@sjawhar/pi-legion-envoy 1.69.0 → 2.0.0

package/dist/legion.js

@@ -16111,7 +16111,7 @@ var require_mod4 = __commonJS((exports) => {
 
 // extensions/legion.ts
 import { randomUUID as randomUUID3 } from "crypto";
-import path5 from "path";
+import path4 from "path";
 
 // ../envoy-client/src/defaults.ts
 var DEFAULT_ENVOY_URL = "http://127.0.0.1:9020";
@@ -16142,7 +16142,7 @@ import { logger } from "@oh-my-pi/pi-utils";
 // package.json
 var package_default = {
   name: "@sjawhar/pi-legion-envoy",
-  version: "1.69.0",
+  version: "2.0.0",
   type: "module",
   omp: {
     extensions: [
@@ -16155,7 +16155,7 @@ var package_default = {
   },
   legion: {
     daemonApiVersion: 8,
-    goDaemonApiVersion: 4
+    goDaemonApiVersion: 5
   },
   repository: {
     type: "git",
@@ -31308,7 +31308,7 @@ function createControllerSession(persistedTranscript, checkSubagentSession, daem
 
 // src/legion/grant-file.ts
 import { randomUUID } from "crypto";
-import { chmod, rename, rm, writeFile } from "fs/promises";
+import { chmod, mkdir, rename, rm, writeFile } from "fs/promises";
 import path from "path";
 async function writeGrantFile(file2, grantId) {
   if (!path.isAbsolute(file2)) {
@@ -31316,6 +31316,7 @@ async function writeGrantFile(file2, grantId) {
   }
   const temp = `${file2}.${process.pid}.${randomUUID()}`;
   try {
+    await mkdir(path.dirname(file2), { recursive: true, mode: 448 });
     await writeFile(temp, grantId, { encoding: "utf8", mode: 384 });
     await chmod(temp, 384);
     await rename(temp, file2);
@@ -31332,9 +31333,6 @@ async function writeMintedGrant(mint) {
   await writeGrantFile(file2, await mint());
 }
 
-// src/legion/go-bootstrap.ts
-import path3 from "path";
-
 // ../contracts/src/legion-go-api.ts
 var nonEmptyString2 = exports_external.string().min(1);
 var timestamp = exports_external.iso.datetime({ offset: true });
@@ -31662,7 +31660,7 @@ function createLegionGoDaemonClient(baseUrl, fetchFn = fetch) {
 
 // src/legion/jj-attribution.ts
 import { execFile } from "child_process";
-import { mkdir, rename as rename2, writeFile as writeFile2 } from "fs/promises";
+import { mkdir as mkdir2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
 import path2 from "path";
 import { promisify } from "util";
 var UUID = "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}";
@@ -31695,7 +31693,7 @@ async function exportJjSessionAttribution(sessionFile, stateDir, env = process.e
   if (!base)
     return;
   try {
-    await mkdir(stateDir, { recursive: true });
+    await mkdir2(stateDir, { recursive: true });
     const tmp = `${overlay}.${process.pid}.tmp`;
     await writeFile2(tmp, `[templates]
 commit_trailers = '"Omp-Session: ${id}"'
@@ -31799,7 +31797,6 @@ async function bootstrapGoClaim(context, state) {
     try {
       const stateDir = requiredEnvironment(process.env, "LEGION_STATE_DIR");
       await exportJjSessionAttribution(sessionFile, stateDir);
-      process.env.LEGION_GRANT_FILE = path3.join(stateDir, "secrets", `${claim.claimToken}-grant`);
       state.setCapability({
         kind: "phase-worker",
         sessionID,
@@ -32369,7 +32366,7 @@ function createLegionTool(deps) {
 
