@subshell-ai/plugin-claude-code 1.0.0 → 2.0.0

package/LICENSE

@@ -0,0 +1,203 @@
+Copyright 2026 Disaresta, LLC
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-//#region ../../plugin-api/dist/types-CzNsDcbd.d.ts
+//#region ../../plugin-api/dist/types-B_wiApwK.d.ts
 //#region src/types.d.ts
 /**
  * The contract a Subshell plugin implements.
@@ -27,9 +27,9 @@ type PluginType = "agent-harness" | "terminal";
  * branches on {@link PluginType}.
  */
 type PluginCapability = "mcp" | "resume" | "attention" | "settings";
-/** A harness profile as defined by the user (decoded JSON blobs). */
-interface ProfileDefinition {
-  /** Human-friendly profile name */
+/** A harness preset as defined by the user (decoded JSON blobs). */
+interface PresetDefinition {
+  /** Human-friendly preset name */
   name: string;
   /** Optional longer description */
   description?: string | null;
@@ -39,21 +39,21 @@ interface ProfileDefinition {
   flags: string[];
   /** Settings blob passed to the harness (e.g. claude --settings JSON) */
   settings: Record<string, unknown> | null;
-  /** If true, only this profile's config sources apply (isolation) */
+  /** If true, only this preset's config sources apply (isolation) */
   configIsolation: boolean;
-  /** If true, new subshells from this profile auto-restart on exit */
+  /** If true, new subshells from this preset auto-restart on exit */
   restartOnExit?: boolean;
 }
-/** Snapshot of a single field-level validation error on a profile. */
-interface ProfileValidationIssue {
+/** Snapshot of a single field-level validation error on a preset. */
+interface PresetValidationIssue {
   /** Field name (e.g. "name", "env", "settings") */
   field: string;
   /** Human-readable problem description */
   message: string;
 }
-interface ProfileValidationResult {
+interface PresetValidationResult {
   valid: boolean;
-  issues: ProfileValidationIssue[];
+  issues: PresetValidationIssue[];
 }
 /** Everything a plugin needs to build a launch command. */
 interface BuildCommandInput {
@@ -61,8 +61,8 @@ interface BuildCommandInput {
   binary: string;
   /** Working directory the harness runs in */
   cwd: string;
-  /** The validated profile being used */
-  profile: ProfileDefinition;
+  /** The validated preset being used */
+  preset: PresetDefinition;
   /** Subshell display name ("" = let the harness pick a default) */
   subshellName: string;
   /** Any additional CLI flags from route/request context */
@@ -88,6 +88,39 @@ interface BuildCommandInput {
     id: string;
     mode: "start" | "resume";
   };
+  /**
+   * How a harness hook re-enters the subshell binary on the PANE's machine, as
+   * the host resolved it for that machine: `{ command, args }` with the
+   * reporting subcommand already appended, so a plugin adds only its own verb
+   * words. Splice it into whatever hook mechanism the harness has.
+   *
+   * A hook runs where the pane runs, and the only program guaranteed to exist
+   * there is the binary that launched the pane — which is why this arrives
+   * from the host rather than being a command a plugin writes for itself. The
+   * hooks here were once `bun -e '<inlined JS>'`, and every machine without a
+   * bun on its PATH (i.e. most of them) opened its harness on
+   * `bun: command not found`.
+   *
+   * Undefined means the host could not resolve one. OMIT the hooks then: a
+   * command the pane cannot run costs the same signal and adds an error to
+   * every session.
+   */
+  reporter?: ReporterSpec;
+}
+/**
+ * A command prefix that re-enters the subshell binary on a pane's machine,
+ * ready for a plugin's own verb words to be appended.
+ *
+ * Shaped like {@link McpLaunchSpec} and resolved from the same host question
+ * ("am I a compiled binary, or is `bun` running my entry script?"), but kept
+ * separate because they carry different subcommands and the MCP one is
+ * operator-overridable while this one is not.
+ */
+interface ReporterSpec {
+  /** Executable to run (the binary itself, or the interpreter running it). */
+  command: string;
+  /** Everything before the plugin's verb words (any entry script, then the subcommand). */
+  args: string[];
 }
 /**
  * Restart-resume, implemented only by plugins that can continue a previous
@@ -136,12 +169,12 @@ interface McpRegistration {
   args?: string[];
   /**
    * Extra pane env the harness needs to discover the file (e.g. OPENCODE_CONFIG).
