@clanker-cleanroom/claude 0.2.5

package/lib/index.cjs

@@ -0,0 +1,28 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_binding = require("./binding-C2kSQy-B.cjs");
+let clanker_cleanroom = require("clanker-cleanroom");
+let node_path = require("node:path");
+let node_url = require("node:url");
+//#region src/agent.ts
+const claudeAgent = clanker_cleanroom.Agent.fromBinding(require_binding.claudeBinding);
+//#endregion
+//#region src/package-root.ts
+/** Absolute path to this package root (parent of `src/` or `lib/`). */
+const PACKAGE_ROOT = (0, node_url.fileURLToPath)(new URL("..", require("url").pathToFileURL(__filename).href));
+/** Folder of `*.Dockerfile` files for this agent. */
+const DOCKER_DIR = (0, node_path.join)(PACKAGE_ROOT, "docker");
+//#endregion
+exports.CLAUDE_API_KEY_ENV = require_binding.CLAUDE_API_KEY_ENV;
+exports.CLAUDE_CONTAINER_CREDENTIALS_PATH = require_binding.CLAUDE_CONTAINER_CREDENTIALS_PATH;
+exports.CLAUDE_IMAGE = require_binding.CLAUDE_IMAGE;
+exports.CLAUDE_OAUTH_TOKEN_ENV = require_binding.CLAUDE_OAUTH_TOKEN_ENV;
+exports.DOCKER_DIR = DOCKER_DIR;
+exports.PACKAGE_ROOT = PACKAGE_ROOT;
+exports.adaptClaudeEvents = require_binding.adaptClaudeEvents;
+exports.claudeAgent = claudeAgent;
+exports.claudeBinding = require_binding.claudeBinding;
+exports.credentialsEnv = require_binding.credentialsEnv;
+exports.defaultClaudeHostCredentialsFile = require_binding.defaultClaudeHostCredentialsFile;
+exports.resolveClaudeCredentials = require_binding.resolveClaudeCredentials;
+
+//# sourceMappingURL=index.cjs.map

package/lib/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["Agent","claudeBinding","fileURLToPath","join"],"sources":["../src/agent.ts","../src/package-root.ts"],"sourcesContent":["import { Agent } from \"clanker-cleanroom\";\n\nimport { claudeBinding } from \"./binding.js\";\n\nexport const claudeAgent = Agent.fromBinding(claudeBinding);\n","import { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/** Absolute path to this package root (parent of `src/` or `lib/`). */\nexport const PACKAGE_ROOT = fileURLToPath(new URL(\"..\", import.meta.url));\n\n/** Folder of `*.Dockerfile` files for this agent. */\nexport const DOCKER_DIR = join(PACKAGE_ROOT, \"docker\");\n"],"mappings":";;;;;;AAIA,MAAa,cAAcA,kBAAAA,MAAM,YAAYC,gBAAAA,aAAa;;;;ACA1D,MAAa,gBAAA,GAAeC,SAAAA,cAAAA,CAAc,IAAI,IAAI,MAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAqB,CAAC;;AAGxE,MAAa,cAAA,GAAaC,UAAAA,KAAAA,CAAK,cAAc,QAAQ"}

