zelari-code 1.30.3 → 1.31.0

package/dist/cli/mcp/mcpPresets.js

@@ -1,6 +1,9 @@
 /**
- * Named MCP presets for optional capabilities (Cua Driver, …).
+ * Named MCP presets for optional capabilities (Cua Driver, Composio Connect).
  * Does not vendor binaries — only writes ~/.zelari-code/mcp.json (or project).
+ *
+ * Presets are FACTORIES: env-dependent config (e.g. COMPOSIO_API_KEY) is read
+ * at apply time, never captured at module load.
  */
 import { upsertMcpServer, } from "./mcpConfigIo.js";
 /** Official Cua Driver MCP entry (trycua/cua). Binary must be on PATH. */
@@ -22,15 +25,85 @@ export const CUA_DRIVER_PRESET = {
         "Council: Cua tools are skipped for specialists unless ZELARI_CUA_COUNCIL=1",
     ],
 };
+/**
+ * Composio Connect MCP preset (composio.dev). 500+ app integrations exposed
+ * as MCP tools via `npx composio-mcp`. The API key passes through env
+ * (never written into argv/mcp.json args) and is read at APPLY time.
+ */
+export function buildComposioPreset() {
+    return {
+        id: "composio",
+        servers: {
+            composio: {
+                command: "npx",
+                args: ["-y", "composio-mcp@latest"],
+                env: process.env.COMPOSIO_API_KEY
+                    ? { COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY }
+                    : {},
+                enabled: true,
+            },
+        },
+        notes: [
+            "Composio Connect — 500+ app integrations (GitHub, Slack, Notion, ...) as MCP tools.",
+            "Set COMPOSIO_API_KEY before applying: export COMPOSIO_API_KEY=<key>",
+            "Connect apps at https://composio.dev — each connected account becomes a tool.",
+            "The key is stored in mcp.json env, never in argv.",
+            "Kill switch: disable the composio server in mcp.json or ZELARI_MCP=0",
+        ],
+    };
+}
+/**
+ * Qwen-MM-Plugins MCP preset (QwenLM/Qwen-MM-Plugins). Multimodal tools
+ * (vision, video, audio, 3D, web search) served over stdio via `uvx`.
+ * The capability is selected at APPLY time through QWEN_MM_PLUGIN (default
+ * `qwen-mm-plugins-core`); API keys pass through env, never argv.
+ *
+ * Windows: not validated upstream — prefer WSL2 (Ubuntu) and run the
+ * upstream guided installer first: `bash install.sh`.
+ */
+export function buildQwenMmPreset() {
+    const plugin = process.env.QWEN_MM_PLUGIN?.trim() || "qwen-mm-plugins-core";
+    return {
+        id: "qwen-mm-plugins",
+        servers: {
+            "qwen-mm-plugins": {
+                command: "uvx",
+                args: [plugin],
+                env: {
+                    ...(process.env.DASHSCOPE_API_KEY
+                        ? { DASHSCOPE_API_KEY: process.env.DASHSCOPE_API_KEY }
+                        : {}),
+                    ...(process.env.SERPER_API_KEY
+                        ? { SERPER_API_KEY: process.env.SERPER_API_KEY }
+                        : {}),
+                },
+                enabled: true,
+            },
+        },
+        notes: [
+            "Qwen-MM-Plugins — multimodal capabilities (core / video-memory / video-edit / blender / freecad) as MCP tools.",
+            "Run the upstream guided installer first: curl -fsSL https://raw.githubusercontent.com/QwenLM/Qwen-MM-Plugins/main/install.sh | bash",
+            "Windows: use WSL2 (Ubuntu); native Windows is not validated upstream.",
+            "Pick a capability: export QWEN_MM_PLUGIN=qwen-mm-plugins-video-memory (default: qwen-mm-plugins-core).",
+            "API keys read at apply time: DASHSCOPE_API_KEY, SERPER_API_KEY (native reading works without them).",
+            "Blender/FreeCAD variants: start the host app before invoking tools.",
+            "Kill switch: disable the qwen-mm-plugins server in mcp.json or ZELARI_MCP=0",
+        ],
+    };
+}
 const PRESETS = {
-    cua: CUA_DRIVER_PRESET,
-    "cua-driver": CUA_DRIVER_PRESET,
+    cua: () => CUA_DRIVER_PRESET,
+    "cua-driver": () => CUA_DRIVER_PRESET,
+    composio: buildComposioPreset,
+    "qwen-mm-plugins": buildQwenMmPreset,
