agentroam 0.2.0-preview.3 → 0.2.0-preview.5

package/runtime/node_modules/@anthropic-ai/claude-agent-sdk/extractFromBunfs.js

@@ -0,0 +1,156 @@
+/* oxlint-disable custom-rules/no-sync-fs */
+// Extracts a file from Bun's $bunfs virtual filesystem to a real temp directory
+// so it can be spawned as a subprocess (child processes cannot access $bunfs).
+//
+// Ships verbatim (unbundled) as the @anthropic-ai/claude-agent-sdk `./extract`
+// export — keep it standalone and Node-importable (no Bun globals, no
+// local-relative imports).
+
+import { createHash } from 'crypto'
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync,
+} from 'fs'
+import { tmpdir as osTmpdir } from 'os'
+import { basename, join } from 'path'
+
+// Inlined from src/utils/tempfile.ts — this file ships verbatim (unbundled) as
+// the @anthropic-ai/claude-agent-sdk/extract export, so it must have zero
+// local-relative imports. Keep behavior in sync with tempfile.ts#tmpdir.
+function tmpdir() {
+  if (process.env.CLAUDE_CODE_TMPDIR) {
+    return process.env.CLAUDE_CODE_TMPDIR
+  }
+  if (process.platform === 'darwin') {
+    // oxlint-disable-next-line custom-rules/no-hardcoded-tmp -- mirrors tempfile.ts: macOS /tmp works fine; os.tmpdir() below is for Android-on-Linux where /tmp isn't writable.
+    return '/tmp'
+  }
+  return osTmpdir()
+}
+
+// Inlined from src/utils/tempfile.ts#claudeTempDir + verifyTempDirOwnership —
+// keep behavior in sync. Per-UID Claude temp directory: `{tmpdir()}/claude-{uid}`
+// on Unix, `{tmpdir()}/claude` on Windows (where %TEMP% is already per-user).
+//
+// Defense-in-depth against a local attacker pre-creating the extraction dir
+// before the victim's first run: the content-hash dir name is fully predictable
+// (sha256 of a public npm binary) under shared `/tmp`, and
+// `mkdirSync({recursive:true})` is a silent no-op on a pre-existing dir without
+// enforcing owner or mode. Without this check an attacker-owned directory would
+// be used as-is, letting them swap the binary the SDK later spawns.
+function safeTempBase() {
+  const dir = join(
+    tmpdir(),
+    process.platform === 'win32'
+      ? 'claude'
+      : `claude-${process.getuid?.() ?? 0}`,
+  )
+  // Gate on getuid (POSIX-only) rather than process.platform: getuid presence
+  // reflects the real OS. No-op on Windows where %TEMP% is already per-user.
+  if (typeof process.getuid === 'function') {
+    mkdirSync(dir, { recursive: true, mode: 0o700 })
+    const uid = process.getuid()
+    const st = lstatSync(dir)
+    if (!st.isDirectory()) {
+      throw new Error(
+        `Temp directory ${dir} is not a directory (may be an attacker-planted symlink). Refusing to use it.`,
+      )
+    }
+    if (st.uid !== uid) {
+      throw new Error(
+        `Temp directory ${dir} is owned by uid ${st.uid}, expected ${uid}. Refusing to use it — another user may have pre-created it.`,
+      )
+    }
+    if ((st.mode & 0o777) !== 0o700) {
+      // Owner matches, so this is our own dir from a prior run with a looser
+      // umask rather than an attacker pre-create. Tighten it.
+      chmodSync(dir, 0o700)
+    }
+  } else {
+    // Windows: best-effort create; verification is skipped (%TEMP% is per-user).
+    try {
+      mkdirSync(dir, { recursive: true, mode: 0o700 })
+    } catch {
+      // best-effort; see comment above
+    }
+  }
+  return dir
+}
+
+/**
+ * If `embeddedPath` is inside Bun's $bunfs virtual filesystem, extract it to a
+ * temp directory and return the real path. Otherwise return the path unchanged.
+ *
+ * Uses a content hash for the directory name so that:
+ * - Same binary version reuses the same extracted file (no accumulation)
+ * - Different versions get separate directories (no collision)
+ * - Concurrent instances are safe (atomic write via temp file + rename)
+ *
+ * @param {string} embeddedPath — path returned by `import ... with { type: 'file' }`
+ * @returns {string} — a real filesystem path that can be spawned as a subprocess
+ */
+export function extractFromBunfs(embeddedPath) {
+  // Bun single-file embed: `/$bunfs/root/...` (POSIX) or `B:\~BUN\root\...`
+  // (Windows — Bun's StandaloneModuleGraph uses `~BUN`, not `$bunfs`, on Windows).
+  if (!embeddedPath.includes('$bunfs') && !embeddedPath.includes('~BUN')) {
+    return embeddedPath
+  }
+
+  try {
+    const content = readFileSync(embeddedPath)
+    const hash = createHash('sha256').update(content).digest('hex').slice(0, 16)
+    const tmpDir = join(safeTempBase(), `claude-agent-sdk-${hash}`)
+    // Preserve the embedded file's basename — ProcessTransport.isNativeBinary()
+    // decides whether to spawn directly or via node/bun based on extension, so
+    // a native binary must not come out named cli.js.
+    const fileName = basename(embeddedPath)
+    const tmpPath = join(tmpDir, fileName)
+    mkdirSync(tmpDir, { recursive: true, mode: 0o700 })
+    // The directory is content-hash-keyed, so an existing tmpPath is byte-
+    // identical to what we would write — short-circuit. This is a write
+    // idempotency check on a content-addressed path, not a read TOCTOU
+    // (the existence IS the contract). Without it, a second call (or a
+    // concurrent app instance) on Windows would hit EPERM/EBUSY renaming over
+    // the memory-mapped running .exe and fall back to the unspawnable $bunfs
+    // path. It also skips a redundant write+chmod on every call.
+    if (existsSync(tmpPath)) {
+      return tmpPath
+    }
+    // Write to a temp file and atomically rename to avoid truncation races —
+    // concurrent readers always see either the old complete file or the new one.
+    const tmpFile = join(tmpDir, `${fileName}.tmp.${process.pid}`)
+    writeFileSync(tmpFile, content)
+    chmodSync(tmpFile, 0o755)
+    try {
+      renameSync(tmpFile, tmpPath)
+    } catch (e) {
+      if ((e.code === 'EPERM' || e.code === 'EBUSY') && existsSync(tmpPath)) {
+        // Lost a concurrent first-time-extraction race on Windows: the winner's
+        // child holds tmpPath memory-mapped, so the loser's rename over it fails.
+        // The content-hash dir guarantees byte-identity, so the winner's file is
+        // exactly what we'd have written — use it.
+        try {
+          unlinkSync(tmpFile)
+        } catch {
+          // best-effort cleanup of our orphaned .tmp.{pid} file
+        }
+        return tmpPath
+      }
+      throw e
+    }
+    return tmpPath
+  } catch (err) {
+    // oxlint-disable-next-line no-console -- intentional user-facing warning in standalone SDK helper
+    console.warn(
+      `[claude-agent-sdk] Failed to extract CLI from $bunfs: ${err.message}. ` +
+        `Child processes cannot access $bunfs paths — the CLI will likely fail to start.`,
+    )
+    return embeddedPath
+  }
+}

