@yu_robotics/remote-cli 1.6.49 → 1.6.66

package/dist/executor/claude/ClaudeSandbox.js

@@ -0,0 +1,245 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClaudeSandbox = void 0;
+const fs = __importStar(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+/**
+ * Local, per-thread Claude sandbox authorization. Backend session resets do
+ * not erase it. Mirrors CodexSandbox semantics; maps to Claude Code's native
+ * sandbox settings at process spawn.
+ */
+class ClaudeSandbox {
+    guard;
+    defaults;
+    override;
+    storePath;
+    constructor(guard, defaults, threadId) {
+        this.guard = guard;
+        this.defaults = defaults;
+        if (defaults !== undefined)
+            this.defaults = this.validate(defaults);
+        if (threadId && !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,99}$/.test(threadId))
+            throw new Error('Invalid thread ID for sandbox storage.');
+        if (threadId) {
+            const id = encodeURIComponent(threadId);
+            this.storePath = path.join(os_1.default.homedir(), '.remote-cli', 'claude-sandbox', `${id}.json`);
+            if (fs.existsSync(this.storePath)) {
+                // Invalid authorization must fail closed, never fall back to full access.
+                const stored = JSON.parse(fs.readFileSync(this.storePath, 'utf8'));
+                this.override = this.validate(stored);
+                if (stored.writableRoots?.some((root, index) => root !== this.override.writableRoots[index])) {
+                    throw new Error('A saved sandbox grant changed its symbolic-link target. Reauthorize the directory before continuing.');
+                }
+            }
+        }
+    }
+    getConfig() {
+        const config = this.override ?? this.defaults;
+        return config ? { ...config, writableRoots: config.writableRoots ? [...config.writableRoots] : undefined } : undefined;
+    }
+    isRestricted() {
+        const mode = this.getConfig()?.mode;
+        return mode === 'workspace-write' || mode === 'read-only';
+    }
+    assertAvailable(cwd) {
+        if (!this.isRestricted())
+            return;
+        const platform = os_1.default.platform();
+        if (platform === 'darwin')
+            return;
+        if (platform !== 'linux') {
+            throw new Error('Claude sandbox requires macOS or Linux/WSL2. Native Windows is not supported.');
+        }
+        const directories = (process.env.PATH ?? '').split(path.delimiter);
+        const missing = ['bwrap', 'socat'].filter(tool => !directories.some(directory => {
+            const candidate = path.resolve(cwd, directory, tool);
+            try {
+                fs.accessSync(candidate, fs.constants.X_OK);
+                return fs.statSync(candidate).isFile();
+            }
+            catch {
+                return false;
+            }
+        }));
+        if (missing.length > 0) {
+            throw new Error(`Claude sandbox dependencies missing from PATH: ${missing.join(', ')}. Install bubblewrap and socat before running sandboxed tasks (e.g. apt install bubblewrap socat).`);
+        }
+    }
+    configure(config) {
+        const validated = config === undefined ? undefined : this.validate(config);
+        if (this.storePath) {
+            if (validated) {
+                fs.mkdirSync(path.dirname(this.storePath), { recursive: true });
+                const temporary = `${this.storePath}.${(0, crypto_1.randomUUID)()}.tmp`;
+                try {
+                    fs.writeFileSync(temporary, JSON.stringify(validated, null, 2), { mode: 0o600 });
+                    fs.renameSync(temporary, this.storePath);
+                }
+                finally {
+                    if (fs.existsSync(temporary))
+                        fs.unlinkSync(temporary);
+                }
+            }
+            else if (fs.existsSync(this.storePath))
+                fs.unlinkSync(this.storePath);
+        }
+        this.override = validated;
+    }
+    deleteData() {
+        this.configure(undefined);
+    }
+    /** Resolve symlinks, including the existing parent of a new directory. */
+    normalize(directory, cwd) {
+        if (typeof directory !== 'string' || /[\x00-\x1f]/.test(directory)) {
+            throw new Error('Sandbox directories must be non-empty paths without control characters.');
+        }
+        const normalized = this.guard.normalizePath(directory, cwd);
+        let ancestor = normalized;
+        const suffix = [];
+        while (!fs.existsSync(ancestor)) {
+            if (fs.lstatSync(ancestor, { throwIfNoEntry: false })?.isSymbolicLink()) {
+                throw new Error(`Sandbox directory is a broken symbolic link: ${ancestor}`);
+            }
+            suffix.unshift(path.basename(ancestor));
+            const parent = path.dirname(ancestor);
+            if (parent === ancestor)
+                throw new Error(`Cannot resolve sandbox directory: ${directory}`);
+            ancestor = parent;
+        }
+        if (!fs.statSync(ancestor).isDirectory())
+            throw new Error(`Sandbox path is not a directory: ${ancestor}`);
