@controlvector/cv-agent 1.9.2 → 1.10.0

package/dist/bundle.cjs

@@ -959,8 +959,8 @@ var require_command = __commonJS({
   "node_modules/commander/lib/command.js"(exports2) {
     var EventEmitter = require("node:events").EventEmitter;
     var childProcess = require("node:child_process");
-    var path = require("node:path");
-    var fs3 = require("node:fs");
+    var path3 = require("node:path");
+    var fs4 = require("node:fs");
     var process3 = require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -1892,11 +1892,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path.resolve(baseDir, baseName);
-          if (fs3.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path.extname(baseName))) return void 0;
+          const localBin = path3.resolve(baseDir, baseName);
+          if (fs4.existsSync(localBin)) return localBin;
+          if (sourceExt.includes(path3.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
-            (ext) => fs3.existsSync(`${localBin}${ext}`)
+            (ext) => fs4.existsSync(`${localBin}${ext}`)
           );
           if (foundExt) return `${localBin}${foundExt}`;
           return void 0;
@@ -1908,21 +1908,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs3.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs4.realpathSync(this._scriptPath);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path.resolve(
-            path.dirname(resolvedScriptPath),
+          executableDir = path3.resolve(
+            path3.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path.basename(
+            const legacyName = path3.basename(
               this._scriptPath,
-              path.extname(this._scriptPath)
+              path3.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1933,7 +1933,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path.extname(executableFile));
+        launchWithNode = sourceExt.includes(path3.extname(executableFile));
         let proc;
         if (process3.platform !== "win32") {
           if (launchWithNode) {
@@ -2773,7 +2773,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path.basename(filename, path.extname(filename));
+        this._name = path3.basename(filename, path3.extname(filename));
         return this;
       }
       /**
@@ -2787,9 +2787,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path2) {
-        if (path2 === void 0) return this._executableDir;
-        this._executableDir = path2;
+      executableDir(path4) {
+        if (path4 === void 0) return this._executableDir;
+        this._executableDir = path4;
         return this;
       }
       /**
@@ -3665,92 +3665,6 @@ async function validateToken(hubUrl, token) {
     return null;
   }
 }
-var DEVICE_CLIENT_ID = "cv-agent-cli";
-var DEVICE_SCOPES = "repo:read repo:write profile offline_access";
-var POLL_INTERVAL_MS = 5e3;
-var MAX_POLL_ATTEMPTS = 180;
-async function deviceAuthFlow(hubUrl, appUrl) {
-  const authRes = await fetch(`${hubUrl}/oauth/device/authorize`, {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      client_id: DEVICE_CLIENT_ID,
-      scope: DEVICE_SCOPES
-    })
-  });
-  if (!authRes.ok) {
-    const err = await authRes.json().catch(() => ({}));
-    throw new Error(err.error_description || `Device auth failed: ${authRes.status}`);
-  }
-  const auth = await authRes.json();
-  console.log(source_default.bold("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510"));
-  console.log(source_default.bold("  \u2502     CV-Hub Device Authorization          \u2502"));
-  console.log(source_default.bold("  \u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524"));
-  console.log(source_default.bold("  \u2502                                          \u2502"));
-  console.log(source_default.bold("  \u2502  Open this URL in your browser:          \u2502"));
-  console.log(source_default.bold(`  \u2502  ${source_default.cyan(auth.verification_uri).padEnd(51)}\u2502`));
-  console.log(source_default.bold("  \u2502                                          \u2502"));
-  console.log(source_default.bold("  \u2502  Then enter this code:                   \u2502"));
-  console.log(source_default.bold(`  \u2502          ${source_default.white.bold(auth.user_code)}                       \u2502`));
-  console.log(source_default.bold("  \u2502                                          \u2502"));
-  console.log(source_default.bold(`  \u2502  ${source_default.gray(`Expires in ${Math.floor(auth.expires_in / 60)} minutes`).padEnd(51)}\u2502`));
-  console.log(source_default.bold("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518"));
-  console.log();
-  try {
-    const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-    (0, import_node_child_process.execSync)(`${openCmd} "${auth.verification_uri_complete}" 2>/dev/null`, { timeout: 5e3 });
-    console.log(source_default.gray("  Browser opened. Waiting for authorization..."));
-  } catch {
-    console.log(source_default.gray("  Open the URL above in your browser."));
-  }
-  let interval = Math.max(auth.interval * 1e3, POLL_INTERVAL_MS);
-  const expireTime = Date.now() + auth.expires_in * 1e3;
-  for (let attempt = 0; attempt < MAX_POLL_ATTEMPTS; attempt++) {
-    await new Promise((r) => setTimeout(r, interval));
-    if (Date.now() > expireTime) {
-      throw new Error("Authorization timed out");
-    }
-    const remaining = Math.ceil((expireTime - Date.now()) / 1e3);
-    const mins = Math.floor(remaining / 60);
-    const secs = remaining % 60;
-    process.stdout.write(`\r  Waiting for authorization... (${mins}:${secs.toString().padStart(2, "0")} remaining) `);
-    const tokenRes = await fetch(`${hubUrl}/oauth/token`, {
-      method: "POST",
-      headers: { "Content-Type": "application/x-www-form-urlencoded" },
-      body: new URLSearchParams({
-        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-        device_code: auth.device_code,
-        client_id: DEVICE_CLIENT_ID
-      })
-    });
-    const tokenData = await tokenRes.json();
-    if (tokenData.access_token) {
-      process.stdout.write("\r" + " ".repeat(60) + "\r");
-      let uname = "user";
-      try {
-        const userRes = await fetch(`${hubUrl}/oauth/userinfo`, {
-          headers: { Authorization: `Bearer ${tokenData.access_token}` }
