github-router 0.3.131 → 0.3.135

package/dist/main.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { $ as relayAnthropicStream, At as withInstallLock, B as vscodeRipgrepPath, Bt as resolveModel, C as stopGateEnabledForRepo, Ct as DEFAULT_CODEX_MODEL_FALLBACKS, D as liveExec, Dt as generateRandomPort, E as resolveSealedGate, Et as UPSTREAM_INACTIVITY_TIMEOUT_MS, Ft as cacheModels, G as ADVISOR_TOOL_INSTRUCTIONS, Gt as forwardError, H as assetFor, Ht as getModels, I as availableToolCommands, It as cacheVSCodeVersion, J as isAdvisorRequested, Jt as copilotHeaders, K as buildAdvisorStream, Kt as GITHUB_API_BASE_URL, L as buildToolbeltAwareness, Lt as filterBetaHeader, Mt as setupGitHubToken, Nt as tryRefreshAndRetry, Ot as pickClaudeDefault, Pt as cacheCopilotVersion, Q as readIteratorWithTimeout, R as toolbeltEnabled, Rt as isNullish, S as repoRoot, St as DEFAULT_CODEX_MODEL, T as trustRepo, Tt as UPSTREAM_FETCH_TIMEOUT_MS, U as searchWeb, Ut as fetchWithTransientRetry, V as TOOLBELT_TOOLS, Vt as sleep, W as ADVISOR_INTERNAL_TOOL_NAME, Wt as HTTPError, X as isControllerClosedError, Xt as state, Y as buildOpenAIErrorEvent, Yt as githubHeaders, Z as logStreamError, _ as fileFindingsStore, _t as extractTarGzMember, a as buildPeerAwarenessSnippet, at as workerToolsEnabled, b as isSubagentContext, bt as toolbeltPathOverride, c as buildStopHookCommand, ct as getTokenCount, d as fileBlockBudget, dt as MAX_RESPONSE_BODY_BYTES, et as handleMcpDelete, f as injectStopHookIntoSettingsFile, ft as readResponseBodyCapped, g as fileBaselineStore, gt as provisionAndIndexColbert, h as stopReviewEnabled, ht as hasSupportedBrowserInstalled, i as buildAgentPrompt, it as standInToolEnabled, jt as setupCopilotToken, kt as getPackageVersion, l as captureLaunchBaseline, lt as createResponses, m as stopGateId, mt as provisionBrowserAssets, n as MCP_GROUPS, nt as browserToolsEnabled, o as personasFor, ot as countTokens, p as launchBaselineKey, pt as parseJsonOrDiagnose, q as injectAdvisorTool, qt as copilotBaseUrl, r as assertMcpToolSurfaceConsistent, rt as fleetToolsEnabled, s as buildSessionBindHookCommand, st as createMessages, t as GROUP_META, tt as handleMcpPost, u as decideStopHook, ut as createChatCompletions, v as fileLastPromptStore, vt as extractZipMember, w as stopReviewStateDir, wt as DEFAULT_PORT, x as repoFingerprint, xt as DEFAULT_CLAUDE_MODEL_FALLBACKS, y as fileReviewDebounce, yt as collapsePathKeys, z as toolbeltSkipSet, zt as resolveCodexModel } from "./peer-mcp-personas-CH2gmdPN.js";
-import { a as removeOwnClaudeConfigMirror, i as isUnderClaudeConfigMirror, l as writeRuntimeFileSecure, n as ensureClaudeConfigMirror, r as ensurePaths, t as PATHS } from "./paths-CNgpeaWd.js";
-import { c as killManagedTree, d as runCommandCapture, f as runCommandVoid, l as parseBoolEnv, s as killChildProcessTree, u as resolveExecutable } from "./lifecycle-DTJ2Ugqf.js";
-import { a as sweepRegistry } from "./lifecycle-Cyxwmj1c.js";
