fix(ci): regenerate pnpm lockfile and repair the CI failures it uncovered

.changeset/README.md

@@ -1,8 +1,8 @@
-# Changesets
-
-Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
-with multi-package repos, or single-package repos to help you version and publish your code. You can
-find the full documentation for it [in our repository](https://github.com/changesets/changesets)
-
-We have a quick list of common questions to get you started engaging with this project in
-[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/activity-events-webhooks-mux.md

@@ -1,18 +1,18 @@
----
-"@aoagents/ao-core": minor
-"@aoagents/ao-web": minor
----
-
-Wire activity events into webhook ingress and the mux WebSocket terminal server (sub-issue of #1511, follows #1620).
-
-- `api.webhook_unverified` (warn) — signature verification failed; data includes `slug`, `remoteAddr`, `candidateCount` (never the failed signature)
-- `api.webhook_rejected` (warn) — payload exceeded `maxBodyBytes`; data includes counts and `maxBodyBytes` (never the body)
-- `api.webhook_received` (info|warn) — accepted webhook; data includes `projectIds`, `matchedSessions`, `parseErrorCount`, `lifecycleErrorCount` (never the body)
-- `api.webhook_failed` (error) — outer pipeline crash with `errorMessage`
-- `ui.terminal_connected` / `ui.terminal_disconnected` — one event per mux WS connection lifecycle
-- `ui.terminal_heartbeat_lost` (warn) — fires once on 3 missed pongs (was console-only)
-- `ui.terminal_pty_lost` (warn) — fires when PTY exits with subscribers attached (distinguishes "PTY died" from "user closed browser")
-- `ui.terminal_protocol_error` (warn) — invalid mux client message
-- `ui.session_broadcast_failed` (warn) — emitted on the healthy→failing transition only (re-arms after a successful poll), so a long outage produces one event, not 20/min
-
-`api.webhook_unverified` is the security-audit event; treat 401s on webhooks as a signal worth retaining for the full 7-day window.
+---
+"@aoagents/ao-core": minor
+"@aoagents/ao-web": minor
+---
+
+Wire activity events into webhook ingress and the mux WebSocket terminal server (sub-issue of #1511, follows #1620).
+
+- `api.webhook_unverified` (warn) — signature verification failed; data includes `slug`, `remoteAddr`, `candidateCount` (never the failed signature)
+- `api.webhook_rejected` (warn) — payload exceeded `maxBodyBytes`; data includes counts and `maxBodyBytes` (never the body)
+- `api.webhook_received` (info|warn) — accepted webhook; data includes `projectIds`, `matchedSessions`, `parseErrorCount`, `lifecycleErrorCount` (never the body)
+- `api.webhook_failed` (error) — outer pipeline crash with `errorMessage`
+- `ui.terminal_connected` / `ui.terminal_disconnected` — one event per mux WS connection lifecycle
+- `ui.terminal_heartbeat_lost` (warn) — fires once on 3 missed pongs (was console-only)
+- `ui.terminal_pty_lost` (warn) — fires when PTY exits with subscribers attached (distinguishes "PTY died" from "user closed browser")
+- `ui.terminal_protocol_error` (warn) — invalid mux client message
+- `ui.session_broadcast_failed` (warn) — emitted on the healthy→failing transition only (re-arms after a successful poll), so a long outage produces one event, not 20/min
+
+`api.webhook_unverified` is the security-audit event; treat 401s on webhooks as a signal worth retaining for the full 7-day window.

.changeset/cli-activity-events.md

@@ -1,6 +1,6 @@
----
-"@aoagents/ao-core": minor
-"@aoagents/ao-cli": minor
----
-
-Wire CLI activity events into `ao start`, `ao stop`, `ao spawn`, `ao update`, `ao setup`, `ao migrate-storage`, and shared CLI helpers. `ao events list --source cli` now answers RCA questions like "did AO start cleanly?", "was AO killed or did it crash?", and "did `ao spawn`/`ao stop` fail and why?". Adds `"cli"` to the `ActivityEventSource` union and 30+ event-emit sites covering startup, graceful and forced shutdown, restore, project resolution, config recovery, and migration paths.
+---
+"@aoagents/ao-core": minor
+"@aoagents/ao-cli": minor
+---
+
+Wire CLI activity events into `ao start`, `ao stop`, `ao spawn`, `ao update`, `ao setup`, `ao migrate-storage`, and shared CLI helpers. `ao events list --source cli` now answers RCA questions like "did AO start cleanly?", "was AO killed or did it crash?", and "did `ao spawn`/`ao stop` fail and why?". Adds `"cli"` to the `ActivityEventSource` union and 30+ event-emit sites covering startup, graceful and forced shutdown, restore, project resolution, config recovery, and migration paths.

