claude-code-tools 1.14.2__tar.gz → 1.16.0__tar.gz

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/.gitignore

@@ -175,7 +175,9 @@ hooks/settings.json
 .env*
 node_modules/
 package-lock.json
+!node_ui/package-lock.json
 !docs-site/package-lock.json
+!plugins/dynamic-workflow/package-lock.json
 
 # Backup files
 *.backup*

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: claude-code-tools
-Version: 1.14.2
+Version: 1.16.0
 Summary: Collection of tools for working with Claude Code
 License-File: LICENSE
 Requires-Python: >=3.11
@@ -34,6 +34,8 @@ Description-Content-Type: text/markdown
 CLI tools, skills, agents, hooks, and plugins for enhancing productivity with Claude Code and other coding agents.
 
 [![Documentation](https://img.shields.io/badge/%F0%9F%93%96-documentation-blue)](https://pchalasani.github.io/claude-code-tools/)
+[![claude-code-tools on PyPI](https://img.shields.io/pypi/v/claude-code-tools?label=claude-code-tools&color=blue)](https://pypi.org/project/claude-code-tools/)
+[![claude-code-tools installs/week](https://img.shields.io/pypi/dw/claude-code-tools?label=installs&color=2563eb)](https://pypistats.org/packages/claude-code-tools)
 [![aichat-search](https://img.shields.io/crates/v/aichat-search?label=aichat-search&color=orange)](https://crates.io/crates/aichat-search)
 [![Mentioned in Awesome Codex CLI](https://awesome.re/mentioned-badge.svg)](https://github.com/RoggeOhta/awesome-codex-cli)
 
@@ -64,14 +66,78 @@ separate Rust binary:
   [Releases](https://github.com/pchalasani/claude-code-tools/releases)
   (look for `rust-v*`)
 
-Install the Claude Code
-[plugins](https://pchalasani.github.io/claude-code-tools/getting-started/plugins/)
-for hooks, skills, and agents:
+Install the Claude Code workflow plugin:
 
 ```bash
 claude plugin marketplace add pchalasani/claude-code-tools
+claude plugin install workflow@cctools-plugins
 ```
 
+Install the equivalent dynamic workflow plugin for Codex:
+
+```bash
+codex plugin marketplace add pchalasani/claude-code-tools
+codex plugin add dynamic-workflow@cctools-codex-plugins
+```
+
+The Codex plugin installs independently: it does not require the Python
+`claude-code-tools` package or an npm install. Node.js 20 or newer and Codex
+CLI 0.136.0 or newer are required for callbacks. Version 0.136.0 is the first
+compatible CLI release for this callback protocol. Codex still marks the app
+server and remote TUI interfaces as experimental, so those surfaces may evolve.
+The plugin can notify the originating Codex thread through Codex's shared app
+server after a detached workflow finishes. Callback preflight also rejects a
+stale connected server.
+
+The optional Python package makes that callback setup a single command:
+
+```bash
+codex-dynamic
+# Or continue the latest conversation:
+codex-dynamic resume --last
+```
+
+`codex-dynamic` starts or reuses the local app server and then hands the
+terminal directly to Codex. Use `codex-server status` or `logs` for
+nondisruptive inspection. A forced stop or restart disconnects every attached
+TUI, so exit those sessions before running `codex-server stop --force` or
+`codex-server restart --force` from an ordinary terminal.
+
+The Python package also installs `codex-workflows`, an observational dashboard
+for durable workflow runs:
+
+```bash
+codex-workflows
+codex-workflows watch --limit 20
+codex-workflows show RUN_ID
+codex-workflows --all
+```
+
+The default list contains only active workflows. Use `--all` to include
+completed and diagnostic history. The command reads durable workflow state and
+process metadata. It never changes a run, sends a signal, repairs state, or
+launches an agent. See the
+[codex-workflows reference][codex-workflows-reference] for filters, JSON output,
+and the complete versioned schema.
+
+[codex-workflows-reference]:
+  //pchalasani.github.io/claude-code-tools/tools/codex-dynamic/#observe-workflow-runs
+
+Server management and passive supervision add no model calls. Completion
+reporting starts a new turn only while the thread is idle; otherwise it steers
+and extends the active turn. Either reporting path consumes model tokens.
+
+Each workflow `run` or `resume` uses narrow host execution for that exact
+reviewed supervisor command. The workflow JavaScript remains restricted, and
+every headless Codex worker keeps its declared sandbox.
+
+See the
+[Claude → Codex migration guide][claude-to-codex-guide]
+for usage and workflow-porting instructions.
+
+[claude-to-codex-guide]:
+  https://pchalasani.github.io/claude-code-tools/guides/claude-to-codex/
+
 ---
 
