@cluesmith/codev 3.3.2 → 3.3.4

package/dist/lib/agent-env.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Environment sanitation for agent processes Tower spawns (Issue #1219).
+ *
+ * Claude Code plants session markers — `CLAUDECODE`, `CLAUDE_CODE_CHILD_SESSION`,
+ * `CLAUDE_CODE_SESSION_ID`, … — into every subprocess it creates, so a nested
+ * `claude` can tell it was launched from inside another session and turn
+ * transcript saving off. Tower is a daemon, but it inherits the environment of
+ * whoever started it, and starting Tower from inside a Claude session is routine
+ * (`afx tower start`, `pnpm -w run local-install`, an architect recovering from a
+ * crash). The markers then cascade:
+ *
+ *     claude session → Bash → afx tower start → Tower → shellper → agent claude
+ *
+ * Every agent Tower spawns believes it is a nested child session, and a session
+ * with transcript saving off **cannot be resumed** — which quietly guts the
+ * crash-recovery story (#1145, #1149) and only shows up at recovery time, when
+ * it is too late.
+ *
+ * ## Why this strips named families rather than the whole namespace
+ *
+ * The first version of this module denied `CLAUDE_CODE_*` wholesale and kept a
+ * short allowlist, on the theory that a *missed marker* is worse than a missed
+ * config var. The CMAP review (codex) rejected that, and checking the shipped
+ * `claude` binary settled it: it reads **594** distinct `CLAUDE_CODE_*`
+ * variables, and they are overwhelmingly configuration — provider selection
+ * (`USE_BEDROCK`, `USE_VERTEX`, `USE_FOUNDRY`, `USE_MANTLE`,
+ * `USE_ANTHROPIC_AWS`, `USE_GATEWAY`), the matching `SKIP_*_AUTH` switches,
+ * credentials (`OAUTH_TOKEN`, `OAUTH_REFRESH_TOKEN`, `OAUTH_SCOPES`,
+ * `CLIENT_CERT`), routing (`API_BASE_URL`, `PROXY_URL`, `HTTPS_PROXY`), and
+ * policy (`MANAGED_SETTINGS_PATH`). No hand-maintained allowlist survives that,
+ * and dropping any of them is not the harmless failure the original reasoning
+ * assumed — it silently routes an agent at the wrong provider, or strips the
+ * subscription credential and reroutes CMAP to the metered API (the #985 scar).
+ *
+ * So the rule is: **strip what is per-session identity, keep everything else.**
+ * Identity is a small, stable, nameable set; configuration is not.
+ *
+ * The cost of that direction is real and worth stating plainly: a marker added
+ * upstream that this list has not caught up with will pass through, and nothing
+ * here will notice. `codev doctor`'s Tower Environment check is not a backstop
+ * for that case — it classifies with this same list, so it is blind to exactly
+ * what it would need to catch. Claude Code's own "transcript saving is off"
+ * banner is the only real signal, and it is how #1219 was found in the first
+ * place. Adding the new name here is the fix when that happens.
+ */
+/**
+ * Whole families of per-session identity. Every variable Claude Code ships
+ * under these prefixes describes *this* session — its id, its socket, its
+ * bridge — and inheriting one into a different agent is always wrong.
+ */
+export declare const CLAUDE_SESSION_MARKER_PREFIXES: readonly string[];
+/**
+ * Individually named session markers that do not fall under a prefix family.
+ *
+ * `CLAUDECODE` was already being deleted ad hoc at each Tower spawn site; it
+ * lives here now so there is one list rather than six copies of one `delete`.
+ * `CHILD_SESSION`, `ENTRYPOINT` and `EXECPATH` are the nesting-detection triple
+ * that #1219 is actually about.
+ *
+ * `CLAUDE_PID` sits outside the `CLAUDE_CODE_` namespace but belongs here on the
+ * merits: the shipped binary builds its child environment as
+ * `{CLAUDECODE:"1", CLAUDE_CODE_SESSION_ID:…, CLAUDE_CODE_CHILD_SESSION:"1",
+ * CLAUDE_PID:String(process.pid)}` — one object literal, so it is identity by
+ * construction, not by namespace. Nothing reads it for nesting detection; its
+ * only reader is the `pkill` guard in the Bash tool's shell prelude, which
+ * refuses a pattern matching the Claude CLI's own pid. An inherited stale value
+ * points that guard at a dead or unrelated pid, which is its own small bug.
+ *
+ * `CLAUDE_EFFORT` is planted by that same function and is deliberately NOT here:
+ * being planted by Claude Code is not the test — it carries a *setting* (the
+ * effort level), not an identity, so it is configuration and passes through.
+ */
+export declare const CLAUDE_SESSION_MARKER_NAMES: readonly string[];
+/** Whether `name` is a Claude Code session marker that must not reach an agent. */
+export declare function isClaudeSessionMarker(name: string): boolean;
+/**
+ * Copy `env` with Claude Code session markers removed.
+ *
+ * Returns a plain `Record<string, string>` — `undefined`-valued entries (which
+ * `NodeJS.ProcessEnv` permits and node-pty rejects) are dropped — so callers can
+ * hand the result straight to a spawn call.
+ */
+export declare function sanitizeAgentEnv(env?: NodeJS.ProcessEnv | Record<string, string>): Record<string, string>;
+/** The session markers present in `env`, for diagnostics (`codev doctor`). */
+export declare function findClaudeSessionMarkers(env?: NodeJS.ProcessEnv | Record<string, string>): string[];
+//# sourceMappingURL=agent-env.d.ts.map

