synorch 0.4.0-beta.0 → 0.4.0-beta.1

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0-beta.1] - 2026-09-26
+
+Pre-release under the npm dist-tag `beta`. `latest` stays on 0.3.0.
+
+### Fixed
+
+- First run on a new machine: bare `syn` asks which provider to connect, signs in, saves `routes.session` and continues, instead of exiting with `config_invalid` before any sign-in was possible. Headless runs without a route name the two commands to run.
+- A turn that fails because the provider is not signed in offers to sign in in the session and retry.
+- A Claude Code sign-in made inside a session is visible to it immediately.
+- Windows: the credential refresh lock tolerates `EPERM`/`EBUSY`.
+
 ## [0.4.0-beta.0] - 2026-09-26
 
 Pre-release, published under the npm dist-tag `beta` (`npm i -g synorch@beta`). `latest` stays on 0.3.0.
@@ -88,7 +99,8 @@ Pre-release, published under the npm dist-tag `beta` (`npm i -g synorch@beta`).
 - A bundled, provenance-tracked Ingenium skill catalog with on-demand loading rules.
 - Model profiles, orchestration protocols, minimal context packets, verification contracts, and provider adapters.
 
-[Unreleased]: https://github.com/TunahanTuna/synorch/compare/v0.4.0-beta.0...HEAD
+[Unreleased]: https://github.com/TunahanTuna/synorch/compare/v0.4.0-beta.1...HEAD
+[0.4.0-beta.1]: https://github.com/TunahanTuna/synorch/compare/v0.4.0-beta.0...v0.4.0-beta.1
 [0.4.0-beta.0]: https://github.com/TunahanTuna/synorch/compare/v0.3.0...v0.4.0-beta.0
 [0.3.0]: https://github.com/TunahanTuna/synorch/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/TunahanTuna/synorch/compare/v0.1.0...v0.2.0

package/README.md

@@ -70,7 +70,7 @@ Installing from a local checkout (works on Windows, macOS and Linux; no `syn ini
 ```bash
 pnpm install
 pnpm run install:global   # build, pack and install a self-contained global copy
-syn --version             # 0.4.0-beta.0 (<commit>)
+syn --version             # 0.4.0-beta.1 (<commit>)
 ```
 
 See [docs/harness/delivery/install.md](./docs/harness/delivery/install.md) for the linked (live-rebuild) variant, updating and uninstalling.
@@ -353,7 +353,7 @@ pnpm dev -- inspect # run the CLI from source
 | [Architecture](./docs/AI-ORCHESTRATION-ARCHITECTURE.md) | The full design: orchestration model, protocol system, context architecture, model routing, discovery, open decisions, and the dated decision log. |
 | [Multi-provider harness vision](./docs/FUTURE-MULTI-PROVIDER-HARNESS.md) | Where this goes next — running different providers in different roles under one orchestrator. Proposal stage, not implemented. |
 | [CHANGELOG](./CHANGELOG.md) | Version history, Keep a Changelog + SemVer. |
-| [Release notes v0.4.0-beta.0](./docs/releases/v0.4.0-beta.0.md) | Human-readable notes for the current beta (`synorch@beta`). |
+| [Release notes v0.4.0-beta.1](./docs/releases/v0.4.0-beta.1.md) | Human-readable notes for the current beta (`synorch@beta`). |
 | [Release notes v0.3.0](./docs/releases/v0.3.0.md) | Human-readable notes for the current stable release. |
 | [Security policy](./SECURITY.md) | Report vulnerabilities through the private channel, not a public issue. |
 

package/dist/build-info.json

@@ -1,4 +1,4 @@
 {
-  "commit": "1968e9f",
-  "builtAt": "2026-09-25T21:44:15.851Z"
+  "commit": "12ee7ff",
+  "builtAt": "2026-09-26T00:00:40.891Z"
 }

package/dist/domain/product.d.ts

@@ -1,3 +1,3 @@
 export declare const SYNORCH_GENERATOR_NAME: "synorch";
-export declare const SYNORCH_VERSION: "0.4.0-beta.0";
+export declare const SYNORCH_VERSION: "0.4.0-beta.1";
 //# sourceMappingURL=product.d.ts.map

