@openrig/cli 0.6.11 → 0.6.13

package/daemon/dist/domain/model-divergence/current-model-reader.js

@@ -0,0 +1,246 @@
+import { realpathSync, statSync } from "node:fs";
+import { parseSqliteUtcMs } from "../sqlite-time.js";
+import { resolveIdentityVerifiedClaudeRecord, resolveIdentityVerifiedPiRecord, resolveLiveCodexThreadId, readCurrentPiOccupantModel, } from "./current-generation-record.js";
+import { readClaudeEffectiveModel, readCodexEffectiveModel, readClaudeModelObservation, readCodexModelObservation, readPiModelObservation, } from "./effective-model-readers.js";
+/** Public reasons contain no transcript paths, record contents, process commands or errors. */
+export function unknownModelObservation(reason, generation = null) {
+    return { status: "unknown", model: null, source: null, observedAt: null, generation, reason };
+}
+/** One current-record path for reporting and the existing divergence monitor. Reporting never
+ * needs a configured pin, alias or comparator. Both share the same coalescing process census. */
+export class CurrentModelReader {
+    deps;
+    processCensus;
+    facts = new Map();
+    constructor(deps) {
+        this.deps = deps;
+        this.processCensus = deps.census;
+    }
+    async select(seat, native, target = seat.sessionName, reporting = false) {
+        if (seat.runtime === "codex") {
+            const live = await resolveLiveCodexThreadId(target, native);
+            if (!live.ok)
+                return live;
+            const path = this.deps.codexRollout(live.id, seat.sessionName, reporting);
+            return path ? { ok: true, path } : { ok: false, reason: "no readable rollout for the live thread" };
+        }
+        if (seat.runtime === "claude-code") {
+            const sidecar = this.deps.context.readSidecar(seat.sessionName);
+            return resolveIdentityVerifiedClaudeRecord({ ...this.occupant(seat),
+                identity: this.deps.identities.getForNode(seat.nodeId), sidecar: sidecar.ok ? sidecar.data : null,
+            }, native, (path) => { try {
+                return statSync(path).isFile();
+            }
+            catch {
+                return false;
+            } });
+        }
+        if (seat.runtime === "pi")
+            return this.selectPi(seat, native);
+        return { ok: false, reason: "runtime has no supported native model reader" };
+    }
+    occupant(seat) {
+        const binding = this.deps.sessions.getBindingForNode(seat.nodeId);
+        return {
+            sessionName: seat.sessionName, generation: seat.generation,
+            occupantBootAt: this.deps.sessions.currentOccupantTenure(seat.nodeId)?.bootAt ?? null,
+            binding: binding ? { tmuxSession: binding.tmuxSession, tmuxPane: binding.tmuxPane } : null,
+        };
+    }
+    selectPi(seat, native) {
+        return resolveIdentityVerifiedPiRecord({ ...this.occupant(seat), runner: this.deps.piRunner(seat.sessionName) }, native, (path) => { try {
+            return realpathSync(path);
+        }
+        catch {
+            return null;
+        } });
+    }
+    /** The identity-verified current Pi runner of a seat and its own session file, selected the same
+     *  way the model observation selects it, and its newest own turn read before the final pane
+     *  lookup and occupant recheck. Never cached: each call re-reads the pane and processes. */
+    async currentPiRecord(nodeId, sessionName) {
+        const tenure = this.deps.sessions.currentOccupantTenure(nodeId);
+        const generation = tenure?.generationUuid ?? null;
+        const boot = tenure ? parseSqliteUtcMs(tenure.bootAt) : NaN;
+        if (!generation || !Number.isFinite(boot) || this.deps.sessions.currentOccupantGenerationForSession(sessionName) !== generation) {
+            return { ok: false, reason: `the occupant of ${sessionName} is not the seat's current occupant` };
+        }
+        const binding = this.deps.sessions.getBindingForNode(nodeId);
+        if (!binding?.tmuxPane || binding.tmuxSession !== sessionName)
+            return { ok: false, reason: "the seat's pane is unknown" };
+        const native = { ...this.deps.native, listProcesses: this.processCensus.cycleLister() };
+        let pid, selection;
+        try {
+            pid = await native.getPanePid(binding.tmuxPane);
+            if (!pid)
+                return { ok: false, reason: "the seat's pane could not be read" };
+            selection = await this.selectPi({ nodeId, sessionName, runtime: "pi", generation }, native);
+        }
+        catch {
+            return { ok: false, reason: "the pane's processes could not be read" };
+        }
+        if (!selection.ok)
+            return selection;
+        const observation = readPiModelObservation(selection.path, { notBeforeMs: selection.notBeforeMs });
+        let finalPid;
+        try {
+            finalPid = await this.deps.native.getPanePid(binding.tmuxPane);
+        }
+        catch {
+            return { ok: false, reason: "the seat's pane could not be read" };
+        }
+        // No await after this point.
