@wjarka/cezarion 0.14.2-pr404.619 → 0.14.2-pr406.627

package/README.md

@@ -599,7 +599,7 @@ Useful environment variables:
 | `GITHUB_TOKEN` | Fallback for GitHub reads/PRs when `gh` isn't authenticated. |
 | `CEZ_ENV_PASSTHROUGH=A,B` | Forward these extra host env vars to spawned agents. By default agents get a least-privilege env (safe shell/toolchain vars + the backend's own auth + `GITHUB_TOKEN` + `CEZ_*`), not your full environment — use this to add a var an agent needs. |
 | `CEZ_AGENT_ENV_FULL=1` | Escape hatch: give spawned agents the full host environment (pre-hardening behavior). Off by default; only set it if you understand that this hands every host secret to the agent process. |
-| `CEZ_AGENT_TMPDIR=0` | Stop giving each task its own temp directory and hand agents the host `TMPDIR` again (pre-#785 behavior). On by default: every run gets `TMPDIR`/`TEMP`/`TMP` pointing at `.ai/cezar/tmp/<task-id>`, created and write-probed before the agent spawns and reaped when the run ends, so concurrent tasks stop sharing one directory and a task refuses to start rather than run against a temp directory that silently swallows its shell output (see Troubleshooting below). Only an exact `0` disables it, and it disables the whole thing — the pre-spawn check included, so this stays an escape hatch you can actually take. |
+| `CEZ_AGENT_TMPDIR=0` | Stop giving each task its own temp directory and hand agents the host `TMPDIR` again (pre-#785 behavior). On by default: every run gets `TMPDIR`/`TEMP`/`TMP` pointing at `.ai/cezar/tmp/<task-id>`, created and write-probed before the agent spawns and reaped when the run ends — and kept short enough for unix-socket paths: a checkout so deep that `.ai/cezar/tmp/<task-id>` would cross the kernel's socket-path limit resolves it to a `cez-agent-…` directory under the system temp dir instead (#387). So concurrent tasks stop sharing one directory and a task refuses to start rather than run against a temp directory that silently swallows its shell output (see Troubleshooting below). Only an exact `0` disables it, and it disables the whole thing — the pre-spawn check included, so this stays an escape hatch you can actually take. |
 | `CEZ_REDACT_SECRETS=0` | Disable scrubbing of credential values/token shapes from the on-disk state (the NDJSON transcript and the free-text fields of `runs.json`). On by default; leave it on. Controller-generated delegation tokens are always scrubbed. Best-effort defense-in-depth, not a guarantee: it catches known token shapes and the values of your own secret-named env vars, so a credential in neither category can still get through. |
 | `CEZ_TITLE_UPDATES=0` | Turn off the live task-title refresh (namer re-runs on each turn end). The Settings → Agents toggle overrides this default. |
 | `CEZ_AUTONAME=0` | Disable ALL LLM task naming (creation + live) — titles stay heuristic (`437: /om-auto-review-pr`). Under `CEZ_DRY_RUN=1` naming is already off unless forced with `CEZ_AUTONAME=1`. |
@@ -636,6 +636,22 @@ per-task directory and pre-spawn check alike — and hands agents the host
 `TMPDIR` again, which is the way out if the check itself is wrong on your
 platform.
 
+### Troubleshooting: tools inside a task fail with a socket-path error
+
+**Symptom.** Inside a task, `npm install`, `npm run typecheck`, or another tool
+dies with `listen EINVAL` or a "socket path too long" / `ENAMETOOLONG` error —
+with `TMPDIR=/tmp` set by hand, the same commands succeed. Tools like `tsx` bind
+*named* unix sockets under `TMPDIR` (its IPC server builds
+`<tmpdir>/tsx-<uid>/<pid>.pipe`), and the kernel caps a socket path at 104–108
+bytes — a temp directory near that length leaves no room for the name.
