teamshare-bridge 0.26.25 → 0.27.1

package/dist/lib/git/index.d.ts

@@ -7,6 +7,6 @@ export { formatLocalGitState } from './stash-context';
 export { detectIndexBlocker, recoverBlockedIndex, preflightRecoverIndexes, postIndexRecoveryComment, blockedRecordFor, markBlockedIndexRepo, isBlockedIndexRepo, clearBlockedIndexRepo, clearAllBlockedIndexRepos, } from './index-recovery';
 export type { IndexBlocker, IndexBlockerKind, IndexRecoveryApi, IndexRecoveryRecord, } from './index-recovery';
 export { createPullRequest, isGitHubUrl } from './pr-create';
-export { resolvePrToken, backendRunToken, ghAuthToken } from './pr-token';
-export type { ResolvedPrToken, PrTokenSource } from './pr-token';
+export { resolvePrToken, backendRunToken, ghAuthToken, credentialFillToken, looksLikeGitHubToken, prRefusalLine, } from './pr-token';
+export type { ResolvedPrToken, PrTokenSource, PrTokenRefusal, BackendRunTokenOpts, ResolvePrTokenOpts, ResolvePrTokenResult, } from './pr-token';
 export { slugifySegment } from './slug';

package/dist/lib/git/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.slugifySegment = exports.ghAuthToken = exports.backendRunToken = exports.resolvePrToken = exports.isGitHubUrl = exports.createPullRequest = exports.clearAllBlockedIndexRepos = exports.clearBlockedIndexRepo = exports.isBlockedIndexRepo = exports.markBlockedIndexRepo = exports.blockedRecordFor = exports.postIndexRecoveryComment = exports.preflightRecoverIndexes = exports.recoverBlockedIndex = exports.detectIndexBlocker = exports.formatLocalGitState = exports.restoreStash = exports.listStashes = exports.checkOrphanedStashes = exports.formatStashSummary = exports.resolveGitPolicy = exports.commitRemainingChanges = exports.finalizeRunGit = exports.prepareRunGitAsync = exports.prepareRunGit = exports.snapshotGit = exports.ensureRepo = exports.originUrlFor = exports.urlKey = exports.rememberGitToken = exports.tokenForUrl = exports.authArgsForRepo = exports.authArgsForUrl = void 0;
+exports.slugifySegment = exports.prRefusalLine = exports.looksLikeGitHubToken = exports.credentialFillToken = exports.ghAuthToken = exports.backendRunToken = exports.resolvePrToken = exports.isGitHubUrl = exports.createPullRequest = exports.clearAllBlockedIndexRepos = exports.clearBlockedIndexRepo = exports.isBlockedIndexRepo = exports.markBlockedIndexRepo = exports.blockedRecordFor = exports.postIndexRecoveryComment = exports.preflightRecoverIndexes = exports.recoverBlockedIndex = exports.detectIndexBlocker = exports.formatLocalGitState = exports.restoreStash = exports.listStashes = exports.checkOrphanedStashes = exports.formatStashSummary = exports.resolveGitPolicy = exports.commitRemainingChanges = exports.finalizeRunGit = exports.prepareRunGitAsync = exports.prepareRunGit = exports.snapshotGit = exports.ensureRepo = exports.originUrlFor = exports.urlKey = exports.rememberGitToken = exports.tokenForUrl = exports.authArgsForRepo = exports.authArgsForUrl = void 0;
 var git_auth_1 = require("./git-auth");
 Object.defineProperty(exports, "authArgsForUrl", { enumerable: true, get: function () { return git_auth_1.authArgsForUrl; } });
 Object.defineProperty(exports, "authArgsForRepo", { enumerable: true, get: function () { return git_auth_1.authArgsForRepo; } });
@@ -41,6 +41,9 @@ var pr_token_1 = require("./pr-token");
 Object.defineProperty(exports, "resolvePrToken", { enumerable: true, get: function () { return pr_token_1.resolvePrToken; } });
