@clipboard-health/groundcrew 4.45.4 → 4.45.6

package/dist/commands/cleaner.d.ts

@@ -5,7 +5,7 @@
  */
 import type { ResolvedConfig } from "../lib/config.ts";
 import { type BoardState } from "../lib/taskSource.ts";
-import { type WorktreeEntry } from "../lib/worktrees.ts";
+import type { WorktreeEntry } from "../lib/worktrees.ts";
 interface CleanerDeps {
     config: ResolvedConfig;
 }

package/dist/commands/cleaner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleaner.d.ts","sourceRoot":"","sources":["../../src/commands/cleaner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,KAAK,aAAa,EAAa,MAAM,qBAAqB,CAAC;AAGpE,UAAU,WAAW;IACnB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,UAAU,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC;QAClB,eAAe,EAAE,SAAS,aAAa,EAAE,CAAC;QAC1C,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAoDxD"}
+{"version":3,"file":"cleaner.d.ts","sourceRoot":"","sources":["../../src/commands/cleaner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,UAAU,WAAW;IACnB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,UAAU,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC;QAClB,eAAe,EAAE,SAAS,aAAa,EAAE,CAAC;QAC1C,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CA8CxD"}

package/dist/commands/cleaner.js

@@ -3,11 +3,9 @@
  * tasks that have reached a terminal status. One per `orchestrate()`
  * invocation; stateless across iterations. Mirrors `Dispatcher`.
  */
-import { recordCleanedUpRuns } from "../lib/runStateCleanup.js";
 import { naturalIdFromCanonical } from "../lib/taskSource.js";
 import { log, logEvent } from "../lib/util.js";
-import { worktrees } from "../lib/worktrees.js";
-import { logTeardown, recordTeardownEvents } from "./teardownReporter.js";
+import { reapWorktrees } from "./teardownReporter.js";
 export function createCleaner(deps) {
     const { config } = deps;
     async function runOnce(arguments_) {
@@ -37,12 +35,7 @@ export function createCleaner(deps) {
             return;
         }
         log(`Cleaning up ${stale.length} terminal worktree(s)`);
-        const result = signal === undefined
-            ? await worktrees.teardown(config, stale)
-            : await worktrees.teardown(config, stale, { signal });
-        recordCleanedUpRuns(config, result.removed);
-        logTeardown(result);
-        recordTeardownEvents(result);
+        await reapWorktrees(config, stale, signal);
     }
     return { runOnce };
 }

package/dist/commands/reviewer.d.ts

@@ -7,8 +7,11 @@
  *   dispatch slot (slot math counts only in-progress) while leaving the
  *   worktree intact for review, since the cleaner only tears down `done`.
  * - A **merged** PR (on an in-progress or in-review task) → `markDone`:
- *   the work has landed, so the task is terminal and the cleaner tears the
- *   worktree down on a later tick. `merged` never routes to `in-review`.
+ *   the work has landed, so the task is terminal. On a successful `markDone`
+ *   the reviewer tears the worktree down immediately (same step). The cleaner
+ *   remains the level-triggered backstop for sources where `markDone` is
+ *   unsupported or that keep reporting `done`. `merged` never routes to
+ *   `in-review`.
  *
  * Sources that don't implement `markDone` (e.g. Linear) return `unsupported`;
  * the reviewer logs the skip and does nothing — there is no in-review

package/dist/commands/reviewer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/commands/reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,KAAK,UAAU,EAIhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,KAAK,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;AAE7C,UAAU,YAAY;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,sEAAsE;AACtE,UAAU,eAAe;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AA+CD,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CA+H3D"}
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/commands/reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,KAAK,UAAU,EAIhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,KAAK,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;AAE7C,UAAU,YAAY;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,sEAAsE;AACtE,UAAU,eAAe;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AA+CD,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CAiJ3D"}