+        if (!this.occupantUnchanged(nodeId, sessionName, generation, binding, pid, finalPid))
+            return { ok: false, reason: "the occupant changed during the read" };
+        if (finalPid === null)
+            return { ok: false, reason: "the seat's pane could not be read" };
+        return { ...selection, observation };
+    }
+    /** Sampled synchronously AFTER the final PID lookup; a null final PID is unavailable, not turnover. */
+    occupantUnchanged(nodeId, sessionName, generation, binding, pid, finalPid) {
+        const current = this.deps.sessions.currentOccupantTenure(nodeId);
+        const currentBinding = this.deps.sessions.getBindingForNode(nodeId);
+        return !(current?.generationUuid !== generation || this.deps.sessions.currentOccupantGenerationForSession(sessionName) !== generation || currentBinding?.tmuxPane !== binding.tmuxPane
+            || currentBinding?.tmuxSession !== binding.tmuxSession || (finalPid !== null && finalPid !== pid));
+    }
+    /** Preserve the monitor's established read/comparison behavior, including Pi pin readings. */
+    async readEffectiveModel(seat, cycle) {
+        const native = cycle ? { ...this.deps.native, listProcesses: cycle.listProcesses } : this.deps.native;
+        if (seat.runtime === "pi") {
+            const binding = this.deps.sessions.getBindingForNode(seat.nodeId);
+            return readCurrentPiOccupantModel({
+                sessionName: seat.sessionName, pinnedModel: seat.pinnedModel, generation: seat.generation,
+                occupantBootAt: this.deps.sessions.currentOccupantTenure(seat.nodeId)?.bootAt ?? null,
+                binding: binding ? { tmuxSession: binding.tmuxSession, tmuxPane: binding.tmuxPane } : null,
+                runner: this.deps.piRunner(seat.sessionName),
+            }, native, (path) => { try {
+                return realpathSync(path);
+            }
+            catch {
+                return null;
+            } });
+        }
+        const selected = await this.select(seat, native);
+        if (!selected.ok)
+            return selected;
+        const model = seat.runtime === "claude-code" ? readClaudeEffectiveModel(selected.path) : readCodexEffectiveModel(selected.path);
+        return model ? { ok: true, model } : { ok: false, reason: "no model signal in the bounded current occupant record" };
+    }
+    /** Re-select identity each time; only unchanged file facts are reused, never occupant verdicts. */
+    readFact(node, generation, pid, selected) {
+        const signature = () => {
+            const st = statSync(selected.path, { bigint: true });
+            if (!st.isFile())
+                throw new Error("not a regular record");
+            return [st.dev, st.ino, st.size, st.mtimeNs, st.ctimeNs].join(":");
+        };
+        const key = JSON.stringify([generation, node.runtime, node.canonicalSessionName, pid, selected.path, selected.notBeforeMs]);
+        const before = signature(), cached = this.facts.get(node.nodeId);
+        if (cached?.key === key && cached.signature === before)
+            return cached.fact;
+        const read = node.runtime === "claude-code" ? readClaudeModelObservation(selected.path)
+            : node.runtime === "codex" ? readCodexModelObservation(selected.path)
+                : readPiModelObservation(selected.path, { notBeforeMs: selected.notBeforeMs });
+        const fact = read && "model" in read ? read : null;
+        if (signature() === before) {
+            // One entry per node; cap removed-node residue without a timer or background poll.
+            this.facts.delete(node.nodeId);
+            if (this.facts.size >= 1024)
+                this.facts.delete(this.facts.keys().next().value);
+            this.facts.set(node.nodeId, { key, signature: before, fact });
+        }
+        return fact;
+    }
+    /** Two bulk pane queries per inventory, one shared lazy process census, no per-seat tmux execs.
