@cmmd-center/forge 0.13.63 → 0.13.64

package/dist/bin.mjs

@@ -23,7 +23,7 @@ import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicK
 import * as FS$1 from "node:fs";
 import fs, { accessSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, mkdtempSync, promises, readFile, readFileSync, readdir, readdirSync, realpathSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import * as NodeOS from "node:os";
-import os, { homedir, networkInterfaces, tmpdir } from "node:os";
+import $U, { homedir, networkInterfaces, tmpdir } from "node:os";
 import * as Path$1 from "node:path";
 import path, { basename, delimiter, dirname, extname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -50573,7 +50573,7 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
 	const min = forceColor || 0;
 	if (env.TERM === "dumb") return min;
 	if (process$1.platform === "win32") {
-		const osRelease = os.release().split(".");
+		const osRelease = $U.release().split(".");
 		if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) return Number(osRelease[2]) >= 14931 ? 3 : 2;
 		return 1;
 	}
@@ -53016,7 +53016,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.processDetector = void 0;
 	const api_1 = (init_esm$1(), __toCommonJS(esm_exports$1));
 	const semconv_1 = require_semconv$1();
-	const os$4 = __require("os");
+	const os$3 = __require("os");
 	/**
 	* ProcessDetector will be used to detect the resources related current process running
 	* and being instrumented from the NodeJS Process module.
@@ -53038,7 +53038,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 			};
 			if (process.argv.length > 1) attributes[semconv_1.ATTR_PROCESS_COMMAND] = process.argv[1];
 			try {
-				const userInfo = os$4.userInfo();
+				const userInfo = os$3.userInfo();
 				attributes[semconv_1.ATTR_PROCESS_OWNER] = userInfo.username;
 			} catch (e) {
 				api_1.diag.debug(`error obtaining process owner: ${e}`);
@@ -65961,7 +65961,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.13.63";
+var version$1 = "0.13.64";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -75844,7 +75844,7 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var fs$6 = __require("fs");
 	var path$5 = __require("path");
 	var url$1 = __require("url");
-	var os$3 = __require("os");
+	var os$2 = __require("os");
 	var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
 	var vars = process.config && process.config.variables || {};
 	var prebuildsOnly = !!process.env.PREBUILDS_ONLY;
@@ -75852,8 +75852,8 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var abi = versions.modules;
 	if (versions.deno || process.isBun) abi = "unsupported";
 	var runtime = isElectron() ? "electron" : isNwjs() ? "node-webkit" : "node";
-	var arch = process.env.npm_config_arch || os$3.arch();
-	var platform = process.env.npm_config_platform || os$3.platform();
+	var arch = process.env.npm_config_arch || os$2.arch();
+	var platform = process.env.npm_config_platform || os$2.platform();
 	var libc = process.env.LIBC || (isMusl(platform) ? "musl" : "glibc");
 	var armv = process.env.ARM_VERSION || (arch === "arm64" ? "8" : vars.arm_version) || "";
 	var uv = (versions.uv || "").split(".")[0];
@@ -88991,6 +88991,28 @@ var GitHubBroker = class {
 			runtimeResource: "status"
 		});
 	}
+	/**
+	* On a "github" scope cache miss, re-requests it once through the existing
+	* CMMD client before the caller refuses (CMMD-Center/forge#3496). CMMD
+	* delivers the grant proactively on thread.create and the kick, so a miss
+	* on a woken runtime is a cache or ticket TTL problem, not a missing
+	* request: this closes the gap where the ticket lands in the broker
+	* authority cache mid-request, and logs the outcome either way so the
+	* cause is visible instead of a silent refusal.
+	*/
+	async requestRuntimeGithubGrant() {
+		const cached = this.runtimeGrantAuthContext("github");
+		if (cached) return cached;
+		const runtimeId = process.env.FORGE_CMMD_RUNTIME_ID?.trim();
+		if (!runtimeId) return null;
+		const result = await this.status({
+			sessionId: AuthSessionId.make(`cmmd-runtime:${runtimeId}`),
+			subject: `runtime:${runtimeId}`
+		});
+		const grant = this.runtimeGrantAuthContext("github");
+		console.warn(`[github-broker] re-requested the github scope grant for runtime ${runtimeId}: ${grant ? "cache populated" : `still missing (broker answered ${result.ok ? "ok" : result.code ?? "no grant"})`}`);
+		return grant;
+	}
 	async workspaceStatus(input) {
 		const cwdValidation = validateCwd(input.cwd);
 		if (cwdValidation) return cwdValidation;
@@ -93606,7 +93628,7 @@ const launchDetached = (launch) => gen(function* () {
 });
 const OpenLive = effect(Open, gen(function* () {
 	const open = yield* tryPromise({
-		try: () => import("./open-yHTUkd2Y.mjs"),
+		try: () => import("./open-2-reBrpv.mjs"),
 		catch: (cause) => new OpenError$1({
 			message: "failed to load browser opener",
 			cause
@@ -97458,6 +97480,235 @@ function serializeProviderCatalog(providers) {
 	return catalog;
 }
 //#endregion
+//#region src/provider/personalClaudeInVm.ts
+/**
+* CMMD writes this marker when it activates a personal Claude subscription
+* inside a running sprite. Activation always happens after boot, so a
+* boot-time env var alone cannot reflect it (FOR-36249).
+*
+* CMMD names the file in the Service env (FORGE_PERSONAL_CLAUDE_MARKER_PATH).
