@loompad/cli 1.2.5 → 1.2.7

package/dist/core/review-triage.js

@@ -1,14 +1,4 @@
-/**
- * Review Triage: what to read first in a turn's diff.
- *
- * An agent hands back twelve changed files and you have five minutes. Most of
- * them are fine to skim; one deleted a test, one touched the auth middleware,
- * one added a dependency. This reads the patch and ranks the files by what a
- * reviewer would want to see first — each with the reasons, said plainly.
- *
- * It flags what the diff shows, never guesses at intent: "a test was removed",
- * not "the agent cheated". Pure: the runtime calls it on every turn_diff.
- */
+import { SECRET_PATTERNS } from "./secret-scan.js";
 /** Split a unified diff (git's, plus Loom's new-file patches) into files. */
 export function splitPatch(patch) {
     const out = [];
@@ -51,8 +41,8 @@ const MIGRATION = /(^|\/)(migrations?|migrate|schema)\/|\.sql$|schema\.prisma$|(
 const CONFIG = /(^|\/)(\.env[^/]*|tsconfig[^/]*\.json|\.eslintrc[^/]*|eslint\.config\.[a-z]+|vite\.config\.[a-z]+|next\.config\.[a-z]+|webpack\.config\.[a-z]+|jest\.config\.[a-z]+|vitest\.config\.[a-z]+|\.npmrc|\.gitignore)$/;
 /** What an added line can do that deserves eyes, said the way a reviewer would. */
 const RISKY = [
-    [/-----BEGIN [A-Z ]*PRIVATE KEY-----|\bAKIA[0-9A-Z]{16}\b|\b(sk|rk|pk)_(live|test)_[0-9a-zA-Z]{16,}|\bsk-[A-Za-z0-9_-]{20,}|\bgh[pousr]_[A-Za-z0-9]{30,}|\bxox[baprs]-[A-Za-z0-9-]{10,}/, "what looks like a secret key"],
-    [/\b(password|passwd|secret|api[_-]?key|token)\b\s*[:=]\s*["'][^"'\s]{6,}["']/i, "a hard-coded credential"],
+    // the same secret patterns `loom orchestrate --apply` and `loom chain` check before applying
+    ...SECRET_PATTERNS,
     [/\beval\s*\(|new Function\s*\(/, "eval of a string"],
     [/\b(child_process|execSync|spawnSync|os\.system|subprocess\.(call|run|Popen)|shell\s*=\s*True)\b/, "running shell commands"],
     [/\brm\s+-[a-z]*r[a-z]*f|\bgit\s+push\b.*--force|\bgit\s+reset\s+--hard|\bDROP\s+(TABLE|DATABASE)\b|\bTRUNCATE\s+TABLE\b/i, "a destructive command"],

