litmus-cli 1.4.35 → 1.4.37

package/README.md

@@ -102,7 +102,8 @@ While you're working, the background tracker sends activity data to Litmus
 in addition to the submission ZIP you upload at the end:
 
 - File-change events, git commits, and AI-tool usage detected on your machine
-  (process list, network endpoints) — every few seconds while you work.
+  (the names of editors and AI tools among your own user's running programs,
+  network endpoints) — every few seconds while you work.
 - Captured AI prompts and responses from Claude Code, Codex CLI, Cursor, the
   Gemini CLI, and Copilot CLI via those tools' hooks. `litmus init` installs
   the hooks and marks them trusted for the assessment folder (Codex's per-hook
@@ -110,7 +111,11 @@ in addition to the submission ZIP you upload at the end:
   trusted in Claude Code (`~/.claude.json`) and Codex (`[projects]` in
   `~/.codex/config.toml`), so no tool asks you to approve the hooks or the
   folder; `litmus submit` removes the hooks and every trust entry again. Copilot
-  Chat (VS Code side panel) is not hookable and is not captured.
+  Chat in VS Code is captured through the same `.github/hooks/litmus.json` hook
+  as the Copilot CLI, when the assessment folder is trusted. This was checked on
+  VS Code 1.131 with Copilot Chat 0.59.0 in agent mode. Coverage of every mode
+  has not been fully measured: other Copilot Chat modes, and the `copilot` CLI
+  beyond one interactive prompt (including `copilot -p`), have not been checked.
 - A periodic codebase snapshot (every five minutes) so the optional
   live-interview agent has up-to-date context. Snapshots are capped at 2 MB
   total and skip binaries, dotfiles (including `.env`), lockfiles,
@@ -127,6 +132,27 @@ in addition to the submission ZIP you upload at the end:
 You can confirm what's installed and what's being captured at any point with
 `litmus status`.
 
+## Where the AI hooks live and what they record
+
+`litmus init` installs the hooks for Claude Code, Codex, Cursor and the Gemini
+CLI in your user-level config for each tool: `~/.claude/settings.json`,
+`~/.codex/hooks.json`, `~/.cursor/hooks.json` and `~/.gemini/settings.json`.
+The Copilot hook is the exception: it lives inside the assessment folder, in
+`.github/hooks/litmus.json`.
+
+Because they are user-level, these hooks run for every prompt you send to those
+tools on this machine, not only prompts made inside the assessment. Each run
+checks where the prompt came from. A prompt made inside the assessment folder is
+recorded. A prompt made anywhere else, including a folder above the assessment
+such as your home folder, is not written down or sent to Litmus. So open the
+assessment folder itself in your editor, or `cd` into it before starting an AI
+tool, when you want that work captured.
+
+The hooks are removed when you run `litmus submit`. If you leave an assessment
+unfinished, they stay installed until you remove them, and prompts made inside
+that assessment's folder are still recorded there. You can remove them yourself
+at any time by deleting the Litmus entries from the files above.
+
 ## Requirements
 
 - Node.js 18+

package/dist/commands/connect.d.ts

@@ -40,7 +40,8 @@ export declare function parseSshCommand(cmd: string): ParsedSsh;
  * This does NOT turn multiplexing on; with no ControlMaster the directive is inert.
  * It only makes sure that a candidate who HAS enabled it multiplexes over a path that
  * fits. Every stanza gets it, because a ProxyJump opens its own connection to the
- * bastion and that one is the long path.
+ * bastion and that one is the long path. "Inert" holds everywhere EXCEPT Windows, where
+ * any ControlPath at all breaks the connection — see `controlPathFor` (ENG-2676).
  *
  * WRITING THE DIRECTIVE IS ONLY HALF OF IT. ssh takes the FIRST value it sees for a
  * keyword, so a global `Host *` sitting earlier in the file beats anything we write
@@ -50,7 +51,23 @@ export declare function parseSshCommand(cmd: string): ParsedSsh;
  * copy here is what applies when there is nothing global to lose to, and keeps this
  * block correct on its own.
