contextos-mcp 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-2026 Vipul Maheshwari
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,260 @@
+# ContextOS MCP Server
+
+MCP integration for [ContextOS](https://github.com/kok-o/contextos-agents).
+The 0.4.0 candidate exposes read-only status, comparison and diff inspection by
+default. Inspection does not create agents, worktrees or runtime sessions.
+
+The supported package entrypoint is the `contextos-mcp` executable; a root
+JavaScript library import is not a supported interface.
+
+## Stable and experimental scope
+
+- Default MCP registration and read-only handlers are covered by protocol and
+  installed-archive tests on Windows, Linux and macOS.
+- Selected context bodies are preserved whole, with source hashes, omissions and
+  budget-overflow reporting. Soft limits do not truncate safety instructions.
+- Agent execution, asynchronous delegation, worktree merging/cleanup, Python REPL
+  and runtime persistence/recovery require explicit `--enable-runtime` opt-in.
+  They remain experimental; seven skipped execution/recovery/concurrency cases
+  prevent a stable support claim for those scenarios.
+- Worktrees provide Git isolation. Processes still have host-user privileges;
+  this is not an operating-system sandbox or proof of production security.
+
+See the [support boundaries](https://github.com/kok-o/contextos-agents/blob/main/docs/PRODUCT_BOUNDARIES.md)
+and [skipped-test inventory](https://github.com/kok-o/contextos-agents/blob/main/docs/MCP_SKIPPED_TESTS.md).
+
+## Security & Execution Model
+
+The ContextOS MCP execution runtime applies strict defense-in-depth isolation across all supported subagent backends:
+
+- **Isolated Git Worktrees (`.swarm-worktrees/`):** Every subagent operates in a private git worktree branch (`swarm/<threadId>`). The developer's primary workspace and active staging area cannot be altered or reset during subagent execution.
+- **Headless CLI Execution & `--dangerously-skip-permissions`:**
+  - Non-interactive agents (like Claude Code) execute with `--dangerously-skip-permissions` to allow headless autonomous editing without interactive user prompts.
+  - **Trust Boundary & Isolation Details:**
+    1. **Workspace & Branch Protection:** Subagents operate in dedicated Git worktree branches (`swarm/<threadId>`), preventing race conditions and keeping the user's primary working directory clean;
+    2. **Pre-Commit File Filtering:** Changed files are filtered before git staging (`isBlockedPath`, `isPathAllowed`), preventing commits of sensitive files (`.env`, SSH keys, `.git`);
+    3. **Environment Sanitization:** Child processes receive an allowlisted environment (`getSanitizedEnv`) to prevent accidental token propagation;
+    4. **OS-Level Isolation Notice:** Subagent processes run under host user privileges. Git worktrees and pre-commit checks provide version control safety, not kernel-level OS sandboxing. For multi-tenant or untrusted agent workflows, ContextOS must be paired with an OS-level container (Docker/Podman) or OS sandbox (e.g. bubblewrap / seatbelt).
+- **Python Sandbox Restrictions:** The embedded Python REPL (`runtime.py`) enforces strict AST validation, forbids dangerous dunder attributes (`__subclasses__`, `__globals__`, `__reduce__`), restricts module imports to safe standard libraries (`json`, `math`, `re`, `datetime`, `random`, `collections`), and blocks dynamic class creation via 3-argument `type()`.
+- **Egress Secret Redaction:** All output channels (episodic memory, compression diffs, MCP error messages, direct LLM prompts) pass through `SecretFilter` (`redactSecrets`) to redact API keys and tokens.
+- **Safe Verification & Non-Destructive Merges:**
+  - `verify_command` enforces a strict whitelist of verification binaries (`npm`, `pytest`, `cargo`, `go`, etc.), sanitizes environment variables, and rejects shell metacharacters and operator chaining (`&&`, `;`, `|`).
+  - Merge failures invoke `git merge --abort` and strictly forbid destructive commands like `git reset --hard HEAD` in the user's workspace.