package/dist/core/review-triage.js.map

@@ -1 +1 @@
-{"version":3,"file":"review-triage.js","sourceRoot":"","sources":["../../src/core/review-triage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAoB,IAAI,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,MAAM,IAAI,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACxD,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACzD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;aAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,qGAAqG,CAAC;AACxH,MAAM,SAAS,GAAG,wNAAwN,CAAC;AAC3O,MAAM,IAAI,GAAG,sDAAsD,CAAC;AACpE,MAAM,QAAQ,GAAG,oKAAoK,CAAC;AACtL,MAAM,EAAE,GAAG,wQAAwQ,CAAC;AACpR,MAAM,IAAI,GAAG,iJAAiJ,CAAC;AAC/J,MAAM,SAAS,GAAG,8EAA8E,CAAC;AACjG,MAAM,MAAM,GAAG,kNAAkN,CAAC;AAElO,mFAAmF;AACnF,MAAM,KAAK,GAA4B;IACrC,CAAC,uLAAuL,EAAE,8BAA8B,CAAC;IACzN,CAAC,8EAA8E,EAAE,yBAAyB,CAAC;IAC3G,CAAC,+BAA+B,EAAE,kBAAkB,CAAC;IACrD,CAAC,iGAAiG,EAAE,wBAAwB,CAAC;IAC7H,CAAC,yHAAyH,EAAE,uBAAuB,CAAC;IACpJ,CAAC,iDAAiD,EAAE,oBAAoB,CAAC;IACzE,CAAC,8GAA8G,EAAE,uBAAuB,CAAC;IACzI,CAAC,sEAAsE,EAAE,uBAAuB,CAAC;IACjG,CAAC,4FAA4F,EAAE,kBAAkB,CAAC;CACnH,CAAC;AAEF,MAAM,YAAY,GAAG,8HAA8H,CAAC;AACpJ,MAAM,SAAS,GAAG,wFAAwF,CAAC;AAE3G,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,QAAkD,EAAE;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,+FAA+F;IAC/F,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClL,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAc,EAAE;QACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,KAAK;YAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC3I,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;iBACzC,CAAC;gBACJ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjH,IAAI,IAAI,IAAI,CAAC;oBAAE,GAAG,CAAC,EAAE,EAAE,WAAW,IAAI,2BAA2B,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAC/E,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACzL,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtH,IAAI,MAAM,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,YAAY;YAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,kDAAkD,CAAC,CAAC;QAEhH,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAAC,CAAC;aACtH,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAgB,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACnH,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3G,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAClF,CAAC"}
+{"version":3,"file":"review-triage.js","sourceRoot":"","sources":["../../src/core/review-triage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAkCnD,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAoB,IAAI,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,MAAM,IAAI,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACxD,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACzD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;aAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,qGAAqG,CAAC;AACxH,MAAM,SAAS,GAAG,wNAAwN,CAAC;AAC3O,MAAM,IAAI,GAAG,sDAAsD,CAAC;AACpE,MAAM,QAAQ,GAAG,oKAAoK,CAAC;AACtL,MAAM,EAAE,GAAG,wQAAwQ,CAAC;AACpR,MAAM,IAAI,GAAG,iJAAiJ,CAAC;AAC/J,MAAM,SAAS,GAAG,8EAA8E,CAAC;AACjG,MAAM,MAAM,GAAG,kNAAkN,CAAC;AAElO,mFAAmF;AACnF,MAAM,KAAK,GAA4B;IACrC,6FAA6F;IAC7F,GAAG,eAAe;IAClB,CAAC,+BAA+B,EAAE,kBAAkB,CAAC;IACrD,CAAC,iGAAiG,EAAE,wBAAwB,CAAC;IAC7H,CAAC,yHAAyH,EAAE,uBAAuB,CAAC;IACpJ,CAAC,iDAAiD,EAAE,oBAAoB,CAAC;IACzE,CAAC,8GAA8G,EAAE,uBAAuB,CAAC;IACzI,CAAC,sEAAsE,EAAE,uBAAuB,CAAC;IACjG,CAAC,4FAA4F,EAAE,kBAAkB,CAAC;CACnH,CAAC;AAEF,MAAM,YAAY,GAAG,8HAA8H,CAAC;AACpJ,MAAM,SAAS,GAAG,wFAAwF,CAAC;AAE3G,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,QAAkD,EAAE;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,+FAA+F;IAC/F,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClL,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAc,EAAE;QACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,KAAK;YAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC3I,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;iBACzC,CAAC;gBACJ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjH,IAAI,IAAI,IAAI,CAAC;oBAAE,GAAG,CAAC,EAAE,EAAE,WAAW,IAAI,2BAA2B,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAC/E,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACzL,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtH,IAAI,MAAM,IAAI,KAAK,IAAI,EAAE,IAAI,CAAC,YAAY;YAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,kDAAkD,CAAC,CAAC;QAEhH,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAAC,CAAC;aACtH,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAgB,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACnH,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3G,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAClF,CAAC"}