+     * The final query starts AFTER all record selections/reads, including cache hits. */
+    async observeInventory(nodes) {
+        const listProcesses = this.processCensus.cycleLister();
+        if (!this.deps.readAllPaneProcesses)
+            return Promise.all(nodes.map(n => this.observe(n, listProcesses)));
+        let before;
+        const native = { ...this.deps.native, listProcesses, getPanePid: async (pane) => {
+                before ??= this.deps.readAllPaneProcesses();
+                return (await before)?.get(pane)?.pid ?? null;
+            } };
+        const prepared = await Promise.all(nodes.map(n => this.prepare(n, native)));
+        if (!prepared.some(p => "finish" in p))
+            return prepared;
+        let after = null;
+        try {
+            after = await this.deps.readAllPaneProcesses();
+        }
+        catch { /* UNKNOWN, never a fallback subprocess storm. */ }
+        return prepared.map(p => "finish" in p ? p.finish(after?.get(p.pane)?.pid ?? null, after === null ? "native-read-unavailable" : "pane-unavailable") : p);
+    }
+    async observe(node, listProcesses = this.processCensus.cycleLister()) {
+        const prepared = await this.prepare(node, { ...this.deps.native, listProcesses });
+        if (!("finish" in prepared))
+            return prepared;
+        let finalPid = null;
+        let unavailableReason = "pane-unavailable";
+        try {
+            finalPid = await this.deps.native.getPanePid(prepared.pane);
+        }
+        catch {
+            unavailableReason = "native-read-unavailable";
+        }
+        return prepared.finish(finalPid, unavailableReason);
+    }
+    async prepare(node, native) {
+        const tenure = this.deps.sessions.currentOccupantTenure(node.nodeId);
+        const generation = tenure?.generationUuid ?? null;
+        const unknown = (reason) => unknownModelObservation(reason, generation);
+        if (node.sessionStatus !== "running" || !node.canonicalSessionName)
+            return unknown("seat-not-running");
+        const sessionName = node.canonicalSessionName;
+        if (!["claude-code", "codex", "pi"].includes(node.runtime ?? ""))
+            return unknown("unsupported-runtime");
+        const boot = tenure ? parseSqliteUtcMs(tenure.bootAt) : NaN;
+        if (!generation || !Number.isFinite(boot) || this.deps.sessions.currentOccupantGenerationForSession(sessionName) !== generation)
+            return unknown("occupant-unknown");
+        const binding = this.deps.sessions.getBindingForNode(node.nodeId);
+        if (!binding?.tmuxPane || binding.tmuxSession !== sessionName)
+            return unknown("canonical-pane-unknown");
+        try {
+            const pid = await native.getPanePid(binding.tmuxPane);
+            if (!pid)
+                return unknown("pane-unavailable");
+            // Codex uses the exact registered pane rather than a same-name target. Claude/Pi additionally
+            // apply their existing identity/sidecar checks inside select().
+            const reportingNative = { ...native,
+                // Reporting never uses the monitor's explicitly legacy, identity-less thread lookup.
+                readThreadIdByPid: (pid, identity) => identity
+                    ? this.deps.native.readThreadIdByPid(pid, identity) : undefined,
+            };
+            const seat = { ...node, sessionName, generation };
+            const selected = await this.select(seat, reportingNative, binding.tmuxPane, true);
+            if (!selected.ok)
+                return unknown("record-identity-missing-or-ambiguous");
+            const fact = this.readFact(node, generation, pid, selected);
+            return { pane: binding.tmuxPane, finish: (finalPid, unavailableReason = "pane-unavailable") => {
+                    // No await after this point: tenure/name/binding are sampled AFTER the final PID lookup.
+                    if (!this.occupantUnchanged(node.nodeId, sessionName, generation, binding, pid, finalPid))
+                        return unknown("occupant-changed-during-read");
+                    if (finalPid === null)
+                        return unknown(unavailableReason);
+                    if (!fact || !("model" in fact))
+                        return unknown("model-record-unavailable");
+                    // Copy only a model identifier, never arbitrary record text or a diagnostic containing paths.
+                    if (!/^[a-zA-Z0-9][a-zA-Z0-9._:/@+\-]{0,199}$/.test(fact.model))
+                        return unknown("model-identifier-unreadable");
+                    if (!fact.observedAt)
+                        return unknown("record-time-unknown");
+                    const at = Date.parse(fact.observedAt);
+                    if (at <= boot)
+                        return unknown("record-predates-current-occupant");
+                    if (at > (this.deps.now ?? Date.now)())
+                        return unknown("record-time-in-future");
+                    return { status: "observed", model: fact.model, source: fact.source, observedAt: fact.observedAt, generation, reason: null };
+                } };
+        }
+        catch {
+            return unknown("native-read-unavailable");
+        }
+    }
+}
+//# sourceMappingURL=current-model-reader.js.map

package/daemon/dist/domain/model-divergence/current-model-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-model-reader.js","sourceRoot":"","sources":["../../../src/domain/model-divergence/current-model-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAIjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EACL,mCAAmC,EAAE,+BAA+B,EACpE,wBAAwB,EAAE,0BAA0B,GAErD,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EAAE,uBAAuB,EACjD,0BAA0B,EAAE,yBAAyB,EAAE,sBAAsB,GAE9E,MAAM,8BAA8B,CAAC;AAYtC,+FAA+F;AAC/F,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,aAA4B,IAAI;IACtF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChG,CAAC;AAqBD;iGACiG;AACjG,MAAM,OAAO,kBAAkB;IAGA;IAFpB,aAAa,CAAgB;IACrB,KAAK,GAAG,IAAI,GAAG,EAAmF,CAAC;IACpH,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;QAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAAC,CAAC;IAEtE,KAAK,CAAC,MAAM,CAAC,IAAU,EAAE,MAA6B,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,KAAK;QAC1G,