@ouija-dev/workspace-local 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { LocalWorkspaceProvider } from './local-workspace.js';
+export type { LocalWorkspaceOptions, CloneFn, BranchFn } from './local-workspace.js';
+export { LocalAgentRunner } from './local-runner.js';
+export type { LocalAgentRunnerOptions, SpawnFn } from './local-runner.js';
+export { SdkAgentRunner } from './sdk-runner.js';
+export type { SdkAgentRunnerOptions } from './sdk-runner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,YAAY,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,YAAY,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { LocalWorkspaceProvider } from './local-workspace.js';
+export { LocalAgentRunner } from './local-runner.js';
+export { SdkAgentRunner } from './sdk-runner.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/local-runner.d.ts

@@ -0,0 +1,48 @@
+/**
+ * LocalAgentRunner — AgentRunner implementation for self-hosted execution.
+ *
+ * Spawns `claude --print --output-format text` as a child process inside the
+ * provisioned workspace directory. The prompt is sent via stdin so it never
+ * appears in the process argument list or shell history.
+ *
+ * Security invariants:
+ *  - process.env is NEVER spread into the subprocess. Only an allowlist of
+ *    safe vars (PATH, HOME, TMPDIR, SHELL, LANG, LC_ALL, USER, TERM,
+ *    NODE_ENV) is forwarded, then caller-provided env is merged on top.
+ *  - CI=1 is always injected to disable interactive TTY detection.
+ *  - ANTHROPIC_API_KEY (and other secrets) come from the caller-provided env
+ *    and are passed as environment variables, never as CLI arguments.
+ *
+ * Termination order when timeout or AbortSignal fires:
+ *  1. SIGTERM sent to the child process.
+ *  2. 5 s grace period.
+ *  3. SIGKILL if still alive.
+ */
+import type { ChildProcess, SpawnOptions } from 'node:child_process';
+import type { AgentRunner, AgentRunOptions, AgentRunResult, Workspace } from '@ouija-dev/types';
+/**
+ * Spawn function signature — matches the subset of node:child_process.spawn
+ * used by LocalAgentRunner. Injectable for testing.
+ */
+export type SpawnFn = (command: string, args: string[], options: SpawnOptions) => ChildProcess;
+export interface LocalAgentRunnerOptions {
+    /** Path to the claude binary. Defaults to "claude" (PATH lookup). */
+    binaryPath?: string;
+    /**
+     * Custom spawn implementation — for testing only.
+     * Defaults to node:child_process.spawn.
+     */
+    spawnFn?: SpawnFn;
+}
+export declare class LocalAgentRunner implements AgentRunner {
+    private readonly binaryPath;
+    private readonly spawnFn;
+    constructor(options?: LocalAgentRunnerOptions);
+    /**
+     * Runs `claude --print --output-format text` inside workspace.endpoint.
+     * The prompt is piped via stdin; caller-provided env vars are merged on
+     * top of the safe allowlist.
+     */
+    run(workspace: Workspace, prompt: string, env: Record<string, string>, timeoutMs: number, options?: AgentRunOptions): Promise<AgentRunResult>;
+}
+//# sourceMappingURL=local-runner.d.ts.map

package/dist/local-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-runner.d.ts","sourceRoot":"","sources":["../src/local-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,cAAc,EACd,SAAS,EACV,MAAM,kBAAkB,CAAC;AAM1B;;;GAGG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,YAAY,KAClB,YAAY,CAAC;AAElB,MAAM,WAAW,uBAAuB;IACtC,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuBD,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;gBAEtB,OAAO,GAAE,uBAA4B;IAKjD;;;;OAIG;IACG,GAAG,CACP,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,CAAC;CAoH3B"}

