im-hub-pro 0.2.29

package/dist/plugins/agents/claude-code/adapter.test.js

@@ -0,0 +1,195 @@
+// ClaudeCodeAdapter — verify prepareCommand picks the right path under each
+// degradation condition (env disable / no IM context / bus down) and that the
+// approval-routed plan writes a sensible mcp-config + cleans it up.
+//
+// Concurrency note: this rewrite (after we found the singleton race that
+// caused mcp.json to be deleted out from under a second concurrent claude
+// run) explicitly tests that two prepareCommand() calls overlapping each
+// other still produce two distinct configs with no shared state.
+import { describe, it, expect, beforeEach, afterEach } from 'bun:test';
+import { readFile, access } from 'fs/promises';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { randomBytes } from 'crypto';
+import { ApprovalBus, approvalBus } from '../../../core/approval-bus.js';
+import { ClaudeCodeAdapter, _testInternals } from './index.js';
+function uniqueSocketPath() {
+    return join(tmpdir(), `imhub-adapter-test-${process.pid}-${randomBytes(4).toString('hex')}.sock`);
+}
+const FULL_OPTS = {
+    threadId: 'thread-A',
+    platform: 'feishu',
+    channelId: 'chan-1',
+    userId: 'u1',
+};
+async function fileExists(p) {
+    try {
+        await access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+describe('ClaudeCodeAdapter prepareCommand — fallback paths', () => {
+    let adapter;
+    beforeEach(() => {
+        adapter = new ClaudeCodeAdapter();
+        delete process.env.IMHUB_APPROVAL_DISABLED;
+    });
+    afterEach(() => {
+        delete process.env.IMHUB_APPROVAL_DISABLED;
+    });
+    it('falls back to dontAsk when IMHUB_APPROVAL_DISABLED=1', async () => {
+        process.env.IMHUB_APPROVAL_DISABLED = '1';
+        const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+        expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('dontAsk');
+        expect(plan.args).not.toContain('--permission-prompt-tool');
+        expect(plan.args).not.toContain('--mcp-config');
+        expect(plan.cleanup).toBeUndefined();
+    });
+    it('falls back to dontAsk when no IM context (web/scheduler call)', async () => {
+        const plan = await _testInternals.prepareCommand(adapter, 'hi', { model: 'sonnet' });
+        expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('dontAsk');
+        expect(plan.cleanup).toBeUndefined();
+    });
+    it('falls back to dontAsk when bus is not started', async () => {
+        expect(approvalBus.getSocketPath()).toBeNull();
+        const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+        expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('dontAsk');
+        expect(plan.cleanup).toBeUndefined();
+    });
+    it('uses --permission-mode plan + skips mcp-config when planMode=true', async () => {
+        // planMode short-circuits the approval-bus pipeline regardless of IM
+        // context — plan is read-only so there is nothing for the bus to gate.
+        const plan = await _testInternals.prepareCommand(adapter, 'sketch', { ...FULL_OPTS, planMode: true });
+        expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('plan');
+        expect(plan.args).not.toContain('--mcp-config');
+        expect(plan.args).not.toContain('--permission-prompt-tool');
+        expect(plan.cleanup).toBeUndefined();
+        expect(plan.args[plan.args.length - 1]).toBe('sketch');
+    });
+    it('buildArgs uses plan when planMode is set, dontAsk otherwise', () => {
+        const plain = _testInternals.buildArgs(adapter, 'p', {});
+        expect(plain[plain.indexOf('--permission-mode') + 1]).toBe('dontAsk');
+        const planning = _testInternals.buildArgs(adapter, 'p', { planMode: true });
+        expect(planning[planning.indexOf('--permission-mode') + 1]).toBe('plan');
+    });
+});
+describe('ClaudeCodeAdapter prepareCommand — approval-routed', () => {
+    let bus;
+    let adapter;
+    let originalGetSocketPath;
+    let originalRegisterRun;
+    let originalUnregisterRun;
+    beforeEach(async () => {
