@steipete/oracle 0.9.0 → 0.10.0

package/dist/scripts/runner.js

@@ -3,50 +3,50 @@
  * Sweetistics runner wrapper: enforces timeouts, git policy, and trash-safe deletes before dispatching any repo command.
  * When you tweak its behavior, add a short note to AGENTS.md via `./scripts/committer "docs: update AGENTS for runner" "AGENTS.md"` so other agents know the new expectations.
  */
-import { spawn } from 'node:child_process';
-import { cpSync, existsSync, renameSync, rmSync } from 'node:fs';
-import { constants as osConstants } from 'node:os';
-import { basename, isAbsolute, join, normalize, resolve } from 'node:path';
-import process from 'node:process';
-import { analyzeGitExecution, evaluateGitPolicies, } from './git-policy';
+import { spawn } from "node:child_process";
+import { cpSync, existsSync, renameSync, rmSync } from "node:fs";
+import { constants as osConstants } from "node:os";
+import { basename, isAbsolute, join, normalize, resolve } from "node:path";
+import process from "node:process";
+import { analyzeGitExecution, evaluateGitPolicies, } from "./git-policy";
 const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;
 const EXTENDED_TIMEOUT_MS = 20 * 60 * 1000;
 const LONG_TIMEOUT_MS = 25 * 60 * 1000; // Build + full-suite commands (Next.js build, test:all) routinely spike past 20 minutes—give them explicit headroom before tmux escalation.
 const LINT_TIMEOUT_MS = 30 * 60 * 1000;
 const LONG_RUN_REPORT_THRESHOLD_MS = 60 * 1000;
-const ENABLE_DEBUG_LOGS = process.env.RUNNER_DEBUG === '1';
+const ENABLE_DEBUG_LOGS = process.env.RUNNER_DEBUG === "1";
 const MAX_SLEEP_SECONDS = 30;
 const WRAPPER_COMMANDS = new Set([
-    'sudo',
-    '/usr/bin/sudo',
-    'env',
-    '/usr/bin/env',
-    'command',
-    '/bin/command',
-    'nohup',
-    '/usr/bin/nohup',
+    "sudo",
+    "/usr/bin/sudo",
+    "env",
+    "/usr/bin/env",
+    "command",
+    "/bin/command",
+    "nohup",
+    "/usr/bin/nohup",
 ]);
 const SUMMARY_STYLE = resolveSummaryStyle(process.env.RUNNER_SUMMARY_STYLE);
 // biome-ignore format: keep each keyword on its own line for grep-friendly diffs.
 const LONG_SCRIPT_KEYWORDS = [
-    'build',
-    'test:all',
-    'test:browser',
-    'test:e2e',
-    'test:e2e:headed',
-    'vitest.browser',
-    'vitest.browser.config.ts',
+    "build",
+    "test:all",
+    "test:browser",
+    "test:e2e",
+    "test:e2e:headed",
+    "vitest.browser",
+    "vitest.browser.config.ts",
 ];
-const EXTENDED_SCRIPT_KEYWORDS = ['lint', 'test', 'playwright', 'check', 'docker'];
-const SINGLE_TEST_SCRIPTS = new Set(['test:file']);
-const SINGLE_TEST_FLAGS = new Set(['--run', '--filter']);
-const TEST_BINARIES = new Set(['vitest', 'playwright', 'jest']);
-const LINT_BINARIES = new Set(['eslint', 'biome', 'oxlint', 'knip']);
+const EXTENDED_SCRIPT_KEYWORDS = ["lint", "test", "playwright", "check", "docker"];
+const SINGLE_TEST_SCRIPTS = new Set(["test:file"]);
+const SINGLE_TEST_FLAGS = new Set(["--run", "--filter"]);
+const TEST_BINARIES = new Set(["vitest", "playwright", "jest"]);
+const LINT_BINARIES = new Set(["eslint", "biome", "oxlint", "knip"]);
 let cachedTrashCliCommand;
 (async () => {
     const commandArgs = parseArgs(process.argv.slice(2));
     if (commandArgs.length === 0) {
-        printUsage('Missing command to execute.');
+        printUsage("Missing command to execute.");
         process.exit(1);
     }
     const workspaceDir = process.cwd();
@@ -63,7 +63,7 @@ let cachedTrashCliCommand;
     enforceGitPolicies(interception.gitContext);
     await runCommand(context);
 })().catch((error) => {
-    console.error('[runner] Unexpected failure:', error instanceof Error ? error.message : String(error));
+    console.error("[runner] Unexpected failure:", error instanceof Error ? error.message : String(error));
     process.exit(1);
 });
 // Parses the runner CLI args and rejects unsupported flags early.
