@spinabot/brigade 1.22.1 → 1.24.0

package/dist/agents/claude-cli/catalog.js

@@ -0,0 +1,260 @@
+// Constants + pure builders for the `claude-cli` inference backend — the
+// transport that drives an installed Claude Code binary (`claude`) as a
+// provider so a turn bills against the operator's Claude subscription exactly
+// like the Claude Code CLI / IDE extension, instead of Brigade's raw-HTTP
+// OAuth path (which Anthropic routes into the "extra usage" overage tier).
+//
+// The argv/env construction, model catalog, and alias map are pure. The only
+// side-effecting helper is the bundled-binary resolver (a cached fs read).
+import { createRequire } from "node:module";
+import fs from "node:fs";
+import path from "node:path";
+/** The Pi `api` string + provider id + model-ref prefix for this backend. */
+export const CLAUDE_CLI_API = "claude-cli";
+export const CLAUDE_CLI_PROVIDER = "claude-cli";
+/**
+ * Resolve the `claude` binary to spawn. Precedence:
+ *   1. `BRIGADE_CLAUDE_CLI_PATH` env override (explicit operator choice).
+*   2. The binary BUNDLED with Brigade — `@anthropic-ai/claude-code` is a
+ *      DIRECT dependency, so every `npm i` of Brigade installs it and we resolve
+ *      its own `bin` entry. This makes the backend work with zero separate
+ *      install ("everything automated").
+ *   3. `claude` on PATH (a global Claude Code install) — a defensive fallback
+ *      for the rare case the dependency's binary isn't resolvable on this host.
+ */
+export function resolveClaudeCliCommand() {
+    const override = process.env.BRIGADE_CLAUDE_CLI_PATH?.trim();
+    if (override && override.length > 0)
+        return override;
+    const bundled = resolveBundledClaudeBinary();
+    if (bundled)
+        return bundled;
+    return "claude";
+}
+let bundledClaudeCache;
+// The vendor tarball ships a ~500-byte PLACEHOLDER at `bin/claude.exe` (a stub
+// that just prints "native binary not installed" and exits 1); the real native
+// binary is hardlinked over it by the package's `postinstall` from a
+// platform-specific optional dependency. In a degraded install
+// (`--ignore-scripts`, `--omit=optional`, or an unsupported platform) the stub
+// is left in place. `existsSync` can't tell the stub from the real binary, so
+// we ALSO gate on size — the vendor's own installer uses `size < 4096` as its
+// stub sentinel, so we mirror it. Below the threshold ⇒ treat as "not bundled"
+// and fall through to `claude` on PATH instead of spawning a broken stub.
+const CLAUDE_BUNDLED_MIN_SIZE_BYTES = 4096;
+/**
+ * Resolve the `claude` binary shipped by the `@anthropic-ai/claude-code`
+ * dependency, or undefined when it isn't installed OR is only the placeholder
+ * stub. Reads the package's own `bin` field so we spawn whatever entry the
+ * vendor declares (a native `claude.exe` on Windows, a launcher elsewhere).
+ * Cached; never throws.
+ */
+export function resolveBundledClaudeBinary() {
+    if (bundledClaudeCache !== undefined)
+        return bundledClaudeCache ?? undefined;
+    try {
+        const require = createRequire(import.meta.url);
+        const pkgJsonPath = require.resolve("@anthropic-ai/claude-code/package.json");
+        const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, "utf8"));
+        const binRel = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.claude;
+        if (binRel) {
+            const binPath = path.join(path.dirname(pkgJsonPath), binRel);
+            // Reject the placeholder stub — a real native binary is far larger, so a
+            // tiny file means postinstall never replaced it (degraded install).
+            const size = fs.statSync(binPath).size; // throws if missing → caught below
+            if (size >= CLAUDE_BUNDLED_MIN_SIZE_BYTES) {
+                bundledClaudeCache = binPath;
+                return binPath;
+            }
+        }
+    }
+    catch {
+        /* dep not installed / stub missing / unreadable — fall through to PATH */
+    }
+    bundledClaudeCache = null;
+    return undefined;
+}
+/** Test-only reset for the bundled-binary cache. */
+export function __resetBundledClaudeCache() {
+    bundledClaudeCache = undefined;
+}
+export const CLAUDE_CLI_MODELS = [
+    { id: "claude-opus-4-8", name: "Claude Opus 4.8 (subscription)", cliModel: "claude-opus-4-8", reasoning: true, contextWindow: 200_000, maxTokens: 32_000 },
+    { id: "claude-opus-4-7", name: "Claude Opus 4.7 (subscription)", cliModel: "claude-opus-4-7", reasoning: true, contextWindow: 200_000, maxTokens: 32_000 },
+    { id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6 (subscription)", cliModel: "claude-sonnet-4-6", reasoning: true, contextWindow: 200_000, maxTokens: 64_000 },
+    { id: "claude-sonnet-4-5", name: "Claude Sonnet 4.5 (subscription)", cliModel: "claude-sonnet-4-5", reasoning: true, contextWindow: 200_000, maxTokens: 64_000 },
+    { id: "claude-haiku-4-5", name: "Claude Haiku 4.5 (subscription)", cliModel: "claude-haiku-4-5", reasoning: false, contextWindow: 200_000, maxTokens: 32_000 },
+];
+/** Default model ref when the operator picks the backend without naming a model. */
+export const CLAUDE_CLI_DEFAULT_MODEL = "claude-sonnet-4-6";
+// Sentinel credential seeded for the claude-cli provider so Pi's auth
+// resolution treats a claude-cli turn as "authed" and dispatches to the
+// transport instead of throwing "No API key for provider: claude-cli". It is
+// NEVER a secret and NEVER goes on the wire — the spawned binary authenticates
+// with its OWN stored login. Mirrors the local-Ollama sentinel-key pattern.
