taskflow-hosts 0.1.6

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 heggria
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,74 @@
+# taskflow-hosts
+
+> Shared host-runner collection for [taskflow](https://github.com/heggria/taskflow).
+
+This package holds the `SubagentRunner` implementations for taskflow's non-pi
+hosts — **codex**, **claude**, and **opencode** — plus their pure argv builders
+(`buildCodexArgs` / `buildClaudeArgs` / `buildOpencodeArgs`) and event-stream
+parsers. It is the **single place** host runners live; a new host adds a
+`<host>-runner.ts` here.
+
+## Why a separate package
+
+Each host has two halves:
+
+1. **The runner** — spawn that host's CLI, fold its JSON event stream into a
+   host-neutral `RunResult`, classify the outcome. + the pure argv builder +
+   permission/model helpers.
+2. **The delivery** — the per-host MCP server + bin + plugin scaffold, which is
+   that host ecosystem's install target (`codex plugin add`, `claude plugin
+   install`, OpenCode config).
+
+Half #1 is nearly identical in *shape* across hosts and changes for the same
+reasons (a `taskflow-core` contract change, or a host CLI flag change). Half #2
+is genuinely host-specific (different install mechanisms, different plugin
+manifests). So #1 is collected here; #2 stays in `codex-taskflow` /
+`claude-taskflow` / `opencode-taskflow`, which import their runner from this
+package.
+
+## Install
+
+You usually don't install this directly — install the host delivery package:
+
+```bash
+npm install -g codex-taskflow     # or claude-taskflow / opencode-taskflow
+```
+
+For code-level use:
+
+```bash
+npm install taskflow-hosts
+```
+
+## Usage
+
+```ts
+// one host, tree-shaken:
+import { codexSubagentRunner, buildCodexArgs } from "taskflow-hosts/codex";
+
+// or the barrel:
+import { claudeSubagentRunner, opencodeSubagentRunner } from "taskflow-hosts";
+```
+
+Each runner export includes: the `SubagentRunner` (`codexSubagentRunner` / …),
+the `runXxxAgentTask` function, the pure `buildXxxArgs` builder, the
+`foldXxxEventLine` parser + `newXxxAccumulator`, and the permission/model
+helpers (`sandboxForTools`, `permissionArgsForTools`, `isReadOnlyPhase`,
+`resolveXxxModel`, `xxxBin`).
+
+## Adding a host
+
+1. Add `<host>-runner.ts` in `src/` (model it on an existing one — a pure
+   `buildXxxArgs` + the event parser + a `SubagentRunner` export).
+2. Add an export entry in `src/index.ts`.
+3. Add `*-runner.test.ts` (event-stream parser) + `*-args.test.ts` (argv
+   contract — CI-locked) in `test/`.
+4. The host's *delivery* (MCP server/bin + plugin scaffold) goes in a
+   `taskflow-hosts`-depending package of its own.
+
+See [`AGENTS.md`](../../AGENTS.md) and [`DECISIONS.md`](../../DECISIONS.md) in
+the repo root for the full architecture and the packaging decision.
+
+## License
+
+MIT

package/dist/claude-runner.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Claude Code subagent runner — the Claude host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `claude -p --output-format stream-json` process per task
+ * and folds its JSONL event stream into the same host-neutral `RunResult` the
+ * pi and codex runners produce, so the engine (runtime.ts) treats a Claude
+ * subagent identically to a pi or codex one.
+ *
+ * Real claude stream-json schema (claude-code ≥ 2.1), observed empirically:
+ *   {"type":"system","subtype":"init","model":"claude-…","tools":[…],…}
+ *   {"type":"assistant","message":{"model":"…","content":[{"type":"text","text":"…"},
+ *       {"type":"tool_use","name":"Bash","input":{…}}],"usage":{"input_tokens":…,
+ *       "output_tokens":…,"cache_read_input_tokens":…,"cache_creation_input_tokens":…}},…}
+ *   {"type":"user","message":{…tool_result…}}
+ *   {"type":"result","subtype":"success"|"error_max_turns"|…,"is_error":bool,
+ *       "num_turns":N,"result":"…","total_cost_usd":X,"usage":{…}}   ← authoritative
+ *
+ * Mapping to the host-neutral contract:
+ *   - output       = `result` field of the result event (fallback: last assistant text)
+ *   - usage        = the result event's cumulative usage + num_turns + total_cost_usd
+ *                    (assistant events accumulate per-turn usage for live streaming;
+ *                    the result event overwrites with the authoritative totals)
+ *   - lastActivity = latest assistant text or a one-line tool summary
+ *   - failure      = result.is_error, a stream-level error, or a non-zero exit
+ *
+ * Permission mapping (the codex `sandboxForTools` analogue): Claude Code has no
+ * OS-level sandbox in -p mode — a tool call is either whitelisted or denied. A
+ * phase whose tool whitelist is read-only gets `--allowedTools <read-only set>`
+ * (mutating tools are denied outright); anything else gets
+ * `--permission-mode bypassPermissions`, which behaves like codex's
+ * workspace-write but WITHOUT an OS sandbox backstop — document accordingly.
+ *
+ * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
+ * error sanitization) mirrors the pi/codex runners so behavior is uniform.
+ */
+import { type AgentConfig, type LiveUpdate, type RunOptions, type RunResult, type SubagentRunner, type UsageStats } from "taskflow-core";
+/** Accumulated state folded from a claude stream-json event stream. */
+export interface ClaudeAccumulator {
+    usage: UsageStats;
+    model?: string;
+    /** Final answer = the result event's `result`, else the last assistant text. */
+    finalText: string;
+    lastActivity: string;
+    /** Set when the stream reported a fatal error (result.is_error / stream error). */
+    fatalError?: string;
+    /** True once the authoritative `result` event has been folded. */
+    sawResult: boolean;
+}
+export declare function newClaudeAccumulator(model?: string): ClaudeAccumulator;
+/**
+ * Fold one claude stream-json line into the accumulator. Returns a LiveUpdate
+ * when the stream produced new activity (for streaming), else null. Empty or
+ * malformed lines are ignored — robust to partial buffers and noise,
+ * unit-testable without spawning a process.
+ */
+export declare function foldClaudeEventLine(acc: ClaudeAccumulator, line: string): LiveUpdate | null;
+/** Override the claude binary (tests / unusual installs). */
+export declare function claudeBin(): string;
+/**
+ * Map a phase's tool whitelist to claude permission flags — the codex
+ * `sandboxForTools` analogue. A phase that only reads (no write/edit/bash in
+ * its whitelist) gets a read-only `--allowedTools` set; anything else gets
+ * `--permission-mode bypassPermissions` (non-interactive -p runs cannot answer
+ * permission prompts, so the codex workspace-write equivalent is bypass —
+ * WITHOUT an OS sandbox backstop). No whitelist → bypass (the engine's
+ * default-capable agent).
+ */
+export declare function permissionArgsForTools(tools: string[] | undefined): string[];
+/** Resolve a modelRoles/pi model id for `claude --model`, or `undefined` to let
+ *  claude fall back to its own default. Claude model ids are FLAT (aliases like
+ *  "sonnet"/"haiku" or full ids like "claude-sonnet-4-6"), so — same rule as
+ *  codex — a pi-provider path (contains "/") or an unresolved {{placeholder}}
+ *  is dropped. Exported for unit-testing the contract. */
+export declare function resolveClaudeModel(model: string | undefined): string | undefined;
+/** Context for {@link buildClaudeArgs} — the pure inputs to argv construction. */
+export interface ClaudeArgsCtx {
+    systemPrompt: string;
+    task: string;
+    /** Already-resolved model (opts.model ?? agent.model). */
+    model?: string;
+    tools?: string[];
+}
+/**
+ * Build the full `claude -p` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted from `runClaudeAgentTask` so the host's
+ * CLI flag contract is unit-testable in CI without a live claude session.
+ *
+ *   claude -p --output-format stream-json --verbose --strict-mcp-config
+ *          [--permission-mode bypassPermissions | --allowedTools ...]
+ *          [--model m] [--append-system-prompt ...] <task>
+ */
+export declare function buildClaudeArgs(ctx: ClaudeArgsCtx): string[];
+/**
+ * Run a single subagent task via `claude -p --output-format stream-json`.
+ * Resolves the agent from `agents` by name; returns the same structured
+ * `RunResult` the pi and codex runners do.
+ */
+export declare function runClaudeAgentTask(defaultCwd: string, agents: AgentConfig[], agentName: string, task: string, opts: RunOptions, globalThinking?: string): Promise<RunResult>;
+/**
+ * The Claude host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the pi/codex/opencode runners, so the engine runs unchanged on Claude Code.
+ */
+export declare const claudeSubagentRunner: SubagentRunner<AgentConfig>;
+//# sourceMappingURL=claude-runner.d.ts.map

