github-router 0.3.131 → 0.3.136

package/dist/{peer-mcp-personas-CH2gmdPN.js → peer-mcp-personas-Dmx4S0_5.js}

@@ -1,6 +1,6 @@
-import { t as PATHS } from "./paths-CNgpeaWd.js";
-import { d as runCommandCapture, l as parseBoolEnv, n as isPidAlive, o as trackChild, p as runManagedExeCapture, r as registerColbertExitHandlers, t as getColbertInstanceUuid, u as resolveExecutable } from "./lifecycle-DTJ2Ugqf.js";
-import { i as registerExitHandlers, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-Cyxwmj1c.js";
+import { t as PATHS } from "./paths-Cn5OzmYL.js";
+import { d as runCommandCapture, l as parseBoolEnv, n as isPidAlive, o as trackChild, p as runManagedExeCapture, r as registerColbertExitHandlers, t as getColbertInstanceUuid, u as resolveExecutable } from "./lifecycle-Cqe8OQVX.js";
+import { i as registerExitHandlers, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-CeVDX6av.js";
 import { createRequire } from "node:module";
 import consola from "consola";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1047,6 +1047,24 @@ function collapsePathKeys(env) {
 	return env;
 }
 
+//#endregion
+//#region src/lib/insecure-tls.ts
+const IS_BUN = typeof globalThis.Bun !== "undefined";
+let sharedInsecureDispatcher;
+function insecureDispatcher() {
+	return sharedInsecureDispatcher ??= new Agent({ connect: { rejectUnauthorized: false } });
+}
+/**
+* Attach the runtime-correct TLS-verification-off mechanism to a fetch init for a
+* single self-signed direct-HTTPS instance: Bun → `tls`, Node → an undici
+* `dispatcher`. Exported so BOTH runtime branches are unit-testable under one
+* interpreter (the untested Node branch is exactly what shipped broken).
+*/
+function applyInsecureTls(init, isBun = IS_BUN) {
+	if (isBun) init.tls = { rejectUnauthorized: false };
+	else init.dispatcher = insecureDispatcher();
+}
+
 //#endregion
 //#region src/lib/artifact/client.ts
 var ArtifactError = class extends Error {
@@ -1068,11 +1086,13 @@ var ArtifactClient = class {
 	token;
 	sessionId;
 	fetchFn;
+	insecureTLS;
 	constructor(options) {
 		this.baseUrl = options.baseUrl.replace(/\/+$/, "");
 		this.token = options.token;
 		this.sessionId = options.sessionId;
 		this.fetchFn = options.fetchFn ?? globalThis.fetch.bind(globalThis);
+		this.insecureTLS = options.insecureTLS ?? false;
 	}
 	open(file, signal) {
 		return this.request("POST", `/api/artifact/${encodeURIComponent(this.sessionId)}/open`, { file }, signal);
@@ -1101,7 +1121,7 @@ var ArtifactClient = class {
 		const timeout = combineSignalAndTimeout(signal, timeoutMsHint);
 		let response;
 		try {
-			response = await this.fetchFn(url.toString(), {
+			const init = {
 				method,
 				headers: {
 					Authorization: `Bearer ${this.token}`,
@@ -1110,7 +1130,9 @@ var ArtifactClient = class {
 				body: body === void 0 ? void 0 : JSON.stringify(body),
 				redirect: "error",
 				signal: timeout.signal
-			});
+			};
+			if (this.insecureTLS) applyInsecureTls(init);
+			response = await this.fetchFn(url.toString(), init);
 		} catch (err) {
 			throw mapNetworkError$1(err);
 		} finally {
@@ -1308,10 +1330,29 @@ function readArtifactEnv() {
 	return {
 		baseUrl,
 		token,
-		sessionId
+		sessionId,
+		insecureTLS: shouldUseInsecureTls(baseUrl)
 	};
 }
+function shouldUseInsecureTls(baseUrl) {
+	let url;
+	try {
+		url = new URL(baseUrl);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "https:") return false;
+	const explicit = (process.env.AIORDIE_INSECURE_TLS ?? "").trim().toLowerCase();
+	if (explicit === "0" || explicit === "false" || explicit === "off") return false;
+	if (isLoopbackIp(url.hostname)) return true;
+	return url.hostname === "localhost" && (explicit === "1" || explicit === "true");
+}
+function isLoopbackIp(hostname) {
+	const host = hostname.replace(/^\[|\]$/g, "");
+	return host === "::1" || /^127(?:\.\d{1,3}){3}$/.test(host);
+}
 function clientFromEnv(env) {
+	consola.debug(`ARTIFACT_ENV: token present=${env.token.length > 0}, insecureTLS=${env.insecureTLS}`);
 	return new ArtifactClient(env);
 }
 async function pollUntilReady(client, signal) {
@@ -1644,21 +1685,6 @@ function createTunnelTokenProvider(runner = realDevtunnelRunner()) {
 
 //#endregion
 //#region src/lib/fleet/client.ts
-const IS_BUN = typeof globalThis.Bun !== "undefined";
-let sharedInsecureDispatcher;
-function insecureDispatcher() {
-	return sharedInsecureDispatcher ??= new Agent({ connect: { rejectUnauthorized: false } });
-}
-/**
-* Attach the runtime-correct TLS-verification-off mechanism to a fetch init for a
-* single self-signed direct-HTTPS instance: Bun → `tls`, Node → an undici
-* `dispatcher`. Exported so BOTH runtime branches are unit-testable under one
-* interpreter (the untested Node branch is exactly what shipped broken).
