@4pm/cli 1.5.0 → 1.5.2

package/dist/index.js

@@ -28316,6 +28316,11 @@ function defaultProfileConfig() {
     // Terminate a single AI run after 5 min by default (ADR-0243) so a hung/looping AI CLI
     // (e.g. a heavy spec review/compose) can't spin the dispatcher forever; 0 = no limit.
     aiRunTimeoutSec: 300,
+    // Web-Console blocked slash commands (ADR-0249): block the two that tamper with / kill the
+    // worker by default — `/quit` (stops the cli — DoS) and `/config` (writes config.json). Every
+    // other command (incl. /reconnect, /logs — non-destructive) is allowed; operators adjust this
+    // list in the Worker config. Empty ⇒ allow all.
+    webBlockedCommands: ["quit", "config"],
     // Shared AI memory (ADR-0245) — off by default (opt-in; costs a compaction call per turn).
     aiMemoryEnabled: false,
     aiMemoryBudgetChars: 6e3
@@ -28332,6 +28337,11 @@ function resolveIdleAutoClearMinutes(config) {
   const project = config.projectAutoClearIdleMinutes ?? 0;
   return project > 0 ? project : config.autoClearIdleMinutes ?? 10;
 }
+var DEFAULT_WEB_BLOCKED_COMMANDS = ["quit", "config"];
+function resolveWebBlockedCommands(config) {
+  const list = Array.isArray(config.webBlockedCommands) ? config.webBlockedCommands : DEFAULT_WEB_BLOCKED_COMMANDS;
+  return new Set(list.map((c) => String(c).trim().toLowerCase()).filter(Boolean));
+}
 function ensureProfileConfig(dir2) {
   if (existsSync(join(dir2, "config.json"))) return false;
   writeProfileConfig(dir2, defaultProfileConfig());
@@ -28765,7 +28775,7 @@ async function checkAndUpdate(serverUrl, autoUpdate) {
 // src/core/ws-client.ts
 init_wrapper();
 import { randomUUID } from "crypto";
-import { basename as basename4, join as join24 } from "path";
+import { basename as basename4, join as join25 } from "path";
 
 // vendor/@4pm/utils/helpers.ts
 function backoffJitterMs(attempt, baseMs = 500, maxMs = 1e4) {
@@ -32932,7 +32942,15 @@ var dispatchCommandRequestSchema = external_exports.object({
    * `project.git_write` (`write`) instead of `command.execute`, and validates `command`
    * against the git allowlist (`isGitCommandAllowed`). Absent ⇒ normal console dispatch.
    */
-  gitOp: external_exports.enum(["read", "write"]).optional()
+  gitOp: external_exports.enum(["read", "write"]).optional(),
+  /**
+   * One-shot AI mode (ADR-0249): the prompt is a text-in → text-out task (spec review /
+   * compose / suggest / generators) that must NOT trigger the AI CLI's agentic tool loop.
+   * The cli caps such a run (`--max-turns 1` + disallowed agentic tools) so it can't wander
+   * the repo / edit files / loop forever. Only meaningful with `ai:true`; absent ⇒ a full
+   * agent run (the Console tab + Git merge, which legitimately use tools).
+   */
+  aiOneShot: external_exports.boolean().optional()
 }).superRefine((v, ctx) => {
   if (v.machineLinkId == null === (v.pick == null)) {
     ctx.addIssue({
@@ -32955,10 +32973,30 @@ var dispatchCommandRequestSchema = external_exports.object({
 var listCommandsQuerySchema = baseRequestSchema.extend({
   projectId: external_exports.string().uuid(),
   // Optional search filters (command-0005): `search` (from BaseRequest) matches the command
-  // text/status; `from`/`to` are an inclusive `YYYY-MM-DD` date range over `startedAt`.
+  // text/status; `from`/`to` are an inclusive `YYYY-MM-DD` date range over `startedAt`;
+  // `machineLinkId` (ADR-0249) filters to one machine-user's commands (absent ⇒ all).
   from: external_exports.string().optional(),
-  to: external_exports.string().optional()
+  to: external_exports.string().optional(),
+  machineLinkId: external_exports.string().uuid().optional()
 });
+var CLI_SLASH_COMMANDS = [
+  { name: "help", usage: "/help", description: "List slash commands" },
+  { name: "version", usage: "/version", description: "Show the cli version" },
+  { name: "status", usage: "/status", description: "Show connection + profile + session status" },
+  { name: "history", usage: "/history [N]", description: "List the last N executed commands (+ time)" },
+  { name: "output", usage: "/output <n>", description: "Replay a command's output (n from /history)" },
+  { name: "logs", usage: "/logs [N]", description: "Tail the profile's structured log" },
+  { name: "expand", usage: "/expand [N]", description: "Expand a collapsed \u25B8[N] block" },
+  { name: "collapse", usage: "/collapse [N]", description: "Collapse an expanded \u25B8[N] block" },
+  { name: "reconnect", usage: "/reconnect", description: "Reconnect to the server now (skip the backoff)" },
+  { name: "whoami", usage: "/whoami", description: "Show this machine account + its teams & projects" },
+  { name: "ai-profile", usage: "/ai-profile [list|use <n>|reset]", description: "List AI profiles / switch which one runs" },
+  { name: "config", usage: "/config [show|init|set <k> <v>|delete <k>]", description: "View / init / update / delete profile config" },
+  { name: "claude-cmd", usage: "/claude-cmd /context", description: "Run an AI-CLI slash command (e.g. /context, /usage)" },
+  { name: "clear", usage: "/clear", description: "Clear the transcript" },
+  { name: "quit", usage: "/quit", description: "Quit the cli (also /exit)" }
+];
+var CLI_SLASH_COMMAND_NAMES = CLI_SLASH_COMMANDS.map((c) => c.name);
 
 // vendor/@4pm/validation/schemas.ts
 var passwordSchema = external_exports.string().min(8, "password: at least 8 characters").max(32, "password: at most 32 characters").regex(/[a-zA-Z]/, "password: needs at least 1 letter").regex(/[0-9]/, "password: needs at least 1 digit");
@@ -33001,7 +33039,10 @@ var listWorkersQuerySchema = baseRequestSchema.extend({
   /** Only workers whose live CPU/memory/disk usage % ≥ the given threshold (0–100). */
   minCpuPct: external_exports.coerce.number().min(0).max(100).optional(),
   minMemPct: external_exports.coerce.number().min(0).max(100).optional(),
-  minDiskPct: external_exports.coerce.number().min(0).max(100).optional()
+  minDiskPct: external_exports.coerce.number().min(0).max(100).optional(),
+  /** Hide workers with no cli attached (clis = 0). The web defaults this on; unchecking the
+   *  "show empty CLIs" box drops it so empty workers are listed too. */
+  hideEmptyClis: external_exports.enum(["true", "false"]).transform((v) => v === "true").optional()
 });
 var updateWorkerRequestSchema = external_exports.object({
   name: external_exports.string().min(1).max(100).optional()
@@ -33792,7 +33833,7 @@ function decryptPayload(key, payloadBase64, nonceBase64) {
 }
 
 // src/core/ws-client.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync5, rmSync as rmSync4 } from "fs";
 import { randomUUID as randomCommandId } from "crypto";
 
 // src/core/update-scheduler.ts
@@ -34014,11 +34055,29 @@ import { spawn as spawn2 } from "child_process";
 var KILL_GRACE_MS = 5e3;
 async function runCommand(dispatch, emit, opts) {
   let seq = 0;
-  const child = spawn2(dispatch.cmd, dispatch.args ?? [], {
-    cwd: dispatch.path,
-    env: { ...process.env, ...dispatch.env },
-    shell: false
+  let child;
+  try {
+    child = spawn2(dispatch.cmd, dispatch.args ?? [], {
+      cwd: dispatch.path,
+      env: { ...process.env, ...dispatch.env },
+      shell: false
+    });
+  } catch (err) {
+    emit({
+      commandId: dispatch.commandId,
+      seq: seq++,
+      chunk: `spawn error: ${err.message}
+`,
+      done: true,
+      exitCode: -1
+    });
+    return;
+  }
+  child.stdin?.on("error", () => {
   });
+  if (opts?.stdin != null) {
+    child.stdin?.write(opts.stdin);
+  }
   child.stdin?.end();
   const timeoutMs = opts?.timeoutMs && opts.timeoutMs > 0 ? opts.timeoutMs : 0;
   let timedOut = false;
@@ -34117,15 +34176,24 @@ function createAiStreamParser(cli) {
   let buffer = "";
   const acc = { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 };
   let sessionId = "";
+  let apiError = { isError: false, status: null };
   function handleClaude(ev) {
     if (typeof ev.session_id === "string" && ev.session_id) sessionId = ev.session_id;
-    if (ev.type === "result" && ev.usage) {
-      acc.input = ev.usage.input_tokens ?? 0;
-      acc.output = ev.usage.output_tokens ?? 0;
-      acc.cacheRead = ev.usage.cache_read_input_tokens ?? 0;
-      acc.cacheCreation = ev.usage.cache_creation_input_tokens ?? 0;
-      acc.tokens = acc.input + acc.output;
-      if (typeof ev.total_cost_usd === "number") acc.costUsd = ev.total_cost_usd;
+    if (ev.type === "result") {
+      if (ev.is_error === true) {
+        apiError = {
+          isError: true,
+          status: typeof ev.api_error_status === "number" ? ev.api_error_status : null
+        };
+      }
+      if (ev.usage) {
+        acc.input = ev.usage.input_tokens ?? 0;
+        acc.output = ev.usage.output_tokens ?? 0;
+        acc.cacheRead = ev.usage.cache_read_input_tokens ?? 0;
+        acc.cacheCreation = ev.usage.cache_creation_input_tokens ?? 0;
+        acc.tokens = acc.input + acc.output;
+        if (typeof ev.total_cost_usd === "number") acc.costUsd = ev.total_cost_usd;
+      }
       return "";
     }
     if (ev.type === "assistant") {
@@ -34185,7 +34253,8 @@ function createAiStreamParser(cli) {
       return handled === null ? line : handled;
     },
     usage: () => ({ ...acc }),
-    sessionId: () => sessionId
+    sessionId: () => sessionId,
+    apiError: () => ({ ...apiError })
   };
 }
 function estimateTokens(text) {
@@ -34203,12 +34272,21 @@ function isSessionLimit(text) {
     text
   );
 }
-function runAttempt(commandId, cmd, args, cwd2, env3, onChunk, timeoutMs) {
+function isOutOfCredits(text) {
+  return /out of (?:usage )?credits|credits[_ ]required|out[_ ]of[_ ]credits|insufficient credits/i.test(
+    text
+  );
+}
+function runAttempt(commandId, cmd, args, stdin, cwd2, env3, onChunk, timeoutMs) {
   return new Promise((resolve8) => {
-    void runCommand({ commandId, cmd, args, path: cwd2, env: env3 }, (out) => {
-      if (out.chunk) onChunk(out.chunk);
-      if (out.done) resolve8(out.exitCode ?? -1);
-    }, timeoutMs > 0 ? { timeoutMs } : void 0);
+    runCommand(
+      { commandId, cmd, args, path: cwd2, env: env3 },
+      (out) => {
+        if (out.chunk) onChunk(out.chunk);
+        if (out.done) resolve8(out.exitCode ?? -1);
+      },
+      { stdin, ...timeoutMs > 0 ? { timeoutMs } : {} }
+    ).catch(() => resolve8(-1));
   });
 }
 async function runAiFailover(plan, commandId, cwd2, handlers, timeoutMs = 0) {
@@ -34229,14 +34307,15 @@ async function runAiFailover(plan, commandId, cwd2, handlers, timeoutMs = 0) {
         handlers.onChunk(text);
       }
     };
-    finalExit = await runAttempt(commandId, attempt.cmd, attempt.args, cwd2, attempt.env, emit, timeoutMs);
+    finalExit = await runAttempt(commandId, attempt.cmd, attempt.args, attempt.stdin, cwd2, attempt.env, emit, timeoutMs);