+        bus = new ApprovalBus({ approvalTimeoutMs: 500 });
+        await bus.start(uniqueSocketPath());
+        originalGetSocketPath = approvalBus.getSocketPath.bind(approvalBus);
+        originalRegisterRun = approvalBus.registerRun.bind(approvalBus);
+        originalUnregisterRun = approvalBus.unregisterRun.bind(approvalBus);
+        approvalBus.getSocketPath = () => bus.getSocketPath();
+        approvalBus.registerRun = bus.registerRun.bind(bus);
+        approvalBus.unregisterRun = bus.unregisterRun.bind(bus);
+        adapter = new ClaudeCodeAdapter();
+    });
+    afterEach(async () => {
+        await bus.stop();
+        approvalBus.getSocketPath = originalGetSocketPath;
+        approvalBus.registerRun = originalRegisterRun;
+        approvalBus.unregisterRun = originalUnregisterRun;
+    });
+    it('writes a valid mcp-config and emits approval-mode args', async () => {
+        const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+        expect(plan.cleanup).toBeDefined();
+        const cfgIdx = plan.args.indexOf('--mcp-config');
+        expect(cfgIdx).toBeGreaterThanOrEqual(0);
+        const configPath = plan.args[cfgIdx + 1];
+        expect(await fileExists(configPath)).toBe(true);
+        const raw = await readFile(configPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        expect(parsed.mcpServers.imhub).toBeDefined();
+        expect(parsed.mcpServers.imhub.command).toBe(process.execPath);
+        expect(parsed.mcpServers.imhub.args[0]).toMatch(/mcp-approval-server\.js$/);
+        expect(parsed.mcpServers.imhub.env.IMHUB_APPROVAL_SOCK).toBe(bus.getSocketPath());
+        expect(typeof parsed.mcpServers.imhub.env.IMHUB_RUN_ID).toBe('string');
+        expect(parsed.mcpServers.imhub.env.IMHUB_RUN_ID.length).toBeGreaterThan(0);
+        expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('default');
+        expect(plan.args[plan.args.indexOf('--permission-prompt-tool') + 1]).toBe('mcp__imhub__request');
+        expect(plan.args[plan.args.length - 1]).toBe('hi');
+        // mcp-config must come BEFORE the next `-X` flag so its variadic
+        // <configs...> doesn't swallow the prompt as a second config path.
+        expect(cfgIdx).toBe(0);
+        expect(plan.args[cfgIdx + 2].startsWith('-')).toBe(true);
+        await plan.cleanup();
+    });
+    it('cleanup unregisters run and removes config tmpdir', async () => {
+        const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+        const configPath = plan.args[plan.args.indexOf('--mcp-config') + 1];
+        expect(await fileExists(configPath)).toBe(true);
+        await plan.cleanup();
+        expect(await fileExists(configPath)).toBe(false);
+    });
+    it('IMHUB_APPROVAL_DISABLED still wins even when bus is up', async () => {
+        process.env.IMHUB_APPROVAL_DISABLED = '1';
+        try {
+            const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+            expect(plan.cleanup).toBeUndefined();
+            expect(plan.args).not.toContain('--mcp-config');
+            expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('dontAsk');
+        }
+        finally {
+            delete process.env.IMHUB_APPROVAL_DISABLED;
+        }
+    });
+    it('two prepareCommand calls return INDEPENDENT configs (concurrency safety)', async () => {
+        // Fire them in parallel, with their awaits genuinely interleaving.
+        const [planA, planB] = await Promise.all([
+            _testInternals.prepareCommand(adapter, 'A', FULL_OPTS),
+            _testInternals.prepareCommand(adapter, 'B', FULL_OPTS),
+        ]);
+        const cfgA = planA.args[planA.args.indexOf('--mcp-config') + 1];
+        const cfgB = planB.args[planB.args.indexOf('--mcp-config') + 1];
+        expect(cfgA).not.toBe(cfgB);
+        const rawA = JSON.parse(await readFile(cfgA, 'utf8'));
+        const rawB = JSON.parse(await readFile(cfgB, 'utf8'));
+        expect(rawA.mcpServers.imhub.env.IMHUB_RUN_ID)
+            .not.toBe(rawB.mcpServers.imhub.env.IMHUB_RUN_ID);
+        // Cleaning up A must NOT remove B's config.
