botmux 3.14.0 → 3.16.0

package/dist/utils/child-env.d.ts

@@ -43,11 +43,74 @@ export declare function scrubWorkflowWorkerEnv(env: NodeJS.ProcessEnv): void;
  *  session's identity into anything it forks (workers, the shared tmux
  *  server). */
 export declare function scrubClaudeSessionMarkerEnv(env: NodeJS.ProcessEnv): void;
+/**
+ * Dashboard-only Feishu/Lark H5 passwordless-login configuration. Every key in
+ * this family is read by ONE consumer — resolveDashboardH5AuthConfig() in
+ * src/dashboard/h5-auth.ts, inside the dashboard process — and by nothing else
+ * in the fleet. A session's CLI child has no reason to see any of it, and
+ * `..._APP_SECRET` is a full Feishu app credential: whoever holds it can mint
+ * app_access_token for the H5 login app, i.e. forge the identity the Dashboard
+ * authenticates on. The daemon loads ~/.botmux/.env wholesale (index-daemon.ts
+ * dotenv), so without this scrub the secret rode into every PTY/direct CLI
+ * child and every one-shot the daemon forks (session group-title).
+ *
+ * Redaction is BOTH belt and braces:
+ *  - these exact names sit in REDACTED_CHILD_ENV_KEYS, which also drives the
+ *    tmux pane wrapper's `unset` clause and the tmux client-env strip;
+ *  - redactChildEnv() additionally sweeps the whole
+ *    {@link DASHBOARD_H5_ENV_PREFIX}, so a future H5 knob is redacted the day
+ *    it is added rather than the day someone remembers this list.
+ */
+export declare const DASHBOARD_H5_ENV_PREFIX = "BOTMUX_DASHBOARD_FEISHU_H5_";
+export declare const DASHBOARD_H5_ENV_KEYS: readonly ["BOTMUX_DASHBOARD_FEISHU_H5_ENABLED", "BOTMUX_DASHBOARD_FEISHU_H5_BRAND", "BOTMUX_DASHBOARD_FEISHU_H5_APP_ID", "BOTMUX_DASHBOARD_FEISHU_H5_APP_SECRET", "BOTMUX_DASHBOARD_FEISHU_H5_ALLOWED_OPEN_IDS", "BOTMUX_DASHBOARD_FEISHU_H5_ENTRY_PATH", "BOTMUX_DASHBOARD_FEISHU_H5_SESSION_TTL_MS", "BOTMUX_DASHBOARD_FEISHU_H5_SECURE_COOKIE", "BOTMUX_DASHBOARD_FEISHU_H5_TRUSTED_PROXY_HOPS"];
+/**
+ * Delete the entire Dashboard-only Feishu H5 login family from `env` IN PLACE:
+ * every named key in {@link DASHBOARD_H5_ENV_KEYS} plus a
+ * {@link DASHBOARD_H5_ENV_PREFIX} sweep, so a knob added tomorrow is stripped
+ * the day it ships rather than the day someone extends the list.
+ *
+ * The Dashboard is the family's ONLY consumer, and it receives the values by
+ * dotenv-loading ~/.botmux/.env itself (index-dashboard.ts) — NOT through the
+ * shared PM2 env block (the H5 keys are deliberately absent from
+ * DAEMON_ENV_KEYS). Every other botmux-owned process must therefore hold none
+ * of it. Call sites:
+ *  - index-daemon.ts boot: the daemon dotenv-loads the same .env wholesale, so
+ *    it must drop the family right after dotenv — a daemon holding the H5
+ *    APP_SECRET can mint app_access_token for the Dashboard's login app.
+ *  - core/maintenance.ts detachedRestartEnv(): the detached `botmux restart`
+ *    the DASHBOARD spawns (update/restart button) inherits the dashboard's env,
+ *    which legitimately holds the secrets; the restart driver does not need
+ *    them and must not carry them toward pm2.
+ * redactChildEnv() keeps its own equivalent strip as the second line of
+ * defense at every CLI-child boundary (PTY/tmux pane unset/one-shot).
+ */
+export declare function stripDashboardH5Env(env: NodeJS.ProcessEnv): void;
+/**
+ * Terminal/interactivity fingerprints of whichever process invoked a pm2
+ * mutation. pm2 persists the caller's env into every managed app (and into
+ * dump.pm2 for resurrect), so a `botmux restart` issued from an agent's
+ * non-interactive shell — Claude Code / Codex tool shells export NO_COLOR=1,
+ * CODEX_CI=1, PAGER=cat, plus the terminal-app identity of whatever terminal
+ * hosted them — bakes "you have no colors, you are in CI" into every daemon,
+ * which every worker and session PTY then inherits: all bot CLI TUIs render
+ * colorless, and TERMINFO can even point at a terminal app's private terminfo
+ * dir. A daemon is a headless service: every key here describes the invoker's
+ * terminal or harness, never the machine, so deleting them at the pm2
+ * boundary is always correct. Session PTYs set their own TERM (the backends
+ * spawn with name 'xterm-256color'), and a user who wants genuinely colorless
+ * bots keeps the per-bot `env` channel — like CLAUDE_EFFORT, the ambient
+ * "export it in the shell that runs `botmux restart`" channel is sacrificed
+ * because at this boundary it cannot be told apart from contamination.
+ */
+export declare const INVOKER_TERMINAL_ENV_KEYS: readonly ["NO_COLOR", "FORCE_COLOR", "CLICOLOR", "CLICOLOR_FORCE", "TERM", "COLORTERM", "TERMINFO", "TERM_PROGRAM", "TERM_PROGRAM_VERSION", "TERM_SESSION_ID", "CI", "CODEX_CI", "PAGER", "GIT_PAGER", "GH_PAGER"];
+/** Delete inherited invoker-terminal fingerprints from `env` in place. */
+export declare function scrubInvokerTerminalEnv(env: NodeJS.ProcessEnv): void;
 /**
  * Env vars that must never reach a spawned CLI child. The bot's IM-app creds
  * (a child CLI's own Lark OAuth reads `process.env.LARK_APP_ID` as the app to
  * authorize and gets hijacked by the botmux IM app → no docs scopes → 403
- * loop), daemon-side GitHub API tokens, and claude-code's session markers
+ * loop), daemon-side GitHub API tokens, the Dashboard-only Feishu H5 login
+ * credentials (DASHBOARD_H5_ENV_KEYS), and claude-code's session markers
  * (CLAUDE_SESSION_MARKER_ENV_KEYS). The
  * child resolves Lark via the namespaced `BOTMUX_LARK_APP_ID` or via bots.json
  * on disk (im/lark/client.ts); the worker keeps its own bare creds
@@ -59,7 +122,7 @@ export declare function scrubClaudeSessionMarkerEnv(env: NodeJS.ProcessEnv): voi
  *    client env can't override, so the shell wrapper `unset`s them before exec
  *    (see SHELL_WRAPPER_SCRIPT in tmux-backend.ts).
