@agentconnect.md/daemon 1.0.0-rc.294 → 1.0.0-rc.295

package/dist/index.js

@@ -68493,8 +68493,8 @@ const [{ Command }, { fileURLToPath }, { runChat }, { runLogin }, { runForegroun
 	import("./commander-B5QVEFzH.js"),
 	import("node:url"),
 	import("./chat-IRJd4_lj.js"),
-	import("./login-BvZ3PrjS.js"),
-	import("./run-foreground-BcZug4FD.js"),
+	import("./login-COLOoyZB.js"),
+	import("./run-foreground-Bqj9SR4V.js"),
 	import("./service-6w0WKhdx.js"),
 	import("./lock-CA9Bm8_s.js"),
 	import("./paths-CcRUjFjy.js")

package/dist/{login-BvZ3PrjS.js → login-COLOoyZB.js}

@@ -1,6 +1,6 @@
 import { t as DAEMON_VERSION } from "./version-DGaRXjBK.js";
 import { _ as buildEnvelope, l as ConfigSchema, u as isFrame, v as decodeEnvelope, y as encode } from "./load-agents-8AzZXdVx.js";
-import { i as ClientTransport, t as runForeground } from "./run-foreground-DWgt3Xvd.js";
+import { i as ClientTransport, t as runForeground } from "./run-foreground-Q1x-MDxZ.js";
 import { l as resolveRoot, t as configPath } from "./paths-DEcUO8lC.js";
 import { n as resolveController } from "./service-BQVw7wbz.js";
 import { dirname } from "node:path";
@@ -228,4 +228,4 @@ async function runLogin(opts, partial = {}) {
 //#endregion
 export { buildInstallOpts, persistCredentials, runLogin };
 
-//# sourceMappingURL=login-BvZ3PrjS.js.map
+//# sourceMappingURL=login-COLOoyZB.js.map

package/dist/{login-BvZ3PrjS.js.map → login-COLOoyZB.js.map}

@@ -1 +1 @@
-{"version":3,"file":"login-BvZ3PrjS.js","names":["realRunForeground"],"sources":["../src/cp/auth-probe.ts","../src/cli/login.ts"],"sourcesContent":["/**\n * `probeAuth` — a one-shot CP auth check used by `agentconnect login`. It dials\n * the CP, sends ONLY the `auth` frame (no `register`), and resolves with the\n * authoritative daemonId from `auth/ok`, or a human-readable failure reason on\n * a `4401` close, a correlated `error`, a dial failure, or a timeout. It always\n * closes the socket and never leaves a connection open.\n */\nimport { buildEnvelope, decodeEnvelope, encode, isFrame } from '@agentconnect.md/protocol'\nimport { ClientTransport, type Transport } from '@agentconnect.md/connection'\nimport { CP_SUBPROTOCOL, CP_WS_PATH } from './client.js'\n\nexport interface ProbeResult {\n  ok: boolean\n  daemonId?: string\n  reason?: string\n}\n\nexport interface ProbeOpts {\n  url: string\n  token: string\n  daemonId?: string\n  agentVersion?: string\n  timeoutMs?: number\n  /** Injectable for tests; defaults to dialing the real WebSocket. */\n  connect?: () => Promise<Transport>\n}\n\nexport async function probeAuth(opts: ProbeOpts): Promise<ProbeResult> {\n  const timeoutMs = opts.timeoutMs ?? 10_000\n  const dial = opts.connect ?? (() => ClientTransport.dial(opts.url, { subprotocol: CP_SUBPROTOCOL, path: CP_WS_PATH }))\n\n  let transport: Transport\n  try {\n    transport = await dial()\n  } catch (err) {\n    return { ok: false, reason: `cannot reach ${opts.url}: ${(err as Error).message}` }\n  }\n\n  const authPayload: Record<string, unknown> = {\n    apiKey: opts.token,\n    agentVersion: opts.agentVersion ?? 'probe'\n  }\n  if (opts.daemonId) authPayload.daemonId = opts.daemonId\n  const frame = buildEnvelope('auth', authPayload)\n\n  return await new Promise<ProbeResult>((resolve) => {\n    let settled = false\n    const done = (r: ProbeResult): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      try {\n        transport.close(1000, 'probe done')\n      } catch {\n        // socket may already be closed\n      }\n      resolve(r)\n    }\n\n    const timer = setTimeout(\n      () => done({ ok: false, reason: `timed out after ${timeoutMs}ms waiting for auth/ok` }),\n      timeoutMs\n    )\n\n    transport.onMessage((text) => {\n      const decoded = decodeEnvelope(text)\n      if (!decoded.ok) return\n      const f = decoded.frame\n      if (f.corr !== frame.id) return\n      if (f.type === 'error') {\n        const e = f.payload as { code: string; message: string }\n        done({ ok: false, reason: `${e.code}: ${e.message}` })\n        return\n      }\n      if (isFrame('auth/ok')(f)) {\n        const ok = f.payload as { daemonId: string }\n        done({ ok: true, daemonId: ok.daemonId })\n      }\n    })\n\n    transport.onClose((code) => {\n      if (code === 4401) done({ ok: false, reason: 'authentication failed (4401) — check the daemon token' })\n      else done({ ok: false, reason: `connection closed (${code}) before auth/ok` })\n    })\n\n    transport.send(encode(frame))\n  })\n}\n","/**\n * `agentconnect login` — interactive onboarding. It tests the Control Plane auth\n * flow, persists credentials only on success, then offers to install the OS\n * service. If installed it starts the service (`up`) and returns; otherwise it\n * runs the daemon in the foreground (the same path as `agentconnect run`).\n *\n * `persistCredentials` is the pure config-merge half (token-only onboarding:\n * `daemonId` is omitted unless given — the first connect adopts it from the\n * token's `sub`). `runLogin` is the orchestrator, with injectable deps for tests.\n */\nimport { readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { createInterface } from 'node:readline'\nimport { fileURLToPath } from 'node:url'\nimport { ConfigSchema } from '../config/config-schema.js'\nimport { resolveRoot, configPath } from '../paths.js'\nimport { DAEMON_VERSION } from '../version.js'\nimport { probeAuth, type ProbeResult } from '../cp/auth-probe.js'\nimport { resolveController, type InstallOpts } from '../service/index.js'\nimport { runForeground as realRunForeground } from './run-foreground.js'\n\nexport interface PersistCredsOpts {\n  cpUrl: string\n  cpKey: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n}\n\n/** Merge url/token into config.json (validated), returning the written path. */\nexport function persistCredentials(opts: PersistCredsOpts): string {\n  const root = resolveRoot(opts.root)\n  const file = opts.configPath ?? configPath(root)\n  const raw: Record<string, unknown> = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { version: 1 }\n\n  const cp = (raw.controlPlane as Record<string, unknown> | undefined) ?? {}\n  raw.controlPlane = { ...cp, url: opts.cpUrl, key: opts.cpKey, enabled: true }\n  if (opts.daemonId) raw.daemonId = opts.daemonId\n\n  ConfigSchema.parse(raw) // fail before writing if the merge is invalid\n\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(raw, null, 2) + '\\n')\n  return file\n}\n\nexport interface RunLoginOpts {\n  cpUrl?: string\n  cpKey?: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n  /** The resolved CLI entry path. Must be supplied by the CLI entry point\n   *  (index.ts) so the correct bundle path is used rather than inferring it\n   *  from login.ts's own import.meta.url (which is the same bundle but the\n   *  `../` path calculation would be wrong). Falls back to import.meta.url\n   *  for the pure test path where login.ts is loaded standalone. */\n  cliEntry?: string\n}\n\n/**\n * Build the InstallOpts for the OS service installer.