@rallycry/conveyor-agent 11.0.44 → 11.0.46

package/dist/{boot-T5HQVF3W.js → boot-5AZLXH5M.js}

@@ -11,14 +11,14 @@ import {
   readAgentVersion,
   refreshSkillsAfterCheckout,
   runPreReadyBinds
-} from "./chunk-37J5MMQT.js";
+} from "./chunk-6CKFZ4JG.js";
 import "./chunk-EKTPDG3G.js";
 import {
   GitPrepJob,
   defaultGit,
   ensureDir,
   reportBootMilestone
-} from "./chunk-Q4FQOJ7D.js";
+} from "./chunk-VIUZS7V4.js";
 import "./chunk-W4LZ7R6Z.js";
 import "./chunk-372R6E4C.js";
 import "./chunk-SQM2BQ7H.js";

package/dist/{chunk-42YPRICN.js → chunk-2SIMOUOD.js}

@@ -2,7 +2,7 @@ import {
   mapChatHistory,
   readAgentVersion,
   refreshSkillsAfterCheckout
-} from "./chunk-37J5MMQT.js";
+} from "./chunk-6CKFZ4JG.js";
 import {
   MAX_BETWEEN_TURN_BUFFER,
   MAX_DIAGNOSTIC_OUTPUT,
@@ -37,7 +37,6 @@ import {
   CARD_DESCRIPTION_FIELD_HINT,
   CONTEXT_LINK_LOCATOR_MAX,
   CRITICAL_AUTOMATED_SOURCES,
-  CodespacePortVisibility,
   DEFAULT_CI_WAIT_TIMEOUT_MINUTES,
   DEFAULT_CODEX_CODING_MODEL,
   DEFAULT_LIFECYCLE_CONFIG,
@@ -98,11 +97,10 @@ import {
   statWorkspacePath,
   updateRemoteToken,
   verifyGitCredential
-} from "./chunk-KMBMW3J3.js";
+} from "./chunk-SKAFB6DG.js";
 import {
-  registerBootMilestoneSocketFallback,
   reportBootMilestone
-} from "./chunk-Q4FQOJ7D.js";
+} from "./chunk-VIUZS7V4.js";
 import {
   describeTokenFile,
   ghHostsExternallyOwned,
@@ -2746,7 +2744,7 @@ function claudeCredentialsPath() {
   return join7(claudeConfigHome(), ".credentials.json");
 }
 function isConveyorCloudEnv(env = process.env) {
-  return Boolean(env.CLAUDESPACE_NAME || env.CODESPACE_NAME || env.CODESPACES);
+  return Boolean(env.CLAUDESPACE_NAME);
 }
 async function readRaw(path) {
   try {
@@ -5862,7 +5860,7 @@ function composerOverrides(runMode, env = process.env) {
 }
 