+
+---
+
+## Usage
+
+### MCP Server (Primary Interface)
+
+The MCP server is the primary way to use ContextOS MCP. It exposes tools for Claude Code, Antigravity, Cursor, or any MCP-compatible agent:
+
+```bash
+npx contextos-mcp
+npx contextos-mcp --dir ./my-project
+```
+
+**Tools exposed (`contextos_*`):**
+
+| Tool | Description |
+|------|-------------|
+| `contextos_delegate` | Delegate task(s) to isolated git worktree agents with automatic skill selection, secret filtering, and proof-of-work verification |
+| `contextos_status` | Query active task lifecycle, thread states, verification results, and token costs |
+| `contextos_compare` | Benchmark and compare competing candidate thread solutions (tests, tokens, diff size) |
+| `contextos_diff` | Inspect the clean, structured Git diff produced by a thread before deciding to merge |
+| `contextos_merge` | Perform a safe 3-way Git merge with conflict detection and non-destructive rollback |
+| `contextos_cleanup` | Clean up active worktree sessions or safely purge orphaned `swarm/*` branches |
+
+**IDE / MCP Client Setup (Claude Code, Antigravity, Cursor):**
+
+Add to your project's `.mcp.json` or MCP settings:
+
+```json
+{
+  "mcpServers": {
+    "contextos": {
+      "command": "npx",
+      "args": ["-y", "contextos-mcp", "--dir", "."],
+      "env": {
+        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
+        "OPENAI_API_KEY": "${OPENAI_API_KEY}"
+      }
+    }
+  }
+}
+```
+
+Once configured, your host orchestrator can invoke `contextos_delegate` to spawn subagents, inspect progress with `contextos_status` and `contextos_diff`, and safely integrate changes with `contextos_merge`.
+
+### Supported Providers
+
+| Provider | Env Variable | Default Model |
+|----------|-------------|---------------|
+| **Anthropic** | `ANTHROPIC_API_KEY` | `claude-sonnet-4-6` |
+| **OpenAI** | `OPENAI_API_KEY` | `gpt-4o` |
+| **Google** | `GEMINI_API_KEY` | `gemini-2.5-flash` |
+| **OpenRouter** | `OPENROUTER_API_KEY` | (configurable) |
+| **Groq** | `GROQ_API_KEY` | (configurable) |
+| **Ollama** | *(local)* | (configurable) |
+
+### Agent Backends
+
+| Agent | Description | Best for |
+|-------|------------|----------|
+| `opencode` (default) | Open-source, multi-provider, tool-capable | General coding, testing |
+| `claude-code` | Anthropic's Claude Code CLI | Deep analysis, refactoring |
+| `codex` | OpenAI's Codex CLI | Shell commands, OpenAI models |
+| `aider` | Git-aware AI coding assistant | Targeted edits, minimal changes |
+| `direct-llm` | Bare LLM call, no agent wrapper | Analysis, planning, classification |
+
+### Swarm Mode — Parallel Coding Agents
+
+Point the CLI at a repo with a task. It scans the codebase, decomposes the work, and spawns coding agents in isolated git worktrees:
+
+```bash
+npx contextos-mcp swarm --dir ./my-project "add error handling to all API routes"
+```
+
+The orchestrator LLM writes code that calls `thread()` to spawn agents and `merge_threads()` to integrate changes:
+
+```bash
+# Dry run — plan without executing
+npx contextos-mcp swarm --dir ./project --dry-run "refactor auth module"
+
+# Budget cap
+npx contextos-mcp swarm --dir ./project --max-budget 5.00 "add comprehensive tests"
+
+# Specific agent backend
+npx contextos-mcp swarm --dir ./project --agent claude-code "review and fix security issues"
+```
+
+### Interactive Mode
+
+Run with `--dir` but no task to enter interactive mode — a persistent REPL with live thread monitoring:
+
+```bash
+npx contextos-mcp interactive --dir ./my-project
+```
+
+Commands:
+
+| Command | Description |
+|---------|-------------|
+| `/threads` | List all threads with status, cost, duration |
+| `/thread <id>` | Show thread detail (files changed, diff, result) |
+| `/merge` | Merge all completed thread branches |
+| `/reject <id>` | Reject a thread's changes |
+| `/dag` | Show thread DAG with timing bars |
+| `/budget` | Show budget breakdown |
+| `/status` | Show session stats |
+| `/help` | List commands |
+| `/quit` | Cleanup and exit |
+
+### Orchestrator Primitives
+
+The RLM orchestrator executes JavaScript/TypeScript code (or Python via `--python-repl` fallback) using these primitives:
+
+```javascript
+// Lightweight LLM query (no file changes)
+const analysis = await llm_query(context.slice(0, 5000), "List all API endpoints");
