@qodeca/xezar 0.11.2 → 0.13.1

package/README.md

@@ -97,7 +97,7 @@ and an orchestrator keeps a whole queue of them moving.
   **orchestrates** them: it runs up to your parallel limit and holds the rest in
   an ordered queue. Point it at a GitHub issue and it runs straight on that, so
   working the tracker down stops being a manual chore. Turn on the opt-in
-  **Inbox** (`XEZ_FOLLOWUPS=1`) and an agent's leftover follow-ups become the
+  **Inbox** (Settings → Resources, or `XEZ_FOLLOWUPS=1`) and an agent's leftover follow-ups become the
   next tasks too — one click each.
 - 🤖 **"Autonomous" means you still have to sit there.** Flip the **Autonomous**
   flag and a run never parks to ask — it keeps going until the task is done. Pair
@@ -113,7 +113,7 @@ and an orchestrator keeps a whole queue of them moving.
   Take it over interactively in one click (`claude --resume <id>`), or continue it
   in-process from the cockpit.
 - 🔀 **Locked into one agent vendor.** Most tools wed you to a single CLI. xezar
-  drives **Claude Code, Codex and OpenCode (experimental)** through one runner seam — set a
+  drives **Claude Code, Codex, OpenCode and pi (the last two experimental)** through one runner seam — set a
   default, pick a backend per task, or mix them inside one workflow (implement
   with one agent, review with another) — and through **OpenCode** you can point
   a run at **open-source or local models**, not just the big vendors. See
@@ -147,8 +147,9 @@ and an orchestrator keeps a whole queue of them moving.
 
 **Prerequisites:** Node 20+, at least one logged-in agent CLI — the
 [`claude` CLI](https://github.com/anthropics/claude-code) (Pro/Max subscription),
-the [`codex` CLI](https://github.com/openai/codex), or
-[OpenCode](https://opencode.ai) — and, optionally, `git` and the `gh` CLI.
+the [`codex` CLI](https://github.com/openai/codex),
+[OpenCode](https://opencode.ai), or [pi](https://github.com/badlogic/pi-mono) —
+and, optionally, `git` and the `gh` CLI.
 
 Install it once, then run it in any repo:
 
@@ -192,8 +193,8 @@ To upgrade later: `npm install -g @qodeca/xezar@latest`.
 
 You describe a task. xezar runs it as a **workflow** — an ordered list of agent
 steps and shell checks — shelling out to your locally installed agent CLI
-(Claude Code by default; Codex and OpenCode are drop-in alternatives, per task
-or per step). In a git repo each task gets its own worktree by default — switch
+(Claude Code by default; Codex, OpenCode and pi are drop-in alternatives, per
+task or per step). In a git repo each task gets its own worktree by default — switch
 the composer's **Worktree** toggle off to run in the repo working tree (under
 xezar's repository-root lease), and a non-git directory runs in place. A git
 task that asks for a worktree it cannot create stops as `failed`; it never falls
@@ -259,7 +260,7 @@ Three words, no jargon — **task**, **skill**, **chain**:
   AI draft a chain for your task that you review, trim and start. The built-in
   `quick-task` (one agent step) works with zero setup.
 
-Five moves that make the cockpit worth the browser tab:
+Six moves that make the cockpit worth the browser tab:
 
 - 🗃️ **Queue + orchestration.** Start as many tasks as you like: xezar runs up to
   `maxParallel` at once across every project (default **2**; a non-git directory
@@ -269,18 +270,22 @@ Five moves that make the cockpit worth the browser tab:
   everything still `queued` is re-enqueued in order. It's the orchestration layer
   that turns "one agent at a time" into a backlog that drains itself.
 - 🧠 **Memory-aware runs.** Each run's whole process tree is sampled (~2 s) for CPU
-  and RSS, and its **peak memory** is recorded and shown in the task table. Set an
-  optional per-task **memory ceiling** (`memoryLimitMb`) and a run that crosses it
-  is *paused* — freeing its tree so the queue keeps advancing — and resumes on
-  demand. Event logs are append-only NDJSON and streamed rather than re-serialized,
+  and RSS, and its **peak memory** is recorded and shown in the task table. The
+  per-task **memory ceiling** (`memoryLimitMb`) is **on out of the box**: with no
+  setting at all xezar derives a host-sized ceiling from your machine's RAM, and a
+  run that crosses it is *paused* — freeing its tree so the queue keeps advancing —
+  and resumes on demand. Adjust it in **Settings → Resources**; an explicit
+  `"memoryLimitMb": null` still means *no limit*, and a repo that sets its own value
+  overrides the workspace ceiling for its own runs. Event logs are append-only NDJSON and streamed rather than re-serialized,
   and live UI deltas are coalesced so they never hit disk.
 - 🪞 **Parallel variants (×2 / ×3).** Run the same task as competing agents in
   separate worktrees, then compare their diffs side by side and **pick** one —
   the losers are archived and their worktrees cleaned up.
 - 🧹 **Bounded worktree disk.** By default each git task runs in its own full checkout, so a busy
   cockpit would otherwise grow without limit. xezar keeps only the last
-  `worktreeRetention` **finished** worktrees on disk (default **10**; `0` =
-  unlimited) and reclaims the rest — directory only, the `xez/<id8>` branch is
+  `worktreeRetention` **finished** worktrees on disk (default **10**, itself a
+  workspace setting — `resources.worktreeRetentionDefault`, which every project
+  without its own value inherits; `0` = unlimited) and reclaims the rest — directory only, the `xez/<id8>` branch is
   always kept, so the work stays recoverable. Settings → Resources shows every
   worktree's disk use with per-row delete and a **Reclaim now** button.
 - 🛡️ **Review gate (optional, off by default).** Turn it on in Settings → Agents
@@ -300,18 +305,19 @@ Five moves that make the cockpit worth the browser tab:
 