 // src/execution/query-executor.ts
-import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash5, randomUUID as randomUUID3 } from "crypto";
 import {
   closeSync,
   existsSync,
@@ -5970,6 +5968,11 @@ function formatFileSize(bytes) {
   if (bytes < 1024 * 1024) return `${Math.round(bytes / 1024)}KB`;
   return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
 }
+function notInlinedRef(file) {
+  const link = file.downloadUrl && isCapabilityServableMime(file.mimeType) ? file.downloadUrl : void 0;
+  if (!file.fileId) return link ?? "read it with get_attachment (see list_task_files)";
+  return `read it with get_attachment("${file.fileId}")${link ? ` or download: ${link}` : ""}`;
+}
 function formatChatFile(file) {
   const sizeStr = file.fileSize ? `, ${formatFileSize(file.fileSize)}` : "";
   if (file.content && file.contentEncoding === "utf-8") {
@@ -5981,7 +5984,7 @@ function formatChatFile(file) {
     ];
   }
   if (!file.content) {
-    return [`[Attached: ${file.fileName} (${file.mimeType}${sizeStr})]: ${file.downloadUrl}`];
+    return [`[Attached: ${file.fileName} (${file.mimeType}${sizeStr})]: ${notInlinedRef(file)}`];
   }
   if (file.content && file.contentEncoding === "base64") {
     const link = file.downloadUrl ? ` or download: ${file.downloadUrl}` : "";
@@ -6018,7 +6021,7 @@ function formatTaskFile(file) {
     ];
   }
   if (!file.content) {
-    return [`- **${file.fileName}** (${file.mimeType}): ${file.downloadUrl}`];
+    return [`- **${file.fileName}** (${file.mimeType}): ${notInlinedRef(file)}`];
   }
   return [];
 }
@@ -6367,8 +6370,8 @@ var PACK_RUNNER_FOOTER = [
 function resolveSinglePodPackBranch(context) {
   return context.githubBranch || context.baseBranch;
 }
-function isPackRunnerSession(mode, isAuto, isParentTask) {
-  return mode === "pack" || mode === "pm" && !!isAuto && !!isParentTask;
+function isPackRunnerSession(mode) {
+  return mode === "pack";
 }
 function buildSinglePodPackPrompt(context, setupLog) {
   const packBranch = resolveSinglePodPackBranch(context);
@@ -6937,7 +6940,7 @@ Git:`,
 function buildSystemPrompt(mode, context, config, setupLog, agentMode) {
   const isPm = mode === "pm";
   const isPmActive = isPm && agentMode === "building";
-  if (isPackRunnerSession(mode, config.isAuto, context.isParentTask)) {
+  if (isPackRunnerSession(mode)) {
     return buildSinglePodPackPrompt(context, setupLog);
   }
   const parts = isPmActive ? buildActivePreamble(context, config.workspaceDir) : isPm ? buildPmPreamble(context) : buildTaskAgentPreamble(context, config.workspaceDir, config.runtimeTui, agentMode);
@@ -7236,7 +7239,7 @@ function buildInstructions(mode, context, scenario, agentMode, isAuto) {
   return parts;
 }
 async function buildInitialPrompt(mode, context, isAuto, agentMode) {
-  const isPackRunner = isPackRunnerSession(mode, isAuto, context.isParentTask);
+  const isPackRunner = isPackRunnerSession(mode);
   if (!isPackRunner) {
     const sessionRelaunch = buildRelaunchWithSession(mode, context, agentMode, isAuto);
     if (sessionRelaunch) {
@@ -8091,7 +8094,7 @@ var listTaskFilesContract = defineToolContract({
 var getAttachmentContract = defineToolContract({
   name: "get_attachment",
   agent: {
-    description: "Fetch one task file's content plus metadata by file ID. This is the way to read attachment bytes: a document `downloadUrl` (anything that is not an image or video) answers 404 without a signed-in project member's session, so do not curl or WebFetch it from the pod. Call list_task_files first to discover IDs and check sizes \u2014 large binaries may be truncated by the service's size limit. Pass task_id when the file is attached to another card in this project, such as the pack parent.",
+    description: "Fetch one task file by ID. Text and images under the inline size caps come back inline. Any other file (PDF, Word, Excel, zip, large logs) is saved into this pod, and the result names the local path: open it with the Read tool or Bash. A document downloadUrl answers 404 without a signed-in project member's session, so do not curl or WebFetch it. Call list_task_files first to discover IDs and sizes. Pass task_id when the file is attached to another card in this project, such as the pack parent.",
