glimmervoid 0.31.0 → 0.32.0

package/dist/bin/glimmervoid.js

@@ -2,11 +2,12 @@
 import { o as nodePtyRebuildHint, r as firstLine, t as probeNodePty } from "../chunks/node-pty-preflight-C8QIlrtU.js";
 import { i as errorText } from "../chunks/text-DoirglWV.js";
 import { a as packageRoot } from "../chunks/runtime-paths-BPoxENmK.js";
-import { t as AGENT_API_VERBS } from "../chunks/session-fc4pFbon.js";
-import { i as execSync } from "../chunks/child-process-safe-Ch-Zgxqs.js";
+import { t as AGENT_API_VERBS } from "../chunks/session-B8fJb_Or.js";
+import { i as execSync } from "../chunks/child-process-safe-DDELk9XC.js";
 import { t as renderTable } from "../chunks/ascii-figure-core-pDAwtlKO.js";
 import { n as glimmervoidHomeDir, t as decideConfigPath } from "../chunks/config-path-core-DFt-TemS.js";
-import { i as sandboxDoctorRows, r as probeSandboxDependencies } from "../chunks/sandbox-deps-BPKE-ylr.js";
+import { i as sandboxDoctorRows, r as probeSandboxDependencies } from "../chunks/sandbox-deps-DuaNFq7n.js";
+import { r as gitDoctorRows, t as probeGitVersion } from "../chunks/git-version-CrLW4a6r.js";
 import { i as pnpmGlobalBinDir, n as npmGlobalBinDir, r as onPath, t as formatPathNotice } from "../chunks/path-doctor-C23VAqeu.js";
 import fs from "node:fs";
 import path from "node:path";
@@ -106,6 +107,7 @@ Commands:
   spawn <prompt>    From inside a Glimmervoid session, start a sibling session on that prompt
   attention <note>  From inside a Glimmervoid session, flag it as needing the operator
   board             From inside a Glimmervoid session, list the live sessions
+  push              From inside a Glimmervoid session, land its commits on the integration branch and push it
   kg [command]      Experimental typed knowledge and task graph (Settings > Lanes > Knowledge graph)
 
