@sleds/cli 0.1.68 → 0.1.70

package/dist/sleds.mjs

@@ -295,6 +295,16 @@ var init_sledSort = __esm(() => {
 function slugify(text, max = 63) {
   return text.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, max);
 }
+
+// ../../packages/shared/src/workspaceLook.ts
+var init_workspaceLook = () => {};
+
+// ../../packages/shared/src/org/brand.ts
+var BRAND_LOGO_MAX_BYTES;
+var init_brand = __esm(() => {
+  init_workspaceLook();
+  BRAND_LOGO_MAX_BYTES = 1024 * 1024;
+});
 // ../../packages/shared/src/seat/agents.ts
 var init_agents = () => {};
 // ../../packages/shared/src/seat/burn.ts
@@ -1107,6 +1117,9 @@ function norm(label) {
 function plain(s) {
   return s.replace(/[*_`~]+/g, "").replace(/\s+/g, " ").trim();
 }
+function isNoAnswer(s) {
+  return !s || /^(n\/?a|none|no|nil|null|-+|—|tbd|\?+)\.?$/i.test(s.trim());
+}
 function titleOf(s, max = 80) {
   const t = plain(s);
   const first = /^(.+?[.!?])(\s|$)/.exec(t)?.[1] ?? t;
@@ -1290,9 +1303,9 @@ function draftBrief(input) {
   const byKey = form ? {
     touches: form.touches,
     demand: form.demand,
-    ...form.expected ? { done: form.expected } : {}
+    ...form.expected && !isNoAnswer(form.expected) ? { done: form.expected } : {}
   } : parsed.byKey;
-  const fromText = form?.summary ? form.summary : form?.ask ? form.ask : askFrom(text, preamble);
+  const fromText = form?.summary && !isNoAnswer(form.summary) ? form.summary : form?.ask ? form.ask : askFrom(text, preamble);
   const askText = a.ask?.trim() || (fromText ? titleOf(fromText) : undefined);
   if (!askText)
     return null;
@@ -4481,6 +4494,7 @@ async function actualTool(ctx, args, to = { path: "/proxy/estimate/actual" }) {
     ...num3(args.usd) !== undefined ? { actualUsd: num3(args.usd) } : {},
     ...args.usd === null ? { actualUsd: null } : {},
     ...str5(args.state) ? { state: str5(args.state) } : {},
+    ...args.devVerified === true ? { devVerified: true } : {},
     ...Object.keys(work).length > 0 ? { work } : {}
   };
   const res = await ctx.client.postFull(to.path, body);
@@ -5529,6 +5543,10 @@ var init_server = __esm(() => {
             type: "string",
             description: "started · done · merged · shipped · parked (default: done when minutes or finishedAt are given)."
           },
+          devVerified: {
+            type: "boolean",
+            description: "true when you verified it yourself — the finish skips verification (the workspace's QA column) and the merge lands it as before. Never set it by rule."
+          },
           phases: {
             type: "object",
             description: "Minutes by phase; total defaults to their sum when `minutes` is absent.",
@@ -5619,6 +5637,10 @@ var init_server = __esm(() => {
             type: "string",
             description: "started · done · merged · shipped · parked (default: done when minutes or finishedAt are given)."
           },
+          devVerified: {
+            type: "boolean",
+            description: "true when you verified it yourself — the finish skips verification (the workspace's QA column) and the merge lands it as before. Never set it by rule."
+          },
           phases: {
             type: "object",
             description: "Minutes by phase; total defaults to their sum when `minutes` is absent.",
@@ -5668,6 +5690,10 @@ var init_server = __esm(() => {
           feature: { type: "string" },
           ref: { type: "string", description: "Where the output lives: PR url, commit, doc." },
           state: { type: "string", description: "done · merged · shipped (default: done)." },
+          devVerified: {
+            type: "boolean",
+            description: "true when you verified it yourself — the finish skips verification (the workspace's QA column) and the merge lands it as before. Never set it by rule."