     const tail = parser.flush();
     if (tail) {
       captured += tail;
       handlers.onChunk(tail);
     }
     lastCaptured = captured;
-    if (finalExit === 0) {
+    const apiErr = parser.apiError();
+    if (finalExit === 0 && !apiErr.isError) {
       const usage = parser.usage();
       if (usage.tokens === 0) usage.tokens = estimateTokens(captured);
       reportToolResult(attempt.cmd, true);
@@ -34249,7 +34328,8 @@ async function runAiFailover(plan, commandId, cwd2, handlers, timeoutMs = 0) {
         sessionId: parser.sessionId()
       };
     }
-    const reason = isAuthFailure(captured) ? "auth" : isSessionLimit(captured) ? "limit" : "other";
+    if (finalExit === 0 && apiErr.isError) finalExit = apiErr.status && apiErr.status > 0 ? apiErr.status : 1;
+    const reason = isAuthFailure(captured) ? "auth" : apiErr.status === 429 || isOutOfCredits(captured) ? "credits" : isSessionLimit(captured) ? "limit" : "other";
     if (i === total - 1) break;
     handlers.onAttemptFail(attempt.label, reason);
   }
@@ -34258,6 +34338,7 @@ async function runAiFailover(plan, commandId, cwd2, handlers, timeoutMs = 0) {
 }
 function summarizeAiFailure(captured, exitCode) {
   if (isAuthFailure(captured)) return "Not logged in";
+  if (isOutOfCredits(captured)) return "Out of usage credits";
   if (isSessionLimit(captured)) return "Usage limit reached";
   const firstLine = captured.split("\n").map((l) => l.trim()).find((l) => l.length > 0);
   return firstLine || `exited ${exitCode}`;
@@ -34303,6 +34384,52 @@ function setWorkingCredential(profileDir2, key) {
   } catch {
   }
 }
+var PINNED_CREDENTIAL_KEY = "__pinned__";
+function getPinnedCredential(profileDir2) {
+  return readState(profileDir2)[PINNED_CREDENTIAL_KEY] ?? null;
+}
+function setPinnedCredential(profileDir2, key) {
+  const state = readState(profileDir2);
+  if (state[PINNED_CREDENTIAL_KEY] === key) return;
+  state[PINNED_CREDENTIAL_KEY] = key;
+  try {
+    writeFileSync4(statePath(profileDir2), JSON.stringify(state, null, 2), "utf8");
+  } catch {
+  }
+}
+function clearPinnedCredential(profileDir2) {
+  const state = readState(profileDir2);
+  if (!(PINNED_CREDENTIAL_KEY in state)) return;
+  delete state[PINNED_CREDENTIAL_KEY];
+  try {
+    writeFileSync4(statePath(profileDir2), JSON.stringify(state, null, 2), "utf8");
+  } catch {
+  }
+}
+
+// src/utils/time.ts
+function formatTimestampInZone(date, timeZone) {
+  const build = (tz) => {
+    const parts = new Intl.DateTimeFormat("en-CA", {
+      ...tz ? { timeZone: tz } : {},
+      hour12: false,
+      year: "numeric",
+      month: "2-digit",
+      day: "2-digit",
+      hour: "2-digit",
+      minute: "2-digit",
+      second: "2-digit"
+    }).formatToParts(date);
+    const get2 = (type) => parts.find((p) => p.type === type)?.value ?? "";
+    const hour = get2("hour") === "24" ? "00" : get2("hour");
+    return `${get2("year")}/${get2("month")}/${get2("day")} ${hour}:${get2("minute")}:${get2("second")}`;
+  };
+  try {
+    return build(timeZone);
+  } catch {
+    return build();
+  }
+}
 
 // src/utils/ai-cli.ts
 import { readFileSync as readFileSync8 } from "fs";
@@ -34313,6 +34440,42 @@ var REQUIRED_AI_ARGS = {
   codex: ["exec", "--json"],
   antigravity: []
 };
+var ONE_SHOT_DISALLOWED_CLAUDE_TOOLS = [
+  "Bash",
+  "Edit",
+  "Write",
+  "Read",
+  "Glob",
+  "Grep",
+  "NotebookEdit",
+  "Task",
+  "WebSearch",
+  "WebFetch",
+  "Skill",
+  "SlashCommand",
+  "ToolSearch",
+  "TaskCreate",
+  "TaskGet",
+  "TaskList",
+  "TaskOutput",
+  "TaskStop",
+  "TaskUpdate",
+  "Monitor",
+  "DesignSync",
+  "CronCreate",
+  "CronDelete",
+  "CronList",
+  "EnterWorktree",
+  "ExitWorktree",
+  "RemoteTrigger",
+  "ScheduleWakeup",
+  "SendMessage",
+  "PushNotification"
+].join(",");
+function oneShotArgs(cmd) {
+  if (!cmd.includes("claude")) return [];
+  return ["--max-turns=1", "--disallowedTools", ONE_SHOT_DISALLOWED_CLAUDE_TOOLS, "--permission-mode", "default"];
+}
 function requiredArgs(cmd) {
   if (cmd.includes("claude")) return REQUIRED_AI_ARGS.claude;
   if (cmd.includes("codex")) return REQUIRED_AI_ARGS.codex;
@@ -34372,12 +34535,15 @@ function folderScopeGuard(folder, prompt) {
     prompt
   ].join("\n");
 }
-function buildRunArgs(profile, cmd, prompt, resumeId) {
+function buildRunArgs(profile, cmd, resumeId, oneShot = false) {
   const extras = profile.args ?? [];
   const model = profile.model?.trim();
   const modelArgs = model ? ["--model", model] : [];
   const resumeArgs = resumeId && cmd.includes("claude") ? ["--resume", resumeId] : [];
-  return [...requiredArgs(cmd), ...resumeArgs, ...extras, ...modelArgs, prompt];
+  const turns = profile.maxTurns;
+  const perProfileTurns = !oneShot && cmd.includes("claude") && typeof turns === "number" && turns > 0 ? [`--max-turns=${Math.floor(turns)}`] : [];
+  const oneShotExtra = oneShot ? oneShotArgs(cmd) : perProfileTurns;
+  return [...requiredArgs(cmd), ...resumeArgs, ...extras, ...modelArgs, ...oneShotExtra];
 }
 function claudeHomeDirs(config) {
   const dirs = profileDirs(claudeProfilesOf(config));
@@ -34416,10 +34582,10 @@ function resolveClaudeProfiles(config, workingDir) {
   if (idx > 0) profiles.unshift(profiles.splice(idx, 1)[0]);
   return profiles;
 }
-function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map()) {
-  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume) : planLegacyRun(prompt, config, hint.dir ?? null, resume);
+function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false) {
+  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot);
 }
-function planUnifiedRun(prompt, config, workingCredential, resume) {
+function planUnifiedRun(prompt, config, workingCredential, resume, oneShot) {
   const baseEnv = config.aiEnv ?? {};
   const active = activeProvider(config);
   const usable = config.aiProfiles.filter(isUsableCredential);
@@ -34428,7 +34594,7 @@ function planUnifiedRun(prompt, config, workingCredential, resume) {
     return {
       cmd: active,
       attempts: [
-        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, prompt), env: { ...baseEnv } }
+        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot), stdin: prompt, env: { ...baseEnv } }
       ]
     };
   }
@@ -34446,19 +34612,20 @@ function planUnifiedRun(prompt, config, workingCredential, resume) {
     label: cred.label?.trim() || profileDisplayLabel(dir2),
     dir: dir2,
     key,
-    args: buildRunArgs(cred, cmd, prompt, resume.get(key)),
+    args: buildRunArgs(cred, cmd, resume.get(key), oneShot),
+    stdin: prompt,
     env: envVar ? { ...baseEnv, [envVar]: dir2 } : { ...baseEnv }
   }));
   return { cmd: attempts[0]?.cmd ?? DEFAULT_AI_CLI, attempts };
 }
-function planLegacyRun(prompt, config, workingDir, resume) {
+function planLegacyRun(prompt, config, workingDir, resume, oneShot) {
   const cmd = config.aiCli || DEFAULT_AI_CLI;
   const baseEnv = config.aiEnv ?? {};
   const envVar = profileEnvVar(cmd);
   const defaultPlan = {
     cmd,
     attempts: [
-      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, prompt), env: { ...baseEnv } }
+      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot), stdin: prompt, env: { ...baseEnv } }
     ]
   };
   if (!envVar) return defaultPlan;
@@ -34475,7 +34642,8 @@ function planLegacyRun(prompt, config, workingDir, resume) {
       label: profileDisplayLabel(dir2),
       dir: dir2,
       key,
-      args: buildRunArgs(profile, cmd, prompt, resume.get(key)),
+      args: buildRunArgs(profile, cmd, resume.get(key), oneShot),
+      stdin: prompt,
       env: { ...baseEnv, [envVar]: dir2 }
     };
   });
@@ -36668,138 +36836,530 @@ async function addProject(payload, profileDir2, onProgress) {
   }
 }
 
-// src/core/memory-compact.ts
-import { spawn as spawn8 } from "child_process";
-var COMPACT_TIMEOUT_MS = 6e4;
-function buildPrompt3(input) {
-  return [
-    "You maintain a COMPACT running memory of an ongoing assistant conversation so it can continue",
-    "across sessions and accounts. Merge the latest exchange into the existing memory and return the",
-    `UPDATED memory. Keep it UNDER ${input.budgetChars} characters. Use terse Markdown bullets grouped`,
-    "as: Decisions, Constraints, Open tasks, Glossary. Keep durable facts; drop chit-chat and anything",
-    "now obsolete. Output ONLY the updated memory text \u2014 no preamble, no code fences.",
-    "",
-    "=== EXISTING MEMORY ===",
-    input.oldMemory || "(empty)",
-    "",
-    "=== LATEST USER PROMPT ===",
-    input.prompt,
-    "",
-    "=== LATEST ASSISTANT ANSWER ===",
-    input.answer
-  ].join("\n");
-}
-function runOnce2(cmd, profile, prompt, cwd2, extraEnv) {
-  return new Promise((resolve8, reject) => {
-    const args = ["-p", ...profile?.model ? ["--model", profile.model] : []];
-    const env3 = {
-      ...process.env,
-      ...extraEnv,
-      ...profile ? { CLAUDE_CONFIG_DIR: profile.dir } : {}
-    };
-    const child = spawn8(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
-    let out = "";
-    let err = "";
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      reject(new Error("memory compaction timed out"));
-    }, COMPACT_TIMEOUT_MS);
-    timer.unref();
-    child.stdout.on("data", (d) => out += d.toString());
-    child.stderr.on("data", (d) => err += d.toString());
-    child.on("error", (e) => {
-      clearTimeout(timer);
-      reject(e);
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      resolve8({ code: code ?? -1, out, err });
-    });
-    child.stdin.write(prompt);
-    child.stdin.end();
-  });
-}
-async function runMemoryCompaction(ai, cwd2, input) {
-  const prompt = buildPrompt3(input);
-  const attempts = ai.profiles.length > 0 ? ai.profiles : [null];
-  for (let i = 0; i < attempts.length; i++) {
-    try {
-      const { code, out } = await runOnce2(ai.cmd, attempts[i], prompt, cwd2, ai.env);
-      if (code === 0 && out.trim()) {
-        reportToolResult(ai.cmd, true);
-        return out.trim().slice(0, input.budgetChars);
-      }
-      if (i === attempts.length - 1) break;
-    } catch {
-      break;
-    }
-  }
-  return "";
-}
-
-// src/core/config-sync.ts
-import { existsSync as existsSync11, readFileSync as readFileSync15 } from "fs";
+// src/ui/slash-commands.ts
+import { existsSync as existsSync11 } from "fs";
 import { join as join23 } from "path";
-var SERVER_MANAGED_KEYS = [
+var CONFIG_KEYS = [
+  "aiCli",
+  "claudeHome",
+  "codexHome",
+  "antigravityHome",
   "physicPath",
-  "sessionSwitchPct",
-  "perPromptTokenLimit",
-  // Project AI-run timeout override mirror (ADR-0243) — the ws_token refreshes it; a Worker-config
-  // edit must not fight it. NOTE: the machine-user's own `aiRunTimeoutSec` is NOT here (operator-editable).
