shennian 0.3.85 → 0.3.86

package/dist/src/agents/claude.js

@@ -1,8 +1,393 @@
-import g from"node:fs";import h from"node:path";import{createInterface as y}from"node:readline";import{randomUUID as c}from"node:crypto";import{AgentAdapter as S,registerAgent as E}from"./adapter.js";import{resolveBuiltinCommand as m,spawnAgentCommand as x,spawnResolvedCommandSync as I}from"./command-spec.js";import{buildAgentProcessEnv as p,buildManagedAgentProcessEnv as v}from"../agent-env.js";import{buildPlatformInstructions as f}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as P}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as k}from"../security/managed-agent-runtime.js";import{resolveManagedRoomIpcPaths as w}from"../daemon-ipc/paths.js";import{CLAUDE_MANAGED_RUNTIME_SECURITY as C,compileClaudeManagedPermissions as A}from"./claude-managed-permissions.js";k("claude",C);function _(n){return n?.trim()||"default"}const M=new Set(["low","medium","high","xhigh","max"]),l=new Map;function R(n){const e=n?.trim();if(e){if(M.has(e))return e;throw new Error(`Unsupported Claude reasoning effort "${e}". Supported values: low, medium, high, xhigh, max.`)}}function Q(){l.clear()}function T(n){const e=n.trim();return e?!e.includes("claude.ai connectors are disabled because"):!1}function O(){const n=m("claude");if(!n)return!1;const e=`${n.kind}:${n.path}:${n.command}:${n.args.join("\0")}`;if(l.has(e))return l.get(e)??!1;try{const t=I(n,["--help"],{encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:3e3,env:p()}),s=`${t.stdout??""}
-${t.stderr??""}`,a=/(?:^|\s)--effort(?:\s|,|<)/.test(s);return l.set(e,a),a}catch{return l.set(e,!1),!1}}class D extends S{options;type="claude";process=null;agentSessionId=null;sessionId=null;workDir=null;seq=0;runId="";hasEmittedText=!1;terminalState="open";persistNativeSession=!0;managedAgentPolicy=null;constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,s,a){this.sessionId=e,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=a?.persistNativeSession!==!1,s&&(this.agentSessionId=s)}async send(e,t,s,a,u,r){if(r?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=c(),this.resetRunState();const i=["-p",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]];this.persistNativeSession||i.push("--no-session-persistence");const d=this.options.systemPrompt??f(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,u);d&&i.push("--append-system-prompt",d),this.options.hidden&&i.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&i.push("--dangerously-skip-permissions"),i.push("--model",_(t));const o=R(s);o&&O()&&i.push("--effort",o),this.agentSessionId&&i.push("--resume",this.agentSessionId),this.spawnAndParse(i)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.runId=c(),this.resetRunState();const t=["--resume",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]],s=this.options.systemPrompt??f(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0);s&&t.push("--append-system-prompt",s),this.options.hidden&&t.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&t.push("--dangerously-skip-permissions"),this.spawnAndParse(t)}async stop(){await this.killProcess()}spawnAndParse(e){const t=m("claude");if(!t){this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?'));return}const s=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=s,y({input:s.stdout}).on("line",r=>{if(r.trim())try{const i=JSON.parse(r);this.handleStreamEvent(i)}catch{}});let u="";s.stderr?.on("data",r=>{const i=r.toString();if(u+=i,this.terminalState==="open")for(const d of i.split(`
-`)){const o=d.trim();T(o)&&this.emitEvent({state:"delta",text:o+`
-`})}}),s.on("close",r=>{this.process===s&&(this.process=null,this.handleProcessClose(r,u))}),s.on("error",r=>{this.process===s&&(this.process=null,r.code==="ENOENT"?this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?')):this.emit("error",r))})}buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)return null;const t=N();return A(P(e),e.adapterPolicy.workDir,{internalReadPaths:t.readPaths,internalUnixSockets:t.unixSockets,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}buildProcessEnv(){return this.managedAgentPolicy?v({agentType:"claude",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}}):p(this.extraEnv)}handleStreamEvent(e){if(e.type==="system"&&e.subtype==="init"&&e.session_id){this.agentSessionId=e.session_id,this.emitEvent({state:"start",agentSessionId:this.agentSessionId});return}if(e.type==="system"&&e.subtype==="api_retry"&&e.error==="authentication_failed"){this.emitErrorIfOpen({state:"error",message:'Claude authentication failed. Run "claude auth login" and retry.'});return}if(e.type==="assistant"){if(e.message?.content){for(const t of e.message.content)if(t.type==="text"&&t.text){const s=this.hasEmittedText?`
