@suzuke/agend 0.0.1 → 1.0.0

package/dist/approval/approval-server.js

@@ -0,0 +1,156 @@
+import { createServer } from "node:http";
+import { randomBytes } from "node:crypto";
+const DANGER_PATTERNS = [
+    /\brm\b/, // any file deletion
+    /\bgit\s+push\b/, // any push (not just --force)
+    /\bgit\s+reset\b/, // any reset
+    /\bgit\s+clean\b/, // any clean
+    /\bgit\s+checkout\s+\./, // discard changes
+    /\bgit\s+restore\b/, // discard changes
+    /\bmv\b/, // move/rename files
+    /\bdd\b/,
+    /\bmkfs\b/,
+    /\bsudo\b/,
+    /\bchmod\b/,
+    /\bchown\b/,
+    /\bkill\b/,
+    /\bpkill\b/,
+    /(?<!\d)>\s*\/(?:etc|usr|var|bin|sbin|lib|opt|root|System|Library)\b/, // redirect to system paths (not /tmp, not 2>/dev/null)
+    /(?:\/usr)?\/s?bin\/(rm|chmod|chown|mkfs|dd)\b/, // full path variants
+    /\b(?:command|env|builtin)\s+(rm|chmod|chown|sudo)\b/, // command wrappers
+    /\$\(.*\b(rm|dd|mkfs)\b/, // command substitution with dangerous commands
+];
+function isSafeTool(toolName) {
+    if (toolName === "Bash" || toolName.startsWith("Bash("))
+        return false;
+    return true;
+}
+function isDangerousCommand(command) {
+    return DANGER_PATTERNS.some(pattern => pattern.test(command));
+}
+const APPROVAL_TIMEOUT_MS = 120_000;
+export class ApprovalServer {
+    server = null;
+    messageBus;
+    port;
+    ipcServer;
+    topicMode;
+    instanceName;
+    token;
+    constructor(opts) {
+        this.messageBus = opts.messageBus;
+        this.port = opts.port;
+        this.ipcServer = opts.ipcServer ?? null;
+        this.topicMode = opts.topicMode ?? false;
+        this.instanceName = opts.instanceName ?? "";
+        this.token = randomBytes(32).toString("hex");
+    }
+    getToken() {
+        return this.token;
+    }
+    async start() {
+        return new Promise((resolve, reject) => {
+            this.server = createServer(async (req, res) => {
+                if (req.headers.authorization !== `Bearer ${this.token}`) {
+                    res.writeHead(401);
+                    res.end(JSON.stringify({ error: "Unauthorized" }));
+                    return;
+                }
+                if (req.method !== "POST" || req.url !== "/approve") {
+                    res.writeHead(404);
+                    res.end(JSON.stringify({ error: "Not found" }));
+                    return;
+                }
+                let body = "";
+                req.on("data", (chunk) => { body += chunk; });
+                req.on("end", async () => {
+                    try {
+                        const { tool_name, tool_input } = JSON.parse(body);
+                        let permissionDecision;
+                        let permissionDecisionReason;
+                        if (tool_name === "Bash" && typeof tool_input?.command === "string" && isDangerousCommand(tool_input.command)) {
+                            // Dangerous Bash commands → require human approval
+                            const prompt = `⚠️ ${tool_name}\n\`\`\`\n${tool_input.command}\n\`\`\``;
+                            const decision = await this.requestApproval(prompt);
+                            permissionDecision = decision;
+                            permissionDecisionReason = decision === "allow"
+                                ? "approved by user"
+                                : "denied by user";
+                        }
+                        else {
+                            // Everything else (all tools + normal Bash) → auto-allow
+                            permissionDecision = "allow";
+                        }
+                        res.writeHead(200, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({
+                            hookSpecificOutput: {
+                                hookEventName: "PreToolUse",
+                                permissionDecision,
+                                ...(permissionDecisionReason ? { permissionDecisionReason } : {}),
+                            },
+                        }));
+                    }
+                    catch (err) {
+                        res.writeHead(400, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({ error: "Bad request" }));
+                    }
+                });
+            });
+            this.server.on("error", reject);
+            this.server.listen(this.port, "127.0.0.1", () => {
+                const address = this.server.address();
+                const actualPort = typeof address === "object" && address !== null ? address.port : this.port;
+                resolve(actualPort);
+            });
+        });
+    }
+    requestApproval(prompt) {
+        if (this.topicMode && this.ipcServer) {
+            return this.requestApprovalViaIpc(prompt);
+        }
+        return this.requestApprovalViaBus(prompt);
+    }
+    /** DM mode: use messageBus directly (adapter is registered on this daemon) */
+    async requestApprovalViaBus(prompt) {
+        const result = await this.messageBus.requestApproval(prompt);
+        return result.decision === "deny" ? "deny" : "allow";
+    }
+    /** Topic mode: forward approval request to fleet manager via IPC */
+    requestApprovalViaIpc(prompt) {
+        return new Promise((resolve) => {
+            const approvalId = `approval-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+            const timeout = setTimeout(() => {
+                cleanup();
+                resolve("deny");
+            }, APPROVAL_TIMEOUT_MS);
+            const onMessage = (msg) => {
+                if (msg.type === "fleet_approval_response" && msg.approvalId === approvalId) {
+                    cleanup();
+                    resolve(msg.decision === "deny" ? "deny" : "allow");
+                }
+            };
+            const cleanup = () => {
+                clearTimeout(timeout);
+                this.ipcServer?.removeListener("message", onMessage);
+            };
+            this.ipcServer?.on("message", onMessage);
+            this.ipcServer?.broadcast({
+                type: "fleet_approval_request",
+                approvalId,
+                instanceName: this.instanceName,
+                prompt,
+            });
+        });
+    }
+    async stop() {
+        return new Promise((resolve) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close(() => resolve());
+            this.server = null;
+        });
+    }
+}
+//# sourceMappingURL=approval-server.js.map

