patchwork-os 0.2.0-alpha.0 → 0.2.0-alpha.10

package/dist/connectors/sentry.js

@@ -0,0 +1,197 @@
+/**
+ * Sentry connector — routes through Sentry's official MCP server.
+ *
+ * Endpoint: https://mcp.sentry.dev/mcp
+ * Auth:     OAuth 2.1 w/ PKCE; dynamic client registration (RFC 7591).
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/sentry/authorize — returns { url } for popup
+ *   GET    /connections/sentry/callback  — token exchange
+ *   POST   /connections/sentry/test      — ping MCP server
+ *   DELETE /connections/sentry           — revoke + delete token
+ *
+ * MCP tool: fetchSentryIssue — fetches a Sentry issue/event and returns
+ * the stack trace string, ready to pass into enrichStackTrace.
+ */
+import { McpClient } from "./mcpClient.js";
+import { completeAuthorize, getAccessToken, loadTokenFile, revoke, startAuthorize, vendorConfig, } from "./mcpOAuth.js";
+const SENTRY_MCP_ENDPOINT = "https://mcp.sentry.dev/mcp";
+// ── MCP client ───────────────────────────────────────────────────────────────
+let _client = null;
+function client() {
+    if (!_client) {
+        _client = new McpClient(SENTRY_MCP_ENDPOINT, () => getAccessToken("sentry"));
+    }
+    return _client;
+}
+// ── Back-compat ──────────────────────────────────────────────────────────────
+export function loadTokens() {
+    const file = loadTokenFile("sentry");
+    if (!file)
+        return null;
+    return {
+        auth_token: file.access_token,
+        org: file.profile?.org,
+        connected_at: file.connected_at,
+    };
+}
+export function getStatus() {
+    const file = loadTokenFile("sentry");
+    return {
+        id: "sentry",
+        status: file ? "connected" : "disconnected",
+        lastSync: file?.connected_at,
+        org: file?.profile?.org,
+    };
+}
+// ── Issue fetch ──────────────────────────────────────────────────────────────
+function extractIssueId(issueIdOrUrl) {
+    const urlMatch = issueIdOrUrl.match(/\/issues\/(\d+)/);
+    if (urlMatch)
+        return urlMatch[1];
+    const trimmed = issueIdOrUrl.trim();
+    if (/^\d+$/.test(trimmed))
+        return trimmed;
+    throw new Error(`Cannot parse Sentry issue ID from: ${issueIdOrUrl}`);
+}
+function extractOrgSlug(issueIdOrUrl) {
+    const m = issueIdOrUrl.match(/https?:\/\/([^.]+)\.sentry\.io/);
+    return m ? m[1] : null;
+}
+function buildSentryIssueUrl(issueId, orgSlug) {
+    return `https://${orgSlug}.sentry.io/issues/${issueId}/`;
+}
+export async function fetchIssueStackTrace(issueIdOrUrl, signal) {
+    if (!loadTokens())
+        throw new Error("Sentry not connected. GET /connections/sentry/authorize first.");
+    const issueId = extractIssueId(issueIdOrUrl);
+    const orgSlug = extractOrgSlug(issueIdOrUrl) ?? loadTokenFile("sentry")?.profile?.org;
+    if (!orgSlug)
+        throw new Error("Cannot determine Sentry org slug. Pass full sentry.io issue URL.");
+    const issueUrl = buildSentryIssueUrl(issueId, orgSlug);
+    const res = await client().callTool("get_sentry_resource", { url: issueUrl }, { signal });
+    // get_sentry_resource returns markdown text — extract title and stacktrace
+    const text = res.content?.[0]?.text ?? "";
+    const titleMatch = text.match(/\*\*Description\*\*:\s*(.+)/);
+    const title = titleMatch
+        ? titleMatch[1].trim()
+        : `Sentry issue ${issueId}`;
+    // Extract stacktrace block
+    const stMatch = text.match(/```(?:\w+)?\n([\s\S]*?)\n```/);
+    if (!stMatch) {
+        throw new Error(`Sentry returned no stack trace for issue ${issueId}`);
+    }
+    const stackTrace = stMatch[1].trim();
+    return { stackTrace, title, issueId };
+}
+// ── HTTP handlers ────────────────────────────────────────────────────────────
+export async function handleSentryAuthorize() {
+    try {
+        const { url } = await startAuthorize(vendorConfig("sentry"));
+        return { status: 302, body: "", redirect: url };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+export async function handleSentryCallback(code, state, error) {
+    if (error) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Sentry connect failed</h2><pre>${error}</pre></body></html>`,
+        };
+    }
+    if (!code || !state) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Sentry connect failed</h2><pre>missing code/state</pre></body></html>`,
+        };
+    }
+    try {
+        await completeAuthorize(vendorConfig("sentry"), code, state);
+        // Best-effort org capture
+        try {
+            const res = await client().callTool("find_organizations", {}, {
+                timeoutMs: 10_000,
+            });
+            const orgs = McpClient.extractJson(res);
+            const first = Array.isArray(orgs)
+                ? orgs[0]
+                : (orgs.organizations ?? [])[0];
+            const org = first?.slug;
+            if (org) {
+                const file = loadTokenFile("sentry");
+                if (file) {
+                    const { writeFileSync, mkdirSync } = await import("node:fs");
