@agimon-ai/doompi 0.0.1-alpha.100 → 0.0.1-alpha.101

package/README.md

@@ -437,8 +437,8 @@ configured.
 A promise to "only plan" is not a permission boundary. [`@agimon-ai/doompi-plan`][pkg-doompi-plan]
 removes Pi's `edit` and `write` tools while the agent explores, persists the plan, and hands it back
 for approval. It does not sandbox Bash, external tools, or the operating system. `SPC p e` enters
-normal planning and leaves it again once on; `SPC p d` is debug planning and `SPC p f` the Fable
-flow.
+normal planning and leaves it again once on; `SPC p d` is debug planning and `SPC p r` is Code Review
+planning, with actionable findings and proposed fixes for approval.
 Turn it on when the approach should be settled before the files move.
 
 #### Loop mode

package/dist/bin/serve.cjs

@@ -1,10 +1,15 @@
 #!/usr/bin/env node
+const require_run = require("../src/cli/server/run.cjs");
 //#region src/bin/serve.ts
-require("../src/cli/server/run.cjs").runServer(process.argv.slice(2)).then((code) => {
+function finish(code) {
 	process.exitCode = code;
+	setTimeout(() => process.exit(code), 2e3).unref();
+}
+require_run.runServer(process.argv.slice(2)).then((code) => {
+	finish(code);
 }, (error) => {
 	process.stderr.write(`[doompi-server] ${error instanceof Error ? error.message : String(error)}\n`);
-	process.exitCode = 1;
+	finish(1);
 });
 //#endregion
 

package/dist/bin/serve.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"serve.cjs","names":["runServer"],"sources":["../../src/bin/serve.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { runServer } from '../cli/server/run';\n\nrunServer(process.argv.slice(2)).then(\n  (code) => {\n    process.exitCode = code;\n  },\n  (error: unknown) => {\n    process.stderr.write(`[doompi-server] ${error instanceof Error ? error.message : String(error)}\\n`);\n    process.exitCode = 1;\n  },\n);\n"],"mappings":";;mCAGAA,CAAAA,CAAAA,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAC9B,SAAS;CACR,QAAQ,WAAW;AACrB,IACC,UAAmB;CAClB,QAAQ,OAAO,MAAM,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;CAClG,QAAQ,WAAW;AACrB,CACF"}
+{"version":3,"file":"serve.cjs","names":["runServer"],"sources":["../../src/bin/serve.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { runServer } from '../cli/server/run';\n\n// The library finishes bounded cleanup first. A stale handle must not keep this\n// standalone CLI alive forever; an unreferenced deadline still lets output drain.\nfunction finish(code: number): void {\n  process.exitCode = code;\n  setTimeout(() => process.exit(code), 2_000).unref();\n}\n\nrunServer(process.argv.slice(2)).then(\n  (code) => {\n    finish(code);\n  },\n  (error: unknown) => {\n    process.stderr.write(`[doompi-server] ${error instanceof Error ? error.message : String(error)}\\n`);\n    finish(1);\n  },\n);\n"],"mappings":";;;AAKA,SAAS,OAAO,MAAoB;CAClC,QAAQ,WAAW;CACnB,iBAAiB,QAAQ,KAAK,IAAI,GAAG,GAAK,CAAC,CAAC,MAAM;AACpD;AAEAA,YAAAA,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAC9B,SAAS;CACR,OAAO,IAAI;AACb,IACC,UAAmB;CAClB,QAAQ,OAAO,MAAM,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;CAClG,OAAO,CAAC;AACV,CACF"}

package/dist/bin/serve.mjs

@@ -1,11 +1,15 @@
 #!/usr/bin/env node
 import { runServer } from "../src/cli/server/run.mjs";
 //#region src/bin/serve.ts
-runServer(process.argv.slice(2)).then((code) => {
+function finish(code) {
 	process.exitCode = code;
+	setTimeout(() => process.exit(code), 2e3).unref();
+}
+runServer(process.argv.slice(2)).then((code) => {
+	finish(code);
 }, (error) => {
 	process.stderr.write(`[doompi-server] ${error instanceof Error ? error.message : String(error)}\n`);
-	process.exitCode = 1;
+	finish(1);
 });
 //#endregion
 export {};

