shennian 0.3.86 → 0.4.0

package/dist/src/agents/claude.js

@@ -1,393 +1,8 @@
-// @arch docs/features/managed-agent-restricted-runtime.md
-// @test src/__tests__/claude-managed-permissions.test.ts
-import fs from 'node:fs';
-import path from 'node:path';
-import { createInterface } from 'node:readline';
-import { randomUUID } from 'node:crypto';
-import { AgentAdapter, registerAgent, } from './adapter.js';
-import { resolveBuiltinCommand, spawnAgentCommand, spawnResolvedCommandSync, } from './command-spec.js';
-import { buildAgentProcessEnv, buildManagedAgentProcessEnv } from '../agent-env.js';
-import { buildPlatformInstructions } from './platform-instructions.js';
-import { resolveManagedAgentAdapterEnforcement, } from '../security/managed-agent-policy.js';
-import { registerManagedAgentRuntimeSecurity } from '../security/managed-agent-runtime.js';
-import { resolveManagedRoomIpcPaths } from '../daemon-ipc/paths.js';
-import { CLAUDE_MANAGED_RUNTIME_SECURITY, compileClaudeManagedPermissions, } from './claude-managed-permissions.js';
-registerManagedAgentRuntimeSecurity('claude', CLAUDE_MANAGED_RUNTIME_SECURITY);
-export function normalizeClaudeModelId(modelId) {
-    const trimmed = modelId?.trim();
-    return trimmed || 'default';
-}
-const CLAUDE_REASONING_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
-const claudeEffortSupportCache = new Map();
-export function normalizeClaudeReasoningEffort(reasoningEffort) {
-    const trimmed = reasoningEffort?.trim();
-    if (!trimmed)
-        return undefined;
-    if (CLAUDE_REASONING_EFFORTS.has(trimmed))
-        return trimmed;
-    throw new Error(`Unsupported Claude reasoning effort "${trimmed}". Supported values: low, medium, high, xhigh, max.`);
-}
-export function resetClaudeCapabilityCacheForTests() {
-    claudeEffortSupportCache.clear();
-}
-export function shouldForwardClaudeStderrLine(line) {
-    const normalized = line.trim();
-    if (!normalized)
-        return false;
-    return !normalized.includes('claude.ai connectors are disabled because');
-}
-export function supportsClaudeReasoningEffort() {
-    const spec = resolveBuiltinCommand('claude');
-    if (!spec)
-        return false;
-    const cacheKey = `${spec.kind}:${spec.path}:${spec.command}:${spec.args.join('\0')}`;
-    if (claudeEffortSupportCache.has(cacheKey)) {
-        return claudeEffortSupportCache.get(cacheKey) ?? false;
-    }
-    try {
-        const result = spawnResolvedCommandSync(spec, ['--help'], {
-            encoding: 'utf-8',
-            stdio: ['ignore', 'pipe', 'pipe'],
-            timeout: 3000,
-            env: buildAgentProcessEnv(),
-        });
-        const output = `${result.stdout ?? ''}\n${result.stderr ?? ''}`;
-        const supported = /(?:^|\s)--effort(?:\s|,|<)/.test(output);
-        claudeEffortSupportCache.set(cacheKey, supported);
-        return supported;
-    }
-    catch {
-        claudeEffortSupportCache.set(cacheKey, false);
-        return false;
-    }
-}
-export class ClaudeAdapter extends AgentAdapter {
-    options;
-    type = 'claude';
-    process = null;
-    agentSessionId = null;
-    sessionId = null;
-    workDir = null;
-    seq = 0;
-    runId = '';
-    hasEmittedText = false;
-    terminalState = 'open';
-    persistNativeSession = true;
-    managedAgentPolicy = null;
-    constructor(options = {}) {
-        super();
-        this.options = options;
-    }
-    externalChannel = null;
-    shennianSessionId = null;
-    extraEnv = {};
-    configure(options) {
-        this.shennianSessionId = options.sessionId ?? null;
-        this.externalChannel = options.externalChannel ?? null;
-        this.extraEnv = options.env ?? {};
-        if ('managedAgentPolicy' in options) {
-            this.managedAgentPolicy = options.managedAgentPolicy ?? null;
-        }
-        if (this.managedAgentPolicy)
-            this.workDir = this.managedAgentPolicy.adapterPolicy.workDir;
-    }
-    async start(sessionId, workDir, agentSessionId, options) {
-        this.sessionId = sessionId;
-        this.workDir = this.managedAgentPolicy?.adapterPolicy.workDir ?? workDir;
-        this.seq = 0;
-        this.persistNativeSession = options?.persistNativeSession !== false;
-        if (agentSessionId)
-            this.agentSessionId = agentSessionId;
-    }
-    async send(text, modelId, reasoningEffort, _attachments, agentSystemPrompt, context) {
-        if (context?.source === 'room_activation' && !this.managedAgentPolicy) {
-            throw new Error('managed_agent_policy_missing');
-        }
-        await this.killProcess();
-        this.runId = randomUUID();
-        this.resetRunState();
-        const args = [
-            '-p',
-            text,
-            '--output-format',
-            'stream-json',
-            '--verbose',
-            ...(this.buildManagedPermissionConfig()?.args ?? []),
-        ];
-        if (!this.persistNativeSession)
-            args.push('--no-session-persistence');
-        const systemPrompt = this.options.systemPrompt ??
