@gethmy/agent 1.24.0 → 1.25.0

package/dist/cli.js

@@ -654,6 +654,14 @@ var init_classification = __esm(() => {
   MODEL_TIERS = ["simple", "advanced", "research"];
 });
 
+// ../harmony-shared/dist/columnSort.js
+var init_columnSort = () => {};
+
+// ../harmony-shared/dist/columnCardSplit.js
+var init_columnCardSplit = __esm(() => {
+  init_columnSort();
+});
+
 // ../harmony-shared/dist/commentSerializer.js
 function sanitizeHeaderField(value) {
   return value.replace(/[\]\r\n|<>]/g, " ").trim() || "—";
@@ -1440,6 +1448,8 @@ var init_dist = __esm(() => {
   init_branchRef();
   init_cardLinks();
   init_classification();
+  init_columnCardSplit();
+  init_columnSort();
   init_commentSerializer();
   init_constants();
   init_gateEvaluate();
@@ -5684,8 +5694,27 @@ var init_artifact_judge = __esm(() => {
   init_sdk_agent_runner();
 });
 
+// src/gate-config-error.ts
+function gateConfigErrorReason(evaluation) {
+  if (!evaluation || evaluation.passed)
+    return null;
+  const structured = evaluation.structured;
+  if (!structured || typeof structured !== "object")
+    return null;
+  if (!Object.hasOwn(structured, GATE_CONFIG_ERROR_KEY))
+    return null;
+  if (structured[GATE_CONFIG_ERROR_KEY] !== true) {
+    return null;
+  }
+  const reason = structured.reason;
+  return typeof reason === "string" && reason.trim().length > 0 ? reason.trim() : "the gate cannot be measured as configured";
+}
+var GATE_CONFIG_ERROR_KEY = "configError", GATE_CONFIG_ERROR_MARK;
+var init_gate_config_error = __esm(() => {
+  GATE_CONFIG_ERROR_MARK = Object.freeze({ [GATE_CONFIG_ERROR_KEY]: true });
+});
+
 // src/command-metric.ts
-import { execFileSync as execFileSync10 } from "node:child_process";
 function parseParseMode(parse) {
   if (typeof parse !== "string" || parse.length === 0) {
     return { kind: "invalid", reason: "`parse` must be a non-empty string" };
@@ -5746,15 +5775,91 @@ function parseMetricValue(mode, stdout) {
   }
   return { ok: true, value: resolved };
 }
-function defaultRunCommand(args) {
-  const out = execFileSync10(args.command, args.args, {
-    cwd: args.cwd,
-    timeout: args.timeoutMs,
-    stdio: "pipe",
-    maxBuffer: MAX_OUTPUT_BUFFER2,
-    encoding: "utf8"
+function runMetricCommand(args) {
+  return new Promise((resolve3, reject) => {
+    let child;
+    try {
+      child = spawnInGroup(args.command, args.args, {
+        cwd: args.cwd,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+    } catch (err) {
+      reject(err);
+      return;
+    }
+    const pgid = child.pid;
+    const chunks = [];
+    let stdoutBytes = 0;
+    let stderr = "";
+    let settled = false;
+    let killReason = null;
+    let timer;
+    let drainTimer;
+    const settle = (failure) => {
+      if (settled)
+        return;
+      settled = true;
+      if (timer)
+        clearTimeout(timer);
+      if (drainTimer)
+        clearTimeout(drainTimer);
+      reapGroup(pgid);
+      if (failure)
+        reject(failure);
+      else
+        resolve3(Buffer.concat(chunks).toString("utf8"));
+    };
+    const killTree = (reason) => {
+      if (settled || killReason)
+        return;
+      killReason = reason;
+      terminateGroup(child, {
+        sigintTimeoutMs: METRIC_SIGINT_GRACE_MS,
+        sigtermTimeoutMs: METRIC_SIGTERM_GRACE_MS
+      }).catch(() => {}).then(() => {
+        settle(reason === "timeout" ? Object.assign(new Error(`command timed out after ${args.timeoutMs}ms`), { code: "ETIMEDOUT" }) : Object.assign(new Error("stdout maxBuffer exceeded"), {
+          code: "ENOBUFS"
+        }));
+      });
+    };
+    child.stdout?.on("data", (chunk) => {
+      stdoutBytes += chunk.length;
+      if (stdoutBytes > MAX_OUTPUT_BUFFER2) {
+        killTree("overflow");
+        return;
+      }
+      chunks.push(chunk);
+    });
+    child.stderr?.on("data", (chunk) => {
+      if (stderr.length >= MAX_STDERR_CHARS)
+        return;
+      stderr += chunk.toString("utf8");
+    });
+    child.once("error", (err) => settle(err));
+    const settleFromExit = (code, signal) => {
+      if (drainTimer)
+        clearTimeout(drainTimer);
+      if (code === 0) {
+        settle(null);
+        return;
+      }
+      const detail = signal ? `terminated by signal ${signal}` : `exited ${code}`;
+      settle(Object.assign(new Error(`command ${detail}`), {
+        status: typeof code === "number" ? code : null,
+        stderr
+      }));
+    };
+    child.once("exit", (code, signal) => {
+      if (killReason)
+        return;
+      if (timer)
+        clearTimeout(timer);
+      reapGroup(pgid);
+      drainTimer = setTimeout(() => settleFromExit(code, signal), STDIO_DRAIN_GRACE_MS);
+      child.once("close", () => settleFromExit(code, signal));
+    });
+    timer = setTimeout(() => killTree("timeout"), args.timeoutMs);
   });
-  return typeof out === "string" ? out : String(out);
 }
 