 Options:
@@ -131,23 +133,23 @@ var SUBCOMMAND_RUNNERS = new Map([
 		return 0;
 	}],
 	["pair", async (subcommandArgs) => {
-		const { runPairCli } = await import("../chunks/pair-cli-BbCBfd6l.js");
+		const { runPairCli } = await import("../chunks/pair-cli-CKn-wUw9.js");
 		return runPairCli(subcommandArgs);
 	}],
 	["agent", async (subcommandArgs) => {
-		const { runAgentSetupCli } = await import("../chunks/agent-setup-cli-CiJSDWSo.js");
+		const { runAgentSetupCli } = await import("../chunks/agent-setup-cli-D4956BfN.js");
 		return runAgentSetupCli(subcommandArgs);
 	}],
 	["kg", async (subcommandArgs) => {
-		const { runKnowledgeGraphCommand } = await import("../chunks/knowledge-graph-cli-D2tt5hPn.js");
+		const { runKnowledgeGraphCommand } = await import("../chunks/knowledge-graph-cli-Bjy9_kv5.js");
 		return runKnowledgeGraphCommand(subcommandArgs);
 	}],
 	["visions", async (subcommandArgs) => {
-		const { runVisionsCli } = await import("../chunks/visions-cli-CT5rjiwf.js");
+		const { runVisionsCli } = await import("../chunks/visions-cli-BhFdym5n.js");
 		return runVisionsCli(subcommandArgs);
 	}],
 	...AGENT_API_VERBS.map((verb) => [verb, async (subcommandArgs, subcommandName) => {
-		const { runAgentApiCli } = await import("../chunks/agent-api-cli-DAA7Jx8N.js");
+		const { runAgentApiCli } = await import("../chunks/agent-api-cli-V_BkYhBI.js");
 		return runAgentApiCli([subcommandName, ...subcommandArgs]);
 	}])
 ]);
@@ -201,7 +203,7 @@ async function readDeclaredCustomAgents() {
 		declared: [],
 		error: null
 	};
-	const { loadConfigFile } = await import("../chunks/config-store-DbBp7LJZ.js");
+	const { loadConfigFile } = await import("../chunks/config-store-Cp62jN1O.js");
 	try {
 		const loaded = loadConfigFile(decided.path, { exitOnError: false });
 		if (!loaded.config) return {
@@ -277,7 +279,7 @@ async function runDoctor() {
 	}
 	switchSection("Agents");
 	try {
-		const { listAgentIds, describeAgentResolvability, setCustomAgents } = await import("../chunks/adapters-ClA_GbtA.js");
+		const { listAgentIds, describeAgentResolvability, setCustomAgents } = await import("../chunks/adapters-BU74M4QZ.js");
 		const declaredCustomAgents = await readDeclaredCustomAgents();
 		if (declaredCustomAgents.error) line("config", declaredCustomAgents.error);
 		setCustomAgents(declaredCustomAgents.declared);
@@ -285,7 +287,7 @@ async function runDoctor() {
 			const { label, path: resolvedPath } = describeAgentResolvability(id);
 			line(`${id} (${label})`, resolvedPath ?? "not found on PATH");
 		}
-		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-CiJSDWSo.js");
+		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-D4956BfN.js");
 		const grokSetup = inspectGrokAgentSetup();
 		line("grok hook setup", `${grokSetup.classification}: ${grokSetup.filePath}`);
 	} catch (err) {
@@ -293,7 +295,7 @@ async function runDoctor() {
 	}
 	switchSection("rtk");
 	try {
-		const { getRtkPath } = await import("../chunks/rtk-resolver-D4Nke1Fr.js");
+		const { getRtkPath } = await import("../chunks/rtk-resolver-CIVLE_xk.js");
 		line("rtk", getRtkPath() || "not installed (Glimmervoid installs it when the rtk setting is on)");
 	} catch (err) {
 		line("rtk", `probe failed: ${firstLine(errorText(err))}`);
@@ -301,8 +303,8 @@ async function runDoctor() {
 	switchSection("Sane YOLO");
 	try {
 		const { resolvePackageBin } = await import("../chunks/runtime-paths-DU5jBEEO.js");
-		const { execFileSync } = await import("../chunks/child-process-safe-BKPZ-5qQ.js");
-		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-CiJSDWSo.js");
+		const { execFileSync } = await import("../chunks/child-process-safe-B3zcPdFM.js");
+		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-D4956BfN.js");
 		const binPath = resolvePackageBin("cc-safety-net", "cc-safety-net");
 		line("Sane YOLO", binPath || "not installed");
 		if (binPath) line("cc-safety-net version", execFileSync(process.execPath, [binPath, "--version"], {
@@ -327,6 +329,8 @@ async function runDoctor() {
 		platform,
 		exec: execSync
 	}))) line(label, value);
+	switchSection("Git");
+	for (const [label, value] of gitDoctorRows(probeGitVersion())) line(label, value);
 	switchSection("Config");
 	line("resolved config", resolveConfigPathReadOnly());
 	flush();

package/dist/chunks/{adapters-ClA_GbtA.js → adapters-BU74M4QZ.js}

@@ -1,2 +1,2 @@
-import { a as describeAgentResolvability, d as setCustomAgents, l as listAgentIds } from "./adapters-gn7ulNO4.js";
+import { a as describeAgentResolvability, d as setCustomAgents, l as listAgentIds } from "./adapters-CoC18rdt.js";
 export { describeAgentResolvability, listAgentIds, setCustomAgents };

