alexgreensh/outsourcerer

{   "$schema": "https://json.schemastore.org/claude-code-marketplace.json",

"$schema": "https://json.schemastore.org/claude-code-marketplace.json",

"owner": {     "name": "Alex Greenshpun",     "url": "https://github.com/alexgreensh"

"name": "Alex Greenshpun",     "url": "https://github.com/alexgreensh"   },

"url": "https://github.com/alexgreensh"

{   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",

"$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",

"author": {     "name": "Alex Greenshpun",     "url": "https://github.com/alexgreensh"

"name": "Alex Greenshpun",     "url": "https://github.com/alexgreensh"   },

"url": "https://github.com/alexgreensh"

},   "homepage": "https://github.com/alexgreensh/outsourcerer",   "repository": "https://github.com/alexgreensh/outsourcerer",

"homepage": "https://github.com/alexgreensh/outsourcerer",

"repository": "https://github.com/alexgreensh/outsourcerer",

**Created by**: [Alex Greenshpun](https://linkedin.com/in/alexgreensh)

[Credential-related source omitted]

[Credential-related source omitted]

| `plan rm <name> [--force]` | Delete a plan's records. Refuses while a task is running or verifying unless `--force`. Never touches git worktrees or branches. |

`plan ls`, `plan show`, `plan use <name>` and `plan rm <name>` manage plans.

outsourcerer.sh exclude rm fable

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

- **Detect-only, by policy.** Outsourcerer never installs or launches the proxy. The user installs   and audits it themselves (https://github.com/router-for-me/CLIProxyAPI, then

and audits it themselves (https://github.com/router-for-me/CLIProxyAPI, then

[Credential-related source omitted]

[Credential-related source omitted]

`--provider cline` delegates through the Cline CLI (https://github.com/cline/cline) the user

`--provider pi` delegates through Pi (https://github.com/earendil-works/pi), the open-source coding

`~/.agents/skills`, but not `~/.claude/skills`. `--with` grants travel in the prompt, as on Cursor.   Pi has its own MCP config (`pi mcp add`). - Install: `npm i -g @earendil-works/pi-coding-agent` (or the installer on https://pi.dev), then

Pi has its own MCP config (`pi mcp add`). - Install: `npm i -g @earendil-works/pi-coding-agent` (or the installer on https://pi.dev), then run   `pi` and `/login` once. `doctor` shows whether it is on PATH. `session start --provider pi` ope

- Install: `npm i -g @earendil-works/pi-coding-agent` (or the installer on https://pi.dev), then run

in non-TTY environments", fixed), as are print-mode error/exit-code handling and `--sandbox` propagation in `-p`. Tiers map to agy flags: `run`→plain `-p` (read-only), `edit`/`research`→ `--sandbox --dangerously-skip-permissions` (sandboxed

`--sandbox --dangerously-skip-permissions` (sandboxed autonomy), `yolo`→`--dangerously-skip-permissions`.

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

- **Vehicle: a direct streaming call to the server's `/v1/chat/completions`** (curl + jq, no extra

install, no harness). Universal: works with Ollama, LM Studio, llama.cpp, or any OpenAI-compatible   server. `doctor` probes Ollama `:11434`, LM Studio `:1234`, llama.cpp `:8080` and reports what's   live; override the endpoint with `OSRC_L

server. `doctor` probes Ollama `:11434`, LM Studio `:1234`, llama.cpp `:8080` and reports what's   live; override the endpoint with `OSRC_LOCAL_URL=http://host:port/v1` (also honors `OLLAMA_HOST`). - **Streaming** feeds the liveness watchdo

live; override the endpoint with `OSRC_LOCAL_URL=http://host:port/v1` (also honors `OLLAMA_HOST`).

`--provider tokenrouter` delegates through [TokenRouter](https://www.tokenrouter.com), an

[Credential-related source omitted]

[Credential-related source omitted]

streaming call to the gateway's `/v1/chat/completions` (curl + jq, no extra install, no harness).

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

- **It is a CLOUD lane**: the prompt LEAVES the machine, so it flows through the same cloud-consent   gate + secret-scan hard-block as every other cloud lane. Override the endpoint with   `OSRC_TOKENROUTER_URL` (default `https://api.tokenro

gate + secret-scan hard-block as every other cloud lane. Override the endpoint with   `OSRC_TOKENROUTER_URL` (default `https://api.tokenrouter.com/v1`). - **It is TEXT delegation** (same contract as the local lane's text path): the model re

`OSRC_TOKENROUTER_URL` (default `https://api.tokenrouter.com/v1`).

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

2. **`nano-banana` / `gemini-2.5-flash-image`, FALLBACK #2.** Used when Codex isn't ready. Needs    `GEMINI_API_KEY`/`GOOGLE_API_KEY` in `~/.env`: it calls the Gemini `generateContent` REST API    directly (curl + jq). This is the one Gemin

[Credential-related source omitted]

[Credential-related source omitted]

directly (curl + jq). This is the one Gemini feature that needs the API key even when your text

[Credential-related source omitted]

outsourcerer.sh exclude rm fable           # allow it again

(OpenRouter via `--provider cc -m glm|deepseek`, or a native lane). If the sibling still answers,   the lane stays up and you are told which free model to keep using. The current devin CLI exposes   no quota read; the live figure is at http

the lane stays up and you are told which free model to keep using. The current devin CLI exposes   no quota read; the live figure is at https://app.devin.ai/settings/usage.   `brief`/`status` show a proactive meter, "N Devin plan jobs today

no quota read; the live figure is at https://app.devin.ai/settings/usage.

[Credential-related source omitted]

|---|---|---| | **bash** | everything | preinstalled on macOS/Linux (works on macOS's bash 3.2) | | **Devin CLI + login** | `--provider devin` | Follow the [official Devin CLI installation guide](https://docs.devin.ai/cli), then run `! devi

| **bash** | everything | preinstalled on macOS/Linux (works on macOS's bash 3.2) | | **Devin CLI + login** | `--provider devin` | Follow the [official Devin CLI installation guide](https://docs.devin.ai/cli), then run `! devin auth login` 

| **Devin CLI + login** | `--provider devin` | Follow the [official Devin CLI installation guide](https://docs.devin.ai/cli), then run `! devin auth login` (interactive browser flow, run it yourself) |

[Credential-related source omitted]

| **claude CLI** | `--provider cc` | Claude Code (`claude` on PATH) | | **codex CLI + login** | `--provider codex`; also the **PREFERRED, keyless `image` backend** (`gpt-image`) | OpenAI Codex CLI (`codex` on PATH), then `codex login` (inte

| **codex CLI + login** | `--provider codex`; also the **PREFERRED, keyless `image` backend** (`gpt-image`) | OpenAI Codex CLI (`codex` on PATH), then `codex login` (interactive, run it yourself) | | **`agy` (Antigravity CLI)**, PRIMARY, ke

| **`agy` (Antigravity CLI)**, PRIMARY, keyless | `gemini-pro` / `gemini-flash` / `gemini-flash-lite` text lane | Follow the [official Antigravity CLI installation and authentication guide](https://antigravity.google/docs/cli/install/), the

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env python3

Env:   OSRC_SHIM_UPSTREAM  local OpenAI base, e.g. http://localhost:11434/v1   (required)

OSRC_SHIM_UPSTREAM  local OpenAI base, e.g. http://localhost:11434/v1   (required)

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

oreq = anthropic_to_openai(areq)         data = json.dumps(oreq).encode()         req = urllib.request.Request(UPSTREAM + "/chat/completions", data=data, method="POST",

data = json.dumps(oreq).encode()         req = urllib.request.Request(UPSTREAM + "/chat/completions", data=data, method="POST",                                      headers={"Content-Type": "application/json",

req = urllib.request.Request(UPSTREAM + "/chat/completions", data=data, method="POST",

[Credential-related source omitted]

try:             up = urllib.request.urlopen(req, timeout=int(os.environ.get("OSRC_SHIM_TIMEOUT", "900")))         except Exception as e:

[Credential-related source omitted]

[Credential-related source omitted]

def main():     if not UPSTREAM:         sys.stderr.write("OSRC_SHIM_UPSTREAM is required (e.g. http://localhost:11434/v1)\n")

if not UPSTREAM:         sys.stderr.write("OSRC_SHIM_UPSTREAM is required (e.g. http://localhost:11434/v1)\n")         sys.exit(2)

sys.stderr.write("OSRC_SHIM_UPSTREAM is required (e.g. http://localhost:11434/v1)\n")

[Credential-related source omitted]

Executable file

rm -rf "$dir" 2>/dev/null

rm -rf "$dir.dead.$me" 2>/dev/null

[ "$owner" = "$_FF_LOCK_OWNER" ] && rm -rf "$_FF_LOCK" 2>/dev/null

rm -f "$pd/review-transaction.json"

if [ "$new" = 1 ] && [ -e "$pd" ]; then rm -f "$OSRC_HOME/.ff-plan-new.$$"; return 2; fi   # lost a same-name race

cat "$OSRC_HOME/.ff-plan-new.$$" >&2 2>/dev/null; rm -f "$OSRC_HOME/.ff-plan-new.$$"

rm -f "$OSRC_HOME/.ff-plan-new.$$"

rm -f "$pd/tasks/$t.json"

rm -rf "$pd/tasks/$t"

rm -f "$pd/flow-expansion.json"

rm -f "$pd/flow-expansion.json" || return 1

Executable file

rm -f "$tmp" 2>/dev/null; return 1

sh -c 'echo "$PPID"' > "$f" 2>/dev/null; { read -r p < "$f"; } 2>/dev/null; rm -f "$f" 2>/dev/null

[Credential-related source omitted]

else rm -f "$rtmp" 2>/dev/null; _FDC_RC=1; _FDC_REASON="could not save the report to $tdir/report.md"; fi

rm -f "$guard/owner"; rmdir "$guard" 2>/dev/null; return 1

rm -f "$1.steal/owner"; rmdir "$1.steal" 2>/dev/null || true

if [ "$moved" = "$seen" ]; then rm -rf "$corpse"; rc=0

rm -f "$lk/owner.tmp"; rmdir "$lk" 2>/dev/null || true

git -C "$_LAND_ROOT" worktree remove --force "$_LAND_IWT" >/dev/null 2>&1 || rm -rf "$_LAND_IWT" 2>/dev/null

rm -f "$OSRC_HOME/land/active/${_LAND_IWT##*/}" 2>/dev/null

git -C "$root" worktree remove --force "$d" >/dev/null 2>&1 || rm -rf "$d" 2>/dev/null

rm -f "$own" 2>/dev/null

[Credential-related source omitted]

rm -rf "$out_dir" 2>/dev/null; mkdir -p "$out_dir" 2>/dev/null || die "land: could not create $out_dir for the dry run"

git -C "$root" -c "core.hooksPath=$nohooks" worktree add -q --detach "$_LAND_IWT" "$before" >/dev/null 2>&1      || { _LAND_IWT=""; rm -f "$OSRC_HOME/land/active/$lid"; die "land: could not create a scratch worktree to merge in (under $root

|| { _LAND_IWT=""; rm -f "$OSRC_HOME/land/active/$lid"; die "land: could not create a scratch worktree to merge in (under $root/.outsourcerer/worktrees)"; }

Executable file

( umask 077; printf '%s\n' "$json" > "$tmp" ) 2>/dev/null || { rm -f "$tmp" 2>/dev/null; return 1; }

mv -f "$tmp" "$path" 2>/dev/null || { rm -f "$tmp" 2>/dev/null; return 1; }

( umask 077; cat > "$tmp" ) 2>/dev/null || { rm -f "$tmp" 2>/dev/null; return 1; }

mv -f "$tmp" "$path" 2>/dev/null || { rm -f "$tmp" 2>/dev/null; return 1; }

rm -f "$f" 2>/dev/null

if [ "$gage" -gt 0 ] && [ $(( $(date +%s) - gage )) -ge 30 ]; then rmdir "$guard" 2>/dev/null || rm -rf "$guard" 2>/dev/null; fi

rm -rf "$corpse" 2>/dev/null; rc=0

rm -f "$lock/owner.$me" 2>/dev/null

rm -f "$lock/owner" "$lock"/owner.* 2>/dev/null

[Credential-related source omitted]

outsourcerer plan rm <name> [--force]

case "$1" in "$(_plans_root)"/?*) rm -rf "$1" 2>/dev/null ;; esac

[ -n "$name" ] || die "plan rm needs a plan name."

