@great-arrow/cli 0.9.4 → 0.9.6

package/dist/index.js

@@ -3339,11 +3339,11 @@ var require_util = __commonJS({
           if (files.includes("node_modules") || files.includes("package.json") || files.includes("package.json5") || files.includes("package.yaml") || files.includes("pnpm-workspace.yaml")) {
             return name24;
           }
-          const dirname10 = path10.dirname(name24);
-          if (dirname10 === name24) {
+          const dirname11 = path10.dirname(name24);
+          if (dirname11 === name24) {
             return original;
           }
-          return find(dirname10, original);
+          return find(dirname11, original);
         } catch (error62) {
           if (name24 === original) {
             if (error62.code === "ENOENT") {
@@ -9483,7 +9483,7 @@ function isNodeError(value) {
 
 // src/lib/version.ts
 var CLI_PACKAGE_NAME = "@great-arrow/cli";
-var CLI_VERSION = "0.9.4";
+var CLI_VERSION = "0.9.6";
 var GAD_INSTALL_VERSION = "2026.08.08";
 var GAD_INSTALL_MIN_VERSION = "2026.06.22";
 var GAD_INSTALL_HEADER = "X-GAD-Install-Version";
@@ -15755,7 +15755,7 @@ function serverMapsFromJson(parsed, serversKey) {
   return maps;
 }
 function findCodexEntries(location, content) {
-  const entries = [];
+  const entries2 = [];
   const sections = content.split(/^\s*\[/m).slice(1);
   const seen = /* @__PURE__ */ new Set();
   for (const raw of sections) {
@@ -15769,7 +15769,7 @@ function findCodexEntries(location, content) {
     const transport = codexTransportFields(body);
     if (!isGreatArrowServer(name23, transport)) continue;
     seen.add(name23);
-    entries.push({
+    entries2.push({
       clientId: location.clientId,
       client: location.client,
       scope: location.scope,
@@ -15778,7 +15778,7 @@ function findCodexEntries(location, content) {
       surface: typeof transport.command === "string" ? "stdio" : "http"
     });
   }
-  return entries;
+  return entries2;
 }
 function findGreatArrowEntries(location, content, options = {}) {
   if (location.format === "toml") return findCodexEntries(location, content);
@@ -15790,7 +15790,7 @@ function findGreatArrowEntries(location, content, options = {}) {
   }
   if (!parsed) return [];
   const serversKey = location.serversKey ?? "mcpServers";
-  const entries = [];
+  const entries2 = [];
   for (const { servers, projectDir } of serverMapsFromJson(
     parsed,
     serversKey
@@ -15799,7 +15799,7 @@ function findGreatArrowEntries(location, content, options = {}) {
       const entry = asObject3(value);
       if (!entry) continue;
       if (!isGreatArrowServer(name23, entry)) continue;
-      entries.push({
+      entries2.push({
         clientId: location.clientId,
         client: location.client,
         scope: projectDir ? "project" : location.scope,
@@ -15814,7 +15814,7 @@ function findGreatArrowEntries(location, content, options = {}) {
       });
     }
   }
-  return entries;
+  return entries2;
 }
 function hasGreatArrowHooks(settingsContent) {
   let parsed = null;
@@ -15849,9 +15849,9 @@ function compareEntries(a, b) {
   if (a.scope !== b.scope) return a.scope === "user" ? -1 : 1;
   return a.path.localeCompare(b.path);
 }
-function detectDuplicates(entries) {
+function detectDuplicates(entries2) {
   const byClient = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
+  for (const entry of entries2) {
     const list = byClient.get(entry.clientId) ?? [];
     list.push(entry);
     byClient.set(entry.clientId, list);
@@ -15878,8 +15878,8 @@ function detectDuplicates(entries) {
   }
   return findings.sort((a, b) => a.clientId.localeCompare(b.clientId));
 }
-function connectorGuidance(entries) {
-  const hasLocalClaude = entries.some(
+function connectorGuidance(entries2) {
+  const hasLocalClaude = entries2.some(
     (entry) => entry.clientId === "claude-code" || entry.clientId === "claude-desktop"
   );
   if (!hasLocalClaude) return null;
@@ -17570,12 +17570,12 @@ var logsCommand = new Command("logs").description("Tail MCP connection log with
       ]);
       return;
