subharness 0.0.3 → 0.0.4

package/README.md

@@ -33,7 +33,7 @@ npx skills add vercel-labs/subharness
 
 The installer requires access to the subharness repository while the repository is internal. See the [agent-skill reference](sdk/agent-skill.md) for installation behavior and boundaries.
 
-See [package distribution](sdk/distribution.md) for development checkouts, local tarballs, and package boundaries. subharness uses the [Apache License 2.0](LICENSE).
+See [package distribution](sdk/distribution.md) for development checkouts, local tarballs, and package boundaries. Maintainers publish through the [GitHub release procedure](sdk/distribution.md#github-release-publishing). subharness uses the [Apache License 2.0](LICENSE).
 
 ## Delegate from your coding agent
 
@@ -68,7 +68,7 @@ subharness run claude --prompt-file ./review-task.txt
 subharness run codex --prompt-file - < ./task.txt
 ```
 
-Use `subharness dashboard` in a terminal to watch agents managed by the local coordinator. The live view groups agents by repository/worktree, pins the checkout containing the launch directory first, and orders other groups by their latest agent update. Each group shows current agents followed by finished runs, with harness, task title, elapsed time, and status. Finished history is retained for the coordinator’s lifetime. It has compact group labels and no controls or application banner; Ctrl+C closes the view without stopping agents.
+Use `subharness dashboard` in a terminal to watch agents managed by the local coordinator. The live view groups agents by repository/worktree, pins the checkout containing the launch directory first, and orders other groups by their latest agent update. Each group shows current agents followed by finished runs, with harness, task title, elapsed time, and status. Finished history is retained for the coordinator’s lifetime. Use Up/Down to select a run and Enter to open its agent session’s request history. Queued requests appear first, followed by remaining requests newest first. Enter expands a request’s prompt and response; Escape returns to the overview. Completed statuses are green, and a compact Sub-agents footer summarizes direct child agents. The overview has no application banner or footer. Ctrl+C closes the view without stopping agents.
 
 ## Define a reusable specialist
 
@@ -155,7 +155,7 @@ This checkout includes six [repository roles](sdk/project-team.md): architecture
 
 ## Boundaries
 
-The local coordinator retains sessions and responses across command exits, but does not restore queues after coordinator or environment loss. External assistant reactivation depends on that assistant's host. Native requests needing interactive permission/input fail with actionable `INPUT_REQUIRED`; they are not automatically approved. CLI delegation requires the native shell to reach the coordinator over loopback HTTP; a sandbox that blocks local networking must be configured by the caller.
+The local coordinator retains sessions and responses across command exits, but does not restore queues after coordinator or environment loss. External assistant reactivation depends on that assistant's host. Supported native permission requests return structured schemas and keep the original operation pending. The caller answers with `subharness respond <request-id> --content <json>` and observes the same task. See [permission request examples](sdk/approvals.md). Unsupported interactive input still fails with actionable `INPUT_REQUIRED`; no request is automatically approved. CLI delegation requires the native shell to reach the coordinator over loopback HTTP; a sandbox that blocks local networking must be configured by the caller.
 
 `resume` is available as a command, but v1 adapters report `RECOVERY_UNSUPPORTED` when prompt-free native recovery is unavailable. Failed work is not automatically replayed or migrated.
 

package/dist/adapters/approval-context.d.ts

@@ -0,0 +1,2 @@
+/** Native envelopes can include private configuration unrelated to the requested action. */
+export declare function approvalContext(source: Record<string, unknown>, fields: readonly string[]): Record<string, unknown>;

package/dist/adapters/approval-context.js

@@ -0,0 +1,9 @@
+/** Native envelopes can include private configuration unrelated to the requested action. */
+export function approvalContext(source, fields) {
+    const result = {};
+    for (const key of fields)
+        if (Object.hasOwn(source, key) && source[key] !== undefined)
+            result[key] = structuredClone(source[key]);
+    return result;
+}
+//# sourceMappingURL=approval-context.js.map

package/dist/adapters/approval-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-context.js","sourceRoot":"","sources":["../../src/adapters/approval-context.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,MAA+B,EAAE,MAAyB;IACxF,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM;QAAE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACjI,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/** Native envelopes can include private configuration unrelated to the requested action. */\nexport function approvalContext(source: Record<string, unknown>, fields: readonly string[]): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const key of fields) if (Object.hasOwn(source,key) && source[key] !== undefined) result[key] = structuredClone(source[key]);\n  return result;\n}\n"]}

package/dist/adapters/approval-lifetime.d.ts

@@ -0,0 +1,8 @@
+import type { ApprovalContent, ApprovalHandler, NativeApprovalRequest } from "../approvals/types.js";
+/** Owns callback lifetimes independently of an outstanding native turn. */
+export declare class NativeApprovals {
+    private readonly pending;
+    request(id: string | number, request: NativeApprovalRequest, handler: ApprovalHandler, parent?: AbortSignal): Promise<ApprovalContent>;
+    withdraw(id: string | number): void;
+    clear(): void;
+}

package/dist/adapters/approval-lifetime.js

@@ -0,0 +1,50 @@
+import { AgentError } from "../errors.js";
+import { validateApprovalContent, validateApprovalSchema } from "../approvals/schema.js";
+/** Owns callback lifetimes independently of an outstanding native turn. */
+export class NativeApprovals {
+    pending = new Map();
+    async request(id, request, handler, parent) {
+        if (this.pending.has(id) || this.pending.size >= 32)
+            throw new AgentError("INPUT_REQUIRED", "The native permission request cannot be admitted.");
+        let snapshot;
+        try {
+            const serialized = JSON.stringify(request);
+            if (Buffer.byteLength(serialized) > 64 * 1024)
+                throw new Error();
+            snapshot = JSON.parse(serialized);
+            validateApprovalSchema(snapshot.requestedSchema);
+        }
+        catch {
+            throw new AgentError("INPUT_REQUIRED", "The native permission request is unsupported or exceeds the supported size.");
+        }
+        const schema = structuredClone(snapshot.requestedSchema);
+        const controller = new AbortController();
+        this.pending.set(id, controller);
+        const abort = () => controller.abort();
+        parent?.addEventListener("abort", abort, { once: true });
+        if (parent?.aborted)
+            abort();
+        let rejectAbort;
+        const withdrawn = new Promise((_resolve, reject) => {
+            rejectAbort = () => reject(new AgentError("REQUEST_EXPIRED", "The native permission request is no longer pending."));
+            controller.signal.addEventListener("abort", rejectAbort, { once: true });
+        });
+        try {
+            if (controller.signal.aborted)
+                throw new AgentError("REQUEST_EXPIRED", "The native permission request is no longer pending.");
+            const content = await Promise.race([handler(snapshot, controller.signal), withdrawn]);
+            if (controller.signal.aborted)
+                throw new AgentError("REQUEST_EXPIRED", "The native permission request is no longer pending.");
+            return validateApprovalContent(schema, content);
+        }
+        finally {
+            parent?.removeEventListener("abort", abort);
+            controller.signal.removeEventListener("abort", rejectAbort);
+            this.pending.delete(id);
+        }
+    }
+    withdraw(id) { this.pending.get(id)?.abort(); }
+    clear() { for (const controller of this.pending.values())
+        controller.abort(); }
+}
+//# sourceMappingURL=approval-lifetime.js.map

package/dist/adapters/approval-lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-lifetime.js","sourceRoot":"","sources":["../../src/adapters/approval-lifetime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGzF,2EAA2E;AAC3E,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEvE,KAAK,CAAC,OAAO,CAAC,EAAmB,EAAE,OAA8B,EAAE,OAAwB,EAAE,MAAoB;QAC/G,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAC;QACjJ,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACjE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,sBAAsB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6EAA6E,CAAC,CAAC;QAAC,CAAC;QAClI,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QAC7B,IAAI,WAAwB,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACxD,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC,CAAC;YACrH,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC;YAC9H,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YACtF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC;YAC9H,OAAO,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,EAAmB,IAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,KAAK,KAAW,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CACtF","sourcesContent":["import { AgentError } from \"../errors.js\";\nimport { validateApprovalContent, validateApprovalSchema } from \"../approvals/schema.js\";\nimport type { ApprovalContent, ApprovalHandler, NativeApprovalRequest } from \"../approvals/types.js\";\n\n/** Owns callback lifetimes independently of an outstanding native turn. */\nexport class NativeApprovals {\n  private readonly pending = new Map<string | number, AbortController>();\n\n  async request(id: string | number, request: NativeApprovalRequest, handler: ApprovalHandler, parent?: AbortSignal): Promise<ApprovalContent> {\n    if (this.pending.has(id) || this.pending.size >= 32) throw new AgentError(\"INPUT_REQUIRED\", \"The native permission request cannot be admitted.\");\n    let snapshot: NativeApprovalRequest;\n    try {\n      const serialized = JSON.stringify(request);\n      if (Buffer.byteLength(serialized) > 64 * 1024) throw new Error();\n      snapshot = JSON.parse(serialized);\n      validateApprovalSchema(snapshot.requestedSchema);\n    } catch { throw new AgentError(\"INPUT_REQUIRED\", \"The native permission request is unsupported or exceeds the supported size.\"); }\n    const schema = structuredClone(snapshot.requestedSchema);\n    const controller = new AbortController();\n    this.pending.set(id, controller);\n    const abort = () => controller.abort();\n    parent?.addEventListener(\"abort\", abort, { once: true });\n    if (parent?.aborted) abort();\n    let rejectAbort!: () => void;\n    const withdrawn = new Promise<never>((_resolve, reject) => {\n      rejectAbort = () => reject(new AgentError(\"REQUEST_EXPIRED\", \"The native permission request is no longer pending.\"));\n      controller.signal.addEventListener(\"abort\", rejectAbort, { once: true });\n    });\n    try {\n      if (controller.signal.aborted) throw new AgentError(\"REQUEST_EXPIRED\", \"The native permission request is no longer pending.\");\n      const content = await Promise.race([handler(snapshot, controller.signal), withdrawn]);\n      if (controller.signal.aborted) throw new AgentError(\"REQUEST_EXPIRED\", \"The native permission request is no longer pending.\");\n      return validateApprovalContent(schema, content);\n    } finally {\n      parent?.removeEventListener(\"abort\", abort);\n      controller.signal.removeEventListener(\"abort\", rejectAbort);\n      this.pending.delete(id);\n    }\n  }\n\n  withdraw(id: string | number): void { this.pending.get(id)?.abort(); }\n  clear(): void { for (const controller of this.pending.values()) controller.abort(); }\n}\n"]}

package/dist/adapters/claude-approvals.d.ts

@@ -0,0 +1,4 @@
+import type { CanUseTool, PermissionResult } from "@anthropic-ai/claude-agent-sdk";
+import type { ApprovalHandler } from "../approvals/types.js";
+import { NativeApprovals } from "./approval-lifetime.js";
+export declare function claudeApproval(approvals: NativeApprovals, handler: ApprovalHandler, toolName: string, input: Record<string, unknown>, metadata: Parameters<CanUseTool>[2]): Promise<PermissionResult>;

package/dist/adapters/claude-approvals.js

@@ -0,0 +1,32 @@
+import { approvalContext } from "./approval-context.js";
+/** Only native session suggestions that add grants can be reused without changing policy. */
+function reusable(suggestions) {
+    return !!suggestions?.length && suggestions.every(suggestion => suggestion.destination === "session"
+        && ((suggestion.type === "addRules" && suggestion.behavior === "allow" && suggestion.rules.length > 0)
+            || (suggestion.type === "addDirectories" && suggestion.directories.length > 0)));
+}
+export async function claudeApproval(approvals, handler, toolName, input, metadata) {
+    const originalInput = structuredClone(input);
+    const suggestions = metadata.suggestions && structuredClone(metadata.suggestions);
+    const session = !metadata.suppressAlwaysAllowRule && reusable(suggestions);
+    const request = {
+        kind: "permission", harness: "claudeCode", message: metadata.title ?? `Allow native tool ${toolName}?`,
+        requestedSchema: { type: "object", properties: { decision: { type: "string", oneOf: [
+                        { const: "allow_once", title: "Allow once" },
+                        ...(session ? [{ const: "allow_session", title: "Allow for this session using the suggested permissions" }] : []),
+                        { const: "deny", title: "Deny" },
+                    ] } }, required: ["decision"] },
+        context: { toolName, input: originalInput, ...approvalContext(metadata, ["blockedPath", "decisionReason", "title", "displayName", "description", "defaultToNo", "suppressAlwaysAllowRule", "toolUseID", "agentID", "requestId"]),
+            ...(metadata.matchedAskRule ? { matchedAskRule: approvalContext(metadata.matchedAskRule, ["source", "toolName", "ruleContent"]) } : {}),
