@openclaw-cloud/agent-controller 1.0.0 → 2.1.0

package/dist/providers/claude-code/index.js

@@ -0,0 +1,276 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { logCollector } from '../../connection.js';
+import { toErrorMessage } from '../../utils/response.js';
+import { writeClaudeCodeSettings } from './settings-writer.js';
+import { runSetupTokenFlow } from './login-flow.js';
+import { ChannelBridgeServer, DEFAULT_SOCKET_PATH } from './socket-bridge.js';
+import { ClaudeProcess } from './spawn-claude.js';
+/**
+ * Claude Code provider — orchestrates a local Claude Code subprocess plus a
+ * channel-server worker that bridges Claude's stdio MCP channel into this
+ * controller process via a Unix domain socket.
+ *
+ * Architecture:
+ *   [Claude Code] ── stdio MCP ──> [agent-controller channel-server worker]
+ *                                  ── unix socket ──> [main agent-controller]
+ *
+ * See `socket-bridge.ts` for the wire protocol.
+ */
+export class ClaudeCodeProvider {
+    cfg;
+    name = 'claude-code';
+    _connected = false;
+    bridge = null;
+    claude = null;
+    lastHeartbeatAt = 0;
+    pendingLoginUrl = null;
+    pendingCodeResolvers = [];
+    replyPublisher = null;
+    constructor(cfg) {
+        this.cfg = cfg;
+    }
+    /** Register an outbound publisher; called by the chat handler at startup. */
+    setReplyPublisher(fn) {
+        this.replyPublisher = fn;
+    }
+    /** Used by the chat handler to feed user-submitted codes into the login flow. */
+    submitLoginCode(code) {
+        const resolver = this.pendingCodeResolvers.shift();
+        if (resolver) {
+            resolver(code);
+            return true;
+        }
+        return false;
+    }
+    /** The chat handler checks this to short-circuit the first message with the login URL. */
+    getPendingLoginUrl() {
+        return this.pendingLoginUrl;
+    }
+    /** Push an inbound chat/board message to Claude via the channel worker. */
+    pushToChannel(content, meta) {
+        if (!this.bridge) {
+            logCollector?.push('claude_push_no_bridge', 'warn', 'pushToChannel called but bridge is not up yet');
+            return;
+        }
+        this.bridge.push(content, meta);
+    }
+    /** Internal — invoked by the bridge when Claude replies via the tool. */
+    handleChannelReply(content, meta, tool) {
+        this.lastHeartbeatAt = Date.now();
+        const reply = { text: content, reply_to: meta.message_id };
+        this.replyPublisher?.(reply, tool, meta);
+    }
+    // ─── Lifecycle ────────────────────────────────────────────────────────────
+    async connect() {
+        if (this._connected)
+            return;
+        try {
+            if (!this.hasCredentials()) {
+                logCollector?.push('claude_connect_login_needed', 'info', 'No Claude credentials found — waiting for user login via chat');
+                void this.startLoginFlow();
+                return;
+            }
+            await this.materializeWorkspace();
+            await this.startBridgeAndClaude();
+            this._connected = true;
+            logCollector?.push('claude_connect_ok', 'info', 'claude-code provider connected');
+        }
+        catch (err) {
+            logCollector?.push('claude_connect_failed', 'error', `claude-code connect failed: ${toErrorMessage(err)}`);
+            throw err;
+        }
+    }
+    disconnect() {
+        this._connected = false;
+        this.claude?.stop();
+        this.claude = null;
+        void this.bridge?.close();
+        this.bridge = null;
+    }
+    isConnected() {
+        return this._connected;
+    }
+    async healthCheck() {
+        const alive = this.claude?.isRunning() ?? false;
+        const fresh = this.lastHeartbeatAt === 0 || Date.now() - this.lastHeartbeatAt < 60_000;
+        return { ok: this._connected && alive && fresh, rpcOk: alive };
+    }
+    async restart() {
+        this.disconnect();
+        await this.connect();
+    }
+    async abort() {
+        this.claude?.interrupt();
+    }
+    // ─── Messaging ────────────────────────────────────────────────────────────
+    async sendMessage(params) {
+        try {
+            if (this.pendingLoginUrl) {
+                params.onDone?.(`To connect, log in at: ${this.pendingLoginUrl}\n\nPaste the verification code in this chat once ready.`);
+                return;
+            }
+            if (!this._connected)
+                await this.connect();
+            if (!this.bridge) {
+                params.onError?.('claude-code channel bridge not running');
+                return;
+            }
+            this.bridge.push(params.text, {
+                chat_id: params.sessionKey,
+                source: 'web',
+                message_id: params.idempotencyKey,
+            });
+            // Reply flows back asynchronously via the reply publisher — no onDone here.