package/dist/approval/approval-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-server.js","sourceRoot":"","sources":["../../src/approval/approval-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,MAAM,eAAe,GAAG;IACtB,QAAQ,EAAqB,oBAAoB;IACjD,gBAAgB,EAAY,8BAA8B;IAC1D,iBAAiB,EAAW,YAAY;IACxC,iBAAiB,EAAW,YAAY;IACxC,uBAAuB,EAAK,kBAAkB;IAC9C,mBAAmB,EAAS,kBAAkB;IAC9C,QAAQ,EAAqB,oBAAoB;IACjD,QAAQ;IACR,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;IACX,UAAU;IACV,WAAW;IACX,qEAAqE,EAAG,uDAAuD;IAC/H,+CAA+C,EAAG,qBAAqB;IACvE,qDAAqD,EAAG,mBAAmB;IAC3E,wBAAwB,EAAG,+CAA+C;CAC3E,CAAC;AAEF,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAYD,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,MAAM,OAAO,cAAc;IACjB,MAAM,GAAkB,IAAI,CAAC;IAC7B,UAAU,CAAa;IACvB,IAAI,CAAS;IACb,SAAS,CAAmB;IAC5B,SAAS,CAAU;IACnB,YAAY,CAAS;IACrB,KAAK,CAAS;IAEtB,YAAY,IAAqB;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC5C,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBACzD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;oBACpD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;oBAChD,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;oBACvB,IAAI,CAAC;wBACH,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAGhD,CAAC;wBAEF,IAAI,kBAAoC,CAAC;wBACzC,IAAI,wBAA4C,CAAC;wBAEjD,IAAI,SAAS,KAAK,MAAM,IAAI,OAAO,UAAU,EAAE,OAAO,KAAK,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC9G,mDAAmD;4BACnD,MAAM,MAAM,GAAG,MAAM,SAAS,aAAa,UAAU,CAAC,OAAO,UAAU,CAAC;4BACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;4BACpD,kBAAkB,GAAG,QAAQ,CAAC;4BAC9B,wBAAwB,GAAG,QAAQ,KAAK,OAAO;gCAC7C,CAAC,CAAC,kBAAkB;gCACpB,CAAC,CAAC,gBAAgB,CAAC;wBACvB,CAAC;6BAAM,CAAC;4BACN,yDAAyD;4BACzD,kBAAkB,GAAG,OAAO,CAAC;wBAC/B,CAAC;wBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;4BACrB,kBAAkB,EAAE;gCAClB,aAAa,EAAE,YAAY;gCAC3B,kBAAkB;gCAClB,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BAClE;yBACF,CAAC,CAAC,CAAC;oBACN,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9F,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,MAAc;QACpC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,qBAAqB,CAAC,MAAc;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACvD,CAAC;IAED,oEAAoE;IAC5D,qBAAqB,CAAC,MAAc;QAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,UAAU,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAEtF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAExB,MAAM,SAAS,GAAG,CAAC,GAA4B,EAAE,EAAE;gBACjD,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC5E,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,SAAsC,CAAC,CAAC;YACpF,CAAC,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,SAAsC,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;gBACxB,IAAI,EAAE,wBAAwB;gBAC9B,UAAU;gBACV,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/approval/tmux-prompt-detector.d.ts