+        await planA.cleanup();
+        expect(await fileExists(cfgA)).toBe(false);
+        expect(await fileExists(cfgB)).toBe(true);
+        await planB.cleanup();
+        expect(await fileExists(cfgB)).toBe(false);
+    });
+    it('cleanup is idempotent (calling twice is safe)', async () => {
+        const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+        await plan.cleanup();
+        // Should not throw on the second call
+        await plan.cleanup();
+    });
+    // Regression for ADR 0005: every fallback return inside prepareCommand must
+    // carry cwd. An earlier version dropped it on the mkdtemp-failure branch,
+    // silently demoting that one call back to im-hub's "/" cwd and leaking
+    // memory across IM and terminal Claude.
+    it('mkdtemp failure still propagates cwd (ADR 0005)', async () => {
+        process.env.IMHUB_CLAUDE_CODE_CWD = '/tmp/imhub-cwd-regression-xyz';
+        const origTmp = process.env.TMPDIR;
+        process.env.TMPDIR = '/proc/imhub-bogus-no-such-dir/xyz';
+        try {
+            const plan = await _testInternals.prepareCommand(adapter, 'hi', FULL_OPTS);
+            expect(plan.args[plan.args.indexOf('--permission-mode') + 1]).toBe('dontAsk');
+            expect(plan.args).not.toContain('--mcp-config');
+            expect(plan.cleanup).toBeUndefined();
+            expect(plan.cwd).toBe('/tmp/imhub-cwd-regression-xyz');
+        }
+        finally {
+            if (origTmp === undefined)
+                delete process.env.TMPDIR;
+            else
+                process.env.TMPDIR = origTmp;
+            delete process.env.IMHUB_CLAUDE_CODE_CWD;
+        }
+    });
+});
+//# sourceMappingURL=adapter.test.js.map

package/dist/plugins/agents/claude-code/adapter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.test.js","sourceRoot":"","sources":["../../../../src/plugins/agents/claude-code/adapter.test.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,oEAAoE;AACpE,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,iEAAiE;AAEjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAG9D,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AACnG,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,IAAI;CACb,CAAA;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC7D,CAAC;AAED,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,IAAI,OAA0B,CAAA;IAE9B,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAA;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,GAAG,CAAA;QACzC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAA;QAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QACpF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC9C,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACrG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAA;QAC3D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrE,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,IAAI,GAAgB,CAAA;IACpB,IAAI,OAA0B,CAAA;IAC9B,IAAI,qBAA0C,CAAA;IAC9C,IAAI,mBAAmD,CAAA;IACvD,IAAI,qBAAuD,CAAA;IAE3D,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,GAAG,IAAI,WAAW,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAA;QACjD,MAAM,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;QACnC,qBAAqB,GAAG,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACnE,mBAAmB,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC/D,qBAAqB,GAAG,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACnE,WAAW,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAA;QACrD,WAAW,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnD,WAAW,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEvD,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAChB,WAAW,CAAC,aAAa,GAAG,qBAAqB,CAAA;QACjD,WAAW,CAAC,WAAW,GAAG,mBAAmB,CAAA;QAC7C,WAAW,CAAC,aAAa,GAAG,qBAAqB,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE/C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAC3E,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAA;QACjF,MAAM,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAE1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAElD,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAExD,MAAM,IAAI,CAAC,OAAQ,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE/C,MAAM,IAAI,CAAC,OAAQ,EAAE,CAAA;QACrB,MAAM,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,GAAG,CAAA;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YAC1E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/E,CAAC;gBAAS,CAAC;YACT,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,mEAAmE;QACnE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC;SACvD,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QACrD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;aAC3C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAEnD,4CAA4C;QAC5C,MAAM,KAAK,CAAC,OAAQ,EAAE,CAAA;QACtB,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEzC,MAAM,KAAK,CAAC,OAAQ,EAAE,CAAA;QACtB,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,GAAc,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QACrF,MAAM,IAAI,CAAC,OAAQ,EAAE,CAAA;QACrB,sCAAsC;QACtC,MAAM,IAAI,CAAC,OAAQ,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,wCAAwC;IACxC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,+BAA+B,CAAA;QACnE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,mCAAmC,CAAA;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACxD,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;;gBAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAA;YACjC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;QAC1C,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/plugins/agents/claude-code/index.d.ts

@@ -0,0 +1,25 @@
+import { AgentBase, type SpawnPlan } from '../../../core/agent-base.js';
+import type { AgentSendOpts } from '../../../core/types.js';
+export declare class ClaudeCodeAdapter extends AgentBase {
+    readonly name = "claude-code";
+    readonly aliases: string[];
+    protected get commandName(): string;
+    /**
+     * Legacy/fallback args — used when approval routing is disabled or not
+     * applicable (no IM context, bus down, IMHUB_APPROVAL_DISABLED=1).