  */
-export declare function buildSshConfigBlock(alias: string, keyPath: string, p: ParsedSsh): string;
+export declare function buildSshConfigBlock(alias: string, keyPath: string, p: ParsedSsh, platform?: NodeJS.Platform): string;
+/**
+ * ENG-2681 — an ssh_config argument, quoted so a space cannot split it.
+ *
+ * `keyPath` is built from the candidate's home directory, and a home with a space in it
+ * (`C:\Users\<two-word account name>`, common for Windows local accounts) split the unquoted line into
+ * two arguments. ssh does not skip a bad line; it rejects the whole file:
+ *
+ *     line 6: keyword identityfile extra arguments at end of line
+ *     terminating, 1 bad configuration options
+ *
+ * so every ssh the candidate ran, `git push` to GitHub included, failed until our block
+ * was deleted. Measured with `ssh -G`: the quoted form resolves to the path exactly as
+ * written, spaces and Windows backslashes (`\U`, `\.`) intact. A double quote cannot
+ * appear in a Windows path and has no portable escape in ssh_config, so it is not handled.
+ */
+export declare function quoteConfigArg(value: string): string;
 /**
  * A stanza carrying ONE directive, written ahead of the candidate's own config.
  *
@@ -66,8 +83,33 @@ export declare function buildSshConfigBlock(alias: string, keyPath: string, p: P
  * losing to the user's settings exactly as it did before, and a directive added to the
  * main block later cannot silently inherit precedence it was never reviewed for. Keep
  * this stanza to ControlPath alone.
+ *
+ * On Windows the same precedence is what carries ENG-2676, and it has to go further: its
+ * `none` must beat EVERY ControlPath the candidate has, preamble included, because there
+ * any ControlPath is fatal rather than merely too long. So the Windows stanza goes at the
+ * very top of the file (`upsertSshConfigContent`) and closes with a bare `Host *`, which
+ * hands everything after it — the candidate's preamble — back to every host exactly as
+ * before. Nothing of theirs moves; our one directive is simply read first.
+ */
+export declare function buildControlPathBlock(alias: string, p: ParsedSsh, platform?: NodeJS.Platform): string;
+/**
+ * The ControlPath we write: `~/.ssh/cm-%C` (ENG-1936), except `none` on Windows.
+ *
+ * ENG-2676. Win32-OpenSSH has no Unix-domain socket to multiplex over, so ANY ControlPath
+ * — with or without a ControlMaster — kills the connection before it offers a key:
+ *
+ *     debug1: getpeername failed: Not a socket
+ *     getsockname failed: Not a socket
+ *     Read from remote host <cid>.vm.litmushiring.com: Unknown error
+ *     Transferred: sent 0, received 0 bytes, in 0.0 seconds
+ *
+ * VS Code shows it as "Could not establish connection". Because the client dies before
+ * the bastion ever sees a key, nothing on our side logs it: no `resolve-ssh` call, no
+ * backend error, a healthy container. `none` switches sharing off outright, which is
+ * the only setting that works there. The socket-length problem `%C` exists for is a
+ * macOS one and cannot arise on Windows, since there is no socket.
  */
-export declare function buildControlPathBlock(alias: string, p: ParsedSsh): string;
+export declare function controlPathFor(platform: NodeJS.Platform): string;
 /**
  * Replace (or insert) this alias's regions in the ~/.ssh/config content. Idempotent:
  * re-running `connect` swaps them and never touches the rest of the user's config.
@@ -82,8 +124,14 @@ export declare function buildControlPathBlock(alias: string, p: ParsedSsh): stri
  * (or in an `Include`d file pulled in before their first stanza) is still read first and
  * still wins. Beating it would mean reordering the candidate's own config, which is not
  * a thing `litmus connect` should do to fix its own socket path.
+ *
+ * Except on Windows (ENG-2676), where that residual is a dead connection rather than a
+ * long path. There the control block goes at the very top instead, which reorders
+ * nothing: it closes with `Host *`, so the preamble after it still applies to every
+ * host, and only our one ControlPath is read ahead of it. `platform` must match the one
+ * `buildControlPathBlock` was given; both default to the running platform.