     }
-    const entries = Array.isArray(data) ? data : [];
-    if (entries.length === 0) {
+    const entries2 = Array.isArray(data) ? data : [];
+    if (entries2.length === 0) {
       fmt.info("No recent MCP connection events.");
       return;
     }
-    for (const entry of entries) {
+    for (const entry of entries2) {
       renderLogEntry(entry, c);
     }
   } catch {
@@ -17922,15 +17922,15 @@ async function scanConnections() {
     join19(home, ".claude", "settings.json")
   );
   const hooksInstalled = hookSettings ? hasGreatArrowHooks(hookSettings) : false;
-  const entries = [];
+  const entries2 = [];
   for (const location of knownConfigLocations(home, process.cwd())) {
     const content = await readIfExists(location.path);
     if (content === null) continue;
-    entries.push(
+    entries2.push(
       ...findGreatArrowEntries(location, content, { hooksInstalled })
     );
   }
-  return entries;
+  return entries2;
 }
 async function probeEndpoint() {
   try {
@@ -18015,8 +18015,8 @@ var doctorSubcommand = new Command("doctor").description(
     const home = homedir12();
     const proxyPath = await resolveProxyScript(options.proxy);
     const diagnostics = proxyPath ? await runProxyDiagnostics(proxyPath) : null;
-    const entries = await scanConnections();
-    const duplicates = detectDuplicates(entries);
+    const entries2 = await scanConnections();
+    const duplicates = detectDuplicates(entries2);
     const credentialFile = await readIfExists(
       join19(home, ".great-arrow", "credential")
     );
@@ -18039,7 +18039,7 @@ var doctorSubcommand = new Command("doctor").description(
       }),
       await probeEndpoint()
     ];
-    if (entries.length === 0) {
+    if (entries2.length === 0) {
       findings.push({
         code: "no_connections",
         level: "warn",
@@ -18064,14 +18064,14 @@ var doctorSubcommand = new Command("doctor").description(
       now: Date.now()
     });
     const applied = options.migrate ? await applyMigration(plan) : [];
-    const guidance = connectorGuidance(entries);
+    const guidance = connectorGuidance(entries2);
     if (jsonFlag) {
       process.stdout.write(
         JSON.stringify(
           {
             proxyPath,
             diagnostics,
-            entries,
+            entries: entries2,
             duplicates,
             findings,
             migration: { plan, applied, migrated: Boolean(options.migrate) },
@@ -18084,10 +18084,10 @@ var doctorSubcommand = new Command("doctor").description(
     } else {
       process.stdout.write(`${c.dim("Connections")}
 `);
-      if (entries.length === 0) {
+      if (entries2.length === 0) {
         process.stdout.write("  (none found)\n");
       }
-      for (const entry of entries) {
+      for (const entry of entries2) {
         process.stdout.write(`  ${entry.client}: ${describeEntry(entry)}
 `);
       }
@@ -21009,9 +21009,9 @@ function assertNever(_x) {
 }
 function assert(_) {
 }
-function getEnumValues(entries) {
-  const numericValues = Object.values(entries).filter((v) => typeof v === "number");
-  const values = Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
+function getEnumValues(entries2) {
+  const numericValues = Object.values(entries2).filter((v) => typeof v === "number");
+  const values = Object.entries(entries2).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
   return values;
 }
 function joinValues(array3, separator = "|") {
@@ -22846,16 +22846,16 @@ var $ZodCheckProperties = /* @__PURE__ */ $constructor("$ZodCheckProperties", (i
   hide(inst, Symbol.iterator, function* () {
     yield inst;
   });
-  let entries;
+  let entries2;
   inst._zod.check = (payload) => {
     if (payload.value == null) {
       payload.issues.push({ expected: "object", code: "invalid_type", input: payload.value, inst });
       return void 0;
     }
-    entries ?? (entries = Reflect.ownKeys(def.shape).map((key) => [key, def.shape[key]]));
+    entries2 ?? (entries2 = Reflect.ownKeys(def.shape).map((key) => [key, def.shape[key]]));