package/dist/commands/reviewer.js

@@ -7,8 +7,11 @@
  *   dispatch slot (slot math counts only in-progress) while leaving the
  *   worktree intact for review, since the cleaner only tears down `done`.
  * - A **merged** PR (on an in-progress or in-review task) → `markDone`:
- *   the work has landed, so the task is terminal and the cleaner tears the
- *   worktree down on a later tick. `merged` never routes to `in-review`.
+ *   the work has landed, so the task is terminal. On a successful `markDone`
+ *   the reviewer tears the worktree down immediately (same step). The cleaner
+ *   remains the level-triggered backstop for sources where `markDone` is
+ *   unsupported or that keep reporting `done`. `merged` never routes to
+ *   `in-review`.
  *
  * Sources that don't implement `markDone` (e.g. Linear) return `unsupported`;
  * the reviewer logs the skip and does nothing — there is no in-review
@@ -24,6 +27,7 @@
 import { naturalIdFromCanonical, } from "../lib/taskSource.js";
 import { debug, errorMessage, log, logEvent } from "../lib/util.js";
 import { effectiveBranchName } from "../lib/worktreeRunState.js";
+import { reapWorktrees } from "./teardownReporter.js";
 // Maps a worktree's PRs to the transition its task should make. A merged PR
 // means the work landed → done; an open PR on an in-progress task means it's
 // up for review. `merged` wins over `open`. An open PR on an already in-review
@@ -118,7 +122,15 @@ export function createReviewer(deps) {
                 return;
             }
             // oxlint-disable-next-line no-await-in-loop -- single write-back then return; never iterates past the first actionable worktree.
-            await advance({ issue, task, pullRequest, transition });
+            await advance({
+                issue,
+                task,
+                pullRequest,
+                transition,
+                entry,
+                reviewerConfig,
+                signal,
+            });
             return;
         }
     }
@@ -126,7 +138,7 @@ export function createReviewer(deps) {
     // task keeps its status and is retried next tick, exactly like a failed
     // lookup. We never let one task's writeback abort the others' reviews.
     async function advance(arguments_) {
-        const { issue, task, pullRequest, transition } = arguments_;
+        const { issue, task, pullRequest, transition, entry, reviewerConfig, signal } = arguments_;
         try {
             const result = transition === "done" ? await board.markDone(issue) : await board.markInReview(issue);
             if (result.outcome === "unsupported") {
@@ -147,6 +159,14 @@ export function createReviewer(deps) {
                 state: pullRequest.state,
                 to: transition,
             });
+            if (transition === "done" && reviewerConfig !== undefined) {
+                try {
+                    await reapWorktrees(reviewerConfig, [entry], signal);
+                }
+                catch (teardownError) {
+                    log(`Teardown failed for ${task}: ${errorMessage(teardownError)}`);
+                }
+            }
         }
         catch (error) {
             log(`Failed to advance ${task} to ${transition}: ${errorMessage(error)}`);

package/dist/commands/teardownReporter.d.ts

@@ -1,4 +1,11 @@
-import type { TeardownResult } from "../lib/worktrees.ts";
+import type { ResolvedConfig } from "../lib/config.ts";
+import { type TeardownResult, type WorktreeEntry } from "../lib/worktrees.ts";
 export declare function logTeardown(result: TeardownResult): void;
+/**
+ * Shared helper: runs `worktrees.teardown` then records run-state cleanup,
+ * logs the result, and emits telemetry events. Used by both the cleaner and
+ * the reviewer fast-path so the sequence is never duplicated.
+ */
+export declare function reapWorktrees(config: ResolvedConfig, entries: readonly WorktreeEntry[], signal?: AbortSignal): Promise<TeardownResult>;
 export declare function recordTeardownEvents(result: TeardownResult): void;
 //# sourceMappingURL=teardownReporter.d.ts.map

package/dist/commands/teardownReporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"teardownReporter.d.ts","sourceRoot":"","sources":["../../src/commands/teardownReporter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAmBxD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAwCjE"}
+{"version":3,"file":"teardownReporter.d.ts","sourceRoot":"","sources":["../../src/commands/teardownReporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAa,MAAM,qBAAqB,CAAC;AAEzF,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAmBxD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAwCjE"}

package/dist/commands/teardownReporter.js

@@ -1,4 +1,6 @@
+import { recordCleanedUpRuns } from "../lib/runStateCleanup.js";
 import { debug, errorMessage, log, logEvent, okMark } from "../lib/util.js";
+import { worktrees } from "../lib/worktrees.js";
 export function logTeardown(result) {
     if (result.workspaceProbe.kind === "unavailable" && result.workspaceProbe.error !== undefined) {
         log(`workspace list failed: ${errorMessage(result.workspaceProbe.error)}`);
@@ -20,6 +22,20 @@ export function logTeardown(result) {
         }
     }
 }
+/**
+ * Shared helper: runs `worktrees.teardown` then records run-state cleanup,
+ * logs the result, and emits telemetry events. Used by both the cleaner and
+ * the reviewer fast-path so the sequence is never duplicated.
+ */
+export async function reapWorktrees(config, entries, signal) {
+    const result = signal === undefined
+        ? await worktrees.teardown(config, entries)
+        : await worktrees.teardown(config, entries, { signal });
+    recordCleanedUpRuns(config, result.removed);
+    logTeardown(result);
+    recordTeardownEvents(result);
+    return result;
+}
 export function recordTeardownEvents(result) {
     if (result.workspaceProbe.kind === "unavailable") {
         logEvent("cleanup", {

