@rallycry/conveyor-agent 10.13.70 → 10.13.72

package/dist/{boot-7UWVK777.js → boot-ZNL7X5LQ.js}

@@ -2,21 +2,24 @@ import {
   TOMBSTONE_MESSAGE,
   isLegacyEntrypointLaunch
 } from "./chunk-R3FDJQL6.js";
+import {
+  readAgentVersion
+} from "./chunk-XORJ6SII.js";
 import {
   GitPrepJob,
   defaultGit,
   ensureDir,
-  readAgentVersion,
   redactToken,
   reportBootMilestone
-} from "./chunk-QU53HND5.js";
+} from "./chunk-WMMBAKPE.js";
 import {
   workbenchPort
 } from "./chunk-KMB3BU4S.js";
 import {
   startWorkbenchServer
-} from "./chunk-DOB2XE2I.js";
-import "./chunk-GJXAAPJ6.js";
+} from "./chunk-UBDSLM44.js";
+import "./chunk-3F4ZZKCA.js";
+import "./chunk-W4LZ7R6Z.js";
 import {
   DEFAULT_WORKBENCH_PORT
 } from "./chunk-6Q6LQBWO.js";
@@ -98,6 +101,7 @@ function decodeJwtClaims(jwt) {
 function resolveModeEnv(claims) {
   if (claims.mode === "review") return { CONVEYOR_MODE: "code-review" };
   if (claims.mode === "pack") return { CONVEYOR_MODE: "pack" };
+  if (claims.mode === "serving") return { CONVEYOR_MODE: "serving" };
   if (claims.mode === "adhoc") return { CONVEYOR_MODE: "adhoc" };
   if (!claims.taskId && claims.projectId) return { CONVEYOR_MODE: "pm" };
   return {};
@@ -490,7 +494,108 @@ import {
   symlinkSync,
   writeFileSync as writeFileSync2
 } from "fs";
-import { dirname, join as join2 } from "path";
+import { dirname, join as join3 } from "path";
+
+// src/boot/memory-integrity.ts
+import { readFile, readdir, stat, writeFile } from "fs/promises";
+import { join as join2 } from "path";
+var FRONTMATTER_OPEN = "---\n";
+var FRONTMATTER_CLOSE = "\n---\n";
+var MAX_MEMORY_FILE_BYTES = 512 * 1024;
+var READ_CONCURRENCY = 16;
+function readFrontmatterBlock(content) {
+  if (!content.startsWith(FRONTMATTER_OPEN)) return null;
+  const close = content.indexOf(FRONTMATTER_CLOSE, FRONTMATTER_OPEN.length - 1);
+  if (close === -1) return null;
+  return content.slice(0, close + FRONTMATTER_CLOSE.length);
+}
+function inspectMemoryFile(content) {
+  const header = readFrontmatterBlock(content);
+  if (!header) return { status: "clean" };
+  const repeat = content.indexOf(header, header.length);
+  if (repeat === -1) return { status: "clean" };
+  const half = content.length / 2;
+  if (repeat === half && content.slice(0, half) === content.slice(half)) {
+    return { status: "self-append", repaired: content.slice(0, half) };
+  }
+  return {
+    status: "suspicious",
+    detail: `frontmatter block repeats at offset ${repeat} of ${content.length} without identical halves`
+  };
+}
+async function candidateSize(path) {
+  try {
+    const info = await stat(path);
+    if (!info.isFile() || info.size === 0) return null;
+    if (info.size > MAX_MEMORY_FILE_BYTES || info.size % 2 !== 0) return null;
+    return info.size;
+  } catch {
+    return null;
+  }
+}
+async function repairOneFile(dir, name, log, out) {
+  const path = join2(dir, name);
+  const size = await candidateSize(path);
+  if (size === null) {
+    out.skipped += 1;
+    return;
+  }
+  out.scanned += 1;
+  const verdict = inspectMemoryFile(await readFile(path, "utf8"));
+  if (verdict.status === "suspicious") {
+    out.suspicious.push(name);
+    log.warn(
+      `[boot] WARN shared memory ${name} looks doubled but was left alone: ${verdict.detail}`
+    );
+    return;
+  }
+  if (verdict.status !== "self-append" || verdict.repaired === void 0) return;
+  if (await candidateSize(path) !== size) {
+    log.warn(`[boot] WARN shared memory ${name} changed mid-check; left alone`);
+    return;
+  }