-  "projectAiRunTimeoutSec",
-  // Project idle auto-clear override mirror (ADR-0244) — same rule; the machine-user's own
-  // `autoClearIdleMinutes` is operator-editable and NOT listed here.
-  "projectAutoClearIdleMinutes",
-  // Project shared-AI-memory override mirrors (ADR-0245) — the machine-user's own `aiMemoryEnabled`
-  // / `aiMemoryBudgetChars` are operator-editable and NOT listed here.
-  "projectAiMemoryMode",
-  "projectAiMemoryBudgetChars"
+  "commandHistoryUploadMinutes",
+  "autoUpdate",
+  "aiEnv"
 ];
-function readConfigText(profileDir2) {
-  const path = join23(profileDir2, "config.json");
-  if (existsSync11(path)) {
-    try {
-      return readFileSync15(path, "utf8");
-    } catch {
+function configPath(profileDir2) {
+  return join23(profileDir2, "config.json");
+}
+function parseConfigAssignment(key, valueTokens) {
+  const value = valueTokens.join(" ").trim();
+  switch (key) {
+    case "aiCli":
+    case "physicPath":
+      if (!value) return { error: `Missing value for "${key}".` };
+      return { patch: { [key]: value } };
+    case "claudeHome":
+    case "codexHome":
+    case "antigravityHome": {
+      const dirs = valueTokens.filter((t) => t.trim());
+      if (dirs.length === 0) return { error: `Missing value for "${key}".` };
+      return { patch: { [key]: dirs.map((profile) => ({ profile, model: "" })) } };
+    }
+    case "commandHistoryUploadMinutes": {
+      const n = Number(value);
+      if (!Number.isFinite(n) || n <= 0) return { error: `"${value}" is not a positive number.` };
+      return { patch: { commandHistoryUploadMinutes: n } };
     }
+    case "autoUpdate":
+      if (value !== "true" && value !== "false") return { error: `Use true|false, not "${value}".` };
+      return { patch: { autoUpdate: value === "true" } };
+    case "aiEnv":
+      try {
+        return { patch: { aiEnv: JSON.parse(value) } };
+      } catch {
+        return { error: `aiEnv must be JSON, e.g. {"KEY":"val"}.` };
+      }
+    default:
+      return { error: `Unknown key "${key}". Allowed: ${CONFIG_KEYS.join(", ")}.` };
   }
-  return JSON.stringify(defaultProfileConfig(), null, 2);
 }
-function applyConfigText(profileDir2, text) {
-  let parsed;
-  try {
-    parsed = JSON.parse(text);
-  } catch (err) {
-    return { ok: false, error: `Invalid JSON: ${err.message}` };
+function runConfig(ctx) {
+  const [sub, ...rest] = ctx.args;
+  const dir2 = ctx.info.profileDir;
+  const path = configPath(dir2);
+  if (!sub || sub === "show") {
+    ctx.print(`config: ${path}`);
+    const json = JSON.stringify(readProfileConfig(dir2), null, 2);
+    for (const line of json.split("\n")) ctx.print(line);
+    return;
   }
-  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    return { ok: false, error: "config.json must be a JSON object." };
+  if (sub === "init") {
+    const writeDefaults = (verb) => {
+      overwriteProfileConfig(dir2, defaultProfileConfig());
+      ctx.print(`\u2714 ${verb} default config: ${path}`);
+      ctx.print("add claude profiles: /config set claudeHome .claude .claude-1 (tried in order)");
+    };
+    if (existsSync11(path)) {
+      ctx.confirm(
+        `config exists: ${path} \u2014 replace it with defaults? (y/N)`,
+        () => writeDefaults("replaced with")
+      );
+      return;
+    }
+    writeDefaults("wrote");
+    return;
   }
-  const next = { ...parsed };
-  const current = readProfileConfig(profileDir2);
-  for (const key of SERVER_MANAGED_KEYS) {
-    if (current[key] !== void 0) next[key] = current[key];
-    else delete next[key];
+  if (sub === "set") {
+    const [key, ...valueTokens] = rest;
+    if (!key) {
+      ctx.print("usage: /config set <key> <value>", "error");
+      return;
+    }
+    const result = parseConfigAssignment(key, valueTokens);
+    if ("error" in result) {
+      ctx.print(result.error, "error");
+      return;
+    }
+    const merged = writeProfileConfig(dir2, result.patch);
+    ctx.print(`\u2714 ${key} = ${JSON.stringify(merged[key])} (applies to the next prompt)`);
+    return;
   }
-  overwriteProfileConfig(profileDir2, next);
-  return { ok: true };
+  if (sub === "delete" || sub === "unset") {
+    const key = rest[0];
+    if (!key) {
+      ctx.print("usage: /config delete <key>", "error");
+      return;
+    }
+    if (!CONFIG_KEYS.includes(key)) {
+      ctx.print(`Unknown key "${key}". Allowed: ${CONFIG_KEYS.join(", ")}.`, "error");
+      return;
+    }
+    deleteProfileConfigKey(dir2, key);
+    ctx.print(`\u2714 deleted ${key}`);
+    return;
+  }
+  ctx.print(`Unknown /config subcommand "${sub}". Use: show | init | set | delete.`, "error");
 }
-
-// src/core/worker-tools.ts
-import { spawn as spawn9 } from "child_process";
-var NPM_NAME = /^(?:@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/;
-function run10(cmd, args, onLine, timeoutMs = 18e4) {
-  return new Promise((resolve8) => {
-    let out = "";
-    let buf = "";
-    let child = null;
-    const done = (code) => {
-      clearTimeout(timer);
-      if (onLine && buf.trim()) onLine(buf.trim());
-      resolve8({ code, out });
-    };
-    const timer = setTimeout(() => {
-      child?.kill();
+function fmtDuration(totalSec) {
+  const h = Math.floor(totalSec / 3600);
+  const m = Math.floor(totalSec % 3600 / 60);
+  const s = totalSec % 60;
+  const pad = (n) => String(n).padStart(2, "0");
+  return h > 0 ? `${h}h ${pad(m)}m ${pad(s)}s` : `${m}m ${pad(s)}s`;
+}
+function commandLine(cmd, args) {
+  return `${cmd} ${args.join(" ")}`.trim();
+}
+function runHistory(ctx) {
+  const n = Math.max(1, Math.min(50, Number(ctx.args[0]) || 15));
+  const all = getCommandHistory();
+  if (all.length === 0) {
+    ctx.print("No commands run yet.");
+    return;
+  }
+  const recent = all.slice(-n).reverse();
+  ctx.print(`Last ${recent.length} of ${all.length} commands (newest first) \xB7 /output <n> to view:`);
+  recent.forEach((e, i) => {
+    const time = new Date(e.startedAt).toLocaleTimeString();
+    const state = e.status === "done" ? "\u2713" : e.status === "failed" ? `\u2717 exit ${e.exitCode}` : "\xB7 running";
+    ctx.print(`  [${i + 1}] ${time}  ${commandLine(e.cmd, e.args)}  \xB7 ${state}`);
+  });
+}
+function runOutput(ctx) {
+  const all = getCommandHistory();
+  const n = Number(ctx.args[0]);
+  if (!Number.isInteger(n) || n < 1 || n > all.length) {
+    ctx.print("usage: /output <n>   (n = index from /history)", "error");
+    return;
+  }
+  const entry = all.slice().reverse()[n - 1];
+  const state = entry.exitCode != null ? ` (exit ${entry.exitCode})` : "";
+  ctx.print(`\u2500\u2500 output [${n}] ${commandLine(entry.cmd, entry.args)} \xB7 ${entry.status}${state} \u2500\u2500`);
+  const out = readCommandOutput(entry.commandId);
+  if (out == null) {
+    ctx.print("(no output stored \u2014 it ran in a previous session or produced none)", "warn");
+    return;
+  }
+  for (const line of out.replace(/\n$/, "").split("\n")) ctx.print(line);
+}
+function runLogs(ctx) {
+  const n = Math.max(1, Math.min(200, Number(ctx.args[0]) || 20));
+  const dir2 = join23(ctx.info.profileDir, "logs");
+  const lines = readRecentLogLines(dir2, n);
+  if (lines.length === 0) {
+    ctx.print("No log lines yet.");
+    return;
+  }
+  ctx.print(`Last ${lines.length} log lines (${dir2}):`);
+  for (const raw of lines) {
+    try {
+      const j = JSON.parse(raw);
+      const time = String(j.timestamp ?? "").slice(11, 19);
+      const level = String(j.level ?? "").padEnd(5);
+      const { timestamp, level: _l, version, profile, scope, event, ...fields } = j;
+      void timestamp;
+      void _l;
+      void version;
+      void profile;
+      void scope;
+      const extra = Object.keys(fields).length ? " " + JSON.stringify(fields) : "";
+      ctx.print(`  ${time} ${level} ${String(event ?? "")}${extra}`);
+    } catch {
+      ctx.print(`  ${raw}`);
+    }
+  }
+}
+function runWhoami(ctx) {
+  ctx.print("whoami: fetching from the server\u2026");
+  void ctx.info.whoami().then((w) => {
+    if (!w) {
+      ctx.print("whoami: unavailable (server unreachable or link invalid)", "warn");
+      return;
+    }
+    ctx.print(`account:  ${w.username} \xB7 scope: ${w.scope} \xB7 roles: ${w.roles.join(", ") || "\u2014"}`);
+    ctx.print(`teams:    ${w.teams.length ? w.teams.map((t) => t.name).join(", ") : "(none)"}`);
+    ctx.print(`projects: ${w.projects.length ? w.projects.map((p) => p.name).join(", ") : "(none)"}`);
+  });
+}
+function aiProfileLabel(c) {
+  return c.label?.trim() || profileDisplayLabel(resolveHomePath(c.profile));
+}
+function runAiProfile(ctx) {
+  const dir2 = ctx.info.profileDir;
+  const config = readProfileConfig(dir2);
+  const list = Array.isArray(config.aiProfiles) ? config.aiProfiles : [];
+  const [sub, ...rest] = ctx.args;
+  const action = (sub ?? "list").toLowerCase();
+  if (action === "list") {
+    if (list.length === 0) {
+      ctx.print("No AI profiles configured (config.aiProfiles is empty).", "warn");
+      ctx.print("This worker may use a legacy per-provider config \u2014 /config show to inspect.");
+      return;
+    }
+    const pinned = getPinnedCredential(dir2);
+    const working = getWorkingCredential(dir2);
+    ctx.print("AI profiles (config order = failover priority) \xB7 /ai-profile use <n> to switch:");
+    list.forEach((c, i) => {
+      const usable = isUsableCredential(c);