+import { $ as readIteratorWithTimeout, $t as state, At as generateRandomPort, B as toolbeltSkipSet, Bt as filterBetaHeader, C as repoRoot, Ct as toolbeltPathOverride, D as resolveSealedGate, Dt as DEFAULT_PORT, E as trustRepo, Et as DEFAULT_CODEX_MODEL_FALLBACKS, Ft as setupGitHubToken, G as ADVISOR_INTERNAL_TOOL_NAME, Gt as getModels, H as TOOLBELT_TOOLS, Ht as resolveCodexModel, It as tryRefreshAndRetry, J as injectAdvisorTool, Jt as forwardError, K as ADVISOR_TOOL_INSTRUCTIONS, Kt as fetchWithTransientRetry, L as availableToolCommands, Lt as cacheCopilotVersion, Mt as getPackageVersion, Nt as withInstallLock, O as liveExec, Ot as UPSTREAM_FETCH_TIMEOUT_MS, Pt as setupCopilotToken, Q as logStreamError, Qt as githubHeaders, R as buildToolbeltAwareness, Rt as cacheModels, S as repoFingerprint, St as collapsePathKeys, T as stopReviewStateDir, Tt as DEFAULT_CODEX_MODEL, U as assetFor, Ut as resolveModel, V as vscodeRipgrepPath, Vt as isNullish, W as searchWeb, Wt as sleep, X as buildOpenAIErrorEvent, Xt as copilotBaseUrl, Y as isAdvisorRequested, Yt as GITHUB_API_BASE_URL, Z as isControllerClosedError, Zt as copilotHeaders, _ as fileBaselineStore, _t as provisionAndIndexColbert, a as buildPeerAwarenessSnippet, at as standInToolEnabled, b as fileReviewDebounce, bt as shouldUseInsecureTls, c as buildSessionBindHookCommand, ct as createMessages, d as decideStopHook, dt as createChatCompletions, et as relayAnthropicStream, f as fileBlockBudget, ft as MAX_RESPONSE_BODY_BYTES, g as stopReviewEnabled, gt as hasSupportedBrowserInstalled, h as stopGateId, ht as provisionBrowserAssets, i as buildAgentPrompt, it as fleetToolsEnabled, jt as pickClaudeDefault, kt as UPSTREAM_INACTIVITY_TIMEOUT_MS, l as buildStopHookCommand, lt as getTokenCount, m as launchBaselineKey, mt as parseJsonOrDiagnose, n as MCP_GROUPS, nt as handleMcpPost, o as personasFor, ot as workerToolsEnabled, p as injectStopHookIntoSettingsFile, pt as readResponseBodyCapped, q as buildAdvisorStream, qt as HTTPError, r as assertMcpToolSurfaceConsistent, rt as browserToolsEnabled, s as buildArtifactOpenHookCommand, st as countTokens, t as GROUP_META, tt as handleMcpDelete, u as captureLaunchBaseline, ut as createResponses, v as fileFindingsStore, vt as extractTarGzMember, w as stopGateEnabledForRepo, wt as DEFAULT_CLAUDE_MODEL_FALLBACKS, x as isSubagentContext, xt as ArtifactClient, y as fileLastPromptStore, yt as extractZipMember, z as toolbeltEnabled, zt as cacheVSCodeVersion } from "./peer-mcp-personas-ClyKATAD.js";
+import { a as removeOwnClaudeConfigMirror, i as isUnderClaudeConfigMirror, l as writeArtifactCredsToMirror, n as ensureClaudeConfigMirror, r as ensurePaths, t as PATHS, u as writeRuntimeFileSecure } from "./paths-Cn5OzmYL.js";
+import { c as killManagedTree, d as runCommandCapture, f as runCommandVoid, l as parseBoolEnv, s as killChildProcessTree, u as resolveExecutable } from "./lifecycle-Cqe8OQVX.js";
+import { a as sweepRegistry } from "./lifecycle-CeVDX6av.js";
 import { defineCommand, runMain } from "citty";
 import consola from "consola";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import fs, { chmod, copyFile, link, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
-import os, { tmpdir } from "node:os";
+import os, { homedir, tmpdir } from "node:os";
 import nodePath from "node:path";
 import process$1 from "node:process";
 import { execFileSync, spawn } from "node:child_process";
@@ -19,6 +19,7 @@ import { getProxyForUrl } from "proxy-from-env";
 import { Hono } from "hono";
 import { cors } from "hono/cors";
 import { clearTimeout as clearTimeout$1, setTimeout as setTimeout$1 } from "node:timers";
