@gh-symphony/cli 0.4.5 → 0.4.7

package/README.md

@@ -8,6 +8,9 @@ The following tools must be installed before using the CLI:
 
 - **[Node.js](https://nodejs.org/)** (v24+) with npm
 - **[Git](https://git-scm.com/)**
+- At least one AI agent runtime on `PATH` before `gh-symphony repo start`:
+  - **[Codex CLI](https://developers.openai.com/codex/cli/)** (`codex`) - install from the official Codex CLI guide, then authenticate with `codex login`.
+  - **[Claude Code](https://code.claude.com/docs/en/quickstart)** (`claude`) - install from the official Claude Code quickstart, then authenticate with `ANTHROPIC_API_KEY` or a local Claude login for non-bare runs.
 - One GitHub auth source with required scopes (`repo`, `read:org`, `project`):
   - **[GitHub CLI (`gh`)](https://cli.github.com/)**:
     ```bash
@@ -106,7 +109,7 @@ Examples of generated validation guidance include `make test`, `just build`, `uv
 
 You can further customize the agent's behavior by editing `WORKFLOW.md` — this is the policy layer that controls what the agent does at each workflow phase.
 
-> Currently supported runtimes: **Codex**, **Claude Code**
+> Currently supported runtimes: **[Codex CLI](https://developers.openai.com/codex/cli/)** and **[Claude Code](https://code.claude.com/docs/en/quickstart)**. The selected runtime command must be installed and authenticated before `gh-symphony repo start` can dispatch worker runs.
 
 ### Explicit Priority Mapping
 

package/dist/{chunk-I3CZXKS5.js → chunk-3ACU7O47.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   workflow_init_default
-} from "./chunk-4ZHWEQQL.js";
+} from "./chunk-775A5LB5.js";
 import {
   fetchGithubProjectIssueByRepositoryAndNumber,
   inspectManagedProjectSelection,
   resolveTrackerAdapter
-} from "./chunk-HHBXGE23.js";
+} from "./chunk-C4QCVQVY.js";
 import {
   GitHubApiError,
   createClient,
@@ -14,12 +14,12 @@ import {
   getGhTokenWithSource,
   getProjectDetail,
   validateGitHubToken
-} from "./chunk-SMNIGNS3.js";
+} from "./chunk-FFY5VKNV.js";
 import {
   buildPromptVariables,
   parseWorkflowMarkdown,
   renderPrompt
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   loadActiveProjectConfig
 } from "./chunk-YZP5N5XP.js";

package/dist/{chunk-4ZHWEQQL.js → chunk-775A5LB5.js}

@@ -11,12 +11,12 @@ import {
   listUserProjects,
   resolveGitHubAuth,
   validateToken
-} from "./chunk-SMNIGNS3.js";
+} from "./chunk-FFY5VKNV.js";
 import {
   formatClaudePreflightText,
   resolveClaudeCommandBinary,
   runClaudePreflight
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 
 // src/mapping/smart-defaults.ts
 var ROLE_PATTERNS = [

package/dist/{chunk-HHBXGE23.js → chunk-C4QCVQVY.js}

@@ -30,7 +30,7 @@ import {
   resolveWorkflowRuntimeTimeouts,
   safeReadDir,
   scheduleRetryAt
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   loadGlobalConfig,
   loadProjectConfig
@@ -1470,8 +1470,10 @@ var githubProjectTrackerAdapter = {
     return fetchProjectIssueStatesByIds(project, issueIds, dependencies);
   },
   buildWorkerEnvironment(project) {
+    const apiUrl = project.tracker.apiUrl?.trim();
     return {
-      GITHUB_PROJECT_ID: requireTrackerSetting(project.tracker, "projectId")
+      GITHUB_PROJECT_ID: requireTrackerSetting(project.tracker, "projectId"),
+      ...apiUrl ? { GITHUB_GRAPHQL_API_URL: apiUrl } : {}
     };
   },
   reviveIssue(project, run) {
@@ -1564,10 +1566,7 @@ function resolveAssignedOnly(tracker, dependencies) {
   if (dependencies.assignedOnly !== void 0) {
     return dependencies.assignedOnly;
   }
-  const legacyAssignedOnly = readBooleanTrackerSetting(
-    tracker,
-    "assignedOnly"
-  );
+  const legacyAssignedOnly = readBooleanTrackerSetting(tracker, "assignedOnly");
   if (legacyAssignedOnly) {
     const warningKey = `${tracker.adapter}:${tracker.bindingId}`;
     if (!warnedLegacyAssignedOnlyProjectIds.has(warningKey)) {

package/dist/{chunk-34YCGQD2.js → chunk-EILO332E.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-3IRPSPAF.js";
 import {
   parseWorkflowMarkdown
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   saveGlobalConfig,
   saveProjectConfig