+    "qwen-mm": buildQwenMmPreset,
 };
 export function listMcpPresetIds() {
-    return Object.keys(PRESETS).filter((k) => k === "cua"); // canonical ids only
+    return Object.keys(PRESETS).filter((k) => k === "cua" || k === "composio" || k === "qwen-mm-plugins"); // canonical ids only
 }
 export function getMcpPreset(id) {
-    return PRESETS[id.trim().toLowerCase()] ?? null;
+    const factory = PRESETS[id.trim().toLowerCase()];
+    return factory ? factory() : null;
 }
 export function applyMcpPreset(opts) {
     const preset = getMcpPreset(opts.presetId);

package/dist/cli/mcp/mcpPresets.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcpPresets.js","sourceRoot":"","sources":["../../../src/cli/mcp/mcpPresets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACL,eAAe,GAEhB,MAAM,kBAAkB,CAAC;AAU1B,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,EAAE,EAAE,KAAK;IACT,OAAO,EAAE;QACP,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EAAE,IAAI;SACd;KACF;IACD,KAAK,EAAE;QACL,4EAA4E;QAC5E,mEAAmE;QACnE,qDAAqD;QACrD,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;KAC7E;CACF,CAAC;AAEF,MAAM,OAAO,GAA8B;IACzC,GAAG,EAAE,iBAAiB;IACtB,YAAY,EAAE,iBAAiB;CAChC,CAAC;AAEF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,qBAAqB;AAC/E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAI9B;IAGC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,mBAAmB,IAAI,CAAC,QAAQ,aAAa,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACnC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,KAAK;YACL,IAAI;YACJ,MAAM;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAChD,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,GAAG,CAAC;AACnD,CAAC"}
+{"version":3,"file":"mcpPresets.js","sourceRoot":"","sources":["../../../src/cli/mcp/mcpPresets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,eAAe,GAEhB,MAAM,kBAAkB,CAAC;AAU1B,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,EAAE,EAAE,KAAK;IACT,OAAO,EAAE;QACP,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EAAE,IAAI;SACd;KACF;IACD,KAAK,EAAE;QACL,4EAA4E;QAC5E,mEAAmE;QACnE,qDAAqD;QACrD,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;KAC7E;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,EAAE,EAAE,UAAU;QACd,OAAO,EAAE;YACP,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC;gBACnC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;oBAC/B,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE;oBACpD,CAAC,CAAC,EAAE;gBACN,OAAO,EAAE,IAAI;aACd;SACF;QACD,KAAK,EAAE;YACL,qFAAqF;YACrF,qEAAqE;YACrE,+EAA+E;YAC/E,mDAAmD;YACnD,sEAAsE;SACvE;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAC;IAC5E,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE;YACP,iBAAiB,EAAE;gBACjB,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,MAAM,CAAC;gBACd,GAAG,EAAE;oBACH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;wBAC/B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;wBACtD,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc;wBAC5B,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;wBAChD,CAAC,CAAC,EAAE,CAAC;iBACR;gBACD,OAAO,EAAE,IAAI;aACd;SACF;QACD,KAAK,EAAE;YACL,gHAAgH;YAChH,qIAAqI;YACrI,uEAAuE;YACvE,wGAAwG;YACxG,qGAAqG;YACrG,qEAAqE;YACrE,6EAA6E;SAC9E;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAoC;IAC/C,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB;IAC5B,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB;IACrC,QAAQ,EAAE,mBAAmB;IAC7B,iBAAiB,EAAE,iBAAiB;IACpC,SAAS,EAAE,iBAAiB;CAC7B,CAAC;AAEF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,iBAAiB,CAClE,CAAC,CAAC,qBAAqB;AAC1B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAI9B;IAGC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,mBAAmB,IAAI,CAAC,QAAQ,aAAa,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACnC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,KAAK;YACL,IAAI;YACJ,MAAM;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAChD,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,GAAG,CAAC;AACnD,CAAC"}

package/dist/cli/mcp/permissionBroker.js

@@ -0,0 +1,253 @@
+/**
+ * permissionBroker — socket broker for external-agent permission prompts.