 ## Cockpit tour
 
-Eight views, one browser window, all live over Server-Sent Events (seven until you opt into the Inbox):
+Nine views, one browser window, all live over Server-Sent Events (seven by default — the Inbox and Automations are each opt-in):
 
 | View | What's in it |
 |---|---|
-| **Tasks** | Every task with its status, live event stream (agent text · tool calls · tool results · pasted/generated screenshots and file attachments), tokens and cost. Continue, cancel, open in terminal (`claude --resume`), review the diff, or push a draft PR. |
+| **Tasks** | Every task with its status, the tool and model it ran on, live event stream (agent text · tool calls · tool results · pasted/generated screenshots and file attachments), tokens and cost. Continue, cancel, open in terminal (`claude --resume`), review the diff, or push a draft PR. |
 | **All tasks** | Every *registered project's* tasks in one table, filtered and grouped by tag, project, status or workflow — see [Grouping connected repositories](#grouping-connected-repositories-tags-and-the-all-tasks-page). Appears once a second project is registered. |
-| **Inbox** | **Opt-in** (`XEZ_FOLLOWUPS=1`; hidden by default). Follow-ups an agent left behind (`todos.json`) — one click turns a suggestion into the next task, pre-wired to its suggested skill. Off, agents are never asked to leave follow-ups; each task's own **Notes** handoff journal is unaffected. |
+| **Inbox** | **Opt-in**, hidden by default. Turn it on in **Settings → Resources** (the stored choice wins and needs no restart) or start with `XEZ_FOLLOWUPS=1`. Follow-ups an agent left behind (`todos.json`) — one click turns a suggestion into the next task, pre-wired to its suggested skill. Off, agents are never asked to leave follow-ups; each task's own **Notes** handoff journal is unaffected. |
 | **Git** | Branch, working-tree status, diff vs HEAD, recent commits (click one for its inline patch + GitHub link), and the configurable base branch that worktrees fork from and PRs target. |
 | **GitHub** | Open issues and PRs of the repo's origin, read through your logged-in `gh`. Hand an issue straight to the agent — pick a workflow and skills, one click runs it. |
+| **Automations** | **Opt-in** (`XEZ_AUTOMATIONS=1`; hidden by default). Scheduled GitHub watches: each automation polls on its own interval and launches a task when its bounded filter matches. Test a filter before enabling it, and read the per-check log. |
 | **Skills** | Local skills plus the team skills repo, with a rendered body + prompt preview. Refresh pulls the latest from the remote. |
 | **Workflows** | Build a chain by drag-ordering skills, save it as portable YAML, import/export, or delete. Built-ins always come back. |
-| **Settings** | Appearance (dark/light theme, accent, density), agent backends, notifications, and the skills catalog. |
+| **Settings** | Appearance (dark/light theme, accent, density), agent backends and their own config files, agent accounts, notifications, machine resources, projects, and skill-update checks. |
 
 The cockpit is a React app served pre-built from the package — running `xezar`
 needs no dev server on your machine — with a dark/light
@@ -325,7 +331,7 @@ a GitHub page.
 One `xezar serve` hosts **every repo you work in**, not just the one you started
 it in. Each repo xezar boots in registers itself in a per-user registry at
 `~/.xezar/config.json` — the workspace file that also holds the global knobs
-(the parallel cap, the memory ceiling, the browse root, and the checkout root). Nothing is added to
+(the parallel cap, the memory ceiling, the idle timeout, the default worktree retention, the Inbox switch, the agent env passthrough list, the browse root, and the checkout root). Nothing is added to
 the repo: per-project state stays exactly where it was, in that repo's
 `.local/xezar/`.
 
@@ -368,10 +374,11 @@ These read and write `~/.xezar/config.json` directly, so they work with the
 server stopped, and `XEZ_HOME` selects which workspace they operate on.
 