+        }
+        catch (err) {
+            params.onError?.(toErrorMessage(err));
+        }
+    }
+    async listSessions() {
+        const dir = this.projectJsonlDir();
+        if (!dir)
+            return [];
+        try {
+            const entries = await fs.promises.readdir(dir);
+            const sessions = await Promise.all(entries
+                .filter((f) => f.endsWith('.jsonl'))
+                .map(async (file) => {
+                const full = path.join(dir, file);
+                const st = await fs.promises.stat(full);
+                const sessionId = file.replace(/\.jsonl$/, '');
+                return {
+                    key: sessionId,
+                    sessionId,
+                    kind: 'claude-code',
+                    label: sessionId,
+                    updatedAt: st.mtimeMs,
+                };
+            }));
+            return sessions.sort((a, b) => b.updatedAt - a.updatedAt);
+        }
+        catch {
+            return [];
+        }
+    }
+    async getHistory(sessionKey, limit = 200) {
+        const dir = this.projectJsonlDir();
+        if (!dir)
+            return [];
+        const file = path.join(dir, `${sessionKey}.jsonl`);
+        try {
+            const content = await fs.promises.readFile(file, 'utf-8');
+            const lines = content.split(/\r?\n/).filter((l) => l.trim());
+            const msgs = [];
+            for (const line of lines) {
+                try {
+                    const row = JSON.parse(line);
+                    const role = row.role ??
+                        row.message?.role ??
+                        (row.type === 'user' ? 'user' : row.type === 'assistant' ? 'assistant' : undefined);
+                    if (!role)
+                        continue;
+                    const rawContent = row.message?.content ?? '';
+                    const content = typeof rawContent === 'string' ? rawContent : rawContent;
+                    msgs.push({
+                        role,
+                        content,
+                        timestamp: row.timestamp ?? new Date().toISOString(),
+                    });
+                }
+                catch {
+                    /* skip malformed line */
+                }
+            }
+            return msgs.slice(-limit);
+        }
+        catch {
+            return [];
+        }
+    }
+    // ─── Internals ────────────────────────────────────────────────────────────
+    hasCredentials() {
+        if (this.cfg.anthropicAuthToken || this.cfg.anthropicApiKey || this.cfg.claudeCodeOauthToken) {
+            return true;
+        }
+        try {
+            return fs.statSync(path.join(os.homedir(), '.claude', '.credentials.json')).isFile();
+        }
+        catch {
+            return false;
+        }
+    }
+    async materializeWorkspace() {
+        await writeClaudeCodeSettings({
+            workspaceDir: this.cfg.workspaceDir,
+            anthropicApiKey: this.cfg.anthropicApiKey,
+            anthropicAuthToken: this.cfg.anthropicAuthToken,
+            backendUrl: this.cfg.backendUrl,
+            agentToken: this.cfg.agentToken,
+            claudeMdContent: this.cfg.claudeMdContent,
+            agentControllerBin: this.cfg.agentControllerBin,
+            channelSocketPath: this.cfg.socketPath,
+        });
+    }
+    async startBridgeAndClaude() {
+        // 1) Spin up the socket bridge FIRST so the worker can connect as soon as
+        //    Claude spawns it.
+        this.bridge = new ChannelBridgeServer({
+            socketPath: this.cfg.socketPath ?? DEFAULT_SOCKET_PATH,
+        });
+        this.bridge.on('reply', (content, meta, tool) => {
+            this.handleChannelReply(content, meta, tool);
+        });
+        this.bridge.on('connect', () => {
+            this.lastHeartbeatAt = Date.now();
+        });
+        await this.bridge.listen();
+        // 2) Spawn Claude — it will exec `agent-controller channel-server` as a
+        //    stdio MCP server per the workspace's `.mcp.json`.
