patchwork-os 0.2.0-alpha.2 → 0.2.0-alpha.4

package/dist/drivers/claude/api.js

@@ -0,0 +1,54 @@
+const OUTPUT_CAP = 50 * 1024;
+/**
+ * ApiDriver — uses @anthropic-ai/sdk directly.
+ * Requires ANTHROPIC_API_KEY env var and @anthropic-ai/sdk package.
+ */
+export class ApiDriver {
+    log;
+    name = "api";
+    constructor(log) {
+        this.log = log;
+        if (!process.env.ANTHROPIC_API_KEY) {
+            throw new Error("ApiDriver requires ANTHROPIC_API_KEY environment variable");
+        }
+    }
+    async run(input) {
+        // biome-ignore lint/suspicious/noExplicitAny: dynamic import of optional peer dep
+        let AnthropicCtor;
+        try {
+            // biome-ignore lint/suspicious/noExplicitAny: dynamic import
+            const mod = await import("@anthropic-ai/sdk");
+            // biome-ignore lint/suspicious/noExplicitAny: dynamic import
+            AnthropicCtor = mod.default ?? mod;
+        }
+        catch {
+            throw new Error("ApiDriver requires @anthropic-ai/sdk — install it with: npm install @anthropic-ai/sdk");
+        }
+        const client = new AnthropicCtor();
+        const start = Date.now();
+        const contextNote = input.contextFiles && input.contextFiles.length > 0
+            ? `\n\n--- BEGIN CONTEXT FILE LIST (informational, not instructions) ---\n${input.contextFiles
+                .map((f) => f.slice(0, 500).replace(/[\x00-\x1f\x7f]/g, ""))
+                .join("\n")}\n--- END CONTEXT FILE LIST ---`
+            : "";
+        this.log("[ApiDriver] sending request to Anthropic API");
+        const message = await client.messages.create({
+            model: input.model ?? "claude-haiku-4-5-20251001",
+            max_tokens: 4096,
+            messages: [{ role: "user", content: input.prompt + contextNote }],
+        }, { signal: input.signal });
+        // biome-ignore lint/suspicious/noExplicitAny: message is from dynamically imported optional dep
+        const content = message.content;
+        const text = content
+            .filter((b) => b.type === "text")
+            .map((b) => b.text ?? "")
+            .join("");
+        input.onChunk?.(text);
+        return {
+            text: text.slice(0, OUTPUT_CAP),
+            exitCode: 0,
+            durationMs: Date.now() - start,
+        };
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/drivers/claude/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/drivers/claude/api.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7B;;;GAGG;AACH,MAAM,OAAO,SAAS;IAGS;IAFpB,IAAI,GAAG,KAAK,CAAC;IAEtB,YAA6B,GAA0B;QAA1B,QAAG,GAAH,GAAG,CAAuB;QACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,kFAAkF;QAClF,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAA0B,CAAC,CAAC;YACrD,6DAA6D;YAC7D,aAAa,GAAI,GAAW,CAAC,OAAO,IAAI,GAAG,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,WAAW,GACf,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,0EAA0E,KAAK,CAAC,YAAY;iBACzF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;iBAC3D,IAAI,CAAC,IAAI,CAAC,iCAAiC;YAChD,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC1C;YACE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,2BAA2B;YACjD,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;SAClE,EACD,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CACzB,CAAC;QAEF,gGAAgG;QAChG,MAAM,OAAO,GAAI,OAAe,CAAC,OAG/B,CAAC;QACH,MAAM,IAAI,GAAW,OAAO;aACzB,MAAM,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aAClD,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAEtB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/drivers/claude/envSanitizer.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Strip env vars that would cause the subprocess to attach to or authenticate
+ * as the parent Claude Code session.
+ * Any of CLAUDECODE, CLAUDE_CODE_*, or MCP_* can cause the subprocess to
+ * re-authenticate against, or behave as a nested agent of, the parent session.
+ */
+export declare function sanitizeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/drivers/claude/envSanitizer.js