  */
-export declare const REDACTED_CHILD_ENV_KEYS: readonly ["LARK_APP_ID", "LARK_APP_SECRET", "GITHUB_TOKEN", "GH_TOKEN", "CLAUDECODE", "CLAUDE_CODE_CHILD_SESSION", "CLAUDE_CODE_SESSION_ID", "CLAUDE_CODE_ENTRYPOINT", "CLAUDE_CODE_EXECPATH", "CLAUDE_PID", "TMUX", "TMUX_PANE", "BOTMUX_PM2_GRACEFUL_EXIT_CODE"];
+export declare const REDACTED_CHILD_ENV_KEYS: readonly ["LARK_APP_ID", "LARK_APP_SECRET", "GITHUB_TOKEN", "GH_TOKEN", "BOTMUX_DASHBOARD_FEISHU_H5_ENABLED", "BOTMUX_DASHBOARD_FEISHU_H5_BRAND", "BOTMUX_DASHBOARD_FEISHU_H5_APP_ID", "BOTMUX_DASHBOARD_FEISHU_H5_APP_SECRET", "BOTMUX_DASHBOARD_FEISHU_H5_ALLOWED_OPEN_IDS", "BOTMUX_DASHBOARD_FEISHU_H5_ENTRY_PATH", "BOTMUX_DASHBOARD_FEISHU_H5_SESSION_TTL_MS", "BOTMUX_DASHBOARD_FEISHU_H5_SECURE_COOKIE", "BOTMUX_DASHBOARD_FEISHU_H5_TRUSTED_PROXY_HOPS", "CLAUDECODE", "CLAUDE_CODE_CHILD_SESSION", "CLAUDE_CODE_SESSION_ID", "CLAUDE_CODE_ENTRYPOINT", "CLAUDE_CODE_EXECPATH", "CLAUDE_PID", "TMUX", "TMUX_PANE", "BOTMUX_PM2_GRACEFUL_EXIT_CODE"];
 /**
  * Session-level CLI data-root pointers: claude-family → CLAUDE_CONFIG_DIR,
  * codex → CODEX_HOME. Botmux computes these PER SESSION (read isolation pins
@@ -128,6 +191,33 @@ export declare function scrubSessionCliHomeEnv(env: NodeJS.ProcessEnv): void;
  * into its global env either.
  */
 export declare const BOTMUX_INJECTED_ENV_KEYS: readonly ["__OWNER_OPEN_ID", "BOTMUX", "SESSION_DATA_DIR", "IS_SANDBOX", "BOTMUX_SESSION_ID", "BOTMUX_CHAT_ID", "BOTMUX_MCP_GATEWAY_SOCKET", "BOTMUX_MCP_GATEWAY_REQUIRED", "BOTMUX_CHAT_TYPE", "BOTMUX_LARK_APP_ID", "BOTS_CONFIG", "BOTMUX_ROOT_MESSAGE_ID", "BOTMUX_OWNER_OPEN_ID", "BOTMUX_TURN_ID", "BOTMUX_DISPATCH_ATTEMPT", "BOTMUX_BRAND_LABEL", "BOTMUX_READ_ISOLATION", "BOTMUX_API_ONLY", "BOTMUX_USAGE_DISPLAY", "BOTMUX_PI_INITIAL_PROMPT_FILE", "BOTMUX_DAEMON_IPC_PORT", "BOTMUX_READ_ISOLATED", "BOTMUX_ORIGIN_CHANNEL_ID", "BOTMUX_LARK_LIST_BOTS_API_ENABLED", "BOTMUX_LARK_LIST_BOTS_API_TIMEOUT_MS", "BOTMUX_READY_COMMAND", "BOTMUX_CODEX_APP_CONTROL_BOOTSTRAP", "HERMES_HOME", "HERMES_BOTMUX_SOURCE_HOME", "HERMES_BOTMUX_PROFILES_ROOT", "CLAUDE_CONFIG_DIR", "CODEX_HOME", "CLAUDE_CODE_RESUME_TOKEN_THRESHOLD", "CJADK_INTERACTIVE"];
+/**
+ * Session-only botmux identity and capabilities of the process that invoked a
+ * pm2 mutation. A `botmux restart` issued from inside a bot session carries
+ * that session's routing identity and capabilities; persisted by pm2 into the
+ * fleet, every daemon then carries a stale foreign turn identity, and a
+ * plugin service started from the same env would misroute its own
+ * `botmux send` to a long-dead thread.
+ *
+ * This is a DELIBERATELY hand-maintained list. It is NOT derived from
+ * BOTMUX_INJECTED_ENV_KEYS: that list is the tmux/pane TRANSPORT whitelist
+ * and mixes session-only keys with ambient/daemon config that merely needs
+ * pane delivery (CLAUDE_CODE_RESUME_TOKEN_THRESHOLD is ambient-only — worker
+ * reads it from its own process.env and per-bot env REJECTS it, so a boot
+ * scrub would silently kill the user's setting; HERMES_HOME and the two
+ * HERMES_BOTMUX_* roots are ambient install-location config nothing in
+ * botmux ever sets, same contract as GROK_HOME; BOTS_CONFIG /
+ * SESSION_DATA_DIR / BOTMUX_LARK_LIST_BOTS_API_* are documented ambient or
+ * ecosystem-block config). The reverse also holds: session/sandbox routing
+ * keys the pane transport never carries (BOTMUX_SESSION_SCOPE,
+ * BOTMUX_SEND_RELAY) still need scrubbing here. Every entry below is
+ * session-scoped BY CONSTRUCTION: the daemon/worker computes and injects it
+ * per session AFTER every boundary scrub, and no ambient/env-file channel for
+ * it exists.