+        return path.join(fs.realpathSync(ancestor), ...suffix);
+    }
+    /** Extra writable roots beyond the working directory (validated, normalized). */
+    extraWritableRoots() {
+        const config = this.getConfig();
+        if (config?.mode !== 'workspace-write')
+            return [];
+        for (const root of config.writableRoots ?? []) {
+            if (this.normalize(root) !== root)
+                throw new Error(`Authorized sandbox directory changed its symbolic-link target: ${root}`);
+        }
+        return [...new Set((config.writableRoots ?? []).map(root => this.normalize(root)))];
+    }
+    /**
+     * Build the Claude Code settings object injected via --settings at spawn.
+     * Sandboxed commands run without prompts; widening requests surface through
+     * the permission-prompt tool instead.
+     */
+    spawnSettings(cwd, fileHookCommand) {
+        const config = this.getConfig();
+        if (!config || !this.isRestricted())
+            return undefined;
+        const filesystem = {};
+        if (config.mode === 'workspace-write') {
+            const extra = this.extraWritableRoots();
+            if (extra.length > 0)
+                filesystem.allowWrite = extra;
+        }
+        else {
+            // read-only: revoke the default working-directory write grant.
+            filesystem.denyWrite = [this.normalize(cwd)];
+        }
+        const network = {};
+        if (config.networkAccess === false) {
+            // Hard-deny egress instead of prompting for each new domain.
+            network.allowedDomains = [];
+            // Native settings merge allowlists across scopes; an empty list alone
+            // would leave saved domains and WebFetch grants accessible.
+            network.deniedDomains = ['*'];
+            network.strictAllowlist = true;
+        }
+        else {
+            // Permit routine networking without per-domain prompts. Native deny
+            // rules and managed domain restrictions still take precedence.
+            network.allowedDomains = ['*'];
+        }
+        return {
+            permissions: {
+                // Ask rules take precedence over inherited allow rules. Bare Bash asks
+                // still permit auto-approval when the command runs inside the sandbox.
+                ask: ['Bash', 'PowerShell', 'Monitor', ...(fileHookCommand ? [] : ['Write', 'Edit', 'NotebookEdit'])],
+            },
+            ...(fileHookCommand ? { hooks: {
+                    SessionStart: [{ hooks: [{ type: 'command', command: fileHookCommand, timeout: 10 }] }],
+                    PreToolUse: [{ matcher: '^(Write|Edit|NotebookEdit)$', hooks: [{ type: 'command', command: fileHookCommand, timeout: 10 }] }],
+                } } : {}),
+            sandbox: {
+                enabled: true,
+                failIfUnavailable: true,
+                autoAllowBashIfSandboxed: true,
+                // Widening requests must go through the permission-prompt channel.
+                allowUnsandboxedCommands: true,
+                filesystem,
+                network,
+            },
+        };
+    }
+    describe(cwd) {
+        const config = this.getConfig();
+        return [
+            `Claude sandbox: ${config?.mode ?? 'not configured (existing Claude Code settings apply)'}`,
+            ...(this.isRestricted() ? [
+                'Scope: OS-enforced for Bash commands; ordinary file edits in authorized directories are automatic in workspace-write mode.',
+                `Network: ${config?.networkAccess === false ? 'denied' : 'enabled (native deny rules and managed restrictions still apply)'}`,
+                config?.mode === 'read-only'
+                    ? 'Workspace writes: require approval.'
+                    : `Writable directories:\n- ${this.normalize(cwd)}\n${this.extraWritableRoots().map(root => `- ${root}`).join('\n')}`,
+                'Requests outside this policy require approval.',
+            ] : []),
+            'Usage: /sandbox on|off|read-only|default; /sandbox network on|off; /sandbox allow <directory>; /sandbox remove <directory>',
+            'Directory authorizations belong to this thread and survive /clear, backend switches, and restarts.',
+        ].join('\n');
+    }
+    validate(value) {
+        const config = value;
+        if (!config || typeof config !== 'object' || Array.isArray(config)
+            || !['workspace-write', 'read-only', 'danger-full-access'].includes(config.mode)
+            || (config.networkAccess !== undefined && typeof config.networkAccess !== 'boolean')
+            || (config.writableRoots !== undefined && (!Array.isArray(config.writableRoots)
+                || config.writableRoots.some(root => typeof root !== 'string' || !root.trim())))) {
+            throw new Error('Invalid Claude sandbox configuration. Expected mode, optional networkAccess boolean, and writableRoots paths.');
+        }
+        return { ...config, writableRoots: config.writableRoots?.map(root => this.normalize(root)) };
+    }
+}
+exports.ClaudeSandbox = ClaudeSandbox;
+//# sourceMappingURL=ClaudeSandbox.js.map