+ *
+ * Pattern ported from OpenMausBot (`server/permission-proxy.ts`, MIT): an
+ * external CLI agent (e.g. `claude --permission-prompt-tool`) spawns
+ * `zelari-code --permission-mcp <socket>` as a child MCP stdio server; that
+ * child forwards `approve` / `ask_user` requests to THIS broker (the parent
+ * zelari-code TUI/headless process) over a local socket, and the human
+ * decision flows back.
+ *
+ * Transport: JSON-lines over `node:net` — unix socket on POSIX, named pipe
+ * on Windows (same API). Zero new dependencies.
+ *
+ * Wire protocol (broker side):
+ *   client → broker: {"t":"ask","id":"<uuid>","kind":"permission"|"question", ...}
+ *   broker → client: {"t":"answer","id":"<uuid>","behavior":"allow"|"deny","message"?,"always"?,"answer"?}
+ *
+ * If no handler is registered (or the handler throws), the broker answers
+ * `deny` — the agent must never hang waiting on a broken approval channel.
+ *
+ * @since v1.30.0
+ */
+import { connect, createServer } from "node:net";
+import { unlink } from "node:fs";
+export const PERMISSION_BROKER_DEFAULT_TIMEOUT_MS = 60_000;
+export const PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS = 2_000;
+function sendJson(socket, obj) {
+    if (socket.destroyed)
+        return;
+    socket.write(JSON.stringify(obj) + "\n");
+}
+function safeSocketPath(socketPath) {
+    return socketPath.trim();
+}
+/**
+ * Start the broker listener on `socketPath`. Resolves once listening.
+ *
+ * Each connection is treated as a stream of `ask` messages; every request
+ * gets exactly one `answer` (handler result, handler absence, error, or a
+ * per-request timeout — never nothing).
+ */
+export function startPermissionBroker(socketPath, handlers, opts) {
+    const path = safeSocketPath(socketPath);
+    const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
+    const sockets = new Set();
+    const server = createServer((socket) => {
+        socket.setEncoding("utf8");
+        sockets.add(socket);
+        socket.on("close", () => sockets.delete(socket));
+        socket.on("error", () => {
+            // Client vanished mid-request — nothing to answer.
+        });
+        let buffer = "";
+        socket.on("data", (chunk) => {
+            buffer += chunk;
+            let nl;
+            while ((nl = buffer.indexOf("\n")) >= 0) {
+                const line = buffer.slice(0, nl).trim();
+                buffer = buffer.slice(nl + 1);
+                if (!line)
+                    continue;
+                void handleLine(socket, line);
+            }
+        });
+    });
+    server.on("error", () => {
+        // Post-listen errors (e.g. client reset) are non-fatal.
+    });
+    async function handleLine(socket, line) {
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            return; // ignore non-JSON noise
+        }
+        if (!msg || msg.t !== "ask" || typeof msg.id !== "string" || !msg.id)
+            return;
+        const id = msg.id;
+        let settled = false;
+        let timer;
+        const reply = (answer) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer)
+                clearTimeout(timer);
+            sendJson(socket, { t: "answer", id, ...answer });
+        };
+        timer = setTimeout(() => {
+            reply({
+                behavior: "deny",
+                message: `[zelari] permission broker timed out after ${requestTimeoutMs}ms`,
+            });
+        }, requestTimeoutMs);
+        if (typeof timer.unref === "function")
+            timer.unref();
+        try {
+            if (msg.kind === "question") {
+                if (!handlers.onQuestion) {
+                    reply({
+                        behavior: "deny",
+                        message: "[zelari] no interactive answer available (question handler missing)",
+                    });
+                    return;
+                }
+                const answer = await handlers.onQuestion({
+                    id,
+                    question: msg.question ?? "",
+                    choices: msg.choices,
+                    context: msg.context,
+                });
+                if (answer == null) {
+                    reply({
+                        behavior: "deny",
+                        message: "[zelari] question cancelled (no answer)",
+                    });
+                    return;
+                }
+                if (answer.behavior === "deny") {
+                    reply({
+                        behavior: "deny",
+                        message: answer.message ?? "[zelari] question denied by handler",
+                    });
+                    return;
+                }
+                reply({ behavior: "allow", answer: answer.answer ?? "" });
+                return;
+            }
+            // kind === "permission"
+            const answer = handlers.onPermission
+                ? await handlers.onPermission({
+                    id,
+                    tool: msg.tool ?? "unknown",
+                    input: msg.input,
+                    toolUseId: msg.toolUseId,
+                    suggestions: msg.suggestions,
+                })
+                : {
+                    behavior: "deny",
+                    message: "[zelari] permission broker has no approval handler",
+                };
+            reply(answer);
+        }
+        catch (err) {
+            reply({
+                behavior: "deny",
+                message: `[zelari] permission broker error: ${err instanceof Error ? err.message : String(err)}`,
+            });
+        }
+    }
+    return new Promise((resolve, reject) => {
+        const onError = (err) => reject(err);
+        server.once("error", onError);
+        server.listen(path, () => {
+            server.removeListener("error", onError);
+            resolve({
+                socketPath: path,
+                stop: () => new Promise((res) => {
+                    for (const s of sockets)
+                        s.destroy();
+                    sockets.clear();
+                    // Windows named pipes: server.close() waits for every accepted
+                    // connection to end — closeAllConnections() forces that so stop()
+                    // never hangs on a stale client handle.
