@clipboard-health/groundcrew 4.0.2 → 4.1.0

package/dist/lib/config.d.ts

@@ -41,16 +41,12 @@ export type LocalRunnerSetting = LocalRunner | "auto";
 export declare const LOCAL_RUNNER_SETTINGS: readonly LocalRunnerSetting[];
 /**
  * Per-model Docker Sandboxes (sdx) binding. Required at launch when
- * `local.runner` resolves to `sdx` so groundcrew knows which sbx agent
- * to address and how to seed the sandbox.
+ * `local.runner` resolves to `sdx` so groundcrew knows which existing
+ * sbx sandbox to address.
  */
 export interface SandboxDefinition {
     /** sbx agent name (e.g. "claude", "codex"). */
     agent: string;
-    /** Optional `sbx run --template` value. */
-    template?: string;
-    /** Optional `sbx run --kit` values (each passed as a separate flag). */
-    kits?: string[];
     /**
      * Setup command run **inside** the sandbox before the agent exec.
      * Defaults to the shared `.groundcrew/setup.sh --deps-only` convention
@@ -58,42 +54,6 @@ export interface SandboxDefinition {
      */
     setupCommand?: string;
 }
-/**
- * Recipe used by `crew sandbox auth <model>` to drive an interactive
- * login flow inside a sbx sandbox and then verify it. The flow is
- * picker-driven — no positional `<tool>` argument; the picker lists
- * every recipe visible to the current sandbox.
- *
- * `binary` defaults to the recipe key (typically the agent or CLI name).
- * `authenticatedPattern` matches against combined stdout+stderr from
- * `statusArgs` — exit code alone isn't reliable because some CLIs
- * report "not logged in" while still exiting 0.
- * `kind` controls visibility in the interactive picker: `"agent"`
- * recipes are scoped to a specific sbx agent and only appear when you
- * `auth` against that agent's sandbox; `"tool"` recipes (default)
- * appear in every sandbox's picker because they're cross-cutting
- * (github, npm, gcloud, …). Defaults to `"tool"` when omitted.
- *
- * Ship-side recipes for `claude`, `codex`, and `cursor` live in
- * `src/commands/sandbox/auth.ts`; users register additional tools
- * under `sandbox.authRecipes` in their config.
- */
-export interface AuthRecipe {
-    displayName: string;
-    binary?: string;
-    loginArgs: readonly string[];
-    statusArgs: readonly string[];
-    authenticatedPattern: RegExp;
-    kind?: "agent" | "tool";
-    /**
-     * Environment variables passed to `sbx exec` for both the login and
-     * status calls. Use this for CLIs whose default flow assumes a
-     * browser or other host-only feature — e.g. cursor-agent wants
-     * `NO_OPEN_BROWSER=1` to print a device code instead of trying to
-     * launch a browser inside the sandbox.
-     */
-    env?: Record<string, string>;
-}
 export interface ModelDefinition {
     /**
      * Shell command launched for the model. Wrapped with Safehouse/clearance
@@ -201,32 +161,6 @@ export interface Config {
     local?: {
         runner?: LocalRunnerSetting;
     };
-    /**
-     * Sandbox-wide settings. `authRecipes` lets users register additional
-     * tools (github, npm, gcloud, …) for `crew sandbox auth <model>` to
-     * authenticate inside the sandbox. The auth flow is picker-driven —
-     * registered recipes show up in the picker alongside the shipped ones,
-     * and a user recipe under the same key (e.g. "claude") overrides the
-     * shipped one.
-     */
-    sandbox?: {
-        authRecipes?: Record<string, AuthRecipe>;
-        /**
-         * When true (default), every `crew sandbox ensure` / `auth` run applies
-         * a small set of git defaults inside the sandbox so robot commits push
-         * over `gh`-managed HTTPS regardless of how the user cloned the repo:
-         *
-         *   - disable GPG signing for commits and tags
-         *   - rewrite `git@github.com:` and `ssh://git@github.com/` URLs to
-         *     `https://github.com/` so push uses gh's credential helper
-         *   - after a successful `github` auth recipe login, run
-         *     `gh auth setup-git` inside the sandbox
-         *
-         * Set `false` to skip both the git-config block and the post-login
-         * `gh auth setup-git` step.
-         */
-        gitDefaults?: boolean;
-    };
     logging?: {
         /**
          * Append-mode log file destination. `log()` and `logEvent()` tee here
@@ -281,14 +215,6 @@ export interface ResolvedConfig {
     local: {
         runner: LocalRunnerSetting;
     };
-    /**
-     * Sandbox-wide settings. Always present after defaults; `authRecipes`
-     * is `{}` when the user provides none.
-     */
-    sandbox: {
-        authRecipes: Record<string, AuthRecipe>;
-        gitDefaults: boolean;
-    };
     logging: {
         file: string;
     };