package/dist/claude-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-runner.d.ts","sourceRoot":"","sources":["../src/claude-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAIN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AASvB,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAEtE;AA+BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAyE3F;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAM5E;AAED;;;;0DAI0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKhF;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAQ5D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CA4BpB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,cAAc,CAAC,WAAW,CAE5D,CAAC"}

package/dist/claude-runner.js

@@ -0,0 +1,259 @@
+/**
+ * Claude Code subagent runner — the Claude host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `claude -p --output-format stream-json` process per task
+ * and folds its JSONL event stream into the same host-neutral `RunResult` the
+ * pi and codex runners produce, so the engine (runtime.ts) treats a Claude
+ * subagent identically to a pi or codex one.
+ *
+ * Real claude stream-json schema (claude-code ≥ 2.1), observed empirically:
+ *   {"type":"system","subtype":"init","model":"claude-…","tools":[…],…}
+ *   {"type":"assistant","message":{"model":"…","content":[{"type":"text","text":"…"},
+ *       {"type":"tool_use","name":"Bash","input":{…}}],"usage":{"input_tokens":…,
+ *       "output_tokens":…,"cache_read_input_tokens":…,"cache_creation_input_tokens":…}},…}
+ *   {"type":"user","message":{…tool_result…}}
+ *   {"type":"result","subtype":"success"|"error_max_turns"|…,"is_error":bool,
+ *       "num_turns":N,"result":"…","total_cost_usd":X,"usage":{…}}   ← authoritative
+ *
+ * Mapping to the host-neutral contract:
+ *   - output       = `result` field of the result event (fallback: last assistant text)
+ *   - usage        = the result event's cumulative usage + num_turns + total_cost_usd
+ *                    (assistant events accumulate per-turn usage for live streaming;
+ *                    the result event overwrites with the authoritative totals)
+ *   - lastActivity = latest assistant text or a one-line tool summary
+ *   - failure      = result.is_error, a stream-level error, or a non-zero exit
+ *
+ * Permission mapping (the codex `sandboxForTools` analogue): Claude Code has no
+ * OS-level sandbox in -p mode — a tool call is either whitelisted or denied. A
+ * phase whose tool whitelist is read-only gets `--allowedTools <read-only set>`
+ * (mutating tools are denied outright); anything else gets
+ * `--permission-mode bypassPermissions`, which behaves like codex's
+ * workspace-write but WITHOUT an OS sandbox backstop — document accordingly.
+ *
+ * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
+ * error sanitization) mirrors the pi/codex runners so behavior is uniform.
+ */
+import { runSubagentProcess, num, unknownAgentResult, } from "taskflow-core";
+import { emptyUsage } from "taskflow-core";
+/** The Claude tools a read-only phase may use. `Bash` is excluded — Claude has
+ *  no read-only shell (unlike codex's read-only OS sandbox, which still allows
+ *  read-only commands), so a listed-tools phase without write/edit/bash gets
+ *  file reads + search + web only. */
+const READ_ONLY_TOOLS = ["Read", "Grep", "Glob", "WebFetch", "WebSearch"];
+export function newClaudeAccumulator(model) {
+    return { usage: emptyUsage(), model, finalText: "", lastActivity: "", sawResult: false };
+}
+/** Summarize a claude tool_use for the live activity stream — parity with the
+ *  pi runner's summarizeToolCall and codex's shortCmd (which cover all tools,
+ *  not just Bash). Without this a Write/Edit/Read shows as just the bare tool
+ *  name, a UX regression vs the other hosts. */
+function shortTool(name, input) {
+    const n = String(name ?? "tool");
+    if (!input || typeof input !== "object")
+        return n;
+    const obj = input;
+    const trim = (v) => String(v ?? "").replace(/\s+/g, " ").trim();
+    const brief = (v) => {
+        const s = trim(v);
+        return s.length > 64 ? `${s.slice(0, 64)}…` : s;
+    };
+    switch (n) {
+        case "Bash":
+            return `$ ${brief(obj.command)}`;
+        case "Read":
+        case "Write":
+        case "Edit":
+        case "NotebookEdit":
+            return `${n}: ${brief(obj.file_path ?? obj.path)}`;
+        case "Grep":
+        case "Glob":
+            return `${n}: ${brief(obj.pattern)}`;
+        default:
+            return n;
+    }
+}
+/**
+ * Fold one claude stream-json line into the accumulator. Returns a LiveUpdate
+ * when the stream produced new activity (for streaming), else null. Empty or
+ * malformed lines are ignored — robust to partial buffers and noise,
+ * unit-testable without spawning a process.
+ */
+export function foldClaudeEventLine(acc, line) {
+    if (!line.trim())
+        return null;
+    let event;
+    try {
+        event = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    let activity = "";
+    if (event.type === "system" && event.subtype === "init") {
+        if (typeof event.model === "string" && event.model)
+            acc.model = event.model;
+        return null;
+    }
+    else if (event.type === "assistant" && event.message) {
+        const msg = event.message;
+        // Claude injects synthetic assistant messages (model "<synthetic>") for
+        // harness-level errors (auth failures, aborts) — their text is diagnostic,
+        // not an answer. Surface it as activity but never as the final answer.
+        const synthetic = msg.model === "<synthetic>";
+        if (!synthetic && typeof msg.model === "string" && msg.model)
+            acc.model = msg.model;
+        for (const part of Array.isArray(msg.content) ? msg.content : []) {
+            if (part?.type === "text" && typeof part.text === "string" && part.text.trim()) {
+                if (!synthetic)
+                    acc.finalText = part.text;
+                activity = part.text.trim();
+            }
+            else if (part?.type === "tool_use") {
+                activity = shortTool(part.name, part.input);
+            }
+        }
+        if (typeof event.error === "string" && event.error) {
+            acc.fatalError = activity || event.error;
+        }
+        // Per-turn usage for live progress; the result event overwrites with the
+        // run's authoritative totals (never double-counted).
+        const u = msg.usage;
+        if (!acc.sawResult && u && !synthetic) {
+            acc.usage.turns++;
+            acc.usage.input += num(u.input_tokens);
+            acc.usage.output += num(u.output_tokens);
+            acc.usage.cacheRead += num(u.cache_read_input_tokens);
+            acc.usage.cacheWrite += num(u.cache_creation_input_tokens);
+            // contextTokens is a host-specific gauge (NOT additive): claude reports input_tokens
+            // EXCLUDING cache read, so input+cache_read+output = full last-turn context.
+            acc.usage.contextTokens =
+                num(u.input_tokens) + num(u.cache_read_input_tokens) + num(u.output_tokens);
+        }
+    }
+    else if (event.type === "result") {
+        acc.sawResult = true;
+        const u = event.usage;
+        if (u) {
+            const prev = acc.usage.contextTokens;
+            acc.usage = emptyUsage();
+            acc.usage.input = num(u.input_tokens);
+            acc.usage.output = num(u.output_tokens);
+            acc.usage.cacheRead = num(u.cache_read_input_tokens);
+            acc.usage.cacheWrite = num(u.cache_creation_input_tokens);
+            acc.usage.contextTokens = prev;
+        }
+        acc.usage.turns = typeof event.num_turns === "number" ? event.num_turns : acc.usage.turns;
+        acc.usage.cost = typeof event.total_cost_usd === "number" ? event.total_cost_usd : 0;
+        if (event.is_error) {
+            acc.fatalError =
+                (typeof event.result === "string" && event.result.trim()) ||
+                    `claude run failed (${event.subtype ?? "unknown"})`;
+            activity = `error: ${acc.fatalError}`;
+        }
+        else if (typeof event.result === "string" && event.result.trim()) {
+            acc.finalText = event.result;
+        }
+    }
+    else {
+        return null; // user (tool results) / stream_event — nothing to fold.
+    }
+    if (activity)
+        acc.lastActivity = activity.replace(/\s+/g, " ").trim();
+    return { text: acc.lastActivity, usage: { ...acc.usage }, model: acc.model };
+}
+/** Override the claude binary (tests / unusual installs). */
+export function claudeBin() {
+    return process.env.PI_TASKFLOW_CLAUDE_BIN || "claude";
+}
+/**
+ * Map a phase's tool whitelist to claude permission flags — the codex
+ * `sandboxForTools` analogue. A phase that only reads (no write/edit/bash in
+ * its whitelist) gets a read-only `--allowedTools` set; anything else gets
+ * `--permission-mode bypassPermissions` (non-interactive -p runs cannot answer
+ * permission prompts, so the codex workspace-write equivalent is bypass —
+ * WITHOUT an OS sandbox backstop). No whitelist → bypass (the engine's
+ * default-capable agent).
+ */
+export function permissionArgsForTools(tools) {
+    if (!tools || tools.length === 0)
+        return ["--permission-mode", "bypassPermissions"];
+    const mutating = new Set(["write", "edit", "bash", "apply_patch"]);
+    const canMutate = tools.some((t) => mutating.has(t));
+    if (canMutate)
+        return ["--permission-mode", "bypassPermissions"];
+    return ["--allowedTools", READ_ONLY_TOOLS.join(",")];
+}
+/** Resolve a modelRoles/pi model id for `claude --model`, or `undefined` to let
+ *  claude fall back to its own default. Claude model ids are FLAT (aliases like
+ *  "sonnet"/"haiku" or full ids like "claude-sonnet-4-6"), so — same rule as
+ *  codex — a pi-provider path (contains "/") or an unresolved {{placeholder}}
+ *  is dropped. Exported for unit-testing the contract. */
+export function resolveClaudeModel(model) {
+    if (!model)
+        return undefined;
+    if (model.includes("/"))
+        return undefined;
+    if (/^\{\{.*\}\}$/.test(model))
+        return undefined;
+    return model;
+}
+/**
+ * Build the full `claude -p` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted from `runClaudeAgentTask` so the host's
+ * CLI flag contract is unit-testable in CI without a live claude session.
+ *
+ *   claude -p --output-format stream-json --verbose --strict-mcp-config
+ *          [--permission-mode bypassPermissions | --allowedTools ...]
+ *          [--model m] [--append-system-prompt ...] <task>
+ */
+export function buildClaudeArgs(ctx) {
+    const claudeModel = resolveClaudeModel(ctx.model);
+    const args = ["-p", "--output-format", "stream-json", "--verbose", "--strict-mcp-config"];
+    args.push(...permissionArgsForTools(ctx.tools));
+    if (claudeModel)
+        args.push("--model", claudeModel);
+    if (ctx.systemPrompt.trim())
+        args.push("--append-system-prompt", ctx.systemPrompt.trim());
+    args.push(ctx.task);
+    return args;
+}
+/**
+ * Run a single subagent task via `claude -p --output-format stream-json`.
+ * Resolves the agent from `agents` by name; returns the same structured
+ * `RunResult` the pi and codex runners do.
+ */
+export async function runClaudeAgentTask(defaultCwd, agents, agentName, task, opts, globalThinking) {
+    const agent = agents.find((a) => a.name === agentName);
+    if (!agent)
+        return unknownAgentResult(agentName, task, agents);
+    const model = opts.model ?? agent.model;
+    const tools = opts.tools ?? agent.tools;
+    void globalThinking; // claude -p has no thinking-level flag; reserved.
+    const args = buildClaudeArgs({
+        systemPrompt: agent.systemPrompt,
+        task,
+        model,
+        tools,
+    });
+    return runSubagentProcess({
+        agent: agentName,
+        task,
+        model,
+        bin: claudeBin(),
+        args,
+        cwd: opts.cwd ?? defaultCwd,
+        idleTimeoutMs: opts.idleTimeoutMs,
+        signal: opts.signal,
+        onLive: opts.onLive,
+        acc: newClaudeAccumulator(model),
+        foldLine: foldClaudeEventLine,
+    });
+}
+/**
+ * The Claude host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the pi/codex/opencode runners, so the engine runs unchanged on Claude Code.
+ */
+export const claudeSubagentRunner = {
+    runTask: runClaudeAgentTask,
+};
+//# sourceMappingURL=claude-runner.js.map