+            ...(metadata.mcpServer ? { mcpServer: approvalContext(metadata.mcpServer, ["name", "source"]) } : {}),
+            ...(suggestions ? { suggestions: suggestions.map(suggestion => ({ ...approvalContext(suggestion, ["type", "destination", "behavior", "mode", "directories"]), ...("rules" in suggestion ? { rules: suggestion.rules.map(rule => approvalContext(rule, ["toolName", "ruleContent"])) } : {}) })) } : {}),
+        },
+    };
+    const content = await approvals.request(metadata.requestId, request, handler, metadata.signal);
+    if (metadata.signal.aborted)
+        return { behavior: "deny", message: "The permission request is no longer pending." };
+    if (content.decision === "deny")
+        return { behavior: "deny", message: "The caller denied permission for this tool." };
+    return { behavior: "allow", updatedInput: originalInput, ...(content.decision === "allow_session" ? { updatedPermissions: suggestions } : {}) };
+}
+//# sourceMappingURL=claude-approvals.js.map

package/dist/adapters/claude-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-approvals.js","sourceRoot":"","sources":["../../src/adapters/claude-approvals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,WAA2C;IAC3D,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;WAC/F,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;eACjG,CAAC,UAAU,CAAC,IAAI,KAAK,gBAAgB,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAA0B,EAAE,OAAwB,EAAE,QAAgB,EACtE,KAA8B,EAAE,QAAmC;IAEnE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,uBAAuB,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA0B;QACrC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,IAAI,qBAAqB,QAAQ,GAAG;QACtG,eAAe,EAAE,EAAC,IAAI,EAAC,QAAQ,EAAC,UAAU,EAAC,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC;wBACxE,EAAC,KAAK,EAAC,YAAY,EAAC,KAAK,EAAC,YAAY,EAAC;wBACvC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAC,KAAK,EAAC,eAAe,EAAC,KAAK,EAAC,wDAAwD,EAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5G,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC;qBAC5B,EAAC,EAAC,EAAC,QAAQ,EAAC,CAAC,UAAU,CAAC,EAAC;QAC1B,OAAO,EAAE,EAAC,QAAQ,EAAC,KAAK,EAAC,aAAa,EAAC,GAAG,eAAe,CAAC,QAAQ,EAAC,CAAC,aAAa,EAAC,gBAAgB,EAAC,OAAO,EAAC,aAAa,EAAC,aAAa,EAAC,aAAa,EAAC,yBAAyB,EAAC,WAAW,EAAC,SAAS,EAAC,WAAW,CAAC,CAAC;YAChN,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAC,cAAc,EAAC,eAAe,CAAC,QAAQ,CAAC,cAAc,EAAC,CAAC,QAAQ,EAAC,UAAU,EAAC,aAAa,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAC,SAAS,EAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAC,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAC,WAAW,EAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAA,EAAE,CAAA,CAAC,EAAC,GAAG,eAAe,CAAC,UAAU,EAAC,CAAC,MAAM,EAAC,aAAa,EAAC,UAAU,EAAC,MAAM,EAAC,aAAa,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,EAAC,KAAK,EAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,eAAe,CAAC,IAAI,EAAC,CAAC,UAAU,EAAC,aAAa,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACpR;KACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/F,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,8CAA8C,EAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,6CAA6C,EAAC,CAAC;IAChH,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,YAAY,EAAC,aAAa,EAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,EAAC,kBAAkB,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC;AACzI,CAAC","sourcesContent":["import type { CanUseTool, PermissionResult, PermissionUpdate } from \"@anthropic-ai/claude-agent-sdk\";\nimport type { ApprovalHandler, NativeApprovalRequest } from \"../approvals/types.js\";\nimport { approvalContext } from \"./approval-context.js\";\nimport { NativeApprovals } from \"./approval-lifetime.js\";\n\n/** Only native session suggestions that add grants can be reused without changing policy. */\nfunction reusable(suggestions: PermissionUpdate[] | undefined): suggestions is PermissionUpdate[] {\n  return !!suggestions?.length && suggestions.every(suggestion => suggestion.destination === \"session\"\n    && ((suggestion.type === \"addRules\" && suggestion.behavior === \"allow\" && suggestion.rules.length > 0)\n      || (suggestion.type === \"addDirectories\" && suggestion.directories.length > 0)));\n}\nexport async function claudeApproval(\n  approvals: NativeApprovals, handler: ApprovalHandler, toolName: string,\n  input: Record<string, unknown>, metadata: Parameters<CanUseTool>[2],\n): Promise<PermissionResult> {\n  const originalInput = structuredClone(input);\n  const suggestions = metadata.suggestions && structuredClone(metadata.suggestions);\n  const session = !metadata.suppressAlwaysAllowRule && reusable(suggestions);\n  const request: NativeApprovalRequest = {\n    kind: \"permission\", harness: \"claudeCode\", message: metadata.title ?? `Allow native tool ${toolName}?`,\n    requestedSchema: {type:\"object\",properties:{decision:{type:\"string\",oneOf:[\n      {const:\"allow_once\",title:\"Allow once\"},\n      ...(session ? [{const:\"allow_session\",title:\"Allow for this session using the suggested permissions\"}] : []),\n      {const:\"deny\",title:\"Deny\"},\n    ]}},required:[\"decision\"]},\n    context: {toolName,input:originalInput,...approvalContext(metadata,[\"blockedPath\",\"decisionReason\",\"title\",\"displayName\",\"description\",\"defaultToNo\",\"suppressAlwaysAllowRule\",\"toolUseID\",\"agentID\",\"requestId\"]),\n      ...(metadata.matchedAskRule ? {matchedAskRule:approvalContext(metadata.matchedAskRule,[\"source\",\"toolName\",\"ruleContent\"])} : {}),\n      ...(metadata.mcpServer ? {mcpServer:approvalContext(metadata.mcpServer,[\"name\",\"source\"])} : {}),\n      ...(suggestions ? {suggestions:suggestions.map(suggestion=>({...approvalContext(suggestion,[\"type\",\"destination\",\"behavior\",\"mode\",\"directories\"]),...(\"rules\" in suggestion ? {rules:suggestion.rules.map(rule=>approvalContext(rule,[\"toolName\",\"ruleContent\"]))} : {})}))} : {}),\n    },\n  };\n  const content = await approvals.request(metadata.requestId, request, handler, metadata.signal);\n  if (metadata.signal.aborted) return {behavior:\"deny\",message:\"The permission request is no longer pending.\"};\n  if (content.decision === \"deny\") return {behavior:\"deny\",message:\"The caller denied permission for this tool.\"};\n  return {behavior:\"allow\",updatedInput:originalInput,...(content.decision === \"allow_session\" ? {updatedPermissions:suggestions} : {})};\n}\n"]}

package/dist/adapters/claude-permissions.js

@@ -17,7 +17,7 @@ export function claudeDelegationPermissions(options) {
         launchers.push(path, `"${path}"`);
     const commands = [
         ...names.map(name => `run subagent:${name}`),
-        "list", "--help", "send", "wait", "status", "queue", "cancel", "resume",
+        "list", "--help", "send", "wait", "status", "queue", "cancel", "resume", "respond",
     ];
     return commands.flatMap(command => launchers.map(launcher => `Bash(${launcher} ${command} *)`));
 }

package/dist/adapters/claude-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-permissions.js","sourceRoot":"","sources":["../../src/adapters/claude-permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,8EAA8E;IAC9E,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,kHAAkH,CAAC,CAAC;IAC7J,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,gFAAgF;IAChF,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG;QACf,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC5C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;KACxE,CAAC;IACF,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,QAAQ,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC;AAClG,CAAC","sourcesContent":["import type { AdapterOptions } from \"./types.js\";\nimport { shellQuote } from \"../shell.js\";\nimport { isAbsolute } from \"node:path\";\nimport { AgentError } from \"../errors.js\";\n\n/** Only the native permission evaluator decides whether a shell call is allowed. */\nexport function claudeDelegationPermissions(options: AdapterOptions): string[] {\n  const names = Object.keys(options.agent.subagents ?? {});\n  if (names.length === 0) return [];\n  const path = options.env.AGENT_CLI_PATH;\n  // Bash rules treat '*' as a wildcard even when it occurs inside shell quotes.\n  if (!path || !isAbsolute(path) || /[\\x00-\\x1f\\x7f*]/u.test(path)) {\n    throw new AgentError(\"INVALID_CONFIG\", \"The session launcher needs an absolute path without wildcards or control characters for Claude Code permissions.\");\n  }\n  const launchers = [shellQuote(path)];\n  // Native matching is textual: harmless quote changes need exact separate rules.\n  if (/^[A-Za-z0-9_./-]+$/u.test(path)) launchers.push(path, `\"${path}\"`);\n  const commands = [\n    ...names.map(name => `run subagent:${name}`),\n    \"list\", \"--help\", \"send\", \"wait\", \"status\", \"queue\", \"cancel\", \"resume\",\n  ];\n  return commands.flatMap(command => launchers.map(launcher => `Bash(${launcher} ${command} *)`));\n}\n"]}
+{"version":3,"file":"claude-permissions.js","sourceRoot":"","sources":["../../src/adapters/claude-permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,8EAA8E;IAC9E,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,kHAAkH,CAAC,CAAC;IAC7J,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,gFAAgF;IAChF,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG;QACf,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC5C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;KACnF,CAAC;IACF,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,QAAQ,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC;AAClG,CAAC","sourcesContent":["import type { AdapterOptions } from \"./types.js\";\nimport { shellQuote } from \"../shell.js\";\nimport { isAbsolute } from \"node:path\";\nimport { AgentError } from \"../errors.js\";\n\n/** Only the native permission evaluator decides whether a shell call is allowed. */\nexport function claudeDelegationPermissions(options: AdapterOptions): string[] {\n  const names = Object.keys(options.agent.subagents ?? {});\n  if (names.length === 0) return [];\n  const path = options.env.AGENT_CLI_PATH;\n  // Bash rules treat '*' as a wildcard even when it occurs inside shell quotes.\n  if (!path || !isAbsolute(path) || /[\\x00-\\x1f\\x7f*]/u.test(path)) {\n    throw new AgentError(\"INVALID_CONFIG\", \"The session launcher needs an absolute path without wildcards or control characters for Claude Code permissions.\");\n  }\n  const launchers = [shellQuote(path)];\n  // Native matching is textual: harmless quote changes need exact separate rules.\n  if (/^[A-Za-z0-9_./-]+$/u.test(path)) launchers.push(path, `\"${path}\"`);\n  const commands = [\n    ...names.map(name => `run subagent:${name}`),\n    \"list\", \"--help\", \"send\", \"wait\", \"status\", \"queue\", \"cancel\", \"resume\", \"respond\",\n  ];\n  return commands.flatMap(command => launchers.map(launcher => `Bash(${launcher} ${command} *)`));\n}\n"]}

package/dist/adapters/claude.js

@@ -10,6 +10,8 @@ import { ClaudeInput } from "./claude-input.js";
 import { claudeDelegationPermissions } from "./claude-permissions.js";
 import { claudeSettings, verifyClaudeAccess, verifyClaudePolicy, verifyClaudeOptions } from "./claude-auth.js";
 import { ClaudeSettingsUnavailable, claudeDefaultUnavailable, readClaudeAppliedSettings, verifyAppliedClaudeEffort } from "./claude-settings.js";
+import { NativeApprovals } from "./approval-lifetime.js";
+import { claudeApproval } from "./claude-approvals.js";
 import { ClaudeProcessOwner } from "./claude-process.js";
 const dependencies = {
     query,
@@ -59,7 +61,11 @@ export function createClaudeOpener(deps) {
         const input = new ClaudeInput();
         const processOwner = new ClaudeProcessOwner();
         let inputFailure;
+        const approvals = new NativeApprovals();
+        let acceptingApprovals = false;
         const requireInput = (toolName) => {
+            acceptingApprovals = false;
+            approvals.clear();
             tools.stopAdmission();
             const subject = toolName && /^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u.test(toolName)
                 ? `approval for native tool ${toolName}`
@@ -85,11 +91,25 @@ export function createClaudeOpener(deps) {
                         ? { type: "preset", preset: "claude_code", append: options.agent.instructions }
                         : { type: "preset", preset: "claude_code" },
                     settingSources: ["user", "project", "local"],
-                    canUseTool: async (toolName) => {
+                    canUseTool: async (toolName, toolInput, metadata) => {
+                        if (options.onApproval && acceptingApprovals && toolName !== "AskUserQuestion") {
+                            try {
+                                const answer = await claudeApproval(approvals, options.onApproval, toolName, toolInput, metadata);
+                                if (!acceptingApprovals || metadata.signal.aborted)
+                                    return { behavior: "deny", message: "The permission request is no longer pending." };
+                                return answer;
+                            }
+                            catch (error) {
+                                if (error instanceof AgentError && error.code === "REQUEST_EXPIRED")
+                                    return { behavior: "deny", message: "The permission request is no longer pending." };
+                            }
+                        }
                         requireInput(toolName);
                         return { behavior: "deny", message: inputFailure.message, interrupt: true };
                     },
                     onElicitation: async () => {
+                        acceptingApprovals = false;
+                        approvals.clear();
                         requireInput();
                         try {
                             await native.interrupt();
@@ -207,6 +227,8 @@ export function createClaudeOpener(deps) {
                     if (message.type !== "result" || !active)
                         continue;
                     const current = active;
+                    acceptingApprovals = false;
+                    approvals.clear();
                     await tools.drain();
                     active = undefined;
                     current.stop();
@@ -229,6 +251,8 @@ export function createClaudeOpener(deps) {
                 // Native diagnostics may contain credentials; return a stable safe message.
