github-router 0.3.249 → 0.3.255

package/dist/mcp-workspace-header-CGJbNeHb.js

@@ -0,0 +1,21 @@
+//#region src/lib/mcp-workspace-header.ts
+/** Header the per-session MCP headersHelper emits, carrying the calling Claude
+*  session's working directory. The /mcp handler uses it as the default
+*  `workspace` for repo-scoped tools so a machine-wide `serve` targets the
+*  active repo, not the proxy launch cwd. */
+const MCP_WORKSPACE_HEADER = "X-GH-Workspace";
+/** stdout JSON the headersHelper prints; Claude merges it into the connection
+*  headers. `cwd` is the helper's own process cwd = the session's project dir. */
+function buildWorkspaceHeaderJson(cwd) {
+	return JSON.stringify({ [MCP_WORKSPACE_HEADER]: cwd });
+}
+/** Command string Claude runs as the headersHelper. Mirrors
+*  buildPromptSubmitHookCommand's quoting (src/lib/orchestration/prompt-submit-hook.ts). */
+function buildWorkspaceHeaderHelperCommand(execPath, scriptPath) {
+	const q = (s) => `"${s}"`;
+	return scriptPath && scriptPath !== execPath ? `${q(execPath)} ${q(scriptPath)} internal-workspace-header` : `${q(execPath)} internal-workspace-header`;
+}
+//#endregion
+export { buildWorkspaceHeaderHelperCommand as n, buildWorkspaceHeaderJson as r, MCP_WORKSPACE_HEADER as t };
+
+//# sourceMappingURL=mcp-workspace-header-CGJbNeHb.js.map

package/dist/mcp-workspace-header-CGJbNeHb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-workspace-header-CGJbNeHb.js","names":[],"sources":["../src/lib/mcp-workspace-header.ts"],"sourcesContent":["/** Header the per-session MCP headersHelper emits, carrying the calling Claude\n *  session's working directory. The /mcp handler uses it as the default\n *  `workspace` for repo-scoped tools so a machine-wide `serve` targets the\n *  active repo, not the proxy launch cwd. */\nexport const MCP_WORKSPACE_HEADER = \"X-GH-Workspace\"\n\n/** stdout JSON the headersHelper prints; Claude merges it into the connection\n *  headers. `cwd` is the helper's own process cwd = the session's project dir. */\nexport function buildWorkspaceHeaderJson(cwd: string): string {\n  return JSON.stringify({ [MCP_WORKSPACE_HEADER]: cwd })\n}\n\n/** Command string Claude runs as the headersHelper. Mirrors\n *  buildPromptSubmitHookCommand's quoting (src/lib/orchestration/prompt-submit-hook.ts). */\nexport function buildWorkspaceHeaderHelperCommand(execPath: string, scriptPath: string | undefined): string {\n  const q = (s: string): string => `\"${s}\"`\n  return scriptPath && scriptPath !== execPath\n    ? `${q(execPath)} ${q(scriptPath)} internal-workspace-header`\n    : `${q(execPath)} internal-workspace-header`\n}\n"],"mappings":";;;;;AAIA,MAAa,uBAAuB;;;AAIpC,SAAgB,yBAAyB,KAAqB;CAC5D,OAAO,KAAK,UAAU,GAAG,uBAAuB,IAAI,CAAC;AACvD;;;AAIA,SAAgB,kCAAkC,UAAkB,YAAwC;CAC1G,MAAM,KAAK,MAAsB,IAAI,EAAE;CACvC,OAAO,cAAc,eAAe,WAChC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,8BAChC,GAAG,EAAE,QAAQ,EAAE;AACrB"}

package/dist/models-B6UnGyRo.js

@@ -0,0 +1,158 @@
+import { i as ensurePaths } from "./paths-C1cLZ7Ga.js";
+import { p as getModels, r as setupGitHubToken, t as setupCopilotToken } from "./token-R2ocFC3M.js";
+import { defineCommand } from "citty";
+import consola from "consola";
+//#region src/models.ts
+const models = defineCommand({
+	meta: {
+		name: "models",
+		description: "List available GitHub Copilot models and their capabilities. Pass an optional pattern to filter (case-insensitive substring match on id, name, vendor, family)."
+	},
+	args: {
+		pattern: {
+			type: "positional",
+			required: false,
+			description: "Substring to filter models by (matches id, name, vendor, or family)."
+		},
+		json: {
+			type: "boolean",
+			default: false,
+			description: "Emit raw JSON instead of the pretty layout."