-        });
-        if (userRes.ok) {
-          const userInfo = await userRes.json();
-          uname = userInfo.preferred_username || userInfo.name || "user";
-        }
-      } catch {
-      }
-      return { token: tokenData.access_token, username: uname };
-    }
-    if (tokenData.error === "slow_down") {
-      interval += 5e3;
-    } else if (tokenData.error === "access_denied") {
-      process.stdout.write("\r" + " ".repeat(60) + "\r");
-      throw new Error("Authorization denied by user");
-    } else if (tokenData.error === "expired_token") {
-      process.stdout.write("\r" + " ".repeat(60) + "\r");
-      throw new Error("Authorization expired");
-    }
-  }
-  throw new Error("Authorization timed out");
-}
 function checkBinary(cmd) {
   try {
     return (0, import_node_child_process.execSync)(`${cmd} 2>&1`, { encoding: "utf8", timeout: 5e3 }).trim().split("\n")[0];
@@ -3810,20 +3724,38 @@ async function runSetup() {
   if (!token) {
     console.log("  Let's connect you to CV-Hub.");
     console.log();
+    const autoName = `${(0, import_node_os2.hostname)()}-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
+    const tokenUrl = `${appUrl}/settings/tokens/new?name=${encodeURIComponent(autoName)}&scopes=agent,repo`;
+    console.log(source_default.gray(`  Opening: ${tokenUrl}`));
     try {
-      const deviceResult = await deviceAuthFlow(hubUrl, appUrl);
-      token = deviceResult.token;
-      username = deviceResult.username;
-      console.log(source_default.green("  \u2713") + ` Authenticated as ${source_default.bold(username)}`);
-      writeSharedCreds({ hub_url: hubUrl, token, username, created_at: (/* @__PURE__ */ new Date()).toISOString() });
-      await writeCredentialField("CV_HUB_PAT", token);
-      await writeCredentialField("CV_HUB_API", hubUrl);
-    } catch (err) {
-      console.log(source_default.red(`  Authentication failed: ${err.message}`));
-      console.log(source_default.gray("  You can retry with: cva setup"));
-      console.log(source_default.gray("  Or manually: cva auth login --token <your-pat>"));
+      const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+      (0, import_node_child_process.execSync)(`${openCmd} "${tokenUrl}" 2>/dev/null`, { timeout: 5e3 });
+    } catch {
+      console.log(source_default.gray("  (Could not open browser \u2014 copy the URL above)"));
+    }
+    console.log();
+    const readline = await import("node:readline");
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    token = await new Promise((resolve) => {
+      rl.question("  Paste your token here: ", (answer) => {
+        rl.close();
+        resolve(answer.trim());
+      });
+    });
+    if (!token) {
+      console.log(source_default.red("  No token provided. Run cva setup again."));
       process.exit(1);
     }
+    const user = await validateToken(hubUrl, token);
+    if (!user) {
+      console.log(source_default.red("  Token validation failed. Check your token and try again."));
+      process.exit(1);
+    }
+    username = user;
+    console.log(source_default.green("  \u2713") + ` Authenticated as ${source_default.bold(user)}`);
+    writeSharedCreds({ hub_url: hubUrl, token, username, created_at: (/* @__PURE__ */ new Date()).toISOString() });
+    await writeCredentialField("CV_HUB_PAT", token);
+    await writeCredentialField("CV_HUB_API", hubUrl);
   }
   console.log();
   console.log("  Claude.ai MCP connector:");
@@ -3834,84 +3766,18 @@ async function runSetup() {
   console.log(source_default.gray('  Click "Add Integration" \u2192 "Allow" when prompted.'));
   console.log(source_default.gray("  (You can do this later \u2014 setup will continue.)"));
   console.log();
-  let cwd = process.cwd();
-  let isGitRepo = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".git"));
-  let repoName = (0, import_node_path.basename)(cwd);
+  const cwd = process.cwd();
+  const isGitRepo = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".git"));
+  const hasCVDir = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".cv"));
+  const hasClaudeMd = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, "CLAUDE.md"));
+  const repoName = (0, import_node_path.basename)(cwd);
   if (isGitRepo) {
     console.log(source_default.green("  \u2713") + ` Git repo found: ${repoName}`);
   } else {
-    const readline = await import("node:readline");
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    console.log("  No git repository found in this directory.");
-    console.log();
-    console.log(`    ${source_default.cyan("a")} \u2014 Initialize a new project here: ${cwd}`);
-    console.log(`    ${source_default.cyan("b")} \u2014 Clone an existing repo from CV-Hub`);
-    console.log();
-    const choice = await new Promise((resolve2) => {
-      rl.question("  Choose [a/b]: ", (answer) => {
-        rl.close();
-        resolve2(answer.trim().toLowerCase() || "a");
-      });
-    });
-    if (choice === "b" && token) {
-      try {
-        console.log(source_default.gray("  Fetching your repositories..."));
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), 15e3);
-        const res = await fetch(`${hubUrl}/api/v1/repos?limit=50`, {
-          headers: { Authorization: `Bearer ${token}` },
-          signal: controller.signal
-        });
-        clearTimeout(timeout);
-        if (res.ok) {
-          const data = await res.json();
-          const repos = data.repositories || [];
-          if (repos.length === 0) {
-            console.log(source_default.yellow("  No repos found on CV-Hub. Initializing a new project instead."));
-          } else {
-            console.log();
-            console.log("  Your CV-Hub repositories:");
-            const displayRepos = repos.slice(0, 20);
-            displayRepos.forEach((r, i) => {
-              const desc = r.description ? source_default.gray(` \u2014 ${r.description.substring(0, 40)}`) : "";
-              console.log(`    ${source_default.cyan(String(i + 1).padStart(2))}. ${r.slug || r.name}${desc}`);
-            });
-            console.log();
-            const rl2 = readline.createInterface({ input: process.stdin, output: process.stdout });
-            const selection = await new Promise((resolve2) => {