@@ -75,16 +75,16 @@ function parseArgs(argv) {
             commandArgs.push(token);
             continue;
         }
-        if (token === '--') {
+        if (token === "--") {
             parsingOptions = false;
             continue;
         }
-        if (token === '--help' || token === '-h') {
+        if (token === "--help" || token === "-h") {
             printUsage();
             process.exit(0);
         }
-        if (token === '--timeout' || token.startsWith('--timeout=')) {
-            console.error('[runner] --timeout is no longer supported; rely on the automatic timeouts.');
+        if (token === "--timeout" || token.startsWith("--timeout=")) {
+            console.error("[runner] --timeout is no longer supported; rely on the automatic timeouts.");
             process.exit(1);
         }
         parsingOptions = false;
@@ -95,7 +95,7 @@ function parseArgs(argv) {
 // Computes the timeout tier for the provided command tokens.
 function determineEffectiveTimeoutMs(commandArgs) {
     const strippedTokens = stripWrappersAndAssignments(commandArgs);
-    if (isTestRunnerSuiteInvocation(strippedTokens, 'integration')) {
+    if (isTestRunnerSuiteInvocation(strippedTokens, "integration")) {
         return EXTENDED_TIMEOUT_MS;
     }
     if (referencesIntegrationSpec(strippedTokens)) {
@@ -122,10 +122,10 @@ function shouldExtendTimeout(commandArgs) {
     if (!first) {
         return false;
     }
-    if (first === 'pnpm') {
+    if (first === "pnpm") {
         return shouldExtendViaPnpm(rest);
     }
-    if (first === 'bun') {
+    if (first === "bun") {
         return shouldExtendViaBun(rest);
     }
     if (shouldExtendForScript(first) || TEST_BINARIES.has(first.toLowerCase())) {
@@ -141,16 +141,19 @@ function shouldExtendViaPnpm(rest) {
     if (!subcommand) {
         return false;
     }
-    if (subcommand === 'run') {
+    if (subcommand === "run") {
         const script = rest[1];
-        return typeof script === 'string' && shouldExtendForScript(script);
+        return typeof script === "string" && shouldExtendForScript(script);
     }
-    if (subcommand === 'exec') {
+    if (subcommand === "exec") {
         const execTarget = rest[1];
-        if (execTarget && (shouldExtendForScript(execTarget) || TEST_BINARIES.has(execTarget.toLowerCase()))) {
+        if (execTarget &&
+            (shouldExtendForScript(execTarget) || TEST_BINARIES.has(execTarget.toLowerCase()))) {
             return true;
         }
-        return rest.slice(1).some((token) => shouldExtendForScript(token) || TEST_BINARIES.has(token.toLowerCase()));
+        return rest
+            .slice(1)
+            .some((token) => shouldExtendForScript(token) || TEST_BINARIES.has(token.toLowerCase()));
     }
     return shouldExtendForScript(subcommand);
 }
@@ -162,14 +165,14 @@ function shouldExtendViaBun(rest) {
     if (!subcommand) {
         return false;
     }
-    if (subcommand === 'run') {
+    if (subcommand === "run") {
         const script = rest[1];
-        return typeof script === 'string' && shouldExtendForScript(script);
+        return typeof script === "string" && shouldExtendForScript(script);
     }
-    if (subcommand === 'test') {
+    if (subcommand === "test") {
         return true;
     }
-    if (subcommand === 'x' || subcommand === 'bunx') {
+    if (subcommand === "x" || subcommand === "bunx") {
         const execTarget = rest[1];
         if (execTarget && TEST_BINARIES.has(execTarget.toLowerCase())) {
             return true;
@@ -194,10 +197,10 @@ function shouldUseLintTimeout(commandArgs) {
     if (!first) {
         return false;
     }
-    if (first === 'pnpm') {
+    if (first === "pnpm") {
         return shouldUseLintTimeoutViaPnpm(rest);
     }
-    if (first === 'bun') {
+    if (first === "bun") {
         return shouldUseLintTimeoutViaBun(rest);
     }
     return LINT_BINARIES.has(first.toLowerCase());
@@ -210,11 +213,11 @@ function shouldUseLintTimeoutViaPnpm(rest) {
     if (!subcommand) {
         return false;
     }
-    if (subcommand === 'run') {
+    if (subcommand === "run") {
         const script = rest[1];
-        return typeof script === 'string' && script.startsWith('lint');
+        return typeof script === "string" && script.startsWith("lint");
     }
-    if (subcommand === 'exec') {
+    if (subcommand === "exec") {
         const execTarget = rest[1];
         if (execTarget && LINT_BINARIES.has(execTarget.toLowerCase())) {
             return true;
@@ -231,11 +234,11 @@ function shouldUseLintTimeoutViaBun(rest) {
     if (!subcommand) {
         return false;
     }
-    if (subcommand === 'run') {
+    if (subcommand === "run") {
         const script = rest[1];
-        return typeof script === 'string' && script.startsWith('lint');
+        return typeof script === "string" && script.startsWith("lint");
     }
-    if (subcommand === 'x' || subcommand === 'bunx') {
+    if (subcommand === "x" || subcommand === "bunx") {
         return rest.slice(1).some((token) => LINT_BINARIES.has(token.toLowerCase()));
     }
     return LINT_BINARIES.has(subcommand.toLowerCase());
@@ -253,13 +256,13 @@ function isSingleTestInvocation(commandArgs) {
     if (!first) {
         return false;
     }
-    if (first === 'pnpm') {
+    if (first === "pnpm") {
         return isSingleTestViaPnpm(rest);
     }
-    if (first === 'bun') {
+    if (first === "bun") {
         return isSingleTestViaBun(rest);
     }
-    if (first === 'vitest') {
+    if (first === "vitest") {
         return rest.some((token) => SINGLE_TEST_FLAGS.has(token));
     }
     return SINGLE_TEST_SCRIPTS.has(first);
@@ -272,11 +275,11 @@ function isSingleTestViaPnpm(rest) {
     if (!subcommand) {
         return false;
     }
-    if (subcommand === 'run') {
+    if (subcommand === "run") {
         const script = rest[1];
-        return typeof script === 'string' && SINGLE_TEST_SCRIPTS.has(script);
+        return typeof script === "string" && SINGLE_TEST_SCRIPTS.has(script);
     }
-    if (subcommand === 'exec') {
+    if (subcommand === "exec") {
         return rest.slice(1).some((token) => SINGLE_TEST_FLAGS.has(token));
     }
     return SINGLE_TEST_SCRIPTS.has(subcommand);
@@ -289,31 +292,31 @@ function isSingleTestViaBun(rest) {
     if (!subcommand) {
         return false;
     }
-    if (subcommand === 'run') {
+    if (subcommand === "run") {
         const script = rest[1];
-        return typeof script === 'string' && SINGLE_TEST_SCRIPTS.has(script);
+        return typeof script === "string" && SINGLE_TEST_SCRIPTS.has(script);
     }
-    if (subcommand === 'test') {
+    if (subcommand === "test") {
         return true;
     }
-    if (subcommand === 'x' || subcommand === 'bunx') {
+    if (subcommand === "x" || subcommand === "bunx") {
         return rest.slice(1).some((token) => SINGLE_TEST_FLAGS.has(token));
     }
     return false;
 }
 // Normalizes potential file paths/flags to aid comparison across shells.
