lorenz 0.1.0

package/runtime-deps/anthropic-claude-agent-sdk/extractFromBunfs.d.ts

@@ -0,0 +1 @@
+export function extractFromBunfs(embeddedPath: string): string

package/runtime-deps/anthropic-claude-agent-sdk/extractFromBunfs.js

@@ -0,0 +1,156 @@
+/* eslint-disable custom-rules/no-sync-fs */
+// Extracts a file from Bun's $bunfs virtual filesystem to a real temp directory
+// so it can be spawned as a subprocess (child processes cannot access $bunfs).
+//
+// Ships verbatim (unbundled) as the @anthropic-ai/claude-agent-sdk `./extract`
+// export — keep it standalone and Node-importable (no Bun globals, no
+// local-relative imports).
+
+import { createHash } from 'crypto'
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync,
+} from 'fs'
+import { tmpdir as osTmpdir } from 'os'
+import { basename, join } from 'path'
+
+// Inlined from src/utils/tempfile.ts — this file ships verbatim (unbundled) as
+// the @anthropic-ai/claude-agent-sdk/extract export, so it must have zero
+// local-relative imports. Keep behavior in sync with tempfile.ts#tmpdir.
+function tmpdir() {
+  if (process.env.CLAUDE_CODE_TMPDIR) {
+    return process.env.CLAUDE_CODE_TMPDIR
+  }
+  if (process.platform === 'darwin') {
+    // eslint-disable-next-line custom-rules/no-hardcoded-tmp -- mirrors tempfile.ts: macOS /tmp works fine; os.tmpdir() below is for Android-on-Linux where /tmp isn't writable.
+    return '/tmp'
+  }
+  return osTmpdir()
+}
+
+// Inlined from src/utils/tempfile.ts#claudeTempDir + verifyTempDirOwnership —
+// keep behavior in sync. Per-UID Claude temp directory: `{tmpdir()}/claude-{uid}`
+// on Unix, `{tmpdir()}/claude` on Windows (where %TEMP% is already per-user).
+//
+// Defense-in-depth against a local attacker pre-creating the extraction dir
+// before the victim's first run: the content-hash dir name is fully predictable
+// (sha256 of a public npm binary) under shared `/tmp`, and
+// `mkdirSync({recursive:true})` is a silent no-op on a pre-existing dir without
+// enforcing owner or mode. Without this check an attacker-owned directory would
+// be used as-is, letting them swap the binary the SDK later spawns.
+function safeTempBase() {
+  const dir = join(
+    tmpdir(),
+    process.platform === 'win32'
+      ? 'claude'
+      : `claude-${process.getuid?.() ?? 0}`,
+  )
+  // Gate on getuid (POSIX-only) rather than process.platform: getuid presence
+  // reflects the real OS. No-op on Windows where %TEMP% is already per-user.
+  if (typeof process.getuid === 'function') {
+    mkdirSync(dir, { recursive: true, mode: 0o700 })
+    const uid = process.getuid()
+    const st = lstatSync(dir)
+    if (!st.isDirectory()) {
+      throw new Error(
+        `Temp directory ${dir} is not a directory (may be an attacker-planted symlink). Refusing to use it.`,
+      )
+    }
+    if (st.uid !== uid) {
+      throw new Error(
+        `Temp directory ${dir} is owned by uid ${st.uid}, expected ${uid}. Refusing to use it — another user may have pre-created it.`,
+      )
+    }
+    if ((st.mode & 0o777) !== 0o700) {
+      // Owner matches, so this is our own dir from a prior run with a looser
+      // umask rather than an attacker pre-create. Tighten it.
+      chmodSync(dir, 0o700)
+    }
+  } else {
+    // Windows: best-effort create; verification is skipped (%TEMP% is per-user).
+    try {
+      mkdirSync(dir, { recursive: true, mode: 0o700 })
+    } catch {
+      // best-effort; see comment above
+    }
+  }
+  return dir
+}
+
+/**
+ * If `embeddedPath` is inside Bun's $bunfs virtual filesystem, extract it to a
+ * temp directory and return the real path. Otherwise return the path unchanged.
+ *
+ * Uses a content hash for the directory name so that:
+ * - Same binary version reuses the same extracted file (no accumulation)
+ * - Different versions get separate directories (no collision)
+ * - Concurrent instances are safe (atomic write via temp file + rename)
+ *
+ * @param {string} embeddedPath — path returned by `import ... with { type: 'file' }`
+ * @returns {string} — a real filesystem path that can be spawned as a subprocess
+ */
+export function extractFromBunfs(embeddedPath) {
+  // Bun single-file embed: `/$bunfs/root/...` (POSIX) or `B:\~BUN\root\...`
+  // (Windows — Bun's StandaloneModuleGraph uses `~BUN`, not `$bunfs`, on Windows).
+  if (!embeddedPath.includes('$bunfs') && !embeddedPath.includes('~BUN')) {
+    return embeddedPath
+  }
+
+  try {
+    const content = readFileSync(embeddedPath)
+    const hash = createHash('sha256').update(content).digest('hex').slice(0, 16)
+    const tmpDir = join(safeTempBase(), `claude-agent-sdk-${hash}`)
+    // Preserve the embedded file's basename — ProcessTransport.isNativeBinary()
+    // decides whether to spawn directly or via node/bun based on extension, so
+    // a native binary must not come out named cli.js.
+    const fileName = basename(embeddedPath)
+    const tmpPath = join(tmpDir, fileName)
+    mkdirSync(tmpDir, { recursive: true, mode: 0o700 })
+    // The directory is content-hash-keyed, so an existing tmpPath is byte-
+    // identical to what we would write — short-circuit. This is a write
+    // idempotency check on a content-addressed path, not a read TOCTOU
+    // (the existence IS the contract). Without it, a second call (or a
+    // concurrent app instance) on Windows would hit EPERM/EBUSY renaming over
+    // the memory-mapped running .exe and fall back to the unspawnable $bunfs
+    // path. It also skips a redundant write+chmod on every call.
+    if (existsSync(tmpPath)) {
+      return tmpPath
+    }
+    // Write to a temp file and atomically rename to avoid truncation races —
+    // concurrent readers always see either the old complete file or the new one.
+    const tmpFile = join(tmpDir, `${fileName}.tmp.${process.pid}`)
+    writeFileSync(tmpFile, content)
+    chmodSync(tmpFile, 0o755)
+    try {
+      renameSync(tmpFile, tmpPath)
+    } catch (e) {
+      if ((e.code === 'EPERM' || e.code === 'EBUSY') && existsSync(tmpPath)) {
+        // Lost a concurrent first-time-extraction race on Windows: the winner's
+        // child holds tmpPath memory-mapped, so the loser's rename over it fails.
+        // The content-hash dir guarantees byte-identity, so the winner's file is
+        // exactly what we'd have written — use it.
+        try {
+          unlinkSync(tmpFile)
+        } catch {
+          // best-effort cleanup of our orphaned .tmp.{pid} file
+        }
+        return tmpPath
+      }
+      throw e
+    }
+    return tmpPath
+  } catch (err) {
+    // biome-ignore lint/suspicious/noConsole: intentional user-facing warning in standalone SDK helper
+    console.warn(
+      `[claude-agent-sdk] Failed to extract CLI from $bunfs: ${err.message}. ` +
+        `Child processes cannot access $bunfs paths — the CLI will likely fail to start.`,
+    )
+    return embeddedPath
+  }
+}