+export const CLAUDE_CLI_SENTINEL_KEY = "claude-cli-subscription-login-no-key-required";
+// Bare-family + legacy aliases → the value passed to `--model`. Only consulted
+// when the requested id isn't already a known snapshot; a full id passes through
+// unchanged (the CLI resolves the concrete snapshot itself).
+const CLAUDE_CLI_MODEL_ALIASES = {
+    opus: "opus",
+    sonnet: "sonnet",
+    haiku: "haiku",
+    "claude-opus": "opus",
+    "claude-sonnet": "sonnet",
+    "claude-haiku": "haiku",
+};
+/** Drop a leading `claude-cli/` provider prefix from a model id. */
+export function stripClaudeCliPrefix(modelId) {
+    const trimmed = (modelId ?? "").trim();
+    return trimmed.startsWith(`${CLAUDE_CLI_PROVIDER}/`)
+        ? trimmed.slice(CLAUDE_CLI_PROVIDER.length + 1)
+        : trimmed;
+}
+/**
+ * Resolve the `--model` value for a requested Brigade model id. A catalogued
+ * snapshot or any full `claude-*` id is sent verbatim; a bare family
+ * ("opus"/"sonnet"/"haiku") maps through the alias table; anything else falls
+ * back to the default so a turn never spawns with an empty `--model`.
+ */
+export function resolveCliModelArg(modelId) {
+    const id = stripClaudeCliPrefix(modelId).toLowerCase();
+    if (!id)
+        return CLAUDE_CLI_DEFAULT_MODEL;
+    const known = CLAUDE_CLI_MODELS.find((m) => m.id.toLowerCase() === id);
+    if (known)
+        return known.cliModel;
+    if (CLAUDE_CLI_MODEL_ALIASES[id])
+        return CLAUDE_CLI_MODEL_ALIASES[id];
+    // A full snapshot id we don't catalogue (a newer release) — trust the CLI.
+    if (id.startsWith("claude-"))
+        return stripClaudeCliPrefix(modelId).trim();
+    return CLAUDE_CLI_DEFAULT_MODEL;
+}
+/* ─────────────────────────── env scrubbing ─────────────────────────── */
+// Env vars that must be REMOVED before spawning `claude`. Claude Code honours
+// provider-routing / auth / config-root env BEFORE consulting its own stored
+// login, so an inherited shell override could steer the managed run to a
+// different provider, endpoint, token, config tree, or telemetry mode — and,
+// worst of all, into a metered tier. We pass NO token: the binary uses its own
+// login. Ported from the reference backend's clear list (brand tokens scrubbed).
+export const CLAUDE_CLI_CLEAR_ENV = [
+    // Token / credential redirects — force a different identity than the login.
+    "ANTHROPIC_API_KEY",
+    "ANTHROPIC_API_KEY_OLD",
+    "ANTHROPIC_API_TOKEN",
+    "ANTHROPIC_AUTH_TOKEN",
+    "ANTHROPIC_OAUTH_TOKEN",
+    "CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR",
+    "CLAUDE_CODE_OAUTH_REFRESH_TOKEN",
+    "CLAUDE_CODE_OAUTH_SCOPES",
+    "CLAUDE_CODE_OAUTH_TOKEN",
+    "CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR",
+    // Endpoint / provider routing — send traffic off the subscription.
+    "ANTHROPIC_BASE_URL",
+    "ANTHROPIC_CUSTOM_HEADERS",
+    "ANTHROPIC_UNIX_SOCKET",
+    "CLAUDE_CODE_REMOTE",
+    "CLAUDE_CODE_USE_BEDROCK",
+    "CLAUDE_CODE_USE_FOUNDRY",
+    "CLAUDE_CODE_USE_VERTEX",
+    // Config / plugin tree — load a foreign config root or plugin cache.