 function normalizeForPathComparison(token) {
-    return token.replaceAll('\\', '/');
+    return token.replaceAll("\\", "/");
 }
 // Heuristically checks if a CLI token references an integration spec.
 function tokenReferencesIntegrationTest(token) {
     const normalized = normalizeForPathComparison(token);
-    if (normalized.includes('tests/integration/')) {
+    if (normalized.includes("tests/integration/")) {
         return true;
     }
-    if (normalized.startsWith('--run=') || normalized.startsWith('--include=')) {
-        const value = normalized.split('=', 2)[1] ?? '';
-        return value.includes('tests/integration/');
+    if (normalized.startsWith("--run=") || normalized.startsWith("--include=")) {
+        const value = normalized.split("=", 2)[1] ?? "";
+        return value.includes("tests/integration/");
     }
     return false;
 }
@@ -324,7 +327,7 @@ function referencesIntegrationSpec(tokens) {
         if (!token) {
             continue;
         }
-        if (token === '--run' || token === '--include') {
+        if (token === "--run" || token === "--include") {
             const next = tokens[index + 1];
             if (next && tokenReferencesIntegrationTest(next)) {
                 return true;
@@ -391,8 +394,9 @@ function isTestRunnerSuiteInvocation(tokens, suite) {
         if (!token) {
             continue;
         }
-        const normalizedToken = token.replace(/^[./\\]+/, '');
-        if (normalizedToken === 'scripts/test-runner.ts' || normalizedToken.endsWith('/scripts/test-runner.ts')) {
+        const normalizedToken = token.replace(/^[./\\]+/, "");
+        if (normalizedToken === "scripts/test-runner.ts" ||
+            normalizedToken.endsWith("/scripts/test-runner.ts")) {
             const suiteToken = tokens[index + 1]?.toLowerCase();
             if (suiteToken === normalizedSuite) {
                 return true;
@@ -413,7 +417,7 @@ function shouldUseLongTimeout(commandArgs) {
     }
     const rest = tokens.slice(1);
     const matches = (token) => matchesScriptKeyword(token, LONG_SCRIPT_KEYWORDS);
-    if (first === 'pnpm') {
+    if (first === "pnpm") {
         if (rest.length === 0) {
             return false;
         }
@@ -421,7 +425,7 @@ function shouldUseLongTimeout(commandArgs) {
         if (!subcommand) {
             return false;
         }
-        if (subcommand === 'run') {
+        if (subcommand === "run") {
             const script = rest[1];
             if (script && matches(script)) {
                 return true;
@@ -455,20 +459,20 @@ async function runCommand(context) {
     const child = spawn(command, args, {
         cwd: context.workspaceDir,
         env,
-        stdio: ['inherit', 'pipe', 'pipe'],
+        stdio: ["inherit", "pipe", "pipe"],
     });
     if (isRunnerTmuxSession()) {
-        const childPidInfo = typeof child.pid === 'number' ? ` (pid ${child.pid})` : '';
+        const childPidInfo = typeof child.pid === "number" ? ` (pid ${child.pid})` : "";
         console.error(`[runner] Watching ${commandLabel}${childPidInfo}. Wait for the closing sentinel before moving on.`);
     }
     const removeSignalHandlers = registerSignalForwarding(child);
     if (child.stdout) {
-        child.stdout.on('data', (chunk) => {
+        child.stdout.on("data", (chunk) => {
             process.stdout.write(chunk);
         });
     }
     if (child.stderr) {
-        child.stderr.on('data', (chunk) => {
+        child.stderr.on("data", (chunk) => {
             process.stderr.write(chunk);
         });
     }
@@ -482,15 +486,15 @@ async function runCommand(context) {
                     console.error(`[runner] Command exceeded ${formatDuration(context.timeoutMs)}; sending SIGTERM.`);
                 }
                 if (!child.killed) {
-                    child.kill('SIGTERM');
+                    child.kill("SIGTERM");
                     killTimer = setTimeout(() => {
                         if (!child.killed) {
-                            child.kill('SIGKILL');
+                            child.kill("SIGKILL");
                         }
                     }, 5_000);
                 }
             }, context.timeoutMs);
-            child.once('error', (error) => {
+            child.once("error", (error) => {
                 clearTimeout(timeout);
                 if (killTimer) {
                     clearTimeout(killTimer);
@@ -498,7 +502,7 @@ async function runCommand(context) {
                 removeSignalHandlers();
                 reject(error);
             });
