github-router 0.3.239 → 0.3.241

package/dist/{paths-Srxs-aR-.js → paths-BjTMI_xK.js}

@@ -2,63 +2,164 @@ import consola from "consola";
 import { randomBytes } from "node:crypto";
 import fs from "node:fs/promises";
 import os from "node:os";
-import nodePath from "node:path";
-
+import path from "node:path";
 //#region src/lib/paths.ts
 function appDir() {
-	return nodePath.join(os.homedir(), ".local", "share", "github-router");
+	return path.join(os.homedir(), ".local", "share", "github-router");
 }
 const PATHS = {
 	get APP_DIR() {
 		return appDir();
 	},
 	get GITHUB_TOKEN_PATH() {
-		return nodePath.join(appDir(), "github_token");
+		return path.join(appDir(), "github_token");
 	},
+	/**
+	* Second, WRITE-capable GitHub token for the first-mate
+	* agent-orchestration surface (`--agents`), stored apart from
+	* `github_token` (the Copilot App token). Minted by
+	* `setupGitHubAgentToken()` via a device-flow login against the GitHub
+	* CLI OAuth client. Mode 0o600.
+	*/
 	get GITHUB_AGENT_TOKEN_PATH() {
-		return nodePath.join(appDir(), "github_agent_token");
+		return path.join(appDir(), "github_agent_token");
 	},
+	/**
+	* Root of the durable first-mate fleet registry (`--agents`): the
+	* global `missions.json` mission index + per-repo `<owner>__<repo>.json`
+	* unit ledgers + the decisions/approvals ledger. Cross-launch and
+	* OUTSIDE the per-launch CLAUDE_CONFIG_DIR mirror (which is swept each
+	* launch) — the first mate must survive proxy restarts / context
+	* clears. Modeled on the worker-agent lifecycle ledger.
+	*/
 	get FIRST_MATE_DIR() {
-		return process.env.GH_ROUTER_FIRST_MATE_DIR ?? nodePath.join(appDir(), "first-mate");
+		return process.env.GH_ROUTER_FIRST_MATE_DIR ?? path.join(appDir(), "first-mate");
 	},
 	get ERROR_LOG_PATH() {
-		return nodePath.join(appDir(), "error.log");
+		return path.join(appDir(), "error.log");
 	},
+	/**
+	* Durable, router-owned directory for worker OVERFLOW artifacts. Two
+	* kinds land here, both kept OUT of the MCP result relay so they don't
+	* overflow Claude Code's 25k-token cap:
+	*   - `<pid>-<8hex>.patch` — a `worker_implement`/`worker_test` worktree
+	*     diff larger than `PREVIEW_CAP` (worker-agent/worktree.ts): the FULL
+	*     `git diff --binary --full-index` patch, written BEFORE the worktree
+	*     is removed so the (possibly binary) change stays `git apply`-able.
+	*   - `<pid>-<8hex>.txt` — any worker result over the relay byte cap
+	*     (worker-agent/relay-cap.ts `relaySafeText`): the full result text,
+	*     with a bounded preview + this path returned in its place.
+	* `sweepAgedWorkerDiffs()` reaps entries older than 7 days on each write.
+	* Cross-launch cache (like TOOLBELT_BIN_DIR) — deliberately OUTSIDE the
+	* per-launch CLAUDE_CONFIG_DIR mirror and OUTSIDE the user's repo.
+	*/
 	get WORKER_DIFFS_DIR() {
-		return nodePath.join(appDir(), "worker-diffs");
+		return path.join(appDir(), "worker-diffs");
 	},
+	/**
+	* Isolated CODEX_HOME for the spawned Codex CLI. Masks any cached
+	* ChatGPT subscription login (openai/codex#2733 — cached login can
+	* override OPENAI_API_KEY) so the proxy's dummy key is authoritative.
+	*/
 	get CODEX_HOME() {
-		return nodePath.join(appDir(), "codex-isolated");
+		return path.join(appDir(), "codex-isolated");
 	},
+	/**
+	* Router-owned install + data dir for CloudCLI (the `serve` browser control
+	* plane). Holds the pinned local `npm install` (node_modules/), an isolated
+	* `auth.db` (so we never collide with a user's standalone CloudCLI DB), and
+	* the persisted `.serve-secret.json` login. See docs/serve-control-plane.md.
