@rallycry/conveyor-agent 10.13.16 → 10.13.18

package/dist/{chunk-JG54UJ6V.js → chunk-72AEN6LB.js}

@@ -272,4 +272,4 @@ export {
   runAuthTokenCommand,
   runStartCommand
 };
-//# sourceMappingURL=chunk-JG54UJ6V.js.map
+//# sourceMappingURL=chunk-72AEN6LB.js.map

package/dist/{chunk-JG54UJ6V.js.map → chunk-72AEN6LB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/harness/pty/pty-support.ts","../src/utils/sleep.ts","../src/setup/commands.ts"],"sourcesContent":["/**\n * Pure support helpers for PtySession — node-pty process loading, prompt-byte\n * encoding, the per-turn options projection, and the AskUserQuestion parser.\n * Extracted from `session.ts` so the orchestrator stays focused on lifecycle;\n * everything here is side-effect-free (or a thin wrapper over one) and unit\n * tested in isolation.\n */\n\nimport { stat } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport type { HarnessQueryOptions, HarnessUserQuestion } from \"../types.js\";\n\n// Cap on the rolling tail of raw terminal output retained for diagnostics when\n// `claude` exits without a result. Bounded so a long-running session can't grow\n// this unboundedly; only the most recent bytes (where a failure surfaces) matter.\nexport const MAX_DIAGNOSTIC_OUTPUT = 4000;\n\n// Cap on transcript events buffered while no turn is draining (the parked\n// window between a completed turn and the next beginTurn / a passive turn).\n// Bounded, drop-oldest — a stale buffered `result` must never terminate a\n// fresh turn, and beginTurn clears the buffer anyway.\nexport const MAX_BETWEEN_TURN_BUFFER = 500;\n\n/** Settle window between the paste write and the submitting Enter write. */\nexport const SUBMIT_SETTLE_MS = 300;\n// Re-press cadence/bounds for the submit nudge (see armSubmitNudge). Fast\n// presses cover the Enter-swallowed-at-startup race; the slow phase covers\n// startup dialogs that render tens of seconds in on a cold pod (folder\n// trust, onboarding) — observed live 2026-07-02 parking code reviews ~13min+\n// when the trust dialog mounted after the fast window had expired.\nexport const SUBMIT_NUDGE_INTERVAL_MS = 2000;\nexport const SUBMIT_NUDGE_MAX_PRESSES = 5;\nexport const SUBMIT_NUDGE_SLOW_INTERVAL_MS = 5000;\nexport const SUBMIT_NUDGE_WINDOW_MS = 90_000;\n\n// Plan-dialog auto-accept press cadence/bounds (see armPlanDialogAutoAccept).\n// The dialog usually renders within a second of the ExitPlanMode hook verdict,\n// but the window is deliberately wide: the only stop signal is the ExitPlanMode\n// PostToolUse envelope, and a missed dialog parks an auto card indefinitely\n// (observed live 2026-07-07: an approval dialog sat 42 minutes until a human\n// pressed Enter).\nexport const PLAN_DIALOG_FIRST_PRESS_MS = 700;\nexport const PLAN_DIALOG_INTERVAL_MS = 1500;\nexport const PLAN_DIALOG_SLOW_INTERVAL_MS = 5000;\nexport const PLAN_DIALOG_FAST_WINDOW_MS = 10_000;\nexport const PLAN_DIALOG_WINDOW_MS = 90_000;\n\nfunction envMs(name: string, fallback: number): number {\n  const raw = Number(process.env[name]);\n  return Number.isFinite(raw) && raw > 0 ? raw : fallback;\n}\n\nexport function resolveSubmitSettleMs(): number {\n  return envMs(\"CONVEYOR_PTY_SUBMIT_SETTLE_MS\", SUBMIT_SETTLE_MS);\n}\n\n/**\n * Effective submit-nudge timing. The exported constants above are the production\n * defaults; `CONVEYOR_PTY_NUDGE_INTERVAL_MS` / `_SLOW_INTERVAL_MS` / `_WINDOW_MS`\n * override them. Resolved at nudge-arm time (not import) so an integration test\n * can drive the two-phase fast→slow behavior in milliseconds instead of ~15s of\n * real wall-clock. `maxPresses` is deliberately NOT overridable — the fast→slow\n * phase-boundary count is the behavior under test.\n */\nexport function resolveSubmitNudgeTiming(): {\n  intervalMs: number;\n  slowIntervalMs: number;\n  maxPresses: number;\n  windowMs: number;\n} {\n  return {\n    intervalMs: envMs(\"CONVEYOR_PTY_NUDGE_INTERVAL_MS\", SUBMIT_NUDGE_INTERVAL_MS),\n    slowIntervalMs: envMs(\"CONVEYOR_PTY_NUDGE_SLOW_INTERVAL_MS\", SUBMIT_NUDGE_SLOW_INTERVAL_MS),\n    maxPresses: SUBMIT_NUDGE_MAX_PRESSES,\n    windowMs: envMs(\"CONVEYOR_PTY_NUDGE_WINDOW_MS\", SUBMIT_NUDGE_WINDOW_MS),\n  };\n}\n\nexport function resolvePlanDialogTiming(): {\n  firstPressMs: number;\n  intervalMs: number;\n  slowIntervalMs: number;\n  fastWindowMs: number;\n  windowMs: number;\n} {\n  return {\n    firstPressMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_FIRST_PRESS_MS\", PLAN_DIALOG_FIRST_PRESS_MS),\n    intervalMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_INTERVAL_MS\", PLAN_DIALOG_INTERVAL_MS),\n    slowIntervalMs: envMs(\n      \"CONVEYOR_PTY_PLAN_DIALOG_SLOW_INTERVAL_MS\",\n      PLAN_DIALOG_SLOW_INTERVAL_MS,\n    ),\n    fastWindowMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_FAST_WINDOW_MS\", PLAN_DIALOG_FAST_WINDOW_MS),\n    windowMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_WINDOW_MS\", PLAN_DIALOG_WINDOW_MS),\n  };\n}\n\n/**\n * The per-turn subset of HarnessQueryOptions — everything that legitimately\n * changes from one turn to the next while the same `claude` process serves them\n * all. The process-level fields (model, cwd, sessionId, appendSystemPrompt, …)\n * are fixed at spawn and captured separately in the spawn options.