package/dist/local-runner.js

@@ -0,0 +1,154 @@
+/**
+ * LocalAgentRunner — AgentRunner implementation for self-hosted execution.
+ *
+ * Spawns `claude --print --output-format text` as a child process inside the
+ * provisioned workspace directory. The prompt is sent via stdin so it never
+ * appears in the process argument list or shell history.
+ *
+ * Security invariants:
+ *  - process.env is NEVER spread into the subprocess. Only an allowlist of
+ *    safe vars (PATH, HOME, TMPDIR, SHELL, LANG, LC_ALL, USER, TERM,
+ *    NODE_ENV) is forwarded, then caller-provided env is merged on top.
+ *  - CI=1 is always injected to disable interactive TTY detection.
+ *  - ANTHROPIC_API_KEY (and other secrets) come from the caller-provided env
+ *    and are passed as environment variables, never as CLI arguments.
+ *
+ * Termination order when timeout or AbortSignal fires:
+ *  1. SIGTERM sent to the child process.
+ *  2. 5 s grace period.
+ *  3. SIGKILL if still alive.
+ */
+import { spawn } from 'node:child_process';
+// ---------------------------------------------------------------------------
+// Environment allowlist
+// ---------------------------------------------------------------------------
+/** Safe env vars forwarded to the claude subprocess. */
+const ENV_ALLOWLIST = [
+    'PATH',
+    'HOME',
+    'TMPDIR',
+    'SHELL',
+    'LANG',
+    'LC_ALL',
+    'USER',
+    'TERM',
+    'NODE_ENV',
+];
+// ---------------------------------------------------------------------------
+// LocalAgentRunner
+// ---------------------------------------------------------------------------
+export class LocalAgentRunner {
+    binaryPath;
+    spawnFn;
+    constructor(options = {}) {
+        this.binaryPath = options.binaryPath ?? 'claude';
+        this.spawnFn = options.spawnFn ?? spawn;
+    }
+    /**
+     * Runs `claude --print --output-format text` inside workspace.endpoint.
+     * The prompt is piped via stdin; caller-provided env vars are merged on
+     * top of the safe allowlist.
+     */
+    async run(workspace, prompt, env, timeoutMs, options) {
+        const binary = this.binaryPath;
+        // -p: non-interactive prompt mode (reads prompt, acts, exits)
+        // --dangerously-skip-permissions: auto-accept all tool calls (agent mode)
+        // --output-format text: plain text output (not JSON)
+        const args = ['-p', prompt, '--dangerously-skip-permissions', '--output-format', 'text'];
+        // Build env: allowlist from process.env, then caller env, then CI=1.
+        const safeBaseEnv = {};
+        for (const key of ENV_ALLOWLIST) {
+            if (process.env[key] !== undefined) {
+                safeBaseEnv[key] = process.env[key];
+            }
+        }
+        const mergedEnv = {
+            ...safeBaseEnv,
+            ...env,
+            CI: '1',
+        };
+        const spawnFn = this.spawnFn;
+        return new Promise((resolve, reject) => {
+            const startTime = Date.now();
+            let timedOut = false;
+            const stdoutChunks = [];
+            const stderrChunks = [];
+            let child;
+            try {
+                child = spawnFn(binary, args, {
+                    cwd: workspace.endpoint,
+                    env: mergedEnv,
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                });
+            }
+            catch (err) {
+                reject(new Error(`Failed to spawn ${binary}: ${err instanceof Error ? err.message : String(err)}`));
+                return;
+            }
+            // Prompt is passed via -p flag, not stdin. Close stdin immediately.
+            if (child.stdin) {
+                child.stdin.end();
+            }
+            // ---- stdout: buffer + optional live callback ----
+            if (child.stdout) {
+                child.stdout.on('data', (chunk) => {
+                    const text = chunk.toString('utf8');
+                    stdoutChunks.push(text);
+                    options?.onOutput?.(text);
+                });
+            }
+            // ---- stderr: buffer only ----
+            if (child.stderr) {
+                child.stderr.on('data', (chunk) => {
+                    stderrChunks.push(chunk.toString('utf8'));
+                });
+            }
+            // ---- helper: kill child with SIGTERM then SIGKILL after grace period ----
+            const killChild = () => {
+                child.kill('SIGTERM');
+                setTimeout(() => {
+                    if (!child.killed) {
+                        child.kill('SIGKILL');
+                    }
+                }, 5_000);
+            };
+            // ---- timeout enforcement ----
+            const timeoutId = setTimeout(() => {
+                timedOut = true;
+                killChild();
+            }, timeoutMs);
+            // ---- external cancellation via AbortSignal ----
+            const onAbort = () => {
+                killChild();
+            };
+            if (options?.signal) {
+                if (options.signal.aborted) {
+                    // Already aborted before spawn — kill immediately.
+                    onAbort();
+                }
+                else {
+                    options.signal.addEventListener('abort', onAbort, { once: true });
+                }
+            }
+            // ---- error (post-fork spawn failure) ----
+            child.on('error', (err) => {
+                clearTimeout(timeoutId);
+                options?.signal?.removeEventListener('abort', onAbort);
+                reject(err);
+            });
+            // ---- exit: collect result ----
+            child.on('exit', (code) => {
+                clearTimeout(timeoutId);
+                options?.signal?.removeEventListener('abort', onAbort);
+                resolve({
+                    exitCode: code ?? 1,
+                    stdout: stdoutChunks.join(''),
+                    stderr: stderrChunks.join(''),
+                    timedOut,
+                    durationMs: Date.now() - startTime,
+                });
+            });
+        });
+    }
+}
+//# sourceMappingURL=local-runner.js.map

