@tanstack/ai-claude-code 0.2.3 → 0.3.0

package/dist/esm/adapters/text.js

@@ -1,306 +1,281 @@
-import { normalizeSystemPrompts, EventType } from "@tanstack/ai";
-import { toRunErrorRawEvent } from "@tanstack/ai/adapter-internals";
-import { BaseTextAdapter } from "@tanstack/ai/adapters";
-import { SandboxCapability, getSandbox, approvalId, resolveApproval, buildApprovalRequestedEvent, createBridgeEventChannel, getWorkspaceProjection, getSandboxPolicy, getToolBridgeProvisioner, nodeHttpBridgeProvisioner, spawnNdjson, mergeChunkStreams } from "@tanstack/ai-sandbox";
 import { buildPrompt } from "../messages/prompt.js";
 import { translateSdkStream } from "../stream/translate.js";
 import { mapPolicyToClaudeFlags } from "./policy-map.js";
 import { projectClaudeWorkspace } from "./projection.js";
-const DEFAULT_WORKDIR = "/workspace";
+import { EventType, normalizeSystemPrompts } from "@tanstack/ai";
+import { toRunErrorRawEvent } from "@tanstack/ai/adapter-internals";
+import { BaseTextAdapter } from "@tanstack/ai/adapters";
+import { SandboxCapability, alignedIfAttaching, approvalId, buildApprovalRequestedEvent, createBridgeEventChannel, createRunScopedIdGen, encodeRunId, getSandbox, getSandboxDurability, getSandboxPolicy, getToolBridgeProvisioner, getWorkspaceProjection, journalOptionsFor, mergeChunkStreams, nodeHttpBridgeProvisioner, resolveApproval, resolveDurableRunId, resolveDurableThreadId, spawnNdjson } from "@tanstack/ai-sandbox";
+//#region src/adapters/text.ts
+var DEFAULT_WORKDIR = "/workspace";
+/** POSIX single-quote escape for embedding values in the `claude …` command. */
 function q(value) {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
+	return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+/** Format a host tool-bridge as claude's `--mcp-config` JSON. */
 function bridgeToMcpConfig(bridge) {
-  return JSON.stringify({
-    mcpServers: {
-      [bridge.name]: {
-        type: "http",
-        url: bridge.url,
-        headers: { Authorization: `Bearer ${bridge.token}` }
-      }
-    }
-  });
-}
-class ClaudeCodeTextAdapter extends BaseTextAdapter {
-  name = "claude-code";
-  // Harness adapter: requires a sandbox to run the agent CLI inside.
-  requires = [SandboxCapability];
-  adapterConfig;
-  constructor(config, model) {
-    super({}, model);
-    this.adapterConfig = config;
-  }
-  sandboxFrom(options) {
-    const ctx = options.capabilities;
-    if (!ctx) {
-      throw new Error(
-        'Adapter "claude-code" requires a sandbox. Add withSandbox(defineSandbox({ ... })) to chat() middleware (e.g. with the local-process or docker provider).'
-      );
-    }
-    return getSandbox(ctx);
-  }
-  workdir(options) {
-    return options.modelOptions?.cwd ?? this.adapterConfig.cwd ?? DEFAULT_WORKDIR;
-  }
-  /** Build the `claude` command line (prompt goes via stdin, not argv). */
-  buildCommand(options, resume, policyFlags, mcpConfigPath, permissionPromptTool) {
-    const config = this.adapterConfig;
-    const modelOptions = options.modelOptions;
-    const exe = config.claudeExecutable ?? "claude";
-    const args = [
-      "-p",
-      "--output-format",
-      "stream-json",
-      "--verbose",
-      "--model",
-      q(this.model)
-    ];
-    if (config.streamPartials !== false) args.push("--include-partial-messages");
-    if (resume !== void 0) args.push("--resume", q(resume));
-    const permissionMode = modelOptions?.permissionMode ?? config.permissionMode ?? policyFlags.permissionMode ?? "bypassPermissions";
-    args.push("--permission-mode", q(permissionMode));
-    const maxTurns = modelOptions?.maxTurns ?? config.maxTurns;
-    if (maxTurns !== void 0) args.push("--max-turns", String(maxTurns));
-    for (const dir of config.addDirs ?? []) args.push("--add-dir", q(dir));
-    const allowedTools = [
-      ...modelOptions?.allowedTools ?? config.allowedTools ?? [],
-      ...policyFlags.allowedTools
-    ];
-    if (allowedTools.length > 0) {
-      args.push("--allowedTools", q([...new Set(allowedTools)].join(",")));
-    }
-    const disallowedTools = [
-      ...modelOptions?.disallowedTools ?? config.disallowedTools ?? [],
-      ...policyFlags.disallowedTools
-    ];
-    if (disallowedTools.length > 0) {
-      args.push("--disallowedTools", q([...new Set(disallowedTools)].join(",")));
-    }
-    const systemPrompts = normalizeSystemPrompts(options.systemPrompts).map((prompt) => prompt.content).filter((content) => content.trim() !== "");
-    if (systemPrompts.length > 0) {