 Click a card to jump to that feature, or
@@ -169,6 +235,16 @@ Click a card to jump to that feature, or
 <img src="assets/card-session-repair.svg" alt="session repair" width="200"/>
 </a>
 </td>
+<td align="center">
+<a href="https://pchalasani.github.io/claude-code-tools/tools/sasy-guard/">
+<img src="assets/card-sasy-guard.svg" alt="sasy-guard" width="200"/>
+</a>
+</td>
+<td align="center">
+<a href="https://pchalasani.github.io/claude-code-tools/guides/claude-to-codex/">
+<img src="assets/card-claude-to-codex.svg" alt="Claude to Codex" width="200"/>
+</a>
+</td>
 </tr>
 </table>
 

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/README.md

@@ -8,6 +8,8 @@
 CLI tools, skills, agents, hooks, and plugins for enhancing productivity with Claude Code and other coding agents.
 
 [![Documentation](https://img.shields.io/badge/%F0%9F%93%96-documentation-blue)](https://pchalasani.github.io/claude-code-tools/)
+[![claude-code-tools on PyPI](https://img.shields.io/pypi/v/claude-code-tools?label=claude-code-tools&color=blue)](https://pypi.org/project/claude-code-tools/)
+[![claude-code-tools installs/week](https://img.shields.io/pypi/dw/claude-code-tools?label=installs&color=2563eb)](https://pypistats.org/packages/claude-code-tools)
 [![aichat-search](https://img.shields.io/crates/v/aichat-search?label=aichat-search&color=orange)](https://crates.io/crates/aichat-search)
 [![Mentioned in Awesome Codex CLI](https://awesome.re/mentioned-badge.svg)](https://github.com/RoggeOhta/awesome-codex-cli)
 
@@ -38,14 +40,78 @@ separate Rust binary:
   [Releases](https://github.com/pchalasani/claude-code-tools/releases)
   (look for `rust-v*`)
 
-Install the Claude Code
-[plugins](https://pchalasani.github.io/claude-code-tools/getting-started/plugins/)
-for hooks, skills, and agents:
+Install the Claude Code workflow plugin:
 
 ```bash
 claude plugin marketplace add pchalasani/claude-code-tools
+claude plugin install workflow@cctools-plugins
 ```
 