package/dist/{chunk-SMNIGNS3.js → chunk-FFY5VKNV.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/github/client.ts
-var DEFAULT_API_URL = "https://api.github.com/graphql";
+var DEFAULT_GITHUB_GRAPHQL_API_URL = "https://api.github.com/graphql";
 var REST_API_URL = "https://api.github.com";
 function findLinkedRepository(project, owner, name) {
   const normalizedOwner = owner.trim().toLowerCase();
@@ -28,13 +28,35 @@ var GitHubScopeError = class extends GitHubApiError {
 function createClient(token, options) {
   return {
     token,
-    apiUrl: options?.apiUrl ?? DEFAULT_API_URL,
+    apiUrl: options?.apiUrl ?? DEFAULT_GITHUB_GRAPHQL_API_URL,
     fetchImpl: options?.fetchImpl ?? fetch
   };
 }
+function deriveGitHubRestApiUrl(graphqlApiUrl) {
+  try {
+    const url = new URL(graphqlApiUrl);
+    const normalizedPath = url.pathname.replace(/\/+$/, "");
+    if (url.hostname.toLowerCase() === "api.github.com") {
+      return REST_API_URL;
+    }
+    if (normalizedPath === "/api/graphql") {
+      url.pathname = "/api/v3";
+      url.search = "";
+      url.hash = "";
+      return url.toString().replace(/\/$/, "");
+    }
+    if (normalizedPath.endsWith("/graphql")) {
+      url.pathname = normalizedPath.slice(0, -"/graphql".length) || "/";
+      url.search = "";
+      url.hash = "";
+      return url.toString().replace(/\/$/, "");
+    }
+  } catch {
+  }
+  return REST_API_URL;
+}
 async function listRepositoryLabels(client, owner, name) {
-  const restUrl = client.apiUrl.replace("/graphql", "");
-  const baseUrl = restUrl === client.apiUrl ? REST_API_URL : restUrl;
+  const baseUrl = deriveGitHubRestApiUrl(client.apiUrl);
   const labels = [];
   let page = 1;
   while (true) {
@@ -75,8 +97,7 @@ async function listRepositoryLabels(client, owner, name) {
   return labels;
 }
 async function validateToken(client) {
-  const restUrl = client.apiUrl.replace("/graphql", "");
-  const baseUrl = restUrl === client.apiUrl ? REST_API_URL : restUrl;
+  const baseUrl = deriveGitHubRestApiUrl(client.apiUrl);
   const response = await client.fetchImpl(`${baseUrl}/user`, {
     headers: {
       authorization: `Bearer ${client.token}`,
@@ -646,12 +667,20 @@ function checkGhInstalled(opts) {
     throw error;
   }
 }
+function ghAuthHostArgs(hostname) {
+  const trimmed = hostname?.trim();
+  return trimmed ? ["--hostname", trimmed] : [];
+}
 function checkGhAuthenticated(opts) {
   const spawnImpl = opts?.spawnImpl ?? spawnSync;
-  const result = spawnImpl("gh", ["auth", "status"], {
-    encoding: "utf8",
-    stdio: ["pipe", "pipe", "pipe"]
-  });
+  const result = spawnImpl(
+    "gh",
+    ["auth", "status", ...ghAuthHostArgs(opts?.hostname)],
+    {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }
+  );
   if ((result.status ?? 1) !== 0) {
     return { authenticated: false };
   }
@@ -660,10 +689,14 @@ function checkGhAuthenticated(opts) {
 }
 function checkGhScopes(opts) {
   const spawnImpl = opts?.spawnImpl ?? spawnSync;
-  const result = spawnImpl("gh", ["auth", "status"], {
-    encoding: "utf8",
-    stdio: ["pipe", "pipe", "pipe"]
-  });
+  const result = spawnImpl(
+    "gh",
+    ["auth", "status", ...ghAuthHostArgs(opts?.hostname)],
+    {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }
+  );
   const output = (result.stdout ?? "").toString();
   const scopes = parseScopes(output);
   if (scopes.length === 0) {
@@ -686,7 +719,8 @@ function getGhToken(opts) {
   }
   return getGhTokenWithSource({
     execImpl: opts?.execImpl,
-    envToken: void 0
+    envToken: void 0,
+    hostname: opts?.hostname
   }).token;
 }
 function getGhTokenWithSource(opts) {
@@ -697,10 +731,14 @@ function getGhTokenWithSource(opts) {
   }
   const execImpl = opts?.execImpl ?? execFileSync;
   try {
-    const token = execImpl("gh", ["auth", "token"], {
-      encoding: "utf8",
-      stdio: ["pipe", "pipe", "pipe"]
-    }).toString().trim();
+    const token = execImpl(
+      "gh",
+      ["auth", "token", ...ghAuthHostArgs(opts?.hostname)],
+      {
+        encoding: "utf8",
+        stdio: ["pipe", "pipe", "pipe"]
+      }
+    ).toString().trim();
     if (!token) {
       throw new GhAuthError("token_failed", ghTokenReadErrorMessage());
     }
@@ -718,7 +756,9 @@ async function validateGitHubToken(token, source, opts) {
   const checkRequiredScopesImpl = opts?.checkRequiredScopesImpl ?? checkRequiredScopes;
   let viewer;
   try {
-    const client = createClientImpl(token);
+    const client = createClientImpl(token, {
+      apiUrl: opts?.apiUrl
+    });
     viewer = await validateTokenImpl(client);
   } catch (error) {
     throw classifyTokenValidationError(error, source);
@@ -787,7 +827,7 @@ function ensureGhAuth(opts) {
       { source: "gh" }
     );
   }
-  const auth = checkGhAuthenticated({ spawnImpl });
+  const auth = checkGhAuthenticated({ spawnImpl, hostname: opts?.hostname });
   if (!auth.authenticated) {
     throw new GhAuthError(
       "not_authenticated",
@@ -795,7 +835,7 @@ function ensureGhAuth(opts) {
       { source: "gh" }
     );
   }
-  const scopeCheck = checkGhScopes({ spawnImpl });
+  const scopeCheck = checkGhScopes({ spawnImpl, hostname: opts?.hostname });
   if (!scopeCheck.valid) {
     throw new GhAuthError(
       "missing_scopes",
@@ -809,7 +849,8 @@ function ensureGhAuth(opts) {
   }
   const { token } = getGhTokenWithSource({
     execImpl,
-    envToken: void 0
+    envToken: void 0,
+    hostname: opts?.hostname
   });
   return { login: auth.login ?? "unknown", token, source: "gh" };
 }
@@ -858,7 +899,7 @@ function runGhAuthRefresh(opts) {
 }
 function parseLogin(output) {
   const matched = output.match(
-    /Logged in to github\.com account\s+\*?\*?([A-Za-z0-9_-]+)\*?\*?/i
+    /Logged in to \S+ account\s+\*?\*?([A-Za-z0-9_-]+)\*?\*?/i
   );
   return matched?.[1];
 }
@@ -871,6 +912,7 @@ function parseScopes(output) {
 }
 
