@kky42/pievo-server 2.4.8 → 2.4.10

package/.output/server/_ssr/{boot-CEPRQU5M.mjs → boot-BIxtZHU-.mjs}

@@ -11,7 +11,7 @@ import { fileURLToPath } from "node:url";
 import path from "node:path";
 import os from "node:os";
 import fs$1 from "node:fs/promises";
-//#region node_modules/.nitro/vite/services/ssr/assets/boot-CEPRQU5M.js
+//#region node_modules/.nitro/vite/services/ssr/assets/boot-BIxtZHU-.js
 var import_pino = /* @__PURE__ */ __toESM(require_pino());
 var import_pino_pretty = /* @__PURE__ */ __toESM(require_pino_pretty());
 function defineErrorCodes(codes) {
@@ -1268,7 +1268,6 @@ function r2Config() {
 * a deploy can tune them without a rebuild. Each has a safe, generous default —
 * the bias is "keep storage bounded without ever surprising a healthy loop".
 */
-/** A positive env integer, or `fallback` when unset / unparseable / non-positive. */
 function posIntEnv(name, fallback) {
 	const raw = process.env[name]?.trim();
 	if (!raw) return fallback;
@@ -1321,11 +1320,9 @@ function dbWatchdogEnabled() {
 	if (process.env.VITEST || false) return false;
 	return Boolean(databaseUrl());
 }
-/** How often the DB watchdog pings `select 1`. Default 20s. */
 function dbWatchdogIntervalMs() {
 	return posIntEnv("PIEVO_DB_WATCHDOG_INTERVAL_MS", 2e4);
 }
-/** Hard per-ping deadline; a ping that exceeds it counts as a failure. Default 5s. */
 function dbWatchdogTimeoutMs() {
 	return posIntEnv("PIEVO_DB_WATCHDOG_TIMEOUT_MS", 5e3);
 }
@@ -1338,8 +1335,6 @@ function dbWatchdogFailureThreshold() {
 	return posIntEnv("PIEVO_DB_WATCHDOG_FAILURES", 3);
 }
 /**
-* Central logger (pino + pino-pretty).
-*
 * Uses pino-pretty as a *synchronous* destination stream (not a worker-thread
 * transport) so logs flush before process.exit() in the one-shot CLIs. Writes to
 * stderr (fd 2) to keep stdout clean for QR codes and human CLI output.
@@ -1405,7 +1400,7 @@ function poolOptionsFor(url, transactionPooler = isTransactionPooler(url)) {
 	};
 }
 /** The coding agent a loop is bound to AND executed with (BYOA on the owner's
-*  machine): `claude-code` → Claude Code, `codex` → `codex exec`.
+*  machine): `claude-code` → Claude Code, `codex` → `codex exec`, `pi` → Pi.
 *  Non-Claude agents may still have thinner daemon telemetry until stream
 *  integration lands; execution itself is real for every value.
 *
@@ -1415,9 +1410,11 @@ function poolOptionsFor(url, transactionPooler = isTransactionPooler(url)) {
 *  web agent `<select>` (LoopForm). So widening the set is a one-line edit HERE with
 *  no other server change (the daemon's own enum in `packages/daemon/src/create.ts`
 *  is a separate package, widened alongside). */
-var CODING_AGENTS = ["claude-code", "codex"];
-/** Coerce an unknown value to a known `CodingAgent`, or null when unrecognized.
-*  Canonical loop validation and the web agent select share this enum source. */
+var CODING_AGENTS = [
+	"claude-code",
+	"codex",
+	"pi"
+];
 function coerceCodingAgent(value) {
 	return typeof value === "string" && CODING_AGENTS.includes(value) ? value : null;
 }
@@ -1434,23 +1431,16 @@ function coerceCodingAgent(value) {
 * columns use `jsonb().$type<>()`; booleans use native `boolean()`.
 */
 var machines = pgTable("machines", {
-	/** m-sha256(deviceToken)[:16] */
 	id: text("id").primaryKey(),
-	/** Owning user (Better Auth user.id) — creator attribution. */
 	userId: text("user_id").notNull(),
-	/** Owning team — the scope machines and loops are listed by. */
 	teamId: text("team_id").notNull(),
-	/** Friendly name (set AFTER the daemon connects; empty string = pending/unnamed). */
 	name: text("name").notNull(),
-	/** Daemon-reported machine identity (captured on first connect). */
 	hostname: text("hostname"),
 	platform: text("platform"),
 	arch: text("arch"),
-	/** Daemon package version reported on poll. Drives the web upgrade hint. */
 	daemonVersion: text("daemon_version"),
 	/** Breaking machine protocol last observed on poll. */
 	daemonProtocol: integer("daemon_protocol"),
-	/** Hash of the device token (machine identity derives from the token). */
 	tokenHash: text("token_hash").notNull(),
 	/**
 	* Plaintext device token. Stored so the UI can re-show the connect command
@@ -1458,67 +1448,51 @@ var machines = pgTable("machines", {
 	* for a self-hosted team tool where the DB is already the trust root).
 	*/
 	token: text("token"),
-	/** Workdir allowlist the daemon enforces as cwd jail; null/[] = unrestricted. */
 	roots: jsonb("roots").$type(),
-	/** Last WS contact (ISO). */
 	lastSeen: text("last_seen"),
-	/** Live WS connection state. */
 	online: boolean("online").notNull().default(false),
 	createdAt: text("created_at").notNull()
 }, (t) => [index("machines_user_idx").on(t.userId), index("machines_team_idx").on(t.teamId)]);
 var loops = pgTable("loops", {
 	id: text("id").primaryKey(),
-	/** Owning user (creator attribution). */
 	userId: text("user_id").notNull(),
-	/** Owning team — the scope loops are listed and authorized by. */
 	teamId: text("team_id").notNull(),
 	/** Execution machine (set at creation; no cross-machine fallback). */
 	machineId: text("machine_id").notNull(),
 	name: text("name").notNull(),
-	/** The user's complete runtime prompt. Canonical writes always provide it. */
 	prompt: text("prompt").notNull(),
-	/** User-authored meanings appended to every delivered prompt. */
 	statusKeep: text("status_keep").notNull(),
 	statusNoChange: text("status_no_change").notNull(),
 	statusBlock: text("status_block").notNull(),
 	/** Exact workdir-relative artifact paths collected by the daemon after provider exit. */
 	artifacts: jsonb("artifacts").$type().notNull().default([]),
 	cron: text("cron").notNull(),
-	/** Cadence facts stay denormalized internally; external writes use LoopSchedule. */
 	scheduleMode: text("schedule_mode", { enum: ["cron", "continuous"] }).notNull(),
 	/** Cron-only overlap behavior. Continuous runs never overlap. */
 	cronOverlap: text("cron_overlap", { enum: ["skip", "queue-one"] }).notNull(),
-	/** Delay used when a done/error terminal restores continuous cadence. */
 	continuousDelayMinutes: integer("continuous_delay_minutes").notNull(),
-	/** IANA tz for cron rows; null for continuous rows. */
 	timezone: text("timezone"),
-	/** Absolute project dir ON THE MACHINE the agent runs in (cwd). */
 	workdir: text("workdir").notNull(),
 	/** Durable Stop-before-delete marker. A deleting loop is never claimable. */
 	deleteRequestedAt: timestamp("delete_requested_at", {
 		withTimezone: true,
 		mode: "string"
 	}),
-	/** Diagnostic annotation for a paused loop. */
 	pauseCause: jsonb("pause_cause").$type(),
-	/** Optional provider model id. Null delegates model selection to the coding-agent CLI. */
 	model: text("model"),
-	/** Optional provider reasoning-effort value. Null delegates to the coding-agent CLI. */
 	reasoningEffort: text("reasoning_effort"),
 	/** Coding agent this loop is BOUND TO and EXECUTED with: the daemon's
 	*  `buildAgentSpawn` branches on this value (`claude-code` → claude,
