@tanstack/ai-claude-code 0.2.2 → 0.3.0

package/dist/esm/adapters/text.js.map

@@ -1 +1 @@
-{"version":3,"file":"text.js","sources":["../../../src/adapters/text.ts"],"sourcesContent":["import { EventType, normalizeSystemPrompts } from '@tanstack/ai'\nimport { toRunErrorRawEvent } from '@tanstack/ai/adapter-internals'\nimport { BaseTextAdapter } from '@tanstack/ai/adapters'\nimport {\n  SandboxCapability,\n  approvalId,\n  buildApprovalRequestedEvent,\n  createBridgeEventChannel,\n  getSandbox,\n  getSandboxPolicy,\n  getToolBridgeProvisioner,\n  getWorkspaceProjection,\n  mergeChunkStreams,\n  nodeHttpBridgeProvisioner,\n  resolveApproval,\n  spawnNdjson,\n} from '@tanstack/ai-sandbox'\nimport { buildPrompt } from '../messages/prompt'\nimport { translateSdkStream } from '../stream/translate'\nimport { mapPolicyToClaudeFlags } from './policy-map'\nimport { projectClaudeWorkspace } from './projection'\nimport type { ClaudePolicyFlags } from './policy-map'\nimport type {\n  BridgeEventChannel,\n  HostToolBridge,\n  PermissionToolResult,\n  SandboxHandle,\n  SandboxPolicy,\n} from '@tanstack/ai-sandbox'\nimport type {\n  StructuredOutputOptions,\n  StructuredOutputResult,\n} from '@tanstack/ai/adapters'\nimport type {\n  DefaultMessageMetadataByModality,\n  Modality,\n  StreamChunk,\n  TextOptions,\n} from '@tanstack/ai'\nimport type { ClaudeCodeModel } from '../model-meta'\nimport type { ClaudeCodeTextProviderOptions } from '../provider-options'\nimport type { AgentSdkMessage } from '../stream/sdk-types'\n\nexport type ClaudeCodePermissionMode =\n  | 'default'\n  | 'acceptEdits'\n  | 'bypassPermissions'\n  | 'plan'\n\nconst DEFAULT_WORKDIR = '/workspace'\n\nexport interface ClaudeCodeTextConfig {\n  /**\n   * Working directory inside the sandbox where `claude` runs. Defaults to\n   * `/workspace` (the conventional sandbox workspace root).\n   */\n  cwd?: string\n  /**\n   * Claude Code permission mode passed via `--permission-mode`. Defaults to\n   * `'bypassPermissions'` — a sandbox is isolated, so the agent is allowed to\n   * edit files and run commands without prompting. Tighten via `defineSandboxPolicy`\n   * / this option for less autonomy.\n   */\n  permissionMode?: ClaudeCodePermissionMode\n  /** Built-in tools the harness may use (`--allowedTools`). */\n  allowedTools?: Array<string>\n  /** Built-in tools removed from the harness (`--disallowedTools`). */\n  disallowedTools?: Array<string>\n  /** Extra directories the agent may access (`--add-dir`). */\n  addDirs?: Array<string>\n  /** Maximum harness-internal turns (`--max-turns`). */\n  maxTurns?: number\n  /**\n   * How `systemPrompts` from `chat()` are applied:\n   * - `'append'` (default): `--append-system-prompt` on top of the preset.\n   * - `'replace'`: `--system-prompt` as the entire system prompt.\n   */\n  systemPromptMode?: 'append' | 'replace'\n  /** Path/name of the claude executable inside the sandbox. Defaults to `claude`. */\n  claudeExecutable?: string\n  /** Emit token-level deltas via `--include-partial-messages` (default true). */\n  streamPartials?: boolean\n  /** Extra environment variables for the claude process inside the sandbox. */\n  env?: Record<string, string>\n  /** Emit a `file.changed` CUSTOM event with the git diff after the run (default true). */\n  emitDiff?: boolean\n}\n\n/** POSIX single-quote escape for embedding values in the `claude …` command. */\nfunction q(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`\n}\n\n/** Format a host tool-bridge as claude's `--mcp-config` JSON. */\nfunction bridgeToMcpConfig(bridge: HostToolBridge): string {\n  return JSON.stringify({\n    mcpServers: {\n      [bridge.name]: {\n        type: 'http',\n        url: bridge.url,\n        headers: { Authorization: `Bearer ${bridge.token}` },\n      },\n    },\n  })\n}\n\nexport class ClaudeCodeTextAdapter<\n  TModel extends ClaudeCodeModel,\n> extends BaseTextAdapter<\n  TModel,\n  ClaudeCodeTextProviderOptions,\n  ReadonlyArray<Modality> & readonly ['text'],\n  DefaultMessageMetadataByModality,\n  ReadonlyArray<string>,\n  unknown,\n  never\n> {\n  readonly name = 'claude-code' as const\n\n  // Harness adapter: requires a sandbox to run the agent CLI inside.\n  override readonly requires = [SandboxCapability] as const\n\n  private readonly adapterConfig: ClaudeCodeTextConfig\n\n  constructor(config: ClaudeCodeTextConfig, model: TModel) {\n    super({}, model)\n    this.adapterConfig = config\n  }\n\n  private sandboxFrom(\n    options: TextOptions<ClaudeCodeTextProviderOptions>,\n  ): SandboxHandle {\n    const ctx = options.capabilities\n    if (!ctx) {\n      throw new Error(\n        'Adapter \"claude-code\" requires a sandbox. Add withSandbox(defineSandbox({ ... })) ' +\n          'to chat() middleware (e.g. with the local-process or docker provider).',\n      )\n    }\n    return getSandbox(ctx)\n  }\n\n  private workdir(options: TextOptions<ClaudeCodeTextProviderOptions>): string {\n    return (\n      options.modelOptions?.cwd ?? this.adapterConfig.cwd ?? DEFAULT_WORKDIR\n    )\n  }\n\n  /** Build the `claude` command line (prompt goes via stdin, not argv). */\n  private buildCommand(\n    options: TextOptions<ClaudeCodeTextProviderOptions>,\n    resume: string | undefined,\n    policyFlags: ClaudePolicyFlags,\n    mcpConfigPath: string | undefined,\n    permissionPromptTool: string | undefined,\n  ): string {\n    const config = this.adapterConfig\n    const modelOptions = options.modelOptions\n    const exe = config.claudeExecutable ?? 'claude'\n\n    const args: Array<string> = [\n      '-p',\n      '--output-format',\n      'stream-json',\n      '--verbose',\n      '--model',\n      q(this.model),\n    ]\n\n    if (config.streamPartials !== false) args.push('--include-partial-messages')\n    if (resume !== undefined) args.push('--resume', q(resume))\n\n    // Precedence: per-call modelOptions > adapter config > policy > sandbox default.\n    const permissionMode =\n      modelOptions?.permissionMode ??\n      config.permissionMode ??\n      policyFlags.permissionMode ??\n      'bypassPermissions'\n    args.push('--permission-mode', q(permissionMode))\n\n    const maxTurns = modelOptions?.maxTurns ?? config.maxTurns\n    if (maxTurns !== undefined) args.push('--max-turns', String(maxTurns))\n\n    for (const dir of config.addDirs ?? []) args.push('--add-dir', q(dir))\n\n    const allowedTools = [\n      ...(modelOptions?.allowedTools ?? config.allowedTools ?? []),\n      ...policyFlags.allowedTools,\n    ]\n    if (allowedTools.length > 0) {\n      args.push('--allowedTools', q([...new Set(allowedTools)].join(',')))\n    }\n    const disallowedTools = [\n      ...(modelOptions?.disallowedTools ?? config.disallowedTools ?? []),\n      ...policyFlags.disallowedTools,\n    ]\n    if (disallowedTools.length > 0) {\n      args.push('--disallowedTools', q([...new Set(disallowedTools)].join(',')))\n    }\n\n    const systemPrompts = normalizeSystemPrompts(options.systemPrompts)\n      .map((prompt) => prompt.content)\n      .filter((content) => content.trim() !== '')\n    if (systemPrompts.length > 0) {\n      const joined = systemPrompts.join('\\n\\n')\n      const flag =\n        config.systemPromptMode === 'replace'\n          ? '--system-prompt'\n          : '--append-system-prompt'\n      args.push(flag, q(joined))\n    }\n\n    if (mcpConfigPath !== undefined) args.push('--mcp-config', q(mcpConfigPath))\n    if (permissionPromptTool !== undefined) {\n      args.push('--permission-prompt-tool', q(permissionPromptTool))\n    }\n\n    return `${exe} ${args.join(' ')}`\n  }\n\n  /**\n   * Build the permission-prompt resolver the host MCP bridge exposes to claude\n   * (`--permission-prompt-tool`). Maps claude's permission request onto the\n   * sandbox policy + client approvals; on an `ask` action with no decision yet,\n   * records an approval-requested event and denies (the client re-runs to grant).\n   */\n  private buildPermissionResolver(\n    policy: SandboxPolicy | undefined,\n    approvals: ReadonlyMap<string, boolean> | undefined,\n    scripts: Record<string, string> | undefined,\n    sink: Array<StreamChunk>,\n    threadId: string,\n    runId: string,\n  ): (input: { tool_name?: string; input?: unknown }) => PermissionToolResult {\n    const writeTools = new Set(['Write', 'Edit', 'MultiEdit', 'NotebookEdit'])\n    const networkTools = new Set(['WebFetch', 'WebSearch'])\n    return (request) => {\n      const toolName = request.tool_name ?? 'tool'\n      const cmdInput = request.input\n      const command =\n        toolName === 'Bash' &&\n        cmdInput !== null &&\n        typeof cmdInput === 'object' &&\n        'command' in cmdInput &&\n        typeof (cmdInput as { command?: unknown }).command === 'string'\n          ? (cmdInput as { command: string }).command\n          : undefined\n      const capability = writeTools.has(toolName)\n        ? 