@openclaw-cloud/agent-controller 2.0.0 → 2.2.0

package/dist/providers/claude-code/socket-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-bridge.js","sourceRoot":"","sources":["../../../src/providers/claude-code/socket-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;AAE/F;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,KAAa,EACb,SAAoC,EACpC,SAAsB;IAEtB,IAAI,OAAO,GAAG,GAAG,GAAG,KAAK,CAAC;IAC1B,IAAI,GAAW,CAAC;IAChB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,EAAE,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD;;;;;;GAMG;AACH,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IAKtB;IAJrB,MAAM,GAAsB,IAAI,CAAC;IACjC,MAAM,GAAsB,IAAI,CAAC;IACjC,GAAG,GAAG,EAAE,CAAC;IAEjB,YAA6B,OAAgC,EAAE;QAC7D,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAA8B;QAE7D,2EAA2E;QAC3E,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,WAAW;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1B,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,+DAA+D;QAC/D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,uEAAuE;YACvE,sEAAsE;YACtE,mEAAmE;YACnE,mDAAmD;YACnD,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;gBACnC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,YAAY,EAAE,IAAI,CAAC,sBAAsB,EAAE,OAAO,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3F,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC1B,CAAC,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;gBACjB,KAAK,GAAG,IAAI,CAAC;gBACb,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;gBAClB,YAAY,EAAE,IAAI,CAAC,0BAA0B,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBACjF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,IAAgB;QACvC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,gDAAgD;YAChD,YAAY,EAAE,IAAI,CAChB,6BAA6B,EAC7B,MAAM,EACN,8DAA8D,CAC/D,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YACd,YAAY,EAAE,IAAI,CAAC,uBAAuB,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,EAAE,IAAI,CAChB,2BAA2B,EAC3B,MAAM,EACN,wBAAwB,GAAG,CAAC,OAAO,EAAE,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAC1B,IAAI,CAAC,GAAG,EACR,KAAK,EACL,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC3B,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,EAAE,+BAA+B,CAAC,CAC7F,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,GAA6B;QAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO;QACvD,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,GAAG,GACP,OAAQ,GAAyB,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC3F,YAAY,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC3F,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,GAAG,GAA4C,CAAC;gBACvD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAqB,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC3C,MAAM;YACR,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,CAAC,GAAG,GAA4C,CAAC;gBACvD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAqB,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;gBAClD,MAAM;YACR,CAAC;YACD;gBACE,YAAY,EAAE,IAAI,CAChB,2BAA2B,EAC3B,MAAM,EACN,eAAe,MAAM,CAAE,GAAwB,CAAC,EAAE,CAAC,EAAE,CACtD,CAAC;QACN,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,OAAe,EAAE,IAAwB;QAC5C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,EAAY;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,YAAY,EAAE,IAAI,CAAC,0BAA0B,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,EAAE,IAAI,CAChB,4BAA4B,EAC5B,MAAM,EACN,SAAS,EAAE,CAAC,EAAE,YAAY,cAAc,CAAC,GAAG,CAAC,EAAE,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IAKtB;IAJrB,IAAI,GAAsB,IAAI,CAAC;IAC/B,GAAG,GAAG,EAAE,CAAC;IACT,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,OAAoD,EAAE;QACjF,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAAkD;IAEnF,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,yEAAyE;QAEzE,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,OAAO,EAAE,CAAC;oBACnC,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBACD,OAAO,IAAI,CAAC,CAAC;gBACb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;gBACnC,CAAC,CAAC,kBAAkB,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YACF,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;oBACd,IAAI,CAAC,IAAI,CAAC,MAAM;wBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,SAAS,CAAC,OAAe,EAAE,IAAsB,EAAE,IAA8B;QAC/E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAAW,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9D,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,GAA4C,CAAC;gBACvD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAuB,CAAC;gBAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,EAAY;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/providers/claude-code/spawn-claude.d.ts