package/dist/bin/serve.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"serve.mjs","names":[],"sources":["../../src/bin/serve.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { runServer } from '../cli/server/run';\n\nrunServer(process.argv.slice(2)).then(\n  (code) => {\n    process.exitCode = code;\n  },\n  (error: unknown) => {\n    process.stderr.write(`[doompi-server] ${error instanceof Error ? error.message : String(error)}\\n`);\n    process.exitCode = 1;\n  },\n);\n"],"mappings":";;;AAGA,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAC9B,SAAS;CACR,QAAQ,WAAW;AACrB,IACC,UAAmB;CAClB,QAAQ,OAAO,MAAM,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;CAClG,QAAQ,WAAW;AACrB,CACF"}
+{"version":3,"file":"serve.mjs","names":[],"sources":["../../src/bin/serve.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { runServer } from '../cli/server/run';\n\n// The library finishes bounded cleanup first. A stale handle must not keep this\n// standalone CLI alive forever; an unreferenced deadline still lets output drain.\nfunction finish(code: number): void {\n  process.exitCode = code;\n  setTimeout(() => process.exit(code), 2_000).unref();\n}\n\nrunServer(process.argv.slice(2)).then(\n  (code) => {\n    finish(code);\n  },\n  (error: unknown) => {\n    process.stderr.write(`[doompi-server] ${error instanceof Error ? error.message : String(error)}\\n`);\n    finish(1);\n  },\n);\n"],"mappings":";;;AAKA,SAAS,OAAO,MAAoB;CAClC,QAAQ,WAAW;CACnB,iBAAiB,QAAQ,KAAK,IAAI,GAAG,GAAK,CAAC,CAAC,MAAM;AACpD;AAEA,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAC9B,SAAS;CACR,OAAO,IAAI;AACb,IACC,UAAmB;CAClB,QAAQ,OAAO,MAAM,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;CAClG,OAAO,CAAC;AACV,CACF"}

package/dist/src/builders/server/executionBudget.cjs

@@ -0,0 +1,64 @@
+//#region src/builders/server/executionBudget.ts
+const MAX_QUEUED_JOBS = 128;
+/** One host owns the queue; session callers only borrow execution slots. */
+function createExecutionBudget(limit = 2) {
+	if (!Number.isSafeInteger(limit) || limit < 1) throw new RangeError("Heavy-job limit must be a positive integer");
+	let running = 0;
+	let closed = false;
+	const queue = [];
+	const drain = () => {
+		while (!closed && running < limit && queue.length) queue.shift().grant();
+	};
+	const lease = () => {
+		running++;
+		let released = false;
+		return () => {
+			if (released) return;
+			released = true;
+			running--;
+			drain();
+		};
+	};
+	return {
+		async acquire(signal) {
+			if (closed) throw new Error("The host execution budget is closed");
+			signal?.throwIfAborted();
+			if (running < limit) return lease();
+			if (queue.length >= MAX_QUEUED_JOBS) throw new Error("The host heavy-job queue is full");
+			return new Promise((resolve, reject) => {
+				const detach = () => signal?.removeEventListener("abort", onAbort);
+				const waiter = {
+					grant: () => {
+						detach();
+						if (signal?.aborted) reject(signal.reason);
+						else resolve(lease());
+					},
+					cancel: (reason) => {
+						detach();
+						const index = queue.indexOf(waiter);
+						if (index >= 0) queue.splice(index, 1);
+						reject(reason);
+					}
+				};
+				const onAbort = () => waiter.cancel(signal?.reason);
+				queue.push(waiter);
+				signal?.addEventListener("abort", onAbort, { once: true });
+				if (signal?.aborted) onAbort();
+			});
+		},
+		getSnapshot: () => ({
+			running,
+			queued: queue.length,
+			limit
+		}),
+		close() {
+			if (closed) return;
+			closed = true;
+			for (const waiter of queue.splice(0)) waiter.cancel(/* @__PURE__ */ new Error("The host execution budget is closed"));
+		}
+	};
+}
+//#endregion
+exports.createExecutionBudget = createExecutionBudget;
+
+//# sourceMappingURL=executionBudget.cjs.map