+
+**Fix.** Since #387 cezar keeps each task's temp directory at most 78 bytes. A
+checkout deep enough to push `.ai/cezar/tmp/<task-id>` past that limit gets a
+short `cez-agent-…` directory under the system temp directory instead — still
+per-task, still write-probed before the agent spawns, still reaped when the run
+ends. Checkouts whose path already fits keep the repo-local directory.
+`CEZ_AGENT_TMPDIR=0` reverts the whole mechanism to the host `TMPDIR`.
+
 ---
 
 ## Coding agent backends

package/dist/runs/agent-tmpdir.d.ts

@@ -1,5 +1,24 @@
 /** Where a run's agent-scoped temp directory lives. */
 export declare function agentTmpDir(dataDir: string, runId: string): string;
+/**
+ * The longest a per-run temp directory may be so that tools binding named
+ * unix sockets under it still work (#387). `sockaddr_un.sun_path` holds 108
+ * bytes on Linux and 104 on macOS, NUL included; the longest name a known
+ * tool lays down under TMPDIR is tsx's IPC socket, `<tmpdir>/tsx-<uid>/
+ * <pid>.pipe`, ~22 bytes (Chrome's `SingletonSocket` is 16). A 78-byte
+ * ceiling leaves ≥25 bytes of headroom on the tighter platform — past
+ * anything these tools generate — while keeping ordinary checkouts on their
+ * repo-local scratch: only a genuinely deep path, like the 100-character
+ * directories #387 reports, moves to the fallback.
+ */
+export declare const MAX_SOCKET_SAFE_DIR_LENGTH = 78;
+/**
+ * The temp directory this run should use: the repo-local per-run directory
+ * when it is short enough for unix-socket paths, and a short directory under
+ * the OS temp root when it is not (#387). Pure resolution — nothing is
+ * created, nothing is probed; `agentTmpEnv` owns the side effects.
+ */
+export declare function resolveAgentTmpDir(dataDir: string, runId: string): string;
 /**
  * The preflight's failure. Named so the spawn path can tell it apart from an
  * ordinary crash and turn it into the run's `error` — the same treatment
@@ -17,12 +36,19 @@ export declare function agentTmpDirEnabled(env?: NodeJS.ProcessEnv): boolean;
  * directory actually accepts writes. Throws `AgentTempDirError` when it does
  * not — callers turn that into the run's error rather than spawning.
  *
+ * The directory is `resolveAgentTmpDir`'s call: repo-local when that path is
+ * short enough for unix-socket paths, a digest-named directory under the OS
+ * temp root when the checkout is too deep for one (#387). In the shared OS
+ * root the directory is created private to this user (0700); repo-local
+ * scratch already sits inside the user's own tree and keeps the default mode
+ * it always had.
+ *
  * All three spellings are set, on every platform: a tool that reads `TMP` (or
  * `TEMP`) would otherwise keep following the host value straight back to the
  * exhausted directory this exists to escape.
  *
- * Returns `{}` under the opt-out, without probing anything: the hatch turns the
- * whole feature off, preflight included, so it stays an escape someone can
+ * Returns `{}` under the opt-out, without probing anything: the hatch turns
+ * the whole feature off, preflight included, so it stays an escape someone can
  * actually take.
  */
 export declare function agentTmpEnv(dataDir: string, runId: string, env?: NodeJS.ProcessEnv): Record<string, string>;
@@ -30,12 +56,24 @@ export declare function agentTmpEnv(dataDir: string, runId: string, env?: NodeJS
  * Reap one run's directory. Scratch, not an artifact: nothing reads it once the
  * agent is gone, and a Continue re-creates it through `agentTmpEnv`. Never
  * throws — reaping must not break a terminal transition.
+ *
+ * Both locations are tried because the resolution depends on the length of
+ * `dataDir`, which a Continue or a re-base can change between mint and reap;
+ * removing a name that was never minted is a no-op, so trying both is pure
+ * safety.
