@rallycry/conveyor-agent 10.13.56 → 10.13.57

package/dist/{boot-RW7SNO6X.js → boot-37ZX7POR.js}

@@ -9,14 +9,14 @@ import {
   readAgentVersion,
   redactToken,
   reportBootMilestone
-} from "./chunk-7765OQU5.js";
+} from "./chunk-WVUQ5CH5.js";
 import {
   workbenchPort
 } from "./chunk-4VUQ2NPF.js";
 import {
   startWorkbenchServer
-} from "./chunk-DSP4KR4B.js";
-import "./chunk-UAGIXPYD.js";
+} from "./chunk-MS43QSHO.js";
+import "./chunk-PWYJZY3P.js";
 import {
   DEFAULT_WORKBENCH_PORT
 } from "./chunk-JIGG755T.js";
@@ -1316,4 +1316,4 @@ export {
   runBoot,
   workbenchBootSteps
 };
-//# sourceMappingURL=boot-RW7SNO6X.js.map
+//# sourceMappingURL=boot-37ZX7POR.js.map

package/dist/{chunk-DSP4KR4B.js → chunk-MS43QSHO.js}

@@ -1,7 +1,7 @@
 import {
   loadPtySpawn,
   terminateProcessGroup
-} from "./chunk-UAGIXPYD.js";
+} from "./chunk-PWYJZY3P.js";
 import {
   FrameReader,
   timingSafeTokenEqual,
@@ -296,4 +296,4 @@ async function runReaddir(socket, req) {
 export {
   startWorkbenchServer
 };
-//# sourceMappingURL=chunk-DSP4KR4B.js.map
+//# sourceMappingURL=chunk-MS43QSHO.js.map

package/dist/{chunk-UAGIXPYD.js → chunk-PWYJZY3P.js}

@@ -72,6 +72,117 @@ ${tail}`);
   return errors;
 }
 
+// src/boot/git-credential.ts
+import { createHash } from "crypto";
+import { chmodSync, existsSync, mkdirSync, renameSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { dirname, join } from "path";
+function credentialDir(cwd) {
+  return join(dirname(cwd), ".conveyor-git-credentials");
+}
+function gitCredentialFile(cwd) {
+  const key = createHash("sha256").update(cwd).digest("hex").slice(0, 16);
+  return join(credentialDir(cwd), `${key}.store`);
+}
+function gitCredentialHelper(cwd) {
+  return `store --file=${gitCredentialFile(cwd)}`;
+}
+function writeGitCredential(cwd, cloneUrl, credential) {
+  const cleanUrl = new URL(cloneUrl);
+  if (!/^https?:$/.test(cleanUrl.protocol) || cleanUrl.username || cleanUrl.password) {
+    throw new Error("Git clone URL must be a credential-free HTTP(S) URL");
+  }
+  if (!credential.username || !credential.secret) {
+    throw new Error("Git credential username and secret are required");
+  }
+  const dir = credentialDir(cwd);
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  chmodSync(dir, 448);
+  cleanUrl.username = credential.username;
+  cleanUrl.password = credential.secret;
+  cleanUrl.pathname = "/";
+  cleanUrl.search = "";
+  cleanUrl.hash = "";
+  const target = gitCredentialFile(cwd);
+  writeSecretFile(target, `${cleanUrl.toString()}
+`);
+}
+function githubTokenFilePath() {
+  return process.env.CONVEYOR_GITHUB_TOKEN_FILE || join(homedir(), ".conveyor", "github-token");
+}
+function ghConfigDir() {
+  return process.env.GH_CONFIG_DIR || join(homedir(), ".config", "gh");
+}
+function ghHostsFilePath() {
+  return join(ghConfigDir(), "hosts.yml");
+}
+function ghManagedMarkerPath() {
+  return join(ghConfigDir(), ".conveyor-managed");
+}
+function ghConfigFilePath() {
+  return join(ghConfigDir(), "config.yml");
+}
+function blockedDefaultWrite(overrideEnvKey) {
+  return Boolean(process.env.VITEST) && !process.env[overrideEnvKey];
+}
+function ghHostsManagedByConveyor() {
+  return existsSync(ghManagedMarkerPath()) && existsSync(ghHostsFilePath());
+}
+function writeSecretFile(target, contents) {
+  const dir = dirname(target);
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  chmodSync(dir, 448);
+  const temporary = `${target}.${process.pid}.tmp`;
+  writeFileSync(temporary, contents, { encoding: "utf8", mode: 384 });
+  chmodSync(temporary, 384);
+  renameSync(temporary, target);
+}
+function writeGithubTokenFile(token) {
+  if (blockedDefaultWrite("CONVEYOR_GITHUB_TOKEN_FILE")) return false;
+  writeSecretFile(githubTokenFilePath(), `${token}
+`);
+  return true;
+}
+function ensureGhConfigVersion() {
+  if (existsSync(ghConfigFilePath())) return;
+  writeSecretFile(ghConfigFilePath(), 'version: "1"\n');
+}
+function writeGhHostsConfig(token) {
+  if (blockedDefaultWrite("GH_CONFIG_DIR")) return false;
+  if (existsSync(ghHostsFilePath()) && !existsSync(ghManagedMarkerPath())) return false;
+  const host = process.env.GH_HOST || "github.com";
+  const user = process.env.CONVEYOR_GIT_USERNAME || "x-access-token";
+  const contents = [
+    "# Written by conveyor-agent \u2014 refreshed on every GitHub token refresh.",
+    "# Edits are overwritten. Do not add a second host entry here by hand.",
+    `${host}:`,
+    `    oauth_token: ${token}`,
+    `    user: ${user}`,
+    "    git_protocol: https",
+    "    users:",
+    `        ${user}:`,
+    `            oauth_token: ${token}`,
+    ""
+  ].join("\n");
+  writeSecretFile(ghHostsFilePath(), contents);
+  writeSecretFile(ghManagedMarkerPath(), "conveyor-agent\n");
+  ensureGhConfigVersion();
+  return true;
+}
+function syncGithubTokenFiles(token) {
+  const result = { tokenFile: false, ghHosts: false };
+  if (!token) return result;
+  try {
+    result.tokenFile = writeGithubTokenFile(token);
+  } catch {
+  }
+  try {
+    result.ghHosts = writeGhHostsConfig(token);
+  } catch {
+  }
+  return result;
+}
+
 // src/utils/sleep.ts
 function sleep(ms) {
   return new Promise((resolve) => {
@@ -211,6 +322,12 @@ function inheritedEnv(socketPath) {
   if (env.CLAUDE_CODE_OAUTH_TOKEN) {
     delete env.ANTHROPIC_API_KEY;
   }
+  if (ghHostsManagedByConveyor() && env.CONVEYOR_KEEP_GH_TOKEN_ENV !== "1") {
+    delete env.GH_TOKEN;
+    delete env.GITHUB_TOKEN;
+    delete env.CONVEYOR_GITHUB_TOKEN;
+    env.CONVEYOR_GITHUB_TOKEN_FILE = githubTokenFilePath();
+  }
   if (socketPath) {
     env.CONVEYOR_HOOK_SOCKET = socketPath;
   }
@@ -374,6 +491,10 @@ function runStartCommand(cmd, cwd, onOutput) {
 
 export {
   sleep,
+  gitCredentialHelper,
+  writeGitCredential,
+  githubTokenFilePath,
+  syncGithubTokenFiles,
   resolveClaudeBinary,
   buildSpawnArgs,
   spawnOptionsFingerprint,
@@ -404,4 +525,4 @@ export {
   runAuthTokenCommand,
   runStartCommand
 };
-//# sourceMappingURL=chunk-UAGIXPYD.js.map
+//# sourceMappingURL=chunk-PWYJZY3P.js.map

package/dist/chunk-PWYJZY3P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/harness/pty/pty-support.ts","../src/harness/pty/spawn-args.ts","../src/boot/git-credential.ts","../src/utils/sleep.ts","../src/setup/commands.ts"],"sourcesContent":["/**\n * Pure support helpers for PtySession — node-pty process loading, prompt-byte\n * encoding, the per-turn options projection, and the AskUserQuestion parser.\n * Extracted from `session.ts` so the orchestrator stays focused on lifecycle;\n * everything here is side-effect-free (or a thin wrapper over one) and unit\n * tested in isolation.\n */\n\nimport { stat } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport type { HarnessQueryOptions, HarnessUserQuestion } from \"../types.js\";\n// spawn-args does not import this module, so this direction introduces no cycle.\nimport { cleanTerminalOutput } from \"./spawn-args.js\";\nimport { ghHostsManagedByConveyor, githubTokenFilePath } from \"../../boot/git-credential.js\";\n\n// Cap on the rolling tail of raw terminal output retained for diagnostics when\n// `claude` exits without a result. Bounded so a long-running session can't grow\n// this unboundedly; only the most recent bytes (where a failure surfaces) matter.\nexport const MAX_DIAGNOSTIC_OUTPUT = 4000;\n\n// Cap on transcript events buffered while no turn is draining (the parked\n// window between a completed turn and the next beginTurn / a passive turn).\n// Bounded, drop-oldest — a stale buffered `result` must never terminate a\n// fresh turn, and beginTurn clears the buffer anyway.\nexport const MAX_BETWEEN_TURN_BUFFER = 500;\n\n/** Settle window between the paste write and the submitting Enter write. */\nexport const SUBMIT_SETTLE_MS = 300;\n// Re-press cadence/bounds for the submit nudge (see armSubmitNudge). Fast\n// presses cover the Enter-swallowed-at-startup race; the slow phase covers\n// startup dialogs that render tens of seconds in on a cold pod (folder\n// trust, onboarding) — observed live 2026-07-02 parking code reviews ~13min+\n// when the trust dialog mounted after the fast window had expired.\nexport const SUBMIT_NUDGE_INTERVAL_MS = 2000;\nexport const SUBMIT_NUDGE_MAX_PRESSES = 5;\nexport const SUBMIT_NUDGE_SLOW_INTERVAL_MS = 5000;\nexport const SUBMIT_NUDGE_WINDOW_MS = 90_000;\n\n// How many times a failed prompt submission is recovered by tearing the CLI\n// down and respawning it with the same prompt. The nudge only presses Enter,\n// which cannot clear a startup dialog needing an arrow-key selection (the\n// 2026-07-22 fable-model-picker outage parked TUIs exactly that way) — a fresh\n// process is the only in-pod escape from that state. Bounded because a spawn\n// that reliably parks will park again, and an unbounded respawn loop would burn\n// the pod instead of surfacing the failure.