+     *
+     * planMode override: when opts.planMode is true we hand claude
+     * `--permission-mode plan` regardless of fallback path. plan is read-only
+     * by design so the IM approval bus has nothing to gate, and dontAsk would
+     * silently re-allow mutations the user explicitly opted out of.
+     */
+    protected buildArgs(prompt: string, opts: AgentSendOpts): string[];
+    protected prepareCommand(prompt: string, opts: AgentSendOpts): Promise<SpawnPlan>;
+    protected extractText(event: unknown): string;
+}
+export declare const claudeCodeAdapter: ClaudeCodeAdapter;
+export declare const _testInternals: {
+    prepareCommand(adapter: ClaudeCodeAdapter, prompt: string, opts: AgentSendOpts): Promise<SpawnPlan>;
+    buildArgs(adapter: ClaudeCodeAdapter, prompt: string, opts?: AgentSendOpts): string[];
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/agents/claude-code/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugins/agents/claude-code/index.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAA;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AA6B3D,qBAAa,iBAAkB,SAAQ,SAAS;IAC9C,QAAQ,CAAC,IAAI,iBAAgB;IAC7B,QAAQ,CAAC,OAAO,WAAiC;IAEjD,SAAS,KAAK,WAAW,IAAI,MAAM,CAAoB;IAEvD;;;;;;;;OAQG;IACH,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,EAAE;cAUlD,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC;IA8FvF,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;CAW9C;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAA;AAIxD,eAAO,MAAM,cAAc;4BACK,iBAAiB,UAAU,MAAM,QAAQ,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC;uBAItF,iBAAiB,UAAU,MAAM,SAAQ,aAAa,GAAQ,MAAM,EAAE;CAI1F,CAAA"}

package/dist/plugins/agents/claude-code/index.js

@@ -0,0 +1,184 @@
+// Claude Code agent adapter
+// Uses --print --output-format stream-json for programmatic interaction
+//
+// Permission flow has two modes, decided per-call in prepareCommand():
+//
+//   Approval-routed (default when IM context is present and the bus is up):
+//     --permission-mode default
+//     --permission-prompt-tool mcp__imhub__request
+//     --mcp-config <tmpfile>
+//   The MCP sidecar (mcp-approval-server.js) is registered via --mcp-config;
+//   it connects to im-hub's approval-bus over a unix socket, and im-hub
+//   surfaces approval prompts to the originating IM thread.
+//
+//   Legacy "dontAsk" fallback (env IMHUB_APPROVAL_DISABLED=1, OR no IM
+//   thread context, OR approvalBus not started):
+//     --permission-mode dontAsk
+//   Previous behavior — Claude leans entirely on PreToolUse hooks in
+//   ~/.claude/settings.json plus the CLAUDE_VIA_IM env signal injected by
+//   im-hub.service. Use this when human approval over IM isn't available.
+//
+// IMPORTANT: every per-spawn resource (runId, mcp-config dir, registry
+// entry) lives in the SpawnPlan returned by prepareCommand — never on the
+// adapter instance. The adapter is a singleton and concurrent IM threads
+// would otherwise clobber each other's state mid-spawn.
+import { randomUUID } from 'crypto';
+import { mkdtemp, writeFile, rm } from 'fs/promises';
+import { tmpdir } from 'os';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { AgentBase } from '../../../core/agent-base.js';
+import { approvalBus } from '../../../core/approval-bus.js';
+import { resolveAgentCwd } from '../../../core/agent-cwd.js';
+import { logger as rootLogger } from '../../../core/logger.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const SIDECAR_PATH = join(__dirname, 'mcp-approval-server.js');
+const log = rootLogger.child({ component: 'agent.claude-code' });
+const BASE_ARGS = ['--print', '--verbose', '--output-format', 'stream-json'];
+/** First call with a UUID: --session-id (creates the session under that id).
