npm - claude-flow-novice - Versions diffs - 2.15.5 → 2.15.6 - Mend

claude-flow-novice 2.15.5 → 2.15.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (440) hide show

package/dist/cli/agent-executor.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/cli/agent-executor.ts"],"sourcesContent":["/*\r\n Agent Executor\r\n \r\n Executes CLI-spawned agents by:\r\n * 1. Checking custom routing configuration (z.ai vs Anthropic)\r\n * 2. Invoking the appropriate API\r\n * 3. Managing agent lifecycle and output\r\n /\r\n\r\nimport { spawn } from 'child_process';\r\nimport { exec } from 'child_process';\r\nimport { promisify } from 'util';\r\nimport { AgentDefinition } from './agent-definition-parser.js';\r\nimport { TaskContext, getAgentId } from './agent-prompt-builder.js';\r\nimport { buildCLIAgentSystemPrompt, loadContextFromEnv } from './cli-agent-context.js';\r\nimport {\r\n loadMessages,\r\n storeMessage,\r\n getCurrentFork,\r\n formatMessagesForAPI,\r\n type Message\r\n} from './conversation-fork.js';\r\nimport { convertToolNames } from './tool-definitions.js';\r\nimport fs from 'fs/promises';\r\nimport path from 'path';\r\nimport os from 'os';\r\n\r\nconst execAsync = promisify(exec);\r\n\r\n// Bug #6 Fix: Read Redis connection parameters from process.env\r\n// ENV-001: Standardized environment variable naming (REDIS_PASSWORD for all deployments)\r\nconst redisHost = process.env.CFN_REDIS_HOST \|\| 'cfn-redis';\r\nconst redisPort = process.env.CFN_REDIS_PORT \|\| '6379';\r\nconst redisPassword = process.env.CFN_REDIS_PASSWORD \|\| process.env.REDIS_PASSWORD \|\| '';\r\n\r\nexport interface AgentExecutionResult {\r\n success: boolean;\r\n agentId: string;\r\n output?: string;\r\n error?: string;\r\n exitCode: number;\r\n}\r\n\r\n/\r\n Extract confidence score from agent output\r\n * Looks for patterns like:\r\n * - \"confidence: 0.85\"\r\n * - \"Confidence: 0.90\"\r\n * - \"confidence score: 0.95\"\r\n * - \"self-confidence: 0.88\"\r\n /\r\nfunction extractConfidence(output: string \| undefined): number {\r\n if (!output) return 0.85;\r\n\r\n // Try multiple patterns\r\n const patterns = [\r\n /confidence:\\s([0-9.]+)/i,\r\n /confidence\\s+score:\\s([0-9.]+)/i,\r\n /self-confidence:\\s([0-9.]+)/i,\r\n /my\\s+confidence:\\s([0-9.]+)/i,\r\n ];\r\n\r\n for (const pattern of patterns) {\r\n const match = output.match(pattern);\r\n if (match && match[1]) {\r\n const score = parseFloat(match[1]);\r\n if (score >= 0 && score <= 1) {\r\n return score;\r\n }\r\n }\r\n }\r\n\r\n // Default to 0.85 if not found\r\n return 0.85;\r\n}\r\n\r\n/\r\n Execute CFN Loop protocol after agent completes work\r\n \r\n Steps:\r\n * 1. Signal completion to orchestrator\r\n * 2. Report confidence score\r\n * 3. Enter waiting mode (if iterations enabled)\r\n /\r\nasync function executeCFNProtocol(\r\n taskId: string,\r\n agentId: string,\r\n output: string \| undefined,\r\n iteration: number,\r\n enableIterations: boolean = false,\r\n maxIterations: number = 10\r\n): Promise<void> {\r\n console.log(`\\n[CFN Protocol] Starting for agent ${agentId}`);\r\n console.log(`[CFN Protocol] Task ID: ${taskId}, Iteration: ${iteration}`);\r\n\r\n try {\r\n // Step 1: Signal completion\r\n console.log('[CFN Protocol] Step 1: Signaling completion...');\r\n const authFlag = redisPassword ? `-a \"${redisPassword}\"` : '';\r\n await execAsync(`redis-cli -h \"${redisHost}\" -p \"${redisPort}\" ${authFlag} lpush \"swarm:${taskId}:${agentId}:done\" \"complete\"`);\r\n console.log('[CFN Protocol] ✓ Completion signaled');\r\n\r\n // Step 2: Extract and report confidence\r\n const confidence = extractConfidence(output);\r\n console.log(`[CFN Protocol] Step 2: Reporting confidence (${confidence})...`);\r\n\r\n const reportCmd = `./.claude/skills/cfn-redis-coordination/report-completion.sh \\\r\n --task-id \"${taskId}\" \\\r\n --agent-id \"${agentId}\" \\\r\n --confidence ${confidence} \\\r\n --iteration ${iteration}`;\r\n\r\n await execAsync(reportCmd);\r\n console.log('[CFN Protocol] ✓ Confidence reported');\r\n\r\n // Step 3: Exit cleanly (BUG #18 FIX - removed waiting mode)\r\n // Orchestrator will spawn appropriate specialist agent for next iteration\r\n // This enables adaptive agent specialization based on feedback type\r\n console.log('[CFN Protocol] Step 3: Exiting cleanly (iteration complete)');\r\n console.log('[CFN Protocol] Protocol complete\\n');\r\n } catch (error) {\r\n console.error('[CFN Protocol] Error:', error);\r\n throw error;\r\n }\r\n}\r\n\r\n/\r\n Check if custom routing (z.ai) is enabled\r\n /\r\nasync function isCustomRoutingEnabled(): Promise<boolean> {\r\n // Check environment variable\r\n if (process.env.CLAUDE_API_PROVIDER === 'zai') {\r\n return true;\r\n }\r\n\r\n // Check config file (.claude/config/api-provider.json)\r\n try {\r\n const configPath = path.join('.claude', 'config', 'api-provider.json');\r\n const config = JSON.parse(await fs.readFile(configPath, 'utf-8'));\r\n return config.provider === 'zai' \|\| config.provider === 'z.ai';\r\n } catch {\r\n return false;\r\n }\r\n}\r\n\r\n/\r\n Get API provider configuration\r\n /\r\nasync function getAPIProvider(): Promise<'anthropic' \| 'zai'> {\r\n const customEnabled = await isCustomRoutingEnabled();\r\n return customEnabled ? 'zai' : 'anthropic';\r\n}\r\n\r\n/\r\n Execute agent using direct API calls\r\n /\r\nasync function executeViaAPI(\r\n definition: AgentDefinition,\r\n prompt: string,\r\n context: TaskContext\r\n): Promise<AgentExecutionResult> {\r\n const agentId = getAgentId(definition, context);\r\n\r\n console.log(`[agent-executor] Executing agent via API: ${definition.name}`);\r\n console.log(`[agent-executor] Agent ID: ${agentId}`);\r\n console.log(`[agent-executor] Model: ${definition.model}`);\r\n console.log('');\r\n\r\n try {\r\n // Check for conversation fork (Sprint 4 enhancement)\r\n const forkId = process.env.FORK_ID \|\| await getCurrentFork(context.taskId \|\| '', agentId);\r\n const iteration = context.iteration \|\| 1;\r\n\r\n let systemPrompt: string;\r\n let messages: Array<{role: string, content: string}> = [];\r\n\r\n if (forkId && iteration > 1) {\r\n // Continue from fork (iterations 2+)\r\n console.log(`[agent-executor] Continuing from fork: ${forkId}`);\r\n\r\n // Load fork messages\r\n const forkMessages = await loadMessages(context.taskId \|\| '', agentId, forkId);\r\n console.log(`[agent-executor] Loaded ${forkMessages.length} messages from fork`);\r\n\r\n // Extract system prompt from first message (it's always the system message)\r\n // The fork messages are assistant/user pairs, we need to add system separately\r\n systemPrompt = forkMessages[0]?.content \|\| '';\r\n\r\n // Format remaining messages for API\r\n messages = formatMessagesForAPI(forkMessages.slice(1));\r\n\r\n // Add new user message with feedback\r\n messages.push({\r\n role: 'user',\r\n content: prompt\r\n });\r\n\r\n console.log(`[agent-executor] Fork continuation: ${messages.length} messages`);\r\n } else {\r\n // New conversation (iteration 1)\r\n console.log('[agent-executor] Starting new conversation');\r\n console.log('[agent-executor] Building system prompt with context...');\r\n\r\n const contextOptions = loadContextFromEnv();\r\n contextOptions.agentType = definition.name;\r\n if (context.taskId) contextOptions.taskId = context.taskId;\r\n if (context.iteration) contextOptions.iteration = context.iteration;\r\n\r\n systemPrompt = await buildCLIAgentSystemPrompt(contextOptions);\r\n console.log('[agent-executor] System prompt built successfully');\r\n\r\n // Initial user message\r\n messages = [{\r\n role: 'user',\r\n content: prompt\r\n }];\r\n }\r\n\r\n console.log('');\r\n\r\n // Dynamic import to avoid bundling issues\r\n const { executeAgentAPI } = await import('./anthropic-client.js');\r\n\r\n // Convert agent tool names to Anthropic API format\r\n const tools = definition.tools && definition.tools.length > 0\r\n ? convertToolNames(definition.tools)\r\n : undefined;\r\n\r\n const result = await executeAgentAPI(\r\n definition.name,\r\n agentId,\r\n definition.model,\r\n prompt,\r\n systemPrompt,\r\n messages.length > 1 ? messages : undefined,\r\n undefined, // maxTokens (use default)\r\n tools // Pass converted tools\r\n );\r\n\r\n // Store messages in conversation history (for future forking)\r\n if (context.taskId) {\r\n // Store user message\r\n const userMessage: Message = {\r\n role: 'user',\r\n content: prompt,\r\n iteration,\r\n timestamp: new Date().toISOString()\r\n };\r\n await storeMessage(context.taskId, agentId, userMessage);\r\n\r\n // Store assistant response\r\n if (result.output) {\r\n const assistantMessage: Message = {\r\n role: 'assistant',\r\n content: result.output,\r\n iteration,\r\n timestamp: new Date().toISOString()\r\n };\r\n await storeMessage(context.taskId, agentId, assistantMessage);\r\n }\r\n\r\n console.log(`[agent-executor] Stored messages for iteration ${iteration}`);\r\n\r\n // Execute CFN Loop protocol (signal completion, report confidence, enter waiting mode)\r\n // Iterations are enabled for CFN Loop tasks (indicated by presence of taskId)\r\n try {\r\n const maxIterations = 10; // Default max iterations\r\n const enableIterations = true; // Enable iterations for all CFN Loop tasks\r\n\r\n await executeCFNProtocol(\r\n context.taskId,\r\n agentId,\r\n result.output,\r\n iteration,\r\n enableIterations,\r\n maxIterations\r\n );\r\n } catch (error) {\r\n console.error('[agent-executor] CFN Protocol execution failed:', error);\r\n // Don't fail the entire agent execution if CFN protocol fails\r\n // This allows agents to complete even if Redis coordination has issues\r\n }\r\n }\r\n\r\n return {\r\n success: result.success,\r\n agentId,\r\n output: result.output,\r\n error: result.error,\r\n exitCode: result.success ? 0 : 1,\r\n };\r\n } catch (error) {\r\n console.error('[agent-executor] API execution failed:', error);\r\n return {\r\n success: false,\r\n agentId,\r\n error: error instanceof Error ? error.message : String(error),\r\n exitCode: 1,\r\n };\r\n }\r\n}\r\n\r\n/\r\n Execute agent using shell script (fallback/simulation)\r\n /\r\nasync function executeViaScript(\r\n definition: AgentDefinition,\r\n prompt: string,\r\n context: TaskContext\r\n): Promise<AgentExecutionResult> {\r\n const agentId = getAgentId(definition, context);\r\n\r\n // Write prompt to temporary file\r\n const tmpDir = os.tmpdir();\r\n const promptFile = path.join(tmpDir, `agent-${agentId}-${Date.now()}.md`);\r\n await fs.writeFile(promptFile, prompt, 'utf-8');\r\n\r\n console.log(`[agent-executor] Executing agent via script: ${definition.name}`);\r\n console.log(`[agent-executor] Agent ID: ${agentId}`);\r\n console.log(`[agent-executor] Model: ${definition.model}`);\r\n console.log(`[agent-executor] Prompt file: ${promptFile}`);\r\n\r\n return new Promise((resolve) => {\r\n const scriptPath = path.join('.claude', 'skills', 'agent-execution', 'execute-agent.sh');\r\n\r\n // Build environment variables - WHITELIST ONLY APPROACH\r\n // SECURITY FIX: Do not use ...process.env spread which exposes ALL variables including secrets\r\n // Instead, explicitly whitelist safe variables to pass to spawned process\r\n const safeEnvVars = [\r\n 'CFN_REDIS_HOST',\r\n 'CFN_REDIS_PORT',\r\n 'CFN_REDIS_URL',\r\n 'CFN_MEMORY_BUDGET',\r\n 'CFN_API_HOST',\r\n 'CFN_API_PORT',\r\n 'CFN_LOG_LEVEL',\r\n 'CFN_LOG_FORMAT',\r\n 'CFN_CONTAINER_MODE',\r\n 'CFN_DOCKER_SOCKET',\r\n 'CFN_NETWORK_NAME',\r\n 'CFN_CUSTOM_ROUTING',\r\n 'CFN_DEFAULT_PROVIDER',\r\n 'NODE_ENV',\r\n 'PATH',\r\n 'HOME'\r\n ];\r\n\r\n const env: Record<string, string> = {};\r\n\r\n // Add whitelisted variables\r\n for (const key of safeEnvVars) {\r\n const value = process.env[key];\r\n if (value !== undefined) {\r\n env[key] = value;\r\n }\r\n }\r\n\r\n // Add API key only when explicitly needed (with strict validation)\r\n if (process.env.ANTHROPIC_API_KEY) {\r\n if (process.env.ANTHROPIC_API_KEY.match(/^sk-[a-zA-Z0-9-]+$/)) {\r\n env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n }\r\n }\r\n\r\n // Add agent execution context (safe values)\r\n env.AGENT_TYPE = definition.name;\r\n env.AGENT_ID = agentId;\r\n env.AGENT_MODEL = definition.model;\r\n env.AGENT_TOOLS = definition.tools.join(',');\r\n env.TASK_ID = context.taskId \|\| '';\r\n env.ITERATION = String(context.iteration \|\| 1);\r\n env.MODE = context.mode \|\| 'cli';\r\n env.PROMPT_FILE = promptFile;\r\n\r\n // Check if execute script exists\r\n fs.access(scriptPath)\r\n .then(() => {\r\n // Use execution script\r\n const proc = spawn('bash', [scriptPath], { env, stdio: 'inherit' });\r\n\r\n proc.on('exit', (code) => {\r\n resolve({\r\n success: code === 0,\r\n agentId,\r\n exitCode: code \|\| 0,\r\n });\r\n });\r\n\r\n proc.on('error', (err) => {\r\n resolve({\r\n success: false,\r\n agentId,\r\n error: err.message,\r\n exitCode: 1,\r\n });\r\n });\r\n })\r\n .catch(() => {\r\n // Fallback: Print prompt\r\n console.log('\\n=== Agent Prompt ===');\r\n console.log(prompt.substring(0, 500) + '...');\r\n console.log('\\n[agent-executor] Execution script not found');\r\n console.log('[agent-executor] Using simulation mode\\n');\r\n\r\n resolve({\r\n success: true,\r\n agentId,\r\n output: prompt,\r\n exitCode: 0,\r\n });\r\n });\r\n });\r\n}\r\n\r\n/\r\n Main agent execution function\r\n /\r\nexport async function executeAgent(\r\n definition: AgentDefinition,\r\n prompt: string,\r\n context: TaskContext,\r\n options: {\r\n method?: 'auto' \| 'api' \| 'script';\r\n } = {}\r\n): Promise<AgentExecutionResult> {\r\n const method = options.method \|\| 'auto';\r\n\r\n // Auto-select execution method\r\n if (method === 'auto') {\r\n // Try API execution first, fallback to script if API key not available\r\n try {\r\n return await executeViaAPI(definition, prompt, context);\r\n } catch (error) {\r\n if (error instanceof Error && error.message.includes('API key not found')) {\r\n console.log('[agent-executor] API key not found, using script fallback');\r\n return executeViaScript(definition, prompt, context);\r\n }\r\n throw error;\r\n }\r\n }\r\n\r\n if (method === 'api') {\r\n return executeViaAPI(definition, prompt, context);\r\n }\r\n\r\n return executeViaScript(definition, prompt, context);\r\n}\r\n\r\n/\r\n Write agent output to file for debugging\r\n */\r\nexport async function saveAgentOutput(\r\n agentId: string,\r\n output: string,\r\n outputDir: string = '.claude/tmp/agent-output'\r\n): Promise<string> {\r\n await fs.mkdir(outputDir, { recursive: true });\r\n\r\n const timestamp = new Date().toISOString().replace(/[:.]