@loompad/cli 0.1.0 → 1.1.1

package/dist/providers/approvals.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Bridges provider approval requests to Loom's approval cards: a
+ * `request.opened` event is put to a person through the daemon's broker
+ * (core/approvals.ts), and the answer goes back to the provider through
+ * ProviderService. A card still open when its turn or session ends is closed
+ * as denied.
+ *
+ * t3code routes the same decision through orchestration commands
+ * (`thread.approval.respond`); this is Loom's smaller equivalent until the
+ * UI overhaul gives requests their own surface.
+ */
+import { requestApproval } from "../core/approvals.js";
+import type { ProviderService } from "./service.js";
+export declare class ApprovalBridge {
+    private readonly service;
+    private readonly project;
+    private readonly ask;
+    private readonly open;
+    private readonly unsubscribe;
+    constructor(service: ProviderService, project: () => string, ask?: typeof requestApproval);
+    close(): void;
+    private observe;
+    private abort;
+}

package/dist/providers/approvals.js

@@ -0,0 +1,78 @@
+/**
+ * Bridges provider approval requests to Loom's approval cards: a
+ * `request.opened` event is put to a person through the daemon's broker
+ * (core/approvals.ts), and the answer goes back to the provider through
+ * ProviderService. A card still open when its turn or session ends is closed
+ * as denied.
+ *
+ * t3code routes the same decision through orchestration commands
+ * (`thread.approval.respond`); this is Loom's smaller equivalent until the
+ * UI overhaul gives requests their own surface.
+ */
+import { requestApproval } from "../core/approvals.js";
+const TOOL_BY_REQUEST = {
+    command_execution_approval: "shell", exec_command_approval: "shell",
+    file_change_approval: "file_change", apply_patch_approval: "file_change", file_read_approval: "file_read",
+};
+export class ApprovalBridge {
+    service;
+    project;
+    ask;
+    open = new Map();
+    unsubscribe;
+    constructor(service, project, ask = requestApproval) {
+        this.service = service;
+        this.project = project;
+        this.ask = ask;
+        this.unsubscribe = service.onEvent(event => this.observe(event));
+    }
+    close() {
+        this.unsubscribe();
+        for (const controller of this.open.values())
+            controller.abort();
+        this.open.clear();
+    }
+    observe(event) {
+        const session = `${event.threadId}\u0000${event.instanceId}`;
+        if (event.type === "request.opened" && event.requestId) {
+            if (event.payload.requestType === "tool_user_input")
+                return; // questions go through user-input
+            const controller = new AbortController();
+            const k = `${session}\u0000${event.requestId}`;
+            this.open.set(k, controller);
+            // `args` is either the tool's input, or `{ tool, input }` when the provider names the tool.
+            const args = (event.payload.args ?? {});
+            const named = typeof args.tool === "string";
+            const tool = named ? args.tool : TOOL_BY_REQUEST[event.payload.requestType] ?? event.payload.requestType;
+            const input = named && args.input && typeof args.input === "object" ? args.input : args;
+            const sessionOption = (event.payload.options ?? []).some(o => o.decision === "acceptForSession");
+            void this.ask({ project: this.project(), agent: event.instanceId, tool, input, ...(sessionOption ? { sessionOption } : {}),
+                ...(event.payload.detail ? { summary: event.payload.detail } : {}), signal: controller.signal })
+                .then(decision => {
+                if (controller.signal.aborted)
+                    return;
+                const answer = decision.behavior !== "allow" ? "decline"
+                    : decision.scope === "session" && sessionOption ? "acceptForSession" : "accept";
+                return this.service.respondToRequest(event.threadId, event.instanceId, event.requestId, answer);
+            })
+                .catch(() => { })
+                .finally(() => this.open.delete(k));
+            return;
+        }
+        if (event.type === "request.resolved" && event.requestId) {
+            // Resolved elsewhere (the provider timed out or cancelled it): close the card.
+            this.abort(`${session}\u0000${event.requestId}`);
+            return;
+        }
+        if (event.type === "turn.completed" || event.type === "turn.aborted" || event.type === "session.exited") {
+            for (const k of [...this.open.keys()])
+                if (k.startsWith(`${session}\u0000`))
+                    this.abort(k);
+        }
+    }
+    abort(k) {
+        this.open.get(k)?.abort();
+        this.open.delete(k);
+    }
+}
+//# sourceMappingURL=approvals.js.map

