@polderlabs/bizar 6.2.5 → 6.3.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@polderlabs/bizar",
-  "version": "6.2.5",
-  "description": "Norse-pantheon multi-agent system for cline — 13 agents across 4 cost tiers with cost-aware routing, plans, and a configurable agent harness. v4 ships as a single npm package bundling the dashboard server, cline plugin, and typed SDK.",
+  "version": "6.3.0",
+  "description": "Norse-pantheon multi-agent system for Claude Code — 14 agents across 4 cost tiers with cost-aware routing, plans, and a configurable agent harness. Ships as a single npm package with the dashboard server, Claude Code MCP server, and typed SDK.",
   "type": "module",
   "bin": {
     "bizar": "cli/bin.mjs"
@@ -9,13 +9,12 @@
   "files": [
     "cli/",
     "bizar-dash/",
-    "plugins/",
     "packages/sdk/",
+    ".claude/",
     "config/",
     "templates/",
     "scripts/",
-    "install.sh",
-    "cli/browser-harness-up.sh"
+    "install.sh"
   ],
   "scripts": {
     "typecheck": "tsc --noEmit",
@@ -24,12 +23,13 @@
     "test:sdk": "node_modules/.bin/vitest run --root packages/sdk",
     "test:web": "cd bizar-dash && npx vitest run",
     "test:sdk:watch": "node_modules/.bin/vitest --root packages/sdk",
-    "test": "npm run typecheck && npm run test:sdk && node --test cli/install.test.mjs cli/provision.test.mjs cli/commands/validate.test.mjs cli/commands/setup-provider.test.mjs cli/commands/rca.test.mjs && bun test plugins/bizar/tests/loop.test.ts plugins/bizar/tests/block.test.ts plugins/bizar/tests/stall-think.test.ts plugins/bizar/tests/tools/bg-get-comments.test.ts plugins/bizar/tests/tools/bg-spawn-delegation.test.ts plugins/bizar/tests/tools/cline-runner.test.ts plugins/bizar/tests/settings.test.ts plugins/bizar/tests/commands.test.ts plugins/bizar/tests/commands-impl.test.ts plugins/bizar/tests/tools/plan-action.test.ts plugins/bizar/tests/tools/wait-for-feedback.test.ts plugins/bizar/tests/tools/read-glyph-feedback.test.ts plugins/bizar/tests/reasoning-clean.test.ts plugins/bizar/tests/key-rotation.test.ts && node bizar-dash/tests/smoke-v2.mjs && node --test bizar-dash/tests/path-safe.test.mjs bizar-dash/tests/tmux-wrap.test.mjs bizar-dash/tests/cline-sessions-detail.test.mjs bizar-dash/tests/cline-runner.test.mjs bizar-dash/tests/mod-instructions.node.test.mjs bizar-dash/tests/mod-upgrade.node.test.mjs bizar-dash/tests/graphify-mod-spawn.node.test.mjs bizar-dash/tests/no-agent-browser.node.test.mjs bizar-dash/tests/providers-store-backup-keys.node.test.mjs bizar-dash/tests/dashboard-ports.test.mjs bizar-dash/tests/submit-feedback.test.mjs bizar-dash/tests/yaml.test.mjs bizar-dash/tests/memory-store.test.mjs bizar-dash/tests/memory-schema.test.mjs bizar-dash/tests/memory-secrets.test.mjs bizar-dash/tests/memory-git.test.mjs bizar-dash/tests/memory-sync.test.mjs bizar-dash/tests/obsidian-back-compat.test.mjs bizar-dash/tests/memory-lightrag.test.mjs bizar-dash/tests/memory-config.test.mjs bizar-dash/tests/memory-cli.test.mjs bizar-dash/tests/memory-cli-readlistdelete.test.mjs bizar-dash/tests/memory-cli-setup.test.mjs bizar-dash/tests/memory-conflicts.test.mjs bizar-dash/tests/memory-namespace.test.mjs bizar-dash/tests/memory-path-safety.test.mjs bizar-dash/tests/memory-protocol-drift.test.mjs bizar-dash/tests/memory-roundtrip.test.mjs bizar-dash/tests/cli-bugfixes.test.mjs bizar-dash/tests/server-bugfixes.test.mjs bizar-dash/tests/frontend-bugfixes.test.mjs",
+    "test": "npm run typecheck && npm run test:sdk && node --test cli/install.test.mjs cli/provision.test.mjs cli/commands/setup-provider.test.mjs cli/commands/rca.test.mjs && node --test bizar-dash/tests/path-safe.test.mjs",
     "build": "npm run build:sdk && npm run build:dash",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
-    "cline",
+    "claude-code",
+    "claude-agent-sdk",
     "ai-agent",
     "norse",
     "multi-agent",
@@ -37,7 +37,8 @@
     "cli",
     "platform",
     "mods",
-    "schedules"
+    "schedules",
+    "mcp"
   ],
   "license": "MIT",
   "engines": {
@@ -45,6 +46,7 @@
     "bun": ">=1.1.0"
   },
   "dependencies": {
+    "@polderlabs/bizar-sdk": "^0.4.0",
     "@mdx-js/mdx": "^3.1.1",
     "@mdx-js/react": "^3.1.1",
     "@opentelemetry/api": "^1.9.1",
@@ -77,8 +79,14 @@
     "ws": "^8.18.0",
     "zod": "4.1.8"
   },
-  "peerDependencies": {},
-  "peerDependenciesMeta": {},
+  "peerDependencies": {
+    "@anthropic-ai/claude-agent-sdk": "*"
+  },
+  "peerDependenciesMeta": {
+    "@anthropic-ai/claude-agent-sdk": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
@@ -108,6 +116,6 @@
   },
   "homepage": "https://github.com/DrB0rk/BizarHarness#readme",
   "optionalDependencies": {
-    "@cline/sdk": "^0.0.58"
+    "@anthropic-ai/claude-agent-sdk": "^0.1.0"
   }
 }