package/dist/lib/agent-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-env.d.ts","sourceRoot":"","sources":["../../src/lib/agent-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAS3D,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAcxD,CAAC;AAIF,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG3D;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAe,GAC5D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAED,8EAA8E;AAC9E,wBAAgB,wBAAwB,CACtC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAe,GAC5D,MAAM,EAAE,CAEV"}

package/dist/lib/agent-env.js

@@ -0,0 +1,126 @@
+/**
+ * Environment sanitation for agent processes Tower spawns (Issue #1219).
+ *
+ * Claude Code plants session markers — `CLAUDECODE`, `CLAUDE_CODE_CHILD_SESSION`,
+ * `CLAUDE_CODE_SESSION_ID`, … — into every subprocess it creates, so a nested
+ * `claude` can tell it was launched from inside another session and turn
+ * transcript saving off. Tower is a daemon, but it inherits the environment of
+ * whoever started it, and starting Tower from inside a Claude session is routine
+ * (`afx tower start`, `pnpm -w run local-install`, an architect recovering from a
+ * crash). The markers then cascade:
+ *
+ *     claude session → Bash → afx tower start → Tower → shellper → agent claude
+ *
+ * Every agent Tower spawns believes it is a nested child session, and a session
+ * with transcript saving off **cannot be resumed** — which quietly guts the
+ * crash-recovery story (#1145, #1149) and only shows up at recovery time, when
+ * it is too late.
+ *
+ * ## Why this strips named families rather than the whole namespace
+ *
+ * The first version of this module denied `CLAUDE_CODE_*` wholesale and kept a
+ * short allowlist, on the theory that a *missed marker* is worse than a missed
+ * config var. The CMAP review (codex) rejected that, and checking the shipped
+ * `claude` binary settled it: it reads **594** distinct `CLAUDE_CODE_*`
+ * variables, and they are overwhelmingly configuration — provider selection
+ * (`USE_BEDROCK`, `USE_VERTEX`, `USE_FOUNDRY`, `USE_MANTLE`,
+ * `USE_ANTHROPIC_AWS`, `USE_GATEWAY`), the matching `SKIP_*_AUTH` switches,
+ * credentials (`OAUTH_TOKEN`, `OAUTH_REFRESH_TOKEN`, `OAUTH_SCOPES`,
+ * `CLIENT_CERT`), routing (`API_BASE_URL`, `PROXY_URL`, `HTTPS_PROXY`), and
+ * policy (`MANAGED_SETTINGS_PATH`). No hand-maintained allowlist survives that,
+ * and dropping any of them is not the harmless failure the original reasoning
+ * assumed — it silently routes an agent at the wrong provider, or strips the
+ * subscription credential and reroutes CMAP to the metered API (the #985 scar).
+ *
+ * So the rule is: **strip what is per-session identity, keep everything else.**
+ * Identity is a small, stable, nameable set; configuration is not.
+ *
+ * The cost of that direction is real and worth stating plainly: a marker added
+ * upstream that this list has not caught up with will pass through, and nothing
+ * here will notice. `codev doctor`'s Tower Environment check is not a backstop
+ * for that case — it classifies with this same list, so it is blind to exactly
+ * what it would need to catch. Claude Code's own "transcript saving is off"
+ * banner is the only real signal, and it is how #1219 was found in the first
+ * place. Adding the new name here is the fix when that happens.
+ */
+/**
+ * Whole families of per-session identity. Every variable Claude Code ships
