@agentskit/code-review 0.1.0 → 0.4.1

package/dist/src/batch-coverage.js

@@ -0,0 +1,111 @@
+export function partitionReviewableFiles(files, batchSize) {
+    if (!Number.isInteger(batchSize) || batchSize < 1)
+        throw new Error('batch size must be a positive integer');
+    const unique = [...new Set(files)].sort();
+    return Array.from({ length: Math.ceil(unique.length / batchSize) }, (_, index) => ({ index, files: unique.slice(index * batchSize, (index + 1) * batchSize) }));
+}
+export function createBatchCoverage(input) {
+    const indices = new Set();
+    for (const batch of input.batches) {
+        if (!Number.isInteger(batch.index) || batch.index < 0 || indices.has(batch.index) || !batch.files.length)
+            throw new Error('invalid batch coverage manifest');
+        indices.add(batch.index);
+    }
+    return { version: 1, repository: input.repository, pullNumber: input.pullNumber, headSha: input.headSha, policyFingerprint: input.policyFingerprint, batches: input.batches.map((batch) => ({ ...batch, files: [...batch.files], completed: false, findings: 0 })) };
+}
+export function recordBatch(state, input) {
+    if (input.headSha !== state.headSha || input.policyFingerprint !== state.policyFingerprint)
+        throw new Error('stale batch coverage state');
+    const batch = state.batches.find((item) => item.index === input.index);
+    if (!batch || batch.completed || !Number.isInteger(input.findings) || input.findings < 0)
+        throw new Error('invalid batch result');
+    return { ...state, batches: state.batches.map((item) => item.index === input.index ? { ...item, completed: true, findings: input.findings } : item) };
+}
+export function finalCoverage(state) {
+    const pending = state.batches.filter((batch) => !batch.completed).map((batch) => batch.index);
+    return { complete: pending.length === 0, findings: state.batches.reduce((sum, batch) => sum + batch.findings, 0), pending };
+}
+export function publicationDecision(state) {
+    const coverage = finalCoverage(state);
+    if (!coverage.complete)
+        return { publish: false, reason: `coverage incomplete; pending batches: ${coverage.pending.join(', ')}` };
+    if (coverage.findings)
+        return { publish: true, reason: `${coverage.findings} verified finding(s)` };
+    return { publish: true, reason: 'complete coverage with zero findings' };
+}
+function assertUsableArtifact(state, artifact) {
+    if (artifact.version !== 1 || artifact.repository !== state.repository || artifact.pullNumber !== state.pullNumber)
+        throw new Error('batch result does not belong to this PR');
+    if (artifact.headSha !== state.headSha || artifact.policyFingerprint !== state.policyFingerprint)
+        throw new Error('stale batch result');
+    const expected = state.batches.find((batch) => batch.index === artifact.batch.index);
+    if (!expected || expected.files.join('\0') !== artifact.batch.files.join('\0'))
+        throw new Error('batch result does not match the planned file manifest');
+    if (artifact.review.unreviewed?.length || artifact.review.missingRequiredLenses?.length || artifact.review.execution.failed || artifact.review.execution.succeeded !== artifact.review.execution.attempted || artifact.review.evidence.deadlineExceeded) {
+        throw new Error(`batch ${artifact.batch.index} has incomplete review evidence`);
+    }
+}
+/**
+ * Validates every private artifact against the immutable manifest and returns the
+ * only result that may be published. A partial, stale, failed, or duplicate batch
+ * is rejected rather than silently becoming a clean review.