-
-`:"";this.emitEvent({state:"delta",text:s+t.text}),this.hasEmittedText=!0}else t.type==="thinking"&&t.thinking?this.emitEvent({state:"delta",text:t.thinking,thinking:!0}):t.type==="tool_use"&&this.emitEvent({state:"tool-call",name:t.name,args:t.input});return}if(e.subtype==="text"&&e.text){const t=this.hasEmittedText?`
-
-`:"";this.emitEvent({state:"delta",text:t+e.text}),this.hasEmittedText=!0}else e.subtype==="thinking"&&e.thinking?this.emitEvent({state:"delta",text:e.thinking,thinking:!0}):e.subtype==="tool_use"&&this.emitEvent({state:"tool-call",name:e.name,args:e.input});return}if(e.type==="result")if(e.subtype==="tool_result"){const t=typeof e.content=="string"?e.content:JSON.stringify(e.content);this.emitEvent({state:"tool-result",name:e.name,result:t})}else if(e.subtype==="success"){e.session_id&&(this.agentSessionId=e.session_id);const t=e.usage??e.message?.usage;this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:t?{inputTokens:t.input_tokens,outputTokens:t.output_tokens}:void 0})}else e.subtype==="error"&&this.emitErrorIfOpen({state:"error",message:e.error??e.result??"unknown error"})}handleProcessClose(e,t){if(e!==0&&e!==null){const s=t.trim()||`claude exited with code ${e}`;this.emitErrorIfOpen({state:"error",message:s});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0})}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="final",this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.emitEvent(e))}resetRunState(){this.seq=0,this.hasEmittedText=!1,this.terminalState="open"}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}async killProcess(){const e=this.process;e&&(this.process=null,e.kill("SIGTERM"),await new Promise(t=>{e.on("close",t),setTimeout(()=>{e.kill("SIGKILL"),t()},3e3)}))}}function N(){const n=w(),e=[n.secretFile],t=n.transport==="unix_socket"?[n.endpoint]:[];n.transport==="unix_socket"&&e.push(n.endpoint);const s=m("pi");if(s?.path){e.push(s.path);try{const a=g.realpathSync(s.path);e.push(a,h.dirname(a),h.dirname(h.dirname(a)))}catch{}}return{readPaths:[...new Set(e)].sort(),unixSockets:[...new Set(t)].sort()}}E("claude",()=>new D);export{D as ClaudeAdapter,_ as normalizeClaudeModelId,R as normalizeClaudeReasoningEffort,Q as resetClaudeCapabilityCacheForTests,N as resolveClaudeManagedInternalAccess,T as shouldForwardClaudeStderrLine,O as supportsClaudeReasoningEffort};
+// @arch docs/features/managed-agent-restricted-runtime.md
+// @test src/__tests__/claude-managed-permissions.test.ts
+import fs from 'node:fs';
+import path from 'node:path';
+import { createInterface } from 'node:readline';
+import { randomUUID } from 'node:crypto';
+import { AgentAdapter, registerAgent, } from './adapter.js';
+import { resolveBuiltinCommand, spawnAgentCommand, spawnResolvedCommandSync, } from './command-spec.js';
+import { buildAgentProcessEnv, buildManagedAgentProcessEnv } from '../agent-env.js';
+import { buildPlatformInstructions } from './platform-instructions.js';
+import { resolveManagedAgentAdapterEnforcement, } from '../security/managed-agent-policy.js';
+import { registerManagedAgentRuntimeSecurity } from '../security/managed-agent-runtime.js';
+import { resolveManagedRoomIpcPaths } from '../daemon-ipc/paths.js';
+import { CLAUDE_MANAGED_RUNTIME_SECURITY, compileClaudeManagedPermissions, } from './claude-managed-permissions.js';
+registerManagedAgentRuntimeSecurity('claude', CLAUDE_MANAGED_RUNTIME_SECURITY);
+export function normalizeClaudeModelId(modelId) {
+    const trimmed = modelId?.trim();
+    return trimmed || 'default';
+}
+const CLAUDE_REASONING_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
+const claudeEffortSupportCache = new Map();
+export function normalizeClaudeReasoningEffort(reasoningEffort) {
+    const trimmed = reasoningEffort?.trim();
+    if (!trimmed)
+        return undefined;
+    if (CLAUDE_REASONING_EFFORTS.has(trimmed))
+        return trimmed;
+    throw new Error(`Unsupported Claude reasoning effort "${trimmed}". Supported values: low, medium, high, xhigh, max.`);
+}
+export function resetClaudeCapabilityCacheForTests() {
+    claudeEffortSupportCache.clear();
+}
+export function shouldForwardClaudeStderrLine(line) {
+    const normalized = line.trim();
