@proletariat/cli 0.3.69 → 0.3.71

package/dist/lib/execution/runners/devcontainer-tmux.js

@@ -0,0 +1,270 @@
+/**
+ * Devcontainer Tmux Display Handler
+ *
+ * Runs devcontainer commands in tmux sessions inside Docker containers.
+ * Handles session creation, terminal tab opening, and attachment.
+ */
+import { execSync, fs, path, os, getSetTitleCommands, } from './shared.js';
+import { buildTmuxWindowName, buildWindowTitle, shouldUseControlMode, buildTmuxMouseOption, buildTmuxAttachCommand, configureITermTmuxWindowMode, } from './shared.js';
+/**
+ * Run devcontainer command in tmux session INSIDE the container.
+ *
+ * Architecture: Container tmux only (simple, no nesting)
+ * 1. Start tmux session INSIDE the container (detached) - runs claude
+ * 2. Open terminal tab that attaches directly to the container's tmux
+ */
+export async function runDevcontainerInTmux(context, devcontainerCmd, config, displayMode = 'terminal', containerId, promptContainerPath) {
+    const sessionName = buildTmuxWindowName(context);
+    const windowTitle = buildWindowTitle(context);
+    const terminalApp = config.terminal.app;
+    const useControlMode = shouldUseControlMode(terminalApp, config.tmux.controlMode);
+    try {
+        let actualContainerId = containerId;
+        if (!actualContainerId) {
+            const containerIdMatch = devcontainerCmd.match(/docker exec\s+(?:-it\s+)?(\S+)/);
+            if (containerIdMatch) {
+                actualContainerId = containerIdMatch[1];
+            }
+        }
+        if (!actualContainerId) {
+            return { success: false, error: 'Could not determine container ID for tmux session' };
+        }
+        // Check if tmux is available inside the container
+        try {
+            execSync(`docker exec ${actualContainerId} which tmux`, { stdio: 'pipe' });
+        }
+        catch {
+            return {
+                success: false,
+                error: `tmux is not installed in the devcontainer. Add 'tmux' to your devcontainer's Dockerfile or use the default prlt devcontainer template.`,
+            };
+        }
+        // Extract the claude command from the devcontainer command
+        const cmdMatch = devcontainerCmd.match(/bash -c '(.+)'$/);
+        const claudeCmd = cmdMatch ? cmdMatch[1] : devcontainerCmd;
+        const containerPostExec = context.isEphemeral
+            ? `echo ""\necho "✅ Ephemeral agent work complete. Session will auto-close in 5s..."\nsleep 5\nexit 0`
+            : `echo ""\necho "✅ Agent work complete. Press Enter to close or run more commands."\nexec bash`;
+        const promptWaitBlock = promptContainerPath
+            ? `# TKT-099: Wait for prompt file to sync from host into container
+PROMPT_WAIT=0
+while [ ! -s "${promptContainerPath}" ] && [ $PROMPT_WAIT -lt 30 ]; do
+  sleep 0.5
+  PROMPT_WAIT=$((PROMPT_WAIT + 1))
+done
+if [ ! -s "${promptContainerPath}" ]; then
+  echo "⚠️  Warning: Prompt file not available after 15s: ${promptContainerPath}"
+fi
+`
+            : '';
+        const tmuxScript = `#!/bin/bash
+export TERM=xterm-256color
+export COLORTERM=truecolor
+unset CI
+unset CLAUDECODE
+echo "🚀 Starting: ${sessionName}"
+echo ""
+${promptWaitBlock}${claudeCmd}
+${containerPostExec}
+`;
+        const scriptPath = `/tmp/prlt-${sessionName}.sh`;
+        const mouseOption = buildTmuxMouseOption(useControlMode);
+        // Write script to container
+        try {
+            execSync(`docker exec -i ${actualContainerId} bash -c 'cat > ${scriptPath} && chmod +x ${scriptPath}'`, {
+                input: tmuxScript,
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+        }
+        catch (error) {
+            return { success: false, error: `Failed to write script to container: ${error instanceof Error ? error.message : error}` };
+        }
+        // Kill existing session with same name if reusing container (TKT-1028)
+        try {
+            execSync(`docker exec ${actualContainerId} tmux has-session -t "${sessionName}" 2>&1`, { stdio: 'pipe' });
+            console.debug(`[runners:tmux] Killing existing tmux session "${sessionName}" in container`);
+            try {
+                execSync(`docker exec ${actualContainerId} tmux kill-session -t "${sessionName}"`, { stdio: 'pipe' });
+            }
+            catch { /* Ignore */ }
+        }
+        catch { /* Session doesn't exist */ }
+        // Create tmux session
+        const createSessionCmd = `tmux new-session -d -s "${sessionName}" -n "${sessionName}" "bash ${scriptPath}"${mouseOption} \\; set-option -g set-titles on \\; set-option -g set-titles-string "#{window_name}"`;
+        try {
+            execSync(`docker exec ${actualContainerId} bash -c '${createSessionCmd}'`, { stdio: 'pipe' });
+        }
+        catch (error) {