@@ -0,0 +1,34 @@
+import type { TmuxManager } from "../tmux-manager.js";
+import type { ApprovalResponse } from "../channel/types.js";
+export type PromptType = "permission" | "settings_error" | "dev_channels" | "mcp_trust" | "file_creation" | "unknown";
+/** Detect whether text contains a Claude Code interactive prompt */
+export declare function detectInteractivePrompt(text: string): boolean;
+/** Classify a detected prompt to determine handling strategy */
+export declare function classifyPrompt(text: string): PromptType;
+export declare function detectPermissionPrompt(text: string): boolean;
+/**
+ * Extract tool name from Claude Code permission prompt text.
+ * Returns the permission-format tool name (e.g. "mcp__puppeteer__puppeteer_navigate").
+ */
+export declare function extractToolPattern(text: string): string | null;
+/** Build a clean prompt message for Telegram display */
+export declare function formatPromptForDisplay(text: string): string;
+export declare function loadToolAllowlist(instanceDir: string): string[];
+export declare function saveToolToAllowlist(instanceDir: string, pattern: string): void;
+export declare class TmuxPromptDetector {
+    private outputLogPath;
+    private tmux;
+    private approvalFn;
+    private logger;
+    private instanceDir?;
+    private pollTimer;
+    private byteOffset;
+    private pendingApproval;
+    constructor(outputLogPath: string, tmux: TmuxManager, approvalFn: (prompt: string) => Promise<ApprovalResponse>, logger: {
+        info(...args: any[]): void;
+        warn(...args: any[]): void;
+        error(...args: any[]): void;
+    }, instanceDir?: string | undefined);
+    startPolling(intervalMs?: number): void;
+    stop(): void;
+}

