patchwork-os 0.2.0-alpha.2 → 0.2.0-alpha.21

package/dist/connectors/slack.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Slack connector — calls Slack Web API directly with bot token.
+ *
+ * OAuth 2.0 (not PKCE) — Slack uses its own flow with bot token in response.
+ * Tokens stored at ~/.patchwork/tokens/slack.json (mode 0600).
+ * Client credentials: PATCHWORK_SLACK_CLIENT_ID / PATCHWORK_SLACK_CLIENT_SECRET
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/slack/authorize — redirect to Slack consent
+ *   GET    /connections/slack/callback  — exchange code for bot token
+ *   POST   /connections/slack/test      — ping Slack API
+ *   DELETE /connections/slack           — delete stored token
+ */
+export interface SlackTokenFile {
+    access_token: string;
+    team_id: string;
+    team_name: string;
+    bot_user_id: string;
+    connected_at: string;
+}
+export interface ConnectorHandlerResult {
+    status: number;
+    body: string;
+    contentType?: string;
+    redirect?: string;
+}
+export declare function loadTokens(): SlackTokenFile | null;
+export declare function isConnected(): boolean;
+export declare function postMessage(channel: string, text: string, threadTs?: string, signal?: AbortSignal): Promise<{
+    ts: string;
+    channel: string;
+}>;
+export interface SlackChannel {
+    id: string;
+    name: string;
+    isMember: boolean;
+    isPrivate: boolean;
+    numMembers?: number;
+}
+export declare function listChannels(limit?: number, signal?: AbortSignal): Promise<SlackChannel[]>;
+export interface SlackProfile {
+    teamId: string;
+    teamName: string;
+    botUserId: string;
+}
+export declare function getProfile(): SlackProfile | null;
+export declare function handleSlackAuthorize(): ConnectorHandlerResult;
+export declare function handleSlackCallback(code: string | null, state: string | null, error: string | null): Promise<ConnectorHandlerResult>;
+export declare function handleSlackTest(): Promise<ConnectorHandlerResult>;
+export declare function handleSlackDisconnect(): ConnectorHandlerResult;