package/dist/executor/claude/ClaudeSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaudeSandbox.js","sourceRoot":"","sources":["../../../src/executor/claude/ClaudeSandbox.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,4CAAoB;AACpB,2CAA6B;AAC7B,mCAAoC;AAIpC;;;;GAIG;AACH,MAAa,aAAa;IAKL;IACA;IALX,QAAQ,CAAuB;IACtB,SAAS,CAAU;IAEpC,YACmB,KAAqB,EACrB,QAAyC,EAC1D,QAAiB;QAFA,UAAK,GAAL,KAAK,CAAgB;QACrB,aAAQ,GAAR,QAAQ,CAAiC;QAG1D,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC9H,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,0EAA0E;gBAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,QAAS,CAAC,aAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC/G,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;gBAC1H,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QAC9C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzH,CAAC;IAED,YAAY;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC;QACpC,OAAO,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,WAAW,CAAC;IAC5D,CAAC;IAED,eAAe,CAAC,GAAW;QACzB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO;QACjC,MAAM,QAAQ,GAAG,YAAE,CAAC,QAAQ,EAAE,CAAC;QAC/B,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO;QAClC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;QAC5L,CAAC;IACH,CAAC;IAED,SAAS,CAAC,MAAuC;QAC/C,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,SAAS,EAAE,CAAC;gBACd,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAA,mBAAU,GAAE,MAAM,CAAC;gBAC1D,IAAI,CAAC;oBACH,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACjF,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;wBAAS,CAAC;oBACT,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,UAAU;QACR,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,0EAA0E;IAC1E,SAAS,CAAC,SAAiB,EAAE,GAAY;QACvC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,QAAQ,GAAG,UAAU,CAAC;QAC1B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;YAC3F,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,iFAAiF;IACjF,kBAAkB;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE,IAAI,KAAK,iBAAiB;YAAE,OAAO,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,GAAW,EAAE,eAAwB;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,SAAS,CAAC;QACtD,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,+DAA+D;YAC/D,UAAU,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YACnC,6DAA6D;YAC7D,OAAO,CAAC,cAAc,GAAG,EAAE,CAAC;YAC5B,sEAAsE;YACtE,4DAA4D;YAC5D,OAAO,CAAC,aAAa,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,+DAA+D;YAC/D,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,OAAO;YACL,WAAW,EAAE;gBACX,uEAAuE;gBACvE,uEAAuE;gBACvE,GAAG,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;aACtG;YACD,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE;oBAC7B,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;oBACvF,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;iBAC9H,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI;gBACb,iBAAiB,EAAE,IAAI;gBACvB,wBAAwB,EAAE,IAAI;gBAC9B,mEAAmE;gBACnE,wBAAwB,EAAE,IAAI;gBAC9B,UAAU;gBACV,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,mBAAmB,MAAM,EAAE,IAAI,IAAI,sDAAsD,EAAE;YAC3F,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBACxB,4HAA4H;gBAC5H,YAAY,MAAM,EAAE,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kEAAkE,EAAE;gBAC7H,MAAM,EAAE,IAAI,KAAK,WAAW;oBAC1B,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACvH,gDAAgD;aACjD,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,4HAA4H;YAC5H,oGAAoG;SACrG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,MAAM,MAAM,GAAG,KAA4B,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;eAC7D,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;eAC7E,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC;eACjF,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;mBAC1E,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;CACF;AA5LD,sCA4LC"}