package/dist/core/secret-scan.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Secrets in a diff, before it's applied or pushed (#340). The same patterns review triage
+ * scores a change by: a key or token pasted into code, a hard-coded credential, or a file
+ * that is itself a secret (.env, a private key). Pure: reads a unified diff, returns findings.
+ */
+/** Text that looks like a secret, and how to say it. */
+export declare const SECRET_PATTERNS: Array<[RegExp, string]>;
+export interface SecretFinding {
+    file: string;
+    /** Line in the new file, when it's an added line. */
+    line?: number;
+    what: string;
+}
+export declare function findSecrets(diff: string): SecretFinding[];

package/dist/core/secret-scan.js

@@ -0,0 +1,42 @@
+/**
+ * Secrets in a diff, before it's applied or pushed (#340). The same patterns review triage
+ * scores a change by: a key or token pasted into code, a hard-coded credential, or a file
+ * that is itself a secret (.env, a private key). Pure: reads a unified diff, returns findings.
+ */
+/** Text that looks like a secret, and how to say it. */
+export const SECRET_PATTERNS = [
+    [/-----BEGIN [A-Z ]*PRIVATE KEY-----|\bAKIA[0-9A-Z]{16}\b|\b(sk|rk|pk)_(live|test)_[0-9a-zA-Z]{16,}|\bsk-[A-Za-z0-9_-]{20,}|\bgh[pousr]_[A-Za-z0-9]{30,}|\bxox[baprs]-[A-Za-z0-9-]{10,}/, "what looks like a secret key"],
+    [/\b(password|passwd|secret|api[_-]?key|token)\b\s*[:=]\s*["'][^"'\s]{6,}["']/i, "a hard-coded credential"],
+];
+/** Files that are secrets by name, whatever they hold. */
+const SECRET_FILE = /(^|\/)(\.env(\.[\w-]+)?|id_(rsa|ed25519|ecdsa)|[^/]+\.(pem|p12|pfx|key))$/i;
+/** …except the ones meant to be committed. */
+const SAFE_FILE = /(^|\/)\.env\.(example|sample|template|defaults)$/i;
+export function findSecrets(diff) {
+    const out = [];
+    let file = "";
+    let line = 0;
+    for (const raw of diff.split("\n")) {
+        if (raw.startsWith("+++ ")) {
+            file = raw.slice(4).replace(/^b\//, "").trim();
+            if (file !== "/dev/null" && SECRET_FILE.test(file) && !SAFE_FILE.test(file))
+                out.push({ file, what: "a file that holds secrets by its name" });
+            continue;
+        }
+        const hunk = /^@@ -\d+(?:,\d+)? \+(\d+)/.exec(raw);
+        if (hunk) {
+            line = Number(hunk[1]);
+            continue;
+        }
+        if (raw.startsWith("+") && !raw.startsWith("+++")) {
+            for (const [re, what] of SECRET_PATTERNS)
+                if (re.test(raw.slice(1)))
+                    out.push({ file, line, what });
+            line++;
+        }
+        else if (!raw.startsWith("-"))
+            line++;
+    }
+    return out;
+}
+//# sourceMappingURL=secret-scan.js.map