/g, '-');\r\n const filename = `${agentId}-${timestamp}.txt`;\r\n const filepath = path.join(outputDir, filename);\r\n\r\n await fs.writeFile(filepath, output, 'utf-8');\r\n\r\n return filepath;\r\n}\r\n"],"names":["spawn","exec","promisify","getAgentId","buildCLIAgentSystemPrompt","loadContextFromEnv","loadMessages","storeMessage","getCurrentFork","formatMessagesForAPI","convertToolNames","fs","path","os","execAsync","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","redisPassword","CFN_REDIS_PASSWORD","REDIS_PASSWORD","extractConfidence","output","patterns","pattern","match","score","parseFloat","executeCFNProtocol","taskId","agentId","iteration","enableIterations","maxIterations","console","log","authFlag","confidence","reportCmd","error","isCustomRoutingEnabled","CLAUDE_API_PROVIDER","configPath","join","config","JSON","parse","readFile","provider","getAPIProvider","customEnabled","executeViaAPI","definition","prompt","context","name","model","forkId","FORK_ID","systemPrompt","messages","forkMessages","length","content","slice","push","role","contextOptions","agentType","executeAgentAPI","tools","undefined","result","userMessage","timestamp","Date","toISOString","assistantMessage","success","exitCode","Error","message","String","executeViaScript","tmpDir","tmpdir","promptFile","now","writeFile","Promise","resolve","scriptPath","safeEnvVars","key","value","ANTHROPIC_API_KEY","AGENT_TYPE","AGENT_ID","AGENT_MODEL","AGENT_TOOLS","TASK_ID","ITERATION","MODE","mode","PROMPT_FILE","access","then","proc","stdio","on","code","err","catch","substring","executeAgent","options","method","includes","saveAgentOutput","outputDir","mkdir","recursive","replace","filename","filepath"],"mappings":"AAAA;;;;;;;CAOC,GAED,SAASA,KAAK,QAAQ,gBAAgB;AACtC,SAASC,IAAI,QAAQ,gBAAgB;AACrC,SAASC,SAAS,QAAQ,OAAO;AAEjC,SAAsBC,UAAU,QAAQ,4BAA4B;AACpE,SAASC,yBAAyB,EAAEC,kBAAkB,QAAQ,yBAAyB;AACvF,SACEC,YAAY,EACZC,YAAY,EACZC,cAAc,EACdC,oBAAoB,QAEf,yBAAyB;AAChC,SAASC,gBAAgB,QAAQ,wBAAwB;AACzD,OAAOC,QAAQ,cAAc;AAC7B,OAAOC,UAAU,OAAO;AACxB,OAAOC,QAAQ,KAAK;AAEpB,MAAMC,YAAYZ,UAAUD;AAE5B,gEAAgE;AAChE,yFAAyF;AACzF,MAAMc,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;AAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;AAChD,MAAMC,gBAAgBL,QAAQC,GAAG,CAACK,kBAAkB,IAAIN,QAAQC,GAAG,CAACM,cAAc,IAAI;AAUtF;;;;;;;CAOC,GACD,SAASC,kBAAkBC,MAA0B;IACnD,IAAI,CAACA,QAAQ,OAAO;IAEpB,wBAAwB;IACxB,MAAMC,WAAW;QACf;QACA;QACA;QACA;KACD;IAED,KAAK,MAAMC,WAAWD,SAAU;QAC9B,MAAME,QAAQH,OAAOG,KAAK,CAACD;QAC3B,IAAIC,SAASA,KAAK,CAAC,EAAE,EAAE;YACrB,MAAMC,QAAQC,WAAWF,KAAK,CAAC,EAAE;YACjC,IAAIC,SAAS,KAAKA,SAAS,GAAG;gBAC5B,OAAOA;YACT;QACF;IACF;IAEA,+BAA+B;IAC/B,OAAO;AACT;AAEA;;;;;;;CAOC,GACD,eAAeE,mBACbC,MAAc,EACdC,OAAe,EACfR,MAA0B,EAC1BS,SAAiB,EACjBC,mBAA4B,KAAK,EACjCC,gBAAwB,EAAE;IAE1BC,QAAQC,GAAG,CAAC,CAAC,oCAAoC,EAAEL,SAAS;IAC5DI,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEN,OAAO,aAAa,EAAEE,WAAW;IAExE,IAAI;QACF,4BAA4B;QAC5BG,QAAQC,GAAG,CAAC;QACZ,MAAMC,WAAWlB,gBAAgB,CAAC,IAAI,EAAEA,cAAc,CAAC,CAAC,GAAG;QAC3D,MAAMP,UAAU,CAAC,cAAc,EAAEC,UAAU,MAAM,EAAEI,UAAU,EAAE,EAAEoB,SAAS,cAAc,EAAEP,OAAO,CAAC,EAAEC,QAAQ,iBAAiB,CAAC;QAC9HI,QAAQC,GAAG,CAAC;QAEZ,wCAAwC;QACxC,MAAME,aAAahB,kBAAkBC;QACrCY,QAAQC,GAAG,CAAC,CAAC,6CAA6C,EAAEE,WAAW,IAAI,CAAC;QAE5E,MAAMC,YAAY,CAAC;iBACN,EAAET,OAAO;kBACR,EAAEC,QAAQ;mBACT,EAAEO,WAAW;kBACd,EAAEN,WAAW;QAE3B,MAAMpB,UAAU2B;QAChBJ,QAAQC,GAAG,CAAC;QAEZ,4DAA4D;QAC5D,0EAA0E;QAC1E,oEAAoE;QACpED,QAAQC,GAAG,CAAC;QACZD,QAAQC,GAAG,CAAC;IACd,EAAE,OAAOI,OAAO;QACdL,QAAQK,KAAK,CAAC,yBAAyBA;QACvC,MAAMA;IACR;AACF;AAEA;;CAEC,GACD,eAAeC;IACb,6BAA6B;IAC7B,IAAI3B,QAAQC,GAAG,CAAC2B,mBAAmB,KAAK,OAAO;QAC7C,OAAO;IACT;IAEA,uDAAuD;IACvD,IAAI;QACF,MAAMC,aAAajC,KAAKkC,IAAI,CAAC,WAAW,UAAU;QAClD,MAAMC,SAASC,KAAKC,KAAK,CAAC,MAAMtC,GAAGuC,QAAQ,CAACL,YAAY;QACxD,OAAOE,OAAOI,QAAQ,KAAK,SAASJ,OAAOI,QAAQ,KAAK;IAC1D,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA;;CAEC,GACD,eAAeC;IACb,MAAMC,gBAAgB,MAAMV;IAC5B,OAAOU,gBAAgB,QAAQ;AACjC;AAEA;;CAEC,GACD,eAAeC,cACbC,UAA2B,EAC3BC,MAAc,EACdC,OAAoB;IAEpB,MAAMxB,UAAU9B,WAAWoD,YAAYE;IAEvCpB,QAAQC,GAAG,CAAC,CAAC,0CAA0C,EAAEiB,WAAWG,IAAI,EAAE;IAC1ErB,QAAQC,GAAG,CAAC,CAAC,2BAA2B,EAAEL,SAAS;IACnDI,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEiB,WAAWI,KAAK,EAAE;IACzDtB,QAAQC,GAAG,CAAC;IAEZ,IAAI;QACF,qDAAqD;QACrD,MAAMsB,SAAS5C,QAAQC,GAAG,CAAC4C,OAAO,IAAI,MAAMrD,eAAeiD,QAAQzB,MAAM,IAAI,IAAIC;QACjF,MAAMC,YAAYuB,QAAQvB,SAAS,IAAI;QAEvC,IAAI4B;QACJ,IAAIC,WAAmD,EAAE;QAEzD,IAAIH,UAAU1B,YAAY,GAAG;YAC3B,qCAAqC;YACrCG,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEsB,QAAQ;YAE9D,qBAAqB;YACrB,MAAMI,eAAe,MAAM1D,aAAamD,QAAQzB,MAAM,IAAI,IAAIC,SAAS2B;YACvEvB,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAE0B,aAAaC,MAAM,CAAC,mBAAmB,CAAC;YAE/E,4EAA4E;YAC5E,+EAA+E;YAC/EH,eAAeE,YAAY,CAAC,EAAE,EAAEE,WAAW;YAE3C,oCAAoC;YACpCH,WAAWtD,qBAAqBuD,aAAaG,KAAK,CAAC;YAEnD,qCAAqC;YACrCJ,SAASK,IAAI,CAAC;gBACZC,MAAM;gBACNH,SAASV;YACX;YAEAnB,QAAQC,GAAG,CAAC,CAAC,oCAAoC,EAAEyB,SAASE,MAAM,CAAC,SAAS,CAAC;QAC/E,OAAO;YACL,iCAAiC;YACjC5B,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,MAAMgC,iBAAiBjE;YACvBiE,eAAeC,SAAS,GAAGhB,WAAWG,IAAI;YAC1C,IAAID,QAAQzB,MAAM,EAAEsC,eAAetC,MAAM,GAAGyB,QAAQzB,MAAM;YAC1D,IAAIyB,QAAQvB,SAAS,EAAEoC,eAAepC,SAAS,GAAGuB,QAAQvB,SAAS;YAEnE4B,eAAe,MAAM1D,0BAA0BkE;YAC/CjC,QAAQC,GAAG,CAAC;YAEZ,uBAAuB;YACvByB,WAAW;gBAAC;oBACVM,MAAM;oBACNH,SAASV;gBACX;aAAE;QACJ;QAEAnB,QAAQC,GAAG,CAAC;QAEZ,0CAA0C;QAC1C,MAAM,EAAEkC,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC;QAEzC,mDAAmD;QACnD,MAAMC,QAAQlB,WAAWkB,KAAK,IAAIlB,WAAWkB,KAAK,CAACR,MAAM,GAAG,IACxDvD,iBAAiB6C,WAAWkB,KAAK,IACjCC;QAEJ,MAAMC,SAAS,MAAMH,gBACnBjB,WAAWG,IAAI,EACfzB,SACAsB,WAAWI,KAAK,EAChBH,QACAM,cACAC,SAASE,MAAM,GAAG,IAAIF,WAAWW,WACjCA,WACAD,MAAO,uBAAuB;;QAGhC,8DAA8D;QAC9D,IAAIhB,QAAQzB,MAAM,EAAE;YAClB,qBAAqB;YACrB,MAAM4C,cAAuB;gBAC3BP,MAAM;gBACNH,SAASV;gBACTtB;gBACA2C,WAAW,IAAIC,OAAOC,WAAW;YACnC;YACA,MAAMxE,aAAakD,QAAQzB,MAAM,EAAEC,SAAS2C;YAE5C,2BAA2B;YAC3B,IAAID,OAAOlD,MAAM,EAAE;gBACjB,MAAMuD,mBAA4B;oBAChCX,MAAM;oBACNH,SAASS,OAAOlD,MAAM;oBACtBS;oBACA2C,WAAW,IAAIC,OAAOC,WAAW;gBACnC;gBACA,MAAMxE,aAAakD,QAAQzB,MAAM,EAAEC,SAAS+C;YAC9C;YAEA3C,QAAQC,GAAG,CAAC,CAAC,+CAA+C,EAAEJ,WAAW;YAEzE,uFAAuF;YACvF,8EAA8E;YAC9E,IAAI;gBACF,MAAME,gBAAgB,IAAI,yBAAyB;gBACnD,MAAMD,mBAAmB,MAAM,2CAA2C;gBAE1E,MAAMJ,mBACJ0B,QAAQzB,MAAM,EACdC,SACA0C,OAAOlD,MAAM,EACbS,WACAC,kBACAC;YAEJ,EAAE,OAAOM,OAAO;gBACdL,QAAQK,KAAK,CAAC,mDAAmDA;YACjE,8DAA8D;YAC9D,uEAAuE;YACzE;QACF;QAEA,OAAO;YACLuC,SAASN,OAAOM,OAAO;YACvBhD;YACAR,QAAQkD,OAAOlD,MAAM;YACrBiB,OAAOiC,OAAOjC,KAAK;YACnBwC,UAAUP,OAAOM,OAAO,GAAG,IAAI;QACjC;IACF,EAAE,OAAOvC,OAAO;QACdL,QAAQK,KAAK,CAAC,0CAA0CA;QACxD,OAAO;YACLuC,SAAS;YACThD;YACAS,OAAOA,iBAAiByC,QAAQzC,MAAM0C,OAAO,GAAGC,OAAO3C;YACvDwC,UAAU;QACZ;IACF;AACF;AAEA;;CAEC,GACD,eAAeI,iBACb/B,UAA2B,EAC3BC,MAAc,EACdC,OAAoB;IAEpB,MAAMxB,UAAU9B,WAAWoD,YAAYE;IAEvC,iCAAiC;IACjC,MAAM8B,SAAS1E,GAAG2E,MAAM;IACxB,MAAMC,aAAa7E,KAAKkC,IAAI,CAACyC,QAAQ,CAAC,MAAM,EAAEtD,QAAQ,CAAC,EAAE6C,KAAKY,GAAG,GAAG,GAAG,CAAC;IACxE,MAAM/E,GAAGgF,SAAS,CAACF,YAAYjC,QAAQ;IAEvCnB,QAAQC,GAAG,CAAC,CAAC,6CAA6C,EAAEiB,WAAWG,IAAI,EAAE;IAC7ErB,QAAQC,GAAG,CAAC,CAAC,2BAA2B,EAAEL,SAAS;IACnDI,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEiB,WAAWI,KAAK,EAAE;IACzDtB,QAAQC,GAAG,CAAC,CAAC,8BAA8B,EAAEmD,YAAY;IAEzD,OAAO,IAAIG,QAAQ,CAACC;QAClB,MAAMC,aAAalF,KAAKkC,IAAI,CAAC,WAAW,UAAU,mBAAmB;QAErE,wDAAwD;QACxD,+FAA+F;QAC/F,0EAA0E;QAC1E,MAAMiD,cAAc;YAClB;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QAED,MAAM9E,MAA8B,CAAC;QAErC,4BAA4B;QAC5B,KAAK,MAAM+E,OAAOD,YAAa;YAC7B,MAAME,QAAQjF,QAAQC,GAAG,CAAC+E,IAAI;YAC9B,IAAIC,UAAUvB,WAAW;gBACvBzD,GAAG,CAAC+E,IAAI,GAAGC;YACb;QACF;QAEA,mEAAmE;QACnE,IAAIjF,QAAQC,GAAG,CAACiF,iBAAiB,EAAE;YACjC,IAAIlF,QAAQC,GAAG,CAACiF,iBAAiB,CAACtE,KAAK,CAAC,uBAAuB;gBAC7DX,IAAIiF,iBAAiB,GAAGlF,QAAQC,GAAG,CAACiF,iBAAiB;YACvD;QACF;QAEA,4CAA4C;QAC5CjF,IAAIkF,UAAU,GAAG5C,WAAWG,IAAI;QAChCzC,IAAImF,QAAQ,GAAGnE;QACfhB,IAAIoF,WAAW,GAAG9C,WAAWI,KAAK;QAClC1C,IAAIqF,WAAW,GAAG/C,WAAWkB,KAAK,CAAC3B,IAAI,CAAC;QACxC7B,IAAIsF,OAAO,GAAG9C,QAAQzB,MAAM,IAAI;QAChCf,IAAIuF,SAAS,GAAGnB,OAAO5B,QAAQvB,SAAS,IAAI;QAC5CjB,IAAIwF,IAAI,GAAGhD,QAAQiD,IAAI,IAAI;QAC3BzF,IAAI0F,WAAW,GAAGlB;QAElB,iCAAiC;QACjC9E,GAAGiG,MAAM,CAACd,YACPe,IAAI,CAAC;YACJ,uBAAuB;YACvB,MAAMC,OAAO9G,MAAM,QAAQ;gBAAC8F;aAAW,EAAE;gBAAE7E;gBAAK8F,OAAO;YAAU;YAEjED,KAAKE,EAAE,CAAC,QAAQ,CAACC;gBACfpB,QAAQ;oBACNZ,SAASgC,SAAS;oBAClBhF;oBACAiD,UAAU+B,QAAQ;gBACpB;YACF;YAEAH,KAAKE,EAAE,CAAC,SAAS,CAACE;gBAChBrB,QAAQ;oBACNZ,SAAS;oBACThD;oBACAS,OAAOwE,IAAI9B,OAAO;oBAClBF,UAAU;gBACZ;YACF;QACF,GACCiC,KAAK,CAAC;YACL,yBAAyB;YACzB9E,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAACkB,OAAO4D,SAAS,CAAC,GAAG,OAAO;YACvC/E,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZuD,QAAQ;gBACNZ,SAAS;gBACThD;gBACAR,QAAQ+B;gBACR0B,UAAU;YACZ;QACF;IACJ;AACF;AAEA;;CAEC,GACD,OAAO,eAAemC,aACpB9D,UAA2B,EAC3BC,MAAc,EACdC,OAAoB,EACpB6D,UAEI,CAAC,CAAC;IAEN,MAAMC,SAASD,QAAQC,MAAM,IAAI;IAEjC,+BAA+B;IAC/B,IAAIA,WAAW,QAAQ;QACrB,uEAAuE;QACvE,IAAI;YACF,OAAO,MAAMjE,cAAcC,YAAYC,QAAQC;QACjD,EAAE,OAAOf,OAAO;YACd,IAAIA,iBAAiByC,SAASzC,MAAM0C,OAAO,CAACoC,QAAQ,CAAC,sBAAsB;gBACzEnF,QAAQC,GAAG,CAAC;gBACZ,OAAOgD,iBAAiB/B,YAAYC,QAAQC;YAC9C;YACA,MAAMf;QACR;IACF;IAEA,IAAI6E,WAAW,OAAO;QACpB,OAAOjE,cAAcC,YAAYC,QAAQC;IAC3C;IAEA,OAAO6B,iBAAiB/B,YAAYC,QAAQC;AAC9C;AAEA;;CAEC,GACD,OAAO,eAAegE,gBACpBxF,OAAe,EACfR,MAAc,EACdiG,YAAoB,0BAA0B;IAE9C,MAAM/G,GAAGgH,KAAK,CAACD,WAAW;QAAEE,WAAW;IAAK;IAE5C,MAAM/C,YAAY,IAAIC,OAAOC,WAAW,GAAG8C,OAAO,CAAC,SAAS;IAC5D,MAAMC,WAAW,GAAG7F,QAAQ,CAAC,EAAE4C,UAAU,IAAI,CAAC;IAC9C,MAAMkD,WAAWnH,KAAKkC,IAAI,CAAC4E,WAAWI;IAEtC,MAAMnH,GAAGgF,SAAS,CAACoC,UAAUtG,QAAQ;IAErC,OAAOsG;AACT"}
1	+ {"version":3,"sources":["../../src/cli/agent-executor.ts"],"sourcesContent":["/*\r\n Agent Executor\r\n \r\n Executes CLI-spawned agents by:\r\n * 1. Checking custom routing configuration (z.ai vs Anthropic)\r\n * 2. Invoking the appropriate API\r\n * 3. Managing agent lifecycle and output\r\n /\r\n\r\nimport { spawn } from 'child_process';\r\nimport { exec } from 'child_process';\r\nimport { promisify } from 'util';\r\nimport { AgentDefinition } from './agent-definition-parser.js';\r\nimport { TaskContext, getAgentId } from './agent-prompt-builder.js';\r\nimport { buildCLIAgentSystemPrompt, loadContextFromEnv } from './cli-agent-context.js';\r\nimport {\r\n loadMessages,\r\n storeMessage,\r\n getCurrentFork,\r\n formatMessagesForAPI,\r\n type Message\r\n} from './conversation-fork.js';\r\nimport { convertToolNames } from './tool-definitions.js';\r\nimport fs from 'fs/promises';\r\nimport path from 'path';\r\nimport os from 'os';\r\n\r\nconst execAsync = promisify(exec);\r\n\r\n// Bug #6 Fix: Read Redis connection parameters from process.env\r\n// ENV-001: Standardized environment variable naming (REDIS_PASSWORD for all deployments)\r\nconst redisHost = process.env.CFN_REDIS_HOST \|\| 'cfn-redis';\r\nconst redisPort = process.env.CFN_REDIS_PORT \|\| '6379';\r\nconst redisPassword = process.env.CFN_REDIS_PASSWORD \|\| process.env.REDIS_PASSWORD \|\| '';\r\n\r\nexport interface AgentExecutionResult {\r\n success: boolean;\r\n agentId: string;\r\n output?: string;\r\n error?: string;\r\n exitCode: number;\r\n}\r\n\r\n/\r\n Parse context string into environment variables\r\n \r\n Parses context string like \"TASK_ID='xyz' MODE='mvp' MAX_ITERATIONS=5\"\r\n * and sets the values as environment variables.\r\n \r\n Supports:\r\n * - Single quoted: KEY='value with spaces'\r\n * - Double quoted: KEY=\"value with spaces\"\r\n * - Unquoted: KEY=value (no spaces in value)\r\n \r\n @param contextString - Context string from --context parameter\r\n * @returns Object with parsed key-value pairs\r\n /\r\nfunction parseContextToEnv(contextString: string \| undefined): Record<string, string> {\r\n if (!contextString) return {};\r\n\r\n const envVars: Record<string, string> = {};\r\n\r\n // Match KEY='value' or KEY=\"value\" or KEY=value patterns\r\n // For quoted values: capture everything between quotes\r\n // For unquoted values: capture until next space or end of string\r\n const regex = /(\\w+)=(?:(['\"])([^\\2]?)\\2\|([^\\s]+))/g;\r\n let match;\r\n\r\n while ((match = regex.exec(contextString)) !== null) {\r\n const [, key, , quotedValue, unquotedValue] = match;\r\n const value = quotedValue !== undefined ? quotedValue : unquotedValue;\r\n envVars[key] = value;\r\n // Also set in process.env for current process\r\n process.env[key] = value;\r\n }\r\n\r\n return envVars;\r\n}\r\n\r\n/*\r\n Extract confidence score from agent output\r\n * Looks for patterns like:\r\n * - \"confidence: 0.85\"\r\n * - \"Confidence: 0.90\"\r\n * - \"confidence score: 0.95\"\r\n * - \"self-confidence: 0.88\"\r\n /\r\nfunction extractConfidence(output: string \| undefined): number {\r\n if (!output) return 0.85;\r\n\r\n // Try multiple patterns\r\n const patterns = [\r\n /confidence:\\s([0-9.]+)/i,\r\n /confidence\\s+score:\\s([0-9.]+)/i,\r\n /self-confidence:\\s([0-9.]+)/i,\r\n /my\\s+confidence:\\s([0-9.]+)/i,\r\n ];\r\n\r\n for (const pattern of patterns) {\r\n const match = output.match(pattern);\r\n if (match && match[1]) {\r\n const score = parseFloat(match[1]);\r\n if (score >= 0 && score <= 1) {\r\n return score;\r\n }\r\n }\r\n }\r\n\r\n // Default to 0.85 if not found\r\n return 0.85;\r\n}\r\n\r\n/\r\n Execute CFN Loop protocol after agent completes work\r\n \r\n Steps:\r\n * 1. Signal completion to orchestrator\r\n * 2. Report confidence score\r\n * 3. Enter waiting mode (if iterations enabled)\r\n /\r\nasync function executeCFNProtocol(\r\n taskId: string,\r\n agentId: string,\r\n output: string \| undefined,\r\n iteration: number,\r\n enableIterations: boolean = false,\r\n maxIterations: number = 10\r\n): Promise<void> {\r\n console.log(`\\n[CFN Protocol] Starting for agent ${agentId}`);\r\n console.log(`[CFN Protocol] Task ID: ${taskId}, Iteration: ${iteration}`);\r\n\r\n try {\r\n // Step 1: Signal completion\r\n console.log('[CFN Protocol] Step 1: Signaling completion...');\r\n const authFlag = redisPassword ? `-a \"${redisPassword}\"` : '';\r\n await execAsync(`redis-cli -h \"${redisHost}\" -p \"${redisPort}\" ${authFlag} lpush \"swarm:${taskId}:${agentId}:done\" \"complete\"`);\r\n console.log('[CFN Protocol] ✓ Completion signaled');\r\n\r\n // Step 2: Extract and report confidence\r\n const confidence = extractConfidence(output);\r\n console.log(`[CFN Protocol] Step 2: Reporting confidence (${confidence})...`);\r\n\r\n const reportCmd = `./.claude/skills/cfn-redis-coordination/report-completion.sh \\\r\n --task-id \"${taskId}\" \\\r\n --agent-id \"${agentId}\" \\\r\n --confidence ${confidence} \\\r\n --iteration ${iteration}`;\r\n\r\n await execAsync(reportCmd);\r\n console.log('[CFN Protocol] ✓ Confidence reported');\r\n\r\n // Step 3: Exit cleanly (BUG #18 FIX - removed waiting mode)\r\n // Orchestrator will spawn appropriate specialist agent for next iteration\r\n // This enables adaptive agent specialization based on feedback type\r\n console.log('[CFN Protocol] Step 3: Exiting cleanly (iteration complete)');\r\n console.log('[CFN Protocol] Protocol complete\\n');\r\n } catch (error) {\r\n console.error('[CFN Protocol] Error:', error);\r\n throw error;\r\n }\r\n}\r\n\r\n/\r\n Check if custom routing (z.ai) is enabled\r\n /\r\nasync function isCustomRoutingEnabled(): Promise<boolean> {\r\n // Check environment variable\r\n if (process.env.CLAUDE_API_PROVIDER === 'zai') {\r\n return true;\r\n }\r\n\r\n // Check config file (.claude/config/api-provider.json)\r\n try {\r\n const configPath = path.join('.claude', 'config', 'api-provider.json');\r\n const config = JSON.parse(await fs.readFile(configPath, 'utf-8'));\r\n return config.provider === 'zai' \|\| config.provider === 'z.ai';\r\n } catch {\r\n return false;\r\n }\r\n}\r\n\r\n/\r\n Get API provider configuration\r\n /\r\nasync function getAPIProvider(): Promise<'anthropic' \| 'zai'> {\r\n const customEnabled = await isCustomRoutingEnabled();\r\n return customEnabled ? 