+import { Marked } from "marked";
 import clipboard from "clipboardy";
 
 //#region src/auth.ts
@@ -579,7 +580,8 @@ const STRIPPED_PARENT_ENV_KEYS = [
 	"OPENAI_BASE_URL",
 	"CODEX_HOME",
 	"AIORDIE_CLAUDE_BIND",
-	"AIORDIE_TOKEN"
+	"AIORDIE_TOKEN",
+	"AIORDIE_INSECURE_TLS"
 ];
 /**
 * Strip auth-related keys from a parent-process env object. The result
@@ -2034,7 +2036,7 @@ async function discoverGateCommands(cwd, opts) {
 	if (files.length === 0) return null;
 	let result;
 	try {
-		const { runWorkerAgent } = await import("./engine-DCsTvsSw.js");
+		const { runWorkerAgent } = await import("./engine-CEaYFr0J.js");
 		result = await runWorkerAgent({
 			mode: "explore",
 			workspace: root,
@@ -2590,6 +2592,41 @@ Return a compact brief, not the whole research dump:
 `
 };
 
+//#endregion
+//#region src/lib/injected-skills/artifact-review-skill.ts
+const ARTIFACT_REVIEW_SKILL = {
+	name: "gh-artifact-review",
+	md: `---
+name: gh-artifact-review
+description: Review plans and artifacts in the ai-or-die panel. Default to authoring a self-contained HTML artifact (rich, annotatable) and opening THAT for the human, then poll for feedback, revise, and end the loop. Use when running inside an ai-or-die tab and you have a plan, comparison, diagram, table, diff, or report the user should see before proceeding.
+user-invocable: true
+---
+
+# gh-artifact-review: human review in the ai-or-die panel
+
+Use this when you finish a plan or produce something a user should review and you are inside an ai-or-die tab (the \`mcp__peers__artifact_*\` tools drive a live panel). The human can click any block or select text to attach a comment that comes back to you.
+
+## Default: present HTML, not raw markdown
+
+HTML is the canonical review artifact — it renders richly and is annotatable element-by-element. When the content is anything visual or structured (a comparison, table, diagram, diff, dashboard, or a plan you want to look polished), **author a self-contained \`.html\` file** (inline CSS, no external deps, readable typography) and open THAT.
+
+- Plan-mode plans: the panel auto-opens them already rendered to HTML — you do not need to convert them by hand.
+- Do not paste raw markdown into an \`.html\`; write real HTML (headings, lists, tables, \`<pre>\` for code). Opening a raw \`.md\` still renders, but a purpose-built HTML artifact reads better and annotates cleanly.
+
+## Loop
+
+1. Open: \`mcp__peers__artifact_open\` with the absolute path of the \`.html\` (or the file). Relay the returned \`viewUrl\` and tell the user to review in the panel — they can click a block or select text to comment.
+2. Poll: \`mcp__peers__artifact_poll\`. If status is waiting, poll again. Each returned prompt may carry a \`selector\`, quoted \`text\`, and \`sourceLine\` pinpointing what the comment is about — act on that exact spot.
+3. Apply: make the requested edits, then \`mcp__peers__artifact_reply\` with a concise summary of what changed.
+4. Repeat 2-3 until the user is satisfied; then \`mcp__peers__artifact_end\`.
+
+## Honest limits
+
+- If a tool errors (e.g. \`NOT_IN_AIORDIE_TAB\`, \`UNREACHABLE\`), report the code/message verbatim; do not claim the panel opened.
+- The panel is a review surface, not an approver: outward/irreversible actions still need explicit user confirmation.
