@archme/cli 0.17.0 → 0.17.1

package/dist/cli.js

@@ -8649,11 +8649,11 @@ async function findKey(supabaseUrl, userId) {
   return (await listKeys(supabaseUrl)).find((k) => k.user_id === userId) ?? null;
 }
 async function saveKey(supabaseUrl, toSave) {
-  const saved = { ...toSave, saved_at: (/* @__PURE__ */ new Date()).toISOString() };
+  const saved2 = { ...toSave, saved_at: (/* @__PURE__ */ new Date()).toISOString() };
   return withRingLock(async () => {
-    const others = (await readEntries()).filter((k) => !isFor(k, supabaseUrl, saved.user_id));
-    await writeEntries([...others, { ...saved, supabase_url: supabaseUrl }]);
-    return saved;
+    const others = (await readEntries()).filter((k) => !isFor(k, supabaseUrl, saved2.user_id));
+    await writeEntries([...others, { ...saved2, supabase_url: supabaseUrl }]);
+    return saved2;
   });
 }
 async function forgetKey(supabaseUrl, userId) {
@@ -9316,10 +9316,10 @@ async function mintKeyedAccount(deps) {
   if (res.status !== 200 || !parsed || !data.user_id) {
     throw new LoginError(`Could not create an account (${res.status}): ${redactKey(res.data)}`);
   }
-  let saved = false;
+  let saved2 = false;
   try {
     await deps.saveKey(deps.supabaseUrl, { user_id: data.user_id, key: data.key, handle: parsed.handle });
-    saved = true;
+    saved2 = true;
   } catch (err4) {
     deps.log(`! Created ${parsed.handle}, but its key could not be written to ${deps.keyRingPath}: ${err4 instanceof Error ? err4.message : String(err4)}`);
     deps.log("  It is the only way back into this account. Save this now (a password manager is a good place):");
@@ -9331,7 +9331,7 @@ async function mintKeyedAccount(deps) {
   const grant = await deps.passwordGrant(parsed.email, parsed.secret);
   if (!grant.ok) {
     throw new LoginError(
-      `Created ${parsed.handle}${saved ? " and saved its key" : ""}, but signing in failed: ${grant.error}. ` + (saved ? "Run `archme login --key` to try again." : `Try again with the key printed above: ${KEY_VIA_ENV}.`)
+      `Created ${parsed.handle}${saved2 ? " and saved its key" : ""}, but signing in failed: ${grant.error}. ` + (saved2 ? "Run `archme login --key` to try again." : `Try again with the key printed above: ${KEY_VIA_ENV}.`)
     );
   }
   try {
@@ -9339,11 +9339,11 @@ async function mintKeyedAccount(deps) {
   } catch (err4) {
     if (!(err4 instanceof CredentialStoreError)) throw err4;
     throw new LoginError(
-      `${err4.message} Your account ${parsed.handle} was created${saved ? " and its key saved" : ""}; once that's fixed, sign in with it: ${saved ? "`archme login --key`" : KEY_VIA_ENV}.`
+      `${err4.message} Your account ${parsed.handle} was created${saved2 ? " and its key saved" : ""}; once that's fixed, sign in with it: ${saved2 ? "`archme login --key`" : KEY_VIA_ENV}.`
     );
   }
   deps.log(`\u2713 Created your ArchMe account ${parsed.handle} \u2014 no email or password, just a key.`);
-  if (saved) {
+  if (saved2) {
     deps.log(`  The key is saved in ${deps.keyRingPath}. Save it in your password manager too: it is the`);
     deps.log("  only way back in, including from another computer. `archme key show` prints it.");
   }
@@ -10692,7 +10692,7 @@ __export(install_exports, {
 import { isatty } from "node:tty";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { dirname as dirname6, join as join5 } from "node:path";
-import { mkdir as mkdir5 } from "node:fs/promises";
+import { chmod as chmod3, mkdir as mkdir5 } from "node:fs/promises";
 import { existsSync as existsSync2 } from "node:fs";
 function bakedSystemdEnv(unit) {
   const out = {};
@@ -10771,12 +10771,16 @@ Starting the installed service anyway; it reads its own sign-in when it boots.`)
     }
   }
 }
+async function ensurePrivateDir(dir) {
+  await mkdir5(dir, { recursive: true, mode: 448 });
+  await chmod3(dir, 448);
+}
 async function runStartFlow(opts = {}) {
   const platform3 = opts.platform ?? process.platform;
