@heyditto/cli 2.40.0 → 2.42.0

package/dist/remote/claude-permissions.d.ts

@@ -0,0 +1,39 @@
+import { type ClaudeToolResultAnchor } from "./claude-tool-results.js";
+interface ToolOperation {
+    origin?: object;
+    key: string;
+    session: string;
+    signature: string;
+    toolUseId: string;
+    anchor: Promise<ClaudeToolResultAnchor | undefined>;
+}
+export interface ClaudePermissionToken {
+    origin?: object;
+    session: string;
+    signature: string;
+    operation?: ToolOperation;
+    ambiguous: boolean;
+    resolved: boolean;
+}
+/** Correlates only this input epoch. Ambiguous/missing metadata never clears a dialog. */
+export declare class ClaudePermissionTracker {
+    private readonly resolved;
+    private readonly operations;
+    private active?;
+    private timer?;
+    private epoch;
+    constructor(resolved: (token: ClaudePermissionToken) => void);
+    get pending(): boolean;
+    get toolBusy(): boolean;
+    reset(): void;
+    preTool(payload: Record<string, unknown>, origin?: object): void;
+    permissionRequest(payload: Record<string, unknown>): void;
+    question(payload: Record<string, unknown>): ClaudePermissionToken | undefined;
+    notification(payload: Record<string, unknown>): ClaudePermissionToken | undefined;
+    private commonOrigin;
+    toolFinished(payload: Record<string, unknown>): void;
+    answered(token: ClaudePermissionToken | undefined): void;
+    private complete;
+    private poll;
+}
+export {};