package/dist/executor/claude/approvalMcpServer.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=approvalMcpServer.d.ts.map

package/dist/executor/claude/approvalMcpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalMcpServer.d.ts","sourceRoot":"","sources":["../../../src/executor/claude/approvalMcpServer.ts"],"names":[],"mappings":""}

package/dist/executor/claude/approvalMcpServer.js

@@ -0,0 +1,159 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Standalone stdio MCP server that exposes Claude Code's permission-prompt tool.
+ * Spawned by the claude process via --mcp-config; forwards each permission
+ * request to the remote-cli executor over a local unix socket and returns the
+ * user's decision. Usage: node approvalMcpServer.js <socketPath>
+ *
+ * Wire format (NDJSON over the unix socket):
+ *   request:  { id, tool_name, input, tool_use_id }
+ *   response: { id, behavior: 'allow' | 'deny', updatedInput?, message? }
+ */
+const net = __importStar(require("net"));
+const crypto = __importStar(require("crypto"));
+const socketPath = process.argv[2];
+if (!socketPath) {
+    process.stderr.write('approvalMcpServer: missing socket path argument\n');
+    process.exit(1);
+}
+// Backstop timeout; the executor enforces its own shorter approval expiry.
+const REQUEST_TIMEOUT_MS = 15 * 60 * 1000;
+function askExecutor(payload) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const finish = (answer) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            socket.destroy();
+            resolve(answer);
+        };
+        const deny = (message) => finish({ id: payload.id, behavior: 'deny', message });
+        const timer = setTimeout(() => deny('Approval request timed out'), REQUEST_TIMEOUT_MS);
+        timer.unref?.();
+        const socket = net.createConnection(socketPath);
+        let buffer = '';
+        socket.on('connect', () => socket.write(JSON.stringify(payload) + '\n'));
+        socket.on('data', (chunk) => {
+            buffer += chunk;
+            const newline = buffer.indexOf('\n');
+            if (newline < 0)
+                return;
+            const line = buffer.slice(0, newline);
+            try {
+                const answer = JSON.parse(line);
+                if (answer && answer.id === payload.id)
+                    finish(answer);
+            }
+            catch {
+                deny('Invalid approval response');
+            }
+        });
+        socket.on('error', () => deny('Approval channel unavailable'));
+        socket.on('close', () => deny('Approval channel closed'));
+    });
+}
+let buffer = '';
+process.stdin.on('data', (chunk) => {
+    buffer += chunk;
+    let index;
+    while ((index = buffer.indexOf('\n')) >= 0) {
+        const line = buffer.slice(0, index);
+        buffer = buffer.slice(index + 1);
+        if (!line.trim())
+            continue;
+        let message;
+        try {
+            message = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        void handleMessage(message);
+    }
+});
+async function handleMessage(message) {
+    if (message.method === 'initialize') {
+        reply(message.id, {
+            protocolVersion: message.params?.protocolVersion ?? '2024-11-05',
+            capabilities: { tools: {} },
+            serverInfo: { name: 'remote-cli-approval', version: '1.0.0' },
+        });
+        return;
+    }
+    if (message.method === 'tools/list') {
+        reply(message.id, {
+            tools: [{
+                    name: 'approval_prompt',
+                    description: 'Ask the remote user for permission to run a tool call.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            tool_name: { type: 'string' },
+                            input: { type: 'object' },
+                            tool_use_id: { type: 'string' },
+                        },
+                    },
+                }],
+        });
+        return;
+    }
+    if (message.method === 'tools/call') {
+        const args = message.params?.arguments ?? {};
+        const answer = await askExecutor({
+            id: crypto.randomUUID(),
+            tool_name: args.tool_name,
+            input: args.input,
+            tool_use_id: args.tool_use_id,
+        });
+        reply(message.id, {
+            content: [{ type: 'text', text: JSON.stringify({
+                        behavior: answer.behavior === 'allow' ? 'allow' : 'deny',
+                        ...(answer.behavior === 'allow' ? { updatedInput: answer.updatedInput ?? args.input } : {}),
+                        ...(answer.behavior !== 'allow' ? { message: answer.message ?? 'Denied by remote user' } : {}),
+                    }) }],
+        });
+        return;
+    }
+    if (message.id !== undefined)
+        reply(message.id, {});
+}
+function reply(id, result) {
+    process.stdout.write(JSON.stringify({ jsonrpc: '2.0', id, result }) + '\n');
+}
+//# sourceMappingURL=approvalMcpServer.js.map