   const env = opts.env ?? process.env;
   await ensureStartPrerequisites(opts);
   const logPaths = resolveLogPath(platform3, env);
-  await mkdir5(resolveLogDir(platform3, env), { recursive: true });
+  await ensurePrivateDir(resolveLogDir(platform3, env));
   const controller = opts.controller ?? pickController(platform3, env);
   const installed = await controller.readUnitContent();
   const unitEnv2 = installed === null ? {} : platform3 === "darwin" ? bakedUnitEnv(installed) : bakedSystemdEnv(installed);
@@ -17421,9 +17425,9 @@ var init_sessionAuth = __esm({
           this.userId = resolveUserId(userInfo2, ctx.fallbackUserId);
           this.lastUserInfo = userInfo2;
         }
-        let saved = null;
+        let saved2 = null;
         try {
-          saved = await saveCredentials({
+          saved2 = await saveCredentials({
             kind: this.kind,
             refresh_token: nextRefreshToken,
             access_token: this.accessToken,
@@ -17438,7 +17442,7 @@ var init_sessionAuth = __esm({
             `auth: ${err4.message} The refreshed sign-in was NOT saved: this process keeps working, but the saved one is now out of date. If this process ends before a later refresh saves it, sign in again then. ${this.reloginHint()}`
           );
         }
-        return { userInfo: userInfo2, saved, nextRefreshToken };
+        return { userInfo: userInfo2, saved: saved2, nextRefreshToken };
       }
       // The timer closure reads the LIVE this.refreshToken/deviceId/orgId at fire
       // time (via runScheduledRefresh), never a captured value, so an out-of-band
@@ -17539,13 +17543,13 @@ var init_sessionAuth = __esm({
             }
             throw new LoadStoredAndRefreshError("transient", `${errorPrefix} failed: ${refreshed.error}`);
           }
-          const { saved } = await this.applyRefreshedTokens(refreshed, {
+          const { saved: saved2 } = await this.applyRefreshedTokens(refreshed, {
             prevRefreshToken: refreshToken,
             deviceId,
             orgId,
             fallbackUserId: this.userId ?? void 0
           });
-          if (saved) console.log(`auth: persisted refreshed token to ${describeCredentialSource(saved)}`);
+          if (saved2) console.log(`auth: persisted refreshed token to ${describeCredentialSource(saved2)}`);
         })();
         this.refreshInFlight = p;
         return p.finally(() => {
@@ -17578,13 +17582,13 @@ var init_sessionAuth = __esm({
       // clearing. Permanent only when there is no saved key or the key is refused;
       // the key ring itself is never modified here.
       async signInWithSavedKey(userId, refreshError) {
-        let saved;
+        let saved2;
         try {
-          saved = userId ? await findKey(this.cfg.supabaseUrl, userId) : null;
+          saved2 = userId ? await findKey(this.cfg.supabaseUrl, userId) : null;
         } catch (err4) {
           return { ok: false, permanent: false, error: `${refreshError}; ${err4 instanceof Error ? err4.message : String(err4)}` };
         }
-        const parsed = parseAccountKey(saved?.key);
+        const parsed = parseAccountKey(saved2?.key);
         if (!parsed) return { ok: false, permanent: true, error: `${refreshError}; no saved key for this account` };
         console.error(`auth: refresh token rejected (${refreshError}); signing in again with the saved key for ${parsed.handle}`);
         const granted = await passwordGrant(parsed.email, parsed.secret, this.cfg);
@@ -17917,7 +17921,10 @@ function rateLimitPauseUntil(text, nowMs = Date.now(), defaultTimeZone = localTi
   if (!info) return null;
   return {
     info,
-    pauseUntil: new Date(info.resetAt.getTime() + RATE_LIMIT_PAUSE_PADDING_MS)
+    // The reset is text the run reported (a box can forge it, and a dated one a
+    // week past rolls a year forward), and the pause stalls the whole account:
+    // never longer than a day. A job still limited then just defers again.
