@cleocode/adapters 2026.4.57 → 2026.4.59

package/dist/providers/claude-sdk/session-store.js

@@ -0,0 +1,84 @@
+/**
+ * Session Store for Claude SDK Spawn Provider
+ *
+ * Maintains an in-memory map of active SDK sessions keyed by instanceId.
+ * Each entry records the session ID returned by the SDK, the task ID, and
+ * the start time. Session IDs can be used with `options: { resume: sessionId }`
+ * in subsequent `query()` calls for multi-turn continuations.
+ *
+ * Persistence to conduit.db is intentionally deferred: the in-memory store
+ * is sufficient for single-process lifetimes and avoids coupling the spawn
+ * provider to the conduit subsystem at construction time.
+ *
+ * @task T581
+ */
+/**
+ * In-memory store for active Claude SDK sessions.
+ *
+ * Provides CRUD operations over a `Map<instanceId, SessionEntry>`.
+ * Thread-safe within a single Node.js process (single-threaded event loop).
+ */
+export class SessionStore {
+    store = new Map();
+    /**
+     * Register a new session entry.
+     *
+     * @param entry - The session entry to add
+     */
+    add(entry) {
+        this.store.set(entry.instanceId, entry);
+    }
+    /**
+     * Update the SDK session ID for an existing entry once it is received
+     * from the first SDK message.
+     *
+     * No-op if the instanceId is not found.
+     *
+     * @param instanceId - ID of the spawn instance
+     * @param sessionId - SDK-assigned session identifier
+     */
+    setSessionId(instanceId, sessionId) {
+        const entry = this.store.get(instanceId);
+        if (entry) {
+            entry.sessionId = sessionId;
+        }
+    }
+    /**
+     * Retrieve an entry by instance ID.
+     *
+     * @param instanceId - ID of the spawn instance
+     * @returns The session entry, or undefined if not found
+     */
+    get(instanceId) {
+        return this.store.get(instanceId);
+    }
+    /**
+     * Remove an entry by instance ID.
+     *
+     * @param instanceId - ID of the spawn instance to remove
+     */
+    remove(instanceId) {
+        this.store.delete(instanceId);
+    }
+    /**
+     * List all active session entries.
+     *
+     * @returns Array of all tracked session entries
+     */
+    listActive() {
+        return Array.from(this.store.values());
+    }
+    /**
+     * Return the number of tracked sessions.
+     */
+    size() {
+        return this.store.size;
+    }
+    /**
+     * Clear all tracked sessions. Intended for testing only.
+     */
+    clear() {
+        this.store.clear();
+    }
+}
+//# sourceMappingURL=session-store.js.map

package/dist/providers/claude-sdk/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../../src/providers/claude-sdk/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACN,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEzD;;;;OAIG;IACH,GAAG,CAAC,KAAmB;QACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,UAAkB,EAAE,SAAiB;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAkB;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/providers/claude-sdk/spawn.js