+          },
           model: { type: "string" },
           sessionId: { type: "string" },
           node: {
@@ -8174,9 +8200,6 @@ var init_effort = __esm(() => {
   EFFORTS = ["low", "medium", "high", "xhigh", "max"];
 });
 
-// ../../packages/shared/src/workspaceLook.ts
-var init_workspaceLook = () => {};
-
 // src/settings.ts
 import { execFileSync } from "node:child_process";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -8806,6 +8829,7 @@ var init_src = __esm(() => {
   init_sledConfig();
   init_sledSort();
   init_gate();
+  init_brand();
   init_agents();
   init_burn();
   init_cowork();
@@ -9301,6 +9325,7 @@ function parseRun(v) {
       }
     } : {},
     ...isObject8(v.provider) && typeof v.provider.why === "string" && typeof v.provider.since === "number" && typeof v.provider.tries === "number" ? { provider: { why: v.provider.why, since: v.provider.since, tries: v.provider.tries } } : {},
+    ...isObject8(v.atPrompt) && typeof v.atPrompt.since === "number" && typeof v.atPrompt.text === "string" ? { atPrompt: { since: v.atPrompt.since, text: v.atPrompt.text } } : {},
     ...parked ? { parked } : {},
     ...isObject8(v.pr) && typeof v.pr.url === "string" ? {
       pr: {
@@ -9586,6 +9611,7 @@ init_envelope();
 init_sledConfig();
 init_sledSort();
 init_gate();
+init_brand();
 init_agents();
 init_burn();
 init_cowork();
@@ -11563,7 +11589,20 @@ var mainCheckoutOf = (gitCommonDir, cwd) => {
   const main = dir.slice(0, -"/.git".length);
   return main && main !== cwd.replace(/\/+$/, "") ? main : null;
 };
-var claudeAddDirFlag = (mainCheckout) => mainCheckout ? ` --add-dir=${shq(mainCheckout)}` : "";
+var trimDir = (dir) => dir.replace(/\/+$/, "") || "/";
+var within = (path, dir) => {
+  const p = trimDir(path);
+  const d = trimDir(dir);
+  return p === d || p.startsWith(d === "/" ? "/" : `${d}/`);
+};
+var sessionReadDirs = (o) => {
+  const cwd = trimDir(o.cwd);
+  const dirs = [o.mainCheckout, ...o.worktrees ?? [], o.pnpmStore].filter((d) => !!d?.trim()).map(trimDir);
+  return [...new Set(dirs)].filter((d) => d !== cwd);
+};
+var readOnlyDirs = (readDirs, cwd, keep = []) => readDirs.filter((d) => ![cwd, ...keep].some((p) => within(p, d)));
+var readOnlyDenyRules = (dirs) => dirs.map((d) => `Edit(${absRule(d)})`);
+var claudeAddDirFlag = (dirs = []) => dirs.map((d) => ` --add-dir=${shq(d)}`).join("");
 var shq = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
 
 // src/runners/exec.ts
@@ -11609,15 +11648,15 @@ var agentShellCommand = (o) => {
   const prompt = `"$(cat ${shq2(o.promptFile)})"`;
   const agent = o.agent?.trim();
   if (agent)
-    return `${sandboxedAgent(agent, o.sandbox, o.mainCheckout)} ${prompt}`;
+    return `${sandboxedAgent(agent, o.sandbox, o.readDirs)} ${prompt}`;
   const model = o.model ? ` --model ${shq2(o.model)}` : "";
   const effort = o.effort ? ` --effort ${shq2(o.effort)}` : "";
-  return `${sandboxedAgent("claude", o.sandbox, o.mainCheckout)}${hookSettingsFlag(o)}${mcpConfigFlag(o)} --permission-mode ${shq2(o.permissionMode)}${model}${effort} ${prompt}`;
+  return `${sandboxedAgent("claude", o.sandbox, o.readDirs)}${hookSettingsFlag(o)}${mcpConfigFlag(o)} --permission-mode ${shq2(o.permissionMode)}${model}${effort} ${prompt}`;
 };
 var execLine = (cmd) => /^[A-Za-z_][A-Za-z0-9_]*=/.test(cmd) ? `exec env ${cmd}` : `exec ${cmd}`;
-var sandboxedAgent = (agent, sandbox, mainCheckout) => {
+var sandboxedAgent = (agent, sandbox, readDirs) => {
   const kind = sandboxAgentKind(agent);
-  const line = kind === "claude" ? `${agent}${claudeAddDirFlag(mainCheckout)}` : agent;
+  const line = kind === "claude" ? `${agent}${claudeAddDirFlag(readDirs)}` : agent;
   if (!sandbox)
     return line;
   if (kind === "claude")
@@ -12340,7 +12379,7 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.68" ?? "dev",
+    version: host.version ?? "0.1.70" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
@@ -14580,21 +14619,65 @@ function permissionDialog(screen) {
     if (t && !isRule(raw[i]) && !DIALOG_FOOTER.test(t) && !isFooter(t))
       return null;
   }
+  return { text: dialogBody(raw, lines, q), options };
+}
+function dialogBody(raw, lines, last) {
   let from = 0;
-  for (let j = q - 1;j >= 0; j--) {
+  for (let j = last;j >= 0; j--) {
     const t = lines[j].trim();
     if (isRule(raw[j]) || /^⏺/.test(t) || /^⎿/.test(t)) {