-   * Consumed by the HOST, which bakes it into the pane env ahead of profile env;
+   * Consumed by the HOST, which bakes it into the pane env ahead of preset env;
    * plugins never read it back.
    */
   env?: Record<string, string>;
 }
-/** One copy-paste line shown in the profile editor for manual-setup harnesses. */
+/** One copy-paste line shown in the preset editor for manual-setup harnesses. */
 interface McpSetupStep {
   /** What the user should do, and where the text goes */
   label: string;
@@ -226,8 +259,8 @@ interface PluginHost {
 interface SubshellPlugin {
   /** Builds the argv (no shell) used to launch a subshell. */
   buildCommand(input: BuildCommandInput): string[];
-  /** Validates a profile definition before saving. */
-  validateProfile(profile: ProfileDefinition): ProfileValidationResult;
+  /** Validates a preset definition before saving. */
+  validatePreset(preset: PresetDefinition): PresetValidationResult;
   /** Which optional members below are meaningful on this plugin. */
   capabilities(): PluginCapability[];
   /** Maps a harness exit code to a human label (null = unknown). */
@@ -259,14 +292,14 @@ interface SubshellPlugin {
   mcpRegistration?(launch: McpLaunchSpec, configPath: string): McpRegistration;
   /** How users obtain the subshell MCP tools here. Declare the `mcp` capability with it. */
   mcpSetup?(launch: McpLaunchSpec): McpSetupInfo;
-  /** Settings rendered in the PROFILE editor and stored on the profile. */
-  profileSettings?(): SettingsField[];
-  /** Known extra env var suggestions for the profile editor. */
+  /** Settings rendered in the PRESET editor and stored on the preset. */
+  presetSettings?(): SettingsField[];
+  /** Known extra env var suggestions for the preset editor. */
   suggestedEnv?(): {
     key: string;
     description: string;
   }[];
-  /** Known CLI flag suggestions for the profile editor. */
+  /** Known CLI flag suggestions for the preset editor. */
   suggestedFlags?(): {
     flag: string;
     description: string;
@@ -304,7 +337,11 @@ interface SubshellManifest {
   name: string;
   /** One-line description shown in the UI */
   description: string;
-  /** Optional emoji/glyph */
+  /**
+   * Relative path to this plugin's icon file, e.g. `icon.svg`. Served by
+   * the control plane at `/api/plugins/<id>/icon`; absent means the UI
+   * renders a monogram instead.
+   */
   icon?: string;
   /** Module to import, relative to the package directory */
   entry: string;
@@ -328,34 +365,13 @@ interface SubshellManifest {
 declare const manifest: SubshellManifest;
 //#endregion
 //#region src/index.d.ts
-/** The `--settings` hooks object injected into every Claude Code launch. */
-declare const ATTENTION_HOOKS: {
-  readonly Stop: readonly [{
-    readonly hooks: readonly [{
-      readonly type: "command";
-      readonly command: string;
-    }];
-  }];
-  readonly Notification: readonly [{
-    readonly hooks: readonly [{
-      readonly type: "command";
-      readonly command: string;
-    }];
-  }];
-  readonly SessionStart: readonly [{
-    readonly hooks: readonly [{
-      readonly type: "command";
-      readonly command: string;
-    }];
-  }];
-};
 /**
  * Built-in harness: Claude Code.
  *
  * Launch shape:
- *   claude --settings <json> --name <subshell> [profile flags] [extra flags]
+ *   claude --settings <json> --name <subshell> [preset flags] [extra flags]
  * Settings are passed as a JSON string via `--settings` (per-invocation, so
- * profile config never needs to write into the user's real ~/.claude).
+ * preset config never needs to write into the user's real ~/.claude).
