@clipboard-health/groundcrew 1.10.2 → 1.11.0

package/README.md

@@ -81,6 +81,7 @@ This installs the `crew` binary. `@clipboard-health/clearance` is pulled in tran
      --claude \
      --codex \
      --copy-local-codex-auth \
+     --datadog \
      --github \
      --git-name "Your Name" \
      --git-email "you@users.noreply.github.com" \
@@ -89,7 +90,7 @@ This installs the `crew` binary. `@clipboard-health/clearance` is pulled in tran
      --checkpoint
    ```
 
-   Known MCP aliases are `linear`, `slack`, and `notion`. For another HTTP MCP server, pass `--mcp name=https://example.com/mcp`. The command creates the remote runner if needed, prepares `~/dev`, configures Git, runs selected auth flows, adds selected MCP servers to Claude Code, and then opens Claude so you can run `/mcp` and authenticate only those selected servers. With the Sprite provider, `--copy-local-codex-auth` copies `${CODEX_HOME:-$HOME/.codex}/auth.json` into `/home/sprite/.codex/auth.json` and then verifies `codex login status`; it never prints the file contents. Use `--skip-mcp-auth` when you only want to add MCP definitions, and run the `/mcp` step later.
+   Known MCP aliases are `linear`, `slack`, and `notion`. For another HTTP MCP server, pass `--mcp name=https://example.com/mcp`. The command creates the remote runner if needed, prepares `~/dev`, configures Git, runs selected auth flows, adds selected MCP servers to Claude Code, and then opens Claude so you can run `/mcp` and authenticate only those selected servers. With the Sprite provider, `--copy-local-codex-auth` copies `${CODEX_HOME:-$HOME/.codex}/auth.json` into `/home/sprite/.codex/auth.json` and then verifies `codex login status`; it never prints the file contents. `--datadog` installs a pinned `pup` release in the remote runner, verifies its checksum, installs the `dd-pup` guidance for Claude and Codex, verifies `pup auth status`, and when auth is missing temporarily runs `sprite proxy` for the OAuth callback while `pup auth login --read-only` runs in the remote runner. Open the Datadog URL printed by `pup` if your terminal does not open it automatically. Use `--skip-mcp-auth` when you only want to add MCP definitions, and run the `/mcp` step later.
 
    Repo setup is separate from runner setup and should run after the ticket branch exists, immediately before launching an agent. It clones/fetches the repo in the remote runner, checks out the requested branch (creating it from the base branch when it does not exist on origin), forwards only build-time secrets for the dependency install, removes the temporary secret file, clears those env vars, and then exits. It uses groundcrew's remote setup command.
 
@@ -180,7 +181,7 @@ Rules:
 ## Manual commands
 
 ```bash
-crew remote setup crew-claude-1 --claude --codex --copy-local-codex-auth --github --mcp linear --checkpoint
+crew remote setup crew-claude-1 --claude --codex --copy-local-codex-auth --datadog --github --mcp linear --checkpoint
 crew remote bootstrap crew-claude-1 core-utils --branch rocky-team-123
 crew remote sessions
 crew remote attach <session-id-or-command> --runner crew-claude-1

package/dist/cli.js

@@ -62,7 +62,7 @@ const SUBCOMMANDS = {
     },
     remote: {
         summary: "Create, authenticate, bootstrap, and inspect a remote runner",
-        usage: "setup <runner-name> [--claude] [--github] [--mcp <alias|name=url>] [--checkpoint]\n" +
+        usage: "setup <runner-name> [--claude] [--codex] [--datadog] [--github] [--mcp <alias|name=url>] [--checkpoint]\n" +
             "           → crew remote bootstrap <runner-name> <repo> [--branch <branch>]\n" +
             "           → crew remote sessions [<runner-name>]\n" +
             "           → crew remote attach <session-id-or-command> [--runner <runner-name>]\n" +

package/dist/commands/remoteSetup.d.ts

@@ -8,6 +8,7 @@ export interface RemoteSetupOptions {