package/dist/claude-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-runner.js","sourceRoot":"","sources":["../src/claude-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,kBAAkB,EAClB,GAAG,EACH,kBAAkB,GAOlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;sCAGsC;AACtC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAe1E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED;;;gDAGgD;AAChD,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,QAAQ,CAAC,EAAE,CAAC;QACX,KAAK,MAAM;YACV,OAAO,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,cAAc;YAClB,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACV,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC;YACC,OAAO,CAAC,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAsB,EAAE,IAAY;IACvE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAU,CAAC;IACf,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5E,OAAO,IAAI,CAAC;IACb,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,wEAAwE;QACxE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC;QAC9C,IAAI,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACpF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAClE,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChF,IAAI,CAAC,SAAS;oBAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;iBAAM,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gBACtC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACpD,GAAG,CAAC,UAAU,GAAG,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;QAC1C,CAAC;QACD,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YAC3D,qFAAqF;YACrF,6EAA6E;YAC7E,GAAG,CAAC,KAAK,CAAC,aAAa;gBACtB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC9E,CAAC;IACF,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;YACrC,GAAG,CAAC,KAAK,GAAG,UAAU,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,GAAG,CAAC,UAAU;gBACb,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACzD,sBAAsB,KAAK,CAAC,OAAO,IAAI,SAAS,GAAG,CAAC;YACrD,QAAQ,GAAG,UAAU,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC;IACF,CAAC;SAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wDAAwD;IACtE,CAAC;IAED,IAAI,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA2B;IACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS;QAAE,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACjE,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;0DAI0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAkB;IACjD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,UAAkB,EAClB,MAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,IAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,KAAK,cAAc,CAAC,CAAC,kDAAkD;IAEvE,MAAM,IAAI,GAAG,eAAe,CAAC;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI;QACJ,KAAK;QACL,KAAK;KACL,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC;QACzB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,SAAS,EAAE;QAChB,IAAI;QACJ,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,oBAAoB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,mBAAmB;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAChE,OAAO,EAAE,kBAAkB;CAC3B,CAAC"}

