@cabane/companion 0.6.188 → 0.6.190

package/dist/launch.js

@@ -196,7 +196,15 @@ var companionConfigSchema = z2.object({
   // and an agent with no folder of its own and no prepare hook works there
   // (`turn-execution.ts`, `prepareEnvironment`). Default `~/.cabane/work`: hidden, so pairing a
   // laptop creates no new visible folder; set it to make the work visible.
-  root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional()
+  root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional(),
+  // An argv prefix the operator puts in front of every turn's runner: the companion starts
+  // `<prefix…> <its own run-turn command…>` instead of the runner bare. What the prefix does
+  // is the operator's (a box of their own making, ENG225); the companion knows nothing of it
+  // beyond handing the runner over, with the turn's inputs in its environment and the
+  // credential and secrets on its stdin (`runner/launch.ts`, `boxed`).
+  runner: z2.object({
+    command: z2.array(z2.string().min(1)).min(1)
+  }).strict().optional()
 });
 var legacyOfferSchema = z2.object({
   claudeCode: z2.object({ enabled: z2.boolean().optional() }).passthrough().optional(),

package/dist/pairing-config.js

@@ -221,7 +221,15 @@ var companionConfigSchema = z2.object({
   // and an agent with no folder of its own and no prepare hook works there
   // (`turn-execution.ts`, `prepareEnvironment`). Default `~/.cabane/work`: hidden, so pairing a
   // laptop creates no new visible folder; set it to make the work visible.
-  root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional()
+  root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional(),
+  // An argv prefix the operator puts in front of every turn's runner: the companion starts
+  // `<prefix…> <its own run-turn command…>` instead of the runner bare. What the prefix does
+  // is the operator's (a box of their own making, ENG225); the companion knows nothing of it
+  // beyond handing the runner over, with the turn's inputs in its environment and the
+  // credential and secrets on its stdin (`runner/launch.ts`, `boxed`).
+  runner: z2.object({
+    command: z2.array(z2.string().min(1)).min(1)
+  }).strict().optional()
 });
 function retiredConfigKeys(raw) {
   if (!raw || typeof raw !== "object") return [];

package/dist/runtime.js

@@ -295,7 +295,15 @@ var companionConfigSchema = z2.object({
   // and an agent with no folder of its own and no prepare hook works there
   // (`turn-execution.ts`, `prepareEnvironment`). Default `~/.cabane/work`: hidden, so pairing a
   // laptop creates no new visible folder; set it to make the work visible.
-  root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional()
+  root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional(),
+  // An argv prefix the operator puts in front of every turn's runner: the companion starts
+  // `<prefix…> <its own run-turn command…>` instead of the runner bare. What the prefix does
+  // is the operator's (a box of their own making, ENG225); the companion knows nothing of it
+  // beyond handing the runner over, with the turn's inputs in its environment and the
+  // credential and secrets on its stdin (`runner/launch.ts`, `boxed`).
+  runner: z2.object({
+    command: z2.array(z2.string().min(1)).min(1)
+  }).strict().optional()
 });
 function workRoot(cfg) {
   const root = cfg.root;
@@ -6150,6 +6158,10 @@ function createSdkCodexTransport(opts = {}) {
 }
 