package/dist/src/builders/server/executionBudget.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionBudget.cjs","names":[],"sources":["../../../../src/builders/server/executionBudget.ts"],"sourcesContent":["import type { DoomHostExecutionBudget } from '@agimon-ai/doompi-core/packageApi';\n\nconst MAX_QUEUED_JOBS = 128;\n\n/** One host owns the queue; session callers only borrow execution slots. */\nexport function createExecutionBudget(limit = 2): DoomHostExecutionBudget & { close(): void } {\n  if (!Number.isSafeInteger(limit) || limit < 1) throw new RangeError('Heavy-job limit must be a positive integer');\n  let running = 0;\n  let closed = false;\n  const queue: Array<{ grant(): void; cancel(reason: unknown): void }> = [];\n\n  const drain = (): void => {\n    while (!closed && running < limit && queue.length) queue.shift()!.grant();\n  };\n  const lease = (): (() => void) => {\n    running++;\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      running--;\n      drain();\n    };\n  };\n\n  return {\n    async acquire(signal) {\n      if (closed) throw new Error('The host execution budget is closed');\n      signal?.throwIfAborted();\n      if (running < limit) return lease();\n      if (queue.length >= MAX_QUEUED_JOBS) throw new Error('The host heavy-job queue is full');\n      return new Promise<() => void>((resolve, reject) => {\n        const detach = (): void => signal?.removeEventListener('abort', onAbort);\n        const waiter = {\n          grant: () => {\n            detach();\n            if (signal?.aborted) reject(signal.reason);\n            else resolve(lease());\n          },\n          cancel: (reason: unknown) => {\n            detach();\n            const index = queue.indexOf(waiter);\n            if (index >= 0) queue.splice(index, 1);\n            reject(reason);\n          },\n        };\n        const onAbort = (): void => waiter.cancel(signal?.reason);\n        queue.push(waiter);\n        signal?.addEventListener('abort', onAbort, { once: true });\n        if (signal?.aborted) onAbort();\n      });\n    },\n    getSnapshot: () => ({ running, queued: queue.length, limit }),\n    close() {\n      if (closed) return;\n      closed = true;\n      for (const waiter of queue.splice(0)) waiter.cancel(new Error('The host execution budget is closed'));\n    },\n  };\n}\n"],"mappings":";AAEA,MAAM,kBAAkB;;AAGxB,SAAgB,sBAAsB,QAAQ,GAAgD;CAC5F,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG,MAAM,IAAI,WAAW,4CAA4C;CAChH,IAAI,UAAU;CACd,IAAI,SAAS;CACb,MAAM,QAAiE,CAAC;CAExE,MAAM,cAAoB;EACxB,OAAO,CAAC,UAAU,UAAU,SAAS,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAE,MAAM;CAC1E;CACA,MAAM,cAA4B;EAChC;EACA,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX;GACA,MAAM;EACR;CACF;CAEA,OAAO;EACL,MAAM,QAAQ,QAAQ;GACpB,IAAI,QAAQ,MAAM,IAAI,MAAM,qCAAqC;GACjE,QAAQ,eAAe;GACvB,IAAI,UAAU,OAAO,OAAO,MAAM;GAClC,IAAI,MAAM,UAAU,iBAAiB,MAAM,IAAI,MAAM,kCAAkC;GACvF,OAAO,IAAI,SAAqB,SAAS,WAAW;IAClD,MAAM,eAAqB,QAAQ,oBAAoB,SAAS,OAAO;IACvE,MAAM,SAAS;KACb,aAAa;MACX,OAAO;MACP,IAAI,QAAQ,SAAS,OAAO,OAAO,MAAM;WACpC,QAAQ,MAAM,CAAC;KACtB;KACA,SAAS,WAAoB;MAC3B,OAAO;MACP,MAAM,QAAQ,MAAM,QAAQ,MAAM;MAClC,IAAI,SAAS,GAAG,MAAM,OAAO,OAAO,CAAC;MACrC,OAAO,MAAM;KACf;IACF;IACA,MAAM,gBAAsB,OAAO,OAAO,QAAQ,MAAM;IACxD,MAAM,KAAK,MAAM;IACjB,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;IACzD,IAAI,QAAQ,SAAS,QAAQ;GAC/B,CAAC;EACH;EACA,oBAAoB;GAAE;GAAS,QAAQ,MAAM;GAAQ;EAAM;EAC3D,QAAQ;GACN,IAAI,QAAQ;GACZ,SAAS;GACT,KAAK,MAAM,UAAU,MAAM,OAAO,CAAC,GAAG,OAAO,uBAAO,IAAI,MAAM,qCAAqC,CAAC;EACtG;CACF;AACF"}

