@rallycry/conveyor-agent 11.0.28 → 11.0.29

package/dist/{chunk-ND5INHM4.js → chunk-FF5JML7W.js}

@@ -95,7 +95,7 @@ import {
   statWorkspacePath,
   updateRemoteToken,
   verifyGitCredential
-} from "./chunk-GHNYP67H.js";
+} from "./chunk-KLM6ZOUX.js";
 import {
   registerBootMilestoneSocketFallback,
   reportBootMilestone
@@ -550,6 +550,8 @@ var MAX_TRACKED_MESSAGES = 200;
 var CHAT_TEXT_MAX = 16e3;
 var CHAT_TOOL_INPUT_MAX = 1900;
 var CHAT_TOOL_OUTPUT_MAX = 1900;
+var OPENCODE_LIVENESS_THROTTLE_MS = 5e3;
+var MAX_TRACKED_CHILD_SESSIONS = 100;
 function truncate(text, max) {
   return text.length > max ? `${text.slice(0, max)}\u2026` : text;
 }
@@ -585,6 +587,9 @@ var OpenCodeEventSource = class {
   relayedTextParts = /* @__PURE__ */ new Set();
   relayedToolUses = /* @__PURE__ */ new Set();
   relayedToolResults = /* @__PURE__ */ new Set();
+  /** Session ids opencode reported with a `parentID` — subagent sessions. */
+  childSessions = /* @__PURE__ */ new Set();
+  lastLivenessAt = Number.NEGATIVE_INFINITY;
   /** The opencode-assigned session id, once any event has carried it. */
   get sessionId() {
     return this.latchedSessionId;
@@ -598,11 +603,21 @@ var OpenCodeEventSource = class {
   handleRecord(raw) {
     if (typeof raw !== "object" || raw === null) return;
     const event = raw;
+    this.trackChildSession(event);
     this.latchSessionId(event);
+    if (this.isForeignSession(event)) {
+      if (this.active) this.emitLiveness();
+      return;
+    }
     const info = busInfoOf(event);
     if (info?.id && info.role) this.trackRole(info.id, info.role);
     if (isBusyEvent(event)) {
       if (!this.active) this.beginBusTurn();
+      this.emitLiveness();
+      return;
+    }
+    if (isRetryEvent(event)) {
+      if (this.active) this.emitLiveness();
       return;
     }
     if (isIdleEvent(event)) {
@@ -629,15 +644,58 @@ var OpenCodeEventSource = class {
     this.relayAssistantPart(part);
     accumulateUsage({ part }, this.usage);
     const mapped = mapOpenCodeEvent({ part });
-    if (!mapped) return;
+    if (!mapped) {
+      this.emitLiveness();
+      return;
+    }
     this.emit(mapped);
     if (mapped.type === "assistant") {
       const block = mapped.message.content[0];
       if (block?.type === "text" && block.text) this.assistantText += block.text;
     }
   }
+  /**
+   * Local-only proof the turn is live. Throttled per turn; `beginBusTurn`
+   * resets the floor so every turn's `busy` gets through.
+   */
+  emitLiveness() {
+    const now = Date.now();
+    if (now - this.lastLivenessAt < OPENCODE_LIVENESS_THROTTLE_MS) return;
+    this.lastLivenessAt = now;
+    this.emit({ type: "tool_progress", tool_name: "OpenCode", elapsed_time_seconds: 0 });
+  }
+  /**
+   * A record from another session. Known children (a `parentID` was seen)
+   * always are; an unknown session counts as foreign only mid-turn, where
+   * the only other session on the bus is a subagent. Outside a turn it is
+   * processed as before, and one that goes `busy` becomes the new root — a
+   * human's `/new` in the parked TUI opens a passive turn and later spawns
+   * resume into it.
+   */
+  isForeignSession(event) {
+    const id = busSessionIdOf(event);
+    if (!id || !this.latchedSessionId || id === this.latchedSessionId) return false;
+    if (this.childSessions.has(id) || this.active) return true;
+    if (isBusyEvent(event)) {
+      this.latchedSessionId = id;
+      this.onSessionId?.(id);
+    }
+    return false;
+  }
+  trackChildSession(event) {
+    if (event.type !== "session.created" && event.type !== "session.updated") return;
+    const info = event.properties?.info;
+    if (typeof info?.id !== "string" || typeof info.parentID !== "string") return;
+    if (!info.parentID) return;
+    this.childSessions.add(info.id);
+    if (this.childSessions.size > MAX_TRACKED_CHILD_SESSIONS) {
+      const oldest = this.childSessions.values().next().value;
+      if (oldest !== void 0) this.childSessions.delete(oldest);
+    }
+  }
   beginBusTurn() {
     this.active = true;
+    this.lastLivenessAt = Number.NEGATIVE_INFINITY;
     this.usage = { inputTokens: 0, outputTokens: 0, totalCostUsd: 0 };
     this.assistantText = "";
     this.relayedTextParts.clear();
@@ -705,7 +763,7 @@ var OpenCodeEventSource = class {
   latchSessionId(event) {
     if (this.latchedSessionId) return;
     const id = busSessionIdOf(event);
-    if (!id) return;
+    if (!id || this.childSessions.has(id)) return;
     this.latchedSessionId = id;
     this.onSessionId?.(id);
   }
@@ -717,6 +775,9 @@ var OpenCodeEventSource = class {
     }
   }
 };
+function isRetryEvent(event) {
+  return event.type === "session.status" && event.properties?.status?.type === "retry";
+}
 function describeSessionError(event) {
   const error = event.properties?.error;
   if (error && typeof error.message === "string") return error.message;
@@ -1008,6 +1069,7 @@ var JsonlTailer = class {
 
