scv_tools/delegate/
adapters.rs

1//! The native agent CLIs SCV can delegate to, one descriptor each.
2//!
3//! A descriptor is the whole integration: the default command line, where the
4//! CLI keeps its state inside SCV's private agent home, which inherited
5//! variables it must never see, and how `scv agents login|status|logout`
6//! handle it. Adding an agent means adding one entry to [`ADAPTERS`].
7
8use std::{
9    ffi::OsStr,
10    path::{Path, PathBuf},
11};
12
13/// How SCV signs an agent in, inside its private agent home.
14#[derive(Debug, Clone, Copy, PartialEq, Eq)]
15pub enum Login {
16    /// Run the CLI's own sign-in command.
17    Command(&'static [&'static str]),
18    /// Open the CLI interactively; `hint` names its in-app sign-in command.
19    Interactive {
20        args: &'static [&'static str],
21        hint: &'static str,
22    },
23    /// Prompt for an API key and store it in the CLI's own credential file.
24    ApiKey(KeyStore),
25    /// Copy SCV's own configuration: `scv agents import <name>`.
26    Import,
27}
28
29/// How SCV reports whether an agent is signed in.
30#[derive(Debug, Clone, Copy, PartialEq, Eq)]
31pub enum Status {
32    /// The CLI prints its own status and exits non-zero when signed out.
33    Command(&'static [&'static str]),
34    /// SCV inspects the CLI's credential file without printing secrets.
35    Stored(KeyStore),
36}
37
38/// What a CLI prints on stdout when SCV runs it, and so how SCV reads its
39/// reply, usage, and failure out of it.
40#[derive(Debug, Clone, Copy, PartialEq, Eq)]
41pub enum OutputFormat {
42    /// Plain text: stdout is the reply.
43    Text,
44    /// Claude Code `--output-format stream-json --verbose`: one JSON event per
45    /// line, ending with a `result` event.
46    ClaudeStreamJson,
47    /// `codex exec --json`: JSON events per line; SCV also passes `-o <file>`
48    /// so the final message survives an unparsable stream.
49    CodexJsonl,
50    /// pi `--mode json`: JSON events per line; the reply is the last
51    /// assistant `message_end`.
52    PiJson,
53}
54
55impl OutputFormat {
56    /// Arguments that select this format, placed after the fixed arguments.
57    pub(crate) fn args(self) -> &'static [&'static str] {
58        match self {
59            Self::Text => &[],
60            Self::ClaudeStreamJson => &["--output-format", "stream-json", "--verbose"],
61            Self::CodexJsonl => &["--json"],
62            Self::PiJson => &["--mode", "json"],
63        }
64    }
65}
66
67/// How SCV talks to an agent.
68#[derive(Debug, Clone, Copy, PartialEq, Eq)]
69pub enum Transport {
70    /// One CLI process per turn: the prompt is an argument and the reply is
71    /// read from its output ([`OutputFormat`]), continued through [`Resume`].
72    Process,
73    /// A long-running `scv server --stdio` per conversation, driven over the
74    /// SCV protocol: its tool approvals are relayed to the calling session
75    /// and its events become progress.
76    ScvProtocol,
77}
78
79/// How to start an agent's Agent Client Protocol (ACP) server: a long-running
80/// process speaking JSON-RPC 2.0 over stdio, one conversation per ACP session.
81#[derive(Debug, Clone, Copy, PartialEq, Eq)]
82pub struct AcpLaunch {
83    /// The ACP server executable: the agent itself or its official adapter.
84    pub command: &'static str,
85    /// Its arguments; a `{full}` entry is replaced by `full_args` for
86    /// `permissions = "full"` and dropped otherwise.
87    pub(crate) args: &'static [&'static str],
88    pub(crate) full_args: &'static [&'static str],
89    /// The ACP session mode selected for `permissions = "full"`, for agents
90    /// whose permission level is a session mode.
91    pub full_mode: Option<&'static str>,
92    /// Environment for the ACP server under `permissions = "full"`, for
93    /// settings the server reads only from its environment.
94    pub full_environment: &'static [(&'static str, &'static str)],
95    /// The server takes `model` and `effort` as session config options even
96    /// though the CLI run once per turn takes neither as an argument, as
97    /// DeepSeek Harness's does. Other agents take them over ACP where their
98    /// CLI takes them as arguments.