package/dist/executor/claude/approvalMcpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalMcpServer.js","sourceRoot":"","sources":["../../../src/executor/claude/approvalMcpServer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;GASG;AACH,yCAA2B;AAC3B,+CAAiC;AAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnC,IAAI,CAAC,UAAU,EAAE,CAAC;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,SAAS,WAAW,CAAC,OAAgC;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,MAA+B,EAAE,EAAE;YACjD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAExF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE;oBAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,MAAM,GAAG,EAAE,CAAC;AAChB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;IACjC,MAAM,IAAI,KAAK,CAAC;IAChB,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,aAAa,CAAC,OAAY;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACpC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;YAChB,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,IAAI,YAAY;YAChE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE;SAC9D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACpC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;YAChB,KAAK,EAAE,CAAC;oBACN,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,wDAAwD;oBACrE,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACzB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAChC;qBACF;iBACF,CAAC;SACH,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;YAChB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;wBACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3F,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/F,CAAC,EAAE,CAAC;SACN,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,KAAK,CAAC,EAAW,EAAE,MAAe;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9E,CAAC"}

package/dist/executor/claude/filePolicyHook.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=filePolicyHook.d.ts.map

package/dist/executor/claude/filePolicyHook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filePolicyHook.d.ts","sourceRoot":"","sources":["../../../src/executor/claude/filePolicyHook.ts"],"names":[],"mappings":""}