\n */\nexport interface TurnOptions {\n  canUseTool?: HarnessQueryOptions[\"canUseTool\"];\n  promptDelivery?: \"submit\" | \"prefill\";\n  planDialogAutoAccept?: boolean;\n  abortController?: AbortController;\n}\n\nexport function turnOptionsFrom(options: HarnessQueryOptions): TurnOptions {\n  return {\n    canUseTool: options.canUseTool,\n    promptDelivery: options.promptDelivery,\n    planDialogAutoAccept: options.planDialogAutoAccept,\n    abortController: options.abortController,\n  };\n}\n\nexport interface PtyProcess {\n  onData(listener: (data: string) => void): void;\n  onExit(listener: (event: { exitCode: number }) => void): void;\n  write(data: string): void;\n  resize(cols: number, rows: number): void;\n  kill(signal?: string): void;\n}\n\nexport interface PtySpawnOptions {\n  name: string;\n  cols: number;\n  rows: number;\n  cwd: string;\n  env: Record<string, string>;\n}\n\nexport type PtySpawn = (file: string, args: string[], options: PtySpawnOptions) => PtyProcess;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction extractSpawn(mod: unknown): PtySpawn | null {\n  if (!isRecord(mod)) return null;\n  if (typeof mod.spawn === \"function\") return mod.spawn as PtySpawn;\n  const def = mod.default;\n  if (isRecord(def) && typeof def.spawn === \"function\") return def.spawn as PtySpawn;\n  return null;\n}\n\nexport async function loadPtySpawn(): Promise<PtySpawn> {\n  const mod: unknown = await import(\"node-pty\");\n  const spawn = extractSpawn(mod);\n  if (!spawn) throw new Error(\"node-pty: spawn export not found\");\n  return spawn;\n}\n\n/**\n * The spawn implementation for this pod topology: node-pty locally, or the\n * workbench launcher's remote PTY in split-mode pods (the CLI must run in the\n * workbench container, next to the repo and inside the restartable cgroup).\n * Same PtySpawn contract either way — PtySession is topology-blind.\n */\nexport async function resolvePtySpawn(): Promise<PtySpawn> {\n  const { workbenchEnabled } = await import(\"../../workbench/mode.js\");\n  if (!workbenchEnabled()) return loadPtySpawn();\n  const { getWorkbenchClient } = await import(\"../../workbench/client.js\");\n  return (file, args, options) => getWorkbenchClient().spawnPty(file, args, options);\n}\n\n/**\n * Base directory for a PTY session's control files (settings.json,\n * mcp-config, hook socket). In split-mode pods this MUST be the shared\n * emptyDir — the spawned CLI reads these paths from the workbench container,\n * and the hook helper connects back over the unix socket, which crosses\n * containers only on a shared volume.\n */\nexport function sessionTempBase(): string {\n  return process.env.CONVEYOR_SHARED_DIR ?? tmpdir();\n}\n\nexport function inheritedEnv(socketPath?: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const [key, value] of Object.entries(process.env)) {\n    if (typeof value === \"string\") env[key] = value;\n  }\n  // Do NOT force CLAUDE_CONFIG_DIR. Forcing it to ~/.claude makes the CLI read\n  // <dir>/.claude.json — a fresh, un-onboarded config — instead of the user's\n  // real ~/.claude.json, which re-triggers the first-run theme picker + login\n  // even though valid credentials already exist in ~/.claude/. The loop above\n  // already propagates an explicitly-set CLAUDE_CONFIG_DIR (pods/codespaces),\n  // and the config dir is unchanged either way, so transcript tailing (which\n  // uses claudeConfigHome()) still resolves to the same projects/ directory.\n  // Belt-and-braces against the ANTHROPIC_API_KEY leak: when a subscription\n  // OAuth token is in play, the TUI authenticates via the synthesized\n  // credentials.json — an inherited ANTHROPIC_API_KEY would be treated as an\n  // EXTERNAL API key and, once interactively approved, poison auth (the token\n  // is sent via x-api-key → 401 forever). The API bundle already stops serving\n  // the OAuth token under that name; stripping it here means no upstream leak\n  // can reach the spawned CLI regardless. The two auth modes are mutually\n  // exclusive (see session-runner's onApiKeyUpdate), so a real api_key launch\n  // has no CLAUDE_CODE_OAUTH_TOKEN and keeps its ANTHROPIC_API_KEY.\n  if (env.CLAUDE_CODE_OAUTH_TOKEN) {\n    delete env.ANTHROPIC_API_KEY;\n  }\n  if (socketPath) {\n    env.CONVEYOR_HOOK_SOCKET = socketPath;\n  }\n  // The conveyor MCP tool handlers proxy over the agent's API socket, and a\n  // mid-flap call can block up to ~50s (20s reconnect-wait + 30s ack) before\n  // failing with a retryable error. The CLI's default MCP timeouts are\n  // shorter — hitting them made it abandon the MCP session mid-flap\n  // (2026-07-08 wedge). Default both timeouts past the worst-case hang;\n  // operator-set values win via the inherit loop above.\n  env.MCP_TIMEOUT ??= \"60000\";\n  env.MCP_TOOL_TIMEOUT ??= \"180000\";\n  return env;\n}\n\n/**\n * The bracketed-paste bytes written to the CLI's stdin to deliver a prompt.\n * The text is wrapped in paste markers so embedded newlines land as literal\n * lines in the input box instead of submitting it early. The submitting Enter\n * is deliberately NOT part of these bytes: deliverPrompt() sends it as a\n * separate write after a settle window, because an Enter folded into the same\n * chunk as the paste can be swallowed by the CLI's paste-burst handling —\n * observed in production as an auto-mode prompt parked unsubmitted in the\n * input box. \"prefill\" delivery never sends an Enter at all.\n */\nexport function buildPromptBytes(text: string): string {\n  return `\\x1b[200~${text}\\x1b[201~`;\n}\n\n/**\n * Render structured (multimodal) prompt content as pasteable text. Image\n * blocks are replaced with a tool reference — their base64 payload must NEVER\n * be pasted into the TUI input box. Upstream prompt builders already skip\n * image blocks for the PTY harness; this is the last line of defense.\n */\nexport function renderPromptContentText(content: unknown[]): string {\n  return content\n    .map((block) => {\n      const b = block as { type?: string; text?: string };\n      if (b?.type === \"text\" && typeof b.text === \"string\") return b.text;\n      if (b?.type === \"image\") {\n        return `[Image attachment — use list_task_files / get_attachment to view]`;\n      }\n      return JSON.stringify(block);\n    })\n    .join(\"\\n\\n\");\n}\n\nexport { sleep } from \"../../utils/sleep.js\";\n\n/** Current size of the transcript, or 0 if it does not exist yet. */\nexport async function transcriptSize(path: string): Promise<number> {\n  try {\n    return (await stat(path)).size;\n  } catch {\n    return 0;\n  }\n}\n\n/**\n * Defensive extraction of AskUserQuestion's `questions` input from the hook\n * payload. Malformed entries are dropped rather than thrown — the event is\n * observe-only, so an empty list still arms the waiting_for_input report.\n */\nexport function parseUserQuestions(input: Record<string, unknown>): HarnessUserQuestion[] {\n  if (!Array.isArray(input.questions)) return [];\n  const questions: HarnessUserQuestion[] = [];\n  for (const entry of input.questions) {\n    if (!isRecord(entry)) continue;\n    if (typeof entry.question !