@clipboard-health/groundcrew 4.3.0 → 4.3.2

package/dist/commands/upgrade.d.ts

@@ -7,6 +7,7 @@ export interface UpgradeCliOptions {
         version: string;
         npmBin: string;
     }) => Promise<NpmRunResult>;
+    readInstalledVersion: (installPath: string) => string | undefined;
 }
 export interface UpgradeInstallDetails {
     installKind: InstallKind;

package/dist/commands/upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAK7B,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,OAAO,EAAE;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAOD,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GAAG,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAiD5F,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EAAE,EACd,YAAY,EAAE,sBAAsB,GACnC,OAAO,CAAC,IAAI,CAAC,CAkBf;AAsCD,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAqB5B"}
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAKA,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAK7B,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,OAAO,EAAE;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5B,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CACnE;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAYD,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GAAG,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAiD5F,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EAAE,EACd,YAAY,EAAE,sBAAsB,GACnC,OAAO,CAAC,IAAI,CAAC,CAkBf;AAmED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAsB5B"}

package/dist/commands/upgrade.js

@@ -1,3 +1,5 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
 import { runCommand } from "../lib/commandRunner.js";
 import { which } from "../lib/host.js";
 import { classifyInstall, createDefaultNpmSpawner, detectInstallPath, detectIsSymlink, detectNpmRootGlobal, runNpmInstallGlobal, } from "../lib/npmGlobal.js";
@@ -54,13 +56,13 @@ export async function upgradeCli(argv, optionsInput) {
         return;
     }
     const options = await resolveOptions(optionsInput);
-    const npmBin = await resolveGlobalNpmBin(options);
-    if (npmBin === undefined) {
+    const install = await resolveGlobalInstall(options);
+    if (install === undefined) {
         return;
     }
-    await runInstallAndReport(options, npmBin, parsed.version);
+    await runInstallAndReport(options, install, parsed.version);
 }
-async function resolveGlobalNpmBin(options) {
+async function resolveGlobalInstall(options) {
     const install = await options.resolveInstall();
     if (install.installKind !== "global") {
         writeError(refusalMessage(install.installKind, install.installPath, options.packageName));
@@ -72,22 +74,45 @@ async function resolveGlobalNpmBin(options) {
         process.exitCode = 1;
         return undefined;
     }
-    return install.npmBin;
+    return { installPath: install.installPath, npmBin: install.npmBin };
 }
-async function runInstallAndReport(options, npmBin, version) {
+async function runInstallAndReport(options, install, version) {
+    const fromVersion = options.readInstalledVersion(install.installPath);
+    writeOutput("Upgrading crew…");
     const result = await options.runInstall({
         packageName: options.packageName,
         version,
-        npmBin,
+        npmBin: install.npmBin,
     });
     if (result.exitCode === 0) {
+        const toVersion = options.readInstalledVersion(install.installPath);
+        writeOutput(formatUpgradeSuccess({ fromVersion, toVersion }));
         return;
     }
+    if (result.outputText.length > 0) {
+        process.stderr.write(result.outputText);
+        if (!result.outputText.endsWith("\n")) {
+            process.stderr.write("\n");
+        }
+    }
     if (result.sawEacces) {
         writeError("crew upgrade: install failed with EACCES (permission denied). Your global npm prefix may require elevated permissions - see https://docs.npmjs.com/resolving-eacces-permissions-errors-when-installing-packages-globally");
     }
     process.exitCode = result.exitCode;
 }
+function formatUpgradeSuccess(versions) {
+    const { fromVersion, toVersion } = versions;
+    if (toVersion === undefined) {
+        return "crew upgrade complete";
+    }
+    if (fromVersion === undefined) {
+        return `crew is now on version ${toVersion}`;
+    }
+    if (fromVersion === toVersion) {
+        return `crew is already on version ${toVersion}`;
+    }
+    return `Upgraded crew from ${fromVersion} to ${toVersion}`;
+}
 export async function createDefaultUpgradeCliOptions(args) {
     return {
         packageName: args.packageName,
@@ -104,7 +129,31 @@ export async function createDefaultUpgradeCliOptions(args) {
         },
         runInstall: async (options) => await runNpmInstallGlobal({
             ...options,
-            spawner: createDefaultNpmSpawner(process.stderr),
+            spawner: createDefaultNpmSpawner(),
         }),
+        readInstalledVersion: readInstalledVersionFromDisk,
     };
 }
+function readInstalledVersionFromDisk(installPath) {
+    let raw;
+    try {
+        raw = readFileSync(join(installPath, "package.json"), "utf8");
+    }
+    catch {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed === "object" &&
+        parsed !== null &&
+        "version" in parsed &&
+        typeof parsed.version === "string") {
+        return parsed.version;
+    }
+    return undefined;
+}