 // src/subagent-session.ts
 import fs from "fs";
-import path4 from "path";
+import path3 from "path";
 import * as host from "@oh-my-pi/pi-coding-agent";
 var LEGION_BOOTSTRAPPED_SESSION = Symbol.for("legion.pi-envoy.bootstrapped-session");
 var bootstrappedSessionStore = globalThis;
@@ -32380,7 +32377,7 @@ async function isSubagentSession(context) {
   await context.sessionManager.ensureOnDisk();
   const sessionFile = context.sessionManager.getSessionFile();
   if (sessionFile !== undefined && fs.existsSync(sessionFile)) {
-    return fs.existsSync(`${path4.dirname(sessionFile)}.jsonl`);
+    return fs.existsSync(`${path3.dirname(sessionFile)}.jsonl`);
   }
   const bootstrapped = bootstrappedSessionStore[LEGION_BOOTSTRAPPED_SESSION];
   return bootstrapped !== undefined && bootstrapped !== sessionFile;
@@ -32444,7 +32441,16 @@ var callReadyWithRetry = async (label, call) => {
     }
   }
 };
-async function wrapBashWithGrant(mint) {
+var GH_RESOLVED_URL = /(?:^|[\s;,"])(?:pr|issue):\/\//i;
+function needsGrant({ toolName, input }) {
+  if (toolName === "bash")
+    return typeof input.command === "string";
+  if (toolName === "github")
+    return true;
+  const paths = Array.isArray(input.paths) ? input.paths : [input.path];
+  return paths.some((entry) => typeof entry === "string" && GH_RESOLVED_URL.test(entry));
+}
+async function wrapWithGrant(mint) {
   try {
     await writeMintedGrant(async () => (await mint()).grantId);
     return;
@@ -32458,7 +32464,7 @@ async function persistedTranscript(context) {
   if (!sessionFile?.endsWith(".jsonl")) {
     throw new Error("Legion session must have a persisted transcript");
   }
-  const agentId = path5.basename(sessionFile, ".jsonl");
+  const agentId = path4.basename(sessionFile, ".jsonl");
   if (!agentId)
     throw new Error("Legion session transcript has no agent id");
   return { sessionFile, agentId };
@@ -32970,11 +32976,11 @@ function legionExtension(pi) {
         return { block: true, reason: "the merger only verifies and reports" };
       }
     }
-    if (toolCall.toolName !== "bash" || typeof toolCall.input.command !== "string")
+    if (!needsGrant(toolCall))
       return;
     if (active === undefined) {
       if (controllerSession.isClaimedSession(sessionID)) {
-        return wrapBashWithGrant(() => controllerSession.mintGrant(sessionID));
+        return wrapWithGrant(() => controllerSession.mintGrant(sessionID));
       }
       if (process.env.LEGION_ROLE !== undefined && process.env.LEGION_CONTROLLER !== "1") {
         return {
@@ -32984,7 +32990,7 @@ function legionExtension(pi) {
       }
       return;
     }
-    return wrapBashWithGrant(() => process.env.LEGION_DAEMON_API === "go" ? goRoleDaemon().grant({
+    return wrapWithGrant(() => process.env.LEGION_DAEMON_API === "go" ? goRoleDaemon().grant({
       tree: active.tree,
       issue: active.issue,
       sessionId: sessionID,

package/dist/skills/legion-worker/SKILL.md

@@ -189,14 +189,17 @@ comments live on that path too, so edit them with `gh pr comment`) — printing
 `Legion issues live on Dispatch; use dispatch_message or dispatch_comment on <your LEGION_ISSUE>`:
 Legion never reads or writes a GitHub issue (LEGION-78). `pr comment`, `pr review`,
 `api …/pulls/…`, `api graphql`, and issue reads are unaffected. The credential reaches `legion`
-through the file `$LEGION_GRANT_FILE` names, written before each of your bash commands by the
-extension (and by the `legion` tool before its `handoff_complete`); never `cat`, `echo`, copy, or
+through the file `$LEGION_GRANT_FILE` names, written by the extension before each of your bash
+commands, each `github` tool call, and each `read`/`grep` of a `pr://` or `issue://` URL (and by
+the `legion` tool before its `handoff_complete`); never `cat`, `echo`, copy, or
 `export` it — `legion credential`, `legion gh`, `jj git push`, and `handoff_complete` read it
-themselves. The file is the pane's, not the
-command's: a `task` subagent, an `eval` subprocess, or a background job in your pane reads the
-grant your last bash command minted, so its `legion gh` or `jj git push` succeeds only within 60
-seconds of that call and 403s afterwards — a timing artifact, not a broken credential; run
-credentialed commands from your own bash calls.
+themselves. The file is the pane's, not the command's, and a grant lives 60 seconds: a `task`
+subagent, an `eval` subprocess, or a background job in your pane reads the grant your last such
+call wrote, and a `github` tool `run_watch` keeps polling `gh` on the one written when the call
+began, so each succeeds only within 60 seconds of that call and 403s afterwards — a timing
+artifact, not a broken credential. Run credentialed commands from your own bash calls, and watch a
+run that may outlast a minute with `gh run watch` in bash, which redeems once and then runs on the
+token it got.
 
 ## GitHub PR comment attribution
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/pi-legion-envoy",
-  "version": "1.69.0",
+  "version": "2.0.0",
   "type": "module",
   "omp": {
     "extensions": [
@@ -13,7 +13,7 @@
   },
   "legion": {
     "daemonApiVersion": 8,
-    "goDaemonApiVersion": 4
+    "goDaemonApiVersion": 5
   },
   "repository": {
     "type": "git",