@@ -0,0 +1,48 @@
+import { spawn, type ChildProcess } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+export interface SpawnClaudeDeps {
+    /** Working directory for the claude process (workspace). */
+    workspaceDir: string;
+    /** Channels plugin flag argument (defaults to `plugin:agent-controller`). */
+    channelsFlag?: string;
+    /** Extra CLI flags to append. */
+    extraArgs?: string[];
+    /** Environment variables to merge on top of process.env. */
+    env?: Record<string, string | undefined>;
+    /**
+     * Pass `--dangerously-load-development-channels` to claude. Only needed
+     * when the channels feature is routed through an MCP-based dev plugin;
+     * production flows do not require it. Default: `false`.
+     */
+    danglyDev?: boolean;
+    /** Override spawn (tests). */
+    spawnFn?: typeof spawn;
+    /** Max retries on crash (default 5). */
+    maxRetries?: number;
+}
+/**
+ * Supervise a `claude` subprocess. Emits:
+ *   - `stderr` (Buffer)
+ *   - `stdout` (Buffer)
+ *   - `spawn` (ChildProcess)
+ *   - `exit` (code|null, signal|null)
+ *   - `gaveup` — too many crashes, no more restarts.
+ *
+ * Restart on crash with capped exponential backoff.
+ */
+export declare class ClaudeProcess extends EventEmitter {
+    private readonly deps;
+    private child;
+    private retries;
+    private shuttingDown;
+    private lastSpawnAt;
+    constructor(deps: SpawnClaudeDeps);
+    start(): void;
+    private spawnOnce;
+    private buildArgs;
+    /** Send SIGINT to interrupt the current turn. */
+    interrupt(): void;
+    stop(): void;
+    isRunning(): boolean;
+    getChild(): ChildProcess | null;
+}

package/dist/providers/claude-code/spawn-claude.js

@@ -0,0 +1,108 @@
+import { spawn } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+import { logCollector } from '../../connection.js';
+/**
+ * Supervise a `claude` subprocess. Emits:
+ *   - `stderr` (Buffer)
+ *   - `stdout` (Buffer)
+ *   - `spawn` (ChildProcess)
+ *   - `exit` (code|null, signal|null)
+ *   - `gaveup` — too many crashes, no more restarts.
+ *
+ * Restart on crash with capped exponential backoff.
+ */
+export class ClaudeProcess extends EventEmitter {
+    deps;
+    child = null;
+    retries = 0;
+    shuttingDown = false;
+    lastSpawnAt = 0;
+    constructor(deps) {
+        super();
+        this.deps = deps;
+    }
+    start() {
+        if (this.child)
+            return;
+        this.shuttingDown = false;
+        this.spawnOnce();
+    }
+    spawnOnce() {
+        const spawnFn = this.deps.spawnFn ?? spawn;
+        const args = this.buildArgs();
+        this.lastSpawnAt = Date.now();
+        const child = spawnFn('claude', args, {
+            cwd: this.deps.workspaceDir,
+            env: { ...process.env, ...(this.deps.env ?? {}) },
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        this.child = child;
+        child.stdout?.on('data', (data) => this.emit('stdout', data));
+        child.stderr?.on('data', (data) => {
+            this.emit('stderr', data);
+            logCollector?.push('claude_stderr', 'debug', data.toString().slice(0, 500));
+        });
+        child.on('error', (err) => {
+            logCollector?.push('claude_spawn_error', 'error', err.message);
+            this.emit('error', err);
+        });
+        child.on('exit', (code, signal) => {
+            this.emit('exit', code, signal);
+            this.child = null;
+            if (this.shuttingDown)
+                return;
+            // Reset retries on a healthy long run
+            if (Date.now() - this.lastSpawnAt > 60_000)
+                this.retries = 0;
+            const maxRetries = this.deps.maxRetries ?? 5;
+            // Semantics: maxRetries is the number of RESTART attempts allowed.
+            // Increment first, then check — so maxRetries=5 yields exactly 5 restarts
+            // (retry counts 1..5) before giving up on the 6th crash.
+            this.retries += 1;
+            if (this.retries > maxRetries) {
+                logCollector?.push('claude_giveup', 'error', `claude crashed too many times (${this.retries - 1}/${maxRetries}), giving up`);
+                this.emit('gaveup');
+                return;
+            }
+            const backoff = Math.min(30_000, 500 * 2 ** (this.retries - 1));
+            logCollector?.push('claude_restart_scheduled', 'warn', `claude exited code=${code ?? 'null'} sig=${signal ?? 'null'}; retry ${this.retries}/${maxRetries} in ${backoff}ms`);
+            setTimeout(() => {
+                if (!this.shuttingDown)
+                    this.spawnOnce();
+            }, backoff).unref();
+        });
+        this.emit('spawn', child);
+        logCollector?.push('claude_spawned', 'info', `claude spawned (pid=${child.pid})`);
+    }
+    buildArgs() {
+        const args = ['--channels', this.deps.channelsFlag ?? 'plugin:agent-controller'];
+        if (this.deps.danglyDev === true)
+            args.push('--dangerously-load-development-channels');
+        if (this.deps.extraArgs)
+            args.push(...this.deps.extraArgs);
+        return args;
+    }
+    /** Send SIGINT to interrupt the current turn. */
+    interrupt() {
+        this.child?.kill('SIGINT');
+    }
+    stop() {
+        this.shuttingDown = true;
+        if (this.child) {
+            try {
+                this.child.kill('SIGTERM');
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        this.child = null;
+    }
+    isRunning() {
+        return !!this.child && this.child.exitCode === null;
+    }
+    getChild() {
+        return this.child;
+    }
+}
+//# sourceMappingURL=spawn-claude.js.map

