@qodeca/xezar 0.10.1

package/dist/core/backend-detect.d.ts

@@ -0,0 +1,16 @@
+export interface BackendCheck {
+    name: 'claude' | 'codex' | 'opencode' | 'pi' | 'gh' | 'git';
+    available: boolean;
+    version?: string;
+    hint?: string;
+}
+/**
+ * Probe the host for everything xez leans on: the agent CLIs (`claude`, and
+ * the optional `codex` / `opencode` / `pi` alternatives), `gh` (GitHub auth for
+ * PR creation) and `git`. Nothing is required except at least one agent CLI —
+ * the GUI degrades gracefully, only offers the runners that are present, and
+ * shows the hints for the rest.
+ */
+export declare function detectEnvironment(): Promise<BackendCheck[]>;
+/** The host's GitHub token: logged-in `gh` first, `GITHUB_TOKEN` fallback. */
+export declare function readHostGithubToken(): Promise<string | null>;

package/dist/core/backend-detect.js

@@ -0,0 +1,155 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const exec = promisify(execFile);
+/**
+ * Probe the host for everything xez leans on: the agent CLIs (`claude`, and
+ * the optional `codex` / `opencode` / `pi` alternatives), `gh` (GitHub auth for
+ * PR creation) and `git`. Nothing is required except at least one agent CLI —
+ * the GUI degrades gracefully, only offers the runners that are present, and
+ * shows the hints for the rest.
+ */
+export async function detectEnvironment() {
+    return Promise.all([
+        probeClaude(),
+        probeCodex(),
+        probeOpencode(),
+        probePi(),
+        probeGh(),
+        probeGit(),
+    ]);
+}
+async function probeClaude() {
+    if (process.env.XEZ_DRY_RUN === '1') {
+        return { name: 'claude', available: true, version: 'mock (XEZ_DRY_RUN=1)' };
+    }
+    // `XEZ_CLAUDE_BIN` like every other claude call site (the runner, provider-auth,
+    // open-in-app). Probing a bare `claude` reported "not installed" for a host whose
+    // only install is at a custom path — which drops claude from the composer and the
+    // installer's dependency step even though runs would have worked fine.
+    const bin = process.env.XEZ_CLAUDE_BIN ?? 'claude';
+    try {
+        const { stdout } = await exec(bin, ['--version'], { timeout: 10_000 });
+        const version = stdout.trim();
+        // A generic `claude` binary (a shell wrapper, an unrelated tool) can shadow
+        // the real CLI on $PATH — reject anything that doesn't match the banner.
+        if (!/^\d+\.\d+|^claude(\s+code)?\s+version\s+\d+\.\d+/i.test(version)) {
+            return {
+                name: 'claude',
+                available: false,
+                hint: `\`${bin}\` resolves but doesn't look like Claude Code (got: ${version.slice(0, 80)})`,
+            };
+        }
+        return {
+            name: 'claude',
+            available: true,
+            version,
+            hint: 'if not authenticated, run `claude` once and log in',
+        };
+    }
+    catch {
+        return {
+            name: 'claude',
+            available: false,
+            hint: 'install Claude Code (npm i -g @anthropic-ai/claude-code) and log in',
+        };
+    }
+}
+async function probeCodex() {
+    const bin = process.env.XEZ_CODEX_BIN ?? 'codex';
+    try {
