litmus-cli 1.4.67 → 1.4.69

package/dist/commands/connect.d.ts

@@ -270,6 +270,29 @@ export interface NativeEditor {
  * has to fail.
  */
 export declare const NATIVE_EDITORS: Record<NativeIde, NativeEditor>;
+/**
+ * ENG-2332 — PATH first, then the places the installer puts it.
+ *
+ * The old code asked only whether `ed.bin` was on PATH, and answered a "no" with a
+ * manual command that begins with `ed.bin` — i.e. told the candidate to run the binary
+ * whose absence was the error. On the machine that reported this, the binary was sitting
+ * at `/Applications/Cursor.app/Contents/Resources/app/bin/cursor` throughout.
+ *
+ * PATH still wins when it answers, because that is the command the candidate's own
+ * tooling and any support answer will use. A bundle path is a fallback, and it is
+ * probed with `probeEditorCli` rather than trusted on `existsSync` alone: a file at the
+ * expected path that cannot execute is not a route, and offering it as one would replace
+ * one silent failure with another.
+ *
+ * The build it reported rides back on the result, so the seed check below reads the
+ * version THIS command printed. A second `--version` spawn could answer for a different
+ * binary — a PATH that changed under us, a shim that dispatches — and would then be
+ * compared against a workspace on behalf of an editor we are not about to launch.
+ */
+interface ResolvedEditor extends ResolvedEditorCommand {
+    version: EditorVersion;
+}
+export declare function resolveEditorCommand(ed: NativeEditor): ResolvedEditor | null;
 /**
  * ENG-2152 — what the editor CLI we are about to drive says it IS.
  *
@@ -403,6 +426,20 @@ export declare function editorLaunchFailedLines(ed: NativeEditor, alias: string,
  * has no workspace files to list.
  */
 export declare function editorUnverifiedLines(ed: NativeEditor, alias: string, pageUrl: string | null): string[];
+/**
+ * Ensure the Remote-SSH extension is installed in the user's editor before we
+ * open the remote window (the `gh codespace code` model). Best-effort: a
+ * marketplace/network failure returns "failed" rather than aborting connect —
+ * the caller tells the user how to install it by hand. Assumes the editor's CLI
+ * has been resolved (caller gates on `resolveEditorCommand`).
+ */
+/**
+ * ENG-3158 — `<command> --list-extensions` output, or null when it cannot be read. A
+ * null skips the conflict check rather than stopping connect: the check only refuses on
+ * evidence, never on a failed read.
+ */
+export declare function listEditorExtensions(command: string): string | null;
+export declare function ensureRemoteSshExtension(ed: NativeEditor, command: string, listed: string | null): "present" | "installed" | "failed";
 /**
  * ENG-2332 — where the editor's own output goes.
  *
@@ -505,6 +542,7 @@ export declare function editorLaunchOutputLines(logPath: string, launchLog: stri
  * never as "there is no server" — see `verifyVerdict`.
  */
 export type WorkspaceProbeRunner = (remoteCommand: string) => string | null;
+export declare function sshProbeRunner(alias: string, executable?: string): WorkspaceProbeRunner;
 export declare function verifyEditorAttached(ed: NativeEditor, baseline: WorkspaceProbe | null, run: WorkspaceProbeRunner, onWait: (secondsWaited: number) => void, launched: EditorLaunchHandle, clientCommit?: string | null): Promise<VerifyVerdict>;
 /** Whether the editor's Remote-SSH extension was already there, put there, or could not be. */
 export type RemoteSshExtensionState = "present" | "installed" | "failed";
@@ -698,6 +736,8 @@ export declare function chatConfigActionForIdentity(ide: IdeChoice, state: "conf
  */
 export declare function browserFallback(hasUrl: boolean, ideWasChosen: boolean): "browser" | "vscode" | "unavailable";
 export interface ConnectOptions {
+    /** ENG-3217: opt-in desktop experiment; never proof of agent attachment. */
+    cursorAgentWindow?: boolean;
     /**
      * ENG-2332 item 4 — print what the editor wrote while opening, and where that log is.