+ *  Subsequent calls: --resume (continues from existing). Mixing them up gets
+ *  you "Session ID already in use" or "session not found". */
+function sessionFlag(opts) {
+    if (!opts.agentSessionId)
+        return [];
+    return opts.agentSessionResume
+        ? ['--resume', opts.agentSessionId]
+        : ['--session-id', opts.agentSessionId];
+}
+export class ClaudeCodeAdapter extends AgentBase {
+    name = 'claude-code';
+    aliases = ['cc', 'claude', 'claudecode'];
+    get commandName() { return 'claude'; }
+    /**
+     * Legacy/fallback args — used when approval routing is disabled or not
+     * applicable (no IM context, bus down, IMHUB_APPROVAL_DISABLED=1).
+     *
+     * planMode override: when opts.planMode is true we hand claude
+     * `--permission-mode plan` regardless of fallback path. plan is read-only
+     * by design so the IM approval bus has nothing to gate, and dontAsk would
+     * silently re-allow mutations the user explicitly opted out of.
+     */
+    buildArgs(prompt, opts) {
+        const mode = opts.planMode ? 'plan' : 'dontAsk';
+        return [
+            ...sessionFlag(opts),
+            ...BASE_ARGS,
+            '--permission-mode', mode,
+            prompt,
+        ];
+    }
+    async prepareCommand(prompt, opts) {
+        // Cwd is computed once and shared by all return paths below — both the
+        // approval-routed path and every fallback ("dontAsk", missing IM context,
+        // tmpdir failure, etc.). Skipping cwd on the fallbacks would silently
+        // demote those calls back to im-hub's "/" cwd and leak across memory.
+        const cwd = resolveAgentCwd(this.name, opts);
+        // Plan mode short-circuits the approval-bus pipeline: claude's `plan`
+        // permission mode is strictly read-only, so there are no mutating tools
+        // for the IM bridge to gate. Skipping the mcp-config tmpdir + bus run
+        // registration also keeps cleanup trivial. buildArgs picks `--permission-mode plan`
+        // when opts.planMode is true.
+        if (opts.planMode) {
+            return { args: this.buildArgs(prompt, opts), cwd };
+        }
+        if (process.env.IMHUB_APPROVAL_DISABLED === '1') {
+            return { args: this.buildArgs(prompt, opts), cwd };
+        }
+        const sockPath = approvalBus.getSocketPath();
+        if (!sockPath)
+            return { args: this.buildArgs(prompt, opts), cwd }; // bus not started
+        const { threadId, platform, channelId, userId } = opts;
+        if (!threadId || !platform || !channelId) {
+            // Non-IM call (web/scheduler/intent-llm) — no thread to route prompts to.
+            // resolveAgentCwd returns undefined here too, so cwd ends up undefined and
+            // the spawn inherits im-hub's cwd, matching the historical behavior.
+            return { args: this.buildArgs(prompt, opts), cwd };
+        }
+        const runId = randomUUID();
+        let configDir;
+        try {
+            configDir = await mkdtemp(join(tmpdir(), 'imhub-mcp-'));
+        }
+        catch (err) {
+            log.warn({ event: 'claude.approval.mkdtemp_failed', err: String(err) }, 'Falling back to dontAsk: cannot create mcp-config tmpdir');
+            return { args: this.buildArgs(prompt, opts), cwd };
+        }
+        const configPath = join(configDir, 'mcp.json');
+        const config = {
+            mcpServers: {
+                imhub: {
+                    command: process.execPath,
+                    args: [SIDECAR_PATH],
+                    env: {
+                        IMHUB_APPROVAL_SOCK: sockPath,
+                        IMHUB_RUN_ID: runId,
+                    },
+                },
+            },
+        };
+        try {
+            await writeFile(configPath, JSON.stringify(config), 'utf8');
+        }
+        catch (err) {
+            log.warn({ event: 'claude.approval.write_config_failed', err: String(err) }, 'Falling back to dontAsk: cannot write mcp-config');
+            try {
+                await rm(configDir, { recursive: true, force: true });
+            }
+            catch { /* ignore */ }
+            return { args: this.buildArgs(prompt, opts), cwd };
+        }
+        approvalBus.registerRun(runId, {
+            threadId, platform, userId: userId ?? '', channelId,
+        });
+        log.info({ event: 'claude.approval.routed', runId, threadId, platform }, 'Claude run routed via approval-bus');
+        // Closure captures runId + configDir locally — concurrent runs each have
+        // their own copy, so cleanup never deletes another spawn's tmpdir.
