@controlvector/cv-agent 1.11.1 → 1.13.0

package/dist/commands/agent-git.d.ts

@@ -53,6 +53,7 @@ export declare function buildCompletionPayload(exitCode: number, preState: PreTa
 export declare function verifyGitRemote(cwd: string, task: {
     owner?: string;
     repo?: string;
+    clone_url?: string;
 }, gitHost: string): {
     remoteName: string;
     remoteUrl: string;

package/dist/commands/agent-git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-git.d.ts","sourceRoot":"","sources":["../../src/commands/agent-git.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,KAAK,EAAE;QACL,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,kEAAkE;AAClE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM/D;AAMD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAO7D;AAMD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,aAAa,CAmGvF;AAMD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,aAAa,EACxB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAW,GAClB,qBAAqB,CAsDvB;AAMD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACvC,OAAO,EAAE,MAAM,GACd;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmClD"}
+{"version":3,"file":"agent-git.d.ts","sourceRoot":"","sources":["../../src/commands/agent-git.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,KAAK,EAAE;QACL,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,kEAAkE;AAClE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM/D;AAMD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAO7D;AAMD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,aAAa,CAmGvF;AAMD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,aAAa,EACxB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAW,GAClB,qBAAqB,CAsDvB;AAMD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,EAAE,MAAM,GACd;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAyDlD"}

package/dist/commands/agent-git.js

@@ -186,9 +186,32 @@ function buildCompletionPayload(exitCode, preState, postState, startTime, output
 // Git remote verification
 // ============================================================================
 function verifyGitRemote(cwd, task, gitHost) {
-    if (!task.owner || !task.repo)
+    // Determine the canonical remote URL. Prefer the authoritative clone_url from
+    // the task payload: cv-hub already knows the correct URL for its own
+    // deployment topology (a subdomain git host like git.hub.controlvector.io, or
+    // single-host path-based git like govhub.controlvector.io/git). Only fall back
+    // to deriving the URL from owner/repo + the api.->git. host swap when clone_url
+    // is absent, for backward compatibility with an older cv-hub. The URL is used
+    // verbatim and stays token-free; auth is handled elsewhere.
+    let expectedRemote;
+    if (task.clone_url) {
+        expectedRemote = task.clone_url;
+    }
+    else if (task.owner && task.repo) {
+        expectedRemote = `https://${gitHost}/${task.owner}/${task.repo}.git`;
+    }
+    else {
         return null;
-    const expectedRemote = `https://${gitHost}/${task.owner}/${task.repo}.git`;
+    }
+    // Host used to decide whether an existing origin already points at our git
+    // host (correct it in place) versus an unrelated remote (leave it alone; add
+    // a separate cv-hub remote). Derived from the chosen URL so it stays correct
+    // when clone_url targets a different host than the api.->git. derivation.
+    let canonicalHost = gitHost;
+    try {
+        canonicalHost = new URL(expectedRemote).host;
+    }
+    catch { /* unparseable URL: keep the derived gitHost */ }
     const currentRemote = gitExec('git remote get-url origin', cwd);
     if (!currentRemote) {
         try {
@@ -200,7 +223,7 @@ function verifyGitRemote(cwd, task, gitHost) {
     if (currentRemote === expectedRemote) {
         return { remoteName: 'origin', remoteUrl: expectedRemote };
     }
-    if (currentRemote.includes(gitHost)) {
+    if (currentRemote.includes(canonicalHost)) {
         try {
             (0, node_child_process_1.execSync)(`git remote set-url origin ${expectedRemote}`, { cwd, timeout: 5000 });
         }