package/packages/sdk/ARCHITECTURE.md

@@ -1,66 +1,70 @@
 # packages/sdk/ — Architecture
 
-> TypeScript SDK wrapper for the Bizar Harness. Provides typed
-> access to Cline events and HTTP responses. The plugin (Layer 0)
-> embeds ClineCore in-process and does NOT use this SDK; the
-> dashboard's HTTP client uses this SDK for legacy compat.
+> TypeScript SDK for the Bizar Harness. Provides the Claude Code MCP
+> server, memory vault, dangerous-pattern scanner, tool-call fingerprint,
+> and shared helpers consumed by both the dashboard and the runtime.
+> This is the only entry point into Bizar for Claude Code; the legacy
+> Cline plugin runtime has been removed (v6.3.0).
 
 ## Top-level layout
 
 ```
 packages/sdk/
 ├── src/
-│   ├── cline.ts                   # HTTP client (legacy compat)
-│   ├── cline-events.ts            # Event shape definitions
-│   ├── cline-types.ts             # Type definitions
-│   ├── client.ts                  # Higher-level client wrapper
-│   ├── errors.ts                  # Discriminated error model
-│   ├── events.ts                  # Event stream helpers
-│   ├── index.ts                   # Public API surface
-│   ├── types.ts                   # Shared types
-│   └── version.ts                 # SDK version constant
-├── tests/
-│   ├── client.test.ts             # vitest
-│   ├── errors.test.ts
-│   └── events.test.ts
+│   ├── index.ts                   # Public API surface (re-exports)
+│   ├── mcp/
+│   │   ├── server.ts              # createBizarMcpServer / BIZAR_TOOLS
+│   │   └── bin.ts                 # stdio MCP server entry (bizar-mcp)
+│   ├── memory/
+│   │   └── index.ts               # Obsidian-compatible vault helpers
+│   ├── dangerous-patterns.ts      # 36-pattern destructive-command scanner
+│   └── fingerprint.ts             # Tool-call fingerprint (SHA256)
 └── package.json
 ```
 
 ## Public contract
 
 ```ts
-import { ClineSdk, parseEvent, isBizarError } from "@polderlabs/bizar-sdk";
-
-const sdk = new ClineSdk({ baseUrl: "http://127.0.0.1:4321", password });
-const events = await sdk.events.subscribe({ sessionID });
-for await (const event of events) {
-  if (isBizarError(event)) console.error("error:", event);
-  else console.log("event:", parseEvent(event));
-}
+import {
+  // Memory vault (Obsidian-compatible markdown)
+  readNote, writeNote, listNotes, searchNotes,
+  // Dangerous-pattern scanner
+  checkDangerous, listDangerousPatterns,
+  // Tool-call fingerprint
+  fingerprint,
+  // MCP server (Claude Code's only path into the SDK)
+  createBizarMcpServer, BIZAR_TOOLS,
+} from "@polderlabs/bizar-sdk";
 ```
 