 // src/harness/codex/event-source.ts
 var USAGE_CAP_PATTERN = /usage_limit_(?:reached|exceeded)|rate_limit_reached|UsageLimitReached|hit your usage limit/i;
+var CODEX_LIVENESS_THROTTLE_MS = 5e3;
 var WEEKLY_WINDOW_MINUTES = 24 * 60;
 function isUsageCap(error) {
   return [error.codex_error_info, error.code, error.type, error.message].some(
@@ -1024,6 +1086,9 @@ var CodexEventSource = class {
   onSession;
   chat;
   sessionId = null;
+  /** UserPromptSubmit seen and no completion/interrupt since. */
+  turnOpen = false;
+  lastLivenessAt = Number.NEGATIVE_INFINITY;
   completed = /* @__PURE__ */ new Set();
   transcript = null;
   /** Last reported reading per rate-limit window, keyed by `five_hour` / `seven_day`. */
@@ -1037,13 +1102,18 @@ var CodexEventSource = class {
       this.sessionId = id;
       this.onSession(id);
     }
-    if (id !== this.sessionId) return;
+    if (id !== this.sessionId) {
+      this.emitLiveness();
+      return;
+    }
     if (e.hook_event_name === "SessionStart") this.watchTranscript(e);
     if (e.type === "agent-turn-complete") {
       this.finish(e);
       return;
     }
     if (e.hook_event_name === "UserPromptSubmit") {
+      this.turnOpen = true;
+      this.lastLivenessAt = Date.now();
       this.emit({ type: "tool_progress", tool_name: "Codex", elapsed_time_seconds: 0 });
       if (typeof e.prompt === "string")
         this.chat({ kind: "user_text", text: e.prompt.slice(0, 16e3) });
@@ -1056,6 +1126,7 @@ var CodexEventSource = class {
         elapsed_time_seconds: 0
       });
     } else if (e.hook_event_name === "Interrupt") {
+      this.turnOpen = false;
       this.emit({ type: "result", subtype: "error", errors: ["Codex turn interrupted"] });
       this.chat({ kind: "turn_end" });
     }
@@ -1065,6 +1136,14 @@ var CodexEventSource = class {
     await this.transcript?.flush();
     this.transcript = null;
   }
+  /** Throttled local-only liveness; silent unless a turn is open. */
+  emitLiveness() {
+    if (!this.turnOpen) return;
+    const now = Date.now();
+    if (now - this.lastLivenessAt < CODEX_LIVENESS_THROTTLE_MS) return;
+    this.lastLivenessAt = now;
+    this.emit({ type: "tool_progress", tool_name: "Codex", elapsed_time_seconds: 0 });
+  }
   watchTranscript(e) {
     if (this.transcript || typeof e.transcript_path !== "string" || typeof e.transcript_offset !== "number" || e.transcript_offset < 0)
       return;
@@ -1079,9 +1158,10 @@ var CodexEventSource = class {
   handleTranscriptRecord(raw) {
     if (!raw || typeof raw !== "object") return;
     const record = raw;
-    if (record.type !== "event_msg" || !record.payload || typeof record.payload !== "object")
-      return;
+    if (!record.payload || typeof record.payload !== "object") return;
     const event = record.payload;
+    if (event.type !== "task_complete") this.emitLiveness();
+    if (record.type !== "event_msg") return;
     if (event.type === "token_count") {
       this.handleTokenCount(event);
       return;
@@ -1090,6 +1170,7 @@ var CodexEventSource = class {
     const turn = event.turn_id;
     if (typeof turn !== "string" || this.completed.has(turn)) return;
     this.rememberTurn(turn);
+    this.turnOpen = false;
     const error = event.error;
     if (isUsageCap(error)) this.emitUsageCap();
     this.emit({
@@ -1178,6 +1259,7 @@ var CodexEventSource = class {
     const turn = e["turn-id"];
     if (typeof turn !== "string" || this.completed.has(turn)) return;
     this.rememberTurn(turn);
+    this.turnOpen = false;
     const text = typeof e["last-assistant-message"] === "string" ? e["last-assistant-message"] : "";
     if (text) {
       this.emit({
@@ -2643,6 +2725,7 @@ var ClaudeTuiAdapter = class {
 };
 