      * The output is CAPTURED either way (a failed verification prints its tail whether or

package/dist/commands/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAYA,OAAO,EAA4C,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAE9G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAOL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAoDhC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAQD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAwBtD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,CAAC,EAAE,SAAS,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAkCR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,SAAS,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAsBR;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAEhE;AAwCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAMR;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItF;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,GAAG,EAAE,SAAS,CAAA;IACd,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;;;;;;OAUG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAA;IACpB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;;;;;;;OAYG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CA0B1D,CAAA;AAuED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAA;AAE1B;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUzE;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAuC7D,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,gBAAgC,GACpC,cAAc,CAMhB;AAcD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAKzE;AAOD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,EAAE,CAOV;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,YAAY,EAChB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,EAAE,CAQV;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,QAAQ,CAAC,EAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACxB,MAAM,CAGR;AAED,8FAA8F;AAC9F,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,EACnD,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAOV;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAOrG;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,EACf,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,EAAE,CAQV;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,OAAO,UAAQ,GACd,MAAM,EAAE,CASV;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,GACd,MAAM,EAAE,CASV;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,EAAE,CAKV;AAgDD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAuClH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,OAAO,GACf,MAAM,EAAE,CAMV;AAYD;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAqD3E,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,EACvC,QAAQ,EAAE,kBAAkB,EAC5B,YAAY,GAAE,MAAM,GAAG,IAAW,GACjC,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED,+FAA+F;AAC/F,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAExE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,KAAK,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,cAAc,GAAG,IAAI,CAAA;IAClD,oGAAoG;IACpG,aAAa,EAAE,aAAa,CAAA;IAC5B,eAAe,EAAE,MAAM,uBAAuB,CAAA;IAC9C,yDAAyD;IACzD,aAAa,EAAE,MAAM,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAA;IAC/C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACjD,cAAc,EAAE,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;CAC1G;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9F;IACE,IAAI,EAAE,eAAe,CAAA;IACrB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GACD;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAEL,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqB3G;AAUD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;AAE/D;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,EACzC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAe9C;AAcD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG9F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,+FAA+F;AAC/F,wBAAgB,0BAA0B,CAAC,SAAS,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,EAAE,CAElG;AAED,yFAAyF;AACzF,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AACrC,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,KAAK,CAAA;AAEvC,iGAAiG;AACjG,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,OAAO,EACrB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACxB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,GAAG;IACjF,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAA;IAC7C,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,KAAK,MAAM,GAAG,IAAI,CAAA;CACrE,CAwBA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAMtD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CASvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,GACnD,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,EACpD,QAAQ,EAAE,cAAc,GACvB,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AAwFD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,OAAO,GACpB,SAAS,GAAG,QAAQ,GAAG,aAAa,CAGtC;AAED,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,yGAAyG;IACzG,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACpE;AAWD,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBzG"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAeA,OAAO,EAA4C,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAE9G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAOL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAoDhC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAQD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAwBtD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,CAAC,EAAE,SAAS,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAkCR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,SAAS,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAsBR;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAEhE;AAwCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAMR;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItF;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,GAAG,EAAE,SAAS,CAAA;IACd,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;;;;;;OAUG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAA;IACpB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;;;;;;;OAYG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CA0B1D,CAAA;AAqCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,UAAU,cAAe,SAAQ,qBAAqB;IACpD,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,GAAG,cAAc,GAAG,IAAI,CAS5E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAA;AAE1B;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUzE;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAuC7D,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,gBAAgC,GACpC,cAAc,CAMhB;AAcD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAKzE;AAOD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,EAAE,CAOV;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,YAAY,EAChB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,EAAE,CAQV;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,QAAQ,CAAC,EAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACxB,MAAM,CAGR;AAED,8FAA8F;AAC9F,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,EACnD,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAOV;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAOrG;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,EACf,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,EAAE,CAQV;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,OAAO,UAAQ,GACd,MAAM,EAAE,CASV;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,GACd,MAAM,EAAE,CASV;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,EAAE,CAKV;AAED;;;;;;GAMG;AACH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASnE;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAYrI;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAuClH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,OAAO,GACf,MAAM,EAAE,CAMV;AAYD;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;AAE3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,SAAQ,GAAG,oBAAoB,CActF;AAqCD,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,EACvC,QAAQ,EAAE,kBAAkB,EAC5B,YAAY,GAAE,MAAM,GAAG,IAAW,GACjC,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED,+FAA+F;AAC/F,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAExE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,KAAK,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,cAAc,GAAG,IAAI,CAAA;IAClD,oGAAoG;IACpG,aAAa,EAAE,aAAa,CAAA;IAC5B,eAAe,EAAE,MAAM,uBAAuB,CAAA;IAC9C,yDAAyD;IACzD,aAAa,EAAE,MAAM,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAA;IAC/C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACjD,cAAc,EAAE,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;CAC1G;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9F;IACE,IAAI,EAAE,eAAe,CAAA;IACrB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GACD;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,uBAAuB,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAEL,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqB3G;AAUD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;AAE/D;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,EACzC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAe9C;AAcD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG9F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,+FAA+F;AAC/F,wBAAgB,0BAA0B,CAAC,SAAS,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,EAAE,CAElG;AAED,yFAAyF;AACzF,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AACrC,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,KAAK,CAAA;AAEvC,iGAAiG;AACjG,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,OAAO,EACrB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACxB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,GAAG;IACjF,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAA;IAC7C,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,KAAK,MAAM,GAAG,IAAI,CAAA;CACrE,CAwBA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAMtD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CASvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,GACnD,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,EACpD,QAAQ,EAAE,cAAc,GACvB,OAAO,GAAG,QAAQ,GAAG,MAAM,CAI7B;AAwFD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,OAAO,GACpB,SAAS,GAAG,QAAQ,GAAG,aAAa,CAGtC;AAED,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,yGAAyG;IACzG,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACpE;AAWD,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BzG"}

package/dist/commands/connect.js

@@ -1,7 +1,10 @@
+import { requestCursorAgentWindow, cursorAgentWindowLines } from "../lib/cursor-agent-window.js";
+import { ConnectionAttempt } from "../lib/connection-attempt.js";
+import { updateSshConfig } from "../lib/ssh-config-file.js";
 import os from "os";
 import path from "path";
 import readline from "readline";
-import { closeSync, constants, existsSync, mkdirSync, openSync, readFileSync, writeFileSync } from "fs";
+import { closeSync, constants, existsSync, mkdirSync, openSync, readFileSync } from "fs";
 import { randomBytes } from "crypto";
 import { execFileSync, spawn, spawnSync } from "child_process";
 import chalk from "chalk";
@@ -320,13 +323,9 @@ function ensureSshKey(keyPath) {
         stdio: "ignore",
     });
 }
-function writeSshConfig(alias, block, controlBlock) {
+async function writeSshConfig(alias, block, controlBlock) {
     const cfgPath = path.join(os.homedir(), ".ssh", "config");
-    const dir = path.dirname(cfgPath);
-    if (!existsSync(dir))
-        mkdirSync(dir, { recursive: true, mode: 0o700 });
-    const existing = existsSync(cfgPath) ? readFileSync(cfgPath, "utf8") : "";
-    writeFileSync(cfgPath, upsertSshConfigContent(existing, alias, block, controlBlock), { mode: 0o600 });
+    await updateSshConfig(cfgPath, (existing) => upsertSshConfigContent(existing, alias, block, controlBlock));
     return cfgPath;
 }
 /**
@@ -412,7 +411,7 @@ function probeEditorCli(command) {
         return null;
     }
 }
-function resolveEditorCommand(ed) {
+export function resolveEditorCommand(ed) {
     const onPath = probeEditorCli(ed.bin);
     if (onPath)
         return { command: ed.bin, source: "path", version: onPath };
@@ -687,7 +686,7 @@ export function editorUnverifiedLines(ed, alias, pageUrl) {
  * null skips the conflict check rather than stopping connect: the check only refuses on
  * evidence, never on a failed read.
  */
-function listEditorExtensions(command) {
+export function listEditorExtensions(command) {
     const list = editorSpawnSpec(command, ["--list-extensions"], process.platform);
     if (!list)
         return null;
@@ -699,22 +698,13 @@ function listEditorExtensions(command) {
         return null;
     }
 }
-function ensureRemoteSshExtension(ed, command) {
-    const list = editorSpawnSpec(command, ["--list-extensions"], process.platform);
-    // Undrivable on this platform — the same outcome as an install that would not run.
-    // `failed` is already best-effort and never aborts connect.