package/dist/approval/tmux-prompt-detector.js

@@ -0,0 +1,264 @@
+import { readFileSync, statSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+/** Strip ANSI escape codes from terminal output */
+function stripAnsi(text) {
+    // eslint-disable-next-line no-control-regex
+    return text.replace(/\x1b\[\d*C/g, " ") // cursor forward → space
+        .replace(/\x1b\[[0-9;]*[a-zA-Z]/g, "") // other CSI sequences
+        .replace(/\x1b\][^\x07]*\x07/g, "") // OSC sequences
+        .replace(/\x1b[()][0-9A-B]/g, "") // charset switches
+        .replace(/[\x00-\x08\x0e-\x1f]/g, ""); // misc control chars
+}
+/** Detect whether text contains a Claude Code interactive prompt */
+export function detectInteractivePrompt(text) {
+    const clean = stripAnsi(text);
+    // All Claude Code interactive prompts have numbered options like "1." or "❯ 1."
+    // combined with "Esc to cancel" or "Enter to confirm"
+    const hasNumberedOption = /[❯>]?\s*1\.\s/.test(clean);
+    const hasPromptChrome = /Esc to cancel|Enter to confirm/.test(clean);
+    return hasNumberedOption && hasPromptChrome;
+}
+/** Classify a detected prompt to determine handling strategy */
+export function classifyPrompt(text) {
+    const clean = stripAnsi(text);
+    // Permission / tool use: "Do you want to proceed?" with Yes/No
+    if (/Do you want to proceed/i.test(clean) && /\bYes\b/.test(clean) && /\bNo\b/.test(clean)) {
+        return "permission";
+    }
+    // Settings error: has "Settings Error" or "Continue without these settings"
+    if (/Settings Error/i.test(clean) || /Continue without these settings/i.test(clean)) {
+        return "settings_error";
+    }
+    // Dev channels: "I am using this for local development"
+    if (/I am using this for local development/i.test(clean)) {
+        return "dev_channels";
+    }
+    // MCP trust: "New MCP server found" or "Use this and all future"
+    if (/New MCP server found/i.test(clean) || /Use this and all future/i.test(clean)) {
+        return "mcp_trust";
+    }
+    // File creation: "Do you want to create"
+    if (/Do you want to create/i.test(clean)) {
+        return "file_creation";
+    }
+    return "unknown";
+}
+// ── Kept for backwards compat with tests ─────────────────────────────────────
+export function detectPermissionPrompt(text) {
+    const clean = stripAnsi(text);
+    return /1\.\s*Yes\b/.test(clean) && /3\.\s*No\b/.test(clean);
+}
+/**
+ * Extract tool name from Claude Code permission prompt text.
+ * Returns the permission-format tool name (e.g. "mcp__puppeteer__puppeteer_navigate").
+ */
+export function extractToolPattern(text) {
+    const clean = stripAnsi(text);
+    // "don't" may appear as don't, don.t, or dont (apostrophe stripped by terminal)
+    const m = clean.match(/don.?t ask again for\s+(.+?)\s+commands?\s+in\b/i);
+    if (!m)
+        return null;
+    const display = m[1].trim();
+    // MCP tool: "server - tool_name" → "mcp__server__tool_name"
+    const mcpMatch = display.match(/^(\S+)\s*-\s*(\S+)$/);
+    if (mcpMatch) {
+        return `mcp__${mcpMatch[1]}__${mcpMatch[2]}`;
+    }
+    // Built-in tool: "Bash" → "Bash(*)"
+    return `${display}(*)`;
+}
+/** Build a clean prompt message for Telegram display */
+export function formatPromptForDisplay(text) {
+    const clean = stripAnsi(text)
+        .replace(/\r/g, "")
+        .replace(/\n{3,}/g, "\n\n")
+        .trim();
+    // Tool use prompt: extract tool name and args
+    const toolMatch = clean.match(/(\S+\s*-\s*\S+)\s*\(([^)]*)\)\s*\(MCP\)/i)
+        ?? clean.match(/(\S+)\s*\(([^)]*)\)/);
+    if (toolMatch) {
+        const tool = toolMatch[1].trim();
+        const args = toolMatch[2].trim();
+        const truncatedArgs = args.length > 200 ? args.slice(0, 200) + "…" : args;
+        return `⚠️ ${tool}\n\`\`\`\n${truncatedArgs}\n\`\`\``;
+    }
+    // Fallback: cleaned text, truncated
+    const truncated = clean.length > 500 ? clean.slice(0, 500) + "…" : clean;
+    return `⚠️ Prompt\n${truncated}`;
+}
+// ── Persistent tool allowlist ────────────────────────────────────────────────
+const ALLOWLIST_FILE = "tool-allowlist.json";
+export function loadToolAllowlist(instanceDir) {
+    const p = join(instanceDir, ALLOWLIST_FILE);
+    if (!existsSync(p))
+        return [];
+    try {
+        const data = JSON.parse(readFileSync(p, "utf8"));
+        return Array.isArray(data) ? data : [];
+    }
+    catch {
+        return [];
+    }
+}
+export function saveToolToAllowlist(instanceDir, pattern) {
+    const list = loadToolAllowlist(instanceDir);
+    if (!list.includes(pattern)) {
+        list.push(pattern);
+        writeFileSync(join(instanceDir, ALLOWLIST_FILE), JSON.stringify(list, null, 2));
+    }
+}
+// ── Prompt handler helpers ───────────────────────────────────────────────────
+/**
+ * Select option N in a Claude Code interactive menu.
+ * Option 1 is pre-selected (❯), so:
+ *   option 1 → Enter
+ *   option 2 → Down + Enter
+ *   option 3 → Down + Down + Enter
+ */
+async function selectOption(tmux, option) {
+    for (let i = 1; i < option; i++) {
+        await tmux.sendSpecialKey("Down");
+    }
+    await tmux.sendSpecialKey("Enter");
+}
+async function pressEscape(tmux) {
+    await tmux.sendSpecialKey("Escape");
+}
+// ── Main detector ────────────────────────────────────────────────────────────
+export class TmuxPromptDetector {
+    outputLogPath;
+    tmux;
+    approvalFn;
+    logger;
+    instanceDir;
+    pollTimer = null;
+    byteOffset = 0;
+    pendingApproval = false;
+    constructor(outputLogPath, tmux, approvalFn, logger, instanceDir) {
+        this.outputLogPath = outputLogPath;
+        this.tmux = tmux;
+        this.approvalFn = approvalFn;
+        this.logger = logger;
+        this.instanceDir = instanceDir;
+    }
+    startPolling(intervalMs = 2000) {
+        if (this.pollTimer !== null)
+            return;