+		}
+	},
+	async run({ args }) {
+		await ensurePaths();
+		await setupGitHubToken();
+		try {
+			await setupCopilotToken();
+		} catch (err) {
+			consola.error("Failed to obtain Copilot token:", err);
+			process.exit(1);
+		}
+		let catalog;
+		try {
+			catalog = await getModels();
+		} catch (err) {
+			consola.error("Failed to fetch Copilot model catalog:", err);
+			process.exit(1);
+		}
+		const all = catalog.data;
+		const pattern = args.pattern?.toString().trim();
+		const filtered = pattern ? filterModels(all, pattern) : all;
+		if (args.json) {
+			process.stdout.write(`${JSON.stringify(filtered, null, 2)}\n`);
+			return;
+		}
+		if (filtered.length === 0) {
+			consola.warn(`No models matched "${pattern}". ${all.length} models available — try a different substring or run without an argument to list everything.`);
+			process.exit(1);
+		}
+		const grouped = groupByVendor(filtered);
+		const lines = [];
+		const header = pattern ? `${filtered.length}/${all.length} models match "${pattern}"` : `${all.length} models available`;
+		lines.push(header);
+		lines.push("");
+		for (const [vendor, list] of grouped) {
+			lines.push(`▾ ${vendor} (${list.length})`);
+			for (const model of list) lines.push(...formatModel(model));
+			lines.push("");
+		}
+		process.stdout.write(lines.join("\n"));
+	}
+});
+function filterModels(models, pattern) {
+	const needle = pattern.toLowerCase();
+	return models.filter((m) => {
+		return [
+			m.id,
+			m.name,
+			m.vendor,
+			m.capabilities.family,
+			m.capabilities.type,
+			m.model_picker_category ?? ""
+		].join(" ").toLowerCase().includes(needle);
+	});
+}
+function groupByVendor(models) {
+	const map = /* @__PURE__ */ new Map();
+	for (const m of models) {
+		const key = m.vendor || "(unknown vendor)";
+		const bucket = map.get(key);
+		if (bucket) bucket.push(m);
+		else map.set(key, [m]);
+	}
+	return [...map.entries()].sort(([a], [b]) => a.localeCompare(b));
+}
+function formatModel(model) {
+	const lines = [];
+	const tags = [];
+	if (model.preview) tags.push("preview");
+	if (model.is_chat_default) tags.push("chat-default");
+	if (model.is_chat_fallback) tags.push("chat-fallback");
+	if (model.billing?.is_premium) tags.push("premium");
+	if (model.billing?.restricted_to?.length) tags.push(`restricted:${model.billing.restricted_to.join("/")}`);
+	if (model.policy && model.policy.state !== "enabled") tags.push(`policy:${model.policy.state}`);
+	const tagStr = tags.length > 0 ? ` [${tags.join(", ")}]` : "";
+	lines.push(`  • ${model.id}${tagStr}`);
+	if (model.name && model.name !== model.id) lines.push(`      name: ${model.name}`);
+	const meta = [`family: ${model.capabilities.family}`, `type: ${model.capabilities.type}`];
+	if (model.capabilities.tokenizer) meta.push(`tokenizer: ${model.capabilities.tokenizer}`);
+	if (model.version) meta.push(`version: ${model.version}`);
+	lines.push(`      ${meta.join("  ·  ")}`);
+	const limits = model.capabilities.limits;
+	const limitParts = [];
+	if (limits) {
+		if (limits.max_context_window_tokens) limitParts.push(`ctx ${formatTokens(limits.max_context_window_tokens)}`);
+		else if (limits.max_prompt_tokens) limitParts.push(`prompt ${formatTokens(limits.max_prompt_tokens)}`);
+		if (limits.max_output_tokens) limitParts.push(`out ${formatTokens(limits.max_output_tokens)}`);
+		if (limits.max_non_streaming_output_tokens && limits.max_non_streaming_output_tokens !== limits.max_output_tokens) limitParts.push(`out-non-stream ${formatTokens(limits.max_non_streaming_output_tokens)}`);
+		if (limits.max_inputs) limitParts.push(`inputs ${limits.max_inputs}`);
+		if (limits.vision?.max_prompt_images) limitParts.push(`images ${limits.vision.max_prompt_images}`);
+	}
+	if (limitParts.length > 0) lines.push(`      limits: ${limitParts.join("  ·  ")}`);
+	const supports = model.capabilities.supports;
+	const supportFlags = [];
+	if (supports) {
+		if (supports.tool_calls) supportFlags.push("tools");
+		if (supports.parallel_tool_calls) supportFlags.push("parallel-tools");
+		if (supports.streaming) supportFlags.push("streaming");
+		if (supports.vision) supportFlags.push("vision");
+		if (supports.structured_outputs) supportFlags.push("structured-outputs");
+		if (supports.dimensions) supportFlags.push("dimensions");
+		if (supports.adaptive_thinking) {
+			const min = supports.min_thinking_budget;
+			const max = supports.max_thinking_budget;
+			const range = min !== void 0 && max !== void 0 ? `(${formatTokens(min)}-${formatTokens(max)})` : "";
+			supportFlags.push(`adaptive-thinking${range}`);
+		}
+		if (supports.reasoning_effort && supports.reasoning_effort.length > 0) supportFlags.push(`reasoning:${supports.reasoning_effort.join("/")}`);
+	}
+	if (supportFlags.length > 0) lines.push(`      supports: ${supportFlags.join(", ")}`);
+	if (model.supported_endpoints && model.supported_endpoints.length > 0) lines.push(`      endpoints: ${model.supported_endpoints.join(", ")}`);
+	if (model.billing) {
+		const billParts = [];
+		if (model.billing.is_premium) billParts.push("premium");
+		if (typeof model.billing.multiplier === "number") billParts.push(`×${model.billing.multiplier}`);
+		if (billParts.length > 0) lines.push(`      billing: ${billParts.join(" ")}`);
+	}
+	return lines;
+}
+/**
+* Format a token count in a compact human-readable form: `1024` →
+* `1k`, `4096` → `4k`, `131072` → `128k`, `1048576` → `1M`. Prefer
+* binary multiples (mebi, kibi) since Claude Code / Copilot context
+* windows are reported in binary units (`1M context` = 1024 × 1024
+* tokens). Fall back to decimal (`64k` for `64000`) when the value
+* is a clean decimal multiple but not binary.
