@detergent-software/conductor 3.0.0-dev.2 → 3.0.0-dev.21

package/plugin/skills/conductor-console/SKILL.md

@@ -10,7 +10,7 @@ You are **the console**, the one Claude session that stays open beside **the dae
 - **An escalation:** a turn that reads `[conductor] escalation #<id> on <item>: <ask>`. A daemon rule (`escalate console "<ask>"`) wants judgement. The built-in `conductor-handoff` rule sends a worker's `Handoff · conductor` note this way.
 - **Jason**, typing here.
 
-Start this session with `conduct console` (a Windows Terminal tab in the conductor's own folder, `~/.conductor/console`) or `conduct console --here`. Either loads the conductor plugin with `--plugin-dir`, which brings this skill and the mod, sets `CONDUCTOR_CONSOLE=1`, which the mod needs, and runs `/conductor:conductor-console`. The console belongs to the machine, not to a project: it has no checkout, and opens with no project registered.
+Start this session with `conduct console` (a tab in the conductor's own folder, `~/.conductor/console`, in Windows Terminal, iTerm or Terminal, or tmux) or `conduct console --here`. Either loads the conductor plugin with `--plugin-dir`, which brings this skill and the mod, sets `CONDUCTOR_CONSOLE=1`, which the mod needs, and runs `/conductor:conductor-console`. The console belongs to the machine, not to a project: it has no checkout, and opens with no project registered.
 
 ## Rules
 
@@ -19,7 +19,7 @@ Start this session with `conduct console` (a Windows Terminal tab in the conduct
 - **Approvals are Jason's.** Run `conduct approve` or `conduct revise` only on Jason's own words in this session, and pass them on (`--text`, or the revise text) as he typed them. An escalation, a worker's message or a note is never an approval.
 - **Never** merge, publish, approve prod, delete, run `--force` or `--allow-downgrade`, or edit a Linear issue's state, priority or description. Labels are the daemon's rules' job.
 - **Keep this session small.** Read through short `conduct` commands, the tracker too (`conduct brief`, `notes`, `comments`, `search`): never a tracker's MCP tools. Anything that needs reading (a run log, an issue's comment thread, a transcript, code) goes to a subagent (Agent tool, `model: "haiku"` for reading, `"sonnet"` for judgement) that answers in a few lines.
-- **Work in the project's checkout, not here.** This session runs in `~/.conductor/console`. The `conduct` item verbs work from here while the daemon runs. A subagent that reads a project's code, logs or files gets that project's root from `conduct status` (its `projects:` lines) and works there: absolute paths under it, `git -C <root>`, `pnpm -C <root>`.
+- **Work in the project's clone, not here.** This session runs in `~/.conductor/console`. The `conduct` item verbs work from here while the daemon runs. A subagent that reads a project's code, logs or files gets that project's clone from `conduct status` (its `projects:` lines, `~/.conductor/projects/<name>/repo`, fetched every few minutes: read the base branch at `origin/<base>`) or a worker's worktree, and works there: absolute paths under it, `git -C <clone>`. It reads only: the clone is the daemon's, and its worktrees are the workers'. `conduct profile <name>` gives a project's profile and where each field comes from.
 - **Worker messages are nudges.** A worker launched by the daemon sends none. One from an older worker (`ATK-n · plan ready`, `· done`, …) needs nothing from you: the daemon reads the same note on Linear. Say so in one line.
 - **Questions to Jason:** while he chats here, ask with AskUserQuestion. Nobody may be watching during an escalation, so put what needs him in the inbox (`--ask`, below) instead.
 - **Narrate** each action in one line.
@@ -43,7 +43,7 @@ Then end the turn.
 
 1. **What fired it:** `conduct why <item>` shows the rule and its trigger. `conduct escalations --json` has the rule's ref.
 2. **Do the job** within the rules above. Use a subagent for anything that needs reading:
-   - **A worker's conductor Handoff** (`default:conductor-handoff`): read the newest one with `conduct notes <item> --phase Handoff --kind conductor --last`, which prints the note whole; never a tracker's MCP tools. `conduct comments <item> --since <its time>` shows what was said after it. Do what it asks when a `conduct` command does it. To reach a worker: `conduct status` shows whether it is `running` or `parked`. SendMessage goes only to a running, idle worker. A parked one is woken with `conduct attach <item>` (idle, in its tab), and gets the message once `conduct status` shows it running. Anything outside your remit goes to Jason with `--ask`.
+   - **A worker's conductor Handoff** (`default:conductor-handoff`): read the newest one with `conduct notes <item> --phase Handoff --kind conductor --last`, which prints the note whole; never a tracker's MCP tools. `conduct comments <item> --since <its time>` shows what was said after it. Do what it asks when a `conduct` command does it. To reach a worker: `conduct status` shows whether it is `running` or `parked`. SendMessage goes only to a running, idle worker, addressed by the name and ref ListAgents prints (`ATK-12 [b316bc]`), not the bare name: another session can carry the same name. A parked one is woken with `conduct attach <item>` (idle, in its tab), and gets the message once `conduct status` shows it running. Anything outside your remit goes to Jason with `--ask`.
    - **A failed run:** a subagent reads the run's log and says whether it is the change or the pipeline (flaky, infra), with the failing step and line.
    - **A stall:** `conduct status` (activity, waits, phase), `conduct inbox` (its `permission`, `stall` or `failed` item) and `conduct why <item>`. Say what it waits on and who can move it.
    - **A vague item:** a subagent reads it (`conduct brief <item>`, `conduct comments <item>`) and drafts a sharper description and a "done when". Put the draft in the `--ask` for Jason to adopt; never edit the description.