+            return { success: false, error: `Failed to create tmux session inside container: ${error instanceof Error ? error.message : error}` };
+        }
+        // Background mode: return after session creation
+        if (displayMode === 'background') {
+            await new Promise(resolve => setTimeout(resolve, 500));
+            try {
+                execSync(`docker exec ${actualContainerId} tmux has-session -t "${sessionName}" 2>&1`, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+            }
+            catch {
+                return { success: false, error: `Failed to verify tmux session "${sessionName}" inside container.` };
+            }
+            return { success: true, containerId: actualContainerId, sessionId: sessionName };
+        }
+        // Foreground mode: attach in current terminal
+        if (displayMode === 'foreground') {
+            try {
+                const fgTmuxAttach = buildTmuxAttachCommand(false, true);
+                execSync(`clear && docker exec -it ${actualContainerId} ${fgTmuxAttach} -t "${sessionName}"`, { stdio: 'inherit' });
+                return { success: true, containerId: actualContainerId, sessionId: sessionName };
+            }
+            catch (error) {
+                return { success: false, error: `Failed to attach to container tmux session: ${error instanceof Error ? error.message : error}` };
+            }
+        }
+        // Terminal mode: open new tab
+        const tmuxAttach = buildTmuxAttachCommand(useControlMode, true);
+        const attachCmd = `docker exec -it ${actualContainerId} ${tmuxAttach} -t "${sessionName}"`;
+        // iTerm control mode: direct -CC attach
+        if (terminalApp === 'iTerm' && useControlMode) {
+            configureITermTmuxWindowMode(config.tmux.windowMode);
+            const openInBackground = config.terminal.openInBackground ?? true;
+            if (openInBackground) {
+                execSync(`osascript -e '
+          set frontApp to path to frontmost application as text
+          tell application "iTerm"
+            tell current window
+              set newTab to (create tab with default profile)
+              tell current session of newTab
+                write text "docker exec -it ${actualContainerId} tmux -u -CC attach -d -t \\"${sessionName}\\""
+              end tell
+            end tell
+          end tell
+          tell application frontApp to activate
+        '`);
+            }
+            else {
+                execSync(`osascript -e '
+          tell application "iTerm"
+            activate
+            tell current window
+              set newTab to (create tab with default profile)
+              tell current session of newTab
+                write text "docker exec -it ${actualContainerId} tmux -u -CC attach -d -t \\"${sessionName}\\""
+              end tell
+            end tell
+          end tell
+        '`);
+            }
+            return { success: true, containerId: actualContainerId, sessionId: sessionName };
+        }
+        // Other terminals: create script file and open tab
+        const baseDir = context.hqPath
+            ? path.join(context.hqPath, '.proletariat', 'scripts')
+            : path.join(os.homedir(), '.proletariat', 'scripts');
+        fs.mkdirSync(baseDir, { recursive: true });
+        const hostScriptPath = path.join(baseDir, `attach-${sessionName}-${Date.now()}.sh`);
+        const setTitleCmds = getSetTitleCommands(windowTitle);
+        const hostScript = `#!/bin/bash
+${setTitleCmds}
+# Attach to container tmux session
+${attachCmd}
+rm -f "${hostScriptPath}"
+exec $SHELL
+`;
+        fs.writeFileSync(hostScriptPath, hostScript, { mode: 0o755 });
+        const openInBackground = config.terminal.openInBackground ?? true;
+        switch (terminalApp) {
+            case 'iTerm':
+                if (openInBackground) {
+                    execSync(`osascript -e '
+            tell application "System Events"
+              set frontApp to name of first application process whose frontmost is true
+              set frontAppBundle to bundle identifier of first application process whose frontmost is true
+            end tell
+            tell application "iTerm"
+              if (count of windows) = 0 then
+                create window with default profile
+                tell current session of current window
+                  set name to "${windowTitle}"
+                  write text "${hostScriptPath}"
+                end tell
+              else
+                tell current window
+                  create tab with default profile
+                  tell current session
+                    set name to "${windowTitle}"
+                    write text "${hostScriptPath}"
+                  end tell