package/runtime/node_modules/@anthropic-ai/claude-agent-sdk/manifest.json

@@ -0,0 +1,64 @@
+{
+  "version": "2.1.258",
+  "manifestSignatureEnforcement": "flag",
+  "commit": "b3cd543a1f6fcdf4d8fabc0f5e5538d2ee7f38e1",
+  "buildDate": "2026-09-01T22:02:56Z",
+  "platforms": {
+    "darwin-arm64": {
+      "binary": "claude",
+      "checksum": "b63136194160791c27cfa7b0403060d85eb0752991625fde8c09f9acacb17c78",
+      "size": 199027600
+    },
+    "darwin-x64": {
+      "binary": "claude",
+      "checksum": "c857db5cd712865623bd61e806cf3f7e8e279c9e5c7c0af5eca06ca6717fc7fb",
+      "size": 207778640
+    },
+    "linux-arm64": {
+      "binary": "claude",
+      "checksum": "43dc490af55262edcb3e9b1cb315de22cc09ccb08bd52a4c39bc5eabaa63100f",
+      "size": 215014736
+    },
+    "linux-x64": {
+      "binary": "claude",
+      "checksum": "704f1334ac65d3e89e1c6c1d7663293ad786a6166afdb71b5075337df630f976",
+      "size": 215473560
+    },
+    "linux-arm64-musl": {
+      "binary": "claude",
+      "checksum": "d3bef6ba403fe3efba684fa93e1bb26bc7a08c054bd516639d54e77c77bb9821",
+      "size": 207894168
+    },
+    "linux-x64-musl": {
+      "binary": "claude",
+      "checksum": "e74a226cf174d911664aff982486c55ca770d9c00007e52e86b13d10bae72af3",
+      "size": 209493960
+    },
+    "win32-x64": {
+      "binary": "claude.exe",
+      "checksum": "22f5f3a44093e14c75a4d1c8ce25c730b21dd634318fbe3268e9057d12b17c41",
+      "size": 218507936
+    },
+    "win32-arm64": {
+      "binary": "claude.exe",
+      "checksum": "42675c431b6014ad7243fea0ed0e371045dedc89d94aac81a9a0f528e644ed97",
+      "size": 209548960
+    }
+  },
+  "sdkCompat": {
+    "testedWrapperVersions": [
+      "0.3.217",
+      "0.3.218",
+      "0.3.219",
+      "0.3.220",
+      "0.3.221",
+      "0.3.222",
+      "0.3.223",
+      "0.3.224",
+      "0.3.225",
+      "0.3.226",
+      "0.3.227"
+    ],
+    "harnessSchema": 1
+  }
+}