package/dist/local-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-runner.js","sourceRoot":"","sources":["../src/local-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAiC3C,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,wDAAwD;AACxD,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,UAAU;CACF,CAAC;AAEX,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,OAAO,gBAAgB;IACV,UAAU,CAAS;IACnB,OAAO,CAAU;IAElC,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,SAAoB,EACpB,MAAc,EACd,GAA2B,EAC3B,SAAiB,EACjB,OAAyB;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,8DAA8D;QAC9D,0EAA0E;QAC1E,qDAAqD;QACrD,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAEzF,qEAAqE;QACrE,MAAM,WAAW,GAAuC,EAAE,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAuC;YACpD,GAAG,WAAW;YACd,GAAG,GAAG;YACN,EAAE,EAAE,GAAG;SACR,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAE7B,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;oBAC5B,GAAG,EAAE,SAAS,CAAC,QAAQ;oBACvB,GAAG,EAAE,SAA8B;oBACnC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CACJ,IAAI,KAAK,CACP,mBAAmB,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,oEAAoE;YACpE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;YAED,oDAAoD;YACpD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACpC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACxB,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC,CAAC,CAAC;YACL,CAAC;YAED,gCAAgC;YAChC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACxC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;YACL,CAAC;YAED,4EAA4E;YAC5E,MAAM,SAAS,GAAG,GAAS,EAAE;gBAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC,EAAE,KAAK,CAAC,CAAC;YACZ,CAAC,CAAC;YAEF,gCAAgC;YAChC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS,EAAE,CAAC;YACd,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,kDAAkD;YAClD,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,SAAS,EAAE,CAAC;YACd,CAAC,CAAC;YAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3B,mDAAmD;oBACnD,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YAED,4CAA4C;YAC5C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,iCAAiC;YACjC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvD,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,QAAQ;oBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/local-workspace.d.ts

