tines 0.0.262 → 0.0.266

package/dist/index.js

@@ -3368,6 +3368,9 @@ function useColor() {
 // ../../node_modules/.pnpm/commander@15.0.0/node_modules/commander/index.js
 var program = new Command();
 
+// src/commands/context.ts
+import { readFileSync as readFileSync4 } from "node:fs";
+
 // src/body-value.ts
 import { readFileSync } from "node:fs";
 var processStdin = {
@@ -3432,6 +3435,7 @@ var LABEL_NAME_MAX = 50;
 var PROMPT_MAX_BYTES = 32 * 1024;
 var SKILL_MAX_FILES = 20;
 var SKILL_MAX_TOTAL_BYTES = 100 * 1024;
+var ENV_VALUE_MAX_BYTES = 16 * 1024;
 var AGENT_GUIDELINES_NAME = "agent-guidelines";
 var JOURNAL_NAME = "journal";
 var AGENT_GUIDELINES_BODY = `You are an agent working on a Tines issue over its HTTP API / CLI. Beyond doing the work, leave the workspace smarter than you found it. Four places to write, chosen by who should inherit what you learned:
@@ -4005,6 +4009,7 @@ function createApiClient(options) {
   const artifactPath = (issueId, name2, suffix = "") => `/api/v1/issues/${issueId}/artifacts/${encodeURIComponent(name2)}${suffix}`;
   return {
     getTime: () => get("/api/time"),
+    getVersion: () => get("/api/version"),
     // Projects
     listProjects: (params = {}) => get(`/api/v1/projects${query(params)}`),
     createProject: (body) => request("POST", "/api/v1/projects", body),
@@ -5635,6 +5640,8 @@ function contextItemSummary(item) {
       return `${item.repo_url}${item.repo_branch ? `#${item.repo_branch}` : ""}`;
     case "artifact":
       return item.artifact_type ?? "artifact";
+    case "env":
+      return item.secret ? `secret \xB7 set${item.hint ? ` \xB7 ${item.hint}` : ""}` : `= ${item.value ?? ""}`;
   }
 }
 function recurrenceLabel(schedule2) {
@@ -6233,6 +6240,12 @@ async function resolveScopeFlags(api, opts) {
   if (opts.label !== void 0) scope.label_id = await resolveLabelFlag(api, opts.label);
   return scope;
 }
+function readEnvValue(raw) {
+  if (raw === "-") return readFileSync4(0, "utf8").replace(/\r?\n$/, "");
+  if (raw.startsWith("@@")) return raw.slice(1);
+  if (raw.startsWith("@")) return readFileSync4(raw.slice(1), "utf8").replace(/\r?\n$/, "");
+  return raw;
+}
 function printContextItem(item) {
   console.log(`${item.kind} "${item.name}"  [${item.id}]  v${item.version}`);
   if (item.description) console.log(item.description);
@@ -6255,6 +6268,15 @@ files (seeded at skills/${item.name}/):`);
       console.log(`  ${f.path}  (${Buffer.byteLength(f.content, "utf8")} bytes)`);
     }
     if ((item.files ?? []).length === 0) console.log("  (none)");
+  } else if (item.kind === "env") {
+    if (item.secret) {
+      console.log(`
+value: (secret, set)${item.hint ? `  hint: ${item.hint}` : ""}`);
+    } else {
+      console.log(`
+value: ${item.value ?? ""}`);
+      if (item.hint) console.log(`hint: ${item.hint}`);
+    }
   } else {
     console.log(`
 url: ${item.repo_url}`);
@@ -6276,13 +6298,13 @@ function withScopeFlags(cmd) {
 }
 function register(program3) {
   const context2 = program3.command("context").description(
-    "Manage context items (prompts, skills, repo pointers) scoped to projects, states, and issues"
+    "Manage context items (prompts, skills, repo pointers, environment variables) scoped to projects, states, and issues"
   );
   withList(
     withScopeFlags(
       context2.command("list").description(
         "List context items (scope filters match every item whose scope includes the element)"
-      ).option("-k, --kind <kind>", "filter by kind: prompt, skill, or repo").option("--exact", "only items whose scope sets exactly the given dimensions").option("-q, --search <text>", "search names and descriptions")
+      ).option("-k, --kind <kind>", "filter by kind: prompt, skill, repo, artifact, or env").option("--exact", "only items whose scope sets exactly the given dimensions").option("-q, --search <text>", "search names and descriptions")
     )
   ).action(
     async (opts) => {
@@ -6326,21 +6348,27 @@ function register(program3) {
   });
   withCommon(
     withScopeFlags(
-      context2.command("create").description("Create a context item scoped to a project, state, and/or issue").requiredOption("-k, --kind <kind>", "prompt, skill, or repo").requiredOption(
+      context2.command("create").description("Create a context item scoped to a project, state, and/or issue").requiredOption("-k, --kind <kind>", "prompt, skill, repo, or env").requiredOption(
         "-n, --name <name>",
-        "item name (slug-like for skills; the dedup/override key)"