     const input2 = payload.value;
     let proms;
-    for (const [key, schema] of entries) {
+    for (const [key, schema] of entries2) {
       const result = schema._zod.run({ value: input2[key], issues: [] }, {});
       if (result instanceof Promise) {
         proms ?? (proms = []);
@@ -35673,18 +35673,18 @@ function _set(Class2, valueType, params) {
 }
 // @__NO_SIDE_EFFECTS__
 function _enum(Class2, values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
+  const entries2 = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
   return new Class2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...normalizeParams(params)
   });
 }
 // @__NO_SIDE_EFFECTS__
-function _nativeEnum(Class2, entries, params) {
+function _nativeEnum(Class2, entries2, params) {
   return new Class2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...normalizeParams(params)
   });
 }
@@ -38667,17 +38667,17 @@ var ZodEnum = /* @__PURE__ */ $constructor("ZodEnum", (inst, def) => {
   };
 });
 function _enum2(values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
+  const entries2 = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
   return new ZodEnum({
     type: "enum",
-    entries,
+    entries: entries2,
     ...util_exports.normalizeParams(params)
   });
 }
-function nativeEnum(entries, params) {
+function nativeEnum(entries2, params) {
   return new ZodEnum({
     type: "enum",
-    entries,
+    entries: entries2,
     ...util_exports.normalizeParams(params)
   });
 }
@@ -49454,11 +49454,11 @@ function firstString(...candidates) {
   }
   return void 0;
 }
-function collect(entries, read) {
-  if (!Array.isArray(entries)) return [];
+function collect(entries2, read) {
+  if (!Array.isArray(entries2)) return [];
   const out2 = [];
   const seen = /* @__PURE__ */ new Set();
-  for (const entry of entries) {
+  for (const entry of entries2) {
     if (out2.length >= MAX_LOCAL_MODELS) break;
     if (!entry || typeof entry !== "object") continue;
     const { id, label, contextLength } = read(entry);
@@ -50518,7 +50518,7 @@ function callCommand() {
 // src/lib/runner/approval.ts
 import { createHash as createHash6 } from "node:crypto";
 import { chmod as chmod4, mkdir as mkdir9, readFile as readFile8, rename as rename3, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { dirname as dirname9, join as join14 } from "node:path";
 
 // src/lib/runner/repo.ts
 import { chmod as chmod3, mkdir as mkdir8, realpath as realpath2, writeFile as writeFile6 } from "node:fs/promises";
@@ -50648,11 +50648,12 @@ function worktreeGitBytes(layout, args, opts = {}) {
 }
 
 // src/lib/runner/text.ts
+var FORMAT = new RegExp("(?!\\u200d)\\p{Cf}", "gu");
 function cleanLine(text3) {
-  return text3.replace(/[\u0000-\u001f\u007f-\u009f]+/g, " ").trim();
+  return text3.replace(FORMAT, "").replace(/[\u0000-\u001f\u007f-\u009f]+/g, " ").trim();
 }
 function cleanText(text3) {
-  return text3.replace(/\r\n?/g, "\n").replace(/\t/g, "  ").replace(/[\u0000-\u0009\u000b-\u001f\u007f-\u009f]+/g, " ");
+  return text3.replace(FORMAT, "").replace(/\r\n?/g, "\n").replace(/\t/g, "  ").replace(/[\u0000-\u0009\u000b-\u001f\u007f-\u009f]+/g, " ");
 }
 var PREVIEW_LINES = 3;
 var PREVIEW_CHARS = 240;
@@ -50677,8 +50678,9 @@ function preview(text3) {
 }
 
 // src/lib/runner/sandbox.ts
+import { readdirSync } from "node:fs";
 import { lstat, readFile as readFile7, realpath } from "node:fs/promises";
-import { dirname as dirname8, join as join12, resolve as resolve4 } from "node:path";
+import { basename as basename2, dirname as dirname8, join as join12, resolve as resolve4 } from "node:path";
 var TASK_FILE = ".gad/task.md";
 var CLAUDE_ALLOWED_DOMAINS = [
   "api.anthropic.com",
@@ -50779,13 +50781,44 @@ var CLI_READ_HARDENING = [
   ".cargo/credentials.toml",
   ".terraform.d/credentials.tfrc.json"
 ];
-function approvalFile(layout) {
-  return join12(dirname8(dirname8(layout.worktree)), "approved.json");
+var CLI_ONLY_READ_HARDENING = ["Library/Keychains"];
+function runsDirOf(layout) {
+  return dirname8(dirname8(dirname8(layout.worktree)));
