@dev-anywhere/proxy 0.0.1

package/dist/session-worker.js

@@ -0,0 +1,357 @@
+#!/usr/bin/env node
+import {
+  ControlRequestEventSchema,
+  SeqCounter
+} from "./chunk-2Q3Z3ICU.js";
+import {
+  CLAUDE_PROVIDER
+} from "./chunk-6O6JTF24.js";
+import {
+  LineBuffer,
+  createWorkerReader,
+  serializeWorkerMsg
+} from "./chunk-QJ5CQDK7.js";
+
+// src/session-worker.ts
+import { createServer } from "net";
+import { mkdirSync, unlinkSync, existsSync, chmodSync } from "fs";
+
+// src/worker/json-session.ts
+import { spawn } from "child_process";
+var denyAllStrategy = async () => ({
+  behavior: "deny",
+  message: "Tool use denied by default policy. Remote approval not yet configured."
+});
+var ToolWhitelist = class {
+  allowed = /* @__PURE__ */ new Set();
+  has(toolName) {
+    return this.allowed.has(toolName);
+  }
+  add(toolName) {
+    this.allowed.add(toolName);
+  }
+  clear() {
+    this.allowed.clear();
+  }
+};
+function createRelayApprovalStrategy(whitelist2, forwardToRelay2) {
+  return async (toolName, input) => {
+    if (whitelist2.has(toolName)) {
+      return { behavior: "allow", message: "Auto-approved by session whitelist" };
+    }
+    return forwardToRelay2(toolName, input);
+  };
+}
+var JsonSession = class {
+  child = null;
+  stderrChunks = [];
+  writeQueue = Promise.resolve();
+  claudeSessionId = null;
+  workDir;
+  claudeArgs;
+  approvalStrategy;
+  onEvent;
+  onExitCb;
+  resumeSessionId;
+  permissionMode;
+  includePartialMessages;
+  hook;
+  constructor(options = {}) {
+    this.workDir = options.cwd ?? options.workDir ?? process.cwd();
+    this.claudeArgs = options.claudeArgs ?? [];
+    this.approvalStrategy = options.approvalStrategy ?? denyAllStrategy;
+    this.onEvent = options.onEvent;
+    this.onExitCb = options.onExit;
+    this.resumeSessionId = options.resumeSessionId;
+    this.permissionMode = options.permissionMode;
+    this.includePartialMessages = options.includePartialMessages ?? false;
+    this.hook = options.hook;
+  }
+  getClaudeSessionId() {
+    return this.claudeSessionId;
+  }
+  start() {
+    const command = CLAUDE_PROVIDER.buildJsonCommand(
+      {
+        extraArgs: this.claudeArgs,
+        permissionMode: this.permissionMode,
+        resumeSessionId: this.resumeSessionId,
+        includePartialMessages: this.includePartialMessages,
+        hook: this.hook
+      },
+      process.env
+    );
+    this.child = spawn(command.command, command.args, {
+      cwd: this.workDir,
+      stdio: ["pipe", "pipe", "pipe"],
+      env: command.env
+    });
+    this.setupStdoutParsing();
+    this.setupStderrCollection();
+    this.setupExitHandler();
+    return this.child.pid;
+  }
+  sendMessage(content) {
+    const message = {
+      type: "user",
+      message: { role: "user", content }
+    };
+    this.writeToStdin(JSON.stringify(message));
+  }
+  async stop(gracePeriodMs = 5e3) {
+    if (!this.child || !this.isAlive()) return;
+    this.child.kill("SIGTERM");
+    const start = Date.now();
+    while (Date.now() - start < gracePeriodMs) {
+      if (!this.isAlive()) return;
+      await new Promise((r) => setTimeout(r, 200));
+    }
+    if (this.isAlive()) {
+      this.child.kill("SIGKILL");
+    }
+  }
+  isAlive() {
+    if (!this.child || !this.child.pid) return false;
+    try {
+      process.kill(this.child.pid, 0);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  getStderr() {
+    return this.stderrChunks.join("");
+  }
+  setupStdoutParsing() {
+    if (!this.child?.stdout) return;
+    const lineBuffer = new LineBuffer();
+    this.child.stdout.pipe(lineBuffer);
+    lineBuffer.on("data", (line) => {
+      const str = typeof line === "string" ? line : line.toString();
+      let event;
+      try {
+        event = JSON.parse(str);
+      } catch {
+        return;
+      }
+      if (event.type === "system" && typeof event.session_id === "string") {
+        this.claudeSessionId = event.session_id;
+      }
+      if (event.type === "control_request") {
+        const parsed = ControlRequestEventSchema.safeParse(event);
+        if (!parsed.success) {
+          console.error(
+            "[json-session] control_request shape mismatch; skipping approval",
+            parsed.error.issues.slice(0, 3)
+          );
+          return;
+        }
+        this.handleControlRequest(parsed.data);
+        return;
+      }
+      this.onEvent?.(event);
+    });
+  }
+  setupStderrCollection() {
+    if (!this.child?.stderr) return;
+    this.child.stderr.on("data", (chunk) => {
+      this.stderrChunks.push(typeof chunk === "string" ? chunk : chunk.toString());
+    });
+  }
+  setupExitHandler() {
+    if (!this.child) return;
+    this.child.on("exit", (code) => {
+      this.onExitCb?.(code ?? 1);
+    });
+  }
+  handleControlRequest(event) {
+    const requestId = event.request_id;
+    const request = event.request;
+    this.approvalStrategy(request.tool_name, request.input).then((decision) => {
+      const response = decision.behavior === "deny" ? {
+        type: "control_response",
+        response: {
+          subtype: "success",
+          request_id: requestId,
+          response: {
+            behavior: "deny",
+            message: decision.message ?? "Tool use denied by default policy."