+ * under these prefixes describes *this* session — its id, its socket, its
+ * bridge — and inheriting one into a different agent is always wrong.
+ */
+export const CLAUDE_SESSION_MARKER_PREFIXES = [
+    // SESSION_ID / _KIND / _LOG / _NAME / _ORIGIN / _ACCESS_TOKEN
+    'CLAUDE_CODE_SESSION_',
+    // REMOTE_SESSION_ID / _ORIGIN / _UUID
+    'CLAUDE_CODE_REMOTE_SESSION_',
+    // BRIDGE_SESSION_ID / _PROMPT_SHA256 / _OWNER_* / _MCP_CARRIER
+    'CLAUDE_CODE_BRIDGE_',
+    // MESSAGING_SOCKET / _TOKEN — a live socket path and its bearer token
+    'CLAUDE_CODE_MESSAGING_',
+];
+/**
+ * Individually named session markers that do not fall under a prefix family.
+ *
+ * `CLAUDECODE` was already being deleted ad hoc at each Tower spawn site; it
+ * lives here now so there is one list rather than six copies of one `delete`.
+ * `CHILD_SESSION`, `ENTRYPOINT` and `EXECPATH` are the nesting-detection triple
+ * that #1219 is actually about.
+ *
+ * `CLAUDE_PID` sits outside the `CLAUDE_CODE_` namespace but belongs here on the
+ * merits: the shipped binary builds its child environment as
+ * `{CLAUDECODE:"1", CLAUDE_CODE_SESSION_ID:…, CLAUDE_CODE_CHILD_SESSION:"1",
+ * CLAUDE_PID:String(process.pid)}` — one object literal, so it is identity by
+ * construction, not by namespace. Nothing reads it for nesting detection; its
+ * only reader is the `pkill` guard in the Bash tool's shell prelude, which
+ * refuses a pattern matching the Claude CLI's own pid. An inherited stale value
+ * points that guard at a dead or unrelated pid, which is its own small bug.
+ *
+ * `CLAUDE_EFFORT` is planted by that same function and is deliberately NOT here:
+ * being planted by Claude Code is not the test — it carries a *setting* (the
+ * effort level), not an identity, so it is configuration and passes through.
+ */
+export const CLAUDE_SESSION_MARKER_NAMES = [
+    'CLAUDECODE',
+    'CLAUDE_CODE_CHILD_SESSION',
+    // Not in the CLAUDE_CODE_ namespace, but planted by the same object literal
+    // as CHILD_SESSION and set to `String(process.pid)` — see the note below.
+    'CLAUDE_PID',
+    'CLAUDE_CODE_ENTRYPOINT',
+    'CLAUDE_CODE_EXECPATH',
+    'CLAUDE_CODE_SSE_PORT',
+    'CLAUDE_CODE_CLOUD_SESSION_ID',
+    'CLAUDE_CODE_RESUME_FROM_SESSION',
+    'CLAUDE_CODE_SPAWN_TIMESTAMP_MS',
+    'CLAUDE_CODE_TRIGGER_ID',
+    'CLAUDE_CODE_WORKER_EPOCH',
+];
+const MARKER_NAMES = new Set(CLAUDE_SESSION_MARKER_NAMES);
+/** Whether `name` is a Claude Code session marker that must not reach an agent. */
+export function isClaudeSessionMarker(name) {
+    if (MARKER_NAMES.has(name))
+        return true;
+    return CLAUDE_SESSION_MARKER_PREFIXES.some((prefix) => name.startsWith(prefix));
+}
+/**
+ * Copy `env` with Claude Code session markers removed.
+ *
+ * Returns a plain `Record<string, string>` — `undefined`-valued entries (which
+ * `NodeJS.ProcessEnv` permits and node-pty rejects) are dropped — so callers can
+ * hand the result straight to a spawn call.
+ */
+export function sanitizeAgentEnv(env = process.env) {
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (value === undefined)
+            continue;
+        if (isClaudeSessionMarker(key))
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+/** The session markers present in `env`, for diagnostics (`codev doctor`). */
+export function findClaudeSessionMarkers(env = process.env) {
+    return Object.keys(env).filter(isClaudeSessionMarker).sort();
+}
+//# sourceMappingURL=agent-env.js.map