 // packages/agent-runtime/src/codex/index.ts
+function isMissingRollout(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return /no rollout found for thread id/i.test(message);
+}
 function createCodexAdapter(deps = {}) {
   const transport = deps.transport ?? (deps.enabled ? createSdkCodexTransport({ ...deps.apiKey ? { apiKey: deps.apiKey } : {} }) : null);
   return {
@@ -6168,8 +6180,8 @@ function createCodexAdapter(deps = {}) {
       }
       const directory = req.local.cwd ?? "";
       const decision = decideResume3(req.session, directory);
-      const resumeThreadId = "resume" in decision ? decision.resume : null;
-      const threadUsageBaseline = "resume" in decision ? decision.usageBaseline : null;
+      let resumeThreadId = "resume" in decision ? decision.resume : null;
+      let threadUsageBaseline = "resume" in decision ? decision.usageBaseline : null;
       if ("fresh" in decision && decision.reason === "cwd_mismatch") {
         deps.onWarn?.(
           "codex adapter: stored session directory no longer matches the current environment \u2014 starting a fresh thread (SJ527-analogue guard)",
@@ -6234,38 +6246,69 @@ function createCodexAdapter(deps = {}) {
           }
           if (signal.aborted) return;
         }
-        const spec = buildRunSpec2(req, resumeThreadId, threadStanding, images?.paths ?? []);
-        if (spec.model === null) {
-          deps.onWarn?.("Codex is using its default model because no model was resolved", {
-            model: req.config.model
-          });
+        for (; ; ) {
+          const spec = buildRunSpec2(req, resumeThreadId, threadStanding, images?.paths ?? []);
+          if (spec.model === null) {
+            deps.onWarn?.("Codex is using its default model because no model was resolved", {
+              model: req.config.model
+            });
+          }
+          let emitted = false;
+          try {
+            const result = await transport.run(spec, signal);
+            if (signal.aborted) return;
+            for await (const event of decodeCodexStream(result.events, {
+              signal,
+              cwd: req.local.cwd,
+              resumedThreadId: resumeThreadId,
+              degraded,
+              // Which segments the thread carries once this turn lands. A segment sent is that one —
+              // the later copy is what the model reads. One withheld is what the thread had. Read off
+              // the spec, so the record can't disagree with what was sent.
+              promptFingerprint: spec.preamble.core ? spec.fingerprints.core : threadStanding?.core ?? null,
+              conversationFingerprint: spec.preamble.conversation ? spec.fingerprints.conversation : threadStanding?.conversation ?? null,
+              compactions,
+              // What the thread held before this turn, for the write at `thread.started`.
+              heldStanding: {
+                promptFingerprint: threadStanding?.core ?? null,
+                conversationFingerprint: threadStanding?.conversation ?? null,
+                compactions: threadStanding ? compactions : null
+              },
+              storedState: req.session,
+              usageBaseline: threadUsageBaseline,
+              // Codex reports no model in-stream, so record what the thread was started with (null on the
+              // default token). Same for the reasoning effort.
+              resolvedModel: spec.model,
+              resolvedReasoningEffort: spec.modelReasoningEffort ?? null
+            })) {
+              emitted = true;
+              yield event;
+            }
+            return;
+          } catch (err) {
+            if (resumeThreadId === null || emitted || signal.aborted || !isMissingRollout(err)) {
+              throw err;
+            }
+            deps.onWarn?.(
+              "codex adapter: the stored thread has no rollout on this host \u2014 starting a fresh thread",
+              { threadId: resumeThreadId }
+            );
+            resumeThreadId = null;
+            threadUsageBaseline = null;
+            threadStanding = null;
+            compactions = 0;
+            req = { ...req, session: null };
+            degraded = true;
+            if (hooks?.fresh) {
+              const recomposed = await hooks.fresh("session_start_failed");
+              if (signal.aborted) return;
+              if (recomposed) {
+                req = { ...req, ...recomposed, session: null };
+                degraded = false;
+              }
+            }
+          }
         }
-        const result = await transport.run(spec, signal);
-        if (signal.aborted) return;
-        yield* decodeCodexStream(result.events, {
-          signal,
-          cwd: req.local.cwd,
-          resumedThreadId: resumeThreadId,
-          degraded,
-          // Which segments the thread carries once this turn lands. A segment sent is that one —
-          // the later copy is what the model reads. One withheld is what the thread had. Read off
-          // the spec, so the record can't disagree with what was sent.
-          promptFingerprint: spec.preamble.core ? spec.fingerprints.core : threadStanding?.core ?? null,
-          conversationFingerprint: spec.preamble.conversation ? spec.fingerprints.conversation : threadStanding?.conversation ?? null,
-          compactions,
-          // What the thread held before this turn, for the write at `thread.started`.
-          heldStanding: {
-            promptFingerprint: threadStanding?.core ?? null,
-            conversationFingerprint: threadStanding?.conversation ?? null,
-            compactions: threadStanding ? compactions : null
-          },
-          storedState: req.session,
-          usageBaseline: threadUsageBaseline,
-          // Codex reports no model in-stream, so record what the thread was started with (null on the
