@join-pantheon/cli 0.33.5 → 0.33.6

package/dist/worker.js

@@ -3,7 +3,7 @@ import { execFileSync } from "node:child_process";
 import { chmodSync, lstatSync, mkdirSync, writeFileSync, existsSync, readdirSync, readFileSync, readlinkSync, realpathSync, rmSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { detectClaudeFeatures, describeFeatures, ensureRunTmp, NO_CLAUDE_FEATURES, runTmpDir } from "./claude-confine.js";
+import { absentDeniedPaths, detectClaudeFeatures, describeFeatures, ensureRunTmp, NO_CLAUDE_FEATURES, removeSandboxLeftovers, runTmpDir } from "./claude-confine.js";
 import { snapshotHome, restoreHome, describeChange, trustWrite, askedHere } from "./home-guard.js";
 import { PantheonClient } from "./client.js";
 import { createHash, randomBytes } from "node:crypto";
@@ -14,12 +14,13 @@ import { brokenStateFiles, brokenStateFix, pidAlive, readStateFile, withFileLock
 import { mkdirInside, writeInside } from "./safe-write.js";
 import { adoptedCommon, adoptWorktree, gitCallEnv, lfsInUse, repoHooksArgs, safeGitArgs, WorktreeTampered } from "./git-safe.js";
 import { trusted } from "./verify-act.js";
-import { headlessSpawn, materializeSpawnFiles, chooseAgent, agentById, describeChoice, unattendedRefusal, SANDBOXED_FOR_UNATTENDED, NOT_FOR_UNATTENDED_RUNS, claudeSandboxable, quarantineRepoAgentConfig, AGENT_EDIT_SUFFIX, REPO_AGENT_CONFIG, COMMAND_GRANT_SCOPE, repoCommands, REPO_COMMANDS_FILE, claudeCommandRules, } from "./agents.js";
+import { headlessSpawn, materializeSpawnFiles, chooseAgent, agentById, describeChoice, unattendedRefusal, SANDBOXED_FOR_UNATTENDED, NOT_FOR_UNATTENDED_RUNS, claudeSandboxable, unattendedReadiness, anyUnattendedAgentOnPath, forgetMissingBinaries, quarantineRepoAgentConfig, AGENT_EDIT_SUFFIX, REPO_AGENT_CONFIG, COMMAND_GRANT_SCOPE, repoCommands, REPO_COMMANDS_FILE, claudeCommandRules, } from "./agents.js";
 import { activeOutages, detectOutage, earliest, whenAgain } from "./agent-outage.js";
 import { agentSpawn, CmdLineUnsafe } from "./which.js";
 import { VERSION } from "./version.js";
-import { applyAnswer, CAPABILITY_ARGS, CARRY_REASON, carryOverWakers, dropLedgerGrants, hasWakeOnce, isApprovedWaker, mayAskWake, takeWakeOnce, OLD_RELAY_WAKE, relayKnowsAdmitters, loadPolicy, mayAsk, needsSelfUpgrade, parseGrantAnswer, recordAsk, savePolicy, useGrant, WOKEN_RUN_ENV, takeTeamFlagOnYes, unsandboxedAllowed, policyPath, isNewer, } from "./worker-policy.js";
+import { applyAnswer, CAPABILITY_ARGS, CARRY_REASON, carryOverWakers, dropLedgerGrants, hasWakeOnce, isApprovedWaker, mayAskWake, takeWakeOnce, OLD_RELAY_WAKE, relayKnowsAdmitters, loadPolicy, mayAsk, needsSelfUpgrade, parseGrantAnswer, recordAsk, savePolicy, useGrant, WOKEN_RUN_ENV, takeTeamFlagOnYes, unsandboxedAllowed, policyPath, isNewer, RUN_MINUTES, effectiveRunMinutes, effectiveIdleSeconds, readinessRecheckPath, describeRunMinutes, parseRunMinutes, } from "./worker-policy.js";
 import { runtimeNodeVersion } from "./managed.js";
+import { removalWords, removedLine, removedNotice, takeTold } from "./removed.js";
 import { agentHookStates, repairHook, repairNote } from "./notify.js";
 import { fence, assess } from "./untrusted.js";
 import { allowed, closeStartedRun, finishRun, recordRun, startRun } from "./spend.js";
@@ -40,6 +41,7 @@ import { isContinuationFor, LIMITS, shouldDeferToHuman } from "./protocol.js";
 import { proxyEnvFor } from "./network.js";
 import { signedRead } from "./reads.js";
 import { commandState } from "./command-state.js";
+import { hostEnv } from "./host-env.js";
 export function heldNote() {
     return `
 
@@ -839,9 +841,18 @@ Act, reply if a reply is owed, then finish.`;
 }
 export const TASK_POINTER = "Your task for this run is in the file .pantheon-task.md in the current directory. Read that file first and follow it: it is the whole brief.";
 let fleetLock = null;
-export const RUN_TIMEOUT_MS = 20 * 60_000;
+export const RUN_TIMEOUT_MS = RUN_MINUTES.default * 60_000;
+export const RUN_TIMEOUT_MAX_MS = RUN_MINUTES.max * 60_000;
+function recordLimitMs(r) {