[ "$(_plan_current 2>/dev/null)" = "$name" ] && rm -f "$(_plans_root)/current"

rm -rf "$removed" || die "plan '$name' was removed, but its old files still need cleanup at $removed"

#!/usr/bin/env bash

rm -f "$STDIN_FIFO"

rm -f "$f"

rm -f "$STDIN_FIFO" "$PID_FILE" "$WINPTY_PID_FILE"

Executable file

Executable file

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#   claudex           GPT-5.6 Sol/Terra/Luna INSIDE the Claude Code harness via YOUR local #                     CLIProxyAPI (detect-only; unofficial bridge; Claude-sub models refused). #   cline             Cline CLI (https://github.com/cl

#                     CLIProxyAPI (detect-only; unofficial bridge; Claude-sub models refused). #   cline             Cline CLI (https://github.com/cline/cline). Engine lane: -m passes through #                     verbatim to cline's own pr

#   cline             Cline CLI (https://github.com/cline/cline). Engine lane: -m passes through

#                     Posture is binary: --plan = read-only, default act mode auto-approves all tools #                     (no OS sandbox, no graded rung); reasoning effort maps to --thinking. #   tokenrouter       TokenRouter (https://www

#                     (no OS sandbox, no graded rung); reasoning effort maps to --thinking. #   tokenrouter       TokenRouter (https://www.tokenrouter.com), an OpenAI-compatible model gateway. #                     Engine lane: -m is REQUIR

#   tokenrouter       TokenRouter (https://www.tokenrouter.com), an OpenAI-compatible model gateway.

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$probe" 2>/dev/null || return 1

# armed `trap 'rm -rf "$fixture"' EXIT` before sourcing would otherwise lose its cleanup entirely

rm -f "$OSRC_HOME/with-mcp-$$.json" "$OSRC_HOME/.hdr.$$."* 2>/dev/null

eval "$_OSRC_CALLER_EXIT"

trap 'if [ "${BASH_SUBSHELL:-0}" -eq 0 ]; then _devin_skills_lock_release 2>/dev/null; rm -f "$OSRC_HOME/with-mcp-$$.json" "$OSRC_HOME/.hdr.$$."* 2>/dev/null; fi' EXIT

if ( : > "$OSRC_HOME/.wtest" ) 2>/dev/null; then rm -f "$OSRC_HOME/.wtest" 2>/dev/null; return 0; fi

[ -L "$OSRC_CONSENT_FILE" ] && rm -f "$OSRC_CONSENT_FILE" 2>/dev/null   # never write through a planted symlink

{ umask 077; printf 'granted-at: %s\nby: %s\nscope: cloud-disclosure ack (secret-scan still runs per delegation)\nrevoke: %s consent revoke\n'        "$(date '+%Y-%m-%dT%H:%M:%S%z' 2>/dev/null)" "${USER:-unknown}" "$0" > "$tmp"; } 2>/dev/nu

&& mv -f "$tmp" "$OSRC_CONSENT_FILE" 2>/dev/null || { rm -f "$tmp" 2>/dev/null; true; }

revoke) rm -f "$OSRC_CONSENT_FILE" 2>/dev/null; echo "cloud consent: revoked. The next cloud delegation will ask again (interactive) or need --cloud-ack (non-interactive)." ;;

[ -L "$f" ] && rm -f "$f" 2>/dev/null

{ umask 077; printf '%s\n' "$3" > "$tmp"; } 2>/dev/null      && mv -f "$tmp" "$f" 2>/dev/null || { rm -f "$tmp" 2>/dev/null; return 1; }

&& mv -f "$tmp" "$f" 2>/dev/null || { rm -f "$tmp" 2>/dev/null; return 1; }

reset)  rm -f "$OSRC_POSTURE_DIR"/*.* 2>/dev/null; echo "lane postures cleared; the next restricted attempt will be re-probed once." ;;

{ umask 077; printf '%s\n' "$mode" > "$tmp"; } 2>/dev/null      || { rm -f "$tmp" 2>/dev/null; die "mode: cannot write $OSRC_MODE_FILE (state home not writable?)"; }

|| { rm -f "$tmp" 2>/dev/null; die "mode: cannot write $OSRC_MODE_FILE (state home not writable?)"; }

mv -f "$tmp" "$OSRC_MODE_FILE" 2>/dev/null      || { rm -f "$tmp" 2>/dev/null; die "mode: cannot replace $OSRC_MODE_FILE"; }

|| { rm -f "$tmp" 2>/dev/null; die "mode: cannot replace $OSRC_MODE_FILE"; }

reset) rm -f "$OSRC_MODE_FILE" 2>/dev/null; printf 'driving mode: reset (the session-start menu shows again next time).\n' ;;

need_devin() {   have devin || die "devin CLI not on PATH (~/.local/bin). Install it using the official guide: https://docs.devin.ai/cli"

have devin || die "devin CLI not on PATH (~/.local/bin). Install it using the official guide: https://docs.devin.ai/cli"

rm -f "$out_file" "$expired_file" 2>/dev/null || true

_pq_reset="Devin says it $_pq_reset (that is $(_epoch_local $(( $(date +%s) + _pq_secs )) ) local)."   elif [ -n "$_pq_reset" ]; then     _pq_reset="Devin says it $_pq_reset — I could not parse that into a time, so the lane-down window belo

elif [ -n "$_pq_reset" ]; then     _pq_reset="Devin says it $_pq_reset — I could not parse that into a time, so the lane-down window below is an estimate; the live figure is at https://app.devin.ai/settings/usage."   else

_pq_reset="Devin says it $_pq_reset — I could not parse that into a time, so the lane-down window below is an estimate; the live figure is at https://app.devin.ai/settings/usage."

else     _pq_reset="Devin gave no reset time in this refusal; the live figure is at https://app.devin.ai/settings/usage."   fi

_pq_reset="Devin gave no reset time in this refusal; the live figure is at https://app.devin.ai/settings/usage."

rm -f "$(_lane_probe_file dv)" 2>/dev/null   # consumed: quoted above; no per-PID litter in $OSRC_HOME

rm -f "$(_lane_probe_file "$lane")" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[ -n "$_gk" ] && have curl || return 1

raw="$(_timeout "${OSRC_CATALOG_FETCH_TIMEOUT:-10}" _curl_with_gemini_key "$_gk" -fsS                'https://generativelanguage.googleapis.com/v1beta/models?pageSize=500' 2>/dev/null)"

'https://generativelanguage.googleapis.com/v1beta/models?pageSize=500' 2>/dev/null)"

printf '%s' "$norm" > "$tmp" && mv -f "$tmp" "$f" || { rm -f "$tmp" 2>/dev/null; return 1; }

printf '%s' "$raw" > "$rtmp" && mv -f "$rtmp" "$rawf" 2>/dev/null || rm -f "$rtmp" 2>/dev/null

# Re-check after a forced fetch (the contains check above may have run against a stale/empty cache).

- Force a fresh catalog fetch: rm -f $(_catalog_path "$lane") (it re-fetches on the next run)."

eval "$_v=\"\$(_utf8_guard \"\$_val\"; printf X)\""   # sentinel: keep a trailing newline

eval "$_v=\"\${$_v%X}\""

_BASHPID=""; { read -r _BASHPID < "$_tf"; } 2>/dev/null; rm -f "$_tf" 2>/dev/null

if _devin_lock_debris "$dead"; then rm -rf "$dead" 2>/dev/null

elif [ ! -e "$mx" ]; then mv "$dead" "$mx" 2>/dev/null || rm -rf "$dead" 2>/dev/null

else rm -rf "$dead" 2>/dev/null; fi

_devin_lock_mutex_release() { rm -rf "$1.mx" 2>/dev/null; }

case "$p" in ''|*[!0-9]*) rm -f "$h" 2>/dev/null; continue ;; esac

if kill -0 "$p" 2>/dev/null; then live=1; else rm -f "$h" 2>/dev/null; fi

[ "$others" = "0" ] && rm -f "$lock/grants" 2>/dev/null

rm -rf "$lock" 2>/dev/null   # stale: every holder died without releasing

# A dir that survived the rm was lost to a race; take the bounded wait below rather than

else rm -f "$qp" 2>/dev/null; fi

[ -n "$lw" ] && rm -f "$lw" 2>/dev/null

rm -f "$lock.pending/$me" 2>/dev/null

rm -f "$lock.pending/$me" 2>/dev/null

[ -n "$lw" ] && rm -f "$lw" 2>/dev/null

_devin_grants_canon "${1-}" > "$t" 2>/dev/null && mv -f "$t" "$_DEVIN_LOCK_DIR/grants" 2>/dev/null || rm -f "$t" 2>/dev/null

rm -f "$lock/holders/$_BASHPID" 2>/dev/null

[ "$(cat "$lock/pid" 2>/dev/null)" = "$_BASHPID" ] && rm -f "$lock/pid" 2>/dev/null

_devin_lock_stale "$lock" && rm -rf "$lock" 2>/dev/null   # last holder out removes it

rm -f "$lock/holders/$_BASHPID" 2>/dev/null   # a later stale check reaps the rest

rm -f "$marker" 2>/dev/null || die "--with: $marker is a symlink and cannot be removed - refusing to dispatch (possible planted-symlink attack)."