+ */
+export declare const SESSION_TURN_MARKER_ENV_KEYS: readonly ["BOTMUX", "BOTMUX_SESSION_ID", "BOTMUX_CHAT_ID", "BOTMUX_CHAT_TYPE", "BOTMUX_ROOT_MESSAGE_ID", "BOTMUX_TURN_ID", "BOTMUX_DISPATCH_ATTEMPT", "BOTMUX_SESSION_SCOPE", "BOTMUX_OWNER_OPEN_ID", "__OWNER_OPEN_ID", "BOTMUX_ORIGIN_CHANNEL_ID", "BOTMUX_SEND_RELAY", "BOTMUX_MCP_GATEWAY_SOCKET", "BOTMUX_MCP_GATEWAY_REQUIRED", "BOTMUX_DAEMON_IPC_PORT", "BOTMUX_READ_ISOLATION", "BOTMUX_READ_ISOLATED", "BOTMUX_API_ONLY", "IS_SANDBOX", "BOTMUX_BRAND_LABEL", "BOTMUX_USAGE_DISPLAY", "BOTMUX_PI_INITIAL_PROMPT_FILE", "BOTMUX_CODEX_APP_CONTROL_BOOTSTRAP", "BOTMUX_READY_COMMAND", "BOTMUX_LARK_APP_ID", "CJADK_INTERACTIVE"];
+/** Delete inherited session-only identity/capabilities from `env` in place. */
+export declare function scrubSessionTurnMarkerEnv(env: NodeJS.ProcessEnv): void;
 /** Proxy env vars that must reach the CLI child process so it can dial the
  *  upstream API on hosts without direct internet access. Forwarded explicitly
  *  by buildBotmuxEnvAssignments (tmux/tmux-pipe/zellij backends) and

package/dist/utils/child-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"child-env.d.ts","sourceRoot":"","sources":["../../src/utils/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,8BAA8B,gJAOjC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB,sQAW3B,CAAC;AAEX,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAEnE;AAeD;;;;;;eAMe;AACf,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAGxE;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,uBAAuB,oQA8B1B,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,yBAAyB,8CAA+C,CAAC;AAEtF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,IAAI,CAQN;AAED;;;iBAGiB;AACjB,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAEnE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,wBAAwB,k0BAuF3B,CAAC;AAEX;;;;;;;4DAO4D;AAC5D,eAAO,MAAM,cAAc,uHAGjB,CAAC;AA2BX;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAIzE"}
+{"version":3,"file":"child-env.d.ts","sourceRoot":"","sources":["../../src/utils/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,8BAA8B,gJAOjC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB,sQAW3B,CAAC;AAEX,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAEnE;AAeD;;;;;;eAMe;AACf,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAGxE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAErE,eAAO,MAAM,qBAAqB,qYAUxB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAKhE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,yBAAyB,oNAwB5B,CAAC;AAEX,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAEpE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,8nBAoC1B,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,yBAAyB,8CAA+C,CAAC;AAEtF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,IAAI,CAQN;AAED;;;iBAGiB;AACjB,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAEnE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,wBAAwB,k0BAuF3B,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,4BAA4B,2mBA6C/B,CAAC;AAEX,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAEtE;AAED;;;;;;;4DAO4D;AAC5D,eAAO,MAAM,cAAc,uHAGjB,CAAC;AA2BX;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAUzE"}

package/dist/utils/child-env.js

@@ -81,11 +81,118 @@ export function scrubClaudeSessionMarkerEnv(env) {
     for (const key of BOUNDARY_ONLY_CLAUDE_ENV_KEYS)
         delete env[key];
 }
+/**
+ * Dashboard-only Feishu/Lark H5 passwordless-login configuration. Every key in
+ * this family is read by ONE consumer — resolveDashboardH5AuthConfig() in
+ * src/dashboard/h5-auth.ts, inside the dashboard process — and by nothing else
+ * in the fleet. A session's CLI child has no reason to see any of it, and
+ * `..._APP_SECRET` is a full Feishu app credential: whoever holds it can mint
+ * app_access_token for the H5 login app, i.e. forge the identity the Dashboard
+ * authenticates on. The daemon loads ~/.botmux/.env wholesale (index-daemon.ts
+ * dotenv), so without this scrub the secret rode into every PTY/direct CLI
+ * child and every one-shot the daemon forks (session group-title).
+ *
+ * Redaction is BOTH belt and braces:
+ *  - these exact names sit in REDACTED_CHILD_ENV_KEYS, which also drives the
+ *    tmux pane wrapper's `unset` clause and the tmux client-env strip;
+ *  - redactChildEnv() additionally sweeps the whole
+ *    {@link DASHBOARD_H5_ENV_PREFIX}, so a future H5 knob is redacted the day
+ *    it is added rather than the day someone remembers this list.
+ */
+export const DASHBOARD_H5_ENV_PREFIX = 'BOTMUX_DASHBOARD_FEISHU_H5_';
+export const DASHBOARD_H5_ENV_KEYS = [
+    'BOTMUX_DASHBOARD_FEISHU_H5_ENABLED',
+    'BOTMUX_DASHBOARD_FEISHU_H5_BRAND',
+    'BOTMUX_DASHBOARD_FEISHU_H5_APP_ID',
+    'BOTMUX_DASHBOARD_FEISHU_H5_APP_SECRET',
+    'BOTMUX_DASHBOARD_FEISHU_H5_ALLOWED_OPEN_IDS',
+    'BOTMUX_DASHBOARD_FEISHU_H5_ENTRY_PATH',
+    'BOTMUX_DASHBOARD_FEISHU_H5_SESSION_TTL_MS',
+    'BOTMUX_DASHBOARD_FEISHU_H5_SECURE_COOKIE',
+    'BOTMUX_DASHBOARD_FEISHU_H5_TRUSTED_PROXY_HOPS',
+];
+/**
+ * Delete the entire Dashboard-only Feishu H5 login family from `env` IN PLACE:
+ * every named key in {@link DASHBOARD_H5_ENV_KEYS} plus a
+ * {@link DASHBOARD_H5_ENV_PREFIX} sweep, so a knob added tomorrow is stripped
+ * the day it ships rather than the day someone extends the list.
+ *
+ * The Dashboard is the family's ONLY consumer, and it receives the values by
+ * dotenv-loading ~/.botmux/.env itself (index-dashboard.ts) — NOT through the
+ * shared PM2 env block (the H5 keys are deliberately absent from
+ * DAEMON_ENV_KEYS). Every other botmux-owned process must therefore hold none
+ * of it. Call sites:
+ *  - index-daemon.ts boot: the daemon dotenv-loads the same .env wholesale, so
+ *    it must drop the family right after dotenv — a daemon holding the H5
+ *    APP_SECRET can mint app_access_token for the Dashboard's login app.
+ *  - core/maintenance.ts detachedRestartEnv(): the detached `botmux restart`
+ *    the DASHBOARD spawns (update/restart button) inherits the dashboard's env,
+ *    which legitimately holds the secrets; the restart driver does not need
+ *    them and must not carry them toward pm2.
+ * redactChildEnv() keeps its own equivalent strip as the second line of
+ * defense at every CLI-child boundary (PTY/tmux pane unset/one-shot).