package/dist/chunks/{adapters-gn7ulNO4.js → adapters-CoC18rdt.js}

@@ -1,27 +1,13 @@
 import { o as relayPath } from "./runtime-paths-BPoxENmK.js";
-import { _ as firstDetailLine, l as PendingPromptQuestion, s as PROMPT_DETAIL_HIDDEN_CHARACTERS, v as toolDetailFieldValue } from "./session-fc4pFbon.js";
-import { r as execFileSync } from "./child-process-safe-Ch-Zgxqs.js";
+import { b as toolDetailFieldValue, d as PendingPromptQuestion, l as PROMPT_DETAIL_HIDDEN_CHARACTERS, y as firstDetailLine } from "./session-B8fJb_Or.js";
+import { r as execFileSync } from "./child-process-safe-DDELk9XC.js";
 import { n as resolveAgentCommand, t as buildAgentSpawnCommand } from "./spawn-command-Cc40FiZI.js";
 import { n as isRecord } from "./coerce-NSst8oRP.js";
-import { c as buildAgentEnv, i as isSpinnerChar, n as classifyAgentTitle, r as isBrailleChar, t as grok } from "./grok-CXKeSt2z.js";
+import { c as buildAgentEnv, i as isSpinnerChar, n as classifyAgentTitle, r as isBrailleChar, t as grok } from "./grok-C4lzPFEg.js";
 import { t as buildHookCommand } from "./hook-command-core-DclEoE9e.js";
-import "./contracts-3LkrilQX.js";
+import "./contracts-DXujp-Zn.js";
 import { n as mergeCodexPreToolUse, t as HOOK_TOOLS } from "./hook-tools-UX2fmt81.js";
 import fs from "node:fs";
-//#region session/core/anti-slop-prompt.ts
-var ANTI_SLOP_NOTE = [
-	"Code hygiene for this session:",
-	"Write comments only to explain why, never narration that restates the code (no Now-we, This-function, or Step-1 openers).",
-	"Do not leave debug statements (console.log, print, debugger) in committed code.",
-	"Never swallow exceptions: no empty catch blocks and no catch that only logs and continues.",
-	"No placeholder stubs or in-a-real-implementation hand-waving; implement the real thing or stop and ask.",
-	"Do not silence type or lint errors with as-any, ts-ignore, or eslint-disable; fix the cause.",
-	"Avoid speculative wrappers and single-use indirection. Prefer deleting code over adding it."
-].join(" ");
-function buildAntiSlopArgs(enabled) {
-	return enabled ? ["--append-system-prompt", ANTI_SLOP_NOTE] : [];
-}
-//#endregion
 //#region session/adapters/claude-code.ts
 var ID$1 = "claude-code";
 var COMMAND_NAME$1 = "claude";
@@ -175,7 +161,29 @@ function buildEnv$1(baseEnv, extraEnv, options) {
 	return buildAgentEnv(baseEnv, extraEnv, envProfile$2, options);
 }
 var settingsArgs = (settingsPath) => ["--settings", settingsPath];
-function buildArgs$1({ dangerouslySkipPermissions = false, resumeSessionId = null, extraArgs = [], antiSlopPrompt = false, initialPrompt = null } = {}) {
+var SESSION_ID_FLAG = "--session-id";
+function requestedSessionId(extraArgs) {
+	const flagIndex = extraArgs.indexOf(SESSION_ID_FLAG);
+	if (flagIndex !== -1) return extraArgs[flagIndex + 1] ?? null;
+	const assignment = extraArgs.find((argument) => argument.startsWith(`${SESSION_ID_FLAG}=`));
+	return assignment ? assignment.slice(13) : null;
+}
+function launchSessionId({ resumeSessionId, extraArgs, generatedId }) {
+	const knownSessionId = resumeSessionId ?? requestedSessionId(extraArgs);
+	if (knownSessionId) return {
+		agentSessionId: knownSessionId,
+		extraArgs: [...extraArgs]
+	};
+	return {
+		agentSessionId: generatedId,
+		extraArgs: [
+			...extraArgs,
+			SESSION_ID_FLAG,
+			generatedId
+		]
+	};
+}
+function buildArgs$1({ dangerouslySkipPermissions = false, resumeSessionId = null, extraArgs = [], initialPrompt = null } = {}) {
 	const args = dangerouslySkipPermissions ? ["--dangerously-skip-permissions"] : [];
 	if (resumeSessionId) args.push("--resume", resumeSessionId);
 	for (let index = 0; index < extraArgs.length; index += 1) {
@@ -187,7 +195,6 @@ function buildArgs$1({ dangerouslySkipPermissions = false, resumeSessionId = nul
 		if (resumeSessionId && argument.startsWith("--session-id=")) continue;
 		args.push(argument);
 	}
-	args.push(...buildAntiSlopArgs(antiSlopPrompt));
 	if (initialPrompt != null) args.push(initialPrompt);
 	return args;
 }
@@ -204,6 +211,7 @@ var claudeCode = {
 	buildEnv: buildEnv$1,
 	buildArgs: buildArgs$1,
 	settingsArgs,
+	launchSessionId,
 	capabilities: {
 		hooks: true,
 		awaitingInput: true,
@@ -212,7 +220,6 @@ var claudeCode = {
 		statusLine: true,
 		rtk: true,
 		saneYolo: true,
-		antiSlop: true,
 		compactQuiet: true,
 		skipPermissionsFlag: true,
 		headless: true
@@ -407,7 +414,6 @@ var codex = {
 		statusLine: false,
 		rtk: true,
 		saneYolo: true,
-		antiSlop: false,
 		compactQuiet: false,
 		skipPermissionsFlag: true,
 		headless: true
@@ -427,7 +433,6 @@ var TITLE_ONLY_CAPABILITIES = Object.freeze({
 	statusLine: false,
 	rtk: false,
 	saneYolo: false,
-	antiSlop: false,
 	compactQuiet: false,
 	skipPermissionsFlag: false,
 	headless: false

