github-router 0.3.131 → 0.3.135

package/dist/{peer-mcp-personas-CH2gmdPN.js → peer-mcp-personas-ClyKATAD.js}

@@ -1,6 +1,6 @@
-import { t as PATHS } from "./paths-CNgpeaWd.js";
-import { d as runCommandCapture, l as parseBoolEnv, n as isPidAlive, o as trackChild, p as runManagedExeCapture, r as registerColbertExitHandlers, t as getColbertInstanceUuid, u as resolveExecutable } from "./lifecycle-DTJ2Ugqf.js";
-import { i as registerExitHandlers, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-Cyxwmj1c.js";
+import { t as PATHS } from "./paths-Cn5OzmYL.js";
+import { d as runCommandCapture, l as parseBoolEnv, n as isPidAlive, o as trackChild, p as runManagedExeCapture, r as registerColbertExitHandlers, t as getColbertInstanceUuid, u as resolveExecutable } from "./lifecycle-Cqe8OQVX.js";
+import { i as registerExitHandlers, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-CeVDX6av.js";
 import { createRequire } from "node:module";
 import consola from "consola";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1047,6 +1047,24 @@ function collapsePathKeys(env) {
 	return env;
 }
 
+//#endregion
+//#region src/lib/insecure-tls.ts
+const IS_BUN = typeof globalThis.Bun !== "undefined";
+let sharedInsecureDispatcher;
+function insecureDispatcher() {
+	return sharedInsecureDispatcher ??= new Agent({ connect: { rejectUnauthorized: false } });
+}
+/**
+* Attach the runtime-correct TLS-verification-off mechanism to a fetch init for a
+* single self-signed direct-HTTPS instance: Bun → `tls`, Node → an undici
+* `dispatcher`. Exported so BOTH runtime branches are unit-testable under one
+* interpreter (the untested Node branch is exactly what shipped broken).
+*/
+function applyInsecureTls(init, isBun = IS_BUN) {
+	if (isBun) init.tls = { rejectUnauthorized: false };
+	else init.dispatcher = insecureDispatcher();
+}
+
 //#endregion
 //#region src/lib/artifact/client.ts
 var ArtifactError = class extends Error {
@@ -1068,11 +1086,13 @@ var ArtifactClient = class {
 	token;
 	sessionId;
 	fetchFn;
+	insecureTLS;
 	constructor(options) {
 		this.baseUrl = options.baseUrl.replace(/\/+$/, "");
 		this.token = options.token;
 		this.sessionId = options.sessionId;
 		this.fetchFn = options.fetchFn ?? globalThis.fetch.bind(globalThis);
+		this.insecureTLS = options.insecureTLS ?? false;
 	}
 	open(file, signal) {
 		return this.request("POST", `/api/artifact/${encodeURIComponent(this.sessionId)}/open`, { file }, signal);
@@ -1101,7 +1121,7 @@ var ArtifactClient = class {
 		const timeout = combineSignalAndTimeout(signal, timeoutMsHint);
 		let response;
 		try {
-			response = await this.fetchFn(url.toString(), {
+			const init = {
 				method,
 				headers: {
 					Authorization: `Bearer ${this.token}`,
@@ -1110,7 +1130,9 @@ var ArtifactClient = class {
 				body: body === void 0 ? void 0 : JSON.stringify(body),
 				redirect: "error",
 				signal: timeout.signal
-			});
+			};
+			if (this.insecureTLS) applyInsecureTls(init);
+			response = await this.fetchFn(url.toString(), init);
 		} catch (err) {
 			throw mapNetworkError$1(err);
 		} finally {
@@ -1308,10 +1330,29 @@ function readArtifactEnv() {
 	return {
 		baseUrl,
 		token,
-		sessionId
+		sessionId,
+		insecureTLS: shouldUseInsecureTls(baseUrl)
 	};
 }
+function shouldUseInsecureTls(baseUrl) {
+	let url;
+	try {
+		url = new URL(baseUrl);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "https:") return false;
+	const explicit = (process.env.AIORDIE_INSECURE_TLS ?? "").trim().toLowerCase();
+	if (explicit === "0" || explicit === "false" || explicit === "off") return false;
+	if (isLoopbackIp(url.hostname)) return true;
+	return url.hostname === "localhost" && (explicit === "1" || explicit === "true");
+}
+function isLoopbackIp(hostname) {
+	const host = hostname.replace(/^\[|\]$/g, "");
+	return host === "::1" || /^127(?:\.\d{1,3}){3}$/.test(host);
+}
 function clientFromEnv(env) {
+	consola.debug(`ARTIFACT_ENV: token present=${env.token.length > 0}, insecureTLS=${env.insecureTLS}`);
 	return new ArtifactClient(env);
 }
 async function pollUntilReady(client, signal) {
@@ -1644,21 +1685,6 @@ function createTunnelTokenProvider(runner = realDevtunnelRunner()) {
 
 //#endregion
 //#region src/lib/fleet/client.ts
-const IS_BUN = typeof globalThis.Bun !== "undefined";
-let sharedInsecureDispatcher;
-function insecureDispatcher() {
-	return sharedInsecureDispatcher ??= new Agent({ connect: { rejectUnauthorized: false } });
-}
-/**
-* Attach the runtime-correct TLS-verification-off mechanism to a fetch init for a
-* single self-signed direct-HTTPS instance: Bun → `tls`, Node → an undici
-* `dispatcher`. Exported so BOTH runtime branches are unit-testable under one
-* interpreter (the untested Node branch is exactly what shipped broken).