             }
             finally {
+                acceptingApprovals = false;
+                approvals.clear();
                 const code = closed ? "SESSION_CLOSED" : "HARNESS_ERROR";
                 closed = true;
                 input.close();
@@ -287,6 +311,7 @@ export function createClaudeOpener(deps) {
                     let stop;
                     const stopped = new Promise(resolve => { stop = resolve; });
                     active = { resolve, reject, stopped, stop, interrupted: false };
+                    acceptingApprovals = true;
                     input.push({ type: "user", message: { role: "user", content: prompt }, parent_tool_use_id: null, uuid: randomUUID() });
                 });
             },
@@ -302,6 +327,8 @@ export function createClaudeOpener(deps) {
                 if (!current)
                     return;
                 current.interrupted = true;
+                acceptingApprovals = false;
+                approvals.clear();
                 tools.stopAdmission();
                 try {
                     await native.interrupt();
@@ -315,6 +342,8 @@ export function createClaudeOpener(deps) {
             async resume() { throw new AgentError("RECOVERY_UNSUPPORTED", "Claude Code cannot retry failed execution without replaying input."); },
             async close() {
                 closed = true;
+                acceptingApprovals = false;
+                approvals.clear();
                 const pending = preflight;
                 if (pending) {
                     pending.cancel(new AgentError("SESSION_CLOSED", "The native session closed before submission."));

package/dist/adapters/claude.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../src/adapters/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAuG,MAAM,gCAAgC,CAAC;AAC7K,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAgBzD,MAAM,YAAY,GAAuB;IACvC,KAAK;IACL,KAAK,CAAC,eAAe,CAAC,GAAG;QACvB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAC,GAAG,EAAE,cAAc,EAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAC,CAAC,CAAC;QAC3F,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAG;QAClB,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IACxG,CAAC;CACF,CAAC;AAEF,SAAS,0BAA0B,CAAC,QAAqB,EAAE,MAAmB,EAAE,QAAgB;IAC9F,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ;YAAE,SAAS;QAC3E,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,aAAa;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;AAE3D,6FAA6F;AAC7F,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,OAAO,KAAK,EAAE,OAAuB,EAA0B,EAAE;QAC/D,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6DAA6D,CAAC,CAAC;QACjJ,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,kBAAkB,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAoB,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;YACpC,GAAG,2BAA2B,CAAC,OAAO,CAAC;SACxC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,QAAoB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAkB,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC9C,IAAI,YAAoC,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,QAAiB,EAAE,EAAE;YACzC,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,QAAQ,IAAI,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC3E,CAAC,CAAC,4BAA4B,QAAQ,EAAE;gBACxC,CAAC,CAAC,mBAAmB,CAAC;YACxB,YAAY,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,qBAAqB,OAAO,qDAAqD,CAAC,CAAC;QACrI,CAAC,CAAC;QACF,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;oBACjD,0BAA0B,EAAE,UAAU;oBACtC,sBAAsB,EAAE,YAAY,CAAC,KAAK;oBAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,GAAG,QAAQ;oBACX,GAAG,KAAK,CAAC,MAAM;oBACf,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,YAAY,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,eAAe,EAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChH,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,cAAc,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,GAAG,CAAC,cAAc,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAC,+BAA+B,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzF,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;oBAChB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;wBACtC,CAAC,CAAC,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,EAAC;wBAC7E,CAAC,CAAC,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAC;oBAC3C,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;oBAC5C,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;wBAC7B,YAAY,CAAC,QAAQ,CAAC,CAAC;wBACvB,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAa,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAC,CAAC;oBAC7E,CAAC;oBACD,aAAa,EAAE,KAAK,IAAI,EAAE;wBACxB,YAAY,EAAE,CAAC;wBACf,IAAI,CAAC;4BAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC;4BAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAAC,CAAC;wBAC3D,OAAO,EAAC,MAAM,EAAE,SAAS,EAAC,CAAC;oBAC7B,CAAC;iBACF,EAAC,CAAC,CAAC;QAAC,CAAC;QACN,MAAM,CAAC;YACL,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;oBAC3B,CAAC;gBAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YACnC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC;YACH,kBAAkB,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC1B,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1E,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;oBACzI,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClE,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;oBAC9B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,yBAAyB,CAAC;wBAAE,MAAM,KAAK,CAAC;gBACjE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,wBAAwB,EAAE,CAAC;gBAC9E,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBAAC,QAAQ,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAC3D,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,KAAK,YAAY,yBAAyB;wBAAE,MAAM,wBAAwB,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBAChH,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrD,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnE,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,wBAAwB,EAAE,CAAC;gBAAC,CAAC;gBAC1F,IAAI,MAAM,CAAC;gBACX,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBACzD,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,KAAK,YAAY,yBAAyB;wBAAE,MAAM,wBAAwB,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBAChH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,wBAAwB,EAAE,CAAC;gBACxE,yBAAyB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjE,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC7B,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;oBAC3B,CAAC;gBAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YACnC,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7C,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,mDAAmD,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,SAKS,CAAC;QACd,IAAI,cAAsC,CAAC;QAC3C,IAAI,MAGS,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;oBACnC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;wBAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;4BACvC,cAAc,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;wBAC9G,CAAC;6BAAM,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;4BACrF,cAAc,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;wBACxH,CAAC;wBACD,IAAI,cAAc,EAAE,CAAC;4BACnB,KAAK,CAAC,aAAa,EAAE,CAAC;4BACtB,MAAM,CAAC,KAAK,EAAE,CAAC;4BACf,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM;wBAAE,SAAS;oBACnD,MAAM,OAAO,GAAG,MAAM,CAAC;oBACvB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;oBACpB,MAAM,GAAG,SAAS,CAAC;oBACnB,OAAO,CAAC,IAAI,EAAE,CAAC;oBACf,IAAI,YAAY;wBAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;yBAC1C,IAAI,OAAO,CAAC,WAAW;wBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC,CAAC;yBAC3G,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;wBAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;4BAC5D,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,oBAAoB,EAAE,yCAAyC,CAAC,CAAC,CAAC;wBAClG,CAAC;;4BAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzC,CAAC;;wBACI,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC;gBACzD,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,cAAc,IAAI,YAAY,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,6DAA6D,CAAC,CAAC,CAAC;gBACtI,MAAM,EAAE,IAAI,EAAE,CAAC;gBACf,MAAM,GAAG,SAAS,CAAC;gBACnB,IAAI,CAAC;oBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;wBAC3B,CAAC;oBAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO;YACL,KAAK,CAAC,IAAI,CAAC,MAAM;gBACf,IAAI,MAAM;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,UAAU,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC,CAAC;gBACxH,IAAI,MAAM,IAAI,SAAS;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC,CAAC;gBACnH,IAAI,MAAoC,EAAE,IAAiB,CAAC;gBAC5D,MAAM,gBAAgB,GAAG;oBACvB,YAAY,EAAE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC5E,MAAM,CAAC,KAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC5C,OAAO,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC1D,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;iBACnB,CAAC;gBACF,SAAS,GAAG,gBAAgB,CAAC;gBAC7B,IAAI,CAAC;oBACH,IAAI,MAAM,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC;wBACZ,IAAI,CAAC;4BAAC,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;wBAAC,CAAC;wBACzG,OAAO,KAAK,EAAE,CAAC;4BACb,IAAI,KAAK,YAAY,yBAAyB;gCAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,4EAA4E,CAAC,CAAC;4BACrK,MAAM,KAAK,CAAC;wBACd,CAAC;wBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,mEAAmE,CAAC,CAAC;wBACpJ,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACpE,CAAC;oBACD,IAAI,MAAM;wBAAE,MAAM,cAAc,IAAI,IAAI,UAAU,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;gBACzG,CAAC;wBAAS,CAAC;oBACT,IAAI,SAAS,KAAK,gBAAgB;wBAAE,SAAS,GAAG,SAAS,CAAC;oBAC1D,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBAC1B,CAAC;gBACD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC3C,YAAY,GAAG,SAAS,CAAC;oBACzB,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,IAAI,IAAiB,CAAC;oBACtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClE,MAAM,GAAG,EAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAC,KAAK,EAAC,CAAC;oBAC7D,KAAK,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,EAAC,kBAAkB,EAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAE,EAAC,CAAC,CAAC;gBAC3G,CAAC,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,uDAAuD,CAAC,CAAC,CAAC,CAAC;YACxH,KAAK,CAAC,SAAS;gBACb,MAAM,OAAO,GAAG,SAAS,CAAC;gBAC1B,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa,EAAE,oDAAoD,CAAC,CAAC,CAAC;oBACpG,MAAM,OAAO,CAAC,OAAO,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC;gBACvB,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC3B,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtB,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,CAAC;gBACjC,MAAM,CAAC;oBACL,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC;oBAC5B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;gBACrF,CAAC;gBACD,MAAM,OAAO,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oEAAoE,CAAC,CAAC,CAAC,CAAC;YACtI,KAAK,CAAC,KAAK;gBACT,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,OAAO,GAAG,SAAS,CAAC;gBAC1B,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC,CAAC;oBACjG,MAAM,OAAO,CAAC,OAAO,CAAC;gBACxB,CAAC;gBACD,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtB,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,CAAC;oBAAC,MAAM,OAAO,CAAC;gBAAC,CAAC;wBACd,CAAC;oBAAC,MAAM,QAAQ,CAAC;gBAAC,CAAC;YAC7B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { access } from \"node:fs/promises\";\nimport { constants } from \"node:fs\";\nimport { delimiter, join } from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport { query, resolveSettings, type AccountInfo, type Options, type SDKMessage, type SDKUserMessage, type Settings, type ModelInfo } from \"@anthropic-ai/claude-agent-sdk\";\nimport { AgentError } from \"../errors.js\";\nimport type { AdapterOptions, NativeSession } from \"./types.js\";\nimport { privateClaudeConfig } from \"./claude-config.js\";\nimport { claudeTools } from \"./claude-tools.js\";\nimport { ClaudeInput } from \"./claude-input.js\";\nimport { claudeDelegationPermissions } from \"./claude-permissions.js\";\nimport { claudeSettings, verifyClaudeAccess, verifyClaudePolicy, verifyClaudeOptions } from \"./claude-auth.js\";\nimport { ClaudeSettingsUnavailable, claudeDefaultUnavailable, readClaudeAppliedSettings, verifyAppliedClaudeEffort } from \"./claude-settings.js\";\nimport { ClaudeProcessOwner } from \"./claude-process.js\";\n\ninterface ClaudeQuery extends AsyncIterable<SDKMessage> {\n  accountInfo(): Promise<AccountInfo>;\n  supportedModels(): Promise<ModelInfo[]>;\n  interrupt(): Promise<unknown>;\n  close(): void;\n  getSettings?