@@ -0,0 +1,18 @@
+/**
+ * Strip env vars that would cause the subprocess to attach to or authenticate
+ * as the parent Claude Code session.
+ * Any of CLAUDECODE, CLAUDE_CODE_*, or MCP_* can cause the subprocess to
+ * re-authenticate against, or behave as a nested agent of, the parent session.
+ */
+export function sanitizeEnv(env) {
+    const clean = { ...env };
+    for (const key of Object.keys(clean)) {
+        if (key === "CLAUDECODE" ||
+            key.startsWith("CLAUDE_CODE_") ||
+            key.startsWith("MCP_")) {
+            delete clean[key];
+        }
+    }
+    return clean;
+}
+//# sourceMappingURL=envSanitizer.js.map

package/dist/drivers/claude/envSanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envSanitizer.js","sourceRoot":"","sources":["../../../src/drivers/claude/envSanitizer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAsB;IAChD,MAAM,KAAK,GAAsB,EAAE,GAAG,GAAG,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IACE,GAAG,KAAK,YAAY;YACpB,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAC9B,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EACtB,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/drivers/claude/streamParser.d.ts

@@ -0,0 +1,38 @@
+/** Shape of a parsed stream-json event from `claude -p --output-format stream-json`. */
+export interface StreamJsonEvent {
+    type: "system" | "assistant" | "result" | string;
+    /** Present on type === "assistant" */
+    message?: {
+        role?: string;
+        content?: Array<{
+            type: string;
+            text?: string;
+        }>;
+    };
+    /** Present on type === "result" — canonical full response text. */
+    result?: string;
+    /** Present on type === "result" — true when claude hit an error (e.g. max_turns). */
+    is_error?: boolean;
+    /** Present on type === "system" — session identifier. */
+    session_id?: string;
+}
+export interface ParsedLine {
+    kind: "event";
+    event: StreamJsonEvent;
+    text: string;
+}
+export interface RawLine {
+    kind: "raw";
+    text: string;
+}
+export type ParsedStreamLine = ParsedLine | RawLine;
+/**
+ * Parse a single JSONL line from the stream-json output format.
+ * Returns a raw line entry for non-JSON lines (backward compat with old binaries).
+ */
+export declare function parseStreamLine(line: string): ParsedStreamLine;
+/** Split a chunk into complete lines + a leftover partial. */
+export declare function splitLines(buf: string, chunk: string): {
+    lines: string[];
+    remainder: string;
+};

package/dist/drivers/claude/streamParser.js

@@ -0,0 +1,34 @@
+/**
+ * Parse a single JSONL line from the stream-json output format.
+ * Returns a raw line entry for non-JSON lines (backward compat with old binaries).
+ */
+export function parseStreamLine(line) {
+    try {
+        const event = JSON.parse(line);
+        let text = "";
+        if (event.type === "assistant") {
+            const content = event.message?.content;
+            if (Array.isArray(content)) {
+                text = content
+                    .filter((b) => b.type === "text")
+                    .map((b) => b.text ?? "")
+                    .join("");
+            }
+        }
+        else if (event.type === "result") {
+            text = typeof event.result === "string" ? event.result : "";
+        }
+        return { kind: "event", event, text };
+    }
+    catch {
+        return { kind: "raw", text: `${line}\n` };
+    }
+}
+/** Split a chunk into complete lines + a leftover partial. */
+export function splitLines(buf, chunk) {
+    const combined = buf + chunk;
+    const parts = combined.split("\n");
+    const remainder = parts.pop() ?? "";
+    return { lines: parts, remainder };
+}
+//# sourceMappingURL=streamParser.js.map

package/dist/drivers/claude/streamParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamParser.js","sourceRoot":"","sources":["../../../src/drivers/claude/streamParser.ts"],"names":[],"mappings":"AA6BA;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;QAClD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;YACvC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,GAAG,OAAO;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;qBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;qBACxB,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,KAAa;IAEb,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/drivers/claude/subprocess.d.ts

