@ahpd/agent-claude 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Luiz Fernando Softov <lfs@softov.dev>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,56 @@
+# @ahpd/agent-claude
+
+The Claude backend for [`@ahpd/server`](https://www.npmjs.com/package/@ahpd/server).
+
+## Install
+
+```bash
+pnpm add @ahpd/agent-claude @ahpd/server @microsoft/agent-host-protocol
+```
+
+## Use
+
+```ts
+import { createHost, listen } from '@ahpd/server';
+import { claude } from '@ahpd/agent-claude';
+
+const path = process.cwd();
+const host = createHost({ path, agents: [claude({ paths: [path] })] });
+await listen({ port: 9187 }, (peer) => host.accept(peer));
+```
+
+`createHost` takes a list of agents, so this can run alongside other backends.
+
+## What it does
+
+It starts the [Claude agent SDK](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk), converts its message stream into AHP state actions, and reads Claude's transcript files.
+
+| export | |
+| --- | --- |
+| `claude(options)` | the `Agent` to pass to `createHost` |
+| `createSession(options)` | one live session |
+| `catalogue(dir)` | Claude's sessions in a directory, as rows a host can list |
+| `turnsOf(sessionId, dir)` | a past session read from its transcript, as turns |
+| `probe(options)` | runs a CLI at startup to read the available models and commands |
+
+## Supported
+
+Turns and streaming, tool calls and approvals, questions from the agent, model and effort selection, permission modes, MCP servers and OAuth sign-in, skills and slash commands, multiple chats per session, forking a chat from a turn, truncating a chat back to a turn, session titles, token usage, and context compaction.
+
+Sessions the host is not running are read from Claude's transcripts, so clients can browse and read them without starting a process. The agent starts when a turn is sent.
+
+## Credentials
+
+Sessions use whatever the Claude CLI is signed in with. A client can push a token instead. Pushed tokens are held per connection and are not used for other clients' sessions.
+
+## Documentation
+
+| | |
+| --- | --- |
+| [AGENT.md](https://github.com/softov/ahpd/blob/main/docs/AGENT.md) | The `Agent` and `Session` contracts this implements |
+| [AHP.md](https://github.com/softov/ahpd/blob/main/docs/AHP.md) | Which actions are served, which are refused, and why |
+
+## License
+
+MIT © Softov
+

package/dist/catalog.d.ts

@@ -0,0 +1,19 @@
+import type { Listed } from '@ahpd/server';
+/**
+ * Claude's own sessions, as rows a host can list.
+ *
+ * Renames the SDK's session listing into `Listed`. The SDK is the authority on
+ * which sessions exist; this module only maps the fields - which is why it is
+ * here and not beside the URI helpers in `@ahpd/server`: a host serving some
+ * other harness has a different answer to the same question, and no reason to
+ * load this one to find that out.
+ */
+/**
+ * What this backend is a catalogue *of*.
+ *
+ * `dir`, not `cwd` - the option that scopes a listing to one project is spelled
+ * `dir`, and an unrecognised key is ignored rather than refused, so the wrong
+ * spelling answers with every session on the machine and looks like it worked.
+ */
+export declare function catalogue(dir: string): Promise<Listed[]>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAS9D"}

package/dist/catalog.js

@@ -0,0 +1,28 @@
+import { listSessions } from '@anthropic-ai/claude-agent-sdk';
+/**
+ * Claude's own sessions, as rows a host can list.
+ *
+ * Renames the SDK's session listing into `Listed`. The SDK is the authority on
+ * which sessions exist; this module only maps the fields - which is why it is
+ * here and not beside the URI helpers in `@ahpd/server`: a host serving some
+ * other harness has a different answer to the same question, and no reason to
+ * load this one to find that out.
+ */
+/**
+ * What this backend is a catalogue *of*.