+        "item name (slug-like for skills, the variable name for env; the dedup/override key)"
       ).option("-d, --description <text>", "one-liner shown in lists").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option(
         "--file <path>=@<local>",
         "skill file: workspace path = local file (repeatable)",
         collect,
         []
-      ).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch to check out").option("--dir <dir>", "repo: checkout directory (defaults to the URL's basename)")
+      ).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch to check out").option("--dir <dir>", "repo: checkout directory (defaults to the URL's basename)").option(
+        "--value <v>",
+        "env: the value \u2014 inline, @file, or - for stdin (keeps a secret out of shell history)"
+      ).option("--secret", "env: encrypt the value at rest; it is write-only afterwards").option("--hint <text>", 'env: a safe display hint for a secret (e.g. "github_pat_\u2026abcd")')
     )
   ).action(
     async (opts) => {
       if (opts.kind === "repo" && opts.repoUrl === void 0) {
         die("--kind repo needs --repo-url <clone-url> (--url is the API base URL)");
       }
+      if (opts.kind === "env" && opts.value === void 0) {
+        die("--kind env needs --value <value|@file|->");
+      }
       const api = client(opts);
       const scope = await resolveScopeFlags(api, opts);
       const body = {
@@ -6355,6 +6383,9 @@ function register(program3) {
       if (opts.repoUrl !== void 0) body.repo_url = opts.repoUrl;
       if (opts.branch !== void 0) body.repo_branch = opts.branch;
       if (opts.dir !== void 0) body.repo_dir = opts.dir;
+      if (opts.value !== void 0) body.value = readEnvValue(opts.value);
+      if (opts.secret) body.secret = true;
+      if (opts.hint !== void 0) body.hint = opts.hint;
       const item = await api.createContextItem(body);
       if (opts.json) return printJson(item);
       console.log(`created ${item.kind} "${item.name}" (${item.id}) \u2014 scope: ${item.scope.label}`);
@@ -6362,7 +6393,7 @@ function register(program3) {
   );
   withCommon(
     withScopeFlags(
-      context2.command("edit <id>").description("Edit a context item: payload, name, description, or scope").option("-n, --name <name>", "rename the item").option("-d, --description <text>", "set the description").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option("--file <path>=@<local>", "add or replace a skill file (repeatable)", collect, []).option("--remove-file <path>", "remove a skill file (repeatable)", collect, []).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch (empty string clears it)").option("--dir <dir>", "repo: checkout directory (empty string restores the URL default)").option(
+      context2.command("edit <id>").description("Edit a context item: payload, name, description, or scope").option("-n, --name <name>", "rename the item").option("-d, --description <text>", "set the description").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option("--file <path>=@<local>", "add or replace a skill file (repeatable)", collect, []).option("--remove-file <path>", "remove a skill file (repeatable)", collect, []).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch (empty string clears it)").option("--dir <dir>", "repo: checkout directory (empty string restores the URL default)").option("--value <v>", "env: replace the value (inline, @file, or - for stdin)").option("--secret", "env: encrypt the stored value (irreversible; delete to make public)").option("--hint <text>", "env: display hint for a secret (empty string clears it)").option(
         "--unset <dimension>",
         "drop a scope dimension: project, state, issue, or label (repeatable)",
         collect,
@@ -6412,6 +6443,9 @@ function register(program3) {
       if (opts.repoUrl !== void 0) body.repo_url = opts.repoUrl;
       if (opts.branch !== void 0) body.repo_branch = opts.branch === "" ? null : opts.branch;
       if (opts.dir !== void 0) body.repo_dir = opts.dir === "" ? null : opts.dir;
+      if (opts.value !== void 0) body.value = readEnvValue(opts.value);
+      if (opts.secret) body.secret = true;
+      if (opts.hint !== void 0) body.hint = opts.hint === "" ? null : opts.hint;
       if (Object.keys(body).length === 0) {
         die(
           "nothing to update: pass payload flags, --name/--description, scope flags, and/or --unset"
@@ -6458,7 +6492,7 @@ function register(program3) {
 }
 
