night-orch 0.1.0

package/dist/workers/codex.js

@@ -0,0 +1,337 @@
+import { execWithTimeout } from './timeout.js';
+import { streamingExec } from './streaming-exec.js';
+import { parsePlannerOutput } from './parsers/planner.js';
+import { parseCoderOutput } from './parsers/coder.js';
+import { parseReviewerOutput } from './parsers/reviewer.js';
+import { buildWorkerCommand } from './command.js';
+import { logger } from '../utils/logger.js';
+import { randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { readFile, unlink, mkdir } from 'node:fs/promises';
+import { emitWorkerEvent, summarizeValue, isRecord } from './events.js';
+export class CodexWorkerAdapter {
+    async runTask(input) {
+        // Use --output-last-message to reliably capture the final agent response,
+        // since streaming JSONL events don't include sub-agent output.
+        // Store outside worktree (in system tmpdir) to avoid polluting target repos.
+        const outputDir = join(tmpdir(), 'night-orch-codex-output');
+        await mkdir(outputDir, { recursive: true });
+        const outputFile = join(outputDir, `codex-output-${randomUUID()}.txt`);
+        const taskArgs = [...input.profile.args, '--output-last-message', outputFile];
+        // Resume a prior session if available.
+        // Newer Codex CLI expects: `codex exec resume <sessionId>`.
+        if (input.continueSessionId) {
+            const execIndex = taskArgs.indexOf('exec');
+            if (execIndex >= 0) {
+                taskArgs.splice(execIndex + 1, 0, 'resume', input.continueSessionId);
+                logger.info({ role: input.role, sessionId: input.continueSessionId }, 'Resuming Codex session');
+            }
+            else {
+                logger.warn({ role: input.role, sessionId: input.continueSessionId, args: input.profile.args }, 'Codex profile args missing "exec"; running without session resume');
+            }
+        }
+        const { command, args } = buildWorkerCommand(input.profile, taskArgs);
+        logger.info({ role: input.role, cwd: input.worktreePath, timeout: input.timeoutSeconds }, 'Running Codex worker');
+        emitWorkerEvent(input, 'session_start', {
+            agent: 'codex',
+            continueSessionId: input.continueSessionId ?? null,
+        });
+        const result = await streamingExec({
+            command,
+            args,
+            cwd: input.worktreePath,
+            env: input.env,
+            timeoutMs: input.timeoutSeconds * 1000,
+            stdin: input.prompt,
+            onStdoutLine: (line) => {
+                emitCodexStreamEvents(line, input);
+            },
+        });
+        if (result.timedOut) {
+            logger.warn({ role: input.role, durationMs: result.durationMs }, 'Codex worker timed out');
+            emitWorkerEvent(input, 'error', {
+                error: `Codex worker timed out after ${input.timeoutSeconds}s`,
+            });
+        }
+        // Read the final message from the output file (preferred),
+        // fall back to extracting from streaming events if file missing
+        let assistantText;
+        try {
+            assistantText = await readFile(outputFile, 'utf-8');
+            logger.info({ role: input.role, outputFileLength: assistantText.length }, 'Read Codex output from --output-last-message');
+        }
+        catch {
+            logger.warn({ role: input.role }, 'Could not read --output-last-message file, falling back to stream extraction');
+            assistantText = extractCodexOutput(result.stdout);
+            if (assistantText !== result.stdout) {
+                logger.info({ role: input.role, rawLength: result.stdout.length, extractedLength: assistantText.length }, 'Codex output extracted from stream');
+            }
+        }
+        finally {
+            unlink(outputFile).catch(() => { });
+        }
+        // Extract thread ID from Codex streaming events for session continuity
+        const sessionId = extractCodexThreadId(result.stdout);
+        const tokenUsage = extractCodexTokenUsage(result.stdout);
+        // Parse output based on role
+        const { parsed, parseError } = parseOutput(input.role, assistantText);
+        if (result.stderr.trim().length > 0) {
+            emitWorkerEvent(input, 'error', { error: summarizeValue(result.stderr, 400) });
+        }
+        emitWorkerEvent(input, 'session_end', {
+            exitCode: result.exitCode,