package/dist/lib/cmuxAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/cmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,WAAW,EAAE,OA+EzB,CAAC"}
+{"version":3,"file":"cmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/cmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,WAAW,EAAE,OAqFzB,CAAC"}

package/dist/lib/cmuxAdapter.js

@@ -7,18 +7,25 @@ import { isSignalAborted, runWorkspaceCommand, } from "./workspaceAdapter.js";
 import { debug, errorMessage, log } from "./util.js";
 export const cmuxAdapter = {
     async open(spec, signal) {
-        const output = await runWorkspaceCommand("cmux", [
-            "--json",
-            "new-workspace",
-            "--name",
-            spec.name,
-            "--cwd",
-            spec.cwd,
-            "--command",
-            spec.command,
-            "--description",
-            cmuxDescriptionFor(spec.name),
-        ], signal);
+        let output;
+        try {
+            output = await runWorkspaceCommand("cmux", [
+                "--json",
+                "new-workspace",
+                "--name",
+                spec.name,
+                "--cwd",
+                spec.cwd,
+                "--command",
+                spec.command,
+                "--description",
+                cmuxDescriptionFor(spec.name),
+            ], signal);
+        }
+        catch (error) {
+            await closeWorkspaceLeakedByFailedOpen(error, spec.name, signal);
+            throw error;
+        }
         const workspaceId = extractCmuxOpenId(output);
         if (workspaceId === undefined) {
             log(`cmux new-workspace returned unrecognized output for ${spec.name}; if a workspace was created, run \`cmux close-workspace\` manually.`);
@@ -180,6 +187,48 @@ async function applyCmuxStatus(workspaceId, status, signal) {
 async function closeCmuxWorkspace(workspaceId, signal) {
     await runWorkspaceCommand("cmux", ["close-workspace", "--workspace", workspaceId], signal);
 }
+/**
+ * cmux occasionally exits non-zero from `new-workspace` while still having
+ * created the workspace (a known flake where it also lands in the wrong `--cwd`).
+ * The id rides along in the failed command's captured output, so recover it and
+ * close that exact workspace by id — a failed launch must not strand an orphan
+ * tagged with the task's `groundcrew:<taskId>` marker. Closing by the recovered
+ * id needs no `list-workspaces`, so it survives a concurrent list failure that
+ * would defeat re-enumeration. Re-enumeration close is unsafe here anyway; we
+ * hold the precise id cmux returned, so there is no same-named-sibling risk.
+ */
+async function closeWorkspaceLeakedByFailedOpen(error, name, signal) {
+    if (isSignalAborted(signal)) {
+        return;
+    }
+    const workspaceId = extractCmuxOpenIdFromFailure(error);
+    if (workspaceId === undefined) {
+        return;
+    }
+    try {
+        await closeCmuxWorkspace(workspaceId, signal);
+        debug(`cmux new-workspace for ${name} exited non-zero but had created ${workspaceId}; closed the leaked workspace.`);
+    }
+    catch (closeError) {
+        log(`cmux new-workspace for ${name} exited non-zero and left workspace ${workspaceId}; automatic close failed (${errorMessage(closeError)}). Run \`cmux close-workspace --workspace ${workspaceId}\` by hand.`);
+    }
+}
+/**
+ * Recover the created workspace id from a failed `new-workspace`. Parse only
+ * the captured stdout slice of the command error's message (see
+ * `normalizeCommandError`), never the whole message — matching against stderr
+ * or the echoed command line risks grabbing an unrelated `workspace:N` and
+ * closing the wrong workspace. The slice is the same shape the success path
+ * sees, so `extractCmuxOpenId` handles both the `--json` id object and a bare
+ * `workspace:N` ref.
+ */
+function extractCmuxOpenIdFromFailure(error) {
+    const stdout = cmuxStdoutFromFailureMessage(errorMessage(error));
+    return stdout === undefined ? undefined : extractCmuxOpenId(stdout);
+}
+function cmuxStdoutFromFailureMessage(message) {
+    return /\nStdout:\n([\s\S]*?)(?:\nCause: |$)/.exec(message)?.[1];
+}
 function isCmuxSetStatusUnsupported(error) {
     return errorMessage(error).includes('unknown command "set-status"');
 }

package/dist/lib/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/lib/usage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,aAAa,CAAC;AA+BnE,UAAU,eAAe;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,eAK7B,CAAC;AA2GF,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,CAI5D;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA+BvB"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/lib/usage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,aAAa,CAAC;AA+BnE,UAAU,eAAe;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,eAK7B,CAAC;AA8JF,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,CAI5D;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA+BvB"}