+*/
+function formatTokens(n) {
+	if (n >= 1048576 && n % 1048576 === 0) return `${n / 1048576}M`;
+	if (n >= 1024 && n % 1024 === 0) return `${n / 1024}k`;
+	if (n >= 1e6 && n % 1e6 === 0) return `${n / 1e6}M`;
+	if (n >= 1e3 && n % 1e3 === 0) return `${n / 1e3}k`;
+	return `${n}`;
+}
+//#endregion
+export { models };
+
+//# sourceMappingURL=models-B6UnGyRo.js.map

package/dist/models-B6UnGyRo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models-B6UnGyRo.js","names":[],"sources":["../src/models.ts"],"sourcesContent":["import { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport { ensurePaths } from \"./lib/paths\"\nimport { setupCopilotToken, setupGitHubToken } from \"./lib/token\"\nimport { getModels, type Model } from \"./services/copilot/get-models\"\n\nexport const models = defineCommand({\n  meta: {\n    name: \"models\",\n    description:\n      \"List available GitHub Copilot models and their capabilities. Pass an optional pattern to filter (case-insensitive substring match on id, name, vendor, family).\",\n  },\n  args: {\n    pattern: {\n      type: \"positional\",\n      required: false,\n      description:\n        \"Substring to filter models by (matches id, name, vendor, or family).\",\n    },\n    json: {\n      type: \"boolean\",\n      default: false,\n      description: \"Emit raw JSON instead of the pretty layout.\",\n    },\n  },\n  async run({ args }) {\n    await ensurePaths()\n    await setupGitHubToken()\n    try {\n      await setupCopilotToken()\n    } catch (err) {\n      consola.error(\"Failed to obtain Copilot token:\", err)\n      process.exit(1)\n    }\n\n    let catalog: Awaited<ReturnType<typeof getModels>>\n    try {\n      catalog = await getModels()\n    } catch (err) {\n      consola.error(\"Failed to fetch Copilot model catalog:\", err)\n      process.exit(1)\n    }\n\n    const all = catalog.data\n    const pattern = args.pattern?.toString().trim()\n    const filtered = pattern ? filterModels(all, pattern) : all\n\n    if (args.json) {\n      process.stdout.write(`${JSON.stringify(filtered, null, 2)}\\n`)\n      return\n    }\n\n    if (filtered.length === 0) {\n      consola.warn(\n        `No models matched \"${pattern}\". ${all.length} models available — try a different substring or run without an argument to list everything.`,\n      )\n      process.exit(1)\n    }\n\n    const grouped = groupByVendor(filtered)\n    const lines: Array<string> = []\n    const header = pattern\n      ? `${filtered.length}/${all.length} models match \"${pattern}\"`\n      : `${all.length} models available`\n    lines.push(header)\n    lines.push(\"\")\n    for (const [vendor, list] of grouped) {\n      lines.push(`▾ ${vendor} (${list.length})`)\n      for (const model of list) {\n        lines.push(...formatModel(model))\n      }\n      lines.push(\"\")\n    }\n    process.stdout.write(lines.join(\"\\n\"))\n  },\n})\n\nfunction filterModels(models: Array<Model>, pattern: string): Array<Model> {\n  const needle = pattern.toLowerCase()\n  return models.filter((m) => {\n    const haystack = [\n      m.id,\n      m.name,\n      m.vendor,\n      m.capabilities.family,\n      m.capabilities.type,\n      m.model_picker_category ?? \"\",\n    ]\n      .join(\" \")\n      .toLowerCase()\n    return haystack.includes(needle)\n  })\n}\n\nfunction groupByVendor(models: Array<Model>): Array<[string, Array<Model>]> {\n  const map = new Map<string, Array<Model>>()\n  for (const m of models) {\n    const key = m.vendor || \"(unknown vendor)\"\n    const bucket = map.get(key)\n    if (bucket) bucket.push(m)\n    else map.set(key, [m])\n  }\n  // Stable vendor order: alphabetical for predictability.