 class CommandMetricCollector {
@@ -5766,28 +5871,28 @@ class CommandMetricCollector {
   async collect(context) {
     const name = context.gate.metric;
     if (typeof name !== "string" || name.length === 0) {
-      return blocked(null, 'Gate kind "custom" needs a `metric` name naming an allowlisted command (e.g. { "kind": "custom", "metric": "lighthouse_performance" }).');
+      return configError(null, 'Gate kind "custom" needs a `metric` name naming an allowlisted command (e.g. { "kind": "custom", "metric": "lighthouse_performance" }).');
     }
     const def = Object.hasOwn(this.deps.metrics, name) ? this.deps.metrics[name] : undefined;
     if (!def) {
-      return blocked(name, `Metric "${name}" is not declared in this daemon's allowlist — add it under \`agent.playbooks.metrics\` to permit it.`);
+      return configError(name, `Metric "${name}" is not declared in this daemon's allowlist — add it under \`agent.playbooks.metrics\` to permit it.`);
     }
     if (typeof def.command !== "string" || def.command.length === 0) {
-      return blocked(name, `Metric "${name}" declares no \`command\`.`);
+      return configError(name, `Metric "${name}" declares no \`command\`.`);
     }
     const mode = parseParseMode(def.parse);
     if (mode.kind === "invalid") {
-      return blocked(name, `Metric "${name}": ${mode.reason}.`);
+      return configError(name, `Metric "${name}": ${mode.reason}.`);
     }
     const requested = typeof def.timeoutMs === "number" && def.timeoutMs > 0 ? Math.floor(def.timeoutMs) : DEFAULT_METRIC_TIMEOUT_MS;
     const timeoutMs = Math.min(requested, MAX_METRIC_TIMEOUT_MS);
     if (timeoutMs < requested) {
       log.warn(TAG19, `Metric "${name}" declares timeoutMs=${requested}, clamped to the ${MAX_METRIC_TIMEOUT_MS}ms ceiling`);
     }
-    const run = this.deps.runCommand ?? defaultRunCommand;
+    const run = this.deps.runCommand ?? runMetricCommand;
     let stdout;
     try {
-      stdout = run({
+      stdout = await run({
         command: def.command,
         args: def.args ?? [],
         cwd: this.deps.worktreePath,
@@ -5824,6 +5929,13 @@ function blocked(metric, reason, raw) {
     }
   };
 }
+function configError(metric, reason) {
+  const evidence = blocked(metric, reason);
+  return {
+    ...evidence,
+    structured: { ...evidence.structured, ...GATE_CONFIG_ERROR_MARK }
+  };
+}
 function describeRunFailure(err, timeoutMs) {
   const e = err;
   if (e?.code === "ENOBUFS") {
@@ -5843,12 +5955,15 @@ function describeRunFailure(err, timeoutMs) {
 function truncate(value, max) {
   return value.length <= max ? value : `${value.slice(0, max)}…[truncated]`;
 }
-var TAG19 = "command-metric", MAX_RAW_CHARS = 2000, MAX_OUTPUT_BUFFER2, MAX_METRIC_TIMEOUT_MS = 900000;
+var TAG19 = "command-metric", MAX_RAW_CHARS = 2000, MAX_OUTPUT_BUFFER2, MAX_STDERR_CHARS, MAX_METRIC_TIMEOUT_MS = 900000, METRIC_SIGINT_GRACE_MS = 2000, METRIC_SIGTERM_GRACE_MS = 3000, STDIO_DRAIN_GRACE_MS = 500;
 var init_command_metric = __esm(() => {
   init_dist();
+  init_gate_config_error();
   init_log();
+  init_process_group();
   init_types2();
   MAX_OUTPUT_BUFFER2 = 10 * 1024 * 1024;
+  MAX_STDERR_CHARS = 64 * 1024;
 });
 