\nexport const SUBMIT_REDELIVERY_MAX_ATTEMPTS = 2;\n\n// Plan-dialog auto-accept press cadence/bounds (see armPlanDialogAutoAccept).\n// The dialog usually renders within a second of the ExitPlanMode hook verdict,\n// but the window is deliberately wide: the only stop signal is the ExitPlanMode\n// PostToolUse envelope, and a missed dialog parks an auto card indefinitely\n// (observed live 2026-07-07: an approval dialog sat 42 minutes until a human\n// pressed Enter).\nexport const PLAN_DIALOG_FIRST_PRESS_MS = 700;\nexport const PLAN_DIALOG_INTERVAL_MS = 1500;\nexport const PLAN_DIALOG_SLOW_INTERVAL_MS = 5000;\nexport const PLAN_DIALOG_FAST_WINDOW_MS = 10_000;\nexport const PLAN_DIALOG_WINDOW_MS = 90_000;\n\n// Input-readiness DETECTION before the FIRST prompt write to a raw-relay TUI.\n//\n// A structured-events TUI recovers a prompt lost to startup via the submit\n// nudge (re-press Enter until a transcript record proves the turn began). A raw\n// adapter has no such evidence, so the nudge is never armed for it (see\n// armSubmitNudge's caller) — the single paste + Enter it gets must therefore\n// land on an input box that is actually accepting keystrokes, or the turn is\n// lost silently with the prompt nowhere and the card parked on an empty box.\n//\n// We DETECT that state rather than infer it from elapsed time. The method:\n// type a short sentinel, and watch for the TUI to render THAT SENTINEL back.\n// Only a live input box echoes typed characters into its own repaint, so a\n// rendered sentinel is positive proof; then it is erased and the real prompt is\n// pasted exactly once.\n//\n// Signals that were measured and rejected (opencode 1.18.15 / Claude Code\n// 2.1.226, macOS, driving node-pty directly):\n//   - DECSET 2004 (bracketed-paste enable). Both TUIs set it in their FIRST\n//     paint — opencode at 554ms, Claude at 267ms — ~2s before opencode accepts\n//     input. It reports terminal setup, not input readiness.\n//   - \"quiet since the last output frame\". opencode's startup paint contains an\n//     internal ~1175ms gap (1172/1174/1177ms over three runs), so any quiet\n//     window short enough to be responsive fires INSIDE the paint.\n//   - \"any output right after our keystroke\". While the app is still painting,\n//     output arrives coincidentally rather than causally: this reported ready at\n//     981ms and the prompt was then dropped. The ack must be the sentinel\n//     itself, not merely activity.\n//   - echoing the PROMPT back. opencode renders a multi-line paste as\n//     \"[Pasted ~4 lines]\" and never shows the text, so the prompt cannot serve\n//     as its own acknowledgement.\n//\n// Sentinel content is deliberately three inert lowercase letters: no digits\n// (Claude Code's folder-trust dialog is a numbered menu, where a stray \"1\"\n// would select \"Yes, I trust this folder\"), and no Enter/Esc/arrow keys.\nexport const RAW_TUI_PROBE_SENTINEL = \"zqx\";\n/** How long a probe waits for the TUI to render the sentinel back. */\nexport const RAW_TUI_PROBE_ACK_MS = 500;\n/** Gap between unacknowledged probes. */\nexport const RAW_TUI_PROBE_RETRY_MS = 250;\n/** Poll cadence while watching for the sentinel / for first output. */\nexport const RAW_TUI_PROBE_POLL_MS = 20;\n/** Bound on waiting for the process to paint anything at all. */\nexport const RAW_TUI_FIRST_OUTPUT_MAX_MS = 10_000;\n// Overall cap. On expiry we paste anyway rather than hang the turn: the adapter's\n// own exit diagnostics are a better failure signal than a silent stall.\nexport const RAW_TUI_INPUT_LIVE_MAX_MS = 20_000;\n\nfunction envMs(name: string, fallback: number): number {\n  const raw = Number(process.env[name]);\n  return Number.isFinite(raw) && raw > 0 ? raw : fallback;\n}\n\nexport function resolveSubmitSettleMs(): number {\n  return envMs(\"CONVEYOR_PTY_SUBMIT_SETTLE_MS\", SUBMIT_SETTLE_MS);\n}\n\n/**\n * Effective raw-TUI input-probe timing. Overridable for ops and so tests can\n * drive the detector in milliseconds instead of seconds of real wall-clock.\n * `sentinel` is overridable too, for a TUI that ever treats \"zqx\" specially.\n */\nexport function resolveRawTuiProbeTiming(): {\n  sentinel: string;\n  ackMs: number;\n  retryMs: number;\n  pollMs: number;\n  firstOutputMaxMs: number;\n  maxMs: number;\n} {\n  const sentinel = process.env.CONVEYOR_PTY_RAW_PROBE_SENTINEL;\n  return {\n    // A sentinel must be non-empty (it is what we search for) and must stay\n    // free of digits and control chars — see the note on menu dialogs above.\n    sentinel: sentinel && /^[a-z]{1,8}$/.test(sentinel) ? sentinel : RAW_TUI_PROBE_SENTINEL,\n    ackMs: envMs(\"CONVEYOR_PTY_RAW_PROBE_ACK_MS\", RAW_TUI_PROBE_ACK_MS),\n    retryMs: envMs(\"CONVEYOR_PTY_RAW_PROBE_RETRY_MS\", RAW_TUI_PROBE_RETRY_MS),\n    pollMs: envMs(\"CONVEYOR_PTY_RAW_PROBE_POLL_MS\", RAW_TUI_PROBE_POLL_MS),\n    firstOutputMaxMs: envMs(\"CONVEYOR_PTY_RAW_FIRST_OUTPUT_MAX_MS\", RAW_TUI_FIRST_OUTPUT_MAX_MS),\n    maxMs: envMs(\"CONVEYOR_PTY_RAW_INPUT_LIVE_MAX_MS\", RAW_TUI_INPUT_LIVE_MAX_MS),\n  };\n}\n\n/**\n * Did a TUI render our probe sentinel back? Positive proof that a live input box\n * consumed the keystrokes — the one signal that discriminated correctly in\n * testing (see the rejected-signals note above).\n *\n * Pure so the matching rule is testable without a pty. Compares against ANSI-\n * stripped output because the sentinel is repainted inside styling runs.\n *\n * PRECONDITION: the child must already own the terminal. Until a TUI switches\n * the tty out of canonical mode the line discipline echoes our own keystrokes\n * straight back, which is indistinguishable from a repaint and false-positives\n * immediately. `sawTerminalSetup` is the gate for that — always wait for it\n * first.\n */\nexport function sentinelEchoed(rawOutput: string, sentinel: string): boolean {\n  return cleanTerminalOutput(rawOutput, Number.MAX_SAFE_INTEGER).includes(sentinel);\n}\n\n/** DEC private mode set/reset — `ESC [ ? <params> h|l`. */\nconst DEC_PRIVATE_MODE = new RegExp(`${String.fromCharCode(27)}\\\\[\\\\?[0-9;]+[hl]`);\n\n/**\n * Has the child taken control of the terminal?\n *\n * A DEC private-mode write (alternate screen, bracketed paste, mouse tracking,\n * cursor visibility…) is the child reconfiguring the tty for full-screen use,\n * which is also when it drops canonical mode and echo. Both TUIs do it in their\n * first paint — opencode at 554ms, Claude Code at 267ms — so this is a cheap,\n * observed precondition rather than another timer.\n *\n * It is deliberately NOT used as a readiness signal on its own: opencode sets\n * bracketed-paste ~2s before it will accept input. It only tells us our own\n * keystrokes will no longer be echoed by the kernel, making a sentinel echo\n * attributable to the app.\n */\nexport function sawTerminalSetup(rawOutput: string): boolean {\n  return DEC_PRIVATE_MODE.test(rawOutput);\n}\n\n/**\n * Does this adapter's first prompt write need the readiness gate?\n *\n * A per-adapter capability, NOT derived from structuredEvents: opencode keeps\n * the gate even with the events plugin wired, because its TUI silently\n * discards early stdin while painting — the pasted text itself is lost, which\n * no submit nudge can recover. Claude skips it (the nudge suffices, and its\n * numbered startup menus make stray probe keystrokes actively unsafe).\n * Exported so the contract is pinned by a test rather than resting on one\n * `if` inside the session.\n */\nexport function needsRawReadyGate(caps: { rawPromptGate: boolean }): boolean {\n  return caps.rawPromptGate;\n}\n\n/**\n * Effective submit-nudge timing. The exported constants above are the production\n * defaults; `CONVEYOR_PTY_NUDGE_INTERVAL_MS` / `_SLOW_INTERVAL_MS` / `_WINDOW_MS`\n * override them. Resolved at nudge-arm time (not import) so an integration test\n * can drive the two-phase fast→slow behavior in milliseconds instead of ~15s of\n * real wall-clock. `maxPresses` is deliberately NOT overridable — the fast→slow\n * phase-boundary count is the behavior under test.\n */\nexport function resolveSubmitNudgeTiming(): {\n  intervalMs: number;\n  slowIntervalMs: number;\n  maxPresses: number;\n  windowMs: number;\n} {\n  return {\n    intervalMs: envMs(\"CONVEYOR_PTY_NUDGE_INTERVAL_MS\", SUBMIT_NUDGE_INTERVAL_MS),\n    slowIntervalMs: envMs(\"CONVEYOR_PTY_NUDGE_SLOW_INTERVAL_MS\", SUBMIT_NUDGE_SLOW_INTERVAL_MS),\n    maxPresses: SUBMIT_NUDGE_MAX_PRESSES,\n    windowMs: envMs(\"CONVEYOR_PTY_NUDGE_WINDOW_MS\", SUBMIT_NUDGE_WINDOW_MS),\n  };\n}\n\n/**\n * How many respawn-and-redeliver attempts a failed prompt submission gets.