nomoreide 0.1.30 → 0.1.31

package/dist/core/agent-runtime.d.ts

@@ -0,0 +1,56 @@
+import type { ApprovalBroker } from "./approval-broker.js";
+/** Streamed back to the route, which forwards each as an SSE event. */
+export type AgentStreamEvent = {
+    type: "session";
+    sessionId: string;
+} | {
+    type: "text";
+    text: string;
+} | {
+    type: "tool_use";
+    id: string;
+    name: string;
+    input: unknown;
+} | {
+    type: "tool_result";
+    id: string;
+    name: string;
+    preview: string;
+    isError: boolean;
+} | {
+    type: "approval_request";
+    requestId: string;
+    name: string;
+    input: unknown;
+} | {
+    type: "done";
+    stopReason: string | null;
+} | {
+    type: "error";
+    message: string;
+};
+export interface AgentRuntimeDeps {
+    /** Working directory the Claude Code session runs in (the workspace root). */
+    cwd: string;
+}
+export interface AgentRunOptions {
+    signal?: AbortSignal;
+    /** When present, gated tools prompt the dock for approval via this broker. */
+    approval?: {
+        broker: ApprovalBroker;
+        url: string;
+    };
+}
+/** True when the `claude` CLI is installed and runnable. Memoized. */
+export declare function isAgentAvailable(): Promise<boolean>;
+/** Whether tool calls are gated behind dock approval (vs. fully autonomous). */
+export declare function approvalsEnabled(): boolean;
+export declare class AgentRuntime {
+    private readonly deps;
+    constructor(deps: AgentRuntimeDeps);
+    /**
+     * Run one user turn. Streams events until the CLI exits. `resumeSessionId`
+     * continues a prior Claude Code session; omit it to start a fresh one.
+     */
+    run(message: string, resumeSessionId: string | undefined, onEvent: (event: AgentStreamEvent) => void, options?: AgentRunOptions): Promise<void>;
+}

