@vibe-agent-toolkit/utils 0.1.39-rc.1 → 0.1.39-rc.11

package/dist/skill-test/env-scrub.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Build the forwarded environment for the headless `claude` child using a
+ * STRICT exact-name allowlist (spec §14). We never forward ANTHROPIC_* by
+ * prefix — that would silently leak ANTHROPIC_ADMIN_API_KEY, proxy overrides,
+ * etc. into untrusted skill code. Anything not enumerated is dropped.
+ */
+export interface ForwardEnvOptions {
+    /** True under --auth subscription (and inherit-with-subscription): drop the inference key so the child uses OAuth. */
+    scrubInferenceKey: boolean;
+    /** Additional exact model var names the run needs (e.g. ANTHROPIC_MODEL). */
+    modelVars?: string[];
+}
+export declare function buildForwardedEnv(source: NodeJS.ProcessEnv, opts: ForwardEnvOptions): NodeJS.ProcessEnv;
+/**
+ * The full set of env var names protected from declared override. A declared
+ * passEnv/injectEnv entry naming one of these is ignored (the protected value
+ * wins) and a warning is surfaced — a test must never clobber PATH, the auth
+ * credentials, or the admin key. `modelVars` (run-specific model env var names)
+ * join the set so a declared var can't shadow them either.
+ */
+export declare function protectedEnvNames(modelVars?: readonly string[]): Set<string>;
+/** Declared test env (Features A + B) to union onto a forwarded env. */
+export interface DeclaredEnvInput {
+    /** Parent env to read Feature-A pass-through values from. */
+    source: NodeJS.ProcessEnv;
+    /** Feature A: names to forward from `source` if present. */
+    passEnv?: readonly string[];
+    /** Feature B: explicit key→value injections (already interpolated). */
+    injectEnv?: Record<string, string>;
+    /** Run-specific model env var names that are also protected. */
+    modelVars?: readonly string[];
+}
+export interface DeclaredEnvResult {
+    /** The forwarded env with declared additions unioned in. */
+    env: NodeJS.ProcessEnv;
+    /** Human-readable warnings (protected-key collisions). */
+    warnings: string[];
+    /** Names injected via Feature B (shown in the transparency line). */
+    injected: string[];
+    /** Names passed through via Feature A (redacted in the transparency line). */
+    passedThrough: string[];
+}
+/**
+ * Union declared test env (Features A + B) onto an already-built forwarded env.
+ * Protected keys always win: a declared name colliding with a process-essential,
+ * auth, model, or admin var is ignored and a warning emitted. Feature-B injection
+ * (explicit value) takes precedence over Feature-A pass-through for the same key.
+ * The input `base` object is never mutated.
+ */
+export declare function applyDeclaredEnv(base: NodeJS.ProcessEnv, input: DeclaredEnvInput): DeclaredEnvResult;
+/**
+ * Render the single-line stderr transparency summary of the forwarded env. Key
+ * names are always shown. Auth/secret values are redacted; Feature-A pass-through
+ * values are redacted (host-sourced, may be a secret); Feature-B injected values
+ * are shown (they come from committed config).
+ */
+export declare function formatForwardedEnvLine(env: NodeJS.ProcessEnv, classified: {
+    injected: readonly string[];
+    passedThrough: readonly string[];
+}): string;
+//# sourceMappingURL=env-scrub.d.ts.map

package/dist/skill-test/env-scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-scrub.d.ts","sourceRoot":"","sources":["../../src/skill-test/env-scrub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,sHAAsH;IACtH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAWD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,UAAU,EACzB,IAAI,EAAE,iBAAiB,GACtB,MAAM,CAAC,UAAU,CAuBnB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,SAAS,MAAM,EAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAQhF;AAED,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;IAC1B,4DAA4D;IAC5D,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,gEAAgE;IAChE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAiCpG;AAKD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,UAAU,EAAE;IAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC5E,MAAM,CAUR"}