 // src/gate-collectors.ts
@@ -7548,7 +7663,7 @@ var init_transitions = __esm(() => {
 });
 
 // src/review-worker.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync10 } from "node:child_process";
 
 class ReviewWorker {
   config;
@@ -7666,7 +7781,7 @@ class ReviewWorker {
         costCents: 0,
         numTurns: 0
       });
-      const repoRoot = execFileSync11("git", ["rev-parse", "--show-toplevel"], {
+      const repoRoot = execFileSync10("git", ["rev-parse", "--show-toplevel"], {
         encoding: "utf-8",
         timeout: 5000
       }).trim();
@@ -7735,7 +7850,7 @@ class ReviewWorker {
         return;
       let diff = "";
       try {
-        diff = execFileSync11("git", ["diff", `origin/${this.config.worktree.baseBranch}..HEAD`], { cwd, encoding: "utf-8", timeout: 30000 });
+        diff = execFileSync10("git", ["diff", `origin/${this.config.worktree.baseBranch}..HEAD`], { cwd, encoding: "utf-8", timeout: 30000 });
       } catch {
         diff = "(unable to retrieve diff)";
       }
@@ -8574,8 +8689,11 @@ var init_prompt = __esm(() => {
 });
 
 // src/stage-advance.ts
+function gateKindOf(stage) {
+  return stage.gate && typeof stage.gate === "object" ? String(stage.gate.kind ?? "gate") : "gate";
+}
 function gateSummary(stage, evaluation) {
-  const kind = stage.gate && typeof stage.gate === "object" ? String(stage.gate.kind ?? "gate") : "gate";
+  const kind = gateKindOf(stage);
   if (evaluation.passed)
     return `${kind} passed`;
   const firstError = evaluation.findings.find((f) => f.level === "error");
@@ -8598,6 +8716,10 @@ async function persistStagePointer(client, card, body) {
   await client.request("POST", `/cards/${encodeURIComponent(card.id)}/advance-stage`, body);
 }
 async function advanceStageRun(card, stage, stageIndex, def, evaluation, deps) {
+  const configErrorDetail = gateConfigErrorReason(evaluation);
+  if (configErrorDetail) {
+    return holdGateMisconfigured(card, stage, configErrorDetail, deps);
+  }
   const loop = getStageLoop(stage);
   if (!isConvergeLoop(loop)) {
     if (!evaluation)
@@ -8606,6 +8728,28 @@ async function advanceStageRun(card, stage, stageIndex, def, evaluation, deps) {
   }
   return advanceConvergeLoop(card, stage, stageIndex, def, evaluation, loop, deps);
 }
+async function holdGateMisconfigured(card, stage, detail, deps) {
+  const reason = `Stage "${stage.name}" cannot be evaluated as configured — ${detail} Holding for a human: this is a configuration defect, so re-running the stage would reach the same result. No attempt was charged.`;
+  deps.sink?.recordStageGateEvaluated({
+    stageId: stage.id,
+    gateId: gateKindOf(stage),
+    verdict: "blocked",
+    evidence: detail,
+    summary: `${gateKindOf(stage)} misconfigured`
+  });
+  await deps.stateStore.resetLoopIterations(card.id).catch(() => {});
+  try {
+    await deps.client.updateAgentProgress(card.id, {
+      agentIdentifier: "claude-code-stage",
+      agentName: "Harmony Agent",
+      status: "waiting",
+      currentTask: reason
+    });
+  } catch {}
+  await holdForHuman(deps.client, card, reason, deps.runId, deps.stateStore);
+  log.info(TAG31, `#${card.short_id} GateMisconfigured: ${reason}`);
+  return { kind: "held_misconfigured", reason };
+}
 function firstErrorMessage(evaluation) {
   const e = evaluation?.findings.find((f) => f.level === "error");
   return e ? e.message : null;
@@ -8716,7 +8860,7 @@ async function advanceStageOnGate(card, stage, stageIndex, def, evaluation, deps
   const summary = gateSummary(stage, evaluation);
   deps.sink?.recordStageGateEvaluated({
     stageId: stage.id,
-    gateId: stage.gate && typeof stage.gate === "object" ? String(stage.gate.kind ?? "gate") : "gate",