package/dist/lib/agent-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-env.js","sourceRoot":"","sources":["../../src/lib/agent-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,8DAA8D;IAC9D,sBAAsB;IACtB,sCAAsC;IACtC,6BAA6B;IAC7B,+DAA+D;IAC/D,qBAAqB;IACrB,sEAAsE;IACtE,wBAAwB;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,YAAY;IACZ,2BAA2B;IAC3B,4EAA4E;IAC5E,0EAA0E;IAC1E,YAAY;IACZ,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,8BAA8B;IAC9B,iCAAiC;IACjC,gCAAgC;IAChC,wBAAwB;IACxB,0BAA0B;CAC3B,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAE1D,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkD,OAAO,CAAC,GAAG;IAE7D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,qBAAqB,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CACtC,MAAkD,OAAO,CAAC,GAAG;IAE7D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/lib/forge-contracts.d.ts

@@ -24,6 +24,46 @@ export interface IssueViewResult {
      * forge-neutral (a forge script that doesn't emit it degrades gracefully).
      */
     url?: string;
+    /**
+     * Login/handle of the user who opened the issue, when the forge concept
+     * supplies it: GitHub `author.login`, GitLab `author.username`, Gitea
+     * `user.login`, Linear `creator.displayName`. Optional so the contract
+     * stays forge-neutral — a forge/script that omits it degrades gracefully
+     * (the consumer drops the "opened by" attribution).
+     */
+    author?: {
+        login: string;
+    };
+    /**
+     * ISO 8601 creation timestamp, when the forge concept supplies it. Optional
+     * for forge-neutral degradation, same as `url`.
+     */
+    createdAt?: string;
+    /**
+     * Assignee logins/handles, when the forge concept supplies them: absent when
+     * the forge doesn't expose them, empty when the issue is unassigned. Optional
+     * per the forge-neutral degradation contract.
+     */
+    assignees?: Array<{
+        login: string;
+    }>;
+    /**
+     * Issue labels, when the forge concept supplies them: absent when the forge
+     * doesn't expose labels, empty when the issue has none. Optional per the
+     * forge-neutral degradation contract.
+     */
+    labels?: Array<{
+        name: string;
+    }>;
+    /**
+     * The issue's milestone, when set. GitHub emits a literal `null` when the
+     * issue has no milestone (hence `| null`, not merely optional); consumers
+     * guard on `milestone?.title`, so both absent and null render nothing.
+     * Optional/nullable per the forge-neutral degradation contract.
+     */
+    milestone?: {
+        title: string;
+    } | null;
     comments: Array<{
         body: string;
         createdAt: string;
@@ -74,13 +114,17 @@ export interface PrListItem {
         login: string;
     };
     /**
-     * Logins of users requested as reviewers. Emitted by every forge's `pr-list`
-     * script (GitHub flattens gh's reviewer objects to logins; GitLab/Gitea emit
-     * `[]` as they expose no GitHub-equivalent per-user review-request list).
-     * Consumed by the VSCode PR sidebar to bucket "review-requested" PRs.
+     * Logins of users requested as reviewers. Every preset populates it for real:
+     * GitHub flattens gh's reviewer objects to logins, GitLab maps glab's
+     * `.reviewers[].username`, and Gitea maps the REST `requested_reviewers[]`
+     * (team reviewers carry no login and are dropped). Consumed by the VSCode PR
+     * sidebar to bucket "review-requested" PRs.
      */
     reviewRequests: string[];
-    /** Whether the PR is a draft. GitLab/Gitea emit `false` (not exposed). */
+    /**
+     * Whether the PR is a draft. Every preset reports it for real — GitLab from
+     * the merge request's `draft`/WIP flag, Gitea from the REST `draft` flag.
+     */
     isDraft: boolean;
 }
 /** Output of the `pr-list` concept command. */
@@ -102,6 +146,16 @@ export type RecentlyMergedResult = MergedPrItem[];
 export interface PrSearchItem {
     number: number;
     headRefName: string;
+    /**
+     * PR/MR state, normalized to the GitHub convention: `OPEN` | `MERGED` |
+     * `CLOSED`. Because `pr-search` runs `--state all` (#759), consumers that
+     * only want open PRs must filter on this — the spawn collision guard ignores
+     * non-open results (#1637). Optional: a stale project-local override of
+     * `pr-search.sh` may predate this field (and the gitlab script leaves it
+     * blank when glab omits it), so consumers treat an absent or empty value as
+     * "unknown" rather than assuming a state.
+     */
+    state?: string;
 }
 /** Output of the `pr-search` concept command. */
 export type PrSearchResult = PrSearchItem[];
@@ -127,6 +181,23 @@ export interface PrViewResult {
     additions: number;
     deletions: number;
 }
+/**
+ * Output of the `pr-create` concept command.
+ *
+ * Inputs are environment variables, like every other concept:
+ * `CODEV_PR_TITLE` (required), `CODEV_PR_BODY` (required — set it to `''` for
+ * an empty body; an *absent* one is rejected rather than silently posting a
+ * bodyless PR), and the optional `CODEV_PR_BASE`, `CODEV_PR_HEAD`,
+ * `CODEV_PR_REPO`, `CODEV_PR_DRAFT`. The gitea script also reads the optional
+ * `CODEV_PR_LOGIN` (tea's `--login`, for multi-login hosts). A failed creation
+ * exits non-zero rather than emitting JSON.
+ */
+export interface PrCreateResult {
+    /** The created PR's number (`iid` on GitLab, `index` on Gitea). */
+    number: number;
+    /** The created PR's **browser/web** URL — never an API endpoint. */
+    url: string;
+}
 /** Output of the `pr-diff` concept command: raw diff text, not JSON. */
 /** Output of the `pr-merge` concept command: exit code only, no JSON. */
 /** Output of the `user-identity` concept command: plain string (username). */