-*/
-function applyInsecureTls(init, isBun = IS_BUN) {
-	if (isBun) init.tls = { rejectUnauthorized: false };
-	else init.dispatcher = insecureDispatcher();
-}
 var FleetError = class extends Error {
 	code;
 	retryable;
@@ -1691,7 +1717,7 @@ function decodeSessionId(globalId) {
 var FleetClient = class {
 	baseUrl;
 	origin;
-	token;
+	auth;
 	fetchFn;
 	getTunnelToken;
 	onTunnelAuthInvalidate;
@@ -1699,7 +1725,10 @@ var FleetClient = class {
 	constructor(options) {
 		this.baseUrl = options.url.replace(/\/+$/, "");
 		this.origin = new URL(this.baseUrl).origin;
-		this.token = options.token;
+		this.auth = options.auth ?? {
+			type: "bearer",
+			token: options.token ?? ""
+		};
 		this.fetchFn = options.fetchFn ?? globalThis.fetch.bind(globalThis);
 		this.getTunnelToken = options.getTunnelToken;
 		this.onTunnelAuthInvalidate = options.onTunnelAuthInvalidate;
@@ -1793,7 +1822,7 @@ var FleetClient = class {
 			const attachTunnel = tunnelToken !== void 0 && tunnelToken !== "";
 			const canRetry = attachTunnel && !!this.onTunnelAuthInvalidate && attempt === 0;
 			const headers = {
-				Authorization: `Bearer ${this.token}`,
+				...this.auth.type === "bearer" ? { Authorization: `Bearer ${this.auth.token}` } : {},
 				...devtunnelHost ? { "X-Tunnel-Skip-Anti-Phishing-Page": "true" } : {},
 				...attachTunnel ? { "X-Tunnel-Authorization": `tunnel ${tunnelToken}` } : {},
 				...body === void 0 ? {} : { "Content-Type": "application/json" }
@@ -1814,7 +1843,7 @@ var FleetClient = class {
 					this.onTunnelAuthInvalidate();
 					continue;
 				}
-				throw mapNetworkError(err, devtunnelHost);
+				throw this.auth.type === "mesh" ? mapMeshUnreachable(err) : mapNetworkError(err, devtunnelHost);
 			}
 			if (!response.ok) {
 				if ((response.status === 401 || response.status === 403) && canRetry) {
@@ -1946,6 +1975,20 @@ function detailToSearchString(detail) {
 		return String(detail);
 	}
 }
+function mapMeshUnreachable(err) {
+	if (isAbortLike$1(err)) return new FleetError({
+		code: "TIMEOUT",
+		message: "fleet mesh peer request timed out or was aborted",
+		retryable: true,
+		detail: err
+	});
+	return new FleetError({
+		code: "TAILNET_UNREACHABLE",
+		message: `fleet mesh peer unreachable: ${err instanceof Error ? err.message : String(err)} — the peer is a tailnet node but the request did not land. A mesh ACL drops blocked traffic SILENTLY, so the likely cause is the \`tag:aiordie\` ACL (verify the peer permits this node), not a dead instance; also confirm the peer's mesh sidecar is up and serving HTTPS on the tailnet.`,
+		retryable: true,
+		detail: err
+	});
+}
 function mapNetworkError(err, devtunnelHost = false) {
 	if (isAbortLike$1(err)) return new FleetError({
 		code: "TIMEOUT",
@@ -2031,20 +2074,11 @@ var FleetRegistry = class {
 		}
 	}
 	async resolveInstance(arg) {
-		const instances = await this.instancesWithTokens();
-		const wanted = typeof arg === "string" ? arg.trim() : "";
-		if (wanted) {
-			const byId = instances.find((instance) => instance.id === wanted);
-			if (byId) return resolvedInstance(byId);
-			const labelMatches = instances.filter((instance) => instance.label.toLocaleLowerCase() === wanted.toLocaleLowerCase());
-			if (labelMatches.length > 1) throw new FleetRegistryError("AMBIGUOUS_LABEL", `fleet instance label ${JSON.stringify(wanted)} matches ${labelMatches.length} instances; use an id`);
-			if (labelMatches.length === 1) return resolvedInstance(labelMatches[0]);
-			throw new FleetRegistryError("INSTANCE_NOT_FOUND", `fleet instance ${JSON.stringify(wanted)} was not found`);
-		}
-		const defaultInstance = instances.find((instance) => instance.default === true);
-		if (defaultInstance) return resolvedInstance(defaultInstance);
-		if (instances.length === 1) return resolvedInstance(instances[0]);
-		throw new FleetRegistryError("INSTANCE_REQUIRED", instances.length === 0 ? "fleet instance is required; registry is empty" : "fleet instance is required; specify an instance id or label");
+		return selectInstance((await this.instancesWithTokens()).map(resolvedInstance), arg);
+	}
+	/** All static instances, fully resolved (with tokens). Used to build the merged static∪discovered set. */
+	async resolveAll() {
+		return (await this.instancesWithTokens()).map(resolvedInstance);
 	}
 	async listInstances() {
 		return (await this.instancesWithTokens()).map((instance) => ({
@@ -2060,6 +2094,27 @@ var FleetRegistry = class {
 		return this.loaded;
 	}
 };
+/**
+* Pure instance selection over an already-resolved set: id (exact) → label
+* (case-insensitive, ambiguity-checked) → default → single. Shared by the static
+* registry and the merged static∪discovered registry so both apply identical
+* matching + error semantics.
