github-router 0.3.138 → 0.3.151

package/dist/main.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as readIteratorWithTimeout, $t as state, At as generateRandomPort, B as toolbeltSkipSet, Bt as filterBetaHeader, C as repoRoot, Ct as toolbeltPathOverride, D as resolveSealedGate, Dt as DEFAULT_PORT, E as trustRepo, Et as DEFAULT_CODEX_MODEL_FALLBACKS, Ft as setupGitHubToken, G as ADVISOR_INTERNAL_TOOL_NAME, Gt as getModels, H as TOOLBELT_TOOLS, Ht as resolveCodexModel, It as tryRefreshAndRetry, J as injectAdvisorTool, Jt as forwardError, K as ADVISOR_TOOL_INSTRUCTIONS, Kt as fetchWithTransientRetry, L as availableToolCommands, Lt as cacheCopilotVersion, Mt as getPackageVersion, Nt as withInstallLock, O as liveExec, Ot as UPSTREAM_FETCH_TIMEOUT_MS, Pt as setupCopilotToken, Q as logStreamError, Qt as githubHeaders, R as buildToolbeltAwareness, Rt as cacheModels, S as repoFingerprint, St as collapsePathKeys, T as stopReviewStateDir, Tt as DEFAULT_CODEX_MODEL, U as assetFor, Ut as resolveModel, V as vscodeRipgrepPath, Vt as isNullish, W as searchWeb, Wt as sleep, X as buildOpenAIErrorEvent, Xt as copilotBaseUrl, Y as isAdvisorRequested, Yt as GITHUB_API_BASE_URL, Z as isControllerClosedError, Zt as copilotHeaders, _ as fileBaselineStore, _t as provisionAndIndexColbert, a as buildPeerAwarenessSnippet, at as standInToolEnabled, b as fileReviewDebounce, bt as shouldUseInsecureTls, c as buildSessionBindHookCommand, ct as createMessages, d as decideStopHook, dt as createChatCompletions, et as relayAnthropicStream, f as fileBlockBudget, ft as MAX_RESPONSE_BODY_BYTES, g as stopReviewEnabled, gt as hasSupportedBrowserInstalled, h as stopGateId, ht as provisionBrowserAssets, i as buildAgentPrompt, it as fleetToolsEnabled, jt as pickClaudeDefault, kt as UPSTREAM_INACTIVITY_TIMEOUT_MS, l as buildStopHookCommand, lt as getTokenCount, m as launchBaselineKey, mt as parseJsonOrDiagnose, n as MCP_GROUPS, nt as handleMcpPost, o as personasFor, ot as workerToolsEnabled, p as injectStopHookIntoSettingsFile, pt as readResponseBodyCapped, q as buildAdvisorStream, qt as HTTPError, r as assertMcpToolSurfaceConsistent, rt as browserToolsEnabled, s as buildArtifactOpenHookCommand, st as countTokens, t as GROUP_META, tt as handleMcpDelete, u as captureLaunchBaseline, ut as createResponses, v as fileFindingsStore, vt as extractTarGzMember, w as stopGateEnabledForRepo, wt as DEFAULT_CLAUDE_MODEL_FALLBACKS, x as isSubagentContext, xt as ArtifactClient, y as fileLastPromptStore, yt as extractZipMember, z as toolbeltEnabled, zt as cacheVSCodeVersion } from "./peer-mcp-personas-CThUmeHE.js";
-import { a as removeOwnClaudeConfigMirror, i as isUnderClaudeConfigMirror, l as writeArtifactCredsToMirror, n as ensureClaudeConfigMirror, r as ensurePaths, t as PATHS, u as writeRuntimeFileSecure } from "./paths-Cn5OzmYL.js";
-import { c as killManagedTree, d as runCommandCapture, f as runCommandVoid, l as parseBoolEnv, s as killChildProcessTree, u as resolveExecutable } from "./lifecycle-Cqe8OQVX.js";
-import { a as sweepRegistry } from "./lifecycle-CeVDX6av.js";