@@ -0,0 +1,73 @@
+/**
+ * LocalWorkspaceProvider — WorkspaceProvider implementation for self-hosted execution.
+ *
+ * Provisions isolated workspaces by:
+ *  1. Creating a temp directory under baseDir (mkdtemp).
+ *  2. Cloning the requested repo via `git clone --depth 1 --single-branch`.
+ *  3. Creating the feature branch via `git checkout -b`.
+ *
+ * Security invariants:
+ *  - All git CLI calls use execFile (not exec) to prevent shell injection.
+ *  - The git environment uses an allowlist — only PATH, HOME, SSH_AUTH_SOCK,
+ *    LANG, LC_ALL, TMPDIR are forwarded. GIT_TERMINAL_PROMPT=0 is always set.
+ *  - If provisioning fails, the temp dir is cleaned up before the error propagates.
+ */
+import type { WorkspaceProvider, WorkspaceSpec, Workspace, WorkspaceHealth } from '@ouija-dev/types';
+/** Injectable clone function — allows tests to avoid real git operations. */
+export type CloneFn = (repoUrl: string, targetDir: string, baseBranch: string) => Promise<void>;
+/** Injectable branch creation function — allows tests to avoid real git operations. */
+export type BranchFn = (dir: string, branchName: string) => Promise<void>;
+/** Injectable worktree creation function — allows tests to avoid real git operations. */
+export type WorktreeFn = (repoPath: string, worktreeDir: string, branchName: string) => Promise<void>;
+/** Injectable worktree removal function — allows tests to avoid real git operations. */
+export type WorktreeRemoveFn = (repoPath: string, worktreeDir: string) => Promise<void>;
+export interface LocalWorkspaceOptions {
+    /** Base directory for temp workspace dirs. Defaults to os.tmpdir(). */
+    baseDir?: string;
+    /**
+     * Custom clone implementation — useful for testing.
+     * Defaults to `git clone --depth 1 --single-branch`.
+     */
+    cloneFn?: CloneFn;
+    /**
+     * Custom branch creation implementation — useful for testing.
+     * Defaults to `git checkout -b`.
+     */
+    branchFn?: BranchFn;
+    /**
+     * Custom worktree creation implementation — useful for testing.
+     * Defaults to `git worktree add`.
+     */
+    worktreeFn?: WorktreeFn;
+    /**
+     * Custom worktree removal implementation — useful for testing.
+     * Defaults to `git worktree remove --force`.
+     */
+    worktreeRemoveFn?: WorktreeRemoveFn;
+}
+export declare class LocalWorkspaceProvider implements WorkspaceProvider {
+    readonly type: "local";
+    private readonly baseDir;
+    private readonly cloneFn;
+    private readonly branchFn;
+    private readonly worktreeFn;
+    private readonly worktreeRemoveFn;
+    /** Maps workspace id → absolute path of the temp dir. */
+    private readonly workspacePaths;
+    /** Maps workspace id → source repo path for worktree-based workspaces. */
+    private readonly worktreeSources;
+    constructor(options?: LocalWorkspaceOptions);
+    /**
+     * Provisions a workspace by creating a temp dir, cloning the repo, and
+     * creating the feature branch. Cleans up the temp dir on any failure.
+     */
+    provision(spec: WorkspaceSpec): Promise<Workspace>;
+    /**
+     * Destroys a workspace by removing its directory.
+     * Idempotent — calling with an unknown or already-destroyed id is a no-op.
+     */
+    destroy(workspaceId: string): Promise<void>;
+    /** Returns alive=true only if the workspace directory still exists on disk. */
+    healthCheck(workspaceId: string): Promise<WorkspaceHealth>;
+}
+//# sourceMappingURL=local-workspace.d.ts.map

package/dist/local-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-workspace.d.ts","sourceRoot":"","sources":["../src/local-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAQ1B,6EAA6E;AAC7E,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhG,uFAAuF;AACvF,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1E,yFAAyF;AACzF,MAAM,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEtG,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAExF,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAgED,qBAAa,sBAAuB,YAAW,iBAAiB;IAC9D,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IAEjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IAEpD,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAE5D,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;gBAEjD,OAAO,GAAE,qBAA0B;IAQ/C;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC;IAkCxD;;;OAGG;IACG,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBjD,+EAA+E;IACzE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CAYjE"}