-            child.once('exit', (code, signal) => {
+            child.once("exit", (code, signal) => {
                 clearTimeout(timeout);
                 if (killTimer) {
                     clearTimeout(killTimer);
@@ -521,7 +525,7 @@ async function runCommand(context) {
         process.exit(exitCode);
     }
     catch (error) {
-        console.error('[runner] Failed to launch command:', error instanceof Error ? error.message : String(error));
+        console.error("[runner] Failed to launch command:", error instanceof Error ? error.message : String(error));
         process.exit(1);
         return;
     }
@@ -533,16 +537,16 @@ async function runCommandWithoutTimeout(context) {
     const child = spawn(command, args, {
         cwd: context.workspaceDir,
         env,
-        stdio: 'inherit',
+        stdio: "inherit",
     });
     const removeSignalHandlers = registerSignalForwarding(child);
     try {
         const exitCode = await new Promise((resolve, reject) => {
-            child.once('error', (error) => {
+            child.once("error", (error) => {
                 removeSignalHandlers();
                 reject(error);
             });
-            child.once('exit', (code, signal) => {
+            child.once("exit", (code, signal) => {
                 removeSignalHandlers();
                 resolve(code ?? exitCodeFromSignal(signal));
             });
@@ -552,7 +556,7 @@ async function runCommandWithoutTimeout(context) {
         process.exit(exitCode);
     }
     catch (error) {
-        console.error('[runner] Failed to launch command:', error instanceof Error ? error.message : String(error));
+        console.error("[runner] Failed to launch command:", error instanceof Error ? error.message : String(error));
         process.exit(1);
     }
 }
@@ -564,9 +568,9 @@ function buildExecutionParams(commandArgs, workspaceDir) {
     let commandStarted = false;
     for (const token of commandArgs) {
         if (!commandStarted && isEnvAssignment(token)) {
-            const [key, ...rest] = token.split('=');
+            const [key, ...rest] = token.split("=");
             if (key) {
-                env[key] = rest.join('=');
+                env[key] = rest.join("=");
             }
             continue;
         }
@@ -574,7 +578,7 @@ function buildExecutionParams(commandArgs, workspaceDir) {
         args.push(token);
     }
     if (args.length === 0 || !args[0]) {
-        printUsage('Missing command to execute.');
+        printUsage("Missing command to execute.");
         process.exit(1);
     }
     const [command, ...restArgs] = args;
@@ -584,13 +588,10 @@ function injectWorkspaceBinDirs(env, workspaceDir) {
     if (ENABLE_DEBUG_LOGS) {
         console.error(`[runner] Checking workspace bin dirs under ${workspaceDir}`);
     }
-    const binCandidates = [
-        join(workspaceDir, 'node_modules', '.bin'),
-        join(workspaceDir, 'bin'),
-    ];
-    const existingPath = env.PATH ?? process.env.PATH ?? '';
+    const binCandidates = [join(workspaceDir, "node_modules", ".bin"), join(workspaceDir, "bin")];
+    const existingPath = env.PATH ?? process.env.PATH ?? "";
     const existingSegments = existingPath
-        .split(':')
+        .split(":")
         .map((segment) => segment.trim())
         .filter((segment) => segment.length > 0);
     const additions = [];
@@ -607,14 +608,14 @@ function injectWorkspaceBinDirs(env, workspaceDir) {
         return;
     }
     if (ENABLE_DEBUG_LOGS) {
-        console.error(`[runner] Prepending workspace PATH entries: ${additions.join(', ')}`);
+        console.error(`[runner] Prepending workspace PATH entries: ${additions.join(", ")}`);
     }
     const merged = [...additions, ...existingSegments];
-    env.PATH = merged.join(':');
+    env.PATH = merged.join(":");
 }
 // Forwards termination signals to the child and returns an unregister hook.
 function registerSignalForwarding(child) {
-    const signals = ['SIGINT', 'SIGTERM'];
+    const signals = ["SIGINT", "SIGTERM"];
     const handlers = new Map();
     for (const signal of signals) {
         const handler = () => {
@@ -637,7 +638,7 @@ function exitCodeFromSignal(signal) {
         return 0;
     }
     const code = osConstants.signals[signal];
-    if (typeof code === 'number') {
+    if (typeof code === "number") {
         return 128 + code;
     }
     return 1;
@@ -664,8 +665,8 @@ async function resolveCommandInterception(context) {
 // Runs the shared git policy analyzers before dispatching the command.