+*/
+function selectInstance(instances, arg) {
+	const wanted = typeof arg === "string" ? arg.trim() : "";
+	if (wanted) {
+		const byId = instances.find((instance) => instance.id === wanted);
+		if (byId) return byId;
+		const labelMatches = instances.filter((instance) => instance.label.toLocaleLowerCase() === wanted.toLocaleLowerCase());
+		if (labelMatches.length > 1) throw new FleetRegistryError("AMBIGUOUS_LABEL", `fleet instance label ${JSON.stringify(wanted)} matches ${labelMatches.length} instances; use an id`);
+		if (labelMatches.length === 1) return labelMatches[0];
+		throw new FleetRegistryError("INSTANCE_NOT_FOUND", `fleet instance ${JSON.stringify(wanted)} was not found`);
+	}
+	const defaultInstance = instances.find((instance) => instance.default === true);
+	if (defaultInstance) return defaultInstance;
+	if (instances.length === 1) return instances[0];
+	throw new FleetRegistryError("INSTANCE_REQUIRED", instances.length === 0 ? "fleet instance is required; registry is empty" : "fleet instance is required; specify an instance id or label");
+}
 function normalizeConfig(config) {
 	if (!isObject(config)) throw new FleetRegistryError("INVALID_CONFIG", "fleet registry config must be an object");
 	const instances = config.instances ?? [];
@@ -2181,6 +2236,11 @@ function resolvedInstance(instance) {
 		label: instance.label,
 		url: instance.url,
 		token: instance.token,
+		auth: {
+			type: "bearer",
+			token: instance.token
+		},
+		default: instance.default,
 		allowExec: instance.allowExec,
 		tunnelId: instance.tunnelId,
 		tunnelToken: instance.tunnelToken,
@@ -2194,6 +2254,158 @@ function isNodeErrorCode(err, code) {
 	return isObject(err) && err.code === code;
 }
 
+//#endregion
+//#region src/lib/fleet/discovery.ts
+/**
+* Mesh fleet discovery: read the local ai-or-die instance's `mesh/peers.json`
+* (written by its MeshManager from the sidecar's tailnet `Status()`) off disk and
+* synthesize token-less, mesh-auth fleet instances. No `AIORDIE_*` env, no HTTP,
+* no token — filesystem permissions are the gate. Discovered peers are driven
+* over the tailnet with NO Authorization header; each peer's own sidecar injects
+* the bearer (ACL-gated by `tag:aiordie`). See docs / the fleet plan.
+*/
+const DISCOVERY_CACHE_TTL_MS = 5e3;
+const PEERS_JSON_MAX_BYTES = 256 * 1024;
+/** The ai-or-die app data dir (NOT github-router's) — mirrors MeshManager's `base`. */
+function aiordieAppDir() {
+	if (process.platform === "win32") {
+		const localApp = process.env.LOCALAPPDATA || nodePath.join(os.homedir(), "AppData", "Local");
+		return nodePath.join(localApp, "ai-or-die");
+	}
+	return nodePath.join(os.homedir(), ".ai-or-die");
+}
+function meshPeersFilePath() {
+	const override = process.env.GH_ROUTER_FLEET_PEERS_FILE;
+	if (override && override.trim() !== "") return override.trim();
+	return nodePath.join(aiordieAppDir(), "mesh", "peers.json");
+}
+function meshDiscoveryDisabled() {
+	return process.env.GH_ROUTER_FLEET_DISCOVERY === "0";
+}
+const TS_NET_DNS_RE = /^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+ts\.net$/;
+function validDnsName(raw) {
+	if (typeof raw !== "string") return void 0;
+	const name = raw.trim().replace(/\.$/, "").toLowerCase();
+	if (name.length === 0 || name.length > 253) return void 0;
+	if (!TS_NET_DNS_RE.test(name)) return void 0;
+	return name;
+}
+function nonEmptyString(raw) {
+	return typeof raw === "string" && raw.trim() !== "" ? raw.trim() : void 0;
+}
+/**
+* Read + validate the discovery file into resolved mesh instances. Pure I/O +
+* validation; never throws — a missing/unreadable/oversized/malformed file
+* yields `[]` (discovery is best-effort and must never break static fleet use).