+    pauseUntil: new Date(Math.min(info.resetAt.getTime() + RATE_LIMIT_PAUSE_PADDING_MS, nowMs + RATE_LIMIT_MAX_PAUSE_MS))
   };
 }
 function looksLikeRateLimit(text) {
@@ -17958,7 +17965,7 @@ function claudeErrorDeferPlan(error, nowMs, defaultTimeZone) {
   }
   return null;
 }
-var RATE_LIMIT_RE, MONTHS, RATE_LIMIT_TENTATIVE_PAUSE_MS, DATED_RESET_ROLLOVER_GRACE_MS, RATE_LIMIT_PAUSE_PADDING_MS, RATE_LIMIT_SHAPED_RE;
+var RATE_LIMIT_RE, MONTHS, RATE_LIMIT_TENTATIVE_PAUSE_MS, DATED_RESET_ROLLOVER_GRACE_MS, RATE_LIMIT_PAUSE_PADDING_MS, RATE_LIMIT_MAX_PAUSE_MS, RATE_LIMIT_SHAPED_RE;
 var init_rateLimit = __esm({
   "src/daemon/rateLimit.ts"() {
     "use strict";
@@ -17980,6 +17987,7 @@ var init_rateLimit = __esm({
     RATE_LIMIT_TENTATIVE_PAUSE_MS = 60 * 60 * 1e3;
     DATED_RESET_ROLLOVER_GRACE_MS = 7 * 24 * 60 * 60 * 1e3;
     RATE_LIMIT_PAUSE_PADDING_MS = 9e4;
+    RATE_LIMIT_MAX_PAUSE_MS = 24 * 60 * 60 * 1e3;
     RATE_LIMIT_SHAPED_RE = /(\brate[ -]?limit\b|\blimit\b.{0,40}\bresets?\b|\bresets?\b.{0,40}\blimit\b|\b429\b|\bquota\b|\busage[ -]?limit\b)/i;
   }
 });
@@ -18313,7 +18321,7 @@ var init_localPrPoll = __esm({
 });
 
 // src/daemon/localRepos.ts
-import { chmod as chmod3, mkdir as mkdir9, readFile as readFile12, writeFile as writeFile9 } from "node:fs/promises";
+import { chmod as chmod4, mkdir as mkdir9, readFile as readFile12, writeFile as writeFile9 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
 import { dirname as dirname12, join as join19 } from "node:path";
 function localReposPath(env = process.env) {
@@ -18416,7 +18424,7 @@ async function saveLocalRepos(repos, env = process.env) {
   const path7 = localReposPath(env);
   await mkdir9(dirname12(path7), { recursive: true, mode: 448 });
   await writeFile9(path7, serializeLocalRepos(repos), { mode: 384 });
-  await chmod3(path7, 384).catch(() => {
+  await chmod4(path7, 384).catch(() => {
   });
 }
 async function registerLocalRepo(entry, env = process.env) {
@@ -18649,6 +18657,21 @@ var init_defaultBranch = __esm({
   }
 });
 
+// src/daemon/sshAgent.ts
+function detachSshAgent(env = process.env) {
+  if (env.SSH_AUTH_SOCK !== void 0) saved = env.SSH_AUTH_SOCK;
+  delete env.SSH_AUTH_SOCK;
+}
+function localGitEnv() {
+  return saved === void 0 ? process.env : { ...process.env, SSH_AUTH_SOCK: saved };
+}
+var saved;
+var init_sshAgent = __esm({
+  "src/daemon/sshAgent.ts"() {
+    "use strict";
+  }
+});
+
 // ../shared/prRefs.ts
 function parsePrRefs(message2) {
   if (!message2) return [];
@@ -18701,7 +18724,8 @@ async function git(dir, args, opts = {}) {
   requireBinary("git");
   const res = await execa("git", args, {
     cwd: dir ?? void 0,
-    env: opts.env,
+    // The SSH agent the daemon detached at boot (sshAgent.ts): origin may be ssh.
