@spinabot/brigade 1.23.0 → 1.24.0

package/dist/agents/claude-cli/spawn.js

@@ -0,0 +1,179 @@
+// Subprocess plumbing for the claude-cli backend: spawn the `claude` binary,
+// stream its stdout as parsed NDJSON frames, and enforce a no-output watchdog
+// that hard-kills a wedged process. Kept separate from `stream.ts` so the
+// Pi-event mapping and the OS-process concerns test independently.
+import { spawn } from "node:child_process";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { buildClaudeCliEnv, resolveClaudeCliCommand } from "./catalog.js";
+import { hasBrigadeClaudeLogin, resolveBrigadeClaudeConfigDir } from "./claude-config.js";
+import { parseClaudeCliLine } from "./stream-json.js";
+/**
+ * No-output watchdog. The timer is reset on every stdout/stderr chunk, so a
+ * slow-but-streaming turn survives while a genuinely wedged process (waiting on
+ * an interactive prompt that can never arrive, or hung on the network) trips it
+ * and is SIGKILL'd. Fresh runs get a longer grace (CLI startup + auth); we have
+ * no resume path in v1 so a single profile suffices.
+ */
+export const CLAUDE_CLI_NO_OUTPUT_TIMEOUT_MS = 180_000;
+/** Hard ceiling on a single turn regardless of trickle output. */
+export const CLAUDE_CLI_OVERALL_TIMEOUT_MS = 600_000;
+/**
+ * Spawn `claude` with the given argv, feed `stdin`, and stream parsed frames.
+ * The isolated empty temp cwd contains the CLI's tool blast radius: even under
+ * `bypassPermissions` any file/read tool it reaches acts on a throwaway dir,
+ * never the operator's project. The dir is removed when the process exits.
+ */
+export function spawnClaudeCli(args) {
+    const command = resolveClaudeCliCommand();
+    const noOutputMs = args.noOutputTimeoutMs ?? CLAUDE_CLI_NO_OUTPUT_TIMEOUT_MS;
+    const overallMs = args.overallTimeoutMs ?? CLAUDE_CLI_OVERALL_TIMEOUT_MS;
+    const doSpawn = args.spawnFn ?? spawn;
+    // Isolated, empty working dir — the tool-containment boundary.
+    let cwd;
+    try {
+        cwd = mkdtempSync(path.join(tmpdir(), "brigade-claude-cli-"));
+    }
+    catch {
+        cwd = tmpdir();
+    }
+    // Prefer Brigade's OWN Claude login (dedicated grant in its managed config
+    // dir) when present — the binary auths + refreshes there, isolated from the
+    // operator's personal ~/.claude. Absent it, leave CLAUDE_CONFIG_DIR unset so
+    // the binary uses its default (the operator's own login).
+    const configDir = hasBrigadeClaudeLogin() ? resolveBrigadeClaudeConfigDir() : undefined;
+    const child = doSpawn(command, args.args, {
+        cwd,
+        env: buildClaudeCliEnv(process.env, { configDir }),
+        stdio: ["pipe", "pipe", "pipe"],
+        // No shell — argv is passed verbatim so nothing is word-split or expanded.
+        shell: false,
+    });
+    let killReason;
+    let settled = false;
+    let stderr = "";
+    const STDERR_CAP = 8_000;
+    // ── watchdog timers ──
+    let noOutputTimer;
+    let overallTimer;
+    const clearTimers = () => {
+        if (noOutputTimer)
+            clearTimeout(noOutputTimer);
+        if (overallTimer)
+            clearTimeout(overallTimer);
+        noOutputTimer = undefined;
+        overallTimer = undefined;
+    };
+    const kill = (reason) => {
+        if (settled || killReason)
+            return;
+        killReason = reason;
+        try {
+            child.kill("SIGKILL");
+        }
+        catch {
+            /* already gone */
+        }
+    };
+    const armNoOutput = () => {
+        if (noOutputTimer)
+            clearTimeout(noOutputTimer);
+        noOutputTimer = setTimeout(() => kill("no-output-timeout"), noOutputMs);
+        // Don't keep the event loop alive purely for the watchdog.
+        noOutputTimer.unref?.();
+    };
+    overallTimer = setTimeout(() => kill("overall-timeout"), overallMs);
+    overallTimer.unref?.();
+    armNoOutput();
+    const onAbort = () => kill("aborted");
+    if (args.signal) {
+        if (args.signal.aborted)
+            onAbort();
+        else
+            args.signal.addEventListener("abort", onAbort, { once: true });
+    }
+    // ── stderr capture (bounded) ──
+    child.stderr.setEncoding("utf8");
+    child.stderr.on("data", (chunk) => {
+        armNoOutput(); // stderr progress also counts as "alive"
+        if (stderr.length < STDERR_CAP)
+            stderr += chunk;
+    });
+    // ── stdout → line-buffered frame queue ──
+    // A small async queue bridges the 'data'/'close' events to the generator.
+    const queue = [];
+    let resolveNext;
+    let closed = false;
+    let buffer = "";
+    const pump = () => {
+        if (resolveNext) {
+            const r = resolveNext;
+            resolveNext = undefined;
+            r();
+        }
+    };
+    child.stdout.setEncoding("utf8");
+    child.stdout.on("data", (chunk) => {
+        armNoOutput();
+        buffer += chunk;
+        const lines = buffer.split("\n");
+        buffer = lines.pop() ?? "";
+        for (const line of lines) {
+            const frame = parseClaudeCliLine(line);
+            if (frame)
+                queue.push(frame);
+        }
+        pump();
+    });
+    const exit = new Promise((resolve) => {
+        const finish = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimers();
+            if (args.signal)
+                args.signal.removeEventListener("abort", onAbort);
+            // Flush a final unterminated line.
+            const tail = parseClaudeCliLine(buffer);
+            if (tail)
+                queue.push(tail);
+            buffer = "";
+            closed = true;
+            pump();
+            // Best-effort cleanup of the throwaway cwd.
+            try {
+                rmSync(cwd, { recursive: true, force: true });
+            }
+            catch {
+                /* leave it for the OS temp reaper */
+            }
+            resolve({ code, killReason, stderr });
+        };
+        child.on("close", (code) => finish(code));
+        child.on("error", () => finish(null)); // spawn failure (binary missing, etc.)
+    });
+    // Feed stdin, then close it so the CLI starts generating.
+    try {
+        child.stdin.write(args.stdin);
+        child.stdin.end();
+    }
+    catch {
+        /* the 'error' handler above will settle the run */
+    }
+    async function* frames() {
+        while (true) {
+            if (queue.length > 0) {
+                yield queue.shift();
+                continue;
+            }
+            if (closed)
+                return;
+            await new Promise((r) => {
+                resolveNext = r;
+            });
+        }
+    }
+    return { frames: frames(), done: exit };
+}
+//# sourceMappingURL=spawn.js.map