+          }
+        }
+      } : {
+        type: "control_response",
+        response: {
+          subtype: "success",
+          request_id: requestId,
+          response: {
+            behavior: "allow",
+            updatedInput: {}
+          }
+        }
+      };
+      this.writeToStdin(JSON.stringify(response));
+    });
+  }
+  writeToStdin(data) {
+    this.writeQueue = this.writeQueue.then(() => {
+      return new Promise((resolve, reject) => {
+        if (!this.child?.stdin?.writable) {
+          reject(new Error("stdin not writable"));
+          return;
+        }
+        this.child.stdin.write(data + "\n", (err) => {
+          if (err) {
+            reject(err);
+          } else {
+            resolve();
+          }
+        });
+      });
+    });
+  }
+};
+
+// src/session-worker.ts
+var sessionId = process.argv[2];
+var sockPath = process.argv[3];
+var separatorIdx = process.argv.indexOf("--");
+var claudeArgs = separatorIdx >= 0 ? process.argv.slice(separatorIdx + 1) : [];
+var preArgs = process.argv.slice(4, separatorIdx >= 0 ? separatorIdx : void 0);
+function getArg(name) {
+  const idx = preArgs.indexOf(name);
+  return idx >= 0 && idx + 1 < preArgs.length ? preArgs[idx + 1] : void 0;
+}
+function hasFlag(name) {
+  return preArgs.includes(name);
+}
+var workerCwd = getArg("--cwd");
+var workerResume = getArg("--resume");
+var workerPermissionMode = getArg("--permission-mode");
+var workerStreamDelta = hasFlag("--stream-delta");
+var workerHookUrl = getArg("--hook-url");
+var workerHookMarker = getArg("--hook-marker");
+var workerHookToken = process.env.DEV_ANYWHERE_HOOK_TOKEN;
+var workerHookProvider = getArg("--hook-provider");
+if (!sessionId || !sockPath) {
+  console.error("Usage: session-worker <sessionId> <socketPath> [-- claudeArgs...]");
+  process.exit(1);
+}
+var workerHook = workerHookUrl && workerHookMarker && workerHookToken && workerHookProvider ? {
+  provider: workerHookProvider,
+  sessionId,
+  hookUrl: workerHookUrl,
+  marker: workerHookMarker,
+  token: workerHookToken
+} : void 0;
+var serveSocket = null;
+var seqCounter = new SeqCounter(sessionId);
+var whitelist = new ToolWhitelist();
+var pendingApprovals = /* @__PURE__ */ new Map();
+function sendToServe(msg) {
+  if (serveSocket?.writable) {
+    serveSocket.write(serializeWorkerMsg(msg));
+  }
+}
+var forwardToRelay = async (toolName, input) => {
+  return new Promise((resolve) => {
+    const requestId = `${sessionId}-${Date.now()}`;
+    pendingApprovals.set(requestId, { resolve, toolName, input });
+    sendToServe({
+      type: "worker_approval_request",
+      requestId,
+      toolName,
+      input
+    });
+  });
+};
+var session = new JsonSession({
+  claudeArgs,
+  cwd: workerCwd,
+  resumeSessionId: workerResume,
+  permissionMode: workerPermissionMode,
+  includePartialMessages: workerStreamDelta,
+  hook: workerHook,
+  approvalStrategy: createRelayApprovalStrategy(whitelist, forwardToRelay),
+  onEvent: (event) => {
+    if (event.type === "system" && typeof event.session_id === "string") {
+      sendToServe({
+        type: "worker_claude_session_id",
+        sessionId: event.session_id
+      });
+    }
+    const seq = seqCounter.next();
+    sendToServe({
+      type: "worker_event",
+      seq,
+      event
+    });
+  },
+  onExit: (code) => {
+    whitelist.clear();
+    sendToServe({ type: "worker_exit", code });
+    cleanup();
+    process.exit(0);
+  }
+});
+function handleServeConnection(socket) {
+  serveSocket = socket;
+  for (const [requestId, pending] of pendingApprovals) {
+    sendToServe({
+      type: "worker_approval_request",
+      requestId,
+      toolName: pending.toolName,
+      input: pending.input
+    });
+  }
+  createWorkerReader(socket, (msg) => {
+    switch (msg.type) {