+        this.claude = new ClaudeProcess({
+            workspaceDir: this.cfg.workspaceDir,
+            channelsFlag: 'mcp:agent-controller-channel',
+        });
+        this.claude.on('stderr', () => {
+            this.lastHeartbeatAt = Date.now();
+        });
+        this.claude.start();
+    }
+    async startLoginFlow() {
+        try {
+            await runSetupTokenFlow({
+                publishLoginUrl: (url) => {
+                    this.pendingLoginUrl = url;
+                },
+                waitForCode: () => new Promise((resolve) => {
+                    this.pendingCodeResolvers.push(resolve);
+                }),
+            });
+            this.pendingLoginUrl = null;
+            await this.materializeWorkspace();
+            await this.startBridgeAndClaude();
+            this._connected = true;
+        }
+        catch (err) {
+            logCollector?.push('claude_login_flow_error', 'error', `login flow failed: ${toErrorMessage(err)}`);
+            this.pendingLoginUrl = null;
+        }
+    }
+    projectJsonlDir() {
+        const cwd = this.cfg.workspaceDir;
+        if (!cwd)
+            return null;
+        const encoded = cwd.replace(/\//g, '-');
+        const dir = path.join(os.homedir(), '.claude', 'projects', encoded);
+        try {
+            if (fs.statSync(dir).isDirectory())
+                return dir;
+        }
+        catch {
+            /* ignore */
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/providers/claude-code/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/claude-code/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AA0BlD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,kBAAkB;IAWA;IAVpB,IAAI,GAAG,aAAa,CAAC;IAEtB,UAAU,GAAG,KAAK,CAAC;IACnB,MAAM,GAA+B,IAAI,CAAC;IAC1C,MAAM,GAAyB,IAAI,CAAC;IACpC,eAAe,GAAG,CAAC,CAAC;IACpB,eAAe,GAAkB,IAAI,CAAC;IACtC,oBAAoB,GAAkC,EAAE,CAAC;IACzD,cAAc,GAA0B,IAAI,CAAC;IAErD,YAA6B,GAA6B;QAA7B,QAAG,GAAH,GAAG,CAA0B;IAAG,CAAC;IAE9D,6EAA6E;IAC7E,iBAAiB,CAAC,EAAkB;QAClC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,iFAAiF;IACjF,eAAe,CAAC,IAAY;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0FAA0F;IAC1F,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,2EAA2E;IAC3E,aAAa,CAAC,OAAe,EAAE,IAAwB;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,YAAY,EAAE,IAAI,CAChB,uBAAuB,EACvB,MAAM,EACN,+CAA+C,CAChD,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,yEAAyE;IACzE,kBAAkB,CAChB,OAAe,EACf,IAAsB,EACtB,IAA8B;QAE9B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACzE,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,YAAY,EAAE,IAAI,CAChB,6BAA6B,EAC7B,MAAM,EACN,+DAA+D,CAChE,CAAC;gBACF,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,YAAY,EAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,EAAE,gCAAgC,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,EAAE,IAAI,CAChB,uBAAuB,EACvB,OAAO,EACP,+BAA+B,cAAc,CAAC,GAAG,CAAC,EAAE,CACrD,CAAC;YACF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,UAAU;QACR,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,KAAK,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK,IAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3B,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,MAAM,CAAC,MAAM,EAAE,CACb,0BAA0B,IAAI,CAAC,eAAe,0DAA0D,CACzG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,CAAC,OAAO,EAAE,CAAC,wCAAwC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5B,OAAO,EAAE,MAAM,CAAC,UAAU;gBAC1B,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,MAAM,CAAC,cAAc;aAClC,CAAC,CAAC;YACH,4EAA4E;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO;iBACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;iBACnC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC/C,OAAO;oBACL,GAAG,EAAE,SAAS;oBACd,SAAS;oBACT,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,SAAS;oBAChB,SAAS,EAAE,EAAE,CAAC,OAAO;iBACP,CAAC;YACnB,CAAC,CAAC,CACL,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,KAAK,GAAG,GAAG;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAkB,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAK1B,CAAC;oBACF,MAAM,IAAI,GACR,GAAG,CAAC,IAAI;wBACR,GAAG,CAAC,OAAO,EAAE,IAAI;wBACjB,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACtF,IAAI,CAAC,IAAI;wBAAE,SAAS;oBACpB