package/dist/chunks/{agent-api-cli-DAA7Jx8N.js → agent-api-cli-V_BkYhBI.js}

@@ -1,11 +1,15 @@
 import { t as errorCode } from "./text-DoirglWV.js";
-import { a as AgentDispatchRequest, n as AGENT_URL_ENV } from "./session-fc4pFbon.js";
+import { a as AgentDispatchRequest, n as AGENT_URL_ENV, s as AgentTicketRequest } from "./session-B8fJb_Or.js";
 import { i as resolveHookTarget } from "./hook-relay-core-DA_bz2KA.js";
 import { n as decideSandboxProxy } from "./sandbox-proxy-core-hnQgKR0T.js";
-import { a as isAgentApiVerb } from "./agent-api-core-hVcT26JW.js";
+import { c as isAgentApiVerb, l as isOrchestratorAgentVerb } from "./agent-api-core-B3YI8SYs.js";
 import http from "node:http";
 //#region server/agent-api-cli.ts
 var AGENT_PATH_PREFIX = "/agent/";
+function ticketBody(rest) {
+	const parsed = AgentTicketRequest.safeParse({ workId: rest[0] });
+	return parsed.success ? parsed.data : null;
+}
 var BODY_BUILDERS = {
 	spawn: (rest) => {
 		const prompt = rest.join(" ").trim();
@@ -16,10 +20,13 @@ var BODY_BUILDERS = {
 		return note ? { note } : null;
 	},
 	board: () => ({}),
+	push: () => ({}),
 	dispatch: (rest) => {
 		const parsed = AgentDispatchRequest.safeParse(rest[0] === "--ready" ? { readyIntent: rest[1] } : { workId: rest[0] });
 		return parsed.success ? parsed.data : null;
-	}
+	},
+	reopen: (rest) => ticketBody(rest),
+	cancel: (rest) => ticketBody(rest)
 };
 function bodySaysOk(text) {
 	try {
@@ -110,8 +117,8 @@ async function runAgentApiCli(args) {
 	}
 	const body = BODY_BUILDERS[verb](args.slice(1));
 	if (!body) {
-		if (verb === "dispatch") {
-			console.error("glimmervoid dispatch: expected a work id matching wrk-[0-9a-f]{16}");
+		if (isOrchestratorAgentVerb(verb)) {
+			console.error(`glimmervoid ${verb}: expected a work id matching wrk-[0-9a-f]{16}`);
 			return 1;
 		}
 		console.error(`glimmervoid ${verb}: this command needs text, for example "glimmervoid ${verb} check the failing test"`);