package/dist/connectors/slack.js

@@ -0,0 +1,289 @@
+/**
+ * Slack connector — calls Slack Web API directly with bot token.
+ *
+ * OAuth 2.0 (not PKCE) — Slack uses its own flow with bot token in response.
+ * Tokens stored at ~/.patchwork/tokens/slack.json (mode 0600).
+ * Client credentials: PATCHWORK_SLACK_CLIENT_ID / PATCHWORK_SLACK_CLIENT_SECRET
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/slack/authorize — redirect to Slack consent
+ *   GET    /connections/slack/callback  — exchange code for bot token
+ *   POST   /connections/slack/test      — ping Slack API
+ *   DELETE /connections/slack           — delete stored token
+ */
+import crypto from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+const SLACK_AUTH_URL = "https://slack.com/oauth/v2/authorize";
+const SLACK_TOKEN_URL = "https://slack.com/api/oauth.v2.access";
+const SCOPES = [
+    "chat:write",
+    "channels:read",
+    "channels:history",
+    "users:read",
+].join(",");
+const TOKEN_PATH = path.join(homedir(), ".patchwork", "tokens", "slack.json");
+const STATE_PATH = path.join(homedir(), ".patchwork", "tokens", "slack-state.json");
+// ── Config ───────────────────────────────────────────────────────────────────
+function clientId() {
+    return process.env.PATCHWORK_SLACK_CLIENT_ID ?? "";
+}
+function clientSecret() {
+    return process.env.PATCHWORK_SLACK_CLIENT_SECRET ?? "";
+}
+function redirectUri() {
+    const base = (process.env.PATCHWORK_BRIDGE_URL ??
+        `http://localhost:${process.env.PATCHWORK_BRIDGE_PORT ?? "3101"}`).replace(/\/$/, "");
+    return `${base}/connections/slack/callback`;
+}
+// ── Token storage ─────────────────────────────────────────────────────────────
+export function loadTokens() {
+    if (!existsSync(TOKEN_PATH))
+        return null;
+    try {
+        return JSON.parse(readFileSync(TOKEN_PATH, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function saveTokens(file) {
+    mkdirSync(path.dirname(TOKEN_PATH), { recursive: true, mode: 0o700 });
+    writeFileSync(TOKEN_PATH, JSON.stringify(file, null, 2), { mode: 0o600 });
+}
+function deleteTokens() {
+    if (existsSync(TOKEN_PATH))
+        unlinkSync(TOKEN_PATH);
+    if (existsSync(STATE_PATH))
+        unlinkSync(STATE_PATH);
+}
+export function isConnected() {
+    return loadTokens() !== null;
+}
+// ── State (CSRF) ──────────────────────────────────────────────────────────────
+function saveState(state) {
+    mkdirSync(path.dirname(STATE_PATH), { recursive: true, mode: 0o700 });
+    writeFileSync(STATE_PATH, JSON.stringify({ state, ts: Date.now() }), {
+        mode: 0o600,
+    });
+}
+function consumeState() {
+    if (!existsSync(STATE_PATH))
+        return null;
+    try {
+        const { state, ts } = JSON.parse(readFileSync(STATE_PATH, "utf-8"));
+        unlinkSync(STATE_PATH);
+        if (Date.now() - ts > 10 * 60 * 1000)
+            return null; // 10-min TTL
+        return state;
+    }
+    catch {
+        return null;
+    }
+}
+// ── API helper ────────────────────────────────────────────────────────────────
+async function slackGet(method, params, token, signal) {
+    const url = new URL(`https://slack.com/api/${method}`);
+    for (const [k, v] of Object.entries(params))
+        url.searchParams.set(k, v);
+    const res = await fetch(url.toString(), {
+        headers: { Authorization: `Bearer ${token}`, Accept: "application/json" },
+        signal,
+    });
+    if (!res.ok)
+        throw new Error(`Slack API ${method} HTTP ${res.status}`);
+    const json = (await res.json());
+    if (!json.ok)
+        throw new Error(`Slack API ${method} error: ${json.error ?? "unknown"}`);
+    return json;
+}
+async function slackPost(method, body, token, signal) {
+    const res = await fetch(`https://slack.com/api/${method}`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json; charset=utf-8",
+            Accept: "application/json",
+        },
+        body: JSON.stringify(body),
+        signal,
+    });
+    if (!res.ok)
+        throw new Error(`Slack API ${method} HTTP ${res.status}`);
+    const json = (await res.json());
+    if (!json.ok)
+        throw new Error(`Slack API ${method} error: ${json.error ?? "unknown"}`);
+    return json;
+}
+// ── Public API ────────────────────────────────────────────────────────────────
+export async function postMessage(channel, text, threadTs, signal) {
+    const tokens = loadTokens();
+    if (!tokens)
+        throw new Error("Slack not connected. GET /connections/slack/authorize first.");
+    const body = { channel, text };