-      const joined = systemPrompts.join("\n\n");
-      const flag = config.systemPromptMode === "replace" ? "--system-prompt" : "--append-system-prompt";
-      args.push(flag, q(joined));
-    }
-    if (mcpConfigPath !== void 0) args.push("--mcp-config", q(mcpConfigPath));
-    if (permissionPromptTool !== void 0) {
-      args.push("--permission-prompt-tool", q(permissionPromptTool));
-    }
-    return `${exe} ${args.join(" ")}`;
-  }
-  /**
-   * Build the permission-prompt resolver the host MCP bridge exposes to claude
-   * (`--permission-prompt-tool`). Maps claude's permission request onto the
-   * sandbox policy + client approvals; on an `ask` action with no decision yet,
-   * records an approval-requested event and denies (the client re-runs to grant).
-   */
-  buildPermissionResolver(policy, approvals, scripts, sink, threadId, runId) {
-    const writeTools = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
-    const networkTools = /* @__PURE__ */ new Set(["WebFetch", "WebSearch"]);
-    return (request) => {
-      const toolName = request.tool_name ?? "tool";
-      const cmdInput = request.input;
-      const command = toolName === "Bash" && cmdInput !== null && typeof cmdInput === "object" && "command" in cmdInput && typeof cmdInput.command === "string" ? cmdInput.command : void 0;
-      const capability = writeTools.has(toolName) ? "fileWrite" : networkTools.has(toolName) ? "network" : void 0;
-      const id = approvalId({
-        provider: "claude-code",
-        kind: command !== void 0 ? "command" : capability ?? "tool",
-        target: command ?? toolName
-      });
-      const outcome = resolveApproval({
-        policy,
-        approvals,
-        id,
-        scripts,
-        ...command !== void 0 ? { command } : {},
-        ...capability !== void 0 ? { capability } : {}
-      });
-      if (outcome.needsApproval) {
-        sink.push(
-          buildApprovalRequestedEvent({
-            approvalId: id,
-            title: `Approve ${toolName}${command !== void 0 ? `: ${command}` : ""}`,
-            threadId,
-            runId,
-            detail: { provider: "claude-code", toolName }
-          })
-        );
-        return {
-          behavior: "deny",
-          message: "Awaiting client approval. Approve in the UI and re-run to continue."
-        };
-      }
-      return outcome.decision === "allow" ? { behavior: "allow" } : { behavior: "deny", message: "Denied by sandbox policy." };
-    };
-  }
-  async *chatStream(options) {
-    const { logger } = options;
-    let bridge;
-    let channel;
-    const approvalRequests = [];
-    let cleanupSandbox;
-    const tempFiles = [];
-    try {
-      const sandbox = this.sandboxFrom(options);
-      cleanupSandbox = sandbox;
-      const cwd = this.workdir(options);
-      const runId = options.runId ?? this.generateId();
-      const threadId = options.threadId ?? this.generateId();
-      channel = createBridgeEventChannel({ model: this.model, threadId, runId });
-      const projection = options.capabilities ? getWorkspaceProjection(options.capabilities, { optional: true }) : void 0;
-      if (projection) await projectClaudeWorkspace(sandbox, projection);
-      const policy = options.capabilities ? getSandboxPolicy(options.capabilities, { optional: true }) : void 0;
-      const permission = policy !== void 0 ? {
-        toolName: "approval_prompt",
-        resolve: this.buildPermissionResolver(
-          policy,
-          options.approvals,
-          projection?.scripts,
-          approvalRequests,
-          threadId,
-          runId
-        )
-      } : void 0;
-      const hasTools = options.tools !== void 0 && options.tools.length > 0;
-      if (hasTools || permission !== void 0) {
-        const provisioner = (options.capabilities ? getToolBridgeProvisioner(options.capabilities, { optional: true }) : void 0) ?? nodeHttpBridgeProvisioner;
-        bridge = await provisioner.provision(options.tools ?? [], {
-          provider: sandbox.provider,
-          context: options.context,
-          emitCustomEvent: channel.emitCustomEvent,
-          ...permission !== void 0 ? { permission } : {},
-          ...options.abortController?.signal ? { signal: options.abortController.signal } : {}
-        });
-      }
-      const { prompt, resume } = buildPrompt(
-        options.messages,
-        options.modelOptions?.sessionId
-      );
-      let mcpConfigArg;
-      if (bridge) {
