Lines 520-561javascript
520 # Reviewing the implemented change before the PR (CODE_REVIEW phase).
522 # Drafting a new issue from the Quick-task panel.
524 # One-shot repository indexing at registration.
527# Concurrency is not a per-project setting: it is the operator-set per-account
528# sandbox quota (how many runners the account may occupy), enforced by the HUB
529# and sized on the farm. A solo 'codepipe up' runs one worker. (ADR-0030)
532# # How IMPLEMENTING is ordered across tasks. Default: parallel.
533# # parallel \u2014 tasks branch independently off the base; conflicts are
534# # resolved reactively via \`@codepipe rebase\`. No head-of-line
535# # blocking between tasks.
536# # sequential \u2014 one task at a time in creation order; each branch stacks on
537# # the previous task's branch (auto-merge without reworking the
538# # tail of the chain).
540`}var Ut=R(()=>{"use strict";Y();eo()});import{createCipheriv as Ag,createDecipheriv as _g,createHash as Ng,createPrivateKey as Og,createPublicKey as Ii,diffieHellman as Fc,generateKeyPairSync as Hc,hkdfSync as Kc,randomBytes as
541`)){let n=r.match(/CA Issuers - URI:\s*(https?:\/\/\S+)/i);if(n?.[1])return n[1].trim()}return null}function Gg(t,e,r){return new Promise((n,o)=>{let i=bt.connect({host:t,port:e,servername:t,rejectUnauthorized:!1},()=>{let s=i.getPeerCertificate(!0),a=new Set;for(;s?.issuerCertificate&&s.issuerCertificate!==s&&s.fingerprint256&&!a.has(s.fingerprint256);)a.add(s.fingerprint256),s=s.issuerCertificate;let c=s?.raw?new Jc(s.raw):null;i.end(),n(c)});i.on("error",o),i.setTimeout(r,()=>{i.destroy(),o(new Error("tls connect timeout"))})})}function Ci(t,e,r){return new Promise(n=>{let o=bt.connect({hos ...
542`,{mode:384})}function Nh(t){return ql()[t]}function po(t,e){let r=ql();r[t]=e,_h(r)}function fo(t
543`)?e:e+`
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L540 544`;return ly(t,r,{mode:384}),`ssh -i "${t}" -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new`}var Ki=R(()=>{"use strict"});import{existsSync as _u,mkdirSync as Nu}from"node:fs";import{dirname as Ou}from"node:path";import{simpleGit as ar}from"simple-git";function dy(t,e,r="x-access-token"){let n=`${encodeURIComponent(r)}:${encodeURIComponent(e)}`,o=t.match(/^git@([^:]+):(.+)$/);if(o)return`https://${n}@${o[1]}/${o[2]}`;let i=t.match(/^ssh:\/\/git@([^/]+)\/(.+)$/);if(i)return`https://${n}@${i[1]}/${i[2]}`;let s=t.match(/^https:\/\/(?:[^@/]+@)?(.+)$/);return s?`https://${n}@${s[1]}`:t}fun ...
545`,{mode:384})}var xo=R(()=>{"use strict";Ne();Dn();Yi(".env")&&process.loadEnvFile(".env")});import vy from"ws";var lr,Vi=R(()=>{"use strict";lr=class{hubUrl;token;constructor(e,r){this.hubUrl=e,this.token=r}async register(e){let r=await fetch(`${this.hubUrl}/sandbox/register`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(!r.ok)throw new Error(`register failed: ${r.status} ${await r.text()}`);return await r.json()}async claim(e,r){if(!this.token)throw new Error("no sandbox token");let n={method:"POST",headers:{Authorization:`Bearer ${this.token}`}};e&&( ...
546`}async function Vu(t,e){if(!e.interactive)throw new Error("runInteractiveClaude called without an interactive channel");if(e.signal?.aborted)throw new st;let r=["--input-format"
547`))!==-1;){let F=C.slice(0,_).trim();C=C.slice(_+1),F&&G(F)}}),p.stderr.on("data",T=>{i.push(T);for(let _ of T.split(`
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L540 548`)){let F=_.trim();F&&console.warn(`[claude:chat:stderr] ${F}`)}}),p.on("error",T=>{b(),l(T)}),p.on("close",T=>{if(b(),f){l(new st);return}if(u){l(new Error("chat session ended: idle for too long without a reply"));return}C.trim()&&G(C.trim()),console.log(`[claude:chat] exit code=${T}`),c({artifactPaths:[],log:i.join(""),usage:Cy(s)})})})}function Cy(t){let e=Pt();if(!t)return e;let r=typeof t.usage=="object"?t.usage:null;return r&&(e.inputTokens=Mt(r.input_tokens),e.outputTokens=Mt(r.output_tokens),e.cacheReadInputTokens=Mt(r.cache_read_input_tokens),e.cacheCreationInputTokens=Mt(r.cache_crea ...
550`),500)),n.join(" \u2014 ")}function _y(t){if(!t)return;let e=t.retry_after;if(typeof e=="number"&&e>0
551`))!==-1;){let F=G.slice(0,_).trim();if(G=G.slice(_+1),F){let P=zu(F);p(P),P&&m(P)}}}),y.stderr.on("data",T=>{n.push(T),o.push(T);for(let _ of T.split(`
552`)){let F=_.trim();F&&console.warn(`[claude:stderr] ${F}`)}}),y.on("error",T=>{C(),h(T)}),y.on("close",T=>{if(C(),b){h(new st);return}if(G.trim()){let F=zu(G.trim());p(F),F&&m(F)}let _=i?.is_error===!0;if(T!==0||_){let F=typeof i?.api_error_status=="number"?i.api_error_status:void 0,P=typeof i?.subtype=="string"?i.subtype:void 0,g=typeof i?.result=="string"?i.result:void 0;h(new pr(Ay(T,i,o.join("")),{code:T,apiErrorStatus:F,subtype:P,resultText:g,retryAfterMs:_y(i)}));return}console.log("[claude] exit code=0"),d({artifactPaths:[],log:n.join(""),usage:Dy(i,s,a,c),...l?{rateLimit:l}:{}})})})}st ...
5601. Description is sparse \u2014 mock can't analyse depth.
5612. Scope may include cross-cutting refactor not visible from the title.
Long lines were clipped for display.