package/dist/providers/claude-code/spawn-claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-claude.js","sourceRoot":"","sources":["../../../src/providers/claude-code/spawn-claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAuBnD;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAMhB;IALrB,KAAK,GAAwB,IAAI,CAAC;IAClC,OAAO,GAAG,CAAC,CAAC;IACZ,YAAY,GAAG,KAAK,CAAC;IACrB,WAAW,GAAG,CAAC,CAAC;IAExB,YAA6B,IAAqB;QAChD,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAAiB;IAElD,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;IACnB,CAAC;IAEO,SAAS;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YAC3B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAuB;YACtE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC1B,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO;YAC9B,sCAAsC;YACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,MAAM;gBAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YAC7C,mEAAmE;YACnE,0EAA0E;YAC1E,yDAAyD;YACzD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;gBAC9B,YAAY,EAAE,IAAI,CAChB,eAAe,EACf,OAAO,EACP,kCAAkC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,UAAU,cAAc,CAC/E,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAChE,YAAY,EAAE,IAAI,CAChB,0BAA0B,EAC1B,MAAM,EACN,sBAAsB,IAAI,IAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,WAAW,IAAI,CAAC,OAAO,IAAI,UAAU,OAAO,OAAO,IAAI,CACpH,CAAC;YACF,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,IAAI,CAAC,YAAY;oBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3C,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,uBAAuB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IACpF,CAAC;IAEO,SAAS;QACf,MAAM,IAAI,GAAa,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,yBAAyB,CAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACvF,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iDAAiD;IACjD,SAAS;QACP,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,SAAS;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;IACtD,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}

package/dist/providers/index.d.ts

@@ -4,8 +4,10 @@ export type { ChatSession, ChatMessage, ChatAttachment, ChatContentBlock, IChatP
 export { OpenclawProvider } from './openclaw/index.js';
 export { MockProvider } from './mock/index.js';
 export type { MockAction } from './mock/index.js';
+export { ClaudeCodeProvider } from './claude-code/index.js';
+export type { ClaudeCodeProviderConfig } from './claude-code/index.js';
 export declare function configureProvider(provider: IAgentProvider): void;
 export declare function getProvider(): IAgentProvider | null;
 /** For testing only — reset the global provider */
 export declare function resetProvider(): void;
-export declare function createProvider(type: string, config: Record<string, string>): IAgentProvider;
+export declare function createProvider(type: string, config: Record<string, string | undefined>): IAgentProvider;