+                end tell
+              end if
+            end tell
+            delay 0.2
+            tell application "System Events"
+              set frontmost of process frontApp to true
+            end tell
+            delay 0.1
+            do shell script "open -b " & quoted form of frontAppBundle
+          '`);
+                }
+                else {
+                    execSync(`osascript -e '
+            tell application "iTerm"
+              activate
+              if (count of windows) = 0 then
+                create window with default profile
+                tell current session of current window
+                  set name to "${windowTitle}"
+                  write text "${hostScriptPath}"
+                end tell
+              else
+                tell current window
+                  create tab with default profile
+                  tell current session
+                    set name to "${windowTitle}"
+                    write text "${hostScriptPath}"
+                  end tell
+                end tell
+              end if
+            end tell
+          '`);
+                }
+                break;
+            case 'Ghostty':
+                execSync(`osascript -e '
+          tell application "Ghostty" to activate
+          tell application "System Events"
+            tell process "Ghostty"
+              keystroke "t" using command down
+              delay 0.3
+              keystroke "${hostScriptPath}"
+              keystroke return
+            end tell
+          end tell
+        '`);
+                break;
+            case 'Terminal':
+            default:
+                if (openInBackground) {
+                    execSync(`osascript -e 'tell application "Terminal" to do script "${hostScriptPath}"'`);
+                }
+                else {
+                    execSync(`osascript -e '
+            tell application "Terminal"
+              activate
+              tell application "System Events"
+                tell process "Terminal"
+                  keystroke "t" using command down
+                end tell
+              end tell
+              delay 0.3
+              do script "${hostScriptPath}" in front window
+            end tell
+          '`);
+                }
+                break;
+        }
+        return { success: true, containerId: actualContainerId, sessionId: sessionName };
+    }
+    catch (error) {
+        return { success: false, error: error instanceof Error ? error.message : 'Failed to start tmux session in container' };
+    }
+}
+//# sourceMappingURL=devcontainer-tmux.js.map

package/dist/lib/execution/runners/devcontainer-tmux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devcontainer-tmux.js","sourceRoot":"","sources":["../../../../src/lib/execution/runners/devcontainer-tmux.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,IAAI,EACJ,EAAE,EAIF,mBAAmB,GACpB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAEL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,aAAa,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAyB,EACzB,eAAuB,EACvB,MAAuB,EACvB,cAA2B,UAAU,EACrC,WAAoB,EACpB,mBAA4B;IAE5B,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAA;IACvC,MAAM,cAAc,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAEjF,IAAI,CAAC;QACH,IAAI,iBAAiB,GAAG,WAAW,CAAA;QACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,gBAAgB,GAAG,eAAe,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA;YAChF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,iBAAiB,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAA;QACvF,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,iBAAiB,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wIAAwI;aAChJ,CAAA;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAA;QAE1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;YAC3C,CAAC,CAAC,oGAAoG;YACtG,CAAC,CAAC,8FAA8F,CAAA;QAElG,MAAM,eAAe,GAAG,mBAAmB;YACzC,CAAC,CAAC;;gBAEQ,mBAAmB;;;;aAItB,mBAAmB;4DAC4B,mBAAmB;;CAE9E;YACK,CAAC,CAAC,EAAE,CAAA;QAEN,MAAM,UAAU,GAAG;;;;;qBAKF,WAAW;;EAE9B,eAAe,GAAG,SAAS;EAC3B,iBAAiB;CAClB,CAAA;QACG,MAAM,UAAU,GAAG,aAAa,WAAW,KAAK,CAAA;QAChD,MAAM,WAAW,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAA;QAExD,4BAA4B;QAC5B,IAAI,CAAC;YACH,QAAQ,CAAC,kBAAkB,iBAAiB,mBAAmB,UAAU,gBAAgB,UAAU,GAAG,EAAE;gBACtG,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QAC5H,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,iBAAiB,yBAAyB,WAAW,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;YACzG,OAAO,CAAC,KAAK,CAAC,iDAAiD,WAAW,gBAAgB,CAAC,CAAA;YAC3F,IAAI,CAAC;gBACH,QAAQ,CAAC,eAAe,iBAAiB,0BAA0B,WAAW,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;YACvG,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAEvC,sBAAsB;QACtB,MAAM,gBAAgB,GAAG,2BAA2B,WAAW,SAAS,WAAW,WAAW,UAAU,IAAI,WAAW,uFAAuF,CAAA;QAC9M,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,iBAAiB,aAAa,gBAAgB,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QACvI,CAAC;QAED,iDAAiD;QACjD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;YACtD,IAAI,CAAC;gBACH,QAAQ,CAAC,eAAe,iBAAiB,yBAAyB,WAAW,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YAChJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,WAAW,qBAAqB,EAAE,CAAA;YACtG,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;QAClF,CAAC;QAED,8CAA8C;QAC9C,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACxD,QAAQ,CAAC,4BAA4B,iBAAiB,IAAI,YAAY,QAAQ,WAAW,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;gBACnH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;YACnI,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QAC/D,MAAM,SAAS,GAAG,mBAAmB,iBAAiB,IAAI,UAAU,QAAQ,WAAW,GAAG,CAAA;QAE1F,wCAAwC;QACxC,IAAI,WAAW,KAAK,OAAO,IAAI,cAAc,EAAE,CAAC;YAC9C,4BAA4B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAA;YACjE,IAAI,gBAAgB,EAAE,CAAC;gBACrB,QAAQ,CAAC;;;;;;8CAM6B,iBAAiB,gCAAgC,WAAW;;;;;UAKhG,CAAC,CAAA;YACL,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC;;;;;;8CAM6B,iBAAiB,gCAAgC,WAAW;;;;UAIhG,CAAC,CAAA;YACL,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;QAClF,CAAC;QAED,mDAAmD;QACnD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;YAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;QACtD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACnF,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAA;QAErD,MAAM,UAAU,GAAG;EACrB,YAAY;;EAEZ,SAAS;SACF,cAAc;;CAEtB,CAAA;QACG,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7D,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAA;QAEjE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,OAAO;gBACV,IAAI,gBAAgB,EAAE,CAAC;oBACrB,QAAQ,CAAC;;;;;;;;;iCASc,WAAW;gCACZ,cAAc;;;;;;mCAMX,WAAW;kCACZ,cAAc;;;;;;;;;;;YAWpC,CAAC,CAAA;gBACL,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC;;;;;;iCAMc,WAAW;gCACZ,cAAc;;;;;;mCAMX,WAAW;kCACZ,cAAc;;;;;YAKpC,CAAC,CAAA;gBACL,CAAC;gBACD,MAAK;YACP,KAAK,SAAS;gBACZ,QAAQ,CAAC;;;;;;2BAMU,cAAc;;;;UAI/B,CAAC,CAAA;gBACH,MAAK;YACP,KAAK,UAAU,CAAC;YAChB;gBACE,IAAI,gBAAgB,EAAE,CAAC;oBACrB,QAAQ,CAAC,2DAA2D,cAAc,IAAI,CAAC,CAAA;gBACzF,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC;;;;;;;;;2BASQ,cAAc;;YAE7B,CAAC,CAAA;gBACL,CAAC;gBACD,MAAK;QACT,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C,EAAE,CAAA;IACxH,CAAC;AACH,CAAC"}

package/dist/lib/execution/runners/devcontainer.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Devcontainer Runner (uses raw Docker)
+ *
+ * Runs commands inside Docker containers with filesystem isolation.
+ * Delegates display mode handling to devcontainer-terminal.ts and devcontainer-tmux.ts.
+ */
+import { DisplayMode, OutputMode, PermissionMode, SessionManager, ExecutorType, ExecutionContext, ExecutionConfig } from './shared.js';
+import { RunnerResult } from './shared.js';
+/**
+ * Build the command to run Claude inside the container.
+ * Uses docker exec for direct container access.
+ * Uses a prompt file to avoid shell escaping issues.
+ */
+export declare function buildDevcontainerCommand(context: ExecutionContext, executor: ExecutorType, promptFile: string, containerId?: string, outputMode?: OutputMode, permissionMode?: PermissionMode, displayMode?: DisplayMode, mcpConfigFile?: string): string;
+/**
+ * Run command inside a Docker container.
+ * Uses raw Docker commands for filesystem isolation - no devcontainer CLI required.
+ */
+export declare function runDevcontainer(context: ExecutionContext, executor: ExecutorType, config: ExecutionConfig, displayMode?: DisplayMode, sessionManager?: SessionManager): Promise<RunnerResult>;

package/dist/lib/execution/runners/devcontainer.js

@@ -0,0 +1,261 @@
+/**
+ * Devcontainer Runner (uses raw Docker)
+ *
+ * Runs commands inside Docker containers with filesystem isolation.
+ * Delegates display mode handling to devcontainer-terminal.ts and devcontainer-tmux.ts.
+ */
+import { spawn, execSync, fs, path, os, resolveCodexExecutionContext, validateCodexMode, getCodexCommand, resolveToolsForSpawn, } from './shared.js';
+import { buildSessionName, buildPrompt, getExecutorCommand, isClaudeExecutor, checkDockerDaemon, ensureDockerContainer, copyClaudeCredentials, } from './shared.js';
+import { runDevcontainerInTmux } from './devcontainer-tmux.js';
+import { runDevcontainerInTerminal } from './devcontainer-terminal.js';
+// =============================================================================
+// Prompt File Management
+// =============================================================================
+/**
+ * Clean up old prompt files from the worktree.
+ * This is called before writing a new prompt file to prevent accumulation
+ * of stale prompt files from failed or interrupted executions.
