@titan-design/agent 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Henry Jewkes
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,127 @@
+# @titan-design/agent
+
+Run one headless Claude Code session and get back either a typed answer or a
+typed failure. A thin wrapper over the Claude Agent SDK's `query()` that adds the
+three things a production caller always has to add itself: a scrubbed child
+environment, mandatory circuit breakers, and a failure taxonomy you can branch on.
+
+Tier 1 of the titan-platform DAG (TP-11). Depends on
+`@anthropic-ai/claude-agent-sdk`; `zod` is a peer (v4).
+
+## Run an agent
+
+```ts
+import { z } from "zod";
+import { runAgent } from "@titan-design/agent";
+
+const result = await runAgent({
+  prompt: "Summarise the failing tests in this repo.",
+  cwd: "/path/to/worktree",
+  maxTurns: 12,
+  maxBudgetUsd: 2,
+  outputSchema: z.object({ failing: z.array(z.string()), likelyCause: z.string() }),
+});
+
+if (result.ok) {
+  console.log(result.output.likelyCause, result.usage.totalCostUsd);
+} else if (result.failure.kind === "rate_limited") {
+  scheduleRetry(result.failure.retryAt);
+}
+```
+
+`runAgent` never throws for anything the agent does. The only throws are caller
+mistakes caught before the session starts: a missing or non-positive budget.
+
+## Budgets are required, not defaulted
+
+The SDK leaves `maxTurns` and `maxBudgetUsd` unlimited. Rather than pick a
+default nobody would notice was wrong, both are required fields on
+`AgentRunConfig` and `runAgent` throws a `TypeError` before it calls `query()`
+if either is missing, zero, negative, or not finite.
+
+## The environment scrub
+
+`prepareEnv(env, { allowApiKeyBilling })` copies the environment and hands the
+result to `options.env`. It never mutates its argument and never reads
+`process.env` except as the default first argument.
+
+| Variable | Action | Why |
+|---|---|---|
+| `CLAUDECODE`, `CLAUDE_CODE_SSE_PORT`, `CLAUDE_CODE_ENTRYPOINT` | strip | a child CLI that inherits these refuses to start inside a parent session |
+| every other `CLAUDE_CODE_*` (e.g. `CLAUDE_CODE_EXECPATH`) | strip | describes the parent session and confuses the child's config inference |
+| `CLAUDE_CODE_OAUTH_TOKEN` | keep | the subscription credential |
+| `CLAUDE_CODE_USE_BEDROCK` / `_VERTEX` / `_FOUNDRY` | keep | a deliberate provider choice |
+| `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS` | keep | a deliberate opt-out |
+| `CLAUDE_CODE_MAX_RETRIES` | keep, default `3` | the built-in default of 10 turns an outage into a long silent hang |
+| `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN` | strip unless `allowApiKeyBilling` | either one silently outranks the OAuth token and bills the API account |
+| `HTTP_PROXY`, `HTTPS_PROXY`, `ALL_PROXY` (both cases) | strip | leak from the parent shell and re-route the child's API traffic |
+| everything else | keep | ordinary process environment |
+
+Two guards sit either side of the run. `assertAuthEnvOk` is the pre-flight: it
+refuses to start when the OAuth token is missing, or when a metered credential
+survived the scrub. The post-flight reads `apiKeySource` off the first
+`system/init` message and ends the run as `auth_misconfigured` if it names the
+env API-key path. That check is a **blacklist**, not a whitelist: the SDK's
+`ApiKeySource` union grows over time, and an unknown new member is far more
+likely to be another benign route than a billing one.
+
+## Failures
+
+One `kind` per recovery strategy:
+
+| kind | Means |
+|---|---|
+| `rate_limited` | usage or burst limit; carries `retryAt` when the stream or the message said when |
+| `budget_exceeded` | `maxBudgetUsd` was reached |
+| `max_turns` | `maxTurns` was reached |
+| `schema_invalid` | the SDK exhausted its structured-output retries, or the answer failed the caller's zod schema |
+| `refusal` | the model declined |
+| `auth_misconfigured` | the pre-flight or the `apiKeySource` check failed |
+| `runtime_error` | anything else, including a dead subprocess |
+| `aborted` | the caller's `AbortSignal` fired |
+| `inactivity_timeout` | no message arrived for `inactivityTimeoutMs` (default 600 000) |
+
+`classifyResult(resultMessage, options?)` is exported so a product can map a
+result message it captured itself.
+
+## Structured output
+
+Pass `outputSchema` and the SDK is asked for `outputFormat: { type: "json_schema" }`.
+The SDK validates and retries on its own; this package re-parses
+`structured_output` with the same zod schema so the value you receive is the one
+TypeScript promises. `result.output` is the final assistant text when no schema
+was given.
+
+## Cost
+
+`result.usage` is `{ totalCostUsd, modelUsage, turns, durationMs }`. These are
+the SDK's **client-side estimates**, priced from a bundled table. Use them as a
+budget signal, never as a billing statement. The SDK's cost fields are already
+cumulative across a `query()` call, so this package reads the latest result
+rather than summing; `modelUsage` is the fallback when a crash result arrives
+with the total zeroed.
+
+## Subagents and permissions
+
+`agents`, `mcpServers`, `hooks`, `allowedTools`, `disallowedTools`, `model`,
+`resumeSessionId` and `settingSources` pass straight through. Two defaults are
+chosen for headless safety:
+
+- `permissionMode` defaults to `"dontAsk"`, so nothing runs that was not
+  pre-approved.
+- `settingSources` defaults to `[]`, so no CLAUDE.md, settings file, or
+  `.mcp.json` is picked up off the filesystem unless you ask for it.
+
+**Gotcha:** a subagent *inherits* `bypassPermissions`, `acceptEdits` and `auto`
+from the parent and cannot narrow them per-subagent. A parent running wide open
+gives every subagent that same reach regardless of what its `AgentDefinition`
+says. Prefer `allowedTools` wildcards over a permissive mode.
+
+This package runs one session. It does not pool, schedule, or retry; that
+belongs to the workflow tier.
+
+## Ending a run
+
+Every run ends cleanly. The inactivity watchdog resets on each streamed message
+and, like the caller's `AbortSignal`, ends the run through the SDK's
+`abortController` and then `query.close()`, so no CLI subprocess is left behind.

package/dist/index.d.ts

@@ -0,0 +1,188 @@
+import { PermissionMode, AgentDefinition, McpServerConfig, HookEvent, HookCallbackMatcher, SettingSource, SDKMessage, ModelUsage, query, SDKResultMessage } from '@anthropic-ai/claude-agent-sdk';
+import { ZodError, ZodType } from 'zod';
+
+/** Why a run ended without a usable answer. One kind per recovery strategy. */
+type AgentFailure = {
+    kind: "rate_limited";
+    reason: string;
+    retryAt?: Date;
+    raw?: unknown;
+} | {
+    kind: "budget_exceeded";
+    reason: string;
+    raw?: unknown;
+} | {
+    kind: "schema_invalid";
+    reason: string;
+    error?: ZodError;
+    raw?: unknown;
+} | {
+    kind: "max_turns";
+    reason: string;
+    raw?: unknown;
+} | {
+    kind: "refusal";
+    reason: string;
+    raw?: unknown;
+} | {
+    kind: "auth_misconfigured";
+    reason: string;
+    hint?: string;
+    raw?: unknown;
+} | {
+    kind: "runtime_error";
+    reason: string;
+    raw?: unknown;
+} | {
+    kind: "aborted";
+    reason: string;
+} | {
+    kind: "inactivity_timeout";
+    reason: string;
+    timeoutMs: number;
+};
+type AgentFailureKind = AgentFailure["kind"];
+/** What the first `system/init` message told us about the session we actually got. */
+interface AgentInit {
+    apiKeySource: string | undefined;
+    model: string | undefined;
+    tools: string[];
+    permissionMode: string | undefined;
+    claudeCodeVersion: string | undefined;
+}
+/**
+ * Client-side estimates. The SDK prices from a bundled table, so treat these as
+ * a budget signal and never as a billing statement.