  *
  * Identity, detection and install guidance live in this package's
  * package.json `subshell` block, NOT here: the host reads them without
@@ -368,4 +384,4 @@ declare const ATTENTION_HOOKS: {
  */
 declare const createPlugin: PluginFactory;
 //#endregion
-export { ATTENTION_HOOKS, createPlugin as default, manifest };
+export { createPlugin as default, manifest };

package/dist/index.js

@@ -1,5 +1,5 @@
 import { join, resolve } from "node:path";
-//#region ../../plugin-api/dist/manifest-UFScnYqn.js
+//#region ../../plugin-api/dist/manifest-Czd9ea1g.js
 /** Every {@link PluginType}, for anything that has to iterate or validate them. */
 const PLUGIN_TYPES = ["agent-harness", "terminal"];
 /**
@@ -10,6 +10,17 @@ const PLUGIN_TYPES = ["agent-harness", "terminal"];
 */
 const MCP_SERVER_NAME = "subshell";
 /**
+* Image formats a plugin icon may be. The server maps these to a Content-Type
+* from a fixed table rather than sniffing the file, so this list and that
+* table are one decision: adding a format here without adding it there leaves
+* an icon that parses and then 500s when something asks for it.
+*/
+const ICON_EXTENSIONS = [
+	".svg",
+	".png",
+	".webp"
+];
+/**
 * Ids become directory names under `<dataDir>/plugins/`, so they are path
 * segments and nothing else: no separators, no traversal, no surprises from a
 * case-insensitive filesystem.
@@ -32,13 +43,18 @@ function parseManifest(pkgJson) {
 	const block = pkgJson.subshell;
 	if (!isRecord(block)) return { error: "package.json has no `subshell` block, so it is not a Subshell plugin" };
 	if (typeof block.apiVersion !== "number" || !Number.isInteger(block.apiVersion)) return { error: "`subshell.apiVersion` must be an integer" };
-	if (block.apiVersion < 1) return { error: `this plugin declares plugin-api ${block.apiVersion}, which is not a version; the lowest is 1 and this host implements 1` };
-	if (block.apiVersion > 1) return { error: `this plugin needs plugin-api ${block.apiVersion}, but this host implements 1; upgrade the agent` };
+	if (block.apiVersion < 1) return { error: `this plugin declares plugin-api ${block.apiVersion}, which is not a version; the lowest is 1 and this host implements 2` };
+	if (block.apiVersion > 2) return { error: `this plugin needs plugin-api ${block.apiVersion}, but this host implements 2; upgrade the agent` };
 	if (typeof block.id !== "string" || !ID_RE.test(block.id)) return { error: "`subshell.id` must be lowercase letters, digits and hyphens, starting alphanumeric (it becomes a directory name)" };
 	if (typeof block.type !== "string" || !PLUGIN_TYPES.includes(block.type)) return { error: `\`subshell.type\` must be one of: ${PLUGIN_TYPES.join(", ")}` };
 	if (typeof block.name !== "string" || block.name.trim() === "") return { error: "`subshell.name` must be a non-empty string" };
 	if (typeof block.description !== "string") return { error: "`subshell.description` must be a string" };
-	if (block.icon !== void 0 && typeof block.icon !== "string") return { error: "`subshell.icon` must be a string" };
+	if (block.icon !== void 0) {
+		if (typeof block.icon !== "string" || block.icon.trim() === "") return { error: "`subshell.icon` must be a non-empty relative path to an image in the package" };
+		if (block.icon.startsWith("/") || block.icon.split("/").includes("..")) return { error: "`subshell.icon` must stay inside the package (no leading `/` and no `..` segment)" };
+		const icon = block.icon;
+		if (!ICON_EXTENSIONS.some((ext) => icon.endsWith(ext))) return { error: `\`subshell.icon\` must end in one of: ${ICON_EXTENSIONS.join(", ")}` };
+	}
 	if (typeof block.entry !== "string" || block.entry.trim() === "") return { error: "`subshell.entry` must be a non-empty relative path" };
 	if (block.entry.startsWith("/") || block.entry.split("/").includes("..")) return { error: "`subshell.entry` must stay inside the package (no leading `/` and no `..` segment)" };
 	let detect;
@@ -81,23 +97,23 @@ function parseManifest(pkgJson) {
 //#endregion
 //#region ../../plugin-api/dist/index.js
 /**
-* The profile checks every built-in harness performs unchanged: a non-empty
+* The preset checks every built-in harness performs unchanged: a non-empty
 * name, string env values, and flags that look like flags. Harnesses with
 * extra rules run their own checks on top of these.