+    gateId: gateKindOf(stage),
     verdict: evaluation.passed ? "passed" : "failed",
     evidence: evaluation.findings.map((f) => `[${f.level}] ${f.message}`).join(`
 `),
@@ -8829,6 +8973,7 @@ async function holdForHuman(client, card, reason, runId, stateStore, opts = {})
 var TAG31 = "stage-advance", AGENT_LABEL = "agent";
 var init_stage_advance = __esm(() => {
   init_dist();
+  init_gate_config_error();
   init_log();
   init_transitions();
 });
@@ -11381,7 +11526,7 @@ __export(exports_worktree_gc, {
   isTransientGitNetworkError: () => isTransientGitNetworkError,
   WorktreeGc: () => WorktreeGc
 });
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 import { readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
 import { resolve as resolve3 } from "node:path";
 function isTransientGitNetworkError(message) {
@@ -11449,7 +11594,7 @@ function runWorktreeGc(basePath, store, opts = {}) {
     }
   }
   try {
-    execFileSync12("git", ["worktree", "prune", "--expire=now"], {
+    execFileSync11("git", ["worktree", "prune", "--expire=now"], {
       cwd: repoRoot,
       stdio: "pipe"
     });
@@ -11480,7 +11625,7 @@ function pruneFailedRemoteBranches(opts) {
     return result;
   }
   try {
-    execFileSync12("git", ["fetch", "--prune", "origin"], {
+    execFileSync11("git", ["fetch", "--prune", "origin"], {
       cwd: repoRoot,
       stdio: "pipe",
       ...GIT_NETWORK_EXEC
@@ -11496,7 +11641,7 @@ function pruneFailedRemoteBranches(opts) {
   const refPattern = `refs/remotes/origin/${opts.prefix}*`;
   let listing = "";
   try {
-    listing = execFileSync12("git", [
+    listing = execFileSync11("git", [
       "for-each-ref",
       "--format=%(refname:strip=3) %(committerdate:unix)",
       refPattern
@@ -11531,7 +11676,7 @@ function pruneFailedRemoteBranches(opts) {
       break;
     }
     try {
-      execFileSync12("git", ["push", "origin", `:refs/heads/${ref}`], {
+      execFileSync11("git", ["push", "origin", `:refs/heads/${ref}`], {
         cwd: repoRoot,
         stdio: "pipe",
         ...GIT_NETWORK_EXEC
@@ -11594,7 +11739,7 @@ class WorktreeGc {
 }
 function getRepoRoot2() {
   try {
-    return execFileSync12("git", ["rev-parse", "--show-toplevel"], {
+    return execFileSync11("git", ["rev-parse", "--show-toplevel"], {
       encoding: "utf-8"
     }).trim();
   } catch {
@@ -11635,12 +11780,12 @@ __export(exports_src, {
   validatePrerequisites: () => validatePrerequisites,
   main: () => main
 });
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { createRequire as createRequire2 } from "node:module";
 async function validatePrerequisites(config, banner) {
   try {
-    const ver = execFileSync13("claude", ["--version"], {
+    const ver = execFileSync12("claude", ["--version"], {
       encoding: "utf-8"
     }).trim();
     banner.check(`Claude CLI ${ver}`);
@@ -11655,14 +11800,14 @@ async function validatePrerequisites(config, banner) {
     validateGitProviderCli(provider);
   }
   try {
-    const status = execFileSync13("git", ["status", "--porcelain"], {
+    const status = execFileSync12("git", ["status", "--porcelain"], {
       encoding: "utf-8"
     }).trim();
     if (status) {
       banner.warn(`Working directory has uncommitted changes:
 ${status}`);
     }
-    execFileSync13("git", ["rev-parse", "--verify", `origin/${config.agent.worktree.baseBranch}`], {
+    execFileSync12("git", ["rev-parse", "--verify", `origin/${config.agent.worktree.baseBranch}`], {
       encoding: "utf-8",
       stdio: "pipe"
     });

package/dist/index.js

@@ -653,6 +653,14 @@ var init_classification = __esm(() => {
   MODEL_TIERS = ["simple", "advanced", "research"];
 });
 