+ */
+interface AgentUsage {
+    totalCostUsd: number;
+    modelUsage: Record<string, ModelUsage>;
+    turns: number;
+    durationMs: number;
+}
+interface AgentRunConfig<T = string> {
+    prompt: string;
+    cwd: string;
+    /** Required: the SDK's own default is unlimited. Must be positive. */
+    maxTurns: number;
+    /** Required: the SDK's own default is unlimited. Must be positive. */
+    maxBudgetUsd: number;
+    model?: string;
+    /** Turns on the SDK's `json_schema` output format, which retries on its own until the answer validates. */
+    outputSchema?: ZodType<T>;
+    allowedTools?: string[];
+    disallowedTools?: string[];
+    /** Defaults to `dontAsk`: nothing is pre-approved, so nothing runs unprompted. */
+    permissionMode?: PermissionMode;
+    resumeSessionId?: string;
+    agents?: Record<string, AgentDefinition>;
+    mcpServers?: Record<string, McpServerConfig>;
+    hooks?: Partial<Record<HookEvent, HookCallbackMatcher[]>>;
+    signal?: AbortSignal;
+    /** Ends the run when no message arrives for this long. Defaults to 600_000. */
+    inactivityTimeoutMs?: number;
+    /** Keeps `ANTHROPIC_API_KEY` in the child env and bills the API account. */
+    allowApiKeyBilling?: boolean;
+    /** Defaults to `[]`: nothing is read off the filesystem unless asked for. */
+    settingSources?: SettingSource[];
+    onMessage?: (message: SDKMessage) => void;
+}
+type AgentRunResult<T = string> = {
+    ok: true;
+    output: T;
+    sessionId: string;
+    usage: AgentUsage;
+    init: AgentInit;
+} | {
+    ok: false;
+    failure: AgentFailure;
+    sessionId?: string;
+    usage?: AgentUsage;
+};
+
+declare const DEFAULT_INACTIVITY_MS = 600000;
+interface AgentRunDeps {
+    /** Injection seam for tests; defaults to the SDK's own `query`. */
+    query?: typeof query;
+    /** Base environment to scrub; defaults to `process.env`. */
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+}
+/**
+ * Run one headless Claude Code session to completion and return either its
+ * answer or a typed failure. Never throws for anything the agent does; the only
+ * throws are caller mistakes caught before the session starts.
+ */
+declare function runAgent<T = string>(config: AgentRunConfig<T>, deps?: AgentRunDeps): Promise<AgentRunResult<T>>;
+
+interface ClassifyOptions {
+    /** Epoch millis used to turn a relative "retry after Ns" hint into an absolute date. */
+    now?: number;
+    /** Epoch millis from the stream's last `rate_limit_event`, which beats anything parsed from prose. */
+    rateLimitResetsAt?: number;
+}
+/**
+ * Map a terminal `result` message onto the failure taxonomy, or `undefined` when
+ * the run succeeded and the caller should read the output.
+ */
+declare function classifyResult(result: SDKResultMessage, options?: ClassifyOptions): AgentFailure | undefined;
+/**
+ * The SDK's cost fields are already cumulative across a `query()` call, so the
+ * latest result carries the running total and summing them would double-count.
+ * `modelUsage` is the fallback because a crash result can arrive with
+ * `total_cost_usd` zeroed while the per-model breakdown survives.
+ */
+declare function usageFromResult(result: SDKResultMessage | undefined, durationMs: number): AgentUsage;
+declare function sumModelCost(modelUsage: Record<string, ModelUsage>): number;
+
+/**
+ * The only module in this package that reads `process.env`. A stray
+ * `ANTHROPIC_API_KEY` silently outranks `CLAUDE_CODE_OAUTH_TOKEN` and routes a
+ * headless run onto metered API billing; the invariants here exist because that
+ * cost real money once.
+ */
+/** Set by a parent Claude Code session; the child CLI refuses to start when it inherits them. */
+declare const ANTI_NESTING_VARS: readonly ["CLAUDECODE", "CLAUDE_CODE_SSE_PORT", "CLAUDE_CODE_ENTRYPOINT"];
+/** Metered-billing credentials, stripped unless the caller opts in explicitly. */
+declare const STRIPPED_AUTH_VARS: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN"];
+/**
+ * The only `CLAUDE_CODE_*` variables a child may inherit. Everything else in
+ * that namespace describes the *parent* session (exec path, terminal, entry
+ * point) and confuses the child's credential and config inference.
+ */
+declare const CLAUDE_CODE_PASSTHROUGH_VARS: readonly ["CLAUDE_CODE_OAUTH_TOKEN", "CLAUDE_CODE_MAX_RETRIES", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_VERTEX", "CLAUDE_CODE_USE_FOUNDRY", "CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS"];
+/** Proxy settings leak from the parent shell and silently re-route the child's API traffic. */
+declare const STRIPPED_PROXY_VARS: readonly ["HTTP_PROXY", "http_proxy", "HTTPS_PROXY", "https_proxy", "ALL_PROXY", "all_proxy"];
+/** The CLI retries 10 times by default, which turns an outage into a long silent hang. */
+declare const DEFAULT_MAX_RETRIES = "3";
+interface PrepareEnvOptions {
+    /** Leave `ANTHROPIC_API_KEY` / `ANTHROPIC_AUTH_TOKEN` in place and bill the API account. */
+    allowApiKeyBilling?: boolean;
+}
+declare class AuthMisconfiguredError extends Error {
+    readonly hint: string | undefined;
+    constructor(message: string, hint?: string);
+}
+/**
+ * Copy `env` and scrub it into something safe to hand a child Claude Code
+ * process. Never mutates its argument, so the result can go straight to
+ * `options.env`.
+ */
+declare function prepareEnv(env?: NodeJS.ProcessEnv, options?: PrepareEnvOptions): Record<string, string>;
+/**
+ * Pre-flight the scrubbed env so a misrouted run fails before it spends
+ * anything, rather than mid-stream with a surprise billing source.
+ */
+declare function assertAuthEnvOk(env: Record<string, string>, options?: PrepareEnvOptions): void;
+/**
+ * Credential sources that mean the run went to metered API billing. A blacklist,
+ * not a whitelist: the SDK's `ApiKeySource` union grows, and an unrecognised new
+ * member is far more likely to be another benign OAuth-ish route than a billing
+ * one. `"env"` is the pre-0.3 spelling of `"ANTHROPIC_API_KEY"`, kept so an
+ * older CLI on the PATH still trips the guard.
+ */
+declare const FORBIDDEN_API_KEY_SOURCES: ReadonlySet<string>;
+/** Post-flight on the first `system/init`, the earliest point the real auth route is observable. */
+declare function assertApiKeySourceAllowed(observed: string | undefined): void;
+
+export { ANTI_NESTING_VARS, type AgentFailure, type AgentFailureKind, type AgentInit, type AgentRunConfig, type AgentRunDeps, type AgentRunResult, type AgentUsage, AuthMisconfiguredError, CLAUDE_CODE_PASSTHROUGH_VARS, type ClassifyOptions, DEFAULT_INACTIVITY_MS, DEFAULT_MAX_RETRIES, FORBIDDEN_API_KEY_SOURCES, type PrepareEnvOptions, STRIPPED_AUTH_VARS, STRIPPED_PROXY_VARS, assertApiKeySourceAllowed, assertAuthEnvOk, classifyResult, prepareEnv, runAgent, sumModelCost, usageFromResult };

package/dist/index.js

@@ -0,0 +1,365 @@
+// src/run.ts
+import { query } from "@anthropic-ai/claude-agent-sdk";
+import { toJSONSchema } from "zod";
+
+// src/env.ts
+var ANTI_NESTING_VARS = ["CLAUDECODE", "CLAUDE_CODE_SSE_PORT", "CLAUDE_CODE_ENTRYPOINT"];
+var STRIPPED_AUTH_VARS = ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN"];
+var CLAUDE_CODE_PASSTHROUGH_VARS = [
+  "CLAUDE_CODE_OAUTH_TOKEN",
+  "CLAUDE_CODE_MAX_RETRIES",
+  "CLAUDE_CODE_USE_BEDROCK",
+  "CLAUDE_CODE_USE_VERTEX",
+  "CLAUDE_CODE_USE_FOUNDRY",
+  "CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS"
+];
+var STRIPPED_PROXY_VARS = [
+  "HTTP_PROXY",
+  "http_proxy",
+  "HTTPS_PROXY",
+  "https_proxy",
+  "ALL_PROXY",
+  "all_proxy"
+];
+var DEFAULT_MAX_RETRIES = "3";
+var AuthMisconfiguredError = class extends Error {
+  hint;
+  constructor(message, hint) {
+    super(message);
+    this.name = "AuthMisconfiguredError";
+    this.hint = hint;
+  }
+};
+function prepareEnv(env = process.env, options = {}) {
+  const out = {};
+  const passthrough = new Set(CLAUDE_CODE_PASSTHROUGH_VARS);
+  for (const [key, value] of Object.entries(env)) {
+    if (value === void 0) continue;
+    if (isClaudeCodeVar(key) && !passthrough.has(key)) continue;
+    out[key] = value;
+  }
+  for (const key of ANTI_NESTING_VARS) delete out[key];
+  for (const key of STRIPPED_PROXY_VARS) delete out[key];
+  if (!options.allowApiKeyBilling) {
+    for (const key of STRIPPED_AUTH_VARS) delete out[key];
+  }
+  out.CLAUDE_CODE_MAX_RETRIES ??= DEFAULT_MAX_RETRIES;
+  return out;
+}
+function isClaudeCodeVar(key) {
+  return key === "CLAUDECODE" || key.startsWith("CLAUDE_CODE_");
+}
+function assertAuthEnvOk(env, options = {}) {
+  if (options.allowApiKeyBilling) {
+    if (!env.ANTHROPIC_API_KEY && !env.ANTHROPIC_AUTH_TOKEN) {
+      throw new AuthMisconfiguredError(
+        "allowApiKeyBilling is set but neither ANTHROPIC_API_KEY nor ANTHROPIC_AUTH_TOKEN is present"
+      );
+    }
+    return;
+  }
+  if (env.ANTHROPIC_API_KEY || env.ANTHROPIC_AUTH_TOKEN) {
+    throw new AuthMisconfiguredError(
+      "ANTHROPIC_API_KEY or ANTHROPIC_AUTH_TOKEN survived the scrub",
+      "pass the env through prepareEnv, or set allowApiKeyBilling to bill the API account on purpose"
+    );
+  }
+  if (!env.CLAUDE_CODE_OAUTH_TOKEN) {
+    throw new AuthMisconfiguredError(
+      "CLAUDE_CODE_OAUTH_TOKEN is not set; subscription auth will fail",
+      "run `claude setup-token` once and export the printed token"
+    );
+  }
+}
+var FORBIDDEN_API_KEY_SOURCES = /* @__PURE__ */ new Set(["env", "ANTHROPIC_API_KEY"]);
+function assertApiKeySourceAllowed(observed) {
+  if (observed === void 0) {
+    throw new AuthMisconfiguredError("the init message carried no apiKeySource; the auth route cannot be verified");
+  }
+  if (FORBIDDEN_API_KEY_SOURCES.has(observed)) {