+import { $ as logStreamError, $t as copilotBaseUrl, At as UPSTREAM_FETCH_TIMEOUT_MS, B as toolbeltEnabled, Bt as cacheCopilotVersion, C as repoFingerprint, Ct as ArtifactClient, D as trustRepo, Dt as DEFAULT_CODEX_MODEL, E as stopReviewStateDir, Et as DEFAULT_CLAUDE_MODEL_FALLBACKS, Ft as withInstallLock, G as searchWeb, Gt as resolveCodexModel, H as vscodeRipgrepPath, Ht as cacheVSCodeVersion, It as setupCopilotToken, J as buildAdvisorStream, Jt as getModels, K as ADVISOR_INTERNAL_TOOL_NAME, Kt as resolveModel, Lt as setupGitHubAgentToken, Mt as generateRandomPort, Nt as pickClaudeDefault, O as resolveSealedGate, Ot as DEFAULT_CODEX_MODEL_FALLBACKS, Pt as getPackageVersion, Q as isControllerClosedError, Qt as GITHUB_API_BASE_URL, R as availableToolCommands, Rt as setupGitHubToken, S as isSubagentContext, St as shouldUseInsecureTls, T as stopGateEnabledForRepo, Tt as toolbeltPathOverride, U as TOOLBELT_TOOLS, Ut as filterBetaHeader, V as toolbeltSkipSet, Vt as cacheModels, W as assetFor, Wt as isNullish, X as isAdvisorRequested, Xt as HTTPError, Y as injectAdvisorTool, Yt as fetchWithTransientRetry, Z as buildOpenAIErrorEvent, Zt as forwardError, _ as stopReviewEnabled, _t as provisionBrowserAssets, a as buildPeerAwarenessSnippet, at as browserToolsEnabled, b as fileLastPromptStore, bt as extractTarGzMember, c as buildSessionBindHookCommand, ct as workerToolsEnabled, d as decideStopHook, dt as getTokenCount, en as copilotHeaders, et as readIteratorWithTimeout, f as fileBlockBudget, ft as createResponses, g as stopGateId, gt as parseJsonOrDiagnose, h as stopGateDisabled, ht as readResponseBodyCapped, i as buildAgentPrompt, it as agentToolsEnabled, jt as UPSTREAM_INACTIVITY_TIMEOUT_MS, k as liveExec, kt as DEFAULT_PORT, l as buildStopHookCommand, lt as countTokens, m as launchBaselineKey, mt as MAX_RESPONSE_BODY_BYTES, n as MCP_GROUPS, nn as state, nt as handleMcpDelete, o as personasFor, ot as fleetToolsEnabled, p as injectStopHookIntoSettingsFile, pt as createChatCompletions, q as ADVISOR_TOOL_INSTRUCTIONS, qt as sleep, r as assertMcpToolSurfaceConsistent, rt as handleMcpPost, s as buildArtifactOpenHookCommand, st as standInToolEnabled, t as GROUP_META, tn as githubHeaders, tt as relayAnthropicStream, u as captureLaunchBaseline, ut as createMessages, v as fileBaselineStore, vt as hasSupportedBrowserInstalled, w as repoRoot, wt as collapsePathKeys, x as fileReviewDebounce, xt as extractZipMember, y as fileFindingsStore, yt as provisionAndIndexColbert, z as buildToolbeltAwareness, zt as tryRefreshAndRetry } from "./peer-mcp-personas-Dm3UCpXz.js";
+import { a as removeOwnClaudeConfigMirror, i as isUnderClaudeConfigMirror, l as writeArtifactCredsToMirror, n as ensureClaudeConfigMirror, r as ensurePaths, t as PATHS, u as writeRuntimeFileSecure } from "./paths-D0tJ_tms.js";
+import { c as killManagedTree, d as runCommandCapture, f as runCommandVoid, l as parseBoolEnv, s as killChildProcessTree, u as resolveExecutable } from "./lifecycle-DyEXZu2z.js";
+import { a as sweepRegistry } from "./lifecycle-DGvk4z63.js";
 import { defineCommand, runMain } from "citty";
 import consola from "consola";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -2036,7 +2036,7 @@ async function discoverGateCommands(cwd, opts) {
 	if (files.length === 0) return null;
 	let result;
 	try {
-		const { runWorkerAgent } = await import("./engine-kSGZBPRK.js");
+		const { runWorkerAgent } = await import("./engine-DBIfCSAl.js");
 		result = await runWorkerAgent({
 			mode: "explore",
 			workspace: root,
@@ -2190,6 +2190,137 @@ function buildPromptSubmitHookCommand(execPath, scriptPath) {
 	return `${q(execPath)} internal-prompt-submit`;
 }
 
+//#endregion
+//#region src/lib/injected-skills/first-mate-skill.ts
+const FIRST_MATE_SKILL = {
+	name: "gh-first-mate",
+	md: `---
+name: gh-first-mate
+description: Thin operating protocol for the first-mate GitHub cloud-agent controller: start missions, wake the durable controller loop, answer model and human requests, keep context compact, and report from the board/ledger rather than rereading full diffs or logs.