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;oBAC9C,MAAM,OAAO,GACX,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,UAAiC,CAAC;oBACnF,IAAI,CAAC,IAAI,CAAC;wBACR,IAAI;wBACJ,OAAO;wBACP,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACrD,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,6EAA6E;IAErE,cAAc;QACpB,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC7F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,uBAAuB,CAAC;YAC5B,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY;YACnC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YACzC,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB;YAC/C,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU;YAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU;YAC/B,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YACzC,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB;YAC/C,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU;SACvC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,0EAA0E;QAC1E,uBAAuB;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC;YACpC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAmB;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CACZ,OAAO,EACP,CAAC,OAAe,EAAE,IAAsB,EAAE,IAA8B,EAAE,EAAE;YAC1E,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAE3B,wEAAwE;QACxE,uDAAuD;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC;YAC9B,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY;YACnC,YAAY,EAAE,8BAA8B;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC5B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC;gBACtB,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvB,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;gBAC7B,CAAC;gBACD,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;oBAC9B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1C,CAAC,CAAC;aACL,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,EAAE,IAAI,CAChB,yBAAyB,EACzB,OAAO,EACP,sBAAsB,cAAc,CAAC,GAAG,CAAC,EAAE,CAC5C,CAAC;YACF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,eAAe;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBAAE,OAAO,GAAG,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/providers/claude-code/login-flow.d.ts

@@ -0,0 +1,26 @@
+import { spawn } from 'node:child_process';
+export interface LoginFlowDeps {
+    /** Called with the login URL captured from `claude setup-token` stdout. */
+    publishLoginUrl(url: string): void | Promise<void>;
+    /** Resolves with the verification code that the user submitted in chat. */
+    waitForCode(): Promise<string>;
+    /** Override for tests — inject a fake child_process. */
+    spawnFn?: typeof spawn;
+    /** Override credentials path (tests). Defaults to `~/.claude/.credentials.json`. */
+    credentialsPath?: string;
+    /** Overall timeout in ms. Defaults to 10 minutes. */
+    timeoutMs?: number;
+}
+/**
+ * Drive the `claude setup-token` subscription login flow.
+ *
+ * Flow:
+ * 1. Spawn `claude setup-token` and watch stdout for the `claude.ai/oauth/authorize?...` URL.
+ * 2. Push the URL to chat via `deps.publishLoginUrl`.
+ * 3. Await `deps.waitForCode()` — resolves with the code the user submitted.
+ * 4. Write `code + "\n"` to subprocess stdin, wait for exit.
+ * 5. Verify `~/.claude/.credentials.json` was created/updated → success.
+ *
+ * Emits structured logCollector events at each milestone.
+ */
+export declare function runSetupTokenFlow(deps: LoginFlowDeps): Promise<void>;

package/dist/providers/claude-code/login-flow.js

@@ -0,0 +1,129 @@
+import { spawn } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { logCollector } from '../../connection.js';
+import { toErrorMessage } from '../../utils/response.js';
+const AUTH_URL_RE = /https:\/\/claude\.ai\/oauth\/authorize\?\S+/;
+const DEFAULT_TIMEOUT_MS = 10 * 60 * 1000; // 10 min
+/**
+ * Drive the `claude setup-token` subscription login flow.
+ *
+ * Flow:
+ * 1. Spawn `claude setup-token` and watch stdout for the `claude.ai/oauth/authorize?...` URL.
+ * 2. Push the URL to chat via `deps.publishLoginUrl`.
+ * 3. Await `deps.waitForCode()` — resolves with the code the user submitted.
+ * 4. Write `code + "\n"` to subprocess stdin, wait for exit.
+ * 5. Verify `~/.claude/.credentials.json` was created/updated → success.