package/dist/lib/launchCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchCommand.d.ts","sourceRoot":"","sources":["../../src/lib/launchCommand.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAcvF;AAID;;;GAGG;AACH,eAAO,MAAM,aAAa,mFACwD,CAAC;AAiCnF,UAAU,sBAAsB;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CAQ7E"}
+{"version":3,"file":"launchCommand.d.ts","sourceRoot":"","sources":["../../src/lib/launchCommand.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAcvF;AAID;;;GAGG;AACH,eAAO,MAAM,aAAa,mFACwD,CAAC;AAiHnF,UAAU,sBAAsB;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CAQ7E"}

package/dist/lib/launchCommand.js

@@ -1,5 +1,5 @@
 import { createRequire } from "node:module";
-import { dirname, resolve } from "node:path";
+import { basename, dirname, resolve } from "node:path";
 import { BUILD_SECRET_NAMES } from "./config.js";
 import { shellSingleQuote } from "./shell.js";
 export { shellSingleQuote } from "./shell.js";
@@ -53,6 +53,77 @@ function sourceSecretsLine(secretsFile) {
 function unsetSecretsLine() {
     return `unset ${BUILD_SECRET_NAMES.join(" ")}`;
 }
+function tokenizeShellPrefix(command) {
+    const tokens = [];
+    let current = "";
+    let quote;
+    let isEscaped = false;
+    for (const character of command.trim()) {
+        if (isEscaped) {
+            current += character;
+            isEscaped = false;
+            continue;
+        }
+        if (character === "\\" && quote !== "'") {
+            isEscaped = true;
+            continue;
+        }
+        if (quote !== undefined) {
+            if (character === quote) {
+                quote = undefined;
+            }
+            else {
+                current += character;
+            }
+            continue;
+        }
+        if (character === "'" || character === '"') {
+            quote = character;
+            continue;
+        }
+        if (/\s/.test(character)) {
+            if (current.length > 0) {
+                tokens.push(current);
+                current = "";
+            }
+            continue;
+        }
+        current += character;
+    }
+    if (current.length > 0) {
+        tokens.push(current);
+    }
+    return tokens;
+}
+function isEnvironmentAssignment(token) {
+    return /^[A-Za-z_][A-Za-z0-9_]*=/.test(token);
+}
+function safehouseProfileCommandName(agentCmd) {
+    const tokens = tokenizeShellPrefix(agentCmd);
+    let tokenIndex = tokens[0] === "env" ? 1 : 0;
+    if (tokens[0] === "env" && tokens[tokenIndex] === "--") {
+        tokenIndex += 1;
+    }
+    let commandToken;
+    for (const token of tokens.slice(tokenIndex)) {
+        if (isEnvironmentAssignment(token)) {
+            continue;
+        }
+        commandToken = token;
+        break;
+    }
+    if (commandToken === undefined) {
+        throw new Error(`Cannot infer Safehouse agent profile command from model cmd ${JSON.stringify(agentCmd)}.`);
+    }
+    const commandName = basename(commandToken);
+    if (commandName === "." ||
+        commandName === ".." ||
+        commandName.startsWith("-") ||
+        !/^[A-Za-z0-9._-]+$/.test(commandName)) {
+        throw new Error(`Cannot use ${JSON.stringify(commandName)} as a Safehouse agent profile command name inferred from model cmd ${JSON.stringify(agentCmd)}.`);
+    }
+    return commandName;
+}
 /**
  * Build the shell command that runs inside the workspace. The prompt is
  * staged in a temp file (so backticks/quotes/$ in the description survive),
@@ -106,35 +177,46 @@ function buildUnwrappedHostLaunchCommand(arguments_) {
     return lines.join(" && ");
 }
 /**
- * Safehouse launch. Setup runs *inside* the `safehouse-clearance` wrap (mirroring
- * the sdx runner) so the repo's `.groundcrew/setup.sh` and its `npm install` are