-              rl2.question(`  Select a repo [1-${displayRepos.length}]: `, (answer) => {
-                rl2.close();
-                resolve2(answer.trim());
-              });
-            });
-            const idx = parseInt(selection, 10) - 1;
-            if (idx >= 0 && idx < displayRepos.length) {
-              const repo = displayRepos[idx];
-              const gitHost = "git.hub.controlvector.io";
-              const slug = repo.slug || repo.name;
-              const cloneUrl = `https://${username}:${token}@${gitHost}/${username}/${slug}.git`;
-              console.log(source_default.gray(`  Cloning ${username}/${slug}...`));
-              (0, import_node_child_process.execSync)(`git clone ${cloneUrl} ${slug}`, { cwd, stdio: "pipe", timeout: 6e4 });
-              cwd = (0, import_node_path.join)(cwd, slug);
-              process.chdir(cwd);
-              repoName = slug;
-              isGitRepo = true;
-              console.log(source_default.green("  \u2713") + ` Cloned ${username}/${slug}`);
-            }
-          }
-        }
-      } catch (err) {
-        console.log(source_default.yellow(`  Could not fetch repos: ${err.message}. Initializing instead.`));
-      }
-    }
-    if (!isGitRepo) {
-      console.log("  Initializing git repository...");
-      (0, import_node_child_process.execSync)("git init && git checkout -b main", { cwd, stdio: "pipe" });
-      console.log(source_default.green("  \u2713") + " Git repo initialized");
-    }
+    console.log("  Initializing git repository...");
+    (0, import_node_child_process.execSync)("git init && git checkout -b main", { cwd, stdio: "pipe" });
+    console.log(source_default.green("  \u2713") + " Git repo initialized");
   }
-  const hasClaudeMd = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, "CLAUDE.md"));
-  const hasCVDir = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".cv"));
   if (!hasClaudeMd) {
     const template = `# ${repoName}
 
@@ -3929,41 +3795,6 @@ async function runSetup() {
   } else {
     console.log(source_default.green("  \u2713") + " CLAUDE.md present");
   }
-  const gitignorePath = (0, import_node_path.join)(cwd, ".gitignore");
-  const CREDENTIAL_PATTERNS = [
-    "# Credentials and secrets (auto-added by cv-agent)",
-    ".env",
-    ".env.*",
-    ".claude/",
-    ".claude.json",
-    ".credentials*",
-    "*.pem",
-    "*.key",
-    ".ssh/",
-    ".gnupg/",
-    ".npm/",
-    ".config/",
-    ".zsh_history",
-    ".bash_history",
-    ".zsh_sessions/",
-    "node_modules/",
-    ".DS_Store"
-  ];
-  try {
-    let gitignoreContent = "";
-    if ((0, import_node_fs.existsSync)(gitignorePath)) {
-      gitignoreContent = (0, import_node_fs.readFileSync)(gitignorePath, "utf-8");
-    }
-    const missing = CREDENTIAL_PATTERNS.filter((p) => !gitignoreContent.includes(p));
-    if (missing.length > 0) {
-      const addition = (gitignoreContent && !gitignoreContent.endsWith("\n") ? "\n" : "") + missing.join("\n") + "\n";
-      (0, import_node_fs.writeFileSync)(gitignorePath, gitignoreContent + addition);
-      console.log(source_default.green("  \u2713") + " .gitignore updated with credential protection");
-    } else {
-      console.log(source_default.green("  \u2713") + " .gitignore has credential protection");
-    }
-  } catch {
-  }
   if (!hasCVDir) {
     (0, import_node_fs.mkdirSync)((0, import_node_path.join)(cwd, ".cv"), { recursive: true });
   }
@@ -3973,22 +3804,6 @@ async function runSetup() {
     try {
       const existingRemote = (0, import_node_child_process.execSync)('git remote get-url cv-hub 2>/dev/null || echo ""', { cwd, encoding: "utf8" }).trim();
       if (!existingRemote) {
-        try {
-          const controller = new AbortController();
-          const timeout = setTimeout(() => controller.abort(), 15e3);
-          await fetch(`${hubUrl}/api/v1/user/repos`, {
-            method: "POST",
-            headers: {
-              Authorization: `Bearer ${token}`,
-              "Content-Type": "application/json"
-            },
-            body: JSON.stringify({ name: repoName, auto_init: false }),
-            signal: controller.signal
-          });
-          clearTimeout(timeout);
-          console.log(source_default.green("  \u2713") + ` Repo created on CV-Hub: ${username}/${repoName}`);
-        } catch {
-        }
         (0, import_node_child_process.execSync)(`git remote add cv-hub ${remoteUrl}`, { cwd, stdio: "pipe" });
         console.log(source_default.green("  \u2713") + ` Remote added: cv-hub \u2192 ${remoteUrl}`);
       } else {
@@ -3996,99 +3811,6 @@ async function runSetup() {
       }
     } catch {
     }
-    try {
-      const credStorePath = (0, import_node_path.join)((0, import_node_os2.homedir)(), ".git-credentials");
-      const credLine = `https://${username}:${token}@${gitHost}`;
-      let existing = "";
-      try {
-        existing = (0, import_node_fs.readFileSync)(credStorePath, "utf-8");
-      } catch {
-      }
-      if (!existing.includes(gitHost)) {
-        (0, import_node_fs.writeFileSync)(credStorePath, existing + credLine + "\n", { mode: 384 });
-      }
-      (0, import_node_child_process.execSync)(`git config --global credential.helper store`, { stdio: "pipe" });
-    } catch {
-    }
-    try {
-      (0, import_node_child_process.execSync)("git log --oneline -1", { cwd, stdio: "pipe" });
-      const status = (0, import_node_child_process.execSync)("git status --porcelain", { cwd, encoding: "utf8" }).trim();
-      if (status) {
-        (0, import_node_child_process.execSync)("git add -A", { cwd, stdio: "pipe" });
-        (0, import_node_child_process.execSync)('git commit -m "chore: cv-agent setup"', { cwd, stdio: "pipe" });
-        console.log(source_default.green("  \u2713") + " Changes committed");
-      }
-    } catch {
-      try {
-        (0, import_node_child_process.execSync)("git add -A", { cwd, stdio: "pipe" });
-        (0, import_node_child_process.execSync)('git commit -m "Initial commit via cv-agent"', { cwd, stdio: "pipe" });
-        console.log(source_default.green("  \u2713") + " Initial commit created");
-      } catch {
-      }
-    }
-    try {
-      (0, import_node_child_process.execSync)("git push -u cv-hub main 2>&1", { cwd, stdio: "pipe", timeout: 3e4 });