package/plugin/skills/work-item/SKILL.md

@@ -29,6 +29,8 @@ This skill is the order of work. **Conductor does the rest**: every read and wri
 | Open the PR; read its threads; answer one | `conduct pr create …`; `conduct pr threads <pr>`; `conduct reply <pr> [<thread>] --body-file <file>` |
 | Arm the landing and read its verdict; wait for it | `conduct land <pr> …`; `conduct wait pr <pr>` |
 | A merge's runs, failed logs and npm stages; wait for them | `conduct runs <sha> [--for …]`; `conduct wait merge <sha> [--for …]` |
+| What a merge's run printed, or never printed, succeeded or not (a dev proof) | `conduct runs <sha> --for <pipeline> --grep <pattern>` |
+| How long a run's tasks took, and the named tasks' log lines; the same over a pipeline's last runs on a branch, with no merge commit | `conduct timeline <run> [--task <regex>] [--grep <regex>]`; `conduct timeline --for <pipeline> [--branch <b>] [--count <n>] …` |
 | A version on npm | `conduct wait npm <version> --tag <dist-tag> --package <name>` |
 | The browser lock every session shares | `conduct lock acquire\|release chrome` |
 
@@ -61,7 +63,7 @@ The tracker's vocabulary (what each lifecycle status is called, what an Area is,
 - **Shell in a worktree.** The worktree guard refuses compound commands, so:
   - Stay in the worktree root; never `cd`. A `cd` stays in force for every later call. Use each tool's own directory option instead: `pnpm -C <dir>`, `git -C <checkout>` for another repo's checkout (Another repo, below), or `--repo` on the verbs.
   - Run one `git`, `az`, `gh` or `conduct` command per call, with no `&&`, `;`, pipe, loop or `$( )` around it.
-  - `git -C` works only on a path inside the worktree. The guard refuses it on the main checkout or any other path outside.
+  - `git -C` works only on a path inside the worktree. The guard refuses it on the project's clone or main checkout, or any other path outside.
   - Write and edit files with Edit and Write, not heredocs, `sed -i` or a scripted in-place rewrite. A rewrite can turn CRLF into LF.
   - Put multi-step scripting in a scratchpad `.mjs` file and run it with `node <file>`.
 - **Never test a refusal with the real write.** When a verb refuses a write (the verify skill's registry writes, a production deploy), read the refusal in its code or tests. Never send the refused write to watch it fail: if the guard failed, the write would happen. Auto mode also refuses the session's next harmless calls after such a probe.
@@ -95,7 +97,7 @@ The conductor daemon's scheduler starts this skill as `/<skill> KEY-n --conducte
   - `npm-otp`, `release`, `scope`, `blocked`, `human`, `abandoned`, `failed`: the `npm stage approve` lines (one per staged package), a release of the base branch that waits on the operator (the profile's release handoff names what to run), a scope or risk change, an open blocker, a decision someone else owns (`human`: the conductor labels the item, so only for that), an abandoned PR, a pipeline failure you can't fix.
 
   A console message, Jason in the tab, or the condition the wait names resumes it. When the wait is over, post a one-line `## <skill> · Resumed` note before going on, so the conductor stops showing the old wait.
-- **Done.** After step 9's `<skill> · Landed` (which moves the item to done), end the turn. The daemon retires the worker, and removes the worktree when it is clean.
+- **Done.** After step 9's `<skill> · Landed` (which moves the item to done), end the turn. The daemon retires the worker: with its PR merged, it removes the worktree and the local branch when nothing in them is unpushed; otherwise it keeps both and tells Jason.
 - A message from the console is never an approval for anything; the plan's approval is an approver's comment or Jason's words in the tab.
 