+*/
+async function readMeshPeers(readFileFn = (p) => fs.readFile(p, "utf8")) {
+	if (meshDiscoveryDisabled()) return [];
+	let raw;
+	try {
+		raw = await readFileFn(meshPeersFilePath());
+	} catch {
+		return [];
+	}
+	if (Buffer.byteLength(raw, "utf8") > PEERS_JSON_MAX_BYTES) return [];
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return [];
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return [];
+	if (!Array.isArray(parsed.peers)) return [];
+	const selfDnsName = validDnsName(parsed.self?.dnsName);
+	if (selfDnsName === void 0) return [];
+	const tailnetSuffix = selfDnsName.slice(selfDnsName.indexOf(".") + 1);
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const peer of parsed.peers) {
+		if (typeof peer !== "object" || peer === null) continue;
+		const record = peer;
+		const dnsName = validDnsName(record.dnsName);
+		if (dnsName === void 0) continue;
+		if (dnsName === selfDnsName) continue;
+		if (!dnsName.endsWith(`.${tailnetSuffix}`)) continue;
+		if (seen.has(dnsName)) continue;
+		seen.add(dnsName);
+		const hostname = nonEmptyString(record.hostname);
+		out.push({
+			id: dnsName,
+			label: hostname ?? dnsName,
+			url: `https://${dnsName}`,
+			token: "",
+			auth: { type: "mesh" }
+		});
+	}
+	return out;
+}
+function toInfo(instance) {
+	return {
+		id: instance.id,
+		label: instance.label,
+		url: instance.url
+	};
+}
+/**
+* Registry that merges a static `fleet.json` registry with mesh discovery. Static
+* ALWAYS wins on an id collision (a discovered peer sharing a static id is dropped
+* — never overwrites a configured instance, never merges auth across sources).
+* Discovery is cached briefly so a fan-out doesn't re-read the file per call, and a
+* failed discovery read leaves the static set untouched.
+*/
+var MergedFleetRegistry = class {
+	staticRegistry;
+	discover;
+	cache;
+	inflight;
+	ttlMs;
+	now;
+	constructor(options = {}) {
+		this.staticRegistry = options.staticRegistry ?? new FleetRegistry();
+		this.discover = options.discover ?? (() => readMeshPeers());
+		this.ttlMs = options.ttlMs ?? DISCOVERY_CACHE_TTL_MS;
+		this.now = options.now ?? (() => Date.now());
+	}
+	async discoverCached() {
+		const now = this.now();
+		if (this.cache && now - this.cache.at < this.ttlMs) return this.cache.peers;
+		if (this.inflight) return this.inflight;
+		this.inflight = (async () => {
+			let peers;
+			try {
+				peers = await this.discover();
+			} catch {
+				peers = [];
+			}
+			this.cache = {
+				at: this.now(),
+				peers
+			};
+			return peers;
+		})().finally(() => {
+			this.inflight = void 0;
+		});
+		return this.inflight;
+	}
+	/** Static∪discovered with static winning on id collision. */
+	async union() {
+		const staticResolved = await this.staticRegistry.resolveAll();
+		const staticIds = new Set(staticResolved.map((instance) => instance.id));
+		const discovered = (await this.discoverCached()).filter((peer) => !staticIds.has(peer.id));
+		return [...staticResolved, ...discovered];
+	}
+	async resolveInstance(arg) {
+		return selectInstance(await this.union(), arg);
+	}
+	async listInstances() {
+		const staticInfos = await this.staticRegistry.listInstances();
+		const staticIds = new Set(staticInfos.map((info) => info.id));
+		const discovered = (await this.discoverCached()).filter((peer) => !staticIds.has(peer.id));
+		return [...staticInfos, ...discovered.map(toInfo)];
+	}
+};
+
 //#endregion
 //#region src/lib/fleet/tools.ts
 const FLEET_GROUP = "fleet";
@@ -2229,16 +2441,16 @@ function createFleetTools(options = {}) {
 	const awaitTurnDeadlineSlackMs = nonNegativeNumberOrDefault(options.awaitTurnDeadlineSlackMs, AWAIT_TURN_TIMEOUT_SLACK_MS);
 	function getRegistry() {
 		if (registry) return registry;
-		defaultRegistry ??= new FleetRegistry();
+		defaultRegistry ??= new MergedFleetRegistry();
 		return defaultRegistry;
 	}
 	function clientFor(instance) {