     fields: {
       fileId: f.string({ desc: "The file ID to retrieve" }),
       task_id: agentTaskIdOrSlug
@@ -9343,6 +9346,109 @@ var evaluateQuestionsContract = defineToolContract({
   }
 });
 var evaluateContracts = [evaluateQuestionsContract];
+var listSiteAssetTargetsContract = defineToolContract({
+  name: "list_site_asset_targets",
+  agent: {
+    description: "List the registered static-site media targets this card's project may publish to.",
+    fields: {}
+  },
+  mcp: {
+    description: "List registered static-site media targets for a project.",
+    fields: { projectId: mcpProjectId }
+  }
+});
+var uploadSiteAssetsContract = defineToolContract({
+  name: "upload_site_assets",
+  agent: {
+    description: "Upload up to 50 workspace image or video files (25 MiB each) to a registered site using Conveyor identity. Call list_site_asset_targets first for the registered siteId. Returns verified immutable keys and public URLs per file.",
+    fields: {
+      siteId: f.string({ min: 1, max: 100 }),
+      paths: f.array(f.string({ min: 1 }), { min: 1, max: 50 })
+    }
+  },
+  mcp: {
+    description: "Upload up to 50 workspace image or video files (25 MiB each) to a registered site using Conveyor identity. Call list_site_asset_targets first for the registered siteId. Returns verified immutable keys and public URLs per file.",
+    fields: {
+      projectId: mcpProjectId,
+      siteId: f.string({ min: 1, max: 100 }),
+      paths: f.array(f.string({ min: 1 }), { min: 1, max: 50 })
+    }
+  }
+});
+var siteAssetsContracts = [
+  listSiteAssetTargetsContract,
+  uploadSiteAssetsContract
+];
+function validateSiteAssetResult(value, expected) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new Error("verify returned invalid JSON");
+  const result = value;
+  for (const key of ["key", "publicUrl", "sha256", "sizeBytes", "mimeType"]) {
+    if (result[key] !== expected[key])
+      throw new Error(`verify response ${key} does not match upload capability`);
+  }
+  if (result.status !== "uploaded" && result.status !== "existing")
+    throw new Error("verify response has invalid status");
+  return { ...expected, status: result.status };
+}
+async function readReply(response) {
+  if (!response.body) throw new Error("verify returned an empty response");
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let text = "";
+  let size = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > 16384) throw new Error("verify response exceeds 16KiB");
+      text += decoder.decode(value, { stream: true });
+    }
+    text += decoder.decode();
+  } finally {
+    await reader.cancel();
+    reader.releaseLock();
+  }
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new Error("verify returned invalid JSON");
+  }
+}
+async function transferSiteAsset(capability, bytes, expected) {
+  const options = {
+    headers: capability.headers,
+    redirect: "error",
+    signal: AbortSignal.timeout(6e4)
+  };
+  let put;
+  try {
+    put = await fetch(capability.uploadUrl, { ...options, method: "PUT", body: bytes });
+  } catch {
+    throw new Error("Upload transfer failed or timed out; retry this file");
+  }
+  await put.body?.cancel();
+  if (!put.ok) throw new Error(`upload HTTP ${put.status}; retry or check site access`);
+  let verify;
+  try {
+    verify = await fetch(`${new URL(capability.uploadUrl).origin}/_site-assets/verify`, {
+      ...options,
+      method: "POST",
+      signal: AbortSignal.timeout(6e4)
+    });
+  } catch {
+    throw new Error("Upload verification failed or timed out; retry this file");
+  }
+  if (!verify.ok) {
+    await verify.body?.cancel();
+    throw new Error(`verify HTTP ${verify.status}; retry or check site access`);
+  }
+  return {
+    ...validateSiteAssetResult(await readReply(verify), expected),
+    status: put.status === 201 ? "uploaded" : "existing"
+  };
+}
 var TOOL_CONTRACTS = Object.fromEntries(
   [
     ...tasksContracts,
@@ -9361,7 +9467,8 @@ var TOOL_CONTRACTS = Object.fromEntries(
     ...logsContracts,
     ...ciWaitContracts,
     ...evaluateContracts,
-    ...incidentsContracts
+    ...incidentsContracts,
+    ...siteAssetsContracts
   ].map((contract) => [contract.name, contract])
 );
 