+user-invocable: true
+---
+
+# gh-first-mate: durable cloud-agent controller loop
+
+Use this skill when the user wants first-mate to drive GitHub cloud coding agents across one or more repositories.
+The first-mate controller is the durable system of record: missions, units, decisions, handles, and controller state live in its registry and ledger.
+Your job is to run the thin protocol, not to hold the mission in context.
+
+## Start a mission
+
+For a new goal, call mcp__first-mate__start_mission with:
+
+- goal: the user's goal in one sentence.
+- repos: repository strings as owner/name.
+- acceptance_criteria: explicit user-blessed acceptance criteria.
+- priority and house_rules only when the user supplied them or they are necessary constraints.
+
+If acceptance criteria are missing or ambiguous, ask the user before starting.
+Do not decompose the mission yourself at start time; v1 mission registration is intentionally simple and later controller wakes/model requests drive decomposition and steering.
+
+Invariant (closes the stranding hole): work only ever becomes active inside a turn — start_mission is a tool call, nothing activates a mission server-side. So immediately after start_mission, run one loop turn (advance, then arm the heartbeat) in the SAME turn, before you yield. Never register a mission and stop without arming; otherwise nothing will wake to drive it.
+
+## Controller loop (push-based, self-driving)
+
+The loop is push-based: each turn you DRAIN all ready work, then ARM the next wake and YIELD the turn. You never sit polling advance in a tight loop — that does not scale and wastes context. A durable heartbeat re-invokes this skill while the session is idle, and one advance call sweeps the WHOLE portfolio (every mission, every repo) at once, so a single heartbeat drives everything.
+
+Each turn:
+
+1. Call mcp__first-mate__advance, batching any answers you already have.
+2. Read the compact response: board, needsModel, needsHuman, applied_count, nextWakeAt, and nextWakeSeconds.
+3. Answer every needsModel item with the typed verdict for its kind, and courier every needsHuman packet. If you produced any model_answers this turn, call advance again to apply them and pick up the resulting state. Stop this inner drain once advance returns no new needsModel you can answer without the user; keep it bounded (at most a few iterations), never a busy loop.
+4. Manage the heartbeat from nextWakeSeconds (see "Self-driving heartbeat").
+5. Report compactly from the board, then YIELD. Do not call advance again until the next scheduled wake or a new user message.
+
+When submitting answers, batch what you have:
+
+- model_answers: [{ requestId, verdict }]
+- human_decisions: [{ requestId, choice }]
+
+Keep verdicts small and typed to the request kind.
+
+## Model request verdicts
+
+Use the request's kind and payload as the contract:
+
+- review_plan: review the plan against the mission goal, acceptance criteria, and house rules. Return { decision: "approve" } when the plan is good enough to implement, or { decision: "refine", instruction: "..." } with a short actionable refinement.
+- answer_agent_question: answer only from the acceptance criteria and supplied context. Return { answer: "..." }. If the answer is not derivable, do not invent policy; escalate by leaving a short answer that says what the human must decide.
+- author_fix: author a concise fix instruction for the cloud agent. Return { instruction: "..." } with the failure, expected behavior, and any bounded check to run.
+- judge_review: judge whether review/CI/floor evidence is sufficient. Return { pass: true } only when the acceptance criteria and floor are satisfied; otherwise return { pass: false } with a compact reason when useful.
+
+Delegate heavy reading to workers:
+
+- Use mcp__workers__explore for focused source or history gathering.
+- Use mcp__workers__review for compact review of a specific plan, PR summary, or suspicious change.
+- Use mcp__workers__test when a missing executable check is the blocker.
+
+Do not read a full diff, full CI log, or full transcript in the lead context. Ask workers for narrow facts and compact excerpts. The ledger is durable memory; context is not.