package/dist/core/secret-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scan.js","sourceRoot":"","sources":["../../src/core/secret-scan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,CAAC,uLAAuL,EAAE,8BAA8B,CAAC;IACzN,CAAC,8EAA8E,EAAE,yBAAyB,CAAC;CAC5G,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,GAAG,4EAA4E,CAAC;AACjG,8CAA8C;AAC9C,MAAM,SAAS,GAAG,mDAAmD,CAAC;AAStE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,IAAI,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,CAAC;YAC/I,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,eAAe;gBAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpG,IAAI,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/shares.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Read-only thread links (#199): a teammate opens a link and reads a chat — prompts, replies,
+ * what ran, what changed — as the replay page (core/replay.ts), without pairing or a token of
+ * their own. Each link is a random token that expires and can be revoked; only its SHA-256 is
+ * kept on disk, so the shares file alone opens nothing. ~/.loom/shares.json.
+ */
+export interface Share {
+    /** Short id to list and revoke by (not the token). */
+    id: string;
+    /** sha256 of the token. */
+    hash: string;
+    projectId: string;
+    chat: string;
+    title: string;
+    createdAt: number;
+    expiresAt: number;
+}
+export declare const MAX_SHARE_HOURS: number;
+/** A new link for one chat, good for `hours` (1 h to 30 days). The token is returned once. */
+export declare function createShare(input: {
+    projectId: string;
+    chat: string;
+    title: string;
+    hours?: number;
+}, now?: number): {
+    share: Share;
+    token: string;
+};
+/** The share a token opens — null when there's none, or it expired or was revoked. */
+export declare function openShare(token: string, now?: number): Share | null;
+export declare function listShares(now?: number): Share[];
+/** Revoke by id; true when there was one. */
+export declare function revokeShare(id: string): boolean;

package/dist/core/shares.js

@@ -0,0 +1,54 @@
+/**
+ * Read-only thread links (#199): a teammate opens a link and reads a chat — prompts, replies,
+ * what ran, what changed — as the replay page (core/replay.ts), without pairing or a token of
+ * their own. Each link is a random token that expires and can be revoked; only its SHA-256 is
+ * kept on disk, so the shares file alone opens nothing. ~/.loom/shares.json.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { loomHome } from "./registry.js";
+export const MAX_SHARE_HOURS = 24 * 30;
+const file = () => path.join(loomHome(), "shares.json");
+const sha = (token) => createHash("sha256").update(token).digest("hex");
+function load() {
+    try {
+        return JSON.parse(fs.readFileSync(file(), "utf8")).filter((s) => s && s.hash);
+    }
+    catch {
+        return [];
+    }
+}
+function save(shares) {
+    fs.mkdirSync(path.dirname(file()), { recursive: true });
+    fs.writeFileSync(file(), JSON.stringify(shares, null, 2) + "\n", { mode: 0o600 });
+}
+/** A new link for one chat, good for `hours` (1 h to 30 days). The token is returned once. */
+export function createShare(input, now = Date.now()) {
+    const hours = Math.min(MAX_SHARE_HOURS, Math.max(1, Math.round(input.hours ?? 24)));
+    const token = randomBytes(24).toString("base64url");
+    const share = { id: randomBytes(4).toString("hex"), hash: sha(token), projectId: input.projectId, chat: input.chat,
+        title: input.title, createdAt: now, expiresAt: now + hours * 3_600_000 };
+    save([...load().filter((s) => s.expiresAt > now), share]);
+    return { share, token };
+}
+/** The share a token opens — null when there's none, or it expired or was revoked. */
+export function openShare(token, now = Date.now()) {
+    if (!/^[A-Za-z0-9_-]{20,64}$/.test(token))
+        return null;
+    const h = sha(token);
+    return load().find((s) => s.hash === h && s.expiresAt > now) ?? null;
+}
+export function listShares(now = Date.now()) {
+    return load().filter((s) => s.expiresAt > now).sort((a, b) => b.createdAt - a.createdAt);
+}
+/** Revoke by id; true when there was one. */
+export function revokeShare(id) {
+    const all = load();
+    const left = all.filter((s) => s.id !== id);
+    if (left.length === all.length)
+        return false;
+    save(left);
+    return true;
+}
+//# sourceMappingURL=shares.js.map

