taskflow-hosts 0.1.8 → 0.2.0

package/README.md

@@ -3,10 +3,10 @@
 > Shared host-runner collection for [taskflow](https://github.com/heggria/taskflow).
 
 This package holds the `SubagentRunner` implementations for taskflow's non-pi
-hosts — **codex**, **claude**, and **opencode** — plus their pure argv builders
-(`buildCodexArgs` / `buildClaudeArgs` / `buildOpencodeArgs`) and event-stream
-parsers. It is the **single place** host runners live; a new host adds a
-`<host>-runner.ts` here.
+hosts — **codex**, **claude**, **opencode**, and **grok** — plus their pure argv
+builders (`buildCodexArgs` / `buildClaudeArgs` / `buildOpencodeArgs` /
+`buildGrokArgs`) and event-stream parsers. It is the **single place** host
+runners live; a new host adds a `<host>-runner.ts` here.
 
 ## Why a separate package
 
@@ -17,21 +17,21 @@ Each host has two halves:
    permission/model helpers.
 2. **The delivery** — the per-host MCP server + bin + plugin scaffold, which is
    that host ecosystem's install target (`codex plugin add`, `claude plugin
-   install`, OpenCode config).
+   install`, OpenCode config, `grok plugin install`).
 
 Half #1 is nearly identical in *shape* across hosts and changes for the same
 reasons (a `taskflow-core` contract change, or a host CLI flag change). Half #2
 is genuinely host-specific (different install mechanisms, different plugin
 manifests). So #1 is collected here; #2 stays in `codex-taskflow` /
-`claude-taskflow` / `opencode-taskflow`, which import their runner from this
-package.
+`claude-taskflow` / `opencode-taskflow` / `grok-taskflow`, which import their
+runner from this package.
 
 ## Install
 
 You usually don't install this directly — install the host delivery package:
 
 ```bash
-npm install -g codex-taskflow     # or claude-taskflow / opencode-taskflow
+npm install -g codex-taskflow     # or claude-taskflow / opencode-taskflow / grok-taskflow
 ```
 
 For code-level use:
@@ -45,22 +45,37 @@ npm install taskflow-hosts
 ```ts
 // one host, tree-shaken:
 import { codexSubagentRunner, buildCodexArgs } from "taskflow-hosts/codex";
+import { grokSubagentRunner, buildGrokArgs } from "taskflow-hosts/grok";
 
 // or the barrel:
-import { claudeSubagentRunner, opencodeSubagentRunner } from "taskflow-hosts";
+import {
+	claudeSubagentRunner,
+	opencodeSubagentRunner,
+	grokSubagentRunner,
+} from "taskflow-hosts";
 ```
 
 Each runner export includes: the `SubagentRunner` (`codexSubagentRunner` / …),
 the `runXxxAgentTask` function, the pure `buildXxxArgs` builder, the
 `foldXxxEventLine` parser + `newXxxAccumulator`, and the permission/model
-helpers (`sandboxForTools`, `permissionArgsForTools`, `isReadOnlyPhase`,
-`resolveXxxModel`, `xxxBin`).
+helpers (`sandboxForTools`, `permissionArgsForTools` / `permissionArgsForGrokTools`,
+`isReadOnlyPhase`, `resolveXxxModel`, `xxxBin`).
+
+## Hosts
+
+| Host | CLI spawn | Delivery package |
+|------|-----------|------------------|
+| Codex | `codex exec --json` | `codex-taskflow` |
+| Claude Code | `claude -p --output-format stream-json` | `claude-taskflow` |
+| OpenCode | `opencode run --format json` | `opencode-taskflow` |
+| Grok Build | `grok -p --output-format streaming-json` | `grok-taskflow` |
 
 ## Adding a host
 
 1. Add `<host>-runner.ts` in `src/` (model it on an existing one — a pure
    `buildXxxArgs` + the event parser + a `SubagentRunner` export).
-2. Add an export entry in `src/index.ts`.
+2. Add an export entry in `src/index.ts` (watch for name collisions on shared
+   helper names like `permissionArgsForTools`).
 3. Add `*-runner.test.ts` (event-stream parser) + `*-args.test.ts` (argv
    contract — CI-locked) in `test/`.
 4. The host's *delivery* (MCP server/bin + plugin scaffold) goes in a