package/dist/core/agent-runtime.js

@@ -0,0 +1,322 @@
+import { spawn } from "node:child_process";
+import { mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+/**
+ * In-dashboard AI agent backed by the real Claude Code CLI. We drive the
+ * installed `claude` binary in headless streaming mode (`--output-format
+ * stream-json`) rather than the Anthropic API directly, so the dock gets the
+ * full Claude Code agent — its tools, this project's .mcp.json / CLAUDE.md, and
+ * the user's existing Claude Code login (no separate API key).
+ *
+ * Conversation continuity uses Claude Code's own session store: the first turn
+ * returns a `session_id`, which the client sends back as `resumeSessionId` on
+ * the next turn (`--resume`). The server holds no transcript state.
+ *
+ * Tool permissions: unless NOMOREIDE_AGENT_PERMISSION_MODE=bypassPermissions,
+ * the agent runs in `default` mode with a PreToolUse hook on mutating tools.
+ * The hook blocks and asks the dock (via ApprovalBroker) for an Allow/Deny.
+ */
+const CLAUDE_BIN = process.env.NOMOREIDE_CLAUDE_BIN || "claude";
+/** "bypassPermissions" runs fully autonomous (no approval prompts). */
+const PERMISSION_MODE = process.env.NOMOREIDE_AGENT_PERMISSION_MODE || "default";
+/** Tools that trigger an approval prompt (mutating / side-effecting ones). */
+const GATED_TOOLS = "Bash|Edit|Write|MultiEdit|NotebookEdit";
+/** Truncate tool-result previews shown in the dock. */
+const PREVIEW_LIMIT = 400;
+let availabilityProbe = null;
+/** True when the `claude` CLI is installed and runnable. Memoized. */
+export function isAgentAvailable() {
+    if (!availabilityProbe) {
+        availabilityProbe = new Promise((resolve) => {
+            const child = spawn(CLAUDE_BIN, ["--version"], { stdio: "ignore" });
+            child.on("error", () => resolve(false));
+            child.on("close", (code) => resolve(code === 0));
+        }).catch(() => false);
+    }
+    return availabilityProbe;
+}
+/** Whether tool calls are gated behind dock approval (vs. fully autonomous). */
+export function approvalsEnabled() {
+    return PERMISSION_MODE !== "bypassPermissions";
+}
+export class AgentRuntime {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Run one user turn. Streams events until the CLI exits. `resumeSessionId`
+     * continues a prior Claude Code session; omit it to start a fresh one.
+     */
+    async run(message, resumeSessionId, onEvent, options = {}) {
+        const { signal, approval } = options;
+        const gating = Boolean(approval) && approvalsEnabled();
+        const args = [
+            "--print",
+            "--output-format",
+            "stream-json",
+            "--verbose",
+            "--include-partial-messages",
+            "--permission-mode",
+            gating ? "default" : PERMISSION_MODE,
+        ];
+        if (gating) {
+            args.push("--settings", approvalSettings());
+        }
+        if (resumeSessionId)
+            args.push("--resume", resumeSessionId);
+        args.push(message);
+        const env = gating
+            ? { ...process.env, NOMOREIDE_APPROVAL_URL: approval.url }
+            : process.env;
+        await new Promise((resolve) => {
+            const child = spawn(CLAUDE_BIN, args, { cwd: this.deps.cwd, env });
+            const toolNames = new Map();
+            let stdout = "";
+            let stderr = "";
+            let finished = false;
+            let openedSession;
+            const finish = () => {
+                if (finished)
+                    return;
+                finished = true;
+                if (openedSession)
+                    approval?.broker.closeRun(openedSession);
+                resolve();
+            };
+            // Bridge the broker's approval requests onto the SSE stream the moment
+            // we learn this run's session id.
+            const onLine = (line) => {
+                const sessionId = handleLine(line, toolNames, onEvent);
+                if (sessionId && gating && !openedSession) {
+                    openedSession = sessionId;
+                    approval.broker.openRun(sessionId, (request) => onEvent({
+                        type: "approval_request",
+                        requestId: request.requestId,
+                        name: request.name,
+                        input: request.input,
+                    }));
+                }
+            };
+            if (signal) {
+                if (signal.aborted)
+                    child.kill();
+                else
+                    signal.addEventListener("abort", () => child.kill(), { once: true });
+            }
+            child.on("error", (error) => {
+                onEvent({
+                    type: "error",
+                    message: error.code === "ENOENT"
+                        ? `Could not run "${CLAUDE_BIN}". Install Claude Code or set NOMOREIDE_CLAUDE_BIN.`
+                        : error.message,
+                });
+                finish();
+            });
+            child.stdout.setEncoding("utf8");
+            child.stdout.on("data", (chunk) => {
+                stdout += chunk;
+                let newline = stdout.indexOf("\n");
+                while (newline !== -1) {
+                    const line = stdout.slice(0, newline).trim();
+                    stdout = stdout.slice(newline + 1);
+                    if (line)
+                        onLine(line);
+                    newline = stdout.indexOf("\n");
+                }
+            });
+            child.stderr.setEncoding("utf8");
+            child.stderr.on("data", (chunk) => {
+                stderr += chunk;
+            });
+            child.on("close", (code) => {
+                if (signal?.aborted)
+                    return finish();
+                const leftover = stdout.trim();
+                if (leftover)
+                    onLine(leftover);
+                if (code !== 0) {
+                    onEvent({
+                        type: "error",
+                        message: stderr.trim() || `Claude Code exited with code ${code}.`,
+                    });
+                }
+                finish();
+            });
+        });
+    }
+}
+/**
+ * Parse one NDJSON line from Claude Code's stream-json output, emitting the
+ * relevant dock events. Returns the session id when this line is the init event.
+ */
+function handleLine(line, toolNames, onEvent) {
+    let obj;
+    try {
+        obj = JSON.parse(line);
+    }
+    catch {
+        return undefined;
+    }
+    switch (obj.type) {
+        case "system": {
+            if (obj.subtype === "init" && typeof obj.session_id === "string") {
+                onEvent({ type: "session", sessionId: obj.session_id });
+                return obj.session_id;
+            }
+            return undefined;
+        }
+        case "stream_event": {
+            // Token-level text deltas (from --include-partial-messages).
+            const event = obj.event;
+            if (event?.type === "content_block_delta" && event.delta?.type === "text_delta") {
+                onEvent({ type: "text", text: event.delta.text ?? "" });
+            }
+            return undefined;
+        }
+        case "assistant": {
+            for (const block of messageContent(obj.message)) {
+                if (block.type === "tool_use" && typeof block.id === "string") {
+                    toolNames.set(block.id, String(block.name));
+                    onEvent({ type: "tool_use", id: block.id, name: String(block.name), input: block.input });
+                }
+            }
+            return undefined;
+        }
+        case "user": {
+            for (const block of messageContent(obj.message)) {
+                if (block.type === "tool_result" && typeof block.tool_use_id === "string") {
+                    onEvent({
+                        type: "tool_result",
+                        id: block.tool_use_id,
+                        name: toolNames.get(block.tool_use_id) ?? "tool",
+                        preview: previewOf(block.content),
+                        isError: Boolean(block.is_error),
+                    });
+                }
+            }
+            return undefined;
+        }
+        case "result": {
+            onEvent({ type: "done", stopReason: typeof obj.subtype === "string" ? obj.subtype : null });
+            return undefined;
+        }
+        default:
+            return undefined;
+    }
+}
+function messageContent(message) {
+    const content = message?.content;
+    return Array.isArray(content) ? content : [];
+}
+function previewOf(content) {
+    let text;
+    if (typeof content === "string") {
+        text = content;
+    }
+    else if (Array.isArray(content)) {
+        text = content
+            .map((block) => typeof block === "string"
+            ? block
+            : typeof block.text === "string"
+                ? block.text
+                : "")
+            .join(" ");
+    }
+    else {
+        text = "";
+    }
+    text = text.trim();
+    return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}…` : text;
+}
+let hookPath;
+let settingsJson;
+/** Inline `--settings` JSON installing the PreToolUse approval hook. Cached. */
+function approvalSettings() {
+    if (!settingsJson) {
+        const command = `node ${JSON.stringify(ensureHookScript())}`;
+        settingsJson = JSON.stringify({
+            hooks: {
+                PreToolUse: [{ matcher: GATED_TOOLS, hooks: [{ type: "command", command }] }],
+            },
+        });
+    }
+    return settingsJson;
+}
+/**
+ * Write the approval-hook script to a temp file once, runnable by plain `node`
+ * in both dev (tsx) and built modes. It POSTs the pending tool call to the web
+ * server and blocks until the user's decision returns, then prints the
+ * PreToolUse permission decision Claude Code expects.
+ */
+function ensureHookScript() {
+    if (hookPath)
+        return hookPath;
+    const dir = mkdtempSync(join(tmpdir(), "nomoreide-agent-"));
+    hookPath = join(dir, "approval-hook.cjs");
+    writeFileSync(hookPath, HOOK_SOURCE, "utf8");
+    return hookPath;
+}
+const HOOK_SOURCE = `"use strict";
+const http = require("http");
+const { randomUUID } = require("crypto");
+let body = "";
+process.stdin.on("data", (d) => (body += d));
+process.stdin.on("end", () => {
+  let input = {};
+  try { input = JSON.parse(body); } catch {}
+  const url = process.env.NOMOREIDE_APPROVAL_URL;
+  if (!url) return decide("deny", "Approval channel not configured.");
+  let target;
+  try { target = new URL(url); } catch { return decide("deny", "Bad approval URL."); }
+  const payload = JSON.stringify({
+    sessionId: input.session_id,
+    requestId: randomUUID(),
+    toolName: input.tool_name,
+    toolInput: input.tool_input,
+  });
+  const req = http.request(
+    {
+      hostname: target.hostname,
+      port: target.port,
+      path: target.pathname,
+      method: "POST",
+      headers: { "content-type": "application/json", "content-length": Buffer.byteLength(payload) },
+    },
+    (res) => {
+      let data = "";
+      res.setEncoding("utf8");
+      res.on("data", (c) => (data += c));
+      res.on("end", () => {
+        try {
+          const r = JSON.parse(data);
+          decide(r.decision === "allow" ? "allow" : "deny", r.reason);
+        } catch {
+          decide("deny", "No decision returned.");
+        }
+      });
+    },
+  );
+  req.on("error", () => decide("deny", "Approval request failed to reach NoMoreIDE."));
+  req.setTimeout(10 * 60 * 1000, () => {
+    req.destroy();
+    decide("deny", "Approval timed out.");
+  });
+  req.write(payload);
+  req.end();
+});
+function decide(permissionDecision, reason) {
+  process.stdout.write(
+    JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision,
+        permissionDecisionReason: reason || "",
+      },
+    }),
+  );
+  process.exit(0);
+}
+`;
+//# sourceMappingURL=agent-runtime.js.map