\n  return [...map.entries()].sort(([a], [b]) => a.localeCompare(b))\n}\n\n/**\n * Test-only exports. Not part of the public CLI surface — kept out of\n * the default export so they don't show up in IDE autocomplete on\n * `import { ... } from \"github-router/models\"` consumers.\n */\nexport const __testing = { filterModels, groupByVendor, formatModel, formatTokens }\n\nfunction formatModel(model: Model): Array<string> {\n  const lines: Array<string> = []\n  const tags: Array<string> = []\n  if (model.preview) tags.push(\"preview\")\n  if (model.is_chat_default) tags.push(\"chat-default\")\n  if (model.is_chat_fallback) tags.push(\"chat-fallback\")\n  if (model.billing?.is_premium) tags.push(\"premium\")\n  if (model.billing?.restricted_to?.length) {\n    tags.push(`restricted:${model.billing.restricted_to.join(\"/\")}`)\n  }\n  if (model.policy && model.policy.state !== \"enabled\") {\n    tags.push(`policy:${model.policy.state}`)\n  }\n  const tagStr = tags.length > 0 ? ` [${tags.join(\", \")}]` : \"\"\n  lines.push(`  • ${model.id}${tagStr}`)\n  if (model.name && model.name !== model.id) {\n    lines.push(`      name: ${model.name}`)\n  }\n  const meta: Array<string> = [\n    `family: ${model.capabilities.family}`,\n    `type: ${model.capabilities.type}`,\n  ]\n  if (model.capabilities.tokenizer) {\n    meta.push(`tokenizer: ${model.capabilities.tokenizer}`)\n  }\n  if (model.version) {\n    meta.push(`version: ${model.version}`)\n  }\n  lines.push(`      ${meta.join(\"  ·  \")}`)\n\n  const limits = model.capabilities.limits\n  const limitParts: Array<string> = []\n  if (limits) {\n    if (limits.max_context_window_tokens) {\n      limitParts.push(`ctx ${formatTokens(limits.max_context_window_tokens)}`)\n    } else if (limits.max_prompt_tokens) {\n      limitParts.push(`prompt ${formatTokens(limits.max_prompt_tokens)}`)\n    }\n    if (limits.max_output_tokens) {\n      limitParts.push(`out ${formatTokens(limits.max_output_tokens)}`)\n    }\n    if (\n      limits.max_non_streaming_output_tokens\n      && limits.max_non_streaming_output_tokens !== limits.max_output_tokens\n    ) {\n      limitParts.push(\n        `out-non-stream ${formatTokens(limits.max_non_streaming_output_tokens)}`,\n      )\n    }\n    if (limits.max_inputs) limitParts.push(`inputs ${limits.max_inputs}`)\n    if (limits.vision?.max_prompt_images) {\n      limitParts.push(`images ${limits.vision.max_prompt_images}`)\n    }\n  }\n  if (limitParts.length > 0) {\n    lines.push(`      limits: ${limitParts.join(\"  ·  \")}`)\n  }\n\n  const supports = model.capabilities.supports\n  const supportFlags: Array<string> = []\n  if (supports) {\n    if (supports.tool_calls) supportFlags.push(\"tools\")\n    if (supports.parallel_tool_calls) supportFlags.push(\"parallel-tools\")\n    if (supports.streaming) supportFlags.push(\"streaming\")\n    if (supports.vision) supportFlags.push(\"vision\")\n    if (supports.structured_outputs) supportFlags.push(\"structured-outputs\")\n    if (supports.dimensions) supportFlags.push(\"dimensions\")\n    if (supports.adaptive_thinking) {\n      const min = supports.min_thinking_budget\n      const max = supports.max_thinking_budget\n      const range\n        = min !== undefined && max !