package/dist/skill-test/env-scrub.js

@@ -0,0 +1,112 @@
+/**
+ * Build the forwarded environment for the headless `claude` child using a
+ * STRICT exact-name allowlist (spec §14). We never forward ANTHROPIC_* by
+ * prefix — that would silently leak ANTHROPIC_ADMIN_API_KEY, proxy overrides,
+ * etc. into untrusted skill code. Anything not enumerated is dropped.
+ */
+/** Process-essential vars that must survive for the child to even start. */
+const PROCESS_ESSENTIALS = ['PATH', 'Path', 'HOME', 'USERPROFILE', 'SystemRoot', 'TEMP', 'TMP', 'TMPDIR', 'LANG', 'LC_ALL'];
+/** The only auth/config vars ever forwarded. */
+const AUTH_CONFIG_ALLOWLIST = ['CLAUDE_CONFIG_DIR'];
+/** The active inference credential candidates (forwarded unless scrubbed). */
+const INFERENCE_CREDENTIALS = ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN'];
+export function buildForwardedEnv(source, opts) {
+    const out = {};
+    const allow = new Set([
+        ...PROCESS_ESSENTIALS,
+        ...AUTH_CONFIG_ALLOWLIST,
+        ...(opts.modelVars ?? []),
+    ]);
+    if (!opts.scrubInferenceKey) {
+        for (const name of INFERENCE_CREDENTIALS)
+            allow.add(name);
+    }
+    for (const name of allow) {
+        const value = source[name];
+        if (value !== undefined)
+            out[name] = value;
+    }
+    // ANTHROPIC_ADMIN_API_KEY and CLAUDECODE/CLAUDE_CODE_* are never in `allow`,
+    // so they are dropped by construction. No explicit delete needed — but assert
+    // the invariant defensively so a future allowlist edit can't reintroduce it.
+    delete out['ANTHROPIC_ADMIN_API_KEY'];
+    return out;
+}
+/**
+ * The full set of env var names protected from declared override. A declared
+ * passEnv/injectEnv entry naming one of these is ignored (the protected value
+ * wins) and a warning is surfaced — a test must never clobber PATH, the auth
+ * credentials, or the admin key. `modelVars` (run-specific model env var names)
+ * join the set so a declared var can't shadow them either.
+ */
+export function protectedEnvNames(modelVars = []) {
+    return new Set([
+        ...PROCESS_ESSENTIALS,
+        ...AUTH_CONFIG_ALLOWLIST,
+        ...INFERENCE_CREDENTIALS,
+        'ANTHROPIC_ADMIN_API_KEY',
+        ...modelVars,
+    ]);
+}
+/**
+ * Union declared test env (Features A + B) onto an already-built forwarded env.
+ * Protected keys always win: a declared name colliding with a process-essential,
+ * auth, model, or admin var is ignored and a warning emitted. Feature-B injection
+ * (explicit value) takes precedence over Feature-A pass-through for the same key.
+ * The input `base` object is never mutated.
+ */
+export function applyDeclaredEnv(base, input) {
+    const out = { ...base };
+    const protectedNames = protectedEnvNames(input.modelVars);
+    const warnings = [];
+    const injected = [];
+    const passedThrough = [];
+    const injectKeys = new Set(Object.keys(input.injectEnv ?? {}));
+    // Feature A: pass-through by name.
+    for (const name of input.passEnv ?? []) {
+        if (protectedNames.has(name)) {
+            warnings.push(`passEnv "${name}" ignored: it collides with a protected variable.`);
+            continue;
+        }
+        if (injectKeys.has(name))
+            continue; // Feature B wins for the same key.
+        const value = input.source[name];
+        if (value === undefined)
+            continue; // absent host var → simply not forwarded.
+        out[name] = value;
+        passedThrough.push(name);
+    }
+    // Feature B: explicit value injection.
+    for (const [name, value] of Object.entries(input.injectEnv ?? {})) {
+        if (protectedNames.has(name)) {
+            warnings.push(`env "${name}" ignored: it collides with a protected variable.`);
+            continue;
+        }
+        out[name] = value;
+        injected.push(name);
+    }
+    return { env: out, warnings, injected, passedThrough };
+}
+/** Names whose VALUES are secrets and must be redacted in the transparency line. */
+const SECRET_NAMES = new Set(INFERENCE_CREDENTIALS);
+/**
+ * Render the single-line stderr transparency summary of the forwarded env. Key
+ * names are always shown. Auth/secret values are redacted; Feature-A pass-through
+ * values are redacted (host-sourced, may be a secret); Feature-B injected values
+ * are shown (they come from committed config).
+ */
+export function formatForwardedEnvLine(env, classified) {
+    const injected = new Set(classified.injected);
+    const passedThrough = new Set(classified.passedThrough);
+    const parts = Object.keys(env).map((name) => {
+        if (injected.has(name))
+            return `${name}=${env[name] ?? ''}`;
+        if (passedThrough.has(name))
+            return `${name}(passed-through, redacted)`;
+        if (SECRET_NAMES.has(name))
+            return `${name}(redacted)`;
+        return name;
+    });
+    return `forwarded env: ${parts.join(', ')}`;
+}
+//# sourceMappingURL=env-scrub.js.map

