crewly 1.20.172 → 1.20.174

package/dist/cli/backend/src/services/harness/harness-login-probe.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Live sign-in probe — is a harness's login actually usable right now?
+ *
+ * The status checks in {@link HarnessStatusService} only see whether a
+ * credential is *stored*. For Claude Code that is not enough: an expired or
+ * revoked login stays in the macOS keychain (and `claude auth status` keeps
+ * saying `loggedIn: true`), so a machine whose every agent sits at
+ * "Login expired · Please run /login" still looks logged in. The re-login
+ * coordinator therefore confirms a suspected expiry with this probe before
+ * telling the owner, and runs it now and then for harnesses in use so an
+ * expiry is noticed even when no agent is running (the Air, 2026-09-30).
+ *
+ * - Claude Code: one tiny print-mode turn (`claude -p … --model haiku
+ *   --no-session-persistence`) in a scratch directory, with the env agents
+ *   get (a token Crewly stores is used, exactly as an agent would). Exit 0 →
+ *   `logged_in`; output that matches a login-expiry rule → `logged_out`;
+ *   anything else (network, rate limit, timeout) → `unknown`.
+ * - Codex: `codex login status` (what the status check already asks).
+ *
+ * The probe never logs in or out and never prints a secret.
+ *
+ * @module services/harness/harness-login-probe
+ */
+import { type HarnessCredentialsStore } from './harness-credentials.store.js';
+import type { HarnessId, LoginState, RunCommand } from './harness.types.js';
+/** Injectable dependencies. */
+export interface HarnessLoginProbeDeps {
+    run?: RunCommand;
+    /** Base env (default process.env) */
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+    /** PATH lookup of the harness binary */
+    resolveCommand?: (command: string) => string | null;
+    /** Stored credentials exported to agents (Claude token / key) */
+    credentials?: Pick<HarnessCredentialsStore, 'harnessEnvForAgents'>;
+    /** Scratch directory the Claude probe runs in */
+    scratchDir?: string;
+    timeoutMs?: number;
+}
+/** Result of one probe. */
+export type HarnessLoginProbe = (harnessId: HarnessId) => Promise<LoginState>;
+/**
+ * Classify the output of a Claude probe turn.
+ *
+ * @param result - Exit code and output
+ * @returns The login state it proves
+ *
+ * @example
+ * ```ts
+ * classifyClaudeProbe({ code: 1, stdout: 'Not logged in · Please run /login', stderr: '' }); // 'logged_out'
+ * ```
+ */
+export declare function classifyClaudeProbe(result: {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}): LoginState;
+/**
+ * Build the probe.
+ *
+ * @param deps - Dependencies (defaults: the real CLI and stored credentials)
+ * @returns `probe(harnessId)` → `logged_in` / `logged_out` / `unknown`; never rejects
+ */
+export declare function createHarnessLoginProbe(deps?: HarnessLoginProbeDeps): HarnessLoginProbe;
+//# sourceMappingURL=harness-login-probe.d.ts.map

package/dist/cli/backend/src/services/harness/harness-login-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-login-probe.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/harness/harness-login-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,OAAO,EAA8B,KAAK,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE1G,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAG5E,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACrC,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpD,iEAAiE;IACjE,WAAW,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;IACnE,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2BAA2B;AAC3B,MAAM,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAK9E;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAK/G;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,qBAA0B,GAAG,iBAAiB,CAqC3F"}

