@adhd/agent-mcp 2.0.0 → 2.1.0

package/src/providers/anthropic.js

@@ -1,260 +0,0 @@
-import Anthropic from "@anthropic-ai/sdk";
-import pRetry from "p-retry";
-import { generateId } from "../utils/ids.js";
-import { nowIso } from "../utils/timestamps.js";
-import { resolveToolCallName } from "../clients/tool-naming.js";
-import { ToolError } from "../validation/errors.js";
-import { logger } from "../logger.js";
-import { config } from "../config.js";
-// ─── Model max-output token table ────────────────────────────────────────────
-// Maps model-name prefix → documented max output tokens (standard sync API,
-// no beta headers). Checked longest-prefix-first so "claude-opus-4-5" (64k)
-// wins over "claude-opus-4" (128k). Source: docs.anthropic.com/models/overview.
-// config.server.defaultMaxTokens is used as the fallback for unknown / future models.
-const MODEL_MAX_TOKENS = [
-    // Claude 5 (GA 2026-06)
-    ["claude-fable-5", 128_000],
-    ["claude-mythos-5", 128_000],
-    // Claude 4 — Opus (8/7/6 = 128k; 5 = 64k; 1/0 = 32k)
-    ["claude-opus-4-8", 128_000],
-    ["claude-opus-4-7", 128_000],
-    ["claude-opus-4-6", 128_000],
-    ["claude-opus-4-5", 64_000],
-    ["claude-opus-4-1", 32_000],
-    ["claude-opus-4-0", 32_000],
-    ["claude-opus-4", 128_000], // catch future claude-opus-4-N ≥ 4-6 tier
-    // Claude 4 — Sonnet (all known variants: 64k)
-    ["claude-sonnet-4", 64_000],
-    // Claude 4 — Haiku (all known variants: 64k)
-    ["claude-haiku-4", 64_000],
-    // Claude 3.5 family
-    ["claude-3-5-sonnet", 8_192],
-    ["claude-3-5-haiku", 8_192],
-    // Claude 3 family
-    ["claude-3-opus", 4_096],
-    ["claude-3-sonnet", 4_096],
-    ["claude-3-haiku", 4_096],
-];
-function defaultMaxTokens(model) {
-    for (const [prefix, maxTokens] of MODEL_MAX_TOKENS) {
-        if (model.startsWith(prefix))
-            return maxTokens;
-    }
-    // Unknown / future model — fall back to the global default
-    return config.server.defaultMaxTokens;
-}
-function buildAnthropicClient(secret, timeoutMs) {
-    if (secret.startsWith("sk-ant-api")) {
-        return {
-            client: new Anthropic({ apiKey: secret, timeout: timeoutMs }),
-            useOauthIdentity: false,
-        };
-    }
-    // OAuth / subscription token — requires the oauth-2025-04-20 beta header and
-    // the Claude Code identity block in the system prompt (see below).