99    pub session_options: bool,
100}
101
102/// Expand `launch.args` for the configured permission level.
103pub fn acp_args(launch: &AcpLaunch, full: bool) -> Vec<String> {
104    let mut args = Vec::with_capacity(launch.args.len() + launch.full_args.len());
105    for arg in launch.args {
106        if *arg == "{full}" {
107            if full {
108                args.extend(launch.full_args.iter().map(|arg| (*arg).to_owned()));
109            }
110        } else {
111            args.push((*arg).to_owned());
112        }
113    }
114    args
115}
116
117/// How a CLI continues an earlier conversation. `{session}` in any argument
118/// is replaced by the conversation's vendor session ID.
119#[derive(Debug, Clone, Copy, PartialEq, Eq)]
120pub enum Resume {
121    /// Every call starts a fresh conversation.
122    Unsupported,
123    Supported {
124        /// Starts a conversation under an ID SCV chooses. Empty when the CLI
125        /// picks its own ID and reports it in its output (Codex).
126        start: &'static [&'static str],
127        /// Placed right after the fixed arguments when continuing: a
128        /// subcommand such as Codex's `exec resume`.
129        subcommand: &'static [&'static str],
130        /// Options that continue the conversation.
131        options: &'static [&'static str],
132        /// Placed immediately before the prompt when continuing, for a CLI
133        /// that takes the session ID as a positional argument.
134        positional: &'static [&'static str],
135    },
136}
137
138impl Resume {
139    pub(crate) fn is_supported(self) -> bool {
140        matches!(self, Self::Supported { .. })
141    }
142
143    /// Whether SCV chooses the vendor session ID when a conversation starts.
144    pub(crate) fn assigns_id(self) -> bool {
145        matches!(self, Self::Supported { start, .. } if !start.is_empty())
146    }
147}
148
149/// Where a CLI keeps conversation transcripts inside its agent home:
150/// files with `extension` anywhere below `dir`, named after their session ID.
151#[derive(Debug, Clone, Copy, PartialEq, Eq)]
152pub struct ConversationFiles {
153    pub(crate) dir: &'static str,
154    pub(crate) extension: &'static str,
155}
156
157/// How SCV condenses a CLI's own status output. The raw output names the
158/// account (an email) or part of a key, so it is never printed.
159#[derive(Debug, Clone, Copy, PartialEq, Eq)]
160pub enum StatusSummary {
161    /// `codex login status` text: "Logged in using an API key" or "ChatGPT".
162    CodexText,
163    /// The exit status alone.
164    ExitStatus,
165}
166
167/// How SCV signs an agent out.
168#[derive(Debug, Clone, Copy, PartialEq, Eq)]
169pub enum Logout {
170    Command(&'static [&'static str]),
171    /// SCV removes the credentials it can see in the CLI's own files.
172    Stored(KeyStore),
173}
174
175/// A CLI's native credential file, relative to the agent home.
176#[derive(Debug, Clone, Copy, PartialEq, Eq)]
177pub enum KeyStore {
178    /// Claude Code's API key file, plus the native credentials file checked
179    /// for a conflicting Claude subscription login.
180    ClaudeApiKey {
181        key: &'static str,
182        credentials: &'static str,
183    },
184    /// Claude Code's subscription credentials and config files.
185    ClaudeAccount {
186        credentials: &'static str,
187        config: &'static str,
188    },
189    /// Grok: sign-ins from `grok login` in `auth` (a JSON object of entries),
190    /// or an API key in the `config` profile of its default model.
191    Grok {
192        auth: &'static str,
193        config: &'static str,
194    },
195    /// DeepSeek Harness `.credentials.yaml`, holding `refs.<variable>`.
196    DshRefs {
197        path: &'static str,
198        variable: &'static str,
199    },
200    /// pi's agent directory: `auth.json`, plus the SCV-configured
201    /// OpenAI-compatible endpoint in `models.json` and `settings.json`.
202    Pi { dir: &'static str },
203    /// A nested SCV's own `config.toml`, holding the provider copied from the
204    /// user's SCV by `scv agents import scv`.
205    Scv { config: &'static str },
206}
207
208/// Which billing identity a Claude Code agent is pinned to.