.changeset/config.json

@@ -1,45 +1,45 @@
-{
-  "$schema": "https://unpkg.com/@changesets/config@3.1.2/schema.json",
-  "changelog": "@changesets/cli/changelog",
-  "commit": false,
-  "fixed": [],
-  "linked": [
-    [
-      "@aoagents/ao-core",
-      "@aoagents/ao-cli",
-      "@aoagents/ao",
-      "@aoagents/ao-plugin-runtime-tmux",
-      "@aoagents/ao-plugin-runtime-process",
-      "@aoagents/ao-plugin-agent-claude-code",
-      "@aoagents/ao-plugin-agent-codex",
-      "@aoagents/ao-plugin-agent-aider",
-      "@aoagents/ao-plugin-agent-opencode",
-      "@aoagents/ao-plugin-agent-cursor",
-      "@aoagents/ao-plugin-agent-kimicode",
-      "@aoagents/ao-plugin-workspace-worktree",
-      "@aoagents/ao-plugin-workspace-clone",
-      "@aoagents/ao-plugin-tracker-github",
-      "@aoagents/ao-plugin-tracker-linear",
-      "@aoagents/ao-plugin-tracker-gitlab",
-      "@aoagents/ao-plugin-scm-github",
-      "@aoagents/ao-plugin-scm-gitlab",
-      "@aoagents/ao-plugin-notifier-desktop",
-      "@aoagents/ao-plugin-notifier-slack",
-      "@aoagents/ao-plugin-notifier-webhook",
-      "@aoagents/ao-plugin-notifier-composio",
-      "@aoagents/ao-plugin-notifier-discord",
-      "@aoagents/ao-plugin-notifier-openclaw",
-      "@aoagents/ao-plugin-terminal-iterm2",
-      "@aoagents/ao-plugin-terminal-web",
-      "@aoagents/ao-web"
-    ]
-  ],
-  "snapshot": {
-    "useCalculatedVersionForSnapshots": true,
-    "prereleaseTemplate": "{tag}-{commit}"
-  },
-  "access": "public",
-  "baseBranch": "main",
-  "updateInternalDependencies": "patch",
-  "ignore": ["@aoagents/ao-integration-tests"]
-}
+{
+	"$schema": "https://unpkg.com/@changesets/config@3.1.2/schema.json",
+	"changelog": "@changesets/cli/changelog",
+	"commit": false,
+	"fixed": [],
+	"linked": [
+		[
+			"@aoagents/ao-core",
+			"@aoagents/ao-cli",
+			"@aoagents/ao",
+			"@aoagents/ao-plugin-runtime-tmux",
+			"@aoagents/ao-plugin-runtime-process",
+			"@aoagents/ao-plugin-agent-claude-code",
+			"@aoagents/ao-plugin-agent-codex",
+			"@aoagents/ao-plugin-agent-aider",
+			"@aoagents/ao-plugin-agent-opencode",
+			"@aoagents/ao-plugin-agent-cursor",
+			"@aoagents/ao-plugin-agent-kimicode",
+			"@aoagents/ao-plugin-workspace-worktree",
+			"@aoagents/ao-plugin-workspace-clone",
+			"@aoagents/ao-plugin-tracker-github",
+			"@aoagents/ao-plugin-tracker-linear",
+			"@aoagents/ao-plugin-tracker-gitlab",
+			"@aoagents/ao-plugin-scm-github",
+			"@aoagents/ao-plugin-scm-gitlab",
+			"@aoagents/ao-plugin-notifier-desktop",
+			"@aoagents/ao-plugin-notifier-slack",
+			"@aoagents/ao-plugin-notifier-webhook",
+			"@aoagents/ao-plugin-notifier-composio",
+			"@aoagents/ao-plugin-notifier-discord",
+			"@aoagents/ao-plugin-notifier-openclaw",
+			"@aoagents/ao-plugin-terminal-iterm2",
+			"@aoagents/ao-plugin-terminal-web",
+			"@aoagents/ao-web"
+		]
+	],
+	"snapshot": {
+		"useCalculatedVersionForSnapshots": true,
+		"prereleaseTemplate": "{tag}-{commit}"
+	},
+	"access": "public",
+	"baseBranch": "main",
+	"updateInternalDependencies": "patch",
+	"ignore": ["@aoagents/ao-integration-tests"]
+}