\n *\n * Exported as a pure helper so it can be unit-tested independently of the\n * full `runLogin` orchestration. The caller (index.ts) passes `cliEntry` so\n * the correct bundle path always flows through; if omitted we fall back to\n * `import.meta.url` (correct only when login.ts is the entry, e.g. in tests).\n */\nexport function buildInstallOpts(opts: { root?: string; cliEntry?: string }): InstallOpts {\n  return {\n    execPath: process.execPath,\n    cliEntry: opts.cliEntry ?? fileURLToPath(import.meta.url),\n    includeRootEnv: resolveRoot(opts.root) !== resolveRoot(undefined)\n  }\n}\n\nexport interface LoginDeps {\n  probe: (o: { url: string; token: string }) => Promise<ProbeResult>\n  installService: () => Promise<void>\n  runForeground: () => Promise<void>\n  out: NodeJS.WritableStream\n  input: NodeJS.ReadableStream\n  isTTY: boolean\n}\n\nfunction realDeps(opts: RunLoginOpts): LoginDeps {\n  return {\n    probe: (o) => probeAuth({ url: o.url, token: o.token, agentVersion: DAEMON_VERSION }),\n    installService: async () => {\n      const controller = resolveController({ root: opts.root })\n      await controller.install(buildInstallOpts(opts))\n      await controller.up()\n    },\n    runForeground: () =>\n      realRunForeground({\n        root: opts.root,\n        overrides: { cpUrl: opts.cpUrl, cpKey: opts.cpKey, daemonId: opts.daemonId }\n      }),\n    out: process.stdout,\n    input: process.stdin,\n    isTTY: Boolean(process.stdin.isTTY)\n  }\n}\n\n/** Read the next line from a readline interface via async iterator. */\nasync function nextLine(\n  iter: AsyncIterableIterator<string>,\n  prompt: string,\n  out: NodeJS.WritableStream\n): Promise<string> {\n  out.write(prompt)\n  const { value, done } = await iter.next()\n  if (done) throw new Error(`unexpected end of input waiting for: ${prompt}`)\n  return (value as string).trim()\n}\n\nexport async function runLogin(opts: RunLoginOpts, partial: Partial<LoginDeps> = {}): Promise<void> {\n  const deps: LoginDeps = { ...realDeps(opts), ...partial }\n  const { out } = deps\n\n  // ── Non-interactive: flags required; probe; persist. No prompts, no handoff. ──\n  if (!deps.isTTY) {\n    if (!opts.cpUrl) throw new Error('login requires --cp-url <url>')\n    if (!opts.cpKey) throw new Error('login requires --cp-key <key>')\n    const r = await deps.probe({ url: opts.cpUrl, token: opts.cpKey })\n    if (!r.ok) throw new Error(`authentication failed: ${r.reason}`)\n    persistCredentials({ ...opts, cpUrl: opts.cpUrl, cpKey: opts.cpKey })\n    out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''} — credentials saved\\n`)\n    return\n  }\n\n  // Both interactive handoffs read `<root>/config.json`: the installed service\n  // runs `… run` (no `--config`), and the foreground `Daemon` loads by root. A\n  // custom `--config` would persist credentials the daemon never reads, so the\n  // install/run branch would look successful but start without them. Reject it;\n  // `--root` is the knob that keeps persist + service + foreground in sync.\n  if (opts.configPath) {\n    throw new Error(\n      'interactive login does not support --config — use --root <dir> so the daemon and the installed service read the same config'\n    )\n  }\n\n  // ── Interactive ──\n  const rl = createInterface({ input: deps.input, output: out })\n  const iter = rl[Symbol.asyncIterator]()\n  let url = opts.cpUrl\n  let token = opts.cpKey\n  try {\n    if (!url) url = await nextLine(iter, 'Control Plane URL: ', out)\n\n    for (let attempt = 0; ; attempt++) {\n      if (!token) token = await nextLine(iter, 'Daemon API key: ', out)\n      out.write(`Testing connection to ${url}…\\n`)\n      const r = await deps.probe({ url: url!, token: token! })\n      if (r.ok) {\n        out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''}\\n`)\n        break\n      }\n      out.write(`✗ ${r.reason}\\n`)\n      if (attempt >= 1) throw new Error('authentication failed')\n      token = undefined // re-prompt on retry\n    }\n\n    persistCredentials({ ...opts, cpUrl: url!, cpKey: token! })\n\n    const ans = (await nextLine(iter, 'Install AgentConnect as a background service? (y/N) ', out)).toLowerCase()\n    if (ans === 'y' || ans === 'yes') {\n      await deps.installService()\n      out.write('Service installed and started. Manage it with `agentconnect up` / `down` / `status`.