-	*  `codex` → `codex exec`). Measured from the creating CLI's env when
+	*  `codex` → `codex exec`, `pi` → Pi print mode). Measured from the creating CLI's env when
 	*  detectable, else the declared/selected value. The text column carries
 	*  both a TypeScript enum and a database CHECK constraint. */
 	agent: text("agent", { enum: CODING_AGENTS }).notNull(),
 	enabled: boolean("enabled").notNull().default(true),
-	/** One-shot override, independent of the recurring cadence (ISO). */
 	nextRunAt: text("next_run_at"),
 	/** The next recurring cadence occurrence not yet materialized as a run. Cron
 	* advances this fact after each due occurrence; continuous clears it on due
 	* and restores it from a successful/error terminal. */
 	nextCadenceAt: text("next_cadence_at"),
-	/** Last history number assigned under this loop's row lock. */
 	lastRunIndex: integer("last_run_index").notNull().default(0),
 	createdAt: text("created_at").notNull(),
 	updatedAt: text("updated_at").notNull()
@@ -1527,7 +1501,7 @@ var loops = pgTable("loops", {
 	index("loops_team_idx").on(t.teamId),
 	index("loops_machine_idx").on(t.machineId),
 	index("delete_requested_loops").on(t.deleteRequestedAt).where(sql`${t.deleteRequestedAt} IS NOT NULL`),
-	check("loops_agent_check", sql`${t.agent} IN ('claude-code', 'codex')`),
+	check("loops_agent_check", sql`${t.agent} IN ('claude-code', 'codex', 'pi')`),
 	check("loops_schedule_mode_check", sql`${t.scheduleMode} IN ('cron', 'continuous')`),
 	check("loops_cron_overlap_check", sql`${t.cronOverlap} IN ('skip', 'queue-one')`)
 ]);
@@ -1535,11 +1509,9 @@ var runs = pgTable("runs", {
 	id: text("id").primaryKey(),
 	loopId: text("loop_id").notNull(),
 	machineId: text("machine_id").notNull(),
-	/** Execution profile captured atomically at claim. Pending/unclaimed rows are null. */
 	agent: text("agent", { enum: CODING_AGENTS }),
 	model: text("model"),
 	reasoningEffort: text("reasoning_effort"),
-	/** 1-based execution/terminal order, assigned at claim or unclaimed terminalization. */
 	runIndex: integer("run_index"),
 	phase: text("phase", { enum: [
 		"pending",
@@ -1551,12 +1523,9 @@ var runs = pgTable("runs", {
 	/** Durable queue authority. It only promotes system→owner; diagnostic trigger
 	* reasons, if added later, must never drive lifecycle state. */
 	requestedBy: text("requested_by", { enum: ["owner", "system"] }).notNull().default("system"),
-	/** Current phase/event timestamp. */
 	ts: text("ts").notNull(),
-	/** Immutable queue/history age anchor plus mutation timestamp. */
 	createdAt: text("created_at").notNull().default(sql`CURRENT_TIMESTAMP::text`),
 	updatedAt: text("updated_at").notNull().default(sql`CURRENT_TIMESTAMP::text`),
-	/** Canonical report status. */
 	status: text("status", { enum: [
 		"keep",
 		"no-change",
@@ -1567,18 +1536,14 @@ var runs = pgTable("runs", {
 	exitCode: integer("exit_code"),
 	finalText: text("final_text"),
 	error: text("error"),
-	/** Provider session id on the machine, retained for owner-side continuation. */
 	sessionId: text("session_id"),
-	/** Provider-neutral token usage. Dollar cost is deliberately not stored. */
 	usage: jsonb("usage").$type(),
 	/** Monotonic cancellation intent. Running becomes canceled only on daemon report. */
 	cancelRequestedAt: timestamp("cancel_requested_at", {
 		withTimezone: true,
 		mode: "string"
 	}),
-	/** Last poll where this machine declared the run active. Timeout authority. */
 	heartbeatAt: text("heartbeat_at"),
-	/** Latest rejected terminal-report diagnosis, if any. */
 	reportIncident: jsonb("report_incident").$type()
 }, (t) => [
 	index("runs_loop_idx").on(t.loopId),
@@ -1589,13 +1554,12 @@ var runs = pgTable("runs", {
 	index("runs_loop_terminal_history_idx").on(t.loopId, t.runIndex).where(sql`${t.runIndex} IS NOT NULL AND ${t.phase} IN ('done', 'error', 'canceled')`),
 	uniqueIndex("runs_loop_pending_idx").on(t.loopId).where(sql`${t.phase} = 'pending'`),
 	uniqueIndex("one_running_run_per_loop").on(t.loopId).where(sql`${t.phase} = 'running'`),
-	check("runs_agent_check", sql`${t.agent} IS NULL OR ${t.agent} IN ('claude-code', 'codex')`),
+	check("runs_agent_check", sql`${t.agent} IS NULL OR ${t.agent} IN ('claude-code', 'codex', 'pi')`),
 	check("runs_phase_check", sql`${t.phase} IN ('pending', 'running', 'done', 'error', 'canceled')`),
 	check("runs_requested_by_check", sql`${t.requestedBy} IN ('owner', 'system')`),
 	check("runs_status_check", sql`${t.status} IS NULL OR ${t.status} IN ('keep', 'no-change', 'block')`)
 ]);
 var runLeases = pgTable("run_leases", {
-	/** sha256 hex of the full `rk_…` wire token. */
 	tokenHash: text("token_hash").primaryKey(),
 	runId: text("run_id").notNull(),
 	loopId: text("loop_id").notNull(),
@@ -1645,11 +1609,8 @@ var terminalReportIncidents = pgTable("terminal_report_incidents", {
 	check("terminal_report_incidents_disposition_check", sql`${t.disposition} IN ('run-error', 'telemetry-rejected')`)
 ]);
 var connectKeys = pgTable("connect_keys", {
-	/** m-sha256(connectKey)[:16] — the machine id this key self-registers as. */
 	machineId: text("machine_id").primaryKey(),
-	/** The user who minted the key (the authenticated dashboard session). */
 	userId: text("user_id").notNull(),
-	/** The validated active team the key was minted under. */
 	teamId: text("team_id").notNull(),
 	/** Mint time (ISO) — drives the TTL. */
 	mintedAt: text("minted_at").notNull()
@@ -1657,7 +1618,6 @@ var connectKeys = pgTable("connect_keys", {
 var teams = pgTable("teams", {
 	id: text("id").primaryKey(),
 	name: text("name").notNull(),
-	/** The user whose personal team this is (null for the open-mode shared team). */
 	ownerUserId: text("owner_user_id"),
 	createdAt: text("created_at").notNull()
 });
@@ -1673,18 +1633,13 @@ var teamMembers = pgTable("team_members", {
 	check("team_members_role_check", sql`${t.role} IN ('owner', 'member')`)
 ]);
 var teamInvites = pgTable("team_invites", {
-	/** The wire token the recipient presents (`/invite/<token>`). */
 	token: text("token").primaryKey(),
 	teamId: text("team_id").notNull(),
-	/** Role granted on redeem (capped at the inviter's role at mint time). */
 	role: text("role", { enum: ["owner", "member"] }).notNull().default("member"),
-	/** The owner who minted the invite (attribution). */
 	invitedByUserId: text("invited_by_user_id").notNull(),
-	/** When the invite lapses (ISO). A redeem past this is refused. */
 	expiresAt: text("expires_at").notNull(),
 	/** Single-use stamp: set on redeem so the same link can't be reused. */
 	redeemedAt: text("redeemed_at"),
-	/** The user who redeemed it (attribution). */
 	redeemedByUserId: text("redeemed_by_user_id"),
 	createdAt: text("created_at").notNull()
 }, (t) => [index("team_invites_team_idx").on(t.teamId), check("team_invites_role_check", sql`${t.role} IN ('owner', 'member')`)]);
@@ -1693,7 +1648,6 @@ var teamInvites = pgTable("team_invites", {
 * the byte store under the hash; this row records verified byte presence and size.