package/dist/lib/forge-contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forge-contracts.d.ts","sourceRoot":"","sources":["../../src/lib/forge-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CAAC;CACJ;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,kDAAkD;AAClD,MAAM,MAAM,eAAe,GAAG,aAAa,EAAE,CAAC;AAE9C,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,aAAa,EAAE,CAAC;AAEnD,8EAA8E;AAO9E,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B;;;;;OAKG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;AAExC,yEAAyE;AAGzE,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,YAAY,EAAE,CAAC;AAElD,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,iDAAiD;AACjD,MAAM,MAAM,cAAc,GAAG,YAAY,EAAE,CAAC;AAE5C,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wEAAwE;AAGxE,yEAAyE;AAOzE,8EAA8E;AAG9E,2EAA2E;AAI3E,8EAA8E;AAQ9E,mEAAmE"}
+{"version":3,"file":"forge-contracts.d.ts","sourceRoot":"","sources":["../../src/lib/forge-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrC;;;;OAIG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrC,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CAAC;CACJ;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,kDAAkD;AAClD,MAAM,MAAM,eAAe,GAAG,aAAa,EAAE,CAAC;AAE9C,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,aAAa,EAAE,CAAC;AAEnD,8EAA8E;AAO9E,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;AAExC,yEAAyE;AAGzE,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,YAAY,EAAE,CAAC;AAElD,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,iDAAiD;AACjD,MAAM,MAAM,cAAc,GAAG,YAAY,EAAE,CAAC;AAE5C,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wEAAwE;AAGxE,yEAAyE;AAOzE,8EAA8E;AAG9E,2EAA2E;AAI3E,8EAA8E;AAQ9E,mEAAmE"}