+      const key = usable ? credentialKey(c.provider, resolveHomePath(c.profile)) : null;
+      const flags = [];
+      if (key && key === pinned) flags.push("pinned");
+      else if (key && !pinned && key === working) flags.push("active");
+      if (c.enabled === false) flags.push("disabled");
+      const model = c.model?.trim() ? ` \xB7 model=${c.model.trim()}` : "";
+      const flagStr = flags.length ? `  (${flags.join(", ")})` : "";
+      const marker = key && key === pinned ? "*" : " ";
+      ctx.print(`  ${marker}[${i + 1}] ${c.provider.padEnd(11)} ${aiProfileLabel(c)}${model}${flagStr}`);
+    });
+    if (pinned) {
+      ctx.print("A profile is pinned \u2014 tried first every prompt; /ai-profile reset returns to auto.");
+    }
+    return;
+  }
+  if (action === "reset" || action === "auto" || action === "clear") {
+    clearPinnedCredential(dir2);
+    ctx.print("\u2714 AI profile pin cleared \u2014 failover is back to automatic (config order / remembered).");
+    const working = getWorkingCredential(dir2);
+    ctx.setActiveProfile(working ? labelFromCredentialKey(working) : null);
+    return;
+  }
+  if (action === "use" || action === "switch") {
+    const n = Number(rest[0]);
+    if (!Number.isInteger(n) || n < 1 || n > list.length) {
+      ctx.print(`usage: /ai-profile use <n>   (n = 1-${list.length || "?"} from /ai-profile list)`, "error");
+      return;
+    }
+    const cred = list[n - 1];
+    if (!isUsableCredential(cred)) {
+      const why = cred.enabled === false ? "it is disabled" : "it has no usable profile dir / provider";
+      ctx.print(`Profile [${n}] "${aiProfileLabel(cred)}" can't be used \u2014 ${why}.`, "error");
+      return;
+    }
+    const credDir = resolveHomePath(cred.profile);
+    setPinnedCredential(dir2, credentialKey(cred.provider, credDir));
+    ctx.setActiveProfile(profileDisplayLabel(credDir));
+    ctx.print(
+      `\u2714 switched to ${cred.provider} profile "${aiProfileLabel(cred)}" \u2014 tried first from the next prompt (failover keeps the rest as backup).`
+    );
+    return;
+  }
+  ctx.print(`Unknown /ai-profile subcommand "${sub}". Use: list | use <n> | reset.`, "error");
+}
+function runFold(ctx, action) {
+  if (ctx.maxBlock === 0) {
+    ctx.print("No collapsible blocks on screen.", "warn");
+    return;
+  }
+  const n = ctx.args[0] != null ? Number(ctx.args[0]) : ctx.maxBlock;
+  if (!Number.isInteger(n) || n < 1 || n > ctx.maxBlock) {
+    ctx.print(`usage: /${action} [1-${ctx.maxBlock}]   (no number \u21D2 the newest block)`, "error");
+    return;
+  }
+  if (action === "expand") ctx.expand(n);
+  else ctx.collapse(n);
+}
+var COMMANDS = [
+  {
+    name: "help",
+    usage: "/help",
+    description: "List slash commands",
+    run: (ctx) => {
+      ctx.print("Slash commands:");
+      for (const cmd of COMMANDS) ctx.print(`  ${cmd.usage.padEnd(28)} ${cmd.description}`);
+    }
+  },
+  {
+    name: "version",
+    usage: "/version",
+    description: "Show the cli version",
+    run: (ctx) => ctx.print(`4PM CLI v${ctx.info.version} \xB7 profile ${ctx.info.profile}`)
+  },
+  {
+    name: "status",
+    usage: "/status",
+    description: "Show connection + profile + session status",
+    run: (ctx) => {
+      const s = ctx.live;
+      const uptime = fmtDuration(Math.max(0, Math.floor((Date.now() - s.startedAt) / 1e3)));
+      ctx.print(`connection: ${s.status}`);
+      ctx.print(`scope:      ${s.scope}`);
+      ctx.print(`worker:     ${s.worker ?? "(unknown)"}`);
+      if (s.project) ctx.print(`project:    ${s.project}`);
+      ctx.print(`profile:    ${ctx.info.profile}`);
+      ctx.print(`server:     ${ctx.info.serverUrl}`);
+      ctx.print(`aiCli:      ${ctx.info.aiCli}${s.activeProfile ? ` \xB7 profile ${s.activeProfile}` : ""}`);
+      ctx.print(`serving:    ${ctx.info.physicPath ?? "(none)"}`);
+      ctx.print(`uptime:     ${uptime} \xB7 commands: ${getCommandHistory().length}`);
+    }
+  },
+  {
+    name: "history",
+    usage: "/history [N]",
+    description: "List the last N executed commands (+ time)",
+    run: runHistory
+  },
+  {
+    name: "output",
+    usage: "/output <n>",
+    description: "Replay a command's output (n from /history)",
+    run: runOutput
+  },
+  {
+    name: "logs",
+    usage: "/logs [N]",
+    description: "Tail the profile's structured log",
+    run: runLogs
+  },
+  {
+    name: "expand",
+    usage: "/expand [N]",
+    description: "Expand a collapsed \u25B8[N] block (default: newest); pretty-prints json/code",
+    run: (ctx) => runFold(ctx, "expand")
+  },
+  {
+    name: "collapse",
+    usage: "/collapse [N]",
+    description: "Collapse an expanded \u25B8[N] block (default: newest)",
+    run: (ctx) => runFold(ctx, "collapse")
+  },
+  {
+    name: "reconnect",
+    usage: "/reconnect",
+    description: "Reconnect to the server now (skip the backoff)",
+    run: (ctx) => ctx.reconnect()
+  },
+  {
+    name: "whoami",
+    usage: "/whoami",
+    description: "Show this machine account + its teams & projects",
+    run: runWhoami
+  },
+  {
+    name: "ai-profile",
+    usage: "/ai-profile [list|use <n>|reset]",
+    description: "List AI profiles / switch which one runs (ADR-0250)",
+    run: runAiProfile
+  },
+  {
+    name: "config",
+    usage: "/config [show|init|set <k> <v>|delete <k>]",
+    description: "View / init / update / delete profile config",
+    run: runConfig
+  },
+  {
+    name: "claude-cmd",
+    usage: "/claude-cmd /context",
+    description: "Run an AI-CLI slash command (e.g. /context, /usage, /status)",
+    run: (ctx) => {
+      const rest = ctx.args.join(" ").trim();
+      if (!rest) {
+        ctx.print("usage: /claude-cmd /context  (forwards to the AI CLI)", "error");
+        return;
+      }
+      ctx.submitAi(rest);
+    }
+  },
+  {
+    name: "clear",
+    usage: "/clear",
+    description: "Clear the transcript",
+    run: (ctx) => ctx.clear()
+  },
+  {
+    name: "quit",
+    usage: "/quit",
+    description: "Quit the cli (also /exit, Ctrl+C)",
+    run: (ctx) => ctx.quit()
+  }
+];
+var ALIASES = { exit: "quit" };
+var SLASH_COMMANDS = COMMANDS.map((c) => ({ name: c.name, usage: c.usage, description: c.description }));
+function runSlashCommand(line, base) {
+  const tokens = line.replace(/^\//, "").trim().split(/\s+/);
+  const rawName = tokens[0] ?? "";
+  const name = ALIASES[rawName] ?? rawName;
+  const command = COMMANDS.find((c) => c.name === name);
+  const ctx = { ...base, args: tokens.slice(1) };
+  if (!command) {
+    ctx.print(`Unknown command: /${rawName} \u2014 try /help`, "error");
+    return;
+  }
+  command.run(ctx);
+}
+
+// src/core/memory-compact.ts
+import { spawn as spawn8 } from "child_process";
+var COMPACT_TIMEOUT_MS = 6e4;
+function buildPrompt3(input) {
+  return [
+    "You maintain a COMPACT running memory of an ongoing assistant conversation so it can continue",
+    "across sessions and accounts. Merge the latest exchange into the existing memory and return the",
+    `UPDATED memory. Keep it UNDER ${input.budgetChars} characters. Use terse Markdown bullets grouped`,
+    "as: Decisions, Constraints, Open tasks, Glossary. Keep durable facts; drop chit-chat and anything",
+    "now obsolete. Output ONLY the updated memory text \u2014 no preamble, no code fences.",
+    "",
+    "=== EXISTING MEMORY ===",
+    input.oldMemory || "(empty)",
+    "",
+    "=== LATEST USER PROMPT ===",
+    input.prompt,
+    "",
+    "=== LATEST ASSISTANT ANSWER ===",
+    input.answer
+  ].join("\n");
+}
+function runOnce2(cmd, profile, prompt, cwd2, extraEnv) {
+  return new Promise((resolve8, reject) => {
+    const args = ["-p", ...profile?.model ? ["--model", profile.model] : []];
+    const env3 = {
+      ...process.env,
+      ...extraEnv,
+      ...profile ? { CLAUDE_CONFIG_DIR: profile.dir } : {}
+    };
+    const child = spawn8(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
+    let out = "";
+    let err = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error("memory compaction timed out"));
+    }, COMPACT_TIMEOUT_MS);
+    timer.unref();
+    child.stdout.on("data", (d) => out += d.toString());
+    child.stderr.on("data", (d) => err += d.toString());
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      reject(e);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve8({ code: code ?? -1, out, err });
+    });
+    child.stdin.write(prompt);
+    child.stdin.end();
+  });
+}
+async function runMemoryCompaction(ai, cwd2, input) {
+  const prompt = buildPrompt3(input);
+  const attempts = ai.profiles.length > 0 ? ai.profiles : [null];
+  for (let i = 0; i < attempts.length; i++) {
+    try {
+      const { code, out } = await runOnce2(ai.cmd, attempts[i], prompt, cwd2, ai.env);
+      if (code === 0 && out.trim()) {
+        reportToolResult(ai.cmd, true);
+        return out.trim().slice(0, input.budgetChars);
+      }
+      if (i === attempts.length - 1) break;
+    } catch {
+      break;
+    }
+  }
+  return "";
+}
+
+// src/core/config-sync.ts
+import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
+import { join as join24 } from "path";
+var SERVER_MANAGED_KEYS = [
+  "physicPath",
+  "sessionSwitchPct",
+  "perPromptTokenLimit",
+  // Project AI-run timeout override mirror (ADR-0243) — the ws_token refreshes it; a Worker-config
+  // edit must not fight it. NOTE: the machine-user's own `aiRunTimeoutSec` is NOT here (operator-editable).