package/dist/core/shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.js","sourceRoot":"","sources":["../../src/core/shares.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAczC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,CAAC;AACvC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC;AACxD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhF,SAAS,IAAI;IACX,IAAI,CAAC;QAAC,OAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC1H,CAAC;AACD,SAAS,IAAI,CAAC,MAAe;IAC3B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,KAAyE,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,GAAU,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;QACvH,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;IAC3E,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACvD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACzC,OAAO,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC3F,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/turn-gate.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The daemon-wide turn gate (#339): how many agent turns may run at once across every
+ * project, and how much memory must be free before another starts. Six turns at once —
+ * each starting a dev server and headless Chrome — exhausted 16 GB and reset the Mac;
+ * past the cap, a turn waits for a slot instead of piling on.
+ *
+ * Limits live in ~/.loom/limits.json (`loom limits` sets them) and are re-read every few
+ * seconds, so a change applies without a restart. A turn never waits forever: some turns
+ * wait on others (a parent on its subtask), so after MAX_WAIT_MS it goes ahead and says so.
+ */
+export interface TurnLimits {
+    /** Turns at once across all projects; 0 = no cap. */
+    maxTurns: number;
+    /** Don't start a turn while less than this % of memory is available; 0 = no memory gate. */
+    minFreePct: number;
+}
+/** One turn per 4 GB (at least 2), and 15% of memory kept free. */
+export declare function defaultLimits(totalBytes?: number): TurnLimits;
+export declare const limitsFile: () => string;
+export declare function readLimits(): TurnLimits;
+export declare function writeLimits(patch: Partial<TurnLimits>): TurnLimits;
+/**
+ * % of memory available to start something new. On macOS os.freemem() counts only pages
+ * nobody has touched (a few % on a busy Mac), so read vm_stat: free + inactive + speculative
+ * + purgeable pages are what the kernel hands out without swapping.
+ */
+export declare function availableMemoryPct(): number;
+export interface GateDeps {
+    limits(): TurnLimits;
+    freePct(): number;
+    now(): number;
+    sleep(ms: number): Promise<void>;
+}
+/** A counting gate with a memory check; one per daemon process (turnGate below). */
+export declare class TurnGate {
+    private deps;
+    private running;
+    private seq;
+    private cache;
+    constructor(deps?: GateDeps);
+    private limits;
+    /** What's running now (labels), for status. */
+    active(): string[];
+    /** Why a turn can't start right now, or null when it can. */
+    private blocker;
+    /**
+     * Wait for a slot; resolves with release(). `onWait` hears why it's waiting (once, and
+     * again if the reason changes), so the thread can say "waiting for a free slot".
+     */
+    acquire(label: string, onWait?: (why: string) => void): Promise<() => void>;
+}
+/** The daemon's gate: every adapter turn passes through it (adapters/index.ts). */
+export declare const turnGate: TurnGate;