'zai' : 'anthropic';\r\n}\r\n\r\n/\r\n Execute agent using direct API calls\r\n /\r\nasync function executeViaAPI(\r\n definition: AgentDefinition,\r\n prompt: string,\r\n context: TaskContext\r\n): Promise<AgentExecutionResult> {\r\n const agentId = getAgentId(definition, context);\r\n\r\n console.log(`[agent-executor] Executing agent via API: ${definition.name}`);\r\n console.log(`[agent-executor] Agent ID: ${agentId}`);\r\n console.log(`[agent-executor] Model: ${definition.model}`);\r\n console.log('');\r\n\r\n // BUG #24 FIX: Parse and inject context environment variables\r\n // This enables CLI-spawned agents to access TASK_ID, MODE, etc. in Bash tool\r\n if (context.context) {\r\n console.log(`[agent-executor] Parsing context: ${context.context}`);\r\n const contextEnv = parseContextToEnv(context.context);\r\n console.log(`[agent-executor] Injected env vars: ${Object.keys(contextEnv).join(', ')}`);\r\n }\r\n\r\n try {\r\n // Check for conversation fork (Sprint 4 enhancement)\r\n const forkId = process.env.FORK_ID \|\| await getCurrentFork(context.taskId \|\| '', agentId);\r\n const iteration = context.iteration \|\| 1;\r\n\r\n let systemPrompt: string;\r\n let messages: Array<{role: string, content: string}> = [];\r\n\r\n if (forkId && iteration > 1) {\r\n // Continue from fork (iterations 2+)\r\n console.log(`[agent-executor] Continuing from fork: ${forkId}`);\r\n\r\n // Load fork messages\r\n const forkMessages = await loadMessages(context.taskId \|\| '', agentId, forkId);\r\n console.log(`[agent-executor] Loaded ${forkMessages.length} messages from fork`);\r\n\r\n // Extract system prompt from first message (it's always the system message)\r\n // The fork messages are assistant/user pairs, we need to add system separately\r\n systemPrompt = forkMessages[0]?.content \|\| '';\r\n\r\n // Format remaining messages for API\r\n messages = formatMessagesForAPI(forkMessages.slice(1));\r\n\r\n // Add new user message with feedback\r\n messages.push({\r\n role: 'user',\r\n content: prompt\r\n });\r\n\r\n console.log(`[agent-executor] Fork continuation: ${messages.length} messages`);\r\n } else {\r\n // New conversation (iteration 1)\r\n console.log('[agent-executor] Starting new conversation');\r\n console.log('[agent-executor] Building system prompt with context...');\r\n\r\n const contextOptions = loadContextFromEnv();\r\n contextOptions.agentType = definition.name;\r\n if (context.taskId) contextOptions.taskId = context.taskId;\r\n if (context.iteration) contextOptions.iteration = context.iteration;\r\n\r\n systemPrompt = await buildCLIAgentSystemPrompt(contextOptions);\r\n console.log('[agent-executor] System prompt built successfully');\r\n\r\n // Initial user message\r\n messages = [{\r\n role: 'user',\r\n content: prompt\r\n }];\r\n }\r\n\r\n console.log('');\r\n\r\n // Dynamic import to avoid bundling issues\r\n const { executeAgentAPI } = await import('./anthropic-client.js');\r\n\r\n // Convert agent tool names to Anthropic API format\r\n const tools = definition.tools && definition.tools.length > 0\r\n ? convertToolNames(definition.tools)\r\n : undefined;\r\n\r\n const result = await executeAgentAPI(\r\n definition.name,\r\n agentId,\r\n definition.model,\r\n prompt,\r\n systemPrompt,\r\n messages.length > 1 ? messages : undefined,\r\n undefined, // maxTokens (use default)\r\n tools // Pass converted tools\r\n );\r\n\r\n // Store messages in conversation history (for future forking)\r\n if (context.taskId) {\r\n // Store user message\r\n const userMessage: Message = {\r\n role: 'user',\r\n content: prompt,\r\n iteration,\r\n timestamp: new Date().toISOString()\r\n };\r\n await storeMessage(context.taskId, agentId, userMessage);\r\n\r\n // Store assistant response\r\n if (result.output) {\r\n const assistantMessage: Message = {\r\n role: 'assistant',\r\n content: result.output,\r\n iteration,\r\n timestamp: new Date().toISOString()\r\n };\r\n await storeMessage(context.taskId, agentId, assistantMessage);\r\n }\r\n\r\n console.log(`[agent-executor] Stored messages for iteration ${iteration}`);\r\n\r\n // Execute CFN Loop protocol (signal completion, report confidence, enter waiting mode)\r\n // Iterations are enabled for CFN Loop tasks (indicated by presence of taskId)\r\n try {\r\n const maxIterations = 10; // Default max iterations\r\n const enableIterations = true; // Enable iterations for all CFN Loop tasks\r\n\r\n await executeCFNProtocol(\r\n context.taskId,\r\n agentId,\r\n result.output,\r\n iteration,\r\n enableIterations,\r\n maxIterations\r\n );\r\n } catch (error) {\r\n console.error('[agent-executor] CFN Protocol execution failed:', error);\r\n // Don't fail the entire agent execution if CFN protocol fails\r\n // This allows agents to complete even if Redis coordination has issues\r\n }\r\n }\r\n\r\n return {\r\n success: result.success,\r\n agentId,\r\n output: result.output,\r\n error: result.error,\r\n exitCode: result.success ? 0 : 1,\r\n };\r\n } catch (error) {\r\n console.error('[agent-executor] API execution failed:', error);\r\n return {\r\n success: false,\r\n agentId,\r\n error: error instanceof Error ? error.message : String(error),\r\n exitCode: 1,\r\n };\r\n }\r\n}\r\n\r\n/\r\n Execute agent using shell script (fallback/simulation)\r\n /\r\nasync function executeViaScript(\r\n definition: AgentDefinition,\r\n prompt: string,\r\n context: TaskContext\r\n): Promise<AgentExecutionResult> {\r\n const agentId = getAgentId(definition, context);\r\n\r\n // BUG #24 FIX: Parse and inject context environment variables\r\n if (context.context) {\r\n console.log(`[agent-executor] Parsing context: ${context.context}`);\r\n const contextEnv = parseContextToEnv(context.context);\r\n console.log(`[agent-executor] Injected env vars: ${Object.keys(contextEnv).join(', ')}`);\r\n }\r\n\r\n // Write prompt to temporary file\r\n const tmpDir = os.tmpdir();\r\n const promptFile = path.join(tmpDir, `agent-${agentId}-${Date.now()}.md`);\r\n await fs.writeFile(promptFile, prompt, 'utf-8');\r\n\r\n console.log(`[agent-executor] Executing agent via script: ${definition.name}`);\r\n console.log(`[agent-executor] Agent ID: ${agentId}`);\r\n console.log(`[agent-executor] Model: ${definition.model}`);\r\n console.log(`[agent-executor] Prompt file: ${promptFile}`);\r\n\r\n return new Promise((resolve) => {\r\n const scriptPath = path.join('.claude', 'skills', 'agent-execution', 'execute-agent.sh');\r\n\r\n // Build environment variables - WHITELIST ONLY APPROACH\r\n // SECURITY FIX: Do not use ...process.env spread which exposes ALL variables including secrets\r\n // Instead, explicitly whitelist safe variables to pass to spawned process\r\n const safeEnvVars = [\r\n 'CFN_REDIS_HOST',\r\n 'CFN_REDIS_PORT',\r\n 'CFN_REDIS_PASSWORD', // CRITICAL: Required for Redis authentication\r\n 'CFN_REDIS_URL',\r\n 'REDIS_PASSWORD', // Fallback for Redis password\r\n 'CFN_MEMORY_BUDGET',\r\n 'CFN_API_HOST',\r\n 'CFN_API_PORT',\r\n 'CFN_LOG_LEVEL',\r\n 'CFN_LOG_FORMAT',\r\n 'CFN_CONTAINER_MODE',\r\n 'CFN_DOCKER_SOCKET',\r\n 'CFN_NETWORK_NAME',\r\n 'CFN_CUSTOM_ROUTING',\r\n 'CFN_DEFAULT_PROVIDER',\r\n 'NODE_ENV',\r\n 'PATH',\r\n 'HOME',\r\n 'PWD' // Required for working directory context\r\n ];\r\n\r\n const env: Record<string, string> = {};\r\n\r\n // Add whitelisted variables\r\n for (const key of safeEnvVars) {\r\n const value = process.env[key];\r\n if (value !== undefined) {\r\n env[key] = value;\r\n }\r\n }\r\n\r\n // Add API key only when explicitly needed (with strict validation)\r\n if (process.env.ANTHROPIC_API_KEY) {\r\n if (process.env.ANTHROPIC_API_KEY.match(/^sk-[a-zA-Z0-9-]+$/)) {\r\n env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n }\r\n }\r\n\r\n // Add agent execution context (safe values)\r\n env.AGENT_TYPE = definition.name;\r\n env.AGENT_ID = agentId;\r\n env.AGENT_MODEL = definition.model;\r\n env.AGENT_TOOLS = definition.tools.join(',');\r\n env.TASK_ID = context.taskId \|\| '';\r\n env.ITERATION = String(context.iteration \|\| 1);\r\n env.MODE = context.mode \|\| 'cli';\r\n env.PROMPT_FILE = promptFile;\r\n\r\n // Check if execute script exists\r\n fs.access(scriptPath)\r\n .then(() => {\r\n // Use execution script\r\n const proc = spawn('bash', [scriptPath], { env, stdio: 'inherit' });\r\n\r\n proc.on('exit', (code) => {\r\n resolve({\r\n success: code === 0,\r\n agentId,\r\n exitCode: code \|\| 0,\r\n });\r\n });\r\n\r\n proc.on('error', (err) => {\r\n resolve({\r\n success: false,\r\n agentId,\r\n error: err.message,\r\n exitCode: 1,\r\n });\r\n });\r\n })\r\n .catch(() => {\r\n // Fallback: Print prompt\r\n console.log('\\n=== Agent Prompt ===');\r\n console.log(prompt.substring(0, 500) + '...');\r\n console.log('\\n[agent-executor] Execution script not found');\r\n console.log('[agent-executor] Using simulation mode\\n');\r\n\r\n resolve({\r\n success: true,\r\n agentId,\r\n output: prompt,\r\n exitCode: 0,\r\n });\r\n });\r\n });\r\n}\r\n\r\n/\r\n Main agent execution function\r\n /\r\nexport async function executeAgent(\r\n definition: AgentDefinition,\r\n prompt: string,\r\n context: TaskContext,\r\n options: {\r\n method?: 'auto' \| 'api' \| 'script';\r\n } = {}\r\n): Promise<AgentExecutionResult> {\r\n const method = options.method \|\| 'auto';\r\n\r\n // Auto-select execution method\r\n if (method === 'auto') {\r\n // Try API execution first, fallback to script if API key not available\r\n try {\r\n return await executeViaAPI(definition, prompt, context);\r\n } catch (error) {\r\n if (error instanceof Error && error.message.includes('API key not found')) {\r\n console.log('[agent-executor] API key not found, using script fallback');\r\n return executeViaScript(definition, prompt, context);\r\n }\r\n throw error;\r\n }\r\n }\r\n\r\n if (method === 'api') {\r\n return executeViaAPI(definition, prompt, context);\r\n }\r\n\r\n return executeViaScript(definition, prompt, context);\r\n}\r\n\r\n/\r\n Write agent output to file for debugging\r\n */\r\nexport async function saveAgentOutput(\r\n agentId: string,\r\n output: string,\r\n outputDir: string = '.claude/tmp/agent-output'\r\n): Promise<string> {\r\n await fs.mkdir(outputDir, { recursive: true });\r\n\r\n const timestamp = new Date().toISOString().replace(/[:.]/g, '-');\r\n const filename = `${agentId}-${timestamp}.txt`;\r\n const filepath = path.join(outputDir, filename);\r\n\r\n await fs.writeFile(filepath, output, 'utf-8');\r\n\r\n return filepath;\r\n}\r\n"],"names":["spawn","exec","promisify","getAgentId","buildCLIAgentSystemPrompt","loadContextFromEnv","loadMessages","storeMessage","getCurrentFork","formatMessagesForAPI","convertToolNames","fs","path","os","execAsync","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","redisPassword","CFN_REDIS_PASSWORD","REDIS_PASSWORD","parseContextToEnv","contextString","envVars","regex","match","key","quotedValue","unquotedValue","value","undefined","extractConfidence","output","patterns","pattern","score","parseFloat","executeCFNProtocol","taskId","agentId","iteration","enableIterations","maxIterations","console","log","authFlag","confidence","reportCmd","error","isCustomRoutingEnabled","CLAUDE_API_PROVIDER","configPath","join","config","JSON","parse","readFile","provider","getAPIProvider","customEnabled","executeViaAPI","definition","prompt","context","name","model","contextEnv","Object","keys","forkId","FORK_ID","systemPrompt","messages","forkMessages","length","content","slice","push","role","contextOptions","agentType","executeAgentAPI","tools","result","userMessage","timestamp","Date","toISOString","assistantMessage","success","exitCode","Error","message","String","executeViaScript","tmpDir","tmpdir","promptFile","now","writeFile","Promise","resolve","scriptPath","safeEnvVars","ANTHROPIC_API_KEY","AGENT_TYPE","AGENT_ID","AGENT_MODEL","AGENT_TOOLS","TASK_ID","ITERATION","MODE","mode","PROMPT_FILE","access","then","proc","stdio","on","code","err","catch","substring","executeAgent","options","method","includes","saveAgentOutput","outputDir","mkdir","recursive","replace","filename","filepath"],"mappings":"AAAA;;;;;;;CAOC,GAED,SAASA,KAAK,QAAQ,gBAAgB;AACtC,SAASC,IAAI,QAAQ,gBAAgB;AACrC,SAASC,SAAS,QAAQ,OAAO;AAEjC,SAAsBC,UAAU,QAAQ,4BAA4B;AACpE,SAASC,yBAAyB,EAAEC,kBAAkB,QAAQ,yBAAyB;AACvF,SACEC,YAAY,EACZC,YAAY,EACZC,cAAc,EACdC,oBAAoB,QAEf,yBAAyB;AAChC,SAASC,gBAAgB,QAAQ,wBAAwB;AACzD,OAAOC,QAAQ,cAAc;AAC7B,OAAOC,UAAU,OAAO;AACxB,OAAOC,QAAQ,KAAK;AAEpB,MAAMC,YAAYZ,UAAUD;AAE5B,gEAAgE;AAChE,yFAAyF;AACzF,MAAMc,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;AAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;AAChD,MAAMC,gBAAgBL,QAAQC,GAAG,CAACK,kBAAkB,IAAIN,QAAQC,GAAG,CAACM,cAAc,IAAI;AAUtF;;;;;;;;;;;;;CAaC,GACD,SAASC,kBAAkBC,aAAiC;IAC1D,IAAI,CAACA,eAAe,OAAO,CAAC;IAE5B,MAAMC,UAAkC,CAAC;IAEzC,yDAAyD;IACzD,uDAAuD;IACvD,iEAAiE;IACjE,MAAMC,QAAQ;IACd,IAAIC;IAEJ,MAAO,AAACA,CAAAA,QAAQD,MAAM1B,IAAI,CAACwB,cAAa,MAAO,KAAM;QACnD,MAAM,GAAGI,OAAOC,aAAaC,cAAc,GAAGH;QAC9C,MAAMI,QAAQF,gBAAgBG,YAAYH,cAAcC;QACxDL,OAAO,CAACG,IAAI,GAAGG;QACf,8CAA8C;QAC9ChB,QAAQC,GAAG,CAACY,IAAI,GAAGG;IACrB;IAEA,OAAON;AACT;AAEA;;;;;;;CAOC,GACD,SAASQ,kBAAkBC,MAA0B;IACnD,IAAI,CAACA,QAAQ,OAAO;IAEpB,wBAAwB;IACxB,MAAMC,WAAW;QACf;QACA;QACA;QACA;KACD;IAED,KAAK,MAAMC,WAAWD,SAAU;QAC9B,MAAMR,QAAQO,OAAOP,KAAK,CAACS;QAC3B,IAAIT,SAASA,KAAK,CAAC,EAAE,EAAE;YACrB,MAAMU,QAAQC,WAAWX,KAAK,CAAC,EAAE;YACjC,IAAIU,SAAS,KAAKA,SAAS,GAAG;gBAC5B,OAAOA;YACT;QACF;IACF;IAEA,+BAA+B;IAC/B,OAAO;AACT;AAEA;;;;;;;CAOC,GACD,eAAeE,mBACbC,MAAc,EACdC,OAAe,EACfP,MAA0B,EAC1BQ,SAAiB,EACjBC,mBAA4B,KAAK,EACjCC,gBAAwB,EAAE;IAE1BC,QAAQC,GAAG,CAAC,CAAC,oCAAoC,EAAEL,SAAS;IAC5DI,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEN,OAAO,aAAa,EAAEE,WAAW;IAExE,IAAI;QACF,4BAA4B;QAC5BG,QAAQC,GAAG,CAAC;QACZ,MAAMC,WAAW3B,gBAAgB,CAAC,IAAI,EAAEA,cAAc,CAAC,CAAC,GAAG;QAC3D,MAAMP,UAAU,CAAC,cAAc,EAAEC,UAAU,MAAM,EAAEI,UAAU,EAAE,EAAE6B,SAAS,cAAc,EAAEP,OAAO,CAAC,EAAEC,QAAQ,iBAAiB,CAAC;QAC9HI,QAAQC,GAAG,CAAC;QAEZ,wCAAwC;QACxC,MAAME,aAAaf,kBAAkBC;QACrCW,QAAQC,GAAG,CAAC,CAAC,6CAA6C,EAAEE,WAAW,IAAI,CAAC;QAE5E,MAAMC,YAAY,CAAC;iBACN,EAAET,OAAO;kBACR,EAAEC,QAAQ;mBACT,EAAEO,WAAW;kBACd,EAAEN,WAAW;QAE3B,MAAM7B,UAAUoC;QAChBJ,QAAQC,GAAG,CAAC;QAEZ,4DAA4D;QAC5D,0EAA0E;QAC1E,oEAAoE;QACpED,QAAQC,GAAG,CAAC;QACZD,QAAQC,GAAG,CAAC;IACd,EAAE,OAAOI,OAAO;QACdL,QAAQK,KAAK,CAAC,yBAAyBA;QACvC,MAAMA;IACR;AACF;AAEA;;CAEC,GACD,eAAeC;IACb,6BAA6B;IAC7B,IAAIpC,QAAQC,GAAG,CAACoC,mBAAmB,KAAK,OAAO;QAC7C,OAAO;IACT;IAEA,uDAAuD;IACvD,IAAI;QACF,MAAMC,aAAa1C,KAAK2C,IAAI,CAAC,WAAW,UAAU;QAClD,MAAMC,SAASC,KAAKC,KAAK,CAAC,MAAM/C,GAAGgD,QAAQ,CAACL,YAAY;QACxD,OAAOE,OAAOI,QAAQ,KAAK,SAASJ,OAAOI,QAAQ,KAAK;IAC1D,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA;;CAEC,GACD,eAAeC;IACb,MAAMC,gBAAgB,MAAMV;IAC5B,OAAOU,gBAAgB,QAAQ;AACjC;AAEA;;CAEC,GACD,eAAeC,cACbC,UAA2B,EAC3BC,MAAc,EACdC,OAAoB;IAEpB,MAAMxB,UAAUvC,WAAW6D,YAAYE;IAEvCpB,QAAQC,GAAG,CAAC,CAAC,0CAA0C,EAAEiB,WAAWG,IAAI,EAAE;IAC1ErB,QAAQC,GAAG,CAAC,CAAC,2BAA2B,EAAEL,SAAS;IACnDI,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEiB,WAAWI,KAAK,EAAE;IACzDtB,QAAQC,GAAG,CAAC;IAEZ,8DAA8D;IAC9D,6EAA6E;IAC7E,IAAImB,QAAQA,OAAO,EAAE;QACnBpB,QAAQC,GAAG,CAAC,CAAC,kCAAkC,EAAEmB,QAAQA,OAAO,EAAE;QAClE,MAAMG,aAAa7C,kBAAkB0C,QAAQA,OAAO;QACpDpB,QAAQC,GAAG,CAAC,CAAC,oCAAoC,EAAEuB,OAAOC,IAAI,CAACF,YAAYd,IAAI,CAAC,OAAO;IACzF;IAEA,IAAI;QACF,qDAAqD;QACrD,MAAMiB,SAASxD,QAAQC,GAAG,CAACwD,OAAO,IAAI,MAAMjE,eAAe0D,QAAQzB,MAAM,IAAI,IAAIC;QACjF,MAAMC,YAAYuB,QAAQvB,SAAS,IAAI;QAEvC,IAAI+B;QACJ,IAAIC,WAAmD,EAAE;QAEzD,IAAIH,UAAU7B,YAAY,GAAG;YAC3B,qCAAqC;YACrCG,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEyB,QAAQ;YAE9D,qBAAqB;YACrB,MAAMI,eAAe,MAAMtE,aAAa4D,QAAQzB,MAAM,IAAI,IAAIC,SAAS8B;YACvE1B,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAE6B,aAAaC,MAAM,CAAC,mBAAmB,CAAC;YAE/E,4EAA4E;YAC5E,+EAA+E;YAC/EH,eAAeE,YAAY,CAAC,EAAE,EAAEE,WAAW;YAE3C,oCAAoC;YACpCH,WAAWlE,qBAAqBmE,aAAaG,KAAK,CAAC;YAEnD,qCAAqC;YACrCJ,SAASK,IAAI,CAAC;gBACZC,MAAM;gBACNH,SAASb;YACX;YAEAnB,QAAQC,GAAG,CAAC,CAAC,oCAAoC,EAAE4B,SAASE,MAAM,CAAC,SAAS,CAAC;QAC/E,OAAO;YACL,iCAAiC;YACjC/B,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,MAAMmC,iBAAiB7E;YACvB6E,eAAeC,SAAS,GAAGnB,WAAWG,IAAI;YAC1C,IAAID,QAAQzB,MAAM,EAAEyC,eAAezC,MAAM,GAAGyB,QAAQzB,MAAM;YAC1D,IAAIyB,QAAQvB,SAAS,EAAEuC,eAAevC,SAAS,GAAGuB,QAAQvB,SAAS;YAEnE+B,eAAe,MAAMtE,0BAA0B8E;YAC/CpC,QAAQC,GAAG,CAAC;YAEZ,uBAAuB;YACvB4B,WAAW;gBAAC;oBACVM,MAAM;oBACNH,SAASb;gBACX;aAAE;QACJ;QAEAnB,QAAQC,GAAG,CAAC;QAEZ,0CAA0C;QAC1C,MAAM,EAAEqC,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC;QAEzC,mDAAmD;QACnD,MAAMC,QAAQrB,WAAWqB,KAAK,IAAIrB,WAAWqB,KAAK,CAACR,MAAM,GAAG,IACxDnE,iBAAiBsD,WAAWqB,KAAK,IACjCpD;QAEJ,MAAMqD,SAAS,MAAMF,gBACnBpB,WAAWG,IAAI,EACfzB,SACAsB,WAAWI,KAAK,EAChBH,QACAS,cACAC,SAASE,MAAM,GAAG,IAAIF,WAAW1C,WACjCA,WACAoD,MAAO,uBAAuB;;QAGhC,8DAA8D;QAC9D,IAAInB,QAAQzB,MAAM,EAAE;YAClB,qBAAqB;YACrB,MAAM8C,cAAuB;gBAC3BN,MAAM;gBACNH,SAASb;gBACTtB;gBACA6C,WAAW,IAAIC,OAAOC,WAAW;YACnC;YACA,MAAMnF,aAAa2D,QAAQzB,MAAM,EAAEC,SAAS6C;YAE5C,2BAA2B;YAC3B,IAAID,OAAOnD,MAAM,EAAE;gBACjB,MAAMwD,mBAA4B;oBAChCV,MAAM;oBACNH,SAASQ,OAAOnD,MAAM;oBACtBQ;oBACA6C,WAAW,IAAIC,OAAOC,WAAW;gBACnC;gBACA,MAAMnF,aAAa2D,QAAQzB,MAAM,EAAEC,SAASiD;YAC9C;YAEA7C,QAAQC,GAAG,CAAC,CAAC,+CAA+C,EAAEJ,WAAW;YAEzE,uFAAuF;YACvF,8EAA8E;YAC9E,IAAI;gBACF,MAAME,gBAAgB,IAAI,yBAAyB;gBACnD,MAAMD,mBAAmB,MAAM,2CAA2C;gBAE1E,MAAMJ,mBACJ0B,QAAQzB,MAAM,EACdC,SACA4C,OAAOnD,MAAM,EACbQ,WACAC,kBACAC;YAEJ,EAAE,OAAOM,OAAO;gBACdL,QAAQK,KAAK,CAAC,mDAAmDA;YACjE,8DAA8D;YAC9D,uEAAuE;YACzE;QACF;QAEA,OAAO;YACLyC,SAASN,OAAOM,OAAO;YACvBlD;YACAP,QAAQmD,OAAOnD,MAAM;YACrBgB,OAAOmC,OAAOnC,KAAK;YACnB0C,UAAUP,OAAOM,OAAO,GAAG,IAAI;QACjC;IACF,EAAE,OAAOzC,OAAO;QACdL,QAAQK,KAAK,CAAC,0CAA0CA;QACxD,OAAO;YACLyC,SAAS;YACTlD;YACAS,OAAOA,iBAAiB2C,QAAQ3C,MAAM4C,OAAO,GAAGC,OAAO7C;YACvD0C,UAAU;QACZ;IACF;AACF;AAEA;;CAEC,GACD,eAAeI,iBACbjC,UAA2B,EAC3BC,MAAc,EACdC,OAAoB;IAEpB,MAAMxB,UAAUvC,WAAW6D,YAAYE;IAEvC,8DAA8D;IAC9D,IAAIA,QAAQA,OAAO,EAAE;QACnBpB,QAAQC,GAAG,CAAC,CAAC,kCAAkC,EAAEmB,QAAQA,OAAO,EAAE;QAClE,MAAMG,aAAa7C,kBAAkB0C,QAAQA,OAAO;QACpDpB,QAAQC,GAAG,CAAC,CAAC,oCAAoC,EAAEuB,OAAOC,IAAI,CAACF,YAAYd,IAAI,CAAC,OAAO;IACzF;IAEA,iCAAiC;IACjC,MAAM2C,SAASrF,GAAGsF,MAAM;IACxB,MAAMC,aAAaxF,KAAK2C,IAAI,CAAC2C,QAAQ,CAAC,MAAM,EAAExD,QAAQ,CAAC,EAAE+C,KAAKY,GAAG,GAAG,GAAG,CAAC;IACxE,MAAM1F,GAAG2F,SAAS,CAACF,YAAYnC,QAAQ;IAEvCnB,QAAQC,GAAG,CAAC,CAAC,6CAA6C,EAAEiB,WAAWG,IAAI,EAAE;IAC7ErB,QAAQC,GAAG,CAAC,CAAC,2BAA2B,EAAEL,SAAS;IACnDI,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEiB,WAAWI,KAAK,EAAE;IACzDtB,QAAQC,GAAG,CAAC,CAAC,8BAA8B,EAAEqD,YAAY;IAEzD,OAAO,IAAIG,QAAQ,CAACC;QAClB,MAAMC,aAAa7F,KAAK2C,IAAI,CAAC,WAAW,UAAU,mBAAmB;QAErE,wDAAwD;QACxD,+FAA+F;QAC/F,0EAA0E;QAC1E,MAAMmD,cAAc;YAClB;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA,MAAuB,yCAAyC;SACjE;QAED,MAAMzF,MAA8B,CAAC;QAErC,4BAA4B;QAC5B,KAAK,MAAMY,OAAO6E,YAAa;YAC7B,MAAM1E,QAAQhB,QAAQC,GAAG,CAACY,IAAI;YAC9B,IAAIG,UAAUC,WAAW;gBACvBhB,GAAG,CAACY,IAAI,GAAGG;YACb;QACF;QAEA,mEAAmE;QACnE,IAAIhB,QAAQC,GAAG,CAAC0F,iBAAiB,EAAE;YACjC,IAAI3F,QAAQC,GAAG,CAAC0F,iBAAiB,CAAC/E,KAAK,CAAC,uBAAuB;gBAC7DX,IAAI0F,iBAAiB,GAAG3F,QAAQC,GAAG,CAAC0F,iBAAiB;YACvD;QACF;QAEA,4CAA4C;QAC5C1F,IAAI2F,UAAU,GAAG5C,WAAWG,IAAI;QAChClD,IAAI4F,QAAQ,GAAGnE;QACfzB,IAAI6F,WAAW,GAAG9C,WAAWI,KAAK;QAClCnD,IAAI8F,WAAW,GAAG/C,WAAWqB,KAAK,CAAC9B,IAAI,CAAC;QACxCtC,IAAI+F,OAAO,GAAG9C,QAAQzB,MAAM,IAAI;QAChCxB,IAAIgG,SAAS,GAAGjB,OAAO9B,QAAQvB,SAAS,IAAI;QAC5C1B,IAAIiG,IAAI,GAAGhD,QAAQiD,IAAI,IAAI;QAC3BlG,IAAImG,WAAW,GAAGhB;QAElB,iCAAiC;QACjCzF,GAAG0G,MAAM,CAACZ,YACPa,IAAI,CAAC;YACJ,uBAAuB;YACvB,MAAMC,OAAOvH,MAAM,QAAQ;gBAACyG;aAAW,EAAE;gBAAExF;gBAAKuG,OAAO;YAAU;YAEjED,KAAKE,EAAE,CAAC,QAAQ,CAACC;gBACflB,QAAQ;oBACNZ,SAAS8B,SAAS;oBAClBhF;oBACAmD,UAAU6B,QAAQ;gBACpB;YACF;YAEAH,KAAKE,EAAE,CAAC,SAAS,CAACE;gBAChBnB,QAAQ;oBACNZ,SAAS;oBACTlD;oBACAS,OAAOwE,IAAI5B,OAAO;oBAClBF,UAAU;gBACZ;YACF;QACF,GACC+B,KAAK,CAAC;YACL,yBAAyB;YACzB9E,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAACkB,OAAO4D,SAAS,CAAC,GAAG,OAAO;YACvC/E,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZyD,QAAQ;gBACNZ,SAAS;gBACTlD;gBACAP,QAAQ8B;gBACR4B,UAAU;YACZ;QACF;IACJ;AACF;AAEA;;CAEC,GACD,OAAO,eAAeiC,aACpB9D,UAA2B,EAC3BC,MAAc,EACdC,OAAoB,EACpB6D,UAEI,CAAC,CAAC;IAEN,MAAMC,SAASD,QAAQC,MAAM,IAAI;IAEjC,+BAA+B;IAC/B,IAAIA,WAAW,QAAQ;QACrB,uEAAuE;QACvE,IAAI;YACF,OAAO,MAAMjE,cAAcC,YAAYC,QAAQC;QACjD,EAAE,OAAOf,OAAO;YACd,IAAIA,iBAAiB2C,SAAS3C,MAAM4C,OAAO,CAACkC,QAAQ,CAAC,sBAAsB;gBACzEnF,QAAQC,GAAG,CAAC;gBACZ,OAAOkD,iBAAiBjC,YAAYC,QAAQC;YAC9C;YACA,MAAMf;QACR;IACF;IAEA,IAAI6E,WAAW,OAAO;QACpB,OAAOjE,cAAcC,YAAYC,QAAQC;IAC3C;IAEA,OAAO+B,iBAAiBjC,YAAYC,QAAQC;AAC9C;AAEA;;CAEC,GACD,OAAO,eAAegE,gBACpBxF,OAAe,EACfP,MAAc,EACdgG,YAAoB,0BAA0B;IAE9C,MAAMxH,GAAGyH,KAAK,CAACD,WAAW;QAAEE,WAAW;IAAK;IAE5C,MAAM7C,YAAY,IAAIC,OAAOC,WAAW,GAAG4C,OAAO,CAAC,SAAS;IAC5D,MAAMC,WAAW,GAAG7F,QAAQ,CAAC,EAAE8C,UAAU,IAAI,CAAC;IAC9C,MAAMgD,WAAW5H,KAAK2C,IAAI,CAAC4E,WAAWI;IAEtC,MAAM5H,GAAG2F,SAAS,CAACkC,UAAUrG,QAAQ;IAErC,OAAOqG;AACT"}

package/dist/cli/agent-spawn.js CHANGED Viewed

@@ -248,7 +248,9 @@
     const safeEnvVars = [
         'CFN_REDIS_HOST',
         'CFN_REDIS_PORT',
+        'CFN_REDIS_PASSWORD',
         'CFN_REDIS_URL',
+        'REDIS_PASSWORD',
         'CFN_MEMORY_BUDGET',
         'CFN_API_HOST',
         'CFN_API_PORT',
@@ -261,7 +263,8 @@
         'CFN_DEFAULT_PROVIDER',
         'NODE_ENV',
         'PATH',
-        'HOME'
+        'HOME',
+        'PWD' // Required for working directory context
     ];
     // Build whitelist-only env object
     const env = {};

package/dist/cli/agent-spawn.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/cli/agent-spawn.ts"],"sourcesContent":["#!/usr/bin/env node\r\n/*\r\n Agent Spawning CLI - Direct agent process spawning\r\n \r\n Usage:\r\n * npx cfn-spawn agent <type> [options]\r\n * npx cfn-spawn <type> [options] (agent is implied)\r\n \r\n Examples:\r\n * npx cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n * npx cfn-spawn researcher --task-id task-123 --iteration 1\r\n /\r\n\r\nimport { spawn, execFileSync } from 'child_process';\r\nimport { resolve } from 'path';\r\n\r\ninterface AgentSpawnOptions {\r\n agentType: string;\r\n agentId?: string;\r\n taskId?: string;\r\n iteration?: number;\r\n context?: string;\r\n mode?: string;\r\n priority?: number;\r\n parentTaskId?: string;\r\n}\r\n\r\n/\r\n SECURITY: Parameter validation to prevent command injection (CVSS 8.9)\r\n * Validates all parameters that will be passed to execFileSync()\r\n /\r\n\r\n/\r\n Validates taskId format to prevent command injection attacks\r\n * Pattern: alphanumeric, underscore, hyphen only, 1-64 chars\r\n /\r\nfunction validateTaskId(taskId: string): { valid: boolean; error?: string } {\r\n if (typeof taskId !== 'string' \|\| taskId.length === 0) {\r\n return { valid: false, error: 'Task ID must be a non-empty string' };\r\n }\r\n\r\n const taskIdPattern = /^[a-zA-Z0-9_-]{1,64}$/;\r\n if (!taskIdPattern.test(taskId)) {\r\n return {\r\n valid: false,\r\n error: 'Invalid task ID format - must contain only alphanumeric characters, underscores, and hyphens (max 64 chars)'\r\n };\r\n }\r\n return { valid: true };\r\n}\r\n\r\n/\r\n Validates Redis host to prevent command injection\r\n * Allows: hostnames, domain names, localhost, IPv4, IPv6 (::1)\r\n /\r\nfunction validateRedisHost(host: string): { valid: boolean; error?: string } {\r\n if (typeof host !== 'string' \|\| host.length === 0) {\r\n return { valid: false, error: 'Redis host must be a non-empty string' };\r\n }\r\n\r\n // Pattern: alphanumeric, hyphens, dots (for domains), plus special IPv6 loopback\r\n const hostPattern = /^[a-zA-Z0-9.-]+$\|^::1$/;\r\n if (!hostPattern.test(host)) {\r\n return { valid: false, error: 'Invalid Redis host format' };\r\n }\r\n return { valid: true };\r\n}\r\n\r\n/\r\n Validates Redis port to prevent command injection\r\n * Range: 1-65535\r\n /\r\nfunction validateRedisPort(port: string): { valid: boolean; error?: string } {\r\n if (typeof port !== 'string' \|\| port.length === 0) {\r\n return { valid: false, error: 'Redis port must be a non-empty string' };\r\n }\r\n\r\n const portNum = parseInt(port, 10);\r\n if (isNaN(portNum) \|\| portNum < 1 \|\| portNum > 65535) {\r\n return { valid: false, error: 'Invalid Redis port - must be between 1 and 65535' };\r\n }\r\n return { valid: true };\r\n}\r\n\r\n/\r\n Safely retrieves context from Redis using execFileSync()\r\n * Prevents command injection by using array-based arguments instead of template literals\r\n /\r\nfunction getRedisContextSafely(\r\n taskId: string,\r\n redisHost: string,\r\n redisPort: string,\r\n contextKey: string\r\n): string {\r\n try {\r\n // Validate all parameters BEFORE executing\r\n const taskIdValidation = validateTaskId(taskId);\r\n if (!taskIdValidation.valid) {\r\n console.warn(`[cfn-spawn] Invalid task ID: ${taskIdValidation.error}`);\r\n return '';\r\n }\r\n\r\n const hostValidation = validateRedisHost(redisHost);\r\n if (!hostValidation.valid) {\r\n console.warn(`[cfn-spawn] Invalid Redis host: ${hostValidation.error}`);\r\n return '';\r\n }\r\n\r\n const portValidation = validateRedisPort(redisPort);\r\n if (!portValidation.valid) {\r\n console.warn(`[cfn-spawn] Invalid Redis port: ${portValidation.error}`);\r\n return '';\r\n }\r\n\r\n // All parameters validated - now execute safely with execFileSync()\r\n // Using array arguments prevents shell interpolation of metacharacters\r\n const redisKey = `swarm:${taskId}:${contextKey}`;\r\n const result = execFileSync('redis-cli', [\r\n '-h', redisHost,\r\n '-p', redisPort,\r\n 'get',\r\n redisKey\r\n ], { encoding: 'utf8' });\r\n\r\n const trimmed = result.trim();\r\n return trimmed === '(nil)' ? '' : trimmed;\r\n } catch (e) {\r\n // Redis not available or key doesn't exist - fail silently\r\n return '';\r\n }\r\n}\r\n\r\n/\r\n Parse command line arguments for agent spawning\r\n /\r\nexport function parseAgentArgs(args: string[]): AgentSpawnOptions \| null {\r\n // Handle both \"agent <type>\" and \"<type>\" patterns\r\n let agentType: string;\r\n let optionArgs: string[];\r\n\r\n if (args[0] === 'agent') {\r\n agentType = args[1];\r\n optionArgs = args.slice(2);\r\n } else {\r\n agentType = args[0];\r\n optionArgs = args.slice(1);\r\n }\r\n\r\n // Validate agent type exists and is not a flag\r\n if (!agentType \|\| agentType.startsWith('--')) {\r\n console.error('Error: Agent type is required');\r\n console.error('Usage: cfn-spawn agent <type> [options]');\r\n return null;\r\n }\r\n\r\n const options: AgentSpawnOptions = { agentType };\r\n\r\n // Parse optional parameters\r\n for (let i = 0; i < optionArgs.length; i += 2) {\r\n const key = optionArgs[i];\r\n const value = optionArgs[i + 1];\r\n\r\n switch (key) {\r\n case '--agent-id':\r\n options.agentId = value;\r\n break;\r\n case '--task-id':\r\n options.taskId = value;\r\n break;\r\n case '--iteration':\r\n options.iteration = parseInt(value, 10);\r\n break;\r\n case '--context':\r\n options.context = value;\r\n break;\r\n case '--mode':\r\n options.mode = value;\r\n break;\r\n case '--priority':\r\n options.priority = parseInt(value, 10);\r\n break;\r\n case '--parent-task':\r\n case '--parent-task-id':\r\n options.parentTaskId = value;\r\n break;\r\n default:\r\n console.warn(`Unknown option: ${key}`);\r\n }\r\n }\r\n\r\n return options;\r\n}\r\n\r\n/\r\n Spawn an agent process using npx claude-flow-novice agent\r\n \r\n This is a wrapper/alias for the existing claude-flow-novice agent spawning mechanism\r\n * Provides the cfn-spawn naming pattern while delegating to the working implementation\r\n /\r\nexport async function spawnAgent(options: AgentSpawnOptions): Promise<void> {\r\n const { agentType, agentId, taskId, iteration, context, mode, priority, parentTaskId } = options;\r\n\r\n console.log(`[cfn-spawn] Spawning agent: ${agentType}`);\r\n if (agentId) console.log(`[cfn-spawn] Agent ID: ${agentId}`);\r\n if (taskId) console.log(`[cfn-spawn] Task ID: ${taskId}`);\r\n if (iteration) console.log(`[cfn-spawn] Iteration: ${iteration}`);\r\n if (context) console.log(`[cfn-spawn] Context: ${context}`);\r\n if (mode) console.log(`[cfn-spawn] Mode: ${mode}`);\r\n\r\n // Build command arguments for npx claude-flow-novice agent\r\n const claudeArgs = ['claude-flow-novice', 'agent', agentType];\r\n\r\n // Add optional parameters\r\n if (agentId) {\r\n claudeArgs.push('--agent-id', agentId);\r\n }\r\n if (taskId) {\r\n claudeArgs.push('--task-id', taskId);\r\n }\r\n if (iteration) {\r\n claudeArgs.push('--iteration', iteration.toString());\r\n }\r\n if (context) {\r\n claudeArgs.push('--context', context);\r\n }\r\n if (mode) {\r\n claudeArgs.push('--mode', mode);\r\n }\r\n if (priority) {\r\n claudeArgs.push('--priority', priority.toString());\r\n }\r\n if (parentTaskId) {\r\n claudeArgs.push('--parent-task-id', parentTaskId);\r\n }\r\n\r\n // Fetch epic context from Redis if available\r\n let epicContext = '';\r\n let phaseContext = '';\r\n let successCriteria = '';\r\n\r\n if (taskId) {\r\n // SECURITY FIX (CVSS 8.9): Use safe parameter validation and execFileSync()\r\n // Prevent command injection by validating all parameters BEFORE execution\r\n const redisHost = process.env.CFN_REDIS_HOST \|\| 'cfn-redis';\r\n const redisPort = process.env.CFN_REDIS_PORT \|\| '6379';\r\n\r\n // Validate Redis connection parameters\r\n const hostValidation = validateRedisHost(redisHost);\r\n const portValidation = validateRedisPort(redisPort);\r\n\r\n if (hostValidation.valid && portValidation.valid) {\r\n // Try to read epic-level context from Redis\r\n epicContext = getRedisContextSafely(taskId, redisHost, redisPort, 'epic-context');\r\n\r\n // Try to read phase-specific context\r\n phaseContext = getRedisContextSafely(taskId, redisHost, redisPort, 'phase-context');\r\n\r\n // Try to read success criteria\r\n successCriteria = getRedisContextSafely(taskId, redisHost, redisPort, 'success-criteria');\r\n\r\n if (epicContext) {\r\n console.log(`[cfn-spawn] Epic context loaded from Redis`);\r\n }\r\n } else {\r\n console.warn(`[cfn-spawn] Invalid Redis configuration - skipping context load`);\r\n if (!hostValidation.valid) console.warn(`[cfn-spawn] ${hostValidation.error}`);\r\n if (!portValidation.valid) console.warn(`[cfn-spawn] ${portValidation.error}`);\r\n }\r\n }\r\n\r\n // Add environment variables for agent context - WHITELIST ONLY APPROACH\r\n // SECURITY FIX: Do not use ...process.env spread which exposes ALL variables including secrets\r\n // Instead, explicitly whitelist safe variables to pass to spawned process\r\n const safeEnvVars = [\r\n 'CFN_REDIS_HOST',\r\n 'CFN_REDIS_PORT',\r\n 'CFN_REDIS_URL',\r\n 'CFN_MEMORY_BUDGET',\r\n 'CFN_API_HOST',\r\n 'CFN_API_PORT',\r\n 'CFN_LOG_LEVEL',\r\n 'CFN_LOG_FORMAT',\r\n 'CFN_CONTAINER_MODE',\r\n 'CFN_DOCKER_SOCKET',\r\n 'CFN_NETWORK_NAME',\r\n 'CFN_CUSTOM_ROUTING',\r\n 'CFN_DEFAULT_PROVIDER',\r\n 'NODE_ENV',\r\n 'PATH',\r\n 'HOME'\r\n ];\r\n\r\n // Build whitelist-only env object\r\n const env: Record<string, string> = {};\r\n\r\n // Add whitelisted CFN variables\r\n for (const key of safeEnvVars) {\r\n const value = process.env[key];\r\n if (value !== undefined) {\r\n env[key] = value;\r\n }\r\n }\r\n\r\n // Add API key only when explicitly needed (with strict validation)\r\n if (process.env.ANTHROPIC_API_KEY) {\r\n // Validate format: should start with \"sk-\" or \"sk-ant-\"\r\n if (process.env.ANTHROPIC_API_KEY.match(/^sk-[a-zA-Z0-9-]+$/)) {\r\n env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n } else {\r\n console.warn('[cfn-spawn] Warning: ANTHROPIC_API_KEY format invalid, not passing to agent');\r\n }\r\n }\r\n\r\n // Add task and execution context variables\r\n env.AGENT_TYPE = agentType;\r\n env.TASK_ID = taskId \|\| '';\r\n env.ITERATION = iteration?.toString() \|\| '1';\r\n env.CONTEXT = context \|\| '';\r\n env.MODE = mode \|\| 'cli';\r\n env.PRIORITY = priority?.toString() \|\| '5';\r\n env.PARENT_TASK_ID = parentTaskId \|\| '';\r\n\r\n // Epic-level context from Redis (sanitized)\r\n env.EPIC_CONTEXT = epicContext;\r\n env.PHASE_CONTEXT = phaseContext;\r\n env.SUCCESS_CRITERIA = successCriteria;\r\n\r\n console.log(`[cfn-spawn] Executing: npx ${claudeArgs.join(' ')}`);\r\n\r\n // Spawn the claude-flow-novice agent process\r\n const agentProcess = spawn('npx', claudeArgs, {\r\n stdio: 'inherit',\r\n env,\r\n cwd: process.cwd()\r\n });\r\n\r\n // Handle process exit\r\n agentProcess.on('exit', (code, signal) => {\r\n if (code === 0) {\r\n console.log(`[cfn-spawn] Agent ${agentType} completed successfully`);\r\n } else {\r\n console.error(`[cfn-spawn] Agent ${agentType} exited with code ${code}, signal ${signal}`);\r\n }\r\n process.exit(code \|\| 0);\r\n });\r\n\r\n // Handle process errors\r\n agentProcess.on('error', (err) => {\r\n console.error(`[cfn-spawn] Failed to spawn agent ${agentType}:`, err.message);\r\n process.exit(1);\r\n });\r\n\r\n // Cleanup on parent exit\r\n process.on('SIGINT', () => {\r\n console.log('\\n[cfn-spawn] Received SIGINT, terminating agent...');\r\n agentProcess.kill('SIGINT');\r\n });\r\n\r\n process.on('SIGTERM', () => {\r\n console.log('\\n[cfn-spawn] Received SIGTERM, terminating agent...');\r\n agentProcess.kill('SIGTERM');\r\n });\r\n}\r\n\r\n/\r\n Build task description for the agent\r\n /\r\nexport function buildTaskDescription(\r\n agentType: string,\r\n taskId?: string,\r\n iteration?: number,\r\n context?: string\r\n): string {\r\n let desc = `Execute task as ${agentType} agent`;\r\n\r\n if (taskId) desc += ` for task ${taskId}`;\r\n if (iteration !