 ## Key invariants
 
-- SDK is HTTP-only (legacy compat). New code uses `@cline/core`
-  in-process for both plugin and dashboard.
-- Discriminated error model via `isBizarError(event)`.
-- Event shapes are versioned (current: `runtime.team.progress.v1`).
-- Tests use vitest (`bun test` doesn't pick them up — see
-  test files for vitest config).
+- This package is consumed **only** by the `bizar-mcp` stdio binary
+  (registered in `~/.claude/settings.json`) and by `plugins/bizar`
+  (back-compat shim that re-exports the SDK surface).
+- Claude Code has no in-process plugin API; MCP servers are the
+  sole integration path. Anything that previously required Cline's
+  `AgentPlugin` is now expressed as MCP tools or skills.
+- Memory vault is plain markdown with YAML frontmatter; the SDK
+  provides typed read/write/list/search so the dashboard, hooks,
+  and MCP tools all use the same backend.
+- Discriminated error model for memory + dangerous-pattern results
+  (`{ ok: true, data } | { ok: false, error }`).
 
 ## Versioning
 
 - `@polderlabs/bizar-sdk` follows semver.
-- Beta releases: `0.x.0-beta.N` (e.g. `0.2.0-beta.4`).
-- Stable releases: `0.x.0` once v0.2 stabilizes.
+- Current: `0.4.0` (Claude Code-native; MCP-first).
 
 ## Verification
 
-- `make check` — TS compile + tests (incl. vitest)
-- `make e2e` — SDK wrapper integration (plugin ↔ dashboard
-  roundtrip)
+- `make check` — TS compile + vitest
+- `make test` — vitest over the SDK
+- `bun run packages/sdk/src/mcp/bin.ts` — smoke test the MCP server
 
 ## See also
 
 - [docs/architecture.md](../../docs/architecture.md) — layer model
 - [@polderlabs/bizar-sdk on npm](https://www.npmjs.com/package/@polderlabs/bizar-sdk)
+- [docs/migration-guide.md](../../docs/migration-guide.md) — v6.3.0
+  Claude Code migration

package/packages/sdk/package-lock.json

@@ -0,0 +1,32 @@
+{
+  "name": "@polderlabs/bizar-sdk",
+  "version": "0.4.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@polderlabs/bizar-sdk",
+      "version": "0.4.0",
+      "dependencies": {
+        "zod": "^3.23.0"
+      },
+      "peerDependencies": {
+        "@anthropic-ai/claude-agent-sdk": "*"
+      },
+      "peerDependenciesMeta": {
+        "@anthropic-ai/claude-agent-sdk": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/zod": {
+      "version": "3.25.76",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/colinhacks"
+      }
+    }
+  }
+}

package/packages/sdk/package.json

@@ -1,20 +1,30 @@
 {
   "name": "@polderlabs/bizar-sdk",
-  "version": "0.3.3",
+  "version": "0.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "bin": {
+    "bizar-mcp": "dist/mcp/bin.js"
+  },
   "exports": {
     ".": "./dist/index.js",
-    "./cline": "./dist/cline.js"
+    "./memory": "./dist/memory/index.js",
+    "./mcp": "./dist/mcp/server.js",
+    "./dangerous-patterns": "./dist/dangerous-patterns.js"
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "peerDependencies": {
-    "@cline/sdk": "*"
+    "@anthropic-ai/claude-agent-sdk": "*"
   },
   "peerDependenciesMeta": {
-    "@cline/sdk": {
+    "@anthropic-ai/claude-agent-sdk": {
       "optional": true
     }
+  },
+  "dependencies": {
+    "zod": "^3.23.0"
   }
 }

package/{plugins/bizar → packages/sdk}/src/dangerous-patterns.ts

@@ -5,20 +5,10 @@
  * + OpenFang `crates/openfang-skills/src/verify.rs` + OpenClaw
  * `src/security/external-content.ts:28-43`.
  *
- * Detects dangerous commands and blocks/requires approval before
- * tool execution. Every tool that takes a "command" or "path"
- * argument runs through `checkDangerous()` before being dispatched.
- *
- * Categories:
- *   - Filesystem destruction (rm -rf, mkfs, dd, fork bombs)
- *   - Privilege escalation (sudo, su, chmod 777, chown)
- *   - Network exfiltration (curl to metadata, wget, nc backdoors)
- *   - Process control (kill -9 1, pkill, shutdown)
- *   - Crypto mining (xmrig, minerd)
- *   - Path traversal in file paths (../../etc/passwd, ~/.ssh/)
- *
- * v6.0.0 — initial patterns. Tuned to catch the common exploits
- * without false positives on legitimate dev work.
+ * Detects dangerous commands and blocks/requires approval before tool
+ * execution. Every tool that takes a "command" or "path" argument runs
+ * through `checkDangerous()` before being dispatched. Framework-agnostic
+ * — used by both the SDK MCP server and any Claude Code hook scripts.
  */
 
 export type ApprovalDecision = "allow" | "require-approval" | "deny";
@@ -30,8 +20,6 @@ export interface ApprovalCheck {
   pattern?: string;
 }
 