+ */
+export function stripDashboardH5Env(env) {
+    for (const key of DASHBOARD_H5_ENV_KEYS)
+        delete env[key];
+    for (const key of Object.keys(env)) {
+        if (key.startsWith(DASHBOARD_H5_ENV_PREFIX))
+            delete env[key];
+    }
+}
+/**
+ * Terminal/interactivity fingerprints of whichever process invoked a pm2
+ * mutation. pm2 persists the caller's env into every managed app (and into
+ * dump.pm2 for resurrect), so a `botmux restart` issued from an agent's
+ * non-interactive shell — Claude Code / Codex tool shells export NO_COLOR=1,
+ * CODEX_CI=1, PAGER=cat, plus the terminal-app identity of whatever terminal
+ * hosted them — bakes "you have no colors, you are in CI" into every daemon,
+ * which every worker and session PTY then inherits: all bot CLI TUIs render
+ * colorless, and TERMINFO can even point at a terminal app's private terminfo
+ * dir. A daemon is a headless service: every key here describes the invoker's
+ * terminal or harness, never the machine, so deleting them at the pm2
+ * boundary is always correct. Session PTYs set their own TERM (the backends
+ * spawn with name 'xterm-256color'), and a user who wants genuinely colorless
+ * bots keeps the per-bot `env` channel — like CLAUDE_EFFORT, the ambient
+ * "export it in the shell that runs `botmux restart`" channel is sacrificed
+ * because at this boundary it cannot be told apart from contamination.
+ */
+export const INVOKER_TERMINAL_ENV_KEYS = [
+    // Color semantics
+    'NO_COLOR',
+    'FORCE_COLOR',
+    'CLICOLOR',
+    'CLICOLOR_FORCE',
+    // Terminal identity. TERMINFO is a single-directory override that terminal
+    // apps export for their own private terminfo bundle — invoker-scoped.
+    // TERMINFO_DIRS is deliberately ABSENT: it is a search-path list that
+    // NixOS/home-manager and custom-ncurses setups configure machine-wide, and
+    // deleting it would break terminfo resolution for every PTY on such hosts.
+    'TERM',
+    'COLORTERM',
+    'TERMINFO',
+    'TERM_PROGRAM',
+    'TERM_PROGRAM_VERSION',
+    'TERM_SESSION_ID',
+    // CI / agent-harness flags
+    'CI',
+    'CODEX_CI',
+    // Non-interactive pager pins agent shells export for their own subcommands
+    'PAGER',
+    'GIT_PAGER',
+    'GH_PAGER',
+];
+/** Delete inherited invoker-terminal fingerprints from `env` in place. */
+export function scrubInvokerTerminalEnv(env) {
+    for (const key of INVOKER_TERMINAL_ENV_KEYS)
+        delete env[key];
+}
 /**
  * Env vars that must never reach a spawned CLI child. The bot's IM-app creds
  * (a child CLI's own Lark OAuth reads `process.env.LARK_APP_ID` as the app to
  * authorize and gets hijacked by the botmux IM app → no docs scopes → 403
- * loop), daemon-side GitHub API tokens, and claude-code's session markers
+ * loop), daemon-side GitHub API tokens, the Dashboard-only Feishu H5 login
+ * credentials (DASHBOARD_H5_ENV_KEYS), and claude-code's session markers
  * (CLAUDE_SESSION_MARKER_ENV_KEYS). The
  * child resolves Lark via the namespaced `BOTMUX_LARK_APP_ID` or via bots.json
  * on disk (im/lark/client.ts); the worker keeps its own bare creds
@@ -102,6 +209,12 @@ export const REDACTED_CHILD_ENV_KEYS = [
     'LARK_APP_SECRET',
     'GITHUB_TOKEN',
     'GH_TOKEN',
+    // Dashboard-only Feishu H5 login config/credential family — see
+    // DASHBOARD_H5_ENV_KEYS. Listed by exact name (not only swept by prefix in
+    // redactChildEnv) so the tmux pane wrapper `unset`s them too: on that backend
+    // the pane inherits the tmux SERVER's global env, which the client env cannot
+    // override.
+    ...DASHBOARD_H5_ENV_KEYS,
     ...CLAUDE_SESSION_MARKER_ENV_KEYS,
     // Parent-tmux client vars: when the daemon itself was started inside a tmux
     // session, process.env carries TMUX (server socket path) + TMUX_PANE. Leaking
@@ -294,6 +407,81 @@ export const BOTMUX_INJECTED_ENV_KEYS = [
     'CLAUDE_CODE_RESUME_TOKEN_THRESHOLD',
     'CJADK_INTERACTIVE',
 ];
+/**
+ * Session-only botmux identity and capabilities of the process that invoked a
+ * pm2 mutation. A `botmux restart` issued from inside a bot session carries
+ * that session's routing identity and capabilities; persisted by pm2 into the
+ * fleet, every daemon then carries a stale foreign turn identity, and a
+ * plugin service started from the same env would misroute its own
+ * `botmux send` to a long-dead thread.
+ *
+ * This is a DELIBERATELY hand-maintained list. It is NOT derived from
+ * BOTMUX_INJECTED_ENV_KEYS: that list is the tmux/pane TRANSPORT whitelist
+ * and mixes session-only keys with ambient/daemon config that merely needs
+ * pane delivery (CLAUDE_CODE_RESUME_TOKEN_THRESHOLD is ambient-only — worker
+ * reads it from its own process.env and per-bot env REJECTS it, so a boot
+ * scrub would silently kill the user's setting; HERMES_HOME and the two
+ * HERMES_BOTMUX_* roots are ambient install-location config nothing in
+ * botmux ever sets, same contract as GROK_HOME; BOTS_CONFIG /
+ * SESSION_DATA_DIR / BOTMUX_LARK_LIST_BOTS_API_* are documented ambient or
+ * ecosystem-block config). The reverse also holds: session/sandbox routing
+ * keys the pane transport never carries (BOTMUX_SESSION_SCOPE,
+ * BOTMUX_SEND_RELAY) still need scrubbing here. Every entry below is
+ * session-scoped BY CONSTRUCTION: the daemon/worker computes and injects it
+ * per session AFTER every boundary scrub, and no ambient/env-file channel for
+ * it exists.
+ */
+export const SESSION_TURN_MARKER_ENV_KEYS = [
+    // "Runs inside botmux" pane marker; pane wrapper injects it per session.
+    'BOTMUX',
+    // Turn/session routing identity (worker-injected per pane/turn).
+    'BOTMUX_SESSION_ID',
+    'BOTMUX_CHAT_ID',
+    'BOTMUX_CHAT_TYPE',
+    'BOTMUX_ROOT_MESSAGE_ID',
+    'BOTMUX_TURN_ID',
+    'BOTMUX_DISPATCH_ATTEMPT',
+    // thread|chat scope, computed per session from rootMessageId (worker.ts).
+    'BOTMUX_SESSION_SCOPE',
+    // Daemon-authenticated session owner, both channels (applySessionOwnerEnv).
+    'BOTMUX_OWNER_OPEN_ID',
+    '__OWNER_OPEN_ID',
+    // Unguessable pane/profile authority channel (daemon-rotated capability).
+    'BOTMUX_ORIGIN_CHANNEL_ID',
+    // Sandbox send-relay directory — a per-session capability path.
+    'BOTMUX_SEND_RELAY',
+    // Session-scoped MCP gateway capability + fail-closed marker.