== \"string\") continue;\n    const options = Array.isArray(entry.options)\n      ? entry.options\n          .filter(isRecord)\n          .filter((o) => typeof o.label === \"string\")\n          .map((o) => ({\n            label: o.label as string,\n            description: typeof o.description === \"string\" ? o.description : \"\",\n          }))\n      : [];\n    questions.push({\n      question: entry.question,\n      header: typeof entry.header === \"string\" ? entry.header : \"\",\n      options,\n      ...(typeof entry.multiSelect === \"boolean\" ? { multiSelect: entry.multiSelect } : {}),\n    });\n  }\n  return questions;\n}\n","export function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import { spawn, execSync, type ChildProcess } from \"node:child_process\";\n\n/**\n * The structural surface of a start-command child the supervisor manages —\n * satisfied by a local ChildProcess and by the workbench client's\n * RemoteProcessHandle (split-mode pods, where the process lives in the\n * workbench container).\n */\nexport interface ManagedChildProcess extends NodeJS.EventEmitter {\n  pid?: number | undefined;\n  exitCode: number | null;\n  kill(signal?: NodeJS.Signals | number): boolean;\n}\n\nconst PROCESS_TERMINATION_GRACE_MS = 5_000;\n\nfunction abortError(): Error {\n  const error = new Error(\"Operation aborted\");\n  error.name = \"AbortError\";\n  return error;\n}\n\nfunction signalProcessGroup(child: ManagedChildProcess, signal: NodeJS.Signals): void {\n  try {\n    if (child.pid) process.kill(-child.pid, signal);\n    else child.kill(signal);\n  } catch {\n    try {\n      child.kill(signal);\n    } catch {\n      // The process already exited.\n    }\n  }\n}\n\nexport function terminateProcessGroup(\n  child: ManagedChildProcess | ChildProcess,\n  graceMs = PROCESS_TERMINATION_GRACE_MS,\n): Promise<void> {\n  if (child.exitCode !== null) return Promise.resolve();\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      child.removeListener(\"exit\", finish);\n      resolve();\n    };\n    const timer = setTimeout(() => {\n      signalProcessGroup(child, \"SIGKILL\");\n      finish();\n    }, graceMs);\n    timer.unref();\n    child.once(\"exit\", finish);\n    signalProcessGroup(child, \"SIGTERM\");\n  });\n}\n\nexport function runSetupCommand(\n  cmd: string,\n  cwd: string,\n  onOutput: (stream: \"stdout\" | \"stderr\", data: string) => void,\n  signal?: AbortSignal,\n): Promise<void> {\n  if (signal?.aborted) return Promise.reject(abortError());\n  return new Promise((resolve, reject) => {\n    const child = spawn(\"sh\", [\"-c\", cmd], {\n      cwd,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      detached: true,\n      env: { ...process.env },\n    });\n    let settled = false;\n    let aborting = false;\n    const cleanup = (): void => signal?.removeEventListener(\"abort\", onAbort);\n    const settle = (error?: Error): void => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      if (error) reject(error);\n      else resolve();\n    };\n    const onAbort = (): void => {\n      if (settled || aborting) return;\n      aborting = true;\n      void terminateProcessGroup(child).then(() => settle(abortError()));\n    };\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n    if (signal?.aborted) onAbort();\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (aborting || signal?.aborted) return;\n      onOutput(\"stdout\", chunk.toString());\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      if (aborting || signal?.aborted) return;\n      onOutput(\"stderr\", chunk.toString());\n    });\n\n    child.on(\"close\", (code) => {\n      if (aborting) return;\n      settle(code === 0 ? undefined : new Error(`Setup command exited with code ${code}`));\n    });\n\n    child.on(\"error\", (err) => {\n      if (!aborting) settle(err);\n    });\n  });\n}\n\nconst AUTH_TOKEN_TIMEOUT_MS = 30_000;\n\nexport function runAuthTokenCommand(cmd: string, userEmail: string, cwd: string): string | null {\n  try {\n    const output = execSync(`${cmd} ${JSON.stringify(userEmail)}`, {\n      cwd,\n      timeout: AUTH_TOKEN_TIMEOUT_MS,\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      env: { ...process.env },\n    });\n    const token = output.toString().trim();\n    return token || null;\n  } catch {\n    return null;\n  }\n}\n\nexport function runStartCommand(\n  cmd: string,\n  cwd: string,\n  onOutput: (stream: \"stdout\" | \"stderr\", data: string) => void,\n): ChildProcess {\n  const child = spawn(\"sh\", [\"-c\", cmd], {\n    cwd,\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    detached: true,\n    env: { ...process.env },\n  });\n\n  child.stdout.on(\"data\", (chunk: Buffer) => {\n    onOutput(\"stdout\", chunk.toString());\n  });\n\n  child.stderr.on(\"data\", (chunk: Buffer) => {\n    onOutput(\"stderr\", chunk.toString());\n  });\n\n  child.unref();\n  return child;\n}\n"],"mappings":";AAQA,SAAS,YAAY;AACrB,SAAS,cAAc;;;ACThB,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,eAAW,SAAS,EAAE;AAAA,EACxB,CAAC;AACH;;;ADWO,IAAM,wBAAwB;AAM9B,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AAMzB,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,gCAAgC;AACtC,IAAM,yBAAyB;AAQ/B,IAAM,6BAA6B;AACnC,IAAM,0BAA0B;AAChC,IAAM,+BAA+B;AACrC,IAAM,6BAA6B;AACnC,IAAM,wBAAwB;AAErC,SAAS,MAAM,MAAc,UAA0B;AACrD,QAAM,MAAM,OAAO,QAAQ,IAAI,IAAI,CAAC;AACpC,SAAO,OAAO,SAAS,GAAG,KAAK,MAAM,IAAI,MAAM;AACjD;AAEO,SAAS,wBAAgC;AAC9C,SAAO,MAAM,iCAAiC,gBAAgB;AAChE;AAUO,SAAS,2BAKd;AACA,SAAO;AAAA,IACL,YAAY,MAAM,kCAAkC,wBAAwB;AAAA,IAC5E,gBAAgB,MAAM,uCAAuC,6BAA6B;AAAA,IAC1F,YAAY;AAAA,IACZ,UAAU,MAAM,gCAAgC,sBAAsB;AAAA,EACxE;AACF;AAEO,SAAS,0BAMd;AACA,SAAO;AAAA,IACL,cAAc,MAAM,2CAA2C,0BAA0B;AAAA,IACzF,YAAY,MAAM,wCAAwC,uBAAuB;AAAA,IACjF,gBAAgB;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc,MAAM,2CAA2C,0BAA0B;AAAA,IACzF,UAAU,MAAM,sCAAsC,qBAAqB;AAAA,EAC7E;AACF;AAeO,SAAS,gBAAgB,SAA2C;AACzE,SAAO;AAAA,IACL,YAAY,QAAQ;AAAA,IACpB,gBAAgB,QAAQ;AAAA,IACxB,sBAAsB,QAAQ;AAAA,IAC9B,iBAAiB,QAAQ;AAAA,EAC3B;AACF;AAoBA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,aAAa,