@serviceme/devtools-core 0.3.2 → 0.3.4

package/dist/index.js

@@ -59,6 +59,7 @@ __export(src_exports, {
   EnvironmentInspector: () => EnvironmentInspector,
   FsIdentityFileBackend: () => FsIdentityFileBackend,
   FsToolboxFileBackend: () => FsToolboxFileBackend,
+  GIT_PROXY_PATH_SUFFIX: () => GIT_PROXY_PATH_SUFFIX,
   GitClient: () => GitClient,
   GitError: () => GitError,
   GitHubAuthProvider: () => GitHubAuthProvider,
@@ -125,6 +126,7 @@ __export(src_exports, {
   bootstrapPhase5Placeholders: () => bootstrapPhase5Placeholders,
   buildDefaultReposFile: () => buildDefaultReposFile,
   buildGitHubLocalEmail: () => buildGitHubLocalEmail,
+  buildGitProxyBase: () => buildGitProxyBase,
   buildSignedHeaders: () => buildSignedHeaders,
   copilotDoctor: () => copilotDoctor,
   copilotPrompt: () => copilotPrompt,
@@ -652,6 +654,50 @@ var AccessControl = class {
   }
 };
 
+// src/logger.ts
+var noopLogger = {
+  debug() {
+  },
+  info() {
+  },
+  warn() {
+  },
+  error() {
+  }
+};
+function formatArgs(args) {
+  return args.map((arg) => {
+    if (typeof arg === "string") {
+      return arg;
+    }
+    try {
+      return JSON.stringify(arg);
+    } catch {
+      return String(arg);
+    }
+  }).join(" ");
+}
+function createConsoleLogger(prefix = "serviceme") {
+  return {
+    debug(message, ...args) {
+      process.stderr.write(`[${prefix}] DEBUG ${message} ${formatArgs(args)}
+`);
+    },
+    info(message, ...args) {
+      process.stderr.write(`[${prefix}] INFO ${message} ${formatArgs(args)}
+`);
+    },
+    warn(message, ...args) {
+      process.stderr.write(`[${prefix}] WARN ${message} ${formatArgs(args)}
+`);
+    },
+    error(message, ...args) {
+      process.stderr.write(`[${prefix}] ERROR ${message} ${formatArgs(args)}
+`);
+    }
+  };
+}
+
 // src/auth/AuthStateManager.ts
 var import_node_events = require("events");
 var AuthStateManager = class {
@@ -814,6 +860,7 @@ var AuthCore = class {
     this.state = opts.stateManager ?? new AuthStateManager();
     this.tokenStore = opts.tokenStore;
     this.accessControl = opts.accessControl;
+    this.logger = opts.logger ?? noopLogger;
   }
   /** Snapshot of every account, the active provider, and the last error. */
   status() {
@@ -835,16 +882,28 @@ var AuthCore = class {
    */
   async login(provider, ui, shouldContinue) {
     const providerImpl = this.registry.get(provider);
+    this.logger.info("[AuthCore] Starting device-flow login", { provider });
     try {
       const initial = await providerImpl.requestDeviceFlow();
       await ui(initial);
+      if (!initial.deviceCode) {
+        this.logger.error("[AuthCore] Provider did not return deviceCode", provider);
+        throw new Error("Auth provider did not return deviceCode for device flow completion");
+      }
       const session = await providerImpl.completeDeviceFlow(
-        initial.userCode ? initial.deviceCode ?? "" : "",
-        shouldContinue
+        initial.deviceCode,
+        shouldContinue,
+        initial.pollIntervalMs
       );
-      return await this.persistSession(providerImpl, session);
+      const result = await this.persistSession(providerImpl, session);
+      this.logger.info("[AuthCore] Device-flow login completed", { provider });
+      return result;
     } catch (err) {
-      this.state.recordError(err instanceof Error ? err.message : String(err));
+      const message = err instanceof Error ? err.message : String(err);
+      this.logger.error("[AuthCore] Device-flow login failed", message, {
+        provider
+      });
+      this.state.recordError(message);
       throw err;
     }
   }
@@ -869,7 +928,10 @@ var AuthCore = class {
     if (!provider) return null;
     const account = this.state.getActiveAccount();
     if (!account) return null;
-    const envelope = await this.tokenStore.get({ provider, accountId: account.id });
+    const envelope = await this.tokenStore.get({
+      provider,
+      accountId: account.id
+    });
     if (!envelope) return null;
     return { provider, account, token: envelope.token };
   }
@@ -879,9 +941,15 @@ var AuthCore = class {
    * every account.