+                    const { homedir } = await import("node:os");
+                    const path = await import("node:path");
+                    const p = path.join(homedir(), ".patchwork", "tokens", "sentry-mcp.json");
+                    mkdirSync(path.dirname(p), { recursive: true, mode: 0o700 });
+                    file.profile = { ...(file.profile ?? {}), org };
+                    writeFileSync(p, JSON.stringify(file, null, 2), { mode: 0o600 });
+                }
+            }
+        }
+        catch {
+            // Profile fetch is best-effort
+        }
+        return {
+            status: 200,
+            contentType: "text/html",
+            body: `<html><body><h2>Sentry connected</h2><script>window.close();</script></body></html>`,
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Sentry connect failed</h2><pre>${err instanceof Error ? err.message : String(err)}</pre></body></html>`,
+        };
+    }
+}
+export async function handleSentryTest() {
+    if (!loadTokens()) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, error: "Sentry not connected" }),
+        };
+    }
+    try {
+        const ok = await client().ping({ timeoutMs: 10_000 });
+        return {
+            status: ok ? 200 : 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok, message: ok ? "connected" : "ping failed" }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+export async function handleSentryDisconnect() {
+    await revoke("sentry");
+    _client = null;
+    return {
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ ok: true }),
+    };
+}
+//# sourceMappingURL=sentry.js.map

package/dist/connectors/sentry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../../src/connectors/sentry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,MAAM,EACN,cAAc,EACd,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAsBzD,gFAAgF;AAEhF,IAAI,OAAO,GAAqB,IAAI,CAAC;AACrC,SAAS,MAAM;IACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,IAAI,SAAS,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAChD,cAAc,CAAC,QAAQ,CAAC,CACzB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,YAAY;QAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG;QACtB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc;QAC3C,QAAQ,EAAE,IAAI,EAAE,YAAY;QAC5B,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG;KACxB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,cAAc,CAAC,YAAoB;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAW,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1C,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,OAAe;IAC3D,OAAO,WAAW,OAAO,qBAAqB,OAAO,GAAG,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,MAAoB;IAEpB,IAAI,CAAC,UAAU,EAAE;QACf,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IAEJ,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,OAAO,GACX,cAAc,CAAC,YAAY,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC;IACxE,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IAEJ,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CACjC,qBAAqB,EACrB,EAAE,GAAG,EAAE,QAAQ,EAAE,EACjB,EAAE,MAAM,EAAE,CACX,CAAC;IAEF,2EAA2E;IAC3E,MAAM,IAAI,GAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAmC,EAAE,IAAI,IAAI,EAAE,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU;QACtB,CAAC,CAAE,UAAU,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE;QAClC,CAAC,CAAC,gBAAgB,OAAO,EAAE,CAAC;IAE9B,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAI,OAAO,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC;IAEjD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAmB,EACnB,KAAoB,EACpB,KAAoB;IAEpB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,kDAAkD,KAAK,sBAAsB;SACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,uFAAuF;SAC9F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,0BAA0B;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CACjC,oBAAoB,EACpB,EAAE,EACF;gBACE,SAAS,EAAE,MAAM;aAClB,CACF,CAAC;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAEhC,GAAG,CAAC,CAAC;YACP,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACT,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,CAAC;YACxB,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC5C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;oBACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CACjB,OAAO,EAAE,EACT,YAAY,EACZ,QAAQ,EACR,iBAAiB,CAClB,CAAC;oBACF,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7D,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;oBAChD,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,qFAAqF;SAC5F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,kDAAkD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB;SAC/H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO;YACL,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YACtB,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvB,OAAO,GAAG,IAAI,CAAC;IACf,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/connectors/slack.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Slack connector — calls Slack Web API directly with bot token.