-		const key = `${instance.id}\0${instance.url}\0${instance.token}\0${instance.tunnelId ?? ""}\0${instance.tunnelToken ?? ""}\0${instance.insecureTLS === true ? "1" : "0"}`;
+		const key = `${instance.id}\0${instance.url}\0${instance.auth.type}\0${instance.token}\0${instance.tunnelId ?? ""}\0${instance.tunnelToken ?? ""}\0${instance.insecureTLS === true ? "1" : "0"}`;
 		const existing = clients.get(key);
 		if (existing) return existing;
 		const created = options.createClient ? options.createClient(instance) : new FleetClient({
 			url: instance.url,
-			token: instance.token,
+			auth: instance.auth,
 			fetchFn: options.fetchFn,
 			insecureTLS: instance.insecureTLS,
 			...tunnelClientOptions(instance, tunnelProvider)
@@ -2393,18 +2605,14 @@ function createFleetTools(options = {}) {
 			sessionId: stringProp("Global session id in the form instanceId:localSessionId."),
 			instance: stringProp("Optional instance id/label; when supplied it must agree with sessionId."),
 			message: stringProp("Message text to deliver to the session."),
-			idempotencyKey: stringProp("Caller-generated idempotency key. Reuse the same key on retry; the upstream dedupes so a retry never re-types."),
+			idempotencyKey: stringProp("Optional caller idempotency key; AUTO-GENERATED when omitted, so you normally never pass it. Supply your OWN stable key only when you will retry the SAME send and need the upstream to dedupe it."),
 			awaitMs: numberProp("Optional best-effort confirmation wait (ms) — NOT a deadline. Prefer awaitMs:0 plus await_turn; a turn that outruns awaitMs returns confirmationPending, not an error.")
-		}, [
-			"sessionId",
-			"message",
-			"idempotencyKey"
-		]), async (args, signal) => {
+		}, ["sessionId", "message"]), async (args, signal) => {
 			const { instance, localId, globalId } = await resolveSession(args);
 			const awaitMs = optionalNumber(args, "awaitMs");
 			const response = await clientFor(instance).sendMessage(localId, {
 				message: requiredString(args, "message"),
-				idempotencyKey: requiredString(args, "idempotencyKey"),
+				idempotencyKey: optionalString(args, "idempotencyKey") ?? randomUUID(),
 				...awaitMs === void 0 ? {} : { awaitMs }
 			}, signal);
 			const delivered = !(response.delivered === false || response.delivery?.status === "failed" || response.delivery?.status === "error");
@@ -2428,18 +2636,14 @@ function createFleetTools(options = {}) {
 			sessionId: stringProp("Global session id in the form instanceId:localSessionId."),
 			instance: stringProp("Optional instance id/label; when supplied it must agree with sessionId."),
 			keys: stringProp("Key sequence to send."),
-			idempotencyKey: stringProp("Caller-generated idempotency key."),
+			idempotencyKey: stringProp("Optional caller idempotency key; auto-generated when omitted."),
 			raw: booleanProp("Pass keys through as raw input when the instance supports it.")
-		}, [
-			"sessionId",
-			"keys",
-			"idempotencyKey"
-		]), async (args, signal) => {
+		}, ["sessionId", "keys"]), async (args, signal) => {
 			const { instance, localId, globalId } = await resolveSession(args);
 			const raw = optionalBoolean(args, "raw");
 			const response = await clientFor(instance).sendKeys(localId, {
 				keys: requiredString(args, "keys"),
-				idempotencyKey: requiredString(args, "idempotencyKey"),
+				idempotencyKey: optionalString(args, "idempotencyKey") ?? randomUUID(),
 				...raw === void 0 ? {} : { raw }
 			}, signal);
 			return ok({
@@ -2454,14 +2658,14 @@ function createFleetTools(options = {}) {
 			choice: stringProp("Named or numbered choice to select."),
 			optionValue: stringProp("Exact option value to select."),
 			keys: stringProp("Explicit key override to send instead of a mapped choice."),
-			idempotencyKey: stringProp("Caller-generated idempotency key.")
-		}, ["sessionId", "idempotencyKey"]), async (args, signal) => {
+			idempotencyKey: stringProp("Optional caller idempotency key; auto-generated when omitted.")