+* Without that, the marker sits directly under FORGE_HOME, which is the same
+* guest home CMMD derives every sprite path from. A server with neither has no
+* sprite home to look in, and a desktop never has a marker, so it reads none.
+*/
+const PERSONAL_CLAUDE_IN_VM_MARKER_NAME = ".forge-personal-claude-in-vm";
+const PERSONAL_CLAUDE_GENERATION_FILE_NAME = ".forge-personal-claude-generation";
+function markerPath(env) {
+	if (env.FORGE_PERSONAL_CLAUDE_MARKER_PATH) return env.FORGE_PERSONAL_CLAUDE_MARKER_PATH;
+	if (env.FORGE_HOME) return join(env.FORGE_HOME, PERSONAL_CLAUDE_IN_VM_MARKER_NAME);
+	return null;
+}
+/**
+* True when this runtime should offer the personal Claude subscription lane.
+*
+* Accepts either signal: the boot-time env var (backward compatible) or the
+* activation marker on disk. Reading the marker at call time lets the provider
+* catalog and the per-turn readiness guard self-heal once CMMD delivers,
+* without a sprite reboot. Callers still verify the credential is non-empty
+* before treating it as usable; this only decides whether the lane is active.
+*/
+function personalClaudeInVmEnabled(env = process.env) {
+	if (env.FORGE_PERSONAL_CLAUDE_IN_VM === "true") return true;
+	const marker = markerPath(env);
+	if (!marker) return false;
+	try {
+		return existsSync(marker);
+	} catch {
+		return false;
+	}
+}
+/** Exported at boot. This is the restart proof CMMD waits on, so it must never read the file. */
+function bootExportedPersonalClaudeGenerationHash(env = process.env) {
+	return env.FORGE_PERSONAL_CLAUDE_GENERATION_HASH?.trim() ?? "";
+}
+/**
+* The sha256 of the Claude credential generation this runtime holds, or "" when
+* it holds none. The readiness guard compares it with the generation CMMD
+* applied. The restart proof must not use it; it uses the boot-exported hash.
+*
+* The boot preload exports FORGE_PERSONAL_CLAUDE_GENERATION_HASH, but only when
+* the marker already exists at boot. Activation in place writes the generation
+* file and touches the marker without setting any env, so an empty variable
+* falls back to that file, hashed the way the preload hashes it. CMMD puts the
+* file beside the marker in the guest home and names no path for it. A marker
+* with no generation file is a legacy runtime, and gets no hash here either.
+*/
+function personalClaudeGenerationHash(env = process.env) {
+	const exported = bootExportedPersonalClaudeGenerationHash(env);
+	if (exported) return exported;
+	const marker = markerPath(env);
+	if (!marker) return "";
+	try {
+		if (!existsSync(marker)) return "";
+		const generation = readFileSync(join(dirname(marker), PERSONAL_CLAUDE_GENERATION_FILE_NAME), "utf8").trim();
+		return generation ? createHash("sha256").update(generation).digest("hex") : "";
+	} catch {
+		return "";
+	}
+}
+//#endregion
+//#region src/provider/providerAuthFailureCopy.ts
+/**
+* Rewrite provider auth failures into an action the user can actually take.
+*
+* The provider SDKs assume they are running under a human at a terminal, so
+* their auth errors name CLI verbs: Claude's is literally
+* `Not logged in · Please run /login`. On Forge Cloud that reaches a browser
+* user who has no terminal, no shell, and no way to run `/login` — the turn
+* dies in ~3 s naming an action that does not exist for them (observed live
+* 2026-08-05).
+*
+* CMMD already writes the right shape for the Codex egress path — "Connect
+* ChatGPT in Settings > Providers, then retry" — which names a destination the
+* user can click. This gives the provider-SDK failures the same treatment.
+*
+* Scope is deliberately narrow. Only messages that clearly identify a
+* *credential* problem are rewritten; everything else passes through verbatim,
+* because a rewritten unknown error loses detail an operator needs and risks
+* telling the user to reconnect an account that was never the problem.
+*/
+/**
+* Signatures of "you have no usable credential", matched case-insensitively.
+*
+* Kept as explicit patterns rather than a broad /auth/i so that genuine
+* mid-turn failures mentioning authorization (a tool hitting a 403 on some
+* unrelated API, say) are not misreported as "your subscription is
+* disconnected".
+*/
+const CREDENTIAL_FAILURE_PATTERNS = [
+	/\bnot logged in\b/i,
+	/\bplease run\s*\/login\b/i,
+	/\brun\s*\/login\b/i,
+	/\blogin required\b/i,
+	/\bnot authenticated\b/i,
+	/\bno credentials? found\b/i,
+	/\binvalid api key\b/i,
+	/\bauthentication_error\b/i
+];
+/**
+* Claude's words for a delivered credential whose refresh chain is dead.
+*
+* Deliberately NOT in CREDENTIAL_FAILURE_PATTERNS. On a runtime whose Claude
+* credential CMMD delivers, this is not "you are signed out" and reconnecting
+* in Settings is not the fix: CMMD's authority rotates the refresh token on
+* every refresh, the snapshot in the guest dies at the next rotation, and the
+* repair is a re-delivery the next send triggers (FOR-36425, CMMD-36441).
+* Anywhere else the credential is the user's own local login, so the CLI text
+* still passes through untouched.