\\n')\n      return\n    }\n    out.write('Starting in the foreground (Ctrl-C to stop)…\\n')\n  } finally {\n    rl.close()\n  }\n\n  await deps.runForeground()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,eAAsB,UAAU,MAAuC;CACrE,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,OAAO,KAAK,kBAAkB,gBAAgB,KAAK,KAAK,KAAK;EAAE,aAAA;EAA6B,MAAA;CAAiB,CAAC;CAEpH,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,KAAK;CACzB,SAAS,KAAK;EACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,gBAAgB,KAAK,IAAI,IAAK,IAAc;EAAU;CACpF;CAEA,MAAM,cAAuC;EAC3C,QAAQ,KAAK;EACb,cAAc,KAAK,gBAAgB;CACrC;CACA,IAAI,KAAK,UAAU,YAAY,WAAW,KAAK;CAC/C,MAAM,QAAQ,cAAc,QAAQ,WAAW;CAE/C,OAAO,MAAM,IAAI,SAAsB,YAAY;EACjD,IAAI,UAAU;EACd,MAAM,QAAQ,MAAyB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,IAAI;IACF,UAAU,MAAM,KAAM,YAAY;GACpC,QAAQ,CAER;GACA,QAAQ,CAAC;EACX;EAEA,MAAM,QAAQ,iBACN,KAAK;GAAE,IAAI;GAAO,QAAQ,mBAAmB,UAAU;EAAwB,CAAC,GACtF,SACF;EAEA,UAAU,WAAW,SAAS;GAC5B,MAAM,UAAU,eAAe,IAAI;GACnC,IAAI,CAAC,QAAQ,IAAI;GACjB,MAAM,IAAI,QAAQ;GAClB,IAAI,EAAE,SAAS,MAAM,IAAI;GACzB,IAAI,EAAE,SAAS,SAAS;IACtB,MAAM,IAAI,EAAE;IACZ,KAAK;KAAE,IAAI;KAAO,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;IAAU,CAAC;IACrD;GACF;GACA,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC,GAAG;IACzB,MAAM,KAAK,EAAE;IACb,KAAK;KAAE,IAAI;KAAM,UAAU,GAAG;IAAS,CAAC;GAC1C;EACF,CAAC;EAED,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS,MAAM,KAAK;IAAE,IAAI;IAAO,QAAQ;GAAwD,CAAC;QACjG,KAAK;IAAE,IAAI;IAAO,QAAQ,sBAAsB,KAAK;GAAkB,CAAC;EAC/E,CAAC;EAED,UAAU,KAAK,OAAO,KAAK,CAAC;CAC9B,CAAC;AACH;;;;;;;;;;;;;;ACzDA,SAAgB,mBAAmB,MAAgC;CACjE,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,OAAO,KAAK,cAAc,WAAW,IAAI;CAC/C,MAAM,MAA+B,WAAW,IAAI,IAAI,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;CAG9G,IAAI,eAAe;EAAE,GADT,IAAI,gBAAwD,CAAC;EAC7C,KAAK,KAAK;EAAO,KAAK,KAAK;EAAO,SAAS;CAAK;CAC5E,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK;CAEvC,aAAa,MAAM,GAAG;CAEtB,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;CACvD,OAAO;AACT;;;;;;;;;AAwBA,SAAgB,iBAAiB,MAAyD;CACxF,OAAO;EACL,UAAU,QAAQ;EAClB,UAAU,KAAK,YAAY,cAAc,OAAO,KAAK,GAAG;EACxD,gBAAgB,YAAY,KAAK,IAAI,MAAM,YAAY,KAAA,CAAS;CAClE;AACF;AAWA,SAAS,SAAS,MAA+B;CAC/C,OAAO;EACL,QAAQ,MAAM,UAAU;GAAE,KAAK,EAAE;GAAK,OAAO,EAAE;GAAO,cAAc;EAAe,CAAC;EACpF,gBAAgB,YAAY;GAC1B,MAAM,aAAa,kBAAkB,EAAE,MAAM,KAAK,KAAK,CAAC;GACxD,MAAM,WAAW,QAAQ,iBAAiB,IAAI,CAAC;GAC/C,MAAM,WAAW,GAAG;EACtB;EACA,qBACEA,cAAkB;GAChB,MAAM,KAAK;GACX,WAAW;IAAE,OAAO,KAAK;IAAO,OAAO,KAAK;IAAO,UAAU,KAAK;GAAS;EAC7E,CAAC;EACH,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ,MAAM,KAAK;CACpC;AACF;;AAGA,eAAe,SACb,MACA,QACA,KACiB;CACjB,IAAI,MAAM,MAAM;CAChB,MAAM,EAAE,OAAO,SAAS,MAAM,KAAK,KAAK;CACxC,IAAI,MAAM,MAAM,IAAI,MAAM,wCAAwC,QAAQ;CAC1E,OAAQ,MAAiB,KAAK;AAChC;AAEA,eAAsB,SAAS,MAAoB,UAA8B,CAAC,GAAkB;CAClG,MAAM,OAAkB;EAAE,GAAG,SAAS,IAAI;EAAG,GAAG;CAAQ;CACxD,MAAM,EAAE,QAAQ;CAGhB,IAAI,CAAC,KAAK,OAAO;EACf,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,MAAM,IAAI,MAAM,KAAK,MAAM;GAAE,KAAK,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACjE,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM,0BAA0B,EAAE,QAAQ;EAC/D,mBAAmB;GAAE,GAAG;GAAM,OAAO,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACpE,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,uBAAuB;EAC/F;CACF;CAOA,IAAI,KAAK,YACP,MAAM,IAAI,MACR,6HACF;CAIF,MAAM,KAAK,gBAAgB;EAAE,OAAO,KAAK;EAAO,QAAQ;CAAI,CAAC;CAC7D,MAAM,OAAO,GAAG,OAAO,cAAc,CAAC;CACtC,IAAI,MAAM,KAAK;CACf,IAAI,QAAQ,KAAK;CACjB,IAAI;EACF,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,MAAM,uBAAuB,GAAG;EAE/D,KAAK,IAAI,UAAU,IAAK,WAAW;GACjC,IAAI,CAAC,OAAO,QAAQ,MAAM,SAAS,MAAM,oBAAoB,GAAG;GAChE,IAAI,MAAM,yBAAyB,IAAI,IAAI;GAC3C,MAAM,IAAI,MAAM,KAAK,MAAM;IAAO;IAAa;GAAO,CAAC;GACvD,IAAI,EAAE,IAAI;IACR,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,GAAG;IAC3E;GACF;GACA,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG;GAC3B,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACzD,QAAQ,KAAA;EACV;EAEA,mBAAmB;GAAE,GAAG;GAAM,OAAO;GAAM,OAAO;EAAO,CAAC;EAE1D,MAAM,OAAO,MAAM,SAAS,MAAM,wDAAwD,GAAG,EAAA,CAAG,YAAY;EAC5G,IAAI,QAAQ,OAAO,QAAQ,OAAO;GAChC,MAAM,KAAK,eAAe;GAC1B,IAAI,MAAM,wFAAwF;GAClG;EACF;EACA,IAAI,MAAM,gDAAgD;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;CAEA,MAAM,KAAK,cAAc;AAC3B"}
+{"version":3,"file":"login-COLOoyZB.js","names":["realRunForeground"],"sources":["../src/cp/auth-probe.ts","../src/cli/login.ts"],"sourcesContent":["/**\n * `probeAuth` — a one-shot CP auth check used by `agentconnect login`. It dials\n * the CP, sends ONLY the `auth` frame (no `register`), and resolves with the\n * authoritative daemonId from `auth/ok`, or a human-readable failure reason on\n * a `4401` close, a correlated `error`, a dial failure, or a timeout. It always\n * closes the socket and never leaves a connection open.\n */\nimport { buildEnvelope, decodeEnvelope, encode, isFrame } from '@agentconnect.md/protocol'\nimport { ClientTransport, type Transport } from '@agentconnect.md/connection'\nimport { CP_SUBPROTOCOL, CP_WS_PATH } from './client.js'\n\nexport interface ProbeResult {\n  ok: boolean\n  daemonId?: string\n  reason?: string\n}\n\nexport interface ProbeOpts {\n  url: string\n  token: string\n  daemonId?: string\n  agentVersion?: string\n  timeoutMs?: number\n  /** Injectable for tests; defaults to dialing the real WebSocket. */\n  connect?: () => Promise<Transport>\n}\n\nexport async function probeAuth(opts: ProbeOpts): Promise<ProbeResult> {\n  const timeoutMs = opts.timeoutMs ?? 10_000\n  const dial = opts.connect ?? (() => ClientTransport.dial(opts.url, { subprotocol: CP_SUBPROTOCOL, path: CP_WS_PATH }))\n\n  let transport: Transport\n  try {\n    transport = await dial()\n  } catch (err) {\n    return { ok: false, reason: `cannot reach ${opts.url}: ${(err as Error).message}` }\n  }\n\n  const authPayload: Record<string, unknown> = {\n    apiKey: opts.token,\n    agentVersion: opts.agentVersion ?? 'probe'\n  }\n  if (opts.daemonId) authPayload.daemonId = opts.daemonId\n  const frame = buildEnvelope('auth', authPayload)\n\n  return await new Promise<ProbeResult>((resolve) => {\n    let settled = false\n    const done = (r: ProbeResult): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      try {\n        transport.close(1000, 'probe done')\n      } catch {\n        // socket may already be closed\n      }\n      resolve(r)\n    }\n\n    const timer = setTimeout(\n      () => done({ ok: false, reason: `timed out after ${timeoutMs}ms waiting for auth/ok` }),\n      timeoutMs\n    )\n\n    transport.onMessage((text) => {\n      const decoded = decodeEnvelope(text)\n      if (!decoded.ok) return\n      const f = decoded.frame\n      if (f.corr !