+// ../harmony-shared/dist/columnSort.js
+var init_columnSort = () => {};
+
+// ../harmony-shared/dist/columnCardSplit.js
+var init_columnCardSplit = __esm(() => {
+  init_columnSort();
+});
+
 // ../harmony-shared/dist/commentSerializer.js
 function sanitizeHeaderField(value) {
   return value.replace(/[\]\r\n|<>]/g, " ").trim() || "—";
@@ -1439,6 +1447,8 @@ var init_dist = __esm(() => {
   init_branchRef();
   init_cardLinks();
   init_classification();
+  init_columnCardSplit();
+  init_columnSort();
   init_commentSerializer();
   init_constants();
   init_gateEvaluate();
@@ -5683,8 +5693,27 @@ var init_artifact_judge = __esm(() => {
   init_sdk_agent_runner();
 });
 
+// src/gate-config-error.ts
+function gateConfigErrorReason(evaluation) {
+  if (!evaluation || evaluation.passed)
+    return null;
+  const structured = evaluation.structured;
+  if (!structured || typeof structured !== "object")
+    return null;
+  if (!Object.hasOwn(structured, GATE_CONFIG_ERROR_KEY))
+    return null;
+  if (structured[GATE_CONFIG_ERROR_KEY] !== true) {
+    return null;
+  }
+  const reason = structured.reason;
+  return typeof reason === "string" && reason.trim().length > 0 ? reason.trim() : "the gate cannot be measured as configured";
+}
+var GATE_CONFIG_ERROR_KEY = "configError", GATE_CONFIG_ERROR_MARK;
+var init_gate_config_error = __esm(() => {
+  GATE_CONFIG_ERROR_MARK = Object.freeze({ [GATE_CONFIG_ERROR_KEY]: true });
+});
+
 // src/command-metric.ts
-import { execFileSync as execFileSync10 } from "node:child_process";
 function parseParseMode(parse) {
   if (typeof parse !== "string" || parse.length === 0) {
     return { kind: "invalid", reason: "`parse` must be a non-empty string" };
@@ -5745,15 +5774,91 @@ function parseMetricValue(mode, stdout) {
   }
   return { ok: true, value: resolved };
 }
-function defaultRunCommand(args) {
-  const out = execFileSync10(args.command, args.args, {
-    cwd: args.cwd,
-    timeout: args.timeoutMs,
-    stdio: "pipe",
-    maxBuffer: MAX_OUTPUT_BUFFER2,
-    encoding: "utf8"
+function runMetricCommand(args) {
+  return new Promise((resolve3, reject) => {
+    let child;
+    try {
+      child = spawnInGroup(args.command, args.args, {
+        cwd: args.cwd,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+    } catch (err) {
+      reject(err);
+      return;
+    }
+    const pgid = child.pid;
+    const chunks = [];
+    let stdoutBytes = 0;
+    let stderr = "";
+    let settled = false;
+    let killReason = null;
+    let timer;
+    let drainTimer;
+    const settle = (failure) => {
+      if (settled)
+        return;
+      settled = true;
+      if (timer)
+        clearTimeout(timer);
+      if (drainTimer)
+        clearTimeout(drainTimer);
+      reapGroup(pgid);
+      if (failure)
+        reject(failure);
+      else
+        resolve3(Buffer.concat(chunks).toString("utf8"));
+    };
+    const killTree = (reason) => {
+      if (settled || killReason)
+        return;
+      killReason = reason;
+      terminateGroup(child, {
+        sigintTimeoutMs: METRIC_SIGINT_GRACE_MS,
+        sigtermTimeoutMs: METRIC_SIGTERM_GRACE_MS
+      }).catch(() => {}).then(() => {
+        settle(reason === "timeout" ? Object.assign(new Error(`command timed out after ${args.timeoutMs}ms`), { code: "ETIMEDOUT" }) : Object.assign(new Error("stdout maxBuffer exceeded"), {
+          code: "ENOBUFS"
+        }));
+      });
+    };
+    child.stdout?.on("data", (chunk) => {
+      stdoutBytes += chunk.length;
+      if (stdoutBytes > MAX_OUTPUT_BUFFER2) {
+        killTree("overflow");
+        return;
+      }
+      chunks.push(chunk);
+    });
+    child.stderr?.on("data", (chunk) => {
+      if (stderr.length >= MAX_STDERR_CHARS)
+        return;
+      stderr += chunk.toString("utf8");
+    });
+    child.once("error", (err) => settle(err));
+    const settleFromExit = (code, signal) => {
+      if (drainTimer)
+        clearTimeout(drainTimer);
+      if (code === 0) {
+        settle(null);
+        return;
+      }
+      const detail = signal ? `terminated by signal ${signal}` : `exited ${code}`;
+      settle(Object.assign(new Error(`command ${detail}`), {
+        status: typeof code === "number" ? code : null,
+        stderr
+      }));
+    };
+    child.once("exit", (code, signal) => {
+      if (killReason)
+        return;
+      if (timer)
+        clearTimeout(timer);
+      reapGroup(pgid);
+      drainTimer = setTimeout(() => settleFromExit(code, signal), STDIO_DRAIN_GRACE_MS);
+      child.once("close", () => settleFromExit(code, signal));
+    });
+    timer = setTimeout(() => killTree("timeout"), args.timeoutMs);
   });
-  return typeof out === "string" ? out : String(out);
 }
 
