glimmervoid 0.43.2 → 0.43.3

package/dist/client/index.html

@@ -7,10 +7,10 @@
   <link rel="icon" type="image/svg+xml" href="/assets/favicon-CKygeLwW.svg">
   <title>Glimmervoid</title>
   <style>html,body{background:var(--bg,#0a0810);height:100%;color:var(--text,#c8c0e0);font-family:var(--font-mono,"CommitMono", "Cascadia Code", "Fira Code", "Consolas", "Menlo", monospace);margin:0;padding:0}.app-shell{display:none}html:not([data-layout=phone]) .app-ready .app-shell{display:contents}.loading-screen{z-index:9999;background:#0a0810;flex-direction:column;justify-content:center;align-items:center;gap:20px;transition:opacity .3s;display:flex;position:fixed;inset:0}.loading-screen.fade-out{opacity:0;pointer-events:none}.loading-title{letter-spacing:.1em;color:#e8e0ff;text-transform:uppercase;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:20px;font-weight:700}.loading-title:before{content:"▸";color:#c084fc}.loading-status{color:#8276b0;letter-spacing:.04em;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:12px}.loading-detail{color:#5e5584;text-align:center;text-wrap:balance;max-width:min(34ch,100vw - 32px);margin-top:-8px;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:12px;line-height:1.6}.loading-spinner{border:2px solid #2a2440;border-top-color:#c084fc;border-radius:50%;width:28px;height:28px;animation:.8s linear infinite spin}@keyframes spin{to{transform:rotate(360deg)}}.shutdown-screen:not(.active) .loading-spinner{animation:none}.shutdown-screen{z-index:9999;-webkit-backdrop-filter:blur();backdrop-filter:blur();pointer-events:none;opacity:0;background:#0a081000;flex-direction:column;justify-content:center;align-items:center;gap:20px;transition:background .4s,-webkit-backdrop-filter .4s,backdrop-filter .4s,opacity .3s;display:flex;position:fixed;inset:0}.shutdown-screen.active{-webkit-backdrop-filter:blur(8px);backdrop-filter:blur(8px);pointer-events:auto;opacity:1;background:#0a0810eb}.shutdown-status{color:#8276b0;letter-spacing:.04em;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:12px;transition:color .3s}.shutdown-screen.done .loading-spinner{opacity:.3;border-color:#2a2440;animation:none}.shutdown-screen.done .shutdown-status{color:#4a4268}</style>
-  <script type="module" crossorigin src="/assets/index-CNDdyYn0.js"></script>
+  <script type="module" crossorigin src="/assets/index-BA0smAG8.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/zod-BRLv4KqJ.js">
   <link rel="modulepreload" crossorigin href="/assets/xterm-kR64YvZ-.js">
-  <link rel="stylesheet" crossorigin href="/assets/index-DEbBUagP.css">
+  <link rel="stylesheet" crossorigin href="/assets/index-CFJ6Pl08.css">
 </head>
 <body>
   <div class="loading-screen" id="loading-screen">

package/dist/server/index.js

@@ -1,5 +1,5 @@
 import { a as formatNodePtyBootRefusal, t as probeNodePty } from "../chunks/node-pty-preflight-C8QIlrtU.js";
-import { a as packageRoot } from "../chunks/runtime-paths-BkeftE60.js";
+import { o as packageRoot } from "../chunks/runtime-paths-ghcH9CeW.js";
 import fs from "node:fs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
@@ -87,6 +87,6 @@ if (!nodePty.ok) {
 	}));
 	process.exit(1);
 }
-await import("../chunks/main-BGJ7PAA2.js");
+await import("../chunks/main-BPyE0fvz.js");
 //#endregion
 export {};