+    "CLAUDE_CODE_ENTRYPOINT",
+    "CLAUDE_CODE_PLUGIN_CACHE_DIR",
+    "CLAUDE_CODE_PLUGIN_SEED_DIR",
+    "CLAUDE_CODE_USE_COWORK_PLUGINS",
+    "CLAUDE_CONFIG_DIR",
+    // Telemetry / OTEL bootstrap — alter/exfiltrate telemetry mode.
+    "OTEL_EXPORTER_OTLP_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_HEADERS",
+    "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_LOGS_HEADERS",
+    "OTEL_EXPORTER_OTLP_LOGS_PROTOCOL",
+    "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_METRICS_HEADERS",
+    "OTEL_EXPORTER_OTLP_METRICS_PROTOCOL",
+    "OTEL_EXPORTER_OTLP_PROTOCOL",
+    "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_TRACES_HEADERS",
+    "OTEL_EXPORTER_OTLP_TRACES_PROTOCOL",
+    "OTEL_LOGS_EXPORTER",
+    "OTEL_METRICS_EXPORTER",
+    "OTEL_SDK_DISABLED",
+    "OTEL_TRACES_EXPORTER",
+];
+// Marker that must NEVER be set on the child — unlike the clear list it can't be
+// preserved by any escape hatch. It routes the run into Anthropic's separate
+// host-managed usage tier instead of normal CLI subscription behaviour (i.e. it
+// is one path to the very "extra usage" billing we're avoiding).
+export const CLAUDE_CLI_FORBIDDEN_ENV = "CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST";
+/**
+ * Build the scrubbed environment for the child `claude` process from a base
+ * env (usually `process.env`). Deletes every clear-list var + the forbidden
+ * host-managed marker. Pure: returns a new object, never mutates the input.
+ *
+ * `configDir` (optional) is Brigade's OWN managed Claude config dir — when
+ * Brigade minted its own subscription grant, we point `CLAUDE_CONFIG_DIR` at it
+ * so the binary authenticates + refreshes from Brigade's dedicated login
+ * instead of the operator's personal `~/.claude` (no split-brain). The scrub
+ * still runs first (an INHERITED CLAUDE_CONFIG_DIR is removed), then Brigade's
+ * own value is set deliberately — the two never conflict.
+ */
+export function buildClaudeCliEnv(baseEnv = process.env, opts = {}) {
+    const next = { ...baseEnv };
+    for (const key of CLAUDE_CLI_CLEAR_ENV)
+        delete next[key];
+    delete next[CLAUDE_CLI_FORBIDDEN_ENV];
+    if (opts.configDir && opts.configDir.trim().length > 0) {
+        next.CLAUDE_CONFIG_DIR = opts.configDir;
+    }
+    return next;
+}
+/* ─────────────────────────── argv construction ─────────────────────────── */
+// Base flags for every fresh (non-resume) turn. `-p` = headless print mode;
+// stream-json + partial messages give us token-level deltas; `--verbose` is
+// required for stream-json to emit the per-event frames; `--setting-sources
+// user` keeps the run on the user's own login/config and off any project
+// `.claude` tree; `bypassPermissions` stops the CLI blocking on an approval
+// prompt we can't answer headlessly.
+const CLAUDE_CLI_BASE_ARGS = [
+    "-p",
+    "--output-format",
+    "stream-json",
+    "--include-partial-messages",
+    "--verbose",
+    "--setting-sources",
+    "user",
+    "--permission-mode",
+    "bypassPermissions",
+];
+// Mutating + network tools we deny as defense-in-depth. `bypassPermissions`
+// (kept so the CLI never blocks on an unanswerable approval prompt) overrides
+// the allow/deny lists for read-only tools, so a deny list can't make the CLI
+// perfectly tool-free — but it still keeps the strongest footguns (shell,
+// file writes, edits, network) off the table. The real containment is the
+// isolated empty spawn cwd (see spawn.ts): any tool the CLI does reach acts on
+// a throwaway directory, so a conversational turn stays harmless. The system-
+// prompt nudge (appended below) asks it to just answer.
+const CLAUDE_CLI_DENY_TOOLS = "Bash Edit Write MultiEdit NotebookEdit WebFetch WebSearch";
+// Appended to Brigade's system prompt for claude-cli turns: this backend is a
+// conversational voice, not an autonomous coder in the (throwaway) spawn cwd.
+const CLAUDE_CLI_SYSTEM_SUFFIX = "You are answering as part of an ongoing conversation. Respond directly in prose; " +
+    "do not use tools or act on the local filesystem — everything you need is in this conversation.";
+/**
+ * Assemble the full argv (excluding the leading command) for a fresh turn.
+ * Order: base flags → `--model <m>` → tool policy → `--append-system-prompt`.