+    'BOTMUX_MCP_GATEWAY_SOCKET',
+    'BOTMUX_MCP_GATEWAY_REQUIRED',
+    // Owning daemon's per-boot IPC port; the daemon self-sets the real value at
+    // boot (daemon.ts), so an inherited copy is always a stale foreign port.
+    'BOTMUX_DAEMON_IPC_PORT',
+    // Per-session read-isolation / apiOnly / sandbox verdicts (worker-owned).
+    'BOTMUX_READ_ISOLATION',
+    'BOTMUX_READ_ISOLATED',
+    'BOTMUX_API_ONLY',
+    'IS_SANDBOX',
+    // Per-session display footer resolved from bots.json (never env-configured).
+    'BOTMUX_BRAND_LABEL',
+    // Per-bot usage display, resolved via resolveUsageDisplay(cfg) per session;
+    // env is never a config input for it.
+    'BOTMUX_USAGE_DISPLAY',
+    // One-shot per-session artifacts/paths.
+    'BOTMUX_PI_INITIAL_PROMPT_FILE',
+    'BOTMUX_CODEX_APP_CONTROL_BOOTSTRAP',
+    // Ready-gate hook command, sessionReadyHookCommand() per session.
+    'BOTMUX_READY_COMMAND',
+    // Per-app value pinned by the ecosystemConfig env block; an inherited copy
+    // is untrusted (the daemon resolves its bot via BOTMUX_BOT_INDEX).
+    'BOTMUX_LARK_APP_ID',
+    // cjadk wrapper-branch knob, set/deleted per spawn by the worker.
+    'CJADK_INTERACTIVE',
+];
+/** Delete inherited session-only identity/capabilities from `env` in place. */
+export function scrubSessionTurnMarkerEnv(env) {
+    for (const key of SESSION_TURN_MARKER_ENV_KEYS)
+        delete env[key];
+}
 /** Proxy env vars that must reach the CLI child process so it can dial the
  *  upstream API on hosts without direct internet access. Forwarded explicitly
  *  by buildBotmuxEnvAssignments (tmux/tmux-pipe/zellij backends) and
@@ -368,6 +556,12 @@ export function redactChildEnv(base) {
     const env = { ...base };
     for (const key of REDACTED_CHILD_ENV_KEYS)
         delete env[key];
+    // Minimum-exposure sweep for the Dashboard-only H5 login family: the named
+    // keys above are already gone, this also catches any BOTMUX_DASHBOARD_FEISHU_H5_*
+    // knob added later. No CLI child ever consumes one, so a prefix-wide strip
+    // cannot break a supported configuration channel. Same implementation as the
+    // daemon-boot / detached-restart strip so the two layers cannot drift.
+    stripDashboardH5Env(env);
     return env;
 }
 //# sourceMappingURL=child-env.js.map

package/dist/utils/child-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"child-env.js","sourceRoot":"","sources":["../../src/utils/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,YAAY;IACZ,2BAA2B;IAC3B,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,YAAY;CACJ,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,8BAA8B;IAC9B,wBAAwB;IACxB,yBAAyB;IACzB,kBAAkB;IAClB,yBAAyB;IACzB,wBAAwB;IACxB,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;CACR,CAAC;AAEX,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;qBAUqB;AACrB,MAAM,6BAA6B,GAAG,CAAC,eAAe,CAAU,CAAC;AAEjE;;;;;;eAMe;AACf,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,KAAK,MAAM,GAAG,IAAI,8BAA8B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,6BAA6B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,UAAU;IACV,GAAG,8BAA8B;IACjC,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM;IACN,WAAW;IACX,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,6DAA6D;IAC7D,+BAA+B;CACvB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAU,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,WAA+B;IAE/B,IAAI,WAAW,EAAE,CAAC;QAChB,GAAG,CAAC,oBAAoB,GAAG,WAAW,CAAC;QACvC,GAAG,CAAC,eAAe,GAAG,WAAW,CAAC;QAClC,OAAO;IACT,CAAC;IACD,OAAO,GAAG,CAAC,oBAAoB,CAAC;IAChC,OAAO,GAAG,CAAC,eAAe,CAAC;AAC7B,CAAC;AAED;;;iBAGiB;AACjB,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,KAAK,MAAM,GAAG,IAAI,yBAAyB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,QAAQ;IACR,kBAAkB;IAClB,YAAY;IACZ,wEAAwE;IACxE,mEAAmE;IACnE,mBAAmB;IACnB,gBAAgB;IAChB,0EAA0E;IAC1E,wEAAwE;IACxE,wCAAwC;IACxC,2BAA2B;IAC3B,6BAA6B;IAC7B,qEAAqE;IACrE,kBAAkB;IAClB,oBAAoB;IACpB,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE;IACF,gFAAgF;IAChF,+EAA+E;IAC/E,2CAA2C;IAC3C,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,0DAA0D;IAC1D,aAAa;IACb,wBAAwB;IACxB,sEAAsE;IACtE,2EAA2E;IAC3E,sBAAsB;IACtB,gBAAgB;IAChB,yBAAyB;IACzB,0EAA0E;IAC1E,sDAAsD;IACtD,oBAAoB;IACpB,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,uEAAuE;IACvE,uBAAuB;IACvB,iBAAiB;IACjB,uDAAuD;IACvD,6EAA6E;IAC7E,qEAAqE;IACrE,sBAAsB;IACtB,4EAA4E;IAC5E,+BAA+B;IAC/B,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,wBAAwB;IACxB,0EAA0E;IAC1E,yEAAyE;IACzE,sBAAsB;IACtB,6EAA6E;IAC7E,yEAAyE;IACzE,0BAA0B;IAC1B,2EAA2E;IAC3E,mCAAmC;IACnC,sCAAsC;IACtC,sBAAsB;IACtB,6EAA6E;IAC7E,2EAA2E;IAC3E,oCAAoC;IACpC,qEAAqE;IACrE,aAAa;IACb,2BAA2B;IAC3B,6BAA6B;IAC7B,gDAAgD;IAChD,mBAAmB;IACnB,YAAY;IACZ,wDAAwD;IACxD,oCAAoC;IACpC,mBAAmB;CACX,CAAC;AAEX;;;;;;;4DAO4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa;IACxD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;CACxC,CAAC;AAEX,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,GAAG,wBAAwB;IAC3B,GAAG,uBAAuB;IAC1B,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,6BAA6B;IAC7B,GAAG,cAAc;CAClB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACjE,GAAG,wBAAwB;IAC3B,aAAa;IACb,iBAAiB;IACjB,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,GAAG,8BAA8B;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CAAC,GAAW;IAC/D,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,uBAAuB