@@ -0,0 +1,225 @@
+/**
+ * Claude SDK Spawn Provider
+ *
+ * Implements `AdapterSpawnProvider` using the `@anthropic-ai/claude-agent-sdk`
+ * programmatic API instead of shelling out to the `claude` CLI.
+ *
+ * Differences from `ClaudeCodeSpawnProvider`:
+ * - Uses SDK `query()` instead of a detached child process
+ * - Awaits full completion before returning (synchronous output capture)
+ * - Session IDs from the SDK enable future multi-turn resumption
+ * - No temp files, no OS PIDs — tracking is purely in-memory session IDs
+ * - `canSpawn()` checks for `ANTHROPIC_API_KEY` rather than CLI availability
+ *
+ * CANT enrichment is identical to the CLI provider: `buildCantEnrichedPrompt()`
+ * is called before `query()` and the result is passed as the SDK prompt string.
+ *
+ * @task T581
+ */
+import { getErrorMessage } from '@cleocode/contracts';
+import { getServers } from './mcp-registry.js';
+import { SessionStore } from './session-store.js';
+import { resolveTools } from './tool-bridge.js';
+/** Model used when no model is specified in spawn options. */
+const DEFAULT_MODEL = 'claude-sonnet-4-5';
+/**
+ * Spawn provider that uses the Anthropic Claude Agent SDK for programmatic
+ * subagent execution.
+ *
+ * Each call to `spawn()` runs a full SDK `query()` to completion and
+ * captures the output. Sessions are tracked in `SessionStore` so callers
+ * can inspect active sessions via `listRunning()` and cancel them via
+ * `terminate()`.
+ *
+ * @remarks
+ * The `permissionMode: 'bypassPermissions'` + `allowDangerouslySkipPermissions: true`
+ * combination mirrors the `--dangerously-skip-permissions` flag used by
+ * the CLI provider. Both are required by the SDK when bypassing all tool
+ * permission prompts.
+ */
+export class ClaudeSDKSpawnProvider {
+    /** In-memory session registry. */
+    sessions = new SessionStore();
+    /**
+     * Check whether the SDK can be used in the current environment.
+     *
+     * Returns `true` if `ANTHROPIC_API_KEY` is set. No binary check is needed
+     * because the SDK manages the Claude Code subprocess internally.
+     *
+     * @returns `true` when an API key is present
+     */
+    async canSpawn() {
+        return !!process.env.ANTHROPIC_API_KEY;
+    }
+    /**
+     * Spawn a subagent using the Claude Agent SDK.
+     *
+     * Enriches the prompt via CANT context, runs the SDK `query()` to
+     * completion, captures all assistant text output, and returns a
+     * `SpawnResult` with the final output and exit code.
+     *
+     * @param context - Spawn context with taskId, prompt, options
+     * @returns Resolved spawn result (status: 'completed' or 'failed')
+     */
+    async spawn(context) {
+        const instanceId = `sdk-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+        const startTime = new Date().toISOString();
+        // Register in session store immediately so listRunning() reflects it
+        // before the async query starts.
+        this.sessions.add({
+            instanceId,
+            sessionId: undefined,
+            taskId: context.taskId,
+            startTime,
+        });
+        try {
+            // CANT enrichment — best-effort, identical to ClaudeCodeSpawnProvider.
+            let enrichedPrompt = context.prompt;
+            try {
+                const { buildCantEnrichedPrompt } = await import('../../cant-context.js');
+                enrichedPrompt = await buildCantEnrichedPrompt({
+                    projectDir: context.workingDirectory ?? process.cwd(),
+                    basePrompt: context.prompt,
+                    agentName: context.options?.agentName ?? undefined,
+                });
+            }
+            catch {
+                // CANT enrichment unavailable — use raw prompt
+            }
+            // Lazy-import the SDK to avoid hard failures when ANTHROPIC_API_KEY
+            // is absent (canSpawn() guards the normal path, but tests may import
+            // this module without the key).
+            const { query } = await import('@anthropic-ai/claude-agent-sdk');
+            // Build allowedTools from the spawn context or fall back to CLEO defaults.
+            const toolAllowlist = context.options?.toolAllowlist;
+            const allowedTools = resolveTools(toolAllowlist);
+            // Resolve available MCP servers for the working directory.
+            const workDir = context.workingDirectory ?? process.cwd();
+            const mcpServers = getServers(workDir);
+            // Resume support: pass a prior session ID if provided.
+            const resumeSessionId = context.options?.resumeSessionId;
+            const sdkQuery = query({
+                prompt: enrichedPrompt,
+                options: {
+                    cwd: workDir,
+                    model: context.options?.model ?? DEFAULT_MODEL,
+                    allowedTools,
+                    permissionMode: 'bypassPermissions',
+                    allowDangerouslySkipPermissions: true,
+                    ...(Object.keys(mcpServers).length > 0 ? { mcpServers } : {}),
+                    ...(resumeSessionId ? { resume: resumeSessionId } : {}),
+                },
+            });
+            // Stream messages from the SDK, collecting text output and session ID.
+            const textParts = [];
+            let exitCode = 0;
+            let finalError;
+            for await (const message of sdkQuery) {
+                // Capture the session ID from the first message that carries it.
+                if ('session_id' in message && typeof message.session_id === 'string') {
+                    this.sessions.setSessionId(instanceId, message.session_id);
+                }
+                if (message.type === 'assistant') {
+                    // Aggregate text blocks from assistant messages.
+                    for (const block of message.message.content) {
+                        if (block.type === 'text') {
+                            textParts.push(block.text);
+                        }
+                    }
+                }
+                else if (message.type === 'result') {
+                    if (message.subtype === 'success') {
+                        // The result field on success contains the final summary text.
+                        if (message.result) {
+                            textParts.push(message.result);
+                        }
+                        exitCode = message.is_error ? 1 : 0;
+                    }
+                    else {
+                        // Error subtypes: error_max_turns, error_during_execution, etc.
+                        exitCode = 1;
+                        if ('errors' in message && Array.isArray(message.errors) && message.errors.length > 0) {
+                            finalError = message.errors.join('; ');
+                        }
+                        else {
+                            // Fallback: use the subtype string as the error description so
+                            // `finalError` is always truthy for non-success result messages.
+                            finalError = String(message.subtype);
+                        }
+                    }
+                }
+            }
+            const endTime = new Date().toISOString();
+            this.sessions.remove(instanceId);
+            const output = textParts.join('\n').trim();
+            if (finalError) {
+                return {
+                    instanceId,
+                    taskId: context.taskId,
+                    providerId: 'claude-sdk',
+                    status: 'failed',
+                    output,
+                    exitCode,
+                    startTime,
+                    endTime,
+                    error: finalError,
+                };
+            }
+            return {
+                instanceId,
+                taskId: context.taskId,
+                providerId: 'claude-sdk',
+                status: 'completed',
+                output,
+                exitCode,
+                startTime,
+                endTime,
+            };
+        }
+        catch (error) {
+            const endTime = new Date().toISOString();
+            this.sessions.remove(instanceId);
+            return {
+                instanceId,
+                taskId: context.taskId,
+                providerId: 'claude-sdk',
+                status: 'failed',
+                startTime,
+                endTime,
+                exitCode: 1,
+                error: getErrorMessage(error),
+            };
+        }
+    }
+    /**
+     * List sessions currently tracked as active (spawned but not yet completed).
+     *
+     * Because SDK sessions run to completion inside `spawn()`, this list is
+     * typically empty unless concurrent spawns are in flight.
+     *
+     * @returns Array of in-flight spawn results
+     */
+    async listRunning() {
+        return this.sessions.listActive().map((entry) => ({
+            instanceId: entry.instanceId,
+            taskId: entry.taskId,
+            providerId: 'claude-sdk',
+            status: 'running',
+            startTime: entry.startTime,
+        }));
+    }
+    /**
+     * Remove a session from tracking.
+     *
+     * The underlying SDK query runs inside `spawn()` and cannot be cancelled
+     * externally once the async iterator is in flight. Removing the entry from
+     * the store prevents it from appearing in `listRunning()` but does not
+     * interrupt the in-progress HTTP request.
+     *
+     * @param instanceId - ID of the spawn instance to terminate
+     */
+    async terminate(instanceId) {
+        this.sessions.remove(instanceId);
+    }
+}
+//# sourceMappingURL=spawn.js.map

