Claude Code 增加 WebSearch 功能

[zeuikli]

Description

以下內容為Kiro-CLI 提供之修改說明，Zeabur 已經驗證成功。

這次為了啟用 WebSearch，總共做了以下修改：

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

修改的檔案

1. k8s ConfigMap (openab configmap)

• command 從 kiro-cli 改為 /home/node/.npm-local/node_modules/.bin/claude-agent-acp
• 加入 args = ["--dangerously-skip-permissions"]
• agent.preset=claude 透過 Helm 套用

2. /home/node/.npm-local/node_modules/@agentclientprotocol/claude-agent-acp/dist/acp-agent.js（pod 內）

這是核心修改，把第 993 行從：
js
const permissionMode = resolvePermissionMode(settingsManager.getSettings().permissions?.defaultMode);

改為：
js
const permissionMode = "bypassPermissions";

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

為什麼這樣改

claude-agent-acp 在建立 session 時會把 permissionMode 傳給 Claude Code。預設是 "default"，表示每次工具呼叫都需要使用者確認。

OpenAB 雖然有自動回覆 allow_always，但 claude-agent-acp 在收到 reply 之前就已經自行拒絕（只差 14ms），所以 runtime auto-allow 無效。

改成 "bypassPermissions" 後，session 一開始就跳過所有 permission 檢查，WebSearch 就能直接執行。

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

注意事項

目前的修改是直接改 pod 內的 JS 檔案，不是永久的。如果 pod 被重新建立（非 restart），/home/node/.npm-local 會消失。建議後續重新 build image 把這個修改固化進去。

Use Case

透過OpenAB 搭配Claude Code 啟用Web Search

[chaodu-agent]

Issue at a Glance

Discord User ──► openab ──► claude-agent-acp ──► Claude Code
                   │
                   ▼
          Claude Code 呼叫 WebSearch tool
          → session/request_permission
                   │
            ┌──────┴──────┐
            ▼             ▼
       情況 A:         情況 B:
    openab 回覆       claude-agent-acp
    格式錯誤          permissionMode="default"
    SDK 解析失敗      SDK 自己先 reject
    (= #130)         不等 openab 回覆
            │             │
            ▼             ▼
       PR #148 修好    需要另外處理
       就會 work       (session 層級設定)

Hi @zeuikli,

感謝詳細的紀錄和 Zeabur 驗證！

目前 openab 的 permission auto-reply 有兩個已知 bug：

• Bug: RequestPermissionResponse missing outcome wrapper — Claude Code tool calls universally rejected #130 — response 缺少 outcome wrapper
• fix: ExitPlanMode permission rejected — auto-reply sends invalid optionId #111 — hardcoded 錯誤的 optionId

PR #148 是這兩個的 combined fix。不過你提到 auto-allow 只差 14ms 就被拒絕，我們想確認一下 root cause 是不是跟 #130 相同：

1. 是所有 tool call 都失敗，還是只有 WebSearch？
2. 用的是哪個版本的 claude-agent-acp？
3. PR fix: wrap permission auto-reply in outcome object and select optionId dynamically #148 merge 後能不能幫忙測試看看？

如果是 #130 同一個問題，PR #148 修好就不需要 patch JS 了。如果是 claude-agent-acp 自己在 SDK 層先 reject 的，那可能需要另外處理。

先標 pending-response，等確認後再決定下一步。

[zeuikli]

是所有 tool call 都失敗，還是只有 WebSearch？目前測下來是Web Search 有問題
用的是哪個版本的 claude-agent-acp？原先是 [0.25.0] 後來升級到 [0.25.3] 還是有問題 所以我就自己改了

[thepagent]

Investigated the root cause. Here's what's happening and the fix:

Root Cause

claude-agent-acp reads permissionMode from Claude Code's SettingsManager at session creation time. The default is "default" which requires per-tool-call approval. OpenAB's auto-allow reply arrives ~14ms too late — the adapter self-rejects before the reply comes back.