[ -L "$dst/$prev" ] && rm -f "$dst/$prev"

[ -n "$mtmp" ] && rm -f "$mtmp" 2>/dev/null

printf '>>> [free-tier BLOCKED-IN-ERROR] Devin refused free-tier "%s" citing a paid ACU/quota/billing limit — that balance does NOT gate a plan-included model, so this is a Devin-side mis-gate, not a real limit here. %s Check Devin'\''s pla

[ -n "$_qline" ] && printf '>>> [free-tier] Devin'\''s exact wording (for tightening this detector): %s\n' "$_qline" >&2     elif [ -z "$_dverr" ]; then       printf '>>> [free-tier] if that was a plan/quota refusal, note "%s" is free-tier 

elif [ -z "$_dverr" ]; then       printf '>>> [free-tier] if that was a plan/quota refusal, note "%s" is free-tier and should not be gated by a paid balance — unless Devin said the DAILY/WEEKLY plan quota is exhausted, which may block every

printf '>>> [free-tier] if that was a plan/quota refusal, note "%s" is free-tier and should not be gated by a paid balance — unless Devin said the DAILY/WEEKLY plan quota is exhausted, which may block every plan-included model (verify with 

[ -n "$_dverr" ] && rm -f "$_dverr" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

fi   [ -n "$GEMINI_API_KEY" ] || die "GEMINI_API_KEY (or GOOGLE_API_KEY) not found in ~/.env (needed for gemini-pro/gemini-flash/nano-banana). Get a key: https://aistudio.google.com/apikey"   export GEMINI_API_KEY

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# ---- TokenRouter lane key (OpenAI-compatible gateway, https://api.tokenrouter.com/v1) ----

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# ---- Secure curl header helper: pass API keys via temp file, not process args (ps table) ----

# Usage: _curl_with_key <header_value> <curl args...>

# Writes the header to a 0600 temp file and uses curl -H @file to avoid exposing the key in ps.

[Credential-related source omitted]

[Credential-related source omitted]

curl -H @"$_curl_hdr_tmp" "$@"

rm -f "$_curl_hdr_tmp" 2>/dev/null; _curl_hdr_tmp=""

[Credential-related source omitted]

[Credential-related source omitted]

curl -H @"$_curl_hdr_tmp" "$@"

rm -f "$_curl_hdr_tmp" 2>/dev/null; _curl_hdr_tmp=""

printf '%s\n'      "name=droid"      "providers=droid"      "provider_is_lane=yes"      "owns_catalog=yes"      "cli=droid"      "cli_missing_hint=droid CLI not on PATH (Factory Droid lane). Install it using the official guide: https://docs

"owns_catalog=yes" \     "cli=droid" \     "cli_missing_hint=droid CLI not on PATH (Factory Droid lane). Install it using the official guide: https://docs.factory.ai/cli. Then run 'droid' once to log in." \

"cli=droid" \     "cli_missing_hint=droid CLI not on PATH (Factory Droid lane). Install it using the official guide: https://docs.factory.ai/cli. Then run 'droid' once to log in." \     "ready_fn=_ready_probe_droid" \

"cli_missing_hint=droid CLI not on PATH (Factory Droid lane). Install it using the official guide: https://docs.factory.ai/cli. Then run 'droid' once to log in." \

[Credential-related source omitted]

[Credential-related source omitted]

"owns_catalog=yes" \     "cli=cursor-agent agent" \     "cli_missing_hint=cursor-agent CLI not on PATH (Cursor lane). Install it using the official guide: https://cursor.com/docs/cli/installation. Then run 'cursor-agent login' once (or set 

"cli=cursor-agent agent" \     "cli_missing_hint=cursor-agent CLI not on PATH (Cursor lane). Install it using the official guide: https://cursor.com/docs/cli/installation. Then run 'cursor-agent login' once (or set CURSOR_API_KEY)." \     "

[Credential-related source omitted]

[Credential-related source omitted]

printf '%s\n'      "name=hermes"      "providers=hermes"      "provider_is_lane=yes"      "owns_catalog=yes"      "cli=hermes"      "cli_missing_hint=hermes CLI not on PATH (Hermes agent lane). Install: https://github.com/NousResearch/herme

"owns_catalog=yes" \     "cli=hermes" \     "cli_missing_hint=hermes CLI not on PATH (Hermes agent lane). Install: https://github.com/NousResearch/hermes-agent  (then run 'hermes' once to configure). -m passes through verbatim; model catalo

"cli=hermes" \     "cli_missing_hint=hermes CLI not on PATH (Hermes agent lane). Install: https://github.com/NousResearch/hermes-agent  (then run 'hermes' once to configure). -m passes through verbatim; model catalog is yours to configure."

"cli_missing_hint=hermes CLI not on PATH (Hermes agent lane). Install: https://github.com/NousResearch/hermes-agent  (then run 'hermes' once to configure). -m passes through verbatim; model catalog is yours to configure." \

printf '%s\n'      "name=cline"      "providers=cline"      "provider_is_lane=yes"      "owns_catalog=yes"      "cli=cline"      "cli_missing_hint=cline CLI not on PATH (Cline lane). Install: npm i -g cline  (or see https://github.com/cline

"owns_catalog=yes" \     "cli=cline" \     "cli_missing_hint=cline CLI not on PATH (Cline lane). Install: npm i -g cline  (or see https://github.com/cline/cline), then set up cline: sign in to ClinePass (~\$9.99/mo for discounted open-weigh

"cli=cline" \     "cli_missing_hint=cline CLI not on PATH (Cline lane). Install: npm i -g cline  (or see https://github.com/cline/cline), then set up cline: sign in to ClinePass (~\$9.99/mo for discounted open-weight models) or configure yo

"cli_missing_hint=cline CLI not on PATH (Cline lane). Install: npm i -g cline  (or see https://github.com/cline/cline), then set up cline: sign in to ClinePass (~\$9.99/mo for discounted open-weight models) or configure your own keys in ~/.

# ---- pi (Pi coding agent — whatever Pi is signed in to) --------------------- # Pi (https://github.com/earendil-works/pi) is an engine lane: -m passes through verbatim to Pi's own

# Pi (https://github.com/earendil-works/pi) is an engine lane: -m passes through verbatim to Pi's own

printf '%s\n'      "name=pi"      "providers=pi"      "provider_is_lane=yes"      "owns_catalog=yes"      "cli=pi"      "cli_missing_hint=pi CLI not on PATH (Pi lane). Install: npm i -g @earendil-works/pi-coding-agent  (or see https://pi.de

"owns_catalog=yes" \     "cli=pi" \     "cli_missing_hint=pi CLI not on PATH (Pi lane). Install: npm i -g @earendil-works/pi-coding-agent  (or see https://pi.dev for the official installer), then run 'pi' and /login once (Claude, ChatGPT, C

"cli=pi" \     "cli_missing_hint=pi CLI not on PATH (Pi lane). Install: npm i -g @earendil-works/pi-coding-agent  (or see https://pi.dev for the official installer), then run 'pi' and /login once (Claude, ChatGPT, Copilot and more), or set 

"cli_missing_hint=pi CLI not on PATH (Pi lane). Install: npm i -g @earendil-works/pi-coding-agent  (or see https://pi.dev for the official installer), then run 'pi' and /login once (Claude, ChatGPT, Copilot and more), or set a provider API 

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

have claude || die "claudex lane needs the claude CLI on PATH."     [ -n "${OSRC_JOB_DIR:-}" ] || _claudex_up || die "claudex lane: no CLIProxyAPI answering at $(_claudex_url) (or no api-key found). This lane rides a proxy YOU install and l

[ -n "${OSRC_JOB_DIR:-}" ] || _claudex_up || die "claudex lane: no CLIProxyAPI answering at $(_claudex_url) (or no api-key found). This lane rides a proxy YOU install and log into: https://github.com/router-for-me/CLIProxyAPI (then cli-prox

[Credential-related source omitted]

[Credential-related source omitted]

# or_credits already caps curl via OSRC_CURL_TIMEOUT; tighten it for the interactive brief probe.

[Credential-related source omitted]

rm -rf "$tmp" "$old" 2>/dev/null

_skill_tree_names_safe "$dir" || { rm -rf "$tmp"; die "skill bundle: skill '$name' contains file/dir names with control characters (CR/LF/TAB) - the line-oriented manifest cannot represent them, so the grant is refused. Rename the offending

[ -z "$badl" ] || { rm -rf "$tmp"; die "skill bundle: skill '$name' ships symlink(s) that are absolute, escape the skill directory, or dangle:$badl - staging them would hand the delegate a live path OUTSIDE the bundle, so the grant is refus

[ -z "$special" ] || { rm -rf "$tmp"; die "skill bundle: skill '$name' contains non-regular file(s) (fifo/socket/device):$(printf '%s' "$special" | tr '\n' ' ') - refusing to stage (every transferred entry must be manifest-accounted). Remov

[ "$total" -le "$cap" ] || { rm -rf "$tmp"; die "skill bundle would exceed OSRC_BUNDLE_MAX_BYTES=${cap} bytes when adding skill '$name' (skills are copied whole so the delegate gets the real tree). Raise the cap or grant fewer skills."; }

mkdir -p "$tmp/$name" || { rm -rf "$tmp"; die "skill bundle: cannot create $tmp/$name"; }

(cd "$dir" && tar --exclude='./.git' -cf - .) | (cd "$tmp/$name" && tar -xf -)        || { rm -rf "$tmp"; die "skill bundle: failed to copy skill '$name' from $dir"; }

|| { rm -rf "$tmp"; die "skill bundle: failed to copy skill '$name' from $dir"; }

rm -rf "$old" 2>/dev/null

find "${OSRC_JOB_DIR:-$OSRC_HOME}" -maxdepth 1 -type d -name 'skill-bundle.*' -mtime +2 -exec rm -rf {} + 2>/dev/null || true

rm -rf "$root" 2>/dev/null

rm -f "$cfg"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

_quota_countable() {  # <verb> -> rc0 if this ledger verb counts toward the daily cap   local v="${1:-}" nc   for nc in $OSRC_QUOTA_NONCOUNT_VERBS; do [ "$v" = "$nc" ] && return 1; done

local v="${1:-}" nc   for nc in $OSRC_QUOTA_NONCOUNT_VERBS; do [ "$v" = "$nc" ] && return 1; done   return 0

for nc in $OSRC_QUOTA_NONCOUNT_VERBS; do [ "$v" = "$nc" ] && return 1; done

--arg noncount "$OSRC_QUOTA_NONCOUNT_VERBS" '        ($noncount | split(" ")) as $nc        | [ inputs | fromjson? // empty

($noncount | split(" ")) as $nc        | [ inputs | fromjson? // empty            | objects

| select(.model == $model)            | select( ((.lane // .provider) | if . == "gi" then "gm" else . end) == $lane )            | select((.verb // "") as $v | ($nc | index($v)) | not)

| select( ((.lane // .provider) | if . == "gi" then "gm" else . end) == $lane )            | select((.verb // "") as $v | ($nc | index($v)) | not)            | select( ((.epoch | numbers) // null) as $e

| select((.verb // "") as $v | ($nc | index($v)) | not)

done < <(jq -Rrn --argjson start "$start" --arg today "$today" --arg noncount "$OSRC_QUOTA_NONCOUNT_VERBS" '        ($noncount | split(" ")) as $nc        | [ inputs | fromjson? // empty

($noncount | split(" ")) as $nc        | [ inputs | fromjson? // empty            | objects

| objects            | select( (((.lane // .provider) // "") | tostring) as $l | ($l == "dv" or $l == "devin") )            | select((.verb // "") as $v | ($nc | index($v)) | not)

| select( (((.lane // .provider) // "") | tostring) as $l | ($l == "dv" or $l == "devin") )            | select((.verb // "") as $v | ($nc | index($v)) | not)            | select( ((.epoch | numbers) // null) as $e

| select((.verb // "") as $v | ($nc | index($v)) | not)

line="devin plan  : $n Devin plan job$([ "$n" = "1" ] || printf s) today (UTC quota day; glm/swe/kimi/deepseek share ONE daily bucket)"   if [ "$down" = "1" ]; then     line="$line — dv lane DOWN ($(_lane_down_reason dv)) for another $(_lan

if [ "$down" = "1" ]; then     line="$line — dv lane DOWN ($(_lane_down_reason dv)) for another $(_lane_down_remaining dv); dispatch + fallback skip Devin until then. Live figure: https://app.devin.ai/settings/usage"   fi

line="$line — dv lane DOWN ($(_lane_down_reason dv)) for another $(_lane_down_remaining dv); dispatch + fallback skip Devin until then. Live figure: https://app.devin.ai/settings/usage"

local start today; start="$(_quota_day_start utc)"; today="$(date +%Y-%m-%d)"   n="$(jq -Rn --argjson start "$start" --arg today "$today" --arg toks "$toks" --arg noncount "$OSRC_QUOTA_NONCOUNT_VERBS" '        ($noncount | split(" ")) as $n

n="$(jq -Rn --argjson start "$start" --arg today "$today" --arg toks "$toks" --arg noncount "$OSRC_QUOTA_NONCOUNT_VERBS" '        ($noncount | split(" ")) as $nc | ($toks | split(" ") | map(select(length > 0))) as $tk        | [ inputs | fr