'fileWrite'\n        : networkTools.has(toolName)\n          ? 'network'\n          : undefined\n      const id = approvalId({\n        provider: 'claude-code',\n        kind: command !== undefined ? 'command' : (capability ?? 'tool'),\n        target: command ?? toolName,\n      })\n      const outcome = resolveApproval({\n        policy,\n        approvals,\n        id,\n        scripts,\n        ...(command !== undefined ? { command } : {}),\n        ...(capability !== undefined ? { capability } : {}),\n      })\n      if (outcome.needsApproval) {\n        sink.push(\n          buildApprovalRequestedEvent({\n            approvalId: id,\n            title: `Approve ${toolName}${command !== undefined ? `: ${command}` : ''}`,\n            threadId,\n            runId,\n            detail: { provider: 'claude-code', toolName },\n          }),\n        )\n        return {\n          behavior: 'deny',\n          message:\n            'Awaiting client approval. Approve in the UI and re-run to continue.',\n        }\n      }\n      return outcome.decision === 'allow'\n        ? { behavior: 'allow' }\n        : { behavior: 'deny', message: 'Denied by sandbox policy.' }\n    }\n  }\n\n  async *chatStream(\n    options: TextOptions<ClaudeCodeTextProviderOptions>,\n  ): AsyncIterable<StreamChunk> {\n    const { logger } = options\n    let bridge: HostToolBridge | undefined\n    let channel: BridgeEventChannel | undefined\n    const approvalRequests: Array<StreamChunk> = []\n    // Temp files written for the run (bridge MCP config, redirected prompt) that\n    // carry the bearer token / prompt; removed in `finally` so they don't linger\n    // in the sandbox after the run.\n    let cleanupSandbox: SandboxHandle | undefined\n    const tempFiles: Array<string> = []\n    try {\n      const sandbox = this.sandboxFrom(options)\n      cleanupSandbox = sandbox\n      const cwd = this.workdir(options)\n      const runId = options.runId ?? this.generateId()\n      const threadId = options.threadId ?? this.generateId()\n      // Surfaces custom events from bridged tools (e.g. code mode console logs)\n      // on this run's live output stream.\n      channel = createBridgeEventChannel({ model: this.model, threadId, runId })\n\n      // Idempotently project workspace skills/plugins/MCP into the sandbox in\n      // claude's native format (guarded by the projection marker file).\n      const projection = options.capabilities\n        ? getWorkspaceProjection(options.capabilities, { optional: true })\n        : undefined\n      if (projection) await projectClaudeWorkspace(sandbox, projection)\n\n      const policy = options.capabilities\n        ? getSandboxPolicy(options.capabilities, { optional: true })\n        : undefined\n\n      // A permission-prompt tool gates the agent's native tools when a policy\n      // can `ask`/`deny` (interactive approvals).\n      const permission =\n        policy !== undefined\n          ? {\n              toolName: 'approval_prompt',\n              resolve: this.buildPermissionResolver(\n                policy,\n                options.approvals,\n                projection?.scripts,\n                approvalRequests,\n                threadId,\n                runId,\n              ),\n            }\n          : undefined\n\n      // Bridge chat()-provided server tools (and/or the permission tool) into\n      // the sandbox over MCP.\n      const hasTools = options.tools !== undefined && options.tools.length > 0\n      if (hasTools || permission !== undefined) {\n        const provisioner =\n          (options.capabilities\n            ? getToolBridgeProvisioner(options.capabilities, { optional: true })\n            : undefined) ?? nodeHttpBridgeProvisioner\n        bridge = await provisioner.provision(options.tools ?? [], {\n          provider: sandbox.provider,\n          context: options.context,\n          emitCustomEvent: channel.emitCustomEvent,\n          ...(permission !== undefined ? { permission } : {}),\n          ...(options.abortController?.signal\n            ? { signal: options.abortController.signal }\n            : {}),\n        })\n      }\n\n      const { prompt, resume } = buildPrompt(\n        options.messages,\n        options.modelOptions?.sessionId,\n      )\n      // The bridge MCP config carries the per-run bearer token. Write it to a\n      // file and pass claude the PATH, so the token never appears in argv (where\n      // any process in the sandbox could read it via `ps` / `/proc/<pid>/cmdline`).\n      let mcpConfigArg: string | undefined\n      if (bridge) {\n        // Pass claude a path RELATIVE to its cwd (the real workdir the handle\n        // runs the process in). An absolute VIRTUAL path like `/workspace/…` is\n        // wrong wherever claude runs outside a sandbox that literally uses\n        // `/workspace` — e.g. local-process on Windows, where git-bash resolves\n        // `/workspace` to `C:\\Program Files\\Git\\workspace` and the file is \"not\n        // found\". The bare filename resolves correctly on every provider.\n        const mcpConfigFile = `.tanstack-mcp-bridge-${runId}.json`\n        const mcpConfigPath = `${cwd}/${mcpConfigFile}`\n        await sandbox.fs.write(mcpConfigPath, bridgeToMcpConfig(bridge))\n        tempFiles.push(mcpConfigPath)\n        mcpConfigArg = mcpConfigFile\n      }\n      const command = this.buildCommand(\n        options,\n        resume,\n        mapPolicyToClaudeFlags(policy),\n        mcpConfigArg,\n        bridge && permission\n          ? `mcp__${bridge.name}__${permission.toolName}`\n          : undefined,\n      )\n\n      // Deliver the prompt. The default feeds it over stdin (keeps it out of\n      // argv). Providers without a writable host→process stdin (e.g. Cloudflare)\n      // can't accept that write, so write the prompt to a file and redirect the\n      // CLI's stdin from it in-shell (`claude -p … < file`) — still out of argv.\n      let runCommand = command\n      let stdinInput: string | undefined = prompt\n      if (sandbox.capabilities.writableStdin === false) {\n        const promptPath = `/tmp/tanstack-claude-prompt-${runId}`\n        await sandbox.fs.write(promptPath, prompt)\n        tempFiles.push(promptPath)\n        runCommand = `${command} < ${q(promptPath)}`\n        stdinInput = undefined\n      }\n\n      logger.request(\n        `activity=chat provider=claude-code model=${this.model} sandbox=${sandbox.provider} messages=${options.messages.length} resume=${resume ?? 'none'}`,\n        { provider: 'claude-code', model: this.model },\n      )\n\n      const rawEvents = spawnNdjson(sandbox, runCommand, {\n        cwd,\n        ...(stdinInput !== undefined ? { input: stdinInput } : {}),\n        // claude maps `bypassPermissions` to `--dangerously-skip-permissions`,\n        // which it refuses to run as root. Sandbox containers routinely run as\n        // root (Docker / Cloudflare), so set `IS_SANDBOX=1` — claude's\n        // documented escape hatch for skip-permissions in an isolated\n        // environment — merged over the sandbox env (a caller-provided value\n        // wins). Safe to set unconditionally; it is a no-op for stricter modes.\n        env: { IS_SANDBOX: '1', ...this.adapterConfig.env },\n        ...(options.abortController?.signal\n          ? { signal: options.abortController.signal }\n          : options.request?.signal\n            ? { signal: options.request.signal }\n            : {}),\n        onNonJsonLine: (line) =>\n          logger.provider(`provider=claude-code non-json line: ${line}`, {\n            chunk: line,\n          }),\n      })\n\n      async function* asMessages(): AsyncIterable<AgentSdkMessage> {\n        for await (const event of rawEvents) yield event as AgentSdkMessage\n      }\n\n      yield* mergeChunkStreams(\n        translateSdkStream(asMessages(), {\n          model: this.model,\n          runId,\n          threadId,\n          ...(options.parentRunId !== undefined && {\n            parentRunId: options.parentRunId,\n          }),\n          genId: () => this.generateId(),\n          onSdkMessage: (message) =>\n            logger.provider(`provider=claude-code type=${message.type}`, {\n              chunk: message,\n            }),\n        }),\n        channel.stream,\n      )\n\n      // Surface the working-tree diff so UIs can render what the agent changed.\n      if (this.adapterConfig.emitDiff !== false) {\n        try {\n          const diff = await sandbox.process.exec(`git -C ${q(cwd)} diff`, {\n            cwd,\n          })\n          if (diff.exitCode === 0 && diff.stdout.trim() !