+            timedOut: result.timedOut,
+            durationMs: result.durationMs,
+            sessionId,
+            tokenUsage,
+        });
+        return {
+            rawOutput: result.stdout,
+            exitCode: result.exitCode,
+            timedOut: result.timedOut,
+            durationMs: result.durationMs,
+            parsed,
+            parseError,
+            sessionId,
+            tokenUsage,
+        };
+    }
+    async checkAvailability() {
+        try {
+            const result = await execWithTimeout('codex', ['--version'], {
+                cwd: '.',
+                env: { PATH: process.env['PATH'] ?? '' },
+                timeoutMs: 5000,
+            });
+            if (result.exitCode === 0) {
+                return { available: true, version: result.stdout.trim().split('\n')[0] ?? null };
+            }
+            return { available: false, version: null };
+        }
+        catch {
+            return { available: false, version: null };
+        }
+    }
+}
+function emitCodexStreamEvents(line, input) {
+    const event = tryParseJson(line);
+    if (!isRecord(event))
+        return;
+    const type = event['type'];
+    if (type === 'item.completed' && isRecord(event['item'])) {
+        const item = event['item'];
+        if (item['type'] === 'agent_message' && typeof item['text'] === 'string') {
+            emitWorkerEvent(input, 'text', { text: item['text'] });
+            return;
+        }
+        if ((item['type'] === 'function_call' || item['type'] === 'tool_call') && typeof item['name'] === 'string') {
+            emitWorkerEvent(input, 'tool_call', {
+                toolName: item['name'],
+                toolArgs: summarizeValue(item['arguments'] ?? item['args']),
+            });
+            return;
+        }
+        if (item['type'] === 'function_call_output' || item['type'] === 'tool_result') {
+            emitWorkerEvent(input, 'tool_result', { text: summarizeValue(item['output'] ?? item['result']) });
+            return;
+        }
+        if (item['type'] === 'reasoning' && typeof item['text'] === 'string') {
+            emitWorkerEvent(input, 'thinking', { text: item['text'] });
+        }
+        return;
+    }
+    if (type === 'function_call') {
+        emitWorkerEvent(input, 'tool_call', {
+            toolName: typeof event['name'] === 'string' ? event['name'] : 'tool',
+            toolArgs: summarizeValue(event['arguments'] ?? event['args']),
+        });
+        return;
+    }
+    if (type === 'error') {
+        emitWorkerEvent(input, 'error', { error: summarizeValue(event['error']) });
+        return;
+    }
+    if (type === 'response.completed' || type === 'turn.completed') {
+        const usage = event['usage'];
+        if (!isRecord(usage))
+            return;
+        const outputTokens = usage['output_tokens'];
+        if (typeof outputTokens === 'number') {
+            emitWorkerEvent(input, 'turn_complete', { tokenCount: outputTokens });
+        }
+    }
+}
+/**
+ * Codex CLI outputs streaming events in two possible formats:
+ * 1. A JSON array: [{...}, {...}, ...]
+ * 2. Newline-delimited JSON (NDJSON): {...}\n{...}\n...
+ *
+ * Agent text is in events where type === "item.completed" and
+ * item.type === "agent_message", with text in item.text.
+ *
+ * Also handles the "message" event type with content array containing
+ * text entries.
+ */
+export function extractCodexOutput(raw) {
+    const events = parseCodexEvents(raw);
+    if (events.length === 0)
+        return raw;
+    const textParts = [];
+    for (const event of events) {
+        if (typeof event !== 'object' || event === null)
+            continue;
+        const e = event;
+        // Format: { type: "item.completed", item: { type: "agent_message", text: "..." } }
+        if (e.type === 'item.completed' && typeof e.item === 'object' && e.item !== null) {
+            const item = e.item;
+            if (item.type === 'agent_message' && typeof item.text === 'string') {
+                textParts.push(item.text);
+            }
+        }
+        // Format: { type: "message", content: [{ type: "text", text: "..." }] }
+        if (e.type === 'message' && Array.isArray(e.content)) {
+            for (const block of e.content) {
+                const b = block;
+                if (b.type === 'text' && typeof b.text === 'string') {
+                    textParts.push(b.text);
+                }