+`
+};
+
 //#endregion
 //#region src/lib/claude-md-injection.ts
 /**
@@ -2609,6 +2646,9 @@ const STYLE_MARKER_OPEN = "<!-- gh-router style directive — auto-injected, reg
 const STYLE_MARKER_CLOSE = "<!-- /gh-router style directive -->";
 const TOOLBELT_MARKER_OPEN = "<!-- gh-router toolbelt awareness — auto-injected, regenerated per launch -->";
 const TOOLBELT_MARKER_CLOSE = "<!-- /gh-router toolbelt awareness -->";
+const ARTIFACT_MARKER_OPEN = "<!-- gh-router artifact-panel directive — auto-injected when in an ai-or-die tab -->";
+const ARTIFACT_MARKER_CLOSE = "<!-- /gh-router artifact-panel directive -->";
+const ARTIFACT_PANEL_DIRECTIVE = "## Review plans in the artifact panel\n\nYou are running inside an ai-or-die tab, so the `mcp__peers__artifact_open/poll/reply/end` tools drive a live human-review panel. When you finish a plan or produce something the user should review, open it in the panel: `mcp__peers__artifact_open`, tell the user to review (they can click a block or select text to comment), then `mcp__peers__artifact_poll` for feedback, revise, and `mcp__peers__artifact_end` when done. Prefer HTML: for anything rich or structured, author a self-contained `.html` artifact and open THAT (the panel renders and annotates HTML natively). Plan-mode plans are auto-rendered to HTML for you; raw markdown is only a fallback. Default to this for plans before asking the user to proceed.";
 /**
 * Writing / communication style directive injected at the TOP of the
 * mirrored CLAUDE.md so every spawned agent (main, Agent-tool subagent,
@@ -2971,6 +3011,21 @@ async function appendToolbeltAwarenessToMirroredClaudeMd(snippet) {
 		label: "toolbelt-awareness"
 	});
 }
+/**
+* Prepend the artifact-panel review directive to the TOP of the mirrored
+* CLAUDE.md so plans/artifacts are reviewed in the ai-or-die panel by default.
+* Gated by the caller on AIORDIE_SESSION_ID (only useful inside a tab). Separate
+* marker fence; best-effort like the style/peer blocks.
+*/
+async function prependArtifactPanelDirectiveToMirroredClaudeMd(directive = ARTIFACT_PANEL_DIRECTIVE) {
+	await injectMarkerBlock({
+		snippet: directive,
+		markerOpen: ARTIFACT_MARKER_OPEN,
+		markerClose: ARTIFACT_MARKER_CLOSE,
+		position: "top",
+		label: "artifact-panel-directive"
+	});
+}
 
 //#endregion
 //#region src/lib/injected-skills/write.ts
@@ -3513,7 +3568,7 @@ function initProxyFromEnv() {
 //#endregion
 //#region package.json
 var name = "github-router";
-var version$1 = "0.3.131";
+var version$1 = "0.3.135";
 
 //#endregion
 //#region src/lib/approval.ts
@@ -5716,6 +5771,20 @@ const claude = defineCommand({
 			} catch (err) {
 				consola.warn(`Could not register the ai-or-die session-bind hook: ${String(err)}`);
 			}
+			if ((process$1.env.AIORDIE_SESSION_ID ?? "").trim().length > 0) {
+				await writeInjectedSkill(ARTIFACT_REVIEW_SKILL.name, ARTIFACT_REVIEW_SKILL.md).catch(() => ({ written: false }));
+				try {
+					await prependArtifactPanelDirectiveToMirroredClaudeMd();
+				} catch (err) {
+					consola.warn(`Artifact-panel directive prepend failed: ${String(err)}`);
+				}
+				try {
+					await writeArtifactCredsToMirror(shouldUseInsecureTls(process$1.env.AIORDIE_BASE_URL ?? ""));
+					await injectStopHookIntoSettingsFile(nodePath.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json"), buildArtifactOpenHookCommand(process$1.execPath, process$1.argv[1]), "PostToolUse", void 0, "ExitPlanMode");
+				} catch (err) {
+					consola.warn(`Could not register the artifact auto-open hook: ${String(err)}`);
+				}
+			}
 			if (args["trust-gate"] === true) try {
 				const root = await trustRepo(sessionCwd);
 				process$1.stderr.write(`Structural gate trusted for this repo (${root}); it will run on launch here from now on.\n`);
@@ -6115,7 +6184,7 @@ async function postJson(url, payload, opts) {
 * no such handle. Hooks always receive piped/redirected stdin, so this never
 * blocks (guarded against an interactive TTY, and any error -> "").
 */
-function readStdin$2() {
+function readStdin$3() {
 	try {
 		if (process.stdin.isTTY) return "";
 		return readFileSync(0, "utf8");
@@ -6146,7 +6215,7 @@ const internalPromptSubmit = defineCommand({
 	},
 	async run() {
 		try {
-			const stdin = readStdin$2();
+			const stdin = readStdin$3();
 			const steerEnabled = parseBoolEnv(process.env.GH_ROUTER_DISABLE_PROMPT_STEER) !== true;
 			const runtime = hookMcpRuntimeFromEnv();
 			let decision;
@@ -6206,7 +6275,7 @@ const internalPromptSubmit = defineCommand({
 * teardown and trips a `uv_async_send` assertion; a synchronous read has no such
 * handle. Hooks always receive piped stdin (guarded against a TTY; any error -> "").