package/dist/child-env.d.ts

@@ -0,0 +1,6 @@
+export declare const CHILD_ENV_ALLOWLIST_ENV = "PI_TASKFLOW_CHILD_ENV_ALLOW";
+/** Build a least-privilege child environment. Provider credentials and
+ * host-specific configuration are retained explicitly; unrelated parent
+ * secrets are never inherited by an adversarial subagent. */
+export declare function filteredChildEnv(source: NodeJS.ProcessEnv, exactKeys: readonly string[], prefixes: readonly string[]): NodeJS.ProcessEnv;
+//# sourceMappingURL=child-env.d.ts.map

package/dist/child-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-env.d.ts","sourceRoot":"","sources":["../src/child-env.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAErE;;6DAE6D;AAC7D,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,MAAM,CAAC,UAAU,EACzB,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,QAAQ,EAAE,SAAS,MAAM,EAAE,GACzB,MAAM,CAAC,UAAU,CAmBnB"}

package/dist/child-env.js

@@ -0,0 +1,34 @@
+const BASE_ENV_KEYS = new Set([
+    "PATH", "HOME", "USER", "LOGNAME", "SHELL", "TERM",
+    "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "TZ",
+    "SYSTEMROOT", "WINDIR", "COMSPEC", "PATHEXT", "USERPROFILE",
+    "HOMEDRIVE", "HOMEPATH", "APPDATA", "LOCALAPPDATA",
+    "XDG_CONFIG_HOME", "XDG_CACHE_HOME", "XDG_DATA_HOME", "XDG_STATE_HOME", "XDG_RUNTIME_DIR",
+    "HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY", "NO_PROXY",
+    "SSL_CERT_FILE", "SSL_CERT_DIR", "NODE_EXTRA_CA_CERTS",
+]);
+export const CHILD_ENV_ALLOWLIST_ENV = "PI_TASKFLOW_CHILD_ENV_ALLOW";
+/** Build a least-privilege child environment. Provider credentials and
+ * host-specific configuration are retained explicitly; unrelated parent
+ * secrets are never inherited by an adversarial subagent. */
+export function filteredChildEnv(source, exactKeys, prefixes) {
+    const exact = new Set(exactKeys.map((key) => key.toUpperCase()));
+    for (const key of source[CHILD_ENV_ALLOWLIST_ENV]?.split(",") ?? []) {
+        if (key.trim())
+            exact.add(key.trim().toUpperCase());
+    }
+    const normalizedPrefixes = prefixes.map((prefix) => prefix.toUpperCase());
+    const filtered = {};
+    for (const [key, value] of Object.entries(source)) {
+        if (value === undefined)
+            continue;
+        const normalized = key.toUpperCase();
+        if (BASE_ENV_KEYS.has(normalized) ||
+            exact.has(normalized) ||
+            normalizedPrefixes.some((prefix) => normalized.startsWith(prefix))) {
+            filtered[key] = value;
+        }
+    }
+    return filtered;
+}
+//# sourceMappingURL=child-env.js.map

package/dist/child-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-env.js","sourceRoot":"","sources":["../src/child-env.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM;IAClD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI;IAC/C,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa;IAC3D,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc;IAClD,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB;IACzF,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU;IACpD,eAAe,EAAE,cAAc,EAAE,qBAAqB;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAErE;;6DAE6D;AAC7D,MAAM,UAAU,gBAAgB,CAC/B,MAAyB,EACzB,SAA4B,EAC5B,QAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACrC,IACC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EACjE,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/claude-runner.d.ts

