@wjarka/cezarion 0.14.2-pr406.627 → 0.14.2-pr407.628

package/README.md

@@ -599,7 +599,7 @@ Useful environment variables:
 | `GITHUB_TOKEN` | Fallback for GitHub reads/PRs when `gh` isn't authenticated. |
 | `CEZ_ENV_PASSTHROUGH=A,B` | Forward these extra host env vars to spawned agents. By default agents get a least-privilege env (safe shell/toolchain vars + the backend's own auth + `GITHUB_TOKEN` + `CEZ_*`), not your full environment — use this to add a var an agent needs. |
 | `CEZ_AGENT_ENV_FULL=1` | Escape hatch: give spawned agents the full host environment (pre-hardening behavior). Off by default; only set it if you understand that this hands every host secret to the agent process. |
-| `CEZ_AGENT_TMPDIR=0` | Stop giving each task its own temp directory and hand agents the host `TMPDIR` again (pre-#785 behavior). On by default: every run gets `TMPDIR`/`TEMP`/`TMP` pointing at `.ai/cezar/tmp/<task-id>`, created and write-probed before the agent spawns and reaped when the run ends — and kept short enough for unix-socket paths: a checkout so deep that `.ai/cezar/tmp/<task-id>` would cross the kernel's socket-path limit resolves it to a `cez-agent-…` directory under the system temp dir instead (#387). So concurrent tasks stop sharing one directory and a task refuses to start rather than run against a temp directory that silently swallows its shell output (see Troubleshooting below). Only an exact `0` disables it, and it disables the whole thing — the pre-spawn check included, so this stays an escape hatch you can actually take. |
+| `CEZ_AGENT_TMPDIR=0` | Stop giving each task its own temp directory and hand agents the host `TMPDIR` again (pre-#785 behavior). On by default: every run gets `TMPDIR`/`TEMP`/`TMP` pointing at `.ai/cezar/tmp/<task-id>`, created and write-probed before the agent spawns and reaped when the run ends, so concurrent tasks stop sharing one directory and a task refuses to start rather than run against a temp directory that silently swallows its shell output (see Troubleshooting below). Only an exact `0` disables it, and it disables the whole thing — the pre-spawn check included, so this stays an escape hatch you can actually take. |
 | `CEZ_REDACT_SECRETS=0` | Disable scrubbing of credential values/token shapes from the on-disk state (the NDJSON transcript and the free-text fields of `runs.json`). On by default; leave it on. Controller-generated delegation tokens are always scrubbed. Best-effort defense-in-depth, not a guarantee: it catches known token shapes and the values of your own secret-named env vars, so a credential in neither category can still get through. |
 | `CEZ_TITLE_UPDATES=0` | Turn off the live task-title refresh (namer re-runs on each turn end). The Settings → Agents toggle overrides this default. |
 | `CEZ_AUTONAME=0` | Disable ALL LLM task naming (creation + live) — titles stay heuristic (`437: /om-auto-review-pr`). Under `CEZ_DRY_RUN=1` naming is already off unless forced with `CEZ_AUTONAME=1`. |
@@ -636,22 +636,6 @@ per-task directory and pre-spawn check alike — and hands agents the host
 `TMPDIR` again, which is the way out if the check itself is wrong on your
 platform.
 
-### Troubleshooting: tools inside a task fail with a socket-path error
-
-**Symptom.** Inside a task, `npm install`, `npm run typecheck`, or another tool
-dies with `listen EINVAL` or a "socket path too long" / `ENAMETOOLONG` error —
-with `TMPDIR=/tmp` set by hand, the same commands succeed. Tools like `tsx` bind
-*named* unix sockets under `TMPDIR` (its IPC server builds
-`<tmpdir>/tsx-<uid>/<pid>.pipe`), and the kernel caps a socket path at 104–108
-bytes — a temp directory near that length leaves no room for the name.
-
-**Fix.** Since #387 cezar keeps each task's temp directory at most 78 bytes. A
-checkout deep enough to push `.ai/cezar/tmp/<task-id>` past that limit gets a
-short `cez-agent-…` directory under the system temp directory instead — still
-per-task, still write-probed before the agent spawns, still reaped when the run
-ends. Checkouts whose path already fits keep the repo-local directory.
-`CEZ_AGENT_TMPDIR=0` reverts the whole mechanism to the host `TMPDIR`.