  */
 export declare function removeAgentTmpDir(dataDir: string, runId: string): void;
 /**
  * Remove every per-run directory that is not in `keepRunIds` — the startup
  * sweep, so a crash (which never reaches the terminal-transition reap) cannot
- * accumulate them forever. Confined to `<dataDir>/tmp`; sibling run state is
- * never enumerated, let alone touched. Returns the ids actually reaped.
+ * accumulate them forever. Two confined roots are swept and nothing else:
+ *
+ *   - `<dataDir>/tmp`, where entries ARE the run ids (reports the ids reaped);
+ *   - the OS temp root's `cez-agent-<12 hex>` directories (#387), where the
+ *     name digests the dataDir and is not reversible to a run id (reports the
+ *     directory names reaped). The pattern is exact — prefix, lowercase hex,
+ *     fixed length, directories only — and a directory is removed only when
+ *     THIS dataDir cannot claim it, so another repo's scratch in the shared
+ *     root is never touched.
  */
 export declare function sweepAgentTmpDirs(dataDir: string, keepRunIds: Iterable<string>): string[];

package/dist/runs/agent-tmpdir.js

@@ -1,5 +1,5 @@
 /**
- * Task-scoped temp directory for spawned agents (#785).
+ * Task-scoped temp directory for spawned agents (#785, length-capped by #387).
  *
  * Every agent used to inherit the host's `TMPDIR`/`TEMP`/`TMP` verbatim — they
  * ride in on `buildChildEnv`'s base allowlist — so every run on the machine
@@ -12,7 +12,7 @@
  * the agent reads back an empty result with a bogus exit status. Nothing in the
  * cockpit says anything is wrong.
  *
- * Two properties fix that, and this module owns both:
+ * Three properties fix that, and this module owns all of them:
  *
  *   1. **Isolation** — each run gets `<dataDir>/tmp/<runId>`, on the same disk
  *      as the run's own state rather than a shared tmpfs, reaped when the run
@@ -21,15 +21,28 @@
  *   2. **Fail loud** — the directory is write-probed before the backend spawns.
  *      A run that cannot get a working temp directory fails immediately with a
  *      named, actionable error instead of spawning an agent that will run blind.
+ *   3. **Short enough to bind** (#387) — tools bind *named* unix sockets under
+ *      `TMPDIR` (tsx's IPC server lays down `<tmpdir>/tsx-<uid>/<pid>.pipe`,
+ *      Chrome a `SingletonSocket`), and the kernel caps a socket path at
+ *      `sun_path` — 108 bytes on Linux, 104 on macOS, NUL included. A checkout
+ *      deep enough (Cezar's own nested task worktrees land past 100 chars)
+ *      pushed every such bind past the cap and broke `npm install` and
+ *      typechecking inside the run. A directory that would land too deep
+ *      resolves instead to a short digest-named directory under the OS temp
+ *      root — still per-run, still probed, still reaped. A repo whose own path
+ *      already fits keeps today's directory, byte for byte.
  *
- * `CEZ_AGENT_TMPDIR=0` opts out of BOTH — cezar keeps its hands off the temp
- * directory entirely and the pre-#785 behaviour is back, byte for byte. That is
- * deliberate: an escape hatch that still imposed the preflight would be a hatch
- * you cannot actually escape through, and this repo's graceful-degradation rule
- * says a new check must never become the only way to run.
+ * `CEZ_AGENT_TMPDIR=0` opts out of ALL THREE — cezar keeps its hands off the
+ * temp directory entirely and the pre-#785 behaviour is back, byte for byte.
+ * That is deliberate: an escape hatch that still imposed the preflight would be
+ * a hatch you cannot actually escape through, and this repo's
+ * graceful-degradation rule says a new check must never become the only way to
+ * run.
  */
-import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readdirSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { basename, join } from 'node:path';
 /** Run ids are uuids; anything else must never reach a recursive `rmSync`.