== undefined) desc += ` (iteration ${iteration})`;\r\n if (context) desc += `: ${context}`;\r\n\r\n return desc;\r\n}\r\n\r\n/\r\n Main CLI entry point\r\n */\r\nexport async function main(args: string[] = process.argv.slice(2)): Promise<void> {\r\n // Show help if requested\r\n if (args.includes('--help') \|\| args.includes('-h')) {\r\n console.log(`\r\ncfn-spawn - Claude Flow Novice Agent Spawner\r\n\r\nUsage:\r\n cfn-spawn agent <type> [options]\r\n cfn-spawn <type> [options] (agent is implied)\r\n\r\nOptions:\r\n --agent-id <id> Explicit agent identifier (overrides auto-generation)\r\n --task-id <id> Task identifier\r\n --iteration <n> Iteration number\r\n --context <text> Context description\r\n --mode <mode> Execution mode (cli, api, hybrid)\r\n --priority <1-10> Task priority\r\n --parent-task-id <id> Parent task identifier\r\n\r\nExamples:\r\n cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n cfn-spawn coder --task-id auth-impl --context \"Implement JWT auth\"\r\n cfn-spawn reviewer --task-id auth-impl --iteration 2 --mode cli\r\n cfn-spawn tester --agent-id tester-1-1 --task-id test-phase --iteration 1\r\n `);\r\n return;\r\n }\r\n\r\n // Parse arguments\r\n const options = parseAgentArgs(args);\r\n if (!options) {\r\n process.exit(1);\r\n }\r\n\r\n // Spawn the agent\r\n await spawnAgent(options);\r\n}\r\n\r\n// Run if called directly\r\n// ES module check - compare import.meta.url with the executed file\r\nconst isMainModule = import.meta.url.endsWith(process.argv[1]?.replace(/\\\\/g, '/') \|\| '');\r\nif (isMainModule) {\r\n main().catch((err) => {\r\n console.error('[cfn-spawn] Fatal error:', err);\r\n process.exit(1);\r\n });\r\n}\r\n"],"names":["spawn","execFileSync","validateTaskId","taskId","length","valid","error","taskIdPattern","test","validateRedisHost","host","hostPattern","validateRedisPort","port","portNum","parseInt","isNaN","getRedisContextSafely","redisHost","redisPort","contextKey","taskIdValidation","console","warn","hostValidation","portValidation","redisKey","result","encoding","trimmed","trim","e","parseAgentArgs","args","agentType","optionArgs","slice","startsWith","options","i","key","value","agentId","iteration","context","mode","priority","parentTaskId","spawnAgent","log","claudeArgs","push","toString","epicContext","phaseContext","successCriteria","process","env","CFN_REDIS_HOST","CFN_REDIS_PORT","safeEnvVars","undefined","ANTHROPIC_API_KEY","match","AGENT_TYPE","TASK_ID","ITERATION","CONTEXT","MODE","PRIORITY","PARENT_TASK_ID","EPIC_CONTEXT","PHASE_CONTEXT","SUCCESS_CRITERIA","join","agentProcess","stdio","cwd","on","code","signal","exit","err","message","kill","buildTaskDescription","desc","main","argv","includes","isMainModule","url","endsWith","replace","catch"],"mappings":";AACA;;;;;;;;;;CAUC,GAED,SAASA,KAAK,EAAEC,YAAY,QAAQ,gBAAgB;AAcpD;;;CAGC,GAED;;;CAGC,GACD,SAASC,eAAeC,MAAc;IACpC,IAAI,OAAOA,WAAW,YAAYA,OAAOC,MAAM,KAAK,GAAG;QACrD,OAAO;YAAEC,OAAO;YAAOC,OAAO;QAAqC;IACrE;IAEA,MAAMC,gBAAgB;IACtB,IAAI,CAACA,cAAcC,IAAI,CAACL,SAAS;QAC/B,OAAO;YACLE,OAAO;YACPC,OAAO;QACT;IACF;IACA,OAAO;QAAED,OAAO;IAAK;AACvB;AAEA;;;CAGC,GACD,SAASI,kBAAkBC,IAAY;IACrC,IAAI,OAAOA,SAAS,YAAYA,KAAKN,MAAM,KAAK,GAAG;QACjD,OAAO;YAAEC,OAAO;YAAOC,OAAO;QAAwC;IACxE;IAEA,iFAAiF;IACjF,MAAMK,cAAc;IACpB,IAAI,CAACA,YAAYH,IAAI,CAACE,OAAO;QAC3B,OAAO;YAAEL,OAAO;YAAOC,OAAO;QAA4B;IAC5D;IACA,OAAO;QAAED,OAAO;IAAK;AACvB;AAEA;;;CAGC,GACD,SAASO,kBAAkBC,IAAY;IACrC,IAAI,OAAOA,SAAS,YAAYA,KAAKT,MAAM,KAAK,GAAG;QACjD,OAAO;YAAEC,OAAO;YAAOC,OAAO;QAAwC;IACxE;IAEA,MAAMQ,UAAUC,SAASF,MAAM;IAC/B,IAAIG,MAAMF,YAAYA,UAAU,KAAKA,UAAU,OAAO;QACpD,OAAO;YAAET,OAAO;YAAOC,OAAO;QAAmD;IACnF;IACA,OAAO;QAAED,OAAO;IAAK;AACvB;AAEA;;;CAGC,GACD,SAASY,sBACPd,MAAc,EACde,SAAiB,EACjBC,SAAiB,EACjBC,UAAkB;IAElB,IAAI;QACF,2CAA2C;QAC3C,MAAMC,mBAAmBnB,eAAeC;QACxC,IAAI,CAACkB,iBAAiBhB,KAAK,EAAE;YAC3BiB,QAAQC,IAAI,CAAC,CAAC,6BAA6B,EAAEF,iBAAiBf,KAAK,EAAE;YACrE,OAAO;QACT;QAEA,MAAMkB,iBAAiBf,kBAAkBS;QACzC,IAAI,CAACM,eAAenB,KAAK,EAAE;YACzBiB,QAAQC,IAAI,CAAC,CAAC,gCAAgC,EAAEC,eAAelB,KAAK,EAAE;YACtE,OAAO;QACT;QAEA,MAAMmB,iBAAiBb,kBAAkBO;QACzC,IAAI,CAACM,eAAepB,KAAK,EAAE;YACzBiB,QAAQC,IAAI,CAAC,CAAC,gCAAgC,EAAEE,eAAenB,KAAK,EAAE;YACtE,OAAO;QACT;QAEA,oEAAoE;QACpE,uEAAuE;QACvE,MAAMoB,WAAW,CAAC,MAAM,EAAEvB,OAAO,CAAC,EAAEiB,YAAY;QAChD,MAAMO,SAAS1B,aAAa,aAAa;YACvC;YAAMiB;YACN;YAAMC;YACN;YACAO;SACD,EAAE;YAAEE,UAAU;QAAO;QAEtB,MAAMC,UAAUF,OAAOG,IAAI;QAC3B,OAAOD,YAAY,UAAU,KAAKA;IACpC,EAAE,OAAOE,GAAG;QACV,2DAA2D;QAC3D,OAAO;IACT;AACF;AAEA;;CAEC,GACD,OAAO,SAASC,eAAeC,IAAc;IAC3C,mDAAmD;IACnD,IAAIC;IACJ,IAAIC;IAEJ,IAAIF,IAAI,CAAC,EAAE,KAAK,SAAS;QACvBC,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B,OAAO;QACLF,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B;IAEA,+CAA+C;IAC/C,IAAI,CAACF,aAAaA,UAAUG,UAAU,CAAC,OAAO;QAC5Cf,QAAQhB,KAAK,CAAC;QACdgB,QAAQhB,KAAK,CAAC;QACd,OAAO;IACT;IAEA,MAAMgC,UAA6B;QAAEJ;IAAU;IAE/C,4BAA4B;IAC5B,IAAK,IAAIK,IAAI,GAAGA,IAAIJ,WAAW/B,MAAM,EAAEmC,KAAK,EAAG;QAC7C,MAAMC,MAAML,UAAU,CAACI,EAAE;QACzB,MAAME,QAAQN,UAAU,CAACI,IAAI,EAAE;QAE/B,OAAQC;YACN,KAAK;gBACHF,QAAQI,OAAO,GAAGD;gBAClB;YACF,KAAK;gBACHH,QAAQnC,MAAM,GAAGsC;gBACjB;YACF,KAAK;gBACHH,QAAQK,SAAS,GAAG5B,SAAS0B,OAAO;gBACpC;YACF,KAAK;gBACHH,QAAQM,OAAO,GAAGH;gBAClB;YACF,KAAK;gBACHH,QAAQO,IAAI,GAAGJ;gBACf;YACF,KAAK;gBACHH,QAAQQ,QAAQ,GAAG/B,SAAS0B,OAAO;gBACnC;YACF,KAAK;YACL,KAAK;gBACHH,QAAQS,YAAY,GAAGN;gBACvB;YACF;gBACEnB,QAAQC,IAAI,CAAC,CAAC,gBAAgB,EAAEiB,KAAK;QACzC;IACF;IAEA,OAAOF;AACT;AAEA;;;;;CAKC,GACD,OAAO,eAAeU,WAAWV,OAA0B;IACzD,MAAM,EAAEJ,SAAS,EAAEQ,OAAO,EAAEvC,MAAM,EAAEwC,SAAS,EAAEC,OAAO,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,YAAY,EAAE,GAAGT;IAEzFhB,QAAQ2B,GAAG,CAAC,CAAC,4BAA4B,EAAEf,WAAW;IACtD,IAAIQ,SAASpB,QAAQ2B,GAAG,CAAC,CAAC,wBAAwB,EAAEP,SAAS;IAC7D,IAAIvC,QAAQmB,QAAQ2B,GAAG,CAAC,CAAC,uBAAuB,EAAE9C,QAAQ;IAC1D,IAAIwC,WAAWrB,QAAQ2B,GAAG,CAAC,CAAC,yBAAyB,EAAEN,WAAW;IAClE,IAAIC,SAAStB,QAAQ2B,GAAG,CAAC,CAAC,uBAAuB,EAAEL,SAAS;IAC5D,IAAIC,MAAMvB,QAAQ2B,GAAG,CAAC,CAAC,oBAAoB,EAAEJ,MAAM;IAEnD,2DAA2D;IAC3D,MAAMK,aAAa;QAAC;QAAsB;QAAShB;KAAU;IAE7D,0BAA0B;IAC1B,IAAIQ,SAAS;QACXQ,WAAWC,IAAI,CAAC,cAAcT;IAChC;IACA,IAAIvC,QAAQ;QACV+C,WAAWC,IAAI,CAAC,aAAahD;IAC/B;IACA,IAAIwC,WAAW;QACbO,WAAWC,IAAI,CAAC,eAAeR,UAAUS,QAAQ;IACnD;IACA,IAAIR,SAAS;QACXM,WAAWC,IAAI,CAAC,aAAaP;IAC/B;IACA,IAAIC,MAAM;QACRK,WAAWC,IAAI,CAAC,UAAUN;IAC5B;IACA,IAAIC,UAAU;QACZI,WAAWC,IAAI,CAAC,cAAcL,SAASM,QAAQ;IACjD;IACA,IAAIL,cAAc;QAChBG,WAAWC,IAAI,CAAC,oBAAoBJ;IACtC;IAEA,6CAA6C;IAC7C,IAAIM,cAAc;IAClB,IAAIC,eAAe;IACnB,IAAIC,kBAAkB;IAEtB,IAAIpD,QAAQ;QACV,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAMe,YAAYsC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMvC,YAAYqC,QAAQC,GAAG,CAACE,cAAc,IAAI;QAEhD,uCAAuC;QACvC,MAAMnC,iBAAiBf,kBAAkBS;QACzC,MAAMO,iBAAiBb,kBAAkBO;QAEzC,IAAIK,eAAenB,KAAK,IAAIoB,eAAepB,KAAK,EAAE;YAChD,4CAA4C;YAC5CgD,cAAcpC,sBAAsBd,QAAQe,WAAWC,WAAW;YAElE,qCAAqC;YACrCmC,eAAerC,sBAAsBd,QAAQe,WAAWC,WAAW;YAEnE,+BAA+B;YAC/BoC,kBAAkBtC,sBAAsBd,QAAQe,WAAWC,WAAW;YAEtE,IAAIkC,aAAa;gBACf/B,QAAQ2B,GAAG,CAAC,CAAC,4CAA4C,CAAC;YAC5D;QACF,OAAO;YACL3B,QAAQC,IAAI,CAAC,CAAC,iEAAiE,CAAC;YAChF,IAAI,CAACC,eAAenB,KAAK,EAAEiB,QAAQC,IAAI,CAAC,CAAC,cAAc,EAAEC,eAAelB,KAAK,EAAE;YAC/E,IAAI,CAACmB,eAAepB,KAAK,EAAEiB,QAAQC,IAAI,CAAC,CAAC,cAAc,EAAEE,eAAenB,KAAK,EAAE;QACjF;IACF;IAEA,wEAAwE;IACxE,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAMsD,cAAc;QAClB;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;KACD;IAED,kCAAkC;IAClC,MAAMH,MAA8B,CAAC;IAErC,gCAAgC;IAChC,KAAK,MAAMjB,OAAOoB,YAAa;QAC7B,MAAMnB,QAAQe,QAAQC,GAAG,CAACjB,IAAI;QAC9B,IAAIC,UAAUoB,WAAW;YACvBJ,GAAG,CAACjB,IAAI,GAAGC;QACb;IACF;IAEA,mEAAmE;IACnE,IAAIe,QAAQC,GAAG,CAACK,iBAAiB,EAAE;QACjC,wDAAwD;QACxD,IAAIN,QAAQC,GAAG,CAACK,iBAAiB,CAACC,KAAK,CAAC,uBAAuB;YAC7DN,IAAIK,iBAAiB,GAAGN,QAAQC,GAAG,CAACK,iBAAiB;QACvD,OAAO;YACLxC,QAAQC,IAAI,CAAC;QACf;IACF;IAEA,2CAA2C;IAC3CkC,IAAIO,UAAU,GAAG9B;IACjBuB,IAAIQ,OAAO,GAAG9D,UAAU;IACxBsD,IAAIS,SAAS,GAAGvB,WAAWS,cAAc;IACzCK,IAAIU,OAAO,GAAGvB,WAAW;IACzBa,IAAIW,IAAI,GAAGvB,QAAQ;IACnBY,IAAIY,QAAQ,GAAGvB,UAAUM,cAAc;IACvCK,IAAIa,cAAc,GAAGvB,gBAAgB;IAErC,4CAA4C;IAC5CU,IAAIc,YAAY,GAAGlB;IACnBI,IAAIe,aAAa,GAAGlB;IACpBG,IAAIgB,gBAAgB,GAAGlB;IAEvBjC,QAAQ2B,GAAG,CAAC,CAAC,2BAA2B,EAAEC,WAAWwB,IAAI,CAAC,MAAM;IAEhE,6CAA6C;IAC7C,MAAMC,eAAe3E,MAAM,OAAOkD,YAAY;QAC5C0B,OAAO;QACPnB;QACAoB,KAAKrB,QAAQqB,GAAG;IAClB;IAEA,sBAAsB;IACtBF,aAAaG,EAAE,CAAC,QAAQ,CAACC,MAAMC;QAC7B,IAAID,SAAS,GAAG;YACdzD,QAAQ2B,GAAG,CAAC,CAAC,kBAAkB,EAAEf,UAAU,uBAAuB,CAAC;QACrE,OAAO;YACLZ,QAAQhB,KAAK,CAAC,CAAC,kBAAkB,EAAE4B,UAAU,kBAAkB,EAAE6C,KAAK,SAAS,EAAEC,QAAQ;QAC3F;QACAxB,QAAQyB,IAAI,CAACF,QAAQ;IACvB;IAEA,wBAAwB;IACxBJ,aAAaG,EAAE,CAAC,SAAS,CAACI;QACxB5D,QAAQhB,KAAK,CAAC,CAAC,kCAAkC,EAAE4B,UAAU,CAAC,CAAC,EAAEgD,IAAIC,OAAO;QAC5E3B,QAAQyB,IAAI,CAAC;IACf;IAEA,yBAAyB;IACzBzB,QAAQsB,EAAE,CAAC,UAAU;QACnBxD,QAAQ2B,GAAG,CAAC;QACZ0B,aAAaS,IAAI,CAAC;IACpB;IAEA5B,QAAQsB,EAAE,CAAC,WAAW;QACpBxD,QAAQ2B,GAAG,CAAC;QACZ0B,aAAaS,IAAI,CAAC;IACpB;AACF;AAEA;;CAEC,GACD,OAAO,SAASC,qBACdnD,SAAiB,EACjB/B,MAAe,EACfwC,SAAkB,EAClBC,OAAgB;IAEhB,IAAI0C,OAAO,CAAC,gBAAgB,EAAEpD,UAAU,MAAM,CAAC;IAE/C,IAAI/B,QAAQmF,QAAQ,CAAC,UAAU,EAAEnF,QAAQ;IACzC,IAAIwC,cAAckB,WAAWyB,QAAQ,CAAC,YAAY,EAAE3C,UAAU,CAAC,CAAC;IAChE,IAAIC,SAAS0C,QAAQ,CAAC,EAAE,EAAE1C,SAAS;IAEnC,OAAO0C;AACT;AAEA;;CAEC,GACD,OAAO,eAAeC,KAAKtD,OAAiBuB,QAAQgC,IAAI,CAACpD,KAAK,CAAC,EAAE;IAC/D,yBAAyB;IACzB,IAAIH,KAAKwD,QAAQ,CAAC,aAAaxD,KAAKwD,QAAQ,CAAC,OAAO;QAClDnE,QAAQ2B,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;IAqBb,CAAC;QACD;IACF;IAEA,kBAAkB;IAClB,MAAMX,UAAUN,eAAeC;IAC/B,IAAI,CAACK,SAAS;QACZkB,QAAQyB,IAAI,CAAC;IACf;IAEA,kBAAkB;IAClB,MAAMjC,WAAWV;AACnB;AAEA,yBAAyB;AACzB,mEAAmE;AACnE,MAAMoD,eAAe,YAAYC,GAAG,CAACC,QAAQ,CAACpC,QAAQgC,IAAI,CAAC,EAAE,EAAEK,QAAQ,OAAO,QAAQ;AACtF,IAAIH,cAAc;IAChBH,OAAOO,KAAK,CAAC,CAACZ;QACZ5D,QAAQhB,KAAK,CAAC,4BAA4B4E;QAC1C1B,QAAQyB,IAAI,CAAC;IACf;AACF"}
1	+ {"version":3,"sources":["../../src/cli/agent-spawn.ts"],"sourcesContent":["#!/usr/bin/env node\r\n/*\r\n Agent Spawning CLI - Direct agent process spawning\r\n \r\n Usage:\r\n * npx cfn-spawn agent <type> [options]\r\n * npx cfn-spawn <type> [options] (agent is implied)\r\n \r\n Examples:\r\n * npx cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n * npx cfn-spawn researcher --task-id task-123 --iteration 1\r\n /\r\n\r\nimport { spawn, execFileSync } from 'child_process';\r\nimport { resolve } from 'path';\r\n\r\ninterface AgentSpawnOptions {\r\n agentType: string;\r\n agentId?: string;\r\n taskId?: string;\r\n iteration?: number;\r\n context?: string;\r\n mode?: string;\r\n priority?: number;\r\n parentTaskId?: string;\r\n}\r\n\r\n/\r\n SECURITY: Parameter validation to prevent command injection (CVSS 8.9)\r\n * Validates all parameters that will be passed to execFileSync()\r\n /\r\n\r\n/\r\n Validates taskId format to prevent command injection attacks\r\n * Pattern: alphanumeric, underscore, hyphen only, 1-64 chars\r\n /\r\nfunction validateTaskId(taskId: string): { valid: boolean; error?: string } {\r\n if (typeof taskId !== 'string' \|\| taskId.length === 0) {\r\n return { valid: false, error: 'Task ID must be a non-empty string' };\r\n }\r\n\r\n const taskIdPattern = /^[a-zA-Z0-9_-]{1,64}$/;\r\n if (!taskIdPattern.test(taskId)) {\r\n return {\r\n valid: false,\r\n error: 'Invalid task ID format - must contain only alphanumeric characters, underscores, and hyphens (max 64 chars)'\r\n };\r\n }\r\n return { valid: true };\r\n}\r\n\r\n/\r\n Validates Redis host to prevent command injection\r\n * Allows: hostnames, domain names, localhost, IPv4, IPv6 (::1)\r\n /\r\nfunction validateRedisHost(host: string): { valid: boolean; error?: string } {\r\n if (typeof host !== 'string' \|\| host.length === 0) {\r\n return { valid: false, error: 'Redis host must be a non-empty string' };\r\n }\r\n\r\n // Pattern: alphanumeric, hyphens, dots (for domains), plus special IPv6 loopback\r\n const hostPattern = /^[a-zA-Z0-9.-]+$\|^::1$/;\r\n if (!hostPattern.test(host)) {\r\n return { valid: false, error: 'Invalid Redis host format' };\r\n }\r\n return { valid: true };\r\n}\r\n\r\n/\r\n Validates Redis port to prevent command injection\r\n * Range: 1-65535\r\n /\r\nfunction validateRedisPort(port: string): { valid: boolean; error?: string } {\r\n if (typeof port !== 'string' \|\| port.length === 0) {\r\n return { valid: false, error: 'Redis port must be a non-empty string' };\r\n }\r\n\r\n const portNum = parseInt(port, 10);\r\n if (isNaN(portNum) \|\| portNum < 1 \|\| portNum > 65535) {\r\n return { valid: false, error: 'Invalid Redis port - must be between 1 and 65535' };\r\n }\r\n return { valid: true };\r\n}\r\n\r\n/\r\n Safely retrieves context from Redis using execFileSync()\r\n * Prevents command injection by using array-based arguments instead of template literals\r\n /\r\nfunction getRedisContextSafely(\r\n taskId: string,\r\n redisHost: string,\r\n redisPort: string,\r\n contextKey: string\r\n): string {\r\n try {\r\n // Validate all parameters BEFORE executing\r\n const taskIdValidation = validateTaskId(taskId);\r\n if (!taskIdValidation.valid) {\r\n console.warn(`[cfn-spawn] Invalid task ID: ${taskIdValidation.error}`);\r\n return '';\r\n }\r\n\r\n const hostValidation = validateRedisHost(redisHost);\r\n if (!hostValidation.valid) {\r\n console.warn(`[cfn-spawn] Invalid Redis host: ${hostValidation.error}`);\r\n return '';\r\n }\r\n\r\n const portValidation = validateRedisPort(redisPort);\r\n if (!portValidation.valid) {\r\n console.warn(`[cfn-spawn] Invalid Redis port: ${portValidation.error}`);\r\n return '';\r\n }\r\n\r\n // All parameters validated - now execute safely with execFileSync()\r\n // Using array arguments prevents shell interpolation of metacharacters\r\n const redisKey = `swarm:${taskId}:${contextKey}`;\r\n const result = execFileSync('redis-cli', [\r\n '-h', redisHost,\r\n '-p', redisPort,\r\n 'get',\r\n redisKey\r\n ], { encoding: 'utf8' });\r\n\r\n const trimmed = result.trim();\r\n return trimmed === '(nil)' ? '' : trimmed;\r\n } catch (e) {\r\n // Redis not available or key doesn't exist - fail silently\r\n return '';\r\n }\r\n}\r\n\r\n/\r\n Parse command line arguments for agent spawning\r\n /\r\nexport function parseAgentArgs(args: string[]): AgentSpawnOptions \| null {\r\n // Handle both \"agent <type>\" and \"<type>\" patterns\r\n let agentType: string;\r\n let optionArgs: string[];\r\n\r\n if (args[0] === 'agent') {\r\n agentType = args[1];\r\n optionArgs = args.slice(2);\r\n } else {\r\n agentType = args[0];\r\n optionArgs = args.slice(1);\r\n }\r\n\r\n // Validate agent type exists and is not a flag\r\n if (!agentType \|\| agentType.startsWith('--')) {\r\n console.error('Error: Agent type is required');\r\n console.error('Usage: cfn-spawn agent <type> [options]');\r\n return null;\r\n }\r\n\r\n const options: AgentSpawnOptions = { agentType };\r\n\r\n // Parse optional parameters\r\n for (let i = 0; i < optionArgs.length; i += 2) {\r\n const key = optionArgs[i];\r\n const value = optionArgs[i + 1];\r\n\r\n switch (key) {\r\n case '--agent-id':\r\n options.agentId = value;\r\n break;\r\n case '--task-id':\r\n options.taskId = value;\r\n break;\r\n case '--iteration':\r\n options.iteration = parseInt(value, 10);\r\n break;\r\n case '--context':\r\n options.context = value;\r\n break;\r\n case '--mode':\r\n options.mode = value;\r\n break;\r\n case '--priority':\r\n options.priority = parseInt(value, 10);\r\n break;\r\n case '--parent-task':\r\n case '--parent-task-id':\r\n options.parentTaskId = value;\r\n break;\r\n default:\r\n console.warn(`Unknown option: ${key}`);\r\n }\r\n }\r\n\r\n return options;\r\n}\r\n\r\n/\r\n Spawn an agent process using npx claude-flow-novice agent\r\n \r\n This is a wrapper/alias for the existing claude-flow-novice agent spawning mechanism\r\n * Provides the