@rallycry/conveyor-agent 10.13.8 → 10.13.10

package/dist/client-ICIWKSK2.js

@@ -0,0 +1,17 @@
+import {
+  RemoteProcessHandle,
+  WorkbenchClient,
+  WorkbenchError,
+  getWorkbenchClient,
+  resetWorkbenchClient
+} from "./chunk-YRC57EYG.js";
+import "./chunk-4VUQ2NPF.js";
+import "./chunk-IE7EOKMD.js";
+export {
+  RemoteProcessHandle,
+  WorkbenchClient,
+  WorkbenchError,
+  getWorkbenchClient,
+  resetWorkbenchClient
+};
+//# sourceMappingURL=client-ICIWKSK2.js.map

package/dist/client-ICIWKSK2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.js

@@ -12,25 +12,41 @@ import {
   loadForwardPorts,
   pushToOrigin,
   restoreOnBoot,
-  runAuthTokenCommand,
-  runSetupCommand,
-  runStartCommand,
   stageAndCommit,
   startPeriodic,
   stop,
   unshallowRepo,
   updateRemoteToken,
-  uploadSnapshotToGcs
-} from "./chunk-AJZIO5QI.js";
+  uploadSnapshotToGcs,
+  workspacePathExists
+} from "./chunk-UVR5XFE4.js";
 import "./chunk-7TQO4ZF4.js";
+import {
+  getWorkbenchClient
+} from "./chunk-YRC57EYG.js";
+import {
+  workbenchEnabled
+} from "./chunk-4VUQ2NPF.js";
+import {
+  runAuthTokenCommand,
+  runSetupCommand,
+  runStartCommand
+} from "./chunk-2K6RRTQC.js";
+import "./chunk-IE7EOKMD.js";
 
 // src/runner/worktree.ts
 import { execFile } from "child_process";
-import { existsSync } from "fs";
 import { join } from "path";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
 async function git(cwd, args) {
+  if (workbenchEnabled()) {
+    const { stdout: stdout2 } = await getWorkbenchClient().execFile("git", args, {
+      cwd,
+      timeout: GIT_TIMEOUT_MS
+    });
+    return stdout2;
+  }
   const { stdout } = await execFileAsync("git", args, { cwd, timeout: GIT_TIMEOUT_MS });
   return stdout.toString();
 }
@@ -40,7 +56,7 @@ async function ensureWorktree(projectDir, taskId, branch) {
     return projectDir;
   }
   const worktreePath = join(projectDir, WORKTREE_DIR, taskId);
-  if (existsSync(worktreePath)) {
+  if (await workspacePathExists(worktreePath)) {
     if (branch) {
       if (await hasUncommittedChanges(worktreePath)) {
         return worktreePath;
@@ -77,7 +93,7 @@ async function detachWorktreeBranch(projectDir, branch) {
 }
 async function removeWorktree(projectDir, taskId) {
   const worktreePath = join(projectDir, WORKTREE_DIR, taskId);
-  if (!existsSync(worktreePath)) return;
+  if (!await workspacePathExists(worktreePath)) return;
   try {
     await git(projectDir, ["worktree", "remove", worktreePath, "--force"]);
   } catch {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/runner/worktree.ts"],"sourcesContent":["import { execFile } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { GIT_TIMEOUT_MS, hasUncommittedChanges } from \"./git-utils.js\";\n\n// Async git (execFile, no shell) — synchronous child processes freeze the\n// agent's event loop and starve the socket heartbeat; see git-utils.ts.\nconst execFileAsync = promisify(execFile);\n\nasync function git(cwd: string, args: string[]): Promise<string> {\n  const { stdout } = await execFileAsync(\"git\", args, { cwd, timeout: GIT_TIMEOUT_MS });\n  return stdout.toString();\n}\n\nconst WORKTREE_DIR = \".worktrees\";\n\nexport async function ensureWorktree(\n  projectDir: string,\n  taskId: string,\n  branch?: string,\n): Promise<string> {\n  if (projectDir.includes(`/${WORKTREE_DIR}/`)) {\n    return projectDir;\n  }\n\n  const worktreePath = join(projectDir, WORKTREE_DIR, taskId);\n\n  if (existsSync(worktreePath)) {\n    if (branch) {\n      if (await hasUncommittedChanges(worktreePath)) {\n        return worktreePath;\n      }\n      try {\n        await git(worktreePath, [\"checkout\", \"--detach\", `origin/${branch}`]);\n      } catch {\n        /* branch doesn't exist on remote yet */\n      }\n    }\n    return worktreePath;\n  }\n\n  const ref = branch ? `origin/${branch}` : \"HEAD\";\n  await git(projectDir, [\"worktree\", \"add\", \"--detach\", worktreePath, ref]);\n\n  return worktreePath;\n}\n\n/**\n * Detach any task worktree that has `branch` checked out, releasing the branch lock\n * so the main project directory can check it out. Only touches worktrees inside\n * `.worktrees/` — never the main project directory.\n */\nexport async function detachWorktreeBranch(projectDir: string, branch: string): Promise<void> {\n  try {\n    const output = await git(projectDir, [\"worktree\", \"list\", \"--porcelain\"]);\n    const entries = output.split(\"\\n\\n\");\n    for (const entry of entries) {\n      const lines = entry.trim().split(\"\\n\");\n      const worktreeLine = lines.find((l) => l.startsWith(\"worktree \"));\n      const branchLine = lines.find((l) => l.startsWith(\"branch \"));\n      if (!worktreeLine || branchLine !== `branch refs/heads/${branch}`) continue;\n\n      const worktreePath = worktreeLine.replace(\"worktree \", \"\");\n      if (!worktreePath.includes(`/${WORKTREE_DIR}/`)) continue;\n\n      try {\n        await git(worktreePath, [\"checkout\", \"--detach\"]);\n      } catch {\n        /* best effort */\n      }\n    }\n  } catch {\n    /* best effort */\n  }\n}\n\n/**\n * Force-remove is intentional: this runs after task completion or explicit stop.\n * Any uncommitted changes at this point are scratch artifacts, not valuable work.