@loopyjs/claude-code 0.1.0

package/README.md

@@ -0,0 +1,58 @@
+# @loopyjs/claude-code
+
+A loopy `ModelClient` backed by the **Claude Code CLI** in headless mode
+(`claude -p`), authenticated by your Claude Pro/Max **subscription** instead of
+an `ANTHROPIC_API_KEY`.
+
+`claude -p` is constrained to a single tool-less turn, so it behaves like a
+plain text completion. loopy keeps ownership of the reducer graph, the tool
+loop, and replay — this client only fills the `complete()` contract, exactly
+like `@loopyjs/anthropic`.
+
+```ts
+import { defineLoopy, agent, io } from "@loopyjs/core";
+import { claudeCode } from "@loopyjs/claude-code";
+
+const sentiment = agent({
+  name: "sentiment",
+  model: "sub",
+  instructions:
+    'Classify the sentiment of the user message. ' +
+    'Respond with a single JSON object: {"label": "positive" | "negative" | "neutral"}.',
+  input: io<{ text: string }>(),
+  output: io<{ label: "positive" | "negative" | "neutral" }>(),
+});
+
+const rt = defineLoopy({
+  agents: { sentiment },
+  workflows: {},
+  deps: {},
+  models: { sub: claudeCode("opus") }, // runs on the subscription
+});
+
+await rt.run("sentiment", { text: "I love this API!" }); // → { label: "positive" }
+```
+
+## Scope & caveats
+
+- **Tool-less nodes only.** Tools are disabled, so `complete()` never returns
+  `toolCalls`. Attach this model only to agents without tools (classifiers,
+  judges, extractors…). Pointing a tool-using agent at it stalls the loop.
+- **Requires the `claude` CLI on PATH**, logged in via a Pro/Max subscription
+  (`claude` → `/status` should show a subscription login, not an API key). The
+  client strips `ANTHROPIC_API_KEY` from the child env so the subscription wins.
+- **Terms of service.** A personal subscription is fine for local dev,
+  dogfooding, and internal tooling. Backing a service you offer to others
+  violates Anthropic's consumer terms — use organization API keys there.
+
+## API
+
+```ts
+claudeCode(cliModel: string, opts?: { bin?: string; forceSubscription?: boolean }): ModelClient
+```
+
+- `cliModel` — the `--model` value: an alias (`"opus"` | `"sonnet"` |
+  `"fable"` | `"haiku"`) or a full model ID.
+- `opts.bin` — CLI binary path (default `"claude"`).
+- `opts.forceSubscription` — strip `ANTHROPIC_API_KEY` from the child env
+  (default `true`).

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+import type { ModelClient } from "@loopyjs/core";
+export interface ClaudeCodeOpts {
+    /** CLI binary; override if `claude` isn't on PATH. */
+    readonly bin?: string;
+    /** Strip ANTHROPIC_API_KEY from the child env so the subscription login wins. Default true. */
+    readonly forceSubscription?: boolean;
+}
+/**
+ * @param cliModel  the `--model` value passed to the CLI: an alias ("opus" |
+ *                  "sonnet" | "fable" | "haiku") or a full ID. This is separate
+ *                  from `req.model`, which is loopy's registry key used to route
+ *                  to this client — same split as anthropic(modelId, …).
+ */
+export declare function claudeCode(cliModel: string, opts?: ClaudeCodeOpts): ModelClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,WAAW,EAAyC,MAAM,eAAe,CAAC;AAYxF,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,+FAA+F;IAC/F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAgCD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,WAAW,CA6BnF"}