package/dist/domain/product.js

@@ -1,3 +1,3 @@
 export const SYNORCH_GENERATOR_NAME = "synorch";
-export const SYNORCH_VERSION = "0.4.0-beta.0";
+export const SYNORCH_VERSION = "0.4.0-beta.1";
 //# sourceMappingURL=product.js.map

package/dist/harness/auth/json-file.d.ts

@@ -5,4 +5,12 @@ export declare function readJsonFile(filePath: string): Promise<unknown>;
  * Windows the mode bits are ignored and the file inherits the user profile's ACL.
  */
 export declare function writeJsonAtomic(filePath: string, value: unknown): Promise<void>;
+/**
+ * Windows reports EPERM/EACCES/EBUSY while another handle (a concurrent reader, antivirus, the
+ * indexer) holds a file, or while it is still delete-pending after an unlink. Those clear within
+ * milliseconds, so the operation is retried with a bounded exponential backoff (about 1.3s in
+ * total at the default 8 attempts) before the error is surfaced.
+ */
+export declare function retryTransientFs<T>(operation: () => Promise<T>, attempts?: number): Promise<T>;
+export declare function isTransientFsError(error: unknown): boolean;
 //# sourceMappingURL=json-file.d.ts.map

package/dist/harness/auth/json-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-file.d.ts","sourceRoot":"","sources":["../../../src/harness/auth/json-file.ts"],"names":[],"mappings":"AAIA,uHAAuH;AACvH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBrF"}
+{"version":3,"file":"json-file.d.ts","sourceRoot":"","sources":["../../../src/harness/auth/json-file.ts"],"names":[],"mappings":"AAIA,uHAAuH;AACvH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBrF;AAQD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAS/F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE1D"}

package/dist/harness/auth/json-file.js

@@ -41,17 +41,28 @@ export async function writeJsonAtomic(filePath, value) {
         await chmod(filePath, 0o600);
 }
 async function renameWithRetry(from, to) {
-    for (let attempt = 0;; attempt += 1) {
+    await retryTransientFs(() => rename(from, to));
+}
+const TRANSIENT_FS_CODES = new Set(["EPERM", "EACCES", "EBUSY"]);
+/**
+ * Windows reports EPERM/EACCES/EBUSY while another handle (a concurrent reader, antivirus, the
+ * indexer) holds a file, or while it is still delete-pending after an unlink. Those clear within
+ * milliseconds, so the operation is retried with a bounded exponential backoff (about 1.3s in
+ * total at the default 8 attempts) before the error is surfaced.
+ */
+export async function retryTransientFs(operation, attempts = 8) {
+    for (let attempt = 1;; attempt += 1) {
         try {
-            await rename(from, to);
-            return;
+            return await operation();
         }
         catch (error) {
-            const code = error.code;
-            if (attempt >= 10 || (code !== "EPERM" && code !== "EACCES" && code !== "EBUSY"))
+            if (attempt >= attempts || !isTransientFsError(error))
                 throw error;
-            await new Promise((resolve) => setTimeout(resolve, 20 * (attempt + 1)));
+            await new Promise((resolve) => setTimeout(resolve, 5 * 2 ** attempt));
         }
     }
 }
+export function isTransientFsError(error) {
+    return TRANSIENT_FS_CODES.has(error?.code ?? "");
+}
 //# sourceMappingURL=json-file.js.map

package/dist/harness/auth/json-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"json-file.js","sourceRoot":"","sources":["../../../src/harness/auth/json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IACrD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,OAAO,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9F,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"json-file.js","sourceRoot":"","sources":["../../../src/harness/auth/json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IACrD,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,SAA2B,EAAE,QAAQ,GAAG,CAAC;IACjF,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,OAAO,IAAI,QAAQ,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACnE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,kBAAkB,CAAC,GAAG,CAAE,KAA2C,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/harness/auth/locks.d.ts