+ * The prompt itself is delivered on STDIN (never argv), so it never appears in
+ * a process listing and has no length limit.
+ */
+export function buildClaudeCliArgs(input) {
+    const args = [...CLAUDE_CLI_BASE_ARGS];
+    args.push("--model", resolveCliModelArg(input.modelId));
+    const conversational = input.conversational !== false;
+    if (conversational)
+        args.push("--disallowedTools", CLAUDE_CLI_DENY_TOOLS);
+    const sysParts = [input.systemPrompt?.trim(), conversational ? CLAUDE_CLI_SYSTEM_SUFFIX : ""].filter((p) => !!p && p.length > 0);
+    if (sysParts.length > 0)
+        args.push("--append-system-prompt", sysParts.join("\n\n"));
+    return args;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/agents/claude-cli/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/agents/claude-cli/catalog.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAE3E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,IAAI,kBAA6C,CAAC;AAElD,+EAA+E;AAC/E,+EAA+E;AAC/E,qEAAqE;AACrE,+DAA+D;AAC/D,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B;IACzC,IAAI,kBAAkB,KAAK,SAAS;QAAE,OAAO,kBAAkB,IAAI,SAAS,CAAC;IAC7E,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAA8C,CAAC;QAC1G,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC;QACvE,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7D,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,mCAAmC;YAC3E,IAAI,IAAI,IAAI,6BAA6B,EAAE,CAAC;gBAC3C,kBAAkB,GAAG,OAAO,CAAC;gBAC7B,OAAO,OAAO,CAAC;YAChB,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,0EAA0E;IAC3E,CAAC;IACD,kBAAkB,GAAG,IAAI,CAAC;IAC1B,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,yBAAyB;IACxC,kBAAkB,GAAG,SAAS,CAAC;AAChC,CAAC;AAoBD,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC9D,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,gCAAgC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;IAC1J,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,gCAAgC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;IAC1J,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;IAChK,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;IAChK,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;CACrJ,CAAC;AAEX,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAE5D,sEAAsE;AACtE,wEAAwE;AACxE,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAEvF,+EAA+E;AAC/E,iFAAiF;AACjF,6DAA6D;AAC7D,MAAM,wBAAwB,GAAqC;IAClE,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,OAAO;CACvB,CAAC;AAEF,oEAAoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,mBAAmB,GAAG,CAAC;QACnD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,OAAO,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IACjD,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,EAAE;QAAE,OAAO,wBAAwB,CAAC;IACzC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IACjC,IAAI,wBAAwB,CAAC,EAAE,CAAC;QAAE,OAAO,wBAAwB,CAAC,EAAE,CAAE,CAAC;IACvE,2EAA2E;IAC3E,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,OAAO,wBAAwB,CAAC;AACjC,CAAC;AAED,2EAA2E;AAE3E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACtD,4EAA4E;IAC5E,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,uBAAuB;IACvB,qCAAqC;IACrC,iCAAiC;IACjC,0BAA0B;IAC1B,yBAAyB;IACzB,yCAAyC;IACzC,mEAAmE;IACnE,oBAAoB;IACpB,0BAA0B;IAC1B,uBAAuB;IACvB,oBAAoB;IACpB,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,qEAAqE;IACrE,wBAAwB;IACxB,8BAA8B;IAC9B,6BAA6B;IAC7B,gCAAgC;IAChC,mBAAmB;IACnB,gEAAgE;IAChE,6BAA6B;IAC7B,4BAA4B;IAC5B,kCAAkC;IAClC,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,oCAAoC;IACpC,qCAAqC;IACrC,6BAA6B;IAC7B,oCAAoC;IACpC,mCAAmC;IACnC,oCAAoC;IACpC,oBAAoB;IACpB,uBAAuB;IACvB,mBAAmB;IACnB,sBAAsB;CACtB,CAAC;AAEF,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAChC,UAA6B,OAAO,CAAC,GAAG,EACxC,OAA+B,EAAE;IAEjC,MAAM,IAAI,GAAsB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,oBAAoB;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,qCAAqC;AACrC,MAAM,oBAAoB,GAAsB;IAC/C,IAAI;IACJ,iBAAiB;IACjB,aAAa;IACb,4BAA4B;IAC5B,WAAW;IACX,mBAAmB;IACnB,MAAM;IACN,mBAAmB;IACnB,mBAAmB;CACnB,CAAC;AAEF,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,wDAAwD;AACxD,MAAM,qBAAqB,GAAG,2DAA2D,CAAC;AAE1F,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,wBAAwB,GAC7B,mFAAmF;IACnF,gGAAgG,CAAC;AAelG;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAqB;IACvD,MAAM,IAAI,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC;IACtD,IAAI,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CACnG,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CACvC,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/agents/claude-cli/claude-config.d.ts

@@ -0,0 +1,38 @@
+/** The dedicated config dir: `<stateDir>/claude-config`. Overridable for tests. */
+export declare function resolveBrigadeClaudeConfigDir(): string;
+/** The Claude Code on-disk credential shape (`~/.claude/.credentials.json`). */
+export interface ClaudeCodeCredentialFile {
+    claudeAiOauth: {
+        accessToken: string;
+        refreshToken: string;
+        /** Absolute epoch-ms. */
+        expiresAt: number;
+        scopes?: string[];
+        subscriptionType?: string;
+    };
+}
+/** The scopes pi-ai's Anthropic OAuth requests — the Claude Code set. Written to
+ *  the credential so the binary's own scope checks are satisfied. */
+export declare const CLAUDE_CODE_OAUTH_SCOPES: string[];
+/**
+ * Persist an OAuth credential (minted by Brigade's browser login) into the
+ * Brigade-managed Claude config dir, in Claude Code's own on-disk shape. Atomic
+ * (tmp + rename) and mode 0600 on POSIX. The binary reads + refreshes it from
+ * here on. Returns the dir written to.