+	*/
 	get CLOUDCLI_HOME() {
-		return nodePath.join(appDir(), "cloudcli");
+		return path.join(appDir(), "cloudcli");
 	},
+	/**
+	* Runtime tempfiles for the per-launch peer-MCP wiring (the
+	* `--mcp-config` JSON and `--agents` JSON written before spawning
+	* Claude Code). Mode 0o700 to match the security review's mandate;
+	* cleaned on shutdown via the per-launch `cleanup()`, plus a
+	* boot-time sweep of stale files (dead PIDs, >24h old).
+	*/
 	get CLAUDE_RUNTIME_DIR() {
-		return nodePath.join(appDir(), "runtime");
+		return path.join(appDir(), "runtime");
 	},
+	/**
+	* Router-owned CLAUDE_CONFIG_DIR. The spawned Claude Code (and any
+	* teammates it spawns via the agent-teams primitive) reads its
+	* config — including `.credentials.json` — from this dir. We
+	* snapshot-copy the user's `~/.claude/` here at startup (excluding
+	* `.credentials.json` and volatile state), then write our own
+	* synthetic Console OAuth credential. The teammate-spawn allowlist
+	* propagates `CLAUDE_CONFIG_DIR` to children, so teammates find the
+	* synthetic credential and authenticate instead of falling into the
+	* "Not logged in · Run /login" gate that would otherwise leave
+	* them mute. See `ensureClaudeConfigMirror` below.
+	*
+	* Per-launch dir: `<appDir>/claude-config/<pid>-<8 hex>`. Two
+	* concurrent `github-router claude` launches each get their own
+	* isolated mirror, so per-launch state (synthetic credential,
+	* snapshot copy of `~/.claude/`, future per-launch `.claude.json`
+	* mutation with the peer-MCP entry) cannot cross-talk. The
+	* per-launch suffix is cached on first access (see
+	* `claudeConfigDirSuffix()`) so all callers within a single proxy
+	* lifetime see the same value. Boot-time `sweepStaleClaudeConfigMirrors`
+	* reaps mirrors from crashed prior PIDs.
+	*/
 	get CLAUDE_CONFIG_DIR() {
-		return nodePath.join(appDir(), "claude-config", claudeConfigDirSuffix());
+		return path.join(appDir(), "claude-config", claudeConfigDirSuffix());
 	},
+	/**
+	* Durable router-owned `bin/` for the LLM toolbelt — curated CLI
+	* tools (rg/fd/jq/sd/sg/yq) materialized here and prepended to the
+	* spawned agent's PATH. Intentionally OUTSIDE the per-launch
+	* CLAUDE_CONFIG_DIR mirror (which is swept per launch): the toolbelt
+	* is a cross-launch cache, like `last-update-check`.
+	*/
 	get TOOLBELT_BIN_DIR() {
-		return nodePath.join(appDir(), "bin");
+		return path.join(appDir(), "bin");
 	},
+	/**
+	* Root of the github-router-managed ColBERT semantic-search sidecar
+	* (the `--semantic-search` opt-in). Everything heavy that the
+	* `colgrep` child needs is provisioned, SHA-verified, and stored here
+	* by the router — never in the user's repo, never in colgrep's own
+	* global `%APPDATA%\colgrep` / `~/.config/colgrep`. Cross-launch cache
+	* (like TOOLBELT_BIN_DIR), deliberately OUTSIDE the per-launch
+	* CLAUDE_CONFIG_DIR mirror.
+	*
+	* Layout (see docs/research/colbert-sidecar-design.md §4):
+	*   colbert/
+	*     bin/colgrep[.exe]                  # provisioned binary
+	*     models/LateOn-Code-edge/<rev>/     # 5 model files
+	*     onnxruntime/1.23.0/cpu/<libname>   # ORT dylib (ORT_DYLIB_PATH)
+	*     indices/                           # === COLGREP_DATA_DIR ===
+	*       <project>-<xxh3(path|model)>/    # colgrep-owned per-(path,model)
+	*       .gh-router-meta/<hash>.json      # router-owned sidecar metadata
+	*/
 	get COLBERT_DIR() {
-		return nodePath.join(appDir(), "colbert");
+		return path.join(appDir(), "colbert");
 	},
 	get COLBERT_BIN_DIR() {
-		return nodePath.join(appDir(), "colbert", "bin");
+		return path.join(appDir(), "colbert", "bin");
 	},
 	get COLBERT_MODELS_DIR() {
-		return nodePath.join(appDir(), "colbert", "models");
+		return path.join(appDir(), "colbert", "models");
 	},
 	get COLBERT_ORT_DIR() {
-		return nodePath.join(appDir(), "colbert", "onnxruntime");
+		return path.join(appDir(), "colbert", "onnxruntime");
 	},
+	/**
+	* Value passed to colgrep as `COLGREP_DATA_DIR`. colgrep keys the
+	* physical index dir by `xxh3(canonical_project_path | model)` under
+	* here, so every distinct workspace gets its own index dir for free.