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAIzD,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAKrD,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,KAAK,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAC/D,KAAK,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAAG;IAC1E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,CAAC;AACF,UAAU,2BAA2B;IACnC,QAAQ,EAAE,IAAI,CAAC;CAChB;AACD,KAAK,mBAAmB,GAAG,0BAA0B,GAAG,2BAA2B,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,WAAW,MAAM;IACrB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,kBAAkB,CAAC;KAC7B,CAAC;IACF;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC;;;;;;;;;;;;;WAaG;QACH,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,OAAO,CAAC,EAAE;QACR;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,EAAE;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;OAGG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAC;KAC5B,CAAC;IACF;;;OAGG;IACH,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AA0OD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AA+cD,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAwBpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAIzD,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAKrD,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,KAAK,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAC/D,KAAK,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAAG;IAC1E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,CAAC;AACF,UAAU,2BAA2B;IACnC,QAAQ,EAAE,IAAI,CAAC;CAChB;AACD,KAAK,mBAAmB,GAAG,0BAA0B,GAAG,2BAA2B,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,WAAW,MAAM;IACrB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,kBAAkB,CAAC;KAC7B,CAAC;IACF,OAAO,CAAC,EAAE;QACR;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,EAAE;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;OAGG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAC;KAC5B,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AA4ND;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AA+ZD,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAwBpE"}