\n */\nexport async function removeWorktree(projectDir: string, taskId: string): Promise<void> {\n  const worktreePath = join(projectDir, WORKTREE_DIR, taskId);\n  if (!existsSync(worktreePath)) return;\n  try {\n    await git(projectDir, [\"worktree\", \"remove\", worktreePath, \"--force\"]);\n  } catch {\n    /* best effort */\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAK1B,IAAM,gBAAgB,UAAU,QAAQ;AAExC,eAAe,IAAI,KAAa,MAAiC;AAC/D,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,OAAO,MAAM,EAAE,KAAK,SAAS,eAAe,CAAC;AACpF,SAAO,OAAO,SAAS;AACzB;AAEA,IAAM,eAAe;AAErB,eAAsB,eACpB,YACA,QACA,QACiB;AACjB,MAAI,WAAW,SAAS,IAAI,YAAY,GAAG,GAAG;AAC5C,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,KAAK,YAAY,cAAc,MAAM;AAE1D,MAAI,WAAW,YAAY,GAAG;AAC5B,QAAI,QAAQ;AACV,UAAI,MAAM,sBAAsB,YAAY,GAAG;AAC7C,eAAO;AAAA,MACT;AACA,UAAI;AACF,cAAM,IAAI,cAAc,CAAC,YAAY,YAAY,UAAU,MAAM,EAAE,CAAC;AAAA,MACtE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,SAAS,UAAU,MAAM,KAAK;AAC1C,QAAM,IAAI,YAAY,CAAC,YAAY,OAAO,YAAY,cAAc,GAAG,CAAC;AAExE,SAAO;AACT;AAOA,eAAsB,qBAAqB,YAAoB,QAA+B;AAC5F,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,YAAY,CAAC,YAAY,QAAQ,aAAa,CAAC;AACxE,UAAM,UAAU,OAAO,MAAM,MAAM;AACnC,eAAW,SAAS,SAAS;AAC3B,YAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,IAAI;AACrC,YAAM,eAAe,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,WAAW,CAAC;AAChE,YAAM,aAAa,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,SAAS,CAAC;AAC5D,UAAI,CAAC,gBAAgB,eAAe,qBAAqB,MAAM,GAAI;AAEnE,YAAM,eAAe,aAAa,QAAQ,aAAa,EAAE;AACzD,UAAI,CAAC,aAAa,SAAS,IAAI,YAAY,GAAG,EAAG;AAEjD,UAAI;AACF,cAAM,IAAI,cAAc,CAAC,YAAY,UAAU,CAAC;AAAA,MAClD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAMA,eAAsB,eAAe,YAAoB,QAA+B;AACtF,QAAM,eAAe,KAAK,YAAY,cAAc,MAAM;AAC1D,MAAI,CAAC,WAAW,YAAY,EAAG;AAC/B,MAAI;AACF,UAAM,IAAI,YAAY,CAAC,YAAY,UAAU,cAAc,SAAS,CAAC;AAAA,EACvE,QAAQ;AAAA,EAER;AACF;","names":[]}
+{"version":3,"sources":["../src/runner/worktree.ts"],"sourcesContent":["import { execFile } from \"node:child_process\";\nimport { join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { GIT_TIMEOUT_MS, hasUncommittedChanges } from \"./git-utils.js\";\nimport { getWorkbenchClient } from \"../workbench/client.js\";\nimport { workbenchEnabled } from \"../workbench/mode.js\";\nimport { workspacePathExists } from \"../workbench/fs.js\";\n\n// Async git (execFile, no shell) — synchronous child processes freeze the\n// agent's event loop and starve the socket heartbeat; see git-utils.ts.\n// Split-mode pods route over the launcher (the repo lives in the workbench).\nconst execFileAsync = promisify(execFile);\n\nasync function git(cwd: string, args: string[]): Promise<string> {\n  if (workbenchEnabled()) {\n    const { stdout } = await getWorkbenchClient().execFile(\"git\", args, {\n      cwd,\n      timeout: GIT_TIMEOUT_MS,\n    });\n    return stdout;\n  }\n  const { stdout } = await execFileAsync(\"git\", args, { cwd, timeout: GIT_TIMEOUT_MS });\n  return stdout.toString();\n}\n\nconst WORKTREE_DIR = \".worktrees\";\n\nexport async function ensureWorktree(\n  projectDir: string,\n  taskId: string,\n  branch?: string,\n): Promise<string> {\n  if (projectDir.includes(`/${WORKTREE_DIR}/`)) {\n    return projectDir;\n  }\n\n  const worktreePath = join(projectDir, WORKTREE_DIR, taskId);\n\n  if (await workspacePathExists(worktreePath)) {\n    if (branch) {\n      if (await hasUncommittedChanges(worktreePath)) {\n        return worktreePath;\n      }\n      try {\n        await git(worktreePath, [\"checkout\", \"--detach\", `origin/${branch}`]);\n      } catch {\n        /* branch doesn't exist on remote yet */\n      }\n    }\n    return worktreePath;\n  }\n\n  const ref = branch ? `origin/${branch}` : \"HEAD\";\n  await git(projectDir, [\"worktree\", \"add\", \"--detach\", worktreePath, ref]);\n\n  return worktreePath;\n}\n\n/**\n * Detach any task worktree that has `branch` checked out, releasing the branch lock\n * so the main project directory can check it out. Only touches worktrees inside\n * `.worktrees/` — never the main project directory.\n */\nexport async function detachWorktreeBranch(projectDir: string, branch: string): Promise<void> {\n  try {\n    const output = await git(projectDir, [\"worktree\", \"list\", \"--porcelain\"]);\n    const entries = output.split(\"\\n\\n\");\n    for (const entry of entries) {\n      const lines = entry.trim().split(\"\\n\");\n      const worktreeLine = lines.find((l) => l.startsWith(\"worktree \"));\n      const branchLine = lines.find((l) => l.startsWith(\"branch \"));\n      if (!worktreeLine || branchLine !== `branch refs/heads/${branch}`) continue;\n\n      const worktreePath = worktreeLine.replace(\"worktree \", \"\");\n      if (!worktreePath.includes(`/${WORKTREE_DIR}/`)) continue;\n\n      try {\n        await git(worktreePath, [\"checkout\", \"--detach\"]);\n      } catch {\n        /* best effort */\n      }\n    }\n  } catch {\n    /* best effort */\n  }\n}\n\n/**\n * Force-remove is intentional: this runs after task completion or explicit stop.\n * Any uncommitted changes at this point are scratch artifacts, not valuable work.\n */\nexport async function removeWorktree(projectDir: string, taskId: string): Promise<void> {\n  const worktreePath = join(projectDir, WORKTREE_DIR, taskId);\n  if (!