 Object.defineProperty(exports, "backendRunToken", { enumerable: true, get: function () { return pr_token_1.backendRunToken; } });
 Object.defineProperty(exports, "ghAuthToken", { enumerable: true, get: function () { return pr_token_1.ghAuthToken; } });
+Object.defineProperty(exports, "credentialFillToken", { enumerable: true, get: function () { return pr_token_1.credentialFillToken; } });
+Object.defineProperty(exports, "looksLikeGitHubToken", { enumerable: true, get: function () { return pr_token_1.looksLikeGitHubToken; } });
+Object.defineProperty(exports, "prRefusalLine", { enumerable: true, get: function () { return pr_token_1.prRefusalLine; } });
 var slug_1 = require("./slug");
 Object.defineProperty(exports, "slugifySegment", { enumerable: true, get: function () { return slug_1.slugifySegment; } });
 //# sourceMappingURL=index.js.map

package/dist/lib/git/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/git/index.ts"],"names":[],"mappings":";;;AAAA,uCAOoB;AANlB,0GAAA,cAAc,OAAA;AACd,2GAAA,eAAe,OAAA;AACf,uGAAA,WAAW,OAAA;AACX,4GAAA,gBAAgB,OAAA;AAChB,kGAAA,MAAM,OAAA;AACN,wGAAA,YAAY,OAAA;AAEd,uCAAqD;AAA5C,sGAAA,UAAU,OAAA;AAAE,uGAAA,WAAW,OAAA;AAChC,+CAMwB;AALtB,6GAAA,aAAa,OAAA;AACb,kHAAA,kBAAkB,OAAA;AAClB,8GAAA,cAAc,OAAA;AACd,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAElB,2CAKsB;AAJpB,gHAAA,kBAAkB,OAAA;AAClB,kHAAA,oBAAoB,OAAA;AACpB,yGAAA,WAAW,OAAA;AACX,0GAAA,YAAY,OAAA;AAGd,iDAAsD;AAA7C,oHAAA,mBAAmB,OAAA;AAC5B,mDAU0B;AATxB,oHAAA,kBAAkB,OAAA;AAClB,qHAAA,mBAAmB,OAAA;AACnB,yHAAA,uBAAuB,OAAA;AACvB,0HAAA,wBAAwB,OAAA;AACxB,kHAAA,gBAAgB,OAAA;AAChB,sHAAA,oBAAoB,OAAA;AACpB,oHAAA,kBAAkB,OAAA;AAClB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AAQ3B,yCAA6D;AAApD,8GAAA,iBAAiB,OAAA;AAAE,wGAAA,WAAW,OAAA;AACvC,uCAA0E;AAAjE,0GAAA,cAAc,OAAA;AAAE,2GAAA,eAAe,OAAA;AAAE,uGAAA,WAAW,OAAA;AAErD,+BAAwC;AAA/B,sGAAA,cAAc,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/git/index.ts"],"names":[],"mappings":";;;AAAA,uCAOoB;AANlB,0GAAA,cAAc,OAAA;AACd,2GAAA,eAAe,OAAA;AACf,uGAAA,WAAW,OAAA;AACX,4GAAA,gBAAgB,OAAA;AAChB,kGAAA,MAAM,OAAA;AACN,wGAAA,YAAY,OAAA;AAEd,uCAAqD;AAA5C,sGAAA,UAAU,OAAA;AAAE,uGAAA,WAAW,OAAA;AAChC,+CAMwB;AALtB,6GAAA,aAAa,OAAA;AACb,kHAAA,kBAAkB,OAAA;AAClB,8GAAA,cAAc,OAAA;AACd,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAElB,2CAKsB;AAJpB,gHAAA,kBAAkB,OAAA;AAClB,kHAAA,oBAAoB,OAAA;AACpB,yGAAA,WAAW,OAAA;AACX,0GAAA,YAAY,OAAA;AAGd,iDAAsD;AAA7C,oHAAA,mBAAmB,OAAA;AAC5B,mDAU0B;AATxB,oHAAA,kBAAkB,OAAA;AAClB,qHAAA,mBAAmB,OAAA;AACnB,yHAAA,uBAAuB,OAAA;AACvB,0HAAA,wBAAwB,OAAA;AACxB,kHAAA,gBAAgB,OAAA;AAChB,sHAAA,oBAAoB,OAAA;AACpB,oHAAA,kBAAkB,OAAA;AAClB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AAQ3B,yCAA6D;AAApD,8GAAA,iBAAiB,OAAA;AAAE,wGAAA,WAAW,OAAA;AACvC,uCAOoB;AANlB,0GAAA,cAAc,OAAA;AACd,2GAAA,eAAe,OAAA;AACf,uGAAA,WAAW,OAAA;AACX,+GAAA,mBAAmB,OAAA;AACnB,gHAAA,oBAAoB,OAAA;AACpB,yGAAA,aAAa,OAAA;AAUf,+BAAwC;AAA/B,sGAAA,cAAc,OAAA"}

package/dist/lib/git/pr-token.d.ts

@@ -1,29 +1,87 @@
-export type PrTokenSource = 'project' | 'env' | 'gh-cli' | 'github_app';
+export type PrTokenSource = 'project' | 'env' | 'gh-cli' | 'github_app' | 'credential-helper';
 export interface ResolvedPrToken {
     token: string;
     source: PrTokenSource;
+    /**
+     * Set only on a credential-helper rescue: the backend refused first with
+     * this code (e.g. REPO_NOT_INSTALLED) and the helper supplied a token
+     * anyway. Lets the caller log WHY the fallback was used without ever
+     * seeing the token.