+ *
+ * `dir`, not `cwd` - the option that scopes a listing to one project is spelled
+ * `dir`, and an unrecognised key is ignored rather than refused, so the wrong
+ * spelling answers with every session on the machine and looks like it worked.
+ */
+export async function catalogue(dir) {
+    const found = await listSessions({ dir });
+    return found.map((info) => ({
+        id: info.sessionId,
+        title: info.customTitle ?? info.summary ?? info.firstPrompt ?? 'Session',
+        createdAt: new Date(info.createdAt ?? info.lastModified).toISOString(),
+        modifiedAt: new Date(info.lastModified).toISOString(),
+        workingDirectories: [`file://${info.cwd ?? dir}`],
+    }));
+}
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAG9D;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,EAAE,IAAI,CAAC,SAAS;QAClB,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,IAAI,SAAS;QACxE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;QACtE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;QACrD,kBAAkB,EAAE,CAAC,UAAU,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;KAClD,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/claude.d.ts

@@ -0,0 +1,28 @@
+import type { Agent } from '@ahpd/server';
+/**
+ * Claude Code, as an agent backend.
+ *
+ * Everything the host would otherwise have to know about one particular
+ * harness: which settings it takes, where its past sessions are kept, and how
+ * to start one. The host asks through `Agent` and imports none of this.
+ */
+/** How to build the Claude backend. */
+export interface ClaudeOptions {
+    /**
+     * The directories it will work in, and the ones it lists.
+     *
+     * The first is where a session goes when the client names none. A client
+     * may name any of the others and nothing else: a host that ran the agent
+     * wherever it was told is one anybody who can reach the port can point at
+     * any directory on the machine.
+     *
+     * This is also the catalogue's scope, so a directory left out is one whose
+     * sessions are neither listed nor openable.
+     */
+    paths: string[];
+    /** The id clients name. `claude` unless something else already is. */
+    provider?: string;
+}
+/** Claude Code on one or more directories, ready to be handed to `createHost`. */
+export declare function claude(options: ClaudeOptions): Agent;
+//# sourceMappingURL=claude.d.ts.map

package/dist/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../src/claude.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAc,MAAM,cAAc,CAAC;AAYtD;;;;;;GAMG;AAEH,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;OAUG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,kFAAkF;AAClF,wBAAgB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,KAAK,CAmTpD"}

package/dist/claude.js

@@ -0,0 +1,311 @@
+import { probe } from './probe.js';
+import { serversFor } from './mcp.js';
+import { createSession, EFFORT_LABELS, EFFORTS } from './session.js';
+import { turnsOf } from './transcript.js';
+import { catalogue } from './catalog.js';
+import { within } from '@ahpd/server';
+/**
+ * The resource a token for this backend is for.
+ *
+ * Named once, because it is the identifier a client must send back verbatim:
+ * the protocol says `authenticate`'s `resource` MUST match one the server
+ * advertised, so this string appearing twice with a typo between them is a
+ * token nothing will accept.
+ */
+const ANTHROPIC = 'https://api.anthropic.com';
+/** Claude Code on one or more directories, ready to be handed to `createHost`. */
+export function claude(options) {
+    const dirs = options.paths;
+    const dir = dirs[0];
+    if (dir === undefined)
+        throw new Error('claude() needs at least one directory to work in.');
+    /**
+     * Which directory a session goes in.
+     *
+     * Named, or the first. Anything else is refused rather than quietly
+     * replaced - a directory accepted and then ignored is a session running
+     * somewhere nobody asked for, with nothing on screen to say so.
+     */
+    const workingDirectory = (asked) => {
+        if (asked === undefined)
+            return dir;
+        /*
+         * Under a served directory, not equal to one.
+         *
+         * This compared for equality, so a host told to serve `/home/you` served
+         * that one directory and refused every project inside it - which is the
+         * only kind of directory anybody opens. An editor asks for its workspace
+         * folder, and that is never the path somebody passed to `--path`.
