@agent-native/core 0.111.4 → 0.113.0

package/dist/cli/claude-code-participant.js

@@ -0,0 +1,355 @@
+import { execFile as execFileCallback, spawn } from "node:child_process";
+import { isAbsolute } from "node:path";
+import { StringDecoder } from "node:string_decoder";
+import { promisify } from "node:util";
+const execFile = promisify(execFileCallback);
+const CLAUDE_CODE_VERSION = "2.1.208";
+const WATCHDOG_TOOLS = "Read,Glob,Grep";
+const WATCHDOG_DENIED_TOOLS = "Edit,Write,NotebookEdit,Bash";
+const DRIVER_TOOLS = "Read,Glob,Grep,Edit,Write";
+const DEFAULT_MAX_EVENTS = 2_000;
+const DEFAULT_MAX_STREAM_BYTES = 8 * 1024 * 1024;
+const DEFAULT_MAX_STDERR_BYTES = 128 * 1024;
+const DEFAULT_TIMEOUT_MS = 30 * 60 * 1_000;
+const DEFAULT_TERMINATION_GRACE_MS = 2_000;
+const DEFAULT_FORCE_SETTLE_MS = 250;
+const MAX_ERROR_MESSAGE_LENGTH = 200;
+const SAFE_ENVIRONMENT_KEYS = [
+    "PATH",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "TMPDIR",
+    "TMP",
+    "TEMP",
+    "TERM",
+    "NO_COLOR",
+    "FORCE_COLOR",
+    "USER",
+    "LOGNAME",
+    "SHELL",
+    // Claude Code uses this as its config root; HOME remains required for its
+    // default config and macOS Keychain-backed subscription login.
+    "CLAUDE_CONFIG_DIR",
+];
+export class ClaudeCodeSubscriptionRequiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ClaudeCodeSubscriptionRequiredError";
+    }
+}
+export async function readClaudeCodeSubscriptionStatus(options = {}) {
+    const execute = options.execute ?? execFile;
+    const { stdout } = await execute(resolveCommand(options.command, "claude"), ["auth", "status", "--json"], {
+        encoding: "utf8",
+        maxBuffer: 128 * 1024,
+        env: safeEnvironment(options.env ?? process.env),
+    });
+    const parsed = JSON.parse(stdout);
+    const status = asRecord(parsed);
+    if (!status || typeof status.loggedIn !== "boolean") {
+        throw new Error("Claude Code returned an invalid authentication status.");
+    }
+    return {
+        loggedIn: status.loggedIn,
+        authMethod: readString(status.authMethod),
+        apiProvider: readString(status.apiProvider),
+        subscriptionType: readString(status.subscriptionType),
+    };
+}
+export async function runClaudeCodeParticipant(options) {
+    validateInput(options);
+    const env = safeEnvironment(options.env ?? process.env);
+    const command = resolveCommand(options.command, "claude");
+    const subscription = await (options.preflight
+        ? options.preflight({ command, env })
+        : readClaudeCodeSubscriptionStatus({ command, env }));
+    assertClaudeCodeSubscription(subscription);
+    if (options.signal?.aborted)
+        throw createAbortError();
+    const args = buildClaudeCodeParticipantArgs(options);
+    const spawnProcess = options.spawnProcess ??
+        ((command, commandArgs, spawnOptions) => spawn(command, commandArgs, spawnOptions));
+    const child = spawnProcess(command, args, {
+        cwd: options.cwd,
+        env,
+        shell: false,
+        stdio: ["pipe", "pipe", "pipe"],
+    });
+    return collectClaudeCodeParticipantResult(child, options);
+}
+export function buildClaudeCodeParticipantArgs(options) {
+    const args = [
+        "--print",
+        "--input-format",
+        "text",
+        "--output-format",
+        "stream-json",
+        "--verbose",
+        "--no-chrome",
+        "--disable-slash-commands",
+        "--strict-mcp-config",
+        "--setting-sources",
+        "",
+    ];
+    if (options.role === "watchdog") {
+        args.push("--permission-mode", "plan", "--tools", WATCHDOG_TOOLS, "--disallowedTools", WATCHDOG_DENIED_TOOLS);
+    }
+    else {
+        args.push("--permission-mode", "acceptEdits", "--tools", DRIVER_TOOLS);
+    }
+    const model = readString(options.model);
+    if (model)
+        args.push("--model", model);
+    const sessionId = readString(options.session?.sessionId);
+    const resumeSessionId = readString(options.session?.resumeSessionId);
+    if (sessionId)
+        args.push("--session-id", sessionId);
+    if (resumeSessionId)
+        args.push("--resume", resumeSessionId);
+    if (options.session?.persist !== true)
+        args.push("--no-session-persistence");
+    return args;
+}
+function collectClaudeCodeParticipantResult(child, options) {
+    const maxEvents = boundedLimit(options.maxEvents, DEFAULT_MAX_EVENTS);
+    const maxStreamBytes = boundedLimit(options.maxStreamBytes, DEFAULT_MAX_STREAM_BYTES);
+    const maxStderrBytes = boundedLimit(options.maxStderrBytes, DEFAULT_MAX_STDERR_BYTES);
+    const timeoutMs = boundedDuration(options.timeoutMs, DEFAULT_TIMEOUT_MS);
+    const terminationGraceMs = boundedDuration(options.terminationGraceMs, DEFAULT_TERMINATION_GRACE_MS);
+    const forceSettleMs = boundedDuration(options.forceSettleMs, DEFAULT_FORCE_SETTLE_MS);
+    const decoder = new StringDecoder("utf8");
+    const stderrDecoder = new StringDecoder("utf8");
+    const events = [];
+    let pending = "";
+    let streamBytes = 0;
+    let stderr = "";
+    let stderrBytes = 0;
+    let stderrTruncated = false;
+    let fatalError;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let terminationTimer;
+        let forceSettleTimer;
+        const timeoutTimer = setTimeout(() => {
+            stopWithError(new Error(`Claude Code timed out after ${timeoutMs}ms.`));