+    if (!normalized)
+        return false;
+    return !normalized.includes('claude.ai connectors are disabled because');
+}
+export function supportsClaudeReasoningEffort() {
+    const spec = resolveBuiltinCommand('claude');
+    if (!spec)
+        return false;
+    const cacheKey = `${spec.kind}:${spec.path}:${spec.command}:${spec.args.join('\0')}`;
+    if (claudeEffortSupportCache.has(cacheKey)) {
+        return claudeEffortSupportCache.get(cacheKey) ?? false;
+    }
+    try {
+        const result = spawnResolvedCommandSync(spec, ['--help'], {
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 3000,
+            env: buildAgentProcessEnv(),
+        });
+        const output = `${result.stdout ?? ''}\n${result.stderr ?? ''}`;
+        const supported = /(?:^|\s)--effort(?:\s|,|<)/.test(output);
+        claudeEffortSupportCache.set(cacheKey, supported);
+        return supported;
+    }
+    catch {
+        claudeEffortSupportCache.set(cacheKey, false);
+        return false;
+    }
+}
+export class ClaudeAdapter extends AgentAdapter {
+    options;
+    type = 'claude';
+    process = null;
+    agentSessionId = null;
+    sessionId = null;
+    workDir = null;
+    seq = 0;
+    runId = '';
+    hasEmittedText = false;
+    terminalState = 'open';
+    persistNativeSession = true;
+    managedAgentPolicy = null;
+    constructor(options = {}) {
+        super();
+        this.options = options;
+    }
+    externalChannel = null;
+    shennianSessionId = null;
+    extraEnv = {};
+    configure(options) {
+        this.shennianSessionId = options.sessionId ?? null;
+        this.externalChannel = options.externalChannel ?? null;
+        this.extraEnv = options.env ?? {};
+        if ('managedAgentPolicy' in options) {
+            this.managedAgentPolicy = options.managedAgentPolicy ?? null;
+        }
+        if (this.managedAgentPolicy)
+            this.workDir = this.managedAgentPolicy.adapterPolicy.workDir;
+    }
+    async start(sessionId, workDir, agentSessionId, options) {
+        this.sessionId = sessionId;
+        this.workDir = this.managedAgentPolicy?.adapterPolicy.workDir ?? workDir;
+        this.seq = 0;
+        this.persistNativeSession = options?.persistNativeSession !== false;
+        if (agentSessionId)
+            this.agentSessionId = agentSessionId;
+    }
+    async send(text, modelId, reasoningEffort, _attachments, agentSystemPrompt, context) {
+        if (context?.source === 'room_activation' && !this.managedAgentPolicy) {
+            throw new Error('managed_agent_policy_missing');
+        }
+        await this.killProcess();
+        this.runId = randomUUID();
+        this.resetRunState();
+        const args = [
+            '-p',
+            text,
+            '--output-format',
+            'stream-json',
+            '--verbose',
+            ...(this.buildManagedPermissionConfig()?.args ?? []),
+        ];
+        if (!this.persistNativeSession)
+            args.push('--no-session-persistence');
+        const systemPrompt = this.options.systemPrompt ??
+            buildPlatformInstructions(this.workDir ?? process.cwd(), this.externalChannel, this.shennianSessionId ?? undefined, agentSystemPrompt);
+        if (systemPrompt) {
+            args.push('--append-system-prompt', systemPrompt);
+        }
+        if (this.options.hidden) {
+            args.push('--name', 'Shennian Manager Substrate');
+        }
+        if (!this.managedAgentPolicy && process.getuid?.() !== 0) {
+            args.push('--dangerously-skip-permissions');
+        }
+        args.push('--model', normalizeClaudeModelId(modelId));
+        const effort = normalizeClaudeReasoningEffort(reasoningEffort);
+        if (effort && supportsClaudeReasoningEffort()) {
+            args.push('--effort', effort);
+        }
+        if (this.agentSessionId) {
+            args.push('--resume', this.agentSessionId);
+        }
+        this.spawnAndParse(args);
+    }
+    async resume(agentSessionId) {
+        await this.killProcess();
+        this.agentSessionId = agentSessionId;
+        this.runId = randomUUID();
+        this.resetRunState();
+        const resumeArgs = [
+            '--resume',
+            agentSessionId,
+            '--output-format',
+            'stream-json',
+            '--verbose',
+            ...(this.buildManagedPermissionConfig()?.args ?? []),
+        ];
+        const systemPrompt = this.options.systemPrompt ??