package/dist/commands/agent-git.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-git.js","sourceRoot":"","sources":["../../src/commands/agent-git.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAyDH,0BAMC;AAMD,kDAOC;AAMD,oDAmGC;AAMD,wDA4DC;AAMD,0CAuCC;AAlSD,2DAA8C;AAkD9C,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,kEAAkE;AAClE,SAAgB,OAAO,CAAC,GAAW,EAAE,GAAW;IAC9C,IAAI,CAAC;QACH,OAAO,IAAA,6BAAQ,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC;QAC3C,MAAM,EAAE,OAAO,CAAC,iCAAiC,EAAE,GAAG,CAAC;QACvD,MAAM,EAAE,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC;QACjD,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,SAAgB,oBAAoB,CAAC,GAAW,EAAE,QAAsB;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;IAE/D,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAa,EAAE,CAAC;IAElC,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CACxB,0BAA0B,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,EACxD,GAAG,CACJ,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAExB,IAAI,MAAM,KAAK,GAAG;oBAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACzC,IAAI,MAAM,KAAK,GAAG;oBAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACjD,IAAI,MAAM,KAAK,GAAG;oBAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBAChD,IAAI,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,IAAI,SAAS,CAAC,CAAC,CAAC;wBAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CACxB,wBAAwB,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,EACtD,GAAG,CACJ,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpD,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CACvB,qBAAqB,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,EACnD,GAAG,CACJ,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAExB,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,GAAG;oBAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBAC5D,IAAI,MAAM,KAAK,GAAG;oBAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACjD,IAAI,MAAM,KAAK,GAAG;oBAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAgC,YAAY,CAAC;IAC3D,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,MAAM,CAAC;QACpB,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,OAAO,CAAC,wBAAwB,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,UAAU,GAAG,SAAS,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,UAAU;QACV,aAAa;QACb,YAAY;QACZ,UAAU;QACV,YAAY;QACZ,cAAc;QACd,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,QAAsB,EACtB,SAAwB,EACxB,SAAiB,EACjB,SAAiB,EAAE;IAEnB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,WAAW,IAAI,EAAE;QACnC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,KAAK,WAAW,GAAG,EAAE,GAAG;QACzD,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;IAEtB,MAAM,YAAY,GAChB,SAAS,CAAC,UAAU,CAAC,MAAM;QAC3B,SAAS,CAAC,aAAa,CAAC,MAAM;QAC9B,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC;IAEhC,MAAM,KAAK,GAAa,CAAC,gBAAgB,WAAW,GAAG,CAAC,CAAC;IAEzD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,GAAG,YAAY,sBAAsB,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,YAAY,IAAI,CACzF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,MAAM;QACN,MAAM,EAAE;YACN,GAAG,EAAE,SAAS,CAAC,OAAO;YACtB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,UAAU;YAC5B,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,QAAQ,EAAE,SAAS,CAAC,cAAc;SACnC;QACD,KAAK,EAAE;YACL,KAAK,EAAE,SAAS,CAAC,UAAU;YAC3B,QAAQ,EAAE,SAAS,CAAC,aAAa;YACjC,OAAO,EAAE,SAAS,CAAC,YAAY;YAC/B,aAAa,EAAE,YAAY;SAC5B;QACD,KAAK,EAAE;YACL,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,aAAa,EAAE,SAAS,CAAC,YAAY;YACrC,gBAAgB,EAAE,WAAW;SAC9B;QACD,SAAS,EAAE,QAAQ;KACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,SAAgB,eAAe,CAC7B,GAAW,EACX,IAAuC,EACvC,OAAe;IAEf,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,cAAc,GAAG,WAAW,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC;IAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAEhE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,yBAAyB,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,6BAA6B,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,yBAAyB,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;SAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,6BAA6B,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"agent-git.js","sourceRoot":"","sources":["../../src/commands/agent-git.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAyDH,0BAMC;AAMD,kDAOC;AAMD,oDAmGC;AAMD,wDA4DC;AAMD,0CA6DC;AAxTD,2DAA8C;AAkD9C,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,kEAAkE;AAClE,SAAgB,OAAO,CAAC,GAAW,EAAE,GAAW;IAC9C,IAAI,CAAC;QACH,OAAO,IAAA,6BAAQ,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC;QAC3C,MAAM,EAAE,OAAO,CAAC,iCAAiC,EAAE,GAAG,CAAC;QACvD,MAAM,EAAE,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC;QACjD,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,SAAgB,oBAAoB,CAAC,GAAW,EAAE,QAAsB;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;IAE/D,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAa,EAAE,CAAC;IAElC,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CACxB,0BAA0B,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,EACxD,GAAG,CACJ,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAExB,IAAI,MAAM,KAAK,GAAG;oBAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACzC,IAAI,MAAM,KAAK,GAAG;oBAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACjD,IAAI,MAAM,KAAK,GAAG;oBAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBAChD,IAAI,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,IAAI,SAAS,CAAC,CAAC,CAAC;wBAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CACxB,wBAAwB,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,EACtD,GAAG,CACJ,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpD,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CACvB,qBAAqB,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,EACnD,GAAG,CACJ,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAExB,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,GAAG;oBAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBAC5D,IAAI,MAAM,KAAK,GAAG;oBAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACjD,IAAI,MAAM,KAAK,GAAG;oBAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAgC,YAAY,CAAC;IAC3D,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,MAAM,CAAC;QACpB,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,OAAO,CAAC,wBAAwB,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,UAAU,GAAG,SAAS,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,UAAU;QACV,aAAa;QACb,YAAY;QACZ,UAAU;QACV,YAAY;QACZ,cAAc;QACd,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,QAAsB,EACtB,SAAwB,EACxB,SAAiB,EACjB,SAAiB,EAAE;IAEnB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,WAAW,IAAI,EAAE;QACnC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,KAAK,WAAW,GAAG,EAAE,GAAG;QACzD,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;IAEtB,MAAM,YAAY,GAChB,SAAS,CAAC,UAAU,CAAC,MAAM;QAC3B,SAAS,CAAC,aAAa,CAAC,MAAM;QAC9B,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC;IAEhC,MAAM,KAAK,GAAa,CAAC,gBAAgB,WAAW,GAAG,CAAC,CAAC;IAEzD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,GAAG,YAAY,sBAAsB,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,YAAY,IAAI,CACzF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,MAAM;QACN,MAAM,EAAE;YACN,GAAG,EAAE,SAAS,CAAC,OAAO;YACtB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,UAAU;YAC5B,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,QAAQ,EAAE,SAAS,CAAC,cAAc;SACnC;QACD,KAAK,EAAE;YACL,KAAK,EAAE,SAAS,CAAC,UAAU;YAC3B,QAAQ,EAAE,SAAS,CAAC,aAAa;YACjC,OAAO,EAAE,SAAS,CAAC,YAAY;YAC/B,aAAa,EAAE,YAAY;SAC5B;QACD,KAAK,EAAE;YACL,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,aAAa,EAAE,SAAS,CAAC,YAAY;YACrC,gBAAgB,EAAE,WAAW;SAC9B;QACD,SAAS,EAAE,QAAQ;KACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,SAAgB,eAAe,CAC7B,GAAW,EACX,IAA2D,EAC3D,OAAe;IAEf,8EAA8E;IAC9E,qEAAqE;IACrE,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,8EAA8E;IAC9E,4DAA4D;IAC5D,IAAI,cAAsB,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;SAAM,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,cAAc,GAAG,WAAW,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,aAAa,GAAG,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;IAE3D,MAAM,aAAa,GAAG,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAEhE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,yBAAyB,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,6BAA6B,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,yBAAyB,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;SAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAA,6BAAQ,EAAC,6BAA6B,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAC7D,CAAC"}

package/dist/commands/agent.d.ts

@@ -16,9 +16,55 @@
  *   cva agent --poll-interval 10       # Check every 10 seconds
  */
 import { Command } from 'commander';
+import { type CVHubCredentials } from '../utils/credentials.js';
+import { type MeterResolution } from '../utils/meter.js';
+import { type LoadedProfile } from '../utils/profile.js';
 export type AuthStatus = 'authenticated' | 'expired' | 'not_configured' | 'api_key_fallback';
 /** Patterns that indicate Claude Code auth failure */
 export declare const AUTH_ERROR_PATTERNS: string[];
+interface AgentState {
+    executorId: string;
+    currentTaskId: string | null;
+    completedCount: number;
+    failedCount: number;
+    lastPoll: number;
+    lastTaskEnd: number;
+    running: boolean;
+    authStatus: AuthStatus;
+    machineName: string;
+    meter: MeterResolution;
+    denyStreak: number;
+    denyCache: Map<string, number>;
+    profile?: LoadedProfile;
+}
+interface Task {
+    id: string;
+    title: string;
+    description?: string;
+    task_type: string;
+    priority: string;
+    status: string;
+    input?: {
+        description?: string;
+        context?: string;
+        instructions?: string[];
+        constraints?: string[];
+    };
+    repository_id?: string;
+    owner?: string;
+    repo?: string;
+    /**
+     * Authoritative clone URL supplied by cv-hub for this task's repository.