+*/
+const DELIVERED_CREDENTIAL_EXPIRED_PATTERN = /\boauth session expired\b/i;
+const DELIVERED_CLAUDE_CREDENTIAL_EXPIRED_COPY = "The delivered Claude credential expired. CMMD refreshes it on the next send, so retry this turn.";
+/** True when the message is about a missing/unusable credential, not a tool failure. */
+function isProviderCredentialFailure(message) {
+	return CREDENTIAL_FAILURE_PATTERNS.some((pattern) => pattern.test(message));
+}
+/**
+* Map a ProviderKind to the account name a user would recognise.
+*
+* NOTE the literal is `claudeAgent`, not `claude`. This read `"claude"` and so
+* never matched, silently degrading every Claude auth failure to the generic
+* fallback — "Forge Cloud has no **this provider** subscription connected."
+* Same provider-name drift class as the model-mapping fix (#2103/#2105).
+*
+* The names come from the shared PROVIDER_ACCOUNT_NAMES map rather than a local
+* switch: this file's copy was the ONLY correct provider→label mapping in the
+* codebase while four client call sites reimplemented it as binary ternaries.
+* One Record over ProviderKind means a new provider is a compile error in one
+* place instead of five sentences that read wrong in production.
+*
+* Providers that do not sell a personal subscription stay generic on purpose —
+* "Forge Cloud has no Ollama subscription connected" names something that does
+* not exist.
+*/
+function providerLabel(provider) {
+	return supportsPersonalSubscription(provider) ? PROVIDER_ACCOUNT_NAMES[provider] : "this provider";
+}
+/**
+* Return the message to show for a failed turn.
+*
+* `surface` decides the destination: a cloud runtime has no terminal, so it is
+* pointed at Settings; a local/desktop runtime CAN run the CLI login, so its
+* copy still offers that as the concrete fix rather than sending someone to a
+* settings page that is not how they authenticate.
+*/
+function rewriteProviderAuthFailure(input) {
+	const original = input.message ?? "";
+	if (original.length === 0) return {
+		message: original,
+		rewritten: false
+	};
+	if (input.deliveredClaudeCredential === true && DELIVERED_CREDENTIAL_EXPIRED_PATTERN.test(original)) return {
+		message: DELIVERED_CLAUDE_CREDENTIAL_EXPIRED_COPY,
+		rewritten: true
+	};
+	if (!isProviderCredentialFailure(original)) return {
+		message: original,
+		rewritten: false
+	};
+	const who = providerLabel(input.provider);
+	return {
+		message: input.surface === "cloud" ? `Forge Cloud has no ${who} subscription connected for your account. Open Settings > Providers to connect one, then retry this turn.` : `This runtime is not signed in to ${who}. Connect it from Settings > Providers, then retry this turn.`,
+		rewritten: true
+	};
+}
+/**
+* Convenience for call sites that just want the string to show.
+*
+* Exists so adapters do not each re-derive the surface and re-handle the
+* undefined case inline — that inlining is what pushed
+* ClaudeAdapter.handleResultMessage over the cyclomatic gate. Returns
+* `undefined` unchanged so "no error" stays distinguishable from "empty error".
+*/
+function providerAuthFailureMessage(message, provider, env = process.env) {
+	if (message === void 0) return void 0;
+	return rewriteProviderAuthFailure({
+		message,
+		provider,
+		surface: env.FORGE_CMMD_RUNTIME_MODE === "true" ? "cloud" : "local",
+		deliveredClaudeCredential: provider === "claudeAgent" && personalClaudeInVmEnabled(env)
+	}).message;
+}
+//#endregion
+//#region src/orchestration/turnFailureReason.ts
+/**
+* Machine-readable reasons for a turn that failed before it produced any
+* assistant output, replicated to CMMD on the `turn_status` event
+* (CMMD-Center/forge#3496, CMMD-Center/CMMD#5272). Codes match the catalog
+* CMMD renders actions from (CMMD-Center/CMMD#5289): a code CMMD does not
+* recognize degrades to its own generic fallback, so a new Forge failure
+* class is safe to ship before CMMD's catalog knows about it.
+*/
+const GITHUB_GRANT_DETAIL_PATTERN = /exact scoped runtime GitHub grant/i;
+/**
+* The exact-machine broker's own wording (`providerEgressToken.ts`) for all
+* three reasons it could not produce a provider token: an incomplete runtime
+* identity, no owner session bound to the request, or no live broker
+* authority. Every one of those is a real authentication refusal, not a
+* workspace or adapter failure, and the prefix is unique to that code path.
+*/
+const EXACT_MACHINE_BROKER_AUTHORITY_PATTERN = /provider token issuance requires a live exact-machine broker authority/i;
+/**
+* Classifies a `provider.turn.start.failed` activity's detail. This activity
+* kind also covers non-auth causes (a draining runtime, a missing user
+* message, a rejected workspace, a start-timeout cleanup failure), so only
+* text that names a known authentication refusal is reported as one; every
+* other detail degrades to `unspecified_failure` rather than telling CMMD to
+* offer a reconnect action credentials cannot fix.
+*/
+function classifyProviderTurnStartFailureReason(detail) {
+	const message = detail.trim().length > 0 ? detail : "The provider could not start a session for this run.";
+	return {
+		code: GITHUB_GRANT_DETAIL_PATTERN.test(detail) ? "provider_start_refused_github_grant" : EXACT_MACHINE_BROKER_AUTHORITY_PATTERN.test(detail) || isProviderCredentialFailure(detail) ? "provider_start_refused_auth" : "unspecified_failure",
+		message
+	};
+}
+function checkpointTimeoutReason(detail) {
+	return {
+		code: "checkpoint_timeout",
+		message: detail.trim().length > 0 ? detail : "The workspace checkpoint timed out before the turn could start."