(): Promise<unknown>;\n  setModel?(model?: string): Promise<void>;\n}\nexport interface ClaudeDependencies {\n  query(args: {prompt: AsyncIterable<SDKUserMessage>; options: Options}): ClaudeQuery;\n  executable(env: NodeJS.ProcessEnv): Promise<string>;\n  managedSettings(cwd: string): Promise<Settings[]>;\n}\n\nconst dependencies: ClaudeDependencies = {\n  query,\n  async managedSettings(cwd) {\n    const settings = await resolveSettings({cwd, settingSources:[\"user\", \"project\", \"local\"]});\n    return settings.sources.filter(source => source.source === \"managed\").map(source => source.settings);\n  },\n  async executable(env) {\n    for (const directory of (env.PATH ?? \"\").split(delimiter)) {\n      const file = join(directory, \"claude\");\n      try { await access(file, constants.X_OK); return file; } catch { /* Try the next PATH entry. */ }\n    }\n    throw new AgentError(\"HARNESS_UNAVAILABLE\", \"Install Claude Code and make claude available on PATH.\");\n  },\n};\n\nfunction addCatalogEquivalentModels(expected: Set<string>, models: ModelInfo[], selected: string): void {\n  expected.add(selected);\n  for (const model of models) {\n    if (model.value !== selected && model.resolvedModel !== selected) continue;\n    expected.add(model.value);\n    if (model.resolvedModel) expected.add(model.resolvedModel);\n  }\n}\n\nexport const openClaude = createClaudeOpener(dependencies);\n\n/** Dependency injection is internal and replaces only the external SDK boundary in tests. */\nexport function createClaudeOpener(deps: ClaudeDependencies) {\n  return async (options: AdapterOptions): Promise<NativeSession> => {\n    if (options.harness.kind !== \"claudeCode\") throw new AgentError(\"INVALID_CONFIG\", \"Claude Code received configuration for a different harness.\");\n    const permissionMode = options.harness.permissionMode;\n    const settings = claudeSettings(options);\n    const executable = await deps.executable(options.env);\n    verifyClaudePolicy(await deps.managedSettings(options.cwd), settings.settings as Settings);\n    const tools = claudeTools(options.agent);\n    const allowedTools = [\n      ...(options.harness.allowedTools ?? []),\n      ...(tools.config.allowedTools ?? []),\n      ...claudeDelegationPermissions(options),\n    ];\n    const config = await privateClaudeConfig(settings.settings as Settings);\n    const input = new ClaudeInput<SDKUserMessage>();\n    const processOwner = new ClaudeProcessOwner();\n    let inputFailure: AgentError | undefined;\n    const requireInput = (toolName?: string) => {\n      tools.stopAdmission();\n      const subject = toolName && /^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u.test(toolName)\n        ? `approval for native tool ${toolName}`\n        : \"interactive input\";\n      inputFailure = new AgentError(\"INPUT_REQUIRED\", `Claude Code needs ${subject}. Configure its native permissions before retrying.`);\n    };\n    let native: ClaudeQuery;\n    try { native = deps.query({prompt: input, options: {\n      pathToClaudeCodeExecutable: executable,\n      spawnClaudeCodeProcess: processOwner.spawn,\n      cwd: options.cwd,\n      ...settings,\n      ...tools.config,\n      ...(allowedTools.length ? {allowedTools} : {}),\n      ...(options.harness.disallowedTools !== undefined ? {disallowedTools:[...options.harness.disallowedTools]} : {}),\n      ...(permissionMode !== undefined ? {permissionMode} : {}),\n      ...(permissionMode === \"bypassPermissions\" ? {allowDangerouslySkipPermissions:true} : {}),\n      settings: config.path,\n      stderr: () => {},\n      ...(options.harness.model ? {model: options.harness.model} : {}),\n      systemPrompt: options.agent.instructions\n        ? {type: \"preset\", preset: \"claude_code\", append: options.agent.instructions}\n        : {type: \"preset\", preset: \"claude_code\"},\n      settingSources: [\"user\", \"project\", \"local\"],\n      canUseTool: async (toolName) => {\n        requireInput(toolName);\n        return {behavior: \"deny\", message: inputFailure!.message, interrupt: true};\n      },\n      onElicitation: async () => {\n        requireInput();\n        try { await native.interrupt(); } catch { native.close(); }\n        return {action: \"decline\"};\n      },\n    }}); }\n    catch {\n      input.close();\n      try { await processOwner.close(); }\n      finally { await config.cleanup(); }\n      throw new AgentError(\"HARNESS_UNAVAILABLE\", \"Claude Code could not start.\");\n    }\n    const expectedModels = new Set<string>();\n    let retainedModel: string | undefined;\n    try {\n      verifyClaudeAccess(await native.accountInfo(), options.access);\n      const models = await native.supportedModels();\n      if (options.harness.model) {\n        addCatalogEquivalentModels(expectedModels, models, options.harness.model);\n        verifyClaudeOptions(models, options);\n        try {\n          const applied = await readClaudeAppliedSettings(native);\n          if (!expectedModels.has(applied.model)) throw new AgentError(\"INVALID_CONFIG\", \"Claude Code selected a different model than requested.\");\n          verifyAppliedClaudeEffort(applied.effort, options.harness.effort);\n          retainedModel = applied.model;\n          expectedModels.add(applied.model);\n        } catch (error) {\n          if (!(error instanceof ClaudeSettingsUnavailable)) throw error;\n        }\n      } else {\n        if (!native.getSettings || !native.setModel) throw claudeDefaultUnavailable();\n        let selected;\n        try { selected = await readClaudeAppliedSettings(native); }\n        catch (error) { if (error instanceof ClaudeSettingsUnavailable) throw claudeDefaultUnavailable(); throw error; }\n        verifyClaudeOptions(models, options, selected.model);\n        verifyAppliedClaudeEffort(selected.effort, options.harness.effort);\n        addCatalogEquivalentModels(expectedModels, models, selected.model);\n        try { await native.setModel(selected.model); } catch { throw claudeDefaultUnavailable(); }\n        let pinned;\n        try { pinned = await readClaudeAppliedSettings(native); }\n        catch (error) { if (error instanceof ClaudeSettingsUnavailable) throw claudeDefaultUnavailable(); throw error; }\n        if (!expectedModels.has(pinned.model)) throw claudeDefaultUnavailable();\n        verifyAppliedClaudeEffort(pinned.effort, options.harness.effort);\n        retainedModel = pinned.model;\n        addCatalogEquivalentModels(expectedModels, models, pinned.model);\n      }\n      if (inputFailure) throw inputFailure;\n    }\n    catch (error) {\n      input.close();\n      native.close();\n      try { await processOwner.close(); }\n      finally { await config.cleanup(); }\n      if (error instanceof AgentError) throw error;\n      throw new AgentError(\"ACCESS_UNAVAILABLE\", \"Claude Code authentication could not be verified.\");\n    }\n    let closed = false;\n    let preflight: {\n      cancellation: Promise<never>;\n      cancel(error: AgentError): void;\n      stopped: Promise<void>;\n      stop(): void;\n    } | undefined;\n    let sessionFailure: AgentError | undefined;\n    let active: {\n      resolve(text: string): void; reject(error: unknown): void;\n      stopped: Promise<void>; stop(): void; interrupted: boolean;\n    } | undefined;\n    const reading = (async () => {\n      try {\n        for await (const message of native) {\n          if (message.type === \"system\" && message.subtype === \"init\") {\n            if (!expectedModels.has(message.model)) {\n              sessionFailure = new AgentError(\"INVALID_CONFIG\", \"Claude Code selected a different model than requested.\");\n            } else if (permissionMode !== undefined && message.permissionMode !== permissionMode) {\n              sessionFailure = new AgentError(\"INVALID_CONFIG\", \"Claude Code reported a different permission mode than requested.\");\n            }\n            if (sessionFailure) {\n              tools.stopAdmission();\n              native.close();\n              break;\n            }\n          }\n          if (message.type !== \"result\" || !active) continue;\n          const current = active;\n          await tools.drain();\n          active = undefined;\n          current.stop();\n          if (inputFailure) current.reject(inputFailure);\n          else if (current.interrupted) current.reject(new AgentError(\"INTERRUPTED\", \"The native turn was interrupted.\"));\n          else if (message.subtype === \"success\" && !message.is_error) {\n            if (Buffer.byteLength(message.result, \"utf8\") > 1024 * 1024) {\n              current.reject(new AgentError(\"RESPONSE_TOO_LARGE\", \"The Claude Code response exceeds 1 MiB.\"));\n            } else current.resolve(message.result);\n          }\n          else current.reject(new AgentError(\"HARNESS_ERROR\", \"Claude Code could not complete the turn.\"));\n        }\n      } catch {\n        // Native diagnostics may contain credentials; return a stable safe message.\n      } finally {\n        const code = closed ? \"SESSION_CLOSED\" : \"HARNESS_ERROR\";\n        closed = true;\n        input.close();\n        await tools.drain();\n        active?.reject(sessionFailure ?? inputFailure ?? new AgentError(code, \"The Claude Code process stopped before completing the turn.\"));\n        active?.stop();\n        active = undefined;\n        try { await processOwner.close(); }\n        finally { await config.cleanup(); }\n      }\n    })();\n    return {\n      async turn(prompt) {\n        if (closed) return Promise.reject(sessionFailure ?? new AgentError(\"SESSION_CLOSED\", \"The native session has closed.\"));\n        if (active || preflight) return Promise.reject(new AgentError(\"SESSION_BUSY\", \"A native turn is already active.\"));\n        let cancel!: (error: AgentError) => void, stop!: () => void;\n        const currentPreflight = {\n          cancellation: new Promise<never>((_resolve, reject) => { cancel = reject; }),\n          cancel(error: AgentError) { cancel(error); },\n          stopped: new Promise<void>(resolve => { stop = resolve; }),\n          stop() { stop(); },\n        };\n        preflight = currentPreflight;\n        try {\n          if (native.getSettings && retainedModel) {\n            let applied;\n            try { applied = await Promise.race([readClaudeAppliedSettings(native), currentPreflight.cancellation]); }\n            catch (error) {\n              if (error instanceof ClaudeSettingsUnavailable) throw new AgentError(\"INVALID_CONFIG\", \"Claude Code could not verify the retained session model before submission.\");\n              throw error;\n            }\n            if (!expectedModels.has(applied.model)) throw new AgentError(\"INVALID_CONFIG\", \"Claude Code changed the retained session model before submission.\");\n            verifyAppliedClaudeEffort(applied.effort, options.harness.effort);\n          }\n          if (closed) throw sessionFailure ?? new AgentError(\"SESSION_CLOSED\", \"The native session has closed.\");\n        } finally {\n          if (preflight === currentPreflight) preflight = undefined;\n          currentPreflight.stop();\n        }\n        return await new Promise((resolve, reject) => {\n          inputFailure = undefined;\n          tools.start();\n          let stop!: () => void;\n          const stopped = new Promise<void>(resolve => { stop = resolve; });\n          active = {resolve, reject, stopped, stop, interrupted:false};\n          input.push({type:\"user\",message:{role:\"user\",content:prompt},parent_tool_use_id:null,uuid:randomUUID()});\n        });\n      },\n      async steer() { throw new AgentError(\"UNSUPPORTED_DELIVERY\", \"Claude Code does not expose verified active steering.\"); },\n      async interrupt() {\n        const pending = preflight;\n        if (pending) {\n          pending.cancel(new AgentError(\"INTERRUPTED\", \"The native turn was interrupted before submission.\"));\n          await pending.stopped;\n          return;\n        }\n        const current = active;\n        if (!current) return;\n        current.interrupted = true;\n        tools.stopAdmission();\n        try { await native.interrupt(); }\n        catch {\n          current.interrupted = false;\n          throw new AgentError(\"CANCEL_FAILED\", \"Claude Code did not confirm interruption.\");\n        }\n        await current.stopped;\n      },\n      async resume() { throw new AgentError(\"RECOVERY_UNSUPPORTED\", \"Claude Code cannot retry failed execution without replaying input.\"); },\n      async close() {\n        closed = true;\n        const pending = preflight;\n        if (pending) {\n          pending.cancel(new AgentError(\"SESSION_CLOSED\", \"The native session closed before submission.\"));\n          await pending.stopped;\n        }\n        tools.stopAdmission();\n        input.close();\n        native.close();\n        const stopping = processOwner.close();\n        try { await reading; }\n        finally { await stopping; }\n      },\n    };\n  };\n}\n"]}