+  await writeFile(path, verdict.repaired);
+  out.repaired.push(name);
+}
+async function forEachLimited(items, limit, fn) {
+  let cursor = 0;
+  const workers = Array.from({ length: Math.min(limit, items.length) }, async () => {
+    for (let i = cursor++; i < items.length; i = cursor++) {
+      const item = items[i];
+      if (item !== void 0) await fn(item);
+    }
+  });
+  await Promise.all(workers);
+}
+async function repairSharedMemory(dir, log) {
+  const out = { scanned: 0, repaired: [], suspicious: [], skipped: 0 };
+  let entries;
+  try {
+    entries = await readdir(dir);
+  } catch {
+    return out;
+  }
+  const names = entries.filter((name) => name.endsWith(".md"));
+  await forEachLimited(names, READ_CONCURRENCY, async (name) => {
+    try {
+      await repairOneFile(dir, name, log, out);
+    } catch (err) {
+      log.warn(
+        `[boot] WARN shared memory integrity check failed for ${name}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  });
+  out.repaired.sort();
+  out.suspicious.sort();
+  if (out.repaired.length > 0) {
+    log.info(
+      `[boot] shared memory: repaired ${out.repaired.length} self-appended file(s): ${out.repaired.join(", ")}`
+    );
+  }
+  return out;
+}
+
+// src/boot/user-home.ts
 var SEED_GATES = {
   hasCompletedOnboarding: true,
   bypassPermissionsModeAccepted: true,
@@ -566,8 +671,8 @@ function relink(target, link) {
 }
 function wireCredentials(opts) {
   const { home, root, sharedDir, log } = opts;
-  const shared = join2(root, ".claude", ".credentials.json");
-  const podLocal = sharedDir ? join2(sharedDir, "claude-credentials.pod.json") : join2(home, ".claude-credentials.pod.json");
+  const shared = join3(root, ".claude", ".credentials.json");
+  const podLocal = sharedDir ? join3(sharedDir, "claude-credentials.pod.json") : join3(home, ".claude-credentials.pod.json");
   safely(log, "carry legacy shared credentials", () => {
     if (isRegularFile(shared)) copyFileSync(shared, podLocal);
   });
@@ -583,66 +688,78 @@ function migrateMemories(from, to, log) {
     return;
   }
   for (const entry of entries) {
-    const target = join2(to, entry);
+    const target = join3(to, entry);
     if (existsSync(target)) continue;
-    safely(log, `migrate memory ${entry}`, () => copyFileSync(join2(from, entry), target));
+    safely(log, `migrate memory ${entry}`, () => copyFileSync(join3(from, entry), target));
   }
 }
+function startSharedMemoryRepair(shared, log) {
+  return repairSharedMemory(shared, log).then(
+    () => void 0,
+    (err) => {
+      log.warn(
+        `[boot] WARN repair self-appended shared memories failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  );
+}
 function wireSharedMemory(root, userHomeMount, projectId, log) {
-  const shared = join2(userHomeMount, "users", "_shared", "memory", projectId);
-  const link = join2(root, ".claude", "projects", AGENT_MEMORY_PROJECT_DIR, "memory");
+  const shared = join3(userHomeMount, "users", "_shared", "memory", projectId);
+  const link = join3(root, ".claude", "projects", AGENT_MEMORY_PROJECT_DIR, "memory");
   safely(log, "mkdir shared memory dir", () => mkdirSync(shared, { recursive: true }));
   safely(log, "migrate per-user memories", () => {
     if (existsSync(link) && !lstatSync(link).isSymbolicLink()) migrateMemories(link, shared, log);
   });
   safely(log, "wire shared memory symlink", () => relink(shared, link));
+  return startSharedMemoryRepair(shared, log);
 }
 function wireMountedUserHome(opts) {
   const { home, userHomeMount, userId, projectId, sharedDir, log } = opts;