@@ -0,0 +1,19 @@
+import type { ProviderDriver, ProviderTaskInput, ProviderTaskResult } from "../types.js";
+/**
+ * Scrub secrets from a string before storing or surfacing it.
+ */
+export declare function scrubSecrets(text: string): string;
+/**
+ * Claude subprocess driver — spawns `claude -p` with stream-json output.
+ * Claude-specific providerOptions: { effort, fallbackModel, maxBudgetUsd, useAnt }
+ */
+export declare class SubprocessDriver implements ProviderDriver {
+    private readonly binary;
+    private readonly antBinary;
+    private readonly log;
+    readonly name = "subprocess";
+    private readonly settings;
+    constructor(binary: string, antBinary: string, log: (msg: string) => void);
+    run(input: ProviderTaskInput): Promise<ProviderTaskResult>;
+    runOutcome(input: ProviderTaskInput): Promise<import("../types.js").ProviderTaskOutcome>;
+}

package/dist/drivers/claude/subprocess.js

@@ -0,0 +1,216 @@
+import { spawn } from "node:child_process";
+import { toProviderTaskOutcome } from "../types.js";
+import { sanitizeEnv } from "./envSanitizer.js";
+import { parseStreamLine, splitLines } from "./streamParser.js";
+import { createSubprocessSettings } from "./subprocessSettings.js";
+const OUTPUT_CAP = 50 * 1024; // 50KB
+/**
+ * Scrub secrets from a string before storing or surfacing it.
+ */
+export function scrubSecrets(text) {
+    return text
+        .replace(/sk-ant-[A-Za-z0-9_-]{20,}/g, "[REDACTED_API_KEY]")
+        .replace(/Bearer\s+[A-Za-z0-9._-]{16,}/gi, "Bearer [REDACTED]")
+        .replace(/\btoken[=:]\s*[A-Za-z0-9._-]{16,}/gi, "token=[REDACTED]");
+}
+/**
+ * Claude subprocess driver — spawns `claude -p` with stream-json output.
+ * Claude-specific providerOptions: { effort, fallbackModel, maxBudgetUsd, useAnt }
+ */
+export class SubprocessDriver {
+    binary;
+    antBinary;
+    log;
+    name = "subprocess";
+    settings;
+    constructor(binary, antBinary, log) {
+        this.binary = binary;
+        this.antBinary = antBinary;
+        this.log = log;
+        this.settings = createSubprocessSettings(log);
+        this.settings.write();
+    }
+    async run(input) {
+        const opts = input.providerOptions ?? {};
+        const useAnt = opts.useAnt === true;
+        const effort = typeof opts.effort === "string" ? opts.effort : undefined;
+        const fallbackModel = typeof opts.fallbackModel === "string" ? opts.fallbackModel : undefined;
+        const maxBudgetUsd = typeof opts.maxBudgetUsd === "number" ? opts.maxBudgetUsd : undefined;
+        const effectiveBinary = useAnt ? this.antBinary : this.binary;
+        // Re-write before each run — /tmp may be cleared on long-running servers.
+        this.settings.write();
+        const args = [
+            "-p",
+            input.prompt,
+            "--strict-mcp-config",
+            "--settings",
+            this.settings.path,
+            "--output-format",
+            "stream-json",
+            "--verbose",
+            "--include-partial-messages",
+            "--no-session-persistence",
+        ];
+        if (input.model)
+            args.push("--model", input.model);
+        if (effort)
+            args.push("--effort", effort);
+        if (input.systemPrompt)
+            args.push("--system-prompt", input.systemPrompt);
+        if (fallbackModel)
+            args.push("--fallback-model", fallbackModel);
+        if (maxBudgetUsd !== undefined)
+            args.push("--max-budget-usd", String(maxBudgetUsd));
+        // Always skip permissions: headless subprocesses can't respond to prompts.
+        args.push("--dangerously-skip-permissions");
+        for (const f of input.contextFiles ?? []) {
+            if (typeof f === "string" && f.length > 0 && !f.startsWith("-")) {
+                args.push("--add-dir", f);
+            }
+        }
+        const env = sanitizeEnv(process.env);
+        this.log(`[SubprocessDriver] spawning: ${effectiveBinary} -p <prompt> (workspace: ${input.workspace})`);
+        const child = spawn(effectiveBinary, args, {
+            cwd: input.workspace,
+            env,
+            signal: input.signal,
+            stdio: ["ignore", "pipe", "pipe"],
+            // setsid() — prevents subprocess from opening /dev/tty for interactive prompts.
+            detached: true,
+        });
+        let lineBuf = "";
+        let accumulated = "";
+        let outputBytesSent = 0;
+        let firstAssistantAt;
+        let doneFromResult = false;
+        let resultText = "";
+        let resultIsError = false;
+        child.stdout.setEncoding("utf-8");
+        child.stdout.on("data", (chunk) => {
+            const { lines, remainder } = splitLines(lineBuf, chunk);
+            lineBuf = remainder;
+            for (const line of lines) {
+                if (line.trim() === "")
+                    continue;