-
 ---
 
 ## Coding agent backends

package/dist/runs/agent-tmpdir.d.ts

@@ -1,24 +1,5 @@
 /** Where a run's agent-scoped temp directory lives. */
 export declare function agentTmpDir(dataDir: string, runId: string): string;
-/**
- * The longest a per-run temp directory may be so that tools binding named
- * unix sockets under it still work (#387). `sockaddr_un.sun_path` holds 108
- * bytes on Linux and 104 on macOS, NUL included; the longest name a known
- * tool lays down under TMPDIR is tsx's IPC socket, `<tmpdir>/tsx-<uid>/
- * <pid>.pipe`, ~22 bytes (Chrome's `SingletonSocket` is 16). A 78-byte
- * ceiling leaves ≥25 bytes of headroom on the tighter platform — past
- * anything these tools generate — while keeping ordinary checkouts on their
- * repo-local scratch: only a genuinely deep path, like the 100-character
- * directories #387 reports, moves to the fallback.
- */
-export declare const MAX_SOCKET_SAFE_DIR_LENGTH = 78;
-/**
- * The temp directory this run should use: the repo-local per-run directory
- * when it is short enough for unix-socket paths, and a short directory under
- * the OS temp root when it is not (#387). Pure resolution — nothing is
- * created, nothing is probed; `agentTmpEnv` owns the side effects.
- */
-export declare function resolveAgentTmpDir(dataDir: string, runId: string): string;
 /**
  * The preflight's failure. Named so the spawn path can tell it apart from an
  * ordinary crash and turn it into the run's `error` — the same treatment
@@ -36,19 +17,12 @@ export declare function agentTmpDirEnabled(env?: NodeJS.ProcessEnv): boolean;
  * directory actually accepts writes. Throws `AgentTempDirError` when it does
  * not — callers turn that into the run's error rather than spawning.
  *
- * The directory is `resolveAgentTmpDir`'s call: repo-local when that path is
- * short enough for unix-socket paths, a digest-named directory under the OS
- * temp root when the checkout is too deep for one (#387). In the shared OS
- * root the directory is created private to this user (0700); repo-local
- * scratch already sits inside the user's own tree and keeps the default mode
- * it always had.
- *
  * All three spellings are set, on every platform: a tool that reads `TMP` (or
  * `TEMP`) would otherwise keep following the host value straight back to the
  * exhausted directory this exists to escape.
  *
- * Returns `{}` under the opt-out, without probing anything: the hatch turns
- * the whole feature off, preflight included, so it stays an escape someone can
+ * Returns `{}` under the opt-out, without probing anything: the hatch turns the
+ * whole feature off, preflight included, so it stays an escape someone can
  * actually take.
  */
 export declare function agentTmpEnv(dataDir: string, runId: string, env?: NodeJS.ProcessEnv): Record<string, string>;
@@ -56,24 +30,12 @@ export declare function agentTmpEnv(dataDir: string, runId: string, env?: NodeJS
  * Reap one run's directory. Scratch, not an artifact: nothing reads it once the
  * agent is gone, and a Continue re-creates it through `agentTmpEnv`. Never
  * throws — reaping must not break a terminal transition.
- *
- * Both locations are tried because the resolution depends on the length of
- * `dataDir`, which a Continue or a re-base can change between mint and reap;
- * removing a name that was never minted is a no-op, so trying both is pure
- * safety.
  */
 export declare function removeAgentTmpDir(dataDir: string, runId: string): void;
 /**
  * Remove every per-run directory that is not in `keepRunIds` — the startup
  * sweep, so a crash (which never reaches the terminal-transition reap) cannot
- * accumulate them forever. Two confined roots are swept and nothing else:
- *
- *   - `<dataDir>/tmp`, where entries ARE the run ids (reports the ids reaped);
- *   - the OS temp root's `cez-agent-<12 hex>` directories (#387), where the
- *     name digests the dataDir and is not reversible to a run id (reports the
- *     directory names reaped). The pattern is exact — prefix, lowercase hex,
- *     fixed length, directories only — and a directory is removed only when
- *     THIS dataDir cannot claim it, so another repo's scratch in the shared
- *     root is never touched.
+ * accumulate them forever. Confined to `<dataDir>/tmp`; sibling run state is
+ * never enumerated, let alone touched. Returns the ids actually reaped.
  */
 export declare function sweepAgentTmpDirs(dataDir: string, keepRunIds: Iterable<string>): string[];

package/dist/runs/agent-tmpdir.js

@@ -1,5 +1,5 @@
 /**
- * Task-scoped temp directory for spawned agents (#785, length-capped by #387).