== undefined\n          ? `(${formatTokens(min)}-${formatTokens(max)})`\n          : \"\"\n      supportFlags.push(`adaptive-thinking${range}`)\n    }\n    if (supports.reasoning_effort && supports.reasoning_effort.length > 0) {\n      supportFlags.push(`reasoning:${supports.reasoning_effort.join(\"/\")}`)\n    }\n  }\n  if (supportFlags.length > 0) {\n    lines.push(`      supports: ${supportFlags.join(\", \")}`)\n  }\n\n  if (model.supported_endpoints && model.supported_endpoints.length > 0) {\n    lines.push(`      endpoints: ${model.supported_endpoints.join(\", \")}`)\n  }\n  if (model.billing) {\n    const billParts: Array<string> = []\n    if (model.billing.is_premium) billParts.push(\"premium\")\n    if (typeof model.billing.multiplier === \"number\") {\n      billParts.push(`×${model.billing.multiplier}`)\n    }\n    if (billParts.length > 0) {\n      lines.push(`      billing: ${billParts.join(\" \")}`)\n    }\n  }\n  return lines\n}\n\n/**\n * Format a token count in a compact human-readable form: `1024` →\n * `1k`, `4096` → `4k`, `131072` → `128k`, `1048576` → `1M`. Prefer\n * binary multiples (mebi, kibi) since Claude Code / Copilot context\n * windows are reported in binary units (`1M context` = 1024 × 1024\n * tokens). Fall back to decimal (`64k` for `64000`) when the value\n * is a clean decimal multiple but not binary.\n */\nfunction formatTokens(n: number): string {\n  if (n >= 1_048_576 && n % 1_048_576 === 0) return `${n / 1_048_576}M`\n  if (n >= 1024 && n % 1024 === 0) return `${n / 1024}k`\n  if (n >= 1_000_000 && n % 1_000_000 === 0) return `${n / 1_000_000}M`\n  if (n >= 1000 && n % 1000 === 0) return `${n / 1000}k`\n  return `${n}`\n}\n"],"mappings":";;;;;AAOA,MAAa,SAAS,cAAc;CAClC,MAAM;EACJ,MAAM;EACN,aACE;CACJ;CACA,MAAM;EACJ,SAAS;GACP,MAAM;GACN,UAAU;GACV,aACE;EACJ;EACA,MAAM;GACJ,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,MAAM,IAAI,EAAE,QAAQ;EAClB,MAAM,YAAY;EAClB,MAAM,iBAAiB;EACvB,IAAI;GACF,MAAM,kBAAkB;EAC1B,SAAS,KAAK;GACZ,QAAQ,MAAM,mCAAmC,GAAG;GACpD,QAAQ,KAAK,CAAC;EAChB;EAEA,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,UAAU;EAC5B,SAAS,KAAK;GACZ,QAAQ,MAAM,0CAA0C,GAAG;GAC3D,QAAQ,KAAK,CAAC;EAChB;EAEA,MAAM,MAAM,QAAQ;EACpB,MAAM,UAAU,KAAK,SAAS,SAAS,CAAC,CAAC,KAAK;EAC9C,MAAM,WAAW,UAAU,aAAa,KAAK,OAAO,IAAI;EAExD,IAAI,KAAK,MAAM;GACb,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE,GAAG;GAC7D;EACF;EAEA,IAAI,SAAS,WAAW,GAAG;GACzB,QAAQ,KACN,sBAAsB,QAAQ,KAAK,IAAI,OAAO,6FAChD;GACA,QAAQ,KAAK,CAAC;EAChB;EAEA,MAAM,UAAU,cAAc,QAAQ;EACtC,MAAM,QAAuB,CAAC;EAC9B,MAAM,SAAS,UACX,GAAG,SAAS,OAAO,GAAG,IAAI,OAAO,iBAAiB,QAAQ,KAC1D,GAAG,IAAI,OAAO;EAClB,MAAM,KAAK,MAAM;EACjB,MAAM,KAAK,EAAE;EACb,KAAK,MAAM,CAAC,QAAQ,SAAS,SAAS;GACpC,MAAM,KAAK,KAAK,OAAO,IAAI,KAAK,OAAO,EAAE;GACzC,KAAK,MAAM,SAAS,MAClB,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC;GAElC,MAAM,KAAK,EAAE;EACf;EACA,QAAQ,OAAO,MAAM,MAAM,KAAK,IAAI,CAAC;CACvC;AACF,CAAC;AAED,SAAS,aAAa,QAAsB,SAA+B;CACzE,MAAM,SAAS,QAAQ,YAAY;CACnC,OAAO,OAAO,QAAQ,MAAM;EAW1B,OAViB;GACf,EAAE;GACF,EAAE;GACF,EAAE;GACF,EAAE,aAAa;GACf,EAAE,aAAa;GACf,EAAE,yBAAyB;EAC7B,CAAC,CACE,KAAK,GAAG,CAAC,CACT,YACW,CAAC,CAAC,SAAS,MAAM;CACjC,CAAC;AACH;AAEA,SAAS,cAAc,QAAqD;CAC1E,MAAM,sBAAM,IAAI,IAA0B;CAC1C,KAAK,MAAM,KAAK,QAAQ;EACtB,MAAM,MAAM,EAAE,UAAU;EACxB,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,IAAI,QAAQ,OAAO,KAAK,CAAC;OACpB,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;CACvB;CAEA,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AACjE;AASA,SAAS,YAAY,OAA6B;CAChD,MAAM,QAAuB,CAAC;CAC9B,MAAM,OAAsB,CAAC;CAC7B,IAAI,MAAM,SAAS,KAAK,KAAK,SAAS;CACtC,IAAI,MAAM,iBAAiB,KAAK,KAAK,cAAc;CACnD,IAAI,MAAM,kBAAkB,KAAK,KAAK,eAAe;CACrD,IAAI,MAAM,SAAS,YAAY,KAAK,KAAK,SAAS;CAClD,IAAI,MAAM,SAAS,eAAe,QAChC,KAAK,KAAK,cAAc,MAAM,QAAQ,cAAc,KAAK,GAAG,GAAG;CAEjE,IAAI,MAAM,UAAU,MAAM,OAAO,UAAU,WACzC,KAAK,KAAK,UAAU,MAAM,OAAO,OAAO;CAE1C,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,IAAI,EAAE,KAAK;CAC3D,MAAM,KAAK,OAAO,MAAM,KAAK,QAAQ;CACrC,IAAI,MAAM,QAAQ,MAAM,SAAS,MAAM,IACrC,MAAM,KAAK,eAAe,MAAM,MAAM;CAExC,MAAM,OAAsB,CAC1B,WAAW,MAAM,aAAa,UAC9B,SAAS,MAAM,aAAa,MAC9B;CACA,IAAI,MAAM,aAAa,WACrB,KAAK,KAAK,cAAc,MAAM,aAAa,WAAW;CAExD,IAAI,MAAM,SACR,KAAK,KAAK,YAAY,MAAM,SAAS;CAEvC,MAAM,KAAK,SAAS,KAAK,KAAK,OAAO,GAAG;CAExC,MAAM,SAAS,MAAM,aAAa;CAClC,MAAM,aAA4B,CAAC;CACnC,IAAI,QAAQ;EACV,IAAI,OAAO,2BACT,WAAW,KAAK,OAAO,aAAa,OAAO,yBAAyB,GAAG;OAClE,IAAI,OAAO,mBAChB,WAAW,KAAK,UAAU,aAAa,OAAO,iBAAiB,GAAG;EAEpE,IAAI,OAAO,mBACT,WAAW,KAAK,OAAO,aAAa,OAAO,iBAAiB,GAAG;EAEjE,IACE,OAAO,mCACJ,OAAO,oCAAoC,OAAO,mBAErD,WAAW,KACT,kBAAkB,aAAa,OAAO,+BAA+B,GACvE;EAEF,IAAI,OAAO,YAAY,WAAW,KAAK,UAAU,OAAO,YAAY;EACpE,IAAI,OAAO,QAAQ,mBACjB,WAAW,KAAK,UAAU,OAAO,OAAO,mBAAmB;CAE/D;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,KAAK,iBAAiB,WAAW,KAAK,OAAO,GAAG;CAGxD,MAAM,WAAW,MAAM,aAAa;CACpC,MAAM,eAA8B,CAAC;CACrC,IAAI,UAAU;EACZ,IAAI,SAAS,YAAY,aAAa,KAAK,OAAO;EAClD,IAAI,SAAS,qBAAqB,aAAa,KAAK,gBAAgB;EACpE,IAAI,SAAS,WAAW,aAAa,KAAK,WAAW;EACrD,IAAI,SAAS,QAAQ,aAAa,KAAK,QAAQ;EAC/C,IAAI,SAAS,oBAAoB,aAAa,KAAK,oBAAoB;EACvE,IAAI,SAAS,YAAY,aAAa,KAAK,YAAY;EACvD,IAAI,SAAS,mBAAmB;GAC9B,MAAM,MAAM,SAAS;GACrB,MAAM,MAAM,SAAS;GACrB,MAAM,QACF,QAAQ,KAAA,KAAa,QAAQ,KAAA,IAC3B,IAAI,aAAa,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,KAC3C;GACN,aAAa,KAAK,oBAAoB,OAAO;EAC/C;EACA,IAAI,SAAS,oBAAoB,SAAS,iBAAiB,SAAS,GAClE,aAAa,KAAK,aAAa,SAAS,iBAAiB,KAAK,GAAG,GAAG;CAExE;CACA,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,mBAAmB,aAAa,KAAK,IAAI,GAAG;CAGzD,IAAI,MAAM,uBAAuB,MAAM,oBAAoB,SAAS,GAClE,MAAM,KAAK,oBAAoB,MAAM,oBAAoB,KAAK,IAAI,GAAG;CAEvE,IAAI,MAAM,SAAS;EACjB,MAAM,YAA2B,CAAC;EAClC,IAAI,MAAM,QAAQ,YAAY,UAAU,KAAK,SAAS;EACtD,IAAI,OAAO,MAAM,QAAQ,eAAe,UACtC,UAAU,KAAK,IAAI,MAAM,QAAQ,YAAY;EAE/C,IAAI,UAAU,SAAS,GACrB,MAAM,KAAK,kBAAkB,UAAU,KAAK,GAAG,GAAG;CAEtD;CACA,OAAO;AACT;;;;;;;;;AAUA,SAAS,aAAa,GAAmB;CACvC,IAAI,KAAK,WAAa,IAAI,YAAc,GAAG,OAAO,GAAG,IAAI,QAAU;CACnE,IAAI,KAAK,QAAQ,IAAI,SAAS,GAAG,OAAO,GAAG,IAAI,KAAK;CACpD,IAAI,KAAK,OAAa,IAAI,QAAc,GAAG,OAAO,GAAG,IAAI,IAAU;CACnE,IAAI,KAAK,OAAQ,IAAI,QAAS,GAAG,OAAO,GAAG,IAAI,IAAK;CACpD,OAAO,GAAG;AACZ"}

package/dist/orchestration-hRU4TdWr.js

@@ -0,0 +1,39 @@
+import { i as parseIntEnv, o as runCommandCapture } from "./exec-DTO2oin0.js";
+import "./stop-gate-hook-DQc2KV7B.js";
+//#region src/lib/orchestration/live-exec.ts
+/**
+* Live `ExecFn` for the gate runner — runs the kernel's SEALED gate command in a
+* workspace via the project's Windows-safe exec helper (`runCommandCapture` →
+* `buildExecInvocation`, which handles cmd.exe quoting on Windows). Only the
+* kernel's sealed gate commands flow through here (tests/types/lint/build),
+* never a producer-authored string, so a simple whitespace split into argv is
+* safe for these fixed commands. A command that can't run (spawn error / killed)
+* counts as a non-zero exit, never a throw — the gate runner treats it as
+* not-passed.
+*
+* This is the one piece of the gate engine that touches a real subprocess; it is
+* model-free and cross-platform, so it is exercised directly in CI (unlike the
+* worker/worktree/model adapters, which need the gated E2E harness).