 class CommandMetricCollector {
@@ -5765,28 +5870,28 @@ class CommandMetricCollector {
   async collect(context) {
     const name = context.gate.metric;
     if (typeof name !== "string" || name.length === 0) {
-      return blocked(null, 'Gate kind "custom" needs a `metric` name naming an allowlisted command (e.g. { "kind": "custom", "metric": "lighthouse_performance" }).');
+      return configError(null, 'Gate kind "custom" needs a `metric` name naming an allowlisted command (e.g. { "kind": "custom", "metric": "lighthouse_performance" }).');
     }
     const def = Object.hasOwn(this.deps.metrics, name) ? this.deps.metrics[name] : undefined;
     if (!def) {
-      return blocked(name, `Metric "${name}" is not declared in this daemon's allowlist — add it under \`agent.playbooks.metrics\` to permit it.`);
+      return configError(name, `Metric "${name}" is not declared in this daemon's allowlist — add it under \`agent.playbooks.metrics\` to permit it.`);
     }
     if (typeof def.command !== "string" || def.command.length === 0) {
-      return blocked(name, `Metric "${name}" declares no \`command\`.`);
+      return configError(name, `Metric "${name}" declares no \`command\`.`);
     }
     const mode = parseParseMode(def.parse);
     if (mode.kind === "invalid") {
-      return blocked(name, `Metric "${name}": ${mode.reason}.`);
+      return configError(name, `Metric "${name}": ${mode.reason}.`);
     }
     const requested = typeof def.timeoutMs === "number" && def.timeoutMs > 0 ? Math.floor(def.timeoutMs) : DEFAULT_METRIC_TIMEOUT_MS;
     const timeoutMs = Math.min(requested, MAX_METRIC_TIMEOUT_MS);
     if (timeoutMs < requested) {
       log.warn(TAG19, `Metric "${name}" declares timeoutMs=${requested}, clamped to the ${MAX_METRIC_TIMEOUT_MS}ms ceiling`);
     }
-    const run = this.deps.runCommand ?? defaultRunCommand;
+    const run = this.deps.runCommand ?? runMetricCommand;
     let stdout;
     try {
-      stdout = run({
+      stdout = await run({
         command: def.command,
         args: def.args ?? [],
         cwd: this.deps.worktreePath,
@@ -5823,6 +5928,13 @@ function blocked(metric, reason, raw) {
     }
   };
 }
+function configError(metric, reason) {
+  const evidence = blocked(metric, reason);
+  return {
+    ...evidence,
+    structured: { ...evidence.structured, ...GATE_CONFIG_ERROR_MARK }
+  };
+}
 function describeRunFailure(err, timeoutMs) {
   const e = err;
   if (e?.code === "ENOBUFS") {
@@ -5842,12 +5954,15 @@ function describeRunFailure(err, timeoutMs) {
 function truncate(value, max) {
   return value.length <= max ? value : `${value.slice(0, max)}…[truncated]`;
 }
-var TAG19 = "command-metric", MAX_RAW_CHARS = 2000, MAX_OUTPUT_BUFFER2, MAX_METRIC_TIMEOUT_MS = 900000;
+var TAG19 = "command-metric", MAX_RAW_CHARS = 2000, MAX_OUTPUT_BUFFER2, MAX_STDERR_CHARS, MAX_METRIC_TIMEOUT_MS = 900000, METRIC_SIGINT_GRACE_MS = 2000, METRIC_SIGTERM_GRACE_MS = 3000, STDIO_DRAIN_GRACE_MS = 500;
 var init_command_metric = __esm(() => {
   init_dist();
+  init_gate_config_error();
   init_log();
+  init_process_group();
   init_types2();
   MAX_OUTPUT_BUFFER2 = 10 * 1024 * 1024;
+  MAX_STDERR_CHARS = 64 * 1024;
 });
 