+        return {
+            args: [
+                ...sessionFlag(opts),
+                // ORDER MATTERS: --mcp-config takes <configs...> (variadic). Place it
+                // before another `-X` flag so it sees exactly one file path, not the
+                // prompt as a second config file.
+                '--mcp-config', configPath,
+                ...BASE_ARGS,
+                '--permission-mode', 'default',
+                '--permission-prompt-tool', 'mcp__imhub__request',
+                prompt,
+            ],
+            cwd,
+            cleanup: async () => {
+                approvalBus.unregisterRun(runId);
+                try {
+                    await rm(configDir, { recursive: true, force: true });
+                }
+                catch { /* ignore */ }
+            },
+        };
+    }
+    extractText(event) {
+        const msg = event;
+        if (msg.type === 'assistant' && msg.message?.content) {
+            const parts = [];
+            for (const item of msg.message.content) {
+                if (item.type === 'text' && item.text)
+                    parts.push(item.text);
+            }
+            return parts.join('');
+        }
+        return '';
+    }
+}
+export const claudeCodeAdapter = new ClaudeCodeAdapter();
+// Test-only escape hatch — drives prepareCommand/buildArgs without going
+// through the spawnStream pipeline.
+export const _testInternals = {
+    async prepareCommand(adapter, prompt, opts) {
+        // @ts-expect-error — protected; tests reach in deliberately
+        return adapter.prepareCommand(prompt, opts);
+    },
+    buildArgs(adapter, prompt, opts = {}) {
+        // @ts-expect-error
+        return adapter.buildArgs(prompt, opts);
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/plugins/agents/claude-code/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/plugins/agents/claude-code/index.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,wEAAwE;AACxE,EAAE;AACF,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,gCAAgC;AAChC,mDAAmD;AACnD,6BAA6B;AAC7B,6EAA6E;AAC7E,wEAAwE;AACxE,4DAA4D;AAC5D,EAAE;AACF,uEAAuE;AACvE,iDAAiD;AACjD,gCAAgC;AAChC,qEAAqE;AACrE,0EAA0E;AAC1E,0EAA0E;AAC1E,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,wDAAwD;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,SAAS,EAAkB,MAAM,6BAA6B,CAAA;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAE9D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;AAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAEhE,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAU,CAAA;AAErF;;8DAE8D;AAC9D,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,CAAA;IACnC,OAAO,IAAI,CAAC,kBAAkB;QAC5B,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;QACnC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;AAC3C,CAAC;AAUD,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IACrC,IAAI,GAAG,aAAa,CAAA;IACpB,OAAO,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IAEjD,IAAc,WAAW,KAAa,OAAO,QAAQ,CAAA,CAAC,CAAC;IAEvD;;;;;;;;OAQG;IACO,SAAS,CAAC,MAAc,EAAE,IAAmB;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/C,OAAO;YACL,GAAG,WAAW,CAAC,IAAI,CAAC;YACpB,GAAG,SAAS;YACZ,mBAAmB,EAAE,IAAI;YACzB,MAAM;SACP,CAAA;IACH,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,IAAmB;QAChE,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAE5C,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,oFAAoF;QACpF,8BAA8B;QAC9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACpD,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,EAAE,CAAA;QAC5C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA,CAAC,kBAAkB;QAEpF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,0EAA0E;YAC1E,2EAA2E;YAC3E,qEAAqE;YACrE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;QAE1B,IAAI,SAAiB,CAAA;QACrB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EACpE,0DAA0D,CAAC,CAAA;YAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACpD,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAE9C,MAAM,MAAM,GAAG;YACb,UAAU,EAAE;gBACV,KAAK,EAAE;oBACL,OAAO,EAAE,OAAO,CAAC,QAAQ;oBACzB,IAAI,EAAE,CAAC,YAAY