 Settings split along the same line: **General** (the project's folder, its
-registry facts, its parallel-task ceiling, and Remove), **Agents**,
-**Worktrees**, **Bookmarklets**, **Prompt templates** and **MCP** describe one
-repo and live under `/p/<projectId>/settings`; **Appearance**,
-**Notifications**, **Resources**, **Projects** and **Keyboard** are yours or the
+registry facts, its parallel-task ceiling, and Remove), **Agents**, **Agent
+config** (each agent's own settings, MCP and memory files), **Worktrees**,
+**Bookmarklets** and **Prompt templates** describe one repo and live under
+`/p/<projectId>/settings`; **Appearance**, **Notifications**, **Resources**,
+**Skills** (update checks), **Agent accounts** and **Projects** are yours or the
 machine's and live at `/settings/global`.
 
 ### Grouping connected repositories: tags and the All tasks page
@@ -463,6 +470,7 @@ steps:
     # model: opus                # optional per-step model override
     # runner: codex              # optional per-step backend: claude · codex · opencode · pi
     # allowedTools: [Read, Edit, Write, Grep, Glob, Bash]
+    # timeout: 90m               # optional per-step wall clock: 45s · 90m · 2h · none
   - id: verify
     name: Verify
     command: "npm test"          # a check step: exit 0 passes
@@ -475,6 +483,34 @@ steps:
 back, its failing output is appended to the retried agent's prompt so the next
 attempt can see what broke.
 
+### How long a step may run
+
+Every agent step has a wall clock. Leave `timeout` out and nothing changes: the
+workflow's **last** step stays open for your follow-ups with no cap, and every
+**earlier** agent step is killed after **30 minutes** — which is fine for a
+review or a docs pass, and too short for a long investigate-and-implement step.
+`timeout` is how that step asks for more:
+
+```yaml
+  - id: investigate
+    prompt: "{{task}}"
+    timeout: 3h                  # this step only
+```
+
+- `45s`, `90m`, `2h` — whole numbers with `s`, `m` or `h`. Nothing else parses:
+  `90 minutes`, `1.5h` and `30d` are load-time errors, and so is `0s` (say
+  `none` if you mean no cap). The ceiling is `596h`, where Node's own timer
+  stops being able to count.
+- `none` — no wall clock at all. The step ends when the agent ends.
+- The field belongs to an **agent** step. A check step is a shell command, and
+  putting `timeout` on one is a load-time error rather than a key that quietly
+  does nothing.
+
+**All four backends honour it.** `claude`, `codex`, `opencode` and `pi` each arm
+the deadline from the same per-step value; on `claude`, `codex` and `pi` a step
+that overruns is interrupted and then `SIGKILL`ed after a short grace period,
+while `opencode` interrupts and waits for the session to close.
+
 Prefer skills over steps? A workflow can also be written in the portable
 shorthand — an ordered list of skill names, each becoming one agent step:
 