+ */
+export function consolidateBatchArtifacts(state, artifacts) {
+    let recorded = state;
+    const seen = new Set();
+    for (const artifact of artifacts) {
+        assertUsableArtifact(state, artifact);
+        if (seen.has(artifact.batch.index))
+            throw new Error(`duplicate batch result: ${artifact.batch.index}`);
+        seen.add(artifact.batch.index);
+        recorded = recordBatch(recorded, {
+            headSha: artifact.headSha,
+            policyFingerprint: artifact.policyFingerprint,
+            index: artifact.batch.index,
+            findings: artifact.review.findings.length,
+        });
+    }
+    const decision = publicationDecision(recorded);
+    if (!decision.publish)
+        throw new Error(decision.reason);
+    const reviews = [...artifacts].sort((a, b) => a.batch.index - b.batch.index).map((artifact) => artifact.review);
+    const findings = reviews.flatMap((review) => review.findings);
+    const dropped = reviews.flatMap((review) => review.dropped);
+    const execution = reviews.reduce((total, review) => ({
+        attempted: total.attempted + review.execution.attempted,
+        succeeded: total.succeeded + review.execution.succeeded,
+        failed: total.failed + review.execution.failed,
+    }), { attempted: 0, succeeded: 0, failed: 0 });
+    const evidence = reviews.reduce((total, review) => ({
+        profile: total.profile,
+        providerCalls: total.providerCalls + review.evidence.providerCalls,
+        failedProviderCalls: total.failedProviderCalls + review.evidence.failedProviderCalls,
+        skippedProviderCalls: total.skippedProviderCalls + review.evidence.skippedProviderCalls,
+        elapsedMs: total.elapsedMs + review.evidence.elapsedMs,
+        deadlineMs: total.deadlineMs + review.evidence.deadlineMs,
+        deadlineExceeded: total.deadlineExceeded || review.evidence.deadlineExceeded,
+        circuitState: total.circuitState === 'open' || review.evidence.circuitState === 'open' ? 'open' : total.circuitState,
+    }), { profile: reviews[0].evidence.profile, providerCalls: 0, failedProviderCalls: 0, skippedProviderCalls: 0, elapsedMs: 0, deadlineMs: 0, deadlineExceeded: false, circuitState: 'closed' });
+    const severe = findings.some((finding) => finding.severity === 'blocker' || finding.severity === 'high');
+    return {
+        verdict: !findings.length ? 'APPROVE' : severe ? 'REQUEST CHANGES' : 'COMMENT',
+        blocking: reviews.some((review) => review.blocking),
+        incomplete: false,
+        findings,
+        dropped,
+        execution,
+        evidence,
+        summary: `Complete batch review: ${reviews.length} batch(es), ${state.batches.reduce((total, batch) => total + batch.files.length, 0)} file(s), ${findings.length} verified finding(s).`,
+    };
+}
+export function consolidateToArtifact(state, artifacts) {
+    return {
+        version: 1,
+        repository: state.repository,
+        pullNumber: state.pullNumber,
+        headSha: state.headSha,
+        policyFingerprint: state.policyFingerprint,
+        review: consolidateBatchArtifacts(state, artifacts),
+    };
+}
+//# sourceMappingURL=batch-coverage.js.map

package/dist/src/batch-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-coverage.js","sourceRoot":"","sources":["../../src/batch-coverage.ts"],"names":[],"mappings":"AAgCA,MAAM,UAAU,wBAAwB,CAAC,KAAwB,EAAE,SAAiB;IAClF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC3G,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AACjK,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA+G;IACjJ,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAC5J,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AACtQ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAyB,EAAE,KAAsF;IAC3I,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACzI,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAA;IACtE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACjI,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAA;AACvJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC7F,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAA;AAC7H,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACjI,IAAI,QAAQ,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,sBAAsB,EAAE,CAAA;IACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAA;AAC1E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB,EAAE,QAA6B;IACpF,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9K,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvI,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACpF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IACxJ,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACxP,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,CAAC,KAAK,CAAC,KAAK,iCAAiC,CAAC,CAAA;IACjF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAyB,EAAE,SAAyC;IAC5G,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QACtG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC9B,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK;YAC3B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;SAC1C,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/G,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS;QACvD,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM;KAC/C,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa;QAClE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB;QACpF,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC,oBAAoB;QACvF,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS;QACtD,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU;QACzD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB;QAC5E,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY;KACrH,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC/L,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAA;IACxG,OAAO;QACL,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QAC9E,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnD,UAAU,EAAE,KAAK;QACjB,QAAQ;QACR,OAAO;QACP,SAAS;QACT,QAAQ;QACR,OAAO,EAAE,0BAA0B,OAAO,CAAC,MAAM,eAAe,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,aAAa,QAAQ,CAAC,MAAM,uBAAuB;KACzL,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAyB,EAAE,SAAyC;IACxG,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,yBAAyB,CAAC,KAAK,EAAE,SAAS,CAAC;KACpD,CAAA;AACH,CAAC"}

package/dist/src/claude-code-adapter.js

@@ -1,35 +1,16 @@
-/**
- * AgentsKit adapter backed by the local `claude -p` (Claude Code headless) — no
- * ANTHROPIC_API_KEY needed; uses your logged-in CLI. `claude -p` is an agent, not a
- * raw model API, so this adapter is tuned for the promote pipeline's pattern: each
- * stage offers exactly ONE tool, so we tell Claude to emit only that tool's JSON
- * args and synthesize the `tool_call` stream chunk the runtime expects.