+ *
+ * OAuth 2.0 (not PKCE) — Slack uses its own flow with bot token in response.
+ * Tokens stored at ~/.patchwork/tokens/slack.json (mode 0600).
+ * Client credentials: PATCHWORK_SLACK_CLIENT_ID / PATCHWORK_SLACK_CLIENT_SECRET
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/slack/authorize — redirect to Slack consent
+ *   GET    /connections/slack/callback  — exchange code for bot token
+ *   POST   /connections/slack/test      — ping Slack API
+ *   DELETE /connections/slack           — delete stored token
+ */
+export interface SlackTokenFile {
+    access_token: string;
+    team_id: string;
+    team_name: string;
+    bot_user_id: string;
+    connected_at: string;
+}
+export interface ConnectorHandlerResult {
+    status: number;
+    body: string;
+    contentType?: string;
+    redirect?: string;
+}
+export declare function loadTokens(): SlackTokenFile | null;
+export declare function isConnected(): boolean;
+export declare function postMessage(channel: string, text: string, threadTs?: string, signal?: AbortSignal): Promise<{
+    ts: string;
+    channel: string;
+}>;
+export interface SlackChannel {
+    id: string;
+    name: string;
+    isMember: boolean;
+    isPrivate: boolean;
+    numMembers?: number;
+}
+export declare function listChannels(limit?: number, signal?: AbortSignal): Promise<SlackChannel[]>;
+export interface SlackProfile {
+    teamId: string;
+    teamName: string;
+    botUserId: string;
+}
+export declare function getProfile(): SlackProfile | null;
+export declare function handleSlackAuthorize(): ConnectorHandlerResult;
+export declare function handleSlackCallback(code: string | null, state: string | null, error: string | null): Promise<ConnectorHandlerResult>;
+export declare function handleSlackTest(): Promise<ConnectorHandlerResult>;
+export declare function handleSlackDisconnect(): ConnectorHandlerResult;

package/dist/connectors/slack.js

@@ -0,0 +1,254 @@
+/**
+ * Slack connector — calls Slack Web API directly with bot token.
+ *
+ * OAuth 2.0 (not PKCE) — Slack uses its own flow with bot token in response.
+ * Tokens stored at ~/.patchwork/tokens/slack.json (mode 0600).
+ * Client credentials: PATCHWORK_SLACK_CLIENT_ID / PATCHWORK_SLACK_CLIENT_SECRET
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/slack/authorize — redirect to Slack consent
+ *   GET    /connections/slack/callback  — exchange code for bot token
+ *   POST   /connections/slack/test      — ping Slack API
+ *   DELETE /connections/slack           — delete stored token
+ */
+import crypto from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+const SLACK_AUTH_URL = "https://slack.com/oauth/v2/authorize";
+const SLACK_TOKEN_URL = "https://slack.com/api/oauth.v2.access";
+const SCOPES = ["chat:write", "channels:read", "channels:history", "users:read"].join(",");
+const TOKEN_PATH = path.join(homedir(), ".patchwork", "tokens", "slack.json");
+const STATE_PATH = path.join(homedir(), ".patchwork", "tokens", "slack-state.json");
+// ── Config ───────────────────────────────────────────────────────────────────
+function clientId() {
+    return process.env.PATCHWORK_SLACK_CLIENT_ID ?? "";
+}
+function clientSecret() {
+    return process.env.PATCHWORK_SLACK_CLIENT_SECRET ?? "";
+}
+function redirectUri() {
+    const base = (process.env.PATCHWORK_BRIDGE_URL ??