@@ -507,7 +543,7 @@ Useful environment variables:
 | `XEZ_DRY_RUN=1` | Use the bundled mock instead of the real `claude` CLI — the entire cockpit works offline, for demos and development. |
 | `XEZ_AGENT_MODELS_LOCKED=1` | Globally lock each runner to the model configured in its native Claude/Codex/OpenCode settings while keeping runner selection available. Exact `1` also delegates authentication and provider enablement to those native agents, so Xezar skips its credential probes and provider-disable preferences. Existing Xezar presets are preserved but ignored, and an environment change requires a restart. The config-file equivalent is `"modelsLocked": true` in global `~/.xezar/config.json` or one repository's `.xezar/config.json`; config-file locks do not disable provider checks. |
 | `XEZ_APPROVAL_GATE=1` | Opt into Claude's interactive approval UI; by default, unapproved tools are denied without interrupting the run. |
-| `XEZ_FOLLOWUPS=1` | Turn on the global follow-up **Inbox**: agents are asked to leave follow-ups in `todos.json` when they finish, and the Inbox view appears. Off by default — each task's own **Notes** handoff journal runs either way. |
+| `XEZ_FOLLOWUPS=1` | Turn on the global follow-up **Inbox**: agents are asked to leave follow-ups in `todos.json` when they finish, and the Inbox view appears. Off by default — each task's own **Notes** handoff journal runs either way. The Settings → Resources toggle overrides this default and needs no restart. |
 | `XEZ_AUTOMATIONS=1` | Turn on **GitHub automations**: the Automations view appears and xezar polls GitHub on each enabled automation's interval, launching tasks from what it finds. Off by default, and only the exact value `1` enables it — without it nothing polls GitHub, the automations endpoints answer `409`, and the nav item is absent. Read at boot, so restart after changing it; definitions, receipts and high-watermarks are retained, so unsetting it and restarting restores the feature without migration or data loss. |
 | `XEZ_AUTOSAVE=1` | Re-enable the periodic (90 s) autosave commit in task worktrees. Off by default (#471) — turn-end and pre-PR flushes always run, so branches still end complete. Every autosave names its trigger in the commit subject (`xezar autosave (periodic)` vs `(turn end)` / `(run finalize)` / `(pre-PR)`), so the flushes you keep are distinguishable from the timer you disabled. |
 | `XEZ_CLAUDE_BIN=/path/to/claude` | Override which `claude` binary is used. |
@@ -527,7 +563,7 @@ Useful environment variables:
 | `XEZ_HIDE_COST=1` | Hide backend-reported monetary cost throughout the browser cockpit while leaving raw input/output token counts visible. Only the exact value `1` enables it; telemetry and API payloads are unchanged, and a restart is required after changing it. |
 | `XEZ_HIDE_TOKEN_METRICS=1` | Legacy master switch that hides both token usage and cost. It takes precedence over the two independent flags; only the exact value `1` enables it, payloads are unchanged, and a restart is required. |
 | `GITHUB_TOKEN` | Fallback for GitHub reads/PRs when `gh` isn't authenticated. |
-| `XEZ_ENV_PASSTHROUGH=A,B` | Forward these extra host env vars to spawned agents. By default agents get a least-privilege env (safe shell/toolchain vars + the backend's own auth + `GITHUB_TOKEN` + `XEZ_*`), not your full environment — use this to add a var an agent needs. |
+| `XEZ_ENV_PASSTHROUGH=A,B` | Forward these extra host env vars to spawned agents. By default agents get a least-privilege env (safe shell/toolchain vars + the backend's own auth + `GITHUB_TOKEN` + `XEZ_*`), not your full environment — use this to add a var an agent needs. The Settings → Resources control overrides this default and needs no restart. |
 | `XEZ_AGENT_ENV_FULL=1` | Escape hatch: give spawned agents the full host environment (pre-hardening behavior). Off by default; only set it if you understand that this hands every host secret to the agent process. |
 | `XEZ_AGENT_TMPDIR=0` | Stop giving each task its own temp directory and hand agents the host `TMPDIR` again (pre-#785 behavior). On by default: every run gets `TMPDIR`/`TEMP`/`TMP` pointing at `.local/xezar/tmp/<task-id>`, created and write-probed before the agent spawns and reaped when the run ends, so concurrent tasks stop sharing one directory and a task refuses to start rather than run against a temp directory that silently swallows its shell output (see Troubleshooting below). Only an exact `0` disables it, and it disables the whole thing — the pre-spawn check included, so this stays an escape hatch you can actually take. |
 | `XEZ_REDACT_SECRETS=0` | Disable scrubbing of credential values/token shapes from the on-disk state (the NDJSON transcript and the free-text fields of `runs.json`). On by default; leave it on. Best-effort defense-in-depth, not a guarantee: it catches known token shapes and the values of your own secret-named env vars, so a credential in neither category can still get through. |
@@ -589,16 +625,16 @@ On startup xezar probes which CLIs are installed and the cockpit only offers
 the backends it found — install any one of the four and you're operational.
 
 **Models come from your own machine.** The model picker does not ship a list of
-vendor releases that goes stale between xezar versions. For Claude, Codex and
-OpenCode xezar asks the CLI on your host what *it* currently offers (Claude
-Code's `list_models` control request; the Codex app-server's `model/list`;
-`opencode models`) and shows exactly that, in that order — so a model your
-account gained yesterday is selectable today with no xezar release, and one your
-provider retired stops being offered. Discovery is read-only, costs no tokens,
-and is cached briefly in memory. If the CLI is missing, logged out, too old or
-slow, the picker quietly falls back to that runner's built-in entries (`auto`
-plus Claude's tier aliases) and says so in a status row; `pi`, which has no
-host-local catalog yet, always shows its built-in entries. `auto` — send no
+vendor releases that goes stale between xezar versions. For each backend xezar
+reads what *your host* currently offers — Claude Code's `list_models` control
+request, the Codex app-server's `model/list`, `opencode models`, and for pi its
+own `~/.pi/agent/models.json` and `settings.json` — and shows exactly that, in
+that order, so a model your account gained yesterday is selectable today with no
+xezar release, and one your provider retired stops being offered. Discovery is
+read-only, costs no tokens, and is cached briefly in memory. If a CLI is
+missing, logged out, too old or slow — or pi has no providers configured yet —
+the picker quietly falls back to that runner's built-in entries (`auto` plus
+Claude's tier aliases) and says so in a status row. `auto` — send no
 model at all and let the CLI decide — is always available, and a model you
 pinned by hand stays selectable even when it is no longer advertised.
 
@@ -654,8 +690,8 @@ happens per task and per step, not inside a variant group.
 