@@ -24,16 +24,19 @@
  *   - failure      = result.is_error, a stream-level error, or a non-zero exit
  *
  * Permission mapping (the codex `sandboxForTools` analogue): Claude Code has no
- * OS-level sandbox in -p mode — a tool call is either whitelisted or denied. A
- * phase whose tool whitelist is read-only gets `--allowedTools <read-only set>`
- * (mutating tools are denied outright); anything else gets
- * `--permission-mode bypassPermissions`, which behaves like codex's
- * workspace-write but WITHOUT an OS sandbox backstop — document accordingly.
+ * OS-level sandbox in -p mode — a tool call is either whitelisted or denied.
+ * Read-only and unspecified tool sets get an explicit read-only allowlist.
+ * Known mutating tools fail closed unless the user explicitly opts into
+ * narrowly-scoped unsandboxed execution with PI_TASKFLOW_CLAUDE_UNSAFE_BYPASS=1;
+ * unknown tool names always fail closed.
  *
  * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
  * error sanitization) mirrors the pi/codex runners so behavior is uniform.
  */
 import { type AgentConfig, type LiveUpdate, type RunOptions, type RunResult, type SubagentRunner, type UsageStats } from "taskflow-core";
+/** Explicit user-level acknowledgement required before Claude may run tools
+ * without an OS sandbox or interactive permission prompts. */
+export declare const CLAUDE_UNSAFE_BYPASS_ENV = "PI_TASKFLOW_CLAUDE_UNSAFE_BYPASS";
 /** Accumulated state folded from a claude stream-json event stream. */
 export interface ClaudeAccumulator {
     usage: UsageStats;
@@ -45,6 +48,7 @@ export interface ClaudeAccumulator {
     fatalError?: string;
     /** True once the authoritative `result` event has been folded. */
     sawResult: boolean;
+    terminalSeen?: boolean;
 }
 export declare function newClaudeAccumulator(model?: string): ClaudeAccumulator;
 /**
@@ -57,15 +61,20 @@ export declare function foldClaudeEventLine(acc: ClaudeAccumulator, line: string
 /** Override the claude binary (tests / unusual installs). */
 export declare function claudeBin(): string;
 /**
- * Map a phase's tool whitelist to claude permission flags — the codex
- * `sandboxForTools` analogue. A phase that only reads (no write/edit/bash in
- * its whitelist) gets a read-only `--allowedTools` set; anything else gets
- * `--permission-mode bypassPermissions` (non-interactive -p runs cannot answer
- * permission prompts, so the codex workspace-write equivalent is bypass —
- * WITHOUT an OS sandbox backstop). No whitelist → bypass (the engine's
- * default-capable agent).
+ * Map a phase's tool whitelist to Claude permission flags. Unspecified and
+ * known read-only tool sets are always restricted to the read-only allowlist.
+ * Known mutating tools need an explicit caller acknowledgement; unknown tools
+ * are never accepted. This
+ * function never reads process.env so argv construction remains pure.
  */
-export declare function permissionArgsForTools(tools: string[] | undefined): string[];
+export declare function permissionArgsForTools(tools: string[] | undefined, allowUnsafeBypass?: boolean): string[];
+/** Resolve the explicit process-level opt-in. Only the exact value `1` is
+ * accepted so an inherited or accidentally truthy value cannot enable it. */
+export declare function claudeUnsafeBypassEnabled(env?: NodeJS.ProcessEnv): boolean;
+/** Resolve a least-privilege environment for the Claude child process.
+ * Provider-specific credentials are retained so API-key, Bedrock, Vertex, and
+ * Foundry authentication continue to work; unrelated secrets are omitted. */
+export declare function claudeChildEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 /** Resolve a modelRoles/pi model id for `claude --model`, or `undefined` to let
  *  claude fall back to its own default. Claude model ids are FLAT (aliases like
  *  "sonnet"/"haiku" or full ids like "claude-sonnet-4-6"), so — same rule as
@@ -79,14 +88,17 @@ export interface ClaudeArgsCtx {
     /** Already-resolved model (opts.model ?? agent.model). */
     model?: string;
     tools?: string[];
+    /** Explicit acknowledgement for unsandboxed known mutating tools. */
+    allowUnsafeBypass?: boolean;
 }
 /**
  * Build the full `claude -p` argv from a phase's resolved context — PURE
  * (no process.env, no spawn). Extracted from `runClaudeAgentTask` so the host's
  * CLI flag contract is unit-testable in CI without a live claude session.
  *
- *   claude -p --output-format stream-json --verbose --strict-mcp-config
- *          [--permission-mode bypassPermissions | --allowedTools ...]
+ *   claude -p --output-format stream-json --verbose --safe-mode --strict-mcp-config
+ *          --setting-sources "" --settings '{"disableAllHooks":true}'
+ *          [--permission-mode bypassPermissions | --tools ... --allowedTools ...]
  *          [--model m] [--append-system-prompt ...] <task>
  */
 export declare function buildClaudeArgs(ctx: ClaudeArgsCtx): string[];

package/dist/claude-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-runner.d.ts","sourceRoot":"","sources":["../src/claude-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAIN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AASvB,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAEtE;AA+BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAyE3F;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAM5E;AAED;;;;0DAI0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKhF;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAQ5D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CA4BpB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,cAAc,CAAC,WAAW,CAE5D,CAAC"}
+{"version":3,"file":"claude-runner.d.ts","sourceRoot":"","sources":["../src/claude-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAKN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AA+EvB;8DAC8D;AAC9D,eAAO,MAAM,wBAAwB,qCAAqC,CAAC;AAE3E,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAEtE;AA+BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA0E3F;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAC3B,iBAAiB,UAAQ,GACvB,MAAM,EAAE,CA6BV;AAED;6EAC6E;AAC7E,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEvF;AAED;;6EAE6E;AAC7E,wBAAgB,cAAc,CAAC,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAEzF;AAED;;;;0DAI0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKhF;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAmB5D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAgDpB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,cAAc,CAAC,WAAW,CAE5D,CAAC"}