+     * Correct for whatever deployment topology cv-hub runs (subdomain git host
+     * or single-host path-based git), so it is preferred over re-deriving the
+     * host from the API URL. Token-free; auth is handled separately.
+     */
+    clone_url?: string;
+    branch?: string;
+    file_paths?: string[];
+    timeout_at?: string;
+    metadata?: Record<string, unknown>;
+}
 /**
  * Check if a string contains Claude Code auth error patterns.
  * Exported for testing.
@@ -45,5 +91,8 @@ export declare function getClaudeEnv(): Promise<{
  * Build an actionable auth failure message with machine name and fix instructions.
  */
 export declare function buildAuthFailureMessage(errorString: string, machineName: string, hasApiKeyFallback: boolean): string;
+export declare function reportBudgetDenied(task: Task, state: AgentState, creds: CVHubCredentials, reason: string, reasonCode: string): Promise<void>;
+export declare function budgetGate(task: Task, state: AgentState, creds: CVHubCredentials): Promise<boolean>;
 export declare function agentCommand(): Command;
+export {};
 //# sourceMappingURL=agent.d.ts.map

package/dist/commands/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuDpC,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,SAAS,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;AAE7F,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,UAQ/B,CAAC;AAmDF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7D;AAED;;;;GAIG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBvF;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC,CAkB9F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,OAAO,GACzB,MAAM,CAQR;AAo0CD,wBAAgB,YAAY,IAAI,OAAO,CAuBtC"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AAwCjC,OAAO,EAEoC,KAAK,eAAe,EAC9D,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAQ7B,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,SAAS,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;AAE7F,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,UAQ/B,CAAC;AAoBF,UAAU,UAAU;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IAEpB,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE/B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACpG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7D;AAED;;;;GAIG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBvF;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC,CAkB9F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,OAAO,GACzB,MAAM,CAQR;AAukCD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GACzF,OAAO,CAAC,IAAI,CAAC,CAWf;AAKD,wBAAsB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyCzG;AA4WD,wBAAgB,YAAY,IAAI,OAAO,CAwBtC"}

package/dist/commands/agent.js

@@ -58,6 +58,8 @@ exports.containsAuthError = containsAuthError;
 exports.checkClaudeAuth = checkClaudeAuth;
 exports.getClaudeEnv = getClaudeEnv;
 exports.buildAuthFailureMessage = buildAuthFailureMessage;
+exports.reportBudgetDenied = reportBudgetDenied;
+exports.budgetGate = budgetGate;
 exports.agentCommand = agentCommand;
 const commander_1 = require("commander");
 const node_child_process_1 = require("node:child_process");
@@ -74,6 +76,8 @@ const retry_js_1 = require("../utils/retry.js");
 const config_js_1 = require("../utils/config.js");
 const git_safety_js_1 = require("./git-safety.js");
 const deploy_manifest_js_1 = require("./deploy-manifest.js");
+const meter_js_1 = require("../utils/meter.js");
+const profile_js_1 = require("../utils/profile.js");
 /** Patterns that indicate Claude Code auth failure */
 exports.AUTH_ERROR_PATTERNS = [
     'Not logged in',
@@ -165,8 +169,12 @@ function buildAuthFailureMessage(errorString, machineName, hasApiKeyFallback) {
 // ============================================================================
 // Claude Code launcher
 // ============================================================================
-function buildClaudePrompt(task) {
+function buildClaudePrompt(task, profile) {
     let prompt = '';
+    // Profile system prompt (P14) leads, so it frames every task this session runs.