+            }
+        }
+    }
+    if (textParts.length > 0)
+        return textParts.join('\n');
+    return raw;
+}
+/** Parse Codex output as either a JSON array or NDJSON. */
+function parseCodexEvents(raw) {
+    const trimmed = raw.trim();
+    // Try JSON array first (starts with [)
+    if (trimmed.startsWith('[')) {
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (Array.isArray(parsed))
+                return parsed;
+        }
+        catch {
+            // Might be truncated array — fall through to NDJSON
+        }
+    }
+    // Try NDJSON (one JSON object per line)
+    const events = [];
+    for (const line of raw.split('\n')) {
+        const t = line.trim();
+        if (!t)
+            continue;
+        try {
+            events.push(JSON.parse(t));
+        }
+        catch {
+            // Not JSON — skip
+        }
+    }
+    return events;
+}
+function extractCodexTokenUsage(raw) {
+    const events = parseCodexEvents(raw);
+    if (events.length === 0)
+        return undefined;
+    const fromResponseCompleted = sumUsageForEventType(events, 'response.completed');
+    const totals = fromResponseCompleted.seen
+        ? fromResponseCompleted
+        : sumUsageForEventType(events, 'turn.completed');
+    if (totals.promptTokens <= 0 && totals.completionTokens <= 0)
+        return undefined;
+    return {
+        promptTokens: totals.promptTokens,
+        completionTokens: totals.completionTokens,
+    };
+}
+function sumUsageForEventType(events, expectedType) {
+    let promptTokens = 0;
+    let completionTokens = 0;
+    let seen = false;
+    for (const event of events) {
+        if (!isRecord(event))
+            continue;
+        if (event['type'] !== expectedType)
+            continue;
+        const usage = extractUsageFromCodexEvent(event);
+        if (usage.promptTokens <= 0 && usage.completionTokens <= 0)
+            continue;
+        seen = true;
+        promptTokens += usage.promptTokens;
+        completionTokens += usage.completionTokens;
+    }
+    return { seen, promptTokens, completionTokens };
+}
+function extractUsageFromCodexEvent(event) {
+    const directUsage = event['usage'];
+    if (isRecord(directUsage)) {
+        return {
+            promptTokens: parseTokenCount(directUsage['input_tokens']),
+            completionTokens: parseTokenCount(directUsage['output_tokens']),
+        };
+    }
+    const response = event['response'];
+    if (isRecord(response) && isRecord(response['usage'])) {
+        return {
+            promptTokens: parseTokenCount(response['usage']['input_tokens']),
+            completionTokens: parseTokenCount(response['usage']['output_tokens']),
+        };
+    }
+    return { promptTokens: 0, completionTokens: 0 };
+}
+/**
+ * Extract a thread/session ID from Codex streaming events.
+ * Codex emits thread_id in session-related events.
+ */
+function extractCodexThreadId(raw) {
+    const events = parseCodexEvents(raw);
+    for (const event of events) {
+        if (typeof event !== 'object' || event === null)
+            continue;
+        const e = event;
+        // Look for thread_id in various event shapes
+        if (typeof e['thread_id'] === 'string')
+            return e['thread_id'];
+        if (typeof e['id'] === 'string' && e['object'] === 'thread')
+            return e['id'];
+        if (isRecord(e['session']) && typeof e['session']['thread_id'] === 'string') {
+            return e['session']['thread_id'];
+        }
+    }
+    return null;
+}
+function tryParseJson(line) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+}
+function parseTokenCount(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value))
+        return 0;
+    return Math.max(0, Math.floor(value));
+}
+function parseOutput(role, raw) {
+    switch (role) {
+        case 'planner': {
+            const { result, error } = parsePlannerOutput(raw);
+            return { parsed: result, parseError: error };
+        }
+        case 'coder': {
+            const { result, error } = parseCoderOutput(raw);
+            return { parsed: result, parseError: error };
+        }
+        case 'reviewer': {
+            const { result, error } = parseReviewerOutput(raw);
+            return { parsed: result, parseError: error };
+        }
+        default:
+            return { parsed: null, parseError: `Unknown role: ${role}` };
+    }
+}
+//# sourceMappingURL=codex.js.map

