@scalequality/cli 0.4.3 → 0.4.4

package/dist/connect.build.json

@@ -1,5 +1,5 @@
 {
   "sdkVersion": "0.3.281",
-  "sha256": "937ecca7cbaa57b4fd879b2075581dcb73186b336b3fedfac6537b40305c6912",
-  "sourceCommit": "91e17f6320627a49e1c5864c7d2618e9552b705d"
+  "sha256": "b57f71ab28de4214c669f8afde0190f89a117360c42329b47f66d2801739438c",
+  "sourceCommit": "d4755e6bee3c5df77d1da8eed7f5b4f577072e61"
 }

package/dist/connect.cjs

@@ -10549,6 +10549,21 @@ ${latest.summary}
         blocks.push(runId ? await this.toolContext("get_measurement_findings", { ...args, runId, ...repoFullName ? { repoFullName } : {} }, "measurement_findings") : "<measurement_findings>No completed measurement was found for this scope.</measurement_findings>");
       }
     }
+    for (const raw of (Array.isArray(payload.sessionContext) ? payload.sessionContext : []).slice(0, 8)) {
+      const c = raw;
+      const title = String(c.title ?? "Parallel task").replace(/"/g, "").slice(0, 120);
+      const facts = [
+        typeof c.answer === "string" && c.answer ? `What it reported:
+${c.answer.slice(0, 4e3)}` : "It has not reported an answer yet.",
+        c.change ? `Change: ${JSON.stringify(c.change)}` : null,
+        c.tests ? `Last test run: ${JSON.stringify(c.tests)}` : null,
+        c.measurement ? `ScaleQuality measurement: ${JSON.stringify(c.measurement)}` : null,
+        Array.isArray(c.pullRequests) && c.pullRequests.length ? `Pull requests: ${c.pullRequests.join(", ")}` : null
+      ].filter(Boolean).join("\n");
+      blocks.push(`<parallel_task_result title="${title}">
+${facts}
+</parallel_task_result>`);
+    }
     return { images, blocks };
   }
   async toolContext(name, args, tag) {
@@ -10778,7 +10793,7 @@ ${text3}`;
         resumeAt: resume ? at : null,
         abortController: ac,
         reasoning: reasoning.options,
-        env: buildEngineEnv(boot, this.deps.configDir, model, { local: this.local, reasoning, output, extraEnv: this.projectEnv() }),
+        env: buildEngineEnv(boot, this.deps.configDir, model, { local: this.local, reasoning, output, extraEnv: this.projectEnv(), plan: planMode }),
         mcpServer: this.mcpServer,
         systemAppend: await this.systemAppend(),
         policy: {
@@ -11425,6 +11440,13 @@ function safeEnv(env) {
   for (const [k, v] of Object.entries(env)) if (/^[A-Z_][A-Z0-9_]{0,63}$/.test(k) && !RESERVED_ENV.test(k) && typeof v === "string" && v.length <= 8192) out2[k] = v;
   return out2;
 }
+var scrubAvailable = null;
+function subprocessScrubAvailable() {
+  if (scrubAvailable !== null) return scrubAvailable;
+  if (process.platform !== "linux") return scrubAvailable = true;
+  const r = (0, import_child_process3.spawnSync)("bwrap", ["--ro-bind", "/", "/", "--dev", "/dev", "--proc", "/proc", "true"], { timeout: 5e3, stdio: "ignore" });
+  return scrubAvailable = !r.error && r.status === 0;
+}
 function buildEngineEnv(boot, configDir, model, opts = {}) {
   const base = sandboxTestEnv();
   delete base.NODE_ENV;
@@ -11457,8 +11479,11 @@ function buildEngineEnv(boot, configDir, model, opts = {}) {
     DISABLE_AUTOUPDATER: "1",
     DISABLE_GROWTHBOOK: "1",
     CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1",
-    // Strips provider credentials from the engine's own subprocesses (Bash, hooks).
-    CLAUDE_CODE_SUBPROCESS_ENV_SCRUB: "1",
+    // Strips provider credentials from the engine's own subprocesses (Bash, hooks) where it can: on Linux the
+    // engine needs a working bubblewrap for it and refuses to start without one (the Fargate task has none), and
+    // it also forces the permission mode back to default, so a plan-mode turn runs without it. Without it, the
+    // environment is the allowlist above and the policy denies reading the credentials from a command.
+    CLAUDE_CODE_SUBPROCESS_ENV_SCRUB: opts.plan || !subprocessScrubAvailable() ? "0" : "1",
     BASH_DEFAULT_TIMEOUT_MS: String(5 * 6e4),
     BASH_MAX_TIMEOUT_MS: String(10 * 6e4),
     GIT_TERMINAL_PROMPT: "0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalequality/cli",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "ScaleQuality CLI. Connect your computer to the ScaleQuality AI Workspace (`scalequality login`), run its coding engine in any folder of your computer, and import your Claude Code and Codex conversations.",
   "type": "module",
   "bin": {