+	* The router-owned freshness sidecar lives at
+	* `<COLBERT_INDICES_DIR>/.gh-router-meta/<hash>.json`.
+	*/
 	get COLBERT_INDICES_DIR() {
-		return nodePath.join(appDir(), "colbert", "indices");
+		return path.join(appDir(), "colbert", "indices");
 	},
 	get COLBERT_META_DIR() {
-		return nodePath.join(appDir(), "colbert", "indices", ".gh-router-meta");
+		return path.join(appDir(), "colbert", "indices", ".gh-router-meta");
 	}
 };
 /**
@@ -97,10 +198,10 @@ function claudeConfigDirSuffix() {
 * refusal lives at the consuming helper.
 */
 function isUnderClaudeConfigMirror(target) {
-	const resolvedRoot = nodePath.resolve(PATHS.CLAUDE_CONFIG_DIR);
-	const resolvedTarget = nodePath.resolve(target);
+	const resolvedRoot = path.resolve(PATHS.CLAUDE_CONFIG_DIR);
+	const resolvedTarget = path.resolve(target);
 	if (resolvedTarget === resolvedRoot) return true;
-	return resolvedTarget.startsWith(resolvedRoot + nodePath.sep);
+	return resolvedTarget.startsWith(resolvedRoot + path.sep);
 }
 async function ensurePaths() {
 	await fs.mkdir(PATHS.APP_DIR, { recursive: true });
@@ -120,17 +221,17 @@ async function ensurePaths() {
 		consola.debug("Peer-agent .md sweep skipped:", err);
 	});
 	await (async () => {
-		await (await import("./lifecycle-DF2ygqz8.js")).sweepStaleWorktreesAtBoot();
+		await (await import("./lifecycle-hzPwXc3I.js")).sweepStaleWorktreesAtBoot();
 	})().catch((err) => {
 		consola.debug("Worker worktree boot sweep skipped:", err);
 	});
 	await (async () => {
-		await (await import("./lifecycle-wIIt0wGo.js")).sweepStaleColbertMetaAtBoot();
+		await (await import("./lifecycle-0rXrwjWk.js")).sweepStaleColbertMetaAtBoot();
 	})().catch((err) => {
 		consola.debug("ColBERT meta boot sweep skipped:", err);
 	});
 }
-const CLAUDE_HOME_POLICY = new Map([
+const CLAUDE_HOME_POLICY = /* @__PURE__ */ new Map([
 	[".credentials.json", "ISOLATED"],
 	[".credentials.json.lock", "ISOLATED"],
 	[".oauth_refresh.lock", "ISOLATED"],
@@ -300,7 +401,7 @@ const SYNTHETIC_CLAUDE_JSON_FIELDS = {
 */
 async function ensureClaudeConfigMirror(opts = {}) {
 	const realHome = opts.realHome ?? os.homedir();
-	const sourceDir = nodePath.join(realHome, ".claude");
+	const sourceDir = path.join(realHome, ".claude");
 	const targetDir = PATHS.CLAUDE_CONFIG_DIR;
 	await fs.mkdir(targetDir, {
 		recursive: true,
@@ -314,11 +415,11 @@ async function ensureClaudeConfigMirror(opts = {}) {
 		if (err.code !== "ENOENT") consola.debug(`ensureClaudeConfigMirror: cannot stat ${sourceDir}:`, err);
 	}
 	if (sourceExists) await mirrorDirRecursive(sourceDir, targetDir, "");
-	await fs.mkdir(nodePath.join(targetDir, "agents"), { recursive: true });
+	await fs.mkdir(path.join(targetDir, "agents"), { recursive: true });
 	for (const name of SHARED_TOPLEVEL_NAMES) await ensureSharedSymlink(name, sourceDir, targetDir).catch((err) => {
 		consola.debug(`ensureClaudeConfigMirror: SHARED symlink for ${name} skipped:`, err);
 	});
-	const credentialsPath = nodePath.join(targetDir, ".credentials.json");
+	const credentialsPath = path.join(targetDir, ".credentials.json");
 	const desiredJson = JSON.stringify(SYNTHETIC_CREDENTIAL, null, 2);
 	let needsWrite = true;
 	try {
@@ -345,7 +446,7 @@ async function ensureClaudeConfigMirror(opts = {}) {
 	await chmodIfPossible(credentialsPath, 384);
 	await injectSyntheticClaudeJsonFields(targetDir, sourceDir, realHome);
 	await assertOnboardingGateInjected(targetDir);
-	const markerPath = nodePath.join(targetDir, MANAGED_MARKER_FILENAME);
+	const markerPath = path.join(targetDir, MANAGED_MARKER_FILENAME);
 	let markerExists = false;
 	try {
 		const markerStat = await fs.lstat(markerPath);
@@ -437,7 +538,7 @@ async function ensureClaudeConfigMirror(opts = {}) {
 * degradation path is converted to a fail-loud launch error.