209#[derive(Debug, Clone, Copy, PartialEq, Eq)]
210pub enum AgentAuth {
211    None,
212    ClaudeApiKey,
213    ClaudeSubscription,
214}
215
216#[derive(Debug, Clone, Copy)]
217pub struct AdapterDescriptor {
218    /// Short name: the `agent` tool's value for it and the home `agents/<name>`.
219    pub name: &'static str,
220    /// Agent family used for reviewer diversity and sibling exclusion.
221    pub family: &'static str,
222    /// Credential identity pinned by this descriptor, when any.
223    pub auth: AgentAuth,
224    /// Product name for messages and the tool description.
225    pub product: &'static str,
226    /// What this harness offers, as one factual clause for the tool
227    /// description, so the model can choose between agents.
228    pub(crate) offers: &'static str,
229    pub command: &'static str,
230    pub args: &'static [&'static str],
231    /// Placed immediately before the prompt, for CLIs whose prompt is a flag
232    /// value (`grok -p <prompt>`).
233    pub prompt_args: &'static [&'static str],
234    pub model_args: &'static [&'static str],
235    pub effort_args: &'static [&'static str],
236    /// Describes the `model` argument for the calling model.
237    pub model_hint: &'static str,
238    /// Variables pointing the CLI's state into the agent home, as paths
239    /// relative to it (`""` is the home itself).
240    pub home_environment: &'static [(&'static str, &'static str)],
241    /// Fixed variables for every delegated run.
242    pub fixed_environment: &'static [(&'static str, &'static str)],
243    /// Credential, endpoint, and state-location variables no delegated agent
244    /// inherits. A trailing `*` matches a prefix.
245    pub(crate) removed_environment: &'static [&'static str],
246    /// Added after `args` when `[agents.<name>] permissions = "full"`: the
247    /// CLI's own switches that turn off its approval prompts and sandbox and
248    /// enable web search where the CLI gates it. Empty when the CLI has no
249    /// permission system of its own.
250    pub full_permission_args: &'static [&'static str],
251    /// Variables set for `permissions = "full"`, for CLIs configured that way.
252    pub full_permission_environment: &'static [(&'static str, &'static str)],
253    /// Per-user install directories searched before `PATH`, relative to the
254    /// user's home, as a login shell orders them. A user service's `PATH`
255    /// omits them, so without this the daemon would miss or pick a different
256    /// install than the user's shell.
257    pub(crate) search_dirs: &'static [&'static str],
258    pub login: Login,
259    pub status: Status,
260    /// How a [`Status::Command`] result is summarized.
261    pub status_summary: StatusSummary,
262    pub logout: Logout,
263    /// What the CLI prints when SCV delegates to it.
264    pub output: OutputFormat,
265    /// How SCV continues a conversation with it, when it can.
266    pub resume: Resume,
267    /// Transcripts `scv agents gc` may remove; `None` when unknown.
268    pub conversation_files: Option<ConversationFiles>,
269    /// Files in the agent home that hold its sign-in or keys, relative to it,
270    /// which `scv config show` reports without reading.
271    pub credential_files: &'static [&'static str],
272    /// How SCV talks to the agent.
273    pub transport: Transport,
274    /// Its ACP server, when it has a verified one. With `[agents.<name>]
275    /// transport = "auto"` SCV prefers it over [`Transport::Process`] once the
276    /// command is installed.
277    pub acp: Option<AcpLaunch>,
278}
279
280/// Directories every adapter searches before `PATH`, relative to the user's home.
281const USER_BIN_DIRS: &[&str] = &[".local/bin"];
282
283/// Removed from every agent regardless of adapter: SCV's own selectors and
284/// cloud keys that name no single agent. Any variable ending in `_API_KEY`
285/// is removed as well.