package/dist/session/remote-setup/SKILL.md

@@ -0,0 +1,120 @@
+---
+name: remote-host-setup
+description: Stand up a remote Linux host that runs Glimmervoid as a service, reached from the operator's laptop and phone. Use in the Glimmervoid remote setup session.
+---
+
+# Remote host setup
+
+You run on the operator's current Glimmervoid machine, outside the guardrails, with their ssh keys. You drive the new host over `ssh`. Every step that must happen on the operator's laptop or phone, or that needs an interactive login, you hand to the operator as an exact command and wait for them to confirm.
+
+The end state:
+
+- Glimmervoid runs on the remote host as a systemd user service that survives logout and reboot.
+- The operator reaches its dashboard from the laptop, and from the phone through a paired device link.
+- Sessions on the host can sign commits through the operator's forwarded ssh agent.
+- Guarded sessions on the host can start their sandbox.
+
+## Ground rules
+
+- Ask before you assume. Start by asking for: the ssh host alias or `user@host`, whether it is a Coder workspace, whether the operator uses Tailscale, and which agent CLIs (Claude Code, Codex) they want on the host.
+- Run one remote command per `ssh` call and read its output before the next. Never pipe a downloaded script into a shell without showing the operator the URL first.
+- `sudo` on the remote needs the operator's approval every time. Say what it changes and how to revert it.
+- Never restart, stop or reinstall a Glimmervoid server from a session that server hosts: the session is a child of the server and dies with it halfway through. This session runs on the operator's current machine, so restarting the NEW host's service is fine; restarting the server this session lives in is not.
+- Never copy private keys, tokens or `~/.glimmervoid/config.json` secrets between machines. Secrets go into `~/.glimmervoid/secrets.env` on the host, typed by the operator.
+- Never set `GLIMMERVOID_HOST` to a non-loopback address or set `GLIMMERVOID_INSECURE_BIND=1`. Remote access goes through the remote listener and an HTTPS proxy only.
+
+## 1. Reach the host
+
+- Plain host: confirm `ssh <host> true` works without a password prompt. If it does not, hand the operator `ssh-copy-id <host>` to run themselves.
+- Coder workspace: the operator runs `coder login <deployment-url>` and `coder config-ssh` on the laptop and on this machine, then the host alias is `coder.<workspace>`. `CODER_SSH_DISABLE_AUTOSTART=true coder ssh <workspace> -- <command>` also works.
+- Record the facts you find: `uname -a`, `cat /etc/os-release`, `systemctl --user status` (user systemd must be running), free disk, and memory.
+
+## 2. Prerequisites on the host
+
+- Node.js 22.18.0 or newer (`node --version`). If missing, propose a user-level install (nvm or fnm) rather than a system package, and note the absolute `node` path for the unit file.
+- Build tools for `node-pty`: `make`, `g++`, `python3`. On Debian or Ubuntu that is `sudo apt-get install -y build-essential python3`.
+- `git`, and `bubblewrap` (the `bwrap` binary) for the guardrails sandbox.
+- The agent CLIs the operator chose: `npm install -g @anthropic-ai/claude-code` and or `npm install -g @openai/codex`. Logging in is interactive: hand the operator `ssh -t <host> claude` and `ssh -t <host> codex login` and wait.
+
+### Ubuntu sandbox prerequisite
+
+Ubuntu 23.10 and later set `kernel.apparmor_restrict_unprivileged_userns=1`, which makes `bwrap` fail with `setting up uid map: Permission denied` or `loopback: Failed RTM_NEWADDR`, and guarded sessions never start. Test it:
+
+```bash
+bwrap --ro-bind / / --dev /dev --unshare-net true && echo sandbox-ok
+```
+
+If it fails, propose the narrow fix, which grants user namespaces to `bwrap` only, and get the operator's approval for the `sudo` steps:
+
+```bash
+printf 'abi <abi/4.0>,\ninclude <tunables/global>\nprofile bwrap /usr/bin/bwrap flags=(unconfined) {\n  userns,\n}\n' | sudo tee /etc/apparmor.d/bwrap
+sudo apparmor_parser -r /etc/apparmor.d/bwrap
+```
+
+Revert by deleting `/etc/apparmor.d/bwrap` and reloading AppArmor. Do not disable the sysctl machine wide.
+
+## 3. Install Glimmervoid
+
+```bash
+npm install -g glimmervoid
+glimmervoid doctor
+```
+
+`glimmervoid doctor` must pass before you go on. If `glimmervoid` is not on `PATH`, check `npm prefix -g`.
+
+## 4. Run it as a service
+
+`glimmervoid.service` beside this file is the unit template. Fill its placeholders on the host:
+
+- `__NODE__`: absolute path of `node` (`command -v node` on the host).
+- `__GLIMMERVOID__`: absolute path of the installed `glimmervoid` bin script (`command -v glimmervoid`).
+- `__PATH__`: a `PATH` that reaches `node`, `glimmervoid`, `git` and the agent CLIs, built from absolute directories, never `$PATH`.
+
+Write it to `~/.config/systemd/user/glimmervoid.service`, then:
+
+```bash
+systemctl --user daemon-reload
+systemctl --user enable --now glimmervoid
+sudo loginctl enable-linger "$USER"
+systemctl --user status glimmervoid
+journalctl --user -u glimmervoid -n 50
+```
+
+`enable-linger` keeps the service alive after the operator logs out; it needs `sudo` on most hosts. The log must show `Open http://localhost:<port>`, the local dashboard listener bound to loopback.
+
+## 5. Reach the dashboard
+
+The local listener has no authentication and stays on loopback. Pick one route with the operator:
+
+- **Laptop over ssh**: `ssh -L 3000:127.0.0.1:3000 <host>` on the laptop, then open `http://localhost:3000`. Simplest, laptop only.
+- **Laptop and phone over Tailscale** (the devbox route):
+  1. Install Tailscale on the host and join the tailnet: hand the operator `sudo tailscale up` since it prints a login URL.
+  2. On the host, edit `~/.glimmervoid/config.json` by hand (`glimmervoid settings` cannot change `remote`), keeping every other key. Set `"remote": { "enabled": true, "port": 3456, "publicHost": "<machine>.<tailnet>.ts.net" }`. `port` must differ from the dashboard port. Optionally add `"ownerLogin": "<their tailscale login>"`.
+  3. `systemctl --user restart glimmervoid`, then check the log for `remote listener on http://127.0.0.1:3456 (paired devices only)`.
+  4. `tailscale serve --bg 3456`. Use HTTP mode only: `ownerLogin` proves nothing behind `--tcp` or `--tls-terminated-tcp`.
+  5. Each device opens `https://<publicHost>/` and sees "Pairing required". On the host, `glimmervoid pair --name <device>` prints a single-use link that expires in 10 minutes. The operator opens it on that device. Treat the link like a password: show it only in this session, never write it to a file.
+- **Coder workspace**: Coder proxies the remote listener port as a workspace app; the URL shape is the deployment's own.
+  1. On the host, edit `~/.glimmervoid/config.json` by hand (`glimmervoid settings` cannot change `remote`), keeping every other key. Set `"remote": { "enabled": true, "port": 3456, "publicHost": "<coder app hostname for that port>" }`. `port` must differ from the dashboard port. Use `"allowedOrigins": ["https://<coder app hostname>"]` instead of `publicHost` if the operator needs explicit origins. With neither set, dashboard WebSockets from the Coder app origin are rejected.
+  2. `systemctl --user restart glimmervoid`, then check the log for `remote listener on http://127.0.0.1:3456 (paired devices only)`.
+  3. Pair exactly as in the Tailscale route: open `https://<coder app hostname>/`, then `glimmervoid pair --name <device>` on the host.
+
+## 6. Commit signing
+
+If the operator signs commits with an ssh key held by an agent on the laptop (for example Secretive), no key file belongs on the host. Glimmervoid sessions sign through `glimmervoid ssh-sign`, which signs with the forwarded agent the server finds. That needs a live forwarded connection from the laptop:
+
+- Plain host: `ssh -A <host>` kept open, or `ForwardAgent yes` for that host in the laptop's `~/.ssh/config`.
+- Coder: `coder ssh -A <workspace>`; plain `coder ssh` forwards nothing.
+
+Set git on the host to sign with the public key only: `git config --global gpg.format ssh`, `git config --global user.signingkey '<public key line>'`, `git config --global commit.gpgsign true`. "agent refused operation" means the laptop declined or timed out the approval.
+
+## 7. Prove it
+
+Finish only when each of these holds, and show the operator the evidence:
+
+1. `systemctl --user is-active glimmervoid` prints `active`, and `systemctl --user is-enabled glimmervoid` prints `enabled`.
+2. `glimmervoid doctor` passes on the host.
+3. The operator opened the dashboard through the chosen route and sees it.
+4. If Tailscale was set up: a paired device loads the dashboard.
+5. If the sandbox check ran: it printed `sandbox-ok`.
+
+Then summarize for the operator: the host, the dashboard URL, which steps they still own (logins, keeping `ssh -A` open for signing), and how to undo each change you made.