package/dist/remote/claude-permissions.js

@@ -0,0 +1,149 @@
+import { createHash } from "node:crypto";
+import { captureClaudeToolResultAnchor, readClaudeToolResults } from "./claude-tool-results.js";
+function canonical(value, depth = 0) {
+    if (depth > 32)
+        throw new Error("tool metadata too deep");
+    if (Array.isArray(value))
+        return value.map(item => canonical(item, depth + 1));
+    if (value && typeof value === "object")
+        return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonical(value[key], depth + 1)]));
+    return value;
+}
+function metadata(payload) {
+    const session = payload.session_id;
+    if (typeof session !== "string" || !/^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i.test(session))
+        return;
+    if (typeof payload.agent_id === "string" && payload.agent_id && payload.agent_id !== session)
+        return;
+    if (typeof payload.tool_name !== "string" || payload.tool_name.length > 256)
+        return;
+    try {
+        const input = JSON.stringify([payload.tool_name, payload.tool_input]);
+        if (Buffer.byteLength(input) > 65536)
+            return;
+        const normalized = JSON.stringify(canonical(JSON.parse(input)));
+        return { session, signature: createHash("sha256").update(normalized).digest("hex") };
+    }
+    catch {
+        return;
+    }
+}
+/** Correlates only this input epoch. Ambiguous/missing metadata never clears a dialog. */
+export class ClaudePermissionTracker {
+    resolved;
+    operations = new Map();
+    active;
+    timer;
+    epoch = 0;
+    constructor(resolved) {
+        this.resolved = resolved;
+    }
+    get pending() { return Boolean(this.active && !this.active.resolved); }
+    get toolBusy() { return this.operations.size > 0; }
+    reset() {
+        this.epoch++;
+        clearTimeout(this.timer);
+        this.timer = undefined;
+        this.active = undefined;
+        this.operations.clear();
+    }
+    preTool(payload, origin) {
+        const meta = metadata(payload);
+        const id = payload.tool_use_id;
+        if (!meta || typeof id !== "string" || !id || id.length > 256 || typeof payload.transcript_path !== "string")
+            return;
+        const key = `${meta.session}:${id}`;
+        if (this.operations.has(key))
+            return;
+        const operation = { ...meta, key, toolUseId: id, origin, anchor: captureClaudeToolResultAnchor(payload.transcript_path, meta.session) };
+        this.operations.set(key, operation);
+        while (this.operations.size > 128)
+            this.operations.delete(this.operations.keys().next().value);
+        const active = this.active;
+        if (active && !active.resolved && active.session === meta.session && active.signature === meta.signature) {
+            if (active.operation && active.operation !== operation)
+                active.ambiguous = true;
+            else if (!active.ambiguous)
+                active.operation = operation;
+            active.origin = this.commonOrigin([...this.operations.values()].filter(op => op.session === meta.session && op.signature === meta.signature));
+        }
+    }
+    permissionRequest(payload) {
+        const meta = metadata(payload);
+        if (!meta)
+            return;
+        const matches = [...this.operations.values()].filter(op => op.session === meta.session && op.signature === meta.signature);
+        if (this.active && !this.active.resolved && this.active.operation === matches[0] && matches.length === 1)
+            return;
+        const alreadyPending = this.pending;
+        this.active = { ...meta, origin: this.commonOrigin(matches), operation: matches.length === 1 ? matches[0] : undefined, ambiguous: alreadyPending || matches.length > 1, resolved: false };
+        this.poll(this.active, this.epoch);
+    }
+    question(payload) {
+        const meta = metadata(payload);
+        if (!meta || typeof payload.tool_use_id !== "string")
+            return;
+        const operation = this.operations.get(`${meta.session}:${payload.tool_use_id}`);
+        if (!operation)
+            return;
+        this.active = { ...meta, origin: operation.origin, operation, ambiguous: this.pending, resolved: false };
+        this.poll(this.active, this.epoch);
+        return this.active;
+    }
+    notification(payload) {
+        if (typeof payload.agent_id === "string" && payload.agent_id && payload.agent_id !== payload.session_id)
+            return;
+        return this.active?.session === payload.session_id ? this.active : undefined;
+    }
+    commonOrigin(operations) {
+        const origin = operations[0]?.origin;
+        return origin && operations.every(operation => operation.origin === origin) ? origin : undefined;
+    }
+    toolFinished(payload) {
+        const meta = metadata(payload);
+        const id = payload.tool_use_id;
+        if (!meta || typeof id !== "string")
+            return;
+        const operation = this.operations.get(`${meta.session}:${id}`);
+        if (!operation || operation.signature !== meta.signature)
+            return;
+        const active = this.active;
+        if (active && !active.ambiguous && active.operation === operation)
+            this.complete(active);
+        this.operations.delete(operation.key);
+    }
+    answered(token) {
+        // An explicit answer retains the old user-controlled answer behavior.
+        if (token && token === this.active) {
+            token.ambiguous = false;
+            this.complete(token);
+        }
+    }
+    complete(token) {
+        if (token !== this.active || token.resolved || token.ambiguous)
+            return;
+        token.resolved = true;
+        if (token.operation)
+            this.operations.delete(token.operation.key);
+        clearTimeout(this.timer);
+        this.timer = undefined;
+        this.resolved(token);
+    }
+    poll(token, epoch) {
+        clearTimeout(this.timer);
+        this.timer = setTimeout(async () => {
+            if (token !== this.active || token.resolved || epoch !== this.epoch)
+                return;
+            if (!token.ambiguous && token.operation) {
+                const anchor = await token.operation.anchor;
+                const results = anchor ? await readClaudeToolResults(anchor, [token.operation.toolUseId]) : [];
+                if (token === this.active && epoch === this.epoch && !token.ambiguous && results.some(result => result.toolUseId === token.operation?.toolUseId))
+                    this.complete(token);
+            }
+            if (token === this.active && !token.resolved && epoch === this.epoch)
+                this.poll(token, epoch);
+        }, 500);
+        this.timer.unref();
+    }
+}
+//# sourceMappingURL=claude-permissions.js.map

package/dist/remote/claude-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-permissions.js","sourceRoot":"","sources":["../../src/remote/claude-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,qBAAqB,EAA+B,MAAM,0BAA0B,CAAC;AAmB7H,SAAS,SAAS,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC1C,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9K,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO;IAC3G,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACrG,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO;IACpF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK;YAAE,OAAO;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;AACrB,CAAC;AAED,0FAA0F;AAC1F,MAAM,OAAO,uBAAuB;IAKL;IAJZ,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACvD,MAAM,CAAyB;IAC/B,KAAK,CAAkB;IACvB,KAAK,GAAG,CAAC,CAAC;IAClB,YAA6B,QAAgD;QAAhD,aAAQ,GAAR,QAAQ,CAAwC;IAAG,CAAC;IAEjF,IAAI,OAAO,KAAc,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,QAAQ,KAAc,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAE5D,KAAK;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,OAAgC,EAAE,MAAe;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;YAAE,OAAO;QACrH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACrC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG;YAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QACzG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzG,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;iBAC3E,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YACzD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,OAAgC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3H,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjH,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1L,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,OAAgC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,OAAgC;QAC3C,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,UAAU;YAAE,OAAO;QAChH,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IAEO,YAAY,CAAC,UAA2B;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACrC,OAAO,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,CAAC;IAED,YAAY,CAAC,OAAgC;QAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,CAAC,KAAwC;QAC/C,sEAAsE;QACtE,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IACxF,CAAC;IAEO,QAAQ,CAAC,KAA4B;QAC3C,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO;QACvE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,IAAI,KAAK,CAAC,SAAS;YAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAEO,IAAI,CAAC,KAA4B,EAAE,KAAa;QACtD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;YACjC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO;YAC5E,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/F,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzK,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChG,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/remote/claude-tool-results.d.ts