+		}, ["sessionId"]), async (args, signal) => {
 			const { instance, localId, globalId } = await resolveSession(args);
 			const input = definedObject({
 				choice: optionalString(args, "choice"),
 				optionValue: optionalString(args, "optionValue"),
 				keys: optionalString(args, "keys"),
-				idempotencyKey: requiredString(args, "idempotencyKey")
+				idempotencyKey: optionalString(args, "idempotencyKey") ?? randomUUID()
 			});
 			const response = await clientFor(instance).respond(localId, input, signal);
 			return ok({
@@ -2475,19 +2679,15 @@ function createFleetTools(options = {}) {
 			agent: stringProp("Agent/runtime to create on the instance."),
 			name: stringProp("Optional display name for the session."),
 			workingDir: stringProp("Optional working directory on the remote instance."),
-			idempotencyKey: stringProp("Caller-generated idempotency key."),
+			idempotencyKey: stringProp("Optional caller idempotency key; auto-generated when omitted."),
 			start: booleanProp("Whether the remote instance should start the session immediately."),
 			readyTimeoutMs: numberProp("F17: bounded ms to wait for the agent to become driveable before returning. The response carries ready/bound/blocker."),
 			permissionMode: stringProp("F10 (claude only): permission mode the launched agent starts in — one of plan | acceptEdits | default | bypassPermissions. Rejected with BAD_REQUEST if unknown or if agentArgs also sets it."),
 			agentArgs: arrayProp("F10 (claude only): extra launcher args appended after the github-router prefix. Must NOT include --permission-mode or --dangerously-skip-permissions (use permissionMode) — rejected with BAD_REQUEST.")
-		}, [
-			"instance",
-			"agent",
-			"idempotencyKey"
-		]), async (args, signal) => {
+		}, ["instance", "agent"]), async (args, signal) => {
 			const instance = await resolve(requiredString(args, "instance"));
 			const agent = requiredString(args, "agent");
-			const idempotencyKey = requiredString(args, "idempotencyKey");
+			const idempotencyKey = optionalString(args, "idempotencyKey") ?? randomUUID();
 			const permissionMode = optionalString(args, "permissionMode");
 			const agentArgs = optionalStringArray(args, "agentArgs");
 			if (permissionMode !== void 0) await assertCapability(instance, "permission_mode", "permissionMode", signal);
@@ -2512,11 +2712,11 @@ function createFleetTools(options = {}) {
 		tool$1("stop_session", "Stop a fleet session.", objectSchema({
 			sessionId: stringProp("Global session id in the form instanceId:localSessionId."),
 			instance: stringProp("Optional instance id/label; when supplied it must agree with sessionId."),
-			idempotencyKey: stringProp("Caller-generated idempotency key."),
+			idempotencyKey: stringProp("Optional caller idempotency key; auto-generated when omitted."),
 			mode: stringProp("Optional stop mode understood by the remote instance.")
-		}, ["sessionId", "idempotencyKey"]), async (args, signal) => {
+		}, ["sessionId"]), async (args, signal) => {
 			const { instance, localId, globalId } = await resolveSession(args);
-			const idempotencyKey = requiredString(args, "idempotencyKey");
+			const idempotencyKey = optionalString(args, "idempotencyKey") ?? randomUUID();
 			const response = await clientFor(instance).stopSession(localId, definedObject({
 				mode: optionalString(args, "mode"),
 				idempotencyKey
@@ -8420,7 +8620,7 @@ function logAudit$1(record) {
 		try {
 			const fs$2 = await import("node:fs/promises");
 			const path$1 = await import("node:path");
-			const { PATHS: PATHS$1 } = await import("./paths-B-ATynF7.js");
+			const { PATHS: PATHS$1 } = await import("./paths-Bljq3UJC.js");
 			const dir = path$1.join(PATHS$1.APP_DIR, "browser-mcp");
 			await fs$2.mkdir(dir, { recursive: true });
 			const line = JSON.stringify({
@@ -20699,7 +20899,7 @@ function entryHasCommand(entry, command) {
 * other entries. Returns a new object (never mutates the input). Re-running the
 * launcher with the same command+event does not duplicate the hook.