package/dist/session/remote-setup/glimmervoid.service

@@ -0,0 +1,20 @@
+[Unit]
+Description=Glimmervoid
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=__NODE__ __GLIMMERVOID__
+EnvironmentFile=-%h/.glimmervoid/secrets.env
+Environment=PATH=__PATH__
+KillMode=control-group
+TimeoutStopSec=10
+LimitNOFILE=65536
+Restart=on-failure
+RestartSec=5
+OOMPolicy=continue
+MemoryHigh=50%
+MemoryMax=60%
+
+[Install]
+WantedBy=default.target

package/dist/session/statusline-relay.js

@@ -1,7 +1,7 @@
 import { o as spawn } from "../chunks/child-process-safe-D4hyVIXj.js";
+import { n as isRecord } from "../chunks/coerce-NSst8oRP.js";
 import { t as readStdin } from "../chunks/relay-stdin-CpHvLu6M.js";
 import { t as postPayload } from "../chunks/loopback-post-DZK7YibD.js";
-import { n as isRecord } from "../chunks/coerce-NSst8oRP.js";
 import { n as parseJsonRecord } from "../chunks/json-core-dfa_7Fak.js";
 //#region session/statusline-relay.ts
 var NO_CHAIN = "-";

package/dist/session/visions-relay.js

@@ -1,5 +1,5 @@
-import { n as glimmervoidHomeDir, t as decideConfigPath } from "../chunks/config-path-core-DFt-TemS.js";
 import { n as isRecord } from "../chunks/coerce-NSst8oRP.js";
+import { n as glimmervoidHomeDir, t as decideConfigPath } from "../chunks/config-path-core-DFt-TemS.js";
 import { d as applyDidOpen, f as createDocStore, h as getDoc, l as applyDidChange, m as formatRange, t as ACTIVITY_METHOD, u as applyDidClose, v as listDocs, x as uriOfParams } from "../chunks/ingest-editor-core-B2tycW_m.js";
 import { r as nextBackoffMs } from "../chunks/backoff-DjVpfHk7.js";
 import { n as unrefTimer } from "../chunks/timer-deps-u2DAQLok.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "glimmervoid",
-  "version": "0.43.2",
+  "version": "0.43.3",
   "description": "Mission control that ships. Not a terminal multiplexer: Claude Code, Codex and Grok each work in their own git worktree, and the one session that needs you comes to the front",
   "main": "dist/server/index.js",
   "type": "module",