    */
   async logout(provider) {
+    this.logger.info("[AuthCore] Logout requested", {
+      provider: provider ?? "all"
+    });
     if (!provider) {
       for (const account of this.state.listAccounts()) {
-        await this.tokenStore.delete({ provider: account.provider, accountId: account.id });
+        await this.tokenStore.delete({
+          provider: account.provider,
+          accountId: account.id
+        });
         this.state.removeAccount(account.provider, account.id);
       }
       this.state.clearAll();
@@ -956,6 +1024,10 @@ var AuthCore = class {
       avatarUrl: meta.avatarUrl,
       expiresAt: meta.expiresAt ?? expiresAt
     };
+    this.logger.debug("[AuthCore] Persisting session", {
+      provider: meta.provider,
+      accountId: meta.id
+    });
     await this.tokenStore.set({ provider: meta.provider, accountId: meta.id }, session.token, {
       expiresAt
     });
@@ -1058,11 +1130,13 @@ var GitHubAuthProvider = class {
       userUrl: config.userUrl ?? DEFAULT_USER_URL,
       scope: config.scope ?? DEFAULT_SCOPE,
       minPollIntervalMs: config.minPollIntervalMs ?? 1e3,
-      maxPollIntervalMs: config.maxPollIntervalMs ?? 15e3,
+      maxPollIntervalMs: config.maxPollIntervalMs ?? 6e4,
       maxWaitMs: config.maxWaitMs,
       fetchImpl: config.fetchImpl ?? fetch,
       deviceCodeRetryBaseDelayMs: config.deviceCodeRetryBaseDelayMs ?? DEFAULT_DEVICE_CODE_RETRY_BASE_DELAY_MS
     };
+    this.logger = config.logger ?? noopLogger;
+    this.sleepImpl = config.sleepImpl ?? sleep;
   }
   async requestDeviceFlow(opts) {
     const body = JSON.stringify({
@@ -1071,6 +1145,10 @@ var GitHubAuthProvider = class {
     });
     let lastNetworkError;
     for (let attempt = 1; attempt <= DEVICE_CODE_MAX_ATTEMPTS; attempt++) {
+      this.logger.debug("[GitHubAuthProvider] Requesting device code", {
+        attempt,
+        maxAttempts: DEVICE_CODE_MAX_ATTEMPTS
+      });
       let resp;
       try {
         resp = await this.cfg.fetchImpl(this.cfg.deviceCodeUrl, {
@@ -1084,45 +1162,99 @@ var GitHubAuthProvider = class {
         });
       } catch (error) {
         if (!isTransientNetworkError(error) || attempt === DEVICE_CODE_MAX_ATTEMPTS) {
+          this.logger.error(
+            "[GitHubAuthProvider] Device-code request failed (non-retryable)",
+            error instanceof Error ? error.message : String(error),
+            { attempt }
+          );
           throw error;
         }
+        const delayMs = this.cfg.deviceCodeRetryBaseDelayMs * 2 ** (attempt - 1);
+        this.logger.warn(
+          "[GitHubAuthProvider] Transient network error requesting device code, retrying",
+          {
+            attempt,
+            delayMs,
+            error: error instanceof Error ? error.message : String(error)
+          }
+        );
         lastNetworkError = error;
-        await sleep(this.cfg.deviceCodeRetryBaseDelayMs * 2 ** (attempt - 1));
+        await this.sleepImpl(delayMs);
         continue;
       }
       if (!resp.ok) {
+        this.logger.error(
+          "[GitHubAuthProvider] Device-code request rejected by GitHub",
+          `HTTP ${resp.status}`
+        );
         throw new Error(`GitHub device-code request failed: HTTP ${resp.status}`);
       }
       const data = await resp.json();
       if (!data.device_code || !data.user_code || !data.verification_uri) {
+        this.logger.error(
+          "[GitHubAuthProvider] Device-code response missing required fields",
+          JSON.stringify(Object.keys(data))
+        );
         throw new Error("GitHub device-code response missing required fields");
       }
+      this.logger.info("[GitHubAuthProvider] Device code obtained", {
+        userCode: data.user_code,