($noncount | split(" ")) as $nc | ($toks | split(" ") | map(select(length > 0))) as $tk

| objects            | select( (((.lane // .provider) // "") | tostring) as $l | ($tk | index($l)) != null )            | select((.verb // "") as $v | ($nc | index($v)) | not)

| select( (((.lane // .provider) // "") | tostring) as $l | ($tk | index($l)) != null )            | select((.verb // "") as $v | ($nc | index($v)) | not)            | select( ((.epoch | numbers) // null) as $e

| select((.verb // "") as $v | ($nc | index($v)) | not)

[ "$cur" = "$v" ] && rm -f "$OSRC_POSTURE_DIR/$1.quota-$slug" 2>/dev/null

else rm -f "$OSRC_POSTURE_DIR/$lane.down-reason" 2>/dev/null; fi

else rm -f "$OSRC_POSTURE_DIR/$lane.down-evidence" 2>/dev/null; fi

# in the microsecond between the value-match re-read and the rm can still be unlinked -- losing

[ "$cur" = "$2" ] && rm -f "$OSRC_POSTURE_DIR/$1.down" 2>/dev/null

[ -f "$OSRC_POSTURE_DIR/$1.down" ] || rm -f "$OSRC_POSTURE_DIR/$1.down-reason" "$OSRC_POSTURE_DIR/$1.down-evidence" 2>/dev/null

rm -f "$OSRC_POSTURE_DIR/$lane.down" "$OSRC_POSTURE_DIR/$lane.down-reason" "$OSRC_POSTURE_DIR/$lane.down-evidence" 2>/dev/null

printf ">>> [exclude] the entry '%s' is not a valid model name, so every model counts as excluded until it is fixed (fail closed). Fix: %s exclude rm '%s', or correct OSRC_EXCLUDE_MODELS.\n" "$b" "$0" "$b" >&2

# _exclude_saved_entries / _exclude_env_entries -> each source on its own (for ls and rm notes).

}     function cmatch(e, c,   ea, ca, ne, nc, i, j, ok, nx) {       ne = split(e, ea, " "); nc = split(c, ca, " ")

function cmatch(e, c,   ea, ca, ne, nc, i, j, ok, nx) {       ne = split(e, ea, " "); nc = split(c, ca, " ")       if (ne == 0 || ne > nc) return 0

ne = split(e, ea, " "); nc = split(c, ca, " ")

die "${label:+$label: }you excluded '$m' (exclude list entry: $EXCL_HIT${EXCL_WHY:+; $EXCL_WHY}). Pick another model with -m, or allow it again with: $0 exclude rm $EXCL_HIT"

die "${label:+$label: }'$req' resolves to $res, which you excluded (exclude list entry: $EXCL_HIT), so it will not run. Pick another model with -m, or allow it again with: $0 exclude rm $EXCL_HIT"

die "${label:+$label: }you excluded '$res' (exclude list entry: $EXCL_HIT), so it will not run. Pick another model with -m, or allow it again with: $0 exclude rm $EXCL_HIT"

printf 'excluded    : EVERY MODEL (unparsable entry: %s; fix it with: %s exclude rm <entry>)%s\n' "$b" "$0" "${list:+; also listed: $list}"

printf 'excluded    : %s (never chosen, never a fallback, -m refused; change with: %s exclude rm <model>)\n' "$list" "$0"

if [ -z "$(printf '%s' "${1:-}" | tr -d '[:space:]')" ]; then rm -f "$OSRC_EXCLUDE_FILE" 2>/dev/null; return 0; fi

rm -f "$tmp" 2>/dev/null

printf '  %s   (NOT A VALID MODEL NAME: every model counts as excluded until you fix it: %s exclude rm '"'"'%s'"'"')\n' "$e" "$0" "$e"

[ "$#" -ge 1 ] || die "exclude rm needs a model or family, e.g.: $0 exclude rm fable"

rm -f "$OSRC_EXCLUDE_FILE" 2>/dev/null

[Credential-related source omitted]

local tmp="$OSRC_QUOTA_FILE.tmp.$$"; [ -L "$tmp" ] && rm -f "$tmp" 2>/dev/null   # symlink-guard parity with _posture_set

chmod 600 "$tmp" 2>/dev/null; mv -f "$tmp" "$OSRC_QUOTA_FILE" || { rm -f "$tmp"; die "limits set: could not update $OSRC_QUOTA_FILE"; }

else rm -f "$tmp"; die "limits set: jq failed (is $OSRC_QUOTA_FILE valid JSON?)"; fi

local tmp="$OSRC_QUOTA_FILE.tmp.$$"; [ -L "$tmp" ] && rm -f "$tmp" 2>/dev/null   # symlink-guard parity with _posture_set

chmod 600 "$tmp" 2>/dev/null; mv -f "$tmp" "$OSRC_QUOTA_FILE" || { rm -f "$tmp"; die "limits clear: could not update $OSRC_QUOTA_FILE"; }

else rm -f "$tmp"; die "limits clear: jq failed"; fi

mv -f "$_otmp" "$owner" 2>/dev/null || rm -f "$_otmp" 2>/dev/null

mv "$lock" "$corpse" 2>/dev/null && rm -rf "$corpse" 2>/dev/null

mv "$lock" "$corpse" 2>/dev/null && rm -rf "$corpse" 2>/dev/null

mkdir) rm -f "$1.lock/owner" 2>/dev/null; rmdir "$1.lock" 2>/dev/null || true ;;

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$dir/owner.json" 2>/dev/null || true; rmdir "$dir" 2>/dev/null || true

rm -f "$tmp" 2>/dev/null || true

[Credential-related source omitted]

rm -f "$dir/owner.json" 2>/dev/null || return 1

[ -n "${_OBLIGATION_GUARD_EXIT:-}" ] && eval "$_OBLIGATION_GUARD_EXIT"

[ -n "${_OBLIGATION_GUARD_INT:-}" ] && eval "$_OBLIGATION_GUARD_INT"

[ -n "${_OBLIGATION_GUARD_TERM:-}" ] && eval "$_OBLIGATION_GUARD_TERM"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$out_file" 2>/dev/null || true

rm -f "$out_file" 2>/dev/null || true

[Credential-related source omitted]

_state_sync "$tmp" || { rm -f "$tmp"; return 1; }

mv "$tmp" "$OSRC_FLEET_SNAPSHOT" || { rm -f "$tmp"; return 1; }

rm -rf -- "$tree"

_state_sync "$tmp" || { rm -f "$tmp"; rmdir "$pending" 2>/dev/null || true; return 1; }

rm -f "$owner" 2>/dev/null || return 1

_state_sync "$tmp" || { rm -f "$tmp"; return 1; }

mv "$tmp" "$file" || { rm -f "$tmp"; return 1; }

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

refresh_models() {   _mkdir_private "$OSRC_HOME" || true   have curl || { echo "curl needed to refresh the model catalog" >&2; return 1; }

_mkdir_private "$OSRC_HOME" || true   have curl || { echo "curl needed to refresh the model catalog" >&2; return 1; }   local _tmp; _tmp="$(mktemp "$OSRC_HOME/.models.XXXXXX" 2>/dev/null || mktemp)"

have curl || { echo "curl needed to refresh the model catalog" >&2; return 1; }

local _tmp; _tmp="$(mktemp "$OSRC_HOME/.models.XXXXXX" 2>/dev/null || mktemp)"   if curl -fsS -m "${OSRC_CURL_TIMEOUT:-30}" "https://openrouter.ai/api/v1/models" -o "$_tmp" 2>/dev/null; then     jq -e '.data' "$_tmp" >/dev/null 2>&1 && mv -

if curl -fsS -m "${OSRC_CURL_TIMEOUT:-30}" "https://openrouter.ai/api/v1/models" -o "$_tmp" 2>/dev/null; then

jq -e '.data' "$_tmp" >/dev/null 2>&1 && mv -f "$_tmp" "$OSRC_MODELS_JSON" && echo "refreshed $OSRC_MODELS_JSON" || { rm -f "$_tmp"; echo "refresh failed: invalid JSON" >&2; return 1; }

rm -f "$OSRC_MODELS_JSON.tmp"; echo "model refresh failed (offline?)" >&2; return 1

or_credits() {   # best-effort OpenRouter credit line; never fatal   have curl && have jq || return 0

have curl && have jq || return 0

_or_load_key 2>/dev/null || return 0   _curl_with_auth "$OPENROUTER_API_KEY" -fsS -m "${OSRC_CURL_TIMEOUT:-30}" "https://openrouter.ai/api/v1/key" 2>/dev/null \     | jq -r '.data | "limit=\(.limit // "n/a") usage=\(.usage // 0) remaining=\

[Credential-related source omitted]

[Credential-related source omitted]

_or_gen_cost() {   local gid="$1"; [ -n "$gid" ] || return 0   have curl && have jq || return 0

local gid="$1"; [ -n "$gid" ] || return 0   have curl && have jq || return 0   _or_load_key 2>/dev/null || return 0

have curl && have jq || return 0

for i in 1 2 3 4 5; do     c="$(_curl_with_auth "$OPENROUTER_API_KEY" -fsS -m "${OSRC_CURL_TIMEOUT:-30}" \          "https://openrouter.ai/api/v1/generation?id=$gid" 2>/dev/null \

[Credential-related source omitted]

[Credential-related source omitted]

"https://openrouter.ai/api/v1/generation?id=$gid" 2>/dev/null \

if mv -f "$tmp" "$f" 2>/dev/null; then rewritten=$((rewritten+1)); else rm -f "$tmp" 2>/dev/null; failed=$((failed+1)); echo "  (rename failed for $f — left unchanged)" >&2; fi

rm -f "$tmp" 2>/dev/null; failed=$((failed+1)); echo "  (could not rewrite $f — left unchanged)" >&2

rm -f "$OSRC_HOME/.rl.tmp.$$" 2>/dev/null

jq --arg cmd "$(_tap_statusline_cmd)" '.statusLine = {type:"command", command:$cmd}' "$settings" > "$settings.tmp.$$" 2>/dev/null          && mv -f "$settings.tmp.$$" "$settings" || { rm -f "$settings.tmp.$$"; die "tap: could not update $se

&& mv -f "$settings.tmp.$$" "$settings" || { rm -f "$settings.tmp.$$"; die "tap: could not update $settings"; }

[ -s "$settings.tmp.$$" ] && mv -f "$settings.tmp.$$" "$settings" || { rm -f "$settings.tmp.$$"; die "tap: could not update $settings"; }

rm -f "$stash" "$OSRC_HOME/tap-original-statusline" "$OSRC_HOME/rate-limits.json" 2>/dev/null   # drop the frozen capture so it can't shadow a fresh source

[Credential-related source omitted]

refresh_benchmarks() {   _mkdir_private "$OSRC_HOME" || true   have curl || { echo "curl needed to refresh benchmarks" >&2; return 1; }

_mkdir_private "$OSRC_HOME" || true   have curl || { echo "curl needed to refresh benchmarks" >&2; return 1; }   have jq || { echo "jq needed to refresh benchmarks" >&2; return 1; }

have curl || { echo "curl needed to refresh benchmarks" >&2; return 1; }

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

local _tmp; _tmp="$(mktemp "$OSRC_HOME/.bench.XXXXXX" 2>/dev/null)" || { rm -f "$_hdr"; echo "cannot create temp file" >&2; return 1; }

local _tmp; _tmp="$(mktemp "$OSRC_HOME/.bench.XXXXXX" 2>/dev/null)" || { rm -f "$_hdr"; echo "cannot create temp file" >&2; return 1; }   if curl -fsS -m "${OSRC_CURL_TIMEOUT:-30}" -H @"$_hdr" \     "https://openrouter.ai/api/v1/benchmarks?