+ * Task-scoped temp directory for spawned agents (#785).
  *
  * Every agent used to inherit the host's `TMPDIR`/`TEMP`/`TMP` verbatim — they
  * ride in on `buildChildEnv`'s base allowlist — so every run on the machine
@@ -12,7 +12,7 @@
  * the agent reads back an empty result with a bogus exit status. Nothing in the
  * cockpit says anything is wrong.
  *
- * Three properties fix that, and this module owns all of them:
+ * Two properties fix that, and this module owns both:
  *
  *   1. **Isolation** — each run gets `<dataDir>/tmp/<runId>`, on the same disk
  *      as the run's own state rather than a shared tmpfs, reaped when the run
@@ -21,28 +21,15 @@
  *   2. **Fail loud** — the directory is write-probed before the backend spawns.
  *      A run that cannot get a working temp directory fails immediately with a
  *      named, actionable error instead of spawning an agent that will run blind.
- *   3. **Short enough to bind** (#387) — tools bind *named* unix sockets under
- *      `TMPDIR` (tsx's IPC server lays down `<tmpdir>/tsx-<uid>/<pid>.pipe`,
- *      Chrome a `SingletonSocket`), and the kernel caps a socket path at
- *      `sun_path` — 108 bytes on Linux, 104 on macOS, NUL included. A checkout
- *      deep enough (Cezar's own nested task worktrees land past 100 chars)
- *      pushed every such bind past the cap and broke `npm install` and
- *      typechecking inside the run. A directory that would land too deep
- *      resolves instead to a short digest-named directory under the OS temp
- *      root — still per-run, still probed, still reaped. A repo whose own path
- *      already fits keeps today's directory, byte for byte.
  *
- * `CEZ_AGENT_TMPDIR=0` opts out of ALL THREE — cezar keeps its hands off the
- * temp directory entirely and the pre-#785 behaviour is back, byte for byte.
- * That is deliberate: an escape hatch that still imposed the preflight would be
- * a hatch you cannot actually escape through, and this repo's
- * graceful-degradation rule says a new check must never become the only way to
- * run.
+ * `CEZ_AGENT_TMPDIR=0` opts out of BOTH — cezar keeps its hands off the temp
+ * directory entirely and the pre-#785 behaviour is back, byte for byte. That is
+ * deliberate: an escape hatch that still imposed the preflight would be a hatch
+ * you cannot actually escape through, and this repo's graceful-degradation rule
+ * says a new check must never become the only way to run.
  */
-import { createHash } from 'node:crypto';
-import { existsSync, mkdirSync, readdirSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { basename, join } from 'node:path';
+import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
 /** Run ids are uuids; anything else must never reach a recursive `rmSync`.
  *
  *  `.` and `..` are excluded explicitly, not as pedantry: they match the
@@ -61,58 +48,6 @@ export function agentTmpDir(dataDir, runId) {
 function agentTmpRoot(dataDir) {
     return join(dataDir, 'tmp');
 }
-/**
- * The longest a per-run temp directory may be so that tools binding named
- * unix sockets under it still work (#387). `sockaddr_un.sun_path` holds 108
- * bytes on Linux and 104 on macOS, NUL included; the longest name a known
- * tool lays down under TMPDIR is tsx's IPC socket, `<tmpdir>/tsx-<uid>/
- * <pid>.pipe`, ~22 bytes (Chrome's `SingletonSocket` is 16). A 78-byte
- * ceiling leaves ≥25 bytes of headroom on the tighter platform — past
- * anything these tools generate — while keeping ordinary checkouts on their
- * repo-local scratch: only a genuinely deep path, like the 100-character
- * directories #387 reports, moves to the fallback.
- */
-export const MAX_SOCKET_SAFE_DIR_LENGTH = 78;
-/** The OS temp root, symlink-resolved: `bind(2)` bounds the path the kernel
- *  walks, so the check must measure what the path resolves to, not what it
- *  says (macOS hands out `/var/folders/...` through a `/private/var` symlink). */
-function osTempRoot() {
-    try {
-        return realpathSync(tmpdir());
-    }
-    catch {
-        return tmpdir();
-    }
-}
-const FALLBACK_PREFIX = 'cez-agent-';
-const FALLBACK_NAME_LENGTH = 12;
-/**
- * Where the fallback lives for this dataDir+run pair. The name digests the
- * dataDir in, because the OS temp root is SHARED: a name derived from the run
- * id alone would let one repo's reap or sweep delete another repo's live
- * scratch when two run ids happen to share their leading characters.