@@ -0,0 +1,18 @@
+export interface ClaudeToolResultAnchor {
+    file: string;
+    projectsRoot: string;
+    nativeSessionId: string;
+    device: number;
+    inode: number;
+    offset: number;
+    prefixHash: string;
+    prefixBytes: number;
+    lineBoundary: boolean;
+}
+/** Capture before permission execution; old results before this offset cannot resolve it. */
+export declare function captureClaudeToolResultAnchor(file: string, nativeSessionId: string, configDir?: string): Promise<ClaudeToolResultAnchor | undefined>;
+/** Bounded metadata only. No directory discovery or raw tool content is returned. */
+export declare function readClaudeToolResults(anchor: ClaudeToolResultAnchor, expectedIds: readonly string[]): Promise<Array<{
+    toolUseId: string;
+    isError: boolean;
+}>>;

package/dist/remote/claude-tool-results.js

@@ -0,0 +1,116 @@
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, open, realpath } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const UUID = /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i;
+const MAX_READ = 256 * 1024;
+const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
+/** Only a main-session UUID file immediately below the owned projects root. */
+async function openTranscript(file, nativeSessionId, projectsRoot) {
+    if (!path.isAbsolute(file) || !UUID.test(nativeSessionId) || path.basename(file) !== `${nativeSessionId}.jsonl`)
+        return;
+    const parent = path.dirname(path.resolve(file));
+    const entry = await lstat(parent);
+    if (!entry.isDirectory() || entry.isSymbolicLink())
+        return;
+    const canonicalParent = await realpath(parent);
+    if (path.dirname(canonicalParent) !== projectsRoot)
+        return;
+    const before = await lstat(file);
+    if (!before.isFile() || before.isSymbolicLink())
+        return;
+    const handle = await open(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const info = await handle.stat();
+        const after = await lstat(file);
+        if (!info.isFile() || info.dev !== before.dev || info.ino !== before.ino || after.isSymbolicLink() || after.dev !== info.dev || after.ino !== info.ino || await realpath(parent) !== canonicalParent) {
+            await handle.close();
+            return;
+        }
+        return { handle, info };
+    }
+    catch (error) {
+        await handle.close();
+        throw error;
+    }
+}
+/** Capture before permission execution; old results before this offset cannot resolve it. */
+export async function captureClaudeToolResultAnchor(file, nativeSessionId, configDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude")) {
+    try {
+        const projectsRoot = await realpath(path.join(configDir, "projects"));
+        const opened = await openTranscript(file, nativeSessionId, projectsRoot);
+        if (!opened)
+            return;
+        const { handle, info } = opened;
+        try {
+            const prefixBytes = Math.min(info.size, 64);
+            const prefix = Buffer.alloc(prefixBytes);
+            const read = await handle.read(prefix, 0, prefixBytes, info.size - prefixBytes);
+            if (read.bytesRead !== prefixBytes)
+                return;
+            return { file, projectsRoot, nativeSessionId, device: info.dev, inode: info.ino, offset: info.size, prefixBytes, prefixHash: hash(prefix), lineBoundary: info.size === 0 || prefix.at(-1) === 10 };
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch {
+        return;
+    }
+}
+/** Bounded metadata only. No directory discovery or raw tool content is returned. */
+export async function readClaudeToolResults(anchor, expectedIds) {
+    if (expectedIds.length > 16 || expectedIds.some(id => typeof id !== "string" || id.length === 0 || id.length > 256))
+        return [];
+    try {
+        const opened = await openTranscript(anchor.file, anchor.nativeSessionId, anchor.projectsRoot);
+        if (!opened)
+            return [];
+        const { handle, info } = opened;
+        try {
+            if (info.dev !== anchor.device || info.ino !== anchor.inode || info.size < anchor.offset)
+                return [];
+            const prefix = Buffer.alloc(anchor.prefixBytes);
+            if ((await handle.read(prefix, 0, prefix.length, anchor.offset - prefix.length)).bytesRead !== prefix.length || hash(prefix) !== anchor.prefixHash)
+                return [];
+            const start = Math.max(anchor.offset, info.size - MAX_READ);
+            const bytes = Buffer.alloc(Math.min(MAX_READ, info.size - start));
+            const { bytesRead } = await handle.read(bytes, 0, bytes.length, start);
+            let text = bytes.subarray(0, bytesRead).toString("utf8");
+            if (start > anchor.offset || !anchor.lineBoundary) {
+                const boundary = text.indexOf("\n");
+                if (boundary < 0)
+                    return [];
+                text = text.slice(boundary + 1);
+            }
+            // Never accept an unfinished append; complete rows end in a newline.
+            text = text.slice(0, text.lastIndexOf("\n") + 1);
+            const ids = new Set(expectedIds);
+            const found = new Map();
+            for (const line of text.split("\n")) {
+                let row;
+                try {
+                    row = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                if (row?.type !== "user" || row.isSidechain === true || row.sessionId !== anchor.nativeSessionId || row.message?.role !== "user" || !Array.isArray(row.message.content))
+                    continue;
+                for (const block of row.message.content) {
+                    if (block?.type === "tool_result" && typeof block.tool_use_id === "string" && ids.has(block.tool_use_id))
+                        found.set(block.tool_use_id, block.is_error === true);
+                }
+            }
+            return [...found].map(([toolUseId, isError]) => ({ toolUseId, isError }));
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=claude-tool-results.js.map