== frame.id) return\n      if (f.type === 'error') {\n        const e = f.payload as { code: string; message: string }\n        done({ ok: false, reason: `${e.code}: ${e.message}` })\n        return\n      }\n      if (isFrame('auth/ok')(f)) {\n        const ok = f.payload as { daemonId: string }\n        done({ ok: true, daemonId: ok.daemonId })\n      }\n    })\n\n    transport.onClose((code) => {\n      if (code === 4401) done({ ok: false, reason: 'authentication failed (4401) — check the daemon token' })\n      else done({ ok: false, reason: `connection closed (${code}) before auth/ok` })\n    })\n\n    transport.send(encode(frame))\n  })\n}\n","/**\n * `agentconnect login` — interactive onboarding. It tests the Control Plane auth\n * flow, persists credentials only on success, then offers to install the OS\n * service. If installed it starts the service (`up`) and returns; otherwise it\n * runs the daemon in the foreground (the same path as `agentconnect run`).\n *\n * `persistCredentials` is the pure config-merge half (token-only onboarding:\n * `daemonId` is omitted unless given — the first connect adopts it from the\n * token's `sub`). `runLogin` is the orchestrator, with injectable deps for tests.\n */\nimport { readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { createInterface } from 'node:readline'\nimport { fileURLToPath } from 'node:url'\nimport { ConfigSchema } from '../config/config-schema.js'\nimport { resolveRoot, configPath } from '../paths.js'\nimport { DAEMON_VERSION } from '../version.js'\nimport { probeAuth, type ProbeResult } from '../cp/auth-probe.js'\nimport { resolveController, type InstallOpts } from '../service/index.js'\nimport { runForeground as realRunForeground } from './run-foreground.js'\n\nexport interface PersistCredsOpts {\n  cpUrl: string\n  cpKey: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n}\n\n/** Merge url/token into config.json (validated), returning the written path. */\nexport function persistCredentials(opts: PersistCredsOpts): string {\n  const root = resolveRoot(opts.root)\n  const file = opts.configPath ?? configPath(root)\n  const raw: Record<string, unknown> = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { version: 1 }\n\n  const cp = (raw.controlPlane as Record<string, unknown> | undefined) ?? {}\n  raw.controlPlane = { ...cp, url: opts.cpUrl, key: opts.cpKey, enabled: true }\n  if (opts.daemonId) raw.daemonId = opts.daemonId\n\n  ConfigSchema.parse(raw) // fail before writing if the merge is invalid\n\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(raw, null, 2) + '\\n')\n  return file\n}\n\nexport interface RunLoginOpts {\n  cpUrl?: string\n  cpKey?: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n  /** The resolved CLI entry path. Must be supplied by the CLI entry point\n   *  (index.ts) so the correct bundle path is used rather than inferring it\n   *  from login.ts's own import.meta.url (which is the same bundle but the\n   *  `../` path calculation would be wrong). Falls back to import.meta.url\n   *  for the pure test path where login.ts is loaded standalone. */\n  cliEntry?: string\n}\n\n/**\n * Build the InstallOpts for the OS service installer.\n *\n * Exported as a pure helper so it can be unit-tested independently of the\n * full `runLogin` orchestration. The caller (index.ts) passes `cliEntry` so\n * the correct bundle path always flows through; if omitted we fall back to\n * `import.meta.url` (correct only when login.ts is the entry, e.g. in tests).\n */\nexport function buildInstallOpts(opts: { root?: string; cliEntry?: string }): InstallOpts {\n  return {\n    execPath: process.execPath,\n    cliEntry: opts.cliEntry ?? fileURLToPath(import.meta.url),\n    includeRootEnv: resolveRoot(opts.root) !== resolveRoot(undefined)\n  }\n}\n\nexport interface LoginDeps {\n  probe: (o: { url: string; token: string }) => Promise<ProbeResult>\n  installService: () => Promise<void>\n  runForeground: () => Promise<void>\n  out: NodeJS.WritableStream\n  input: NodeJS.ReadableStream\n  isTTY: boolean\n}\n\nfunction realDeps(opts: RunLoginOpts): LoginDeps {\n  return {\n    probe: (o) => probeAuth({ url: o.url, token: o.token, agentVersion: DAEMON_VERSION }),\n    installService: async () => {\n      const controller = resolveController({ root: opts.root })\n      await controller.install(buildInstallOpts(opts))\n      await controller.up()\n    },\n    runForeground: () =>\n      realRunForeground({\n        root: opts.root,\n        overrides: { cpUrl: opts.cpUrl, cpKey: opts.cpKey, daemonId: opts.daemonId }\n      }),\n    out: process.stdout,\n    input: process.stdin,\n    isTTY: Boolean(process.stdin.isTTY)\n  }\n}\n\n/** Read the next line from a readline interface via async iterator. */\nasync function nextLine(\n  iter: AsyncIterableIterator<string>,\n  prompt: string,\n  out: NodeJS.WritableStream\n): Promise<string> {\n  out.write(prompt)\n  const { value, done } = await iter.next()\n  if (done) throw new Error(`unexpected end of input waiting for: ${prompt}`)\n  return (value as string).trim()\n}\n\nexport async function runLogin(opts: RunLoginOpts, partial: Partial<LoginDeps> = {}): Promise<void> {\n  const deps: LoginDeps = { ...realDeps(opts), ...partial }\n  const { out } = deps\n\n  // ── Non-interactive: flags required; probe; persist. No prompts, no handoff. ──\n  if (!deps.isTTY) {\n    if (!opts.cpUrl) throw new Error('login requires --cp-url <url>')\n    if (!opts.cpKey) throw new Error('login requires --cp-key <key>')\n    const r = await deps.probe({ url: opts.cpUrl, token: opts.cpKey })\n    if (!r.ok) throw new Error(`authentication failed: ${r.reason}`)\n    persistCredentials({ ...opts, cpUrl: opts.cpUrl, cpKey: opts.cpKey })\n    out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''} — credentials saved\\n`)\n    return\n  }\n\n  // Both interactive handoffs read `<root>/config.json`: the installed service\n  // runs `… run` (no `--config`), and the foreground `Daemon` loads by root. A\n  // custom `--config` would persist credentials the daemon never reads, so the\n  // install/run branch would look successful but start without them. Reject it;\n  // `--root` is the knob that keeps persist + service + foreground in sync.