 // src/commands/issues.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync4, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync5, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { basename, dirname as dirname2, join as join2 } from "node:path";
 import { createInterface } from "node:readline/promises";
 
@@ -7170,7 +7204,7 @@ function readTextSource(source) {
   if (source.kind === "text-stdin") return readBodyValue("-");
   if (source.kind === "text-path") {
     try {
-      return readFileSync4(source.path, "utf8");
+      return readFileSync5(source.path, "utf8");
     } catch (err) {
       die(`cannot read ${source.path}: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -7188,7 +7222,7 @@ function walkFolder(dir) {
         files2.push({
           path: nextRel,
           contentType: sniffContentType(entry.name),
-          bytes: readFileSync4(nextAbs)
+          bytes: readFileSync5(nextAbs)
         });
       }
     }
@@ -7643,6 +7677,9 @@ function register2(program3) {
         console.log(`
 skills: ${context2.skills.map((s) => s.name).join(", ")}`);
       }
+      for (const e of context2.env ?? []) {
+        console.log(`env: ${e.name}${e.secret ? " (secret)" : ""}`);
+      }
       for (const repo of context2.repos) {
         console.log(
           `repo: ${repo.name} ${repo.url}${repo.branch ? `#${repo.branch}` : ""} \u2192 ${repo.dir}/`
@@ -7826,10 +7863,10 @@ files (v${artifact.current_version.version}):`);
         let bytes2;
         if (fromPath === null) {
           if (process.stdin.isTTY) die('"-" reads the file from stdin, but stdin is a terminal');
-          bytes2 = readFileSync4(0);
+          bytes2 = readFileSync5(0);
         } else {
           try {
-            bytes2 = readFileSync4(fromPath);
+            bytes2 = readFileSync5(fromPath);
           } catch (err) {
             die(`cannot read ${fromPath}: ${err instanceof Error ? err.message : String(err)}`);
           }
@@ -8284,13 +8321,13 @@ function register4(program3) {
 }
 
 // src/commands/login.ts
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync6 } from "node:fs";
 function maskKey(key) {
   return `${key.slice(0, 14)}\u2026`;
 }
 function readKeyArg(value) {
   if (value !== "-") return value;
-  const key = readFileSync5(0, "utf8").trim();
+  const key = readFileSync6(0, "utf8").trim();
   if (!key) die("no API key on stdin");
   return key;
 }
@@ -8730,7 +8767,7 @@ import {
   createWriteStream,
   existsSync as existsSync5,
   mkdirSync as mkdirSync4,
-  readFileSync as readFileSync9,
+  readFileSync as readFileSync10,
   realpathSync,
   rmSync as rmSync3,
   statSync as statSync4,
@@ -8742,11 +8779,11 @@ import { dirname as dirname4, join as join6 } from "node:path";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 
 // src/version.ts
-import { readFileSync as readFileSync6 } from "node:fs";
+import { readFileSync as readFileSync7 } from "node:fs";
 function cliVersion() {
   try {
     const manifest = new URL("../package.json", import.meta.url);
-    return JSON.parse(readFileSync6(manifest, "utf8")).version ?? "0.0.0-unknown";
+    return JSON.parse(readFileSync7(manifest, "utf8")).version ?? "0.0.0-unknown";
   } catch {
     return "0.0.0-unknown";
   }
@@ -9760,7 +9797,7 @@ var EffortCapabilityRefresher = class {
 
 // src/daemon/cli-refresh.ts
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync7 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync8 } from "node:fs";
 import { dirname as dirname3, join as join4 } from "node:path";
 