package/dist/providers/index.js

@@ -1,7 +1,10 @@
 import { OpenclawProvider } from './openclaw/index.js';
 import { MockProvider } from './mock/index.js';
+import { ClaudeCodeProvider } from './claude-code/index.js';
+import { getWorkspaceDir } from '../workspace.js';
 export { OpenclawProvider } from './openclaw/index.js';
 export { MockProvider } from './mock/index.js';
+export { ClaudeCodeProvider } from './claude-code/index.js';
 let _provider = null;
 export function configureProvider(provider) {
     _provider = provider;
@@ -19,6 +22,19 @@ export function createProvider(type, config) {
             return new OpenclawProvider(config.wsUrl ?? 'ws://localhost:18789', config.wsToken ?? '');
         case 'mock':
             return new MockProvider();
+        case 'claude-code':
+            return new ClaudeCodeProvider({
+                // Prefer explicit workspaceDir from caller; otherwise fall back to the
+                // shared workspace util so K8s / VM / standalone all resolve
+                // consistently (no hardcoded /home/ubuntu).
+                workspaceDir: config.workspaceDir ?? getWorkspaceDir(),
+                anthropicApiKey: config.anthropicApiKey,
+                anthropicAuthToken: config.anthropicAuthToken,
+                claudeCodeOauthToken: config.claudeCodeOauthToken,
+                backendUrl: config.backendUrl,
+                agentToken: config.agentToken,
+                claudeMdContent: config.claudeMdContent,
+            });
         default:
             throw new Error(`Unknown provider type: ${type}`);
     }

package/dist/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAU/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,IAAI,SAAS,GAA0B,IAAI,CAAC;AAE5C,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,SAAS,GAAG,QAAQ,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,aAAa;IAC3B,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAA8B;IACzE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,IAAI,sBAAsB,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC5F,KAAK,MAAM;YACT,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAUlD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAG5D,IAAI,SAAS,GAA0B,IAAI,CAAC;AAE5C,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,SAAS,GAAG,QAAQ,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,aAAa;IAC3B,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,MAA0C;IAE1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,IAAI,sBAAsB,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC5F,KAAK,MAAM;YACT,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,KAAK,aAAa;YAChB,OAAO,IAAI,kBAAkB,CAAC;gBAC5B,uEAAuE;gBACvE,6DAA6D;gBAC7D,4CAA4C;gBAC5C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,eAAe,EAAE;gBACtD,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;gBAC7C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC,CAAC,CAAC;QACL;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/utils/agent-controller-bin.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Returns the absolute path to the `agent-controller` executable, or
+ * `undefined` when resolution fails (e.g. when running under `npx` from a
+ * temp directory with an unusual layout).
+ */
+export declare function getAgentControllerBinPath(): string | undefined;
+/** Test-only: reset the cached value. */
+export declare function __resetAgentControllerBinCacheForTests(): void;