 The seam is deliberately small: a backend is one class implementing the
 `AgentRunner` interface (`packages/xezar/src/core/agent-runner.ts`) that turns a prompt into
-a stream of normalized events. Other CLIs — pi, aider, whatever ships next —
-can slot in the same way.
+a stream of normalized events. `pi` was added exactly that way; other CLIs —
+aider, whatever ships next — can slot into the same seam.
 
 ---
 
@@ -739,12 +775,24 @@ Run data (`runs.json`, NDJSON event logs, worktrees, `todos.json`) is
 git-ignored automatically; your workflows and skills stay committable.
 
 Settings that belong to *you* rather than to a repo — the parallel cap
-(`maxParallel`, default **2**), the per-task memory ceiling and the checkout
-root — live once in `~/.xezar/config.json`, alongside the
+(`maxParallel`, default **2**), the per-task memory ceiling, the **idle timeout**
+(`idleTimeoutMinutes`, default **15**), the default worktree retention
+(`worktreeRetentionDefault`), the Inbox switch and the agent env passthrough list,
+and the checkout root — live once in `~/.xezar/config.json`, alongside the
 [project registry](#multiple-projects-one-cockpit), and are edited from
-**Settings → Resources** and **Settings → Projects**. A `maxParallel` left over
-in a repo's `.xezar/config.json` is imported into the workspace file the
-first time xezar boots there, and ignored afterwards.
+**Settings → Resources** and **Settings → Projects**.
+
+The idle timeout is how long a task parked at `waiting` keeps its agent session
+alive with nobody talking to it. After it expires the session is closed. Set it to
+**Never** if you run long interactive sessions and would rather keep them — a
+waiting task holds no parallel-task slot, so your queue keeps moving either way,
+but its agent process stays alive and keeps using memory until you send it a
+message or cancel it.
+
+A `maxParallel` left over in a repo's `.xezar/config.json` is imported into the
+workspace file the first time xezar boots there, and ignored afterwards. A per-repo
+`memoryLimitMb` behaves differently on purpose: it is still honoured, and overrides
+the workspace ceiling for runs in that repo.
 
 ### Editing the agents' own config (Settings → Agent config)
 
@@ -777,8 +825,9 @@ cd xezar
 npm install
 ```
 
-**3. Build** — compiles the api-client and the server (`tsc → packages/xezar/dist/`) and the cockpit
-(`vite build → packages/xezar/web/dist/`), then runs the pack gate:
+**3. Build** — compiles the server (`tsc → packages/xezar/dist/`), folds the
+contract into `dist/contract/` so the published tarball resolves it, and builds
+the cockpit (`vite build → packages/xezar/web/dist/`), then runs the pack gate:
 