@@ -9407,6 +9514,97 @@ function formatCliEvent(e) {
   return formatter ? formatter(e) : JSON.stringify(e);
 }
 
+// src/tools/attachment-download.ts
+import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
+import { createWriteStream } from "fs";
+import { mkdir as mkdir6, rename, rm as rm4 } from "fs/promises";
+import { basename as basename2, join as join17 } from "path";
+import { Readable, Transform } from "stream";
+import { pipeline } from "stream/promises";
+var DOWNLOAD_TIMEOUT_MS = 12e4;
+var AttachmentSaveError = class extends Error {
+  constructor(code) {
+    super(`Attachment save failed: ${code}`);
+    this.code = code;
+    this.name = "AttachmentSaveError";
+  }
+  code;
+};
+function attachmentsRoot() {
+  return join17(sessionTempBase(), "conveyor-attachments");
+}
+function safeAttachmentId(fileId) {
+  if (/^[A-Za-z0-9_-]{1,64}$/.test(fileId)) return fileId;
+  return createHash4("sha256").update(fileId).digest("hex").slice(0, 32);
+}
+function safeAttachmentName(fileName) {
+  const cleaned = basename2(fileName).replace(/[^A-Za-z0-9._-]/g, "_").replace(/^[.-]+/, "").slice(-120);
+  return cleaned || "attachment";
+}
+function byteCap(limit) {
+  let seen = 0;
+  const stream = new Transform({
+    transform(chunk, _enc, callback) {
+      seen += chunk.length;
+      if (seen > limit) callback(new AttachmentSaveError("too_large"));
+      else callback(null, chunk);
+    }
+  });
+  return Object.assign(stream, { bytes: () => seen });
+}
+function classify(err) {
+  if (err instanceof AttachmentSaveError) return err;
+  if (err instanceof Error) {
+    if (err.name === "TimeoutError" || err.name === "AbortError") {
+      return new AttachmentSaveError("timeout");
+    }
+    if ("syscall" in err && typeof err.syscall === "string" && "path" in err) {
+      return new AttachmentSaveError("write_failed");
+    }
+  }
+  return new AttachmentSaveError("network");
+}
+async function fetchAttachment(url) {
+  let res;
+  try {
+    res = await fetch(url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
+  } catch (err) {
+    throw classify(err);
+  }
+  if (!res.ok) throw new AttachmentSaveError(`http_${res.status}`);
+  const declared = Number(res.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > MAX_FILE_SIZE_BYTES) {
+    throw new AttachmentSaveError("too_large");
+  }
+  if (!res.body) throw new AttachmentSaveError("network");
+  return res;
+}
+async function saveAttachmentToDisk(input) {
+  const res = await fetchAttachment(input.url);
+  const dir = join17(attachmentsRoot(), safeAttachmentId(input.fileId));
+  const dest = join17(dir, safeAttachmentName(input.fileName));
+  const part = `${dest}.${randomUUID2()}.part`;
+  try {
+    await mkdir6(dir, { recursive: true, mode: 448 });
+  } catch {
+    throw new AttachmentSaveError("write_failed");
+  }
+  const cap = byteCap(MAX_FILE_SIZE_BYTES);
+  try {
+    await pipeline(
+      Readable.fromWeb(res.body),
+      cap,
+      createWriteStream(part, { mode: 384 })
+    );
+    await rename(part, dest);
+  } catch (err) {
+    await rm4(part, { force: true }).catch(() => {
+    });
+    throw classify(err);
+  }
+  return { path: dest, bytes: cap.bytes() };
+}
+
 // src/tools/task-context-tools.ts
 function buildReadTaskChatTool(connection) {
   return defineContractTool(
@@ -9595,18 +9793,23 @@ function buildGetAttachmentTool(connection) {
         const file = await connection.call("getTaskFile", {
           sessionId: connection.sessionId,
           fileId,
-          ...task_id ? { taskId: task_id } : {}
+          ...task_id ? { taskId: task_id } : {},
+          agentDownload: true
         });
-        const { content: rawContent, ...metadata } = file;
-        const content = [
-          { type: "text", text: JSON.stringify(metadata, null, 2) }
-        ];
+        const { content: rawContent, agentDownloadUrl, ...metadata } = file;
         if (rawContent && file.contentEncoding === "base64" && isImageMimeType(file.mimeType)) {
-          content.push(imageBlock(rawContent, file.mimeType));
-        } else if (rawContent) {
-          content[0] = { type: "text", text: JSON.stringify(file, null, 2) };
+          return {
+            content: [
+              { type: "text", text: JSON.stringify(metadata, null, 2) },
+              imageBlock(rawContent, file.mimeType)
+            ]
+          };
         }
-        return { content };
+        if (rawContent) {
+          return textResult(JSON.stringify({ ...metadata, content: rawContent }, null, 2));
+        }
+        if (!agentDownloadUrl) return textResult(JSON.stringify(metadata, null, 2));
+        return textResult(await saveForAgent(metadata, agentDownloadUrl));
       } catch (error) {
         return textResult(
           `Failed to get task file: ${error instanceof Error ? error.message : "Unknown error"}`
@@ -9616,6 +9819,26 @@ function buildGetAttachmentTool(connection) {
     { annotations: { readOnlyHint: true } }
   );
 }
+async function saveForAgent(metadata, url) {
+  const { downloadUrl: _documentLink, ...rest } = metadata;
+  const shown = isCapabilityServableMime(metadata.mimeType) ? metadata : rest;
+  const header = JSON.stringify(shown, null, 2);
+  try {
+    const saved = await saveAttachmentToDisk({
+      url,
+      fileId: metadata.id,
+      fileName: metadata.fileName
+    });
+    return `${header}
+
+Saved to ${saved.path} (${saved.bytes} bytes). Open it with the Read tool (a PDF over 10 pages needs the pages parameter) or process it with Bash.`;
+  } catch (error) {
+    const code = error instanceof AttachmentSaveError ? error.code : "network";
+    return `${header}
+
+Could not save the file (${code}). Call get_attachment again; each call mints a fresh 5-minute link.`;
+  }
+}
 function buildTaskContextTools(connection) {
   return [
     buildReadTaskChatTool(connection),
@@ -10160,7 +10383,7 @@ function buildMutationTools(connection, config) {
 }
 
