chorus-codes 0.8.9 → 0.8.10

package/.next/trace-build

@@ -1 +1 @@
-[{"name":"run-webpack","duration":10743011,"timestamp":6670325208104,"id":14,"parentId":1,"tags":{},"startTime":1778061695634,"traceId":"f02d898778399ea0"},{"name":"run-typescript","duration":5660443,"timestamp":6670335955353,"id":2100,"parentId":1,"tags":{},"startTime":1778061706381,"traceId":"f02d898778399ea0"},{"name":"static-check","duration":419952,"timestamp":6670341653977,"id":2103,"parentId":1,"tags":{},"startTime":1778061712080,"traceId":"f02d898778399ea0"},{"name":"static-generation","duration":1384663,"timestamp":6670342239447,"id":2143,"parentId":1,"tags":{},"startTime":1778061712665,"traceId":"f02d898778399ea0"},{"name":"collect-build-traces","duration":6022041,"timestamp":6670342074379,"id":2140,"parentId":1,"tags":{},"startTime":1778061712500,"traceId":"f02d898778399ea0"},{"name":"telemetry-flush","duration":32,"timestamp":6670348098033,"id":2152,"parentId":1,"tags":{},"startTime":1778061718524,"traceId":"f02d898778399ea0"},{"name":"next-build","duration":22982912,"timestamp":6670325115161,"id":1,"tags":{"buildMode":"default","version":"16.2.4","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1778061695541,"traceId":"f02d898778399ea0"}]
+[{"name":"run-webpack","duration":10599460,"timestamp":6670667640488,"id":14,"parentId":1,"tags":{},"startTime":1778062038067,"traceId":"2ae559c6d80e4de6"},{"name":"run-typescript","duration":5408355,"timestamp":6670678243506,"id":2100,"parentId":1,"tags":{},"startTime":1778062048670,"traceId":"2ae559c6d80e4de6"},{"name":"static-check","duration":406752,"timestamp":6670683689687,"id":2103,"parentId":1,"tags":{},"startTime":1778062054116,"traceId":"2ae559c6d80e4de6"},{"name":"static-generation","duration":1405409,"timestamp":6670684268821,"id":2143,"parentId":1,"tags":{},"startTime":1778062054695,"traceId":"2ae559c6d80e4de6"},{"name":"collect-build-traces","duration":6230621,"timestamp":6670684096809,"id":2140,"parentId":1,"tags":{},"startTime":1778062054523,"traceId":"2ae559c6d80e4de6"},{"name":"telemetry-flush","duration":30,"timestamp":6670690329056,"id":2152,"parentId":1,"tags":{},"startTime":1778062060755,"traceId":"2ae559c6d80e4de6"},{"name":"next-build","duration":22816891,"timestamp":6670667512204,"id":1,"tags":{"buildMode":"default","version":"16.2.4","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1778062037938,"traceId":"2ae559c6d80e4de6"}]

package/dist/daemon/agents/claude.js

@@ -23,7 +23,13 @@ exports.claudeShim = {
         // (settings.local.json `permissions.allow[]`) already implements the
         // "workspace" profile. Full = bypass everything; strict isn't expressible
         // at spawn time, only via tighter allow-list.
-        if (opts.unsandboxed || opts.sandbox === 'full') {
+        //
+        // Root-aware: --dangerously-skip-permissions is refused under root (same
+        // policy as the headless permission-mode bypass). Under root we drop the
+        // flag — claude will use its default per-tool prompts which the tmux
+        // session lets the user approve interactively.
+        const runningAsRoot = typeof process.getuid === 'function' && process.getuid() === 0;
+        if ((opts.unsandboxed || opts.sandbox === 'full') && !runningAsRoot) {
             cmd += ` --dangerously-skip-permissions`;
         }
         if (opts.model) {
@@ -52,13 +58,32 @@ exports.claudeShim = {
     runHeadless(opts) {
         (0, preflight_js_1.preTrustClaudeWorkspace)(opts.cwd);
         const args = ['--print', '--output-format', 'stream-json', '--verbose'];
+        // Root-aware permission mode. Claude CLI refuses both
+        // `--dangerously-skip-permissions` AND `--permission-mode
+        // bypassPermissions` when running as root (Anthropic's security
+        // policy — common WSL trap since WSL defaults to root). `plan`
+        // mode is the read-only escape hatch that doesn't trigger the
+        // refusal: reviewer / pure-text-generation use cases work
+        // normally, but the doer can't edit files or run bash. For
+        // chorus's typical reviewer fan-out (Tri-Review, Review-Only,
+        // Code-Review) plan mode is functionally equivalent. Power users
+        // running implement-style templates (Red-Green's implement phase)
+        // need a non-root user.
+        const runningAsRoot = typeof process.getuid === 'function' && process.getuid() === 0;
         // Sandbox profile → permission-mode mapping. Headless mode auto-skips the
         // workspace-trust dialog (per `claude -p` docs) so we don't need preflight
         // beyond the trust marker write above.
-        if (opts.sandbox === 'strict') {
+        if (opts.sandbox === 'strict' || runningAsRoot) {
             // 'plan' = read-only-ish: no Edit, no Bash. The closest Claude has to
-            // a strict sandbox in headless.
+            // a strict sandbox in headless. Also the only mode Claude allows under
+            // root, so we use it as the fallback when uid 0.
             args.push('--permission-mode', 'plan');
+            if (runningAsRoot && opts.sandbox !== 'strict') {
+                // One-line stderr nudge so power users notice the downgrade
+                // and know to switch off root for write-capable doers.
+                process.stderr.write('[chorus] Claude running as root: permission mode downgraded to "plan" ' +
+                    '(read-only). Run chorus as a non-root user for file-editing doer slots.\n');
+            }
         }
         else if (opts.autoApprove !== false || opts.sandbox === 'full') {
             // Default for headless reviewer spawns — bypass per-tool prompts so the