package/runtime/node_modules/@anthropic-ai/claude-agent-sdk/manifest.zst.json

@@ -0,0 +1,72 @@
+{
+  "version": "2.1.258",
+  "manifestSignatureEnforcement": "flag",
+  "commit": "b3cd543a1f6fcdf4d8fabc0f5e5538d2ee7f38e1",
+  "buildDate": "2026-09-01T22:04:05Z",
+  "platforms": {
+    "darwin-arm64": {
+      "binary": "claude.zst",
+      "checksum": "ee83f6743e0e5f60ec1456ea813851c625051241f7bc55d607faafe44cf4bc82",
+      "size": 65811873,
+      "bundle": {
+        "checksum": "412f0b36da7cff5b20e7d856c939b449449583ee0971e9217c54972d1dfb4df3",
+        "size": 65814874
+      }
+    },
+    "darwin-x64": {
+      "binary": "claude.zst",
+      "checksum": "160aa9a06afcb80c293ecd4e42ea62adb67e471bed6b9a813504f26b96978034",
+      "size": 69876596,
+      "bundle": {
+        "checksum": "575203804ea01ddd3c12226c7c9cdcd068f1d039c732e22916297d438944510c",
+        "size": 69878203
+      }
+    },
+    "linux-arm64": {
+      "binary": "claude.zst",
+      "checksum": "31768a9f65e58e48a3cacf7fce069bb6d7bd707cdb49874af2cb19b9d05af671",
+      "size": 75035372
+    },
+    "linux-x64": {
+      "binary": "claude.zst",
+      "checksum": "88207a58aee5a82e47db834ce81111200ad8fae9ea9abe2ff1ff9773d6a2100a",
+      "size": 75670149
+    },
+    "linux-arm64-musl": {
+      "binary": "claude.zst",
+      "checksum": "6658622d769ad18dfbc1e70ea0056e34e88e258b15769e9c63c6c444cb83625a",
+      "size": 73516216
+    },
+    "linux-x64-musl": {
+      "binary": "claude.zst",
+      "checksum": "d357e596364fb922923e5db2b3877d3d7ba4a1b9d2f44f44879efa103bf459a0",
+      "size": 74188445
+    },
+    "win32-x64": {
+      "binary": "claude.exe.zst",
+      "checksum": "94c7203fbeaa42f67dba3e7aabc544b1356dcec76bf830693948e99f4e4f21bc",
+      "size": 78074015
+    },
+    "win32-arm64": {
+      "binary": "claude.exe.zst",
+      "checksum": "28eb7de6beb1adc3bc628426eada6aabd9592d42b66174cc419f64cb208f0127",
+      "size": 74810598
+    }
+  },
+  "sdkCompat": {
+    "testedWrapperVersions": [
+      "0.3.217",
+      "0.3.218",
+      "0.3.219",
+      "0.3.220",
+      "0.3.221",
+      "0.3.222",
+      "0.3.223",
+      "0.3.224",
+      "0.3.225",
+      "0.3.226",
+      "0.3.227"
+    ],
+    "harnessSchema": 1
+  }
+}

package/runtime/node_modules/@anthropic-ai/claude-agent-sdk/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "@anthropic-ai/claude-agent-sdk",
+  "version": "0.3.258",
+  "main": "sdk.mjs",
+  "types": "sdk.d.ts",
+  "exports": {
+    ".": {
+      "types": "./sdk.d.ts",
+      "default": "./sdk.mjs"
+    },
+    "./extract": {
+      "types": "./extractFromBunfs.d.ts",
+      "default": "./extractFromBunfs.js"
+    },
+    "./browser": {
+      "types": "./browser-sdk.d.ts",
+      "default": "./browser-sdk.js"
+    },
+    "./bridge": {
+      "types": "./bridge.d.ts",
+      "default": "./bridge.mjs"
+    },
+    "./sdk-tools": {
+      "types": "./sdk-tools.d.ts"
+    },
+    "./sdk-tools.js": {
+      "types": "./sdk-tools.d.ts"
+    }
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "type": "module",
+  "author": "Anthropic <support@anthropic.com>",
+  "license": "SEE LICENSE IN README.md",
+  "description": "SDK for building AI agents with Claude Code's capabilities. Programmatically interact with Claude to build autonomous agents that can understand codebases, edit files, and execute workflows.",
+  "homepage": "https://github.com/anthropics/claude-agent-sdk-typescript",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/anthropics/claude-agent-sdk-typescript.git"
+  },
+  "bugs": {
+    "url": "https://github.com/anthropics/claude-agent-sdk-typescript/issues"
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "sdk",
+    "claude",
+    "anthropic",
+    "automation",
+    "code-generation"
+  ],
+  "peerDependencies": {
+    "@anthropic-ai/sdk": ">=0.93.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.0.0"
+  },
+  "optionalDependencies": {
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.258",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.258"
+  },
+  "files": [
+    "sdk.mjs",
+    "sdk.d.ts",
+    "sdk-tools.d.ts",
+    "agentSdkTypes.d.ts",
+    "bridge.mjs",
+    "bridge.d.ts",
+    "browser-sdk.js",
+    "browser-sdk.d.ts",
+    "extractFromBunfs.js",
+    "extractFromBunfs.d.ts",
+    "manifest.json",
+    "manifest.zst.json"
+  ],
+  "claudeCodeVersion": "2.1.258"
+}