(await workspacePathExists(worktreePath))) return;\n  try {\n    await git(projectDir, [\"worktree\", \"remove\", worktreePath, \"--force\"]);\n  } catch {\n    /* best effort */\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB;AACzB,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAS1B,IAAM,gBAAgB,UAAU,QAAQ;AAExC,eAAe,IAAI,KAAa,MAAiC;AAC/D,MAAI,iBAAiB,GAAG;AACtB,UAAM,EAAE,QAAAA,QAAO,IAAI,MAAM,mBAAmB,EAAE,SAAS,OAAO,MAAM;AAAA,MAClE;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AACD,WAAOA;AAAA,EACT;AACA,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,OAAO,MAAM,EAAE,KAAK,SAAS,eAAe,CAAC;AACpF,SAAO,OAAO,SAAS;AACzB;AAEA,IAAM,eAAe;AAErB,eAAsB,eACpB,YACA,QACA,QACiB;AACjB,MAAI,WAAW,SAAS,IAAI,YAAY,GAAG,GAAG;AAC5C,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,KAAK,YAAY,cAAc,MAAM;AAE1D,MAAI,MAAM,oBAAoB,YAAY,GAAG;AAC3C,QAAI,QAAQ;AACV,UAAI,MAAM,sBAAsB,YAAY,GAAG;AAC7C,eAAO;AAAA,MACT;AACA,UAAI;AACF,cAAM,IAAI,cAAc,CAAC,YAAY,YAAY,UAAU,MAAM,EAAE,CAAC;AAAA,MACtE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,SAAS,UAAU,MAAM,KAAK;AAC1C,QAAM,IAAI,YAAY,CAAC,YAAY,OAAO,YAAY,cAAc,GAAG,CAAC;AAExE,SAAO;AACT;AAOA,eAAsB,qBAAqB,YAAoB,QAA+B;AAC5F,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,YAAY,CAAC,YAAY,QAAQ,aAAa,CAAC;AACxE,UAAM,UAAU,OAAO,MAAM,MAAM;AACnC,eAAW,SAAS,SAAS;AAC3B,YAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,IAAI;AACrC,YAAM,eAAe,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,WAAW,CAAC;AAChE,YAAM,aAAa,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,SAAS,CAAC;AAC5D,UAAI,CAAC,gBAAgB,eAAe,qBAAqB,MAAM,GAAI;AAEnE,YAAM,eAAe,aAAa,QAAQ,aAAa,EAAE;AACzD,UAAI,CAAC,aAAa,SAAS,IAAI,YAAY,GAAG,EAAG;AAEjD,UAAI;AACF,cAAM,IAAI,cAAc,CAAC,YAAY,UAAU,CAAC;AAAA,MAClD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAMA,eAAsB,eAAe,YAAoB,QAA+B;AACtF,QAAM,eAAe,KAAK,YAAY,cAAc,MAAM;AAC1D,MAAI,CAAE,MAAM,oBAAoB,YAAY,EAAI;AAChD,MAAI;AACF,UAAM,IAAI,YAAY,CAAC,YAAY,UAAU,cAAc,SAAS,CAAC;AAAA,EACvE,QAAQ;AAAA,EAER;AACF;","names":["stdout"]}

package/dist/mode-6RL3SVMV.js

@@ -0,0 +1,13 @@
+import {
+  sharedDir,
+  workbenchEnabled,
+  workbenchPort,
+  workbenchToken
+} from "./chunk-4VUQ2NPF.js";
+export {
+  sharedDir,
+  workbenchEnabled,
+  workbenchPort,
+  workbenchToken
+};
+//# sourceMappingURL=mode-6RL3SVMV.js.map

package/dist/mode-6RL3SVMV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/protocol-QJRHTTMQ.js

@@ -0,0 +1,15 @@
+import {
+  DEFAULT_WORKBENCH_PORT,
+  FrameReader,
+  parseLine,
+  timingSafeTokenEqual,
+  writeFrame
+} from "./chunk-IE7EOKMD.js";
+export {
+  DEFAULT_WORKBENCH_PORT,
+  FrameReader,
+  parseLine,
+  timingSafeTokenEqual,
+  writeFrame
+};
+//# sourceMappingURL=protocol-QJRHTTMQ.js.map

package/dist/protocol-QJRHTTMQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/server-UGE67KIZ.js

@@ -0,0 +1,313 @@
+import {
+  buildSnapshotTar,
+  extractSnapshotTar,
+  loadPtySpawn,
+  terminateProcessGroup
+} from "./chunk-2K6RRTQC.js";
+import {
+  FrameReader,
+  timingSafeTokenEqual,
+  writeFrame
+} from "./chunk-IE7EOKMD.js";
+
+// src/workbench/server.ts
+import { spawn } from "child_process";
+import { createReadStream, createWriteStream } from "fs";
+import { mkdtemp, readdir, readFile, rm, stat } from "fs/promises";
+import { createServer } from "net";
+import { tmpdir } from "os";
+import { join } from "path";
+var TAR_CHUNK_BYTES = 64 * 1024;
+function errCode(err) {
+  return typeof err?.code === "string" ? err.code : void 0;
+}
+function sendError(socket, err) {
+  const frame = {
+    t: "error",
+    message: err instanceof Error ? err.message : String(err),
+    ...errCode(err) ? { code: errCode(err) } : {}
+  };
+  writeFrame(socket, frame);
+}
+function mergedEnv(overrides) {
+  return overrides ? { ...process.env, ...overrides } : { ...process.env };
+}
+var FrameSink = class {
+  pending = [];
+  handler = null;
+  push(frame) {
+    if (this.handler) this.handler(frame);
+    else this.pending.push(frame);
+  }
+  setHandler(handler) {
+    this.handler = handler;
+    for (const frame of this.pending.splice(0)) handler(frame);
+  }
+};
+async function startWorkbenchServer(opts) {
+  const server = createServer((socket) => handleConnection(socket, opts));
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(opts.port, "127.0.0.1", () => resolve());
+  });
+  const address = server.address();
+  const port = typeof address === "object" && address ? address.port : opts.port;
+  return {
+    port,
+    close: () => new Promise((resolve) => {
+      server.close(() => resolve());
+    })
+  };
+}
+function handleConnection(socket, opts) {
+  socket.on("error", () => void 0);
+  const sink = new FrameSink();
+  let dispatched = false;
+  const reader = new FrameReader((frame) => {
+    if (dispatched) {
+      sink.push(frame);
+      return;
+    }
+    dispatched = true;
+    dispatch(socket, frame, sink, opts);
+  });
+  socket.on("data", (chunk) => reader.push(chunk));
+}
+function dispatch(socket, req, sink, opts) {
+  if (!req || typeof req !== "object" || !timingSafeTokenEqual(req.token ?? "", opts.token)) {
+    writeFrame(socket, { t: "error", message: "unauthorized", code: "unauthorized" });
+    socket.destroy();
+    return;
+  }
+  switch (req.op) {
+    case "ping":
+      writeFrame(socket, { t: "pong", version: opts.version });