-  const root = join2(userHomeMount, "users", userId, projectId);
+  const root = join3(userHomeMount, "users", userId, projectId);
   safely(log, "mkdir user-home root", () => {
-    mkdirSync(join2(root, ".claude"), { recursive: true });
-    mkdirSync(join2(root, ".config", "claude"), { recursive: true });
+    mkdirSync(join3(root, ".claude"), { recursive: true });
+    mkdirSync(join3(root, ".config", "claude"), { recursive: true });
   });
-  safely(log, "wire ~/.claude symlink", () => relink(join2(root, ".claude"), join2(home, ".claude")));
+  safely(log, "wire ~/.claude symlink", () => relink(join3(root, ".claude"), join3(home, ".claude")));
   safely(
     log,
     "wire ~/.config/claude symlink",
-    () => relink(join2(root, ".config", "claude"), join2(home, ".config", "claude"))
+    () => relink(join3(root, ".config", "claude"), join3(home, ".config", "claude"))
   );
   safely(log, "seed pod-local ~/.claude.json", () => {
-    rmSync(join2(home, ".claude.json"), { recursive: true, force: true });
-    seedClaudeJson(join2(home, ".claude.json"));
+    rmSync(join3(home, ".claude.json"), { recursive: true, force: true });
+    seedClaudeJson(join3(home, ".claude.json"));
   });
-  wireSharedMemory(root, userHomeMount, projectId, log);
+  const pendingRepair = wireSharedMemory(root, userHomeMount, projectId, log);
   wireCredentials({ home, root, sharedDir, log });
   safely(log, "mkdir opencode root", () => {
-    mkdirSync(join2(root, ".local", "share", "opencode"), { recursive: true });
-    mkdirSync(join2(root, ".config", "opencode"), { recursive: true });
+    mkdirSync(join3(root, ".local", "share", "opencode"), { recursive: true });
+    mkdirSync(join3(root, ".config", "opencode"), { recursive: true });
   });
   safely(
     log,
     "wire opencode data symlink",
-    () => relink(join2(root, ".local", "share", "opencode"), join2(home, ".local", "share", "opencode"))
+    () => relink(join3(root, ".local", "share", "opencode"), join3(home, ".local", "share", "opencode"))
   );
   safely(
     log,
     "wire opencode config symlink",
-    () => relink(join2(root, ".config", "opencode"), join2(home, ".config", "opencode"))
+    () => relink(join3(root, ".config", "opencode"), join3(home, ".config", "opencode"))
   );
+  return pendingRepair;
 }
 function wireNoMountUserHome(opts) {
   const { home, sharedDir, log } = opts;
   safely(
     log,
     "seed pod-local ~/.claude.json (no mount)",
-    () => seedClaudeJson(join2(home, ".claude.json"))
+    () => seedClaudeJson(join3(home, ".claude.json"))
   );
   if (sharedDir) {
     safely(log, "wire ~/.claude to shared emptyDir", () => {
-      const target = join2(sharedDir, "claude-home", ".claude");
+      const target = join3(sharedDir, "claude-home", ".claude");
       mkdirSync(target, { recursive: true });
-      relink(target, join2(home, ".claude"));
+      relink(target, join3(home, ".claude"));
     });
   }
 }
@@ -654,14 +771,14 @@ function wireUserHome(opts) {
     () => mkdirSync(opts.scratchDir ?? "/tmp/claude-cmd", { recursive: true })
   );
   if (userId && projectId && isDir(userHomeMount)) {
-    wireMountedUserHome({ home, userHomeMount, userId, projectId, sharedDir, log });
-  } else {
-    wireNoMountUserHome({ home, sharedDir, log });
+    return wireMountedUserHome({ home, userHomeMount, userId, projectId, sharedDir, log });
   }
+  wireNoMountUserHome({ home, sharedDir, log });
+  return Promise.resolve();
 }
 var RECLAIM_FIND_TIMEOUT_MS = 1e4;
 async function reclaimHomeOwnership(home, exec, log) {