-// 30+ patterns from Hermes + OpenFang + OpenClaw. Catches the common
-// dangerous operations in coding-agent contexts.
 const DANGEROUS_PATTERNS: Array<{ name: string; pattern: RegExp; decision: ApprovalDecision; reason: string }> = [
   // Filesystem destruction
   { name: "rm-rf-root", pattern: /\brm\s+(-\w*r\w*f\w*\s+)*\/\s*$/i, decision: "deny", reason: "Recursive delete of root filesystem" },
@@ -62,10 +50,10 @@ const DANGEROUS_PATTERNS: Array<{ name: string; pattern: RegExp; decision: Appro
   { name: "shutdown", pattern: /\b(shutdown|halt|poweroff|reboot)\b/i, decision: "deny", reason: "System shutdown" },
   { name: "init-0", pattern: /\binit\s+0\b/i, decision: "deny", reason: "init 0 (shutdown)" },
 
-  // Crypto mining (common malware)
+  // Crypto mining
   { name: "xmrig", pattern: /\b(xmrig|minerd|cpuminer|cgminer)\b/i, decision: "deny", reason: "Crypto miner" },
 
-  // Package management (often exploited)
+  // Package management
   { name: "pip-install-shell", pattern: /\bpip\s+install\s+.*\|\s*(ba)?sh\b/i, decision: "deny", reason: "pip install piped to shell" },
   { name: "npm-install-shell", pattern: /\bnpm\s+install\s+.*\|\s*(ba)?sh\b/i, decision: "deny", reason: "npm install piped to shell" },
 
@@ -90,15 +78,7 @@ const DANGEROUS_PATTERNS: Array<{ name: string; pattern: RegExp; decision: Appro
   { name: "system-prompt-leak", pattern: /reveal\s+(your\s+)?system\s+prompt/i, decision: "deny", reason: "Prompt extraction attempt" },
 ];
 
-/**
- * Check a tool call's arguments for dangerous patterns.
- * Returns a decision (allow / require-approval / deny) and a reason.
- *
- * The check is applied to the union of all string-typed arguments,
- * so the caller doesn't need to know which arg is the "command".
- */
 export function checkDangerous(args: Record<string, unknown>): ApprovalCheck {
-  // Collect all string values from the args object
   const text = collectStrings(args);
   if (!text) return { decision: "allow" };
 
@@ -128,12 +108,10 @@ function collectStrings(value: unknown, parts: string[] = []): string {
   return parts.join("\n");
 }
 
-/** Get all pattern names (for audit / reporting). */
 export function listDangerousPatterns(): string[] {
   return DANGEROUS_PATTERNS.map((p) => p.name);
 }
 
-/** Count of patterns in each category. */
 export function getDangerousPatternStats(): {
   total: number;
   deny: number;

package/packages/sdk/src/index.ts

@@ -1,82 +1,47 @@
 /**
  * Public API for @polderlabs/bizar-sdk.
+ *
+ * v0.4.0 — Claude Code-native rewrite. The legacy Cline wrappers
+ * (`createClineSdk`, `subscribeClineEvents`, `Cline*` types) have been
+ * removed because Bizar no longer integrates with the Cline runtime.
+ * The Claude Code integration is via the MCP server exported from
+ * `./mcp/server.ts` (`createBizarMcpServer`) and the in-process memory
+ * vault exported from `./memory/index.ts`.
  */
 
-export { createBizarClient } from "./client.js";
-export type {
-  BizarClient,
-  BizarClientConfig,
-  SessionsResource,
-  ProjectsResource,
-  PlansResource,
-  EventsResource,
-  HealthResource,
-} from "./client.js";
+// In-process memory vault (Obsidian-compatible markdown notes).
+export {
+  readNote,
+  writeNote,
+  listNotes,
+  searchNotes,
+  parseFrontmatter,
+  serializeFrontmatter,
+  resolveVaultRoot,
+  DEFAULT_MEMORY_VAULT,
+  LEGACY_MEMORY_VAULT,
+} from "./memory/index.js";
+export type { MemoryNote } from "./memory/index.js";
+
+// Dangerous-pattern scanner.
+export {
+  checkDangerous,
+  listDangerousPatterns,
+  getDangerousPatternStats,
+} from "./dangerous-patterns.js";
+export type { ApprovalDecision, ApprovalCheck } from "./dangerous-patterns.js";
 