 // src/harness/pty/session.ts
+var SUBMIT_PROVING_PROGRESS_ADAPTERS = /* @__PURE__ */ new Set(["codex", "opencode"]);
 var PtySession = class {
   constructor(prompt, options, resume, bridge, adapter = new ClaudeTuiAdapter()) {
     this.options = options;
@@ -3702,7 +3785,7 @@ var PtySession = class {
     if (this.pendingPlanApproval && event.type === "result") {
       this.disarmPlanDialogAutoAccept();
     }
-    if (this.pendingSubmitNudge && (event.type === "assistant" || event.type === "result" || this.adapter.id === "codex" && event.type === "tool_progress")) {
+    if (this.pendingSubmitNudge && (event.type === "assistant" || event.type === "result" || SUBMIT_PROVING_PROGRESS_ADAPTERS.has(this.adapter.id) && event.type === "tool_progress")) {
       this.disarmSubmitNudge();
     }
     this.synthesizeRateLimitFromBanner(event);
@@ -4919,6 +5002,13 @@ var CodexTuiAdapter = class {
       // The pod image owns CLI upgrades. An interactive update would try to
       // replace the root-owned global package from the conveyor user account.
       check_for_update_on_startup: false,
+      // Acknowledge 0.157.0's model promotions so unattended sessions start.
+      // This dismisses the notices; --model below still selects the saved model.
+      "notice.model_migrations": {
+        "gpt-5.6-terra": "gpt-6-sol",
+        "gpt-5.6-sol": "gpt-6-sol",
+        "gpt-5.6-luna": "gpt-6-luna"
+      },
       sqlite_home: codexSqliteHome(this.env),
       approval_policy: "never",
       // Always full access, plan mode included. Codex's own read-only mode is
@@ -5217,7 +5307,10 @@ var DirectStreamController = class {
     this.starting = true;
     const created = new PtyStreamServer({
       sessionId: this.reporter.sessionId,
-      onInput: (data) => this.inputHandler?.(data),
+      onInput: (data) => {
+        this.reporter.notePtyInput();
+        this.inputHandler?.(data);
+      },
       onResize: (cols, rows) => {
         this.directDims = { cols, rows };
         this.applyDims();
@@ -8597,7 +8690,7 @@ var waitForChecksContract = defineToolContract({
 var ciWaitContracts = [waitForChecksContract];
 var DESCRIPTION = [
   "Ask typed questions about text and get probabilities back, never text: yes/no (noul \u2192 probability of yes), pick-one (choice \u2192 the chosen option, per-option probabilities, and a confidence), or a graded scale (score \u2192 the level, per-level probabilities, and a confidence).",
-  "Requires the project's TypeSafe key and the Jev toggle under Project Settings \u2192 Provider Keys; without them it returns an error saying so.",
+  "Requires Jev to be switched on under Project Settings \u2192 AI Provider Keys (a TypeSafe key, or an OpenCode Zen key); without it the tool returns an error saying so.",
   "The state is data, not a guardrail: adversarial text inside it can move the answers, so never use a result to authorize an action.",
   "Ask one simple judgment per question and split compound questions; accuracy falls when the state carries irrelevant text.",
   "Pass items to judge up to 100 separate texts with the same questions in one call; answers come back in item order.",
@@ -12926,13 +13019,17 @@ async function runPassiveTurn(host, context) {
     host.activeQuery = null;
   }
 }
+function parkedTuiWatchOptions(harness, cwd) {
+  if (harness.emitsStructuredEvents === false) return { disableWedgeAbort: true };
+  if (harness.ownsClaudeConfigHome === false) return {};
+  return { probeMountDead: () => isConfigHomeMountDead(cwd) };
+}
 async function trackAndRun(host, context, options, agentQuery) {
   if (host.harnessKind === "pty" && options.promptDelivery !== "prefill") {
-    const rawRelay = host.harness.emitsStructuredEvents === false;
     agentQuery = watchForParkedTui(
       agentQuery,
       host,
-      rawRelay ? { disableWedgeAbort: true } : { probeMountDead: () => isConfigHomeMountDead(options.cwd) }
+      parkedTuiWatchOptions(host.harness, options.cwd)
     );
   }
   host.activeQuery = agentQuery;
@@ -14320,6 +14417,7 @@ var SessionRunner = class _SessionRunner {
       onGitFlush: () => void this.periodicGitFlush(),
       onUsageSample: () => void this.sampleAndReportKeyUsage()
     });
+    this.connection.onPtyInputActivity(() => this.lifecycle.touchIdleTimer());
   }
   get state() {
     return this._state;
@@ -15656,7 +15754,9 @@ ${outcome.failures.join("\n")}
    *  turn: a background launch, or an armed `ScheduleWakeup`. */
   noteToolUseForBackgroundWork(event) {
     if (event.type !== "tool_use" || typeof event.tool !== "string") return;
-    this.backgroundWork.noteToolUse(event.tool, event.input);
+    if (resolveCardTui(this.config.runnerMode) === "claude-code") {
+      this.backgroundWork.noteToolUse(event.tool, event.input);
+    }
     this.scheduledWakeup.noteToolUse(event.tool, event.input);
   }
   async setState(status) {