+                    const closeAll = server.closeAllConnections;
+                    if (typeof closeAll === "function")
+                        closeAll.call(server);
+                    let done = false;
+                    const finish = () => {
+                        if (done)
+                            return;
+                        done = true;
+                        if (process.platform !== "win32") {
+                            unlink(path, () => res());
+                        }
+                        else {
+                            res();
+                        }
+                    };
+                    server.close(() => finish());
+                    // Safety net: never let stop() hang (e.g. platform quirks).
+                    setTimeout(finish, 1_000).unref?.();
+                }),
+            });
+        });
+    });
+}
+/**
+ * Send one `ask` over the wire and await the matching `answer`.
+ *
+ * Used by the MCP stdio server (`--permission-mcp`) to reach the broker in
+ * the parent zelari process. Rejects (never hangs) when:
+ *   - the socket cannot be reached within `connectTimeoutMs`,
+ *   - the broker closes the connection without answering,
+ *   - no answer arrives within `requestTimeoutMs`.
+ */
+export function requestBrokerAsk(socketPath, ask, opts) {
+    const path = safeSocketPath(socketPath);
+    const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
+    const connectTimeoutMs = opts?.connectTimeoutMs ?? PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS;
+    return new Promise((resolve, reject) => {
+        const socket = connect(path);
+        let buffer = "";
+        let settled = false;
+        const settle = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(connectTimer);
+            clearTimeout(requestTimer);
+            socket.destroy();
+            fn();
+        };
+        const connectTimer = setTimeout(() => {
+            settle(() => reject(new Error(`permission broker unavailable at "${path}" (connect timed out after ${connectTimeoutMs}ms)`)));
+        }, connectTimeoutMs);
+        const requestTimer = setTimeout(() => {
+            settle(() => reject(new Error(`permission broker timed out after ${requestTimeoutMs}ms waiting for an answer`)));
+        }, requestTimeoutMs);
+        socket.setEncoding("utf8");
+        socket.on("connect", () => clearTimeout(connectTimer));
+        socket.on("error", (err) => settle(() => reject(err)));
+        socket.on("close", () => {
+            settle(() => reject(new Error("permission broker closed the connection without an answer")));
+        });
+        socket.on("data", (chunk) => {
+            buffer += chunk;
+            let nl;
+            while ((nl = buffer.indexOf("\n")) >= 0) {
+                const line = buffer.slice(0, nl).trim();
+                buffer = buffer.slice(nl + 1);
+                if (!line)
+                    continue;
+                let msg;
+                try {
+                    msg = JSON.parse(line);
+                }
+                catch {
+                    continue; // ignore non-JSON noise
+                }
+                if (msg?.t === "answer" && msg.id === ask.id) {
+                    // Strip transport fields (t, id) — the caller wants the answer only.