- */
-import { execFile } from "node:child_process";
+import { runLocalCli } from "./local-cli-process.js";
 /**
  * Run `claude` and capture stdout. Crucially we CLOSE the child's stdin: in a
  * non-TTY env (CI / self-hosted runner) `claude -p` otherwise blocks waiting for
  * stdin ("no stdin data received in 3s …") and fails. Locally stdin is a TTY so it
  * never showed. stderr is attached to the error for diagnosis.
  */
-function runClaude(args) {
-    return new Promise((resolve, reject) => {
-        // Run from HOME (a trusted dir): the runner's checkout dir is untrusted and can
-        // make claude exit without output (folder-trust). The file under review is in the
-        // prompt, not read from cwd, so cwd is irrelevant to the result.
-        const child = execFile("claude", args, { maxBuffer: 20 * 1024 * 1024, cwd: process.env.HOME }, (err, stdout, stderr) => {
-            if (err) {
-                const e = err;
-                e.stderr = stderr;
-                e.stdout = stdout;
-                reject(err);
-            }
-            else {
-                resolve(stdout);
-            }
-        });
-        child.stdin?.end();
-    });
+async function runClaude(args, signal, mode, worker, oauthToken) {
+    // Run from HOME (a trusted dir): the runner's checkout dir is untrusted and can
+    // make claude exit without output (folder-trust). The file under review is in the
+    // prompt, not read from cwd, so cwd is irrelevant to the result.
+    const { stdout } = await runLocalCli("claude", args, { signal, mode, providerCredential: oauthToken ? { name: "CLAUDE_CODE_OAUTH_TOKEN", value: oauthToken } : undefined, ...worker });
+    return stdout;
 }
 /**
  * Pull the JSON object out of a model reply: first `{` to last `}` over the whole
@@ -47,42 +28,45 @@ function extractJson(text) {
 export function claudeCode(opts = {}) {
     return {
         capabilities: { streaming: false, tools: true, structuredOutput: true },
-        createSource: (request) => ({
-            stream: async function* () {
-                try {
-                    const system = request.messages.find((m) => m.role === "system")?.content ?? "";
-                    const convo = request.messages
-                        .filter((m) => m.role !== "system")
-                        .map((m) => `${m.role.toUpperCase()}: ${m.content}`)
-                        .join("\n\n");
-                    const tools = request.context?.tools ?? [];
-                    let prompt = `${system}\n\n${convo}`;
-                    if (tools.length === 1) {
-                        const t = tools[0];
-                        prompt += `\n\nReturn ONLY a JSON object that is the argument to the "${t.name}" tool, matching this JSON Schema exactly. No prose, no code fences:\n${JSON.stringify(t.schema)}`;
-                    }
-                    const args = ["-p", prompt];
-                    if (opts.model)
-                        args.push("--model", opts.model);
-                    const out = (await runClaude(args)).trim();
-                    if (tools.length === 1) {
-                        yield { type: "tool_call", toolCall: { id: `tc-${Date.now()}`, name: tools[0].name, args: extractJson(out) } };
+        createSource: (request) => {
+            const controller = new AbortController();
+            return {
+                stream: async function* () {
+                    try {
+                        const system = request.messages.find((m) => m.role === "system")?.content ?? "";
+                        const convo = request.messages
+                            .filter((m) => m.role !== "system")
+                            .map((m) => `${m.role.toUpperCase()}: ${m.content}`)
+                            .join("\n\n");
+                        const tools = request.context?.tools ?? [];
+                        let prompt = `${system}\n\n${convo}`;
+                        if (tools.length === 1) {
+                            const t = tools[0];
+                            prompt += `\n\nReturn ONLY a JSON object that is the argument to the "${t.name}" tool, matching this JSON Schema exactly. No prose, no code fences:\n${JSON.stringify(t.schema)}`;
+                        }
+                        const args = ["-p", prompt];
+                        if (opts.model)
+                            args.push("--model", opts.model);
+                        const out = (await runClaude(args, controller.signal, opts.mode, opts.worker, opts.oauthToken)).trim();
+                        if (tools.length === 1) {
+                            yield { type: "tool_call", toolCall: { id: `tc-${Date.now()}`, name: tools[0].name, args: extractJson(out) } };
+                        }
+                        else {
+                            yield { type: "text", content: out };
+                        }
+                        yield { type: "done" };
                     }
-                    else {
-                        yield { type: "text", content: out };
+                    catch (err) {
+                        // Surface claude's own stderr/stdout (e.g. "Not logged in · Please run
+                        // /login"). The default execFile message embeds the whole prompt — drop it.