if curl -fsS -m "${OSRC_CURL_TIMEOUT:-30}" -H @"$_hdr" \

"https://openrouter.ai/api/v1/benchmarks?source=artificial-analysis&task_type=intelligence&max_results=100" \

mv -f "$_tmp" "$OSRC_BENCH_JSON" || { rm -f "$_tmp" "$_hdr"; echo "failed to write benchmark cache" >&2; return 1; }

rm -f "$_tmp"

echo "benchmark refresh failed (response was not valid JSON with .data array)" >&2; rm -f "$_hdr"; return 1

rm -f "$_tmp"

echo "benchmark refresh failed (offline? no OR key?)" >&2; rm -f "$_hdr"; return 1

rm -f "$_hdr"

#!/bin/bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-c model_provider=openrouter   -c 'model_providers.openrouter.name="OpenRouter"'   -c 'model_providers.openrouter.base_url="https://openrouter.ai/api/v1"'

-c 'model_providers.openrouter.name="OpenRouter"'   -c 'model_providers.openrouter.base_url="https://openrouter.ai/api/v1"'   -c 'model_providers.openrouter.env_key="OPENROUTER_API_KEY"'

-c 'model_providers.openrouter.base_url="https://openrouter.ai/api/v1"'

[Credential-related source omitted]

#!/bin/bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

export ANTHROPIC_BASE_URL="https://openrouter.ai/api"

[Credential-related source omitted]

[Credential-related source omitted]

cd "$WORKDIR" || exit 1 echo "==> Claude Code on OpenRouter model: $MODEL" echo "==> Endpoint: $ANTHROPIC_BASE_URL/v1/messages   cwd: $WORKDIR"

echo "==> Claude Code on OpenRouter model: $MODEL" echo "==> Endpoint: $ANTHROPIC_BASE_URL/v1/messages   cwd: $WORKDIR" exec claude

echo "==> Endpoint: $ANTHROPIC_BASE_URL/v1/messages   cwd: $WORKDIR"

#!/usr/bin/env bash

find "$SCRIPT_DIR" -maxdepth 1 -type d \( -name '.test-*' -o -name '.conformance-run-*' \) -exec rm -rf {} + 2>/dev/null

_home="$(mktemp -d)" || { rm -f "$out_file" 2>/dev/null; _suite_rc=127; return 127; }

rm -f "$out_file" "$pid_file" "$expired" 2>/dev/null

rm -rf "$_home" 2>/dev/null

rm -rf "$_conf_tmux_dir"

trap '_par_sweep; _conf_tmux_end; rm -rf "$_par_dir"; exit 130' INT

rm -rf "$_par_dir"

FIX="$(mktemp -d)"; trap 'rm -rf "$FIX"' EXIT

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

rm -f "$TMP/benchmarks.json"

[ -n "$_advise_real_limits" ] && eval "$_advise_real_limits"   # restore real limits reader

#!/usr/bin/env bash

T="$(mktemp -d)"; export OSRC_HOME="$T"; trap 'rm -rf "$T"' EXIT

rm -f "$T/catalogs/dv.raw.json"

rm -f "$OSRC_MODELS_JSON" "$OSRC_BENCH_JSON"

rm -rf "$fb" "$marker"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

#!/usr/bin/env python3

[Credential-related source omitted]

def _free_port():     import socket     s = socket.socket(); s.bind(("127.0.0.1", 0)); p = s.getsockname()[1]; s.close(); return p

s = socket.socket(); s.bind(("127.0.0.1", 0)); p = s.getsockname()[1]; s.close(); return p

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

OSRC_SHIM_UPSTREAM="http://127.0.0.1:%d/v1" % mock_port,

for _ in range(40):         try:             urllib.request.urlopen("http://127.0.0.1:%d/health" % shim_port, timeout=1); ok = True; break

try:             urllib.request.urlopen("http://127.0.0.1:%d/health" % shim_port, timeout=1); ok = True; break         except Exception:

urllib.request.urlopen("http://127.0.0.1:%d/health" % shim_port, timeout=1); ok = True; break

[Credential-related source omitted]

[Credential-related source omitted]

cenv.update(ANTHROPIC_BASE_URL="http://127.0.0.1:%d" % shim_port,

[Credential-related source omitted]

#!/bin/bash

trap 'rm -rf "$TMPDIR_AD" 2>/dev/null' EXIT

local rc; rc="$(cat "$_rcf" 2>/dev/null || echo 1)"; rm -f "$_rcf"

local rc; rc="$(cat "$_rcf" 2>/dev/null || echo "SKIP-TTY")"; rm -f "$_rcf"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-bgprov.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'kill "${live_pid:-}" 2>/dev/null || true; rm -rf "$FIXTURE"' EXIT

rm -rf "$OSRC_JOBS/term-pb"

rm -rf "$OSRC_JOBS/term-blk"

rm -rf "$OSRC_JOBS/term-done"

kill "$live_pid" 2>/dev/null; live_pid=""; rm -rf "$OSRC_JOBS/live-blk"

rm -rf "$OSRC_JOBS/loc-c-new"

rm -rf "$OSRC_JOBS/loc-fr-old"

rm -rf "$OSRC_JOBS/loc-fr-new"

rm -rf "$OSRC_JOBS/loc-recycled"

rm -rf "$OSRC_JOBS/unproven-blk"

rm -rf "$OSRC_JOBS/corrupt-$shape"

kill "$live_pid" 2>/dev/null; live_pid=""; rm -rf "$OSRC_JOBS/recycled-pid"

rm -rf "$OSRC_JOBS/crlf-status"

rm -f "$SNAP"

#!/usr/bin/env bash

#!/usr/bin/env bash

T="$(mktemp -d)"; export OSRC_HOME="$T"; trap 'rm -rf "$T"' EXIT

#!/usr/bin/env bash

eval "$(sed -n '/^_devin_model_for() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_is_transport_failure() {/,/^}/p' "$SRC")"

real_402='API Error: 402 This request requires more credits, or fewer max_tokens. You requested up to 32000 tokens, but can only afford 9090. To increase, visit https://openrouter.ai/settings/credits and upgrade to a paid account'

_is_transport_failure "$real_402" 1 && ok "_is_transport_failure classifies the real OpenRouter 402 string" || bad "real 402 string not classified as transport failure"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$OSRC_HOME"' EXIT

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

# version-gate the --plan read-only guarantee, and dispatch correctly through a behavioral test. # # Cline (https://github.com/cline/cline) is an engine lane like droid/cursor/hermes/warp:

# # Cline (https://github.com/cline/cline) is an engine lane like droid/cursor/hermes/warp: # -m passes through VERBATIM (cline owns its provider/model catalog); billing is the user's ClinePass

# Cline (https://github.com/cline/cline) is an engine lane like droid/cursor/hermes/warp:

trap 'rm -rf "$TMP"' EXIT

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -f "$CAPTURE"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$XDG_CONFIG_HOME/outsourcerer/trusted-lanes.json"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP" "$OSRC_HOME"; }

out="$( ( cd "$TMP"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; _cloud_disclose "local" "llama3" "do thing" ) 2>&1 )"

out="$( ( cd "$TMP"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; _cloud_disclose "ccor" "gpt-4o" "summarize repo" ) </dev/null 2>&1 )"; rc=$?

[Credential-related source omitted]

[Credential-related source omitted]

out="$( ( cd "$TMP/envscope"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; OSRC_CLOUD_ACK=1; _cloud_disclose "ccor" "gpt-4o" "task" ) 2>&1 )"; rc=$?

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

out="$( ( cd "$TMP/deepscope"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; OSRC_CLOUD_ACK=1; _cloud_disclose "ccor" "gpt-4o" "task" ) 2>&1 )"; rc=$?

[Credential-related source omitted]

[Credential-related source omitted]

rm -rf "$TMP/envscope" "$TMP/deepscope"

[Credential-related source omitted]

( unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; _bg_cloud_preack run -m glm "task" </dev/null >/dev/null 2>&1 )

( unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; PROVIDER=local; _bg_cloud_preack run -m ollama:llama3 "task" </dev/null >/dev/null 2>&1 )

rm -f "$TMP/launched"

( cd "$TMP"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; cmd_bg run -m glm "task" </dev/null >/dev/null 2>&1 ); rc=$?

rm -f "$TMP/launched"

out="$( cd "$TMP"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; cmd_bg run --cloud-ack -m glm "task" </dev/null 2>/dev/null )"; rc=$?

( unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; _bg_cloud_preack run -m glm --cloud-ack "task" </dev/null >/dev/null 2>&1 )

( unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; _bg_cloud_preack run -m glm -- --cloud-ack </dev/null >/dev/null 2>&1 )

( unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; _bg_cloud_preack run -m glm "just do the thing" </dev/null >/dev/null 2>&1 )

[Credential-related source omitted]

out="$( ( cd "$TMP/bogusdepth"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; OSRC_CLOUD_ACK=1 OSRC_SECRET_SCAN_DEPTH=bogus _cloud_disclose "ccor" "gpt-4o" "task" ) 2>&1 )"; rc=$?

[Credential-related source omitted]

rm -rf "$TMP/bogusdepth"

( cd "$TMP/permnoise"; unset OSRC_CLOUD_ACK OSRC_CLOUD_ACKED; rm -f "$OSRC_HOME/cloud-consent"; OSRC_CLOUD_ACK=1 _cloud_disclose "ccor" "gpt-4o" "task" ) >/dev/null 2>&1; rc=$?

rm -rf "$TMP/permnoise"

rm -f "$OSRC_HOME/cloud-consent"

[Credential-related source omitted]

rm -f "$OSRC_HOME/cloud-consent"

rm -f "$OSRC_HOME/cloud-consent"

#!/usr/bin/env bash

trap 'rm -rf "$OSRC_HOME"' EXIT

[Credential-related source omitted]

#!/bin/bash

cleanup() { rm -rf "$TMP"; }

#!/bin/bash

cleanup() { rm -rf "$TMP"; }

cfg $'[windows]\nsandbox = "elevated; rm -rf /"\n'

cfg $'[windows]\nsandbox_private_desktop = true\n' eq "sandbox_private_desktop is not sandbox" "$(read1)" "" cfg $'[mcp_servers.x]\ncommand = "evil"\n[model_providers.p]\nbase_url = "http://x"\n[windows]\nsandbox = "elevated"\n'

eq "sandbox_private_desktop is not sandbox" "$(read1)" "" cfg $'[mcp_servers.x]\ncommand = "evil"\n[model_providers.p]\nbase_url = "http://x"\n[windows]\nsandbox = "elevated"\n' eq "nothing else re-imported" "$(read1)" "sandbox=elevated"

cfg $'[mcp_servers.x]\ncommand = "evil"\n[model_providers.p]\nbase_url = "http://x"\n[windows]\nsandbox = "elevated"\n'

rm -f "$CH/config.toml"

rm -rf "$HOME/.codex"; mkdir -p "$TMP/up/.codex"; printf '[windows]\nsandbox = "elevated"\n' > "$TMP/up/.codex/config.toml"

rm -f "$CH/config.toml"; _codex_win_sandbox_args

#!/usr/bin/env bash

eval "$(sed -n '/^'"${fn}"'() {/,/^}/p' "$CONF")"

cleanup() { rm -rf "$TMP"; }

case "$KTBODY" in _suite_kill_tree_impl*) eval "$KTBODY" ;; *) echo "FAIL: could not rename _suite_kill_tree for recording"; exit 1 ;; esac

rm -f "$TMP/rep"

rm -f "$TMP/mk-ran"