 // src/tools/attachment-tools.ts
-import { basename as basename2, extname, isAbsolute, join as join17 } from "path";
+import { basename as basename3, extname, isAbsolute, join as join18 } from "path";
 var MIME_BY_EXT = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -10239,7 +10462,7 @@ function buildUploadAttachmentTool(connection, config) {
     async ({ path, title, comment, tags, showcase, supersedes }) => {
       const caption = title ?? comment;
       try {
-        const filePath = isAbsolute(path) ? path : join17(config.workspaceDir, path);
+        const filePath = isAbsolute(path) ? path : join18(config.workspaceDir, path);
         const mimeType = inferMimeType(filePath);
         const info = await statWorkspacePath(filePath);
         if (!info.isFile) {
@@ -10250,7 +10473,7 @@ function buildUploadAttachmentTool(connection, config) {
             `File is ${info.size} bytes \u2014 exceeds the ${MAX_FILE_SIZE_BYTES} byte (25MB) upload limit.`
           );
         }
-        const fileName = basename2(filePath);
+        const fileName = basename3(filePath);
         const { fileId, uploadUrl } = await connection.call("requestFileUpload", {
           sessionId: connection.sessionId,
           fileName,
@@ -10899,7 +11122,7 @@ import { z as z9 } from "zod";
 
 // src/execution/context-path-verifier.ts
 import { readFile as readFile4 } from "fs/promises";
-import { isAbsolute as isAbsolute2, join as join18, normalize } from "path";
+import { isAbsolute as isAbsolute2, join as join19, normalize } from "path";
 var PROBLEM_TEXT = {
   not_found: "does not exist in the repo",
   expected_folder: "is a file, not a folder \u2014 use type 'file', 'rule', or 'doc'",
@@ -10944,7 +11167,7 @@ async function verifyContextPaths(links, workspaceDir) {
       problems.push({ type: link.type, path: link.path, reason: shape });
       continue;
     }
-    const absolutePath = join18(workspaceDir, toRelativePath(link.path));
+    const absolutePath = join19(workspaceDir, toRelativePath(link.path));
     const stat = await statWorkspacePath(absolutePath);
     const wantsDirectory = expectsDirectory(link.type);
     if (!stat.exists) {
@@ -11893,8 +12116,60 @@ function buildEvaluateTools(connection, projectId) {
   ];
 }
 