package/dist/src/builders/server/executionBudget.mjs

@@ -0,0 +1,64 @@
+//#region src/builders/server/executionBudget.ts
+const MAX_QUEUED_JOBS = 128;
+/** One host owns the queue; session callers only borrow execution slots. */
+function createExecutionBudget(limit = 2) {
+	if (!Number.isSafeInteger(limit) || limit < 1) throw new RangeError("Heavy-job limit must be a positive integer");
+	let running = 0;
+	let closed = false;
+	const queue = [];
+	const drain = () => {
+		while (!closed && running < limit && queue.length) queue.shift().grant();
+	};
+	const lease = () => {
+		running++;
+		let released = false;
+		return () => {
+			if (released) return;
+			released = true;
+			running--;
+			drain();
+		};
+	};
+	return {
+		async acquire(signal) {
+			if (closed) throw new Error("The host execution budget is closed");
+			signal?.throwIfAborted();
+			if (running < limit) return lease();
+			if (queue.length >= MAX_QUEUED_JOBS) throw new Error("The host heavy-job queue is full");
+			return new Promise((resolve, reject) => {
+				const detach = () => signal?.removeEventListener("abort", onAbort);
+				const waiter = {
+					grant: () => {
+						detach();
+						if (signal?.aborted) reject(signal.reason);
+						else resolve(lease());
+					},
+					cancel: (reason) => {
+						detach();
+						const index = queue.indexOf(waiter);
+						if (index >= 0) queue.splice(index, 1);
+						reject(reason);
+					}
+				};
+				const onAbort = () => waiter.cancel(signal?.reason);
+				queue.push(waiter);
+				signal?.addEventListener("abort", onAbort, { once: true });
+				if (signal?.aborted) onAbort();
+			});
+		},
+		getSnapshot: () => ({
+			running,
+			queued: queue.length,
+			limit
+		}),
+		close() {
+			if (closed) return;
+			closed = true;
+			for (const waiter of queue.splice(0)) waiter.cancel(/* @__PURE__ */ new Error("The host execution budget is closed"));
+		}
+	};
+}
+//#endregion
+export { createExecutionBudget };
+
+//# sourceMappingURL=executionBudget.mjs.map