+        verificationUri: data.verification_uri,
+        expiresInSec: data.expires_in,
+        pollIntervalSec: data.interval
+      });
       return {
         provider: this.providerId,
+        deviceCode: data.device_code,
         userCode: data.user_code,
         verificationUrl: data.verification_uri,
         expiresAt: Date.now() + data.expires_in * 1e3,
+        pollIntervalMs: data.interval * 1e3,
         message: `Open ${data.verification_uri} and enter ${data.user_code}`
       };
     }
     throw lastNetworkError ?? new Error("GitHub device-code request failed");
   }
-  async completeDeviceFlow(deviceCode, shouldContinue) {
+  async completeDeviceFlow(deviceCode, shouldContinue, initialPollIntervalMs) {
     const start = Date.now();
-    let pollIntervalMs = this.cfg.minPollIntervalMs;
+    let pollIntervalMs = Math.max(this.cfg.minPollIntervalMs, initialPollIntervalMs ?? 0);
     let consecutiveSlowDown = 0;
+    let pollCount = 0;
+    this.logger.info("[GitHubAuthProvider] Starting device-flow polling", {
+      initialPollIntervalMs: pollIntervalMs,
+      maxWaitMs: this.cfg.maxWaitMs
+    });
     while (true) {
       if (shouldContinue && !shouldContinue()) {
+        this.logger.info("[GitHubAuthProvider] Device flow cancelled by caller", {
+          elapsedMs: Date.now() - start,
+          pollCount
+        });
         throw new Error("GitHub device flow cancelled by caller");
       }
       const elapsed = Date.now() - start;
       if (this.cfg.maxWaitMs !== void 0 && elapsed > this.cfg.maxWaitMs) {
+        this.logger.warn("[GitHubAuthProvider] Device flow exceeded max wait time", {
+          elapsedMs: elapsed,
+          maxWaitMs: this.cfg.maxWaitMs,
+          pollCount
+        });
         throw new Error("GitHub device flow exceeded max wait time");
       }
-      await sleep(pollIntervalMs);
+      await this.sleepImpl(pollIntervalMs);
       if (shouldContinue && !shouldContinue()) {
+        this.logger.info("[GitHubAuthProvider] Device flow cancelled by caller", {
+          elapsedMs: Date.now() - start,
+          pollCount
+        });
         throw new Error("GitHub device flow cancelled by caller");
       }
+      pollCount++;
+      this.logger.debug("[GitHubAuthProvider] Polling for authorization", {
+        pollCount,
+        elapsedMs: Date.now() - start,
+        pollIntervalMs
+      });
       let resp;
       try {
         resp = await this.cfg.fetchImpl(this.cfg.tokenUrl, {
@@ -1140,19 +1272,59 @@ var GitHubAuthProvider = class {
         });
       } catch (error) {
         if (!isTransientNetworkError(error)) {
+          this.logger.error(
+            "[GitHubAuthProvider] Non-retryable error while polling token endpoint",
+            error instanceof Error ? error.message : String(error),
+            { pollCount }
+          );
           throw error;
         }
-        pollIntervalMs = Math.min(Math.round(pollIntervalMs * 1.5), this.cfg.maxPollIntervalMs);
+        const nextPollIntervalMs = Math.min(
+          Math.round(pollIntervalMs * 1.5),
+          this.cfg.maxPollIntervalMs
+        );
+        this.logger.warn(
+          "[GitHubAuthProvider] Transient network error while polling, backing off",
+          {
+            pollCount,
+            error: error instanceof Error ? error.message : String(error),
+            previousPollIntervalMs: pollIntervalMs,
+            nextPollIntervalMs
+          }
+        );
+        pollIntervalMs = nextPollIntervalMs;
         continue;
       }
       if (!resp.ok) {
-        pollIntervalMs = Math.min(Math.round(pollIntervalMs * 1.5), this.cfg.maxPollIntervalMs);
+        const nextPollIntervalMs = Math.min(
+          Math.round(pollIntervalMs * 1.5),
+          this.cfg.maxPollIntervalMs
