@claudexor/cli 3.19.0 → 3.22.0

package/dist/thread-delivery.js

@@ -1,6 +1,5 @@
-import { verifyAndDeliver } from "@claudexor/delivery";
+import { PR_SECRET_LIKE_REFUSAL, verifyAndDeliver } from "@claudexor/delivery";
 import { advanceThreadWorktree, captureWorkingTreeTransient, git, snapshotTree, } from "@claudexor/workspace";
-import { containsSecretLikeToken } from "@claudexor/util";
 /** Deliver an isolated thread and advance its persistent branch/watermark. */
 export async function applyThreadDiff(threads, id, opts) {
     const thread = threads.getThread(id);
@@ -22,15 +21,6 @@ export async function applyThreadDiff(threads, id, opts) {
             detail: "no changes to apply",
             delivery: null,
         };
-    if (containsSecretLikeToken(patch) || captured.binarySecretLike) {
-        return {
-            applied: false,
-            status: "rejected",
-            headMoved: false,
-            detail: "patch contains a secret-like token; refusing apply",
-            delivery: null,
-        };
-    }
     let headMoved = false;
     try {
         const head = (await git(projectRoot, ["rev-parse", "HEAD"])).stdout.trim();
@@ -41,13 +31,24 @@ export async function applyThreadDiff(threads, id, opts) {
         // Advisory only; the exact preimage check remains authoritative.
     }
     const mode = (["apply", "branch", "commit", "pr"].includes(opts.mode) ? opts.mode : "apply");
-    const delivered = await verifyAndDeliver(projectRoot, patch, { mode, branch: opts.branch, message: opts.message }, opts.gates ?? []);
+    // INV-062: the thread applies its LIVE worktree capture (exact bytes), so a
+    // local apply/branch/commit keeps secret-like strings where the agent wrote
+    // them. Only `pr` refuses — inside the one delivery owner, before any push —
+    // for a text match and for a blob-only binary finding alike.
+    const delivered = await verifyAndDeliver(projectRoot, patch, {
+        mode,
+        branch: opts.branch,
+        message: opts.message,
+        secretLikeBinary: captured.binarySecretPaths.length > 0,
+    }, opts.gates ?? []);
     if (delivered.applied) {
         const targetSha = await snapshotTree(projectRoot);
         threads.setThreadWorktree(id, ws.worktree_path, await advanceThreadWorktree(projectRoot, id, ws.worktree_path, targetSha), thread.head_run_id ?? undefined);
     }
     const status = !delivered.applied
-        ? "conflict"
+        ? delivered.detail === PR_SECRET_LIKE_REFUSAL
+            ? "rejected"
+            : "conflict"
         : mode === "branch"
             ? "branched"
             : mode === "commit"

package/dist/thread-delivery.js.map

@@ -1 +1 @@
-{"version":3,"file":"thread-delivery.js","sourceRoot":"","sources":["../src/thread-delivery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,GAAG,EACH,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAU1D,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA0B,EAC1B,EAAU,EACV,IAAwB;IAQxB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtF,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAC5B,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,4EAA4E,CAAC,EACvF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,oDAAoD;YAC5D,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3E,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvF,SAAS,GAAG,SAAS,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,SAAS,KAAK,IAAI,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACrD,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,WAAW,EACX,KAAK,EACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACpD,IAAI,CAAC,KAAK,IAAI,EAAE,CACjB,CAAC;IACF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,CAAC,iBAAiB,CACvB,EAAE,EACF,EAAE,CAAC,aAAa,EAChB,MAAM,qBAAqB,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EACzE,MAAM,CAAC,WAAW,IAAI,SAAS,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO;QAC/B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,KAAK,QAAQ;YACjB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,IAAI,KAAK,QAAQ;gBACjB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,KAAK,IAAI;oBACb,CAAC,CAAC,SAAS,CAAC,KAAK;wBACf,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU;oBACd,CAAC,CAAC,SAAS,CAAC;IACpB,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,MAAM;QACN,SAAS;QACT,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI;QAChC,0EAA0E;QAC1E,4EAA4E;QAC5E,QAAQ,EAAE,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,KAAK,EAAE;KAC9E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"thread-delivery.js","sourceRoot":"","sources":["../src/thread-delivery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,GAAG,EACH,YAAY,GACb,MAAM,sBAAsB,CAAC;AAU9B,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA0B,EAC1B,EAAU,EACV,IAAwB;IAQxB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtF,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAC5B,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,4EAA4E,CAAC,EACvF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3E,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvF,SAAS,GAAG,SAAS,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,SAAS,KAAK,IAAI,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACrD,CAAC;IACvC,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,WAAW,EACX,KAAK,EACL;QACE,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;KACxD,EACD,IAAI,CAAC,KAAK,IAAI,EAAE,CACjB,CAAC;IACF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,CAAC,iBAAiB,CACvB,EAAE,EACF,EAAE,CAAC,aAAa,EAChB,MAAM,qBAAqB,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EACzE,MAAM,CAAC,WAAW,IAAI,SAAS,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,sBAAsB;YAC3C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,UAAU;QACd,CAAC,CAAC,IAAI,KAAK,QAAQ;YACjB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,IAAI,KAAK,QAAQ;gBACjB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,KAAK,IAAI;oBACb,CAAC,CAAC,SAAS,CAAC,KAAK;wBACf,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU;oBACd,CAAC,CAAC,SAAS,CAAC;IACpB,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,MAAM;QACN,SAAS;QACT,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI;QAChC,0EAA0E;QAC1E,4EAA4E;QAC5E,QAAQ,EAAE,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,KAAK,EAAE;KAC9E,CAAC;AACJ,CAAC"}