package/dist/executor/claude/filePolicyHook.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/** Process-scoped Claude hooks; no global or project settings are modified. */
+const net_1 = __importDefault(require("net"));
+async function main() {
+    const [socketPath, token] = process.argv.slice(2);
+    if (!socketPath || !token)
+        throw new Error('Missing file policy connection.');
+    let text = '';
+    for await (const chunk of process.stdin)
+        text += chunk;
+    const event = JSON.parse(text);
+    const startup = event.hook_event_name === 'SessionStart';
+    if (!startup && event.hook_event_name !== 'PreToolUse')
+        throw new Error('Unexpected hook event.');
+    const input = event.tool_input ?? {};
+    const payload = { type: 'file_policy', token, startup, tool_name: event.tool_name,
+        input: { file_path: input.file_path, notebook_path: input.notebook_path } };
+    const answer = await new Promise((resolve, reject) => {
+        const socket = net_1.default.createConnection(socketPath);
+        const finish = (error, value) => {
+            clearTimeout(timer);
+            socket.destroy();
+            error ? reject(error) : resolve(value);
+        };
+        const timer = setTimeout(() => finish(new Error('File policy check timed out.')), 5000);
+        let buffer = '';
+        socket.on('error', error => finish(error));
+        socket.on('end', () => finish(new Error('File policy connection closed.')));
+        socket.on('connect', () => socket.write(JSON.stringify(payload) + '\n'));
+        socket.on('data', chunk => {
+            buffer += chunk;
+            const newline = buffer.indexOf('\n');
+            if (newline < 0)
+                return;
+            try {
+                finish(undefined, JSON.parse(buffer.slice(0, newline)));
+            }
+            catch {
+                finish(new Error('Invalid file policy response.'));
+            }
+        });
+    });
+    if (!['allow', 'ask', 'deny'].includes(answer?.decision))
+        throw new Error('Missing file policy decision.');
+    if (startup) {
+        if (answer.decision !== 'allow')
+            throw new Error('File policy startup rejected.');
+        return;
+    }
+    process.stdout.write(JSON.stringify({ hookSpecificOutput: {
+            hookEventName: 'PreToolUse', permissionDecision: answer.decision, permissionDecisionReason: answer.reason,
+        } }) + '\n');
+}
+void main().catch(error => {
+    // Exit 2 is a blocking hook failure, including connection and parse errors.
+    process.stderr.write(`Remote CLI file policy unavailable: ${error.message}\n`);
+    process.exitCode = 2;
+});
+//# sourceMappingURL=filePolicyHook.js.map

package/dist/executor/claude/filePolicyHook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filePolicyHook.js","sourceRoot":"","sources":["../../../src/executor/claude/filePolicyHook.ts"],"names":[],"mappings":";;;;;AAAA,+EAA+E;AAC/E,8CAAsB;AAEtB,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9E,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAK,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,KAAK,cAAc,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC/E,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,aAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAAe,EAAE,EAAE;YAChD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YACxB,IAAI,CAAC;gBAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAChE,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3G,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE;YACxD,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,EAAE,MAAM,CAAC,MAAM;SAC1G,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACxB,4EAA4E;IAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/executor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAOtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAClG,YAAY,EACV,uBAAuB,IAAI,oBAAoB,EAC/C,sBAAsB,IAAI,mBAAmB,GAC9C,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,EAC9B,IAAI,GAAE,YAAqB,EAC3B,uBAAuB,CAAC,EAAE,MAAM,GAC/B,wBAAwB,CAM1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,cAAc,EAAE,cAAc,EAC9B,cAAc,GAAE,cAAiC,EACjD,uBAAuB,CAAC,EAAE,MAAM,EAChC,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,SAAS,CAwFX"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAOtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAClG,YAAY,EACV,uBAAuB,IAAI,oBAAoB,EAC/C,sBAAsB,IAAI,mBAAmB,GAC9C,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,EAC9B,IAAI,GAAE,YAAqB,EAC3B,uBAAuB,CAAC,EAAE,MAAM,GAC/B,wBAAwB,CAM1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,cAAc,EAAE,cAAc,EAC9B,cAAc,GAAE,cAAiC,EACjD,uBAAuB,CAAC,EAAE,MAAM,EAChC,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,SAAS,CA4FX"}