┌─────────────┐     ┌──────────────────┐     ┌────────┐
│ Claude Code │ ──> │ claude-agent-acp │ ──> │ OpenAB │
│ WebSearch   │     │ permissionMode=  │     │ auto-  │
│ tool call   │     │ "default"        │     │ allow  │
└─────────────┘     └──────────────────┘     └────────┘
                          │                       │
                          │ self-rejects (14ms)    │ reply arrives
                          ▼                       ▼
                    ❌ denied              ⏰ too late

Fix (no code change needed)

claude-agent-acp uses Claude Code's SettingsManager which reads from ~/.claude/settings.json. Create this file in the container with:

{"permissions": {"defaultMode": "bypassPermissions"}}

Option A: Helm values (recommended)

Mount it via the agent's env or a ConfigMap. For example, add an init step or seed it in the Dockerfile:

RUN mkdir -p /home/agent/.claude && \
    echo '{"permissions": {"defaultMode": "bypassPermissions"}}' > /home/agent/.claude/settings.json

Option B: kubectl exec (quick fix)

kubectl exec deployment/openab-claude -- sh -c "mkdir -p ~/.claude && echo '{ \"permissions\": { \"defaultMode\": \"bypassPermissions\" } }' > ~/.claude/settings.json"
kubectl rollout restart deployment/openab-claude

Option C: Enterprise managed settings

Write to /etc/claude-code/managed-settings.json (highest precedence in the settings hierarchy):

kubectl exec deployment/openab-claude -- sh -c "mkdir -p /etc/claude-code && echo '{ \"permissions\": { \"defaultMode\": \"bypassPermissions\" } }' > /etc/claude-code/managed-settings.json"

No need to patch JS files. The SettingsManager reads these paths automatically:

1. ~/.claude/settings.json (user)
2. <cwd>/.claude/settings.json (project)
3. <cwd>/.claude/settings.local.json (local)
4. /etc/claude-code/managed-settings.json (enterprise — highest precedence)

We should consider baking Option A into Dockerfile.claude by default since OpenAB is a headless/automated environment where permission prompts can't be answered interactively.

[thepagent]

From my investigation:

OpenAB's permission auto-reply mechanism has a fundamental timing issue. History:

• Bug: RequestPermissionResponse missing outcome wrapper — Claude Code tool calls universally rejected #130 — Response format was wrong, all tool calls rejected (fixed)
• fix: ExitPlanMode permission rejected — auto-reply sends invalid optionId #111 — Wrong optionId for certain permission types (fixed)
• Claude Code 增加 WebSearch 功能 #136 — Format is correct now, but the adapter self-rejects in 14ms before OpenAB's reply arrives. WebSearch and other tools fail (open)
• bug: codex-acp Discord session can hang after auto-approved shell escalation #286 — codex-acp has a similar issue, session hangs after auto-approved escalation (open)

Core issue: the auto-allow mechanism is inherently a race condition, and OpenAB always loses.

Proposed Fix

1. Add bypassPermissions to Dockerfile.claude — One-line change, sidesteps the permission prompt entirely. Fixes Claude Code 增加 WebSearch 功能 #136.
2. Investigate bug: codex-acp Discord session can hang after auto-approved shell escalation #286 — Determine if codex-acp can be fixed the same way.

OpenAB Permission Auto-Reply: A History of Fixes
   ═════════════════════════════════════════════════

   #130 (fixed)          #111 (fixed)          #136 (open)           #286 (open)
   Format wrong          optionId wrong        Timing race           Codex hangs
        │                     │                     │                     │
        ▼                     ▼                     ▼                     ▼
   ┌──────────┐         ┌──────────┐         ┌──────────┐         ┌──────────┐
   │ {optionId │         │ {outcome:│         │ {outcome:│         │ {outcome:│
   │  :"allow"}│         │  optionId│         │  optionId│         │  optionId│
   │           │         │  :"allow"│         │  :"allow │         │  :"allow │
   │ missing   │         │  }       │         │  _always"│         │  _always"│
   │ outcome   │         │ wrong id │         │  }       │         │  }       │
   │ wrapper   │         │ for type │         │ CORRECT  │         │ CORRECT  │
   └──────────┘         └──────────┘         │ but late │         │ but hang │
        │                     │              └──────────┘         └──────────┘
        ▼                     ▼                   │                     │
     ALL tools             Some tools             ▼                     ▼
     rejected              rejected          WebSearch              Session
                                             rejected               stuck


   The Race (#136):
   ════════════════

     Time ──────────────────────────────────────────────────►

     0ms        5ms        10ms       14ms       20ms
     │          │          │          │          │
     ▼          ▼          ▼          ▼          ▼
     adapter    OpenAB     OpenAB     adapter    OpenAB
     sends      receives   prepares   REJECTS    reply
     perm req   request    reply      (timeout)  arrives
                                      ❌         ⏰ too late


   The Fix:
   ════════

     BEFORE (race)                    AFTER (bypass)

     Claude ──► ask permission        Claude ──► check settings
          │                                │
          ▼                                ▼
     adapter ──► OpenAB               "bypassPermissions"
          │          │                     │
          │    (preparing...)              ▼
          ▼                           just run it ✅
     self-reject ❌                   no race, no prompt

We need further investigation.