+ */
+function cleanupOldPromptFiles(worktreePath, ticketId) {
+    try {
+        const files = fs.readdirSync(worktreePath);
+        const pattern = ticketId
+            ? new RegExp(`^\\.prlt-prompt-${ticketId}-\\d+\\.txt$`)
+            : /^\.prlt-prompt-.*\.txt$/;
+        for (const file of files) {
+            if (pattern.test(file)) {
+                try {
+                    fs.unlinkSync(path.join(worktreePath, file));
+                }
+                catch (err) {
+                    console.debug(`[runners:cleanup] Failed to delete ${file}:`, err);
+                }
+            }
+        }
+    }
+    catch (err) {
+        console.debug(`[runners:cleanup] Failed to read directory ${worktreePath}:`, err);
+    }
+}
+/**
+ * Write prompt to a file inside the worktree so the container can access it.
+ * Returns the path to the prompt file (relative to worktree for container access).
+ * Cleans up old prompt files for the same ticket before writing.
+ */
+function writePromptFile(context) {
+    // Clean up old prompt files for this ticket before creating a new one
+    cleanupOldPromptFiles(context.worktreePath, context.ticketId);
+    const prompt = buildPrompt(context);
+    const filename = `.prlt-prompt-${context.ticketId}-${Date.now()}.txt`;
+    const hostPath = path.join(context.worktreePath, filename);
+    fs.writeFileSync(hostPath, prompt, { mode: 0o644 });
+    // Container mounts agentDir at /workspace
+    // If worktreePath is a subdirectory of agentDir, we need the relative path
+    const relativePath = path.relative(context.agentDir, context.worktreePath);
+    const containerPath = relativePath
+        ? `/workspace/${relativePath}/${filename}`
+        : `/workspace/${filename}`;
+    return { hostPath, containerPath };
+}
+// =============================================================================
+// Devcontainer Command Builder
+// =============================================================================
+/**
+ * Build the command to run Claude inside the container.
+ * Uses docker exec for direct container access.
+ * Uses a prompt file to avoid shell escaping issues.
+ */
+export function buildDevcontainerCommand(context, executor, promptFile, containerId, outputMode = 'interactive', permissionMode = 'safe', displayMode = 'terminal', mcpConfigFile) {
+    // Calculate the relative path from agentDir to worktreePath for cd
+    const relativePath = path.relative(context.agentDir, context.worktreePath);
+    const cdCmd = relativePath ? `cd /workspace/${relativePath} && ` : '';
+    // Build executor command using the centralized getExecutorCommand()
+    let executorCmd;
+    const skipPermissions = permissionMode === 'danger';
+    if (isClaudeExecutor(executor)) {
+        const printFlag = outputMode === 'print' ? '-p ' : '';
+        const bypassTrustFlag = '--permission-mode bypassPermissions ';
+        const permissionsFlag = skipPermissions ? '--dangerously-skip-permissions ' : '';
+        const effortFlag = '--effort high ';
+        // TKT-053: Disable plan mode for background agents — prevents silent stalls
+        const disallowPlanFlag = displayMode === 'background' ? '--disallowedTools EnterPlanMode ' : '';
+        // Tool registry (TKT-083): pass MCP config to Claude Code via --mcp-config flag
+        const mcpConfigFlag = mcpConfigFile ? `--mcp-config ${mcpConfigFile} ` : '';
+        // PRLT-950: Use -- to separate flags from positional prompt argument.
+        executorCmd = `claude ${bypassTrustFlag}${permissionsFlag}${effortFlag}${printFlag}${disallowPlanFlag}${mcpConfigFlag}-- "$(cat ${promptFile})"`;
+    }
+    else if (executor === 'codex') {
+        const codexPermission = permissionMode;
+        const codexContext = resolveCodexExecutionContext(displayMode, outputMode);
+        const modeError = validateCodexMode(codexPermission, codexContext);
+        if (modeError) {
+            throw modeError;
+        }
+        const codexResult = getCodexCommand('PLACEHOLDER', codexPermission, codexContext);
+        const argsStr = codexResult.args.map(a => a === 'PLACEHOLDER' ? `"$(cat ${promptFile})"` : a).join(' ');
+        executorCmd = `${codexResult.cmd} ${argsStr}`;
+    }
+    else {
+        const { cmd, args } = getExecutorCommand(executor, `PLACEHOLDER`, skipPermissions);
+        const argsStr = args.map(a => a === 'PLACEHOLDER' ? `"$(cat ${promptFile})"` : a).join(' ');
+        executorCmd = `${cmd} ${argsStr}`;
+    }
+    const fullCmd = `${cdCmd}${executorCmd} && rm -f ${promptFile}`;
+    const ttyFlags = displayMode === 'background' ? '' : '-it ';
+    return `docker exec ${ttyFlags}${containerId} bash -c '${fullCmd}'`;
+}
+// =============================================================================
+// Devcontainer Runner
+// =============================================================================
+/**
+ * Run command inside a Docker container.
+ * Uses raw Docker commands for filesystem isolation - no devcontainer CLI required.