 */
-function mergeStopHookIntoSettings(existing, command, event = "Stop", timeoutSec) {
+function mergeStopHookIntoSettings(existing, command, event = "Stop", timeoutSec, matcher) {
 	const base = existing && typeof existing === "object" ? { ...existing } : {};
 	const hooks = base.hooks && typeof base.hooks === "object" ? { ...base.hooks } : {};
 	const arr = Array.isArray(hooks[event]) ? [...hooks[event]] : [];
@@ -20709,7 +20909,10 @@ function mergeStopHookIntoSettings(existing, command, event = "Stop", timeoutSec
 			command
 		};
 		if (typeof timeoutSec === "number" && Number.isFinite(timeoutSec) && timeoutSec > 0) hook.timeout = timeoutSec;
-		arr.push({ hooks: [hook] });
+		arr.push(matcher ? {
+			matcher,
+			hooks: [hook]
+		} : { hooks: [hook] });
 	}
 	hooks[event] = arr;
 	base.hooks = hooks;
@@ -20915,6 +21118,12 @@ function buildSessionBindHookCommand(execPath, scriptPath, outPath) {
 	const q = (s) => `"${s}"`;
 	return `${scriptPath && scriptPath !== execPath ? `${q(execPath)} ${q(scriptPath)}` : q(execPath)} internal-session-bind --out ${q(outPath)}`;
 }
+/** Command for the `internal-artifact-open` hook (no args — token comes from the
+*  mirror creds file, plan from the plans dir; nothing secret in argv). */
+function buildArtifactOpenHookCommand(execPath, scriptPath) {
+	const q = (s) => `"${s}"`;
+	return `${scriptPath && scriptPath !== execPath ? `${q(execPath)} ${q(scriptPath)}` : q(execPath)} internal-artifact-open`;
+}
 /**
 * Read-merge-atomic-write the Stop hook into a Claude Code `settings.json` file
 * (the mirrored one). A MISSING file (ENOENT) starts from `{}`; any OTHER read or
@@ -20923,7 +21132,7 @@ function buildSessionBindHookCommand(execPath, scriptPath, outPath) {
 * other setting, is idempotent, and uses temp+rename so Claude Code's mtime
 * watcher never sees a half-written file. Returns the merged object.
 */
-async function injectStopHookIntoSettingsFile(settingsPath, command, event = "Stop", timeoutSec) {
+async function injectStopHookIntoSettingsFile(settingsPath, command, event = "Stop", timeoutSec, matcher) {
 	let existing = {};
 	let raw;
 	try {
@@ -20937,7 +21146,7 @@ async function injectStopHookIntoSettingsFile(settingsPath, command, event = "St
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) existing = parsed;
 		else throw new Error(`settings.json at ${settingsPath} is not a JSON object; refusing to overwrite`);
 	}
-	const merged = mergeStopHookIntoSettings(existing, command, event, timeoutSec);
+	const merged = mergeStopHookIntoSettings(existing, command, event, timeoutSec, matcher);
 	const tmp = `${settingsPath}.${process.pid}.tmp`;
 	await promises.writeFile(tmp, `${JSON.stringify(merged, null, 2)}\n`, { mode: 384 });
 	await promises.rename(tmp, settingsPath);
@@ -22705,5 +22914,5 @@ async function runStandInToolCall(args, signal) {
 }
 
 //#endregion
-export { relayAnthropicStream as $, IMPLEMENT_DEFAULT_MODEL as A, withInstallLock as At, vscodeRipgrepPath as B, resolveModel as Bt, stopGateEnabledForRepo as C, DEFAULT_CODEX_MODEL_FALLBACKS as Ct, liveExec as D, generateRandomPort as Dt, resolveSealedGate as E, UPSTREAM_INACTIVITY_TIMEOUT_MS as Et, withNoOutputRetry as F, cacheModels as Ft, ADVISOR_TOOL_INSTRUCTIONS as G, forwardError as Gt, assetFor as H, getModels as Ht, availableToolCommands as I, cacheVSCodeVersion as It, isAdvisorRequested as J, copilotHeaders as Jt, buildAdvisorStream as K, GITHUB_API_BASE_URL as Kt, buildToolbeltAwareness as L, filterBetaHeader as Lt, REVIEW_DEFAULT_MODEL as M, setupGitHubToken as Mt, appendPlanReminder as N, tryRefreshAndRetry as Nt, BROWSE_DEFAULT_MODEL as O, pickClaudeDefault as Ot, runWorkerAgent as P, cacheCopilotVersion as Pt, readIteratorWithTimeout as Q, toolbeltEnabled as R, isNullish as Rt, repoRoot as S, DEFAULT_CODEX_MODEL as St, trustRepo as T, UPSTREAM_FETCH_TIMEOUT_MS as Tt, searchWeb as U, fetchWithTransientRetry as Ut, TOOLBELT_TOOLS$1 as V, sleep as Vt, ADVISOR_INTERNAL_TOOL_NAME as W, HTTPError as Wt, isControllerClosedError as X, state as Xt, buildOpenAIErrorEvent as Y, githubHeaders as Yt, logStreamError as Z, fileFindingsStore