package/dist/agents/claude-cli/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../../src/agents/claude-cli/spawn.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,mEAAmE;AAEnE,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAuB,MAAM,kBAAkB,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAO,CAAC;AACvD,kEAAkE;AAClE,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC;AAuBrD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAwB;IACtD,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,IAAI,+BAA+B,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,IAAI,6BAA6B,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IAEtC,+DAA+D;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACR,GAAG,GAAG,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC,CAAC,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,KAAK,GAAmC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QACzE,GAAG;QACH,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC;QAClD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,2EAA2E;QAC3E,KAAK,EAAE,KAAK;KACZ,CAAmC,CAAC;IAErC,IAAI,UAAuC,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,UAAU,GAAG,KAAK,CAAC;IAEzB,wBAAwB;IACxB,IAAI,aAAyC,CAAC;IAC9C,IAAI,YAAwC,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,EAAE;QACxB,IAAI,aAAa;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,YAAY;YAAE,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,aAAa,GAAG,SAAS,CAAC;QAC1B,YAAY,GAAG,SAAS,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAuB,EAAE,EAAE;QACxC,IAAI,OAAO,IAAI,UAAU;YAAE,OAAO;QAClC,UAAU,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,kBAAkB;QACnB,CAAC;IACF,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,EAAE;QACxB,IAAI,aAAa;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;QAC/C,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,UAAU,CAAC,CAAC;QACxE,2DAA2D;QAC3D,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC;IACF,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAC;IACpE,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,WAAW,EAAE,CAAC;IAEd,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YAC9B,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,WAAW,EAAE,CAAC,CAAC,yCAAyC;QACxD,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,0EAA0E;IAC1E,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,WAAqC,CAAC;IAC1C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,MAAM,IAAI,GAAG,GAAG,EAAE;QACjB,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,WAAW,CAAC;YACtB,WAAW,GAAG,SAAS,CAAC;YACxB,CAAC,EAAE,CAAC;QACL,CAAC;IACF,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,WAAW,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,EAAE,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,OAAO,CACvB,CAAC,OAAO,EAAE,EAAE;QACX,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnE,mCAAmC;YACnC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,EAAE,CAAC;YACP,4CAA4C;YAC5C,IAAI,CAAC;gBACJ,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACR,qCAAqC;YACtC,CAAC;YACD,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uCAAuC;IAC/E,CAAC,CACD,CAAC;IAEF,0DAA0D;IAC1D,IAAI,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACR,mDAAmD;IACpD,CAAC;IAED,KAAK,SAAS,CAAC,CAAC,MAAM;QACrB,OAAO,IAAI,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC,KAAK,EAAG,CAAC;gBACrB,SAAS;YACV,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;gBAC7B,WAAW,GAAG,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC"}