+                    const { t: _t, id: _id, ...answer } = msg;
+                    settle(() => resolve(answer));
+                    return;
+                }
+            }
+        });
+        sendJson(socket, ask);
+    });
+}
+//# sourceMappingURL=permissionBroker.js.map

package/dist/cli/mcp/permissionBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionBroker.js","sourceRoot":"","sources":["../../../src/cli/mcp/permissionBroker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,CAAC,MAAM,oCAAoC,GAAG,MAAM,CAAC;AAC3D,MAAM,CAAC,MAAM,4CAA4C,GAAG,KAAK,CAAC;AAgElE,SAAS,QAAQ,CAAC,MAAc,EAAE,GAAY;IAC5C,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,QAAkC,EAClC,IAAoC;IAEpC,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,gBAAgB,GACpB,IAAI,EAAE,gBAAgB,IAAI,oCAAoC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,mDAAmD;QACrD,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,KAAK,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACtB,wDAAwD;IAC1D,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;QACpD,IAAI,GAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,wBAAwB;QAClC,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO;QAE7E,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAiC,CAAC;QAEtC,MAAM,KAAK,GAAG,CAAC,MAAuB,EAAE,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC;QAEF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,KAAK,CAAC;gBACJ,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,8CAA8C,gBAAgB,IAAI;aAC5E,CAAC,CAAC;QACL,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACzB,KAAK,CAAC;wBACJ,QAAQ,EAAE,MAAM;wBAChB,OAAO,EACL,qEAAqE;qBACxE,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;oBACvC,EAAE;oBACF,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;oBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,KAAK,CAAC;wBACJ,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,yCAAyC;qBACnD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC/B,KAAK,CAAC;wBACJ,QAAQ,EAAE,MAAM;wBAChB,OAAO,EACL,MAAM,CAAC,OAAO,IAAI,qCAAqC;qBAC1D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,wBAAwB;YACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY;gBAClC,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC;oBAC1B,EAAE;oBACF,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;oBAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,WAAW,EAAE,GAAG,CAAC,WAAW;iBAC7B,CAAC;gBACJ,CAAC,CAAC;oBACE,QAAQ,EAAE,MAAe;oBACzB,OAAO,EAAE,oDAAoD;iBAC9D,CAAC;YACN,KAAK,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC;gBACJ,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,qCACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC;gBACN,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;oBACxB,KAAK,MAAM,CAAC,IAAI,OAAO;wBAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACrC,OAAO,CAAC,KAAK,EAAE,CAAC;oBAChB,+DAA+D;oBAC/D,kEAAkE;oBAClE,wCAAwC;oBACxC,MAAM,QAAQ,GACZ,MACD,CAAC,mBAAmB,CAAC;oBACtB,IAAI,OAAO,QAAQ,KAAK,UAAU;wBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1D,IAAI,IAAI,GAAG,KAAK,CAAC;oBACjB,MAAM,MAAM,GAAG,GAAG,EAAE;wBAClB,IAAI,IAAI;4BAAE,OAAO;wBACjB,IAAI,GAAG,IAAI,CAAC;wBACZ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BACjC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;wBAC5B,CAAC;6BAAM,CAAC;4BACN,GAAG,EAAE,CAAC;wBACR,CAAC;oBACH,CAAC,CAAC;oBACF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC7B,4DAA4D;oBAC5D,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtC,CAAC,CAAC;aACL,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,GAAqB,EACrB,IAGC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,gBAAgB,GACpB,IAAI,EAAE,gBAAgB,IAAI,oCAAoC,CAAC;IACjE,MAAM,gBAAgB,GACpB,IAAI,EAAE,gBAAgB,IAAI,4CAA4C,CAAC;IAEzE,OAAO,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,KAAK,CACP,qCAAqC,IAAI,8BAA8B,gBAAgB,KAAK,CAC7F,CACF,CACF,CAAC;QACJ,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,KAAK,CACP,qCAAqC,gBAAgB,0BAA0B,CAChF,CACF,CACF,CAAC;QACJ,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAErB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC,CAC/E,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,GAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgC,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,wBAAwB;gBACpC,CAAC;gBACD,IAAI,GAAG,EAAE,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;oBAC7C,qEAAqE;oBACrE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC;oBAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAyB,CAAC,CAAC,CAAC;oBACjD,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/mcp/permissionCli.js

@@ -0,0 +1,46 @@
+/**
+ * permissionCli — entry point for `zelari-code --permission-mcp <socket>`.
+ *
+ * Standalone MCP stdio server (OpenMausBot permission-proxy pattern).
+ * Kept as a separate module so the child process spawned by an external CLI
+ * (`claude --permission-prompt-tool "zelari-code --permission-mcp <sock>"`)
+ * never mounts Ink / the TUI / preflight checks.
+ *
+ * The process stays alive until the parent closes stdin (or we get
+ * SIGINT/SIGTERM), then exits cleanly.