       from = j + 1;
       break;
     }
   }
-  const body = lines.slice(from, q + 1);
-  const indent = Math.min(...body.filter((l) => l.trim()).map((l) => /^\s*/.exec(l)[0].length));
-  const text = body.map((l) => l.slice(indent)).join(`
+  const body = lines.slice(from, last + 1);
+  const inked = body.filter((l) => l.trim());
+  if (!inked.length)
+    return "";
+  const indent = Math.min(...inked.map((l) => /^\s*/.exec(l)[0].length));
+  return body.map((l) => l.slice(indent)).join(`
 `).replace(/\n{3,}/g, `
 
 `).trim();
-  return { text, options };
+}
+var CURSOR_CHOICE = /^❯\s*\d\.\s/;
+var CANCEL_FOOTER = /\besc to cancel\b/i;
+function stoppedAtPrompt(screen) {
+  const dialog = permissionDialog(screen);
+  if (dialog)
+    return { text: dialog.text };
+  const raw = screen.split(`
+`);
+  const lines = raw.map(unbox);
+  let c = -1;
+  for (let i = lines.length - 1;i >= 0; i--)
+    if (CURSOR_CHOICE.test(lines[i].trim())) {
+      c = i;
+      break;
+    }
+  if (c < 0)
+    return null;
+  let footer = -1;
+  for (let i = c + 1;i < lines.length; i++) {
+    const t = lines[i].trim();
+    if (/^⏺/.test(t) || isPrompt(t) && !CURSOR_CHOICE.test(t))
+      return null;
+    if (footer < 0 && CANCEL_FOOTER.test(t))
+      footer = i;
+    else if (footer >= 0 && t && !isRule(raw[i]) && !isFooter(t) && !DIALOG_FOOTER.test(t))
+      return null;
+  }
+  if (footer < 0 && !choicePicker(screen))
+    return null;
+  let first = c;
+  for (let i = c;i >= 0 && c - i < PICKER_REACH; i--)
+    if (/^(?:❯\s*)?1\.\s/.test(lines[i].trim())) {
+      first = i;
+      break;
+    }
+  const text = dialogBody(raw, lines, first - 1) || lines.slice(first, c + 1).map((l) => l.trim()).join(`
+`);
+  return { text };
 }
 var PROVIDER_FAILURES = [
   ["connection lost", /\bconnection (?:lost|error)\b/i],
@@ -14955,21 +15038,29 @@ function fingerprint(text) {
 function wordsPrint(screen) {
   return fingerprint(stripTuiChrome(screen));
 }
-function sandboxFor(d, name, cwd, allow) {
+function sandboxFor(d, name, cwd, allow, readOnly) {
   if (!d.sandbox)
     return {};
   if (!d.writeSandboxSettings)
     throw new Error("sessions are sandboxed, but nothing writes their settings — not started");
-  return { sandbox: d.writeSandboxSettings(name, cwd, allow) };
+  return { sandbox: d.writeSandboxSettings(name, cwd, allow, readOnly) };
 }
-function hooksFor(d, name, allow) {
+function hooksFor(d, name, allow, readOnly) {
   if (d.sandbox || !d.writeHookSettings)
     return {};
-  return { settingsFile: d.writeHookSettings(name, allow) };
+  return { settingsFile: d.writeHookSettings(name, allow, readOnly) };
 }
-function mainCheckoutFor(d, cwd) {
-  const main = d.mainCheckoutOf?.(cwd);
-  return main ? { mainCheckout: main } : {};
+function wallsFor(d, name, cwd, allow) {
+  let readDirs = [];
+  try {
+    readDirs = d.readDirsOf?.(cwd) ?? [];
+  } catch {}
+  const readOnly = readOnlyDirs(readDirs, cwd);
+  return {
+    ...sandboxFor(d, name, cwd, allow, readOnly),
+    ...hooksFor(d, name, allow, readOnly),
+    ...readDirs.length ? { readDirs } : {}
+  };
 }
 function engineMcpConfigFor(d, name, runToken, at, cwd) {
   if (d.source.name !== "sleds" || d.agent?.trim() || !d.writeMcpConfig)
@@ -15216,7 +15307,9 @@ async function tickOnce(d) {
       idle = false;
       asked = false;
       failing = null;
-    }
+      run.atPrompt = undefined;
+    } else if (runner.readsSession)
+      notePrompt(d, runner, run, shown);
     const retry = failing !== null && (run.provider?.tries ?? 0) < PROVIDER_RETRIES;
     if (idle || failing || needsHeartbeat(run.leaseUntil, d.now(), d.leaseMin)) {
       let beat;
@@ -15519,9 +15612,7 @@ async function tickOnce(d) {
         ...launch.effort && !launch.agent ? { effort: launch.effort } : {},
         ...launch.agent ? { agent: launch.agent } : {},
         ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-        ...sandboxFor(d, name, worktree, allow),
-        ...hooksFor(d, name, allow),
-        ...mainCheckoutFor(d, worktree),
+        ...wallsFor(d, name, worktree, allow),
         ...claim.group ? { group: claim.group } : {}
       };
     } catch (e) {
@@ -15813,6 +15904,17 @@ async function settlePermission(d, runner, run, shown) {
   d.log(`${at}: stopped at a permission dialog — it waits for a person (${runner.watchHint(run.handle)})`);