package/dist/{chunk-GHNYP67H.js → chunk-KLM6ZOUX.js}

@@ -244,6 +244,7 @@ function syncBundleGithubToken(token) {
 var logger = createServiceLogger("agent-connection");
 var EVENT_BATCH_MS = 500;
 var MAX_EVENT_BUFFER = 5e3;
+var PTY_INPUT_REPORT_INTERVAL_MS = 3e4;
 var TOKEN_REFRESH_INTERVAL_MS = 45 * 60 * 1e3;
 var AgentConnection = class _AgentConnection {
   socket = null;
@@ -291,6 +292,9 @@ var AgentConnection = class _AgentConnection {
    *  question-grace expiry reads it to defer un-parking while a human is
    *  actively typing into the Connected-TUI (they may be mid-answer). */
   _lastPtyInputAt = null;
+  /** Runner-side subscribers to keystrokes from EITHER transport. */
+  ptyInputActivityListeners = /* @__PURE__ */ new Set();
+  lastReportedDirectInputAt = Number.NEGATIVE_INFINITY;
   constructor(config) {
     this.config = config;
   }
@@ -479,7 +483,7 @@ var AgentConnection = class _AgentConnection {
       });
       this.socket.on("pty:input", (data) => {
         if (data.sessionId && data.sessionId !== this.config.sessionId) return;
-        this._lastPtyInputAt = Date.now();
+        this.notePtyInput("relay");
         this.ptyInputCallback?.(data.data);
       });
       this.socket.on("pty:resize", (data) => {
@@ -946,7 +950,32 @@ var AgentConnection = class _AgentConnection {
     }).catch(() => {
     });
   }
-  /** Epoch ms of the last relayed TUI keystroke, or null before any. */
+  /**
+   * A human typed into the TUI. Stamps `lastPtyInputAt` and notifies the
+   * runner's input-activity listeners for both transports. Direct-stream
+   * keystrokes never cross the API, so for those this also tells the server
+   * (`reportPtyInput`, throttled, fire-and-forget) — the relay path's server
+   * already bumps in `relayPtyInput`. An old API that doesn't know the method
+   * rejects harmlessly.
+   */
+  notePtyInput(origin = "direct") {
+    const now = Date.now();
+    this._lastPtyInputAt = now;
+    for (const listener of this.ptyInputActivityListeners) listener();
+    if (origin !== "direct" || !this.socket) return;
+    if (now - this.lastReportedDirectInputAt < PTY_INPUT_REPORT_INTERVAL_MS) return;
+    this.lastReportedDirectInputAt = now;
+    void this.call("reportPtyInput", { sessionId: this.config.sessionId }).catch(() => {
+    });
+  }
+  /** Subscribe to keystroke activity from either transport. Returns an unsubscribe fn. */
+  onPtyInputActivity(listener) {
+    this.ptyInputActivityListeners.add(listener);
+    return () => {
+      this.ptyInputActivityListeners.delete(listener);
+    };
+  }
+  /** Epoch ms of the last TUI keystroke (relay or direct), or null before any. */
   get lastPtyInputAt() {
     return this._lastPtyInputAt;
   }
@@ -1446,7 +1475,7 @@ ${q.question}${q.options.length ? "\n" + q.options.map((o) => `- ${o.label}: ${o
   }
 };
 