package/dist/src/builders/server/executionBudget.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionBudget.mjs","names":[],"sources":["../../../../src/builders/server/executionBudget.ts"],"sourcesContent":["import type { DoomHostExecutionBudget } from '@agimon-ai/doompi-core/packageApi';\n\nconst MAX_QUEUED_JOBS = 128;\n\n/** One host owns the queue; session callers only borrow execution slots. */\nexport function createExecutionBudget(limit = 2): DoomHostExecutionBudget & { close(): void } {\n  if (!Number.isSafeInteger(limit) || limit < 1) throw new RangeError('Heavy-job limit must be a positive integer');\n  let running = 0;\n  let closed = false;\n  const queue: Array<{ grant(): void; cancel(reason: unknown): void }> = [];\n\n  const drain = (): void => {\n    while (!closed && running < limit && queue.length) queue.shift()!.grant();\n  };\n  const lease = (): (() => void) => {\n    running++;\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      running--;\n      drain();\n    };\n  };\n\n  return {\n    async acquire(signal) {\n      if (closed) throw new Error('The host execution budget is closed');\n      signal?.throwIfAborted();\n      if (running < limit) return lease();\n      if (queue.length >= MAX_QUEUED_JOBS) throw new Error('The host heavy-job queue is full');\n      return new Promise<() => void>((resolve, reject) => {\n        const detach = (): void => signal?.removeEventListener('abort', onAbort);\n        const waiter = {\n          grant: () => {\n            detach();\n            if (signal?.aborted) reject(signal.reason);\n            else resolve(lease());\n          },\n          cancel: (reason: unknown) => {\n            detach();\n            const index = queue.indexOf(waiter);\n            if (index >= 0) queue.splice(index, 1);\n            reject(reason);\n          },\n        };\n        const onAbort = (): void => waiter.cancel(signal?.reason);\n        queue.push(waiter);\n        signal?.addEventListener('abort', onAbort, { once: true });\n        if (signal?.aborted) onAbort();\n      });\n    },\n    getSnapshot: () => ({ running, queued: queue.length, limit }),\n    close() {\n      if (closed) return;\n      closed = true;\n      for (const waiter of queue.splice(0)) waiter.cancel(new Error('The host execution budget is closed'));\n    },\n  };\n}\n"],"mappings":";AAEA,MAAM,kBAAkB;;AAGxB,SAAgB,sBAAsB,QAAQ,GAAgD;CAC5F,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG,MAAM,IAAI,WAAW,4CAA4C;CAChH,IAAI,UAAU;CACd,IAAI,SAAS;CACb,MAAM,QAAiE,CAAC;CAExE,MAAM,cAAoB;EACxB,OAAO,CAAC,UAAU,UAAU,SAAS,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAE,MAAM;CAC1E;CACA,MAAM,cAA4B;EAChC;EACA,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX;GACA,MAAM;EACR;CACF;CAEA,OAAO;EACL,MAAM,QAAQ,QAAQ;GACpB,IAAI,QAAQ,MAAM,IAAI,MAAM,qCAAqC;GACjE,QAAQ,eAAe;GACvB,IAAI,UAAU,OAAO,OAAO,MAAM;GAClC,IAAI,MAAM,UAAU,iBAAiB,MAAM,IAAI,MAAM,kCAAkC;GACvF,OAAO,IAAI,SAAqB,SAAS,WAAW;IAClD,MAAM,eAAqB,QAAQ,oBAAoB,SAAS,OAAO;IACvE,MAAM,SAAS;KACb,aAAa;MACX,OAAO;MACP,IAAI,QAAQ,SAAS,OAAO,OAAO,MAAM;WACpC,QAAQ,MAAM,CAAC;KACtB;KACA,SAAS,WAAoB;MAC3B,OAAO;MACP,MAAM,QAAQ,MAAM,QAAQ,MAAM;MAClC,IAAI,SAAS,GAAG,MAAM,OAAO,OAAO,CAAC;MACrC,OAAO,MAAM;KACf;IACF;IACA,MAAM,gBAAsB,OAAO,OAAO,QAAQ,MAAM;IACxD,MAAM,KAAK,MAAM;IACjB,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;IACzD,IAAI,QAAQ,SAAS,QAAQ;GAC/B,CAAC;EACH;EACA,oBAAoB;GAAE;GAAS,QAAQ,MAAM;GAAQ;EAAM;EAC3D,QAAQ;GACN,IAAI,QAAQ;GACZ,SAAS;GACT,KAAK,MAAM,UAAU,MAAM,OAAO,CAAC,GAAG,OAAO,uBAAO,IAAI,MAAM,qCAAqC,CAAC;EACtG;CACF;AACF"}