package/dist/codex-runner.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Codex subagent runner — the Codex host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `codex exec --json` process per task and folds its JSONL
+ * event stream into the same host-neutral `RunResult` the pi runner produces,
+ * so the engine (runtime.ts) treats a Codex subagent identically to a pi one.
+ *
+ * Real codex JSONL schema (codex-cli ≥ 0.142), observed empirically:
+ *   {"type":"thread.started","thread_id":"…"}
+ *   {"type":"turn.started"}
+ *   {"type":"item.started",  "item":{"id","type":"command_execution","command","status":"in_progress",…}}
+ *   {"type":"item.completed","item":{"id","type":"command_execution","command","exit_code","status":"completed",…}}
+ *   {"type":"item.completed","item":{"id","type":"agent_message","text":"…"}}   ← final answer
+ *   {"type":"item.completed","item":{"id","type":"error","message":"…"}}        ← warning OR fatal
+ *   {"type":"turn.completed","usage":{"input_tokens","cached_input_tokens","output_tokens","reasoning_output_tokens"}}
+ *
+ * Mapping to the pi contract:
+ *   - output      = text of the LAST `agent_message` item
+ *   - usage.input = input_tokens; usage.output = output_tokens + reasoning_output_tokens;
+ *     usage.cacheRead = cached_input_tokens; turns = number of `turn.completed`
+ *   - lastActivity for streaming = latest agent_message text or a one-line
+ *     command summary
+ *   - benign warnings (the "Under-development features" / "Skill descriptions"
+ *     notices) are NOT treated as failures — only a fatal error item or a
+ *     non-zero exit is.
+ *
+ * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
+ * error sanitization) is delegated to the shared `runSubagentProcess` in
+ * taskflow-core, so behavior is uniform across hosts.
+ */
+import { type AgentConfig, type LiveUpdate, type RunOptions, type RunResult, type SubagentRunner, type UsageStats } from "taskflow-core";
+/** Accumulated state folded from a codex JSONL event stream. */
+export interface CodexAccumulator {
+    usage: UsageStats;
+    model?: string;
+    /** Final answer = text of the last agent_message item seen. */
+    finalText: string;
+    lastActivity: string;
+    /** Set when a fatal (non-benign) error item is seen. */
+    fatalError?: string;
+}
+export declare function newCodexAccumulator(model?: string): CodexAccumulator;
+/**
+ * Fold one codex JSONL line into the accumulator. Returns a LiveUpdate when the
+ * stream produced new activity (for streaming), else null. Empty/malformed
+ * lines are ignored — robust to partial buffers and noise, unit-testable
+ * without spawning a process.
+ */
+export declare function foldCodexEventLine(acc: CodexAccumulator, line: string): LiveUpdate | null;
+/** Override the codex binary (tests / unusual installs). */
+export declare function codexBin(): string;
+/**
+ * Map a phase's tool whitelist to a codex sandbox mode. Codex has no per-tool
+ * whitelist; it has sandbox policies. The conservative mapping: a phase that
+ * only reads (no write/edit/bash in its whitelist) gets `read-only`; anything
+ * else gets `workspace-write`. No whitelist → workspace-write (the engine's
+ * default-capable agent). `danger-full-access` is never selected automatically.
+ */
+export declare function sandboxForTools(tools: string[] | undefined): "read-only" | "workspace-write";
+/** Resolve a modelRoles/pi model id for `codex exec -m`, or `undefined` to let
+ *  codex fall back to its own default. Codex model ids are FLAT (e.g.
+ *  "gpt-5.5"), so a pi-provider path (contains "/") or an unresolved role
+ *  placeholder ({{...}}) is dropped. Exported so the model-id contract is
+ *  unit-testable without a live codex session. */
+export declare function resolveCodexModel(model: string | undefined): string | undefined;
+/** Context for {@link buildCodexArgs} — the pure inputs to argv construction. */
+export interface CodexArgsCtx {
+    systemPrompt: string;
+    task: string;
+    /** Already-resolved model (opts.model ?? agent.model). */
+    model?: string;
+    tools?: string[];
+    cwd?: string;
+}
+/**
+ * Build the full `codex exec` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted from `runCodexAgentTask` so the host's
+ * CLI flag contract is unit-testable in CI without a live codex session.
+ *
+ *   codex exec --json --skip-git-repo-check -s <sandbox> [-m model] [-C cwd] <prompt>
+ */
+export declare function buildCodexArgs(ctx: CodexArgsCtx): string[];
+/**
+ * Run a single subagent task via `codex exec --json`. Resolves the agent from
+ * `agents` by name; returns the same structured `RunResult` the pi runner does.
+ */
+export declare function runCodexAgentTask(defaultCwd: string, agents: AgentConfig[], agentName: string, task: string, opts: RunOptions, globalThinking?: string): Promise<RunResult>;
+/**
+ * The Codex host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the pi/codex/claude/opencode runners, so the engine runs unchanged on Codex.
+ */
+export declare const codexSubagentRunner: SubagentRunner<AgentConfig>;
+//# sourceMappingURL=codex-runner.d.ts.map

package/dist/codex-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-runner.d.ts","sourceRoot":"","sources":["../src/codex-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAIN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AAcvB,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAEpE;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAkDzF;AAED,4DAA4D;AAC5D,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,WAAW,GAAG,iBAAiB,CAK5F;AAED;;;;kDAIkD;AAClD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,EAAE,CAW1D;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CA8BpB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAE3D,CAAC"}