 */
 var blobs = pgTable("blobs", {
-	/** sha256 hex of the bytes (the byte-store key). */
 	hash: text("hash").primaryKey(),
 	size: integer("size").notNull(),
 	createdAt: text("created_at").notNull()
@@ -1709,14 +1663,12 @@ var artifactFiles = pgTable("artifact_files", {
 	loopId: text("loop_id").notNull(),
 	/** Normalized workdir-relative path (never absolute or escaping the workdir). */
 	path: text("path").notNull(),
-	/** → blobs.hash. Null when deleted or oversize (no bytes stored). */
 	hash: text("hash"),
 	size: integer("size"),
 	/** Bytes contain a NUL (set even for oversize metadata-only files). */
 	binary: boolean("binary").notNull().default(false),
 	/** File exceeds the per-file byte cap → metadata-only (path + size), no blob. */
 	oversize: boolean("oversize").notNull().default(false),
-	/** Tombstone: the file vanished from the loop's manifest (kept for future diffs). */
 	deleted: boolean("deleted").notNull().default(false),
 	updatedAt: text("updated_at").notNull()
 }, (t) => [
@@ -1943,7 +1895,6 @@ function newLoopId() {
 function nowIso$1() {
 	return (/* @__PURE__ */ new Date()).toISOString();
 }
-/** First cron occurrence strictly after `after`, interpreted in the loop's zone. */
 function nextCronAt(cron, timezone, after) {
 	if (!timezone) throw new Error("invariant: cron schedule has no timezone");
 	const probe = new E(cron, {
@@ -1969,8 +1920,6 @@ async function listLoops(teamId) {
 	const q = db.select().from(loops);
 	return teamId ? await q.where(eq(loops.teamId, teamId)) : await q;
 }
-/** Count a team's loops without materializing their (large) rows — the
-*  delete-block guard + settings-detail badge only need the tally. */
 async function countLoopsForTeam(teamId) {
 	const r = (await db.select({ n: sql`count(*)` }).from(loops).where(eq(loops.teamId, teamId)))[0];
 	return Number(r?.n ?? 0);
@@ -1978,7 +1927,6 @@ async function countLoopsForTeam(teamId) {
 async function getLoop(id) {
 	return (await db.select().from(loops).where(eq(loops.id, id)))[0];
 }
-/** Loops bound to a machine — used by machine cascade authorization and UI counts. */
 async function loopsForMachine(machineId) {
 	return db.select().from(loops).where(eq(loops.machineId, machineId));
 }
@@ -2080,7 +2028,6 @@ async function updateLoopTx(tx, current, patch, at) {
 	}
 	return loop;
 }
-/** Partial owner/system update under the loop lifecycle lock. */
 async function updateLoop(id, patch) {
 	return db.transaction(async (tx) => {
 		const current = (await tx.select().from(loops).where(eq(loops.id, id)).for("update"))[0];
@@ -2112,11 +2059,9 @@ async function pauseLoopState(id) {
 		};
 	});
 }
-/** Pause a loop and return its updated row. */
 async function pauseLoop(id) {
 	return (await pauseLoopState(id))?.loop;
 }
-/** Start a paused loop unless deletion has begun. */
 async function startLoop(id) {
 	return db.transaction(async (tx) => {
 		const current = (await tx.select().from(loops).where(eq(loops.id, id)).for("update"))[0];
@@ -2146,14 +2091,12 @@ async function stopLoopTx(tx, current, at) {
 		}).where(and(eq(runs.id, running.id), eq(runs.phase, "running"), isNull(runs.cancelRequestedAt))).returning())[0] ?? running
 	};
 }
-/** Stop is one loop-locked write: Pause + cancel all queue + mark current run. */
 async function stopLoop(id) {
 	return db.transaction(async (tx) => {
 		const current = (await tx.select().from(loops).where(eq(loops.id, id)).for("update"))[0];
 		return current ? stopLoopTx(tx, current, nowIso$1()) : void 0;
 	});
 }
-/** Stop-run preserves loop lifecycle; running cancellation waits for daemon proof. */
 async function requestRunCancel(loopId, runId) {
 	return db.transaction(async (tx) => {
 		if (!(await tx.select({ id: loops.id }).from(loops).where(eq(loops.id, loopId)).for("update"))[0]) return void 0;
@@ -2338,7 +2281,6 @@ async function runningRunForLoop(loopId) {
 async function getReportReceipt(reportId) {
 	return (await db.select().from(runReportReceipts).where(eq(runReportReceipts.reportId, reportId)))[0];
 }
-/** Deterministic primary key for exact rejected-payload replay evidence. */
 function terminalIncidentReceiptId(reportId, payloadDigest) {
 	return createHash("sha256").update(reportId + payloadDigest).digest("hex");
 }
@@ -2407,7 +2349,6 @@ async function refreshRunHeartbeats(machineId, runIds, at, staleBefore) {
 		updatedAt: at
 	}).where(and(eq(runs.machineId, machineId), eq(runs.phase, "running"), inArray(runs.id, runIds), or(isNull(runs.heartbeatAt), lt(runs.heartbeatAt, staleBefore)))).returning({ id: runs.id })).length;
 }
-/** Validate the report-only authority for one currently running run. */
 async function activeRunForReportTx(tx, loopId, runId, leaseTokenHash) {
 	const lease = (await tx.select().from(runLeases).where(and(eq(runLeases.tokenHash, leaseTokenHash), eq(runLeases.runId, runId), eq(runLeases.loopId, loopId), eq(runLeases.state, "active"))).limit(1).for("update"))[0];
 	if (!lease) return { state: "invalid-lease" };
@@ -2792,11 +2733,9 @@ async function claimReadyRunForMachine(machineId, at = nowIso$1(), excludeRunIds
 		};
 	});
 }
-/** Newest-last run history for a loop (chronological), capped. */
 async function listRuns(loopId, limit = 30) {
 	return (await db.select().from(runs).where(eq(runs.loopId, loopId)).orderBy(desc(runs.ts)).limit(limit)).reverse();
 }
-/** Live reconciliation projection for dashboard/run-detail reads. */
 async function reconciliationStatesForRuns(loopId, runIds, at = nowIso$1()) {
 	if (!runIds.length) return /* @__PURE__ */ new Map();
 	const rows = await db.select({
@@ -2818,7 +2757,6 @@ async function countRuns(loopId) {
 	const r = (await db.select({ n: sql`count(*)` }).from(runs).where(eq(runs.loopId, loopId)))[0];
 	return Number(r?.n ?? 0);
 }
-/** Run count and reported input + output tokens in a bounded recent window. */
 async function recentLoopUsage(loopId, since) {
 	const row = (await db.select({
 		runCount: sql`count(*)`,
@@ -2832,7 +2770,6 @@ async function recentLoopUsage(loopId, since) {
 		tokenCount: Number(row?.tokenCount ?? 0)
 	};
 }
-/** Open runs (pending/running) — used by the timeout-reclaim sweep. */
 async function openRuns() {
 	return db.select().from(runs).where(inArray(runs.phase, ["pending", "running"]));
 }
@@ -2864,8 +2801,7 @@ async function expirePendingRun(runId, expected, at, maxLifetimeMs, message) {
 	});
 }
 async function listMachines(teamId) {
-	const q = db.select().from(machines);
-	return teamId ? await q.where(eq(machines.teamId, teamId)) : await q;
+	return teamId ? await db.select().from(machines).where(eq(machines.teamId, teamId)).orderBy(asc(machines.name), asc(machines.id)) : await db.select().from(machines).orderBy(asc(machines.name), asc(machines.id));
 }
 /**
 * Machines usable/visible in a team, MEMBERSHIP-scoped: every machine whose owner
@@ -2874,7 +2810,7 @@ async function listMachines(teamId) {
 * A user has at most one membership row per team, so no machine is duplicated.