#!/usr/bin/env bash

trap 'rm -rf "$OSRC_HOME"' EXIT

rm -f "$OSRC_MODE_FILE"

#!/usr/bin/env bash

trap 'rm -f "$TMP"; rm -rf "$FIX"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-attrib.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP" 2>/dev/null' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$FAKE_ROOT"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TEST_ROOT"' EXIT

eval "$(sed -n '/^_mtime() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_timeout() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_elapsed_secs() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_pid_descends_from() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_pid_owned_by_live_job() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_pid_start_valid() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_pid_start_identity() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_pid_start_projection() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_pid_start_file_match() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_pid_owned_by_dead_job() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_process_rows() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_orphan_pids() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_zombie_preflight() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_is_free_model() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_free_own_quota() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_probe_classify() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_probe_pick() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_free_probe() {/,/^}/p' "$SRC")"

rm -rf "$OSRC_JOBS/live-job"

eval "$(sed -n '/^_pid_start_file_match() {/,/^}/p' "$SRC")"

rm -rf "$OSRC_JOBS/ow-fr"

rm -rf "$OSRC_JOBS/ow-c"

rm -rf "$OSRC_JOBS/ow-rec"

#!/usr/bin/env bash

TD="$(mktemp -d "${TMPDIR:-/tmp}/osrc-glock.XXXXXX")" || { echo "FAIL: mktemp"; exit 1; }; trap 'rm -rf "$TD"' EXIT

rm -rf "$SKH"; rm -f "$TD"/held-* "$TD"/release-*

rm -f "$TD"/held-* "$TD"/release-*

rm -rf "$SKH"; mkdir -p "$LOCK/holders"

rm -rf "$SKH"; mkdir -p "$LOCK/holders"

rm -rf "$SKH" "$LOCK.mx"; mkdir -p "$SKH" "$LOCK.mx"

rm -rf "$SKH"; mkdir -p "$LOCK"; touch -t 202601010000 "$LOCK"

rm -rf "$SKH"; mkdir -p "$LOCK"

rm -rf "$SKH"

rm -rf "$SKH"; rm -f "$TD"/held-* "$TD"/release-*

QUEUED='touch "$1/lockwait"; sleep 6; rm -f "$1/lockwait"; echo "hello from the model"; sleep 1; echo "OSRC::DONE"'

rm -rf "$SKH"; rm -f "$TD"/held-* "$TD"/release-*

rm -rf "$SKH"; mkdir -p "$LOCK"

rm -rf "$SKH"; rm -f "$TD"/held-* "$TD"/release-* "$TD"/reenter

rm -rf "$SKH"

rm -rf "$SKH"

rm -rf "$SKH"; mkdir -p "$TD/err"

#!/usr/bin/env bash

cleanup() { for k in $kids; do kill -KILL "$k" 2>/dev/null; done; rm -rf "$TMP"; }

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

rm -f "$pf"

rm -f "$pf"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

FX="$TMP/fx"; mkdir -p "$FX" printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' > "$FX/daily"

printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' > "$FX/daily"

printf '%s' "$_adv" | grep -qE 'swe-1-7|kimi-k3|-m swe|-m kimi' && bad "structure: plan-quota advice names a Devin plan model" || ok "structure: plan-quota advice names no Devin plan model" grep -q 'Check Devin.*own plan with: devin usage' 

grep -q 'https://app.devin.ai/settings/usage' "$SRC" && ok "hint: dashboard URL is the pointer" || bad "hint: dashboard URL missing"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

[ -n "${FAKE_DEVIN_SLEEP:-}" ] && sleep "$FAKE_DEVIN_SLEEP" if [ -f "$FAKE_DEVIN_REFUSE" ] && grep -qx -- "$m" "$FAKE_DEVIN_REFUSE"; then   printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin

if [ -f "$FAKE_DEVIN_REFUSE" ] && grep -qx -- "$m" "$FAKE_DEVIN_REFUSE"; then   printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' >&2   exit 1

printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' >&2

FX="$TMP/fx"; mkdir -p "$FX" printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' > "$FX/daily"

printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' > "$FX/daily"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

rm -f "$HOME/.local/share/devin/cli/logs"/devin_*.log

rm -rf "$HOME/.local/share/devin"

rm -f "$HOME/.local/share/devin/cli/logs"/devin_*.log

sig_err="$(cat /tmp/rr_sig 2>/dev/null)"; rm -f /tmp/rr_sig

sig_logs_err="$(cat /tmp/rl_sig 2>/dev/null)"; rm -f /tmp/rl_sig

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-droid.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

rm -f "$lockdir"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

[Credential-related source omitted]

[Credential-related source omitted]

'context length exceeded'   'connection timed out'   'error sending request for url (https://openrouter.ai/api/v1/responses)'

'connection timed out'   'error sending request for url (https://openrouter.ai/api/v1/responses)'   'stream disconnected before completion'

'error sending request for url (https://openrouter.ai/api/v1/responses)'

'code 503 must remain an application-level response'   'operation timed out regression test failed'               # not 'operation timed out after' / no curl   'socket hang up test failed'                               # not line-anchored '

'operation timed out regression test failed'               # not 'operation timed out after' / no curl   'socket hang up test failed'                               # not line-anchored 'socket hang up$'   'could not resolve host test case mu

rm -f "$HOME/.claude_call_count"; export CLAU_ERR_1='HTTP 429 rate limit' CLAU_RC_1=1

rm -f "$HOME/.claude_call_count"; export CLAU_ERR_1='npm test failed' CLAU_RC_1=1

rm -f "$HOME/.claude_call_count"; export CLAU_ERR_1='Authentication required: 401' CLAU_RC_1=1

rm -f "$HOME/.claude_call_count"; export CLAU_ERR_1='model_not_found: unknown model' CLAU_RC_1=1

rm -f "$HOME/.claude_call_count"; export CLAU_ERR_1='' CLAU_RC_1=1

rm -f "$HOME/.claude_call_count"; export CLAU_ERR_1='' CLAU_RC_1=1

rm -f "$HOME/.codex_call_count"; export CODEX_ERR_1='HTTP 429 rate limit' CODEX_RC_1=1

rm -f "$HOME/.codex_call_count"; export CODEX_ERR_1='npm test failed' CODEX_RC_1=1

rm -f "$HOME/.codex_call_count"; export CODEX_ERR_1='HTTP 403 Forbidden' CODEX_RC_1=1

rm -f "$HOME/.codex_call_count"; export CODEX_ERR_1='model_not_found: no such model' CODEX_RC_1=1

rm -f "$HOME/.codex_call_count"; export CODEX_ERR_1='' CODEX_RC_1=1

[Credential-related source omitted]

#!/usr/bin/env bash

# A caller that arms `trap 'rm -rf "$fixture"' EXIT` before sourcing outsourcerer.sh must

trap 'rm -rf "$BASE"' EXIT

*)    trap "rm -rf \"$sb/fx\"; echo fired >> \"$sb/count\"" EXIT ;;

fx_gone "$SB" && ok "chain: caller's rm -rf fixture fired" || bad "chain: fixture leaked at $SB/fx"

exp='trap -- '"'"'if [ "${BASH_SUBSHELL:-0}" -eq 0 ]; then _devin_skills_lock_release 2>/dev/null; rm -f "$OSRC_HOME/with-mcp-$$.json" "$OSRC_HOME/.hdr.$$."* 2>/dev/null; fi'"'"' EXIT'

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-explain.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

TMP="$(mktemp -d "$PWD/.test-external-opt-in.XXXXXX")"; TEST_TMP="$TMP"; trap 'rm -rf "$TEST_TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d "$PWD/.test-external.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$E"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

lib() { OSRC_SOURCED=1 bash -c 'src="$1"; code="$2"; set --; . "$src" >/dev/null 2>&1; eval "$code"' bash "$SRC" "$1"; }

# ---------------------------------------------------------------- CLI: add / ls / rm / clear

out="$(run exclude rm OPUS 2>&1)"

grep -qx opus "$OSRC_HOME/exclude" && bad "rm left the entry: $out" || { grep -qx fable "$OSRC_HOME/exclude" && ok "exclude rm removes one entry (case-insensitive) and keeps the rest" || bad "rm dropped other entries"; }

out="$(OSRC_EXCLUDE_MODELS=sol run exclude rm sol 2>&1)"

printf '%s' "$out" | grep -q 'still excluded by the OSRC_EXCLUDE_MODELS' && ok "exclude rm warns when the env var still excludes it" || bad "rm env note: $out"

if [ "$rc" != 0 ] && printf '%s' "$o" | grep -q "you excluded" && printf '%s' "$o" | grep -q 'exclude rm fable' && [ ! -s "$CALLS" ]; then

xh() { local d="$TMP/xh-$1"; rm -rf "$d"; mkdir -p "$d"; printf '%s' "$d"; }

sx() { OSRC_SOURCED=1 bash -c '. "$1" >/dev/null 2>&1; eval "$2"' bash "$SRC" "$1" 2>&1; }

#!/usr/bin/env bash

trap 'for p in $SLEEPERS; do kill "$p" 2>/dev/null; done; rm -rf "$TMP"' EXIT

rm -f "$TMP/landed"; _ff_reconcile pendingland >/dev/null

rm -f "$TMP/landed" "$TMP/landargs" "$TMP/donechecks"

rm -f "$TMP/donefail-t2"

rm -f "$TMP"/outcomes/*

rm -f "$TMP/dispatch-refuse-t1"

rm -f "$TMP"/outcomes/* "$TMP/landed"

rm -f "$TMP"/outcomes/*

rm -f "$TMP/landed"

rm -f "$TMP"/outcomes/* "$TMP/landed" "$TMP/launches"

rm -f "$TMP/slow-c1-t1"

for j in $(_task_list l1 | jq -r '.[] | .job | select(. != "")'); do echo done > "$OSRC_JOBS/$j/status"; done; rm -f "$TMP/outcomes/t1"

rm -f "$TMP/landed"

rm -f "$TMP/landed"

rm -f "$TMP/landed"

rm -f "$TMP/landed"

rm -f "$TMP/lasttxt-t5"; setlt v2 t5 "VERDICT: PASS" 3

( cmd_task done t5 --force --plan v3 >/dev/null 2>&1 ); rm -f "$TMP/landed"

( cmd_plan_run vd11 --interval 1 >/dev/null 2>&1 ); rm -f "$TMP/nolast-t1"

rm -f "$TMP/outcomes/t1"

unset -f _model_excluded; rm -f "$TMP/outcomes/t1"

rm -f "$TMP/landfail-t1"

_task_update ls1 t6 '.state = "running" | .land_attempts = 1' >/dev/null; rm -f "$TMP/landed"

touch "$TMP/landfail-t4"; rm -f "$TMP/landed"

rm -f "$TMP/landfail-t4"; ( cmd_task release t6 --plan ls3 --answer "land again" >/dev/null 2>&1 )

mkplan tc 't1||scout|1'; rm -f "$TMP/count-tc-t1"

out="$( cmd_plan_run mg --interval 1 2>&1 )"; rm -f "$TMP/outcomes/t1"

for j in $(_task_list gt1 | jq -r '.[] | .job | select(. != "")'); do echo done > "$OSRC_JOBS/$j/status"; done; rm -f "$TMP/outcomes/t3"

: > "$TMP/donechecks"; rm -f "$TMP/landed"

rm -f "$TMP/landargs"

rm -f "$TMP/landargs"; mkplan su2 't1||ship|1'

unset -f _land_usage; rm -f "$TMP/landargs"; mkplan su3 't1||ship|1'

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash printf '%s\n' "\$*" > "$TMP/gh.args" echo "https://github.com/example/repo/pull/7"

printf '%s\n' "\$*" > "$TMP/gh.args" echo "https://github.com/example/repo/pull/7" EOF

echo "https://github.com/example/repo/pull/7"

[ "$rc" = 0 ] && [ "$(git -C "$TMP/origin.git" rev-parse refs/heads/outsourcerer/j-t16 2>/dev/null)" = "$h16" ] \   && grep -q -- '--base main' "$TMP/gh.args" && grep -q -- '--head outsourcerer/j-t16' "$TMP/gh.args" \   && [ "$(tfield t16 .