+ *
+ * Emits structured logCollector events at each milestone.
+ */
+export async function runSetupTokenFlow(deps) {
+    const spawnFn = deps.spawnFn ?? spawn;
+    const credPath = deps.credentialsPath ?? path.join(os.homedir(), '.claude', '.credentials.json');
+    const timeoutMs = deps.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const startedAt = Date.now();
+    logCollector?.push('claude_login_start', 'info', 'Starting claude setup-token flow');
+    const credMtimeBefore = safeMtime(credPath);
+    const child = spawnFn('claude', ['setup-token'], {
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    let stdoutBuf = '';
+    let stderrBuf = '';
+    let urlPublished = false;
+    let codeWritten = false;
+    return new Promise((resolve, reject) => {
+        const timeoutHandle = setTimeout(() => {
+            cleanup();
+            logCollector?.push('claude_login_failed', 'error', 'Claude login timed out before completion', { durationMs: Date.now() - startedAt });
+            try {
+                child.kill('SIGKILL');
+            }
+            catch {
+                /* ignore */
+            }
+            reject(new Error('claude setup-token timed out'));
+        }, timeoutMs);
+        const onStdout = (chunk) => {
+            const text = chunk.toString();
+            stdoutBuf += text;
+            if (!urlPublished) {
+                const match = stdoutBuf.match(AUTH_URL_RE);
+                if (match) {
+                    urlPublished = true;
+                    const url = match[0];
+                    logCollector?.push('claude_login_url_published', 'info', 'Captured OAuth URL', { url });
+                    Promise.resolve(deps.publishLoginUrl(url))
+                        .then(() => deps.waitForCode())
+                        .then((code) => {
+                        if (!code || typeof code !== 'string') {
+                            throw new Error('waitForCode returned empty value');
+                        }
+                        codeWritten = true;
+                        logCollector?.push('claude_login_code_received', 'info', 'User submitted code');
+                        child.stdin.write(code.trim() + '\n');
+                        child.stdin.end();
+                    })
+                        .catch((err) => {
+                        cleanup();
+                        logCollector?.push('claude_login_failed', 'error', `Login pre-exit step failed: ${toErrorMessage(err)}`);
+                        try {
+                            child.kill('SIGKILL');
+                        }
+                        catch {
+                            /* ignore */
+                        }
+                        reject(err instanceof Error ? err : new Error(String(err)));
+                    });
+                }
+            }
+        };
+        const onStderr = (chunk) => {
+            stderrBuf += chunk.toString();
+        };
+        const onError = (err) => {
+            cleanup();
+            logCollector?.push('claude_login_failed', 'error', `spawn error: ${err.message}`);
+            reject(err);
+        };
+        const onExit = (code) => {
+            cleanup();
+            if (code === 0 && codeWritten) {
+                const credMtimeAfter = safeMtime(credPath);
+                const credChanged = credMtimeAfter !== null && credMtimeAfter !== credMtimeBefore;
+                if (credChanged) {
+                    logCollector?.push('claude_login_completed', 'info', 'Claude login succeeded', {
+                        durationMs: Date.now() - startedAt,
+                    });
+                    resolve();
+                    return;
+                }
+                logCollector?.push('claude_login_failed', 'error', 'Login exited 0 but credentials file was not updated', { credPath });
+                reject(new Error('credentials file not updated after setup-token'));
+                return;
+            }
+            logCollector?.push('claude_login_failed', 'error', `claude setup-token exited with code ${code ?? 'null'}`, { stderrTail: stderrBuf.slice(-500) });
+            reject(new Error(`claude setup-token exited with code ${code ?? 'null'}`));
+        };
+        function cleanup() {
+            clearTimeout(timeoutHandle);
+            child.stdout.off('data', onStdout);
+            child.stderr.off('data', onStderr);
+            child.off('error', onError);
+            child.off('exit', onExit);
+        }
+        child.stdout.on('data', onStdout);
+        child.stderr.on('data', onStderr);