+        }, timeoutMs);
+        timeoutTimer.unref?.();
+        const cleanup = () => {
+            options.signal?.removeEventListener("abort", abort);
+            clearTimeout(timeoutTimer);
+            if (terminationTimer)
+                clearTimeout(terminationTimer);
+            if (forceSettleTimer)
+                clearTimeout(forceSettleTimer);
+        };
+        const finishError = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(safeError(error));
+        };
+        const stopWithError = (error) => {
+            if (fatalError)
+                return;
+            fatalError = error;
+            terminationTimer = setTimeout(() => {
+                if (settled)
+                    return;
+                forceSettleTimer = setTimeout(() => {
+                    finishError(fatalError ?? error);
+                }, forceSettleMs);
+                forceSettleTimer.unref?.();
+                child.kill("SIGKILL");
+            }, terminationGraceMs);
+            terminationTimer.unref?.();
+            child.kill("SIGTERM");
+        };
+        const abort = () => stopWithError(createAbortError());
+        const streamError = (error) => {
+            if (!settled)
+                stopWithError(error);
+        };
+        child.stdin.on("error", streamError);
+        child.stdout.on("error", streamError);
+        child.stderr.on("error", streamError);
+        if (options.signal) {
+            if (options.signal.aborted)
+                abort();
+            else
+                options.signal.addEventListener("abort", abort, { once: true });
+        }
+        child.stdout.on("data", (chunk) => {
+            if (fatalError)
+                return;
+            const bytes = Buffer.isBuffer(chunk)
+                ? chunk.length
+                : Buffer.byteLength(chunk);
+            streamBytes += bytes;
+            if (streamBytes > maxStreamBytes) {
+                stopWithError(new Error(`Claude Code stream exceeded ${maxStreamBytes} bytes.`));
+                return;
+            }
+            pending += decoder.write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            try {
+                pending = consumeJsonLines(pending, events, maxEvents, options.onEvent);
+            }
+            catch (error) {
+                stopWithError(toError(error));
+            }
+        });
+        child.stderr.on("data", (chunk) => {
+            const encoded = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            const remaining = Math.max(0, maxStderrBytes - stderrBytes);
+            if (remaining === 0) {
+                stderrTruncated = true;
+                return;
+            }
+            stderr += stderrDecoder.write(encoded.subarray(0, remaining));
+            stderrBytes += Math.min(encoded.length, remaining);
+            if (encoded.length > remaining)
+                stderrTruncated = true;
+        });
+        child.once("error", finishError);
+        child.once("close", (exitCode, exitSignal) => {
+            if (settled)
+                return;
+            try {
+                pending += decoder.end();
+                stderr += stderrDecoder.end();
+                if (pending.trim()) {
+                    consumeJsonLine(pending, events, maxEvents, options.onEvent);
+                }
+            }
+            catch (error) {
+                fatalError ??= toError(error);
+            }
+            if (fatalError) {
+                finishError(fatalError);
+                return;
+            }
+            if (exitCode !== 0) {
+                finishError(new Error(`Claude Code exited with ${exitSignal ?? exitCode ?? "unknown"}${stderr ? `: ${summarizeStderr(stderr)}` : ""}`));
+                return;
+            }
+            settled = true;
+            cleanup();
+            resolve({
+                exitCode: 0,
+                events,
+                stderr: sanitizeStderr(stderr),
+                stderrTruncated,
+            });
+        });
+        try {
+            child.stdin.end(options.prompt);
+        }
+        catch (error) {
+            stopWithError(toError(error));
+        }
+    });
+}
+function consumeJsonLines(value, events, maxEvents, onEvent) {
+    let start = 0;
+    let newline = value.indexOf("\n", start);
+    while (newline !== -1) {
+        consumeJsonLine(value.slice(start, newline), events, maxEvents, onEvent);
+        start = newline + 1;
+        newline = value.indexOf("\n", start);
+    }
+    return value.slice(start);
+}
+function consumeJsonLine(line, events, maxEvents, onEvent) {
+    const trimmed = line.trim();
+    if (!trimmed)
+        return;
+    if (events.length >= maxEvents) {
+        throw new Error(`Claude Code stream exceeded ${maxEvents} events.`);
+    }
+    const parsed = JSON.parse(trimmed);
+    const event = asRecord(parsed);
+    if (!event)
+        throw new Error("Claude Code emitted a non-object JSON event.");
+    events.push(event);
+    onEvent?.(event);
+}
+function assertClaudeCodeSubscription(status) {
+    if (!status.loggedIn ||
+        status.authMethod !== "claude.ai" ||
+        status.apiProvider !== "firstParty" ||
+        !readString(status.subscriptionType)) {