+	};
+}
+//#endregion
 //#region src/runtimeReplication/replicaSerializer.ts
 const replicaTurnStatuses = new Set([
 	"pending",
@@ -97798,6 +98049,53 @@ function serializeFailureActivity(activity) {
 		}
 	};
 }
+/** Only the pre-turn baseline capture sets this; a post-turn capture failure
+* never blocked the turn from starting and must not fail it retroactively. */
+function blocksTurnStart(activity) {
+	const payload = activity.payload;
+	if (!payload || typeof payload !== "object") return false;
+	return payload.blocksTurnStart === true;
+}
+function isCheckpointTimeoutDetail(detail) {
+	return /timed out/i.test(detail);
+}
+/**
+* The structured reason a turn never started, when this activity is one of
+* the two known causes (CMMD-Center/forge#3496): the provider refused to
+* start a session, or the pre-turn checkpoint that must precede it timed out.
+* `null` for every other activity, including a checkpoint failure that did
+* not block turn start or was not a timeout.
+*/
+function turnStartFailureReason(activity) {
+	const detail = failureDetail(activity);
+	if (activity.kind === "provider.turn.start.failed") return classifyProviderTurnStartFailureReason(detail ?? "");
+	if (activity.kind === "checkpoint.capture.failed" && blocksTurnStart(activity) && detail !== null && isCheckpointTimeoutDetail(detail)) return checkpointTimeoutReason(detail);
+	return null;
+}
+/**
+* Replicates a turn-start failure as `turn_status: failed` with a structured
+* `reason`, alongside (not instead of) the free-text `error_summary` above:
+* CMMD fails the owning Work Session from this event
+* (CMMD-Center/CMMD#5272/#5286), which `error_summary` alone cannot drive.
+*/
+function serializeTurnStartFailureStatus(activity) {
+	const reason = turnStartFailureReason(activity);
+	if (reason === null) return null;
+	return {
+		sourceSequence: null,
+		event: {
+			eventId: `activity:${activity.id}:turn-status`,
+			occurredAt: canonicalRuntimeEventTimestamp(activity.createdAt),
+			...eventTurn(activity.turnId),
+			kind: "turn_status",
+			status: "failed",
+			reason: {
+				code: reason.code,
+				message: text(reason.message, 2e3) ?? reason.message
+			}
+		}
+	};
+}
 const turnUsageKeys = [
 	"uncachedInputTokens",
 	"cachedInputTokens",
@@ -98146,7 +98444,7 @@ function serializeRuntimeThreadEvents(thread) {
 	});
 	const recordedTurns = serializeRecordedTurns(thread);
 	const textGenerations = serializeTextGenerations(thread);
-	return [
+	const priorEvents = [
 		...messages,
 		...replicaActivities,
 		...toolActivities,
@@ -98155,7 +98453,15 @@ function serializeRuntimeThreadEvents(thread) {
 		...failureActivities,
 		...recordedTurns,
 		...textGenerations
-	].toSorted((left, right) => {
+	];
+	const latestPriorOccurredAt = priorEvents.reduce((latest, entry) => latest === null || entry.event.occurredAt > latest ? entry.event.occurredAt : latest, null);
+	const turnStartFailureStatuses = thread.activities.flatMap((activity) => {
+		const event = serializeTurnStartFailureStatus(activity);
+		if (event === null) return [];
+		if (latestPriorOccurredAt !== null && event.event.occurredAt < latestPriorOccurredAt) return [];
+		return [event];
+	});
+	return [...priorEvents, ...turnStartFailureStatuses].toSorted((left, right) => {
 		if (left.sourceSequence !== null && right.sourceSequence !== null) return left.sourceSequence - right.sourceSequence;
 		if (left.sourceSequence !== null) return -1;
 		if (right.sourceSequence !== null) return 1;
@@ -152071,7 +152377,7 @@ async function prepareWorkspaceRepositoryDependencies(input) {
 	const dependencies = resolveWorkspaceEnvironmentConfig(input.cwd).repositoryDependencies;
 	if (dependencies.length === 0) return [];
 	const broker = input.broker ?? new GitHubBroker();
-	const auth = broker.runtimeGrantAuthContext("github");
+	const auth = broker.runtimeGrantAuthContext("github") ?? await broker.requestRuntimeGithubGrant?.() ?? null;
 	if (auth === null) throw new Error("Repository dependencies require an exact scoped runtime GitHub grant.");
 	const readOrigin = input.readOrigin ?? readOriginFromGit;
 	const resolved = resolveRepositoryDependencies(dependencies, input.cloudProjectsRoot);
@@ -191200,7 +191506,7 @@ var Vce = {
 function Ve() {
 	return Vce;
 }
-var Us = os.homedir(), lk = os.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
+var Us = $U.homedir(), lk = $U.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
 	let t = path.join(Us, "Library");
 	return {
 		data: path.join(t, "Application Support", e),
@@ -201400,12 +201706,12 @@ function qZ(e, t) {
 	}
 	return n;
 }
-var os$2 = "https://code.claude.com/docs/en", kKe = [
+var os$1 = "https://code.claude.com/docs/en", kKe = [
 	{
 		matches: (e) => e.path === "permissions.defaultMode" && e.code === "invalid_value",
 		tip: {