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../src/adapters/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAuG,MAAM,gCAAgC,CAAC;AAC7K,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjJ,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAgBzD,MAAM,YAAY,GAAuB;IACvC,KAAK;IACL,KAAK,CAAC,eAAe,CAAC,GAAG;QACvB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAC,GAAG,EAAE,cAAc,EAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAC,CAAC,CAAC;QAC3F,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAG;QAClB,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IACxG,CAAC;CACF,CAAC;AAEF,SAAS,0BAA0B,CAAC,QAAqB,EAAE,MAAmB,EAAE,QAAgB;IAC9F,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ;YAAE,SAAS;QAC3E,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,aAAa;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;AAE3D,6FAA6F;AAC7F,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,OAAO,KAAK,EAAE,OAAuB,EAA0B,EAAE;QAC/D,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6DAA6D,CAAC,CAAC;QACjJ,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,kBAAkB,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAoB,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;YACpC,GAAG,2BAA2B,CAAC,OAAO,CAAC;SACxC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,QAAoB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAkB,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC9C,IAAI,YAAoC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,MAAM,YAAY,GAAG,CAAC,QAAiB,EAAE,EAAE;YACzC,kBAAkB,GAAG,KAAK,CAAC;YAC3B,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,QAAQ,IAAI,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC3E,CAAC,CAAC,4BAA4B,QAAQ,EAAE;gBACxC,CAAC,CAAC,mBAAmB,CAAC;YACxB,YAAY,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,qBAAqB,OAAO,qDAAqD,CAAC,CAAC;QACrI,CAAC,CAAC;QACF,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;oBACjD,0BAA0B,EAAE,UAAU;oBACtC,sBAAsB,EAAE,YAAY,CAAC,KAAK;oBAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,GAAG,QAAQ;oBACX,GAAG,KAAK,CAAC,MAAM;oBACf,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,YAAY,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,eAAe,EAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChH,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,cAAc,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,GAAG,CAAC,cAAc,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAC,+BAA+B,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzF,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;oBAChB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;wBACtC,CAAC,CAAC,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,EAAC;wBAC7E,CAAC,CAAC,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAC;oBAC3C,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;oBAC5C,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;wBAClD,IAAI,OAAO,CAAC,UAAU,IAAI,kBAAkB,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;4BAC/E,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gCAClG,IAAI,CAAC,kBAAkB,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO;oCAAE,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,8CAA8C,EAAC,CAAC;gCACpI,OAAO,MAAM,CAAC;4BAChB,CAAC;4BACD,OAAO,KAAK,EAAE,CAAC;gCACb,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;oCAAE,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,8CAA8C,EAAC,CAAC;4BACvJ,CAAC;wBACH,CAAC;wBACD,YAAY,CAAC,QAAQ,CAAC,CAAC;wBACvB,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAa,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAC,CAAC;oBAC7E,CAAC;oBACD,aAAa,EAAE,KAAK,IAAI,EAAE;wBACxB,kBAAkB,GAAG,KAAK,CAAC;wBAC3B,SAAS,CAAC,KAAK,EAAE,CAAC;wBAClB,YAAY,EAAE,CAAC;wBACf,IAAI,CAAC;4BAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC;4BAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAAC,CAAC;wBAC3D,OAAO,EAAC,MAAM,EAAE,SAAS,EAAC,CAAC;oBAC7B,CAAC;iBACF,EAAC,CAAC,CAAC;QAAC,CAAC;QACN,MAAM,CAAC;YACL,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;oBAC3B,CAAC;gBAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YACnC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC;YACH,kBAAkB,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC1B,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1E,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;oBACzI,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClE,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;oBAC9B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,yBAAyB,CAAC;wBAAE,MAAM,KAAK,CAAC;gBACjE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,wBAAwB,EAAE,CAAC;gBAC9E,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBAAC,QAAQ,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAC3D,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,KAAK,YAAY,yBAAyB;wBAAE,MAAM,wBAAwB,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBAChH,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrD,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnE,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,wBAAwB,EAAE,CAAC;gBAAC,CAAC;gBAC1F,IAAI,MAAM,CAAC;gBACX,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBACzD,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,KAAK,YAAY,yBAAyB;wBAAE,MAAM,wBAAwB,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBAChH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,wBAAwB,EAAE,CAAC;gBACxE,yBAAyB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjE,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC7B,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;oBAC3B,CAAC;gBAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YACnC,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7C,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,mDAAmD,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,SAKS,CAAC;QACd,IAAI,cAAsC,CAAC;QAC3C,IAAI,MAGS,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;oBACnC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;wBAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;4BACvC,cAAc,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;wBAC9G,CAAC;6BAAM,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;4BACrF,cAAc,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;wBACxH,CAAC;wBACD,IAAI,cAAc,EAAE,CAAC;4BACnB,KAAK,CAAC,aAAa,EAAE,CAAC;4BACtB,MAAM,CAAC,KAAK,EAAE,CAAC;4BACf,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM;wBAAE,SAAS;oBACnD,MAAM,OAAO,GAAG,MAAM,CAAC;oBACvB,kBAAkB,GAAG,KAAK,CAAC;oBAC3B,SAAS,CAAC,KAAK,EAAE,CAAC;oBAClB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;oBACpB,MAAM,GAAG,SAAS,CAAC;oBACnB,OAAO,CAAC,IAAI,EAAE,CAAC;oBACf,IAAI,YAAY;wBAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;yBAC1C,IAAI,OAAO,CAAC,WAAW;wBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC,CAAC;yBAC3G,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;wBAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;4BAC5D,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,oBAAoB,EAAE,yCAAyC,CAAC,CAAC,CAAC;wBAClG,CAAC;;4BAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzC,CAAC;;wBACI,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;oBAAS,CAAC;gBACT,kBAAkB,GAAG,KAAK,CAAC;gBAC3B,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC;gBACzD,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,cAAc,IAAI,YAAY,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,6DAA6D,CAAC,CAAC,CAAC;gBACtI,MAAM,EAAE,IAAI,EAAE,CAAC;gBACf,MAAM,GAAG,SAAS,CAAC;gBACnB,IAAI,CAAC;oBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;wBAC3B,CAAC;oBAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO;YACL,KAAK,CAAC,IAAI,CAAC,MAAM;gBACf,IAAI,MAAM;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,UAAU,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC,CAAC;gBACxH,IAAI,MAAM,IAAI,SAAS;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC,CAAC;gBACnH,IAAI,MAAoC,EAAE,IAAiB,CAAC;gBAC5D,MAAM,gBAAgB,GAAG;oBACvB,YAAY,EAAE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC5E,MAAM,CAAC,KAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC5C,OAAO,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC1D,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;iBACnB,CAAC;gBACF,SAAS,GAAG,gBAAgB,CAAC;gBAC7B,IAAI,CAAC;oBACH,IAAI,MAAM,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC;wBACZ,IAAI,CAAC;4BAAC,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;wBAAC,CAAC;wBACzG,OAAO,KAAK,EAAE,CAAC;4BACb,IAAI,KAAK,YAAY,yBAAyB;gCAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,4EAA4E,CAAC,CAAC;4BACrK,MAAM,KAAK,CAAC;wBACd,CAAC;wBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,mEAAmE,CAAC,CAAC;wBACpJ,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACpE,CAAC;oBACD,IAAI,MAAM;wBAAE,MAAM,cAAc,IAAI,IAAI,UAAU,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;gBACzG,CAAC;wBAAS,CAAC;oBACT,IAAI,SAAS,KAAK,gBAAgB;wBAAE,SAAS,GAAG,SAAS,CAAC;oBAC1D,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBAC1B,CAAC;gBACD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC3C,YAAY,GAAG,SAAS,CAAC;oBACzB,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,IAAI,IAAiB,CAAC;oBACtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClE,MAAM,GAAG,EAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAC,KAAK,EAAC,CAAC;oBAC7D,kBAAkB,GAAG,IAAI,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,EAAC,kBAAkB,EAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAE,EAAC,CAAC,CAAC;gBAC3G,CAAC,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,uDAAuD,CAAC,CAAC,CAAC,CAAC;YACxH,KAAK,CAAC,SAAS;gBACb,MAAM,OAAO,GAAG,SAAS,CAAC;gBAC1B,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa,EAAE,oDAAoD,CAAC,CAAC,CAAC;oBACpG,MAAM,OAAO,CAAC,OAAO,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC;gBACvB,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC3B,kBAAkB,GAAG,KAAK,CAAC;gBAC3B,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtB,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,CAAC;gBACjC,MAAM,CAAC;oBACL,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC;oBAC5B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;gBACrF,CAAC;gBACD,MAAM,OAAO,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oEAAoE,CAAC,CAAC,CAAC,CAAC;YACtI,KAAK,CAAC,KAAK;gBACT,MAAM,GAAG,IAAI,CAAC;gBACd,kBAAkB,GAAG,KAAK,CAAC;gBAC3B,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,SAAS,CAAC;gBAC1B,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC,CAAC;oBACjG,MAAM,OAAO,CAAC,OAAO,CAAC;gBACxB,CAAC;gBACD,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtB,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,CAAC;oBAAC,MAAM,OAAO,CAAC;gBAAC,CAAC;wBACd,CAAC;oBAAC,MAAM,QAAQ,CAAC;gBAAC,CAAC;YAC7B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { access } from \"node:fs/promises\";\nimport { constants } from \"node:fs\";\nimport { delimiter, join } from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport { query, resolveSettings, type AccountInfo, type Options, type SDKMessage, type SDKUserMessage, type Settings, type ModelInfo } from \"@anthropic-ai/claude-agent-sdk\";\nimport { AgentError } from \"../errors.js\";\nimport type { AdapterOptions, NativeSession } from \"./types.js\";\nimport { privateClaudeConfig } from \"./claude-config.js\";\nimport { claudeTools } from \"./claude-tools.js\";\nimport { ClaudeInput } from \"./claude-input.js\";\nimport { claudeDelegationPermissions } from \"./claude-permissions.js\";\nimport { claudeSettings, verifyClaudeAccess, verifyClaudePolicy, verifyClaudeOptions } from \"./claude-auth.js\";\nimport { ClaudeSettingsUnavailable, claudeDefaultUnavailable, readClaudeAppliedSettings, verifyAppliedClaudeEffort } from \"./claude-settings.js\";\nimport { NativeApprovals } from \"./approval-lifetime.js\";\nimport { claudeApproval } from \"./claude-approvals.js\";\nimport { ClaudeProcessOwner } from \"./claude-process.js\";\n\ninterface ClaudeQuery extends AsyncIterable<SDKMessage> {\n  accountInfo(): Promise<AccountInfo>;\n  supportedModels(): Promise<ModelInfo[]>;\n  interrupt(): Promise<unknown>;\n  close(): void;\n  getSettings?