package/lib/index.d.cts

@@ -0,0 +1,52 @@
+import { Agent, AgentBinding, TrajectoryEvent } from "clanker-cleanroom";
+//#region src/constants.d.ts
+declare const CLAUDE_IMAGE = "clanker-cleanroom/claude";
+declare const CLAUDE_CONTAINER_CREDENTIALS_PATH = "/home/agent/.claude/.credentials.json";
+/** Long-lived OAuth token from `claude setup-token` (Claude subscription). */
+declare const CLAUDE_OAUTH_TOKEN_ENV = "CLAUDE_CODE_OAUTH_TOKEN";
+/** Anthropic API key (pay-as-you-go). */
+declare const CLAUDE_API_KEY_ENV = "ANTHROPIC_API_KEY";
+/** Linux hosts persist OAuth credentials here; macOS uses the Keychain instead. */
+declare const defaultClaudeHostCredentialsFile: (home: string) => string;
+//#endregion
+//#region src/binding.d.ts
+declare const claudeBinding: AgentBinding;
+//#endregion
+//#region src/credentials.d.ts
+/**
+ * How Claude Code authenticates inside the container. Env-backed kinds are forwarded
+ * to `docker run` by name (never on argv); the file kind is bind-mounted read-only.
+ * See `constants.ts` for which host setups produce each.
+ */
+type ClaudeCredentials = {
+  kind: "oauth-token";
+  token: string;
+} | {
+  kind: "api-key";
+  apiKey: string;
+} | {
+  kind: "credentials-file";
+  file: string;
+};
+/** Env OAuth token, then env API key, then a readable host credentials file. */
+declare function resolveClaudeCredentials(options?: {
+  env?: NodeJS.ProcessEnv;
+  home?: string;
+}): Promise<ClaudeCredentials>;
+/** Secret values for the docker CLI process, keyed by env names forwarded via envPassthrough. */
+declare function credentialsEnv(credentials: ClaudeCredentials): Record<string, string>;
+//#endregion
+//#region src/agent.d.ts
+declare const claudeAgent: Agent;
+//#endregion
+//#region src/trajectory.d.ts
+declare function adaptClaudeEvents(rawEvents: readonly unknown[]): TrajectoryEvent[];
+//#endregion
+//#region src/package-root.d.ts
+/** Absolute path to this package root (parent of `src/` or `lib/`). */
+declare const PACKAGE_ROOT: string;
+/** Folder of `*.Dockerfile` files for this agent. */
+declare const DOCKER_DIR: string;
+//#endregion
+export { CLAUDE_API_KEY_ENV, CLAUDE_CONTAINER_CREDENTIALS_PATH, CLAUDE_IMAGE, CLAUDE_OAUTH_TOKEN_ENV, type ClaudeCredentials, DOCKER_DIR, PACKAGE_ROOT, adaptClaudeEvents, claudeAgent, claudeBinding, credentialsEnv, defaultClaudeHostCredentialsFile, resolveClaudeCredentials };
+//# sourceMappingURL=index.d.cts.map

package/lib/index.d.mts

@@ -0,0 +1,52 @@
+import { Agent, AgentBinding, TrajectoryEvent } from "clanker-cleanroom";
+//#region src/constants.d.ts
+declare const CLAUDE_IMAGE = "clanker-cleanroom/claude";
+declare const CLAUDE_CONTAINER_CREDENTIALS_PATH = "/home/agent/.claude/.credentials.json";
+/** Long-lived OAuth token from `claude setup-token` (Claude subscription). */
+declare const CLAUDE_OAUTH_TOKEN_ENV = "CLAUDE_CODE_OAUTH_TOKEN";
+/** Anthropic API key (pay-as-you-go). */
+declare const CLAUDE_API_KEY_ENV = "ANTHROPIC_API_KEY";
+/** Linux hosts persist OAuth credentials here; macOS uses the Keychain instead. */
+declare const defaultClaudeHostCredentialsFile: (home: string) => string;
+//#endregion
+//#region src/binding.d.ts
+declare const claudeBinding: AgentBinding;
+//#endregion
+//#region src/credentials.d.ts
+/**
+ * How Claude Code authenticates inside the container. Env-backed kinds are forwarded
+ * to `docker run` by name (never on argv); the file kind is bind-mounted read-only.
+ * See `constants.ts` for which host setups produce each.
+ */
+type ClaudeCredentials = {
+  kind: "oauth-token";
+  token: string;
+} | {
+  kind: "api-key";
+  apiKey: string;
+} | {
+  kind: "credentials-file";
+  file: string;
+};
+/** Env OAuth token, then env API key, then a readable host credentials file. */
+declare function resolveClaudeCredentials(options?: {
+  env?: NodeJS.ProcessEnv;
+  home?: string;
+}): Promise<ClaudeCredentials>;
+/** Secret values for the docker CLI process, keyed by env names forwarded via envPassthrough. */
+declare function credentialsEnv(credentials: ClaudeCredentials): Record<string, string>;
+//#endregion
+//#region src/agent.d.ts
+declare const claudeAgent: Agent;
+//#endregion
+//#region src/trajectory.d.ts
+declare function adaptClaudeEvents(rawEvents: readonly unknown[]): TrajectoryEvent[];
+//#endregion
+//#region src/package-root.d.ts
+/** Absolute path to this package root (parent of `src/` or `lib/`). */
+declare const PACKAGE_ROOT: string;
+/** Folder of `*.Dockerfile` files for this agent. */
+declare const DOCKER_DIR: string;
+//#endregion
+export { CLAUDE_API_KEY_ENV, CLAUDE_CONTAINER_CREDENTIALS_PATH, CLAUDE_IMAGE, CLAUDE_OAUTH_TOKEN_ENV, type ClaudeCredentials, DOCKER_DIR, PACKAGE_ROOT, adaptClaudeEvents, claudeAgent, claudeBinding, credentialsEnv, defaultClaudeHostCredentialsFile, resolveClaudeCredentials };
+//# sourceMappingURL=index.d.mts.map