+ */
+export declare function writeBrigadeClaudeCredential(cred: {
+    access: string;
+    refresh: string;
+    /** Absolute epoch-ms. Coerced to a near-future default when absent so the
+     *  binary refreshes promptly rather than treating it as non-expiring. */
+    expires?: number;
+    scopes?: string[];
+    subscriptionType?: string;
+}): string;
+/** Whether Brigade holds its own Claude login in the managed dir. */
+export declare function hasBrigadeClaudeLogin(): boolean;
+/** Read the managed credential (for doctor / status), or null. Never throws. */
+export declare function readBrigadeClaudeCredential(): ClaudeCodeCredentialFile["claudeAiOauth"] | null;
+/** Remove the managed login (for a `logout` / re-auth flow). Best-effort. */
+export declare function clearBrigadeClaudeLogin(): void;
+//# sourceMappingURL=claude-config.d.ts.map

package/dist/agents/claude-cli/claude-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-config.d.ts","sourceRoot":"","sources":["../../../src/agents/claude-cli/claude-config.ts"],"names":[],"mappings":"AA0BA,mFAAmF;AACnF,wBAAgB,6BAA6B,IAAI,MAAM,CAItD;AAMD,gFAAgF;AAChF,MAAM,WAAW,wBAAwB;IACxC,aAAa,EAAE;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,yBAAyB;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACF;AAED;qEACqE;AACrE,eAAO,MAAM,wBAAwB,UAMpC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB;6EACyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,CA2BT;AAED,qEAAqE;AACrE,wBAAgB,qBAAqB,IAAI,OAAO,CAQ/C;AAED,gFAAgF;AAChF,wBAAgB,2BAA2B,IAAI,wBAAwB,CAAC,eAAe,CAAC,GAAG,IAAI,CAU9F;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,IAAI,IAAI,CAM9C"}

package/dist/agents/claude-cli/claude-config.js

@@ -0,0 +1,111 @@
+// Brigade-managed Claude Code config directory.
+//
+// The claude-cli backend spawns the `claude` binary, which authenticates from a
+// config dir (default `~/.claude`). Rather than depend on — and risk racing —
+// the operator's PERSONAL Claude Code login, Brigade can mint its OWN Claude
+// subscription grant (via the browser OAuth it already drives) and store it in a
+// DEDICATED config dir under `~/.brigade`. The backend then spawns `claude` with
+// `CLAUDE_CONFIG_DIR` pointed there, so:
+//   • the binary authenticates from Brigade's own credential,
+//   • the binary refreshes that credential autonomously in-place (no Brigade
+//     refresh logic, no rotated-token split-brain with the user's `~/.claude`),
+//   • the operator never touches a terminal or pastes a token.
+//
+// A Brigade-written `.credentials.json` in this dir IS accepted by the binary —
+// verified live: `CLAUDE_CONFIG_DIR=<dir> claude -p` authenticates from it.
+//
+// Precedence at spawn time (see catalog.buildClaudeCliEnv): if this managed dir
+// holds a credential, use it; otherwise fall back to the binary's default
+// (`~/.claude`) so an operator who already ran `claude` keeps working unchanged.
