claw-code/PARITY.md

Parity Status — claw-code Rust Port

Last updated: 2026-04-03

Summary

• Canonical document: this top-level PARITY.md is the file consumed by rust/scripts/run_mock_parity_diff.py.
• Requested 9-lane checkpoint: All 9 lanes merged on main.
• Current main HEAD: ee31e00 (stub implementations replaced with real AskUserQuestion + RemoteTrigger).
• Repository stats at this checkpoint: 292 commits on main / 293 across all branches, 9 crates, 48,599 tracked Rust LOC, 2,568 test LOC, 3 authors, date range 2026-03-31 → 2026-04-03.
• Mock parity harness stats: 12 scripted scenarios, 21 captured /v1/messages requests in rust/crates/rusty-claude-cli/tests/mock_parity_harness.rs.
• Claude Code v2.1.201 migration branch note: TaskCreate/TaskUpdate accept the structured subject/activeForm/metadata contract, McpAuth exposes login/logout host-flow payloads, workflows add /workflows, /deep-research, ultracode keyword, and /effort ultracode entry points, and the remaining host-facing contracts (Monitor, ScheduleWakeup, PushNotification, ReportFindings, ReadMcpResourceDir, Artifact, Projects, ClaudeDesign, ShowOnboardingRolePicker) are registered with stable JSON responses.

Mock parity harness — milestone 1

• Deterministic Anthropic-compatible mock service (rust/crates/mock-anthropic-service)
• Reproducible clean-environment CLI harness (rust/crates/rusty-claude-cli/tests/mock_parity_harness.rs)
• Scripted scenarios: streaming_text, read_file_roundtrip, grep_chunk_assembly, write_file_allowed, write_file_denied

Mock parity harness — milestone 2 (behavioral expansion)

• Scripted multi-tool turn coverage: multi_tool_turn_roundtrip
• Scripted bash coverage: bash_stdout_roundtrip
• Scripted permission prompt coverage: bash_permission_prompt_approved, bash_permission_prompt_denied
• Scripted plugin-path coverage: plugin_tool_roundtrip
• Behavioral diff/checklist runner: rust/scripts/run_mock_parity_diff.py
• Scripted session-compaction metadata coverage: auto_compact_triggered
• Scripted token/cost JSON coverage: token_cost_reporting

Harness v2 behavioral checklist

Canonical scenario map: rust/mock_parity_scenarios.json

• Multi-tool assistant turns
• Bash flow roundtrips
• Permission enforcement across tool paths
• Plugin tool execution path
• File tools — harness-validated flows
• Streaming response support validated by the mock parity harness

9-lane checkpoint

Lane	Status	Feature commit	Merge commit	Evidence
1. Bash validation	merged	36dac6c	1cfd78a	jobdori/bash-validation-submodules, rust/crates/runtime/src/bash_validation.rs (+1004 on main)
2. CI fix	merged	89104eb	f1969ce	rust/crates/runtime/src/sandbox.rs (+22/-1)
3. File-tool	merged	284163b	a98f2b6	rust/crates/runtime/src/file_ops.rs (+195/-1)
4. TaskRegistry	merged	5ea138e	21a1e1d	rust/crates/runtime/src/task_registry.rs (+336)
5. Task wiring	merged	e8692e4	d994be6	rust/crates/tools/src/lib.rs (+79/-35)
6. Team+Cron	merged	c486ca6	49653fe	rust/crates/runtime/src/team_cron_registry.rs, rust/crates/tools/src/lib.rs (+441/-37)
7. MCP lifecycle	merged	730667f	cc0f92e	rust/crates/runtime/src/mcp_tool_bridge.rs, rust/crates/tools/src/lib.rs (+491/-24)
8. LSP client	merged	2d66503	d7f0dc6	rust/crates/runtime/src/lsp_client.rs, rust/crates/tools/src/lib.rs (+461/-9)
9. Permission enforcement	merged	66283f4	336f820	rust/crates/runtime/src/permission_enforcer.rs, rust/crates/tools/src/lib.rs (+357)