+ */
+export async function runDevcontainer(context, executor, config, displayMode = 'terminal', sessionManager = 'tmux') {
+    const devcontainerPath = path.join(context.agentDir, '.devcontainer');
+    const dockerfile = path.join(devcontainerPath, 'Dockerfile');
+    if (!fs.existsSync(dockerfile)) {
+        return {
+            success: false,
+            error: `No Dockerfile found at ${devcontainerPath}. Run 'prlt agent add' to set up the agent with Docker config.`,
+        };
+    }
+    try {
+        // Check if Docker is running (TKT-081: fast detection with diagnostic info)
+        const dockerStatus = checkDockerDaemon();
+        if (!dockerStatus.available) {
+            return {
+                success: false,
+                error: `Docker daemon is not available. ${dockerStatus.message}`,
+            };
+        }
+        // Ensure GitHub token is available for git push operations
+        if (!process.env.GITHUB_TOKEN && !process.env.GH_TOKEN) {
+            try {
+                const token = execSync('gh auth token', { encoding: 'utf-8', stdio: 'pipe' }).trim();
+                if (token) {
+                    process.env.GITHUB_TOKEN = token;
+                    process.env.GH_TOKEN = token;
+                }
+            }
+            catch (err) {
+                console.debug('[runners:docker] gh auth token failed:', err);
+            }
+        }
+        // Copy Claude credentials into agent directory so container can access them
+        if (isClaudeExecutor(executor)) {
+            copyClaudeCredentials(context.agentDir);
+        }
+        // Start or reuse container using raw Docker commands
+        const containerId = ensureDockerContainer(context, config, executor);
+        if (!containerId) {
+            return {
+                success: false,
+                error: 'Failed to start Docker container. Check Docker logs for details.',
+            };
+        }
+        // Write prompt to file in worktree (accessible by container)
+        const { hostPath: promptHostPath, containerPath: promptFile } = writePromptFile(context);
+        // Tool registry (TKT-083): generate MCP config file for container
+        let mcpConfigContainerPath;
+        if (context.hqPath && isClaudeExecutor(executor)) {
+            const toolsResult = resolveToolsForSpawn(context.hqPath, context.toolPolicy, context.worktreePath);
+            if (toolsResult.mcpConfigPath) {
+                const relativeMcp = path.relative(context.agentDir, toolsResult.mcpConfigPath);
+                mcpConfigContainerPath = `/workspace/${relativeMcp}`;
+            }
+        }
+        // Inject fresh GitHub token into container (containers may be reused with stale/empty tokens)
+        const githubToken = process.env.GITHUB_TOKEN || process.env.GH_TOKEN;
+        if (containerId && githubToken) {
+            try {
+                execSync(`docker exec ${containerId} bash -c 'echo "${githubToken}" > /home/node/.github-token && chmod 600 /home/node/.github-token && git config --global credential.helper "!f() { echo \\"username=x-access-token\\"; echo \\"password=\\$(cat /home/node/.github-token)\\"; }; f" && git config --global url."https://github.com/".insteadOf "git@github.com:"'`, {
+                    stdio: 'pipe',
+                });
+            }
+            catch {
+                // Non-fatal - token injection failed but execution can continue
+            }
+        }
+        // Build the docker exec command
+        const devcontainerCmd = buildDevcontainerCommand(context, executor, promptFile, containerId, config.outputMode, config.permissionMode, displayMode, mcpConfigContainerPath);
+        // Execute based on display mode
+        let result;
+        if (sessionManager === 'tmux') {
+            result = await runDevcontainerInTmux(context, devcontainerCmd, config, displayMode, containerId || undefined, promptFile);
+        }
+        else {
+            switch (displayMode) {
+                case 'background':
+                    result = await runDevcontainerInBackground(context, devcontainerCmd);
+                    break;
+                case 'terminal':
+                default:
+                    result = await runDevcontainerInTerminal(context, devcontainerCmd, config);
+                    break;
+            }
+        }
+        // Clean up prompt file if execution failed to start
+        if (!result.success && fs.existsSync(promptHostPath)) {
+            try {
+                fs.unlinkSync(promptHostPath);
+            }
+            catch (err) {
+                console.debug('[runners:devcontainer] Failed to cleanup prompt file:', err);
+            }
+        }
+        // Override containerId with the real Docker container ID
+        if (result.success && containerId) {
+            result.containerId = containerId;
+        }
+        // Set sessionId when using tmux inside the container
+        if (result.success && sessionManager === 'tmux') {
+            const sessionId = buildSessionName(context);
+            result.sessionId = sessionId;
+            // For terminal display mode, verify the tmux session was actually created