package/dist/skill-test/env-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-scrub.js","sourceRoot":"","sources":["../../src/skill-test/env-scrub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAErI,gDAAgD;AAChD,MAAM,qBAAqB,GAAG,CAAC,mBAAmB,CAAU,CAAC;AAE7D,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,CAAC,mBAAmB,EAAE,sBAAsB,CAAU,CAAC;AAErF,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,EACzB,IAAuB;IAEvB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAElC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS;QAC5B,GAAG,kBAAkB;QACrB,GAAG,qBAAqB;QACxB,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,qBAAqB;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAA+B,EAAE;IACjE,OAAO,IAAI,GAAG,CAAS;QACrB,GAAG,kBAAkB;QACrB,GAAG,qBAAqB;QACxB,GAAG,qBAAqB;QACxB,yBAAyB;QACzB,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC;AAyBD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAuB,EAAE,KAAuB;IAC/E,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAE/D,mCAAmC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,mDAAmD,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,mCAAmC;QACvE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS,CAAC,0CAA0C;QAC7E,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,mDAAmD,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACzD,CAAC;AAED,oFAAoF;AACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAsB,EACtB,UAA6E;IAE7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,IAAI,4BAA4B,CAAC;QACxE,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,IAAI,YAAY,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9C,CAAC"}

package/dist/skill-test/index.d.ts

@@ -0,0 +1,4 @@
+export { applyDeclaredEnv, buildForwardedEnv, formatForwardedEnvLine, protectedEnvNames, type DeclaredEnvInput, type DeclaredEnvResult, type ForwardEnvOptions, } from './env-scrub.js';
+export { AuthPreflightError, probeAuthStatus, resolveAuth, type AuthMechanism, type AuthMode, type AuthStatusProbe, type AuthStatusResult, type ResolveAuthOptions, type ResolvedAuth, } from './auth-resolver.js';
+export { assembleClaudeArgs, spawnHeadlessClaude, type ClaudeSpawnArgs, type SpawnHeadlessOptions, type SpawnResult, } from './spawn-claude.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/skill-test/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skill-test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC"}

package/dist/skill-test/index.js

@@ -0,0 +1,4 @@
+export { applyDeclaredEnv, buildForwardedEnv, formatForwardedEnvLine, protectedEnvNames, } from './env-scrub.js';
+export { AuthPreflightError, probeAuthStatus, resolveAuth, } from './auth-resolver.js';
+export { assembleClaudeArgs, spawnHeadlessClaude, } from './spawn-claude.js';
+//# sourceMappingURL=index.js.map

package/dist/skill-test/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skill-test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,GAIlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,WAAW,GAOZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GAIpB,MAAM,mBAAmB,CAAC"}