     shouldAuthenticateClaude: boolean;
     shouldAuthenticateCodex: boolean;
     shouldCopyLocalCodexAuth?: boolean;
+    shouldSetupDatadog?: boolean;
     shouldAuthenticateGithub: boolean;
     shouldAuthenticateMcp: boolean;
     shouldCheckpoint: boolean;

package/dist/commands/remoteSetup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remoteSetup.d.ts","sourceRoot":"","sources":["../../src/commands/remoteSetup.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,wBAAwB,EAAE,OAAO,CAAC;IAClC,uBAAuB,EAAE,OAAO,CAAC;IACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,wBAAwB,EAAE,OAAO,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4BAA4B,EAAE,OAAO,CAAC;IACtC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4rBD,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B9F;AAUD,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAItF;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrF;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAItF;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhG;AAYD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BlF;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B7D"}
+{"version":3,"file":"remoteSetup.d.ts","sourceRoot":"","sources":["../../src/commands/remoteSetup.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,wBAAwB,EAAE,OAAO,CAAC;IAClC,uBAAuB,EAAE,OAAO,CAAC;IACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,wBAAwB,EAAE,OAAO,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4BAA4B,EAAE,OAAO,CAAC;IACtC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAy0BD,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B9F;AAUD,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAItF;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrF;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAItF;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhG;AAYD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgClF;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B7D"}

package/dist/commands/remoteSetup.js

@@ -1,6 +1,7 @@
 import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { join, resolve } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
 import { BUILD_SECRET_NAMES, DEFAULT_REMOTE_SETUP_COMMAND, loadConfig, } from "../lib/config.js";
 import { shellSingleQuote } from "../lib/shell.js";
 import { getRemoteRunnerProvider, remoteConfigWithRunnerName, } from "../lib/spriteRemoteRunnerProvider.js";
@@ -14,6 +15,10 @@ const DEFAULT_CHECKPOINT_COMMENT = "groundcrew remote runner baseline: selected
 const CLAUDE_SUBSCRIPTION_LOGIN_FLAG = ["--claude", "ai"].join("");
 const DEFAULT_REPOSITORY_OWNER = "ClipboardHealth";
 const DEFAULT_BASE_BRANCH = "main";
+const DATADOG_PUP_VERSION = "0.63.0";
+const DATADOG_OAUTH_CALLBACK_PORT = 8000;
+const DATADOG_AUTH_STATUS_RETRY_ATTEMPTS = 5;
+const DATADOG_AUTH_STATUS_RETRY_DELAY_MS = 250;
 const REMOTE_SECRETS_FILE = "/tmp/groundcrew-build-secrets.env";
 const REMOTE_CODEX_AUTH_UPLOAD_FILE = "/tmp/groundcrew-codex-auth.json";
 const REMOTE_CODEX_AUTH_FILE = "/home/sprite/.codex/auth.json";
@@ -31,6 +36,7 @@ function usage() {
         "  --claude                    Authenticate Claude Code with a Claude subscription",
         "  --codex                     Authenticate Codex CLI",
         "  --copy-local-codex-auth     With --codex, copy local CODEX_HOME auth.json into the remote runner",
+        "  --datadog                   Install pup, add dd-pup skills, and authenticate Datadog",
         "  --github                    Authenticate gh for GitHub PRs",
         "  --mcp <alias|name=url>      Add/authenticate one MCP server; repeat for multiple",
         "                              Known aliases: linear, slack, notion",
@@ -134,6 +140,7 @@ function parseArguments(argv) {
     let shouldAuthenticateClaude = false;
     let shouldAuthenticateCodex = false;
     let shouldCopyLocalCodexAuth = false;