\n  if (opts.configPath) {\n    throw new Error(\n      'interactive login does not support --config — use --root <dir> so the daemon and the installed service read the same config'\n    )\n  }\n\n  // ── Interactive ──\n  const rl = createInterface({ input: deps.input, output: out })\n  const iter = rl[Symbol.asyncIterator]()\n  let url = opts.cpUrl\n  let token = opts.cpKey\n  try {\n    if (!url) url = await nextLine(iter, 'Control Plane URL: ', out)\n\n    for (let attempt = 0; ; attempt++) {\n      if (!token) token = await nextLine(iter, 'Daemon API key: ', out)\n      out.write(`Testing connection to ${url}…\\n`)\n      const r = await deps.probe({ url: url!, token: token! })\n      if (r.ok) {\n        out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''}\\n`)\n        break\n      }\n      out.write(`✗ ${r.reason}\\n`)\n      if (attempt >= 1) throw new Error('authentication failed')\n      token = undefined // re-prompt on retry\n    }\n\n    persistCredentials({ ...opts, cpUrl: url!, cpKey: token! })\n\n    const ans = (await nextLine(iter, 'Install AgentConnect as a background service? (y/N) ', out)).toLowerCase()\n    if (ans === 'y' || ans === 'yes') {\n      await deps.installService()\n      out.write('Service installed and started. Manage it with `agentconnect up` / `down` / `status`.\\n')\n      return\n    }\n    out.write('Starting in the foreground (Ctrl-C to stop)…\\n')\n  } finally {\n    rl.close()\n  }\n\n  await deps.runForeground()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,eAAsB,UAAU,MAAuC;CACrE,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,OAAO,KAAK,kBAAkB,gBAAgB,KAAK,KAAK,KAAK;EAAE,aAAA;EAA6B,MAAA;CAAiB,CAAC;CAEpH,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,KAAK;CACzB,SAAS,KAAK;EACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,gBAAgB,KAAK,IAAI,IAAK,IAAc;EAAU;CACpF;CAEA,MAAM,cAAuC;EAC3C,QAAQ,KAAK;EACb,cAAc,KAAK,gBAAgB;CACrC;CACA,IAAI,KAAK,UAAU,YAAY,WAAW,KAAK;CAC/C,MAAM,QAAQ,cAAc,QAAQ,WAAW;CAE/C,OAAO,MAAM,IAAI,SAAsB,YAAY;EACjD,IAAI,UAAU;EACd,MAAM,QAAQ,MAAyB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,IAAI;IACF,UAAU,MAAM,KAAM,YAAY;GACpC,QAAQ,CAER;GACA,QAAQ,CAAC;EACX;EAEA,MAAM,QAAQ,iBACN,KAAK;GAAE,IAAI;GAAO,QAAQ,mBAAmB,UAAU;EAAwB,CAAC,GACtF,SACF;EAEA,UAAU,WAAW,SAAS;GAC5B,MAAM,UAAU,eAAe,IAAI;GACnC,IAAI,CAAC,QAAQ,IAAI;GACjB,MAAM,IAAI,QAAQ;GAClB,IAAI,EAAE,SAAS,MAAM,IAAI;GACzB,IAAI,EAAE,SAAS,SAAS;IACtB,MAAM,IAAI,EAAE;IACZ,KAAK;KAAE,IAAI;KAAO,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;IAAU,CAAC;IACrD;GACF;GACA,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC,GAAG;IACzB,MAAM,KAAK,EAAE;IACb,KAAK;KAAE,IAAI;KAAM,UAAU,GAAG;IAAS,CAAC;GAC1C;EACF,CAAC;EAED,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS,MAAM,KAAK;IAAE,IAAI;IAAO,QAAQ;GAAwD,CAAC;QACjG,KAAK;IAAE,IAAI;IAAO,QAAQ,sBAAsB,KAAK;GAAkB,CAAC;EAC/E,CAAC;EAED,UAAU,KAAK,OAAO,KAAK,CAAC;CAC9B,CAAC;AACH;;;;;;;;;;;;;;ACzDA,SAAgB,mBAAmB,MAAgC;CACjE,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,OAAO,KAAK,cAAc,WAAW,IAAI;CAC/C,MAAM,MAA+B,WAAW,IAAI,IAAI,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;CAG9G,IAAI,eAAe;EAAE,GADT,IAAI,gBAAwD,CAAC;EAC7C,KAAK,KAAK;EAAO,KAAK,KAAK;EAAO,SAAS;CAAK;CAC5E,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK;CAEvC,aAAa,MAAM,GAAG;CAEtB,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;CACvD,OAAO;AACT;;;;;;;;;AAwBA,SAAgB,iBAAiB,MAAyD;CACxF,OAAO;EACL,UAAU,QAAQ;EAClB,UAAU,KAAK,YAAY,cAAc,OAAO,KAAK,GAAG;EACxD,gBAAgB,YAAY,KAAK,IAAI,MAAM,YAAY,KAAA,CAAS;CAClE;AACF;AAWA,SAAS,SAAS,MAA+B;CAC/C,OAAO;EACL,QAAQ,MAAM,UAAU;GAAE,KAAK,EAAE;GAAK,OAAO,EAAE;GAAO,cAAc;EAAe,CAAC;EACpF,gBAAgB,YAAY;GAC1B,MAAM,aAAa,kBAAkB,EAAE,MAAM,KAAK,KAAK,CAAC;GACxD,MAAM,WAAW,QAAQ,iBAAiB,IAAI,CAAC;GAC/C,MAAM,WAAW,GAAG;EACtB;EACA,qBACEA,cAAkB;GAChB,MAAM,KAAK;GACX,WAAW;IAAE,OAAO,KAAK;IAAO,OAAO,KAAK;IAAO,UAAU,KAAK;GAAS;EAC7E,CAAC;EACH,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ,MAAM,KAAK;CACpC;AACF;;AAGA,eAAe,SACb,MACA,QACA,KACiB;CACjB,IAAI,MAAM,MAAM;CAChB,MAAM,EAAE,OAAO,SAAS,MAAM,KAAK,KAAK;CACxC,IAAI,MAAM,MAAM,IAAI,MAAM,wCAAwC,QAAQ;CAC1E,OAAQ,MAAiB,KAAK;AAChC;AAEA,eAAsB,SAAS,MAAoB,UAA8B,CAAC,GAAkB;CAClG,MAAM,OAAkB;EAAE,GAAG,SAAS,IAAI;EAAG,GAAG;CAAQ;CACxD,MAAM,EAAE,QAAQ;CAGhB,IAAI,CAAC,KAAK,OAAO;EACf,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,MAAM,IAAI,MAAM,KAAK,MAAM;GAAE,KAAK,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACjE,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM,0BAA0B,EAAE,QAAQ;EAC/D,mBAAmB;GAAE,GAAG;GAAM,OAAO,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACpE,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,uBAAuB;EAC/F;CACF;CAOA,IAAI,KAAK,YACP,MAAM,IAAI,MACR,6HACF;CAIF,MAAM,KAAK,gBAAgB;EAAE,OAAO,KAAK;EAAO,QAAQ;CAAI,CAAC;CAC7D,MAAM,OAAO,GAAG,OAAO,cAAc,CAAC;CACtC,IAAI,MAAM,KAAK;CACf,IAAI,QAAQ,KAAK;CACjB,IAAI;EACF,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,MAAM,uBAAuB,GAAG;EAE/D,KAAK,IAAI,UAAU,IAAK,WAAW;GACjC,IAAI,CAAC,OAAO,QAAQ,MAAM,SAAS,MAAM,oBAAoB,GAAG;GAChE,IAAI,MAAM,yBAAyB,IAAI,IAAI;GAC3C,MAAM,IAAI,MAAM,KAAK,MAAM;IAAO;IAAa;GAAO,CAAC;GACvD,IAAI,EAAE,IAAI;IACR,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,GAAG;IAC3E;GACF;GACA,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG;GAC3B,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACzD,QAAQ,KAAA;EACV;EAEA,mBAAmB;GAAE,GAAG;GAAM,OAAO;GAAM,OAAO;EAAO,CAAC;EAE1D,MAAM,OAAO,MAAM,SAAS,MAAM,wDAAwD,GAAG,EAAA,CAAG,YAAY;EAC5G,IAAI,QAAQ,OAAO,QAAQ,OAAO;GAChC,MAAM,KAAK,eAAe;GAC1B,IAAI,MAAM,wFAAwF;GAClG;EACF;EACA,IAAI,MAAM,gDAAgD;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;CAEA,MAAM,KAAK,cAAc;AAC3B"}

package/dist/run-foreground-Bqj9SR4V.js

@@ -0,0 +1,2 @@
+import { t as runForeground } from "./run-foreground-Q1x-MDxZ.js";
+export { runForeground };

package/dist/{run-foreground-DWgt3Xvd.js → run-foreground-Q1x-MDxZ.js}

@@ -197229,12 +197229,12 @@ function neutralizeDelimiters(body) {
 	return body.split("\n").map((line) => line.trimStart().startsWith("----- ") ? `\\${line}` : line).join("\n");
 }
 /** Trailing instruction for github fires on a NUMBERED thread (issue/PR): the
-*  daemon streams the agent's reply back as a GitHub comment automatically, so
-*  the agent must NOT post its own — a manual `gh issue comment` would
-*  double-post. Only emitted when the poster will actually run (a thread number
-*  exists); push fires have no thread, so they never see this. */
+*  daemon is the sole writer of the reply comment, so the agent must return its
+*  answer rather than mutate comments/reviews through CLI, MCP, connector, or API.