package/dist/providers/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../src/providers/approvals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,MAAM,eAAe,GAA2B;IAC9C,0BAA0B,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO;IACnE,oBAAoB,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,kBAAkB,EAAE,WAAW;CAC1G,CAAC;AAEF,MAAM,OAAO,cAAc;IAII;IAA2C;IACrD;IAJF,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC1C,WAAW,CAAa;IAEzC,YAA6B,OAAwB,EAAmB,OAAqB,EAC1E,MAA8B,eAAe;QADnC,YAAO,GAAP,OAAO,CAAiB;QAAmB,YAAO,GAAP,OAAO,CAAc;QAC1E,QAAG,GAAH,GAAG,CAA0C;QAC9D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAEO,OAAO,CAAC,KAA2B;QACzC,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,iBAAiB;gBAAE,OAAO,CAAC,kCAAkC;YAC/F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,GAAG,OAAO,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YAC7B,4FAA4F;YAC5F,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACnE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YACnH,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACxF,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAC;YACjG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;iBAC/F,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtC,MAAM,MAAM,GAAqB,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS;oBACxE,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAClF,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAU,EAAE,MAAM,CAAC,CAAC;YACnG,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAuD,CAAC,CAAC;iBACpE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACzD,+EAA+E;YAC/E,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACxG,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,OAAO,QAAQ,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,CAAS;QACrB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/providers/attachments.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Pictures attached to a prompt, for harnesses that can take them natively.
+ *
+ * Every client (desktop composer, phone) sends an attachment as a line
+ * "[image] .loom/attachments/<hash>.<ext>" in the prompt text. A harness that
+ * only sees that line has to decide to open the file itself — Claude often
+ * doesn't, and an agent without a file tool can't. So each adapter also hands
+ * the image over the way its harness takes one (Claude: a base64 image block;
+ * Codex: a localImage input). The line stays in the text: it names the file.
+ *
+ * Only Loom's own attachments folder, inside the session's folder, and only
+ * real images under 10MB — a prompt can't use this to read anything else.
+ */
+export interface AttachedImage {
+    /** As written in the prompt: .loom/attachments/<hash>.<ext> */
+    rel: string;
+    abs: string;
+    mime: string;
+}
+export declare function attachedImages(text: string, cwd: string | undefined): AttachedImage[];

package/dist/providers/attachments.js

@@ -0,0 +1,51 @@
+/**
+ * Pictures attached to a prompt, for harnesses that can take them natively.
+ *
+ * Every client (desktop composer, phone) sends an attachment as a line
+ * "[image] .loom/attachments/<hash>.<ext>" in the prompt text. A harness that
+ * only sees that line has to decide to open the file itself — Claude often
+ * doesn't, and an agent without a file tool can't. So each adapter also hands
+ * the image over the way its harness takes one (Claude: a base64 image block;
+ * Codex: a localImage input). The line stays in the text: it names the file.
+ *
+ * Only Loom's own attachments folder, inside the session's folder, and only
+ * real images under 10MB — a prompt can't use this to read anything else.
+ */
+import fs from "node:fs";
+import path from "node:path";
+const MIME = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".gif": "image/gif", ".webp": "image/webp" };
+const MAX = 10 * 1024 * 1024;
+export function attachedImages(text, cwd) {
+    if (!cwd)
+        return [];
+    let root;
+    try {
+        root = fs.realpathSync(path.join(cwd, ".loom", "attachments"));
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    const seen = new Set();
+    for (const m of text.matchAll(/^\[image\] (\.loom\/attachments\/[\w.-]+)\s*$/gm)) {
+        const rel = m[1];
+        const mime = MIME[path.extname(rel).toLowerCase()];
+        if (!mime || seen.has(rel))
+            continue;
+        try {
+            const abs = fs.realpathSync(path.join(cwd, rel));
+            if (path.dirname(abs) !== root)
+                continue;
+            const st = fs.statSync(abs);
+            if (!st.isFile() || st.size > MAX)
+                continue;
+            seen.add(rel);
+            out.push({ rel, abs, mime });
+        }
+        catch {
+            /* gone, or never there — the text line still names it */
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=attachments.js.map