 */
 async function listMachinesForTeam(teamId) {
-	return (await db.select({ m: machines }).from(machines).innerJoin(teamMembers, eq(machines.userId, teamMembers.userId)).where(eq(teamMembers.teamId, teamId))).map((r) => r.m);
+	return (await db.select({ m: machines }).from(machines).innerJoin(teamMembers, eq(machines.userId, teamMembers.userId)).where(eq(teamMembers.teamId, teamId)).orderBy(asc(machines.name), asc(machines.id))).map((r) => r.m);
 }
 async function getMachine(id) {
 	return (await db.select().from(machines).where(eq(machines.id, id)))[0];
@@ -2915,7 +2851,6 @@ async function setMachineOnline(id, online) {
 		lastSeen: nowIso$1()
 	}).where(eq(machines.id, id));
 }
-/** Deterministic personal-team id for a user (open mode ⇒ the shared "team-shared"). */
 function teamIdForUser(userId) {
 	return `team-${userId ?? "shared"}`;
 }
@@ -2949,7 +2884,6 @@ async function ensureTeam(id, name, ownerUserId) {
 function newTeamId() {
 	return `team-${randomUUID().slice(0, 12)}`;
 }
-/** Whether this is the user's renamable but undeletable personal team. */
 function isPersonalTeam(team) {
 	return !!team.ownerUserId && team.id === teamIdForUser(team.ownerUserId);
 }
@@ -2975,16 +2909,12 @@ async function createTeam(name, ownerUserId) {
 		return team;
 	});
 }
-/** Rename a team (no name-sync fights this — see ensureTeam). */
 async function renameTeam(teamId, name) {
 	await db.update(teams).set({ name }).where(eq(teams.id, teamId));
 }
-/** A user's membership row in a team (undefined ⇒ not a member). */
 async function getTeamMember(teamId, userId) {
 	return (await db.select().from(teamMembers).where(and(eq(teamMembers.teamId, teamId), eq(teamMembers.userId, userId))))[0];
 }
-/** A team's members joined with their user email/name (owners first, then by
-*  join order). The member-list surface in the team settings UI. */
 async function listTeamMembers(teamId) {
 	return (await db.select({
 		id: teamMembers.id,
@@ -3000,7 +2930,6 @@ async function listTeamMembers(teamId) {
 		displayName: r.displayName ?? null
 	})).sort((a, b) => a.role === b.role ? a.createdAt < b.createdAt ? -1 : 1 : a.role === "owner" ? -1 : 1);
 }
-/** Resolve a user by email for direct membership; undefined means no account yet. */
 async function userByEmail(email) {
 	const r = (await db.select({
 		id: user.id,
@@ -3079,7 +3008,6 @@ async function deleteTeamCascade(teamId) {
 	if (outcome === "ok") ensuredTeams.delete(teamId);
 	return outcome;
 }
-/** Mint an invite for a team. `token` is the caller-supplied wire token. */
 async function createInvite(input) {
 	return (await db.insert(teamInvites).values({
 		...input,
@@ -3089,7 +3017,6 @@ async function createInvite(input) {
 async function getInvite(token) {
 	return (await db.select().from(teamInvites).where(eq(teamInvites.token, token)))[0];
 }
-/** A team's still-live invites (unredeemed, unexpired), newest first. */
 async function listPendingInvites(teamId) {
 	const now = nowIso$1();
 	return db.select().from(teamInvites).where(and(eq(teamInvites.teamId, teamId), isNull(teamInvites.redeemedAt), gt(teamInvites.expiresAt, now))).orderBy(desc(teamInvites.createdAt));
@@ -3121,23 +3048,18 @@ async function redeemInviteAtomic(token, userId, grant) {
 		return true;
 	});
 }
-/** Revoke a pending invite (owner action). */
 async function deleteInvite(token) {
 	await db.delete(teamInvites).where(eq(teamInvites.token, token));
 }
 async function getTeam(id) {
 	return (await db.select().from(teams).where(eq(teams.id, id)))[0];
 }
-/** Teams the user belongs to (membership join), newest first. Drives the team
-*  switcher — a regular user has just their personal team (no dropdown). */
 async function listTeamsForUser(userId) {
 	return (await db.select({ t: teams }).from(teamMembers).innerJoin(teams, eq(teamMembers.teamId, teams.id)).where(eq(teamMembers.userId, userId)).orderBy(desc(teams.createdAt))).map((r) => r.t);
 }
-/** Whether the user is a member of the team (authorizes a team-switch request). */
 async function isTeamMember(teamId, userId) {
 	return !!(await db.select({ id: teamMembers.id }).from(teamMembers).where(and(eq(teamMembers.teamId, teamId), eq(teamMembers.userId, userId))))[0];
 }
-/** Does the server already have metadata for this blob hash? (drives needHashes). */
 async function blobExists(hash) {
 	return !!(await db.select({ hash: blobs.hash }).from(blobs).where(eq(blobs.hash, hash)))[0];
 }
@@ -3151,7 +3073,6 @@ async function blobSizes(hashes) {
 	}).from(blobs).where(inArray(blobs.hash, [...new Set(hashes)]));
 	return new Map(rows.map((row) => [row.hash, row.size]));
 }
-/** Record verified blob metadata idempotently. */
 async function recordBlob(hash, size) {
 	await db.insert(blobs).values({
 		hash,
@@ -3220,16 +3141,12 @@ async function reconcileConfiguredArtifacts(loopId, configuredAtStart, keepPaths
 		return stale.length;
 	});
 }
-/** The loop's current (non-deleted) file set, path-sorted. */
 async function listArtifacts(loopId) {
 	return db.select().from(artifactFiles).where(and(eq(artifactFiles.loopId, loopId), eq(artifactFiles.deleted, false))).orderBy(artifactFiles.path);
 }
-/** One file row by loop + path (live or tombstoned). */
 async function getArtifactFile(loopId, path) {
 	return (await db.select().from(artifactFiles).where(and(eq(artifactFiles.loopId, loopId), eq(artifactFiles.path, path))))[0];
 }
-/** The loop's CURRENT live file set as a snapshot manifest (path → metadata) —
-*  what report() captures as the terminal run's artifact state. */
 async function buildLoopManifest(loopId) {
 	const manifest = {};
 	for (const f of await listArtifacts(loopId)) manifest[f.path] = {
@@ -3257,7 +3174,6 @@ async function putRunSnapshot(runId, loopId, manifest) {
 		}
 	});
 }
-/** A run's captured snapshot, or undefined when the run predates the feature. */
 async function getRunSnapshot(runId) {
 	return (await db.select().from(runSnapshots).where(eq(runSnapshots.runId, runId)))[0];
 }
@@ -3278,7 +3194,6 @@ async function pruneRunSnapshots(loopId, keep) {
 	const pred = survivors.length ? and(eq(runSnapshots.loopId, loopId), notInArray(runSnapshots.runId, survivors)) : eq(runSnapshots.loopId, loopId);