+                        const e = err;
+                        const detail = e.code === "ETIMEDOUT" ? e.message : [e.stderr, e.stdout].filter(Boolean).join(" ").trim();
+                        yield { type: "error", content: `claude -p failed${detail ? `: ${detail.slice(0, 400)}` : ` (no output): ${(e.message ?? "").split("\n")[0]}`}` };
                     }
-                    yield { type: "done" };
-                }
-                catch (err) {
-                    // Surface claude's own stderr/stdout (e.g. "Not logged in · Please run
-                    // /login"). The default execFile message embeds the whole prompt — drop it.
-                    const e = err;
-                    const detail = [e.stderr, e.stdout].filter(Boolean).join(" ").trim();
-                    yield { type: "error", content: `claude -p failed${detail ? `: ${detail.slice(0, 400)}` : ` (no output): ${(e.message ?? "").split("\n")[0]}`}` };
-                }
-            },
-            abort: () => { },
-        }),
+                },
+                abort: () => controller.abort(),
+            };
+        },
     };
 }
 //# sourceMappingURL=claude-code-adapter.js.map

package/dist/src/claude-code-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-adapter.js","sourceRoot":"","sources":["../../src/claude-code-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAc;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,gFAAgF;QAChF,kFAAkF;QAClF,iEAAiE;QACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACrH,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,GAA2C,CAAC;gBACtD,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;gBAClB,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;gBAClB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA2B,EAAE;IACtD,OAAO;QACL,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACvE,YAAY,EAAE,CAAC,OAAuB,EAAgB,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,SAAS,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;oBAChF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ;yBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;yBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;yBACnD,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;oBAE3C,IAAI,MAAM,GAAG,GAAG,MAAM,OAAO,KAAK,EAAE,CAAC;oBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;wBACpB,MAAM,IAAI,8DAA8D,CAAC,CAAC,IAAI,yEAAyE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACpL,CAAC;oBAED,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC5B,IAAI,IAAI,CAAC,KAAK;wBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjD,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAE3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACvB,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBAClH,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;oBACvC,CAAC;oBACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACzB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,uEAAuE;oBACvE,4EAA4E;oBAC5E,MAAM,CAAC,GAAG,GAA6D,CAAC;oBACxE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBACrE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;gBACpJ,CAAC;YACH,CAAC;YACD,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;SAChB,CAAC;KACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"claude-code-adapter.js","sourceRoot":"","sources":["../../src/claude-code-adapter.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,WAAW,EAAqB,MAAM,wBAAwB,CAAC;AAExE;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,MAAoB,EAAE,IAAmB,EAAE,MAAwD,EAAE,UAAmB;IAC/J,gFAAgF;IAChF,kFAAkF;IAClF,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACvL,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA+H,EAAE;IAC1J,OAAO;QACL,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACvE,YAAY,EAAE,CAAC,OAAuB,EAAgB,EAAE;YACtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,OAAO;gBACP,MAAM,EAAE,KAAK,SAAS,CAAC;oBACrB,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;wBAChF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ;6BAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;6BAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;6BACnD,IAAI,CAAC,MAAM,CAAC,CAAC;wBAChB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;wBAE3C,IAAI,MAAM,GAAG,GAAG,MAAM,OAAO,KAAK,EAAE,CAAC;wBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;4BACpB,MAAM,IAAI,8DAA8D,CAAC,CAAC,IAAI,yEAAyE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;wBACpL,CAAC;wBAED,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAC5B,IAAI,IAAI,CAAC,KAAK;4BAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBACjD,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;wBAEvG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACvB,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;wBAClH,CAAC;6BAAM,CAAC;4BACN,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;wBACvC,CAAC;wBACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACzB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,uEAAuE;wBACvE,4EAA4E;wBAC5E,MAAM,CAAC,GAAG,GAA4E,CAAC;wBACvF,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC1G,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;oBACpJ,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;aAC9B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}