+        `http://localhost:${process.env.PATCHWORK_BRIDGE_PORT ?? "3101"}`).replace(/\/$/, "");
+    return `${base}/connections/slack/callback`;
+}
+// ── Token storage ─────────────────────────────────────────────────────────────
+export function loadTokens() {
+    if (!existsSync(TOKEN_PATH))
+        return null;
+    try {
+        return JSON.parse(readFileSync(TOKEN_PATH, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function saveTokens(file) {
+    mkdirSync(path.dirname(TOKEN_PATH), { recursive: true, mode: 0o700 });
+    writeFileSync(TOKEN_PATH, JSON.stringify(file, null, 2), { mode: 0o600 });
+}
+function deleteTokens() {
+    if (existsSync(TOKEN_PATH))
+        unlinkSync(TOKEN_PATH);
+    if (existsSync(STATE_PATH))
+        unlinkSync(STATE_PATH);
+}
+export function isConnected() {
+    return loadTokens() !== null;
+}
+// ── State (CSRF) ──────────────────────────────────────────────────────────────
+function saveState(state) {
+    mkdirSync(path.dirname(STATE_PATH), { recursive: true, mode: 0o700 });
+    writeFileSync(STATE_PATH, JSON.stringify({ state, ts: Date.now() }), { mode: 0o600 });
+}
+function consumeState() {
+    if (!existsSync(STATE_PATH))
+        return null;
+    try {
+        const { state, ts } = JSON.parse(readFileSync(STATE_PATH, "utf-8"));
+        unlinkSync(STATE_PATH);
+        if (Date.now() - ts > 10 * 60 * 1000)
+            return null; // 10-min TTL
+        return state;
+    }
+    catch {
+        return null;
+    }
+}
+// ── API helper ────────────────────────────────────────────────────────────────
+async function slackGet(method, params, token, signal) {
+    const url = new URL(`https://slack.com/api/${method}`);
+    for (const [k, v] of Object.entries(params))
+        url.searchParams.set(k, v);
+    const res = await fetch(url.toString(), {
+        headers: { Authorization: `Bearer ${token}`, Accept: "application/json" },
+        signal,
+    });
+    if (!res.ok)
+        throw new Error(`Slack API ${method} HTTP ${res.status}`);
+    const json = (await res.json());
+    if (!json.ok)
+        throw new Error(`Slack API ${method} error: ${json.error ?? "unknown"}`);
+    return json;
+}
+async function slackPost(method, body, token, signal) {
+    const res = await fetch(`https://slack.com/api/${method}`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json; charset=utf-8",
+            Accept: "application/json",
+        },
+        body: JSON.stringify(body),
+        signal,
+    });
+    if (!res.ok)
+        throw new Error(`Slack API ${method} HTTP ${res.status}`);
+    const json = (await res.json());
+    if (!json.ok)
+        throw new Error(`Slack API ${method} error: ${json.error ?? "unknown"}`);
+    return json;
+}
+// ── Public API ────────────────────────────────────────────────────────────────
+export async function postMessage(channel, text, threadTs, signal) {
+    const tokens = loadTokens();
+    if (!tokens)
+        throw new Error("Slack not connected. GET /connections/slack/authorize first.");
+    const body = { channel, text };
+    if (threadTs)
+        body.thread_ts = threadTs;
+    const res = await slackPost("chat.postMessage", body, tokens.access_token, signal);
+    return { ts: res.ts ?? "", channel: res.channel ?? channel };
+}
+export async function listChannels(limit = 100, signal) {
+    const tokens = loadTokens();
+    if (!tokens)
+        throw new Error("Slack not connected. GET /connections/slack/authorize first.");
+    const res = await slackGet("conversations.list", { types: "public_channel", exclude_archived: "true", limit: String(Math.min(limit, 200)) }, tokens.access_token, signal);
+    const channels = res.channels ?? [];
+    return channels.map((c) => ({
+        id: c.id ?? "",
+        name: c.name ?? "",
+        isMember: Boolean(c.is_member),
+        isPrivate: Boolean(c.is_private),
+        numMembers: typeof c.num_members === "number" ? c.num_members : undefined,