+      case "worker_input":
+        session.sendMessage(msg.content);
+        break;
+      case "worker_stop":
+        session.stop();
+        break;
+      case "worker_approval_response": {
+        const pending = pendingApprovals.get(msg.requestId);
+        if (pending) {
+          pending.resolve({ behavior: msg.behavior, message: msg.message });
+          pendingApprovals.delete(msg.requestId);
+        }
+        break;
+      }
+      case "worker_whitelist_add":
+        whitelist.add(msg.toolName);
+        break;
+    }
+  });
+  socket.on("close", () => {
+    serveSocket = null;
+  });
+  socket.on("error", () => {
+    serveSocket = null;
+  });
+}
+var sockDir = sockPath.substring(0, sockPath.lastIndexOf("/"));
+mkdirSync(sockDir, { recursive: true });
+if (existsSync(sockPath)) {
+  unlinkSync(sockPath);
+}
+var server = createServer((socket) => {
+  handleServeConnection(socket);
+});
+function cleanup() {
+  server.close();
+  try {
+    unlinkSync(sockPath);
+  } catch {
+  }
+}
+process.on("SIGTERM", () => {
+  session.stop();
+});
+server.listen(sockPath, () => {
+  chmodSync(sockPath, 384);
+  const pid = session.start();
+  sendToServe({ type: "worker_ready", pid });
+});
+//# sourceMappingURL=session-worker.js.map

package/dist/session-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-worker.ts","../src/worker/json-session.ts"],"sourcesContent":["import { createServer, type Socket } from \"node:net\";\nimport { mkdirSync, unlinkSync, existsSync, chmodSync } from \"node:fs\";\nimport {\n  JsonSession,\n  ToolWhitelist,\n  createRelayApprovalStrategy,\n  type StreamJsonEvent,\n  type ClaudePermissionMode,\n} from \"./worker/json-session.js\";\nimport { SeqCounter } from \"./common/seq-counter.js\";\nimport { createWorkerReader, serializeWorkerMsg, type WorkerMessage } from \"./ipc/ipc-protocol.js\";\nimport type { ProviderHookContext } from \"./providers/index.js\";\n\n// 参数格式: session-worker.ts <sessionId> <socketPath> [--cwd <dir>] [--resume <id>] [-- claude args...]\nconst sessionId = process.argv[2];\nconst sockPath = process.argv[3];\nconst separatorIdx = process.argv.indexOf(\"--\");\nconst claudeArgs = separatorIdx >= 0 ? process.argv.slice(separatorIdx + 1) : [];\n\n// 解析 -- 之前的可选参数\nconst preArgs = process.argv.slice(4, separatorIdx >= 0 ? separatorIdx : undefined);\nfunction getArg(name: string): string | undefined {\n  const idx = preArgs.indexOf(name);\n  return idx >= 0 && idx + 1 < preArgs.length ? preArgs[idx + 1] : undefined;\n}\nfunction hasFlag(name: string): boolean {\n  return preArgs.includes(name);\n}\nconst workerCwd = getArg(\"--cwd\");\nconst workerResume = getArg(\"--resume\");\nconst workerPermissionMode = getArg(\"--permission-mode\") as ClaudePermissionMode | undefined;\nconst workerStreamDelta = hasFlag(\"--stream-delta\");\nconst workerHookUrl = getArg(\"--hook-url\");\nconst workerHookMarker = getArg(\"--hook-marker\");\nconst workerHookToken = process.env.DEV_ANYWHERE_HOOK_TOKEN;\nconst workerHookProvider = getArg(\"--hook-provider\") as ProviderHookContext[\"provider\"] | undefined;\n\nif (!sessionId || !sockPath) {\n  console.error(\"Usage: session-worker <sessionId> <socketPath> [-- claudeArgs...]\");\n  process.exit(1);\n}\n\nconst workerHook: ProviderHookContext | undefined =\n  workerHookUrl && workerHookMarker && workerHookToken && workerHookProvider\n    ? {\n        provider: workerHookProvider,\n        sessionId,\n        hookUrl: workerHookUrl,\n        marker: workerHookMarker,\n        token: workerHookToken,\n      }\n    : undefined;\n\nlet serveSocket: Socket | null = null;\nconst seqCounter = new SeqCounter(sessionId);\nconst whitelist = new ToolWhitelist();\n\nconst pendingApprovals = new Map<\n  string,\n  {\n    resolve: (decision: { behavior: \"allow\" | \"deny\"; message?: string }) => void;\n    toolName: string;\n    input: Record<string, unknown>;\n  }\n>();\n\nfunction sendToServe(msg: WorkerMessage): void {\n  if (serveSocket?.writable) {\n    serveSocket.write(serializeWorkerMsg(msg));\n  }\n}\n\n// 转发审批请求到 serve 进程，由 serve 进程通过 relay 转发到小程序\nconst forwardToRelay = async (\n  toolName: string,\n  input: Record<string, unknown>,\n): Promise<{ behavior: \"allow\" | \"deny\"; message?: string }> => {\n  return new Promise((resolve) => {\n    const requestId = `${sessionId}-${Date.now()}`;\n    pendingApprovals.set(requestId, { resolve, toolName, input });\n    sendToServe({\n      type: \"worker_approval_request\",\n      requestId,\n      toolName,\n      input,\n    });\n  });\n};\n\nconst session = new JsonSession({\n  claudeArgs,\n  cwd: workerCwd,\n  resumeSessionId: workerResume,\n  permissionMode: workerPermissionMode,\n  includePartialMessages: workerStreamDelta,\n  hook: workerHook,\n  approvalStrategy: createRelayApprovalStrategy(whitelist, forwardToRelay),\n  onEvent: (event: StreamJsonEvent) => {\n    // 从 system 事件中捕获 Claude 会话 ID 并通知 serve\n    if (event.type === \"system\" && typeof event.session_id === \"string\") {\n      sendToServe({\n        type: \"worker_claude_session_id\",\n        sessionId: event.session_id,\n      });\n    }\n\n    const seq = seqCounter.next();\n    sendToServe({\n      type: \"worker_event\",\n      seq,\n      event: event as Record<string, unknown>,\n    });\n  },\n  onExit: (code: number) => {\n    whitelist.clear();\n    sendToServe({ type: \"worker_exit\", code });\n    cleanup();\n    process.exit(0);\n  },\n});\n\nfunction handleServeConnection(socket: Socket): void {\n  serveSocket = socket;\n\n  for (const [requestId, pending] of pendingApprovals) {\n    sendToServe({\n      type: \"worker_approval_request\",\n      requestId,\n      toolName: pending.toolName,\n      input: pending.input,\n    });\n  }\n\n  createWorkerReader(socket, (msg: WorkerMessage) => {\n    switch (msg.type) {\n      case \"worker_input\":\n        session.sendMessage(msg.content);\n        break;\n      case \"worker_stop\":\n        session.stop();\n        break;\n      case \"worker_approval_response\": {\n        const pending = pendingApprovals.get(msg.requestId);\n        if (pending) {\n          pending.resolve({ behavior: msg.behavior, message: msg.message });\n          pendingApprovals.delete(msg.requestId);\n        }\n        break;\n      }\n      case \"worker_whitelist_add\":\n        whitelist.add(msg.toolName);\n        break;\n    }\n  });\n\n  socket.on(\"close\", () => {\n    serveSocket = null;\n  });\n  socket.on(\"error\", () => {\n    serveSocket = null;\n  });\n}\n\nconst sockDir = sockPath.substring(0, sockPath.lastIndexOf(\"/\"));\nmkdirSync(sockDir, { recursive: true });\n\nif (existsSync(sockPath)) {\n  unlinkSync(sockPath);\n}\n\nconst server = createServer((socket) => {\n  handleServeConnection(socket);\n});\n\nfunction cleanup(): void {\n  server.close();\n  try {\n    unlinkSync(sockPath);\n  } catch {\n    // socket 文件可能已被删除\n  }\n}\n\nprocess.on(\"SIGTERM\", () => {\n  session.stop();\n});\n\nserver.listen(sockPath, () => {\n  chmodSync(sockPath, 0o600);\n  const pid = session.start();\n  sendToServe({ type: \"worker_ready\", pid });\n});\n","import { spawn, type ChildProcess } from \"node:child_process\";\nimport type { z } from \"zod\";\nimport { LineBuffer } from \"../ipc/line-buffer.js\";\nimport { ControlRequestEventSchema } from \"../common/stream-json-schema.js\";\nimport {\n  CLAUDE_PROVIDER,\n  buildClaudeArgs,\n  filterClaudeEnvVars,\n  type ClaudePermissionMode,\n} from \"../providers/index.js\";\nimport type { ProviderHookContext } from \"../providers/index.js\";\n\nexport { buildClaudeArgs, filterClaudeEnvVars };\nexport type { ClaudePermissionMode };\n\n// stream-json 事件类型定义，基于 cc-connect 验证的结构\nexport type StreamJsonEventType =\n  | \"system\"\n  | \"assistant\"\n  | \"user\"\n  | \"result\"\n  | \"control_request\"\n  | \"control_cancel_request\"\n  | \"stream_event\";\n\nexport interface StreamJsonEvent {\n  type: StreamJsonEventType;\n  [key: string]: unknown;\n}\n\nexport type ApprovalStrategy = (\n  toolName: string,\n  input: Record<string, unknown>,\n) => Promise<{ behavior: \"allow\" | \"deny\"; message?: string }>;\n\ninterface JsonSessionOptions {\n  workDir?: string;\n  claudeArgs?: string[];\n  approvalStrategy?: ApprovalStrategy;\n  onEvent?: (event: StreamJsonEvent) => void;\n  onExit?: (code: number) => void;\n  cwd?: string;\n  resumeSessionId?: string;\n  permissionMode?: ClaudePermissionMode;\n  includePartialMessages?: boolean;\n  hook?: ProviderHookContext;\n}\n\n// 默认拒绝所有工具调用，远程审批未配置前的安全兜底\nconst denyAllStrategy: ApprovalStrategy = async () => ({\n  behavior: \"deny\" as const,\n  message: \"Tool use denied by default policy. Remote approval not yet configured.\",\n});\n\n// 会话级别的工具白名单，用户点击\"全部允许\"后同名工具自动审批\nexport class ToolWhitelist {\n  private allowed = new Set<string>();\n\n  has(toolName: string): boolean {\n    return this.allowed.has(toolName);\n  }\n\n  add(toolName: string): void {\n    this.allowed.add(toolName);\n  }\n\n  clear(): void {\n    this.allowed.clear();\n  }\n}\n\n// 创建中继转发审批策略，先检查白名单再转发到 relay\nexport function createRelayApprovalStrategy(\n  whitelist: ToolWhitelist,\n  forwardToRelay: (\n    toolName: string,\n    input: Record<string, unknown>,\n  ) => Promise<{ behavior: \"allow\" | \"deny\"; message?: string }>,\n): ApprovalStrategy {\n  return async (toolName, input) => {\n    if (whitelist.has(toolName)) {\n      return { behavior: \"allow\", message: \"Auto-approved by session whitelist\" };\n    }\n    return forwardToRelay(toolName, input);\n  };\n}\n\nexport class JsonSession {\n  private child: ChildProcess | null = null;\n  private stderrChunks: string[] = [];\n  private writeQueue: Promise<void> = Promise.resolve();\n  private claudeSessionId: string | null = null;\n  private readonly workDir: string;\n  private readonly claudeArgs: string[];\n  private readonly approvalStrategy: ApprovalStrategy;\n  private readonly onEvent?: (event: StreamJsonEvent) => void;\n  private readonly onExitCb?: (code: number) => void;\n  private readonly resumeSessionId?: string;\n  private readonly permissionMode?: ClaudePermissionMode;\n  private readonly includePartialMessages: boolean;\n  private readonly hook?: ProviderHookContext;\n\n  constructor(options: JsonSessionOptions = {}) {\n    this.workDir = options.cwd ?? options.workDir ?? process.cwd();\n    this.claudeArgs = options.claudeArgs ?? [];\n    this.approvalStrategy = options.approvalStrategy ?? denyAllStrategy;\n    this.onEvent = options.onEvent;\n    this.onExitCb = options.onExit;\n    this.resumeSessionId = options.resumeSessionId;\n    this.permissionMode = options.permissionMode;\n    this.includePartialMessages = options.includePartialMessages ?? false;\n    this.hook = options.hook;\n  }\n\n  getClaudeSessionId(): string | null {\n    return this.claudeSessionId;\n  }\n\n  start(): number {\n    const command = CLAUDE_PROVIDER.buildJsonCommand(\n      {\n        extraArgs: this.claudeArgs,\n        permissionMode: this.permissionMode,\n        resumeSessionId: this.resumeSessionId,\n        includePartialMessages: this.includePartialMessages,\n        hook: this.hook,\n      },\n      process.env,\n    );\n\n    this.child = spawn(command.command, command.args, {\n      cwd: this.workDir,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n      env: command.env,\n    });\n\n    this.setupStdoutParsing();\n    this.setupStderrCollection();\n    this.setupExitHandler();\n\n    