 	return (await db.delete(runSnapshots).where(pred).returning({ id: runSnapshots.runId })).length;
 }
-/** Distinct loop ids that currently have at least one run snapshot. */
 async function loopIdsWithSnapshots() {
 	return (await db.selectDistinct({ loopId: runSnapshots.loopId }).from(runSnapshots)).map((r) => r.loopId);
 }
@@ -3329,7 +3244,6 @@ async function countRunSnapshots() {
 	const r = (await db.select({ n: sql`count(*)` }).from(runSnapshots))[0];
 	return Number(r?.n ?? 0);
 }
-/** Server-side artifact-sync helpers: path safety, byte caps, and hashing. */
 /** Per-file byte cap. At or under ⇒ bytes sync; over ⇒ metadata-only (no bytes). */
 var BLOB_CAP = 10 * 1024 * 1024;
 /** Hard ceiling on the exact-manifest sync POST body. */
@@ -3353,7 +3267,6 @@ function exactRecord(value, fields) {
 function sha256Buf(bytes) {
 	return createHash("sha256").update(bytes).digest("hex");
 }
-/** A 64-char lowercase hex sha256. */
 function isValidHash(hash) {
 	return typeof hash === "string" && /^[0-9a-f]{64}$/.test(hash);
 }
@@ -3424,11 +3337,9 @@ function parseArtifactSyncBody(value) {
 function sha256(s) {
 	return createHash("sha256").update(s).digest("hex");
 }
-/** Mint a fresh device token (`dk_…`) — the one wire format `machineIdFromToken` consumes. */
 function mintDeviceToken() {
 	return `dk_${randomBytes(15).toString("hex")}`;
 }
-/** Derive the stable machine id from its device token. */
 function machineIdFromToken(token) {
 	return `m-${sha256(token).slice(0, 16)}`;
 }
@@ -3461,7 +3372,6 @@ async function rememberConnectKey(connectKey, intent) {
 		set: row
 	});
 }
-/** Peek (NON-evicting) the team/minter a connect-key was minted under, if still live. */
 async function readClaimIntent(connectKey, now = Date.now()) {
 	if (!connectKey) return void 0;
 	const row = (await db.select().from(connectKeys).where(eq(connectKeys.machineId, machineIdFromToken(connectKey))))[0];
@@ -3471,7 +3381,6 @@ async function readClaimIntent(connectKey, now = Date.now()) {
 		teamId: row.teamId
 	};
 }
-/** The remembered owner of a self-registering machine, if any (still-live key). */
 async function getDeviceOwner(machineId, now = Date.now()) {
 	const row = (await db.select().from(connectKeys).where(eq(connectKeys.machineId, machineId)))[0];
 	if (!row || !connectKeyFresh(row.mintedAt, now)) return void 0;
@@ -3534,7 +3443,6 @@ var newIdempotency = /* @__PURE__ */ new Map();
 function pruneNewIdempotency(now) {
 	for (const [key, rec] of newIdempotency) if (now - rec.at > 9e5) newIdempotency.delete(key);
 }
-/** Remember that `key` (from THIS machine) created `loopId`. Pruned on write. */
 function recordNewIdempotency(key, machineId, loopId, now = Date.now()) {
 	pruneNewIdempotency(now);
 	newIdempotency.set(key, {
@@ -3596,8 +3504,6 @@ function validIdentifiers(value, rejectNumericLeadingZero) {
 		return !rejectNumericLeadingZero || !/^\d+$/.test(identifier) || identifier === "0" || !identifier.startsWith("0");
 	});
 }
-/** Parse the leading numeric core `x.y.z` of a version, ignoring any pre-release
-*  / build suffix. Returns null when it isn't a recognizable version. */
 function core(v) {
 	const m = /^\s*v?(\d+)\.(\d+)\.(\d+)/.exec(v);
 	if (!m) return null;
@@ -3607,7 +3513,6 @@ function core(v) {
 		Number(m[3])
 	];
 }
-/** Does `v` carry a pre-release suffix (e.g. "1.2.3-rc.1")? */
 function isPre(v) {
 	return /^\s*v?\d+\.\d+\.\d+-/.test(v);
 }
@@ -3707,7 +3612,6 @@ async function readJsonBody(request, maxBytes) {
 		return { kind: "invalid" };
 	}
 }
-/** Shared clipping cap for large prompt and terminal telemetry strings. */
 var WIRE_TEXT_CAP = 512 * 1024;
 /** Validate an optional poll string without coercion, clipping, or NUL removal. */
 function validOptionalPollString(value, cap) {
@@ -3724,7 +3628,6 @@ function nowIso() {
 function stripNul(s) {
 	return s.replace(/\u0000/g, "");
 }
-/** Clip a free-text wire field and strip NUL before persistence. */
 function clipText(s, cap) {
 	return stripNul(s.slice(0, cap));
 }
@@ -3881,7 +3784,6 @@ var LocalBlobStore = class {
 		await this.syncDir(path.dirname(target));
 	}
 };
-/** In-memory blob store — injectable test adapter. */
 var MemoryBlobStore = class {
 	map = /* @__PURE__ */ new Map();
 	async has(hash) {
@@ -3897,11 +3799,9 @@ var MemoryBlobStore = class {
 		this.map.delete(hash);
 	}
 };
-/** Object key for a blob hash. Flat namespace under a prefix — hashes are unique. */
 function blobKey(hash) {
 	return `blobs/${hash}`;
 }
-/** Cloudflare R2 blob store over the S3-compatible API (AWS SDK v3). */
 var R2BlobStore = class {
 	cfg;
 	client;
@@ -3968,7 +3868,6 @@ var R2BlobStore = class {
 		}));
 	}
 };
-/** S3 "object absent" maps to a 404 / NoSuchKey / NotFound error shape. */
 function isNotFound(err) {
 	const e = err;
 	return e?.name === "NotFound" || e?.name === "NoSuchKey" || e?.$metadata?.httpStatusCode === 404;
@@ -4159,35 +4058,21 @@ async function authenticateDeviceToken(deviceToken, options = {}) {
 		machine
 	};
 }
-/** Whether a token needs quoting inside a key/value line or comma-delimited row. */
 function needsQuote(s) {
 	return s === "" || /[\s,:"]/.test(s);
 }
-/** Quote and escape a string so it remains on one line. */
 function quote(s) {
 	return `"${s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"").replace(/\r?\n/g, "\\n")}"`;
 }
-/** Render one scalar the TOON way: a finite number / boolean bare, null|undefined as
-*  the em-dash placeholder, a string bare unless it needs quoting. */
 function scalar(v) {
 	if (v === null || v === void 0) return "—";
 	if (typeof v === "number") return Number.isFinite(v) ? String(v) : "—";
 	if (typeof v === "boolean") return v ? "true" : "false";
 	return needsQuote(v) ? quote(v) : v;
 }
-/** A single top-level `key: value` line (value scalar-rendered). */
 function kvLine(key, v) {
 	return `${key}: ${scalar(v)}`;
 }
-/**
-* A detail block: a top key, then each field indented two spaces as `key: value`.
-* The value may be a pre-rendered raw string (pass a `{ raw }`) so composite values
-* (e.g. a size hint or an already-quoted body) render verbatim.