.changeset/issue-1660-recovery-metadata-events.md

@@ -1,6 +1,6 @@
----
-"@aoagents/ao-cli": patch
-"@aoagents/ao-core": minor
----
-
-Wire activity events for the recovery subsystem, metadata-corruption detection, and agent-report apply path. New event kinds: `recovery.session_failed`, `recovery.action_failed`, `metadata.corrupt_detected`, `api.agent_report.session_not_found`, `api.agent_report.transition_rejected`. Adds `"recovery"` to the `ActivityEventSource` union. Lets RCA reconstruct `ao recover` invocations, find every silent metadata overwrite, and audit rejected agent transitions. Adds `ao events list --source` and `--kind` so these forensic event queries are available from the CLI.
+---
+"@aoagents/ao-cli": patch
+"@aoagents/ao-core": minor
+---
+
+Wire activity events for the recovery subsystem, metadata-corruption detection, and agent-report apply path. New event kinds: `recovery.session_failed`, `recovery.action_failed`, `metadata.corrupt_detected`, `api.agent_report.session_not_found`, `api.agent_report.transition_rejected`. Adds `"recovery"` to the `ActivityEventSource` union. Lets RCA reconstruct `ao recover` invocations, find every silent metadata overwrite, and audit rejected agent transitions. Adds `ao events list --source` and `--kind` so these forensic event queries are available from the CLI.

.changeset/launch-orchestrator-clean.md

@@ -1,8 +1,8 @@
----
-"@aoagents/ao-core": minor
-"@aoagents/ao-web": minor
----
-
-feat: "Launch Orchestrator (clean context)" action on the orchestrator session page
-
-Adds a `Relaunch (clean)` action on the orchestrator session page that replaces the project's canonical orchestrator with a fresh one — killing the existing orchestrator, deleting its metadata, and spawning a new session with no carryover state. Backed by a new `SessionManager.relaunchOrchestrator(config)` method that ignores `orchestratorSessionStrategy`. Removes the now-redundant Orchestrator Selector page (`/orchestrators?project=X`) — there is only ever one orchestrator per project, so a selector page is no longer meaningful. Closes #1900 and #1080.
+---
+"@aoagents/ao-core": minor
+"@aoagents/ao-web": minor
+---
+
+feat: "Launch Orchestrator (clean context)" action on the orchestrator session page
+
+Adds a `Relaunch (clean)` action on the orchestrator session page that replaces the project's canonical orchestrator with a fresh one — killing the existing orchestrator, deleting its metadata, and spawning a new session with no carryover state. Backed by a new `SessionManager.relaunchOrchestrator(config)` method that ignores `orchestratorSessionStrategy`. Removes the now-redundant Orchestrator Selector page (`/orchestrators?project=X`) — there is only ever one orchestrator per project, so a selector page is no longer meaningful. Closes #1900 and #1080.

.changeset/linear-transient-retry.md

@@ -1,5 +1,5 @@
----
-"@aoagents/ao-plugin-tracker-linear": patch
----
-
-Retry transient Linear API HTTP failures in the direct transport to reduce flakes from brief 5xx/429 responses.
+---
+"@aoagents/ao-plugin-tracker-linear": patch
+---
+
+Retry transient Linear API HTTP failures in the direct transport to reduce flakes from brief 5xx/429 responses.

.changeset/quiet-sqlite-rebuild.md

@@ -1,7 +1,7 @@
----
-"@aoagents/ao": patch
-"@aoagents/ao-core": patch
-"@aoagents/ao-cli": patch
----
-
-Rebuild missing better-sqlite3 native bindings during ao postinstall and replace noisy activity-events native-binding failures with a one-line diagnostic.
+---
+"@aoagents/ao": patch
+"@aoagents/ao-core": patch
+"@aoagents/ao-cli": patch
+---
+
+Rebuild missing better-sqlite3 native bindings during ao postinstall and replace noisy activity-events native-binding failures with a one-line diagnostic.

