@rallycry/conveyor-agent 10.13.68 → 10.13.69

package/dist/{boot-UUPTBQ6R.js → boot-7UWVK777.js}

@@ -9,14 +9,14 @@ import {
   readAgentVersion,
   redactToken,
   reportBootMilestone
-} from "./chunk-KG4ORL3Y.js";
+} from "./chunk-QU53HND5.js";
 import {
   workbenchPort
 } from "./chunk-KMB3BU4S.js";
 import {
   startWorkbenchServer
-} from "./chunk-E2SHIH6Y.js";
-import "./chunk-LE6ZUDZT.js";
+} from "./chunk-DOB2XE2I.js";
+import "./chunk-GJXAAPJ6.js";
 import {
   DEFAULT_WORKBENCH_PORT
 } from "./chunk-6Q6LQBWO.js";

package/dist/{chunk-E3QHGYZ2.js → chunk-2KZV6I5Z.js}

@@ -7,7 +7,7 @@ import {
   readAgentVersion,
   registerBootMilestoneSocketFallback,
   reportBootMilestone
-} from "./chunk-KG4ORL3Y.js";
+} from "./chunk-QU53HND5.js";
 import {
   LoopLagMonitor,
   buildConveyorSocketOptions,
@@ -55,7 +55,7 @@ import {
   transcriptSize,
   turnOptionsFrom,
   writeGitCredential
-} from "./chunk-LE6ZUDZT.js";
+} from "./chunk-GJXAAPJ6.js";
 
 // src/setup/bootstrap.ts
 var BOOTSTRAP_TIMEOUT_MS = 3e4;
@@ -1507,6 +1507,28 @@ async function verifyGitCredential(cwd) {
 
 // src/runner/git-utils.ts
 import { realpathSync } from "fs";
+
+// src/runner/force-fresh-cooldown.ts
+var FORCE_FRESH_COOLDOWN_MS = 30 * 60 * 1e3;
+var blockedUntil = 0;
+function forceFreshCooldownRemainingMs() {
+  return Math.max(0, blockedUntil - Date.now());
+}
+function forceFreshMintBlocked() {
+  return forceFreshCooldownRemainingMs() > 0;
+}
+function recordForceFreshFailure() {
+  blockedUntil = Date.now() + FORCE_FRESH_COOLDOWN_MS;
+}
+function clearForceFreshCooldown() {
+  blockedUntil = 0;
+}
+function forceFreshCooldownNotice() {
+  const minutes = Math.ceil(forceFreshCooldownRemainingMs() / 6e4);
+  return `- the force-fresh retry was SKIPPED: one already failed against this pod, so it is on a ${Math.round(FORCE_FRESH_COOLDOWN_MS / 6e4)}-minute cooldown (${minutes} min left). Re-minting cannot fix a credential the pod cannot serve.`;
+}
+
+// src/runner/git-utils.ts
 async function ensureOnTaskBranch(cwd, taskBranch, baseBranch) {
   if (!taskBranch) return true;
   try {
@@ -1776,14 +1798,20 @@ async function pushToOrigin(cwd, refreshToken, skipVerify = false) {
       } catch {
       }
     }
-    if (await tryPush(cwd, currentBranch, skipVerify)) return true;
-    if (refreshToken && await isAuthError(cwd)) {
+    if (await tryPush(cwd, currentBranch, skipVerify)) {
+      clearForceFreshCooldown();
+      return true;
+    }
+    if (refreshToken && !forceFreshMintBlocked() && await isAuthError(cwd)) {
       const token = await refreshToken({ forceFresh: true });
       if (token) {
         await updateRemoteToken(cwd, token);
         process.env.GITHUB_TOKEN = token;
         process.env.GH_TOKEN = token;
-        return await tryPush(cwd, currentBranch, skipVerify);
+        const pushed = await tryPush(cwd, currentBranch, skipVerify);
+        if (pushed) clearForceFreshCooldown();
+        else recordForceFreshFailure();
+        return pushed;
       }
     }
     return false;
@@ -11287,10 +11315,18 @@ import { z as z13 } from "zod";
 // src/runner/refresh-verify-heal.ts
 async function refreshAndVerifyGithubCredential(cwd, mint) {
   const first = await mintWriteProbe(cwd, mint, false);
-  if (first.probe.ok) return first;
+  if (first.probe.ok) {
+    clearForceFreshCooldown();
+    return first;
+  }
   if (first.probe.outcome !== "denied") return first;
   if (!first.written) return first;
+  if (forceFreshMintBlocked()) {
+    return { ...first, failures: [...first.failures, forceFreshCooldownNotice()] };
+  }
   const healed = await mintWriteProbe(cwd, mint, true);
+  if (healed.probe.ok) clearForceFreshCooldown();
+  else if (healed.probe.outcome === "denied") recordForceFreshFailure();
   return { ...healed, healAttempted: true };
 }
 async function mintWriteProbe(cwd, mint, forceFresh) {