+    const l = typeof r.limit === "number" && Number.isFinite(r.limit) && r.limit > 0 ? Math.min(r.limit, RUN_TIMEOUT_MAX_MS) : RUN_TIMEOUT_MAX_MS;
+    return l + 5 * 60_000;
+}
 export const RUN_SLOT = "run-slot.json";
 export const RUN_LEASE_RENEW_MS = 60_000;
+export const WORKER_STATE_EVERY_MS = 5 * 60_000;
+export const WORKER_READINESS_MS = 10 * 60_000;
+export const WORKER_READINESS_RETRY_MS = 60_000;
+export const RUN_HEARTBEAT_MS = 4 * 60_000;
 const RUN_LEASE_FRESH_MS = 10 * 60_000;
 function readRunLease(f) {
     let text;
@@ -962,7 +973,7 @@ export function killRecordedRun(dir, now = Date.now()) {
     rmSync(f, { force: true });
     if (!r || !Number.isInteger(r.pid) || typeof r.at !== "number" || !Number.isFinite(r.at) || r.at > now + 60_000)
         return null;
-    if (now - r.at > RUN_TIMEOUT_MS + 5 * 60_000)
+    if (now - r.at > recordLimitMs(r))
         return null;
     if (!recordedRunAlive(r.pid))
         return null;
@@ -988,7 +999,7 @@ export function runInFlight(dir, now = Date.now()) {
     }
     if (!r || !Number.isInteger(r.pid) || typeof r.at !== "number" || !Number.isFinite(r.at))
         return null;
-    if (now - r.at > RUN_TIMEOUT_MS + 5 * 60_000)
+    if (now - r.at > recordLimitMs(r))
         return null;
     if (!recordedRunAlive(r.pid))
         return null;
@@ -1147,6 +1158,82 @@ export class Worker {
             fix: "Install and sign in to another agent CLI (claude, codex, cursor-agent or copilot) for woken runs; until then requests wait for a live session.",
         };
     }
+    lastReport = null;
+    report(state, detail, until, more = {}) {
+        if (state === "idle" && this.readiness && !this.readiness.ok) {
+            state = "unavailable";
+            detail = "can't take requests yet";
+            more = { ...(this.readiness.code ? { reason: this.readiness.code } : {}) };
+        }
+        this.lastReport = { state, ...(detail ? { detail } : {}), ...(until ? { until } : {}), ...more, at: Date.now() };
+        this.client?.reportWorkerState(state, detail, until, this.idleMs(), more);
+    }
+    tickHold = null;
+    readiness = null;
+    readinessAt = 0;
+    checkReadiness(force) {
+        const now = Date.now();
+        const every = this.readiness && !this.readiness.ok ? WORKER_READINESS_RETRY_MS : WORKER_READINESS_MS;
+        let marked = false;
+        try {
+            const t = statSync(readinessRecheckPath(this.opts.home)).mtimeMs;
+            marked = t > this.readinessAt && t <= now + 1_000;
+        }
+        catch { }
+        if (!force && !marked && now - this.readinessAt < every)
+            return;
+        if ((force || marked) && now - this.readinessAt < 15_000)
+            return;
+        this.readinessAt = now;
+        if (force || marked)
+            forgetMissingBinaries();
+        if (this.opts.agentCmd || this.opts.housekeeping || this.opts.alertsOnly) {
+            this.readiness = { ok: true, short: "" };
+            return;
+        }
+        try {
+            const pathOnly = this.readiness && !this.readiness.ok && (this.readiness.code === "no_agent" || this.readiness.code === "kiro_only") && !marked && !force;
+            if (pathOnly && !anyUnattendedAgentOnPath())
+                return;
+            let commandsOn = false;
+            try {
+                commandsOn = commandState({ home: this.opts.home, project: this.opts.project, allowBash: this.opts.allowBash }).level !== "off";
+            }
+            catch { }
+            const r = unattendedReadiness({ prefer: loadProfile(this.cfg).agent.primary_surface, unsandboxedOk: this.unsandboxedOk(), pinned: this.opts.agent ?? "auto", ...(this.opts.choose ? { choose: this.opts.choose } : {}),
+                commandsOn, inContainer: hostEnv().kind === "container", ...(this.opts.sandboxProbe ? { sandboxProbe: this.opts.sandboxProbe } : {}) });
+            if (!r.ok && (this.readiness?.ok ?? true))
+                this.opts.log(`! teammates are told this machine can't take requests yet: ${r.short} — ${r.fix}`);
+            if (r.ok && this.readiness && !this.readiness.ok)