+        // Skip existing content — only detect prompts written after we start
+        try {
+            this.byteOffset = statSync(this.outputLogPath).size;
+        }
+        catch { /* file may not exist yet */ }
+        this.pollTimer = setInterval(async () => {
+            // Read new content from log file
+            let newContent;
+            try {
+                const stat = statSync(this.outputLogPath);
+                const fileSize = stat.size;
+                if (fileSize <= this.byteOffset)
+                    return;
+                const buf = Buffer.alloc(fileSize - this.byteOffset);
+                const fd = await import("node:fs").then(fs => fs.openSync(this.outputLogPath, "r"));
+                const { readSync, closeSync } = await import("node:fs");
+                const bytesRead = readSync(fd, buf, 0, buf.length, this.byteOffset);
+                closeSync(fd);
+                if (bytesRead <= 0)
+                    return;
+                newContent = buf.subarray(0, bytesRead).toString("utf8");
+                this.byteOffset += bytesRead;
+            }
+            catch {
+                // File may not exist yet (ENOENT); silently ignore
+                return;
+            }
+            // Detect and handle prompts
+            try {
+                if (!detectInteractivePrompt(newContent) || this.pendingApproval)
+                    return;
+                const promptType = classifyPrompt(newContent);
+                this.logger.info({ promptType }, "TmuxPromptDetector: interactive prompt detected");
+                switch (promptType) {
+                    case "dev_channels":
+                    case "mcp_trust":
+                        // Auto-confirm: option 1 is already selected
+                        await selectOption(this.tmux, 1);
+                        this.logger.info({ promptType }, "TmuxPromptDetector: auto-confirmed");
+                        break;
+                    case "settings_error":
+                        // "Continue without these settings" is option 2
+                        await selectOption(this.tmux, 2);
+                        this.logger.info("TmuxPromptDetector: auto-continued past settings error");
+                        break;
+                    case "file_creation":
+                        // Auto-deny file creation prompts (SKILL.md etc.)
+                        await pressEscape(this.tmux);
+                        this.logger.info("TmuxPromptDetector: auto-denied file creation");
+                        break;
+                    case "permission":
+                        // Forward to user via Telegram
+                        this.pendingApproval = true;
+                        try {
+                            const toolPattern = extractToolPattern(newContent);
+                            const cleanPrompt = formatPromptForDisplay(newContent);
+                            const result = await this.approvalFn(cleanPrompt);
+                            this.logger.info({ decision: result.decision }, "TmuxPromptDetector: user responded");
+                            if (result.decision === "always_allow") {
+                                await selectOption(this.tmux, 2); // "Yes, and don't ask again"
+                                if (toolPattern && this.instanceDir) {
+                                    saveToolToAllowlist(this.instanceDir, toolPattern);
+                                    this.logger.info({ toolPattern }, "TmuxPromptDetector: added to allowlist");
+                                }
+                            }
+                            else if (result.decision === "approve") {
+                                await selectOption(this.tmux, 1); // "Yes"
+                            }
+                            else {
+                                await selectOption(this.tmux, 3); // "No"
+                            }
+                        }
+                        catch (err) {
+                            this.logger.warn("TmuxPromptDetector: approval error, denying", err);
+                            await pressEscape(this.tmux);
+                        }
+                        finally {
+                            this.pendingApproval = false;
+                        }
+                        break;
+                    case "unknown":
+                    default:
+                        // Forward unknown prompts to user too
+                        this.pendingApproval = true;
+                        try {
+                            const cleanPrompt = formatPromptForDisplay(newContent);
+                            const result = await this.approvalFn(cleanPrompt);
+                            this.logger.info({ decision: result.decision }, "TmuxPromptDetector: user responded to unknown prompt");
+                            if (result.decision === "deny") {
+                                await pressEscape(this.tmux);
+                            }
+                            else {
+                                await selectOption(this.tmux, 1);
+                            }
+                        }
+                        catch (err) {
+                            this.logger.error({ err }, "Unknown prompt approval error");
+                            await pressEscape(this.tmux);
+                        }
+                        finally {
+                            this.pendingApproval = false;
+                        }
+                        break;
+                }
+            }
+            catch (err) {
+                this.logger.error({ err }, "Prompt detection error");
+            }
+        }, intervalMs);
+    }
+    stop() {
+        if (this.pollTimer !== null) {
+            clearInterval(this.pollTimer);
+            this.pollTimer = null;
+        }
+    }
+}
+//# sourceMappingURL=tmux-prompt-detector.js.map