-// ../shared/dist/chunk-ZSXAYKD4.js
+// ../shared/dist/chunk-3D2OVVIS.js
 import { z } from "zod";
 import { z as z2 } from "zod";
 var DEFAULT_SONNET_MODEL = "claude-sonnet-5";
@@ -1455,6 +1484,15 @@ var DEFAULT_HAIKU_MODEL = "claude-haiku-4-5-20251001";
 var FABLE_MODEL = "claude-fable-5-1";
 var PREVIOUS_SONNET_MODEL = "claude-sonnet-4-6";
 var PREVIOUS_OPUS_MODEL = "claude-opus-5";
+function formatModelId(provider, model) {
+  return `${provider}/${model}`;
+}
+var JEV_MODEL = "jev-1.13.0";
+var JEV_MODEL_ID = formatModelId("typesafe", JEV_MODEL);
+var JEV_ZEN_MODEL = "jev-1.13";
+var JEV_ZEN_MODEL_ID = formatModelId("zen", JEV_ZEN_MODEL);
+var JEV_INPUT_PRICE_PER_TOKEN = 0.042 / 1e6;
+var JEV_STATE_MAX_CHARS = 1e5;
 var PTY_STREAM_PORT_BASE = 7420;
 var PTY_STREAM_PORT_ATTEMPTS = 8;
 function encodePtyStreamFrame(frame) {
@@ -1508,6 +1546,11 @@ var PREVIEW_PORT_DENY_LIST = [
   9200,
   ...Array.from({ length: PTY_STREAM_PORT_ATTEMPTS }, (_, i) => PTY_STREAM_PORT_BASE + i)
 ];
+function isAllowablePreviewPort(port) {
+  if (typeof port !== "number" || !Number.isInteger(port)) return false;
+  if (port < 1 || port > 65535) return false;
+  return !PREVIEW_PORT_DENY_LIST.includes(port);
+}
 function normalizeCheckpointPath(value) {
   let normalized = value.trim().replace(/\/{2,}/g, "/");
   normalized = normalized.split("/").filter((segment) => segment !== ".").join("/");
@@ -1973,7 +2016,9 @@ var KnownAgentEventSchema = z22.discriminatedUnion("type", [
     startCommandRunning: z22.boolean().optional(),
     startCommandConfigured: z22.boolean().optional(),
     // Sanitized server-side by sanitizeSessionPreviewPorts — stays unknown.
-    previewPorts: z22.unknown().optional()
+    previewPorts: z22.unknown().optional(),
+    // Sanitized server-side by sanitizeSessionPreviewLinks — stays unknown.
+    previewLinks: z22.unknown().optional()
   }).passthrough(),
   z22.object({ type: z22.literal("setup_error"), message: z22.string() }).passthrough(),
   z22.object({ type: z22.literal("start_command_started") }).passthrough(),
@@ -2451,6 +2496,9 @@ var ReportPtyStreamRequestSchema = z32.object({
   sessionId: z32.string(),
   port: z32.number().int().positive().max(65535).nullable()
 });
+var ReportPtyInputRequestSchema = z32.object({
+  sessionId: z32.string()
+});
 var GetPtyStreamEndpointRequestSchema = z32.object({
   sessionId: z32.string()
 });
@@ -3275,6 +3323,30 @@ var CRITICAL_AUTOMATED_SOURCES = /* @__PURE__ */ new Set([
   // clear the completion guard.
   "ci_result"
 ]);
+var MAX_PREVIEW_LINKS = 8;
+var MAX_PREVIEW_LINK_LABEL = 64;
+var MAX_PREVIEW_LINK_PATH = 512;
+function isSafePreviewPath(path) {
+  if (!path.startsWith("/") || path.startsWith("//")) return false;
+  if (path.length > MAX_PREVIEW_LINK_PATH) return false;
+  return !/[\s\\\u0000-\u001f\u007f]/.test(path);
+}
+function sanitizeSessionPreviewLinks(raw) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const entry of raw) {
+    if (out.length >= MAX_PREVIEW_LINKS) break;
+    if (!entry || typeof entry !== "object") continue;
+    const { label, port, path } = entry;
+    if (typeof label !== "string") continue;
+    const trimmed = label.trim().slice(0, MAX_PREVIEW_LINK_LABEL);
+    if (trimmed.length === 0 || !isAllowablePreviewPort(port)) continue;