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { resolveStateDir } from "../../config/paths.js";
+/** The dedicated config dir: `<stateDir>/claude-config`. Overridable for tests. */
+export function resolveBrigadeClaudeConfigDir() {
+    const override = process.env.BRIGADE_CLAUDE_CONFIG_DIR?.trim();
+    if (override)
+        return override;
+    return path.join(resolveStateDir(), "claude-config");
+}
+function credentialPath() {
+    return path.join(resolveBrigadeClaudeConfigDir(), ".credentials.json");
+}
+/** The scopes pi-ai's Anthropic OAuth requests — the Claude Code set. Written to
+ *  the credential so the binary's own scope checks are satisfied. */
+export const CLAUDE_CODE_OAUTH_SCOPES = [
+    "user:inference",
+    "user:profile",
+    "user:sessions:claude_code",
+    "user:mcp_servers",
+    "user:file_upload",
+];
+/**
+ * Persist an OAuth credential (minted by Brigade's browser login) into the
+ * Brigade-managed Claude config dir, in Claude Code's own on-disk shape. Atomic
+ * (tmp + rename) and mode 0600 on POSIX. The binary reads + refreshes it from
+ * here on. Returns the dir written to.
+ */
+export function writeBrigadeClaudeCredential(cred) {
+    const dir = resolveBrigadeClaudeConfigDir();
+    fs.mkdirSync(dir, { recursive: true });
+    const file = {
+        claudeAiOauth: {
+            accessToken: cred.access,
+            refreshToken: cred.refresh,
+            expiresAt: typeof cred.expires === "number" && Number.isFinite(cred.expires)
+                ? cred.expires
+                : Date.now() + 60 * 60 * 1000,
+            scopes: cred.scopes ?? CLAUDE_CODE_OAUTH_SCOPES,
+            ...(cred.subscriptionType ? { subscriptionType: cred.subscriptionType } : {}),
+        },
+    };
+    const target = credentialPath();
+    const tmp = `${target}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify(file, null, 2), { mode: 0o600 });
+    if (os.platform() !== "win32") {
+        try {
+            fs.chmodSync(tmp, 0o600);
+        }
+        catch {
+            /* fs may not support chmod */
+        }
+    }
+    fs.renameSync(tmp, target);
+    return dir;
+}
+/** Whether Brigade holds its own Claude login in the managed dir. */
+export function hasBrigadeClaudeLogin() {
+    try {
+        const raw = fs.readFileSync(credentialPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        return typeof parsed?.claudeAiOauth?.accessToken === "string" && parsed.claudeAiOauth.accessToken.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/** Read the managed credential (for doctor / status), or null. Never throws. */
+export function readBrigadeClaudeCredential() {
+    try {
+        const raw = fs.readFileSync(credentialPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        const oauth = parsed?.claudeAiOauth;
+        if (oauth && typeof oauth.accessToken === "string" && oauth.accessToken.length > 0)
+            return oauth;
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Remove the managed login (for a `logout` / re-auth flow). Best-effort. */
+export function clearBrigadeClaudeLogin() {
+    try {
+        fs.rmSync(credentialPath(), { force: true });
+    }
+    catch {
+        /* nothing to remove */
+    }
+}
+//# sourceMappingURL=claude-config.js.map

package/dist/agents/claude-cli/claude-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-config.js","sourceRoot":"","sources":["../../../src/agents/claude-cli/claude-config.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,iFAAiF;AACjF,iFAAiF;AACjF,yCAAyC;AACzC,8DAA8D;AAC9D,6EAA6E;AAC7E,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,EAAE;AACF,gFAAgF;AAChF,0EAA0E;AAC1E,iFAAiF;AAEjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,mFAAmF;AACnF,MAAM,UAAU,6BAA6B;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,cAAc;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,mBAAmB,CAAC,CAAC;AACxE,CAAC;AAcD;qEACqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,gBAAgB;IAChB,cAAc;IACd,2BAA2B;IAC3B,kBAAkB;IAClB,kBAAkB;CAClB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAQ5C;IACA,MAAM,GAAG,GAAG,6BAA6B,EAAE,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAA6B;QACtC,aAAa,EAAE;YACd,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,SAAS,EACR,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;gBAChE,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,wBAAwB;YAC/C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E;KACD,CAAC;IACF,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,GAAG,MAAM,MAAM,CAAC;IAC5B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC;YACJ,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,qBAAqB;IACpC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsC,CAAC;QACpE,OAAO,OAAO,MAAM,EAAE,aAAa,EAAE,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,2BAA2B;IAC1C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,EAAE,aAAa,CAAC;QACpC,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjG,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB;IACtC,IAAI,CAAC;QACJ,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,uBAAuB;IACxB,CAAC;AACF,CAAC"}

package/dist/agents/claude-cli/register.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Idempotently register the claude-cli transport for `api: "claude-cli"`.
+ * Guards on the LIVE registry (`getApiProvider`) rather than a sticky flag, so
+ * it self-heals after Pi's `resetApiProviders()` (fired by `ModelRegistry
+ * .refresh()`, `AgentSession.reload()`, and register/unregisterProvider). Safe
+ * to call at boot, per turn, and before any isolated claude-cli session.
+ * Returns true when it actually registered (was absent), false when already up.