+                this.opts.log(`  agent   ready again — teammates are told this machine takes requests`);
+            this.readiness = { ok: r.ok, short: r.short, ...(r.code ? { code: r.code } : {}) };
+        }
+        catch {
+            this.readiness = null;
+        }
+    }
+    reportStanding(first, held) {
+        const now = Date.now();
+        this.checkReadiness(first);
+        if (this.running)
+            return;
+        const last = this.lastReport;
+        const stale = !last || now - last.at >= WORKER_STATE_EVERY_MS;
+        if (held) {
+            const same = last?.state === "holding" && last.reason === held.reason && last.until === held.until;
+            if (!same || stale)
+                this.report("holding", held.detail, held.until, { reason: held.reason });
+            return;
+        }
+        const holdOver = last?.state === "holding" && (held === null || (!!last.until && last.until <= now));
+        const flipped = !!last && ((last.state === "unavailable") !== (this.readiness ? !this.readiness.ok : false));
+        if (first || stale || holdOver || flipped) {
+            if (!last || holdOver || last.state !== "holding")
+                this.report("idle");
+            else
+                this.report(last.state, last.detail, last.until, { ...(last.reason ? { reason: last.reason } : {}) });
+        }
+    }
     unsandboxedOk() {
         try {
             return unsandboxedAllowed(loadPolicy(this.opts.home));
@@ -1794,7 +1881,7 @@ export class Worker {
         const base = this.opts.home ?? process.env.PANTHEON_HOME ?? join(homedir(), ".pantheon");
         return join(base, "run-homes", encodeURIComponent(this.cfg.spaceId ?? this.cfg.space));
     }
-    openRunHome(cfg = this.cfg, features = []) {
+    openRunHome(cfg = this.cfg, features = [], limitMs = this.runLimit(undefined).ms) {
         const dir = this.runHomePath();
         try {
             if (!lstatSync(dir).isDirectory())
@@ -1807,7 +1894,7 @@ export class Worker {
         if (features.includes("delegate") && cfg.privateKey) {
             const run = newKeypair();
             const team = cfg.spaceId ?? this.client?.teamKey() ?? cfg.space;
-            const expires = Date.now() + (this.opts.runTimeoutMs ?? RUN_TIMEOUT_MS) + 10 * 60_000;
+            const expires = Date.now() + limitMs + 10 * 60_000;
             const cert = signDelegate(cfg.privateKey, team, cfg.member, run.publicKey, randomBytes(8).toString("hex"), expires);
             written = { ...cfg, privateKey: "", delegate: { privateKey: run.privateKey, cert }, ...(cfg.spaceId ? {} : { spaceId: team }) };
         }
@@ -1958,6 +2045,10 @@ export class Worker {
         this.opts.log(`  agent   ${agentLabel}`);
         const cmds = commandState({ home: this.opts.home, project: this.opts.project, allowBash: this.opts.allowBash });
         this.opts.log(`  policy  ${this.opts.maxRunsPerHour} runs/hour, one at a time, commands ${cmds.level === "off" ? "off: edits only (bash gated)" : cmds.summary}`);
+        {
+            const lim = this.runLimit(undefined);
+            this.opts.log(`  limit   ${describeRunMinutes(lim)}${lim.from === "flag" ? "" : " — change it: pantheon policy set run-minutes <5-180>"}`);
+        }
         this.carryWakers(client);
         const personas = this.personas();
         if (this.opts.persona && !personaByName(personas, this.opts.persona)) {
@@ -1976,14 +2067,23 @@ export class Worker {
                     this.opts.log(`    ! ${p.name}: ${w}`);
         }
         this.recoverInterruptedRun();
+        this.reportStanding(true);
         if (this.opts.continuations !== false)
             await this.restoreHeldContinuations(client);
         this.writeState("watching", "waiting for work");
         while (!this.stopped) {
             const arrived = await client.next(5000);
+            {
+                const held = this.tickHold;
+                this.tickHold = null;
+                this.reportStanding(false, held);
+            }
             if (client.refused && !this.refusedSaid) {