+    throw new AuthMisconfiguredError(
+      `apiKeySource '${observed}' means the run is on env-based API-key billing`,
+      "a stray ANTHROPIC_API_KEY most likely overrode CLAUDE_CODE_OAUTH_TOKEN"
+    );
+  }
+}
+
+// src/failures.ts
+var RATE_LIMIT_PATTERNS = [
+  /you'?ve hit your (session|weekly|opus|sonnet) limit/i,
+  /not your usage limit/i,
+  /\brate[ _-]?limit(ed|ing)?\b/i,
+  /\b429\b/,
+  /usage limit reached/i
+];
+var RETRY_AFTER_SECONDS = /retry(?:ing)?[- ](?:after|in)[ :]*(\d+)\s*(?:s|sec|secs|seconds)?\b/i;
+var ISO_TIMESTAMP = /\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})/;
+function classifyResult(result, options = {}) {
+  const text = errorText(result);
+  if (result.subtype === "success") {
+    if (result.stop_reason === "refusal") {
+      return { kind: "refusal", reason: text || "the model refused the request", raw: result };
+    }
+    return result.is_error ? rateLimitedOrRuntime(text, result, options) : void 0;
+  }
+  switch (result.subtype) {
+    case "error_max_budget_usd":
+      return { kind: "budget_exceeded", reason: text || "max budget reached", raw: result };
+    case "error_max_turns":
+      return { kind: "max_turns", reason: text || "max turns reached", raw: result };
+    case "error_max_structured_output_retries":
+      return { kind: "schema_invalid", reason: text || "structured-output retries exhausted", raw: result };
+    case "error_during_execution":
+      return rateLimitedOrRuntime(text, result, options);
+    default:
+      return { kind: "runtime_error", reason: `unknown result subtype: ${String(result["subtype"])}`, raw: result };
+  }
+}
+function rateLimitedOrRuntime(text, raw, options) {
+  if (!RATE_LIMIT_PATTERNS.some((p) => p.test(text))) {
+    return { kind: "runtime_error", reason: text || "the session ended with an unexplained error", raw };
+  }
+  const failure = { kind: "rate_limited", reason: text, raw };
+  const retryAt = parseRetryAt(text, options);
+  if (retryAt) failure.retryAt = retryAt;
+  return failure;
+}
+function parseRetryAt(text, options) {
+  if (options.rateLimitResetsAt !== void 0) return new Date(options.rateLimitResetsAt);
+  const seconds = RETRY_AFTER_SECONDS.exec(text);
+  if (seconds?.[1]) return new Date((options.now ?? Date.now()) + Number(seconds[1]) * 1e3);
+  const iso = ISO_TIMESTAMP.exec(text);
+  if (iso) return new Date(iso[0]);
+  return void 0;
+}
+function errorText(result) {
+  if (result.subtype === "success") return result.result ?? "";
+  return (result.errors ?? []).filter((e) => typeof e === "string" && e.length > 0).join("\n");
+}
+function usageFromResult(result, durationMs) {
+  const modelUsage = result?.modelUsage ?? {};
+  const reported = result?.total_cost_usd;
+  const totalCostUsd = typeof reported === "number" && reported > 0 ? reported : sumModelCost(modelUsage);
+  return { totalCostUsd, modelUsage, turns: result?.num_turns ?? 0, durationMs };
+}
+function sumModelCost(modelUsage) {
+  return Object.values(modelUsage).reduce((total, m) => total + (m.costUSD ?? 0), 0);
+}
+
+// src/run.ts
+var DEFAULT_INACTIVITY_MS = 6e5;
+async function runAgent(config, deps = {}) {
+  assertBudgets(config);
+  const now = deps.now ?? Date.now;
+  const startedAt = now();
+  const env = prepareEnv(deps.env ?? process.env, { allowApiKeyBilling: config.allowApiKeyBilling });
+  try {
+    assertAuthEnvOk(env, { allowApiKeyBilling: config.allowApiKeyBilling });
+  } catch (error) {
+    return { ok: false, failure: authFailure(error) };
+  }
+  const session = new Session(config, env, deps);
+  try {
+    return await session.run(startedAt);
+  } finally {
+    session.dispose();
+  }
+}
+function assertBudgets(config) {
+  requirePositive("maxTurns", config.maxTurns);
+  requirePositive("maxBudgetUsd", config.maxBudgetUsd);
+}
+function requirePositive(field, value) {
+  if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
+    throw new TypeError(`${field} is required and must be a positive finite number (received ${String(value)})`);
+  }
+}
+function authFailure(error) {
+  const failure = { kind: "auth_misconfigured", reason: messageOf(error) };
+  if (error instanceof AuthMisconfiguredError && error.hint) failure.hint = error.hint;
+  return failure;
+}
+function messageOf(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+var Session = class {
+  constructor(config, env, deps) {
+    this.config = config;
+    this.env = env;
+    this.deps = deps;
+    this.inactivityMs = config.inactivityTimeoutMs ?? DEFAULT_INACTIVITY_MS;
+  }
+  config;
+  env;
+  deps;
+  controller = new AbortController();
+  inactivityMs;
+  watchdog;
+  stream;
+  endReason;
+  init;
+  sessionId;
+  result;
+  rateLimitResetsAt;
+  authError;
+  onExternalAbort = () => {
+    this.end({ kind: "aborted", reason: String(this.config.signal?.reason ?? "aborted by caller") });
+  };
+  async run(startedAt) {
+    const signal = this.config.signal;
+    if (signal?.aborted) this.onExternalAbort();
+    else signal?.addEventListener("abort", this.onExternalAbort);
+    this.resetWatchdog();
+    const run = this.deps.query ?? query;
+    const elapsed = () => (this.deps.now ?? Date.now)() - startedAt;
+    try {
+      this.stream = run({ prompt: this.config.prompt, options: this.buildOptions() });
+      for await (const message of this.stream) {
+        this.resetWatchdog();
+        this.config.onMessage?.(message);
+        this.absorb(message);
+        if (this.endReason || this.authError) break;
+      }
+    } catch (error) {
+      if (!this.endReason) return this.fail({ kind: "runtime_error", reason: messageOf(error), raw: error }, elapsed());
+    }
+    return this.settle(elapsed());
+  }
+  dispose() {
+    if (this.watchdog) clearTimeout(this.watchdog);
+    this.config.signal?.removeEventListener("abort", this.onExternalAbort);
+    if (typeof this.stream?.close === "function") this.stream.close();
+  }
+  buildOptions() {
+    const c = this.config;
+    const options = {
+      cwd: c.cwd,
+      env: this.env,
+      abortController: this.controller,
+      maxTurns: c.maxTurns,
+      maxBudgetUsd: c.maxBudgetUsd,
+      permissionMode: c.permissionMode ?? "dontAsk",
+      settingSources: c.settingSources ?? []
+    };
+    if (c.model) options.model = c.model;
+    if (c.allowedTools) options.allowedTools = c.allowedTools;
+    if (c.disallowedTools) options.disallowedTools = c.disallowedTools;
+    if (c.resumeSessionId) options.resume = c.resumeSessionId;
+    if (c.agents) options.agents = c.agents;
+    if (c.mcpServers) options.mcpServers = c.mcpServers;
+    if (c.hooks) options.hooks = c.hooks;
+    if (c.outputSchema) {
+      options.outputFormat = { type: "json_schema", schema: toJSONSchema(c.outputSchema) };
+    }
+    return options;
+  }
+  absorb(message) {
+    if ("session_id" in message && typeof message.session_id === "string") this.sessionId = message.session_id;
+    if (message.type === "system" && message.subtype === "init") {
+      this.init = {
+        apiKeySource: message.apiKeySource,
+        model: message.model,
+        tools: message.tools ?? [],
+        permissionMode: message.permissionMode,
+        claudeCodeVersion: message.claude_code_version
+      };
+      if (!this.config.allowApiKeyBilling) this.checkApiKeySource(message.apiKeySource);
+      return;
+    }
+    if (message.type === "rate_limit_event") this.rateLimitResetsAt = message.rate_limit_info.resetsAt;
+    if (message.type === "result") this.result = message;
+  }
+  checkApiKeySource(observed) {
+    try {
+      assertApiKeySourceAllowed(observed);
+    } catch (error) {
+      this.authError = error instanceof AuthMisconfiguredError ? error : new AuthMisconfiguredError(messageOf(error));
+      this.controller.abort(this.authError);
+    }
+  }
+  end(reason) {
+    this.endReason ??= reason;
+    this.controller.abort(new Error(describeEnd(reason)));
+  }
+  resetWatchdog() {
+    if (this.watchdog) clearTimeout(this.watchdog);
+    this.watchdog = setTimeout(() => {
+      this.end({ kind: "inactivity_timeout", timeoutMs: this.inactivityMs });
+    }, this.inactivityMs);
+    this.watchdog.unref?.();
+  }
+  settle(durationMs) {
+    if (this.authError) return this.fail(authFailure(this.authError), durationMs);
+    if (this.endReason) return this.fail(endFailure(this.endReason), durationMs);
+    if (!this.result) {
+      const reason = "the session ended without emitting a result message";
+      return this.fail({ kind: "runtime_error", reason }, durationMs);
+    }
+    const options = {};
+    if (this.deps.now) options.now = this.deps.now();
+    if (this.rateLimitResetsAt !== void 0) options.rateLimitResetsAt = this.rateLimitResetsAt;
+    const failure = classifyResult(this.result, options);
+    if (failure) return this.fail(failure, durationMs);
+    return this.succeed(this.result, durationMs);
+  }
+  succeed(result, durationMs) {
+    const usage = usageFromResult(result, durationMs);
+    if (!this.init || !this.sessionId) {
+      const reason = "the session produced a result but never emitted an init message";
+      return { ok: false, failure: { kind: "runtime_error", reason, raw: result }, usage };
+    }
+    const output = this.readOutput(result);
+    if ("failure" in output) return { ok: false, failure: output.failure, sessionId: this.sessionId, usage };
+    return { ok: true, output: output.value, sessionId: this.sessionId, usage, init: this.init };
+  }
+  /**
+   * The SDK already validated `structured_output` against the same schema; we
+   * re-parse so the value the caller receives is the one TypeScript promises.