KAA+B;AACnD,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO;AAC3B,MAAI,OAAO,IAAI,UAAU,WAAY,QAAO,IAAI;AAChD,QAAM,MAAM,IAAI;AAChB,MAAI,SAAS,GAAG,KAAK,OAAO,IAAI,UAAU,WAAY,QAAO,IAAI;AACjE,SAAO;AACT;AAEA,eAAsB,eAAkC;AACtD,QAAM,MAAe,MAAM,OAAO,UAAU;AAC5C,QAAMA,SAAQ,aAAa,GAAG;AAC9B,MAAI,CAACA,OAAO,OAAM,IAAI,MAAM,kCAAkC;AAC9D,SAAOA;AACT;AAQA,eAAsB,kBAAqC;AACzD,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,oBAAyB;AACnE,MAAI,CAAC,iBAAiB,EAAG,QAAO,aAAa;AAC7C,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,sBAA2B;AACvE,SAAO,CAAC,MAAM,MAAM,YAAY,mBAAmB,EAAE,SAAS,MAAM,MAAM,OAAO;AACnF;AASO,SAAS,kBAA0B;AACxC,SAAO,QAAQ,IAAI,uBAAuB,OAAO;AACnD;AAEO,SAAS,aAAa,YAA6C;AACxE,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,QAAI,OAAO,UAAU,SAAU,KAAI,GAAG,IAAI;AAAA,EAC5C;AAiBA,MAAI,IAAI,yBAAyB;AAC/B,WAAO,IAAI;AAAA,EACb;AACA,MAAI,YAAY;AACd,QAAI,uBAAuB;AAAA,EAC7B;AAOA,MAAI,gBAAgB;AACpB,MAAI,qBAAqB;AACzB,SAAO;AACT;AAYO,SAAS,iBAAiB,MAAsB;AACrD,SAAO,YAAY,IAAI;AACzB;AAQO,SAAS,wBAAwB,SAA4B;AAClE,SAAO,QACJ,IAAI,CAAC,UAAU;AACd,UAAM,IAAI;AACV,QAAI,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS,SAAU,QAAO,EAAE;AAC/D,QAAI,GAAG,SAAS,SAAS;AACvB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,CAAC,EACA,KAAK,MAAM;AAChB;AAKA,eAAsB,eAAe,MAA+B;AAClE,MAAI;AACF,YAAQ,MAAM,KAAK,IAAI,GAAG;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,mBAAmB,OAAuD;AACxF,MAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,EAAG,QAAO,CAAC;AAC7C,QAAM,YAAmC,CAAC;AAC1C,aAAW,SAAS,MAAM,WAAW;AACnC,QAAI,CAAC,SAAS,KAAK,EAAG;AACtB,QAAI,OAAO,MAAM,aAAa,SAAU;AACxC,UAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,IACvC,MAAM,QACH,OAAO,QAAQ,EACf,OAAO,CAAC,MAAM,OAAO,EAAE,UAAU,QAAQ,EACzC,IAAI,CAAC,OAAO;AAAA,MACX,OAAO,EAAE;AAAA,MACT,aAAa,OAAO,EAAE,gBAAgB,WAAW,EAAE,cAAc;AAAA,IACnE,EAAE,IACJ,CAAC;AACL,cAAU,KAAK;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,MAC1D;AAAA,MACA,GAAI,OAAO,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IACrF,CAAC;AAAA,EACH;AACA,SAAO;AACT;;;AElSA,SAAS,OAAO,gBAAmC;AAcnD,IAAM,+BAA+B;AAErC,SAAS,aAAoB;AAC3B,QAAM,QAAQ,IAAI,MAAM,mBAAmB;AAC3C,QAAM,OAAO;AACb,SAAO;AACT;AAEA,SAAS,mBAAmB,OAA4B,QAA8B;AACpF,MAAI;AACF,QAAI,MAAM,IAAK,SAAQ,KAAK,CAAC,MAAM,KAAK,MAAM;AAAA,QACzC,OAAM,KAAK,MAAM;AAAA,EACxB,QAAQ;AACN,QAAI;AACF,YAAM,KAAK,MAAM;AAAA,IACnB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,SAAS,sBACd,OACA,UAAU,8BACK;AACf,MAAI,MAAM,aAAa,KAAM,QAAO,QAAQ,QAAQ;AACpD,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,MAAY;AACzB,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,KAAK;AAClB,YAAM,eAAe,QAAQ,MAAM;AACnC,cAAQ;AAAA,IACV;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,yBAAmB,OAAO,SAAS;AACnC,aAAO;AAAA,IACT,GAAG,OAAO;AACV,UAAM,MAAM;AACZ,UAAM,KAAK,QAAQ,MAAM;AACzB,uBAAmB,OAAO,SAAS;AAAA,EACrC,CAAC;AACH;AAEO,SAAS,gBACd,KACA,KACA,UACA,QACe;AACf,MAAI,QAAQ,QAAS,QAAO,QAAQ,OAAO,WAAW,CAAC;AACvD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,MAAM,CAAC,MAAM,GAAG,GAAG;AAAA,MACrC;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,UAAU;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AACD,QAAI,UAAU;AACd,QAAI,WAAW;AACf,UAAM,UAAU,MAAY,QAAQ,oBAAoB,SAAS,OAAO;AACxE,UAAM,SAAS,CAAC,UAAwB;AACtC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,UAAI,MAAO,QAAO,KAAK;AAAA,UAClB,SAAQ;AAAA,IACf;AACA,UAAM,UAAU,MAAY;AAC1B,UAAI,WAAW,SAAU;AACzB,iBAAW;AACX,WAAK,sBAAsB,KAAK,EAAE,KAAK,MAAM,OAAO,WAAW,CAAC,CAAC;AAAA,IACnE;AACA,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACzD,QAAI,QAAQ,QAAS,SAAQ;AAE7B,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,UAAI,YAAY,QAAQ,QAAS;AACjC,eAAS,UAAU,MAAM,SAAS,CAAC;AAAA,IACrC,CAAC;AAED,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,UAAI,YAAY,QAAQ,QAAS;AACjC,eAAS,UAAU,MAAM,SAAS,CAAC;AAAA,IACrC,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAU;AACd,aAAO,SAAS,IAAI,SAAY,IAAI,MAAM,kCAAkC,IAAI,EAAE,CAAC;AAAA,IACrF,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,UAAI,CAAC,SAAU,QAAO,GAAG;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AACH;AAEA,IAAM,wBAAwB;AAEvB,SAAS,oBAAoB,KAAa,WAAmB,KAA4B;AAC9F,MAAI;AACF,UAAM,SAAS,SAAS,GAAG,GAAG,IAAI,KAAK,UAAU,SAAS,CAAC,IAAI;AAAA,MAC7D;AAAA,MACA,SAAS;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,MAClC,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AACD,UAAM,QAAQ,OAAO,SAAS,EAAE,KAAK;AACrC,WAAO,SAAS;AAAA,EAClB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBACd,KACA,KACA,UACc;AACd,QAAM,QAAQ,MAAM,MAAM,CAAC,MAAM,GAAG,GAAG;AAAA,IACrC;AAAA,IACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,IAChC,UAAU;AAAA,IACV,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,EACxB,CAAC;AAED,QAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,aAAS,UAAU,MAAM,SAAS,CAAC;AAAA,EACrC,CAAC;AAED,QAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,aAAS,UAAU,MAAM,SAAS,CAAC;AAAA,EACrC,CAAC;AAED,QAAM,MAAM;AACZ,SAAO;AACT;","names":["spawn"]}
+{"version":3,"sources":["../src/harness/pty/pty-support.ts","../src/utils/sleep.ts","../src/setup/commands.ts"],"sourcesContent":["/**\n * Pure support helpers for PtySession — node-pty process loading, prompt-byte\n * encoding, the per-turn options projection, and the AskUserQuestion parser.\n * Extracted from `session.ts` so the orchestrator stays focused on lifecycle;\n * everything here is side-effect-free (or a thin wrapper over one) and unit\n * tested in isolation.\n */\n\nimport { stat } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport type { HarnessQueryOptions, HarnessUserQuestion } from \"../types.js\";\n\n// Cap on the rolling tail of raw terminal output retained for diagnostics when\n// `claude` exits without a result. Bounded so a long-running session can't grow\n// this unboundedly; only the most recent bytes (where a failure surfaces) matter.\nexport const MAX_DIAGNOSTIC_OUTPUT = 4000;\n\n// Cap on transcript events buffered while no turn is draining (the parked\n// window between a completed turn and the next beginTurn / a passive turn).\n// Bounded, drop-oldest — a stale buffered `result` must never terminate a\n// fresh turn, and beginTurn clears the buffer anyway.