package/dist/index.js

@@ -0,0 +1,87 @@
+// ─────────────────────────────────────────────────────────────────────────────
+// claudeCode() — a ModelClient backed by the Claude Code CLI in headless mode
+// (`claude -p`), authenticated by the user's Pro/Max SUBSCRIPTION instead of an
+// external ANTHROPIC_API_KEY.
+//
+// `claude -p` is constrained to a SINGLE tool-less turn, so it behaves like a
+// plain text completion. loopy still owns the reducer graph, the tool loop, and
+// replay — this client only fills the `complete()` contract, exactly like the
+// @loopyjs/anthropic client does.
+//
+// ⚠️ Scope: because tools are disabled here, `complete()` never returns
+//    `toolCalls`. Attach this model ONLY to tool-less nodes (classifiers,
+//    judges, extractors…). A tool-using agent pointed at it stalls the loop.
+//
+// ⚠️ ToS: a personal subscription is fine for local dev / dogfooding / internal
+//    tooling. Backing a service you offer to others violates Anthropic's
+//    consumer terms — use org API keys there.
+// ─────────────────────────────────────────────────────────────────────────────
+import { spawn } from "node:child_process";
+// Model A takes a single prompt, so a multi-turn history is flattened with role
+// labels. For the tool-less nodes this client is meant for, `messages` is
+// usually just one user turn — the assistant/tool branches are defensive.
+function flattenPrompt(msgs) {
+    return msgs
+        .map((m) => {
+        if (m.role === "user")
+            return m.content;
+        if (m.role === "assistant")
+            return `[assistant]\n${m.content}`;
+        return `[tool result]\n${m.content}`;
+    })
+        .join("\n\n");
+}
+function runClaude(prompt, args, opts) {
+    return new Promise((resolve, reject) => {
+        const env = { ...process.env };
+        if (opts.forceSubscription ?? true)
+            delete env.ANTHROPIC_API_KEY;
+        const child = spawn(opts.bin ?? "claude", [...args], { env });
+        let out = "";
+        let err = "";
+        child.stdout.on("data", (d) => (out += d.toString()));
+        child.stderr.on("data", (d) => (err += d.toString()));
+        child.on("error", reject);
+        child.on("close", (code) => (code === 0 ? resolve(out) : reject(new Error(`claude exited ${code}: ${err}`))));
+        // Prompt via stdin (not argv) — avoids ARG_MAX limits on long histories.
+        child.stdin.write(prompt);
+        child.stdin.end();
+    });
+}
+/**
+ * @param cliModel  the `--model` value passed to the CLI: an alias ("opus" |
+ *                  "sonnet" | "fable" | "haiku") or a full ID. This is separate
+ *                  from `req.model`, which is loopy's registry key used to route
+ *                  to this client — same split as anthropic(modelId, …).
+ */
+export function claudeCode(cliModel, opts = {}) {
+    return {
+        async complete(req) {
+            const args = [
+                "-p",
+                "--output-format",
+                "json",
+                "--model",
+                cliModel,
+                // Replace (not append) the system prompt so Claude Code's own coding-
+                // oriented system prompt doesn't leak into a plain completion.
+                ...(req.system ? ["--system-prompt", req.system] : []),
+                // Disable all tools so it's one turn, no agentic loop.
+                // req.tools is intentionally ignored: this model never runs tools.
+                "--allowedTools",
+                "",
+            ];
+            const stdout = await runClaude(flattenPrompt(req.messages), args, opts);
+            const raw = JSON.parse(stdout);
+            if (raw.is_error)
+                throw new Error(`claude -p returned error: ${raw.result}`);
+            return {
+                text: raw.result || undefined,
+                stopReason: raw.stop_reason ?? "end_turn",
+                usage: raw.usage
+                    ? { inputTokens: raw.usage.input_tokens, outputTokens: raw.usage.output_tokens }
+                    : undefined,
+            };
+        },
+    };
+}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@loopyjs/claude-code",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "loopy model adapter backed by the Claude Code CLI (headless `claude -p`, subscription auth)",
+  "license": "MIT",
+  "repository": {
+  "type": "git",
+  "url": "git+https://github.com/kmjnnhyk/loopy.git",
+  "directory": "packages/claude-code"
+},
+"homepage": "https://loopy.js.org",
+"publishConfig": {
+"access": "public"
+},
+"exports": {
+".": {
+"bun": "./src/index.ts",
+"types": "./dist/index.d.ts",
+"default": "./dist/index.js"
+}
+},
+"files": ["dist", "src"],
+"peerDependencies": {
+"@loopyjs/core": "^0.1.0"
+}
+}