 function enforceGitPolicies(gitContext) {
     const evaluation = evaluateGitPolicies(gitContext);
-    const hasConsentOverride = process.env.RUNNER_THE_USER_GAVE_ME_CONSENT === '1';
-    if (gitContext.subcommand === 'rebase' && !hasConsentOverride) {
+    const hasConsentOverride = process.env.RUNNER_THE_USER_GAVE_ME_CONSENT === "1";
+    if (gitContext.subcommand === "rebase" && !hasConsentOverride) {
         console.error('git rebase requires the user to explicitly type "rebase" in chat. Once they do, rerun with RUNNER_THE_USER_GAVE_ME_CONSENT=1 in the same command (e.g. RUNNER_THE_USER_GAVE_ME_CONSENT=1 ./runner git rebase --continue).');
         process.exit(1);
     }
@@ -676,16 +677,16 @@ function enforceGitPolicies(gitContext) {
     if (evaluation.requiresExplicitConsent || evaluation.isDestructive) {
         if (hasConsentOverride) {
             if (ENABLE_DEBUG_LOGS) {
-                const reason = evaluation.isDestructive ? 'destructive git command' : 'guarded git command';
+                const reason = evaluation.isDestructive ? "destructive git command" : "guarded git command";
                 console.error(`[runner] Proceeding with ${reason} because RUNNER_THE_USER_GAVE_ME_CONSENT=1.`);
             }
         }
         else {
             if (evaluation.isDestructive) {
-                console.error(`git ${gitContext.subcommand ?? ''} can overwrite or discard work. Confirm with the user first, then re-run with RUNNER_THE_USER_GAVE_ME_CONSENT=1 if they approve.`);
+                console.error(`git ${gitContext.subcommand ?? ""} can overwrite or discard work. Confirm with the user first, then re-run with RUNNER_THE_USER_GAVE_ME_CONSENT=1 if they approve.`);
             }
             else {
-                console.error(`Using git ${gitContext.subcommand ?? ''} requires consent. Set RUNNER_THE_USER_GAVE_ME_CONSENT=1 after verifying with the user, or ask them explicitly before proceeding.`);
+                console.error(`Using git ${gitContext.subcommand ?? ""} requires consent. Set RUNNER_THE_USER_GAVE_ME_CONSENT=1 after verifying with the user, or ask them explicitly before proceeding.`);
             }
             process.exit(1);
         }
@@ -701,7 +702,9 @@ async function maybeHandleFindInvocation(context) {
     if (!findPlan) {
         return false;
     }
-    const moveResult = await movePathsToTrash(findPlan.paths, context.workspaceDir, { allowMissing: false });
+    const moveResult = await movePathsToTrash(findPlan.paths, context.workspaceDir, {
+        allowMissing: false,
+    });
     if (moveResult.missing.length > 0) {
         for (const path of moveResult.missing) {
             console.error(`find: ${path}: No such file or directory`);
@@ -728,7 +731,9 @@ async function maybeHandleRmInvocation(context) {
         return false;
     }
     try {
-        const moveResult = await movePathsToTrash(rmPlan.targets, context.workspaceDir, { allowMissing: rmPlan.force });
+        const moveResult = await movePathsToTrash(rmPlan.targets, context.workspaceDir, {
+            allowMissing: rmPlan.force,
+        });
         reportMissingForRm(moveResult.missing, rmPlan.force);
         if (moveResult.errors.length > 0) {
             for (const error of moveResult.errors) {
@@ -746,7 +751,7 @@ async function maybeHandleRmInvocation(context) {
 }
 // Applies git-specific rm protections before the command executes.
 async function maybeHandleGitRm(gitContext) {
-    if (gitContext.command?.name !== 'rm' || !gitContext.invocation) {
+    if (gitContext.command?.name !== "rm" || !gitContext.invocation) {
         return false;
     }
     const gitRmPlan = parseGitRmArguments(gitContext.invocation.argv, gitContext.command);
@@ -806,7 +811,7 @@ async function maybeHandleSleepInvocation(context) {
     if (adjustments.length === 0) {
         return false;
     }
-    console.error(`[runner] sleep arguments exceed ${MAX_SLEEP_SECONDS}s; clamping (${adjustments.join(', ')}).`);
+    console.error(`[runner] sleep arguments exceed ${MAX_SLEEP_SECONDS}s; clamping (${adjustments.join(", ")}).`);
     context.commandArgs = adjustedArgs;
     return false;
 }
@@ -819,10 +824,10 @@ async function maybeHandleTmuxInvocation(context) {
     if (!candidate) {
         return false;
     }
-    if (basename(candidate) !== 'tmux') {
+    if (basename(candidate) !== "tmux") {
         return false;
     }
-    console.error('[runner] Detected tmux invocation; executing command without runner timeout guardrails.');
+    console.error("[runner] Detected tmux invocation; executing command without runner timeout guardrails.");
     await runCommandWithoutTimeout(context);
     return true;
 }
@@ -835,8 +840,8 @@ function parseSleepDurationSeconds(token) {
     if (!Number.isFinite(value)) {
         return null;
     }
-    const unit = match[2]?.toLowerCase() ?? '';
-    const multiplier = unit === 'm' ? 60 : unit === 'h' ? 60 * 60 : unit === 'd' ? 60 * 60 * 24 : 1;
+    const unit = match[2]?.toLowerCase() ?? "";
+    const multiplier = unit === "m" ? 60 : unit === "h" ? 60 * 60 : unit === "d" ? 60 * 60 * 24 : 1;
     return value * multiplier;
 }
 function formatSleepArgument(seconds) {
@@ -849,12 +854,12 @@ function formatSleepDuration(seconds) {
     return `${seconds.toFixed(2)}s`;
 }
 function isSleepBinary(token) {
-    return token === 'sleep' || token.endsWith('/sleep');
+    return token === "sleep" || token.endsWith("/sleep");
 }
 // Detects `git find` invocations that need policy enforcement.