@@ -9,6 +9,11 @@ export interface FileLockOptions {
  * Cross-process mutual exclusion through an `O_EXCL` lock file holding the owner's pid and a random
  * token. Release removes the file only if it still carries our token. A lock whose holder process
  * is gone, or which is older than `staleMs`, is taken over.
+ *
+ * On Windows a just-released lock file stays delete-pending while any other handle (a waiter's
+ * stale check, antivirus, the indexer) is still open on it; during that window `open(wx)`, `unlink`
+ * and reads fail with EPERM/EACCES/EBUSY. On `open` that means "someone is on it" and is treated
+ * like EEXIST (keep polling); `unlink` and the token read are retried with a bounded backoff.
  */
 export declare function acquireFileLock(lockPath: string, options?: FileLockOptions): Promise<() => Promise<void>>;
 /** In-process, per-key serialization: callers for the same key run one after another. */

package/dist/harness/auth/locks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"locks.d.ts","sourceRoot":"","sources":["../../../src/harness/auth/locks.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAMD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CA0CnH;AA0BD,yFAAyF;AACzF,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAEhD,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAWrE"}
+{"version":3,"file":"locks.d.ts","sourceRoot":"","sources":["../../../src/harness/auth/locks.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAMD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAgCnH;AA0DD,yFAAyF;AACzF,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAEhD,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAWrE"}

package/dist/harness/auth/locks.js

@@ -1,7 +1,8 @@
 import { randomBytes } from "node:crypto";
-import { mkdir, open, readFile, rm, stat } from "node:fs/promises";
+import { mkdir, open, readFile, stat, unlink } from "node:fs/promises";
 import path from "node:path";
 import { HarnessError } from "../contracts/index.js";
+import { isTransientFsError, retryTransientFs } from "./json-file.js";
 const DEFAULT_STALE_MS = 60_000;
 const DEFAULT_TIMEOUT_MS = 90_000;
 const DEFAULT_POLL_MS = 25;
@@ -9,6 +10,11 @@ const DEFAULT_POLL_MS = 25;
  * Cross-process mutual exclusion through an `O_EXCL` lock file holding the owner's pid and a random
  * token. Release removes the file only if it still carries our token. A lock whose holder process
  * is gone, or which is older than `staleMs`, is taken over.
+ *
+ * On Windows a just-released lock file stays delete-pending while any other handle (a waiter's
+ * stale check, antivirus, the indexer) is still open on it; during that window `open(wx)`, `unlink`
+ * and reads fail with EPERM/EACCES/EBUSY. On `open` that means "someone is on it" and is treated
+ * like EEXIST (keep polling); `unlink` and the token read are retried with a bounded backoff.
  */
 export async function acquireFileLock(lockPath, options = {}) {
     const staleMs = options.staleMs ?? DEFAULT_STALE_MS;
@@ -19,35 +25,24 @@ export async function acquireFileLock(lockPath, options = {}) {
         if (options.signal?.aborted === true) {
             throw new HarnessError({ code: "cancelled", message: "lock wait aborted", workspace_effect: "none", retry_safe: true });
         }
+        let transient;
         try {
-            const handle = await open(lockPath, "wx", 0o600);
-            try {
-                await handle.writeFile(JSON.stringify({ pid: process.pid, token, acquired_at: new Date().toISOString() }));
-                await handle.sync();
-            }
-            finally {
-                await handle.close();
-            }
-            return async () => {
-                try {
-                    const current = JSON.parse(await readFile(lockPath, "utf8"));
-                    if (current.token === token)
-                        await rm(lockPath, { force: true });
-                }
-                catch {
-                    return;
-                }
-            };
+            await createLockFile(lockPath, token);
+            return () => releaseFileLock(lockPath, token);
         }
         catch (error) {
-            if (!isExists(error))
+            if (isTransientFsError(error))
+                transient = error;
+            else if (!isExists(error))
                 throw error;
         }
-        if (await isAbandoned(lockPath, staleMs)) {
-            await rm(lockPath, { force: true }).catch(() => undefined);
+        if (transient === undefined && (await isAbandoned(lockPath, staleMs))) {
+            await removeLockFile(lockPath).catch(() => undefined);
             continue;
         }
         if (Date.now() > deadline) {
+            if (transient !== undefined)
+                throw transient;
             throw new HarnessError({
                 code: "internal",
                 message: `timed out waiting for lock ${path.basename(lockPath)}`,
@@ -58,6 +53,40 @@ export async function acquireFileLock(lockPath, options = {}) {
         await new Promise((resolve) => setTimeout(resolve, options.pollMs ?? DEFAULT_POLL_MS));
     }
 }
+/** Creates the lock exclusively; a failed write never leaves a half-written lock file behind. */
+async function createLockFile(lockPath, token) {
+    const handle = await open(lockPath, "wx", 0o600);
+    try {
+        await handle.writeFile(JSON.stringify({ pid: process.pid, token, acquired_at: new Date().toISOString() }));
+        await handle.sync();
+    }
+    catch (error) {
+        await handle.close().catch(() => undefined);
+        await removeLockFile(lockPath).catch(() => undefined);
+        throw error;
+    }
+    await handle.close();
+}
+/** Removes the lock only while it still carries our token. Never throws: release runs in `finally` blocks. */
+async function releaseFileLock(lockPath, token) {
+    try {
+        const current = JSON.parse(await retryTransientFs(() => readFile(lockPath, "utf8")));
+        if (current.token === token)
+            await removeLockFile(lockPath, 10);
+    }
+    catch {
+        return;
+    }
+}
+async function removeLockFile(lockPath, attempts) {
+    try {
+        await retryTransientFs(() => unlink(lockPath), attempts);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
 async function isAbandoned(lockPath, staleMs) {
     try {
         const [info, text] = await Promise.all([stat(lockPath), readFile(lockPath, "utf8")]);