-      console.log(source_default.green("  \u2713") + " Pushed to CV-Hub");
-    } catch {
-      console.log(source_default.gray("  (Push skipped \u2014 you can push later with: git push cv-hub main)"));
-    }
-  }
-  console.log();
-  let agentStatus = "";
-  const pidFile = (0, import_node_path.join)((0, import_node_os2.homedir)(), ".config", "controlvector", "agent.pid");
-  let agentRunning = false;
-  try {
-    const pid = parseInt((0, import_node_fs.readFileSync)(pidFile, "utf-8").trim(), 10);
-    if (pid > 0) {
-      process.kill(pid, 0);
-      agentRunning = true;
-      agentStatus = `running (PID ${pid})`;
-      console.log(source_default.green("  \u2713") + ` Agent already running (PID ${pid})`);
-    }
-  } catch {
-  }
-  if (!agentRunning) {
-    const readline = await import("node:readline");
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    const answer = await new Promise((resolve2) => {
-      rl.question("  Start the CV-Agent daemon? (Y/n): ", (a) => {
-        rl.close();
-        resolve2(a.trim().toLowerCase() || "y");
-      });
-    });
-    if (answer === "y" || answer === "yes" || answer === "") {
-      const machName = (0, import_node_os2.hostname)().toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-");
-      console.log(source_default.gray(`  Starting agent as "${machName}"...`));
-      try {
-        const { spawn: spawnChild } = await import("node:child_process");
-        const child = spawnChild("cva", [
-          "agent",
-          "--auto-approve",
-          "--machine",
-          machName,
-          "--working-dir",
-          cwd
-        ], {
-          detached: true,
-          stdio: "ignore",
-          env: { ...process.env }
-        });
-        child.unref();
-        if (child.pid) {
-          (0, import_node_fs.mkdirSync)((0, import_node_path.join)((0, import_node_os2.homedir)(), ".config", "controlvector"), { recursive: true });
-          (0, import_node_fs.writeFileSync)(pidFile, String(child.pid), { mode: 384 });
-          agentStatus = `running (PID ${child.pid})`;
-          console.log(source_default.green("  \u2713") + ` Agent started (PID ${child.pid}) \u2014 executor "${machName}"`);
-        }
-      } catch (err) {
-        console.log(source_default.yellow(`  Could not start agent: ${err.message}`));
-        console.log(source_default.gray("  Start manually with: cva agent --auto-approve"));
-        agentStatus = "not started";
-      }
-    } else {
-      agentStatus = "not started";
-      console.log(source_default.gray("  Start anytime with: cva agent --auto-approve"));
-    }
   }
   console.log();
   console.log(source_default.bold("  Setup Complete"));
@@ -4096,14 +3818,11 @@ async function runSetup() {
   console.log(`  ${source_default.green("\u2713")} Authenticated as: ${source_default.cyan(username)}`);
   console.log(`  ${source_default.green("\u2713")} Repository: ${source_default.cyan(repoName)}`);
   console.log(`  ${source_default.green("\u2713")} CLAUDE.md: present`);
-  if (agentStatus.startsWith("running")) {
-    console.log(`  ${source_default.green("\u2713")} Agent daemon: ${source_default.cyan(agentStatus)}`);
-  }
   console.log(source_default.gray("  " + "\u2500".repeat(40)));
   console.log();
   console.log("  What's next:");
-  console.log("    Open Claude.ai and try:");
-  console.log(source_default.cyan(`    "Create a task in ${repoName} to add a hello world index.html"`));
+  console.log(`    ${source_default.cyan("cva agent --auto-approve")}  \u2014 Start listening for tasks`);
+  console.log(`    Or open Claude.ai and dispatch a task to this repo.`);
   console.log();
   console.log(source_default.gray(`  Dashboard: ${appUrl}`));
   console.log();
@@ -4117,10 +3836,138 @@ function setupCommand() {
 
 // src/commands/agent.ts
 var import_node_child_process5 = require("node:child_process");
+var os3 = __toESM(require("node:os"));
+var path2 = __toESM(require("node:path"));
+
+// src/utils/event-queue.ts
+var import_node_fs2 = require("node:fs");
+var path = __toESM(require("node:path"));
+var EventQueue = class {
+  buffer = [];
+  sequence = 0;
+  drainPromise = null;
+  closed = false;
+  spillDirty = false;
+  spillPath;
+  poster;
+  maxRetries;
+  baseDelayMs;
+  onError;
+  constructor(opts) {
+    this.spillPath = opts.spillPath;
+    this.poster = opts.poster;
+    this.maxRetries = opts.maxRetries ?? 5;
+    this.baseDelayMs = opts.baseDelayMs ?? 1e3;
+    this.onError = opts.onError;
+  }
+  /** Load any events that were spilled to disk by a previous run. */
+  async loadSpill() {
+    try {
+      const raw = await import_node_fs2.promises.readFile(this.spillPath, "utf8");
+      const lines = raw.split("\n").filter((l) => l.trim().length > 0);
+      for (const line of lines) {
+        const ev = JSON.parse(line);
+        this.buffer.push(ev);
+        if (ev.sequence_number >= this.sequence) {
+          this.sequence = ev.sequence_number + 1;
+        }
+      }
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+    }
+  }
+  /** Assign the next sequence number. Callers that want to stamp manually can read this. */
+  nextSequence() {
+    return this.sequence++;
+  }
+  /** Enqueue an event. Returns the assigned sequence_number. */
+  enqueue(event) {
+    if (this.closed) {
+      throw new Error("EventQueue is closed");
+    }
+    const seq = event.sequence_number ?? this.nextSequence();
+    if (seq >= this.sequence) this.sequence = seq + 1;
+    this.buffer.push({ ...event, sequence_number: seq });
+    this.spillDirty = true;
+    this.drain().catch(() => {
+    });
+    return seq;
+  }
+  /** Drain the buffer, retrying transient failures. Serial — concurrent calls share the same promise. */
+  drain() {
+    if (this.drainPromise) return this.drainPromise;
+    this.drainPromise = this.drainInternal().finally(() => {
+      this.drainPromise = null;
+    });
+    return this.drainPromise;
+  }
+  async drainInternal() {
+    try {
+      while (this.buffer.length > 0) {
+        const ev = this.buffer[0];
+        let delivered = false;
+        for (let attempt = 0; attempt < this.maxRetries; attempt++) {
+          try {
+            await this.poster(ev);
+            delivered = true;
+            break;
+          } catch (err) {