+Install the equivalent dynamic workflow plugin for Codex:
+
+```bash
+codex plugin marketplace add pchalasani/claude-code-tools
+codex plugin add dynamic-workflow@cctools-codex-plugins
+```
+
+The Codex plugin installs independently: it does not require the Python
+`claude-code-tools` package or an npm install. Node.js 20 or newer and Codex
+CLI 0.136.0 or newer are required for callbacks. Version 0.136.0 is the first
+compatible CLI release for this callback protocol. Codex still marks the app
+server and remote TUI interfaces as experimental, so those surfaces may evolve.
+The plugin can notify the originating Codex thread through Codex's shared app
+server after a detached workflow finishes. Callback preflight also rejects a
+stale connected server.
+
+The optional Python package makes that callback setup a single command:
+
+```bash
+codex-dynamic
+# Or continue the latest conversation:
+codex-dynamic resume --last
+```
+
+`codex-dynamic` starts or reuses the local app server and then hands the
+terminal directly to Codex. Use `codex-server status` or `logs` for
+nondisruptive inspection. A forced stop or restart disconnects every attached
+TUI, so exit those sessions before running `codex-server stop --force` or
+`codex-server restart --force` from an ordinary terminal.
+
+The Python package also installs `codex-workflows`, an observational dashboard
+for durable workflow runs:
+
+```bash
+codex-workflows
+codex-workflows watch --limit 20
+codex-workflows show RUN_ID
+codex-workflows --all
+```
+
+The default list contains only active workflows. Use `--all` to include
+completed and diagnostic history. The command reads durable workflow state and
+process metadata. It never changes a run, sends a signal, repairs state, or
+launches an agent. See the
+[codex-workflows reference][codex-workflows-reference] for filters, JSON output,
+and the complete versioned schema.
+
+[codex-workflows-reference]:
+  //pchalasani.github.io/claude-code-tools/tools/codex-dynamic/#observe-workflow-runs
+
+Server management and passive supervision add no model calls. Completion
+reporting starts a new turn only while the thread is idle; otherwise it steers
+and extends the active turn. Either reporting path consumes model tokens.
+
+Each workflow `run` or `resume` uses narrow host execution for that exact
+reviewed supervisor command. The workflow JavaScript remains restricted, and
+every headless Codex worker keeps its declared sandbox.
+
+See the
+[Claude → Codex migration guide][claude-to-codex-guide]
+for usage and workflow-porting instructions.
+
+[claude-to-codex-guide]:
+  https://pchalasani.github.io/claude-code-tools/guides/claude-to-codex/
+
 ---
 
 Click a card to jump to that feature, or
@@ -143,6 +209,16 @@ Click a card to jump to that feature, or
 <img src="assets/card-session-repair.svg" alt="session repair" width="200"/>
 </a>
 </td>
+<td align="center">
+<a href="https://pchalasani.github.io/claude-code-tools/tools/sasy-guard/">
+<img src="assets/card-sasy-guard.svg" alt="sasy-guard" width="200"/>
+</a>
+</td>
+<td align="center">
+<a href="https://pchalasani.github.io/claude-code-tools/guides/claude-to-codex/">
+<img src="assets/card-claude-to-codex.svg" alt="Claude to Codex" width="200"/>
+</a>
+</td>
 </tr>
 </table>
 

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/claude_code_tools/__init__.py

@@ -1,3 +1,3 @@
 """Claude Code Tools - Collection of utilities for Claude Code."""
 
-__version__ = "1.14.2"
+__version__ = "1.16.0"

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/claude_code_tools/agent_tunnel/backends.py

@@ -56,6 +56,10 @@ from .trust import (
     trust_config_path_for,
 )
 
+# Auth env vars that override the claude.ai login; stripped from fork envs so
+# forks run under the session owner's subscription (see claude.unset_api_key).
+AUTH_OVERRIDE_VARS = ("ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN")
+
 
 class BackendError(RuntimeError):
     """Answering a question failed; message is user-presentable."""
@@ -234,10 +238,15 @@ class _BaseBackend:
         return Path(rec.config_dir) if rec.config_dir else self.cfg.claude_home
 
     def _env(self, rec: ThreadRecord) -> dict[str, str]:
-        """Subprocess env with CLAUDE_CONFIG_DIR pinned to the session's dir."""
+        """Subprocess env: CLAUDE_CONFIG_DIR pinned to the session's dir, and
+        (by default) API-key auth stripped so the fork uses the owner's
+        claude.ai login rather than an API key."""
         env = dict(os.environ)
         if rec.config_dir:
             env["CLAUDE_CONFIG_DIR"] = rec.config_dir
+        if self.cfg.claude.unset_api_key:
+            for var in AUTH_OVERRIDE_VARS:
+                env.pop(var, None)
         return env
 