package/dist/executor/index.js

@@ -73,6 +73,7 @@ function createExecutor(directoryGuard, executorConfig = { type: 'auto' }, initi
                 model: model ?? executorConfig.codex?.model,
                 effort,
                 autoApprove: executorConfig.codex?.autoApprove ?? true,
+                sandbox: executorConfig.codex?.sandbox,
                 initialWorkingDirectory,
                 codexCommand: executorConfig.codex?.command,
                 threadId,
@@ -120,14 +121,14 @@ function createExecutor(directoryGuard, executorConfig = { type: 'auto' }, initi
             });
         case 'claude-persistent':
             console.log('[ExecutorFactory] Using Claude persistent executor');
-            return new ClaudePersistentExecutor_1.ClaudePersistentExecutor(directoryGuard, initialWorkingDirectory, threadId, model);
+            return new ClaudePersistentExecutor_1.ClaudePersistentExecutor(directoryGuard, initialWorkingDirectory, threadId, model, executorConfig.claude?.sandbox, executorConfig.claude?.command);
         case 'claude-spawn':
             console.warn('[ExecutorFactory] Claude spawn mode was removed; using persistent mode.');
-            return new ClaudePersistentExecutor_1.ClaudePersistentExecutor(directoryGuard, initialWorkingDirectory, threadId, model);
+            return new ClaudePersistentExecutor_1.ClaudePersistentExecutor(directoryGuard, initialWorkingDirectory, threadId, model, executorConfig.claude?.sandbox, executorConfig.claude?.command);
         case 'auto':
         default:
             console.log('[ExecutorFactory] Using Claude persistent executor (auto)');
-            return new ClaudePersistentExecutor_1.ClaudePersistentExecutor(directoryGuard, initialWorkingDirectory, threadId, model);
+            return new ClaudePersistentExecutor_1.ClaudePersistentExecutor(directoryGuard, initialWorkingDirectory, threadId, model, executorConfig.claude?.sandbox, executorConfig.claude?.command);
     }
 }
 //# sourceMappingURL=index.js.map