+        child.on('error', onError);
+        child.on('exit', onExit);
+    });
+}
+function safeMtime(p) {
+    try {
+        return fs.statSync(p).mtimeMs;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=login-flow.js.map

package/dist/providers/claude-code/login-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-flow.js","sourceRoot":"","sources":["../../../src/providers/claude-code/login-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,MAAM,WAAW,GAAG,6CAA6C,CAAC;AAClE,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAepD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAmB;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;IAErF,MAAM,eAAe,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE;QAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAmC,CAAC;IAErC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,IAAI,CAChB,qBAAqB,EACrB,OAAO,EACP,0CAA0C,EAC1C,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CACvC,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACpD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,QAAQ,GAAG,CAAC,KAAsB,EAAQ,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9B,SAAS,IAAI,IAAI,CAAC;YAClB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACV,YAAY,GAAG,IAAI,CAAC;oBACpB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACrB,YAAY,EAAE,IAAI,CAAC,4BAA4B,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;oBACxF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;yBACvC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;yBAC9B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;wBACb,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;wBACtD,CAAC;wBACD,WAAW,GAAG,IAAI,CAAC;wBACnB,YAAY,EAAE,IAAI,CAAC,4BAA4B,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;wBAChF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;wBACtC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBACpB,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACb,OAAO,EAAE,CAAC;wBACV,YAAY,EAAE,IAAI,CAChB,qBAAqB,EACrB,OAAO,EACP,+BAA+B,cAAc,CAAC,GAAG,CAAC,EAAE,CACrD,CAAC;wBACF,IAAI,CAAC;4BACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;wBAAC,MAAM,CAAC;4BACP,YAAY;wBACd,CAAC;wBACD,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC9D,CAAC,CAAC,CAAC;gBACP,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAC,KAAsB,EAAQ,EAAE;YAChD,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;YACnC,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,IAAI,CAAC,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAQ,EAAE;YAC3C,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC9B,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC3C,MAAM,WAAW,GAAG,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,eAAe,CAAC;gBAClF,IAAI,WAAW,EAAE,CAAC;oBAChB,YAAY,EAAE,IAAI,CAAC,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;wBAC7E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;qBACnC,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,YAAY,EAAE,IAAI,CAChB,qBAAqB,EACrB,OAAO,EACP,qDAAqD,EACrD,EAAE,QAAQ,EAAE,CACb,CAAC;gBACF,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,YAAY,EAAE,IAAI,CAChB,qBAAqB,EACrB,OAAO,EACP,uCAAuC,IAAI,IAAI,MAAM,EAAE,EACvD,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CACtC,CAAC;YACF,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC;QAEF,SAAS,OAAO;YACd,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/providers/claude-code/settings-writer.d.ts

@@ -0,0 +1,29 @@
+export interface ClaudeCodeSettingsContext {
+    /** Absolute path to the Claude workspace (cwd of `claude` process) */
+    workspaceDir: string;
+    /** Anthropic API key. If prefixed with `sk-ant-oat` → treated as OAuth token. */
+    anthropicApiKey?: string;
+    /** Alternative: explicit auth token (takes precedence over anthropicApiKey) */
+    anthropicAuthToken?: string;
+    /** Backend URL for the openclaw-backend MCP server entry */
+    backendUrl?: string;
+    /** Bearer token for the openclaw-backend MCP server */
+    agentToken?: string;
+    /** Content of CLAUDE.md to write into the workspace (persona / bootstrap) */
+    claudeMdContent?: string;
+    /** Port of the local agent-memory MCP server (defaults to 3457). */
+    memoryMcpPort?: number;
+    /** Absolute path to the `agent-controller` bin. Defaults to `agent-controller` on PATH. */
+    agentControllerBin?: string;
+    /** Override the socket path (tests). */
+    channelSocketPath?: string;
+}
+/**
+ * Write `.claude/settings.json`, `.mcp.json`, and `CLAUDE.md` into the workspace.
+ *
+ * Idempotent — overwrites each call. Mirrors the logic in
+ * `src/utils/claude-env.ts` for OAuth vs API-key auth.