+            this.onError?.(err instanceof Error ? err : new Error(String(err)), ev, attempt);
+            if (attempt < this.maxRetries - 1) {
+              await sleep(this.baseDelayMs * Math.pow(2, attempt));
+            }
+          }
+        }
+        if (delivered) {
+          this.buffer.shift();
+          this.spillDirty = true;
+        } else {
+          break;
+        }
+      }
+    } finally {
+      if (this.spillDirty) {
+        await this.writeSpill().catch(() => {
+        });
+      }
+    }
+  }
+  /** Flush: drain remaining events, then persist anything still pending to disk. */
+  async flush() {
+    await this.drain();
+    await this.writeSpill();
+  }
+  /** Mark the queue closed and flush. Safe to call multiple times. */
+  async close() {
+    if (this.closed) return;
+    this.closed = true;
+    await this.flush();
+  }
+  /** Number of events still pending delivery. */
+  size() {
+    return this.buffer.length;
+  }
+  async writeSpill() {
+    try {
+      if (this.buffer.length === 0) {
+        await import_node_fs2.promises.rm(this.spillPath, { force: true });
+      } else {
+        await import_node_fs2.promises.mkdir(path.dirname(this.spillPath), { recursive: true });
+        const body = this.buffer.map((e) => JSON.stringify(e)).join("\n") + "\n";
+        await import_node_fs2.promises.writeFile(this.spillPath, body, "utf8");
+      }
+      this.spillDirty = false;
+    } catch {
+    }
+  }
+};
+function sleep(ms) {
+  return new Promise((r) => setTimeout(r, ms));
+}
 
 // src/utils/api.ts
-async function apiCall(creds, method, path, body) {
-  const url = `${creds.CV_HUB_API}${path}`;
+async function apiCall(creds, method, path3, body) {
+  const url = `${creds.CV_HUB_API}${path3}`;
   const headers = {
     "Authorization": `Bearer ${creds.CV_HUB_PAT}`,
     "Content-Type": "application/json"
@@ -4593,78 +4440,11 @@ async function writeConfig(config) {
 
 // src/commands/git-safety.ts
 var import_node_child_process3 = require("node:child_process");
-var import_node_fs2 = require("node:fs");
-var import_node_path2 = require("node:path");
-var import_node_os3 = require("node:os");
-var DANGEROUS_PATTERNS = [
-  ".claude/",
-  ".claude.json",
-  ".credentials",
-  ".zsh_history",
-  ".bash_history",
-  ".zsh_sessions/",
-  ".ssh/",
-  ".gnupg/",
-  ".npm/",
-  ".config/",
-  ".CFUserTextEncoding",
-  "Library/",
-  "Applications/",
-  ".Trash/",
-  ".DS_Store",
-  "node_modules/",
-  ".env",
-  ".env.local",
-  ".env.production"
-];
 function git(cmd, cwd) {
   return (0, import_node_child_process3.execSync)(cmd, { cwd, encoding: "utf8", timeout: 3e4 }).trim();
 }
-function checkWorkspaceSafety(workspaceRoot) {
-  const resolved = (0, import_node_path2.resolve)(workspaceRoot);
-  const home = (0, import_node_path2.resolve)((0, import_node_os3.homedir)());
-  if (resolved === home) {
-    return `Workspace is user HOME directory (${home}). Refusing to auto-commit to prevent indexing personal files.`;
-  }
-  if (home.startsWith(resolved + "/")) {
-    return `Workspace (${resolved}) is a parent of HOME. Refusing to auto-commit.`;
-  }
-  if (!(0, import_node_fs2.existsSync)((0, import_node_path2.join)(resolved, ".git"))) {
-    return `No .git directory in ${resolved}. Not a git repository.`;
-  }
-  return null;
-}
-function filterDangerousFiles(statusLines) {
-  const safe = [];
-  const blocked = [];
-  for (const line of statusLines) {
-    const filePath = line.substring(3).trim();
-    const isDangerous = DANGEROUS_PATTERNS.some(
-      (pattern) => filePath.startsWith(pattern) || filePath.includes("/" + pattern)
-    );
-    if (isDangerous) {
-      blocked.push(filePath);
-    } else {
-      safe.push(line);
-    }
-  }
-  return { safe, blocked };
-}
 function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
   const targetBranch = branch || "main";
-  const safetyError = checkWorkspaceSafety(workspaceRoot);
-  if (safetyError) {
-    console.log(`  [git-safety] BLOCKED: ${safetyError}`);
-    return {
-      hadChanges: false,
-      filesAdded: 0,
-      filesModified: 0,
-      filesDeleted: 0,
-      pushed: false,
-      skipped: true,
-      skipReason: safetyError
-    };
-  }
   try {
     let statusOutput;
     try {
@@ -4672,8 +4452,8 @@ function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
     } catch {
       return { hadChanges: false, filesAdded: 0, filesModified: 0, filesDeleted: 0, pushed: false, error: "git status failed" };
     }
-    const allLines = statusOutput.split("\n").filter(Boolean);
-    if (allLines.length === 0) {
+    const lines = statusOutput.split("\n").filter(Boolean);
+    if (lines.length === 0) {
       try {
         const unpushed = git(`git log origin/${targetBranch}..HEAD --oneline 2>/dev/null`, workspaceRoot);
         if (unpushed) {
@@ -4685,16 +4465,8 @@ function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
       }
       return { hadChanges: false, filesAdded: 0, filesModified: 0, filesDeleted: 0, pushed: false };
     }
-    const { safe: safeLines, blocked } = filterDangerousFiles(allLines);
-    if (blocked.length > 0) {
-      console.log(`  [git-safety] Blocked ${blocked.length} sensitive file(s) from staging: ${blocked.slice(0, 5).join(", ")}${blocked.length > 5 ? "..." : ""}`);
-    }
-    if (safeLines.length === 0) {
-      console.log(`  [git-safety] All ${allLines.length} changed files were blocked by safety filter`);
-      return { hadChanges: false, filesAdded: 0, filesModified: 0, filesDeleted: 0, pushed: false };
-    }
     let added = 0, modified = 0, deleted = 0;
-    for (const line of safeLines) {
+    for (const line of lines) {
       const code = line.substring(0, 2);
       if (code.includes("?")) added++;
       else if (code.includes("D")) deleted++;
@@ -4702,15 +4474,9 @@ function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
       else added++;
     }
     console.log(
-      `  [git-safety] ${safeLines.length} safe changes (${added} new, ${modified} modified, ${deleted} deleted) \u2014 committing now`
+      `  [git-safety] ${lines.length} uncommitted changes (${added} new, ${modified} modified, ${deleted} deleted) \u2014 committing now`
     );
-    for (const line of safeLines) {
-      const filePath = line.substring(3).trim();