+     */
+    note?: string;
 }
-/** Best-effort ambient GitHub CLI token (null when gh is absent/logged-out). */
-export declare function ghAuthToken(): string | null;
-/**
- * Ask the hub for a one-shot token for this run (step 4). Returns null when
- * there is no project, no run identity, no App connection — every one of
- * those is a normal "not connected" state, never an error.
- */
-export declare function backendRunToken(opts: {
+/** A typed backend refusal: the UPPER_SNAKE code names the fix. */
+export interface PrTokenRefusal {
+    error: {
+        code: string;
+        message: string;
+    };
+}
+export interface BackendRunTokenOpts {
     remoteUrl: string;
     projectId?: string | null;
     apiKey?: string | null;
     apiBaseUrl?: string | null;
-}): Promise<ResolvedPrToken | null>;
+    /** Passed in the POST body when present (lets the hub audit per task). */
+    taskId?: string | null;
+}
+/** Best-effort ambient GitHub CLI token (null when gh is absent/logged-out). */
+export declare function ghAuthToken(): string | null;
+/**
+ * GitHub-shaped token check for the credential-helper rescue.
+ *
+ * Some helpers answer `git credential fill` with a username or some other
+ * non-token secret; pushing with that burns the attempt on a 401 and the
+ * report then blames the wrong thing. So on a github.com host ONLY a
+ * GitHub token shape is accepted (classic `ghp_*` family + fine-grained
+ * `github_pat_*` + the legacy 40-hex PAT). Non-GitHub forges (Gitea accepts
+ * any non-empty password) take whatever the helper stored.
+ */
+export declare function looksLikeGitHubToken(value: string): boolean;
+/**
+ * Best-effort machine credential (step 5). Runs `git credential fill` for the
+ * remote's host and returns the filled password when it is usable. Returns
+ * null on every failure — absent git, timeout, non-zero exit, empty password,
+ * or a non-token-shaped secret on a github.com host. Never throws, never
+ * logs the secret (callers log only the source name).
+ *
+ * NOTE on where the password can come from: `fill` consults the configured
+ * helpers AND, when they miss, the prompt fallback (`GIT_ASKPASS` /
+ * `core.askPass`) — on a VS Code-integrated shell that fallback silently
+ * returns the editor's stored GitHub session. That is ordinary `fill`
+ * semantics and a session token is a fine credential (same trust boundary as
+ * manager-core), so it is accepted, not scrubbed. `GIT_TERMINAL_PROMPT=0`
+ * keeps a truly-interactive prompt from hanging the run past the timeout.
+ */
+export declare function credentialFillToken(remoteUrl: string): ResolvedPrToken | null;
+/**
+ * Ask the hub for a one-shot token for this run (step 4).
+ *
+ * Returns null ONLY when there is no run identity (no project, no key) — a
+ * normal "not connected" state, never an error. Every answered request
+ * resolves to either a token or a TYPED refusal carrying the backend's
+ * UPPER_SNAKE code and message (truncated to 300 chars); a request that never
+ * got an answer (network/timeout) is `RUN_TOKEN_UNREACHABLE`. Callers must
+ * NOT treat a typed refusal as "try nothing else" — see `resolvePrToken`.
