agent-relay-runner 0.94.2 → 0.94.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay-runner",
-  "version": "0.94.2",
+  "version": "0.94.3",
   "description": "Unified provider lifecycle runner for Agent Relay",
   "type": "module",
   "bin": {
@@ -20,7 +20,7 @@
     "directory": "runner"
   },
   "dependencies": {
-    "agent-relay-sdk": "0.2.74"
+    "agent-relay-sdk": "0.2.75"
   },
   "devDependencies": {
     "@types/bun": "latest",

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-relay-runner",
   "description": "Thin Agent Relay runner bridge for Claude Code",
-  "version": "0.94.2",
+  "version": "0.94.3",
   "agentRelayContracts": {
     "providerPluginProtocol": 1
   }

package/src/adapters/claude.ts

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import { join, resolve } from "node:path";
@@ -277,30 +277,21 @@ export class ClaudeAdapter implements ProviderAdapter {
     };
   }
 
-  buildTmuxArgs(config: RunnerSpawnConfig, spawnArgs: SpawnArgs): { sessionName: string; socketName: string; args: string[]; launcherScript?: string } {
+  buildTmuxArgs(config: RunnerSpawnConfig, spawnArgs: SpawnArgs): { sessionName: string; socketName: string; args: string[]; launcherScript: string } {
     const sessionName = config.tmuxSession || tmuxSessionName(config.providerConfig.headless.tmuxPrefix, config.instanceId, config.label);
     const socketName = tmuxSocketName(sessionName);
     const shellCmd = [spawnArgs.command, ...spawnArgs.args].map(shellQuote).join(" ");
     const tmuxArgs = ["new-session", "-d", "-s", sessionName, "-x", "200", "-y", "50"];
 
     const envKeys = tmuxEnvKeys(spawnArgs.env, config.providerConfig.env);
-    for (const key of envKeys) {
-      if (spawnArgs.env[key] !== undefined) {
-        tmuxArgs.push("-e", `${key}=${spawnArgs.env[key]}`);
-      }
-    }
-
-    // tmux new-session has a hard limit on command length. When the inline shell
-    // command is too long (e.g. fork with conversation history in --append-system-prompt),
-    // externalize it to a launcher script that tmux executes instead.
-    const MAX_TMUX_CMD_LEN = 2000;
-    let launcherScript: string | undefined;
-    if (shellCmd.length > MAX_TMUX_CMD_LEN) {
-      launcherScript = writeLauncherScript(sessionName, shellCmd);
-      tmuxArgs.push("-c", spawnArgs.cwd, `bash ${shellQuote(launcherScript)}`);
-    } else {
-      tmuxArgs.push("-c", spawnArgs.cwd, shellCmd);
-    }
+    const env: Record<string, string> = {};
+    for (const key of envKeys) if (spawnArgs.env[key] !== undefined) env[key] = spawnArgs.env[key]!;
+
+    // tmux new-session has a hard command-length limit that includes every argv item,
+    // including `-e KEY=value`. Keep tmux argv bounded by putting both env payloads
+    // (profile JSON, tokens, etc.) and the provider command/prompt in a session script.
+    const launcherScript = writeLauncherScript(sessionName, env, shellCmd);
+    tmuxArgs.push("-c", spawnArgs.cwd, `bash ${shellQuote(launcherScript)}`);
     return { sessionName, socketName, args: tmuxArgs, launcherScript };
   }
 
@@ -646,16 +637,25 @@ async function submitTextToTmux(sessionName: string, text: string, socketName?:
   }
 }
 
-const LAUNCHER_DIR = join(tmpdir(), "agent-relay-launchers");
+const LAUNCHER_DIR = join(tmpdir(), `agent-relay-launchers-${typeof process.getuid === "function" ? process.getuid() : "user"}`);
 
-function writeLauncherScript(sessionName: string, shellCmd: string): string {
-  mkdirSync(LAUNCHER_DIR, { recursive: true });
+function writeLauncherScript(sessionName: string, env: Record<string, string>, shellCmd: string): string {
+  mkdirSync(LAUNCHER_DIR, { recursive: true, mode: 0o700 });
+  chmodSync(LAUNCHER_DIR, 0o700);
   const sanitized = sanitizeFsName(sessionName, { replacement: "-", collapse: false });
   const scriptPath = join(LAUNCHER_DIR, `${sanitized}.sh`);
-  writeFileSync(scriptPath, `#!/usr/bin/env bash\nexec ${shellCmd}\n`, { mode: 0o755 });
+  const exports = Object.entries(env)
+    .map(([key, value]) => `export ${shellEnvKey(key)}=${shellQuote(value)}`)
+    .join("\n");
+  writeFileSync(scriptPath, `#!/usr/bin/env bash\n${exports ? `${exports}\n` : ""}exec ${shellCmd}\n`, { mode: 0o700 });
   return scriptPath;
 }
 
+function shellEnvKey(key: string): string {
+  if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) return key;
+  throw new Error(`invalid environment variable name for Claude launcher: ${key}`);
+}
+
 export function tmuxEnvKeys(env: Record<string, string>, providerEnv: Record<string, string>): string[] {
   const keys = new Set<string>();
   for (const key of Object.keys(env)) {