-        const mcpConfigFile = `.tanstack-mcp-bridge-${runId}.json`;
-        const mcpConfigPath = `${cwd}/${mcpConfigFile}`;
-        await sandbox.fs.write(mcpConfigPath, bridgeToMcpConfig(bridge));
-        tempFiles.push(mcpConfigPath);
-        mcpConfigArg = mcpConfigFile;
-      }
-      const command = this.buildCommand(
-        options,
-        resume,
-        mapPolicyToClaudeFlags(policy),
-        mcpConfigArg,
-        bridge && permission ? `mcp__${bridge.name}__${permission.toolName}` : void 0
-      );
-      let runCommand = command;
-      let stdinInput = prompt;
-      if (sandbox.capabilities.writableStdin === false) {
-        const promptPath = `/tmp/tanstack-claude-prompt-${runId}`;
-        await sandbox.fs.write(promptPath, prompt);
-        tempFiles.push(promptPath);
-        runCommand = `${command} < ${q(promptPath)}`;
-        stdinInput = void 0;
-      }
-      logger.request(
-        `activity=chat provider=claude-code model=${this.model} sandbox=${sandbox.provider} messages=${options.messages.length} resume=${resume ?? "none"}`,
-        { provider: "claude-code", model: this.model }
-      );
-      const rawEvents = spawnNdjson(sandbox, runCommand, {
-        cwd,
-        ...stdinInput !== void 0 ? { input: stdinInput } : {},
-        // claude maps `bypassPermissions` to `--dangerously-skip-permissions`,
-        // which it refuses to run as root. Sandbox containers routinely run as
-        // root (Docker / Cloudflare), so set `IS_SANDBOX=1` — claude's
-        // documented escape hatch for skip-permissions in an isolated
-        // environment — merged over the sandbox env (a caller-provided value
-        // wins). Safe to set unconditionally; it is a no-op for stricter modes.
-        env: { IS_SANDBOX: "1", ...this.adapterConfig.env },
-        ...options.abortController?.signal ? { signal: options.abortController.signal } : options.request?.signal ? { signal: options.request.signal } : {},
-        onNonJsonLine: (line) => logger.provider(`provider=claude-code non-json line: ${line}`, {
-          chunk: line
-        })
-      });
-      async function* asMessages() {
-        for await (const event of rawEvents) yield event;
-      }
-      yield* mergeChunkStreams(
-        translateSdkStream(asMessages(), {
-          model: this.model,
-          runId,
-          threadId,
-          ...options.parentRunId !== void 0 && {
-            parentRunId: options.parentRunId
-          },
-          genId: () => this.generateId(),
-          onSdkMessage: (message) => logger.provider(`provider=claude-code type=${message.type}`, {
-            chunk: message
-          })
-        }),
-        channel.stream
-      );
-      if (this.adapterConfig.emitDiff !== false) {
-        try {
-          const diff = await sandbox.process.exec(`git -C ${q(cwd)} diff`, {
-            cwd
-          });
-          if (diff.exitCode === 0 && diff.stdout.trim() !== "") {
-            yield {
-              type: EventType.CUSTOM,
-              name: "file.changed",
-              value: { path: ".", diff: diff.stdout },
-              timestamp: Date.now(),
-              threadId,
-              runId
-            };
-          }
-        } catch {
-        }
-      }
-      for (const event of approvalRequests) yield event;
-    } catch (error) {
-      const err = error;
-      const rawEvent = toRunErrorRawEvent(error);
-      logger.errors("claude-code.chatStream fatal", {
-        error,
-        source: "claude-code.chatStream"
-      });
-      yield {
-        type: EventType.RUN_ERROR,
-        model: options.model,
-        timestamp: Date.now(),
-        message: err.message || "Unknown error occurred",
-        ...err.code !== void 0 && { code: err.code },
-        ...rawEvent !== void 0 && { rawEvent },
-        error: {
-          message: err.message || "Unknown error occurred",
-          ...err.code !== void 0 && { code: err.code }
-        }
-      };
-    } finally {
-      channel?.close();
-      if (bridge) await bridge.close();
-      if (cleanupSandbox) {
-        for (const path of tempFiles) {
-          try {
-            await cleanupSandbox.fs.remove(path);
-          } catch {
-          }
-        }
-      }
-    }
-  }
-  structuredOutput(_options) {
-    return Promise.reject(
-      new Error(
-        "Structured output is not yet supported by the in-sandbox Claude Code adapter. Use a model adapter (e.g. anthropic) for structured output, or omit outputSchema."