+ *
+ * @since v1.30.0
+ */
+import { startPermissionMcpServer } from "./mcpPermissionServer.js";
+export async function runPermissionCli(socketPath) {
+    const server = await startPermissionMcpServer({ socketPath });
+    process.stderr.write(`[zelari-code --permission-mcp] listening on ${socketPath}\n`);
+    let exiting = false;
+    const shutdown = async (code) => {
+        if (exiting)
+            return;
+        exiting = true;
+        try {
+            await server.stop();
+        }
+        catch {
+            // best-effort teardown
+        }
+        process.exit(code);
+    };
+    // Parent CLI closed our stdin → we are done.
+    process.stdin.on("close", () => {
+        void shutdown(0);
+    });
+    process.on("SIGINT", () => {
+        void shutdown(0);
+    });
+    process.on("SIGTERM", () => {
+        void shutdown(0);
+    });
+    // Keep the stream flowing even if the parent never writes (readable side).
+    process.stdin.resume?.();
+    await server.closed;
+    await shutdown(0);
+}
+//# sourceMappingURL=permissionCli.js.map

package/dist/cli/mcp/permissionCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionCli.js","sourceRoot":"","sources":["../../../src/cli/mcp/permissionCli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAA+C,UAAU,IAAI,CAC9D,CAAC;IAEF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACtC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,6CAA6C;IAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC7B,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;IAEzB,MAAM,MAAM,CAAC,MAAM,CAAC;IACpB,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/cli/provider/localCli/claudeProvider.js

@@ -0,0 +1,149 @@
+/**
+ * claudeProvider — local-CLI provider (Slice B, OpenMausBot driver pattern,
+ * MIT). Implements zelari's `ProviderStreamFn` by spawning an external agent
+ * CLI (`claude` by default; `ZELARI_LOCAL_CLI` to override) in print mode
+ * with `--output-format stream-json --input-format stream-json`, feeding it
+ * the harness conversation, and translating its events into ProviderDelta.
+ *
+ * The external CLI is an autonomous agent: it executes its own tools and, when
+ * `ZELARI_PERM_SOCKET` is set (Slice A broker in the parent zelari process),
+ * approval prompts arrive in the zelari TUI via
+ * `--permission-prompt-tool "zelari-code --permission-mcp <socket>"`.
+ *
+ * Stateless per harness contract: the harness re-invokes the provider with
+ * the full updated conversation on every tool-loop iteration, so each call
+ * spawns a fresh CLI process.
+ *
+ * `cli`/`args` are injectable for tests (a fake CLI script).
+ *
+ * @since v1.30.0
+ */
+import { spawn } from 'node:child_process';
+import { buildClaudeInputLines, createClaudeStreamParser, } from './claudeStreamJson.js';
+const DEFAULT_ARGS = [
+    '-p',
+    '--output-format',
+    'stream-json',
+    '--input-format',
+    'stream-json',
+    '--verbose',
+];
+/** Resolve the child exit code, waiting for the 'exit' event if needed. */
+function waitForExit(child, timeoutMs = 2_000) {
+    return new Promise((resolve) => {
+        if (child.exitCode != null)
+            return resolve(child.exitCode);
+        const timer = setTimeout(() => resolve(child.exitCode ?? null), timeoutMs);
+        timer.unref?.();
+        child.once('exit', (code) => {
+            clearTimeout(timer);
+            resolve(code ?? null);
+        });
+    });
+}
+export function createLocalCliProvider(opts = {}) {
+    return async function* (params) {
+        const cli = opts.cli ?? process.env.ZELARI_LOCAL_CLI ?? 'claude';
+        const model = opts.model ?? params.model;
+        const permSocket = opts.permissionSocketPath ?? process.env.ZELARI_PERM_SOCKET ?? '';
+        const args = opts.args ?? [...DEFAULT_ARGS];
+        if (opts.args === undefined) {
+            if (model) {
+                args.push('--model', model);
+            }
+            if (permSocket) {
+                args.push('--permission-prompt-tool', `zelari-code --permission-mcp ${permSocket}`);
+            }
+        }
+        const spawnFn = opts.spawnFn ?? spawn;
+        let child;
+        try {
+            child = spawnFn(cli, args, {
+                stdio: ['pipe', 'pipe', 'pipe'],
+                ...(opts.env ? { env: opts.env } : {}),
+            });
+        }
+        catch (err) {
+            yield {
+                kind: 'error',
+                message: `[local-cli] failed to spawn ${cli}: ${err instanceof Error ? err.message : String(err)}`,
+            };
+            return;
+        }
+        const spawnErrorBox = { err: null };
+        child.once('error', (err) => {
+            spawnErrorBox.err = err;
+        });
+        const onAbort = () => {
+            child.kill();
+        };
+        params.signal?.addEventListener('abort', onAbort, { once: true });
+        let stderrTail = '';
+        child.stderr.setEncoding('utf8');
+        child.stderr.on('data', (d) => {
+            stderrTail = (stderrTail + d).slice(-2000);
+        });
+        // Feed the conversation, then close stdin so the CLI starts.