-* @param profile - The decoded profile definition to check
+* @param preset - The decoded preset definition to check
 * @returns Issues per field; `valid` is true when no issues were found
 */
-function validateGenericProfile(profile) {
+function validateGenericPreset(preset) {
 	const issues = [];
-	if (!profile.name || profile.name.trim().length === 0) issues.push({
+	if (!preset.name || preset.name.trim().length === 0) issues.push({
 		field: "name",
-		message: "Profile name is required."
+		message: "Preset name is required."
 	});
-	for (const [key, value] of Object.entries(profile.env)) if (typeof value !== "string") issues.push({
+	for (const [key, value] of Object.entries(preset.env)) if (typeof value !== "string") issues.push({
 		field: "env",
 		message: `Env var "${key}" must be a string.`
 	});
-	for (const flag of profile.flags) if (!flag.startsWith("-")) issues.push({
+	for (const flag of preset.flags) if (!flag.startsWith("-")) issues.push({
 		field: "flags",
 		message: `Flag "${flag}" must start with "-".`
 	});
@@ -119,7 +135,7 @@ function validateGenericProfile(profile) {
 const parsed = parseManifest({
 	name: "@subshell-ai/plugin-claude-code",
 	description: "Claude Code harness plugin for Subshell",
-	version: "1.0.0",
+	version: "2.0.0",
 	license: "Apache-2.0",
 	type: "module",
 	main: "dist/index.js",
@@ -128,6 +144,13 @@ const parsed = parseManifest({
 		"import": "./dist/index.js"
 	} },
 	types: "dist/index.d.ts",
+	homepage: "https://subshell.sh",
+	repository: {
+		"type": "git",
+		"url": "git+https://github.com/subshell-ai/subshell.git",
+		"directory": "packages/plugins/claude-code"
+	},
+	bugs: { "url": "https://github.com/subshell-ai/subshell/issues" },
 	scripts: {
 		"build": "tsdown",
 		"build:dev": "hash-runner",
@@ -146,15 +169,15 @@ const parsed = parseManifest({
 		"tsdown": "0.22.14",
 		"typescript": "7.0.2"
 	},
-	files: ["dist"],
+	files: ["dist", "icon.svg"],
 	publishConfig: { "access": "public" },
 	subshell: {
-		"apiVersion": 1,
+		"apiVersion": 2,
 		"id": "claude-code",
 		"type": "agent-harness",
 		"name": "Claude Code",
 		"description": "Anthropic's agentic coding assistant (interactive CLI)",
-		"icon": "🤖",
+		"icon": "icon.svg",
 		"entry": "dist/index.js",
 		"detect": {
 			"binaryName": "claude",
@@ -345,53 +368,56 @@ const SUGGESTED_FLAGS = [
 	}
 ];
 /**
-* Fire-and-forget attention reporting. Each hook runs `bun -e` (bun is on the
-* pane PATH — the image ships it, and no curl exists there) and POSTs the
-* subshell's own bearer to the attention endpoint; the server gates delivery
-* on the subshell's bell and derives the "waiting for you" state. The env
-* vars are baked into the pane by the backend (`subshellMcpEnv`), and every
-* failure path is swallowed: a missing hook event costs one notification,
-* never a broken subshell turn. SUBSHELL_BASE_URL must be reachable from inside
-* the pane's network — in the container that means the published port, which
-* compose already passes via APP_BASE_URL.
+* One hook command line: the host-resolved reporter, then this hook's verb
+* words, every element POSIX-quoted.
+*
+* A hook runs on the PANE's machine, so the command has to name something that
+* exists there. It used to be `bun -e '<inlined JS>'` — bun was on the pane
+* PATH because the container image shipped it, and no curl was there to use
+* instead. That assumption did not survive leaving the container: on a desktop
+* install the machine has the subshell binary and nothing else, and Claude Code
+* opened every session with `/bin/sh: bun: command not found` while
+* notifications and conversation identity silently never worked.