-*/
-function applyInsecureTls(init, isBun = IS_BUN) {
-	if (isBun) init.tls = { rejectUnauthorized: false };
-	else init.dispatcher = insecureDispatcher();
-}
 var FleetError = class extends Error {
 	code;
 	retryable;
@@ -8420,7 +8446,7 @@ function logAudit$1(record) {
 		try {
 			const fs$2 = await import("node:fs/promises");
 			const path$1 = await import("node:path");
-			const { PATHS: PATHS$1 } = await import("./paths-B-ATynF7.js");
+			const { PATHS: PATHS$1 } = await import("./paths-Bljq3UJC.js");
 			const dir = path$1.join(PATHS$1.APP_DIR, "browser-mcp");
 			await fs$2.mkdir(dir, { recursive: true });
 			const line = JSON.stringify({
@@ -20699,7 +20725,7 @@ function entryHasCommand(entry, command) {
 * other entries. Returns a new object (never mutates the input). Re-running the
 * launcher with the same command+event does not duplicate the hook.
 */
-function mergeStopHookIntoSettings(existing, command, event = "Stop", timeoutSec) {
+function mergeStopHookIntoSettings(existing, command, event = "Stop", timeoutSec, matcher) {
 	const base = existing && typeof existing === "object" ? { ...existing } : {};
 	const hooks = base.hooks && typeof base.hooks === "object" ? { ...base.hooks } : {};
 	const arr = Array.isArray(hooks[event]) ? [...hooks[event]] : [];
@@ -20709,7 +20735,10 @@ function mergeStopHookIntoSettings(existing, command, event = "Stop", timeoutSec
 			command
 		};
 		if (typeof timeoutSec === "number" && Number.isFinite(timeoutSec) && timeoutSec > 0) hook.timeout = timeoutSec;
-		arr.push({ hooks: [hook] });
+		arr.push(matcher ? {
+			matcher,
+			hooks: [hook]
+		} : { hooks: [hook] });
 	}
 	hooks[event] = arr;
 	base.hooks = hooks;
@@ -20915,6 +20944,12 @@ function buildSessionBindHookCommand(execPath, scriptPath, outPath) {
 	const q = (s) => `"${s}"`;
 	return `${scriptPath && scriptPath !== execPath ? `${q(execPath)} ${q(scriptPath)}` : q(execPath)} internal-session-bind --out ${q(outPath)}`;
 }
+/** Command for the `internal-artifact-open` hook (no args — token comes from the
+*  mirror creds file, plan from the plans dir; nothing secret in argv). */
+function buildArtifactOpenHookCommand(execPath, scriptPath) {
+	const q = (s) => `"${s}"`;
+	return `${scriptPath && scriptPath !== execPath ? `${q(execPath)} ${q(scriptPath)}` : q(execPath)} internal-artifact-open`;
+}
 /**
 * Read-merge-atomic-write the Stop hook into a Claude Code `settings.json` file
 * (the mirrored one). A MISSING file (ENOENT) starts from `{}`; any OTHER read or
@@ -20923,7 +20958,7 @@ function buildSessionBindHookCommand(execPath, scriptPath, outPath) {
 * other setting, is idempotent, and uses temp+rename so Claude Code's mtime
 * watcher never sees a half-written file. Returns the merged object.