+    if (profile) {
+        prompt += `${profile.systemPrompt.trim()}\n\n---\n\n`;
+    }
     prompt += `You are executing a task dispatched via CV-Hub.\n\n`;
     prompt += `## Task: ${task.title}\n`;
     prompt += `Task ID: ${task.id}\n`;
@@ -296,6 +304,7 @@ const MAX_OUTPUT_FINAL_BYTES = 50 * 1024;
 /** Interval (in bytes) at which to post progress events with output chunks */
 const OUTPUT_PROGRESS_INTERVAL = 4096;
 async function launchAutoApproveMode(prompt, options) {
+    const allowedTools = options.allowedTools ?? ALLOWED_TOOLS;
     // Use a stable session ID so we can --continue if a question needs follow-up
     const sessionId = options.taskId
         ? options.taskId.replace(/-/g, '').slice(0, 32).padEnd(32, '0')
@@ -308,8 +317,8 @@ async function launchAutoApproveMode(prompt, options) {
     const runOnce = (inputPrompt, isContinue) => {
         return new Promise((resolve, reject) => {
             const args = isContinue
-                ? ['-p', inputPrompt, '--continue', '--allowedTools', ...ALLOWED_TOOLS]
-                : ['-p', inputPrompt, '--allowedTools', ...ALLOWED_TOOLS];
+                ? ['-p', inputPrompt, '--continue', '--allowedTools', ...allowedTools]
+                : ['-p', inputPrompt, '--allowedTools', ...allowedTools];
             if (sessionId && !isContinue) {
                 args.push('--session-id', sessionId);
             }
@@ -573,6 +582,21 @@ async function launchRelayMode(prompt, options) {
                 if (match) {
                     const promptText = match[0];
                     stdoutBuffer = ''; // Reset buffer after match
+                    // Profile hard gate (P14): a denied tool is refused AT THE RELAY (answer no
+                    // and skip the human relay entirely), not merely omitted from the prompt.
+                    if (options.profile) {
+                        const decision = (0, profile_js_1.relayPermissionDecision)(options.profile.manifest, promptText);
+                        if (decision.action === 'deny') {
+                            child.stdin?.write('n\n');
+                            console.log(chalk_1.default.red(`  [relay] Profile '${options.profile.manifest.name}' denies ${decision.tool}: ${decision.reason}`));
+                            (0, api_js_1.sendTaskLog)(options.creds, options.executorId, options.taskId, 'warn', `Tool denied by profile: ${decision.tool}`, { tool: decision.tool, reason: decision.reason, profile: options.profile.manifest.name }).catch(() => { });
+                            (0, api_js_1.postTaskEvent)(options.creds, options.taskId, {
+                                event_type: 'tool_denied_by_profile',
+                                content: { tool: decision.tool, reason: decision.reason, prompt_text: promptText },
+                            }).catch(() => { });
+                            break;
+                        }
+                    }
                     try {
                         await (0, api_js_1.sendTaskLog)(options.creds, options.executorId, options.taskId, 'info', `Permission prompt: ${promptText}`, { prompt_text: promptText });
                         const { prompt_id } = await (0, api_js_1.createTaskPrompt)(options.creds, options.executorId, options.taskId, promptText, 'approval', ['y', 'n']);
@@ -736,6 +760,22 @@ async function handleSelfUpdate(task, state, creds) {
 // ============================================================================
 async function runAgent(options) {
     const creds = await (0, credentials_js_1.readCredentials)();
+    // Load the agent profile first (P14): a bad profile must fail before we register an
+    // executor or poll for work. The profile is a hard gate for the whole session.
+    let loadedProfile;
+    if (options.profile) {
+        const hostVersion = typeof __CVA_VERSION__ !== 'undefined' ? __CVA_VERSION__ : '0.0.0';
+        try {
+            loadedProfile = (0, profile_js_1.loadProfile)(options.profile, { hostVersion });
+        }
+        catch (err) {
+            console.log();
+            console.log(chalk_1.default.red('Profile failed to load:') + ' ' + err.message);
+            console.log();
+            process.exit(1);
+        }
+        console.log(chalk_1.default.cyan(`   Profile:  ${loadedProfile.manifest.name} ${loadedProfile.manifest.version} (${loadedProfile.manifest.task_types.length} task types, ${loadedProfile.manifest.tools.allow.length} tools allowed)`));
+    }
     if (!creds.CV_HUB_API) {
         creds.CV_HUB_API = 'https://api.hub.controlvector.io';
     }
@@ -946,6 +986,10 @@ async function runAgent(options) {
     // Priority: CLI flags > workspace .cva/agent.json > global config
     const wsConfig = await (0, config_js_1.readWorkspaceConfig)(workingDir);
     const globalConfig = await (0, config_js_1.readConfig)();
+    // Inject meter config into spawn env so cv-code can attribute tokens to this executor.
+    // task_id is added per-task inside executeTask since it changes each run.