package/lib/index.mjs

@@ -0,0 +1,16 @@
+import { a as CLAUDE_API_KEY_ENV, c as CLAUDE_OAUTH_TOKEN_ENV, i as resolveClaudeCredentials, l as defaultClaudeHostCredentialsFile, n as adaptClaudeEvents, o as CLAUDE_CONTAINER_CREDENTIALS_PATH, r as credentialsEnv, s as CLAUDE_IMAGE, t as claudeBinding } from "./binding-DAPBfelH.mjs";
+import { Agent } from "clanker-cleanroom";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+//#region src/agent.ts
+const claudeAgent = Agent.fromBinding(claudeBinding);
+//#endregion
+//#region src/package-root.ts
+/** Absolute path to this package root (parent of `src/` or `lib/`). */
+const PACKAGE_ROOT = fileURLToPath(new URL("..", import.meta.url));
+/** Folder of `*.Dockerfile` files for this agent. */
+const DOCKER_DIR = join(PACKAGE_ROOT, "docker");
+//#endregion
+export { CLAUDE_API_KEY_ENV, CLAUDE_CONTAINER_CREDENTIALS_PATH, CLAUDE_IMAGE, CLAUDE_OAUTH_TOKEN_ENV, DOCKER_DIR, PACKAGE_ROOT, adaptClaudeEvents, claudeAgent, claudeBinding, credentialsEnv, defaultClaudeHostCredentialsFile, resolveClaudeCredentials };
+
+//# sourceMappingURL=index.mjs.map

package/lib/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/agent.ts","../src/package-root.ts"],"sourcesContent":["import { Agent } from \"clanker-cleanroom\";\n\nimport { claudeBinding } from \"./binding.js\";\n\nexport const claudeAgent = Agent.fromBinding(claudeBinding);\n","import { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/** Absolute path to this package root (parent of `src/` or `lib/`). */\nexport const PACKAGE_ROOT = fileURLToPath(new URL(\"..\", import.meta.url));\n\n/** Folder of `*.Dockerfile` files for this agent. */\nexport const DOCKER_DIR = join(PACKAGE_ROOT, \"docker\");\n"],"mappings":";;;;;AAIA,MAAa,cAAc,MAAM,YAAY,aAAa;;;;ACA1D,MAAa,eAAe,cAAc,IAAI,IAAI,MAAM,YAAY,GAAG,CAAC;;AAGxE,MAAa,aAAa,KAAK,cAAc,QAAQ"}

package/lib/register.cjs

@@ -0,0 +1,6 @@
+const require_binding = require("./binding-C2kSQy-B.cjs");
+//#region src/register.ts
+(0, require("clanker-cleanroom").registerBinding)("claude", require_binding.claudeBinding);
+//#endregion
+
+//# sourceMappingURL=register.cjs.map

package/lib/register.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.cjs","names":["registerBinding","claudeBinding"],"sources":["../src/register.ts"],"sourcesContent":["import { registerBinding } from \"clanker-cleanroom\";\n\nimport { claudeBinding } from \"./binding.js\";\n\nregisterBinding(\"claude\", claudeBinding);\n"],"mappings":";;CAIAA,8BAAAA,CAAAA,CAAAA,gBAAAA,CAAgB,UAAUC,gBAAAA,aAAa"}