package/dist/providers/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../src/providers/attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,IAAI,GAA2B,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACtJ,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAS7B,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAuB;IAClE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAC5F,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAAE,CAAC;QACjF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG;gBAAE,SAAS;YAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/providers/claude/adapter.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Claude Code on the provider contract: one warm Agent SDK query per chat
+ * session, fed by a streaming-input prompt queue.
+ *
+ *   query({ prompt: queue, options })  → initializationResult()   (startSession)
+ *   queue.push(user message)            → … stream … → result      (sendTurn, many per process)
+ *   query.setModel(model)                                          (model switch, in-session)
+ *
+ * The CLI stays up between turns, so a follow-up is one user message on an
+ * open stream rather than a process launch and a session resume. SDK messages
+ * are mapped onto the canonical runtime events; nothing above this file reads
+ * one.
+ *
+ * Ported from t3code (MIT, © T3 Tools Inc.):
+ *   apps/server/src/provider/Layers/ClaudeAdapter.ts — startSession (prompt
+ *   queue, query options, session id chosen up front), sendTurn (setModel, the
+ *   user message carries the turn id), interruptTurn (a hard session boundary:
+ *   the query is closed, because interrupt() can acknowledge while background
+ *   tasks keep the CLI alive), canUseTool, and the stream/result handling.
+ * Loom spawns the CLI itself (spawnClaudeCodeProcess) so each session owns a
+ * process group, and stopping it proves every tool it started is gone.
+ */
+import type { McpServerConfig } from "@anthropic-ai/claude-agent-sdk";
+import { type ProviderAdapter } from "../adapter.js";
+import type { AdapterCapabilities, ApprovalDecision, CanonicalItemType, InstanceId, ProviderRuntimeEvent, ProviderSession, RequestId, SendTurnInput, SessionStartInput, ThreadId, TurnStartResult, UserInputAnswers } from "../contracts.js";
+export interface ClaudeAdapterOptions {
+    /** Path to the claude binary, when it isn't `claude` on PATH. */
+    bin?: string;
+    /** Claude permission mode, overriding the runtime mode; e.g. "acceptEdits". */
+    permissionMode?: string;
+    /** Extra CLI args (`["--flag", "value", "--switch"]`), escape hatch. */
+    extraArgs?: string[];
+    /** Project MCP servers, applied when the session starts. */
+    mcpServers?: () => Record<string, McpServerConfig> | undefined;
+    /** Whether a person can answer approvals; without one, approval-required runs read-only (plan). */
+    canAsk?: () => boolean;
+    /** How long to wait for the CLI to initialize. */
+    startTimeoutMs?: number;
+}
+/**
+ * Where `claude` lives when it isn't on PATH. The installer puts it in
+ * ~/.local/bin, which a daemon started from the desktop app often doesn't
+ * have on PATH. PATH is still the last word.
+ */
+export declare function claudeBin(override?: string): string | null;
+/** `["--a", "1", "--b"]` → `{ a: "1", b: null }`, the SDK's extraArgs shape. */
+export declare function extraArgsRecord(args: unknown): Record<string, string | null> | undefined;
+/** t3code's classifyToolItemType, for the tools Claude Code ships. */
+export declare function claudeToolItemType(name: string): CanonicalItemType;
+export declare function summarizeToolInput(name: string, input: Record<string, unknown>): string;
+/** Tokens now in context from a main-thread response's usage: its last
+ * server-side iteration when present, input (with cache) plus output. */
+export declare function activeTokens(value: unknown): number;
+export declare class ClaudeProviderAdapter implements ProviderAdapter {
+    readonly instanceId: InstanceId;
+    private readonly options;
+    readonly provider: "claude-code";
+    readonly capabilities: AdapterCapabilities;
+    private readonly sessions;
+    private readonly hub;
+    constructor(instanceId: InstanceId, options?: ClaudeAdapterOptions);
+    onEvent(listener: (event: ProviderRuntimeEvent) => void): () => void;
+    listSessions(): ProviderSession[];
+    hasSession(threadId: ThreadId): boolean;
+    private emit;
+    startSession(input: SessionStartInput): Promise<ProviderSession>;
+    /** Permission mode and approval callback from the runtime mode. */
+    /**
+     * Permission mode from the runtime mode, and a `canUseTool` in every mode (as
+     * t3code has it): questions (AskUserQuestion) and plans (ExitPlanMode) reach
+     * Loom whatever the mode. Other tools the CLI asks about are allowed in full
+     * access, put to a person in approval-required, and denied in auto — Loom's
+     * auto never stops to ask; a tool runs there only if Claude's settings allow it.
+     */
+    private permissions;
+    private canUseTool;
+    /**
+     * AskUserQuestion → `user-input.requested`, and the answers back as the
+     * tool's input (t3code's handleAskUserQuestion). A question's id is its
+     * text: the SDK looks answers up by question text.
+     */
+    private askUser;
+    private resolveInput;
+    private resolvePending;
+    private session;
+    sendTurn(input: SendTurnInput): Promise<TurnStartResult>;
+    /** A hard boundary, as t3code has it: close the query and its process group. The next turn resumes. */
+    interruptTurn(threadId: ThreadId): Promise<void>;
+    respondToRequest(threadId: ThreadId, requestId: RequestId, decision: ApprovalDecision): Promise<void>;
+    respondToUserInput(threadId: ThreadId, requestId: RequestId, answers: UserInputAnswers): Promise<void>;
+    stopSession(threadId: ThreadId): Promise<void>;
+    stopAll(): Promise<void>;
+    /** The session is over: end its turn and report the exit (once). */
+    private closed;
+    /** Read the SDK stream until the CLI goes away. */
+    private consume;
+    private handle;
+    private contextUsage;
+}