package/dist/providers/claude-sdk/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../../src/providers/claude-sdk/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,8DAA8D;AAC9D,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,sBAAsB;IACjC,kCAAkC;IACjB,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAE/C;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ;QACZ,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACzC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,qEAAqE;QACrE,iCAAiC;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChB,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,uEAAuE;YACvE,IAAI,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC1E,cAAc,GAAG,MAAM,uBAAuB,CAAC;oBAC7C,UAAU,EAAE,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE;oBACrD,UAAU,EAAE,OAAO,CAAC,MAAM;oBAC1B,SAAS,EAAG,OAAO,CAAC,OAAO,EAAE,SAAoB,IAAI,SAAS;iBAC/D,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;YAED,oEAAoE;YACpE,qEAAqE;YACrE,gCAAgC;YAChC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YAEjE,2EAA2E;YAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,aAAqC,CAAC;YAC7E,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;YAEjD,2DAA2D;YAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1D,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAEvC,uDAAuD;YACvD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,eAAqC,CAAC;YAE/E,MAAM,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE;oBACP,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAG,OAAO,CAAC,OAAO,EAAE,KAAgB,IAAI,aAAa;oBAC1D,YAAY;oBACZ,cAAc,EAAE,mBAAmB;oBACnC,+BAA+B,EAAE,IAAI;oBACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD;aACF,CAAC,CAAC;YAEH,uEAAuE;YACvE,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,UAA8B,CAAC;YAEnC,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBACrC,iEAAiE;gBACjE,IAAI,YAAY,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACtE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC7D,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjC,iDAAiD;oBACjD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC1B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC7B,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAClC,+DAA+D;wBAC/D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;4BACnB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBACjC,CAAC;wBACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,gEAAgE;wBAChE,QAAQ,GAAG,CAAC,CAAC;wBACb,IAAI,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACtF,UAAU,GAAI,OAAO,CAAC,MAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACvD,CAAC;6BAAM,CAAC;4BACN,+DAA+D;4BAC/D,iEAAiE;4BACjE,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;wBACvC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO;oBACL,UAAU;oBACV,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,YAAY;oBACxB,MAAM,EAAE,QAAQ;oBAChB,MAAM;oBACN,QAAQ;oBACR,SAAS;oBACT,OAAO;oBACP,KAAK,EAAE,UAAU;iBAClB,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,UAAU;gBACV,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,WAAW;gBACnB,MAAM;gBACN,QAAQ;gBACR,SAAS;gBACT,OAAO;aACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEjC,OAAO;gBACL,UAAU;gBACV,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,QAAQ;gBAChB,SAAS;gBACT,OAAO;gBACP,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,YAAY;YACxB,MAAM,EAAE,SAAkB;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/providers/claude-sdk/tool-bridge.js