package/dist/harness/auth/locks.js.map

@@ -1 +1 @@
-{"version":3,"file":"locks.js","sourceRoot":"","sources":["../../../src/harness/auth/locks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAUrD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,UAA2B,EAAE;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3G,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,OAAO,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAC;oBACpF,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;wBAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACpC,CAAC;QACD,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,8BAA8B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAChE,gBAAgB,EAAE,MAAM;gBACxB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAe;IAC1D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,OAAO;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;QACpD,OAAO,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAQ,KAA2C,EAAE,IAAI,KAAK,QAAQ,CAAC;AACzE,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,UAAU;IACJ,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtD,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,IAAsB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"locks.js","sourceRoot":"","sources":["../../../src/harness/auth/locks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAUtE,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,UAA2B,EAAE;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,GAAG,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,SAAS,GAAG,KAAK,CAAC;iBAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACzC,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAM,SAAS,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,8BAA8B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAChE,gBAAgB,EAAE,MAAM;gBACxB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,KAAa;IAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3G,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAa;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAwB,CAAC;QAC5G,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,QAAiB;IAC/D,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAe;IAC1D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,OAAO;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;QACpD,OAAO,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAQ,KAA2C,EAAE,IAAI,KAAK,QAAQ,CAAC;AACzE,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,UAAU;IACJ,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtD,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,IAAsB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}

package/dist/harness/cli/conversation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../../src/harness/cli/conversation.ts"],"names":[],"mappings":"AAKA,OAAO,EA0BL,KAAK,eAAe,EAsBrB,MAAM,uBAAuB,CAAC;AAwB/B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AA0B/C,OAAO,EAA+B,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAsB9C;;;;;;;;;;;;;;;;;GAiBG;AAEH,KAAK,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAyG9D,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAMrE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAMpE;AA2ED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3H"}
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../../src/harness/cli/conversation.ts"],"names":[],"mappings":"AAKA,OAAO,EA2BL,KAAK,eAAe,EAsBrB,MAAM,uBAAuB,CAAC;AAwB/B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AA2B/C,OAAO,EAA+B,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAsB9C;;;;;;;;;;;;;;;;;GAiBG;AAEH,KAAK,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAyG9D,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAMrE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAMpE;AA2ED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3H"}