 function extractFindInvocation(commandArgs) {
     for (const [index, token] of commandArgs.entries()) {
-        if (token === 'find' || token.endsWith('/find')) {
+        if (token === "find" || token.endsWith("/find")) {
             return { index, argv: commandArgs.slice(index) };
         }
     }
@@ -866,14 +871,14 @@ function extractRmInvocation(commandArgs) {
         return null;
     }
     const wrappers = new Set([
-        'sudo',
-        '/usr/bin/sudo',
-        'env',
-        '/usr/bin/env',
-        'command',
-        '/bin/command',
-        'nohup',
-        '/usr/bin/nohup',
+        "sudo",
+        "/usr/bin/sudo",
+        "env",
+        "/usr/bin/env",
+        "command",
+        "/bin/command",
+        "nohup",
+        "/usr/bin/nohup",
     ]);
     let index = 0;
     while (index < commandArgs.length) {
@@ -881,7 +886,7 @@ function extractRmInvocation(commandArgs) {
         if (!token) {
             break;
         }
-        if (token.includes('=') && !token.startsWith('-')) {
+        if (token.includes("=") && !token.startsWith("-")) {
             index += 1;
             continue;
         }
@@ -895,10 +900,10 @@ function extractRmInvocation(commandArgs) {
     if (!commandToken) {
         return null;
     }
-    const isRmCommand = commandToken === 'rm' ||
-        commandToken.endsWith('/rm') ||
-        commandToken === 'rm.exe' ||
-        commandToken.endsWith('\\rm.exe');
+    const isRmCommand = commandToken === "rm" ||
+        commandToken.endsWith("/rm") ||
+        commandToken === "rm.exe" ||
+        commandToken.endsWith("\\rm.exe");
     if (!isRmCommand) {
         return null;
     }
@@ -906,25 +911,25 @@ function extractRmInvocation(commandArgs) {
 }
 // Expands guarded find expressions into an explicit delete plan for review.
 async function buildFindDeletePlan(findArgs, workspaceDir) {
-    if (!findArgs.some((token) => token === '-delete')) {
+    if (!findArgs.some((token) => token === "-delete")) {
         return null;
     }
-    if (findArgs.some((token) => token === '-exec' || token === '-execdir' || token === '-ok' || token === '-okdir')) {
-        console.error('Runner cannot safely translate find invocations that combine -delete with -exec/-ok. Run the command manually after reviewing the paths.');
+    if (findArgs.some((token) => token === "-exec" || token === "-execdir" || token === "-ok" || token === "-okdir")) {
+        console.error("Runner cannot safely translate find invocations that combine -delete with -exec/-ok. Run the command manually after reviewing the paths.");
         process.exit(1);
     }
     const printableArgs = [];
     for (const token of findArgs) {
-        if (token === '-delete') {
+        if (token === "-delete") {
             continue;
         }
         printableArgs.push(token);
     }
-    printableArgs.push('-print0');
+    printableArgs.push("-print0");
     const proc = Bun.spawn(printableArgs, {
         cwd: workspaceDir,
-        stdout: 'pipe',
-        stderr: 'pipe',
+        stdout: "pipe",
+        stderr: "pipe",
     });
     const [exitCode, stdoutBuf, stderrBuf] = await Promise.all([
         proc.exited,
@@ -942,7 +947,7 @@ async function buildFindDeletePlan(findArgs, workspaceDir) {
         }
         process.exit(exitCode);
     }
-    const matches = stdoutBuf.split('\0').filter((entry) => entry.length > 0);
+    const matches = stdoutBuf.split("\0").filter((entry) => entry.length > 0);
     if (matches.length === 0) {
         return { paths: [] };
     }
@@ -952,7 +957,7 @@ async function buildFindDeletePlan(findArgs, workspaceDir) {
         const absolute = isAbsolute(match) ? match : resolve(workspaceDir, match);
         const canonical = normalize(absolute);
         if (canonical === workspaceCanonical) {
-            console.error('Refusing to trash the current workspace via find -delete. Narrow your find predicate.');
+            console.error("Refusing to trash the current workspace via find -delete. Narrow your find predicate.");
             process.exit(1);
         }
         if (!uniquePaths.has(canonical)) {
@@ -975,19 +980,19 @@ function parseRmArguments(argv) {
         if (token === undefined) {
             break;
         }
-        if (!treatAsTarget && token === '--') {
+        if (!treatAsTarget && token === "--") {
             treatAsTarget = true;
             index += 1;
             continue;
         }
-        if (!treatAsTarget && token.startsWith('-') && token.length > 1) {
-            if (token.includes('f')) {
+        if (!treatAsTarget && token.startsWith("-") && token.length > 1) {
+            if (token.includes("f")) {
                 force = true;
             }
-            if (token.includes('i') || token === '--interactive') {
+            if (token.includes("i") || token === "--interactive") {
                 return null;
             }
-            if (token === '--help' || token === '--version') {
+            if (token === "--help" || token === "--version") {
                 return null;
             }
             index += 1;
@@ -1006,7 +1011,7 @@ function parseRmArguments(argv) {
 function parseGitRmArguments(argv, command) {
     const stagingOptions = [];
     const paths = [];
-    const optionsExpectingValue = new Set(['--pathspec-from-file']);
+    const optionsExpectingValue = new Set(["--pathspec-from-file"]);
     let allowMissing = false;
     let treatAsPath = false;
     let index = command.index + 1;
@@ -1015,16 +1020,16 @@ function parseGitRmArguments(argv, command) {
         if (token === undefined) {
             break;
         }
-        if (!treatAsPath && token === '--') {
+        if (!treatAsPath && token === "--") {
             treatAsPath = true;
             index += 1;
             continue;
         }
-        if (!treatAsPath && token.startsWith('-') && token.length > 1) {
-            if (token === '--cached' || token === '--dry-run' || token === '-n') {
+        if (!treatAsPath && token.startsWith("-") && token.length > 1) {
+            if (token === "--cached" || token === "--dry-run" || token === "-n") {
                 return null;