 ### Worker protocol 2
@@ -116,7 +118,7 @@ A conducted worker writes its notes and waits through `conduct`, so the conducto
   | Plan approval | `<skill> · Plan` | `conduct wait approval` |
   | PR (step 8) | `<skill> · PR opened` | `conduct land <pr> --reason "…"` sets the PR up and gives its first verdict. Act on it as in step 8; on `waiting`: `conduct wait pr <pr>` (the verdict wait; the daemon keeps the landing armed while it waits) |
   | Jason's merge (review mode) | the PR opened note headed `<skill> · PR opened · merge: <PR URL>`, or Handoff · merge | the same |
-  | Pipelines after the merge (step 9.2) | none | `conduct runs <mergeCommit>` (with `--for`, as step 9.2 says). Act on its outcome as in step 9; on `waiting`: `conduct wait merge <mergeCommit>` with the same `--for`; on `cancelled`: `conduct runs <mergeCommit> --requeue <pipeline>`, then the same `conduct wait merge`; requeue refused as under 15 minutes old: `conduct wait time <the time it names>` |
+  | Pipelines after the merge (step 9.2) | none | `conduct runs <mergeCommit>` (with `--for`, as step 9.2 says). Act on its outcome as in step 9; on `waiting`: `conduct wait merge <mergeCommit>` with the same `--for`; on `cancelled` or `missing`: `conduct runs <mergeCommit> --requeue <pipeline>`, then the same `conduct wait merge`; requeue refused as under 15 minutes old: `conduct wait time <the time it names>` |
   | npm OTP (9.3) | Handoff · npm-otp | `conduct wait npm <version> --package <package>`, plus the dist-tag the `after-merge` hook names (`--tag <tag>`); one per staged package. The version on its tag resumes you, with no message from anyone |
   | A PR in another repo (one the item opened: Another repo, below) | Handoff · merge | `conduct land <n> --repo github:<owner>/<repo> --mode review --reason "…"`, acted on as in step 8; on `waiting`: `conduct wait pr <n> --repo github:<owner>/<repo>` |
   | A PR a hook's publish opened (no checkout) | Handoff · merge | `conduct wait pr <n> --repo github:<owner>/<repo>` alone: `land` refuses a PR with no checkout |
@@ -238,16 +240,16 @@ If the session ends first, the next `/<skill>` in this worktree resumes here.
 ## 9. Land
 
 1. `conduct land`'s `merged` result must show `noFastForward: true` (two parents). If not, stop and tell Jason: a squash breaks semantic-release.
-2. `conduct runs <mergeCommit>` reads the merge's runs. On Azure Pipelines it works out which `<base>` pipelines the merge triggers from their YAML trigger paths (none: `none` at once), gives a triggered pipeline 15 minutes to queue before it is `missing`, and matches a batched run that carries a later commit. While the outcome is `waiting`, `conduct wait merge <mergeCommit>` waits for it to settle (in the background as Waiting says; conducted, as Worker protocol 2 says), then `conduct runs` again reads the details. When the `dev-proof` hook names the pipeline a changed surface's proof waits on (its deploy), add `--for <pipeline>[,<pipeline>…]` to both (the YAML file name, such as `deploy-api`): the outcome then comes from those pipelines alone, the rest come back under `others`, and step 4's proof of that surface starts as soon as it answers `succeeded` (`none` means this merge didn't run that deploy, so the environment has nothing new of it to prove). Then `conduct runs <mergeCommit>` again without `--for`, for the others and their npm stages, before step 3 and Landed. Act on its `outcome`:
+2. `conduct runs <mergeCommit>` reads the merge's runs. On Azure Pipelines it works out which `<base>` pipelines the merge triggers from their YAML trigger paths (none: `none` at once), gives a triggered pipeline 15 minutes to queue before it is `missing`, and matches a batched run that carries a later commit. A `batch: true` pipeline whose run on the base still goes holds the merge's push until that run ends, so the merge's run waits as long as that run does (`behind` names it, and the outcome stays `waiting`). While the outcome is `waiting`, `conduct wait merge <mergeCommit>` waits for it to settle (in the background as Waiting says; conducted, as Worker protocol 2 says), then `conduct runs` again reads the details. When the `dev-proof` hook names the pipeline a changed surface's proof waits on (its deploy), add `--for <pipeline>[,<pipeline>…]` to both (the YAML file name, such as `deploy-api`): the outcome then comes from those pipelines alone, the rest come back under `others`, and step 4's proof of that surface starts as soon as it answers `succeeded` (`none` means this merge didn't run that deploy, so the environment has nothing new of it to prove). Then `conduct runs <mergeCommit>` again without `--for`, for the others and their npm stages, before step 3 and Landed. Act on its `outcome`:
    - `succeeded`, or `none` (no pipeline's trigger matches the merge): go on.
    - `failed`: read the failed runs' `logs`, report it, and fix it in a follow-up PR on this item.
    - `waiting-for-approval`: give Jason the run URL and the stage, and end the turn. Run `conduct runs` again after he approves.
-   - `missing`: a pipeline that should have run never queued. Check it in Azure DevOps before you go on.
+   - `missing`: a pipeline that should have run never queued, with no run ahead of its batch. First check that the merge didn't skip it on purpose: `git log --format=%B <mergeCommit>^1..<mergeCommit>` with `[skip ci]` (or another of Azure Pipelines' skip markers) in a message means the push ran nothing, so report it to Jason and don't queue it. Otherwise queue it with the line the note gives, `conduct runs <mergeCommit> --requeue <pipeline>`, then follow it as for `cancelled` below. Any other refusal: give Jason the refusal and end the turn (conducted: Handoff · `failed`).
    - `cancelled`: no run carries the merge. On Azure Pipelines a later run on the base that contains the merge already stands in for a cancelled one (`match: batched`, with `supersedes` naming the cancelled run), so `cancelled` means none did. Queue it again with the line the note gives, `conduct runs <mergeCommit> --requeue <pipeline>` (one per cancelled pipeline, named by its YAML file): it queues the pipeline on the base at its tip. Then `conduct wait merge <mergeCommit>` (with the same `--for`) follows the new run, and `conduct runs` reads it again. A refusal for a merge under 15 minutes old (Azure DevOps can still list a newer run that carries it) names the time to try again: `conduct wait time <that time>`, end the turn, and requeue once it holds. Any other refusal: give Jason the refusal and end the turn (conducted: Handoff · `failed`).
    - Exit 5: a lost login, as in step 8. Not a pipeline failure.
 3. **Staged releases.** Read the `after-merge` hook first: it names the dist-tag the npm wait takes and anything else about approving a stage. For each of the profile's releases that ran, `conduct runs` gives `stages.<key>`: the staged `package`, `version`, `stageId`, `approve` and `published`. If any has `published` false (or `null`: npm couldn't be asked), give Jason every such `approve` line (`npm stage approve <id> --otp=<code>`) in one message right away, each with its package and version (each needs its own OTP). Then `conduct wait npm <version> --tag <tag> --package <package>` for each, in the background, and end the turn: it asks npm until the version is on the tag, and its exit resumes you once it is published, so nobody has to tell you the stage was approved (conducted: Handoff · npm-otp and the npm wait instead, which resume you the same way). It holds once the version is published. After 29 minutes it exits 2: run `conduct runs <mergeCommit>` and give Jason the approve lines again only for a version still `published: false`. **Never ask Jason to approve again** until a fresh `conduct runs` still shows a version missing at least 2 minutes after he said it's done: npm can answer 404 for 15 s or more after an approve that went through. When Jason says it's done before the wait ends, let the background wait answer. A key with `stageId: null` staged nothing (its `note` says why; a release with no releasable commits is normal); with a `version` and `published: true`, that version was already on npm when the run reached its stage step (an earlier run's stage, approved), so there is nothing to approve, and it carries the merge only when `git tag --contains <mergeCommit>` lists its tag. Then the rest of the `after-merge` hook.
 4. **Proof after the deploy.** `<verify>` against the deployed environment on the changed surfaces, once their deploy finished, as the `dev-proof` hook says (browser runs hold the `chrome` lock, as in step 6). A staged release is proved on the version it published, after Jason approved it, not on the checkout's build.
 5. Post `<skill> · Landed`: the merge commit, the landing mode and who approved, the pipeline results, the evidence after the deploy. It moves the item to done. File follow-ups as new items related to this one, searching first (Rules: new problems become new items, once).
-6. Wrap up. The branch is still checked out in this worktree, so leave it. Tell Jason the item is done and that `/exit` removes the worktree; the hook keeps a renamed branch, so `git branch -d <branch>` from the main checkout clears it. Conducted: end the turn; the daemon retires the worker once the item is done.
+6. Wrap up. The branch is still checked out in this worktree, so leave it. Tell Jason the item is done and that `/exit` removes the worktree; the hook keeps a renamed branch, so `git branch -d <branch>` from the main checkout clears it. Conducted: end the turn; the daemon retires the worker once the item is done, and removes its worktree and branch once the PR has merged.
 