-*
-*   topKey:
-*     name: "Docs Sweep"
-*     cron: "0 6 * * 1"
-*/
 function detailBlock(topKey, rows) {
 	const lines = [`${topKey}:`];
 	for (const [k, v] of rows) {
@@ -4196,44 +4081,25 @@ function detailBlock(topKey, rows) {
 	}
 	return lines.join("\n");
 }
-/** Render a count, optionally with total or displayed-window context. */
 function countLine(count, opts = {}) {
 	if (opts.total !== void 0) return `count: ${count} of ${opts.total} total`;
 	if (opts.showing !== void 0) return `count: ${count} (showing first ${opts.showing})`;
 	return `count: ${count}`;
 }
-/**
-* A typed list block: the header row `name[N]{f1,f2}:` then each record as an
-* indented comma row (cells scalar-rendered, quoted only when needed). Does NOT emit
-* the `count:` line — compose it with `countLine` so the caller controls the
-* aggregate flavor.
-*
-*   loops[2]{id,name,cron,enabled}:
-*     loop-abc,"Docs Sweep","0 6 * * 1",on
-*/
 function listBlock(name, fields, rows) {
 	const lines = [`${name}[${rows.length}]{${fields.join(",")}}:`];
 	for (const row of rows) lines.push(`  ${row.map(scalar).join(",")}`);
 	return lines.join("\n");
 }
-/** Render an empty named collection. */
 function emptyList(name) {
 	return `${name}: []`;
 }
-/** Render command templates as an indented help block. */
 function helpBlock(lines) {
 	return [`help[${lines.length}]:`, ...lines.map((l) => `  ${l}`)].join("\n");
 }
-/**
-* Render a quoted error plus a machine-readable code.
-*
-*   error: "status must be keep|no-change|block (got \"wibble\")"
-*   code: VALIDATION_ERROR
-*/
 function errorBlock(message, code) {
 	return `error: ${quote(message)}\ncode: ${code}`;
 }
-/** Map an HTTP status to its CLI error code. */
 function codeForStatus(status) {
 	switch (status) {
 		case 400: return "VALIDATION_ERROR";
@@ -4245,7 +4111,6 @@ function codeForStatus(status) {
 		default: return "ERROR";
 	}
 }
-/** Clip content at `cap` and append its original size plus recovery hint. */
 function truncate(text, cap, tail = "use --full to see complete body") {
 	if (text.length <= cap) return {
 		value: text,
@@ -4256,8 +4121,6 @@ function truncate(text, cap, tail = "use --full to see complete body") {
 		truncated: true
 	};
 }
-/** Join document sections with a single newline, dropping empty/blank sections so a
-*  missing optional block (e.g. no rejections) leaves no stray blank line. */
 function doc(...sections) {
 	return sections.filter((s) => typeof s === "string" && s.length > 0).join("\n");
 }
@@ -4324,6 +4187,24 @@ function optionalProvider(value, field) {
 		value: normalizeProviderSetting(value)
 	};
 }
+var PI_THINKING = new Set([
+	"off",
+	"minimal",
+	"low",
+	"medium",
+	"high",
+	"xhigh",
+	"max"
+]);
+function validateReasoningEffort(value, agent) {
+	const result = optionalProvider(value, "reasoningEffort");
+	if (!result.ok) return result;
+	if (agent === "pi" && result.value !== null && !PI_THINKING.has(result.value)) return {
+		ok: false,
+		detail: "reasoningEffort for pi must be one of off, minimal, low, medium, high, xhigh, max, or null"
+	};
+	return result;
+}
 function validTimezone(timezone) {
 	try {
 		new Intl.DateTimeFormat("en-US", { timeZone: timezone }).format();
@@ -4535,7 +4416,6 @@ function statusDefinitionsFromLoop(loop) {
 		block: loop.statusBlock
 	};
 }
-/** The single owner-facing structured loop shape used by show/list JSON output. */
 function canonicalLoopEnvelope(loop) {
 	return {
 		id: loop.id,
@@ -4576,13 +4456,13 @@ function validateLoopCreate(value) {
 	if (!artifacts.ok) return artifacts;
 	const model = optionalProvider(raw.model, "model");
 	if (!model.ok) return model;
-	const reasoningEffort = optionalProvider(raw.reasoningEffort, "reasoningEffort");
-	if (!reasoningEffort.ok) return reasoningEffort;
 	const agent = coerceCodingAgent(raw.agent);
 	if (!agent) return {
 		ok: false,
 		detail: `agent is required and must be one of ${CODING_AGENTS.join(", ")}`
 	};
+	const reasoningEffort = validateReasoningEffort(raw.reasoningEffort, agent);
+	if (!reasoningEffort.ok) return reasoningEffort;
 	if (raw.enabled !== void 0 && typeof raw.enabled !== "boolean") return {
 		ok: false,
 		detail: "enabled must be boolean"
@@ -4669,19 +4549,21 @@ function validateLoopEdit(loop, value) {
 		if (!result.ok) return result;
 		update.model = result.value;
 	}
-	if (raw.reasoningEffort !== void 0) {
-		const result = optionalProvider(raw.reasoningEffort, "reasoningEffort");
-		if (!result.ok) return result;
-		update.reasoningEffort = result.value;
-	}
+	let effectiveAgent = loop.agent;
 	if (raw.agent !== void 0) {
 		const agent = coerceCodingAgent(raw.agent);
 		if (!agent) return {
 			ok: false,
 			detail: `agent must be one of ${CODING_AGENTS.join(", ")}`
 		};
+		effectiveAgent = agent;
 		update.agent = agent;
 	}
+	if (raw.reasoningEffort !== void 0 || raw.agent !== void 0) {
+		const result = validateReasoningEffort(raw.reasoningEffort !== void 0 ? raw.reasoningEffort : loop.reasoningEffort, effectiveAgent);
+		if (!result.ok) return result;
+		if (raw.reasoningEffort !== void 0) update.reasoningEffort = result.value;
+	}
 	if (raw.enabled !== void 0) {
 		if (typeof raw.enabled !== "boolean") return {
 			ok: false,
@@ -4748,7 +4630,6 @@ var ONLINE_TTL_MS = 3e4;
 /** Auto-pause after this many consecutive errors. Canceled rows are transparent;
 *  zero disables the breaker. */
 var AUTOPAUSE_STREAK = Math.max(0, Number(process.env.PIEVO_FAILURE_AUTOPAUSE_STREAK ?? 3));
-/** How long pending system work on an offline machine stays claimable. */
 var DEFERRED_MAX_MS = 7 * 864e5;
 /** A claimed run that never reports within this window is reclaimed as timed out. */
 var configuredRunTimeoutMs = Number(process.env.PIEVO_RUN_TIMEOUT_MS || 20 * 6e4);
@@ -4763,9 +4644,9 @@ var EDITABLE_LOOP_FIELDS = LOOP_EDIT_FIELDS;
 *  it never satisfies the successful-run reporting protocol. Run errors share
 *  this cap. Exported for `cli.ts` so the report verb uses the same budget. */
 var MESSAGE_CAP = 2e3;
-/** A claude-code session id is a UUID-ish token — anything longer is garbage. */
