Wrap any agent CLI as an approval-gated breakwater connector. The two
shipped definitions are createClaudeCodeConnector / createCodexConnector;
this is the seam for third-party CLIs.
The adapter's manifest declares egressEnforcement: 'declaration-only',
because the child process carries its own transport. Construction therefore
throws a TypeError when options.policies sets
requireEgressEnforcement, which that posture cannot satisfy.
Wrap any agent CLI as an approval-gated breakwater connector. The two shipped definitions are createClaudeCodeConnector / createCodexConnector; this is the seam for third-party CLIs.
The adapter's manifest declares
egressEnforcement: 'declaration-only', because the child process carries its own transport. Construction therefore throws aTypeErrorwhenoptions.policiessetsrequireEgressEnforcement, which that posture cannot satisfy.