-    const isOauth = secret.startsWith("sk-ant-oat");
-    return {
-        client: new Anthropic({
-            authToken: secret,
-            timeout: timeoutMs,
-            ...(isOauth ? { defaultHeaders: { "anthropic-beta": "oauth-2025-04-20" } } : {}),
-        }),
-        useOauthIdentity: isOauth,
-    };
-}
-function toAnthropicTools(tools) {
-    if (!tools)
-        return undefined;
-    return tools.map(tool => ({
-        name: tool.name,
-        description: tool.description || "",
-        input_schema: (tool.inputSchema || {
-            type: "object",
-            properties: {},
-        }),
-    }));
-}
-function toAnthropicMessages(messages) {
-    // Filter out system messages — they're passed separately in the `system` field
-    const nonSystem = messages.filter(m => m.role !== "system");
-    return nonSystem.map((message) => {
-        if (message.role === "tool") {
-            const toolResult = message.toolResults?.[0];
-            if (!toolResult) {
-                throw new Error("Tool message missing tool result");
-            }
-            return {
-                role: "user",
-                content: [
-                    {
-                        type: "tool_result",
-                        tool_use_id: toolResult.toolCallId,
-                        content: JSON.stringify(toolResult.result),
-                        is_error: toolResult.isError,
-                    },
-                ],
-            };
-        }
-        if (message.role === "assistant" && message.toolCalls?.length) {
-            const contentBlocks = [];
-            if (message.content) {
-                contentBlocks.push({ type: "text", text: message.content });
-            }
-            for (const tc of message.toolCalls) {
-                contentBlocks.push({
-                    type: "tool_use",
-                    id: tc.id,
-                    name: tc.tool,
-                    input: tc.arguments,
-                });
-            }
-            return { role: "assistant", content: contentBlocks };
-        }
-        if (message.role === "assistant") {
-            return { role: "assistant", content: message.content || "" };
-        }
-        if (message.role === "user") {
-            return { role: "user", content: message.content || "" };
-        }
-        // Should never reach here after filtering system messages
-        throw new Error(`Unsupported message role for Anthropic: ${message.role}`);
-    });
-}
-// Subscription OAuth tokens (sk-ant-oat…) only work against the Messages API when
-// BOTH of these hold (verified by direct-API bisect — see chat()):
-//   1. the request carries the `anthropic-beta: oauth-2025-04-20` header, and
-//   2. THIS identity is sent as the first `system` block in ARRAY form — not
-//      concatenated with the agent's system prompt into a single string.
-// Bisect: identity-only string → 200; identity+prompt joined into one string → 429;
-// [identity block, prompt block] array → 200. Either omission yields a *misleading*
-// `429 rate_limit_error` (no rate-limit headers), which is why OAuth was silently
-// broken for any agent that had its own system prompt. Plain API keys need neither.
-const CLAUDE_CODE_IDENTITY = "You are Claude Code, Anthropic's official CLI for Claude.";
-export class AnthropicProvider {
-    client;
-    providerConfig;
-    /** True when the resolved secret is a sk-ant-oat… OAuth token. */
-    useOauthIdentity;
-    constructor(providerConfig) {
-        this.providerConfig = providerConfig;
-        // Resolve the single unified secret via config (§3 / §3c)
-        const resolved = config.getProviderConfig({
-            provider: "anthropic",
-            secret: providerConfig.env?.secret,
-            model: providerConfig.env?.model,
-            inlineModel: providerConfig.model,
-        });
-        if (!resolved.secret) {
-            // No secret found and we're not a localhost server (anthropic has no localhost exemption)
-            throw new ToolError("PROVIDER_AUTH_ERROR", `Anthropic requires a credential. ` +
-                `Set ADHD_AGENT_ANTHROPIC_SECRET in your ~/.adhd/.env ` +
-                `(run \`claude setup-token\` to obtain an OAuth access token, ` +
-                `or use your console.anthropic.com API key).`);
-        }
-        const { client, useOauthIdentity } = buildAnthropicClient(resolved.secret, providerConfig.timeoutMs);
-        this.client = client;
-        this.useOauthIdentity = useOauthIdentity;
-    }
-    async chat(request) {
-        const retryConfig = this.providerConfig.retryConfig;
-        const systemMessages = request.messages.filter(m => m.role === "system");
-        const systemPrompt = systemMessages.map(m => m.content || "").join("\n") || undefined;
-        const run = async () => {
-            // sk-ant-oat OAuth tokens require the Claude Code identity as a DISTINCT
-            // first system block (array form) — NOT concatenated into one string.
-            // Anthropic's OAuth gate rejects a single system string that isn't exactly
-            // the identity with a misleading 429 rate_limit_error, so any agent that
-            // has its own system prompt fails unless the identity is its own block.
-            // (Proven by bisect: array form → 200; identity+prompt joined string → 429.)
-            // API-key mode keeps the plain string.