 // src/daemon/support.ts
@@ -9945,10 +9982,12 @@ var LogBatcher = class {
   constructor(send, opts = {}) {
     this.send = send;
     this.opts = opts;
+    this.redactor = new SecretRedactor(opts.redact ?? []);
   }
   send;
   opts;
   buffer = "";
+  redactor;
   timer = null;
   sending = Promise.resolve();
   seq = 0;
@@ -9956,6 +9995,7 @@ var LogBatcher = class {
   pending = [];
   append(text4) {
     if (!text4) return;
+    text4 = this.redactor.write(text4);
     this.buffer += text4;
     if (Buffer.byteLength(this.buffer, "utf8") >= (this.opts.maxBytes ?? 32 * 1024)) {
       void this.flush();
@@ -9964,6 +10004,11 @@ var LogBatcher = class {
       this.timer.unref?.();
     }
   }
+  /** Release an incomplete final match only after the producer has ended. */
+  finish() {
+    this.buffer += this.redactor.end();
+    return this.flush();
+  }
   /** Sends whatever is buffered now; resolves when every send so far settled. */
   flush() {
     if (this.timer) {
@@ -10076,15 +10121,68 @@ function pathWithin(path2, dir) {
 function buildSpawnEnv(base, opts) {
   const env = {
     ...base,
+    ...Object.fromEntries((opts.extra ?? []).map((e) => [e.name, e.value])),
     TINES_API_KEY: opts.apiKey,
     // Own canonicalization at the final child-process boundary too. This
     // keeps the spawned CLI safe even if a future daemon call site passes
     // the original --url value instead of its normalized local variable.
     TINES_API_URL: opts.apiUrl.replace(/\/+$/, "")
   };
+  if (opts.extra?.some((e) => e.name === "PATH")) env.PATH = base.PATH;
   if (opts.binDir) env.PATH = base.PATH ? `${opts.binDir}${delimiter}${base.PATH}` : opts.binDir;
   return env;
 }
+function secretForms(secrets) {
+  return [
+    ...new Set(
+      secrets.filter(Boolean).flatMap((secret) => [secret, JSON.stringify(secret).slice(1, -1)])
+    )
+  ].sort((a, b) => b.length - a.length);
+}
+function secretPattern(forms) {
+  return forms.length ? new RegExp(forms.map((form) => form.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|"), "g") : null;
+}
+function redactSecrets(text4, secrets) {
+  const pattern = secretPattern(secretForms(secrets));
+  return pattern ? text4.replace(pattern, "***") : text4;
+}
+var SecretRedactor = class {
+  pending = "";
+  forms;
+  pattern;
+  constructor(secrets) {
+    this.forms = secretForms(secrets);
+    this.pattern = secretPattern(this.forms);
+  }
+  write(chunk) {
+    if (!this.pattern) return chunk;
+    const text4 = this.pending + chunk;
+    let cut = text4.length;
+    for (const form of this.forms) {
+      for (let size = Math.min(form.length - 1, text4.length); size > text4.length - cut; size--) {
+        if (text4.endsWith(form.slice(0, size))) {
+          cut = text4.length - size;
+          break;
+        }
+      }
+    }
+    this.pattern.lastIndex = 0;
+    for (let match; match = this.pattern.exec(text4); ) {
+      if (match.index >= cut) break;
+      if (this.pattern.lastIndex > cut) {
+        cut = match.index;
+        break;
+      }
+    }
+    this.pending = text4.slice(cut);
+    return text4.slice(0, cut).replace(this.pattern, "***");
+  }
+  end() {
+    const text4 = this.pending;
+    this.pending = "";
+    return this.pattern ? text4.replace(this.pattern, "***") : text4;
+  }
+};
 
 // src/daemon/cli-refresh.ts
 var PACKAGE = "tines";
@@ -10097,7 +10195,7 @@ function binDirOf(prefix) {
 }
 function installedVersion(prefix) {
   try {
-    const pkg = readFileSync7(join4(prefix, "node_modules", PACKAGE, "package.json"), "utf8");
+    const pkg = readFileSync8(join4(prefix, "node_modules", PACKAGE, "package.json"), "utf8");
     const version = JSON.parse(pkg).version;
     return typeof version === "string" ? version : null;
   } catch {
@@ -10177,7 +10275,7 @@ function message(err) {
 import { arch, hostname, platform } from "node:os";
 
