@q-agent/agent 0.1.15 → 0.1.17

package/dist/src/runner.js

@@ -1018,6 +1018,21 @@ async function processAuthoringJob(cfg, job) {
         //    file (avoids a huge argv); task prompt via stdin.
         const systemFile = path.join(workDir, "system-prompt.txt");
         fs.writeFileSync(systemFile, job.systemPrompt, "utf-8");
+        // Use the app's saved Claude credential (shipped in the claim) so we don't
+        // need a separate `claude login` on this machine. Write it locked-down into
+        // the temp workspace (removed with workDir); empty ⇒ fall back to the agent's
+        // own login (no CLAUDE_CONFIG_DIR override).
+        let claudeConfigDir = "";
+        if (job.claudeCredentials) {
+            claudeConfigDir = path.join(workDir, ".claude-config");
+            fs.mkdirSync(claudeConfigDir, { recursive: true });
+            const credFile = path.join(claudeConfigDir, ".credentials.json");
+            fs.writeFileSync(credFile, job.claudeCredentials, "utf-8");
+            try {
+                fs.chmodSync(credFile, 0o600);
+            }
+            catch { /* best-effort on Windows */ }
+        }
         // On Windows `claude` is a .cmd shim, which Node can only launch via a shell;
         // quote the path-bearing args there. On POSIX we spawn without a shell.
         const useShell = process.platform === "win32";
@@ -1032,9 +1047,12 @@ async function processAuthoringJob(cfg, job) {
             "--add-dir", q(workDir),
             "--max-budget-usd", String(job.maxBudgetUsd),
         ];
+        const claudeEnv = { ...process.env, BU_CDP_URL: `http://127.0.0.1:${port}` };
+        if (claudeConfigDir)
+            claudeEnv.CLAUDE_CONFIG_DIR = claudeConfigDir;
         claude = (0, child_process_1.spawn)("claude", claudeArgs, {
             cwd: workDir,
-            env: { ...process.env, BU_CDP_URL: `http://127.0.0.1:${port}` },
+            env: claudeEnv,
             stdio: ["pipe", "pipe", "pipe"],
             shell: useShell,
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@q-agent/agent",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "Q-Agent Local Agent — claims execution jobs from the Q-Agent server and runs Playwright locally, so manual login/MFA happens on the user's own machine and session credentials never leave it.",
   "license": "UNLICENSED",
   "bin": {