package/dist/agents/claude-cli/stream-json.d.ts

@@ -0,0 +1,129 @@
+/** A raw Anthropic streaming SSE event, as wrapped in a `stream_event` frame. */
+export interface AnthropicStreamEvent {
+    type?: string;
+    message?: {
+        usage?: AnthropicUsage;
+        [k: string]: unknown;
+    };
+    index?: number;
+    content_block?: {
+        type?: "text" | "thinking" | "tool_use" | string;
+        id?: string;
+        name?: string;
+        input?: unknown;
+        [k: string]: unknown;
+    };
+    delta?: {
+        type?: "text_delta" | "thinking_delta" | "input_json_delta" | "signature_delta" | string;
+        text?: string;
+        thinking?: string;
+        partial_json?: string;
+        signature?: string;
+        stop_reason?: string | null;
+        [k: string]: unknown;
+    };
+    usage?: AnthropicUsage;
+}
+export interface AnthropicUsage {
+    input_tokens?: number;
+    output_tokens?: number;
+    cache_read_input_tokens?: number;
+    cache_creation_input_tokens?: number;
+    [k: string]: unknown;
+}
+/** A complete assistant message block (`type:"assistant"`). */
+export interface AssistantFrameMessage {
+    id?: string;
+    role?: string;
+    model?: string;
+    stop_reason?: string | null;
+    content?: Array<{
+        type?: "text" | "thinking" | "tool_use" | string;
+        text?: string;
+        thinking?: string;
+        signature?: string;
+        id?: string;
+        name?: string;
+        input?: unknown;
+        [k: string]: unknown;
+    }>;
+    usage?: AnthropicUsage;
+    [k: string]: unknown;
+}
+/** The terminal `type:"result"` frame. */
+export interface ResultFrame {
+    type: "result";
+    subtype?: string;
+    is_error?: boolean;
+    result?: string;
+    stop_reason?: string | null;
+    session_id?: string;
+    total_cost_usd?: number;
+    usage?: AnthropicUsage & {
+        service_tier?: string;
+    };
+    error?: string;
+    message?: string;
+    [k: string]: unknown;
+}
+/** Discriminated union of every frame `stream.ts` acts on. */
+export type ClaudeCliFrame = {
+    type: "system";
+    subtype?: string;
+    session_id?: string;
+    [k: string]: unknown;
+} | {
+    type: "stream_event";
+    event?: AnthropicStreamEvent;
+    session_id?: string;
+    [k: string]: unknown;
+} | {
+    type: "assistant";
+    message?: AssistantFrameMessage;
+    session_id?: string;
+    [k: string]: unknown;
+} | {
+    type: "rate_limit_event";
+    rate_limit_info?: RateLimitInfo;
+    [k: string]: unknown;
+} | ResultFrame | {
+    type: string;
+    [k: string]: unknown;
+};
+export interface RateLimitInfo {
+    status?: string;
+    resetsAt?: number;
+    rateLimitType?: string;
+    overageStatus?: string;
+    overageDisabledReason?: string;
+    isUsingOverage?: boolean;
+    [k: string]: unknown;
+}
+/**
+ * Parse a single stdout line into a typed frame, or `null` for a blank or
+ * unparseable line (never throws — a stray non-JSON diagnostic line must not
+ * abort the turn). The CLI occasionally prefixes debug text on stderr, but on
+ * stdout with `--output-format stream-json` every meaningful line is a JSON
+ * object; anything else is skipped.
+ */
+export declare function parseClaudeCliLine(line: string): ClaudeCliFrame | null;
+/** Extract the session id from any frame that carries one (system/result/stream). */
+export declare function frameSessionId(frame: ClaudeCliFrame): string | undefined;
+/**
+ * Classify the terminal `result` frame. Returns:
+ *   - "success"       — a normal completion.
+ *   - "limit"         — a plan-usage / overage rejection ("out of extra usage",
+ *                       usage-limit reached). Callers map this to the
+ *                       subscription_limit retry reason.
+ *   - "auth"          — the login is dead: expired/revoked token, needs re-auth.
+ *                       Callers surface a "re-run `brigade login claude-cli`" hint.
+ *   - "error"         — any other failure subtype.
+ * Pure — inspects subtype + is_error + any embedded message text.
+ */
+export declare function classifyResultFrame(frame: ResultFrame): "success" | "limit" | "auth" | "error";
+/** Sum an Anthropic usage block into {input,output} totals (cache folded into input). */
+export declare function foldUsage(usage: AnthropicUsage | undefined): {
+    input: number;
+    output: number;
+};
+//# sourceMappingURL=stream-json.d.ts.map