-            buildPlatformInstructions(this.workDir ?? process.cwd(), this.externalChannel, this.shennianSessionId ?? undefined, agentSystemPrompt);
-        if (systemPrompt) {
-            args.push('--append-system-prompt', systemPrompt);
-        }
-        if (this.options.hidden) {
-            args.push('--name', 'Shennian Manager Substrate');
-        }
-        if (!this.managedAgentPolicy && process.getuid?.() !== 0) {
-            args.push('--dangerously-skip-permissions');
-        }
-        args.push('--model', normalizeClaudeModelId(modelId));
-        const effort = normalizeClaudeReasoningEffort(reasoningEffort);
-        if (effort && supportsClaudeReasoningEffort()) {
-            args.push('--effort', effort);
-        }
-        if (this.agentSessionId) {
-            args.push('--resume', this.agentSessionId);
-        }
-        this.spawnAndParse(args);
-    }
-    async resume(agentSessionId) {
-        await this.killProcess();
-        this.agentSessionId = agentSessionId;
-        this.runId = randomUUID();
-        this.resetRunState();
-        const resumeArgs = [
-            '--resume',
-            agentSessionId,
-            '--output-format',
-            'stream-json',
-            '--verbose',
-            ...(this.buildManagedPermissionConfig()?.args ?? []),
-        ];
-        const systemPrompt = this.options.systemPrompt ??
-            buildPlatformInstructions(this.workDir ?? process.cwd(), this.externalChannel, this.shennianSessionId ?? undefined);
-        if (systemPrompt) {
-            resumeArgs.push('--append-system-prompt', systemPrompt);
-        }
-        if (this.options.hidden) {
-            resumeArgs.push('--name', 'Shennian Manager Substrate');
-        }
-        if (!this.managedAgentPolicy && process.getuid?.() !== 0) {
-            resumeArgs.push('--dangerously-skip-permissions');
-        }
-        this.spawnAndParse(resumeArgs);
-    }
-    async stop() {
-        await this.killProcess();
-    }
-    spawnAndParse(args) {
-        const spec = resolveBuiltinCommand('claude');
-        if (!spec) {
-            this.emit('error', new Error('Command "claude" not found. Is Claude Code CLI installed?'));
-            return;
-        }
-        const proc = spawnAgentCommand(spec, args, {
-            cwd: this.workDir ?? undefined,
-            stdio: ['ignore', 'pipe', 'pipe'],
-            env: this.buildProcessEnv(),
-        });
-        this.process = proc;
-        const rl = createInterface({ input: proc.stdout });
-        rl.on('line', (line) => {
-            if (!line.trim())
-                return;
-            try {
-                const obj = JSON.parse(line);
-                this.handleStreamEvent(obj);
-            }
-            catch {
-                // skip malformed lines
-            }
-        });
-        let stderrBuf = '';
-        proc.stderr?.on('data', (chunk) => {
-            const text = chunk.toString();
-            stderrBuf += text;
-            if (this.terminalState !== 'open')
-                return;
-            // Stream stderr lines in real-time so the app shows errors/retries immediately
-            for (const line of text.split('\n')) {
-                const trimmed = line.trim();
-                if (shouldForwardClaudeStderrLine(trimmed)) {
-                    this.emitEvent({ state: 'delta', text: trimmed + '\n' });
-                }
-            }
-        });
-        proc.on('close', (code) => {
-            if (this.process !== proc)
-                return;
-            this.process = null;
-            this.handleProcessClose(code, stderrBuf);
-        });
-        proc.on('error', (err) => {
-            if (this.process !== proc)
-                return;
-            this.process = null;
-            if (err.code === 'ENOENT') {
-                this.emit('error', new Error('Command "claude" not found. Is Claude Code CLI installed?'));
-            }
-            else {
-                this.emit('error', err);
-            }
-        });
-    }
-    buildManagedPermissionConfig() {
-        const compiled = this.managedAgentPolicy;
-        if (!compiled)
-            return null;
-        const internalAccess = resolveClaudeManagedInternalAccess();
-        return compileClaudeManagedPermissions(resolveManagedAgentAdapterEnforcement(compiled), compiled.adapterPolicy.workDir, {
-            internalReadPaths: internalAccess.readPaths,
-            internalUnixSockets: internalAccess.unixSockets,