package/dist/claude-runner.js

@@ -24,22 +24,94 @@
  *   - failure      = result.is_error, a stream-level error, or a non-zero exit
  *
  * Permission mapping (the codex `sandboxForTools` analogue): Claude Code has no
- * OS-level sandbox in -p mode — a tool call is either whitelisted or denied. A
- * phase whose tool whitelist is read-only gets `--allowedTools <read-only set>`
- * (mutating tools are denied outright); anything else gets
- * `--permission-mode bypassPermissions`, which behaves like codex's
- * workspace-write but WITHOUT an OS sandbox backstop — document accordingly.
+ * OS-level sandbox in -p mode — a tool call is either whitelisted or denied.
+ * Read-only and unspecified tool sets get an explicit read-only allowlist.
+ * Known mutating tools fail closed unless the user explicitly opts into
+ * narrowly-scoped unsandboxed execution with PI_TASKFLOW_CLAUDE_UNSAFE_BYPASS=1;
+ * unknown tool names always fail closed.
  *
  * Process handling (idle watchdog, abort, signal-kill detection, stderr cap,
  * error sanitization) mirrors the pi/codex runners so behavior is uniform.
  */
-import { runSubagentProcess, num, unknownAgentResult, } from "taskflow-core";
+import { runSubagentProcess, sanitizeErrorMessage, num, unknownAgentResult, } from "taskflow-core";
 import { emptyUsage } from "taskflow-core";
+import { filteredChildEnv } from "./child-env.js";
 /** The Claude tools a read-only phase may use. `Bash` is excluded — Claude has
  *  no read-only shell (unlike codex's read-only OS sandbox, which still allows
  *  read-only commands), so a listed-tools phase without write/edit/bash gets
  *  file reads + search + web only. */
 const READ_ONLY_TOOLS = ["Read", "Grep", "Glob", "WebFetch", "WebSearch"];
+const READ_ONLY_TOOL_MAP = {
+    read: "Read",
+    grep: "Grep",
+    glob: "Glob",
+    find: "Glob",
+    ls: "Glob",
+    webfetch: "WebFetch",
+    web_fetch: "WebFetch",
+    websearch: "WebSearch",
+    web_search: "WebSearch",
+};
+const MUTATING_TOOL_MAP = {
+    write: "Write",
+    edit: "Edit",
+    bash: "Bash",
+    apply_patch: "Edit",
+};
+/** Environment inherited by the Claude process. Keep platform/runtime settings,
+ * proxy/CA configuration, and credentials for Claude's supported providers;
+ * drop unrelated application secrets (for example OPENAI_API_KEY, npm tokens,
+ * database passwords) from the default child boundary. */
+const CLAUDE_ENV_KEYS = new Set([
+    "ALL_PROXY",
+    "APPDATA",
+    "COLORTERM",
+    "COMSPEC",
+    "FORCE_COLOR",
+    "HOME",
+    "HOMEDRIVE",
+    "HOMEPATH",
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "LOCALAPPDATA",
+    "LOGNAME",
+    "NODE_EXTRA_CA_CERTS",
+    "NO_COLOR",
+    "NO_PROXY",
+    "PATH",
+    "PATHEXT",
+    "SHELL",
+    "SSL_CERT_DIR",
+    "SSL_CERT_FILE",
+    "SYSTEMROOT",
+    "TEMP",
+    "TERM",
+    "TMP",
+    "TMPDIR",
+    "USER",
+    "USERPROFILE",
+    "WINDIR",
+    "XDG_CACHE_HOME",
+    "XDG_CONFIG_HOME",
+    "XDG_DATA_HOME",
+    "XDG_STATE_HOME",
+]);
+const CLAUDE_ENV_PREFIXES = [
+    "ANTHROPIC_",
+    "AWS_",
+    "AZURE_",
+    "CLAUDE_CODE_",
+    "CLOUD_ML_",
+    "GCLOUD_",
+    "GOOGLE_",
+    "VERTEX_",
+];
+/** Explicit user-level acknowledgement required before Claude may run tools
+ * without an OS sandbox or interactive permission prompts. */
+export const CLAUDE_UNSAFE_BYPASS_ENV = "PI_TASKFLOW_CLAUDE_UNSAFE_BYPASS";
 export function newClaudeAccumulator(model) {
     return { usage: emptyUsage(), model, finalText: "", lastActivity: "", sawResult: false };