package/dist/src/builders/server/runtime.cjs

@@ -7,10 +7,12 @@ const require_index$4 = require("../../composition/syncDrift/index.cjs");
 const require_harnessContext = require("../cli/harnessContext.cjs");
 const require_computerUseBinding = require("./computerUseBinding.cjs");
 const require_defaultWorkspace = require("./defaultWorkspace.cjs");
+const require_executionBudget = require("./executionBudget.cjs");
 const require_logSink = require("./logSink.cjs");
 const require_selectionStatus = require("./selectionStatus.cjs");
 const require_sessionArguments = require("./sessionArguments.cjs");
 const require_sessionArtifact = require("./sessionArtifact.cjs");
+const require_shutdown = require("./shutdown.cjs");
 const require_workspaceCheckout = require("./workspaceCheckout.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
@@ -43,17 +45,11 @@ ws = require_runtime.__toESM(ws, 1);
 let _agimon_ai_doompi_config_harnessStore = require("@agimon-ai/doompi-config/harnessStore");
 let _agimon_ai_doompi_config_harnessState = require("@agimon-ai/doompi-config/harnessState");
 //#region src/builders/server/runtime.ts
-const TELEMETRY_SHUTDOWN_TIMEOUT_MS = 2e3;
 async function bounded(operation, label, notice) {
-	let timeout;
 	try {
-		await Promise.race([operation, new Promise((resolve) => {
-			timeout = setTimeout(resolve, TELEMETRY_SHUTDOWN_TIMEOUT_MS);
-		})]);
+		await require_shutdown.withShutdownDeadline(() => operation, label);
 	} catch (error) {
 		notice(`${label} failed: ${error instanceof Error ? error.message : String(error)}`);
-	} finally {
-		if (timeout) clearTimeout(timeout);
 	}
 }
 async function runServerRuntime(options, runtime) {
@@ -62,6 +58,7 @@ async function runServerRuntime(options, runtime) {
 		...incomingEnvironment,
 		LOG_SINK_INSTANCE: "global"
 	};
+	const executionBudget = require_executionBudget.createExecutionBudget(Number(baseEnvironment.DOOM_RUNNER_MAX_HEAVY_JOBS ?? 2));
 	await require_logSink.ensureGlobalLogSink({
 		cwd: baseCwd,
 		env: baseEnvironment,
@@ -111,9 +108,21 @@ async function runServerRuntime(options, runtime) {
 		homeDirectory,
 		onNotice: notice
 	});
+	let lastBudgetSnapshot = "";
 	let nextEventLoopTick = performance.now() + 1e3;
 	const eventLoopMonitor = setInterval(() => {
 		const now = performance.now();
+		const budget = executionBudget.getSnapshot();
+		const snapshot = JSON.stringify(budget);
+		if (snapshot !== lastBudgetSnapshot) {
+			lastBudgetSnapshot = snapshot;
+			telemetry.recordEvent("doompi_server.execution_budget", {
+				host_pid: process.pid,
+				running_jobs: budget.running,
+				queued_jobs: budget.queued,
+				limit: budget.limit
+			}).catch((error) => notice(`execution budget telemetry failed: ${String(error)}`));
+		}
 		const delay = Math.max(0, now - nextEventLoopTick);
 		nextEventLoopTick = now + 1e3;
 		if (delay >= 100) telemetry.recordEvent("doompi_server.event_loop_delay", { duration_ms: Math.round(delay) }).catch((error) => notice(`event loop telemetry failed: ${String(error)}`));
@@ -142,8 +151,8 @@ async function runServerRuntime(options, runtime) {
 	* it exists to survive.
 	*/
 	let shuttingDown = false;
-	const closeManagedSession = async (sessionId) => {
-		if (!shuttingDown) openSessions.remove(sessionId);
+	const closeManagedSession = async (sessionId, options) => {
+		if (!shuttingDown && options?.keepDormant !== true) openSessions.remove(sessionId);
 		const artifacts = sessionArtifacts.get(sessionId);
 		sessionArtifacts.delete(sessionId);
 		webCompositions?.remove({
@@ -152,17 +161,17 @@ async function runServerRuntime(options, runtime) {
 		});
 		const failures = [];
 		try {
-			await baseSessionManager.closeSession(sessionId);