-            shellSubprocessPolicy: compiled.environmentPolicy.shellSubprocess,
-        });
-    }
-    buildProcessEnv() {
-        if (!this.managedAgentPolicy)
-            return buildAgentProcessEnv(this.extraEnv);
-        return buildManagedAgentProcessEnv({
-            agentType: 'claude',
-            providerEnv: this.extraEnv,
-            sessionEnv: this.extraEnv,
-            runtimeEnv: { NO_COLOR: '1' },
-        });
-    }
-    handleStreamEvent(obj) {
-        if (obj.type === 'system' && obj.subtype === 'init' && obj.session_id) {
-            this.agentSessionId = obj.session_id;
-            this.emitEvent({ state: 'start', agentSessionId: this.agentSessionId });
-            return;
-        }
-        if (obj.type === 'system' &&
-            obj.subtype === 'api_retry' &&
-            obj.error === 'authentication_failed') {
-            this.emitErrorIfOpen({
-                state: 'error',
-                message: 'Claude authentication failed. Run "claude auth login" and retry.',
-            });
-            return;
-        }
-        if (obj.type === 'assistant') {
-            // New format (claude >= 2.1): content is in message.content[]
-            if (obj.message?.content) {
-                for (const block of obj.message.content) {
-                    if (block.type === 'text' && block.text) {
-                        const prefix = this.hasEmittedText ? '\n\n' : '';
-                        this.emitEvent({ state: 'delta', text: prefix + block.text });
-                        this.hasEmittedText = true;
-                    }
-                    else if (block.type === 'thinking' && block.thinking) {
-                        this.emitEvent({ state: 'delta', text: block.thinking, thinking: true });
-                    }
-                    else if (block.type === 'tool_use') {
-                        this.emitEvent({ state: 'tool-call', name: block.name, args: block.input });
-                    }
-                }
-                return;
-            }
-            // Legacy flat format (pre-2.1)
-            if (obj.subtype === 'text' && obj.text) {
-                const prefix = this.hasEmittedText ? '\n\n' : '';
-                this.emitEvent({ state: 'delta', text: prefix + obj.text });
-                this.hasEmittedText = true;
-            }
-            else if (obj.subtype === 'thinking' && obj.thinking) {
-                this.emitEvent({ state: 'delta', text: obj.thinking, thinking: true });
-            }
-            else if (obj.subtype === 'tool_use') {
-                this.emitEvent({ state: 'tool-call', name: obj.name, args: obj.input });
-            }
-            return;
-        }
-        if (obj.type === 'result') {
-            if (obj.subtype === 'tool_result') {
-                const content = typeof obj.content === 'string' ? obj.content : JSON.stringify(obj.content);
-                this.emitEvent({ state: 'tool-result', name: obj.name, result: content });
-            }
-            else if (obj.subtype === 'success') {
-                if (obj.session_id) {
-                    this.agentSessionId = obj.session_id;
-                }
-                const usage = obj.usage ?? obj.message?.usage;
-                this.emitFinalIfOpen({
-                    state: 'final',
-                    agentSessionId: this.agentSessionId ?? undefined,
-                    usage: usage
-                        ? { inputTokens: usage.input_tokens, outputTokens: usage.output_tokens }
-                        : undefined,
-                });
-            }
-            else if (obj.subtype === 'error') {
-                this.emitErrorIfOpen({
-                    state: 'error',
-                    message: obj.error ?? obj.result ?? 'unknown error',
-                });
-            }
-        }
-    }
-    handleProcessClose(code, stderrBuf) {
-        if (code !== 0 && code !== null) {
-            const msg = stderrBuf.trim() || `claude exited with code ${code}`;
-            this.emitErrorIfOpen({ state: 'error', message: msg });
-            return;
-        }
-        this.emitFinalIfOpen({
-            state: 'final',
-            agentSessionId: this.agentSessionId ?? undefined,
-        });
-    }
-    emitFinalIfOpen(partial) {
-        if (this.terminalState !== 'open')
-            return;
-        this.terminalState = 'final';
-        this.emitEvent(partial);
-    }
-    emitErrorIfOpen(partial) {