+        throw new ClaudeCodeSubscriptionRequiredError("Claude Code must be signed in with a Claude subscription. API-key and third-party provider fallback are disabled.");
+    }
+}
+function safeEnvironment(input) {
+    return Object.fromEntries(SAFE_ENVIRONMENT_KEYS.flatMap((key) => typeof input[key] === "string" ? [[key, input[key]]] : []));
+}
+function validateInput(options) {
+    if (!readString(options.prompt))
+        throw new Error("Claude Code prompt is required.");
+    if (!readString(options.cwd))
+        throw new Error("Claude Code cwd is required.");
+    if (options.session?.sessionId && options.session.resumeSessionId) {
+        throw new Error("Choose either a new Claude session id or a resume id.");
+    }
+    resolveCommand(options.command, "claude");
+}
+function boundedLimit(value, maximum) {
+    return Number.isSafeInteger(value) && (value ?? 0) > 0
+        ? Math.min(value, maximum)
+        : maximum;
+}
+function boundedDuration(value, fallback) {
+    return Number.isSafeInteger(value) && (value ?? 0) > 0
+        ? Math.min(value, DEFAULT_TIMEOUT_MS)
+        : fallback;
+}
+function resolveCommand(command, defaultCommand) {
+    const value = readString(command) ?? defaultCommand;
+    if (value === defaultCommand)
+        return value;
+    if (value.includes("\0") || !isAbsolute(value)) {
+        throw new Error("Claude Code command must be an absolute executable path.");
+    }
+    return value;
+}
+function createAbortError() {
+    const error = new Error("Claude Code participant was canceled.");
+    error.name = "AbortError";
+    return error;
+}
+function toError(value) {
+    return value instanceof Error ? value : new Error(String(value));
+}
+function safeError(error) {
+    const safe = new Error(summarizeStderr(error.message));
+    safe.name = error.name;
+    return safe;
+}
+function summarizeStderr(value) {
+    return sanitizeStderr(value)
+        .replace(/\s+/g, " ")
+        .trim()
+        .slice(0, MAX_ERROR_MESSAGE_LENGTH);
+}
+function sanitizeStderr(value) {
+    return value
+        .replace(/\bBearer\s+\S+/gi, "Bearer <redacted>")
+        .replace(/(["']?)([A-Za-z_]*(?:token|key|secret|password)[A-Za-z_]*)\1\s*([=:])\s*(?:"[^"]*"|'[^']*'|[^\s,;}\]]+)/gi, '$1$2$1$3"<redacted>"')
+        .replace(/\b(?:sk|rk)-[A-Za-z0-9_-]{8,}\b/g, "<redacted>");
+}
+function readString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed || undefined;
+}
+function asRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+export const CLAUDE_CODE_PARTICIPANT_TESTED_VERSION = CLAUDE_CODE_VERSION;
+//# sourceMappingURL=claude-code-participant.js.map

package/dist/cli/claude-code-participant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-participant.js","sourceRoot":"","sources":["../../src/cli/claude-code-participant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAE7C,MAAM,mBAAmB,GAAG,SAAS,CAAC;AACtC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAC7D,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC3C,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,MAAM,qBAAqB,GAAG;IAC5B,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,UAAU;IACV,aAAa;IACb,MAAM;IACN,SAAS;IACT,OAAO;IACP,0EAA0E;IAC1E,+DAA+D;IAC/D,mBAAmB;CACX,CAAC;AAiFX,MAAM,OAAO,mCAAoC,SAAQ,KAAK;IAC5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qCAAqC,CAAC;IACpD,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAO,GAAwC,EAAE;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EACzC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAC5B;QACE,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;KACjD,CACF,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;QACzC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;QAC3C,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAwC;IAExC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS;QAC3C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,CAAC,CAAC,gCAAgC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACxD,4BAA4B,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,gBAAgB,EAAE,CAAC;IAEtD,MAAM,IAAI,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY;QACpB,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CACtC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE;QACxC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG;QACH,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IAEH,OAAO,kCAAkC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAA4E;IAE5E,MAAM,IAAI,GAAG;QACX,SAAS;QACT,gBAAgB;QAChB,MAAM;QACN,iBAAiB;QACjB,aAAa;QACb,WAAW;QACX,aAAa;QACb,0BAA0B;QAC1B,qBAAqB;QACrB,mBAAmB;QACnB,EAAE;KACH,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CACP,mBAAmB,EACnB,MAAM,EACN,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,qBAAqB,CACtB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,eAAe;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kCAAkC,CACzC,KAAiC,EACjC,OAAwC;IAExC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,cAAc,EACtB,wBAAwB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,cAAc,EACtB,wBAAwB,CACzB,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,eAAe,CACxC,OAAO,CAAC,kBAAkB,EAC1B,4BAA4B,CAC7B,CAAC;IACF,MAAM,aAAa,GAAG,eAAe,CACnC,OAAO,CAAC,aAAa,EACrB,uBAAuB,CACxB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,UAA6B,CAAC;IAElC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAA4C,CAAC;QACjD,IAAI,gBAA4C,CAAC;QACjD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