jason.woltje
c216f47dbb
Adds the harness plug-in kind (interface 1). packages/plugins/harness/pi and claude-code hold what core branched on: the adapter, thinking levels, preflight, version probe, sandbox mounts, builtins line, typed tool names, gate timeout, bundle files, adapter env, turn end and session-files path. Core reaches a module only through the loader. A session's route is the instance's harness, model and thinking vars, or the three fallback. vars; a missing one refuses no-route, and the system file's execution keys are never read for a session. The launcher checks the primary route, then the fallback: harness-off, harness-refused, thinking-unsupported, then preflight. A failed preflight falls back when a fallback is set, and any refusal of the fallback names the primary's failure too. Account checks run only when the route's module counts an account. The manifest records route, routeReason and harnessVersion, replacing piVersion and claudeVersion. pi gets --thinking, Claude Code --effort, both from MOSAIC_THINKING. The business file refuses a partial fallback. routes and routes.set are human-only bus verbs outside ORGANIZATION_KEYS; checkRoutes is shared by routes.set, instances.set and limits.set and checks only changed routes. The chief of staff changes an instance's model, and the assistant's whole vars (Q169), through limits.set, so its route write runs the same checks. A model outside launch.models refuses unknown-model, primary or fallback, and routes.set passes that code through. A new run binds only on a switched-on harness module name and records its transcript path, which the usage reader uses. Settings gains a Routing table with six selects per instance and loses the Role models fieldset; it posts changed rows to /api/routes. webui/src/bus.mjs is unchanged. Until Jason's `mosaic plugins set` adds "harness": ["claude-code"], a new launch refuses harness-off.
94 lines
4.1 KiB
Bash
94 lines
4.1 KiB
Bash
#!/bin/sh
|
|
# Claude Code adapter: implements the Mosaic adapter contract for the host's
|
|
# `claude` CLI, for managed sessions (slice 1 S6). Headless only. The CLI is
|
|
# MOSAIC_CLAUDE_BIN when set (the bus unit pins it), else `claude` on PATH.
|
|
#
|
|
# Contract: see adapters/README.md.
|
|
# stdout = the turn's answer only; stderr = diagnostics; exit 0 on success.
|
|
#
|
|
# The layers this relies on are row S0 lines 1-5 (docs/plans/2026-10-04_slice-1.md,
|
|
# "What S6 can rely on"): the PreToolUse command hook in MOSAIC_CLAUDE_SETTINGS,
|
|
# wrapped as `timeout -k 2 10 <gate> || exit 2`, and the tool limit (--tools).
|
|
# --bare is never passed: it turns settings hooks off.
|
|
set -eu
|
|
|
|
need() {
|
|
eval "v=\${$1:-}"
|
|
[ -n "$v" ] || { echo "claude adapter: $1 is required" >&2; exit 2; }
|
|
}
|
|
need MOSAIC_SYSTEM_PROMPT_FILE
|
|
need MOSAIC_REQUEST
|
|
need MOSAIC_WORKSPACE
|
|
need MOSAIC_SESSION_DIR
|
|
need MOSAIC_MODEL
|
|
need MOSAIC_THINKING
|
|
need MOSAIC_CLAUDE_SETTINGS
|
|
need MOSAIC_CLAUDE_MCP_CONFIG
|
|
for f in "$MOSAIC_SYSTEM_PROMPT_FILE" "$MOSAIC_CLAUDE_SETTINGS" "$MOSAIC_CLAUDE_MCP_CONFIG"; do
|
|
[ -r "$f" ] || { echo "claude adapter: not readable: $f" >&2; exit 2; }
|
|
done
|
|
[ "${MOSAIC_INTERACTIVE:-}" != "1" ] || { echo "claude adapter: interactive mode isn't supported" >&2; exit 2; }
|
|
CLAUDE=claude
|
|
if [ -n "${MOSAIC_CLAUDE_BIN:-}" ]; then
|
|
case "$MOSAIC_CLAUDE_BIN" in
|
|
/*) ;;
|
|
*) echo "claude adapter: MOSAIC_CLAUDE_BIN must be an absolute path: $MOSAIC_CLAUDE_BIN" >&2; exit 2 ;;
|
|
esac
|
|
[ -f "$MOSAIC_CLAUDE_BIN" ] && [ -x "$MOSAIC_CLAUDE_BIN" ] || { echo "claude adapter: MOSAIC_CLAUDE_BIN is not an executable file: $MOSAIC_CLAUDE_BIN" >&2; exit 2; }
|
|
CLAUDE=$MOSAIC_CLAUDE_BIN
|
|
fi
|
|
|
|
mkdir -p "$MOSAIC_WORKSPACE" "$MOSAIC_SESSION_DIR"
|
|
cd "$MOSAIC_WORKSPACE"