-    if (!list)
+export function ensureRemoteSshExtension(ed, command, listed) {
+    // An unreadable inventory is not evidence of absence; don't mutate it blindly.
+    if (listed === null)
         return "failed";
-    try {
-        const listed = spawnSync(list.command, list.args, { encoding: "utf8", shell: list.shell, timeout: 60000 });
-        if (!listed.error && (listed.stdout ?? "").split(/\r?\n/).some((l) => l.trim().toLowerCase() === ed.remoteSshExt)) {
-            return "present";
-        }
-    }
-    catch {
-        // Couldn't list (unexpected) — fall through and try to install anyway.
-    }
-    const install = editorSpawnSpec(command, ["--install-extension", ed.remoteSshExt, "--force"], process.platform);
+    if (listed.split(/\r?\n/).some((l) => l.trim().toLowerCase() === ed.remoteSshExt))
+        return "present";
+    const install = editorSpawnSpec(command, ["--install-extension", ed.remoteSshExt], process.platform);
     if (!install)
         return "failed";
     try {
@@ -868,11 +858,11 @@ function readEditorLaunchLog(logPath) {
         return null;
     }
 }
-function sshProbeRunner(alias) {
+export function sshProbeRunner(alias, executable = "ssh") {
     return (remoteCommand) => {
         try {
-            const probed = spawnSync("ssh", ["-o", "BatchMode=yes", "-o", "ConnectTimeout=10", "-o", "LogLevel=ERROR", alias, remoteCommand], { encoding: "utf8", timeout: 20000 });
-            if (probed.error)
+            const probed = spawnSync(executable, ["-o", "BatchMode=yes", "-o", "ConnectTimeout=10", "-o", "LogLevel=ERROR", alias, remoteCommand], { encoding: "utf8", timeout: 20000 });
+            if (probed.error || probed.status !== 0)
                 return null;
             return probed.stdout ?? null;
         }
@@ -1252,8 +1242,7 @@ function pruneStaleHostKeys(p) {
     // known_hosts as [host]:port, so a bare-host -R would miss it.
     if (p.port)
         targets.push(`[${p.host}]:${p.port}`);
-    if (p.jumpHost)
-        targets.push(p.jumpPort ? `[${p.jumpHost}]:${p.jumpPort}` : p.jumpHost);
+    // The shared bastion is not reprovisioned with this workspace. Preserve its pinned key.
     for (const t of targets) {
         try {
             execFileSync("ssh-keygen", ["-R", t], { stdio: "ignore" });
@@ -1280,18 +1269,34 @@ export async function runConnect(token, ideOpt, opts = {}) {
     // printed last, on every way out of the flow, so it neither delays the editor nor
     // is lost when a later step fails. The workspace lines follow it, so the candidate's
     // last read is where they are and what the session ending looks like.
+    setErrorContext({ token, apiBase: resolveApiBase(process.env.LITMUS_API_URL) });
+    const attempt = new ConnectionAttempt();
     const skillImport = { report: null, footer: [], sshAlias: null, publishedPorts: [] };
+    // Register before entering the flow: a fast fatal report can settle before the
+    // caller's finally begins, especially while an async SSH config write is unwinding.
+    let releaseExitHold;
+    holdExitFor(new Promise((resolve) => { releaseExitHold = resolve; }));
     try {
-        await connectFlow(token, ideOpt, opts, skillImport);
+        await connectFlow(token, ideOpt, opts, skillImport, attempt);
+    }
+    catch (error) {
+        attempt.finish("failed");
+        attempt.evidence(error instanceof Error ? error.message : null);
+        throw error;
     }
     finally {
-        // Held, so a `fatal` in the flow waits for the upload and its report (ENG-2919).