+
+// Spawn a coding agent in an isolated worktree
+const result = await thread("Fix the auth bug", { files: ["src/auth.ts"] });
+
+// Parallel threads
+const [users, orders] = await Promise.all([
+  thread("Add validation to POST /users", { files: ["src/routes/users.ts"] }),
+  thread("Add validation to POST /orders", { files: ["src/routes/orders.ts"] }),
+]);
+
+// Merge all thread branches back to main
+await merge_threads();
+
+// Return final answer
+FINAL("Added input validation to all API routes");
+```
+
+> **Note:** Python 3 is no longer required. The default execution engine uses a native `node:vm` sandbox (`NodeVmRepl`). Pass `--python-repl` or `--repl python` to use the legacy Python runtime.
+
+## How It Works
+
+1. **Scan**: Codebase is scanned and loaded as context
+2. **Orchestrate**: The RLM loop runs — the LLM writes orchestrator code using swarm primitives
+3. **Decompose**: Tasks are broken into independent, parallelizable units
+4. **Spawn**: `thread()` spawns coding agents in isolated git worktrees
+5. **Compress**: Agent output is filtered to successful operations only (episode quality)
+6. **Merge**: `merge_threads()` integrates worktree branches back to main
+7. **Verify**: Optional test thread validates the merged result
+
+## Configuration
+
+Create `swarm_config.yaml` in your project root:
+
+```yaml
+# Concurrency
+max_threads: 5                    # Max concurrent threads
+max_total_threads: 20             # Max threads per session
+thread_timeout_ms: 300000         # 5min per thread
+
+# Budget
+max_thread_budget_usd: 1.00      # Per-thread cost cap
+max_session_budget_usd: 10.00    # Total session cost cap
+
+# Agent
+default_agent: opencode           # opencode, claude-code, codex, aider, direct-llm
+default_model: anthropic/claude-sonnet-4-6
+
+# Compression
+compression_strategy: structured  # structured, diff-only, truncate, llm-summary
+```
+
+## Architecture
+
+```
+src/
+├── main.ts                    CLI entry point
+├── swarm.ts                   Swarm orchestration (single-shot)
+├── interactive-swarm.ts       Interactive REPL with live monitoring
+├── cli.ts                     RLM text mode
+├── core/
+│   ├── rlm.ts                 Core RLM loop (Algorithm 1)
+│   ├── repl.ts                Python REPL bridge (legacy fallback)
+│   ├── node-repl.ts           Native node:vm sandbox (default)
+│   ├── repl-interface.ts      Common Repl interface
+│   ├── runtime.py             Python runtime (legacy fallback)
+│   └── types.ts               Shared type definitions
+├── agents/                    Agent backend implementations
+├── threads/                   Thread lifecycle + caching
+├── worktree/                  Git worktree CRUD + merging
+├── compression/               Result compression strategies
+├── routing/                   Auto model/agent selection
+├── memory/                    Cross-session strategy learning
+├── prompts/                   Orchestrator system prompts
+├── mcp/                       MCP server (stdio transport)
+├── ui/                        CLI UI (onboarding, spinner, dashboard)
+└── viewer.ts                  Trajectory TUI + DAG viewer
+```
+
+## Development
+
+```bash
+npm install                    # Install deps
+npx tsx src/main.ts --dir .    # Run in dev mode
+npm run build                  # Compile TypeScript
+npm test                       # Run tests
+```
+
+---
+
+## Attribution
+
+The MCP execution layer is derived from [swarm-code](https://github.com/kingjulio8238/swarm-code) by [@kingjulio8238](https://github.com/kingjulio8238), based on the Recursive Language Model ([arXiv:2512.24601](https://arxiv.org/abs/2512.24601)), licensed under MIT. ContextOS extends it with:
+
+- Native TypeScript `node:vm` sandbox (no Python 3 dependency)
+- Dynamic context-aware skill loading from `.agents/` directory
+- Security hardening (secret filtering, path traversal blocking, prompt injection scanning)
+- Multi-provider support (Anthropic, OpenAI, Google, OpenRouter, Groq, Ollama)
+
+## License
+
+MIT

package/bin/mcp.mjs

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+
+/**
+ * contextos-mcp - ContextOS Execution Layer and MCP Server CLI
+ *
+ * This binary directly boots the ContextOS MCP server via stdio transport.