+            if (displayMode === 'terminal' && containerId) {
+                await new Promise(resolve => setTimeout(resolve, 3000));
+                try {
+                    execSync(`docker exec ${containerId} tmux has-session -t "${sessionId}" 2>&1`, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+                }
+                catch (err) {
+                    console.debug(`[runners:devcontainer] tmux session ${sessionId} not found in container:`, err);
+                    result.success = false;
+                    result.error = `Failed to create tmux session "${sessionId}" inside container. Check terminal for errors.`;
+                }
+            }
+        }
+        return result;
+    }
+    catch (error) {
+        cleanupOldPromptFiles(context.worktreePath, context.ticketId);
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : 'Failed to run in devcontainer',
+        };
+    }
+}
+// =============================================================================
+// Background Display Handler
+// =============================================================================
+/**
+ * Run devcontainer command in background, logging to file
+ */
+async function runDevcontainerInBackground(context, devcontainerCmd) {
+    const logsDir = path.join(os.homedir(), '.proletariat', 'logs');
+    fs.mkdirSync(logsDir, { recursive: true });
+    const logPath = path.join(logsDir, `work-${context.ticketId}-${Date.now()}.log`);
+    const logStream = fs.openSync(logPath, 'w');
+    const child = spawn('sh', ['-c', devcontainerCmd], {
+        detached: true,
+        stdio: ['ignore', logStream, logStream],
+    });
+    child.unref();
+    return {
+        success: true,
+        pid: child.pid?.toString(),
+        containerId: `devcontainer-${context.agentName}`,
+        logPath,
+    };
+}
+//# sourceMappingURL=devcontainer.js.map

package/dist/lib/execution/runners/devcontainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devcontainer.js","sourceRoot":"","sources":["../../../../src/lib/execution/runners/devcontainer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,EACL,QAAQ,EACR,EAAE,EACF,IAAI,EACJ,EAAE,EAQF,4BAA4B,EAC5B,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAEL,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AAEtE,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,YAAoB,EAAE,QAAiB;IACpE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,IAAI,MAAM,CAAC,mBAAmB,QAAQ,cAAc,CAAC;YACvD,CAAC,CAAC,yBAAyB,CAAA;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC9C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,8CAA8C,YAAY,GAAG,EAAE,GAAG,CAAC,CAAA;IACnF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAyB;IAChD,sEAAsE;IACtE,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IAE7D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,gBAAgB,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAA;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IAE1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAEnD,0CAA0C;IAC1C,2EAA2E;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1E,MAAM,aAAa,GAAG,YAAY;QAChC,CAAC,CAAC,cAAc,YAAY,IAAI,QAAQ,EAAE;QAC1C,CAAC,CAAC,cAAc,QAAQ,EAAE,CAAA;IAE5B,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAA;AACpC,CAAC;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAyB,EACzB,QAAsB,EACtB,UAAkB,EAClB,WAAoB,EACpB,aAAyB,aAAa,EACtC,iBAAiC,MAAM,EACvC,cAA2B,UAAU,EACrC,aAAsB;IAEtB,mEAAmE;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,iBAAiB,YAAY,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAErE,oEAAoE;IACpE,IAAI,WAAmB,CAAA;IACvB,MAAM,eAAe,GAAG,cAAc,KAAK,QAAQ,CAAA;IACnD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACrD,MAAM,eAAe,GAAG,sCAAsC,CAAA;QAC9D,MAAM,eAAe,GAAG,eAAe,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAA;QAChF,MAAM,UAAU,GAAG,gBAAgB,CAAA;QACnC,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/F,gFAAgF;QAChF,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,sEAAsE;QACtE,WAAW,GAAG,UAAU,eAAe,GAAG,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,aAAa,UAAU,IAAI,CAAA;IAClJ,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,eAAe,GAAmB,cAAc,CAAA;QACtD,MAAM,YAAY,GAAG,4BAA4B,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QAC1E,MAAM,SAAS,GAAG,iBAAiB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAA;QAClE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,CAAA;QACjB,CAAC;QACD,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC,CAAA;QACjF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACvG,WAAW,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,EAAE,CAAA;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC3F,WAAW,GAAG,GAAG,GAAG,IAAI,OAAO,EAAE,CAAA;IACnC,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,KAAK,GAAG,WAAW,aAAa,UAAU,EAAE,CAAA;IAC/D,MAAM,QAAQ,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAE3D,OAAO,eAAe,QAAQ,GAAG,WAAW,aAAa,OAAO,GAAG,CAAA;AACrE,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAyB,EACzB,QAAsB,EACtB,MAAuB,EACvB,cAA2B,UAAU,EACrC,iBAAiC,MAAM;IAEvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAA;IAE5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0BAA0B,gBAAgB,gEAAgE;SAClH,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,YAAY,GAAG,iBAAiB,