 export {
+  DEFAULT_GITHUB_GRAPHQL_API_URL,
   findLinkedRepository,
   GitHubApiError,
   GitHubScopeError,

package/dist/{chunk-LJUEOVAQ.js → chunk-RGCSM2KZ.js}

@@ -6619,6 +6619,7 @@ export {
   readJsonFile,
   safeReadDir,
   isFileMissing,
+  formatEventMessage,
   parseRecentEvents,
   redactObservabilitySecrets,
   redactObservabilityDiagnosticsWithStats,

package/dist/{chunk-7KFCWMMW.js → chunk-XLDJTMW5.js}

@@ -10,7 +10,7 @@ import {
   resolveGitHubGraphQLToken,
   shouldReuseAgentCredentialCache,
   writeAgentCredentialCache
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 
 // ../runtime-codex/src/runtime.ts
 import { spawn } from "child_process";

package/dist/{doctor-GHKE7TRO.js → doctor-TFKCAGZF.js}

@@ -5,18 +5,19 @@ import {
   parseIssueReference,
   readGitHubProjectBinding,
   renderIssueWorkflowPreview
-} from "./chunk-I3CZXKS5.js";
-import "./chunk-4ZHWEQQL.js";
+} from "./chunk-3ACU7O47.js";
+import "./chunk-775A5LB5.js";
 import {
   fetchGithubProjectIssueByRepositoryAndNumber,
   fetchGithubProjectIssues,
   inspectManagedProjectSelection
-} from "./chunk-HHBXGE23.js";
-import "./chunk-7KFCWMMW.js";
+} from "./chunk-C4QCVQVY.js";
+import "./chunk-XLDJTMW5.js";
 import {
   resolveRuntimeRoot
 } from "./chunk-3IRPSPAF.js";
 import {
+  DEFAULT_GITHUB_GRAPHQL_API_URL,
   GitHubApiError,
   REQUIRED_GH_SCOPES,
   checkGhAuthenticated,
@@ -31,7 +32,7 @@ import {
   runGhAuthLogin,
   runGhAuthRefresh,
   validateGitHubToken
-} from "./chunk-SMNIGNS3.js";
+} from "./chunk-FFY5VKNV.js";
 import {
   isClaudeRuntimeCommand,
   parseWorkflowMarkdown,
@@ -40,7 +41,7 @@ import {
   resolveClaudeCommandBinary,
   resolveRuntimeCommandBinary,
   runClaudePreflight
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   configFilePath,
   orchestratorLogPath,
@@ -537,6 +538,67 @@ function warnCheck(id, title, summary, remediation, details) {
 function formatAuthSource(source) {
   return source === "env" ? "GITHUB_GRAPHQL_TOKEN" : "gh CLI";
 }
+function normalizeGitHubGraphqlEndpoint(value) {
+  const trimmed = value?.trim();
+  if (!trimmed) {
+    return null;
+  }
+  try {
+    const url = new URL(trimmed);
+    url.hostname = url.hostname.toLowerCase();
+    url.pathname = url.pathname.replace(/\/+$/, "") || "/";
+    url.search = "";
+    url.hash = "";
+    return url.toString().replace(/\/$/, "");
+  } catch {
+    return trimmed.replace(/\/+$/, "");
+  }
+}
+function deriveGhHostnameFromGraphqlEndpoint(endpoint) {
+  try {
+    const hostname = new URL(endpoint).hostname.toLowerCase();
+    return hostname === "api.github.com" ? "github.com" : hostname;
+  } catch {
+    return void 0;
+  }
+}
+function resolveGitHubGraphqlEndpoint(input) {
+  const trackerApiUrl = normalizeGitHubGraphqlEndpoint(input.trackerApiUrl);
+  const envApiUrl = normalizeGitHubGraphqlEndpoint(input.envApiUrl);
+  const resolvedEndpoint = trackerApiUrl ?? envApiUrl ?? DEFAULT_GITHUB_GRAPHQL_API_URL;
+  return {
+    resolvedEndpoint,
+    source: trackerApiUrl ? "tracker" : envApiUrl ? "env" : "default",
+    trackerApiUrl,
+    envApiUrl,
+    mismatch: trackerApiUrl !== null && envApiUrl !== null && trackerApiUrl !== envApiUrl,
+    ghHostname: deriveGhHostnameFromGraphqlEndpoint(resolvedEndpoint)
+  };
+}
+function buildGitHubGraphqlEndpointCheck(input) {
+  const details = {
+    resolvedEndpoint: input.resolvedEndpoint,
+    source: input.source,
+    trackerApiUrl: input.trackerApiUrl,
+    envApiUrl: input.envApiUrl,
+    ghHostname: input.ghHostname
+  };
+  if (input.mismatch) {
+    return warnCheck(
+      "github_graphql_endpoint",
+      "GitHub GraphQL endpoint",
+      `Resolved GitHub GraphQL endpoint is ${input.resolvedEndpoint}, but GITHUB_GRAPHQL_API_URL is ${input.envApiUrl}.`,
+      "Keep WORKFLOW.md tracker.endpoint/tracker.apiUrl and GITHUB_GRAPHQL_API_URL aligned, or unset GITHUB_GRAPHQL_API_URL so the workflow endpoint is authoritative.",
+      details
+    );
+  }
+  return passCheck(
+    "github_graphql_endpoint",
+    "GitHub GraphQL endpoint",
+    `Resolved GitHub GraphQL endpoint: ${input.resolvedEndpoint}.`,
+    details
+  );
+}
 function remediationStep(id, checkId, title, status, summary, command, details) {
   return { id, checkId, title, status, summary, command, details };
 }
@@ -768,7 +830,10 @@ function buildGithubTrackerConfig(input) {
 }
 async function checkLinearTrackerResolution(input) {
   const tracker = input.projectConfig.projectConfig.tracker;
-  const projectSlug = readStringSetting(tracker.settings, "projectSlug")?.trim();
+  const projectSlug = readStringSetting(
+    tracker.settings,
+    "projectSlug"
+  )?.trim();
   const activeStates = readLinearActiveStates(tracker.settings);
   const pickupLabels = readLinearPickupLabels(tracker.settings);
   if (!projectSlug) {
@@ -915,7 +980,9 @@ async function fetchLinearProjectBySlug(input) {
     })
   });
   if (!response.ok) {
-    throw new Error(`Linear GraphQL request failed with HTTP ${response.status}.`);
+    throw new Error(
+      `Linear GraphQL request failed with HTTP ${response.status}.`
+    );
   }
   const payload = await response.json();
   if (payload.errors?.length) {
@@ -1453,6 +1520,7 @@ ${DOCTOR_USAGE}`);
   let resolvedProjectConfig = null;
   let resolvedGithubProjectDetail = null;
   let resolvedGithubProjectBindingId = null;
+  let githubGraphqlEndpoint = null;
   const envToken = deps.getEnvGitHubToken();
   const currentNodeVersion = deps.processVersion;
   const currentNodeMajor = parseMajorNodeVersion(currentNodeVersion);
@@ -1531,19 +1599,68 @@ ${DOCTOR_USAGE}`);
       )
     );
   }
-  const ghAuth = ghInstalled ? deps.checkGhAuthenticated() : { authenticated: false };
-  const ghScopes = ghInstalled && ghAuth.authenticated ? deps.checkGhScopes() : { valid: false, missing: [...REQUIRED_GH_SCOPES], scopes: [] };
+  resolvedProjectConfig = await deps.inspectManagedProjectSelection({
+    configDir: options.configDir,
+    requestedProjectId: parsedArgs.projectId
+  });
+  if (resolvedProjectConfig.kind === "resolved") {
+    resolvedProjectId = resolvedProjectConfig.projectId;
+    checks.push(
+      passCheck(
+        "managed_project",