+      socket.end();
+      return;
+    case "exec":
+      runExec(socket, req, sink);
+      return;
+    case "pty":
+      void runPty(socket, req, sink);
+      return;
+    case "snapshotBuild":
+      void runSnapshotBuild(socket, req);
+      return;
+    case "snapshotExtract":
+      void runSnapshotExtract(socket, req, sink);
+      return;
+    case "readFile":
+      void runReadFile(socket, req);
+      return;
+    case "stat":
+      void runStat(socket, req);
+      return;
+    case "readdir":
+      void runReaddir(socket, req);
+      return;
+    default:
+      writeFrame(socket, { t: "error", message: "unknown op", code: "bad_request" });
+      socket.end();
+  }
+}
+function runExec(socket, req, sink) {
+  let child;
+  try {
+    const [argvFile, ...argvRest] = req.argv ?? [];
+    child = argvFile ? spawn(argvFile, argvRest, {
+      cwd: req.cwd,
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: true,
+      env: mergedEnv(req.env)
+    }) : spawn("sh", ["-c", req.command ?? ""], {
+      cwd: req.cwd,
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: true,
+      env: mergedEnv(req.env)
+    });
+  } catch (err) {
+    sendError(socket, err);
+    socket.end();
+    return;
+  }
+  let settled = false;
+  sink.setHandler((frame) => {
+    if (frame.t === "signal" && frame.mode === "term-group" && !settled) {
+      void terminateProcessGroup(child);
+    }
+  });
+  child.stdout?.on("data", (chunk) => {
+    writeFrame(socket, { t: "out", s: "stdout", d: chunk.toString("base64") });
+  });
+  child.stderr?.on("data", (chunk) => {
+    writeFrame(socket, { t: "out", s: "stderr", d: chunk.toString("base64") });
+  });
+  child.on("close", (code, signal) => {
+    settled = true;
+    writeFrame(socket, { t: "exit", code, signal });
+    socket.end();
+  });
+  child.on("error", (err) => {
+    if (settled) return;
+    settled = true;
+    sendError(socket, err);
+    socket.end();
+  });
+  socket.on("close", () => {
+    if (!settled) void terminateProcessGroup(child);
+  });
+}
+async function runPty(socket, req, sink) {
+  let pty;
+  try {
+    const ptySpawn = await loadPtySpawn();
+    pty = ptySpawn(req.file, req.args, {
+      name: "xterm-color",
+      cols: req.cols,
+      rows: req.rows,
+      cwd: req.cwd,
+      env: req.env
+    });
+  } catch (err) {
+    sendError(socket, err);
+    socket.end();
+    return;
+  }
+  let exited = false;
+  sink.setHandler((frame) => {
+    try {
+      if (frame.t === "input" && typeof frame.d === "string") {
+        pty.write(Buffer.from(frame.d, "base64").toString("utf8"));
+      } else if (frame.t === "resize" && typeof frame.cols === "number" && typeof frame.rows === "number") {
+        pty.resize(frame.cols, frame.rows);
+      } else if (frame.t === "kill") {
+        pty.kill(typeof frame.sig === "string" ? frame.sig : void 0);
+      }
+    } catch {
+    }
+  });
+  pty.onData((data) => {
+    writeFrame(socket, { t: "data", d: Buffer.from(data, "utf8").toString("base64") });
+  });
+  pty.onExit((event) => {
+    exited = true;
+    writeFrame(socket, { t: "exit", code: event.exitCode, signal: null });
+    socket.end();
+  });
+  socket.on("close", () => {
+    if (!exited) {
+      try {
+        pty.kill();
+      } catch {
+      }
+    }
+  });
+}
+async function runSnapshotBuild(socket, req) {
+  try {
+    const result = await buildSnapshotTar(req.cwd);
+    try {
+      writeFrame(socket, {
+        t: "meta",
+        sizeBytes: result.sizeBytes,
+        fileCount: result.fileCount,
+        deletionCount: result.deletionCount,
+        capturedAt: result.capturedAt
+      });
+      await new Promise((resolve, reject) => {
+        const stream = createReadStream(result.tarPath, { highWaterMark: TAR_CHUNK_BYTES });
+        stream.on("data", (chunk) => {
+          writeFrame(socket, { t: "data", d: Buffer.from(chunk).toString("base64") });
+        });
+        stream.on("end", () => resolve());
+        stream.on("error", reject);
+        socket.on("close", () => stream.destroy());
+      });
+      writeFrame(socket, { t: "end" });
+    } finally {
+      await result.cleanup();
+    }
+  } catch (err) {
+    sendError(socket, err);
+  }
+  socket.end();
+}
+async function runSnapshotExtract(socket, req, sink) {
+  const staging = await mkdtemp(join(tmpdir(), "conveyor-workbench-extract-"));
+  const tarPath = join(staging, "snapshot.tar.gz");
+  const out = createWriteStream(tarPath);
+  try {
+    await new Promise((resolve, reject) => {
+      sink.setHandler((frame) => {
+        if (frame.t === "data" && typeof frame.d === "string") {
+          out.write(Buffer.from(frame.d, "base64"));
+        } else if (frame.t === "end") {
+          out.end(() => resolve());
+        }
+      });
+      out.on("error", reject);
+      socket.on("close", () => reject(new Error("connection closed before end frame")));
+    });
+    const value = await extractSnapshotTar(req.cwd, tarPath);
+    writeFrame(socket, { t: "result", value });
+  } catch (err) {
+    sendError(socket, err);
+  } finally {
+    await rm(staging, { recursive: true, force: true }).catch(() => void 0);
+    socket.end();
+  }
+}
+async function runReadFile(socket, req) {
+  try {
+    const content = await readFile(req.path);