 			suggestion: "Valid modes: \"acceptEdits\" (ask before file changes), \"plan\" (analysis only), \"bypassPermissions\" (auto-accept all), or \"default\" (standard behavior)",
-			docLink: `${os$2}/iam#permission-modes`
+			docLink: `${os$1}/iam#permission-modes`
 		}
 	},
 	{
@@ -201420,7 +201726,7 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("env.") && e.code === "invalid_type",
 		tip: {
 			suggestion: "Environment variables must be strings. Wrap numbers and booleans in quotes. Example: \"DEBUG\": \"true\", \"PORT\": \"3000\"",
-			docLink: `${os$2}/settings#environment-variables`
+			docLink: `${os$1}/settings#environment-variables`
 		}
 	},
 	{
@@ -201431,14 +201737,14 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("hooks.") && e.code === "invalid_key",
 		tip: {
 			suggestion: "Not a recognized hook event. Common events: PreToolUse, PostToolUse, UserPromptSubmit, SessionStart, SessionEnd, Stop. Check spelling and capitalization.",
-			docLink: `${os$2}/hooks`
+			docLink: `${os$1}/hooks`
 		}
 	},
 	{
 		matches: (e) => /\.hooks\.\d+\.command$/.test(e.path) && e.code === "invalid_type" && e.received === "undefined",
 		tip: {
 			suggestion: "Command hooks require `command`. For exec form (no shell), set `command` to the executable and `args` to its arguments: {\"type\": \"command\", \"command\": \"echo\", \"args\": [\"hi\"]}. For shell form, set `command` to the full shell string: {\"type\": \"command\", \"command\": \"echo hi\"}.",
-			docLink: `${os$2}/hooks#exec-form-and-shell-form`
+			docLink: `${os$1}/hooks#exec-form-and-shell-form`
 		}
 	},
 	{
@@ -201453,7 +201759,7 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.code === "unrecognized_keys",
 		tip: {
 			suggestion: "Check for typos or refer to the documentation for valid fields",
-			docLink: `${os$2}/settings`
+			docLink: `${os$1}/settings`
 		}
 	},
 	{
@@ -201468,13 +201774,13 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path === "permissions.additionalDirectories" && e.code === "invalid_type",
 		tip: {
 			suggestion: "Must be an array of directory paths. Example: [\"~/projects\", \"/tmp/workspace\"]. You can also use --add-dir flag or /add-dir command",
-			docLink: `${os$2}/iam#working-directories`
+			docLink: `${os$1}/iam#working-directories`
 		}
 	}
 ], AKe = {
-	permissions: `${os$2}/iam#configuring-permissions`,
-	env: `${os$2}/settings#environment-variables`,
-	hooks: `${os$2}/hooks`
+	permissions: `${os$1}/iam#configuring-permissions`,
+	env: `${os$1}/settings#environment-variables`,
+	hooks: `${os$1}/hooks`
 };
 function GZ(e) {
 	let t = kKe.find((r) => r.matches(e));
@@ -213077,73 +213383,6 @@ function primaryClaudeCredentialMatchesPrepared(env, preparedDirectory) {
 	}
 }
 //#endregion
-//#region src/provider/personalClaudeInVm.ts
-/**
-* CMMD writes this marker when it activates a personal Claude subscription
-* inside a running sprite. Activation always happens after boot, so a
-* boot-time env var alone cannot reflect it (FOR-36249).
-*
-* CMMD names the file in the Service env (FORGE_PERSONAL_CLAUDE_MARKER_PATH).
-* Without that, the marker sits directly under FORGE_HOME, which is the same
-* guest home CMMD derives every sprite path from. A server with neither has no
-* sprite home to look in, and a desktop never has a marker, so it reads none.
-*/
-const PERSONAL_CLAUDE_IN_VM_MARKER_NAME = ".forge-personal-claude-in-vm";
-const PERSONAL_CLAUDE_GENERATION_FILE_NAME = ".forge-personal-claude-generation";
-function markerPath(env) {
-	if (env.FORGE_PERSONAL_CLAUDE_MARKER_PATH) return env.FORGE_PERSONAL_CLAUDE_MARKER_PATH;
-	if (env.FORGE_HOME) return join(env.FORGE_HOME, PERSONAL_CLAUDE_IN_VM_MARKER_NAME);
-	return null;
-}
-/**
-* True when this runtime should offer the personal Claude subscription lane.
-*
-* Accepts either signal: the boot-time env var (backward compatible) or the
-* activation marker on disk. Reading the marker at call time lets the provider
-* catalog and the per-turn readiness guard self-heal once CMMD delivers,
-* without a sprite reboot. Callers still verify the credential is non-empty
-* before treating it as usable; this only decides whether the lane is active.
-*/
-function personalClaudeInVmEnabled(env = process.env) {
-	if (env.FORGE_PERSONAL_CLAUDE_IN_VM === "true") return true;
-	const marker = markerPath(env);
-	if (!marker) return false;
-	try {
-		return existsSync(marker);
-	} catch {
-		return false;
-	}
-}
-/** Exported at boot. This is the restart proof CMMD waits on, so it must never read the file. */
-function bootExportedPersonalClaudeGenerationHash(env = process.env) {
-	return env.FORGE_PERSONAL_CLAUDE_GENERATION_HASH?.trim() ?? "";
-}
-/**
-* The sha256 of the Claude credential generation this runtime holds, or "" when
-* it holds none. The readiness guard compares it with the generation CMMD
-* applied. The restart proof must not use it; it uses the boot-exported hash.