+  "projectAiRunTimeoutSec",
+  // Project idle auto-clear override mirror (ADR-0244) — same rule; the machine-user's own
+  // `autoClearIdleMinutes` is operator-editable and NOT listed here.
+  "projectAutoClearIdleMinutes",
+  // Project shared-AI-memory override mirrors (ADR-0245) — the machine-user's own `aiMemoryEnabled`
+  // / `aiMemoryBudgetChars` are operator-editable and NOT listed here.
+  "projectAiMemoryMode",
+  "projectAiMemoryBudgetChars"
+];
+function readConfigText(profileDir2) {
+  const path = join24(profileDir2, "config.json");
+  if (existsSync12(path)) {
+    try {
+      return readFileSync15(path, "utf8");
+    } catch {
+    }
+  }
+  return JSON.stringify(defaultProfileConfig(), null, 2);
+}
+function applyConfigText(profileDir2, text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (err) {
+    return { ok: false, error: `Invalid JSON: ${err.message}` };
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    return { ok: false, error: "config.json must be a JSON object." };
+  }
+  const next = { ...parsed };
+  const current = readProfileConfig(profileDir2);
+  for (const key of SERVER_MANAGED_KEYS) {
+    if (current[key] !== void 0) next[key] = current[key];
+    else delete next[key];
+  }
+  overwriteProfileConfig(profileDir2, next);
+  return { ok: true };
+}
+
+// src/core/worker-tools.ts
+import { spawn as spawn9 } from "child_process";
+var NPM_NAME = /^(?:@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/;
+function run10(cmd, args, onLine, timeoutMs = 18e4) {
+  return new Promise((resolve8) => {
+    let out = "";
+    let buf = "";
+    let child = null;
+    const done = (code) => {
+      clearTimeout(timer);
+      if (onLine && buf.trim()) onLine(buf.trim());
+      resolve8({ code, out });
+    };
+    const timer = setTimeout(() => {
+      child?.kill();
       if (onLine) onLine(`timed out after ${Math.round(timeoutMs / 1e3)}s`);
       done(124);
     }, timeoutMs);
@@ -36927,7 +37487,16 @@ var CONSOLE_WATCH_LEASE_MS = 45e3;
 var METRICS_SAMPLE_INTERVAL_MS = 5e3;
 var METRICS_WATCH_LEASE_MS = 45e3;
 function toDtoEntry(e) {
-  return { id: e.id, source: e.source, kind: e.kind, text: e.text, level: e.level, resultKind: e.resultKind };
+  return {
+    id: e.id,
+    source: e.source,
+    kind: e.kind,
+    text: e.text,
+    level: e.level,
+    resultKind: e.resultKind,
+    // Processing time on a terminal `exit` entry (ADR-0249) — the web renders it inline.
+    ...e.durationMs != null ? { durationMs: e.durationMs } : {}
+  };
 }
 var WsClient = class {
   constructor(context) {
@@ -36992,8 +37561,13 @@ var WsClient = class {
   reconnectEntryId = null;
   /** Org-configured reconnect cap (seconds) from the last ws_token — overrides env. */
   orgReconnectMaxSec = null;
+  /** Org timezone (IANA) from the last ws_token (ADR-0132) — a rented worker follows its renter's
+   *  org; used to stamp the AI-run start time on the `aireq` transcript marker (ADR-0249). */
+  orgTimezone = "UTC";
   /** Env override for the reconnect cap (seconds); resolved once at construction. */
   envReconnectMaxSec = envReconnectMaxSec();
+  /** Process start (ms) — uptime for a web-dispatched `/status` (ADR-0249). */
+  startedAtMs = Date.now();
   credential;
   /** The physic project folder root this cli serves (null = no project) — fs.list is
    *  scoped to it so the web FsPicker can only browse inward, never out. */
@@ -37174,6 +37748,9 @@ var WsClient = class {
         if (typeof token.reconnectMaxBackoffSec === "number") {
           this.orgReconnectMaxSec = token.reconnectMaxBackoffSec;
         }
+        if (typeof token.timezone === "string" && token.timezone) {
+          this.orgTimezone = token.timezone;
+        }
         if (typeof token.autoUpdateDaily === "boolean") {
           this.updateScheduler.configure({
             autoUpdateDaily: token.autoUpdateDaily,
@@ -37351,8 +37928,8 @@ var WsClient = class {
           const oldRoot = this.physicFolderPath(sync.oldName);
           if (oldRoot) void uninstallCron(oldRoot).catch(() => void 0);
         }
-        if (sync.oldName) rmSync4(join24(this.context.profileDir, sync.oldName), { recursive: true, force: true });
-        mkdirSync5(join24(this.context.profileDir, sync.newName), { recursive: true });
+        if (sync.oldName) rmSync4(join25(this.context.profileDir, sync.oldName), { recursive: true, force: true });
+        mkdirSync5(join25(this.context.profileDir, sync.newName), { recursive: true });
         this.physicRoot = this.physicFolderPath(sync.newName);
         this.bus.setProject(sync.newName);
         this.bus.log(`Physic project folder synced \u2192 ${sync.newName}`);
@@ -37363,7 +37940,7 @@ var WsClient = class {
         if (del.name) {
           const delRoot = this.physicFolderPath(del.name);
           if (delRoot) void uninstallCron(delRoot).catch(() => void 0);
-          rmSync4(join24(this.context.profileDir, del.name), { recursive: true, force: true });
+          rmSync4(join25(this.context.profileDir, del.name), { recursive: true, force: true });
           this.bus.log(`Physic project folder deleted (project removed) \u2192 ${del.name}`);
         }
         void manageSshKey("delete", this.context.profileDir).catch(() => void 0);
@@ -37384,7 +37961,11 @@ var WsClient = class {
           ai: dispatch.ai ?? false
         });
         if (dispatch.ai) {
-          void this.runAiPrompt(dispatch.cmd, dispatch.commandId, "server");
+          if (dispatch.cmd.trimStart().startsWith("/")) {
+            void this.runWebSlashCommand(dispatch.cmd, dispatch.commandId);
+          } else {
+            void this.runAiPrompt(dispatch.cmd, dispatch.commandId, "server", dispatch.aiOneShot ?? false);
+          }
           break;
         }
         recordCommand({
@@ -37399,6 +37980,7 @@ var WsClient = class {
           text: `$ ${dispatch.cmd} ${dispatch.args.join(" ")}`.trimEnd()
         });
         this.bus.startBusy(dispatch.cmd);
+        const cmdStartMs = Date.now();
         void runCommand(dispatch, (out) => {
           if (out.chunk) {
             this.bus.push({ source: "server", kind: "out", text: out.chunk });
@@ -37413,7 +37995,8 @@ var WsClient = class {
               source: "server",
               kind: "exit",
               text: code === 0 ? "\u2713 done" : `\u2717 failed (exit ${code})`,
-              level: code === 0 ? "info" : "error"
+              level: code === 0 ? "info" : "error",
+              durationMs: Date.now() - cmdStartMs
             });
           }
         });
@@ -37736,7 +38319,7 @@ var WsClient = class {
       }
       case WsChannels.LOG_READ: {
         const limit = Math.min(Math.max(payload.limit ?? 200, 1), 2e3);
-        const lines = readRecentLogLines(join24(this.context.profileDir, "logs"), limit);
+        const lines = readRecentLogLines(join25(this.context.profileDir, "logs"), limit);
         this.send(WsChannels.LOG_READ, { lines }, message.id);
         break;
       }
@@ -37815,7 +38398,7 @@ var WsClient = class {
    * exactly like typing the prompt in the cli (tries profiles, meters real tokens) instead
    * of spawning the text as a raw command. Streams output to the transcript AND the server.
    */
-  async runAiPrompt(prompt, commandId, origin) {
+  async runAiPrompt(prompt, commandId, origin, oneShot = false) {
     const config = readProfileConfig(this.context.profileDir);
     const projectTimeoutSec = config.projectAiRunTimeoutSec ?? 0;
     const machineTimeoutSec = config.aiRunTimeoutSec ?? 0;
@@ -37855,9 +38438,10 @@ var WsClient = class {
     const unified = isUnifiedConfig(config);
     const mode = config.aiFailoverMode ?? "remember";
     const workingDir = unified ? null : getWorkingProfile(this.context.profileDir, cmd);
-    const workingCred = unified && mode === "remember" ? getWorkingCredential(this.context.profileDir) : null;
+    const pinnedCred = unified ? getPinnedCredential(this.context.profileDir) : null;
+    const workingCred = unified ? pinnedCred ?? (mode === "remember" ? getWorkingCredential(this.context.profileDir) : null) : null;
     const startDir = unified ? null : this.profileUnderSessionPressure(config, cmd, workingDir);
-    const startCred = unified ? this.credentialUnderSessionPressure(config, workingCred) : null;
+    const startCred = unified && !pinnedCred ? this.credentialUnderSessionPressure(config, workingCred) : null;
     if (startDir && startDir !== workingDir) {
       this.bus.push({
         source: origin,
@@ -37887,9 +38471,10 @@ ${this.aiMemory}
 
 ${guardedPrompt}`;
     }
-    const plan = planAiRun(effectivePrompt, config, hint, resume);
+    const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot);
     const markerArgs = plan.attempts[0]?.args ?? [];
-    this.bus.push({ source: origin, kind: "aireq", text: `${plan.cmd} \u2039 ${prompt}` });
+    const startStamp = formatTimestampInZone(/* @__PURE__ */ new Date(), this.orgTimezone);
+    this.bus.push({ source: origin, kind: "aireq", text: `${startStamp} ${plan.cmd} \u2039 ${prompt}` });
     logger.info("command.ai", { commandId, origin, cmd: plan.cmd, profiles: plan.attempts.length });
     if (origin === "local") {
       this.send(WsChannels.COMMAND_ANNOUNCE, {
@@ -37903,6 +38488,7 @@ ${guardedPrompt}`;
     }
     recordCommand({ commandId, cmd: plan.cmd, args: markerArgs });
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const aiStartedMs = Date.now();
     this.bus.startBusy(plan.cmd);
     let seq = 0;
     let responseHeaderShown = false;
@@ -37946,7 +38532,7 @@ ${guardedPrompt}`;
 `, log: true });
       },
       onAttemptFail: (label, reason) => {
-        const text = reason === "limit" ? `profile "${label}" hit its session limit \u2014 trying next` : `profile "${label}" failed to authenticate \u2014 trying next`;
+        const text = reason === "limit" ? `profile "${label}" hit its session limit \u2014 trying next` : reason === "credits" ? `profile "${label}" is out of usage credits \u2014 trying next` : `profile "${label}" failed to authenticate \u2014 trying next`;
         this.bus.push({ source: origin, kind: "log", text, level: "warn" });
         this.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: `${text}
 `, log: true });
@@ -38019,7 +38605,8 @@ ${guardedPrompt}`;
       source: origin,
       kind: "exit",
       text: result.exitCode === 0 ? "\u2713 ready \u2014 enter your next prompt" : `\u2717 ${plan.cmd} failed (exit ${result.exitCode}) \u2014 see the error above`,
-      level: result.exitCode === 0 ? "info" : "error"
+      level: result.exitCode === 0 ? "info" : "error",
+      durationMs: Date.now() - aiStartedMs
     });
     if (memCfg.enabled && result.exitCode === 0) {
       if (result.workedKey && result.sessionId) {
@@ -38029,6 +38616,116 @@ ${guardedPrompt}`;
       });
     }
   }
+  /**
+   * Run a `/…` 4pm-cli slash command dispatched from the web Console (ADR-0249). Mirrors the TUI's
+   * `runSlashCommand` with a **server-origin** context that streams `print` output back over
+   * command.output + console.sync, so a web user gets the same commands as an operator at the
+   * machine — EXCEPT any the operator disabled via `webBlockedCommands`. `/claude-cmd <x>` forwards
+   * `x` to the AI CLI (a real AI run). Fold ops (`/expand`/`/collapse`) are TUI-only — the web has
+   * its own fold viewer — so they just print a hint. Interactive `confirm` (e.g. `/config init`) is
+   * not supported from the web.