== '') {\n            yield {\n              type: EventType.CUSTOM,\n              name: 'file.changed',\n              value: { path: '.', diff: diff.stdout },\n              timestamp: Date.now(),\n              threadId,\n              runId,\n            }\n          }\n        } catch {\n          // not a git repo / git unavailable — skip the diff event\n        }\n      }\n\n      // Surface any pending approval requests (policy `ask` actions awaiting a\n      // client decision); the client approves and re-runs to continue.\n      for (const event of approvalRequests) yield event\n    } catch (error: unknown) {\n      const err = error as Error & { code?: string }\n      const rawEvent = toRunErrorRawEvent(error)\n      logger.errors('claude-code.chatStream fatal', {\n        error,\n        source: 'claude-code.chatStream',\n      })\n      yield {\n        type: EventType.RUN_ERROR,\n        model: options.model,\n        timestamp: Date.now(),\n        message: err.message || 'Unknown error occurred',\n        ...(err.code !== undefined && { code: err.code }),\n        ...(rawEvent !== undefined && { rawEvent }),\n        error: {\n          message: err.message || 'Unknown error occurred',\n          ...(err.code !== undefined && { code: err.code }),\n        },\n      }\n    } finally {\n      channel?.close()\n      if (bridge) await bridge.close()\n      // Remove the per-run token/prompt files. Best-effort: a cleanup failure\n      // must not mask the run's own outcome.\n      if (cleanupSandbox) {\n        for (const path of tempFiles) {\n          try {\n            await cleanupSandbox.fs.remove(path)\n          } catch {\n            // file already gone / sandbox torn down — nothing to clean up\n          }\n        }\n      }\n    }\n  }\n\n  structuredOutput(\n    _options: StructuredOutputOptions<ClaudeCodeTextProviderOptions>,\n  ): Promise<StructuredOutputResult<unknown>> {\n    return Promise.reject(\n      new Error(\n        'Structured output is not yet supported by the in-sandbox Claude Code adapter. ' +\n          'Use a model adapter (e.g. anthropic) for structured output, or omit outputSchema.',\n      ),\n    )\n  }\n}\n\n/**\n * Creates a Claude Code harness adapter that runs **inside a sandbox**.\n *\n * Unlike HTTP provider adapters, this is a *harness* adapter: it spawns the\n * `claude` CLI inside the sandbox provided by `withSandbox(...)` (the adapter\n * declares `requires: [SandboxCapability]`), streams its `stream-json` stdout\n * back as AG-UI events, and lets Claude Code run its own agent loop and native\n * tools (Bash, file edits, search, …) against the sandbox workspace. The\n * sandbox image must provide the `claude` executable and `ANTHROPIC_API_KEY`\n * in its environment (e.g. via `workspace.secrets`). The session id is\n * surfaced via a CUSTOM `claude-code.session-id` event so follow-up calls can\n * resume through `modelOptions.sessionId`.\n */\nexport function claudeCodeText<TModel extends ClaudeCodeModel>(\n  model: TModel,\n  config: ClaudeCodeTextConfig = {},\n): ClaudeCodeTextAdapter<TModel> {\n  return new ClaudeCodeTextAdapter(config, model)\n}\n"],"names":[],"mappings":";;;;;;;;AAiDA,MAAM,kBAAkB;AAwCxB,SAAS,EAAE,OAAuB;AAChC,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAGA,SAAS,kBAAkB,QAAgC;AACzD,SAAO,KAAK,UAAU;AAAA,IACpB,YAAY;AAAA,MACV,CAAC,OAAO,IAAI,GAAG;AAAA,QACb,MAAM;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,SAAS,EAAE,eAAe,UAAU,OAAO,KAAK,GAAA;AAAA,MAAG;AAAA,IACrD;AAAA,EACF,CACD;AACH;AAEO,MAAM,8BAEH,gBAQR;AAAA,EACS,OAAO;AAAA;AAAA,EAGE,WAAW,CAAC,iBAAiB;AAAA,EAE9B;AAAA,EAEjB,YAAY,QAA8B,OAAe;AACvD,UAAM,CAAA,GAAI,KAAK;AACf,SAAK,gBAAgB;AAAA,EACvB;AAAA,EAEQ,YACN,SACe;AACf,UAAM,MAAM,QAAQ;AACpB,QAAI,CAAC,KAAK;AACR,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAGJ;AACA,WAAO,WAAW,GAAG;AAAA,EACvB;AAAA,EAEQ,QAAQ,SAA6D;AAC3E,WACE,QAAQ,cAAc,OAAO,KAAK,cAAc,OAAO;AAAA,EAE3D;AAAA;AAAA,EAGQ,aACN,SACA,QACA,aACA,eACA,sBACQ;AACR,UAAM,SAAS,KAAK;AACpB,UAAM,eAAe,QAAQ;AAC7B,UAAM,MAAM,OAAO,oBAAoB;AAEvC,UAAM,OAAsB;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,KAAK,KAAK;AAAA,IAAA;AAGd,QAAI,OAAO,mBAAmB,MAAO,MAAK,KAAK,4BAA4B;AAC3E,QAAI,WAAW,OAAW,MAAK,KAAK,YAAY,EAAE,MAAM,CAAC;AAGzD,UAAM,iBACJ,cAAc,kBACd,OAAO,kBACP,YAAY,kBACZ;AACF,SAAK,KAAK,qBAAqB,EAAE,cAAc,CAAC;AAEhD,UAAM,WAAW,cAAc,YAAY,OAAO;AAClD,QAAI,aAAa,OAAW,MAAK,KAAK,eAAe,OAAO,QAAQ,CAAC;AAErE,eAAW,OAAO,OAAO,WAAW,CAAA,QAAS,KAAK,aAAa,EAAE,GAAG,CAAC;AAErE,UAAM,eAAe;AAAA,MACnB,GAAI,cAAc,gBAAgB,OAAO,gBAAgB,CAAA;AAAA,MACzD,GAAG,YAAY;AAAA,IAAA;AAEjB,QAAI,aAAa,SAAS,GAAG;AAC3B,WAAK,KAAK,kBAAkB,EAAE,CAAC,GAAG,IAAI,IAAI,YAAY,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;AAAA,IACrE;AACA,UAAM,kBAAkB;AAAA,MACtB,GAAI,cAAc,mBAAmB,OAAO,mBAAmB,CAAA;AAAA,MAC/D,GAAG,YAAY;AAAA,IAAA;AAEjB,QAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAK,KAAK,qBAAqB,EAAE,CAAC,GAAG,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;AAAA,IAC3E;AAEA,UAAM,gBAAgB,uBAAuB,QAAQ,aAAa,EAC/D,IAAI,CAAC,WAAW,OAAO,OAAO,EAC9B,OAAO,CAAC,YAAY,QAAQ,KAAA,MAAW,EAAE;AAC5C,QAAI,cAAc,SAAS,GAAG;AAC5B,YAAM,SAAS,cAAc,KAAK,MAAM;AACxC,YAAM,OACJ,OAAO,qBAAqB,YACxB,oBACA;AACN,WAAK,KAAK,MAAM,EAAE,MAAM,CAAC;AAAA,IAC3B;AAEA,QAAI,kBAAkB,OAAW,MAAK,KAAK,gBAAgB,EAAE,aAAa,CAAC;AAC3E,QAAI,yBAAyB,QAAW;AACtC,WAAK,KAAK,4BAA4B,EAAE,oBAAoB,CAAC;AAAA,IAC/D;AAEA,WAAO,GAAG,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,wBACN,QACA,WACA,SACA,MACA,UACA,OAC0E;AAC1E,UAAM,iCAAiB,IAAI,CAAC,SAAS,QAAQ,aAAa,cAAc,CAAC;AACzE,UAAM,eAAe,oBAAI,IAAI,CAAC,YAAY,WAAW,CAAC;AACtD,WAAO,CAAC,YAAY;AAClB,YAAM,WAAW,QAAQ,aAAa;AACtC,YAAM,WAAW,QAAQ;AACzB,YAAM,UACJ,aAAa,UACb,aAAa,QACb,OAAO,aAAa,YACpB,aAAa,YACb,OAAQ,SAAmC,YAAY,WAClD,SAAiC,UAClC;AACN,YAAM,aAAa,WAAW,IAAI,QAAQ,IACtC,cACA,aAAa,IAAI,QAAQ,IACvB,YACA;AACN,YAAM,KAAK,WAAW;AAAA,QACpB,UAAU;AAAA,QACV,MAAM,YAAY,SAAY,YAAa,cAAc;AAAA,QACzD,QAAQ,WAAW;AAAA,MAAA,CACpB;AACD,YAAM,UAAU,gBAAgB;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,YAAY,SAAY,EAAE,QAAA,IAAY,CAAA;AAAA,QAC1C,GAAI,eAAe,SAAY,EAAE,eAAe,CAAA;AAAA,MAAC,CAClD;AACD,UAAI,QAAQ,eAAe;AACzB,aAAK;AAAA,UACH,4BAA4B;AAAA,YAC1B,YAAY;AAAA,YACZ,OAAO,WAAW,QAAQ,GAAG,YAAY,SAAY,KAAK,OAAO,KAAK,EAAE;AAAA,YACxE;AAAA,YACA;AAAA,YACA,QAAQ,EAAE,UAAU,eAAe,SAAA;AAAA,UAAS,CAC7C;AAAA,QAAA;AAEH,eAAO;AAAA,UACL,UAAU;AAAA,UACV,SACE;AAAA,QAAA;AAAA,MAEN;AACA,aAAO,QAAQ,aAAa,UACxB,EAAE,UAAU,QAAA,IACZ,EAAE,UAAU,QAAQ,SAAS,4BAAA;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,OAAO,WACL,SAC4B;AAC5B,UAAM,EAAE,WAAW;AACnB,QAAI;AACJ,QAAI;AACJ,UAAM,mBAAuC,CAAA;AAI7C,QAAI;AACJ,UAAM,YAA2B,CAAA;AACjC,QAAI;AACF,YAAM,UAAU,KAAK,YAAY,OAAO;AACxC,uBAAiB;AACjB,YAAM,MAAM,KAAK,QAAQ,OAAO;AAChC,YAAM,QAAQ,QAAQ,SAAS,KAAK,WAAA;AACpC,YAAM,WAAW,QAAQ,YAAY,KAAK,WAAA;AAG1C,gBAAU,yBAAyB,EAAE,OAAO,KAAK,OAAO,UAAU,OAAO;AAIzE,YAAM,aAAa,QAAQ,eACvB,uBAAuB,QAAQ,cAAc,EAAE,UAAU,KAAA,CAAM,IAC/D;AACJ,UAAI,WAAY,OAAM,uBAAuB,SAAS,UAAU;AAEhE,YAAM,SAAS,QAAQ,eACnB,iBAAiB,QAAQ,cAAc,EAAE,UAAU,KAAA,CAAM,IACzD;AAIJ,YAAM,aACJ,WAAW,SACP;AAAA,QACE,UAAU;AAAA,QACV,SAAS,KAAK;AAAA,UACZ;AAAA,UACA,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,QAAA;AAAA,MACF,IAEF;AAIN,YAAM,WAAW,QAAQ,UAAU,UAAa,QAAQ,MAAM,SAAS;AACvE,UAAI,YAAY,eAAe,QAAW;AACxC,cAAM,eACH,QAAQ,eACL,yBAAyB,QAAQ,cAAc,EAAE,UAAU,KAAA,CAAM,IACjE,WAAc;AACpB,iBAAS,MAAM,YAAY,UAAU,QAAQ,SAAS,CAAA,GAAI;AAAA,UACxD,UAAU,QAAQ;AAAA,UAClB,SAAS,QAAQ;AAAA,UACjB,iBAAiB,QAAQ;AAAA,UACzB,GAAI,eAAe,SAAY,EAAE,WAAA,IAAe,CAAA;AAAA,UAChD,GAAI,QAAQ,iBAAiB,SACzB,EAAE,QAAQ,QAAQ,gBAAgB,WAClC,CAAA;AAAA,QAAC,CACN;AAAA,MACH;AAEA,YAAM,EAAE,QAAQ,OAAA,IAAW;AAAA,QACzB,QAAQ;AAAA,QACR,QAAQ,cAAc;AAAA,MAAA;AAKxB,UAAI;AACJ,UAAI,QAAQ;AAOV,cAAM,gBAAgB,wBAAwB,KAAK;AACnD,cAAM,gBAAgB,GAAG,GAAG,IAAI,aAAa;AAC7C,cAAM,QAAQ,GAAG,MAAM,eAAe,kBAAkB,MAAM,CAAC;AAC/D,kBAAU,KAAK,aAAa;AAC5B,uBAAe;AAAA,MACjB;AACA,YAAM,UAAU,KAAK;AAAA,QACnB;AAAA,QACA;AAAA,QACA,uBAAuB,MAAM;AAAA,QAC7B;AAAA,QACA,UAAU,aACN,QAAQ,OAAO,IAAI,KAAK,WAAW,QAAQ,KAC3C;AAAA,MAAA;AAON,UAAI,aAAa;AACjB,UAAI,aAAiC;AACrC,UAAI,QAAQ,aAAa,kBAAkB,OAAO;AAChD,cAAM,aAAa,+BAA+B,KAAK;AACvD,cAAM,QAAQ,GAAG,MAAM,YAAY,MAAM;AACzC,kBAAU,KAAK,UAAU;AACzB,qBAAa,GAAG,OAAO,MAAM,EAAE,UAAU,CAAC;AAC1C,qBAAa;AAAA,MACf;AAEA,aAAO;AAAA,QACL,4CAA4C,KAAK,KAAK,YAAY,QAAQ,QAAQ,aAAa,QAAQ,SAAS,MAAM,WAAW,UAAU,MAAM;AAAA,QACjJ,EAAE,UAAU,eAAe,OAAO,KAAK,MAAA;AAAA,MAAM;AAG/C,YAAM,YAAY,YAAY,SAAS,YAAY;AAAA,QACjD;AAAA,QACA,GAAI,eAAe,SAAY,EAAE,OAAO,WAAA,IAAe,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAOvD,KAAK,EAAE,YAAY,KAAK,GAAG,KAAK,cAAc,IAAA;AAAA,QAC9C,GAAI,QAAQ,iBAAiB,SACzB,EAAE,QAAQ,QAAQ,gBAAgB,OAAA,IAClC,QAAQ,SAAS,SACf,EAAE,QAAQ,QAAQ,QAAQ,OAAA,IAC1B,CAAA;AAAA,QACN,eAAe,CAAC,SACd,OAAO,SAAS,uCAAuC,IAAI,IAAI;AAAA,UAC7D,OAAO;AAAA,QAAA,CACR;AAAA,MAAA,CACJ;AAED,sBAAgB,aAA6C;AAC3D,yBAAiB,SAAS,UAAW,OAAM;AAAA,MAC7C;AAEA,aAAO;AAAA,QACL,mBAAmB,cAAc;AAAA,UAC/B,OAAO,KAAK;AAAA,UACZ;AAAA,UACA;AAAA,UACA,GAAI,QAAQ,gBAAgB,UAAa;AAAA,YACvC,aAAa,QAAQ;AAAA,UAAA;AAAA,UAEvB,OAAO,MAAM,KAAK,WAAA;AAAA,UAClB,cAAc,CAAC,YACb,OAAO,SAAS,6BAA6B,QAAQ,IAAI,IAAI;AAAA,YAC3D,OAAO;AAAA,UAAA,CACR;AAAA,QAAA,CACJ;AAAA,QACD,QAAQ;AAAA,MAAA;AAIV,UAAI,KAAK,cAAc,aAAa,OAAO;AACzC,YAAI;AACF,gBAAM,OAAO,MAAM,QAAQ,QAAQ,KAAK,UAAU,EAAE,GAAG,CAAC,SAAS;AAAA,YAC/D;AAAA,UAAA,CACD;AACD,cAAI,KAAK,aAAa,KAAK,KAAK,OAAO,KAAA,MAAW,IAAI;AACpD,kBAAM;AAAA,cACJ,MAAM,UAAU;AAAA,cAChB,MAAM;AAAA,cACN,OAAO,EAAE,MAAM,KAAK,MAAM,KAAK,OAAA;AAAA,cAC/B,WAAW,KAAK,IAAA;AAAA,cAChB;AAAA,cACA;AAAA,YAAA;AAAA,UAEJ;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAIA,iBAAW,SAAS,iBAAkB,OAAM;AAAA,IAC9C,SAAS,OAAgB;AACvB,YAAM,MAAM;AACZ,YAAM,WAAW,mBAAmB,KAAK;AACzC,aAAO,OAAO,gCAAgC;AAAA,QAC5C;AAAA,QACA,QAAQ;AAAA,MAAA,CACT;AACD,YAAM;AAAA,QACJ,MAAM,UAAU;AAAA,QAChB,OAAO,QAAQ;AAAA,QACf,WAAW,KAAK,IAAA;AAAA,QAChB,SAAS,IAAI,WAAW;AAAA,QACxB,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAA;AAAA,QAC1C,GAAI,aAAa,UAAa,EAAE,SAAA;AAAA,QAChC,OAAO;AAAA,UACL,SAAS,IAAI,WAAW;AAAA,UACxB,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAA;AAAA,QAAK;AAAA,MACjD;AAAA,IAEJ,UAAA;AACE,eAAS,MAAA;AACT,UAAI,OAAQ,OAAM,OAAO,MAAA;AAGzB,UAAI,gBAAgB;AAClB,mBAAW,QAAQ,WAAW;AAC5B,cAAI;AACF,kBAAM,eAAe,GAAG,OAAO,IAAI;AAAA,UACrC,QAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,iBACE,UAC0C;AAC1C,WAAO,QAAQ;AAAA,MACb,IAAI;AAAA,QACF;AAAA,MAAA;AAAA,IAEF;AAAA,EAEJ;AACF;AAeO,SAAS,eACd,OACA,SAA+B,IACA;AAC/B,SAAO,IAAI,sBAAsB,QAAQ,KAAK;AAChD;"}
+{"version":3,"file":"text.js","names":[],"sources":["../../../src/adapters/text.ts"],"sourcesContent":["import { EventType, normalizeSystemPrompts } from '@tanstack/ai'\nimport { toRunErrorRawEvent } from '@tanstack/ai/adapter-internals'\nimport { BaseTextAdapter } from '@tanstack/ai/adapters'\nimport {\n  SandboxCapability,\n  alignedIfAttaching,\n  approvalId,\n  buildApprovalRequestedEvent,\n  createBridgeEventChannel,\n  createRunScopedIdGen,\n  encodeRunId,\n  getSandbox,\n  getSandboxDurability,\n  getSandboxPolicy,\n  getToolBridgeProvisioner,\n  getWorkspaceProjection,\n  journalOptionsFor,\n  mergeChunkStreams,\n  nodeHttpBridgeProvisioner,\n  resolveApproval,\n  resolveDurableRunId,\n  resolveDurableThreadId,\n  spawnNdjson,\n} from '@tanstack/ai-sandbox'\nimport { buildPrompt } from '../messages/prompt'\nimport { translateSdkStream } from '../stream/translate'\nimport { mapPolicyToClaudeFlags } from './policy-map'\nimport { projectClaudeWorkspace } from './projection'\nimport type { ClaudePolicyFlags } from './policy-map'\nimport type {\n  BridgeEventChannel,\n  HostToolBridge,\n  PermissionToolResult,\n  SandboxHandle,\n  SandboxPolicy,\n} from '@tanstack/ai-sandbox'\nimport type {\n  StructuredOutputOptions,\n  StructuredOutputResult,\n} from '@tanstack/ai/adapters'\nimport type {\n  DefaultMessageMetadataByModality,\n  Modality,\n  StreamChunk,\n  TextOptions,\n} from '@tanstack/ai'\nimport type { ClaudeCodeModel } from '../model-meta'\nimport type { ClaudeCodeTextProviderOptions } from '../provider-options'\nimport type { AgentSdkMessage } from '../stream/sdk-types'\n\nexport type ClaudeCodePermissionMode =\n  | 'default'\n  | 'acceptEdits'\n  | 'bypassPermissions'\n  | 'plan'\n\nconst DEFAULT_WORKDIR = '/workspace'\n\nexport interface ClaudeCodeTextConfig {\n  /**\n   * Working directory inside the sandbox where `claude` runs. Defaults to\n   * `/workspace` (the conventional sandbox workspace root).\n   */\n  cwd?: string\n  /**\n   * Claude Code permission mode passed via `--permission-mode`. Defaults to\n   * `'bypassPermissions'` — a sandbox is isolated, so the agent is allowed to\n   * edit files and run commands without prompting. Tighten via `defineSandboxPolicy`\n   * / this option for less autonomy.\n   */\n  permissionMode?: ClaudeCodePermissionMode\n  /** Built-in tools the harness may use (`--allowedTools`). */\n  allowedTools?: Array<string>\n  /** Built-in tools removed from the harness (`--disallowedTools`). */\n  disallowedTools?: Array<string>\n  /** Extra directories the agent may access (`--add-dir`). */\n  addDirs?: Array<string>\n  /** Maximum harness-internal turns (`--max-turns`). */\n  maxTurns?: number\n  /**\n   * How `systemPrompts` from `chat()` are applied:\n   * - `'append'` (default): `--append-system-prompt` on top of the preset.\n   * - `'replace'`: `--system-prompt` as the entire system prompt.\n   */\n  systemPromptMode?: 'append' | 'replace'\n  /** Path/name of the claude executable inside the sandbox. Defaults to `claude`. */\n  claudeExecutable?: string\n  /** Emit token-level deltas via `--include-partial-messages` (default true). */\n  streamPartials?: boolean\n  /** Extra environment variables for the claude process inside the sandbox. */\n  env?: Record<string, string>\n  /** Emit a `file.changed` CUSTOM event with the git diff after the run (default true). */\n  emitDiff?: boolean\n}\n\n/** POSIX single-quote escape for embedding values in the `claude …` command. */\nfunction q(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`\n}\n\n/** Format a host tool-bridge as claude's `--mcp-config` JSON. */\nfunction bridgeToMcpConfig(bridge: HostToolBridge): string {\n  return JSON.stringify({\n    mcpServers: {\n      [bridge.name]: {\n        type: 'http',\n        url: bridge.url,\n        headers: { Authorization: `Bearer ${bridge.token}` },\n      },\n    },\n  })\n}\n\nexport class ClaudeCodeTextAdapter<\n  TModel extends ClaudeCodeModel,\n> extends BaseTextAdapter<\n  TModel,\n  ClaudeCodeTextProviderOptions,\n  ReadonlyArray<Modality> & readonly ['text'],\n  DefaultMessageMetadataByModality,\n  ReadonlyArray<string>,\n  unknown,\n  never\n> {\n  readonly name = 'claude-code' as const\n\n  // Harness adapter: requires a sandbox to run the agent CLI inside.\n  override readonly requires = [SandboxCapability] as const\n\n  private readonly adapterConfig: ClaudeCodeTextConfig\n\n  constructor(config: ClaudeCodeTextConfig, model: TModel) {\n    super({}, model)\n    this.adapterConfig = config\n  }\n\n  private sandboxFrom(\n    options: TextOptions<ClaudeCodeTextProviderOptions>,\n  ): SandboxHandle {\n    const ctx = options.capabilities\n    if (!ctx) {\n      throw new Error(\n        'Adapter \"claude-code\" requires a sandbox. Add withSandbox(defineSandbox({ ... })) ' +\n          'to chat() middleware (e.g. with the local-process or docker provider).',\n      )\n    }\n    return getSandbox(ctx)\n  }\n\n  private workdir(options: TextOptions<ClaudeCodeTextProviderOptions>): string {\n    return (\n      options.modelOptions?.cwd ?? this.adapterConfig.cwd ?? DEFAULT_WORKDIR\n    )\n  }\n\n  /** Build the `claude` command line (prompt goes via stdin, not argv). */\n  private buildCommand(\n    options: TextOptions<ClaudeCodeTextProviderOptions>,\n    resume: string | undefined,\n    policyFlags: ClaudePolicyFlags,\n    mcpConfigPath: string | undefined,\n    permissionPromptTool: string | undefined,\n  ): string {\n    const config = this.adapterConfig\n    const modelOptions = options.modelOptions\n    const exe = config.claudeExecutable ?? 'claude'\n\n    const args: Array<string> = [\n      '-p',\n      '--output-format',\n      'stream-json',\n      '--verbose',\n      '--model',\n      q(this.model),\n    ]\n\n    if (config.streamPartials !== false) args.push('--include-partial-messages')\n    if (resume !== undefined) args.push('--resume', q(resume))\n\n    // Precedence: per-call modelOptions > adapter config > policy > sandbox default.\n    const permissionMode =\n      modelOptions?.permissionMode ??\n      config.permissionMode ??\n      policyFlags.permissionMode ??\n      'bypassPermissions'\n    args.push('--permission-mode', q(permissionMode))\n\n    const maxTurns = modelOptions?.maxTurns ?? config.maxTurns\n    if (maxTurns !== undefined) args.push('--max-turns', String(maxTurns))\n\n    for (const dir of config.addDirs ?? []) args.push('--add-dir', q(dir))\n\n    const allowedTools = [\n      ...(modelOptions?.allowedTools ?? config.allowedTools ?? []),\n      ...policyFlags.allowedTools,\n    ]\n    if (allowedTools.length > 0) {\n      args.push('--allowedTools', q([...new Set(allowedTools)].join(',')))\n    }\n    const disallowedTools = [\n      ...(modelOptions?.disallowedTools ?? config.disallowedTools ?? []),\n      ...policyFlags.disallowedTools,\n    ]\n    if (disallowedTools.length > 0) {\n      args.push('--disallowedTools', q([...new Set(disallowedTools)].join(',')))\n    }\n\n    const systemPrompts = normalizeSystemPrompts(options.systemPrompts)\n      .map((prompt) => prompt.content)\n      .filter((content) => content.trim() !== '')\n    if (systemPrompts.length > 0) {\n      const joined = systemPrompts.join('\\n\\n')\n      const flag =\n        config.systemPromptMode === 'replace'\n          ? '--system-prompt'\n          : '--append-system-prompt'\n      args.push(flag, q(joined))\n    }\n\n    if (mcpConfigPath !