+
+## Human requests
+
+For each needsHuman item:
+
+1. If packetHtmlPath is present, open that HTML file in the ai-or-die artifact panel for the user.
+2. Tell the user the reason, repo, issue/PR handles, and the available decision choices.
+3. Wait for the user's decision.
+4. Submit the choice back with mcp__first-mate__advance({ human_decisions: [...] }).
+
+If an artifact-panel tool is unavailable, give the user the local packetHtmlPath and the compact summary from needsHuman.
+Never decide a merge approval or abandonment choice on the user's behalf.
+
+## Self-driving heartbeat (arm / disarm)
+
+The loop keeps itself alive with ONE durable cron job — a dead-man's-switch that survives idle, compaction, restart, and /clear because it lives on disk, not in your context. The controller hands you nextWakeSeconds so you never do arithmetic: it is a ready-to-use delay in seconds, or null when the whole portfolio is idle. Every heartbeat carries the exact marker token [fm-heartbeat] in its prompt so you can identify it unambiguously (never a fuzzy match against unrelated crons). Manage exactly one heartbeat:
+
+Arm — "create fresh, then reap the rest" (nextWakeSeconds is a number, i.e. there is active work):
+
+1. Pick the cadence bucket from nextWakeSeconds (fixed cron expressions, no time math), so the heartbeat tracks the controller's own cadence:
+   - nextWakeSeconds <= 120  → "1-59/2 * * * *"    (about every 2 min)
+   - nextWakeSeconds <= 600  → "2,7,12,17,22,27,32,37,42,47,52,57 * * * *"  (about every 5 min)
+   - otherwise               → "3,13,23,33,43,53 * * * *"  (about every 10 min)
+2. CronCreate the new heartbeat and capture its id: durable: true, recurring: true, the chosen cron, prompt "/gh-first-mate [fm-heartbeat] wake the controller loop, answer ready requests, reschedule." Creating first (before deleting) guarantees at least one heartbeat always exists.
+3. CronList, then CronDelete every job whose prompt contains [fm-heartbeat] EXCEPT the id you just created. This converges to exactly one, reaps duplicates and old-version orphans, and — because you recreate each wake — resets the 7-day recurring-cron expiry so a long mission never silently stops.
+
+Disarm (nextWakeSeconds is null AND there are no pending needsHuman): nothing is active. CronList and CronDelete every [fm-heartbeat] job. Report that first-mate is idle and resumes when the user next starts or advances a mission (safe because, per the Start-a-mission invariant, only a turn can reactivate work, and that turn re-arms).
+
+Responsiveness (optional): the buckets above already tighten cadence to ~2 min for imminent work. If this session is a /loop you MAY additionally ScheduleWakeup(delaySeconds: nextWakeSeconds, ...) for an exact one-shot; keep at most one outstanding.
+
+Guardrails: never leave more than one [fm-heartbeat] job; never busy-loop advance; if no scheduler tool is available, tell the user the next wake is in nextWakeSeconds seconds and stop.
+
+## Board reports
+
+Use mcp__first-mate__board or mcp__first-mate__mission_status for read-only status checks.
+Report compactly:
+
+- mission id and title
+- repositories
+- phase counts
+- blocked count and why, when available
+- next wake time or the next requested action
+
+Never reconstruct status by rereading raw logs when the controller board already has the handles.
+
+## Context discipline
+
+- The ledger is the durable memory; do not paste large artifacts into the chat.
+- Never read a full diff/log/transcript unless the user explicitly asks and it is essential.
+- Prefer handles: mission id, repo, issue, PR, request id, packet path.
+- Keep every answer to first-mate compact and action-oriented.
+- If controller state and chat memory disagree, trust the controller state and ask for clarification only when it affects acceptance criteria or human approval.
+
+## Return format
+
+When reporting progress, return:
+
+- Mission: id and one-line goal.
+- Board: compact phase counts and blocked count.
+- Applied: count or short list of important controller actions.
+- Needs model: request ids and kinds answered or pending.
+- Needs human: decision ids/packet paths and the user's required choice.
+- Next wake: the heartbeat state — armed and next check in nextWakeSeconds seconds, or idle (disarmed).