+        "Managed project selection",
+        `Resolved managed project "${resolvedProjectConfig.projectId}".`,
+        {
+          projectId: resolvedProjectConfig.projectId,
+          workspaceDir: resolvedProjectConfig.projectConfig.workspaceDir
+        }
+      )
+    );
+    if (resolvedProjectConfig.projectConfig.tracker.adapter !== "linear") {
+      githubGraphqlEndpoint = resolveGitHubGraphqlEndpoint({
+        trackerApiUrl: resolvedProjectConfig.projectConfig.tracker.apiUrl,
+        envApiUrl: process.env.GITHUB_GRAPHQL_API_URL
+      });
+      checks.push(buildGitHubGraphqlEndpointCheck(githubGraphqlEndpoint));
+    }
+  } else {
+    checks.push(
+      failCheck(
+        "managed_project",
+        "Managed project selection",
+        resolvedProjectConfig.message,
+        "Run 'gh-symphony repo init' from the target repository.",
+        {
+          reason: resolvedProjectConfig.kind,
+          ...resolvedProjectConfig.projectId ? { projectId: resolvedProjectConfig.projectId } : {}
+        }
+      )
+    );
+  }
+  const ghHostname = githubGraphqlEndpoint?.ghHostname;
+  const ghAuth = ghInstalled ? deps.checkGhAuthenticated({ hostname: ghHostname }) : { authenticated: false };
+  const ghScopes = ghInstalled && ghAuth.authenticated ? deps.checkGhScopes({ hostname: ghHostname }) : { valid: false, missing: [...REQUIRED_GH_SCOPES], scopes: [] };
+  const ghHostnameArg = ghHostname ? ` --hostname ${ghHostname}` : "";
+  const ghLoginCommand = `gh auth login --scopes ${REQUIRED_GH_SCOPES.join(",")}${ghHostnameArg}`;
+  const ghRefreshCommand = `gh auth refresh --scopes ${REQUIRED_GH_SCOPES.join(",")}${ghHostnameArg}`;
   if (envToken) {
     try {
-      auth = await deps.validateGitHubToken(envToken, "env");
+      auth = await deps.validateGitHubToken(envToken, "env", {
+        apiUrl: githubGraphqlEndpoint?.resolvedEndpoint
+      });
     } catch (error) {
       envTokenError = error instanceof Error ? error.message : "Unknown token validation error.";
     }
   }
   if (!auth && ghInstalled && ghAuth.authenticated && ghScopes.valid) {
     try {
-      const ghToken = deps.getGhToken({ allowEnv: false });
-      auth = await deps.validateGitHubToken(ghToken, "gh");
+      const ghToken = deps.getGhToken({
+        allowEnv: false,
+        hostname: ghHostname
+      });
+      auth = await deps.validateGitHubToken(ghToken, "gh", {
+        apiUrl: githubGraphqlEndpoint?.resolvedEndpoint
+      });
     } catch (error) {
       tokenError = error instanceof Error ? error.message : "Unknown token retrieval error.";
     }
@@ -1575,7 +1692,7 @@ ${DOCTOR_USAGE}`);
         "gh_authentication",
         "GitHub authentication",
         "gh auth status failed or no GitHub login is configured.",
-        `Run 'gh auth login --scopes ${REQUIRED_GH_SCOPES.join(",")}' and re-run the doctor command.`
+        `Run '${ghLoginCommand}' and re-run the doctor command.`
       )
     );
   }
@@ -1605,42 +1722,11 @@ ${DOCTOR_USAGE}`);
         "gh_scopes",
         "GitHub token scopes",
         `Missing required scopes: ${missingScopes.join(", ")}.`,
-        `Run 'gh auth refresh --scopes ${REQUIRED_GH_SCOPES.join(",")}' and confirm 'gh auth status' shows the updated scopes.`,
+        `Run '${ghRefreshCommand}' and confirm 'gh auth status${ghHostnameArg}' shows the updated scopes.`,
         { missing: missingScopes, scopes: ghScopes.scopes }
       )
     );
   }
-  resolvedProjectConfig = await deps.inspectManagedProjectSelection({
-    configDir: options.configDir,
-    requestedProjectId: parsedArgs.projectId
-  });
-  if (resolvedProjectConfig.kind === "resolved") {
-    resolvedProjectId = resolvedProjectConfig.projectId;
-    checks.push(
-      passCheck(
-        "managed_project",
-        "Managed project selection",
-        `Resolved managed project "${resolvedProjectConfig.projectId}".`,
-        {
-          projectId: resolvedProjectConfig.projectId,
-          workspaceDir: resolvedProjectConfig.projectConfig.workspaceDir
-        }
-      )
-    );
-  } else {
-    checks.push(
-      failCheck(
-        "managed_project",
-        "Managed project selection",
-        resolvedProjectConfig.message,
-        "Run 'gh-symphony repo init' from the target repository.",
-        {
-          reason: resolvedProjectConfig.kind,
-          ...resolvedProjectConfig.projectId ? { projectId: resolvedProjectConfig.projectId } : {}
-        }
-      )
-    );
-  }
   if (resolvedProjectConfig.kind === "resolved" && resolvedProjectConfig.projectConfig.tracker.adapter === "linear") {
     checks.push(
       await checkLinearTrackerResolution({
@@ -1683,7 +1769,9 @@ ${DOCTOR_USAGE}`);
         throw new Error("Managed project is not bound to a GitHub Project.");
       }
       resolvedGithubProjectBindingId = bindingId;
-      const client = deps.createClient(auth.token);
+      const client = deps.createClient(auth.token, {
+        apiUrl: githubGraphqlEndpoint?.resolvedEndpoint
+      });
       const detail = await deps.getProjectDetail(client, bindingId);
       resolvedGithubProjectDetail = detail;
       checks.push(
@@ -1886,10 +1974,18 @@ ${DOCTOR_USAGE}`);
 }
 function buildRuntimeInstallGuidance(binary, platform) {
   if (binary === "codex") {
-    return "Install Codex CLI using its official installation instructions and ensure 'codex' is on PATH.";
+    return [
+      "Install Codex CLI from https://developers.openai.com/codex/cli/",
+      "and ensure 'codex' is on PATH.",
+      "Then authenticate with 'codex login'."
+    ].join(" ");
   }
   if (binary === "claude" || binary === "claude-code") {
-    return "Install Claude Code using its official installation instructions and ensure the runtime binary is on PATH.";
+    return [
+      "Install Claude Code from https://code.claude.com/docs/en/quickstart",
+      "and ensure the runtime binary is on PATH.",
+      "Then set ANTHROPIC_API_KEY or complete a local Claude login for non-bare runs."
+    ].join(" ");
   }
   if (platform === "win32" && binary) {
     return `Install '${binary}' using its official installation instructions and ensure the directory containing '${binary}.exe' is on PATH.`;