package/dist/skill-test/spawn-claude.d.ts

@@ -0,0 +1,45 @@
+export interface ClaudeSpawnArgs {
+    pluginDirs: string[];
+    sandboxDir: string;
+    model?: string;
+    maxTurns?: number;
+    maxBudgetUsd?: number;
+}
+/**
+ * Pure assembly of the headless `claude -p` argv (spec §9). The prompt is never
+ * inlined as an argv string (Windows cmd-quoting safety) and claude 2.x has no
+ * `--prompt-file` flag — the prompt is fed to the child's stdin by
+ * {@link spawnHeadlessClaude} instead. `--setting-sources ""` suppresses
+ * user/project settings; built-in skills remain (§5).
+ */
+export declare function assembleClaudeArgs(opts: ClaudeSpawnArgs): string[];
+export interface SpawnResult {
+    status: number;
+    timedOut: boolean;
+    stalled: boolean;
+}
+export interface SpawnHeadlessOptions extends ClaudeSpawnArgs {
+    /**
+     * Path to the experimenter-prompt file. Its contents are streamed to the
+     * child's stdin (claude 2.x reads the `-p` prompt from stdin; there is no
+     * `--prompt-file` flag). Kept off argv so the prompt is never inlined
+     * (Windows cmd-quoting safety).
+     */
+    promptFile: string;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    timeoutMs: number;
+    /** If set, SIGKILL the child if no stdout/stderr output is received for this many ms. */
+    stallMs?: number;
+    onStdout?: (chunk: string) => void;
+    onStderr?: (chunk: string) => void;
+}
+/**
+ * Spawn the headless `claude`. The prompt file is streamed to the child's stdin
+ * so the session reads its prompt and then sees EOF (it cannot block on input,
+ * §16). Wall-clock kill on timeout. If `stallMs` is set, a resettable stall
+ * watchdog kills the child when no output is received for that duration
+ * (stalled: true in result).
+ */
+export declare function spawnHeadlessClaude(opts: SpawnHeadlessOptions): Promise<SpawnResult>;
+//# sourceMappingURL=spawn-claude.d.ts.map

package/dist/skill-test/spawn-claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-claude.d.ts","sourceRoot":"","sources":["../../src/skill-test/spawn-claude.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAmBlE;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAsD1F"}

package/dist/skill-test/spawn-claude.js

@@ -0,0 +1,92 @@
+import { spawn } from 'node:child_process';
+import { createReadStream } from 'node:fs';
+import which from 'which';
+/**
+ * Pure assembly of the headless `claude -p` argv (spec §9). The prompt is never
+ * inlined as an argv string (Windows cmd-quoting safety) and claude 2.x has no
+ * `--prompt-file` flag — the prompt is fed to the child's stdin by
+ * {@link spawnHeadlessClaude} instead. `--setting-sources ""` suppresses
+ * user/project settings; built-in skills remain (§5).
+ */
+export function assembleClaudeArgs(opts) {
+    const args = [
+        '-p',
+        // claude 2.x rejects `-p --output-format stream-json` unless --verbose is
+        // also passed ("--output-format=stream-json requires --verbose"). The
+        // streamed JSON is piped to stderr for progress visibility.
+        '--output-format', 'stream-json',
+        '--verbose',
+        '--setting-sources', '',
+        '--permission-mode', 'bypassPermissions',
+        '--add-dir', opts.sandboxDir,
+    ];
+    for (const dir of opts.pluginDirs) {
+        args.push('--plugin-dir', dir);
+    }
+    if (opts.model !== undefined)
+        args.push('--model', opts.model);
+    if (opts.maxTurns !== undefined)
+        args.push('--max-turns', String(opts.maxTurns));
+    if (opts.maxBudgetUsd !== undefined)
+        args.push('--max-budget-usd', String(opts.maxBudgetUsd));
+    return args;
+}
+/**
+ * Spawn the headless `claude`. The prompt file is streamed to the child's stdin
+ * so the session reads its prompt and then sees EOF (it cannot block on input,
+ * §16). Wall-clock kill on timeout. If `stallMs` is set, a resettable stall
+ * watchdog kills the child when no output is received for that duration
+ * (stalled: true in result).
+ */
+export async function spawnHeadlessClaude(opts) {
+    const bin = which.sync('claude');
+    const args = assembleClaudeArgs(opts);
+    return await new Promise((resolve, reject) => {
+        const child = spawn(bin, args, { cwd: opts.cwd, env: opts.env, stdio: ['pipe', 'pipe', 'pipe'] });
+        let timedOut = false;
+        let stalled = false;
+        const wallTimer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGKILL');
+        }, opts.timeoutMs);
+        // Stall watchdog: reset on every stdout/stderr chunk; fire if silent for stallMs.
+        let stallTimer;
+        if (opts.stallMs !== undefined) {
+            const stallMs = opts.stallMs;
+            const resetStallTimer = () => {
+                if (stallTimer !== undefined)
+                    clearTimeout(stallTimer);
+                stallTimer = setTimeout(() => {
+                    stalled = true;
+                    child.kill('SIGKILL');
+                }, stallMs);
+            };
+            resetStallTimer();
+            child.stdout.on('data', () => { resetStallTimer(); });
+            child.stderr.on('data', () => { resetStallTimer(); });
+        }
+        const clearAllTimers = () => {
+            clearTimeout(wallTimer);
+            if (stallTimer !== undefined)
+                clearTimeout(stallTimer);
+        };
+        // Feed the prompt to the child via stdin (claude 2.x has no --prompt-file).
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- our own derived prompt path
+        const promptStream = createReadStream(opts.promptFile);
+        promptStream.on('error', err => {
+            clearAllTimers();
+            child.kill('SIGKILL');
+            reject(err);
+        });
+        // Swallow EPIPE: if the child exits before consuming all stdin, the write
+        // end errors — that is not a harness failure (the close handler reports the
+        // child's real exit status).
+        child.stdin.on('error', () => { });
+        promptStream.pipe(child.stdin);
+        child.stdout.on('data', (d) => { opts.onStdout?.(d.toString()); });
+        child.stderr.on('data', (d) => { opts.onStderr?.(d.toString()); });
+        child.on('error', err => { clearAllTimers(); reject(err); });
+        child.on('close', code => { clearAllTimers(); resolve({ status: code ?? -1, timedOut, stalled }); });
+    });
+}
+//# sourceMappingURL=spawn-claude.js.map