package/dist/approval/tmux-prompt-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux-prompt-detector.js","sourceRoot":"","sources":["../../src/approval/tmux-prompt-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,mDAAmD;AACnD,SAAS,SAAS,CAAC,IAAY;IAC7B,4CAA4C;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAY,yBAAyB;SAChE,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAE,sBAAsB;SAC7D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAM,gBAAgB;SACxD,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAQ,mBAAmB;SAC3D,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAG,qBAAqB;AAC3E,CAAC;AAYD,oEAAoE;AACpE,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,gFAAgF;IAChF,sDAAsD;IACtD,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,iBAAiB,IAAI,eAAe,CAAC;AAC9C,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,+DAA+D;IAC/D,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,4EAA4E;IAC5E,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,wDAAwD;IACxD,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,iEAAiE;IACjE,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,yCAAyC;IACzC,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,gFAAgF;IAChF,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC1E,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,oCAAoC;IACpC,OAAO,GAAG,OAAO,KAAK,CAAC;AACzB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC;SAC1B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAC;IAEV,8CAA8C;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC;WACvD,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,OAAO,MAAM,IAAI,aAAa,aAAa,UAAU,CAAC;IACxD,CAAC;IAED,oCAAoC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IACzE,OAAO,cAAc,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,gFAAgF;AAEhF,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,OAAe;IACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,IAAiB,EAAE,MAAc;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAiB;IAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,kBAAkB;IAMnB;IACA;IACA;IACA;IACA;IATF,SAAS,GAA0C,IAAI,CAAC;IACxD,UAAU,GAAG,CAAC,CAAC;IACf,eAAe,GAAG,KAAK,CAAC;IAEhC,YACU,aAAqB,EACrB,IAAiB,EACjB,UAAyD,EACzD,MAA+F,EAC/F,WAAoB;QAJpB,kBAAa,GAAb,aAAa,CAAQ;QACrB,SAAI,GAAJ,IAAI,CAAa;QACjB,eAAU,GAAV,UAAU,CAA+C;QACzD,WAAM,GAAN,MAAM,CAAyF;QAC/F,gBAAW,GAAX,WAAW,CAAS;IAC3B,CAAC;IAEJ,YAAY,CAAC,UAAU,GAAG,IAAI;QAC5B,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO;QAEpC,qEAAqE;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAExC,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACtC,iCAAiC;YACjC,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC3B,IAAI,QAAQ,IAAI,IAAI,CAAC,UAAU;oBAAE,OAAO;gBAExC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;gBACrD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBACpE,SAAS,CAAC,EAAE,CAAC,CAAC;gBACd,IAAI,SAAS,IAAI,CAAC;oBAAE,OAAO;gBAE3B,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;gBACnD,OAAO;YACT,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,eAAe;oBAAE,OAAO;gBAEzE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,iDAAiD,CAAC,CAAC;gBAEpF,QAAQ,UAAU,EAAE,CAAC;oBACnB,KAAK,cAAc,CAAC;oBACpB,KAAK,WAAW;wBACd,6CAA6C;wBAC7C,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,oCAAoC,CAAC,CAAC;wBACvE,MAAM;oBAER,KAAK,gBAAgB;wBACnB,gDAAgD;wBAChD,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;wBAC3E,MAAM;oBAER,KAAK,eAAe;wBAClB,kDAAkD;wBAClD,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;wBAClE,MAAM;oBAER,KAAK,YAAY;wBACf,+BAA+B;wBAC/B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;wBAC5B,IAAI,CAAC;4BACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;4BACnD,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;4BACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;4BAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,oCAAoC,CAAC,CAAC;4BAEtF,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gCACvC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B;gCAC/D,IAAI,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oCACpC,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oCACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,wCAAwC,CAAC,CAAC;gCAC9E,CAAC;4BACH,CAAC;iCAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gCACzC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;4BAC5C,CAAC;iCAAM,CAAC;gCACN,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;4BAC3C,CAAC;wBACH,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;4BACrE,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC/B,CAAC;gCAAS,CAAC;4BACT,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;wBAC/B,CAAC;wBACD,MAAM;oBAER,KAAK,SAAS,CAAC;oBACf;wBACE,sCAAsC;wBACtC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;wBAC5B,IAAI,CAAC;4BACH,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;4BACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;4BAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,sDAAsD,CAAC,CAAC;4BACxG,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gCAC/B,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BAC/B,CAAC;iCAAM,CAAC;gCACN,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;4BACnC,CAAC;wBACH,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;4BAC5D,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC/B,CAAC;gCAAS,CAAC;4BACT,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;wBAC/B,CAAC;wBACD,MAAM;gBACV,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,EAAE,UAAU,CAAC,CAAC;IACjB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/backend/approval-strategy.d.ts