+*  Only emitted when the poster will actually run (a thread number exists); push
+*  fires have no thread, so they never see this. */
 function githubReplyHint(c) {
-	return ["", `Your reply is posted back to ${`${c.repo ?? "this thread"}#${c.number}`} automatically as a GitHub comment (it streams as you write, so keep it a single self-contained reply). Do NOT run \`gh issue comment\` / \`gh pr comment\` yourself — that would double-post. You may still use \`gh\` for READ-only inspection (viewing the thread, diffs, files).`].join("\n");
+	return ["", `Your final reply is posted back to ${`${c.repo ?? "this thread"}#${c.number}`} automatically as a GitHub comment. Keep it self-contained. The daemon exclusively owns that reply comment. Do NOT create, update, or delete GitHub issue/PR comments or reviews through any CLI (including \`gh\`), MCP/connector, API, or other tool — that would race or double-post with the automatic poster. Use GitHub tools only for READ-only inspection (viewing the thread, diffs, files), then return the content to publish in your final reply.`].join("\n");
 }
 /** The github-kind turn text: a trusted metadata header + the FENCED excerpt.
 *  The title rides the header (relay-sanitized to one capped line) — it is
@@ -197329,16 +197329,202 @@ function buildHookMessage(msg, traceId) {
 //#endregion
 //#region src/github/poster.ts
 const DEFAULT_EDIT_INTERVAL_MS = 2e3;
+const DEFAULT_FINALIZE_TIMEOUT_MS = 15e3;
 /** GitHub caps comment bodies at 65536 chars — truncate with a marker well below. */
 const MAX_COMMENT_CHARS = 6e4;
 /** Consecutive API failures before the stream gives up for this turn. */
 const MAX_FAILURES = 3;
+const TRUNCATION_MARKER = "\n\n_(truncated — see the session transcript for the full reply)_";
+const LEGACY_BOUNDARIES = /* @__PURE__ */ new Set([
+	"agent_thought_chunk",
+	"tool_call",
+	"tool_call_update",
+	"plan"
+]);
+const NO_FINAL_MESSAGE_ID = Symbol("no-final-message-id");
+const NO_COMMENTARY_MESSAGE_ID = Symbol("no-commentary-message-id");
+function record(value) {
+	return value !== null && typeof value === "object" ? value : void 0;
+}
+/**
+* Select the one human-facing reply from an ACP turn.
+*
+* codex-acp ≥1.1.1 gives us the authoritative `_meta.codex.phase`; older Codex
+* builds still provide messageId, so the last logical message is the fallback.
+* Other ACP runtimes may provide neither — for them the last text run after a
+* thought/tool/plan boundary is the best runtime-agnostic approximation.
+*/
+var GithubReplyCollector = class {
+	messages = /* @__PURE__ */ new Map();
+	nextOrder = 0;
+	lastCommentarySeen = -1;
+	legacyRuns = [];
+	legacyCurrent;
+	/** Consume one raw ACP update. Returns the complete in-progress final answer, if authoritative. */
+	onUpdate(update) {
+		const u = record(update);
+		if (!u) return void 0;
+		const kind = typeof u.sessionUpdate === "string" ? u.sessionUpdate : void 0;
+		if (kind !== "agent_message_chunk") {
+			if (kind && LEGACY_BOUNDARIES.has(kind)) this.commitLegacyBoundary();
+			return;
+		}
+		const content = record(u.content);
+		if (content?.type !== "text" || typeof content.text !== "string") return void 0;
+		const text = content.text;
+		const seen = this.nextOrder++;
+		const codex = record(record(u._meta)?.codex);
+		const rawPhase = typeof codex?.phase === "string" ? codex.phase : void 0;
+		const phase = rawPhase === "commentary" || rawPhase === "final_answer" ? rawPhase : "unknown";
+		const messageId = typeof u.messageId === "string" && u.messageId ? u.messageId : void 0;
+		if (phase === "commentary" || phase === "final_answer") {
+			if (phase === "commentary") this.lastCommentarySeen = seen;
+		}
+		if (messageId || phase !== "unknown") {
+			const key = messageId ?? (phase === "final_answer" ? NO_FINAL_MESSAGE_ID : NO_COMMENTARY_MESSAGE_ID);
+			let candidate = this.messages.get(key);
+			if (!candidate) {
+				const provisional = this.takeProvisionalText();
+				candidate = {
+					firstSeen: provisional?.firstSeen ?? seen,
+					lastSeen: seen,
+					phase: "unknown",
+					text: provisional?.text ?? ""
+				};
+			}
+			if (phase === "final_answer" || phase === "commentary" && candidate.phase === "unknown") candidate.phase = phase;
+			candidate.text += text;
+			candidate.lastSeen = seen;
+			this.messages.set(key, candidate);
+		} else if (text && isKnownNonReplyText(text)) {
+			this.commitLegacyBoundary();
+			this.legacyRuns.push({
+				firstSeen: seen,
+				lastSeen: seen,
+				phase: "unknown",
+				text
+			});
+		} else if (text) {
+			this.legacyCurrent ??= {
+				firstSeen: seen,
+				lastSeen: seen,
+				phase: "unknown",
+				text: ""
+			};
+			this.legacyCurrent.text += text;
+			this.legacyCurrent.lastSeen = seen;
+		}
+		return this.explicitFinalText();
+	}
+	finalText(completed = true) {
+		const explicit = this.explicitFinalText();
+		if (explicit || !completed) return explicit;
+		const unknown = [
+			...this.messages.values(),
+			...this.legacyRuns,
+			...this.legacyCurrent ? [this.legacyCurrent] : []
+		].filter((candidate) => candidate.phase === "unknown" && candidate.text.trim() && !isKnownNonReplyText(candidate.text) && candidate.lastSeen > this.lastCommentarySeen).sort((a, b) => a.lastSeen - b.lastSeen).at(-1)?.text;
+		return unknown?.trim() ? unknown : void 0;
+	}
+	explicitFinalText() {
+		const text = [...this.messages.values()].filter((candidate) => candidate.phase === "final_answer" && candidate.text.trim()).sort((a, b) => a.firstSeen - b.firstSeen).map((candidate) => candidate.text).join("\n\n");
+		return text.trim() ? text : void 0;
+	}
+	commitLegacyBoundary() {
+		if (!this.legacyCurrent?.text.trim()) return;
+		this.legacyRuns.push(this.legacyCurrent);
+		this.legacyCurrent = void 0;
+	}
+	/** A phase/messageId can arrive one delta late; claim the immediately preceding
+	*  anonymous run so the public reply does not lose its prefix. Known adapter
+	*  chrome is deliberately left anonymous and therefore never folded into final. */
+	takeProvisionalText() {
+		const candidate = this.legacyCurrent;
+		if (!candidate || !candidate.text.trim() || isKnownNonReplyText(candidate.text)) return void 0;
+		this.legacyCurrent = void 0;
+		return candidate;
+	}
+};
+/** Adapter-generated status text that is neither commentary nor a user-facing
+*  final. These older paths lack messageId/phase, so content is the only signal. */
+function isKnownNonReplyText(text) {
+	const normalized = text.trim();
+	return /^\*?context compacted\b/i.test(normalized) || /^(?:config )?warning:/i.test(normalized) || /^\*conversation interrupted\*$/i.test(normalized);
+}
+function escapeMarkdownText(raw) {
+	return (raw.replace(/\s+/g, " ").trim().slice(0, 200) || "unknown agent").replace(/([\\`*_\[\]~<>])/g, "\\$1");
+}