== undefined) args.push('--mcp-config', q(mcpConfigPath))\n    if (permissionPromptTool !== undefined) {\n      args.push('--permission-prompt-tool', q(permissionPromptTool))\n    }\n\n    return `${exe} ${args.join(' ')}`\n  }\n\n  /**\n   * Build the permission-prompt resolver the host MCP bridge exposes to claude\n   * (`--permission-prompt-tool`). Maps claude's permission request onto the\n   * sandbox policy + client approvals; on an `ask` action with no decision yet,\n   * records an approval-requested event and denies (the client re-runs to grant).\n   */\n  private buildPermissionResolver(\n    policy: SandboxPolicy | undefined,\n    approvals: ReadonlyMap<string, boolean> | undefined,\n    scripts: Record<string, string> | undefined,\n    sink: Array<StreamChunk>,\n    threadId: string,\n    runId: string,\n  ): (input: { tool_name?: string; input?: unknown }) => PermissionToolResult {\n    const writeTools = new Set(['Write', 'Edit', 'MultiEdit', 'NotebookEdit'])\n    const networkTools = new Set(['WebFetch', 'WebSearch'])\n    return (request) => {\n      const toolName = request.tool_name ?? 'tool'\n      const cmdInput = request.input\n      const command =\n        toolName === 'Bash' &&\n        cmdInput !== null &&\n        typeof cmdInput === 'object' &&\n        'command' in cmdInput &&\n        typeof (cmdInput as { command?: unknown }).command === 'string'\n          ? (cmdInput as { command: string }).command\n          : undefined\n      const capability = writeTools.has(toolName)\n        ? 'fileWrite'\n        : networkTools.has(toolName)\n          ? 'network'\n          : undefined\n      const id = approvalId({\n        provider: 'claude-code',\n        kind: command !== undefined ? 'command' : (capability ?? 'tool'),\n        target: command ?? toolName,\n      })\n      const outcome = resolveApproval({\n        policy,\n        approvals,\n        id,\n        scripts,\n        ...(command !== undefined ? { command } : {}),\n        ...(capability !== undefined ? { capability } : {}),\n      })\n      if (outcome.needsApproval) {\n        sink.push(\n          buildApprovalRequestedEvent({\n            approvalId: id,\n            title: `Approve ${toolName}${command !== undefined ? `: ${command}` : ''}`,\n            threadId,\n            runId,\n            detail: { provider: 'claude-code', toolName },\n          }),\n        )\n        return {\n          behavior: 'deny',\n          message:\n            'Awaiting client approval. Approve in the UI and re-run to continue.',\n        }\n      }\n      return outcome.decision === 'allow'\n        ? { behavior: 'allow' }\n        : { behavior: 'deny', message: 'Denied by sandbox policy.' }\n    }\n  }\n\n  async *chatStream(\n    options: TextOptions<ClaudeCodeTextProviderOptions>,\n  ): AsyncIterable<StreamChunk> {\n    const { logger } = options\n    let bridge: HostToolBridge | undefined\n    let channel: BridgeEventChannel | undefined\n    const approvalRequests: Array<StreamChunk> = []\n    // Temp files written for the run (bridge MCP config, redirected prompt) that\n    // carry the bearer token / prompt; removed in `finally` so they don't linger\n    // in the sandbox after the run.\n    let cleanupSandbox: SandboxHandle | undefined\n    const tempFiles: Array<string> = []\n    try {\n      const sandbox = this.sandboxFrom(options)\n      cleanupSandbox = sandbox\n      const cwd = this.workdir(options)\n      // Durability comes from `withSandbox(sandbox, { runs, durability })`, read\n      // back off the capability bus. Absent it, everything below resolves to\n      // exactly today's behavior (no journal option, no alignment, and a\n      // generated `runId` when the caller didn't supply one).\n      const durability = options.capabilities\n        ? getSandboxDurability(options.capabilities, { optional: true })\n        : undefined\n      // The journaled path below derives its journal path and its\n      // message-id generator from `runId`. A resuming host must recompute\n      // the same `runId` to find the same journal file and reproduce the\n      // same translated ids — that's only possible when the caller supplies\n      // `runId` explicitly. `resolveDurableRunId` enforces that loudly (via\n      // `DurableRunIdRequiredError`) whenever durability is wired, and falls\n      // back to a fresh `this.generateId()` otherwise, preserving today's\n      // behavior for non-durable runs.\n      const runId = resolveDurableRunId(options.runId, {\n        durable: durability !== undefined,\n        adapter: 'claude-code',\n        fallback: () => this.generateId(),\n      })\n      // `threadId` is stamped on every chunk `translateSdkStream` emits, so an\n      // ATTACHING run that mints a fresh one replays a stream the stored log\n      // cannot match at index 0. `resolveDurableThreadId` refuses that up front\n      // instead of letting alignment discover it mid-stream; a durable FRESH run\n      // and a non-durable run both keep the generated fallback untouched.\n      const threadId = resolveDurableThreadId(options.threadId, {\n        durable: durability !== undefined,\n        attaching: durability?.attach === true,\n        adapter: 'claude-code',\n        fallback: () => this.generateId(),\n      })\n      // Surfaces custom events from bridged tools (e.g. code mode console logs)\n      // on this run's live output stream.\n      channel = createBridgeEventChannel({ model: this.model, threadId, runId })\n\n      // Idempotently project workspace skills/plugins/MCP into the sandbox in\n      // claude's native format (guarded by the projection marker file).\n      const projection = options.capabilities\n        ? getWorkspaceProjection(options.capabilities, { optional: true })\n        : undefined\n      if (projection) await projectClaudeWorkspace(sandbox, projection)\n\n      const policy = options.capabilities\n        ? getSandboxPolicy(options.capabilities, { optional: true })\n        : undefined\n\n      // A permission-prompt tool gates the agent's native tools when a policy\n      // can `ask`/`deny` (interactive approvals).\n      const permission =\n        policy !== undefined\n          ? {\n              toolName: 'approval_prompt',\n              resolve: this.buildPermissionResolver(\n                policy,\n                options.approvals,\n                projection?.scripts,\n                approvalRequests,\n                threadId,\n                runId,\n              ),\n            }\n          : undefined\n\n      // Bridge chat()-provided server tools (and/or the permission tool) into\n      // the sandbox over MCP.\n      const hasTools = options.tools !== undefined && options.tools.length > 0\n      if (hasTools || permission !== undefined) {\n        const provisioner =\n          (options.capabilities\n            ? getToolBridgeProvisioner(options.capabilities, { optional: true })\n            : undefined) ?? nodeHttpBridgeProvisioner\n        bridge = await provisioner.provision(options.tools ?? [], {\n          provider: sandbox.provider,\n          context: options.context,\n          emitCustomEvent: channel.emitCustomEvent,\n          ...(permission !== undefined ? { permission } : {}),\n          ...(options.abortController?.signal\n            ? { signal: options.abortController.signal }\n            : {}),\n        })\n      }\n\n      const { prompt, resume } = buildPrompt(\n        options.messages,\n        options.modelOptions?.sessionId,\n      )\n      // Both files below name themselves after `runId`, and durability makes\n      // `runId` CALLER-chosen. Raw, a `/` in it would silently turn each basename\n      // into a nested path (writing outside the intended directory, or failing on\n      // one that does not exist), `..` would climb out of that directory, and a\n      // long id would fail the spawn with `ENAMETOOLONG`. `encodeRunId` collapses\n      // any id to one bounded, injective path segment — the same encoder\n      // `journalPaths` uses, so these files and the journal agree on how a given\n      // id spells. Computed once so the two filenames cannot drift apart.\n      const runIdSegment = encodeRunId(runId)\n\n      // The bridge MCP config carries the per-run bearer token. Write it to a\n      // file and pass claude the PATH, so the token never appears in argv (where\n      // any process in the sandbox could read it via `ps` / `/proc/<pid>/cmdline`).\n      let mcpConfigArg: string | undefined\n      if (bridge) {\n        // Pass claude a path RELATIVE to its cwd (the real workdir the handle\n        // runs the process in). An absolute VIRTUAL path like `/workspace/…` is\n        // wrong wherever claude runs outside a sandbox that literally uses\n        // `/workspace` — e.g. local-process on Windows, where git-bash resolves\n        // `/workspace` to `C:\\Program Files\\Git\\workspace` and the file is \"not\n        // found\". The bare filename resolves correctly on every provider.