+        const { stdout } = await exec(bin, ['--version'], { timeout: 10_000 });
+        return {
+            name: 'codex',
+            available: true,
+            version: stdout.trim(),
+            hint: 'if not authenticated, run `codex` once and log in',
+        };
+    }
+    catch {
+        return {
+            name: 'codex',
+            available: false,
+            hint: 'optional: install the Codex CLI (npm i -g @openai/codex) and log in to use the Codex runner',
+        };
+    }
+}
+async function probeOpencode() {
+    const bin = process.env.XEZ_OPENCODE_BIN ?? 'opencode';
+    try {
+        const { stdout } = await exec(bin, ['--version'], { timeout: 10_000 });
+        return {
+            name: 'opencode',
+            available: true,
+            version: stdout.trim(),
+            hint: 'if no provider is configured, run `opencode` once to set one up',
+        };
+    }
+    catch {
+        return {
+            name: 'opencode',
+            available: false,
+            hint: 'optional: install OpenCode (https://opencode.ai) and configure a provider to use the OpenCode runner',
+        };
+    }
+}
+async function probePi() {
+    // Dry-run stands the runner up on the shared mock, so report it present.
+    if (process.env.XEZ_DRY_RUN === '1') {
+        return { name: 'pi', available: true, version: 'mock (XEZ_DRY_RUN=1)' };
+    }
+    const bin = process.env.XEZ_PI_BIN ?? 'pi';
+    try {
+        const { stdout } = await exec(bin, ['--version'], { timeout: 10_000 });
+        return {
+            name: 'pi',
+            available: true,
+            version: stdout.trim(),
+            hint: 'if not authenticated, run `pi` once and log in',
+        };
+    }
+    catch {
+        // A missing `pi` CLI is never a boot failure — the runner just isn't
+        // offered, exactly like an absent codex/opencode.
+        return {
+            name: 'pi',
+            available: false,
+            hint: 'optional: install the pi CLI and log in to use the pi runner',
+        };
+    }
+}
+async function probeGh() {
+    try {
+        const { stdout } = await exec('gh', ['auth', 'token'], { timeout: 10_000 });
+        return { name: 'gh', available: stdout.trim().length > 0, version: 'authenticated' };
+    }
+    catch {
+        return {
+            name: 'gh',
+            available: false,
+            hint: 'install the GitHub CLI and run `gh auth login` (only needed for PR creation)',
+        };
+    }
+}
+async function probeGit() {
+    try {
+        const { stdout } = await exec('git', ['--version'], { timeout: 10_000 });
+        return { name: 'git', available: true, version: stdout.trim() };
+    }
+    catch {
+        return { name: 'git', available: false, hint: 'install git' };
+    }
+}
+/** The host's GitHub token: logged-in `gh` first, `GITHUB_TOKEN` fallback. */
+export async function readHostGithubToken() {
+    try {
+        const { stdout } = await exec('gh', ['auth', 'token'], { timeout: 10_000 });
+        const token = stdout.trim();
+        if (token)
+            return token;
+    }
+    catch {
+        // fall through to the env var
+    }
+    return process.env.GITHUB_TOKEN?.trim() || null;
+}
+//# sourceMappingURL=backend-detect.js.map