package/dist/core/turn-gate.js

@@ -0,0 +1,126 @@
+/**
+ * The daemon-wide turn gate (#339): how many agent turns may run at once across every
+ * project, and how much memory must be free before another starts. Six turns at once —
+ * each starting a dev server and headless Chrome — exhausted 16 GB and reset the Mac;
+ * past the cap, a turn waits for a slot instead of piling on.
+ *
+ * Limits live in ~/.loom/limits.json (`loom limits` sets them) and are re-read every few
+ * seconds, so a change applies without a restart. A turn never waits forever: some turns
+ * wait on others (a parent on its subtask), so after MAX_WAIT_MS it goes ahead and says so.
+ */
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { loomHome } from "./registry.js";
+/** One turn per 4 GB (at least 2), and 15% of memory kept free. */
+export function defaultLimits(totalBytes = os.totalmem()) {
+    return { maxTurns: Math.max(2, Math.floor(totalBytes / 4 / 1024 ** 3)), minFreePct: 15 };
+}
+export const limitsFile = () => path.join(loomHome(), "limits.json");
+export function readLimits() {
+    const base = defaultLimits();
+    try {
+        const raw = JSON.parse(fs.readFileSync(limitsFile(), "utf8"));
+        return {
+            maxTurns: Number.isFinite(raw.maxTurns) && raw.maxTurns >= 0 ? Math.floor(raw.maxTurns) : base.maxTurns,
+            minFreePct: Number.isFinite(raw.minFreePct) && raw.minFreePct >= 0 && raw.minFreePct < 100 ? raw.minFreePct : base.minFreePct,
+        };
+    }
+    catch {
+        return base;
+    }
+}
+export function writeLimits(patch) {
+    const next = { ...readLimits(), ...patch };
+    fs.mkdirSync(path.dirname(limitsFile()), { recursive: true });
+    fs.writeFileSync(limitsFile(), JSON.stringify(next, null, 2) + "\n");
+    return next;
+}
+/**
+ * % of memory available to start something new. On macOS os.freemem() counts only pages
+ * nobody has touched (a few % on a busy Mac), so read vm_stat: free + inactive + speculative
+ * + purgeable pages are what the kernel hands out without swapping.
+ */
+export function availableMemoryPct() {
+    if (process.platform === "darwin") {
+        try {
+            const out = execFileSync("vm_stat", { encoding: "utf8", timeout: 2000 });
+            const size = Number(/page size of (\d+) bytes/.exec(out)?.[1] ?? 16384);
+            const pages = (name) => Number(new RegExp(`Pages ${name}:\\s+(\\d+)`).exec(out)?.[1] ?? 0);
+            const free = (pages("free") + pages("inactive") + pages("speculative") + pages("purgeable")) * size;
+            return Math.min(100, (free / os.totalmem()) * 100);
+        }
+        catch { /* fall through */ }
+    }
+    return (os.freemem() / os.totalmem()) * 100;
+}
+const MAX_WAIT_MS = Number(process.env.LOOM_TURN_GATE_MAX_WAIT_MS) || 10 * 60_000;
+const POLL_MS = Number(process.env.LOOM_TURN_GATE_POLL_MS) || 1000;
+/** A counting gate with a memory check; one per daemon process (turnGate below). */
+export class TurnGate {
+    deps;
+    running = new Set();
+    seq = 0;
+    cache = null;
+    constructor(deps = {
+        limits: readLimits, freePct: availableMemoryPct, now: Date.now, sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
+    }) {
+        this.deps = deps;
+    }
+    limits() {
+        const now = this.deps.now();
+        if (!this.cache || now - this.cache.at > 5000)
+            this.cache = { at: now, limits: this.deps.limits() };
+        return this.cache.limits;
+    }
+    /** What's running now (labels), for status. */
+    active() {
+        return [...this.running].map((k) => k.slice(k.indexOf(":") + 1));
+    }
+    /** Why a turn can't start right now, or null when it can. */
+    blocker() {
+        const { maxTurns, minFreePct } = this.limits();
+        if (maxTurns > 0 && this.running.size >= maxTurns)
+            return `${this.running.size} turns are running (the cap is ${maxTurns})`;
+        if (minFreePct > 0) {
+            const free = this.deps.freePct();
+            // the first turn always runs: a gate that blocks everything on a full machine is a hang
+            if (free < minFreePct && this.running.size > 0)
+                return `only ${Math.round(free)}% of memory is free (Loom keeps ${minFreePct}%)`;
+        }
+        return null;
+    }
+    /**
+     * Wait for a slot; resolves with release(). `onWait` hears why it's waiting (once, and
+     * again if the reason changes), so the thread can say "waiting for a free slot".
+     */
+    async acquire(label, onWait) {
+        const started = this.deps.now();
+        let said = null;
+        for (;;) {
+            const why = this.blocker();
+            if (!why)
+                break;
+            if (this.deps.now() - started > MAX_WAIT_MS) {
+                onWait?.(`waited ${Math.round(MAX_WAIT_MS / 60_000)} min for a free slot — starting anyway`);
+                break;
+            }
+            if (why.replace(/\d+%/, "") !== said?.replace(/\d+%/, "")) {
+                said = why;
+                onWait?.(why);
+            }
+            await this.deps.sleep(POLL_MS);
+        }
+        const key = `${++this.seq}:${label}`;
+        this.running.add(key);
+        let released = false;
+        return () => { if (!released) {
+            released = true;
+            this.running.delete(key);
+        } };
+    }
+}
+/** The daemon's gate: every adapter turn passes through it (adapters/index.ts). */
+export const turnGate = new TurnGate();
+//# sourceMappingURL=turn-gate.js.map