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"child-env.js","sourceRoot":"","sources":["../../src/utils/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,YAAY;IACZ,2BAA2B;IAC3B,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,YAAY;CACJ,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,8BAA8B;IAC9B,wBAAwB;IACxB,yBAAyB;IACzB,kBAAkB;IAClB,yBAAyB;IACzB,wBAAwB;IACxB,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;CACR,CAAC;AAEX,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;qBAUqB;AACrB,MAAM,6BAA6B,GAAG,CAAC,eAAe,CAAU,CAAC;AAEjE;;;;;;eAMe;AACf,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,KAAK,MAAM,GAAG,IAAI,8BAA8B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,6BAA6B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAErE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,oCAAoC;IACpC,kCAAkC;IAClC,mCAAmC;IACnC,uCAAuC;IACvC,6CAA6C;IAC7C,uCAAuC;IACvC,2CAA2C;IAC3C,0CAA0C;IAC1C,+CAA+C;CACvC,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,KAAK,MAAM,GAAG,IAAI,qBAAqB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,uBAAuB,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,kBAAkB;IAClB,UAAU;IACV,aAAa;IACb,UAAU;IACV,gBAAgB;IAChB,2EAA2E;IAC3E,sEAAsE;IACtE,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM;IACN,WAAW;IACX,UAAU;IACV,cAAc;IACd,sBAAsB;IACtB,iBAAiB;IACjB,2BAA2B;IAC3B,IAAI;IACJ,UAAU;IACV,2EAA2E;IAC3E,OAAO;IACP,WAAW;IACX,UAAU;CACF,CAAC;AAEX,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,GAAsB;IAC5D,KAAK,MAAM,GAAG,IAAI,yBAAyB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,UAAU;IACV,gEAAgE;IAChE,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,YAAY;IACZ,GAAG,qBAAqB;IACxB,GAAG,8BAA8B;IACjC,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM;IACN,WAAW;IACX,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,6DAA6D;IAC7D,+BAA+B;CACvB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAU,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,WAA+B;IAE/B,IAAI,WAAW,EAAE,CAAC;QAChB,GAAG,CAAC,oBAAoB,GAAG,WAAW,CAAC;QACvC,GAAG,CAAC,eAAe,GAAG,WAAW,CAAC;QAClC,OAAO;IACT,CAAC;IACD,OAAO,GAAG,CAAC,oBAAoB,CAAC;IAChC,OAAO,GAAG,CAAC,eAAe,CAAC;AAC7B,CAAC;AAED;;;iBAGiB;AACjB,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,KAAK,MAAM,GAAG,IAAI,yBAAyB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,QAAQ;IACR,kBAAkB;IAClB,YAAY;IACZ,wEAAwE;IACxE,mEAAmE;IACnE,mBAAmB;IACnB,gBAAgB;IAChB,0EAA0E;IAC1E,wEAAwE;IACxE,wCAAwC;IACxC,2BAA2B;IAC3B,6BAA6B;IAC7B,qEAAqE;IACrE,kBAAkB;IAClB,oBAAoB;IACpB,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE;IACF,gFAAgF;IAChF,+EAA+E;IAC/E,2CAA2C;IAC3C,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,0DAA0D;IAC1D,aAAa;IACb,wBAAwB;IACxB,sEAAsE;IACtE,2EAA2E;IAC3E,sBAAsB;IACtB,gBAAgB;IAChB,yBAAyB;IACzB,0EAA0E;IAC1E,sDAAsD;IACtD,oBAAoB;IACpB,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,uEAAuE;IACvE,uBAAuB;IACvB,iBAAiB;IACjB,uDAAuD;IACvD,6EAA6E;IAC7E,qEAAqE;IACrE,sBAAsB;IACtB,4EAA4E;IAC5E,+BAA+B;IAC/B,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,wBAAwB;IACxB,0EAA0E;IAC1E,yEAAyE;IACzE,sBAAsB;IACtB,6EAA6E;IAC7E,yEAAyE;IACzE,0BAA0B;IAC1B,2EAA2E;IAC3E,mCAAmC;IACnC,sCAAsC;IACtC,sBAAsB;IACtB,6EAA6E;IAC7E,2EAA2E;IAC3E,oCAAoC;IACpC,qEAAqE;IACrE,aAAa;IACb,2BAA2B;IAC3B,6BAA6B;IAC7B,gDAAgD;IAChD,mBAAmB;IACnB,YAAY;IACZ,wDAAwD;IACxD,oCAAoC;IACpC,mBAAmB;CACX,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,yEAAyE;IACzE,QAAQ;IACR,iEAAiE;IACjE,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,wBAAwB;IACxB,gBAAgB;IAChB,yBAAyB;IACzB,0EAA0E;IAC1E,sBAAsB;IACtB,4EAA4E;IAC5E,sBAAsB;IACtB,iBAAiB;IACjB,0EAA0E;IAC1E,0BAA0B;IAC1B,gEAAgE;IAChE,mBAAmB;IACnB,8DAA8D;IAC9D,2BAA2B;IAC3B,6BAA6B;IAC7B,4EAA4E;IAC5E,yEAAyE;IACzE,wBAAwB;IACxB,0EAA0E;IAC1E,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,YAAY;IACZ,6EAA6E;IAC7E,oBAAoB;IACpB,4EAA4E;IAC5E,sCAAsC;IACtC,sBAAsB;IACtB,wCAAwC;IACxC,+BAA+B;IAC/B,oCAAoC;IACpC,kEAAkE;IAClE,sBAAsB;IACtB,2EAA2E;IAC3E,mEAAmE;IACnE,oBAAoB;IACpB,kEAAkE;IAClE,mBAAmB;CACX,CAAC;AAEX,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CAAC,GAAsB;IAC9D,KAAK,MAAM,GAAG,IAAI,4BAA4B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;4DAO4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa;IACxD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;CACxC,CAAC;AAEX,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,GAAG,wBAAwB;IAC3B,GAAG,uBAAuB;IAC1B,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,6BAA6B;IAC7B,GAAG,cAAc;CAClB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACjE,GAAG,wBAAwB;IAC3B,aAAa;IACb,iBAAiB;IACjB,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,GAAG,8BAA8B;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CAAC,GAAW;IAC/D,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,uBAAuB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,kFAAkF;IAClF,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/cli-usage-limit.d.ts

@@ -24,24 +24,35 @@ export interface DetectUsageLimitOptions {
 }
 /**
  * Whether a CLI adapter is authoritative for structured rate limits — i.e. it
- * actually PUBLISHES a `limited` screen_update from its transcript. Only the
- * Claude family does (via the worker's `maybeEmitStructuredRateLimit` on the
- * `bridgeJsonlPath` path), and it is exactly the adapters that carry
- * `claudeDataDir`. When true, the worker passes `suppressRateKind` so the
- * screen-scan `rate` verdict is suppressed in favor of the structured signal.