package/dist/codex-runner.js

@@ -0,0 +1,205 @@
+/**
+ * Codex subagent runner — the Codex host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `codex exec --json` process per task and folds its JSONL
+ * event stream into the same host-neutral `RunResult` the pi runner produces,
+ * so the engine (runtime.ts) treats a Codex subagent identically to a pi one.
+ *
+ * Real codex JSONL schema (codex-cli ≥ 0.142), observed empirically:
+ *   {"type":"thread.started","thread_id":"…"}
+ *   {"type":"turn.started"}
+ *   {"type":"item.started",  "item":{"id","type":"command_execution","command","status":"in_progress",…}}
+ *   {"type":"item.completed","item":{"id","type":"command_execution","command","exit_code","status":"completed",…}}
+ *   {"type":"item.completed","item":{"id","type":"agent_message","text":"…"}}   ← final answer
+ *   {"type":"item.completed","item":{"id","type":"error","message":"…"}}        ← warning OR fatal
+ *   {"type":"turn.completed","usage":{"input_tokens","cached_input_tokens","output_tokens","reasoning_output_tokens"}}
+ *
+ * Mapping to the pi contract:
+ *   - output      = text of the LAST `agent_message` item
+ *   - usage.input = input_tokens; usage.output = output_tokens + reasoning_output_tokens;
+ *     usage.cacheRead = cached_input_tokens; turns = number of `turn.completed`
+ *   - lastActivity for streaming = latest agent_message text or a one-line
+ *     command summary
+ *   - benign warnings (the "Under-development features" / "Skill descriptions"
+ *     notices) are NOT treated as failures — only a fatal error item or a
+ *     non-zero exit is.
+ *
+ * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
+ * error sanitization) is delegated to the shared `runSubagentProcess` in
+ * taskflow-core, so behavior is uniform across hosts.
+ */
+import { runSubagentProcess, num, unknownAgentResult, } from "taskflow-core";
+import { emptyUsage } from "taskflow-core";
+/** Benign codex `error` items that are warnings, not failures. Matched as a
+ *  prefix/substring so version drift in the message tail still classifies. */
+const BENIGN_ERROR_MARKERS = [
+    "Under-development features",
+    "Skill descriptions were shortened",
+];
+function isBenignCodexError(message) {
+    return BENIGN_ERROR_MARKERS.some((m) => message.includes(m));
+}
+export function newCodexAccumulator(model) {
+    return { usage: emptyUsage(), model, finalText: "", lastActivity: "" };
+}
+function shortCmd(cmd) {
+    const s = String(cmd ?? "").replace(/\s+/g, " ").trim();
+    return s.length > 64 ? `${s.slice(0, 64)}…` : s;
+}
+/**
+ * Fold one codex JSONL line into the accumulator. Returns a LiveUpdate when the
+ * stream produced new activity (for streaming), else null. Empty/malformed
+ * lines are ignored — robust to partial buffers and noise, unit-testable
+ * without spawning a process.
+ */
+export function foldCodexEventLine(acc, line) {
+    if (!line.trim())
+        return null;
+    let event;
+    try {
+        event = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    let activity = "";
+    if (event.type === "turn.completed" && event.usage) {
+        const u = event.usage;
+        acc.usage.turns++;
+        acc.usage.input += num(u.input_tokens);
+        acc.usage.output += num(u.output_tokens) + num(u.reasoning_output_tokens);
+        acc.usage.cacheRead += num(u.cached_input_tokens);
+        // contextTokens is a host-specific point-in-time gauge (NOT additive — excluded from aggregateUsage):
+        // each host's formula differs because each accounts for cache differently. Codex's input_tokens
+        // already includes cached tokens, so input+output = full last-turn context.
+        acc.usage.contextTokens = num(u.input_tokens) + num(u.output_tokens);
+    }
+    else if (event.type === "item.completed" || event.type === "item.started") {
+        const item = event.item;
+        if (!item)
+            return null;
+        switch (item.type) {
+            case "agent_message":
+                if (typeof item.text === "string" && item.text.trim()) {
+                    // Final answer is the LAST agent_message; keep overwriting.
+                    if (event.type === "item.completed")
+                        acc.finalText = item.text;
+                    activity = item.text.trim();
+                }
+                break;
+            case "command_execution":
+                activity = `$ ${shortCmd(item.command)}`;
+                break;
+            case "error":
+                if (typeof item.message === "string" && !isBenignCodexError(item.message)) {
+                    acc.fatalError = item.message;
+                    activity = `error: ${item.message}`;
+                }
+                break;
+            default:
+                // file_change / reasoning / mcp_tool_call / etc. — note generically.
+                if (typeof item.type === "string")
+                    activity = item.type;
+        }
+    }
+    else {
+        return null; // thread.started / turn.started — nothing to fold.
+    }
+    if (activity)
+        acc.lastActivity = activity.replace(/\s+/g, " ").trim();
+    return { text: acc.lastActivity, usage: { ...acc.usage }, model: acc.model };
+}
+/** Override the codex binary (tests / unusual installs). */
+export function codexBin() {
+    return process.env.PI_TASKFLOW_CODEX_BIN || "codex";
+}
+/**
+ * Map a phase's tool whitelist to a codex sandbox mode. Codex has no per-tool
+ * whitelist; it has sandbox policies. The conservative mapping: a phase that
+ * only reads (no write/edit/bash in its whitelist) gets `read-only`; anything
+ * else gets `workspace-write`. No whitelist → workspace-write (the engine's
+ * default-capable agent). `danger-full-access` is never selected automatically.
+ */
+export function sandboxForTools(tools) {
+    if (!tools || tools.length === 0)
+        return "workspace-write";
+    const mutating = new Set(["write", "edit", "bash", "apply_patch"]);
+    const canMutate = tools.some((t) => mutating.has(t));
+    return canMutate ? "workspace-write" : "read-only";
+}
+/** Resolve a modelRoles/pi model id for `codex exec -m`, or `undefined` to let
+ *  codex fall back to its own default. Codex model ids are FLAT (e.g.
+ *  "gpt-5.5"), so a pi-provider path (contains "/") or an unresolved role
+ *  placeholder ({{...}}) is dropped. Exported so the model-id contract is
+ *  unit-testable without a live codex session. */
+export function resolveCodexModel(model) {
+    if (!model)
+        return undefined;
+    if (model.includes("/"))
+        return undefined;
+    if (/^\{\{.*\}\}$/.test(model))
+        return undefined;
+    return model;
+}
+/**
+ * Build the full `codex exec` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted from `runCodexAgentTask` so the host's
+ * CLI flag contract is unit-testable in CI without a live codex session.
+ *
+ *   codex exec --json --skip-git-repo-check -s <sandbox> [-m model] [-C cwd] <prompt>
+ */
+export function buildCodexArgs(ctx) {
+    const sandbox = sandboxForTools(ctx.tools);
+    const codexModel = resolveCodexModel(ctx.model);
+    const fullPrompt = ctx.systemPrompt.trim()
+        ? `${ctx.systemPrompt.trim()}\n\n---\n\nTask: ${ctx.task}`
+        : `Task: ${ctx.task}`;
+    const args = ["exec", "--json", "--skip-git-repo-check", "-s", sandbox];
+    if (codexModel)
+        args.push("-m", codexModel);
+    if (ctx.cwd)
+        args.push("-C", ctx.cwd);
+    args.push(fullPrompt);
+    return args;
+}
+/**
+ * Run a single subagent task via `codex exec --json`. Resolves the agent from
+ * `agents` by name; returns the same structured `RunResult` the pi runner does.
+ */
+export async function runCodexAgentTask(defaultCwd, agents, agentName, task, opts, globalThinking) {
+    const agent = agents.find((a) => a.name === agentName);
+    if (!agent)
+        return unknownAgentResult(agentName, task, agents);
+    const model = opts.model ?? agent.model;
+    const tools = opts.tools ?? agent.tools;
+    void globalThinking; // codex has no thinking-level flag on exec; reserved.
+    const cwd = opts.cwd ?? defaultCwd;
+    const args = buildCodexArgs({
+        systemPrompt: agent.systemPrompt,
+        task,
+        model,
+        tools,
+        cwd,
+    });
+    return runSubagentProcess({
+        agent: agentName,
+        task,
+        model,
+        bin: codexBin(),
+        args,
+        cwd,
+        idleTimeoutMs: opts.idleTimeoutMs,
+        signal: opts.signal,
+        onLive: opts.onLive,
+        acc: newCodexAccumulator(model),
+        foldLine: foldCodexEventLine,
+    });
+}
+/**
+ * The Codex host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the pi/codex/claude/opencode runners, so the engine runs unchanged on Codex.
+ */
+export const codexSubagentRunner = {
+    runTask: runCodexAgentTask,
+};
+//# sourceMappingURL=codex-runner.js.map