-*
-* The boot preload exports FORGE_PERSONAL_CLAUDE_GENERATION_HASH, but only when
-* the marker already exists at boot. Activation in place writes the generation
-* file and touches the marker without setting any env, so an empty variable
-* falls back to that file, hashed the way the preload hashes it. CMMD puts the
-* file beside the marker in the guest home and names no path for it. A marker
-* with no generation file is a legacy runtime, and gets no hash here either.
-*/
-function personalClaudeGenerationHash(env = process.env) {
-	const exported = bootExportedPersonalClaudeGenerationHash(env);
-	if (exported) return exported;
-	const marker = markerPath(env);
-	if (!marker) return "";
-	try {
-		if (!existsSync(marker)) return "";
-		const generation = readFileSync(join(dirname(marker), PERSONAL_CLAUDE_GENERATION_FILE_NAME), "utf8").trim();
-		return generation ? createHash("sha256").update(generation).digest("hex") : "";
-	} catch {
-		return "";
-	}
-}
-//#endregion
 //#region src/provider/claudeCredentialContainment.ts
 /**
 * Containment for provider credentials inherited by the Claude Agent SDK child.
@@ -215224,128 +215463,6 @@ function createGitHubMcpServer(runBrokeredTool, threadId, settings) {
 	});
 }
 //#endregion
-//#region src/provider/providerAuthFailureCopy.ts
-/**
-* Rewrite provider auth failures into an action the user can actually take.
-*
-* The provider SDKs assume they are running under a human at a terminal, so
-* their auth errors name CLI verbs: Claude's is literally
-* `Not logged in · Please run /login`. On Forge Cloud that reaches a browser
-* user who has no terminal, no shell, and no way to run `/login` — the turn
-* dies in ~3 s naming an action that does not exist for them (observed live
-* 2026-08-05).
-*
-* CMMD already writes the right shape for the Codex egress path — "Connect
-* ChatGPT in Settings > Providers, then retry" — which names a destination the
-* user can click. This gives the provider-SDK failures the same treatment.
-*
-* Scope is deliberately narrow. Only messages that clearly identify a
-* *credential* problem are rewritten; everything else passes through verbatim,
-* because a rewritten unknown error loses detail an operator needs and risks
-* telling the user to reconnect an account that was never the problem.
-*/
-/**
-* Signatures of "you have no usable credential", matched case-insensitively.
-*
-* Kept as explicit patterns rather than a broad /auth/i so that genuine
-* mid-turn failures mentioning authorization (a tool hitting a 403 on some
-* unrelated API, say) are not misreported as "your subscription is
-* disconnected".
-*/
-const CREDENTIAL_FAILURE_PATTERNS = [
-	/\bnot logged in\b/i,
-	/\bplease run\s*\/login\b/i,
-	/\brun\s*\/login\b/i,
-	/\blogin required\b/i,
-	/\bnot authenticated\b/i,
-	/\bno credentials? found\b/i,
-	/\binvalid api key\b/i,
-	/\bauthentication_error\b/i
-];
-/**
-* Claude's words for a delivered credential whose refresh chain is dead.
-*
-* Deliberately NOT in CREDENTIAL_FAILURE_PATTERNS. On a runtime whose Claude
-* credential CMMD delivers, this is not "you are signed out" and reconnecting
-* in Settings is not the fix: CMMD's authority rotates the refresh token on
-* every refresh, the snapshot in the guest dies at the next rotation, and the
-* repair is a re-delivery the next send triggers (FOR-36425, CMMD-36441).
-* Anywhere else the credential is the user's own local login, so the CLI text
-* still passes through untouched.
-*/
-const DELIVERED_CREDENTIAL_EXPIRED_PATTERN = /\boauth session expired\b/i;
-const DELIVERED_CLAUDE_CREDENTIAL_EXPIRED_COPY = "The delivered Claude credential expired. CMMD refreshes it on the next send, so retry this turn.";
-/** True when the message is about a missing/unusable credential, not a tool failure. */
-function isProviderCredentialFailure(message) {
-	return CREDENTIAL_FAILURE_PATTERNS.some((pattern) => pattern.test(message));
-}
-/**
-* Map a ProviderKind to the account name a user would recognise.
-*
-* NOTE the literal is `claudeAgent`, not `claude`. This read `"claude"` and so
-* never matched, silently degrading every Claude auth failure to the generic
-* fallback — "Forge Cloud has no **this provider** subscription connected."
-* Same provider-name drift class as the model-mapping fix (#2103/#2105).
-*
-* The names come from the shared PROVIDER_ACCOUNT_NAMES map rather than a local
-* switch: this file's copy was the ONLY correct provider→label mapping in the
-* codebase while four client call sites reimplemented it as binary ternaries.
-* One Record over ProviderKind means a new provider is a compile error in one
-* place instead of five sentences that read wrong in production.
-*
-* Providers that do not sell a personal subscription stay generic on purpose —
-* "Forge Cloud has no Ollama subscription connected" names something that does
-* not exist.
-*/
-function providerLabel(provider) {
-	return supportsPersonalSubscription(provider) ? PROVIDER_ACCOUNT_NAMES[provider] : "this provider";
-}
-/**
-* Return the message to show for a failed turn.
-*
-* `surface` decides the destination: a cloud runtime has no terminal, so it is
-* pointed at Settings; a local/desktop runtime CAN run the CLI login, so its
-* copy still offers that as the concrete fix rather than sending someone to a
-* settings page that is not how they authenticate.