package/dist/agents/claude-cli/stream-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-json.d.ts","sourceRoot":"","sources":["../../../src/agents/claude-cli/stream-json.ts"],"names":[],"mappings":"AAsBA,iFAAiF;AACjF,MAAM,WAAW,oBAAoB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,cAAc,CAAC;QACvB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACrB,CAAC;IAEF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE;QACf,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;QACjD,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACrB,CAAC;IAEF,KAAK,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,YAAY,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,MAAM,CAAC;QACzF,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACrB,CAAC;IAEF,KAAK,CAAC,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,+DAA+D;AAC/D,MAAM,WAAW,qBAAqB;IACrC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,KAAK,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;QACjD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACrB,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,0CAA0C;AAC1C,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,cAAc,GAAG;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACjG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACjG;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,eAAe,CAAC,EAAE,aAAa,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACnF,WAAW,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAID;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAUtE;AAID,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAGxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAkB9F;AAED,yFAAyF;AACzF,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAO9F"}

package/dist/agents/claude-cli/stream-json.js

@@ -0,0 +1,84 @@
+// Wire types + a line parser for the Claude Code CLI's `--output-format
+// stream-json --include-partial-messages --verbose` protocol.
+//
+// The CLI emits one JSON object per line (NDJSON) on stdout. The frames we
+// care about, in the order a normal turn produces them:
+//
+//   {"type":"system","subtype":"init", ...}          — session bootstrap (carries session_id)
+//   {"type":"stream_event","event":{...}}            — a raw Anthropic SSE event (partial streaming)
+//   {"type":"assistant","message":{...}}             — a COMPLETE assistant message block
+//   {"type":"rate_limit_event","rate_limit_info":{}} — plan-window telemetry (informational)
+//   {"type":"result","subtype":"success"|"error_*",} — terminal frame (final text, usage, cost)
+//
+// The `stream_event.event` payloads are the SAME shapes the Anthropic
+// Messages streaming API emits (message_start / content_block_start /
+// content_block_delta / content_block_stop / message_delta / message_stop),
+// so the delta handling in `stream.ts` mirrors pi-ai's own anthropic
+// provider. When partial frames are unavailable we fall back to the whole
+// `assistant`/`result` message — the parser surfaces both so the consumer
+// can degrade gracefully.
+/* ─────────────────────────── line parser ─────────────────────────── */
+/**
+ * Parse a single stdout line into a typed frame, or `null` for a blank or
+ * unparseable line (never throws — a stray non-JSON diagnostic line must not
+ * abort the turn). The CLI occasionally prefixes debug text on stderr, but on
+ * stdout with `--output-format stream-json` every meaningful line is a JSON
+ * object; anything else is skipped.
+ */
+export function parseClaudeCliLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed[0] !== "{")
+        return null;
+    try {
+        const obj = JSON.parse(trimmed);
+        if (!obj || typeof obj !== "object" || typeof obj.type !== "string")
+            return null;
+        return obj;
+    }
+    catch {
+        return null;
+    }
+}
+/* ─────────────────────────── frame helpers ─────────────────────────── */
+/** Extract the session id from any frame that carries one (system/result/stream). */
+export function frameSessionId(frame) {
+    const sid = frame.session_id;
+    return typeof sid === "string" && sid.length > 0 ? sid : undefined;
+}
+/**
+ * Classify the terminal `result` frame. Returns:
+ *   - "success"       — a normal completion.
+ *   - "limit"         — a plan-usage / overage rejection ("out of extra usage",
+ *                       usage-limit reached). Callers map this to the
+ *                       subscription_limit retry reason.
+ *   - "auth"          — the login is dead: expired/revoked token, needs re-auth.
+ *                       Callers surface a "re-run `brigade login claude-cli`" hint.
+ *   - "error"         — any other failure subtype.
+ * Pure — inspects subtype + is_error + any embedded message text.
+ */
+export function classifyResultFrame(frame) {
+    const isError = frame.is_error === true || (frame.subtype ?? "").startsWith("error");
+    if (!isError && (frame.subtype === "success" || frame.subtype === undefined))
+        return "success";
+    const text = `${frame.subtype ?? ""} ${frame.error ?? ""} ${frame.message ?? ""} ${frame.result ?? ""}`;
+    if (/out of extra usage|usage limit|claude\.ai\/settings\/usage|limit will reset/i.test(text)) {
+        return "limit";
+    }
+    // Dead-login signals: the binary's own login has expired/been revoked and it
+    // can't refresh headlessly. Distinct from a usage limit — the fix is re-auth,
+    // not waiting for a reset.
+    if (/\b401\b|unauthori[sz]ed|authenticat(?:e|ion)|invalid[_ ]grant|token (?:expired|revoked|invalid)|refresh[_ ]token|(?:please )?(?:re-?)?login|not (?:logged|signed) in|run `?claude`? login|session (?:expired|invalid)/i.test(text)) {
+        return "auth";
+    }
+    return isError ? "error" : "success";
+}
+/** Sum an Anthropic usage block into {input,output} totals (cache folded into input). */
+export function foldUsage(usage) {
+    if (!usage)
+        return { input: 0, output: 0 };
+    const input = (usage.input_tokens ?? 0) +
+        (usage.cache_read_input_tokens ?? 0) +
+        (usage.cache_creation_input_tokens ?? 0);
+    return { input, output: usage.output_tokens ?? 0 };
+}
+//# sourceMappingURL=stream-json.js.map