                 this.refusedSaid = true;
-                this.opts.log(`! the relay refused this machine (${client.refused}): ${String(client.lastError ?? "").replace(/^[A-Z_]+: /, "")} — it keeps trying, every ${Math.round(PantheonClient.REFUSED_RETRY_MS / 60_000)} minutes after the first ${Math.round(PantheonClient.REFUSED_GRACE_MS / 60_000)}`);
+                if (client.removedFrom)
+                    this.sayRemoved(client.removedFrom.by);
+                else
+                    this.opts.log(`! the relay refused this machine (${client.refused}): ${String(client.lastError ?? "").replace(/^[A-Z_]+: /, "")} — it keeps trying, every ${Math.round(PantheonClient.REFUSED_RETRY_MS / 60_000)} minutes after the first ${Math.round(PantheonClient.REFUSED_GRACE_MS / 60_000)}`);
             }
             else if (!client.refused)
                 this.refusedSaid = false;
@@ -1996,6 +2096,7 @@ export class Worker {
                 continue;
             if (fleetLock && fleetLock !== this) {
                 this.writeState("watching", `waiting: a run for "${fleetLock.cfg.space}" is in progress`);
+                this.tickHold = { reason: "busy_elsewhere", detail: "another team's run is in progress on this machine" };
                 continue;
             }
             const broken = this.brokenStateFiles();
@@ -2029,8 +2130,11 @@ export class Worker {
                 .filter((o) => o.kind !== "HUMAN" && o.kind !== "DELIVER" && !o.claimed_by)
                 .filter((o) => Date.now() - o.created_at >= grace)
                 .filter((o) => { const t = this.outageHold.get(o.id); if (t === undefined)
-                return true; if (t > Date.now())
-                return false; this.outageHold.delete(o.id); return true; })
+                return true; if (t > Date.now()) {
+                if (!this.tickHold || (this.tickHold.reason === "outage" && (this.tickHold.until ?? Infinity) > t))
+                    this.tickHold = { reason: "outage", until: t, detail: "its agents are out for now" };
+                return false;
+            } this.outageHold.delete(o.id); return true; })
                 .filter((o) => {
                 if (this.failuresOf(o.id) < 2)
                     return true;
@@ -2073,8 +2177,10 @@ export class Worker {
                                 await this.reportRefused(client, o, held, true);
                             }
                         }
-                        else
+                        else {
                             await this.askWake(client, o, refusedWake.askable);
+                            this.tickHold = { reason: "awaiting_wake_approval", detail: "asking its person whether this teammate may start work here" };
+                        }
                     }
                     continue;
                 }
@@ -2142,7 +2248,7 @@ export class Worker {
             }
             const busyTtlMs = this.opts.busyTtlMs ?? LIMITS.activityBusyTtlMs;
             if (me && shouldDeferToHuman(me.sessions, me.work, {
-                idleMs: this.opts.idleMs, busyTtlMs, busySince: this.busyObservedSince, hooksInstalled,
+                idleMs: this.idleMs(), busyTtlMs, busySince: this.busyObservedSince, hooksInstalled,
             })) {
                 const id = candidate?.id ?? `cont:${continuation.id}`;
                 const busySince = me.work?.busy_since ?? this.busyObservedSince;
@@ -2151,13 +2257,15 @@ export class Worker {
                         ? ` (for ${Math.round((Date.now() - busySince) / 60_000)}m — read as ended after ${Math.round(busyTtlMs / 60_000)}m with no Stop)`
                         : ""}`
                     : me.work?.idle_since
-                        ? `your session went idle ${Math.round((Date.now() - me.work.idle_since) / 1000)}s ago (< ${Math.round(this.opts.idleMs / 1000)}s)`
+                        ? `your session went idle ${Math.round((Date.now() - me.work.idle_since) / 1000)}s ago (< ${Math.round(this.idleMs() / 1000)}s)`
                         : "you have a live session and no activity signal (no wake-up hook on this machine — pantheon hook install)";
