rackmind-cli 0.1.5 → 0.2.0

package/dist/ai/providers/claude-code-bridge.js

@@ -0,0 +1,371 @@
+/**
+ * ClaudeCodeBridge — loopback HTTP tool bridge for the spawned `claude`
+ * CLI child. Ported from the desktop app's bridge with one adaptation:
+ * the executor here runs the CLI's in-process tools (src/ai/tool-executor.ts)
+ * instead of delegating to Electron IPC. The security model (loopback bind,
+ * random shared secret, Host header check, body cap, request timeout) is
+ * identical to the desktop version.
+ */
+import { createServer } from 'http';
+import { randomBytes, timingSafeEqual } from 'crypto';
+import { promises as fs } from 'fs';
+import os from 'os';
+import path from 'path';
+import { executeTool } from '../tool-executor.js';
+import { logger } from '../../utils/logger.js';
+const MAX_BODY_BYTES = 1024 * 1024;
+const REQUEST_TIMEOUT_MS = 2 * 60 * 1000;
+/** Render a JSON-schema type fragment into a short human-readable hint. */
+function renderSchemaType(schema) {
+    if (!schema || typeof schema !== 'object')
+        return 'any';
+    const s = schema;
+    if (Array.isArray(s.enum) && s.enum.length > 0) {
+        return `enum(${s.enum.map((v) => JSON.stringify(v)).join('|')})`;
+    }
+    if (Array.isArray(s.oneOf) || Array.isArray(s.anyOf)) {
+        const variants = (s.oneOf ?? s.anyOf ?? []);
+        const rendered = variants.map((v) => renderSchemaType(v)).join(' | ');
+        return rendered || 'any';
+    }
+    if (Array.isArray(s.type)) {
+        return s.type.join('|');
+    }
+    if (s.type === 'array') {
+        return `array<${renderSchemaType(s.items)}>`;
+    }
+    if (s.type === 'object') {
+        if (s.properties && Object.keys(s.properties).length > 0) {
+            return `object{${Object.keys(s.properties).join(',')}}`;
+        }
+        return 'object';
+    }
+    return typeof s.type === 'string' ? s.type : 'any';
+}
+function sanitizeForPrompt(text) {
+    return text.replace(/`/g, "'").replace(/\r/g, '');
+}
+/**
+ * Build a concise manifest of RackMind tools for injection into the Claude
+ * Code system prompt. Lists every available tool with its description,
+ * input schema, and an example invocation so the model knows what to call
+ * via `rackmind-bridge`.
+ */
+export function buildToolManifest(tools) {
+    const lines = [
+        '## RackMind Tool Bridge',
+        '',
+        'You have access to RackMind infrastructure tools via a local helper:',
+        '',
+        "    rackmind-bridge <tool_name> '<json_args>'",
+        '',
+        'Run it via your Bash tool. The helper prints the tool result to stdout ' +
+            'and exits 0 on success, non-zero on error. Always pass tool args as a ' +
+            'single-quoted JSON object so the shell does not mangle them.',
+        '',
+        'Available tools:',
+        '',
+    ];
+    for (const tool of tools) {
+        lines.push(`### ${tool.name}`);
+        if (tool.description) {
+            lines.push(sanitizeForPrompt(tool.description));
+        }
+        const schema = (tool.input_schema ?? {});
+        const props = schema.properties ?? {};
+        const required = new Set(schema.required ?? []);
+        const propEntries = Object.entries(props);
+        const exampleArgs = {};
+        if (propEntries.length > 0) {
+            lines.push('Arguments:');
+            for (const [key, rawVal] of propEntries) {
+                const val = (rawVal ?? {});
+                const req = required.has(key) ? ' (required)' : '';
+                const type = renderSchemaType(rawVal);
+                const desc = val.description ? ` — ${sanitizeForPrompt(val.description)}` : '';
+                lines.push(`  - ${key}: ${type}${req}${desc}`);
+                if (required.has(key)) {
+                    exampleArgs[key] = 'value';
+                }
+            }
+        }
+        const exampleBody = Object.keys(exampleArgs).length > 0 ? JSON.stringify(exampleArgs) : '{}';
+        lines.push(`Example: rackmind-bridge ${tool.name} '${exampleBody}'`);
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+function secretsEqual(a, b) {
+    const ab = Buffer.from(a, 'utf-8');
+    const bb = Buffer.from(b, 'utf-8');
+    if (ab.length !== bb.length)
+        return false;
+    return timingSafeEqual(ab, bb);
+}
+function hostHeaderIsLoopback(host) {
+    if (!host)
+        return false;