  */
-export declare function upsertSshConfigContent(existing: string, alias: string, block: string, controlBlock?: string): string;
+export declare function upsertSshConfigContent(existing: string, alias: string, block: string, controlBlock?: string, platform?: NodeJS.Platform): string;
 /** Short, stable alias from the workspace hostname (or token as a fallback). */
 export declare function aliasFor(sshHostname: string | null | undefined, token: string): string;
 /**
@@ -575,6 +623,13 @@ export declare function resolveIde(flag: string | undefined, log?: (line: string
     ide: IdeChoice;
     chosen: boolean;
 }>;
+/**
+ * Whether the post-start poll should keep going. The ordinary window covers every
+ * status; only a workspace the backend still reports `starting` earns the longer one,
+ * so a start that was answered `queued` (the row is back to `not_created`) is not held
+ * for eight minutes against something that is not coming.
+ */
+export declare function keepWaitingForWorkspace(elapsedMs: number, status: string | undefined): boolean;
 /**
  * The candidate's own assessment page.
  *

package/dist/commands/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAOL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAyChC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAQD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAwBtD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAkCxF;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAUzE;AAiCD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAKR;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItF;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,GAAG,EAAE,SAAS,CAAA;IACd,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAuB1D,CAAA;AAuED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAA;AAE1B;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUzE;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAuC7D,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,gBAAgC,GACpC,cAAc,CAMhB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,aAAuC,GAC/C,MAAM,EAAE,CA2BV;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,EACnD,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAgCV;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAyB3G;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,EAAE,CAwCV;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,EAAE,CA+BV;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,MAAM,EAAE,CAmBV;AAgCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAuClH;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,GAChB,MAAM,EAAE,CAMV;AAYD;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAiD3E,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,EACvC,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED,+FAA+F;AAC/F,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAExE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,KAAK,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,cAAc,GAAG,IAAI,CAAA;IAClD,oGAAoG;IACpG,aAAa,EAAE,aAAa,CAAA;IAC5B,eAAe,EAAE,MAAM,uBAAuB,CAAA;IAC9C,yDAAyD;IACzD,aAAa,EAAE,MAAM,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAA;IAC/C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACjD,cAAc,EAAE,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;CAC1G;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9F;IACE,IAAI,EAAE,eAAe,CAAA;IACrB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GACD;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAEL,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqB3G;AAUD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;AAE/D;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,EACzC,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAc9C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAKD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,aAAuC,GAAG,MAAM,EAAE,CAsB7F;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,EACzC,OAAO,GAAE,aAAuC,GAC/C,IAAI,CAiBN;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAMtD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CASvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,GACnD,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,EACpD,QAAQ,EAAE,cAAc,GACvB,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AA+ED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,OAAO,GACpB,SAAS,GAAG,QAAQ,GAAG,aAAa,CAGtC;AAED,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAofzG"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAOL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAiDhC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAQD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAwBtD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,CAAC,EAAE,SAAS,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAkCR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,SAAS,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAsBR;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAEhE;AAwCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAMR;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItF;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,GAAG,EAAE,SAAS,CAAA;IACd,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAuB1D,CAAA;AAuED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAA;AAE1B;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUzE;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAuC7D,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,gBAAgC,GACpC,cAAc,CAMhB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,aAAuC,GAC/C,MAAM,EAAE,CA2BV;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,EACnD,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAgCV;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAyB3G;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,EAAE,CAwCV;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,EAAE,CA+BV;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,MAAM,EAAE,CAmBV;AAgCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAuClH;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,GAChB,MAAM,EAAE,CAMV;AAYD;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAiD3E,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,EACvC,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED,+FAA+F;AAC/F,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAExE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,KAAK,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,cAAc,GAAG,IAAI,CAAA;IAClD,oGAAoG;IACpG,aAAa,EAAE,aAAa,CAAA;IAC5B,eAAe,EAAE,MAAM,uBAAuB,CAAA;IAC9C,yDAAyD;IACzD,aAAa,EAAE,MAAM,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAA;IAC/C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACjD,cAAc,EAAE,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;CAC1G;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9F;IACE,IAAI,EAAE,eAAe,CAAA;IACrB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GACD;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAEL,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqB3G;AAUD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;AAE/D;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,EACzC,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAc9C;AAcD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG9F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAKD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,aAAuC,GAAG,MAAM,EAAE,CAsB7F;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,EACzC,OAAO,GAAE,aAAuC,GAC/C,IAAI,CAiBN;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAMtD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CASvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,GACnD,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,EACpD,QAAQ,EAAE,cAAc,GACvB,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AA+ED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,OAAO,GACpB,SAAS,GAAG,QAAQ,GAAG,aAAa,CAGtC;AAED,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2hBzG"}

package/dist/commands/connect.js

@@ -10,8 +10,10 @@ import { fetchInitMetadata, startWorkspace, getConnection, fetchEditorChatConfig
 import { applyEditorChatConfig } from "../lib/chat-model-config.js";
 import { resolveApiBase } from "../lib/api-base.js";
 import { editorInstallCandidates, editorSpawnSpec } from "../lib/editor-binary.js";
+import { isWsl, whichOnPath, windowsSideEditor, wslEditorHint } from "../lib/wsl.js";
 import { parseEditorVersion, parseWorkspaceProbe, remoteProbeCommand, seedVerdict, verifyVerdict, VERIFY_SCHEDULE_MS, } from "../lib/editor-server.js";
 import { fatal, success, info, warn, setErrorContext } from "../lib/errors.js";
+import { oldWindowsSshHint, parseOpenSshVersion, proxyJumpBroken, readEditorSettings, readSshVersionBanner, sshExecutableFor, } from "../lib/ssh-client.js";
 import { editorEndingForewarning } from "../lib/session-end.js";
 import { announceCursorAutoRestart, attemptQuit, platformSupportsGracefulCursorRestart, realCursorProcessIo, renderCursorRestartOutcome, } from "../lib/cursor-restart.js";
 /**
@@ -114,7 +116,8 @@ export function parseSshCommand(cmd) {
  * This does NOT turn multiplexing on; with no ControlMaster the directive is inert.
  * It only makes sure that a candidate who HAS enabled it multiplexes over a path that
  * fits. Every stanza gets it, because a ProxyJump opens its own connection to the
- * bastion and that one is the long path.
+ * bastion and that one is the long path. "Inert" holds everywhere EXCEPT Windows, where
+ * any ControlPath at all breaks the connection — see `controlPathFor` (ENG-2676).
  *
  * WRITING THE DIRECTIVE IS ONLY HALF OF IT. ssh takes the FIRST value it sees for a
  * keyword, so a global `Host *` sitting earlier in the file beats anything we write
@@ -124,12 +127,12 @@ export function parseSshCommand(cmd) {
  * copy here is what applies when there is nothing global to lose to, and keeps this
  * block correct on its own.
  */
-export function buildSshConfigBlock(alias, keyPath, p) {
+export function buildSshConfigBlock(alias, keyPath, p, platform = process.platform) {
     const common = [
-        `  IdentityFile ${keyPath}`,
+        `  IdentityFile ${quoteConfigArg(keyPath)}`,
         `  IdentitiesOnly yes`,
         `  StrictHostKeyChecking accept-new`,
-        `  ControlPath ~/.ssh/cm-%C`,
+        `  ControlPath ${controlPathFor(platform)}`,
     ];
     const out = [CONNECT_BEGIN(alias)];
     if (p.jumpHost) {
@@ -142,6 +145,24 @@ export function buildSshConfigBlock(alias, keyPath, p) {
     out.push(CONNECT_END(alias));
     return out.join("\n") + "\n";
 }
+/**
+ * ENG-2681 — an ssh_config argument, quoted so a space cannot split it.