+    const meter = (0, meter_js_1.resolveMeterConfig)(globalConfig, process.env);
+    (0, meter_js_1.applyMeterEnv)(claudeEnv, meter);
     const role = (options.role || wsConfig.role || globalConfig.role || 'development');
     const dispatchGuard = (options.dispatchGuard || wsConfig.dispatch_guard || globalConfig.dispatch_guard || 'open');
     const tags = (options.tags?.split(',') || wsConfig.tags || globalConfig.tags)?.map((t) => t.trim()).filter(Boolean);
@@ -1004,6 +1048,8 @@ async function runAgent(options) {
     console.log(`   Dir:      ${chalk_1.default.gray(workingDir)}`);
     console.log(`   Polling:  every ${options.pollInterval}s`);
     console.log(`   Mode:     ${chalk_1.default.cyan(mode)}`);
+    if (meter.url)
+        console.log(`   Meter:    ${chalk_1.default.gray(meter.url)}${meter.enforce !== 'off' ? chalk_1.default.yellow(` (enforce: ${meter.enforce})`) : ''}`);
     console.log(`   Ctrl+C to stop`);
     console.log();
     console.log(chalk_1.default.cyan('Listening for tasks...'));
@@ -1018,7 +1064,15 @@ async function runAgent(options) {
         running: true,
         authStatus: currentAuthStatus,
         machineName,
+        meter,
+        denyStreak: 0,
+        denyCache: new Map(),
+        profile: loadedProfile,
     };
+    // If enforcement is enabled we need a meter URL to call; warn loudly if misconfigured.
+    if (meter.enforce !== 'off' && !meter.url) {
+        console.log(chalk_1.default.yellow('!') + ` meter_enforce='${meter.enforce}' but no meter_url set — budget gate inert.`);
+    }
     installSignalHandlers(() => state, async () => {
         state.running = false;
         await (0, api_js_1.markOffline)(creds, state.executorId);
@@ -1035,7 +1089,7 @@ async function runAgent(options) {
                 }
                 else {
                     // Still expired — heartbeat but don't poll for tasks
-                    (0, api_js_1.sendHeartbeat)(creds, state.executorId, undefined, undefined, state.authStatus).catch(() => { });
+                    (0, api_js_1.sendHeartbeat)(creds, state.executorId, undefined, undefined, state.authStatus, state.meter.enforce).catch(() => { });
                     await new Promise(r => setTimeout(r, pollInterval));
                     continue;
                 }
@@ -1052,8 +1106,62 @@ async function runAgent(options) {
         catch (err) {
             console.log(`\n${chalk_1.default.red('!')} Error: ${err.message}`);
         }
-        await new Promise(r => setTimeout(r, pollInterval));
+        // Exponential backoff after consecutive budget denials so a fully-over-budget scope isn't
+        // hammered at poll cadence (capped at 5 min); a single allow/warn resets denyStreak to 0.
+        await new Promise(r => setTimeout(r, (0, meter_js_1.pollBackoffMs)(pollInterval, state.denyStreak)));
+    }
+}
+// Report a budget denial to CV-Hub: a machine-readable failTask reason (so the planner
+// doesn't auto-retry into the wall) + a budget_denied event. Increments failedCount.
+async function reportBudgetDenied(task, state, creds, reason, reasonCode) {
+    console.log(`⛔ ${chalk_1.default.bold.red('BUDGET DENIED')} — ${reason}`);
+    (0, api_js_1.postTaskEvent)(creds, task.id, {
+        event_type: 'budget_denied',
+        content: { reason, reason_code: reasonCode, deny_streak: state.denyStreak },
+    }).catch(() => { });
+    await (0, retry_js_1.withRetry)(() => (0, api_js_1.failTask)(creds, state.executorId, task.id, `BUDGET_EXCEEDED: ${reason}`), 'Report budget denial').catch(() => { });
+    state.failedCount++;
+}
+// Pre-dispatch budget gate (cv-meter Phase 4). Runs BEFORE any engine is spawned, so it is
+// engine-agnostic (Claude Code today, cv-code per #11). Returns true to proceed, false if the
+// task was budget-denied (already reported). org is derived from the task's repo owner.