package/dist/agents/claude-cli/stream-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-json.js","sourceRoot":"","sources":["../../../src/agents/claude-cli/stream-json.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8DAA8D;AAC9D,EAAE;AACF,2EAA2E;AAC3E,wDAAwD;AACxD,EAAE;AACF,8FAA8F;AAC9F,qGAAqG;AACrG,0FAA0F;AAC1F,6FAA6F;AAC7F,gGAAgG;AAChG,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,4EAA4E;AAC5E,qEAAqE;AACrE,0EAA0E;AAC1E,0EAA0E;AAC1E,0BAA0B;AAkG1B,yEAAyE;AAEzE;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,GAAG,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,2EAA2E;AAE3E,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,KAAqB;IACnD,MAAM,GAAG,GAAI,KAAkC,CAAC,UAAU,CAAC;IAC3D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IACxG,IAAI,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/F,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,2BAA2B;IAC3B,IACC,wNAAwN,CAAC,IAAI,CAC5N,IAAI,CACJ,EACA,CAAC;QACF,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,SAAS,CAAC,KAAiC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC3C,MAAM,KAAK,GACV,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;QACzB,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,CAAC;QACpC,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;AACpD,CAAC"}

package/dist/agents/claude-cli/stream.d.ts

@@ -0,0 +1,27 @@
+import type { StreamFn } from "@earendil-works/pi-agent-core";
+import { type SpawnClaudeCliArgs } from "./spawn.js";
+interface CtxMessage {
+    role: string;
+    content: unknown;
+    toolName?: unknown;
+}
+/**
+ * Serialize the conversation into a single stdin prompt. The current (final)
+ * user message is the live request; everything before it is rendered as a
+ * labelled transcript so the CLI has the multi-turn context Brigade would
+ * otherwise pass as a messages array. The system prompt travels separately via
+ * `--append-system-prompt`, so it's not duplicated here.
+ */
+export declare function serializeConversationPrompt(messages: CtxMessage[]): string;
+export interface CreateClaudeCliStreamFnOpts {
+    /** Injectable spawn for tests. */
+    spawnFn?: SpawnClaudeCliArgs["spawnFn"];
+}
+/**
+ * Build the Pi `StreamFn` for claude-cli models. Reads `model`, `context`
+ * (systemPrompt + messages), and `options` (signal), spawns the CLI, and fills
+ * the returned event stream from the parsed frames.
+ */
+export declare function createClaudeCliStreamFn(opts?: CreateClaudeCliStreamFnOpts): StreamFn;
+export {};
+//# sourceMappingURL=stream.d.ts.map

package/dist/agents/claude-cli/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/agents/claude-cli/stream.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAG9D,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAWrE,UAAU,UAAU;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAqBD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,CA2B1E;AA8DD,MAAM,WAAW,2BAA2B;IAC3C,kCAAkC;IAClC,OAAO,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,2BAAgC,GAAG,QAAQ,CAiPxF"}