     def _state_dir(self) -> Path:
@@ -456,8 +465,14 @@ class TmuxBackend(_BaseBackend):
             # flag (which would make claude die at launch with "invalid
             # option"). Verified: `claude … -- "- text"` submits "- text".
             argv += ["--", initial_prompt]
+        prefix: list[str] = []
+        if self.cfg.claude.unset_api_key:
+            for var in AUTH_OVERRIDE_VARS:
+                prefix += ["-u", var]
         if config_dir:
-            argv = ["env", f"CLAUDE_CONFIG_DIR={config_dir}", *argv]
+            prefix.append(f"CLAUDE_CONFIG_DIR={config_dir}")
+        if prefix:
+            argv = ["env", *prefix, *argv]
         if self.cfg.claude.auto_trust:
             self._pretrust(project_dir, config_dir)
         self.tmux.kill_window(window)

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/claude_code_tools/agent_tunnel/config.py

@@ -105,6 +105,12 @@ class ClaudeConfig:
     # Override the config file holding trust state (default: ~/.claude.json,
     # honoring CLAUDE_CONFIG_DIR).
     trust_config_path: str = ""
+    # Strip ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN from the fork's env so it
+    # authenticates with the session owner's claude.ai login (subscription),
+    # not an API key — otherwise a stray key set for the daemon makes forks
+    # use API billing (and can break: "connectors are disabled…"). Set false
+    # to let forks use whatever auth the daemon has.
+    unset_api_key: bool = True
     # Opt-in gate for the "all" access level (>share
     # --dangerously-skip-permissions): only when true do those forks launch
     # with --dangerously-skip-permissions (any tool/MCP, no prompts). Off by
@@ -327,6 +333,9 @@ tmux_extra_args = []
 # Pre-trust a shared folder in ~/.claude.json before forking (tmux backend),
 # so the fork doesn't hit the "trust this folder?" dialog. false = don't touch.
 auto_trust = true
+# Strip ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN from forks so they use your
+# claude.ai subscription login, not an API key. false = inherit the daemon's.
+unset_api_key = true
 # DANGEROUS: enable the "all" access level (>share
 # --dangerously-skip-permissions). Those forks run with
 # --dangerously-skip-permissions — a colleague's agent can then use ANY tool

{claude_code_tools-1.14.2 → claude_code_tools-1.16.0}/claude_code_tools/aichat.py

@@ -643,6 +643,145 @@ def trim(session, tools, threshold, trim_assistant, output_dir, agent, claude_ho
     )
 