(): Promise<unknown>;\n  setModel?(model?: string): Promise<void>;\n}\nexport interface ClaudeDependencies {\n  query(args: {prompt: AsyncIterable<SDKUserMessage>; options: Options}): ClaudeQuery;\n  executable(env: NodeJS.ProcessEnv): Promise<string>;\n  managedSettings(cwd: string): Promise<Settings[]>;\n}\n\nconst dependencies: ClaudeDependencies = {\n  query,\n  async managedSettings(cwd) {\n    const settings = await resolveSettings({cwd, settingSources:[\"user\", \"project\", \"local\"]});\n    return settings.sources.filter(source => source.source === \"managed\").map(source => source.settings);\n  },\n  async executable(env) {\n    for (const directory of (env.PATH ?? \"\").split(delimiter)) {\n      const file = join(directory, \"claude\");\n      try { await access(file, constants.X_OK); return file; } catch { /* Try the next PATH entry. */ }\n    }\n    throw new AgentError(\"HARNESS_UNAVAILABLE\", \"Install Claude Code and make claude available on PATH.\");\n  },\n};\n\nfunction addCatalogEquivalentModels(expected: Set<string>, models: ModelInfo[], selected: string): void {\n  expected.add(selected);\n  for (const model of models) {\n    if (model.value !== selected && model.resolvedModel !== selected) continue;\n    expected.add(model.value);\n    if (model.resolvedModel) expected.add(model.resolvedModel);\n  }\n}\n\nexport const openClaude = createClaudeOpener(dependencies);\n\n/** Dependency injection is internal and replaces only the external SDK boundary in tests. */\nexport function createClaudeOpener(deps: ClaudeDependencies) {\n  return async (options: AdapterOptions): Promise<NativeSession> => {\n    if (options.harness.kind !== \"claudeCode\") throw new AgentError(\"INVALID_CONFIG\", \"Claude Code received configuration for a different harness.\");\n    const permissionMode = options.harness.permissionMode;\n    const settings = claudeSettings(options);\n    const executable = await deps.executable(options.env);\n    verifyClaudePolicy(await deps.managedSettings(options.cwd), settings.settings as Settings);\n    const tools = claudeTools(options.agent);\n    const allowedTools = [\n      ...(options.harness.allowedTools ?? []),\n      ...(tools.config.allowedTools ?? []),\n      ...claudeDelegationPermissions(options),\n    ];\n    const config = await privateClaudeConfig(settings.settings as Settings);\n    const input = new ClaudeInput<SDKUserMessage>();\n    const processOwner = new ClaudeProcessOwner();\n    let inputFailure: AgentError | undefined;\n    const approvals = new NativeApprovals();\n    let acceptingApprovals = false;\n    const requireInput = (toolName?: string) => {\n      acceptingApprovals = false;\n      approvals.clear();\n      tools.stopAdmission();\n      const subject = toolName && /^[A-Za-z_][A-Za-z0-9_-]{0,127}$/u.test(toolName)\n        ? `approval for native tool ${toolName}`\n        : \"interactive input\";\n      inputFailure = new AgentError(\"INPUT_REQUIRED\", `Claude Code needs ${subject}. Configure its native permissions before retrying.`);\n    };\n    let native: ClaudeQuery;\n    try { native = deps.query({prompt: input, options: {\n      pathToClaudeCodeExecutable: executable,\n      spawnClaudeCodeProcess: processOwner.spawn,\n      cwd: options.cwd,\n      ...settings,\n      ...tools.config,\n      ...(allowedTools.length ? {allowedTools} : {}),\n      ...(options.harness.disallowedTools !== undefined ? {disallowedTools:[...options.harness.disallowedTools]} : {}),\n      ...(permissionMode !== undefined ? {permissionMode} : {}),\n      ...(permissionMode === \"bypassPermissions\" ? {allowDangerouslySkipPermissions:true} : {}),\n      settings: config.path,\n      stderr: () => {},\n      ...(options.harness.model ? {model: options.harness.model} : {}),\n      systemPrompt: options.agent.instructions\n        ? {type: \"preset\", preset: \"claude_code\", append: options.agent.instructions}\n        : {type: \"preset\", preset: \"claude_code\"},\n      settingSources: [\"user\", \"project\", \"local\"],\n      canUseTool: async (toolName, toolInput, metadata) => {\n        if (options.onApproval && acceptingApprovals && toolName !== \"AskUserQuestion\") {\n          try {\n            const answer = await claudeApproval(approvals, options.onApproval, toolName, toolInput, metadata);\n            if (!acceptingApprovals || metadata.signal.aborted) return {behavior:\"deny\",message:\"The permission request is no longer pending.\"};\n            return answer;\n          }\n          catch (error) {\n            if (error instanceof AgentError && error.code === \"REQUEST_EXPIRED\") return {behavior:\"deny\",message:\"The permission request is no longer pending.\"};\n          }\n        }\n        requireInput(toolName);\n        return {behavior: \"deny\", message: inputFailure!.message, interrupt: true};\n      },\n      onElicitation: async () => {\n        acceptingApprovals = false;\n        approvals.clear();\n        requireInput();\n        try { await native.interrupt(); } catch { native.close(); }\n        return {action: \"decline\"};\n      },\n    }}); }\n    catch {\n      input.close();\n      try { await processOwner.close(); }\n      finally { await config.cleanup(); }\n      throw new AgentError(\"HARNESS_UNAVAILABLE\", \"Claude Code could not start.\");\n    }\n    const expectedModels = new Set<string>();\n    let retainedModel: string | undefined;\n    try {\n      verifyClaudeAccess(await native.accountInfo(), options.access);\n      const models = await native.supportedModels();\n      if (options.harness.model) {\n        addCatalogEquivalentModels(expectedModels, models, options.harness.model);\n        verifyClaudeOptions(models, options);\n        try {\n          const applied = await readClaudeAppliedSettings(native);\n          if (!expectedModels.has(applied.model)) throw new AgentError(\"INVALID_CONFIG\", \"Claude Code selected a different model than requested.\");\n          verifyAppliedClaudeEffort(applied.effort, options.harness.effort);\n          retainedModel = applied.model;\n          expectedModels.add(applied.model);\n        } catch (error) {\n          if (!(error instanceof ClaudeSettingsUnavailable)) throw error;\n        }\n      } else {\n        if (!native.getSettings || !native.setModel) throw claudeDefaultUnavailable();\n        let selected;\n        try { selected = await readClaudeAppliedSettings(native); }\n        catch (error) { if (error instanceof ClaudeSettingsUnavailable) throw claudeDefaultUnavailable(); throw error; }\n        verifyClaudeOptions(models, options, selected.model);\n        verifyAppliedClaudeEffort(selected.effort, options.harness.effort);\n        addCatalogEquivalentModels(expectedModels, models, selected.model);\n        try { await native.setModel(selected.model); } catch { throw claudeDefaultUnavailable(); }\n        let pinned;\n        try { pinned = await readClaudeAppliedSettings(native); }\n        catch (error) { if (error instanceof ClaudeSettingsUnavailable) throw claudeDefaultUnavailable(); throw error; }\n        if (!expectedModels.has(pinned.model)) throw claudeDefaultUnavailable();\n        verifyAppliedClaudeEffort(pinned.effort, options.harness.effort);\n        retainedModel = pinned.model;\n        addCatalogEquivalentModels(expectedModels, models, pinned.model);\n      }\n      if (inputFailure) throw inputFailure;\n    }\n    catch (error) {\n      input.close();\n      native.close();\n      try { await processOwner.close(); }\n      finally { await config.cleanup(); }\n      if (error instanceof AgentError) throw error;\n      throw new AgentError(\"ACCESS_UNAVAILABLE\", \"Claude Code authentication could not be verified.\");\n    }\n    let closed = false;\n    let preflight: {\n      cancellation: Promise<never>;\n      cancel(error: AgentError): void;\n      stopped: Promise<void>;\n      stop(): void;\n    } | undefined;\n    let sessionFailure: AgentError | undefined;\n    let active: {\n      resolve(text: string): void; reject(error: unknown): void;\n      stopped: Promise<void>; stop(): void; interrupted: boolean;\n    } | undefined;\n    const reading = (async () => {\n      try {\n        for await (const message of native) {\n          if (message.type === \"system\" && message.subtype === \"init\") {\n            if (!expectedModels.has(message.model)) {\n              sessionFailure = new AgentError(\"INVALID_CONFIG\", \"Claude Code selected a different model than requested.\");\n            } else if (permissionMode !== undefined && message.permissionMode !== permissionMode) {\n              sessionFailure = new AgentError(\"INVALID_CONFIG\", \"Claude Code reported a different permission mode than requested.\");\n            }\n            if (sessionFailure) {\n              tools.stopAdmission();\n              native.close();\n              break;\n            }\n          }\n          if (message.type !== \"result\" || !active) continue;\n          const current = active;\n          acceptingApprovals = false;\n          approvals.clear();\n          await tools.drain();\n          active = undefined;\n          current.stop();\n          if (inputFailure) current.reject(inputFailure);\n          else if (current.interrupted) current.reject(new AgentError(\"INTERRUPTED\", \"The native turn was interrupted.\"));\n          else if (message.subtype === \"success\" && !message.is_error) {\n            if (Buffer.byteLength(message.result, \"utf8\") > 1024 * 1024) {\n              current.reject(new AgentError(\"RESPONSE_TOO_LARGE\", \"The Claude Code response exceeds 1 MiB.\"));\n            } else current.resolve(message.result);\n          }\n          else current.reject(new AgentError(\"HARNESS_ERROR\", \"Claude Code could not complete the turn.\"));\n        }\n      } catch {\n        // Native diagnostics may contain credentials; return a stable safe message.\n      } finally {\n        acceptingApprovals = false;\n        approvals.clear();\n        const code = closed ? \"SESSION_CLOSED\" : \"HARNESS_ERROR\";\n        closed = true;\n        input.close();\n        await tools.drain();\n        active?.reject(sessionFailure ?? inputFailure ?? new AgentError(code, \"The Claude Code process stopped before completing the turn.\"));\n        active?.stop();\n        active = undefined;\n        try { await processOwner.close(); }\n        finally { await config.cleanup(); }\n      }\n    })();\n    return {\n      async turn(prompt) {\n        if (closed) return Promise.reject(sessionFailure ?? new AgentError(\"SESSION_CLOSED\", \"The native session has closed.\"));\n        if (active || preflight) return Promise.reject(new AgentError(\"SESSION_BUSY\", \"A native turn is already active.\"));\n        let cancel!: (error: AgentError) => void, stop!: () => void;\n        const currentPreflight = {\n          cancellation: new Promise<never>((_resolve, reject) => { cancel = reject; }),\n          cancel(error: AgentError) { cancel(error); },\n          stopped: new Promise<void>(resolve => { stop = resolve; }),\n          stop() { stop(); },\n        };\n        preflight = currentPreflight;\n        try {\n          if (native.getSettings && retainedModel) {\n            let applied;\n            try { applied = await Promise.race([readClaudeAppliedSettings(native), currentPreflight.cancellation]); }\n            catch (error) {\n              if (error instanceof ClaudeSettingsUnavailable) throw new AgentError(\"INVALID_CONFIG\", \"Claude Code could not verify the retained session model before submission.\");\n              throw error;\n            }\n            if (!expectedModels.has(applied.model)) throw new AgentError(\"INVALID_CONFIG\", \"Claude Code changed the retained session model before submission.