package/runtime-deps/anthropic-claude-agent-sdk/manifest.json

@@ -0,0 +1,47 @@
+{
+  "version": "2.1.160",
+  "commit": "de93a1b1a590fe446df917b81bab02a21fed62b6",
+  "buildDate": "2026-06-01T15:46:25Z",
+  "platforms": {
+    "darwin-arm64": {
+      "binary": "claude",
+      "checksum": "6c9069a9ee0e7b9b6ee43d006c3402e66815e19f87ac4313330cf03f83611968",
+      "size": 217429920
+    },
+    "darwin-x64": {
+      "binary": "claude",
+      "checksum": "2fb7c11111152f62ab36bd093776d71410fbe047e938fe37719ff65ab76c0714",
+      "size": 219944080
+    },
+    "linux-arm64": {
+      "binary": "claude",
+      "checksum": "1fcf285194a0ea0c5e09973c4c5910f71c5abf451930f0b9c79441d7501ac229",
+      "size": 242726536
+    },
+    "linux-x64": {
+      "binary": "claude",
+      "checksum": "2b84cc2e04633619eab02b9f77ed00a56b64682b4fa7b3267149ee9eb1fecfc7",
+      "size": 242845392
+    },
+    "linux-arm64-musl": {
+      "binary": "claude",
+      "checksum": "f3ab15d3a823c3ebb636b0f57c003f518b8c00fd7c1da3e4699a7004491703bc",
+      "size": 235581272
+    },
+    "linux-x64-musl": {
+      "binary": "claude",
+      "checksum": "0f267fd2f4ca1c09f4eea7bf12a3df62f663e450903572419ea70fe6f7db3218",
+      "size": 237239344
+    },
+    "win32-x64": {
+      "binary": "claude.exe",
+      "checksum": "51080c42aca4532d866e8f9d4efbe81bac6dfca2807f201125961e37a64155a7",
+      "size": 238434976
+    },
+    "win32-arm64": {
+      "binary": "claude.exe",
+      "checksum": "e5e4ba3bacaffed42a432179ae5e14e0be5ccb875a851b5be1eb411537425779",
+      "size": 234400416
+    }
+  }
+}