package/dist/lib/forge-contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"forge-contracts.js","sourceRoot":"","sources":["../../src/lib/forge-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;AAiIH,wEAAwE;AACxE,uDAAuD;AAEvD,yEAAyE;AACzE,8DAA8D;AAE9D,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,8EAA8E;AAC9E,+CAA+C;AAE/C,2EAA2E;AAC3E,mEAAmE;AACnE,8CAA8C;AAE9C,8EAA8E;AAC9E,0EAA0E;AAC1E,yCAAyC;AAEzC,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,mEAAmE;AACnE,6DAA6D"}
+{"version":3,"file":"forge-contracts.js","sourceRoot":"","sources":["../../src/lib/forge-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;AAiMH,wEAAwE;AACxE,uDAAuD;AAEvD,yEAAyE;AACzE,8DAA8D;AAE9D,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,8EAA8E;AAC9E,+CAA+C;AAE/C,2EAA2E;AAC3E,mEAAmE;AACnE,8CAA8C;AAE9C,8EAA8E;AAC9E,0EAA0E;AAC1E,yCAAyC;AAEzC,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,mEAAmE;AACnE,6DAA6D"}

package/dist/lib/forge-rate-limit.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Per-backend rate-limit suspension for forge fetches (#1645).
+ *
+ * When a backend (`gh`, `glab`, …) reports that its budget is exhausted, every
+ * fetch that would spend the same budget is suspended until the reset instant.
+ * Importing this module never shells out: the optional reset probe is injected
+ * by the caller that wants it (Tower's overview cache).
+ */
+export declare function isRateLimitError(text: string): boolean;
+/** The budget a concept spends on its backend, e.g. `gh` or `gh:rest`. */
+export declare function budgetKeyFor(backend: string, concept: string): string;
+/** Result of a reset probe. `remaining === 0` makes the reported reset credible. */
+export interface RateLimitProbeResult {
+    remaining: number;
+    /** Reset instant, epoch milliseconds. */
+    resetAt: number;
+}
+export type RateLimitProbe = (backend: string, cwd: string) => Promise<RateLimitProbeResult | null>;
+export declare const SUSPENSION_FALLBACK_MS: number;
+export declare class ForgeRateLimiter {
+    private readonly probe?;
+    private readonly suspensions;
+    constructor(probe?: RateLimitProbe | undefined);
+    /** Read-only: never allocates, so polling it every 2.5 s costs nothing. */
+    isSuspended(budget: string, now: number): boolean;
+    /** Reset instant (epoch ms) of an active suspension, else null. */
+    resetAt(budget: string, now: number): number | null;
+    /**
+     * Record a failure. Only a rate-limit error suspends, and only the failing
+     * budget: a REST failure never suspends the GraphQL bucket. A fresh
+     * suspension runs the reset probe at most once; a credible probe result
+     * (budget confirmed gone) sets the true reset instant, even if that is
+     * earlier than the fallback window.
+     */
+    noteFailure(budget: string, backend: string, cwd: string, errorText: string, now: number): boolean;
+    /**
+     * A success clears a suspension only if it was dispatched strictly after the
+     * suspension began: a batch dispatched in one tick shares a millisecond with
+     * the failure that suspended it, and its successes are not evidence of recovery.
+     */
+    noteSuccess(budget: string, dispatchedAt: number): void;
+    /** Honour a credible probe: the true reset instant wins over the fallback in both directions. */
+    private applyProbe;
+}
+//# sourceMappingURL=forge-rate-limit.d.ts.map

package/dist/lib/forge-rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-rate-limit.d.ts","sourceRoot":"","sources":["../../src/lib/forge-rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAYD,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrE;AAED,oFAAoF;AACpF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;AAOpG,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAElD,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAFnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;gBAEhC,KAAK,CAAC,EAAE,cAAc,YAAA;IAEnD,2EAA2E;IAC3E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAKjD,mEAAmE;IACnE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKnD;;;;;;OAMG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAgBlG;;;;OAIG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAKvD,iGAAiG;IACjG,OAAO,CAAC,UAAU;CAKnB"}