+        for (const line of buildClaudeInputLines(params.messages)) {
+            child.stdin.write(line + '\n');
+        }
+        child.stdin.end();
+        const parser = createClaudeStreamParser();
+        let buf = '';
+        let finished = false;
+        try {
+            for await (const chunk of child.stdout) {
+                buf += chunk.toString('utf8');
+                let nl;
+                while ((nl = buf.indexOf('\n')) >= 0) {
+                    const line = buf.slice(0, nl);
+                    buf = buf.slice(nl + 1);
+                    for (const delta of parser.push(line)) {
+                        if (delta.kind === 'finish')
+                            finished = true;
+                        yield delta;
+                    }
+                }
+            }
+            // Trailing line without newline.
+            if (buf.trim().length > 0) {
+                for (const delta of parser.push(buf)) {
+                    if (delta.kind === 'finish')
+                        finished = true;
+                    yield delta;
+                }
+            }
+            if (!finished) {
+                const spawnErr = spawnErrorBox.err;
+                if (spawnErr) {
+                    yield {
+                        kind: 'error',
+                        message: `[local-cli] ${cli} failed to start: ${spawnErr.message}`,
+                    };
+                }
+                else {
+                    // stdout may close a tick before the 'exit' event fires, so await
+                    // the exit code deterministically instead of reading child.exitCode
+                    // right away (it can still be null here).
+                    const exitCode = await waitForExit(child);
+                    if (exitCode != null && exitCode !== 0) {
+                        yield {
+                            kind: 'error',
+                            message: `[local-cli] ${cli} exited ${exitCode}: ${stderrTail.trim() || 'no stderr'}`,
+                        };
+                    }
+                    else {
+                        // Stream ended without a result event (e.g. killed) — close cleanly.
+                        yield { kind: 'finish', reason: parser.stopReason || 'stop' };
+                    }
+                }
+            }
+        }
+        finally {
+            params.signal?.removeEventListener('abort', onAbort);
+            if (child.exitCode == null)
+                child.kill();
+        }
+    };
+}
+//# sourceMappingURL=claudeProvider.js.map

package/dist/cli/provider/localCli/claudeProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeProvider.js","sourceRoot":"","sources":["../../../../src/cli/provider/localCli/claudeProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAiB/B,MAAM,YAAY,GAAG;IACnB,IAAI;IACJ,iBAAiB;IACjB,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,WAAW;CACZ,CAAC;AAEF,2EAA2E;AAC3E,SAAS,WAAW,CAClB,KAAqC,EACrC,SAAS,GAAG,KAAK;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAgC,EAAE;IAElC,OAAO,KAAK,SAAS,CAAC,EAAE,MAAM;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,QAAQ,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC;QACzC,MAAM,UAAU,GACd,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAEpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CACP,0BAA0B,EAC1B,gCAAgC,UAAU,EAAE,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACtC,IAAI,KAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE;gBACzB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAmC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,+BAA+B,GAAG,KACzC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;aACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAA0B,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YACjC,aAAa,CAAC,GAAG,GAAG,GAAG,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;QACF,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5B,UAAU,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,6DAA6D;QAC7D,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACvC,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;4BAAE,QAAQ,GAAG,IAAI,CAAC;wBAC7C,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YACD,iCAAiC;YACjC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,QAAQ,GAAG,IAAI,CAAC;oBAC7C,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC;gBACnC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,eAAe,GAAG,qBAAqB,QAAQ,CAAC,OAAO,EAAE;qBACnE,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,kEAAkE;oBAClE,oEAAoE;oBACpE,0CAA0C;oBAC1C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;oBAC1C,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;wBACvC,MAAM;4BACJ,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,eAAe,GAAG,WAAW,QAAQ,KAAK,UAAU,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE;yBACtF,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,qEAAqE;wBACrE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC;oBAChE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}