EAAE,CAAA;QACxC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mCAAmC,YAAY,CAAC,OAAO,EAAE;aACjE,CAAA;QACH,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;gBACpF,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,KAAK,CAAA;oBAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAA;gBAC9B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzC,CAAC;QAED,qDAAqD;QACrD,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QACpE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kEAAkE;aAC1E,CAAA;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAExF,kEAAkE;QAClE,IAAI,sBAA0C,CAAA;QAC9C,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,oBAAoB,CACtC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,YAAY,CACrB,CAAA;YACD,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,aAAa,CAAC,CAAA;gBAC9E,sBAAsB,GAAG,cAAc,WAAW,EAAE,CAAA;YACtD,CAAC;QACH,CAAC;QAED,8FAA8F;QAC9F,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;QACpE,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,QAAQ,CAAC,eAAe,WAAW,mBAAmB,WAAW,oSAAoS,EAAE;oBACrW,KAAK,EAAE,MAAM;iBACd,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAA;QAE3K,gCAAgC;QAChC,IAAI,MAAoB,CAAA;QACxB,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,UAAU,CAAC,CAAA;QAC3H,CAAC;aAAM,CAAC;YACN,QAAQ,WAAW,EAAE,CAAC;gBACpB,KAAK,YAAY;oBACf,MAAM,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;oBACpE,MAAK;gBACP,KAAK,UAAU,CAAC;gBAChB;oBACE,MAAM,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,CAAA;oBAC1E,MAAK;YACT,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAA;YAC7E,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,MAAM,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,GAAG,WAAW,CAAA;QAClC,CAAC;QAED,qDAAqD;QACrD,IAAI,MAAM,CAAC,OAAO,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;YAC3C,MAAM,CAAC,SAAS,GAAG,SAAS,CAAA;YAE5B,0EAA0E;YAC1E,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC9C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;gBACvD,IAAI,CAAC;oBACH,QAAQ,CACN,eAAe,WAAW,yBAAyB,SAAS,QAAQ,EACpE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACvD,CAAA;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,0BAA0B,EAAE,GAAG,CAAC,CAAA;oBAC9F,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;oBACtB,MAAM,CAAC,KAAK,GAAG,kCAAkC,SAAS,gDAAgD,CAAA;gBAC5G,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC7D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;SAChF,CAAA;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;GAEG;AACH,KAAK,UAAU,2BAA2B,CACxC,OAAyB,EACzB,eAAuB;IAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;IAC/D,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAChF,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAE3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;QACjD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;KACxC,CAAC,CAAA;IAEF,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE;QAC1B,WAAW,EAAE,gBAAgB,OAAO,CAAC,SAAS,EAAE;QAChD,OAAO;KACR,CAAA;AACH,CAAC"}

package/dist/lib/execution/runners/docker-credentials.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Docker Credential Helpers
+ *
+ * Functions for checking and managing Claude Code credentials
+ * in Docker volumes, host filesystem, and macOS keychain.
+ * Also includes tmux server keychain access management.
+ */
+export declare const CLAUDE_CREDENTIALS_VOLUME = "claude-credentials";
+/**
+ * Check if the claude-credentials Docker volume exists.
+ */
+export declare function credentialsVolumeExists(): boolean;
+/**
+ * Check if valid Claude OAuth credentials exist in the Docker volume.
+ * Returns true if OAuth credentials are stored (even if access token is expired,
+ * since Claude Code handles refresh internally using stored refresh tokens).
+ *
+ * NOTE: This intentionally does NOT check for ANTHROPIC_API_KEY. If the user
+ * has an API key but no OAuth credentials, we want to prompt them to set up
+ * OAuth (which uses their Max subscription) rather than silently burning API credits.
+ */
+export declare function dockerCredentialsExist(): boolean;
+/**
+ * Get Docker credential info for display.
+ * Returns expiration date and subscription type if available.
+ */
+export declare function getDockerCredentialInfo(): {
+    expiresAt: Date;
+    subscriptionType?: string;
+} | null;
+/**
+ * Check if Claude Code authentication is available on the host system.
+ * Returns true if any of:
+ * 1. ANTHROPIC_API_KEY environment variable is set
+ * 2. OAuth credentials exist in ~/.claude/.credentials.json (Claude Code 1.x)
+ * 3. OAuth credentials exist in macOS keychain (Claude Code 2.x)
+ */
+export declare function hostCredentialsExist(): boolean;
+/**
+ * Ensure tmux server has keychain access for Claude Code OAuth.
+ *
+ * On macOS, tmux sessions can lose access to the keychain if the tmux server
+ * was started in a context without keychain access. This function tests and
+ * restarts the tmux server if needed.
+ */
+export declare function ensureTmuxServerHasKeychainAccess(): Promise<void>;
+/**
+ * Copy Claude Code credentials (~/.claude.json) into the agent directory.
+ * This makes the subscription credentials available inside the devcontainer.
+ */
+export declare function copyClaudeCredentials(agentDir: string): void;