+    let shouldSetupDatadog = false;
     let shouldAuthenticateGithub = false;
     let shouldAuthenticateMcp = true;
     let shouldCheckpoint = false;
@@ -156,6 +163,10 @@ function parseArguments(argv) {
             shouldCopyLocalCodexAuth = true;
             continue;
         }
+        if (argument === "--datadog") {
+            shouldSetupDatadog = true;
+            continue;
+        }
         if (argument === "--github") {
             shouldAuthenticateGithub = true;
             continue;
@@ -202,6 +213,7 @@ function parseArguments(argv) {
         shouldAuthenticateClaude,
         shouldAuthenticateCodex,
         shouldCopyLocalCodexAuth,
+        shouldSetupDatadog,
         shouldAuthenticateGithub,
         shouldAuthenticateMcp,
         shouldCheckpoint,
@@ -457,6 +469,105 @@ async function authenticateCodex(arguments_) {
     }
     throw new Error("Codex login finished, but `codex login status` still reports not logged in inside the remote runner. Try `crew remote setup <runner-name> --codex --copy-local-codex-auth`.");
 }
+function datadogPupInstallCommand() {
+    const shellVariable = "$";
+    return [
+        "set -euo pipefail",
+        `version=${shellSingleQuote(DATADOG_PUP_VERSION)}`,
+        'case "$(uname -m)" in',
+        "  x86_64|amd64) arch=x86_64 ;;",
+        "  aarch64|arm64) arch=arm64 ;;",
+        '  *) echo "Unsupported Linux architecture: $(uname -m)" >&2; exit 1 ;;',
+        "esac",
+        `asset="pup_${shellVariable}{version}_Linux_${shellVariable}{arch}.tar.gz"`,
+        `base_url="https://github.com/DataDog/pup/releases/download/v${shellVariable}{version}"`,
+        'binary="$HOME/.local/bin/pup"',
+        'mkdir -p "$HOME/.local/bin"',
+        `if [ -x "$binary" ] && "$binary" version | grep -q "Pup ${shellVariable}{version} "; then "$binary" version; exit 0; fi`,
+        'install_dir="$(mktemp -d)"',
+        "trap 'rm -rf \"$install_dir\"' EXIT",
+        `archive="${shellVariable}{install_dir}/${shellVariable}{asset}"`,
+        `checksums="${shellVariable}{install_dir}/pup_${shellVariable}{version}_checksums.txt"`,
+        'curl -fsSL -o "$archive" "$base_url/$asset"',
+        `curl -fsSL -o "$checksums" "$base_url/pup_${shellVariable}{version}_checksums.txt"`,
+        `(cd "$install_dir" && grep " ${shellVariable}{asset}$" "$checksums" | sha256sum -c -)`,
+        'tar -xzf "$archive" -C "$HOME/.local/bin" pup',
+        'chmod 755 "$binary"',
+        '"$binary" version',
+    ].join("\n");
+}
+async function installDatadogPup(provider, config) {
+    log(`Installing Datadog pup ${DATADOG_PUP_VERSION} inside the remote runner`);
+    await provider.runCommand({
+        config,
+        remoteArguments: ["bash", "-lc", datadogPupInstallCommand()],
+    });
+}
+async function installDatadogPupSkills(provider, config) {
+    for (const platform of ["claude-code", "codex"]) {
+        // oxlint-disable-next-line no-await-in-loop -- installs are quick and ordered so logs stay readable.
+        await provider.runCommand({
+            config,
+            remoteArguments: ["pup", "skills", "install", platform, "--name", "dd-pup", "--yes"],
+        });
+    }
+}
+async function validateDatadogLogin(provider, config) {
+    return await commandSucceeds({
+        provider,
+        config,
+        remoteArguments: ["pup", "auth", "status"],
+    });
+}
+async function waitForDatadogLogin(provider, config) {
+    for (let attempt = 1; attempt <= DATADOG_AUTH_STATUS_RETRY_ATTEMPTS; attempt += 1) {
+        // oxlint-disable-next-line no-await-in-loop -- bounded polling smooths over Datadog OAuth propagation delay.
+        if (await validateDatadogLogin(provider, config)) {
+            return true;
+        }
+        if (attempt < DATADOG_AUTH_STATUS_RETRY_ATTEMPTS) {
+            // oxlint-disable-next-line no-await-in-loop -- retries are intentionally spaced.