\n * `CONVEYOR_PTY_SUBMIT_REDELIVERY_MAX` overrides it; `0` disables recovery\n * entirely (the failure is still detected and reported). Resolved at use time\n * so tests and ops can change it without a restart-order dependency.\n */\nexport function resolveSubmitRedeliveryMaxAttempts(): number {\n  const value = process.env.CONVEYOR_PTY_SUBMIT_REDELIVERY_MAX;\n  // An empty string is \"unset\", not \"0\" — `Number(\"\")` is 0, which would\n  // silently disable recovery for anyone exporting the var blank.\n  if (!value) return SUBMIT_REDELIVERY_MAX_ATTEMPTS;\n  const raw = Number(value);\n  return Number.isFinite(raw) && raw >= 0 ? raw : SUBMIT_REDELIVERY_MAX_ATTEMPTS;\n}\n\nexport function resolvePlanDialogTiming(): {\n  firstPressMs: number;\n  intervalMs: number;\n  slowIntervalMs: number;\n  fastWindowMs: number;\n  windowMs: number;\n} {\n  return {\n    firstPressMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_FIRST_PRESS_MS\", PLAN_DIALOG_FIRST_PRESS_MS),\n    intervalMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_INTERVAL_MS\", PLAN_DIALOG_INTERVAL_MS),\n    slowIntervalMs: envMs(\n      \"CONVEYOR_PTY_PLAN_DIALOG_SLOW_INTERVAL_MS\",\n      PLAN_DIALOG_SLOW_INTERVAL_MS,\n    ),\n    fastWindowMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_FAST_WINDOW_MS\", PLAN_DIALOG_FAST_WINDOW_MS),\n    windowMs: envMs(\"CONVEYOR_PTY_PLAN_DIALOG_WINDOW_MS\", PLAN_DIALOG_WINDOW_MS),\n  };\n}\n\n/**\n * The per-turn subset of HarnessQueryOptions — everything that legitimately\n * changes from one turn to the next while the same `claude` process serves them\n * all. The process-level fields (model, cwd, sessionId, appendSystemPrompt, …)\n * are fixed at spawn and captured separately in the spawn options.\n */\nexport interface TurnOptions {\n  canUseTool?: HarnessQueryOptions[\"canUseTool\"];\n  promptDelivery?: \"submit\" | \"prefill\";\n  planDialogAutoAccept?: boolean;\n  abortController?: AbortController;\n}\n\nexport function turnOptionsFrom(options: HarnessQueryOptions): TurnOptions {\n  return {\n    canUseTool: options.canUseTool,\n    promptDelivery: options.promptDelivery,\n    planDialogAutoAccept: options.planDialogAutoAccept,\n    abortController: options.abortController,\n  };\n}\n\nexport interface PtyProcess {\n  /** node-pty exposes the child's pid (its own session/process-group leader\n   *  via forkpty). Optional because test fakes don't model a real process. */\n  pid?: number;\n  onData(listener: (data: string) => void): void;\n  onExit(listener: (event: { exitCode: number }) => void): void;\n  write(data: string): void;\n  resize(cols: number, rows: number): void;\n  kill(signal?: string): void;\n}\n\nexport const KILL_ESCALATION_MS = 5_000;\n\n/**\n * Kill a pty, escalating to SIGKILL if it hasn't exited within `escalationMs`.\n * node-pty's default kill (SIGHUP) can be ignored by a wedged `claude` (e.g.\n * mid-OOM), and a fire-and-forget kill would then leak the ~1GB process on the\n * pod. `hasExited()` (backed by the caller's onExit handler) cancels the\n * escalation on a clean exit; the timer is unref'd so it never holds the\n * process open on its own.\n */\nexport function killPtyWithEscalation(\n  pty: Pick<PtyProcess, \"kill\">,\n  hasExited: () => boolean,\n  escalationMs: number = KILL_ESCALATION_MS,\n): void {\n  try {\n    pty.kill();\n  } catch {\n    /* already exited */\n  }\n  const timer = setTimeout(() => {\n    if (hasExited()) return;\n    try {\n      pty.kill(\"SIGKILL\");\n    } catch {\n      /* already exited */\n    }\n  }, escalationMs);\n  timer.unref?.();\n}\n\nexport interface PtySpawnOptions {\n  name: string;\n  cols: number;\n  rows: number;\n  cwd: string;\n  env: Record<string, string>;\n}\n\nexport type PtySpawn = (file: string, args: string[], options: PtySpawnOptions) => PtyProcess;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction extractSpawn(mod: unknown): PtySpawn | null {\n  if (!isRecord(mod)) return null;\n  if (typeof mod.spawn === \"function\") return mod.spawn as PtySpawn;\n  const def = mod.default;\n  if (isRecord(def) && typeof def.spawn === \"function\") return def.spawn as PtySpawn;\n  return null;\n}\n\nexport async function loadPtySpawn(): Promise<PtySpawn> {\n  const mod: unknown = await import(\"node-pty\");\n  const spawn = extractSpawn(mod);\n  if (!spawn) throw new Error(\"node-pty: spawn export not found\");\n  return spawn;\n}\n\n/**\n * The spawn implementation for this pod topology: node-pty locally, or the\n * workbench launcher's remote PTY in split-mode pods (the CLI must run in the\n * workbench container, next to the repo and inside the restartable cgroup).\n * Same PtySpawn contract either way — PtySession is topology-blind.\n */\nexport async function resolvePtySpawn(): Promise<PtySpawn> {\n  const { workbenchEnabled } = await import(\"../../workbench/mode.js\");\n  if (!workbenchEnabled()) return loadPtySpawn();\n  const { getWorkbenchClient } = await import(\"../../workbench/client.js\");\n  return (file, args, options) => getWorkbenchClient().spawnPty(file, args, options);\n}\n\n/**\n * Base directory for a PTY session's control files (settings.json,\n * mcp-config, hook socket). In split-mode pods this MUST be the shared\n * emptyDir — the spawned CLI reads these paths from the workbench container,\n * and the hook helper connects back over the unix socket, which crosses\n * containers only on a shared volume.\n */\nexport function sessionTempBase(): string {\n  return process.env.CONVEYOR_SHARED_DIR ?? tmpdir();\n}\n\nexport function inheritedEnv(socketPath?: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const [key, value] of Object.entries(process.env)) {\n    if (typeof value === \"string\") env[key] = value;\n  }\n  // Do NOT force CLAUDE_CONFIG_DIR. Forcing it to ~/.claude makes the CLI read\n  // <dir>/.claude.json — a fresh, un-onboarded config — instead of the user's\n  // real ~/.claude.json, which re-triggers the first-run theme picker + login\n  // even though valid credentials already exist in ~/.claude/. The loop above\n  // already propagates an explicitly-set CLAUDE_CONFIG_DIR (pods/codespaces),\n  // and the config dir is unchanged either way, so transcript tailing (which\n  // uses claudeConfigHome()) still resolves to the same projects/ directory.\n  // Belt-and-braces against the ANTHROPIC_API_KEY leak: when a subscription\n  // OAuth token is in play, the TUI authenticates via the synthesized\n  // credentials.json — an inherited ANTHROPIC_API_KEY would be treated as an\n  // EXTERNAL API key and, once interactively approved, poison auth (the token\n  // is sent via x-api-key → 401 forever). The API bundle already stops serving\n  // the OAuth token under that name; stripping it here means no upstream leak\n  // can reach the spawned CLI regardless. The two auth modes are mutually\n  // exclusive (see session-runner's onApiKeyUpdate), so a real api_key launch\n  // has no CLAUDE_CODE_OAUTH_TOKEN and keeps its ANTHROPIC_API_KEY.\n  if (env.CLAUDE_CODE_OAUTH_TOKEN) {\n    delete env.ANTHROPIC_API_KEY;\n  }\n  // A GitHub App installation token dies at ~1h, but this CLI is spawned once\n  // and parked for hours — its env is a snapshot we can never update. Handing\n  // it `GH_TOKEN`/`GITHUB_TOKEN` therefore guarantees a 401 on every `gh` call\n  // past the first hour, and `gh` prefers those variables over its config\n  // file, so a fresh hosts.yml would be ignored while they are set. Drop them\n  // and let `gh` read the file the refresh timer keeps current. Only ever done\n  // when Conveyor owns that file — otherwise dropping them leaves no\n  // credential at all. `CONVEYOR_KEEP_GH_TOKEN_ENV=1` restores the old\n  // behavior for debugging.\n  if (ghHostsManagedByConveyor() && env.CONVEYOR_KEEP_GH_TOKEN_ENV !== \"1\") {\n    delete env.GH_TOKEN;\n    delete env.GITHUB_TOKEN;\n    delete env.CONVEYOR_GITHUB_TOKEN;\n    // Shells and scripts that need the value read it from here, fresh.\n    env.CONVEYOR_GITHUB_TOKEN_FILE = githubTokenFilePath();\n  }\n  if (socketPath) {\n    env.CONVEYOR_HOOK_SOCKET = socketPath;\n  }\n  // The conveyor MCP tool handlers proxy over the agent's API socket, and a\n  // mid-flap call can block up to ~50s (20s reconnect-wait + 30s ack) before\n  // failing with a retryable error. The CLI's default MCP timeouts are\n  // shorter — hitting them made it abandon the MCP session mid-flap\n  // (2026-07-08 wedge). Default both timeouts past the worst-case hang;\n  // operator-set values win via the inherit loop above.\n  env.MCP_TIMEOUT ??= \"60000\";\n  env.MCP_TOOL_TIMEOUT ??= \"180000\";\n  return env;\n}\n\n/**\n * The bracketed-paste bytes written to the CLI's stdin to deliver a prompt.