+// src/tools/site-asset-tools.ts
+import crypto from "crypto";
+import { extname as extname2, isAbsolute as isAbsolute3, join as join20 } from "path";
+var MAX_SITE_ASSET_BYTES = 25 * 1024 * 1024;
+function buildSiteAssetTools(connection, config, projectId) {
+  const list = defineContractTool(listSiteAssetTargetsContract, async () => {
+    try {
+      return textResult(
+        JSON.stringify(await connection.call("listSiteAssetTargets", { projectId }), null, 2)
+      );
+    } catch (error) {
+      return textResult(
+        `Failed to list static-site targets: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+    }
+  });
+  const upload = defineContractTool(uploadSiteAssetsContract, async ({ siteId, paths }) => {
+    const results = [];
+    for (const requestedPath of [...paths].sort()) {
+      const path = isAbsolute3(requestedPath) ? requestedPath : join20(config.workspaceDir, requestedPath);
+      try {
+        const info = await statWorkspacePath(path);
+        if (!info.isFile) throw new Error("not a file");
+        if (info.size > MAX_SITE_ASSET_BYTES) throw new Error("asset exceeds 25MiB limit");
+        const bytes = await readWorkspaceBytes(path);
+        if (bytes.length !== info.size || bytes.length > MAX_SITE_ASSET_BYTES)
+          throw new Error("asset changed during read or exceeds 25MiB limit");
+        const sha256 = crypto.createHash("sha256").update(bytes).digest("hex");
+        const capability = await connection.call("requestSiteAssetUpload", {
+          projectId,
+          siteId,
+          sha256,
+          ext: extname2(path).slice(1).toLowerCase(),
+          sizeBytes: bytes.length
+        });
+        const result = await transferSiteAsset(capability, new Uint8Array(bytes), {
+          key: capability.key,
+          publicUrl: capability.publicUrl,
+          sha256,
+          sizeBytes: bytes.length,
+          mimeType: capability.headers["content-type"]
+        });
+        results.push({ path, ...result });
+      } catch (error) {
+        results.push({ path, error: error instanceof Error ? error.message : "Upload failed" });
+      }
+    }
+    return textResult(JSON.stringify({ results }, null, 2));
+  });
+  return [list, upload];
+}
+
 // src/tools/connected-tools.ts
-function connectedToolsFor(connection, context) {
+function connectedToolsFor(connection, context, config) {
   const projectId = context?.projectId;
   if (!projectId) return [];
   return [
@@ -11910,7 +12185,8 @@ function connectedToolsFor(connection, context) {
     ...buildEvaluateTools(connection, projectId),
     ...context.googleAnalyticsConfigured ? [buildAnalyticsSummaryTool(connection, projectId)] : [],
     ...context.gcpLogsConfigured ? [buildQueryGcpLogsTool(connection, projectId)] : [],
-    ...context.grafanaLogsConfigured ? [buildQueryGrafanaLogsTool(connection, projectId)] : []
+    ...context.grafanaLogsConfigured ? [buildQueryGrafanaLogsTool(connection, projectId)] : [],
+    ...config && context.siteAssetTargetsConfigured ? buildSiteAssetTools(connection, config, projectId) : []
   ];
 }
 
@@ -12125,7 +12401,7 @@ function buildConveyorTools(connection, config, context, agentMode) {
   const handoffTools = config.mode === "pm" && (effectiveMode === "discovery" || effectiveMode === "auto") ? [buildHandoffTool(connection)] : [];
   const emergencyTools = [buildForceUpdateTaskStatusTool(connection)];
   const glossaryTools = glossaryToolsFor(connection, config, context);
-  const connectedTools = connectedToolsFor(connection, context);
+  const connectedTools = connectedToolsFor(connection, context, config);
   const isPack = config.mode === "pack" || Boolean(context?.isParentTask);
   return withAlwaysLoad(
     [
@@ -12709,7 +12985,7 @@ function fallbackResetIso(rateLimitType, now = Date.now()) {
 }
 
 // src/execution/tool-access.ts
-import { isAbsolute as isAbsolute3, posix } from "path";
+import { isAbsolute as isAbsolute4, posix } from "path";
 