Lane details

Lane 1 — Bash validation

• Status: merged on main.
• Feature commit: 36dac6c — feat: add bash validation submodules — readOnlyValidation, destructiveCommandWarning, modeValidation, sedValidation, pathValidation, commandSemantics
• Evidence: branch-only diff adds rust/crates/runtime/src/bash_validation.rs and a runtime::lib export (+1005 across 2 files).
• Main-branch reality: rust/crates/runtime/src/bash.rs is still the active on-main implementation at 283 LOC, with timeout/background/sandbox execution. PermissionEnforcer::check_bash() adds read-only gating on main, but the dedicated validation module is not landed.

Bash tool — upstream has 18 submodules, Rust has 1:

• On main, this statement is still materially true.
• Harness coverage proves bash execution and prompt escalation flows, but not the full upstream validation matrix.
• The branch-only lane targets readOnlyValidation, destructiveCommandWarning, modeValidation, sedValidation, pathValidation, and commandSemantics.

Lane 2 — CI fix

• Status: merged on main.
• Feature commit: 89104eb — fix(sandbox): probe unshare capability instead of binary existence
• Merge commit: f1969ce — Merge jobdori/fix-ci-sandbox: probe unshare capability for CI fix
• Evidence: rust/crates/runtime/src/sandbox.rs is 385 LOC and now resolves sandbox support from actual unshare capability and container signals instead of assuming support from binary presence alone.
• Why it matters: .github/workflows/rust-ci.yml runs cargo fmt --all --check and cargo test -p rusty-claude-cli; this lane removed a CI-specific sandbox assumption from runtime behavior.

Lane 3 — File-tool

• Status: merged on main.
• Feature commit: 284163b — feat(file_ops): add edge-case guards — binary detection, size limits, workspace boundary, symlink escape
• Merge commit: a98f2b6 — Merge jobdori/file-tool-edge-cases: binary detection, size limits, workspace boundary guards
• Evidence: rust/crates/runtime/src/file_ops.rs is 744 LOC and now includes MAX_READ_SIZE, MAX_WRITE_SIZE, NUL-byte binary detection, and canonical workspace-boundary validation.
• Harness coverage: read_file_roundtrip, grep_chunk_assembly, write_file_allowed, and write_file_denied are in the manifest and exercised by the clean-env harness.

File tools — harness-validated flows

• read_file_roundtrip checks read-path execution and final synthesis.
• grep_chunk_assembly checks chunked grep tool output handling.
• write_file_allowed and write_file_denied validate both write success and permission denial.

Lane 4 — TaskRegistry

• Status: merged on main.
• Feature commit: 5ea138e — feat(runtime): add TaskRegistry — in-memory task lifecycle management
• Merge commit: 21a1e1d — Merge jobdori/task-runtime: TaskRegistry in-memory lifecycle management
• Evidence: rust/crates/runtime/src/task_registry.rs is 335 LOC and provides create, get, list, stop, update, output, append_output, set_status, and assign_team over a thread-safe in-memory registry.
• Scope: this lane replaces pure fixed-payload stub state with real runtime-backed task records, but it does not add external subprocess execution by itself.

Lane 5 — Task wiring

• Status: merged on main.
• Feature commit: e8692e4 — feat(tools): wire TaskRegistry into task tool dispatch
• Merge commit: d994be6 — Merge jobdori/task-registry-wiring: real TaskRegistry backing for all 6 task tools
• Evidence: rust/crates/tools/src/lib.rs dispatches TaskCreate, TaskGet, TaskList, TaskStop, TaskUpdate, and TaskOutput through execute_tool() and concrete run_task_* handlers.
• Current state: task tools now expose real registry state on main via global_task_registry().