return this.child.pid!;\n  }\n\n  sendMessage(content: string): void {\n    const message = {\n      type: \"user\",\n      message: { role: \"user\", content },\n    };\n    this.writeToStdin(JSON.stringify(message));\n  }\n\n  async stop(gracePeriodMs = 5000): Promise<void> {\n    if (!this.child || !this.isAlive()) return;\n\n    this.child.kill(\"SIGTERM\");\n\n    const start = Date.now();\n    while (Date.now() - start < gracePeriodMs) {\n      if (!this.isAlive()) return;\n      await new Promise((r) => setTimeout(r, 200));\n    }\n\n    if (this.isAlive()) {\n      this.child.kill(\"SIGKILL\");\n    }\n  }\n\n  isAlive(): boolean {\n    if (!this.child || !this.child.pid) return false;\n    try {\n      process.kill(this.child.pid, 0);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  getStderr(): string {\n    return this.stderrChunks.join(\"\");\n  }\n\n  private setupStdoutParsing(): void {\n    if (!this.child?.stdout) return;\n\n    const lineBuffer = new LineBuffer();\n    this.child.stdout.pipe(lineBuffer);\n\n    lineBuffer.on(\"data\", (line: Buffer | string) => {\n      const str = typeof line === \"string\" ? line : line.toString();\n      let event: StreamJsonEvent;\n      try {\n        event = JSON.parse(str) as StreamJsonEvent;\n      } catch {\n        // 非 JSON 行直接跳过，verbose 模式会输出调试日志\n        return;\n      }\n\n      // 从 system 事件中捕获 Claude 会话 ID 用于后续 resume\n      if (event.type === \"system\" && typeof event.session_id === \"string\") {\n        this.claudeSessionId = event.session_id;\n      }\n\n      if (event.type === \"control_request\") {\n        // schema parse 失败说明 CLI 协议漂移，调用方必须感知而不是静默吃掉\n        const parsed = ControlRequestEventSchema.safeParse(event);\n        if (!parsed.success) {\n          console.error(\n            \"[json-session] control_request shape mismatch; skipping approval\",\n            parsed.error.issues.slice(0, 3),\n          );\n          return;\n        }\n        this.handleControlRequest(parsed.data);\n        return;\n      }\n\n      this.onEvent?.(event);\n    });\n  }\n\n  private setupStderrCollection(): void {\n    if (!this.child?.stderr) return;\n    this.child.stderr.on(\"data\", (chunk: Buffer | string) => {\n      this.stderrChunks.push(typeof chunk === \"string\" ? chunk : chunk.toString());\n    });\n  }\n\n  private setupExitHandler(): void {\n    if (!this.child) return;\n    this.child.on(\"exit\", (code: number | null) => {\n      this.onExitCb?.(code ?? 1);\n    });\n  }\n\n  private handleControlRequest(event: z.infer<typeof ControlRequestEventSchema>): void {\n    const requestId = event.request_id;\n    const request = event.request;\n\n    this.approvalStrategy(request.tool_name, request.input).then((decision) => {\n      const response =\n        decision.behavior === \"deny\"\n          ? {\n              type: \"control_response\",\n              response: {\n                subtype: \"success\",\n                request_id: requestId,\n                response: {\n                  behavior: \"deny\",\n                  message: decision.message ?? \"Tool use denied by default policy.\",\n                },\n              },\n            }\n          : {\n              type: \"control_response\",\n              response: {\n                subtype: \"success\",\n                request_id: requestId,\n                response: {\n                  behavior: \"allow\",\n                  updatedInput: {},\n                },\n              },\n            };\n\n      this.writeToStdin(JSON.stringify(response));\n    });\n  }\n\n  private writeToStdin(data: string): void {\n    this.writeQueue = this.writeQueue.then(() => {\n      return new Promise<void>((resolve, reject) => {\n        if (!this.child?.stdin?.writable) {\n          reject(new