+   */
+  async runWebSlashCommand(line, commandId) {
+    const origin = "server";
+    const config = readProfileConfig(this.context.profileDir);
+    const trimmed = line.trim();
+    const startedMs = Date.now();
+    this.bus.push({ source: origin, kind: "cmd", text: trimmed });
+    recordCommand({ commandId, cmd: trimmed, args: [] });
+    let seq = 0;
+    const emit = (text) => {
+      appendCommandOutput(commandId, `${text}
+`);
+      this.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: `${text}
+` });
+    };
+    const settle = (exitCode) => {
+      this.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: "", done: true, exitCode });
+      finishCommand(commandId, exitCode);
+      this.send(WsChannels.COMMAND_HISTORY, {
+        commandId,
+        cmd: trimmed,
+        args: [],
+        status: exitCode === 0 ? "done" : "failed",
+        exitCode
+      });
+      this.bus.push({
+        source: origin,
+        kind: "exit",
+        text: exitCode === 0 ? "\u2713 done" : `\u2717 failed (exit ${exitCode})`,
+        level: exitCode === 0 ? "info" : "error",
+        durationMs: Date.now() - startedMs
+      });
+    };
+    const rawName = trimmed.replace(/^\//, "").trim().split(/\s+/)[0]?.toLowerCase() ?? "";
+    const name = rawName === "exit" ? "quit" : rawName;
+    const blocked = resolveWebBlockedCommands(config);
+    if (blocked.has(name) || blocked.has(rawName)) {
+      const msg = `Command /${rawName} is disabled on this worker (blocked by the machine config).`;
+      this.bus.push({ source: origin, kind: "log", text: msg, level: "error" });
+      emit(msg);
+      settle(1);
+      return;
+    }
+    if (name === "claude-cmd") {
+      const rest = trimmed.replace(/^\/claude-cmd\s*/i, "").trim();
+      if (!rest) {
+        emit("usage: /claude-cmd /context  (forwards to the AI CLI)");
+        settle(1);
+        return;
+      }
+      await this.runAiPrompt(rest, commandId, origin, false);
+      return;
+    }
+    const info = {
+      version: CLI_VERSION,
+      scope: this.bus.scope ?? "project",
+      profile: basename4(this.context.profileDir),
+      profileDir: this.context.profileDir,
+      serverUrl: this.context.credential.serverUrl,
+      physicPath: this.physicRoot ?? config.physicPath ?? null,
+      aiCli: config.aiCli || "claude",
+      whoami: async () => null
+    };
+    runSlashCommand(trimmed, {
+      info,
+      print: (text, level) => {
+        this.bus.push({ source: origin, kind: "log", text, level });
+        emit(text);
+      },
+      clear: () => {
+        this.bus.clear();
+        this.bus.clearSession();
+      },
+      quit: () => {
+        emit("Quit requested from the web console \u2014 the worker cli is shutting down.");
+        setTimeout(() => process.exit(0), 200);
+      },
+      confirm: (prompt) => {
+        const note = `${prompt} \u2014 interactive prompts aren't supported from the web console; run it on the machine.`;
+        this.bus.push({ source: origin, kind: "log", text: note, level: "warn" });
+        emit(note);
+      },
+      submitAi: () => {
+      },
+      // only /claude-cmd uses this, and it is special-cased above
+      // /ai-profile use/reset from the web Console updates the shared header too (ADR-0250).
+      setActiveProfile: (label) => this.bus.setActiveProfile(label),
+      reconnect: () => this.reconnectNow(),
+      expand: () => emit("Use the web console's fold viewer to expand blocks."),
+      collapse: () => emit("Use the web console's fold viewer to collapse blocks."),
+      maxBlock: 0,
+      live: {
+        status: this.bus.status,
+        scope: this.bus.scope ?? "",
+        worker: this.bus.worker,
+        project: this.bus.project,
+        activeProfile: this.bus.activeProfile,
+        startedAt: this.startedAtMs
+      }
+    });
+    settle(0);
+  }
   /**
    * Fold the latest exchange into the shared AI memory (ADR-0245): a background claude compaction to a
    * budget-bounded summary, cached locally + written back to the server (`memory.update`). Best-effort —
@@ -38380,7 +39077,7 @@ ${guardedPrompt}`;
   /** Create the physic folder at an absolute path if missing (best-effort). */
   ensurePhysicFolderPath(folder) {
     try {
-      if (!existsSync12(folder)) {
+      if (!existsSync13(folder)) {
         mkdirSync5(folder, { recursive: true });
         this.bus.log(`Created physic project folder: ${folder}`);
       }
@@ -38395,7 +39092,7 @@ ${guardedPrompt}`;
    */
   physicFolderPath(projectName) {
     const safe = projectName.replace(/[/\\]/g, "_").replace(/\.\./g, "_").trim();
-    return safe ? join24(this.context.profileDir, safe) : null;
+    return safe ? join25(this.context.profileDir, safe) : null;
   }
   /**
    * Report machine.status: version + the state of the physic project being served
@@ -38409,7 +39106,7 @@ ${guardedPrompt}`;
       projects: [],
       version: CLI_VERSION,
       physicPath,
-      physicPathExists: physicPath ? existsSync12(physicPath) : void 0,
+      physicPathExists: physicPath ? existsSync13(physicPath) : void 0,
       // Real coarse state (ADR-0152): !paused and a recent tick (was hard-coded false).
       autonomousRunning: physicPath ? isAutonomousRunning(physicPath) : false
     });
@@ -38499,7 +39196,7 @@ ${guardedPrompt}`;
    */
   uploadLog() {
     try {
-      const upload = readLogUpload(join24(this.context.profileDir, "logs"));
+      const upload = readLogUpload(join25(this.context.profileDir, "logs"));
       if (!upload) return;
       const sig = `${upload.fileName}:${upload.totalBytes}`;
       if (sig === this.lastLogSig) return;
@@ -38528,9 +39225,9 @@ ${guardedPrompt}`;
 
 // src/core/instance-lock.ts
 import { readFileSync as readFileSync16, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 function lockPath(profileDir2) {
-  return join25(profileDir2, "start.lock");
+  return join26(profileDir2, "start.lock");
 }
 function isAlive(pid) {
   try {
@@ -38830,7 +39527,7 @@ var SessionBus = class {
 // src/core/control-server.ts
 import { createServer } from "net";
 import { rmSync as rmSync6 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 
 // src/core/control-protocol.ts
 var CONTROL_SOCKET_FILE = "control.sock";
@@ -38859,7 +39556,7 @@ function createFrameParser() {
 
 // src/core/control-server.ts
 function startControlServer(bus, profileDir2, info) {
-  const socketPath = join26(profileDir2, CONTROL_SOCKET_FILE);
+  const socketPath = join27(profileDir2, CONTROL_SOCKET_FILE);
   try {
     rmSync6(socketPath, { force: true });
   } catch {
@@ -44590,15 +45287,15 @@ var import_react21 = __toESM(require_react(), 1);
 var import_react26 = __toESM(require_react(), 1);
 
 // src/core/input-history.ts
-import { existsSync as existsSync14, readFileSync as readFileSync18, writeFileSync as writeFileSync8 } from "fs";
-import { join as join27 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync18, writeFileSync as writeFileSync8 } from "fs";
+import { join as join28 } from "path";
 var MAX_HISTORY = 200;
 function historyPath(profileDir2) {
-  return join27(profileDir2, "input-history.json");
+  return join28(profileDir2, "input-history.json");
 }
 function loadInputHistory(profileDir2) {
   const path = historyPath(profileDir2);
-  if (!existsSync14(path)) return [];
+  if (!existsSync15(path)) return [];
   try {
     const data = JSON.parse(readFileSync18(path, "utf8"));
     return Array.isArray(data) ? data.filter((x) => typeof x === "string") : [];
@@ -44720,12 +45417,17 @@ function textColor(line) {
   if (line.kind === "exit") return "green";
   return void 0;
 }
+var START_STAMP_RE = /^(\d{4}\/\d{2}\/\d{2} \d{2}:\d{2}:\d{2} )/;
 function AiMarkerLine({ line }) {
   const arrow = line.kind === "aireq" ? "\u2039" : "\u203A";
   const idx = line.text.indexOf(arrow);
   if (idx < 0) return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: line.text || " " });
+  const before = line.text.slice(0, idx);
+  const stamp = line.kind === "aireq" ? START_STAMP_RE.exec(before)?.[1] ?? "" : "";
+  const name = stamp ? before.slice(stamp.length) : before;
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: "cyan", bold: true, children: line.text.slice(0, idx) }),
+    stamp ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: stamp }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: "cyan", bold: true, children: name }),
     /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: arrow }),
     /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: line.text.slice(idx + 1) })
   ] });
@@ -44750,438 +45452,114 @@ function wrapToWidth(text, width) {
       line = word.trimStart();
     } else {
       line += word;
-    }
-  }
-  if (line) rows.push(line.trimEnd());
-  return rows.length > 0 ? rows : [""];
-}
-var DETAIL_RE = /<detail\s+title="([^"]*)">([\s\S]*?)<\/detail>/g;
-function toSegments(raw) {
-  if (!raw.includes("<detail")) {
-    return raw.split("\n").map((text) => ({ text, collapsed: false }));
-  }
-  const out = [];
-  const re = new RegExp(DETAIL_RE);
-  let last = 0;
-  let m;
-  while ((m = re.exec(raw)) !== null) {
-    const before = raw.slice(last, m.index).replace(/\n$/, "");
-    if (before.length > 0) for (const p of before.split("\n")) out.push({ text: p, collapsed: false });
-    out.push({ text: m[1] || "details", collapsed: true, body: m[2] ?? "" });
-    last = m.index + m[0].length;
-    if (raw[last] === "\n") last += 1;
-  }
-  const rest = raw.slice(last);
-  if (rest.length > 0) for (const p of rest.split("\n")) out.push({ text: p, collapsed: false });
-  if (out.length === 0) out.push({ text: "", collapsed: false });
-  return out;
-}
-function pushCollapsible(lines, entry, opts) {
-  const { blockNo, title, body, expanded, firstRow, textWidth, keyBase } = opts;
-  const base = { source: entry.source, level: entry.level, kind: entry.kind };
-  lines.push({