package/dist/codex-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-runner.js","sourceRoot":"","sources":["../src/codex-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EACN,kBAAkB,EAClB,GAAG,EACH,kBAAkB,GAOlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;8EAC8E;AAC9E,MAAM,oBAAoB,GAAG;IAC5B,4BAA4B;IAC5B,mCAAmC;CACnC,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAAe;IAC1C,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAaD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IACjD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAqB,EAAE,IAAY;IACrE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAU,CAAC;IACf,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAClD,sGAAsG;QACtG,gGAAgG;QAChG,4EAA4E;QAC5E,GAAG,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACtE,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,eAAe;gBACnB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBACvD,4DAA4D;oBAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;wBAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;oBAC/D,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,CAAC;gBACD,MAAM;YACP,KAAK,mBAAmB;gBACvB,QAAQ,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,MAAM;YACP,KAAK,OAAO;gBACX,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC9B,QAAQ,GAAG,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBACD,MAAM;YACP;gBACC,qEAAqE;gBACrE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1D,CAAC;IACF,CAAC;SAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,mDAAmD;IACjE,CAAC;IAED,IAAI,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,QAAQ;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAA2B;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC;AACpD,CAAC;AAED;;;;kDAIkD;AAClD,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAiB;IAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QACzC,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,oBAAoB,GAAG,CAAC,IAAI,EAAE;QAC1D,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClF,IAAI,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,UAAkB,EAClB,MAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,IAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,KAAK,cAAc,CAAC,CAAC,sDAAsD;IAE3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,IAAI,GAAG,cAAc,CAAC;QAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI;QACJ,KAAK;QACL,KAAK;QACL,GAAG;KACH,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC;QACzB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,QAAQ,EAAE;QACf,IAAI;QACJ,GAAG;QACH,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC;QAC/B,QAAQ,EAAE,kBAAkB;KAC5B,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC/D,OAAO,EAAE,iBAAiB;CAC1B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * taskflow-hosts — the shared collection of host-runner implementations.
+ *
+ * Each non-pi host (codex / claude / opencode) has two halves:
+ *   1. the **runner** — a `SubagentRunner` that spawns that host's CLI, folds
+ *      its event stream, and classifies the outcome into a host-neutral
+ *      `RunResult`. PLUS the pure argv builders (`buildXxxArgs`) and
+ *      permission/model helpers.
+ *   2. the **delivery** — the per-host MCP server + bin + plugin scaffold,
+ *      which lives in that host's own package (codex-taskflow /
+ *      claude-taskflow / opencode-taskflow) because it's the host-ecosystem
+ *      install target (`codex plugin add`, `claude plugin install`, …).
+ *
+ * This package holds only #1 — the runners — so all host runners live in one
+ * place. A new host adds a `<host>-runner.ts` here; its delivery package
+ * imports the runner from `taskflow-hosts`. The three legacy host packages
+ * re-export from here (or import the runner directly into their `mcp/server`).
+ *
+ * The barrel re-exports the full public surface of each runner so a consumer
+ * can `import { codexSubagentRunner, buildCodexArgs } from "taskflow-hosts"`,
+ * or use a sub-path (`taskflow-hosts/codex`) to tree-shake to one host.
+ */
+export * from "./codex-runner.ts";
+export * from "./claude-runner.ts";
+export * from "./opencode-runner.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+/**
+ * taskflow-hosts — the shared collection of host-runner implementations.
+ *
+ * Each non-pi host (codex / claude / opencode) has two halves:
+ *   1. the **runner** — a `SubagentRunner` that spawns that host's CLI, folds
+ *      its event stream, and classifies the outcome into a host-neutral
+ *      `RunResult`. PLUS the pure argv builders (`buildXxxArgs`) and
+ *      permission/model helpers.
+ *   2. the **delivery** — the per-host MCP server + bin + plugin scaffold,
+ *      which lives in that host's own package (codex-taskflow /
+ *      claude-taskflow / opencode-taskflow) because it's the host-ecosystem
+ *      install target (`codex plugin add`, `claude plugin install`, …).
+ *
+ * This package holds only #1 — the runners — so all host runners live in one
+ * place. A new host adds a `<host>-runner.ts` here; its delivery package
+ * imports the runner from `taskflow-hosts`. The three legacy host packages
+ * re-export from here (or import the runner directly into their `mcp/server`).
+ *
+ * The barrel re-exports the full public surface of each runner so a consumer
+ * can `import { codexSubagentRunner, buildCodexArgs } from "taskflow-hosts"`,
+ * or use a sub-path (`taskflow-hosts/codex`) to tree-shake to one host.
+ */
+export * from "./codex-runner.js";
+export * from "./claude-runner.js";
+export * from "./opencode-runner.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC"}

package/dist/opencode-runner.d.ts

@@ -0,0 +1,115 @@
+/**
+ * OpenCode subagent runner — the OpenCode host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `opencode run --format json` process per task and folds its
+ * JSON event stream into the same host-neutral `RunResult` the pi, codex, and
+ * claude runners produce, so the engine (runtime.ts) treats an OpenCode subagent
+ * identically.
+ *
+ * Real opencode `run --format json` schema (opencode ≥ 1.17), observed
+ * empirically — one JSON object per line:
+ *   {"type":"step_start", "part":{"type":"step-start",…}}
+ *   {"type":"text",       "part":{"type":"text","text":"…"}}          ← assistant text
+ *   {"type":"tool_use",   "part":{"type":"tool","tool":"bash",
+ *       "state":{"status":"completed","input":{"command":"…"},"title":"…"}}}
+ *   {"type":"step_finish","part":{"type":"step-finish","reason":"stop"|"tool-calls",
+ *       "tokens":{"total","input","output","reasoning","cache":{"read","write"}},"cost":0}}
+ *   {"type":"error",      "error":{"name":"…","data":{"message":"…"}}}  ← fatal
+ *
+ * Mapping to the host-neutral contract:
+ *   - output       = accumulated `text` parts of the LAST step (text before a
+ *                    tool call is intermediate reasoning → reset on tool_use)
+ *   - usage.input  = Σ step tokens.input; usage.output = Σ (output + reasoning);
+ *     cacheRead/cacheWrite from tokens.cache; cost = Σ part.cost;
+ *     turns = number of step_finish events; contextTokens = latest tokens.total
+ *   - failure      = an `error` event, or a non-zero exit
+ *
+ * Permission mapping (the codex `sandboxForTools` analogue): OpenCode has no
+ * per-run tool-whitelist flag, but it honours a per-process config injected via
+ * the `OPENCODE_CONFIG_CONTENT` env var. A read-only phase (no write/edit/bash
+ * in its whitelist) is launched with a permission policy that DENIES
+ * bash/write/edit — genuinely enforced (a denied tool call is rejected, not
+ * merely un-approved). A mutating phase (or no whitelist) runs with `--auto`
+ * (auto-approve every permission), the workspace-write analogue.
+ *
+ * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
+ * error sanitization) mirrors the other runners so behavior is uniform.
+ */
+import { type AgentConfig, type LiveUpdate, type RunOptions, type RunResult, type SubagentRunner, type UsageStats } from "taskflow-core";
+/** Accumulated state folded from an opencode JSON event stream. */
+export interface OpencodeAccumulator {
+    usage: UsageStats;
+    model?: string;
+    /** Final answer = text parts of the last step (reset when a tool runs). */
+    finalText: string;
+    lastActivity: string;
+    /** Set when the stream reported a fatal `error` event. */
+    fatalError?: string;
+}
+export declare function newOpencodeAccumulator(model?: string): OpencodeAccumulator;
+/**
+ * Fold one opencode JSON line into the accumulator. Returns a LiveUpdate when
+ * the stream produced new activity (for streaming), else null. Empty/malformed
+ * lines are ignored — robust to partial buffers and noise, unit-testable
+ * without spawning a process.
+ */
+export declare function foldOpencodeEventLine(acc: OpencodeAccumulator, line: string): LiveUpdate | null;
+/** Override the opencode binary (tests / unusual installs). */
+export declare function opencodeBin(): string;
+/**
+ * Decide whether a phase is read-only from its tool whitelist — the codex
+ * `sandboxForTools` analogue. No whitelist → not read-only (default-capable).
+ */
+export declare function isReadOnlyPhase(tools: string[] | undefined): boolean;
+/**
+ * Resolve a taskflow/pi model id to something `opencode run -m` accepts, or
+ * `undefined` to let opencode use its configured default.
+ *
+ * Unlike codex/claude (whose model ids are flat, so "contains `/`" ⇒ a pi
+ * provider path to drop), a *valid* opencode model IS `provider/model` (one
+ * slash). So we only drop ids that clearly aren't opencode models:
+ *   - an unresolved role placeholder `{{fast}}`
+ *   - a pi thinking suffix (`…:xhigh`)
+ *   - a multi-segment openrouter path (`openrouter/vendor/model`, ≥ 2 slashes)
+ * A clean `provider/model` passes straight through.
+ */
+export declare function resolveOpencodeModel(model: string | undefined): string | undefined;
+/** Context for {@link buildOpencodeArgs} — the pure inputs to argv construction. */
+export interface OpencodeArgsCtx {
+    systemPrompt: string;
+    task: string;
+    /** Already-resolved model (opts.model ?? agent.model). */
+    model?: string;
+    tools?: string[];
+    cwd?: string;
+}
+/** Result of {@link buildOpencodeArgs}: the argv plus whether a read-only
+ *  permission policy should be injected via OPENCODE_CONFIG_CONTENT (the env
+ *  side-effect is left to the caller, which owns `process.env`). */
+export interface OpencodeArgs {
+    args: string[];
+    /** True for a read-only phase — the caller injects the deny-mutations config. */
+    readOnly: boolean;
+}
+/**
+ * Build the full `opencode run` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted from `runOpencodeAgentTask` so the
+ * host's CLI flag contract is unit-testable in CI without a live opencode
+ * session. Returns whether the phase is read-only so the caller can inject the
+ * matching OPENCODE_CONFIG_CONTENT env without re-deriving it.
+ *
+ *   opencode run <prompt> --format json [--dir cwd] [-m model] [--auto]
+ */
+export declare function buildOpencodeArgs(ctx: OpencodeArgsCtx): OpencodeArgs;
+/**
+ * Run a single subagent task via `opencode run --format json`. Resolves the
+ * agent from `agents` by name; returns the same structured `RunResult` the pi,
+ * codex, and claude runners do.
+ */
+export declare function runOpencodeAgentTask(defaultCwd: string, agents: AgentConfig[], agentName: string, task: string, opts: RunOptions, globalThinking?: string): Promise<RunResult>;
+/**
+ * The OpenCode host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the pi/codex/claude runners, so the engine runs unchanged on OpenCode.
+ */
+export declare const opencodeSubagentRunner: SubagentRunner<AgentConfig>;
+//# sourceMappingURL=opencode-runner.d.ts.map