+ * It targets compiled dist/mcp/server.js in production, falling back to
+ * src/mcp/server.ts with tsx in local development.
+ */
+
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const distServer = join(__dirname, "..", "dist", "mcp", "server.js");
+
+if (process.argv.includes("--version") || process.argv.includes("-v")) {
+	const pkg = JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf8"));
+	console.log(pkg.version);
+	process.exit(0);
+}
+
+if (process.argv.includes("--help") || process.argv.includes("-h")) {
+	console.log(`
+contextos-mcp - ContextOS Execution Layer and MCP Server CLI
+
+Usage:
+  contextos-mcp [options]
+
+Options:
+  --dir <path>     Target repository directory (default: current working directory)
+  --version, -v    Show version number
+  --help, -h       Show this help message
+`);
+	process.exit(0);
+}
+
+if (existsSync(distServer)) {
+	try {
+		const mod = await import(pathToFileURL(distServer).href);
+		if (typeof mod.startMcpServer === "function") {
+			await mod.startMcpServer(process.argv.slice(2));
+		}
+	} catch (err) {
+		process.stderr.write(`[contextos-mcp] Startup error: ${err}\n`);
+		process.exit(1);
+	}
+} else {
+	const srcServer = join(__dirname, "..", "src", "mcp", "server.ts");
+	const { spawn } = await import("node:child_process");
+	const tsxCli = join(__dirname, "..", "node_modules", "tsx", "dist", "cli.mjs");
+	const child = spawn(process.execPath, [tsxCli, srcServer, ...process.argv.slice(2)], {
+		stdio: "inherit",
+	});
+	child.on("exit", (code) => process.exit(code ?? 1));
+	child.on("error", (err) => {
+		process.stderr.write(`[contextos-mcp] Failed to start tsx: ${err.message}\n`);
+		process.exit(1);
+	});
+}

package/bin/swarm.mjs

@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+
+/**
+ * swarm — Swarm-Native Coding Agent CLI
+ *
+ * This shim boots the CLI entry point. It tries the compiled dist first,
+ * then falls back to tsx for development.
+ */
+
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const distEntry = join(__dirname, "..", "dist", "main.js");
+
+if (existsSync(distEntry)) {
+	// Production: use compiled JS (pathToFileURL needed for Windows)
+	await import(pathToFileURL(distEntry).href);
+} else {
+	// Development: use tsx to run TypeScript directly
+	const srcEntry = join(__dirname, "..", "src", "main.ts");
+	const { register } = await import("node:module");
+
+	// Try to register tsx loader, then import
+	try {
+		const tsxPath = join(__dirname, "..", "node_modules", "tsx", "dist", "esm", "index.mjs");
+		if (existsSync(tsxPath)) {
+			register(pathToFileURL(tsxPath).href);
+		}
+		await import(pathToFileURL(srcEntry).href);
+	} catch {
+		// Fallback: spawn tsx as a child process
+		const { spawn } = await import("node:child_process");
+		const tsxBin = join(__dirname, "..", "node_modules", ".bin", "tsx");
+		const child = spawn(tsxBin, [srcEntry, ...process.argv.slice(2)], {
+			stdio: "inherit",
+		});
+		child.on("exit", (code) => process.exit(code ?? 1));
+		child.on("error", (err) => {
+			console.error(`Failed to start swarm: ${err.message}`);
+			process.exit(1);
+		});
+	}
+}

package/dist/agents/aider.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Aider agent backend.