 // src/gate-collectors.ts
@@ -7547,7 +7662,7 @@ var init_transitions = __esm(() => {
 });
 
 // src/review-worker.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync10 } from "node:child_process";
 
 class ReviewWorker {
   config;
@@ -7665,7 +7780,7 @@ class ReviewWorker {
         costCents: 0,
         numTurns: 0
       });
-      const repoRoot = execFileSync11("git", ["rev-parse", "--show-toplevel"], {
+      const repoRoot = execFileSync10("git", ["rev-parse", "--show-toplevel"], {
         encoding: "utf-8",
         timeout: 5000
       }).trim();
@@ -7734,7 +7849,7 @@ class ReviewWorker {
         return;
       let diff = "";
       try {
-        diff = execFileSync11("git", ["diff", `origin/${this.config.worktree.baseBranch}..HEAD`], { cwd, encoding: "utf-8", timeout: 30000 });
+        diff = execFileSync10("git", ["diff", `origin/${this.config.worktree.baseBranch}..HEAD`], { cwd, encoding: "utf-8", timeout: 30000 });
       } catch {
         diff = "(unable to retrieve diff)";
       }
@@ -8573,8 +8688,11 @@ var init_prompt = __esm(() => {
 });
 
 // src/stage-advance.ts
+function gateKindOf(stage) {
+  return stage.gate && typeof stage.gate === "object" ? String(stage.gate.kind ?? "gate") : "gate";
+}
 function gateSummary(stage, evaluation) {
-  const kind = stage.gate && typeof stage.gate === "object" ? String(stage.gate.kind ?? "gate") : "gate";
+  const kind = gateKindOf(stage);
   if (evaluation.passed)
     return `${kind} passed`;
   const firstError = evaluation.findings.find((f) => f.level === "error");
@@ -8597,6 +8715,10 @@ async function persistStagePointer(client, card, body) {
   await client.request("POST", `/cards/${encodeURIComponent(card.id)}/advance-stage`, body);
 }
 async function advanceStageRun(card, stage, stageIndex, def, evaluation, deps) {
+  const configErrorDetail = gateConfigErrorReason(evaluation);
+  if (configErrorDetail) {
+    return holdGateMisconfigured(card, stage, configErrorDetail, deps);
+  }
   const loop = getStageLoop(stage);
   if (!isConvergeLoop(loop)) {
     if (!evaluation)
@@ -8605,6 +8727,28 @@ async function advanceStageRun(card, stage, stageIndex, def, evaluation, deps) {
   }
   return advanceConvergeLoop(card, stage, stageIndex, def, evaluation, loop, deps);
 }
+async function holdGateMisconfigured(card, stage, detail, deps) {
+  const reason = `Stage "${stage.name}" cannot be evaluated as configured — ${detail} Holding for a human: this is a configuration defect, so re-running the stage would reach the same result. No attempt was charged.`;
+  deps.sink?.recordStageGateEvaluated({
+    stageId: stage.id,
+    gateId: gateKindOf(stage),
+    verdict: "blocked",
+    evidence: detail,
+    summary: `${gateKindOf(stage)} misconfigured`
+  });
+  await deps.stateStore.resetLoopIterations(card.id).catch(() => {});
+  try {
+    await deps.client.updateAgentProgress(card.id, {
+      agentIdentifier: "claude-code-stage",
+      agentName: "Harmony Agent",
+      status: "waiting",
+      currentTask: reason
+    });
+  } catch {}
+  await holdForHuman(deps.client, card, reason, deps.runId, deps.stateStore);
+  log.info(TAG31, `#${card.short_id} GateMisconfigured: ${reason}`);
+  return { kind: "held_misconfigured", reason };
+}
 function firstErrorMessage(evaluation) {
   const e = evaluation?.findings.find((f) => f.level === "error");
   return e ? e.message : null;
@@ -8715,7 +8859,7 @@ async function advanceStageOnGate(card, stage, stageIndex, def, evaluation, deps
   const summary = gateSummary(stage, evaluation);
   deps.sink?.recordStageGateEvaluated({
     stageId: stage.id,
-    gateId: stage.gate && typeof stage.gate === "object" ? String(stage.gate.kind ?? "gate") : "gate",
+    gateId: gateKindOf(stage),