\n * The text is wrapped in paste markers so embedded newlines land as literal\n * lines in the input box instead of submitting it early. The submitting Enter\n * is deliberately NOT part of these bytes: deliverPrompt() sends it as a\n * separate write after a settle window, because an Enter folded into the same\n * chunk as the paste can be swallowed by the CLI's paste-burst handling —\n * observed in production as an auto-mode prompt parked unsubmitted in the\n * input box. \"prefill\" delivery never sends an Enter at all.\n */\nexport function buildPromptBytes(text: string): string {\n  return `\\x1b[200~${text}\\x1b[201~`;\n}\n\n/**\n * Render structured (multimodal) prompt content as pasteable text. Image\n * blocks are replaced with a tool reference — their base64 payload must NEVER\n * be pasted into the TUI input box. Upstream prompt builders already skip\n * image blocks for the PTY harness; this is the last line of defense.\n */\nexport function renderPromptContentText(content: unknown[]): string {\n  return content\n    .map((block) => {\n      const b = block as { type?: string; text?: string };\n      if (b?.type === \"text\" && typeof b.text === \"string\") return b.text;\n      if (b?.type === \"image\") {\n        return `[Image attachment — use list_task_files / get_attachment to view]`;\n      }\n      return JSON.stringify(block);\n    })\n    .join(\"\\n\\n\");\n}\n\nexport { sleep } from \"../../utils/sleep.js\";\n\n/** Current size of the transcript, or 0 if it does not exist yet. */\nexport async function transcriptSize(path: string): Promise<number> {\n  try {\n    return (await stat(path)).size;\n  } catch {\n    return 0;\n  }\n}\n\n/**\n * Defensive extraction of AskUserQuestion's `questions` input from the hook\n * payload. Malformed entries are dropped rather than thrown — the event is\n * observe-only, so an empty list still arms the waiting_for_input report.\n */\nexport function parseUserQuestions(input: Record<string, unknown>): HarnessUserQuestion[] {\n  if (!Array.isArray(input.questions)) return [];\n  const questions: HarnessUserQuestion[] = [];\n  for (const entry of input.questions) {\n    if (!isRecord(entry)) continue;\n    if (typeof entry.question !== \"string\") continue;\n    const options = Array.isArray(entry.options)\n      ? entry.options\n          .filter(isRecord)\n          .filter((o) => typeof o.label === \"string\")\n          .map((o) => ({\n            label: o.label as string,\n            description: typeof o.description === \"string\" ? o.description : \"\",\n          }))\n      : [];\n    questions.push({\n      question: entry.question,\n      header: typeof entry.header === \"string\" ? entry.header : \"\",\n      options,\n      ...(typeof entry.multiSelect === \"boolean\" ? { multiSelect: entry.multiSelect } : {}),\n    });\n  }\n  return questions;\n}\n","/**\n * The `claude` CLI process boundary: resolve the binary, build its argv, and\n * interpret its exit when it dies before producing a result. Kept pure so it\n * can be unit-tested without a real spawn.\n */\n\nexport interface SpawnArgsInput {\n  resume?: string;\n  sessionId?: string;\n  model: string;\n  permissionMode: \"plan\" | \"bypassPermissions\";\n  settingsPath: string;\n  /** Extra system-prompt text appended via `--append-system-prompt`. */\n  appendSystemPrompt?: string;\n  mcpConfigPath?: string;\n  /** When set with mcpConfigPath, the CLI uses ONLY that config and ignores the\n   * user's `~/.claude.json` / project `.mcp.json` servers. */\n  strictMcpConfig?: boolean;\n}\n\nexport function resolveClaudeBinary(): string {\n  return process.env.CONVEYOR_CLAUDE_BIN ?? \"claude\";\n}\n\nexport function buildSpawnArgs(input: SpawnArgsInput): string[] {\n  const args: string[] = [];\n  if (input.resume) {\n    args.push(\"--resume\", input.resume);\n  } else if (input.sessionId) {\n    args.push(\"--session-id\", input.sessionId);\n  }\n  args.push(\"--model\", input.model);\n  if (input.permissionMode === \"bypassPermissions\") {\n    args.push(\"--dangerously-skip-permissions\");\n  } else {\n    args.push(\"--permission-mode\", \"plan\");\n  }\n  args.push(\"--settings\", input.settingsPath);\n  if (input.appendSystemPrompt) {\n    args.push(\"--append-system-prompt\", input.appendSystemPrompt);\n  }\n  if (input.mcpConfigPath) {\n    args.push(\"--mcp-config\", input.mcpConfigPath);\n    if (input.strictMcpConfig) {\n      args.push(\"--strict-mcp-config\");\n    }\n  }\n  return args;\n}\n\n/**\n * A stable fingerprint of the spawn arguments that a REUSED (kept-alive) CLI\n * process cannot change — model, permission mode, appended system prompt, and\n * cwd are all baked into the live `claude` process at spawn. When a follow-up\n * turn would spawn with different values (most commonly a drifted\n * `appendSystemPrompt` after a plan/status edit), the parked process cannot\n * serve it, so the harness respawns instead of reusing. Keeping this beside\n * `buildSpawnArgs` ensures the two can't silently diverge.\n *\n * `settingsPath`, `mcpConfigPath`, and the hook socket path are deliberately\n * excluded: they are per-process resources that stay stable for the process's\n * whole life, so they never differentiate one turn from the next.\n */\nexport function spawnOptionsFingerprint(input: {\n  model: string;\n  permissionMode: \"plan\" | \"bypassPermissions\";\n  appendSystemPrompt?: string;\n  cwd: string;\n}): string {\n  return JSON.stringify([\n    input.model,\n    input.permissionMode,\n    input.appendSystemPrompt ?? \"\",\n    input.cwd,\n  ]);\n}\n\n// ─── Exit diagnostics ──────────────────────────────────────────────────────\n// The PTY harness never turns raw `claude` stdout/stderr into HarnessEvents —\n// it relays them to the S5 terminal instead. So when `claude` dies before\n// emitting a transcript result, the captured agent logs show only the generic\n// \"claude exited (code N) without a result\"; the real reason (a missing binary,\n// an auth/onboarding stop, an unknown CLI flag) scrolled past in the live\n// terminal only. These helpers fold a bounded, ANSI-stripped tail of that\n// scrollback back into the error so the failure is self-describing in the logs.\n\n// ESC (0x1B) built via fromCharCode so no control char appears as a source\n// literal (keeps the no-control-regex lint rule happy). Matches CSI sequences\n// (ESC [ ... final-byte) — the bulk of TUI escape noise; any stray ESC bytes\n// from other sequences are removed by the control-char pass below.\nconst ANSI_CSI = new RegExp(`${String.fromCharCode(27)}\\\\[[0-9;?]*[ -/]*[@-~]`, \"g\");\n\n/**\n * Strip ANSI escapes + terminal control noise and collapse to the last few\n * readable lines, capped at `maxChars`. Returns \"\" when nothing printable\n * remains (e.g. the process produced no output at all).\n */\nexport function cleanTerminalOutput(raw: string, maxChars = 1200): string {\n  const noAnsi = raw.replace(ANSI_CSI, \"\");\n  // Drop C0 control chars (and DEL) except tab; fold CR into newline.\n  let out = \"\";\n  for (const ch of noAnsi) {\n    const code = ch.charCodeAt(0);\n    if (ch === \"\\r\" || ch === \"\\n\") out += \"\\n\";\n    else if (ch === \"\\t\") out += ch;\n    else if (code < 0x20 || code === 0x7f) continue;\n    else out += ch;\n  }\n  const lines = out\n    .split(\"\\n\")\n    .map((line) => line.trimEnd())\n    .filter((line) => line.trim().length > 0);\n  const text = lines.join(\"\\n\").trim();\n  return text.length > maxChars ? `…${text.slice(-maxChars)}` : text;\n}\n\n/**\n * True when the terminal tail shows node-pty failed to exec the target binary\n * (missing `claude` CLI on PATH). node-pty prints `execvp(3) failed.: No such\n * file or directory` to the pty and the child exits with code 1.\n */\nexport function isMissingBinaryFailure(tail: string): boolean {\n  return /execvp\\(\\d+\\) failed|no such file or directory|command not found/i.test(tail);\n}\n\n/**\n * Build the `errors[]` for a `claude` process that exited before emitting a\n * transcript result. The first entry is kept byte-for-byte stable so existing\n * consumers/log scrapers that key off it keep working; richer context is\n * appended after it.\n */\nexport function buildExitErrors(exitCode: number, rawOutput: string, binary: string): string[] {\n  const errors = [`claude exited (code ${exitCode}) without a result`];\n  const tail = cleanTerminalOutput(rawOutput);\n  if (isMissingBinaryFailure(tail)) {\n    errors.push(\n      `The \\`${binary}\\` CLI could not be started — it is not installed or not on PATH. ` +\n        `Install the Claude Code CLI in this environment (npm i -g @anthropic-ai/claude-code) ` +\n        `or set CONVEYOR_CLAUDE_BIN to its absolute path.