package/dist/lib/usage.js

@@ -52,12 +52,30 @@ async function codexbarUsage(definition, signal) {
         "--format",
         "json",
     ];
-    const out = await runCommandAsync("codexbar", arguments_, signal === undefined
+    const options = signal === undefined
         ? { timeoutMs: CODEXBAR_TIMEOUT_MS }
-        : {
-            signal,
-            timeoutMs: CODEXBAR_TIMEOUT_MS,
-        });
+        : { signal, timeoutMs: CODEXBAR_TIMEOUT_MS };
+    let out;
+    try {
+        out = await runCommandAsync("codexbar", arguments_, options);
+    }
+    catch (error) {
+        if (signal?.aborted === true) {
+            throw error;
+        }
+        // codexbar exits non-zero (e.g. status 3 for "no rate limit events yet")
+        // for handled provider conditions while still writing its JSON payload to
+        // stdout. runCommandAsync rejects on the exit code, so recover that payload
+        // and parse it like a success — its per-entry `error` field, not the exit
+        // code, distinguishes "available" from a genuine failure below. A missing
+        // or unparseable payload is a real failure: rethrow so the caller fails
+        // closed.
+        const recovered = recoverStdout(error);
+        if (recovered === undefined) {
+            throw error;
+        }
+        out = recovered;
+    }
     // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- JSON.parse returns any; codexbar's --format json output matches CodexbarEntry[]
     const parsed = JSON.parse(out);
     // codexbar can return multiple entries when a provider has several
@@ -77,8 +95,16 @@ async function codexbarUsage(definition, signal) {
         throw new Error(`codexbar returned no matching entry for provider=${provider}, source=${source}`);
     }
     if (!match.usage) {
-        // codexbar can return `{error: ...}` instead of `{usage: ...}` when
-        // the underlying provider failed (e.g. codex app-server crashed). The
+        // codexbar reports a valid session that simply has no rate-limit events
+        // recorded yet — a fresh, low-traffic, or unlimited-quota account that has
+        // consumed nothing the windows can measure. That is the *least* exhausted
+        // state, not an unreadable one: return empty windows so it normalizes to
+        // `session: null` (available) instead of fail-closing to exhausted.
+        if (isNoRateLimitEvents(match.error)) {
+            return {};
+        }
+        // codexbar can otherwise return `{error: ...}` instead of `{usage: ...}`
+        // when the underlying provider failed (e.g. codex app-server crashed). The
         // outer catch in getUsageByAgent turns this into a fail-closed
         // exhausted entry; surface codexbar's error message so the operator
         // can fix the underlying CLI.
@@ -87,6 +113,33 @@ async function codexbarUsage(definition, signal) {
     }
     return match.usage;
 }
+/**
+ * codexbar signals an authenticated account with zero recorded rate-limit
+ * events via this provider error (e.g. "Found sessions, but no rate limit
+ * events yet."). It means no quota consumed — available — not a probe failure.
+ */
+function isNoRateLimitEvents(error) {
+    return /no rate limit events/i.test(error?.message ?? "");
+}
+/**
+ * runCommandAsync rejects on a non-zero exit, attaching the captured stdout
+ * Buffer to the thrown error's `cause`. codexbar uses non-zero exits for handled
+ * provider conditions while still emitting its JSON payload, so pull that stdout
+ * back out to parse like a success. Returns undefined when no stdout was
+ * captured (a real failure with nothing to parse).
+ */
+function recoverStdout(error) {
+    /* v8 ignore next 3 @preserve -- runCommandAsync always rejects with an Error */
+    if (!(error instanceof Error)) {
+        return undefined;
+    }
+    // A plain command failure with no captured output carries no cause/stdout.
+    if (!(error.cause instanceof Error) || !("stdout" in error.cause)) {
+        return undefined;
+    }
+    const { stdout } = error.cause;
+    return Buffer.isBuffer(stdout) ? stdout.toString("utf8") : undefined;
+}
 function toFraction(value) {
     if (value === undefined || value === null) {
         return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clipboard-health/groundcrew",
-  "version": "4.45.4",
+  "version": "4.45.6",
   "description": "Linear-driven orchestrator that launches AI coding agents in git worktrees, with workspace lifecycle and usage tracking.",
   "keywords": [
     "agent",
@@ -83,7 +83,7 @@
     "@tsconfig/node24": "24.0.4",
     "@tsconfig/strictest": "2.0.8",
     "@types/node": "25.9.4",
-    "@typescript/native-preview": "7.0.0-dev.20260618.1",
+    "@typescript/native-preview": "7.0.0-dev.20260621.1",
     "@vitest/coverage-v8": "4.1.9",
     "cspell": "10.0.1",
     "dependency-cruiser": "17.4.3",