package/dist/index.d.ts

@@ -1,10 +1,49 @@
 type GlobalOptions = {
     configDir: string;
+    configDirOverride?: boolean;
+    configDirSource?: "cli" | "env" | "default";
     verbose: boolean;
     json: boolean;
     noColor: boolean;
 };
 type CommandHandler = (args: string[], options: GlobalOptions) => Promise<void>;
+type CliOptionValues = Partial<GlobalOptions & {
+    assignedOnly?: boolean;
+    config?: string;
+    daemon?: boolean;
+    dryRun?: boolean;
+    file?: string;
+    fix?: boolean;
+    follow?: boolean;
+    force?: boolean;
+    http?: string | boolean;
+    issue?: string;
+    level?: string;
+    logLevel?: string;
+    linearProjectSlug?: string;
+    nonInteractive?: boolean;
+    once?: boolean;
+    output?: string;
+    project?: string;
+    projectId?: string;
+    prune?: boolean;
+    run?: string;
+    runtime?: string;
+    skipContext?: boolean;
+    skipSkills?: boolean;
+    version?: boolean;
+    web?: string | boolean;
+    repoDir?: string;
+    workflowFile?: string;
+    workflow?: string;
+    watch?: boolean;
+    sample?: string;
+    smoke?: boolean;
+    bundle?: string | boolean;
+    attempt?: string;
+    tracker?: string;
+}>;
+declare function resolveGlobalOptions(values: CliOptionValues): GlobalOptions;
 declare function runCli(argv: string[]): Promise<void>;
 