-    ...base,
-    key: `${keyBase}:m`,
-    text: `${expanded ? "\u25BE" : "\u25B8"}[${blockNo}] ${title}`,
-    showTag: firstRow,
-    collapsed: true,
-    spacer: false,
-    blockIndex: blockNo
-  });
-  if (!expanded) return;
-  prettyResult(body).split("\n").forEach(
-    (seg, i) => wrapToWidth(seg, textWidth).forEach(
-      (row, j) => lines.push({ ...base, key: `${keyBase}:b:${i}:${j}`, text: row, showTag: false, collapsed: false, spacer: false })
-    )
-  );
-}
-function flattenEntries(entries2, textWidth, expanded = /* @__PURE__ */ new Set()) {
-  const lines = [];
-  let prevKey = null;
-  let blockNo = 0;
-  for (const entry of entries2) {
-    const blockKey = `${entry.source}|${entry.kind}`;
-    const newBlock = blockKey !== prevKey;
-    if (newBlock && lines.length > 0) {
-      lines.push({
-        key: `sp:${entry.id}`,
-        source: entry.source,
-        level: entry.level,
-        kind: entry.kind,
-        text: "",
-        showTag: false,
-        collapsed: false,
-        spacer: true
-      });
-    }
-    prevKey = blockKey;
-    let firstRow = newBlock;
-    if (entry.kind === "result") {
-      blockNo += 1;
-      const count = prettyResult(entry.text).split("\n").length;
-      const title = `result \xB7 ${entry.resultKind ?? "json"} \xB7 ${count} ${count === 1 ? "line" : "lines"}`;
-      pushCollapsible(lines, entry, { blockNo, title, body: entry.text, expanded: expanded.has(blockNo), firstRow, textWidth, keyBase: entry.id });
-      continue;
-    }
-    const raw = entry.kind === "out" ? entry.text.replace(/\n$/, "") : entry.text;
-    toSegments(raw).forEach((seg, i) => {
-      if (seg.collapsed) {
-        blockNo += 1;
-        pushCollapsible(lines, entry, { blockNo, title: seg.text, body: seg.body ?? "", expanded: expanded.has(blockNo), firstRow, textWidth, keyBase: `${entry.id}:${i}` });
-        firstRow = false;
-        return;
-      }
-      wrapToWidth(seg.text, textWidth).forEach((row, j) => {
-        lines.push({
-          key: `${entry.id}:${i}:${j}`,
-          source: entry.source,
-          level: entry.level,
-          kind: entry.kind,
-          text: row,
-          showTag: firstRow,
-          collapsed: false,
-          spacer: false
-        });
-        firstRow = false;
-      });
-    });
-  }
-  return lines;
-}
-function TranscriptLine({ line }) {
-  const tag = sourceTag(line.source);
-  return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { flexDirection: "row", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Box_default, { width: 7, marginRight: 1, children: line.showTag ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: tag.color, dimColor: line.source === "system", children: tag.text }) : null }),
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Box_default, { flexGrow: 1, children: line.spacer ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: " " }) : line.collapsed ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, wrap: "truncate-end", children: line.text || " " }) : line.kind === "aireq" || line.kind === "aires" ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AiMarkerLine, { line }) : /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: textColor(line), wrap: "truncate-end", children: line.text || " " }) })
-  ] });
-}
-
-// src/ui/command-input.tsx
-var import_react24 = __toESM(require_react(), 1);
-
-// src/ui/slash-commands.ts
-import { existsSync as existsSync15 } from "fs";
-import { join as join28 } from "path";
-var CONFIG_KEYS = [
-  "aiCli",
-  "claudeHome",
-  "codexHome",
-  "antigravityHome",
-  "physicPath",
-  "commandHistoryUploadMinutes",
-  "autoUpdate",
-  "aiEnv"
-];
-function configPath(profileDir2) {
-  return join28(profileDir2, "config.json");
-}
-function parseConfigAssignment(key, valueTokens) {
-  const value = valueTokens.join(" ").trim();
-  switch (key) {
-    case "aiCli":
-    case "physicPath":
-      if (!value) return { error: `Missing value for "${key}".` };
-      return { patch: { [key]: value } };
-    case "claudeHome":
-    case "codexHome":
-    case "antigravityHome": {
-      const dirs = valueTokens.filter((t) => t.trim());
-      if (dirs.length === 0) return { error: `Missing value for "${key}".` };
-      return { patch: { [key]: dirs.map((profile) => ({ profile, model: "" })) } };
-    }
-    case "commandHistoryUploadMinutes": {
-      const n = Number(value);
-      if (!Number.isFinite(n) || n <= 0) return { error: `"${value}" is not a positive number.` };
-      return { patch: { commandHistoryUploadMinutes: n } };
-    }
-    case "autoUpdate":
-      if (value !== "true" && value !== "false") return { error: `Use true|false, not "${value}".` };
-      return { patch: { autoUpdate: value === "true" } };
-    case "aiEnv":
-      try {
-        return { patch: { aiEnv: JSON.parse(value) } };
-      } catch {
-        return { error: `aiEnv must be JSON, e.g. {"KEY":"val"}.` };
-      }
-    default:
-      return { error: `Unknown key "${key}". Allowed: ${CONFIG_KEYS.join(", ")}.` };
-  }
-}
-function runConfig(ctx) {
-  const [sub, ...rest] = ctx.args;
-  const dir2 = ctx.info.profileDir;
-  const path = configPath(dir2);
-  if (!sub || sub === "show") {
-    ctx.print(`config: ${path}`);
-    const json = JSON.stringify(readProfileConfig(dir2), null, 2);
-    for (const line of json.split("\n")) ctx.print(line);
-    return;
-  }
-  if (sub === "init") {
-    const writeDefaults = (verb) => {
-      overwriteProfileConfig(dir2, defaultProfileConfig());
-      ctx.print(`\u2714 ${verb} default config: ${path}`);
-      ctx.print("add claude profiles: /config set claudeHome .claude .claude-1 (tried in order)");
-    };
-    if (existsSync15(path)) {
-      ctx.confirm(
-        `config exists: ${path} \u2014 replace it with defaults? (y/N)`,
-        () => writeDefaults("replaced with")
-      );
-      return;
-    }
-    writeDefaults("wrote");
-    return;
-  }
-  if (sub === "set") {
-    const [key, ...valueTokens] = rest;
-    if (!key) {
-      ctx.print("usage: /config set <key> <value>", "error");
-      return;
-    }
-    const result = parseConfigAssignment(key, valueTokens);
-    if ("error" in result) {
-      ctx.print(result.error, "error");
-      return;
-    }
-    const merged = writeProfileConfig(dir2, result.patch);
-    ctx.print(`\u2714 ${key} = ${JSON.stringify(merged[key])} (applies to the next prompt)`);
-    return;
-  }
-  if (sub === "delete" || sub === "unset") {
-    const key = rest[0];
-    if (!key) {
-      ctx.print("usage: /config delete <key>", "error");
-      return;
-    }
-    if (!CONFIG_KEYS.includes(key)) {
-      ctx.print(`Unknown key "${key}". Allowed: ${CONFIG_KEYS.join(", ")}.`, "error");
-      return;
-    }
-    deleteProfileConfigKey(dir2, key);
-    ctx.print(`\u2714 deleted ${key}`);
-    return;
-  }
-  ctx.print(`Unknown /config subcommand "${sub}". Use: show | init | set | delete.`, "error");
-}
-function fmtDuration(totalSec) {
-  const h = Math.floor(totalSec / 3600);
-  const m = Math.floor(totalSec % 3600 / 60);
-  const s = totalSec % 60;
-  const pad = (n) => String(n).padStart(2, "0");
-  return h > 0 ? `${h}h ${pad(m)}m ${pad(s)}s` : `${m}m ${pad(s)}s`;
-}
-function commandLine(cmd, args) {
-  return `${cmd} ${args.join(" ")}`.trim();
-}
-function runHistory(ctx) {
-  const n = Math.max(1, Math.min(50, Number(ctx.args[0]) || 15));
-  const all = getCommandHistory();
-  if (all.length === 0) {
-    ctx.print("No commands run yet.");
-    return;
-  }
-  const recent = all.slice(-n).reverse();
-  ctx.print(`Last ${recent.length} of ${all.length} commands (newest first) \xB7 /output <n> to view:`);
-  recent.forEach((e, i) => {
-    const time = new Date(e.startedAt).toLocaleTimeString();
-    const state = e.status === "done" ? "\u2713" : e.status === "failed" ? `\u2717 exit ${e.exitCode}` : "\xB7 running";
-    ctx.print(`  [${i + 1}] ${time}  ${commandLine(e.cmd, e.args)}  \xB7 ${state}`);
-  });
-}
-function runOutput(ctx) {
-  const all = getCommandHistory();
-  const n = Number(ctx.args[0]);
-  if (!Number.isInteger(n) || n < 1 || n > all.length) {
-    ctx.print("usage: /output <n>   (n = index from /history)", "error");
-    return;
-  }
-  const entry = all.slice().reverse()[n - 1];
-  const state = entry.exitCode != null ? ` (exit ${entry.exitCode})` : "";
-  ctx.print(`\u2500\u2500 output [${n}] ${commandLine(entry.cmd, entry.args)} \xB7 ${entry.status}${state} \u2500\u2500`);
-  const out = readCommandOutput(entry.commandId);
-  if (out == null) {
-    ctx.print("(no output stored \u2014 it ran in a previous session or produced none)", "warn");
-    return;
+    }
   }
-  for (const line of out.replace(/\n$/, "").split("\n")) ctx.print(line);
+  if (line) rows.push(line.trimEnd());
+  return rows.length > 0 ? rows : [""];
 }
-function runLogs(ctx) {
-  const n = Math.max(1, Math.min(200, Number(ctx.args[0]) || 20));
-  const dir2 = join28(ctx.info.profileDir, "logs");
-  const lines = readRecentLogLines(dir2, n);
-  if (lines.length === 0) {
-    ctx.print("No log lines yet.");
-    return;
+var DETAIL_RE = /<detail\s+title="([^"]*)">([\s\S]*?)<\/detail>/g;
+function toSegments(raw) {
+  if (!raw.includes("<detail")) {
+    return raw.split("\n").map((text) => ({ text, collapsed: false }));
   }
-  ctx.print(`Last ${lines.length} log lines (${dir2}):`);
-  for (const raw of lines) {
-    try {
-      const j = JSON.parse(raw);
-      const time = String(j.timestamp ?? "").slice(11, 19);
-      const level = String(j.level ?? "").padEnd(5);
-      const { timestamp, level: _l, version, profile, scope, event, ...fields } = j;
-      void timestamp;
-      void _l;
-      void version;
-      void profile;
-      void scope;
-      const extra = Object.keys(fields).length ? " " + JSON.stringify(fields) : "";
-      ctx.print(`  ${time} ${level} ${String(event ?? "")}${extra}`);
