osborn 0.8.3 → 0.8.5

package/dist/claude-auth.d.ts

@@ -13,7 +13,6 @@
  * On Linux/Docker, credentials go to ~/.claude/.credentials.json (file-based, no keyring).
  * The Fly.io volume at /workspace/.claude is symlinked to ~/.claude for persistence.
  */
-export declare function resolveClaudePath(): string;
 export interface ClaudeAuthCallbacks {
     onUrl: (url: string) => void;
     onWaitingForCode: () => void;

package/dist/claude-auth.js

@@ -25,7 +25,7 @@ import { join } from 'path';
  * Also checks Docker/Linux global npm paths for Fly.io/container deployments.
  */
 let _cachedClaudePath = null;
-export function resolveClaudePath() {
+function resolveClaudePath() {
     if (_cachedClaudePath)
         return _cachedClaudePath;
     // 1. Shell-based resolution — picks up nvm, homebrew, etc.

package/dist/claude-llm.js

@@ -11,8 +11,7 @@ import { query } from '@anthropic-ai/claude-agent-sdk';
 import { EventEmitter } from 'events';
 import { saveSessionMetadata, getSessionWorkspace } from './config.js';
 import { getResearchSystemPrompt, getDirectModeResearchPrompt } from './prompts.js';
-import { resolveClaudePath } from './claude-auth.js';
-import { existsSync, readdirSync, readFileSync, realpathSync } from 'node:fs';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 /**
  * Strip markdown formatting for TTS (text-to-speech)
@@ -743,27 +742,6 @@ class ClaudeLLMStream extends llm.LLMStream {
                 ? getSessionWorkspace(this.#opts.workingDirectory, sessionId)
                 : null;
             const allowedTools = this.#opts.allowedTools || [];
-            // Resolve Claude Code CLI path. The SDK looks for cli.js in its OWN node_modules
-            // dir by default, but when osborn is installed as an npm dependency the bundled
-            // SDK's cli.js loses its executable bit (npm strips it). Use the standalone
-            // @anthropic-ai/claude-code package's cli.js — found via the same shell-based
-            // resolver that claude-auth.ts uses for the CLI binary, then resolved through
-            // the symlink to the actual cli.js path.
-            const resolvedClaudeCli = (() => {
-                try {
-                    const claudeBin = resolveClaudePath(); // /usr/local/.../bin/claude (symlink) or /usr/local/.../bin/claude
-                    if (!claudeBin || claudeBin === 'claude')
-                        return undefined;
-                    // claude binary is a symlink to cli.js — resolve it
-                    const realPath = realpathSync(claudeBin);
-                    if (realPath.endsWith('cli.js') && existsSync(realPath))
-                        return realPath;
-                }
-                catch { }
-                return undefined;
-            })();
-            if (resolvedClaudeCli)
-                console.log(`🔧 Claude CLI: ${resolvedClaudeCli}`);
             const sdkOptions = {
                 cwd: this.#opts.workingDirectory,
                 permissionMode: this.#opts.permissionMode,
@@ -771,7 +749,6 @@ class ClaudeLLMStream extends llm.LLMStream {
                 model: this.#opts.model || 'claude-sonnet-4-6', // Sonnet orchestrator with named sub-agents (Haiku tested but ignored delegation rules)
                 enableFileCheckpointing: true,
                 extraArgs: { 'replay-user-messages': null },
-                ...(resolvedClaudeCli && { pathToClaudeCodeExecutable: resolvedClaudeCli }),
                 ...(this.#abortController && { abortController: this.#abortController }),
                 ...(resumeSessionId && { resume: resumeSessionId }),
                 ...(continueSession && !resumeSessionId && { continue: true }),
@@ -804,6 +781,17 @@ class ClaudeLLMStream extends llm.LLMStream {
                             console.log(`✅ Auto-approved ${toolName} to workspace: ${filePath}`);
                             return { behavior: 'allow', updatedInput: input };
                         }
+                        // Auto-approve writer sub-agent writes to skill installation directories.
+                        // Pattern matches `.claude/skills/<skillname>/<file>` in any osborn install location
+                        // (npm global, dev tree, cloud sandbox), so installing a multi-file skill via the
+                        // writer agent doesn't blow up into a per-file permission cascade.
+                        // Requires agent_type === 'writer' — main/researcher/reasoner are blocked by PreToolUse
+                        // before they ever reach canUseTool, so this check is the only path that lets a
+                        // skill install through silently.
+                        if (agentType === 'writer' && /\/\.claude\/skills\/[^/]+\//.test(filePath)) {
+                            console.log(`✅ Auto-approved writer ${toolName} to skill dir: ${filePath}`);
+                            return { behavior: 'allow', updatedInput: input };
+                        }
                         // if (toolUseId && this.#approvedWriterToolUseIds.has(toolUseId)) {
                         //   this.#approvedWriterToolUseIds.delete(toolUseId)
                         //   console.log(`✅ Writer pre-approved ${toolName}: ${filePath}`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "osborn",
-  "version": "0.8.3",
+  "version": "0.8.5",
   "description": "Voice AI coding assistant - local agent that connects to Osborn frontend",
   "type": "module",
   "bin": {