+/** Provider session IDs are opaque short tokens; this rejects malformed payloads
+*  without constraining known provider formats. */
 var SESSION_ID_CAP = 200;
-/** Keep heartbeat throttling safely inside custom short timeout windows. */
 function heartbeatRefreshMs(runTimeoutMs) {
 	if (!Number.isFinite(runTimeoutMs) || runTimeoutMs <= 0) return 1;
 	return Math.max(1, Math.min(6e4, runTimeoutMs / 3));
@@ -4971,7 +4852,6 @@ var MachineGateway = class {
 	*  process-local; unlike durable run leases, a deploy drops them and the daemon
 	*  simply re-polls. */
 	pollWaiters = /* @__PURE__ */ new Map();
-	/** Resolve (and disarm) a machine's parked long-poll waiter, if any. */
 	wakeMachine(machineId) {
 		this.pollWaiters.get(machineId)?.(true);
 	}
@@ -5139,7 +5019,6 @@ var MachineGateway = class {
 			body: { delivery }
 		};
 	}
-	/** Protocol-v4 poll: plural local state, one new delivery per poll. */
 	async pollV4(deviceToken, request) {
 		const rawRequest = request;
 		if (request === null || typeof request !== "object" || Array.isArray(request) || Object.keys(rawRequest).some((key) => !POLL_V4_REQUEST_FIELDS.has(key)) || !validPollInfo(rawRequest?.info) || rawRequest.protocolVersion !== void 0 && (typeof rawRequest.protocolVersion !== "number" || !Number.isInteger(rawRequest.protocolVersion)) || rawRequest.currentRuns !== void 0 && (!Array.isArray(rawRequest.currentRuns) || rawRequest.currentRuns.some((run) => !validPollCurrentRun(run))) || rawRequest.daemonInstanceId !== void 0 && !validPollWireId(rawRequest.daemonInstanceId) || rawRequest.recoveryComplete !== void 0 && typeof rawRequest.recoveryComplete !== "boolean") return {
@@ -5209,7 +5088,6 @@ var MachineGateway = class {
 			}
 		};
 	}
-	/** Idle v4 polls long-poll; active/reporting polls return immediately. */
 	async pollV4Wait(deviceToken, request, waitMs = LONG_POLL_WAIT_MS) {
 		if (request.currentRuns?.length || request.protocolVersion !== 4) return this.pollV4(deviceToken, request);
 		const auth = await authenticateDeviceToken(deviceToken, { allowUnknown: true });
@@ -5268,8 +5146,6 @@ var MachineGateway = class {
 			}
 		};
 	}
-	/** Create a validated loop through device authority, bind it to that machine,
-	* and schedule it immediately. */
 	async createLoop(deviceToken, body) {
 		const auth = await authenticateDeviceToken(deviceToken);
 		if (!auth.ok) return auth.response;
@@ -5362,9 +5238,6 @@ var MachineGateway = class {
 			};
 		}
 	}
-	/** List loops bound to this machine. `--fields` extends the minimal default
-	*  columns and rejects unknown names. `--json` returns full structured records
-	*  (first byte `[`), mirroring `show --json` — the daemon prints `text` either way. */
 	async listLoops(deviceToken, fieldsFlag, json) {
 		const auth = await authenticateDeviceToken(deviceToken);
 		if (!auth.ok) return auth.response;
@@ -5410,7 +5283,6 @@ var MachineGateway = class {
 			}
 		};
 	}
-	/** Edit a loop through owner authority, scoped to loops bound to this machine. */
 	async editLoop(deviceToken, id, patch, dryRun = false) {
 		const auth = await authenticateDeviceToken(deviceToken);
 		if (!auth.ok) return auth.response;
@@ -5432,20 +5304,30 @@ var MachineGateway = class {
 			};
 			const update = validated.value;
 			const applied = Object.keys(patch ?? {});
-			if (dryRun) return {
-				status: 200,
-				body: {
-					ok: true,
-					dryRun: true,
+			if (dryRun) {
+				const before = canonicalLoopEnvelope(loop);
+				const after = canonicalLoopEnvelope({
+					...loop,
+					...update
+				});
+				const { id: _readOnlyId, ...config } = after;
+				const preview = {
 					id: loop.id,
 					applied,
-					config: { ...patch },
-					text: JSON.stringify({
-						id: loop.id,
-						applied
-					}, null, 2)
-				}
-			};
+					before,
+					after
+				};
+				return {
+					status: 200,
+					body: {
+						ok: true,
+						dryRun: true,
+						...preview,
+						config,
+						text: JSON.stringify(preview, null, 2)
+					}
+				};
+			}
 			if (Object.keys(update).length === 0) return {
 				status: 200,
 				body: {
@@ -5851,7 +5733,6 @@ function fmtTimeZoned(iso, timezone, opts = {}) {
 		return fmtTime(iso);
 	}
 }
-/** Minimal default columns for `pievo loops`. */
 var LIST_DEFAULT_FIELDS = [
 	"id",
 	"name",
@@ -5859,8 +5740,6 @@ var LIST_DEFAULT_FIELDS = [
 	"enabled",
 	"nextFire"
 ];
-/** The optional columns `--fields` may add (the "available" set an unknown field is
-*  measured against). `runs`/`lastResult` are derived per loop. */
 var LIST_OPTIONAL_FIELDS = [
 	"timezone",
 	"model",
@@ -5868,7 +5747,6 @@ var LIST_OPTIONAL_FIELDS = [
 	"runs",
 	"lastResult"
 ];
-/** One `loops` cell for a named column (scalar-rendered by `listBlock`). */
 function loopCell(rec, field) {
 	switch (field) {
 		case "id": return rec.id;
@@ -5884,13 +5762,10 @@ function loopCell(rec, field) {
 		default: return null;
 	}
 }
-/** Render the typed loop list. Columns are the default set
-*  plus any `--fields` extras (validated + resolved by `listLoops`). */
 function renderLoopsText(loops, fields) {
 	if (!loops.length) return doc(countLine(0), emptyList("loops"), helpBlock(["Run `pievo new --json '{...}'` to create your first loop", "Run `pievo daemon connect` if this machine isn't connected yet"]));
 	return doc(countLine(loops.length), listBlock("loops", fields, loops.map((l) => fields.map((f) => loopCell(l, f)))), helpBlock(["Run `pievo show <id>` to see a loop's full config", "Run `pievo log <id>` to see a loop's recent runs"]));
 }
-/** One run's result cell, derived from phase + status. */
 function runResultToken(r) {
 	if (r.status === "block") return `block/${r.phase}`;
 	if (r.phase === "canceled") return "canceled";
@@ -6070,7 +5945,6 @@ var ArtifactSync = class {
 			body: { ok: true }
 		};
 	}
-	/** Read stored content-addressed bytes, or null when absent. */
 	readBlob(hash) {
 		if (!isValidHash(hash)) return Promise.resolve(null);
 		return this.blobStore.get(hash);
@@ -6091,20 +5965,16 @@ var ArtifactSync = class {
 * a changed text file degrades to the size-delta marker, like binary/oversize.