package/dist/harness/cli/conversation.js

@@ -32,6 +32,7 @@ import { defaultEffort, isReasoningEffort } from "../providers/index.js";
 import { openBrowser } from "../tui/open-browser.js";
 import { acknowledgedNotices, acknowledgeNotice, approvalNotice, mcpStartNotices, StartupNotices } from "./startup-notices.js";
 import { failureInfo } from "./outcome.js";
+import { connectProvider, MANUAL_CONNECT_COMMANDS, signIn } from "./first-run-connect.js";
 import { createSessionRenderer } from "./renderers.js";
 import { createRuntime } from "./runtime.js";
 import { changePathspecs, commitAll, commitSelected, commitsSince, reviewDiff, uncommittedChanges } from "./session-git.js";
@@ -130,10 +131,10 @@ function missingRoute(runtime) {
     const hints = profileHintsFor(runtime.canonical, "orchestrator").map((hint) => `${hint.provider}/${hint.model}`);
     return new HarnessError({
         code: "config_invalid",
-        message: `no model route is configured for the conversation: add a routes entry with tier session (or orchestrator) to ${path.join(runtime.home, "config.yaml")}, or pass --profile session=<provider>/<model>${hints.length === 0 ? "" : ` (the canonical model profiles suggest ${hints.join(" or ")})`}`,
+        message: `no model is connected for the conversation: run ${MANUAL_CONNECT_COMMANDS} (or start syn in an interactive terminal to sign in there; --profile session=<provider>/<model> sets one for a single run)${hints.length === 0 ? "" : `; the canonical model profiles suggest ${hints.join(" or ")}`}`,
         workspace_effect: "none",
         retry_safe: true,
-        next_command: "syn doctor --runtime",
+        next_command: "syn login openai && syn config set routes.session openai/gpt-6-sol",
     });
 }
 /** The conversation model the user saved with `/model <tier> --save` (a preference, not a route). */
@@ -218,6 +219,8 @@ class Conversation {
     grantList = [];
     routePromise;
     routeRecorded = false;
+    /** The current turn's model request failed for want of a signed-in identity (a sign-in is offered after it). */
+    authFailure = false;
     sessionTier;
     currentModel;
     sessionId;
@@ -345,14 +348,12 @@ class Conversation {
         if (runtime.permissionMode() === "plan")
             this.modeBeforePlan = startMode === "plan" ? DEFAULT_PERMISSION_MODE : startMode;
         this.sessionTier = await savedSessionTier(runtime.home);
-        const rule = sessionRouteRule(runtime, this.sessionTier);
-        if (rule === undefined)
+        let rule = sessionRouteRule(runtime, this.sessionTier);
+        // First run without a route: an interactive terminal connects a provider after the view starts; headless fails with the commands.
+        if (rule === undefined && !this.canConnect())
             return this.fail(failureInfo(missingRoute(runtime)));
-        this.sessionTier = rule.tier;
-        this.currentModel = rule.route.model_id;
-        // Resolving the route may probe the provider's capabilities: it runs while the user types.
-        this.routePromise = runtime.router.resolve({ tier: rule.tier, role: "session" }, this.outer.signal);
-        this.routePromise.catch(() => undefined);
+        if (rule !== undefined)
+            this.adoptRule(rule);
         const ledger = new UsageLedger(runtime.home);
         this.usageLedger = ledger;
         const unsubscribe = runtime.subscribe((event) => {
@@ -377,10 +378,23 @@ class Conversation {
             const resumed = await this.openResumed();
             const sandboxNoticeSeen = runtime.sandbox.enforcement === "full" || (await acknowledgedNotices(runtime.home)).has("sandbox-partial");
             this.notices = new StartupNotices((notice) => this.note(notice.level, notice.text), this.glyphs.sep);
-            await this.renderer.start({ ...this.header(rule, await this.welcomeHint(resumed !== undefined)), sandboxNoticeSeen });
+            const hint = await this.welcomeHint(resumed !== undefined);
+            await this.renderer.start({ ...(rule === undefined ? this.unconnectedHeader(hint) : this.header(rule, hint)), sandboxNoticeSeen });
             // The partial-sandbox warning shows once per machine; /permissions keeps it.