+ */
+export declare function writeClaudeCodeSettings(ctx: ClaudeCodeSettingsContext): Promise<void>;
+export declare function buildSettings(ctx: ClaudeCodeSettingsContext): Record<string, unknown>;
+export declare function buildMcpJson(ctx: ClaudeCodeSettingsContext): Record<string, unknown>;

package/dist/providers/claude-code/settings-writer.js

@@ -0,0 +1,79 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { config } from '../../config.js';
+/**
+ * Write `.claude/settings.json`, `.mcp.json`, and `CLAUDE.md` into the workspace.
+ *
+ * Idempotent — overwrites each call. Mirrors the logic in
+ * `src/utils/claude-env.ts` for OAuth vs API-key auth.
+ */
+export async function writeClaudeCodeSettings(ctx) {
+    const { workspaceDir } = ctx;
+    const dotClaude = path.join(workspaceDir, '.claude');
+    await fs.mkdir(dotClaude, { recursive: true });
+    await fs.writeFile(path.join(dotClaude, 'settings.json'), JSON.stringify(buildSettings(ctx), null, 2) + '\n');
+    await fs.writeFile(path.join(workspaceDir, '.mcp.json'), JSON.stringify(buildMcpJson(ctx), null, 2) + '\n');
+    if (ctx.claudeMdContent !== undefined) {
+        await fs.writeFile(path.join(workspaceDir, 'CLAUDE.md'), ctx.claudeMdContent);
+    }
+}
+// ---------------------------------------------------------------------------
+// Builders (exported for unit tests)
+// ---------------------------------------------------------------------------
+export function buildSettings(ctx) {
+    const permissions = { allow: ['Bash(*)', 'Read(*)', 'Write(*)', 'Edit(*)', 'mcp__*'] };
+    // Token precedence: explicit auth token > API key that looks like OAuth > API key
+    const authToken = ctx.anthropicAuthToken?.trim();
+    const apiKey = ctx.anthropicApiKey?.trim();
+    if (authToken) {
+        return { permissions, env: { ANTHROPIC_AUTH_TOKEN: authToken } };
+    }
+    if (apiKey?.startsWith('sk-ant-oat')) {
+        return { permissions, env: { ANTHROPIC_AUTH_TOKEN: apiKey } };
+    }
+    if (apiKey) {
+        return {
+            permissions,
+            env: { ANTHROPIC_API_KEY: apiKey },
+        };
+    }
+    // No static credentials: rely on ~/.claude/.credentials.json (subscription login)
+    return { permissions };
+}
+export function buildMcpJson(ctx) {
+    const memoryPort = ctx.memoryMcpPort ?? 3457;
+    const servers = {
+        'agent-memory': {
+            type: 'http',
+            url: `http://127.0.0.1:${memoryPort}/mcp`,
+        },
+    };
+    const backendUrl = ctx.backendUrl ?? config.backendUrl;
+    const token = ctx.agentToken ?? config.agentToken;
+    if (backendUrl && token) {
+        servers['openclaw-backend'] = {
+            type: 'http',
+            url: `${backendUrl.replace(/\/+$/, '')}/mcp`,
+            headers: { Authorization: `Bearer ${token}` },
+        };
+    }
+    // Channel server — spawned by Claude Code as a stdio MCP plugin. Declares
+    // the `experimental.claude/channel` capability, so Claude routes inbound
+    // chat traffic through it (and invokes the `reply`/`edit_message` tools
+    // when it wants to reply to the user).
+    //
+    // We use a plain stdio MCP entry (Option B) rather than Claude's `--channels
+    // plugin:` install mechanism — it avoids any out-of-band plugin install
+    // step and works with stock Claude Code.