286const COMMON_REMOVED_ENVIRONMENT: &[&str] = &[
287    "SCV_CONFIG",
288    "SCV_MODEL",
289    "SCV_PROVIDER",
290    "SCV_BASE_URL",
291    "SCV_API_KEY_ENV",
292    "GEMINI_API_KEY",
293    "GOOGLE_API_KEY",
294    "AZURE_OPENAI_API_KEY",
295    "AZURE_OPENAI_ENDPOINT",
296];
297
298const PI_STORE: KeyStore = KeyStore::Pi { dir: ".pi/agent" };
299const SCV_STORE: KeyStore = KeyStore::Scv {
300    config: "config.toml",
301};
302const DSH_STORE: KeyStore = KeyStore::DshRefs {
303    path: ".dsh/.credentials.yaml",
304    variable: "DEEPSEEK_API_KEY",
305};
306const CLAUDE_KEY_STORE: KeyStore = KeyStore::ClaudeApiKey {
307    key: ".anthropic-api-key",
308    credentials: ".claude/.credentials.json",
309};
310const CLAUDE_ACCOUNT_STORE: KeyStore = KeyStore::ClaudeAccount {
311    credentials: ".claude/.credentials.json",
312    config: ".claude.json",
313};
314
315const CLAUDE_BASE: AdapterDescriptor = AdapterDescriptor {
316    name: "claude",
317    family: "claude",
318    auth: AgentAuth::None,
319    product: "Claude Code",
320    offers: "Anthropic's coding agent; it reads, edits, and runs code in a project and can search and fetch the web",
321    command: "claude",
322    args: &["-p"],
323    prompt_args: &[],
324    model_args: &["--model", "{model}"],
325    effort_args: &["--effort", "{effort}"],
326    model_hint: "Claude model alias or ID, such as sonnet or opus.",
327    home_environment: &[],
328    fixed_environment: &[],
329    removed_environment: &[
330        "ANTHROPIC_API_KEY",
331        "ANTHROPIC_BASE_URL",
332        "ANTHROPIC_AUTH_TOKEN",
333        "CLAUDE_CODE_OAUTH_TOKEN",
334        "CLAUDE_CONFIG_DIR",
335    ],
336    full_permission_args: &["--permission-mode", "bypassPermissions"],
337    full_permission_environment: &[],
338    search_dirs: &[],
339    login: Login::Command(&[]),
340    status: Status::Stored(CLAUDE_KEY_STORE),
341    status_summary: StatusSummary::ExitStatus,
342    logout: Logout::Command(&[]),
343    output: OutputFormat::ClaudeStreamJson,
344    resume: Resume::Supported {
345        start: &["--session-id", "{session}"],
346        subcommand: &[],
347        options: &["--resume", "{session}"],
348        positional: &[],
349    },
350    conversation_files: Some(ConversationFiles {
351        dir: ".claude/projects",
352        extension: "jsonl",
353    }),
354    credential_files: &[".anthropic-api-key", ".claude/.credentials.json"],
355    transport: Transport::Process,
356    acp: Some(AcpLaunch {
357        command: "claude-agent-acp",
358        args: &[],
359        full_args: &[],
360        full_mode: Some("bypassPermissions"),
361        full_environment: &[],
362        session_options: false,
363    }),
364};
365
366pub const ADAPTERS: &[AdapterDescriptor] = &[
367    AdapterDescriptor {
368        name: "claude",
369        family: "claude",
370        auth: AgentAuth::ClaudeApiKey,
371        product: "Claude Code (API key)",
372        offers: "Anthropic's coding agent; it reads, edits, and runs code in a project and can search and fetch the web; billed per token to the Anthropic API key SCV holds for it",
373        login: Login::ApiKey(CLAUDE_KEY_STORE),
374        status: Status::Stored(CLAUDE_KEY_STORE),
375        logout: Logout::Stored(CLAUDE_KEY_STORE),
376        acp: Some(AcpLaunch {
377            command: "claude-agent-acp",
378            args: &["--hide-claude-auth"],
379            full_args: &[],
380            full_mode: Some("bypassPermissions"),
381            full_environment: &[],
382            session_options: false,
383        }),
384        ..CLAUDE_BASE
385    },
386    AdapterDescriptor {
387        name: "claude-ai",
388        family: "claude",
389        auth: AgentAuth::ClaudeSubscription,
390        product: "Claude Code (Claude subscription)",
391        offers: "Anthropic's coding agent; it reads, edits, and runs code in a project and can search and fetch the web; runs on the owner's Claude subscription",
392        login: Login::Command(&["auth", "login", "--claudeai"]),
393        status: Status::Stored(CLAUDE_ACCOUNT_STORE),
394        logout: Logout::Command(&["auth", "logout"]),
395        credential_files: &[".claude/.credentials.json"],
396        acp: Some(AcpLaunch {
397            command: "claude-agent-acp",
398            args: &[],
399            full_args: &[],
400            full_mode: Some("bypassPermissions"),
401            full_environment: &[],
402            session_options: false,
403        }),
404        ..CLAUDE_BASE
405    },
406    AdapterDescriptor {
407        name: "codex",
408        family: "codex",
409        auth: AgentAuth::None,
410        product: "Codex",
411        offers: "OpenAI's coding agent; it reads, edits, and runs code in a project, with live web search under full permissions",
412        command: "codex",
413        args: &["exec"],
414        prompt_args: &[],
415        model_args: &["-m", "{model}"],
416        effort_args: &["-c", "model_reasoning_effort=\"{effort}\""],
417        model_hint: "OpenAI model ID from the Codex configuration; not a Claude alias.",
418        home_environment: &[("CODEX_HOME", "")],
419        fixed_environment: &[],
420        removed_environment: &[
421            "OPENAI_API_KEY",
422            "OPENAI_BASE_URL",
423            "OPENAI_ORG_ID",
424            "OPENAI_PROJECT_ID",
425            "CODEX_API_KEY",
426            "CODEX_BASE_URL",
427            "CODEX_CONFIG",
428        ],
429        // `codex exec` has no `--search`; `web_search = "live"` is its config form.