+   */
+  readOutput(result) {
+    const schema = this.config.outputSchema;
+    if (!schema) return { value: result.subtype === "success" ? result.result : "" };
+    const raw = result.subtype === "success" ? result.structured_output : void 0;
+    const parsed = schema.safeParse(raw);
+    if (parsed.success) return { value: parsed.data };
+    return {
+      failure: {
+        kind: "schema_invalid",
+        reason: "structured output did not match the supplied schema",
+        error: parsed.error,
+        raw
+      }
+    };
+  }
+  fail(failure, durationMs) {
+    const out = { ok: false, failure };
+    if (this.sessionId) out.sessionId = this.sessionId;
+    if (this.result) out.usage = usageFromResult(this.result, durationMs);
+    return out;
+  }
+};
+function endFailure(reason) {
+  if (reason.kind === "aborted") return { kind: "aborted", reason: reason.reason };
+  return { kind: "inactivity_timeout", reason: describeEnd(reason), timeoutMs: reason.timeoutMs };
+}
+function describeEnd(reason) {
+  return reason.kind === "aborted" ? reason.reason : `no message for ${reason.timeoutMs}ms`;
+}
+export {
+  ANTI_NESTING_VARS,
+  AuthMisconfiguredError,
+  CLAUDE_CODE_PASSTHROUGH_VARS,
+  DEFAULT_INACTIVITY_MS,
+  DEFAULT_MAX_RETRIES,
+  FORBIDDEN_API_KEY_SOURCES,
+  STRIPPED_AUTH_VARS,
+  STRIPPED_PROXY_VARS,
+  assertApiKeySourceAllowed,
+  assertAuthEnvOk,
+  classifyResult,
+  prepareEnv,
+  runAgent,
+  sumModelCost,
+  usageFromResult
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/run.ts","../src/env.ts","../src/failures.ts"],"sourcesContent":["import { query, type Options, type Query, type SDKMessage, type SDKResultMessage } from \"@anthropic-ai/claude-agent-sdk\";\nimport { toJSONSchema } from \"zod\";\nimport { AuthMisconfiguredError, assertApiKeySourceAllowed, assertAuthEnvOk, prepareEnv } from \"./env.js\";\nimport { classifyResult, usageFromResult } from \"./failures.js\";\nimport type { AgentFailure, AgentInit, AgentRunConfig, AgentRunResult } from \"./types.js\";\n\nexport const DEFAULT_INACTIVITY_MS = 600_000;\n\nexport interface AgentRunDeps {\n  /** Injection seam for tests; defaults to the SDK's own `query`. */\n  query?: typeof query;\n  /** Base environment to scrub; defaults to `process.env`. */\n  env?: NodeJS.ProcessEnv;\n  now?: () => number;\n}\n\n/**\n * Run one headless Claude Code session to completion and return either its\n * answer or a typed failure. Never throws for anything the agent does; the only\n * throws are caller mistakes caught before the session starts.\n */\nexport async function runAgent<T = string>(\n  config: AgentRunConfig<T>,\n  deps: AgentRunDeps = {},\n): Promise<AgentRunResult<T>> {\n  assertBudgets(config);\n  const now = deps.now ?? Date.now;\n  const startedAt = now();\n\n  const env = prepareEnv(deps.env ?? process.env, { allowApiKeyBilling: config.allowApiKeyBilling });\n  try {\n    assertAuthEnvOk(env, { allowApiKeyBilling: config.allowApiKeyBilling });\n  } catch (error) {\n    return { ok: false, failure: authFailure(error) };\n  }\n\n  const session = new Session(config, env, deps);\n  try {\n    return await session.run(startedAt);\n  } finally {\n    session.dispose();\n  }\n}\n\n/** The SDK leaves both circuit breakers unlimited, so a missing one is a bug, not a default. */\nfunction assertBudgets(config: AgentRunConfig<unknown>): void {\n  requirePositive(\"maxTurns\", config.maxTurns);\n  requirePositive(\"maxBudgetUsd\", config.maxBudgetUsd);\n}\n\nfunction requirePositive(field: string, value: number): void {\n  if (typeof value !== \"number\" || !Number.isFinite(value) || value <= 0) {\n    throw new TypeError(`${field} is required and must be a positive finite number (received ${String(value)})`);\n  }\n}\n\nfunction authFailure(error: unknown): AgentFailure {\n  const failure: AgentFailure = { kind: \"auth_misconfigured\", reason: messageOf(error) };\n  if (error instanceof AuthMisconfiguredError && error.hint) failure.hint = error.hint;\n  return failure;\n}\n\nfunction messageOf(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\ntype EndReason = { kind: \"aborted\"; reason: string } | { kind: \"inactivity_timeout\"; timeoutMs: number };\n\n/** One `query()` call plus the watchdog, abort wiring and stream state it owns. */\nclass Session<T> {\n  private readonly controller = new AbortController();\n  private readonly inactivityMs: number;\n  private watchdog: ReturnType<typeof setTimeout> | undefined;\n  private stream: Query | undefined;\n  private endReason: EndReason | undefined;\n  private init: AgentInit | undefined;\n  private sessionId: string | undefined;\n  private result: SDKResultMessage | undefined;\n  private rateLimitResetsAt: number | undefined;\n  private authError: AuthMisconfiguredError | undefined;\n  private readonly onExternalAbort = () => {\n    this.end({ kind: \"aborted\", reason: String(this.config.signal?.reason ?? \"aborted by caller\") });\n  };\n\n  constructor(\n    private readonly config: AgentRunConfig<T>,\n    private readonly env: Record<string, string>,\n    private readonly deps: AgentRunDeps,\n  ) {\n    this.inactivityMs = config.inactivityTimeoutMs ?? DEFAULT_INACTIVITY_MS;\n  }\n\n  async run(startedAt: number): Promise<AgentRunResult<T>> {\n    const signal = this.config.signal;\n    if (signal?.aborted) this.onExternalAbort();\n    else signal?.addEventListener(\"abort\", this.onExternalAbort);\n\n    this.resetWatchdog();\n    const run = this.deps.query ?? query;\n    const elapsed = () => (this.deps.now ?? Date.now)() - startedAt;\n\n    try {\n      this.stream = run({ prompt: this.config.prompt, options: this.buildOptions() });\n      for await (const message of this.stream) {\n        this.resetWatchdog();\n        this.config.onMessage?.(message);\n        this.absorb(message);\n        if (this.endReason || this.authError) break;\n      }\n    } catch (error) {\n      if (!this.endReason) return this.fail({ kind: \"runtime_error\", reason: messageOf(error), raw: error }, elapsed());\n    }\n    return this.settle(elapsed());\n  }\n\n  dispose(): void {\n    if (this.watchdog) clearTimeout(this.watchdog);\n    this.config.signal?.removeEventListener(\"abort\", this.onExternalAbort);\n    // `close()` tears down the CLI subprocess; guarded because older SDKs lack it.