 */
-function readStdin$1() {
+function readStdin$2() {
 	try {
 		if (process.stdin.isTTY) return "";
 		return readFileSync(0, "utf8");
@@ -6296,13 +6365,279 @@ const internalSessionBind = defineCommand({
 		try {
 			const out = typeof args.out === "string" ? args.out.trim() : "";
 			if (!out) return;
-			const record = decodeSessionBind(readStdin$1());
+			const record = decodeSessionBind(readStdin$2());
 			if (record) writeSidecar(out, record);
 		} catch {}
 		process.exitCode = 0;
 	}
 });
 
+//#endregion
+//#region src/lib/artifact/plan-html.ts
+function escapeHtml(s) {
+	return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+/** Decode the HTML character references a browser would resolve in an attribute
+*  value, so an entity-obfuscated scheme (`javascript&colon;`, `j&#97;vascript:`)
+*  cannot slip past the scheme check below. Numeric refs cover any letter; the
+*  small named map covers the scheme-relevant punctuation. */
+const NAMED_REFS = {
+	colon: ":",
+	tab: "	",
+	newline: "\n",
+	sol: "/",
+	semi: ";",
+	amp: "&",
+	lpar: "(",
+	rpar: ")"
+};
+function decodeEntities(s) {
+	return s.replace(/&(#[xX][0-9a-fA-F]+|#[0-9]+|[a-zA-Z]+);?/g, (m, body) => {
+		if (body[0] === "#") {
+			const code = body[1] === "x" || body[1] === "X" ? Number.parseInt(body.slice(2), 16) : Number.parseInt(body.slice(1), 10);
+			return Number.isFinite(code) && code > 0 && code <= 1114111 ? String.fromCodePoint(code) : m;
+		}
+		return NAMED_REFS[body.toLowerCase()] ?? m;
+	});
+}
+/** Block script-bearing URL schemes (defense-in-depth on top of HTML escaping). */
+function isDangerousUrl(url, isImage) {
+	const v = Array.from(decodeEntities(url)).filter((c) => c.charCodeAt(0) > 32).join("").toLowerCase();
+	if (v.startsWith("javascript:") || v.startsWith("vbscript:")) return true;
+	if (v.startsWith("data:")) return !(isImage && v.startsWith("data:image/") && !v.startsWith("data:image/svg"));
+	return false;
+}
+/** A marked instance that escapes raw HTML (raw markup never becomes live). */
+function makeMarked() {
+	const m = new Marked({
+		gfm: true,
+		breaks: false
+	});
+	m.use({ renderer: { html(token) {
+		return escapeHtml(typeof token === "string" ? token : token.text ?? "");
+	} } });
+	return m;
+}
+/**
+* Recursively neutralise script-bearing link/image hrefs in the lexed token tree.
+* Done as an explicit walk (not marked's `walkTokens` hook) because we render via
+* the low-level `lexer`+`parser` split, which does not run registered walkTokens.
+*/
+function neutralizeUrls(tokens) {
+	for (const t of tokens) {
+		if ((t.type === "link" || t.type === "image") && typeof t.href === "string") {
+			if (isDangerousUrl(t.href, t.type === "image")) t.href = "#";
+		}
+		if (t.tokens) neutralizeUrls(t.tokens);
+		if (t.items) neutralizeUrls(t.items);
+		if (t.header) {
+			for (const cell of t.header) if (cell.tokens) neutralizeUrls(cell.tokens);
+		}
+		if (t.rows) {
+			for (const row of t.rows) for (const cell of row) if (cell.tokens) neutralizeUrls(cell.tokens);
+		}
+	}
+}
+/** Add `data-source-line="N"` to the first opening tag of a rendered block. */
+function tagSourceLine(html, line) {
+	return html.replace(/^(\s*)<([a-zA-Z][\w-]*)/, `$1<$2 data-source-line="${line}"`);
+}
+/**
+* Render markdown to inner HTML, tagging each top-level block with its 1-based
+* source line so an annotation in the panel can map back to a plan line.