430        full_permission_args: &[
431            "--dangerously-bypass-approvals-and-sandbox",
432            "-c",
433            "web_search=\"live\"",
434        ],
435        full_permission_environment: &[],
436        search_dirs: &[],
437        login: Login::Command(&["login"]),
438        status: Status::Command(&["login", "status"]),
439        status_summary: StatusSummary::CodexText,
440        logout: Logout::Command(&["logout"]),
441        output: OutputFormat::CodexJsonl,
442        // The thread ID arrives in `thread.started`; `exec resume` takes it
443        // as a positional argument before the prompt.
444        resume: Resume::Supported {
445            start: &[],
446            subcommand: &["resume"],
447            options: &[],
448            positional: &["{session}"],
449        },
450        conversation_files: Some(ConversationFiles {
451            dir: "sessions",
452            extension: "jsonl",
453        }),
454        credential_files: &["auth.json"],
455        transport: Transport::Process,
456        // The official adapter from the ACP organisation (npm
457        // @agentclientprotocol/codex-acp). It reads `$CODEX_HOME/config.toml`
458        // and takes no `-c` overrides; `CODEX_CONFIG` is its JSON form of
459        // them, merged into every session, so full permissions keep live web
460        // search without rewriting the imported config.
461        acp: Some(AcpLaunch {
462            command: "codex-acp",
463            args: &[],
464            full_args: &[],
465            full_mode: Some("agent-full-access"),
466            full_environment: &[("CODEX_CONFIG", r#"{"web_search":"live"}"#)],
467            session_options: false,
468        }),
469    },
470    AdapterDescriptor {
471        name: "grok",
472        family: "grok",
473        auth: AgentAuth::None,
474        product: "Grok Build",
475        offers: "xAI's coding agent; it reads, edits, and runs code in a project and has live web and X search. Call it when another agent declined or refused a request, including a safety or guardrail refusal",
476        command: "grok",
477        args: &[],
478        prompt_args: &["-p"],
479        model_args: &["-m", "{model}"],
480        effort_args: &["--reasoning-effort", "{effort}"],
481        model_hint: "xAI Grok model ID, such as grok-4.7.",
482        home_environment: &[("GROK_HOME", ".grok")],
483        fixed_environment: &[("GROK_DISABLE_AUTOUPDATER", "1")],
484        removed_environment: &["GROK_*", "XAI_API_KEY"],
485        // Web search is on unless `--disable-web-search` is passed.
486        full_permission_args: &["--always-approve"],
487        full_permission_environment: &[],
488        search_dirs: &[".grok/bin"],
489        login: Login::Command(&["login"]),
490        status: Status::Stored(KeyStore::Grok {
491            auth: ".grok/auth.json",
492            config: ".grok/config.toml",
493        }),
494        status_summary: StatusSummary::ExitStatus,
495        logout: Logout::Command(&["logout"]),
496        // `--output-format json` exists but its success shape is unverified here.
497        output: OutputFormat::Text,
498        // Grok documents `--session-id` and `--resume`, but they cannot be
499        // verified while it is signed out here.