- */
-function fallbackTmpDir(dataDir, runId) {
-    const digest = createHash('sha256').update(`${dataDir}:${runId}`).digest('hex');
-    return join(osTempRoot(), FALLBACK_PREFIX + digest.slice(0, FALLBACK_NAME_LENGTH));
-}
-/**
- * The temp directory this run should use: the repo-local per-run directory
- * when it is short enough for unix-socket paths, and a short directory under
- * the OS temp root when it is not (#387). Pure resolution — nothing is
- * created, nothing is probed; `agentTmpEnv` owns the side effects.
- */
-export function resolveAgentTmpDir(dataDir, runId) {
-    const local = agentTmpDir(dataDir, runId);
-    if (local.length <= MAX_SOCKET_SAFE_DIR_LENGTH)
-        return local;
-    const fallback = fallbackTmpDir(dataDir, runId);
-    if (fallback.length <= MAX_SOCKET_SAFE_DIR_LENGTH)
-        return fallback;
-    // No candidate fits (a pathological host TMPDIR over a pathological repo
-    // path together): keep whichever leaves socket names the most room.
-    return fallback.length < local.length ? fallback : local;
-}
 /** `errno` → the phrasing a human recognises from their shell. */
 const REASONS = {
     EDQUOT: 'Disk quota exceeded',
@@ -175,28 +110,20 @@ function probeWritable(dir) {
  * directory actually accepts writes. Throws `AgentTempDirError` when it does
  * not — callers turn that into the run's error rather than spawning.
  *
- * The directory is `resolveAgentTmpDir`'s call: repo-local when that path is
- * short enough for unix-socket paths, a digest-named directory under the OS
- * temp root when the checkout is too deep for one (#387). In the shared OS
- * root the directory is created private to this user (0700); repo-local
- * scratch already sits inside the user's own tree and keeps the default mode
- * it always had.
- *
  * All three spellings are set, on every platform: a tool that reads `TMP` (or
  * `TEMP`) would otherwise keep following the host value straight back to the
  * exhausted directory this exists to escape.
  *
- * Returns `{}` under the opt-out, without probing anything: the hatch turns
- * the whole feature off, preflight included, so it stays an escape someone can
+ * Returns `{}` under the opt-out, without probing anything: the hatch turns the
+ * whole feature off, preflight included, so it stays an escape someone can
  * actually take.
  */
 export function agentTmpEnv(dataDir, runId, env = process.env) {
     if (!agentTmpDirEnabled(env))
         return {};
-    const local = agentTmpDir(dataDir, runId);
-    const dir = resolveAgentTmpDir(dataDir, runId);
+    const dir = agentTmpDir(dataDir, runId);
     try {
-        mkdirSync(dir, dir === local ? { recursive: true } : { recursive: true, mode: 0o700 });
+        mkdirSync(dir, { recursive: true });
     }
     catch (err) {
         throw new AgentTempDirError(dir, err);
@@ -208,85 +135,44 @@ export function agentTmpEnv(dataDir, runId, env = process.env) {
  * Reap one run's directory. Scratch, not an artifact: nothing reads it once the
  * agent is gone, and a Continue re-creates it through `agentTmpEnv`. Never
  * throws — reaping must not break a terminal transition.
- *
- * Both locations are tried because the resolution depends on the length of
- * `dataDir`, which a Continue or a re-base can change between mint and reap;
- * removing a name that was never minted is a no-op, so trying both is pure
- * safety.
  */
 export function removeAgentTmpDir(dataDir, runId) {
     if (!safeRunId(runId))
         return;
-    for (const dir of [agentTmpDir(dataDir, runId), fallbackTmpDir(dataDir, runId)]) {
-        try {
-            rmSync(dir, { recursive: true, force: true });
-        }
-        catch {
-            // best-effort; the startup sweep picks up whatever survives.
-        }
+    try {
+        rmSync(agentTmpDir(dataDir, runId), { recursive: true, force: true });
+    }
+    catch {
+        // best-effort; the startup sweep picks up whatever survives.
     }
 }
 /**
  * Remove every per-run directory that is not in `keepRunIds` — the startup
  * sweep, so a crash (which never reaches the terminal-transition reap) cannot
- * accumulate them forever. Two confined roots are swept and nothing else:
- *
- *   - `<dataDir>/tmp`, where entries ARE the run ids (reports the ids reaped);
- *   - the OS temp root's `cez-agent-<12 hex>` directories (#387), where the
- *     name digests the dataDir and is not reversible to a run id (reports the
- *     directory names reaped). The pattern is exact — prefix, lowercase hex,
- *     fixed length, directories only — and a directory is removed only when
- *     THIS dataDir cannot claim it, so another repo's scratch in the shared
- *     root is never touched.