@@ -0,0 +1,50 @@
+/**
+ * Tool Bridge for Claude SDK Spawn Provider
+ *
+ * Maps CLEO's tool allowlist (string names) to the SDK's `allowedTools`
+ * option format. The SDK accepts plain tool name strings such as
+ * `"Read"`, `"Bash"`, `"Edit"` for built-in Claude Code tools and
+ * `"mcp__<server>__<tool>"` for MCP-backed tools.
+ *
+ * @task T581
+ */
+/**
+ * Default CLEO tool set passed to the SDK when no explicit allowlist
+ * is provided in `SpawnContext.options.toolAllowlist`.
+ *
+ * Mirrors the standard agent tool surface used by the Claude Code CLI
+ * `--dangerously-skip-permissions` mode.
+ */
+export const DEFAULT_TOOLS = [
+    'Read',
+    'Write',
+    'Edit',
+    'Bash',
+    'Glob',
+    'Grep',
+];
+/**
+ * Resolves a CLEO tool allowlist to the SDK `allowedTools` array.
+ *
+ * When `allowlist` is undefined or empty, the default CLEO tool set is
+ * returned. When an explicit list is provided, it is returned as-is so
+ * callers can pass MCP tool strings (`mcp__server__tool`) alongside
+ * built-in names without transformation.
+ *
+ * @param allowlist - Optional array of tool names from `SpawnContext.options`
+ * @returns Array of SDK-compatible tool name strings
+ *
+ * @example
+ * ```typescript
+ * resolveTools(); // ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep']
+ * resolveTools(['Read', 'Bash']); // ['Read', 'Bash']
+ * resolveTools(['mcp__brain__search']); // ['mcp__brain__search']
+ * ```
+ */
+export function resolveTools(allowlist) {
+    if (!allowlist || allowlist.length === 0) {
+        return [...DEFAULT_TOOLS];
+    }
+    return [...allowlist];
+}
+//# sourceMappingURL=tool-bridge.js.map

package/dist/providers/claude-sdk/tool-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-bridge.js","sourceRoot":"","sources":["../../../src/providers/claude-sdk/tool-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;CACE,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY,CAAC,SAAoB;IAC/C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;AACxB,CAAC"}