   return true;
 }
+function notePrompt(d, runner, run, shown) {
+  if (!shown)
+    return;
+  const prompt = stoppedAtPrompt(shown);
+  if (!prompt || run.atPrompt && run.atPrompt.text !== prompt.text)
+    run.atPrompt = undefined;
+  if (!prompt || run.atPrompt || !run.seenTicks)
+    return;
+  run.atPrompt = { since: d.now(), text: prompt.text };
+  d.log(`${ref(run)}: stopped at a prompt the engine cannot answer — answer it in the terminal (${runner.watchHint(run.handle)})`);
+}
 var PRESS_TRIES = 3;
 function pressAnswer(d, runner, run, options, answer) {
   const at = ref(run);
@@ -16398,9 +16500,7 @@ async function startAnswerer(d, answers, run) {
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
       ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-      ...sandboxFor(d, name, run.handle.cwd),
-      ...hooksFor(d, name),
-      ...mainCheckoutFor(d, run.handle.cwd),
+      ...wallsFor(d, name, run.handle.cwd),
       ...run.group ? { group: run.group } : {}
     });
   } catch (e) {
@@ -16608,9 +16708,7 @@ async function startDraft(d, claim, why, state, started, finished) {
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
       ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-      ...sandboxFor(d, name, worktree),
-      ...hooksFor(d, name),
-      ...mainCheckoutFor(d, worktree)
+      ...wallsFor(d, name, worktree)
     });
   } catch (e) {
     d.log(`${at}: could not start the drafter: ${message(e)}`);
@@ -16789,9 +16887,7 @@ async function startMock(d, claim, state, started, finished) {
       promptFile: d.writePrompt(name, prompt),
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
-      ...sandboxFor(d, name, worktree, allow),
-      ...hooksFor(d, name, allow),
-      ...mainCheckoutFor(d, worktree)
+      ...wallsFor(d, name, worktree, allow)
     });
   } catch (e) {
     await fail(`the engine could not start the session: ${message(e)}`);
@@ -17678,9 +17774,7 @@ function restartInWorktree(d, run, name, prompt, base) {
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
       ...run.mcpConfig ? { mcpConfig: run.mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-      ...sandboxFor(d, name, run.handle.cwd),
-      ...hooksFor(d, name),
-      ...mainCheckoutFor(d, run.handle.cwd),
+      ...wallsFor(d, name, run.handle.cwd),
       ...run.group ? { group: run.group } : {}
     };
     run.handle = runner.makesWorktree ? runner.reopen(run.handle, o) : runner.start(o);
@@ -17814,9 +17908,7 @@ async function startEventAnswerer(d, answers, state, dec, decided) {
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
       ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-      ...sandboxFor(d, name, worktree),
-      ...hooksFor(d, name),
-      ...mainCheckoutFor(d, worktree)
+      ...wallsFor(d, name, worktree)
     });
   } catch (e) {
     d.log(`${at}: could not start the ${KIND_SAYS[kind]} answerer — it goes to a person: ${message(e)}`);
@@ -18344,8 +18436,8 @@ ${renderTranscript(messages)}`;
 var headlessScript = (o, log) => {
   const prompt = `"$(cat ${shq2(o.promptFile)})"`;
   const agent = o.agent?.trim();
-  const cmd = agent ? `${sandboxedAgent(agent, o.sandbox, o.mainCheckout)} ${prompt}` : [
-    `${sandboxedAgent("claude", o.sandbox, o.mainCheckout)} -p`,
+  const cmd = agent ? `${sandboxedAgent(agent, o.sandbox, o.readDirs)} ${prompt}` : [
+    `${sandboxedAgent("claude", o.sandbox, o.readDirs)} -p`,
     prompt,
     ...o.mcpConfig ? [mcpConfigFlag(o).trim()] : [],
     "--output-format stream-json --verbose",
@@ -19224,7 +19316,7 @@ async function fetchVersion(o) {
   const platform = o.platform ?? process.platform;
   const arch = o.arch ?? process.arch;
   const publicKey = o.publicKey ?? RELEASE_PUBLIC_KEY;
-  const running = o.running ?? "0.1.68";
+  const running = o.running ?? "0.1.70";
   if (!publicKey)
     return { ok: false, why: "no release key yet" };
   if (!VERSION_RE2.test(o.version))
@@ -20450,7 +20542,7 @@ function engineUpdater(o) {
 
 // src/version.ts
 function cliVersion(env) {
-  return "0.1.68";
+  return "0.1.70";
 }
 
 // src/commands/update.ts
@@ -20836,7 +20928,7 @@ function engineClient(o, org, breaker) {
       ...src,
       ...breaker ? { fetchFn: breaker.fetch } : {},
       timeoutMs: ENGINE_TIMEOUT_MS,
-      version: "0.1.68"