-          // default token). Same for the reasoning effort.
-          resolvedModel: spec.model,
-          resolvedReasoningEffort: spec.modelReasoningEffort ?? null
-        });
       } finally {
         if (images) {
           try {
@@ -7445,7 +7488,8 @@ var dispatchSchema = z14.object({
   episode: z14.number().int().optional()
 });
 var credentialsSchema = z14.object({
-  credential: z14.string().startsWith("cabrn_")
+  credential: z14.string().startsWith("cabrn_"),
+  secrets: z14.record(z14.string(), z14.string()).optional()
 });
 function runnerEnv(input) {
   return {
@@ -7457,7 +7501,10 @@ function runnerEnv(input) {
   };
 }
 function runnerStdin(input) {
-  return `${JSON.stringify({ credential: input.credential })}
+  return `${JSON.stringify({
+    credential: input.credential,
+    ...input.secrets ? { secrets: input.secrets } : {}
+  })}
 `;
 }
 function encodeLauncherMessage(message) {
@@ -7482,6 +7529,29 @@ function selfRunnerCommand() {
   if (!script) throw new Error("runner: cannot tell which script started this companion");
   return [process.execPath, ...process.execArgv, script, "run-turn"];
 }
+function wrappedRunnerCommand(prefix, own) {
+  return [...prefix ?? [], ...own];
+}
+var BOXED_ENV_DROPPED = [
+  "ANTHROPIC_API_KEY",
+  "CLAUDE_CODE_OAUTH_TOKEN",
+  "CODEX_API_KEY",
+  "GH_TOKEN",
+  "GITHUB_TOKEN",
+  "DBUS_SESSION_BUS_ADDRESS",
+  "XDG_RUNTIME_DIR"
+];
+var BOXED_ENV_DROPPED_PREFIX = "CABANE_GATE_";
+function runnerExecEnv(base, boxed) {
+  const env = {};
+  for (const [k, v] of Object.entries(base)) {
+    if (v === void 0) continue;
+    if (boxed && (BOXED_ENV_DROPPED.includes(k) || k.startsWith(BOXED_ENV_DROPPED_PREFIX)))
+      continue;
+    env[k] = v;
+  }
+  return env;
+}
 function healthSnapshot(store) {
   const out = {};
   for (const r of store?.reports() ?? []) {
@@ -7686,13 +7756,12 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
     return { ok: false, durationMs: durationMs2, reason: reason2 };
   }
   try {
-    const env = {};
-    for (const [k, v] of Object.entries(launch.env ?? process.env)) {
-      if (v !== void 0) env[k] = v;
-    }
+    const boxed = launch.boxed === true;
+    const env = runnerExecEnv(launch.env ?? process.env, boxed);
     const input = {
       baseUrl: opts.baseUrl,
       credential: minted.credential,
+      ...boxed ? { secrets: launch.secrets?.() ?? {} } : {},
       dispatch: payload,
       turnId,
       resumed: handleOpts.resumed,
@@ -7764,7 +7833,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
           locks?.release(lockOwner(event.id));
           return;
         case "process_group":
-          groups.push(event.pgid);
+          if (!boxed) groups.push(event.pgid);
           return;
         case "remote_session":
           remote.push({ serverUrl: event.serverUrl, sessionId: event.sessionId });
@@ -7785,7 +7854,8 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
   }
   if (result) return result;
   const durationMs = Date.now() - startedAt;
-  const reason = thrown !== void 0 ? `runner_failed: ${thrown}` : `runner_exited: ${code}`;
+  const stopped = controller.signal.aborted && thrown === void 0;
+  const reason = stopped ? "cancelled" : thrown !== void 0 ? `runner_failed: ${thrown}` : `runner_exited: ${code}`;
   await child?.reap(groups);
   const reaped = await (launch.reapTurn ?? reapTurnScopes)(turnId).catch((err) => ({
     failures: [err instanceof Error ? err.message : String(err)]
@@ -7800,8 +7870,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
     await opts.api.setActiveRun(opts.workspaceId, payload.conversationId, payload.agentId, {
       activeRunStartedAt: null,
       turnId,
-      outcome: "failed",
-      errorReason: reason.slice(0, ERROR_REASON_MAX),
+      ...stopped ? { outcome: "interrupted" } : { outcome: "failed", errorReason: reason.slice(0, ERROR_REASON_MAX) },
       readThrough: payload.messageId
     });
   } catch (err) {
@@ -7819,7 +7888,8 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
     reason: "exited"
   });
   if (thrown !== void 0) throw new Error(thrown);
-  log.warn({ turnId, code }, "runner: exited without reporting a result");
+  if (stopped) log.info({ turnId, code }, "runner: stopped before it could report");
+  else log.warn({ turnId, code }, "runner: exited without reporting a result");
   duties.notifyEnd({ id: payload.messageId, ok: false, durationMs, reason });
   return { ok: false, durationMs, reason };
 }
@@ -7881,9 +7951,9 @@ function secretsPath() {
   return join18(cabaneDir(), "secrets.json");
 }
 var secretStoreSchema = z16.record(z16.string(), z16.string());
-function loadSecretStore() {
+function loadSecretValues() {
   const path = secretsPath();
-  if (!existsSync10(path)) return makeStore({});
+  if (!existsSync10(path)) return {};
   let raw;
   try {
     raw = readFileSync8(path, "utf8");
@@ -7892,7 +7962,7 @@ function loadSecretStore() {
       `couldn't read ${path}: ${err instanceof Error ? err.message : String(err)}`
     );
   }
-  if (raw.trim().length === 0) return makeStore({});
+  if (raw.trim().length === 0) return {};
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -7907,14 +7977,17 @@ function loadSecretStore() {
       `${path} must be a flat object mapping secret names to string values (e.g. { "GITHUB_TOKEN": "ghp_\u2026" }).`
     );
   }
-  return makeStore(result.data);
+  return result.data;
 }
 function loadSecretStoreTolerant(onWarn) {
+  return makeStore(loadSecretValuesTolerant(onWarn));
+}
+function loadSecretValuesTolerant(onWarn) {
   try {
-    return loadSecretStore();
+    return loadSecretValues();
   } catch (err) {
     onWarn?.(err instanceof Error ? err.message : String(err));
-    return makeStore({});
+    return {};
   }
 }
 function makeStore(map) {
@@ -7939,6 +8012,130 @@ function requiredSecretNames(mcpServers) {
   return [...names].sort();
 }
 