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;QACtG,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChE,OAAO,mCAAmC,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACjE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;aAClG,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC;gBAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC/E,CAAC;IAEO,QAAQ,CAAC,IAAU;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YAC1D,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,IAAI;YACrF,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;SAC3F,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,IAAU,EAAE,MAA6B;QACxD,OAAO,+BAA+B,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EACrH,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED;;gGAE4F;IAC5F,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,WAAmB;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,WAAW,CAAC,KAAK,UAAU,EAAE,CAAC;YAChI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,WAAW,qCAAqC,EAAE,CAAC;QACpG,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAC1H,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QACxF,IAAI,GAAkB,EAAE,SAA4B,CAAC;QACrD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;YAC5E,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAAC,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QACnG,IAAI,QAAuB,CAAC;QAC5B,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QAAC,CAAC;QACpJ,6BAA6B;QAC7B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QAC3J,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACzF,OAAO,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,CAAC;IACvC,CAAC;IAED,uGAAuG;IAC/F,iBAAiB,CAAC,MAAc,EAAE,WAAmB,EAAE,UAAkB,EAAE,OAAgB,EAAE,GAAW,EAAE,QAAuB;QACvI,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,OAAO,EAAE,cAAc,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,WAAW,CAAC,KAAK,UAAU,IAAI,cAAc,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ;eACjL,cAAc,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,kBAAkB,CAAC,IAAgB,EAAE,KAAiE;QAC1G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACtG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClE,OAAO,0BAA0B,CAAC;gBAChC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;gBACzF,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,IAAI;gBACrF,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC1F,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;aAC7C,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC;gBAAC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChI,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACvH,CAAC;IAED,mGAAmG;IAC3F,QAAQ,CAAC,IAAmB,EAAE,UAAkB,EAAE,GAAW,EAAE,QAAkC;QACvG,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5H,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrF,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACrE,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAY,EAAE,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,IAAI,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;YAC3B,mFAAmF;YACnF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;yFACqF;IACrF,KAAK,CAAC,gBAAgB,CAAC,KAAsB;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,MAAyE,CAAC;QAC9E,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACtF,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,oBAAqB,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;YAChD,CAAC,EAAE,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC;YAAE,OAAO,QAA8B,CAAC;QAC9E,IAAI,KAAK,GAAwC,IAAI,CAAC;QACtD,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;QACnH,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3J,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAmB,EAAE,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE;QACjF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC7C,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,iBAAiB,GAAG,kBAAkB,CAAC;QAC3C,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,iBAAiB,GAAG,yBAAyB,CAAC;QAAC,CAAC;QAC7H,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAmB,EAAE,MAA6B;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACvG,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC9C,IAAI,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACxG,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,WAAW,CAAC,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACpK,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG;gBAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC7C,8FAA8F;YAC9F,gEAAgE;YAChE,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM;gBACjC,qFAAqF;gBACrF,iBAAiB,EAAE,CAAC,GAAW,EAAE,QAAiB,EAAE,EAAE,CAAC,QAAQ;oBAC7D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAClE,CAAC;YACF,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC,sCAAsC,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,kBAAkB,EAAE,EAAE;oBAC5F,yFAAyF;oBACzF,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC;wBAAE,OAAO,OAAO,CAAC,8BAA8B,CAAC,CAAC;oBAC1I,IAAI,QAAQ,KAAK,IAAI;wBAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;oBACzD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;wBAAE,OAAO,OAAO,CAAC,0BAA0B,CAAC,CAAC;oBAC5E,8FAA8F;oBAC9F,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;wBAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;oBAC/G,IAAI,CAAC,IAAI,CAAC,UAAU;wBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;oBAC5D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACvC,IAAI,EAAE,IAAI,IAAI;wBAAE,OAAO,OAAO,CAAC,kCAAkC,CAAC,CAAC;oBACnE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,OAAO,OAAO,CAAC,uBAAuB,CAAC,CAAC;oBAChF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC/H,CAAC,EAAE,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC;CACF"}

package/daemon/dist/domain/model-divergence/effective-model-readers.d.ts

@@ -4,11 +4,71 @@ export declare function readTailLines(path: string, tailBytes?: number): string[
 /** The model from the seat's newest determinate, non-synthetic model-bearing assistant record, or
  *  null when no such record is in the tail window (a just-launched or synthetic-only seat has none
  *  — the detector treats null as PENDING, not as a match). */
+export interface NativeModelObservation {
+    model: string;
+    source: "claude-assistant-response" | "codex-turn-context" | "codex-world-state" | "pi-assistant-response";