package/dist/lib/config.js

@@ -126,29 +126,6 @@ function normalizeOptionalString(value, path) {
     }
     return value.trim();
 }
-function normalizeOptionalBoolean(value, path) {
-    if (value === undefined) {
-        return undefined;
-    }
-    if (typeof value !== "boolean") {
-        fail(`${path} must be a boolean`);
-    }
-    return value;
-}
-function normalizeOptionalStringArray(value, path) {
-    if (value === undefined) {
-        return undefined;
-    }
-    if (!Array.isArray(value)) {
-        fail(`${path} must be an array`);
-    }
-    return value.map((entry, index) => {
-        if (typeof entry !== "string" || entry.trim().length === 0) {
-            fail(`${path}[${index}] must be a non-empty string`);
-        }
-        return entry.trim();
-    });
-}
 function isWorkspaceKindSetting(value) {
     return (typeof value === "string" && WORKSPACE_KIND_SETTINGS.includes(value));
 }
@@ -177,27 +154,29 @@ function normalizeSandbox(value, path) {
     if (!isPlainObject(value)) {
         fail(`${path} must be an object`);
     }
-    const { agent, template, kits, setupCommand } = value;
+    if (Object.hasOwn(value, "template")) {
+        failRemovedConfigKey(`${path}.template`, "Groundcrew no longer creates or re-templates sdx sandboxes.");
+    }
+    if (Object.hasOwn(value, "kits")) {
+        failRemovedConfigKey(`${path}.kits`, "Groundcrew no longer creates sdx sandboxes or applies sandbox kits.");
+    }
+    const { agent, setupCommand } = value;
     requireString(agent, `${path}.agent`);
     const trimmedAgent = agent.trim();
     if (trimmedAgent.length === 0) {
         fail(`${path}.agent must be a non-empty string (got ${JSON.stringify(agent)})`);
     }
     const sandbox = { agent: trimmedAgent };
-    const normalizedTemplate = normalizeOptionalString(template, `${path}.template`);
-    if (normalizedTemplate !== undefined) {
-        sandbox.template = normalizedTemplate;
-    }
-    const normalizedKits = normalizeOptionalStringArray(kits, `${path}.kits`);
-    if (normalizedKits !== undefined) {
-        sandbox.kits = normalizedKits;
-    }
     const normalizedSetup = normalizeOptionalString(setupCommand, `${path}.setupCommand`);
     if (normalizedSetup !== undefined) {
         sandbox.setupCommand = normalizedSetup;
     }
     return sandbox;
 }
+function failRemovedConfigKey(path, reason) {
+    fail(`${path} is no longer supported: ${reason} ` +
+        "Provision and manage the sandbox yourself with `sbx` (for example `sbx create --name groundcrew-<agent> <agent> <projectDir>`), then keep only `models.definitions.<model>.sandbox.agent` plus optional `setupCommand` in crew.config.ts.");
+}
 function failIfLegacyModelKeys(name, override) {
     if (!isPlainObject(override)) {
         fail(`models.definitions.${name} must be an object`);
@@ -296,11 +275,6 @@ function requireObject(value, path) {
         fail(`${path} must be an object (got ${JSON.stringify(value)})`);
     }
 }
-function requireOptionalObject(value, path) {
-    if (value !== undefined && !isPlainObject(value)) {
-        fail(`${path} must be an object`);
-    }
-}
 function failOnLegacyLinearShape(user) {
     if (!Object.hasOwn(user, "linear")) {
         return;
@@ -312,6 +286,21 @@ function failOnLegacyLinearShape(user) {
         "If you only want a subset of your Linear tickets to be picked up, leave the unwanted tickets unassigned or remove their `agent-*` label.",
     ].join("\n"));
 }
+function failOnRemovedSandboxSettings(user) {
+    const { sandbox } = user;
+    if (sandbox === undefined) {
+        return;
+    }
+    if (!isPlainObject(sandbox)) {
+        fail("sandbox must be an object");
+    }
+    if (Object.hasOwn(sandbox, "authRecipes")) {
+        failRemovedConfigKey("sandbox.authRecipes", "Groundcrew no longer drives in-sandbox auth flows.");
+    }
+    if (Object.hasOwn(sandbox, "gitDefaults")) {
+        failRemovedConfigKey("sandbox.gitDefaults", "Groundcrew no longer seeds git defaults inside sdx sandboxes.");
+    }
+}
 function normalizeSources(raw) {
     if (raw === undefined) {
         return [];
@@ -348,71 +337,14 @@ function normalizeSources(raw) {
     // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- structural validation above guarantees array of {kind: string} entries; per-source Zod validation lives in buildSources
     return raw;
 }
-function normalizeAuthRecipes(value, path) {
-    if (value === undefined) {
-        return {};
-    }
-    if (!isPlainObject(value)) {
-        fail(`${path} must be an object`);
-    }
-    const recipes = {};
-    for (const [key, raw] of Object.entries(value)) {
-        const recipePath = `${path}.${key}`;
-        if (!isPlainObject(raw)) {
-            fail(`${recipePath} must be an object`);
-        }
-        const { displayName, binary, loginArgs, statusArgs, authenticatedPattern, kind, env } = raw;
-        requireString(displayName, `${recipePath}.displayName`);
-        const loginArray = normalizeOptionalStringArray(loginArgs, `${recipePath}.loginArgs`);
-        const statusArray = normalizeOptionalStringArray(statusArgs, `${recipePath}.statusArgs`);
-        if (loginArray === undefined) {
-            fail(`${recipePath}.loginArgs is required`);
-        }
-        if (statusArray === undefined) {
-            fail(`${recipePath}.statusArgs is required`);
-        }
-        if (!(authenticatedPattern instanceof RegExp)) {
-            fail(`${recipePath}.authenticatedPattern must be a RegExp`);
-        }
-        const recipe = {
-            displayName,
-            loginArgs: loginArray,
-            statusArgs: statusArray,
-            authenticatedPattern,
-        };
-        const binaryString = normalizeOptionalString(binary, `${recipePath}.binary`);
-        if (binaryString !== undefined) {
-            recipe.binary = binaryString;
-        }
-        if (kind !== undefined) {
-            if (kind !== "agent" && kind !== "tool") {
-                fail(`${recipePath}.kind must be "agent" or "tool"`);
-            }
-            recipe.kind = kind;
-        }
-        if (env !== undefined) {
-            if (!isPlainObject(env)) {
-                fail(`${recipePath}.env must be an object`);
-            }
-            const normalizedEnv = {};
-            for (const [envKey, envValue] of Object.entries(env)) {
-                if (typeof envValue !== "string") {
-                    fail(`${recipePath}.env.${envKey} must be a string`);
-                }
-                normalizedEnv[envKey] = envValue;
-            }
-            recipe.env = normalizedEnv;
-        }
-        recipes[key] = recipe;
-    }
-    return recipes;
-}
 function applyDefaults(user) {
     // Guard the top-level shape before reading nested fields, so a
     // malformed runtime config produces a `groundcrew config: ...` error
     // instead of a raw `TypeError: Cannot read properties of undefined`.
     // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- `user` is loosely typed input from the loader; we narrow with requireObject below
-    failOnLegacyLinearShape(user);
+    const rawUser = user;
+    failOnLegacyLinearShape(rawUser);
+    failOnRemovedSandboxSettings(rawUser);
     requireObject(user.workspace, "workspace");
     if (isPlainObject(user.models) && Object.hasOwn(user.models, "isolation")) {
         fail("models.isolation is no longer supported: set `local.runner` ('safehouse' | 'sdx' | 'none' | 'auto') instead");
@@ -420,7 +352,6 @@ function applyDefaults(user) {
     if (Object.hasOwn(user, "remote")) {
         fail("remote is no longer supported: groundcrew runs locally via safehouse/sdx/none; remove the remote block from your config");
     }
-    requireOptionalObject(user.sandbox, "sandbox");
     const userLocal = user.local;
     if (userLocal !== undefined && !isPlainObject(userLocal)) {
         fail("local must be an object");
@@ -445,10 +376,6 @@ function applyDefaults(user) {
         local: {
             runner: normalizeLocalRunner(userLocal?.runner, "local.runner") ?? "auto",
         },
-        sandbox: {
-            authRecipes: normalizeAuthRecipes(user.sandbox?.authRecipes, "sandbox.authRecipes"),
-            gitDefaults: normalizeOptionalBoolean(user.sandbox?.gitDefaults, "sandbox.gitDefaults") ?? true,
-        },
         logging: {
             file: expandHome(normalizeOptionalString(user.logging?.file, "logging.file") ?? defaultLogFile()),
         },