package/dist/utils/agent-controller-bin.js

@@ -0,0 +1,58 @@
+/**
+ * Resolve the absolute path of the `agent-controller` executable currently
+ * running this process. Used when writing `.mcp.json` for Claude Code so that
+ * spawned subprocesses do not depend on PATH containing the npm-global bin.
+ *
+ * Resolution order:
+ *   1. `which agent-controller` (via spawnSync) — finds the version the user
+ *      installed on PATH. Most reliable on both macOS and Linux.
+ *   2. Fallback to `process.argv[1]` — absolute path to the script Node ran,
+ *      i.e. the `bin/agent-controller.js` entry.
+ *   3. Returns `undefined` if neither resolves to an absolute path — callers
+ *      should then fall back to the bare command `agent-controller`.
+ *
+ * Result is cached in a module-level variable.
+ */
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+let cached;
+function runWhich() {
+    try {
+        const res = spawnSync('which', ['agent-controller'], { encoding: 'utf8' });
+        if (res.status === 0) {
+            const out = (res.stdout || '').trim().split('\n')[0]?.trim();
+            if (out && path.isAbsolute(out)) {
+                return out;
+            }
+        }
+    }
+    catch {
+        // ignore — `which` may not exist on some platforms (Windows)
+    }
+    return undefined;
+}
+function fromArgv() {
+    const argv1 = process.argv[1];
+    if (argv1 && path.isAbsolute(argv1)) {
+        return argv1;
+    }
+    return undefined;
+}
+/**
+ * Returns the absolute path to the `agent-controller` executable, or
+ * `undefined` when resolution fails (e.g. when running under `npx` from a
+ * temp directory with an unusual layout).
+ */
+export function getAgentControllerBinPath() {
+    if (cached !== undefined) {
+        return cached ?? undefined;
+    }
+    const resolved = runWhich() ?? fromArgv();
+    cached = resolved ?? null;
+    return resolved;
+}
+/** Test-only: reset the cached value. */
+export function __resetAgentControllerBinCacheForTests() {
+    cached = undefined;
+}
+//# sourceMappingURL=agent-controller-bin.js.map

package/dist/utils/agent-controller-bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-controller-bin.js","sourceRoot":"","sources":["../../src/utils/agent-controller-bin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,IAAI,MAAiC,CAAC;AAEtC,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC7D,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,IAAI,SAAS,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;IAC1C,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,sCAAsC;IACpD,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC"}

package/dist/utils/anthropic-auth.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shared classifier for Anthropic credentials.
+ *
+ * Both `providers/claude-code/settings-writer.ts` and `utils/claude-env.ts`
+ * need the same rule when writing Claude settings.json: an OAuth-like token
+ * (prefix `sk-ant-oat`) must be passed via `ANTHROPIC_AUTH_TOKEN`, a regular
+ * API key via `ANTHROPIC_API_KEY`, and an explicit auth token (when provided)
+ * wins over both.
+ *
+ * Returning a discriminated union keeps both call sites in sync and means
+ * the precedence is documented in one place.
+ */
+export type AnthropicAuth = {
+    kind: 'auth_token';
+    value: string;
+} | {
+    kind: 'api_key';
+    value: string;
+} | {
+    kind: 'none';
+};
+export declare function classifyAnthropicAuth(input: {
+    anthropicAuthToken?: string;
+    anthropicApiKey?: string;
+}): AnthropicAuth;

package/dist/utils/anthropic-auth.js

@@ -0,0 +1,13 @@
+export function classifyAnthropicAuth(input) {
+    const authToken = input.anthropicAuthToken?.trim();
+    if (authToken)
+        return { kind: 'auth_token', value: authToken };
+    const apiKey = input.anthropicApiKey?.trim();
+    if (!apiKey)
+        return { kind: 'none' };
+    // `sk-ant-oat*` are OAuth access tokens — must use ANTHROPIC_AUTH_TOKEN.
+    if (apiKey.startsWith('sk-ant-oat'))
+        return { kind: 'auth_token', value: apiKey };
+    return { kind: 'api_key', value: apiKey };
+}
+//# sourceMappingURL=anthropic-auth.js.map

package/dist/utils/anthropic-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-auth.js","sourceRoot":"","sources":["../../src/utils/anthropic-auth.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAE/D,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAErC,yEAAyE;IACzE,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAElF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}