`,\n    );\n  }\n  if (tail) {\n    errors.push(`Last terminal output before exit:\\n${tail}`);\n  }\n  return errors;\n}\n","import { createHash } from \"node:crypto\";\nimport { chmodSync, existsSync, mkdirSync, renameSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport type { GitCredential } from \"@project/shared\";\n\nfunction credentialDir(cwd: string): string {\n  return join(dirname(cwd), \".conveyor-git-credentials\");\n}\n\nexport function gitCredentialFile(cwd: string): string {\n  const key = createHash(\"sha256\").update(cwd).digest(\"hex\").slice(0, 16);\n  return join(credentialDir(cwd), `${key}.store`);\n}\n\nexport function gitCredentialHelper(cwd: string): string {\n  return `store --file=${gitCredentialFile(cwd)}`;\n}\n\n/** Persist a pod-lifetime credential outside the repository with owner-only permissions. */\nexport function writeGitCredential(cwd: string, cloneUrl: string, credential: GitCredential): void {\n  const cleanUrl = new URL(cloneUrl);\n  if (!/^https?:$/.test(cleanUrl.protocol) || cleanUrl.username || cleanUrl.password) {\n    throw new Error(\"Git clone URL must be a credential-free HTTP(S) URL\");\n  }\n  if (!credential.username || !credential.secret) {\n    throw new Error(\"Git credential username and secret are required\");\n  }\n\n  const dir = credentialDir(cwd);\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n  chmodSync(dir, 0o700);\n\n  cleanUrl.username = credential.username;\n  cleanUrl.password = credential.secret;\n  cleanUrl.pathname = \"/\";\n  cleanUrl.search = \"\";\n  cleanUrl.hash = \"\";\n\n  const target = gitCredentialFile(cwd);\n  writeSecretFile(target, `${cleanUrl.toString()}\\n`);\n}\n\n// ── Refreshable GitHub credential files ────────────────────────────────────\n//\n// A GitHub App installation token dies at ~1h, but the pod's `claude` CLI is\n// spawned once and parked for hours (keep-alive PTY). A child process cannot\n// see its parent's later `process.env` writes, so a token exported into the\n// child env at spawn time is frozen: every `gh` call after the first hour 401s\n// and no re-export inside the agent's shell can fix it.\n//\n// The fix is to keep the credential in FILES that every refresh path rewrites,\n// the same way `writeGitCredential` above already keeps `git push` working:\n//   - `~/.config/gh/hosts.yml` — what the `gh` CLI reads when no token env var\n//     shadows it (see `inheritedEnv` in harness/pty/pty-support.ts).\n//   - `~/.conveyor/github-token` — a plain file any shell or script can read\n//     for a value that is fresh right now.\n\n/** Plain-text file holding the current GitHub token, for shells and scripts. */\nexport function githubTokenFilePath(): string {\n  return process.env.CONVEYOR_GITHUB_TOKEN_FILE || join(homedir(), \".conveyor\", \"github-token\");\n}\n\nfunction ghConfigDir(): string {\n  return process.env.GH_CONFIG_DIR || join(homedir(), \".config\", \"gh\");\n}\n\n/** The `gh` CLI's credential file. */\nexport function ghHostsFilePath(): string {\n  return join(ghConfigDir(), \"hosts.yml\");\n}\n\n/** Marker proving the hosts.yml alongside it is ours, not a user's own login. */\nfunction ghManagedMarkerPath(): string {\n  return join(ghConfigDir(), \".conveyor-managed\");\n}\n\n/** gh's general settings file. We only care that it declares a config version. */\nfunction ghConfigFilePath(): string {\n  return join(ghConfigDir(), \"config.yml\");\n}\n\n/**\n * A test run must never write real credential files into the machine's home.\n * The suites that exercise these writers point `GH_CONFIG_DIR` /\n * `CONVEYOR_GITHUB_TOKEN_FILE` at a temp dir; without an override, a vitest\n * process writes nothing. This is not theoretical — a `pushToOrigin` unit test\n * refreshing to the literal token \"new-token\" wrote that value into a live\n * pod's `~/.config/gh/hosts.yml` and broke `gh` for the whole session.\n */\nfunction blockedDefaultWrite(overrideEnvKey: string): boolean {\n  return Boolean(process.env.VITEST) && !process.env[overrideEnvKey];\n}\n\n/**\n * True when Conveyor owns the `gh` credential file. Callers use this to decide\n * whether dropping a frozen token env var is safe: without our own hosts.yml,\n * removing it would leave `gh` with no credential at all.\n */\nexport function ghHostsManagedByConveyor(): boolean {\n  return existsSync(ghManagedMarkerPath()) && existsSync(ghHostsFilePath());\n}\n\n/** Atomic owner-only write, creating the parent directory owner-only. */\nfunction writeSecretFile(target: string, contents: string): void {\n  const dir = dirname(target);\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n  chmodSync(dir, 0o700);\n  const temporary = `${target}.${process.pid}.tmp`;\n  writeFileSync(temporary, contents, { encoding: \"utf8\", mode: 0o600 });\n  chmodSync(temporary, 0o600);\n  renameSync(temporary, target);\n}\n\nfunction writeGithubTokenFile(token: string): boolean {\n  if (blockedDefaultWrite(\"CONVEYOR_GITHUB_TOKEN_FILE\")) return false;\n  writeSecretFile(githubTokenFilePath(), `${token}\\n`);\n  return true;\n}\n\n/**\n * Declare the config version so gh treats hosts.yml as already migrated.\n * Without this, every gh invocation runs the multi-account migration, which\n * calls the API to resolve the account name — and an expired token then fails\n * the whole command with \"cowardly refusing to continue with multi account\n * migration\" instead of a plain 401. The agent is told to answer a 401 by\n * refreshing the token, so the plain 401 is the failure we want. Only written\n * when absent: config.yml also holds user preferences we must not overwrite.\n */\nfunction ensureGhConfigVersion(): void {\n  if (existsSync(ghConfigFilePath())) return;\n  writeSecretFile(ghConfigFilePath(), 'version: \"1\"\\n');\n}\n\n/**\n * Write the `gh` CLI credential file. Both the top-level keys and the `users`\n * map are emitted: gh reads the flat `oauth_token` and newer versions also\n * expect the per-user entry, so writing both keeps one file valid for either.\n */\nfunction writeGhHostsConfig(token: string): boolean {\n  if (blockedDefaultWrite(\"GH_CONFIG_DIR\")) return false;\n  // Never clobber a `gh` login this pod did not create — an environment that\n  // authenticates gh for us (a GitHub Codespace, a developer's own machine)\n  // keeps its own file, and the env-stripping caller then leaves that\n  // environment's token variables in place.\n  if (existsSync(ghHostsFilePath()) && !existsSync(ghManagedMarkerPath())) return false;\n  const host = process.env.GH_HOST || \"github.com\";\n  const user = process.env.CONVEYOR_GIT_USERNAME || \"x-access-token\";\n  const contents = [\n    \"# Written by conveyor-agent — refreshed on every GitHub token refresh.\",\n    \"# Edits are overwritten. Do not add a second host entry here by hand.\",\n    `${host}:`,\n    `    oauth_token: ${token}`,\n    `    user: ${user}`,\n    \"    git_protocol: https\",\n    \"    users:\",\n    `        ${user}:`,\n    `            oauth_token: ${token}`,\n    \"\",\n  ].join(\"\\n\");\n  writeSecretFile(ghHostsFilePath(), contents);\n  writeSecretFile(ghManagedMarkerPath(), \"conveyor-agent\\n\");\n  ensureGhConfigVersion();\n  return true;\n}\n\nexport interface GithubTokenFileSync {\n  tokenFile: boolean;\n  ghHosts: boolean;\n}\n\n/**\n * Refresh every file-based copy of the GitHub token. Never throws — a failed\n * write must not break the caller's real work (a push, a boot, a refresh\n * tick); the return value says which copies are now current.\n */\nexport function syncGithubTokenFiles(token: string | undefined): GithubTokenFileSync {\n  const result: GithubTokenFileSync = { tokenFile: false, ghHosts: false };\n  if (!token) return result;\n  try {\n    result.tokenFile = writeGithubTokenFile(token);\n  } catch {\n    // best effort\n  }\n  try {\n    result.ghHosts = writeGhHostsConfig(token);\n  } catch {\n    // best effort\n  }\n  return result;\n}\n","export function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import { spawn, execSync, type ChildProcess } from \"node:child_process\";\n\n/**\n * The structural surface of a start-command child the supervisor manages —\n * satisfied by a local ChildProcess and by the workbench client's\n * RemoteProcessHandle (split-mode pods, where the process lives in the\n * workbench container).\n */\nexport interface ManagedChildProcess extends NodeJS.EventEmitter {\n  pid?: number | undefined;\n  exitCode: number | null;\n  kill(signal?: NodeJS.Signals | number): boolean;\n}\n\nconst PROCESS_TERMINATION_GRACE_MS = 5_000;\n\nfunction abortError(): Error {\n  const error = new Error(\"Operation aborted\");\n  error.name = \"AbortError\";\n  return error;\n}\n\nfunction signalProcessGroup(child: ManagedChildProcess, signal: NodeJS.Signals): void {\n  try {\n    if (child.pid) process.kill(-child.pid, signal);\n    else child.kill(signal);\n  } catch {\n    try {\n      child.kill(signal);\n    } catch {\n      // The process already exited.