\n    if (typeof this.stream?.close === \"function\") this.stream.close();\n  }\n\n  private buildOptions(): Options {\n    const c = this.config;\n    const options: Options = {\n      cwd: c.cwd,\n      env: this.env,\n      abortController: this.controller,\n      maxTurns: c.maxTurns,\n      maxBudgetUsd: c.maxBudgetUsd,\n      permissionMode: c.permissionMode ?? \"dontAsk\",\n      settingSources: c.settingSources ?? [],\n    };\n    if (c.model) options.model = c.model;\n    if (c.allowedTools) options.allowedTools = c.allowedTools;\n    if (c.disallowedTools) options.disallowedTools = c.disallowedTools;\n    if (c.resumeSessionId) options.resume = c.resumeSessionId;\n    if (c.agents) options.agents = c.agents;\n    if (c.mcpServers) options.mcpServers = c.mcpServers;\n    if (c.hooks) options.hooks = c.hooks;\n    if (c.outputSchema) {\n      options.outputFormat = { type: \"json_schema\", schema: toJSONSchema(c.outputSchema) as Record<string, unknown> };\n    }\n    return options;\n  }\n\n  private absorb(message: SDKMessage): void {\n    if (\"session_id\" in message && typeof message.session_id === \"string\") this.sessionId = message.session_id;\n    if (message.type === \"system\" && message.subtype === \"init\") {\n      this.init = {\n        apiKeySource: message.apiKeySource,\n        model: message.model,\n        tools: message.tools ?? [],\n        permissionMode: message.permissionMode,\n        claudeCodeVersion: message.claude_code_version,\n      };\n      if (!this.config.allowApiKeyBilling) this.checkApiKeySource(message.apiKeySource);\n      return;\n    }\n    if (message.type === \"rate_limit_event\") this.rateLimitResetsAt = message.rate_limit_info.resetsAt;\n    if (message.type === \"result\") this.result = message;\n  }\n\n  private checkApiKeySource(observed: string | undefined): void {\n    try {\n      assertApiKeySourceAllowed(observed);\n    } catch (error) {\n      // Stop the session here rather than let a mis-billed run continue spending.\n      this.authError = error instanceof AuthMisconfiguredError ? error : new AuthMisconfiguredError(messageOf(error));\n      this.controller.abort(this.authError);\n    }\n  }\n\n  private end(reason: EndReason): void {\n    this.endReason ??= reason;\n    this.controller.abort(new Error(describeEnd(reason)));\n  }\n\n  private resetWatchdog(): void {\n    if (this.watchdog) clearTimeout(this.watchdog);\n    this.watchdog = setTimeout(() => {\n      this.end({ kind: \"inactivity_timeout\", timeoutMs: this.inactivityMs });\n    }, this.inactivityMs);\n    this.watchdog.unref?.();\n  }\n\n  private settle(durationMs: number): AgentRunResult<T> {\n    if (this.authError) return this.fail(authFailure(this.authError), durationMs);\n    if (this.endReason) return this.fail(endFailure(this.endReason), durationMs);\n    if (!this.result) {\n      const reason = \"the session ended without emitting a result message\";\n      return this.fail({ kind: \"runtime_error\", reason }, durationMs);\n    }\n\n    const options: { now?: number; rateLimitResetsAt?: number } = {};\n    if (this.deps.now) options.now = this.deps.now();\n    if (this.rateLimitResetsAt !== undefined) options.rateLimitResetsAt = this.rateLimitResetsAt;\n    const failure = classifyResult(this.result, options);\n    if (failure) return this.fail(failure, durationMs);\n\n    return this.succeed(this.result, durationMs);\n  }\n\n  private succeed(result: SDKResultMessage, durationMs: number): AgentRunResult<T> {\n    const usage = usageFromResult(result, durationMs);\n    if (!this.init || !this.sessionId) {\n      const reason = \"the session produced a result but never emitted an init message\";\n      return { ok: false, failure: { kind: \"runtime_error\", reason, raw: result }, usage };\n    }\n    const output = this.readOutput(result);\n    if (\"failure\" in output) return { ok: false, failure: output.failure, sessionId: this.sessionId, usage };\n    return { ok: true, output: output.value, sessionId: this.sessionId, usage, init: this.init };\n  }\n\n  /**\n   * The SDK already validated `structured_output` against the same schema; we\n   * re-parse so the value the caller receives is the one TypeScript promises.\n   */\n  private readOutput(result: SDKResultMessage): { value: T } | { failure: AgentFailure } {\n    const schema = this.config.outputSchema;\n    if (!schema) return { value: (result.subtype === \"success\" ? result.result : \"\") as T };\n    const raw = result.subtype === \"success\" ? result.structured_output : undefined;\n    const parsed = schema.safeParse(raw);\n    if (parsed.success) return { value: parsed.data };\n    return {\n      failure: {\n        kind: \"schema_invalid\",\n        reason: \"structured output did not match the supplied schema\",\n        error: parsed.error,\n        raw,\n      },\n    };\n  }\n\n  private fail(failure: AgentFailure, durationMs: number): AgentRunResult<T> {\n    const out: AgentRunResult<T> = { ok: false, failure };\n    if (this.sessionId) out.sessionId = this.sessionId;\n    if (this.result) out.usage = usageFromResult(this.result, durationMs);\n    return out;\n  }\n}\n\nfunction endFailure(reason: EndReason): AgentFailure {\n  if (reason.kind === \"aborted\") return { kind: \"aborted\", reason: reason.reason };\n  return { kind: \"inactivity_timeout\", reason: describeEnd(reason), timeoutMs: reason.timeoutMs };\n}\n\nfunction describeEnd(reason: EndReason): string {\n  return reason.kind === \"aborted\" ? reason.reason : `no message for ${reason.timeoutMs}ms`;\n}\n","/**\n * The only module in this package that reads `process.env`. A stray\n * `ANTHROPIC_API_KEY` silently outranks `CLAUDE_CODE_OAUTH_TOKEN` and routes a\n * headless run onto metered API billing; the invariants here exist because that\n * cost real money once.