-        if (this.terminalState !== 'open')
-            return;
-        this.terminalState = 'error';
-        this.emitEvent(partial);
-    }
-    resetRunState() {
-        this.seq = 0;
-        this.hasEmittedText = false;
-        this.terminalState = 'open';
-    }
-    emitEvent(partial) {
-        const event = {
-            ...partial,
-            runId: this.runId,
-            seq: this.seq++,
-        };
-        this.emit('agentEvent', event);
-    }
-    async killProcess() {
-        const proc = this.process;
-        if (!proc)
-            return;
-        this.process = null;
-        proc.kill('SIGTERM');
-        await new Promise((resolve) => {
-            proc.on('close', resolve);
-            setTimeout(() => {
-                proc.kill('SIGKILL');
-                resolve();
-            }, 3000);
-        });
-    }
-}
-export function resolveClaudeManagedInternalAccess() {
-    const daemonIpc = resolveManagedRoomIpcPaths();
-    const readPaths = [daemonIpc.secretFile];
-    const unixSockets = daemonIpc.transport === 'unix_socket' ? [daemonIpc.endpoint] : [];
-    if (daemonIpc.transport === 'unix_socket')
-        readPaths.push(daemonIpc.endpoint);
-    const shennian = resolveBuiltinCommand('pi');
-    if (shennian?.path) {
-        readPaths.push(shennian.path);
-        try {
-            const executable = fs.realpathSync(shennian.path);
-            readPaths.push(executable, path.dirname(executable), path.dirname(path.dirname(executable)));
-        }
-        catch {
-            // The resolver already confirmed the command. A later removal makes the
-            // managed Room command fail without widening any sandbox path.
-        }
-    }
-    return {
-        readPaths: [...new Set(readPaths)].sort(),
-        unixSockets: [...new Set(unixSockets)].sort(),
-    };
-}
-registerAgent('claude', () => new ClaudeAdapter());
+import g from"node:fs";import h from"node:path";import{createInterface as y}from"node:readline";import{randomUUID as c}from"node:crypto";import{AgentAdapter as S,registerAgent as E}from"./adapter.js";import{resolveBuiltinCommand as m,spawnAgentCommand as x,spawnResolvedCommandSync as I}from"./command-spec.js";import{buildAgentProcessEnv as p,buildManagedAgentProcessEnv as v}from"../agent-env.js";import{buildPlatformInstructions as f}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as P}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as k}from"../security/managed-agent-runtime.js";import{resolveManagedRoomIpcPaths as w}from"../daemon-ipc/paths.js";import{CLAUDE_MANAGED_RUNTIME_SECURITY as C,compileClaudeManagedPermissions as A}from"./claude-managed-permissions.js";k("claude",C);function _(n){return n?.trim()||"default"}const M=new Set(["low","medium","high","xhigh","max"]),l=new Map;function R(n){const e=n?.trim();if(e){if(M.has(e))return e;throw new Error(`Unsupported Claude reasoning effort "${e}". Supported values: low, medium, high, xhigh, max.`)}}function Q(){l.clear()}function T(n){const e=n.trim();return e?!e.includes("claude.ai connectors are disabled because"):!1}function O(){const n=m("claude");if(!n)return!1;const e=`${n.kind}:${n.path}:${n.command}:${n.args.join("\0")}`;if(l.has(e))return l.get(e)??!1;try{const t=I(n,["--help"],{encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:3e3,env:p()}),s=`${t.stdout??""}
+${t.stderr??""}`,a=/(?:^|\s)--effort(?:\s|,|<)/.test(s);return l.set(e,a),a}catch{return l.set(e,!1),!1}}class D extends S{options;type="claude";process=null;agentSessionId=null;sessionId=null;workDir=null;seq=0;runId="";hasEmittedText=!1;terminalState="open";persistNativeSession=!0;managedAgentPolicy=null;constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,s,a){this.sessionId=e,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=a?.persistNativeSession!==!1,s&&(this.agentSessionId=s)}async send(e,t,s,a,u,r){if(r?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=c(),this.resetRunState();const i=["-p",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]];this.persistNativeSession||i.push("--no-session-persistence");const d=this.options.systemPrompt??f(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,u);d&&i.push("--append-system-prompt",d),this.options.hidden&&i.