package/dist/workers/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/workers/codex.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEvE,MAAM,OAAO,kBAAkB;IAC7B,KAAK,CAAC,OAAO,CAAC,KAAsB;QAClC,0EAA0E;QAC1E,+DAA+D;QAC/D,6EAA6E;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAA;QAC3D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,UAAU,EAAE,MAAM,CAAC,CAAA;QAEtE,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,uBAAuB,EAAE,UAAU,CAAC,CAAA;QAE7E,uCAAuC;QACvC,4DAA4D;QAC5D,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,QAAQ,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;gBACpE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,wBAAwB,CAAC,CAAA;YACjG,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAClF,mEAAmE,CACpE,CAAA;YACH,CAAC;QACH,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAErE,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,EAC5E,sBAAsB,CACvB,CAAA;QAED,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE;YACtC,KAAK,EAAE,OAAO;YACd,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;SACnD,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,OAAO;YACP,IAAI;YACJ,GAAG,EAAE,KAAK,CAAC,YAAY;YACvB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,cAAc,GAAG,IAAI;YACtC,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;gBACrB,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACpC,CAAC;SACF,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,wBAAwB,CAAC,CAAA;YAC1F,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE;gBAC9B,KAAK,EAAE,gCAAgC,KAAK,CAAC,cAAc,GAAG;aAC/D,CAAC,CAAA;QACJ,CAAC;QAED,2DAA2D;QAC3D,gEAAgE;QAChE,IAAI,aAAqB,CAAA;QACzB,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YACnD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,8CAA8C,CAAC,CAAA;QAC3H,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,8EAA8E,CAAC,CAAA;YACjH,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACjD,IAAI,aAAa,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAA;YACjJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,CAAC;QAED,uEAAuE;QACvE,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAExD,6BAA6B;QAC7B,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QAErE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAChF,CAAC;QAED,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS;YACT,UAAU;SACX,CAAC,CAAA;QAEF,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM;YACN,UAAU;YACV,SAAS;YACT,UAAU;SACX,CAAA;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;gBAC3D,GAAG,EAAE,GAAG;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;gBACxC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAA;YACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;YAClF,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC5C,CAAC;IACH,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAsB;IACjE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAM;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IAE1B,IAAI,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACtD,OAAM;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3G,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE;gBAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;gBACtB,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;aAC5D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,sBAAsB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;YAC9E,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;YACjG,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrE,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,OAAM;IACR,CAAC;IAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE;YAClC,QAAQ,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;YACpE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;SAC9D,CAAC,CAAA;QACF,OAAM;IACR,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;QAC1E,OAAM;IACR,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAM;QAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,CAAC,CAAA;QAC3C,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IAEnC,MAAM,SAAS,GAAa,EAAE,CAAA;IAE9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAQ;QACzD,MAAM,CAAC,GAAG,KAAgC,CAAA;QAE1C,mFAAmF;QACnF,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,CAAC,CAAC,IAA+B,CAAA;YAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3B,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,KAAgC,CAAA;gBAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACpD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2DAA2D;AAC3D,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAE1B,uCAAuC;IACvC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAA;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,MAAM,GAAc,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACrB,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEzC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI;QACvC,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAElD,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9E,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAiB,EACjB,YAAoB;IAEpB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,IAAI,GAAG,KAAK,CAAA;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QAC9B,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY;YAAE,SAAQ;QAC5C,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAA;QAC/C,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC;YAAE,SAAQ;QACpE,IAAI,GAAG,IAAI,CAAA;QACX,YAAY,IAAI,KAAK,CAAC,YAAY,CAAA;QAClC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,CAAA;IAC5C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAA;AACjD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAA8B;IAIhE,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YAC1D,gBAAgB,EAAE,eAAe,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;SAChE,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;IAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,YAAY,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC;YAChE,gBAAgB,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC;SACtE,CAAA;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAA;AACjD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAQ;QACzD,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,6CAA6C;QAC7C,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,WAAW,CAAC,CAAA;QAC7D,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QAC3E,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5E,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAClE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW;IAC5C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;QAC9C,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;QAC9C,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YAClD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;QAC9C,CAAC;QACD;YACE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAA;IAChE,CAAC;AACH,CAAC"}