 }
@@ -132,6 +204,7 @@ export function foldClaudeEventLine(acc, line) {
     }
     else if (event.type === "result") {
         acc.sawResult = true;
+        acc.terminalSeen = true;
         const u = event.usage;
         if (u) {
             const prev = acc.usage.contextTokens;
@@ -166,22 +239,48 @@ export function claudeBin() {
     return process.env.PI_TASKFLOW_CLAUDE_BIN || "claude";
 }
 /**
- * Map a phase's tool whitelist to claude permission flags — the codex
- * `sandboxForTools` analogue. A phase that only reads (no write/edit/bash in
- * its whitelist) gets a read-only `--allowedTools` set; anything else gets
- * `--permission-mode bypassPermissions` (non-interactive -p runs cannot answer
- * permission prompts, so the codex workspace-write equivalent is bypass —
- * WITHOUT an OS sandbox backstop). No whitelist → bypass (the engine's
- * default-capable agent).
+ * Map a phase's tool whitelist to Claude permission flags. Unspecified and
+ * known read-only tool sets are always restricted to the read-only allowlist.
+ * Known mutating tools need an explicit caller acknowledgement; unknown tools
+ * are never accepted. This
+ * function never reads process.env so argv construction remains pure.
  */
-export function permissionArgsForTools(tools) {
-    if (!tools || tools.length === 0)
-        return ["--permission-mode", "bypassPermissions"];
-    const mutating = new Set(["write", "edit", "bash", "apply_patch"]);
-    const canMutate = tools.some((t) => mutating.has(t));
-    if (canMutate)
-        return ["--permission-mode", "bypassPermissions"];
-    return ["--allowedTools", READ_ONLY_TOOLS.join(",")];
+export function permissionArgsForTools(tools, allowUnsafeBypass = false) {
+    const requestedNames = tools?.map((t) => t.trim().toLowerCase()) ?? [];
+    const unknown = requestedNames.find((t) => !READ_ONLY_TOOL_MAP[t] && !MUTATING_TOOL_MAP[t]);
+    if (unknown) {
+        throw new Error(`Claude tool '${unknown}' cannot be mapped to a built-in tool and is denied. ` +
+            "Use read, grep, glob, find, ls, webfetch, websearch, write, edit, bash, or apply_patch.");
+    }
+    const requestsUnsafeAccess = requestedNames.some((t) => Boolean(MUTATING_TOOL_MAP[t]));
+    if (requestsUnsafeAccess) {
+        if (allowUnsafeBypass) {
+            const available = [...new Set(requestedNames.map((t) => READ_ONLY_TOOL_MAP[t] ?? MUTATING_TOOL_MAP[t]))];
+            return ["--tools", available.join(","), "--permission-mode", "bypassPermissions"];
+        }
+        throw new Error(`Claude tools [${tools.join(", ")}] require unsandboxed permissions. ` +
+            `Claude Code has no OS sandbox in non-interactive mode. ` +
+            `Set ${CLAUDE_UNSAFE_BYPASS_ENV}=1 to explicitly allow this execution.`);
+    }
+    const allowed = requestedNames.length > 0
+        ? [...new Set(requestedNames.map((t) => READ_ONLY_TOOL_MAP[t]).filter(Boolean))]
+        : READ_ONLY_TOOLS;
+    const toolList = allowed.join(",");
+    // --tools limits which built-ins exist; --allowedTools only pre-approves
+    // them. Use both, and isolate disk settings/hooks below, so a project policy
+    // cannot silently restore mutating tools in non-interactive mode.
+    return ["--tools", toolList, "--allowedTools", toolList];
+}
+/** Resolve the explicit process-level opt-in. Only the exact value `1` is
+ * accepted so an inherited or accidentally truthy value cannot enable it. */
+export function claudeUnsafeBypassEnabled(env = process.env) {