|
|
|
|
# Session: the first turn names a new session id, later turns resume it.
|
|
# The id is kept only after a turn succeeds, so a failed first turn never
|
|
# leaves a --resume of a session that doesn't exist.
|
|
ID_FILE="$MOSAIC_SESSION_DIR/claude-session-id"
|
|
if [ -s "$ID_FILE" ]; then
|
|
SESSION_FLAG=--resume
|
|
SESSION_ID=$(cat "$ID_FILE")
|
|
else
|
|
SESSION_FLAG=--session-id
|
|
SESSION_ID=$(cat /proc/sys/kernel/random/uuid)
|
|
fi
|
|
|
|
# Flags:
|
|
# -p one-shot: print the answer and exit
|
|
# --output-format text stdout is the answer only
|
|
# --system-prompt the generated prompt replaces the default
|
|
# --effort the instance's thinking var (row 65; 2.1.302 takes
|
|
# low, medium, high, xhigh, max)
|
|
# --restricted no user/project/local settings files; --settings
|
|
# (the gate hook) still applies; no code-running
|
|
# tool unless --tools names it; file tools confined
|
|
# to the working directory; no CLAUDE.md file or
|
|
# auto-memory in the prompt. The S0 lines above
|
|
# don't depend on it, but it is what keeps founder
|
|
# and repository memory out; a test fails without it.
|
|
# --tools the built-in tool limit (S0 line 5); empty = none
|
|
# --allowedTools the same tools plus the mosaic MCP server, so
|
|
# --permission-mode dontAsk nothing waits on a prompt and anything else is denied
|
|
# --settings the gate hook (S0 lines 1-4)
|
|
# --strict-mcp-config only the bundle's MCP server, which serves the
|
|
# --mcp-config typed bus tools
|
|
# --disable-slash-commands no skills (the bundle lists none)
|
|
ALLOWED=mcp__mosaic
|
|
[ -z "${MOSAIC_TOOLS:-}" ] || ALLOWED="$MOSAIC_TOOLS,mcp__mosaic"
|
|
PROMPT_CONTENT="$(cat "$MOSAIC_SYSTEM_PROMPT_FILE")"
|
|
"$CLAUDE" -p "$MOSAIC_REQUEST" \
|
|
--output-format text \
|
|
--system-prompt "$PROMPT_CONTENT" \
|
|
--model "$MOSAIC_MODEL" \
|
|
--effort "$MOSAIC_THINKING" \
|
|
--restricted \
|
|
--tools "${MOSAIC_TOOLS:-}" \
|
|
--allowedTools "$ALLOWED" \
|
|
--permission-mode dontAsk \
|
|
--settings "$MOSAIC_CLAUDE_SETTINGS" \
|
|
--strict-mcp-config \
|
|
--mcp-config "$MOSAIC_CLAUDE_MCP_CONFIG" \
|
|
--disable-slash-commands \
|
|
"$SESSION_FLAG" "$SESSION_ID" || exit $?
|
|
[ "$SESSION_FLAG" = --resume ] || printf '%s\n' "$SESSION_ID" > "$ID_FILE"
|