+// src/harness-usable.ts
+import { spawn as spawn4 } from "child_process";
+
+// src/harness-versions.ts
+var EMPTY = { claudeCode: null, opencode: null, codex: null };
+function parseVersionToken(raw) {
+  if (!raw) return null;
+  const m = raw.match(/\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?/);
+  return m ? m[0] : null;
+}
+async function probeOpencodeVersion(serverUrl, fetchImpl = fetch) {
+  try {
+    const base = serverUrl.endsWith("/") ? serverUrl.slice(0, -1) : serverUrl;
+    const res = await fetchImpl(`${base}/global/health`, {
+      headers: { accept: "application/json" }
+    });
+    if (!res.ok) return null;
+    return extractOpencodeVersion(await res.json());
+  } catch {
+    return null;
+  }
+}
+function extractOpencodeVersion(json) {
+  if (!json || typeof json !== "object") return null;
+  const obj = json;
+  const candidates = [obj.version];
+  for (const v of Object.values(obj)) {
+    if (v && typeof v === "object") candidates.push(v.version);
+  }
+  for (const c of candidates) {
+    if (typeof c === "string") {
+      const parsed = parseVersionToken(c);
+      if (parsed) return parsed;
+    }
+  }
+  return null;
+}
+function emptyHarnessVersions() {
+  return { ...EMPTY };
+}
+
+// src/harness-usable.ts
+var API_KEY_VARIABLES = {
+  "claude-code": ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"],
+  codex: ["CODEX_API_KEY"]
+};
+function apiKeyVariable(runtime, env = process.env) {
+  return API_KEY_VARIABLES[runtime].find((name) => !!env[name]?.trim()) ?? null;
+}
+var CHECK_TIMEOUT_MS = 5e3;
+async function checkHarnessUsable(runtime, deps = {}) {
+  const env = deps.env ?? process.env;
+  const resolveBundled = deps.resolveBundled ?? ((r) => resolveBundledBinary(r));
+  const run = deps.run ?? runBounded;
+  const resolution = resolveBundled(runtime);
+  if (resolution.status !== "present" || !resolution.path) {
+    return {
+      status: "bundle_missing",
+      bundled: resolution.status === "present" ? "executable_missing" : resolution.status
+    };
+  }
+  const path = resolution.path;
+  const version = run(path, ["--version"], env).then(
+    (r) => r.code === 0 ? parseVersionToken(r.output) : null
+  );
+  const variable = apiKeyVariable(runtime, env);
+  if (variable) return { status: "api_key", variable, version: await version };
+  const statusArgs = runtime === "codex" ? ["login", "status"] : ["auth", "status", "--json"];
+  const [answer, v] = await Promise.all([run(path, statusArgs, env), version]);
+  if (answer.error) return { status: "check_failed", reason: answer.error };
+  const signedIn = runtime === "codex" ? readCodexStatus(answer) : readClaudeStatus(answer);
+  if (typeof signedIn === "string") return { status: "check_failed", reason: signedIn };
+  return signedIn ? { status: "signed_in", version: v } : { status: "signed_out", version: v };
+}
+function readClaudeStatus(answer) {
+  const start = answer.output.indexOf("{");
+  const end = answer.output.lastIndexOf("}");
+  if (start < 0 || end < start) return "unreadable";
+  try {
+    const parsed = JSON.parse(answer.output.slice(start, end + 1));
+    const loggedIn = parsed?.loggedIn;
+    return typeof loggedIn === "boolean" ? loggedIn : "unreadable";
+  } catch {
+    return "unreadable";
+  }
+}
+function readCodexStatus(answer) {
+  if (answer.code === 0) return true;
+  if (/not logged in/i.test(answer.output)) return false;
+  if (/config/i.test(answer.output)) return "config";
+  return "unreadable";
+}
+function runBounded(path, args, env) {
+  return new Promise((resolve) => {
+    let settled = false;
+    let out = "";
+    const done = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve(result);
+    };
+    let child;
+    try {
+      child = spawn4(path, args, { stdio: ["ignore", "pipe", "pipe"], env });
+    } catch {
+      resolve({ code: null, output: "", error: "spawn" });
+      return;
+    }
+    const capture = (chunk) => {
+      if (out.length < 8192) out += chunk.toString();
+    };
+    child.stdout?.on("data", capture);
+    child.stderr?.on("data", capture);
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      done({ code: null, output: out, error: "timeout" });
+    }, CHECK_TIMEOUT_MS);
+    timer.unref?.();
+    child.once("error", () => done({ code: null, output: out, error: "spawn" }));
+    child.once("close", (code) => done({ code, output: out }));
+  });
+}
+
 // src/transcript-writer.ts
 import { appendFileSync, chmodSync as chmodSync4, copyFileSync, mkdirSync as mkdirSync8, readdirSync, rmSync as rmSync6 } from "fs";
 import { basename as basename3, dirname as dirname7, join as join19 } from "path";
@@ -8083,7 +8280,7 @@ function hostReport() {
 }
 