+    if (threadTs)
+        body.thread_ts = threadTs;
+    const res = await slackPost("chat.postMessage", body, tokens.access_token, signal);
+    return {
+        ts: res.ts ?? "",
+        channel: res.channel ?? channel,
+    };
+}
+export async function listChannels(limit = 100, signal) {
+    const tokens = loadTokens();
+    if (!tokens)
+        throw new Error("Slack not connected. GET /connections/slack/authorize first.");
+    const res = await slackGet("conversations.list", {
+        types: "public_channel",
+        exclude_archived: "true",
+        limit: String(Math.min(limit, 200)),
+    }, tokens.access_token, signal);
+    const channels = res.channels ?? [];
+    return channels.map((c) => ({
+        id: c.id ?? "",
+        name: c.name ?? "",
+        isMember: Boolean(c.is_member),
+        isPrivate: Boolean(c.is_private),
+        numMembers: typeof c.num_members === "number" ? c.num_members : undefined,
+    }));
+}
+export function getProfile() {
+    const tokens = loadTokens();
+    if (!tokens)
+        return null;
+    return {
+        teamId: tokens.team_id,
+        teamName: tokens.team_name,
+        botUserId: tokens.bot_user_id,
+    };
+}
+// ── HTTP handlers ─────────────────────────────────────────────────────────────
+export function handleSlackAuthorize() {
+    if (!clientId()) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: "PATCHWORK_SLACK_CLIENT_ID not set — create a Slack app first",
+            }),
+        };
+    }
+    const state = crypto.randomBytes(16).toString("hex");
+    saveState(state);
+    const params = new URLSearchParams({
+        client_id: clientId(),
+        scope: SCOPES,
+        redirect_uri: redirectUri(),
+        state,
+    });
+    return { status: 302, body: "", redirect: `${SLACK_AUTH_URL}?${params}` };
+}
+export async function handleSlackCallback(code, state, error) {
+    if (error) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>${error}</pre></body></html>`,
+        };
+    }
+    if (!code || !state) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>missing code or state</pre></body></html>`,
+        };
+    }
+    const savedState = consumeState();
+    if (!savedState || savedState !== state) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>invalid state</pre></body></html>`,
+        };
+    }
+    try {
+        const params = new URLSearchParams({
+            code,
+            client_id: clientId(),
+            client_secret: clientSecret(),
+            redirect_uri: redirectUri(),
+        });
+        const res = await fetch(SLACK_TOKEN_URL, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Accept: "application/json",
+            },
+            body: params.toString(),
+        });
+        if (!res.ok)
+            throw new Error(`Token exchange HTTP ${res.status}`);
+        const json = (await res.json());
+        if (!json.ok)
+            throw new Error(`Token exchange error: ${json.error ?? "unknown"}`);
+        const botToken = json.access_token ?? "";
+        const team = json.team ?? {};
+        const botUser = json.bot_user_id ?? "";
+        saveTokens({
+            access_token: botToken,
+            team_id: team.id ?? "",
+            team_name: team.name ?? "",
+            bot_user_id: botUser,
+            connected_at: new Date().toISOString(),
+        });
+        return {
+            status: 200,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connected to ${team.name ?? "workspace"}</h2><script>try { window.opener.postMessage('patchwork:slack:connected', '*'); } catch(_) {} window.close();</script></body></html>`,
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Slack connect failed</h2><pre>${err instanceof Error ? err.message : String(err)}</pre></body></html>`,
+        };
+    }
+}
+export async function handleSlackTest() {
+    const tokens = loadTokens();
+    if (!tokens) {
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, message: "Not connected" }),
+        };
+    }
+    try {
+        await slackGet("auth.test", {}, tokens.access_token);
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: true,
+                message: `Connected to ${tokens.team_name}`,
+            }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                message: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+export function handleSlackDisconnect() {
+    deleteTokens();
+    return {
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ ok: true }),
+    };
+}
+//# sourceMappingURL=slack.js.map