 // src/daemon/store.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync as rmSync2, statSync as statSync3 } from "node:fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync9, rmSync as rmSync2, statSync as statSync3 } from "node:fs";
 import { join as join5 } from "node:path";
 function credentialsKey(url, name2) {
   return `${url.replace(/\/+$/, "")}#${name2}`;
@@ -10237,10 +10335,10 @@ function saveDaemonDeclines(path2, runIds) {
 }
 function processStartTimeMs(pid) {
   try {
-    const stat2 = readFileSync8(`/proc/${pid}/stat`, "utf8");
+    const stat2 = readFileSync9(`/proc/${pid}/stat`, "utf8");
     const afterComm = stat2.slice(stat2.lastIndexOf(")") + 2).split(" ");
     const startTicks = Number(afterComm[19]);
-    const btimeLine = readFileSync8("/proc/stat", "utf8").split("\n").find((line) => line.startsWith("btime "));
+    const btimeLine = readFileSync9("/proc/stat", "utf8").split("\n").find((line) => line.startsWith("btime "));
     const btime = Number(btimeLine?.slice("btime ".length));
     if (!Number.isFinite(startTicks) || !Number.isFinite(btime)) return null;
     return btime * 1e3 + startTicks / 100 * 1e3;
@@ -10367,7 +10465,7 @@ async function uploadRawLog(run3) {
     await new Promise((resolve2) => run3.rawSpool?.end(resolve2) ?? resolve2());
     const size = statSync4(path2).size;
     if (size > 0) {
-      let body = readFileSync9(path2);
+      let body = readFileSync10(path2);
       if (body.byteLength > RUN_LOG_RAW_MAX_BYTES) {
         const marker = Buffer.from(
           `{"type":"tines_truncated","dropped_bytes":${body.byteLength - RUN_LOG_RAW_MAX_BYTES}}
@@ -10534,7 +10632,7 @@ async function runDaemon(opts) {
         };
         run3.batcher.append(`[usage] ${JSON.stringify(accounting)}
 `);
-        await run3.batcher.flush();
+        await run3.batcher.finish();
         const ended = await client2.finishRun(run3.runId, {
           status,
           ...run3.effortEvidence ? { effort_application: run3.effortEvidence } : {},
@@ -10635,6 +10733,7 @@ async function runDaemon(opts) {
   const effortRefresher = new EffortCapabilityRefresher(opts.harness, DAEMON_VERSION);
   let effortCapabilities = await effortRefresher.get();
   const launch = async (assignment) => {
+    const secretEnvValues = (assignment.env ?? []).filter((e) => e.secret).map((e) => e.value);
     const runId = assignment.run.id;
     if (table2.has(runId)) return;
     const resume = assignment.resume && existsSync5(assignment.resume.workspace_path) ? assignment.resume : null;
@@ -10658,10 +10757,13 @@ async function runDaemon(opts) {
       batcher: new LogBatcher(
         (chunk, seq) => client2.appendRunLog(runId, { chunk, seq }).then(() => {
         }),
-        { onError: (err) => log(`log append for run ${runId} failed: ${message2(err)}`) }
+        {
+          onError: (err) => log(`log append for run ${runId} failed: ${message2(err)}`),
+          ...secretEnvValues.length > 0 ? { redact: secretEnvValues } : {}
+        }
       )
     };
-    run3.flush = () => run3.batcher.flush();
+    run3.flush = () => run3.batcher.finish();
     table2.track(run3);
     if (assignment.effort) effortCapabilities = await effortRefresher.get(true);
     const effortRejection = assignmentEffortRejection(assignment, effortCapabilities, opts.harness);
@@ -10759,8 +10861,15 @@ async function runDaemon(opts) {
       const spawnEnv = buildSpawnEnv(process.env, {
         binDir: cli.binDir,
         apiKey: assignment.run_key,
-        apiUrl: baseUrl
+        apiUrl: baseUrl,
+        ...assignment.env ? { extra: assignment.env } : {}
       });
+      if (assignment.env?.length) {
+        run3.batcher.append(
+          `[env] ${assignment.env.length} environment variable(s) set: ${assignment.env.map((e) => `${e.name}${e.secret ? " (secret)" : ""}`).join(", ")}
+`
+        );
+      }
       if (opts.harness === "codex") run3.codexHome = resolveCodexHome(spawnEnv, workspace);
       const child = spawn3(invocation.file, invocation.args, {
         cwd: workspace,
@@ -10799,14 +10908,20 @@ async function runDaemon(opts) {
         run3.rawSpool = createWriteStream(spoolPath);
         run3.rawUpload = (body) => client2.putRunLogRaw(runId, body);
         const decoder = new StringDecoder2("utf8");
+        const rawRedactor = new SecretRedactor(secretEnvValues);
         run3.drain = () => {
           const trailing = decoder.end();
-          if (trailing) renderer.write(trailing);
+          if (trailing) {
+            run3.rawSpool?.write(rawRedactor.write(trailing));
+            renderer.write(trailing);
+          }
+          run3.rawSpool?.write(rawRedactor.end());
           renderer.finish();
         };
         child.stdout?.on("data", (data) => {