-    } catch {
-      ctx.print(`  ${raw}`);
-    }
+  const out = [];
+  const re = new RegExp(DETAIL_RE);
+  let last = 0;
+  let m;
+  while ((m = re.exec(raw)) !== null) {
+    const before = raw.slice(last, m.index).replace(/\n$/, "");
+    if (before.length > 0) for (const p of before.split("\n")) out.push({ text: p, collapsed: false });
+    out.push({ text: m[1] || "details", collapsed: true, body: m[2] ?? "" });
+    last = m.index + m[0].length;
+    if (raw[last] === "\n") last += 1;
   }
+  const rest = raw.slice(last);
+  if (rest.length > 0) for (const p of rest.split("\n")) out.push({ text: p, collapsed: false });
+  if (out.length === 0) out.push({ text: "", collapsed: false });
+  return out;
 }
-function runWhoami(ctx) {
-  ctx.print("whoami: fetching from the server\u2026");
-  void ctx.info.whoami().then((w) => {
-    if (!w) {
-      ctx.print("whoami: unavailable (server unreachable or link invalid)", "warn");
-      return;
-    }
-    ctx.print(`account:  ${w.username} \xB7 scope: ${w.scope} \xB7 roles: ${w.roles.join(", ") || "\u2014"}`);
-    ctx.print(`teams:    ${w.teams.length ? w.teams.map((t) => t.name).join(", ") : "(none)"}`);
-    ctx.print(`projects: ${w.projects.length ? w.projects.map((p) => p.name).join(", ") : "(none)"}`);
+function pushCollapsible(lines, entry, opts) {
+  const { blockNo, title, body, expanded, firstRow, textWidth, keyBase } = opts;
+  const base = { source: entry.source, level: entry.level, kind: entry.kind };
+  lines.push({
+    ...base,
+    key: `${keyBase}:m`,
+    text: `${expanded ? "\u25BE" : "\u25B8"}[${blockNo}] ${title}`,
+    showTag: firstRow,
+    collapsed: true,
+    spacer: false,
+    blockIndex: blockNo
   });
+  if (!expanded) return;
+  prettyResult(body).split("\n").forEach(
+    (seg, i) => wrapToWidth(seg, textWidth).forEach(
+      (row, j) => lines.push({ ...base, key: `${keyBase}:b:${i}:${j}`, text: row, showTag: false, collapsed: false, spacer: false })
+    )
+  );
 }
-function runFold(ctx, action) {
-  if (ctx.maxBlock === 0) {
-    ctx.print("No collapsible blocks on screen.", "warn");
-    return;
-  }
-  const n = ctx.args[0] != null ? Number(ctx.args[0]) : ctx.maxBlock;
-  if (!Number.isInteger(n) || n < 1 || n > ctx.maxBlock) {
-    ctx.print(`usage: /${action} [1-${ctx.maxBlock}]   (no number \u21D2 the newest block)`, "error");
-    return;
-  }
-  if (action === "expand") ctx.expand(n);
-  else ctx.collapse(n);
-}
-var COMMANDS = [
-  {
-    name: "help",
-    usage: "/help",
-    description: "List slash commands",
-    run: (ctx) => {
-      ctx.print("Slash commands:");
-      for (const cmd of COMMANDS) ctx.print(`  ${cmd.usage.padEnd(28)} ${cmd.description}`);
+function flattenEntries(entries2, textWidth, expanded = /* @__PURE__ */ new Set()) {
+  const lines = [];
+  let prevKey = null;
+  let blockNo = 0;
+  for (const entry of entries2) {
+    const blockKey = `${entry.source}|${entry.kind}`;
+    const newBlock = blockKey !== prevKey;
+    if (newBlock && lines.length > 0) {
+      lines.push({
+        key: `sp:${entry.id}`,
+        source: entry.source,
+        level: entry.level,
+        kind: entry.kind,
+        text: "",
+        showTag: false,
+        collapsed: false,
+        spacer: true
+      });
     }
-  },
-  {
-    name: "version",
-    usage: "/version",
-    description: "Show the cli version",
-    run: (ctx) => ctx.print(`4PM CLI v${ctx.info.version} \xB7 profile ${ctx.info.profile}`)
-  },
-  {
-    name: "status",
-    usage: "/status",
-    description: "Show connection + profile + session status",
-    run: (ctx) => {
-      const s = ctx.live;
-      const uptime = fmtDuration(Math.max(0, Math.floor((Date.now() - s.startedAt) / 1e3)));
-      ctx.print(`connection: ${s.status}`);
-      ctx.print(`scope:      ${s.scope}`);
-      ctx.print(`worker:     ${s.worker ?? "(unknown)"}`);
-      if (s.project) ctx.print(`project:    ${s.project}`);
-      ctx.print(`profile:    ${ctx.info.profile}`);
-      ctx.print(`server:     ${ctx.info.serverUrl}`);
-      ctx.print(`aiCli:      ${ctx.info.aiCli}${s.activeProfile ? ` \xB7 profile ${s.activeProfile}` : ""}`);
-      ctx.print(`serving:    ${ctx.info.physicPath ?? "(none)"}`);
-      ctx.print(`uptime:     ${uptime} \xB7 commands: ${getCommandHistory().length}`);
+    prevKey = blockKey;
+    let firstRow = newBlock;
+    if (entry.kind === "result") {
+      blockNo += 1;
+      const count = prettyResult(entry.text).split("\n").length;
+      const title = `result \xB7 ${entry.resultKind ?? "json"} \xB7 ${count} ${count === 1 ? "line" : "lines"}`;
+      pushCollapsible(lines, entry, { blockNo, title, body: entry.text, expanded: expanded.has(blockNo), firstRow, textWidth, keyBase: entry.id });
+      continue;
     }
-  },
-  {
-    name: "history",
-    usage: "/history [N]",
-    description: "List the last N executed commands (+ time)",
-    run: runHistory
-  },
-  {
-    name: "output",
-    usage: "/output <n>",
-    description: "Replay a command's output (n from /history)",
-    run: runOutput
-  },
-  {
-    name: "logs",
-    usage: "/logs [N]",
-    description: "Tail the profile's structured log",
-    run: runLogs
-  },
-  {
-    name: "expand",
-    usage: "/expand [N]",
-    description: "Expand a collapsed \u25B8[N] block (default: newest); pretty-prints json/code",
-    run: (ctx) => runFold(ctx, "expand")
-  },
-  {
-    name: "collapse",
-    usage: "/collapse [N]",
-    description: "Collapse an expanded \u25B8[N] block (default: newest)",
-    run: (ctx) => runFold(ctx, "collapse")
-  },
-  {
-    name: "reconnect",
-    usage: "/reconnect",
-    description: "Reconnect to the server now (skip the backoff)",
-    run: (ctx) => ctx.reconnect()
-  },
-  {
-    name: "whoami",
-    usage: "/whoami",
-    description: "Show this machine account + its teams & projects",
-    run: runWhoami
-  },
-  {
-    name: "config",
-    usage: "/config [show|init|set <k> <v>|delete <k>]",
-    description: "View / init / update / delete profile config",
-    run: runConfig
-  },
-  {
-    name: "claude-cmd",
-    usage: "/claude-cmd /context",
-    description: "Run an AI-CLI slash command (e.g. /context, /usage, /status)",
-    run: (ctx) => {
-      const rest = ctx.args.join(" ").trim();
-      if (!rest) {
-        ctx.print("usage: /claude-cmd /context  (forwards to the AI CLI)", "error");
+    const raw = entry.kind === "out" ? entry.text.replace(/\n$/, "") : entry.text;
+    toSegments(raw).forEach((seg, i) => {
+      if (seg.collapsed) {
+        blockNo += 1;
+        pushCollapsible(lines, entry, { blockNo, title: seg.text, body: seg.body ?? "", expanded: expanded.has(blockNo), firstRow, textWidth, keyBase: `${entry.id}:${i}` });
+        firstRow = false;
         return;
       }
-      ctx.submitAi(rest);
-    }
-  },
-  {
-    name: "clear",
-    usage: "/clear",
-    description: "Clear the transcript",
-    run: (ctx) => ctx.clear()
-  },
-  {
-    name: "quit",
-    usage: "/quit",
-    description: "Quit the cli (also /exit, Ctrl+C)",
-    run: (ctx) => ctx.quit()
-  }
-];
-var ALIASES = { exit: "quit" };
-var SLASH_COMMANDS = COMMANDS.map((c) => ({ name: c.name, usage: c.usage, description: c.description }));
-function runSlashCommand(line, base) {
-  const tokens = line.replace(/^\//, "").trim().split(/\s+/);
-  const rawName = tokens[0] ?? "";
-  const name = ALIASES[rawName] ?? rawName;
-  const command = COMMANDS.find((c) => c.name === name);
-  const ctx = { ...base, args: tokens.slice(1) };
-  if (!command) {
-    ctx.print(`Unknown command: /${rawName} \u2014 try /help`, "error");
-    return;
+      wrapToWidth(seg.text, textWidth).forEach((row, j) => {
+        lines.push({
+          key: `${entry.id}:${i}:${j}`,
+          source: entry.source,
+          level: entry.level,
+          kind: entry.kind,
+          text: row,
+          showTag: firstRow,
+          collapsed: false,
+          spacer: false
+        });
+        firstRow = false;
+      });
+    });
   }
-  command.run(ctx);
+  return lines;
+}
+function TranscriptLine({ line }) {
+  const tag = sourceTag(line.source);
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { flexDirection: "row", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Box_default, { width: 7, marginRight: 1, children: line.showTag ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: tag.color, dimColor: line.source === "system", children: tag.text }) : null }),
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Box_default, { flexGrow: 1, children: line.spacer ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: " " }) : line.collapsed ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, wrap: "truncate-end", children: line.text || " " }) : line.kind === "aireq" || line.kind === "aires" ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AiMarkerLine, { line }) : /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: textColor(line), wrap: "truncate-end", children: line.text || " " }) })
+  ] });
 }
 
 // src/ui/command-input.tsx
+var import_react24 = __toESM(require_react(), 1);
 var import_jsx_runtime3 = __toESM(require_jsx_runtime(), 1);
 function Hint() {
   return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { dimColor: true, children: "  /help \xB7 Tab complete \xB7 \u2191\u2193 history \xB7 PgUp/PgDn scroll \xB7 Ctrl+C quit" });
@@ -45466,6 +45844,9 @@ function App2({
           setPendingConfirm({ prompt, onYes });
         },
         submitAi: (aiInput) => bus.submitLocal(aiInput),
+        // /ai-profile use/reset updates the header's active-profile label at once (ADR-0250);
+        // the bus event feeds the React state (see the onActiveProfile subscription above).
+        setActiveProfile: (label) => bus.setActiveProfile(label),
         reconnect: () => bus.requestReconnect(),
         expand: expandFold,
         collapse: collapseFold,