package/dist/lib/launchCommand.d.ts

@@ -36,9 +36,9 @@ interface LaunchCommandArguments {
     runner: LocalRunner;
     /**
      * sbx sandbox name when `runner === "sdx"`. Derived by the caller from
-     * `sandboxNameFor({ repository, model })`. Required for sdx; ignored
-     * otherwise. Kept off the model definition so a model can launch under
-     * safehouse on one host and sdx on another without config edits.
+     * `sandboxNameFor({ agent })`. Required for sdx; ignored otherwise.
+     * Kept off the model definition so a model can launch under safehouse
+     * on one host and sdx on another without config edits.
      */
     sandboxName?: string | undefined;
 }

package/dist/lib/sandboxName.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Derive the sbx sandbox name groundcrew expects for a given sbx agent.
+ * Groundcrew only addresses this existing sandbox at launch time; it does
+ * not probe, create, mutate, or remove it.
+ */
+export declare function sandboxNameFor(arguments_: {
+    agent: string;
+}): string;
+//# sourceMappingURL=sandboxName.d.ts.map

package/dist/lib/sandboxName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxName.d.ts","sourceRoot":"","sources":["../../src/lib/sandboxName.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAMpE"}

package/dist/lib/sandboxName.js

@@ -0,0 +1,12 @@
+/**
+ * Derive the sbx sandbox name groundcrew expects for a given sbx agent.
+ * Groundcrew only addresses this existing sandbox at launch time; it does
+ * not probe, create, mutate, or remove it.
+ */
+export function sandboxNameFor(arguments_) {
+    const raw = `groundcrew-${arguments_.agent}`.toLowerCase();
+    return raw
+        .replaceAll(/[^a-z0-9.+-]+/g, "-")
+        .replaceAll(/-+/g, "-")
+        .replaceAll(/^-|-$/g, "");
+}