+}
+function approvalsDir(layout) {
+  return join12(dirname8(runsDirOf(layout)), "approvals");
+}
+function entries(dir) {
+  try {
+    return readdirSync(dir);
+  } catch {
+    return [];
+  }
+}
+var UUID5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+function siblingPaths(layout) {
+  const wtDir = dirname8(layout.worktree);
+  const runDir = dirname8(wtDir);
+  const runsDir = dirname8(runDir);
+  if (basename2(wtDir) !== "wt" || !UUID5.test(basename2(runDir))) return [];
+  const others = (dir, keep) => entries(dir).map((name23) => join12(dir, name23)).filter((path10) => path10 !== keep);
+  return [
+    ...others(runsDir, runDir),
+    ...others(runDir, wtDir),
+    ...others(wtDir, layout.worktree)
+  ];
+}
+function cliOnlyDenyRead(layout) {
+  return [
+    ...CLI_ONLY_READ_HARDENING.map((rel) => join12(layout.home, rel)),
+    approvalsDir(layout),
+    ...siblingPaths(layout)
+  ];
 }
 function denyRead(layout) {
   return [
     ...CLI_READ_HARDENING.map((rel) => join12(layout.home, rel)),
-    approvalFile(layout)
+    ...cliOnlyDenyRead(layout)
   ];
 }
 var CREDENTIAL_SET = new Set(
@@ -50925,14 +50958,14 @@ function kickoff(runId, todoId) {
 }
 
 // src/lib/runner/repo.ts
-var UUID5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var UUID6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var BRANCH_NAME = /^(?!-)(?!.*\.\.)[A-Za-z0-9._/-]+$/;
 var GITHUB_REMOTE = /^(?:https?:\/\/(?:[^@/]+@)?github\.com\/|ssh:\/\/git@github\.com(?::\d+)?\/|git@github\.com:)([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+?)(?:\.git)?\/?$/;
 function runsRoot() {
   return join13(homedir10(), ".gad", "runs");
 }
 function isRunId(id) {
-  return UUID5.test(id);
+  return UUID6.test(id);
 }
 var short = (id) => id.slice(0, 8);
 function runnerBranch(runId, todoId) {
@@ -51043,9 +51076,12 @@ function sha256(text3) {
   return createHash6("sha256").update(text3, "utf8").digest("hex");
 }
 var plainTitle = cleanLine;
+function approvalsDir2(runsDir) {
+  return join14(dirname9(runsDir), "approvals");
+}
 function approvedFile(runsDir, runId) {
   if (!isRunId(runId)) throw new Error("run id must be a UUID");
-  return join14(runsDir, runId, "approved.json");
+  return join14(approvalsDir2(runsDir), `${runId}.json`);
 }
 function approveShown(cards) {
   return new Map(
@@ -51057,9 +51093,8 @@ function approveShown(cards) {
 }
 async function saveApproved(runsDir, runId, approved) {
   const file2 = approvedFile(runsDir, runId);
-  const dir = join14(runsDir, runId);
+  const dir = approvalsDir2(runsDir);
   await mkdir9(dir, { recursive: true, mode: 448 });
-  await chmod4(runsDir, 448);
   await chmod4(dir, 448);
   const body = [...approved].map(([todoId, c]) => ({ todoId, ...c }));
   const tmp = `${file2}.tmp`;
@@ -51161,13 +51196,19 @@ async function workCard(deps, todoId, card) {
   if (ran.exit !== 0)
     return { outcome: "failed", detail: `agent_exit_${ran.exit ?? "signal"}` };
   const result = await deps.publish(prepared, todoId, card.title, deps.signal).catch(() => ({ failed: "publish_failed" }));
-  if (deps.signal.aborted) return { outcome: "stopped" };
+  const takeBack = (sha) => () => deps.unpublish(prepared, sha).catch(() => false);
+  if (deps.signal.aborted) {
+    if (typeof result === "object" && "pushed" in result)
+      await sayTakenBack(deps, prepared.branch, takeBack(result.pushed));
+    return { outcome: "stopped" };
+  }
   if (result === "no_changes") return { outcome: "no_changes" };
   if ("pushed" in result)
     return {
       outcome: "pushed",
       branch: prepared.branch,
-      headSha: result.pushed
+      headSha: result.pushed,
+      takeBack: takeBack(result.pushed)
     };
   return {
     outcome: "failed",
@@ -51177,6 +51218,12 @@ async function workCard(deps, todoId, card) {
     } : {}
   };
 }
+async function sayTakenBack(deps, branch, takeBack) {
+  if (!await takeBack())
+    deps.print(
+      `    Could not delete the pushed branch ${branch}; delete it on GitHub if you do not want it.`
+    );
+}