+    env: { ...localGitEnv(), ...opts.env },
     reject: false,
     timeout: GIT_TIMEOUT_MS,
     // Kill the whole process group: a hung `git fetch` has spawned helper
@@ -18807,6 +18831,7 @@ var init_localGit = __esm({
     init_execa();
     init_preflight();
     init_defaultBranch();
+    init_sshAgent();
     init_prRefs();
     GIT_TIMEOUT_MS = 10 * 60 * 1e3;
   }
@@ -19892,7 +19917,7 @@ var init_result2 = __esm({
 });
 
 // src/daemon/sandbox/inputDir.ts
-import { mkdtemp as mkdtemp3, readdir as readdir2, rm as rm7, writeFile as writeFile10, chmod as chmod4 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readdir as readdir2, rm as rm7, writeFile as writeFile10, chmod as chmod5 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join22 } from "node:path";
 async function writeInputDir(step, input, base = tmpdir3()) {
@@ -19900,7 +19925,7 @@ async function writeInputDir(step, input, base = tmpdir3()) {
   const cleanup = () => rm7(dir, { recursive: true, force: true }).catch(() => {
   });
   try {
-    await chmod4(dir, 448);
+    await chmod5(dir, 448);
     await writeFile10(join22(dir, "input.json"), JSON.stringify(input), { mode: 384, flag: "wx" });
   } catch (e) {
     await cleanup();
@@ -20112,7 +20137,7 @@ var init_confinement = __esm({
 
 // src/daemon/sandbox/claudeToken.ts
 import { constants as fsConstants } from "node:fs";
-import { chmod as chmod5, mkdir as mkdir11, open as open3 } from "node:fs/promises";
+import { chmod as chmod6, mkdir as mkdir11, open as open3 } from "node:fs/promises";
 import { dirname as dirname15 } from "node:path";
 function assertTokenShape(raw, where) {
   const token = raw.trim();
@@ -20185,7 +20210,7 @@ async function storeSandboxClaudeToken(raw, opts) {
   } finally {
     await fh.close();
   }
-  await chmod5(opts.path, 384);
+  await chmod6(opts.path, 384);
   return { source: "file", note };
 }
 async function checkClaudeToken(token, fetchFn = fetch) {
@@ -20611,24 +20636,28 @@ var init_runSandboxedJob = __esm({
 
 // src/daemon/sandbox/classifySandboxExit.ts
 function classifySandboxExit(input) {
-  const { counters, exitCode, stderr, stepFailure } = input;
-  if ((counters?.cap_hits ?? 0) > 0 || stderr.includes(SANDBOX_CAP_BODY)) {
+  const { counters, exitCode, stepFailure, claudeIsError } = input;
+  if ((counters?.cap_hits ?? 0) > 0) {
     return {
       kind: "terminal",
       reason: SANDBOX_REQUEST_CAP_REASON,
       message: `${SANDBOX_REQUEST_CAP_REASON}: the job exceeded the sandbox model-request cap` + (counters ? ` (${counters.model_requests} requests, ${counters.cap_hits} refused)` : "")
     };
   }
-  if (stepFailure == null && exitCode !== null && exitCode !== 0 && counters?.last_upstream_status === 429) {
-    return { kind: "upstream_rate_limit" };
+  if (stepFailure == null && exitCode !== null && (exitCode !== 0 || claudeIsError === true)) {
+    const status = counters?.last_upstream_status;
+    if (status === 429) return { kind: "upstream_rate_limit" };
+    if (status === 401 || status === 403) return { kind: "upstream_auth_failure" };
   }
   return { kind: "normal" };
 }
 function routeSandboxFailure(verdict, planFor, nowMs = Date.now()) {
-  if (verdict?.kind === "terminal") return { kind: "terminal", message: verdict.message };