package/dist/core/backend-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-detect.js","sourceRoot":"","sources":["../../src/core/backend-detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AASjC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,OAAO,OAAO,CAAC,GAAG,CAAC;QACjB,WAAW,EAAE;QACb,UAAU,EAAE;QACZ,aAAa,EAAE;QACf,OAAO,EAAE;QACT,OAAO,EAAE;QACT,QAAQ,EAAE;KACX,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC9E,CAAC;IACD,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,uEAAuE;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,4EAA4E;QAC5E,yEAAyE;QACzE,IAAI,CAAC,mDAAmD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,KAAK,GAAG,uDAAuD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;aAC7F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,IAAI;YACf,OAAO;YACP,IAAI,EAAE,oDAAoD;SAC3D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,qEAAqE;SAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACtB,IAAI,EAAE,mDAAmD;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,6FAA6F;SACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACtB,IAAI,EAAE,iEAAiE;SACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,sGAAsG;SAC7G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,yEAAyE;IACzE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO;YACL,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACtB,IAAI,EAAE,gDAAgD;SACvD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,kDAAkD;QAClD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,8DAA8D;SACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,8EAA8E;SACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAChE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAClD,CAAC"}

package/dist/core/claude-cli-runner.d.ts

@@ -0,0 +1,65 @@
+import type { AgentEvent, AgentRunResult, AgentRunSpec, AgentRunner, AgentSession, SessionOptions } from './agent-runner.ts';
+export type { AgentSession, SessionOptions } from './agent-runner.ts';
+/** Default wall-clock cap for a single run before SIGTERM → SIGKILL.
+ *  Interactive sessions pass `timeoutMs: 0` to disable it entirely. */
+export declare const DEFAULT_RUN_TIMEOUT_MS: number;
+/** Grace period between SIGTERM and SIGKILL when a timeout fires. */
+export declare const KILL_GRACE_MS = 10000;
+/** After `end()` closes stdin: claude in stream-json mode can ignore EOF and
+ *  hang (janitor-confirmed CLI bug) — escalate SIGTERM, then SIGKILL. */
+export declare const EOF_TERM_GRACE_MS = 8000;
+export declare const EOF_KILL_GRACE_MS = 4000;
+/** Reopen window after a turn ends before an auto-ended session closes stdin. */
+export declare const AUTO_END_DELAY_MS = 250;
+export interface ClaudeCliRunnerOptions {
+    /** Override the binary name/path; defaults to `claude` on PATH. */
+    bin?: string;
+    /** Wall-clock timeout for a run (ms); per-spec `timeoutMs` still wins. */
+    timeoutMs?: number;
+}
+/**
+ * The claude binary a spawn should use: an explicit override, else `XEZ_CLAUDE_BIN`, else the
+ * bundled mock under `XEZ_DRY_RUN`, else `claude` on PATH.
+ *
+ * Exported so model discovery (`claude-model-catalog.ts`) resolves the executable exactly the
+ * way execution does — the catalog and the runs it feeds cannot disagree about which CLI, and
+ * therefore which account and which model list, is authoritative.
+ */
+export declare function resolveClaudeExecutable(override?: string): string;
+/**
+ * `AgentRunner` over the Claude Code CLI in headless stream-json mode. Auth =
+ * the host's logged-in Pro/Max subscription (no API key needed). Sandboxing is
+ * `--allowedTools` (default-deny for anything not listed) + running inside the
+ * repo `cwd`; `Bash` is narrowed to `Bash(<prefix>:*)` patterns only when
+ * `bashAllowlist` is set — the zero-config default has no allowlist, so `Bash`
+ * is unrestricted shell access (#430).
+ *
+ * Session mechanics (multi-turn stdin, EOF watchdog, reopen window) follow
+ * github-janitor's `claudeRunner.ts`; the original single-turn adaptation
+ * came from @xezar/core's `ClaudeCodeCliRunner`.
+ */
+export declare class ClaudeCliRunner implements AgentRunner {
+    readonly backend: 'claude';
+    private readonly bin;
+    private readonly timeoutMs;
+    private lastSession;
+    constructor(opts?: ClaudeCliRunnerOptions);
+    /** One-shot run: start a session and auto-end it after the first turn. */
+    run(spec: AgentRunSpec, onEvent?: (event: AgentEvent) => void): Promise<AgentRunResult>;
+    interrupt(): Promise<void>;
+    startSession(spec: AgentRunSpec, onEvent?: (event: AgentEvent) => void, opts?: SessionOptions): AgentSession;
+}
+/**
+ * Build the headless argv. `--input-format stream-json` reads user messages
+ * from stdin; `--output-format stream-json --verbose` gives per-event NDJSON;
+ * `--permission-mode dontAsk` keeps headless runs non-interactive: tools in
+ * `--allowedTools` proceed and everything else is denied instead of prompting.
+ * `XEZ_APPROVAL_GATE=1` opts back into Claude's approval UI (#435).
+ */
+export declare function buildClaudeArgs(spec: AgentRunSpec, env?: NodeJS.ProcessEnv): string[];
+/**
+ * Map `allowedTools` onto claude's `--allowedTools` syntax. `Bash` with a
+ * `bashAllowlist` becomes one `Bash(<prefix>:*)` entry per allowed prefix;
+ * `Bash` with no allowlist stays plain `Bash`.
+ */
+export declare function buildAllowedTools(allowedTools: string[], bashAllowlist?: string[]): string[];