+*/
+/** Per-command wall-clock cap so a hung gate command (watch-mode test, a process
+*  waiting on stdin, a stale lockfile) is tree-killed instead of hanging the
+*  caller forever. Generous (a real typecheck/test/lint can take minutes) but
+*  bounded; override with GH_ROUTER_GATE_CMD_TIMEOUT_MS. A timeout kills the
+*  command (code null) which the gate runner treats as not-passed. */
+const CMD_TIMEOUT_MS = parseIntEnv(process.env.GH_ROUTER_GATE_CMD_TIMEOUT_MS) ?? 6e5;
+const liveExec = async ({ command, cwd }) => {
+	const argv = command.trim().split(/\s+/).filter(Boolean);
+	if (argv.length === 0) return { exitCode: 1 };
+	try {
+		return { exitCode: (await runCommandCapture(argv, {
+			cwd,
+			timeoutMs: CMD_TIMEOUT_MS
+		})).code ?? 1 };
+	} catch {
+		return { exitCode: 1 };
+	}
+};
+//#endregion
+export { liveExec as t };
+
+//# sourceMappingURL=orchestration-hRU4TdWr.js.map

package/dist/orchestration-hRU4TdWr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration-hRU4TdWr.js","names":[],"sources":["../src/lib/orchestration/live-exec.ts"],"sourcesContent":["/**\n * Live `ExecFn` for the gate runner — runs the kernel's SEALED gate command in a\n * workspace via the project's Windows-safe exec helper (`runCommandCapture` →\n * `buildExecInvocation`, which handles cmd.exe quoting on Windows). Only the\n * kernel's sealed gate commands flow through here (tests/types/lint/build),\n * never a producer-authored string, so a simple whitespace split into argv is\n * safe for these fixed commands. A command that can't run (spawn error / killed)\n * counts as a non-zero exit, never a throw — the gate runner treats it as\n * not-passed.\n *\n * This is the one piece of the gate engine that touches a real subprocess; it is\n * model-free and cross-platform, so it is exercised directly in CI (unlike the\n * worker/worktree/model adapters, which need the gated E2E harness).\n */\n\nimport { runCommandCapture } from \"~/lib/exec\"\n\nimport { type ExecFn } from \"./gate-runner\"\nimport { parseIntEnv } from \"../exec\"\n\n/** Per-command wall-clock cap so a hung gate command (watch-mode test, a process\n *  waiting on stdin, a stale lockfile) is tree-killed instead of hanging the\n *  caller forever. Generous (a real typecheck/test/lint can take minutes) but\n *  bounded; override with GH_ROUTER_GATE_CMD_TIMEOUT_MS. A timeout kills the\n *  command (code null) which the gate runner treats as not-passed. */\nconst CMD_TIMEOUT_MS =\n  parseIntEnv(process.env.GH_ROUTER_GATE_CMD_TIMEOUT_MS) ?? 600_000\n\nexport const liveExec: ExecFn = async ({ command, cwd }) => {\n  const argv = command.trim().split(/\\s+/).filter(Boolean)\n  if (argv.length === 0) return { exitCode: 1 }\n  try {\n    const r = await runCommandCapture(argv, { cwd, timeoutMs: CMD_TIMEOUT_MS })\n    // `code` is null when killed by signal/timeout → treat as a failed gate.\n    return { exitCode: r.code ?? 1 }\n  } catch {\n    return { exitCode: 1 }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,iBACJ,YAAY,QAAQ,IAAI,6BAA6B,KAAK;AAE5D,MAAa,WAAmB,OAAO,EAAE,SAAS,UAAU;CAC1D,MAAM,OAAO,QAAQ,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO;CACvD,IAAI,KAAK,WAAW,GAAG,OAAO,EAAE,UAAU,EAAE;CAC5C,IAAI;EAGF,OAAO,EAAE,WAAU,MAFH,kBAAkB,MAAM;GAAE;GAAK,WAAW;EAAe,CAAC,EAAA,CAErD,QAAQ,EAAE;CACjC,QAAQ;EACN,OAAO,EAAE,UAAU,EAAE;CACvB;AACF"}

package/dist/{paths-BjTMI_xK.js → paths-C1cLZ7Ga.js}

@@ -1,8 +1,8 @@
 import consola from "consola";
+import path from "node:path";
 import { randomBytes } from "node:crypto";
 import fs from "node:fs/promises";
 import os from "node:os";
-import path from "node:path";
 //#region src/lib/paths.ts
 function appDir() {
 	return path.join(os.homedir(), ".local", "share", "github-router");
@@ -221,12 +221,12 @@ async function ensurePaths() {
 		consola.debug("Peer-agent .md sweep skipped:", err);
 	});
 	await (async () => {
-		await (await import("./lifecycle-hzPwXc3I.js")).sweepStaleWorktreesAtBoot();
+		await (await import("./lifecycle-DzqCqDlM.js")).sweepStaleWorktreesAtBoot();
 	})().catch((err) => {
 		consola.debug("Worker worktree boot sweep skipped:", err);
 	});
 	await (async () => {
-		await (await import("./lifecycle-0rXrwjWk.js")).sweepStaleColbertMetaAtBoot();
+		await (await import("./lifecycle-D80CaWie.js")).sweepStaleColbertMetaAtBoot();
 	})().catch((err) => {
 		consola.debug("ColBERT meta boot sweep skipped:", err);
 	});
@@ -717,58 +717,90 @@ async function assertOnboardingGateInjected(targetDir) {
 *   of `sourceDir` and we don't reintroduce a confused-deputy vector.
 * - Files copy only if source mtime > target mtime (idempotent).