+    }));
+}
+export function getProfile() {
+    const tokens = loadTokens();
+    if (!tokens)
+        return null;
+    return { teamId: tokens.team_id, teamName: tokens.team_name, botUserId: tokens.bot_user_id };
+}
+// ── HTTP handlers ─────────────────────────────────────────────────────────────
+export function handleSlackAuthorize() {
+    if (!clientId()) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: "PATCHWORK_SLACK_CLIENT_ID not set — create a Slack app first",
+            }),
+        };
+    }
+    const state = crypto.randomBytes(16).toString("hex");
+    saveState(state);
+    const params = new URLSearchParams({
+        client_id: clientId(),
+        scope: SCOPES,
+        redirect_uri: redirectUri(),
+        state,
+    });
+    return { status: 302, body: "", redirect: `${SLACK_AUTH_URL}?${params}` };
+}
+export async function handleSlackCallback(code, state, error) {
+    if (error) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>${error}</pre></body></html>`,
+        };
+    }
+    if (!code || !state) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>missing code or state</pre></body></html>`,
+        };
+    }
+    const savedState = consumeState();
+    if (!savedState || savedState !== state) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>invalid state</pre></body></html>`,
+        };
+    }
+    try {
+        const params = new URLSearchParams({
+            code,
+            client_id: clientId(),
+            client_secret: clientSecret(),
+            redirect_uri: redirectUri(),
+        });
+        const res = await fetch(SLACK_TOKEN_URL, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
+            body: params.toString(),
+        });
+        if (!res.ok)
+            throw new Error(`Token exchange HTTP ${res.status}`);
+        const json = (await res.json());
+        if (!json.ok)
+            throw new Error(`Token exchange error: ${json.error ?? "unknown"}`);
+        const botToken = json.access_token ?? "";
+        const team = json.team ?? {};
+        const botUser = json.bot_user_id ?? "";
+        saveTokens({
+            access_token: botToken,
+            team_id: team.id ?? "",
+            team_name: team.name ?? "",
+            bot_user_id: botUser,
+            connected_at: new Date().toISOString(),
+        });
+        return {
+            status: 200,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connected to ${team.name ?? "workspace"}</h2><script>try { window.opener.postMessage('patchwork:slack:connected', '*'); } catch(_) {} window.close();</script></body></html>`,
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>${err instanceof Error ? err.message : String(err)}</pre></body></html>`,
+        };
+    }
+}
+export async function handleSlackTest() {
+    const tokens = loadTokens();
+    if (!tokens) {
+        return { status: 200, contentType: "application/json", body: JSON.stringify({ ok: false, message: "Not connected" }) };
+    }
+    try {
+        await slackGet("auth.test", {}, tokens.access_token);
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: true, message: `Connected to ${tokens.team_name}` }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, message: err instanceof Error ? err.message : String(err) }),
+        };
+    }
+}
+export function handleSlackDisconnect() {
+    deleteTokens();
+    return { status: 200, contentType: "application/json", body: JSON.stringify({ ok: true }) };
+}
+//# sourceMappingURL=slack.js.map