package/dist/core/agent-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime.js","sourceRoot":"","sources":["../../src/core/agent-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;;;;;;;;;;;;;GAcG;AAEH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,QAAQ,CAAC;AAChE,uEAAuE;AACvE,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,SAAS,CAAC;AACjF,8EAA8E;AAC9E,MAAM,WAAW,GAAG,wCAAwC,CAAC;AAC7D,uDAAuD;AACvD,MAAM,aAAa,GAAG,GAAG,CAAC;AAuB1B,IAAI,iBAAiB,GAA4B,IAAI,CAAC;AAEtD,sEAAsE;AACtE,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,KAAK,mBAAmB,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;IAAG,CAAC;IAEvD;;;OAGG;IACH,KAAK,CAAC,GAAG,CACP,OAAe,EACf,eAAmC,EACnC,OAA0C,EAC1C,UAA2B,EAAE;QAE7B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAEvD,MAAM,IAAI,GAAG;YACX,SAAS;YACT,iBAAiB;YACjB,aAAa;YACb,WAAW;YACX,4BAA4B;YAC5B,mBAAmB;YACnB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe;SACrC,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,eAAe;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnB,MAAM,GAAG,GAAG,MAAM;YAChB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,sBAAsB,EAAE,QAAS,CAAC,GAAG,EAAE;YAC3D,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAEhB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,aAAiC,CAAC;YAEtC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,aAAa;oBAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAC5D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YAEF,uEAAuE;YACvE,kCAAkC;YAClC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;gBAC9B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACvD,IAAI,SAAS,IAAI,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC1C,aAAa,GAAG,SAAS,CAAC;oBAC1B,QAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9C,OAAO,CAAC;wBACN,IAAI,EAAE,kBAAkB;wBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;qBACrB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO;oBAAE,KAAK,CAAC,IAAI,EAAE,CAAC;;oBAC5B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,OAAO,CAAC;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EACJ,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAChD,CAAC,CAAC,kBAAkB,UAAU,qDAAqD;wBACnF,CAAC,CAAC,KAAK,CAAC,OAAO;iBACpB,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC;gBAChB,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACnC,IAAI,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBACvB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,MAAM,EAAE,OAAO;oBAAE,OAAO,MAAM,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC/B,IAAI,QAAQ;oBAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,CAAC;wBACN,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,gCAAgC,IAAI,GAAG;qBAClE,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,IAAY,EACZ,SAA8B,EAC9B,OAA0C;IAE1C,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACjE,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxD,OAAO,GAAG,CAAC,UAAU,CAAC;YACxB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,6DAA6D;YAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAoE,CAAC;YACvF,IAAI,KAAK,EAAE,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChF,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAC9D,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5C,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;oBAC1E,OAAO,CAAC;wBACN,IAAI,EAAE,aAAa;wBACnB,EAAE,EAAE,KAAK,CAAC,WAAW;wBACrB,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM;wBAChD,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;wBACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;qBACjC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5F,OAAO,SAAS,CAAC;QACnB,CAAC;QACD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAYD,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,OAAO,GAAI,OAAiC,EAAE,OAAO,CAAC;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,GAAG,OAAO;aACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;gBACtD,CAAC,CAAE,KAA0B,CAAC,IAAI;gBAClC,CAAC,CAAC,EAAE,CACT;aACA,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,OAAO,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,IAAI,QAA4B,CAAC;AACjC,IAAI,YAAgC,CAAC;AAErC,gFAAgF;AAChF,SAAS,gBAAgB;IACvB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;QAC7D,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;aAC9E;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB;IACvB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC1C,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4DnB,CAAC"}