+`
+};
+
 //#endregion
 //#region src/lib/injected-skills/floor-keeper-skill.ts
 const FLOOR_KEEPER_SKILL = {
@@ -3051,8 +3182,8 @@ const ERROR_CODE = "INJECTED_SKILL_WRITE";
 /**
 * Strict skill-name allowlist. Lowercase kebab so the folder name is a safe path
 * segment AND a valid Claude Code skill `name` (loader asserts folder == name).
-* All our injected skills (`gh-research`, `gh-orchestrate`, `gh-floor-keeper`)
-* pass.
+* All our injected skills (`gh-research`, `gh-orchestrate`, `gh-floor-keeper`,
+* `gh-first-mate`) pass.
 */
 const VALID_SKILL_NAME = /^[a-z][a-z0-9-]*$/;
 /**
@@ -3103,7 +3234,8 @@ async function writeInjectedSkill(name$1, md) {
 const INJECTED_SKILLS = [
 	RESEARCH_SKILL,
 	ORCHESTRATE_SKILL,
-	FLOOR_KEEPER_SKILL
+	FLOOR_KEEPER_SKILL,
+	FIRST_MATE_SKILL
 ];
 
 //#endregion
@@ -3585,7 +3717,7 @@ function initProxyFromEnv() {
 //#endregion
 //#region package.json
 var name = "github-router";
-var version$1 = "0.3.138";
+var version$1 = "0.3.151";
 
 //#endregion
 //#region src/lib/approval.ts
@@ -5323,6 +5455,7 @@ async function setupAndServe(options) {
 	state.extendedBetas = options.extendedBetas;
 	state.browseEnabled = options.browseEnabled || process.env.GH_ROUTER_ENABLE_BROWSE === "1";
 	state.fleetEnabled = options.fleetEnabled || process.env.GH_ROUTER_ENABLE_FLEET === "1";
+	state.agentsEnabled = options.agentsEnabled || process.env.GH_ROUTER_ENABLE_AGENTS === "1";
 	state.powerBrowseEnabled = options.powerBrowseEnabled || process.env.GH_ROUTER_ENABLE_POWER_BROWSE === "1";
 	if (state.powerBrowseEnabled) state.browseEnabled = true;
 	if (process.env.GH_ROUTER_BROWSER_NO_HUMANLIKE === "1") state.humanlikeForce = "off";
@@ -5336,6 +5469,7 @@ async function setupAndServe(options) {
 		state.githubToken = options.githubToken;
 		consola.info("Using provided GitHub token");
 	} else await setupGitHubToken();
+	if (state.agentsEnabled) await setupGitHubAgentToken();
 	await setupCopilotToken();
 	await cacheModels();
 	consola.debug(`Available models: \n${state.models?.data.map((model) => `- ${model.id}`).join("\n")}`);
@@ -5441,6 +5575,11 @@ const sharedServerArgs = {
 		default: false,
 		description: "Enable the fleet session-control MCP tools (mcp__fleet__*) on /mcp for driving sessions across remote ai-or-die instances over their tunnels. Off by default; also enabled with GH_ROUTER_ENABLE_FLEET=1."
 	},
+	agents: {
+		type: "boolean",
+		default: false,
+		description: "Enable the first-mate cloud-agent orchestration surface (mcp__first-mate__*): a durable controller that drives GitHub cloud coding agents (Copilot/Anthropic/OpenAI) across research/plan/implement/test/merge. Triggers a second GitHub device-login for a write-capable token (repo, workflow, read:org). Off by default; also enabled with GH_ROUTER_ENABLE_AGENTS=1."
+	},
 	"power-browse": {
 		type: "boolean",
 		default: false,
@@ -5494,6 +5633,7 @@ function parseSharedArgs(args) {
 		extendedBetas: args["extended-betas"],
 		browseEnabled: args.browse,
 		fleetEnabled: args.fleet,
+		agentsEnabled: args.agents,
 		powerBrowseEnabled: args["power-browse"],
 		humanlikeEnabled: args.humanlike
 	};
@@ -5625,6 +5765,11 @@ const claude = defineCommand({
 			default: false,
 			description: "Explicitly record consent for the structural Stop-gate in THIS repo (pinned to the repo's root-commit). The gate is ON BY DEFAULT when a harness is detected (consent-by-launching), so this is now mostly redundant; it stays for explicit/scripted use. Disable the gate entirely with GH_ROUTER_DISABLE_STOP_GATE=1."