+ *
+ * Runs tasks via `aider --yes-always --no-auto-commits --message "prompt"` subprocess.
+ * Aider is a git-aware AI coding assistant that makes targeted edits.
+ *
+ * Output format: Plain text (no JSON mode available).
+ * Edit confirmations appear as "Applied edit to <file>" lines.
+ */
+import type { AgentProvider } from "../core/types.js";
+declare const aiderProvider: AgentProvider;
+export default aiderProvider;

package/dist/agents/aider.js

@@ -0,0 +1,192 @@
+/**
+ * Aider agent backend.
+ *
+ * Runs tasks via `aider --yes-always --no-auto-commits --message "prompt"` subprocess.
+ * Aider is a git-aware AI coding assistant that makes targeted edits.
+ *
+ * Output format: Plain text (no JSON mode available).
+ * Edit confirmations appear as "Applied edit to <file>" lines.
+ */
+import * as os from "node:os";
+import { commandExists } from "../utils/command-exists.js";
+import { RollingBuffer } from "../utils/rolling-buffer.js";
+import { safeSpawn } from "../utils/safe-spawn.js";
+import { registerAgent } from "./provider.js";
+/** Whitelist of env vars safe to pass to agent subprocess. */
+function buildAgentEnv() {
+    const homeDir = os.homedir();
+    return {
+        PATH: process.env.PATH,
+        HOME: homeDir,
+        USERPROFILE: homeDir,
+        SHELL: process.env.SHELL,
+        TERM: process.env.TERM,
+        LANG: process.env.LANG,
+        // Aider supports multiple providers via these keys
+        ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,
+        OPENAI_API_KEY: process.env.OPENAI_API_KEY,
+        GEMINI_API_KEY: process.env.GEMINI_API_KEY,
+        // Aider-specific env vars
+        AIDER_MODEL: process.env.AIDER_MODEL,
+        AIDER_DARK_MODE: process.env.AIDER_DARK_MODE,
+        // Git config
+        GIT_AUTHOR_NAME: process.env.GIT_AUTHOR_NAME,
+        GIT_AUTHOR_EMAIL: process.env.GIT_AUTHOR_EMAIL,
+        GIT_COMMITTER_NAME: process.env.GIT_COMMITTER_NAME,
+        GIT_COMMITTER_EMAIL: process.env.GIT_COMMITTER_EMAIL,
+        // Python (aider is Python-based)
+        VIRTUAL_ENV: process.env.VIRTUAL_ENV,
+        CONDA_DEFAULT_ENV: process.env.CONDA_DEFAULT_ENV,
+        PYTHONPATH: process.env.PYTHONPATH,
+        // Windows
+        ...(process.env.SystemRoot ? { SystemRoot: process.env.SystemRoot } : {}),
+        ...(process.env.SYSTEMROOT ? { SYSTEMROOT: process.env.SYSTEMROOT } : {}),
+    };
+}
+/** Map provider/model format to aider model flag. */
+function resolveModel(model) {
+    // Aider accepts provider/model format natively (e.g., "anthropic/claude-sonnet-4-6")
+    // It also has short aliases: sonnet, opus, haiku, 4o, etc.
+    return model;
+}
+/** Parse aider output to extract edited file paths. */
+function extractFilesChanged(output) {
+    const files = [];
+    // Aider outputs lines like:
+    //   "Applied edit to src/auth.ts"
+    //   "Wrote src/auth.ts"
+    //   "Committing src/auth.ts ..."