Lane 6 — Team+Cron

• Status: merged on main.
• Feature commit: c486ca6 — feat(runtime+tools): TeamRegistry and CronRegistry — replace team/cron stubs
• Merge commit: 49653fe — Merge jobdori/team-cron-runtime: TeamRegistry + CronRegistry wired into tool dispatch
• Evidence: rust/crates/runtime/src/team_cron_registry.rs is 363 LOC and adds thread-safe TeamRegistry and CronRegistry; rust/crates/tools/src/lib.rs wires TeamCreate, TeamDelete, CronCreate, CronDelete, and CronList into those registries.
• Current state: team/cron tools now have in-memory lifecycle behavior on main; they still stop short of a real background scheduler or worker fleet.

Lane 7 — MCP lifecycle

• Status: merged on main.
• Feature commit: 730667f — feat(runtime+tools): McpToolRegistry — MCP lifecycle bridge for tool surface
• Merge commit: cc0f92e — Merge jobdori/mcp-lifecycle: McpToolRegistry lifecycle bridge for all MCP tools
• Evidence: rust/crates/runtime/src/mcp_tool_bridge.rs is 406 LOC and tracks server connection status, resource listing, resource reads, tool listing, tool dispatch acknowledgements, auth state, and disconnects.
• Wiring: rust/crates/tools/src/lib.rs routes ListMcpResources, ReadMcpResource, McpAuth, and MCP into global_mcp_registry() handlers.
• Scope: this lane replaces pure stub responses with a registry bridge on main; end-to-end MCP connection population and broader transport/runtime depth still depend on the wider MCP runtime (mcp_stdio.rs, mcp_client.rs, mcp.rs).

Lane 8 — LSP client

• Status: merged on main.
• Feature commit: 2d66503 — feat(runtime+tools): LspRegistry — LSP client dispatch for tool surface
• Merge commit: d7f0dc6 — Merge jobdori/lsp-client: LspRegistry dispatch for all LSP tool actions
• Evidence: rust/crates/runtime/src/lsp_client.rs is 438 LOC and models diagnostics, hover, definition, references, completion, symbols, and formatting across a stateful registry.
• Wiring: the exposed LSP tool schema in rust/crates/tools/src/lib.rs currently enumerates symbols, references, diagnostics, definition, and hover, then routes requests through registry.dispatch(action, path, line, character, query).
• Scope: current parity is registry/dispatch-level; completion/format support exists in the registry model, but not as clearly exposed at the tool schema boundary, and actual external language-server process orchestration remains separate.

Lane 9 — Permission enforcement

• Status: merged on main.
• Feature commit: 66283f4 — feat(runtime+tools): PermissionEnforcer — permission mode enforcement layer
• Merge commit: 336f820 — Merge jobdori/permission-enforcement: PermissionEnforcer with workspace + bash enforcement
• Evidence: rust/crates/runtime/src/permission_enforcer.rs is 340 LOC and adds tool gating, file write boundary checks, and bash read-only heuristics on top of rust/crates/runtime/src/permissions.rs.
• Wiring: rust/crates/tools/src/lib.rs exposes enforce_permission_check() and carries per-tool required_permission values in tool specs.

Permission enforcement across tool paths

• Harness scenarios validate write_file_denied, bash_permission_prompt_approved, and bash_permission_prompt_denied.
• PermissionEnforcer::check() delegates to PermissionPolicy::authorize() and returns structured allow/deny results.
• check_file_write() enforces workspace boundaries and read-only denial; check_bash() denies mutating commands in read-only mode and blocks prompt-mode bash without confirmation.

