- Isolate Claude sessions per-group (data/sessions/{group}/.claude/)
to prevent cross-group access to conversation history
- Remove Gmail MCP from built-in (now available via /add-gmail skill)
- Add SECURITY.md documenting the security model
- Move docs to docs/ folder (SPEC.md, REQUIREMENTS.md, SECURITY.md)
- Update documentation to reflect changes
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
290 lines
7.8 KiB
TypeScript
290 lines
7.8 KiB
TypeScript
/**
|
|
* NanoClaw Agent Runner
|
|
* Runs inside a container, receives config via stdin, outputs result to stdout
|
|
*/
|
|
|
|
import fs from 'fs';
|
|
import path from 'path';
|
|
import { query, HookCallback, PreCompactHookInput } from '@anthropic-ai/claude-agent-sdk';
|
|
import { createIpcMcp } from './ipc-mcp.js';
|
|
|
|
interface ContainerInput {
|
|
prompt: string;
|
|
sessionId?: string;
|
|
groupFolder: string;
|
|
chatJid: string;
|
|
isMain: boolean;
|
|
isScheduledTask?: boolean;
|
|
}
|
|
|
|
interface ContainerOutput {
|
|
status: 'success' | 'error';
|
|
result: string | null;
|
|
newSessionId?: string;
|
|
error?: string;
|
|
}
|
|
|
|
interface SessionEntry {
|
|
sessionId: string;
|
|
fullPath: string;
|
|
summary: string;
|
|
firstPrompt: string;
|
|
}
|
|
|
|
interface SessionsIndex {
|
|
entries: SessionEntry[];
|
|
}
|
|
|
|
async function readStdin(): Promise<string> {
|
|
return new Promise((resolve, reject) => {
|
|
let data = '';
|
|
process.stdin.setEncoding('utf8');
|
|
process.stdin.on('data', chunk => { data += chunk; });
|
|
process.stdin.on('end', () => resolve(data));
|
|
process.stdin.on('error', reject);
|
|
});
|
|
}
|
|
|
|
const OUTPUT_START_MARKER = '---NANOCLAW_OUTPUT_START---';
|
|
const OUTPUT_END_MARKER = '---NANOCLAW_OUTPUT_END---';
|
|
|
|
function writeOutput(output: ContainerOutput): void {
|
|
console.log(OUTPUT_START_MARKER);
|
|
console.log(JSON.stringify(output));
|
|
console.log(OUTPUT_END_MARKER);
|
|
}
|
|
|
|
function log(message: string): void {
|
|
console.error(`[agent-runner] ${message}`);
|
|
}
|
|
|
|
function getSessionSummary(sessionId: string, transcriptPath: string): string | null {
|
|
// sessions-index.json is in the same directory as the transcript
|
|
const projectDir = path.dirname(transcriptPath);
|
|
const indexPath = path.join(projectDir, 'sessions-index.json');
|
|
|
|
if (!fs.existsSync(indexPath)) {
|
|
log(`Sessions index not found at ${indexPath}`);
|
|
return null;
|
|
}
|
|
|
|
try {
|
|
const index: SessionsIndex = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
|
|
const entry = index.entries.find(e => e.sessionId === sessionId);
|
|
if (entry?.summary) {
|
|
return entry.summary;
|
|
}
|
|
} catch (err) {
|
|
log(`Failed to read sessions index: ${err instanceof Error ? err.message : String(err)}`);
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* Archive the full transcript to conversations/ before compaction.
|
|
*/
|
|
function createPreCompactHook(): HookCallback {
|
|
return async (input, _toolUseId, _context) => {
|
|
const preCompact = input as PreCompactHookInput;
|
|
const transcriptPath = preCompact.transcript_path;
|
|
const sessionId = preCompact.session_id;
|
|
|
|
if (!transcriptPath || !fs.existsSync(transcriptPath)) {
|
|
log('No transcript found for archiving');
|
|
return {};
|
|
}
|
|
|
|
try {
|
|
const content = fs.readFileSync(transcriptPath, 'utf-8');
|
|
const messages = parseTranscript(content);
|
|
|
|
if (messages.length === 0) {
|
|
log('No messages to archive');
|
|
return {};
|
|
}
|
|
|
|
const summary = getSessionSummary(sessionId, transcriptPath);
|
|
const name = summary ? sanitizeFilename(summary) : generateFallbackName();
|
|
|
|
const conversationsDir = '/workspace/group/conversations';
|
|
fs.mkdirSync(conversationsDir, { recursive: true });
|
|
|
|
const date = new Date().toISOString().split('T')[0];
|
|
const filename = `${date}-${name}.md`;
|
|
const filePath = path.join(conversationsDir, filename);
|
|
|
|
const markdown = formatTranscriptMarkdown(messages, summary);
|
|
fs.writeFileSync(filePath, markdown);
|
|
|
|
log(`Archived conversation to ${filePath}`);
|
|
} catch (err) {
|
|
log(`Failed to archive transcript: ${err instanceof Error ? err.message : String(err)}`);
|
|
}
|
|
|
|
return {};
|
|
};
|
|
}
|
|
|
|
function sanitizeFilename(summary: string): string {
|
|
return summary