package/dist/lib/forge-rate-limit.js

@@ -0,0 +1,89 @@
+/**
+ * Per-backend rate-limit suspension for forge fetches (#1645).
+ *
+ * When a backend (`gh`, `glab`, …) reports that its budget is exhausted, every
+ * fetch that would spend the same budget is suspended until the reset instant.
+ * Importing this module never shells out: the optional reset probe is injected
+ * by the caller that wants it (Tower's overview cache).
+ */
+/** GitHub's GraphQL and REST primary-limit messages, and gh's error type. */
+const RATE_LIMIT_PATTERN = /rate limit (?:already )?exceeded|RATE_LIMITED|graphql_rate_limit|secondary rate limit/i;
+export function isRateLimitError(text) {
+    return RATE_LIMIT_PATTERN.test(text);
+}
+/**
+ * Concepts that spend a budget other than the one the backend's list concepts
+ * spend. This is a fact about the backend: on `gh`, `user-identity` is a REST
+ * call outside the GraphQL bucket; on Linear every concept is GraphQL on
+ * Linear's own budget, so nothing is split out there.
+ */
+const OFF_BUDGET_CONCEPTS = {
+    gh: new Set(['user-identity', 'auth-status']),
+};
+/** The budget a concept spends on its backend, e.g. `gh` or `gh:rest`. */
+export function budgetKeyFor(backend, concept) {
+    const key = backend.toLowerCase();
+    return OFF_BUDGET_CONCEPTS[key]?.has(concept) ? `${key}:rest` : key;
+}
+export const SUSPENSION_FALLBACK_MS = 15 * 60_000;
+export class ForgeRateLimiter {
+    probe;
+    suspensions = new Map();
+    constructor(probe) {
+        this.probe = probe;
+    }
+    /** Read-only: never allocates, so polling it every 2.5 s costs nothing. */
+    isSuspended(budget, now) {
+        const s = this.suspensions.get(budget);
+        return s !== undefined && now < s.until;
+    }
+    /** Reset instant (epoch ms) of an active suspension, else null. */
+    resetAt(budget, now) {
+        const s = this.suspensions.get(budget);
+        return s !== undefined && now < s.until ? s.until : null;
+    }
+    /**
+     * Record a failure. Only a rate-limit error suspends, and only the failing
+     * budget: a REST failure never suspends the GraphQL bucket. A fresh
+     * suspension runs the reset probe at most once; a credible probe result
+     * (budget confirmed gone) sets the true reset instant, even if that is
+     * earlier than the fallback window.
+     */
+    noteFailure(budget, backend, cwd, errorText, now) {
+        if (!isRateLimitError(errorText))
+            return false;
+        const existing = this.suspensions.get(budget);
+        if (existing && now < existing.until)
+            return true;
+        const suspension = { startedAt: now, until: now + SUSPENSION_FALLBACK_MS };
+        this.suspensions.set(budget, suspension);
+        const probe = this.probe;
+        if (probe && backend === 'gh') {
+            Promise.resolve()
+                .then(() => probe(backend, cwd))
+                .then(result => this.applyProbe(budget, suspension, result))
+                .catch(() => { });
+        }
+        return true;
+    }
+    /**
+     * A success clears a suspension only if it was dispatched strictly after the
+     * suspension began: a batch dispatched in one tick shares a millisecond with
+     * the failure that suspended it, and its successes are not evidence of recovery.
+     */
+    noteSuccess(budget, dispatchedAt) {
+        const s = this.suspensions.get(budget);
+        if (s && dispatchedAt > s.startedAt)
+            this.suspensions.delete(budget);
+    }
+    /** Honour a credible probe: the true reset instant wins over the fallback in both directions. */
+    applyProbe(budget, suspension, result) {
+        if (!result || result.remaining > 0)
+            return;
+        if (this.suspensions.get(budget) !== suspension)
+            return;
+        if (result.resetAt > suspension.startedAt)
+            suspension.until = result.resetAt;
+    }
+}
+//# sourceMappingURL=forge-rate-limit.js.map

package/dist/lib/forge-rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-rate-limit.js","sourceRoot":"","sources":["../../src/lib/forge-rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,6EAA6E;AAC7E,MAAM,kBAAkB,GAAG,wFAAwF,CAAC;AAEpH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,mBAAmB,GAAwC;IAC/D,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;CAC9C,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAe;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACtE,CAAC;AAgBD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAElD,MAAM,OAAO,gBAAgB;IAGE;IAFZ,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE7D,YAA6B,KAAsB;QAAtB,UAAK,GAAL,KAAK,CAAiB;IAAG,CAAC;IAEvD,2EAA2E;IAC3E,WAAW,CAAC,MAAc,EAAE,GAAW;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAC,MAAc,EAAE,GAAW;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,MAAc,EAAE,OAAe,EAAE,GAAW,EAAE,SAAiB,EAAE,GAAW;QACtF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,UAAU,GAAe,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,sBAAsB,EAAE,CAAC;QACvF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,KAAK,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;iBAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;iBAC3D,KAAK,CAAC,GAAG,EAAE,GAAqD,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,MAAc,EAAE,YAAoB;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,iGAAiG;IACzF,UAAU,CAAC,MAAc,EAAE,UAAsB,EAAE,MAAmC;QAC5F,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;YAAE,OAAO;QAC5C,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU;YAAE,OAAO;QACxD,IAAI,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,SAAS;YAAE,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/E,CAAC;CACF"}