Tool Surface

• mvp_tool_specs() in rust/crates/tools/src/lib.rs exposes the core tool set plus Claude Code v2.1.201 compatibility contracts.
• Core execution is present for bash, read_file, write_file, edit_file, glob_search, and grep_search.
• Existing product tools in mvp_tool_specs() include WebFetch, WebSearch, TodoWrite, Skill, Agent, ToolSearch, NotebookEdit, Sleep, SendUserMessage, Config, EnterPlanMode, ExitPlanMode, StructuredOutput, REPL, and PowerShell.
• Agent view now uses the Claude Code v2.1.201 background-session layout: CLAUDE_CONFIG_DIR or ~/.claude, jobs/<id>/state.json, jobs/<id>/tmp/, daemon/roster.json, and daemon.log. claw agents, claw agents --json [--all] [--cwd <path>], claw --bg, claw --bg --exec, claw attach/logs/stop/kill/respawn/rm <id>, and claw daemon status/stop --any are wired through runtime::AgentSupervisor; TTY claw agents opens a full-screen crossterm view with grouped rows, peek, dispatch, and lifecycle shortcuts.
• The 9-lane push replaced pure fixed-payload stubs for Task*, Team*, Cron*, LSP, and MCP tools with registry-backed handlers on main; the v2.1.201 migration extends TaskCreate/TaskUpdate to the structured task-list payload shape.
• The v2.1.201 host-facing contracts include Workflow, Monitor, ScheduleWakeup, PushNotification, ReportFindings, ReadMcpResourceDir, Artifact, Projects, ClaudeDesign, and ShowOnboardingRolePicker.
• Workflow now resolves inline scripts, scriptPath, saved scripts under .claude/workflows and .claw/workflows, user-level workflow roots, and the bundled deep-research workflow. Static agent(...) calls spawn background agents and write run manifests; /workflows, claw workflows, /deep-research, claw deep-research, ultracode keyword trigger, and session-only /effort ultracode are wired through the CLI.
• Brief is handled as an execution alias in execute_tool(), but it is not a separately exposed tool spec in mvp_tool_specs().

Still limited or intentionally shallow

• AskUserQuestion supports local stdin/stdout question flow, but it is not wired to an async host UI prompt surface.
• McpAuth reports structured login/logout contract state and host-flow requirements, but it does not open a browser or complete OAuth by itself.
• Workflow does not yet embed a full isolated JavaScript workflow VM. The current runner is a local parity layer for static agent(...) orchestration, saved workflow lookup, run registry, and disable switches; arbitrary workflow, parallel, pipeline, Date, and Math.random script behavior remains incomplete. Monitor still exposes only compatibility payloads and does not schedule live monitor loops.
• RemoteTrigger performs direct HTTP requests, but it has not been validated against every upstream host-trigger edge case.
• Agent view has a local supervisor, official state files, shell lifecycle commands, raw agents --json arrays, background worker spawning, a basic full-screen TUI, queued peek replies into resumable prompt sessions without live workers, row pin/rename/reorder/collapse shortcuts, directory/state grouping, and terminal attach once workers record their managed session id. Remaining gaps are live in-process peek reply routing, generated row summaries/PR status, notification hooks for background completion/needs-input, /bg or left-arrow handoff from an already-running foreground session, and a real supervisor socket/pre-warmed worker pool.
• TestingPermission remains test-only.
• Task, team, cron, MCP, and LSP are no longer just fixed-payload stubs in execute_tool(), but several remain registry-backed approximations rather than full external-runtime integrations.
• Bash deep validation remains branch-only until 36dac6c is merged.

Reconciled from the older PARITY checklist

• Path traversal prevention (symlink following, ../ escapes)
• Size limits on read/write
• Binary file detection
• Permission mode enforcement (read-only vs workspace-write)
• Config merge precedence (user > project > local) — ConfigLoader::discover() loads user → project → local, and loads_and_merges_claude_code_config_files_by_precedence() verifies the merge order.
• Plugin install/enable/disable/uninstall flow — /plugin slash handling in rust/crates/commands/src/lib.rs delegates to PluginManager::{install, enable, disable, uninstall} in rust/crates/plugins/src/lib.rs.
• No #[ignore] tests hiding failures — grep over rust/**/*.rs found 0 ignored tests.

Still open

• End-to-end MCP runtime lifecycle beyond the registry bridge now on main
• Output truncation (large stdout/file content)
• Session compaction behavior matching
  • auto_compaction threshold from env
• Token counting / cost tracking accuracy
• Bash validation lane merged onto main
• CI green on every commit

Migration Readiness

• PARITY.md maintained and honest
• 9 requested lanes documented with commit hashes and current status
• All 9 requested lanes landed on main (bash-validation is still branch-only)
• No #[ignore] tests hiding failures
• CI green on every commit
• Codebase shape clean enough for handoff documentation