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&i.push("--dangerously-skip-permissions"),i.push("--model",_(t));const o=R(s);o&&O()&&i.push("--effort",o),this.agentSessionId&&i.push("--resume",this.agentSessionId),this.spawnAndParse(i)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.runId=c(),this.resetRunState();const t=["--resume",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]],s=this.options.systemPrompt??f(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0);s&&t.push("--append-system-prompt",s),this.options.hidden&&t.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&t.push("--dangerously-skip-permissions"),this.spawnAndParse(t)}async stop(){await this.killProcess()}spawnAndParse(e){const t=m("claude");if(!t){this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?'));return}const s=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=s,y({input:s.stdout}).on("line",r=>{if(r.trim())try{const i=JSON.parse(r);this.handleStreamEvent(i)}catch{}});let u="";s.stderr?.on("data",r=>{const i=r.toString();if(u+=i,this.terminalState==="open")for(const d of i.split(`
+`)){const o=d.trim();T(o)&&this.emitEvent({state:"delta",text:o+`
+`})}}),s.on("close",r=>{this.process===s&&(this.process=null,this.handleProcessClose(r,u))}),s.on("error",r=>{this.process===s&&(this.process=null,r.code==="ENOENT"?this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?')):this.emit("error",r))})}buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)return null;const t=N();return A(P(e),e.adapterPolicy.workDir,{internalReadPaths:t.readPaths,internalUnixSockets:t.unixSockets,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}buildProcessEnv(){return this.managedAgentPolicy?v({agentType:"claude",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}}):p(this.extraEnv)}handleStreamEvent(e){if(e.type==="system"&&e.subtype==="init"&&e.session_id){this.agentSessionId=e.session_id,this.emitEvent({state:"start",agentSessionId:this.agentSessionId});return}if(e.type==="system"&&e.subtype==="api_retry"&&e.error==="authentication_failed"){this.emitErrorIfOpen({state:"error",message:'Claude authentication failed. Run "claude auth login" and retry.'});return}if(e.type==="assistant"){if(e.message?.content){for(const t of e.message.content)if(t.type==="text"&&t.text){const s=this.hasEmittedText?`
+
+`:"";this.emitEvent({state:"delta",text:s+t.text}),this.hasEmittedText=!0}else t.type==="thinking"&&t.thinking?this.emitEvent({state:"delta",text:t.thinking,thinking:!0}):t.type==="tool_use"&&this.emitEvent({state:"tool-call",name:t.name,args:t.input});return}if(e.subtype==="text"&&e.text){const t=this.hasEmittedText?`
+
+`:"";this.emitEvent({state:"delta",text:t+e.text}),this.hasEmittedText=!0}else e.subtype==="thinking"&&e.thinking?this.emitEvent({state:"delta",text:e.thinking,thinking:!0}):e.subtype==="tool_use"&&this.emitEvent({state:"tool-call",name:e.name,args:e.input});return}if(e.type==="result")if(e.subtype==="tool_result"){const t=typeof e.content=="string"?e.content:JSON.stringify(e.content);this.emitEvent({state:"tool-result",name:e.name,result:t})}else if(e.subtype==="success"){e.session_id&&(this.agentSessionId=e.session_id);const t=e.usage??e.message?.usage;this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:t?{inputTokens:t.input_tokens,outputTokens:t.output_tokens}:void 0})}else e.subtype==="error"&&this.emitErrorIfOpen({state:"error",message:e.error??e.result??"unknown error"})}handleProcessClose(e,t){if(e!==0&&e!==null){const s=t.trim()||`claude exited with code ${e}`;this.emitErrorIfOpen({state:"error",message:s});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0})}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="final",this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.emitEvent(e))}resetRunState(){this.seq=0,this.hasEmittedText=!1,this.terminalState="open"}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}async killProcess(){const e=this.process;e&&(this.process=null,e.kill("SIGTERM"),await new Promise(t=>{e.on("close",t),setTimeout(()=>{e.kill("SIGKILL"),t()},3e3)}))}}function N(){const n=w(),e=[n.secretFile],t=n.transport==="unix_socket"?[n.endpoint]:[];n.transport==="unix_socket"&&e.push(n.endpoint);const s=m("pi");if(s?.path){e.push(s.path);try{const a=g.realpathSync(s.path);e.push(a,h.dirname(a),h.dirname(h.dirname(a)))}catch{}}return{readPaths:[...new Set(e)].sort(),unixSockets:[...new Set(t)].sort()}}E("claude",()=>new D);export{D as ClaudeAdapter,_ as normalizeClaudeModelId,R as normalizeClaudeReasoningEffort,Q as resetClaudeCapabilityCacheForTests,N as resolveClaudeManagedInternalAccess,T as shouldForwardClaudeStderrLine,O as supportsClaudeReasoningEffort};