package/dist/chunks/agent-api-core-B3YI8SYs.js

@@ -0,0 +1,192 @@
+import { a as AgentDispatchRequest, c as ORCHESTRATOR_AGENT_VERBS, i as AgentAttentionRequest, o as AgentSpawnRequest, t as AGENT_API_VERBS } from "./session-B8fJb_Or.js";
+import crypto from "node:crypto";
+var MAX_SPAWNS_IN_FLIGHT = 1;
+var SPAWNABLE_DEPTH = 0;
+var REFUSAL_REASON = "unknown session";
+var INVALID_BODY_STATUS = 400;
+var PUSH_REFUSED_STATUS = 409;
+var PUSH_UNAVAILABLE_REASON = "not-operator-session";
+var PUSH_REFUSAL_COPY = Object.freeze({
+	[PUSH_UNAVAILABLE_REASON]: () => "only an operator session or a session it spawned can push",
+	"no-worktree": () => "this session has no worktree of its own, so there is nothing of its own to land",
+	"merge-in-progress": () => "a merge for this session is already running, so try again when it ends",
+	"not-continuable": () => "this session cannot be merged in its current state",
+	destroyed: () => "this session is ending",
+	"nothing-to-commit": () => "no commit on this branch is missing from the integration branch, so commit your work first",
+	"rebase-conflict": ({ base, conflicts = [] }) => `this branch conflicts with ${base} in ${conflicts.join(", ") || "one or more files"}, so rebase onto ${base}, resolve the conflicts, commit, then push again`,
+	"not-fast-forward": ({ base }) => `${base} could not be fast-forwarded to this branch, and a push is never forced`,
+	"base-diverged": ({ base }) => `the local ${base} and origin/${base} have diverged, which the operator has to reconcile`
+});
+function tokensMatch(presented, expected) {
+	if (presented.length !== expected.length) return false;
+	try {
+		return crypto.timingSafeEqual(Buffer.from(presented, "utf8"), Buffer.from(expected, "utf8"));
+	} catch {
+		return false;
+	}
+}
+function refused() {
+	return {
+		ok: false,
+		status: 404,
+		reason: REFUSAL_REASON
+	};
+}
+function decideAgentRequest({ sessionId, presentedToken, expectedToken, isLoopback }) {
+	if (!isLoopback) return refused();
+	if (!sessionId) return refused();
+	if (!expectedToken) return refused();
+	if (!presentedToken) return refused();
+	if (!tokensMatch(presentedToken, expectedToken)) return refused();
+	return { ok: true };
+}
+function decideSpawnAllowance({ liveChildren, lifetimeSpawns, inFlight, depth }) {
+	if (depth !== SPAWNABLE_DEPTH) return {
+		ok: false,
+		status: 403,
+		reason: "a spawned session may not spawn another"
+	};
+	if (inFlight >= MAX_SPAWNS_IN_FLIGHT) return {
+		ok: false,
+		status: 429,
+		reason: "a spawn is already in flight"
+	};
+	if (liveChildren >= 3) return {
+		ok: false,
+		status: 429,
+		reason: `at most 3 spawned sessions may be live at once`
+	};
+	if (lifetimeSpawns >= 10) return {
+		ok: false,
+		status: 429,
+		reason: `this session has used its 10 spawns`
+	};
+	return { ok: true };
+}
+function isAgentApiVerb(verb) {
+	return AGENT_API_VERBS.includes(verb);
+}
+function isOrchestratorAgentVerb(verb) {
+	return ORCHESTRATOR_AGENT_VERBS.includes(verb);
+}
+var TICKET_ACTION_STATES = Object.freeze({
+	reopen: Object.freeze(["blocked"]),
+	cancel: Object.freeze(["open", "blocked"])
+});
+function decideTicketAction({ verb, intentId, ticket }) {
+	if (!ticket) return {
+		ok: false,
+		reason: "no such ticket"
+	};
+	if (ticket.parent !== intentId) return {
+		ok: false,
+		reason: "the ticket is not a child of the active intent"
+	};
+	const allowed = TICKET_ACTION_STATES[verb];
+	if (!allowed.includes(ticket.state)) return {
+		ok: false,
+		reason: `only a ${allowed.join(" or ")} ticket can be ${verb === "reopen" ? "reopened" : "cancelled"}, and this one is ${ticket.state}`
+	};
+	if (verb === "reopen") return {
+		ok: true,
+		kind: "transition",
+		to: "open"
+	};
+	return {
+		ok: true,
+		kind: "close",
+		outcome: "cancelled"
+	};
+}
+function refuseInvalidBody(issues) {
+	return {
+		ok: false,
+		status: INVALID_BODY_STATUS,
+		error: issues[0]?.message || "invalid request"
+	};
+}
+function parseAgentVerb(verb, payload) {
+	if (!isAgentApiVerb(verb)) return {
+		ok: false,
+		status: 404,
+		error: REFUSAL_REASON
+	};
+	if (verb === "dispatch") {
+		const parsed = AgentDispatchRequest.safeParse(payload);
+		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+		return {
+			ok: true,
+			verb,
+			request: parsed.data
+		};
+	}
+	if (verb === "reopen" || verb === "cancel") return {
+		ok: false,
+		status: 403,
+		error: `${verb} requires a live factory orchestrator`
+	};
+	if (verb === "board" || verb === "push") return {
+		ok: true,
+		verb
+	};
+	if (verb === "attention") {
+		const parsed = AgentAttentionRequest.safeParse(payload);
+		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+		return {
+			ok: true,
+			verb,
+			request: parsed.data
+		};
+	}
+	const parsed = AgentSpawnRequest.safeParse(payload);
+	if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+	return {
+		ok: true,
+		verb,
+		request: parsed.data
+	};
+}
+function describePushLanding(landing) {
+	if (!landing.merged) {
+		const reason = landing.reason || "unknown";
+		const explain = PUSH_REFUSAL_COPY[reason];
+		return {
+			status: PUSH_REFUSED_STATUS,
+			body: {
+				ok: false,
+				reason,
+				error: explain ? explain(landing) : `the merge stopped: ${reason}`
+			}
+		};
+	}
+	if (landing.pushed) return {
+		status: 200,
+		body: {
+			ok: true,
+			landedOn: landing.base ?? null,
+			pushed: true
+		}
+	};
+	return {
+		status: 200,
+		body: {
+			ok: true,
+			landedOn: landing.base ?? null,
+			pushed: false,
+			note: "landed locally and nothing was pushed, because the repository has no origin remote or origin did not take a fast-forward"
+		}
+	};
+}
+function deriveChildSessionName(parentName, existingNames) {
+	const base = `${String(parentName || "").trim() || "session"} agent`;
+	const taken = new Set(existingNames);
+	let candidate = base;
+	let suffix = 1;
+	while (taken.has(candidate)) {
+		suffix += 1;
+		candidate = `${base} ${suffix}`;
+	}
+	return candidate;
+}
+//#endregion
+export { decideTicketAction as a, isAgentApiVerb as c, decideSpawnAllowance as i, isOrchestratorAgentVerb as l, REFUSAL_REASON as n, deriveChildSessionName as o, decideAgentRequest as r, describePushLanding as s, PUSH_UNAVAILABLE_REASON as t, parseAgentVerb as u };