&& grep -q -- '--base main' "$TMP/gh.args" && grep -q -- '--head outsourcerer/j-t16' "$TMP/gh.args" \   && [ "$(tfield t16 .pr)" = "https://github.com/example/repo/pull/7" ] && [ "$(git -C "$REPO" rev-parse main)" = "$m" ] \   && [ "$(efiel

&& [ "$(tfield t16 .pr)" = "https://github.com/example/repo/pull/7" ] && [ "$(git -C "$REPO" rev-parse main)" = "$m" ] \

rm -rf "$REPO/local.cfg" "$REPO/notes"

[Credential-related source omitted]

mk_task t29 ship "" "remove leak"; git -C "$(wt_of t29)" rm -q leak.txt; git -C "$(wt_of t29)" commit -qm "remove leaked key"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

trap "[ -n \"${KEEP:-}\" ] || rm -rf \"$TMP\"" EXIT

check() { if eval "$2"; then ok "$1"; else bad "$1"; fi; }

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

check() { if eval "$2"; then ok "$1"; else bad "$1"; fi; }

check "a done check that writes the task itself (track C style) does not deadlock and is honored" \   "[ $rc -eq 0 ] && [ \"\$(jq -r '.state + \"|\" + .evidence + \"|\" + .head_sha' \"$OSRC_HOME/plans/alpha/tasks/$t5.json\")\" = 'done|/x/ev

"[ $rc -eq 0 ] && [ \"\$(jq -r '.state + \"|\" + .evidence + \"|\" + .head_sha' \"$OSRC_HOME/plans/alpha/tasks/$t5.json\")\" = 'done|/x/evidence.json|feed' ]" L "_task_update alpha $t5 '.state = \"running\" | .landed = true | .landed_into =

L "_task_update alpha $t5 '.state = \"running\" | .landed = true | .landed_into = \"main\" | .landed_sha = \"0123456789abcdef\" | .pr = \"https://example.invalid/pr/1\"'"

out="$(O task show "$t5" 2>&1)" check "task show displays landed status and PR when track C set them" \   "printf '%s' \"\$out\" | grep -q 'landed:   yes into main at 0123456789ab' && printf '%s' \"\$out\" | grep -q 'pr:       https://examp

check "task show displays landed status and PR when track C set them"    "printf '%s' \"\$out\" | grep -q 'landed:   yes into main at 0123456789ab' && printf '%s' \"\$out\" | grep -q 'pr:       https://example.invalid/pr/1'"

"printf '%s' \"\$out\" | grep -q 'landed:   yes into main at 0123456789ab' && printf '%s' \"\$out\" | grep -q 'pr:       https://example.invalid/pr/1'"

# ---- plan rm / plan run delegation

out="$(O plan rm alpha 2>&1)"; rc=$?

check "plan rm refuses while work is underway" "[ $rc -ne 0 ] && printf '%s' \"\$out\" | grep -q 'still has work underway'"

O plan rm beta >/dev/null 2>&1

check "plan rm removes an idle plan" "[ ! -d \"$OSRC_HOME/plans/beta\" ]"

rm -rf "$NOGIT"

rm -rf "$LK"

local b r; b="$(_task_new r3 '{"title":"build","shape":"ship"}')"   _task_update r3 "$b" '.state="done" | .head_sha="feedface"' || exit 1   r="$(_task_new r3 "$(jq -nc --arg b "$b" '{title:"review",deps:[$b]}')")"

_task_update r3 "$b" '.state="done" | .head_sha="feedface"' || exit 1   r="$(_task_new r3 "$(jq -nc --arg b "$b" '{title:"review",deps:[$b]}')")"   _task_update r3 "$r" '.state="running" | .require_verdict=true' || exit 1

r="$(_task_new r3 "$(jq -nc --arg b "$b" '{title:"review",deps:[$b]}')")"

OSRC_PLAN_LOCK_TRIES=1 O plan rm locked-rm >/dev/null 2>&1

command rm "$@"

(cmd_plan rm remove-atomic) >/dev/null 2>&1 || exit 1

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

rmc() { for c in "$@"; do rm -f "$FB/$c"; done; hash -r; }   # hash -r: bash caches lookups, a removed fake would still read as present

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-fanout-json.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

[Credential-related source omitted]

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-fixes.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

check_redacted "HTTP Basic-Auth URL"    "db at https://admin:hunter2pw@h.example/x" "admin:hunter2pw"

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

#!/usr/bin/env bash

trap 'rm -rf "$FIXTURE"' EXIT

rm -f "$OSRC_CLAUDE_SESSIONS_DIR"/*.json

[Credential-related source omitted]

rm -f "$OSRC_CLAUDE_SESSIONS_DIR"/*.json

eval "$saved_pid_start_identity"

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$OSRC_CLAUDE_SESSIONS_DIR"/*.json

rm -f "$FIXTURE/claude-called"

candidates="$(jq -nc 'range(0;25) | {session_id:("candidate-" + tostring),state:"idle"}' | _fleet_show_candidates)"

#!/usr/bin/env bash

trap 'kill "${live_pid:-}" 2>/dev/null || true; rm -rf "$FIXTURE"' EXIT

eval "$saved_have"

rm -f "$model_marker"

rm -f "$model_marker"

eval "$real_fleet_name_model"

eval "$saved_have"

#!/usr/bin/env bash

trap 'kill "${live_pid:-}" 2>/dev/null || true; rm -rf "$FIXTURE"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

rm -f "$OSRC_HOME/models.local"

grep -q 'rm -f "$(_catalog_path gm)"' "$SRC" && ok "a refused model drops the cached catalog so the next run re-reads agy models" || bad "refused model does not invalidate the gm cache"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

grep -qF 'rc=124' <<<"$(awk '/timeout waiting for response/,/rm -f "\$_aerr"/' "$SRC")" \

#!/usr/bin/env bash

trap '[ -n "$SRV" ] && kill "$SRV" 2>/dev/null; rm -rf "$TMP"' EXIT

start_bot() { rm -f "$TMP/port"; python3 "$TMP/bot.py" "$TMP" "$1" "$2" 2>"$TMP/bot.err" & SRV=$!

stop_bot() { kill "$SRV" 2>/dev/null; wait "$SRV" 2>/dev/null; SRV=""; } gb() { ( cd "$TMP/work" && OSRC_CLOUD_ACK=1 OSRC_NO_AUTODETACH=1 OSRC_GROKBOT_POLL=1 OSRC_GROKBOT_TIMEOUT="${TO:-30}" \          GROKBOT_WEBHOOK_URL="http://127.0.0.1:

gb() { ( cd "$TMP/work" && OSRC_CLOUD_ACK=1 OSRC_NO_AUTODETACH=1 OSRC_GROKBOT_POLL=1 OSRC_GROKBOT_TIMEOUT="${TO:-30}"           GROKBOT_WEBHOOK_URL="http://127.0.0.1:$(cat "$TMP/port")/hook" GROKBOT_WEBHOOK_KEY="${KEYUSE:-crsr_test}"

GROKBOT_WEBHOOK_URL="http://127.0.0.1:$(cat "$TMP/port")/hook" GROKBOT_WEBHOOK_KEY="${KEYUSE:-crsr_test}" \

out="$( cd "$TMP/work" && OSRC_CLOUD_ACK=1 OSRC_NO_AUTODETACH=1 GROKBOT_WEBHOOK_URL= GROKBOT_WEBHOOK_KEY= "$SRC" --provider grokbot run "x" 2>&1 )"; rc=$? [ "$rc" -ne 0 ] && printf '%s' "$out" | grep -q "GROKBOT_WEBHOOK_URL" && ok "missing 

[ "$rc" -ne 0 ] && printf '%s' "$out" | grep -q "GROKBOT_WEBHOOK_URL" && ok "missing setup names the two settings" || no "missing setup rc=$rc" out="$( cd "$TMP/work" && OSRC_CLOUD_ACK=1 OSRC_NO_AUTODETACH=1 GROKBOT_WEBHOOK_URL=http://examp

out="$( cd "$TMP/work" && OSRC_CLOUD_ACK=1 OSRC_NO_AUTODETACH=1 GROKBOT_WEBHOOK_URL=http://example.com/h GROKBOT_WEBHOOK_KEY=k "$SRC" --provider grokbot run "x" 2>&1 )"; rc=$?

#!/usr/bin/env bash

[Credential-related source omitted]

cleanup() { rm -rf "$TMP"; }

rm -f "$PWNED"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

if grep -q 'with-mcp-.*\$\$' "$SRC" && grep -q 'rm -f .*with-mcp' "$SRC" && grep -qE 'trap .*rm -f .*with-mcp.* EXIT|trap .*_osrc_engine_exit.* EXIT' "$SRC"; then ok "mcp temp file has an EXIT trap rm"; else bad "mcp temp file missing EXIT 

#!/bin/bash

trap 'rm -rf "$TMPDIR_ISOL" 2>/dev/null' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true   # clean slate: no claim from earlier blocks

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true   # no leader claim may leak in from earlier blocks

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

[Credential-related source omitted]

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true   # no leader claim may leak in from earlier blocks

#!/usr/bin/env bash

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TEST_TMP"' EXIT

rm -rf "$OSRC_HEARTBEAT/leader" "$OSRC_HEARTBEAT/.election"

rm -rf "$OSRC_HEARTBEAT/leader" "$OSRC_HEARTBEAT/.election"

rm -rf "$OSRC_HEARTBEAT/leader" "$OSRC_HEARTBEAT/.election"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

rm -rf "$OSRC_HEARTBEAT/leader" "$OSRC_HEARTBEAT/.election"

rm -rf "$OSRC_HEARTBEAT/leader" "$OSRC_HEARTBEAT/.election"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

#!/usr/bin/env bash

TMP="$(mktemp -d "$PWD/.test-hb-reclaim.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

rm -rf "$OSRC_HEARTBEAT/leader"; mkdir -p "$OSRC_HEARTBEAT/leader"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -f "$HB_FORK_MARKER"

rm -f "$TMP/jq-count"

rm -rf "$OSRC_JOBS" 2>/dev/null || true

rm -rf "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

rm -f "$TMP/.unacked.q.$$" "$TMP/.unacked.a.$$"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

rm -f "$TMP/fired"

rm -f "$TMP/arg1" "$TMP/stdin"

rm -f "$TMP/PWNED"

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

rm -rf "$OSRC_JOBS/rl-fr-live"

#!/usr/bin/env bash

E="$(mktemp -d)"; E="$(cd "$E" && pwd -P)"; trap 'rm -rf "$E"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$FIXTURE"' EXIT

trap 'rm -rf "$FIXTURE"' EXIT

#!/usr/bin/env bash

trap 'rm -f "$TMP"' EXIT

LED="$(mktemp "${TMPDIR:-/tmp}/osrc_led.XXXXXX")"; trap 'rm -f "$TMP" "$LED"' EXIT

rm -f "$LED2"

rm -f "$LED3"