-export type { EventSubscription, EventSubscriptionOptions } from "./events.js";
+// Tool-call fingerprint (stable hash for loop-guard).
+export { fingerprint } from "./fingerprint.js";
 
+// Claude Code MCP server.
 export {
-  isBizarError,
-  connectionErrorFrom,
-  dashboardErrorFrom,
-  apiErrorFrom,
-} from "./errors.js";
-export type {
-  BizarError,
-  PluginError,
-  DashboardError,
-  ConnectionError,
-  APIError,
-  ClineConnectionError,
-} from "./errors.js";
-
-export type {
-  // Session
-  Session,
-  SessionStatus,
-  SessionCreate,
-  SessionListQuery,
-  // Project
-  Project,
-  // Plan
-  Plan,
-  PlanStatus,
-  // Part
-  Part,
-  TextPart,
-  ToolCallPart,
-  ToolResultPart,
-  ReasoningPart,
-  // Event
-  DashboardEvent,
-  DashboardConnectedEvent,
-  SessionCreatedEvent,
-  SessionUpdatedEvent,
-  SessionIdleEvent,
-  SessionErrorEvent,
-  MessagePartUpdatedEvent,
-  ToolExecutedEvent,
-  PlanUpdatedEvent,
-  // Health
-  Health,
-} from "./types.js";
+  createBizarMcpServer,
+  createBizarMcpServerConfig,
+  BIZAR_TOOLS,
+  getBizarMcpToolSummary,
+  defineTool,
+} from "./mcp/server.js";
+export type { SdkMcpToolDef, SdkMcpServerConfig } from "./mcp/server.js";
 
 export { SDK_VERSION } from "./version.js";
-
-// Cline SDK — wraps the cline serve child with a typed interface.
-// Tries `@cline/sdk` first; falls back to a thin fetch wrapper.
-export { createClineSdk } from "./cline.js";
-export type { ClineSdk, ClineSdkConfig } from "./cline.js";
-
-export { subscribeClineEvents } from "./cline-events.js";
-export type {
-  ClineEventEnvelope,
-  ClineEventSubscribeOptions,
-} from "./cline-events.js";
-
-export type {
-  ClineSession,
-  ClineMessage,
-  ClinePart,
-  ClineEvent,
-} from "./cline-types.js";

package/packages/sdk/src/mcp/bin.ts

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+/**
+ * packages/sdk/src/mcp/bin.ts — `bizar-mcp` standalone stdio MCP server.
+ *
+ * This is the runtime entry-point that `claude mcp add` and
+ * `.mcp.json` invoke. The Claude Code CLI launches this as a child
+ * process and speaks the Model Context Protocol over stdio.
+ *
+ *     claude mcp add bizar -- npx -y @polderlabs/bizar-sdk mcp
+ *
+ * The actual server is built dynamically via
+ * `@anthropic-ai/claude-agent-sdk`'s `createSdkMcpServer()` and `tool()`
+ * helpers so we don't take a hard dependency on zod at SDK-level.
+ */
+
+import { createBizarMcpServer, BIZAR_TOOLS } from "./server.js";
+
+async function main() {
+  // We have to import the SDK lazily so the SDK package itself stays
+  // optional — if a downstream user isn't using `@anthropic-ai/claude-agent-sdk`,
+  // we don't want a missing-import crash at require-time.
+  let sdk: any;
+  try {
+    sdk = await import("@anthropic-ai/claude-agent-sdk");
+  } catch (e) {
+    process.stderr.write(
+      `bizar-mcp: cannot start — @anthropic-ai/claude-agent-sdk is not installed.\n` +
+      `Install with: npm install @anthropic-ai/claude-agent-sdk\n` +
+      `Reason: ${e instanceof Error ? e.message : String(e)}\n`,
+    );
+    process.exit(2);
+  }
+
+  // `createSdkMcpServer` returns an object the host can introspect;
+  // for stdio hosts we serialize it via `.run()` or just let the
+  // process stay alive on stdin. Claude Code's `claude mcp add`
+  // knows how to talk to this transport.
+  const server = createBizarMcpServer(sdk as Parameters<typeof createBizarMcpServer>[0]);
+  // eslint-disable-next-line no-console
+  console.error(`[bizar-mcp] started; tools: ${BIZAR_TOOLS.map((t) => t.name).join(", ")}`);
+
+  // Keep the process alive. Claude Code drives I/O via stdin/stdout;
+  // the SDK MCP server object exposes a transport handle internally.
+  void server;
+  process.stdin.resume();
+}
+
+main().catch((err) => {
+  process.stderr.write(`bizar-mcp fatal: ${err instanceof Error ? err.stack ?? err.message : String(err)}\n`);
+  process.exit(1);
+});