+ *
+ * `keyPath` is built from the candidate's home directory, and a home with a space in it
+ * (`C:\Users\<two-word account name>`, common for Windows local accounts) split the unquoted line into
+ * two arguments. ssh does not skip a bad line; it rejects the whole file:
+ *
+ *     line 6: keyword identityfile extra arguments at end of line
+ *     terminating, 1 bad configuration options
+ *
+ * so every ssh the candidate ran, `git push` to GitHub included, failed until our block
+ * was deleted. Measured with `ssh -G`: the quoted form resolves to the path exactly as
+ * written, spaces and Windows backslashes (`\U`, `\.`) intact. A double quote cannot
+ * appear in a Windows path and has no portable escape in ssh_config, so it is not handled.
+ */
+export function quoteConfigArg(value) {
+    return `"${value}"`;
+}
 /** A line that opens a conditional block, i.e. the point after which anything we write
  *  is no longer first for the keywords a preceding stanza already set. */
 const OPENS_A_STANZA = /^[ \t]*(Host|Match)[ \t=]/i;
@@ -160,18 +181,57 @@ const OPENS_A_STANZA = /^[ \t]*(Host|Match)[ \t=]/i;
  * losing to the user's settings exactly as it did before, and a directive added to the
  * main block later cannot silently inherit precedence it was never reviewed for. Keep
  * this stanza to ControlPath alone.
+ *
+ * On Windows the same precedence is what carries ENG-2676, and it has to go further: its
+ * `none` must beat EVERY ControlPath the candidate has, preamble included, because there
+ * any ControlPath is fatal rather than merely too long. So the Windows stanza goes at the
+ * very top of the file (`upsertSshConfigContent`) and closes with a bare `Host *`, which
+ * hands everything after it — the candidate's preamble — back to every host exactly as
+ * before. Nothing of theirs moves; our one directive is simply read first.
  */
-export function buildControlPathBlock(alias, p) {
+export function buildControlPathBlock(alias, p, platform = process.platform) {
     const hosts = p.jumpHost ? `${alias} ${alias}-bastion` : alias;
+    if (platform === "win32") {
+        return [
+            CONTROL_BEGIN(alias),
+            `# ControlPath only — first in the file because Windows OpenSSH cannot share connections,`,
+            `# and any ControlPath (yours or ours) breaks it. The Host * line hands everything after`,
+            `# it back to every host, so your own settings apply exactly as before.`,
+            `Host ${hosts}`,
+            `  ControlPath ${controlPathFor(platform)}`,
+            `Host *`,
+            CONTROL_END(alias),
+        ].join("\n") + "\n";
+    }
     return [
         CONTROL_BEGIN(alias),
         `# ControlPath only — ahead of your own config so a global ControlPath cannot build`,
         `# an over-long socket path out of the workspace id. Nothing else is overridden.`,
         `Host ${hosts}`,
-        `  ControlPath ~/.ssh/cm-%C`,
+        `  ControlPath ${controlPathFor(platform)}`,
         CONTROL_END(alias),
     ].join("\n") + "\n";
 }
+/**
+ * The ControlPath we write: `~/.ssh/cm-%C` (ENG-1936), except `none` on Windows.
+ *
+ * ENG-2676. Win32-OpenSSH has no Unix-domain socket to multiplex over, so ANY ControlPath
+ * — with or without a ControlMaster — kills the connection before it offers a key:
+ *
+ *     debug1: getpeername failed: Not a socket
+ *     getsockname failed: Not a socket
+ *     Read from remote host <cid>.vm.litmushiring.com: Unknown error
+ *     Transferred: sent 0, received 0 bytes, in 0.0 seconds
+ *
+ * VS Code shows it as "Could not establish connection". Because the client dies before
+ * the bastion ever sees a key, nothing on our side logs it: no `resolve-ssh` call, no
+ * backend error, a healthy container. `none` switches sharing off outright, which is
+ * the only setting that works there. The socket-length problem `%C` exists for is a
+ * macOS one and cannot arise on Windows, since there is no socket.