+    return host.startsWith('127.0.0.1:') || host.startsWith('localhost:');
+}
+function sendJson(res, statusCode, body) {
+    if (res.writableEnded)
+        return;
+    res.writeHead(statusCode, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(body));
+}
+function readBodyCapped(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let total = 0;
+        let exceeded = false;
+        req.on('data', (chunk) => {
+            if (exceeded)
+                return;
+            total += chunk.length;
+            if (total > MAX_BODY_BYTES) {
+                exceeded = true;
+                reject(new Error('BODY_TOO_LARGE'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            if (!exceeded)
+                resolve(Buffer.concat(chunks));
+        });
+        req.on('error', (err) => {
+            if (!exceeded)
+                reject(err);
+        });
+    });
+}
+/**
+ * Start the local HTTP bridge and write the `rackmind-bridge` helper
+ * script. Returns a handle with the PATH dir and port the child should
+ * see in its env.
+ */
+export async function startClaudeCodeBridge(opts) {
+    const secret = randomBytes(32).toString('hex');
+    const server = createServer((req, res) => {
+        const timeout = setTimeout(() => {
+            sendJson(res, 504, {
+                ok: false,
+                status: 'error',
+                error: 'Tool request timed out',
+            });
+            req.destroy();
+        }, REQUEST_TIMEOUT_MS);
+        res.on('close', () => clearTimeout(timeout));
+        const handle = async () => {
+            if (!hostHeaderIsLoopback(req.headers.host)) {
+                sendJson(res, 403, { ok: false, status: 'error', error: 'Forbidden host' });
+                return;
+            }
+            if (req.method !== 'POST' || req.url !== '/tool') {
+                sendJson(res, 404, { ok: false, status: 'error', error: 'Not found' });
+                return;
+            }
+            const provided = req.headers['x-rackmind-secret'];
+            if (typeof provided !== 'string' || !secretsEqual(provided, secret)) {
+                sendJson(res, 401, { ok: false, status: 'error', error: 'Unauthorized' });
+                return;
+            }
+            let bodyBuf;
+            try {
+                bodyBuf = await readBodyCapped(req);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                if (message === 'BODY_TOO_LARGE') {
+                    sendJson(res, 413, {
+                        ok: false,
+                        status: 'error',
+                        error: 'Request body exceeds 1 MiB',
+                    });
+                    return;
+                }
+                sendJson(res, 400, {
+                    ok: false,
+                    status: 'error',
+                    error: `Failed to read body: ${message}`,
+                });
+                return;
+            }
+            let payload;
+            try {
+                payload = JSON.parse(bodyBuf.toString('utf-8'));
+            }
+            catch {
+                sendJson(res, 400, { ok: false, status: 'error', error: 'Invalid JSON body' });
+                return;
+            }
+            const name = typeof payload.name === 'string' ? payload.name : '';
+            const input = typeof payload.input === 'object' && payload.input !== null
+                ? payload.input
+                : {};
+            if (!name) {
+                sendJson(res, 400, { ok: false, status: 'error', error: 'Missing tool name' });
+                return;
+            }
+            if (opts.signal?.aborted) {
+                sendJson(res, 200, {
+                    ok: false,
+                    status: 'cancelled',
+                    error: 'Aborted by user',
+                });
+                return;
+            }
+            try {
+                const result = await executeTool(name, input, opts.serverClient, { confirm: opts.confirmDestructive });
+                if (opts.onToolCall) {
+                    opts.onToolCall(name, result.label, result.isError, result.content);
+                }
+                sendJson(res, 200, {
+                    ok: !result.isError,
+                    status: result.isError ? 'error' : 'done',
+                    result: result.content,