-  const plan = planFor();
-  if (plan) return { kind: "defer", plan };
-  if (verdict?.kind === "upstream_rate_limit") {
+  if (verdict === null) {
+    const plan = planFor();
+    return plan ? { kind: "defer", plan } : { kind: "fail" };
+  }
+  if (verdict.kind === "terminal") return { kind: "terminal", message: verdict.message };
+  if (verdict.kind === "upstream_rate_limit") {
     return {
       kind: "defer",
       plan: { parsed: false, pauseUntil: new Date(nowMs + RATE_LIMIT_TENTATIVE_PAUSE_MS), info: null }
@@ -20641,7 +20670,6 @@ var init_classifySandboxExit = __esm({
   "src/daemon/sandbox/classifySandboxExit.ts"() {
     "use strict";
     init_rateLimit();
-    init_types();
     SANDBOX_REQUEST_CAP_REASON = "sandbox_request_cap";
     SandboxExitError = class extends Error {
       constructor(message2, verdict) {
@@ -22495,15 +22523,15 @@ async function runCloneStep(input, deps = {}) {
   }
 }
 function applyEnv(env) {
-  const saved = /* @__PURE__ */ new Map();
+  const saved2 = /* @__PURE__ */ new Map();
   for (const [k, v] of Object.entries(env)) {
     if (process.env[k] === v) continue;
-    saved.set(k, process.env[k]);
+    saved2.set(k, process.env[k]);
     if (v === void 0) delete process.env[k];
     else process.env[k] = v;
   }
   return () => {
-    for (const [k, v] of saved) {
+    for (const [k, v] of saved2) {
       if (v === void 0) delete process.env[k];
       else process.env[k] = v;
     }
@@ -22647,7 +22675,9 @@ async function runAgentStep(input, deps = {}) {
     cwd: repoDir,
     timeoutMs: input.timeoutMs,
     model: input.model,
-    ...firstScan ? { allowedTools: FIRST_SCAN_ALLOWED_TOOLS } : {},
+    // Diff/PR: no Bash. `-p` mode does not bind built-ins to --allowedTools,
+    // and a build step run through Bash can forge claude's stderr (BUG-143).
+    ...firstScan ? { allowedTools: FIRST_SCAN_ALLOWED_TOOLS } : { builtinTools: ["Read", "Glob", "Grep", "Agent"] },
     jsonOutput: true,
     settingSources: "user",
     // A box is Linux: a prompt over 128 KiB cannot be one argv string.
@@ -22797,7 +22827,7 @@ __export(run_exports, {
 });
 import { createClient as createClient2 } from "@supabase/supabase-js";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { mkdtemp as mkdtemp4, mkdir as mkdir16, writeFile as writeFile15, rm as rm8, stat as stat8, chmod as chmod6 } from "node:fs/promises";
+import { mkdtemp as mkdtemp4, mkdir as mkdir16, writeFile as writeFile15, rm as rm8, stat as stat8, chmod as chmod7 } from "node:fs/promises";
 import { tmpdir as tmpdir4 } from "node:os";
 import { join as join25 } from "node:path";
 import { homedir as homedir8, networkInterfaces as networkInterfaces2 } from "node:os";
@@ -22969,7 +22999,7 @@ async function buildGitEnv(credentials) {
     ].join("\n"),
     { mode: 448 }
   );
-  await chmod6(askpassPath, 448).catch(() => {
+  await chmod7(askpassPath, 448).catch(() => {
   });
   const gitConfigEntries = [
     ["credential.helper", ""],
@@ -23003,24 +23033,24 @@ async function ensureLocalCloneAndFetch(job, entry) {
         `local mirror ${dir} is missing or not a git repo \u2014 re-run \`archme init ${entry.sourcePath}\``
       );
     }
-    await execa("git", ["fetch", "--no-tags", "origin", job.repo_branch], { cwd: dir, reject: false });