-  for (const dir of [join2(home, ".config"), join2(home, ".local")]) {
+  for (const dir of [join3(home, ".config"), join3(home, ".local")]) {
     if (!isDir(dir)) continue;
     try {
       await exec(
@@ -691,9 +808,9 @@ async function reclaimHomeOwnership(home, exec, log) {
 
 // src/boot/sshd.ts
 import { chmodSync as chmodSync2, closeSync, copyFileSync as copyFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, openSync } from "fs";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 function persistedAuthorizedKeys() {
-  return join3(
+  return join4(
     process.env.CONVEYOR_SHARED_DIR || "/var/run/conveyor-workbench",
     "ssh",
     "authorized_keys"
@@ -701,10 +818,10 @@ function persistedAuthorizedKeys() {
 }
 async function startWorkspaceSshd(exec, log, port = process.env.CONVEYOR_WORKSPACE_SSH_PORT || "2222", home = "/home/conveyor") {
   try {
-    const sshDir = join3(home, ".ssh");
+    const sshDir = join4(home, ".ssh");
     mkdirSync2(sshDir, { recursive: true });
     chmodSync2(sshDir, 448);
-    const authorizedKeys = join3(sshDir, "authorized_keys");
+    const authorizedKeys = join4(sshDir, "authorized_keys");
     const persisted = persistedAuthorizedKeys();
     if (existsSync2(persisted)) {
       copyFileSync2(persisted, authorizedKeys);
@@ -746,7 +863,7 @@ import {
   statSync as statSync3,
   symlinkSync as symlinkSync2
 } from "fs";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 function errText(err) {
   return redactToken(err instanceof Error ? err.message : String(err));
 }
@@ -782,7 +899,7 @@ function bindGraphifyBundle(workspace, graphifyEnv, log) {
     log.info(`[boot] Graphify bundle not found for '${slug}' at ${sourceDir}`);
     return;
   }
-  const targetDir = join4(workspace, "graphify-out");
+  const targetDir = join5(workspace, "graphify-out");
   try {
     mkdirSync3(targetDir, { recursive: true });
   } catch {
@@ -790,8 +907,8 @@ function bindGraphifyBundle(workspace, graphifyEnv, log) {
     return;
   }
   for (const rel of GRAPHIFY_BUNDLE_FILES) {
-    const source = join4(sourceDir, rel);
-    const target = join4(targetDir, rel);
+    const source = join5(sourceDir, rel);
+    const target = join5(targetDir, rel);
     if (!existsSync3(source)) continue;
     if (existsSync3(target) || isSymlink(target)) continue;
     try {
@@ -803,7 +920,7 @@ function bindGraphifyBundle(workspace, graphifyEnv, log) {
 }
 async function ensureGrimoireSubmodule(workspace, githubToken, git, log) {
   try {
-    if (!existsSync3(join4(workspace, ".gitmodules"))) return;
+    if (!existsSync3(join5(workspace, ".gitmodules"))) return;
     let paths = "";
     try {
       ({ stdout: paths } = await git(
@@ -814,7 +931,7 @@ async function ensureGrimoireSubmodule(workspace, githubToken, git, log) {
       return;
     }
     if (!paths.split("\n").some((line) => line.trim().endsWith(".claude/grimoire"))) return;
-    if (isDir2(join4(workspace, ".claude", "grimoire", "skills"))) return;
+    if (isDir2(join5(workspace, ".claude", "grimoire", "skills"))) return;
     if (!githubToken) {
       log.warn("[boot] WARN: grimoire submodule absent and no token to fetch it");
       return;
@@ -843,11 +960,11 @@ async function ensureGrimoireSubmodule(workspace, githubToken, git, log) {
 }
 function excludeLinkedSkills(workspace, names, log) {
   if (names.length === 0) return;
-  const infoDir = join4(workspace, ".git", "info");
-  if (!isDir2(join4(workspace, ".git"))) return;
+  const infoDir = join5(workspace, ".git", "info");