+        );
+        this.logger.warn(
+          "[GitHubAuthProvider] Token endpoint returned non-OK status, backing off",
+          {
+            pollCount,
+            status: resp.status,
+            previousPollIntervalMs: pollIntervalMs,
+            nextPollIntervalMs
+          }
+        );
+        pollIntervalMs = nextPollIntervalMs;
         continue;
       }
       const data = await resp.json();
       if (data.access_token) {
+        this.logger.info("[GitHubAuthProvider] Authorization granted, fetching user profile", {
+          pollCount,
+          elapsedMs: Date.now() - start
+        });
         const rawUser = await this.fetchGitHubUser(data.access_token);
         const email = await this.resolveEmail(data.access_token, rawUser);
+        this.logger.info("[GitHubAuthProvider] Device-flow login completed", {
+          pollCount,
+          elapsedMs: Date.now() - start,
+          login: rawUser.login
+        });
         return {
           token: data.access_token,
           refreshToken: data.refresh_token,
@@ -1167,22 +1339,42 @@ var GitHubAuthProvider = class {
         };
       }
       if (data.error === "authorization_pending") {
+        this.logger.debug("[GitHubAuthProvider] Authorization still pending", {
+          pollCount,
+          elapsedMs: Date.now() - start
+        });
         continue;
       }
       if (data.error === "slow_down") {
         consecutiveSlowDown++;
-        pollIntervalMs = Math.min(
-          Math.round(pollIntervalMs * 1.5 + Math.min(consecutiveSlowDown * 500, 2e3)),
-          this.cfg.maxPollIntervalMs
-        );
+        const nextPollIntervalMs = Math.min(pollIntervalMs + 5e3, this.cfg.maxPollIntervalMs);
+        this.logger.warn("[GitHubAuthProvider] GitHub requested slower polling (slow_down)", {
+          pollCount,
+          consecutiveSlowDown,
+          previousPollIntervalMs: pollIntervalMs,
+          nextPollIntervalMs
+        });
+        pollIntervalMs = nextPollIntervalMs;
         continue;
       }
       if (data.error === "access_denied") {
+        this.logger.warn("[GitHubAuthProvider] User denied authorization", {
+          pollCount
+        });
         throw new Error("User denied authorization");
       }
       if (data.error === "expired_token") {
+        this.logger.warn(
+          "[GitHubAuthProvider] Device code expired before authorization completed",
+          { pollCount, elapsedMs: Date.now() - start }
+        );
         throw new Error("GitHub device code expired \u2014 restart the flow");
       }
+      this.logger.error(
+        "[GitHubAuthProvider] Unexpected device-flow error from token endpoint",
+        data.error ?? "unknown",
+        { pollCount }
+      );
       throw new Error(`GitHub device flow error: ${data.error ?? "unknown"}`);
     }
   }
@@ -2057,10 +2249,20 @@ function isRecord(value) {
 function isNodeError(value) {
   return value instanceof Error && typeof value.code === "string";
 }
+var LOCK_PID_FILE = "pid";
+function isProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
 var FileLock = class {
   constructor(filePath, timeoutMs, retryMs) {
     this.acquired = false;
     this.dirPath = `${filePath}.lock`;
+    this.pidFilePath = path3.join(this.dirPath, LOCK_PID_FILE);
     this.timeoutMs = timeoutMs;
     this.retryMs = retryMs;
   }
@@ -2069,12 +2271,18 @@ var FileLock = class {
     while (true) {
       try {
         await fsp.mkdir(this.dirPath, { mode: LOCK_DIR_MODE });
+        await fsp.writeFile(this.pidFilePath, String(process.pid), "utf8").catch(() => void 0);
         this.acquired = true;
         return;
       } catch (err) {
         if (!isNodeError(err) || err.code !== "EEXIST") {
           throw err;