\");\n            verifyAppliedClaudeEffort(applied.effort, options.harness.effort);\n          }\n          if (closed) throw sessionFailure ?? new AgentError(\"SESSION_CLOSED\", \"The native session has closed.\");\n        } finally {\n          if (preflight === currentPreflight) preflight = undefined;\n          currentPreflight.stop();\n        }\n        return await new Promise((resolve, reject) => {\n          inputFailure = undefined;\n          tools.start();\n          let stop!: () => void;\n          const stopped = new Promise<void>(resolve => { stop = resolve; });\n          active = {resolve, reject, stopped, stop, interrupted:false};\n          acceptingApprovals = true;\n          input.push({type:\"user\",message:{role:\"user\",content:prompt},parent_tool_use_id:null,uuid:randomUUID()});\n        });\n      },\n      async steer() { throw new AgentError(\"UNSUPPORTED_DELIVERY\", \"Claude Code does not expose verified active steering.\"); },\n      async interrupt() {\n        const pending = preflight;\n        if (pending) {\n          pending.cancel(new AgentError(\"INTERRUPTED\", \"The native turn was interrupted before submission.\"));\n          await pending.stopped;\n          return;\n        }\n        const current = active;\n        if (!current) return;\n        current.interrupted = true;\n        acceptingApprovals = false;\n        approvals.clear();\n        tools.stopAdmission();\n        try { await native.interrupt(); }\n        catch {\n          current.interrupted = false;\n          throw new AgentError(\"CANCEL_FAILED\", \"Claude Code did not confirm interruption.\");\n        }\n        await current.stopped;\n      },\n      async resume() { throw new AgentError(\"RECOVERY_UNSUPPORTED\", \"Claude Code cannot retry failed execution without replaying input.\"); },\n      async close() {\n        closed = true;\n        acceptingApprovals = false;\n        approvals.clear();\n        const pending = preflight;\n        if (pending) {\n          pending.cancel(new AgentError(\"SESSION_CLOSED\", \"The native session closed before submission.\"));\n          await pending.stopped;\n        }\n        tools.stopAdmission();\n        input.close();\n        native.close();\n        const stopping = processOwner.close();\n        try { await reading; }\n        finally { await stopping; }\n      },\n    };\n  };\n}\n"]}

package/dist/adapters/codex-approvals.d.ts

@@ -0,0 +1,6 @@
+import type { ApprovalContent, NativeApprovalRequest } from "../approvals/types.js";
+export interface CodexApproval {
+    request: NativeApprovalRequest;
+    response(content: ApprovalContent): unknown;
+}
+export declare function codexApproval(method: string | undefined, params: any, item?: unknown): CodexApproval | undefined;

package/dist/adapters/codex-approvals.js

@@ -0,0 +1,111 @@
+import { approvalContext } from "./approval-context.js";
+import { AgentError } from "../errors.js";
+const titles = { accept: "Allow once", acceptForSession: "Allow for this session", decline: "Deny", cancel: "Cancel the native operation" };
+const unsupported = () => new AgentError("INPUT_REQUIRED", "Codex requested permissions that cannot be represented safely.");
+export function codexApproval(method, params, item) {
+    if (method === "item/permissions/requestApproval")
+        return permissionProfile(params);
+    if (method !== "item/commandExecution/requestApproval" && method !== "item/fileChange/requestApproval")
+        return undefined;
+    if (method === "item/commandExecution/requestApproval" && params.kind !== undefined && !["command", "writeStdin"].includes(params.kind))
+        throw unsupported();
+    const decisions = params.availableDecisions ?? ["accept", "acceptForSession", "decline", "cancel"];
+    if (!Array.isArray(decisions))
+        throw unsupported();
+    const supported = [];
+    for (const decision of decisions) {
+        if (typeof decision === "string" && Object.hasOwn(titles, decision))
+            supported.push(decision);
+        else if (!decision || typeof decision !== "object" || (!Object.hasOwn(decision, "acceptWithExecpolicyAmendment") && !Object.hasOwn(decision, "applyNetworkPolicyAmendment")))
+            throw unsupported();
+    }
+    if (!supported.length || new Set(supported).size !== supported.length)
+        throw unsupported();
+    const message = method === "item/fileChange/requestApproval" ? "Allow the requested file change?"
+        : params.kind === "writeStdin" ? "Allow sending input to the existing terminal?" : "Allow the requested command execution?";
+    return {
+        request: { kind: "permission", harness: "codex", message,
+            requestedSchema: { type: "object", properties: { decision: { type: "string", oneOf: supported.map(value => ({ const: value, title: titles[value] })) } }, required: ["decision"] },
+            context: { ...approvalContext(params, ["threadId", "turnId", "itemId", "approvalId", "kind", "environmentId", "reason", "command", "cwd", "commandActions", "networkApprovalContext", "additionalPermissions", "grantRoot"]), ...(item ? { item: fileContext(item) } : {}) } },
+        response: content => ({ decision: content.decision }),
+    };
+}
+function object(value) { return typeof value === "object" && value !== null && !Array.isArray(value); }
+function only(value, keys) { return Object.keys(value).every(key => keys.includes(key)); }
+function permissionProfile(params) {
+    const profile = structuredClone(params.permissions);
+    if (!object(profile) || !only(profile, ["network", "fileSystem"]))
+        throw unsupported();
+    const grants = [];
+    if (profile.network != null) {
+        if (!object(profile.network) || !only(profile.network, ["enabled"]) || ![true, false, null].includes(profile.network.enabled))
+            throw unsupported();
+        if (profile.network.enabled === true)
+            grants.push({ id: "network", title: "Enable network access", apply: target => { target.network = { enabled: true }; } });
+    }
+    const fs = profile.fileSystem;
+    if (fs != null) {
+        const filesystemStart = grants.length;
+        if (!object(fs) || !only(fs, ["read", "write", "entries", "globScanMaxDepth"]))
+            throw unsupported();
+        if (fs.globScanMaxDepth !== undefined && (!Number.isInteger(fs.globScanMaxDepth) || fs.globScanMaxDepth < 0))
+            throw unsupported();
+        const init = (target) => target.fileSystem ??= { read: null, write: null, ...(fs.globScanMaxDepth !== undefined ? { globScanMaxDepth: fs.globScanMaxDepth } : {}) };
+        for (const access of ["read", "write"]) {
+            if (fs[access] == null)
+                continue;
+            if (!Array.isArray(fs[access]) || !fs[access].every((path) => typeof path === "string"))
+                throw unsupported();
+            fs[access].forEach((path, index) => grants.push({ id: `${access}_${index}`, title: `${access === "read" ? "Read" : "Write"}: ${path}`, apply: target => { (init(target)[access] ??= []).push(path); } }));
+        }
+        if (fs.entries !== undefined) {
+            if (!Array.isArray(fs.entries))
+                throw unsupported();
+            fs.entries.forEach((entry, index) => {
+                if (!object(entry) || !only(entry, ["path", "access"]) || !["read", "write", "deny"].includes(entry.access) || !validPath(entry.path))
+                    throw unsupported();
+                if (entry.access !== "deny")
+                    grants.push({ id: `entry_${index}`, title: `${entry.access === "read" ? "Read" : "Write"}: ${JSON.stringify(entry.path)}`, apply: target => { (init(target).entries ??= []).push(entry); } });
+            });
+            if (grants.length > filesystemStart) {
+                // Overlapping read/write/deny entries form one native policy; do not infer precedence.
+                grants.splice(filesystemStart);
+                grants.push({ id: "filesystem", title: "Requested filesystem access with its native restrictions", apply: target => { target.fileSystem = structuredClone(fs); } });
+            }
+        }
+    }
+    if (!grants.length)
+        throw unsupported();
+    return {
+        request: { kind: "permission", harness: "codex", message: "Select the additional permissions to grant and their duration. An empty selection denies all requested grants.",
+            requestedSchema: { type: "object", properties: { grants: { type: "array", items: { type: "string", anyOf: grants.map(grant => ({ const: grant.id, title: grant.title })) }, uniqueItems: true }, scope: { type: "string", oneOf: [{ const: "turn", title: "This turn" }, { const: "session", title: "This session" }] } }, required: ["grants", "scope"] }, context: approvalContext(params, ["threadId", "turnId", "itemId", "environmentId", "cwd", "reason", "permissions"]) },
+        response: content => {
+            const permissions = {};
+            for (const id of content.grants)
+                grants.find(grant => grant.id === id).apply(permissions);
+            if (permissions.fileSystem && profile.network?.enabled === false)
+                permissions.network = { enabled: false };
+            return { permissions, scope: content.scope };
+        },
+    };
+}
+function validPath(path) {
+    if (!object(path))
+        return false;
+    if (path.type === "path")
+        return only(path, ["type", "path"]) && typeof path.path === "string";
+    if (path.type === "glob_pattern")
+        return only(path, ["type", "pattern"]) && typeof path.pattern === "string";
+    if (path.type !== "special" || !only(path, ["type", "value"]) || !object(path.value))
+        return false;
+    const value = path.value;
+    if (["root", "minimal", "tmpdir", "slash_tmp"].includes(value.kind))
+        return only(value, ["kind"]);
+    if (value.kind === "project_roots")
+        return only(value, ["kind", "subpath"]) && (value.subpath === null || typeof value.subpath === "string");
+    return value.kind === "unknown" && only(value, ["kind", "path", "subpath"]) && typeof value.path === "string" && (value.subpath === null || typeof value.subpath === "string");
+}
+function fileContext(item) {
+    return { ...approvalContext(item, ["id", "type", "status"]), ...(Array.isArray(item.changes) ? { changes: item.changes.map((change) => ({ ...approvalContext(change, ["path", "diff"]), ...(object(change.kind) ? { kind: approvalContext(change.kind, ["type", "move_path"]) } : {}) })) } : {}) };
+}
+//# sourceMappingURL=codex-approvals.js.map

package/dist/adapters/codex-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-approvals.js","sourceRoot":"","sources":["../../src/adapters/codex-approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO1C,MAAM,MAAM,GAA0B,EAAC,MAAM,EAAC,YAAY,EAAC,gBAAgB,EAAC,wBAAwB,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,6BAA6B,EAAC,CAAC;AAC1J,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;AAC7H,MAAM,UAAU,aAAa,CAAC,MAA0B,EAAE,MAAW,EAAE,IAAc;IACnF,IAAI,MAAM,KAAK,kCAAkC;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACpF,IAAI,MAAM,KAAK,uCAAuC,IAAI,MAAM,KAAK,iCAAiC;QAAE,OAAO,SAAS,CAAC;IACzH,IAAI,MAAM,KAAK,uCAAuC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IAC5J,MAAM,SAAS,GAAY,MAAM,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAC,kBAAkB,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;IACzG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IACnD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACxF,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,6BAA6B,CAAC,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;IAClM,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAAE,MAAM,WAAW,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,MAAM,KAAK,iCAAiC,CAAC,CAAC,CAAC,kCAAkC;QAC/F,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,wCAAwC,CAAC;IAC9H,OAAO;QACL,OAAO,EAAE,EAAC,IAAI,EAAC,YAAY,EAAC,OAAO,EAAC,OAAO,EAAC,OAAO;YACjD,eAAe,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,UAAU,EAAC,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,CAAE,EAAC,CAAC,CAAC,EAAC,EAAC,EAAC,QAAQ,EAAC,CAAC,UAAU,CAAC,EAAC;YAC5J,OAAO,EAAC,EAAC,GAAG,eAAe,CAAC,MAAM,EAAC,CAAC,UAAU,EAAC,QAAQ,EAAC,QAAQ,EAAC,YAAY,EAAC,MAAM,EAAC,eAAe,EAAC,QAAQ,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,EAAC,wBAAwB,EAAC,uBAAuB,EAAC,WAAW,CAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,IAAI,EAAC,WAAW,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,EAAC