fix(gastown): bump @kilocode/cli to 7.3.1 + plumb auth env into prewarm

[jrf0110]

Summary

Fixes the two bugs that prevented PR #3307's session-ingest wiring from working in production.

Bug 1: kilo CLI version too old (smoking gun)

@kilocode/cli@7.2.14 doesn't read process.env.KILO_AUTH_CONTENT. Every kilo serve was hitting Auth.get("kilo") → undefined → "session bootstrap skipped: no client" and silently no-op'ing all session deltas.

Bumped to 7.3.1. Verified KILO_AUTH_CONTENT is present in the new binary's strings.

Bug 2: prewarm path missing auth env

buildPrewarmEnv didn't set the three env vars (KILO_AUTH_CONTENT, KILO_PLATFORM, KILO_ORG_ID). Even after the CLI bump, mayor sessions (which go through prewarm) would still be invisible. Now it mirrors buildAgentEnv via the extracted buildKiloAuthEnv helper.

Refactor: extracted buildKiloAuthEnv helper

The auth-env logic (KILO_AUTH_CONTENT, KILO_PLATFORM, KILO_ORG_ID) was duplicated between buildAgentEnv and buildPrewarmEnv. Extracted buildKiloAuthEnv(kilocodeToken, organizationId) in agent-runner.ts and called it from both functions.

Verification

• pnpm --filter gastown-container typecheck passes
• pnpm --filter gastown-container test passes (2 pre-existing failures in plugin/client.test.ts unrelated to this change)
• Verified npm view @kilocode/cli@7.3.1 version returns 7.3.1 for all 6 packages
• Verified KILO_AUTH_CONTENT string present in @kilocode/cli-linux-x64@7.3.1 binary

Visual Changes

N/A

Reviewer Notes

• The buildKiloAuthEnv helper accepts organizationId: string | undefined | null to match the nullable type from MayorPrewarmContext.organizationId. Both null and undefined are falsy and correctly skip setting KILO_ORG_ID.
• The process-manager.test.ts prewarm test now saves/restores KILO_ORG_ID from process.env to avoid interference from the container's own environment.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

The refactor correctly extracts buildKiloAuthEnv from buildAgentEnv and wires it into buildPrewarmEnv, with well-targeted tests covering all edge cases; no security, correctness, or runtime issues found.

Files Reviewed (7 files)

• services/gastown/container/src/agent-runner.ts — new buildKiloAuthEnv helper, buildAgentEnv updated to call it
• services/gastown/container/src/agent-runner.test.ts — new buildKiloAuthEnv unit tests
• services/gastown/container/src/process-manager.ts — buildPrewarmEnv updated with Object.assign(env, buildKiloAuthEnv(...))
• services/gastown/container/src/process-manager.test.ts — prewarm test updated to capture/restore KILO_ORG_ID and assert auth env vars
• services/gastown/container/Dockerfile — CLI bump 7.2.14 → 7.3.1
• services/gastown/container/Dockerfile.dev — CLI bump 7.2.14 → 7.3.1
• services/gastown/container/package.json — SDK bump 7.2.14 → 7.3.1
• pnpm-lock.yaml — lockfile updated (generated, not reviewed in detail)

Fix these issues in Kilo Cloud

---

_{Reviewed by claude-sonnet-4.6 · 820,974 tokens}

_{Review guidance: REVIEW.md from base branch gastown-staging}