             if (!sandboxNoticeSeen && this.renderer.controls?.appearance !== undefined)
                 void acknowledgeNotice(runtime.home, "sandbox-partial");
+            if (rule === undefined) {
+                const connected = await connectProvider(this.connectHost());
+                rule = connected === undefined ? undefined : sessionRouteRule(runtime, "session");
+                if (rule === undefined) {
+                    this.note("info", `No provider connected ${this.glyphs.sep} to set one up by hand: ${MANUAL_CONNECT_COMMANDS}`);
+                    await this.renderer.stop("completed");
+                    return EXIT_CODES.success;
+                }
+                this.adoptRule(rule);
+                const view = this.header(rule).welcome;
+                this.renderer.controls?.appearance?.updateWelcome({ model: rule.route.model_id, ...(view?.effort === undefined ? {} : { effort: view.effort }), ...(view?.plan === undefined ? {} : { plan: view.plan }) });
+            }
             const controls = this.renderer.controls;
             this.refreshPalette();
             this.refreshStatus();
@@ -416,7 +430,7 @@ class Conversation {
             else
                 void Promise.race([this.mcpStarted, delay(1500)]).then(() => this.notices?.flush());
             // Credential pre-resolution (keychain, token refresh) happens in the background, never before the editor.
-            void this.routePromise.then((decision) => runtime.credentials(decision.route, this.outer.signal)).catch(() => undefined);
+            void this.routePromise?.then((decision) => runtime.credentials(decision.route, this.outer.signal)).catch(() => undefined);
             const input = this.renderer.input;
             if (input === undefined) {
                 this.note("warning", "syn agent needs input: attach a terminal or pipe messages on stdin, one per line");
@@ -455,6 +469,71 @@ class Conversation {
         this.io.stderr.write(formatHarnessError(error));
         return exitCodeFor(error.code);
     }
+    /** A human at a terminal who can pick and sign in to a provider (first run, or a turn that needs sign-in). */
+    canConnect() {
+        return this.io.stdinIsTTY && this.renderer.input !== undefined && this.renderer.auth.interactive;
+    }
+    adoptRule(rule) {
+        this.sessionTier = rule.tier;
+        this.currentModel = rule.route.model_id;
+        // Resolving the route may probe the provider's capabilities: it runs while the user types.
+        this.routePromise = this.runtime.router.resolve({ tier: rule.tier, role: "session" }, this.outer.signal);
+        this.routePromise.catch(() => undefined);
+        this.routeRecorded = false;
+    }
+    /** The welcome before a provider is connected (first run). */
+    unconnectedHeader(hint) {
+        const runtime = this.runtime;
+        const permissionMode = runtime.permissionMode();
+        const commit = buildCommit();
+        return {
+            welcome: { ...(commit === undefined ? {} : { commit }), path: shortenPath(runtime.workspaceRoot, userHome(this.io.env)), ...(hint === undefined ? {} : { hint }) },
+            workspaceRoot: runtime.workspaceRoot,
+            gitBranch: runtime.gitBranch,
+            policyMode: runtime.policyMode,
+            routes: [],
+            sandboxEnforcement: runtime.sandbox.enforcement,
+            notices: [...runtime.config.warnings.map((warning) => warning.message), ...runtime.canonical.diagnostics.map((diagnostic) => `canonical .ai: ${diagnostic}`)],
+            version: SYNORCH_VERSION,
+            model: "not connected",
+            contextWindowTokens: DEFAULT_CONTEXT_WINDOW,
+            ...(permissionMode === undefined ? {} : { permissionMode }),
+        };
+    }
+    connectHost() {
+        return {
+            runtime: this.runtime,
+            renderer: this.renderer,
+            overrides: this.overrides,
+            env: this.io.env,
+            cwd: this.runtime.workspaceRoot,
+            signal: this.outer.signal,
+            ok: this.glyphs.ok,
+            sep: this.glyphs.sep,
+            choose: (question, signal) => this.choose(question, signal),