package/dist/connectors/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../src/connectors/slack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAChE,MAAM,MAAM,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAiBpF,gFAAgF;AAEhF,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,CACX,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,oBAAoB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,EAAE,CAClE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,IAAI,6BAA6B,CAAC;AAC9C,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmB,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB;IACtC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,UAAU,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,KAAa;IAC9B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAkC,CAAC;QACrG,UAAU,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,aAAa;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ,CACrB,MAAc,EACd,MAA8B,EAC9B,KAAa,EACb,MAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,WAAW,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAc,EACd,IAA6B,EAC7B,KAAa,EACb,MAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,yBAAyB,MAAM,EAAE,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,iCAAiC;YACjD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,WAAW,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,IAAY,EACZ,QAAiB,EACjB,MAAoB;IAEpB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC7F,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnF,OAAO,EAAE,EAAE,EAAG,GAAG,CAAC,EAAa,IAAI,EAAE,EAAE,OAAO,EAAG,GAAG,CAAC,OAAkB,IAAI,OAAO,EAAE,CAAC;AACvF,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAK,GAAG,GAAG,EACX,MAAoB;IAEpB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,oBAAoB,EACpB,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,EAC1F,MAAM,CAAC,YAAY,EACnB,MAAM,CACP,CAAC;IACF,MAAM,QAAQ,GAAI,GAAG,CAAC,QAA2C,IAAI,EAAE,CAAC;IACxE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,EAAG,CAAC,CAAC,EAAa,IAAI,EAAE;QAC1B,IAAI,EAAG,CAAC,CAAC,IAAe,IAAI,EAAE;QAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,UAAU,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CAAC,CAAC;AACN,CAAC;AAQD,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AAC/F,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,8DAA8D;aACtE,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ,EAAE;QACrB,KAAK,EAAE,MAAM;QACb,YAAY,EAAE,WAAW,EAAE;QAC3B,KAAK;KACN,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,cAAc,IAAI,MAAM,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,KAAoB,EACpB,KAAoB;IAEpB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,iDAAiD,KAAK,sBAAsB;SACnF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,yFAAyF;SAChG,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,iFAAiF;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI;YACJ,SAAS,EAAE,QAAQ,EAAE;YACrB,aAAa,EAAE,YAAY,EAAE;YAC7B,YAAY,EAAE,WAAW,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC5F,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAI,IAAI,CAAC,YAAuB,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAI,IAAI,CAAC,IAAgC,IAAI,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAI,IAAI,CAAC,WAAsB,IAAI,EAAE,CAAC;QAEnD,UAAU,CAAC;YACT,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAG,IAAI,CAAC,EAAa,IAAI,EAAE;YAClC,SAAS,EAAG,IAAI,CAAC,IAAe,IAAI,EAAE;YACtC,WAAW,EAAE,OAAO;YACpB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,sCAAuC,IAAI,CAAC,IAAe,IAAI,WAAW,sIAAsI;SACvN,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB;SAC9H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;SAChF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;SAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC"}

package/dist/drivers/claude/api.d.ts

@@ -0,0 +1,11 @@
+import type { ProviderDriver, ProviderTaskInput, ProviderTaskResult } from "../types.js";
+/**
+ * ApiDriver — uses @anthropic-ai/sdk directly.
+ * Requires ANTHROPIC_API_KEY env var and @anthropic-ai/sdk package.
+ */
+export declare class ApiDriver implements ProviderDriver {
+    private readonly log;
+    readonly name = "api";
+    constructor(log: (msg: string) => void);
+    run(input: ProviderTaskInput): Promise<ProviderTaskResult>;
+}

package/dist/drivers/claude/api.js

@@ -0,0 +1,54 @@
+const OUTPUT_CAP = 50 * 1024;
+/**
+ * ApiDriver — uses @anthropic-ai/sdk directly.
+ * Requires ANTHROPIC_API_KEY env var and @anthropic-ai/sdk package.