+            await sleep(DATADOG_AUTH_STATUS_RETRY_DELAY_MS);
+        }
+    }
+    return false;
+}
+async function authenticateDatadog(provider, config) {
+    if (await validateDatadogLogin(provider, config)) {
+        return;
+    }
+    writeOutput();
+    writeOutput("Datadog OAuth will run inside the remote runner.");
+    writeOutput(`Groundcrew is forwarding local port ${DATADOG_OAUTH_CALLBACK_PORT} to the remote callback server while login runs.`);
+    writeOutput("Open the Datadog URL printed by pup if your terminal does not open it for you.");
+    writeOutput();
+    const proxy = await provider.startPortProxy(config, DATADOG_OAUTH_CALLBACK_PORT);
+    try {
+        await provider.runTtyCommand({
+            config,
+            remoteArguments: [
+                "pup",
+                "auth",
+                "login",
+                "--read-only",
+                "--callback-port",
+                String(DATADOG_OAUTH_CALLBACK_PORT),
+            ],
+        });
+    }
+    finally {
+        await proxy.close();
+    }
+    if (await waitForDatadogLogin(provider, config)) {
+        return;
+    }
+    throw new Error("Datadog auth finished, but `pup auth status` still reports not logged in inside the remote runner.");
+}
+async function setupDatadog(provider, config) {
+    await installDatadogPup(provider, config);
+    await installDatadogPupSkills(provider, config);
+    await authenticateDatadog(provider, config);
+}
 async function addMcpServer(arguments_) {
     const { provider, config, server } = arguments_;
     const exists = await commandSucceeds({
@@ -661,6 +772,9 @@ export async function setupRemoteRunner(options) {
             shouldCopyLocalAuth: options.shouldCopyLocalCodexAuth === true,
         });
     }
+    if (options.shouldSetupDatadog === true) {
+        await setupDatadog(provider, config);
+    }
     for (const server of options.mcpServers) {
         // oxlint-disable-next-line no-await-in-loop -- MCP additions are sequential so auth instructions stay ordered.
         await addMcpServer({ provider, config, server });

package/dist/lib/spriteRemoteRunnerProvider.d.ts

@@ -54,6 +54,9 @@ export interface RemoteRunnerProvider {
     runCommand(arguments_: RemoteRunArguments): Promise<string | undefined>;
     runTtyCommand(arguments_: RemoteRunArguments): Promise<void>;
     buildTtyCommand(arguments_: RemoteTtyCommandArguments): string;
+    startPortProxy(config: RemoteRunnerConfig, port: number): Promise<{
+        close(): Promise<void>;
+    }>;
     listSessions(config: RemoteRunnerConfig): Promise<string>;
     attachSession(config: RemoteRunnerConfig, target: string): Promise<void>;
     listProcesses(config: RemoteRunnerConfig): Promise<string>;

package/dist/lib/spriteRemoteRunnerProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spriteRemoteRunnerProvider.d.ts","sourceRoot":"","sources":["../../src/lib/spriteRemoteRunnerProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAKhF,eAAO,MAAM,+BAA+B;uBAChC,QAAQ;yBACN,eAAe;oBACpB,iBAAiB;uBACd,kBAAkB;2BACd,mCAAmC;CACS,CAAC;AAE7D,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,UAAU,yBAAyB;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,6BAA6B;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,6BAA6B;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,UAAU,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE,aAAa,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,eAAe,CAAC,UAAU,EAAE,yBAAyB,GAAG,MAAM,CAAC;IAC/D,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,aAAa,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3F,cAAc,CAAC,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AA4LD,eAAO,MAAM,0BAA0B,EAAE,oBAoHxC,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAMjF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,oBAAoB,CAKhG"}
+{"version":3,"file":"spriteRemoteRunnerProvider.d.ts","sourceRoot":"","sources":["../../src/lib/spriteRemoteRunnerProvider.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAShF,eAAO,MAAM,+BAA+B;uBAChC,QAAQ;yBACN,eAAe;oBACpB,iBAAiB;uBACd,kBAAkB;2BACd,mCAAmC;CACS,CAAC;AAE7D,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,UAAU,yBAAyB;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,6BAA6B;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,6BAA6B;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,UAAU,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE,aAAa,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,eAAe,CAAC,UAAU,EAAE,yBAAyB,GAAG,MAAM,CAAC;IAC/D,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9F,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,aAAa,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3F,cAAc,CAAC,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AAoSD,eAAO,MAAM,0BAA0B,EAAE,oBAuHxC,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAMjF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,oBAAoB,CAKhG"}