+            print: (lines) => this.print(lines),
+            warn: (line) => this.note("warning", line),
+        };
+    }
+    /** A turn failed because the route's identity is not signed in: offer the sign-in here, then the message can be sent again. */
+    async offerSignIn(provider, method, typed) {
+        const label = method === "oauth-subscription" ? "ChatGPT" : method === "cli-bridge" ? "Claude Code" : `${provider === "openai" ? "OpenAI" : "Anthropic"} API key`;
+        const answer = await this.choose({ question: `Sign in to ${label} now?`, header: "Sign in", options: [{ label: "Sign in", recommended: true }, { label: "Not now" }], allowOther: false, escapeLabel: "not now", tone: "neutral" }, this.outer.signal).catch(() => undefined);
+        if (answer?.kind !== "selected" || answer.indices[0] !== 0)
+            return;
+        if (!(await signIn(this.connectHost(), provider, method)))
+            return;
+        const rule = sessionRouteRule(this.runtime, this.sessionTier);
+        if (rule !== undefined)
+            this.adoptRule(rule);
+        const controls = this.renderer.controls;
+        if (typed.trim() !== "" && controls?.setEditorText !== undefined) {
+            controls.setEditorText(typed);
+            this.print([`${this.glyphs.ok} Signed in ${this.glyphs.sep} press Enter to send your message again`]);
+        }
+        else
+            this.print([`${this.glyphs.ok} Signed in ${this.glyphs.sep} send your message again`]);
+    }
     header(rule, hint) {
         const permissionMode = this.runtime.permissionMode();
         const runtime = this.runtime;
@@ -539,6 +618,8 @@ class Conversation {
             }
             if (recorded.session_id !== this.sessionId)
                 return;
+            if (recorded.type === "model/response_failed" && AUTH_FAILURES.has(recorded.data.error.code))
+                this.authFailure = true;
             if (recorded.type === "turn/started")
                 this.turnId = recorded.data.turn_id;
             if (recorded.type === "model/request_prepared") {
@@ -1244,6 +1325,7 @@ class Conversation {
         this.active = active;
         this.turnRunning = true;
         let outcome;
+        this.authFailure = false;
         try {
             outcome = await driver.runTurn({
                 sessionId: log.sessionId,
@@ -1261,8 +1343,12 @@ class Conversation {
             }, active.signal);
         }
         catch (error) {
-            if (!active.signal.aborted)
-                this.showFailure(failureInfo(error));
+            if (!active.signal.aborted) {
+                const failure = failureInfo(error);
+                if (failure.code === "auth_required" || failure.code === "auth_expired")
+                    this.authFailure = true;
+                this.showFailure(failure);
+            }
         }
         finally {
             this.turnRunning = false;
@@ -1270,6 +1356,11 @@ class Conversation {
                 this.active = undefined;
             this.submittedAt = undefined;
         }
+        if (this.authFailure && !active.signal.aborted && outcome?.outcome !== "completed" && this.canConnect()) {
+            this.authFailure = false;
+            await this.offerSignIn(route.route.provider_id, route.route.auth_method, followUp ? "" : typed);
+            return false;
+        }
         // A message typed while the last step settled could not be delivered in this turn: it starts the next one.
         const leftover = driver.drainSteers?.() ?? [];
         if (leftover.length > 0)
@@ -3684,6 +3775,8 @@ class Conversation {
             this.print(tracker.view().tasks.map((task) => `${task.key} (${task.role}) ${task.state.replaceAll("_", " ")}${task.dependsOn === undefined || task.dependsOn.length === 0 ? "" : ` after ${task.dependsOn.join(", ")}`}`));
     }
 }
+/** Provider failures a sign-in fixes. */
+const AUTH_FAILURES = new Set(["unauthenticated", "auth_expired"]);
 const PERMISSION_MODE_WORDS = ["ask", "auto", "full", "plan"];
 /** K8: the welcome hint offers /resume for a conversation newer than this. */
 const RESUME_HINT_MS = 12 * 60 * 60 * 1000;