\n        const mcpConfigFile = `.tanstack-mcp-bridge-${runIdSegment}.json`\n        const mcpConfigPath = `${cwd}/${mcpConfigFile}`\n        await sandbox.fs.write(mcpConfigPath, bridgeToMcpConfig(bridge))\n        tempFiles.push(mcpConfigPath)\n        mcpConfigArg = mcpConfigFile\n      }\n      const command = this.buildCommand(\n        options,\n        resume,\n        mapPolicyToClaudeFlags(policy),\n        mcpConfigArg,\n        bridge && permission\n          ? `mcp__${bridge.name}__${permission.toolName}`\n          : undefined,\n      )\n\n      // Deliver the prompt. The default feeds it over stdin (keeps it out of\n      // argv). Providers without a writable host→process stdin (e.g. Cloudflare)\n      // can't accept that write, so write the prompt to a file and redirect the\n      // CLI's stdin from it in-shell (`claude -p … < file`) — still out of argv.\n      let runCommand = command\n      let stdinInput: string | undefined = prompt\n      if (sandbox.capabilities.writableStdin === false) {\n        const promptPath = `/tmp/tanstack-claude-prompt-${runIdSegment}`\n        await sandbox.fs.write(promptPath, prompt)\n        tempFiles.push(promptPath)\n        runCommand = `${command} < ${q(promptPath)}`\n        stdinInput = undefined\n      }\n\n      logger.request(\n        `activity=chat provider=claude-code model=${this.model} sandbox=${sandbox.provider} messages=${options.messages.length} resume=${resume ?? 'none'}`,\n        { provider: 'claude-code', model: this.model },\n      )\n\n      const journalOptions = journalOptionsFor(durability, runId)\n      const rawEvents = spawnNdjson(sandbox, runCommand, {\n        cwd,\n        ...(stdinInput !== undefined ? { input: stdinInput } : {}),\n        // claude maps `bypassPermissions` to `--dangerously-skip-permissions`,\n        // which it refuses to run as root. Sandbox containers routinely run as\n        // root (Docker / Cloudflare), so set `IS_SANDBOX=1` — claude's\n        // documented escape hatch for skip-permissions in an isolated\n        // environment — merged over the sandbox env (a caller-provided value\n        // wins). Safe to set unconditionally; it is a no-op for stricter modes.\n        env: { IS_SANDBOX: '1', ...this.adapterConfig.env },\n        ...(options.abortController?.signal\n          ? { signal: options.abortController.signal }\n          : options.request?.signal\n            ? { signal: options.request.signal }\n            : {}),\n        onNonJsonLine: (line) =>\n          logger.provider(`provider=claude-code non-json line: ${line}`, {\n            chunk: line,\n          }),\n        // Journal + attach both come from the sandbox durability capability, so\n        // the attach route configures takeover by passing `attach: true` to\n        // `withSandbox` — `chat()` stays free of sandbox vocabulary. Omitted\n        // entirely (not passed as `undefined`) when the run isn't durable, so\n        // `spawnNdjson` takes its original, unjournaled path byte-for-byte.\n        ...(journalOptions === undefined ? {} : { journal: journalOptions }),\n      })\n\n      async function* asMessages(): AsyncIterable<AgentSdkMessage> {\n        for await (const event of rawEvents) yield event as AgentSdkMessage\n      }\n\n      // `mergeChunkStreams` splices `channel.stream` (host-tool-bridge CUSTOM\n      // events from LIVE tool execution) into the deterministic translator\n      // output. Those events do not occur on a replay, so a takeover's replay is\n      // NOT chunk-for-chunk identical to what the log holds. `alignedIfAttaching`\n      // handles it: alignment skips stored out-of-band CUSTOM entries within a\n      // bounded window (see `align.ts`), so a bridged-tool run can be taken over\n      // without a spurious `JournalReplayDivergedError` — while a genuine\n      // determinism regression still throws. The wrap goes OUTSIDE the merge:\n      // the stored log holds the previous host's merged output, so aligning the\n      // pre-merge translated stream alone would compare against a log it never\n      // produced. On a non-attaching run this is a pure passthrough (see\n      // `alignedIfAttaching`'s `attach` guard).\n      yield* alignedIfAttaching(\n        mergeChunkStreams(\n          translateSdkStream(asMessages(), {\n            model: this.model,\n            runId,\n            threadId,\n            ...(options.parentRunId !== undefined && {\n              parentRunId: options.parentRunId,\n            }),\n            // Deterministic on the journaled path: two translations of the same\n            // journal prefix from a fresh generator seeded with the same\n            // `runId` mint the same message ids (unlike `this.generateId()`,\n            // which mixes in `Date.now()` / `Math.random()`). See\n            // `createRunScopedIdGen` in `@tanstack/ai-sandbox`.\n            genId: createRunScopedIdGen(runId),\n            onSdkMessage: (message) =>\n              logger.provider(`provider=claude-code type=${message.type}`, {\n                chunk: message,\n              }),\n          }),\n          channel.stream,\n        ),\n        durability,\n        logger,\n      )\n\n      // Surface the working-tree diff so UIs can render what the agent changed.\n      if (this.adapterConfig.emitDiff !== false) {\n        try {\n          const diff = await sandbox.process.exec(`git -C ${q(cwd)} diff`, {\n            cwd,\n          })\n          if (diff.exitCode === 0 && diff.stdout.trim() !== '') {\n            yield {\n              type: EventType.CUSTOM,\n              name: 'file.changed',\n              value: { path: '.', diff: diff.stdout },\n              timestamp: Date.now(),\n              threadId,\n              runId,\n            }\n          }\n        } catch {\n          // not a git repo / git unavailable — skip the diff event\n        }\n      }\n\n      // Surface any pending approval requests (policy `ask` actions awaiting a\n      // client decision); the client approves and re-runs to continue.\n      for (const event of approvalRequests) yield event\n    } catch (error: unknown) {\n      const err = error as Error & { code?: string }\n      const rawEvent = toRunErrorRawEvent(error)\n      logger.errors('claude-code.chatStream fatal', {\n        error,\n        source: 'claude-code.chatStream',\n      })\n      yield {\n        type: EventType.RUN_ERROR,\n        model: options.model,\n        timestamp: Date.now(),\n        message: err.message || 'Unknown error occurred',\n        ...(err.code !== undefined && { code: err.code }),\n        ...(rawEvent !== undefined && { rawEvent }),\n        error: {\n          message: err.message || 'Unknown error occurred',\n          ...(err.code !== undefined && { code: err.code }),\n        },\n      }\n    } finally {\n      channel?.close()\n      if (bridge) await bridge.close()\n      // Remove the per-run token/prompt files. Best-effort: a cleanup failure\n      // must not mask the run's own outcome.\n      if (cleanupSandbox) {\n        for (const path of tempFiles) {\n          try {\n            await cleanupSandbox.fs.remove(path)\n          } catch {\n            // file already gone / sandbox torn down — nothing to clean up\n          }\n        }\n      }\n    }\n  }\n\n  structuredOutput(\n    _options: StructuredOutputOptions<ClaudeCodeTextProviderOptions>,\n  ): Promise<StructuredOutputResult<unknown>> {\n    return Promise.reject(\n      new Error(\n        'Structured output is not yet supported by the in-sandbox Claude Code adapter. ' +\n          'Use a model adapter (e.g. anthropic) for structured output, or omit outputSchema.',\n      ),\n    )\n  }\n}\n\n/**\n * Creates a Claude Code harness adapter that runs **inside a sandbox**.\n *\n * Unlike HTTP provider adapters, this is a *harness* adapter: it spawns the\n * `claude` CLI inside the sandbox provided by `withSandbox(...)` (the adapter\n * declares `requires: [SandboxCapability]`), streams its `stream-json` stdout\n * back as AG-UI events, and lets Claude Code run its own agent loop and native\n * tools (Bash, file edits, search, …) against the sandbox workspace. The\n * sandbox image must provide the `claude` executable and `ANTHROPIC_API_KEY`\n * in its environment (e.g. via `workspace.secrets`). The session id is\n * surfaced via a CUSTOM `claude-code.session-id` event so follow-up calls can\n * resume through `modelOptions.sessionId`.