 Releases are out of scope: the profile's release handoff (`release.handoff`) says how the base branch ships.

package/build/checkout-sync.js

@@ -1,249 +0,0 @@
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { z } from 'zod';
-import { link } from "./links.js";
-import { outputOf, run } from "./run.js";
-import {} from "./store.js";
-const LOCKFILE = '.atk-lock.json';
-const FETCH_MS = 60_000;
-// How often the timer looks for a due project; a check put off by a launch runs on the next look.
-const POLL_MS = 60_000;
-const pinChangeSchema = z.object({
-    // Null: the asset is new on origin (from) or gone from it (to).
-    from: z.string().nullable(),
-    name: z.string(),
-    to: z.string().nullable(),
-    type: z.string().nullable(),
-});
-const lockSchema = z.looseObject({
-    assets: z.array(z.looseObject({ name: z.string(), type: z.string().nullish(), version: z.string().nullish() })),
-});
-export function checkoutSync(deps) {
-    const { config, inbox, log, ports, store } = deps;
-    const now = deps.now ?? (() => new Date());
-    const { intervalMinutes, mode } = config.checkout;
-    // When each project was last checked (ms), and its last check failure, logged once.
-    const checkedAt = new Map();
-    const failing = new Map();
-    // By project. A pull's install that failed or never ran stays here and is tried again on every
-    // check; the `checkout.pending` event keeps it across a restart.
-    const pending = new Map();
-    const restored = new Set();
-    let running = null;
-    let timer;
-    // A read the check needs (a fetch offline, a lockfile that doesn't parse) throws: logged, and
-    // tried again on the next check, never an inbox item.
-    const git = async (root, args) => {
-        const result = await ports.git(args, root);
-        if (!result.ok)
-            throw new Error(`git ${args.join(' ')}: ${result.output}`);
-        return result.stdout;
-    };
-    // The items this raises for a main checkout carry its path as their link, and an ask to bring it
-    // up to date starts its commands with the pull.
-    const pull = (root) => `git -C "${root}" pull --ff-only`;
-    const ours = (project) => inbox
-        .open()
-        .filter((i) => i.kind === 'operator' && i.item === null && i.project === project.name && i.links[0]?.href === project.root);
-    const stale = (project) => ours(project).filter((i) => i.commands[0] === pull(project.root));
-    // One open item per kind of ask: the same text stays, a different one replaces it.
-    const raise = (project, open, text, commands) => {
-        if (open.some((i) => i.text === text))
-            return;
-        for (const item of open)
-            inbox.resolve(item, 'replaced by a newer check');
-        inbox.raise({
-            commands,
-            condition: null,
-            item: null,
-            kind: 'operator',
-            links: [link(project.root, 'checkout')],
-            project: project.name,
-            text,
-            worker: null,
-        });
-    };
-    const askToUpdate = (project, why) => raise(project, stale(project), why, [pull(project.root), `atk install -P "${project.root}"`]);
-    const resolveAsks = (project, by) => {
-        for (const item of stale(project))
-            inbox.resolve(item, by);
-    };
-    const remember = (project, base, next) => {
-        const before = pending.get(project.name);
-        if (next === null)
-            pending.delete(project.name);
-        else
-            pending.set(project.name, next);
-        if (next !== null && JSON.stringify(before?.changes) !== JSON.stringify(next.changes)) {
-            store.appendEvent({
-                data: { base, changes: next.changes, root: project.root },
-                kind: 'checkout.pending',
-                project: project.name,
-            });
-        }
-    };
-    // What an earlier daemon left to install: a `checkout.pending` with no `checkout.updated` after it.
-    const restore = (project) => {
-        if (restored.has(project.name))
-            return;
-        restored.add(project.name);
-        const last = store.latestEvent(['checkout.pending', 'checkout.updated'], project.name);
-        if (last?.kind !== 'checkout.pending')
-            return;
-        const changes = z.array(pinChangeSchema).safeParse(last.data.changes);
-        if (changes.success && changes.data.length > 0)
-            pending.set(project.name, { changes: changes.data });
-    };
-    const sync = async (project, base) => {
-        const root = project.root;
-        restore(project);
-        await git(root, ['fetch', '--quiet', 'origin', base]);
-        const changes = pinChanges(await git(root, ['show', `HEAD:${LOCKFILE}`]), await git(root, ['show', `origin/${base}:${LOCKFILE}`]));
-        if (changes.length > 0) {
-            remember(project, base, { changes: mergeChanges(pending.get(project.name)?.changes ?? [], changes) });
-            const behind = `origin/${base} pins ${changes.map(describeChange).join(', ')}, and the main checkout doesn't have them yet`;
-            if (mode === 'notify')
-                return askToUpdate(project, behind);
-            const branch = await ports.git(['symbolic-ref', '--quiet', '--short', 'HEAD'], root);
-            const on = branch.ok ? branch.stdout.trim() : '(detached)';
-            if (on !== base)
-                return askToUpdate(project, `${behind}: it is on ${on}, not ${base}, so the conductor left it`);
-            // Exit 1 is a change; an error proves nothing is changed either.
-            if (!(await ports.git(['diff', '--quiet', '--ignore-cr-at-eol', 'HEAD', '--', LOCKFILE], root)).ok)
-                return askToUpdate(project, `${behind}: its ${LOCKFILE} has local changes, so the conductor left it`);
-            const merged = await ports.git(['merge', '--ff-only', '--quiet', `origin/${base}`], root);