,CAAC;oBACpB,GAAG,EAAE;wBACH,mBAAmB,EAAE,QAAQ;wBAC7B,YAAY,EAAE,KAAK;qBACpB;iBACF;aACF;SACF,CAAA;QAED,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EACzE,kDAAkD,CAAC,CAAA;YACrD,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACpF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACpD,CAAC;QAED,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE;YAC7B,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,SAAS;SACpD,CAAC,CAAA;QAEF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EACrE,oCAAoC,CAAC,CAAA;QAEvC,yEAAyE;QACzE,mEAAmE;QACnE,OAAO;YACL,IAAI,EAAE;gBACJ,GAAG,WAAW,CAAC,IAAI,CAAC;gBACpB,sEAAsE;gBACtE,qEAAqE;gBACrE,kCAAkC;gBAClC,cAAc,EAAE,UAAU;gBAC1B,GAAG,SAAS;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,0BAA0B,EAAE,qBAAqB;gBACjD,MAAM;aACP;YACD,GAAG;YACH,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;gBAChC,IAAI,CAAC;oBAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACtF,CAAC;SACF,CAAA;IACH,CAAC;IAES,WAAW,CAAC,KAAc;QAClC,MAAM,GAAG,GAAG,KAAoB,CAAA;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YACrD,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9D,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvB,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAA;AAExD,yEAAyE;AACzE,oCAAoC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,KAAK,CAAC,cAAc,CAAC,OAA0B,EAAE,MAAc,EAAE,IAAmB;QAClF,4DAA4D;QAC5D,OAAO,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IACD,SAAS,CAAC,OAA0B,EAAE,MAAc,EAAE,OAAsB,EAAE;QAC5E,mBAAmB;QACnB,OAAO,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC;CACF,CAAA"}

package/dist/plugins/agents/claude-code/mcp-approval-server.d.ts

@@ -0,0 +1,42 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+interface DecisionAllow {
+    behavior: 'allow';
+    updatedInput?: Record<string, unknown>;
+}
+interface DecisionDeny {
+    behavior: 'deny';
+    message?: string;
+}
+type Decision = DecisionAllow | DecisionDeny;
+declare class ApprovalClient {
+    private readonly socketPath;
+    private readonly runId;
+    private socket;
+    private buf;
+    private pending;
+    private connectErr;
+    private closed;
+    private connectPromise;
+    constructor(socketPath: string, runId: string);
+    private connect;
+    private onData;
+    private dispatch;
+    private onClose;
+    /**
+     * Send an approval request and wait for the decision. If the bus is
+     * unreachable or the connection has dropped, returns a deny synchronously.
+     */
+    request(args: {
+        toolName: string;
+        input: Record<string, unknown>;
+        toolUseId: string;
+    }): Promise<Decision>;
+    close(): Promise<void>;
+}
+/**
+ * Build the MCP server. Exposed as a function (rather than top-level `await`)
+ * so tests can construct it without spinning up stdio.
+ */
+export declare function buildServer(client: ApprovalClient): McpServer;
+export { ApprovalClient };
+//# sourceMappingURL=mcp-approval-server.d.ts.map

package/dist/plugins/agents/claude-code/mcp-approval-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-approval-server.d.ts","sourceRoot":"","sources":["../../../../src/plugins/agents/claude-code/mcp-approval-server.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AASnE,UAAU,aAAa;IAAG,QAAQ,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AACrF,UAAU,YAAY;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AAC7D,KAAK,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAA;AAS5C,cAAM,cAAc;IAQN,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAU,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPvE,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,cAAc,CAAe;gBAER,UAAU,EAAE,MAAM,EAAmB,KAAK,EAAE,MAAM;IAI/E,OAAO,CAAC,OAAO;IA0Bf,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,QAAQ;IAoBhB,OAAO,CAAC,OAAO;IAWf;;;OAGG;IACG,OAAO,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9B,SAAS,EAAE,MAAM,CAAA;KAClB,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2Bf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAU7B;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAyC7D;AAED,OAAO,EAAE,cAAc,EAAE,CAAA"}