+ * actually PUBLISHES a `limited` screen_update from a machine signal in its
+ * transcript rather than from scraping screen text. Two families qualify:
  *
- * Gate on `claudeDataDir`, NOT `reliableTurnTerminal`: the codexBridgeQueue
- * CLIs emit NO structured `limited` state, so suppressing their screen `rate`
- * would drop the Dashboard「需要你」signal + backoff on a real 429. Most of
- * them (codex / grok / traex) DO set `reliableTurnTerminal`, so gating on that
- * flag would wrongly suppress them; pi is also codexBridgeQueue-backed but does
- * not set it — either way, none carry `claudeDataDir`, so all correctly stay
- * screen-scanning. Extracted as a pure predicate so the split has a direct
- * unit-test surface (see cli-usage-limit.test.ts) — a future adapter can't
- * silently re-broaden it.
+ *  - The Claude family (`claudeDataDir`): the worker's
+ *    `maybeEmitStructuredRateLimit` reads the transcript's `error:"rate_limit"`
+ *    record on the `bridgeJsonlPath` path.
+ *  - Codex (`emitsStructuredRateLimit`): `maybeEmitCodexStructuredRateLimit`
+ *    reads the rollout's `codex_rate_limited` terminal (`isCodexRateLimitEvent`)
+ *    and emits `limited`. This emit runs only under the `structuredBridgeIsCodex`
+ *    gate, so among codexBridgeQueue CLIs only codex sets the flag.
+ *
+ * When true the worker passes `suppressRateKind` so the screen-scan `rate`
+ * verdict is dropped in favor of the structured signal — otherwise the model's
+ * own output (or a dev editing rate-limit code) puts "429" / "exceeded retry
+ * limit" on screen and the scraper cannot tell a printed 429 from a request
+ * that actually returned 429.
+ *
+ * The other codexBridgeQueue CLIs (grok / traex / pi / hermes / mtr / cursor)
+ * emit NO structured `limited` state, so they must keep screen-scanning: set
+ * neither field on them or a real 429 silently loses its backoff + Dashboard
+ * 「需要你」signal. Most set `reliableTurnTerminal`, so gating on that flag would
+ * wrongly suppress them; gating on these two explicit capability fields keeps
+ * the split exact. Extracted as a pure predicate so it has a direct unit-test
+ * surface (see cli-usage-limit.test.ts) — a future adapter can't silently
+ * re-broaden it.
  */
 export declare function isStructuredRateLimitAuthoritative(adapter: {
     readonly claudeDataDir?: string;
+    readonly emitsStructuredRateLimit?: boolean;
 } | null | undefined): boolean;
 export declare function detectCliUsageLimit(text: string, now?: Date, opts?: DetectUsageLimitOptions): CliUsageLimitDetection;
 export declare function usageLimitStateKey(state: CliUsageLimitState): string;

package/dist/utils/cli-usage-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-usage-limit.d.ts","sourceRoot":"","sources":["../../src/utils/cli-usage-limit.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,KAAK,CAAC;CAChB;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,wBAAwB,CAAC;AAoCnF,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AA0DzD,MAAM,WAAW,uBAAuB;IACtC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC9D,OAAO,CAET;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,GAAG,OAAa,EAChB,IAAI,GAAE,uBAA4B,GACjC,sBAAsB,CAsCxB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAEpE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,SAAK,EAAE,GAAG,OAAa,GAAG,kBAAkB,CAUxF"}
+{"version":3,"file":"cli-usage-limit.d.ts","sourceRoot":"","sources":["../../src/utils/cli-usage-limit.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,KAAK,CAAC;CAChB;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,wBAAwB,CAAC;AAoCnF,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AA0DzD,MAAM,WAAW,uBAAuB;IACtC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC3G,OAAO,CAET;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,GAAG,OAAa,EAChB,IAAI,GAAE,uBAA4B,GACjC,sBAAsB,CAsCxB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAEpE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,SAAK,EAAE,GAAG,OAAa,GAAG,kBAAkB,CAUxF"}

package/dist/utils/cli-usage-limit.js

@@ -84,24 +84,34 @@ function hardRateLimitFallbackTime(now) {
 }
 /**
  * Whether a CLI adapter is authoritative for structured rate limits — i.e. it
- * actually PUBLISHES a `limited` screen_update from its transcript. Only the
- * Claude family does (via the worker's `maybeEmitStructuredRateLimit` on the
- * `bridgeJsonlPath` path), and it is exactly the adapters that carry
- * `claudeDataDir`. When true, the worker passes `suppressRateKind` so the
- * screen-scan `rate` verdict is suppressed in favor of the structured signal.
+ * actually PUBLISHES a `limited` screen_update from a machine signal in its
+ * transcript rather than from scraping screen text. Two families qualify:
  *
- * Gate on `claudeDataDir`, NOT `reliableTurnTerminal`: the codexBridgeQueue
- * CLIs emit NO structured `limited` state, so suppressing their screen `rate`
- * would drop the Dashboard「需要你」signal + backoff on a real 429. Most of
- * them (codex / grok / traex) DO set `reliableTurnTerminal`, so gating on that
- * flag would wrongly suppress them; pi is also codexBridgeQueue-backed but does
- * not set it — either way, none carry `claudeDataDir`, so all correctly stay
- * screen-scanning. Extracted as a pure predicate so the split has a direct
- * unit-test surface (see cli-usage-limit.test.ts) — a future adapter can't
- * silently re-broaden it.
+ *  - The Claude family (`claudeDataDir`): the worker's
+ *    `maybeEmitStructuredRateLimit` reads the transcript's `error:"rate_limit"`
+ *    record on the `bridgeJsonlPath` path.
+ *  - Codex (`emitsStructuredRateLimit`): `maybeEmitCodexStructuredRateLimit`
+ *    reads the rollout's `codex_rate_limited` terminal (`isCodexRateLimitEvent`)
+ *    and emits `limited`. This emit runs only under the `structuredBridgeIsCodex`
+ *    gate, so among codexBridgeQueue CLIs only codex sets the flag.
+ *
+ * When true the worker passes `suppressRateKind` so the screen-scan `rate`
+ * verdict is dropped in favor of the structured signal — otherwise the model's
+ * own output (or a dev editing rate-limit code) puts "429" / "exceeded retry
+ * limit" on screen and the scraper cannot tell a printed 429 from a request
+ * that actually returned 429.
+ *
+ * The other codexBridgeQueue CLIs (grok / traex / pi / hermes / mtr / cursor)
+ * emit NO structured `limited` state, so they must keep screen-scanning: set
+ * neither field on them or a real 429 silently loses its backoff + Dashboard
+ * 「需要你」signal. Most set `reliableTurnTerminal`, so gating on that flag would
+ * wrongly suppress them; gating on these two explicit capability fields keeps
+ * the split exact. Extracted as a pure predicate so it has a direct unit-test
+ * surface (see cli-usage-limit.test.ts) — a future adapter can't silently
+ * re-broaden it.