+    const binary = ctx.agentControllerBin?.trim() || 'agent-controller';
+    const channelArgs = ['channel-server'];
+    if (ctx.channelSocketPath) {
+        channelArgs.push('--socket-path', ctx.channelSocketPath);
+    }
+    servers['agent-controller-channel'] = {
+        command: binary,
+        args: channelArgs,
+    };
+    return { mcpServers: servers };
+}
+//# sourceMappingURL=settings-writer.js.map

package/dist/providers/claude-code/settings-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-writer.js","sourceRoot":"","sources":["../../../src/providers/claude-code/settings-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAuBzC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAA8B;IAC1E,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACnD,CAAC;IAEF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAClD,CAAC;IAEF,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E,MAAM,UAAU,aAAa,CAAC,GAA8B;IAC1D,MAAM,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;IAEvF,kFAAkF;IAClF,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,WAAW;YACX,GAAG,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;SACnC,CAAC;IACJ,CAAC;IACD,kFAAkF;IAClF,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAA8B;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;IAC7C,MAAM,OAAO,GAA4B;QACvC,cAAc,EAAE;YACd,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,oBAAoB,UAAU,MAAM;SAC1C;KACF,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IAClD,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,kBAAkB,CAAC,GAAG;YAC5B,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;YAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,uCAAuC;IACvC,EAAE;IACF,6EAA6E;IAC7E,wEAAwE;IACxE,yCAAyC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC;IACpE,MAAM,WAAW,GAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,0BAA0B,CAAC,GAAG;QACpC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,WAAW;KAClB,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}

package/dist/providers/claude-code/socket-bridge.d.ts

@@ -0,0 +1,88 @@
+import { EventEmitter } from 'node:events';
+import type { ChannelReply, ChannelMessageMeta, ChannelReplyMeta } from './channel-server.js';
+/**
+ * Unix-domain-socket bridge between the main agent-controller process and the
+ * channel-server worker that holds Claude Code's stdio MCP channel.
+ *
+ * Protocol: newline-delimited JSON. Ops:
+ *   { op: "hello", pid }                                    — worker → main
+ *   { op: "reply", content, meta }                          — worker → main (Claude reply tool)
+ *   { op: "edit",  content, meta }                          — worker → main (Claude edit_message tool)
+ *   { op: "push",  content, meta }                          — main   → worker (inbound chat msg)
+ *
+ * Liberal parsing: malformed lines are logged + dropped (never crash the link).
+ */
+export declare const DEFAULT_SOCKET_PATH: string;
+export type SocketOp = {
+    op: 'hello';
+    pid: number;
+} | {
+    op: 'reply';
+    content: string;
+    meta: ChannelReplyMeta;
+} | {
+    op: 'edit';
+    content: string;
+    meta: ChannelReplyMeta;
+} | {
+    op: 'push';
+    content: string;
+    meta: ChannelMessageMeta;
+};
+export interface ChannelBridgeServerEvents {
+    connect: [pid: number | null];
+    reply: [content: string, meta: ChannelReplyMeta, tool: 'reply' | 'edit_message'];
+    close: [];
+    error: [err: Error];
+}
+/**
+ * Server side — lives in the main agent-controller process.
+ *
+ * Accepts exactly one worker connection (extras are rejected + closed). Emits
+ * reply/edit ops; callers invoke `push(content, meta)` to emit an inbound
+ * chat message to the worker.
+ */
+export declare class ChannelBridgeServer extends EventEmitter {
+    private readonly opts;
+    private server;
+    private active;
+    private buf;
+    constructor(opts?: {
+        socketPath?: string;
+    });
+    get socketPath(): string;
+    listen(): Promise<void>;
+    private handleConnection;
+    private ingest;
+    private dispatch;
+    /** Push an inbound chat message to the worker (→ Claude MCP notification). */
+    push(content: string, meta: ChannelMessageMeta): void;
+    private write;
+    close(): Promise<void>;
+    isConnected(): boolean;
+}
+/**
+ * Client side — lives in the channel-server worker subprocess.
+ *
+ * Connects to the bridge socket with retry/backoff (up to 30s). Parses
+ * incoming `push` ops and forwards outgoing `reply`/`edit` ops.
+ */
+export declare class ChannelBridgeClient extends EventEmitter {
+    private readonly opts;
+    private sock;
+    private buf;
+    private closed;
+    constructor(opts?: {
+        socketPath?: string;
+        maxWaitMs?: number;
+    });
+    get socketPath(): string;
+    connect(): Promise<void>;
+    private connectOnce;
+    sendHello(pid: number): void;
+    sendReply(content: string, meta: ChannelReplyMeta, tool: 'reply' | 'edit_message'): void;
+    private ingest;
+    private write;
+    close(): void;
+}
+export type { ChannelReply, ChannelMessageMeta, ChannelReplyMeta };