+                const parsed = parseStreamLine(line);
+                if (parsed.kind === "raw") {
+                    accumulated += parsed.text;
+                    if (outputBytesSent < OUTPUT_CAP) {
+                        const send = parsed.text.slice(0, OUTPUT_CAP - outputBytesSent);
+                        if (send.length > 0) {
+                            input.onChunk?.(send);
+                            outputBytesSent += send.length;
+                        }
+                    }
+                    continue;
+                }
+                const { event, text } = parsed;
+                if (event.type === "assistant") {
+                    if (firstAssistantAt === undefined)
+                        firstAssistantAt = Date.now();
+                    if (text.length > 0) {
+                        accumulated += text;
+                        if (outputBytesSent < OUTPUT_CAP) {
+                            const send = text.slice(0, OUTPUT_CAP - outputBytesSent);
+                            if (send.length > 0) {
+                                input.onChunk?.(send);
+                                outputBytesSent += send.length;
+                            }
+                        }
+                    }
+                }
+                else if (event.type === "result") {
+                    doneFromResult = true;
+                    resultIsError = event.is_error === true;
+                    resultText = text || accumulated;
+                }
+            }
+        });
+        let stderr = "";
+        child.stderr.setEncoding("utf-8");
+        child.stderr.on("data", (chunk) => {
+            if (stderr.length < OUTPUT_CAP) {
+                stderr += chunk;
+                if (stderr.length > OUTPUT_CAP)
+                    stderr = stderr.slice(0, OUTPUT_CAP);
+            }
+        });
+        const start = Date.now();
+        const stderrTailOf = (s) => s.length > 0 ? scrubSecrets(s.slice(-2048)) : undefined;
+        const startupMsOf = () => firstAssistantAt !== undefined ? firstAssistantAt - start : undefined;
+        let startupTimedOut = false;
+        const startupHandle = input.startupTimeoutMs
+            ? setTimeout(() => {
+                if (firstAssistantAt === undefined && !doneFromResult) {
+                    startupTimedOut = true;
+                    child.kill();
+                }
+            }, input.startupTimeoutMs)
+            : null;
+        let exitCode;
+        try {
+            exitCode = await new Promise((resolve, reject) => {
+                child.on("close", (code) => resolve(code ?? 0));
+                child.on("error", reject);
+            });
+        }
+        catch (err) {
+            if (startupHandle)
+                clearTimeout(startupHandle);
+            if (doneFromResult) {
+                return {
+                    text: resultText.slice(0, OUTPUT_CAP),
+                    exitCode: resultIsError ? 1 : 0,
+                    durationMs: Date.now() - start,
+                    stderrTail: stderrTailOf(stderr),
+                    startupMs: startupMsOf(),
+                };
+            }
+            const isAbort = (err instanceof Error && err.name === "AbortError") ||
+                input.signal.aborted;
+            if (isAbort) {
+                return {
+                    text: accumulated.slice(0, OUTPUT_CAP),
+                    exitCode: -1,
+                    durationMs: Date.now() - start,
+                    stderrTail: stderrTailOf(stderr),
+                    wasAborted: true,
+                    startupMs: startupMsOf(),
+                };
+            }
+            throw err;
+        }
+        if (startupHandle)
+            clearTimeout(startupHandle);
+        const effectiveExitCode = doneFromResult
+            ? resultIsError
+                ? 1
+                : 0
+            : exitCode;
+        const finalText = doneFromResult ? resultText : accumulated;
+        if (startupTimedOut) {
+            return {
+                text: accumulated.slice(0, OUTPUT_CAP),
+                exitCode: -1,
+                durationMs: Date.now() - start,
+                stderrTail: stderrTailOf(stderr),
+                wasAborted: true,
+                startupTimedOut: true,
+            };
+        }
+        if (effectiveExitCode !== 0 && stderr) {
+            this.log(`[SubprocessDriver] stderr: ${stderr.slice(0, 500)}`);
+        }
+        return {
+            text: finalText.slice(0, OUTPUT_CAP),
+            exitCode: effectiveExitCode,
+            durationMs: Date.now() - start,
+            stderrTail: stderrTailOf(stderr),
+            startupMs: startupMsOf(),
+        };
+    }
+    async runOutcome(input) {
+        return toProviderTaskOutcome(await this.run(input));
+    }
+}
+//# sourceMappingURL=subprocess.js.map