-            const effectiveSystem = this.useOauthIdentity
-                ? [
-                    { type: "text", text: CLAUDE_CODE_IDENTITY },
-                    ...(systemPrompt
-                        ? [{ type: "text", text: systemPrompt }]
-                        : []),
-                ]
-                : systemPrompt;
-            const effectiveModel = this.providerConfig.model ?? "";
-            if (!effectiveModel) {
-                logger.warn("AnthropicProvider: no model configured; API will likely reject");
-            }
-            // Use streaming to avoid the SDK's synchronous "Streaming is required
-            // for operations that may take longer than 10 minutes" throw that fires
-            // when max_tokens is large (e.g. 64k on haiku-4-5) with messages.create().
-            const stream = this.client.messages.stream({
-                model: effectiveModel,
-                system: effectiveSystem,
-                temperature: this.providerConfig.temperature,
-                max_tokens: this.providerConfig.maxTokens ?? defaultMaxTokens(effectiveModel),
-                messages: toAnthropicMessages(request.messages),
-                tools: toAnthropicTools(request.tools),
-            }, { signal: request.signal });
-            const response = await stream.finalMessage();
-            const toolCalls = [];
-            const contentParts = [];
-            for (const block of response.content) {
-                if (block.type === "text") {
-                    contentParts.push(block.text);
-                }
-                if (block.type === "tool_use") {
-                    // Resolve qualified or bare tool names against the advertised set
-                    // (a bare `agent` → `agent-mcp__agent` when unambiguous; DEBT-004).
-                    const { server, tool } = resolveToolCallName(block.name, (request.tools ?? []).map((t) => t.name));
-                    toolCalls.push({
-                        id: block.id,
-                        server,
-                        tool,
-                        arguments: block.input,
-                    });
-                }
-            }
-            const message = {
-                id: generateId(),
-                sessionId: "",
-                role: "assistant",
-                content: contentParts.length > 0 ? contentParts.join("\n") : undefined,
-                toolCalls: toolCalls.length > 0 ? toolCalls : undefined,
-                createdAt: nowIso(),
-            };
-            const sdkUsage = response.usage;
-            const STOP_REASON = {
-                end_turn: "stop", max_tokens: "length", tool_use: "tool_calls",
-            };
-            const normalisedStopReason = STOP_REASON[response.stop_reason ?? ""] ?? "unknown";
-            return {
-                message,
-                stopReason: toolCalls.length > 0 ? "tool_calls" : "completed",
-                usage: {
-                    inputTokens: sdkUsage.input_tokens,
-                    outputTokens: sdkUsage.output_tokens,
-                    stopReason: normalisedStopReason,
-                    maxTokens: this.providerConfig.maxTokens ?? defaultMaxTokens(effectiveModel),
-                    cacheReadTokens: sdkUsage.cache_read_input_tokens ?? undefined,
-                    cacheCreationTokens: sdkUsage.cache_creation_input_tokens ?? undefined,
-                },
-            };
-        };
-        if (retryConfig) {
-            return pRetry(run, {
-                retries: retryConfig.retries,
-                minTimeout: retryConfig.minTimeout,
-                maxTimeout: retryConfig.maxTimeout,
-                factor: retryConfig.factor,
-                onFailedAttempt: error => {
-                    if (request.signal?.aborted) {
-                        throw error; // don't retry on cancellation
-                    }
-                    // Don't retry auth failures — credentials won't change between attempts
-                    if ("status" in error && error.status === 401) {