-                const until = !me.work?.busy && me.work?.idle_since ? me.work.idle_since + this.opts.idleMs : undefined;
+                const until = !me.work?.busy && me.work?.idle_since ? me.work.idle_since + this.idleMs() : undefined;
                 const holdKey = `${me.work?.busy ? "busy" : "idle"}:${until ?? 0}`;
+                this.tickHold = { reason: me.work?.busy ? "busy_turn" : me.work?.idle_since ? "recently_active" : "no_signal", ...(until ? { until } : {}),
+                    detail: me.work?.busy ? "a turn is in flight in their live session" : me.work?.idle_since ? `their session went idle recently; waits ${Math.round(this.idleMs() / 1000)}s of quiet` : "their live session gave no activity signal" };
                 if (this.lastHold !== holdKey) {
                     this.lastHold = holdKey;
-                    this.client?.reportWorkerState("holding", me.work?.busy ? "a turn is in flight in their live session" : me.work?.idle_since ? `their session went idle recently; waits ${Math.round(this.opts.idleMs / 1000)}s of quiet` : "their live session gave no activity signal", until);
+                    this.reportStanding(false, this.tickHold);
                 }
                 if (!this.skipLogged.has(`defer:${id}`)) {
                     this.skipLogged.add(`defer:${id}`);
@@ -2185,6 +2293,7 @@ export class Worker {
             const slot = this.takeSlot();
             if ("held" in slot) {
                 this.writeState("watching", `waiting: ${slot.held}`);
+                this.tickHold = { reason: "busy_elsewhere", detail: "another run is in progress on this machine" };
                 if (continuation)
                     this.requeueContinuation(continuation, 5_000);
                 continue;
@@ -2198,6 +2307,7 @@ export class Worker {
                             : `! not spawning: ${gate.why}. Raise it with --max-runs / --max-runs-day${persona ? ` (persona "${persona.name}" may cap it lower)` : ""}, or leave it.`);
                     }
                     this.writeState("capped", gate.why);
+                    this.tickHold = { reason: "capped", detail: "its run cap for now" };
                     if (continuation)
                         this.requeueContinuation(continuation, 60_000);
                     continue;
@@ -2227,6 +2337,8 @@ export class Worker {
                         break;
                     }
                 }
+                if (this.readiness && !this.readiness.ok)
+                    this.checkReadiness(true);
                 this.running = true;
                 this.writeState("running", candidate ? `${candidate.kind} ${candidate.id}` : `CONTINUE ${continuation.id}`);
                 let job;
@@ -2252,7 +2364,7 @@ export class Worker {
                 }
                 this.runProject = null;
                 this.done.push(job);
-                this.client?.reportWorkerState("idle");
+                this.report("idle");
                 if (candidate && job.ok)
                     this.markDone(`handled:${candidate.ref}`);
                 const ran = candidate ? candidateAct : continuation;
@@ -2331,6 +2443,8 @@ export class Worker {
                 this.running = false;
                 this.endAttempt();
                 this.giveSlot(slot.token);
+                if (continuation)
+                    client.forgetClaim(`cont:${continuation.id}`);
             }
             this.writeState("watching", "waiting for work");
             if (this.opts.once)
@@ -2361,7 +2475,14 @@ export class Worker {
             return { held: `a run for "${lease.held}" is in progress in another pantheon worker on this machine` };
         fleetLock = this;
         const dir = this.stateDir(), token = lease.token;
-        this.leaseTimer = setInterval(() => renewRunLease(dir, token), this.opts.runLeaseRenewMs ?? RUN_LEASE_RENEW_MS);
+        this.heartbeatAt = Date.now();
+        this.leaseTimer = setInterval(() => {
+            renewRunLease(dir, token);