package/dist/executor/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":";;;AAsCA,oDAUC;AAYD,wCA+FC;AA1JD,yEAAsE;AACtE,+CAA4C;AAC5C,qEAAkE;AAClE,yDAAsD;AACtD,iDAA8C;AAC9C,mDAAgD;AAChD,6CAA0C;AAS1C,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,6CAA4C;AAAnC,0GAAA,WAAW,OAAA;AACpB,mEAAkE;AAAzD,gIAAA,sBAAsB,OAAA;AAC/B,uDAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AACzB,+CAA8C;AAArC,4GAAA,YAAY,OAAA;AACrB,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AACtB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAQnB;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,cAA8B,EAC9B,OAAqB,MAAM,EAC3B,uBAAgC;IAEhC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,cAA8B,EAC9B,iBAAiC,EAAE,IAAI,EAAE,MAAM,EAAE,EACjD,uBAAgC,EAChC,QAAiB,EACjB,KAAc,EACd,MAAe;IAEf,MAAM,YAAY,GAAG,cAAc,CAAC,IAAc,CAAC;IACnD,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,IAAI,yBAAW,CAAC,cAAc,EAAE;gBACrC,mEAAmE;gBACnE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK;gBACzC,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,GAAG,EAAE,WAAW,IAAI,IAAI;gBACpD,uBAAuB;gBACvB,UAAU,EAAE,cAAc,CAAC,GAAG,EAAE,OAAO;gBACvC,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,OAAO;YACV,IAAK,cAAc,CAAC,KAA6C,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;gBACxF,OAAO,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,IAAI,+CAAsB,CAAC,cAAc,EAAE;gBAChD,kEAAkE;gBAClE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK;gBAC3C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI;gBACtD,uBAAuB;gBACvB,YAAY,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO;gBAC3C,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,UAAU;YACb,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO,IAAI,mCAAgB,CAAC,cAAc,EAAE;gBAC1C,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,QAAQ,EAAE,KAAK;gBAC9C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI;gBACzD,uBAAuB;gBACvB,eAAe,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO;gBACjD,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAC9D,OAAO,IAAI,2BAAY,CAAC,cAAc,EAAE;gBACtC,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK;gBAC1C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;gBACrD,uBAAuB;gBACvB,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO;gBACzC,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,OAAO;YACV,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,IAAI,6BAAa,CAAC,cAAc,EAAE;gBACvC,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK;gBAC3C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI;gBACtD,uBAAuB;gBACvB,YAAY,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO;gBAC3C,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO,IAAI,uBAAU,CAAC,cAAc,EAAE;gBACpC,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,EAAE,EAAE,KAAK;gBACxC,MAAM;gBACN,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,QAAQ;gBACrC,WAAW,EAAE,cAAc,CAAC,EAAE,EAAE,WAAW,IAAI,IAAI;gBACnD,uBAAuB;gBACvB,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,OAAO;gBACrC,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,mBAAmB;YACtB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEhG,KAAK,cAAc;YACjB,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACxF,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEhG,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":";;;AAsCA,oDAUC;AAYD,wCAmGC;AA9JD,yEAAsE;AACtE,+CAA4C;AAC5C,qEAAkE;AAClE,yDAAsD;AACtD,iDAA8C;AAC9C,mDAAgD;AAChD,6CAA0C;AAS1C,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,6CAA4C;AAAnC,0GAAA,WAAW,OAAA;AACpB,mEAAkE;AAAzD,gIAAA,sBAAsB,OAAA;AAC/B,uDAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AACzB,+CAA8C;AAArC,4GAAA,YAAY,OAAA;AACrB,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AACtB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAQnB;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,cAA8B,EAC9B,OAAqB,MAAM,EAC3B,uBAAgC;IAEhC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,cAA8B,EAC9B,iBAAiC,EAAE,IAAI,EAAE,MAAM,EAAE,EACjD,uBAAgC,EAChC,QAAiB,EACjB,KAAc,EACd,MAAe;IAEf,MAAM,YAAY,GAAG,cAAc,CAAC,IAAc,CAAC;IACnD,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,IAAI,yBAAW,CAAC,cAAc,EAAE;gBACrC,mEAAmE;gBACnE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK;gBACzC,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,GAAG,EAAE,WAAW,IAAI,IAAI;gBACpD,uBAAuB;gBACvB,UAAU,EAAE,cAAc,CAAC,GAAG,EAAE,OAAO;gBACvC,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,OAAO;YACV,IAAK,cAAc,CAAC,KAA6C,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;gBACxF,OAAO,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,IAAI,+CAAsB,CAAC,cAAc,EAAE;gBAChD,kEAAkE;gBAClE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK;gBAC3C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI;gBACtD,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO;gBACtC,uBAAuB;gBACvB,YAAY,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO;gBAC3C,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,UAAU;YACb,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO,IAAI,mCAAgB,CAAC,cAAc,EAAE;gBAC1C,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,QAAQ,EAAE,KAAK;gBAC9C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI;gBACzD,uBAAuB;gBACvB,eAAe,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO;gBACjD,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAC9D,OAAO,IAAI,2BAAY,CAAC,cAAc,EAAE;gBACtC,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK;gBAC1C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;gBACrD,uBAAuB;gBACvB,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO;gBACzC,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,OAAO;YACV,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,IAAI,6BAAa,CAAC,cAAc,EAAE;gBACvC,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK;gBAC3C,MAAM;gBACN,WAAW,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI;gBACtD,uBAAuB;gBACvB,YAAY,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO;gBAC3C,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO,IAAI,uBAAU,CAAC,cAAc,EAAE;gBACpC,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,EAAE,EAAE,KAAK;gBACxC,MAAM;gBACN,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,QAAQ;gBACrC,WAAW,EAAE,cAAc,CAAC,EAAE,EAAE,WAAW,IAAI,IAAI;gBACnD,uBAAuB;gBACvB,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,OAAO;gBACrC,QAAQ;aACT,CAAC,CAAC;QAEL,KAAK,mBAAmB;YACtB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAC1F,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpE,KAAK,cAAc;YACjB,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACxF,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAC1F,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpE,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,IAAI,mDAAwB,CAAC,cAAc,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAC1F,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -63,7 +63,7 @@ program
     .command('start')
     .description('Start the remote CLI service')
     .option('-d, --daemon', 'Run as background daemon')
-    .option('--non-interactive', 'Do not prompt during automated startup')
+    .option('--non-interactive', 'Exit after automatic updates for a process supervisor to restart')
     .action(async (options) => {
     try {
         const result = await (0, start_1.startCommand)({