@humwick/runner 0.130.5 → 0.130.6

package/src/vault-proxy-hop.ts

@@ -19,7 +19,7 @@ function basic(user: string, password: string): string {
 }
 
 /**
- * #3577: a running provider cannot take a new proxy URL, and Agent Vault sessions cannot be extended.
+ * a running provider cannot take a new proxy URL, and Agent Vault sessions cannot be extended.
  * The provider therefore talks to this loopback hop, which forwards each request to the Vault proxy with
  * the current session token. Agent Vault authenticates at CONNECT, so rotation never touches open tunnels.
  */
@@ -36,7 +36,7 @@ export async function startVaultProxyHop(upstreamUrl: string, vault: string, tok
     const [requestLine = "", ...headers] = head.split("\r\n");
     const presented = Buffer.from(headers.find((line) => /^proxy-authorization:/i.test(line))?.slice(20).trim() ?? "");
     if (presented.length !== expected.length || !timingSafeEqual(presented, expected)) {
-      client.end("HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"agent-relay\"\r\nContent-Length: 0\r\nConnection: close\r\n\r\n");
+      client.end("HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"humwick\"\r\nContent-Length: 0\r\nConnection: close\r\n\r\n");
       return;
     }
     const tunnel = /^CONNECT\s/i.test(requestLine);

package/src/web-tools.ts

@@ -32,7 +32,7 @@ export function claudeWebToolsSteer(config: WebToolsConfig): string {
 
 /** Always set, so a launch never inherits a parent agent's list. */
 export function webToolsEnv(config: WebToolsConfig): Record<string, string> {
-  return writeChildEnv({}, { [WEB_TOOLS_ENV]: launchWebTools(config).join(","), AGENT_RELAY_WEB_SEARCH: webSearchEnabledFromEnv() ? "1" : "0" });
+  return writeChildEnv({}, { [WEB_TOOLS_ENV]: launchWebTools(config).join(","), HUMWICK_WEB_SEARCH: webSearchEnabledFromEnv() ? "1" : "0" }, []);
 }
 
 /** Codex hides switched-off tools on the flat bridge with its native per-server denylist. */
@@ -47,7 +47,7 @@ export function openCodeWebToolsConfig(config: WebToolsConfig): { tools?: Record
   return disabled.length ? { tools: Object.fromEntries(disabled.map((tool) => [`${SHARED_MCP_SERVER_NAME}_${tool}`, false])) } : {};
 }
 
-/** #3250: Codex's one web_search tool also owns open/find; it cannot disable search and fetch separately. */
+/** Codex's one web_search tool also owns open/find; it cannot disable search and fetch separately. */
 export function codexWebToolsConfigArgs(config: WebToolsConfig): string[] {
   return launchWebTools(config).length ? ["-c", 'web_search="disabled"'] : [];
 }

package/agent-bin/agent-relay-browser

@@ -1,10 +0,0 @@
-#!/bin/sh
-# Humwick #3489: `humwick browser` from the release this agent's runner belongs to, never an older
-# install a login shell puts first on PATH. Checkout: <root>/runner/agent-bin -> <root>/src;
-# npm: node_modules/@humwick/runner/agent-bin -> node_modules/@humwick/server/src.
-here=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P) || exit 1
-for cli in "$here/../../src/index.ts" "$here/../../server/src/index.ts"; do
-  if [ -f "$cli" ]; then exec "${AGENT_RELAY_BUN_BIN:-bun}" run --no-env-file "$cli" browser "$@"; fi
-done
-echo "agent-relay-browser: no Humwick CLI next to $here" >&2
-exit 127