cfn-spawn naming pattern while delegating to the working implementation\r\n /\r\nexport async function spawnAgent(options: AgentSpawnOptions): Promise<void> {\r\n const { agentType, agentId, taskId, iteration, context, mode, priority, parentTaskId } = options;\r\n\r\n console.log(`[cfn-spawn] Spawning agent: ${agentType}`);\r\n if (agentId) console.log(`[cfn-spawn] Agent ID: ${agentId}`);\r\n if (taskId) console.log(`[cfn-spawn] Task ID: ${taskId}`);\r\n if (iteration) console.log(`[cfn-spawn] Iteration: ${iteration}`);\r\n if (context) console.log(`[cfn-spawn] Context: ${context}`);\r\n if (mode) console.log(`[cfn-spawn] Mode: ${mode}`);\r\n\r\n // Build command arguments for npx claude-flow-novice agent\r\n const claudeArgs = ['claude-flow-novice', 'agent', agentType];\r\n\r\n // Add optional parameters\r\n if (agentId) {\r\n claudeArgs.push('--agent-id', agentId);\r\n }\r\n if (taskId) {\r\n claudeArgs.push('--task-id', taskId);\r\n }\r\n if (iteration) {\r\n claudeArgs.push('--iteration', iteration.toString());\r\n }\r\n if (context) {\r\n claudeArgs.push('--context', context);\r\n }\r\n if (mode) {\r\n claudeArgs.push('--mode', mode);\r\n }\r\n if (priority) {\r\n claudeArgs.push('--priority', priority.toString());\r\n }\r\n if (parentTaskId) {\r\n claudeArgs.push('--parent-task-id', parentTaskId);\r\n }\r\n\r\n // Fetch epic context from Redis if available\r\n let epicContext = '';\r\n let phaseContext = '';\r\n let successCriteria = '';\r\n\r\n if (taskId) {\r\n // SECURITY FIX (CVSS 8.9): Use safe parameter validation and execFileSync()\r\n // Prevent command injection by validating all parameters BEFORE execution\r\n const redisHost = process.env.CFN_REDIS_HOST \|\| 'cfn-redis';\r\n const redisPort = process.env.CFN_REDIS_PORT \|\| '6379';\r\n\r\n // Validate Redis connection parameters\r\n const hostValidation = validateRedisHost(redisHost);\r\n const portValidation = validateRedisPort(redisPort);\r\n\r\n if (hostValidation.valid && portValidation.valid) {\r\n // Try to read epic-level context from Redis\r\n epicContext = getRedisContextSafely(taskId, redisHost, redisPort, 'epic-context');\r\n\r\n // Try to read phase-specific context\r\n phaseContext = getRedisContextSafely(taskId, redisHost, redisPort, 'phase-context');\r\n\r\n // Try to read success criteria\r\n successCriteria = getRedisContextSafely(taskId, redisHost, redisPort, 'success-criteria');\r\n\r\n if (epicContext) {\r\n console.log(`[cfn-spawn] Epic context loaded from Redis`);\r\n }\r\n } else {\r\n console.warn(`[cfn-spawn] Invalid Redis configuration - skipping context load`);\r\n if (!hostValidation.valid) console.warn(`[cfn-spawn] ${hostValidation.error}`);\r\n if (!portValidation.valid) console.warn(`[cfn-spawn] ${portValidation.error}`);\r\n }\r\n }\r\n\r\n // Add environment variables for agent context - WHITELIST ONLY APPROACH\r\n // SECURITY FIX: Do not use ...process.env spread which exposes ALL variables including secrets\r\n // Instead, explicitly whitelist safe variables to pass to spawned process\r\n const safeEnvVars = [\r\n 'CFN_REDIS_HOST',\r\n 'CFN_REDIS_PORT',\r\n 'CFN_REDIS_PASSWORD', // CRITICAL: Required for Redis authentication\r\n 'CFN_REDIS_URL',\r\n 'REDIS_PASSWORD', // Fallback for Redis password\r\n 'CFN_MEMORY_BUDGET',\r\n 'CFN_API_HOST',\r\n 'CFN_API_PORT',\r\n 'CFN_LOG_LEVEL',\r\n 'CFN_LOG_FORMAT',\r\n 'CFN_CONTAINER_MODE',\r\n 'CFN_DOCKER_SOCKET',\r\n 'CFN_NETWORK_NAME',\r\n 'CFN_CUSTOM_ROUTING',\r\n 'CFN_DEFAULT_PROVIDER',\r\n 'NODE_ENV',\r\n 'PATH',\r\n 'HOME',\r\n 'PWD' // Required for working directory context\r\n ];\r\n\r\n // Build whitelist-only env object\r\n const env: Record<string, string> = {};\r\n\r\n // Add whitelisted CFN variables\r\n for (const key of safeEnvVars) {\r\n const value = process.env[key];\r\n if (value !== undefined) {\r\n env[key] = value;\r\n }\r\n }\r\n\r\n // Add API key only when explicitly needed (with strict validation)\r\n if (process.env.ANTHROPIC_API_KEY) {\r\n // Validate format: should start with \"sk-\" or \"sk-ant-\"\r\n if (process.env.ANTHROPIC_API_KEY.match(/^sk-[a-zA-Z0-9-]+$/)) {\r\n env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n } else {\r\n console.warn('[cfn-spawn] Warning: ANTHROPIC_API_KEY format invalid, not passing to agent');\r\n }\r\n }\r\n\r\n // Add task and execution context variables\r\n env.AGENT_TYPE = agentType;\r\n env.TASK_ID = taskId \|\| '';\r\n env.ITERATION = iteration?.toString() \|\| '1';\r\n env.CONTEXT = context \|\| '';\r\n env.MODE = mode \|\| 'cli';\r\n env.PRIORITY = priority?.toString() \|\| '5';\r\n env.PARENT_TASK_ID = parentTaskId \|\| '';\r\n\r\n // Epic-level context from Redis (sanitized)\r\n env.EPIC_CONTEXT = epicContext;\r\n env.PHASE_CONTEXT = phaseContext;\r\n env.SUCCESS_CRITERIA = successCriteria;\r\n\r\n console.log(`[cfn-spawn] Executing: npx ${claudeArgs.join(' ')}`);\r\n\r\n // Spawn the claude-flow-novice agent process\r\n const agentProcess = spawn('npx', claudeArgs, {\r\n stdio: 'inherit',\r\n env,\r\n cwd: process.cwd()\r\n });\r\n\r\n // Handle process exit\r\n agentProcess.on('exit', (code, signal) => {\r\n if (code === 0) {\r\n console.log(`[cfn-spawn] Agent ${agentType} completed successfully`);\r\n } else {\r\n console.error(`[cfn-spawn] Agent ${agentType} exited with code ${code}, signal ${signal}`);\r\n }\r\n process.exit(code \|\| 0);\r\n });\r\n\r\n // Handle process errors\r\n agentProcess.on('error', (err) => {\r\n console.error(`[cfn-spawn] Failed to spawn agent ${agentType}:`, err.message);\r\n process.exit(1);\r\n });\r\n\r\n // Cleanup on parent exit\r\n process.on('SIGINT', () => {\r\n console.log('\\n[cfn-spawn] Received SIGINT, terminating agent...');\r\n agentProcess.kill('SIGINT');\r\n });\r\n\r\n process.on('SIGTERM', () => {\r\n console.log('\\n[cfn-spawn] Received SIGTERM, terminating agent...');\r\n agentProcess.kill('SIGTERM');\r\n });\r\n}\r\n\r\n/\r\n Build task description for the agent\r\n /\r\nexport function buildTaskDescription(\r\n agentType: string,\r\n taskId?: string,\r\n iteration?: number,\r\n context?: string\r\n): string {\r\n let desc = `Execute task as ${agentType} agent`;\r\n\r\n if (taskId) desc += ` for task ${taskId}`;\r\n if (iteration !== undefined) desc += ` (iteration ${iteration})`;\r\n if (context) desc += `: ${context}`;\r\n\r\n return desc;\r\n}\r\n\r\n/\r\n Main CLI entry point\r\n */\r\nexport async function main(args: string[] = process.argv.slice(2)): Promise<void> {\r\n // Show help if requested\r\n if (args.includes('--help') \|\| args.includes('-h')) {\r\n console.log(`\r\ncfn-spawn - Claude Flow Novice Agent Spawner\r\n\r\nUsage:\r\n cfn-spawn agent <type> [options]\r\n cfn-spawn <type> [options] (agent is implied)\r\n\r\nOptions:\r\n --agent-id <id> Explicit agent identifier (overrides auto-generation)\r\n --task-id <id> Task identifier\r\n --iteration <n> Iteration number\r\n --context <text> Context description\r\n --mode <mode> Execution mode (cli, api, hybrid)\r\n --priority <1-10> Task priority\r\n --parent-task-id <id> Parent task identifier\r\n\r\nExamples:\r\n cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n cfn-spawn coder --task-id auth-impl --context \"Implement JWT auth\"\r\n cfn-spawn reviewer --task-id auth-impl --iteration 2 --mode cli\r\n cfn-spawn tester --agent-id tester-1-1 --task-id test-phase --iteration 1\r\n `);\r\n return;\r\n }\r\n\r\n // Parse arguments\r\n const options = parseAgentArgs(args);\r\n if (!options) {\r\n process.exit(1);\r\n }\r\n\r\n // Spawn the agent\r\n await spawnAgent(options);\r\n}\r\n\r\n// Run if called directly\r\n// ES module check - compare import.meta.url with the executed file\r\nconst isMainModule = import.meta.url.endsWith(process.argv[1]?.replace(/\\\\/g, '/') \|\| '');\r\nif (isMainModule) {\r\n main().catch((err) => {\r\n console.error('[cfn-spawn] Fatal error:', err);\r\n process.exit(1);\r\n });\r\n}\r\n"],"names":["spawn","execFileSync","validateTaskId","taskId","length","valid","error","taskIdPattern","test","validateRedisHost","host","hostPattern","validateRedisPort","port","portNum","parseInt","isNaN","getRedisContextSafely","redisHost","redisPort","contextKey","taskIdValidation","console","warn","hostValidation","portValidation","redisKey","result","encoding","trimmed","trim","e","parseAgentArgs","args","agentType","optionArgs","slice","startsWith","options","i","key","value","agentId","iteration","context","mode","priority","parentTaskId","spawnAgent","log","claudeArgs","push","toString","epicContext","phaseContext","successCriteria","process","env","CFN_REDIS_HOST","CFN_REDIS_PORT","safeEnvVars","undefined","ANTHROPIC_API_KEY","match","AGENT_TYPE","TASK_ID","ITERATION","CONTEXT","MODE","PRIORITY","PARENT_TASK_ID","EPIC_CONTEXT","PHASE_CONTEXT","SUCCESS_CRITERIA","join","agentProcess","stdio","cwd","on","code","signal","exit","err","message","kill","buildTaskDescription","desc","main","argv","includes","isMainModule","url","endsWith","replace","catch"],"mappings":";AACA;;;;;;;;;;CAUC,GAED,SAASA,KAAK,EAAEC,YAAY,QAAQ,gBAAgB;AAcpD;;;CAGC,GAED;;;CAGC,GACD,SAASC,eAAeC,MAAc;IACpC,IAAI,OAAOA,WAAW,YAAYA,OAAOC,MAAM,KAAK,GAAG;QACrD,OAAO;YAAEC,OAAO;YAAOC,OAAO;QAAqC;IACrE;IAEA,MAAMC,gBAAgB;IACtB,IAAI,CAACA,cAAcC,IAAI,CAACL,SAAS;QAC/B,OAAO;YACLE,OAAO;YACPC,OAAO;QACT;IACF;IACA,OAAO;QAAED,OAAO;IAAK;AACvB;AAEA;;;CAGC,GACD,SAASI,kBAAkBC,IAAY;IACrC,IAAI,OAAOA,SAAS,YAAYA,KAAKN,MAAM,KAAK,GAAG;QACjD,OAAO;YAAEC,OAAO;YAAOC,OAAO;QAAwC;IACxE;IAEA,iFAAiF;IACjF,MAAMK,cAAc;IACpB,IAAI,CAACA,YAAYH,IAAI,CAACE,OAAO;QAC3B,OAAO;YAAEL,OAAO;YAAOC,OAAO;QAA4B;IAC5D;IACA,OAAO;QAAED,OAAO;IAAK;AACvB;AAEA;;;CAGC,GACD,SAASO,kBAAkBC,IAAY;IACrC,IAAI,OAAOA,SAAS,YAAYA,KAAKT,MAAM,KAAK,GAAG;QACjD,OAAO;YAAEC,OAAO;YAAOC,OAAO;QAAwC;IACxE;IAEA,MAAMQ,UAAUC,SAASF,MAAM;IAC/B,IAAIG,MAAMF,YAAYA,UAAU,KAAKA,UAAU,OAAO;QACpD,OAAO;YAAET,OAAO;YAAOC,OAAO;QAAmD;IACnF;IACA,OAAO;QAAED,OAAO;IAAK;AACvB;AAEA;;;CAGC,GACD,SAASY,sBACPd,MAAc,EACde,SAAiB,EACjBC,SAAiB,EACjBC,UAAkB;IAElB,IAAI;QACF,2CAA2C;QAC3C,MAAMC,mBAAmBnB,eAAeC;QACxC,IAAI,CAACkB,iBAAiBhB,KAAK,EAAE;YAC3BiB,QAAQC,IAAI,CAAC,CAAC,6BAA6B,EAAEF,iBAAiBf,KAAK,EAAE;YACrE,OAAO;QACT;QAEA,MAAMkB,iBAAiBf,kBAAkBS;QACzC,IAAI,CAACM,eAAenB,KAAK,EAAE;YACzBiB,QAAQC,IAAI,CAAC,CAAC,gCAAgC,EAAEC,eAAelB,KAAK,EAAE;YACtE,OAAO;QACT;QAEA,MAAMmB,iBAAiBb,kBAAkBO;QACzC,IAAI,CAACM,eAAepB,KAAK,EAAE;YACzBiB,QAAQC,IAAI,CAAC,CAAC,gCAAgC,EAAEE,eAAenB,KAAK,EAAE;YACtE,OAAO;QACT;QAEA,oEAAoE;QACpE,uEAAuE;QACvE,MAAMoB,WAAW,CAAC,MAAM,EAAEvB,OAAO,CAAC,EAAEiB,YAAY;QAChD,MAAMO,SAAS1B,aAAa,aAAa;YACvC;YAAMiB;YACN;YAAMC;YACN;YACAO;SACD,EAAE;YAAEE,UAAU;QAAO;QAEtB,MAAMC,UAAUF,OAAOG,IAAI;QAC3B,OAAOD,YAAY,UAAU,KAAKA;IACpC,EAAE,OAAOE,GAAG;QACV,2DAA2D;QAC3D,OAAO;IACT;AACF;AAEA;;CAEC,GACD,OAAO,SAASC,eAAeC,IAAc;IAC3C,mDAAmD;IACnD,IAAIC;IACJ,IAAIC;IAEJ,IAAIF,IAAI,CAAC,EAAE,KAAK,SAAS;QACvBC,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B,OAAO;QACLF,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B;IAEA,+CAA+C;IAC/C,IAAI,CAACF,aAAaA,UAAUG,UAAU,CAAC,OAAO;QAC5Cf,QAAQhB,KAAK,CAAC;QACdgB,QAAQhB,KAAK,CAAC;QACd,OAAO;IACT;IAEA,MAAMgC,UAA6B;QAAEJ;IAAU;IAE/C,4BAA4B;IAC5B,IAAK,IAAIK,IAAI,GAAGA,IAAIJ,WAAW/B,MAAM,EAAEmC,KAAK,EAAG;QAC7C,MAAMC,MAAML,UAAU,CAACI,EAAE;QACzB,MAAME,QAAQN,UAAU,CAACI,IAAI,EAAE;QAE/B,OAAQC;YACN,KAAK;gBACHF,QAAQI,OAAO,GAAGD;gBAClB;YACF,KAAK;gBACHH,QAAQnC,MAAM,GAAGsC;gBACjB;YACF,KAAK;gBACHH,QAAQK,SAAS,GAAG5B,SAAS0B,OAAO;gBACpC;YACF,KAAK;gBACHH,QAAQM,OAAO,GAAGH;gBAClB;YACF,KAAK;gBACHH,QAAQO,IAAI,GAAGJ;gBACf;YACF,KAAK;gBACHH,QAAQQ,QAAQ,GAAG/B,SAAS0B,OAAO;gBACnC;YACF,KAAK;YACL,KAAK;gBACHH,QAAQS,YAAY,GAAGN;gBACvB;YACF;gBACEnB,QAAQC,IAAI,CAAC,CAAC,gBAAgB,EAAEiB,KAAK;QACzC;IACF;IAEA,OAAOF;AACT;AAEA;;;;;CAKC,GACD,OAAO,eAAeU,WAAWV,OAA0B;IACzD,MAAM,EAAEJ,SAAS,EAAEQ,OAAO,EAAEvC,MAAM,EAAEwC,SAAS,EAAEC,OAAO,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,YAAY,EAAE,GAAGT;IAEzFhB,QAAQ2B,GAAG,CAAC,CAAC,4BAA4B,EAAEf,WAAW;IACtD,IAAIQ,SAASpB,QAAQ2B,GAAG,CAAC,CAAC,wBAAwB,EAAEP,SAAS;IAC7D,IAAIvC,QAAQmB,QAAQ2B,GAAG,CAAC,CAAC,uBAAuB,EAAE9C,QAAQ;IAC1D,IAAIwC,WAAWrB,QAAQ2B,GAAG,CAAC,CAAC,yBAAyB,EAAEN,WAAW;IAClE,IAAIC,SAAStB,QAAQ2B,GAAG,CAAC,CAAC,uBAAuB,EAAEL,SAAS;IAC5D,IAAIC,MAAMvB,QAAQ2B,GAAG,CAAC,CAAC,oBAAoB,EAAEJ,MAAM;IAEnD,2DAA2D;IAC3D,MAAMK,aAAa;QAAC;QAAsB;QAAShB;KAAU;IAE7D,0BAA0B;IAC1B,IAAIQ,SAAS;QACXQ,WAAWC,IAAI,CAAC,cAAcT;IAChC;IACA,IAAIvC,QAAQ;QACV+C,WAAWC,IAAI,CAAC,aAAahD;IAC/B;IACA,IAAIwC,WAAW;QACbO,WAAWC,IAAI,CAAC,eAAeR,UAAUS,QAAQ;IACnD;IACA,IAAIR,SAAS;QACXM,WAAWC,IAAI,CAAC,aAAaP;IAC/B;IACA,IAAIC,MAAM;QACRK,WAAWC,IAAI,CAAC,UAAUN;IAC5B;IACA,IAAIC,UAAU;QACZI,WAAWC,IAAI,CAAC,cAAcL,SAASM,QAAQ;IACjD;IACA,IAAIL,cAAc;QAChBG,WAAWC,IAAI,CAAC,oBAAoBJ;IACtC;IAEA,6CAA6C;IAC7C,IAAIM,cAAc;IAClB,IAAIC,eAAe;IACnB,IAAIC,kBAAkB;IAEtB,IAAIpD,QAAQ;QACV,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAMe,YAAYsC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMvC,YAAYqC,QAAQC,GAAG,CAACE,cAAc,IAAI;QAEhD,uCAAuC;QACvC,MAAMnC,iBAAiBf,kBAAkBS;QACzC,MAAMO,iBAAiBb,kBAAkBO;QAEzC,IAAIK,eAAenB,KAAK,IAAIoB,eAAepB,KAAK,EAAE;YAChD,4CAA4C;YAC5CgD,cAAcpC,sBAAsBd,QAAQe,WAAWC,WAAW;YAElE,qCAAqC;YACrCmC,eAAerC,sBAAsBd,QAAQe,WAAWC,WAAW;YAEnE,+BAA+B;YAC/BoC,kBAAkBtC,sBAAsBd,QAAQe,WAAWC,WAAW;YAEtE,IAAIkC,aAAa;gBACf/B,QAAQ2B,GAAG,CAAC,CAAC,4CAA4C,CAAC;YAC5D;QACF,OAAO;YACL3B,QAAQC,IAAI,CAAC,CAAC,iEAAiE,CAAC;YAChF,IAAI,CAACC,eAAenB,KAAK,EAAEiB,QAAQC,IAAI,CAAC,CAAC,cAAc,EAAEC,eAAelB,KAAK,EAAE;YAC/E,IAAI,CAACmB,eAAepB,KAAK,EAAEiB,QAAQC,IAAI,CAAC,CAAC,cAAc,EAAEE,eAAenB,KAAK,EAAE;QACjF;IACF;IAEA,wEAAwE;IACxE,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAMsD,cAAc;QAClB;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA,MAAuB,yCAAyC;KACjE;IAED,kCAAkC;IAClC,MAAMH,MAA8B,CAAC;IAErC,gCAAgC;IAChC,KAAK,MAAMjB,OAAOoB,YAAa;QAC7B,MAAMnB,QAAQe,QAAQC,GAAG,CAACjB,IAAI;QAC9B,IAAIC,UAAUoB,WAAW;YACvBJ,GAAG,CAACjB,IAAI,GAAGC;QACb;IACF;IAEA,mEAAmE;IACnE,IAAIe,QAAQC,GAAG,CAACK,iBAAiB,EAAE;QACjC,wDAAwD;QACxD,IAAIN,QAAQC,GAAG,CAACK,iBAAiB,CAACC,KAAK,CAAC,uBAAuB;YAC7DN,IAAIK,iBAAiB,GAAGN,QAAQC,GAAG,CAACK,iBAAiB;QACvD,OAAO;YACLxC,QAAQC,IAAI,CAAC;QACf;IACF;IAEA,2CAA2C;IAC3CkC,IAAIO,UAAU,GAAG9B;IACjBuB,IAAIQ,OAAO,GAAG9D,UAAU;IACxBsD,IAAIS,SAAS,GAAGvB,WAAWS,cAAc;IACzCK,IAAIU,OAAO,GAAGvB,WAAW;IACzBa,IAAIW,IAAI,GAAGvB,QAAQ;IACnBY,IAAIY,QAAQ,GAAGvB,UAAUM,cAAc;IACvCK,IAAIa,cAAc,GAAGvB,gBAAgB;IAErC,4CAA4C;IAC5CU,IAAIc,YAAY,GAAGlB;IACnBI,IAAIe,aAAa,GAAGlB;IACpBG,IAAIgB,gBAAgB,GAAGlB;IAEvBjC,QAAQ2B,GAAG,CAAC,CAAC,2BAA2B,EAAEC,WAAWwB,IAAI,CAAC,MAAM;IAEhE,6CAA6C;IAC7C,MAAMC,eAAe3E,MAAM,OAAOkD,YAAY;QAC5C0B,OAAO;QACPnB;QACAoB,KAAKrB,QAAQqB,GAAG;IAClB;IAEA,sBAAsB;IACtBF,aAAaG,EAAE,CAAC,QAAQ,CAACC,MAAMC;QAC7B,IAAID,SAAS,GAAG;YACdzD,QAAQ2B,GAAG,CAAC,CAAC,kBAAkB,EAAEf,UAAU,uBAAuB,CAAC;QACrE,OAAO;YACLZ,QAAQhB,KAAK,CAAC,CAAC,kBAAkB,EAAE4B,UAAU,kBAAkB,EAAE6C,KAAK,SAAS,EAAEC,QAAQ;QAC3F;QACAxB,QAAQyB,IAAI,CAACF,QAAQ;IACvB;IAEA,wBAAwB;IACxBJ,aAAaG,EAAE,CAAC,SAAS,CAACI;QACxB5D,QAAQhB,KAAK,CAAC,CAAC,kCAAkC,EAAE4B,UAAU,CAAC,CAAC,EAAEgD,IAAIC,OAAO;QAC5E3B,QAAQyB,IAAI,CAAC;IACf;IAEA,yBAAyB;IACzBzB,QAAQsB,EAAE,CAAC,UAAU;QACnBxD,QAAQ2B,GAAG,CAAC;QACZ0B,aAAaS,IAAI,CAAC;IACpB;IAEA5B,QAAQsB,EAAE,CAAC,WAAW;QACpBxD,QAAQ2B,GAAG,CAAC;QACZ0B,aAAaS,IAAI,CAAC;IACpB;AACF;AAEA;;CAEC,GACD,OAAO,SAASC,qBACdnD,SAAiB,EACjB/B,MAAe,EACfwC,SAAkB,EAClBC,OAAgB;IAEhB,IAAI0C,OAAO,CAAC,gBAAgB,EAAEpD,UAAU,MAAM,CAAC;IAE/C,IAAI/B,QAAQmF,QAAQ,CAAC,UAAU,EAAEnF,QAAQ;IACzC,IAAIwC,cAAckB,WAAWyB,QAAQ,CAAC,YAAY,EAAE3C,UAAU,CAAC,CAAC;IAChE,IAAIC,SAAS0C,QAAQ,CAAC,EAAE,EAAE1C,SAAS;IAEnC,OAAO0C;AACT;AAEA;;CAEC,GACD,OAAO,eAAeC,KAAKtD,OAAiBuB,QAAQgC,IAAI,CAACpD,KAAK,CAAC,EAAE;IAC/D,yBAAyB;IACzB,IAAIH,KAAKwD,QAAQ,CAAC,aAAaxD,KAAKwD,QAAQ,CAAC,OAAO;QAClDnE,QAAQ2B,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;IAqBb,CAAC;QACD;IACF;IAEA,kBAAkB;IAClB,MAAMX,UAAUN,eAAeC;IAC/B,IAAI,CAACK,SAAS;QACZkB,QAAQyB,IAAI,CAAC;IACf;IAEA,kBAAkB;IAClB,MAAMjC,WAAWV;AACnB;AAEA,yBAAyB;AACzB,mEAAmE;AACnE,MAAMoD,eAAe,YAAYC,GAAG,CAACC,QAAQ,CAACpC,QAAQgC,IAAI,CAAC,EAAE,EAAEK,QAAQ,OAAO,QAAQ;AACtF,IAAIH,cAAc;IAChBH,OAAOO,KAAK,CAAC,CAACZ;QACZ5D,QAAQhB,KAAK,CAAC,4BAA4B4E;QAC1C1B,QAAQyB,IAAI,CAAC;IACf;AACF"}