package/lib/register.d.cts

@@ -0,0 +1 @@
+export {}

package/lib/register.d.mts

@@ -0,0 +1 @@
+export {}

package/lib/register.mjs

@@ -0,0 +1,8 @@
+import { t as claudeBinding } from "./binding-DAPBfelH.mjs";
+import { registerBinding } from "clanker-cleanroom";
+//#region src/register.ts
+registerBinding("claude", claudeBinding);
+//#endregion
+export {};
+
+//# sourceMappingURL=register.mjs.map

package/lib/register.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.mjs","names":[],"sources":["../src/register.ts"],"sourcesContent":["import { registerBinding } from \"clanker-cleanroom\";\n\nimport { claudeBinding } from \"./binding.js\";\n\nregisterBinding(\"claude\", claudeBinding);\n"],"mappings":";;;AAIA,gBAAgB,UAAU,aAAa"}

package/package.json

@@ -0,0 +1,136 @@
+{
+  "name": "@clanker-cleanroom/claude",
+  "version": "0.2.5",
+  "description": "Claude Code agent binding for clanker-cleanroom",
+  "keywords": [
+    "agent",
+    "claude",
+    "claude-code",
+    "cleanroom",
+    "docker"
+  ],
+  "homepage": "https://github.com/improving/agent-gwt#readme",
+  "bugs": {
+    "url": "https://github.com/improving/agent-gwt/issues"
+  },
+  "license": "MIT",
+  "author": "Eric Siebeneich <eric.siebeneich@improving.com> (https://github.com/improving)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/improving/agent-gwt.git",
+    "directory": "packages/clanker-cleanroom-claude"
+  },
+  "files": [
+    "lib",
+    "src",
+    "docker",
+    "!**/*.spec.ts"
+  ],
+  "type": "module",
+  "main": "./lib/index.cjs",
+  "module": "./lib/index.mjs",
+  "types": "./lib/index.d.cts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./lib/index.d.mts",
+        "default": "./lib/index.mjs"
+      },
+      "require": {
+        "types": "./lib/index.d.cts",
+        "default": "./lib/index.cjs"
+      }
+    },
+    "./register": {
+      "import": {
+        "types": "./lib/register.d.mts",
+        "default": "./lib/register.mjs"
+      },
+      "require": {
+        "types": "./lib/register.d.cts",
+        "default": "./lib/register.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "wireit": {
+    "build": {
+      "command": "vp pack",
+      "files": [
+        "src/**/*.ts",
+        "tsconfig.json",
+        "vite.config.ts",
+        "!src/**/*.spec.ts"
+      ],
+      "output": [
+        "lib/**"
+      ],
+      "dependencies": [
+        "../clanker-cleanroom:build"
+      ]
+    },
+    "lint": {
+      "command": "vp lint src",
+      "files": [
+        "src/**/*.ts",
+        "tsconfig.json",
+        "vite.config.ts"
+      ],
+      "dependencies": [
+        "../clanker-cleanroom:build"
+      ]
+    },
+    "test": {
+      "command": "vitest run",
+      "files": [
+        "src/**/*.ts",
+        "vite.config.ts"
+      ],
+      "dependencies": [
+        "../clanker-cleanroom:build"
+      ]
+    },
+    "test:coverage": {
+      "command": "vitest run --coverage",
+      "files": [
+        "src/**/*.ts",
+        "vite.config.ts"
+      ],
+      "output": [
+        "coverage/**"
+      ],
+      "dependencies": [
+        "../clanker-cleanroom:build"
+      ]
+    },
+    "prepublishOnly": {
+      "dependencies": [
+        "lint",
+        "test",
+        "build"
+      ]
+    }
+  },
+  "dependencies": {
+    "clanker-cleanroom": "0.2.5"
+  },
+  "devDependencies": {
+    "@types/node": "^26.2.0",
+    "@vitest/coverage-v8": "4.1.11",
+    "typescript": "^7.0.2",
+    "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
+    "vite-plus": "0.3.0",
+    "vitest": "4.1.11",
+    "vitest-gwt": "4.1.4",
+    "wireit": "^0.14.13"
+  },
+  "scripts": {
+    "build": "wireit",
+    "test": "wireit",
+    "lint": "wireit",
+    "test:coverage": "wireit"
+  }
+}