package/dist/chunks/agent-api-core-BeSecYrA.js

@@ -1,336 +0,0 @@
-import { a as AgentCloseRequest, c as AgentPullRequestRequest, f as AgentSettingsRequest, i as AgentAttentionRequest, l as AgentReadRequest, o as AgentEditRequest, p as AgentSpawnRequest, t as AGENT_API_VERBS, u as AgentSendRequest } from "./session-BUcx9uJa.js";
-import { s as pullRequestKeyFromReference } from "./control-messages-CD99vE0V.js";
-import { n as NO_OWN_WORKTREE_REASON, t as COMMAND_ROUTES } from "./session-routes-DdeSkLqC.js";
-import crypto from "node:crypto";
-var MAX_SPAWNS_IN_FLIGHT = 1;
-var REFUSAL_REASON = "unknown session";
-var INVALID_BODY_STATUS = 400;
-var ROLE_REFUSED_STATUS = 403;
-var PUSH_REFUSED_STATUS = 409;
-var PUSH_REFUSAL_COPY = Object.freeze({
-	"no-worktree": () => NO_OWN_WORKTREE_REASON,
-	"merge-in-progress": () => "a merge for this session is already running, so try again when it ends",
-	"not-continuable": () => "this session cannot be merged in its current state",
-	destroyed: () => "this session is ending",
-	"nothing-to-commit": () => "no commit on this branch is missing from the integration branch, so commit your work first",
-	"rebase-conflict": ({ base, conflicts = [] }) => `this branch conflicts with ${base} in ${conflicts.join(", ") || "one or more files"}, so rebase onto ${base}, resolve the conflicts, commit, then push again`,
-	"not-fast-forward": ({ base }) => `${base} could not be fast-forwarded to this branch, and a push is never forced`,
-	"base-diverged": ({ base }) => `the local ${base} and origin/${base} have diverged, which the operator has to reconcile`
-});
-function tokensMatch(presented, expected) {
-	if (presented.length !== expected.length) return false;
-	try {
-		return crypto.timingSafeEqual(Buffer.from(presented, "utf8"), Buffer.from(expected, "utf8"));
-	} catch {
-		return false;
-	}
-}
-function refused() {
-	return {
-		ok: false,
-		status: 404,
-		reason: REFUSAL_REASON
-	};
-}
-function decideAgentRequest({ sessionId, presentedToken, expectedToken, isLoopback }) {
-	if (!isLoopback) return refused();
-	if (!sessionId) return refused();
-	if (!expectedToken) return refused();
-	if (!presentedToken) return refused();
-	if (!tokensMatch(presentedToken, expectedToken)) return refused();
-	return { ok: true };
-}
-function decideSpawnAllowance({ liveChildren, lifetimeSpawns, inFlight }) {
-	if (inFlight >= MAX_SPAWNS_IN_FLIGHT) return {
-		ok: false,
-		status: 429,
-		reason: "a spawn is already in flight"
-	};
-	if (liveChildren >= 3) return {
-		ok: false,
-		status: 429,
-		reason: `at most 3 spawned sessions may be live at once`
-	};
-	if (lifetimeSpawns >= 10) return {
-		ok: false,
-		status: 429,
-		reason: `this session has used its 10 spawns`
-	};
-	return { ok: true };
-}
-function describeRoleRefusal(verb, caller) {
-	const route = COMMAND_ROUTES[verb](caller);
-	if (route.answers) return null;
-	if (route.code) return {
-		status: PUSH_REFUSED_STATUS,
-		body: {
-			ok: false,
-			reason: route.code,
-			error: route.reason
-		}
-	};
-	return {
-		status: ROLE_REFUSED_STATUS,
-		body: {
-			ok: false,
-			error: route.reason
-		}
-	};
-}
-function isAgentApiVerb(verb) {
-	return AGENT_API_VERBS.includes(verb);
-}
-function refuseInvalidBody(issues) {
-	return {
-		ok: false,
-		status: INVALID_BODY_STATUS,
-		error: issues[0]?.message || "invalid request"
-	};
-}
-function bodyParser(schema) {
-	return (payload) => {
-		const parsed = schema.safeParse(payload);
-		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
-		return {
-			ok: true,
-			request: parsed.data
-		};
-	};
-}
-var parseEmptyBody = () => ({
-	ok: true,
-	request: {}
-});
-var parsePullRequestBody = (payload) => {
-	const parsed = AgentPullRequestRequest.safeParse(payload);
-	if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
-	const pullRequestKey = pullRequestKeyFromReference(parsed.data.pr);
-	if (!pullRequestKey) return {
-		ok: false,
-		status: INVALID_BODY_STATUS,
-		error: "pr must be a GitHub pull request url or owner/repo#number"
-	};