             }
-            if (token === '--ignore-unmatch' || token === '--force' || token === '-f') {
+            if (token === "--ignore-unmatch" || token === "--force" || token === "-f") {
                 allowMissing = true;
                 stagingOptions.push(token);
                 index += 1;
@@ -1041,21 +1046,21 @@ function parseGitRmArguments(argv, command) {
                 }
                 continue;
             }
-            if (!token.startsWith('--')) {
-                const flags = token.slice(1).split('');
+            if (!token.startsWith("--")) {
+                const flags = token.slice(1).split("");
                 const retainedFlags = [];
                 for (const flag of flags) {
-                    if (flag === 'n') {
+                    if (flag === "n") {
                         return null;
                     }
-                    if (flag === 'f') {
+                    if (flag === "f") {
                         allowMissing = true;
                         continue;
                     }
                     retainedFlags.push(flag);
                 }
                 if (retainedFlags.length > 0) {
-                    stagingOptions.push(`-${retainedFlags.join('')}`);
+                    stagingOptions.push(`-${retainedFlags.join("")}`);
                 }
                 index += 1;
                 continue;
@@ -1111,10 +1116,13 @@ async function movePathsToTrash(paths, baseDir, options) {
         try {
             const cliArgs = [trashCliCommand, ...existing.map((item) => item.absolute)];
             const proc = Bun.spawn(cliArgs, {
-                stdout: 'ignore',
-                stderr: 'pipe',
+                stdout: "ignore",
+                stderr: "pipe",
             });
-            const [exitCode, stderrText] = await Promise.all([proc.exited, readProcessStream(proc.stderr)]);
+            const [exitCode, stderrText] = await Promise.all([
+                proc.exited,
+                readProcessStream(proc.stderr),
+            ]);
             if (exitCode === 0) {
                 return { missing, errors: [] };
             }
@@ -1132,7 +1140,7 @@ async function movePathsToTrash(paths, baseDir, options) {
     if (!trashDir) {
         return {
             missing,
-            errors: ['Unable to locate macOS Trash directory (HOME/.Trash).'],
+            errors: ["Unable to locate macOS Trash directory (HOME/.Trash)."],
         };
     }
     const errors = [];
@@ -1160,7 +1168,7 @@ async function movePathsToTrash(paths, baseDir, options) {
 }
 // Resolves a potentially relative path against the workspace root.
 function resolvePath(baseDir, input) {
-    if (input.startsWith('/')) {
+    if (input.startsWith("/")) {
         return input;
     }
     return resolve(baseDir, input);
@@ -1171,7 +1179,7 @@ function getTrashDirectory() {
     if (!home) {
         return null;
     }
-    const trash = join(home, '.Trash');
+    const trash = join(home, ".Trash");
     if (!existsSync(trash)) {
         return null;
     }
@@ -1184,14 +1192,14 @@ function buildTrashTarget(trashDir, absolutePath) {
     let attempt = 0;
     let candidate = join(trashDir, baseName);
     while (existsSync(candidate)) {
-        candidate = join(trashDir, `${baseName}-${timestamp}${attempt > 0 ? `-${attempt}` : ''}`);
+        candidate = join(trashDir, `${baseName}-${timestamp}${attempt > 0 ? `-${attempt}` : ""}`);
         attempt += 1;
     }
     return candidate;
 }
 // Determines whether a rename failed because the devices differ.
 function isCrossDeviceError(error) {
-    return error instanceof Error && 'code' in error && error.code === 'EXDEV';
+    return (error instanceof Error && "code" in error && error.code === "EXDEV");
 }
 // Normalizes trash/rename errors into a readable string.
 function formatTrashError(error) {
@@ -1205,11 +1213,11 @@ async function stageGitRm(workDir, plan) {
     if (plan.paths.length === 0) {
         return;
     }
-    const args = ['git', 'rm', '--cached', '--quiet', ...plan.stagingOptions, '--', ...plan.paths];
+    const args = ["git", "rm", "--cached", "--quiet", ...plan.stagingOptions, "--", ...plan.paths];
     const proc = Bun.spawn(args, {
         cwd: workDir,
-        stdout: 'inherit',
-        stderr: 'inherit',
+        stdout: "inherit",
+        stderr: "inherit",
     });
     const exitCode = await proc.exited;
     if (exitCode !== 0) {
@@ -1221,18 +1229,18 @@ async function findTrashCliCommand() {
     if (cachedTrashCliCommand !== undefined) {
         return cachedTrashCliCommand;
     }
-    const candidateNames = ['trash-put', 'trash'];
+    const candidateNames = ["trash-put", "trash"];
     const searchDirs = new Set();
     if (process.env.PATH) {
-        for (const segment of process.env.PATH.split(':')) {
+        for (const segment of process.env.PATH.split(":")) {
             if (segment && segment.length > 0) {
                 searchDirs.add(segment);
             }
         }
     }
-    const homebrewPrefix = process.env.HOMEBREW_PREFIX ?? '/opt/homebrew';
-    searchDirs.add(join(homebrewPrefix, 'opt', 'trash', 'bin'));
-    searchDirs.add('/usr/local/opt/trash/bin');
+    const homebrewPrefix = process.env.HOMEBREW_PREFIX ?? "/opt/homebrew";
+    searchDirs.add(join(homebrewPrefix, "opt", "trash", "bin"));
+    searchDirs.add("/usr/local/opt/trash/bin");
     const candidatePaths = new Set();
     for (const name of candidateNames) {
         candidatePaths.add(name);
@@ -1242,9 +1250,9 @@ async function findTrashCliCommand() {
     }
     for (const candidate of candidatePaths) {
         try {
-            const proc = Bun.spawn([candidate, '--help'], {
-                stdout: 'ignore',
-                stderr: 'ignore',
+            const proc = Bun.spawn([candidate, "--help"], {
+                stdout: "ignore",
+                stderr: "ignore",
             });
             const exitCode = await proc.exited;
             if (exitCode === 0 || exitCode === 1) {
@@ -1264,12 +1272,12 @@ async function findTrashCliCommand() {
 // Consumes a child process stream to completion for logging/error output.