         }
+        const stale = await this.isStaleLock();
+        if (stale) {
+          await fsp.rm(this.dirPath, { recursive: true, force: true });
+          continue;
+        }
         if (Date.now() - start >= this.timeoutMs) {
           throw new Error(`IdentityStore lock acquisition timed out for ${this.dirPath}`);
         }
@@ -2082,6 +2290,16 @@ var FileLock = class {
       }
     }
   }
+  async isStaleLock() {
+    try {
+      const pidStr = await fsp.readFile(this.pidFilePath, "utf8");
+      const pid = Number.parseInt(pidStr.trim(), 10);
+      if (!Number.isFinite(pid) || pid <= 0) return true;
+      return !isProcessAlive(pid);
+    } catch {
+      return true;
+    }
+  }
   async release() {
     if (!this.acquired) return;
     this.acquired = false;
@@ -2507,12 +2725,43 @@ var TOOL_CHECK_TIMEOUT_MS = {
   pnpm: 15e3,
   nrm: 15e3
 };
+var POSIX_LOGIN_SHELL_FALLBACK_TOOLS = /* @__PURE__ */ new Set([
+  "npm",
+  "pnpm",
+  "nrm",
+  "node",
+  "dotnet",
+  "rtk"
+]);
 var ERROR_CODE_NOT_FOUND = 127;
 var ERROR_CODE_TIMEOUT = "ETIMEDOUT";
+var NVM_FALLBACK_DIRS = [
+  "/opt/homebrew/opt/nvm",
+  "/usr/local/opt/nvm",
+  "$HOME/.nvm"
+];
+function resolveUserLoginShell(platform3, envShell) {
+  const shell = envShell?.trim();
+  if (shell && shell.length > 0) {
+    return shell;
+  }
+  return platform3 === "darwin" ? "/bin/zsh" : "/bin/bash";
+}
+function buildNvmSourcingSnippet() {
+  const fallbackList = NVM_FALLBACK_DIRS.map((dir) => `"${dir}"`).join(" ");
+  return `for d in $NVM_DIR ${fallbackList}; do [ -n "$d" ] && [ -s "$d/nvm.sh" ] && export NVM_DIR="$d" && . "$d/nvm.sh" && break; done`;
+}
+function posixLoginShellArgs(platform3, envShell, command) {
+  return {
+    command: resolveUserLoginShell(platform3, envShell),
+    args: ["-lc", `${buildNvmSourcingSnippet()}; ${command}`]
+  };
+}
 var EnvironmentInspector = class {
   constructor(options = {}) {
     this.runCommandFn = options.runCommand ?? runCommand;
     this.platform = options.platform ?? process.platform;
+    this.shell = options.shell ?? process.env.SHELL;
   }
   async checkEnvironment() {
     const results = await Promise.all(
@@ -2550,6 +2799,21 @@ var EnvironmentInspector = class {
         timeoutMs: this.getToolTimeout(toolName)
       });
       return result.stdout.split(/\r?\n/).map((line) => line.trim()).find((line) => line.length > 0);
+    } catch {
+      if (this.shouldUsePosixLoginShellFallback(toolName)) {
+        return this.getToolPathFromLoginShell(toolName);
+      }
+      return void 0;
+    }
+  }
+  async getToolPathFromLoginShell(toolName) {
+    try {
+      const spawnArgs = posixLoginShellArgs(this.platform, this.shell, `command -v ${toolName}`);
+      const result = await this.runCommandFn(spawnArgs.command, {
+        args: spawnArgs.args,
+        timeoutMs: this.getToolTimeout(toolName)
+      });
+      return result.stdout.split(/\r?\n/).map((line) => line.trim()).find((line) => line.length > 0);
     } catch {
       return void 0;
     }
@@ -2574,12 +2838,31 @@ var EnvironmentInspector = class {
     }
   }
   async getToolVersion(toolName) {
-    const invocation = await this.getVersionInvocation(toolName);
-    const result = await this.runCommandFn(invocation.command, {
-      args: invocation.args,
-      timeoutMs: this.getToolTimeout(toolName)
-    });
-    return this.parseVersion(toolName, result.stdout || result.stderr);
+    try {
+      const invocation = await this.getVersionInvocation(toolName);
+      const result = await this.runCommandFn(invocation.command, {
+        args: invocation.args,
+        timeoutMs: this.getToolTimeout(toolName)
+      });
+      return this.parseVersion(toolName, result.stdout || result.stderr);
+    } catch (error) {