-      )
-    );
-  }
+	return JSON.stringify({ mcpServers: { [bridge.name]: {
+		type: "http",
+		url: bridge.url,
+		headers: { Authorization: `Bearer ${bridge.token}` }
+	} } });
 }
+var ClaudeCodeTextAdapter = class extends BaseTextAdapter {
+	name = "claude-code";
+	requires = [SandboxCapability];
+	adapterConfig;
+	constructor(config, model) {
+		super({}, model);
+		this.adapterConfig = config;
+	}
+	sandboxFrom(options) {
+		const ctx = options.capabilities;
+		if (!ctx) throw new Error("Adapter \"claude-code\" requires a sandbox. Add withSandbox(defineSandbox({ ... })) to chat() middleware (e.g. with the local-process or docker provider).");
+		return getSandbox(ctx);
+	}
+	workdir(options) {
+		return options.modelOptions?.cwd ?? this.adapterConfig.cwd ?? DEFAULT_WORKDIR;
+	}
+	/** Build the `claude` command line (prompt goes via stdin, not argv). */
+	buildCommand(options, resume, policyFlags, mcpConfigPath, permissionPromptTool) {
+		const config = this.adapterConfig;
+		const modelOptions = options.modelOptions;
+		const exe = config.claudeExecutable ?? "claude";
+		const args = [
+			"-p",
+			"--output-format",
+			"stream-json",
+			"--verbose",
+			"--model",
+			q(this.model)
+		];
+		if (config.streamPartials !== false) args.push("--include-partial-messages");
+		if (resume !== void 0) args.push("--resume", q(resume));
+		const permissionMode = modelOptions?.permissionMode ?? config.permissionMode ?? policyFlags.permissionMode ?? "bypassPermissions";
+		args.push("--permission-mode", q(permissionMode));
+		const maxTurns = modelOptions?.maxTurns ?? config.maxTurns;
+		if (maxTurns !== void 0) args.push("--max-turns", String(maxTurns));
+		for (const dir of config.addDirs ?? []) args.push("--add-dir", q(dir));
+		const allowedTools = [...modelOptions?.allowedTools ?? config.allowedTools ?? [], ...policyFlags.allowedTools];
+		if (allowedTools.length > 0) args.push("--allowedTools", q([...new Set(allowedTools)].join(",")));
+		const disallowedTools = [...modelOptions?.disallowedTools ?? config.disallowedTools ?? [], ...policyFlags.disallowedTools];
+		if (disallowedTools.length > 0) args.push("--disallowedTools", q([...new Set(disallowedTools)].join(",")));
+		const systemPrompts = normalizeSystemPrompts(options.systemPrompts).map((prompt) => prompt.content).filter((content) => content.trim() !== "");
+		if (systemPrompts.length > 0) {
+			const joined = systemPrompts.join("\n\n");
+			const flag = config.systemPromptMode === "replace" ? "--system-prompt" : "--append-system-prompt";
+			args.push(flag, q(joined));
+		}
+		if (mcpConfigPath !== void 0) args.push("--mcp-config", q(mcpConfigPath));
+		if (permissionPromptTool !== void 0) args.push("--permission-prompt-tool", q(permissionPromptTool));
+		return `${exe} ${args.join(" ")}`;
+	}
+	/**
+	* Build the permission-prompt resolver the host MCP bridge exposes to claude
+	* (`--permission-prompt-tool`). Maps claude's permission request onto the
+	* sandbox policy + client approvals; on an `ask` action with no decision yet,
+	* records an approval-requested event and denies (the client re-runs to grant).