  */
 export function isStructuredRateLimitAuthoritative(adapter) {
-    return !!adapter?.claudeDataDir;
+    return !!adapter?.claudeDataDir || !!adapter?.emitsStructuredRateLimit;
 }
 export function detectCliUsageLimit(text, now = new Date(), opts = {}) {
     // Hot path: runs on every screen tick for every active session. Gate heavier

package/dist/utils/cli-usage-limit.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-usage-limit.js","sourceRoot":"","sources":["../../src/utils/cli-usage-limit.ts"],"names":[],"mappings":"AAgBA,MAAM,oBAAoB,GAAG;IAC3B,uCAAuC;IACvC,oDAAoD;IACpD,2CAA2C;IAC3C,gEAAgE;CACjE,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,yCAAyC;IACzC,mBAAmB;IACnB,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,gFAAgF;IAChF,kBAAkB;IAClB,8BAA8B;IAC9B,2BAA2B;CAC5B,CAAC;AAEF,sEAAsE;AACtE,0EAA0E;AAC1E,4EAA4E;AAC5E,mEAAmE;AACnE,MAAM,qCAAqC,GAAG;IAC5C,kBAAkB;IAClB,8BAA8B;IAC9B,2BAA2B;CAC5B,CAAC;AAEF,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,MAAM,mBAAmB,GAAG;IAC1B,gEAAgE;IAChE,iEAAiE;CAClE,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY,EAAE,QAAkB;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAS;IAChD,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAExE,IAAI,IAAI,GAAG,OAAO,GAAG,EAAE,CAAC;QACxB,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,IAAI,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE;YAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;SACvF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAS,yBAAyB,CAAC,GAAS;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,2BAA2B,CAAC,GAAG,2BAA2B,CAAC;IAClG,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,GAAG,2BAA2B,CAAC;IAChE,OAAO;QACL,SAAS;QACT,4EAA4E;QAC5E,yEAAyE;QACzE,UAAU,EAAE,UAAU;KACvB,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kCAAkC,CAChD,OAA+D;IAE/D,OAAO,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,OAAgC,EAAE;IAElC,6EAA6E;IAC7E,+DAA+D;IAC/D,uEAAuE;IACvE,IAAI,CAAC,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEnD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS;SAC5C,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,+EAA+E;IAC/E,6DAA6D;IAC7D,IAAI,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,qCAAqC,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,QAAQ,CAAC,SAAS;SAChD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,UAAU;QACV,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS;KACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cli-usage-limit.js","sourceRoot":"","sources":["../../src/utils/cli-usage-limit.ts"],"names":[],"mappings":"AAgBA,MAAM,oBAAoB,GAAG;IAC3B,uCAAuC;IACvC,oDAAoD;IACpD,2CAA2C;IAC3C,gEAAgE;CACjE,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,yCAAyC;IACzC,mBAAmB;IACnB,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,gFAAgF;IAChF,kBAAkB;IAClB,8BAA8B;IAC9B,2BAA2B;CAC5B,CAAC;AAEF,sEAAsE;AACtE,0EAA0E;AAC1E,4EAA4E;AAC5E,mEAAmE;AACnE,MAAM,qCAAqC,GAAG;IAC5C,kBAAkB;IAClB,8BAA8B;IAC9B,2BAA2B;CAC5B,CAAC;AAEF,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,MAAM,mBAAmB,GAAG;IAC1B,gEAAgE;IAChE,iEAAiE;CAClE,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY,EAAE,QAAkB;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAS;IAChD,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAExE,IAAI,IAAI,GAAG,OAAO,GAAG,EAAE,CAAC;QACxB,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,IAAI,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE;YAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;SACvF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAS,yBAAyB,CAAC,GAAS;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,2BAA2B,CAAC,GAAG,2BAA2B,CAAC;IAClG,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,GAAG,2BAA2B,CAAC;IAChE,OAAO;QACL,SAAS;QACT,4EAA4E;QAC5E,yEAAyE;QACzE,UAAU,EAAE,UAAU;KACvB,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,kCAAkC,CAChD,OAA4G;IAE5G,OAAO,CAAC,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,OAAgC,EAAE;IAElC,6EAA6E;IAC7E,+DAA+D;IAC/D,uEAAuE;IACvE,IAAI,CAAC,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEnD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS;SAC5C,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,+EAA+E;IAC/E,6DAA6D;IAC7D,IAAI,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,qCAAqC,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,QAAQ,CAAC,SAAS;SAChD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,UAAU;QACV,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS;KACvC,CAAC;AACJ,CAAC"}

package/dist/utils/daemon-rejection-guard.d.ts

@@ -0,0 +1,35 @@
+/** Minimal sink so tests can capture without touching the real logger. */
+export interface RejectionLogSink {
+    error(msg: string): void;
+}
+/**
+ * Render a rejection reason for the log.
+ *
+ * Prefers the stack: without it an `unhandledRejection` report is close to
+ * useless, because the throw site is exactly what the caller failed to observe.
+ * Non-Error reasons (a rejected string, a plain object) still have to produce
+ * something readable, since `String({})` alone would log "[object Object]".
+ */
+export declare function formatRejectionReason(reason: unknown): string;
+/**
+ * The handler body, exported so a test can drive it directly instead of
+ * emitting a real process-level event (which would leak across test files).
+ *
+ * Returns whether the rejection was logged; a broken-pipe-class reason is
+ * dropped for the same reason stdio-epipe-guard drops it, and reporting that
+ * would just add noise on every detached pm2 log stream.
+ */
+export declare function handleDaemonUnhandledRejection(reason: unknown, sink: RejectionLogSink): boolean;
+/**
+ * Install the daemon-side guard. Idempotent, so multiple entry points may call
+ * it. Returns true if it installed on this call.
+ *
+ * `target` is parameterized only so unit tests can inject a fake emitter rather
+ * than registering a listener on the real process for the whole test run.
+ */
+export declare function installDaemonRejectionGuard(sink: RejectionLogSink, target?: {
+    on(event: 'unhandledRejection', cb: (reason: unknown) => void): unknown;
+}): boolean;
+/** Test-only reset of the idempotency latch. */
+export declare function resetDaemonRejectionGuardForTest(): void;
+//# sourceMappingURL=daemon-rejection-guard.d.ts.map

package/dist/utils/daemon-rejection-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-rejection-guard.d.ts","sourceRoot":"","sources":["../../src/utils/daemon-rejection-guard.ts"],"names":[],"mappings":"AAoCA,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAa7D;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAOT;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,gBAAgB,EACtB,MAAM,GAAE;IAAE,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAA;CAAY,GAC5F,OAAO,CAYT;AAED,gDAAgD;AAChD,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD"}