Add headless Claude Code (Opus/Sonnet) as a delegation-lane Producer - #37

🏁 Script executed:

#!/bin/bash
set -euo pipefail

rg -n -C 5 \
  'CLAUDE_REQUIRED_ENV|ANTHROPIC_BASE_URL|endpoint|local provider|provider' \
  src/producers/claude-adapter.ts \
  tests/runtime/claude-adapter.test.ts \
  || true

Repository: PyModel/claude-architect

Length of output: 3915

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- applicable repository conventions ---'
for f in /tmp/coderabbit-repo-knowledge/pymodel-claude-architect-d6e41926/*/*.md; do
  [ -f "$f" ] || continue
  case "$f" in
    */*.md) printf '\n### %s\n' "$f"; head -80 "$f";;
  esac
done

printf '%s\n' '--- Claude adapter ---'
cat -n src/producers/claude-adapter.ts | sed -n '1,225p'

printf '%s\n' '--- Claude tests: configuration and invocation assertions ---'
cat -n tests/runtime/claude-adapter.test.ts | sed -n '1,180p'
cat -n tests/runtime/claude-adapter.test.ts | sed -n '330,430p'

printf '%s\n' '--- repository-owned Claude endpoint/config references ---'
rg -n -C 3 \
  'Claude Code|claude-adapter|ANTHROPIC_BASE_URL|ANTHROPIC_API_KEY|CLAUDE_CONFIG_DIR|local provider|endpoint|model service' \
  docs src tests README.md package.json 2>/dev/null || true

Repository: PyModel/claude-architect

Length of output: 50383

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- environment policy contract ---'
ast-grep outline src/runtime/environment-policy.ts
cat -n src/runtime/environment-policy.ts | sed -n '1,240p'

printf '%s\n' '--- invocation environment construction and Producer contract ---'
rg -n -C 8 \
  'requiredEnv|buildEnvironment|environmentDependencies|ANTHROPIC_BASE_URL|CLAUDE_CONFIG_DIR|ANTHROPIC_API_KEY' \
  src/runtime src/producers tests/runtime/claude-adapter.test.ts

printf '%s\n' '--- privacy statement ---'
cat -n docs/PRIVACY.md | sed -n '1,45p'

Repository: PyModel/claude-architect

Length of output: 50380

🌐 Web query:

Claude Code official documentation ANTHROPIC_BASE_URL local endpoint configuration headless -p

💡 Result:

To configure Claude Code to use a local or custom endpoint, you must set the ANTHROPIC_BASE_URL environment variable to your desired host [1][2][3]. When routing to a custom host, you may also need to configure credentials via ANTHROPIC_AUTH_TOKEN (used for bearer-token-based authentication) or ensure ANTHROPIC_API_KEY is set appropriately, depending on your target endpoint's requirements [2][4][5]. For many local model servers (like Ollama), it is common to set ANTHROPIC_API_KEY to an empty string to ensure the SDK prioritizes the custom base URL and authentication token [5][6][7]. Configuration options: 1. Shell Environment Variables: You can export these variables in your shell (e.g., ~/.zshrc or ~/.bashrc) for session-specific or persistent shell use [2][3]. bash export ANTHROPIC_BASE_URL=http://localhost:11434 export ANTHROPIC_AUTH_TOKEN=your-token export ANTHROPIC_API_KEY="" 2. Settings File: For persistence across all Claude Code runs (including background agents), add the configuration to the env block in your Claude Code settings file [2]. json { "env": { "ANTHROPIC_BASE_URL": "http://localhost:11434", "ANTHROPIC_AUTH_TOKEN": "your-token" } } Considerations for headless or custom environments: - Disabling Telemetry: In fully headless or offline scenarios, it is recommended to set CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1 to prevent the CLI from attempting to reach Anthropic servers for telemetry or updates [8][7]. - Headless Operation: Claude Code can be run in non-interactive modes using the -p (prompt) flag or by piping input, which is suitable for automated or headless workflows [4][9]. - Gateway Features: When ANTHROPIC_BASE_URL is set to a non-first-party host, certain features like MCP tool search are disabled by default [1]. You can enable specific features if your proxy/gateway supports them by setting variables such as ENABLE_TOOL_SEARCH=true [1]. - Precedence: If both shell exports and settings-file env blocks are present, settings-file values take precedence [2]. You can verify the active configuration at any time by running the /status command within the Claude Code interface [2].