+                });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                logger.error('Bridge tool executor threw', { tool: name, error: message });
+                sendJson(res, 500, { ok: false, status: 'error', error: message });
+            }
+        };
+        handle().catch((err) => {
+            const message = err instanceof Error ? err.message : String(err);
+            sendJson(res, 500, { ok: false, status: 'error', error: message });
+        });
+    });
+    const port = await new Promise((resolve, reject) => {
+        const onError = (err) => reject(err);
+        server.once('error', onError);
+        server.listen(0, '127.0.0.1', () => {
+            server.removeListener('error', onError);
+            const address = server.address();
+            if (address && typeof address === 'object') {
+                resolve(address.port);
+            }
+            else {
+                reject(new Error('Failed to bind bridge HTTP server'));
+            }
+        });
+    });
+    let bridgeDir = null;
+    let stopped = false;
+    const closeServer = () => new Promise((resolve) => {
+        server.close(() => resolve());
+    });
+    const stop = async () => {
+        if (stopped)
+            return;
+        stopped = true;
+        await closeServer().catch(() => {
+            // best-effort
+        });
+        if (bridgeDir) {
+            await fs.rm(bridgeDir, { recursive: true, force: true }).catch(() => {
+                // best-effort
+            });
+        }
+    };
+    try {
+        bridgeDir = await fs.mkdtemp(path.join(os.tmpdir(), 'rackmind-bridge-'));
+        const scriptPath = path.join(bridgeDir, 'rackmind-bridge');
+        // Self-contained Node helper. Node is guaranteed to exist because the
+        // `claude` CLI itself is a Node program.
+        const script = `#!/usr/bin/env node
+'use strict';
+// rackmind-bridge: forwards a tool call to the local RackMind HTTP bridge.
+// Usage: rackmind-bridge <tool_name> '<json_args>'
+const http = require('http');
+
+const toolName = process.argv[2];
+const rawArgs = process.argv[3] != null ? process.argv[3] : '{}';
+
+if (!toolName) {
+    process.stderr.write("usage: rackmind-bridge <tool_name> '<json_args>'\\n");
+    process.exit(2);
+}
+
+let parsedInput;
+try {
+    parsedInput = JSON.parse(rawArgs);
+} catch (err) {
+    process.stderr.write('rackmind-bridge: invalid JSON args: ' + err.message + '\\n');
+    process.exit(2);
+}
+if (parsedInput == null || typeof parsedInput !== 'object' || Array.isArray(parsedInput)) {
+    process.stderr.write('rackmind-bridge: args must be a JSON object\\n');
+    process.exit(2);
+}
+
+const body = Buffer.from(JSON.stringify({ name: toolName, input: parsedInput }), 'utf-8');
+
+const req = http.request(
+    {
+        host: '127.0.0.1',
+        port: ${port},
+        path: '/tool',
+        method: 'POST',
+        headers: {
+            'content-type': 'application/json',
+            'content-length': body.length,
+            'x-rackmind-secret': ${JSON.stringify(secret)},
+        },
+    },
+    (res) => {
+        const chunks = [];
+        res.on('data', (c) => chunks.push(c));
+        res.on('end', () => {
+            const text = Buffer.concat(chunks).toString('utf-8');
+            let parsed;
+            try {
+                parsed = JSON.parse(text);
+            } catch (err) {
+                process.stderr.write('rackmind-bridge: bad response from server: ' + err.message + '\\n');
+                process.stderr.write(text + '\\n');
+                process.exit(1);
+            }
+            const out = parsed.result != null ? parsed.result : (parsed.error != null ? parsed.error : '');
+            if (out) process.stdout.write(String(out) + (String(out).endsWith('\\n') ? '' : '\\n'));
+            process.exit(parsed.ok === true ? 0 : 1);
+        });
+    }
+);
+
+req.on('error', (err) => {
+    process.stderr.write('rackmind-bridge: request failed: ' + err.message + '\\n');
+    process.exit(1);
+});
+
+req.write(body);
+req.end();
+`;
+        await fs.writeFile(scriptPath, script, { mode: 0o755 });
+    }
+    catch (err) {
+        await stop();
+        throw err;
+    }
+    // Belt-and-suspenders cleanup — if the process exits without calling
+    // stop() (e.g. uncaught exception in the caller), at least try to
+    // unlink the temp dir synchronously.