+      if (!this.shouldUsePosixLoginShellFallback(toolName)) {
+        throw error;
+      }
+      const fallbackArgs = posixLoginShellArgs(this.platform, this.shell, `${toolName} --version`);
+      const fallbackResult = await this.runCommandFn(fallbackArgs.command, {
+        args: fallbackArgs.args,
+        timeoutMs: this.getToolTimeout(toolName)
+      });
+      const fallbackOutput = (fallbackResult.stdout || fallbackResult.stderr).trim();
+      if (!fallbackOutput) {
+        throw error;
+      }
+      return this.parseVersion(toolName, fallbackOutput);
+    }
+  }
+  shouldUsePosixLoginShellFallback(toolName) {
+    return this.platform !== "win32" && POSIX_LOGIN_SHELL_FALLBACK_TOOLS.has(toolName);
   }
   async checkNvm() {
     if (this.platform === "win32") {
@@ -2601,11 +2884,9 @@ var EnvironmentInspector = class {
       }
     }
     try {
-      const result = await this.runCommandFn("/bin/bash", {
-        args: [
-          "-lc",
-          'export NVM_DIR="$HOME/.nvm"; [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"; nvm --version'
-        ],
+      const nvmArgs = posixLoginShellArgs(this.platform, this.shell, "nvm --version");
+      const result = await this.runCommandFn(nvmArgs.command, {
+        args: nvmArgs.args,
         timeoutMs: this.getToolTimeout("nvm")
       });
       return {
@@ -2629,7 +2910,7 @@ var EnvironmentInspector = class {
       };
     }
     try {
-      const result = await this.runCommandFn("dotnet", {
+      const result = await this.runCommandFn(dotnetPath, {
         args: ["nuget", "list", "source"],
         timeoutMs: this.getToolTimeout("nuget")
       });
@@ -2792,7 +3073,9 @@ var GitClient = class {
     }
     const targetUrl = useProxy ? remoteUrl : originalUrl ?? remoteUrl;
     const proxyUrl = this.rewriteRemoteUrl(repoId, targetUrl, useProxy);
-    await this.runOrThrow(["remote", "set-url", "origin", proxyUrl], { cwd: localPath });
+    await this.runOrThrow(["remote", "set-url", "origin", proxyUrl], {
+      cwd: localPath
+    });
     const before = await this.safeRevParse(localPath);
     await this.runOrThrow(["fetch", "origin"], { cwd: localPath });
     const after = await this.safeRevParse(localPath);
@@ -2828,7 +3111,9 @@ var GitClient = class {
       throw new Error(`no 'origin' remote configured at ${localPath}`);
     }
     const proxyUrl = this.rewriteRemoteUrl(repoId, remoteUrl, useProxy);
-    await this.runOrThrow(["remote", "set-url", "origin", proxyUrl], { cwd: localPath });
+    await this.runOrThrow(["remote", "set-url", "origin", proxyUrl], {
+      cwd: localPath
+    });
     const result = await this.spawner.spawn(
       ["push", "origin", `refs/heads/${branch}:refs/heads/${branch}`],
       { cwd: localPath }
@@ -2882,7 +3167,9 @@ var GitClient = class {
     return { commitSha: sha };
   }
   async runOrThrow(args, opts) {
-    const result = await this.spawner.spawn(args, { cwd: opts.cwd ?? process.cwd() });
+    const result = await this.spawner.spawn(args, {
+      cwd: opts.cwd ?? process.cwd()
+    });
     if (result.code !== 0) {
       throw new GitError(args, result);
     }
@@ -2897,7 +3184,9 @@ var GitClient = class {
     return url.length > 0 ? url : void 0;
   }
   async safeRevParse(localPath) {
-    const result = await this.spawner.spawn(["rev-parse", "HEAD"], { cwd: localPath });
+    const result = await this.spawner.spawn(["rev-parse", "HEAD"], {
+      cwd: localPath
+    });
     if (result.code !== 0) return "";
     return result.stdout.trim();
   }
@@ -2944,7 +3233,11 @@ var StubGitSpawner = class {
     this.calls.push({ args, cwd: opts.cwd });
     const next = this.script.shift();
     if (!next) {
-      return { stdout: "", stderr: `stub: no scripted response for ${args.join(" ")}`, code: 1 };