@@ -0,0 +1,14 @@
+export interface ApprovalStrategy {
+    /**
+     * Return hook definitions to merge into CLI settings.
+     * Hook-based: returns { hooks: { PreToolUse: [...] } }
+     * Shell-wrapper: returns {} (no hooks needed)
+     */
+    setup(port: number): {
+        hooks?: Record<string, unknown>;
+    };
+    /** Start the approval service. Returns the actual port. */
+    start(): Promise<number>;
+    /** Stop the approval service */
+    stop(): Promise<void>;
+}

package/dist/backend/approval-strategy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=approval-strategy.js.map

package/dist/backend/approval-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-strategy.js","sourceRoot":"","sources":["../../src/backend/approval-strategy.ts"],"names":[],"mappings":""}

package/dist/backend/claude-code.d.ts

@@ -0,0 +1,13 @@
+import type { CliBackend, CliBackendConfig } from "./types.js";
+export declare class ClaudeCodeBackend implements CliBackend {
+    private instanceDir;
+    constructor(instanceDir: string);
+    buildCommand(config: CliBackendConfig): string;
+    writeConfig(config: CliBackendConfig): void;
+    getContextUsage(): number | null;
+    getSessionId(): string | null;
+    cleanup(_config: CliBackendConfig): void;
+    /** Pre-approve ANTHROPIC_API_KEY in ~/.claude.json to skip the interactive prompt */
+    private preApproveApiKey;
+    private writeStatusLineScript;
+}