 */
-async function injectStopHookIntoSettingsFile(settingsPath, command, event = "Stop", timeoutSec) {
+async function injectStopHookIntoSettingsFile(settingsPath, command, event = "Stop", timeoutSec, matcher) {
 	let existing = {};
 	let raw;
 	try {
@@ -20937,7 +20972,7 @@ async function injectStopHookIntoSettingsFile(settingsPath, command, event = "St
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) existing = parsed;
 		else throw new Error(`settings.json at ${settingsPath} is not a JSON object; refusing to overwrite`);
 	}
-	const merged = mergeStopHookIntoSettings(existing, command, event, timeoutSec);
+	const merged = mergeStopHookIntoSettings(existing, command, event, timeoutSec, matcher);
 	const tmp = `${settingsPath}.${process.pid}.tmp`;
 	await promises.writeFile(tmp, `${JSON.stringify(merged, null, 2)}\n`, { mode: 384 });
 	await promises.rename(tmp, settingsPath);
@@ -22705,5 +22740,5 @@ async function runStandInToolCall(args, signal) {
 }
 
 //#endregion
-export { relayAnthropicStream as $, IMPLEMENT_DEFAULT_MODEL as A, withInstallLock as At, vscodeRipgrepPath as B, resolveModel as Bt, stopGateEnabledForRepo as C, DEFAULT_CODEX_MODEL_FALLBACKS as Ct, liveExec as D, generateRandomPort as Dt, resolveSealedGate as E, UPSTREAM_INACTIVITY_TIMEOUT_MS as Et, withNoOutputRetry as F, cacheModels as Ft, ADVISOR_TOOL_INSTRUCTIONS as G, forwardError as Gt, assetFor as H, getModels as Ht, availableToolCommands as I, cacheVSCodeVersion as It, isAdvisorRequested as J, copilotHeaders as Jt, buildAdvisorStream as K, GITHUB_API_BASE_URL as Kt, buildToolbeltAwareness as L, filterBetaHeader as Lt, REVIEW_DEFAULT_MODEL as M, setupGitHubToken as Mt, appendPlanReminder as N, tryRefreshAndRetry as Nt, BROWSE_DEFAULT_MODEL as O, pickClaudeDefault as Ot, runWorkerAgent as P, cacheCopilotVersion as Pt, readIteratorWithTimeout as Q, toolbeltEnabled as R, isNullish as Rt, repoRoot as S, DEFAULT_CODEX_MODEL as St, trustRepo as T, UPSTREAM_FETCH_TIMEOUT_MS as Tt, searchWeb as U, fetchWithTransientRetry as Ut, TOOLBELT_TOOLS$1 as V, sleep as Vt, ADVISOR_INTERNAL_TOOL_NAME as W, HTTPError as Wt, isControllerClosedError as X, state as Xt, buildOpenAIErrorEvent as Y, githubHeaders as Yt, logStreamError as Z, fileFindingsStore as _, extractTarGzMember as _t, buildPeerAwarenessSnippet as a, workerToolsEnabled as at, isSubagentContext as b, toolbeltPathOverride as bt, buildStopHookCommand as c, getTokenCount as ct, fileBlockBudget as d, MAX_RESPONSE_BODY_BYTES as dt, handleMcpDelete as et, injectStopHookIntoSettingsFile as f, readResponseBodyCapped as ft, fileBaselineStore as g, provisionAndIndexColbert as gt, stopReviewEnabled as h, hasSupportedBrowserInstalled as ht, buildAgentPrompt as i, standInToolEnabled as it, PLAN_DEFAULT_MODEL as j, setupCopilotToken as jt, DEFAULT_MODEL as k, getPackageVersion as kt, captureLaunchBaseline as l, createResponses as lt, stopGateId as m, provisionBrowserAssets as mt, MCP_GROUPS as n, browserToolsEnabled as nt, personasFor as o, countTokens as ot, launchBaselineKey as p, parseJsonOrDiagnose as pt, injectAdvisorTool as q, copilotBaseUrl as qt, assertMcpToolSurfaceConsistent as r, fleetToolsEnabled as rt, buildSessionBindHookCommand as s, createMessages as st, GROUP_META as t, handleMcpPost as tt, decideStopHook as u, createChatCompletions as ut, fileLastPromptStore as v, extractZipMember as vt, stopReviewStateDir as w, DEFAULT_PORT as wt, repoFingerprint as x, DEFAULT_CLAUDE_MODEL_FALLBACKS as xt, fileReviewDebounce as y, collapsePathKeys as yt, toolbeltSkipSet as z, resolveCodexModel as zt };