package/dist/chunks/{agent-setup-cli-CiJSDWSo.js → agent-setup-cli-D4956BfN.js}

@@ -1,5 +1,5 @@
 import { a as isMissingFileError, r as errorMessage } from "./text-DoirglWV.js";
-import { a as classifyGrokHooksFile, o as renderGrokHooksFile, t as grok } from "./grok-CXKeSt2z.js";
+import { a as classifyGrokHooksFile, o as renderGrokHooksFile, t as grok } from "./grok-C4lzPFEg.js";
 import { p as writeTextAtomicSync } from "./json-file-oEH9vt-0.js";
 import fs from "node:fs";
 import path from "node:path";

package/dist/chunks/child-process-safe-B3zcPdFM.js

@@ -0,0 +1,2 @@
+import { r as execFileSync } from "./child-process-safe-DDELk9XC.js";
+export { execFileSync };

package/dist/chunks/{child-process-safe-Ch-Zgxqs.js → child-process-safe-DDELk9XC.js}

@@ -13,7 +13,8 @@ function split(rest) {
 	let options;
 	let callback;
 	for (const v of rest) {
-		if (Array.isArray(v) && v.every((entry) => typeof entry === "string")) args = v;
+		if (Array.isArray(v) && !v.every((entry) => typeof entry === "string")) throw new TypeError("command arguments must all be strings");
+		if (Array.isArray(v)) args = v;
 		if (typeof v === "function") callback = v;
 		if (v && typeof v === "object" && !Array.isArray(v)) options = v;
 	}