+            buildPlatformInstructions(this.workDir ?? process.cwd(), this.externalChannel, this.shennianSessionId ?? undefined);
+        if (systemPrompt) {
+            resumeArgs.push('--append-system-prompt', systemPrompt);
+        }
+        if (this.options.hidden) {
+            resumeArgs.push('--name', 'Shennian Manager Substrate');
+        }
+        if (!this.managedAgentPolicy && process.getuid?.() !== 0) {
+            resumeArgs.push('--dangerously-skip-permissions');
+        }
+        this.spawnAndParse(resumeArgs);
+    }
+    async stop() {
+        await this.killProcess();
+    }
+    spawnAndParse(args) {
+        const spec = resolveBuiltinCommand('claude');
+        if (!spec) {
+            this.emit('error', new Error('Command "claude" not found. Is Claude Code CLI installed?'));
+            return;
+        }
+        const proc = spawnAgentCommand(spec, args, {
+            cwd: this.workDir ?? undefined,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: this.buildProcessEnv(),
+        });
+        this.process = proc;
+        const rl = createInterface({ input: proc.stdout });
+        rl.on('line', (line) => {
+            if (!line.trim())
+                return;
+            try {
+                const obj = JSON.parse(line);
+                this.handleStreamEvent(obj);
+            }
+            catch {
+                // skip malformed lines
+            }
+        });
+        let stderrBuf = '';
+        proc.stderr?.on('data', (chunk) => {
+            const text = chunk.toString();
+            stderrBuf += text;
+            if (this.terminalState !== 'open')
+                return;
+            // Stream stderr lines in real-time so the app shows errors/retries immediately
+            for (const line of text.split('\n')) {
+                const trimmed = line.trim();
+                if (shouldForwardClaudeStderrLine(trimmed)) {
+                    this.emitEvent({ state: 'delta', text: trimmed + '\n' });
+                }
+            }
+        });
+        proc.on('close', (code) => {
+            if (this.process !== proc)
+                return;
+            this.process = null;
+            this.handleProcessClose(code, stderrBuf);
+        });
+        proc.on('error', (err) => {
+            if (this.process !== proc)
+                return;
+            this.process = null;
+            if (err.code === 'ENOENT') {
+                this.emit('error', new Error('Command "claude" not found. Is Claude Code CLI installed?'));
+            }
+            else {
+                this.emit('error', err);
+            }
+        });
+    }
+    buildManagedPermissionConfig() {
+        const compiled = this.managedAgentPolicy;
+        if (!compiled)
+            return null;
+        const internalAccess = resolveClaudeManagedInternalAccess();
+        return compileClaudeManagedPermissions(resolveManagedAgentAdapterEnforcement(compiled), compiled.adapterPolicy.workDir, {
+            internalReadPaths: internalAccess.readPaths,
+            internalUnixSockets: internalAccess.unixSockets,
+            shellSubprocessPolicy: compiled.environmentPolicy.shellSubprocess,
+        });
+    }
+    buildProcessEnv() {
+        if (!this.managedAgentPolicy)
+            return buildAgentProcessEnv(this.extraEnv);
+        return buildManagedAgentProcessEnv({
+            agentType: 'claude',
+            providerEnv: this.extraEnv,
+            sessionEnv: this.extraEnv,
+            runtimeEnv: { NO_COLOR: '1' },
+        });
+    }
+    handleStreamEvent(obj) {
+        if (obj.type === 'system' && obj.subtype === 'init' && obj.session_id) {
+            this.agentSessionId = obj.session_id;
+            this.emitEvent({ state: 'start', agentSessionId: this.agentSessionId });
+            return;
+        }
+        if (obj.type === 'system' &&
+            obj.subtype === 'api_retry' &&
+            obj.error === 'authentication_failed') {
+            this.emitErrorIfOpen({
+                state: 'error',
+                message: 'Claude authentication failed. Run "claude auth login" and retry.',
+            });
+            return;
+        }
+        if (obj.type === 'assistant') {
+            // New format (claude >= 2.1): content is in message.content[]
+            if (obj.message?.content) {
+                for (const block of obj.message.content) {
+                    if (block.type === 'text' && block.text) {
+                        const prefix = this.hasEmittedText ? '\n\n' : '';
+                        this.emitEvent({ state: 'delta', text: prefix + block.text });
+                        this.hasEmittedText = true;
+                    }