+*
+* So the reporting moved INTO the binary (`<self> report …`), and what the
+* plugin composes is an argv rather than a program. Bounds, credentials and
+* which fields travel are that subcommand's contract now, which is also why
+* this function no longer needs to know the pane env exists.
 */
-const attentionPing = (kind) => `bun -e 'fetch(process.env.SUBSHELL_BASE_URL+"/api/subshells/"+process.env.SUBSHELL_ID+"/attention",{method:"POST",headers:{authorization:"Bearer "+process.env.SUBSHELL_API_KEY,"content-type":"application/json"},body:JSON.stringify({kind:${JSON.stringify(kind)}}),signal:AbortSignal.timeout(5000)}).catch(()=>{}).finally(()=>process.exit(0))'`;
+const reporterHook = (host, reporter, ...verb) => [
+	reporter.command,
+	...reporter.args,
+	...verb
+].map((word) => host.shellQuote(word)).join(" ");
 /**
-* Conversation-identity reporting. The restart-resume pin (`--session-id`
-* at launch) only survives while the pane keeps that ONE conversation — but
-* /clear, /resume <other>, and /fork start a DIFFERENT transcript id in-pane
-* and nothing else tells the server, so the next restart would resurrect a
-* stale conversation (observed 2026-09-03). The SessionStart hook fires on
-* every such transition (source: startup|resume|clear|compact|fork).
-*
-* Unlike the attention pings, THIS command reads stdin — the deliberate,
-* documented exception to the no-stdin rule (whose rationale is that
-* Stop/Notification payloads carry conversation text): the SessionStart
-* payload is pure metadata ({session_id, transcript_path, cwd, source,…})
-* and ONLY `session_id` is forwarded; the response is fire-and-forget like
-* the pings — every failure path is swallowed.
+* The `--settings` hooks object for one launch.
 *
-* Both awaits are bounded: a self-kill timer caps the WHOLE hook (4 s — an
-* unclosed stdin must never stall the pane start, and a SessionStart hook
-* blocks the harness until it exits) and a 2 s fetch timeout caps the POST
-* (a lost report is harmless — the next transition re-reports).
+* - `Stop` / `Notification` — fire-and-forget attention reporting. The server
+*   gates delivery on the subshell's bell and derives the "waiting for you"
+*   state; a missed event costs one notification, never a broken turn.
+* - `SessionStart` — conversation identity. The restart-resume pin
+*   (`--session-id` at launch) only survives while the pane keeps that ONE
+*   conversation, but /clear, /resume <other> and /fork start a DIFFERENT
+*   transcript id in-pane and nothing else tells the server, so the next
+*   restart would resurrect a stale conversation (observed 2026-09-03). This
+*   fires on every such transition (source: startup|resume|clear|compact|fork)
+*   and is the one hook that reads stdin — the reporter forwards `session_id`
+*   from that payload and nothing else.
 */
-const sessionReportPing = () => "bun -e 'setTimeout(()=>process.exit(0),4000);try{const j=JSON.parse(await Bun.stdin.text());if(j.session_id)await fetch(process.env.SUBSHELL_BASE_URL+\"/api/subshells/\"+process.env.SUBSHELL_ID+\"/harness-session\",{method:\"POST\",headers:{authorization:\"Bearer \"+process.env.SUBSHELL_API_KEY,\"content-type\":\"application/json\"},body:JSON.stringify({sessionId:j.session_id}),signal:AbortSignal.timeout(2000)})}catch{}process.exit(0)'";
-/** The `--settings` hooks object injected into every Claude Code launch. */
-const ATTENTION_HOOKS = {
+const attentionHooks = (host, reporter) => ({
 	Stop: [{ hooks: [{
 		type: "command",
-		command: attentionPing("turn_complete")
+		command: reporterHook(host, reporter, "attention", "turn_complete")
 	}] }],
 	Notification: [{ hooks: [{
 		type: "command",
-		command: attentionPing("needs_attention")
+		command: reporterHook(host, reporter, "attention", "needs_attention")
 	}] }],
 	SessionStart: [{ hooks: [{
 		type: "command",
-		command: sessionReportPing()
+		command: reporterHook(host, reporter, "session")
 	}] }]
-};
+});
 /** Claude's transcript folder name for a project dir: every non-alphanumeric → `-`. */
 function projectSlug(cwd) {
 	return cwd.replace(/[^a-zA-Z0-9]/g, "-");
@@ -400,9 +426,9 @@ function projectSlug(cwd) {
 * Built-in harness: Claude Code.