  *
  *  `.` and `..` are excluded explicitly, not as pedantry: they match the
@@ -48,6 +61,58 @@ export function agentTmpDir(dataDir, runId) {
 function agentTmpRoot(dataDir) {
     return join(dataDir, 'tmp');
 }
+/**
+ * The longest a per-run temp directory may be so that tools binding named
+ * unix sockets under it still work (#387). `sockaddr_un.sun_path` holds 108
+ * bytes on Linux and 104 on macOS, NUL included; the longest name a known
+ * tool lays down under TMPDIR is tsx's IPC socket, `<tmpdir>/tsx-<uid>/
+ * <pid>.pipe`, ~22 bytes (Chrome's `SingletonSocket` is 16). A 78-byte
+ * ceiling leaves ≥25 bytes of headroom on the tighter platform — past
+ * anything these tools generate — while keeping ordinary checkouts on their
+ * repo-local scratch: only a genuinely deep path, like the 100-character
+ * directories #387 reports, moves to the fallback.
+ */
+export const MAX_SOCKET_SAFE_DIR_LENGTH = 78;
+/** The OS temp root, symlink-resolved: `bind(2)` bounds the path the kernel
+ *  walks, so the check must measure what the path resolves to, not what it
+ *  says (macOS hands out `/var/folders/...` through a `/private/var` symlink). */
+function osTempRoot() {
+    try {
+        return realpathSync(tmpdir());
+    }
+    catch {
+        return tmpdir();
+    }
+}
+const FALLBACK_PREFIX = 'cez-agent-';
+const FALLBACK_NAME_LENGTH = 12;
+/**
+ * Where the fallback lives for this dataDir+run pair. The name digests the
+ * dataDir in, because the OS temp root is SHARED: a name derived from the run
+ * id alone would let one repo's reap or sweep delete another repo's live
+ * scratch when two run ids happen to share their leading characters.
+ */
+function fallbackTmpDir(dataDir, runId) {
+    const digest = createHash('sha256').update(`${dataDir}:${runId}`).digest('hex');
+    return join(osTempRoot(), FALLBACK_PREFIX + digest.slice(0, FALLBACK_NAME_LENGTH));
+}
+/**
+ * The temp directory this run should use: the repo-local per-run directory
+ * when it is short enough for unix-socket paths, and a short directory under
+ * the OS temp root when it is not (#387). Pure resolution — nothing is
+ * created, nothing is probed; `agentTmpEnv` owns the side effects.
+ */
+export function resolveAgentTmpDir(dataDir, runId) {
+    const local = agentTmpDir(dataDir, runId);
+    if (local.length <= MAX_SOCKET_SAFE_DIR_LENGTH)
+        return local;
+    const fallback = fallbackTmpDir(dataDir, runId);
+    if (fallback.length <= MAX_SOCKET_SAFE_DIR_LENGTH)
+        return fallback;
+    // No candidate fits (a pathological host TMPDIR over a pathological repo
+    // path together): keep whichever leaves socket names the most room.
+    return fallback.length < local.length ? fallback : local;
+}
 /** `errno` → the phrasing a human recognises from their shell. */
 const REASONS = {
     EDQUOT: 'Disk quota exceeded',
@@ -110,20 +175,28 @@ function probeWritable(dir) {
  * directory actually accepts writes. Throws `AgentTempDirError` when it does
  * not — callers turn that into the run's error rather than spawning.
  *
+ * The directory is `resolveAgentTmpDir`'s call: repo-local when that path is
+ * short enough for unix-socket paths, a digest-named directory under the OS
+ * temp root when the checkout is too deep for one (#387). In the shared OS
+ * root the directory is created private to this user (0700); repo-local
+ * scratch already sits inside the user's own tree and keeps the default mode
+ * it always had.
+ *
  * All three spellings are set, on every platform: a tool that reads `TMP` (or
  * `TEMP`) would otherwise keep following the host value straight back to the
  * exhausted directory this exists to escape.