\nexport const MAX_BETWEEN_TURN_BUFFER = 500;\n\n/** Settle window between the paste write and the submitting Enter write. */\nexport const SUBMIT_SETTLE_MS = 300;\n// Re-press cadence/bounds for the submit nudge (see armSubmitNudge). Fast\n// presses cover the Enter-swallowed-at-startup race; the slow phase covers\n// startup dialogs that render tens of seconds in on a cold pod (folder\n// trust, onboarding) — observed live 2026-07-02 parking code reviews ~13min+\n// when the trust dialog mounted after the fast window had expired.\nexport const SUBMIT_NUDGE_INTERVAL_MS = 2000;\nexport const SUBMIT_NUDGE_MAX_PRESSES = 5;\nexport const SUBMIT_NUDGE_SLOW_INTERVAL_MS = 5000;\nexport const SUBMIT_NUDGE_WINDOW_MS = 90_000;\n\n// Plan-dialog auto-accept press cadence/bounds (see armPlanDialogAutoAccept).\n// The dialog usually renders within a second of the ExitPlanMode hook verdict,\n// but the window is deliberately wide: the only stop signal is the ExitPlanMode\n// PostToolUse envelope, and a missed dialog parks an auto card indefinitely\n// (observed live 2026-07-07: an approval dialog sat 42 minutes until a human\n// pressed Enter).\nexport const PLAN_DIALOG_FIRST_PRESS_MS = 700;\nexport const PLAN_DIALOG_INTERVAL_MS = 1500;\nexport const PLAN_DIALOG_SLOW_INTERVAL_MS = 5000;\nexport const PLAN_DIALOG_FAST_WINDOW_MS = 10_000;\nexport const PLAN_DIALOG_WINDOW_MS = 90_000;\n\nfunction envMs(name: string, fallback: number): number {\n  const raw = Number(process.env[name]);\n  return Number.isFinite(raw) && raw > 0 ? raw : fallback;\n}\n\nexport function resolveSubmitSettleMs(): number {\n  return envMs(\"CONVEYOR_PTY_SUBMIT_SETTLE_MS\", SUBMIT_SETTLE_MS);\n}\n\n/**\n * Effective submit-nudge timing. The exported constants above are the production\n * defaults; `CONVEYOR_PTY_NUDGE_INTERVAL_MS` / `_SLOW_INTERVAL_MS` / `_WINDOW_MS`\n * override them. Resolved at nudge-arm time (not import) so an integration test\n * can drive the two-phase fast→slow behavior in milliseconds instead of ~15s of\n * real wall-clock. `maxPresses` is deliberately NOT overridable — the fast→slow\n * phase-boundary count is the behavior under test.\n */\nexport function resolveSubmitNudgeTiming(): {\n  intervalMs: number;\n  slowIntervalMs: number;\n  maxPresses: number;\n  windowMs: number;\n} {\n  return {\n    intervalMs: envMs(\"CONVEYOR_PTY_NUDGE_INTERVAL_MS\", SUBMIT_NUDGE_INTERVAL_MS),\n    slowIntervalMs: envMs(\"CONVEYOR_PTY_NUDGE_SLOW_INTERVAL_MS\", SUBMIT_NUDGE_SLOW_INTERVAL_MS),\n    maxPresses: SUBMIT_NUDGE_MAX_PRESSES,\n    windowMs: envMs(\"CONVEYOR_PTY_NUDGE_WINDOW_MS\", SUBMIT_NUDGE_WINDOW_MS),\n  };\n}\n\nexport function resolvePlanDialogTiming(): {\n  firstPressMs: number;\n  intervalMs: number;\n  slowIntervalMs: number;\n  fastWindowMs: number;\n  windowMs: number;\n} {\n  return {\n    firstPressMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_FIRST_PRESS_MS\", PLAN_DIALOG_FIRST_PRESS_MS),\n    intervalMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_INTERVAL_MS\", PLAN_DIALOG_INTERVAL_MS),\n    slowIntervalMs: envMs(\n      \"CONVEYOR_PTY_PLAN_DIALOG_SLOW_INTERVAL_MS\",\n      PLAN_DIALOG_SLOW_INTERVAL_MS,\n    ),\n    fastWindowMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_FAST_WINDOW_MS\", PLAN_DIALOG_FAST_WINDOW_MS),\n    windowMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_WINDOW_MS\", PLAN_DIALOG_WINDOW_MS),\n  };\n}\n\n/**\n * The per-turn subset of HarnessQueryOptions — everything that legitimately\n * changes from one turn to the next while the same `claude` process serves them\n * all. The process-level fields (model, cwd, sessionId, appendSystemPrompt, …)\n * are fixed at spawn and captured separately in the spawn options.\n */\nexport interface TurnOptions {\n  canUseTool?: HarnessQueryOptions[\"canUseTool\"];\n  promptDelivery?: \"submit\" | \"prefill\";\n  planDialogAutoAccept?: boolean;\n  abortController?: AbortController;\n}\n\nexport function turnOptionsFrom(options: HarnessQueryOptions): TurnOptions {\n  return {\n    canUseTool: options.canUseTool,\n    promptDelivery: options.promptDelivery,\n    planDialogAutoAccept: options.planDialogAutoAccept,\n    abortController: options.abortController,\n  };\n}\n\nexport interface PtyProcess {\n  onData(listener: (data: string) => void): void;\n  onExit(listener: (event: { exitCode: number }) => void): void;\n  write(data: string): void;\n  resize(cols: number, rows: number): void;\n  kill(signal?: string): void;\n}\n\nexport interface PtySpawnOptions {\n  name: string;\n  cols: number;\n  rows: number;\n  cwd: string;\n  env: Record<string, string>;\n}\n\nexport type PtySpawn = (file: string, args: string[], options: PtySpawnOptions) => PtyProcess;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction extractSpawn(mod: unknown): PtySpawn | null {\n  if (!isRecord(mod)) return null;\n  if (typeof mod.spawn === \"function\") return mod.spawn as PtySpawn;\n  const def = mod.default;\n  if (isRecord(def) && typeof def.spawn === \"function\") return def.spawn as PtySpawn;\n  return null;\n}\n\nexport async function loadPtySpawn(): Promise<PtySpawn> {\n  const mod: unknown = await import(\"node-pty\");\n  const spawn = extractSpawn(mod);\n  if (!spawn) throw new Error(\"node-pty: spawn export not found\");\n  return spawn;\n}\n\n/**\n * The spawn implementation for this pod topology: node-pty locally, or the\n * workbench launcher's remote PTY in split-mode pods (the CLI must run in the\n * workbench container, next to the repo and inside the restartable cgroup).\n * Same PtySpawn contract either way — PtySession is topology-blind.\n */\nexport async function resolvePtySpawn(): Promise<PtySpawn> {\n  const { workbenchEnabled } = await import(\"../../workbench/mode.js\");\n  if (!workbenchEnabled()) return loadPtySpawn();\n  const { getWorkbenchClient } = await import(\"../../workbench/client.js\");\n  return (file, args, options) => getWorkbenchClient().spawnPty(file, args, options);\n}\n\n/**\n * Base directory for a PTY session's control files (settings.json,\n * mcp-config, hook socket). In split-mode pods this MUST be the shared\n * emptyDir — the spawned CLI reads these paths from the workbench container,\n * and the hook helper connects back over the unix socket, which crosses\n * containers only on a shared volume.