+    const resolvedPath = path === void 0 ? "/" : path;
+    if (typeof resolvedPath !== "string" || !isSafePreviewPath(resolvedPath)) continue;
+    out.push({ label: trimmed, port, path: resolvedPath });
+  }
+  return out;
+}
 var DECISION_STATUS_LABELS = ["Open", "Decided", "Cancelled"];
 var DECISION_OPTION_KINDS = ["current", "planned", "proposed"];
 var DECISION_VOTE_SOURCES = ["web", "slack", "discord", "agent"];
@@ -3448,13 +3520,6 @@ var UpdateProjectDecisionRequestSchema = z10.object({
   status: z10.enum(["Cancelled", "Open"]).optional(),
   requestingUserId: z10.string().optional()
 });
-function formatModelId(provider, model) {
-  return `${provider}/${model}`;
-}
-var JEV_MODEL = "jev-1.13.0";
-var JEV_MODEL_ID = formatModelId("typesafe", JEV_MODEL);
-var JEV_INPUT_PRICE_PER_TOKEN = 0.042 / 1e6;
-var JEV_STATE_MAX_CHARS = 1e5;
 var EVALUATE_MAX_QUESTIONS = 32;
 var EVALUATE_MAX_ITEMS = 100;
 var EVALUATE_ITEM_MAX_CHARS = 8e3;
@@ -4624,21 +4689,30 @@ async function loadForwardPorts(workspaceDir) {
       if (value.visibility === "public" || value.visibility === "private") {
         entry.visibility = value.visibility;
       }
+      if (value.onAutoForward === "ignore") entry.hidden = true;
       attributes[key] = entry;
     }
-    return { ports, attributes };
+    const links = sanitizeSessionPreviewLinks(parsed.customizations?.conveyor?.previewLinks);
+    return { ports, attributes, links };
   } catch {
-    return { ports: [], attributes: {} };
+    return { ports: [], attributes: {}, links: [] };
   }
 }
 function buildSessionPreviewPorts(result) {
-  return result.ports.filter((port) => !DEVCONTAINER_PORT_DENY_LIST.has(port)).map((port) => {
+  const toEntry = (port) => {
     const attr = result.attributes[String(port)];
     const entry = { port };
     if (attr?.label) entry.label = attr.label;
     if (attr?.visibility) entry.visibility = attr.visibility;
+    if (attr?.hidden) entry.hidden = true;
     return entry;
-  });
+  };
+  const forwarded = result.ports.filter((port) => !DEVCONTAINER_PORT_DENY_LIST.has(port));
+  const listed = new Set(forwarded);
+  const hiddenOnly = Object.entries(result.attributes).filter(([, attr]) => attr.hidden).map(([key]) => Number(key)).filter(
+    (port) => Number.isInteger(port) && port >= 1 && port <= 65535 && !listed.has(port) && !DEVCONTAINER_PORT_DENY_LIST.has(port)
+  );
+  return [...forwarded, ...hiddenOnly].map(toEntry);
 }
 function loadConveyorConfig() {
   const envStart = process.env.CONVEYOR_START_COMMAND;
@@ -4741,12 +4815,19 @@ var Lifecycle = class {
     this.clearIdleTimers();
     const delay2 = Math.max(0, overrideMs ?? this.config.idleTimeoutMs);
     this.idleTimer = setTimeout(() => {
+      this.idleTimer = null;
       this.callbacks.onIdleTimeout();
     }, delay2);
   }
   cancelIdleTimer() {
     this.clearIdleTimers();
   }
+  /** Restart an ARMED idle timer with the full window; a no-op when none is
+   *  armed. Human activity uses this, so a keystroke during a running turn
+   *  (timer cancelled) can never arm one. */
+  touchIdleTimer() {
+    if (this.idleTimer) this.startIdleTimer();
+  }
   // ── Dormant timer ──────────────────────────────────────────────────
   /** Start (or restart) the dormant timer.
    *  @param overrideMs Optional custom delay in ms. When provided, the timer