+function markdownUrl(raw) {
+	try {
+		const url = new URL(raw);
+		if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
+		const normalized = url.toString();
+		if (normalized.length > 2048) return void 0;
+		return `<${normalized.replace(/</g, "%3C").replace(/>/g, "%3E")}>`;
+	} catch {
+		return;
+	}
+}
+function attributionFooter(attribution) {
+	if (!attribution) return "";
+	const name = escapeMarkdownText(attribution.agentName);
+	const agentUrl = markdownUrl(attribution.agentUrl);
+	const sessionUrl = markdownUrl(attribution.sessionUrl);
+	const parts = [`Replied by ${agentUrl ? `[${name}](${agentUrl})` : name}`];
+	if (sessionUrl) parts.push(`[View session](${sessionUrl})`);
+	return `\n\n---\n_${parts.join(" · ")}_`;
+}
+/** Return the fenced-code block left open at the end of `text`, if any. */
+function unclosedMarkdownFence(text) {
+	let open;
+	for (const rawLine of text.split("\n")) {
+		const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
+		const match = /^ {0,3}(`{3,}|~{3,})(.*)$/.exec(line);
+		if (!match) continue;
+		const run = match[1];
+		const marker = run[0];
+		const rest = match[2];
+		if (!open) {
+			if (marker === "`" && rest.includes("`")) continue;
+			open = {
+				marker,
+				length: run.length
+			};
+		} else if (marker === open.marker && run.length >= open.length && !rest.trim()) open = void 0;
+	}
+	return open;
+}
+function fenceCloser(text) {
+	const open = unclosedMarkdownFence(text);
+	if (!open) return "";
+	return `${text.endsWith("\n") ? "" : "\n"}${open.marker.repeat(open.length)}`;
+}
+/** UTF-16-safe prefix: never leave a high surrogate separated from its pair. */
+function safePrefix(text, maxChars) {
+	let end = Math.min(text.length, Math.max(0, maxChars));
+	if (end > 0 && end < text.length && text.charCodeAt(end - 1) >= 55296 && text.charCodeAt(end - 1) <= 56319 && text.charCodeAt(end) >= 56320 && text.charCodeAt(end) <= 57343) end -= 1;
+	return text.slice(0, end);
+}
+/** Fit a reply prefix into `budget`, closing a fence before marker/footer chrome. */
+function truncatedMarkdownPrefix(text, budget) {
+	let contentBudget = Math.max(0, budget);
+	for (;;) {
+		const prefix = safePrefix(text, contentBudget);
+		const closer = fenceCloser(prefix);
+		if (prefix.length + closer.length <= budget) return prefix + closer;
+		const nextBudget = Math.max(0, budget - closer.length);
+		if (nextBudget >= contentBudget) return safePrefix(text, budget);
+		contentBudget = nextBudget;
+	}
+}
 var GithubCommentStream = class {
 	deps;
 	repo;
 	issueNumber;
 	buffer = "";
-	posted = "";
+	/** Rendered body actually on GitHub. Comparing rendered output avoids no-op
+	*  PATCHes once an overlong reply has already filled the truncation budget. */
+	postedBody = null;
 	commentId = null;
 	inFlight = Promise.resolve();
 	busy = false;
@@ -197347,9 +197533,14 @@ var GithubCommentStream = class {
 	lastSendAt = 0;
 	failures = 0;
 	finished = false;
+	abandoned = false;
+	finishPromise;
+	abort = new AbortController();
 	sched;
 	editIntervalMs;
-	constructor(deps, repo, issueNumber) {
+	finalizeTimeoutMs;
+	footer;
+	constructor(deps, repo, issueNumber, attribution) {
 		this.deps = deps;
 		this.repo = repo;
 		this.issueNumber = issueNumber;
@@ -197359,30 +197550,72 @@ var GithubCommentStream = class {
 			clearTimeout: (h) => clearTimeout(h)
 		};
 		this.editIntervalMs = deps.minEditIntervalMs ?? DEFAULT_EDIT_INTERVAL_MS;
+		this.finalizeTimeoutMs = deps.finalizeTimeoutMs ?? DEFAULT_FINALIZE_TIMEOUT_MS;
+		this.footer = attributionFooter(attribution);
 	}
 	/** Fold one agent-output chunk in; schedules the create/edit as needed. Never throws. */
 	append(text) {
-		if (this.finished || this.failures >= MAX_FAILURES || !text) return;
+		if (this.finished || this.abandoned || this.failures >= MAX_FAILURES || !text) return;
 		this.buffer += text;
 		this.schedule();
 	}
+	/** Replace the streamed final-answer body with its complete value (messageId-safe). */
+	replace(text) {
+		if (this.finished || this.abandoned || this.failures >= MAX_FAILURES || !text) return;
+		this.buffer = text;
+		this.schedule();
+	}
 	/**
 	* Turn over: flush whatever is left as the final body. Resolves once the
 	* last write settled (or was abandoned); never rejects. Idempotent.
 	*/
-	async finish() {
-		if (this.finished) return;
+	finish(finalBody) {
+		if (!this.finishPromise) this.finishPromise = this.finishOnce(finalBody);
+		return this.finishPromise;
+	}
+	async finishOnce(finalBody) {
+		if (finalBody !== void 0) this.buffer = finalBody;
 		this.finished = true;
 		if (this.timer !== null) {
 			this.sched.clearTimeout(this.timer);
 			this.timer = null;
 		}
-		await this.inFlight;
-		if (this.buffer !== this.posted && this.buffer.trim() && this.failures < MAX_FAILURES) await this.send();
-		await this.inFlight;
+		if (!this.buffer.trim() && !this.busy) return;
+		let deadlineHandle;
+		try {
+			const deadline = new Promise((resolve) => {
+				deadlineHandle = this.sched.setTimeout(() => {
+					this.abandoned = true;
+					this.abort.abort();
+					try {
+						this.deps.log.warn(`github poster: final flush timed out on ${this.repo}#${this.issueNumber}`);
+					} catch {} finally {
+						resolve();
+					}
+				}, this.finalizeTimeoutMs);
+			});
+			const drain = (async () => {
+				await this.inFlight;
+				if (this.abandoned) return;
+				if ((this.commentId !== null || !this.renderedCurrent()) && this.buffer.trim() && this.failures < MAX_FAILURES) {
+					this.inFlight = this.send();
+					await this.inFlight;
+				}
+			})();
+			await Promise.race([drain, deadline]);
+		} catch (err) {
+			try {
+				this.deps.log.warn(`github poster: final flush failed on ${this.repo}#${this.issueNumber} (${String(err)})`);
+			} catch {}
+		} finally {
+			if (deadlineHandle !== void 0) try {
+				this.sched.clearTimeout(deadlineHandle);
+			} catch {}
+		}
 	}
 	schedule() {
-		if (this.busy || this.timer !== null) return;
+		if (this.abandoned || this.busy || this.timer !== null) return;
+		if (this.renderedCurrent()) return;
 		if (!this.hasSent) {
 			this.inFlight = this.send();
 			return;
@@ -197396,32 +197629,41 @@ var GithubCommentStream = class {
 	}
 	/** One create-or-edit round; merges everything buffered at send time. */
 	async send() {
-		if (this.busy) return;
+		if (this.abandoned || this.busy) return;
 		this.busy = true;
 		const snapshot = this.buffer;
-		const body = this.render(snapshot);
 		try {
+			const body = this.render(snapshot);
 			const token = await this.deps.token();
+			if (this.abandoned) return;
 			if (this.commentId === null) {
 				const created = await this.request("POST", `/repos/${this.repo}/issues/${this.issueNumber}/comments`, token, body);
 				this.commentId = created.id;