-        await holdExitFor((async () => {
+        try {
+            await attempt.flush();
+            if (opts.verbose || attempt.needsSupport)
+                console.log(chalk.dim(`  Connection ID: ${attempt.id}`));
             if (skillImport.report)
                 await finishSkillImport(skillImport.report);
             for (const line of skillImport.footer)
                 console.log(line);
-        })());
+        }
+        finally {
+            releaseExitHold();
+        }
     }
     // The ssh route's session runs last, so nothing we print lands inside the remote shell.
     if (!skillImport.sshAlias)
@@ -1323,7 +1328,7 @@ async function openSshRoute(alias) {
     if (status)
         process.exitCode = status;
 }
-async function connectFlow(token, ideOpt, opts, skillImport) {
+async function connectFlow(token, ideOpt, opts, skillImport, attempt) {
     const verbose = Boolean(opts.verbose);
     const apiBase = resolveApiBase(process.env.LITMUS_API_URL);
     setErrorContext({ token, apiBase });
@@ -1338,6 +1343,8 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
         spinner.succeed(meta.assessmentName);
     }
     catch (err) {
+        attempt.evidence(workspaceStartNetworkDetail(err));
+        attempt.evidence(err instanceof Error ? err.message : null);
         // ENG-2895: the Error line below says what failed; a second "Connection failed" line
         // above it was the same fact twice, and wrong when the cause was a rejected token.
         spinner.stop();
@@ -1360,28 +1367,37 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // ENG-2890 — the assessment page is the one re-entry route connect prints: its URL
     // carries only the assessment id, never the token.
     const pageUrl = candidatePageUrl(apiBase, meta.assessmentId);
+    attempt.stage("selection");
     const { ide: chosenIde, chosen: ideWasChosen } = await resolveIde(ideOpt, console.log);
     let ide = chosenIde;
+    attempt.editor(ide);
     // ENG-2814: asked here, next to the editor choice, and uploaded once the workspace is
     // ready. Never fails the connect. See `lib/connect-skills.ts`.
+    attempt.stage("skills");
     const pendingSkills = await offerSkillImport({
         backendUrl, token, flag: opts.skills, verbose,
     });
+    attempt.stage("ssh_key");
     // 2. Ensure a local SSH key (private key never leaves this machine).
     try {
         ensureSshKey(KEY_PATH);
     }
     catch (err) {
+        attempt.evidence(workspaceStartNetworkDetail(err));
+        attempt.evidence(err instanceof Error ? err.message : null);
         fatal("Couldn't create an SSH key.", "Install OpenSSH (it includes ssh-keygen), then run the same litmus connect command again.", { internalDetail: err instanceof Error ? err.message : String(err), severity: "warning" });
         return;
     }
     const pubkey = readFileSync(`${KEY_PATH}.pub`, "utf8").trim();
     // 3. Start the workspace with our public key.
+    attempt.stage("workspace_start");
     const boot = ora("Starting your workspace...").start();
     try {
         await startWorkspace(backendUrl, token, pubkey);
     }
     catch (err) {
+        attempt.evidence(workspaceStartNetworkDetail(err));
+        attempt.evidence(err instanceof Error ? err.message : null);
         // The Error line below names what went wrong; see the sign-in spinner above.
         boot.stop();
         const code = err instanceof ServerError ? err.errorCode : undefined;
@@ -1437,6 +1453,8 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
         return;
     }
     boot.succeed("Workspace ready");
+    attempt.stage("workspace_ready");
+    attempt.checkpoint();
     if (pendingSkills)
         skillImport.report = holdExitFor(startSkillImport(backendUrl, token, pendingSkills, undefined, () => ide));
     // Browser IDE: no local SSH / VS Code needed — just open the signed URL.
@@ -1454,6 +1472,7 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
         if (fallback === "vscode") {
             warn("The browser IDE isn't available here. Opening VS Code instead.");
             ide = "vscode";
+            attempt.editor(ide);
         }
         else if (fallback === "unavailable") {
             fatal("The browser IDE isn't available for this workspace yet.", "Open it in VS Code instead: run the same litmus connect command with --ide vscode.", { severity: "warning" });
@@ -1461,6 +1480,8 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
         }
     }
     if (ide === "browser" && conn.browser_ide_url) {
+        attempt.stage("browser_open");
+        attempt.finish("browser_requested");
         // ENG-3137 — the workspace now trusts this machine's key, so the assessment page's
         // Plain SSH offers `ssh <alias>`. Write the entry that alias names, as every other
         // route does. Best-effort: a config we could not write must not cost the browser route.