package/dist/utils/apply-config.d.ts

@@ -7,3 +7,31 @@ import type { BootstrapResult } from '../api.js';
  * 4. Restart gateway
  */
 export declare function applyBootstrapConfig(data: BootstrapResult): Promise<void>;
+type MergeOutcome = 'added' | 'equal' | 'conflict' | 'merged';
+interface MergeResult {
+    changed: boolean;
+    outcomes: Array<{
+        path: string;
+        outcome: MergeOutcome;
+        detail?: string;
+    }>;
+}
+/**
+ * Merge allowlisted mergeable sections from remote payload into existing
+ * openclaw.json. Used for standalone deployments where users own their own
+ * config and a full overwrite would destroy customizations.
+ *
+ * Rules:
+ *  - Only paths in `MERGEABLE_CONFIG_PATHS` are considered.
+ *  - Missing local value → remote is written.
+ *  - Equal values → no-op.
+ *  - Differing values → conflict, local wins, warn+skip logged.
+ *  - For `mcpServers` (and other object paths): conflict detection is
+ *    per-key inside the dict.
+ *  - Does NOT restart the gateway (standalone owns their own lifecycle).
+ *  - Settings.json (~/.claude/settings.json) gets the same treatment for
+ *    `mcpServers` and `env` only — apiKeyHelper/permissions/etc untouched.
+ *  - auth-profiles.json and .env are NOT touched on standalone.
+ */
+export declare function applyMergeableConfig(data: BootstrapResult): Promise<MergeResult>;
+export {};