+            if (Date.now() - this.heartbeatAt >= RUN_HEARTBEAT_MS) {
+                this.heartbeatAt = Date.now();
+                this.runHeartbeat();
+            }
+        }, this.opts.runLeaseRenewMs ?? RUN_LEASE_RENEW_MS);
         this.leaseTimer.unref?.();
         return lease;
     }
@@ -2381,7 +2502,7 @@ export class Worker {
         liveRuns.add(pid);
         installRunReaper();
         this.attemptPid = pid;
-        writeRunRecord(this.stateDir(), { pid, member: this.cfg.member, space: this.cfg.space, at: Date.now(), worker: process.pid, obligation: attempt.obligation, ...(attempt.spend ? { spend: attempt.spend } : {}) });
+        writeRunRecord(this.stateDir(), { pid, member: this.cfg.member, space: this.cfg.space, at: Date.now(), worker: process.pid, obligation: attempt.obligation, ...(attempt.spend ? { spend: attempt.spend } : {}), ...(attempt.limit ? { limit: attempt.limit } : {}) });
     }
     untrackRun(pid) {
         this.runPids.delete(pid);
@@ -2407,7 +2528,7 @@ export class Worker {
             return;
         if (!Number.isInteger(r.worker) || r.worker === process.pid || pidAlive(r.worker))
             return;
-        if (Number.isInteger(r.pid) && typeof r.at === "number" && Date.now() - r.at <= RUN_TIMEOUT_MS + 5 * 60_000 && recordedRunAlive(r.pid))
+        if (Number.isInteger(r.pid) && typeof r.at === "number" && Date.now() - r.at <= recordLimitMs(r) && recordedRunAlive(r.pid))
             killRunTree(r.pid);
         try {
             rmSync(f, { force: true });
@@ -2459,7 +2580,7 @@ export class Worker {
     async handle(client, o, persona, policy, checked = null) {
         this.opts.log(`> woken by ${owedLabel(o.kind)} ${o.id} (${o.body})${persona ? ` — persona "${persona.name}"` : ""} — checking whether it can run here`);
         this.lastHold = "";
-        this.client?.reportWorkerState("running", `${o.kind} ${o.id}`);
+        this.report("running", `${o.kind} ${o.id}`, undefined, { ref: o.ref, ...(o.goal ? { goal: o.goal } : {}) });
         const fetched = checked ?? (client.seenAct(o.ref) ? null : (await this.fetchActById(o.ref)));
         const base = checked ?? client.seenAct(o.ref) ?? fetched;
         const trigger = base && typeof base.body === "string" && typeof base.act === "string"
@@ -2478,7 +2599,7 @@ export class Worker {
         };
         this.opts.log(`> continuing from ${act.act} ${act.id} by ${act.from}${persona ? ` — persona "${persona.name}"` : ""}`);
         this.lastHold = "";
-        this.client?.reportWorkerState("running", `${act.act} ${act.id}`);
+        this.report("running", `${act.act} ${act.id}`, undefined, { ref: act.id, ...(act.goal ? { goal: act.goal } : {}) });
         const trigger = actLine(act);
         const needs = workNeedsCommands("CONTINUE", trigger, act.act);
         return this.runJob(client, o, persona, policy, (branch, canPush) => buildContinuationBrief(act, trigger, branch, persona, canPush), false, needs, trigger, act);
@@ -2727,12 +2848,14 @@ export class Worker {
         let plannedFiles;
         let bashRules = [];
         let fenced = null;
+        let sandboxAbsent = [];
         if (!client.features.includes("delegate") && client.signaturesExpected()) {
             const says = "this team's relay signs messages but did not offer a key for the run, so the run would have needed your own key — it was not started";
             this.opts.log(`! ${says}`);
             return { obligation: o, branch, worktree, ok: false, refused: true, detail: says, diagnosis: { cause: "no_unattended_agent", says, fix: "Check the relay's version with its operator (pantheon doctor); runs start again when it offers run keys." } };
         }
-        const runHome = this.openRunHome(runCfg, client.features);
+        const runLimit = this.runLimit(persona);
+        const runHome = this.openRunHome(runCfg, client.features, runLimit.ms);
         try {
             if (holdRepoConfig) {
                 fenced = quarantineRepoAgentConfig(worktree, runHome);
@@ -2765,6 +2888,17 @@ export class Worker {