\n */\nexport function sessionTempBase(): string {\n  return process.env.CONVEYOR_SHARED_DIR ?? tmpdir();\n}\n\nexport function inheritedEnv(socketPath?: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const [key, value] of Object.entries(process.env)) {\n    if (typeof value === \"string\") env[key] = value;\n  }\n  // Do NOT force CLAUDE_CONFIG_DIR. Forcing it to ~/.claude makes the CLI read\n  // <dir>/.claude.json — a fresh, un-onboarded config — instead of the user's\n  // real ~/.claude.json, which re-triggers the first-run theme picker + login\n  // even though valid credentials already exist in ~/.claude/. The loop above\n  // already propagates an explicitly-set CLAUDE_CONFIG_DIR (pods/codespaces),\n  // and the config dir is unchanged either way, so transcript tailing (which\n  // uses claudeConfigHome()) still resolves to the same projects/ directory.\n  // Belt-and-braces against the ANTHROPIC_API_KEY leak: when a subscription\n  // OAuth token is in play, the TUI authenticates via the synthesized\n  // credentials.json — an inherited ANTHROPIC_API_KEY would be treated as an\n  // EXTERNAL API key and, once interactively approved, poison auth (the token\n  // is sent via x-api-key → 401 forever). The API bundle already stops serving\n  // the OAuth token under that name; stripping it here means no upstream leak\n  // can reach the spawned CLI regardless. The two auth modes are mutually\n  // exclusive (see session-runner's onApiKeyUpdate), so a real api_key launch\n  // has no CLAUDE_CODE_OAUTH_TOKEN and keeps its ANTHROPIC_API_KEY.\n  if (env.CLAUDE_CODE_OAUTH_TOKEN) {\n    delete env.ANTHROPIC_API_KEY;\n  }\n  if (socketPath) {\n    env.CONVEYOR_HOOK_SOCKET = socketPath;\n  }\n  // The conveyor MCP tool handlers proxy over the agent's API socket, and a\n  // mid-flap call can block up to ~50s (20s reconnect-wait + 30s ack) before\n  // failing with a retryable error. The CLI's default MCP timeouts are\n  // shorter — hitting them made it abandon the MCP session mid-flap\n  // (2026-07-08 wedge). Default both timeouts past the worst-case hang;\n  // operator-set values win via the inherit loop above.\n  env.MCP_TIMEOUT ??= \"60000\";\n  env.MCP_TOOL_TIMEOUT ??= \"180000\";\n  return env;\n}\n\n/**\n * The bracketed-paste bytes written to the CLI's stdin to deliver a prompt.\n * The text is wrapped in paste markers so embedded newlines land as literal\n * lines in the input box instead of submitting it early. The submitting Enter\n * is deliberately NOT part of these bytes: deliverPrompt() sends it as a\n * separate write after a settle window, because an Enter folded into the same\n * chunk as the paste can be swallowed by the CLI's paste-burst handling —\n * observed in production as an auto-mode prompt parked unsubmitted in the\n * input box. \"prefill\" delivery never sends an Enter at all.\n */\nexport function buildPromptBytes(text: string): string {\n  return `\\x1b[200~${text}\\x1b[201~`;\n}\n\n/**\n * Render structured (multimodal) prompt content as pasteable text. Image\n * blocks are replaced with a tool reference — their base64 payload must NEVER\n * be pasted into the TUI input box. Upstream prompt builders already skip\n * image blocks for the PTY harness; this is the last line of defense.\n */\nexport function renderPromptContentText(content: unknown[]): string {\n  return content\n    .map((block) => {\n      const b = block as { type?: string; text?: string };\n      if (b?.type === \"text\" && typeof b.text === \"string\") return b.text;\n      if (b?.type === \"image\") {\n        return `[Image attachment — use list_task_files / get_attachment to view]`;\n      }\n      return JSON.stringify(block);\n    })\n    .join(\"\\n\\n\");\n}\n\nexport { sleep } from \"../../utils/sleep.js\";\n\n/** Current size of the transcript, or 0 if it does not exist yet. */\nexport async function transcriptSize(path: string): Promise<number> {\n  try {\n    return (await stat(path)).size;\n  } catch {\n    return 0;\n  }\n}\n\n/**\n * Defensive extraction of AskUserQuestion's `questions` input from the hook\n * payload. Malformed entries are dropped rather than thrown — the event is\n * observe-only, so an empty list still arms the waiting_for_input report.\n */\nexport function parseUserQuestions(input: Record<string, unknown>): HarnessUserQuestion[] {\n  if (!Array.isArray(input.questions)) return [];\n  const questions: HarnessUserQuestion[] = [];\n  for (const entry of input.questions) {\n    if (!isRecord(entry)) continue;\n    if (typeof entry.question !== \"string\") continue;\n    const options = Array.isArray(entry.options)\n      ? entry.options\n          .filter(isRecord)\n          .filter((o) => typeof o.label === \"string\")\n          .map((o) => ({\n            label: o.label as string,\n            description: typeof o.description === \"string\" ? o.description : \"\",\n          }))\n      : [];\n    questions.push({\n      question: entry.question,\n      header: typeof entry.header === \"string\" ? entry.header : \"\",\n      options,\n      ...(typeof entry.multiSelect === \"boolean\" ? { multiSelect: entry.multiSelect } : {}),\n    });\n  }\n  return questions;\n}\n","export function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import { spawn, execSync, type ChildProcess } from \"node:child_process\";\n\n/**\n * The structural surface of a start-command child the supervisor manages —\n * satisfied by a local ChildProcess and by the workbench client's\n * RemoteProcessHandle (split-mode pods, where the process lives in the\n * workbench container).\n */\nexport interface ManagedChildProcess extends NodeJS.EventEmitter {\n  pid?: number | undefined;\n  exitCode: number | null;\n  kill(signal?: NodeJS.Signals | number): boolean;\n}\n\nconst PROCESS_TERMINATION_GRACE_MS = 5_000;\n\nfunction abortError(): Error {\n  const error = new Error(\"Operation aborted\");\n  error.name = \"AbortError\";\n  return error;\n}\n\nfunction signalProcessGroup(child: ManagedChildProcess, signal: NodeJS.Signals): void {\n  try {\n    if (child.pid) process.kill(-child.pid, signal);\n    else child.kill(signal);\n  } catch {\n    try {\n      child.kill(signal);\n    } catch {\n      // The process already exited.