,aAAa,CAAC,IAAI,KAAK,CAAC,+BAA+B,SAAS,KAAK,CAAC,CAAC,CAAC;QAC1E,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,IAAI,gBAAgB;gBAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACrD,IAAI,gBAAgB;gBAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACvD,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,KAAY,EAAE,EAAE;YACrC,IAAI,UAAU;gBAAE,OAAO;YACvB,UAAU,GAAG,KAAK,CAAC;YACnB,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACjC,IAAI,OAAO;oBAAE,OAAO;gBACpB,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,WAAW,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;gBACnC,CAAC,EAAE,aAAa,CAAC,CAAC;gBAClB,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACvB,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,IAAI,CAAC,OAAO;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC;QAEF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAEtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,KAAK,EAAE,CAAC;;gBAC/B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,IAAI,UAAU;gBAAE,OAAO;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClC,CAAC,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC7B,WAAW,IAAI,KAAK,CAAC;YACrB,IAAI,WAAW,GAAG,cAAc,EAAE,CAAC;gBACjC,aAAa,CACX,IAAI,KAAK,CAAC,+BAA+B,cAAc,SAAS,CAAC,CAClE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,KAAK,CACtB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CACpD,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC;YAC5D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,eAAe,GAAG,IAAI,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9D,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;gBAAE,eAAe,GAAG,IAAI,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE;YAC3C,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,CAAC;gBACH,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBACnB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,UAAU,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,WAAW,CACT,IAAI,KAAK,CACP,2BAA2B,UAAU,IAAI,QAAQ,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAChH,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;gBAC9B,eAAe;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAa,EACb,MAAoC,EACpC,SAAiB,EACjB,OAAqD;IAErD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzE,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,MAAoC,EACpC,SAAiB,EACjB,OAAqD;IAErD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,UAAU,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC5E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAoC;IAEpC,IACE,CAAC,MAAM,CAAC,QAAQ;QAChB,MAAM,CAAC,UAAU,KAAK,WAAW;QACjC,MAAM,CAAC,WAAW,KAAK,YAAY;QACnC,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,mCAAmC,CAC3C,mHAAmH,CACpH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,OAAO,MAAM,CAAC,WAAW,CACvB,qBAAqB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACpC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAwC;IAC7D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,OAAe;IAC9D,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAe,EAAE,OAAO,CAAC;QACpC,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,QAAgB;IAClE,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAe,EAAE,kBAAkB,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,OAA2B,EAC3B,cAAsB;IAEtB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;IACpD,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,KAAY;IAC7B,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,cAAc,CAAC,KAAK,CAAC;SACzB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK;SACT,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;SAChD,OAAO,CACN,2GAA2G,EAC3G,sBAAsB,CACvB;SACA,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,sCAAsC,GAAG,mBAAmB,CAAC","sourcesContent":["import { execFile as execFileCallback, spawn } from \"node:child_process\";\nimport { isAbsolute } from \"node:path\";\nimport type { Readable, Writable } from \"node:stream\";\nimport { StringDecoder } from \"node:string_decoder\";\nimport { promisify } from \"node:util\";\n\nconst execFile = promisify(execFileCallback);\n\nconst CLAUDE_CODE_VERSION = \"2.1.208\";\nconst WATCHDOG_TOOLS = \"Read,Glob,Grep\";\nconst WATCHDOG_DENIED_TOOLS = \"Edit,Write,NotebookEdit,Bash\";\nconst DRIVER_TOOLS = \"Read,Glob,Grep,Edit,Write\";\nconst DEFAULT_MAX_EVENTS = 2_000;\nconst DEFAULT_MAX_STREAM_BYTES = 8 * 1024 * 1024;\nconst DEFAULT_MAX_STDERR_BYTES = 128 * 1024;\nconst DEFAULT_TIMEOUT_MS = 30 * 60 * 1_000;\nconst DEFAULT_TERMINATION_GRACE_MS = 2_000;\nconst DEFAULT_FORCE_SETTLE_MS = 250;\nconst MAX_ERROR_MESSAGE_LENGTH = 200;\n\nconst SAFE_ENVIRONMENT_KEYS = [\n  \"PATH\",\n  \"HOME\",\n  \"LANG\",\n  \"LC_ALL\",\n  \"LC_CTYPE\",\n  \"TMPDIR\",\n  \"TMP\",\n  \"TEMP\",\n  \"TERM\",\n  \"NO_COLOR\",\n  \"FORCE_COLOR\",\n  \"USER\",\n  \"LOGNAME\",\n  \"SHELL\",\n  // Claude Code uses this as its config root; HOME remains required for its\n  // default config and macOS Keychain-backed subscription login.\n  \"CLAUDE_CONFIG_DIR\",\n] as const;\n\nexport type ClaudeCodeParticipantRole = \"watchdog\" | \"driver\";\n\nexport interface ClaudeCodeSubscriptionStatus {\n  loggedIn: boolean;\n  authMethod?: string;\n  apiProvider?: string;\n  subscriptionType?: string;\n}\n\nexport interface ClaudeCodeParticipantSession {\n  sessionId?: string;\n  resumeSessionId?: string;\n  persist?: boolean;\n}\n\nexport interface ClaudeCodeParticipantEvent {\n  [key: string]: unknown;\n}\n\nexport interface ClaudeCodeParticipantResult {\n  exitCode: number;\n  events: ClaudeCodeParticipantEvent[];\n  stderr: string;\n  stderrTruncated: boolean;\n}\n\nexport interface ClaudeCodeParticipantChild {\n  stdin: Writable;\n  stdout: Readable;\n  stderr: Readable;\n  kill(signal?: NodeJS.Signals): boolean;\n  once(event: \"error\", listener: (error: Error) => void): unknown;\n  once(\n    event: \"close\",\n    listener: (code: number | null, signal: NodeJS.Signals | null) => void,\n  ): unknown;\n}\n\nexport interface ClaudeCodeParticipantSpawnOptions {\n  cwd: string;\n  env: NodeJS.ProcessEnv;\n  shell: false;\n  stdio: [\"pipe\", \"pipe\", \"pipe\"];\n}\n\nexport type ClaudeCodeParticipantSpawn = (\n  command: string,\n  args: string[],\n  options: ClaudeCodeParticipantSpawnOptions,\n) => ClaudeCodeParticipantChild;\n\nexport interface RunClaudeCodeParticipantOptions {\n  role: ClaudeCodeParticipantRole;\n  prompt: string;\n  cwd: string;\n  model?: string;\n  session?: ClaudeCodeParticipantSession;\n  /** Either the fixed CLI name or an absolute executable path for packaged apps. */\n  command?: string;\n  signal?: AbortSignal;\n  env?: NodeJS.ProcessEnv;\n  maxEvents?: number;\n  maxStreamBytes?: number;\n  maxStderrBytes?: number;\n  timeoutMs?: number;\n  terminationGraceMs?: number;\n  forceSettleMs?: number;\n  onEvent?: (event: ClaudeCodeParticipantEvent) => void;\n  preflight?: (\n    context: ClaudeCodeParticipantPreflightContext,\n  ) => Promise<ClaudeCodeSubscriptionStatus>;\n  spawnProcess?: ClaudeCodeParticipantSpawn;\n}\n\nexport interface ClaudeCodeParticipantPreflightContext {\n  command: string;\n  env: NodeJS.ProcessEnv;\n}\n\nexport class ClaudeCodeSubscriptionRequiredError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ClaudeCodeSubscriptionRequiredError\";\n  }\n}\n\nexport interface ClaudeCodeSubscriptionStatusOptions {\n  command?: string;\n  env?: NodeJS.ProcessEnv;\n  execute?: typeof execFile;\n}\n\nexport async function readClaudeCodeSubscriptionStatus(\n  options: ClaudeCodeSubscriptionStatusOptions = {},\n): Promise<ClaudeCodeSubscriptionStatus> {\n  const execute = options.execute ?? execFile;\n  const { stdout } = await execute(\n    resolveCommand(options.command, \"claude\"),\n    [\"auth\", \"status\", \"--json\"],\n    {\n      encoding: \"utf8\",\n      maxBuffer: 128 * 1024,\n      env: safeEnvironment(options.env ?? process.env),\n    },\n  );\n  const parsed = JSON.parse(stdout) as unknown;\n  const status = asRecord(parsed);\n  if (!status || typeof status.loggedIn !== \"boolean\") {\n    throw new Error(\"Claude Code returned an invalid authentication status.\");\n  }\n  return {\n    loggedIn: status.loggedIn,\n    authMethod: readString(status.authMethod),\n    apiProvider: readString(status.apiProvider),\n    subscriptionType: readString(status.subscriptionType),\n  };\n}\n\nexport async function runClaudeCodeParticipant(\n  options: RunClaudeCodeParticipantOptions,\n): Promise<ClaudeCodeParticipantResult> {\n  validateInput(options);\n  const env = safeEnvironment(options.env ?? process.env);\n  const command = resolveCommand(options.command, \"claude\");\n  const subscription = await (options.preflight\n    ? options.preflight({ command, env })\n    : readClaudeCodeSubscriptionStatus({ command, env }));\n  assertClaudeCodeSubscription(subscription);\n  if (options.signal?.aborted) throw createAbortError();\n\n  const args = buildClaudeCodeParticipantArgs(options);\n  const spawnProcess =\n    options.spawnProcess ??\n    ((command, commandArgs, spawnOptions) =>\n      spawn(command, commandArgs, spawnOptions));\n  const child = spawnProcess(command, args, {\n    cwd: options.cwd,\n    env,\n    shell: false,\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n  });\n\n  return collectClaudeCodeParticipantResult(child, options);\n}\n\nexport function buildClaudeCodeParticipantArgs(\n  options: Pick<RunClaudeCodeParticipantOptions, \"role\" | \"model\" | \"session\">,\n): string[] {\n  const args = [\n    \"--print\",\n    \"--input-format\",\n    \"text\",\n    \"--output-format\",\n    \"stream-json\",\n    \"--verbose\",\n    \"--no-chrome\",\n    \"--disable-slash-commands\",\n    \"--strict-mcp-config\",\n    \"--setting-sources\",\n    \"\",\n  ];\n\n  if (options.role === \"watchdog\") {\n    args.push(\n      \"--permission-mode\",\n      \"plan\",\n      \"--tools\",\n      WATCHDOG_TOOLS,\n      \"--disallowedTools\",\n      WATCHDOG_DENIED_TOOLS,\n    );\n  } else {\n    args.push(\"--permission-mode\", \"acceptEdits\", \"--tools\", DRIVER_TOOLS);\n  }\n\n  const model = readString(options.model);\n  if (model) args.push(\"--model\", model);\n  const sessionId = readString(options.session?.sessionId);\n  const resumeSessionId = readString(options.session?.resumeSessionId);\n  if (sessionId) args.push(\"--session-id\", sessionId);\n  if (resumeSessionId) args.push(\"--resume\", resumeSessionId);\n  if (options.session?.persist !