 				this.deps.log.debug(`github poster: comment ${created.id} opened on ${this.repo}#${this.issueNumber}`);
 			} else await this.request("PATCH", `/repos/${this.repo}/issues/comments/${this.commentId}`, token, body);
-			this.posted = snapshot;
+			this.postedBody = body;
 			this.failures = 0;
 		} catch (err) {
+			if (this.abandoned) return;
 			this.failures += 1;
 			this.deps.log.warn(`github poster: ${this.commentId === null ? "create" : "edit"} failed on ${this.repo}#${this.issueNumber} (${err.message?.slice(0, 200)})${this.failures >= MAX_FAILURES ? " — giving up for this turn" : ""}`);
 		} finally {
 			this.hasSent = true;
 			this.lastSendAt = this.sched.now();
 			this.busy = false;
-			if (!this.finished && this.buffer !== this.posted && this.failures < MAX_FAILURES) this.schedule();
+			if (!this.finished && !this.renderedCurrent() && this.failures < MAX_FAILURES) this.schedule();
 		}
 	}
 	render(text) {
-		if (text.length <= MAX_COMMENT_CHARS) return text;
-		return `${text.slice(0, MAX_COMMENT_CHARS)}\n\n_(truncated — see the session transcript for the full reply)_`;
+		if (text.length + this.footer.length <= MAX_COMMENT_CHARS) {
+			const closer = this.footer ? fenceCloser(text) : "";
+			if (text.length + closer.length + this.footer.length <= MAX_COMMENT_CHARS) return text + closer + this.footer;
+		}
+		const suffix = TRUNCATION_MARKER + this.footer;
+		return `${truncatedMarkdownPrefix(text, Math.max(0, MAX_COMMENT_CHARS - suffix.length))}${suffix}`;
+	}
+	renderedCurrent() {
+		return this.postedBody !== null && this.render(this.buffer) === this.postedBody;
 	}
 	async request(method, path, token, body) {
 		const res = await (this.deps.fetchImpl ?? fetch)(`${this.deps.baseUrl ?? "https://api.github.com"}${path}`, {
@@ -197432,6 +197674,7 @@ var GithubCommentStream = class {
 				"content-type": "application/json",
 				"x-github-api-version": "2022-11-28"
 			},
+			signal: this.abort.signal,
 			body: JSON.stringify({ body })
 		});
 		if (!res.ok) throw new Error(`GitHub ${method} ${res.status}`);
@@ -217134,7 +217377,7 @@ var Daemon = class Daemon {
 				index: 0,
 				replyText: ""
 			} } : {},
-			...githubReply ? { github: { stream: this.makeGithubReplyStream(agentId, githubReply) } } : {}
+			...githubReply ? { github: this.makeGithubReply(agentId, githubReply, sessionId) } : {}
 		};
 		this.pending.set(sessionId, p);
 		if (callMeta) this.activeTurnCallMeta.set(key, callMeta);
@@ -217213,8 +217456,10 @@ var Daemon = class Daemon {
 			this.clearIdle(p);
 			this.releasePermissions(sessionId);
 			this.releaseElicits(sessionId);
-			this.pending.delete(sessionId);
 			if (callMeta) this.activeTurnCallMeta.delete(key);
+			this.clearCancelBackstop(sessionId);
+			if (p.github) await p.github.stream.finish(p.github.collector.finalText(finalPhase === "end")).catch((err) => this.log.warn(`github poster: final flush failed (${formatErr(err)})`));
+			this.pending.delete(sessionId);
 			this.store.setSessionState(key, "idle", this.clock.now());
 			this.emitSessionMetadataSnapshot({
 				sessionId,
@@ -217224,8 +217469,6 @@ var Daemon = class Daemon {
 				channel: msg.channel,
 				thread: statusThread
 			});
-			this.clearCancelBackstop(sessionId);
-			if (p.github) p.github.stream.finish().catch((err) => this.log.warn(`github poster: final flush failed (${formatErr(err)})`));
 			p.resolveDone();
 		}
 		return sessionId;
@@ -217511,14 +217754,14 @@ var Daemon = class Daemon {
 	*  the View-session link is always available. */
 	sessionLink(acpSessionId) {
 		const orgSeg = this.cpOrgSlug ? `/${encodeURIComponent(this.cpOrgSlug)}` : "";
-		return `${this.webAppBase()}${orgSeg}/sessions/${acpSessionId}`;
+		return `${this.webAppBase()}${orgSeg}/sessions/${encodeURIComponent(acpSessionId)}`;
 	}
 	/** The console deep link to an agent: `<base>/<orgSlug>/agents/<agentId>` — the
 	*  shared-bot footer's "sent by <agent_name>" link (§10.1). Same org-seg rule as
 	*  {@link sessionLink}. */
 	agentLink(agentId) {
 		const orgSeg = this.cpOrgSlug ? `/${encodeURIComponent(this.cpOrgSlug)}` : "";
-		return `${this.webAppBase()}${orgSeg}/agents/${agentId}`;
+		return `${this.webAppBase()}${orgSeg}/agents/${encodeURIComponent(agentId)}`;
 	}
 	/** The shared-bot footer context for a turn, or undefined when this isn't a shared
 	*  Slack channel (then the classic "sent by agentconnect.md" footer is used). A
@@ -217876,9 +218119,9 @@ var Daemon = class Daemon {
 			for (const action of p.conv.onUpdate(update)) this.enqueueApply(p, action);
 			this.armIdle(p);
 		}
-		if (p.github && update?.sessionUpdate === "agent_message_chunk" && update.content?.type === "text") {
-			const text = update.content.text ?? "";
-			if (text) p.github.stream.append(text);
+		if (p.github) {
+			const finalAnswer = p.github.collector.onUpdate(update);
+			if (finalAnswer) p.github.stream.replace(finalAnswer);
 		}
 		for (const ev of p.rec.onUpdate(update)) this.recordEvent(p.agentId, p.channel, p.statusThread, ev);
 	}
@@ -218565,16 +218808,26 @@ var Daemon = class Daemon {
 		}
 		return this.dispatch(agentId, msg, target?.integrationId, void 0, void 0, void 0, githubReply);
 	}
-	/** Build the per-turn GitHub comment stream, tokened via the repo-targeted
-	*  gitcred mint (issues/PR write, no contents — never enters agent env). */
-	makeGithubReplyStream(agentId, ref) {
-		return new GithubCommentStream({
-			token: async () => (await this.gitCreds.getPostToken(agentId, ref.repo)).token,
-			log: {
-				warn: (m) => this.log.warn(m),
-				debug: (m) => this.log.debug(m)
-			}
-		}, ref.repo, ref.number);
+	/** Build the per-turn GitHub final-answer selector and comment stream, tokened
+	*  via the repo-targeted gitcred mint (issues/PR write, no contents — never
+	*  enters agent env). Attribution is fixed at turn creation so every edit has
+	*  the same agent/session footer. */
+	makeGithubReply(agentId, ref, sessionId) {
+		const agent = this.agents.get(agentId);
+		return {
+			collector: new GithubReplyCollector(),
+			stream: new GithubCommentStream({
+				token: async () => (await this.gitCreds.getPostToken(agentId, ref.repo)).token,
+				log: {
+					warn: (m) => this.log.warn(m),
+					debug: (m) => this.log.debug(m)
+				}
+			}, ref.repo, ref.number, {
+				agentName: agent?.name ?? agentId,
+				agentUrl: this.agentLink(agentId),
+				sessionUrl: this.sessionLink(sessionId)
+			})
+		};
 	}
 	/**
 	* A cron fired for `agentId` (§8.6 bypass). The fire is stamped into D11
@@ -218862,4 +219115,4 @@ async function runForeground(opts, deps = {}) {
 //#endregion
 export { ClientTransport as i, CP_SUBPROTOCOL as n, CP_WS_PATH as r, runForeground as t };
 
-//# sourceMappingURL=run-foreground-DWgt3Xvd.js.map
+//# sourceMappingURL=run-foreground-Q1x-MDxZ.js.map