-                        throw new ToolError("PROVIDER_AUTH_ERROR", `Anthropic authentication failed. ` +
-                            `Check ADHD_AGENT_ANTHROPIC_SECRET in your ~/.adhd/.env ` +
-                            `(run \`claude setup-token\` to obtain a fresh OAuth access token).`);
-                    }
-                },
-            });
-        }
-        return run();
-    }
-}
-//# sourceMappingURL=anthropic.js.map

package/src/providers/anthropic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/providers/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAE1C,OAAO,MAAM,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGhE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAStC,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,sFAAsF;AACtF,MAAM,gBAAgB,GAA0C;IAC5D,wBAAwB;IACxB,CAAC,gBAAgB,EAAW,OAAO,CAAC;IACpC,CAAC,iBAAiB,EAAU,OAAO,CAAC;IACpC,qDAAqD;IACrD,CAAC,iBAAiB,EAAU,OAAO,CAAC;IACpC,CAAC,iBAAiB,EAAU,OAAO,CAAC;IACpC,CAAC,iBAAiB,EAAU,OAAO,CAAC;IACpC,CAAC,iBAAiB,EAAW,MAAM,CAAC;IACpC,CAAC,iBAAiB,EAAW,MAAM,CAAC;IACpC,CAAC,iBAAiB,EAAW,MAAM,CAAC;IACpC,CAAC,eAAe,EAAY,OAAO,CAAC,EAAE,0CAA0C;IAChF,8CAA8C;IAC9C,CAAC,iBAAiB,EAAW,MAAM,CAAC;IACpC,6CAA6C;IAC7C,CAAC,gBAAgB,EAAY,MAAM,CAAC;IACpC,oBAAoB;IACpB,CAAC,mBAAmB,EAAU,KAAK,CAAC;IACpC,CAAC,kBAAkB,EAAW,KAAK,CAAC;IACpC,kBAAkB;IAClB,CAAC,eAAe,EAAc,KAAK,CAAC;IACpC,CAAC,iBAAiB,EAAY,KAAK,CAAC;IACpC,CAAC,gBAAgB,EAAa,KAAK,CAAC;CACvC,CAAC;AAEF,SAAS,gBAAgB,CAAC,KAAa;IACnC,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;IACnD,CAAC;IACD,2DAA2D;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAC1C,CAAC;AAaD,SAAS,oBAAoB,CACzB,MAAc,EACd,SAA6B;IAE7B,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,OAAO;YACH,MAAM,EAAE,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC7D,gBAAgB,EAAE,KAAK;SAC1B,CAAC;IACN,CAAC;IACD,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAChD,OAAO;QACH,MAAM,EAAE,IAAI,SAAS,CAAC;YAClB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,SAAS;YAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,gBAAgB,EAAE,OAAO;KAC5B,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAwB;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,YAAY,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI;YAC/B,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACjB,CAAyB;KAC7B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAmB;IAC5C,+EAA+E;IAC/E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE5D,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAgB,EAAE;QAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACxD,CAAC;YACD,OAAO;gBACH,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACL;wBACI,IAAI,EAAE,aAAa;wBACnB,WAAW,EAAE,UAAU,CAAC,UAAU;wBAClC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;wBAC1C,QAAQ,EAAE,UAAU,CAAC,OAAO;qBAC/B;iBACJ;aACJ,CAAC;QACN,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAwB,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACjC,aAAa,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,EAAE,CAAC,EAAE;oBACT,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,KAAK,EAAE,EAAE,CAAC,SAAoC;iBACjD,CAAC,CAAC;YACP,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC5D,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACP,CAAC;AAED,kFAAkF;AAClF,mEAAmE;AACnE,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,oFAAoF;AACpF,oFAAoF;AACpF,kFAAkF;AAClF,oFAAoF;AACpF,MAAM,oBAAoB,GAAG,2DAA2D,CAAC;AAEzF,MAAM,OAAO,iBAAiB;IACT,MAAM,CAAY;IAClB,cAAc,CAAiD;IAChF,kEAAkE;IACjD,gBAAgB,CAAU;IAE3C,YAAY,cAA8D;QACtE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QAErC,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;YACtC,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAO,cAAc,CAAC,GAAG,EAAE,MAAM;YACvC,KAAK,EAAQ,cAAc,CAAC,GAAG,EAAE,KAAK;YACtC,WAAW,EAAE,cAAc,CAAC,KAAK;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnB,0FAA0F;YAC1F,MAAM,IAAI,SAAS,CACf,qBAAqB,EACrB,mCAAmC;gBACnC,uDAAuD;gBACvD,+DAA+D;gBAC/D,6CAA6C,CAChD,CAAC;QACN,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,oBAAoB,CACrD,QAAQ,CAAC,MAAM,EACf,cAAc,CAAC,SAAS,CAC3B,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA4B;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;QAEpD,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QAEtF,MAAM,GAAG,GAAG,KAAK,IAAmC,EAAE;YAClD,yEAAyE;YACzE,sEAAsE;YACtE,2EAA2E;YAC3E,yEAAyE;YACzE,wEAAwE;YACxE,6EAA6E;YAC7E,uCAAuC;YACvC,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB;gBACzC,CAAC,CAAC;oBACI,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,EAAE;oBACrD,GAAG,CAAC,YAAY;wBACZ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;wBACjD,CAAC,CAAC,EAAE,CAAC;iBACZ;gBACH,CAAC,CAAC,YAAY,CAAC;YAEnB,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;YAClF,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,2EAA2E;YAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CACtC;gBACI,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW;gBAC5C,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,gBAAgB,CAAC,cAAc,CAAC;gBAC7E,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC/C,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;aACzC,EACD,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC7B,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YAE7C,MAAM,SAAS,GAAe,EAAE,CAAC;YACjC,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACxB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC5B,kEAAkE;oBAClE,oEAAoE;oBACpE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CACxC,KAAK,CAAC,IAAI,EACV,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC3C,CAAC;oBAEF,SAAS,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,MAAM;wBACN,IAAI;wBACJ,SAAS,EAAE,KAAK,CAAC,KAAK;qBACzB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,MAAM,OAAO,GAAY;gBACrB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,EAAE;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACtE,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACvD,SAAS,EAAE,MAAM,EAAE;aACtB,CAAC;YAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;YAChC,MAAM,WAAW,GAA2B;gBACxC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY;aACjE,CAAC;YACF,MAAM,oBAAoB,GAAW,WAAW,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;YAC1F,OAAO;gBACH,OAAO;gBACP,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;gBAC7D,KAAK,EAAE;oBACH,WAAW,EAAE,QAAQ,CAAC,YAAY;oBAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;oBACpC,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,gBAAgB,CAAC,cAAc,CAAC;oBAC5E,eAAe,EAAE,QAAQ,CAAC,uBAAuB,IAAI,SAAS;oBAC9D,mBAAmB,EAAE,QAAQ,CAAC,2BAA2B,IAAI,SAAS;iBACzE;aACJ,CAAC;QACN,CAAC,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,GAAG,EAAE;gBACf,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,eAAe,EAAE,KAAK,CAAC,EAAE;oBACrB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBAC1B,MAAM,KAAK,CAAC,CAAC,8BAA8B;oBAC/C,CAAC;oBACD,wEAAwE;oBACxE,IAAI,QAAQ,IAAI,KAAK,IAAK,KAA6B,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACrE,MAAM,IAAI,SAAS,CACf,qBAAqB,EACrB,mCAAmC;4BACnC,yDAAyD;4BACzD,oEAAoE,CACvE,CAAC;oBACN,CAAC;gBACL,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QAED,OAAO,GAAG,EAAE,CAAC;IACjB,CAAC;CACJ"}

package/src/providers/claudecli.d.ts

@@ -1,153 +0,0 @@
-/**
- * ClaudeCliProvider — drives the local `claude` CLI (Claude Code) as an LLM
- * backend using a persistent subprocess with bidirectional stream-json I/O.
- *
- * Auth: uses whatever credentials Claude Code already has configured
- * (subscription, API key, OAuth — whatever `claude auth status` shows).
- *
- * Flags applied on every invocation:
- *   --system-prompt           Replace Claude Code's default prompt with the agent's prompt
- *   --mcp-config <tempfile>   Writes the agent's mcpServers to a temp JSON file; path passed here
- *   --strict-mcp-config       Ignore all other MCP configs; only load what we pass
- *   --input-format stream-json   Accept NDJSON messages on stdin
- *   --output-format stream-json  Emit NDJSON events on stdout
- *   --verbose                 Emit full event stream including tool calls and results
- *
- *   --disallowedTools <name> (×N) — one pair per built-in not in allowedBuiltinTools.