-      try {
-        git(`git add -- ${JSON.stringify(filePath)}`, workspaceRoot);
-      } catch {
-      }
-    }
+    git("git add -A", workspaceRoot);
     const shortId = taskId.substring(0, 8);
     const commitMsg = `task: ${taskTitle} [${shortId}]
 
@@ -4772,7 +4538,7 @@ Files: ${added} added, ${modified} modified, ${deleted} deleted`;
 // src/commands/deploy-manifest.ts
 var import_node_child_process4 = require("node:child_process");
 var import_node_fs3 = require("node:fs");
-var import_node_path3 = require("node:path");
+var import_node_path2 = require("node:path");
 function exec(cmd, cwd, timeoutMs = 3e5, env2) {
   try {
     const stdout = (0, import_node_child_process4.execSync)(cmd, {
@@ -4815,7 +4581,7 @@ function getHeadCommit(cwd) {
   }
 }
 function loadDeployManifest(workspaceRoot) {
-  const manifestPath = (0, import_node_path3.join)(workspaceRoot, ".cva", "deploy.json");
+  const manifestPath = (0, import_node_path2.join)(workspaceRoot, ".cva", "deploy.json");
   if (!(0, import_node_fs3.existsSync)(manifestPath)) return null;
   try {
     const raw = (0, import_node_fs3.readFileSync)(manifestPath, "utf8");
@@ -4843,7 +4609,7 @@ async function postTaskDeploy(workspaceRoot, taskId, log) {
       console.log(`  [deploy] Building: ${buildStep.name}`);
       log("lifecycle", `Building: ${buildStep.name}`);
       const start = Date.now();
-      const cwd = (0, import_node_path3.join)(workspaceRoot, buildStep.working_dir || ".");
+      const cwd = (0, import_node_path2.join)(workspaceRoot, buildStep.working_dir || ".");
       const timeoutMs = (buildStep.timeout_seconds || 300) * 1e3;
       const result = exec(buildStep.command, cwd, timeoutMs);
       if (!result.ok) {
@@ -4934,7 +4700,7 @@ async function rollback(workspaceRoot, targetCommit, manifest, log) {
   }
   if (manifest.build?.steps) {
     for (const step of manifest.build.steps) {
-      exec(step.command, (0, import_node_path3.join)(workspaceRoot, step.working_dir || "."), (step.timeout_seconds || 300) * 1e3);
+      exec(step.command, (0, import_node_path2.join)(workspaceRoot, step.working_dir || "."), (step.timeout_seconds || 300) * 1e3);
     }
   }
   if (manifest.service?.restart_command) {
@@ -5092,22 +4858,6 @@ Target repository: ${task.owner}/${task.repo}
 `;
   prompt += `
 
-## Security \u2014 NEVER Commit Secrets
-`;
-  prompt += `Do NOT add, commit, or push any of the following:
-`;
-  prompt += `- API keys, tokens, passwords, or credentials
-`;
-  prompt += `- .env files, .credentials files, .claude/ directory
-`;
-  prompt += `- SSH keys (.ssh/), GPG keys (.gnupg/)
-`;
-  prompt += `- Shell history (.zsh_history, .bash_history)
-`;
-  prompt += `If you need to reference an API key, use an environment variable placeholder.
-`;
-  prompt += `
-
 ---
 `;
   prompt += `When complete, provide a brief summary of what you accomplished.
@@ -5185,8 +4935,9 @@ async function launchAutoApproveMode(prompt, options) {
   const pendingQuestionIds = [];
   let fullOutput = "";
   let lastProgressBytes = 0;
+  let totalBytesStreamed = 0;
   const runOnce = (inputPrompt, isContinue) => {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve, reject) => {
       const args = isContinue ? ["-p", inputPrompt, "--continue", "--allowedTools", ...ALLOWED_TOOLS] : ["-p", inputPrompt, "--allowedTools", ...ALLOWED_TOOLS];
       if (sessionId && !isContinue) {
         args.push("--session-id", sessionId);
@@ -5206,8 +4957,20 @@ async function launchAutoApproveMode(prompt, options) {
         process.stdout.write(data);
         fullOutput += text;
         if (fullOutput.length > MAX_OUTPUT_BYTES) {
+          const dropped = fullOutput.length - MAX_OUTPUT_BYTES;
           fullOutput = fullOutput.slice(-MAX_OUTPUT_BYTES);
+          options.eventQueue?.enqueue({
+            event_type: "output",
+            content: {
+              chunk: `
+[... ${dropped} bytes truncated from output buffer ...]
+`,
+              truncated_bytes: dropped,
+              byte_offset: totalBytesStreamed
+            }
+          });
         }
+        totalBytesStreamed += text.length;
         if (Date.now() - spawnTime < 1e4) {
           const authError = containsAuthError(fullOutput + stderr);
           if (authError) {
@@ -5258,10 +5021,9 @@ ${source_default.red("!")} Claude Code auth failure detected: "${authError}"`);
               ).catch(() => {
               });
             }
-            postTaskEvent(options.creds, options.taskId, {
+            options.eventQueue?.enqueue({
               event_type: "output",
-              content: { chunk, byte_offset: lastProgressBytes }
-            }).catch(() => {
+              content: { chunk, byte_offset: totalBytesStreamed }
             });
           }
         }
@@ -5285,7 +5047,7 @@ ${source_default.red("!")} Claude Code auth failure (stderr): "${authError}"`);
       });
       child.on("close", (code, signal) => {
         _activeChild = null;
-        resolve2({
+        resolve({
           exitCode: signal === "SIGKILL" ? 137 : code ?? 1,
           stderr,
           output: fullOutput,
@@ -5324,7 +5086,7 @@ ${source_default.red("!")} Claude Code auth failure (stderr): "${authError}"`);
   return result;
 }
 async function launchRelayMode(prompt, options) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve, reject) => {
     const child = (0, import_node_child_process5.spawn)("claude", [], {
       cwd: options.cwd,
       stdio: ["pipe", "pipe", "pipe"],
@@ -5337,6 +5099,7 @@ async function launchRelayMode(prompt, options) {
     let lastProgressBytes = 0;
     let authFailure = false;
     const spawnTime = Date.now();
+    let totalBytesStreamed = 0;
     child.stdin?.write(prompt + "\n");
     let lastRedirectCheck = Date.now();
     let lineBuffer = "";
@@ -5346,8 +5109,20 @@ async function launchRelayMode(prompt, options) {
       stdoutBuffer += text;
       fullOutput += text;
       if (fullOutput.length > MAX_OUTPUT_BYTES) {
+        const dropped = fullOutput.length - MAX_OUTPUT_BYTES;
         fullOutput = fullOutput.slice(-MAX_OUTPUT_BYTES);
+        options.eventQueue?.enqueue({
+          event_type: "output",
+          content: {
+            chunk: `
+[... ${dropped} bytes truncated from output buffer ...]