package/src/agent.ts

@@ -0,0 +1,5 @@
+import { Agent } from "clanker-cleanroom";
+
+import { claudeBinding } from "./binding.js";
+
+export const claudeAgent = Agent.fromBinding(claudeBinding);

package/src/binding.ts

@@ -0,0 +1,112 @@
+import {
+  asRecord,
+  parseAgentJsonOutput,
+  readTokenCount,
+  type AgentBinding,
+  type AgentRunResult,
+  type DockerVolumeMount,
+} from "clanker-cleanroom";
+
+import { CLAUDE_CONTAINER_CREDENTIALS_PATH, CLAUDE_IMAGE } from "./constants.js";
+import { credentialsEnv, resolveClaudeCredentials } from "./credentials.js";
+import { adaptClaudeEvents } from "./trajectory.js";
+
+export const claudeBinding: AgentBinding = {
+  image: CLAUDE_IMAGE,
+  displayName: "Claude",
+  trajectoryKind: "claude",
+  adaptEvents: adaptClaudeEvents,
+  command: ({ prompt, model }) => {
+    const claudeArgs = [
+      "claude",
+      "-p",
+      "--output-format",
+      "stream-json",
+      "--verbose",
+      "--dangerously-skip-permissions",
+    ];
+    if (model !== undefined && model !== "") {
+      claudeArgs.push("--model", model);
+    }
+    claudeArgs.push("--", prompt);
+    return claudeArgs;
+  },
+  prepare: async () => {
+    const credentials = await resolveClaudeCredentials();
+    const volumes: DockerVolumeMount[] = [];
+    if (credentials.kind === "credentials-file") {
+      volumes.push({
+        host: credentials.file,
+        container: CLAUDE_CONTAINER_CREDENTIALS_PATH,
+        mode: "ro",
+      });
+    }
+    return {
+      volumes,
+      env: credentialsEnv(credentials),
+    };
+  },
+  parseResult: parseClaudeResult,
+  describeFailure: describeClaudeFailure,
+};
+
+function parseClaudeResult(trajectory: string): AgentRunResult {
+  const parsed = parseAgentJsonOutput(trajectory);
+  if (isErrorResult(parsed)) {
+    throw new Error(`Claude agent reported an error: ${describeErrorResult(parsed)}`);
+  }
+
+  const record = asRecord(parsed);
+  const usage = asRecord(record?.usage);
+
+  return {
+    durationMs: readTokenCount(record?.duration_ms),
+    costUsd: readTokenCount(record?.total_cost_usd),
+    usage: {
+      inputTokens: readTokenCount(usage?.input_tokens ?? usage?.inputTokens),
+      outputTokens: readTokenCount(usage?.output_tokens ?? usage?.outputTokens),
+      cacheReadTokens: readTokenCount(usage?.cache_read_input_tokens ?? usage?.cacheReadTokens),
+      cacheWriteTokens: readTokenCount(
+        usage?.cache_creation_input_tokens ?? usage?.cacheWriteTokens,
+      ),
+    },
+  };
+}
+
+function describeClaudeFailure(trajectory: string): string | undefined {
+  try {
+    const parsed = parseAgentJsonOutput(trajectory);
+    return isErrorResult(parsed) ? describeErrorResult(parsed) : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+type ClaudeErrorResult = {
+  is_error: true;
+  result: string;
+  subtype?: string;
+  terminal_reason?: string;
+};
+
+function isErrorResult(value: unknown): value is ClaudeErrorResult {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    (value as { is_error?: unknown }).is_error === true
+  );
+}
+
+function describeErrorResult(result: ClaudeErrorResult): string {
+  const message = String(result.result);
+
+  if (result.terminal_reason !== undefined && result.terminal_reason !== "completed") {
+    return `${result.terminal_reason}: ${message}`;
+  }
+
+  if (result.subtype !== undefined && result.subtype !== "success") {
+    return `${result.subtype}: ${message}`;
+  }
+
+  return message;
+}