-*/
-function rewriteProviderAuthFailure(input) {
-	const original = input.message ?? "";
-	if (original.length === 0) return {
-		message: original,
-		rewritten: false
-	};
-	if (input.deliveredClaudeCredential === true && DELIVERED_CREDENTIAL_EXPIRED_PATTERN.test(original)) return {
-		message: DELIVERED_CLAUDE_CREDENTIAL_EXPIRED_COPY,
-		rewritten: true
-	};
-	if (!isProviderCredentialFailure(original)) return {
-		message: original,
-		rewritten: false
-	};
-	const who = providerLabel(input.provider);
-	return {
-		message: input.surface === "cloud" ? `Forge Cloud has no ${who} subscription connected for your account. Open Settings > Providers to connect one, then retry this turn.` : `This runtime is not signed in to ${who}. Connect it from Settings > Providers, then retry this turn.`,
-		rewritten: true
-	};
-}
-/**
-* Convenience for call sites that just want the string to show.
-*
-* Exists so adapters do not each re-derive the surface and re-handle the
-* undefined case inline — that inlining is what pushed
-* ClaudeAdapter.handleResultMessage over the cyclomatic gate. Returns
-* `undefined` unchanged so "no error" stays distinguishable from "empty error".
-*/
-function providerAuthFailureMessage(message, provider, env = process.env) {
-	if (message === void 0) return void 0;
-	return rewriteProviderAuthFailure({
-		message,
-		provider,
-		surface: env.FORGE_CMMD_RUNTIME_MODE === "true" ? "cloud" : "local",
-		deliveredClaudeCredential: provider === "claudeAgent" && personalClaudeInVmEnabled(env)
-	}).message;
-}
-//#endregion
 //#region src/provider/missingWorkspaceCopy.ts
 /**
 * Refuse a turn whose checkout folder is gone, and say so.
@@ -233674,6 +233791,8 @@ const CheckpointDiffQueryLive = effect(CheckpointDiffQuery, gen(function* () {
 * @module CheckpointStoreLive
 */
 const CHECKPOINT_PATH_OUTPUT_MAX_BYTES = 16 * 1024 * 1024;
+const CheckpointCaptureTimeoutConfig = number$2("FORGE_CHECKPOINT_CAPTURE_TIMEOUT_MS").pipe(withDefault$3(6e4));
+const EFFECT_TIMER_MAX_MS = 2147483647;
 function parseNullSeparatedPaths(output) {
 	return output.split("\0").filter((entry) => entry.length > 0);
 }
@@ -233681,7 +233800,7 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 	const fs = yield* FileSystem;
 	const path = yield* Path$2;
 	const git = yield* GitCore;
-	const resolveHeadCommit = (cwd) => git.execute({
+	const resolveHeadCommit = (cwd, timeoutMs) => git.execute({
 		operation: "CheckpointStore.resolveHeadCommit",
 		cwd,
 		args: [
@@ -233690,7 +233809,8 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 			"--quiet",
 			"HEAD^{commit}"
 		],
-		allowNonZeroExit: true
+		allowNonZeroExit: true,
+		...timeoutMs !== void 0 ? { timeoutMs } : {}
 	}).pipe(map$3((result) => {
 		if (result.code !== 0) return null;
 		const commit = result.stdout.trim();
@@ -233729,7 +233849,9 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 	}).pipe(map$3((result) => result.code === 0 && result.stdout.trim() === "true"), catch_(() => succeed(false)));
 	const captureCheckpoint = fn$1("captureCheckpoint")(function* (input) {
 		const operation = "CheckpointStore.captureCheckpoint";
-		const headCommit = yield* resolveHeadCommit(input.cwd);
+		const captureTimeoutMs = yield* CheckpointCaptureTimeoutConfig.asEffect().pipe(orDie);
+		if (!Number.isFinite(captureTimeoutMs) || captureTimeoutMs <= 0 || captureTimeoutMs > EFFECT_TIMER_MAX_MS) return yield* die$1(/* @__PURE__ */ new Error(`FORGE_CHECKPOINT_CAPTURE_TIMEOUT_MS must be a finite number greater than zero and at most ${EFFECT_TIMER_MAX_MS}, got ${captureTimeoutMs}.`));
+		const headCommit = yield* resolveHeadCommit(input.cwd, captureTimeoutMs);
 		const [trackedPathResult, untrackedPathResult] = yield* all([git.execute({
 			operation,
 			cwd: input.cwd,
@@ -233746,7 +233868,8 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 				"-z",
 				"--"
 			],
-			maxOutputBytes: CHECKPOINT_PATH_OUTPUT_MAX_BYTES
+			maxOutputBytes: CHECKPOINT_PATH_OUTPUT_MAX_BYTES,
+			timeoutMs: captureTimeoutMs
 		}), git.execute({
 			operation,
 			cwd: input.cwd,
@@ -233757,7 +233880,8 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 				"-z",
 				"--"
 			],
-			maxOutputBytes: CHECKPOINT_PATH_OUTPUT_MAX_BYTES
+			maxOutputBytes: CHECKPOINT_PATH_OUTPUT_MAX_BYTES,
+			timeoutMs: captureTimeoutMs
 		})], { concurrency: 2 });
 		const changedPaths = [...new Set([...parseNullSeparatedPaths(trackedPathResult.stdout), ...parseNullSeparatedPaths(untrackedPathResult.stdout)])];
 		if (headCommit && changedPaths.length === 0) {
@@ -233768,7 +233892,8 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 					"update-ref",
 					input.checkpointRef,
 					headCommit
-				]
+				],
+				timeoutMs: captureTimeoutMs
 			});
 			return;
 		}
@@ -233786,13 +233911,15 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 				operation,
 				cwd: input.cwd,
 				args: ["read-tree", headCommit],
-				env: commitEnv
+				env: commitEnv,