 ```bash
 npm run build
@@ -840,6 +889,11 @@ npm run test:package # pack/install and exercise the built CLI
 npm run test:e2e     # real-browser cockpit suite (agent-browser)
 ```
 
+Coverage is measured separately, and is not part of the validation gate:
+`npm run test:coverage` runs the vitest suites under the v8 provider and writes line and branch
+numbers to `.local/coverage/`. The behaviour-led gap analysis built from it lives in
+[docs/testing/coverage-gaps.md](docs/testing/coverage-gaps.md).
+
 The stack is deliberately small: **TypeScript** (strict, ESM), **Hono** + SSE for
 the server, **Zod** at every boundary, **YAML** for workflows, and a **React 19 +
 Vite + Tailwind v4 + shadcn/ui** cockpit shipped pre-built in `packages/xezar/web/dist/` — the

package/dist/agent-config/catalog.d.ts

@@ -28,6 +28,16 @@ export interface AgentHomePaths {
     codex: string;
     /** `$XDG_CONFIG_HOME/opencode` or `~/.config/opencode` */
     opencodeConfig: string;
+    /**
+     * `~/.pi/agent` — pi's whole per-user directory (`models.json`, `settings.json`, and the
+     * `auth.json` xezar never reads). No vendor variable relocates it (verified against pi 0.85.1,
+     * 2026-09-10), which is why this slot carries no `env.` alternative the way the three above do.
+     *
+     * `CONFIG_FILES` lists no pi entry yet, so nothing in the raw config editor resolves through
+     * this slot today; model discovery (#152) does, and it lives here so pi's home is derived in
+     * the one place every other agent's is.
+     */
+    pi: string;
 }
 export interface ConfigFileDef {
     /** Stable, opaque, URL-safe. The ONLY thing a client may name (traversal-proof). */

package/dist/agent-config/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/agent-config/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoEjC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAChE,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,wBAAwB;IACxB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC5D,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,8HAA8H;QAChI,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACzD,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,4FAA4F;QAC9F,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;QAC/D,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,gKAAgK;QAClK,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,gMAAgM;QAClM,OAAO,EAAE,eAAe;KACzB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,oFAAoF;QAChG,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAChD,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,UAAU,EACR,4HAA4H;QAC9H,OAAO,EAAE,kBAAkB;KAC5B;IAED,kBAAkB;IAClB;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACzD,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,gBAAgB;QAClC,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,2MAA2M;QAC7M,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACtD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,oLAAoL;QACtL,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,iBAAiB;KAC3B;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC;QACpE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,oKAAoK;QACtK,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC9C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,kJAAkJ;QACpJ,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;QAChE,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,mHAAmH;QACrH,OAAO,EAAE,mBAAmB;KAC7B;IAED,wEAAwE;IACxE;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,6KAA6K;QAC/K,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAEF,yBAAyB;AACzB,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/agent-config/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA8EjC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAChE,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,wBAAwB;IACxB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC5D,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,8HAA8H;QAChI,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACzD,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,4FAA4F;QAC9F,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;QAC/D,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,gKAAgK;QAClK,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,gMAAgM;QAClM,OAAO,EAAE,eAAe;KACzB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,oFAAoF;QAChG,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAChD,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,UAAU,EACR,4HAA4H;QAC9H,OAAO,EAAE,kBAAkB;KAC5B;IAED,kBAAkB;IAClB;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACzD,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,gBAAgB;QAClC,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,2MAA2M;QAC7M,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACtD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,oLAAoL;QACtL,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,iBAAiB;KAC3B;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC;QACpE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,oKAAoK;QACtK,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC9C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,kJAAkJ;QACpJ,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;QAChE,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,mHAAmH;QACrH,OAAO,EAAE,mBAAmB;KAC7B;IAED,wEAAwE;IACxE;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,6KAA6K;QAC/K,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAEF,yBAAyB;AACzB,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/automations/coordinator.js

@@ -2,6 +2,7 @@ import { projectDataDir } from '../project-data-paths.js';
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { AutomationStore } from './store.js';
+import { ownProjectData } from '../runs/project-writer.js';
 /**
  * Lightweight workspace index for project automation state. Discovery checks
  * only the optional definitions file and never materializes a RunManager or a
@@ -46,6 +47,13 @@ export class AutomationCoordinator {
         const projectRoot = root ?? this.roots.get(projectId);
         if (!projectRoot)
             return undefined;