 // src/providers/local-process.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { constants as constants2 } from "os";
 var DEFAULT_KILL_GRACE_MS = 3e4;
 var DEFAULT_REAP_GRACE_MS = 3e3;
@@ -8094,7 +8291,7 @@ function exitCode(code, signal) {
 }
 function createLocalProcessProvider(opts = {}) {
   const killGraceMs = opts.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
-  const spawnFn = opts.spawnFn ?? spawn4;
+  const spawnFn = opts.spawnFn ?? spawn5;
   const reapGraceMs = opts.reapGraceMs ?? DEFAULT_REAP_GRACE_MS;
   const killFn = opts.killFn ?? ((pid, signal) => process.kill(pid, signal));
   const groupAlive = (pgid) => {
@@ -8296,44 +8493,6 @@ function checkReason(check) {
   }
 }
 
-// src/harness-versions.ts
-var EMPTY = { claudeCode: null, opencode: null, codex: null };
-function parseVersionToken(raw) {
-  if (!raw) return null;
-  const m = raw.match(/\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?/);
-  return m ? m[0] : null;
-}
-async function probeOpencodeVersion(serverUrl, fetchImpl = fetch) {
-  try {
-    const base = serverUrl.endsWith("/") ? serverUrl.slice(0, -1) : serverUrl;
-    const res = await fetchImpl(`${base}/global/health`, {
-      headers: { accept: "application/json" }
-    });
-    if (!res.ok) return null;
-    return extractOpencodeVersion(await res.json());
-  } catch {
-    return null;
-  }
-}
-function extractOpencodeVersion(json) {
-  if (!json || typeof json !== "object") return null;
-  const obj = json;
-  const candidates = [obj.version];
-  for (const v of Object.values(obj)) {
-    if (v && typeof v === "object") candidates.push(v.version);
-  }
-  for (const c of candidates) {
-    if (typeof c === "string") {
-      const parsed = parseVersionToken(c);
-      if (parsed) return parsed;
-    }
-  }
-  return null;
-}
-function emptyHarnessVersions() {
-  return { ...EMPTY };
-}
-
 // src/harness-copy.ts
 import { homedir as homedir8 } from "os";
 import { join as join21 } from "path";
@@ -8369,90 +8528,6 @@ function spaced(sentence) {
   return sentence ? ` ${sentence}` : "";
 }
 