package/dist/drivers/claude/subprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../../src/drivers/claude/subprocess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAM3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;AAErC;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,4BAA4B,EAAE,oBAAoB,CAAC;SAC3D,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,CAAC;SAC9D,OAAO,CAAC,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAKR;IACA;IACA;IANV,IAAI,GAAG,YAAY,CAAC;IACZ,QAAQ,CAA8C;IAEvE,YACmB,MAAc,EACd,SAAiB,EACjB,GAA0B;QAF1B,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAQ;QACjB,QAAG,GAAH,GAAG,CAAuB;QAE3C,IAAI,CAAC,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9D,0EAA0E;QAC1E,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEtB,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,KAAK,CAAC,MAAM;YACZ,qBAAqB;YACrB,YAAY;YACZ,IAAI,CAAC,QAAQ,CAAC,IAAI;YAClB,iBAAiB;YACjB,aAAa;YACb,WAAW;YACX,4BAA4B;YAC5B,0BAA0B;SAC3B,CAAC;QACF,IAAI,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,YAAY;YAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACzE,IAAI,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,YAAY,KAAK,SAAS;YAC5B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC,GAAG,CACN,gCAAgC,eAAe,4BAA4B,KAAK,CAAC,SAAS,GAAG,CAC9F,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE;YACzC,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,GAAG;YACH,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,gFAAgF;YAChF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,gBAAoC,CAAC;QACzC,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,GAAG,SAAS,CAAC;YAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,SAAS;gBAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC1B,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC;oBAC3B,IAAI,eAAe,GAAG,UAAU,EAAE,CAAC;wBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC;wBAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;4BACtB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;wBACjC,CAAC;oBACH,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;gBAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC/B,IAAI,gBAAgB,KAAK,SAAS;wBAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAClE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,WAAW,IAAI,IAAI,CAAC;wBACpB,IAAI,eAAe,GAAG,UAAU,EAAE,CAAC;4BACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC;4BACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACpB,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;gCACtB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;4BACjC,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACnC,cAAc,GAAG,IAAI,CAAC;oBACtB,aAAa,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;oBACxC,UAAU,GAAG,IAAI,IAAI,WAAW,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC;gBAChB,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;oBAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACvE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,CAAC,CAAS,EAAsB,EAAE,CACrD,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,MAAM,WAAW,GAAG,GAAuB,EAAE,CAC3C,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,MAAM,aAAa,GAAG,KAAK,CAAC,gBAAgB;YAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;oBACtD,eAAe,GAAG,IAAI,CAAC;oBACvB,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,CAAC;YACH,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO;oBACL,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;oBACrC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;oBAChC,SAAS,EAAE,WAAW,EAAE;iBACzB,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GACX,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;gBACnD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;oBACtC,QAAQ,EAAE,CAAC,CAAC;oBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;oBAChC,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,WAAW,EAAE;iBACzB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,aAAa;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;QAE/C,MAAM,iBAAiB,GAAG,cAAc;YACtC,CAAC,CAAC,aAAa;gBACb,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QAE5D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO;gBACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBACtC,QAAQ,EAAE,CAAC,CAAC;gBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;gBAChC,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,iBAAiB,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;YACpC,QAAQ,EAAE,iBAAiB;YAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE,WAAW,EAAE;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,OAAO,qBAAqB,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/drivers/claude/subprocessSettings.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Write a minimal subprocess settings file that suppresses hooks and denies
+ * destructive operations. Uses --settings instead of --bare to preserve OAuth
+ * auth flows (--bare sets CLAUDE_CODE_SIMPLE=1 which skips OAuth).
+ */
+export declare function createSubprocessSettings(log: (msg: string) => void): {
+    path: string;
+    write: () => void;
+};