+    /** Native record time, not file mtime or the time this reader ran. */
+    observedAt: string | null;
+}
 export declare function readClaudeEffectiveModel(transcriptPath: string): string | null;
+export declare function readClaudeModelObservation(transcriptPath: string): NativeModelObservation | null;
 /** The codex runtime's own current model per its NEWEST turn_context (primary; both rollout
  *  formats) or world_state collaboration_mode (belt). Scans backward from EOF in tail-sized
  *  windows up to MAX_SCAN_BYTES: the signal is sparse relative to bulk event lines (r1's live
  *  census put records 0.4-0.8MB from EOF on the big rollouts), so one tail window is not always
  *  enough, but 8MB bounds the read far under the loop-stall class. */
 export declare function readCodexEffectiveModel(rolloutPath: string, maxScanBytes?: number): string | null;
+export declare function readCodexModelObservation(rolloutPath: string, maxScanBytes?: number): NativeModelObservation | null;
+/** The occupant whose Pi session-file records may answer: records stamped at or before
+ *  `notBeforeMs` belong to an earlier runner or occupant of the same file (a resume keeps it). */
+export interface PiOccupantScope {
+    notBeforeMs: number;
+}
+/** The model ids a Pi pin can resolve to, in Pi's own order (`parseModelPattern`): the whole pin
+ *  first, then with each trailing `:<thinking level>` removed in turn. Pi records the model without
+ *  the level, so `openrouter/x-ai/grok-4:high` matches a `grok-4` record, and a model id that
+ *  really ends in `:high` still matches as itself. Any other `:` suffix, such as OpenRouter's
+ *  `:free`, stays part of the id, and the provider is never touched. */
+export declare function piPinReadings(pinned: string): string[];
+/** The readings a Pi seat's record may match. Pi tries the exact pin first and stops there, so
+ *  when the seat's own `models.json` defines a model whose `provider/id` is the pin, or the pin
+ *  with only some levels removed, that reading is the only one: `lab/y:high` stays `lab/y:high`
+ *  when `lab` defines `y:high`. Otherwise every reading, since Pi's built-in models and extension
+ *  models are not read here. Only a pin with a level suffix reads the file. A missing file defines
+ *  no model; one that can't be read or doesn't have Pi's shape is unknown (the seat stays pending).
+ *  Ids compare case-insensitively, as in Pi's exact match. */
+export declare function piSeatPinReadings(pinned: string, agentDir: string): {
+    ok: true;
+    readings: string[];
+} | {
+    ok: false;
+    reason: string;
+};
+/** The Pi runtime's effective model, `provider/model`, from the NEWEST determinate assistant
+ *  record in the session file — provided that record is this occupant's own. Pi's `model` is the
+ *  runtime's own record of what answered; `responseModel` (a routed/dated API variant) is not
+ *  compared, since modelsMatch canonicalizes only the pin.
+ *
+ *  The newest determinate record DECIDES: when it is inherited from a fork parent, of unknown
+ *  origin, stamped no later than `scope.notBeforeMs`, or carries no provider, the answer is a
+ *  named no-answer (pending) and the scan does NOT reach for an older record — an older one is
+ *  at least as stale. Error and aborted turns are skipped (they name the requested model, not one
+ *  that answered). The session header decides origin; an unreadable header is a no-answer. */
+export declare function readPiEffectiveModel(sessionFile: string, scope: PiOccupantScope, maxScanBytes?: number): {
+    ok: true;
+    model: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Pi's observation also carries the `thinkingLevel` that same record names (Pi 0.99.0 and later
+ *  stamp it on every assistant message; absent on older Pi). */
+export type PiModelObservation = ({
+    ok: true;
+    thinkingLevel?: string;
+} & NativeModelObservation) | {
+    ok: false;
+    reason: string;
+};
+export declare function readPiModelObservation(sessionFile: string, scope: PiOccupantScope, maxScanBytes?: number): PiModelObservation;
 //# sourceMappingURL=effective-model-readers.d.ts.map

package/daemon/dist/domain/model-divergence/effective-model-readers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"effective-model-readers.d.ts","sourceRoot":"","sources":["../../../src/domain/model-divergence/effective-model-readers.ts"],"names":[],"mappings":"AAuBA;oEACoE;AACpE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAa,GAAG,MAAM,EAAE,CAoB5E;AAED;;8DAE8D;AAC9D,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe9E;AAyCD;;;;sEAIsE;AACtE,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,SAAiB,GAAG,MAAM,GAAG,IAAI,CA8CzG"}
+{"version":3,"file":"effective-model-readers.d.ts","sourceRoot":"","sources":["../../../src/domain/model-divergence/effective-model-readers.ts"],"names":[],"mappings":"AA6BA;oEACoE;AACpE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAa,GAAG,MAAM,EAAE,CAoB5E;AAED;;8DAE8D;AAC9D,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,2BAA2B,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;IAC3G,sEAAsE;IACtE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAMD,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE9E;AAED,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAehG;AA0CD;;;;sEAIsE;AACtE,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,SAAiB,GAAG,MAAM,GAAG,IAAI,CAEzG;AAED,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,SAAiB,GAAG,sBAAsB,GAAG,IAAI,CAE3H;AAqDD;kGACkG;AAClG,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;;;wEAIwE;AACxE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAQtD;AAED;;;;;;8DAM8D;AAC9D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA6BpI;AAED;;;;;;;;;8FAS8F;AAC9F,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,eAAe,EACtB,YAAY,SAAiB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAG7D;AAED;gEACgE;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,sBAAsB,CAAC,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjI,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,eAAe,EACtB,YAAY,SAAiB,GAC5B,kBAAkB,CAOpB"}

package/daemon/dist/domain/model-divergence/effective-model-readers.js

@@ -7,6 +7,8 @@
 //     provider transcript — the API response names the model that produced it. Absent until the
 //     seat's first such record.