- * filesystem-isolated and egress-restricted, rather than running on the bare host.
+ * Safehouse launch. Setup runs *inside* a plain `safehouse-clearance` wrap
+ * (mirroring the sdx runner) so the repo's `.groundcrew/setup.sh` and its
+ * `npm install` are filesystem-isolated and egress-restricted without inheriting
+ * agent credentials/state grants. The agent then runs in a second Safehouse wrap
+ * through an agent-named shim so Safehouse can select only the agent profile.
  *
  * Build secrets are sourced into the host launch shell so Safehouse can forward
  * them into the sandbox via `--env-pass` (Safehouse's `--env=FILE` mode otherwise
- * strips them); they're `unset` inside the wrap after setup so the agent process
- * never inherits them. The host keeps only `cd`, the prompt read, and the wrap exec.
+ * strips them); they're `unset` on the host after setup and not passed to the
+ * agent wrap. The host keeps `cd`, the prompt read, and a temporary
+ * command-named shim so Safehouse can select the intended agent profile while
+ * the actual agent command remains `sh -lc`.
  */
 function buildSafehouseLaunchCommand(arguments_) {
     const promptDir = dirname(arguments_.promptFile);
+    const safehouseCommandName = safehouseProfileCommandName(arguments_.definition.cmd);
     const agentCmd = renderAgentCommand({
         agentCmd: arguments_.definition.cmd,
         worktreeDir: arguments_.worktreeDir,
         sandboxName: "",
     });
-    const innerParts = [setupWithStatusReporting(SETUP_COMMAND)];
-    if (arguments_.secretsFile !== undefined) {
-        innerParts.push(unsetSecretsLine());
-    }
-    innerParts.push(`exec ${agentCmd} "$@"`);
-    const innerCommand = innerParts.join("; ");
-    // Trailing space keeps the flag and `sh` separated; empty when no secrets.
+    const setupCommand = setupWithStatusReporting(SETUP_COMMAND);
+    const agentCommand = `exec ${agentCmd} "$@"`;
+    // Trailing space keeps the flag and setup command separated; empty when no secrets.
     const envPassFlag = arguments_.secretsFile === undefined ? "" : `--env-pass=${BUILD_SECRET_NAMES.join(",")} `;
+    const safehouseWrapper = shellSingleQuote(SAFEHOUSE_CLEARANCE_WRAPPER_PATH);
     const lines = [`cd ${shellSingleQuote(arguments_.worktreeDir)}`];
     if (arguments_.secretsFile !== undefined) {
         lines.push(sourceSecretsLine(arguments_.secretsFile));
     }
-    lines.push(`_p=$(cat ${shellSingleQuote(arguments_.promptFile)})`, `rm -rf ${shellSingleQuote(promptDir)}`, `exec ${shellSingleQuote(SAFEHOUSE_CLEARANCE_WRAPPER_PATH)} ${envPassFlag}sh -lc ${shellSingleQuote(innerCommand)} sh "$_p"`);
+    lines.push(`_p=$(cat ${shellSingleQuote(arguments_.promptFile)})`, `rm -rf ${shellSingleQuote(promptDir)}`, `${safehouseWrapper} ${envPassFlag}sh -lc ${shellSingleQuote(setupCommand)}`);
+    if (arguments_.secretsFile !== undefined) {
+        lines.push(unsetSecretsLine());
+    }
+    lines.push(`_safehouse_shim_dir=$(mktemp -d "\${TMPDIR:-/tmp}/groundcrew-safehouse-XXXXXX")`, `trap 'rm -rf "$_safehouse_shim_dir"' EXIT`, `_safehouse_shim="$_safehouse_shim_dir/${safehouseCommandName}"`, `ln -s /bin/sh "$_safehouse_shim"`, 
+    // Safehouse selects an agent profile from the wrapped command's basename.
+    // Running the real launch chain as `sh -lc` would make it see `sh`, so use
+    // an agent-named symlink to /bin/sh. This preserves per-agent profile
+    // selection without enabling every agent profile.
+    `${safehouseWrapper} "$_safehouse_shim" -lc ${shellSingleQuote(agentCommand)} sh "$_p"; _safehouse_status=$?; rm -rf "$_safehouse_shim_dir"; trap - EXIT; exit "$_safehouse_status"`);
     return lines.join(" && ");
 }
 function buildSdxLaunchCommand(arguments_) {