+    await execa("git", ["fetch", "--no-tags", "origin", job.repo_branch], { cwd: dir, env: localGitEnv(), reject: false });
     if (job.source_mode === "pr_update") {
       await verifyLocalPrJob(job, async (args) => {
-        const r = await execa("git", args, { cwd: dir, reject: false });
+        const r = await execa("git", args, { cwd: dir, env: localGitEnv(), reject: false });
         return { exitCode: r.exitCode ?? 1, stdout: String(r.stdout ?? ""), stderr: String(r.stderr ?? "") };
       });
       return;
     }
-    const afterCheck = await execa("git", ["cat-file", "-e", job.after_sha], { cwd: dir, reject: false });
+    const afterCheck = await execa("git", ["cat-file", "-e", job.after_sha], { cwd: dir, env: localGitEnv(), reject: false });
     if (afterCheck.exitCode !== 0) {
-      await execa("git", ["fetch", "origin"], { cwd: dir, reject: false });
+      await execa("git", ["fetch", "origin"], { cwd: dir, env: localGitEnv(), reject: false });
     }
   }).catch((err4) => {
     if (err4 instanceof LocalPrJobRejectedError) throw err4;
     const msg = err4 instanceof Error ? err4.message : String(err4);
     throw new Error(`local repo ${job.repo_owner}/${job.repo_name} is not usable: ${msg}`);
   });
-  return { dir, gitEnv: process.env, cleanupGitEnv: async () => {
+  return { dir, gitEnv: localGitEnv(), cleanupGitEnv: async () => {
   } };
 }
 async function ensureCloneAndFetch(ctx, job, claimDeviceId) {
@@ -23707,8 +23737,9 @@ async function completeClaudeRun(ctx, job, deviceId, run) {
     throw new ClaudeRunError(
       `claude reported is_error in its JSON result (no successful completion)`,
       runResult.summary.trim().slice(-FAILURE_DETAIL_MAX) || null,
-      isClaudeAuthFailure(claudeErrorResult(run.stdout), run.stderr),
-      claudeErrorDetails(run.stdout)
+      run.sandboxVerdict ? run.sandboxVerdict.kind === "upstream_auth_failure" : isClaudeAuthFailure(claudeErrorResult(run.stdout), run.stderr),
+      claudeErrorDetails(run.stdout),
+      run.sandboxVerdict ?? null
     );
   }
   const summary2 = runResult.summary.trim().slice(0, 4e3);
@@ -23974,7 +24005,12 @@ async function runJob(ctx, job, claimDeviceId) {
           await rpcRollback(ctx, job.id, deviceId);
           return;
         }
-        const verdict = classifySandboxExit({ counters: sandboxMetrics, exitCode: outcome.exitCode, stderr: outcome.stderr });
+        const verdict = classifySandboxExit({
+          counters: sandboxMetrics,
+          exitCode: outcome.exitCode,
+          stderr: outcome.stderr,
+          claudeIsError: parseClaudeResult(outcome.claudeStdout).isError
+        });
         if (verdict.kind === "terminal") throw new SandboxExitError(verdict.message, verdict);
         if (outcome.exitCode !== 0) {
           const detail = claudeFailureDetail(outcome.stderr, outcome.claudeStdout);
@@ -23982,13 +24018,23 @@ async function runJob(ctx, job, claimDeviceId) {
           throw new ClaudeRunError(
             buildClaudeExitMessage(outcome.exitCode, outcome.signal ? ` (${outcome.signal})` : "", outcome.stderr),
             detail,
-            isClaudeAuthFailure(claudeErrorResult(outcome.claudeStdout), outcome.stderr),
+            // The gate's own 401/403, never the box's text (BUG-143).