+      version: "0.1.70"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -20912,6 +21004,7 @@ function engineDeps(o, flags, source, runner, stateName) {
   const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve9(cwd, d));
   const { branch, prTitle } = flags;
   const hooksDir = join25(stateDir, "hooks");
+  const pnpmStores = new Map;
   const permissionMark = (name) => join25(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
@@ -20935,7 +21028,7 @@ function engineDeps(o, flags, source, runner, stateName) {
     ...flags.strictMcp ? { strictMcp: true } : {},
     ...flags.sandbox ? {
       sandbox: true,
-      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
+      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow, readOnly) => {
         const gitCommonDir = gitCommonDirOf(exec, cwd);
         const dir = join25(stateDir, "sandbox");
         mkdirSync18(dir, { recursive: true, mode: 448 });
@@ -20947,6 +21040,12 @@ function engineDeps(o, flags, source, runner, stateName) {
         walls.permissions.allow = [
           ...new Set([...walls.permissions.allow, ...allow ?? []])
         ];
+        walls.permissions.deny = [
+          ...new Set([
+            ...walls.permissions.deny,
+            ...readOnlyDenyRules(readOnlyDirs(readOnly ?? [], cwd, [gitCommonDir]))
+          ])
+        ];
         const settings = withHook(name, { ...walls });
         writeFileSync16(p, `${JSON.stringify(settings, null, 2)}
 `, { mode: 384 });
@@ -20954,23 +21053,22 @@ function engineDeps(o, flags, source, runner, stateName) {
         return { settingsFile: p, gitCommonDir };
       })
     } : {},
-    writeHookSettings: (name, allow) => {
+    writeHookSettings: (name, allow, readOnly) => {
       mkdirSync18(hooksDir, { recursive: true, mode: 448 });
       const p = join25(hooksDir, `${name}.json`);
-      const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
+      const deny = readOnlyDenyRules(readOnly ?? []);
+      const permissions = {
+        ...allow?.length ? { allow: [...allow] } : {},
+        ...deny.length ? { deny } : {}
+      };
+      const base = Object.keys(permissions).length ? { permissions } : {};
       writeFileSync16(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
       chmodSync5(p, 384);
       return p;
     },
     permissionMark,
-    mainCheckoutOf: o.mainCheckoutOf ?? ((cwd) => {
-      try {
-        return mainCheckoutOf(gitCommonDirOf(exec, cwd), cwd);
-      } catch {
-        return null;
-      }
-    }),
+    readDirsOf: o.readDirsOf ?? ((dir) => engineReadDirs(exec, dir, exists, pnpmStores)),
     ...branch ? { branchOf: (claim) => branchFor(branch, claim) } : {},
     ...prTitle ? { prTitleOf: (claim) => prTitleFor(prTitle, claim) } : {},
     now: o.now ?? Date.now,
@@ -21072,6 +21170,52 @@ function gitCommonDirOf(exec, cwd) {
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
   return resolve9(cwd, dir);
 }
+function worktreeListPaths(porcelain) {
+  return porcelain.split(/\n\s*\n/).map((block) => block.split(`
+`).map((l) => l.trim())).filter((lines) => !lines.some((l) => l === "bare" || l.startsWith("prunable"))).flatMap((lines) => {
+    const wt = lines.find((l) => l.startsWith("worktree "));
+    return wt ? [wt.slice("worktree ".length)] : [];
+  });
+}
+var PNPM_STORE_TIMEOUT_MS = 1e4;
+function engineReadDirs(exec, cwd, exists, stores) {
+  let common = null;
+  try {
+    common = gitCommonDirOf(exec, cwd);
+  } catch {}
+  const worktrees = (() => {
+    try {
+      const r = exec("git", ["-C", cwd, "worktree", "list", "--porcelain"]);
+      return r.status === 0 ? worktreeListPaths(r.stdout) : [];
+    } catch {
+      return [];
+    }
+  })();
+  const pnpmStore = (() => {
+    try {
+      if (!exists(join25(cwd, "pnpm-lock.yaml")))
+        return null;
+      const key = common ?? cwd;
+      const known = stores.get(key);
+      if (known)
+        return known;
+      const r = exec("pnpm", ["store", "path"], { cwd, timeoutMs: PNPM_STORE_TIMEOUT_MS });
+      const dir = r.status === 0 ? r.stdout.split(`
+`).map((l) => l.trim()).filter((l) => l.startsWith("/")).pop() : undefined;
+      if (dir)
+        stores.set(key, dir);
+      return dir ?? null;
+    } catch {
+      return null;
+    }
+  })();
+  return sessionReadDirs({
+    mainCheckout: common ? mainCheckoutOf(common, cwd) : null,
+    worktrees,
+    pnpmStore,
+    cwd
+  });