package/dist/local-workspace.js

@@ -0,0 +1,149 @@
+/**
+ * LocalWorkspaceProvider — WorkspaceProvider implementation for self-hosted execution.
+ *
+ * Provisions isolated workspaces by:
+ *  1. Creating a temp directory under baseDir (mkdtemp).
+ *  2. Cloning the requested repo via `git clone --depth 1 --single-branch`.
+ *  3. Creating the feature branch via `git checkout -b`.
+ *
+ * Security invariants:
+ *  - All git CLI calls use execFile (not exec) to prevent shell injection.
+ *  - The git environment uses an allowlist — only PATH, HOME, SSH_AUTH_SOCK,
+ *    LANG, LC_ALL, TMPDIR are forwarded. GIT_TERMINAL_PROMPT=0 is always set.
+ *  - If provisioning fails, the temp dir is cleaned up before the error propagates.
+ */
+import { execFile } from 'node:child_process';
+import { mkdtemp, rm, stat } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+// ---------------------------------------------------------------------------
+// Default git helpers (production implementations)
+// ---------------------------------------------------------------------------
+/** Env keys forwarded to git — everything else is stripped. */
+const GIT_ENV_ALLOWLIST = ['PATH', 'HOME', 'SSH_AUTH_SOCK', 'LANG', 'LC_ALL', 'TMPDIR'];
+function buildGitEnv() {
+    const env = {};
+    for (const key of GIT_ENV_ALLOWLIST) {
+        if (process.env[key] !== undefined) {
+            env[key] = process.env[key];
+        }
+    }
+    // Never prompt for credentials — fail fast on auth errors.
+    env['GIT_TERMINAL_PROMPT'] = '0';
+    return env;
+}
+async function defaultCloneFn(repoUrl, targetDir, baseBranch) {
+    await execFileAsync('git', [
+        'clone',
+        '--branch', baseBranch,
+        '--single-branch',
+        '--depth', '1',
+        repoUrl,
+        targetDir,
+    ], { env: buildGitEnv() });
+}
+async function defaultBranchFn(dir, branchName) {
+    await execFileAsync('git', ['checkout', '-b', branchName], { cwd: dir, env: buildGitEnv() });
+}
+async function defaultWorktreeFn(repoPath, worktreeDir, branchName) {
+    await execFileAsync('git', ['worktree', 'add', worktreeDir, '-b', branchName], { cwd: repoPath, env: buildGitEnv() });
+}
+async function defaultWorktreeRemoveFn(repoPath, worktreeDir) {
+    await execFileAsync('git', ['worktree', 'remove', worktreeDir, '--force'], { cwd: repoPath, env: buildGitEnv() });
+}
+// ---------------------------------------------------------------------------
+// LocalWorkspaceProvider
+// ---------------------------------------------------------------------------
+export class LocalWorkspaceProvider {
+    type = 'local';
+    baseDir;
+    cloneFn;
+    branchFn;
+    worktreeFn;
+    worktreeRemoveFn;
+    /** Maps workspace id → absolute path of the temp dir. */
+    workspacePaths = new Map();
+    /** Maps workspace id → source repo path for worktree-based workspaces. */
+    worktreeSources = new Map();
+    constructor(options = {}) {
+        this.baseDir = options.baseDir ?? os.tmpdir();
+        this.cloneFn = options.cloneFn ?? defaultCloneFn;
+        this.branchFn = options.branchFn ?? defaultBranchFn;
+        this.worktreeFn = options.worktreeFn ?? defaultWorktreeFn;
+        this.worktreeRemoveFn = options.worktreeRemoveFn ?? defaultWorktreeRemoveFn;
+    }
+    /**
+     * Provisions a workspace by creating a temp dir, cloning the repo, and
+     * creating the feature branch. Cleans up the temp dir on any failure.
+     */
+    async provision(spec) {
+        if (!spec.repoUrl && !spec.repoPath) {
+            throw new Error('WorkspaceSpec must include either repoUrl or repoPath');
+        }
+        const prefix = path.join(this.baseDir, 'ouija-ws-');
+        const tempDir = await mkdtemp(prefix);
+        const id = path.basename(tempDir);
+        try {
+            if (spec.repoPath) {
+                // Worktree mode — create an isolated worktree from an existing local repo.
+                await this.worktreeFn(spec.repoPath, tempDir, spec.featureBranch);
+                this.worktreeSources.set(id, spec.repoPath);
+            }
+            else {
+                // Clone mode — shallow clone from a remote URL.
+                await this.cloneFn(spec.repoUrl, tempDir, spec.baseBranch);
+                await this.branchFn(tempDir, spec.featureBranch);
+            }
+        }
+        catch (err) {
+            // Cleanup on failure — leave no dangling directories.
+            await rm(tempDir, { recursive: true, force: true });
+            throw err;
+        }
+        this.workspacePaths.set(id, tempDir);
+        return {
+            id,
+            type: 'local',
+            endpoint: tempDir,
+        };
+    }
+    /**
+     * Destroys a workspace by removing its directory.
+     * Idempotent — calling with an unknown or already-destroyed id is a no-op.
+     */
+    async destroy(workspaceId) {
+        const dir = this.workspacePaths.get(workspaceId);
+        if (dir === undefined) {
+            // Unknown id — idempotent no-op.
+            return;
+        }
+        const sourceRepo = this.worktreeSources.get(workspaceId);
+        if (sourceRepo) {
+            // Worktree-based workspace — detach worktree before removing.
+            await this.worktreeRemoveFn(sourceRepo, dir);
+            this.worktreeSources.delete(workspaceId);
+        }
+        else {
+            // Clone-based workspace — rm -rf the directory.
+            await rm(dir, { recursive: true, force: true });
+        }
+        this.workspacePaths.delete(workspaceId);
+    }
+    /** Returns alive=true only if the workspace directory still exists on disk. */
+    async healthCheck(workspaceId) {
+        const dir = this.workspacePaths.get(workspaceId);
+        if (dir === undefined) {
+            return { alive: false, message: `Unknown workspace: ${workspaceId}` };
+        }
+        try {
+            await stat(dir);
+            return { alive: true };
+        }
+        catch {
+            return { alive: false, message: `Workspace directory does not exist: ${dir}` };
+        }
+    }
+}
+//# sourceMappingURL=local-workspace.js.map