package/dist/workers/command.d.ts

@@ -0,0 +1,6 @@
+import type { WorkerProfileInput } from './types.js';
+export declare function buildWorkerCommand(profile: WorkerProfileInput, taskArgs: string[]): {
+    command: string;
+    args: string[];
+};
+//# sourceMappingURL=command.d.ts.map

package/dist/workers/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/workers/command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAGpD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAarC"}

package/dist/workers/command.js

@@ -0,0 +1,15 @@
+import { parseCommandString } from '../utils/command.js';
+export function buildWorkerCommand(profile, taskArgs) {
+    if (!profile.runtimeWrapper) {
+        return {
+            command: profile.command,
+            args: taskArgs,
+        };
+    }
+    const wrapper = parseCommandString(profile.runtimeWrapper);
+    return {
+        command: wrapper.binary,
+        args: [...wrapper.args, profile.command, ...taskArgs],
+    };
+}
+//# sourceMappingURL=command.js.map

package/dist/workers/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/workers/command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAExD,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,QAAkB;IAElB,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,QAAQ;SACf,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC1D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC;KACtD,CAAA;AACH,CAAC"}

package/dist/workers/env.d.ts

@@ -0,0 +1,18 @@
+import type { WorkerProfileInput } from './types.js';
+export declare const ENV_WHITELIST: readonly ["PATH", "HOME", "USER", "SHELL", "LANG", "TERM", "TMPDIR", "XDG_CONFIG_HOME", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_RUNTIME_DIR", "MISE_TRUSTED_CONFIG_PATHS"];
+export declare const ENV_BLACKLIST_EXACT: Set<string>;
+export declare const ENV_BLACKLIST_PATTERNS: RegExp[];
+export declare function normalizePathForSubprocess(pathValue: string | undefined, homeValue: string | undefined): string;
+/**
+ * Build the env vars to pass to a worker process.
+ * Always uses whitelist mode for process env vars.
+ * NEVER passes GITHUB_TOKEN or any forge token regardless.
+ */
+export declare function buildWorkerEnv(profile: WorkerProfileInput, overrides?: Record<string, string>): Record<string, string>;
+/**
+ * Build env vars for verifier commands.
+ * Uses strict whitelist mode to avoid leaking forge and API secrets.
+ */
+export declare function buildVerifierEnv(overrides?: Record<string, string>): Record<string, string>;
+export declare function buildBootstrapEnv(overrides?: Record<string, string>): Record<string, string>;
+//# sourceMappingURL=env.d.ts.map

package/dist/workers/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/workers/env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAGpD,eAAO,MAAM,aAAa,4KAQhB,CAAA;AAEV,eAAO,MAAM,mBAAmB,aAG9B,CAAA;AAKF,eAAO,MAAM,sBAAsB,UAYlC,CAAA;AAcD,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,CAuBR;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,kBAAkB,EAC3B,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACrC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkCxB;AAWD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiB/F;AA2BD,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBhG"}