+ * accumulate them forever. Confined to `<dataDir>/tmp`; sibling run state is
+ * never enumerated, let alone touched. Returns the ids actually reaped.
  */
 export function sweepAgentTmpDirs(dataDir, keepRunIds) {
+    const root = agentTmpRoot(dataDir);
+    if (!existsSync(root))
+        return [];
     const keep = new Set(keepRunIds);
     const reaped = [];
     let entries;
-    const root = agentTmpRoot(dataDir);
-    if (existsSync(root)) {
-        try {
-            entries = readdirSync(root, { withFileTypes: true })
-                .filter((e) => e.isDirectory())
-                .map((e) => e.name);
-        }
-        catch {
-            entries = [];
-        }
-        for (const name of entries) {
-            if (keep.has(name) || !safeRunId(name))
-                continue;
-            try {
-                rmSync(join(root, name), { recursive: true, force: true });
-                reaped.push(name);
-            }
-            catch {
-                // best-effort: a locked directory is retried on the next boot.
-            }
-        }
-    }
-    // The #387 fallback location, in the shared OS temp root. Kept narrow on
-    // purpose: exact prefix, 12 lowercase-hex name, directories only, and only
-    // names this dataDir cannot claim.
-    const claimed = new Set([...keep].filter(safeRunId).map((id) => basename(fallbackTmpDir(dataDir, id))));
-    const osRoot = osTempRoot();
-    let fallbackEntries;
     try {
-        fallbackEntries = readdirSync(osRoot, { withFileTypes: true });
+        entries = readdirSync(root, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name);
     }
     catch {
-        return reaped;
+        return [];
     }
-    for (const entry of fallbackEntries) {
-        if (!entry.isDirectory() || !entry.name.startsWith(FALLBACK_PREFIX))
-            continue;
-        if (!/^[0-9a-f]{12}$/.test(entry.name.slice(FALLBACK_PREFIX.length)))
-            continue;
-        if (claimed.has(entry.name))
+    for (const name of entries) {
+        if (keep.has(name) || !safeRunId(name))
             continue;
         try {
-            rmSync(join(osRoot, entry.name), { recursive: true, force: true });
-            reaped.push(entry.name);
+            rmSync(join(root, name), { recursive: true, force: true });
+            reaped.push(name);
         }
         catch {
             // best-effort: a locked directory is retried on the next boot.

package/dist/runs/agent-tmpdir.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-tmpdir.js","sourceRoot":"","sources":["../../src/runs/agent-tmpdir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;8EAK8E;AAC9E,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AACnE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACxD,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;kFACkF;AAClF,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;kFAEkF;AAClF,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,IAAI,0BAA0B;QAAE,OAAO,QAAQ,CAAC;IACnE,yEAAyE;IACzE,oEAAoE;IACpE,OAAO,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAED,kEAAkE;AAClE,MAAM,OAAO,GAAqC;IAChD,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,MAAe;QACvC,MAAM,IAAI,GAAI,MAA4C,EAAE,IAAI,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;eAC9B,IAAI;eACJ,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,KAAK,CACH,yCAAyC,IAAI,KAAK,GAAG,uBAAuB;cACxE,2DAA2D,CAChE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,gBAAgB,KAAK,GAAG,CAAC;AACtC,CAAC;AAED;8EAC8E;AAC9E,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB;;;;;GAKG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,KAAa,EACb,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAA4B;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAiB,CAAC;IACtB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjD,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,eAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,eAAe,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,SAAS;QAC9E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QAC/E,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"agent-tmpdir.js","sourceRoot":"","sources":["../../src/runs/agent-tmpdir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;8EAK8E;AAC9E,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AACnE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACxD,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;kFACkF;AAClF,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,kEAAkE;AAClE,MAAM,OAAO,GAAqC;IAChD,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,MAAe;QACvC,MAAM,IAAI,GAAI,MAA4C,EAAE,IAAI,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;eAC9B,IAAI;eACJ,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,KAAK,CACH,yCAAyC,IAAI,KAAK,GAAG,uBAAuB;cACxE,2DAA2D,CAChE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,gBAAgB,KAAK,GAAG,CAAC;AACtC,CAAC;AAED;8EAC8E;AAC9E,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB;;;;;GAKG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,KAAa,EACb,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAA4B;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/server.d.ts

@@ -3962,19 +3962,6 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
 } & {
     "/repo/commit/:sha": {
         $get: {
-            output: string;
-            outputFormat: "text";
-            status: import("hono/utils/http-status").ContentfulStatusCode;
-            input: {
-                query: {
-                    structured?: string | undefined;
-                };
-            } & {
-                param: {