 //   - codex: the latest `world_state` event's `collaboration_mode.model` in the rollout.
+//   - pi: the newest determinate assistant record's `provider/model` in the session file, when that
+//     record is the current occupant's own (not inherited from a fork parent, not a prior runner's).
 //
 // BOUNDED READS by contract: provider records on live seats reach hundreds of MB (a whole-file
 // readFileSync throws ERR_STRING_TOO_LONG past ~0.5GB and stalls the loop long before that — the
@@ -15,7 +17,11 @@
 // record sat 0.80MB from EOF — outside one tail window), so the codex reader scans BACKWARD in
 // tail-sized chunks up to MAX_SCAN_BYTES. A signal older than the scan cap reads as null (honest
 // UNKNOWN — the detector reports it as observable pending), never a guess.
-import { openSync, readSync, closeSync, fstatSync } from "node:fs";
+import { openSync, readSync, closeSync, fstatSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { parsePiModelsJson } from "../../adapters/pi-readiness.js";
+import { KNOWN_EFFORT_LEVELS } from "../seat-effort.js";
+import { parsePiSessionHeader, piAssistantFields, piEntryOrigin } from "../pi-usage-facts.js";
 const TAIL_BYTES = 512 * 1024;
 const MAX_SCAN_BYTES = 8 * 1024 * 1024;
 /** Read at most the last TAIL_BYTES of a file as utf-8, split into whole lines (the first,
@@ -45,10 +51,13 @@ export function readTailLines(path, tailBytes = TAIL_BYTES) {
         closeSync(fd);
     }
 }
-/** The model from the seat's newest determinate, non-synthetic model-bearing assistant record, or
- *  null when no such record is in the tail window (a just-launched or synthetic-only seat has none
- *  — the detector treats null as PENDING, not as a match). */
+function recordTime(value) {
+    return typeof value === "string" && Number.isFinite(Date.parse(value)) ? new Date(value).toISOString() : null;
+}
 export function readClaudeEffectiveModel(transcriptPath) {
+    return readClaudeModelObservation(transcriptPath)?.model ?? null;
+}
+export function readClaudeModelObservation(transcriptPath) {
     const lines = readTailLines(transcriptPath);
     for (let i = lines.length - 1; i >= 0; i--) {
         const line = lines[i];
@@ -57,7 +66,7 @@ export function readClaudeEffectiveModel(transcriptPath) {
         try {
             const obj = JSON.parse(line);
             if (obj.message?.role === "assistant" && typeof obj.message.model === "string" && obj.message.model.length > 0 && obj.message.model !== "<synthetic>") {
-                return obj.message.model;
+                return { model: obj.message.model, source: "claude-assistant-response", observedAt: recordTime(obj.timestamp) };
             }
         }
         catch {
@@ -81,7 +90,7 @@ function newestCodexModel(lines) {
                 if (obj.type === "turn_context") {
                     const model = obj.payload?.model;
                     if (typeof model === "string" && model.length > 0)
-                        return model;
+                        return { model, source: "codex-turn-context", observedAt: recordTime(obj.timestamp) };
                 }
             }
             catch {
@@ -95,7 +104,7 @@ function newestCodexModel(lines) {
                 if (obj.type === "world_state") {
                     const model = obj.payload?.state?.collaboration_mode?.model;
                     if (typeof model === "string" && model.length > 0)
-                        return model;
+                        return { model, source: "codex-world-state", observedAt: recordTime(obj.timestamp) };
                 }
             }
             catch {
@@ -111,9 +120,18 @@ function newestCodexModel(lines) {
  *  census put records 0.4-0.8MB from EOF on the big rollouts), so one tail window is not always
  *  enough, but 8MB bounds the read far under the loop-stall class. */