 function reportFields(o) {
   if (o.outcome === "pushed")
     return { outcome: o.outcome, branch: o.branch, head_sha: o.headSha };
@@ -51289,6 +51336,8 @@ async function runLoop(deps, input2) {
       if (!(error62 instanceof RunnerCallError && error62.code === "card_released"))
         throw error62;
       deps.print(`${label} \u2026 taken back on the board`);
+      if (outcome.outcome === "pushed")
+        await sayTakenBack(deps, outcome.branch, outcome.takeBack);
       continue;
     } finally {
       if (claimed) await release(deps, next.todoId);
@@ -51650,7 +51699,7 @@ async function reapGroup(pgid, waitMs = REAP_WAIT_MS) {
 
 // src/lib/runner/holders.ts
 import { execFile as execFile5 } from "node:child_process";
-import { readdirSync, readlinkSync, statSync as statSync2 } from "node:fs";
+import { readdirSync as readdirSync2, readlinkSync, statSync as statSync2 } from "node:fs";
 var LSOF_DEADLINE_MS = 2e4;
 var CHECKS = 5;
 var PAUSE_MS = 250;
@@ -51763,15 +51812,15 @@ async function lsofUsers(root, uid, exec2 = run3) {
   return users;
 }
 var errno = (error62) => error62.code;
-function procUsers(root, uid, fs6 = { readdirSync, statSync: statSync2, readlinkSync }) {
-  let entries;
+function procUsers(root, uid, fs6 = { readdirSync: readdirSync2, statSync: statSync2, readlinkSync }) {
+  let entries2;
   try {
-    entries = fs6.readdirSync("/proc").filter((e) => /^\d+$/.test(e));
+    entries2 = fs6.readdirSync("/proc").filter((e) => /^\d+$/.test(e));
   } catch {
     return null;
   }
   const users = [];
-  for (const pid of entries) {
+  for (const pid of entries2) {
     try {
       if (fs6.statSync(`/proc/${pid}`).uid !== uid) continue;
     } catch (error62) {
@@ -52277,6 +52326,17 @@ async function publishBranch(layout, branch, base, message, signal, options = {}
     throw error62;
   }
 }
+async function unpublishBranch(layout, branch, sha) {
+  if (!RUNNER_BRANCH.test(branch) || !SHA.test(sha)) return false;
+  const push = await worktreeGit(layout, [
+    "push",
+    "--quiet",
+    `--force-with-lease=refs/heads/${branch}:${sha}`,
+    "origin",
+    `:refs/heads/${branch}`
+  ]);
+  return push.code === 0;
+}
 
 // src/commands/board-run.ts
 function parseData(result) {
@@ -52383,6 +52443,7 @@ var work = ({
       commitMessage(title, view.runId, todoId),
       signal
     ),
+    unpublish: (prepared, headSha2) => unpublishBranch(prepared, prepared.branch, headSha2),
     sleep: sleep2,
     note: (todoId, line) => {
       try {
@@ -52805,7 +52866,7 @@ import {
   writeFile as writeFile9
 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import { basename as basename2, dirname as dirname9, isAbsolute as isAbsolute4, join as join18, relative as relative2, sep } from "node:path";
+import { basename as basename3, dirname as dirname10, isAbsolute as isAbsolute4, join as join18, relative as relative2, sep } from "node:path";
 var GH_APPLY_TIMEOUT_MS = 3e4;
 var GIT_APPLY_TIMEOUT_MS = 3e4;
 function runWithStdin(file2, args, input2, timeoutMs) {
@@ -52962,7 +53023,7 @@ async function applySshKey(path10, privatePem) {
   const content = privatePem.endsWith("\n") ? privatePem : `${privatePem}
 `;
   try {
-    await mkdir10(dirname9(file2), { recursive: true, mode: 448 });
+    await mkdir10(dirname10(file2), { recursive: true, mode: 448 });
     await writeAtomic(file2, content, 384);
   } catch {
     return { ok: false, code: "ssh_write_failed" };
@@ -52983,14 +53044,14 @@ var SSH_NOT_A_KEY = /* @__PURE__ */ new Set([
 async function sshTargetRefusal(path10, sshDir = join18(homedir11(), ".ssh")) {
   const file2 = expandHome(path10);
   if (!isAbsolute4(file2)) return { ok: false, code: "target_invalid" };
-  if (SSH_NOT_A_KEY.has(basename2(file2))) {
+  if (SSH_NOT_A_KEY.has(basename3(file2))) {
     return { ok: false, code: "target_not_a_key" };
   }
   let root;
   let parent;
   try {
     root = await realpath3(sshDir);
-    parent = await realpath3(dirname9(file2));
+    parent = await realpath3(dirname10(file2));
   } catch {