+}
 var LENT_NEEDS_SANDBOX = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
 function lenderHome(accountHome, lentBy) {
   return isAbsolute3(lentBy) ? resolve9(lentBy) : join25(dirname16(accountHome), lentBy);
@@ -21142,7 +21286,7 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.68"
+    cliVersion: "0.1.70"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -23020,7 +23164,7 @@ function engineClient2(o, org, breaker) {
       ...src,
       ...breaker ? { fetchFn: breaker.fetch } : {},
       timeoutMs: ENGINE_TIMEOUT_MS2,
-      version: "0.1.68"
+      version: "0.1.70"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -23118,6 +23262,7 @@ function engineDeps2(o, flags, source, runner, stateName) {
   const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve11(cwd, d));
   const { branch, prTitle } = flags;
   const hooksDir = join28(stateDir, "hooks");
+  const pnpmStores = new Map;
   const permissionMark = (name) => join28(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
@@ -23141,7 +23286,7 @@ function engineDeps2(o, flags, source, runner, stateName) {
     ...flags.strictMcp ? { strictMcp: true } : {},
     ...flags.sandbox ? {
       sandbox: true,
-      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
+      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow, readOnly) => {
         const gitCommonDir = gitCommonDirOf2(exec, cwd);
         const dir = join28(stateDir, "sandbox");
         mkdirSync21(dir, { recursive: true, mode: 448 });
@@ -23153,6 +23298,12 @@ function engineDeps2(o, flags, source, runner, stateName) {
         walls.permissions.allow = [
           ...new Set([...walls.permissions.allow, ...allow ?? []])
         ];
+        walls.permissions.deny = [
+          ...new Set([
+            ...walls.permissions.deny,
+            ...readOnlyDenyRules(readOnlyDirs(readOnly ?? [], cwd, [gitCommonDir]))
+          ])
+        ];
         const settings = withHook(name, { ...walls });
         writeFileSync20(p, `${JSON.stringify(settings, null, 2)}
 `, { mode: 384 });
@@ -23160,23 +23311,22 @@ function engineDeps2(o, flags, source, runner, stateName) {
         return { settingsFile: p, gitCommonDir };
       })
     } : {},
-    writeHookSettings: (name, allow) => {
+    writeHookSettings: (name, allow, readOnly) => {
       mkdirSync21(hooksDir, { recursive: true, mode: 448 });
       const p = join28(hooksDir, `${name}.json`);
-      const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
+      const deny = readOnlyDenyRules(readOnly ?? []);
+      const permissions = {
+        ...allow?.length ? { allow: [...allow] } : {},
+        ...deny.length ? { deny } : {}
+      };
+      const base = Object.keys(permissions).length ? { permissions } : {};
       writeFileSync20(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
       chmodSync6(p, 384);
       return p;
     },
     permissionMark,
-    mainCheckoutOf: o.mainCheckoutOf ?? ((cwd) => {
-      try {
-        return mainCheckoutOf(gitCommonDirOf2(exec, cwd), cwd);
-      } catch {
-        return null;
-      }
-    }),
+    readDirsOf: o.readDirsOf ?? ((dir) => engineReadDirs2(exec, dir, exists, pnpmStores)),
     ...branch ? { branchOf: (claim) => branchFor(branch, claim) } : {},
     ...prTitle ? { prTitleOf: (claim) => prTitleFor(prTitle, claim) } : {},
     now: o.now ?? Date.now,
@@ -23278,6 +23428,52 @@ function gitCommonDirOf2(exec, cwd) {
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
   return resolve11(cwd, dir);
 }
+function worktreeListPaths2(porcelain) {
+  return porcelain.split(/\n\s*\n/).map((block) => block.split(`
+`).map((l) => l.trim())).filter((lines) => !lines.some((l) => l === "bare" || l.startsWith("prunable"))).flatMap((lines) => {
+    const wt = lines.find((l) => l.startsWith("worktree "));
+    return wt ? [wt.slice("worktree ".length)] : [];
+  });
+}
+var PNPM_STORE_TIMEOUT_MS2 = 1e4;
+function engineReadDirs2(exec, cwd, exists, stores) {
+  let common = null;
+  try {
+    common = gitCommonDirOf2(exec, cwd);
+  } catch {}
+  const worktrees = (() => {
+    try {
+      const r = exec("git", ["-C", cwd, "worktree", "list", "--porcelain"]);
+      return r.status === 0 ? worktreeListPaths2(r.stdout) : [];
+    } catch {
+      return [];
+    }
+  })();
+  const pnpmStore = (() => {
+    try {
+      if (!exists(join28(cwd, "pnpm-lock.yaml")))