+ */
+export function controlPathFor(platform) {
+    return platform === "win32" ? "none" : "~/.ssh/cm-%C";
+}
 /** Drop one marker-delimited region, wherever in the file it sits. */
 function withoutRegion(existing, begin, end) {
     const bi = existing.indexOf(begin);
@@ -196,6 +256,13 @@ function insertAhead(existing, block) {
     const after = lines.slice(at).join("\n");
     return (preamble.trim().length ? preamble + "\n\n" : "") + block + "\n" + after;
 }
+/** Put `block` at the very top of the file. Only for a block that closes with `Host *`
+ *  (the Windows ControlPath stanza), which is what keeps the preamble below it global. */
+function prepend(existing, block) {
+    if (!existing.trim().length)
+        return block;
+    return block + "\n" + existing.replace(/^\n+/, "");
+}
 /** Exactly one blank line before the block, however the prior content ended. Normalised
  *  rather than merely separated, so re-running never accretes blank lines where a
  *  removed region used to be — the output has to be a fixed point. */
@@ -218,12 +285,20 @@ function append(existing, block) {
  * (or in an `Include`d file pulled in before their first stanza) is still read first and
  * still wins. Beating it would mean reordering the candidate's own config, which is not
  * a thing `litmus connect` should do to fix its own socket path.
+ *
+ * Except on Windows (ENG-2676), where that residual is a dead connection rather than a
+ * long path. There the control block goes at the very top instead, which reorders
+ * nothing: it closes with `Host *`, so the preamble after it still applies to every
+ * host, and only our one ControlPath is read ahead of it. `platform` must match the one
+ * `buildControlPathBlock` was given; both default to the running platform.
  */
-export function upsertSshConfigContent(existing, alias, block, controlBlock) {
+export function upsertSshConfigContent(existing, alias, block, controlBlock, platform = process.platform) {
     let out = withoutRegion(existing, CONNECT_BEGIN(alias), CONNECT_END(alias));
     out = withoutRegion(out, CONTROL_BEGIN(alias), CONTROL_END(alias));
     out = append(out, block);
-    return controlBlock ? insertAhead(out, controlBlock) : out;
+    if (!controlBlock)
+        return out;
+    return platform === "win32" ? prepend(out, controlBlock) : insertAhead(out, controlBlock);
 }
 /** Short, stable alias from the workspace hostname (or token as a fallback). */
 export function aliasFor(sshHostname, token) {
@@ -1045,6 +1120,28 @@ export async function resolveIde(flag, log = console.log, reentry) {
         announceCursorFullQuit(log, reentry);
     return { ide, chosen: answered.trim() !== "" };
 }
+// How long `litmus connect` waits for a started workspace to become reachable.
+const WORKSPACE_READY_WAIT_MS = 120000;
+// ENG-2578: and how long while the backend still says `starting`. A host that has not
+// pulled the pinned image yet pulls it inside the first provision it gets (measured at
+// 221-264s for one variant after a pin moved), so `/workspace/start` answers `starting`
+// at its own 120s deadline and the backend keeps finishing the provision in the
+// background for `_LATE_PROVISION_TIMEOUT` more (backend/services/shared_host_workspace.py,
+// 480s). Wait that long, plus a margin for the write that lands it. Nothing enforces the
+// pair across the language boundary; keep them in step.
+const SERVER_LATE_PROVISION_MS = 480000;
+const WORKSPACE_STARTING_WAIT_MS = SERVER_LATE_PROVISION_MS + 30000;
+/**
+ * Whether the post-start poll should keep going. The ordinary window covers every
+ * status; only a workspace the backend still reports `starting` earns the longer one,
+ * so a start that was answered `queued` (the row is back to `not_created`) is not held
+ * for eight minutes against something that is not coming.
+ */
+export function keepWaitingForWorkspace(elapsedMs, status) {
+    if (elapsedMs < WORKSPACE_READY_WAIT_MS)
+        return true;
+    return status === "starting" && elapsedMs < WORKSPACE_STARTING_WAIT_MS;
+}
 /**
  * The candidate's own assessment page.
  *
@@ -1410,10 +1507,11 @@ export async function runConnect(token, ideOpt, opts = {}) {
         });
         return;
     }
-    // 4. Poll until healthy (cold provision is ~5s; give it up to ~2 min).