+async function budgetGate(task, state, creds) {
+    const meter = state.meter;
+    if (meter.enforce === 'off' || !meter.url)
+        return true;
+    // org = the task's owning tenant (repo owner slug); config override as a fallback.
+    const org = task.owner ?? meter.org;
+    if (!org)
+        return true; // no org to tenant-scope the check → can't enforce; proceed
+    const scopes = {
+        org,
+        ...(task.owner && task.repo ? { project: `${task.owner}/${task.repo}` } : {}),
+        task: task.id,
+    };
+    const now = Date.now();
+    // Negative-cache: a scope seen denied recently short-circuits without a round-trip.
+    if ((0, meter_js_1.checkDenyCache)(state.denyCache, scopes, now)) {
+        state.denyStreak++;
+        await reportBudgetDenied(task, state, creds, 'budget exceeded (cached)', 'HARD_DENY');
+        return false;
     }
+    const verdict = await (0, meter_js_1.meterCheck)(meter, org, scopes);
+    const action = verdict ? verdict.action : (0, meter_js_1.resolveErrorAction)(meter.enforce);
+    if (action === 'deny') {
+        state.denyStreak++;
+        (0, meter_js_1.noteDeny)(state.denyCache, verdict?.governingKey, now);
+        await reportBudgetDenied(task, state, creds, verdict?.reason || 'meter check failed (fail_closed)', verdict?.reasonCode ?? 'HARD_DENY');
+        return false;
+    }
+    state.denyStreak = 0; // any allow/warn (incl. fail_open, NO_BUDGET) resets backoff
+    if (action === 'warn' && verdict) {
+        (0, api_js_1.sendTaskLog)(creds, state.executorId, task.id, 'info', `Budget warning: ${verdict.reason}`, { reason_code: verdict.reasonCode }).catch(() => { });
+        (0, api_js_1.postTaskEvent)(creds, task.id, {
+            event_type: 'budget_warning',
+            content: { reason: verdict.reason, reason_code: verdict.reasonCode, governing: verdict.governingKey, scopes },
+        }).catch(() => { });
+    }
+    return true;
 }
 async function executeTask(task, state, creds, options, claudeEnv) {
     const startTime = Date.now();
@@ -1063,6 +1171,31 @@ async function executeTask(task, state, creds, options, claudeEnv) {
         await handleSelfUpdate(task, state, creds);
         return;
     }
+    // Profile task-type gate (P14): a task whose type is outside the profile's task_types
+    // is refused here, before any model call, with a structured reason.
+    if (state.profile) {
+        const verdict = (0, profile_js_1.checkTaskType)(state.profile.manifest, task.task_type);
+        if (!verdict.allowed) {
+            console.log(chalk_1.default.red(`   [profile] refused ${task.id}: ${verdict.reason}`));
+            (0, api_js_1.postTaskEvent)(creds, task.id, {
+                event_type: 'profile_refused',
+                content: { reason: verdict.reason, profile: state.profile.manifest.name, task_type: task.task_type },
+            }).catch(() => { });
+            try {
+                await (0, api_js_1.failTask)(creds, state.executorId, task.id, `PROFILE_REFUSED: ${verdict.reason}`);
+            }
+            catch { }
+            state.currentTaskId = null;
+            state.lastTaskEnd = Date.now();
+            return;
+        }
+    }
+    // Pre-dispatch budget gate — engine-agnostic, before startTask/spawn (cv-meter Phase 4 / #12).
+    if (!(await budgetGate(task, state, creds))) {
+        state.currentTaskId = null;
+        state.lastTaskEnd = Date.now();
+        return;
+    }
     // Clear status line
     process.stdout.write('\r\x1b[K');
     // Task received
@@ -1090,7 +1223,7 @@ async function executeTask(task, state, creds, options, claudeEnv) {
         try {
             const elapsed = (0, display_js_1.formatDuration)(Date.now() - startTime);
             (0, display_js_1.setTerminalTitle)(`cva: ${task.title} (${elapsed})`);
-            await (0, api_js_1.sendHeartbeat)(creds, state.executorId, task.id, `Claude Code running (${elapsed} elapsed)`, state.authStatus);
+            await (0, api_js_1.sendHeartbeat)(creds, state.executorId, task.id, `Claude Code running (${elapsed} elapsed)`, state.authStatus, state.meter.enforce);
         }
         catch { }
     }, 30_000);
@@ -1115,7 +1248,7 @@ async function executeTask(task, state, creds, options, claudeEnv) {
         console.log(chalk_1.default.gray(`   Git remote: ${remoteInfo.remoteName} -> ${remoteInfo.remoteUrl}`));
     }
     // Build prompt and launch
-    const prompt = buildClaudePrompt(task);
+    const prompt = buildClaudePrompt(task, state.profile);
     // Persistent event queue — retries failed output events, spills to disk on
     // crash, assigns monotonic sequence numbers. One queue per task; spill file
     // lives in OS tmp keyed by task ID and is cleaned up on successful flush.