 export function readCodexEffectiveModel(rolloutPath, maxScanBytes = MAX_SCAN_BYTES) {
+    return readCodexModelObservation(rolloutPath, maxScanBytes)?.model ?? null;
+}
+export function readCodexModelObservation(rolloutPath, maxScanBytes = MAX_SCAN_BYTES) {
+    return scanBackward(rolloutPath, newestCodexModel, maxScanBytes);
+}
+/** The ONE bounded backward scan: tail-sized windows from EOF down to `maxScanBytes`, each handed
+ *  to `pick` as whole lines (oldest first). The first non-null pick ends the scan; null = keep
+ *  scanning older windows. Missing/unreadable file, or nothing picked within the cap → null. */
+function scanBackward(path, pick, maxScanBytes) {
     let fd;
     try {
-        fd = openSync(rolloutPath, "r");
+        fd = openSync(path, "r");
     }
     catch {
         return null;
@@ -138,9 +156,9 @@ export function readCodexEffectiveModel(rolloutPath, maxScanBytes = MAX_SCAN_BYT
                 droppedBytes = Buffer.byteLength(lines[0], "utf-8");
                 lines.shift();
             }
-            const model = newestCodexModel(lines);
-            if (model !== null)
-                return model;
+            const picked = pick(lines);
+            if (picked !== null)
+                return picked;
             if (start === scanFloor)
                 break;
             // Fragment-sized step-back — UNLESS the fragment fills the whole window (a single line wider
@@ -162,4 +180,157 @@ export function readCodexEffectiveModel(rolloutPath, maxScanBytes = MAX_SCAN_BYT
         closeSync(fd);
     }
 }
+/** Pi's thinking levels for `--thinking` and the `--model` suffix (`pi --help`; the same at the
+ *  tested 0.87.1 baseline and 1.3.0). */
+const PI_THINKING_LEVELS = new Set(KNOWN_EFFORT_LEVELS.pi);
+/** The model ids a Pi pin can resolve to, in Pi's own order (`parseModelPattern`): the whole pin
+ *  first, then with each trailing `:<thinking level>` removed in turn. Pi records the model without
+ *  the level, so `openrouter/x-ai/grok-4:high` matches a `grok-4` record, and a model id that
+ *  really ends in `:high` still matches as itself. Any other `:` suffix, such as OpenRouter's
+ *  `:free`, stays part of the id, and the provider is never touched. */
+export function piPinReadings(pinned) {
+    const readings = [pinned.trim()];
+    for (;;) {
+        const last = readings[readings.length - 1];
+        const colon = last.lastIndexOf(":");
+        if (colon === -1 || !PI_THINKING_LEVELS.has(last.slice(colon + 1)))
+            return readings;
+        readings.push(last.slice(0, colon));
+    }
+}
+/** The readings a Pi seat's record may match. Pi tries the exact pin first and stops there, so
+ *  when the seat's own `models.json` defines a model whose `provider/id` is the pin, or the pin
+ *  with only some levels removed, that reading is the only one: `lab/y:high` stays `lab/y:high`
+ *  when `lab` defines `y:high`. Otherwise every reading, since Pi's built-in models and extension
+ *  models are not read here. Only a pin with a level suffix reads the file. A missing file defines
+ *  no model; one that can't be read or doesn't have Pi's shape is unknown (the seat stays pending).
+ *  Ids compare case-insensitively, as in Pi's exact match. */
+export function piSeatPinReadings(pinned, agentDir) {
+    const readings = piPinReadings(pinned);
+    if (readings.length === 1)
+        return { ok: true, readings };
+    const file = join(agentDir, "models.json");
+    const unknown = { ok: false, reason: `the seat's models.json (${file}) could not be read as Pi's model config` };
+    let config;
+    try {
+        if (statSync(file).size > 1024 * 1024)
+            return unknown;
+        config = parsePiModelsJson(readFileSync(file, "utf8"));
+    }
+    catch (error) {
+        // Never report the error itself: models.json can hold keys.