.gitattributes

@@ -0,0 +1,18 @@
+# Line-ending policy.
+#
+# This repo is developed on Windows as well as Linux/macOS, and CRLF endings
+# have broken CI twice: a CRLF shebang makes a shell script unrunnable on the
+# Unix runners, and Vite/esbuild fails to parse a JS module whose hashbang line
+# ends in \r. Pin the formats where CRLF is actively harmful.
+
+# Shell scripts are executed directly by the Unix runners.
+*.sh text eol=lf
+
+# Parsed by esbuild/Vite, which chokes on a CRLF hashbang.
+*.js text eol=lf
+*.mjs text eol=lf
+*.cjs text eol=lf
+
+# Generated — LF keeps regeneration a no-op instead of a whole-file diff.
+pnpm-lock.yaml text eol=lf
+package-lock.json text eol=lf

.github/.gitleaks.toml

@@ -64,7 +64,11 @@ title = "gitleaks config"
 
 [[rules]]
     description = "Slack"
-    regex = '''xox[baprs]-([0-9a-zA-Z]{10,48})?'''
+    # The token body is required, not optional. With the trailing `?` this
+    # matched a bare `xoxb-` anywhere in the tree — including prose and code
+    # comments that merely name the prefix — while catching no real token the
+    # stricter form misses.
+    regex = '''xox[baprs]-[0-9a-zA-Z]{10,48}'''
     tags = ["key", "Slack"]
 
 [[rules]]
@@ -172,6 +176,39 @@ title = "gitleaks config"
     files = ['''^\.?gitleaks.toml$''',
     '''(.*?)(png|jpg|gif|doc|docx|pdf|bin|xls|pyc|zip)$''',
     '''(go.mod|go.sum)$''']
+
+    # The secret-redaction code, its tests, and the audit note documenting it.
+    # These exist precisely to carry example token patterns: activity-events.ts
+    # names the prefixes it strips, and the test asserts the stripping works
+    # using AWS's own published example key (AKIAIOSFODNN7EXAMPLE).
+    #
+    # `paths`, not `files` — the latter is matched against the bare filename,
+    # so full-path patterns silently never match. Scoped by path rather than
+    # added to the commit list below, because that list only holds until
+    # something touches these files again, which is what the prettier
+    # auto-format job did.
+    paths = [
+        '''packages/core/src/activity-events\.ts$''',
+        '''packages/core/src/__tests__/activity-events\.test\.ts$''',
+        '''docs/SECURITY-AUDIT-SUMMARY\.md$''',
+    ]
+
+    # The two literal fixture values, so the redaction tests stay covered even
+    # if they move file. Both are documented non-secrets: AWS publishes the
+    # first as its canonical example key, and the second is a made-up Slack
+    # token the test feeds in to prove it gets redacted back out.
+    regexes = [
+        '''AKIAIOSFODNN7EXAMPLE''',
+        '''xoxb-1234567890-abcdefghij''',
+        # Documentation placeholders, e.g. SECURITY.md's
+        # "GITHUB_TOKEN=ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" in the section
+        # telling people to keep tokens in env vars. `x` is alphanumeric, so the
+        # token-shaped rules match the filler. A real credential does not carry
+        # a 20-character run of literal x, so this cannot mask one — and it has
+        # to be matched by pattern, because the finding lands on the PR's merge
+        # commit, whose SHA is different on every run.
+        '''x{20,}''',
+    ]
     # Historical false positives from the ReverbCode rewrite graft (#2166).
     # All offenders are example secret-patterns in security docs and
     # secret-redaction test fixtures, living in files already deleted from
@@ -188,4 +225,9 @@ title = "gitleaks config"
         "cb2fc088a83b394fc128235f4106bbfc88d8ede8",
         "f56338cbabd2185cab706ae09e1471b0bd9b7b43",
         "fc7d76ad54d6a7350de0fca298a1294ce8a1f3a2",
+        # The prettier auto-format job reflowed the whole tree, so the same
+        # redaction fixtures and security-doc examples reappear as additions in
+        # its commits. Same offenders, same rationale as the graft above.
+        "2f6a59e2e800b2ee23fc4cc305aecd95a90b8bac",
+        "d5a979623724fe26f012598958695a7429046e72",
     ]