 async function readProcessStream(stream) {
     if (!stream) {
-        return '';
+        return "";
     }
     try {
         const candidate = stream;
         if (candidate.text) {
-            return (await candidate.text()) ?? '';
+            return (await candidate.text()) ?? "";
         }
     }
     catch {
@@ -1279,22 +1287,22 @@ async function readProcessStream(stream) {
         if (stream instanceof ReadableStream) {
             return await new Response(stream).text();
         }
-        if (typeof stream === 'object' && stream !== null) {
+        if (typeof stream === "object" && stream !== null) {
             return await new Response(stream).text();
         }
     }
     catch {
         // ignore errors and return empty string
     }
-    return '';
+    return "";
 }
 // Shows CLI usage plus optional error messaging.
 function printUsage(message) {
     if (message) {
         console.error(`[runner] ${message}`);
     }
-    console.error('Usage: runner [--] <command...>');
-    console.error('');
+    console.error("Usage: runner [--] <command...>");
+    console.error("");
     console.error(`Defaults: ${formatDuration(DEFAULT_TIMEOUT_MS)} timeout for most commands, ${formatDuration(EXTENDED_TIMEOUT_MS)} when lint/test suites are detected.`);
 }
 // Pretty-prints a millisecond duration for logs.
@@ -1323,56 +1331,56 @@ function formatDuration(durationMs) {
 }
 function resolveSummaryStyle(rawValue) {
     if (!rawValue) {
-        return 'compact';
+        return "compact";
     }
     const normalized = rawValue.trim().toLowerCase();
     switch (normalized) {
-        case 'minimal':
-            return 'minimal';
-        case 'verbose':
-            return 'verbose';
-        case 'short':
-            return 'compact';
+        case "minimal":
+            return "minimal";
+        case "verbose":
+            return "verbose";
+        case "short":
+            return "compact";
         default:
-            return 'compact';
+            return "compact";
     }
 }
 function formatCompletionSummary(options) {
     const { exitCode, elapsedMs, timedOut, commandLabel } = options;
-    const durationText = typeof elapsedMs === 'number' ? formatDuration(elapsedMs) : null;
+    const durationText = typeof elapsedMs === "number" ? formatDuration(elapsedMs) : null;
     // biome-ignore lint/nursery/noUnnecessaryConditions: switch makes the formatter easier to scan.
     switch (SUMMARY_STYLE) {
-        case 'minimal': {
+        case "minimal": {
             const parts = [`${exitCode}`];
             if (durationText) {
                 parts.push(durationText);
             }
             if (timedOut) {
-                parts.push('timeout');
+                parts.push("timeout");
             }
-            return `[runner] ${parts.join(' · ')}`;
+            return `[runner] ${parts.join(" · ")}`;
         }
-        case 'verbose': {
-            const elapsedPart = durationText ? `, elapsed ${durationText}` : '';
-            const timeoutPart = timedOut ? '; timed out' : '';
+        case "verbose": {
+            const elapsedPart = durationText ? `, elapsed ${durationText}` : "";
+            const timeoutPart = timedOut ? "; timed out" : "";
             return `[runner] Finished ${commandLabel} (exit ${exitCode}${elapsedPart}${timeoutPart}).`;
         }
         default: {
-            const elapsedPart = durationText ? ` in ${durationText}` : '';
-            const timeoutPart = timedOut ? ' (timeout)' : '';
+            const elapsedPart = durationText ? ` in ${durationText}` : "";
+            const timeoutPart = timedOut ? " (timeout)" : "";
             return `[runner] exit ${exitCode}${elapsedPart}${timeoutPart}`;
         }
     }
 }
 // Joins the command args in a shell-friendly way for log display.
 function formatDisplayCommand(commandArgs) {
-    return commandArgs.map((token) => (token.includes(' ') ? `"${token}"` : token)).join(' ');
+    return commandArgs.map((token) => (token.includes(" ") ? `"${token}"` : token)).join(" ");
 }
 // Tells whether the runner is already executing inside the tmux guard.
 function isRunnerTmuxSession() {
     const value = process.env.RUNNER_TMUX;
     if (value) {
-        return value !== '0' && value.toLowerCase() !== 'false';
+        return value !== "0" && value.toLowerCase() !== "false";
     }
     return Boolean(process.env.TMUX);
 }