                 ...(features ? { claude: { features, pantheonHome: this.stateDir(), home: personHome, userSettings: join(personHome, ".claude", "settings.json"), ...(() => { const c = adoptedCommon(worktree); return c ? { gitCommon: c } : {}; })() } } : {}),
             });
             plannedFiles = plan.writeFiles;
+            {
+                const gc = adoptedCommon(worktree);
+                if (gc) {
+                    try {
+                        sandboxAbsent = absentDeniedPaths(gc);
+                    }
+                    catch {
+                        sandboxAbsent = [];
+                    }
+                }
+            }
             for (const n of plan.notes ?? [])
                 if (!this.notesSaid.has(n)) {
                     this.notesSaid.add(n);
@@ -2827,7 +2961,7 @@ export class Worker {
                     }
                     const pid = child.pid;
                     if (pid)
-                        this.trackRun(pid, { obligation: o.id, spend: spendId });
+                        this.trackRun(pid, { obligation: o.id, spend: spendId, limit: runLimit.ms });
                     let head = "", tail = "";
                     const take = (b) => {
                         const s = b.toString();
@@ -2845,7 +2979,7 @@ export class Worker {
                     let settled = false;
                     let exitGrace = null;
                     let exitCode = null;
-                    const limit = this.opts.runTimeoutMs ?? RUN_TIMEOUT_MS;
+                    const limit = runLimit.ms;
                     const finish = (code, signal) => {
                         if (settled)
                             return;
@@ -2880,6 +3014,11 @@ export class Worker {
                 });
             }
             finally {
+                this.cleanupStep("removing the sandbox's empty mount points", () => {
+                    const gone = removeSandboxLeftovers(sandboxAbsent);
+                    if (gone.length)
+                        this.opts.log(`  confine removed ${gone.length} empty mount point${gone.length === 1 ? "" : "s"} the sandbox left: ${gone.map((g) => basename(g)).join(", ")}`);
+                });
                 this.cleanupStep("putting the repo's agent config back", () => { if (fenced)
                     for (const l of fenced.restore().lines)
                         this.opts.log(`  config  ${l}`); });
@@ -2966,7 +3105,9 @@ export class Worker {
                 return { obligation: o, branch, worktree, ok: false, detail, agentOut: true };
             }
             const quiet = ok && !requireReply && sent.length === 0;
-            const diagnosis = ok ? undefined : outage ? this.outageDiagnosis(choice.backend.label, outage, [], "it was handed to another agent three times already") : diagnoseRun({ exited, replied, allowBash, branch, project, worktree, detail, transcript, runLog, needsCommands, ...(bashDroppedForSandbox ? { commandsNeedSandbox: byCli ? "agent-cmd" : "claude" } : {}), ...(agentId ? { agent: agentId } : {}), ...(place.kind === "folder" ? { folder: true } : {}),
+            const diagnosis = ok ? undefined : outage ? this.outageDiagnosis(choice.backend.label, outage, [], "it was handed to another agent three times already") : diagnoseRun({ exited, replied, allowBash, branch, project, worktree, detail, transcript, runLog, needsCommands,
+                ...(/\(stopped after \d+s\)/.test(detail.split("\n")[0] ?? "") ? { timedOut: { minutes: runLimit.minutes, from: runLimit.from } } : {}),
+                ...(bashDroppedForSandbox ? { commandsNeedSandbox: byCli ? "agent-cmd" : "claude" } : {}), ...(agentId ? { agent: agentId } : {}), ...(place.kind === "folder" ? { folder: true } : {}),
                 ...(agentId === "claude-code" && allowBash ? { allowedRules: bashRules } : {}), ...(baseRef ? { baseRef } : {}) }, this.opts.probe ?? gitProbe);
             if (this.opts.notify && !quiet && (!ok || loadProfile(this.cfg).notifications?.worker_done)) {
                 try {
@@ -3016,8 +3157,8 @@ export class Worker {
         if (!changes.length)