package/dist/connectors/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../src/connectors/slack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAChE,MAAM,MAAM,GAAG;IACb,YAAY;IACZ,eAAe;IACf,kBAAkB;IAClB,YAAY;CACb,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACZ,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,OAAO,EAAE,EACT,YAAY,EACZ,QAAQ,EACR,kBAAkB,CACnB,CAAC;AAiBF,gFAAgF;AAEhF,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,CACX,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,oBAAoB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,EAAE,CAClE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,IAAI,6BAA6B,CAAC;AAC9C,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmB,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB;IACtC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,UAAU,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,KAAa;IAC9B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QACnE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAGjE,CAAC;QACF,UAAU,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,aAAa;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ,CACrB,MAAc,EACd,MAA8B,EAC9B,KAAa,EACb,MAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,WAAW,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAc,EACd,IAA6B,EAC7B,KAAa,EACb,MAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,yBAAyB,MAAM,EAAE,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,iCAAiC;YACjD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,WAAW,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,IAAY,EACZ,QAAiB,EACjB,MAAoB;IAEpB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,kBAAkB,EAClB,IAAI,EACJ,MAAM,CAAC,YAAY,EACnB,MAAM,CACP,CAAC;IACF,OAAO;QACL,EAAE,EAAG,GAAG,CAAC,EAAa,IAAI,EAAE;QAC5B,OAAO,EAAG,GAAG,CAAC,OAAkB,IAAI,OAAO;KAC5C,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAK,GAAG,GAAG,EACX,MAAoB;IAEpB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,oBAAoB,EACpB;QACE,KAAK,EAAE,gBAAgB;QACvB,gBAAgB,EAAE,MAAM;QACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;KACpC,EACD,MAAM,CAAC,YAAY,EACnB,MAAM,CACP,CAAC;IACF,MAAM,QAAQ,GAAI,GAAG,CAAC,QAA2C,IAAI,EAAE,CAAC;IACxE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,EAAG,CAAC,CAAC,EAAa,IAAI,EAAE;QAC1B,IAAI,EAAG,CAAC,CAAC,IAAe,IAAI,EAAE;QAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,UAAU,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CAAC,CAAC;AACN,CAAC;AAQD,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,QAAQ,EAAE,MAAM,CAAC,SAAS;QAC1B,SAAS,EAAE,MAAM,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,8DAA8D;aACtE,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ,EAAE;QACrB,KAAK,EAAE,MAAM;QACb,YAAY,EAAE,WAAW,EAAE;QAC3B,KAAK;KACN,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,cAAc,IAAI,MAAM,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,KAAoB,EACpB,KAAoB;IAEpB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,iDAAiD,KAAK,sBAAsB;SACnF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,yFAAyF;SAChG,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,iFAAiF;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI;YACJ,SAAS,EAAE,QAAQ,EAAE;YACrB,aAAa,EAAE,YAAY,EAAE;YAC7B,YAAY,EAAE,WAAW,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAEtE,MAAM,QAAQ,GAAI,IAAI,CAAC,YAAuB,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAI,IAAI,CAAC,IAAgC,IAAI,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAI,IAAI,CAAC,WAAsB,IAAI,EAAE,CAAC;QAEnD,UAAU,CAAC;YACT,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAG,IAAI,CAAC,EAAa,IAAI,EAAE;YAClC,SAAS,EAAG,IAAI,CAAC,IAAe,IAAI,EAAE;YACtC,WAAW,EAAE,OAAO;YACpB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,sCAAuC,IAAI,CAAC,IAAe,IAAI,WAAW,sIAAsI;SACvN,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB;SAC9H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,gBAAgB,MAAM,CAAC,SAAS,EAAE;aAC5C,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,YAAY,EAAE,CAAC;IACf,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/drivers/claude/api.d.ts