+ */
+export declare function backendRunToken(opts: BackendRunTokenOpts): Promise<ResolvedPrToken | PrTokenRefusal | null>;
+export type ResolvePrTokenOpts = BackendRunTokenOpts;
+export type ResolvePrTokenResult = ResolvedPrToken | PrTokenRefusal | null;
 /**
  * Full precedence chain. Pure except for the env/process reads and the
  * optional backend call — `gh` and the network are only touched when every
  * earlier step missed, so the common PAT/env path stays side-effect free.
+ *
+ * The backend leg NEVER short-circuits to a refusal: a typed error is
+ * remembered, the credential helper is still tried (it may hold a fine PAT
+ * while the App installation is merely missing the repo), and a helper hit
+ * carries the backend code in `note` so the caller can log why the fallback
+ * was used. Only when the helper also misses is the typed error surfaced.
  */
-export declare function resolvePrToken(opts: {
-    remoteUrl: string;
-    projectId?: string | null;
-    apiKey?: string | null;
-    apiBaseUrl?: string | null;
-}): Promise<ResolvedPrToken | null>;
+export declare function resolvePrToken(opts: ResolvePrTokenOpts): Promise<ResolvePrTokenResult>;
+/**
+ * User-facing PR refusal for a typed run-token error. Every branch ends with
+ * "The branch IS pushed" — the push already succeeded, so the refusal is
+ * never a data-loss scare, only a next step.
+ */
+export declare function prRefusalLine(code: string, message: string): string;

package/dist/lib/git/pr-token.js

@@ -1,8 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ghAuthToken = ghAuthToken;
+exports.looksLikeGitHubToken = looksLikeGitHubToken;
+exports.credentialFillToken = credentialFillToken;
 exports.backendRunToken = backendRunToken;
 exports.resolvePrToken = resolvePrToken;
+exports.prRefusalLine = prRefusalLine;
 /**
  * PR/push token resolution for the task-run git pipeline (2026-10).
  *
@@ -18,11 +21,22 @@ exports.resolvePrToken = resolvePrToken;
  *   2. `GITHUB_TOKEN` / `GITEA_TOKEN` env — ambient machine credential;
  *   3. `gh auth token` — ambient GitHub CLI credential (best-effort);
  *   4. the backend run-token endpoint — the run caller's own App connection,
- *      verified against the exact repo before it is handed out.
+ *      verified against the exact repo before it is handed out;
+ *   5. `git credential fill` — the OS / manager-core credential helper
+ *      (best-effort rescue when the backend refuses but the machine holds
+ *      a usable credential of its own).
+ *
+ * A backend REPO_NOT_INSTALLED must NOT block the credential-helper rescue:
+ * the helper may hold a fine PAT while the App installation is merely
+ * missing the repo. So a typed backend refusal is REMEMBERED, the helper is
+ * still tried, and only when the helper also misses is the typed error
+ * surfaced (with a message that names the fix). Env/gh-cli/file hits still
+ * win immediately as today.
  *
  * An installation token is MEMORY-ONLY: it expires in ~1h, is repo-scoped,
  * and must never be written to `git-tokens.json` (that file is for durable
- * PATs). Callers use the returned token transiently and drop it.
+ * PATs). Callers use the returned token transiently and drop it. The helper
+ * password is likewise memory-only — only the source name is ever logged.
  */
 const node_child_process_1 = require("node:child_process");
 const shims_1 = require("../workspace/shims");
@@ -54,38 +68,137 @@ function ghAuthToken() {
     }
 }
 /**
- * Ask the hub for a one-shot token for this run (step 4). Returns null when
- * there is no project, no run identity, no App connection — every one of
- * those is a normal "not connected" state, never an error.
+ * GitHub-shaped token check for the credential-helper rescue.
+ *
+ * Some helpers answer `git credential fill` with a username or some other
+ * non-token secret; pushing with that burns the attempt on a 401 and the
+ * report then blames the wrong thing. So on a github.com host ONLY a
+ * GitHub token shape is accepted (classic `ghp_*` family + fine-grained
+ * `github_pat_*` + the legacy 40-hex PAT). Non-GitHub forges (Gitea accepts
+ * any non-empty password) take whatever the helper stored.
+ */
+function looksLikeGitHubToken(value) {
+    const s = value.trim();
+    if (/^(ghp_|gho_|ghu_|ghs_|github_pat_)/.test(s))
+        return true;
+    if (/^[0-9a-f]{40}$/i.test(s))
+        return true;
+    return false;
+}
+/**
+ * Best-effort machine credential (step 5). Runs `git credential fill` for the
+ * remote's host and returns the filled password when it is usable. Returns
+ * null on every failure — absent git, timeout, non-zero exit, empty password,
+ * or a non-token-shaped secret on a github.com host. Never throws, never
+ * logs the secret (callers log only the source name).