 *
 * Launch shape:
-*   claude --settings <json> --name <subshell> [profile flags] [extra flags]
+*   claude --settings <json> --name <subshell> [preset flags] [extra flags]
 * Settings are passed as a JSON string via `--settings` (per-invocation, so
-* profile config never needs to write into the user's real ~/.claude).
+* preset config never needs to write into the user's real ~/.claude).
 *
 * Identity, detection and install guidance live in this package's
 * package.json `subshell` block, NOT here: the host reads them without
@@ -413,7 +439,7 @@ function projectSlug(cwd) {
 * version probe, shell quoting, a namespaced logger). See
 * `@subshell-ai/plugin-api`.
 */
-const createPlugin = (_host) => ({
+const createPlugin = (host) => ({
 	capabilities: () => [
 		"mcp",
 		"resume",
@@ -446,17 +472,16 @@ const createPlugin = (_host) => ({
 		}
 	},
 	buildCommand(input) {
-		const { binary, profile, subshellName, extraFlags, mcp, harnessSession } = input;
+		const { binary, preset, subshellName, extraFlags, mcp, harnessSession, reporter } = input;
 		const args = [binary];
 		if (mcp?.args) args.push(...mcp.args);
 		if (harnessSession) args.push(harnessSession.mode === "resume" ? "--resume" : "--session-id", harnessSession.id);
-		const settings = {
-			...profile.settings ?? {},
-			hooks: ATTENTION_HOOKS
-		};
-		args.push("--settings", JSON.stringify(settings));
+		const settings = { ...preset.settings ?? {} };
+		if (reporter) settings.hooks = attentionHooks(host, reporter);
+		else host.log.warn("no reporter resolved for this launch: attention and conversation-identity hooks are omitted");
+		if (Object.keys(settings).length > 0) args.push("--settings", JSON.stringify(settings));
 		if (subshellName) args.push("--name", subshellName);
-		for (const flag of profile.flags) args.push(flag);
+		for (const flag of preset.flags) args.push(flag);
 		if (extraFlags) args.push(...extraFlags);
 		return args;
 	},
@@ -477,10 +502,10 @@ const createPlugin = (_host) => ({
 			summary: "Subshell registers itself with every Claude Code subshell automatically (via --mcp-config)."
 		};
 	},
-	validateProfile(profile) {
-		return validateGenericProfile(profile);
+	validatePreset(preset) {
+		return validateGenericPreset(preset);
 	},
-	profileSettings() {
+	presetSettings() {
 		return CLAUDE_SETTINGS_FIELDS;
 	},
 	suggestedEnv() {
@@ -499,4 +524,4 @@ const createPlugin = (_host) => ({
 	}
 });
 //#endregion
-export { ATTENTION_HOOKS, createPlugin as default, manifest };
+export { createPlugin as default, manifest };

package/icon.svg

@@ -0,0 +1,3 @@
+<svg viewBox="0 0 248 248" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Claude Code</title>
+<path d="M52.4285 162.873L98.7844 136.879L99.5485 134.602L98.7844 133.334H96.4921L88.7237 132.862L62.2346 132.153L39.3113 131.207L17.0249 130.026L11.4214 128.844L6.2 121.873L6.7094 118.447L11.4214 115.257L18.171 115.847L33.0711 116.911L55.485 118.447L71.6586 119.392L95.728 121.873H99.5485L100.058 120.337L98.7844 119.392L97.7656 118.447L74.5877 102.732L49.4995 86.1905L36.3823 76.62L29.3779 71.7757L25.8121 67.2858L24.2839 57.3608L30.6515 50.2716L39.3113 50.8623L41.4763 51.4531L50.2636 58.1879L68.9842 72.7209L93.4357 90.6804L97.0015 93.6343L98.4374 92.6652L98.6571 91.9801L97.0015 89.2625L83.757 65.2772L69.621 40.8192L63.2534 