package/src/index.ts

@@ -0,0 +1,104 @@
+// ─────────────────────────────────────────────────────────────────────────────
+// claudeCode() — a ModelClient backed by the Claude Code CLI in headless mode
+// (`claude -p`), authenticated by the user's Pro/Max SUBSCRIPTION instead of an
+// external ANTHROPIC_API_KEY.
+//
+// `claude -p` is constrained to a SINGLE tool-less turn, so it behaves like a
+// plain text completion. loopy still owns the reducer graph, the tool loop, and
+// replay — this client only fills the `complete()` contract, exactly like the
+// @loopyjs/anthropic client does.
+//
+// ⚠️ Scope: because tools are disabled here, `complete()` never returns
+//    `toolCalls`. Attach this model ONLY to tool-less nodes (classifiers,
+//    judges, extractors…). A tool-using agent pointed at it stalls the loop.
+//
+// ⚠️ ToS: a personal subscription is fine for local dev / dogfooding / internal
+//    tooling. Backing a service you offer to others violates Anthropic's
+//    consumer terms — use org API keys there.
+// ─────────────────────────────────────────────────────────────────────────────
+import { spawn } from "node:child_process";
+import type { ModelClient, ModelMsg, ModelRequest, ModelResponse } from "@loopyjs/core";
+
+// The subset of `claude -p --output-format json` we consume. The CLI emits more
+// fields (session_id, total_cost_usd, modelUsage, num_turns, …) — we only read
+// what maps onto ModelResponse.
+interface ClaudeCliResult {
+  readonly result: string;
+  readonly stop_reason?: string;
+  readonly is_error?: boolean;
+  readonly usage?: { readonly input_tokens: number; readonly output_tokens: number };
+}
+
+export interface ClaudeCodeOpts {
+  /** CLI binary; override if `claude` isn't on PATH. */
+  readonly bin?: string;
+  /** Strip ANTHROPIC_API_KEY from the child env so the subscription login wins. Default true. */
+  readonly forceSubscription?: boolean;
+}
+
+// Model A takes a single prompt, so a multi-turn history is flattened with role
+// labels. For the tool-less nodes this client is meant for, `messages` is
+// usually just one user turn — the assistant/tool branches are defensive.
+function flattenPrompt(msgs: readonly ModelMsg[]): string {
+  return msgs
+    .map((m) => {
+      if (m.role === "user") return m.content;
+      if (m.role === "assistant") return `[assistant]\n${m.content}`;
+      return `[tool result]\n${m.content}`;
+    })
+    .join("\n\n");
+}
+
+function runClaude(prompt: string, args: readonly string[], opts: ClaudeCodeOpts): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const env = { ...process.env };
+    if (opts.forceSubscription ?? true) delete env.ANTHROPIC_API_KEY;
+    const child = spawn(opts.bin ?? "claude", [...args], { env });
+    let out = "";
+    let err = "";
+    child.stdout.on("data", (d: Buffer) => (out += d.toString()));
+    child.stderr.on("data", (d: Buffer) => (err += d.toString()));
+    child.on("error", reject);
+    child.on("close", (code) => (code === 0 ? resolve(out) : reject(new Error(`claude exited ${code}: ${err}`))));
+    // Prompt via stdin (not argv) — avoids ARG_MAX limits on long histories.
+    child.stdin.write(prompt);
+    child.stdin.end();
+  });
+}
+
+/**
+ * @param cliModel  the `--model` value passed to the CLI: an alias ("opus" |
+ *                  "sonnet" | "fable" | "haiku") or a full ID. This is separate
+ *                  from `req.model`, which is loopy's registry key used to route
+ *                  to this client — same split as anthropic(modelId, …).
+ */
+export function claudeCode(cliModel: string, opts: ClaudeCodeOpts = {}): ModelClient {
+  return {
+    async complete(req: ModelRequest): Promise<ModelResponse> {
+      const args: string[] = [
+        "-p",
+        "--output-format",
+        "json",
+        "--model",
+        cliModel,
+        // Replace (not append) the system prompt so Claude Code's own coding-
+        // oriented system prompt doesn't leak into a plain completion.
+        ...(req.system ? ["--system-prompt", req.system] : []),
+        // Disable all tools so it's one turn, no agentic loop.
+        // req.tools is intentionally ignored: this model never runs tools.
+        "--allowedTools",
+        "",
+      ];
+      const stdout = await runClaude(flattenPrompt(req.messages), args, opts);
+      const raw = JSON.parse(stdout) as ClaudeCliResult;
+      if (raw.is_error) throw new Error(`claude -p returned error: ${raw.result}`);
+      return {
+        text: raw.result || undefined,
+        stopReason: raw.stop_reason ?? "end_turn",
+        usage: raw.usage
+          ? { inputTokens: raw.usage.input_tokens, outputTokens: raw.usage.output_tokens }
+          : undefined,
+      };
+    },
+  };
+}