package/dist/{chunk-DMTBXIA4.js → chunk-V5X3JCAZ.js}

@@ -8,7 +8,7 @@ import {
   readWorkspaceBytes,
   statWorkspacePath,
   workspacePathExists
-} from "./chunk-GHNYP67H.js";
+} from "./chunk-KLM6ZOUX.js";
 import {
   reportBootMilestone
 } from "./chunk-Q4FQOJ7D.js";
@@ -583,6 +583,10 @@ var WorkspaceCommandSupervisor = class {
     this.reportBootMilestoneFn("start_command_launched");
     const forwardPorts = await this.loadForwardPortsFn(this.workspaceDir);
     if (this.stopped) return;
+    this.reportSetupComplete(startCommandRunning, forwardPorts);
+  }
+  /** Send `setup_complete` with the devcontainer preview hints and links. */
+  reportSetupComplete(startCommandRunning, forwardPorts) {
     const previewPorts = buildSessionPreviewPorts(forwardPorts);
     this.connection.sendEvent({
       type: "setup_complete",
@@ -590,7 +594,8 @@ var WorkspaceCommandSupervisor = class {
       // Reported separately so the server can tell "nothing to run" apart from
       // "the dev server failed to launch" — both report startCommandRunning:false.
       startCommandConfigured: Boolean(this.config?.startCommand),
-      ...previewPorts.length > 0 ? { previewPorts } : {}
+      ...previewPorts.length > 0 ? { previewPorts } : {},
+      ...forwardPorts.links.length > 0 ? { previewLinks: forwardPorts.links } : {}
     });
   }
   /** Run the dependency sync, forwarding its output as setup output so it lands

package/dist/cli.js

@@ -7,7 +7,7 @@ import {
   WorkspaceCommandSupervisor,
   startWorkspaceCommandsAfterConnect,
   stopWorkspaceCommands
-} from "./chunk-DMTBXIA4.js";
+} from "./chunk-V5X3JCAZ.js";
 import {
   PtyHarness,
   SessionRunner,
@@ -25,7 +25,7 @@ import {
   runUsageProbe,
   sampleKeyUsage,
   usesNativeUsageReporting
-} from "./chunk-ND5INHM4.js";
+} from "./chunk-FF5JML7W.js";
 import "./chunk-37J5MMQT.js";
 import {
   inheritedEnv,
@@ -44,7 +44,7 @@ import {
   createServiceLogger,
   fetchBootstrap,
   loadConveyorConfig
-} from "./chunk-GHNYP67H.js";
+} from "./chunk-KLM6ZOUX.js";
 import "./chunk-Q4FQOJ7D.js";
 import "./chunk-W4LZ7R6Z.js";
 import "./chunk-372R6E4C.js";
@@ -1458,7 +1458,7 @@ if (!RUNNER_MODES.includes(CONVEYOR_MODE)) {
   process.exit(1);
 }
 if (CONVEYOR_MODE === "serving") {
-  const { runServingSession } = await import("./serve-boot-CYVW7Z27.js");
+  const { runServingSession } = await import("./serve-boot-N5XKECWC.js");
   exitContext.runnerMode = "serving";
   exitContext.sessionId = process.env.CONVEYOR_SESSION_ID ?? exitContext.sessionId;
   const outcome = await runServingSession({

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _project_shared from '@project/shared';
-import { RunnerMode, AgentSessionServiceMethods, AgentMode, PtyChatEventPayload, WorkspaceDiscoveredPort, AgentQuestion, AgentRunnerStatus } from '@project/shared';
+import { RunnerMode, AgentSessionServiceMethods, AgentMode, PtyChatEventPayload, WorkspaceDiscoveredPort, AgentQuestion, AgentRunnerStatus, SessionPreviewLink } from '@project/shared';
 export * from '@project/shared';
 import { ChildProcess } from 'node:child_process';
 