\n */\n\n/** Set by a parent Claude Code session; the child CLI refuses to start when it inherits them. */\nexport const ANTI_NESTING_VARS = [\"CLAUDECODE\", \"CLAUDE_CODE_SSE_PORT\", \"CLAUDE_CODE_ENTRYPOINT\"] as const;\n\n/** Metered-billing credentials, stripped unless the caller opts in explicitly. */\nexport const STRIPPED_AUTH_VARS = [\"ANTHROPIC_API_KEY\", \"ANTHROPIC_AUTH_TOKEN\"] as const;\n\n/**\n * The only `CLAUDE_CODE_*` variables a child may inherit. Everything else in\n * that namespace describes the *parent* session (exec path, terminal, entry\n * point) and confuses the child's credential and config inference.\n */\nexport const CLAUDE_CODE_PASSTHROUGH_VARS = [\n  \"CLAUDE_CODE_OAUTH_TOKEN\",\n  \"CLAUDE_CODE_MAX_RETRIES\",\n  \"CLAUDE_CODE_USE_BEDROCK\",\n  \"CLAUDE_CODE_USE_VERTEX\",\n  \"CLAUDE_CODE_USE_FOUNDRY\",\n  \"CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS\",\n] as const;\n\n/** Proxy settings leak from the parent shell and silently re-route the child's API traffic. */\nexport const STRIPPED_PROXY_VARS = [\n  \"HTTP_PROXY\",\n  \"http_proxy\",\n  \"HTTPS_PROXY\",\n  \"https_proxy\",\n  \"ALL_PROXY\",\n  \"all_proxy\",\n] as const;\n\n/** The CLI retries 10 times by default, which turns an outage into a long silent hang. */\nexport const DEFAULT_MAX_RETRIES = \"3\";\n\nexport interface PrepareEnvOptions {\n  /** Leave `ANTHROPIC_API_KEY` / `ANTHROPIC_AUTH_TOKEN` in place and bill the API account. */\n  allowApiKeyBilling?: boolean;\n}\n\nexport class AuthMisconfiguredError extends Error {\n  readonly hint: string | undefined;\n\n  constructor(message: string, hint?: string) {\n    super(message);\n    this.name = \"AuthMisconfiguredError\";\n    this.hint = hint;\n  }\n}\n\n/**\n * Copy `env` and scrub it into something safe to hand a child Claude Code\n * process. Never mutates its argument, so the result can go straight to\n * `options.env`.\n */\nexport function prepareEnv(\n  env: NodeJS.ProcessEnv = process.env,\n  options: PrepareEnvOptions = {},\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  const passthrough = new Set<string>(CLAUDE_CODE_PASSTHROUGH_VARS);\n\n  for (const [key, value] of Object.entries(env)) {\n    if (value === undefined) continue;\n    if (isClaudeCodeVar(key) && !passthrough.has(key)) continue;\n    out[key] = value;\n  }\n\n  for (const key of ANTI_NESTING_VARS) delete out[key];\n  for (const key of STRIPPED_PROXY_VARS) delete out[key];\n  if (!options.allowApiKeyBilling) {\n    for (const key of STRIPPED_AUTH_VARS) delete out[key];\n  }\n\n  out.CLAUDE_CODE_MAX_RETRIES ??= DEFAULT_MAX_RETRIES;\n  return out;\n}\n\nfunction isClaudeCodeVar(key: string): boolean {\n  return key === \"CLAUDECODE\" || key.startsWith(\"CLAUDE_CODE_\");\n}\n\n/**\n * Pre-flight the scrubbed env so a misrouted run fails before it spends\n * anything, rather than mid-stream with a surprise billing source.\n */\nexport function assertAuthEnvOk(env: Record<string, string>, options: PrepareEnvOptions = {}): void {\n  if (options.allowApiKeyBilling) {\n    if (!env.ANTHROPIC_API_KEY && !env.ANTHROPIC_AUTH_TOKEN) {\n      throw new AuthMisconfiguredError(\n        \"allowApiKeyBilling is set but neither ANTHROPIC_API_KEY nor ANTHROPIC_AUTH_TOKEN is present\",\n      );\n    }\n    return;\n  }\n\n  if (env.ANTHROPIC_API_KEY || env.ANTHROPIC_AUTH_TOKEN) {\n    throw new AuthMisconfiguredError(\n      \"ANTHROPIC_API_KEY or ANTHROPIC_AUTH_TOKEN survived the scrub\",\n      \"pass the env through prepareEnv, or set allowApiKeyBilling to bill the API account on purpose\",\n    );\n  }\n\n  if (!env.CLAUDE_CODE_OAUTH_TOKEN) {\n    throw new AuthMisconfiguredError(\n      \"CLAUDE_CODE_OAUTH_TOKEN is not set; subscription auth will fail\",\n      \"run `claude setup-token` once and export the printed token\",\n    );\n  }\n}\n\n/**\n * Credential sources that mean the run went to metered API billing. A blacklist,\n * not a whitelist: the SDK's `ApiKeySource` union grows, and an unrecognised new\n * member is far more likely to be another benign OAuth-ish route than a billing\n * one. `\"env\"` is the pre-0.3 spelling of `\"ANTHROPIC_API_KEY\"`, kept so an\n * older CLI on the PATH still trips the guard.\n */\nexport const FORBIDDEN_API_KEY_SOURCES: ReadonlySet<string> = new Set([\"env\", \"ANTHROPIC_API_KEY\"]);\n\n/** Post-flight on the first `system/init`, the earliest point the real auth route is observable. */\nexport function assertApiKeySourceAllowed(observed: string | undefined): void {\n  if (observed === undefined) {\n    throw new AuthMisconfiguredError(\"the init message carried no apiKeySource; the auth route cannot be verified\");\n  }\n  if (FORBIDDEN_API_KEY_SOURCES.has(observed)) {\n    throw new AuthMisconfiguredError(\n      `apiKeySource '${observed}' means the run is on env-based API-key billing`,\n      \"a stray ANTHROPIC_API_KEY most likely overrode CLAUDE_CODE_OAUTH_TOKEN\",\n    );\n  }\n}\n","import type { ModelUsage, SDKResultMessage } from \"@anthropic-ai/claude-agent-sdk\";\nimport type { AgentFailure, AgentUsage } from \"./types.js\";\n\n/**\n * Rate limiting reaches the caller as prose, not as a subtype, so the phrasing\n * is the only signal. Matching too eagerly would relabel ordinary runtime errors\n * as retryable, so each pattern is anchored on wording the CLI actually emits.\n */\nconst RATE_LIMIT_PATTERNS = [\n  /you'?ve hit your (session|weekly|opus|sonnet) limit/i,\n  /not your usage limit/i,\n  /\\brate[ _-]?limit(ed|ing)?\\b/i,\n  /\\b429\\b/,\n  /usage limit reached/i,\n];\n\nconst RETRY_AFTER_SECONDS = /retry(?:ing)?[- ](?:after|in)[ :]*(\\d+)\\s*(?:s|sec|secs|seconds)?\\b/i;\nconst ISO_TIMESTAMP = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})/;\n\nexport interface ClassifyOptions {\n  /** Epoch millis used to turn a relative \"retry after Ns\" hint into an absolute date. */\n  now?: number;\n  /** Epoch millis from the stream's last `rate_limit_event`, which beats anything parsed from prose. */\n  rateLimitResetsAt?: number;\n}\n\n/**\n * Map a terminal `result` message onto the failure taxonomy, or `undefined` when\n * the run succeeded and the caller should read the output.\n */\nexport function classifyResult(result: SDKResultMessage, options: ClassifyOptions = {}): AgentFailure | undefined {\n  const text = errorText(result);\n\n  if (result.subtype === \"success\") {\n    if (result.stop_reason === \"refusal\") {\n      return { kind: \"refusal\", reason: text || \"the model refused the request\", raw: result };\n    }\n    // A success subtype still carries `is_error` when the turn died on an API error.