package/dist/workers/env.js

@@ -0,0 +1,172 @@
+import { delimiter, join } from 'node:path';
+import { logger } from '../utils/logger.js';
+export const ENV_WHITELIST = [
+    'PATH', 'HOME', 'USER', 'SHELL', 'LANG', 'TERM', 'TMPDIR',
+    'XDG_CONFIG_HOME', 'XDG_DATA_HOME', 'XDG_CACHE_HOME', 'XDG_RUNTIME_DIR',
+    // Set by config/loader.ts to the configured storage.worktreeRoot so mise
+    // auto-trusts any `.mise.toml` / `.tool-versions` checked out in a worktree.
+    // Without this, tool invocations that go through mise shims fail with
+    // "Config files ... are not trusted" before the command even runs.
+    'MISE_TRUSTED_CONFIG_PATHS',
+];
+export const ENV_BLACKLIST_EXACT = new Set([
+    'GITHUB_TOKEN', 'GH_TOKEN', 'FORGEJO_TOKEN',
+    'NIGHT_ORCH_WEBHOOK_URL',
+]);
+// Use word-boundary matches so legitimate vars with these substrings
+// (e.g. USER_KEYBOARD_LAYOUT, NODE_ENV) are not false-flagged. The
+// boundary is either string start/end or an underscore.
+export const ENV_BLACKLIST_PATTERNS = [
+    /(?:^|_)TOKEN(?:$|_)/i,
+    /(?:^|_)SECRET(?:$|_)/i,
+    /(?:^|_)PASSWORD(?:$|_)/i,
+    /(?:^|_)AUTH(?:$|_)/i,
+    /(?:^|_)CREDENTIAL(?:$|_)/i,
+    /(?:^|_)KEY(?:$|_)/i,
+    /(?:^|_)API[_]?KEY(?:$|_)/i,
+    /(?:^|_)ACCESS[_]?TOKEN(?:$|_)/i,
+    /^GITHUB_/i,
+    /^FORGEJO_/i,
+    /^GH_/i,
+];
+const PATH_FALLBACK_DIRS = [
+    '/usr/local/bin',
+    '/usr/bin',
+    '/bin',
+];
+function isBlacklisted(key) {
+    const upper = key.toUpperCase();
+    if (ENV_BLACKLIST_EXACT.has(upper))
+        return true;
+    return ENV_BLACKLIST_PATTERNS.some((p) => p.test(key));
+}
+export function normalizePathForSubprocess(pathValue, homeValue) {
+    const segments = (pathValue ?? '')
+        .split(delimiter)
+        .map((part) => part.trim())
+        .filter((part) => part.length > 0);
+    const seen = new Set(segments);
+    const ensureSegment = (candidate) => {
+        if (!candidate || seen.has(candidate))
+            return;
+        segments.push(candidate);
+        seen.add(candidate);
+    };
+    if (homeValue) {
+        ensureSegment(join(homeValue, '.local/bin'));
+        ensureSegment(join(homeValue, '.local/share/pnpm'));
+        ensureSegment(join(homeValue, '.local/share/mise/shims'));
+    }
+    for (const fallback of PATH_FALLBACK_DIRS) {
+        ensureSegment(fallback);
+    }
+    return segments.join(delimiter);
+}
+/**
+ * Build the env vars to pass to a worker process.
+ * Always uses whitelist mode for process env vars.
+ * NEVER passes GITHUB_TOKEN or any forge token regardless.
+ */
+export function buildWorkerEnv(profile, overrides = {}) {
+    const result = {};
+    // Whitelist mode: only safe vars
+    for (const key of ENV_WHITELIST) {
+        const val = process.env[key];
+        if (val !== undefined)
+            result[key] = val;
+    }
+    if (!profile.minimalEnv) {
+        logger.warn('workerProfile.minimalEnv=false is deprecated and ignored; using whitelist-only env mode');
+    }
+    // Add profile-specific env overrides (but check blacklist)
+    for (const [key, val] of Object.entries(profile.env)) {
+        if (isBlacklisted(key)) {
+            logger.warn({ key }, 'Worker profile env contains blacklisted variable — skipped');
+            continue;
+        }
+        result[key] = val;
+    }
+    // Add runtime environment overrides (for dedicated env setup, etc.)
+    for (const [key, val] of Object.entries(overrides)) {
+        if (isBlacklisted(key)) {
+            logger.warn({ key }, 'Worker runtime env override contains blacklisted variable — skipped');
+            continue;
+        }
+        result[key] = val;
+    }
+    result['PATH'] = normalizePathForSubprocess(result['PATH'], result['HOME'] ?? process.env['HOME']);
+    return result;
+}
+const VERIFIER_ENV_WHITELIST = [
+    ...ENV_WHITELIST,
+    'CI',
+    'NODE_ENV',
+    'PNPM_HOME',
+    'npm_config_cache',
+    'npm_config_userconfig',
+];
+/**
+ * Build env vars for verifier commands.
+ * Uses strict whitelist mode to avoid leaking forge and API secrets.
+ */
+export function buildVerifierEnv(overrides = {}) {
+    const result = {};
+    for (const key of VERIFIER_ENV_WHITELIST) {
+        const val = process.env[key];
+        if (val !== undefined && !isBlacklisted(key)) {
+            result[key] = val;
+        }
+    }
+    for (const [key, val] of Object.entries(overrides)) {
+        if (isBlacklisted(key)) {
+            logger.warn({ key }, 'Verifier runtime env override contains blacklisted variable — skipped');
+            continue;
+        }
+        result[key] = val;
+    }
+    result['PATH'] = normalizePathForSubprocess(result['PATH'], result['HOME'] ?? process.env['HOME']);
+    return result;
+}
+/**
+ * Build env vars for subprocesses that run inside a worktree but are not
+ * workers — bootstrap scripts, healthchecks, docker compose up/down.
+ *
+ * These commands are user-authored AND they execute inside an attacker-
+ * authored worktree (the coder worker may have written the Makefile, the
+ * devcontainer config, package postinstall scripts, etc). They must NOT
+ * inherit `process.env` because that would expose forge tokens, SMTP
+ * creds, webhook URLs, and every other secret loaded at startup.
+ *
+ * The whitelist is identical to `buildVerifierEnv`'s in spirit but adds
+ * `DOCKER_*` variables so compose can reach the engine configured by the
+ * operator. Anything else must come through `overrides`.
+ */
+const BOOTSTRAP_ENV_WHITELIST = [
+    ...VERIFIER_ENV_WHITELIST,
+    'DOCKER_HOST',
+    'DOCKER_CONFIG',
+    'DOCKER_CONTEXT',
+    'DOCKER_CERT_PATH',
+    'DOCKER_TLS_VERIFY',
+    'COMPOSE_PROJECT_NAME',
+    'COMPOSE_FILE',
+];
+export function buildBootstrapEnv(overrides = {}) {
+    const result = {};
+    for (const key of BOOTSTRAP_ENV_WHITELIST) {
+        const val = process.env[key];
+        if (val !== undefined && !isBlacklisted(key)) {
+            result[key] = val;
+        }
+    }
+    for (const [key, val] of Object.entries(overrides)) {
+        if (isBlacklisted(key)) {
+            logger.warn({ key }, 'Bootstrap runtime env override contains blacklisted variable — skipped');
+            continue;
+        }
+        result[key] = val;
+    }
+    result['PATH'] = normalizePathForSubprocess(result['PATH'], result['HOME'] ?? process.env['HOME']);
+    return result;
+}
+//# sourceMappingURL=env.js.map