package/dist/cli/tool-executor.js CHANGED Viewed

@@ -139,9 +139,11 @@ const execAsync = promisify(exec);
         return `Command started in background: ${command}`;
     }
     // Execute synchronously with timeout
+    // CRITICAL: Use /bin/bash instead of /bin/sh for [[ ]] support
     const { stdout, stderr } = await execAsync(command, {
         timeout: timeoutMs,
-        maxBuffer: 10 * 1024 * 1024 // 10MB buffer
+        maxBuffer: 10 * 1024 * 1024,
+        shell: '/bin/bash' // REQUIRED: Coordinator uses [[ ]] conditionals
     });
     return stdout + stderr;
 }

package/dist/cli/tool-executor.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/cli/tool-executor.ts"],"sourcesContent":["/*\r\n Tool Executor for CLI-Spawned Agents\r\n \r\n Executes tools requested by agents via Anthropic API tool_use blocks.\r\n * Implements Read, Write, Edit, Bash, TodoWrite, Glob, Grep.\r\n /\r\n\r\nimport fs from 'fs/promises';\r\nimport { exec } from 'child_process';\r\nimport { promisify } from 'util';\r\nimport { glob } from 'glob';\r\n\r\nconst execAsync = promisify(exec);\r\n\r\nexport interface ToolUse {\r\n type: 'tool_use';\r\n id: string;\r\n name: string;\r\n input: Record<string, any>;\r\n}\r\n\r\nexport interface ToolResult {\r\n type: 'tool_result';\r\n tool_use_id: string;\r\n content: string;\r\n is_error?: boolean;\r\n}\r\n\r\n/\r\n Execute a single tool and return result\r\n /\r\nexport async function executeTool(toolUse: ToolUse): Promise<ToolResult> {\r\n console.log(`[tool-executor] Executing tool: ${toolUse.name}`);\r\n console.log(`[tool-executor] Tool use ID: ${toolUse.id}`);\r\n\r\n try {\r\n let result: string;\r\n\r\n switch (toolUse.name) {\r\n case 'Read':\r\n result = await executeRead(toolUse.input);\r\n break;\r\n\r\n case 'Write':\r\n result = await executeWrite(toolUse.input);\r\n break;\r\n\r\n case 'Edit':\r\n result = await executeEdit(toolUse.input);\r\n break;\r\n\r\n case 'Bash':\r\n result = await executeBash(toolUse.input);\r\n break;\r\n\r\n case 'TodoWrite':\r\n result = await executeTodoWrite(toolUse.input);\r\n break;\r\n\r\n case 'Glob':\r\n result = await executeGlob(toolUse.input);\r\n break;\r\n\r\n case 'Grep':\r\n result = await executeGrep(toolUse.input);\r\n break;\r\n\r\n default:\r\n throw new Error(`Unknown tool: ${toolUse.name}`);\r\n }\r\n\r\n console.log(`[tool-executor] ✓ Tool executed successfully`);\r\n\r\n return {\r\n type: 'tool_result',\r\n tool_use_id: toolUse.id,\r\n content: result\r\n };\r\n } catch (error) {\r\n console.error(`[tool-executor] ✗ Tool execution failed:`, error);\r\n\r\n return {\r\n type: 'tool_result',\r\n tool_use_id: toolUse.id,\r\n content: error instanceof Error ? error.message : String(error),\r\n is_error: true\r\n };\r\n }\r\n}\r\n\r\n/\r\n Execute Read tool\r\n /\r\nasync function executeRead(input: Record<string, any>): Promise<string> {\r\n const { file_path, offset, limit } = input;\r\n\r\n if (!file_path) {\r\n throw new Error('file_path parameter is required');\r\n }\r\n\r\n const content = await fs.readFile(file_path, 'utf-8');\r\n const lines = content.split('\\n');\r\n\r\n // Apply offset and limit if provided\r\n const startLine = offset ? Number(offset) - 1 : 0;\r\n const endLine = limit ? startLine + Number(limit) : lines.length;\r\n const selectedLines = lines.slice(startLine, endLine);\r\n\r\n // Format with line numbers (cat -n style)\r\n const formatted = selectedLines\r\n .map((line, idx) => `${String(startLine + idx + 1).padStart(6)}→${line}`)\r\n .join('\\n');\r\n\r\n return formatted;\r\n}\r\n\r\n/\r\n Execute Write tool\r\n /\r\nasync function executeWrite(input: Record<string, any>): Promise<string> {\r\n const { file_path, content } = input;\r\n\r\n if (!file_path) {\r\n throw new Error('file_path parameter is required');\r\n }\r\n\r\n if (content === undefined) {\r\n throw new Error('content parameter is required');\r\n }\r\n\r\n await fs.writeFile(file_path, content, 'utf-8');\r\n\r\n return `File written successfully: ${file_path}`;\r\n}\r\n\r\n/\r\n Execute Edit tool\r\n /\r\nasync function executeEdit(input: Record<string, any>): Promise<string> {\r\n const { file_path, old_string, new_string, replace_all } = input;\r\n\r\n if (!file_path) {\r\n throw new Error('file_path parameter is required');\r\n }\r\n\r\n if (!old_string) {\r\n throw new Error('old_string parameter is required');\r\n }\r\n\r\n if (new_string === undefined) {\r\n throw new Error('new_string parameter is required');\r\n }\r\n\r\n // Read file\r\n const content = await fs.readFile(file_path, 'utf-8');\r\n\r\n // Perform replacement\r\n let newContent: string;\r\n if (replace_all) {\r\n // Replace all occurrences\r\n newContent = content.split(old_string).join(new_string);\r\n } else {\r\n // Replace first occurrence only (must be unique)\r\n const occurrences = content.split(old_string).length - 1;\r\n if (occurrences === 0) {\r\n throw new Error('old_string not found in file');\r\n }\r\n if (occurrences > 1) {\r\n throw new Error(`old_string appears ${occurrences} times. Must be unique or use replace_all: true`);\r\n }\r\n newContent = content.replace(old_string, new_string);\r\n }\r\n\r\n // Write back\r\n await fs.writeFile(file_path, newContent, 'utf-8');\r\n\r\n return `File edited successfully: ${file_path}`;\r\n}\r\n\r\n/\r\n Execute Bash tool\r\n /\r\nasync function executeBash(input: Record<string, any>): Promise<string> {\r\n const { command, timeout, run_in_background } = input;\r\n\r\n if (!command) {\r\n throw new Error('command parameter is required');\r\n }\r\n\r\n // DEBUG: Log bash command execution details\r\n console.log(`[tool-executor] Bash command: ${command}`);\r\n console.log(`[tool-executor] Timeout: ${timeout \|\| 120000}ms`);\r\n console.log(`[tool-executor] Background: ${run_in_background \|\| false}`);\r\n\r\n const timeoutMs = timeout ? Number(timeout) : 120000; // 2 minutes default\r\n\r\n if (run_in_background) {\r\n // Start background process and return immediately\r\n exec(command);\r\n return `Command started in background: ${command}`;\r\n }\r\n\r\n // Execute synchronously with timeout\r\n const { stdout, stderr } = await execAsync(command, {\r\n timeout: timeoutMs,\r\n maxBuffer: 10 1024 * 1024 // 10MB buffer\r\n });\r\n\r\n return stdout + stderr;\r\n}\r\n\r\n/*\r\n Execute TodoWrite tool\r\n /\r\nasync function executeTodoWrite(input: Record<string, any>): Promise<string> {\r\n const { todos } = input;\r\n\r\n if (!Array.isArray(todos)) {\r\n throw new Error('todos parameter must be an array');\r\n }\r\n\r\n // Validate todo structure\r\n for (const todo of todos) {\r\n if (!todo.content \|\| !todo.status \|\| !todo.activeForm) {\r\n throw new Error('Each todo must have content, status, and activeForm');\r\n }\r\n if (!['pending', 'in_progress', 'completed'].includes(todo.status)) {\r\n throw new Error('Invalid status. Must be pending, in_progress, or completed');\r\n }\r\n }\r\n\r\n // Format todos for display\r\n const formatted = todos\r\n .map((todo, idx) => {\r\n const status = todo.status === 'completed' ? '✓' : todo.status === 'in_progress' ? '⚡' : '○';\r\n return `${idx + 1}. [${status}] ${todo.content}`;\r\n })\r\n .join('\\n');\r\n\r\n return `Todo list updated:\\n${formatted}`;\r\n}\r\n\r\n/\r\n Execute Glob tool\r\n /\r\nasync function executeGlob(input: Record<string, any>): Promise<string> {\r\n const { pattern, path } = input;\r\n\r\n if (!pattern) {\r\n throw new Error('pattern parameter is required');\r\n }\r\n\r\n const cwd = path \|\| process.cwd();\r\n const files = await glob(pattern, { cwd, nodir: true });\r\n\r\n if (files.length === 0) {\r\n return 'No files found';\r\n }\r\n\r\n return files.join('\\n');\r\n}\r\n\r\n/\r\n Execute Grep tool\r\n /\r\nasync function executeGrep(input: Record<string, any>): Promise<string> {\r\n const { pattern, path, output_mode, glob: globPattern, type } = input;\r\n\r\n if (!pattern) {\r\n throw new Error('pattern parameter is required');\r\n }\r\n\r\n // Build ripgrep command\r\n const args: string[] = ['rg'];\r\n\r\n // Output mode\r\n if (output_mode === 'files_with_matches' \|\| !output_mode) {\r\n args.push('-l'); // List files with matches\r\n } else if (output_mode === 'count') {\r\n args.push('-c'); // Count matches per file\r\n }\r\n // Default is content (no flag)\r\n\r\n // Optional flags\r\n if (input['-i']) args.push('-i'); // Case insensitive\r\n if (input['-n']) args.push('-n'); // Line numbers\r\n if (input['-A']) args.push(`-A${input['-A']}`); // After context\r\n if (input['-B']) args.push(`-B${input['-B']}`); // Before context\r\n if (input['-C']) args.push(`-C${input['-C']}`); // Context\r\n\r\n // File filtering\r\n if (globPattern) args.push('--glob', globPattern);\r\n if (type) args.push('--type', type);\r\n\r\n // Pattern and path\r\n args.push(pattern);\r\n if (path) args.push(path);\r\n\r\n const command = args.join(' ');\r\n\r\n try {\r\n const { stdout } = await execAsync(command, {\r\n maxBuffer: 10 1024 * 1024 // 10MB buffer\r\n });\r\n return stdout \|\| 'No matches found';\r\n } catch (error: any) {\r\n // ripgrep exits with code 1 if no matches found\r\n if (error.code === 1) {\r\n return 'No matches found';\r\n }\r\n throw error;\r\n }\r\n}\r\n\r\n/*\r\n Execute multiple tools in sequence\r\n */\r\nexport async function executeTools(toolUses: ToolUse[]): Promise<ToolResult[]> {\r\n const results: ToolResult[] = [];\r\n\r\n for (const toolUse of toolUses) {\r\n const result = await executeTool(toolUse);\r\n results.push(result);\r\n }\r\n\r\n return results;\r\n}\r\n"],"names":["fs","exec","promisify","glob","execAsync","executeTool","toolUse","console","log","name","id","result","executeRead","input","executeWrite","executeEdit","executeBash","executeTodoWrite","executeGlob","executeGrep","Error","type","tool_use_id","content","error","message","String","is_error","file_path","offset","limit","readFile","lines","split","startLine","Number","endLine","length","selectedLines","slice","formatted","map","line","idx","padStart","join","undefined","writeFile","old_string","new_string","replace_all","newContent","occurrences","replace","command","timeout","run_in_background","timeoutMs","stdout","stderr","maxBuffer","todos","Array","isArray","todo","status","activeForm","includes","pattern","path","cwd","process","files","nodir","output_mode","globPattern","args","push","code","executeTools","toolUses","results"],"mappings":"AAAA;;;;;CAKC,GAED,OAAOA,QAAQ,cAAc;AAC7B,SAASC,IAAI,QAAQ,gBAAgB;AACrC,SAASC,SAAS,QAAQ,OAAO;AACjC,SAASC,IAAI,QAAQ,OAAO;AAE5B,MAAMC,YAAYF,UAAUD;AAgB5B;;CAEC,GACD,OAAO,eAAeI,YAAYC,OAAgB;IAChDC,QAAQC,GAAG,CAAC,CAAC,gCAAgC,EAAEF,QAAQG,IAAI,EAAE;IAC7DF,QAAQC,GAAG,CAAC,CAAC,6BAA6B,EAAEF,QAAQI,EAAE,EAAE;IAExD,IAAI;QACF,IAAIC;QAEJ,OAAQL,QAAQG,IAAI;YAClB,KAAK;gBACHE,SAAS,MAAMC,YAAYN,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMG,aAAaR,QAAQO,KAAK;gBACzC;YAEF,KAAK;gBACHF,SAAS,MAAMI,YAAYT,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMK,YAAYV,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMM,iBAAiBX,QAAQO,KAAK;gBAC7C;YAEF,KAAK;gBACHF,SAAS,MAAMO,YAAYZ,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMQ,YAAYb,QAAQO,KAAK;gBACxC;YAEF;gBACE,MAAM,IAAIO,MAAM,CAAC,cAAc,EAAEd,QAAQG,IAAI,EAAE;QACnD;QAEAF,QAAQC,GAAG,CAAC,CAAC,4CAA4C,CAAC;QAE1D,OAAO;YACLa,MAAM;YACNC,aAAahB,QAAQI,EAAE;YACvBa,SAASZ;QACX;IACF,EAAE,OAAOa,OAAO;QACdjB,QAAQiB,KAAK,CAAC,CAAC,wCAAwC,CAAC,EAAEA;QAE1D,OAAO;YACLH,MAAM;YACNC,aAAahB,QAAQI,EAAE;YACvBa,SAASC,iBAAiBJ,QAAQI,MAAMC,OAAO,GAAGC,OAAOF;YACzDG,UAAU;QACZ;IACF;AACF;AAEA;;CAEC,GACD,eAAef,YAAYC,KAA0B;IACnD,MAAM,EAAEe,SAAS,EAAEC,MAAM,EAAEC,KAAK,EAAE,GAAGjB;IAErC,IAAI,CAACe,WAAW;QACd,MAAM,IAAIR,MAAM;IAClB;IAEA,MAAMG,UAAU,MAAMvB,GAAG+B,QAAQ,CAACH,WAAW;IAC7C,MAAMI,QAAQT,QAAQU,KAAK,CAAC;IAE5B,qCAAqC;IACrC,MAAMC,YAAYL,SAASM,OAAON,UAAU,IAAI;IAChD,MAAMO,UAAUN,QAAQI,YAAYC,OAAOL,SAASE,MAAMK,MAAM;IAChE,MAAMC,gBAAgBN,MAAMO,KAAK,CAACL,WAAWE;IAE7C,0CAA0C;IAC1C,MAAMI,YAAYF,cACfG,GAAG,CAAC,CAACC,MAAMC,MAAQ,GAAGjB,OAAOQ,YAAYS,MAAM,GAAGC,QAAQ,CAAC,GAAG,CAAC,EAAEF,MAAM,EACvEG,IAAI,CAAC;IAER,OAAOL;AACT;AAEA;;CAEC,GACD,eAAe1B,aAAaD,KAA0B;IACpD,MAAM,EAAEe,SAAS,EAAEL,OAAO,EAAE,GAAGV;IAE/B,IAAI,CAACe,WAAW;QACd,MAAM,IAAIR,MAAM;IAClB;IAEA,IAAIG,YAAYuB,WAAW;QACzB,MAAM,IAAI1B,MAAM;IAClB;IAEA,MAAMpB,GAAG+C,SAAS,CAACnB,WAAWL,SAAS;IAEvC,OAAO,CAAC,2BAA2B,EAAEK,WAAW;AAClD;AAEA;;CAEC,GACD,eAAeb,YAAYF,KAA0B;IACnD,MAAM,EAAEe,SAAS,EAAEoB,UAAU,EAAEC,UAAU,EAAEC,WAAW,EAAE,GAAGrC;IAE3D,IAAI,CAACe,WAAW;QACd,MAAM,IAAIR,MAAM;IAClB;IAEA,IAAI,CAAC4B,YAAY;QACf,MAAM,IAAI5B,MAAM;IAClB;IAEA,IAAI6B,eAAeH,WAAW;QAC5B,MAAM,IAAI1B,MAAM;IAClB;IAEA,YAAY;IACZ,MAAMG,UAAU,MAAMvB,GAAG+B,QAAQ,CAACH,WAAW;IAE7C,sBAAsB;IACtB,IAAIuB;IACJ,IAAID,aAAa;QACf,0BAA0B;QAC1BC,aAAa5B,QAAQU,KAAK,CAACe,YAAYH,IAAI,CAACI;IAC9C,OAAO;QACL,iDAAiD;QACjD,MAAMG,cAAc7B,QAAQU,KAAK,CAACe,YAAYX,MAAM,GAAG;QACvD,IAAIe,gBAAgB,GAAG;YACrB,MAAM,IAAIhC,MAAM;QAClB;QACA,IAAIgC,cAAc,GAAG;YACnB,MAAM,IAAIhC,MAAM,CAAC,mBAAmB,EAAEgC,YAAY,+CAA+C,CAAC;QACpG;QACAD,aAAa5B,QAAQ8B,OAAO,CAACL,YAAYC;IAC3C;IAEA,aAAa;IACb,MAAMjD,GAAG+C,SAAS,CAACnB,WAAWuB,YAAY;IAE1C,OAAO,CAAC,0BAA0B,EAAEvB,WAAW;AACjD;AAEA;;CAEC,GACD,eAAeZ,YAAYH,KAA0B;IACnD,MAAM,EAAEyC,OAAO,EAAEC,OAAO,EAAEC,iBAAiB,EAAE,GAAG3C;IAEhD,IAAI,CAACyC,SAAS;QACZ,MAAM,IAAIlC,MAAM;IAClB;IAEA,4CAA4C;IAC5Cb,QAAQC,GAAG,CAAC,CAAC,8BAA8B,EAAE8C,SAAS;IACtD/C,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAE+C,WAAW,OAAO,EAAE,CAAC;IAC7DhD,QAAQC,GAAG,CAAC,CAAC,4BAA4B,EAAEgD,qBAAqB,OAAO;IAEvE,MAAMC,YAAYF,UAAUpB,OAAOoB,WAAW,QAAQ,oBAAoB;IAE1E,IAAIC,mBAAmB;QACrB,kDAAkD;QAClDvD,KAAKqD;QACL,OAAO,CAAC,+BAA+B,EAAEA,SAAS;IACpD;IAEA,qCAAqC;IACrC,MAAM,EAAEI,MAAM,EAAEC,MAAM,EAAE,GAAG,MAAMvD,UAAUkD,SAAS;QAClDC,SAASE;QACTG,WAAW,KAAK,OAAO,KAAK,cAAc;IAC5C;IAEA,OAAOF,SAASC;AAClB;AAEA;;CAEC,GACD,eAAe1C,iBAAiBJ,KAA0B;IACxD,MAAM,EAAEgD,KAAK,EAAE,GAAGhD;IAElB,IAAI,CAACiD,MAAMC,OAAO,CAACF,QAAQ;QACzB,MAAM,IAAIzC,MAAM;IAClB;IAEA,0BAA0B;IAC1B,KAAK,MAAM4C,QAAQH,MAAO;QACxB,IAAI,CAACG,KAAKzC,OAAO,IAAI,CAACyC,KAAKC,MAAM,IAAI,CAACD,KAAKE,UAAU,EAAE;YACrD,MAAM,IAAI9C,MAAM;QAClB;QACA,IAAI,CAAC;YAAC;YAAW;YAAe;SAAY,CAAC+C,QAAQ,CAACH,KAAKC,MAAM,GAAG;YAClE,MAAM,IAAI7C,MAAM;QAClB;IACF;IAEA,2BAA2B;IAC3B,MAAMoB,YAAYqB,MACfpB,GAAG,CAAC,CAACuB,MAAMrB;QACV,MAAMsB,SAASD,KAAKC,MAAM,KAAK,cAAc,MAAMD,KAAKC,MAAM,KAAK,gBAAgB,MAAM;QACzF,OAAO,GAAGtB,MAAM,EAAE,GAAG,EAAEsB,OAAO,EAAE,EAAED,KAAKzC,OAAO,EAAE;IAClD,GACCsB,IAAI,CAAC;IAER,OAAO,CAAC,oBAAoB,EAAEL,WAAW;AAC3C;AAEA;;CAEC,GACD,eAAetB,YAAYL,KAA0B;IACnD,MAAM,EAAEuD,OAAO,EAAEC,IAAI,EAAE,GAAGxD;IAE1B,IAAI,CAACuD,SAAS;QACZ,MAAM,IAAIhD,MAAM;IAClB;IAEA,MAAMkD,MAAMD,QAAQE,QAAQD,GAAG;IAC/B,MAAME,QAAQ,MAAMrE,KAAKiE,SAAS;QAAEE;QAAKG,OAAO;IAAK;IAErD,IAAID,MAAMnC,MAAM,KAAK,GAAG;QACtB,OAAO;IACT;IAEA,OAAOmC,MAAM3B,IAAI,CAAC;AACpB;AAEA;;CAEC,GACD,eAAe1B,YAAYN,KAA0B;IACnD,MAAM,EAAEuD,OAAO,EAAEC,IAAI,EAAEK,WAAW,EAAEvE,MAAMwE,WAAW,EAAEtD,IAAI,EAAE,GAAGR;IAEhE,IAAI,CAACuD,SAAS;QACZ,MAAM,IAAIhD,MAAM;IAClB;IAEA,wBAAwB;IACxB,MAAMwD,OAAiB;QAAC;KAAK;IAE7B,cAAc;IACd,IAAIF,gBAAgB,wBAAwB,CAACA,aAAa;QACxDE,KAAKC,IAAI,CAAC,OAAO,0BAA0B;IAC7C,OAAO,IAAIH,gBAAgB,SAAS;QAClCE,KAAKC,IAAI,CAAC,OAAO,yBAAyB;IAC5C;IACA,+BAA+B;IAE/B,iBAAiB;IACjB,IAAIhE,KAAK,CAAC,KAAK,EAAE+D,KAAKC,IAAI,CAAC,OAAO,mBAAmB;IACrD,IAAIhE,KAAK,CAAC,KAAK,EAAE+D,KAAKC,IAAI,CAAC,OAAO,eAAe;IACjD,IAAIhE,KAAK,CAAC,KAAK,EAAE+D,KAAKC,IAAI,CAAC,CAAC,EAAE,EAAEhE,KAAK,CAAC,KAAK,EAAE,GAAG,gBAAgB;IAChE,IAAIA,KAAK,CAAC,KAAK,EAAE+D,KAAKC,IAAI,CAAC,CAAC,EAAE,EAAEhE,KAAK,CAAC,KAAK,EAAE,GAAG,iBAAiB;IACjE,IAAIA,KAAK,CAAC,KAAK,EAAE+D,KAAKC,IAAI,CAAC,CAAC,EAAE,EAAEhE,KAAK,CAAC,KAAK,EAAE,GAAG,UAAU;IAE1D,iBAAiB;IACjB,IAAI8D,aAAaC,KAAKC,IAAI,CAAC,UAAUF;IACrC,IAAItD,MAAMuD,KAAKC,IAAI,CAAC,UAAUxD;IAE9B,mBAAmB;IACnBuD,KAAKC,IAAI,CAACT;IACV,IAAIC,MAAMO,KAAKC,IAAI,CAACR;IAEpB,MAAMf,UAAUsB,KAAK/B,IAAI,CAAC;IAE1B,IAAI;QACF,MAAM,EAAEa,MAAM,EAAE,GAAG,MAAMtD,UAAUkD,SAAS;YAC1CM,WAAW,KAAK,OAAO,KAAK,cAAc;QAC5C;QACA,OAAOF,UAAU;IACnB,EAAE,OAAOlC,OAAY;QACnB,gDAAgD;QAChD,IAAIA,MAAMsD,IAAI,KAAK,GAAG;YACpB,OAAO;QACT;QACA,MAAMtD;IACR;AACF;AAEA;;CAEC,GACD,OAAO,eAAeuD,aAAaC,QAAmB;IACpD,MAAMC,UAAwB,EAAE;IAEhC,KAAK,MAAM3E,WAAW0E,SAAU;QAC9B,MAAMrE,SAAS,MAAMN,YAAYC;QACjC2E,QAAQJ,IAAI,CAAClE;IACf;IAEA,OAAOsE;AACT"}