+*/
+function renderMarkdownBody(source) {
+	const m = makeMarked();
+	let tokens;
+	try {
+		tokens = m.lexer(source);
+	} catch {
+		return `<pre>${escapeHtml(source)}</pre>`;
+	}
+	neutralizeUrls(tokens);
+	let line = 1;
+	let out = "";
+	for (const tok of tokens) {
+		let html = "";
+		try {
+			html = m.parser([tok]);
+		} catch {
+			html = "";
+		}
+		if (html.trim()) out += tagSourceLine(html, line);
+		line += tok.raw?.match(/\n/g)?.length ?? 0;
+	}
+	return out || `<pre>${escapeHtml(source)}</pre>`;
+}
+/**
+* Wrap rendered markdown in a complete, self-contained HTML document with
+* readable typography (works even before ai-or-die injects its annotation SDK).
+*/
+function renderPlanHtml(source, title = "Plan") {
+	const body = renderMarkdownBody(source);
+	return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHtml(title)}</title>
+<style>
+  :root {
+    --bg: #0f1115; --fg: #f7f3ea; --muted: #aeb6c6; --border: #2a2f3a;
+    --accent: #f4c95d; --code-bg: #171a21;
+    --serif: 'Iowan Old Style', Georgia, 'Times New Roman', serif;
+    --sans: ui-sans-serif, system-ui, -apple-system, 'Segoe UI', sans-serif;
+    --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  }
+  * { box-sizing: border-box; }
+  html, body { margin: 0; background: var(--bg); color: var(--fg); }
+  body { font-family: var(--serif); font-size: 16px; line-height: 1.6;
+    padding: 32px clamp(16px, 5vw, 56px); }
+  main { max-width: 78ch; margin: 0 auto; }
+  h1, h2, h3, h4 { font-family: var(--sans); line-height: 1.25; margin: 1.6em 0 0.5em; }
+  h1 { font-size: 1.9em; } h2 { font-size: 1.45em; padding-bottom: 0.2em;
+    border-bottom: 1px solid var(--border); } h3 { font-size: 1.2em; }
+  p, li { color: var(--fg); }
+  a { color: var(--accent); }
+  code { font-family: var(--mono); font-size: 0.9em; background: var(--code-bg);
+    padding: 0.12em 0.35em; border-radius: 5px; }
+  pre { background: var(--code-bg); border: 1px solid var(--border); border-radius: 8px;
+    padding: 12px 14px; overflow: auto; }
+  pre code { background: none; padding: 0; }
+  blockquote { margin: 1em 0; padding: 0.2em 1em; border-left: 3px solid var(--accent);
+    color: var(--muted); }
+  table { border-collapse: collapse; width: 100%; margin: 1em 0; font-family: var(--sans);
+    font-size: 0.95em; }
+  th, td { border: 1px solid var(--border); padding: 6px 10px; text-align: left; }
+  th { background: var(--code-bg); }
+  hr { border: 0; border-top: 1px solid var(--border); margin: 1.5em 0; }
+  ul, ol { padding-left: 1.4em; }
+</style>
+</head>
+<body>
+<main>
+${body}
+</main>
+</body>
+</html>
+`;
+}
+
+//#endregion
+//#region src/internal-artifact-open.ts
+function readStdin$1() {
+	try {
+		if (process.stdin.isTTY) return "";
+		return readFileSync(0, "utf8");
+	} catch {
+		return "";
+	}
+}
+function credsPath() {
+	const dir = process.env.CLAUDE_CONFIG_DIR || nodePath.join(homedir(), ".claude");
+	return nodePath.join(dir, ".aiordie-artifact.json");
+}
+function isSubagent(payload) {
+	try {
+		return isSubagentContext(payload);
+	} catch {
+		return false;
+	}
+}
+/** Pull the per-session plan path + markdown content out of the hook payload. */
+function parseExitPlanPayload(raw) {
+	try {
+		const ti = JSON.parse(raw).tool_input ?? {};
+		return {
+			planFilePath: typeof ti.planFilePath === "string" && ti.planFilePath.trim() ? ti.planFilePath : void 0,
+			planMarkdown: typeof ti.plan === "string" && ti.plan.trim() ? ti.plan : void 0
+		};
+	} catch {
+		return {};
+	}
+}
+function readCreds() {
+	try {
+		const parsed = JSON.parse(readFileSync(credsPath(), "utf8"));
+		if (!parsed.baseUrl || !parsed.token || !parsed.sessionId) return void 0;
+		return {
+			baseUrl: parsed.baseUrl,
+			token: parsed.token,
+			sessionId: parsed.sessionId,
+			insecureTLS: parsed.insecureTLS === true
+		};
+	} catch {
+		return;
+	}
+}
+/**
+* Resolve the plan markdown + a title, preferring the file at `planFilePath`
+* (the source of truth, may be newer than the payload's snapshot), falling back
+* to the inline `tool_input.plan` content.