== true) args.push(\"--no-session-persistence\");\n  return args;\n}\n\nfunction collectClaudeCodeParticipantResult(\n  child: ClaudeCodeParticipantChild,\n  options: RunClaudeCodeParticipantOptions,\n): Promise<ClaudeCodeParticipantResult> {\n  const maxEvents = boundedLimit(options.maxEvents, DEFAULT_MAX_EVENTS);\n  const maxStreamBytes = boundedLimit(\n    options.maxStreamBytes,\n    DEFAULT_MAX_STREAM_BYTES,\n  );\n  const maxStderrBytes = boundedLimit(\n    options.maxStderrBytes,\n    DEFAULT_MAX_STDERR_BYTES,\n  );\n  const timeoutMs = boundedDuration(options.timeoutMs, DEFAULT_TIMEOUT_MS);\n  const terminationGraceMs = boundedDuration(\n    options.terminationGraceMs,\n    DEFAULT_TERMINATION_GRACE_MS,\n  );\n  const forceSettleMs = boundedDuration(\n    options.forceSettleMs,\n    DEFAULT_FORCE_SETTLE_MS,\n  );\n  const decoder = new StringDecoder(\"utf8\");\n  const stderrDecoder = new StringDecoder(\"utf8\");\n  const events: ClaudeCodeParticipantEvent[] = [];\n  let pending = \"\";\n  let streamBytes = 0;\n  let stderr = \"\";\n  let stderrBytes = 0;\n  let stderrTruncated = false;\n  let fatalError: Error | undefined;\n\n  return new Promise((resolve, reject) => {\n    let settled = false;\n    let terminationTimer: NodeJS.Timeout | undefined;\n    let forceSettleTimer: NodeJS.Timeout | undefined;\n    const timeoutTimer = setTimeout(() => {\n      stopWithError(new Error(`Claude Code timed out after ${timeoutMs}ms.`));\n    }, timeoutMs);\n    timeoutTimer.unref?.();\n    const cleanup = () => {\n      options.signal?.removeEventListener(\"abort\", abort);\n      clearTimeout(timeoutTimer);\n      if (terminationTimer) clearTimeout(terminationTimer);\n      if (forceSettleTimer) clearTimeout(forceSettleTimer);\n    };\n    const finishError = (error: Error) => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      reject(safeError(error));\n    };\n    const stopWithError = (error: Error) => {\n      if (fatalError) return;\n      fatalError = error;\n      terminationTimer = setTimeout(() => {\n        if (settled) return;\n        forceSettleTimer = setTimeout(() => {\n          finishError(fatalError ?? error);\n        }, forceSettleMs);\n        forceSettleTimer.unref?.();\n        child.kill(\"SIGKILL\");\n      }, terminationGraceMs);\n      terminationTimer.unref?.();\n      child.kill(\"SIGTERM\");\n    };\n    const abort = () => stopWithError(createAbortError());\n    const streamError = (error: Error) => {\n      if (!settled) stopWithError(error);\n    };\n\n    child.stdin.on(\"error\", streamError);\n    child.stdout.on(\"error\", streamError);\n    child.stderr.on(\"error\", streamError);\n\n    if (options.signal) {\n      if (options.signal.aborted) abort();\n      else options.signal.addEventListener(\"abort\", abort, { once: true });\n    }\n\n    child.stdout.on(\"data\", (chunk: Buffer | string) => {\n      if (fatalError) return;\n      const bytes = Buffer.isBuffer(chunk)\n        ? chunk.length\n        : Buffer.byteLength(chunk);\n      streamBytes += bytes;\n      if (streamBytes > maxStreamBytes) {\n        stopWithError(\n          new Error(`Claude Code stream exceeded ${maxStreamBytes} bytes.`),\n        );\n        return;\n      }\n      pending += decoder.write(\n        Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk),\n      );\n      try {\n        pending = consumeJsonLines(pending, events, maxEvents, options.onEvent);\n      } catch (error) {\n        stopWithError(toError(error));\n      }\n    });\n    child.stderr.on(\"data\", (chunk: Buffer | string) => {\n      const encoded = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      const remaining = Math.max(0, maxStderrBytes - stderrBytes);\n      if (remaining === 0) {\n        stderrTruncated = true;\n        return;\n      }\n      stderr += stderrDecoder.write(encoded.subarray(0, remaining));\n      stderrBytes += Math.min(encoded.length, remaining);\n      if (encoded.length > remaining) stderrTruncated = true;\n    });\n    child.once(\"error\", finishError);\n    child.once(\"close\", (exitCode, exitSignal) => {\n      if (settled) return;\n      try {\n        pending += decoder.end();\n        stderr += stderrDecoder.end();\n        if (pending.trim()) {\n          consumeJsonLine(pending, events, maxEvents, options.onEvent);\n        }\n      } catch (error) {\n        fatalError ??= toError(error);\n      }\n      if (fatalError) {\n        finishError(fatalError);\n        return;\n      }\n      if (exitCode !== 0) {\n        finishError(\n          new Error(\n            `Claude Code exited with ${exitSignal ?? exitCode ?? \"unknown\"}${stderr ? `: ${summarizeStderr(stderr)}` : \"\"}`,\n          ),\n        );\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve({\n        exitCode: 0,\n        events,\n        stderr: sanitizeStderr(stderr),\n        stderrTruncated,\n      });\n    });\n    try {\n      child.stdin.end(options.prompt);\n    } catch (error) {\n      stopWithError(toError(error));\n    }\n  });\n}\n\nfunction consumeJsonLines(\n  value: string,\n  events: ClaudeCodeParticipantEvent[],\n  maxEvents: number,\n  onEvent?: (event: ClaudeCodeParticipantEvent) => void,\n): string {\n  let start = 0;\n  let newline = value.indexOf(\"\\n\", start);\n  while (newline !== -1) {\n    consumeJsonLine(value.slice(start, newline), events, maxEvents, onEvent);\n    start = newline + 1;\n    newline = value.indexOf(\"\\n\", start);\n  }\n  return value.slice(start);\n}\n\nfunction consumeJsonLine(\n  line: string,\n  events: ClaudeCodeParticipantEvent[],\n  maxEvents: number,\n  onEvent?: (event: ClaudeCodeParticipantEvent) => void,\n): void {\n  const trimmed = line.trim();\n  if (!trimmed) return;\n  if (events.length >= maxEvents) {\n    throw new Error(`Claude Code stream exceeded ${maxEvents} events.