+    return env[CLAUDE_UNSAFE_BYPASS_ENV] === "1";
+}
+/** Resolve a least-privilege environment for the Claude child process.
+ * Provider-specific credentials are retained so API-key, Bedrock, Vertex, and
+ * Foundry authentication continue to work; unrelated secrets are omitted. */
+export function claudeChildEnv(source = process.env) {
+    return filteredChildEnv(source, [...CLAUDE_ENV_KEYS], CLAUDE_ENV_PREFIXES);
 }
 /** Resolve a modelRoles/pi model id for `claude --model`, or `undefined` to let
  *  claude fall back to its own default. Claude model ids are FLAT (aliases like
@@ -202,14 +301,26 @@ export function resolveClaudeModel(model) {
  * (no process.env, no spawn). Extracted from `runClaudeAgentTask` so the host's
  * CLI flag contract is unit-testable in CI without a live claude session.
  *
- *   claude -p --output-format stream-json --verbose --strict-mcp-config
- *          [--permission-mode bypassPermissions | --allowedTools ...]
+ *   claude -p --output-format stream-json --verbose --safe-mode --strict-mcp-config
+ *          --setting-sources "" --settings '{"disableAllHooks":true}'
+ *          [--permission-mode bypassPermissions | --tools ... --allowedTools ...]
  *          [--model m] [--append-system-prompt ...] <task>
  */
 export function buildClaudeArgs(ctx) {
     const claudeModel = resolveClaudeModel(ctx.model);
-    const args = ["-p", "--output-format", "stream-json", "--verbose", "--strict-mcp-config"];
-    args.push(...permissionArgsForTools(ctx.tools));
+    const args = [
+        "-p",
+        "--output-format",
+        "stream-json",
+        "--verbose",
+        "--safe-mode",
+        "--strict-mcp-config",
+        "--setting-sources",
+        "",
+        "--settings",
+        JSON.stringify({ disableAllHooks: true }),
+    ];
+    args.push(...permissionArgsForTools(ctx.tools, ctx.allowUnsafeBypass));
     if (claudeModel)
         args.push("--model", claudeModel);
     if (ctx.systemPrompt.trim())
@@ -229,12 +340,30 @@ export async function runClaudeAgentTask(defaultCwd, agents, agentName, task, op
     const model = opts.model ?? agent.model;
     const tools = opts.tools ?? agent.tools;
     void globalThinking; // claude -p has no thinking-level flag; reserved.
-    const args = buildClaudeArgs({
-        systemPrompt: agent.systemPrompt,
-        task,
-        model,
-        tools,
-    });
+    let args;
+    try {
+        args = buildClaudeArgs({
+            systemPrompt: agent.systemPrompt,
+            task,
+            model,
+            tools,
+            allowUnsafeBypass: claudeUnsafeBypassEnabled(),
+        });
+    }
+    catch (error) {
+        const message = sanitizeErrorMessage(error instanceof Error ? error.message : String(error));
+        return {
+            agent: agentName,
+            task,
+            exitCode: 1,
+            output: "",
+            stderr: message,
+            usage: emptyUsage(),
+            model,
+            errorMessage: message,
+            stopReason: "permission_denied",
+        };
+    }
     return runSubagentProcess({
         agent: agentName,
         task,
@@ -245,8 +374,11 @@ export async function runClaudeAgentTask(defaultCwd, agents, agentName, task, op
         idleTimeoutMs: opts.idleTimeoutMs,
         signal: opts.signal,
         onLive: opts.onLive,
+        env: claudeChildEnv(),
         acc: newClaudeAccumulator(model),
         foldLine: foldClaudeEventLine,
+        requireTerminalEvent: true,
+        terminalEventLabel: "Claude result",
     });
 }
 /**