package/dist/lib/forge.d.ts

@@ -39,7 +39,7 @@ export interface ConceptResolution {
     executable: string | null;
 }
 /**
- * Resolve all 15 concepts with their source and executable.
+ * Resolve every known concept with its source and executable.
  * Used by `codev doctor` for full concept reporting.
  */
 export declare function resolveAllConcepts(forgeConfig?: ForgeConfig | null): ConceptResolution[];
@@ -73,6 +73,34 @@ export declare function isConceptDisabled(concept: string, forgeConfig?: ForgeCo
  * @returns Parsed JSON from stdout, raw string for non-JSON concepts, or null on failure
  */
 export declare function executeForgeCommand(concept: string, env?: Record<string, string>, options?: ForgeCommandOptions): Promise<unknown | null>;
+/** Why a forge command produced no data (#1645). `null` on the result means it exited 0. */
+export interface ForgeCommandError {
+    message: string;
+    stderr: string;
+    /** Process exit code; null when the command was disabled, timed out, or config failed to load. */
+    exitCode: number | null;
+}
+export interface ForgeCommandResult {
+    data: unknown | null;
+    error: ForgeCommandError | null;
+}
+/**
+ * Like `executeForgeCommand`, but keeps the failure (#1645). Callers that must
+ * tell "rate limited" from "CLI missing" need stderr and the exit code; the
+ * plain variant collapses every failure to `null`. Never throws — a malformed
+ * `.codev/config.json` is reported as an error, not raised into Tower's
+ * `unhandledRejection` handler.
+ */
+export declare function executeForgeCommandDetailed(concept: string, env?: Record<string, string>, options?: ForgeCommandOptions): Promise<ForgeCommandResult>;
+/**
+ * The backend a concept actually spends budget on (#1645): the resolved
+ * executable's lowercased basename (`gh`, whether configured as `gh` or
+ * `/usr/local/bin/gh`), never the configured provider — a Linear workspace's
+ * `pr-list` falls through to the GitHub script and spends GitHub's budget.
+ * Generic transports and custom script paths key by provider instead.
+ * Returns null when the concept is disabled or unknown.
+ */
+export declare function resolveForgeBackend(concept: string, options?: ForgeCommandOptions): string | null;
 /**
  * Execute a forge concept command synchronously.
  *

package/dist/lib/forge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forge.d.ts","sourceRoot":"","sources":["../../src/lib/forge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA8BH,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,uEAAuE;IACvE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6ED,gCAAgC;AAChC,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED,+CAA+C;AAC/C,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,iBAAiB,EAAE,CA4BxF;AAmDD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAGzE;AAUD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAC/B,MAAM,GAAG,IAAI,CAgBf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAC/B,OAAO,CAGT;AAMD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAuBzB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,GAAG,IAAI,CAyBhB;AAoDD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,WAAW,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,iBAAiB,GAAG,eAAe,GAAG,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA2BtH"}
+{"version":3,"file":"forge.d.ts","sourceRoot":"","sources":["../../src/lib/forge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA8BH,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,uEAAuE;IACvE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAiFD,gCAAgC;AAChC,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED,+CAA+C;AAC/C,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,iBAAiB,EAAE,CA4BxF;AAqED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAGzE;AAUD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAC/B,MAAM,GAAG,IAAI,CAgBf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAC/B,OAAO,CAGT;AAMD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAEzB;AAED,4FAA4F;AAC5F,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,kGAAkG;IAClG,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA2B7B;AASD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAgBjG;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,GAAG,IAAI,CAyBhB;AAoDD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,WAAW,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,iBAAiB,GAAG,eAAe,GAAG,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA2BtH"}