package/dist/lib/spriteRemoteRunnerProvider.js

@@ -1,6 +1,12 @@
+import { connect } from "node:net";
+import { setTimeout as sleep } from "node:timers/promises";
 import { runCommandAsync } from "./commandRunner.js";
 import { shellSingleQuote } from "./shell.js";
 const LONG_RUNNING_COMMAND_OPTIONS = { stdio: "inherit", timeoutMs: 0 };
+const PROXY_CLOSE_SIGNAL = "SIGINT";
+const PROXY_READY_HOST = "127.0.0.1";
+const PROXY_READY_TIMEOUT_MS = 5000;
+const PROXY_READY_RETRY_DELAY_MS = 25;
 export const SPRITE_REMOTE_PROVIDER_DEFAULTS = {
     provider: "sprite",
     runnerName: "crew-claude-1",
@@ -155,6 +161,96 @@ async function createSpriteRunner(config) {
         timeoutMs: 0,
     });
 }
+async function startSpritePortProxy(config, port) {
+    const controller = new AbortController();
+    let closeWasRequested = false;
+    let proxyError;
+    const proxy = (async () => {
+        try {
+            await runCommandAsync("sprite", ["proxy", "-s", config.runnerName, String(port)], {
+                signal: controller.signal,
+                stdio: "inherit",
+                timeoutMs: 0,
+            });
+            if (!closeWasRequested) {
+                proxyError = new Error("Sprite proxy exited before it was closed.");
+            }
+        }
+        catch (error) {
+            if (closeWasRequested && errorHasSignal(error, PROXY_CLOSE_SIGNAL)) {
+                return;
+            }
+            proxyError = new Error(`Sprite proxy exited before it was closed: ${String(error)}`, {
+                cause: error,
+            });
+        }
+    })();
+    try {
+        await waitForSpritePortProxy({ port, proxy, proxyError: () => proxyError });
+    }
+    catch (error) {
+        closeWasRequested = true;
+        controller.abort();
+        await proxy;
+        throw error;
+    }
+    return {
+        async close() {
+            closeWasRequested = true;
+            controller.abort();
+            await proxy;
+            if (proxyError !== undefined) {
+                throw new Error(proxyError.message, { cause: proxyError });
+            }
+        },
+    };
+}
+async function waitForSpritePortProxy(arguments_) {
+    const deadline = Date.now() + PROXY_READY_TIMEOUT_MS;
+    while (Date.now() < deadline) {
+        throwIfProxyExited(arguments_.proxyError());
+        // eslint-disable-next-line no-await-in-loop -- readiness polling must observe attempts sequentially.
+        if (await canConnectToLocalPort(arguments_.port)) {
+            throwIfProxyExited(arguments_.proxyError());
+            return;
+        }
+        throwIfProxyExited(arguments_.proxyError());
+        // eslint-disable-next-line no-await-in-loop -- retry delay is bounded and stops early if the proxy exits.
+        await Promise.race([sleep(PROXY_READY_RETRY_DELAY_MS), arguments_.proxy]);
+    }
+    throwIfProxyExited(arguments_.proxyError());
+    throw new Error(`Timed out waiting for Sprite proxy on ${PROXY_READY_HOST}:${arguments_.port} to accept connections.`);
+}
+function throwIfProxyExited(error) {
+    if (error !== undefined) {
+        throw new Error(error.message, { cause: error });
+    }
+}
+async function canConnectToLocalPort(port) {
+    return await new Promise((resolve) => {
+        const socket = connect({ host: PROXY_READY_HOST, port });
+        socket.once("connect", () => {
+            socket.destroy();
+            resolve(true);
+        });
+        socket.once("error", () => {
+            socket.destroy();
+            resolve(false);
+        });
+    });
+}
+function errorHasSignal(error, signal) {
+    if (typeof error !== "object" || error === null) {
+        return false;
+    }
+    if ("signal" in error && error.signal === signal) {
+        return true;
+    }
+    if (error instanceof Error && error.cause !== undefined) {
+        return errorHasSignal(error.cause, signal);
+    }
+    return false;
+}
 export const spriteRemoteRunnerProvider = {
     name: "sprite",
     async runnerExists(config) {
@@ -174,6 +270,9 @@ export const spriteRemoteRunnerProvider = {
         });
     },
     buildTtyCommand: buildSpriteTtyCommand,
+    async startPortProxy(config, port) {
+        return await startSpritePortProxy(config, port);
+    },
     async listSessions(config) {
         const output = await runCommandAsync("sprite", ["sessions", "list", "-s", config.runnerName], {
             trim: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clipboard-health/groundcrew",
-  "version": "1.10.2",
+  "version": "1.11.0",
   "description": "Linear-driven orchestrator that launches AI coding agents in git worktrees, with workspace lifecycle, remote runners, and usage tracking.",
   "keywords": [
     "agent",