package/dist/{chunk-E2SHIH6Y.js → chunk-DOB2XE2I.js}

@@ -1,7 +1,7 @@
 import {
   loadPtySpawn,
   terminateProcessGroup
-} from "./chunk-LE6ZUDZT.js";
+} from "./chunk-GJXAAPJ6.js";
 import {
   FrameReader,
   timingSafeTokenEqual,

package/dist/{chunk-LE6ZUDZT.js → chunk-GJXAAPJ6.js}

@@ -86,7 +86,7 @@ import {
 import { homedir } from "os";
 import { dirname, join } from "path";
 function credentialDir(cwd) {
-  return join(dirname(cwd), ".conveyor-git-credentials");
+  return process.env.CONVEYOR_GIT_CREDENTIAL_DIR || join(dirname(cwd), ".conveyor-git-credentials");
 }
 function credentialKey(cwd) {
   return createHash("sha256").update(cwd).digest("hex").slice(0, 16);

package/dist/{chunk-KG4ORL3Y.js → chunk-QU53HND5.js}

@@ -2,7 +2,7 @@ import {
   gitCredentialHelper,
   syncGithubTokenFiles,
   writeGitCredential
-} from "./chunk-LE6ZUDZT.js";
+} from "./chunk-GJXAAPJ6.js";
 
 // src/runner/session-runner-helpers.ts
 import { readFileSync } from "fs";

package/dist/cli.js

@@ -35,10 +35,10 @@ import {
   sampleKeyUsage,
   statWorkspacePath,
   workspacePathExists
-} from "./chunk-E3QHGYZ2.js";
+} from "./chunk-2KZV6I5Z.js";
 import {
   reportBootMilestone
-} from "./chunk-KG4ORL3Y.js";
+} from "./chunk-QU53HND5.js";
 import "./chunk-IA45XHOA.js";
 import {
   getWorkbenchClient
@@ -53,7 +53,7 @@ import {
   runStartCommand,
   sessionTempBase,
   terminateProcessGroup
-} from "./chunk-LE6ZUDZT.js";
+} from "./chunk-GJXAAPJ6.js";
 import "./chunk-6Q6LQBWO.js";
 
 // src/cli.ts
@@ -1715,7 +1715,7 @@ function hostsSpawnedChildren(mode) {
 
 // src/cli.ts
 if (process.argv[2] === "boot") {
-  const { runBoot } = await import("./boot-UUPTBQ6R.js");
+  const { runBoot } = await import("./boot-7UWVK777.js");
   process.exit(await runBoot(process.argv.slice(3)));
 }
 if (isLegacyEntrypointLaunch(process.env)) {
@@ -1817,7 +1817,7 @@ process.on("unhandledRejection", (reason) => {
   process.exit(1);
 });
 if (process.env.CONVEYOR_MODE === "workbench") {
-  const { startWorkbenchServer } = await import("./server-US2DDQSW.js");
+  const { startWorkbenchServer } = await import("./server-CC7KUJOK.js");
   const { oomWatchdogOptionsFromEnv } = await import("./oom-watchdog-PAC5OJJG.js");
   const { DEFAULT_WORKBENCH_PORT } = await import("./protocol-QBCYO4GI.js");
   const port = Number(process.env.CONVEYOR_WORKBENCH_PORT) || DEFAULT_WORKBENCH_PORT;

package/dist/index.js

@@ -13,8 +13,8 @@ import {
   unshallowRepo,
   updateRemoteToken,
   workspacePathExists
-} from "./chunk-E3QHGYZ2.js";
-import "./chunk-KG4ORL3Y.js";
+} from "./chunk-2KZV6I5Z.js";
+import "./chunk-QU53HND5.js";
 import "./chunk-IA45XHOA.js";
 import {
   getWorkbenchClient
@@ -26,7 +26,7 @@ import {
   runAuthTokenCommand,
   runSetupCommand,
   runStartCommand
-} from "./chunk-LE6ZUDZT.js";
+} from "./chunk-GJXAAPJ6.js";
 import "./chunk-6Q6LQBWO.js";
 
 // src/runner/worktree.ts

package/dist/{server-US2DDQSW.js → server-CC7KUJOK.js}

@@ -1,7 +1,7 @@
 import {
   startWorkbenchServer
-} from "./chunk-E2SHIH6Y.js";
-import "./chunk-LE6ZUDZT.js";
+} from "./chunk-DOB2XE2I.js";
+import "./chunk-GJXAAPJ6.js";
 import "./chunk-6Q6LQBWO.js";
 import "./chunk-6W6UZ4SJ.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rallycry/conveyor-agent",
-  "version": "10.13.68",
+  "version": "10.13.69",
   "description": "Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.",
   "keywords": [
     "agent",