-	return {
-		ok: true,
-		request: { pullRequestKey }
-	};
-};
-var REQUEST_PARSERS = Object.freeze({
-	spawn: bodyParser(AgentSpawnRequest),
-	send: bodyParser(AgentSendRequest),
-	read: bodyParser(AgentReadRequest),
-	close: bodyParser(AgentCloseRequest),
-	attention: bodyParser(AgentAttentionRequest),
-	board: parseEmptyBody,
-	push: parseEmptyBody,
-	edit: bodyParser(AgentEditRequest),
-	limits: parseEmptyBody,
-	review: parsePullRequestBody,
-	reviews: parseEmptyBody,
-	prs: parseEmptyBody,
-	"link-pr": parsePullRequestBody,
-	settings: bodyParser(AgentSettingsRequest)
-});
-function parseAgentVerb(verb, payload) {
-	if (!isAgentApiVerb(verb)) return {
-		ok: false,
-		status: 404,
-		error: REFUSAL_REASON
-	};
-	const parsed = REQUEST_PARSERS[verb](payload);
-	if (!parsed.ok) return parsed;
-	return {
-		ok: true,
-		verb,
-		request: parsed.request
-	};
-}
-function describeChildWorktree({ worktreeDir, branch }) {
-	return branch ? `branch ${branch} at ${worktreeDir}` : worktreeDir;
-}
-function describeUnpushedCloseRefusal(childName, childId, worktree) {
-	return `${childName} holds work that is not on the integration branch (${describeChildWorktree(worktree)}), so it was not closed. Ask it to land the work with glimmervoid push (glimmervoid send ${childId} <text>), or run glimmervoid close ${childId} --discard to end it and throw the work away`;
-}
-function describeChildEndNote(childName, outcome) {
-	if (outcome.kind === "kept") return `${childName} ended holding work that is not on the integration branch, so its worktree was kept: ${describeChildWorktree(outcome.worktree)}. The operator decides whether to merge or discard it`;
-	if (outcome.kind === "discarded") return `${childName} ended and its worktree was discarded`;
-	return `${childName} ended`;
-}
-function describeKeptChildAttention(childName, worktree) {
-	return `${childName}, a session this one spawned, ended holding unpushed work: ${describeChildWorktree(worktree)}`;
-}
-function describePushLanding(landing) {
-	if (!landing.merged) {
-		const reason = landing.reason || "unknown";
-		const explain = PUSH_REFUSAL_COPY[reason];
-		return {
-			status: PUSH_REFUSED_STATUS,
-			body: {
-				ok: false,
-				reason,
-				error: explain ? explain(landing) : `the merge stopped: ${reason}`
-			}
-		};
-	}
-	if (landing.pushed) return {
-		status: 200,
-		body: {
-			ok: true,
-			landedOn: landing.base ?? null,
-			pushed: true
-		}
-	};
-	return {
-		status: 200,
-		body: {
-			ok: true,
-			landedOn: landing.base ?? null,
-			pushed: false,
-			note: "landed locally and nothing was pushed, because the repository has no origin remote or origin did not take a fast-forward"
-		}
-	};
-}
-function projectReviews({ configured, reason, inFlight, queued, drafts }) {
-	const identity = ({ key, title, url, author }) => ({
-		key,
-		title,
-		url,
-		author
-	});
-	return {
-		ok: true,
-		configured,
-		reason: reason ?? null,
-		reviewing: inFlight.map((review) => ({
-			...identity(review),
-			phase: review.phase
-		})),
-		queued: queued.map(identity),
-		drafts: drafts.map((draft) => ({
-			...identity(draft),
-			status: draft.status,
-			verdict: draft.verdict,
-			summary: draft.summary,
-			comments: draft.comments.length,
-			isOutOfDate: draft.liveHead !== void 0 && draft.liveHead !== draft.reviewedHead
-		}))
-	};
-}
-function projectMyPrs(snapshot) {
-	if (!snapshot) return {
-		ok: true,
-		configured: false,
-		prs: []
-	};
-	return {
-		ok: true,
-		configured: snapshot.configured,
-		prs: snapshot.prs.map((pr) => ({
-			key: pr.key,
-			title: pr.title,
-			url: pr.url,
-			state: pr.state,
-			isDraft: pr.isDraft,
-			stage: pr.stage,
-			reviewDecision: pr.reviewDecision,
-			approvals: pr.approvals,
-			unresolvedThreads: pr.unresolvedThreads,
-			behindBy: pr.behindBy,
-			mergeable: pr.mergeable,
-			isInMergeQueue: pr.isInMergeQueue,
-			checks: {
-				state: pr.checks.state,
-				failing: pr.checks.failing
-			}
-		}))
-	};
-}
-function deriveChildSessionName(parentName, existingNames) {