  *
- * Returns `{}` under the opt-out, without probing anything: the hatch turns the
- * whole feature off, preflight included, so it stays an escape someone can
+ * Returns `{}` under the opt-out, without probing anything: the hatch turns
+ * the whole feature off, preflight included, so it stays an escape someone can
  * actually take.
  */
 export function agentTmpEnv(dataDir, runId, env = process.env) {
     if (!agentTmpDirEnabled(env))
         return {};
-    const dir = agentTmpDir(dataDir, runId);
+    const local = agentTmpDir(dataDir, runId);
+    const dir = resolveAgentTmpDir(dataDir, runId);
     try {
-        mkdirSync(dir, { recursive: true });
+        mkdirSync(dir, dir === local ? { recursive: true } : { recursive: true, mode: 0o700 });
     }
     catch (err) {
         throw new AgentTempDirError(dir, err);
@@ -135,44 +208,85 @@ export function agentTmpEnv(dataDir, runId, env = process.env) {
  * Reap one run's directory. Scratch, not an artifact: nothing reads it once the
  * agent is gone, and a Continue re-creates it through `agentTmpEnv`. Never
  * throws — reaping must not break a terminal transition.
+ *
+ * Both locations are tried because the resolution depends on the length of
+ * `dataDir`, which a Continue or a re-base can change between mint and reap;
+ * removing a name that was never minted is a no-op, so trying both is pure
+ * safety.
  */
 export function removeAgentTmpDir(dataDir, runId) {
     if (!safeRunId(runId))
         return;
-    try {
-        rmSync(agentTmpDir(dataDir, runId), { recursive: true, force: true });
-    }
-    catch {
-        // best-effort; the startup sweep picks up whatever survives.
+    for (const dir of [agentTmpDir(dataDir, runId), fallbackTmpDir(dataDir, runId)]) {
+        try {
+            rmSync(dir, { recursive: true, force: true });
+        }
+        catch {
+            // best-effort; the startup sweep picks up whatever survives.
+        }
     }
 }
 /**
  * Remove every per-run directory that is not in `keepRunIds` — the startup
  * sweep, so a crash (which never reaches the terminal-transition reap) cannot
- * accumulate them forever. Confined to `<dataDir>/tmp`; sibling run state is
- * never enumerated, let alone touched. Returns the ids actually reaped.
+ * accumulate them forever. Two confined roots are swept and nothing else:
+ *
+ *   - `<dataDir>/tmp`, where entries ARE the run ids (reports the ids reaped);
+ *   - the OS temp root's `cez-agent-<12 hex>` directories (#387), where the
+ *     name digests the dataDir and is not reversible to a run id (reports the
+ *     directory names reaped). The pattern is exact — prefix, lowercase hex,
+ *     fixed length, directories only — and a directory is removed only when
+ *     THIS dataDir cannot claim it, so another repo's scratch in the shared
+ *     root is never touched.
  */
 export function sweepAgentTmpDirs(dataDir, keepRunIds) {
-    const root = agentTmpRoot(dataDir);
-    if (!existsSync(root))
-        return [];
     const keep = new Set(keepRunIds);
     const reaped = [];
     let entries;
+    const root = agentTmpRoot(dataDir);
+    if (existsSync(root)) {
+        try {
+            entries = readdirSync(root, { withFileTypes: true })
+                .filter((e) => e.isDirectory())
+                .map((e) => e.name);
+        }
+        catch {
+            entries = [];
+        }
+        for (const name of entries) {
+            if (keep.has(name) || !safeRunId(name))
+                continue;
+            try {
+                rmSync(join(root, name), { recursive: true, force: true });
+                reaped.push(name);
+            }
+            catch {
+                // best-effort: a locked directory is retried on the next boot.
+            }
+        }
+    }
+    // The #387 fallback location, in the shared OS temp root. Kept narrow on
+    // purpose: exact prefix, 12 lowercase-hex name, directories only, and only
+    // names this dataDir cannot claim.