+    // 4. Poll until healthy (cold provision is ~5s; give it up to ~2 min, longer while
+    //    the backend still reports it `starting` — see `keepWaitingForWorkspace`).
     let conn = null;
-    const deadline = Date.now() + 120000;
-    while (Date.now() < deadline) {
+    const pollStartedAt = Date.now();
+    while (keepWaitingForWorkspace(Date.now() - pollStartedAt, conn?.workspace_status)) {
         try {
             conn = await getConnection(backendUrl, token);
         }
@@ -1427,7 +1525,9 @@ export async function runConnect(token, ideOpt, opts = {}) {
         const ready = conn?.healthy && (ide === "browser" || !!conn.ssh_command);
         if (ready)
             break;
-        boot.text = `Starting your workspace... (${conn?.workspace_status ?? "provisioning"})`;
+        boot.text = Date.now() - pollStartedAt < WORKSPACE_READY_WAIT_MS
+            ? `Starting your workspace... (${conn?.workspace_status ?? "provisioning"})`
+            : "Still starting your workspace... the first start on a fresh host can take a few minutes";
         await sleep(2000);
     }
     if (!conn?.healthy || (ide !== "browser" && !conn.ssh_command)) {
@@ -1473,6 +1573,20 @@ export async function runConnect(token, ideOpt, opts = {}) {
     //    Prune stale host keys first so a re-provisioned container's new key is
     //    accepted, not refused (ENG-1221).
     const parsed = parseSshCommand(conn.ssh_command);
+    // ENG-2682 — Windows' own OpenSSH below 8.1 cannot run the ProxyJump every bastion
+    // route depends on (see `lib/ssh-client.ts`). Refuse before writing anything, with the
+    // version named and a way out, rather than hand an editor a connection it will lose
+    // before it reaches us. The client judged is the one this route will run: the editor's
+    // `remote.SSH.path` when it names one, PATH's ssh otherwise.
+    if (process.platform === "win32" && parsed.jumpHost && ide !== "browser") {
+        const executable = sshExecutableFor(ide, ide === "ssh" ? null : readEditorSettings(ide));
+        const client = parseOpenSshVersion(readSshVersionBanner(executable) ?? "");
+        if (client && proxyJumpBroken(client)) {
+            const where = executable === "ssh" ? "" : ` at ${executable}, set in remote.SSH.path`;
+            fatal(`Your Windows SSH (${client.label}${where}) is too old to reach the workspace.`, oldWindowsSshHint(Boolean(conn.browser_ide_url)), { severity: "warning" });
+            return;
+        }
+    }
     const alias = aliasFor(conn.ssh_hostname, token);
     pruneStaleHostKeys(parsed);
     const block = buildSshConfigBlock(alias, KEY_PATH, parsed);
@@ -1496,6 +1610,17 @@ export async function runConnect(token, ideOpt, opts = {}) {
     // installed" on a machine where the binary was sitting in the application bundle the
     // whole time. Null here means we genuinely could not find a way to drive it.
     const resolved = resolveEditorCommand(editor);
+    // ENG-2683 — inside WSL, the editor on PATH is usually the WINDOWS app, and its
+    // Remote-SSH reads Windows' ssh config, not the WSL one written above (see
+    // `lib/wsl.ts`). Launching it would fail in the editor with nothing on our side, so say
+    // so here, where both the editor and the alias are known.
+    if (resolved && isWsl()) {
+        const program = whichOnPath(resolved.command, process.env.PATH);
+        if (program && windowsSideEditor(program)) {
+            fatal(`${editor.label} here is the Windows app, but \`litmus connect\` is running inside WSL.`, wslEditorHint(editor.label, alias, Boolean(conn.browser_ide_url)), { severity: "warning" });
+            return;
+        }
+    }
     // ENG-2152 — resolve WHAT THAT COMMAND ACTUALLY IS before anything acts on the choice.
     // `bin` is a name on PATH, and on a machine where Cursor is the default editor `code`
     // can be Cursor's own CLI. The verdict is taken here, above the Copilot Chat step,