-	const base = `${String(parentName || "").trim() || "session"} agent`;
-	const taken = new Set(existingNames);
-	let candidate = base;
-	let suffix = 1;
-	while (taken.has(candidate)) {
-		suffix += 1;
-		candidate = `${base} ${suffix}`;
-	}
-	return candidate;
-}
-var USAGE_COLUMN_WIDTH = 20;
-var AGENT_COMMAND_HELP = Object.freeze({
-	spawn: {
-		usage: "spawn <prompt>",
-		summary: "Start a session on that prompt that this session owns until its task is done",
-		missingArgumentHint: "glimmervoid spawn: this command needs text, for example \"glimmervoid spawn check the failing test\""
-	},
-	send: {
-		usage: "send [child] <text>",
-		summary: "Message a session this one spawned; a spawned session messages its parent with send <text>",
-		missingArgumentHint: "glimmervoid send: this command needs text, for example \"glimmervoid send the tests pass\" or, to a spawned session, \"glimmervoid send <child> fix the failing test\""
-	},
-	read: {
-		usage: "read [child]",
-		summary: "Read what this session's spawned sessions sent; a spawned session reads its parent's messages",
-		missingArgumentHint: null
-	},
-	close: {
-		usage: "close <child>",
-		summary: "End a session this one spawned and discard its worktree; refused while it holds unpushed work unless --discard",
-		missingArgumentHint: "glimmervoid close: this command needs the spawned session, for example \"glimmervoid close <child>\""
-	},
-	attention: {
-		usage: "attention <note>",
-		summary: "Flag this session as needing the operator",
-		missingArgumentHint: "glimmervoid attention: this command needs text, for example \"glimmervoid attention check the failing test\""
-	},
-	board: {
-		usage: "board",
-		summary: "List the live sessions",
-		missingArgumentHint: null
-	},
-	push: {
-		usage: "push",
-		summary: "Land this session's commits on the integration branch and push it",
-		missingArgumentHint: null
-	},
-	edit: {
-		usage: "edit <path>",
-		summary: "Open a text file for the operator to edit in the dashboard",
-		missingArgumentHint: "glimmervoid edit: this command needs a file path, for example \"glimmervoid edit drafts/post.md\""
-	},
-	review: {
-		usage: "review <pr>",
-		summary: "Queue a team review of a pull request; the draft waits in the Reviews tab for the operator to post",
-		missingArgumentHint: "glimmervoid review: this command needs a pull request, for example \"glimmervoid review https://github.com/acme/app/pull/12\" or \"glimmervoid review acme/app#12\""
-	},
-	reviews: {
-		usage: "reviews",
-		summary: "List the Reviews tab: reviews running, queued and drafted",
-		missingArgumentHint: null
-	},
-	prs: {
-		usage: "prs",
-		summary: "List the operator's open pull requests with their checks, reviews and merge state",
-		missingArgumentHint: null
-	},
-	"link-pr": {
-		usage: "link-pr <pr>",
-		summary: "Link a pull request to this session's card",
-		missingArgumentHint: "glimmervoid link-pr: this command needs a pull request, for example \"glimmervoid link-pr acme/app#12\""
-	},
-	settings: {
-		usage: "settings list|get",
-		summary: "Read Glimmervoid's settings; a secret shows only as configured or not",
-		missingArgumentHint: null
-	},
-	limits: {
-		usage: "limits",
-		summary: "List which of these commands answer here and what the guardrails block",
-		missingArgumentHint: null
-	}
-});
-function agentCommandHelpLines() {
-	return Object.values(AGENT_COMMAND_HELP).map(({ usage, summary }) => `  ${usage.padEnd(USAGE_COLUMN_WIDTH)}${summary}`);
-}
-//#endregion
-export { decideSpawnAllowance as a, describeKeptChildAttention as c, describeUnpushedCloseRefusal as d, isAgentApiVerb as f, projectReviews as h, decideAgentRequest as i, describePushLanding as l, projectMyPrs as m, REFUSAL_REASON as n, deriveChildSessionName as o, parseAgentVerb as p, agentCommandHelpLines as r, describeChildEndNote as s, AGENT_COMMAND_HELP as t, describeRoleRefusal as u };

package/dist/chunks/config-store-DW0ONWV5.js

@@ -1 +0,0 @@
-export { s as loadConfigFile } from "./config-store-2noiIsTg.js";