+    for (let offset = 0; offset < content.length; offset += TAR_CHUNK_BYTES) {
+      writeFrame(socket, {
+        t: "data",
+        d: content.subarray(offset, offset + TAR_CHUNK_BYTES).toString("base64")
+      });
+    }
+    writeFrame(socket, { t: "end" });
+  } catch (err) {
+    sendError(socket, err);
+  }
+  socket.end();
+}
+async function runStat(socket, req) {
+  try {
+    const s = await stat(req.path);
+    writeFrame(socket, {
+      t: "stat",
+      exists: true,
+      isFile: s.isFile(),
+      isDirectory: s.isDirectory(),
+      size: s.size,
+      mtimeMs: s.mtimeMs
+    });
+  } catch (err) {
+    if (errCode(err) === "ENOENT") {
+      writeFrame(socket, {
+        t: "stat",
+        exists: false,
+        isFile: false,
+        isDirectory: false,
+        size: 0,
+        mtimeMs: 0
+      });
+    } else {
+      sendError(socket, err);
+    }
+  }
+  socket.end();
+}
+async function runReaddir(socket, req) {
+  try {
+    writeFrame(socket, { t: "entries", names: await readdir(req.path) });
+  } catch (err) {
+    sendError(socket, err);
+  }
+  socket.end();
+}
+export {
+  startWorkbenchServer
+};
+//# sourceMappingURL=server-UGE67KIZ.js.map

package/dist/server-UGE67KIZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workbench/server.ts"],"sourcesContent":["/**\n * The workbench launcher — PID 1 of the workbench container in split-mode\n * pods (CONVEYOR_MODE=workbench). A token-authed, loopback-only exec daemon:\n * the agent container drives every workspace-touching operation through it\n * (shell commands, the claude PTY, git, snapshot build/extract, file reads)\n * while staying insulated from workload OOMs in its own container cgroup.\n *\n * One connection = one operation. A dropped connection kills the operation's\n * process (group) — the agent dying, restarting, or timing out must never\n * leave orphans accumulating against the workbench memory budget.\n */\n\nimport { spawn, type ChildProcess } from \"node:child_process\";\nimport { createReadStream, createWriteStream } from \"node:fs\";\nimport { mkdtemp, readdir, readFile, rm, stat } from \"node:fs/promises\";\nimport { createServer, type Socket } from \"node:net\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { terminateProcessGroup } from \"../setup/commands.js\";\nimport { loadPtySpawn, type PtyProcess } from \"../harness/pty/pty-support.js\";\nimport { buildSnapshotTar, extractSnapshotTar } from \"../runner/work-preservation/snapshot-tar.js\";\nimport {\n  FrameReader,\n  timingSafeTokenEqual,\n  writeFrame,\n  type WorkbenchFrame,\n  type WorkbenchRequest,\n} from \"./protocol.js\";\n\nconst TAR_CHUNK_BYTES = 64 * 1024;\n\nexport interface WorkbenchServerOptions {\n  port: number;\n  token: string;\n  version: string;\n}\n\nexport interface WorkbenchServerHandle {\n  port: number;\n  close(): Promise<void>;\n}\n\nfunction errCode(err: unknown): string | undefined {\n  return typeof (err as { code?: unknown })?.code === \"string\"\n    ? (err as { code: string }).code\n    : undefined;\n}\n\nfunction sendError(socket: Socket, err: unknown): void {\n  const frame: WorkbenchFrame = {\n    t: \"error\",\n    message: err instanceof Error ? err.message : String(err),\n    ...(errCode(err) ? { code: errCode(err) } : {}),\n  };\n  writeFrame(socket, frame);\n}\n\n/** Merge request env over the daemon's own (mirrors the local spawn paths,\n *  which inherit process.env and let callers override). */\nfunction mergedEnv(overrides?: Record<string, string>): NodeJS.ProcessEnv {\n  return overrides ? { ...process.env, ...overrides } : { ...process.env };\n}\n\n/**\n * Post-dispatch inbound frames for the connection's operation. Handlers\n * assign `onNext`; frames arriving before assignment are queued so an input\n * racing the (async) pty spawn is never dropped.\n */\nclass FrameSink {\n  private pending: WorkbenchFrame[] = [];\n  private handler: ((frame: WorkbenchFrame) => void) | null = null;\n\n  push(frame: WorkbenchFrame): void {\n    if (this.handler) this.handler(frame);\n    else this.pending.push(frame);\n  }\n\n  setHandler(handler: (frame: WorkbenchFrame) => void): void {\n    this.handler = handler;\n    for (const frame of this.pending.splice(0)) handler(frame);\n  }\n}\n\nexport async function startWorkbenchServer(\n  opts: WorkbenchServerOptions,\n): Promise<WorkbenchServerHandle> {\n  const server = createServer((socket) => handleConnection(socket, opts));\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(opts.port, \"127.0.0.1\", () => resolve());\n  });\n  const address = server.address();\n  const port = typeof address === \"object\" && address ? address.port : opts.port;\n  return {\n    port,\n    close: () =>\n      new Promise<void>((resolve) => {\n        server.close(() => resolve());\n      }),\n  };\n}\n\nfunction handleConnection(socket: Socket, opts: WorkbenchServerOptions): void {\n  socket.on(\"error\", () => undefined);\n  const sink = new FrameSink();\n  let dispatched = false;\n  const reader = new FrameReader((frame) => {\n    if (dispatched) {\n      sink.push(frame as unknown as WorkbenchFrame);\n      return;\n    }\n    dispatched = true;\n    dispatch(socket, frame as unknown as WorkbenchRequest, sink, opts);\n  });\n  socket.on(\"data\", (chunk: Buffer) => reader.push(chunk));\n}\n\nfunction dispatch(\n  socket: Socket,\n  req: WorkbenchRequest,\n  sink: FrameSink,\n  opts: WorkbenchServerOptions,\n): void {\n  if (!req || typeof req !