@snowyroad/braid 0.89.0 → 0.89.1

package/dist/{chunk-JALMGUEK.js → chunk-EST67K7A.js}

@@ -389,7 +389,7 @@ var InviteExpiredError = class extends Error {
   }
 };
 async function redeemInvite(relayHttpUrl, code) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-6KFDTGLV.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-HQIELMJB.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/invites/redeem`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -478,7 +478,7 @@ function validateReplacementToken(newToken, currentToken, nowMs = Date.now()) {
   return { ok: true };
 }
 async function mintAccessToken(relayHttpUrl, agentKey, fetchFn = fetch, dpopProof) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-6KFDTGLV.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-HQIELMJB.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/agents/token`, {
     method: "POST",
     headers: {
@@ -1340,6 +1340,17 @@ function buildAcpEnv(base, extra, stripKeys) {
   return merged;
 }
 var STOP_DRAIN_MS = 3e3;
+var WARMUP_CEILING_MS = 12e4;
+var WarmupCeilingError = class extends Error {
+  constructor(ceilingMs) {
+    super(
+      `ACP agent warm-up timed out after ${ceilingMs}ms \u2014 the agent process started but never completed the initialize/session handshake (commonly a stalled login/auth prompt, or a slow first-run adapter download). Aborted.`
+    );
+    this.ceilingMs = ceilingMs;
+    this.name = "WarmupCeilingError";
+  }
+  ceilingMs;
+};
 function killProcessGroup(child, signal) {
   const pid = child.pid;
   try {
@@ -1371,17 +1382,19 @@ function safeAcpToolName(tc) {
   return tc?.kind ?? "unknown";
 }
 var AcpClient = class {
-  constructor(launch, scopeWrap, afterChildExitHook, telemetry) {
+  constructor(launch, scopeWrap, afterChildExitHook, telemetry, warmupCeilingMs = WARMUP_CEILING_MS) {
     this.launch = launch;
     this.scopeWrap = scopeWrap;
     this.afterChildExitHook = afterChildExitHook;
     this.telemetry = telemetry;
+    this.warmupCeilingMs = warmupCeilingMs;
     this.policy = launch.policy ?? { mode: "readonly", configDirAbs: configDir(process.env) };
   }
   launch;
   scopeWrap;
   afterChildExitHook;
   telemetry;
+  warmupCeilingMs;
   /** The tool permission policy; defaults FAIL-SAFE to readonly (never to approval). */
   policy;
   child = null;
@@ -1449,13 +1462,31 @@ var AcpClient = class {
     this.currentTurnOverrideMode = void 0;
     this.exitRejecters.clear();
     try {
-      await this.startInner();
+      await this.withWarmupCeiling(this.startInner());
     } catch (err) {
       await this.stop().catch(() => {
       });
       throw err;
     }
   }
+  /** Race the warm-up against the fixed ceiling so start() can never hang unbounded
+   *  (G1). On timeout it rejects with WarmupCeilingError; the caller's catch reaps the
+   *  subprocess (G2). The timer is cleared on every path (no leak), and a late inner
+   *  rejection after the ceiling already won is swallowed so it cannot surface as an
+   *  unhandledRejection. */
+  async withWarmupCeiling(inner) {
+    inner.catch(() => {
+    });
+    let timer;
+    const ceiling = new Promise((_, reject) => {
+      timer = setTimeout(() => reject(new WarmupCeilingError(this.warmupCeilingMs)), this.warmupCeilingMs);
+    });
+    try {
+      await Promise.race([inner, ceiling]);
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
   async startInner() {
     const spec = this.scopeWrap ? await this.scopeWrap(this.launch) : this.launch;
     const child = spawn(spec.command, spec.args, {

package/dist/cli.js

@@ -70,7 +70,7 @@ import {
   toolStatusLine,
   validateRelayWsUrl,
   wsToHttp
-} from "./chunk-JALMGUEK.js";
+} from "./chunk-EST67K7A.js";
 import {
   externalSourceLabel,
   externalUntrustedPreamble,

package/dist/{http-6KFDTGLV.js → http-HQIELMJB.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-JALMGUEK.js";
+} from "./chunk-EST67K7A.js";
 import "./chunk-BDOF72CL.js";
 export {
   assertHttpEndpoint,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.89.0",
+  "version": "0.89.1",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.89.0",
+  "version": "0.89.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.89.0",
+      "version": "0.89.1",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -2506,9 +2506,9 @@
       "license": "ISC"
     },
     "node_modules/jose": {
-      "version": "6.2.5",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.5.tgz",
-      "integrity": "sha512-2E5L2yRp03FnwreJLJX8/r7mHiZICCf8kG7fAsTWkSQTDAcc46NIZoQLKy+EJ8sPoJlxyS4OQR5H70LjIZZlIQ==",
+      "version": "6.2.6",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.6.tgz",
+      "integrity": "sha512-HwMtbJjMw8rC8dUTwCNilHJD+fxTeKM3JV1eprSmTjS41qwXSSt6exJXgyPK1QOu0jB9eDYLESRDkB3qaT3jnw==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"