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-lanedown.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

_posture_set cx down-reason "stale"; _posture_set cx down-evidence "stale"; rm -f "$OSRC_POSTURE_DIR/cx.down"

#!/usr/bin/env bash

eval "$(sed -n '/^parse_model() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_words_noglob() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_validate_with_token() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_devin_model_for() {/,/^}/p' "$SRC")"

eval "$(sed -n '/^_deepseek_effort_suffix() {/,/^}/p' "$SRC")"

#!/usr/bin/env bash

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

printf 'Task completed. 3 files edited.\n'                                                           > "$FX/cline-no2" printf 'Error: Connection error\nexhausted all retry attempts\nrate: 3 files/s, limit: none, quota: n/a\n' > "$FX/unrelat

printf 'Error: Connection error\nexhausted all retry attempts\nrate: 3 files/s, limit: none, quota: n/a\n' > "$FX/unrelated" printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/us

printf 'Error: Your daily usage quota has been exhausted. It resets in 11h26m. See https://app.devin.ai/settings/usage\n' > "$FX/dv-daily"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

[Credential-related source omitted]

rm -rf "$OSRC_HEARTBEAT/leader" "$OSRC_HEARTBEAT/.election"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

export MOCK_MODELS="$TMP/m_val"; export MOCK_CNT="$TMP/c_val"; rm -f "$MOCK_MODELS"

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

cleanup() { rm -rf "$TEST_ROOT"; }

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

[ -n "$sandbox" ] && [ -d "$sandbox" ] && [ "$sandbox" != "$HOME" ] && rm -rf "$sandbox"

[ -n "$sandbox" ] && [ -d "$sandbox" ] && [ "$sandbox" != "$HOME" ] && rm -rf "$sandbox"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }; trap cleanup EXIT

#!/usr/bin/env bash

HERE="$(cd "$(dirname "$0")" && pwd)"; SRC="$HERE/../outsourcerer.sh"; TMP="$(mktemp -d "$PWD/.test-obligations.XXXXXX")"; TEST_TMP="$TMP"; trap 'rm -rf "$TEST_TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d "$PWD/.test-pane-state.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

codex_one='Running: rm -rf target/

[ "$(state_of "$codex_one")" = "waiting-approval" ] && ok "single-option Codex approval -> waiting-approval" || bad "single-option Codex approval misclassified"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

rm -f "$link"

rm -f "$link"

rm -rf "$link"

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

rm -rf "$TMP/cache/plug/1.0.0"                    # the upgrade removes the old version dir

[ -L "$dst/ce-debug" ] && rm -f "$dst/ce-debug"

for l in "$dst"/*; do [ -L "$l" ] || continue; [ -e "$l" ] && continue; rm -f "$l"; stale=$((stale+1)); done

#!/usr/bin/env bash

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

#!/usr/bin/env bash

# test_pi_lane.sh — the Pi engine lane (https://github.com/earendil-works/pi) must be registered,

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-pi.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

rm -f "$JOBS/wedge-nowork/.startmark"

rm -f "$JOBS/wedge-devin/.startmark"

rm -f "$JOBS/wedge-credit/.startmark"

rm -f "$JOBS/deliverable-wins/.startmark"   # no in-window writes/commits -> deliverable signal decides

#!/usr/bin/env bash

trap 'TMUX_TMPDIR="$TMP/tmux" tmux kill-server >/dev/null 2>&1; rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-quota.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/bin/bash

trap 'rm -rf "$TMP"' EXIT

mkjob J-nodate now; rm -f "$OSRC_HOME/jobs/J-nodate/started_at"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/bin/bash

trap 'rm -rf "$TMPDIR_RI" 2>/dev/null' EXIT

#!/usr/bin/env bash

trap 'rm -f "$TMP_MAIN"' EXIT

check_token 'foo[1m];rm -rf /' reject

#!/usr/bin/env bash

TMP="$(mktemp -d "$PWD/.test-reverdict.XXXXXX")"; TEST_TMP="$TMP"; trap 'rm -rf "$TEST_TMP"' EXIT

rm -f "$OSRC_HEARTBEAT/leader/owner.json"; rmdir "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

rm -f "$OSRC_HEARTBEAT/leader/owner.json"; rmdir "$OSRC_HEARTBEAT/leader" 2>/dev/null || true

#!/usr/bin/env bash

T="$(mktemp -d)"; trap 'rm -rf "$T"' EXIT

#!/usr/bin/env bash

rm -rf "$TMP"

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

rm -rf "$OSRC_HOME/sessions"

rm -rf "$OSRC_HOME/sessions"

#!/usr/bin/env bash

HERE="$(cd "$(dirname "$0")" && pwd)"; SRC="$HERE/../outsourcerer.sh"; TMP="$(mktemp -d "$PWD/.test-claims.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-liveness.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

TMP="$(mktemp -d "${TMPDIR:-/tmp}/osrc-mpg.XXXXXX")"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

cleanup() { rm -rf "$TMP"; }

printf '#!/usr/bin/env bash\nprintf "glm-5-2\\n"\ncat "%s"\nexit 0\n' "$TMP/big.txt" > "$TMP/stub-engine.sh"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

HERE="$(cd "$(dirname "$0")" && pwd)"; SRC="$HERE/../outsourcerer.sh"; TMP="$(mktemp -d "$PWD/.test-reply.XXXXXX")"; TEST_TMP="$TMP"; trap 'rm -rf "$TEST_TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env python3

def post_messages(body, stream=False):     data = json.dumps(body).encode()     req = urllib.request.Request("http://127.0.0.1:%d/v1/messages" % SHIM_PORT, data=data,

data = json.dumps(body).encode()     req = urllib.request.Request("http://127.0.0.1:%d/v1/messages" % SHIM_PORT, data=data,                                  method="POST", headers={"Content-Type": "application/json"})

req = urllib.request.Request("http://127.0.0.1:%d/v1/messages" % SHIM_PORT, data=data,

method="POST", headers={"Content-Type": "application/json"})     r = urllib.request.urlopen(req, timeout=10)     if stream:

r = urllib.request.urlopen(req, timeout=10)

mock = ThreadingHTTPServer(("127.0.0.1", MOCK_PORT), Mock)     Thread(target=mock.serve_forever, daemon=True).start()     env = dict(os.environ, OSRC_SHIM_UPSTREAM="http://127.0.0.1:%d/v1" % MOCK_PORT,

Thread(target=mock.serve_forever, daemon=True).start()     env = dict(os.environ, OSRC_SHIM_UPSTREAM="http://127.0.0.1:%d/v1" % MOCK_PORT,                OSRC_SHIM_PORT=str(SHIM_PORT))

[Credential-related source omitted]

[Credential-related source omitted]

for _ in range(40):             try:                 if json.loads(urllib.request.urlopen("http://127.0.0.1:%d/health" % SHIM_PORT, timeout=1).read()).get("ok"):

try:                 if json.loads(urllib.request.urlopen("http://127.0.0.1:%d/health" % SHIM_PORT, timeout=1).read()).get("ok"):                     break

if json.loads(urllib.request.urlopen("http://127.0.0.1:%d/health" % SHIM_PORT, timeout=1).read()).get("ok"):

check("health ok", json.loads(urllib.request.urlopen("http://127.0.0.1:%d/health" % SHIM_PORT).read()).get("ok"))

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

rm -f "$CAPTURE"

rm -f "$CAPTURE"

rm -rf "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills"; mkdir -p "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills"; mkdir -p "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills/.outsourcerer-grants.lock.d"

rm -rf "$TMP/home/.config/devin/skills"

rm -rf "$TMP/home/.config/devin/skills"; rm -f "$TMP/releaseA"

rm -rf "$TMP/home/.config/devin/skills" "$TMP/home/.config/victim-target" "$TMP/home/.config/victim-link"

EH="$TMP/emptyhome"; rm -rf "$EH"; mkdir -p "$EH"

ASK="$TMP/home/.claude/skills/absskill"; rm -rf "$ASK"; mkdir -p "$ASK/references"

RSK="$TMP/home/.claude/skills/relskill"; rm -rf "$RSK"; mkdir -p "$RSK/references/sub"

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

rm -rf "$lock"; mkdir "$lock"; printf '%s %s\n' 999999 'Thu Jan  1 00:00:00 2020' > "$lock/owner"

rm -rf "$lock"; mkdir "$lock"; printf '%s %s\n' "$$" "$(_pid_start_identity "$$" 2>/dev/null)" > "$lock/owner"

rm -rf "$lock"

rm -rf "$lock"; mkdir "$lock"           # a lock dir with NO owner file inside

rm -rf "$lock"; mkdir "$lock"           # brand-new, age ~0, no owner yet

rm -rf "$lock"

#!/usr/bin/env bash

trap 'for p in $PIDS; do pkill -P "$p" 2>/dev/null; kill "$p" 2>/dev/null; done; rm -rf "$TMP"' EXIT

rm -rf "$OSRC_HOME/owners"

#!/usr/bin/env bash

rm -rf "$TMP"

rm -f "$TMP/wedge.pid" "$TMP/wedge.pgid" "$TMP/wedge.start"

rm -f "$TMP/coop.term" "$TMP/coop.pid"

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT

#!/usr/bin/env bash

trap 'rm -rf "$TMP"' EXIT

ran="$(eval "$out" 2>/dev/null)"

rm -rf "$BASE/0.11.1"

ran="$(eval "$out" 2>/dev/null)"

#!/usr/bin/env bash

#!/usr/bin/env bash

trap 'rm -rf "$FIXTURE"' EXIT

( eval "$trapline"; sleep "$STRAY2" & wait ) & wd2=$!

#!/usr/bin/env bash

TMP="$(mktemp -d)"; trap 'rm -rf "$TMP" 2>/dev/null' EXIT

[Credential-related source omitted]

#!/usr/bin/env bash

# router seam (the dead-on-dispatch defect that bit the Cline lane must not recur here). # # TokenRouter (https://www.tokenrouter.com) is an OpenAI-compatible model gateway. The lane is a CLOUD

# # TokenRouter (https://www.tokenrouter.com) is an OpenAI-compatible model gateway. The lane is a CLOUD # lane (the prompt leaves the machine), so it flows through the same _cloud_disclose choke point +

# TokenRouter (https://www.tokenrouter.com) is an OpenAI-compatible model gateway. The lane is a CLOUD

trap 'rm -rf "$TMP"; [ -n "${FAKE_PID:-}" ] && kill "$FAKE_PID" 2>/dev/null || true' EXIT

[Credential-related source omitted]

[Credential-related source omitted]

# The delegate must NOT inline the key as a curl -H argument (that lands it in the ps table).

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

else   ok "delegate never inlines the key in a curl -H argument" fi

ok "delegate never inlines the key in a curl -H argument"

[Credential-related source omitted]

[Credential-related source omitted]

grep -q 'TokenRouter lane' "$SRC" && ok "doctor has a TokenRouter lane section" || bad "doctor has no TokenRouter section" grep -q 'https://www.tokenrouter.com' "$SRC" && ok "doctor points at the TokenRouter console for a key" || bad "docto

grep -q 'https://www.tokenrouter.com' "$SRC" && ok "doctor points at the TokenRouter console for a key" || bad "doctor missing the key-source pointer"

export OSRC_TOKENROUTER_URL="http://127.0.0.1:$GW_PORT/v1"

[Credential-related source omitted]