package/dist/chunks/{config-W1Sv-iPK.js → config-CZ4H51D0.js}

@@ -1,4 +1,4 @@
-import { h as TaskTitle } from "./session-fc4pFbon.js";
+import { _ as TaskTitle } from "./session-B8fJb_Or.js";
 import { n as isRecord } from "./coerce-NSst8oRP.js";
 import path from "node:path";
 import { z } from "zod";
@@ -84,8 +84,8 @@ var CoherenceOrient = z.looseObject({
 		})),
 		unsynthesized: z.array(z.unknown())
 	}).nullable(),
-	consequences: z.looseObject({ unverifiedCompletedWork: z.array(z.string()) }),
-	verification: z.looseObject({ state: z.string() })
+	consequences: z.looseObject({ unverifiedCompletedWork: z.array(z.string()) }).nullable(),
+	verification: z.looseObject({ state: z.string() }).nullable()
 });
 var CoherenceWorkInspect = z.looseObject({
 	work: z.array(z.looseObject({
@@ -568,6 +568,7 @@ z.object({
 });
 var PriorReview = z.object({
 	head: CommitSha,
+	base: CommitSha.optional(),
 	verdict: ReviewVerdict,
 	summary: z.string(),
 	body: z.string(),
@@ -670,6 +671,7 @@ var ReviewDraft = z.object({
 	tier: z.enum(["stamp", "full"]),
 	reasons: z.array(z.string()),
 	reviewedHead: CommitSha,
+	reviewedBase: CommitSha.optional(),
 	verdict: storedVerdict,
 	summary: z.string(),
 	assessment: ReviewAssessment.optional(),
@@ -1397,7 +1399,8 @@ var FactorySettings = z.object({
 		posthogProjectId: z.number().int().positive()
 	})).optional(),
 	dailyBudgetUsd: z.number().finite().nonnegative().nullable().optional(),
-	verifierModel: z.string().trim().min(1).nullable().optional()
+	verifierModel: z.string().trim().min(1).nullable().optional(),
+	mirrorHarnessRuns: optionalBoolean("factory.mirrorHarnessRuns")
 }).nullable().optional();
 var KnowledgeGraphSettings = optionalObject("knowledgeGraph", { enabled: optionalBoolean("knowledgeGraph.enabled") });
 var posthogNumberRanges = {
@@ -1453,6 +1456,14 @@ var PlanReviewSettings = z.object({ enabled: optionalBoolean("planReview.enabled
 var agentApiShape = { enabled: optionalBoolean("agentApi.enabled") };
 var AgentApiSettings = z.object(agentApiShape, { error: "agentApi must be an object" }).strict().optional();
 var AgentApiFileSettings = z.object(agentApiShape, { error: "agentApi must be an object" }).passthrough().optional();
+var optionalPathList = (field) => z.array(z.string({ error: `${field} must be an array of paths` }).trim().min(1, { error: `${field} must be an array of paths` }), { error: `${field} must be an array of paths` }).optional();
+var sandboxShape = {
+	unconfinedRepos: optionalPathList("sandbox.unconfinedRepos"),
+	writablePaths: optionalPathList("sandbox.writablePaths"),
+	unreadablePaths: optionalPathList("sandbox.unreadablePaths")
+};
+var SandboxSettings = z.object(sandboxShape, { error: "sandbox must be an object" }).strict().optional();
+var SandboxFileSettings = z.object(sandboxShape, { error: "sandbox must be an object" }).passthrough().optional();
 var telemetryShape = { enabled: optionalBoolean("telemetry.enabled") };
 var TelemetrySettings = z.object(telemetryShape, { error: "telemetry must be an object" }).strict().optional();
 var TelemetryFileSettings = z.object(telemetryShape, { error: "telemetry must be an object" }).passthrough().optional();
@@ -1469,7 +1480,6 @@ var createBrowserConfigShape = (isAbsolutePath) => ({
 	calmLayout: optionalBoolean("calmLayout"),
 	detectBackgroundAgents: optionalBoolean("detectBackgroundAgents"),
 	recordSignals: optionalBoolean("recordSignals"),
-	antiSlopPrompt: optionalBoolean("antiSlopPrompt"),
 	rtk: optionalBoolean("rtk"),
 	saneYolo: optionalBoolean("saneYolo"),
 	skipPermissionsByDefault: optionalBoolean("skipPermissionsByDefault"),
@@ -1496,6 +1506,7 @@ var createBrowserConfigShape = (isAbsolutePath) => ({
 	telegram: TelegramSettings,
 	ingest: IngestSettings,
 	agentApi: AgentApiSettings,
+	sandbox: SandboxSettings,
 	telemetry: TelemetrySettings,
 	workflows: WorkflowsSettings.nullable().optional()
 });
@@ -1591,7 +1602,8 @@ var ProjectConfig = z.object({
 	repos: z.array(z.string()).min(2).optional(),
 	agent: z.string({ error: "projects[].agent must be a string" }).regex(AGENT_ID_RE, { error: `projects[].agent must be ${AGENT_ID_SHAPE_MESSAGE}` }).optional(),
 	codexBypassHookTrust: z.boolean().optional(),
-	dangerouslySkipPermissions: z.boolean({ error: "projects[].dangerouslySkipPermissions must be a boolean" }).optional()
+	dangerouslySkipPermissions: z.boolean({ error: "projects[].dangerouslySkipPermissions must be a boolean" }).optional(),
+	unconfined: z.boolean({ error: "projects[].unconfined must be a boolean" }).optional()
 }).passthrough();
 var FILE_CONFIG_SHAPE = {
 	...BROWSER_CONFIG_SHAPE,
@@ -1610,6 +1622,7 @@ var FILE_CONFIG_SHAPE = {
 	ingest: optionalLooseObject("ingest"),
 	workflows: optionalLooseObject("workflows"),
 	agentApi: AgentApiFileSettings,
+	sandbox: SandboxFileSettings,
 	telemetry: TelemetryFileSettings,
 	trace: TraceSettings,
 	planReview: PlanReviewSettings,
@@ -1666,6 +1679,7 @@ var CONFIG_BLOCK_KEYS = Object.freeze([
 	"telegram",
 	"ingest",
 	"agentApi",
+	"sandbox",
 	"telemetry",
 	"workflows",
 	"coder"