+	*/
+	buildPermissionResolver(policy, approvals, scripts, sink, threadId, runId) {
+		const writeTools = /* @__PURE__ */ new Set([
+			"Write",
+			"Edit",
+			"MultiEdit",
+			"NotebookEdit"
+		]);
+		const networkTools = /* @__PURE__ */ new Set(["WebFetch", "WebSearch"]);
+		return (request) => {
+			const toolName = request.tool_name ?? "tool";
+			const cmdInput = request.input;
+			const command = toolName === "Bash" && cmdInput !== null && typeof cmdInput === "object" && "command" in cmdInput && typeof cmdInput.command === "string" ? cmdInput.command : void 0;
+			const capability = writeTools.has(toolName) ? "fileWrite" : networkTools.has(toolName) ? "network" : void 0;
+			const id = approvalId({
+				provider: "claude-code",
+				kind: command !== void 0 ? "command" : capability ?? "tool",
+				target: command ?? toolName
+			});
+			const outcome = resolveApproval({
+				policy,
+				approvals,
+				id,
+				scripts,
+				...command !== void 0 ? { command } : {},
+				...capability !== void 0 ? { capability } : {}
+			});
+			if (outcome.needsApproval) {
+				sink.push(buildApprovalRequestedEvent({
+					approvalId: id,
+					title: `Approve ${toolName}${command !== void 0 ? `: ${command}` : ""}`,
+					threadId,
+					runId,
+					detail: {
+						provider: "claude-code",
+						toolName
+					}
+				}));
+				return {
+					behavior: "deny",
+					message: "Awaiting client approval. Approve in the UI and re-run to continue."
+				};
+			}
+			return outcome.decision === "allow" ? { behavior: "allow" } : {
+				behavior: "deny",
+				message: "Denied by sandbox policy."
+			};
+		};
+	}
+	async *chatStream(options) {
+		const { logger } = options;
+		let bridge;
+		let channel;
+		const approvalRequests = [];
+		let cleanupSandbox;
+		const tempFiles = [];
+		try {
+			const sandbox = this.sandboxFrom(options);
+			cleanupSandbox = sandbox;
+			const cwd = this.workdir(options);
+			const durability = options.capabilities ? getSandboxDurability(options.capabilities, { optional: true }) : void 0;
+			const runId = resolveDurableRunId(options.runId, {
+				durable: durability !== void 0,
+				adapter: "claude-code",
+				fallback: () => this.generateId()
+			});
+			const threadId = resolveDurableThreadId(options.threadId, {
+				durable: durability !== void 0,
+				attaching: durability?.attach === true,
+				adapter: "claude-code",
+				fallback: () => this.generateId()
+			});
+			channel = createBridgeEventChannel({
+				model: this.model,
+				threadId,
+				runId
+			});
+			const projection = options.capabilities ? getWorkspaceProjection(options.capabilities, { optional: true }) : void 0;
+			if (projection) await projectClaudeWorkspace(sandbox, projection);
+			const policy = options.capabilities ? getSandboxPolicy(options.capabilities, { optional: true }) : void 0;
+			const permission = policy !== void 0 ? {
+				toolName: "approval_prompt",
+				resolve: this.buildPermissionResolver(policy, options.approvals, projection?.scripts, approvalRequests, threadId, runId)
+			} : void 0;
+			if (options.tools !== void 0 && options.tools.length > 0 || permission !== void 0) bridge = await ((options.capabilities ? getToolBridgeProvisioner(options.capabilities, { optional: true }) : void 0) ?? nodeHttpBridgeProvisioner).provision(options.tools ?? [], {
+				provider: sandbox.provider,
+				context: options.context,
+				emitCustomEvent: channel.emitCustomEvent,
+				...permission !== void 0 ? { permission } : {},
+				...options.abortController?.signal ? { signal: options.abortController.signal } : {}
+			});
+			const { prompt, resume } = buildPrompt(options.messages, options.modelOptions?.sessionId);
+			const runIdSegment = encodeRunId(runId);
+			let mcpConfigArg;
+			if (bridge) {
+				const mcpConfigFile = `.tanstack-mcp-bridge-${runIdSegment}.json`;
+				const mcpConfigPath = `${cwd}/${mcpConfigFile}`;
+				await sandbox.fs.write(mcpConfigPath, bridgeToMcpConfig(bridge));
+				tempFiles.push(mcpConfigPath);
+				mcpConfigArg = mcpConfigFile;
+			}
+			const command = this.buildCommand(options, resume, mapPolicyToClaudeFlags(policy), mcpConfigArg, bridge && permission ? `mcp__${bridge.name}__${permission.toolName}` : void 0);
+			let runCommand = command;