+    const exitHandler = () => {
+        stop().catch(() => undefined);
+    };
+    process.once('exit', exitHandler);
+    const originalStop = stop;
+    const wrappedStop = async () => {
+        process.removeListener('exit', exitHandler);
+        await originalStop();
+    };
+    return {
+        bridgeDir,
+        port,
+        secret,
+        stop: wrappedStop,
+    };
+}
+//# sourceMappingURL=claude-code-bridge.js.map

package/dist/ai/providers/claude-code-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-bridge.js","sourceRoot":"","sources":["../../../src/ai/providers/claude-code-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,MAAM,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,WAAW,EAA6B,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAoBzC,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,MAAe;IACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAOT,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAc,CAAC;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,QAAQ,IAAI,KAAK,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,SAAS,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC5D,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgC;IAC9D,MAAM,KAAK,GAAa;QACpB,yBAAyB;QACzB,EAAE;QACF,sEAAsE;QACtE,EAAE;QACF,+CAA+C;QAC/C,EAAE;QACF,yEAAyE;YACrE,wEAAwE;YACxE,8DAA8D;QAClE,EAAE;QACF,kBAAkB;QAClB,EAAE;KACL,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAGtC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAA6B,CAAC;gBACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;gBAC/C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpB,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;gBAC/B,CAAC;YACL,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GACb,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAwB;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,UAAkB,EAAE,IAAoB;IAC3E,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO;IAC9B,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7B,IAAI,QAAQ;gBAAE,OAAO;YACrB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;gBACzB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACf,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACpB,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAoBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAwB;IAChE,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACf,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,wBAAwB;aAClC,CAAC,CAAC;YACH,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;YACrC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACX,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBAC/C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvE,OAAO;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;gBAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC1E,OAAO;YACX,CAAC;YAED,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACD,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;oBAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACf,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,4BAA4B;qBACtC,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;oBACf,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,wBAAwB,OAAO,EAAE;iBAC3C,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,IAAI,OAA4C,CAAC;YACjD,IAAI,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAG7C,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/E,OAAO;YACX,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,KAAK,GACP,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;gBACvD,CAAC,CAAE,OAAO,CAAC,KAAiC;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/E,OAAO;YACX,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;oBACf,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,WAAW;oBACnB,KAAK,EAAE,iBAAiB;iBAC3B,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC5B,IAAI,EACJ,KAA0C,EAC1C,IAAI,CAAC,YAAY,EACjB,EAAE,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,CACvC,CAAC;gBACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClB,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxE,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;oBACf,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO;oBACnB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;oBACzC,MAAM,EAAE,MAAM,CAAC,OAAO;iBACzB,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACpB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC3E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAW,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC/B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC3D,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,WAAW,GAAG,GAAkB,EAAE,CACpC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEP,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACnC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,cAAc;QAClB,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAChE,cAAc;YAClB,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC;QACD,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAE3D,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+BP,IAAI;;;;;;mCAMe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BxD,CAAC;QAEM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,GAAG,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,qCAAqC;IACrC,MAAM,WAAW,GAAG,GAAS,EAAE;QAC3B,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,IAAI,CAAC;IAC1B,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC1C,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5C,MAAM,YAAY,EAAE,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO;QACH,SAAS;QACT,IAAI;QACJ,MAAM;QACN,IAAI,EAAE,WAAW;KACpB,CAAC;AACN,CAAC"}

package/dist/ai/providers/claude-code-provider.d.ts

@@ -0,0 +1,24 @@
+import type { ServerClient } from '../../server/client.js';
+import type { AIProvider, ChatHistory, MultiTurnCallbacks, ProviderOptions, StreamCallbacks } from './base.js';
+export declare class ClaudeCodeProvider implements AIProvider {
+    private readonly modelId;
+    private readonly cliModel;
+    /** One session id per serverAlias (REPL continuity within a process). */
+    private readonly sessions;
+    /** Deterministic scratch cwd per process — cleaned up on dispose(). */
+    private scratchRoot;
+    private disposed;
+    constructor(options: ProviderOptions);
+    getModel(): string;
+    private getScratchDir;
+    chat(query: string, serverClient: ServerClient, serverAlias: string, callbacks: StreamCallbacks): Promise<void>;
+    chatMultiTurn(query: string, history: ChatHistory, serverClient: ServerClient, serverAlias: string, callbacks: MultiTurnCallbacks): Promise<ChatHistory>;
+    /**
+     * Execute one claude-code turn. Returns the clean assistant text
+     * (with [STATUS:] markers stripped).