+      return {
+        stdout: "",
+        stderr: `stub: no scripted response for ${args.join(" ")}`,
+        code: 1
+      };
     }
     return next;
   }
@@ -2956,6 +3249,10 @@ function toFileUrl(absolutePath) {
   }
   return `file://${normalized}`;
 }
+var GIT_PROXY_PATH_SUFFIX = "/git-proxy";
+function buildGitProxyBase(serverBaseUrl) {
+  return `${serverBaseUrl.replace(/\/+$/, "")}${GIT_PROXY_PATH_SUFFIX}`;
+}
 
 // src/image/imageTools.ts
 var fs5 = __toESM(require("fs/promises"));
@@ -3160,50 +3457,6 @@ function detectIndent(text) {
   return 2;
 }
 
-// src/logger.ts
-var noopLogger = {
-  debug() {
-  },
-  info() {
-  },
-  warn() {
-  },
-  error() {
-  }
-};
-function formatArgs(args) {
-  return args.map((arg) => {
-    if (typeof arg === "string") {
-      return arg;
-    }
-    try {
-      return JSON.stringify(arg);
-    } catch {
-      return String(arg);
-    }
-  }).join(" ");
-}
-function createConsoleLogger(prefix = "serviceme") {
-  return {
-    debug(message, ...args) {
-      process.stderr.write(`[${prefix}] DEBUG ${message} ${formatArgs(args)}
-`);
-    },
-    info(message, ...args) {
-      process.stderr.write(`[${prefix}] INFO ${message} ${formatArgs(args)}
-`);
-    },
-    warn(message, ...args) {
-      process.stderr.write(`[${prefix}] WARN ${message} ${formatArgs(args)}
-`);
-    },
-    error(message, ...args) {
-      process.stderr.write(`[${prefix}] ERROR ${message} ${formatArgs(args)}
-`);
-    }
-  };
-}
-
 // src/paths/serverProxyGlobal.ts
 var import_node_crypto4 = require("crypto");
 var fs6 = __toESM(require("fs/promises"));
@@ -6853,10 +7106,19 @@ function coercePersistedToolbox(parsed) {
 function isNodeError2(value) {
   return value instanceof Error && typeof value.code === "string";
 }
+function isProcessAlive2(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
 var ToolboxFileLock = class {
   constructor(filePath, timeoutMs, retryMs) {
     this.acquired = false;
     this.dirPath = `${filePath}.lock`;
+    this.pidFilePath = path25.join(this.dirPath, "pid");
     this.timeoutMs = timeoutMs;
     this.retryMs = retryMs;
   }
@@ -6865,10 +7127,16 @@ var ToolboxFileLock = class {
     while (true) {
       try {
         await fsp2.mkdir(this.dirPath, { mode: LOCK_DIR_MODE2 });
+        await fsp2.writeFile(this.pidFilePath, String(process.pid), "utf8").catch(() => void 0);
         this.acquired = true;
         return;
       } catch (err) {
         if (!isNodeError2(err) || err.code !== "EEXIST") throw err;
+        const stale = await this.isStaleLock();
+        if (stale) {
+          await fsp2.rm(this.dirPath, { recursive: true, force: true });
+          continue;
+        }
         if (Date.now() - start >= this.timeoutMs) {
           throw new Error(`ToolboxStore lock acquisition timed out for ${this.dirPath}`);
         }
@@ -6876,6 +7144,16 @@ var ToolboxFileLock = class {
       }
     }
   }
+  async isStaleLock() {
+    try {
+      const pidStr = await fsp2.readFile(this.pidFilePath, "utf8");
+      const pid = Number.parseInt(pidStr.trim(), 10);
+      if (!Number.isFinite(pid) || pid <= 0) return true;
+      return !isProcessAlive2(pid);
+    } catch {
+      return true;
+    }
+  }
   async release() {
     if (!this.acquired) return;
     this.acquired = false;
@@ -7155,6 +7433,7 @@ var ToolboxCore = class {
   EnvironmentInspector,
   FsIdentityFileBackend,
   FsToolboxFileBackend,
+  GIT_PROXY_PATH_SUFFIX,
   GitClient,
   GitError,
   GitHubAuthProvider,
@@ -7221,6 +7500,7 @@ var ToolboxCore = class {
   bootstrapPhase5Placeholders,
   buildDefaultReposFile,
   buildGitHubLocalEmail,
+  buildGitProxyBase,
   buildSignedHeaders,
   copilotDoctor,
   copilotPrompt,