== \"object\" || !timingSafeTokenEqual(req.token ?? \"\", opts.token)) {\n    writeFrame(socket, { t: \"error\", message: \"unauthorized\", code: \"unauthorized\" });\n    socket.destroy();\n    return;\n  }\n  switch (req.op) {\n    case \"ping\":\n      writeFrame(socket, { t: \"pong\", version: opts.version });\n      socket.end();\n      return;\n    case \"exec\":\n      runExec(socket, req, sink);\n      return;\n    case \"pty\":\n      void runPty(socket, req, sink);\n      return;\n    case \"snapshotBuild\":\n      void runSnapshotBuild(socket, req);\n      return;\n    case \"snapshotExtract\":\n      void runSnapshotExtract(socket, req, sink);\n      return;\n    case \"readFile\":\n      void runReadFile(socket, req);\n      return;\n    case \"stat\":\n      void runStat(socket, req);\n      return;\n    case \"readdir\":\n      void runReaddir(socket, req);\n      return;\n    default:\n      writeFrame(socket, { t: \"error\", message: \"unknown op\", code: \"bad_request\" });\n      socket.end();\n  }\n}\n\nfunction runExec(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"exec\" }>,\n  sink: FrameSink,\n): void {\n  let child: ChildProcess;\n  try {\n    // Argv form (git and friends) spawns directly with no shell; shell form\n    // (setup/start commands) mirrors the local `spawn(\"sh\", [\"-c\", cmd])`.\n    const [argvFile, ...argvRest] = req.argv ?? [];\n    child = argvFile\n      ? spawn(argvFile, argvRest, {\n          cwd: req.cwd,\n          stdio: [\"ignore\", \"pipe\", \"pipe\"],\n          detached: true,\n          env: mergedEnv(req.env),\n        })\n      : spawn(\"sh\", [\"-c\", req.command ?? \"\"], {\n          cwd: req.cwd,\n          stdio: [\"ignore\", \"pipe\", \"pipe\"],\n          detached: true,\n          env: mergedEnv(req.env),\n        });\n  } catch (err) {\n    sendError(socket, err);\n    socket.end();\n    return;\n  }\n\n  let settled = false;\n  sink.setHandler((frame) => {\n    if (frame.t === \"signal\" && frame.mode === \"term-group\" && !settled) {\n      void terminateProcessGroup(child);\n    }\n  });\n  child.stdout?.on(\"data\", (chunk: Buffer) => {\n    writeFrame(socket, { t: \"out\", s: \"stdout\", d: chunk.toString(\"base64\") });\n  });\n  child.stderr?.on(\"data\", (chunk: Buffer) => {\n    writeFrame(socket, { t: \"out\", s: \"stderr\", d: chunk.toString(\"base64\") });\n  });\n  child.on(\"close\", (code, signal) => {\n    settled = true;\n    writeFrame(socket, { t: \"exit\", code, signal });\n    socket.end();\n  });\n  child.on(\"error\", (err) => {\n    if (settled) return;\n    settled = true;\n    sendError(socket, err);\n    socket.end();\n  });\n  // Agent gone (crash, timeout-abort, container death) → no orphans.\n  socket.on(\"close\", () => {\n    if (!settled) void terminateProcessGroup(child);\n  });\n}\n\nasync function runPty(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"pty\" }>,\n  sink: FrameSink,\n): Promise<void> {\n  let pty: PtyProcess;\n  try {\n    const ptySpawn = await loadPtySpawn();\n    pty = ptySpawn(req.file, req.args, {\n      name: \"xterm-color\",\n      cols: req.cols,\n      rows: req.rows,\n      cwd: req.cwd,\n      env: req.env,\n    });\n  } catch (err) {\n    sendError(socket, err);\n    socket.end();\n    return;\n  }\n\n  let exited = false;\n  sink.setHandler((frame) => {\n    try {\n      if (frame.t === \"input\" && typeof frame.d === \"string\") {\n        pty.write(Buffer.from(frame.d, \"base64\").toString(\"utf8\"));\n      } else if (\n        frame.t === \"resize\" &&\n        typeof frame.cols === \"number\" &&\n        typeof frame.rows === \"number\"\n      ) {\n        pty.resize(frame.cols, frame.rows);\n      } else if (frame.t === \"kill\") {\n        pty.kill(typeof frame.sig === \"string\" ? frame.sig : undefined);\n      }\n    } catch {\n      /* pty already dead — exit handler owns teardown */\n    }\n  });\n  pty.onData((data) => {\n    writeFrame(socket, { t: \"data\", d: Buffer.from(data, \"utf8\").toString(\"base64\") });\n  });\n  pty.onExit((event) => {\n    exited = true;\n    writeFrame(socket, { t: \"exit\", code: event.exitCode, signal: null });\n    socket.end();\n  });\n  socket.on(\"close\", () => {\n    if (!exited) {\n      try {\n        pty.kill();\n      } catch {\n        /* already dead */\n      }\n    }\n  });\n}\n\nasync function runSnapshotBuild(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"snapshotBuild\" }>,\n): Promise<void> {\n  try {\n    const result = await buildSnapshotTar(req.cwd);\n    try {\n      writeFrame(socket, {\n        t: \"meta\",\n        sizeBytes: result.sizeBytes,\n        fileCount: result.fileCount,\n        deletionCount: result.deletionCount,\n        capturedAt: result.capturedAt,\n      });\n      await new Promise<void>((resolve, reject) => {\n        const stream = createReadStream(result.tarPath, { highWaterMark: TAR_CHUNK_BYTES });\n        stream.on(\"data\", (chunk) => {\n          writeFrame(socket, { t: \"data\", d: Buffer.from(chunk).toString(\"base64\") });\n        });\n        