as _, extractTarGzMember as _t, buildPeerAwarenessSnippet as a, workerToolsEnabled as at, isSubagentContext as b, toolbeltPathOverride as bt, buildStopHookCommand as c, getTokenCount as ct, fileBlockBudget as d, MAX_RESPONSE_BODY_BYTES as dt, handleMcpDelete as et, injectStopHookIntoSettingsFile as f, readResponseBodyCapped as ft, fileBaselineStore as g, provisionAndIndexColbert as gt, stopReviewEnabled as h, hasSupportedBrowserInstalled as ht, buildAgentPrompt as i, standInToolEnabled as it, PLAN_DEFAULT_MODEL as j, setupCopilotToken as jt, DEFAULT_MODEL as k, getPackageVersion as kt, captureLaunchBaseline as l, createResponses as lt, stopGateId as m, provisionBrowserAssets as mt, MCP_GROUPS as n, browserToolsEnabled as nt, personasFor as o, countTokens as ot, launchBaselineKey as p, parseJsonOrDiagnose as pt, injectAdvisorTool as q, copilotBaseUrl as qt, assertMcpToolSurfaceConsistent as r, fleetToolsEnabled as rt, buildSessionBindHookCommand as s, createMessages as st, GROUP_META as t, handleMcpPost as tt, decideStopHook as u, createChatCompletions as ut, fileLastPromptStore as v, extractZipMember as vt, stopReviewStateDir as w, DEFAULT_PORT as wt, repoFingerprint as x, DEFAULT_CLAUDE_MODEL_FALLBACKS as xt, fileReviewDebounce as y, collapsePathKeys as yt, toolbeltSkipSet as z, resolveCodexModel as zt };
-//# sourceMappingURL=peer-mcp-personas-CH2gmdPN.js.map
+export { readIteratorWithTimeout as $, state as $t, DEFAULT_MODEL as A, generateRandomPort as At, toolbeltSkipSet as B, filterBetaHeader as Bt, repoRoot as C, toolbeltPathOverride as Ct, resolveSealedGate as D, DEFAULT_PORT as Dt, trustRepo as E, DEFAULT_CODEX_MODEL_FALLBACKS as Et, runWorkerAgent as F, setupGitHubToken as Ft, ADVISOR_INTERNAL_TOOL_NAME as G, getModels as Gt, TOOLBELT_TOOLS$1 as H, resolveCodexModel as Ht, withNoOutputRetry as I, tryRefreshAndRetry as It, injectAdvisorTool as J, forwardError as Jt, ADVISOR_TOOL_INSTRUCTIONS as K, fetchWithTransientRetry as Kt, availableToolCommands as L, cacheCopilotVersion as Lt, PLAN_DEFAULT_MODEL as M, getPackageVersion as Mt, REVIEW_DEFAULT_MODEL as N, withInstallLock as Nt, liveExec as O, UPSTREAM_FETCH_TIMEOUT_MS as Ot, appendPlanReminder as P, setupCopilotToken as Pt, logStreamError as Q, githubHeaders as Qt, buildToolbeltAwareness as R, cacheModels as Rt, repoFingerprint as S, collapsePathKeys as St, stopReviewStateDir as T, DEFAULT_CODEX_MODEL as Tt, assetFor as U, resolveModel as Ut, vscodeRipgrepPath as V, isNullish as Vt, searchWeb as W, sleep as Wt, buildOpenAIErrorEvent as X, copilotBaseUrl as Xt, isAdvisorRequested as Y, GITHUB_API_BASE_URL as Yt, isControllerClosedError as Z, copilotHeaders as Zt, fileBaselineStore as _, provisionAndIndexColbert as _t, buildPeerAwarenessSnippet as a, standInToolEnabled as at, fileReviewDebounce as b, shouldUseInsecureTls as bt, buildSessionBindHookCommand as c, createMessages as ct, decideStopHook as d, createChatCompletions as dt, relayAnthropicStream as et, fileBlockBudget as f, MAX_RESPONSE_BODY_BYTES as ft, stopReviewEnabled as g, hasSupportedBrowserInstalled as gt, stopGateId as h, provisionBrowserAssets as ht, buildAgentPrompt as i, fleetToolsEnabled as it, IMPLEMENT_DEFAULT_MODEL as j, pickClaudeDefault as jt, BROWSE_DEFAULT_MODEL as k, UPSTREAM_INACTIVITY_TIMEOUT_MS as kt, buildStopHookCommand as l, getTokenCount as lt, launchBaselineKey as m, parseJsonOrDiagnose as mt, MCP_GROUPS as n, handleMcpPost as nt, personasFor as o, workerToolsEnabled as ot, injectStopHookIntoSettingsFile as p, readResponseBodyCapped as pt, buildAdvisorStream as q, HTTPError as qt, assertMcpToolSurfaceConsistent as r, browserToolsEnabled as rt, buildArtifactOpenHookCommand as s, countTokens as st, GROUP_META as t, handleMcpDelete as tt, captureLaunchBaseline as u, createResponses as ut, fileFindingsStore as v, extractTarGzMember as vt, stopGateEnabledForRepo as w, DEFAULT_CLAUDE_MODEL_FALLBACKS as wt, isSubagentContext as x, ArtifactClient as xt, fileLastPromptStore as y, extractZipMember as yt, toolbeltEnabled as z, cacheVSCodeVersion as zt };
+//# sourceMappingURL=peer-mcp-personas-Dmx4S0_5.js.map