\n */\nexport function claudeCodeText<TModel extends ClaudeCodeModel>(\n  model: TModel,\n  config: ClaudeCodeTextConfig = {},\n): ClaudeCodeTextAdapter<TModel> {\n  return new ClaudeCodeTextAdapter(config, model)\n}\n"],"mappings":";;;;;;;;;AAwDA,IAAM,kBAAkB;;AAwCxB,SAAS,EAAE,OAAuB;CAChC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;;AAGA,SAAS,kBAAkB,QAAgC;CACzD,OAAO,KAAK,UAAU,EACpB,YAAY,GACT,OAAO,OAAO;EACb,MAAM;EACN,KAAK,OAAO;EACZ,SAAS,EAAE,eAAe,UAAU,OAAO,QAAQ;CACrD,EACF,EACF,CAAC;AACH;AAEA,IAAa,wBAAb,cAEU,gBAQR;CACA,OAAgB;CAGhB,WAA6B,CAAC,iBAAiB;CAE/C;CAEA,YAAY,QAA8B,OAAe;EACvD,MAAM,CAAC,GAAG,KAAK;EACf,KAAK,gBAAgB;CACvB;CAEA,YACE,SACe;EACf,MAAM,MAAM,QAAQ;EACpB,IAAI,CAAC,KACH,MAAM,IAAI,MACR,4JAEF;EAEF,OAAO,WAAW,GAAG;CACvB;CAEA,QAAgB,SAA6D;EAC3E,OACE,QAAQ,cAAc,OAAO,KAAK,cAAc,OAAO;CAE3D;;CAGA,aACE,SACA,QACA,aACA,eACA,sBACQ;EACR,MAAM,SAAS,KAAK;EACpB,MAAM,eAAe,QAAQ;EAC7B,MAAM,MAAM,OAAO,oBAAoB;EAEvC,MAAM,OAAsB;GAC1B;GACA;GACA;GACA;GACA;GACA,EAAE,KAAK,KAAK;EACd;EAEA,IAAI,OAAO,mBAAmB,OAAO,KAAK,KAAK,4BAA4B;EAC3E,IAAI,WAAW,KAAA,GAAW,KAAK,KAAK,YAAY,EAAE,MAAM,CAAC;EAGzD,MAAM,iBACJ,cAAc,kBACd,OAAO,kBACP,YAAY,kBACZ;EACF,KAAK,KAAK,qBAAqB,EAAE,cAAc,CAAC;EAEhD,MAAM,WAAW,cAAc,YAAY,OAAO;EAClD,IAAI,aAAa,KAAA,GAAW,KAAK,KAAK,eAAe,OAAO,QAAQ,CAAC;EAErE,KAAK,MAAM,OAAO,OAAO,WAAW,CAAC,GAAG,KAAK,KAAK,aAAa,EAAE,GAAG,CAAC;EAErE,MAAM,eAAe,CACnB,GAAI,cAAc,gBAAgB,OAAO,gBAAgB,CAAC,GAC1D,GAAG,YAAY,YACjB;EACA,IAAI,aAAa,SAAS,GACxB,KAAK,KAAK,kBAAkB,EAAE,CAAC,GAAG,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;EAErE,MAAM,kBAAkB,CACtB,GAAI,cAAc,mBAAmB,OAAO,mBAAmB,CAAC,GAChE,GAAG,YAAY,eACjB;EACA,IAAI,gBAAgB,SAAS,GAC3B,KAAK,KAAK,qBAAqB,EAAE,CAAC,GAAG,IAAI,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;EAG3E,MAAM,gBAAgB,uBAAuB,QAAQ,aAAa,CAAC,CAChE,KAAK,WAAW,OAAO,OAAO,CAAC,CAC/B,QAAQ,YAAY,QAAQ,KAAK,MAAM,EAAE;EAC5C,IAAI,cAAc,SAAS,GAAG;GAC5B,MAAM,SAAS,cAAc,KAAK,MAAM;GACxC,MAAM,OACJ,OAAO,qBAAqB,YACxB,oBACA;GACN,KAAK,KAAK,MAAM,EAAE,MAAM,CAAC;EAC3B;EAEA,IAAI,kBAAkB,KAAA,GAAW,KAAK,KAAK,gBAAgB,EAAE,aAAa,CAAC;EAC3E,IAAI,yBAAyB,KAAA,GAC3B,KAAK,KAAK,4BAA4B,EAAE,oBAAoB,CAAC;EAG/D,OAAO,GAAG,IAAI,GAAG,KAAK,KAAK,GAAG;CAChC;;;;;;;CAQA,wBACE,QACA,WACA,SACA,MACA,UACA,OAC0E;EAC1E,MAAM,6BAAa,IAAI,IAAI;GAAC;GAAS;GAAQ;GAAa;EAAc,CAAC;EACzE,MAAM,+BAAe,IAAI,IAAI,CAAC,YAAY,WAAW,CAAC;EACtD,QAAQ,YAAY;GAClB,MAAM,WAAW,QAAQ,aAAa;GACtC,MAAM,WAAW,QAAQ;GACzB,MAAM,UACJ,aAAa,UACb,aAAa,QACb,OAAO,aAAa,YACpB,aAAa,YACb,OAAQ,SAAmC,YAAY,WAClD,SAAiC,UAClC,KAAA;GACN,MAAM,aAAa,WAAW,IAAI,QAAQ,IACtC,cACA,aAAa,IAAI,QAAQ,IACvB,YACA,KAAA;GACN,MAAM,KAAK,WAAW;IACpB,UAAU;IACV,MAAM,YAAY,KAAA,IAAY,YAAa,cAAc;IACzD,QAAQ,WAAW;GACrB,CAAC;GACD,MAAM,UAAU,gBAAgB;IAC9B;IACA;IACA;IACA;IACA,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;IAC3C,GAAI,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC;GACnD,CAAC;GACD,IAAI,QAAQ,eAAe;IACzB,KAAK,KACH,4BAA4B;KAC1B,YAAY;KACZ,OAAO,WAAW,WAAW,YAAY,KAAA,IAAY,KAAK,YAAY;KACtE;KACA;KACA,QAAQ;MAAE,UAAU;MAAe;KAAS;IAC9C,CAAC,CACH;IACA,OAAO;KACL,UAAU;KACV,SACE;IACJ;GACF;GACA,OAAO,QAAQ,aAAa,UACxB,EAAE,UAAU,QAAQ,IACpB;IAAE,UAAU;IAAQ,SAAS;GAA4B;EAC/D;CACF;CAEA,OAAO,WACL,SAC4B;EAC5B,MAAM,EAAE,WAAW;EACnB,IAAI;EACJ,IAAI;EACJ,MAAM,mBAAuC,CAAC;EAI9C,IAAI;EACJ,MAAM,YAA2B,CAAC;EAClC,IAAI;GACF,MAAM,UAAU,KAAK,YAAY,OAAO;GACxC,iBAAiB;GACjB,MAAM,MAAM,KAAK,QAAQ,OAAO;GAKhC,MAAM,aAAa,QAAQ,eACvB,qBAAqB,QAAQ,cAAc,EAAE,UAAU,KAAK,CAAC,IAC7D,KAAA;GASJ,MAAM,QAAQ,oBAAoB,QAAQ,OAAO;IAC/C,SAAS,eAAe,KAAA;IACxB,SAAS;IACT,gBAAgB,KAAK,WAAW;GAClC,CAAC;GAMD,MAAM,WAAW,uBAAuB,QAAQ,UAAU;IACxD,SAAS,eAAe,KAAA;IACxB,WAAW,YAAY,WAAW;IAClC,SAAS;IACT,gBAAgB,KAAK,WAAW;GAClC,CAAC;GAGD,UAAU,yBAAyB;IAAE,OAAO,KAAK;IAAO;IAAU;GAAM,CAAC;GAIzE,MAAM,aAAa,QAAQ,eACvB,uBAAuB,QAAQ,cAAc,EAAE,UAAU,KAAK,CAAC,IAC/D,KAAA;GACJ,IAAI,YAAY,MAAM,uBAAuB,SAAS,UAAU;GAEhE,MAAM,SAAS,QAAQ,eACnB,iBAAiB,QAAQ,cAAc,EAAE,UAAU,KAAK,CAAC,IACzD,KAAA;GAIJ,MAAM,aACJ,WAAW,KAAA,IACP;IACE,UAAU;IACV,SAAS,KAAK,wBACZ,QACA,QAAQ,WACR,YAAY,SACZ,kBACA,UACA,KACF;GACF,IACA,KAAA;GAKN,IADiB,QAAQ,UAAU,KAAA,KAAa,QAAQ,MAAM,SAAS,KACvD,eAAe,KAAA,GAK7B,SAAS,QAHN,QAAQ,eACL,yBAAyB,QAAQ,cAAc,EAAE,UAAU,KAAK,CAAC,IACjE,KAAA,MAAc,0BAAA,CACO,UAAU,QAAQ,SAAS,CAAC,GAAG;IACxD,UAAU,QAAQ;IAClB,SAAS,QAAQ;IACjB,iBAAiB,QAAQ;IACzB,GAAI,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC;IACjD,GAAI,QAAQ,iBAAiB,SACzB,EAAE,QAAQ,QAAQ,gBAAgB,OAAO,IACzC,CAAC;GACP,CAAC;GAGH,MAAM,EAAE,QAAQ,WAAW,YACzB,QAAQ,UACR,QAAQ,cAAc,SACxB;GASA,MAAM,eAAe,YAAY,KAAK;GAKtC,IAAI;GACJ,IAAI,QAAQ;IAOV,MAAM,gBAAgB,wBAAwB,aAAa;IAC3D,MAAM,gBAAgB,GAAG,IAAI,GAAG;IAChC,MAAM,QAAQ,GAAG,MAAM,eAAe,kBAAkB,MAAM,CAAC;IAC/D,UAAU,KAAK,aAAa;IAC5B,eAAe;GACjB;GACA,MAAM,UAAU,KAAK,aACnB,SACA,QACA,uBAAuB,MAAM,GAC7B,cACA,UAAU,aACN,QAAQ,OAAO,KAAK,IAAI,WAAW,aACnC,KAAA,CACN;GAMA,IAAI,aAAa;GACjB,IAAI,aAAiC;GACrC,IAAI,QAAQ,aAAa,kBAAkB,OAAO;IAChD,MAAM,aAAa,+BAA+B;IAClD,MAAM,QAAQ,GAAG,MAAM,YAAY,MAAM;IACzC,UAAU,KAAK,UAAU;IACzB,aAAa,GAAG,QAAQ,KAAK,EAAE,UAAU;IACzC,aAAa,KAAA;GACf;GAEA,OAAO,QACL,4CAA4C,KAAK,MAAM,WAAW,QAAQ,SAAS,YAAY,QAAQ,SAAS,OAAO,UAAU,UAAU,UAC3I;IAAE,UAAU;IAAe,OAAO,KAAK;GAAM,CAC/C;GAEA,MAAM,iBAAiB,kBAAkB,YAAY,KAAK;GAC1D,MAAM,YAAY,YAAY,SAAS,YAAY;IACjD;IACA,GAAI,eAAe,KAAA,IAAY,EAAE,OAAO,WAAW,IAAI,CAAC;IAOxD,KAAK;KAAE,YAAY;KAAK,GAAG,KAAK,cAAc;IAAI;IAClD,GAAI,QAAQ,iBAAiB,SACzB,EAAE,QAAQ,QAAQ,gBAAgB,OAAO,IACzC,QAAQ,SAAS,SACf,EAAE,QAAQ,QAAQ,QAAQ,OAAO,IACjC,CAAC;IACP,gBAAgB,SACd,OAAO,SAAS,uCAAuC,QAAQ,EAC7D,OAAO,KACT,CAAC;IAMH,GAAI,mBAAmB,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,eAAe;GACpE,CAAC;GAED,gBAAgB,aAA6C;IAC3D,WAAW,MAAM,SAAS,WAAW,MAAM;GAC7C;GAcA,OAAO,mBACL,kBACE,mBAAmB,WAAW,GAAG;IAC/B,OAAO,KAAK;IACZ;IACA;IACA,GAAI,QAAQ,gBAAgB,KAAA,KAAa,EACvC,aAAa,QAAQ,YACvB;IAMA,OAAO,qBAAqB,KAAK;IACjC,eAAe,YACb,OAAO,SAAS,6BAA6B,QAAQ,QAAQ,EAC3D,OAAO,QACT,CAAC;GACL,CAAC,GACD,QAAQ,MACV,GACA,YACA,MACF;GAGA,IAAI,KAAK,cAAc,aAAa,OAClC,IAAI;IACF,MAAM,OAAO,MAAM,QAAQ,QAAQ,KAAK,UAAU,EAAE,GAAG,EAAE,QAAQ,EAC/D,IACF,CAAC;IACD,IAAI,KAAK,aAAa,KAAK,KAAK,OAAO,KAAK,MAAM,IAChD,MAAM;KACJ,MAAM,UAAU;KAChB,MAAM;KACN,OAAO;MAAE,MAAM;MAAK,MAAM,KAAK;KAAO;KACtC,WAAW,KAAK,IAAI;KACpB;KACA;IACF;GAEJ,QAAQ,CAER;GAKF,KAAK,MAAM,SAAS,kBAAkB,MAAM;EAC9C,SAAS,OAAgB;GACvB,MAAM,MAAM;GACZ,MAAM,WAAW,mBAAmB,KAAK;GACzC,OAAO,OAAO,gCAAgC;IAC5C;IACA,QAAQ;GACV,CAAC;GACD,MAAM;IACJ,MAAM,UAAU;IAChB,OAAO,QAAQ;IACf,WAAW,KAAK,IAAI;IACpB,SAAS,IAAI,WAAW;IACxB,GAAI,IAAI,SAAS,KAAA,KAAa,EAAE,MAAM,IAAI,KAAK;IAC/C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS;IACzC,OAAO;KACL,SAAS,IAAI,WAAW;KACxB,GAAI,IAAI,SAAS,KAAA,KAAa,EAAE,MAAM,IAAI,KAAK;IACjD;GACF;EACF,UAAU;GACR,SAAS,MAAM;GACf,IAAI,QAAQ,MAAM,OAAO,MAAM;GAG/B,IAAI,gBACF,KAAK,MAAM,QAAQ,WACjB,IAAI;IACF,MAAM,eAAe,GAAG,OAAO,IAAI;GACrC,QAAQ,CAER;EAGN;CACF;CAEA,iBACE,UAC0C;EAC1C,OAAO,QAAQ,uBACb,IAAI,MACF,iKAEF,CACF;CACF;AACF;;;;;;;;;;;;;;AAeA,SAAgB,eACd,OACA,SAA+B,CAAC,GACD;CAC/B,OAAO,IAAI,sBAAsB,QAAQ,KAAK;AAChD"}

package/dist/esm/index.js

@@ -1,15 +1,5 @@
+import { buildPrompt } from "./messages/prompt.js";
+import { BRIDGED_MCP_SERVER_NAME, SESSION_ID_EVENT, stripMcpPrefix, translateSdkStream } from "./stream/translate.js";
 import { ClaudeCodeTextAdapter, claudeCodeText } from "./adapters/text.js";
 import { CLAUDE_CODE_MODELS } from "./model-meta.js";
-import { BRIDGED_MCP_SERVER_NAME, SESSION_ID_EVENT, stripMcpPrefix, translateSdkStream } from "./stream/translate.js";
-import { buildPrompt } from "./messages/prompt.js";
-export {
-  BRIDGED_MCP_SERVER_NAME,
-  CLAUDE_CODE_MODELS,
-  ClaudeCodeTextAdapter,
-  SESSION_ID_EVENT,
-  buildPrompt,
-  claudeCodeText,
-  stripMcpPrefix,
-  translateSdkStream
-};
-//# sourceMappingURL=index.js.map
+export { BRIDGED_MCP_SERVER_NAME, CLAUDE_CODE_MODELS, ClaudeCodeTextAdapter, SESSION_ID_EVENT, buildPrompt, claudeCodeText, stripMcpPrefix, translateSdkStream };

package/dist/esm/messages/prompt.js

@@ -1,37 +1,32 @@
+//#region src/messages/prompt.ts
 function extractText(content) {
-  if (content === null) return "";
-  if (typeof content === "string") return content;
-  return content.map(
-    (part) => part.type === "text" && typeof part.content === "string" ? part.content : ""
-  ).join("");
+	if (content === null) return "";
+	if (typeof content === "string") return content;
+	return content.map((part) => part.type === "text" && typeof part.content === "string" ? part.content : "").join("");
 }
+/**
+* Convert TanStack chat history into the Agent SDK's `{ prompt, resume }`
+* inputs.
+*
+* With a `sessionId`, the harness already holds the conversation context, so
+* only the trailing user message is sent and the session is resumed. Without
+* one, prior turns are flattened into a plain-text transcript preamble (tool
+* messages and tool-call-only assistant turns are harness-internal noise and
+* are skipped; prompts are text-only in v1).
+*/
 function buildPrompt(messages, sessionId) {
-  const lastMessage = messages.at(-1);
-  const lastUserText = lastMessage?.role === "user" ? extractText(lastMessage.content).trim() : "";
-  if (!lastUserText) {
-    throw new Error(
-      "Claude Code adapter requires a trailing user message with text content."