+`,
+            truncated_bytes: dropped,
+            byte_offset: totalBytesStreamed
+          }
+        });
       }
+      totalBytesStreamed += text.length;
       if (Date.now() - spawnTime < 1e4 && !authFailure) {
         const authError = containsAuthError(fullOutput + stderr);
         if (authError) {
@@ -5406,10 +5181,9 @@ ${source_default.red("!")} Claude Code auth failure detected: "${authError}"`);
           { output_chunk: chunk }
         ).catch(() => {
         });
-        postTaskEvent(options.creds, options.taskId, {
+        options.eventQueue?.enqueue({
           event_type: "output",
-          content: { chunk, byte_offset: lastProgressBytes }
-        }).catch(() => {
+          content: { chunk, byte_offset: totalBytesStreamed }
         });
       }
       if (Date.now() - lastRedirectCheck > 1e4) {
@@ -5517,9 +5291,9 @@ ${source_default.red("!")} Claude Code auth failure (stderr): "${authError}"`);
     child.on("close", (code, signal) => {
       _activeChild = null;
       if (signal === "SIGKILL") {
-        resolve2({ exitCode: 137, stderr, output: fullOutput, authFailure });
+        resolve({ exitCode: 137, stderr, output: fullOutput, authFailure });
       } else {
-        resolve2({ exitCode: code ?? 1, stderr, output: fullOutput, authFailure });
+        resolve({ exitCode: code ?? 1, stderr, output: fullOutput, authFailure });
       }
     });
     child.on("error", (err) => {
@@ -5620,45 +5394,14 @@ async function runAgent(options) {
     console.log();
     process.exit(1);
   }
-  if (process.env.CV_DEBUG) {
-    console.log(source_default.gray(`   PATH: ${process.env.PATH}`));
-    console.log(source_default.gray(`   HOME: ${process.env.HOME}`));
-    console.log(source_default.gray(`   SHELL: ${process.env.SHELL}`));
-  }
-  let claudeBinary = "claude";
   try {
     (0, import_node_child_process5.execSync)("claude --version", { stdio: "pipe", timeout: 5e3 });
   } catch {
-    const candidates = [
-      "/usr/local/bin/claude",
-      "/opt/homebrew/bin/claude",
-      `${process.env.HOME}/.npm-global/bin/claude`,
-      `${process.env.HOME}/.nvm/versions/node/*/bin/claude`
-    ];
-    let found = false;
-    for (const candidate of candidates) {
-      try {
-        const resolved = (0, import_node_child_process5.execSync)(`ls ${candidate} 2>/dev/null | head -1`, { encoding: "utf8", timeout: 3e3 }).trim();
-        if (resolved) {
-          (0, import_node_child_process5.execSync)(`${resolved} --version`, { stdio: "pipe", timeout: 5e3 });
-          claudeBinary = resolved;
-          found = true;
-          console.log(source_default.yellow("!") + ` Claude Code found at ${resolved} (not on PATH)`);
-          break;
-        }
-      } catch {
-      }
-    }
-    if (!found) {
-      console.log();
-      console.log(source_default.red("Claude Code CLI not found.") + " Install it first:");
-      console.log(`   ${source_default.cyan("npm install -g @anthropic-ai/claude-code")}`);
-      console.log();
-      console.log(source_default.gray(`   Current PATH: ${process.env.PATH}`));
-      console.log(source_default.gray("   If running via Launch Agent, ensure PATH includes the directory where claude is installed."));
-      console.log();
-      process.exit(1);
-    }
+    console.log();
+    console.log(source_default.red("Claude Code CLI not found.") + " Install it first:");
+    console.log(`   ${source_default.cyan("npm install -g @anthropic-ai/claude-code")}`);
+    console.log();
+    process.exit(1);
   }
   const { env: claudeEnv, usingApiKey } = await getClaudeEnv();
   const authCheck = await checkClaudeAuth();
@@ -5699,80 +5442,6 @@ async function runAgent(options) {
       console.log();
     }
   }
-  {
-    const isGitRepo = require("fs").existsSync(require("path").join(workingDir, ".git"));
-    if (!isGitRepo) {
-      console.log(source_default.gray("   Bootstrap: initializing git repo..."));
-      try {
-        (0, import_node_child_process5.execSync)("git init && git checkout -b main", { cwd: workingDir, stdio: "pipe" });
-      } catch {
-      }
-    }
-    const claudeMdPath = require("path").join(workingDir, "CLAUDE.md");
-    if (!require("fs").existsSync(claudeMdPath)) {
-      const name = require("path").basename(workingDir);
-      const template = `# ${name}
-
-## Overview
-[Describe your project here]
-
-## Build & Run
-[How to build and run this project]
-`;
-      try {
-        require("fs").writeFileSync(claudeMdPath, template);
-        console.log(source_default.gray("   Bootstrap: created CLAUDE.md"));
-      } catch {
-      }
-    }
-    const gitignorePath = require("path").join(workingDir, ".gitignore");
-    try {
-      const fs3 = require("fs");
-      const credPatterns = ".env\n.env.*\n.claude/\n.claude.json\n.credentials*\n*.pem\n*.key\n.ssh/\n.gnupg/\n.npm/\n.config/\n.zsh_history\n.bash_history\nnode_modules/\n.DS_Store\n";
-      let existing = "";
-      try {
-        existing = fs3.readFileSync(gitignorePath, "utf-8");
-      } catch {
-      }
-      if (!existing.includes(".claude/")) {
-        const prefix = existing && !existing.endsWith("\n") ? "\n" : "";
-        fs3.writeFileSync(gitignorePath, existing + prefix + "# Credentials (auto-added by cv-agent)\n" + credPatterns);
-        console.log(source_default.gray("   Bootstrap: .gitignore credential protection added"));
-      }
-    } catch {
-    }
-    const cvDir = require("path").join(workingDir, ".cv");
-    if (!require("fs").existsSync(cvDir)) {
-      try {