+  if (!isDir2(join5(workspace, ".git"))) return;
   try {
     mkdirSync3(infoDir, { recursive: true });
-    const excludePath = join4(infoDir, "exclude");
+    const excludePath = join5(infoDir, "exclude");
     const existing = existsSync3(excludePath) ? readFileSync2(excludePath, "utf8") : "";
     const missing = names.map((name) => `.claude/skills/${name}`).filter((line) => !existing.split("\n").includes(line));
     if (missing.length === 0) return;
@@ -860,14 +977,14 @@ function excludeLinkedSkills(workspace, names, log) {
 }
 function symlinkTargetsGrimoire(path) {
   try {
-    return readlinkSync(path).includes(join4("grimoire", "skills"));
+    return readlinkSync(path).includes(join5("grimoire", "skills"));
   } catch {
     return false;
   }
 }
 function linkGrimoireSkills(workspace, log) {
-  const sourceDir = join4(workspace, ".claude", "grimoire", "skills");
-  const targetDir = join4(workspace, ".claude", "skills");
+  const sourceDir = join5(workspace, ".claude", "grimoire", "skills");
+  const targetDir = join5(workspace, ".claude", "skills");
   if (!isDir2(sourceDir)) return;
   try {
     mkdirSync3(targetDir, { recursive: true });
@@ -883,8 +1000,8 @@ function linkGrimoireSkills(workspace, log) {
     return;
   }
   for (const name of names) {
-    if (!isDir2(join4(sourceDir, name))) continue;
-    const target = join4(targetDir, name);
+    if (!isDir2(join5(sourceDir, name))) continue;
+    const target = join5(targetDir, name);
     if (existsSync3(target) && !isSymlink(target)) {
       log.warn(`[boot] WARN: ${target} exists and is not a symlink; skipping`);
       continue;
@@ -892,7 +1009,7 @@ function linkGrimoireSkills(workspace, log) {
     if (isSymlink(target) && !symlinkTargetsGrimoire(target)) continue;
     try {
       rmSync2(target, { force: true });
-      symlinkSync2(join4("..", "grimoire", "skills", name), target);
+      symlinkSync2(join5("..", "grimoire", "skills", name), target);
       linkedNames.push(name);
     } catch {
     }
@@ -901,7 +1018,7 @@ function linkGrimoireSkills(workspace, log) {
   log.info(`[boot] Linked ${linkedNames.length} grimoire skills into ${targetDir}`);
 }
 async function neutralizeGrimoirePointer(workspace, git, log) {
-  if (!existsSync3(join4(workspace, ".claude", "grimoire"))) return;
+  if (!existsSync3(join5(workspace, ".claude", "grimoire"))) return;
   try {
     await git(["update-index", "--assume-unchanged", ".claude/grimoire"], {
       cwd: workspace,
@@ -953,8 +1070,8 @@ async function cloneReferenceRepos(refsJson, git, log, referencesDir = "/workspa
     return;
   }
   for (const ref of refs) {
-    const dest = join4(referencesDir, ref.slug);
-    if (existsSync3(join4(dest, ".git"))) continue;
+    const dest = join5(referencesDir, ref.slug);
+    if (existsSync3(join5(dest, ".git"))) continue;
     try {
       await git(
         [
@@ -1024,7 +1141,7 @@ function defaultWorkbenchBootDeps() {
       ctx.log.info(`[boot] ensured workspace dir ${WORKSPACE_DIR}`);
     },
     wireHome: (ctx) => {
-      wireUserHome({
+      void wireUserHome({
         home: HOME_DIR,
         userHomeMount: USER_HOME_MOUNT2,
         userId: ctx.childEnv?.CONVEYOR_USER_ID,
@@ -1183,7 +1300,7 @@ function agentBootSteps(deps = defaultBootDeps(), signal = new AbortController()
       critical: true,
       run: (ctx) => {
         if (ctx.bundle) {
-          wireUserHome({
+          void wireUserHome({
             home: HOME_DIR2,
             userHomeMount: USER_HOME_MOUNT3,
             userId: ctx.childEnv?.CONVEYOR_USER_ID,