package/dist/claude-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-runner.js","sourceRoot":"","sources":["../src/claude-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,kBAAkB,EAClB,GAAG,EACH,kBAAkB,GAOlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;sCAGsC;AACtC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAe1E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED;;;gDAGgD;AAChD,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,QAAQ,CAAC,EAAE,CAAC;QACX,KAAK,MAAM;YACV,OAAO,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,cAAc;YAClB,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACV,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC;YACC,OAAO,CAAC,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAsB,EAAE,IAAY;IACvE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAU,CAAC;IACf,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5E,OAAO,IAAI,CAAC;IACb,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,wEAAwE;QACxE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC;QAC9C,IAAI,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACpF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAClE,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChF,IAAI,CAAC,SAAS;oBAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;iBAAM,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gBACtC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACpD,GAAG,CAAC,UAAU,GAAG,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;QAC1C,CAAC;QACD,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YAC3D,qFAAqF;YACrF,6EAA6E;YAC7E,GAAG,CAAC,KAAK,CAAC,aAAa;gBACtB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC9E,CAAC;IACF,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;YACrC,GAAG,CAAC,KAAK,GAAG,UAAU,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,GAAG,CAAC,UAAU;gBACb,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACzD,sBAAsB,KAAK,CAAC,OAAO,IAAI,SAAS,GAAG,CAAC;YACrD,QAAQ,GAAG,UAAU,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC;IACF,CAAC;SAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wDAAwD;IACtE,CAAC;IAED,IAAI,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA2B;IACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS;QAAE,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACjE,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;0DAI0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAkB;IACjD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,UAAkB,EAClB,MAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,IAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,KAAK,cAAc,CAAC,CAAC,kDAAkD;IAEvE,MAAM,IAAI,GAAG,eAAe,CAAC;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI;QACJ,KAAK;QACL,KAAK;KACL,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC;QACzB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,SAAS,EAAE;QAChB,IAAI;QACJ,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,oBAAoB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,mBAAmB;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAChE,OAAO,EAAE,kBAAkB;CAC3B,CAAC"}
+{"version":3,"file":"claude-runner.js","sourceRoot":"","sources":["../src/claude-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,kBAAkB,EAClB,oBAAoB,EACpB,GAAG,EACH,kBAAkB,GAOlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;sCAGsC;AACtC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAC1E,MAAM,kBAAkB,GAAqC;IAC5D,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,MAAM;IACV,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,WAAW;CACvB,CAAC;AACF,MAAM,iBAAiB,GAAqC;IAC3D,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,MAAM;CACnB,CAAC;AAEF;;;0DAG0D;AAC1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,SAAS;IACT,WAAW;IACX,SAAS;IACT,aAAa;IACb,MAAM;IACN,WAAW;IACX,UAAU;IACV,YAAY;IACZ,aAAa;IACb,MAAM;IACN,QAAQ;IACR,UAAU;IACV,cAAc;IACd,SAAS;IACT,qBAAqB;IACrB,UAAU;IACV,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,cAAc;IACd,eAAe;IACf,YAAY;IACZ,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,aAAa;IACb,QAAQ;IACR,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;CAChB,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG;IAC3B,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,cAAc;IACd,WAAW;IACX,SAAS;IACT,SAAS;IACT,SAAS;CACT,CAAC;AAEF;8DAC8D;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,kCAAkC,CAAC;AAgB3E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED;;;gDAGgD;AAChD,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,QAAQ,CAAC,EAAE,CAAC;QACX,KAAK,MAAM;YACV,OAAO,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,cAAc;YAClB,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACV,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC;YACC,OAAO,CAAC,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAsB,EAAE,IAAY;IACvE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAU,CAAC;IACf,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5E,OAAO,IAAI,CAAC;IACb,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,wEAAwE;QACxE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC;QAC9C,IAAI,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACpF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAClE,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChF,IAAI,CAAC,SAAS;oBAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;iBAAM,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gBACtC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACpD,GAAG,CAAC,UAAU,GAAG,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;QAC1C,CAAC;QACD,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YAC3D,qFAAqF;YACrF,6EAA6E;YAC7E,GAAG,CAAC,KAAK,CAAC,aAAa;gBACtB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC9E,CAAC;IACF,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;YACrC,GAAG,CAAC,KAAK,GAAG,UAAU,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,GAAG,CAAC,UAAU;gBACb,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACzD,sBAAsB,KAAK,CAAC,OAAO,IAAI,SAAS,GAAG,CAAC;YACrD,QAAQ,GAAG,UAAU,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC;IACF,CAAC;SAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wDAAwD;IACtE,CAAC;IAED,IAAI,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAA2B,EAC3B,iBAAiB,GAAG,KAAK;IAEzB,MAAM,cAAc,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACd,gBAAgB,OAAO,uDAAuD;YAC7E,yFAAyF,CAC1F,CAAC;IACH,CAAC;IACD,MAAM,oBAAoB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,oBAAoB,EAAE,CAAC;QAC1B,IAAI,iBAAiB,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,KAAK,CACd,iBAAiB,KAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;YACtE,yDAAyD;YACzD,OAAO,wBAAwB,wCAAwC,CACxE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC;QACxC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,eAAe,CAAC;IACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,yEAAyE;IACzE,6EAA6E;IAC7E,kEAAkE;IAClE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7E,OAAO,GAAG,CAAC,wBAAwB,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAM,GAAsB,OAAO,CAAC,GAAG;IACrE,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAC5E,CAAC;AAED;;;;0DAI0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAaD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,GAAkB;IACjD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAa;QACtB,IAAI;QACJ,iBAAiB;QACjB,aAAa;QACb,WAAW;QACX,aAAa;QACb,qBAAqB;QACrB,mBAAmB;QACnB,EAAE;QACF,YAAY;QACZ,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;KACzC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvE,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,UAAkB,EAClB,MAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,IAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,KAAK,cAAc,CAAC,CAAC,kDAAkD;IAEvE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACJ,IAAI,GAAG,eAAe,CAAC;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,KAAK;YACL,KAAK;YACL,iBAAiB,EAAE,yBAAyB,EAAE;SAC9C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7F,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,IAAI;YACJ,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,UAAU,EAAE;YACnB,KAAK;YACL,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,mBAAmB;SAC/B,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC;QACzB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,SAAS,EAAE;QAChB,IAAI;QACJ,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,cAAc,EAAE;QACrB,GAAG,EAAE,oBAAoB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,mBAAmB;QAC7B,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,eAAe;KACnC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAChE,OAAO,EAAE,kBAAkB;CAC3B,CAAC"}