package/src/constants.ts

@@ -0,0 +1,13 @@
+import { CONTAINER_HOME } from "clanker-cleanroom";
+
+export const CLAUDE_IMAGE = "clanker-cleanroom/claude";
+export const CLAUDE_CONTAINER_CREDENTIALS_PATH = `${CONTAINER_HOME}/.claude/.credentials.json`;
+
+/** Long-lived OAuth token from `claude setup-token` (Claude subscription). */
+export const CLAUDE_OAUTH_TOKEN_ENV = "CLAUDE_CODE_OAUTH_TOKEN";
+/** Anthropic API key (pay-as-you-go). */
+export const CLAUDE_API_KEY_ENV = "ANTHROPIC_API_KEY";
+
+/** Linux hosts persist OAuth credentials here; macOS uses the Keychain instead. */
+export const defaultClaudeHostCredentialsFile = (home: string): string =>
+  `${home}/.claude/.credentials.json`;

package/src/credentials.ts

@@ -0,0 +1,61 @@
+import { access } from "node:fs/promises";
+import { constants as fsConstants } from "node:fs";
+import { homedir } from "node:os";
+
+import {
+  CLAUDE_API_KEY_ENV,
+  CLAUDE_OAUTH_TOKEN_ENV,
+  defaultClaudeHostCredentialsFile,
+} from "./constants.js";
+
+/**
+ * How Claude Code authenticates inside the container. Env-backed kinds are forwarded
+ * to `docker run` by name (never on argv); the file kind is bind-mounted read-only.
+ * See `constants.ts` for which host setups produce each.
+ */
+export type ClaudeCredentials =
+  | { kind: "oauth-token"; token: string }
+  | { kind: "api-key"; apiKey: string }
+  | { kind: "credentials-file"; file: string };
+
+/** Env OAuth token, then env API key, then a readable host credentials file. */
+export async function resolveClaudeCredentials(
+  options: { env?: NodeJS.ProcessEnv; home?: string } = {},
+): Promise<ClaudeCredentials> {
+  const env = options.env ?? process.env;
+  const home = options.home ?? homedir();
+
+  const token = env[CLAUDE_OAUTH_TOKEN_ENV];
+  if (token !== undefined && token !== "") {
+    return { kind: "oauth-token", token };
+  }
+
+  const apiKey = env[CLAUDE_API_KEY_ENV];
+  if (apiKey !== undefined && apiKey !== "") {
+    return { kind: "api-key", apiKey };
+  }
+
+  const file = defaultClaudeHostCredentialsFile(home);
+  try {
+    await access(file, fsConstants.R_OK);
+  } catch {
+    throw new Error(
+      `Claude Code credentials not found. Set ${CLAUDE_OAUTH_TOKEN_ENV} (run \`claude setup-token\` on the host) ` +
+        `or ${CLAUDE_API_KEY_ENV}, or provide ${file} (Linux hosts; macOS keeps credentials in the Keychain).`,
+    );
+  }
+
+  return { kind: "credentials-file", file };
+}
+
+/** Secret values for the docker CLI process, keyed by env names forwarded via envPassthrough. */
+export function credentialsEnv(credentials: ClaudeCredentials): Record<string, string> {
+  switch (credentials.kind) {
+    case "oauth-token":
+      return { [CLAUDE_OAUTH_TOKEN_ENV]: credentials.token };
+    case "api-key":
+      return { [CLAUDE_API_KEY_ENV]: credentials.apiKey };
+    case "credentials-file":
+      return {};
+  }
+}

package/src/index.ts

@@ -0,0 +1,12 @@
+export {
+  CLAUDE_API_KEY_ENV,
+  CLAUDE_CONTAINER_CREDENTIALS_PATH,
+  CLAUDE_IMAGE,
+  CLAUDE_OAUTH_TOKEN_ENV,
+  defaultClaudeHostCredentialsFile,
+} from "./constants.js";
+export { claudeBinding } from "./binding.js";
+export { resolveClaudeCredentials, credentialsEnv, type ClaudeCredentials } from "./credentials.js";
+export { claudeAgent } from "./agent.js";
+export { adaptClaudeEvents } from "./trajectory.js";
+export { DOCKER_DIR, PACKAGE_ROOT } from "./package-root.js";