+ */
+export declare function ensureClaudeCliApiRegistered(): boolean;
+/** Loose Pi `Model` shape — we synthesize rather than construct from a class. */
+export type SynthClaudeCliModel = Record<string, unknown> & {
+    provider: string;
+    id: string;
+    api: string;
+};
+/**
+ * Synthesize a Pi `Model` for a `claude-cli` model id. A catalogued snapshot
+ * uses its declared metadata; an unknown id (a newer release the operator
+ * names explicitly) synthesizes a sensible default so a turn is never blocked
+ * on "model not registered" — the CLI validates the concrete id at spawn time.
+ * Cost is zero (a subscription turn draws no per-token charge).
+ */
+export declare function synthClaudeCliModel(modelId: string): SynthClaudeCliModel;
+/** True when a provider id routes to the claude-cli backend. */
+export declare function isClaudeCliProvider(provider: string | undefined): boolean;
+/**
+ * The catalogued claude-cli models as Pi `Model` objects, for merging into the
+ * gateway's `/model` list so the backend is selectable. Callers should gate on
+ * `isClaudeCliAvailable()` first — advertise it only when the binary exists.
+ */
+export declare function listClaudeCliModels(): SynthClaudeCliModel[];
+//# sourceMappingURL=register.d.ts.map

package/dist/agents/claude-cli/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../src/agents/claude-cli/register.ts"],"names":[],"mappings":"AAoBA;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,IAAI,OAAO,CAetD;AAED,iFAAiF;AACjF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACZ,CAAC;AAIF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAexE;AAED,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,mBAAmB,EAAE,CAE3D"}

package/dist/agents/claude-cli/register.js

@@ -0,0 +1,68 @@
+// Register the claude-cli transport into Pi's API-provider registry so a model
+// with `api: "claude-cli"` dispatches to the subprocess stream fn — exactly
+// like the native Ollama transport (`ollama-native/register.ts`). Also exposes
+// a synthesizer that resolves a `claude-cli/<model>` ref to a Pi `Model`
+// object (no models.json write needed; the never-miss resolver calls it).
+import { getApiProvider, registerApiProvider } from "@earendil-works/pi-ai";
+import { CLAUDE_CLI_API, CLAUDE_CLI_DEFAULT_MODEL, CLAUDE_CLI_MODELS, CLAUDE_CLI_PROVIDER, stripClaudeCliPrefix, } from "./catalog.js";
+import { createClaudeCliStreamFn } from "./stream.js";
+const REGISTRY_SOURCE_ID = "brigade-claude-cli";
+/**
+ * Idempotently register the claude-cli transport for `api: "claude-cli"`.
+ * Guards on the LIVE registry (`getApiProvider`) rather than a sticky flag, so
+ * it self-heals after Pi's `resetApiProviders()` (fired by `ModelRegistry
+ * .refresh()`, `AgentSession.reload()`, and register/unregisterProvider). Safe
+ * to call at boot, per turn, and before any isolated claude-cli session.
+ * Returns true when it actually registered (was absent), false when already up.
+ */
+export function ensureClaudeCliApiRegistered() {
+    if (getApiProvider(CLAUDE_CLI_API))
+        return false;
+    const streamFn = createClaudeCliStreamFn();
+    registerApiProvider({
+        api: CLAUDE_CLI_API,
+        // One transport serves both surfaces (the CLI has no separate simple-
+        // completion path). Cast: the registry's generic stream types are
+        // stricter than our loose StreamFn.
+        stream: streamFn,
+        streamSimple: streamFn,
+    }, REGISTRY_SOURCE_ID);
+    return true;
+}
+const ZERO_COST = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
+/**
+ * Synthesize a Pi `Model` for a `claude-cli` model id. A catalogued snapshot
+ * uses its declared metadata; an unknown id (a newer release the operator
+ * names explicitly) synthesizes a sensible default so a turn is never blocked
+ * on "model not registered" — the CLI validates the concrete id at spawn time.
+ * Cost is zero (a subscription turn draws no per-token charge).
+ */
+export function synthClaudeCliModel(modelId) {
+    const id = stripClaudeCliPrefix(modelId) || CLAUDE_CLI_DEFAULT_MODEL;
+    const known = CLAUDE_CLI_MODELS.find((m) => m.id.toLowerCase() === id.toLowerCase());
+    return {
+        provider: CLAUDE_CLI_PROVIDER,
+        id,
+        name: known?.name ?? `${id} (subscription)`,
+        api: CLAUDE_CLI_API,
+        // No baseUrl — the transport is a subprocess, not an HTTP endpoint.