500        resume: Resume::Unsupported,
501        conversation_files: None,
502        credential_files: &[".grok/auth.json", ".grok/config.toml"],
503        transport: Transport::Process,
504        // Native: `grok agent [options] stdio`; options precede the mode.
505        acp: Some(AcpLaunch {
506            command: "grok",
507            args: &["agent", "{full}", "stdio"],
508            full_args: &["--always-approve"],
509            full_mode: None,
510            full_environment: &[],
511            session_options: false,
512        }),
513    },
514    AdapterDescriptor {
515        name: "dsh",
516        family: "dsh",
517        auth: AgentAuth::None,
518        product: "DeepSeek Harness",
519        offers: "a coding agent on DeepSeek models; it reads, edits, and runs code in a project",
520        command: "dsh",
521        args: &["--profile", "headless"],
522        prompt_args: &[],
523        model_args: &[],
524        effort_args: &[],
525        model_hint: "provider/model as its ACP server lists them, such as deepseek-official/deepseek-v4-pro.",
526        home_environment: &[("DSH_HOME", ".dsh")],
527        fixed_environment: &[],
528        removed_environment: &["DSH_*", "DEEPSEEK_API_KEY", "DEEPSEEK_BASE_URL"],
529        // Bypasses its file sandbox and sets its approval policy to `never`.
530        full_permission_args: &[],
531        full_permission_environment: &[("DSH_PERMISSION_MODE", "danger-full-access")],
532        search_dirs: &[],
533        login: Login::ApiKey(DSH_STORE),
534        status: Status::Stored(DSH_STORE),
535        status_summary: StatusSummary::ExitStatus,
536        logout: Logout::Stored(DSH_STORE),
537        output: OutputFormat::Text,
538        // Only its interactive profile documents `--resume`.
539        resume: Resume::Unsupported,
540        conversation_files: None,
541        credential_files: &[".dsh/.credentials.yaml"],
542        transport: Transport::Process,
543        // Native: the shipped `acp` profile. `permissions = "full"` is the
544        // `DSH_PERMISSION_MODE` variable above. Its sessions offer `model`
545        // (every configured provider's models, as `["provider","model"]`)
546        // and `reasoning_effort`, which the headless profile cannot take.
547        acp: Some(AcpLaunch {
548            command: "dsh",
549            args: &["--profile", "acp"],
550            full_args: &[],
551            full_mode: None,
552            full_environment: &[],
553            session_options: true,
554        }),
555    },
556    AdapterDescriptor {
557        name: "pi",
558        family: "pi",
559        auth: AgentAuth::None,
560        product: "pi",
561        offers: "a minimal coding agent (read, write, edit, bash) that can run on SCV's own model endpoint; it has no web search",
562        command: "pi",
563        args: &["-p"],
564        prompt_args: &[],
565        model_args: &["--model", "{model}"],
566        effort_args: &["--thinking", "{effort}"],
567        model_hint: "pi model pattern or provider/id; the SCV-configured endpoint is provider scv.",
568        home_environment: &[("PI_CODING_AGENT_DIR", ".pi/agent")],
569        fixed_environment: &[],
570        removed_environment: &["PI_*"],
571        // pi has no approval prompts or sandbox, and no built-in web search.
572        full_permission_args: &[],
573        full_permission_environment: &[],
574        search_dirs: &[],
575        login: Login::Interactive {
576            args: &[],
577            hint: "run /login and choose a provider, then /quit",
578        },
579        status: Status::Stored(PI_STORE),
580        status_summary: StatusSummary::ExitStatus,
581        logout: Logout::Stored(PI_STORE),
582        output: OutputFormat::PiJson,
583        // `--session-id` uses the exact project session, creating it if missing.
584        resume: Resume::Supported {
585            start: &["--session-id", "{session}"],
586            subcommand: &[],
587            options: &["--session-id", "{session}"],
588            positional: &[],
589        },
590        conversation_files: Some(ConversationFiles {
591            dir: ".pi/agent/sessions",
592            extension: "jsonl",
593        }),
594        credential_files: &[".pi/agent/auth.json", ".pi/agent/models.json"],
595        transport: Transport::Process,
596        // Only a community ACP adapter exists.