+    //   "Created new file src/utils.ts"
+    const patterns = [
+        /Applied edit to\s+(.+?)(?:\s*$)/gm,
+        /Wrote\s+(.+?)(?:\s*$)/gm,
+        /Committing\s+(.+?)(?:\s+\.\.\.|\s*$)/gm,
+        /(?:Created|Added)\s+new file\s+(.+?)(?:\s*$)/gm,
+    ];
+    for (const pattern of patterns) {
+        let match;
+        while ((match = pattern.exec(output)) !== null) {
+            const file = match[1].trim();
+            if (file) {
+                files.push(file);
+            }
+        }
+    }
+    return [...new Set(files)];
+}
+const aiderProvider = {
+    name: "aider",
+    async isAvailable() {
+        return commandExists("aider");
+    },
+    async run(options) {
+        const { task, workDir, model, files, signal } = options;
+        const startTime = Date.now();
+        const args = [
+            "--yes-always", // Auto-confirm all prompts (except shell commands)
+            "--no-auto-commits", // Don't auto-commit (worktree manager handles commits)
+            "--no-pretty", // Disable ANSI colors for clean parsing
+            "--no-stream", // Don't stream (capture full output)
+            "--no-fancy-input", // Disable prompt toolkit input
+            "--no-suggest-shell-commands", // Suppress shell command suggestions
+            "--no-detect-urls", // Suppress URL detection prompts
+        ];
+        if (model) {
+            args.push("--model", resolveModel(model));
+        }
+        // Pass the task via --message (non-interactive mode)
+        args.push("--message", task);
+        // Add specific files to edit if provided
+        if (files && files.length > 0) {
+            for (const file of files) {
+                args.push("--file", file);
+            }
+        }
+        let proc;
+        try {
+            proc = await safeSpawn("aider", args, {
+                cwd: workDir,
+                stdio: ["ignore", "pipe", "pipe"],
+                env: buildAgentEnv(),
+            });
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: "",
+                filesChanged: [],
+                diff: "",
+                error: `Failed to spawn aider: ${err instanceof Error ? err.message : String(err)}`,
+                durationMs: 0,
+            };
+        }
+        return new Promise((resolve) => {
+            const stdoutBuf = new RollingBuffer(2 * 1024 * 1024); // 2MB
+            const stderrBuf = new RollingBuffer(512 * 1024); // 512KB
+            let resolved = false;
+            const doResolve = (result) => {
+                if (resolved)
+                    return;
+                resolved = true;
+                resolve(result);
+            };
+            proc.stdout?.on("data", (chunk) => {
+                const text = chunk.toString();
+                stdoutBuf.append(text);
+                options.onOutput?.(text);
+            });
+            proc.stderr?.on("data", (chunk) => {
+                stderrBuf.append(chunk.toString());
+            });
+            if (signal) {
+                const onAbort = () => {
+                    proc.kill("SIGTERM");
+                    const killTimer = setTimeout(() => {
+                        try {
+                            if (proc.exitCode === null)
+                                proc.kill("SIGKILL");
+                        }
+                        catch {
+                            /* already dead */
+                        }
+                    }, 3000);
+                    proc.on("exit", () => clearTimeout(killTimer));
+                };
+                if (signal.aborted) {
+                    onAbort();
+                }
+                else {
+                    signal.addEventListener("abort", onAbort, { once: true });
+                    proc.on("exit", () => signal.removeEventListener("abort", onAbort));
+                }
+            }
+            proc.on("close", (code) => {
+                const stdout = stdoutBuf.toString();
+                const stderr = stderrBuf.toString();
+                const durationMs = Date.now() - startTime;
+                const filesChanged = extractFilesChanged(stdout);
+                doResolve({
+                    success: code === 0,
+                    output: stdout || stderr,
+                    filesChanged,
+                    diff: "", // Diff is captured separately by worktree manager
+                    durationMs,
+                    error: code !== 0 ? `aider exited with code ${code}${stderr ? `: ${stderr.slice(0, 500)}` : ""}` : undefined,
+                });
+            });
+            proc.on("error", (err) => {
+                doResolve({
+                    success: false,