package/dist/utils/apply-config.js

@@ -1,9 +1,13 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
+import os from 'node:os';
 import { writeClaudeEnv } from './claude-env.js';
+import { writeWorkspaceFiles } from './write-workspace-files.js';
 import { restartGateway } from './gateway-restart.js';
 import { VM_ENV_PATH } from '../config-file.js';
 import { config } from '../config.js';
+import { getWorkspaceDir } from '../workspace.js';
+import { MERGEABLE_CONFIG_PATHS, MERGEABLE_SETTINGS_PATHS } from './config-merge-paths.js';
 function getOpenclawDir() {
     return config.stateDir;
 }
@@ -87,6 +91,12 @@ export async function applyBootstrapConfig(data) {
         await fs.writeFile(configPath, JSON.stringify(data.openclawConfig, null, 2) + '\n');
         console.log('[apply-config] openclaw.json updated');
     }
+    // 1a. Write workspace files (shared files pushed by backend on update_config)
+    if (data.workspaceFiles && Object.keys(data.workspaceFiles).length > 0) {
+        const workspaceDir = getWorkspaceDir();
+        await writeWorkspaceFiles(data.workspaceFiles, workspaceDir);
+        console.log(`[apply-config] wrote ${Object.keys(data.workspaceFiles).length} workspace files`);
+    }
     // 2. Write auth-profiles.json from openclawConfig.auth.profiles + envVars (API keys)
     if (data.openclawConfig && data.envVars) {
         await writeAuthProfiles(data.openclawConfig, data.envVars);
@@ -121,4 +131,220 @@ export async function applyBootstrapConfig(data) {
         console.error('[apply-config] gateway restart failed:', err instanceof Error ? err.message : err);
     }
 }
+function isPlainObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function deepEqual(a, b) {
+    if (a === b)
+        return true;
+    if (typeof a !== typeof b)
+        return false;
+    if (a === null || b === null)
+        return a === b;
+    if (Array.isArray(a) || Array.isArray(b)) {
+        if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length)
+            return false;
+        for (let i = 0; i < a.length; i++)
+            if (!deepEqual(a[i], b[i]))
+                return false;
+        return true;
+    }
+    if (isPlainObject(a) && isPlainObject(b)) {
+        const ak = Object.keys(a);
+        const bk = Object.keys(b);
+        if (ak.length !== bk.length)
+            return false;
+        for (const k of ak)
+            if (!deepEqual(a[k], b[k]))
+                return false;
+        return true;
+    }
+    return false;
+}
+/** Walk dot-path into object; returns undefined if any segment missing. */
+function getPath(obj, dotPath) {
+    const parts = dotPath.split('.');
+    let cur = obj;
+    for (const p of parts) {
+        if (!isPlainObject(cur))
+            return undefined;
+        cur = cur[p];
+    }
+    return cur;
+}
+/** Set dot-path on object, creating intermediate objects as needed. */
+function setPath(obj, dotPath, value) {
+    const parts = dotPath.split('.');
+    let cur = obj;
+    for (let i = 0; i < parts.length - 1; i++) {
+        const key = parts[i];
+        if (!isPlainObject(cur[key]))
+            cur[key] = {};
+        cur = cur[key];
+    }
+    cur[parts[parts.length - 1]] = value;
+}
+/**
+ * Merge a single allowlisted path from remote into local.
+ *
+ * Semantics:
+ *  - If local missing → copy remote (added).
+ *  - If both plain objects → key-by-key merge; new keys added, conflicting
+ *    keys (existing key with different value) logged + skipped (local wins).
+ *  - Otherwise (scalars / arrays / subtree) → equality check: equal = no-op,
+ *    differ = conflict (local wins).
+ */
+function mergePath(local, remote, dotPath, logPrefix) {
+    const remoteVal = getPath(remote, dotPath);
+    if (remoteVal === undefined)
+        return { changed: false, outcome: 'equal' };
+    const localVal = getPath(local, dotPath);
+    if (localVal === undefined) {
+        setPath(local, dotPath, remoteVal);
+        console.log(`${logPrefix} ADDED ${dotPath}`);
+        return { changed: true, outcome: 'added' };
+    }
+    // Both objects → key-level merge
+    if (isPlainObject(localVal) && isPlainObject(remoteVal)) {
+        let anyAdded = false;
+        const conflicts = [];
+        for (const [k, v] of Object.entries(remoteVal)) {
+            if (!(k in localVal)) {
+                localVal[k] = v;
+                anyAdded = true;
+                console.log(`${logPrefix} ADDED ${dotPath}.${k}`);
+            }
+            else if (!deepEqual(localVal[k], v)) {
+                conflicts.push(k);
+                console.warn(`[config-merge] SKIPPED conflict at ${dotPath}.${k}: keeping local value`);
+            }
+        }
+        if (conflicts.length > 0 && !anyAdded) {
+            return { changed: false, outcome: 'conflict', detail: conflicts.join(',') };
+        }
+        if (conflicts.length > 0 && anyAdded) {
+            return { changed: true, outcome: 'merged', detail: `conflicts:${conflicts.join(',')}` };
+        }
+        if (anyAdded)
+            return { changed: true, outcome: 'merged' };
+        return { changed: false, outcome: 'equal' };
+    }
+    // Leaf or array or mismatched types → equality check
+    if (deepEqual(localVal, remoteVal)) {