-export { type CommandHandler, type GlobalOptions, runCli };
+export { type CommandHandler, type GlobalOptions, resolveGlobalOptions, runCli };

package/dist/index.js

@@ -417,21 +417,25 @@ function createRemovedCommandHandler(message) {
 
 // src/index.ts
 var COMMANDS = {
-  workflow: () => import("./workflow-L5UEE7JH.js"),
-  setup: () => import("./setup-DMYXHOCB.js"),
-  doctor: () => import("./doctor-GHKE7TRO.js"),
-  upgrade: () => import("./upgrade-UZAGYCRJ.js"),
-  repo: () => import("./repo-V72OM7JL.js"),
+  workflow: () => import("./workflow-JQNOLYAM.js"),
+  setup: () => import("./setup-KCBVNMUJ.js"),
+  doctor: () => import("./doctor-TFKCAGZF.js"),
+  upgrade: () => import("./upgrade-YOYZAIIY.js"),
+  repo: () => import("./repo-7UOBO3QG.js"),
   config: () => import("./config-cmd-OIVIUKG7.js"),
-  version: () => import("./version-UUVKCGQA.js")
+  version: () => import("./version-ZTY3SPRG.js")
 };
 function addGlobalOptions(command) {
   return command.option("--config <dir>", "Config directory").addOption(new Option("--config-dir <dir>").hideHelp()).option("-v, --verbose", "Enable verbose output").option("--json", "Output in JSON format").option("--no-color", "Disable color output");
 }
 function resolveGlobalOptions(values) {
   const configInput = typeof values.config === "string" ? values.config : typeof values.configDir === "string" ? values.configDir : void 0;
+  const configDirSource = configInput !== void 0 ? "cli" : typeof process.env.GH_SYMPHONY_CONFIG_DIR === "string" ? "env" : "default";
+  const hasConfigOverride = configDirSource === "cli" || hasExplicitConfigEnvOverride();
   const options = {
     configDir: resolveConfigDir(configInput),
+    configDirOverride: hasConfigOverride,
+    configDirSource,
     verbose: Boolean(values.verbose),
     json: Boolean(values.json),
     noColor: Boolean(values.noColor)
@@ -442,6 +446,13 @@ function resolveGlobalOptions(values) {
   setNoColor(options.noColor);
   return options;
 }
+function hasExplicitConfigEnvOverride() {
+  const envConfigDir = process.env.GH_SYMPHONY_CONFIG_DIR;
+  if (!envConfigDir) {
+    return false;
+  }
+  return envConfigDir !== "/var/lib/gh-symphony";
+}
 function resolveProjectId(values) {
   return values.projectId ?? values.project;
 }
@@ -706,7 +717,7 @@ function createProgram() {
   addGlobalOptions(
     repo.command("start").description("Start the orchestrator for the current repository").option("-d, --daemon", "Start in daemon mode").option("--once", "Run a single orchestration tick and exit").option("--assigned-only", "Limit this run to assigned issues").option(
       "--http [port]",
-      "Expose dashboard and refresh endpoints over HTTP"
+      "Expose the JSON status API and refresh endpoints over HTTP"
     ).option(
       "--web [port]",
       "Expose the control plane web dashboard and API over HTTP"
@@ -872,5 +883,6 @@ if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.ar
   });
 }
 export {
+  resolveGlobalOptions,
   runCli
 };

package/dist/{repo-V72OM7JL.js → repo-7UOBO3QG.js}

@@ -17,7 +17,7 @@ import {
 import {
   initRepoRuntime,
   parseRepoRuntimeFlags
-} from "./chunk-34YCGQD2.js";
+} from "./chunk-EILO332E.js";
 import {
   OrchestratorService,
   acquireProjectLock,
@@ -33,8 +33,8 @@ import {
   resolveOrchestratorLogLevel,
   resolveTrackerAdapter,
   runCli
-} from "./chunk-HHBXGE23.js";
-import "./chunk-7KFCWMMW.js";
+} from "./chunk-C4QCVQVY.js";
+import "./chunk-XLDJTMW5.js";
 import {
   resolveRepoRuntimeRoot,
   resolveRuntimeRoot
@@ -48,18 +48,20 @@ import {
   resolveGitHubAuth,
   runGhAuthLogin,
   runGhAuthRefresh
-} from "./chunk-SMNIGNS3.js";
+} from "./chunk-FFY5VKNV.js";
 import {
   WorkflowConfigStore,
   deriveIssueWorkspaceKeyFromIdentifier,
+  formatEventMessage,
   isFileMissing,
   isMatchingIssueRun,
   mapIssueOrchestrationStateToStatus,
   parseRecentEvents,
   readJsonFile,
   safeReadDir
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
+  configFilePath,
   daemonPidPath,
   httpStatusPath,
   loadActiveProjectConfig,
@@ -67,11 +69,15 @@ import {
   writeJsonFile
 } from "./chunk-YZP5N5XP.js";
 