@@ -1469,11 +1490,13 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
                 const parsed = parseSshCommand(conn.ssh_command);
                 const alias = aliasFor(conn.ssh_hostname, token);
                 pruneStaleHostKeys(parsed);
-                const cfgPath = writeSshConfig(alias, buildSshConfigBlock(alias, KEY_PATH, parsed), buildControlPathBlock(alias, parsed));
+                const cfgPath = await writeSshConfig(alias, buildSshConfigBlock(alias, KEY_PATH, parsed), buildControlPathBlock(alias, parsed));
                 if (verbose)
                     info(`SSH config written to ${cfgPath} (Host "${alias}")`);
             }
             catch (err) {
+                attempt.evidence(workspaceStartNetworkDetail(err));
+                attempt.evidence(err instanceof Error ? err.message : null);
                 if (verbose)
                     info(`SSH config not written: ${err instanceof Error ? err.message : String(err)}`);
             }
@@ -1499,6 +1522,13 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     //    Prune stale host keys first so a re-provisioned container's new key is
     //    accepted, not refused (ENG-1221).
     const parsed = parseSshCommand(conn.ssh_command);
+    // Reuse this observation across compatibility checks, preflight and diagnostics.
+    const sshBanners = new Map();
+    const sshBanner = (executable) => {
+        if (!sshBanners.has(executable))
+            sshBanners.set(executable, readSshVersionBanner(executable));
+        return sshBanners.get(executable) ?? null;
+    };
     // ENG-2682 — Windows' own OpenSSH below 8.1 cannot run the ProxyJump every bastion
     // route depends on (see `lib/ssh-client.ts`). Refuse before writing anything, with the
     // version named and a way out, rather than hand an editor a connection it will lose
@@ -1506,17 +1536,18 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // `remote.SSH.path` when it names one, PATH's ssh otherwise.
     if (process.platform === "win32" && parsed.jumpHost && ide !== "browser") {
         const executable = sshExecutableFor(ide, ide === "ssh" ? null : readEditorSettings(ide));
-        const client = parseOpenSshVersion(readSshVersionBanner(executable) ?? "");
+        const client = parseOpenSshVersion(sshBanner(executable) ?? "");
         if (client && proxyJumpBroken(client)) {
             const where = executable === "ssh" ? "" : ` at ${executable}, set in remote.SSH.path`;
             fatal(`Your Windows SSH (${client.label}${where}) is too old to reach the workspace.`, oldWindowsSshHint(Boolean(conn.browser_ide_url)), { severity: "warning" });
             return;
         }
     }
+    attempt.stage("ssh_config");
     const alias = aliasFor(conn.ssh_hostname, token);
     pruneStaleHostKeys(parsed);
     const block = buildSshConfigBlock(alias, KEY_PATH, parsed);
-    const cfgPath = writeSshConfig(alias, block, buildControlPathBlock(alias, parsed));
+    const cfgPath = await writeSshConfig(alias, block, buildControlPathBlock(alias, parsed));
     if (verbose)
         info(`SSH config written to ${cfgPath} (Host "${alias}")`);
     // ENG-2693 — prove the connection before handing it off (see `sshPreflight`). The
@@ -1529,19 +1560,23 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // Called per route, not here once: the native route runs it only AFTER the WSL check
     // (Greptile on #2844), so a candidate whose Windows editor cannot see WSL's config is
     // told that, rather than a generic ssh failure from the wrong side of the pairing.
+    const sshExecutable = sshExecutableFor(ide, ide === "ssh" ? null : readEditorSettings(ide));
     const preflightStops = async (route) => {
-        const sshExecutable = sshExecutableFor(route, route === "ssh" ? null : readEditorSettings(route));
         // ENG-2895: up to two 45s attempts, so it gets a spinner; it says nothing when it works.