Citations:

• 1: https://code.claude.com/docs/en/env-vars
• 2: https://code.claude.com/docs/en/llm-gateway-connect
• 3: https://docs.docker.com/guides/claude-code-model-runner/
• 4: https://code.claude.com/docs/en/authentication
• 5: https://www.runlocalai.co/guides/claude-code-with-local-models
• 6: https://cloudandsre.com/blog/claude-code-local-models/
• 7: https://app.stationx.net/articles/claude-code-ollama
• 8: https://rizz.dev/blog/guides/claude-code-local-models
• 9: https://docs.docker.com/ai/sandboxes/agents/claude-code

• docs/MARKETPLACE_REVIEW.md#L30-L30 (this comment)
• docs/PRIVACY.md#L22-L22

🏁 Script executed:

#!/bin/bash
# Claim to verify: adapter deps.env reaches inheritedStateWritablePaths unsanitized from process.env.
set -euo pipefail

# Where are adapters constructed, and what env is passed?
rg -nP -C 6 '\bnew (Agy|Pi|OpenCode|Pythinker|Claude)Adapter\b' --type=ts -g '!tests/**'

# Does anything filter/allowlist env before producer construction?
rg -nP -C 4 '(allowlist|sanitiz|filterEnv|scrubEnv)' --type=ts src/

# Confirm the pythinker home is returned verbatim.
ast-grep run --pattern 'function resolvePythinkerHome($$$) { $$$ }' --lang typescript src/producers/pythinker-adapter.ts

# Confirm no validation exists between declaration and profile emission.
rg -nP -C 3 'inheritedStateWritablePaths|isAbsolute|normalize' --type=ts src/platform/sandbox/ src/producers/

Repository: PyModel/claude-architect

Length of output: 162

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- repository convention scope ---'
find /tmp/coderabbit-repo-knowledge/pymodel-claude-architect-d6e41926 -maxdepth 2 -type f -name '*.md' -print
printf '%s\n' '--- candidate files ---'
git ls-files | rg '(^|/)(seatbelt\.ts|agy-adapter\.ts|pi-adapter\.ts|opencode-adapter\.ts|pythinker-adapter\.ts)$'
printf '%s\n' '--- seatbelt definitions and nearby flow ---'
rg -n -C 12 'inheritedStateWritablePaths|function buildProfile|function inheritedStateWritablePaths|class .*Adapter|new .*Adapter|deps\.env|process\.env' src/platform/sandbox/ src/producers/ src/ --glob '*.ts'

Repository: PyModel/claude-architect

Length of output: 50381

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- applicable conventions ---'
cat /tmp/coderabbit-repo-knowledge/pymodel-claude-architect-d6e41926/conventions/src-platform.md
cat /tmp/coderabbit-repo-knowledge/pymodel-claude-architect-d6e41926/conventions/src-producers.md

printf '%s\n' '--- seatbelt profile construction ---'
cat -n src/platform/sandbox/seatbelt.ts | sed -n '1,125p'

printf '%s\n' '--- registry and invocation boundary ---'
cat -n src/producers/producer-registry.ts
rg -n -C 8 'buildInvocation\(|wrapInvocationWithSeatbelt|registry\.get|registry\.all' src --glob '*.ts'

Repository: PyModel/claude-architect

Length of output: 30249

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- Pythinker configuration profile ---'
cat -n src/producers/pythinker-adapter.ts | sed -n '80,190p'

printf '%s\n' '--- temporary-home decision and seatbelt eligibility ---'
rg -n -C 12 'function shouldUseTemporaryHome|shouldUseTemporaryHome\(|configurationProfile\(\)' src/runtime src/pipeline src/producers --glob '*.ts'

Repository: PyModel/claude-architect

Length of output: 20559

🌐 Web query:

Apple sandbox-exec Seatbelt profile deny file-write then allow file-write subpath rule precedence

💡 Result:

In Apple's Seatbelt (Sandbox Profile Language, or SBPL), rule precedence follows a "last-match-wins" semantics [1][2][3][4]. When the sandbox evaluator checks an operation, it processes the rules in the order they are defined; if multiple rules match the operation and filter (e.g., a file path), the rule that appears latest in the profile takes precedence [1][5][6][4]. Therefore, if you have an allow rule for a subpath followed by a deny rule, or vice versa, the relative ordering determines the outcome: 1. Deny Overrides Allow: If an (allow file-write* (subpath "/some/path")) is followed by a (deny file-write* (subpath "/some/path/restricted")), the deny rule will take precedence for the restricted subpath because it appears later in the profile [1][7][8]. This is a common pattern used to carve out exceptions from broader allowed directories [8][9]. 2. Allow Overrides Deny: Conversely, if you place an (allow ...) rule after a (deny ...) rule for the same operation and path, the allow rule will take precedence [3][6][4]. Key considerations for implementation include: - Default Stance: Profiles typically start with a (deny default) stance [2][3][10]. Explicit allow rules are then layered on top to grant necessary permissions, followed by explicit deny rules to override those permissions where needed [2][7][9]. - Rule Specificity: While last-match-wins is the governing principle, it applies to rules that match the same operation [1][4]. If a broader rule is defined later in the file, it will override a more specific rule defined earlier [1]. - Unfiltered Rules: Be aware that rules without filters do not necessarily interact with filtered rules in the same intuitive way as path-based rules [1]. In practice, developers often group baseline allow rules first, followed by policy-derived allow rules, and place mandatory or specific deny rules at the very end of the profile to ensure they are not inadvertently overridden by earlier logic [2][7][9].

Citations:

• 1: https://github.com/microsoft/mxc/blob/main/docs/macos-support/seatbelt-backend.md
• 2: https://github.com/microsoft/mxc/blob/895738db0c888ccb88f3d7815e71ec1954a7d86b/src/backends/seatbelt/common/src/profile_builder.rs
• 3: https://northpole.security/docs/workshop/rules/sandbox-rules
• 4: https://sechub.in/view/3007758
• 5: https://lucaswiman.github.io/blog/2023-06-04--macos-sandbox/
• 6: https://ubrigens.com/posts/sandbox_coverage.html
• 7: https://github.com/anthropic-experimental/sandbox-runtime/blob/main/src/sandbox/macos-sandbox-utils.ts
• 8: https://deepwiki.com/anthropic-experimental/sandbox-runtime/8.3-write-restrictions
• 9: GitHub issue 62404 in anthropics/claude-code (link omitted to avoid creating a cross-reference)
• 10: https://ar5iv.labs.arxiv.org/html/1608.04303

🏁 Script executed:

printf '%s\n' '--- applicable repository conventions ---'
find /tmp/coderabbit-repo-knowledge/pymodel-claude-architect-d6e41926 -type f -name '*.md' -print
printf '%s\n' '--- adapter outline ---'
ast-grep outline src/producers/claude-adapter.ts
printf '%s\n' '--- probe and invocation references ---'
rg -n -C 8 'probeOsConfinedCli|inspectSurface|buildInvocation|strict-mcp-config|setting-sources|no-session-persistence' src/producers/claude-adapter.ts src

Repository: PyModel/claude-architect

Length of output: 37808

🏁 Script executed:

printf '%s\n' '--- producer conventions ---'
cat /tmp/coderabbit-repo-knowledge/pymodel-claude-architect-d6e41926/conventions/src-producers.md
printf '%s\n' '--- Claude adapter ---'
sed -n '90,145p' src/producers/claude-adapter.ts
printf '%s\n' '--- shared probe implementation ---'
sed -n '1,145p' src/producers/cli-probe.ts
printf '%s\n' '--- surface-probe precedent and tests ---'
sed -n '100,135p' src/producers/pythinker-adapter.ts
rg -n -C 6 'unsupported-cli-surface|inspectSurface|strict-mcp-config|no-session-persistence|setting-sources' test* src

Repository: PyModel/claude-architect

Length of output: 18670

🏁 Script executed:

printf '%s\n' '--- Claude probe tests ---'
sed -n '1,230p' tests/runtime/claude-adapter.test.ts
printf '%s\n' '--- preflight and invocation flow ---'
sed -n '140,205p' src/runtime/producer-preflight.ts
sed -n '600,670p' src/runtime/attempt-runtime.ts

Repository: PyModel/claude-architect

Length of output: 12093

• src/producers/opencode-adapter.ts#L49-L65 (this comment)
• tests/runtime/opencode-adapter.test.ts#L468-L479