package/dist/thread-purge.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The ONE owner of thread byte deletion (owner decision E2): the purge route
+ * and the retention pass both call it. The purge is journaled FIRST, so the
+ * explicit authority exists before any byte goes, and validation can never
+ * fail after user state was removed. Then the thread's daemon-owned
+ * directories go: the isolated worktree with its `claudexor/thread-*` branch,
+ * and every lane home (INV-034 lifecycle owner (a)).
+ *
+ * A directory error after the journal commit (ENOTEMPTY, EBUSY, a Windows
+ * lock) leaves a purged thread that every listing hides while its directories
+ * remain. Calling the owner again journals nothing new (the reducer keeps a
+ * purged thread as it is) and deletes what is left; `hasPurgeLeftovers` names
+ * exactly the directories this owner deletes, so the retention pass retries a
+ * purge until they are gone and never loops on a directory it cannot own.
+ */
+import type { ProjectPartitions } from "@claudexor/daemon";
+import type { Thread } from "@claudexor/schema";
+export declare function threadPurgeOwner(threads: Pick<ProjectPartitions, "getThread" | "purgeThread">, noProjectRoot: string): {
+    purgeThread: (id: string) => Promise<{
+        schema_version: 2;
+        id: string;
+        created_at: string;
+        updated_at: string;
+        repo: {
+            root: string;
+            base_ref: string;
+        } | null;
+        title: string | null;
+        folder: string | null;
+        mode: "agent" | "ask" | "plan";
+        auth_preference: "api_key" | "auto" | "subscription";
+        access: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | null;
+        credential_profile_id: string | null;
+        primary_harness: string | null;
+        eligible_harnesses: string[];
+        workspace: {
+            mode: "in_place" | "isolated";
+            worktree_path: string | null;
+            base_sha: string | null;
+            delivered_through_run_id: string | null;
+        };
+        run_ids: string[];
+        head_run_id: string | null;
+        state: "active" | "closed" | "purged" | "trashed";
+        trashed_at: string | null;
+        purge_after: string | null;
+        pre_trash_state: "active" | "closed" | null;
+    }>;
+    /** Whether a directory this owner deletes for the thread is still on disk. */
+    hasPurgeLeftovers: (thread: Thread) => boolean;
+};
+//# sourceMappingURL=thread-purge.d.ts.map

package/dist/thread-purge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-purge.d.ts","sourceRoot":"","sources":["../src/thread-purge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAQhD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,aAAa,CAAC,EAC7D,aAAa,EAAE,MAAM;IAMnB,WAAW,OAAa,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAW9B,8EAA8E;IAC9E,iBAAiB,WAAW,MAAM,KAAG,OAAO;EAQ/C"}