- *       All Claude Code built-ins are blocked by default; only tools explicitly listed
- *       in the agent definition's allowedBuiltinTools field are permitted. MCP tools
- *       (from --mcp-config) are unaffected.
- *
- * ⚠️  --tools "" is NOT used — it disables MCP tools as well as built-ins.
- * ⚠️  --bare is NOT used — it blocks --mcp-config from loading entirely.
- *
- * Agent-spec mode (config.systemPromptIsAgentSpec === true):
- *   The agent's systemPrompt is treated as a complete Claude Code agent markdown
- *   file (YAML frontmatter + body). Instead of --system-prompt + --disallowedTools,
- *   the provider writes it to an isolated temp project dir and passes
- *     --add-dir <tmpdir> --setting-sources project --agent <frontmatterName>
- *   so Claude *internally parses the frontmatter header* — including the `tools:`
- *   field — which then governs tool access and TAKES PRECEDENCE over the built-in
- *   disallow enumeration. `--agent` matches the frontmatter `name:`, not the
- *   filename; cwd is preserved so file/Bash tools keep their working root. Omit
- *   `tools:` in the header to inherit all tools; list `mcp__<server>__<tool>`
- *   entries to expose specific MCP tools. allowedBuiltinTools is ignored in this mode.
- *
- * Tool loop: when Claude Code emits a tool_use block, we execute it via the
- * request.executeTool callback (wired by the orchestrator to the McpClientRegistry)
- * and write a tool_result message back to stdin. This continues until Claude
- * emits a "result" event, at which point chat() resolves with stopReason "completed".
- *
- * ⚠️  KNOWN ISSUE: Claude Code may crash with
- *     "Z is not an Object. (evaluating '"tool_use_id"in Z')"
- *     when a tool_result is written to stdin. This is a suspected Claude Code bug
- *     (github.com/anthropics/claude-code/issues/24594). If you hit this, the
- *     provider will throw PROVIDER_ERROR and the task will fail. Fall back to the
- *     anthropic provider with useClaudeOauth: true for a fully supported path.
- */
-import type { LLMProvider, ProviderChatRequest, ProviderChatResponse } from "./types.js";
-import type { McpServerConfig, ProviderConfig } from "../validation/index.js";
-type ClaudeCliConfig = Extract<ProviderConfig, {
-    type: "claudecli";
-}>;
-/**
- * Compute the effective allowed built-in set and the `--disallowedTools` argv
- * entries that must be passed to the `claude` CLI subprocess.
- *
- * This is the single source of truth for [inv:no-third-tool-model]: the
- * allowed set is resolved in priority order:
- *   1. `compiledTools` (AGENT_TOOL / compile.tools model) — wins when present.
- *   2. `config.allowedBuiltinTools`  — legacy / transition-window fallback.
- *
- * Extracted here so tests can assert the REAL produced argv without spawning
- * a subprocess.  `chat()` must call this function; no divergence allowed.
- *
- * @param compiledTools - Platform-alias array from `compileAgent().tools`, or
- *   `undefined` when the compiler integration is not available yet.
- * @param allowedBuiltinTools - Per-agent legacy allowlist from config.
- * @returns `{ effectiveAllowed, disallowedArgv }` where `disallowedArgv` is the
- *   flat `["--disallowedTools", "<name>", ...]` fragment ready to push into args.
- */
-export declare function computeClaudeBuiltinArgs(params: {
-    compiledTools: string[] | undefined;
-    allowedBuiltinTools: string[] | undefined;
-}): {
-    effectiveAllowed: string[];
-    disallowedArgv: string[];
-};
-/**
- * Extracts the `name:` field from the leading YAML frontmatter block of a Claude
- * Code agent markdown system prompt. Only the first `---`-delimited block at the
- * very top of the string is considered. Returns undefined when there is no leading
- * frontmatter block or no `name:` key.
- *
- * Claude Code selects an agent (`--agent <name>`) by this frontmatter name — not
- * the on-disk filename — so the provider must read it to build the correct flag.