         const checking = ora("Checking the connection to your workspace...").start();
+        attempt.stage("ssh_preflight");
+        attempt.fact("sshSelection", sshExecutable === "ssh" ? "path" : "editor-setting");
+        attempt.fact("sshVersion", parseOpenSshVersion(sshBanner(sshExecutable) ?? "")?.label);
         const preflight = await sshPreflight(alias, sshExecutable);
         checking.stop();
         if (preflight.ok)
             return false;
+        attempt.evidence(preflight.detail.join("\n"));
         fatal("Your computer couldn't open an SSH connection to the workspace.", sshPreflightHint(preflight.detail, Boolean(conn.browser_ide_url), verbose), {
             severity: "error",
             internalDetail: [
                 `route=${route} platform=${process.platform} ssh=${sshExecutable}`,
-                `client=${readSshVersionBanner(sshExecutable) ?? "unreadable"}`,
+                `client=${sshBanner(sshExecutable) ?? "unreadable"}`,
                 ...preflight.detail,
             ].join("\n"),
         });
@@ -1552,6 +1587,8 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     if (ide === "ssh") {
         if (await preflightStops("ssh"))
             return;
+        attempt.stage("ssh_handoff");
+        attempt.finish("ssh_ready");
         if (verbose)
             console.log(chalk.dim(`  (equivalently: ${conn.ssh_command})`));
         if (opts.tunnel) {
@@ -1577,7 +1614,12 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // places its installer puts it, because "not on PATH" was being reported as "not
     // installed" on a machine where the binary was sitting in the application bundle the
     // whole time. Null here means we genuinely could not find a way to drive it.
+    attempt.stage("editor_resolution");
     const resolved = resolveEditorCommand(editor);
+    attempt.editor(ide, resolved?.version.version);
+    attempt.fact("editorFound", Boolean(resolved));
+    attempt.fact("wsl", isWsl());
+    attempt.fact("editorCommit", resolved?.version.commit);
     // ENG-2683 — inside WSL, the editor on PATH is usually the WINDOWS app, and its
     // Remote-SSH reads Windows' ssh config, not the WSL one written above (see
     // `lib/wsl.ts`). Launching it would fail in the editor with nothing on our side, so say
@@ -1599,7 +1641,9 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // With nothing resolved there is nothing to probe, and `unverified` is what that means:
     // it is the absence branch's job to say so, below the mismatch refusal, so a candidate
     // whose `code` is Cursor is told THAT rather than that their editor is missing.
+    attempt.stage("editor_resolution");
     const identity = resolved ? identifyEditorCli(editor, resolved.command) : { kind: "unverified" };
+    attempt.fact("editorIdentity", identity.kind);
     // 5b. Point this machine's Copilot Chat at the Litmus gateway (ENG-1475).
     //
     //     ONLY ON THE NATIVE VS CODE PATH, and that is the whole reason it is here rather
@@ -1726,9 +1770,15 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // ENG-3158 — before the workspace read and the launch, so a candidate
     // whose editor would take the connection with the wrong Remote-SSH loses no open Cursor
     // windows for a launch that cannot hold. Read-only: nothing is installed or removed.
+    attempt.stage("extensions");
+    const listed = listEditorExtensions(resolved.command);
+    attempt.fact("extensionInventory", listed === null ? "unavailable" : "read");
+    attempt.fact("requiredExtension", listed === null ? "unknown" : listed.split(/\r?\n/).includes(editor.remoteSshExt) ? "present" : "missing");
+    if (listed !== null)
+        attempt.fact("conflictingExtension", conflictingRemoteSshInstalled(editor, listed));
     if (editor.conflictingRemoteSshExt) {
-        const listed = listEditorExtensions(resolved.command);
         if (listed !== null && conflictingRemoteSshInstalled(editor, listed)) {
+            attempt.finish("extension_conflict");
             const editorCmd = pasteableEditorCommand(editor, resolved, process.platform);
             for (const line of conflictingRemoteSshLines(editor, editorCmd, alias, pageUrl))
                 console.log(line);
@@ -1740,7 +1790,7 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     // it. Both, and their order, live in `attemptEditorLaunch`: the guarantee here is a
     // property of the SEQUENCE, so it is held in one testable unit rather than in the
     // arrangement of the lines below. Everything this block still owns is output.
