tools](tools.md). Declared subagents authorize delegation. The Claude adapter translates that authorization into session-only native allow rules for the exact session launcher, declared child invocations, and documented coordination commands. The Codex adapter does not install equivalent launcher rules. Explicit constructor options select the session's native sandbox, network, and approval policy as defined in [Native Permissions](permissions.md); omission preserves native settings. The installed native harness and execution environment continue to enforce their restrictions. Supported active-turn native approvals use the [structured approval flow](approvals.md), keeping the original operation pending until a valid caller answer or native withdrawal. Unsupported interactive input and startup-time requests fail with `INPUT_REQUIRED`; no adapter grants them automatically.
 
 Codex uses its native App Server protocol. Claude Code uses its native Agent SDK with the installed Claude executable. A Claude session accepts queued native turns and interruption. Its native steering method reports `UNSUPPORTED_DELIVERY` before any mutation; the coordinator converts that request to the documented interrupt operation and reports the effective delivery mode. Codex steering targets the active native turn. Neither adapter synthesizes native recovery by replaying the original prompt; unavailable recovery returns `RECOVERY_UNSUPPORTED`.
 
 Personal subscription selection must verify native subscription access. Ambient API keys, alternate endpoints, provider overrides, and native API-key helpers must not silently change the selected billing method. Explicit API or Gateway selections supply only the selected credential route. Credentials are never included in CLI records or diagnostic output.
 
-When Claude Code requires a tool approval, `INPUT_REQUIRED` identifies the native tool if its name is a bounded, valid identifier. Tool arguments, command text, settings, and credentials are not included. Other interactive requests retain a generic actionable message.
-
-When Codex requests approval through a recognized App Server method, `INPUT_REQUIRED` identifies its fixed operation category and fixed native method name:
-
-- `item/commandExecution/requestApproval` is `command execution`.
-- `item/fileChange/requestApproval` is `file change`.
-- `item/permissions/requestApproval` is `additional permissions`.
-
-Unknown approval and interactive-input methods retain a generic actionable message. The same classification applies during adapter startup and active turns. Codex request parameters, command text, paths, settings, and credentials are never included. These diagnostics identify what requires native configuration without granting approval, answering the native request, or changing permission rules. The adapter still requests native turn interruption for active-turn input and preserves `INPUT_REQUIRED` and exit code `1` when interruption succeeds.
+Unsupported approval and interactive-input diagnostics use `INPUT_REQUIRED`. Claude diagnostics may identify a bounded native tool name; Codex diagnostics identify the recognized fixed approval method and category. Diagnostics do not expose raw tool arguments, settings or credentials. Supported approval requests expose the bounded action context needed for the caller's decision under the [approval contract](approvals.md), separately from error diagnostics.
 
 Codex custom tools use the native `subharness` namespace while retaining the declared tool map keys. Explicit API/Gateway model identifiers need not appear in a subscription model catalog. Adapters disable provider model fallback and reject a detectable replacement of the requested model; an upstream rejection after submission is an execution failure. Codex explicitly selects standard service when `fast` is false, rather than inheriting a native accelerated preference.
 
@@ -30,7 +24,7 @@ Claude accelerated mode with subscription access is rejected in v1 because it re
 
 ## Native default selection
 
-Direct CLI targets resolve omitted models through the native session's effective configuration before submitting user input. Codex uses the model returned by App Server `thread/start`, verifies the selected provider and subscription catalog when applicable, and retains that model in subsequent turns. fx uses the Gateway provider and model reported by ACP `session/new`, then verifies any explicit effort through the existing configuration control.
+Direct CLI targets resolve omitted models through the native session's effective configuration before submitting user input. Codex uses the model returned by App Server `thread/start`, verifies the selected provider and subscription catalog when applicable, and retains that model in subsequent turns. fx uses the selected native provider and model reported by ACP `session/new`, then verifies any explicit effort through the existing configuration control.
 
 Claude Code resolves its effective model through a capability-checked native settings control. Only applied model and effort fields are retained; merged settings and credential-bearing source details are never logged or included in output. The adapter pins the resolved model for the session through the native model control and verifies the applied result before input is admitted. If the installed SDK or executable cannot expose a verifiable applied model before submission, omitted-model startup fails with `INVALID_CONFIG` and guidance to supply `--model`. Explicit models retain compatibility with native versions that lack that introspection, along with the existing catalog and initialization checks.