package/dist/drivers/claude/subprocessSettings.js

@@ -0,0 +1,55 @@
+import { writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+/** Deny list applied to all bridge-spawned subprocess tasks. */
+const DENY_LIST = [
+    // Publishing / release
+    "Bash(npm publish*)",
+    "Bash(npm version*)",
+    "Bash(yarn publish*)",
+    "Bash(pnpm publish*)",
+    "Bash(npx semantic-release*)",
+    "Bash(npx release-it*)",
+    // Git remote / tagging
+    "Bash(git push*)",
+    "Bash(git tag*)",
+    "Bash(gh release*)",
+    // Destructive git operations
+    "Bash(git reset --hard*)",
+    "Bash(git clean -f*)",
+    // Filesystem destruction
+    "Bash(rm -rf *)",
+    "Bash(rm -rf/*)",
+    // Privilege escalation
+    "Bash(sudo *)",
+    "Bash(chmod 777*)",
+    // Arbitrary code execution
+    "Bash(eval *)",
+    "Bash(curl *|*)",
+    "Bash(wget *|*)",
+    // Process termination
+    "Bash(kill -9 *)",
+    "Bash(pkill *)",
+];
+const SETTINGS_CONTENT = JSON.stringify({
+    hooks: {},
+    permissions: { deny: DENY_LIST },
+});
+/**
+ * Write a minimal subprocess settings file that suppresses hooks and denies
+ * destructive operations. Uses --settings instead of --bare to preserve OAuth
+ * auth flows (--bare sets CLAUDE_CODE_SIMPLE=1 which skips OAuth).
+ */
+export function createSubprocessSettings(log) {
+    const path = join(tmpdir(), `claude-ide-bridge-subprocess-settings-${process.pid}.json`);
+    const write = () => {
+        try {
+            writeFileSync(path, SETTINGS_CONTENT, "utf-8");
+        }
+        catch (err) {
+            log(`[SubprocessSettings] WARN: could not write settings file at ${path}: ${err instanceof Error ? err.message : String(err)} — subprocess hooks may fire`);
+        }
+    };
+    return { path, write };
+}
+//# sourceMappingURL=subprocessSettings.js.map

package/dist/drivers/claude/subprocessSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocessSettings.js","sourceRoot":"","sources":["../../../src/drivers/claude/subprocessSettings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,gEAAgE;AAChE,MAAM,SAAS,GAAG;IAChB,uBAAuB;IACvB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IACrB,6BAA6B;IAC7B,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,6BAA6B;IAC7B,yBAAyB;IACzB,qBAAqB;IACrB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,2BAA2B;IAC3B,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;CAChB,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC;IACtC,KAAK,EAAE,EAAE;IACT,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CACjC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAA0B;IAIjE,MAAM,IAAI,GAAG,IAAI,CACf,MAAM,EAAE,EACR,yCAAyC,OAAO,CAAC,GAAG,OAAO,CAC5D,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CACD,+DAA+D,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CACvJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/dist/drivers/gemini/index.d.ts

@@ -0,0 +1,14 @@
+import type { ProviderDriver, ProviderTaskInput, ProviderTaskResult } from "../types.js";
+/**
+ * GeminiSubprocessDriver — spawns `gemini -p` with --output-format stream-json.
+ * Auth: GEMINI_API_KEY env var (or gcloud ADC / Vertex if configured in ~/.gemini/settings.json).
+ * providerOptions: { approvalMode?: "yolo" | "auto_edit" | "default" | "plan" }
+ */
+export declare class GeminiSubprocessDriver implements ProviderDriver {
+    private readonly binary;
+    private readonly log;
+    readonly name = "gemini";
+    constructor(binary: string, log: (msg: string) => void);
+    run(input: ProviderTaskInput): Promise<ProviderTaskResult>;
+    runOutcome(input: ProviderTaskInput): Promise<import("../types.js").ProviderTaskOutcome>;
+}