@tablation/crew 0.126.8 → 0.126.10

package/dist/cli.js

@@ -2747,11 +2747,12 @@ function tablationEndpoint(url) {
   }
   return { host, port };
 }
-var TOOL_BINARIES = ["/usr/bin/curl", "/usr/bin/node", "/usr/local/bin/node", "/usr/bin/npm", "/usr/local/bin/npm", "/usr/local/bin/pnpm", "/usr/bin/corepack", "/usr/local/bin/corepack"];
+var CREW_BIN = "/opt/crew/bin";
+var TOOL_BINARIES = ["/usr/bin/curl", `${CREW_BIN}/node`, "/usr/bin/node", "/usr/local/bin/node", "/usr/bin/npm", "/usr/local/bin/npm", "/usr/local/bin/pnpm", "/usr/bin/corepack", "/usr/local/bin/corepack"];
 var GIT_BINARIES = ["/usr/bin/git", "/usr/lib/git-core/git-remote-http", "/usr/lib/git-core/git-remote-https"];
 function policyGroups(input) {
   const harness = `/usr/local/bin/${basename2(input.harnessBin)}`;
-  const harnessBins = [.../* @__PURE__ */ new Set([harness, `/usr/bin/${basename2(input.harnessBin)}`, "/usr/bin/node", "/usr/local/bin/node"])];
+  const harnessBins = [.../* @__PURE__ */ new Set([`${CREW_BIN}/${basename2(input.harnessBin)}`, harness, `/usr/bin/${basename2(input.harnessBin)}`, `${CREW_BIN}/node`, "/usr/bin/node", "/usr/local/bin/node"])];
   const groups = [];
   const tablation = tablationEndpoint(input.tablationUrl);
   groups.push({
@@ -10792,8 +10793,10 @@ var SandboxRunner = class {
     return execFileP(this.cfg.bin, args, { env: o.env ?? process.env, maxBuffer: 16 * 1024 * 1024 });
   }
   async start(plan, o) {
-    const origin = this.originOf(plan.cwd);
-    if (!origin) throw new Error(`cannot find the origin remote of ${plan.cwd}, so there is nothing to clone into the sandbox`);
+    const origin = plan.sandboxOrigin ?? (plan.repo ? null : this.originOf(plan.cwd));
+    if (!origin) {
+      throw new Error(plan.repo ? `cannot place the repository ${plan.repo} of ${plan.ticket ?? "this run"} on route ${plan.route}, so there is nothing to clone into the sandbox` : `cannot find the origin remote of ${plan.cwd}, so there is nothing to clone into the sandbox`);
+    }
     const repo = parseRemote(origin);
     if (!repo) throw new Error(`cannot read a forge host and path from the origin remote ${origin}`);
     const name = sandboxName(plan);
@@ -10975,6 +10978,13 @@ function assemblePrompt(p) {
 }
 var AgentError = class extends Error {
 };
+function sandboxOriginFor(route2, repo) {
+  if (!repo) return void 0;
+  const repos = reposOf(route2);
+  const target = repos.find((r) => r.name === repo) ?? (repos.length === 1 ? repos[0] : void 0);
+  if (!target) return void 0;
+  return originUrlOf(target.dir, "origin") ?? (target.remote ? cloneUrlFor(target.remote, { host: target.forgeHost }) : void 0);
+}
 function sandboxPolicyInputFor(route2, toolchain, o) {
   const repos = reposOf(route2);
   const forgeHosts = [...new Set(repos.map((r) => r.forgeHost ?? "github.com"))];
@@ -11152,6 +11162,7 @@ function planAgentRun(o) {
   const adapter = adapterFor(toolchain.harness);
   const code = codeBridgeFor(o, adapter.harness);
   const sandboxLsp = o.ship.runner === "sandbox" && adapter.harness === "claude" ? sandboxLspPluginFor(o.route, o.repo) : void 0;
+  const sandboxOrigin = o.ship.runner === "sandbox" ? sandboxOriginFor(o.route, o.repo) : void 0;
   const sandboxFiles = [...code?.files ?? [], ...sandboxLsp?.files ?? []];
   const invocation = adapter.invocation(toolchain, {
     code,
@@ -11204,6 +11215,7 @@ function planAgentRun(o) {
     ...o.ship.runner === "sandbox" ? {
       runner: "sandbox",
       ...o.ship.sandbox ? { sandboxConfig: o.ship.sandbox } : {},
+      ...sandboxOrigin ? { sandboxOrigin } : {},
       sandboxPolicy: sandboxPolicyInputFor(o.route, toolchain, { harnessBin: invocation.bin, repo: o.repo, sandbox: o.ship.sandbox }),
       ...sandboxFiles.length ? { sandboxFiles } : {}
     } : {},
@@ -14892,6 +14904,20 @@ async function runProvision(o, deps, write, human) {
       emit("route_enabled", `enabled route ${route2}`, { route: route2 });
     }
   }
+  summary.seatKeys = [];
+  for (const route2 of routeNames) {
+    const res = deps.crew(["agents", "sync", route2]);
+    const lines2 = res.stdout.split("\n").map((l) => l.trim());
+    const minted = lines2.flatMap((l) => /^(\w+): agent key minted/.exec(l)?.[1] ?? []);
+    const refused = lines2.filter((l) => /could not mint an agent key|^seat keys: not minted/.test(l));
+    summary.seatKeys.push({ route: route2, minted });
+    if (minted.length > 0) summary.changed = true;
+    emit("seat_keys", `seat keys: ${minted.length} minted${minted.length > 0 ? ` (${minted.join(", ")})` : ""} for ${route2}`, { route: route2, minted });
+    if (res.status >= 2 || refused.length > 0) {
+      const why = refused[0] ?? (res.stderr.trim().split("\n").pop() || `crew agents sync exited ${res.status}`);
+      return fail2(PROVISION_EXIT.failed, `seat keys for ${route2}: ${why}`, { stage: "seat_keys", route: route2 });
+    }
+  }
   const before = deps.installState();
   if (before.unitsStale || !before.running || !before.lingering) {
     const res = deps.crew(["install"]);

package/dist/sandbox-intel-bridge.cjs

@@ -24646,6 +24646,8 @@ function parseEndpoint(raw, defaultPort = 443) {
   if (!IPV4.test(host) && !HOST.test(host)) throw new SandboxPolicyError(`"${raw}" is not a valid host name`);
   return { host, port };
 }
+var CREW_BIN = "/opt/crew/bin";
+var TOOL_BINARIES = ["/usr/bin/curl", `${CREW_BIN}/node`, "/usr/bin/node", "/usr/local/bin/node", "/usr/bin/npm", "/usr/local/bin/npm", "/usr/local/bin/pnpm", "/usr/bin/corepack", "/usr/local/bin/corepack"];
 function parseSandboxNetwork(raw, file, fail2) {
   if (raw === void 0 || raw === null) return void 0;
   if (typeof raw !== "object" || Array.isArray(raw)) throw fail2(`${file}: sandbox must be a mapping`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tablation/crew",
-  "version": "0.126.8",
+  "version": "0.126.10",
   "description": "A standing team of headless agents that picks work off a Tablation board, does it on a machine you control, and reports back.",
   "type": "module",
   "license": "MIT",