+     */
+    private runTurn;
+    dispose(): Promise<void>;
+}
+export declare function createClaudeCodeProvider(options: ProviderOptions): ClaudeCodeProvider;
+//# sourceMappingURL=claude-code-provider.d.ts.map

package/dist/ai/providers/claude-code-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-provider.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/claude-code-provider.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI3D,OAAO,KAAK,EACR,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,eAAe,EAClB,MAAM,WAAW,CAAC;AA2DnB,qBAAa,kBAAmB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,EAAE,eAAe;IAKpC,QAAQ,IAAI,MAAM;YAIJ,aAAa;IAOrB,IAAI,CACN,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,eAAe,GAC3B,OAAO,CAAC,IAAI,CAAC;IAKV,aAAa,CACf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,kBAAkB,GAC9B,OAAO,CAAC,WAAW,CAAC;IA0BvB;;;OAGG;YACW,OAAO;IA6Hf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAYjC;AAKD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,eAAe,GAAG,kBAAkB,CAErF"}

package/dist/ai/providers/claude-code-provider.js

@@ -0,0 +1,246 @@
+// ---------------------------------------------------------------------------
+// ClaudeCodeProvider — routes chat through the local `claude` CLI
+// ---------------------------------------------------------------------------
+// Private provider, invisible unless a feature flag is set. See models.ts
+// for visibility gating — this file deliberately does NOT reference the
+// env var name so that a user reading error output cannot discover it.
+//
+// The provider spawns the `claude` CLI per turn with a fresh rackmind-bridge
+// tool endpoint bound to 127.0.0.1 on an ephemeral port. RackMind tools
+// (execute_command, list_containers, etc.) are invoked by the model via
+// the bridge; native Claude Code tools (Bash, Read, Edit, …) run in the
+// spawned process the way they normally would.
+//
+// Session continuity: within a single CLI process lifetime (interactive
+// REPL), we keep one session id per serverAlias. The first turn mints a
+// new UUID and passes `--session-id`; subsequent turns pass `--resume` so
+// the CLI retains its own tool history. One-shot mode ignores sessions.
+// ---------------------------------------------------------------------------
+import path from 'path';
+import { promises as fsp } from 'fs';
+import os from 'os';
+import { randomUUID } from 'crypto';
+import { getToolDefinitions } from '../tools.js';
+import { fetchServerContext, buildSystemPrompt } from '../system-prompt.js';
+import { logger } from '../../utils/logger.js';
+import { runClaudeCode, checkClaudeCliAvailable, } from './claude-code-runner.js';
+import { startClaudeCodeBridge, buildToolManifest, } from './claude-code-bridge.js';
+/**
+ * Native Claude Code tool names we forward into the REPL's onToolStart/End
+ * stream (purely for display). RackMind tools that ride on top of the
+ * bridge are surfaced by the bridge executor instead, so they would show
+ * up twice otherwise.