+        try {
+            ownProjectData(projectDataDir(projectRoot));
+        }
+        catch (error) {
+            this.options.warn?.(`Automation project is unavailable: ${error instanceof Error ? error.message : String(error)}`);
+            return undefined;
+        }
         const store = AutomationStore.open(projectDataDir(projectRoot), { warn: this.options.warn });
         this.stores.set(projectId, store);
         this.roots.set(projectId, projectRoot);

package/dist/automations/coordinator.js.map

@@ -1 +1 @@
-{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../src/automations/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAa7C;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IAIH,OAAO;IAHnB,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,YAA6B,OAAqC;uBAArC,OAAO;IAAiC,CAAC;IAEtE,KAAK,CAAC,OAAO;QACX,IAAI,QAA4C,CAAC;QACjD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,IAAa;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../src/automations/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAa3D;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IAIH,OAAO;IAHnB,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,YAA6B,OAAqC;uBAArC,OAAO;IAAiC,CAAC;IAEtE,KAAK,CAAC,OAAO;QACX,IAAI,QAA4C,CAAC;QACjD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,IAAa;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,IAAI,CAAC;YACH,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/automations/types.d.ts

@@ -32,6 +32,7 @@ export declare const automationTaskSchema: z.ZodObject<{
         }>>;
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        timeout: z.ZodOptional<z.ZodString>;
         command: z.ZodOptional<z.ZodString>;
         onFail: z.ZodOptional<z.ZodObject<{
             retry: z.ZodString;
@@ -91,6 +92,7 @@ export declare const automationDefinitionSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;

package/dist/contract/automations.d.ts

@@ -73,6 +73,7 @@ export declare const automationTaskSchema: z.ZodObject<{
         }>>;
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        timeout: z.ZodOptional<z.ZodString>;
         command: z.ZodOptional<z.ZodString>;
         onFail: z.ZodOptional<z.ZodObject<{
             retry: z.ZodString;
@@ -135,6 +136,7 @@ export declare const automationDefinitionSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -290,6 +292,7 @@ export declare const automationListEntrySchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -435,6 +438,7 @@ export declare const automationsResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -565,6 +569,7 @@ export declare const automationResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -632,6 +637,7 @@ export declare const automationDetailResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -835,6 +841,7 @@ export declare const createAutomationInputSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -900,6 +907,7 @@ export declare const updateAutomationInputSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;

package/dist/contract/events.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/contract/index.js

@@ -357,6 +357,12 @@ var workflowStepDefSchema = z4.object({
   runner: runnerSchema.optional(),
   allowedTools: z4.array(z4.string()).optional(),
   bashAllowlist: z4.array(z4.string()).optional(),
+  /** This step's own wall-clock cap (#22): `45s` / `90m` / `2h`, or `none` for no cap.
+   *  Typed as a plain string here, exactly as `model` is: the DURATION FORMAT is validated
+   *  by `src/workflows/types.ts`'s `stepTimeoutSchema`, which is the single source of truth
+   *  for what a user may author (workflow YAML and the inline chain on `POST /runs` both go
+   *  through it). Restating the grammar here would be a second copy free to drift. */
+  timeout: z4.string().optional(),
   // check step
   command: z4.string().optional(),
   onFail: z4.object({
@@ -660,6 +666,43 @@ var runIndexEntrySchema = z5.object({
    *  refinement `workflowLabel` applies needs `steps[]`, which this row deliberately omits, so
    *  a `(planned)` chain reads as itself here rather than as its first agent's name. */
   workflow: z5.string(),
+  /**
+   * The backend this run ran as — RESOLVED server-side, in order of how good the evidence is.
+   *
+   * 1. `RunRecord.runner`. NOT "what the caller asked for": `execute` writes the resolved backend
+   *    onto the record the moment a run starts, so for anything that ever ran this is a fact.
+   * 2. Otherwise the last step that recorded a backend — steps stamp theirs at spawn, so a record
+   *    written before run-level backend affinity still says what it used.
+   * 3. Otherwise the project's current `defaultRunner`, and only then is `runnerInherited` set.
+   *
+   * Resolved HERE rather than in the browser because these rows span every registered project:
+   * finishing step 3 client-side would be one config request per project. A project-scoped surface
+   * does it itself, from the one `GET /config` it already holds.
+   */
+  runner: runnerSchema,
+  /**
+   * Present ONLY when true: the run carried no runner and no step backend, so `runner` above is
+   * the project's current default.
+   *
+   * That is the one case that is not history. A run with no evidence at all has not started, so
+   * the value is what the task WOULD run as — which is why the cockpit renders it muted. Absent
+   * means the row is reporting what actually ran.
+   */
+  runnerInherited: z5.boolean().optional(),
+  /** The model string the run recorded, VERBATIM (`RunRecord.model`). Absent means none was
+   *  recorded and the backend picked, which the cockpit prints as a muted `auto` — the same word
+   *  the task detail header uses. Never prettified through a catalog: a locally-hosted backend's
+   *  own id is the only honest answer. */
+  model: z5.string().optional(),
+  /**
+   * How many DISTINCT backends this run's recorded steps used — a workflow may name one per step.
+   *
+   * A COUNT, deliberately, and present only when it is greater than 1. This row exists to be
+   * slim; `steps[]` is exactly the half it refuses to carry, so the mixed-chain signal is derived