package/src/adapters/provider-quota-harvest.ts

@@ -1,76 +0,0 @@
-import { writeChildEnv } from "@humwick/sdk/env";
-import type { QuotaState, HeartbeatReport, HeartbeatResult } from "@humwick/sdk";
-import { getManifest } from "@humwick/providers";
-import { quotaStateFromProbeMetrics } from "@humwick/sdk/context-probe";
-import { claudeQuotaGeneration, claudeQuotaUnavailableWindows } from "@humwick/sdk/provider-quota-order";
-import { readRunnerContextProbeState } from "../context-probe-state";
-import { providerHostConfigHome } from "../profile-home";
-import { resolveClaudeStatuslineQuotaIdentity, type ProviderQuotaIdentity } from "../quota";
-
-const PASSIVE_QUOTA_SAMPLE_STALE_MS = 10 * 60_000;
-
-interface ProviderQuotaHarvestOptions {
-  agentId: string;
-  provider: string;
-  /** The runner's per-provider config env (central provider-config values), read lazily each publish. */
-  providerConfigEnv: () => Record<string, string>;
-}
-
-export class ProviderQuotaHarvest {
-  private lastReportedObservedAt?: number;
-  private nextAttemptAt = 0;
-  private lease?: { accountKey: string; leaseToken: string };
-
-  constructor(private readonly options: ProviderQuotaHarvestOptions) {}
-
-  async sample(): Promise<Pick<HeartbeatReport, "providerQuota" | "quotaLeaseToken"> | undefined> {
-    if (getManifest(this.options.provider)?.shim?.kind !== "claude-relay" || Date.now() < this.nextAttemptAt) return;
-    const metrics = readRunnerContextProbeState(this.options.agentId);
-    const quota = metrics ? freshQuotaFromProbeMetrics(metrics, Date.now()) : undefined;
-    if (!quota || (this.lastReportedObservedAt !== undefined && quota.updatedAt <= this.lastReportedObservedAt)) return;
-    const identity = await this.resolveIdentity();
-    if (!identity) return;
-    return {
-      providerQuota: { provider: this.options.provider, accountKey: identity.accountKey, quota,
-        unavailableWindows: claudeQuotaUnavailableWindows(quota), lastAttemptAt: Date.now(), sourceAgentId: this.options.agentId },
-      ...(this.lease?.accountKey === identity.accountKey ? { quotaLeaseToken: this.lease.leaseToken } : {}),
-    };
-  }
-
-  accept(report: HeartbeatReport, result: HeartbeatResult["providerQuota"]): void {
-    if (!result || !report.providerQuota) return;
-    this.nextAttemptAt = Date.now() + result.retryAfterMs;
-    if (result.reported) this.lastReportedObservedAt = report.providerQuota.quota?.updatedAt;
-    if (result.leaseToken) this.lease = { accountKey: report.providerQuota.accountKey, leaseToken: result.leaseToken };
-  }
-
-  // #2514 — quota identity resolves exactly as the LAUNCH authenticates. The primary claude
-  // runner keeps the historical ambient-env read byte-for-byte. A claude-family provider with
-  // its own subscription (claude-b) must never inherit the ambient primary credential env
-  // (CLAUDE_CODE_OAUTH_TOKEN outranks the file credential, so the B quota would be keyed — and
-  // folded — under the A account): its identity comes from its OWN dedicated home plus its
-  // provider-scoped config env, mirroring the adapter launch scrub and the orchestrator's
-  // providerCredentialProbeEnv precedence.
-  private async resolveIdentity(): Promise<ProviderQuotaIdentity | undefined> {
-    if (this.options.provider === "claude") {
-      return resolveClaudeStatuslineQuotaIdentity({ env: process.env });
-    }
-    const providerEnv = this.options.providerConfigEnv();
-    return resolveClaudeStatuslineQuotaIdentity({
-      provider: this.options.provider,
-      env: writeChildEnv({}, { CLAUDE_CODE_OAUTH_TOKEN: providerEnv.CLAUDE_CODE_OAUTH_TOKEN }),
-      configDir: providerHostConfigHome(this.options.provider),
-    });
-  }
-
-}
-
-function freshQuotaFromProbeMetrics(metrics: NonNullable<ReturnType<typeof readRunnerContextProbeState>>, now: number): QuotaState | undefined {
-  if (now - (metrics.quotaObservedAt ?? metrics.timestamp) > PASSIVE_QUOTA_SAMPLE_STALE_MS) return undefined;
-  const quota = quotaStateFromProbeMetrics(metrics);
-  if (!quota) return undefined;
-  const windows = quota.windows.filter((window) => window.resetsAt === undefined || window.resetsAt > now);
-  const live: QuotaState = { ...quota, windows };
-  // Do not turn an expired cached 5h reading into a fresh weekly-only observation (#3087).
-  return windows.length > 0 && (claudeQuotaGeneration(live) !== undefined || claudeQuotaUnavailableWindows(quota).length > 0) ? live : undefined;
-}