-                    sha: string;
-                };
-            };
-        } | {
             output: {
                 error: string;
                 code?: "invalid_input" | undefined;
@@ -4038,6 +4025,19 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
                     sha: string;
                 };
             };
+        } | {
+            output: string;
+            outputFormat: "text";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {
+                query: {
+                    structured?: string | undefined;
+                };
+            } & {
+                param: {
+                    sha: string;
+                };
+            };
         };
     };
 } & {
@@ -10098,20 +10098,20 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
 } & {
     "/runs/:id/handoff": {
         $get: {
-            output: string;
-            outputFormat: "text";
-            status: 200;
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 404;
             input: {
                 param: {
                     id: string;
                 };
             };
         } | {
-            output: {
-                error: string;
-            };
-            outputFormat: "json";
-            status: 404;
+            output: string;
+            outputFormat: "text";
+            status: 200;
             input: {
                 param: {
                     id: string;
@@ -10149,20 +10149,20 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
 } & {
     "/runs/:id/diff": {
         $get: {
-            output: string;
-            outputFormat: "text";
-            status: import("hono/utils/http-status").ContentfulStatusCode;
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 404;
             input: {
                 param: {
                     id: string;
                 };
             };
         } | {
-            output: {
-                error: string;
-            };
-            outputFormat: "json";
-            status: 404;
+            output: string;
+            outputFormat: "text";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
             input: {
                 param: {
                     id: string;
@@ -12539,19 +12539,6 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
 } & {
     "/repo/commit/:sha": {
         $get: {
-            output: string;
-            outputFormat: "text";
-            status: import("hono/utils/http-status").ContentfulStatusCode;
-            input: {
-                query: {
-                    structured?: string | undefined;
-                };
-            } & {
-                param: {
-                    sha: string;
-                };
-            };
-        } | {
             output: {
                 error: string;
                 code?: "invalid_input" | undefined;
@@ -12615,6 +12602,19 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
                     sha: string;
                 };
             };
+        } | {
+            output: string;
+            outputFormat: "text";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {
+                query: {
+                    structured?: string | undefined;
+                };
+            } & {
+                param: {
+                    sha: string;
+                };
+            };
         };
     };
 } & {
@@ -18675,20 +18675,20 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
 } & {
     "/runs/:id/handoff": {
         $get: {
-            output: string;
-            outputFormat: "text";
-            status: 200;
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 404;
             input: {
                 param: {
                     id: string;
                 };
             };
         } | {
-            output: {
-                error: string;
-            };
-            outputFormat: "json";
-            status: 404;
+            output: string;
+            outputFormat: "text";
+            status: 200;
             input: {
                 param: {
                     id: string;
@@ -18726,20 +18726,20 @@ export declare function createApp(deps: ServerDeps): import("hono/hono-base").Ho
 } & {
     "/runs/:id/diff": {
         $get: {
-            output: string;
-            outputFormat: "text";
-            status: import("hono/utils/http-status").ContentfulStatusCode;
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 404;
             input: {
                 param: {
                     id: string;
                 };
             };
         } | {
-            output: {
-                error: string;
-            };
-            outputFormat: "json";
-            status: 404;
+            output: string;
+            outputFormat: "text";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
             input: {
                 param: {
                     id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wjarka/cezarion",
-  "version": "0.14.2-pr406.627",
+  "version": "0.14.2-pr407.628",
   "description": "Local cockpit for running and tracking AI agent tasks in your repo. Uses your logged-in `claude` CLI and `gh` — zero config, zero database.",
   "license": "MIT",
   "type": "module",
@@ -50,8 +50,8 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@open-mercato/cezar-api-client": "0.14.2-pr406.627",
-    "@open-mercato/cezar-contract": "0.14.2-pr406.627",
+    "@open-mercato/cezar-api-client": "0.14.2-pr407.628",
+    "@open-mercato/cezar-contract": "0.14.2-pr407.628",
     "@types/node": "^20.14.0",
     "@types/ws": "^8.18.1",
     "esbuild": "^0.28.1",