package/dist/local-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-workspace.js","sourceRoot":"","sources":["../src/local-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAQtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA2C1C,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEjG,SAAS,WAAW;IAClB,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,2DAA2D;IAC3D,GAAG,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,UAAkB;IAClF,MAAM,aAAa,CACjB,KAAK,EACL;QACE,OAAO;QACP,UAAU,EAAE,UAAU;QACtB,iBAAiB;QACjB,SAAS,EAAE,GAAG;QACd,OAAO;QACP,SAAS;KACV,EACD,EAAE,GAAG,EAAE,WAAW,EAAuB,EAAE,CAC5C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,UAAkB;IAC5D,MAAM,aAAa,CACjB,KAAK,EACL,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EAC9B,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAuB,EAAE,CACtD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,WAAmB,EAAE,UAAkB;IACxF,MAAM,aAAa,CACjB,KAAK,EACL,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,EAClD,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAuB,EAAE,CAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,QAAgB,EAAE,WAAmB;IAC1E,MAAM,aAAa,CACjB,KAAK,EACL,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAC9C,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAuB,EAAE,CAC3D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,OAAO,sBAAsB;IACxB,IAAI,GAAG,OAAgB,CAAC;IAEhB,OAAO,CAAS;IAChB,OAAO,CAAU;IACjB,QAAQ,CAAW;IACnB,UAAU,CAAa;IACvB,gBAAgB,CAAmB;IAEpD,yDAAyD;IACxC,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5D,0EAA0E;IACzD,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7D,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAC1D,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,2EAA2E;gBAC3E,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;gBAClE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5D,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sDAAsD;YACtD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAErC,OAAO;YACL,EAAE;YACF,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,OAAO;SAClB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,iCAAiC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,UAAU,EAAE,CAAC;YACf,8DAA8D;YAC9D,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,gDAAgD;YAChD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,WAAW,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,GAAG,EAAE,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;CACF"}

package/dist/sdk-runner.d.ts

@@ -0,0 +1,23 @@
+/**
+ * SdkAgentRunner -- AgentRunner implementation using the Claude Agent SDK.
+ *
+ * Uses @anthropic-ai/claude-agent-sdk query() instead of raw subprocess.
+ * Provides structured output, cost tracking, and proper lifecycle management.
+ *
+ * Falls back gracefully if the SDK package is not installed (import error
+ * surfaces at construction time).
+ */
+import type { AgentRunner, AgentRunOptions, AgentRunResult, Workspace } from '@ouija-dev/types';
+export interface SdkAgentRunnerOptions {
+    /** Claude model to use. Defaults to "claude-sonnet-4-20250514". */
+    model?: string;
+    /** Path to the Claude Code executable. Resolved automatically if omitted. */
+    executablePath?: string;
+}
+export declare class SdkAgentRunner implements AgentRunner {
+    private readonly model;
+    private readonly executablePath;
+    constructor(options?: SdkAgentRunnerOptions);
+    run(workspace: Workspace, prompt: string, env: Record<string, string>, timeoutMs: number, options?: AgentRunOptions): Promise<AgentRunResult>;
+}
+//# sourceMappingURL=sdk-runner.d.ts.map

package/dist/sdk-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../src/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,cAAc,EACd,SAAS,EACV,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,qBAAqB;IACpC,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,cAAe,YAAW,WAAW;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;gBAExC,OAAO,GAAE,qBAA0B;IAKzC,GAAG,CACP,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,CAAC;CA8I3B"}