package/dist/codex-runner.d.ts

@@ -38,6 +38,7 @@ export interface CodexAccumulator {
     lastActivity: string;
     /** Set when a fatal (non-benign) error item is seen. */
     fatalError?: string;
+    terminalSeen?: boolean;
 }
 export declare function newCodexAccumulator(model?: string): CodexAccumulator;
 /**
@@ -49,6 +50,7 @@ export declare function newCodexAccumulator(model?: string): CodexAccumulator;
 export declare function foldCodexEventLine(acc: CodexAccumulator, line: string): LiveUpdate | null;
 /** Override the codex binary (tests / unusual installs). */
 export declare function codexBin(): string;
+export declare function codexChildEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 /**
  * Map a phase's tool whitelist to a codex sandbox mode. Codex has no per-tool
  * whitelist; it has sandbox policies. The conservative mapping: a phase that
@@ -63,12 +65,16 @@ export declare function sandboxForTools(tools: string[] | undefined): "read-only
  *  placeholder ({{...}}) is dropped. Exported so the model-id contract is
  *  unit-testable without a live codex session. */
 export declare function resolveCodexModel(model: string | undefined): string | undefined;
+/** Map Taskflow/Pi thinking levels to Codex's model_reasoning_effort config. */
+export declare function resolveCodexThinking(thinking: string | undefined): string | undefined;
 /** Context for {@link buildCodexArgs} — the pure inputs to argv construction. */
 export interface CodexArgsCtx {
     systemPrompt: string;
     task: string;
     /** Already-resolved model (opts.model ?? agent.model). */
     model?: string;
+    /** Already-resolved thinking level (opts.thinking ?? agent.thinking ?? global). */
+    thinking?: string;
     tools?: string[];
     cwd?: string;
 }
@@ -77,7 +83,8 @@ export interface CodexArgsCtx {
  * (no process.env, no spawn). Extracted from `runCodexAgentTask` so the host's
  * CLI flag contract is unit-testable in CI without a live codex session.
  *
- *   codex exec --json --skip-git-repo-check -s <sandbox> [-m model] [-C cwd] <prompt>
+ *   codex exec --json --skip-git-repo-check -s <sandbox>
+ *        [-m model] [-c model_reasoning_effort=level] [-C cwd] <prompt>
  */
 export declare function buildCodexArgs(ctx: CodexArgsCtx): string[];
 /**

package/dist/codex-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-runner.d.ts","sourceRoot":"","sources":["../src/codex-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAIN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AAcvB,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAEpE;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAkDzF;AAED,4DAA4D;AAC5D,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,WAAW,GAAG,iBAAiB,CAK5F;AAED;;;;kDAIkD;AAClD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,EAAE,CAW1D;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CA8BpB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAE3D,CAAC"}
+{"version":3,"file":"codex-runner.d.ts","sourceRoot":"","sources":["../src/codex-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAKN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AAevB,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAEpE;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA4DzF;AAED,4DAA4D;AAC5D,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,aAAa,CAAC,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAExF;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,WAAW,GAAG,iBAAiB,CAK5F;AAED;;;;kDAIkD;AAClD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK/E;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASrF;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,EAAE,CAwB1D;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAkDpB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAG3D,CAAC"}