package/dist/cli/backend/src/services/harness/harness-login-probe.js

@@ -0,0 +1,99 @@
+/**
+ * Live sign-in probe — is a harness's login actually usable right now?
+ *
+ * The status checks in {@link HarnessStatusService} only see whether a
+ * credential is *stored*. For Claude Code that is not enough: an expired or
+ * revoked login stays in the macOS keychain (and `claude auth status` keeps
+ * saying `loggedIn: true`), so a machine whose every agent sits at
+ * "Login expired · Please run /login" still looks logged in. The re-login
+ * coordinator therefore confirms a suspected expiry with this probe before
+ * telling the owner, and runs it now and then for harnesses in use so an
+ * expiry is noticed even when no agent is running (the Air, 2026-09-30).
+ *
+ * - Claude Code: one tiny print-mode turn (`claude -p … --model haiku
+ *   --no-session-persistence`) in a scratch directory, with the env agents
+ *   get (a token Crewly stores is used, exactly as an agent would). Exit 0 →
+ *   `logged_in`; output that matches a login-expiry rule → `logged_out`;
+ *   anything else (network, rate limit, timeout) → `unknown`.
+ * - Codex: `codex login status` (what the status check already asks).
+ *
+ * The probe never logs in or out and never prints a secret.
+ *
+ * @module services/harness/harness-login-probe
+ */
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { HARNESS_CONSTANTS } from '../../constants.js';
+import { getHarnessCredentialsStore } from './harness-credentials.store.js';
+import { buildHarnessPath, resolveExecutable, runCommand } from './harness-exec.utils.js';
+import { detectLoginExpiry } from './login-expiry-rules.js';
+/** Env variables that would make the probe a nested Claude session or leak Crewly's API token. */
+const STRIPPED_ENV = ['CREWLY_API_TOKEN', 'CLAUDECODE', 'CLAUDE_CODE_ENTRYPOINT', 'CLAUDE_CODE_SSE_PORT'];
+/**
+ * Classify the output of a Claude probe turn.
+ *
+ * @param result - Exit code and output
+ * @returns The login state it proves
+ *
+ * @example
+ * ```ts
+ * classifyClaudeProbe({ code: 1, stdout: 'Not logged in · Please run /login', stderr: '' }); // 'logged_out'
+ * ```
+ */
+export function classifyClaudeProbe(result) {
+    const output = `${result.stdout}\n${result.stderr}`;
+    if (detectLoginExpiry(output, HARNESS_CONSTANTS.IDS.CLAUDE_CODE))
+        return 'logged_out';
+    if (result.code === 0)
+        return 'logged_in';
+    return 'unknown';
+}
+/**
+ * Build the probe.
+ *
+ * @param deps - Dependencies (defaults: the real CLI and stored credentials)
+ * @returns `probe(harnessId)` → `logged_in` / `logged_out` / `unknown`; never rejects
+ */
+export function createHarnessLoginProbe(deps = {}) {
+    const run = deps.run ?? runCommand;
+    const baseEnv = deps.env ?? process.env;
+    const homeDir = deps.homeDir ?? os.homedir();
+    const timeoutMs = deps.timeoutMs ?? HARNESS_CONSTANTS.RELOGIN.PROBE_TIMEOUT_MS;
+    const resolve = deps.resolveCommand ?? ((command) => resolveExecutable(command, buildHarnessPath(baseEnv.PATH, homeDir)));
+    /** Env of the probe: what an agent of that harness gets. */
+    const envFor = (harnessId) => {
+        const credentials = deps.credentials ?? getHarnessCredentialsStore();
+        const env = { ...baseEnv, ...credentials.harnessEnvForAgents(baseEnv, harnessId) };
+        for (const name of STRIPPED_ENV)
+            delete env[name];
+        return env;
+    };
+    return async (harnessId) => {
+        try {
+            if (harnessId === HARNESS_CONSTANTS.IDS.CLAUDE_CODE) {
+                const binary = resolve('claude');
+                if (!binary)
+                    return 'unknown';
+                const scratch = deps.scratchDir ?? path.join(os.tmpdir(), 'crewly-login-probe');
+                fs.mkdirSync(scratch, { recursive: true });
+                const result = await run(binary, HARNESS_CONSTANTS.CLAUDE.PROBE_ARGS, { env: envFor(harnessId), timeoutMs, cwd: scratch });
+                return classifyClaudeProbe(result);
+            }
+            if (harnessId === HARNESS_CONSTANTS.IDS.CODEX_CLI) {
+                const binary = resolve('codex');
+                if (!binary)
+                    return 'unknown';
+                const result = await run(binary, ['login', 'status'], { env: envFor(harnessId), timeoutMs: HARNESS_CONSTANTS.PROBE_TIMEOUT_MS });
+                if (result.code === 0)
+                    return 'logged_in';
+                return result.code === null ? 'unknown' : 'logged_out';
+            }
+            return 'unknown';
+        }
+        catch {
+            return 'unknown';
+        }
+    };
+}
+//# sourceMappingURL=harness-login-probe.js.map

package/dist/cli/backend/src/services/harness/harness-login-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-login-probe.js","sourceRoot":"","sources":["../../../../../../backend/src/services/harness/harness-login-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAgC,MAAM,gCAAgC,CAAC;AAC1G,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAoB5D,kGAAkG;AAClG,MAAM,YAAY,GAAG,CAAC,kBAAkB,EAAE,YAAY,EAAE,wBAAwB,EAAE,sBAAsB,CAAU,CAAC;AAEnH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA+D;IAClG,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;IACpD,IAAI,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,YAAY,CAAC;IACtF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC1C,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA8B,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAElI,4DAA4D;IAC5D,MAAM,MAAM,GAAG,CAAC,SAAoB,EAAqB,EAAE;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,0BAA0B,EAAE,CAAC;QACrE,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACtG,KAAK,MAAM,IAAI,IAAI,YAAY;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,SAAoB,EAAuB,EAAE;QAC1D,IAAI,CAAC;YACJ,IAAI,SAAS,KAAK,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,CAAC,MAAM;oBAAE,OAAO,SAAS,CAAC;gBAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBAChF,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC3H,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,SAAS,KAAK,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM;oBAAE,OAAO,SAAS,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBACjI,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;oBAAE,OAAO,WAAW,CAAC;gBAC1C,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;YACxD,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC,CAAC;AACH,CAAC"}