package/dist/thread-purge.js

@@ -0,0 +1,27 @@
+import { purgeThreadLanes, purgeThreadWorktree, threadLanesExist, threadWorktreeDirExists, } from "@claudexor/workspace";
+export function threadPurgeOwner(threads, noProjectRoot) {
+    const isolatedRoot = (thread) => thread.repo && thread.workspace.mode === "isolated" ? thread.repo.root : null;
+    const lanesRoot = (thread) => thread.repo?.root ?? noProjectRoot;
+    return {
+        purgeThread: async (id) => {
+            const thread = threads.getThread(id);
+            if (!thread)
+                throw Object.assign(new Error(`no such thread: ${id}`), { status: 404 });
+            const purged = threads.purgeThread(id);
+            const worktreeRoot = isolatedRoot(thread);
+            if (worktreeRoot)
+                await purgeThreadWorktree(worktreeRoot, id);
+            // Lane homes exist regardless of workspace mode (in_place threads have
+            // them too), so they go for EVERY purged thread.
+            purgeThreadLanes(lanesRoot(thread), id);
+            return purged;
+        },
+        /** Whether a directory this owner deletes for the thread is still on disk. */
+        hasPurgeLeftovers: (thread) => {
+            const worktreeRoot = isolatedRoot(thread);
+            return ((worktreeRoot !== null && threadWorktreeDirExists(worktreeRoot, thread.id)) ||
+                threadLanesExist(lanesRoot(thread), thread.id));
+        },
+    };
+}
+//# sourceMappingURL=thread-purge.js.map

package/dist/thread-purge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-purge.js","sourceRoot":"","sources":["../src/thread-purge.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,gBAAgB,CAC9B,OAA6D,EAC7D,aAAqB;IAErB,MAAM,YAAY,GAAG,CAAC,MAAc,EAAiB,EAAE,CACrD,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC;IACjF,OAAO;QACL,WAAW,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,YAAY;gBAAE,MAAM,mBAAmB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC9D,uEAAuE;YACvE,iDAAiD;YACjD,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,8EAA8E;QAC9E,iBAAiB,EAAE,CAAC,MAAc,EAAW,EAAE;YAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,CACL,CAAC,YAAY,KAAK,IAAI,IAAI,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3E,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAC/C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/cli",
-  "version": "3.19.0",
+  "version": "3.22.0",
   "license": "MIT",
   "description": "Claudexor CLI (claudexor). Thin surface over the orchestrator.",
   "type": "module",
@@ -10,29 +10,30 @@
     "dist"
   ],
   "dependencies": {
-    "@claudexor/artifact-store": "3.19.0",
-    "@claudexor/config": "3.19.0",
-    "@claudexor/acp-server": "3.19.0",
-    "@claudexor/control-api": "3.19.0",
-    "@claudexor/daemon": "3.19.0",
-    "@claudexor/core": "3.19.0",
-    "@claudexor/delivery": "3.19.0",
-    "@claudexor/gateway": "3.19.0",
-    "@claudexor/harness-agy": "3.19.0",
-    "@claudexor/harness-codex": "3.19.0",
-    "@claudexor/harness-claude": "3.19.0",
-    "@claudexor/harness-cursor": "3.19.0",
-    "@claudexor/harness-opencode": "3.19.0",
-    "@claudexor/harness-fake": "3.19.0",
-    "@claudexor/harness-raw-api": "3.19.0",
-    "@claudexor/journal": "3.19.0",
-    "@claudexor/mcp-server": "3.19.0",
-    "@claudexor/orchestrator": "3.19.0",
-    "@claudexor/review": "3.19.0",
-    "@claudexor/util": "3.19.0",
-    "@claudexor/secrets": "3.19.0",
-    "@claudexor/schema": "3.19.0",
-    "@claudexor/workspace": "3.19.0"
+    "@claudexor/acp-server": "3.22.0",
+    "@claudexor/artifact-store": "3.22.0",
+    "@claudexor/config": "3.22.0",
+    "@claudexor/control-api": "3.22.0",
+    "@claudexor/core": "3.22.0",
+    "@claudexor/daemon": "3.22.0",
+    "@claudexor/delivery": "3.22.0",
+    "@claudexor/gateway": "3.22.0",
+    "@claudexor/harness-agy": "3.22.0",
+    "@claudexor/harness-claude": "3.22.0",
+    "@claudexor/harness-codex": "3.22.0",
+    "@claudexor/harness-cursor": "3.22.0",
+    "@claudexor/harness-fake": "3.22.0",
+    "@claudexor/harness-opencode": "3.22.0",
+    "@claudexor/harness-raw-api": "3.22.0",
+    "@claudexor/journal": "3.22.0",
+    "@claudexor/orchestrator": "3.22.0",
+    "@claudexor/mcp-server": "3.22.0",
+    "@claudexor/review": "3.22.0",
+    "@claudexor/schema": "3.22.0",
+    "@claudexor/secrets": "3.22.0",
+    "@claudexor/util": "3.22.0",
+    "@claudexor/harness-acp": "3.22.0",
+    "@claudexor/workspace": "3.22.0"
   },
   "repository": {
     "type": "git",