stream.on(\"end\", () => resolve());\n        stream.on(\"error\", reject);\n        socket.on(\"close\", () => stream.destroy());\n      });\n      writeFrame(socket, { t: \"end\" });\n    } finally {\n      await result.cleanup();\n    }\n  } catch (err) {\n    sendError(socket, err);\n  }\n  socket.end();\n}\n\nasync function runSnapshotExtract(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"snapshotExtract\" }>,\n  sink: FrameSink,\n): Promise<void> {\n  const staging = await mkdtemp(join(tmpdir(), \"conveyor-workbench-extract-\"));\n  const tarPath = join(staging, \"snapshot.tar.gz\");\n  const out = createWriteStream(tarPath);\n  try {\n    await new Promise<void>((resolve, reject) => {\n      sink.setHandler((frame) => {\n        if (frame.t === \"data\" && typeof frame.d === \"string\") {\n          out.write(Buffer.from(frame.d, \"base64\"));\n        } else if (frame.t === \"end\") {\n          out.end(() => resolve());\n        }\n      });\n      out.on(\"error\", reject);\n      socket.on(\"close\", () => reject(new Error(\"connection closed before end frame\")));\n    });\n    const value = await extractSnapshotTar(req.cwd, tarPath);\n    writeFrame(socket, { t: \"result\", value });\n  } catch (err) {\n    sendError(socket, err);\n  } finally {\n    await rm(staging, { recursive: true, force: true }).catch(() => undefined);\n    socket.end();\n  }\n}\n\nasync function runReadFile(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"readFile\" }>,\n): Promise<void> {\n  try {\n    const content = await readFile(req.path);\n    for (let offset = 0; offset < content.length; offset += TAR_CHUNK_BYTES) {\n      writeFrame(socket, {\n        t: \"data\",\n        d: content.subarray(offset, offset + TAR_CHUNK_BYTES).toString(\"base64\"),\n      });\n    }\n    writeFrame(socket, { t: \"end\" });\n  } catch (err) {\n    sendError(socket, err);\n  }\n  socket.end();\n}\n\nasync function runStat(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"stat\" }>,\n): Promise<void> {\n  try {\n    const s = await stat(req.path);\n    writeFrame(socket, {\n      t: \"stat\",\n      exists: true,\n      isFile: s.isFile(),\n      isDirectory: s.isDirectory(),\n      size: s.size,\n      mtimeMs: s.mtimeMs,\n    });\n  } catch (err) {\n    if (errCode(err) === \"ENOENT\") {\n      writeFrame(socket, {\n        t: \"stat\",\n        exists: false,\n        isFile: false,\n        isDirectory: false,\n        size: 0,\n        mtimeMs: 0,\n      });\n    } else {\n      sendError(socket, err);\n    }\n  }\n  socket.end();\n}\n\nasync function runReaddir(\n  socket: Socket,\n  req: Extract<WorkbenchRequest, { op: \"readdir\" }>,\n): Promise<void> {\n  try {\n    writeFrame(socket, { t: \"entries\", names: await readdir(req.path) });\n  } catch (err) {\n    sendError(socket, err);\n  }\n  socket.end();\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAS,aAAgC;AACzC,SAAS,kBAAkB,yBAAyB;AACpD,SAAS,SAAS,SAAS,UAAU,IAAI,YAAY;AACrD,SAAS,oBAAiC;AAC1C,SAAS,cAAc;AACvB,SAAS,YAAY;AAYrB,IAAM,kBAAkB,KAAK;AAa7B,SAAS,QAAQ,KAAkC;AACjD,SAAO,OAAQ,KAA4B,SAAS,WAC/C,IAAyB,OAC1B;AACN;AAEA,SAAS,UAAU,QAAgB,KAAoB;AACrD,QAAM,QAAwB;AAAA,IAC5B,GAAG;AAAA,IACH,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,GAAI,QAAQ,GAAG,IAAI,EAAE,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC;AAAA,EAC/C;AACA,aAAW,QAAQ,KAAK;AAC1B;AAIA,SAAS,UAAU,WAAuD;AACxE,SAAO,YAAY,EAAE,GAAG,QAAQ,KAAK,GAAG,UAAU,IAAI,EAAE,GAAG,QAAQ,IAAI;AACzE;AAOA,IAAM,YAAN,MAAgB;AAAA,EACN,UAA4B,CAAC;AAAA,EAC7B,UAAoD;AAAA,EAE5D,KAAK,OAA6B;AAChC,QAAI,KAAK,QAAS,MAAK,QAAQ,KAAK;AAAA,QAC/B,MAAK,QAAQ,KAAK,KAAK;AAAA,EAC9B;AAAA,EAEA,WAAW,SAAgD;AACzD,SAAK,UAAU;AACf,eAAW,SAAS,KAAK,QAAQ,OAAO,CAAC,EAAG,SAAQ,KAAK;AAAA,EAC3D;AACF;AAEA,eAAsB,qBACpB,MACgC;AAChC,QAAM,SAAS,aAAa,CAAC,WAAW,iBAAiB,QAAQ,IAAI,CAAC;AACtE,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,WAAO,KAAK,SAAS,MAAM;AAC3B,WAAO,OAAO,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AAAA,EACvD,CAAC;AACD,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,OAAO,OAAO,YAAY,YAAY,UAAU,QAAQ,OAAO,KAAK;AAC1E,SAAO;AAAA,IACL;AAAA,IACA,OAAO,MACL,IAAI,QAAc,CAAC,YAAY;AAC7B,aAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC9B,CAAC;AAAA,EACL;AACF;AAEA,SAAS,iBAAiB,QAAgB,MAAoC;AAC5E,SAAO,GAAG,SAAS,MAAM,MAAS;AAClC,QAAM,OAAO,IAAI,UAAU;AAC3B,MAAI,aAAa;AACjB,QAAM,SAAS,IAAI,YAAY,CAAC,UAAU;AACxC,QAAI,YAAY;AACd,WAAK,KAAK,KAAkC;AAC5C;AAAA,IACF;AACA,iBAAa;AACb,aAAS,QAAQ,OAAsC,MAAM,IAAI;AAAA,EACnE,CAAC;AACD,SAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AACzD;AAEA,SAAS,SACP,QACA,KACA,MACA,MACM;AACN,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,CAAC,qBAAqB,IAAI,SAAS,IAAI,KAAK,KAAK,GAAG;AACzF,eAAW,QAAQ,EAAE,GAAG,SAAS,SAAS,gBAAgB,MAAM,eAAe,CAAC;AAChF,WAAO,QAAQ;AACf;AAAA,EACF;AACA,UAAQ,IAAI,IAAI;AAAA,IACd,KAAK;AACH,iBAAW,QAAQ,EAAE,GAAG,QAAQ,SAAS,KAAK,QAAQ,CAAC;AACvD,aAAO,IAAI;AACX;AAAA,IACF,KAAK;AACH,cAAQ,QAAQ,KAAK,IAAI;AACzB;AAAA,IACF,KAAK;AACH,WAAK,OAAO,QAAQ,KAAK,IAAI;AAC7B;AAAA,IACF,KAAK;AACH,WAAK,iBAAiB,QAAQ,GAAG;AACjC;AAAA,IACF,KAAK;AACH,WAAK,mBAAmB,QAAQ,KAAK,IAAI;AACzC;AAAA,IACF,KAAK;AACH,WAAK,YAAY,QAAQ,GAAG;AAC5B;AAAA,IACF,KAAK;AACH,WAAK,QAAQ,QAAQ,GAAG;AACxB;AAAA,IACF,KAAK;AACH,WAAK,WAAW,QAAQ,GAAG;AAC3B;AAAA,IACF;AACE,iBAAW,QAAQ,EAAE,GAAG,SAAS,SAAS,cAAc,MAAM,cAAc,CAAC;AAC7E,aAAO,IAAI;AAAA,EACf;AACF;AAEA,