+         */
+        if (!dirs.some((served) => within(served, asked))) {
+            throw new Error(`This host does not serve ${asked}. It serves ${dirs.join(', ')}.`);
+        }
+        // What was asked for, not the root it sits under: the session runs where
+        // the client said.
+        return asked;
+    };
+    /*
+     * What the probe learned about output styles.
+     *
+     * The schema is otherwise fixed, but this one property's choices belong to
+     * the harness rather than to the protocol - a person's own styles live in
+     * their settings - so it is learned once at startup, the way models are,
+     * and the control is simply absent until it is known.
+     */
+    let styles = [];
+    /**
+     * Whether the models this harness offers carry effort controls of their own.
+     *
+     * A model's `configSchema` and the session-wide `effortLevel` reach the same
+     * setting, and a client draws both - so a person is shown two effort
+     * controls, on two different values, for one thing. The model's is the
+     * truthful one: it lists what that model actually supports, where the
+     * session-wide key lists all five whatever is chosen. So this backend offers
+     * the session key only while there is nothing better.
+     */
+    let perModelEffort = false;
+    let style;
+    /**
+     * What a session can be told to do differently.
+     *
+     * One schema, used by `resolveSessionConfig` (before a session exists) and
+     * by every session's own state (after one does). Two copies would drift, and
+     * the composer would offer one set of controls on the new-session screen and
+     * a different set the moment a session opened.
+     *
+     * `sessionMutable` is what each row turns on: the permission mode, the model
+     * and the effort level are things the CLI takes on a *running* session.
+     * `thinking` is fixed when the query is built, so offering it live would be
+     * a switch that flips back.
+     */
+    const schema = () => ({
+        // A JSON Schema object, and it has to say so: `type` is required, and a
+        // schema without it matches nothing a client validates.
+        type: 'object',
+        properties: {
+            /*
+             * One axis, and the CLI's own five values.
+             *
+             * The protocol's config schema is generic and a backend advertises what
+             * it has - VS Code's own hosts advertise different properties for
+             * Copilot and for Claude, and a client draws whatever it is given. Its
+             * Claude host says why in as many words: it collapses the platform's
+             * `autoApprove` x `mode` two-axis surface onto one `permissionMode`
+             * matching the SDK's enum, and *omits* `autoApprove`, `mode`,
+             * `isolation` and `branch` deliberately, because the pickers key off
+             * property names and omitting them suppresses a mode and branch UI that
+             * would not mean anything here.
+             *
+             * The wording is that host's too, so one session reads the same however
+             * it is opened. `auto` was missing here and is a real mode the CLI
+             * takes: the agent deciding, per call, whether it needs to ask.
+             */
+            permissionMode: {
+                scope: 'session',
+                type: 'string',
+                title: 'Approvals',
+                description: 'How the agent handles tool approvals.',
+                enum: ['default', 'acceptEdits', 'plan', 'auto', 'bypassPermissions'],
+                enumLabels: [
+                    'Ask Before Edits',
+                    'Edit Automatically',
+                    'Plan Mode',
+                    'Auto Mode',
+                    'Bypass Permissions',
+                ],
+                enumDescriptions: [
+                    'Asks before editing files.',
+                    'Edits files without asking, and asks before using other tools.',
+                    'Creates a plan before making changes.',
+                    'Decides whether to ask for each tool operation.',
+                    'Runs all tools without asking.',
+                ],
+                default: 'default',
+                sessionMutable: true,
+            },
+            /*
+             * The model is not a config property.
+             *
+             * A session has no model; each message has one. The choices are carried
+             * on the agent (`RootState.agents[].models`) and the choice on the turn.
+             * `session/configChanged` with a `model` key is still honoured, but the
+             * model is not advertised here as a control of its own.