Error(\"stdin not writable\"));\n          return;\n        }\n        this.child.stdin.write(data + \"\\n\", (err) => {\n          if (err) {\n            reject(err);\n          } else {\n            resolve();\n          }\n        });\n      });\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,oBAAiC;AAC1C,SAAS,WAAW,YAAY,YAAY,iBAAiB;;;ACD7D,SAAS,aAAgC;AAiDzC,IAAM,kBAAoC,aAAa;AAAA,EACrD,UAAU;AAAA,EACV,SAAS;AACX;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACjB,UAAU,oBAAI,IAAY;AAAA,EAElC,IAAI,UAA2B;AAC7B,WAAO,KAAK,QAAQ,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,IAAI,UAAwB;AAC1B,SAAK,QAAQ,IAAI,QAAQ;AAAA,EAC3B;AAAA,EAEA,QAAc;AACZ,SAAK,QAAQ,MAAM;AAAA,EACrB;AACF;AAGO,SAAS,4BACdA,YACAC,iBAIkB;AAClB,SAAO,OAAO,UAAU,UAAU;AAChC,QAAID,WAAU,IAAI,QAAQ,GAAG;AAC3B,aAAO,EAAE,UAAU,SAAS,SAAS,qCAAqC;AAAA,IAC5E;AACA,WAAOC,gBAAe,UAAU,KAAK;AAAA,EACvC;AACF;AAEO,IAAM,cAAN,MAAkB;AAAA,EACf,QAA6B;AAAA,EAC7B,eAAyB,CAAC;AAAA,EAC1B,aAA4B,QAAQ,QAAQ;AAAA,EAC5C,kBAAiC;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA8B,CAAC,GAAG;AAC5C,SAAK,UAAU,QAAQ,OAAO,QAAQ,WAAW,QAAQ,IAAI;AAC7D,SAAK,aAAa,QAAQ,cAAc,CAAC;AACzC,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,QAAQ;AACxB,SAAK,kBAAkB,QAAQ;AAC/B,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,yBAAyB,QAAQ,0BAA0B;AAChE,SAAK,OAAO,QAAQ;AAAA,EACtB;AAAA,EAEA,qBAAoC;AAClC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,QAAgB;AACd,UAAM,UAAU,gBAAgB;AAAA,MAC9B;AAAA,QACE,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,iBAAiB,KAAK;AAAA,QACtB,wBAAwB,KAAK;AAAA,QAC7B,MAAM,KAAK;AAAA,MACb;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,SAAK,QAAQ,MAAM,QAAQ,SAAS,QAAQ,MAAM;AAAA,MAChD,KAAK,KAAK;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,KAAK,QAAQ;AAAA,IACf,CAAC;AAED,SAAK,mBAAmB;AACxB,SAAK,sBAAsB;AAC3B,SAAK,iBAAiB;AAEtB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,YAAY,SAAuB;AACjC,UAAM,UAAU;AAAA,MACd,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,QAAQ,QAAQ;AAAA,IACnC;AACA,SAAK,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,EAC3C;AAAA,EAEA,MAAM,KAAK,gBAAgB,KAAqB;AAC9C,QAAI,CAAC,KAAK,SAAS,CAAC,KAAK,QAAQ,EAAG;AAEpC,SAAK,MAAM,KAAK,SAAS;AAEzB,UAAM,QAAQ,KAAK,IAAI;AACvB,WAAO,KAAK,IAAI,IAAI,QAAQ,eAAe;AACzC,UAAI,CAAC,KAAK,QAAQ,EAAG;AACrB,YAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAAA,IAC7C;AAEA,QAAI,KAAK,QAAQ,GAAG;AAClB,WAAK,MAAM,KAAK,SAAS;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,UAAmB;AACjB,QAAI,CAAC,KAAK,SAAS,CAAC,KAAK,MAAM,IAAK,QAAO;AAC3C,QAAI;AACF,cAAQ,KAAK,KAAK,MAAM,KAAK,CAAC;AAC9B,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,aAAa,KAAK,EAAE;AAAA,EAClC;AAAA,EAEQ,qBAA2B;AACjC,QAAI,CAAC,KAAK,OAAO,OAAQ;AAEzB,UAAM,aAAa,IAAI,WAAW;AAClC,SAAK,MAAM,OAAO,KAAK,UAAU;AAEjC,eAAW,GAAG,QAAQ,CAAC,SAA0B;AAC/C,YAAM,MAAM,OAAO,SAAS,WAAW,OAAO,KAAK,SAAS;AAC5D,UAAI;AACJ,UAAI;AACF,gBAAQ,KAAK,MAAM,GAAG;AAAA,MACxB,QAAQ;AAEN;AAAA,MACF;AAGA,UAAI,MAAM,SAAS,YAAY,OAAO,MAAM,eAAe,UAAU;AACnE,aAAK,kBAAkB,MAAM;AAAA,MAC/B;AAEA,UAAI,MAAM,SAAS,mBAAmB;AAEpC,cAAM,SAAS,0BAA0B,UAAU,KAAK;AACxD,YAAI,CAAC,OAAO,SAAS;AACnB,kBAAQ;AAAA,YACN;AAAA,YACA,OAAO,MAAM,OAAO,MAAM,GAAG,CAAC;AAAA,UAChC;AACA;AAAA,QACF;AACA,aAAK,qBAAqB,OAAO,IAAI;AACrC;AAAA,MACF;AAEA,WAAK,UAAU,KAAK;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEQ,wBAA8B;AACpC,QAAI,CAAC,KAAK,OAAO,OAAQ;AACzB,SAAK,MAAM,OAAO,GAAG,QAAQ,CAAC,UAA2B;AACvD,WAAK,aAAa,KAAK,OAAO,UAAU,WAAW,QAAQ,MAAM,SAAS,CAAC;AAAA,IAC7E,CAAC;AAAA,EACH;AAAA,EAEQ,mBAAyB;AAC/B,QAAI,CAAC,KAAK,MAAO;AACjB,SAAK,MAAM,GAAG,QAAQ,CAAC,SAAwB;AAC7C,WAAK,WAAW,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACH;AAAA,EAEQ,qBAAqB,OAAwD;AACnF,UAAM,YAAY,MAAM;AACxB,UAAM,UAAU,MAAM;AAEtB,SAAK,iBAAiB,QAAQ,WAAW,QAAQ,KAAK,EAAE,KAAK,CAAC,aAAa;AACzE,YAAM,WACJ,SAAS,aAAa,SAClB;AAAA,QACE,MAAM;AAAA,QACN,UAAU;AAAA,UACR,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,UAAU;AAAA,YACR,UAAU;AAAA,YACV,SAAS,SAAS,WAAW;AAAA,UAC/B;AAAA,QACF;AAAA,MACF,IACA;AAAA,QACE,MAAM;AAAA,QACN,UAAU;AAAA,UACR,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,UAAU;AAAA,YACR,UAAU;AAAA,YACV,cAAc,CAAC;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAEN,WAAK,aAAa,KAAK,UAAU,QAAQ,CAAC;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEQ,aAAa,MAAoB;AACvC,SAAK,aAAa,KAAK,WAAW,KAAK,MAAM;AAC3C,aAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,YAAI,CAAC,KAAK,OAAO,OAAO,UAAU;AAChC,iBAAO,IAAI,MAAM,oBAAoB,CAAC;AACtC;AAAA,QACF;AACA,aAAK,MAAM,MAAM,MAAM,OAAO,MAAM,CAAC,QAAQ;AAC3C,cAAI,KAAK;AACP,mBAAO,GAAG;AAAA,UACZ,OAAO;AACL,oBAAQ;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;;;AD/QA,IAAM,YAAY,QAAQ,KAAK,CAAC;AAChC,IAAM,WAAW,QAAQ,KAAK,CAAC;AAC/B,IAAM,eAAe,QAAQ,KAAK,QAAQ,IAAI;AAC9C,IAAM,aAAa,gBAAgB,IAAI,QAAQ,KAAK,MAAM,eAAe,CAAC,IAAI,CAAC;AAG/E,IAAM,UAAU,QAAQ,KAAK,MAAM,GAAG,gBAAgB,IAAI,eAAe,MAAS;AAClF,SAAS,OAAO,MAAkC;AAChD,QAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,SAAO,OAAO,KAAK,MAAM,IAAI,QAAQ,SAAS,QAAQ,MAAM,CAAC,IAAI;AACnE;AACA,SAAS,QAAQ,MAAuB;AACtC,SAAO,QAAQ,SAAS,IAAI;AAC9B;AACA,IAAM,YAAY,OAAO,OAAO;AAChC,IAAM,eAAe,OAAO,UAAU;AACtC,IAAM,uBAAuB,OAAO,mBAAmB;AACvD,IAAM,oBAAoB,QAAQ,gBAAgB;AAClD,IAAM,gBAAgB,OAAO,YAAY;AACzC,IAAM,mBAAmB,OAAO,eAAe;AAC/C,IAAM,kBAAkB,QAAQ,IAAI;AACpC,IAAM,qBAAqB,OAAO,iBAAiB;AAEnD,IAAI,CAAC,aAAa,CAAC,UAAU;AAC3B,UAAQ,MAAM,mEAAmE;AACjF,UAAQ,KAAK,CAAC;AAChB;AAEA,IAAM,aACJ,iBAAiB,oBAAoB,mBAAmB,qBACpD;AAAA,EACE,UAAU;AAAA,EACV;AAAA,EACA,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AACT,IACA;AAEN,IAAI,cAA6B;AACjC,IAAM,aAAa,IAAI,WAAW,SAAS;AAC3C,IAAM,YAAY,IAAI,cAAc;AAEpC,IAAM,mBAAmB,oBAAI,IAO3B;AAEF,SAAS,YAAY,KAA0B;AAC7C,MAAI,aAAa,UAAU;AACzB,gBAAY,MAAM,mBAAmB,GAAG,CAAC;AAAA,EAC3C;AACF;AAGA,IAAM,iBAAiB,OACrB,UACA,UAC8D;AAC9D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,YAAY,GAAG,SAAS,IAAI,KAAK,IAAI,CAAC;AAC5C,qBAAiB,IAAI,WAAW,EAAE,SAAS,UAAU,MAAM,CAAC;AAC5D,gBAAY;AAAA,MACV,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAEA,IAAM,UAAU,IAAI,YAAY;AAAA,EAC9B;AAAA,EACA,KAAK;AAAA,EACL,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,MAAM;AAAA,EACN,kBAAkB,4BAA4B,WAAW,cAAc;AAAA,EACvE,SAAS,CAAC,UAA2B;AAEnC,QAAI,MAAM,SAAS,YAAY,OAAO,MAAM,eAAe,UAAU;AACnE,kBAAY;AAAA,QACV,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,MACnB,CAAC;AAAA,IACH;AAEA,UAAM,MAAM,WAAW,KAAK;AAC5B,gBAAY;AAAA,MACV,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EACA,QAAQ,CAAC,SAAiB;AACxB,cAAU,MAAM;AAChB,gBAAY,EAAE,MAAM,eAAe,KAAK,CAAC;AACzC,YAAQ;AACR,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAED,SAAS,sBAAsB,QAAsB;AACnD,gBAAc;AAEd,aAAW,CAAC,WAAW,OAAO,KAAK,kBAAkB;AACnD,gBAAY;AAAA,MACV,MAAM;AAAA,MACN;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,IACjB,CAAC;AAAA,EACH;AAEA,qBAAmB,QAAQ,CAAC,QAAuB;AACjD,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK;AACH,gBAAQ,YAAY,IAAI,OAAO;AAC/B;AAAA,MACF,KAAK;AACH,gBAAQ,KAAK;AACb;AAAA,MACF,KAAK,4BAA4B;AAC/B,cAAM,UAAU,iBAAiB,IAAI,IAAI,SAAS;AAClD,YAAI,SAAS;AACX,kBAAQ,QAAQ,EAAE,UAAU,IAAI,UAAU,SAAS,IAAI,QAAQ,CAAC;AAChE,2BAAiB,OAAO,IAAI,SAAS;AAAA,QACvC;AACA;AAAA,MACF;AAAA,MACA,KAAK;AACH,kBAAU,IAAI,IAAI,QAAQ;AAC1B;AAAA,IACJ;AAAA,EACF,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,kBAAc;AAAA,EAChB,CAAC;AACD,SAAO,GAAG,SAAS,MAAM;AACvB,kBAAc;AAAA,EAChB,CAAC;AACH;AAEA,IAAM,UAAU,SAAS,UAAU,GAAG,SAAS,YAAY,GAAG,CAAC;AAC/D,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AAEtC,IAAI,WAAW,QAAQ,GAAG;AACxB,aAAW,QAAQ;AACrB;AAEA,IAAM,SAAS,aAAa,CAAC,WAAW;AACtC,wBAAsB,MAAM;AAC9B,CAAC;AAED,SAAS,UAAgB;AACvB,SAAO,MAAM;AACb,MAAI;AACF,eAAW,QAAQ;AAAA,EACrB,QAAQ;AAAA,EAER;AACF;AAEA,QAAQ,GAAG,WAAW,MAAM;AAC1B,UAAQ,KAAK;AACf,CAAC;AAED,OAAO,OAAO,UAAU,MAAM;AAC5B,YAAU,UAAU,GAAK;AACzB,QAAM,MAAM,QAAQ,MAAM;AAC1B,cAAY,EAAE,MAAM,gBAAgB,IAAI,CAAC;AAC3C,CAAC;","names":["whitelist","forwardToRelay"]}