 // src/execution/task-property-utils.ts
 function collectMissingProps(taskProps) {
@@ -12855,7 +13131,7 @@ function isPlanFile(input) {
 }
 function isScratchPath(input) {
   const filePath = String(input.file_path ?? input.path ?? "");
-  if (!isAbsolute3(filePath)) return false;
+  if (!isAbsolute4(filePath)) return false;
   return posix.normalize(filePath).startsWith("/tmp/");
 }
 var ARTIFACT_DENIED = "Publish deliverables on the card with upload_attachment; the Artifact tool is not available in Conveyor sessions.";
@@ -13186,7 +13462,7 @@ function buildHooks(host) {
   };
 }
 function taskIdToSessionUuid(lineageKey) {
-  const hash = createHash4("sha256").update(lineageKey).digest("hex");
+  const hash = createHash5("sha256").update(lineageKey).digest("hex");
   return `${hash.slice(0, 8)}-${hash.slice(8, 12)}-8${hash.slice(13, 16)}-a${hash.slice(17, 20)}-${hash.slice(20, 32)}`;
 }
 function sessionLineageKey(taskId, agentMode, runnerMode) {
@@ -13323,12 +13599,6 @@ function buildQueryOptions(host, context) {
     context,
     {
       ...host.config,
-      // ModeController's live value, NOT the boot-frozen `config.isAuto` the
-      // spread carries: the pack gate reads this, and the turn prompt below
-      // gates on `host.isAuto`. Letting the two read different sources is how
-      // a codespace parent card got "you cannot write or edit files" beside
-      // "run /conveyor-build".
-      isAuto: host.isAuto,
       runtimeTui: process.env.CONVEYOR_TUI
     },
     host.setupLog,
@@ -13800,7 +14070,7 @@ function freshSessionOptions(host, context, options) {
     markSpawnedTranscript(host.config.workspaceDir, lineageUuid);
     return { ...options, sessionId: lineageUuid };
   }
-  return { ...options, sessionId: randomUUID2() };
+  return { ...options, sessionId: randomUUID3() };
 }
 async function buildRetryQuery(host, context, options, lastErrorWasImage) {
   if (lastErrorWasImage) {
@@ -15067,11 +15337,9 @@ var SessionRunner = class _SessionRunner {
     this.config = config;
     this.callbacks = callbacks;
     this.connection = new AgentConnection(config.connection);
-    const portVisibility = new CodespacePortVisibility();
     this.portDiscovery = deps.portDiscovery ?? new PortDiscovery({
       report: (ports) => this.connection.reportDiscoveredPorts(ports),
-      annotate: (ports) => loadAndAnnotateDiscoveredPorts(config.workspaceDir, ports),
-      onReported: (ports) => portVisibility.ensureVisible(ports.map(({ port }) => port))
+      annotate: (ports) => loadAndAnnotateDiscoveredPorts(config.workspaceDir, ports)
     });
     const initialMode = config.agentMode ?? (config.runnerMode === "pm" ? config.isAuto ? "auto" : "discovery" : "building");
     this.mode = new ModeController(initialMode, config.runnerMode, config.isAuto);
@@ -15404,7 +15672,6 @@ var SessionRunner = class _SessionRunner {
     await this.setState("connected");
     this.connection.sendEvent({ type: "connected", sessionId: this.sessionId });
     this.wireConnectionCallbacks();
-    registerBootMilestoneSocketFallback((key) => this.connection.reportBootMilestone(key));
     this.lifecycle.startHeartbeat();
     this.loopLag.start();
     this.connection.startHeartbeatWorker(this.loopLag.sharedBuffer);
@@ -16189,6 +16456,7 @@ var SessionRunner = class _SessionRunner {
       baseBranch: ctx.baseBranch ?? "",
       projectName: ctx.projectName ?? null,
       projectDescription: ctx.projectDescription ?? null,
+      siteAssetTargetsConfigured: ctx.siteAssetTargetsConfigured ?? false,
       githubPRUrl: ctx.githubPRUrl,
       claudeSessionId: ctx.claudeSessionId ?? null,
       lastSeenMessageId: ctx.lastSeenMessageId ?? null,
@@ -16585,7 +16853,7 @@ ${outcome.failures.join("\n")}
   }
 };
 
-// src/setup/codespace.ts
+// src/setup/unshallow.ts
 import { execSync } from "child_process";
 function unshallowRepo(workspaceDir) {
   try {

package/dist/{chunk-37J5MMQT.js → chunk-6CKFZ4JG.js}

@@ -1,6 +1,6 @@
 import {
   redactToken
-} from "./chunk-Q4FQOJ7D.js";
+} from "./chunk-VIUZS7V4.js";
 
 // src/boot/graphify.ts
 var USER_HOME_MOUNT = "/mnt/conveyor-users";

package/dist/{chunk-4H75HQVM.js → chunk-A43UZ5RC.js}

@@ -8,10 +8,10 @@ import {
   readWorkspaceBytes,
   statWorkspacePath,
   workspacePathExists
-} from "./chunk-KMBMW3J3.js";
+} from "./chunk-SKAFB6DG.js";
 import {
   reportBootMilestone
-} from "./chunk-Q4FQOJ7D.js";
+} from "./chunk-VIUZS7V4.js";
 import {
   runSetupCommand,
   runStartCommand,