+        reasoning: known?.reasoning ?? /opus|sonnet/i.test(id),
+        input: ["text"],
+        cost: { ...ZERO_COST },
+        contextWindow: known?.contextWindow ?? 200_000,
+        maxTokens: known?.maxTokens ?? 32_000,
+    };
+}
+/** True when a provider id routes to the claude-cli backend. */
+export function isClaudeCliProvider(provider) {
+    return (provider ?? "").trim().toLowerCase() === CLAUDE_CLI_PROVIDER;
+}
+/**
+ * The catalogued claude-cli models as Pi `Model` objects, for merging into the
+ * gateway's `/model` list so the backend is selectable. Callers should gate on
+ * `isClaudeCliAvailable()` first — advertise it only when the binary exists.
+ */
+export function listClaudeCliModels() {
+    return CLAUDE_CLI_MODELS.map((m) => synthClaudeCliModel(m.id));
+}
+//# sourceMappingURL=register.js.map

package/dist/agents/claude-cli/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/agents/claude-cli/register.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,yEAAyE;AACzE,0EAA0E;AAE1E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5E,OAAO,EACN,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B;IAC3C,IAAI,cAAc,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,QAAQ,GAAa,uBAAuB,EAAE,CAAC;IACrD,mBAAmB,CAClB;QACC,GAAG,EAAE,cAAc;QACnB,sEAAsE;QACtE,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,EAAE,QAAiB;QACzB,YAAY,EAAE,QAAiB;KAC/B,EACD,kBAAkB,CAClB,CAAC;IACF,OAAO,IAAI,CAAC;AACb,CAAC;AASD,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAW,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAClD,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC;IACrE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,OAAO;QACN,QAAQ,EAAE,mBAAmB;QAC7B,EAAE;QACF,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE,iBAAiB;QAC3C,GAAG,EAAE,cAAc;QACnB,oEAAoE;QACpE,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,KAAK,EAAE,CAAC,MAAM,CAAyB;QACvC,IAAI,EAAE,EAAE,GAAG,SAAS,EAAE;QACtB,aAAa,EAAE,KAAK,EAAE,aAAa,IAAI,OAAO;QAC9C,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM;KACrC,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,QAA4B;IAC/D,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/agents/claude-cli/spawn.d.ts

@@ -0,0 +1,42 @@
+import { spawn } from "node:child_process";
+import { type ClaudeCliFrame } from "./stream-json.js";
+/**
+ * No-output watchdog. The timer is reset on every stdout/stderr chunk, so a
+ * slow-but-streaming turn survives while a genuinely wedged process (waiting on
+ * an interactive prompt that can never arrive, or hung on the network) trips it
+ * and is SIGKILL'd. Fresh runs get a longer grace (CLI startup + auth); we have
+ * no resume path in v1 so a single profile suffices.
+ */
+export declare const CLAUDE_CLI_NO_OUTPUT_TIMEOUT_MS = 180000;
+/** Hard ceiling on a single turn regardless of trickle output. */
+export declare const CLAUDE_CLI_OVERALL_TIMEOUT_MS = 600000;
+export interface SpawnClaudeCliArgs {
+    args: string[];
+    /** Prompt delivered on stdin (the whole serialized conversation). */
+    stdin: string;
+    /** External cancel (turn abort). Aborting SIGKILLs the child. */
+    signal?: AbortSignal;
+    noOutputTimeoutMs?: number;
+    overallTimeoutMs?: number;
+    /** Injectable spawn for tests. Defaults to node:child_process spawn. */
+    spawnFn?: typeof spawn;
+}
+export type SpawnKillReason = "no-output-timeout" | "overall-timeout" | "aborted";
+export interface ClaudeCliRunHandle {
+    /** Async iterator of parsed stdout frames (blank/garbage lines skipped). */
+    frames: AsyncGenerator<ClaudeCliFrame>;
+    /** Resolves once the process exits: its code, and any kill reason we forced. */
+    done: Promise<{
+        code: number | null;
+        killReason?: SpawnKillReason;
+        stderr: string;
+    }>;
+}
+/**
+ * Spawn `claude` with the given argv, feed `stdin`, and stream parsed frames.
+ * The isolated empty temp cwd contains the CLI's tool blast radius: even under
+ * `bypassPermissions` any file/read tool it reaches acts on a throwaway dir,
+ * never the operator's project. The dir is removed when the process exits.
+ */
+export declare function spawnClaudeCli(args: SpawnClaudeCliArgs): ClaudeCliRunHandle;
+//# sourceMappingURL=spawn.d.ts.map

package/dist/agents/claude-cli/spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../../src/agents/claude-cli/spawn.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAOhF,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE3E;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,SAAU,CAAC;AACvD,kEAAkE;AAClE,eAAO,MAAM,6BAA6B,SAAU,CAAC;AAErD,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACvB;AAED,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,kBAAkB;IAClC,4EAA4E;IAC5E,MAAM,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IACvC,gFAAgF;IAChF,IAAI,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAqJ3E"}