- */
-export declare function extractAgentSpecName(md: string): string | undefined;
-/**
- * Ensures an agent-spec markdown carries a frontmatter `name:` so the subprocess
- * can select it with `--agent`. Returns the markdown to write and the agent name
- * to pass to `--agent`.
- *
- * - If the prompt already names the agent, it is used verbatim and the markdown is
- *   returned unchanged (the spec author's `tools:` header is the source of truth).
- * - If a frontmatter block exists but lacks `name:`, a generated name is injected
- *   into it.
- * - If there is no frontmatter at all, the prompt is wrapped in a minimal block
- *   (no `tools:` → Claude inherits all tools, matching pre-spec-mode behavior).
- */
-export declare function normalizeAgentSpec(md: string): {
-    content: string;
-    agentName: string;
-};
-export declare class ClaudeCliProvider implements LLMProvider {
-    private readonly config;
-    private readonly mcpServers;
-    /**
-     * Platform-alias tool list derived from the AGENT_TOOL / compiled.tools model.
-     *
-     * When supplied (via `compileAgent({ platform: "claude_code" }).tools`), this
-     * array is the single source of truth for which Claude Code built-ins are
-     * permitted — config.allowedBuiltinTools is ignored. When absent, the provider
-     * falls back to config.allowedBuiltinTools (legacy / transition-window path).
-     *
-     * [inv:no-third-tool-model] — one tool-permission source, not two.
-     */
-    private readonly compiledTools;
-    constructor(config: ClaudeCliConfig, mcpServers?: Record<string, McpServerConfig>, compiledTools?: string[]);
-    /**
-     * Build the subprocess environment for the claude CLI subprocess.
-     *
-     * Merges the live process.env (PATH, HOME, call-time vars) with the
-     * config snapshot (ADHD_AGENT_* vars loaded from the .env hierarchy at
-     * startup), with the config snapshot winning on conflicts. This ensures
-     * the subprocess inherits both the user's shell context and any overrides
-     * loaded via the .env hierarchy — and allows test-injected env vars (e.g.
-     * CAPTURE_FILE) to flow through to the subprocess without a module reload.
-     */
-    private buildSubprocessEnv;
-    /**
-     * Write the agent's McpServerConfig map to a temp JSON file in the format
-     * Claude Code's --mcp-config flag expects. Inline JSON strings are not parsed
-     * by the CLI — a file path is required.
-     *
-     * Maps our `transport` field to Claude Code's `type`. The caller is responsible
-     * for deleting the file (use the finally block in chat()).
-     *
-     * Returns undefined if there are no servers to configure.
-     */
-    private writeMcpConfigFile;
-    /**
-     * Writes an agent-spec markdown system prompt to an isolated temp project dir
-     * as `<dir>/.claude/agents/<name>.md`, so the subprocess can discover and
-     * parse it via `--add-dir <dir> --setting-sources project --agent <name>`.
-     *
-     * Returns the temp dir (for `--add-dir`) and the frontmatter agent name (for
-     * `--agent`). The caller MUST delete the dir in its finally block.
-     */
-    private writeAgentSpecDir;
-    chat(request: ProviderChatRequest): Promise<ProviderChatResponse>;
-}
-export {};
-//# sourceMappingURL=claudecli.d.ts.map

package/src/providers/claudecli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claudecli.d.ts","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/providers/claudecli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAWH,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAW,MAAM,wBAAwB,CAAC;AAKvF,KAAK,eAAe,GAAG,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAkItE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC7C,aAAa,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,mBAAmB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC7C,GAAG;IAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE,CAe3D;AAQD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMnE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAgBrF;AAID,qBAAa,iBAAkB,YAAW,WAAW;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;gBAGjD,MAAM,EAAE,eAAe,EACvB,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAM,EAChD,aAAa,CAAC,EAAE,MAAM,EAAE;IAO5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;;;;;;;OASG;YACW,kBAAkB;IA8BhC;;;;;;;OAOG;YACW,iBAAiB;IAYzB,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAwO1E"}