\n    return result.is_error ? rateLimitedOrRuntime(text, result, options) : undefined;\n  }\n\n  switch (result.subtype) {\n    case \"error_max_budget_usd\":\n      return { kind: \"budget_exceeded\", reason: text || \"max budget reached\", raw: result };\n    case \"error_max_turns\":\n      return { kind: \"max_turns\", reason: text || \"max turns reached\", raw: result };\n    case \"error_max_structured_output_retries\":\n      return { kind: \"schema_invalid\", reason: text || \"structured-output retries exhausted\", raw: result };\n    case \"error_during_execution\":\n      return rateLimitedOrRuntime(text, result, options);\n    default:\n      // Unreachable per the SDK's union, but a newer CLI may add a subtype.\n      return { kind: \"runtime_error\", reason: `unknown result subtype: ${String(result[\"subtype\"])}`, raw: result };\n  }\n}\n\nfunction rateLimitedOrRuntime(text: string, raw: SDKResultMessage, options: ClassifyOptions): AgentFailure {\n  if (!RATE_LIMIT_PATTERNS.some((p) => p.test(text))) {\n    return { kind: \"runtime_error\", reason: text || \"the session ended with an unexplained error\", raw };\n  }\n  const failure: AgentFailure = { kind: \"rate_limited\", reason: text, raw };\n  const retryAt = parseRetryAt(text, options);\n  if (retryAt) failure.retryAt = retryAt;\n  return failure;\n}\n\nfunction parseRetryAt(text: string, options: ClassifyOptions): Date | undefined {\n  if (options.rateLimitResetsAt !== undefined) return new Date(options.rateLimitResetsAt);\n  const seconds = RETRY_AFTER_SECONDS.exec(text);\n  if (seconds?.[1]) return new Date((options.now ?? Date.now()) + Number(seconds[1]) * 1000);\n  const iso = ISO_TIMESTAMP.exec(text);\n  if (iso) return new Date(iso[0]);\n  return undefined;\n}\n\n/** `result` carries the text on a success message, `errors` on every failure subtype. */\nfunction errorText(result: SDKResultMessage): string {\n  if (result.subtype === \"success\") return result.result ?? \"\";\n  return (result.errors ?? []).filter((e) => typeof e === \"string\" && e.length > 0).join(\"\\n\");\n}\n\n/**\n * The SDK's cost fields are already cumulative across a `query()` call, so the\n * latest result carries the running total and summing them would double-count.\n * `modelUsage` is the fallback because a crash result can arrive with\n * `total_cost_usd` zeroed while the per-model breakdown survives.\n */\nexport function usageFromResult(result: SDKResultMessage | undefined, durationMs: number): AgentUsage {\n  const modelUsage = result?.modelUsage ?? {};\n  const reported = result?.total_cost_usd;\n  const totalCostUsd = typeof reported === \"number\" && reported > 0 ? reported : sumModelCost(modelUsage);\n  return { totalCostUsd, modelUsage, turns: result?.num_turns ?? 0, durationMs };\n}\n\nexport function sumModelCost(modelUsage: Record<string, ModelUsage>): number {\n  return Object.values(modelUsage).reduce((total, m) => total + (m.costUSD ?? 0), 0);\n}\n"],"mappings":";AAAA,SAAS,aAA+E;AACxF,SAAS,oBAAoB;;;ACOtB,IAAM,oBAAoB,CAAC,cAAc,wBAAwB,wBAAwB;AAGzF,IAAM,qBAAqB,CAAC,qBAAqB,sBAAsB;AAOvE,IAAM,+BAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,sBAAsB;AAO5B,IAAM,yBAAN,cAAqC,MAAM;AAAA,EACvC;AAAA,EAET,YAAY,SAAiB,MAAe;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAOO,SAAS,WACd,MAAyB,QAAQ,KACjC,UAA6B,CAAC,GACN;AACxB,QAAM,MAA8B,CAAC;AACrC,QAAM,cAAc,IAAI,IAAY,4BAA4B;AAEhE,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,QAAI,UAAU,OAAW;AACzB,QAAI,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,GAAG,EAAG;AACnD,QAAI,GAAG,IAAI;AAAA,EACb;AAEA,aAAW,OAAO,kBAAmB,QAAO,IAAI,GAAG;AACnD,aAAW,OAAO,oBAAqB,QAAO,IAAI,GAAG;AACrD,MAAI,CAAC,QAAQ,oBAAoB;AAC/B,eAAW,OAAO,mBAAoB,QAAO,IAAI,GAAG;AAAA,EACtD;AAEA,MAAI,4BAA4B;AAChC,SAAO;AACT;AAEA,SAAS,gBAAgB,KAAsB;AAC7C,SAAO,QAAQ,gBAAgB,IAAI,WAAW,cAAc;AAC9D;AAMO,SAAS,gBAAgB,KAA6B,UAA6B,CAAC,GAAS;AAClG,MAAI,QAAQ,oBAAoB;AAC9B,QAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,sBAAsB;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA;AAAA,EACF;AAEA,MAAI,IAAI,qBAAqB,IAAI,sBAAsB;AACrD,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,IAAI,yBAAyB;AAChC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AASO,IAAM,4BAAiD,oBAAI,IAAI,CAAC,OAAO,mBAAmB,CAAC;AAG3F,SAAS,0BAA0B,UAAoC;AAC5E,MAAI,aAAa,QAAW;AAC1B,UAAM,IAAI,uBAAuB,6EAA6E;AAAA,EAChH;AACA,MAAI,0BAA0B,IAAI,QAAQ,GAAG;AAC3C,UAAM,IAAI;AAAA,MACR,iBAAiB,QAAQ;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AACF;;;AChIA,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,sBAAsB;AAC5B,IAAM,gBAAgB;AAaf,SAAS,eAAe,QAA0B,UAA2B,CAAC,GAA6B;AAChH,QAAM,OAAO,UAAU,MAAM;AAE7B,MAAI,OAAO,YAAY,WAAW;AAChC,QAAI,OAAO,gBAAgB,WAAW;AACpC,aAAO,EAAE,MAAM,WAAW,QAAQ,QAAQ,iCAAiC,KAAK,OAAO;AAAA,IACzF;AAEA,WAAO,OAAO,WAAW,qBAAqB,MAAM,QAAQ,OAAO,IAAI;AAAA,EACzE;AAEA,UAAQ,OAAO,SAAS;AAAA,IACtB,KAAK;AACH,aAAO,EAAE,MAAM,mBAAmB,QAAQ,QAAQ,sBAAsB,KAAK,OAAO;AAAA,IACtF,KAAK;AACH,aAAO,EAAE,MAAM,aAAa,QAAQ,QAAQ,qBAAqB,KAAK,OAAO;AAAA,IAC/E,KAAK;AACH,aAAO,EAAE,MAAM,kBAAkB,QAAQ,QAAQ,uCAAuC,KAAK,OAAO;AAAA,IACtG,KAAK;AACH,aAAO,qBAAqB,MAAM,QAAQ,OAAO;AAAA,IACnD;AAEE,aAAO,EAAE,MAAM,iBAAiB,QAAQ,2BAA2B,OAAO,OAAO,SAAS,CAAC,CAAC,IAAI,KAAK,OAAO;AAAA,EAChH;AACF;AAEA,SAAS,qBAAqB,MAAc,KAAuB,SAAwC;AACzG,MAAI,CAAC,oBAAoB,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG;AAClD,WAAO,EAAE,MAAM,iBAAiB,QAAQ,QAAQ,+CAA+C,IAAI;AAAA,EACrG;AACA,QAAM,UAAwB,EAAE,MAAM,gBAAgB,QAAQ,MAAM,IAAI;AACxE,QAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,MAAI,QAAS,SAAQ,UAAU;AAC/B,SAAO;AACT;AAEA,SAAS,aAAa,MAAc,SAA4C;AAC9E,MAAI,QAAQ,sBAAsB,OAAW,QAAO,IAAI,KAAK,QAAQ,iBAAiB;AACtF,QAAM,UAAU,oBAAoB,KAAK,IAAI;AAC7C,MAAI,UAAU,CAAC,EAAG,QAAO,IAAI,MAAM,QAAQ,OAAO,KAAK,IAAI,KAAK,OAAO,QAAQ,CAAC,CAAC,IAAI,GAAI;AACzF,QAAM,MAAM,cAAc,KAAK,IAAI;AACnC,MAAI,IAAK,QAAO,IAAI,KAAK,IAAI,CAAC,CAAC;AAC/B,SAAO;AACT;AAGA,SAAS,UAAU,QAAkC;AACnD,MAAI,OAAO,YAAY,UAAW,QAAO,OAAO,UAAU;AAC1D,UAAQ,OAAO,UAAU,CAAC,GAAG,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EAAE,KAAK,IAAI;AAC7F;AAQO,SAAS,gBAAgB,QAAsC,YAAgC;AACpG,QAAM,aAAa,QAAQ,cAAc,CAAC;AAC1C,QAAM,WAAW,QAAQ;AACzB,QAAM,eAAe,OAAO,aAAa,YAAY,WAAW,IAAI,WAAW,aAAa,UAAU;AACtG,SAAO,EAAE,cAAc,YAAY,OAAO,QAAQ,aAAa,GAAG,WAAW;AAC/