+// src/commands/repo.ts
+import { existsSync } from "fs";
+
 // src/commands/logs.ts
 import { readFile, readdir, stat } from "fs/promises";
 import { join, resolve } from "path";
 import { createReadStream } from "fs";
 import { createInterface } from "readline";
+var LOG_LEVELS = ["error", "warn", "info"];
 function parseLogsArgs(args) {
   const parsed = { follow: false };
   for (let i = 0; i < args.length; i += 1) {
@@ -100,6 +106,17 @@ function parseLogsArgs(args) {
 }
 var handler = async (args, options) => {
   const parsed = parseLogsArgs(args);
+  const level = parseLogLevel(parsed.level);
+  if (parsed.level && !level) {
+    process.stderr.write(
+      `Unknown --level "${parsed.level}". Valid values: ${LOG_LEVELS.join(
+        ", "
+      )}.
+`
+    );
+    process.exitCode = 1;
+    return;
+  }
   const runtimeRoot = resolve(options.configDir);
   if (parsed.run) {
     const eventsPath = parsed.projectId ? join(
@@ -119,12 +136,19 @@ var handler = async (args, options) => {
     try {
       const content = await readFile(eventsPath, "utf8");
       const lines = content.trim().split("\n").filter(Boolean);
+      let matchedEvents2 = 0;
       for (const line of lines) {
         const event = JSON.parse(line);
-        if (parsed.projectId && event.projectId !== parsed.projectId) continue;
-        if (parsed.level && event.level !== parsed.level) continue;
-        if (parsed.issue && event.issueIdentifier !== parsed.issue) continue;
+        if (parsed.projectId && getProjectId(event) !== parsed.projectId)
+          continue;
+        if (level && getLevel(event) !== level) continue;
+        if (parsed.issue && getIssueIdentifier(event) !== parsed.issue)
+          continue;
         process.stdout.write(formatEvent(event) + "\n");
+        matchedEvents2 += 1;
+      }
+      if (level && matchedEvents2 === 0) {
+        process.stderr.write(noMatchedEventsMessage(level));
       }
     } catch {
       process.stderr.write(`No events found for run: ${parsed.run}
@@ -177,6 +201,8 @@ var handler = async (args, options) => {
   }
   const runRoots = parsed.projectId ? [join(runtimeRoot, "projects", parsed.projectId, "runs")] : await listProjectRunRoots(runtimeRoot);
   let foundRuns = false;
+  let matchedEvents = 0;
+  const events = [];
   try {
     for (const runsDir of runRoots) {
       const entries = await safeReadDir2(runsDir);
@@ -191,11 +217,13 @@ var handler = async (args, options) => {
           const lines = content.trim().split("\n").filter(Boolean);
           for (const line of lines) {
             const event = JSON.parse(line);
-            if (parsed.projectId && event.projectId !== parsed.projectId)
+            if (parsed.projectId && getProjectId(event) !== parsed.projectId)
               continue;
-            if (parsed.level && event.level !== parsed.level) continue;
-            if (parsed.issue && event.issueIdentifier !== parsed.issue) continue;
-            process.stdout.write(formatEvent(event) + "\n");
+            if (level && getLevel(event) !== level) continue;
+            if (parsed.issue && getIssueIdentifier(event) !== parsed.issue)
+              continue;
+            events.push(event);
+            matchedEvents += 1;
           }
         } catch {
         }
@@ -205,15 +233,58 @@ var handler = async (args, options) => {
   }
   if (!foundRuns) {
     process.stderr.write("No runs found. Start the orchestrator first.\n");
+    return;
+  }
+  if (level && matchedEvents === 0) {
+    process.stderr.write(noMatchedEventsMessage(level));
+    return;
+  }
+  events.sort(
+    (left, right) => String(left.at ?? "").localeCompare(String(right.at ?? ""))
+  );
+  for (const event of events) {
+    process.stdout.write(formatEvent(event) + "\n");
   }
 };
 var logs_default = handler;
 function formatEvent(event) {
   const at = event.at ?? "";
   const eventType = event.event ?? "unknown";
-  const issue = event.issueIdentifier ?? "";
-  const extra = event.error ? ` error=${event.error}` : "";
-  return `[${at}] ${eventType} ${issue}${extra}`;
+  const issue = getIssueIdentifier(event);
+  const message = formatEventMessage(event);
+  const subject = issue ? ` ${issue}` : "";
+  const extra = message ? ` ${message}` : "";
+  return `[${at}] ${eventType}${subject}${extra}`;
+}
+function getProjectId(event) {
+  return typeof event.projectId === "string" ? event.projectId : void 0;
+}
+function getLevel(event) {
+  switch (event.event) {
+    case "run-failed":
+    case "turn_failed":
+    case "worker-error":
+    case "hook-failed":
+      return "error";
+    case "run-suppressed":
+    case "run-retried":
+      return "warn";
+    default:
+      return "info";
+  }
+}
+function parseLogLevel(level) {
+  if (!level) {
+    return void 0;
+  }
+  return LOG_LEVELS.includes(level) ? level : void 0;
+}
+function noMatchedEventsMessage(level) {
+  return `No events matched the provided filters (--level ${level}).
+`;
+}
+function getIssueIdentifier(event) {
+  return typeof event.issueIdentifier === "string" ? event.issueIdentifier : "";
 }
 async function listProjectRunRoots(runtimeRoot) {
   const roots = [join(runtimeRoot, "runs")];
@@ -2066,7 +2137,7 @@ var handler5 = async (args, options) => {
       if (httpServer) {
         logLine(
           cyan("\u25A1"),
-          parsed.webPort !== void 0 ? `Web dashboard listening on ${httpServer.url}` : `HTTP dashboard listening on ${httpServer.url}`
+          parsed.webPort !== void 0 ? `Web dashboard listening on ${httpServer.url}` : `HTTP status API listening on ${httpServer.url}`
         );
       }
       logLine(
@@ -2085,7 +2156,7 @@ var handler5 = async (args, options) => {
             if (httpServer) {
               logLine(
                 cyan("\u25A1"),
-                parsed.webPort !== void 0 ? "One-shot tick completed; web dashboard remains available until Ctrl+C" : "One-shot tick completed; HTTP dashboard remains available until Ctrl+C"
+                parsed.webPort !== void 0 ? "One-shot tick completed; web dashboard remains available until Ctrl+C" : "One-shot tick completed; HTTP status API remains available until Ctrl+C"
               );
               if (shuttingDown) {
                 break;
@@ -2807,6 +2878,7 @@ var handler7 = async (args, options) => {
 var stop_default = handler7;
 