+ *
+ * NOTE on where the password can come from: `fill` consults the configured
+ * helpers AND, when they miss, the prompt fallback (`GIT_ASKPASS` /
+ * `core.askPass`) — on a VS Code-integrated shell that fallback silently
+ * returns the editor's stored GitHub session. That is ordinary `fill`
+ * semantics and a session token is a fine credential (same trust boundary as
+ * manager-core), so it is accepted, not scrubbed. `GIT_TERMINAL_PROMPT=0`
+ * keeps a truly-interactive prompt from hanging the run past the timeout.
+ */
+function credentialFillToken(remoteUrl) {
+    let host = '';
+    try {
+        host = new URL(remoteUrl).host.toLowerCase();
+    }
+    catch {
+        return null;
+    }
+    if (!host)
+        return null;
+    const github = host === 'github.com' || host.endsWith('.github.com');
+    let res;
+    try {
+        res = (0, node_child_process_1.spawnSync)('git', ['credential', 'fill'], {
+            input: `protocol=https\nhost=${host}\n\n`,
+            encoding: 'utf-8',
+            timeout: 10_000,
+            windowsHide: true,
+            env: { ...(0, shims_1.envWithoutShims)(), GIT_TERMINAL_PROMPT: '0' },
+        });
+    }
+    catch {
+        return null;
+    }
+    if (res.error || res.status !== 0)
+        return null;
+    const password = String(res.stdout ?? '')
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .find((line) => line.startsWith('password='))
+        ?.slice('password='.length)
+        .trim() ?? '';
+    if (!password)
+        return null;
+    if (github && !looksLikeGitHubToken(password))
+        return null;
+    return { token: password, source: 'credential-helper' };
+}
+/**
+ * Ask the hub for a one-shot token for this run (step 4).
+ *
+ * Returns null ONLY when there is no run identity (no project, no key) — a
+ * normal "not connected" state, never an error. Every answered request
+ * resolves to either a token or a TYPED refusal carrying the backend's
+ * UPPER_SNAKE code and message (truncated to 300 chars); a request that never
+ * got an answer (network/timeout) is `RUN_TOKEN_UNREACHABLE`. Callers must
+ * NOT treat a typed refusal as "try nothing else" — see `resolvePrToken`.
  */
 async function backendRunToken(opts) {
-    const { remoteUrl, projectId, apiKey, apiBaseUrl } = opts;
+    const { remoteUrl, projectId, apiKey, apiBaseUrl, taskId } = opts;
     if (!remoteUrl || !projectId || !apiKey)
         return null;
+    const body = { projectId, repoUrl: remoteUrl };
+    if (taskId)
+        body.taskId = taskId;
+    let res;
     try {
-        const res = await fetch(`${(apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\/+$/, '')}/git-connections/run-token`, {
+        res = await fetch(`${(apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\/+$/, '')}/git-connections/run-token`, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
                 'X-Api-Key': apiKey,
             },
-            body: JSON.stringify({ projectId, repoUrl: remoteUrl }),
+            body: JSON.stringify(body),
             signal: AbortSignal.timeout(15_000),
         });
-        const raw = (await res.json().catch(() => null));
-        const token = raw?.data?.token;
-        if (!res.ok || raw?.success !== true || !token)
-            return null;
-        return { token, source: 'github_app' };
     }
-    catch {
-        return null;
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        return {
+            error: {
+                code: 'RUN_TOKEN_UNREACHABLE',
+                message: `run-token request failed (${reason})`.slice(0, 300),
+            },
+        };
     }
+    const raw = (await res.json().catch(() => null));
+    const token = raw?.data?.token;
+    if (res.ok && raw?.success === true && token) {
+        return { token, source: 'github_app' };
+    }
+    const code = typeof raw?.error?.code === 'string' && raw.error.code
+        ? raw.error.code
+        : 'GITHUB_APP_MINT_FAILED';
+    const message = (typeof raw?.error?.message === 'string' && raw.error.message
+        ? raw.error.message
+        : `run-token request failed (HTTP ${res.status})`).slice(0, 300);
+    return { error: { code, message } };
 }
 /**
  * Full precedence chain. Pure except for the env/process reads and the
  * optional backend call — `gh` and the network are only touched when every
  * earlier step missed, so the common PAT/env path stays side-effect free.