+             */
+            ...(perModelEffort ? {} : {
+                effortLevel: {
+                    scope: 'chat',
+                    type: 'string',
+                    title: 'Effort',
+                    description: 'How hard it thinks before answering.',
+                    enum: [...EFFORTS],
+                    enumLabels: EFFORTS.map((one) => EFFORT_LABELS[one]),
+                    default: 'high',
+                    sessionMutable: true,
+                },
+            }),
+            // Learned, so absent until the probe has answered and absent for good
+            // on a harness that has no styles.
+            ...(styles.length > 0
+                ? {
+                    outputStyle: {
+                        scope: 'session',
+                        type: 'string',
+                        title: 'Output style',
+                        description: 'The voice it answers in.',
+                        enum: styles,
+                        enumLabels: styles.map((name) => name.charAt(0).toUpperCase() + name.slice(1)),
+                        ...(style !== undefined ? { default: style } : {}),
+                        sessionMutable: true,
+                    },
+                }
+                : {}),
+            thinking: {
+                type: 'string',
+                title: 'Thinking',
+                description: 'Fixed when the session is created.',
+                enum: ['adaptive', 'disabled'],
+                enumLabels: ['Adaptive', 'Off'],
+                enumDescriptions: ['The agent decides when to think', 'No extended thinking'],
+                default: 'adaptive',
+                sessionMutable: false,
+            },
+            /*
+             * Per-tool allow and deny, which is the slope the mode above is a cliff.
+             *
+             * A platform key rather than one of this backend's invention: it is what
+             * the reference client's permission picker writes when somebody approves
+             * a tool "in this session", and its own Claude host advertises it
+             * unchanged because the SDK takes `allowedTools` / `disallowedTools`
+             * natively. Without it the only way to stop being asked about the one
+             * command you trust is `bypassPermissions`, which stops asking about
+             * everything.
+             *
+             * An object, and the first config value here that is not a string. The
+             * protocol declares the bag `Record<string, unknown>`; this host used to
+             * declare it `Record<string, string>`, which is why nothing of this
+             * shape could be carried at all.
+             */
+            permissions: {
+                scope: 'session',
+                type: 'object',
+                title: 'Permissions',
+                description: 'Per-tool session permissions. Updated when a tool is approved for this session.',
+                properties: {
+                    allow: { type: 'array', title: 'Allowed tools', items: { type: 'string', title: 'Tool name' } },
+                    deny: { type: 'array', title: 'Denied tools', items: { type: 'string', title: 'Tool name' } },
+                },
+                default: { allow: [], deny: [] },
+                // Unlike `thinking`, this one really can move on a running session:
+                // the SDK takes the lists when the query is built, and `canUseTool`
+                // is where this host already sits between the agent and the person.
+                sessionMutable: true,
+            },
+        },
+    });
+    const defaults = () => ({
+        permissionMode: 'default',
+        // Beside its schema or not at all: a value with no property to draw it is
+        // a control a client cannot show and cannot change.
+        ...(perModelEffort ? {} : { effortLevel: 'high' }),
+        thinking: 'adaptive',
+        permissions: { allow: [], deny: [] },
+        ...(style !== undefined ? { outputStyle: style } : {}),
+    });
+    return {
+        provider: options.provider ?? 'claude',
+        displayName: 'Claude Code',
+        // Both, because the SDK resumes at a named prompt: `resumeSessionAt` with
+        // `forkSession` continues from a turn under a new id, and a side chat is
+        // an unresumed session handed what that turn said.
+        chats: { fork: true, sideChat: true },
+        // The SDK takes `additionalDirectories` at startup, so a session works in
+        // as many as it was given; the first is the process root and is fixed.
+        multipleDirectories: true,
+        description: `The Claude Agent SDK, on ${dirs.join(', ')}`,
+        schema,
+        defaults,
+        directories: () => [...dirs],
+        // The styles are kept as well as handed on: `schema()` is asked before any
+        // session exists, and it can only offer what has already been learned.