597        acp: None,
598    },
599    AdapterDescriptor {
600        name: "scv",
601        family: "scv",
602        auth: AgentAuth::None,
603        product: "SCV",
604        offers: "a nested SCV session with its own context and tools; suited to a self-contained sub-task kept out of this conversation's context, or work in another project",
605        command: "scv",
606        args: &["server", "--stdio"],
607        prompt_args: &[],
608        // A model is chosen per conversation through `session.start`.
609        model_args: &[],
610        effort_args: &[],
611        model_hint: "Model ID for the nested SCV's provider; applies to a new conversation only.",
612        // `SCV_HOME` already points at the agent home, where the nested
613        // SCV keeps its config, skills, and its own delegations.
614        home_environment: &[],
615        fixed_environment: &[],
616        removed_environment: &[],
617        // Its tool approvals are relayed to the calling session instead.
618        full_permission_args: &[],
619        full_permission_environment: &[],
620        // Where `cargo install` puts `scv`; a user service's PATH omits it.
621        search_dirs: &[".cargo/bin"],
622        login: Login::Import,
623        status: Status::Stored(SCV_STORE),
624        status_summary: StatusSummary::ExitStatus,
625        logout: Logout::Stored(SCV_STORE),
626        output: OutputFormat::Text,
627        resume: Resume::Unsupported,
628        conversation_files: None,
629        credential_files: &["config.toml"],
630        transport: Transport::ScvProtocol,
631        acp: None,
632    },
633];
634
635/// The descriptor for `name`, such as `"codex"`.
636pub fn adapter(name: &str) -> Option<&'static AdapterDescriptor> {
637    ADAPTERS.iter().find(|adapter| adapter.name == name)
638}
639
640/// Whether a delegated agent must not inherit `variable`: SCV's selectors,
641/// any `*_API_KEY`, and every adapter's credential and state variables, so
642/// no agent sees another's credentials either.
643pub fn is_removed_agent_variable(variable: &OsStr) -> bool {
644    let Some(variable) = variable.to_str() else {
645        return false;
646    };
647    variable.ends_with("_API_KEY")
648        || COMMON_REMOVED_ENVIRONMENT.contains(&variable)
649        || ADAPTERS
650            .iter()
651            .flat_map(|adapter| adapter.removed_environment)
652            .any(|rule| match rule.strip_suffix('*') {
653                Some(prefix) => variable.starts_with(prefix),
654                None => variable == *rule,
655            })
656}
657
658/// One line describing a CLI's own status result without echoing it: the raw
659/// output names the signed-in account or part of a key.
660pub fn summarize_status(summary: StatusSummary, succeeded: bool, output: &str) -> String {
661    let signed_out = "not signed in".to_owned();
662    match summary {
663        StatusSummary::CodexText => {
664            let lower = output.to_ascii_lowercase();
665            if !succeeded || lower.contains("not logged in") {
666                signed_out
667            } else if lower.contains("api key") {
668                "signed in (API key)".into()
669            } else if lower.contains("chatgpt") {
670                "signed in (ChatGPT account)".into()
671            } else {
672                "signed in".into()
673            }
674        }
675        StatusSummary::ExitStatus => {
676            if succeeded {
677                "signed in".into()
678            } else {
679                signed_out
680            }
681        }
682    }
683}
684
685/// Resolve `command` in the per-user `search_dirs`, then on `PATH`. A command
686/// containing a path separator is used as given.
687pub fn resolve_agent_executable(command: &str, search_dirs: &[PathBuf]) -> Option<PathBuf> {
688    if command.contains('/') {
689        let path = Path::new(command);
690        return path.is_file().then(|| path.to_path_buf());
691    }
692    std::env::join_paths(search_dirs)
693        .ok()
694        .and_then(|dirs| {
695            let cwd = std::env::current_dir().unwrap_or_else(|_| PathBuf::from("/"));
696            which::which_in(command, Some(dirs), cwd).ok()
697        })
698        .or_else(|| which::which(command).ok())
699}
700
701/// Absolute per-user search directories for `adapter` under `home`.
702pub fn adapter_search_dirs(adapter: &AdapterDescriptor, home: &Path) -> Vec<PathBuf> {
703    adapter
704        .search_dirs
705        .iter()
706        .chain(USER_BIN_DIRS)
707        .map(|dir| home.join(dir))
708        .collect()
709}
710
711#[cfg(test)]
712mod tests;
scv_tools/delegate/adapters.rs

scv_tools/delegate/
adapters.rs