+ *
+ * The backend leg NEVER short-circuits to a refusal: a typed error is
+ * remembered, the credential helper is still tried (it may hold a fine PAT
+ * while the App installation is merely missing the repo), and a helper hit
+ * carries the backend code in `note` so the caller can log why the fallback
+ * was used. Only when the helper also misses is the typed error surfaced.
  */
 async function resolvePrToken(opts) {
     const local = (0, git_auth_1.tokenForUrl)(opts.remoteUrl);
@@ -97,6 +210,37 @@ async function resolvePrToken(opts) {
     const cli = ghAuthToken();
     if (cli)
         return { token: cli, source: 'gh-cli' };
-    return backendRunToken(opts);
+    const backend = await backendRunToken(opts);
+    if (backend && 'token' in backend)
+        return backend;
+    const remembered = backend && 'error' in backend ? backend.error : null;
+    const helper = credentialFillToken(opts.remoteUrl);
+    if (helper) {
+        return remembered
+            ? { ...helper, note: `backend ${remembered.code}` }
+            : helper;
+    }
+    if (remembered)
+        return { error: remembered };
+    return null;
+}
+/**
+ * User-facing PR refusal for a typed run-token error. Every branch ends with
+ * "The branch IS pushed" — the push already succeeded, so the refusal is
+ * never a data-loss scare, only a next step.
+ */
+function prRefusalLine(code, message) {
+    switch (code) {
+        case 'REPO_NOT_INSTALLED':
+            return 'PR: not opened — the GitHub installation does not include owner/repo. Add it under Settings → Connected accounts → Manage repositories (company: ask an admin to share or install), then re-run. The branch IS pushed.';
+        case 'GITHUB_APP_NOT_CONNECTED':
+            return 'PR: not opened — no GitHub installation is linked for this project (tried company + personal fallbacks). Link GitHub in Settings → Connected accounts, share it with the company, or add a project PAT; then re-run. The branch IS pushed.';
+        case 'GITHUB_APP_NOT_CONFIGURED':
+        case 'GITHUB_APP_MINT_FAILED':
+        case 'RUN_TOKEN_UNREACHABLE':
+            return `PR: not opened — ${message} (server-side; not something linking can fix). The branch IS pushed.`;
+        default:
+            return `PR: not opened — ${code}: ${message}. The branch IS pushed.`;
+    }
 }
 //# sourceMappingURL=pr-token.js.map

package/dist/lib/git/pr-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"pr-token.js","sourceRoot":"","sources":["../../../src/lib/git/pr-token.ts"],"names":[],"mappings":";;AA4CA,kCAcC;AAOD,0CA+BC;AAOD,wCAaC;AApHD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,2DAAkD;AAClD,8CAAqD;AACrD,yCAAyC;AAEzC;;;;;;;GAOG;AACH,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,+BAA+B,CAAC;AASnE,gFAAgF;AAChF,SAAgB,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,iCAAY,EAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAChD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,IAAA,uBAAe,GAAE;YACtB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,IAKrC;IACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,EACvF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YACvD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAGvC,CAAC;QACT,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAAC,IAKpC;IACC,MAAM,KAAK,GAAG,IAAA,sBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAChE,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"pr-token.js","sourceRoot":"","sources":["../../../src/lib/git/pr-token.ts"],"names":[],"mappings":";;AA6EA,kCAcC;AAYD,oDAKC;AAiBD,kDAgCC;AAYD,0CAiDC;AAiBD,wCAoBC;AAOD,sCAaC;AAnRD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,2DAA6D;AAC7D,8CAAqD;AACrD,yCAAyC;AAEzC;;;;;;;GAOG;AACH,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,+BAA+B,CAAC;AA+BnE,gFAAgF;AAChF,SAAgB,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,iCAAY,EAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAChD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,IAAA,uBAAe,GAAE;YACtB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAAC,KAAa;IAChD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,mBAAmB,CAAC,SAAiB;IACnD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