30.6579L61.5978 24.632C60.9565 22.1032 60.579 20.0111 60.579 17.4246L67.8381 7.49965L71.9133 6.19995L81.7193 7.49965L85.7946 11.0443L91.9074 24.9865L101.714 46.8451L116.996 76.62L121.453 85.4816L123.873 93.6343L124.764 96.1155H126.292V94.6976L127.566 77.9197L129.858 57.3608L132.15 30.8942L132.915 23.4505L136.608 14.4708L143.994 9.62643L149.725 12.344L154.437 19.0788L153.8 23.4505L150.998 41.6463L145.522 70.1215L141.957 89.2625H143.994L146.414 86.7813L156.093 74.0206L172.266 53.698L179.398 45.6635L187.803 36.802L193.152 32.5484H203.34L210.726 43.6549L207.415 55.1159L196.972 68.3492L188.312 79.5739L175.896 96.2095L168.191 109.585L168.882 110.689L170.738 110.53L198.755 104.504L213.91 101.787L231.994 98.7149L240.144 102.496L241.036 106.395L237.852 114.311L218.495 119.037L195.826 123.645L162.07 131.592L161.696 131.893L162.137 132.547L177.36 133.925L183.855 134.279H199.774L229.447 136.524L237.215 141.605L241.8 147.867L241.036 152.711L229.065 158.737L213.019 154.956L175.45 145.977L162.587 142.787H160.805V143.85L171.502 154.366L191.242 172.089L215.82 195.011L217.094 200.682L213.91 205.172L210.599 204.699L188.949 188.394L180.544 181.069L161.696 165.118H160.422V166.772L164.752 173.152L187.803 207.771L188.949 218.405L187.294 221.832L181.308 223.959L174.813 222.777L161.187 203.754L147.305 182.486L136.098 163.345L134.745 164.2L128.075 235.42L125.019 239.082L117.887 241.8L111.902 237.31L108.718 229.984L111.902 215.452L115.722 196.547L118.779 181.541L121.58 162.873L123.291 156.636L123.14 156.219L121.773 156.449L107.699 175.752L86.304 204.699L69.3663 222.777L65.291 224.431L58.2867 220.768L58.9235 214.27L62.8713 208.48L86.304 178.705L100.44 160.155L109.551 149.507L109.462 147.967L108.959 147.924L46.6977 188.512L35.6182 189.93L30.7788 185.44L31.4156 178.115L33.7079 175.752L52.4285 162.873Z" fill="#D97757"/>
+</svg>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@subshell-ai/plugin-claude-code",
   "description": "Claude Code harness plugin for Subshell",
-  "version": "1.0.0",
+  "version": "2.0.0",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.js",
@@ -12,6 +12,15 @@
     }
   },
   "types": "dist/index.d.ts",
+  "homepage": "https://subshell.sh",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/subshell-ai/subshell.git",
+    "directory": "packages/plugins/claude-code"
+  },
+  "bugs": {
+    "url": "https://github.com/subshell-ai/subshell/issues"
+  },
   "scripts": {
     "build": "tsdown",
     "build:dev": "hash-runner",
@@ -30,19 +39,17 @@
     "tsdown": "0.22.14",
     "typescript": "7.0.2"
   },
-  "files": [
-    "dist"
-  ],
+  "files": ["dist", "icon.svg"],
   "publishConfig": {
     "access": "public"
   },
   "subshell": {
-    "apiVersion": 1,
+    "apiVersion": 2,
     "id": "claude-code",
     "type": "agent-harness",
     "name": "Claude Code",
     "description": "Anthropic's agentic coding assistant (interactive CLI)",
-    "icon": "\ud83e\udd16",
+    "icon": "icon.svg",
     "entry": "dist/index.js",
     "detect": {
       "binaryName": "claude",
@@ -54,7 +61,9 @@
         ".npm-global/bin/claude"
       ]
     },
-    "hostEnv": ["CLAUDE_CONFIG_DIR"],
+    "hostEnv": [
+      "CLAUDE_CONFIG_DIR"
+    ],
     "install": {
       "command": "curl -fsSL https://claude.ai/install.sh | bash",
       "docsUrl": "https://code.claude.com/docs/en/setup"