package/dist/sdk-runner.js

@@ -0,0 +1,148 @@
+/**
+ * SdkAgentRunner -- AgentRunner implementation using the Claude Agent SDK.
+ *
+ * Uses @anthropic-ai/claude-agent-sdk query() instead of raw subprocess.
+ * Provides structured output, cost tracking, and proper lifecycle management.
+ *
+ * Falls back gracefully if the SDK package is not installed (import error
+ * surfaces at construction time).
+ */
+export class SdkAgentRunner {
+    model;
+    executablePath;
+    constructor(options = {}) {
+        this.model = options.model ?? 'claude-sonnet-4-20250514';
+        this.executablePath = options.executablePath;
+    }
+    async run(workspace, prompt, env, timeoutMs, options) {
+        const { query } = await import('@anthropic-ai/claude-agent-sdk');
+        const startTime = Date.now();
+        let timedOut = false;
+        const outputChunks = [];
+        let costUsd;
+        let numTurns;
+        // Convert AbortSignal to AbortController for the SDK
+        const controller = new AbortController();
+        // Wire external signal
+        if (options?.signal) {
+            if (options.signal.aborted) {
+                controller.abort();
+            }
+            else {
+                options.signal.addEventListener('abort', () => controller.abort(), { once: true });
+            }
+        }
+        // Timeout enforcement
+        const timeoutId = setTimeout(() => {
+            timedOut = true;
+            controller.abort();
+        }, timeoutMs);
+        try {
+            // Resolve executable path: explicit > SDK bundled cli.js > system 'claude'
+            let cliPath = this.executablePath;
+            if (!cliPath) {
+                try {
+                    const { createRequire } = await import('node:module');
+                    const require = createRequire(import.meta.url);
+                    const sdkDir = require.resolve('@anthropic-ai/claude-agent-sdk/cli.js');
+                    cliPath = sdkDir;
+                }
+                catch {
+                    // Fallback: let the SDK try its own resolution
+                }
+            }
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const queryOptions = {
+                cwd: workspace.endpoint,
+                model: this.model,
+                abortController: controller,
+                permissionMode: 'bypassPermissions',
+                allowDangerouslySkipPermissions: true,
+                settingSources: ['project'],
+                env: { ...env, CI: '1' },
+            };
+            if (cliPath) {
+                queryOptions.pathToClaudeCodeExecutable = cliPath;
+            }
+            const q = query({ prompt, options: queryOptions });
+            for await (const msg of q) {
+                // Collect assistant text output
+                if (msg.type === 'assistant' && 'message' in msg) {
+                    const text = (msg.message?.content ?? [])
+                        .filter((b) => b.type === 'text')
+                        .map((b) => b.text)
+                        .join('');
+                    if (text) {
+                        outputChunks.push(text);
+                        options?.onOutput?.(text);
+                    }
+                }
+                // Capture result
+                if (msg.type === 'result') {
+                    clearTimeout(timeoutId);
+                    if ('total_cost_usd' in msg) {
+                        costUsd = msg.total_cost_usd;
+                    }
+                    if ('num_turns' in msg) {
+                        numTurns = msg.num_turns;
+                    }
+                    if (msg.subtype === 'success') {
+                        const resultText = 'result' in msg ? String(msg.result ?? '') : '';
+                        if (resultText)
+                            outputChunks.push(resultText);
+                        return {
+                            exitCode: 0,
+                            stdout: outputChunks.join('\n'),
+                            stderr: '',
+                            timedOut: false,
+                            durationMs: Date.now() - startTime,
+                            ...(costUsd !== undefined ? { costUsd } : {}),
+                            ...(numTurns !== undefined ? { numTurns } : {}),
+                        };
+                    }
+                    // Error subtypes: error_max_turns, error_during_execution, error_max_budget_usd
+                    const errorMsg = 'error' in msg ? String(msg.error ?? msg.subtype) : msg.subtype;
+                    return {
+                        exitCode: 1,
+                        stdout: outputChunks.join('\n'),
+                        stderr: errorMsg,
+                        timedOut: msg.subtype === 'error_max_turns',
+                        durationMs: Date.now() - startTime,
+                        ...(costUsd !== undefined ? { costUsd } : {}),
+                        ...(numTurns !== undefined ? { numTurns } : {}),
+                    };
+                }
+            }
+            // Generator exhausted without a result message
+            clearTimeout(timeoutId);
+            return {
+                exitCode: 1,
+                stdout: outputChunks.join('\n'),
+                stderr: 'SDK query ended without a result message',
+                timedOut,
+                durationMs: Date.now() - startTime,
+            };
+        }
+        catch (err) {
+            clearTimeout(timeoutId);
+            // AbortError from the controller means timeout or external cancel
+            if (timedOut) {
+                return {
+                    exitCode: 1,
+                    stdout: outputChunks.join('\n'),
+                    stderr: `Agent timed out after ${Math.round((Date.now() - startTime) / 1000)}s`,
+                    timedOut: true,
+                    durationMs: Date.now() - startTime,
+                };
+            }
+            return {
+                exitCode: 1,
+                stdout: outputChunks.join('\n'),
+                stderr: err instanceof Error ? err.message : String(err),
+                timedOut: false,
+                durationMs: Date.now() - startTime,
+            };
+        }
+    }
+}
+//# sourceMappingURL=sdk-runner.js.map