|
|
.toLowerCase()
|
|
.replace(/[^a-z0-9]+/g, '-')
|
|
.replace(/^-+|-+$/g, '')
|
|
.slice(0, 50);
|
|
}
|
|
|
|
function generateFallbackName(): string {
|
|
const time = new Date();
|
|
return `conversation-${time.getHours().toString().padStart(2, '0')}${time.getMinutes().toString().padStart(2, '0')}`;
|
|
}
|
|
|
|
interface ParsedMessage {
|
|
role: 'user' | 'assistant';
|
|
content: string;
|
|
}
|
|
|
|
function parseTranscript(content: string): ParsedMessage[] {
|
|
const messages: ParsedMessage[] = [];
|
|
|
|
for (const line of content.split('\n')) {
|
|
if (!line.trim()) continue;
|
|
try {
|
|
const entry = JSON.parse(line);
|
|
if (entry.type === 'user' && entry.message?.content) {
|
|
const text = typeof entry.message.content === 'string'
|
|
? entry.message.content
|
|
: entry.message.content.map((c: { text?: string }) => c.text || '').join('');
|
|
if (text) messages.push({ role: 'user', content: text });
|
|
} else if (entry.type === 'assistant' && entry.message?.content) {
|
|
const textParts = entry.message.content
|
|
.filter((c: { type: string }) => c.type === 'text')
|
|
.map((c: { text: string }) => c.text);
|
|
const text = textParts.join('');
|
|
if (text) messages.push({ role: 'assistant', content: text });
|
|
}
|
|
} catch {
|
|
}
|
|
}
|
|
|
|
return messages;
|
|
}
|
|
|
|
function formatTranscriptMarkdown(messages: ParsedMessage[], title?: string | null): string {
|
|
const now = new Date();
|
|
const formatDateTime = (d: Date) => d.toLocaleString('en-US', {
|
|
month: 'short',
|
|
day: 'numeric',
|
|
hour: 'numeric',
|
|
minute: '2-digit',
|
|
hour12: true
|
|
});
|
|
|
|
const lines: string[] = [];
|
|
lines.push(`# ${title || 'Conversation'}`);
|
|
lines.push('');
|
|
lines.push(`Archived: ${formatDateTime(now)}`);
|
|
lines.push('');
|
|
lines.push('---');
|
|
lines.push('');
|
|
|
|
for (const msg of messages) {
|
|
const sender = msg.role === 'user' ? 'User' : 'Andy';
|
|
const content = msg.content.length > 2000
|
|
? msg.content.slice(0, 2000) + '...'
|
|
: msg.content;
|
|
lines.push(`**${sender}**: ${content}`);
|
|
lines.push('');
|
|
}
|
|
|
|
return lines.join('\n');
|
|
}
|
|
|
|
async function main(): Promise<void> {
|
|
let input: ContainerInput;
|
|
|
|
try {
|
|
const stdinData = await readStdin();
|
|
input = JSON.parse(stdinData);
|
|
log(`Received input for group: ${input.groupFolder}`);
|
|
} catch (err) {
|
|
writeOutput({
|
|
status: 'error',
|
|
result: null,
|
|
error: `Failed to parse input: ${err instanceof Error ? err.message : String(err)}`
|
|
});
|
|
process.exit(1);
|
|
}
|
|
|
|
const ipcMcp = createIpcMcp({
|
|
chatJid: input.chatJid,
|
|
groupFolder: input.groupFolder,
|
|
isMain: input.isMain
|
|
});
|
|
|
|
let result: string | null = null;
|
|
let newSessionId: string | undefined;
|
|
|
|
// Add context for scheduled tasks
|
|
let prompt = input.prompt;
|
|
if (input.isScheduledTask) {
|
|
prompt = `[SCHEDULED TASK - You are running automatically, not in response to a user message. Use mcp__nanoclaw__send_message if needed to communicate with the user.]\n\n${input.prompt}`;
|
|
}
|
|
|
|
try {
|
|
log('Starting agent...');
|
|
|
|
for await (const message of query({
|
|
prompt,
|
|
options: {
|
|
cwd: '/workspace/group',
|
|
resume: input.sessionId,
|
|
allowedTools: [
|
|
'Bash',
|
|
'Read', 'Write', 'Edit', 'Glob', 'Grep',
|
|
'WebSearch', 'WebFetch',
|
|
'mcp__nanoclaw__*'
|
|
],
|
|
permissionMode: 'bypassPermissions',
|
|
allowDangerouslySkipPermissions: true,
|
|
settingSources: ['project'],
|
|
mcpServers: {
|
|
nanoclaw: ipcMcp
|
|
},
|
|
hooks: {
|
|
PreCompact: [{ hooks: [createPreCompactHook()] }]
|
|
}
|
|
}
|
|
})) {
|
|
if (message.type === 'system' && message.subtype === 'init') {
|
|
newSessionId = message.session_id;
|
|
log(`Session initialized: ${newSessionId}`);
|
|
}
|
|
|
|
if ('result' in message && message.result) {
|
|
result = message.result as string;
|
|
}
|
|
}
|
|
|
|
log('Agent completed successfully');
|
|
writeOutput({
|
|
status: 'success',
|
|
result,
|
|
newSessionId
|
|
});
|
|
|
|
} catch (err) {
|
|
const errorMessage = err instanceof Error ? err.message : String(err);
|
|
log(`Agent error: ${errorMessage}`);
|
|
writeOutput({
|
|
status: 'error',
|
|
result: null,
|
|
newSessionId,
|
|
error: errorMessage
|
|
});
|
|
process.exit(1);
|
|
}
|
|
}
|
|
|
|
main();
|