+        return error?.code === "ENOENT" ? { ok: true, readings } : unknown;
+    }
+    const object = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+    if (!object(config))
+        return unknown;
+    if (config.providers === undefined)
+        return { ok: true, readings };
+    if (!object(config.providers))
+        return unknown;
+    const defined = new Set();
+    for (const [provider, entry] of Object.entries(config.providers)) {
+        if (!object(entry))
+            return unknown;
+        if (entry.models === undefined)
+            continue;
+        if (!Array.isArray(entry.models))
+            return unknown;
+        for (const model of entry.models) {
+            if (!object(model) || typeof model.id !== "string")
+                return unknown;
+            defined.add(`${provider}/${model.id}`.toLowerCase());
+        }
+    }
+    const literal = readings.slice(0, -1).find((reading) => defined.has(reading.toLowerCase()));
+    return { ok: true, readings: literal ? [literal] : readings };
+}
+/** The Pi runtime's effective model, `provider/model`, from the NEWEST determinate assistant
+ *  record in the session file — provided that record is this occupant's own. Pi's `model` is the
+ *  runtime's own record of what answered; `responseModel` (a routed/dated API variant) is not
+ *  compared, since modelsMatch canonicalizes only the pin.
+ *
+ *  The newest determinate record DECIDES: when it is inherited from a fork parent, of unknown
+ *  origin, stamped no later than `scope.notBeforeMs`, or carries no provider, the answer is a
+ *  named no-answer (pending) and the scan does NOT reach for an older record — an older one is
+ *  at least as stale. Error and aborted turns are skipped (they name the requested model, not one
+ *  that answered). The session header decides origin; an unreadable header is a no-answer. */
+export function readPiEffectiveModel(sessionFile, scope, maxScanBytes = MAX_SCAN_BYTES) {
+    const result = readPiModelObservation(sessionFile, scope, maxScanBytes);
+    return result.ok ? { ok: true, model: result.model } : result;
+}
+export function readPiModelObservation(sessionFile, scope, maxScanBytes = MAX_SCAN_BYTES) {
+    const header = readFirstLine(sessionFile);
+    if (header === null)
+        return { ok: false, reason: `Pi session file ${sessionFile} is unreadable` };
+    const boundary = parsePiSessionHeader(header);
+    if (!boundary)
+        return { ok: false, reason: `Pi session file ${sessionFile} has no readable session header` };
+    const picked = scanBackward(sessionFile, (lines) => newestPiModel(lines, boundary, scope), maxScanBytes);
+    return picked ?? { ok: false, reason: `no determinate assistant record from the current occupant in the bounded read of ${sessionFile}` };
+}
+function newestPiModel(lines, boundary, scope) {
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const line = lines[i];
+        if (!line.includes('"assistant"'))
+            continue;
+        let entry;
+        try {
+            const parsed = JSON.parse(line);
+            if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+                continue;
+            entry = parsed;
+        }
+        catch {
+            continue; // corrupt line — keep scanning
+        }
+        const fields = piAssistantFields(entry);
+        if (!fields)
+            continue;
+        if (fields.stopReason === "error" || fields.stopReason === "aborted")
+            continue;
+        const id = typeof entry["id"] === "string" ? entry["id"] : "";
+        const timestamp = typeof entry["timestamp"] === "string" ? entry["timestamp"] : "";
+        const at = Date.parse(timestamp);
+        if (!id || !Number.isFinite(at))
+            return { ok: false, reason: `newest Pi assistant record carries no entry id or timestamp` };
+        const origin = piEntryOrigin(id, timestamp, boundary);
+        if (origin !== "own")
+            return { ok: false, reason: `newest Pi assistant record ${id} is ${origin === "inherited" ? "inherited from the fork parent" : "of undecidable fork origin"}` };
+        if (at <= scope.notBeforeMs)
+            return { ok: false, reason: `newest Pi assistant record ${id} predates the current runner` };
+        if (!fields.provider || !fields.model)
+            return { ok: false, reason: `newest Pi assistant record ${id} names no provider and model` };
+        const message = entry["message"];
+        const thinkingLevel = typeof message["thinkingLevel"] === "string" && message["thinkingLevel"].length > 0 ? message["thinkingLevel"] : undefined;
+        return {
+            ok: true, model: `${fields.provider}/${fields.model}`, source: "pi-assistant-response", observedAt: recordTime(timestamp),
+            ...(thinkingLevel ? { thinkingLevel } : {}),
+        };
+    }
+    return null;
+}
+/** The first line of a file, read bounded (a Pi session header is small). null when unreadable. */
+function readFirstLine(path, maxBytes = 64 * 1024) {
+    let fd;
+    try {
+        fd = openSync(path, "r");
+    }
+    catch {
+        return null;
+    }
+    try {
+        const buf = Buffer.alloc(maxBytes);
+        const read = readSync(fd, buf, 0, maxBytes, 0);
+        const text = buf.subarray(0, read).toString("utf-8");
+        const newline = text.indexOf("\n");
+        return newline >= 0 ? text.slice(0, newline) : text;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
 //# sourceMappingURL=effective-model-readers.js.map