package/dist/core/turn-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-gate.js","sourceRoot":"","sources":["../../src/core/turn-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AASzC,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,UAAU,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC;AAErE,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAwB,CAAC;QACrF,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ;YACzG,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAW,IAAI,CAAC,IAAI,GAAG,CAAC,UAAW,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;SACjI,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAA0B;IACpD,MAAM,IAAI,GAAG,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IAC3C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACnG,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC;YACpG,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC;AAC9C,CAAC;AAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC;AAClF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;AASnE,oFAAoF;AACpF,MAAM,OAAO,QAAQ;IAKC;IAJZ,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,GAAG,GAAG,CAAC,CAAC;IACR,KAAK,GAA8C,IAAI,CAAC;IAEhE,YAAoB,OAAiB;QACnC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;KACrH;QAFmB,SAAI,GAAJ,IAAI,CAEvB;IAAG,CAAC;IAEG,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI;YAAE,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACpG,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,+CAA+C;IAC/C,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,6DAA6D;IACrD,OAAO;QACb,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ;YAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,kCAAkC,QAAQ,GAAG,CAAC;QAC5H,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,wFAAwF;YACxF,IAAI,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,UAAU,IAAI,CAAC;QACnI,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAA8B;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG;gBAAE,MAAM;YAChB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC5C,MAAM,EAAE,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,wCAAwC,CAAC,CAAC;gBAC7F,MAAM;YACR,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;gBAAC,IAAI,GAAG,GAAG,CAAC;gBAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YACzF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC"}

package/dist/daemon/client.d.ts

@@ -730,6 +730,25 @@ export declare class DaemonClient {
         finding: import("../core/review.js").Finding;
         decision: string;
     }>;
+    shareChat(id: string, chat: string, hours?: number): Promise<{
+        id: string;
+        url: string;
+        expiresAt: number;
+        title: string;
+    }>;
+    shares(): Promise<{
+        shares: Array<{
+            id: string;
+            projectId: string;
+            chat: string;
+            title: string;
+            createdAt: number;
+            expiresAt: number;
+        }>;
+    }>;
+    revokeShare(shareId: string): Promise<{
+        revoked: boolean;
+    }>;
     setAgentPermissions(id: string, agentId: string, permissions: string): Promise<{
         agent: {
             permissions?: string;