package/dist/remote/claude-tool-results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-tool-results.js","sourceRoot":"","sources":["../../src/remote/claude-tool-results.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,IAAI,GAAG,gDAAgD,CAAC;AAC9D,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAcjF,+EAA+E;AAC/E,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,eAAuB,EAAE,YAAoB;IACvF,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,eAAe,QAAQ;QAAE,OAAO;IACxH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO;IAC3D,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,YAAY;QAAE,OAAO;IAC3D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE;QAAE,OAAO;IACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,eAAe,EAAE,CAAC;YACrM,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO;QAC/B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACxD,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAY,EAAE,eAAuB,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC;IACxK,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;YAChF,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW;gBAAE,OAAO;YAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACrM,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;AACrB,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA8B,EAAE,WAA8B;IACxG,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/H,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC;YACpG,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,UAAU;gBAAE,OAAO,EAAE,CAAC;YAC9J,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;YAClE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACvE,IAAI,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,QAAQ,GAAG,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC;YACD,qEAAqE;YACrE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,GAAG,CAAC;gBACR,IAAI,CAAC;oBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACnD,IAAI,GAAG,EAAE,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAClL,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACxC,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;wBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;gBAClK,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC"}

package/dist/remote/controller.d.ts

@@ -34,11 +34,23 @@ export declare class RemoteSession {
     private runHeadless?;
     private readonly queue;
     private current?;
+    private inputReady;
+    private steering?;
+    private readonly pendingSteers;
+    private readonly canceledSteers;
+    private nativeBusy;
+    private stopHooksUncorrelated;
+    private nativeEpoch;
+    private nativeIdleTimer?;
+    private readonly idleWaiters;
     private draining;
     private stopped;
     private catalog;
     private stopWatching?;
     private pending?;
+    private pendingPermission?;
+    private nativeInputOrigin;
+    private readonly claudePermissions;
     constructor(ctx: RemoteSessionContext, hooks?: HookServer);
     attachTui(pty: PtySession): void;
     attachHeadless(run: (prompt: string) => HeadlessTurn): void;
@@ -51,10 +63,19 @@ export declare class RemoteSession {
     private finish;
     private onTurn;
     private onInterrupt;
+    private pruneCanceledSteers;
     private onCheckpoint;
     private onHook;
     private turnEnded;
+    private nativeIdle;
+    /** After steering, unscoped Stop hooks remain ambiguous even for successors.
+     * Local keyboard activity has no receipt to await, so bound its FIFO hold by
+     * the same quiet fallback instead of waiting forever for a trusted hook.
+     */
+    private watchLocalQuietFallback;
+    private hasQuestion;
     private requestQuestion;
+    private promptGeneration;
     private requestPrompt;
     private clearPending;
     /** `prompt.answer` frame: inject the keystrokes for the pending prompt. */