-    );
-  }
-  if (sessionId !== void 0) {
-    return { prompt: lastUserText, resume: sessionId };
-  }
-  const priorTurns = messages.slice(0, -1).filter(
-    (message) => (message.role === "user" || message.role === "assistant") && extractText(message.content).trim() !== ""
-  ).map(
-    (message) => `${message.role === "user" ? "User" : "Assistant"}: ${extractText(message.content).trim()}`
-  );
-  if (priorTurns.length === 0) {
-    return { prompt: lastUserText };
-  }
-  return {
-    prompt: `Previous conversation:
-${priorTurns.join("\n")}
-
-${lastUserText}`
-  };
+	const lastMessage = messages.at(-1);
+	const lastUserText = lastMessage?.role === "user" ? extractText(lastMessage.content).trim() : "";
+	if (!lastUserText) throw new Error("Claude Code adapter requires a trailing user message with text content.");
+	if (sessionId !== void 0) return {
+		prompt: lastUserText,
+		resume: sessionId
+	};
+	const priorTurns = messages.slice(0, -1).filter((message) => (message.role === "user" || message.role === "assistant") && extractText(message.content).trim() !== "").map((message) => `${message.role === "user" ? "User" : "Assistant"}: ${extractText(message.content).trim()}`);
+	if (priorTurns.length === 0) return { prompt: lastUserText };
+	return { prompt: `Previous conversation:\n${priorTurns.join("\n")}\n\n${lastUserText}` };
 }
-export {
-  buildPrompt
-};
-//# sourceMappingURL=prompt.js.map
+//#endregion
+export { buildPrompt };
+
+//# sourceMappingURL=prompt.js.map

package/dist/esm/messages/prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.js","sources":["../../../src/messages/prompt.ts"],"sourcesContent":["import type { ModelMessage } from '@tanstack/ai'\n\nexport interface BuiltPrompt {\n  prompt: string\n  /** Claude Code session id to resume, when the caller threaded one through. */\n  resume?: string\n}\n\nfunction extractText(content: ModelMessage['content']): string {\n  if (content === null) return ''\n  if (typeof content === 'string') return content\n  return content\n    .map((part) =>\n      part.type === 'text' && typeof part.content === 'string'\n        ? part.content\n        : '',\n    )\n    .join('')\n}\n\n/**\n * Convert TanStack chat history into the Agent SDK's `{ prompt, resume }`\n * inputs.\n *\n * With a `sessionId`, the harness already holds the conversation context, so\n * only the trailing user message is sent and the session is resumed. Without\n * one, prior turns are flattened into a plain-text transcript preamble (tool\n * messages and tool-call-only assistant turns are harness-internal noise and\n * are skipped; prompts are text-only in v1).\n */\nexport function buildPrompt(\n  messages: Array<ModelMessage>,\n  sessionId: string | undefined,\n): BuiltPrompt {\n  const lastMessage = messages.at(-1)\n  const lastUserText =\n    lastMessage?.role === 'user' ? extractText(lastMessage.content).trim() : ''\n\n  if (!lastUserText) {\n    throw new Error(\n      'Claude Code adapter requires a trailing user message with text content.',\n    )\n  }\n\n  if (sessionId !== undefined) {\n    return { prompt: lastUserText, resume: sessionId }\n  }\n\n  const priorTurns = messages\n    .slice(0, -1)\n    .filter(\n      (message) =>\n        (message.role === 'user' || message.role === 'assistant') &&\n        extractText(message.content).trim() !== '',\n    )\n    .map(\n      (message) =>\n        `${message.role === 'user' ? 'User' : 'Assistant'}: ${extractText(message.content).trim()}`,\n    )\n\n  if (priorTurns.length === 0) {\n    return { prompt: lastUserText }\n  }\n\n  return {\n    prompt: `Previous conversation:\\n${priorTurns.join('\\n')}\\n\\n${lastUserText}`,\n  }\n}\n"],"names":[],"mappings":"AAQA,SAAS,YAAY,SAA0C;AAC7D,MAAI,YAAY,KAAM,QAAO;AAC7B,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,SAAO,QACJ;AAAA,IAAI,CAAC,SACJ,KAAK,SAAS,UAAU,OAAO,KAAK,YAAY,WAC5C,KAAK,UACL;AAAA,EAAA,EAEL,KAAK,EAAE;AACZ;AAYO,SAAS,YACd,UACA,WACa;AACb,QAAM,cAAc,SAAS,GAAG,EAAE;AAClC,QAAM,eACJ,aAAa,SAAS,SAAS,YAAY,YAAY,OAAO,EAAE,KAAA,IAAS;AAE3E,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,MAAI,cAAc,QAAW;AAC3B,WAAO,EAAE,QAAQ,cAAc,QAAQ,UAAA;AAAA,EACzC;AAEA,QAAM,aAAa,SAChB,MAAM,GAAG,EAAE,EACX;AAAA,IACC,CAAC,aACE,QAAQ,SAAS,UAAU,QAAQ,SAAS,gBAC7C,YAAY,QAAQ,OAAO,EAAE,WAAW;AAAA,EAAA,EAE3C;AAAA,IACC,CAAC,YACC,GAAG,QAAQ,SAAS,SAAS,SAAS,WAAW,KAAK,YAAY,QAAQ,OAAO,EAAE,MAAM;AAAA,EAAA;AAG/F,MAAI,WAAW,WAAW,GAAG;AAC3B,WAAO,EAAE,QAAQ,aAAA;AAAA,EACnB;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,EAA2B,WAAW,KAAK,IAAI,CAAC;AAAA;AAAA,EAAO,YAAY;AAAA,EAAA;AAE/E;"}
+{"version":3,"file":"prompt.js","names":[],"sources":["../../../src/messages/prompt.ts"],"sourcesContent":["import type { ModelMessage } from '@tanstack/ai'\n\nexport interface BuiltPrompt {\n  prompt: string\n  /** Claude Code session id to resume, when the caller threaded one through. */\n  resume?: string\n}\n\nfunction extractText(content: ModelMessage['content']): string {\n  if (content === null) return ''\n  if (typeof content === 'string') return content\n  return content\n    .map((part) =>\n      part.type === 'text' && typeof part.content === 'string'\n        ? part.content\n        : '',\n    )\n    .join('')\n}\n\n/**\n * Convert TanStack chat history into the Agent SDK's `{ prompt, resume }`\n * inputs.\n *\n * With a `sessionId`, the harness already holds the conversation context, so\n * only the trailing user message is sent and the session is resumed. Without\n * one, prior turns are flattened into a plain-text transcript preamble (tool\n * messages and tool-call-only assistant turns are harness-internal noise and\n * are skipped; prompts are text-only in v1).\n */\nexport function buildPrompt(\n  messages: Array<ModelMessage>,\n  sessionId: string | undefined,\n): BuiltPrompt {\n  const lastMessage = messages.at(-1)\n  const lastUserText =\n    lastMessage?.role === 'user' ? extractText(lastMessage.content).trim() : ''\n\n  if (!lastUserText) {\n    throw new Error(\n      'Claude Code adapter requires a trailing user message with text content.',\n    )\n  }\n\n  if (sessionId !== undefined) {\n    return { prompt: lastUserText, resume: sessionId }\n  }\n\n  const priorTurns = messages\n    .slice(0, -1)\n    .filter(\n      (message) =>\n        (message.role === 'user' || message.role === 'assistant') &&\n        extractText(message.content).trim() !== '',\n    )\n    .map(\n      (message) =>\n        `${message.role === 'user' ? 'User' : 'Assistant'}: ${extractText(message.content).trim()}`,\n    )\n\n  if (priorTurns.length === 0) {\n    return { prompt: lastUserText }\n  }\n\n  return {\n    prompt: `Previous conversation:\\n${priorTurns.join('\\n')}\\n\\n${lastUserText}`,\n  }\n}\n"],"mappings":";AAQA,SAAS,YAAY,SAA0C;CAC7D,IAAI,YAAY,MAAM,OAAO;CAC7B,IAAI,OAAO,YAAY,UAAU,OAAO;CACxC,OAAO,QACJ,KAAK,SACJ,KAAK,SAAS,UAAU,OAAO,KAAK,YAAY,WAC5C,KAAK,UACL,EACN,CAAC,CACA,KAAK,EAAE;AACZ;;;;;;;;;;;AAYA,SAAgB,YACd,UACA,WACa;CACb,MAAM,cAAc,SAAS,GAAG,EAAE;CAClC,MAAM,eACJ,aAAa,SAAS,SAAS,YAAY,YAAY,OAAO,CAAC,CAAC,KAAK,IAAI;CAE3E,IAAI,CAAC,cACH,MAAM,IAAI,MACR,yEACF;CAGF,IAAI,cAAc,KAAA,GAChB,OAAO;EAAE,QAAQ;EAAc,QAAQ;CAAU;CAGnD,MAAM,aAAa,SAChB,MAAM,GAAG,EAAE,CAAC,CACZ,QACE,aACE,QAAQ,SAAS,UAAU,QAAQ,SAAS,gBAC7C,YAAY,QAAQ,OAAO,CAAC,CAAC,KAAK,MAAM,EAC5C,CAAC,CACA,KACE,YACC,GAAG,QAAQ,SAAS,SAAS,SAAS,YAAY,IAAI,YAAY,QAAQ,OAAO,CAAC,CAAC,KAAK,GAC5F;CAEF,IAAI,WAAW,WAAW,GACxB,OAAO,EAAE,QAAQ,aAAa;CAGhC,OAAO,EACL,QAAQ,2BAA2B,WAAW,KAAK,IAAI,EAAE,MAAM,eACjE;AACF"}

package/dist/esm/model-meta.js

@@ -1,14 +1,21 @@
-const CLAUDE_CODE_MODELS = [
-  "claude-opus-4-8",
-  "claude-opus-4-7",
-  "claude-opus-4-6",
-  "claude-sonnet-4-6",
-  "claude-haiku-4-5",
-  "opus",
-  "sonnet",
-  "haiku"
+//#region src/model-meta.ts
+/**
+* Models known to work with Claude Code. The harness accepts any Anthropic
+* model id (and the `opus` / `sonnet` / `haiku` aliases resolved by the CLI),
+* so this list exists for autocomplete — any string is accepted via the
+* `(string & {})` escape hatch in {@link ClaudeCodeModel}.
+*/
+var CLAUDE_CODE_MODELS = [
+	"claude-opus-4-8",
+	"claude-opus-4-7",
+	"claude-opus-4-6",
+	"claude-sonnet-4-6",
+	"claude-haiku-4-5",
+	"opus",
+	"sonnet",
+	"haiku"
 ];
-export {
-  CLAUDE_CODE_MODELS
-};
-//# sourceMappingURL=model-meta.js.map
+//#endregion
+export { CLAUDE_CODE_MODELS };
+
+//# sourceMappingURL=model-meta.js.map

package/dist/esm/model-meta.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-meta.js","sources":["../../src/model-meta.ts"],"sourcesContent":["/**\n * Models known to work with Claude Code. The harness accepts any Anthropic\n * model id (and the `opus` / `sonnet` / `haiku` aliases resolved by the CLI),\n * so this list exists for autocomplete — any string is accepted via the\n * `(string & {})` escape hatch in {@link ClaudeCodeModel}.\n */\nexport const CLAUDE_CODE_MODELS = [\n  'claude-opus-4-8',\n  'claude-opus-4-7',\n  'claude-opus-4-6',\n  'claude-sonnet-4-6',\n  'claude-haiku-4-5',\n  'opus',\n  'sonnet',\n  'haiku',\n] as const\n\nexport type KnownClaudeCodeModel = (typeof CLAUDE_CODE_MODELS)[number]\n\n/** Any Claude model id accepted by Claude Code; known ids get autocomplete. */\nexport type ClaudeCodeModel = KnownClaudeCodeModel | (string & {})\n"],"names":[],"mappings":"AAMO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;"}
+{"version":3,"file":"model-meta.js","names":[],"sources":["../../src/model-meta.ts"],"sourcesContent":["/**\n * Models known to work with Claude Code. The harness accepts any Anthropic\n * model id (and the `opus` / `sonnet` / `haiku` aliases resolved by the CLI),\n * so this list exists for autocomplete — any string is accepted via the\n * `(string & {})` escape hatch in {@link ClaudeCodeModel}.\n */\nexport const CLAUDE_CODE_MODELS = [\n  'claude-opus-4-8',\n  'claude-opus-4-7',\n  'claude-opus-4-6',\n  'claude-sonnet-4-6',\n  'claude-haiku-4-5',\n  'opus',\n  'sonnet',\n  'haiku',\n] as const\n\nexport type KnownClaudeCodeModel = (typeof CLAUDE_CODE_MODELS)[number]\n\n/** Any Claude model id accepted by Claude Code; known ids get autocomplete. */\nexport type ClaudeCodeModel = KnownClaudeCodeModel | (string & {})\n"],"mappings":";;;;;;;AAMA,IAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}