 // src/commands/repo.ts
+var DOCKER_DEFAULT_CONFIG_DIR = "/var/lib/gh-symphony";
 var handler8 = async (args, options) => {
   const [subcommand, ...rest] = args;
   switch (subcommand) {
@@ -2850,11 +2922,21 @@ var handler8 = async (args, options) => {
 };
 var repo_default = handler8;
 function repoOptions(options) {
+  const repoRuntimeRoot = resolveRepoRuntimeRoot();
   return {
     ...options,
-    configDir: resolveRepoRuntimeRoot()
+    configDir: shouldUseConfigDirOverride(options, repoRuntimeRoot) ? options.configDir : repoRuntimeRoot
   };
 }
+function shouldUseConfigDirOverride(options, repoRuntimeRoot) {
+  if (!options.configDirOverride) {
+    return false;
+  }
+  if (options.configDirSource === "env" && options.configDir === DOCKER_DEFAULT_CONFIG_DIR && existsSync(configFilePath(repoRuntimeRoot))) {
+    return false;
+  }
+  return true;
+}
 async function repoInit(args, options) {
   if (rejectRemovedProjectId(args)) {
     return;
@@ -2898,5 +2980,6 @@ function formatRepoSpec(repo) {
   return `${repo.owner}/${repo.name}`;
 }
 export {
-  repo_default as default
+  repo_default as default,
+  repoOptions
 };

package/dist/{setup-DMYXHOCB.js → setup-KCBVNMUJ.js}

@@ -16,10 +16,10 @@ import {
   warnDeprecatedSkipContext,
   writeEcosystem,
   writeWorkflowPlan
-} from "./chunk-4ZHWEQQL.js";
+} from "./chunk-775A5LB5.js";
 import {
   initRepoRuntime
-} from "./chunk-34YCGQD2.js";
+} from "./chunk-EILO332E.js";
 import "./chunk-3IRPSPAF.js";
 import {
   GhAuthError,
@@ -32,8 +32,8 @@ import {
   getProjectDetail,
   listUserProjects,
   validateToken
-} from "./chunk-SMNIGNS3.js";
-import "./chunk-LJUEOVAQ.js";
+} from "./chunk-FFY5VKNV.js";
+import "./chunk-RGCSM2KZ.js";
 import "./chunk-YZP5N5XP.js";
 
 // src/commands/setup.ts

package/dist/{upgrade-UZAGYCRJ.js → upgrade-YOYZAIIY.js}

@@ -16,8 +16,8 @@ function execFileAsync(file, args, execFileImpl = execFileCallback) {
   });
 }
 function resolveCurrentCliVersion() {
-  if ("0.4.5".length > 0) {
-    return "0.4.5";
+  if ("0.4.7".length > 0) {
+    return "0.4.7";
   }
   const pkg = JSON.parse(
     readFileSync(new URL("../../package.json", import.meta.url), "utf8")

package/dist/{version-UUVKCGQA.js → version-ZTY3SPRG.js}

@@ -2,7 +2,7 @@
 
 // src/commands/version.ts
 var handler = async (_args, options) => {
-  const version = "0.4.5";
+  const version = "0.4.7";
   if (options.json) {
     process.stdout.write(JSON.stringify({ version }) + "\n");
   } else {

package/dist/worker-entry.js

@@ -6,7 +6,7 @@ import {
   normalizeCodexRuntimeEvents,
   prepareCodexRuntimePlan,
   resolveLocalRuntimeLaunchConfig
-} from "./chunk-7KFCWMMW.js";
+} from "./chunk-XLDJTMW5.js";
 import {
   DEFAULT_AGENT_INPUT_REQUIRED_REASON,
   classifySessionExit,
@@ -17,7 +17,7 @@ import {
   resolveClaudeCommandBinary,
   resolveWorkflowRuntimeCommand,
   runClaudePreflight
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 
 // ../worker/src/index.ts
 import { spawn as spawn2 } from "child_process";

package/dist/{workflow-L5UEE7JH.js → workflow-JQNOLYAM.js}

@@ -6,12 +6,12 @@ import {
   resetWorkflowCommandDependenciesForTest,
   setWorkflowCommandDependenciesForTest,
   workflow_default
-} from "./chunk-I3CZXKS5.js";
-import "./chunk-4ZHWEQQL.js";
-import "./chunk-HHBXGE23.js";
-import "./chunk-7KFCWMMW.js";
-import "./chunk-SMNIGNS3.js";
-import "./chunk-LJUEOVAQ.js";
+} from "./chunk-3ACU7O47.js";
+import "./chunk-775A5LB5.js";
+import "./chunk-C4QCVQVY.js";
+import "./chunk-XLDJTMW5.js";
+import "./chunk-FFY5VKNV.js";
+import "./chunk-RGCSM2KZ.js";
 import "./chunk-YZP5N5XP.js";
 export {
   workflow_default as default,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gh-symphony/cli",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "license": "MIT",
   "author": "hojinzs",
   "description": "Interactive CLI for GitHub Symphony orchestration",
@@ -43,10 +43,10 @@
     "tsup": "^8.5.1",
     "@gh-symphony/core": "0.0.14",
     "@gh-symphony/control-plane": "0.0.15",
-    "@gh-symphony/dashboard": "0.0.14",
     "@gh-symphony/orchestrator": "0.0.14",
     "@gh-symphony/runtime-claude": "0.0.14",
     "@gh-symphony/tracker-github": "0.0.14",
+    "@gh-symphony/dashboard": "0.0.14",
     "@gh-symphony/worker": "0.0.14"
   },
   "scripts": {