\n    }\n  }\n}\n\nexport function terminateProcessGroup(\n  // ChildProcess structurally satisfies ManagedChildProcess, so the single type\n  // covers both callers; keeping them as a union makes the shared EventEmitter\n  // methods (once/removeListener) non-callable under @types/node's overloads.\n  child: ManagedChildProcess,\n  graceMs = PROCESS_TERMINATION_GRACE_MS,\n): Promise<void> {\n  if (child.exitCode !== null) return Promise.resolve();\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      child.removeListener(\"exit\", finish);\n      resolve();\n    };\n    const timer = setTimeout(() => {\n      signalProcessGroup(child, \"SIGKILL\");\n      finish();\n    }, graceMs);\n    timer.unref();\n    child.once(\"exit\", finish);\n    signalProcessGroup(child, \"SIGTERM\");\n  });\n}\n\nexport function runSetupCommand(\n  cmd: string,\n  cwd: string,\n  onOutput: (stream: \"stdout\" | \"stderr\", data: string) => void,\n  signal?: AbortSignal,\n): Promise<void> {\n  if (signal?.aborted) return Promise.reject(abortError());\n  return new Promise((resolve, reject) => {\n    const child = spawn(\"sh\", [\"-c\", cmd], {\n      cwd,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      detached: true,\n      env: { ...process.env },\n    });\n    let settled = false;\n    let aborting = false;\n    const cleanup = (): void => signal?.removeEventListener(\"abort\", onAbort);\n    const settle = (error?: Error): void => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      if (error) reject(error);\n      else resolve();\n    };\n    const onAbort = (): void => {\n      if (settled || aborting) return;\n      aborting = true;\n      void terminateProcessGroup(child).then(() => settle(abortError()));\n    };\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n    if (signal?.aborted) onAbort();\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (aborting || signal?.aborted) return;\n      onOutput(\"stdout\", chunk.toString());\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      if (aborting || signal?.aborted) return;\n      onOutput(\"stderr\", chunk.toString());\n    });\n\n    child.on(\"close\", (code) => {\n      if (aborting) return;\n      settle(code === 0 ? undefined : new Error(`Setup command exited with code ${code}`));\n    });\n\n    child.on(\"error\", (err) => {\n      if (!aborting) settle(err);\n    });\n  });\n}\n\nconst AUTH_TOKEN_TIMEOUT_MS = 30_000;\n\nexport function runAuthTokenCommand(cmd: string, userEmail: string, cwd: string): string | null {\n  try {\n    const output = execSync(`${cmd} ${JSON.stringify(userEmail)}`, {\n      cwd,\n      timeout: AUTH_TOKEN_TIMEOUT_MS,\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      env: { ...process.env },\n    });\n    const token = output.toString().trim();\n    return token || null;\n  } catch {\n    return null;\n  }\n}\n\nexport function runStartCommand(\n  cmd: string,\n  cwd: string,\n  onOutput: (stream: \"stdout\" | \"stderr\", data: string) => void,\n): ChildProcess {\n  const child = spawn(\"sh\", [\"-c\", cmd], {\n    cwd,\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    detached: true,\n    env: { ...process.env },\n  });\n\n  child.stdout.on(\"data\", (chunk: Buffer) => {\n    onOutput(\"stdout\", chunk.toString());\n  });\n\n  child.stderr.on(\"data\", (chunk: Buffer) => {\n    onOutput(\"stderr\", chunk.toString());\n  });\n\n  child.unref();\n  return child;\n}\n"],"mappings":";AAQA,SAAS,YAAY;AACrB,SAAS,cAAc;;;ACWhB,SAAS,sBAA8B;AAC5C,SAAO,QAAQ,IAAI,uBAAuB;AAC5C;AAEO,SAAS,eAAe,OAAiC;AAC9D,QAAM,OAAiB,CAAC;AACxB,MAAI,MAAM,QAAQ;AAChB,SAAK,KAAK,YAAY,MAAM,MAAM;AAAA,EACpC,WAAW,MAAM,WAAW;AAC1B,SAAK,KAAK,gBAAgB,MAAM,SAAS;AAAA,EAC3C;AACA,OAAK,KAAK,WAAW,MAAM,KAAK;AAChC,MAAI,MAAM,mBAAmB,qBAAqB;AAChD,SAAK,KAAK,gCAAgC;AAAA,EAC5C,OAAO;AACL,SAAK,KAAK,qBAAqB,MAAM;AAAA,EACvC;AACA,OAAK,KAAK,cAAc,MAAM,YAAY;AAC1C,MAAI,MAAM,oBAAoB;AAC5B,SAAK,KAAK,0BAA0B,MAAM,kBAAkB;AAAA,EAC9D;AACA,MAAI,MAAM,eAAe;AACvB,SAAK,KAAK,gBAAgB,MAAM,aAAa;AAC7C,QAAI,MAAM,iBAAiB;AACzB,WAAK,KAAK,qBAAqB;AAAA,IACjC;AAAA,EACF;AACA,SAAO;AACT;AAeO,SAAS,wBAAwB,OAK7B;AACT,SAAO,KAAK,UAAU;AAAA,IACpB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM,sBAAsB;AAAA,IAC5B,MAAM;AAAA,EACR,CAAC;AACH;AAeA,IAAM,WAAW,IAAI,OAAO,GAAG,OAAO,aAAa,EAAE,CAAC,0BAA0B,GAAG;AAO5E,SAAS,oBAAoB,KAAa,WAAW,MAAc;AACxE,QAAM,SAAS,IAAI,QAAQ,UAAU,EAAE;AAEvC,MAAI,MAAM;AACV,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,GAAG,WAAW,CAAC;AAC5B,QAAI,OAAO,QAAQ,OAAO,KAAM,QAAO;AAAA,aAC9B,OAAO,IAAM,QAAO;AAAA,aACpB,OAAO,MAAQ,SAAS,IAAM;AAAA,QAClC,QAAO;AAAA,EACd;AACA,QAAM,QAAQ,IACX,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,EAC5B,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC;AAC1C,QAAM,OAAO,MAAM,KAAK,IAAI,EAAE,KAAK;AACnC,SAAO,KAAK,SAAS,WAAW,SAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK;AAChE;AAOO,SAAS,uBAAuB,MAAuB;AAC5D,SAAO,oEAAoE,KAAK,IAAI;AACtF;AAQO,SAAS,gBAAgB,UAAkB,WAAmB,QAA0B;AAC7F,QAAM,SAAS,CAAC,uBAAuB,QAAQ,oBAAoB;AACnE,QAAM,OAAO,oBAAoB,SAAS;AAC1C,MAAI,uBAAuB,IAAI,GAAG;AAChC,WAAO;AAAA,MACL,SAAS,MAAM;AAAA,IAGjB;AAAA,EACF;AACA,MAAI,MAAM;AACR,WAAO,KAAK;AAAA,EAAsC,IAAI,EAAE;AAAA,EAC1D;AACA,SAAO;AACT;;;ACjJA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,YAAY,WAAW,YAAY,qBAAqB;AAC5E,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAG9B,SAAS,cAAc,KAAqB;AAC1C,SAAO,KAAK,QAAQ,GAAG,GAAG,2BAA2B;AACvD;AAEO,SAAS,kBAAkB,KAAqB;AACrD,QAAM,MAAM,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACtE,SAAO,KAAK,cAAc,GAAG,GAAG,GAAG,GAAG,QAAQ;AAChD;AAEO,SAAS,oBAAoB,KAAqB;AACvD,SAAO,gBAAgB,kBAAkB,GAAG,CAAC;AAC/C;AAGO,SAAS,mBAAmB,KAAa,UAAkB,YAAiC;AACjG,QAAM,WAAW,IAAI,IAAI,QAAQ;AACjC,MAAI,CAAC,YAAY,KAAK,SAAS,QAAQ,KAAK,SAAS,YAAY,SAAS,UAAU;AAClF,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,MAAI,CAAC,WAAW,YAAY,CAAC,WAAW,QAAQ;AAC9C,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,QAAM,MAAM,cAAc,GAAG;AAC7B,YAAU,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/C,YAAU,KAAK,GAAK;AAEpB,WAAS,WAAW,WAAW;AAC/B,WAAS,WAAW,WAAW;AAC/B,WAAS,WAAW;AACpB,WAAS,SAAS;AAClB,WAAS,OAAO;AAEhB,QAAM,SAAS,kBAAkB,GAAG;AACpC,kBAAgB,QAAQ,GAAG,SAAS,SAAS,CAAC;AAAA,CAAI;AACpD;AAkBO,SAAS,sBAA8B;AAC5C,SAAO,QAAQ,IAAI,8BAA8B,KAAK,QAAQ,GAAG,aAAa,cAAc;AAC9F;AAEA,SAAS,cAAsB;AAC7B,SAAO,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,GAAG,WAAW,IAAI;AACrE;AAGO,SAAS,kBAA0B;AACxC,SAAO,KAAK,YAAY,GAAG,WAAW;AACxC;AAGA,SAAS,sBAA8B;AACrC,SAAO,KAAK,YAAY,GAAG,mBAAmB;AAChD;AAGA,SAAS,mBAA2B;AAClC,SAAO,KAAK,YAAY,GAAG,YAAY;AACzC;AAUA,SAAS,oBAAoB,gBAAiC;AAC5D,SAAO,QAAQ,QAAQ,IAAI,MAAM,KAAK,CAAC,QAAQ,IAAI,cAAc;AACnE;AAOO,SAAS,2BAAoC;AAClD,SAAO,WAAW,oBAAoB,CAAC,KAAK,WAAW,gBAAgB,CAAC;AAC1E;AAGA,SAAS,gBAAgB,QAAgB,UAAwB;AAC/D,QAAM,MAAM,QAAQ,MAAM;AAC1B,YAAU,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/C,YAAU,KAAK,GAAK;AACpB,QAAM,YAAY,GAAG,MAAM,IAAI,QAAQ,GAAG;AAC1C,gBAAc,WAAW,UAAU,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AACpE,YAAU,WAAW,GAAK;AAC1B,aAAW,WAAW,MAAM;AAC9B;AAEA,SAAS,qBAAqB,OAAwB;AACpD,MAAI,oBAAoB,4BAA4B,EAAG,QAAO;AAC9D,kBAAgB,oBAAoB,GAAG,GAAG,KAAK;AAAA,CAAI;AACnD,SAAO;AACT;AAWA,SAAS,wBAA8B;AACrC,MAAI,WAAW,iBAAiB,CAAC,EAAG;AACpC,kBAAgB,iBAAiB,GAAG,gBAAgB;AACtD;AAOA,SAAS,mBAAmB,OAAwB;AAClD,MAAI,oBAAoB,eAAe,EAAG,QAAO;AAKjD,MAAI,WAAW,gBAAgB,CAAC,KAAK,CAAC,WAAW,oBAAoB,CAAC,EAAG,QAAO;AAChF,QAAM,OAAO,QAAQ,IAAI,WAAW;AACpC,QAAM,OAAO,QAAQ,IAAI,yBAAyB;AAClD,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA,GAAG,IAAI;AAAA,IACP,oBAAoB,KAAK;AAAA,IACzB,aAAa,IAAI;AAAA,IACjB;AAAA,IACA;AAAA,IACA,WAAW,IAAI;AAAA,IACf,4BAA4B,KAAK;AAAA,IACjC;AAAA,EACF,EAAE,KAAK,IAAI;AACX,kBAAgB,gBAAgB,GAAG,QAAQ;AAC3C,kBAAgB,oBAAoB,GAAG,kBAAkB;AACzD,wBAAsB;AACtB,SAAO;AACT;AAYO,SAAS,qBAAqB,OAAgD;AACnF,QAAM,SAA8B,EAAE,WAAW,OAAO,SAAS,MAAM;AACvE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,YAAY,qBAAqB,KAAK;AAAA,EAC/C,QAAQ;AAAA,EAER;AACA,MAAI;AACF,WAAO,UAAU,mBAAmB,KAAK;AAAA,EAC3C,QAAQ;AAAA,EAER;AACA,SAAO;AACT;;;AC9LO,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,eAAW,SAAS,EAAE;AAAA,EACxB,CAAC;AACH;;;AHcO,IAAM,wBAAwB;AAM9B,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AAMzB,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,gCAAgC;AACtC,IAAM,yBAAyB;AAS/B,IAAM,iCAAiC;AAQvC,IAAM,6BAA6B;AACnC,IAAM,0BAA0B;AAChC,IAAM,+BAA+B;AACrC,IAAM,6BAA6B;AACnC,IAAM,wBAAwB;AAoC9B,IAAM,yBAAyB;AAE/B,IAAM,uBAAuB;AAE7B,IAAM,yBAAyB;AAE/B,IAAM,wBAAwB;AAE9B,IAAM,8BAA8B;AAGpC,IAAM,4BAA4B;AAEzC,SAAS,MAAM,MAAc,UAA0B;AACrD,QAAM,MAAM,OAAO,QAAQ,IAAI,IAAI,CAAC;AACpC,SAAO,OAAO,SAAS,GAAG,KAAK,MAAM,IAAI,MAAM;AACjD;AAEO,SAAS,wBAAgC;AAC9C,SAAO,MAAM,iCAAiC,gBAAgB;AAChE;AAOO,SAAS,2BAOd;AACA,QAAM,WAAW,QAAQ,IAAI;AAC7B,SAAO;AAAA;AAAA;AAAA,IAGL,UAAU,YAAY,eAAe,KAAK,QAAQ,IAAI,WAAW;AAAA,IACjE,OAAO,MAAM,iCAAiC,oBAAoB;AAAA,IAClE,SAAS,MAAM,mCAAmC,sBAAsB;AAAA,IACxE,QAAQ,MAAM,kCAAkC,qBAAqB;AAAA,IACrE,kBAAkB,MAAM,wCAAwC,2BAA2B;AAAA,IAC3F,OAAO,MAAM,sCAAsC,yBAAyB;AAAA,EAC9E;AACF;AAgBO,SAAS,eAAe,WAAmB,UAA2B;AAC3E,SAAO,oBAAoB,WAAW,OAAO,gBAAgB,EAAE,SAAS,QAAQ;AAClF;AAGA,IAAM,mBAAmB,IAAI,OAAO,GAAG,OAAO,aAAa,EAAE,CAAC,mBAAmB;AAgB1E,SAAS,iBAAiB,WAA4B;AAC3D,SAAO,iBAAiB,KAAK,SAAS;AACxC;AAaO,SAAS,kBAAkB,MAA2C;AAC3E,SAAO,KAAK;AACd;AAUO,SAAS,2BAKd;AACA,SAAO;AAAA,IACL,YAAY,MAAM,kCAAkC,wBAAwB;AAAA,IAC5E,gBAAgB,MAAM,uCAAuC,6BAA6B;AAAA,IAC1F,YAAY;AAAA,IACZ,UAAU,MAAM,gCAAgC,sBAAsB;AAAA,EACxE;AACF;AAQO,SAAS,qCAA6C;AAC3D,QAAM,QAAQ,QAAQ,IAAI;AAG1B,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,OAAO,KAAK;AACxB,SAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,MAAM;AAClD;AAEO,SAAS,0BAMd;AACA,SAAO;AAAA,IACL,cAAc,MAAM,2CAA2C,0BAA0B;AAAA,IACzF,YAAY,MAAM,wCAAwC,uBAAuB;AAAA,IACjF,gBAAgB;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc,MAAM,2CAA2C,0BAA0B;AAAA,IACzF,UAAU,MAAM,sCAAsC,qBAAqB;AAAA,EAC7E;AACF;AAeO,SAAS,gBAAgB,SAA2C;AACzE,SAAO;AAAA,IACL,YAAY,QAAQ;AAAA,IACpB,gBAAgB,QAAQ;AAAA,IACxB,sBAAsB,QAAQ;AAAA,IAC9B,iBAAiB,QAAQ;AAAA,EAC3B;AACF;AAaO,IAAM,qBAAqB;AAU3B,SAAS,sBACd,KACA,WACA,eAAuB,oBACjB;AACN,MAAI;AACF,QAAI,KAAK;AAAA,EACX,QAAQ;AAAA,EAER;AACA,QAAM,QAAQ,WAAW,MAAM;AAC7B,QAAI,UAAU,EAAG;AACjB,QAAI;AACF,UAAI,KAAK,SAAS;AAAA,IACpB,QAAQ;AAAA,IAER;AAAA,EACF,GAAG,YAAY;AACf,QAAM,QAAQ;AAChB;AAYA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,aAAa,KAA+B;AACnD,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO;AAC3B,MAAI,OAAO,IAAI,UAAU,WAAY,QAAO,IAAI;AAChD,QAAM,MAAM,IAAI;AAChB,MAAI,SAAS,GAAG,KAAK,OAAO,IAAI,UAAU,WAAY,QAAO,IAAI;AACjE,SAAO;AACT;AAEA,eAAsB,eAAkC;AACtD,QAAM,MAAe,MAAM,OAAO,UAAU;AAC5C,QAAMA,SAAQ,aAAa,GAAG;AAC9B,MAAI,CAACA,OAAO,OAAM,IAAI,MAAM,kCAAkC;AAC9D,SAAOA;AACT;AAQA,eAAsB,kBAAqC;AACzD,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,oBAAyB;AACnE,MAAI,CAAC,iBAAiB,EAAG,QAAO,aAAa;AAC7C,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,sBAA2B;AACvE,SAAO,CAAC,MAAM,MAAM,YAAY,mBAAmB,EAAE,SAAS,MAAM,MAAM,OAAO;AACnF;AASO,SAAS,kBAA0B;AACxC,SAAO,QAAQ,IAAI,uBAAuB,OAAO;AACnD;AAEO,SAAS,aAAa,YAA6C;AACxE,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,QAAI,OAAO,UAAU,SAAU,KAAI,GAAG,IAAI;AAAA,EAC5C;AAiBA,MAAI,IAAI,yBAAyB;AAC/B,WAAO,IAAI;AAAA,EACb;AAUA,MAAI,yBAAyB,KAAK,IAAI,+BAA+B,KAAK;AACxE,WAAO,IAAI;AACX,WAAO,IAAI;AACX,WAAO,IAAI;AAEX,QAAI,6BAA6B,oBAAoB;AAAA,EACvD;AACA,MAAI,YAAY;AACd,QAAI,uBAAuB;AAAA,EAC7B;AAOA,MAAI,gBAAgB;AACpB,MAAI,qBAAqB;AACzB,SAAO;AACT;AAYO,SAAS,iBAAiB,MAAsB;AACrD,SAAO,YAAY,IAAI;AACzB;AAQO,SAAS,wBAAwB,SAA4B;AAClE,SAAO,QACJ,IAAI,CAAC,UAAU;AACd,UAAM,IAAI;AACV,QAAI,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS,SAAU,QAAO,EAAE;AAC/D,QAAI,GAAG,SAAS,SAAS;AACvB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,CAAC,EACA,KAAK,MAAM;AAChB;AAKA,eAAsB,eAAe,MAA+B;AAClE,MAAI;AACF,YAAQ,MAAM,KAAK,IAAI,GAAG;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,mBAAmB,OAAuD;AACxF,MAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,EAAG,QAAO,CAAC;AAC7C,QAAM,YAAmC,CAAC;AAC1C,aAAW,SAAS,MAAM,WAAW;AACnC,QAAI,CAAC,SAAS,KAAK,EAAG;AACtB,QAAI,OAAO,MAAM,aAAa,SAAU;AACxC,UAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,IACvC,MAAM,QACH,OAAO,QAAQ,EACf,OAAO,CAAC,MAAM,OAAO,EAAE,UAAU,QAAQ,EACzC,IAAI,CAAC,OAAO;AAAA,MACX,OAAO,EAAE;AAAA,MACT,aAAa,OAAO,EAAE,gBAAgB,WAAW,EAAE,cAAc;AAAA,IACnE,EAAE,IACJ,CAAC;AACL,cAAU,KAAK;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,MAC1D;AAAA,MACA,GAAI,OAAO,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IACrF,CAAC;AAAA,EACH;AACA,SAAO;AACT;;;AI9eA,SAAS,OAAO,gBAAmC;AAcnD,IAAM,+BAA+B;AAErC,SAAS,aAAoB;AAC3B,QAAM,QAAQ,IAAI,MAAM,mBAAmB;AAC3C,QAAM,OAAO;AACb,SAAO;AACT;AAEA,SAAS,mBAAmB,OAA4B,QAA8B;AACpF,MAAI;AACF,QAAI,MAAM,IAAK,SAAQ,KAAK,CAAC,MAAM,KAAK,MAAM;AAAA,QACzC,OAAM,KAAK,MAAM;AAAA,EACxB,QAAQ;AACN,QAAI;AACF,YAAM,KAAK,MAAM;AAAA,IACnB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,SAAS,sBAId,OACA,UAAU,8BACK;AACf,MAAI,MAAM,aAAa,KAAM,QAAO,QAAQ,QAAQ;AACpD,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,MAAY;AACzB,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,KAAK;AAClB,YAAM,eAAe,QAAQ,MAAM;AACnC,cAAQ;AAAA,IACV;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,yBAAmB,OAAO,SAAS;AACnC,aAAO;AAAA,IACT,GAAG,OAAO;AACV,UAAM,MAAM;AACZ,UAAM,KAAK,QAAQ,MAAM;AACzB,uBAAmB,OAAO,SAAS;AAAA,EACrC,CAAC;AACH;AAEO,SAAS,gBACd,KACA,KACA,UACA,QACe;AACf,MAAI,QAAQ,QAAS,QAAO,QAAQ,OAAO,WAAW,CAAC;AACvD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,MAAM,CAAC,MAAM,GAAG,GAAG;AAAA,MACrC;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,UAAU;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AACD,QAAI,UAAU;AACd,QAAI,WAAW;AACf,UAAM,UAAU,MAAY,QAAQ,oBAAoB,SAAS,OAAO;AACxE,UAAM,SAAS,CAAC,UAAwB;AACtC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,UAAI,MAAO,QAAO,KAAK;AAAA,UAClB,SAAQ;AAAA,IACf;AACA,UAAM,UAAU,MAAY;AAC1B,UAAI,WAAW,SAAU;AACzB,iBAAW;AACX,WAAK,sBAAsB,KAAK,EAAE,KAAK,MAAM,OAAO,WAAW,CAAC,CAAC;AAAA,IACnE;AACA,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACzD,QAAI,QAAQ,QAAS,SAAQ;AAE7B,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,UAAI,YAAY,QAAQ,QAAS;AACjC,eAAS,UAAU,MAAM,SAAS,CAAC;AAAA,IACrC,CAAC;AAED,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,UAAI,YAAY,QAAQ,QAAS;AACjC,eAAS,UAAU,MAAM,SAAS,CAAC;AAAA,IACrC,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAU;AACd,aAAO,SAAS,IAAI,SAAY,IAAI,MAAM,kCAAkC,IAAI,EAAE,CAAC;AAAA,IACrF,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,UAAI,CAAC,SAAU,QAAO,GAAG;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AACH;AAEA,IAAM,wBAAwB;AAEvB,SAAS,oBAAoB,KAAa,WAAmB,KAA4B;AAC9F,MAAI;AACF,UAAM,SAAS,SAAS,GAAG,GAAG,IAAI,KAAK,UAAU,SAAS,CAAC,IAAI;AAAA,MAC7D;AAAA,MACA,SAAS;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,MAClC,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AACD,UAAM,QAAQ,OAAO,SAAS,EAAE,KAAK;AACrC,WAAO,SAAS;AAAA,EAClB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBACd,KACA,KACA,UACc;AACd,QAAM,QAAQ,MAAM,MAAM,CAAC,MAAM,GAAG,GAAG;AAAA,IACrC;AAAA,IACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,IAChC,UAAU;AAAA,IACV,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,EACxB,CAAC;AAED,QAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,aAAS,UAAU,MAAM,SAAS,CAAC;AAAA,EACrC,CAAC;AAED,QAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,aAAS,UAAU,MAAM,SAAS,CAAC;AAAA,EACrC,CAAC;AAED,QAAM,MAAM;AACZ,SAAO;AACT;","names":["spawn"]}

package/dist/{chunk-PG3Z6RIC.js → chunk-VIEBOAJ7.js}

@@ -3,13 +3,11 @@ import {
   DEFAULT_RETRY_DELAY_MS,
   FETCH_TIMEOUT_MS,
   GIT_PREP_MAX_RETRIES,
-  gitCredentialHelper,
   mapChatHistory,
   readAgentVersion,
   registerBootMilestoneSocketFallback,
-  reportBootMilestone,
-  writeGitCredential
-} from "./chunk-7765OQU5.js";
+  reportBootMilestone
+} from "./chunk-WVUQ5CH5.js";
 import {
   LoopLagMonitor,
   buildConveyorSocketOptions,
@@ -32,6 +30,8 @@ import {
   buildPromptBytes,
   buildSpawnArgs,
   cleanTerminalOutput,
+  gitCredentialHelper,
+  githubTokenFilePath,
   inheritedEnv,
   killPtyWithEscalation,
   needsRawReadyGate,
@@ -49,9 +49,11 @@ import {
   sessionTempBase,
   sleep,
   spawnOptionsFingerprint,
+  syncGithubTokenFiles,
   transcriptSize,
-  turnOptionsFrom
-} from "./chunk-UAGIXPYD.js";
+  turnOptionsFrom,
+  writeGitCredential
+} from "./chunk-PWYJZY3P.js";
 
 // src/setup/bootstrap.ts
 var BOOTSTRAP_TIMEOUT_MS = 3e4;
@@ -1159,6 +1161,8 @@ ${q.question}${q.options.length ? "\n" + q.options.map((o) => `- ${o.label}: ${o
     if (!result.ok) return { refreshedClaude: false, refreshedTaskToken: false };
     const previousTaskToken = process.env.CONVEYOR_TASK_TOKEN;
     applyBootstrapToEnv(result.config);
+    const env = result.config.envVars ?? {};
+    syncGithubTokenFiles(env.CONVEYOR_GITHUB_TOKEN ?? env.GH_TOKEN ?? env.GITHUB_TOKEN);
     const refreshedTaskToken = result.config.mode !== "project" && Boolean(result.config.taskToken) && result.config.taskToken !== previousTaskToken;
     if (refreshedTaskToken && result.config.taskToken) {
       this.config.taskToken = result.config.taskToken;
@@ -1188,7 +1192,10 @@ ${q.question}${q.options.length ? "\n" + q.options.map((o) => `- ${o.label}: ${o
     for (const [key, value] of Object.entries(bundle.envVars ?? {})) {
       process.env[key] = value;
     }
-    if (bundle.githubToken) process.env.CONVEYOR_GITHUB_TOKEN = bundle.githubToken;
+    if (bundle.githubToken) {
+      process.env.CONVEYOR_GITHUB_TOKEN = bundle.githubToken;
+      syncGithubTokenFiles(bundle.githubToken);
+    }