 */
 async function injectSyntheticClaudeJsonFields(targetDir, sourceDir, realHome) {
-	const claudeJsonPath = nodePath.join(targetDir, ".claude.json");
+	const claudeJsonPath = path.join(targetDir, ".claude.json");
 	let mirrorIsRegularFile = false;
 	try {
 		const mirrorStat = await fs.lstat(claudeJsonPath);
@@ -454,8 +555,8 @@ async function injectSyntheticClaudeJsonFields(targetDir, sourceDir, realHome) {
 	}
 	let existing = {};
 	let selectedSource = null;
-	const homeLevelClaudeJson = nodePath.join(realHome, ".claude.json");
-	const subdirClaudeJson = nodePath.join(sourceDir, ".claude.json");
+	const homeLevelClaudeJson = path.join(realHome, ".claude.json");
+	const subdirClaudeJson = path.join(sourceDir, ".claude.json");
 	const sourceCandidates = [
 		homeLevelClaudeJson,
 		mirrorIsRegularFile ? claudeJsonPath : null,
@@ -464,9 +565,9 @@ async function injectSyntheticClaudeJsonFields(targetDir, sourceDir, realHome) {
 	for (const sourceCandidate of sourceCandidates) {
 		if (sourceCandidate === null) continue;
 		try {
-			const stat$1 = await fs.stat(sourceCandidate);
-			if (stat$1.size > MAX_CLAUDE_JSON_BYTES) {
-				consola.warn(`ensureClaudeConfigMirror: ${sourceCandidate} is ${stat$1.size} bytes (> ${MAX_CLAUDE_JSON_BYTES} cap); skipping this source to avoid OOM. Inspect for accidental log/state accumulation.`);
+			const stat = await fs.stat(sourceCandidate);
+			if (stat.size > MAX_CLAUDE_JSON_BYTES) {
+				consola.warn(`ensureClaudeConfigMirror: ${sourceCandidate} is ${stat.size} bytes (> ${MAX_CLAUDE_JSON_BYTES} cap); skipping this source to avoid OOM. Inspect for accidental log/state accumulation.`);
 				continue;
 			}
 			const parsed = parseExistingClaudeJson(await fs.readFile(sourceCandidate, "utf8"), sourceCandidate);
@@ -521,7 +622,7 @@ async function injectSyntheticClaudeJsonFields(targetDir, sourceDir, realHome) {
 * blocks the event loop and risks OOM. 50 MiB is comfortably above
 * any legitimate Claude Code state and well below typical RSS budgets.
 */
-const MAX_CLAUDE_JSON_BYTES = 50 * 1024 * 1024;
+const MAX_CLAUDE_JSON_BYTES = 52428800;
 /**
 * Structural check for `oauthAccount`: must be a non-null, non-array
 * object whose `accountUuid` AND `organizationUuid` are non-empty
@@ -579,19 +680,19 @@ function parseExistingClaudeJson(raw, contextPath) {
 * upward by hand.