+        probe: async () => {
+            const offered = await probe(dir);
+            styles = offered.outputStyles ?? [];
+            style = offered.outputStyle;
+            perModelEffort = offered.models.some((model) => model.configSchema !== undefined);
+            return offered;
+        },
+        // Every directory it serves, as one list. A session is listed by the
+        // catalogue of the directory it ran in, and a host serving several has
+        // one catalogue.
+        list: async () => (await Promise.all(dirs.map((served) => catalogue(served)))).flat(),
+        // Whichever directory holds it. The transcript reader wants the one the
+        // session ran in, and only its own catalogue knows which that was.
+        transcript: async (id) => {
+            for (const served of dirs) {
+                const rows = await catalogue(served).catch(() => []);
+                if (rows.some((row) => row.id === id))
+                    return turnsOf(id, served);
+            }
+            return undefined;
+        },
+        /*
+         * The one resource this backend can be given a token for.
+         *
+         * `required: false`, and that is the honest declaration rather than the
+         * lenient one: this daemon runs as whoever started it and inherits their
+         * `claude login` or `ANTHROPIC_API_KEY`, so it works with nothing pushed
+         * at all. Saying `required: true` would refuse clients that would
+         * otherwise be perfectly able to open a session.
+         */
+        protectedResources: [{
+                resource: ANTHROPIC,
+                resource_name: 'Anthropic API',
+                authorization_servers: ['https://console.anthropic.com'],
+                required: false,
+            }],
+        create: (start) => createSession({
+            uri: start.uri,
+            chatUri: start.chatUri,
+            cwd: workingDirectory(start.workingDirectory),
+            /*
+             * The MCP servers, declared by this host rather than found by the CLI.
+             *
+             * The same files the CLI reads - `.mcp.json` beside the project and
+             * `mcpServers` in `~/.claude.json` - handed to the SDK so they are
+             * *its* servers. That is what makes a token a client signed in with
+             * applicable: `setMcpServers` re-declares only what the SDK was given.
+             */
+            mcpServers: serversFor([workingDirectory(start.workingDirectory), ...(start.additional ?? [])]),
+            // Each one checked the way the first is: a directory this host does not
+            // serve is not one an agent may be pointed at, however it arrived.
+            ...(start.additional && start.additional.length > 0
+                ? { additional: start.additional.map((one) => workingDirectory(one)) }
+                : {}),
+            // The host's own tools, offered to the model beside this backend's.
+            ...(start.tools && start.tools.length > 0 ? { tools: start.tools } : {}),
+            settings: start.settings,
+            schema: start.schema,
+            emit: start.emit,
+            ...(start.seedCustomizations ? { seedCustomizations: start.seedCustomizations } : {}),
+            ...(start.resume !== undefined ? { resume: start.resume } : {}),
+            ...(start.forkAt !== undefined ? { forkAt: start.forkAt } : {}),
+            ...(start.rewindAt !== undefined ? { rewindAt: start.rewindAt } : {}),
+            ...(start.context !== undefined ? { context: start.context } : {}),
+            ...(start.seed ? { seed: start.seed } : {}),
+            ...(start.onFileEdit ? { onFileEdit: start.onFileEdit } : {}),
+            ...(start.onHandshake ? { onHandshake: start.onHandshake } : {}),
+            /*
+             * A pushed token, as the variable the CLI reads.
+             *
+             * Which variable that is, is this file's business and not the host's:
+             * the host knows a token belongs to `https://api.anthropic.com` and
+             * stops there, which is what keeps `createHost` the protocol and
+             * nothing else.