+				timeoutMs: captureTimeoutMs
 			});
 			else yield* git.execute({
 				operation,
 				cwd: input.cwd,
 				args: ["read-tree", "--empty"],
-				env: commitEnv
+				env: commitEnv,
+				timeoutMs: captureTimeoutMs
 			});
 			if (changedPaths.length > 0) yield* git.execute({
 				operation,
@@ -233805,13 +233932,15 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 					"--pathspec-file-nul"
 				],
 				stdin: changedPaths.map((changedPath) => `${changedPath}\0`).join(""),
-				env: commitEnv
+				env: commitEnv,
+				timeoutMs: captureTimeoutMs
 			});
 			const treeOid = (yield* git.execute({
 				operation,
 				cwd: input.cwd,
 				args: ["write-tree"],
-				env: commitEnv
+				env: commitEnv,
+				timeoutMs: captureTimeoutMs
 			})).stdout.trim();
 			if (treeOid.length === 0) return yield* new GitCommandError({
 				operation,
@@ -233829,7 +233958,8 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 					"-m",
 					message
 				],
-				env: commitEnv
+				env: commitEnv,
+				timeoutMs: captureTimeoutMs
 			})).stdout.trim();
 			if (commitOid.length === 0) return yield* new GitCommandError({
 				operation,
@@ -233844,7 +233974,8 @@ const CheckpointStoreLive = effect(CheckpointStore, gen(function* () {
 					"update-ref",
 					input.checkpointRef,
 					commitOid
-				]
+				],
+				timeoutMs: captureTimeoutMs
 			});
 		}), (tempDir) => fs.remove(tempDir, { recursive: true })).pipe(catchTags({ PlatformError: (error) => fail(new CheckpointInvariantError({
 			operation: "CheckpointStore.captureCheckpoint",
@@ -269601,7 +269732,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 	var dgram = __require("dgram");
 	var thunky = require_thunky();
 	var events = __require("events");
-	var os$1 = __require("os");
+	var os = __require("os");
 	var noop = function() {};
 	module.exports = function(opts) {
 		if (!opts) opts = {};
@@ -269732,14 +269863,14 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return that;
 	};
 	function defaultInterface() {
-		var networks = os$1.networkInterfaces();
+		var networks = os.networkInterfaces();
 		var names = Object.keys(networks);
 		for (var i = 0; i < names.length; i++) {
 			var net = networks[names[i]];
 			for (var j = 0; j < net.length; j++) {
 				var iface = net[j];
 				if (isIPv4(iface.family) && !iface.internal) {
-					if (os$1.platform() === "darwin" && names[i] === "en0") return iface.address;
+					if (os.platform() === "darwin" && names[i] === "en0") return iface.address;
 					return "0.0.0.0";
 				}
 			}
@@ -269747,7 +269878,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return "127.0.0.1";
 	}
 	function allInterfaces() {
-		var networks = os$1.networkInterfaces();
+		var networks = os.networkInterfaces();
 		var names = Object.keys(networks);
 		var res = [];
 		for (var i = 0; i < names.length; i++) {
@@ -291680,7 +291811,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 				summary: "Agent turn blocked",
 				detail: "Forge runtime is updating after the current turn. New agent turns are paused until the runtime finishes draining.",
 				turnId: null,
-				createdAt: input.createdAt
+				createdAt: (/* @__PURE__ */ new Date()).toISOString()
 			});
 			return;
 		}
@@ -291914,7 +292045,7 @@ const ProviderCommandReactorLive = effect(ProviderCommandReactor, gen(function*
 				summary: "Agent turn blocked",
 				detail: workspaceError,
 				turnId: null,
-				createdAt: event.payload.createdAt
+				createdAt: (/* @__PURE__ */ new Date()).toISOString()
 			});
 			return;
 		}
@@ -293005,7 +293136,10 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 			tone: "error",
 			kind: "checkpoint.capture.failed",
 			summary: "Checkpoint capture failed",
-			payload: { detail: input.detail },
+			payload: {
+				detail: input.detail,
+				...input.blocksTurnStart ? { blocksTurnStart: true } : {}
+			},
 			turnId: input.turnId,
 			createdAt: input.createdAt
 		},
@@ -293291,7 +293425,13 @@ const CheckpointReactorLive = effect(CheckpointReactor, gen(function* () {
 		yield* checkpointStore.captureCheckpoint({
 			cwd: checkpointCwd,
 			checkpointRef: baselineCheckpointRef
-		});
+		}).pipe(catch_((error) => appendCaptureFailureActivity({
+			threadId,
+			turnId: null,
+			detail: error.message,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			blocksTurnStart: true
+		}).pipe(catch_(() => void_$1))));
 		yield* receiptBus.publish({
 			type: "checkpoint.baseline.captured",
 			threadId,
@@ -297651,7 +297791,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "63701057dccde6ea0a120ebb0a1e1ae8c461b056";
+	return "589c5f6a52f5cd82c598399da0ece13acd43d50d";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -322247,7 +322387,7 @@ const connectLoginCommand = make$34("login", {
 			})).json();
 		},
 		openBrowser: async (url) => {
-			const open = (await import("./open-yHTUkd2Y.mjs")).default;
+			const open = (await import("./open-2-reBrpv.mjs")).default;
 			await open(url);
 			return true;
 		},