     verdict: evaluation.passed ? "passed" : "failed",
     evidence: evaluation.findings.map((f) => `[${f.level}] ${f.message}`).join(`
 `),
@@ -8828,6 +8972,7 @@ async function holdForHuman(client, card, reason, runId, stateStore, opts = {})
 var TAG31 = "stage-advance", AGENT_LABEL = "agent";
 var init_stage_advance = __esm(() => {
   init_dist();
+  init_gate_config_error();
   init_log();
   init_transitions();
 });
@@ -11380,7 +11525,7 @@ __export(exports_worktree_gc, {
   isTransientGitNetworkError: () => isTransientGitNetworkError,
   WorktreeGc: () => WorktreeGc
 });
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 import { readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
 import { resolve as resolve3 } from "node:path";
 function isTransientGitNetworkError(message) {
@@ -11448,7 +11593,7 @@ function runWorktreeGc(basePath, store, opts = {}) {
     }
   }
   try {
-    execFileSync12("git", ["worktree", "prune", "--expire=now"], {
+    execFileSync11("git", ["worktree", "prune", "--expire=now"], {
       cwd: repoRoot,
       stdio: "pipe"
     });
@@ -11479,7 +11624,7 @@ function pruneFailedRemoteBranches(opts) {
     return result;
   }
   try {
-    execFileSync12("git", ["fetch", "--prune", "origin"], {
+    execFileSync11("git", ["fetch", "--prune", "origin"], {
       cwd: repoRoot,
       stdio: "pipe",
       ...GIT_NETWORK_EXEC
@@ -11495,7 +11640,7 @@ function pruneFailedRemoteBranches(opts) {
   const refPattern = `refs/remotes/origin/${opts.prefix}*`;
   let listing = "";
   try {
-    listing = execFileSync12("git", [
+    listing = execFileSync11("git", [
       "for-each-ref",
       "--format=%(refname:strip=3) %(committerdate:unix)",
       refPattern
@@ -11530,7 +11675,7 @@ function pruneFailedRemoteBranches(opts) {
       break;
     }
     try {
-      execFileSync12("git", ["push", "origin", `:refs/heads/${ref}`], {
+      execFileSync11("git", ["push", "origin", `:refs/heads/${ref}`], {
         cwd: repoRoot,
         stdio: "pipe",
         ...GIT_NETWORK_EXEC
@@ -11593,7 +11738,7 @@ class WorktreeGc {
 }
 function getRepoRoot2() {
   try {
-    return execFileSync12("git", ["rev-parse", "--show-toplevel"], {
+    return execFileSync11("git", ["rev-parse", "--show-toplevel"], {
       encoding: "utf-8"
     }).trim();
   } catch {
@@ -11634,12 +11779,12 @@ __export(exports_src, {
   validatePrerequisites: () => validatePrerequisites,
   main: () => main
 });
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { createRequire as createRequire2 } from "node:module";
 async function validatePrerequisites(config, banner) {
   try {
-    const ver = execFileSync13("claude", ["--version"], {
+    const ver = execFileSync12("claude", ["--version"], {
       encoding: "utf-8"
     }).trim();
     banner.check(`Claude CLI ${ver}`);
@@ -11654,14 +11799,14 @@ async function validatePrerequisites(config, banner) {
     validateGitProviderCli(provider);
   }
   try {
-    const status = execFileSync13("git", ["status", "--porcelain"], {
+    const status = execFileSync12("git", ["status", "--porcelain"], {
       encoding: "utf-8"
     }).trim();
     if (status) {
       banner.warn(`Working directory has uncommitted changes:
 ${status}`);
     }
-    execFileSync13("git", ["rev-parse", "--verify", `origin/${config.agent.worktree.baseBranch}`], {
+    execFileSync12("git", ["rev-parse", "--verify", `origin/${config.agent.worktree.baseBranch}`], {
       encoding: "utf-8",
       stdio: "pipe"
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gethmy/agent",
-  "version": "1.24.0",
+  "version": "1.25.0",
   "description": "Push-based agent daemon for Harmony — watches board assignments and spawns Claude CLI workers",
   "type": "module",
   "main": "dist/index.js",