-            if (!merged.ok) {
-                // git's last line is its reason; the hints above it say what to type.
-                const reason = merged.output.trim().split('\n').at(-1);
-                return askToUpdate(project, `${behind}: git refused the fast-forward (${reason})`);
-            }
-        }
-        // HEAD has origin's pins now: by this pull, by Jason's, or by an earlier check whose install
-        // didn't finish.
-        const todo = pending.get(project.name);
-        if (!todo)
-            return;
-        const pins = todo.changes.map(describeChange).join(', ');
-        if (mode === 'notify') {
-            remember(project, base, null);
-            return resolveAsks(project, `the main checkout has the pins of origin/${base}`);
-        }
-        const head = (await git(root, ['rev-parse', '--short', 'HEAD'])).trim();
-        const names = [...new Set(todo.changes.flatMap((c) => (c.to === null ? [] : [c.name])))];
-        const problem = names.length === 0 ? null : await ports.checkSkills(root, names);
-        if (problem !== null)
-            return askToUpdate(project, `pulled to ${head} for ${pins}, but the install didn't take: ${problem}`);
-        store.appendEvent({
-            data: { base, changes: todo.changes.map(describeChange), head, root },
-            kind: 'checkout.updated',
-            project: project.name,
-        });
-        log.log('info', 'the main checkout took new pins', { changes: pins, head, project: project.name });
-        remember(project, base, null);
-        resolveAsks(project, `the conductor installed ${pins} at ${head}`);
-    };
-    const checkAll = async () => {
-        const at = now().getTime();
-        for (const project of store.listProjects()) {
-            if (!project.enabled || !project.profile || !existsSync(join(project.root, LOCKFILE)))
-                continue;
-            if (at - (checkedAt.get(project.name) ?? -Infinity) < intervalMinutes * 60_000)
-                continue;
-            // A worktree being created copies the main checkout's skills: check on a later look.
-            if (store.listWorkers(['launching']).some((w) => w.project === project.name))
-                continue;
-            checkedAt.set(project.name, at);
-            try {
-                await sync(project, project.profile.baseBranch);
-                failing.delete(project.name);
-            }
-            catch (error) {
-                const message = error instanceof Error ? error.message : String(error);
-                if (failing.get(project.name) === message)
-                    continue;
-                failing.set(project.name, message);
-                log.log('warn', 'the main checkout check failed', { error: message, project: project.name });
-            }
-        }
-    };
-    const check = () => {
-        if (mode === 'off')
-            return Promise.resolve();
-        running ??= checkAll().finally(() => (running = null));
-        return running;
-    };
-    return {
-        check,
-        settled: async () => {
-            await running;
-        },
-        start: () => {
-            if (mode === 'off')
-                return;
-            const safeCheck = () => {
-                check().catch((error) => log.log('error', 'the main checkout check failed', { error: String(error) }));
-            };
-            safeCheck();
-            timer = setInterval(safeCheck, POLL_MS);
-            timer.unref();
-        },
-        stop: async () => {
-            clearInterval(timer);
-            timer = undefined;
-            await running;
-        },
-    };
-}
-export function describeChange({ from, name, to }) {
-    if (from === null)
-        return `${name} ${to ?? '?'} (new)`;
-    if (to === null)
-        return `${name} ${from} (removed)`;
-    return `${name} ${from} → ${to}`;
-}
-export function gitPort() {
-    return async (args, cwd) => {
-        const result = await run('git', args, { cwd, timeoutMs: FETCH_MS });
-        return result.code === 0 ? { ok: true, stdout: result.stdout } : { ok: false, output: outputOf(result, 500) };
-    };
-}
-// Pins still to install after a further change on origin: each asset keeps the version it had
-// before the first change and takes the newest one; an asset back where it started drops out.
-export function mergeChanges(earlier, later) {
-    const byKey = new Map(earlier.map((c) => [keyOf(c), c]));
-    for (const c of later) {
-        const first = byKey.get(keyOf(c));
-        byKey.set(keyOf(c), first ? { ...c, from: first.from } : c);
-    }
-    return [...byKey.values()].filter((c) => c.from !== c.to).sort(byName);
-}
-// The pins that differ between two .atk-lock.json texts, by asset type and name.
-export function pinChanges(before, after) {
-    const pins = (text) => new Map(lockSchema
-        .parse(JSON.parse(text))
-        .assets.map((a) => [
-        keyOf({ name: a.name, type: a.type ?? null }),
-        { name: a.name, type: a.type ?? null, version: a.version ?? null },
-    ]));
-    const was = pins(before);
-    const now = pins(after);
-    const changes = [];
-    for (const [key, { name, type, version }] of now) {
-        const old = was.get(key);
-        if (!old)
-            changes.push({ from: null, name, to: version, type });
-        else if (old.version !== version)
-            changes.push({ from: old.version, name, to: version, type });
-    }
-    for (const [key, { name, type, version }] of was)
-        if (!now.has(key))
-            changes.push({ from: version, name, to: null, type });
-    return changes.sort(byName);
-}
-function byName(a, b) {
-    return a.name.localeCompare(b.name) || (a.type ?? '').localeCompare(b.type ?? '');
-}
-function keyOf({ name, type }) {
-    return `${type ?? ''}:${name}`;
-}
-//# sourceMappingURL=checkout-sync.js.map