 */
 async function assertOnboardingGateInjected(targetDir) {
-	const claudeJsonPath = nodePath.join(targetDir, ".claude.json");
+	const claudeJsonPath = path.join(targetDir, ".claude.json");
 	let lst;
 	try {
 		lst = await fs.lstat(claudeJsonPath);
 	} catch (err) {
-		throw new Error(`ensureClaudeConfigMirror: postcondition failed — cannot lstat ${claudeJsonPath} after injection (synthetic onboarding-skip fields are required to prevent Claude Code's first-launch wizard, which would defeat the synthetic credential): ${err.message}`);
+		throw new Error(`ensureClaudeConfigMirror: postcondition failed — cannot lstat ${claudeJsonPath} after injection (synthetic onboarding-skip fields are required to prevent Claude Code's first-launch wizard, which would defeat the synthetic credential): ${err.message}`, { cause: err });
 	}
 	if (!lst.isFile()) throw new Error(`ensureClaudeConfigMirror: postcondition failed — ${claudeJsonPath} exists but is not a regular file (mode=${lst.mode.toString(8)}). Check the preceding warn-level log lines for the underlying cause; without a regular file holding the gate fields, Claude Code's first-launch wizard fires and defeats the synthetic credential.`);
 	let raw;
 	try {
 		raw = await fs.readFile(claudeJsonPath, "utf8");
 	} catch (err) {
-		throw new Error(`ensureClaudeConfigMirror: postcondition failed — cannot read ${claudeJsonPath} after injection: ${err.message}`);
+		throw new Error(`ensureClaudeConfigMirror: postcondition failed — cannot read ${claudeJsonPath} after injection: ${err.message}`, { cause: err });
 	}
 	let parsed;
 	try {
@@ -599,7 +700,7 @@ async function assertOnboardingGateInjected(targetDir) {
 		if (!json || typeof json !== "object" || Array.isArray(json)) throw new Error(`parsed to non-object (typeof=${typeof json})`);
 		parsed = json;
 	} catch (err) {
-		throw new Error(`ensureClaudeConfigMirror: postcondition failed — ${claudeJsonPath} is not a valid JSON object after injection: ${err.message}`);
+		throw new Error(`ensureClaudeConfigMirror: postcondition failed — ${claudeJsonPath} is not a valid JSON object after injection: ${err.message}`, { cause: err });
 	}
 	if (parsed.hasCompletedOnboarding !== true || parsed.bypassPermissionsModeAccepted !== true) throw new Error(`ensureClaudeConfigMirror: postcondition failed — ${claudeJsonPath} is missing required gate fields after injection (hasCompletedOnboarding=${String(parsed.hasCompletedOnboarding)}, bypassPermissionsModeAccepted=${String(parsed.bypassPermissionsModeAccepted)}). Check the preceding warn-level log lines for the underlying cause; without these fields Claude Code's first-launch wizard fires and defeats the synthetic credential.`);
 	if (!isUsableOauthAccount(parsed.oauthAccount)) throw new Error(`ensureClaudeConfigMirror: postcondition failed — ${claudeJsonPath} has invalid oauthAccount after injection (got ${JSON.stringify(parsed.oauthAccount)}). The synthetic identity blob is required so Claude Code's identity-vs-token cross-checks don't trigger a re-login that defeats the synthetic credential.`);
@@ -617,7 +718,7 @@ async function assertOnboardingGateInjected(targetDir) {
 * - Files copy only if source mtime > target mtime (idempotent).
 */
 async function mirrorDirRecursive(sourceDir, targetDir, relPath) {
-	const sourcePath = nodePath.join(sourceDir, relPath);
+	const sourcePath = path.join(sourceDir, relPath);
 	let entries;
 	try {
 		entries = await fs.readdir(sourcePath);
@@ -631,10 +732,10 @@ async function mirrorDirRecursive(sourceDir, targetDir, relPath) {
 			const policy = policyFor(name);
 			if (policy === "ISOLATED" || policy === "SHARED") continue;
 		}
-		const childRel = relPath === "" ? name : nodePath.join(relPath, name);
+		const childRel = relPath === "" ? name : path.join(relPath, name);
 		if (relPath === "agents" && PEER_AGENT_MD_FILENAME.test(name)) continue;
-		const childSource = nodePath.join(sourceDir, childRel);
-		const childTarget = nodePath.join(targetDir, childRel);
+		const childSource = path.join(sourceDir, childRel);
+		const childTarget = path.join(targetDir, childRel);
 		let stats;
 		try {
 			stats = await fs.lstat(childSource);
@@ -698,8 +799,8 @@ async function mirrorDirRecursive(sourceDir, targetDir, relPath) {
 * Claude Code's writes through the symlink don't fail with ENOENT.