+			let stdinInput = prompt;
+			if (sandbox.capabilities.writableStdin === false) {
+				const promptPath = `/tmp/tanstack-claude-prompt-${runIdSegment}`;
+				await sandbox.fs.write(promptPath, prompt);
+				tempFiles.push(promptPath);
+				runCommand = `${command} < ${q(promptPath)}`;
+				stdinInput = void 0;
+			}
+			logger.request(`activity=chat provider=claude-code model=${this.model} sandbox=${sandbox.provider} messages=${options.messages.length} resume=${resume ?? "none"}`, {
+				provider: "claude-code",
+				model: this.model
+			});
+			const journalOptions = journalOptionsFor(durability, runId);
+			const rawEvents = spawnNdjson(sandbox, runCommand, {
+				cwd,
+				...stdinInput !== void 0 ? { input: stdinInput } : {},
+				env: {
+					IS_SANDBOX: "1",
+					...this.adapterConfig.env
+				},
+				...options.abortController?.signal ? { signal: options.abortController.signal } : options.request?.signal ? { signal: options.request.signal } : {},
+				onNonJsonLine: (line) => logger.provider(`provider=claude-code non-json line: ${line}`, { chunk: line }),
+				...journalOptions === void 0 ? {} : { journal: journalOptions }
+			});
+			async function* asMessages() {
+				for await (const event of rawEvents) yield event;
+			}
+			yield* alignedIfAttaching(mergeChunkStreams(translateSdkStream(asMessages(), {
+				model: this.model,
+				runId,
+				threadId,
+				...options.parentRunId !== void 0 && { parentRunId: options.parentRunId },
+				genId: createRunScopedIdGen(runId),
+				onSdkMessage: (message) => logger.provider(`provider=claude-code type=${message.type}`, { chunk: message })
+			}), channel.stream), durability, logger);
+			if (this.adapterConfig.emitDiff !== false) try {
+				const diff = await sandbox.process.exec(`git -C ${q(cwd)} diff`, { cwd });
+				if (diff.exitCode === 0 && diff.stdout.trim() !== "") yield {
+					type: EventType.CUSTOM,
+					name: "file.changed",
+					value: {
+						path: ".",
+						diff: diff.stdout
+					},
+					timestamp: Date.now(),
+					threadId,
+					runId
+				};
+			} catch {}
+			for (const event of approvalRequests) yield event;
+		} catch (error) {
+			const err = error;
+			const rawEvent = toRunErrorRawEvent(error);
+			logger.errors("claude-code.chatStream fatal", {
+				error,
+				source: "claude-code.chatStream"
+			});
+			yield {
+				type: EventType.RUN_ERROR,
+				model: options.model,
+				timestamp: Date.now(),
+				message: err.message || "Unknown error occurred",
+				...err.code !== void 0 && { code: err.code },
+				...rawEvent !== void 0 && { rawEvent },
+				error: {
+					message: err.message || "Unknown error occurred",
+					...err.code !== void 0 && { code: err.code }
+				}
+			};
+		} finally {
+			channel?.close();
+			if (bridge) await bridge.close();
+			if (cleanupSandbox) for (const path of tempFiles) try {
+				await cleanupSandbox.fs.remove(path);
+			} catch {}
+		}
+	}
+	structuredOutput(_options) {
+		return Promise.reject(/* @__PURE__ */ new Error("Structured output is not yet supported by the in-sandbox Claude Code adapter. Use a model adapter (e.g. anthropic) for structured output, or omit outputSchema."));
+	}
+};
+/**
+* Creates a Claude Code harness adapter that runs **inside a sandbox**.
+*
+* Unlike HTTP provider adapters, this is a *harness* adapter: it spawns the
+* `claude` CLI inside the sandbox provided by `withSandbox(...)` (the adapter
+* declares `requires: [SandboxCapability]`), streams its `stream-json` stdout
+* back as AG-UI events, and lets Claude Code run its own agent loop and native
+* tools (Bash, file edits, search, …) against the sandbox workspace. The
+* sandbox image must provide the `claude` executable and `ANTHROPIC_API_KEY`
+* in its environment (e.g. via `workspace.secrets`). The session id is
+* surfaced via a CUSTOM `claude-code.session-id` event so follow-up calls can
+* resume through `modelOptions.sessionId`.
+*/
 function claudeCodeText(model, config = {}) {
-  return new ClaudeCodeTextAdapter(config, model);
+	return new ClaudeCodeTextAdapter(config, model);
 }
-export {
-  ClaudeCodeTextAdapter,
-  claudeCodeText
-};
-//# sourceMappingURL=text.js.map
+//#endregion
+export { ClaudeCodeTextAdapter, claudeCodeText };
+
+//# sourceMappingURL=text.js.map