,GAAiC,CAAC;IACtC,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,8BAAS,EAAC,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;YAC7C,KAAK,EAAE,wBAAwB,IAAI,MAAM;YACzC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,EAAE,GAAG,IAAA,uBAAe,GAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,QAAQ,GACZ,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC7C,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;SAC1B,IAAI,EAAE,IAAI,EAAE,CAAC;IAClB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,eAAe,CACnC,IAAyB;IAEzB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClE,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAA2B,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACvE,IAAI,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CACf,GAAG,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,EACvF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,6BAA6B,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC9D;SACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAIvC,CAAC;IACT,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;IAC/B,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GACR,OAAO,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI;QACpD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI;QAChB,CAAC,CAAC,wBAAwB,CAAC;IAC/B,MAAM,OAAO,GAAG,CACd,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO;QAC1D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;QACnB,CAAC,CAAC,kCAAkC,GAAG,CAAC,MAAM,GAAG,CACpD,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACtC,CAAC;AAMD;;;;;;;;;;GAUG;AACI,KAAK,UAAU,cAAc,CAClC,IAAwB;IAExB,MAAM,KAAK,GAAG,IAAA,sBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAChE,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,UAAU,CAAC,IAAI,EAAE,EAAE;YACnD,CAAC,CAAC,MAAM,CAAC;IACb,CAAC;IACD,IAAI,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,wNAAwN,CAAC;QAClO,KAAK,0BAA0B;YAC7B,OAAO,4OAA4O,CAAC;QACtP,KAAK,2BAA2B,CAAC;QACjC,KAAK,wBAAwB,CAAC;QAC9B,KAAK,uBAAuB;YAC1B,OAAO,oBAAoB,OAAO,sEAAsE,CAAC;QAC3G;YACE,OAAO,oBAAoB,IAAI,KAAK,OAAO,yBAAyB,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/lib/orchestrator/handlers/browser.js

@@ -100,6 +100,24 @@ async function emitWithVision(emit, session, cmdId, payload, opts) {
             /* keep the pre-settle screen */
         }
     }
+    if (session?.connected && typeof session.detectChallenge === 'function') {
+        if (!payload.challenge) {
+            try {
+                const challenge = await session.detectChallenge();
+                if (challenge) {
+                    payload.challenge = {
+                        ...challenge,
+                        attempted: false,
+                        passed: false,
+                        nextStep: challenge.kind === 'block' ? 'report_blocked' : 'ask_human',
+                    };
+                }
+            }
+            catch {
+                /* a challenge probe never fails the action */
+            }
+        }
+    }
     if (session?.connected && session.qaVision === true) {
         try {
             const shot = await session.screenshot('jpeg', 62);
@@ -269,6 +287,8 @@ async function handleBrowserCommand(data, emit) {
                     ? data.actor.trim().slice(0, 80)
                     : null;
                 const isolated = data.isolated === true;
+                // OPT-IN fingerprint reduction (2026-10): see BrowserSessionOptions.
+                const stealth = data.stealth === true;
                 // A tagged window never changes hands.
                 const tagged = manager.get(sessionId);
                 if (tagged?.actor && callActor) {
@@ -293,12 +313,19 @@ async function handleBrowserCommand(data, emit) {
                     existing.setAllowCredentials(allowCredentials);
                     existing.setQaVision(qaVision);
                     existing.setActor(callActor);
+                    if (stealth)
+                        await existing.enableStealth();
                     // reset:true drops a crashed run's leftovers (open modal, corrupted
                     // field values, stale validation errors) before the new run starts.
                     // A resumed run omits it and keeps its page.