SAAS,QACP,QACA,KACA,MACM;AACN,MAAI;AACJ,MAAI;AAGF,UAAM,CAAC,UAAU,GAAG,QAAQ,IAAI,IAAI,QAAQ,CAAC;AAC7C,YAAQ,WACJ,MAAM,UAAU,UAAU;AAAA,MACxB,KAAK,IAAI;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,UAAU;AAAA,MACV,KAAK,UAAU,IAAI,GAAG;AAAA,IACxB,CAAC,IACD,MAAM,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,GAAG;AAAA,MACrC,KAAK,IAAI;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,UAAU;AAAA,MACV,KAAK,UAAU,IAAI,GAAG;AAAA,IACxB,CAAC;AAAA,EACP,SAAS,KAAK;AACZ,cAAU,QAAQ,GAAG;AACrB,WAAO,IAAI;AACX;AAAA,EACF;AAEA,MAAI,UAAU;AACd,OAAK,WAAW,CAAC,UAAU;AACzB,QAAI,MAAM,MAAM,YAAY,MAAM,SAAS,gBAAgB,CAAC,SAAS;AACnE,WAAK,sBAAsB,KAAK;AAAA,IAClC;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,eAAW,QAAQ,EAAE,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,SAAS,QAAQ,EAAE,CAAC;AAAA,EAC3E,CAAC;AACD,QAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,eAAW,QAAQ,EAAE,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,SAAS,QAAQ,EAAE,CAAC;AAAA,EAC3E,CAAC;AACD,QAAM,GAAG,SAAS,CAAC,MAAM,WAAW;AAClC,cAAU;AACV,eAAW,QAAQ,EAAE,GAAG,QAAQ,MAAM,OAAO,CAAC;AAC9C,WAAO,IAAI;AAAA,EACb,CAAC;AACD,QAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,QAAI,QAAS;AACb,cAAU;AACV,cAAU,QAAQ,GAAG;AACrB,WAAO,IAAI;AAAA,EACb,CAAC;AAED,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI,CAAC,QAAS,MAAK,sBAAsB,KAAK;AAAA,EAChD,CAAC;AACH;AAEA,eAAe,OACb,QACA,KACA,MACe;AACf,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,aAAa;AACpC,UAAM,SAAS,IAAI,MAAM,IAAI,MAAM;AAAA,MACjC,MAAM;AAAA,MACN,MAAM,IAAI;AAAA,MACV,MAAM,IAAI;AAAA,MACV,KAAK,IAAI;AAAA,MACT,KAAK,IAAI;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,cAAU,QAAQ,GAAG;AACrB,WAAO,IAAI;AACX;AAAA,EACF;AAEA,MAAI,SAAS;AACb,OAAK,WAAW,CAAC,UAAU;AACzB,QAAI;AACF,UAAI,MAAM,MAAM,WAAW,OAAO,MAAM,MAAM,UAAU;AACtD,YAAI,MAAM,OAAO,KAAK,MAAM,GAAG,QAAQ,EAAE,SAAS,MAAM,CAAC;AAAA,MAC3D,WACE,MAAM,MAAM,YACZ,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,SAAS,UACtB;AACA,YAAI,OAAO,MAAM,MAAM,MAAM,IAAI;AAAA,MACnC,WAAW,MAAM,MAAM,QAAQ;AAC7B,YAAI,KAAK,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM,MAAS;AAAA,MAChE;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AACD,MAAI,OAAO,CAAC,SAAS;AACnB,eAAW,QAAQ,EAAE,GAAG,QAAQ,GAAG,OAAO,KAAK,MAAM,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC;AAAA,EACnF,CAAC;AACD,MAAI,OAAO,CAAC,UAAU;AACpB,aAAS;AACT,eAAW,QAAQ,EAAE,GAAG,QAAQ,MAAM,MAAM,UAAU,QAAQ,KAAK,CAAC;AACpE,WAAO,IAAI;AAAA,EACb,CAAC;AACD,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI,CAAC,QAAQ;AACX,UAAI;AACF,YAAI,KAAK;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,iBACb,QACA,KACe;AACf,MAAI;AACF,UAAM,SAAS,MAAM,iBAAiB,IAAI,GAAG;AAC7C,QAAI;AACF,iBAAW,QAAQ;AAAA,QACjB,GAAG;AAAA,QACH,WAAW,OAAO;AAAA,QAClB,WAAW,OAAO;AAAA,QAClB,eAAe,OAAO;AAAA,QACtB,YAAY,OAAO;AAAA,MACrB,CAAC;AACD,YAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,cAAM,SAAS,iBAAiB,OAAO,SAAS,EAAE,eAAe,gBAAgB,CAAC;AAClF,eAAO,GAAG,QAAQ,CAAC,UAAU;AAC3B,qBAAW,QAAQ,EAAE,GAAG,QAAQ,GAAG,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;AAAA,QAC5E,CAAC;AACD,eAAO,GAAG,OAAO,MAAM,QAAQ,CAAC;AAChC,eAAO,GAAG,SAAS,MAAM;AACzB,eAAO,GAAG,SAAS,MAAM,OAAO,QAAQ,CAAC;AAAA,MAC3C,CAAC;AACD,iBAAW,QAAQ,EAAE,GAAG,MAAM,CAAC;AAAA,IACjC,UAAE;AACA,YAAM,OAAO,QAAQ;AAAA,IACvB;AAAA,EACF,SAAS,KAAK;AACZ,cAAU,QAAQ,GAAG;AAAA,EACvB;AACA,SAAO,IAAI;AACb;AAEA,eAAe,mBACb,QACA,KACA,MACe;AACf,QAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,GAAG,6BAA6B,CAAC;AAC3E,QAAM,UAAU,KAAK,SAAS,iBAAiB;AAC/C,QAAM,MAAM,kBAAkB,OAAO;AACrC,MAAI;AACF,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,WAAK,WAAW,CAAC,UAAU;AACzB,YAAI,MAAM,MAAM,UAAU,OAAO,MAAM,MAAM,UAAU;AACrD,cAAI,MAAM,OAAO,KAAK,MAAM,GAAG,QAAQ,CAAC;AAAA,QAC1C,WAAW,MAAM,MAAM,OAAO;AAC5B,cAAI,IAAI,MAAM,QAAQ,CAAC;AAAA,QACzB;AAAA,MACF,CAAC;AACD,UAAI,GAAG,SAAS,MAAM;AACtB,aAAO,GAAG,SAAS,MAAM,OAAO,IAAI,MAAM,oCAAoC,CAAC,CAAC;AAAA,IAClF,CAAC;AACD,UAAM,QAAQ,MAAM,mBAAmB,IAAI,KAAK,OAAO;AACvD,eAAW,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC;AAAA,EAC3C,SAAS,KAAK;AACZ,cAAU,QAAQ,GAAG;AAAA,EACvB,UAAE;AACA,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACzE,WAAO,IAAI;AAAA,EACb;AACF;AAEA,eAAe,YACb,QACA,KACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,SAAS,IAAI,IAAI;AACvC,aAAS,SAAS,GAAG,SAAS,QAAQ,QAAQ,UAAU,iBAAiB;AACvE,iBAAW,QAAQ;AAAA,QACjB,GAAG;AAAA,QACH,GAAG,QAAQ,SAAS,QAAQ,SAAS,eAAe,EAAE,SAAS,QAAQ;AAAA,MACzE,CAAC;AAAA,IACH;AACA,eAAW,QAAQ,EAAE,GAAG,MAAM,CAAC;AAAA,EACjC,SAAS,KAAK;AACZ,cAAU,QAAQ,GAAG;AAAA,EACvB;AACA,SAAO,IAAI;AACb;AAEA,eAAe,QACb,QACA,KACe;AACf,MAAI;AACF,UAAM,IAAI,MAAM,KAAK,IAAI,IAAI;AAC7B,eAAW,QAAQ;AAAA,MACjB,GAAG;AAAA,MACH,QAAQ;AAAA,MACR,QAAQ,EAAE,OAAO;AAAA,MACjB,aAAa,EAAE,YAAY;AAAA,MAC3B,MAAM,EAAE;AAAA,MACR,SAAS,EAAE;AAAA,IACb,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,QAAQ,GAAG,MAAM,UAAU;AAC7B,iBAAW,QAAQ;AAAA,QACjB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH,OAAO;AACL,gBAAU,QAAQ,GAAG;AAAA,IACvB;AAAA,EACF;AACA,SAAO,IAAI;AACb;AAEA,eAAe,WACb,QACA,KACe;AACf,MAAI;AACF,eAAW,QAAQ,EAAE,GAAG,WAAW,OAAO,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;AAAA,EACrE,SAAS,KAAK;AACZ,cAAU,QAAQ,GAAG;AAAA,EACvB;AACA,SAAO,IAAI;AACb;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rallycry/conveyor-agent",
-  "version": "10.13.8",
+  "version": "10.13.10",
   "description": "Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.",
   "keywords": [
     "agent",