+   * server-side and reduced to the one number the cell renders (`Claude Code +1`). Absent means
+   * one backend or none — which is every ordinary run.
+   */
+  stepBackends: z5.number().int().min(2).optional(),
   /** The task's branch, when it has one — a column on the global page, and the one field that
    *  makes a cross-project row identifiable at a glance without opening it. */
   branch: z5.string().optional(),
@@ -1081,6 +1124,15 @@ var workspaceConfigResponseSchema = z8.object({
   /** Stored override; `null` means inherit `XEZ_SKILLS_AUTO_UPDATE`, then true. */
   skillsAutoUpdate: z8.boolean().nullable(),
   effectiveSkillsAutoUpdate: z8.boolean(),
+  /** Stored follow-up Inbox override (F); `null` = no stored key, `XEZ_FOLLOWUPS` decides. */
+  followups: z8.boolean().nullable(),
+  /** What `followups` + the env actually resolve to right now — what the cockpit shows. */
+  effectiveFollowups: z8.boolean(),
+  /** Stored extra agent env-passthrough names (F); `null` = no stored key,
+   *  `XEZ_ENV_PASSTHROUGH` decides. `[]` is a real stored "forward nothing". */
+  agentEnvPassthrough: z8.array(z8.string()).nullable(),
+  /** What `agentEnvPassthrough` + the env actually resolve to right now. */
+  effectiveAgentEnvPassthrough: z8.array(z8.string()),
   composerDefaults: z8.object({
     autonomous: z8.boolean().nullable(),
     worktree: z8.boolean().nullable(),
@@ -1094,7 +1146,13 @@ var workspaceConfigResponseSchema = z8.object({
     monitoringWakeIntervalMinutes: z8.number().nullable(),
     /** Resume a run a provider usage limit stopped, once the limit resets. Default `true`. */
     autoResumeOnUsageLimit: z8.boolean(),
+    /** Wall clock for a session parked at `waiting`, in minutes; `null` = never close on
+     *  idle. Default 15. */
+    idleTimeoutMinutes: z8.number().nullable(),
     memoryLimitMb: z8.number().nullable(),
+    /** The host-derived ceiling an ABSENT `memoryLimitMb` falls back to (B1) — reported so
+     *  the settings pane can name the machine's own default instead of guessing it. */
+    memoryLimitDefaultMb: z8.number(),
     worktreeRetentionDefault: z8.number()
   }),
   /**
@@ -1119,6 +1177,11 @@ var setWorkspaceConfigInputSchema = z8.object({
   browseRoot: z8.string().trim().min(1).max(4096).optional(),
   projectsDir: z8.string().trim().min(1).max(4096).optional(),
   skillsAutoUpdate: z8.boolean().nullable().optional(),
+  /** Stored Inbox override (F): `null` clears the key back to the `XEZ_FOLLOWUPS` default. */
+  followups: z8.boolean().nullable().optional(),
+  /** Stored env-passthrough names (F): `null` clears the key back to the
+   *  `XEZ_ENV_PASSTHROUGH` default; `[]` stores a real "forward nothing". */
+  agentEnvPassthrough: z8.array(z8.string().trim().min(1).max(200)).max(64).nullable().optional(),
   composerDefaults: z8.object({
     autonomous: z8.boolean().nullable().optional(),
     worktree: z8.boolean().nullable().optional()
@@ -1139,6 +1202,8 @@ var setWorkspaceConfigInputSchema = z8.object({
     maxMonitoringSessions: z8.number().int().min(0).max(16).optional(),
     monitoringWakeIntervalMinutes: z8.number().int().min(1).max(60).nullable().optional(),
     autoResumeOnUsageLimit: z8.boolean().optional(),
+    /** `null` = never close an idle session; a number is minutes (1 to 1440). */
+    idleTimeoutMinutes: z8.number().int().min(1).max(1440).nullable().optional(),
     memoryLimitMb: z8.number().int().min(0).max(1048576).nullable().optional(),
     worktreeRetentionDefault: z8.number().int().min(0).max(1e3).optional()
   }).optional()
@@ -1282,7 +1347,15 @@ var configResponseSchema = z8.object({
   liveTitleUpdates: z8.boolean().nullable(),
   /** Optional review gate (#489): null = no config key, the `XEZ_REVIEW_GATE` env default (OFF)
    *  decides. */
-  reviewGate: z8.boolean().nullable()
+  reviewGate: z8.boolean().nullable(),
+  /** Model the chain planner runs on (Claude aliases only; other backends pick their own).
+   *  Always materialized — the file schema defaults it to `sonnet` (E). */
+  plannerModel: z8.string(),
+  /** Model the task namer runs on, same rule as `plannerModel`. Defaults to `haiku` (E). */
+  namerModel: z8.string(),
+  /** Team skill sources (E). Always materialized: the file schema defaults it to the shared
+   *  catalog, and `[]` is a real "no team skills" choice. */
+  skillsRepos: z8.array(z8.object({ repo: z8.string(), ref: z8.string() }))
 });
 var setConfigResponseSchema = configResponseSchema;
 var setConfigInputSchema = z8.object({
@@ -1303,7 +1376,18 @@ var setConfigInputSchema = z8.object({
   /** null clears the key back to the env-default behavior. */
   liveTitleUpdates: z8.boolean().nullable().optional(),
   /** null clears the key back to the env-default behavior (OFF). */
-  reviewGate: z8.boolean().nullable().optional()
+  reviewGate: z8.boolean().nullable().optional(),
+  /** `null` clears the key back to the schema default (`sonnet`). */
+  plannerModel: z8.string().trim().min(1).max(200).nullable().optional(),
+  /** `null` clears the key back to the schema default (`haiku`). */
+  namerModel: z8.string().trim().min(1).max(200).nullable().optional(),
+  /** `null` clears the key back to the default catalog; `[]` disables team skills. */
+  skillsRepos: z8.array(
+    z8.object({
+      repo: z8.string().trim().min(1).max(500),
+      ref: z8.string().trim().min(1).max(200).optional()
+    })
+  ).max(32).nullable().optional()
 });
 var skillsUpdateStatusSchema = z8.enum([
   "idle",
@@ -1359,7 +1443,7 @@ var providerConnectResponseSchema = z8.discriminatedUnion("opened", [
   z8.object({ opened: z8.literal(true), command: z8.string() }),
   z8.object({ opened: z8.literal(false), connected: z8.literal(true), command: z8.string() })
 ]);
-var modelDiscoveryRunnerSchema = z8.enum(["claude", "codex", "opencode"]);
+var modelDiscoveryRunnerSchema = z8.enum(["claude", "codex", "opencode", "pi"]);
 var MODEL_DISCOVERY_RUNNERS = modelDiscoveryRunnerSchema.options;
 function runnerDiscoversModels(runner) {
   return MODEL_DISCOVERY_RUNNERS.includes(runner);