+        return null;
+      const key = common ?? cwd;
+      const known = stores.get(key);
+      if (known)
+        return known;
+      const r = exec("pnpm", ["store", "path"], { cwd, timeoutMs: PNPM_STORE_TIMEOUT_MS2 });
+      const dir = r.status === 0 ? r.stdout.split(`
+`).map((l) => l.trim()).filter((l) => l.startsWith("/")).pop() : undefined;
+      if (dir)
+        stores.set(key, dir);
+      return dir ?? null;
+    } catch {
+      return null;
+    }
+  })();
+  return sessionReadDirs({
+    mainCheckout: common ? mainCheckoutOf(common, cwd) : null,
+    worktrees,
+    pnpmStore,
+    cwd
+  });
+}
 function sandboxRefusal(flags) {
   if (flags.lentBy && !flags.sandbox)
     return LENT_NEEDS_SANDBOX2;
@@ -23361,7 +23557,7 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.68"
+    cliVersion: "0.1.70"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -24582,7 +24778,8 @@ function engineStatus(i) {
       ...opt("leaseUntil", iso2(r.leaseUntil)),
       ...opt("runId", r.runId),
       ...opt("parked", r.parked?.question),
-      ...opt("answerer", answererOf(r))
+      ...opt("answerer", answererOf(r)),
+      ...opt("atPrompt", r.atPrompt ? { since: iso2(r.atPrompt.since) ?? new Date(0).toISOString(), text: r.atPrompt.text } : undefined)
     });
   }
   return {
@@ -24639,7 +24836,7 @@ function statusLines(s, now) {
   }
   lines.push(`running ${s.running.length}`);
   for (const r of s.running)
-    lines.push(`  ${r.item}/${r.node}  ${r.title}  · ${r.answerer ? `parked, the decider answers${r.answerer.model ? ` on ${r.answerer.model}` : ""}${r.answerer.effort ? ` · ${r.answerer.effort}` : ""}` : r.parked ? "parked, waiting for your answer" : `${r.kind === "mock" ? "drawing a mock · " : ""}${ago(r.startedAt)}`} · watch: ${r.watch}`);
+    lines.push(`  ${r.item}/${r.node}  ${r.title}  · ${r.answerer ? `parked, the decider answers${r.answerer.model ? ` on ${r.answerer.model}` : ""}${r.answerer.effort ? ` · ${r.answerer.effort}` : ""}` : r.parked ? "parked, waiting for your answer" : r.atPrompt ? `at a prompt · ${ago(r.atPrompt.since)}` : `${r.kind === "mock" ? "drawing a mock · " : ""}${ago(r.startedAt)}`} · watch: ${r.watch}`);
   lines.push(`following ${s.following.length}`);
   for (const f of s.following) {
     lines.push(`  ${f.item}/${f.node}  ${f.pr}${f.checks ? `  checks ${f.checks}` : ""}${f.review ? ` · ${f.review}` : ""}${f.mergeable ? " · ready for your merge" : ""}${f.queued ? " · queued to merge" : f.autoMerge ? " · merge when ready" : ""}`);
@@ -25472,7 +25669,7 @@ function contextFor(deps) {
     ...src,
     fetchFn: deps.fetchFn,
     timeoutMs: deps.timeoutMs,
-    version: "0.1.68"
+    version: "0.1.70"
   }), deps.home, now) : null;
   return {
     channel: "code",
@@ -30288,16 +30485,20 @@ function readOrgInfo(json) {
   const org = isObj7(json.org) ? str16(json.org.slug) : str16(json.org);
   if (!org)
     return "no org";
-  const environments = [];
-  for (const e of Array.isArray(json.environments) ? json.environments : []) {
+  const bySlug = new Map;
+  for (const e of Array.isArray(json.envs) ? json.envs : []) {
     if (!isObj7(e) || !str16(e.slug))
       continue;
-    const env = { slug: str16(e.slug).toLowerCase(), production: e.production === true };
+    const slug = str16(e.slug).toLowerCase();
+    const env = bySlug.get(slug) ?? { slug, production: false };
+    if (e.production === true)
+      env.production = true;
     const ld = str16(e.launchDarklyEnv);
-    if (ld)
+    if (ld && !env.launchDarklyEnv)
       env.launchDarklyEnv = ld;
-    environments.push(env);
+    bySlug.set(slug, env);
   }
+  const environments = [...bySlug.values()];
   const strings = (v) => Array.isArray(v) ? v.map((x) => str16(x)).filter(Boolean) : [];
   return {
     org,
@@ -30337,17 +30538,28 @@ function pickLdProject(given, info) {
   };
 }
 var num9 = (v) => typeof v === "number" && Number.isFinite(v) ? v : 0;
-var countsOf = (json) => {
-  const c = { inserted: 0, existing: 0, skipped: 0 };
+function countsOf(json) {
+  const c = { inserted: 0, existing: 0, skipped: 0, pulls: 0, skips: [] };
   if (!isObj7(json))
     return c;
-  const parts = ["inserted", "existing", "skipped"].some((k) => typeof json[k] === "number") ? [json] : [json.deploys, json.flags].filter(isObj7);
-  for (const p of parts) {