package/dist/opencode-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-runner.d.ts","sourceRoot":"","sources":["../src/opencode-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAIN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AAQvB,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAE1E;AAcD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAwD/F;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAIpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASlF;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;oEAEoE;AACpE,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,YAAY,CAWpE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAiCpB;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAc,CAAC,WAAW,CAE9D,CAAC"}

package/dist/opencode-runner.js

@@ -0,0 +1,232 @@
+/**
+ * OpenCode subagent runner — the OpenCode host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `opencode run --format json` process per task and folds its
+ * JSON event stream into the same host-neutral `RunResult` the pi, codex, and
+ * claude runners produce, so the engine (runtime.ts) treats an OpenCode subagent
+ * identically.
+ *
+ * Real opencode `run --format json` schema (opencode ≥ 1.17), observed
+ * empirically — one JSON object per line:
+ *   {"type":"step_start", "part":{"type":"step-start",…}}
+ *   {"type":"text",       "part":{"type":"text","text":"…"}}          ← assistant text
+ *   {"type":"tool_use",   "part":{"type":"tool","tool":"bash",
+ *       "state":{"status":"completed","input":{"command":"…"},"title":"…"}}}
+ *   {"type":"step_finish","part":{"type":"step-finish","reason":"stop"|"tool-calls",
+ *       "tokens":{"total","input","output","reasoning","cache":{"read","write"}},"cost":0}}
+ *   {"type":"error",      "error":{"name":"…","data":{"message":"…"}}}  ← fatal
+ *
+ * Mapping to the host-neutral contract:
+ *   - output       = accumulated `text` parts of the LAST step (text before a
+ *                    tool call is intermediate reasoning → reset on tool_use)
+ *   - usage.input  = Σ step tokens.input; usage.output = Σ (output + reasoning);
+ *     cacheRead/cacheWrite from tokens.cache; cost = Σ part.cost;
+ *     turns = number of step_finish events; contextTokens = latest tokens.total
+ *   - failure      = an `error` event, or a non-zero exit
+ *
+ * Permission mapping (the codex `sandboxForTools` analogue): OpenCode has no
+ * per-run tool-whitelist flag, but it honours a per-process config injected via
+ * the `OPENCODE_CONFIG_CONTENT` env var. A read-only phase (no write/edit/bash
+ * in its whitelist) is launched with a permission policy that DENIES
+ * bash/write/edit — genuinely enforced (a denied tool call is rejected, not
+ * merely un-approved). A mutating phase (or no whitelist) runs with `--auto`
+ * (auto-approve every permission), the workspace-write analogue.
+ *
+ * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
+ * error sanitization) mirrors the other runners so behavior is uniform.
+ */
+import { runSubagentProcess, num, unknownAgentResult, } from "taskflow-core";
+import { emptyUsage } from "taskflow-core";
+/** The permission policy injected (via OPENCODE_CONFIG_CONTENT) for a read-only
+ *  phase: deny every mutating capability so a listed-tools phase without
+ *  write/edit/bash cannot change the workspace. */
+const READ_ONLY_CONFIG = JSON.stringify({ permission: { bash: "deny", write: "deny", edit: "deny" } });
+export function newOpencodeAccumulator(model) {
+    return { usage: emptyUsage(), model, finalText: "", lastActivity: "" };
+}
+function shortTool(part) {
+    const tool = String(part?.tool ?? "tool");
+    const cmd = part?.state?.input?.command;
+    if (tool === "bash" && typeof cmd === "string" && cmd.trim()) {
+        const s = cmd.replace(/\s+/g, " ").trim();
+        return `$ ${s.length > 64 ? `${s.slice(0, 64)}…` : s}`;
+    }
+    const title = part?.state?.title;
+    if (typeof title === "string" && title.trim())
+        return `${tool}: ${title.trim()}`;
+    return tool;
+}
+/**
+ * Fold one opencode JSON line into the accumulator. Returns a LiveUpdate when
+ * the stream produced new activity (for streaming), else null. Empty/malformed
+ * lines are ignored — robust to partial buffers and noise, unit-testable
+ * without spawning a process.
+ */
+export function foldOpencodeEventLine(acc, line) {
+    if (!line.trim())
+        return null;
+    let event;
+    try {
+        event = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    let activity = "";
+    const part = event.part;
+    switch (event.type) {
+        case "text":
+            if (part && typeof part.text === "string" && part.text) {
+                // Text parts stream; concatenate within the current step. A tool call
+                // (below) resets this, so only the LAST step's text is the answer.
+                acc.finalText += part.text;
+                activity = acc.finalText.trim();
+            }
+            break;
+        case "tool_use":
+            // A tool call means any text so far was intermediate reasoning, not the
+            // final answer — drop it and keep only text that follows the last tool.
+            acc.finalText = "";
+            if (part)
+                activity = shortTool(part);
+            break;
+        case "step_finish": {
+            acc.usage.turns++;
+            const tk = part?.tokens;
+            if (tk) {
+                acc.usage.input += num(tk.input);
+                acc.usage.output += num(tk.output) + num(tk.reasoning);
+                acc.usage.cacheRead += num(tk.cache?.read);
+                acc.usage.cacheWrite += num(tk.cache?.write);
+                // contextTokens is a host-specific gauge (NOT additive): opencode's tokens.total is
+                // the full last-turn context (input+output+reasoning), already cache-accounted.
+                acc.usage.contextTokens = num(tk.total) || acc.usage.contextTokens;
+            }
+            if (typeof part?.cost === "number")
+                acc.usage.cost += part.cost;
+            break;
+        }
+        case "error": {
+            const msg = (event.error?.data?.message && String(event.error.data.message)) ||
+                (event.error?.name && String(event.error.name)) ||
+                "opencode run failed";
+            acc.fatalError = msg;
+            activity = `error: ${msg}`;
+            break;
+        }
+        default:
+            return null; // step_start / other — nothing to fold.
+    }
+    if (activity)
+        acc.lastActivity = activity.replace(/\s+/g, " ").trim();
+    return { text: acc.lastActivity, usage: { ...acc.usage }, model: acc.model };
+}
+/** Override the opencode binary (tests / unusual installs). */
+export function opencodeBin() {
+    return process.env.PI_TASKFLOW_OPENCODE_BIN || "opencode";
+}
+/**
+ * Decide whether a phase is read-only from its tool whitelist — the codex
+ * `sandboxForTools` analogue. No whitelist → not read-only (default-capable).
+ */
+export function isReadOnlyPhase(tools) {
+    if (!tools || tools.length === 0)
+        return false;
+    const mutating = new Set(["write", "edit", "bash", "apply_patch"]);
+    return !tools.some((t) => mutating.has(t));
+}
+/**
+ * Resolve a taskflow/pi model id to something `opencode run -m` accepts, or
+ * `undefined` to let opencode use its configured default.
+ *
+ * Unlike codex/claude (whose model ids are flat, so "contains `/`" ⇒ a pi
+ * provider path to drop), a *valid* opencode model IS `provider/model` (one
+ * slash). So we only drop ids that clearly aren't opencode models:
+ *   - an unresolved role placeholder `{{fast}}`
+ *   - a pi thinking suffix (`…:xhigh`)
+ *   - a multi-segment openrouter path (`openrouter/vendor/model`, ≥ 2 slashes)
+ * A clean `provider/model` passes straight through.
+ */
+export function resolveOpencodeModel(model) {
+    if (!model)
+        return undefined;
+    if (/^\{\{.*\}\}$/.test(model))
+        return undefined; // unresolved role placeholder
+    // pi thinking suffix: `<model>:<level>` (e.g. "anthropic/glm-5.2:xhigh"). Only the
+    // colon-delimited form is dropped — a real `:tag` (no level keyword) passes
+    // through so opencode itself can reject it with a clear error if invalid.
+    if (/:\s*(?:xhigh|high|medium|low|off)$/.test(model))
+        return undefined;
+    if ((model.match(/\//g)?.length ?? 0) >= 2)
+        return undefined; // openrouter path (openrouter/vendor/model)
+    return model;
+}
+/**
+ * Build the full `opencode run` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted from `runOpencodeAgentTask` so the
+ * host's CLI flag contract is unit-testable in CI without a live opencode
+ * session. Returns whether the phase is read-only so the caller can inject the
+ * matching OPENCODE_CONFIG_CONTENT env without re-deriving it.
+ *
+ *   opencode run <prompt> --format json [--dir cwd] [-m model] [--auto]
+ */
+export function buildOpencodeArgs(ctx) {
+    const opencodeModel = resolveOpencodeModel(ctx.model);
+    const readOnly = isReadOnlyPhase(ctx.tools);
+    const fullPrompt = ctx.systemPrompt.trim()
+        ? `${ctx.systemPrompt.trim()}\n\n---\n\nTask: ${ctx.task}`
+        : `Task: ${ctx.task}`;
+    const args = ["run", fullPrompt, "--format", "json"];
+    if (ctx.cwd)
+        args.push("--dir", ctx.cwd);
+    if (opencodeModel)
+        args.push("-m", opencodeModel);
+    if (!readOnly)
+        args.push("--auto");
+    return { args, readOnly };
+}
+/**
+ * Run a single subagent task via `opencode run --format json`. Resolves the
+ * agent from `agents` by name; returns the same structured `RunResult` the pi,
+ * codex, and claude runners do.
+ */
+export async function runOpencodeAgentTask(defaultCwd, agents, agentName, task, opts, globalThinking) {
+    const agent = agents.find((a) => a.name === agentName);
+    if (!agent)
+        return unknownAgentResult(agentName, task, agents);
+    const model = opts.model ?? agent.model;
+    const tools = opts.tools ?? agent.tools;
+    void globalThinking; // opencode's --variant is provider-specific; reserved.
+    const cwd = opts.cwd ?? defaultCwd;
+    const { args, readOnly } = buildOpencodeArgs({
+        systemPrompt: agent.systemPrompt,
+        task,
+        model,
+        tools,
+        cwd,
+    });
+    return runSubagentProcess({
+        agent: agentName,
+        task,
+        model,
+        bin: opencodeBin(),
+        args,
+        // A read-only phase injects the deny-mutations permission policy; the
+        // shared runner merges this over the parent env.
+        env: readOnly ? { ...process.env, OPENCODE_CONFIG_CONTENT: READ_ONLY_CONFIG } : undefined,
+        cwd,
+        idleTimeoutMs: opts.idleTimeoutMs,
+        signal: opts.signal,
+        onLive: opts.onLive,
+        acc: newOpencodeAccumulator(model),
+        foldLine: foldOpencodeEventLine,
+    });
+}
+/**
+ * The OpenCode host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the pi/codex/claude runners, so the engine runs unchanged on OpenCode.
+ */
+export const opencodeSubagentRunner = {
+    runTask: runOpencodeAgentTask,
+};
+//# sourceMappingURL=opencode-runner.js.map

