@spunto/build 0.20.0 → 0.20.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spunto/build",
-  "version": "0.20.0",
+  "version": "0.20.2",
   "description": "Spunto's shared Build engine — the devcontainer image protocol and VS Code extension registry clients, with no database, no HTTP framework and no UI.",
   "type": "module",
   "license": "MIT",

package/src/agent-runners/catalogs.ts

@@ -7,8 +7,8 @@
  * **Measured, not remembered.** Each catalog is what the SDK pinned by its feature
  * (`./features.ts`) answers, and it changes when that pin moves:
  *
- *  - Claude: `query().supportedModels()` of `@anthropic-ai/claude-agent-sdk` 0.3.310, with a
- *    subscription token, on 2026-10-26. Each model comes back with `supportedEffortLevels`;
+ *  - Claude: `query().supportedModels()` of `@anthropic-ai/claude-agent-sdk` 0.3.310, on
+ *    2026-10-26. Each model comes back with `supportedEffortLevels`;
  *  - Codex: `codex debug models` of `@openai/codex` 0.164.0 — the catalog bundled in the binary,
  *    offline, on 2026-10-26 — the `visibility: "list"` models, with their
  *    `supported_reasoning_levels` and `default_reasoning_level`.

package/src/agent-runners/claude.mjs

@@ -15,8 +15,9 @@
 //           (`./catalogs.ts`): `{"effort":"high"}`
 //   exit    0 once the input is closed and the last turn is over, 1 when the session could not run
 //
-// Credentials are not this file's business: `CLAUDE_CODE_OAUTH_TOKEN` or `ANTHROPIC_API_KEY`, set
-// as secrets, reach the SDK's binary through the environment like they reached the CLI before.
+// Credentials are not this file's business: whatever the member set as secrets (an
+// `ANTHROPIC_API_KEY`) reaches the SDK's binary through the environment, untouched — this runner
+// reads no credential itself.
 
 import { createInterface } from "node:readline"
 

package/src/commands/index.ts

@@ -117,16 +117,19 @@ export function startScript(p: StartCommandScript): string {
  * The state of a command and the tail of both streams. `exit_code` is written last by the wrapper,
  * so its presence is the completion signal — the pid alone would call a command finished the
  * instant its shell is replaced by an exec'd child.
- * Prints `FOUND`, `EXIT` (`-` while running), `ALIVE`, `SIZEOUT`, `SIZEERR`, `OUT`, `ERR` (base64).
+ * Prints `FOUND`, `ALIVE`, `EXIT` (`-` while running), `SIZEOUT`, `SIZEERR`, `OUT`, `ERR` (base64).
  */
 export function pollScript(commandId: string, maxOutputBytes = DEFAULT_POLL_OUTPUT_BYTES): string {
   const dir = dirOf(commandId)
   return [
     `if [ ! -d ${dir} ]; then echo "FOUND:0"; exit 0; fi`,
     `echo "FOUND:1"`,
-    `if [ -f ${dir}/exit_code ]; then echo "EXIT:$(cat ${dir}/exit_code)"; else echo "EXIT:-"; fi`,
+    // The pid before `exit_code`: the wrapper writes its code before exiting, so a dead wrapper
+    // with no code read *after* it is one that died without writing it (`commandDied`). `ALIVE:-`
+    // is a command still being started, its pid not written yet.
     `pid=$(cat ${dir}/pid 2>/dev/null || echo "")`,
-    `if [ -n "$pid" ] && kill -0 "$pid" 2>/dev/null; then echo "ALIVE:1"; else echo "ALIVE:0"; fi`,
+    `if [ -z "$pid" ]; then echo "ALIVE:-"; elif kill -0 "$pid" 2>/dev/null; then echo "ALIVE:1"; else echo "ALIVE:0"; fi`,
+    `if [ -f ${dir}/exit_code ]; then echo "EXIT:$(cat ${dir}/exit_code)"; else echo "EXIT:-"; fi`,
     `echo "SIZEOUT:$(wc -c < ${dir}/stdout.log 2>/dev/null || echo 0)"`,
     `echo "SIZEERR:$(wc -c < ${dir}/stderr.log 2>/dev/null || echo 0)"`,
     `echo "OUT:$(tail -c ${maxOutputBytes} ${dir}/stdout.log 2>/dev/null | base64 | tr -d '\\n')"`,
@@ -203,3 +206,9 @@ export function commandExitCode(fields: Map<string, string>): number | null {
 
 /** A wrapper still alive with an exit code already written is finishing up: done, not running. */
 export const commandRunning = (fields: Map<string, string>) => commandExitCode(fields) === null && fields.get("ALIVE") === "1"
+
+/**
+ * A poll of a wrapper that is gone without writing `exit_code`: the box rebooted, or the process was
+ * SIGKILLed (OOM). Nothing will ever write the code, so read as "still running" it stays so forever.
+ */
+export const commandDied = (fields: Map<string, string>) => commandExitCode(fields) === null && fields.get("ALIVE") === "0"