E;AAEO,SAAS,aAAa,YAAgD;AAC3E,SAAO,OAAO,OAAO,UAAU,EAAE,OAAO,CAAC,OAAO,MAAM,SAAS,EAAE,WAAW,IAAI,CAAC;AACnF;;;AF1FO,IAAM,wBAAwB;AAerC,eAAsB,SACpB,QACA,OAAqB,CAAC,GACM;AAC5B,gBAAc,MAAM;AACpB,QAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,QAAM,YAAY,IAAI;AAEtB,QAAM,MAAM,WAAW,KAAK,OAAO,QAAQ,KAAK,EAAE,oBAAoB,OAAO,mBAAmB,CAAC;AACjG,MAAI;AACF,oBAAgB,KAAK,EAAE,oBAAoB,OAAO,mBAAmB,CAAC;AAAA,EACxE,SAAS,OAAO;AACd,WAAO,EAAE,IAAI,OAAO,SAAS,YAAY,KAAK,EAAE;AAAA,EAClD;AAEA,QAAM,UAAU,IAAI,QAAQ,QAAQ,KAAK,IAAI;AAC7C,MAAI;AACF,WAAO,MAAM,QAAQ,IAAI,SAAS;AAAA,EACpC,UAAE;AACA,YAAQ,QAAQ;AAAA,EAClB;AACF;AAGA,SAAS,cAAc,QAAuC;AAC5D,kBAAgB,YAAY,OAAO,QAAQ;AAC3C,kBAAgB,gBAAgB,OAAO,YAAY;AACrD;AAEA,SAAS,gBAAgB,OAAe,OAAqB;AAC3D,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AACtE,UAAM,IAAI,UAAU,GAAG,KAAK,+DAA+D,OAAO,KAAK,CAAC,GAAG;AAAA,EAC7G;AACF;AAEA,SAAS,YAAY,OAA8B;AACjD,QAAM,UAAwB,EAAE,MAAM,sBAAsB,QAAQ,UAAU,KAAK,EAAE;AACrF,MAAI,iBAAiB,0BAA0B,MAAM,KAAM,SAAQ,OAAO,MAAM;AAChF,SAAO;AACT;AAEA,SAAS,UAAU,OAAwB;AACzC,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAKA,IAAM,UAAN,MAAiB;AAAA,EAef,YACmB,QACA,KACA,MACjB;AAHiB;AACA;AACA;AAEjB,SAAK,eAAe,OAAO,uBAAuB;AAAA,EACpD;AAAA,EALmB;AAAA,EACA;AAAA,EACA;AAAA,EAjBF,aAAa,IAAI,gBAAgB;AAAA,EACjC;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACS,kBAAkB,MAAM;AACvC,SAAK,IAAI,EAAE,MAAM,WAAW,QAAQ,OAAO,KAAK,OAAO,QAAQ,UAAU,mBAAmB,EAAE,CAAC;AAAA,EACjG;AAAA,EAUA,MAAM,IAAI,WAA+C;AACvD,UAAM,SAAS,KAAK,OAAO;AAC3B,QAAI,QAAQ,QAAS,MAAK,gBAAgB;AAAA,QACrC,SAAQ,iBAAiB,SAAS,KAAK,eAAe;AAE3D,SAAK,cAAc;AACnB,UAAM,MAAM,KAAK,KAAK,SAAS;AAC/B,UAAM,UAAU,OAAO,KAAK,KAAK,OAAO,KAAK,KAAK,IAAI;AAEtD,QAAI;AACF,WAAK,SAAS,IAAI,EAAE,QAAQ,KAAK,OAAO,QAAQ,SAAS,KAAK,aAAa,EAAE,CAAC;AAC9E,uBAAiB,WAAW,KAAK,QAAQ;AACvC,aAAK,cAAc;AACnB,aAAK,OAAO,YAAY,OAAO;AAC/B,aAAK,OAAO,OAAO;AACnB,YAAI,KAAK,aAAa,KAAK,UAAW;AAAA,MACxC;AAAA,IACF,SAAS,OAAO;AACd,UAAI,CAAC,KAAK,UAAW,QAAO,KAAK,KAAK,EAAE,MAAM,iBAAiB,QAAQ,UAAU,KAAK,GAAG,KAAK,MAAM,GAAG,QAAQ,CAAC;AAAA,IAClH;AACA,WAAO,KAAK,OAAO,QAAQ,CAAC;AAAA,EAC9B;AAAA,EAEA,UAAgB;AACd,QAAI,KAAK,SAAU,cAAa,KAAK,QAAQ;AAC7C,SAAK,OAAO,QAAQ,oBAAoB,SAAS,KAAK,eAAe;AAErE,QAAI,OAAO,KAAK,QAAQ,UAAU,WAAY,MAAK,OAAO,MAAM;AAAA,EAClE;AAAA,EAEQ,eAAwB;AAC9B,UAAM,IAAI,KAAK;AACf,UAAM,UAAmB;AAAA,MACvB,KAAK,EAAE;AAAA,MACP,KAAK,KAAK;AAAA,MACV,iBAAiB,KAAK;AAAA,MACtB,UAAU,EAAE;AAAA,MACZ,cAAc,EAAE;AAAA,MAChB,gBAAgB,EAAE,kBAAkB;AAAA,MACpC,gBAAgB,EAAE,kBAAkB,CAAC;AAAA,IACvC;AACA,QAAI,EAAE,MAAO,SAAQ,QAAQ,EAAE;AAC/B,QAAI,EAAE,aAAc,SAAQ,eAAe,EAAE;AAC7C,QAAI,EAAE,gBAAiB,SAAQ,kBAAkB,EAAE;AACnD,QAAI,EAAE,gBAAiB,SAAQ,SAAS,EAAE;AAC1C,QAAI,EAAE,OAAQ,SAAQ,SAAS,EAAE;AACjC,QAAI,EAAE,WAAY,SAAQ,aAAa,EAAE;AACzC,QAAI,EAAE,MAAO,SAAQ,QAAQ,EAAE;AAC/B,QAAI,EAAE,cAAc;AAClB,cAAQ,eAAe,EAAE,MAAM,eAAe,QAAQ,aAAa,EAAE,YAAY,EAA6B;AAAA,IAChH;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,OAAO,SAA2B;AACxC,QAAI,gBAAgB,WAAW,OAAO,QAAQ,eAAe,SAAU,MAAK,YAAY,QAAQ;AAChG,QAAI,QAAQ,SAAS,YAAY,QAAQ,YAAY,QAAQ;AAC3D,WAAK,OAAO;AAAA,QACV,cAAc,QAAQ;AAAA,QACtB,OAAO,QAAQ;AAAA,QACf,OAAO,QAAQ,SAAS,CAAC;AAAA,QACzB,gBAAgB,QAAQ;AAAA,QACxB,mBAAmB,QAAQ;AAAA,MAC7B;AACA,UAAI,CAAC,KAAK,OAAO,mBAAoB,MAAK,kBAAkB,QAAQ,YAAY;AAChF;AAAA,IACF;AACA,QAAI,QAAQ,SAAS,mBAAoB,MAAK,oBAAoB,QAAQ,gBAAgB;AAC1F,QAAI,QAAQ,SAAS,SAAU,MAAK,SAAS;AAAA,EAC/C;AAAA,EAEQ,kBAAkB,UAAoC;AAC5D,QAAI;AACF,gCAA0B,QAAQ;AAAA,IACpC,SAAS,OAAO;AAEd,WAAK,YAAY,iBAAiB,yBAAyB,QAAQ,IAAI,uBAAuB,UAAU,KAAK,CAAC;AAC9G,WAAK,WAAW,MAAM,KAAK,SAAS;AAAA,IACtC;AAAA,EACF;AAAA,EAEQ,IAAI,QAAyB;AACnC,SAAK,cAAc;AACnB,SAAK,WAAW,MAAM,IAAI,MAAM,YAAY,MAAM,CAAC,CAAC;AAAA,EACtD;AAAA,EAEQ,gBAAsB;AAC5B,QAAI,KAAK,SAAU,cAAa,KAAK,QAAQ;AAC7C,SAAK,WAAW,WAAW,MAAM;AAC/B,WAAK,IAAI,EAAE,MAAM,sBAAsB,WAAW,KAAK,aAAa,CAAC;AAAA,IACvE,GAAG,KAAK,YAAY;AACpB,SAAK,SAAS,QAAQ;AAAA,EACxB;AAAA,EAEQ,OAAO,YAAuC;AACpD,QAAI,KAAK,UAAW,QAAO,KAAK,KAAK,YAAY,KAAK,SAAS,GAAG,UAAU;AAC5E,QAAI,KAAK,UAAW,QAAO,KAAK,KAAK,WAAW,KAAK,SAAS,GAAG,UAAU;AAC3E,QAAI,CAAC,KAAK,QAAQ;AAChB,YAAM,SAAS;AACf,aAAO,KAAK,KAAK,EAAE,MAAM,iBAAiB,OAAO,GAAG,UAAU;AAAA,IAChE;AAEA,UAAM,UAAwD,CAAC;AAC/D,QAAI,KAAK,KAAK,IAAK,SAAQ,MAAM,KAAK,KAAK,IAAI;AAC/C,QAAI,KAAK,sBAAsB,OAAW,SAAQ,oBAAoB,KAAK;AAC3E,UAAM,UAAU,eAAe,KAAK,QAAQ,OAAO;AACnD,QAAI,QAAS,QAAO,KAAK,KAAK,SAAS,UAAU;AAEjD,WAAO,KAAK,QAAQ,KAAK,QAAQ,UAAU;AAAA,EAC7C;AAAA,EAEQ,QAAQ,QAA0B,YAAuC;AAC/E,UAAM,QAAQ,gBAAgB,QAAQ,UAAU;AAChD,QAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,WAAW;AACjC,YAAM,SAAS;AACf,aAAO,EAAE,IAAI,OAAO,SAAS,EAAE,MAAM,iBAAiB,QAAQ,KAAK,OAAO,GAAG,MAAM;AAAA,IACrF;AACA,UAAM,SAAS,KAAK,WAAW,MAAM;AACrC,QAAI,aAAa,OAAQ,QAAO,EAAE,IAAI,OAAO,SAAS,OAAO,SAAS,WAAW,KAAK,WAAW,MAAM;AACvG,WAAO,EAAE,IAAI,MAAM,QAAQ,OAAO,OAAO,WAAW,KAAK,WAAW,OAAO,MAAM,KAAK,KAAK;AAAA,EAC7F;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,QAAoE;AACrF,UAAM,SAAS,KAAK,OAAO;AAC3B,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAQ,OAAO,YAAY,YAAY,OAAO,SAAS,GAAS;AACtF,UAAM,MAAM,OAAO,YAAY,YAAY,OAAO,oBAAoB;AACtE,UAAM,SAAS,OAAO,UAAU,GAAG;AACnC,QAAI,OAAO,QAAS,QAAO,EAAE,OAAO,OAAO,KAAK;AAChD,WAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO,OAAO;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,KAAK,SAAuB,YAAuC;AACzE,UAAM,MAAyB,EAAE,IAAI,OAAO,QAAQ;AACpD,QAAI,KAAK,UAAW,KAAI,YAAY,KAAK;AACzC,QAAI,KAAK,OAAQ,KAAI,QAAQ,gBAAgB,KAAK,QAAQ,UAAU;AACpE,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,QAAiC;AACnD,MAAI,OAAO,SAAS,UAAW,QAAO,EAAE,MAAM,WAAW,QAAQ,OAAO,OAAO;AAC/E,SAAO,EAAE,MAAM,sBAAsB,QAAQ,YAAY,MAAM,GAAG,WAAW,OAAO,UAAU;AAChG;AAEA,SAAS,YAAY,QAA2B;AAC9C,SAAO,OAAO,SAAS,YAAY,OAAO,SAAS,kBAAkB,OAAO,SAAS;AACvF;","names":[]}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@titan-design/agent",
+  "version": "0.1.0",
+  "description": "Headless agent triggering over the Claude Agent SDK with env-scrub, failure taxonomy, and hard budgets",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "author": "Henry Jewkes",
+  "license": "MIT",
+  "homepage": "https://github.com/HJewkes/titan-platform#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/HJewkes/titan-platform.git",
+    "directory": "packages/agent"
+  },
+  "bugs": "https://github.com/HJewkes/titan-platform/issues",
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.3.263"
+  },
+  "peerDependencies": {
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "zod": "^4.4.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src"
+  }
+}