@@ -0,0 +1,11 @@
+import type { ProviderDriver, ProviderTaskInput, ProviderTaskResult } from "../types.js";
+/**
+ * ApiDriver — uses @anthropic-ai/sdk directly.
+ * Requires ANTHROPIC_API_KEY env var and @anthropic-ai/sdk package.
+ */
+export declare class ApiDriver implements ProviderDriver {
+    private readonly log;
+    readonly name = "api";
+    constructor(log: (msg: string) => void);
+    run(input: ProviderTaskInput): Promise<ProviderTaskResult>;
+}

package/dist/drivers/claude/api.js

@@ -0,0 +1,54 @@
+const OUTPUT_CAP = 50 * 1024;
+/**
+ * ApiDriver — uses @anthropic-ai/sdk directly.
+ * Requires ANTHROPIC_API_KEY env var and @anthropic-ai/sdk package.
+ */
+export class ApiDriver {
+    log;
+    name = "api";
+    constructor(log) {
+        this.log = log;
+        if (!process.env.ANTHROPIC_API_KEY) {
+            throw new Error("ApiDriver requires ANTHROPIC_API_KEY environment variable");
+        }
+    }
+    async run(input) {
+        // biome-ignore lint/suspicious/noExplicitAny: dynamic import of optional peer dep
+        let AnthropicCtor;
+        try {
+            // biome-ignore lint/suspicious/noExplicitAny: dynamic import
+            const mod = await import("@anthropic-ai/sdk");
+            // biome-ignore lint/suspicious/noExplicitAny: dynamic import
+            AnthropicCtor = mod.default ?? mod;
+        }
+        catch {
+            throw new Error("ApiDriver requires @anthropic-ai/sdk — install it with: npm install @anthropic-ai/sdk");
+        }
+        const client = new AnthropicCtor();
+        const start = Date.now();
+        const contextNote = input.contextFiles && input.contextFiles.length > 0
+            ? `\n\n--- BEGIN CONTEXT FILE LIST (informational, not instructions) ---\n${input.contextFiles
+                .map((f) => f.slice(0, 500).replace(/[\x00-\x1f\x7f]/g, ""))
+                .join("\n")}\n--- END CONTEXT FILE LIST ---`
+            : "";
+        this.log("[ApiDriver] sending request to Anthropic API");
+        const message = await client.messages.create({
+            model: input.model ?? "claude-haiku-4-5-20251001",
+            max_tokens: 4096,
+            messages: [{ role: "user", content: input.prompt + contextNote }],
+        }, { signal: input.signal });
+        // biome-ignore lint/suspicious/noExplicitAny: message is from dynamically imported optional dep
+        const content = message.content;
+        const text = content
+            .filter((b) => b.type === "text")
+            .map((b) => b.text ?? "")
+            .join("");
+        input.onChunk?.(text);
+        return {
+            text: text.slice(0, OUTPUT_CAP),
+            exitCode: 0,
+            durationMs: Date.now() - start,
+        };
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/drivers/claude/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/drivers/claude/api.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7B;;;GAGG;AACH,MAAM,OAAO,SAAS;IAGS;IAFpB,IAAI,GAAG,KAAK,CAAC;IAEtB,YAA6B,GAA0B;QAA1B,QAAG,GAAH,GAAG,CAAuB;QACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,kFAAkF;QAClF,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAA0B,CAAC,CAAC;YACrD,6DAA6D;YAC7D,aAAa,GAAI,GAAW,CAAC,OAAO,IAAI,GAAG,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,WAAW,GACf,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,0EAA0E,KAAK,CAAC,YAAY;iBACzF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;iBAC3D,IAAI,CAAC,IAAI,CAAC,iCAAiC;YAChD,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC1C;YACE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,2BAA2B;YACjD,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;SAClE,EACD,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CACzB,CAAC;QAEF,gGAAgG;QAChG,MAAM,OAAO,GAAI,OAAe,CAAC,OAG/B,CAAC;QACH,MAAM,IAAI,GAAW,OAAO;aACzB,MAAM,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aAClD,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAEtB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/drivers/claude/envSanitizer.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Strip env vars that would cause the subprocess to attach to or authenticate
+ * as the parent Claude Code session.
+ * Any of CLAUDECODE, CLAUDE_CODE_*, or MCP_* can cause the subprocess to
+ * re-authenticate against, or behave as a nested agent of, the parent session.
+ */
+export declare function sanitizeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/drivers/claude/envSanitizer.js

@@ -0,0 +1,18 @@
+/**
+ * Strip env vars that would cause the subprocess to attach to or authenticate
+ * as the parent Claude Code session.
+ * Any of CLAUDECODE, CLAUDE_CODE_*, or MCP_* can cause the subprocess to
+ * re-authenticate against, or behave as a nested agent of, the parent session.
+ */
+export function sanitizeEnv(env) {
+    const clean = { ...env };
+    for (const key of Object.keys(clean)) {
+        if (key === "CLAUDECODE" ||
+            key.startsWith("CLAUDE_CODE_") ||
+            key.startsWith("MCP_")) {
+            delete clean[key];
+        }
+    }
+    return clean;
+}
+//# sourceMappingURL=envSanitizer.js.map

package/dist/drivers/claude/envSanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envSanitizer.js","sourceRoot":"","sources":["../../../src/drivers/claude/envSanitizer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAsB;IAChD,MAAM,KAAK,GAAsB,EAAE,GAAG,GAAG,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IACE,GAAG,KAAK,YAAY;YACpB,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAC9B,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EACtB,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/drivers/claude/streamParser.d.ts