-// src/harness-usable.ts
-import { spawn as spawn5 } from "child_process";
-var API_KEY_VARIABLES = {
-  "claude-code": ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"],
-  codex: ["CODEX_API_KEY"]
-};
-function apiKeyVariable(runtime, env = process.env) {
-  return API_KEY_VARIABLES[runtime].find((name) => !!env[name]?.trim()) ?? null;
-}
-var CHECK_TIMEOUT_MS = 5e3;
-async function checkHarnessUsable(runtime, deps = {}) {
-  const env = deps.env ?? process.env;
-  const resolveBundled = deps.resolveBundled ?? ((r) => resolveBundledBinary(r));
-  const run = deps.run ?? runBounded;
-  const resolution = resolveBundled(runtime);
-  if (resolution.status !== "present" || !resolution.path) {
-    return {
-      status: "bundle_missing",
-      bundled: resolution.status === "present" ? "executable_missing" : resolution.status
-    };
-  }
-  const path = resolution.path;
-  const version = run(path, ["--version"], env).then(
-    (r) => r.code === 0 ? parseVersionToken(r.output) : null
-  );
-  const variable = apiKeyVariable(runtime, env);
-  if (variable) return { status: "api_key", variable, version: await version };
-  const statusArgs = runtime === "codex" ? ["login", "status"] : ["auth", "status", "--json"];
-  const [answer, v] = await Promise.all([run(path, statusArgs, env), version]);
-  if (answer.error) return { status: "check_failed", reason: answer.error };
-  const signedIn = runtime === "codex" ? readCodexStatus(answer) : readClaudeStatus(answer);
-  if (typeof signedIn === "string") return { status: "check_failed", reason: signedIn };
-  return signedIn ? { status: "signed_in", version: v } : { status: "signed_out", version: v };
-}
-function readClaudeStatus(answer) {
-  const start = answer.output.indexOf("{");
-  const end = answer.output.lastIndexOf("}");
-  if (start < 0 || end < start) return "unreadable";
-  try {
-    const parsed = JSON.parse(answer.output.slice(start, end + 1));
-    const loggedIn = parsed?.loggedIn;
-    return typeof loggedIn === "boolean" ? loggedIn : "unreadable";
-  } catch {
-    return "unreadable";
-  }
-}
-function readCodexStatus(answer) {
-  if (answer.code === 0) return true;
-  if (/not logged in/i.test(answer.output)) return false;
-  if (/config/i.test(answer.output)) return "config";
-  return "unreadable";
-}
-function runBounded(path, args, env) {
-  return new Promise((resolve) => {
-    let settled = false;
-    let out = "";
-    const done = (result) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      resolve(result);
-    };
-    let child;
-    try {
-      child = spawn5(path, args, { stdio: ["ignore", "pipe", "pipe"], env });
-    } catch {
-      resolve({ code: null, output: "", error: "spawn" });
-      return;
-    }
-    const capture = (chunk) => {
-      if (out.length < 8192) out += chunk.toString();
-    };
-    child.stdout?.on("data", capture);
-    child.stderr?.on("data", capture);
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      done({ code: null, output: out, error: "timeout" });
-    }, CHECK_TIMEOUT_MS);
-    timer.unref?.();
-    child.once("error", () => done({ code: null, output: out, error: "spawn" }));
-    child.once("close", (code) => done({ code, output: out }));
-  });
-}
-
 // src/harness-detect.ts
 var DEFAULT_OPENCODE_SERVER_URL = "http://127.0.0.1:4096";
 var DEFAULT_OPENCODE_PROBE_MS = 1e3;
@@ -10254,7 +10329,16 @@ var CompanionSupervisor = class {
       },
       runner: {
         provider: this.runnerProvider,
-        command: this.runnerCommand ?? selfRunnerCommand(),
+        command: wrappedRunnerCommand(
+          this.config.runner?.command,
+          this.runnerCommand ?? selfRunnerCommand()
+        ),
+        ...this.config.runner?.command ? {
+          boxed: true,
+          secrets: () => loadSecretValuesTolerant(
+            (m) => this.log.warn({ err: m }, "Could not read the secrets file for a boxed turn.")
+          )
+        } : {},
         ...this.runnerEnv ? { env: this.runnerEnv } : {},
         reportRunnerGone: (report) => this.reportRunnerGone(report),
         connectorHealth: this.connectorHealth,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.188",
+  "version": "0.6.190",
   "type": "module",
   "description": "The Cabane Companion (headless): connect an agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",