+        return { changed: false, outcome: 'equal' };
+    }
+    console.warn(`[config-merge] SKIPPED conflict at ${dotPath}: keeping local value`);
+    return { changed: false, outcome: 'conflict' };
+}
+async function readJsonSafe(filePath) {
+    try {
+        const raw = await fs.readFile(filePath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        return isPlainObject(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function writeJsonAtomic(filePath, data, mode) {
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    const tmp = filePath + '.tmp';
+    const opts = mode !== undefined ? { mode } : undefined;
+    await fs.writeFile(tmp, JSON.stringify(data, null, 2) + '\n', opts);
+    await fs.rename(tmp, filePath);
+}
+/**
+ * Merge allowlisted mergeable sections from remote payload into existing
+ * openclaw.json. Used for standalone deployments where users own their own
+ * config and a full overwrite would destroy customizations.
+ *
+ * Rules:
+ *  - Only paths in `MERGEABLE_CONFIG_PATHS` are considered.
+ *  - Missing local value → remote is written.
+ *  - Equal values → no-op.
+ *  - Differing values → conflict, local wins, warn+skip logged.
+ *  - For `mcpServers` (and other object paths): conflict detection is
+ *    per-key inside the dict.
+ *  - Does NOT restart the gateway (standalone owns their own lifecycle).
+ *  - Settings.json (~/.claude/settings.json) gets the same treatment for
+ *    `mcpServers` and `env` only — apiKeyHelper/permissions/etc untouched.
+ *  - auth-profiles.json and .env are NOT touched on standalone.
+ */
+export async function applyMergeableConfig(data) {
+    const result = { changed: false, outcomes: [] };
+    // Surface the intentional MVP gap: workspace files are skipped on standalone.
+    if (data.workspaceFiles && Object.keys(data.workspaceFiles).length > 0) {
+        console.log('[config-merge] workspaceFiles not applied on standalone — intentional MVP limitation');
+    }
+    // --- openclaw.json ---
+    if (data.openclawConfig && isPlainObject(data.openclawConfig)) {
+        const openclawDir = config.stateDir;
+        const configPath = path.join(openclawDir, 'openclaw.json');
+        const existing = await readJsonSafe(configPath);
+        const local = existing ?? {};
+        const isFreshFile = existing === null;
+        let changed = false;
+        for (const p of MERGEABLE_CONFIG_PATHS) {
+            const r = mergePath(local, data.openclawConfig, p, '[config-merge]');
+            result.outcomes.push({ path: p, outcome: r.outcome, detail: r.detail });
+            if (r.changed)
+                changed = true;
+        }
+        if (changed || (isFreshFile && Object.keys(local).length > 0)) {
+            await writeJsonAtomic(configPath, local);
+            result.changed = true;
+            console.log(`[config-merge] openclaw.json ${isFreshFile ? 'created' : 'updated'} at ${configPath}`);
+        }
+        else if (isFreshFile) {
+            console.log('[config-merge] openclaw.json absent and no mergeable sections in bootstrap — nothing written');
+        }
+        else {
+            console.log('[config-merge] openclaw.json unchanged');
+        }
+    }
+    // --- ~/.claude/settings.json ---
+    // Only merge if we have either envVars (→ env) or mcpServers in the payload.
+    const settingsLikeRemote = {};
+    if (data.envVars && Object.keys(data.envVars).length > 0) {
+        const cleanEnv = {};
+        for (const [k, v] of Object.entries(data.envVars))
+            if (v !== '')
+                cleanEnv[k] = v;
+        if (Object.keys(cleanEnv).length > 0)
+            settingsLikeRemote.env = cleanEnv;
+    }
+    if (data.openclawConfig &&
+        isPlainObject(data.openclawConfig) &&
+        isPlainObject(data.openclawConfig.mcpServers)) {
+        settingsLikeRemote.mcpServers = data.openclawConfig.mcpServers;
+    }
+    if (Object.keys(settingsLikeRemote).length > 0) {
+        const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
+        const existing = await readJsonSafe(settingsPath);
+        // Only touch settings.json if the user already has one — we don't want to
+        // synthesize Claude CLI settings on a machine that doesn't use Claude CLI.
+        if (existing) {
+            const local = existing;
+            let changed = false;
+            for (const p of MERGEABLE_SETTINGS_PATHS) {
+                const r = mergePath(local, settingsLikeRemote, p, '[settings-merge]');
+                result.outcomes.push({ path: `settings:${p}`, outcome: r.outcome, detail: r.detail });
+                if (r.changed)
+                    changed = true;
+            }
+            if (changed) {
+                await writeJsonAtomic(settingsPath, local);
+                result.changed = true;
+                console.log(`[settings-merge] settings.json updated at ${settingsPath}`);
+            }
+            else {
+                console.log('[settings-merge] settings.json unchanged');
+            }
+        }
+        else {
+            console.log('[settings-merge] ~/.claude/settings.json absent — skipping (standalone user owns it)');
+        }
+    }
+    return result;
+}
 //# sourceMappingURL=apply-config.js.map