-//# sourceMappingURL=peer-mcp-personas-CH2gmdPN.js.map
+export { readIteratorWithTimeout as $, state as $t, DEFAULT_MODEL as A, generateRandomPort as At, toolbeltSkipSet as B, filterBetaHeader as Bt, repoRoot as C, toolbeltPathOverride as Ct, resolveSealedGate as D, DEFAULT_PORT as Dt, trustRepo as E, DEFAULT_CODEX_MODEL_FALLBACKS as Et, runWorkerAgent as F, setupGitHubToken as Ft, ADVISOR_INTERNAL_TOOL_NAME as G, getModels as Gt, TOOLBELT_TOOLS$1 as H, resolveCodexModel as Ht, withNoOutputRetry as I, tryRefreshAndRetry as It, injectAdvisorTool as J, forwardError as Jt, ADVISOR_TOOL_INSTRUCTIONS as K, fetchWithTransientRetry as Kt, availableToolCommands as L, cacheCopilotVersion as Lt, PLAN_DEFAULT_MODEL as M, getPackageVersion as Mt, REVIEW_DEFAULT_MODEL as N, withInstallLock as Nt, liveExec as O, UPSTREAM_FETCH_TIMEOUT_MS as Ot, appendPlanReminder as P, setupCopilotToken as Pt, logStreamError as Q, githubHeaders as Qt, buildToolbeltAwareness as R, cacheModels as Rt, repoFingerprint as S, collapsePathKeys as St, stopReviewStateDir as T, DEFAULT_CODEX_MODEL as Tt, assetFor as U, resolveModel as Ut, vscodeRipgrepPath as V, isNullish as Vt, searchWeb as W, sleep as Wt, buildOpenAIErrorEvent as X, copilotBaseUrl as Xt, isAdvisorRequested as Y, GITHUB_API_BASE_URL as Yt, isControllerClosedError as Z, copilotHeaders as Zt, fileBaselineStore as _, provisionAndIndexColbert as _t, buildPeerAwarenessSnippet as a, standInToolEnabled as at, fileReviewDebounce as b, shouldUseInsecureTls as bt, buildSessionBindHookCommand as c, createMessages as ct, decideStopHook as d, createChatCompletions as dt, relayAnthropicStream as et, fileBlockBudget as f, MAX_RESPONSE_BODY_BYTES as ft, stopReviewEnabled as g, hasSupportedBrowserInstalled as gt, stopGateId as h, provisionBrowserAssets as ht, buildAgentPrompt as i, fleetToolsEnabled as it, IMPLEMENT_DEFAULT_MODEL as j, pickClaudeDefault as jt, BROWSE_DEFAULT_MODEL as k, UPSTREAM_INACTIVITY_TIMEOUT_MS as kt, buildStopHookCommand as l, getTokenCount as lt, launchBaselineKey as m, parseJsonOrDiagnose as mt, MCP_GROUPS as n, handleMcpPost as nt, personasFor as o, workerToolsEnabled as ot, injectStopHookIntoSettingsFile as p, readResponseBodyCapped as pt, buildAdvisorStream as q, HTTPError as qt, assertMcpToolSurfaceConsistent as r, browserToolsEnabled as rt, buildArtifactOpenHookCommand as s, countTokens as st, GROUP_META as t, handleMcpDelete as tt, captureLaunchBaseline as u, createResponses as ut, fileFindingsStore as v, extractTarGzMember as vt, stopGateEnabledForRepo as w, DEFAULT_CLAUDE_MODEL_FALLBACKS as wt, isSubagentContext as x, ArtifactClient as xt, fileLastPromptStore as y, extractZipMember as yt, toolbeltEnabled as z, cacheVSCodeVersion as zt };
+//# sourceMappingURL=peer-mcp-personas-ClyKATAD.js.map