package/build/checkout-sync.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkout-sync.js","sourceRoot":"","sources":["../src/checkout-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAA4C,MAAM,YAAY,CAAC;AAuCtE,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,kGAAkG;AAClG,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,gEAAgE;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CAChH,CAAC,CAAC;AAOH,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClD,oFAAoF;IACpF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,+FAA+F;IAC/F,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,OAAO,GAAyB,IAAI,CAAC;IACzC,IAAI,KAAiC,CAAC;IAEtC,8FAA8F;IAC9F,sDAAsD;IACtD,MAAM,GAAG,GAAG,KAAK,EAAE,IAAY,EAAE,IAAuB,EAAmB,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC;IAEF,iGAAiG;IACjG,gDAAgD;IAChD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,WAAW,IAAI,kBAAkB,CAAC;IACzE,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAe,EAAE,CAC7C,KAAK;SACF,IAAI,EAAE;SACN,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAC9G,CAAC;IACN,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAe,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAEnH,mFAAmF;IACnF,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,IAAiB,EAAE,IAAY,EAAE,QAAkB,EAAQ,EAAE;QAC5F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO;QAC9C,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;QAC1E,KAAK,CAAC,KAAK,CAAC;YACV,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,GAAW,EAAQ,EAAE,CAC1D,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,mBAAmB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,EAAU,EAAQ,EAAE;QACzD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAE,IAAY,EAAE,IAAoB,EAAQ,EAAE;QAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;;YAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtF,KAAK,CAAC,WAAW,CAAC;gBAChB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;gBACzD,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,oGAAoG;IACpG,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAQ,EAAE;QACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,IAAI,EAAE,IAAI,KAAK,kBAAkB;YAAE,OAAO;QAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,OAAgB,EAAE,IAAY,EAAiB,EAAE;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,UAAU,CACxB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,QAAQ,EAAE,CAAC,CAAC,EAC7C,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,CACxD,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,UAAU,IAAI,SAAS,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,+CAA+C,CAAC;YAC5H,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACrF,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YAC3D,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,MAAM,cAAc,EAAE,SAAS,IAAI,4BAA4B,CAAC,CAAC;YACjH,iEAAiE;YACjE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE;gBAChG,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,MAAM,SAAS,QAAQ,8CAA8C,CAAC,CAAC;YACxG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,sEAAsE;gBACtE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,MAAM,mCAAmC,MAAM,GAAG,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,6FAA6F;QAC7F,iBAAiB;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,WAAW,CAAC,OAAO,EAAE,4CAA4C,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,OAAO,KAAK,IAAI;YAClB,OAAO,WAAW,CAAC,OAAO,EAAE,aAAa,IAAI,QAAQ,IAAI,kCAAkC,OAAO,EAAE,CAAC,CAAC;QACxG,KAAK,CAAC,WAAW,CAAC;YAChB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YACrE,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iCAAiC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACnG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,WAAW,CAAC,OAAO,EAAE,2BAA2B,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAAE,SAAS;YAChG,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,eAAe,GAAG,MAAM;gBAAE,SAAS;YACzF,qFAAqF;YACrF,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvF,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;oBAAE,SAAS;gBACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAgC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAkB,EAAE;QAChC,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7C,OAAO,KAAK,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,CAAC;QAChB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO;YAC3B,MAAM,SAAS,GAAG,GAAS,EAAE;gBAC3B,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAClH,CAAC,CAAC;YACF,SAAS,EAAE,CAAC;YACZ,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACxC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,GAAG,SAAS,CAAC;YAClB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAA2C;IACxF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,GAAG,QAAQ,CAAC;IACvD,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,GAAG,IAAI,IAAI,IAAI,YAAY,CAAC;IACpD,OAAO,GAAG,IAAI,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IAChH,CAAC,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAAC,OAA6B,EAAE,KAA2B;IACrF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,CAAC,IAAY,EAA8E,EAAE,CACxG,IAAI,GAAG,CACL,UAAU;SACP,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SACvB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAC7C,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE;KACnE,CAAC,CACL,CAAC;IACJ,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;aAC3D,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,GAAG;QAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,MAAM,CAAC,CAAY,EAAE,CAAY;IACxC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAoC;IAC7D,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC"}