 		},
+		"no-stop-gate": {
+			type: "boolean",
+			default: false,
+			description: "Disable the structural Stop-gate for THIS session (same effect as GH_ROUTER_DISABLE_STOP_GATE=1). Intended for driven/automated sessions where a blocking Stop hook would hang the turn-end while a fleet driver waits."
+		},
 		"auto-update": {
 			type: "boolean",
 			default: true,
@@ -5740,6 +5885,7 @@ const claude = defineCommand({
 			if (standInToolEnabled()) enabledGroups.push("decide");
 			if (browserToolsEnabled()) enabledGroups.push("browser");
 			if (fleetToolsEnabled()) enabledGroups.push("fleet");
+			if (agentToolsEnabled()) enabledGroups.push("first-mate");
 			const { keys: groupKeys, skipped: skippedGroups } = await resolveGroupKeysFromMirror(enabledGroups);
 			const runtime = await writePeerMcpRuntimeFiles(serverUrl, {
 				codexCli: backend === "cli",
@@ -5769,15 +5915,18 @@ const claude = defineCommand({
 			process$1.stderr.write(`Peer MCP wired (backend=${backend}, personas=[${personaNames}], subagent .md files=${runtime.agentMdPaths.length}, ${subagentVisibility}).${skippedNote}\n`);
 			const sessionCwd = process$1.cwd();
 			if (workerToolsEnabled()) {
+				const skillsToWrite = INJECTED_SKILLS.filter((s) => s.name !== "gh-first-mate" || agentToolsEnabled());
 				let skillsWritten = 0;
-				for (const s of INJECTED_SKILLS) if ((await writeInjectedSkill(s.name, s.md).catch(() => ({ written: false }))).written) skillsWritten++;
+				for (const s of skillsToWrite) if ((await writeInjectedSkill(s.name, s.md).catch(() => ({ written: false }))).written) skillsWritten++;
 				try {
 					await injectStopHookIntoSettingsFile(nodePath.join(PATHS.CLAUDE_CONFIG_DIR, "settings.json"), buildPromptSubmitHookCommand(process$1.execPath, process$1.argv[1]), "UserPromptSubmit", 45);
 				} catch (err) {
 					consola.warn(`Could not register the UserPromptSubmit hook: ${String(err)}`);
 				}
-				if (skillsWritten > 0) process$1.stderr.write(`Floor-raising skills injected (${skillsWritten}/${INJECTED_SKILLS.length}): /gh-research, /gh-orchestrate, /gh-floor-keeper.
-`);
+				if (skillsWritten > 0) {
+					const skillNames = skillsToWrite.map((s) => `/${s.name}`).join(", ");
+					process$1.stderr.write(`Injected skills (${skillsWritten}/${skillsToWrite.length}): ${skillNames}.\n`);
+				}
 			}
 			const aiordieSidecar = (process$1.env.AIORDIE_CLAUDE_BIND ?? "").trim();
 			if (aiordieSidecar.length > 0 && !aiordieSidecar.includes("\"")) try {
@@ -5808,7 +5957,7 @@ const claude = defineCommand({
 			} catch (err) {
 				consola.warn(`Could not record gate trust: ${String(err)}`);
 			}
-			const gateDisabled = parseBoolEnv(process$1.env.GH_ROUTER_DISABLE_STOP_GATE) === true;
+			const gateDisabled = stopGateDisabled(args);
 			const forceEnabled = parseBoolEnv(process$1.env.GH_ROUTER_ENABLE_STOP_GATE) === true;
 			const includeTests = parseBoolEnv(process$1.env.GH_ROUTER_STOP_GATE_RUN_TESTS) === true;
 			const gateRoot = await repoRoot(sessionCwd).catch(() => sessionCwd);
@@ -5910,6 +6059,7 @@ const claude = defineCommand({
 				standInAvailable: standInToolEnabled(),
 				browseAvailable: state.browseEnabled,
 				powerBrowseAvailable: state.powerBrowseEnabled,
+				agentToolsAvailable: agentToolsEnabled(),
 				groupKeys
 			});
 			extraArgs.push("--append-system-prompt", peerSnippet);