 
+class _JsonContractCommand(click.Command):
+    """Command whose ``--json`` flag guarantees single-line JSON output.
+
+    Click option/argument parsing failures (bad ``--len``, non-integer
+    ``--trim-assistant``, missing argument, ...) normally print usage
+    text and exit 2 BEFORE the command body runs. Scripts (e.g. the
+    aichat plugin's ``>trim`` hook) depend on ``--json`` emitting
+    exactly one JSON line - the result or ``{"error": msg}`` with exit
+    code 1 - so when ``--json`` is among the raw args, parse errors are
+    converted to that contract instead of Click usage text.
+    """
+
+    def parse_args(self, ctx, args):
+        raw_args = list(args)
+        try:
+            return super().parse_args(ctx, args)
+        except click.UsageError as e:
+            if "--json" in raw_args:
+                import json as json_mod
+
+                click.echo(json_mod.dumps({"error": e.format_message()}))
+                ctx.exit(1)
+            raise
+
+
+@main.command("trim-in-place", cls=_JsonContractCommand)
+@click.argument("session", required=True)
+@click.option("--tools", "-t",
+              help="Comma-separated tools to trim (e.g., 'bash,read,edit'). "
+                   "Default: all tools.")
+@click.option("--len", "-l", "threshold", type=click.IntRange(min=1),
+              default=500,
+              help="Minimum length threshold in chars for trimming (default: 500)")
+@click.option("--trim-assistant", "-a", "trim_assistant", type=int,
+              help="Trim assistant messages: positive N trims first N over threshold, "
+                   "negative N trims all except last |N| over threshold")
+@click.option("--dry-run", "-n", is_flag=True,
+              help="Compute savings without modifying the session file")
+@click.option("--json", "json_output", is_flag=True,
+              help="Print a single-line JSON result (for scripts/hooks)")
+@click.option("--claude-home", help="Path to Claude home directory")
+def trim_in_place_cmd(session, tools, threshold, trim_assistant, dry_run,
+                      json_output, claude_home):
+    """Trim a session file IN PLACE (keeps the same session ID).
+
+    Unlike `aichat trim` (which creates a new trimmed session file), this
+    rewrites the original file so the session keeps its identity: the next
+    time the same session is resumed it loads the trimmed transcript. A
+    timestamped backup (<id>.pre-trim-<ts>.jsonl.bak) is saved next to the
+    session file; truncation placeholders reference it.
+
+    This powers the `>trim` in-session trigger of the aichat plugin, and
+    can also be used directly on any Claude session.
+
+    \b
+    Examples:
+        aichat trim-in-place abc123 --dry-run     # Preview tokens saved
+        aichat trim-in-place abc123               # Trim with defaults
+        aichat trim-in-place abc123 -a -20        # Keep last 20 long asst msgs
+        aichat trim-in-place abc123 -t bash -l 1000
+    """
+    import json as json_mod
+    import sys
+    from pathlib import Path
+
+    from claude_code_tools.session_utils import resolve_session_path
+    from claude_code_tools.trim_in_place import trim_session_in_place
+
+    def emit_error(msg: str) -> None:
+        if json_output:
+            print(json_mod.dumps({"error": msg}))
+        else:
+            print(f"Error: {msg}", file=sys.stderr)
+        sys.exit(1)
+
+    try:
+        session_file = resolve_session_path(session, claude_home)
+    except SystemExit:
+        # resolve_session_path() exits directly (SystemExit is NOT an
+        # Exception) for ambiguous partial ids, after listing the
+        # matches on stderr. Under --json, convert that to the
+        # contractual single {"error": ...} stdout line.
+        if not json_output:
+            raise
+        emit_error(
+            f"Multiple sessions match '{session}'. "
+            f"Use a more specific session ID."
+        )
+    except Exception as e:
+        # SESSION comes from the CLI/hook and may be hostile (e.g. a
+        # path long enough to raise ENAMETOOLONG): keep the --json
+        # single-line contract for any resolution failure.
+        emit_error(str(e) or type(e).__name__)
+
+    target_tools = None
+    if tools:
+        target_tools = {
+            t.strip().lower() for t in tools.split(",") if t.strip()
+        }
+
+    try:
+        result = trim_session_in_place(
+            Path(session_file),
+            target_tools=target_tools,
+            threshold=threshold,
+            trim_assistant_messages=trim_assistant,
+            dry_run=dry_run,
+        )
+    except Exception as e:
+        # Session files are hostile input: ANY unexpected exception
+        # must become the contractual single JSON error line under
+        # --json (never a traceback).
+        emit_error(str(e) or type(e).__name__)
+
+    if json_output:
+        print(json_mod.dumps(result))
+        return
+
+    verb = "Would save" if dry_run or not result["applied"] else "Saved"
+    print(f"Session: {result['session_file']}")
+    print(
+        f"{verb} ~{result['tokens_saved']:,} tokens "
+        f"({result['chars_saved']:,} chars); "
+        f"{result['num_tools_trimmed']} tool results and "
+        f"{result['num_assistant_trimmed']} assistant messages trimmed"
+    )
+    if result["nothing_to_trim"]:
+        print("Savings too small - session left unchanged.")
+    elif result["applied"]:
+        print(f"Backup: {result['backup_file']}")
+        print(
+            f"File size: {result['size_before']:,} -> "
+            f"{result['size_after']:,} bytes"
+        )
+        print(
+            "Savings take effect the next time this session is resumed."
+        )
+
+
 @main.command("smart-trim")
 @click.argument("session", required=False)
 @click.option("--instructions", "-i",