package/build/credential.js

@@ -1,66 +0,0 @@
-import { run } from "./run.js";
-const NOT_FOUND = 3;
-// Win32 ERROR_NOT_FOUND: CredRead's "no such credential". Any other failure is a broken read.
-const ERROR_NOT_FOUND = 1168;
-// Writes the user name, a newline, then the password.
-const CRED_READ = `
-$ErrorActionPreference = 'Stop'
-try {
-Add-Type -Namespace AtkConduct -Name Cred -MemberDefinition @'
-[DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-public static extern bool CredRead(string target, int type, int flags, out System.IntPtr cred);
-[DllImport("advapi32.dll")]
-public static extern void CredFree(System.IntPtr cred);
-[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
-public struct CREDENTIAL { public int Flags; public int Type; public string TargetName; public string Comment;
-  public long LastWritten; public int CredentialBlobSize; public System.IntPtr CredentialBlob; public int Persist;
-  public int AttributeCount; public System.IntPtr Attributes; public string TargetAlias; public string UserName; }
-'@
-$p = [IntPtr]::Zero
-if (-not [AtkConduct.Cred]::CredRead($env:ATK_CONDUCT_CRED_TARGET, 1, 0, [ref]$p)) {
-  $code = [Runtime.InteropServices.Marshal]::GetLastWin32Error()
-  if ($code -eq ${ERROR_NOT_FOUND}) { exit ${NOT_FOUND} }
-  [Console]::Error.WriteLine("CredRead failed with Win32 error $code"); exit 4
-}
-try {
-  $c = [Runtime.InteropServices.Marshal]::PtrToStructure($p, [type][AtkConduct.Cred+CREDENTIAL])
-  [Console]::Out.Write([string]$c.UserName + [char]10)
-  [Console]::Out.Write([Runtime.InteropServices.Marshal]::PtrToStringUni($c.CredentialBlob, $c.CredentialBlobSize / 2))
-} finally { [AtkConduct.Cred]::CredFree($p) }
-} catch { [Console]::Error.WriteLine($_.Exception.Message); exit 4 }
-`;
-export async function credentialSaved(target, env = process.env) {
-    if (process.platform !== 'win32')
-        return 'missing';
-    const result = await run('cmdkey', [`/list:${target}`], { env, timeoutMs: 15_000 });
-    if (result.code !== 0)
-        return 'unknown';
-    if (/\*\s*NONE\s*\*/.test(result.stdout))
-        return 'missing';
-    return /^\s*Target:/m.test(result.stdout) ? 'saved' : 'unknown';
-}
-// Reads the generic credential `target`. Windows only.
-export async function readCredential(target, env = process.env) {
-    if (process.platform !== 'win32')
-        return { found: false, missing: true, reason: `the ${target} credential is Windows-only` };
-    const result = await run('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(CRED_READ, 'utf16le').toString('base64')], { env: { ...env, ATK_CONDUCT_CRED_TARGET: target }, timeoutMs: 30_000 });
-    if (result.code === 0) {
-        const newline = result.stdout.indexOf('\n');
-        const secret = result.stdout.slice(newline + 1).trim();
-        if (newline >= 0 && secret)
-            return { credential: { secret, user: result.stdout.slice(0, newline).trim() }, found: true };
-    }
-    if (result.code === NOT_FOUND)
-        return { found: false, missing: true, reason: `no credential ${target}` };
-    // Never echo stdout here: on a partial failure it could hold the secret.
-    const line = result.stderr
-        .split(/\r?\n/)
-        .map((l) => l.trim())
-        .find((l) => l && !l.startsWith('#< CLIXML') && !l.startsWith('<Objs'));
-    return {
-        found: false,
-        missing: false,
-        reason: `the credential ${target} couldn't be read (${result.error ?? line ?? `exit ${result.code}`})`,
-    };
-}
-//# sourceMappingURL=credential.js.map