+ */
+const NATIVE_CLAUDE_CODE_TOOLS = new Set([
+    'Bash',
+    'Read',
+    'Write',
+    'Edit',
+    'MultiEdit',
+    'Glob',
+    'Grep',
+]);
+/** Map a `claude-code:*` model id to the CLI model alias. */
+function claudeCodeCliModel(modelId) {
+    return modelId.toLowerCase().includes('opus') ? 'opus' : 'sonnet';
+}
+/** Best-effort classification of runner failures into a user-readable error. */
+function classifyError(stderr, exitCode) {
+    const lower = stderr.toLowerCase();
+    if (lower.includes('not authenticated') || lower.includes('please log in')) {
+        return 'Claude Code is not authenticated. Run `claude login` in a terminal and try again.';
+    }
+    if (lower.includes('model not found') ||
+        lower.includes('invalid model') ||
+        lower.includes('model unavailable')) {
+        return 'The requested model is not available through this provider.';
+    }
+    if (lower.includes('enoent') || lower.includes('command not found')) {
+        return 'The `claude` CLI binary is not available on PATH.';
+    }
+    if (lower.includes('rate limit') || lower.includes('429')) {
+        return 'Rate limit reached. Wait a minute and try again.';
+    }
+    const tail = stderr.trim().split('\n').slice(-6).join('\n').slice(-800);
+    const code = exitCode === null ? 'unknown' : exitCode;
+    return tail
+        ? `Claude Code CLI exited with code ${code}:\n${tail}`
+        : `Claude Code CLI exited with code ${code}`;
+}
+export class ClaudeCodeProvider {
+    modelId;
+    cliModel;
+    /** One session id per serverAlias (REPL continuity within a process). */
+    sessions = new Map();
+    /** Deterministic scratch cwd per process — cleaned up on dispose(). */
+    scratchRoot = null;
+    disposed = false;
+    constructor(options) {
+        this.modelId = options.model;
+        this.cliModel = claudeCodeCliModel(options.model);
+    }
+    getModel() {
+        return this.modelId;
+    }
+    async getScratchDir() {
+        if (!this.scratchRoot) {
+            this.scratchRoot = await fsp.mkdtemp(path.join(os.tmpdir(), 'rackmind-cc-'));
+        }
+        return this.scratchRoot;
+    }
+    async chat(query, serverClient, serverAlias, callbacks) {
+        // One-shot mode uses a throwaway session id — nothing to resume.
+        await this.runTurn(query, serverClient, serverAlias, callbacks, /*useSession*/ false);
+    }
+    async chatMultiTurn(query, history, serverClient, serverAlias, callbacks) {
+        // Mirror the turn into the Anthropic-shaped history so that a future
+        // switch to the Anthropic provider in the same session preserves a
+        // sensible transcript. The Claude Code CLI owns its own tool log
+        // via --resume, so we only persist user + assistant text, not the
+        // bridge's tool round-trips.
+        const messages = [
+            ...history,
+            { role: 'user', content: query },
+        ];
+        const assistantText = await this.runTurn(query, serverClient, serverAlias, callbacks, 
+        /*useSession*/ true);
+        messages.push({
+            role: 'assistant',
+            content: assistantText ? [{ type: 'text', text: assistantText }] : [],
+        });
+        return messages;
+    }
+    /**
+     * Execute one claude-code turn. Returns the clean assistant text
+     * (with [STATUS:] markers stripped).