+			await require_shutdown.withShutdownDeadline(() => baseSessionManager.closeSession(sessionId), `Session '${sessionId}' runtime shutdown`);
 		} catch (error) {
 			failures.push(error);
 		}
 		try {
-			await artifacts?.apis.close();
+			await require_shutdown.withShutdownDeadline(() => artifacts?.apis.close(), `Session '${sessionId}' API shutdown`);
 		} catch (error) {
 			failures.push(error);
 		}
 		try {
-			await artifacts?.cleanup();
+			await require_shutdown.withShutdownDeadline(() => artifacts?.cleanup(), `Session '${sessionId}' artifact cleanup`);
 		} catch (error) {
 			failures.push(error);
 		}
@@ -318,6 +327,7 @@ async function runServerRuntime(options, runtime) {
 				hubToken: token,
 				sessionService: hub.sessionService,
 				mediaArbitration,
+				executionBudget,
 				peerAgents,
 				directEvents: hub.directEvents,
 				requestApi: (mount, basePath, request) => hub.requestApi(mount, basePath, request),
@@ -498,7 +508,7 @@ async function runServerRuntime(options, runtime) {
 					notice(`Workspace '${workspace.root}' could not be restored: ${error instanceof Error ? error.message : String(error)}`);
 				}
 			}
-			const sessionHostOptions = (context, bundle, mcpBundle, registration, identity, workspace) => {
+			const sessionHostOptions = (context, bundle, mcpBundle, registration, identity, workspace, explicit = { pinned: [] }) => {
 				const policyOptions = context.options;
 				const sessionSelection = {
 					root: policyOptions.repoRoot,
@@ -506,7 +516,7 @@ async function runServerRuntime(options, runtime) {
 					activeLayers: context.selectedLayers,
 					domains: policyOptions.domains,
 					profile: context.profile,
-					state: { "minor-mode": [] }
+					state: { "minor-mode": [...explicit.minorModes ?? []] }
 				};
 				const piBootstrap = require_index$3.readRegisteredBootstrapStatus(registration, void 0, homeDirectory);
 				if (!piBootstrap.fresh || piBootstrap.bootstrap === void 0) throw new Error(`The admitted DoomPi bootstrap for generation '${registration.generation}' is unavailable.`);
@@ -528,11 +538,13 @@ async function runServerRuntime(options, runtime) {
 					environment: Object.freeze({ ...context.environment }),
 					piExtensionPaths: [piBootstrap.bootstrap],
 					selection: sessionSelection,
+					...explicit.allowedTools === void 0 ? {} : { allowedTools: explicit.allowedTools },
 					selectionOverrides: [
 						"majorMode",
 						"domains",
 						"profile"
 					].filter((axis) => {
+						if (explicit.pinned.includes(axis)) return true;
 						const flag = axis === "majorMode" ? "--major-mode" : `--${axis}`;
 						return identity.sessionId === resolved.identity.sessionId && resolved.agentArgs.some((arg) => arg === flag || arg.startsWith(`${flag}=`));
 					}),
@@ -583,6 +595,7 @@ async function runServerRuntime(options, runtime) {
 				hubToken: token,
 				sessionService: hub.sessionService,
 				mediaArbitration,
+				executionBudget,
 				peerAgents,
 				pluginRegistry: hub.pluginRegistry,
 				apis: [],
@@ -687,9 +700,13 @@ async function runServerRuntime(options, runtime) {
 				};
 				const inheritedWorkspaceId = groupingWorkspaceId ?? (request.parentSessionId ? hub.session(request.parentSessionId)?.workspaceId ?? openSessions.list().find((record) => record.sessionId === request.parentSessionId)?.workspaceId : void 0);
 				const parentArtifact = request.parentSessionId === void 0 ? void 0 : sessionArtifacts.get(request.parentSessionId)?.registration ?? pendingSessions.get(request.parentSessionId)?.registration ?? openSessions.list().find((record) => record.sessionId === request.parentSessionId)?.artifact;
+				const explicit = require_sessionArguments.sessionSelectionArgs(request);
 				const start = (async () => {