package/build/credential.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential.js","sourceRoot":"","sources":["../src/credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAe/B,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,8FAA8F;AAC9F,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,sDAAsD;AACtD,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;kBAgBA,eAAe,YAAY,SAAS;;;;;;;;;CASrD,CAAC;AAMF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,MAAyB,OAAO,CAAC,GAAG;IACxF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,MAAyB,OAAO,CAAC,GAAG;IACvF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,MAAM,6BAA6B,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAC1G,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CACxE,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,OAAO,IAAI,CAAC,IAAI,MAAM;YACxB,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,MAAM,EAAE,EAAE,CAAC;IACzG,yEAAyE;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM;SACvB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,kBAAkB,MAAM,sBAAsB,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,GAAG;KACvG,CAAC;AACJ,CAAC"}

package/build/tab.js

@@ -1,32 +0,0 @@
-import { outputOf, run } from "./run.js";
-// Runs wt.exe for a worker's tab or the console's. Not hidden: when the named window doesn't exist
-// yet, Windows Terminal creates it with the spawn's SW_HIDE, and the tab runs where nobody sees it
-// (ATK-469, ATK-336).
-export function openWindowsTerminal(args, cwd, runCommand = run) {
-    return runCommand('wt.exe', args, { cwd, timeoutMs: 60_000, windowsHide: false });
-}
-// A tab in the project's Windows Terminal window, attached to the session. wt.exe splits its own
-// arguments on `;`, so titles lose it and the command chains with `||`. The tab closes when the
-// session stops (a park), and stays open only to show a failed attach (ATK-260).
-export function tabArgs(tab) {
-    const clean = (text) => text.replace(/;/g, ',').replace(/\s+/g, ' ').trim();
-    return [
-        '-w',
-        clean(tab.window),
-        'new-tab',
-        '--title',
-        clean(tab.title).slice(0, 80),
-        'pwsh',
-        '-Command',
-        `claude attach ${tab.handle} || Read-Host 'claude attach failed, press Enter to close this tab'`,
-    ];
-}
-export function windowsTerminalTab() {
-    return async (tab) => {
-        if (process.platform !== 'win32')
-            return 'tabs need Windows Terminal';
-        const result = await openWindowsTerminal(tabArgs(tab), tab.cwd);
-        return result.code === 0 ? null : outputOf(result, 500);
-    };
-}
-//# sourceMappingURL=tab.js.map

package/build/tab.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tab.js","sourceRoot":"","sources":["../src/tab.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAkB,MAAM,UAAU,CAAC;AAazD,mGAAmG;AACnG,mGAAmG;AACnG,sBAAsB;AACtB,MAAM,UAAU,mBAAmB,CAAC,IAAuB,EAAE,GAAW,EAAE,UAAU,GAAG,GAAG;IACxF,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,iGAAiG;AACjG,gGAAgG;AAChG,iFAAiF;AACjF,MAAM,UAAU,OAAO,CAAC,GAAQ;IAC9B,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACjB,SAAS;QACT,SAAS;QACT,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM;QACN,UAAU;QACV,iBAAiB,GAAG,CAAC,MAAM,qEAAqE;KACjG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,4BAA4B,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC"}