+                    output: "",
+                    filesChanged: [],
+                    diff: "",
+                    durationMs: Date.now() - startTime,
+                    error: `Failed to spawn aider: ${err.message}`,
+                });
+            });
+        });
+    },
+};
+registerAgent(aiderProvider);
+export default aiderProvider;
+//# sourceMappingURL=aider.js.map

package/dist/agents/aider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aider.js","sourceRoot":"","sources":["../../src/agents/aider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,8DAA8D;AAC9D,SAAS,aAAa;IACrB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,OAAO;QACN,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;QACtB,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,OAAO;QACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;QACxB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;QACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;QACtB,mDAAmD;QACnD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,0BAA0B;QAC1B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACpC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,aAAa;QACb,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC9C,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAClD,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;QACpD,iCAAiC;QACjC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACpC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,UAAU;QACV,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,SAAS,YAAY,CAAC,KAAa;IAClC,qFAAqF;IACrF,2DAA2D;IAC3D,OAAO,KAAK,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,SAAS,mBAAmB,CAAC,MAAc;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,4BAA4B;IAC5B,kCAAkC;IAClC,wBAAwB;IACxB,iCAAiC;IACjC,oCAAoC;IACpC,MAAM,QAAQ,GAAG;QAChB,mCAAmC;QACnC,yBAAyB;QACzB,wCAAwC;QACxC,gDAAgD;KAChD,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,aAAa,GAAkB;IACpC,IAAI,EAAE,OAAO;IAEb,KAAK,CAAC,WAAW;QAChB,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAwB;QACjC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,IAAI,GAAG;YACZ,cAAc,EAAE,mDAAmD;YACnE,mBAAmB,EAAE,uDAAuD;YAC5E,aAAa,EAAE,wCAAwC;YACvD,aAAa,EAAE,qCAAqC;YACpD,kBAAkB,EAAE,+BAA+B;YACnD,6BAA6B,EAAE,qCAAqC;YACpE,kBAAkB,EAAE,iCAAiC;SACrD,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7B,yCAAyC;QACzC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;QAED,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;gBACrC,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE,aAAa,EAAE;aACpB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,YAAY,EAAE,EAAE;gBAChB,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACnF,UAAU,EAAE,CAAC;aACb,CAAC;QACH,CAAC;QAED,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;YAC3C,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM;YAC5D,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ;YACzD,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,SAAS,GAAG,CAAC,MAAmB,EAAE,EAAE;gBACzC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC9B,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACvB,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,GAAG,EAAE;oBACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;wBACjC,IAAI,CAAC;4BACJ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;gCAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAClD,CAAC;wBAAC,MAAM,CAAC;4BACR,kBAAkB;wBACnB,CAAC;oBACF,CAAC,EAAE,IAAI,CAAC,CAAC;oBACT,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;gBAChD,CAAC,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO,EAAE,CAAC;gBACX,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACrE,CAAC;YACF,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAEjD,SAAS,CAAC;oBACT,OAAO,EAAE,IAAI,KAAK,CAAC;oBACnB,MAAM,EAAE,MAAM,IAAI,MAAM;oBACxB,YAAY;oBACZ,IAAI,EAAE,EAAE,EAAE,kDAAkD;oBAC5D,UAAU;oBACV,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC5G,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,SAAS,CAAC;oBACT,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,EAAE;oBACV,YAAY,EAAE,EAAE;oBAChB,IAAI,EAAE,EAAE;oBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,KAAK,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE;iBAC9C,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAC;AAEF,aAAa,CAAC,aAAa,CAAC,CAAC;AAC7B,eAAe,aAAa,CAAC"}

package/dist/agents/claude-code.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Claude Code agent backend.
+ *
+ * Runs tasks via `claude -p --output-format json "prompt"` subprocess.
+ * Parses structured JSON output for results, cost, and file changes.
+ */
+import type { AgentProvider } from "../core/types.js";
+declare const claudeCodeProvider: AgentProvider;
+export default claudeCodeProvider;