package/dist/opencode-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-runner.js","sourceRoot":"","sources":["../src/opencode-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACN,kBAAkB,EAClB,GAAG,EACH,kBAAkB,GAOlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;mDAEmD;AACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAavG,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACpD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,IAAS;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC;IACxC,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IACjF,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAwB,EAAE,IAAY;IAC3E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAU,CAAC;IACf,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAExB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM;YACV,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxD,sEAAsE;gBACtE,mEAAmE;gBACnE,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC;gBAC3B,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACjC,CAAC;YACD,MAAM;QACP,KAAK,UAAU;YACd,wEAAwE;YACxE,wEAAwE;YACxE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,IAAI;gBAAE,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM;QACP,KAAK,aAAa,CAAC,CAAC,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC;YACxB,IAAI,EAAE,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvD,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC3C,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC7C,oFAAoF;gBACpF,gFAAgF;gBAChF,GAAG,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;YACpE,CAAC;YACD,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;YAChE,MAAM;QACP,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GACR,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAChE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/C,qBAAqB,CAAC;YACvB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,QAAQ,GAAG,UAAU,GAAG,EAAE,CAAC;YAC3B,MAAM;QACP,CAAC;QACD;YACC,OAAO,IAAI,CAAC,CAAC,wCAAwC;IACvD,CAAC;IAED,IAAI,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,UAAU,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAA2B;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAyB;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,8BAA8B;IAChF,mFAAmF;IACnF,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,4CAA4C;IAC1G,OAAO,KAAK,CAAC;AACd,CAAC;AAqBD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAoB;IACrD,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QACzC,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,oBAAoB,GAAG,CAAC,IAAI,EAAE;QAC1D,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAa,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,aAAa;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,UAAkB,EAClB,MAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,IAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,KAAK,cAAc,CAAC,CAAC,uDAAuD;IAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI;QACJ,KAAK;QACL,KAAK;QACL,GAAG;KACH,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC;QACzB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,WAAW,EAAE;QAClB,IAAI;QACJ,sEAAsE;QACtE,iDAAiD;QACjD,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS;QACzF,GAAG;QACH,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,sBAAsB,CAAC,KAAK,CAAC;QAClC,QAAQ,EAAE,qBAAqB;KAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAgC;IAClE,OAAO,EAAE,oBAAoB;CAC7B,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "taskflow-hosts",
+  "version": "0.1.6",
+  "description": "Shared host-runner collection for taskflow — the codex, claude, and opencode SubagentRunner implementations + their argv builders and event-stream parsers. The per-host MCP servers, plugin scaffolds, and bins live in codex-taskflow / claude-taskflow / opencode-taskflow; this package holds just the runners so a new host can be added in one place.",
+  "type": "module",
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "exports": {
+    ".": {
+      "development": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./codex": {
+      "development": "./src/codex-runner.ts",
+      "types": "./dist/codex-runner.d.ts",
+      "default": "./dist/codex-runner.js"
+    },
+    "./claude": {
+      "development": "./src/claude-runner.ts",
+      "types": "./dist/claude-runner.d.ts",
+      "default": "./dist/claude-runner.js"
+    },
+    "./opencode": {
+      "development": "./src/opencode-runner.ts",
+      "types": "./dist/opencode-runner.d.ts",
+      "default": "./dist/opencode-runner.js"
+    },
+    "./*": {
+      "development": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "taskflow-core": "0.1.6"
+  },
+  "devDependencies": {
+    "typescript": "^6.0.3"
+  },
+  "keywords": [
+    "taskflow",
+    "subagent",
+    "codex",
+    "claude",
+    "opencode",
+    "orchestration"
+  ],
+  "license": "MIT",
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json"
+  }
+}