+                    else if (block.type === 'thinking' && block.thinking) {
+                        this.emitEvent({ state: 'delta', text: block.thinking, thinking: true });
+                    }
+                    else if (block.type === 'tool_use') {
+                        this.emitEvent({ state: 'tool-call', name: block.name, args: block.input });
+                    }
+                }
+                return;
+            }
+            // Legacy flat format (pre-2.1)
+            if (obj.subtype === 'text' && obj.text) {
+                const prefix = this.hasEmittedText ? '\n\n' : '';
+                this.emitEvent({ state: 'delta', text: prefix + obj.text });
+                this.hasEmittedText = true;
+            }
+            else if (obj.subtype === 'thinking' && obj.thinking) {
+                this.emitEvent({ state: 'delta', text: obj.thinking, thinking: true });
+            }
+            else if (obj.subtype === 'tool_use') {
+                this.emitEvent({ state: 'tool-call', name: obj.name, args: obj.input });
+            }
+            return;
+        }
+        if (obj.type === 'result') {
+            if (obj.subtype === 'tool_result') {
+                const content = typeof obj.content === 'string' ? obj.content : JSON.stringify(obj.content);
+                this.emitEvent({ state: 'tool-result', name: obj.name, result: content });
+            }
+            else if (obj.subtype === 'success') {
+                if (obj.session_id) {
+                    this.agentSessionId = obj.session_id;
+                }
+                const usage = obj.usage ?? obj.message?.usage;
+                this.emitFinalIfOpen({
+                    state: 'final',
+                    agentSessionId: this.agentSessionId ?? undefined,
+                    usage: usage
+                        ? { inputTokens: usage.input_tokens, outputTokens: usage.output_tokens }
+                        : undefined,
+                });
+            }
+            else if (obj.subtype === 'error') {
+                this.emitErrorIfOpen({
+                    state: 'error',
+                    message: obj.error ?? obj.result ?? 'unknown error',
+                });
+            }
+        }
+    }
+    handleProcessClose(code, stderrBuf) {
+        if (code !== 0 && code !== null) {
+            const msg = stderrBuf.trim() || `claude exited with code ${code}`;
+            this.emitErrorIfOpen({ state: 'error', message: msg });
+            return;
+        }
+        this.emitFinalIfOpen({
+            state: 'final',
+            agentSessionId: this.agentSessionId ?? undefined,
+        });
+    }
+    emitFinalIfOpen(partial) {
+        if (this.terminalState !== 'open')
+            return;
+        this.terminalState = 'final';
+        this.emitEvent(partial);
+    }
+    emitErrorIfOpen(partial) {
+        if (this.terminalState !== 'open')
+            return;
+        this.terminalState = 'error';
+        this.emitEvent(partial);
+    }
+    resetRunState() {
+        this.seq = 0;
+        this.hasEmittedText = false;
+        this.terminalState = 'open';
+    }
+    emitEvent(partial) {
+        const event = {
+            ...partial,
+            runId: this.runId,
+            seq: this.seq++,
+        };
+        this.emit('agentEvent', event);
+    }
+    async killProcess() {
+        const proc = this.process;
+        if (!proc)
+            return;
+        this.process = null;
+        proc.kill('SIGTERM');
+        await new Promise((resolve) => {
+            proc.on('close', resolve);
+            setTimeout(() => {
+                proc.kill('SIGKILL');
+                resolve();
+            }, 3000);
+        });
+    }
+}
+export function resolveClaudeManagedInternalAccess() {
+    const daemonIpc = resolveManagedRoomIpcPaths();
+    const readPaths = [daemonIpc.secretFile];
+    const unixSockets = daemonIpc.transport === 'unix_socket' ? [daemonIpc.endpoint] : [];
+    if (daemonIpc.transport === 'unix_socket')
+        readPaths.push(daemonIpc.endpoint);
+    const shennian = resolveBuiltinCommand('pi');
+    if (shennian?.path) {
+        readPaths.push(shennian.path);
+        try {
+            const executable = fs.realpathSync(shennian.path);
+            readPaths.push(executable, path.dirname(executable), path.dirname(path.dirname(executable)));
+        }
+        catch {
+            // The resolver already confirmed the command. A later removal makes the
+            // managed Room command fail without widening any sandbox path.
+        }
+    }
+    return {
+        readPaths: [...new Set(readPaths)].sort(),
+        unixSockets: [...new Set(unixSockets)].sort(),
+    };
+}
+registerAgent('claude', () => new ClaudeAdapter());