-          run3.rawSpool?.write(data);
-          renderer.write(decoder.write(data));
+          const text4 = decoder.write(data);
+          run3.rawSpool?.write(rawRedactor.write(text4));
+          renderer.write(text4);
         });
       } else if (opts.harness === "codex") {
         const renderer = new CodexStreamRenderer((line) => run3.batcher.append(line));
@@ -10819,11 +10934,26 @@ async function runDaemon(opts) {
         };
         child.stdout?.on("data", (data) => renderer.write(decoder.write(data)));
       } else {
-        child.stdout?.on("data", (data) => run3.batcher.append(data.toString("utf8")));
+        const decoder = new StringDecoder2("utf8");
+        const redactor = new SecretRedactor(secretEnvValues);
+        child.stdout?.on(
+          "data",
+          (data) => run3.batcher.append(redactor.write(decoder.write(data)))
+        );
+        run3.drain = () => {
+          run3.batcher.append(redactor.write(decoder.end()) + redactor.end());
+        };
       }
+      const stderrDecoder = new StringDecoder2("utf8");
+      const stderrRedactor = new SecretRedactor(secretEnvValues);
+      const drainStdout = run3.drain;
+      run3.drain = () => {
+        drainStdout?.();
+        run3.batcher.append(stderrRedactor.write(stderrDecoder.end()) + stderrRedactor.end());
+      };
       child.stderr?.on("data", (data) => {
-        const text4 = data.toString("utf8");
-        run3.batcher.append(text4);
+        const text4 = stderrDecoder.write(data);
+        run3.batcher.append(stderrRedactor.write(text4));
         run3.limiter?.noteStderr(text4);
       });
       run3.timeout = setTimeout(() => {
@@ -10834,7 +10964,7 @@ async function runDaemon(opts) {
         if (child.pid) setTimeout(() => killTree(child.pid, "SIGKILL"), 5e3).unref?.();
       }, assignment.timeout_minutes * 6e4);
       child.on("error", (err) => {
-        const reason = `failed to launch harness: ${message2(err)}`;
+        const reason = redactSecrets(`failed to launch harness: ${message2(err)}`, secretEnvValues);
         if (assignment.effort)
           run3.effortEvidence = {
             status: "rejected",
@@ -10869,18 +10999,16 @@ async function runDaemon(opts) {
           const limited = signal ? null : run3.limiter?.signal() ?? null;
           const providerError = signal ? null : run3.limiter?.providerError() ?? null;
           if (limited) {
-            log(
-              `run ${runId}: harness rate limited (${limited.detail}); reporting without a strike`
-            );
-            void table2.finishAndCleanup(run3, "failed", `rate limited: ${limited.detail}`, {
+            const detail = redactSecrets(limited.detail, secretEnvValues);
+            log(`run ${runId}: harness rate limited (${detail}); reporting without a strike`);
+            void table2.finishAndCleanup(run3, "failed", `rate limited: ${detail}`, {
               judgment: "rate_limited",
               ...limited.resumeAt !== null ? { resume_at: limited.resumeAt } : {}
             });
           } else if (providerError) {
-            log(
-              `run ${runId}: transient provider error (${providerError.detail}); reporting without a strike`
-            );
-            void table2.finishAndCleanup(run3, "failed", `provider error: ${providerError.detail}`, {
+            const detail = redactSecrets(providerError.detail, secretEnvValues);
+            log(`run ${runId}: transient provider error (${detail}); reporting without a strike`);
+            void table2.finishAndCleanup(run3, "failed", `provider error: ${detail}`, {
               judgment: "interrupted"
             });
           } else {
@@ -10893,7 +11021,11 @@ async function runDaemon(opts) {
         }
       });
     } catch (err) {
-      void table2.finishAndCleanup(run3, "failed", `workspace setup failed: ${message2(err)}`);
+      void table2.finishAndCleanup(
+        run3,
+        "failed",
+        redactSecrets(`workspace setup failed: ${message2(err)}`, secretEnvValues)
+      );
     }
   };
   const shutdown = async () => {
@@ -10933,6 +11065,8 @@ async function runDaemon(opts) {
         },
         ...declinedAssignments.size > 0 ? { declined_assignments: [...declinedAssignments].slice(0, 100) } : {},
         ...effortCapabilities ? { effort_capabilities: effortCapabilities } : {},
+        // Capability: this daemon merges assignment.env into the harness environment.
+        env_delivery: 1,
         // Stated on every poll while pending; absent otherwise, which
         // the server reads as "not draining" — so a daemon that died
         // mid-drain cannot pin its runner shut past its relaunch.
@@ -11111,7 +11245,7 @@ function harnessFlag(harness) {
 