             return;
         for (const c of changes)
-            this.opts.log(`${c.what === "reported" ? " " : "!"} ${o.id}: ${describeChange(c)}`);
-        const taken = changes.filter((c) => c.what !== "reported");
+            this.opts.log(`${c.what === "reported" || c.quiet ? " " : "!"} ${o.id}: ${describeChange(c)}`);
+        const taken = changes.filter((c) => c.what !== "reported" && !c.quiet);
         if (taken.length && this.opts.notify) {
             try {
                 this.opts.notify({
@@ -3523,6 +3664,16 @@ export class Worker {
         }
     }
     refusedSaid = false;
+    sayRemoved(by) {
+        const team = { space: this.cfg.space, spaceId: this.cfg.spaceId ?? null, relay: this.cfg.relay, member: this.cfg.member };
+        const r = removalWords(team, by);
+        this.opts.log(`! ${removedLine(r)}`);
+        try {
+            if (this.opts.notify && takeTold(team))
+                this.opts.notify(removedNotice(r));
+        }
+        catch { }
+    }
     oldRelaySaid = false;
     dropLedgerGrants() {
         try {
@@ -3677,6 +3828,40 @@ export class Worker {
         const r = upgrade(undefined, version ? { version } : {});
         return { ok: r.ok, alreadyCurrent: r.alreadyCurrent, from: r.from, to: r.to, ...(r.needsPerson ? { needsPerson: r.needsPerson } : {}) };
     }
+    idleMs() {
+        if (this.opts.idleMs !== undefined)
+            return this.opts.idleMs;
+        let policy;
+        try {
+            policy = loadPolicy(this.opts.home);
+        }
+        catch {
+            policy = undefined;
+        }
+        return effectiveIdleSeconds({ ...(policy ? { policy } : {}) }).seconds * 1000;
+    }
+    runLimit(persona) {
+        let policy;
+        try {
+            policy = loadPolicy(this.opts.home);
+        }
+        catch {
+            policy = undefined;
+        }
+        const flag = this.opts.runMinutes !== undefined ? parseRunMinutes(this.opts.runMinutes) ?? undefined : undefined;
+        const r = effectiveRunMinutes({ ...(flag !== undefined ? { flag } : {}), ...(policy ? { policy } : {}), ...(persona?.maxRunMinutes !== undefined ? { persona: persona.maxRunMinutes } : {}) });
+        return { ...r, ms: this.opts.runTimeoutMs ?? r.minutes * 60_000 };
+    }
+    runHeartbeat() {
+        if (!this.running || !this.lastState.startsWith("running|"))
+            return;
+        const detail = this.lastState.slice("running|".length);
+        this.lastState = "";
+        this.writeState("running", detail);
+        const l = this.lastReport;
+        this.report("running", detail, undefined, { ...(l?.ref ? { ref: l.ref } : {}), ...(l?.goal ? { goal: l.goal } : {}) });
+    }
+    heartbeatAt = 0;
     writeState(state, detail) {
         const line = `${state}|${detail}`;
         if (line === this.lastState)
@@ -3685,7 +3870,8 @@ export class Worker {
         try {
             const base = this.opts.home ?? process.env.PANTHEON_HOME ?? join(homedir(), ".pantheon");
             mkdirSync(base, { recursive: true });
-            writeFileSync(join(base, "worker-state.json"), JSON.stringify({ at: Date.now(), state, detail, member: this.cfg.member }) + "\n");
+            writeFileSync(join(base, "worker-state.json"), JSON.stringify({ at: Date.now(), state, detail, member: this.cfg.member,
+                ...(this.opts.runMinutes !== undefined ? { run_minutes: this.opts.runMinutes } : {}) }) + "\n");
         }
         catch { }
     }

package/helper/macos/prebuilt/manifest.json

@@ -1,6 +1,6 @@
 {
   "format": 1,
-  "built_at": "2026-10-08T17:23:00.642Z",
+  "built_at": "2026-10-11T16:51:24.237Z",
   "swiftc": "Apple Swift version 6.3.3 (swiftlang-6.3.3.1.3 clang-2100.1.1.101)",
   "helpers": {
     "pantheon-tray": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@join-pantheon/cli",
-  "version": "0.33.5",
+  "version": "0.33.6",
   "description": "Let your coding agent collaborate directly with your teammates' agents — ask, agree an interface, and deliver, without a human relaying messages.",
   "type": "module",
   "bin": {