+*/
+function resolvePlanMarkdown(p) {
+	if (p.planFilePath) try {
+		const md = readFileSync(p.planFilePath, "utf8");
+		if (md.trim()) return {
+			markdown: md,
+			title: nodePath.basename(p.planFilePath, nodePath.extname(p.planFilePath)),
+			nearPath: p.planFilePath
+		};
+	} catch {}
+	if (p.planMarkdown) return {
+		markdown: p.planMarkdown,
+		title: "Plan"
+	};
+}
+/**
+* Write the rendered HTML next to the plan (an allowed root) when we have a real
+* path, else into the plans dir under CLAUDE_CONFIG_DIR. Returns the realpath of
+* the written `.html`, or undefined on failure.
+*/
+function writePlanHtml(html, nearPath) {
+	let target;
+	if (nearPath) target = `${nearPath.replace(/\.(md|markdown)$/i, "")}.aiordie.html`;
+	else {
+		const dir = nodePath.join(process.env.CLAUDE_CONFIG_DIR || nodePath.join(homedir(), ".claude"), "plans");
+		target = nodePath.join(dir, `aiordie-plan-${process.pid}.html`);
+	}
+	try {
+		writeFileSync(target, html, "utf8");
+		try {
+			return realpathSync.native(target);
+		} catch {
+			return target;
+		}
+	} catch {
+		return;
+	}
+}
+const internalArtifactOpen = defineCommand({
+	meta: {
+		name: "internal-artifact-open",
+		description: "Open the finalized plan in the ai-or-die panel"
+	},
+	async run() {
+		try {
+			const raw = readStdin$1();
+			let payload;
+			try {
+				payload = JSON.parse(raw);
+			} catch {
+				payload = void 0;
+			}
+			if (isSubagent(payload)) return;
+			const creds = readCreds();
+			if (!creds) return;
+			const plan = resolvePlanMarkdown(parseExitPlanPayload(raw));
+			if (!plan) return;
+			const htmlPath = writePlanHtml(renderPlanHtml(plan.markdown, plan.title), plan.nearPath);
+			if (!htmlPath) return;
+			await new ArtifactClient(creds).open(htmlPath);
+		} catch {}
+	}
+});
+
 //#endregion
 //#region src/internal-stop-hook.ts
 /**
@@ -6861,7 +7196,7 @@ process.on("uncaughtException", (error) => {
 const version = getPackageVersion();
 const argv = process.argv.slice(2);
 const isVersionFlag = argv.includes("--version");
-const isInternalHook = argv[0] === "internal-stop-hook" || argv[0] === "internal-prompt-submit" || argv[0] === "internal-stop-review" || argv[0] === "internal-session-bind";
+const isInternalHook = argv[0] === "internal-stop-hook" || argv[0] === "internal-prompt-submit" || argv[0] === "internal-stop-review" || argv[0] === "internal-session-bind" || argv[0] === "internal-artifact-open";
 if (!isVersionFlag && !isInternalHook) consola.info(`github-router v${version}`);
 await runMain(defineCommand({
 	meta: {
@@ -6880,7 +7215,8 @@ await runMain(defineCommand({
 		"internal-stop-hook": internalStopHook,
 		"internal-prompt-submit": internalPromptSubmit,
 		"internal-stop-review": internalStopReview,
-		"internal-session-bind": internalSessionBind
+		"internal-session-bind": internalSessionBind,
+		"internal-artifact-open": internalArtifactOpen
 	}
 }));