     return { ok: false, code: "target_outside_ssh_dir" };
   }
@@ -53145,7 +53206,7 @@ var REPORT_KEY = /^[A-Z_][A-Z0-9_]{0,127}$/;
 var REPORT_PATH = /^[ -~]{1,200}$/;
 var TOKEN_SHAPED = /[A-Za-z0-9]{33,}/;
 var SECRET_PREFIX = /(gh[pousr]_|github_pat_|-----BEGIN)/;
-var UUID6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function deviceSlot(workspaceId) {
   return `key-rotation-device:${workspaceId}`;
 }
@@ -53323,7 +53384,7 @@ async function enroll(client2, workspaceId, opts = {}) {
     publicKey: pair.publicKey,
     report
   });
-  const enrollmentId = typeof begun?.enrollmentId === "string" && UUID6.test(begun.enrollmentId) ? begun.enrollmentId : null;
+  const enrollmentId = typeof begun?.enrollmentId === "string" && UUID7.test(begun.enrollmentId) ? begun.enrollmentId : null;
   if (!enrollmentId) {
     throw new CliError(
       "The server did not start the enrollment.",
@@ -53341,7 +53402,7 @@ async function enroll(client2, workspaceId, opts = {}) {
     action: "enroll",
     approvalToken
   });
-  const deviceId = typeof done?.deviceId === "string" && UUID6.test(done.deviceId) ? done.deviceId : null;
+  const deviceId = typeof done?.deviceId === "string" && UUID7.test(done.deviceId) ? done.deviceId : null;
   if (!deviceId) {
     throw new CliError(
       "The server did not complete the enrollment.",
@@ -53370,7 +53431,7 @@ async function enroll(client2, workspaceId, opts = {}) {
 }
 
 // src/commands/keys.ts
-var UUID7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID8 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function patRequired(apiUrl) {
   return authError(
     "gad keys needs a personal access token; this sign-in is an OAuth session.",
@@ -53423,7 +53484,7 @@ async function keysContext() {
   });
   const value = await probe.mcpCall("workspace_introspect", {}, 5e3);
   const workspaceId = value?.workspace?.id;
-  if (value?.error || !workspaceId || !UUID7.test(workspaceId)) {
+  if (value?.error || !workspaceId || !UUID8.test(workspaceId)) {
     throw validationError(
       "GreatArrow.ai could not confirm your workspace.",
       "Run 'gad whoami', or choose one with 'gad --workspace <id>'."
@@ -53444,7 +53505,7 @@ async function keysContext() {
   };
 }
 function requireRunId(runId) {
-  if (!UUID7.test(runId)) {
+  if (!UUID8.test(runId)) {
     throw validationError(
       `'${stripControlChars(runId)}' is not a run id.`,
       "Copy the run id from 'gad keys list' or the run page."
@@ -53573,7 +53634,7 @@ function enrollCommand() {
 function toUpdateRow(v) {
   if (typeof v !== "object" || v === null) return null;
   const r = v;
-  if (typeof r.id !== "string" || !UUID7.test(r.id)) return null;
+  if (typeof r.id !== "string" || !UUID8.test(r.id)) return null;
   const ref = {};
   if (typeof r.targetRef === "object" && r.targetRef !== null) {
     for (const [k, val] of Object.entries(r.targetRef)) {
@@ -54460,14 +54521,14 @@ var Temp = {
     }
   },
   truncate: (filePath) => {
-    const basename3 = path3.basename(filePath);
-    if (basename3.length <= LIMIT_BASENAME_LENGTH)
+    const basename4 = path3.basename(filePath);
+    if (basename4.length <= LIMIT_BASENAME_LENGTH)
       return filePath;
-    const truncable = /^(\.?)(.*?)((?:\.[^.]+)?(?:\.tmp-\d{10}[a-f0-9]{6})?)$/.exec(basename3);
+    const truncable = /^(\.?)(.*?)((?:\.[^.]+)?(?:\.tmp-\d{10}[a-f0-9]{6})?)$/.exec(basename4);
     if (!truncable)
       return filePath;
-    const truncationLength = basename3.length - LIMIT_BASENAME_LENGTH;
-    return `${filePath.slice(0, -basename3.length)}${truncable[1]}${truncable[2].slice(0, -truncationLength)}${truncable[3]}`;
+    const truncationLength = basename4.length - LIMIT_BASENAME_LENGTH;
+    return `${filePath.slice(0, -basename4.length)}${truncable[1]}${truncable[2].slice(0, -truncationLength)}${truncable[3]}`;
   }
 };
 node_default(Temp.purgeSyncAll);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@great-arrow/cli",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "GreatArrow.ai CLI tool",
   "type": "module",
   "bin": {