package/dist/lib/tmuxAdapter.d.ts

@@ -0,0 +1,9 @@
+/**
+ * tmux Workspace backend. Workspaces live as windows inside one dedicated
+ * `groundcrew` tmux session; the window name is the ticket id. tmux can't
+ * paint status pills, so `open` silently drops `spec.status`. This is the
+ * Linux/WSL path where cmux is unavailable.
+ */
+import { type Adapter } from "./workspaceAdapter.ts";
+export declare const tmuxAdapter: Adapter;
+//# sourceMappingURL=tmuxAdapter.d.ts.map

package/dist/lib/tmuxAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/tmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,uBAAuB,CAAC;AAY/B,eAAO,MAAM,WAAW,EAAE,OAgEzB,CAAC"}

package/dist/lib/tmuxAdapter.js

@@ -0,0 +1,156 @@
+/**
+ * tmux Workspace backend. Workspaces live as windows inside one dedicated
+ * `groundcrew` tmux session; the window name is the ticket id. tmux can't
+ * paint status pills, so `open` silently drops `spec.status`. This is the
+ * Linux/WSL path where cmux is unavailable.
+ */
+import { isSignalAborted, runWorkspaceCommand, } from "./workspaceAdapter.js";
+import { errorMessage, log, readEnvironmentVariable } from "./util.js";
+const TMUX_SESSION = "groundcrew";
+// `tmux new-session -d -s …` always creates one initial window. Without
+// `-n`, that window is named after the running shell (e.g. "0" / "zsh") and
+// would surface from `list()` as a phantom workspace. We name it with this
+// sentinel and filter it out — it stays around as a placeholder so the
+// session doesn't collapse when the last ticket window closes.
+const TMUX_IDLE_WINDOW = "_groundcrew_idle";
+export const tmuxAdapter = {
+    async open(spec, signal) {
+        await ensureTmuxSession(signal);
+        const target = tmuxTarget(spec.name);
+        const keepDeadWindowsEnv = readEnvironmentVariable("GROUNDCREW_KEEP_DEAD_WINDOWS");
+        const keepDeadWindows = keepDeadWindowsEnv !== undefined && keepDeadWindowsEnv.length > 0;
+        await runWorkspaceCommand("tmux", [
+            "new-window",
+            "-d",
+            "-t",
+            TMUX_SESSION,
+            "-n",
+            spec.name,
+            "-c",
+            spec.cwd,
+            spec.command,
+            ";",
+            "set-window-option",
+            "-t",
+            target,
+            "remain-on-exit",
+            keepDeadWindows ? "on" : "off",
+            ";",
+            "set-window-option",
+            "-t",
+            target,
+            "allow-rename",
+            "off",
+        ], signal);
+        // tmux can't paint status pills; spec.status is silently dropped.
+    },
+    async list(signal) {
+        const probe = await probeTmuxList("#{window_name}\t#{pane_dead}", signal);
+        if (probe.status === "missing") {
+            return [];
+        }
+        if (probe.status === "failed") {
+            log(`tmux list-windows failed: ${probe.reason}`);
+            // oxlint-disable-next-line unicorn/no-useless-undefined -- undefined marks the workspace backend as unavailable.
+            return undefined;
+        }
+        return parseTmuxWindows(probe.output);
+    },
+    async close(name, signal) {
+        try {
+            await runWorkspaceCommand("tmux", ["kill-window", "-t", tmuxTarget(name)], signal);
+            return { kind: "closed" };
+        }
+        catch (error) {
+            if (isSignalAborted(signal)) {
+                throw error;
+            }
+            if (isTmuxNotFoundError(error)) {
+                return { kind: "missing" };
+            }
+            throw error;
+        }
+    },
+    accessHint(name) {
+        return { kind: "attachCommand", command: `tmux attach -t ${tmuxTarget(name)}` };
+    },
+};
+function tmuxTarget(name) {
+    return `${TMUX_SESSION}:${name}`;
+}
+function isTmuxNotFoundError(error) {
+    // runCommand surfaces the child's stderr in error.message, so the "no
+    // server" / "missing session" / "can't find window" signatures are visible
+    // without a separate stderr probe.
+    const message = errorMessage(error);
+    return (message.includes("no server running") ||
+        message.includes("can't find session") ||
+        message.includes("can't find window"));
+}
+async function probeTmuxList(format, signal) {
+    try {
+        return {
+            status: "ok",
+            output: await runWorkspaceCommand("tmux", ["list-windows", "-t", TMUX_SESSION, "-F", format], signal),
+        };
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        if (isTmuxNotFoundError(error)) {
+            return { status: "missing" };
+        }
+        return { status: "failed", reason: errorMessage(error) };
+    }
+}
+async function ensureTmuxSession(signal) {
+    try {
+        await runWorkspaceCommand("tmux", ["has-session", "-t", TMUX_SESSION], signal);
+        return;
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        /* session missing or server down; create it */
+    }
+    try {
+        await runWorkspaceCommand("tmux", ["new-session", "-d", "-s", TMUX_SESSION, "-n", TMUX_IDLE_WINDOW], signal);
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        try {
+            await runWorkspaceCommand("tmux", ["has-session", "-t", TMUX_SESSION], signal);
+        }
+        catch {
+            throw error;
+        }
+    }
+}
+function parseTmuxWindows(output) {
+    const items = [];
+    for (const line of output.split("\n")) {
+        if (line.length === 0) {
+            continue;
+        }
+        const [name, deadFlag] = line.split("\t");
+        /* v8 ignore next 3 @preserve -- split on a non-empty string always yields a non-empty first element */
+        if (name === undefined || name.length === 0) {
+            continue;
+        }
+        if (name === TMUX_IDLE_WINDOW) {
+            continue;
+        }
+        // pane_dead != 0 means the command exited and the window is a zombie
+        // (only happens when remain-on-exit is on; defense in depth in case a
+        // user-globally-set value beats our per-window override).
+        if (deadFlag !== undefined && deadFlag !== "0") {
+            continue;
+        }
+        items.push({ name });
+    }
+    return items;
+}