 					const childIdentity = require_sessionArguments.resolveSessionIdentity([], identity);
-					const childEnvironment = { ...baseEnvironment };
+					const childEnvironment = {
+						...baseEnvironment,
+						...request.environment
+					};
 					for (const key of [_agimon_ai_doompi_config_harnessStore.HARNESS_STATE_POINTER, ...Object.values(_agimon_ai_doompi_config_harnessState.HARNESS_STATE_KEYS)]) delete childEnvironment[key];
 					const workspace = inheritedWorkspaceId === void 0 ? await admitWorkspace(request.cwd) : hub.workspaces().find((candidate) => candidate.id === inheritedWorkspaceId && candidate.available !== false);
 					if (workspace === void 0) throw new Error("The session workspace is unavailable.");
@@ -698,7 +715,8 @@ async function runServerRuntime(options, runtime) {
 						args: [
 							"--cwd",
 							request.cwd,
-							...childIdentity.agentArgs
+							...childIdentity.agentArgs,
+							...explicit.args
 						],
 						cwd: request.cwd,
 						environment: childEnvironment,
@@ -732,7 +750,11 @@ async function runServerRuntime(options, runtime) {
 							mcpBundle,
 							registration
 						});
-						const created = await hub.create(sessionHostOptions(childContext, bundle, mcpBundle, registration, identity, workspace));
+						const created = await hub.create(sessionHostOptions(childContext, bundle, mcpBundle, registration, identity, workspace, {
+							pinned: explicit.pinned,
+							...request.selection?.minorModes === void 0 ? {} : { minorModes: request.selection.minorModes },
+							...request.tools === void 0 ? {} : { allowedTools: request.tools }
+						}));
 						request.signal?.throwIfAborted();
 						if (created.workspaceId !== void 0) {
 							if (openSessions.add({
@@ -939,29 +961,22 @@ async function runServerRuntime(options, runtime) {
 		}
 	} finally {
 		shuttingDown = true;
+		executionBudget.close();
 		stopPersistSessionNames();
 		clearInterval(eventLoopMonitor);
 		await bounded(telemetry.recordEvent("doompi_server.shutdown"), "shutdown telemetry", notice);
-		await Promise.allSettled([cockpit?.close()]);
+		await bounded(require_shutdown.withShutdownDeadline(() => cockpit?.close(), "listener shutdown"), "listener shutdown", notice);
 		await bounded(remoteRuntime?.close() ?? Promise.resolve(), "remote control shutdown", notice);
-		try {
-			await hub.close();
-		} catch (error) {
-			notice(error instanceof Error ? error.message : String(error));
-		}
-		try {
-			await requestReceipts.close();
-		} catch (error) {
-			notice(error instanceof Error ? error.message : String(error));
-		}
 		try {
 			await sessionManager.close();
 		} catch (error) {
 			notice(error instanceof Error ? error.message : String(error));
 		}
-		computerUse?.close?.();
-		webCompositions?.close();
-		const pendingCleanups = [...pendingSessions.values()].map((setup) => setup.cleanup());
+		await bounded(require_shutdown.withShutdownDeadline(() => hub.close(), "hub shutdown"), "hub shutdown", notice);
+		await bounded(require_shutdown.withShutdownDeadline(() => requestReceipts.close(), "receipt shutdown"), "receipt shutdown", notice);
+		await bounded(require_shutdown.withShutdownDeadline(() => computerUse?.close?.(), "computer use shutdown"), "computer use shutdown", notice);
+		await bounded(require_shutdown.withShutdownDeadline(() => webCompositions?.close(), "web composition shutdown"), "web composition shutdown", notice);
+		const pendingCleanups = [...pendingSessions.values()].map((setup) => bounded(require_shutdown.withShutdownDeadline(() => setup.cleanup(), "pending session cleanup"), "pending session cleanup", notice));
 		pendingSessions.clear();
 		await Promise.allSettled(pendingCleanups);
 		await bounded(harnessTelemetry.flush(), "harness telemetry flush", notice);