package/dist/lib/npmGlobal.d.ts

@@ -7,12 +7,13 @@ export interface ClassifyInstallOptions {
 export declare function classifyInstall(options: ClassifyInstallOptions): InstallKind;
 export interface NpmSpawnerResult {
     exitCode: number;
-    stderrText: string;
+    outputText: string;
 }
 export type NpmSpawner = (command: string, args: readonly string[]) => Promise<NpmSpawnerResult>;
 export interface NpmRunResult {
     exitCode: number;
     sawEacces: boolean;
+    outputText: string;
 }
 export interface RunNpmInstallOptions {
     packageName: string;
@@ -25,5 +26,5 @@ export declare function detectInstallPath(cliMetaUrl: string): string;
 export type NpmRootRunner = (command: string, args: readonly string[]) => string;
 export declare function detectNpmRootGlobal(npmBin: string, runner: NpmRootRunner): string | undefined;
 export declare function detectIsSymlink(path: string): boolean;
-export declare function createDefaultNpmSpawner(passthroughStderr: NodeJS.WritableStream): NpmSpawner;
+export declare function createDefaultNpmSpawner(): NpmSpawner;
 //# sourceMappingURL=npmGlobal.d.ts.map

package/dist/lib/npmGlobal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npmGlobal.d.ts","sourceRoot":"","sources":["../../src/lib/npmGlobal.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACtC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,WAAW,CAY5E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEjG,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CAO9F;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAEjF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAM7F;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMrD;AAED,wBAAgB,uBAAuB,CAAC,iBAAiB,EAAE,MAAM,CAAC,cAAc,GAAG,UAAU,CAmB5F"}
+{"version":3,"file":"npmGlobal.d.ts","sourceRoot":"","sources":["../../src/lib/npmGlobal.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACtC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,WAAW,CAY5E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEjG,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CAQ9F;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAEjF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAM7F;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMrD;AAED,wBAAgB,uBAAuB,IAAI,UAAU,CAmBpD"}

package/dist/lib/npmGlobal.js

@@ -20,7 +20,8 @@ export async function runNpmInstallGlobal(options) {
     const result = await options.spawner(options.npmBin, args);
     return {
         exitCode: result.exitCode,
-        sawEacces: result.stderrText.includes("EACCES"),
+        sawEacces: result.outputText.includes("EACCES"),
+        outputText: result.outputText,
     };
 }
 export function detectInstallPath(cliMetaUrl) {
@@ -42,20 +43,20 @@ export function detectIsSymlink(path) {
         return false;
     }
 }
-export function createDefaultNpmSpawner(passthroughStderr) {
+export function createDefaultNpmSpawner() {
     return async (command, args) => await new Promise((resolve, reject) => {
-        const child = spawn(command, [...args], { stdio: ["inherit", "inherit", "pipe"] });
-        const { stderr } = child;
+        const child = spawn(command, [...args], { stdio: ["inherit", "pipe", "pipe"] });
         const chunks = [];
-        stderr.on("data", (chunk) => {
+        const collect = (chunk) => {
             chunks.push(chunk);
-            passthroughStderr.write(chunk);
-        });
+        };
+        child.stdout.on("data", collect);
+        child.stderr.on("data", collect);
         child.on("error", reject);
         child.on("close", (code) => {
             resolve({
                 exitCode: code ?? 1,
-                stderrText: Buffer.concat(chunks).toString("utf8"),
+                outputText: Buffer.concat(chunks).toString("utf8"),
             });
         });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clipboard-health/groundcrew",
-  "version": "4.3.0",
+  "version": "4.3.2",
   "description": "Linear-driven orchestrator that launches AI coding agents in git worktrees, with workspace lifecycle and usage tracking.",
   "keywords": [
     "agent",