                     let pageState;
                     if (data.url) {
-                        pageState = await existing.navigate(String(data.url));
+                        pageState = await existing.navigate(String(data.url), {
+                            autoChallenge: data.autoChallenge !== false,
+                            challengeTimeoutMs: typeof data.challengeTimeoutMs === 'number'
+                                ? data.challengeTimeoutMs
+                                : undefined,
+                        });
                     }
                     else if (data.reset === true) {
                         pageState = await existing.navigate('about:blank');
@@ -314,6 +341,7 @@ async function handleBrowserCommand(data, emit) {
                         port: existing.port,
                         ...(existing.actor ? { actor: existing.actor } : {}),
                         qaVision: existing.qaVision,
+                        stealth: existing.stealth,
                         ...pageState,
                         ...(screen ? { screen } : {}),
                     });
@@ -357,6 +385,7 @@ async function handleBrowserCommand(data, emit) {
                     profileDir: profile.dir,
                     allowCredentials,
                     qaVision,
+                    stealth,
                     ...(callActor ? { actor: callActor } : {}),
                 });
                 // A reused session keeps its flag from a previous connect; honour the
@@ -369,7 +398,12 @@ async function handleBrowserCommand(data, emit) {
                 log.info(`Browser session "${sessionId}" on port ${actualPort} ` +
                     `(${profile.shared ? 'shared debug profile' : `isolated profile ${profile.dir}`})`);
                 const pageState = data.url
-                    ? await session.navigate(String(data.url))
+                    ? await session.navigate(String(data.url), {
+                        autoChallenge: data.autoChallenge !== false,
+                        challengeTimeoutMs: typeof data.challengeTimeoutMs === 'number'
+                            ? data.challengeTimeoutMs
+                            : undefined,
+                    })
                     : info;
                 const screen = await screenOf(session);
                 emit('orchestrator:browser-result', data.cmdId, {
@@ -379,6 +413,7 @@ async function handleBrowserCommand(data, emit) {
                     profile: profile.shared ? 'shared' : 'isolated',
                     ...(callActor ? { actor: callActor } : {}),
                     qaVision: session.qaVision,
+                    stealth: session.stealth,
                     ...pageState,
                     ...(screen ? { screen } : {}),
                 });
@@ -430,7 +465,12 @@ async function handleBrowserCommand(data, emit) {
                     .then((info) => info.url ?? null)
                     .catch(() => null);
                 const navSince = Date.now();
-                const info = await session.navigate(url);
+                const info = await session.navigate(url, {
+                    autoChallenge: data.autoChallenge !== false,
+                    challengeTimeoutMs: typeof data.challengeTimeoutMs === 'number'
+                        ? data.challengeTimeoutMs
+                        : undefined,
+                });
                 const screen = await screenOf(session);
                 await emitWithVision(emit, session, data.cmdId, {
                     success: true,
@@ -1093,9 +1133,22 @@ async function handleBrowserCommand(data, emit) {
                         : {}),
                     ...(data.refs === true ? { refs: true } : {}),
                 });
+                const challenge = data.includeChallenge === false
+                    ? null
+                    : await session.detectChallenge().catch(() => null);
                 const payload = {
                     success: true,
                     ...state,
+                    ...(challenge
+                        ? {
+                            challenge: {
+                                ...challenge,
+                                attempted: false,
+                                passed: false,
+                                nextStep: challenge.kind === 'block' ? 'report_blocked' : 'ask_human',
+                            },
+                        }
+                        : {}),
                 };
                 const wantsShot = data.screenshot === true ||
                     (session.qaVision && data.screenshot !== false);
@@ -1174,6 +1227,42 @@ async function handleBrowserCommand(data, emit) {
                 });
                 break;
             }
+            // 2026-10: bounded Cloudflare/CAPTCHA resolution. `attempt` defaults to
+            // none here - navigate already makes the one allowed click; this action
+            // is for a resume after a human answer, so it only polls.
+            case 'waitForChallenge': {
+                const session = manager.get(sessionId);
+                if (!session?.connected) {
+                    emit('orchestrator:browser-result', data.cmdId, {
+                        success: false,
+                        error: `No active browser session "${sessionId}". ` +
+                            `Call browser_open({ sessionId: "${sessionId}" }) first.`,
+                    });
+                    return;
+                }
+                const result = await session.waitForChallenge({
+                    attempt: data.attempt === true,
+                    timeoutMs: typeof data.timeoutMs === 'number'
+                        ? data.timeoutMs
+                        : typeof data.challengeTimeoutMs === 'number'
+                            ? data.challengeTimeoutMs
+                            : undefined,
+                });
+                const screen = await screenOf(session);
+                await emitWithVision(emit, session, data.cmdId, {
+                    success: true,
+                    ...result,
+                    ...(screen ? { screen } : {}),
+                    ...(result.passed
+                        ? {}
+                        : {
+                            nextStep: result.challenge?.kind === 'block'
+                                ? 'report_blocked'
+                                : 'ask_human',
+                        }),
+                }, { settle: false });
+                break;
+            }
             // 2026-10: recent toast / alert / dialog events. A toast that disappeared
             // before the next tool call is still in the page's ring buffer.
             case 'events': {