`);\n  }\n  const parsed = JSON.parse(trimmed) as unknown;\n  const event = asRecord(parsed);\n  if (!event) throw new Error(\"Claude Code emitted a non-object JSON event.\");\n  events.push(event);\n  onEvent?.(event);\n}\n\nfunction assertClaudeCodeSubscription(\n  status: ClaudeCodeSubscriptionStatus,\n): void {\n  if (\n    !status.loggedIn ||\n    status.authMethod !== \"claude.ai\" ||\n    status.apiProvider !== \"firstParty\" ||\n    !readString(status.subscriptionType)\n  ) {\n    throw new ClaudeCodeSubscriptionRequiredError(\n      \"Claude Code must be signed in with a Claude subscription. API-key and third-party provider fallback are disabled.\",\n    );\n  }\n}\n\nfunction safeEnvironment(input: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\n  return Object.fromEntries(\n    SAFE_ENVIRONMENT_KEYS.flatMap((key) =>\n      typeof input[key] === \"string\" ? [[key, input[key]]] : [],\n    ),\n  );\n}\n\nfunction validateInput(options: RunClaudeCodeParticipantOptions): void {\n  if (!readString(options.prompt))\n    throw new Error(\"Claude Code prompt is required.\");\n  if (!readString(options.cwd)) throw new Error(\"Claude Code cwd is required.\");\n  if (options.session?.sessionId && options.session.resumeSessionId) {\n    throw new Error(\"Choose either a new Claude session id or a resume id.\");\n  }\n  resolveCommand(options.command, \"claude\");\n}\n\nfunction boundedLimit(value: number | undefined, maximum: number): number {\n  return Number.isSafeInteger(value) && (value ?? 0) > 0\n    ? Math.min(value as number, maximum)\n    : maximum;\n}\n\nfunction boundedDuration(value: number | undefined, fallback: number): number {\n  return Number.isSafeInteger(value) && (value ?? 0) > 0\n    ? Math.min(value as number, DEFAULT_TIMEOUT_MS)\n    : fallback;\n}\n\nfunction resolveCommand(\n  command: string | undefined,\n  defaultCommand: string,\n): string {\n  const value = readString(command) ?? defaultCommand;\n  if (value === defaultCommand) return value;\n  if (value.includes(\"\\0\") || !isAbsolute(value)) {\n    throw new Error(\"Claude Code command must be an absolute executable path.\");\n  }\n  return value;\n}\n\nfunction createAbortError(): Error {\n  const error = new Error(\"Claude Code participant was canceled.\");\n  error.name = \"AbortError\";\n  return error;\n}\n\nfunction toError(value: unknown): Error {\n  return value instanceof Error ? value : new Error(String(value));\n}\n\nfunction safeError(error: Error): Error {\n  const safe = new Error(summarizeStderr(error.message));\n  safe.name = error.name;\n  return safe;\n}\n\nfunction summarizeStderr(value: string): string {\n  return sanitizeStderr(value)\n    .replace(/\\s+/g, \" \")\n    .trim()\n    .slice(0, MAX_ERROR_MESSAGE_LENGTH);\n}\n\nfunction sanitizeStderr(value: string): string {\n  return value\n    .replace(/\\bBearer\\s+\\S+/gi, \"Bearer <redacted>\")\n    .replace(\n      /([\"']?)([A-Za-z_]*(?:token|key|secret|password)[A-Za-z_]*)\\1\\s*([=:])\\s*(?:\"[^\"]*\"|'[^']*'|[^\\s,;}\\]]+)/gi,\n      '$1$2$1$3\"<redacted>\"',\n    )\n    .replace(/\\b(?:sk|rk)-[A-Za-z0-9_-]{8,}\\b/g, \"<redacted>\");\n}\n\nfunction readString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed || undefined;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\nexport const CLAUDE_CODE_PARTICIPANT_TESTED_VERSION = CLAUDE_CODE_VERSION;\n"]}

package/dist/cli/code-agent-executor.d.ts

@@ -15,6 +15,10 @@ export interface ExecuteCodeAgentRunOptions {
     stdout?: NodeJS.WritableStream;
     signal?: AbortSignal;
 }
+interface CodeAgentApprovalExecutionOptions {
+    stdout?: NodeJS.WritableStream;
+    signal?: AbortSignal;
+}
 export declare function executeCodeAgentRun(options: ExecuteCodeAgentRunOptions): Promise<CodeAgentRunRecord | null>;
 export declare function codeAgentMcpInvocationPolicy(permissionMode: CodeAgentPermissionMode): McpToolInvocationPolicy;
 export declare function executeExistingCodeAgentRun(runId: string, options?: Omit<ExecuteCodeAgentRunOptions, "runId">): Promise<CodeAgentRunRecord | null>;
@@ -23,20 +27,14 @@ export declare function executeExistingCodeAgentRun(runId: string, options?: Omi
  * and auto-resume.  Future occurrences of this exact command will bypass the
  * approval gate without prompting.
  */
-export declare function executeApproveAlwaysCodeAgentApproval(runId: string, options?: {
-    stdout?: NodeJS.WritableStream;
-}): Promise<CodeAgentRunRecord | null>;
-export declare function executePendingCodeAgentApproval(runId: string, options?: {
-    stdout?: NodeJS.WritableStream;
-}): Promise<CodeAgentRunRecord | null>;
+export declare function executeApproveAlwaysCodeAgentApproval(runId: string, options?: CodeAgentApprovalExecutionOptions): Promise<CodeAgentRunRecord | null>;
+export declare function executePendingCodeAgentApproval(runId: string, options?: CodeAgentApprovalExecutionOptions): Promise<CodeAgentRunRecord | null>;
 /**
  * Deny a pending approval: record the denial, feed it back to the model as a
  * "command denied by user" result, and immediately resume the run so the model
  * can adapt its plan without leaving the run dangling.