-    const probe = sshProbeRunner(alias);
+    const probe = sshProbeRunner(alias, sshExecutable);
     // Read once for both the seed check and attachment baseline.
     const readSpinner = ora(`Checking your workspace...`).start();
     const baseline = probeWorkspace(editor, probe, resolved.version.commit);
@@ -1780,7 +1830,8 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
         clientVersion: resolved.version,
         ensureExtension: () => {
             const extSpinner = ora(`Checking ${editor.label} Remote-SSH extension...`).start();
-            const state = ensureRemoteSshExtension(editor, resolved.command);
+            const state = ensureRemoteSshExtension(editor, resolved.command, listed);
+            attempt.fact("extensionSetup", state);
             // ENG-2890: an internal step, so it says nothing when it worked.
             if (state === "failed") {
                 extSpinner.warn(`Couldn't install ${editor.label}'s Remote-SSH extension. If ${editor.label} asks for it, install it from the Extensions view.`);
@@ -1795,6 +1846,8 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
         },
         launchLogPath: editorLaunchLogPath,
         launch: (logPath) => {
+            attempt.stage("editor_launch");
+            attempt.checkpoint();
             const launched = launches.send(logPath);
             // The launch is not the result, so nothing claims one here. What used to be printed
             // at this point was `✔ Opening <editor> → <alias>`, which is true of a spawn that is
@@ -1804,18 +1857,21 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
             return launched;
         },
         readLaunchLog: () => launches.readLog(readEditorLaunchLog),
-        verifyAttached: (baseline, launched) => verifyEditorAttached(editor, baseline, probe, (waited) => {
-            if (spinners.verify) {
-                spinners.verify.text = `Opening ${editor.label} in your workspace... (${waited}s)`;
-            }
-            // ENG-2884: if the first request still produced no attached window, ask the
-            // (now running) Cursor once more. A window already opening for this folder is
-            // focused rather than duplicated, so a slow first attach costs nothing.
-            if (shouldResendCursorOpen(editor.ide, cursorStartsFresh, waited, resend)) {
-                resend.done = true;
-                launches.send(editorLaunchLogPath());
-            }
-        }, launched, resolved.version.commit),
+        verifyAttached: (baseline, launched) => {
+            attempt.stage("editor_verify");
+            return verifyEditorAttached(editor, baseline, probe, (waited) => {
+                if (spinners.verify) {
+                    spinners.verify.text = `Opening ${editor.label} in your workspace... (${waited}s)`;
+                }
+                // ENG-2884: if the first request still produced no attached window, ask the
+                // (now running) Cursor once more. A window already opening for this folder is
+                // focused rather than duplicated, so a slow first attach costs nothing.
+                if (shouldResendCursorOpen(editor.ide, cursorStartsFresh, waited, resend)) {
+                    resend.done = true;
+                    launches.send(editorLaunchLogPath());
+                }
+            }, launched, resolved.version.commit);
+        },
     });
     if (outcome.kind === "refused") {
         for (const line of editorSeedMismatchLines(editor, outcome.seed, pageUrl, alias)) {
@@ -1825,6 +1881,9 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
     }
     const launchSpinner = spinners.verify;
     if (outcome.kind === "launch-failed") {
+        attempt.finish("launch_failed");
+        attempt.evidence(outcome.error);
+        attempt.evidence(outcome.launchLog);
         // No window was created, so none of the not-connected copy is true here. See
         // `editorLaunchFailedLines`.
         launchSpinner?.fail(`Couldn't start ${editor.label}.`);
@@ -1834,11 +1893,18 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
             console.log(line);
         return;
     }
+    attempt.evidence(outcome.launchLog);
     if (outcome.verdict.kind === "connected") {
+        attempt.finish("server_detected");
         launchSpinner?.succeed(`${editor.label}'s server is running in your workspace.`);
         skillImport.footer.push(...editorConnectedLines(editor, alias, verbose));
+        if (editor.ide === "cursor" && opts.cursorAgentWindow) {
+            const handoff = requestCursorAgentWindow(resolved.command, alias, REMOTE_WORKSPACE_DIR);
+            skillImport.footer.push(...cursorAgentWindowLines(handoff, verbose));
+        }
     }
     else if (outcome.verdict.kind === "unverified") {
+        attempt.finish("unverified");
         // Three-valued on purpose: we could not reach the workspace to ask, which is not the
         // same as knowing nothing came up, and saying either of the other two here would be a
         // claim we cannot make. See `verifyVerdict`.
@@ -1847,6 +1913,7 @@ async function connectFlow(token, ideOpt, opts, skillImport) {
             console.log(line);
     }
     else {
+        attempt.finish("not_connected");
         launchSpinner?.fail(`${editor.label} hasn't connected to your workspace yet.`);
         for (const line of editorNotConnectedLines(editor, alias, pageUrl, verbose))
             console.log(line);