package/dist/workers/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/workers/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAE3C,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;IACzD,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,sEAAsE;IACtE,mEAAmE;IACnE,2BAA2B;CACnB,CAAA;AAEV,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACzC,cAAc,EAAE,UAAU,EAAE,eAAe;IAC3C,wBAAwB;CACzB,CAAC,CAAA;AAEF,qEAAqE;AACrE,mEAAmE;AACnE,wDAAwD;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;IACzB,qBAAqB;IACrB,2BAA2B;IAC3B,oBAAoB;IACpB,2BAA2B;IAC3B,gCAAgC;IAChC,WAAW;IACX,YAAY;IACZ,OAAO;CACR,CAAA;AAED,MAAM,kBAAkB,GAAG;IACzB,gBAAgB;IAChB,UAAU;IACV,MAAM;CACP,CAAA;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,SAA6B,EAC7B,SAA6B;IAE7B,MAAM,QAAQ,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;SAC/B,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAEpC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,MAAM,aAAa,GAAG,CAAC,SAA6B,EAAE,EAAE;QACtD,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAM;QAC7C,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACxB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACrB,CAAC,CAAA;IAED,IAAI,SAAS,EAAE,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5C,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAA;QACnD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,aAAa,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,YAAoC,EAAE;IAEtC,MAAM,MAAM,GAA2B,EAAE,CAAA;IAEzC,iCAAiC;IACjC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAC1C,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAA;IACxG,CAAC;IAED,2DAA2D;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4DAA4D,CAAC,CAAA;YAClF,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACnB,CAAC;IAED,oEAAoE;IACpE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,qEAAqE,CAAC,CAAA;YAC3F,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACnB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAElG,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,sBAAsB,GAAG;IAC7B,GAAG,aAAa;IAChB,IAAI;IACJ,UAAU;IACV,WAAW;IACX,kBAAkB;IAClB,uBAAuB;CACf,CAAA;AAEV;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoC,EAAE;IACrE,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACnB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uEAAuE,CAAC,CAAA;YAC7F,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACnB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAClG,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,uBAAuB,GAAG;IAC9B,GAAG,sBAAsB;IACzB,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,mBAAmB;IACnB,sBAAsB;IACtB,cAAc;CACN,CAAA;AAEV,MAAM,UAAU,iBAAiB,CAAC,YAAoC,EAAE;IACtE,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACnB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,wEAAwE,CAAC,CAAA;YAC9F,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACnB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAClG,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/workers/events.d.ts