package/dist/skill-test/spawn-claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-claude.js","sourceRoot":"","sources":["../../src/skill-test/spawn-claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,MAAM,OAAO,CAAC;AAU1B;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,IAAI,GAAa;QACrB,IAAI;QACJ,0EAA0E;QAC1E,sEAAsE;QACtE,4DAA4D;QAC5D,iBAAiB,EAAE,aAAa;QAChC,WAAW;QACX,mBAAmB,EAAE,EAAE;QACvB,mBAAmB,EAAE,mBAAmB;QACxC,WAAW,EAAE,IAAI,CAAC,UAAU;KAC7B,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAyBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA0B;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEtC,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,kFAAkF;QAClF,IAAI,UAAqD,CAAC;QAC1D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,MAAM,eAAe,GAAG,GAAS,EAAE;gBACjC,IAAI,UAAU,KAAK,SAAS;oBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;gBACvD,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC3B,OAAO,GAAG,IAAI,CAAC;oBACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC,EAAE,OAAO,CAAC,CAAC;YACd,CAAC,CAAC;YACF,eAAe,EAAE,CAAC;YAElB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,UAAU,KAAK,SAAS;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC,CAAC;QAEF,4EAA4E;QAC5E,kGAAkG;QAClG,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YAC7B,cAAc,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,4EAA4E;QAC5E,6BAA6B;QAC7B,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA0C,CAAC,CAAC,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-agent-toolkit/utils",
-  "version": "0.1.39-rc.1",
+  "version": "0.1.39-rc.11",
   "type": "module",
   "description": "Core utility functions with no external dependencies",
   "keywords": [
@@ -23,7 +23,7 @@
     "README.md"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && tsx ../dev-tools/src/copy-yaml-assets.ts",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
@@ -33,7 +33,8 @@
     "handlebars": "^4.7.8",
     "ignore": "^7.0.5",
     "picomatch": "^4.0.3",
-    "which": "^5.0.0"
+    "which": "^5.0.0",
+    "yaml": "^2.6.1"
   },
   "peerDependencies": {
     "zod": "^3.25.0 || ^4.0.0"