+            verdict.kind === "upstream_auth_failure",
             claudeErrorDetails(outcome.claudeStdout),
             verdict
           );
         }
         const jobReads = readsFor(ctx, job, deviceId);
         if (firstScan) {
+          if (verdict.kind === "upstream_rate_limit" || verdict.kind === "upstream_auth_failure") {
+            throw new ClaudeRunError(
+              `claude reported is_error in its JSON result (no successful completion)`,
+              null,
+              verdict.kind === "upstream_auth_failure",
+              claudeErrorDetails(outcome.claudeStdout),
+              verdict
+            );
+          }
           const gate = firstScanGate(await jobReads.architectureCounts());
           if (!gate.ok) throw new Error(gate.reason);
         }
@@ -24001,7 +24047,8 @@ async function runJob(ctx, job, claimDeviceId) {
           startedAt,
           markPhase,
           log,
-          reads: jobReads
+          reads: jobReads,
+          sandboxVerdict: verdict
         });
         return;
       }
@@ -24271,8 +24318,9 @@ async function runJob(ctx, job, claimDeviceId) {
     const runErr = err4 instanceof ClaudeRunError ? err4 : null;
     const haystack = stripPromptEcho(`${msg}
 ${logs.stderr}`, sentPrompt);
+    const boxed = boxedJobs.has(job.id);
     const route2 = routeSandboxFailure(
-      err4 instanceof SandboxExitError ? err4.verdict : runErr?.sandboxVerdict ?? null,
+      err4 instanceof SandboxExitError ? err4.verdict : runErr?.sandboxVerdict ?? (boxed ? { kind: "normal" } : null),
       () => rateLimitDeferPlanForExit({
         message: msg,
         stderr: logs.stderr,
@@ -24289,7 +24337,7 @@ ${logs.stderr}`, sentPrompt);
     const plan = route2.kind === "defer" ? route2.plan : null;
     if (plan) {
       const { parsed, pauseUntil, info } = plan;
-      if (!parsed) {
+      if (!parsed && !boxed) {
         await rpcReportEvent(ctx, job, deviceId, "rate_limit_unmatched_exit", {
           job_id: job.id,
           excerpt: [runErr?.claudeError?.text, haystack].filter(Boolean).join("\n").slice(0, 500)
@@ -24321,8 +24369,12 @@ ${logs.stderr}`, sentPrompt);
       const notice = authFailureNotice(boxedJobs.has(job.id), runErr.detail);
       console.error(`[${job.id}] ${notice.message} Deferring job + pausing daemon until ${pauseUntil.toISOString()}.`);
       const detail = { job_id: job.id, claude_said: runErr.detail };
-      await rpcSetDaemonPause(ctx, pauseUntil, notice.reason, detail);
-      setLocalPause(pauseUntil.getTime());
+      if (job.job_kind !== "first_scan") {
+        await rpcSetDaemonPause(ctx, pauseUntil, notice.reason, detail);
+        setLocalPause(pauseUntil.getTime());
+      } else {
+        firstScanPauseUntilMs = Math.max(firstScanPauseUntilMs, pauseUntil.getTime());
+      }
       const deferred = await rpcDefer(ctx, job.id, deviceId, notice.reason, detail);
       if (deferred) return;
       console.warn(`[${job.id}] defer no-op \u2014 falling through to fail`);
@@ -24517,6 +24569,7 @@ function exitDaemon(code) {
   process.exit(resolveExitCode(code, process.env));
 }
 async function runDaemon() {
+  detachSshAgent();
   let lockHandle = null;
   try {
     lockHandle = await acquireSingleInstanceLock(resolvePidfilePath(process.env));
@@ -24891,6 +24944,7 @@ var init_run = __esm({
     init_host();
     init_runSandboxedJob();
     init_inputDir();
+    init_sshAgent();
     init_classifySandboxExit();
     HEARTBEAT_INTERVAL_MS = 6e4;
     CLAUDE_TIMEOUT_MS = 30 * 60 * 1e3;
@@ -30714,7 +30768,7 @@ async function runConciergeToken(opts, deps) {
 async function reserveStdout(fn) {
   const stdout = process.stdout;
   const realWrite = stdout.write;
-  const saved = { log: console.log, info: console.info, debug: console.debug };
+  const saved2 = { log: console.log, info: console.info, debug: console.debug };
   const toStderr = (...args) => console.error(...args);
   console.log = toStderr;
   console.info = toStderr;
@@ -30726,9 +30780,9 @@ async function reserveStdout(fn) {
     });
   } finally {
     stdout.write = realWrite;
-    console.log = saved.log;
-    console.info = saved.info;
-    console.debug = saved.debug;
+    console.log = saved2.log;
+    console.info = saved2.info;
+    console.debug = saved2.debug;
   }
 }
 async function postConciergeTokenWith(supabaseUrl, accessToken, body) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archme/cli",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Map your codebase into a living architecture diagram: run `archme init` in a repo to scan it, `archme daemon start` to keep it current on every commit.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/sandbox-image.json

@@ -1,4 +1,4 @@
 {
   "image": "ghcr.io/architectme/archme-job",
-  "digest": "sha256:e82027063082a90ad4e6bf0a551da676bc57d6aad7778c737652acc95eae3999"
+  "digest": "sha256:bedd452cb1fb7f0474d06296b8033b426c4a808e762ee61c9043b19d723fb43b"
 }