@sagentlab/navarch-runtime 0.1.3 → 0.1.5

package/dist/adapters/claude.cjs

@@ -4,6 +4,17 @@ exports.claudeCodeAdapter = void 0;
 exports.runClaudeCodeAdapter = runClaudeCodeAdapter;
 const node_child_process_1 = require("node:child_process");
 const exit_conditions_cjs_1 = require("../exit-conditions.cjs");
+const NAVARCH_MCP_ALLOWED_TOOLS = [
+    "mcp__navarch__task_comment",
+    "mcp__navarch__record_decision",
+    "mcp__navarch__request_approval",
+    "mcp__navarch__register_resource",
+    "mcp__navarch__create_task",
+    "mcp__navarch__list_triage_tasks",
+    "mcp__navarch__groom_triage_task",
+    "mcp__navarch__defer_triage_task",
+    "mcp__navarch__file_pr_review",
+];
 /**
  * Headless Claude Code adapter (project-plan.md §3.9 / implementation-plan.md
  * WP-07): `claude -p "<context bundle>" --mcp-config platform-mcp.json
@@ -28,6 +39,14 @@ async function runClaudeCodeAdapter(options) {
     const args = ["-p", options.prompt];
     if (options.mcpConfigPath) {
         args.push("--mcp-config", options.mcpConfigPath);
+        // Headless Claude cannot pause for an interactive permission prompt. The
+        // Navarch server already scopes every call to the authenticated lease and
+        // enforces task/project authorization, so pre-approve exactly its known
+        // tools instead of bypassing Claude permissions globally.
+        if (!options.extraArgs.includes("--allowedTools") &&
+            !options.extraArgs.includes("--allowed-tools")) {
+            args.push("--allowedTools", NAVARCH_MCP_ALLOWED_TOOLS.join(","));
+        }
     }
     // Only append the default when the caller hasn't already asked for a
     // specific --output-format (extraArgs wins so an operator can opt back
@@ -70,6 +89,11 @@ async function runOnHost(options, args) {
             cwd: options.cwd,
             env: { ...process.env, ...options.env },
         });
+        // `claude -p` checks stdin for an additional piped prompt. Node opens a
+        // pipe by default, so close it immediately when the complete prompt was
+        // supplied as an argument. Leaving it open makes Claude wait and emit a
+        // "no stdin data received" warning that the runtime treats as failure.
+        child.stdin?.end();
         const timer = setTimeout(() => {
             timedOut = true;
             child.kill("SIGKILL");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Navarch machine-side session manager: registers a machine, claims tasks from the control-plane dispatcher, runs them via the Claude Code or Codex adapter, and reports results back.",
   "type": "commonjs",
   "license": "MIT",