package/dist/daemon/agents/claude.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/daemon/agents/claude.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AASH,yCAAmD;AACnD,iDAAyD;AACzD,gDAA+C;AAC/C,iDAAiD;AAEpC,QAAA,UAAU,GAAc;IACnC,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,aAAa;IAEnB,kBAAkB,CAAC,IAAuB;QACxC,yEAAyE;QACzE,qEAAqE;QACrE,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,MAAM,GAAG,YAAY,CAAC;QAEhC,+DAA+D;QAC/D,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,8CAA8C;QAC9C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,GAAG,IAAI,iCAAiC,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,YAAY,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,IAA0B;QACpC,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAExE,0EAA0E;QAC1E,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,sEAAsE;YACtE,gCAAgC;YAChC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACjE,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACtD,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,+CAA+C;QAE/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,0DAA0D;QAE1D,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,QAAQ;YACjB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,SAAS,EAAE,sBAAW;YACtB,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iEAAiE;YACjE,8BAA8B;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,0DAA0D;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/daemon/agents/claude.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AASH,yCAAmD;AACnD,iDAAyD;AACzD,gDAA+C;AAC/C,iDAAiD;AAEpC,QAAA,UAAU,GAAc;IACnC,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,aAAa;IAEnB,kBAAkB,CAAC,IAAuB;QACxC,yEAAyE;QACzE,qEAAqE;QACrE,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,MAAM,GAAG,YAAY,CAAC;QAEhC,+DAA+D;QAC/D,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,8CAA8C;QAC9C,EAAE;QACF,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpE,GAAG,IAAI,iCAAiC,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,IAAI,YAAY,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YAAY,CAAC,IAAuB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;YACtC,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,CACL,GAAG,IAAI,CAAC,IAAI,MAAM;YAClB,uBAAuB,IAAI,CAAC,UAAU,MAAM;YAC5C,8BAA8B,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,IAA0B;QACpC,IAAA,sCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAExE,sDAAsD;QACtD,0DAA0D;QAC1D,gEAAgE;QAChE,+DAA+D;QAC/D,8DAA8D;QAC9D,0DAA0D;QAC1D,2DAA2D;QAC3D,8DAA8D;QAC9D,iEAAiE;QACjE,kEAAkE;QAClE,wBAAwB;QACxB,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEjE,0EAA0E;QAC1E,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,aAAa,EAAE,CAAC;YAC/C,sEAAsE;YACtE,uEAAuE;YACvE,iDAAiD;YACjD,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC/C,4DAA4D;gBAC5D,uDAAuD;gBACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wEAAwE;oBACtE,2EAA2E,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACjE,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACtD,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,+CAA+C;QAE/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,0DAA0D;QAE1D,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC;YACxB,OAAO,EAAE,QAAQ;YACjB,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,SAAS,EAAE,sBAAW;YACtB,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iEAAiE;YACjE,8BAA8B;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,eAAe;QACb,0DAA0D;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chorus-codes",
-  "version": "0.8.9",
+  "version": "0.8.10",
   "description": "Driver-agnostic multi-LLM peer review for code decisions. Bring your own CLI; Chorus convenes 2-4 other LLMs to review the work before you ship.",
   "license": "Apache-2.0",
   "author": "99x Agency",