-    c.inserted += num9(p.inserted);
-    c.existing += num9(p.existing);
-    c.skipped += Array.isArray(p.skipped) ? p.skipped.length : num9(p.skipped);
+  const rows = (v) => isObj7(v) ? num9(v.deploys) + num9(v.flags) : num9(v);
+  c.inserted = rows(json.inserted);
+  c.existing = rows(json.existing);
+  c.skipped = rows(json.skipped);
+  c.pulls = isObj7(json.inserted) ? num9(json.inserted.pulls) : num9(json.pulls);
+  for (const s of Array.isArray(json.skips) ? json.skips : []) {
+    const w = isObj7(s) ? str16(s.why) : "";
+    const count = isObj7(s) ? num9(s.count) : 0;
+    if (w && count > 0)
+      c.skips.push({ why: w, count });
   }
   return c;
+}
+var mergeSkips = (...lists) => {
+  const by = new Map;
+  for (const s of lists.flat())
+    by.set(s.why, (by.get(s.why) ?? 0) + s.count);
+  return [...by.entries()].map(([w, count]) => ({ why: w, count })).sort((a, b) => b.count - a.count);
 };
 var why3 = (json, status) => isObj7(json) && typeof json.error === "string" ? json.error : `HTTP ${status}`;
 async function importSleuth(o) {
@@ -30506,7 +30718,9 @@ async function importSleuth(o) {
     posted: 0,
     inserted: 0,
     existing: 0,
-    skipped
+    skipped,
+    prs: 0,
+    serverSkips: []
   };
   o.onMapping?.(result);
   for (let b = 0;b < result.batches; b++) {
@@ -30531,6 +30745,8 @@ async function importSleuth(o) {
     result.inserted += n.inserted;
     result.existing += n.existing;
     result.skipped += n.skipped;
+    result.prs += n.pulls;
+    result.serverSkips = mergeSkips(result.serverSkips, n.skips);
     if ((b + 1) % 10 === 0 || b + 1 === result.batches)
       log(`  ${at} · ${result.posted} rows sent`);
   }
@@ -30555,6 +30771,18 @@ function historyLine(r) {
     return `  PR history: ${missing} merged PRs without a first commit — SLEDS is reading them from GitHub, paced; lead time fills in as it goes`;
   return missing ? `  PR history: ${missing} merged PRs without a first commit — not reading them: connect GitHub (Settings › Integrations), then re-run` : "  PR history: every merged PR has its first commit";
 }
+function summaryLines(r) {
+  const tail = `already there ${r.existing}, skipped ${r.skipped}`;
+  const out = [
+    r.dryRun ? `  would write ~${r.inserted}, ${tail} · ~${r.prs} PRs — run again without --dry-run to write` : `  wrote ${r.inserted}, ${tail} · ${r.prs} PRs`
+  ];
+  if (r.serverSkips.length) {
+    out.push("", "  server skipped, and why:");
+    for (const s of r.serverSkips)
+      out.push(`    ${String(s.count).padStart(6)}  ${s.why}`);
+  }
+  return out;
+}
 function mappingTable(r) {
   const head = [
     "Sleuth deployment",
@@ -31162,7 +31390,8 @@ var importCmd = async (o, { words, flags, all }) => {
     log(JSON.stringify(result));
     return code;
   }
-  log(dryRun ? `  would write ${result.inserted}, already there ${result.existing}, skipped ${result.skipped} — run again without --dry-run to write` : `  wrote ${result.inserted}, already there ${result.existing}, skipped ${result.skipped}`);
+  for (const l of summaryLines(result))
+    log(l);
   const history = historyLine(result);
   if (history)
     (result.historyError ? error : log)(history);
@@ -32040,7 +32269,7 @@ var realPidAlive4 = (pid) => {
 };
 function machineClient(home, env) {
   const src = meterSource(home, undefined, { env });
-  return src ? fetchClient({ ...src, version: "0.1.68" }) : null;
+  return src ? fetchClient({ ...src, version: "0.1.70" }) : null;
 }
 async function noteAnswer2(home, a, now) {
   try {
@@ -32991,7 +33220,7 @@ var main = async (argv) => {
     now: Date.now(),
     stderr: (line) => console.error(line),
     isTTY: !!process.stderr.isTTY,
-    version: "0.1.68"
+    version: "0.1.70"
   });
   switch (cmd) {
     case "update":
@@ -33255,7 +33484,7 @@ ${renderHelpText(argv[1])}`);
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.68");
+      console.log("sleds 0.1.70");
       return 0;
     default:
       console.error(`unknown command: ${cmd}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sleds/cli",
-  "version": "0.1.68",
+  "version": "0.1.70",
   "description": "SLEDS CLI — the cost and limits of AI agent work, decided at the wall. Point Claude Code at a SLEDS proxy; estimate before you run; hold, switch model, or run overnight when you hit a limit.",
   "license": "UNLICENSED",
   "type": "module",