@@ -135,6 +135,9 @@ declare class AgentConnection {
      *  question-grace expiry reads it to defer un-parking while a human is
      *  actively typing into the Connected-TUI (they may be mid-answer). */
     private _lastPtyInputAt;
+    /** Runner-side subscribers to keystrokes from EITHER transport. */
+    private readonly ptyInputActivityListeners;
+    private lastReportedDirectInputAt;
     constructor(config: AgentConnectionConfig);
     get sessionId(): string;
     get connected(): boolean;
@@ -294,7 +297,18 @@ declare class AgentConnection {
      * just stays on the relay transport.
      */
     reportPtyStream(port: number | null): void;
-    /** Epoch ms of the last relayed TUI keystroke, or null before any. */
+    /**
+     * A human typed into the TUI. Stamps `lastPtyInputAt` and notifies the
+     * runner's input-activity listeners for both transports. Direct-stream
+     * keystrokes never cross the API, so for those this also tells the server
+     * (`reportPtyInput`, throttled, fire-and-forget) — the relay path's server
+     * already bumps in `relayPtyInput`. An old API that doesn't know the method
+     * rejects harmlessly.
+     */
+    notePtyInput(origin?: "relay" | "direct"): void;
+    /** Subscribe to keystroke activity from either transport. Returns an unsubscribe fn. */
+    onPtyInputActivity(listener: () => void): () => void;
+    /** Epoch ms of the last TUI keystroke (relay or direct), or null before any. */
     get lastPtyInputAt(): number | null;
     /** Subscribe to relayed keystrokes. Returns an unsubscribe fn. */
     onPtyInput(handler: (data: string) => void): () => void;
@@ -620,6 +634,10 @@ declare class Lifecycle {
      *  window every time it defers. */
     startIdleTimer(overrideMs?: number): void;
     cancelIdleTimer(): void;
+    /** Restart an ARMED idle timer with the full window; a no-op when none is
+     *  armed. Human activity uses this, so a keystroke during a running turn
+     *  (timer cancelled) can never arm one. */
+    touchIdleTimer(): void;
     /** Start (or restart) the dormant timer.
      *  @param overrideMs Optional custom delay in ms. When provided, the timer
      *  fires after exactly that delay instead of `dormantTimeoutMs`. SessionRunner
@@ -1294,12 +1312,16 @@ declare function removeWorktree(projectDir: string, taskId: string): Promise<voi
 interface ConveyorConfig {
     startCommand?: string;
 }
+type PortAttributes = {
+    label?: string;
+    visibility?: "public" | "private";
+    hidden?: boolean;
+};
 interface ForwardPortsResult {
     ports: number[];
-    attributes: Record<string, {
-        label?: string;
-        visibility?: "public" | "private";
-    }>;
+    attributes: Record<string, PortAttributes>;
+    /** `customizations.conveyor.previewLinks`, sanitized. */
+    links: SessionPreviewLink[];
 }
 declare function loadForwardPorts(workspaceDir: string): Promise<ForwardPortsResult>;
 /** Load config from env vars (project-level settings injected via bootstrap).

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   SessionRunner,
   unshallowRepo
-} from "./chunk-ND5INHM4.js";
+} from "./chunk-FF5JML7W.js";
 import "./chunk-37J5MMQT.js";
 import "./chunk-WCJ6HRVU.js";
 import {
@@ -17,7 +17,7 @@ import {
   stageAndCommit,
   updateRemoteToken,
   workspacePathExists
-} from "./chunk-GHNYP67H.js";
+} from "./chunk-KLM6ZOUX.js";
 import "./chunk-Q4FQOJ7D.js";
 import {
   runAuthTokenCommand,

package/dist/{serve-boot-CYVW7Z27.js → serve-boot-N5XKECWC.js}

@@ -1,6 +1,6 @@
 import {
   WorkspaceCommandSupervisor
-} from "./chunk-DMTBXIA4.js";
+} from "./chunk-V5X3JCAZ.js";
 import {
   AgentConnection,
   CodespacePortVisibility,
@@ -11,7 +11,7 @@ import {
   createServiceLogger,
   ensureOnTaskBranch,
   loadConveyorConfig
-} from "./chunk-GHNYP67H.js";
+} from "./chunk-KLM6ZOUX.js";
 import "./chunk-Q4FQOJ7D.js";
 import "./chunk-W4LZ7R6Z.js";
 import "./chunk-IA45XHOA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rallycry/conveyor-agent",
-  "version": "11.0.28",
+  "version": "11.0.29",
   "description": "Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.",
   "keywords": [
     "agent",

package/skills/conveyor-workflows/SKILL.md

@@ -151,6 +151,17 @@ labels. Each tag carries a `description` (≤255 — the summary), an `overview`
   work. The loop idles on `conveyor-wait`, a CLI in `@rallycry/conveyor-mcp`
   that blocks until a card becomes claimable, so an idle loop wakes on a board
   event instead of a timer.
+- **From an app, with a project token (no MCP, no user)**: an external service
+  holding an incident-scoped project token files AND starts a card in one
+  call — `POST /api/incidents/report` with `type: "task"`, a `plan`, and
+  `start: true` (optionally `tags: [<glossary names>]`; an unknown name is a
+  400). The build starts through the same path as `start_task`, as the token's
+  owner, and the response carries `{ taskId, slug, url, status, buildStarted,
+  buildError? }`. A failed start still returns 201 with `buildStarted: false`
+  and leaves the card for a human — do not retry the report, that files a
+  second card. Poll `GET /api/incidents/tasks/<taskId>` with the same token for
+  `{ status, githubPRUrl, githubPRNumber, agentRunnerStatus }`. `start` is
+  rate-limited to 30 per token per 10 minutes.
 - **Reserved-branch trap**: a card with an assigned agent may have a reserved
   `githubBranch`. Check `get_task` before pushing: if set, push to THAT
   branch; a PR from any other branch gets auto-closed and unlinked.