 */
 var MAX_DIFF_BYTES = 512 * 1024;
-/** A file is text-diffable only when it has stored bytes and isn't binary/oversize. */
 function isText(e) {
 	return !!e && !e.binary && !e.oversize && !!e.hash;
 }
-/** Within the inline-diff size cap (unknown size ⇒ allowed). */
 function withinDiffCap(e) {
 	return !!e && (e.size == null || e.size <= MAX_DIFF_BYTES);
 }
-/** Load one snapshot blob, or null when recorded bytes are absent. */
 async function bytesOf(e) {
 	if (!e.hash) return null;
 	return await (await getArtifactSync()).readBlob(e.hash) ?? null;
 }
-/** Unified diff between two versions of a path (empty string ⇒ added/removed side). */
 function unified(path, oldText, newText, maxEditLength) {
 	return maxEditLength === void 0 ? createTwoFilesPatch(path, path, oldText, newText, "previous run", "this run") : createTwoFilesPatch(path, path, oldText, newText, "previous run", "this run", { maxEditLength });
 }
@@ -6607,7 +6477,6 @@ var CliGateway = class {
 	async cli(token, argv) {
 		return finalizeCli(token.startsWith("dk_") ? await this.deviceCli(token, argv) : await this.runCli(token, argv));
 	}
-	/** DEVICE-credential branch of the unified CLI. */
 	async deviceCli(deviceToken, argv) {
 		const auth = await authenticateDeviceToken(deviceToken, { allowUnknown: true });
 		if (!auth.ok) return auth.response;
@@ -6866,7 +6735,6 @@ var CliGateway = class {
 			body: { text: `run already finished: ${runResultToken(stopped)}` }
 		};
 	}
-	/** RUN-credential branch of the unified CLI: report and its help only. */
 	async runCli(runToken, argv) {
 		const lease = await resolveLease(runToken);
 		if (!lease) return {
@@ -6940,13 +6808,16 @@ var CliGateway = class {
 		];
 		const unknown = Object.keys(flags).filter((key) => !acceptedFlags.includes(key));
 		if (unknown.length) return derr(400, `report does not accept --${unknown[0]}`, "VALIDATION_ERROR");
+		if (lease.state === "retired") return {
+			code: 200,
+			text: "reported: run retired · result discarded"
+		};
 		const applied = await this.applyReportMutation(lease, leaseTokenHash, status, message.slice(0, MESSAGE_CAP));
 		return applied.ok ? {
 			code: 200,
 			text: renderReportedText(status, true)
 		} : derr(applied.status ?? 409, applied.detail ?? "this run is no longer active", applied.code);
 	}
-	/** The complete run-token command surface: report plus help for report. */
 	helpText(_lease) {
 		return doc(listBlock("verbs", ["verb", "syntax"], [["report", "--status keep|no-change|block --message <summary>"]]), helpBlock(["Call exactly one pievo report before finishing", "No other command is accepted from a run credential"]));
 	}
@@ -7023,7 +6894,6 @@ var CliGateway = class {
 		})), scoped.elsewhere, await recentMachineRuns(loops, 3));
 	}
 };
-/** Shared refusal for terminal-report-only grace after reclaim. */
 var TERMINAL_GRACE_MSG = "this run is terminal and no longer accepts commands; its final result is delivered via the terminal report";
 /** Verbs that require device authority. `report` is run-only and rejected there. */
 var DEVICE_ONLY_VERBS = new Set([
@@ -7108,21 +6978,18 @@ function finalizeCli(res) {
 	}
 	return res;
 }
-/** Render the compact run-status confirmation. */
 function renderReportedText(status, hasMessage) {
 	const parts = [];
 	if (status) parts.push(`status=${status}`);
 	if (hasMessage) parts.push("message recorded");
 	return `reported: ${parts.length ? parts.join(" · ") : "recorded"}`;
 }
-/** RUN-credential verb help (in-run `rk_` lease). */
 var RUN_VERB_HELP = { report: {
 	syntax: "report --status keep|no-change|block --message <text>",
 	summary: "record this run's required status and non-empty summary",
 	avail: () => "always available",
 	help: ["Run `pievo report --status no-change --message \"no actionable change\"` to close this run", "Run `pievo report --status keep --message \"completed the requested work\"` to retain a result"]
 } };
-/** DEVICE-credential verb help (owner `dk_` device token). */
 var DEVICE_VERB_HELP = {
 	new: {
 		syntax: "new --json '<config>' [--dry-run] [--connect-key <dk_…>] [--server-url <url>]",
@@ -7175,25 +7042,19 @@ var DEVICE_VERB_HELP = {
 		help: ["Run `pievo log <id> --json` for structured history", "Run `pievo log <id> --run 12 --diff` for bounded run detail and artifact diff"]
 	}
 };
-/** Render per-verb help. A run lease selects the report-only help;
-*  no lease means the device (owner) surface. Returns undefined for a verb
-*  with no help spec, so the caller falls back to its unknown-command handling. */
 function verbHelpText(verb, lease) {
 	const spec = lease ? RUN_VERB_HELP[verb] : DEVICE_VERB_HELP[verb];
 	if (!spec) return void 0;
 	return doc(kvLine("verb", verb), kvLine("syntax", spec.syntax), kvLine("summary", spec.summary), lease && spec.avail ? kvLine("availability", spec.avail(lease)) : null, helpBlock(spec.help));
 }
-/** The canonical editable config emitted by `show --json`. */
 function loopEnvelope(loop) {
 	return { ...canonicalLoopEnvelope(loop) };
 }
-/** Render a large prompt in full or as a compact presence hint. */
 function contentField(value, full) {
 	if (value == null) return "absent";
 	if (full) return value;
 	return { raw: `present, ${value.length} bytes — use --full to see` };
 }
-/** The next cadence fire, formatted in the loop's timezone. */
 function nextFireDisplay(loop) {
 	const schedule = scheduleFromLoop(loop);
 	if (schedule.mode === "continuous") return `after exec terminal + ${schedule.delayMinutes}m`;
@@ -7201,7 +7062,6 @@ function nextFireDisplay(loop) {
 	if (!iso) return "(never)";
 	return fmtTimeZoned(iso, schedule.timezone, { seconds: true });
 }
-/** `pievo show` renders the editable envelope followed by derived read-only state. */
 function renderShowText(loop, env, totalRuns, lastRun, opts = {}) {
 	const full = opts.full === true;
 	const block = detailBlock("loop", [
@@ -7225,14 +7085,12 @@ function renderShowText(loop, env, totalRuns, lastRun, opts = {}) {
 	];
 	return doc(block, kvLine("nextFire", nextFireDisplay(loop)), `lifecycle: ${loop.enabled ? "active" : "paused"}`, `runs: ${runsTally}`, !loop.enabled ? kvLine("pauseCause", loop.pauseCause?.kind === "failure-streak" ? `failure-streak (run ${loop.pauseCause.runId}, count ${loop.pauseCause.count})` : loop.pauseCause?.kind === "blocked" ? `blocked (run ${loop.pauseCause.runId})` : loop.pauseCause?.kind === "owner" ? "owner" : "unknown") : null, lastRun?.reportIncident ? kvLine("reportIncident", `${lastRun.reportIncident.code} · ${lastRun.reportIncident.faultDomain} · ${lastRun.reportIncident.reason}`) : null, helpBlock(help));
 }
-/** The static one-line description in the home header. */
 var HOME_DESCRIPTION = "Run your scheduled Pievo agent loops on this machine with your own coding agent.";
 /** Expand a leading `~/` against the daemon-supplied home dir (the SERVER's own home
 *  is irrelevant — a loop's paths are the daemon machine's). Absent home ⇒ unchanged. */
 function expandHome(p, home) {
 	return home && p.startsWith("~/") ? path.join(home, p.slice(2)) : p;
 }
-/** A loop's folder on the daemon machine is its configured workdir. */
 function scopeLoopDir(workdir, home) {
 	return path.resolve(expandHome(workdir, home));
 }
@@ -7261,8 +7119,6 @@ function scopeLoopsByCwd(loops, cwd, home) {
 		elsewhere: loops.length - matched.length
 	};
 }
-/** The most recent runs across ALL of a machine's loops, newest-first, for the home
-*  `recent[]` block. Merges each loop's newest few then globally sorts by ts. */
 async function recentMachineRuns(loops, n) {
 	const rows = [];
 	for (const l of loops) for (const r of await listRuns(l.id, n)) rows.push({
@@ -7393,7 +7249,6 @@ var Scheduler = class {
 	enqueueInitialExec(id) {
 		return this.enqueue(id, { requestedBy: "system" });
 	}
-	/** Poll fallback and timer callback converge here. */
 	async advanceDueSchedules(machineId, loopId) {
 		const advanced = await advanceDueSchedules((/* @__PURE__ */ new Date()).toISOString(), {
 			machineId,