package/dist/chunks/{config-store-BCy4FHNG.js → config-store-BVtdHkDK.js}

@@ -3,8 +3,8 @@ import { i as equalsIgnoringCaseOnWindows, t as canonicalizePath } from "./paths
 import { n as glimmervoidHomeDir$1, t as decideConfigPath } from "./config-path-core-DFt-TemS.js";
 import { a as positiveIntOr, c as textOr, n as isRecord } from "./coerce-NSst8oRP.js";
 import { d as writeJsonAtomicSync, f as writeTextAtomic, p as writeTextAtomicSync } from "./json-file-oEH9vt-0.js";
-import { St as normalizeLegacyConfigNumbers, f as BranchGcFileSettings, i as Config, l as configIssueMessage, m as DEFAULT_FACTORY_PROTECTED_PATHS, n as BUILTIN_AGENT_IDS, p as DEFAULT_FACTORY_CHECKS, s as RUNTIME_CONFIG_SCALAR_KEYS, t as AGENT_ID_SHAPE_MESSAGE } from "./config-W1Sv-iPK.js";
-import { V as FeatureFlagsResponse, W as TELEMETRY_KILL_SWITCH_FLAG } from "./contracts-3LkrilQX.js";
+import { St as normalizeLegacyConfigNumbers, f as BranchGcFileSettings, i as Config, l as configIssueMessage, m as DEFAULT_FACTORY_PROTECTED_PATHS, n as BUILTIN_AGENT_IDS, p as DEFAULT_FACTORY_CHECKS, s as RUNTIME_CONFIG_SCALAR_KEYS, t as AGENT_ID_SHAPE_MESSAGE } from "./config-CZ4H51D0.js";
+import { V as FeatureFlagsResponse, W as TELEMETRY_KILL_SWITCH_FLAG } from "./contracts-DXujp-Zn.js";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -1111,15 +1111,20 @@ var DEFAULT_CONFIG = {
 		watchWindowMinutes: 30,
 		watchProjects: [],
 		dailyBudgetUsd: null,
-		verifierModel: null
+		verifierModel: null,
+		mirrorHarnessRuns: false
 	},
 	agentApi: { enabled: false },
+	sandbox: {
+		unconfinedRepos: [],
+		writablePaths: ["~/.npm", "~/.cache"],
+		unreadablePaths: []
+	},
 	telemetry: { enabled: true },
 	checkForUpdates: true,
 	updateChannel: "release",
 	autoResume: true,
 	skipPermissionsByDefault: false,
-	antiSlopPrompt: false,
 	rtk: false,
 	saneYolo: true,
 	telegramNotifications: false,
@@ -1517,9 +1522,12 @@ function createConfigStore({ settingsDefaults } = {}) {
 			recordSignals: config.recordSignals ?? effectiveDefaults.recordSignals,
 			trace: { enabled: config.trace?.enabled ?? DEFAULT_CONFIG.trace.enabled },
 			agentApi: { enabled: config.agentApi?.enabled ?? DEFAULT_CONFIG.agentApi.enabled },
+			sandbox: {
+				...DEFAULT_CONFIG.sandbox,
+				...config.sandbox
+			},
 			telemetry: { enabled: config.telemetry?.enabled ?? DEFAULT_CONFIG.telemetry.enabled },
 			telemetryForcedOff: isTelemetryForcedOff(process.env),
-			antiSlopPrompt: config.antiSlopPrompt ?? effectiveDefaults.antiSlopPrompt,
 			rtk: config.rtk ?? effectiveDefaults.rtk,
 			rtkInstallSupported: assetForPlatform(process.platform, process.arch) !== null,
 			saneYolo: config.saneYolo ?? effectiveDefaults.saneYolo,
@@ -1592,6 +1600,7 @@ function createConfigStore({ settingsDefaults } = {}) {
 		if (newConfig.telegram != null) config.telegram = newConfig.telegram;
 		if (newConfig.ingest != null) config.ingest = newConfig.ingest;
 		if (newConfig.agentApi != null) config.agentApi = newConfig.agentApi;
+		if (newConfig.sandbox != null) config.sandbox = newConfig.sandbox;
 		if (newConfig.telemetry != null) config.telemetry = newConfig.telemetry;
 		if (newConfig.workflows == null) delete config.workflows;
 		if (newConfig.workflows != null) config.workflows = newConfig.workflows;

package/dist/chunks/config-store-Cp62jN1O.js

@@ -0,0 +1,2 @@
+import { c as loadConfigFile } from "./config-store-BVtdHkDK.js";
+export { loadConfigFile };