\n    }\n  }\n}\n\nexport function terminateProcessGroup(\n  // ChildProcess structurally satisfies ManagedChildProcess, so the single type\n  // covers both callers; keeping them as a union makes the shared EventEmitter\n  // methods (once/removeListener) non-callable under @types/node's overloads.\n  child: ManagedChildProcess,\n  graceMs = PROCESS_TERMINATION_GRACE_MS,\n): Promise<void> {\n  if (child.exitCode !== null) return Promise.resolve();\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      child.removeListener(\"exit\", finish);\n      resolve();\n    };\n    const timer = setTimeout(() => {\n      signalProcessGroup(child, \"SIGKILL\");\n      finish();\n    }, graceMs);\n    timer.unref();\n    child.once(\"exit\", finish);\n    signalProcessGroup(child, \"SIGTERM\");\n  });\n}\n\nexport function runSetupCommand(\n  cmd: string,\n  cwd: string,\n  onOutput: (stream: \"stdout\" | \"stderr\", data: string) => void,\n  signal?: AbortSignal,\n): Promise<void> {\n  if (signal?.aborted) return Promise.reject(abortError());\n  return new Promise((resolve, reject) => {\n    const child = spawn(\"sh\", [\"-c\", cmd], {\n      cwd,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      detached: true,\n      env: { ...process.env },\n    });\n    let settled = false;\n    let aborting = false;\n    const cleanup = (): void => signal?.removeEventListener(\"abort\", onAbort);\n    const settle = (error?: Error): void => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      if (error) reject(error);\n      else resolve();\n    };\n    const onAbort = (): void => {\n      if (settled || aborting) return;\n      aborting = true;\n      void terminateProcessGroup(child).then(() => settle(abortError()));\n    };\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n    if (signal?.aborted) onAbort();\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (aborting || signal?.aborted) return;\n      onOutput(\"stdout\", chunk.toString());\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      if (aborting || signal?.aborted) return;\n      onOutput(\"stderr\", chunk.toString());\n    });\n\n    child.on(\"close\", (code) => {\n      if (aborting) return;\n      settle(code === 0 ? undefined : new Error(`Setup command exited with code ${code}`));\n    });\n\n    child.on(\"error\", (err) => {\n      if (!aborting) settle(err);\n    });\n  });\n}\n\nconst AUTH_TOKEN_TIMEOUT_MS = 30_000;\n\nexport function runAuthTokenCommand(cmd: string, userEmail: string, cwd: string): string | null {\n  try {\n    const output = execSync(`${cmd} ${JSON.stringify(userEmail)}`, {\n      cwd,\n      timeout: AUTH_TOKEN_TIMEOUT_MS,\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      env: { ...process.env },\n    });\n    const token = output.toString().trim();\n    return token || null;\n  } catch {\n    return null;\n  }\n}\n\nexport function runStartCommand(\n  cmd: string,\n  cwd: string,\n  onOutput: (stream: \"stdout\" | \"stderr\", data: string) => void,\n): ChildProcess {\n  const child = spawn(\"sh\", [\"-c\", cmd], {\n    cwd,\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    detached: true,\n    env: { ...process.env },\n  });\n\n  child.stdout.on(\"data\", (chunk: Buffer) => {\n    onOutput(\"stdout\", chunk.toString());\n  });\n\n  child.stderr.on(\"data\", (chunk: Buffer) => {\n    onOutput(\"stderr\", chunk.toString());\n  });\n\n  child.unref();\n  return child;\n}\n"],"mappings":";AAQA,SAAS,YAAY;AACrB,SAAS,cAAc;;;ACThB,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,eAAW,SAAS,EAAE;AAAA,EACxB,CAAC;AACH;;;ADWO,IAAM,wBAAwB;AAM9B,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AAMzB,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,gCAAgC;AACtC,IAAM,yBAAyB;AAQ/B,IAAM,6BAA6B;AACnC,IAAM,0BAA0B;AAChC,IAAM,+BAA+B;AACrC,IAAM,6BAA6B;AACnC,IAAM,wBAAwB;AAErC,SAAS,MAAM,MAAc,UAA0B;AACrD,QAAM,MAAM,OAAO,QAAQ,IAAI,IAAI,CAAC;AACpC,SAAO,OAAO,SAAS,GAAG,KAAK,MAAM,IAAI,MAAM;AACjD;AAEO,SAAS,wBAAgC;AAC9C,SAAO,MAAM,iCAAiC,gBAAgB;AAChE;AAUO,SAAS,2BAKd;AACA,SAAO;AAAA,IACL,YAAY,MAAM,kCAAkC,wBAAwB;AAAA,IAC5E,gBAAgB,MAAM,uCAAuC,6BAA6B;AAAA,IAC1F,YAAY;AAAA,IACZ,UAAU,MAAM,gCAAgC,sBAAsB;AAAA,EACxE;AACF;AAEO,SAAS,0BAMd;AACA,SAAO;AAAA,IACL,cAAc,MAAM,2CAA2C,0BAA0B;AAAA,IACzF,YAAY,MAAM,wCAAwC,uBAAuB;AAAA,IACjF,gBAAgB;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc,MAAM,2CAA2C,0BAA0B;AAAA,IACzF,UAAU,MAAM,sCAAsC,qBAAqB;AAAA,EAC7E;AACF;AAeO,SAAS,gBAAgB,SAA2C;AACzE,SAAO;AAAA,IACL,YAAY,QAAQ;AAAA,IACpB,gBAAgB,QAAQ;AAAA,IACxB,sBAAsB,QAAQ;AAAA,IAC9B,iBAAiB,QAAQ;AAAA,EAC3B;AACF;AAoBA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,aAAa,KAA+B;AACnD,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO;AAC3B,MAAI,OAAO,IAAI,UAAU,WAAY,QAAO,IAAI;AAChD,QAAM,MAAM,IAAI;AAChB,MAAI,SAAS,GAAG,KAAK,OAAO,IAAI,UAAU,WAAY,QAAO,IAAI;AACjE,SAAO;AACT;AAEA,eAAsB,eAAkC;AACtD,QAAM,MAAe,MAAM,OAAO,UAAU;AAC5C,QAAMA,SAAQ,aAAa,GAAG;AAC9B,MAAI,CAACA,OAAO,OAAM,IAAI,MAAM,kCAAkC;AAC9D,SAAOA;AACT;AAQA,eAAsB,kBAAqC;AACzD,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,oBAAyB;AACnE,MAAI,CAAC,iBAAiB,EAAG,QAAO,aAAa;AAC7C,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,sBAA2B;AACvE,SAAO,CAAC,MAAM,MAAM,YAAY,mBAAmB,EAAE,SAAS,MAAM,MAAM,OAAO;AACnF;AASO,SAAS,kBAA0B;AACxC,SAAO,QAAQ,IAAI,uBAAuB,OAAO;AACnD;AAEO,SAAS,aAAa,YAA6C;AACxE,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,QAAI,OAAO,UAAU,SAAU,KAAI,GAAG,IAAI;AAAA,EAC5C;AAiBA,MAAI,IAAI,yBAAyB;AAC/B,WAAO,IAAI;AAAA,EACb;AACA,MAAI,YAAY;AACd,QAAI,uBAAuB;AAAA,EAC7B;AAOA,MAAI,gBAAgB;AACpB,MAAI,qBAAqB;AACzB,SAAO;AACT;AAYO,SAAS,iBAAiB,MAAsB;AACrD,SAAO,YAAY,IAAI;AACzB;AAQO,SAAS,wBAAwB,SAA4B;AAClE,SAAO,QACJ,IAAI,CAAC,UAAU;AACd,UAAM,IAAI;AACV,QAAI,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS,SAAU,QAAO,EAAE;AAC/D,QAAI,GAAG,SAAS,SAAS;AACvB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,CAAC,EACA,KAAK,MAAM;AAChB;AAKA,eAAsB,eAAe,MAA+B;AAClE,MAAI;AACF,YAAQ,MAAM,KAAK,IAAI,GAAG;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,mBAAmB,OAAuD;AACxF,MAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,EAAG,QAAO,CAAC;AAC7C,QAAM,YAAmC,CAAC;AAC1C,aAAW,SAAS,MAAM,WAAW;AACnC,QAAI,CAAC,SAAS,KAAK,EAAG;AACtB,QAAI,OAAO,MAAM,aAAa,SAAU;AACxC,UAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,IACvC,MAAM,QACH,OAAO,QAAQ,EACf,OAAO,CAAC,MAAM,OAAO,EAAE,UAAU,QAAQ,EACzC,IAAI,CAAC,OAAO;AAAA,MACX,OAAO,EAAE;AAAA,MACT,aAAa,OAAO,EAAE,gBAAgB,WAAW,EAAE,cAAc;AAAA,IACnE,EAAE,IACJ,CAAC;AACL,cAAU,KAAK;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,MAC1D;AAAA,MACA,GAAI,OAAO,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IACrF,CAAC;AAAA,EACH;AACA,SAAO;AACT;;;AElSA,SAAS,OAAO,gBAAmC;AAcnD,IAAM,+BAA+B;AAErC,SAAS,aAAoB;AAC3B,QAAM,QAAQ,IAAI,MAAM,mBAAmB;AAC3C,QAAM,OAAO;AACb,SAAO;AACT;AAEA,SAAS,mBAAmB,OAA4B,QAA8B;AACpF,MAAI;AACF,QAAI,MAAM,IAAK,SAAQ,KAAK,CAAC,MAAM,KAAK,MAAM;AAAA,QACzC,OAAM,KAAK,MAAM;AAAA,EACxB,QAAQ;AACN,QAAI;AACF,YAAM,KAAK,MAAM;AAAA,IACnB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,SAAS,sBAId,OACA,UAAU,8BACK;AACf,MAAI,MAAM,aAAa,KAAM,QAAO,QAAQ,QAAQ;AACpD,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,MAAY;AACzB,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,KAAK;AAClB,YAAM,eAAe,QAAQ,MAAM;AACnC,cAAQ;AAAA,IACV;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,yBAAmB,OAAO,SAAS;AACnC,aAAO;AAAA,IACT,GAAG,OAAO;AACV,UAAM,MAAM;AACZ,UAAM,KAAK,QAAQ,MAAM;AACzB,uBAAmB,OAAO,SAAS;AAAA,EACrC,CAAC;AACH;AAEO,SAAS,gBACd,KACA,KACA,UACA,QACe;AACf,MAAI,QAAQ,QAAS,QAAO,QAAQ,OAAO,WAAW,CAAC;AACvD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,MAAM,CAAC,MAAM,GAAG,GAAG;AAAA,MACrC;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,UAAU;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AACD,QAAI,UAAU;AACd,QAAI,WAAW;AACf,UAAM,UAAU,MAAY,QAAQ,oBAAoB,SAAS,OAAO;AACxE,UAAM,SAAS,CAAC,UAAwB;AACtC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,UAAI,MAAO,QAAO,KAAK;AAAA,UAClB,SAAQ;AAAA,IACf;AACA,UAAM,UAAU,MAAY;AAC1B,UAAI,WAAW,SAAU;AACzB,iBAAW;AACX,WAAK,sBAAsB,KAAK,EAAE,KAAK,MAAM,OAAO,WAAW,CAAC,CAAC;AAAA,IACnE;AACA,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACzD,QAAI,QAAQ,QAAS,SAAQ;AAE7B,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,UAAI,YAAY,QAAQ,QAAS;AACjC,eAAS,UAAU,MAAM,SAAS,CAAC;AAAA,IACrC,CAAC;AAED,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,UAAI,YAAY,QAAQ,QAAS;AACjC,eAAS,UAAU,MAAM,SAAS,CAAC;AAAA,IACrC,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAU;AACd,aAAO,SAAS,IAAI,SAAY,IAAI,MAAM,kCAAkC,IAAI,EAAE,CAAC;AAAA,IACrF,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,UAAI,CAAC,SAAU,QAAO,GAAG;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AACH;AAEA,IAAM,wBAAwB;AAEvB,SAAS,oBAAoB,KAAa,WAAmB,KAA4B;AAC9F,MAAI;AACF,UAAM,SAAS,SAAS,GAAG,GAAG,IAAI,KAAK,UAAU,SAAS,CAAC,IAAI;AAAA,MAC7D;AAAA,MACA,SAAS;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,MAClC,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AACD,UAAM,QAAQ,OAAO,SAAS,EAAE,KAAK;AACrC,WAAO,SAAS;AAAA,EAClB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBACd,KACA,KACA,UACc;AACd,QAAM,QAAQ,MAAM,MAAM,CAAC,MAAM,GAAG,GAAG;AAAA,IACrC;AAAA,IACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,IAChC,UAAU;AAAA,IACV,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,EACxB,CAAC;AAED,QAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,aAAS,UAAU,MAAM,SAAS,CAAC;AAAA,EACrC,CAAC;AAED,QAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,aAAS,UAAU,MAAM,SAAS,CAAC;AAAA,EACrC,CAAC;AAED,QAAM,MAAM;AACZ,SAAO;AACT;","names":["spawn"]}

package/dist/{chunk-5UYMDSAE.js → chunk-AGGVNADW.js}

@@ -1,7 +1,7 @@
 import {
   loadPtySpawn,
   terminateProcessGroup
-} from "./chunk-JG54UJ6V.js";
+} from "./chunk-72AEN6LB.js";
 import {
   FrameReader,
   timingSafeTokenEqual,
@@ -250,4 +250,4 @@ async function runReaddir(socket, req) {
 export {
   startWorkbenchServer
 };
-//# sourceMappingURL=chunk-5UYMDSAE.js.map
+//# sourceMappingURL=chunk-AGGVNADW.js.map

package/dist/cli.js

@@ -28,7 +28,7 @@ import {
   runUsageProbe,
   sampleKeyUsage,
   textResult
-} from "./chunk-OW2TIDWZ.js";
+} from "./chunk-3GDXX3OX.js";
 import "./chunk-7TQO4ZF4.js";
 import {
   getWorkbenchClient
@@ -47,7 +47,7 @@ import {
   loadPtySpawn,
   runStartCommand,
   terminateProcessGroup
-} from "./chunk-JG54UJ6V.js";
+} from "./chunk-72AEN6LB.js";
 import "./chunk-JIGG755T.js";
 
 // src/cli.ts
@@ -278,10 +278,13 @@ var WorkspaceCommandSupervisor = class {
   startCommandLaunchRequested = false;
   started = false;
   stopped = false;
-  /** Resolved by notifyLoopReady() once the runner's core loop (the PTY) is
-   *  live, or by stop() if shutdown arrives first — either way unblocks the
-   *  awaiter in runSetupAndStart so a supervisor stopped before the loop ever
-   *  signals doesn't hang its background task (and therefore stop()) forever. */
+  /** Resolved by notifyLoopReady() once the PTY is live — the runner fires it
+   *  on the first harness event of the initial query (or when a prefill
+   *  parks), NOT after the first turn completes, so the app's start command
+   *  isn't held behind a long working turn. Also resolved by stop() if
+   *  shutdown arrives first — either way unblocks the awaiter in
+   *  runSetupAndStart so a supervisor stopped before the loop ever signals
+   *  doesn't hang its background task (and therefore stop()) forever. */
   resolveLoopReady;
   loopReady = new Promise((resolve) => {
     this.resolveLoopReady = resolve;
@@ -1897,7 +1900,7 @@ function createSpawnedChildRunner(inputs) {
 
 // src/cli.ts
 if (process.argv[2] === "boot") {
-  const { runBoot } = await import("./boot-NMXFM4GK.js");
+  const { runBoot } = await import("./boot-YZCOIV3Q.js");
   process.exit(await runBoot(process.argv.slice(3)));
 }
 if (isLegacyEntrypointLaunch(process.env)) {
@@ -1988,7 +1991,7 @@ process.on("unhandledRejection", (reason) => {
   process.exit(1);
 });
 if (process.env.CONVEYOR_MODE === "workbench") {
-  const { startWorkbenchServer } = await import("./server-CO5O7G4U.js");
+  const { startWorkbenchServer } = await import("./server-BXAFMYDM.js");
   const { DEFAULT_WORKBENCH_PORT } = await import("./protocol-QLVS5W6O.js");
   const port = Number(process.env.CONVEYOR_WORKBENCH_PORT) || DEFAULT_WORKBENCH_PORT;
   const token = process.env.CONVEYOR_WORKBENCH_TOKEN ?? process.env.POD_BOOTSTRAP_TOKEN ?? "";