package/dist/providers/codex/adapter.js

@@ -0,0 +1,146 @@
+/**
+ * Codex CLI Adapter
+ *
+ * Main CLEOProviderAdapter implementation for OpenAI Codex CLI.
+ * Provides hooks and install capabilities for CLEO integration.
+ *
+ * @task T162
+ * @epic T134
+ */
+import { exec } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { promisify } from 'node:util';
+import { CodexHookProvider } from './hooks.js';
+import { CodexInstallProvider } from './install.js';
+const execAsync = promisify(exec);
+/**
+ * CLEO provider adapter for OpenAI Codex CLI.
+ *
+ * Bridges CLEO's adapter system with Codex CLI's native capabilities:
+ * - Hooks: Maps Codex events (SessionStart, PromptSubmit, ResponseComplete) to CAAMP events
+ * - Install: Ensures AGENTS.md references for CLEO instruction files
+ *
+ * @remarks
+ * Codex CLI supports only 3 canonical events (SessionStart, PromptSubmit,
+ * ResponseComplete) and has no spawn or transport capabilities. Integration
+ * is primarily through instruction files (AGENTS.md).
+ *
+ * @task T162
+ * @epic T134
+ */
+export class CodexAdapter {
+    /** Unique provider identifier. */
+    id = 'codex';
+    /** Human-readable provider name. */
+    name = 'Codex';
+    /** Adapter version string. */
+    version = '1.0.0';
+    /** Declared capabilities for this provider. */
+    capabilities = {
+        supportsHooks: true,
+        supportedHookEvents: ['SessionStart', 'UserPromptSubmit', 'Stop'],
+        supportsSpawn: false,
+        supportsInstall: true,
+        supportsInstructionFiles: false,
+        supportsContextMonitor: false,
+        supportsStatusline: false,
+        supportsProviderPaths: false,
+        supportsTransport: false,
+        supportsTaskSync: false,
+    };
+    /** Hook provider for CAAMP event mapping. */
+    hooks;
+    /** Install provider for managing instruction files. */
+    install;
+    /** Project directory this adapter was initialized with, or null. */
+    projectDir = null;
+    /** Whether {@link initialize} has been called. */
+    initialized = false;
+    constructor() {
+        this.hooks = new CodexHookProvider();
+        this.install = new CodexInstallProvider();
+    }
+    /**
+     * Initialize the adapter for a given project directory.
+     *
+     * @param projectDir - Root directory of the project
+     * @task T162
+     */
+    async initialize(projectDir) {
+        this.projectDir = projectDir;
+        this.initialized = true;
+    }
+    /**
+     * Dispose the adapter and clean up resources.
+     *
+     * Unregisters hooks and releases any tracked state.
+     * @task T162
+     */
+    async dispose() {
+        if (this.hooks.isRegistered()) {
+            await this.hooks.unregisterNativeHooks();
+        }
+        this.initialized = false;
+        this.projectDir = null;
+    }
+    /**
+     * Run a health check to verify Codex CLI is accessible.
+     *
+     * Checks:
+     * 1. Adapter has been initialized
+     * 2. Codex CLI binary is available in PATH
+     * 3. ~/.codex/ configuration directory exists
+     *
+     * @returns Health status with details about each check
+     * @task T162
+     */
+    async healthCheck() {
+        const details = {};
+        if (!this.initialized) {
+            return {
+                healthy: false,
+                provider: this.id,
+                details: { error: 'Adapter not initialized' },
+            };
+        }
+        // Check Codex CLI availability
+        let cliAvailable = false;
+        try {
+            const { stdout } = await execAsync('which codex');
+            cliAvailable = stdout.trim().length > 0;
+            details.cliPath = stdout.trim();
+        }
+        catch {
+            details.cliAvailable = false;
+        }
+        // Check for Codex CLI config directory
+        const codexConfigDir = join(homedir(), '.codex');
+        const configExists = existsSync(codexConfigDir);
+        details.configDirExists = configExists;
+        // Healthy if CLI is available (primary requirement)
+        const healthy = cliAvailable;
+        details.cliAvailable = cliAvailable;
+        return {
+            healthy,
+            provider: this.id,
+            details,
+        };
+    }
+    /**
+     * Check whether the adapter has been initialized.
+     * @task T162
+     */
+    isInitialized() {
+        return this.initialized;
+    }
+    /**
+     * Get the project directory this adapter was initialized with.
+     * @task T162
+     */
+    getProjectDir() {
+        return this.projectDir;
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/providers/codex/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/providers/codex/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAMtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,YAAY;IACvB,kCAAkC;IACzB,EAAE,GAAG,OAAO,CAAC;IACtB,oCAAoC;IAC3B,IAAI,GAAG,OAAO,CAAC;IACxB,8BAA8B;IACrB,OAAO,GAAG,OAAO,CAAC;IAE3B,+CAA+C;IAC/C,YAAY,GAAwB;QAClC,aAAa,EAAE,IAAI;QACnB,mBAAmB,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,MAAM,CAAC;QACjE,aAAa,EAAE,KAAK;QACpB,eAAe,EAAE,IAAI;QACrB,wBAAwB,EAAE,KAAK;QAC/B,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,KAAK;QAC5B,iBAAiB,EAAE,KAAK;QACxB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,6CAA6C;IAC7C,KAAK,CAAoB;IACzB,uDAAuD;IACvD,OAAO,CAAuB;IAE9B,oEAAoE;IAC5D,UAAU,GAAkB,IAAI,CAAC;IACzC,kDAAkD;IAC1C,WAAW,GAAG,KAAK,CAAC;IAE5B;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,OAAO,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,CAAC;YAClD,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YACxC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;QAC/B,CAAC;QAED,uCAAuC;QACvC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QAChD,OAAO,CAAC,eAAe,GAAG,YAAY,CAAC;QAEvC,oDAAoD;QACpD,MAAM,OAAO,GAAG,YAAY,CAAC;QAC7B,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QAEpC,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}