package/dist/lib/util.d.ts

@@ -34,6 +34,17 @@ export declare function lazyLinearClient(factory: () => LinearClient): () => Lin
  * each subcommand's arg parser stays DRY.
  */
 export declare function readTicketArgument(argv: string[], index: number, command: string): string;
+export interface DryRunPositionals {
+    dryRun: boolean;
+    positionals: string[];
+}
+/**
+ * Parses an argv that accepts an optional `--dry-run` flag plus free
+ * positionals, rejecting any other dash-prefixed token. Shared by the
+ * subcommands whose only flag is `--dry-run` so each parser stays DRY; pass the
+ * command's `usage` string for the "Unknown option" error.
+ */
+export declare function parseDryRunPositionals(argv: string[], usage: string): DryRunPositionals;
 export declare function errorMessage(error: unknown): string;
 export {};
 //# sourceMappingURL=util.d.ts.map

package/dist/lib/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,wBAAsB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB3E;AAED,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAIlD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGhD;AAQD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEzD;AAED,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAOxF;AAkBD,wBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAQzC;AAED,KAAK,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;AAUpF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,IAAI,CAcxF;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxE;AAED,QAAA,MAAM,sBAAsB,YAAI,2BAA2B,EAAE,gBAAgB,CAAU,CAAC;AAExF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,wBAAgB,mBAAmB,IAAI,oBAAoB,GAAG,SAAS,CAQtE;AAED,wBAAgB,eAAe,IAAI,YAAY,CAQ9C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,YAAY,GAAG,MAAM,YAAY,CAMhF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMzF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcnD"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/lib/util.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,wBAAsB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB3E;AAED,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAIlD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGhD;AAQD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEzD;AAED,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAOxF;AAkBD,wBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAQzC;AAED,KAAK,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;AAUpF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,IAAI,CAcxF;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxE;AAED,QAAA,MAAM,sBAAsB,YAAI,2BAA2B,EAAE,gBAAgB,CAAU,CAAC;AAExF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,wBAAgB,mBAAmB,IAAI,oBAAoB,GAAG,SAAS,CAQtE;AAED,wBAAgB,eAAe,IAAI,YAAY,CAQ9C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,YAAY,GAAG,MAAM,YAAY,CAMhF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMzF;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAcvF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcnD"}