  */
-export declare function executeDenyCodeAgentApproval(runId: string, options?: {
-    stdout?: NodeJS.WritableStream;
-}): Promise<CodeAgentRunRecord | null>;
+export declare function executeDenyCodeAgentApproval(runId: string, options?: CodeAgentApprovalExecutionOptions): Promise<CodeAgentRunRecord | null>;
 /**
  * Reconstruct a sequence of EngineMessage objects from transcript events,
  * preserving the native tool-call / tool-result pair structure that models
@@ -86,4 +84,5 @@ export type CodeAgentCommandPermission = {
 };
 export declare function classifyCodeAgentCommandPermission(command: string): CodeAgentCommandPermission;
 export declare function writeCodeAgentUsageSnapshot(cwd: string, usage: AgentLoopUsage | null): void;
+export {};
 //# sourceMappingURL=code-agent-executor.d.ts.map

package/dist/cli/code-agent-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code-agent-executor.d.ts","sourceRoot":"","sources":["../../src/cli/code-agent-executor.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,WAAW,EAEX,aAAa,EAEd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,sCAAsC,CAAC;AAS9C,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAQL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AA0CD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA4apC;AAED,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,uBAAuB,GACtC,uBAAuB,CAIzB;AA8RD,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,IAAI,CAAC,0BAA0B,EAAE,OAAO,CAAM,GACtD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAEpC;AAED;;;;GAIG;AACH,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;CAAO,GAC/C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAYpC;AAED,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;CAAO,GAC/C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA4FpC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;CAAO,GAC/C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA0CpC;AAyTD;;;;;;;;;;;;;;;;;GAiBG;AACH,wCAAwC;AACxC,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,SAAS,OAAO,sBAAsB,EAAE,wBAAwB,EAAE,GACzE,aAAa,EAAE,CAmHjB;AAmED;;;;;;;;;GASG;AACH,wCAAwC;AACxC,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,uBAAuB,GACtC,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED,wCAAwC;AACxC,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAc1E;AAED,wCAAwC;AACxC,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,uBAAuB,EACvC,qBAAqB,SAAK,EAC1B,WAAW,SAAK,GACf,MAAM,CA4DR;AAuFD,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,GACd,0BAA0B,CAuD5B;AA0FD,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,cAAc,GAAG,IAAI,GAC3B,IAAI,CAgBN"}
+{"version":3,"file":"code-agent-executor.d.ts","sourceRoot":"","sources":["../../src/cli/code-agent-executor.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,WAAW,EAEX,aAAa,EAEd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,sCAAsC,CAAC;AAS9C,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAQL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAWD,UAAU,iCAAiC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAiCD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA4apC;AAED,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,uBAAuB,GACtC,uBAAuB,CAIzB;AAsSD,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,IAAI,CAAC,0BAA0B,EAAE,OAAO,CAAM,GACtD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAEpC;AAED;;;;GAIG;AACH,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAYpC;AAED,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAgGpC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA6CpC;AAyTD;;;;;;;;;;;;;;;;;GAiBG;AACH,wCAAwC;AACxC,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,SAAS,OAAO,sBAAsB,EAAE,wBAAwB,EAAE,GACzE,aAAa,EAAE,CAmHjB;AAmED;;;;;;;;;GASG;AACH,wCAAwC;AACxC,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,uBAAuB,GACtC,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED,wCAAwC;AACxC,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAc1E;AAED,wCAAwC;AACxC,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,uBAAuB,EACvC,qBAAqB,SAAK,EAC1B,WAAW,SAAK,GACf,MAAM,CA4DR;AAuFD,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,GACd,0BAA0B,CAuD5B;AA0FD,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,cAAc,GAAG,IAAI,GAC3B,IAAI,CAgBN"}

package/dist/cli/code-agent-executor.js

@@ -462,35 +462,43 @@ async function executeCodexCliRun(options) {
             signal: options.signal,
         });
         if (result.exitCode !== 0) {
+            const interrupted = options.signal?.aborted === true;
             const message = result.error ??
                 result.stderr.trim() ??
                 `Codex CLI exited with ${result.exitSignal ?? result.exitCode}.`;
-            options.stdout?.write(`\nCodex CLI run failed: ${message}\n`);
+            const summary = interrupted
+                ? "Codex CLI run paused."
+                : `Codex CLI run failed: ${message}`;
+            options.stdout?.write(`\n${summary}\n`);
             appendCodeAgentTranscriptEvent({
                 runId: options.run.id,
                 kind: "status",
-                message: `Codex CLI run failed: ${message}`,
+                message: summary,
                 metadata: {
-                    status: "errored",
-                    phase: "error",
+                    status: interrupted ? "paused" : "errored",
+                    phase: interrupted ? "paused" : "error",
                     engine: CODEX_CLI_ENGINE_NAME,
                     exitCode: result.exitCode,
                     exitSignal: result.exitSignal,
                 },
             });
             return updateCodeAgentRunRecord(options.run.id, {
-                status: options.signal?.aborted ? "paused" : "errored",
-                phase: options.signal?.aborted ? "paused" : "error",
+                status: interrupted ? "paused" : "errored",
+                phase: interrupted ? "paused" : "error",
                 progress: {
-                    label: options.signal?.aborted ? "Paused" : "Error",
+                    label: interrupted ? "Paused" : "Error",
                     completed: 0,
                     total: 1,
-                    failed: options.signal?.aborted ? 0 : 1,
+                    failed: interrupted ? 0 : 1,
                     percent: 0,
                 },
                 metadata: {
-                    executionError: message,
-                    executionErroredAt: new Date().toISOString(),
+                    ...(interrupted
+                        ? { executionPausedAt: new Date().toISOString() }
+                        : {
+                            executionError: message,
+                            executionErroredAt: new Date().toISOString(),
+                        }),
                     engine: CODEX_CLI_ENGINE_NAME,
                     model: model ?? "codex-default",
                 },
@@ -729,7 +737,7 @@ export async function executePendingCodeAgentApproval(runId, options = {}) {
             command: approval.command,
         },
     });
-    const result = await runCodingCommand(approval.command, record.cwd || process.cwd(), DEFAULT_COMMAND_TIMEOUT_MS);
+    const result = await runCodingCommand(approval.command, record.cwd || process.cwd(), DEFAULT_COMMAND_TIMEOUT_MS, { signal: options.signal });
     const summary = truncateCodingOutput([
         `Approved command finished with exit code ${result.code}.`,
         result.timedOut ? "Timed out: true" : "",
@@ -772,7 +780,10 @@ export async function executePendingCodeAgentApproval(runId, options = {}) {
         message: "Resuming run after approval.",
         metadata: { status: "running", phase: "approval-resuming" },
     });
-    return executeExistingCodeAgentRun(runId, { stdout: options.stdout });
+    return executeExistingCodeAgentRun(runId, {
+        stdout: options.stdout,
+        signal: options.signal,
+    });
 }
 /**
  * Deny a pending approval: record the denial, feed it back to the model as a
@@ -820,7 +831,10 @@ export async function executeDenyCodeAgentApproval(runId, options = {}) {
         message: "Resuming run after denial — model will adapt its plan.",
         metadata: { status: "running", phase: "approval-denied-resuming" },
     });
-    return executeExistingCodeAgentRun(runId, { stdout: options.stdout });
+    return executeExistingCodeAgentRun(runId, {
+        stdout: options.stdout,
+        signal: options.signal,
+    });
 }
 function latestUserPrompt(runId) {
     const events = listCodeAgentTranscriptEvents(runId);