 // src/commands/runner-service.ts
 import { execFile as execFile2 } from "node:child_process";
-import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync10, rmSync as rmSync4, statSync as statSync6, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync11, rmSync as rmSync4, statSync as statSync6, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir3, hostname as hostname3, userInfo } from "node:os";
 import { dirname as dirname6 } from "node:path";
 import { promisify } from "node:util";
@@ -11358,7 +11492,7 @@ async function waitForStart(logPath, offset, name2) {
   const deadline = Date.now() + STARTUP_TIMEOUT_MS;
   while (Date.now() < deadline) {
     if (existsSync7(logPath)) {
-      const content = readFileSync10(logPath, "utf8").slice(offset);
+      const content = readFileSync11(logPath, "utf8").slice(offset);
       if (pattern.test(content)) return true;
     }
     await new Promise((resolve2) => setTimeout(resolve2, 500));
@@ -12611,18 +12745,18 @@ function register10(program3) {
 }
 
 // src/commands/workflows.ts
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync13 } from "node:fs";
 import { createInterface as createInterface5 } from "node:readline/promises";
 
 // src/workflow-packages.ts
 import { createInterface as createInterface4 } from "node:readline/promises";
 import { createHash as createHash2 } from "node:crypto";
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 var PACKAGE_STDIN = "-";
 var MAX_LOCAL_JSON_BYTES = 32 * 1024 * 1024;
 function readPackageSource(path2) {
   try {
-    const bytes2 = readFileSync11(path2 === PACKAGE_STDIN ? 0 : path2);
+    const bytes2 = readFileSync12(path2 === PACKAGE_STDIN ? 0 : path2);
     if (bytes2.byteLength > MAX_LOCAL_JSON_BYTES)
       throw new Error(`input exceeds ${MAX_LOCAL_JSON_BYTES} bytes`);
     return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes2);
@@ -13261,14 +13395,14 @@ function readJsonBody(inline, file) {
   if (file !== void 0 && file !== "-") {
     let raw;
     try {
-      raw = readFileSync12(file, "utf8");
+      raw = readFileSync13(file, "utf8");
     } catch (err) {
       die(`cannot read ${file}: ${err instanceof Error ? err.message : String(err)}`);
     }
     return parseJsonObject(raw, file);
   }
   if (file === "-" || !process.stdin.isTTY) {
-    const raw = readFileSync12(0, "utf8");
+    const raw = readFileSync13(0, "utf8");
     if (raw.trim() === "") {
       if (file === "-") die("no JSON on stdin");
       return void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tines",
-  "version": "0.0.262",
+  "version": "0.0.266",
   "description": "CLI for Tines, an orchestration layer for AI agents",
   "repository": {
     "type": "git",