@@ -1129,11 +1262,29 @@ async function executeTask(task, state, creds, options, claudeEnv) {
     await eventQueue.loadSpill();
     try {
         const mode = options.autoApprove ? 'auto-approve' : 'relay';
+        // Under a profile, auto-approve is constrained to the profile allowlist (deny wins).
+        const effectiveAllowedTools = state.profile ? (0, profile_js_1.allowedToolsList)(state.profile.manifest) : ALLOWED_TOOLS;
         console.log(`🚀 ${chalk_1.default.bold.green('RUNNING')}   — Launching Claude Code (${mode})...`);
         if (options.autoApprove) {
-            console.log(chalk_1.default.gray('   Allowed tools: ') + ALLOWED_TOOLS.join(', '));
+            console.log(chalk_1.default.gray('   Allowed tools: ') + effectiveAllowedTools.join(', '));
         }
         console.log(chalk_1.default.gray('-'.repeat(60)));
+        // Per-task spawn env: clone the base env and stamp CVMETER_TASK_ID so cv-code
+        // can attribute every token event to this specific task in cv-meter.
+        const taskEnv = (0, meter_js_1.stampTaskEnv)(claudeEnv ?? process.env, task.id);
+        if (taskEnv.CVMETER_URL) {
+            console.log(chalk_1.default.gray(`   [meter] task_id=${task.id} → ${taskEnv.CVMETER_URL}`));
+        }
+        // Scope ceiling (P14): the profile's credential_scopes is a maximum. Strip any
+        // broader credential the environment offers before it reaches the spawned engine.
+        if (state.profile) {
+            const offered = (taskEnv.CVA_CREDENTIAL_SCOPES ?? '').split(',').map((s) => s.trim()).filter(Boolean);
+            const capped = (0, profile_js_1.capScopes)(state.profile.manifest.credential_scopes, offered);
+            taskEnv.CVA_CREDENTIAL_SCOPES = capped.join(',');
+            if (offered.length !== capped.length) {
+                console.log(chalk_1.default.yellow(`   [profile] scope ceiling stripped ${offered.length - capped.length} scope(s) beyond ${state.profile.manifest.name}`));
+            }
+        }
         let result;
         if (options.autoApprove) {
             result = await launchAutoApproveMode(prompt, {
@@ -1141,9 +1292,10 @@ async function executeTask(task, state, creds, options, claudeEnv) {
                 creds,
                 taskId: task.id,
                 executorId: state.executorId,
-                spawnEnv: claudeEnv,
+                spawnEnv: taskEnv,
                 machineName: state.machineName,
                 eventQueue,
+                allowedTools: effectiveAllowedTools,
             });
         }
         else {
@@ -1152,9 +1304,10 @@ async function executeTask(task, state, creds, options, claudeEnv) {
                 creds,
                 executorId: state.executorId,
                 taskId: task.id,
-                spawnEnv: claudeEnv,
+                spawnEnv: taskEnv,
                 machineName: state.machineName,
                 eventQueue,
+                profile: state.profile,
             });
         }
         console.log(chalk_1.default.gray('\n' + '-'.repeat(60)));
@@ -1338,6 +1491,7 @@ function agentCommand() {
     cmd.option('--tags <tags>', 'Comma-separated tags for this executor');
     cmd.option('--owner-project <project>', 'Project this executor belongs to');
     cmd.option('--org <slug>', 'Organization slug (auto-detected from repo owner if omitted)');
+    cmd.option('--profile <spec>', 'Agent profile to load and enforce: a path or @scope/pkg (P14)');
     cmd.action(async (opts) => {
         await runAgent(opts);
     });