@@ -0,0 +1,38 @@
+/** Shape of a parsed stream-json event from `claude -p --output-format stream-json`. */
+export interface StreamJsonEvent {
+    type: "system" | "assistant" | "result" | string;
+    /** Present on type === "assistant" */
+    message?: {
+        role?: string;
+        content?: Array<{
+            type: string;
+            text?: string;
+        }>;
+    };
+    /** Present on type === "result" — canonical full response text. */
+    result?: string;
+    /** Present on type === "result" — true when claude hit an error (e.g. max_turns). */
+    is_error?: boolean;
+    /** Present on type === "system" — session identifier. */
+    session_id?: string;
+}
+export interface ParsedLine {
+    kind: "event";
+    event: StreamJsonEvent;
+    text: string;
+}
+export interface RawLine {
+    kind: "raw";
+    text: string;
+}
+export type ParsedStreamLine = ParsedLine | RawLine;
+/**
+ * Parse a single JSONL line from the stream-json output format.
+ * Returns a raw line entry for non-JSON lines (backward compat with old binaries).
+ */
+export declare function parseStreamLine(line: string): ParsedStreamLine;
+/** Split a chunk into complete lines + a leftover partial. */
+export declare function splitLines(buf: string, chunk: string): {
+    lines: string[];
+    remainder: string;
+};

package/dist/drivers/claude/streamParser.js

@@ -0,0 +1,34 @@
+/**
+ * Parse a single JSONL line from the stream-json output format.
+ * Returns a raw line entry for non-JSON lines (backward compat with old binaries).
+ */
+export function parseStreamLine(line) {
+    try {
+        const event = JSON.parse(line);
+        let text = "";
+        if (event.type === "assistant") {
+            const content = event.message?.content;
+            if (Array.isArray(content)) {
+                text = content
+                    .filter((b) => b.type === "text")
+                    .map((b) => b.text ?? "")
+                    .join("");
+            }
+        }
+        else if (event.type === "result") {
+            text = typeof event.result === "string" ? event.result : "";
+        }
+        return { kind: "event", event, text };
+    }
+    catch {
+        return { kind: "raw", text: `${line}\n` };
+    }
+}
+/** Split a chunk into complete lines + a leftover partial. */
+export function splitLines(buf, chunk) {
+    const combined = buf + chunk;
+    const parts = combined.split("\n");
+    const remainder = parts.pop() ?? "";
+    return { lines: parts, remainder };
+}
+//# sourceMappingURL=streamParser.js.map

package/dist/drivers/claude/streamParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamParser.js","sourceRoot":"","sources":["../../../src/drivers/claude/streamParser.ts"],"names":[],"mappings":"AA6BA;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;QAClD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;YACvC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,GAAG,OAAO;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;qBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;qBACxB,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,KAAa;IAEb,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/drivers/claude/subprocess.d.ts

@@ -0,0 +1,19 @@
+import type { ProviderDriver, ProviderTaskInput, ProviderTaskResult } from "../types.js";
+/**
+ * Scrub secrets from a string before storing or surfacing it.
+ */
+export declare function scrubSecrets(text: string): string;
+/**
+ * Claude subprocess driver — spawns `claude -p` with stream-json output.
+ * Claude-specific providerOptions: { effort, fallbackModel, maxBudgetUsd, useAnt }
+ */
+export declare class SubprocessDriver implements ProviderDriver {
+    private readonly binary;
+    private readonly antBinary;
+    private readonly log;
+    readonly name = "subprocess";
+    private readonly settings;
+    constructor(binary: string, antBinary: string, log: (msg: string) => void);
+    run(input: ProviderTaskInput): Promise<ProviderTaskResult>;
+    runOutcome(input: ProviderTaskInput): Promise<import("../types.js").ProviderTaskOutcome>;
+}