+    const claimed = new Set([...keep].filter(safeRunId).map((id) => basename(fallbackTmpDir(dataDir, id))));
+    const osRoot = osTempRoot();
+    let fallbackEntries;
     try {
-        entries = readdirSync(root, { withFileTypes: true })
-            .filter((e) => e.isDirectory())
-            .map((e) => e.name);
+        fallbackEntries = readdirSync(osRoot, { withFileTypes: true });
     }
     catch {
-        return [];
+        return reaped;
     }
-    for (const name of entries) {
-        if (keep.has(name) || !safeRunId(name))
+    for (const entry of fallbackEntries) {
+        if (!entry.isDirectory() || !entry.name.startsWith(FALLBACK_PREFIX))
+            continue;
+        if (!/^[0-9a-f]{12}$/.test(entry.name.slice(FALLBACK_PREFIX.length)))
+            continue;
+        if (claimed.has(entry.name))
             continue;
         try {
-            rmSync(join(root, name), { recursive: true, force: true });
-            reaped.push(name);
+            rmSync(join(osRoot, entry.name), { recursive: true, force: true });
+            reaped.push(entry.name);
         }
         catch {
             // best-effort: a locked directory is retried on the next boot.

package/dist/runs/agent-tmpdir.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-tmpdir.js","sourceRoot":"","sources":["../../src/runs/agent-tmpdir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;8EAK8E;AAC9E,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AACnE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACxD,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;kFACkF;AAClF,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,kEAAkE;AAClE,MAAM,OAAO,GAAqC;IAChD,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,MAAe;QACvC,MAAM,IAAI,GAAI,MAA4C,EAAE,IAAI,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;eAC9B,IAAI;eACJ,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,KAAK,CACH,yCAAyC,IAAI,KAAK,GAAG,uBAAuB;cACxE,2DAA2D,CAChE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,gBAAgB,KAAK,GAAG,CAAC;AACtC,CAAC;AAED;8EAC8E;AAC9E,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB;;;;;GAKG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,KAAa,EACb,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAA4B;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"agent-tmpdir.js","sourceRoot":"","sources":["../../src/runs/agent-tmpdir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;8EAK8E;AAC9E,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AACnE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACxD,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;kFACkF;AAClF,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;kFAEkF;AAClF,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,IAAI,0BAA0B;QAAE,OAAO,QAAQ,CAAC;IACnE,yEAAyE;IACzE,oEAAoE;IACpE,OAAO,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAED,kEAAkE;AAClE,MAAM,OAAO,GAAqC;IAChD,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,MAAe;QACvC,MAAM,IAAI,GAAI,MAA4C,EAAE,IAAI,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;eAC9B,IAAI;eACJ,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,KAAK,CACH,yCAAyC,IAAI,KAAK,GAAG,uBAAuB;cACxE,2DAA2D,CAChE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,gBAAgB,KAAK,GAAG,CAAC;AACtC,CAAC;AAED;8EAC8E;AAC9E,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB;;;;;GAKG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,KAAa,EACb,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAA4B;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAiB,CAAC;IACtB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjD,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,eAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,eAAe,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,SAAS;QAC9E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QAC/E,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wjarka/cezarion",
-  "version": "0.14.2-pr404.619",
+  "version": "0.14.2-pr406.627",
   "description": "Local cockpit for running and tracking AI agent tasks in your repo. Uses your logged-in `claude` CLI and `gh` — zero config, zero database.",
   "license": "MIT",
   "type": "module",
@@ -50,8 +50,8 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@open-mercato/cezar-api-client": "0.14.2-pr404.619",
-    "@open-mercato/cezar-contract": "0.14.2-pr404.619",
+    "@open-mercato/cezar-api-client": "0.14.2-pr406.627",
+    "@open-mercato/cezar-contract": "0.14.2-pr406.627",
     "@types/node": "^20.14.0",
     "@types/ws": "^8.18.1",
     "esbuild": "^0.28.1",