+             */
+            ...(start.credentials?.[ANTHROPIC]
+                ? { env: { ANTHROPIC_API_KEY: start.credentials[ANTHROPIC] } }
+                : {}),
+        }),
+    };
+}
+//# sourceMappingURL=claude.js.map

package/dist/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../src/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,2BAA2B,CAAC;AA4B9C,kFAAkF;AAClF,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS;QACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAEvE;;;;;;OAMG;IACH,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAU,EAAE;QAClD,IAAI,KAAK,KAAK,SAAS;YACrB,OAAO,GAAG,CAAC;QACb;;;;;;;WAOG;QACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,eAAe,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnE,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,mBAAmB;QACnB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,IAAI,MAAM,GAAa,EAAE,CAAC;IAE1B;;;;;;;;;OASG;IACH,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,KAAyB,CAAC;IAE9B;;;;;;;;;;;;OAYG;IACH,MAAM,MAAM,GAAG,GAAQ,EAAE,CAAC,CAAC;QACzB,wEAAwE;QACxE,wDAAwD;QACxD,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV;;;;;;;;;;;;;;;;eAgBG;YACH,cAAc,EAAE;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC;gBACrE,UAAU,EAAE;oBACV,kBAAkB;oBAClB,oBAAoB;oBACpB,WAAW;oBACX,WAAW;oBACX,oBAAoB;iBACrB;gBACD,gBAAgB,EAAE;oBAChB,4BAA4B;oBAC5B,gEAAgE;oBAChE,uCAAuC;oBACvC,iDAAiD;oBACjD,gCAAgC;iBACjC;gBACD,OAAO,EAAE,SAAS;gBAClB,cAAc,EAAE,IAAI;aACrB;YACD;;;;;;;eAOG;YACH,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxB,WAAW,EAAE;oBACX,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,QAAQ;oBACf,WAAW,EAAE,sCAAsC;oBACnD,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC;oBAClB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;oBACpD,OAAO,EAAE,MAAM;oBACf,cAAc,EAAE,IAAI;iBACrB;aACF,CAAC;YACF,sEAAsE;YACtE,mCAAmC;YACnC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC;oBACE,WAAW,EAAE;wBACjB,KAAK,EAAE,SAAS;wBACV,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,cAAc;wBACrB,WAAW,EAAE,0BAA0B;wBACvC,IAAI,EAAE,MAAM;wBACZ,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC9E,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClD,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,oCAAoC;gBACjD,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;gBAC9B,UAAU,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;gBAC/B,gBAAgB,EAAE,CAAC,iCAAiC,EAAE,sBAAsB,CAAC;gBAC7E,OAAO,EAAE,UAAU;gBACnB,cAAc,EAAE,KAAK;aACtB;YACD;;;;;;;;;;;;;;;eAeG;YACH,WAAW,EAAE;gBACX,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,aAAa;gBACpB,WAAW,EAAE,iFAAiF;gBAC9F,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;oBAC/F,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;iBAC9F;gBACD,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;gBAChC,oEAAoE;gBACpE,oEAAoE;gBACpE,oEAAoE;gBACpE,cAAc,EAAE,IAAI;aACrB;SACF;KACF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAA4B,EAAE,CAAC,CAAC;QAC/C,cAAc,EAAE,SAAS;QACzB,0EAA0E;QAC1E,oDAAoD;QACpD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAClD,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACpC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ;QACtC,WAAW,EAAE,aAAa;QAC1B,0EAA0E;QAC1E,yEAAyE;QACzE,mDAAmD;QACnD,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrC,0EAA0E;QAC1E,uEAAuE;QACvE,mBAAmB,EAAE,IAAI;QACzB,WAAW,EAAE,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1D,MAAM;QACN,QAAQ;QAER,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAE5B,2EAA2E;QAC3E,uEAAuE;QACvE,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YACpC,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;YAC5B,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;YAClF,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,qEAAqE;QACrE,uEAAuE;QACvE,iBAAiB;QACjB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAErF,wEAAwE;QACxE,mEAAmE;QACnE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvB,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACrD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;oBACnC,OAAO,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED;;;;;;;;WAQG;QACH,kBAAkB,EAAE,CAAC;gBACnB,QAAQ,EAAE,SAAS;gBACnB,aAAa,EAAE,eAAe;gBAC9B,qBAAqB,EAAE,CAAC,+BAA+B,CAAC;gBACxD,QAAQ,EAAE,KAAK;aAChB,CAAC;QAEF,MAAM,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC,aAAa,CAAC;YACtC,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC7C;;;;;;;eAOG;YACH,UAAU,EAAE,UAAU,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/F,wEAAwE;YACxE,mEAAmE;YACnE,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACjD,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,oEAAoE;YACpE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE;;;;;;;eAOG;YACH,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC;gBAChC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The Claude backend, as an `Agent` this host can be handed.