package/dist/backend/claude-code.js

@@ -0,0 +1,114 @@
+import { join } from "node:path";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+export class ClaudeCodeBackend {
+    instanceDir;
+    constructor(instanceDir) {
+        this.instanceDir = instanceDir;
+    }
+    buildCommand(config) {
+        const settingsPath = join(this.instanceDir, "claude-settings.json");
+        const mcpConfigPath = join(this.instanceDir, "mcp-config.json");
+        // Forward Anthropic env vars to the CLI process (tmux shell doesn't inherit daemon's env)
+        const envPrefix = ["CMUX_CLAUDE_HOOKS_DISABLED=1", "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1"];
+        for (const key of ["ANTHROPIC_BASE_URL", "ANTHROPIC_API_KEY"]) {
+            if (process.env[key])
+                envPrefix.push(`${key}=${process.env[key]}`);
+        }
+        let cmd = `${envPrefix.join(" ")} claude --settings ${settingsPath} --mcp-config ${mcpConfigPath} --dangerously-skip-permissions`;
+        const sessionIdFile = join(this.instanceDir, "session-id");
+        if (existsSync(sessionIdFile)) {
+            const sid = readFileSync(sessionIdFile, "utf-8").trim();
+            if (sid && /^[a-zA-Z0-9_-]+$/.test(sid))
+                cmd += ` --resume ${sid}`;
+        }
+        if (config.model) {
+            cmd += ` --model ${config.model}`;
+        }
+        if (config.systemPrompt) {
+            const promptPath = join(this.instanceDir, "system-prompt.md");
+            writeFileSync(promptPath, config.systemPrompt);
+            cmd += ` --system-prompt "${promptPath}"`;
+        }
+        return cmd;
+    }
+    writeConfig(config) {
+        // 1. Write mcp-config.json to instance dir (loaded via --mcp-config)
+        const mcpConfigPath = join(this.instanceDir, "mcp-config.json");
+        const mcpConfig = { mcpServers: config.mcpServers };
+        writeFileSync(mcpConfigPath, JSON.stringify(mcpConfig, null, 2));
+        // 2. Write statusline script
+        const statusLineCommand = this.writeStatusLineScript();
+        // 3. Write claude-settings.json (permissions handled by --dangerously-skip-permissions)
+        const settings = {
+            statusLine: {
+                type: "command",
+                command: statusLineCommand,
+            },
+        };
+        writeFileSync(join(this.instanceDir, "claude-settings.json"), JSON.stringify(settings));
+        // 4. Pre-approve API key to skip interactive prompt on startup
+        this.preApproveApiKey(config);
+    }
+    getContextUsage() {
+        try {
+            const sf = join(this.instanceDir, "statusline.json");
+            const data = JSON.parse(readFileSync(sf, "utf-8"));
+            return data.context_window?.used_percentage ?? null;
+        }
+        catch (err) {
+            // File may not exist yet during startup — return null to signal unavailable
+            return null;
+        }
+    }
+    getSessionId() {
+        try {
+            const sf = join(this.instanceDir, "statusline.json");
+            const data = JSON.parse(readFileSync(sf, "utf-8"));
+            return data.session_id ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+    cleanup(_config) {
+        // mcp-config.json is in instance dir, cleaned up when instance is deleted
+    }
+    /** Pre-approve ANTHROPIC_API_KEY in ~/.claude.json to skip the interactive prompt */
+    preApproveApiKey(_config) {
+        const apiKey = process.env.ANTHROPIC_API_KEY;
+        if (!apiKey)
+            return;
+        const fingerprint = apiKey.length > 20 ? apiKey.slice(-20) : apiKey;
+        const claudeJsonPath = join(homedir(), ".claude.json");
+        let claudeCfg = {};
+        try {
+            claudeCfg = JSON.parse(readFileSync(claudeJsonPath, "utf-8"));
+        }
+        catch { /* new file or parse error */ }
+        const existing = claudeCfg.customApiKeyResponses;
+        const approved = existing?.approved ?? [];
+        if (!approved.includes(fingerprint)) {
+            claudeCfg.customApiKeyResponses = {
+                approved: [...approved, fingerprint],
+                rejected: existing?.rejected ?? [],
+            };
+            writeFileSync(claudeJsonPath, JSON.stringify(claudeCfg, null, 2));
+        }
+    }
+    writeStatusLineScript() {
+        const statusFile = join(this.instanceDir, "statusline.json");
+        // Use a Node.js script instead of bash to avoid shell injection via statusFile path
+        const script = [
+            "#!/usr/bin/env node",
+            "const fs = require('fs');",
+            "let input = '';",
+            "process.stdin.on('data', d => input += d);",
+            `process.stdin.on('end', () => { fs.writeFileSync(${JSON.stringify(statusFile)}, input); console.log('ok'); });`,
+        ].join("\n");
+        const scriptPath = join(this.instanceDir, "statusline.js");
+        writeFileSync(scriptPath, script, { mode: 0o755 });
+        return scriptPath;
+    }
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/backend/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/backend/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAIlC,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAE3C,YAAY,CAAC,MAAwB;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAChE,0FAA0F;QAC1F,MAAM,SAAS,GAAG,CAAC,8BAA8B,EAAE,wCAAwC,CAAC,CAAC;QAC7F,KAAK,MAAM,GAAG,IAAI,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,YAAY,iBAAiB,aAAa,iCAAiC,CAAC;QAElI,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,IAAI,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,GAAG,IAAI,aAAa,GAAG,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,GAAG,IAAI,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;YAC9D,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/C,GAAG,IAAI,qBAAqB,UAAU,GAAG,CAAC;QAC5C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,WAAW,CAAC,MAAwB;QAClC,qEAAqE;QACrE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,6BAA6B;QAC7B,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEvD,wFAAwF;QACxF,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE;gBACV,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,iBAAiB;aAC3B;SACF,CAAC;QACF,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAC9C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACzB,CAAC;QAEF,+DAA+D;QAC/D,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,eAAe;QACb,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,cAAc,EAAE,eAAe,IAAI,IAAI,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4EAA4E;YAC5E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,YAAY;QACV,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAyB;QAC/B,0EAA0E;IAC5E,CAAC;IAED,qFAAqF;IAC7E,gBAAgB,CAAC,OAAyB;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;QAEvD,IAAI,SAAS,GAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,SAAS,CAAC,qBAAiF,CAAC;QAC7G,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,SAAS,CAAC,qBAAqB,GAAG;gBAChC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,WAAW,CAAC;gBACpC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACnC,CAAC;YACF,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,qBAAqB;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC7D,oFAAoF;QACpF,MAAM,MAAM,GAAG;YACb,qBAAqB;YACrB,2BAA2B;YAC3B,iBAAiB;YACjB,4CAA4C;YAC5C,oDAAoD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,kCAAkC;SACjH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC3D,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/backend/codex.d.ts

@@ -0,0 +1,10 @@
+import type { CliBackend, CliBackendConfig } from "./types.js";
+export declare class CodexBackend implements CliBackend {
+    private instanceDir;
+    constructor(instanceDir: string);
+    buildCommand(config: CliBackendConfig): string;
+    writeConfig(config: CliBackendConfig): void;
+    getContextUsage(): number | null;
+    getSessionId(): string | null;
+    cleanup(config: CliBackendConfig): void;
+}