package/dist/core/approval-broker.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Bridges Claude Code's PreToolUse permission hook to the web UI. The hook
+ * (a child process of the spawned `claude`) POSTs an approval request and
+ * blocks; the broker emits it onto the active chat SSE stream and parks a
+ * resolver until the browser POSTs the user's decision back.
+ *
+ * Keyed by Claude Code session id, which both the SSE stream (from the init
+ * event) and the hook (from its stdin payload) know.
+ */
+export interface ApprovalRequest {
+    requestId: string;
+    name: string;
+    input: unknown;
+}
+export interface ApprovalDecision {
+    decision: "allow" | "deny";
+    reason?: string;
+}
+export declare class ApprovalBroker {
+    private readonly channels;
+    /** Register the SSE emitter for a session so approvals can reach the browser. */
+    openRun(sessionId: string, emit: (request: ApprovalRequest) => void): void;
+    /** Tear down a session, auto-denying anything still awaiting a decision. */
+    closeRun(sessionId: string): void;
+    /** Called by the hook endpoint. Resolves once the user decides (or no channel). */
+    requestApproval(sessionId: string | undefined, requestId: string, name: string, input: unknown): Promise<ApprovalDecision>;
+    /** Called by the browser. Returns false if the request is unknown/expired. */
+    resolve(sessionId: string, requestId: string, decision: ApprovalDecision): boolean;
+}

