@rallycry/conveyor-agent 10.8.2 → 10.9.0

package/dist/index.d.ts

@@ -214,6 +214,20 @@ declare class AgentConnection {
     emitRateLimitPause(resetsAt: string): void;
     updateStatus(status: string): void;
     emitCodeReviewResult(content: string, approved: boolean): void;
+    /**
+     * The session's key hit a hard usage cap — ask the server to stamp it
+     * limited and hand back the best remaining key's credential env (or a
+     * requeue confirmation when none is left). Awaited: the caller swaps
+     * credentials and resumes on success, so it needs the real response.
+     */
+    cycleCodingAgentKey(rateLimitType: string, resetsAt?: string): Promise<{
+        cycled: true;
+        label: string;
+        envVars: Record<string, string>;
+    } | {
+        cycled: false;
+        resetsAt: string;
+    }>;
     askUserQuestion(questions: AgentQuestion[]): Promise<Record<string, string>>;
     getTaskProperties(): Promise<{
         plan?: string;

package/dist/index.js

@@ -20,7 +20,7 @@ import {
   unshallowRepo,
   updateRemoteToken,
   uploadSnapshotToGcs
-} from "./chunk-LBMFXTIV.js";
+} from "./chunk-H3OGNJS4.js";
 import "./chunk-7TQO4ZF4.js";
 
 // src/runner/worktree.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rallycry/conveyor-agent",
-  "version": "10.8.2",
+  "version": "10.9.0",
   "description": "Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.",
   "keywords": [
     "agent",

package/runtime/entrypoint.sh

@@ -358,7 +358,7 @@ if [ -n "${CONVEYOR_USER_ID}" ] && [ -n "${USER_HOME_PROJECT_ID}" ] && [ -d "${U
   # TUI at a startup dialog, and the vector that let one poisoned
   # customApiKeyResponses write brick every future pod. Nothing load-bearing
   # lives only in ~/.claude.json: credentials are in ~/.claude/.credentials.json
-  # (still shared, re-synthesized per boot) and transcripts in ~/.claude/projects.
+  # (pod-local via symlink, see below) and transcripts in ~/.claude/projects.
   # The agent's ensureClaudeOnboarding + the seed below rebuild every first-run
   # gate this file needs, fresh, on each boot.
   rm -rf /home/conveyor/.claude /home/conveyor/.config/claude 2>/dev/null || true
@@ -372,6 +372,29 @@ if [ -n "${CONVEYOR_USER_ID}" ] && [ -n "${USER_HOME_PROJECT_ID}" ] && [ -d "${U
   rm -rf /home/conveyor/.claude.json 2>/dev/null || true
   seed_claude_json /home/conveyor/.claude.json
 
+  # Pod-local ~/.claude/.credentials.json: the TUI and the usage probe
+  # authenticate from this file, while the server attributes usage samples to
+  # the key stamped on THIS pod's session. As a shared file (it lives inside
+  # the symlinked ~/.claude), concurrent pods booted under different keys
+  # clobbered it last-writer-wins, so every pod probed whichever ACCOUNT booted
+  # most recently — cross-wiring usage attribution between the user's keys
+  # (seen live 2026-07-14). Same cure as ~/.claude.json above, except the CLI
+  # derives this path from ~/.claude, so the shared dir keeps a SYMLINK to an
+  # absolute pod-local path — which resolves per-pod. Racing pods all write the
+  # identical symlink value, so the ln itself cannot lose data. Best-effort: on
+  # failure the file stays shared and the agent's sampler identity guard still
+  # blocks wrong-account attribution.
+  CRED_SHARED="${USER_HOME_ROOT}/.claude/.credentials.json"
+  CRED_POD_LOCAL="/home/conveyor/.claude-credentials.pod.json"
+  if [ -f "${CRED_SHARED}" ] && [ ! -L "${CRED_SHARED}" ]; then
+    # Legacy shared regular file: carry its contents into this pod so auth
+    # survives the cutover; the agent re-synthesizes from its own token at
+    # spawn anyway.
+    cp "${CRED_SHARED}" "${CRED_POD_LOCAL}" 2>/dev/null || true
+  fi
+  ln -sfn "${CRED_POD_LOCAL}" "${CRED_SHARED}" 2>/dev/null || true
+  chmod 600 "${CRED_POD_LOCAL}" 2>/dev/null || true
+
   # OpenCode state (sessions + config) persists the same way as ~/.claude.
   mkdir -p "${USER_HOME_ROOT}/.local/share/opencode" "${USER_HOME_ROOT}/.config/opencode" 2>/dev/null || true
   rm -rf /home/conveyor/.local/share/opencode /home/conveyor/.config/opencode 2>/dev/null || true