1	+ {"version":3,"sources":["../../src/cli/tool-executor.ts"],"sourcesContent":["/*\r\n Tool Executor for CLI-Spawned Agents\r\n \r\n Executes tools requested by agents via Anthropic API tool_use blocks.\r\n * Implements Read, Write, Edit, Bash, TodoWrite, Glob, Grep.\r\n /\r\n\r\nimport fs from 'fs/promises';\r\nimport { exec } from 'child_process';\r\nimport { promisify } from 'util';\r\nimport { glob } from 'glob';\r\n\r\nconst execAsync = promisify(exec);\r\n\r\nexport interface ToolUse {\r\n type: 'tool_use';\r\n id: string;\r\n name: string;\r\n input: Record<string, any>;\r\n}\r\n\r\nexport interface ToolResult {\r\n type: 'tool_result';\r\n tool_use_id: string;\r\n content: string;\r\n is_error?: boolean;\r\n}\r\n\r\n/\r\n Execute a single tool and return result\r\n /\r\nexport async function executeTool(toolUse: ToolUse): Promise<ToolResult> {\r\n console.log(`[tool-executor] Executing tool: ${toolUse.name}`);\r\n console.log(`[tool-executor] Tool use ID: ${toolUse.id}`);\r\n\r\n try {\r\n let result: string;\r\n\r\n switch (toolUse.name) {\r\n case 'Read':\r\n result = await executeRead(toolUse.input);\r\n break;\r\n\r\n case 'Write':\r\n result = await executeWrite(toolUse.input);\r\n break;\r\n\r\n case 'Edit':\r\n result = await executeEdit(toolUse.input);\r\n break;\r\n\r\n case 'Bash':\r\n result = await executeBash(toolUse.input);\r\n break;\r\n\r\n case 'TodoWrite':\r\n result = await executeTodoWrite(toolUse.input);\r\n break;\r\n\r\n case 'Glob':\r\n result = await executeGlob(toolUse.input);\r\n break;\r\n\r\n case 'Grep':\r\n result = await executeGrep(toolUse.input);\r\n break;\r\n\r\n default:\r\n throw new Error(`Unknown tool: ${toolUse.name}`);\r\n }\r\n\r\n console.log(`[tool-executor] ✓ Tool executed successfully`);\r\n\r\n return {\r\n type: 'tool_result',\r\n tool_use_id: toolUse.id,\r\n content: result\r\n };\r\n } catch (error) {\r\n console.error(`[tool-executor] ✗ Tool execution failed:`, error);\r\n\r\n return {\r\n type: 'tool_result',\r\n tool_use_id: toolUse.id,\r\n content: error instanceof Error ? error.message : String(error),\r\n is_error: true\r\n };\r\n }\r\n}\r\n\r\n/\r\n Execute Read tool\r\n /\r\nasync function executeRead(input: Record<string, any>): Promise<string> {\r\n const { file_path, offset, limit } = input;\r\n\r\n if (!file_path) {\r\n throw new Error('file_path parameter is required');\r\n }\r\n\r\n const content = await fs.readFile(file_path, 'utf-8');\r\n const lines = content.split('\\n');\r\n\r\n // Apply offset and limit if provided\r\n const startLine = offset ? Number(offset) - 1 : 0;\r\n const endLine = limit ? startLine + Number(limit) : lines.length;\r\n const selectedLines = lines.slice(startLine, endLine);\r\n\r\n // Format with line numbers (cat -n style)\r\n const formatted = selectedLines\r\n .map((line, idx) => `${String(startLine + idx + 1).padStart(6)}→${line}`)\r\n .join('\\n');\r\n\r\n return formatted;\r\n}\r\n\r\n/\r\n Execute Write tool\r\n /\r\nasync function executeWrite(input: Record<string, any>): Promise<string> {\r\n const { file_path, content } = input;\r\n\r\n if (!file_path) {\r\n throw new Error('file_path parameter is required');\r\n }\r\n\r\n if (content === undefined) {\r\n throw new Error('content parameter is required');\r\n }\r\n\r\n await fs.writeFile(file_path, content, 'utf-8');\r\n\r\n return `File written successfully: ${file_path}`;\r\n}\r\n\r\n/\r\n Execute Edit tool\r\n /\r\nasync function executeEdit(input: Record<string, any>): Promise<string> {\r\n const { file_path, old_string, new_string, replace_all } = input;\r\n\r\n if (!file_path) {\r\n throw new Error('file_path parameter is required');\r\n }\r\n\r\n if (!old_string) {\r\n throw new Error('old_string parameter is required');\r\n }\r\n\r\n if (new_string === undefined) {\r\n throw new Error('new_string parameter is required');\r\n }\r\n\r\n // Read file\r\n const content = await fs.readFile(file_path, 'utf-8');\r\n\r\n // Perform replacement\r\n let newContent: string;\r\n if (replace_all) {\r\n // Replace all occurrences\r\n newContent = content.split(old_string).join(new_string);\r\n } else {\r\n // Replace first occurrence only (must be unique)\r\n const occurrences = content.split(old_string).length - 1;\r\n if (occurrences === 0) {\r\n throw new Error('old_string not found in file');\r\n }\r\n if (occurrences > 1) {\r\n throw new Error(`old_string appears ${occurrences} times. Must be unique or use replace_all: true`);\r\n }\r\n newContent = content.replace(old_string, new_string);\r\n }\r\n\r\n // Write back\r\n await fs.writeFile(file_path, newContent, 'utf-8');\r\n\r\n return `File edited successfully: ${file_path}`;\r\n}\r\n\r\n/\r\n Execute Bash tool\r\n /\r\nasync function executeBash(input: Record<string, any>): Promise<string> {\r\n const { command, timeout, run_in_background } = input;\r\n\r\n if (!command) {\r\n throw new Error('command parameter is required');\r\n }\r\n\r\n // DEBUG: Log bash command execution details\r\n console.log(`[tool-executor] Bash command: ${command}`);\r\n console.log(`[tool-executor] Timeout: ${timeout \|\| 120000}ms`);\r\n console.log(`[tool-executor] Background: ${run_in_background \|\| false}`);\r\n\r\n const timeoutMs = timeout ? Number(timeout) : 120000; // 2 minutes default\r\n\r\n if (run_in_background) {\r\n // Start background process and return immediately\r\n exec(command);\r\n return `Command started in background: ${command}`;\r\n }\r\n\r\n // Execute synchronously with timeout\r\n // CRITICAL: Use /bin/bash instead of /bin/sh for [[ ]] support\r\n const { stdout, stderr } = await execAsync(command, {\r\n timeout: timeoutMs,\r\n maxBuffer: 10 1024 * 1024, // 10MB buffer\r\n shell: '/bin/bash' // REQUIRED: Coordinator uses [[ ]] conditionals\r\n });\r\n\r\n return stdout + stderr;\r\n}\r\n\r\n/*\r\n Execute TodoWrite tool\r\n /\r\nasync function executeTodoWrite(input: Record<string, any>): Promise<string> {\r\n const { todos } = input;\r\n\r\n if (!Array.isArray(todos)) {\r\n throw new Error('todos parameter must be an array');\r\n }\r\n\r\n // Validate todo structure\r\n for (const todo of todos) {\r\n if (!todo.content \|\| !todo.status \|\| !todo.activeForm) {\r\n throw new Error('Each todo must have content, status, and activeForm');\r\n }\r\n if (!['pending', 'in_progress', 'completed'].includes(todo.status)) {\r\n throw new Error('Invalid status. Must be pending, in_progress, or completed');\r\n }\r\n }\r\n\r\n // Format todos for display\r\n const formatted = todos\r\n .map((todo, idx) => {\r\n const status = todo.status === 'completed' ? '✓' : todo.status === 'in_progress' ? '⚡' : '○';\r\n return `${idx + 1}. [${status}] ${todo.content}`;\r\n })\r\n .join('\\n');\r\n\r\n return `Todo list updated:\\n${formatted}`;\r\n}\r\n\r\n/\r\n Execute Glob tool\r\n /\r\nasync function executeGlob(input: Record<string, any>): Promise<string> {\r\n const { pattern, path } = input;\r\n\r\n if (!pattern) {\r\n throw new Error('pattern parameter is required');\r\n }\r\n\r\n const cwd = path \|\| process.cwd();\r\n const files = await glob(pattern, { cwd, nodir: true });\r\n\r\n if (files.length === 0) {\r\n return 'No files found';\r\n }\r\n\r\n return files.join('\\n');\r\n}\r\n\r\n/\r\n Execute Grep tool\r\n /\r\nasync function executeGrep(input: Record<string, any>): Promise<string> {\r\n const { pattern, path, output_mode, glob: globPattern, type } = input;\r\n\r\n if (!pattern) {\r\n throw new Error('pattern parameter is required');\r\n }\r\n\r\n // Build ripgrep command\r\n const args: string[] = ['rg'];\r\n\r\n // Output mode\r\n if (output_mode === 'files_with_matches' \|\| !output_mode) {\r\n args.push('-l'); // List files with matches\r\n } else if (output_mode === 'count') {\r\n args.push('-c'); // Count matches per file\r\n }\r\n // Default is content (no flag)\r\n\r\n // Optional flags\r\n if (input['-i']) args.push('-i'); // Case insensitive\r\n if (input['-n']) args.push('-n'); // Line numbers\r\n if (input['-A']) args.push(`-A${input['-A']}`); // After context\r\n if (input['-B']) args.push(`-B${input['-B']}`); // Before context\r\n if (input['-C']) args.push(`-C${input['-C']}`); // Context\r\n\r\n // File filtering\r\n if (globPattern) args.push('--glob', globPattern);\r\n if (type) args.push('--type', type);\r\n\r\n // Pattern and path\r\n args.push(pattern);\r\n if (path) args.push(path);\r\n\r\n const command = args.join(' ');\r\n\r\n try {\r\n const { stdout } = await execAsync(command, {\r\n maxBuffer: 10 1024 * 1024 // 10MB buffer\r\n });\r\n return stdout \|\| 'No matches found';\r\n } catch (error: any) {\r\n // ripgrep exits with code 1 if no matches found\r\n if (error.code === 1) {\r\n return 'No matches found';\r\n }\r\n throw error;\r\n }\r\n}\r\n\r\n/*\r\n Execute multiple tools in sequence\r\n */\r\nexport async function executeTools(toolUses: ToolUse[]): Promise<ToolResult[]> {\r\n const results: ToolResult[] = [];\r\n\r\n for (const toolUse of toolUses) {\r\n const result = await executeTool(toolUse);\r\n results.push(result);\r\n }\r\n\r\n return results;\r\n}\r\n"],"names":["fs","exec","promisify","glob","execAsync","executeTool","toolUse","console","log","name","id","result","executeRead","input","executeWrite","executeEdit","executeBash","executeTodoWrite","executeGlob","executeGrep","Error","type","tool_use_id","content","error","message","String","is_error","file_path","offset","limit","readFile","lines","split","startLine","Number","endLine","length","selectedLines","slice","formatted","map","line","idx","padStart","join","undefined","writeFile","old_string","new_string","replace_all","newContent","occurrences","replace","command","timeout","run_in_background","timeoutMs","stdout","stderr","maxBuffer","shell","todos","Array","isArray","todo","status","activeForm","includes","pattern","path","cwd","process","files","nodir","output_mode","globPattern","args","push","code","executeTools","toolUses","results"],"mappings":"AAAA;;;;;CAKC,GAED,OAAOA,QAAQ,cAAc;AAC7B,SAASC,IAAI,QAAQ,gBAAgB;AACrC,SAASC,SAAS,QAAQ,OAAO;AACjC,SAASC,IAAI,QAAQ,OAAO;AAE5B,MAAMC,YAAYF,UAAUD;AAgB5B;;CAEC,GACD,OAAO,eAAeI,YAAYC,OAAgB;IAChDC,QAAQC,GAAG,CAAC,CAAC,gCAAgC,EAAEF,QAAQG,IAAI,EAAE;IAC7DF,QAAQC,GAAG,CAAC,CAAC,6BAA6B,EAAEF,QAAQI,EAAE,EAAE;IAExD,IAAI;QACF,IAAIC;QAEJ,OAAQL,QAAQG,IAAI;YAClB,KAAK;gBACHE,SAAS,MAAMC,YAAYN,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMG,aAAaR,QAAQO,KAAK;gBACzC;YAEF,KAAK;gBACHF,SAAS,MAAMI,YAAYT,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMK,YAAYV,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMM,iBAAiBX,QAAQO,KAAK;gBAC7C;YAEF,KAAK;gBACHF,SAAS,MAAMO,YAAYZ,QAAQO,KAAK;gBACxC;YAEF,KAAK;gBACHF,SAAS,MAAMQ,YAAYb,QAAQO,KAAK;gBACxC;YAEF;gBACE,MAAM,IAAIO,MAAM,CAAC,cAAc,EAAEd,QAAQG,IAAI,EAAE;QACnD;QAEAF,QAAQC,GAAG,CAAC,CAAC,4CAA4C,CAAC;QAE1D,OAAO;YACLa,MAAM;YACNC,aAAahB,QAAQI,EAAE;YACvBa,SAASZ;QACX;IACF,EAAE,OAAOa,OAAO;QACdjB,QAAQiB,KAAK,CAAC,CAAC,wCAAwC,CAAC,EAAEA;QAE1D,OAAO;YACLH,MAAM;YACNC,aAAahB,QAAQI,EAAE;YACvBa,SAASC,iBAAiBJ,QAAQI,MAAMC,OAAO,GAAGC,OAAOF;YACzDG,UAAU;QACZ;IACF;AACF;AAEA;;CAEC,GACD,eAAef,YAAYC,KAA0B;IACnD,MAAM,EAAEe,SAAS,EAAEC,MAAM,EAAEC,KAAK,EAAE,GAAGjB;IAErC,IAAI,CAACe,WAAW;QACd,MAAM,IAAIR,MAAM;IAClB;IAEA,MAAMG,UAAU,MAAMvB,GAAG+B,QAAQ,CAACH,WAAW;IAC7C,MAAMI,QAAQT,QAAQU,KAAK,CAAC;IAE5B,qCAAqC;IACrC,MAAMC,YAAYL,SAASM,OAAON,UAAU,IAAI;IAChD,MAAMO,UAAUN,QAAQI,YAAYC,OAAOL,SAASE,MAAMK,MAAM;IAChE,MAAMC,gBAAgBN,MAAMO,KAAK,CAACL,WAAWE;IAE7C,0CAA0C;IAC1C,MAAMI,YAAYF,cACfG,GAAG,CAAC,CAACC,MAAMC,MAAQ,GAAGjB,OAAOQ,YAAYS,MAAM,GAAGC,QAAQ,CAAC,GAAG,CAAC,EAAEF,MAAM,EACvEG,IAAI,CAAC;IAER,OAAOL;AACT;AAEA;;CAEC,GACD,eAAe1B,aAAaD,KAA0B;IACpD,MAAM,EAAEe,SAAS,EAAEL,OAAO,EAAE,GAAGV;IAE/B,IAAI,CAACe,WAAW;QACd,MAAM,IAAIR,MAAM;IAClB;IAEA,IAAIG,YAAYuB,WAAW;QACzB,MAAM,IAAI1B,MAAM;IAClB;IAEA,MAAMpB,GAAG+C,SAAS,CAACnB,WAAWL,SAAS;IAEvC,OAAO,CAAC,2BAA2B,EAAEK,WAAW;AAClD;AAEA;;CAEC,GACD,eAAeb,YAAYF,KAA0B;IACnD,MAAM,EAAEe,SAAS,EAAEoB,UAAU,EAAEC,UAAU,EAAEC,WAAW,EAAE,GAAGrC;IAE3D,IAAI,CAACe,WAAW;QACd,MAAM,IAAIR,MAAM;IAClB;IAEA,IAAI,CAAC4B,YAAY;QACf,MAAM,IAAI5B,MAAM;IAClB;IAEA,IAAI6B,eAAeH,WAAW;QAC5B,MAAM,IAAI1B,MAAM;IAClB;IAEA,YAAY;IACZ,MAAMG,UAAU,MAAMvB,GAAG+B,QAAQ,CAACH,WAAW;IAE7C,sBAAsB;IACtB,IAAIuB;IACJ,IAAID,aAAa;QACf,0BAA0B;QAC1BC,aAAa5B,QAAQU,KAAK,CAACe,YAAYH,IAAI,CAACI;IAC9C,OAAO;QACL,iDAAiD;QACjD,MAAMG,cAAc7B,QAAQU,KAAK,CAACe,YAAYX,MAAM,GAAG;QACvD,IAAIe,gBAAgB,GAAG;YACrB,MAAM,IAAIhC,MAAM;QAClB;QACA,IAAIgC,cAAc,GAAG;YACnB,MAAM,IAAIhC,MAAM,CAAC,mBAAmB,EAAEgC,YAAY,+CAA+C,CAAC;QACpG;QACAD,aAAa5B,QAAQ8B,OAAO,CAACL,YAAYC;IAC3C;IAEA,aAAa;IACb,MAAMjD,GAAG+C,SAAS,CAACnB,WAAWuB,YAAY;IAE1C,OAAO,CAAC,0BAA0B,EAAEvB,WAAW;AACjD;AAEA;;CAEC,GACD,eAAeZ,YAAYH,KAA0B;IACnD,MAAM,EAAEyC,OAAO,EAAEC,OAAO,EAAEC,iBAAiB,EAAE,GAAG3C;IAEhD,IAAI,CAACyC,SAAS;QACZ,MAAM,IAAIlC,MAAM;IAClB;IAEA,4CAA4C;IAC5Cb,QAAQC,GAAG,CAAC,CAAC,8BAA8B,EAAE8C,SAAS;IACtD/C,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAE+C,WAAW,OAAO,EAAE,CAAC;IAC7DhD,QAAQC,GAAG,CAAC,CAAC,4BAA4B,EAAEgD,qBAAqB,OAAO;IAEvE,MAAMC,YAAYF,UAAUpB,OAAOoB,WAAW,QAAQ,oBAAoB;IAE1E,IAAIC,mBAAmB;QACrB,kDAAkD;QAClDvD,KAAKqD;QACL,OAAO,CAAC,+BAA+B,EAAEA,SAAS;IACpD;IAEA,qCAAqC;IACrC,+DAA+D;IAC/D,MAAM,EAAEI,MAAM,EAAEC,MAAM,EAAE,GAAG,MAAMvD,UAAUkD,SAAS;QAClDC,SAASE;QACTG,WAAW,KAAK,OAAO;QACvBC,OAAO,YAAY,gDAAgD;IACrE;IAEA,OAAOH,SAASC;AAClB;AAEA;;CAEC,GACD,eAAe1C,iBAAiBJ,KAA0B;IACxD,MAAM,EAAEiD,KAAK,EAAE,GAAGjD;IAElB,IAAI,CAACkD,MAAMC,OAAO,CAACF,QAAQ;QACzB,MAAM,IAAI1C,MAAM;IAClB;IAEA,0BAA0B;IAC1B,KAAK,MAAM6C,QAAQH,MAAO;QACxB,IAAI,CAACG,KAAK1C,OAAO,IAAI,CAAC0C,KAAKC,MAAM,IAAI,CAACD,KAAKE,UAAU,EAAE;YACrD,MAAM,IAAI/C,MAAM;QAClB;QACA,IAAI,CAAC;YAAC;YAAW;YAAe;SAAY,CAACgD,QAAQ,CAACH,KAAKC,MAAM,GAAG;YAClE,MAAM,IAAI9C,MAAM;QAClB;IACF;IAEA,2BAA2B;IAC3B,MAAMoB,YAAYsB,MACfrB,GAAG,CAAC,CAACwB,MAAMtB;QACV,MAAMuB,SAASD,KAAKC,MAAM,KAAK,cAAc,MAAMD,KAAKC,MAAM,KAAK,gBAAgB,MAAM;QACzF,OAAO,GAAGvB,MAAM,EAAE,GAAG,EAAEuB,OAAO,EAAE,EAAED,KAAK1C,OAAO,EAAE;IAClD,GACCsB,IAAI,CAAC;IAER,OAAO,CAAC,oBAAoB,EAAEL,WAAW;AAC3C;AAEA;;CAEC,GACD,eAAetB,YAAYL,KAA0B;IACnD,MAAM,EAAEwD,OAAO,EAAEC,IAAI,EAAE,GAAGzD;IAE1B,IAAI,CAACwD,SAAS;QACZ,MAAM,IAAIjD,MAAM;IAClB;IAEA,MAAMmD,MAAMD,QAAQE,QAAQD,GAAG;IAC/B,MAAME,QAAQ,MAAMtE,KAAKkE,SAAS;QAAEE;QAAKG,OAAO;IAAK;IAErD,IAAID,MAAMpC,MAAM,KAAK,GAAG;QACtB,OAAO;IACT;IAEA,OAAOoC,MAAM5B,IAAI,CAAC;AACpB;AAEA;;CAEC,GACD,eAAe1B,YAAYN,KAA0B;IACnD,MAAM,EAAEwD,OAAO,EAAEC,IAAI,EAAEK,WAAW,EAAExE,MAAMyE,WAAW,EAAEvD,IAAI,EAAE,GAAGR;IAEhE,IAAI,CAACwD,SAAS;QACZ,MAAM,IAAIjD,MAAM;IAClB;IAEA,wBAAwB;IACxB,MAAMyD,OAAiB;QAAC;KAAK;IAE7B,cAAc;IACd,IAAIF,gBAAgB,wBAAwB,CAACA,aAAa;QACxDE,KAAKC,IAAI,CAAC,OAAO,0BAA0B;IAC7C,OAAO,IAAIH,gBAAgB,SAAS;QAClCE,KAAKC,IAAI,CAAC,OAAO,yBAAyB;IAC5C;IACA,+BAA+B;IAE/B,iBAAiB;IACjB,IAAIjE,KAAK,CAAC,KAAK,EAAEgE,KAAKC,IAAI,CAAC,OAAO,mBAAmB;IACrD,IAAIjE,KAAK,CAAC,KAAK,EAAEgE,KAAKC,IAAI,CAAC,OAAO,eAAe;IACjD,IAAIjE,KAAK,CAAC,KAAK,EAAEgE,KAAKC,IAAI,CAAC,CAAC,EAAE,EAAEjE,KAAK,CAAC,KAAK,EAAE,GAAG,gBAAgB;IAChE,IAAIA,KAAK,CAAC,KAAK,EAAEgE,KAAKC,IAAI,CAAC,CAAC,EAAE,EAAEjE,KAAK,CAAC,KAAK,EAAE,GAAG,iBAAiB;IACjE,IAAIA,KAAK,CAAC,KAAK,EAAEgE,KAAKC,IAAI,CAAC,CAAC,EAAE,EAAEjE,KAAK,CAAC,KAAK,EAAE,GAAG,UAAU;IAE1D,iBAAiB;IACjB,IAAI+D,aAAaC,KAAKC,IAAI,CAAC,UAAUF;IACrC,IAAIvD,MAAMwD,KAAKC,IAAI,CAAC,UAAUzD;IAE9B,mBAAmB;IACnBwD,KAAKC,IAAI,CAACT;IACV,IAAIC,MAAMO,KAAKC,IAAI,CAACR;IAEpB,MAAMhB,UAAUuB,KAAKhC,IAAI,CAAC;IAE1B,IAAI;QACF,MAAM,EAAEa,MAAM,EAAE,GAAG,MAAMtD,UAAUkD,SAAS;YAC1CM,WAAW,KAAK,OAAO,KAAK,cAAc;QAC5C;QACA,OAAOF,UAAU;IACnB,EAAE,OAAOlC,OAAY;QACnB,gDAAgD;QAChD,IAAIA,MAAMuD,IAAI,KAAK,GAAG;YACpB,OAAO;QACT;QACA,MAAMvD;IACR;AACF;AAEA;;CAEC,GACD,OAAO,eAAewD,aAAaC,QAAmB;IACpD,MAAMC,UAAwB,EAAE;IAEhC,KAAK,MAAM5E,WAAW2E,SAAU;QAC9B,MAAMtE,SAAS,MAAMN,YAAYC;QACjC4E,QAAQJ,IAAI,CAACnE;IACf;IAEA,OAAOuE;AACT"}