package/src/package-root.ts

@@ -0,0 +1,8 @@
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+/** Absolute path to this package root (parent of `src/` or `lib/`). */
+export const PACKAGE_ROOT = fileURLToPath(new URL("..", import.meta.url));
+
+/** Folder of `*.Dockerfile` files for this agent. */
+export const DOCKER_DIR = join(PACKAGE_ROOT, "docker");

package/src/register.ts

@@ -0,0 +1,5 @@
+import { registerBinding } from "clanker-cleanroom";
+
+import { claudeBinding } from "./binding.js";
+
+registerBinding("claude", claudeBinding);

package/src/trajectory.ts

@@ -0,0 +1,119 @@
+import {
+  asRecord,
+  extractTextContent,
+  readString,
+  readTokenCount,
+  type TrajectoryEvent,
+} from "clanker-cleanroom";
+
+export function adaptClaudeEvents(rawEvents: readonly unknown[]): TrajectoryEvent[] {
+  const events: TrajectoryEvent[] = [];
+
+  for (const raw of rawEvents) {
+    const record = asRecord(raw);
+    if (record === undefined) {
+      events.push({ kind: "other", type: "unknown", raw });
+      continue;
+    }
+
+    const type = readString(record.type) ?? "unknown";
+
+    switch (type) {
+      case "system":
+        events.push({
+          kind: "system",
+          sessionId: readString(record.session_id),
+          model: readString(record.model),
+          raw,
+        });
+        break;
+      case "user":
+        events.push(...adaptClaudeUser(record, raw));
+        break;
+      case "assistant":
+        events.push(...adaptClaudeAssistant(record, raw));
+        break;
+      case "result":
+        events.push({
+          kind: "result",
+          text: readString(record.result) ?? "",
+          isError: record.is_error === true,
+          durationMs: readTokenCount(record.duration_ms),
+          costUsd: readTokenCount(record.total_cost_usd),
+          raw,
+        });
+        break;
+      default:
+        events.push({ kind: "other", type, raw });
+    }
+  }
+
+  return events;
+}
+
+function adaptClaudeAssistant(
+  record: Record<string, unknown>,
+  raw: unknown,
+): TrajectoryEvent[] {
+  const events: TrajectoryEvent[] = [];
+  const text = extractTextContent(record.message);
+  if (text !== "") {
+    events.push({ kind: "assistant", text, raw });
+  }
+
+  for (const block of contentBlocks(record.message)) {
+    if (block.type !== "tool_use") {
+      continue;
+    }
+    events.push({
+      kind: "tool",
+      phase: "started",
+      callId: readString(block.id) ?? "",
+      name: readString(block.name) ?? "unknown",
+      args: block.input ?? null,
+      result: null,
+      raw,
+    });
+  }
+
+  if (events.length === 0) {
+    events.push({ kind: "assistant", text: "", raw });
+  }
+
+  return events;
+}
+
+function adaptClaudeUser(record: Record<string, unknown>, raw: unknown): TrajectoryEvent[] {
+  const events: TrajectoryEvent[] = [];
+  const text = extractTextContent(record.message);
+  const toolResults: TrajectoryEvent[] = [];
+
+  for (const block of contentBlocks(record.message)) {
+    if (block.type !== "tool_result") {
+      continue;
+    }
+    toolResults.push({
+      kind: "tool",
+      phase: "completed",
+      callId: readString(block.tool_use_id) ?? "",
+      name: "tool_result",
+      args: null,
+      result: block.content ?? null,
+      raw,
+    });
+  }
+
+  if (text !== "" || toolResults.length === 0) {
+    events.push({ kind: "user", text, raw });
+  }
+  events.push(...toolResults);
+  return events;
+}
+
+function contentBlocks(message: unknown): Record<string, unknown>[] {
+  const content = asRecord(message)?.content;
+  if (!Array.isArray(content)) {
+    return [];
+  }
+  return content.map((block) => asRecord(block)).filter((block) => block !== undefined);
+}