+     */
+    async runTurn(userMessage, serverClient, serverAlias, callbacks, useSession) {
+        const available = await checkClaudeCliAvailable();
+        if (!available) {
+            throw new Error('The `claude` CLI is not available on PATH. Install Claude Code or switch to another model.');
+        }
+        const context = await fetchServerContext(serverClient);
+        const baseSystemPrompt = buildSystemPrompt(context, serverAlias);
+        const toolManifest = buildToolManifest(getToolDefinitions());
+        const systemPrompt = `${baseSystemPrompt}\n\n${toolManifest}`;
+        const cwd = await this.getScratchDir();
+        const existingSessionId = useSession ? this.sessions.get(serverAlias) : undefined;
+        const plannedSessionId = existingSessionId ?? randomUUID();
+        let bridge = null;
+        let accumulatedText = '';
+        try {
+            try {
+                bridge = await startClaudeCodeBridge({
+                    serverClient,
+                    confirmDestructive: callbacks.confirmDestructive,
+                    onToolCall: (toolName, label, isError, content) => {
+                        // Forward RackMind tool results from the bridge
+                        // executor into the REPL's tool stream. Start +
+                        // end are emitted together because the bridge
+                        // only calls back once, after the tool completes.
+                        callbacks.onToolStart(toolName, label);
+                        callbacks.onToolEnd(toolName, label, isError);
+                        const withToolResult = callbacks;
+                        if (withToolResult.onToolResult) {
+                            withToolResult.onToolResult({
+                                toolName,
+                                label,
+                                isError,
+                                content,
+                            });
+                        }
+                    },
+                });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                throw new Error(`Failed to start Claude Code tool bridge: ${message}`, {
+                    cause: err,
+                });
+            }
+            const result = await runClaudeCode({
+                userMessage,
+                systemPrompt,
+                model: this.cliModel,
+                cwd,
+                extraEnv: {
+                    PATH: `${bridge.bridgeDir}${path.delimiter}${process.env.PATH ?? ''}`,
+                },
+                ...(existingSessionId
+                    ? { resumeSessionId: existingSessionId }
+                    : { newSessionId: plannedSessionId }),
+                onText: (delta) => {
+                    accumulatedText += delta;
+                    callbacks.onText(delta);
+                },
+                onStatus: (status) => {
+                    // Status lines go to the error/status channel —
+                    // non-fatal, informational.
+                    callbacks.onError(status);
+                },
+                onToolUse: (event) => {
+                    if (!NATIVE_CLAUDE_CODE_TOOLS.has(event.name))
+                        return;
+                    if (event.status === 'running') {
+                        callbacks.onToolStart(event.name, event.name);
+                    }
+                    else {
+                        callbacks.onToolEnd(event.name, event.name, event.status === 'error');
+                    }
+                },
+                onStderr: (chunk) => {
+                    logger.debug('claude-code stderr', { chunk: chunk.trim() });
+                },
+            });
+            if (useSession) {
+                const observed = result.sessionId ?? existingSessionId ?? plannedSessionId;
+                this.sessions.set(serverAlias, observed);
+            }
+            if (!result.success) {
+                if (result.aborted)
+                    return result.finalText;
+                if (result.timedOut) {
+                    throw new Error('Claude Code CLI timed out after 10 minutes.');
+                }
+                if (result.overflowed) {
+                    throw new Error('Claude Code CLI emitted a single line larger than 10 MiB — aborting to avoid memory exhaustion.');
+                }
+                if (result.maxTurnsExceeded) {
+                    callbacks.onError('Claude Code CLI hit its max-turns ceiling — send another message to resume.');
+                    return result.finalText;
+                }
+                throw new Error(classifyError(result.stderr, result.exitCode));
+            }
+            return result.finalText || accumulatedText;
+        }
+        finally {
+            if (bridge) {
+                await bridge.stop().catch((err) => {
+                    logger.warn('Bridge stop failed', {
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                });
+            }
+        }
+    }
+    async dispose() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        this.sessions.clear();
+        if (this.scratchRoot) {
+            const root = this.scratchRoot;
+            this.scratchRoot = null;
+            await fsp.rm(root, { recursive: true, force: true }).catch(() => {
+                // best-effort
+            });
+        }
+    }
+}
+// Construction helper kept separate from the class so providers/index.ts
+// can wire it up without importing the class directly into code that does
+// the gating check.
+export function createClaudeCodeProvider(options) {
+    return new ClaudeCodeProvider(options);
+}
+//# sourceMappingURL=claude-code-provider.js.map