     if (bundle.anthropicKey) process.env.ANTHROPIC_API_KEY = bundle.anthropicKey;
     if (bundle.gcpToken) process.env.CLOUDSDK_AUTH_ACCESS_TOKEN = bundle.gcpToken;
     const refreshedTaskToken = Boolean(bundle.sessionJwt) && bundle.sessionJwt !== previousTaskToken;
@@ -1473,6 +1480,7 @@ async function updateRemoteToken(cwd, token) {
   const cloneUrl = process.env.CONVEYOR_GIT_CLONE_URL || void 0;
   await updateRemoteCredential(cwd, { username, secret: token, cloneUrl });
   process.env.CONVEYOR_GIT_SECRET = token;
+  syncGithubTokenFiles(token);
 }
 function wipRefForBranch(branch) {
   return `conveyor-wip/${branch}`;
@@ -2625,6 +2633,20 @@ var GetProjectTagRequestSchema = z5.object({
   /** Tag id or exact (case-insensitive) tag name. */
   tag: z5.string().min(1).max(100)
 });
+var ListProjectTagAttachmentsRequestSchema = z5.object({
+  projectId: z5.string(),
+  /** Tag id or exact (case-insensitive) tag name. */
+  tag: z5.string().min(1).max(100),
+  limit: z5.number().int().min(1).max(60).optional(),
+  offset: z5.number().int().min(0).optional()
+});
+var SetProjectFileTagsRequestSchema = z5.object({
+  projectId: z5.string(),
+  taskId: z5.string(),
+  fileId: z5.string(),
+  tags: z5.array(z5.string().min(1).max(MAX_FILE_TAG_LENGTH)).max(MAX_FILE_TAGS),
+  requestingUserId: z5.string().optional()
+});
 var GetProjectSummaryRequestSchema = z5.object({
   projectId: z5.string()
 });
@@ -9936,11 +9958,11 @@ var readTaskChatContract = defineToolContract({
 var listTagsContract = defineToolContract({
   name: "list_tags",
   agent: {
-    description: "List the project glossary: every tag's id, name, color, description, parent/child tag ids, its contextPaths (the rule/doc/file/folder links it wires into agent context \u2014 `[]` means none), and whether it carries a full overview (fetch that with get_tag). The context links ship inline, so you only need get_tag for a term's full overview. Use the ids with get_tag / update_tag.",
+    description: "List the project glossary: every tag's id, name, color, description, parent/child tag ids, its contextPaths (the rule/doc/file/folder links it wires into agent context \u2014 `[]` means none), whether it carries a full overview (fetch that with get_tag), and its attachmentCount (files labelled as examples of the term). The context links ship inline, so you only need get_tag for a term's full overview. Use the ids with get_tag / update_tag.",
     fields: {}
   },
   mcp: {
-    description: "List all project tags with names, IDs, colors, descriptions, hierarchy (parent/child ids), contextPaths (the rule/doc/file/folder links each tag wires into agent context \u2014 `[]` means none), and a hasOverview flag. Context links ship inline; call get_tag only for a term's full overview. Pass projectId to target a specific project; otherwise the configured default project is used.",
+    description: "List all project tags with names, IDs, colors, descriptions, hierarchy (parent/child ids), contextPaths (the rule/doc/file/folder links each tag wires into agent context \u2014 `[]` means none), a hasOverview flag, and an attachmentCount (files labelled as examples of the term \u2014 read the tiles with list_tag_attachments). Context links ship inline; call get_tag only for a term's full overview. Pass projectId to target a specific project; otherwise the configured default project is used.",
     fields: {
       projectId: mcpProjectId
     }
@@ -10047,13 +10069,13 @@ var tagRef = f.string({
 var getTagContract = defineToolContract({
   name: "get_tag",
   agent: {
-    description: "Read one tag's full glossary entry: description, the full markdown overview (the term's spec \u2014 philosophy, mechanics, invariants), linked files/rules (each with its verified-link status \u2014 ok/stale/unchecked \u2014 from the periodic repo check), parent/child tags, active-card count, and recent revisions with their reasons. Call this whenever a chat message, plan, or tag list points at a term you need the full context for. A response with `overviewPath` set means the overview is sourced from that repo file \u2014 prefer Reading the path from your checkout (branch-correct); the served overview is the base-branch materialization (`overviewSource.state`: ok/pending/stale).",
+    description: "Read one tag's full glossary entry: description, the full markdown overview (the term's spec \u2014 philosophy, mechanics, invariants), linked files/rules (each with its verified-link status \u2014 ok/stale/unchecked \u2014 from the periodic repo check), parent/child tags, active-card count, attachment count (files labelled as examples of the term), and recent revisions with their reasons. Call this whenever a chat message, plan, or tag list points at a term you need the full context for. A response with `overviewPath` set means the overview is sourced from that repo file \u2014 prefer Reading the path from your checkout (branch-correct); the served overview is the base-branch materialization (`overviewSource.state`: ok/pending/stale).",
     fields: {
       tag: tagRef
     }
   },
   mcp: {
-    description: "Read one tag's full glossary entry \u2014 description, markdown overview, context links (each with its verified-link status: ok/stale/unchecked plus last-checked provenance), parent/child tags, active-card count, and recent revisions with provenance. A response with `overviewPath` set means the overview is sourced from that repo file at the base branch (`overviewSource.state`: ok/pending/stale) \u2014 clients with a checkout can read the path directly for the branch-correct copy. Pass projectId to target a specific project; otherwise the configured default project is used.",
+    description: "Read one tag's full glossary entry \u2014 description, markdown overview, context links (each with its verified-link status: ok/stale/unchecked plus last-checked provenance), parent/child tags, active-card count, attachment count (files labelled as examples of the term \u2014 read the tiles with list_tag_attachments), and recent revisions with provenance. A response with `overviewPath` set means the overview is sourced from that repo file at the base branch (`overviewSource.state`: ok/pending/stale) \u2014 clients with a checkout can read the path directly for the branch-correct copy. Pass projectId to target a specific project; otherwise the configured default project is used.",
     fields: {
       projectId: mcpProjectId,
       tag: tagRef
@@ -11137,10 +11159,45 @@ function buildVoteSuggestionTool(connection) {
     }
   );
 }
+function buildRefreshGithubTokenTool(connection, config) {
+  return defineTool(
+    "refresh_github_token",
+    "Mint a fresh GitHub token for this pod when git or gh fails with a 401 / 'Bad credentials'. The pod's token expires about every hour. This updates the git credential store and the gh CLI config, and returns the shell command that puts a current token in your environment.",
+    {},
+    async () => {
+      try {
+        const result = await connection.call("refreshGithubToken", {
+          sessionId: connection.sessionId
+        });
+        await updateRemoteToken(config.workspaceDir, result.token);
+        process.env.GITHUB_TOKEN = result.token;
+        process.env.GH_TOKEN = result.token;
+        const tokenFile = githubTokenFilePath();
+        return textResult(
+          [
+            "GitHub token refreshed.",
+            "- git: the credential store is updated, so `git push` works now with no extra step.",
+            "- gh: the CLI config is updated, so `gh` works now with no extra step.",
+            `- shell/scripts: read the current token from ${tokenFile}.`,
+            `  For a command that needs it in the environment: GITHUB_TOKEN=$(cat ${tokenFile}) <command>`,
+            "Retry the failed command. If it still returns 401, the GitHub App install may be missing for this project \u2014 report that instead of retrying."
+          ].join("\n")
+        );
+      } catch (error) {
+        return textResult(
+          `Failed to refresh the GitHub token: ${error instanceof Error ? error.message : "Unknown error"}
+
+The agent's connection to the API may be down. Wait for it to reconnect and try again.`
+        );
+      }
+    }
+  );
+}
 function buildMutationTools(connection, config) {
   return [
     buildPostToChatTool(connection),
     buildCreatePullRequestTool(connection, config),
+    buildRefreshGithubTokenTool(connection, config),
     buildAddDependencyTool(connection),
     buildRemoveDependencyTool(connection),
     buildCreateFollowUpTaskTool(connection),
@@ -16308,4 +16365,4 @@ export {
   loadConveyorConfig,
   unshallowRepo
 };
-//# sourceMappingURL=chunk-PG3Z6RIC.js.map
+//# sourceMappingURL=chunk-VIEBOAJ7.js.map