package/runtime-deps/anthropic-claude-agent-sdk/manifest.zst.json

@@ -0,0 +1,55 @@
+{
+  "version": "2.1.160",
+  "commit": "de93a1b1a590fe446df917b81bab02a21fed62b6",
+  "buildDate": "2026-06-01T15:54:16Z",
+  "platforms": {
+    "darwin-arm64": {
+      "binary": "claude.zst",
+      "checksum": "b0b46155278d33ce01fbc3a5fe732a417d7043ab3925dc603f02802830edee9a",
+      "size": 44755996,
+      "bundle": {
+        "checksum": "0b64fa56fbc47f73b04a354264219438907bb2810f4fdc81d45f55fb02fd0d40",
+        "size": 44758281
+      }
+    },
+    "darwin-x64": {
+      "binary": "claude.zst",
+      "checksum": "32f40c64f4bd71a03859b92d446c7223b0d38f3b6544107cca7321dbe1b72577",
+      "size": 46656899,
+      "bundle": {
+        "checksum": "d37c157eae47256cab66b3a28f1ee352840a750e1c52d80c8a4be1dda6c1852f",
+        "size": 46660369
+      }
+    },
+    "linux-arm64": {
+      "binary": "claude.zst",
+      "checksum": "1a6ef9657f6b6aa269cf13e67264932094a4672ae8eff5ad38b385a906a55dd4",
+      "size": 52435988
+    },
+    "linux-x64": {
+      "binary": "claude.zst",
+      "checksum": "3a54f54e987cd9a92a93b19300f7517d4cd64fa2f6ecf9fd99b813d1ffbe1f02",
+      "size": 53055750
+    },
+    "linux-arm64-musl": {
+      "binary": "claude.zst",
+      "checksum": "6f343c12ce7e94960bbea30cc56dfa7e09efce6609b0c9ce35afdf6209aa0832",
+      "size": 51088958
+    },
+    "linux-x64-musl": {
+      "binary": "claude.zst",
+      "checksum": "aca16a0315d87c822d1caa026f67a29bc2b5e14ff491d155fc697f24883d7995",
+      "size": 51791112
+    },
+    "win32-x64": {
+      "binary": "claude.exe.zst",
+      "checksum": "80639cbd59d5dc252ace45571e3076adda31435adedd39d86b9c5f128b54ccc6",
+      "size": 53799660
+    },
+    "win32-arm64": {
+      "binary": "claude.exe.zst",
+      "checksum": "606df27e59d1eb3c9ac12229f68260e9ac3bb968ce0d42eb3084899caa23e0ef",
+      "size": 52073128
+    }
+  }
+}

package/runtime-deps/anthropic-claude-agent-sdk/node_modules/.bin/anthropic-ai-sdk

@@ -0,0 +1,21 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/sdk/bin/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/sdk/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/sdk/bin/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/sdk/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules:/Users/ryan/dev/symphony/ts/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../../../../../../@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/sdk/bin/cli" "$@"
+else
+  exec node  "$basedir/../../../../../../@anthropic-ai+sdk@0.100.1_zod@4.4.3/node_modules/@anthropic-ai/sdk/bin/cli" "$@"
+fi

package/runtime-deps/anthropic-claude-agent-sdk/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@anthropic-ai/claude-agent-sdk",
+  "version": "0.3.160",
+  "main": "sdk.mjs",
+  "types": "sdk.d.ts",
+  "exports": {
+    ".": {
+      "types": "./sdk.d.ts",
+      "default": "./sdk.mjs"
+    },
+    "./extract": {
+      "types": "./extractFromBunfs.d.ts",
+      "default": "./extractFromBunfs.js"
+    },
+    "./browser": {
+      "types": "./browser-sdk.d.ts",
+      "default": "./browser-sdk.js"
+    },
+    "./bridge": {
+      "types": "./bridge.d.ts",
+      "default": "./bridge.mjs"
+    },
+    "./assistant": {
+      "types": "./assistant.d.ts",
+      "default": "./assistant.mjs"
+    },
+    "./sdk-tools": {
+      "types": "./sdk-tools.d.ts"
+    },
+    "./sdk-tools.js": {
+      "types": "./sdk-tools.d.ts"
+    }
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "type": "module",
+  "author": "Anthropic <support@anthropic.com>",
+  "license": "SEE LICENSE IN README.md",
+  "description": "SDK for building AI agents with Claude Code's capabilities. Programmatically interact with Claude to build autonomous agents that can understand codebases, edit files, and execute workflows.",
+  "homepage": "https://github.com/anthropics/claude-agent-sdk-typescript",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/anthropics/claude-agent-sdk-typescript.git"
+  },
+  "bugs": {
+    "url": "https://github.com/anthropics/claude-agent-sdk-typescript/issues"
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "sdk",
+    "claude",
+    "anthropic",
+    "automation",
+    "code-generation"
+  ],
+  "peerDependencies": {
+    "@anthropic-ai/sdk": ">=0.93.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.0.0"
+  },
+  "files": [
+    "sdk.mjs",
+    "sdk.d.ts",
+    "sdk-tools.d.ts",
+    "agentSdkTypes.d.ts",
+    "bridge.mjs",
+    "bridge.d.ts",
+    "assistant.mjs",
+    "assistant.d.ts",
+    "browser-sdk.js",
+    "browser-sdk.d.ts",
+    "extractFromBunfs.js",
+    "extractFromBunfs.d.ts",
+    "manifest.json",
+    "manifest.zst.json"
+  ],
+  "claudeCodeVersion": "2.1.160",
+  "private": true
+}