 */
 async function ensureSharedSymlink(name, sourceDir, mirrorDir) {
-	const sourcePath = nodePath.join(sourceDir, name);
-	const mirrorPath = nodePath.join(mirrorDir, name);
+	const sourcePath = path.join(sourceDir, name);
+	const mirrorPath = path.join(mirrorDir, name);
 	try {
 		await fs.mkdir(sourcePath, { recursive: true });
 	} catch (err) {
@@ -797,7 +898,7 @@ async function writeArtifactCredsToMirror(insecureTLS, env = process.env) {
 	const token = env.AIORDIE_TOKEN;
 	const sessionId = env.AIORDIE_SESSION_ID;
 	if (!baseUrl || !token || !sessionId) return;
-	const target = nodePath.join(PATHS.CLAUDE_CONFIG_DIR, ".aiordie-artifact.json");
+	const target = path.join(PATHS.CLAUDE_CONFIG_DIR, ".aiordie-artifact.json");
 	const tempPath = `${target}.${process.pid}.tmp`;
 	const body = JSON.stringify({
 		baseUrl,
@@ -848,7 +949,7 @@ async function sweepStaleRuntimeFiles() {
 		const match = /^peer-(?:mcp|agents)-(\d+)(?:-[0-9a-f]+)?\.json$/.exec(name);
 		if (!match) continue;
 		const pid = Number.parseInt(match[1], 10);
-		const filePath = nodePath.join(dir, name);
+		const filePath = path.join(dir, name);
 		if (isPidAlive(pid)) continue;
 		await fs.unlink(filePath).catch(() => {});
 	}
@@ -899,7 +1000,7 @@ function isPidAlive(pid) {
 * `mirrorDirRecursive`, which skips them so they never register.
 */
 async function sweepStalePeerAgentMdFiles() {
-	const dir = nodePath.join(PATHS.CLAUDE_CONFIG_DIR, "agents");
+	const dir = path.join(PATHS.CLAUDE_CONFIG_DIR, "agents");
 	let entries;
 	try {
 		entries = await fs.readdir(dir);
@@ -911,7 +1012,7 @@ async function sweepStalePeerAgentMdFiles() {
 		const match = PEER_AGENT_MD_FILENAME.exec(name);
 		if (!match) continue;
 		if (isPidAlive(Number.parseInt(match[1], 10))) continue;
-		await fs.unlink(nodePath.join(dir, name)).catch(() => {});
+		await fs.unlink(path.join(dir, name)).catch(() => {});
 	}
 }
 /**
@@ -965,7 +1066,7 @@ const CLAUDE_CONFIG_MIRROR_DIR = /^(\d+)-[0-9a-f]{8}$/;
 * Tolerates missing parent dir (first-ever launch, or user wiped it).
 */
 async function sweepStaleClaudeConfigMirrors() {
-	const parent = nodePath.join(appDir(), "claude-config");
+	const parent = path.join(appDir(), "claude-config");
 	let entries;
 	try {
 		entries = await fs.readdir(parent);
@@ -977,7 +1078,7 @@ async function sweepStaleClaudeConfigMirrors() {
 		const match = CLAUDE_CONFIG_MIRROR_DIR.exec(name);
 		if (!match) continue;
 		if (isPidAlive(Number.parseInt(match[1], 10))) continue;
-		await fs.rm(nodePath.join(parent, name), {
+		await fs.rm(path.join(parent, name), {
 			recursive: true,
 			force: true
 		}).catch((err) => {
@@ -1006,7 +1107,7 @@ async function removeOwnClaudeConfigMirror() {
 		consola.debug(`removeOwnClaudeConfigMirror: rm ${dir} skipped:`, err);
 	});
 }
-
 //#endregion
 export { isUnderClaudeConfigMirror as a, sweepStalePeerAgentMdFiles as c, writeRuntimeFileSecure as d, ensurePaths as i, sweepStaleRuntimeFiles as l, PEER_AGENT_MD_FILENAME as n, removeOwnClaudeConfigMirror as o, ensureClaudeConfigMirror as r, sweepStaleClaudeConfigMirrors as s, PATHS as t, writeArtifactCredsToMirror as u };
-//# sourceMappingURL=paths-Srxs-aR-.js.map
+
+//# sourceMappingURL=paths-BjTMI_xK.js.map