 */
-async function mirrorDirRecursive(sourceDir, targetDir, relPath) {
+/**
+* Max file operations in flight across the WHOLE mirror walk.
+*
+* The walk is I/O-bound over hundreds of independent small files, so it
+* parallelizes well: measured 1021ms serial vs 311ms at this limit for a real
+* 394-file / 4.7MB `~/.claude` (Windows 11, 16 cores). It must be BOUNDED
+* rather than a bare `Promise.all` over every entry — the mirror is re-copied
+* on every launch (the target is a fresh per-launch dir, so the mtime skip
+* below never fires across launches), and firing hundreds of simultaneous
+* `copyFile`s just trades one bottleneck for file-handle exhaustion.
+*
+* The limit is shared across the recursion via a semaphore rather than applied
+* per-directory: a per-directory bound would multiply with nesting depth and
+* stop being a bound at all.
+*/
+const MIRROR_COPY_CONCURRENCY = 16;
+/** Counting semaphore. FIFO, so a deep subtree cannot starve a shallow one. */
+function createSemaphore(limit) {
+	let active = 0;
+	const waiters = [];
+	return async function withSlot(fn) {
+		if (active >= limit) await new Promise((resolve) => waiters.push(resolve));
+		else active++;
+		try {
+			return await fn();
+		} finally {
+			const next = waiters.shift();
+			if (next) next();
+			else active--;
+		}
+	};
+}
+async function mirrorDirRecursive(sourceDir, targetDir, relPath, withSlot = createSemaphore(MIRROR_COPY_CONCURRENCY)) {
 	const sourcePath = path.join(sourceDir, relPath);
 	let entries;
 	try {
-		entries = await fs.readdir(sourcePath);
+		entries = await withSlot(() => fs.readdir(sourcePath));
 	} catch (err) {
 		if (err.code === "ENOENT") return;
 		consola.debug(`mirrorDirRecursive: cannot readdir ${sourcePath}:`, err);
 		return;
 	}
-	for (const name of entries) {
+	await Promise.all(entries.map(async (name) => {
 		if (relPath === "") {
 			const policy = policyFor(name);
-			if (policy === "ISOLATED" || policy === "SHARED") continue;
+			if (policy === "ISOLATED" || policy === "SHARED") return;
 		}
 		const childRel = relPath === "" ? name : path.join(relPath, name);
-		if (relPath === "agents" && PEER_AGENT_MD_FILENAME.test(name)) continue;
+		if (relPath === "agents" && PEER_AGENT_MD_FILENAME.test(name)) return;
 		const childSource = path.join(sourceDir, childRel);
 		const childTarget = path.join(targetDir, childRel);
 		let stats;
 		try {
-			stats = await fs.lstat(childSource);
+			stats = await withSlot(() => fs.lstat(childSource));
 		} catch (err) {
 			consola.debug(`mirrorDirRecursive: cannot lstat ${childSource}:`, err);
-			continue;
+			return;
 		}
 		if (stats.isSymbolicLink()) {
 			consola.debug(`mirrorDirRecursive: skipping symlink ${childSource} (security policy)`);
-			continue;
+			return;
 		}
 		if (stats.isDirectory()) {
-			await fs.mkdir(childTarget, { recursive: true });
-			await mirrorDirRecursive(sourceDir, targetDir, childRel);
-			continue;
+			await withSlot(() => fs.mkdir(childTarget, { recursive: true }));
+			await mirrorDirRecursive(sourceDir, targetDir, childRel, withSlot);
+			return;
 		}
 		if (stats.isFile()) {
 			let needsCopy = true;
 			try {
-				const targetStat = await fs.lstat(childTarget);
+				const targetStat = await withSlot(() => fs.lstat(childTarget));
 				if (targetStat.isFile() && targetStat.mtimeMs >= stats.mtimeMs) needsCopy = false;
 			} catch (err) {
 				if (err.code !== "ENOENT") consola.debug(`mirrorDirRecursive: lstat target ${childTarget}:`, err);
 			}
-			if (!needsCopy) continue;
+			if (!needsCopy) return;
 			try {
-				await fs.copyFile(childSource, childTarget, fs.constants.COPYFILE_FICLONE);
+				await withSlot(() => fs.copyFile(childSource, childTarget, fs.constants.COPYFILE_FICLONE));
 			} catch (err) {
 				consola.debug(`mirrorDirRecursive: copy ${childSource} → ${childTarget}:`, err);
 			}
-			continue;
+			return;
 		}
-	}
+	}));
 }
 /**
 * Create or refresh a directory symlink `<mirrorDir>/<name>` →
@@ -1110,4 +1142,4 @@ async function removeOwnClaudeConfigMirror() {
 //#endregion
 export { isUnderClaudeConfigMirror as a, sweepStalePeerAgentMdFiles as c, writeRuntimeFileSecure as d, ensurePaths as i, sweepStaleRuntimeFiles as l, PEER_AGENT_MD_FILENAME as n, removeOwnClaudeConfigMirror as o, ensureClaudeConfigMirror as r, sweepStaleClaudeConfigMirrors as s, PATHS as t, writeArtifactCredsToMirror as u };
 
-//# sourceMappingURL=paths-BjTMI_xK.js.map
+//# sourceMappingURL=paths-C1cLZ7Ga.js.map