package/dist/core/approval-broker.js

@@ -0,0 +1,48 @@
+/**
+ * Bridges Claude Code's PreToolUse permission hook to the web UI. The hook
+ * (a child process of the spawned `claude`) POSTs an approval request and
+ * blocks; the broker emits it onto the active chat SSE stream and parks a
+ * resolver until the browser POSTs the user's decision back.
+ *
+ * Keyed by Claude Code session id, which both the SSE stream (from the init
+ * event) and the hook (from its stdin payload) know.
+ */
+export class ApprovalBroker {
+    channels = new Map();
+    /** Register the SSE emitter for a session so approvals can reach the browser. */
+    openRun(sessionId, emit) {
+        this.channels.set(sessionId, { emit, pending: new Map() });
+    }
+    /** Tear down a session, auto-denying anything still awaiting a decision. */
+    closeRun(sessionId) {
+        const channel = this.channels.get(sessionId);
+        if (!channel)
+            return;
+        for (const resolve of channel.pending.values()) {
+            resolve({ decision: "deny", reason: "The agent session ended before you responded." });
+        }
+        this.channels.delete(sessionId);
+    }
+    /** Called by the hook endpoint. Resolves once the user decides (or no channel). */
+    requestApproval(sessionId, requestId, name, input) {
+        const channel = sessionId ? this.channels.get(sessionId) : undefined;
+        if (!channel) {
+            return Promise.resolve({ decision: "deny", reason: "No active agent session to approve." });
+        }
+        return new Promise((resolve) => {
+            channel.pending.set(requestId, resolve);
+            channel.emit({ requestId, name, input });
+        });
+    }
+    /** Called by the browser. Returns false if the request is unknown/expired. */
+    resolve(sessionId, requestId, decision) {
+        const channel = this.channels.get(sessionId);
+        const resolver = channel?.pending.get(requestId);
+        if (!channel || !resolver)
+            return false;
+        channel.pending.delete(requestId);
+        resolver(decision);
+        return true;
+    }
+}
+//# sourceMappingURL=approval-broker.js.map

package/dist/core/approval-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-broker.js","sourceRoot":"","sources":["../../src/core/approval-broker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,MAAM,OAAO,cAAc;IACR,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEvD,iFAAiF;IACjF,OAAO,CAAC,SAAiB,EAAE,IAAwC;QACjE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,4EAA4E;IAC5E,QAAQ,CAAC,SAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,mFAAmF;IACnF,eAAe,CACb,SAA6B,EAC7B,SAAiB,EACjB,IAAY,EACZ,KAAc;QAEd,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,OAAO,CAAC,SAAiB,EAAE,SAAiB,EAAE,QAA0B;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}