package/dist/lib/util.js

@@ -146,6 +146,27 @@ export function readTicketArgument(argv, index, command) {
     }
     return value;
 }
+/**
+ * Parses an argv that accepts an optional `--dry-run` flag plus free
+ * positionals, rejecting any other dash-prefixed token. Shared by the
+ * subcommands whose only flag is `--dry-run` so each parser stays DRY; pass the
+ * command's `usage` string for the "Unknown option" error.
+ */
+export function parseDryRunPositionals(argv, usage) {
+    let dryRun = false;
+    const positionals = [];
+    for (const argument of argv) {
+        if (argument === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (argument.startsWith("-")) {
+            throw new Error(`Unknown option: ${argument}\nUsage: ${usage}`);
+        }
+        positionals.push(argument);
+    }
+    return { dryRun, positionals };
+}
 export function errorMessage(error) {
     if (error instanceof Error) {
         return error.message;

package/dist/lib/workspaceAdapter.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Shared contract for Workspace backends. A Workspace is the host-side
+ * terminal session that runs an agent for one ticket; `Workspace.name` is
+ * the ticket id callers key on. The cmux and tmux adapters implement this
+ * interface in their own files (`cmuxAdapter.ts`, `tmuxAdapter.ts`);
+ * `workspaces.ts` resolves and fronts them. This is internal cleanup, not a
+ * plugin contract — nothing here is a published extension point.
+ */
+export type WorkspaceKind = "cmux" | "tmux";
+export interface Workspace {
+    /** Ticket id; the join key callers use. */
+    name: string;
+}
+export interface WorkspaceStatus {
+    text: string;
+    color?: string;
+    icon?: string;
+}
+export interface WorkspaceAccessHint {
+    kind: "attachCommand";
+    command: string;
+}
+export interface OpenSpec {
+    /** Ticket id; becomes the workspace's name. */
+    name: string;
+    /** Working directory the workspace runs in. */
+    cwd: string;
+    /** Shell string the workspace executes (host setup + agent exec). */
+    command: string;
+    /** Optional status painting. Adapters that can't paint silently drop it. */
+    status?: WorkspaceStatus;
+}
+/**
+ * `unavailable` is "we don't know" — never treat it as "empty," or callers
+ * would close every live workspace by deduction.
+ */
+export type WorkspaceProbe = {
+    kind: "ok";
+    names: Set<string>;
+} | {
+    kind: "unavailable";
+    error?: unknown;
+};
+export type WorkspaceInterruptResult = {
+    kind: "interrupted";
+} | {
+    kind: "missing";
+} | {
+    kind: "unavailable";
+    error?: unknown;
+};
+export type WorkspaceCloseResult = {
+    kind: "closed";
+} | {
+    kind: "missing";
+} | {
+    kind: "unavailable";
+    error?: unknown;
+};
+export interface Adapter {
+    open(spec: OpenSpec, signal?: AbortSignal): Promise<void>;
+    /**
+     * Live workspaces only. Returns:
+     * - `Workspace[]` when the adapter probe succeeded (may be empty).
+     * - `undefined` when the adapter binary failed in a way that doesn't
+     *   distinguish "no live workspaces" from "couldn't ask".
+     */
+    list(signal?: AbortSignal): Promise<Workspace[] | undefined>;
+    /** Closes the workspace or confirms it is not present. */
+    close(name: string, signal?: AbortSignal): Promise<WorkspaceCloseResult>;
+    /**
+     * User-facing way to reach the workspace, or `undefined` when the backend
+     * has no concise external hint.
+     */
+    accessHint(name: string): WorkspaceAccessHint | undefined;
+}
+export declare function runWorkspaceCommand(command: string, arguments_: readonly string[], signal?: AbortSignal): Promise<string>;
+export declare function isSignalAborted(signal?: AbortSignal): boolean;
+//# sourceMappingURL=workspaceAdapter.d.ts.map