+ *
+ * One implementation of the contract `@ahpd/server` declares, and the only
+ * thing in either package that knows what the Claude harness is: it starts the
+ * agent SDK, translates its message stream into the state actions the protocol
+ * describes, and reads a transcript somebody else's session left on disk.
+ *
+ * A host that wants a different harness registers a different `Agent` and
+ * never loads this. A host that wants both registers both - `createHost` takes
+ * a list, and cannot tell one from another.
+ */
+export { catalogue } from './catalog.js';
+export { claude } from './claude.js';
+export type { ClaudeOptions } from './claude.js';
+export { createSession, EFFORTS, EFFORT_LABELS } from './session.js';
+export type { Published } from './session.js';
+export { probe } from './probe.js';
+export { turnsOf } from './transcript.js';
+export { protectedResource, urlOf } from './mcp.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * The Claude backend, as an `Agent` this host can be handed.
+ *
+ * One implementation of the contract `@ahpd/server` declares, and the only
+ * thing in either package that knows what the Claude harness is: it starts the
+ * agent SDK, translates its message stream into the state actions the protocol
+ * describes, and reads a transcript somebody else's session left on disk.
+ *
+ * A host that wants a different harness registers a different `Agent` and
+ * never loads this. A host that wants both registers both - `createHost` takes
+ * a list, and cannot tell one from another.
+ */
+export { catalogue } from './catalog.js';
+export { claude } from './claude.js';
+export { createSession, EFFORTS, EFFORT_LABELS } from './session.js';
+export { probe } from './probe.js';
+export { turnsOf } from './transcript.js';
+export { protectedResource, urlOf } from './mcp.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,31 @@
+/** The MCP servers a session runs with, read from the files the CLI reads. */
+import type { Bag } from '@ahpd/server';
+/**
+ * Every MCP server configured for a directory, by name.
+ *
+ * The CLI finds these itself and this host normally leaves it to. It reads
+ * them here for one reason: a server the *SDK* was given is one
+ * `setMcpServers` can re-declare, and a server that came from a settings file
+ * is not - so a token a client signs in with has nowhere to go unless this
+ * host owns the declaration. The files are the CLI's own: `.mcp.json` beside
+ * the project, and `mcpServers` in `~/.claude.json`.
+ *
+ * A file that is missing, unreadable or not JSON contributes nothing. This is
+ * a best effort by design: the CLI still reads the same files, and a server
+ * this misses is a server that works exactly as it did before.
+ */
+export declare function serversFor(directories: string[]): Record<string, Bag>;
+/** The URL an http or sse server lives at, or nothing for a stdio one. */
+export declare const urlOf: (config: unknown) => string | undefined;
+/**
+ * What an MCP server says about signing into it, per RFC 9728.
+ *
+ * `<url>/.well-known/oauth-protected-resource`, which is where an OAuth
+ * protected resource publishes its metadata and where a client looks to find
+ * the authorization server. Answers the discovered document, or a bare one
+ * naming the server itself: the URL *is* the canonical resource identifier,
+ * so an incomplete answer is still a true one - what a client loses is the
+ * one-click sign-in, not the knowledge that it needs to sign in.
+ */
+export declare function protectedResource(url: string, name: string, ms?: number): Promise<Bag>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAK9E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAExC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAsBrE;AAED,0EAA0E;AAC1E,eAAO,MAAM,KAAK,GAAI,QAAQ,OAAO,KAAG,MAAM,GAAG,SAMhD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAU5F"}