@@ -0,0 +1,7 @@
+import type { AgentEventType } from '../events/types.js';
+import type { WorkerTaskInput } from './types.js';
+export declare function emitWorkerEvent(input: WorkerTaskInput, type: AgentEventType, data?: Record<string, unknown>): void;
+export declare function summarizeValue(value: unknown, maxLen?: number): string;
+export declare function truncate(value: string, maxLen?: number): string;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+//# sourceMappingURL=events.d.ts.map

package/dist/workers/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/workers/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,cAAc,EACpB,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,IAAI,CASN;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAM,GAAG,MAAM,CAOnE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAM,GAAG,MAAM,CAG5D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE"}

package/dist/workers/events.js

@@ -0,0 +1,30 @@
+import { nowUtcIso } from '../utils/time.js';
+export function emitWorkerEvent(input, type, data = {}) {
+    input.onEvent?.({
+        runId: input.runId ?? 'unknown-run',
+        phase: input.phase ?? 'unknown-phase',
+        role: input.role,
+        type,
+        timestamp: nowUtcIso(),
+        data,
+    });
+}
+export function summarizeValue(value, maxLen = 240) {
+    if (typeof value === 'string')
+        return truncate(value, maxLen);
+    try {
+        return truncate(JSON.stringify(value), maxLen);
+    }
+    catch {
+        return truncate(String(value), maxLen);
+    }
+}
+export function truncate(value, maxLen = 240) {
+    if (value.length <= maxLen)
+        return value;
+    return `${value.slice(0, maxLen - 3)}...`;
+}
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=events.js.map

package/dist/workers/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/workers/events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAG5C,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,IAAoB,EACpB,OAAgC,EAAE;IAElC,KAAK,CAAC,OAAO,EAAE,CAAC;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,aAAa;QACnC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,eAAe;QACrC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,SAAS,EAAE,SAAS,EAAE;QACtB,IAAI;KACL,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,MAAM,GAAG,GAAG;IAClD,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,KAAK,CAAA;IACxC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AACpD,CAAC"}

package/dist/workers/factory.d.ts

@@ -0,0 +1,6 @@
+import type { WorkerAdapter, WorkerProfileInput } from './types.js';
+import { WorkerAdapterRegistry } from './registry.js';
+declare const defaultRegistry: WorkerAdapterRegistry;
+export declare function createWorkerAdapter(profile: WorkerProfileInput): WorkerAdapter;
+export { defaultRegistry };
+//# sourceMappingURL=factory.d.ts.map

package/dist/workers/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/workers/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAKrD,QAAA,MAAM,eAAe,uBAA8B,CAAA;AAKnD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAE9E;AAED,OAAO,EAAE,eAAe,EAAE,CAAA"}