package/dist/sdk-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-runner.js","sourceRoot":"","sources":["../src/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,MAAM,OAAO,cAAc;IACR,KAAK,CAAS;IACd,cAAc,CAAqB;IAEpD,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,0BAA0B,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,GAAG,CACP,SAAoB,EACpB,MAAc,EACd,GAA2B,EAC3B,SAAiB,EACjB,OAAyB;QAEzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAEjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,OAA2B,CAAC;QAChC,IAAI,QAA4B,CAAC;QAEjC,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QAEzC,uBAAuB;QACvB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,CAAC;YACH,2EAA2E;YAC3E,IAAI,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;YAClC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;oBACtD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;oBACxE,OAAO,GAAG,MAAM,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,+CAA+C;gBACjD,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,MAAM,YAAY,GAAQ;gBACxB,GAAG,EAAE,SAAS,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,eAAe,EAAE,UAAU;gBAC3B,cAAc,EAAE,mBAAmB;gBACnC,+BAA+B,EAAE,IAAI;gBACrC,cAAc,EAAE,CAAC,SAAS,CAAC;gBAC3B,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE;aACzB,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,0BAA0B,GAAG,OAAO,CAAC;YACpD,CAAC;YAED,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;YAEnD,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;gBAC1B,gCAAgC;gBAChC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;oBACjD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;yBACtC,MAAM,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;yBAClD,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;yBACpC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACZ,IAAI,IAAI,EAAE,CAAC;wBACT,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACxB,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBAED,iBAAiB;gBACjB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,YAAY,CAAC,SAAS,CAAC,CAAC;oBAExB,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;wBAC5B,OAAO,GAAG,GAAG,CAAC,cAAwB,CAAC;oBACzC,CAAC;oBACD,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;wBACvB,QAAQ,GAAG,GAAG,CAAC,SAAmB,CAAC;oBACrC,CAAC;oBAED,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC9B,MAAM,UAAU,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,IAAI,UAAU;4BAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;wBAE9C,OAAO;4BACL,QAAQ,EAAE,CAAC;4BACX,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;4BAC/B,MAAM,EAAE,EAAE;4BACV,QAAQ,EAAE,KAAK;4BACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;4BAClC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC7C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAChD,CAAC;oBACJ,CAAC;oBAED,gFAAgF;oBAChF,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;oBACjF,OAAO;wBACL,QAAQ,EAAE,CAAC;wBACX,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC/B,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,GAAG,CAAC,OAAO,KAAK,iBAAiB;wBAC3C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChD,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,+CAA+C;YAC/C,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/B,MAAM,EAAE,0CAA0C;gBAClD,QAAQ;gBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,kEAAkE;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;oBACL,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC/B,MAAM,EAAE,yBAAyB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG;oBAC/E,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/B,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACxD,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@ouija-dev/workspace-local",
+  "version": "0.1.0",
+  "files": ["dist/", "README.md"],
+  "publishConfig": { "access": "public" },
+  "repository": { "type": "git", "url": "https://github.com/muhammadkh4n/ouija.git" },
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.2.71",
+    "@ouija-dev/types": "*"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^3.0.0"
+  }
+}