;QAC3P,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,IAAiC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7I,SAAS,IAAI,CAAC,KAAyB,EAAE,IAAc,IAAY,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA,EAAE,CAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA,CAAC;AAC7H,SAAS,iBAAiB,CAAC,MAAW;IACpC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,CAAC,SAAS,EAAC,YAAY,CAAC,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IACrF,MAAM,MAAM,GAAsD,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;QAChJ,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,SAAS,EAAC,KAAK,EAAC,uBAAuB,EAAC,KAAK,EAAC,MAAM,CAAA,EAAE,GAAC,MAAM,CAAC,OAAO,GAAC,EAAC,OAAO,EAAC,IAAI,EAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACjJ,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAC9B,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACf,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAC,CAAC,MAAM,EAAC,OAAO,EAAC,SAAS,EAAC,kBAAkB,CAAC,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;QAChG,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;QAClI,MAAM,IAAI,GAAG,CAAC,MAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,gBAAgB,EAAC,EAAE,CAAC,gBAAgB,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC;QAC/J,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,CAAC;YACtC,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI;gBAAE,SAAS;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,IAAY,EAAC,EAAE,CAAA,OAAO,IAAI,KAAK,QAAQ,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;YACnH,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAW,EAAC,KAAY,EAAC,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,GAAG,MAAM,IAAI,KAAK,EAAE,EAAC,KAAK,EAAC,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,EAAE,EAAC,KAAK,EAAC,MAAM,CAAA,EAAE,GAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC,CAAC;QAC5M,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;YACpD,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAS,EAAC,KAAY,EAAC,EAAE;gBAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,MAAM,WAAW,EAAE,CAAC;gBACvJ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,SAAS,KAAK,EAAE,EAAC,KAAK,EAAC,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAC,KAAK,EAAC,MAAM,CAAA,EAAE,GAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;YAClN,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBACpC,uFAAuF;gBACvF,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,YAAY,EAAC,KAAK,EAAC,0DAA0D,EAAC,KAAK,EAAC,MAAM,CAAA,EAAE,GAAC,MAAM,CAAC,UAAU,GAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;YACzJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,WAAW,EAAE,CAAC;IACxC,OAAO;QACL,OAAO,EAAC,EAAC,IAAI,EAAC,YAAY,EAAC,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,gHAAgH;YACjK,eAAe,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,UAAU,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,EAAC,KAAK,EAAC,KAAK,CAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC,EAAC,EAAC,WAAW,EAAC,IAAI,EAAC,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,WAAW,EAAC,EAAC,EAAC,KAAK,EAAC,SAAS,EAAC,KAAK,EAAC,cAAc,EAAC,CAAC,EAAC,EAAC,EAAC,QAAQ,EAAC,CAAC,QAAQ,EAAC,OAAO,CAAC,EAAC,EAAC,OAAO,EAAC,eAAe,CAAC,MAAM,EAAC,CAAC,UAAU,EAAC,QAAQ,EAAC,QAAQ,EAAC,eAAe,EAAC,KAAK,EAAC,QAAQ,EAAC,aAAa,CAAC,CAAC,EAAC;QACxZ,QAAQ,EAAE,OAAO,CAAA,EAAE;YACjB,MAAM,WAAW,GAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,MAAkB;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,EAAE,KAAG,EAAE,CAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACnG,IAAI,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK;gBAAE,WAAW,CAAC,OAAO,GAAC,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;YACtG,OAAO,EAAC,WAAW,EAAC,KAAK,EAAC,OAAO,CAAC,KAAK,EAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AACD,SAAS,SAAS,CAAC,IAAS;IAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,IAAI,EAAC,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC7F,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC,IAAI,EAAC,CAAC,MAAM,EAAC,SAAS,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;IAC3G,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjG,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,MAAM,EAAC,SAAS,EAAC,QAAQ,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,EAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;IAC3I,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,MAAM,EAAC,SAAS,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;AAC9K,CAAC;AAED,SAAS,WAAW,CAAC,IAAS;IAC5B,OAAO,EAAC,GAAG,eAAe,CAAC,IAAI,EAAC,CAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAW,EAAC,EAAE,CAAA,CAAC,EAAC,GAAG,eAAe,CAAC,MAAM,EAAC,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAC,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC;AAClR,CAAC","sourcesContent":["import { approvalContext } from \"./approval-context.js\";\nimport { AgentError } from \"../errors.js\";\nimport type { ApprovalContent, NativeApprovalRequest } from \"../approvals/types.js\";\n\nexport interface CodexApproval {\n  request: NativeApprovalRequest;\n  response(content: ApprovalContent): unknown;\n}\nconst titles: Record<string,string> = {accept:\"Allow once\",acceptForSession:\"Allow for this session\",decline:\"Deny\",cancel:\"Cancel the native operation\"};\nconst unsupported = () => new AgentError(\"INPUT_REQUIRED\", \"Codex requested permissions that cannot be represented safely.\");\nexport function codexApproval(method: string | undefined, params: any, item?: unknown): CodexApproval | undefined {\n  if (method === \"item/permissions/requestApproval\") return permissionProfile(params);\n  if (method !== \"item/commandExecution/requestApproval\" && method !== \"item/fileChange/requestApproval\") return undefined;\n  if (method === \"item/commandExecution/requestApproval\" && params.kind !== undefined && ![\"command\",\"writeStdin\"].includes(params.kind)) throw unsupported();\n  const decisions: unknown = params.availableDecisions ?? [\"accept\",\"acceptForSession\",\"decline\",\"cancel\"];\n  if (!Array.isArray(decisions)) throw unsupported();\n  const supported: string[] = [];\n  for (const decision of decisions) {\n    if (typeof decision === \"string\" && Object.hasOwn(titles,decision)) supported.push(decision);\n    else if (!decision || typeof decision !== \"object\" || (!Object.hasOwn(decision,\"acceptWithExecpolicyAmendment\") && !Object.hasOwn(decision,\"applyNetworkPolicyAmendment\"))) throw unsupported();\n  }\n  if (!supported.length || new Set(supported).size !== supported.length) throw unsupported();\n  const message = method === \"item/fileChange/requestApproval\" ? \"Allow the requested file change?\"\n    : params.kind === \"writeStdin\" ? \"Allow sending input to the existing terminal?\" : \"Allow the requested command execution?\";\n  return {\n    request: {kind:\"permission\",harness:\"codex\",message,\n      requestedSchema:{type:\"object\",properties:{decision:{type:\"string\",oneOf:supported.map(value=>({const:value,title:titles[value]!}))}},required:[\"decision\"]},\n      context:{...approvalContext(params,[\"threadId\",\"turnId\",\"itemId\",\"approvalId\",\"kind\",\"environmentId\",\"reason\",\"command\",\"cwd\",\"commandActions\",\"networkApprovalContext\",\"additionalPermissions\",\"grantRoot\"]),...(item ? {item:fileContext(item)} : {})}},\n    response: content => ({decision:content.decision}),\n  };\n}\n\nfunction object(value: unknown): value is Record<string,any> { return typeof value === \"object\" && value !== null && !Array.isArray(value); }\nfunction only(value: Record<string,any>, keys: string[]): boolean {return Object.keys(value).every(key=>keys.includes(key));}\nfunction permissionProfile(params: any): CodexApproval {\n  const profile = structuredClone(params.permissions);\n  if (!object(profile) || !only(profile,[\"network\",\"fileSystem\"])) throw unsupported();\n  const grants: {id:string;title:string;apply:(target:any)=>void}[]=[];\n  if (profile.network != null) {\n    if (!object(profile.network) || !only(profile.network,[\"enabled\"]) || ![true,false,null].includes(profile.network.enabled)) throw unsupported();\n    if (profile.network.enabled === true) grants.push({id:\"network\",title:\"Enable network access\",apply:target=>{target.network={enabled:true};}});\n  }\n  const fs = profile.fileSystem;\n  if (fs != null) {\n    const filesystemStart = grants.length;\n    if (!object(fs) || !only(fs,[\"read\",\"write\",\"entries\",\"globScanMaxDepth\"])) throw unsupported();\n    if (fs.globScanMaxDepth !== undefined && (!Number.isInteger(fs.globScanMaxDepth) || fs.globScanMaxDepth < 0)) throw unsupported();\n    const init = (target:any) => target.fileSystem ??= {read:null,write:null,...(fs.globScanMaxDepth !== undefined ? {globScanMaxDepth:fs.globScanMaxDepth} : {})};\n    for (const access of [\"read\",\"write\"]) {\n      if (fs[access] == null) continue;\n      if (!Array.isArray(fs[access]) || !fs[access].every((path:unknown)=>typeof path === \"string\")) throw unsupported();\n      fs[access].forEach((path:string,index:number)=>grants.push({id:`${access}_${index}`,title:`${access === \"read\" ? \"Read\" : \"Write\"}: ${path}`,apply:target=>{(init(target)[access] ??= []).push(path);}}));\n    }\n    if (fs.entries !== undefined) {\n      if (!Array.isArray(fs.entries)) throw unsupported();\n      fs.entries.forEach((entry:any,index:number)=>{\n        if (!object(entry) || !only(entry,[\"path\",\"access\"]) || ![\"read\",\"write\",\"deny\"].includes(entry.access) || !validPath(entry.path)) throw unsupported();\n        if (entry.access !== \"deny\") grants.push({id:`entry_${index}`,title:`${entry.access === \"read\" ? \"Read\" : \"Write\"}: ${JSON.stringify(entry.path)}`,apply:target=>{(init(target).entries ??= []).push(entry);}});\n      });\n      if (grants.length > filesystemStart) {\n        // Overlapping read/write/deny entries form one native policy; do not infer precedence.\n        grants.splice(filesystemStart);\n        grants.push({id:\"filesystem\",title:\"Requested filesystem access with its native restrictions\",apply:target=>{target.fileSystem=structuredClone(fs);}});\n      }\n    }\n  }\n  if (!grants.length) throw unsupported();\n  return {\n    request:{kind:\"permission\",harness:\"codex\",message:\"Select the additional permissions to grant and their duration. An empty selection denies all requested grants.\",\n      requestedSchema:{type:\"object\",properties:{grants:{type:\"array\",items:{type:\"string\",anyOf:grants.map(grant=>({const:grant.id,title:grant.title}))},uniqueItems:true},scope:{type:\"string\",oneOf:[{const:\"turn\",title:\"This turn\"},{const:\"session\",title:\"This session\"}]}},required:[\"grants\",\"scope\"]},context:approvalContext(params,[\"threadId\",\"turnId\",\"itemId\",\"environmentId\",\"cwd\",\"reason\",\"permissions\"])},\n    response: content=>{\n      const permissions: any={};\n      for (const id of content.grants as string[]) grants.find(grant=>grant.id===id)!.apply(permissions);\n      if (permissions.fileSystem && profile.network?.enabled === false) permissions.network={enabled:false};\n      return {permissions,scope:content.scope};\n    },\n  };\n}\nfunction validPath(path: any): boolean {\n  if (!object(path)) return false;\n  if (path.type === \"path\") return only(path,[\"type\",\"path\"]) && typeof path.path === \"string\";\n  if (path.type === \"glob_pattern\") return only(path,[\"type\",\"pattern\"]) && typeof path.pattern === \"string\";\n  if (path.type !== \"special\" || !only(path,[\"type\",\"value\"]) || !object(path.value)) return false;\n  const value=path.value;\n  if ([\"root\",\"minimal\",\"tmpdir\",\"slash_tmp\"].includes(value.kind)) return only(value,[\"kind\"]);\n  if (value.kind === \"project_roots\") return only(value,[\"kind\",\"subpath\"]) && (value.subpath === null || typeof value.subpath === \"string\");\n  return value.kind === \"unknown\" && only(value,[\"kind\",\"path\",\"subpath\"]) && typeof value.path === \"string\" && (value.subpath === null || typeof value.subpath === \"string\");\n}\n\nfunction fileContext(item: any): Record<string, unknown> {\n  return {...approvalContext(item,[\"id\",\"type\",\"status\"]),...(Array.isArray(item.changes) ? {changes:item.changes.map((change: any)=>({...approvalContext(change,[\"path\",\"diff\"]),...(object(change.kind)?{kind:approvalContext(change.kind,[\"type\",\"move_path\"])}:{})}))} : {})};\n}\n"]}