package/dist/daemon/client.js

@@ -3,9 +3,11 @@
  * Also owns daemon lifecycle: autostart-on-demand, health, shutdown.
  */
 import { spawn } from "../core/process.js";
+import fs from "node:fs";
+import path from "node:path";
 import { fileURLToPath } from "node:url";
 import WebSocket from "ws";
-import { readDaemonConfig, } from "../core/registry.js";
+import { loomHome, readDaemonConfig, } from "../core/registry.js";
 import { BUILD_REV } from "./server.js";
 export class DaemonError extends Error {
     status;
@@ -492,6 +494,15 @@ export class DaemonClient {
     decideFinding(id, findingId, decision, note) {
         return this.request("POST", `/api/projects/${encodeURIComponent(id)}/findings/${encodeURIComponent(findingId)}`, { decision, ...(note ? { note } : {}) });
     }
+    shareChat(id, chat, hours) {
+        return this.request("POST", `/api/projects/${encodeURIComponent(id)}/chats/${encodeURIComponent(chat)}/share`, hours ? { hours } : {});
+    }
+    shares() {
+        return this.request("GET", "/api/shares");
+    }
+    revokeShare(shareId) {
+        return this.request("DELETE", `/api/shares/${encodeURIComponent(shareId)}`);
+    }
     setAgentPermissions(id, agentId, permissions) {
         return this.request("POST", `/api/projects/${encodeURIComponent(id)}/agents/${encodeURIComponent(agentId)}/permissions`, { permissions });
     }
@@ -629,6 +640,9 @@ export async function desktopOwnsDaemon(cfg = readDaemonConfig()) {
  * stale daemons are the classic "failed to fetch / missing route" cause.
  */
 export async function ensureDaemon() {
+    // another loom command is swapping the daemon for a newer build: wait for it rather than
+    // reach the one going away (or start a second) — a script's next step lands mid-restart
+    await waitForRestart();
     let cfg = readDaemonConfig();
     if (cfg) {
         const probe = await healthProbe(cfg);
@@ -649,13 +663,75 @@ export async function ensureDaemon() {
                     "using it as it is; restart when they finish: loom up --restart\n");
                 return new DaemonClient(cfg);
             }
-            await stopDaemon();
-            const gone = Date.now() + 5000;
-            while (Date.now() < gone && (await healthy(cfg))) {
-                await new Promise((r) => setTimeout(r, 200));
+            // hold the restart lock until the new daemon answers; someone else holding it is restarting already
+            if (!takeRestartLock()) {
+                await waitForRestart();
+                const now = readDaemonConfig();
+                if (now && (await healthy(now)))
+                    return new DaemonClient(now);
+            }
+            else {
+                try {
+                    await stopDaemon();
+                    const gone = Date.now() + 5000;
+                    while (Date.now() < gone && (await healthy(cfg))) {
+                        await new Promise((r) => setTimeout(r, 200));
+                    }
+                    return await startDaemon();
+                }
+                finally {
+                    releaseRestartLock();
+                }
             }
         }
     }
+    return startDaemon();
+}
+const RESTART_LOCK_MS = 30_000;
+const restartLockFile = () => path.join(loomHome(), "daemon.restarting");
+/** Mark "this CLI is restarting the daemon"; false when another one already is (a fresh lock). */
+function takeRestartLock() {
+    const file = restartLockFile();
+    try {
+        fs.writeFileSync(file, JSON.stringify({ pid: process.pid, at: Date.now() }), { flag: "wx" });
+        return true;
+    }
+    catch {
+        // a lock left by a CLI that died mid-restart is stale after RESTART_LOCK_MS: take it over
+        try {
+            if (Date.now() - fs.statSync(file).mtimeMs > RESTART_LOCK_MS) {
+                fs.writeFileSync(file, JSON.stringify({ pid: process.pid, at: Date.now() }));
+                return true;
+            }
+        }
+        catch { /* gone in between: someone finished */ }
+        return false;
+    }
+}
+function releaseRestartLock() {
+    try {
+        fs.rmSync(restartLockFile(), { force: true });
+    }
+    catch { /* already gone */ }
+}
+/** Wait while another loom command holds a fresh restart lock (at most RESTART_LOCK_MS). */
+async function waitForRestart() {
+    const file = restartLockFile();
+    const until = Date.now() + RESTART_LOCK_MS;
+    while (Date.now() < until) {
+        try {
+            if (Date.now() - fs.statSync(file).mtimeMs > RESTART_LOCK_MS)
+                return;
+        }
+        catch {
+            return;
+        }
+        await new Promise((r) => setTimeout(r, 250));
+    }
+}
+/** Start a detached daemon and wait for it to answer. */
+async function startDaemon() {
+    let cfg = null;
     const compiled = fileURLToPath(new URL("../cli/index.js", import.meta.url));
     const devSource = fileURLToPath(new URL("../cli/index.ts", import.meta.url));
     const { existsSync } = await import("node:fs");