-        require("fs").mkdirSync(cvDir, { recursive: true });
-      } catch {
-      }
-    }
-    if (creds.CV_HUB_PAT) {
-      try {
-        const existing = (0, import_node_child_process5.execSync)('git remote get-url cv-hub 2>/dev/null || echo ""', {
-          cwd: workingDir,
-          encoding: "utf8",
-          timeout: 5e3
-        }).trim();
-        if (!existing) {
-          const name = require("path").basename(workingDir);
-          const gitHost = "git.hub.controlvector.io";
-          let user = "user";
-          try {
-            const sharedPath = require("path").join(require("os").homedir(), ".config", "controlvector", "credentials.json");
-            const shared = JSON.parse(require("fs").readFileSync(sharedPath, "utf-8"));
-            if (shared.username) user = shared.username;
-          } catch {
-          }
-          const remoteUrl = `https://${gitHost}/${user}/${name}.git`;
-          (0, import_node_child_process5.execSync)(`git remote add cv-hub ${remoteUrl}`, { cwd: workingDir, stdio: "pipe" });
-          console.log(source_default.gray(`   Bootstrap: remote cv-hub \u2192 ${remoteUrl}`));
-        }
-      } catch {
-      }
-    }
-  }
   let detectedRepoId;
   try {
     const remoteUrl = (0, import_node_child_process5.execSync)("git remote get-url origin 2>/dev/null", {
@@ -5956,6 +5625,14 @@ ${source_default.red("Timeout")} Task timed out after ${formatDuration(timeoutMs
     console.log(source_default.gray(`   Git remote: ${remoteInfo.remoteName} -> ${remoteInfo.remoteUrl}`));
   }
   const prompt = buildClaudePrompt(task);
+  const spillPath = path2.join(os3.tmpdir(), "cva-event-queue", `${task.id}.ndjson`);
+  const eventQueue = new EventQueue({
+    spillPath,
+    poster: async (event) => {
+      await postTaskEvent(creds, task.id, event);
+    }
+  });
+  await eventQueue.loadSpill();
   try {
     const mode = options.autoApprove ? "auto-approve" : "relay";
     console.log(`\u{1F680} ${source_default.bold.green("RUNNING")}   \u2014 Launching Claude Code (${mode})...`);
@@ -5971,7 +5648,8 @@ ${source_default.red("Timeout")} Task timed out after ${formatDuration(timeoutMs
         taskId: task.id,
         executorId: state.executorId,
         spawnEnv: claudeEnv,
-        machineName: state.machineName
+        machineName: state.machineName,
+        eventQueue
       });
     } else {
       result = await launchRelayMode(prompt, {
@@ -5980,7 +5658,8 @@ ${source_default.red("Timeout")} Task timed out after ${formatDuration(timeoutMs
         executorId: state.executorId,
         taskId: task.id,
         spawnEnv: claudeEnv,
-        machineName: state.machineName
+        machineName: state.machineName,
+        eventQueue
       });
     }
     console.log(source_default.gray("\n" + "-".repeat(60)));
@@ -6041,14 +5720,13 @@ ${source_default.red("Timeout")} Task timed out after ${formatDuration(timeoutMs
         sendTaskLog(creds, state.executorId, task.id, "info", `Deploy manifest error: ${deployErr.message}`);
       }
     }
-    postTaskEvent(creds, task.id, {
+    eventQueue.enqueue({
       event_type: "completed",
       content: {
         exit_code: result.exitCode,
         duration_seconds: Math.round((Date.now() - startTime) / 1e3),
         files_changed: allChangedFiles.length
       }
-    }).catch(() => {
     });
     if (result.exitCode === 0) {
       if (allChangedFiles.length > 0) {
@@ -6073,14 +5751,13 @@ ${source_default.red("Timeout")} Task timed out after ${formatDuration(timeoutMs
       console.log();
       console.log(`\u2705 ${source_default.bold.green("COMPLETED")} \u2014 Duration: ${elapsed}`);
       printBanner("COMPLETED", elapsed, allChangedFiles, postGitState.headSha);
-      postTaskEvent(creds, task.id, {
+      eventQueue.enqueue({
         event_type: "output_final",
         content: {
           output: result.output.slice(-MAX_OUTPUT_FINAL_BYTES),
           exit_code: result.exitCode,
           duration_seconds: Math.round((Date.now() - startTime) / 1e3)
         }
-      }).catch(() => {
       });
       await withRetry(
         () => completeTask(creds, state.executorId, task.id, payload),
@@ -6169,6 +5846,10 @@ ${source_default.red("!")} Task error: ${err.message}`);
   } finally {
     clearInterval(heartbeatTimer);
     if (timeoutTimer) clearTimeout(timeoutTimer);
+    try {
+      await eventQueue.close();
+    } catch {
+    }
     state.currentTaskId = null;
     state.lastTaskEnd = Date.now();
   }
@@ -6228,7 +5909,7 @@ async function promptForToken() {
     input: process.stdin,
     output: process.stdout
   });
-  return new Promise((resolve2) => {
+  return new Promise((resolve) => {
     rl.question("Enter your CV-Hub PAT token: ", (answer) => {
       rl.close();
       const token = answer.trim();
@@ -6236,7 +5917,7 @@ async function promptForToken() {
         console.log(source_default.red("No token provided."));
         process.exit(1);
       }
-      resolve2(token);
+      resolve(token);
     });
   });
 }
@@ -6515,7 +6196,7 @@ function statusCommand() {
 
 // src/index.ts
 var program2 = new Command();
-program2.name("cva").description('CV-Hub Agent \u2014 bridges Claude Code with CV-Hub task dispatch.\n\nRun "cva setup" to get started.').version(true ? "1.9.2" : "1.6.0");
+program2.name("cva").description('CV-Hub Agent \u2014 bridges Claude Code with CV-Hub task dispatch.\n\nRun "cva setup" to get started.').version(true ? "1.10.0" : "1.6.0");
 program2.addCommand(setupCommand());
 program2.addCommand(agentCommand());
 program2.addCommand(authCommand());