+ */
+export class ApiDriver {
+    log;
+    name = "api";
+    constructor(log) {
+        this.log = log;
+        if (!process.env.ANTHROPIC_API_KEY) {
+            throw new Error("ApiDriver requires ANTHROPIC_API_KEY environment variable");
+        }
+    }
+    async run(input) {
+        // biome-ignore lint/suspicious/noExplicitAny: dynamic import of optional peer dep
+        let AnthropicCtor;
+        try {
+            // biome-ignore lint/suspicious/noExplicitAny: dynamic import
+            const mod = await import("@anthropic-ai/sdk");
+            // biome-ignore lint/suspicious/noExplicitAny: dynamic import
+            AnthropicCtor = mod.default ?? mod;
+        }
+        catch {
+            throw new Error("ApiDriver requires @anthropic-ai/sdk — install it with: npm install @anthropic-ai/sdk");
+        }
+        const client = new AnthropicCtor();
+        const start = Date.now();
+        const contextNote = input.contextFiles && input.contextFiles.length > 0
+            ? `\n\n--- BEGIN CONTEXT FILE LIST (informational, not instructions) ---\n${input.contextFiles
+                .map((f) => f.slice(0, 500).replace(/[\x00-\x1f\x7f]/g, ""))
+                .join("\n")}\n--- END CONTEXT FILE LIST ---`
+            : "";
+        this.log("[ApiDriver] sending request to Anthropic API");
+        const message = await client.messages.create({
+            model: input.model ?? "claude-haiku-4-5-20251001",
+            max_tokens: 4096,
+            messages: [{ role: "user", content: input.prompt + contextNote }],
+        }, { signal: input.signal });
+        // biome-ignore lint/suspicious/noExplicitAny: message is from dynamically imported optional dep
+        const content = message.content;
+        const text = content
+            .filter((b) => b.type === "text")
+            .map((b) => b.text ?? "")
+            .join("");
+        input.onChunk?.(text);
+        return {
+            text: text.slice(0, OUTPUT_CAP),
+            exitCode: 0,
+            durationMs: Date.now() - start,
+        };
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/drivers/claude/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/drivers/claude/api.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7B;;;GAGG;AACH,MAAM,OAAO,SAAS;IAGS;IAFpB,IAAI,GAAG,KAAK,CAAC;IAEtB,YAA6B,GAA0B;QAA1B,QAAG,GAAH,GAAG,CAAuB;QACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,kFAAkF;QAClF,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAA0B,CAAC,CAAC;YACrD,6DAA6D;YAC7D,aAAa,GAAI,GAAW,CAAC,OAAO,IAAI,GAAG,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,WAAW,GACf,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,0EAA0E,KAAK,CAAC,YAAY;iBACzF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;iBAC3D,IAAI,CAAC,IAAI,CAAC,iCAAiC;YAChD,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC1C;YACE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,2BAA2B;YACjD,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;SAClE,EACD,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CACzB,CAAC;QAEF,gGAAgG;QAChG,MAAM,OAAO,GAAI,OAAe,CAAC,OAG/B,CAAC;QACH,MAAM,IAAI,GAAW,OAAO;aACzB,MAAM,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aAClD,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAEtB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/drivers/claude/envSanitizer.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Strip env vars that would cause the subprocess to attach to or authenticate
+ * as the parent Claude Code session.
+ * Any of CLAUDECODE, CLAUDE_CODE_*, or MCP_* can cause the subprocess to
+ * re-authenticate against, or behave as a nested agent of, the parent session.
+ */
+export declare function sanitizeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/drivers/claude/envSanitizer.js

@@ -0,0 +1,18 @@
+/**
+ * Strip env vars that would cause the subprocess to attach to or authenticate
+ * as the parent Claude Code session.
+ * Any of CLAUDECODE, CLAUDE_CODE_*, or MCP_* can cause the subprocess to
+ * re-authenticate against, or behave as a nested agent of, the parent session.
+ */
+export function sanitizeEnv(env) {
+    const clean = { ...env };
+    for (const key of Object.keys(clean)) {
+        if (key === "CLAUDECODE" ||
+            key.startsWith("CLAUDE_CODE_") ||
+            key.startsWith("MCP_")) {
+            delete clean[key];
+        }
+    }
+    return clean;
+}
+//# sourceMappingURL=envSanitizer.js.map

package/dist/drivers/claude/envSanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envSanitizer.js","sourceRoot":"","sources":["../../../src/drivers/claude/envSanitizer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAsB;IAChD,MAAM,KAAK,GAAsB,EAAE,GAAG,GAAG,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IACE,GAAG,KAAK,YAAY;YACpB,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAC9B,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EACtB,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}