package/dist/providers/codex/hooks.js

@@ -0,0 +1,113 @@
+/**
+ * Codex CLI Hook Provider
+ *
+ * Maps Codex CLI's native hook events to CAAMP canonical hook events.
+ * Codex CLI supports 3 canonical events through its hook system.
+ *
+ * Codex CLI event mapping:
+ * - SessionStart      -> SessionStart
+ * - PromptSubmit      -> UserPromptSubmit
+ * - ResponseComplete  -> Stop
+ *
+ * @task T162
+ * @epic T134
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { readLatestTranscript } from '../shared/transcript-reader.js';
+/**
+ * Mapping from Codex CLI native event names to CAAMP canonical event names.
+ */
+const CODEX_EVENT_MAP = {
+    SessionStart: 'SessionStart',
+    PromptSubmit: 'UserPromptSubmit',
+    ResponseComplete: 'Stop',
+};
+/**
+ * Hook provider for Codex CLI.
+ *
+ * Codex CLI registers hooks via its configuration system at
+ * ~/.codex/. Hook handlers are shell commands or script paths that
+ * execute when the corresponding event fires.
+ *
+ * Since hooks are registered through the config system (managed by
+ * the install provider), registerNativeHooks and unregisterNativeHooks
+ * track registration state without performing filesystem operations.
+ *
+ * @remarks
+ * Codex CLI has a minimal hook surface with only 3 canonical events.
+ * Registration state is tracked in-memory because Codex CLI manages
+ * hooks through its own configuration system at `~/.codex/`.
+ *
+ * @task T162
+ * @epic T134
+ */
+export class CodexHookProvider {
+    /** Whether hooks have been registered for the current session. */
+    registered = false;
+    /**
+     * Map a Codex CLI native event name to a CAAMP hook event name.
+     *
+     * @param providerEvent - Codex CLI event name (e.g. "SessionStart", "PromptSubmit")
+     * @returns CAAMP event name or null if unmapped
+     * @task T162
+     */
+    mapProviderEvent(providerEvent) {
+        return CODEX_EVENT_MAP[providerEvent] ?? null;
+    }
+    /**
+     * Register native hooks for a project.
+     *
+     * For Codex CLI, hooks are registered via the config system
+     * (~/.codex/), which is handled by the install provider.
+     * This method marks hooks as registered without performing
+     * filesystem operations.
+     *
+     * @param _projectDir - Project directory (unused; hooks are global)
+     * @task T162
+     */
+    async registerNativeHooks(_projectDir) {
+        this.registered = true;
+    }
+    /**
+     * Unregister native hooks.
+     *
+     * For Codex CLI, this is a no-op since hooks are managed through
+     * the config system. Unregistration happens via the install
+     * provider's uninstall method.
+     * @task T162
+     */
+    async unregisterNativeHooks() {
+        this.registered = false;
+    }
+    /**
+     * Check whether hooks have been registered via registerNativeHooks.
+     * @task T162
+     */
+    isRegistered() {
+        return this.registered;
+    }
+    /**
+     * Get the full event mapping for introspection/debugging.
+     * @task T162
+     */
+    getEventMap() {
+        return { ...CODEX_EVENT_MAP };
+    }
+    /**
+     * Extract a plain-text transcript from Codex CLI session data.
+     *
+     * Reads the most recent JSON/JSONL session file under `~/.codex/`
+     * and returns its turns as a flat string for brain observation extraction.
+     *
+     * Returns null when no session data is found or on any read error.
+     *
+     * @param _sessionId - CLEO session ID (unused; reads the most recent file)
+     * @param _projectDir - Project directory (unused; Codex CLI uses global paths)
+     * @task T162 @epic T134
+     */
+    async getTranscript(_sessionId, _projectDir) {
+        return readLatestTranscript(join(homedir(), '.codex'));
+    }
+}
+//# sourceMappingURL=hooks.js.map

package/dist/providers/codex/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/providers/codex/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE;;GAEG;AACH,MAAM,eAAe,GAA2B;IAC9C,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,kBAAkB;IAChC,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,iBAAiB;IAC5B,kEAAkE;IAC1D,UAAU,GAAG,KAAK,CAAC;IAE3B;;;;;;OAMG;IACH,gBAAgB,CAAC,aAAqB;QACpC,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,qBAAqB;QACzB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,WAAW;QACT,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACzD,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;CACF"}