@tekmidian/pai 0.39.1 → 0.40.0

package/dist/query-feedback-CGcEiGtY.mjs

@@ -0,0 +1,3 @@
+import { t as saveQueryResult } from "./query-feedback-DZfjI34w.mjs";
+
+export { saveQueryResult };

package/dist/{query-feedback-BV4CcxqS.mjs → query-feedback-DZfjI34w.mjs}

@@ -71,4 +71,4 @@ function saveQueryResult(record) {
 
 //#endregion
 export { saveQueryResult as t };
-//# sourceMappingURL=query-feedback-BV4CcxqS.mjs.map
+//# sourceMappingURL=query-feedback-DZfjI34w.mjs.map

package/dist/{query-feedback-BV4CcxqS.mjs.map → query-feedback-DZfjI34w.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"query-feedback-BV4CcxqS.mjs","names":[],"sources":["../src/zettelkasten/query-feedback.ts"],"sourcesContent":["/**\n * Query feedback loop — persist search queries and results as markdown files.\n *\n * When memory_search or zettel_converse returns results, the query + result\n * metadata is saved to ~/.config/pai/queries/ as a markdown file with YAML\n * frontmatter. The daemon indexer picks these up on the next cycle and indexes\n * them into federation.db, creating a self-reinforcing feedback loop: past\n * queries become searchable context for future queries.\n */\n\nimport { existsSync, mkdirSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\n\nexport interface QueryRecord {\n  /** The original query string. */\n  query: string;\n  /** Timestamp of the query. */\n  timestamp: number;\n  /** Tool that produced the result: 'memory_search' | 'zettel_converse'. */\n  source: string;\n  /** Slugs of the top result paths (for linking back). */\n  sourceSlugs: string[];\n  /** Preview of the answer/result (first 500 chars). */\n  answerPreview: string;\n  /** Number of results returned. */\n  resultCount: number;\n}\n\nconst QUERIES_DIR = join(homedir(), \".config\", \"pai\", \"queries\");\n\n/**\n * Ensure the queries directory exists.\n */\nfunction ensureQueriesDir(): void {\n  if (!existsSync(QUERIES_DIR)) {\n    mkdirSync(QUERIES_DIR, { recursive: true });\n  }\n}\n\n/**\n * Generate a filename-safe slug from a query string.\n */\nfunction querySlug(query: string, timestamp: number): string {\n  const slug = query\n    .toLowerCase()\n    .replace(/[^a-z0-9\\s]/g, \"\")\n    .replace(/\\s+/g, \"-\")\n    .slice(0, 60);\n  const ts = new Date(timestamp).toISOString().slice(0, 10);\n  const shortHash = timestamp.toString(36).slice(-4);\n  return `${ts}-${slug}-${shortHash}`;\n}\n\n/**\n * Save a query + result record as a markdown file with YAML frontmatter.\n *\n * The file is written to ~/.config/pai/queries/ and will be picked up by\n * the daemon indexer on the next cycle.\n */\nexport function saveQueryResult(record: QueryRecord): string | null {\n  try {\n    ensureQueriesDir();\n\n    const filename = querySlug(record.query, record.timestamp) + \".md\";\n    const filepath = join(QUERIES_DIR, filename);\n\n    // Don't overwrite if the exact file already exists\n    if (existsSync(filepath)) return filepath;\n\n    const frontmatter = [\n      \"---\",\n      `query: \"${record.query.replace(/\"/g, '\\\\\"')}\"`,\n      `timestamp: ${new Date(record.timestamp).toISOString()}`,\n      `source: ${record.source}`,\n      `result_count: ${record.resultCount}`,\n      `source_slugs:`,\n      ...record.sourceSlugs.map((s) => `  - \"${s}\"`),\n      \"---\",\n    ].join(\"\\n\");\n\n    const body = [\n      \"\",\n      `# Query: ${record.query}`,\n      \"\",\n      `**Source:** ${record.source}  `,\n      `**Date:** ${new Date(record.timestamp).toISOString().slice(0, 19).replace(\"T\", \" \")}  `,\n      `**Results:** ${record.resultCount}`,\n      \"\",\n      \"## Answer Preview\",\n      \"\",\n      record.answerPreview,\n      \"\",\n      \"## Source Paths\",\n      \"\",\n      ...record.sourceSlugs.map((s) => `- \\`${s}\\``),\n      \"\",\n    ].join(\"\\n\");\n\n    writeFileSync(filepath, frontmatter + body, \"utf8\");\n    return filepath;\n  } catch {\n    // Non-critical — don't crash the parent tool if query logging fails\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA6BA,MAAM,cAAc,KAAK,SAAS,EAAE,WAAW,OAAO,UAAU;;;;AAKhE,SAAS,mBAAyB;AAChC,KAAI,CAAC,WAAW,YAAY,CAC1B,WAAU,aAAa,EAAE,WAAW,MAAM,CAAC;;;;;AAO/C,SAAS,UAAU,OAAe,WAA2B;CAC3D,MAAM,OAAO,MACV,aAAa,CACb,QAAQ,gBAAgB,GAAG,CAC3B,QAAQ,QAAQ,IAAI,CACpB,MAAM,GAAG,GAAG;AAGf,QAAO,GAFI,IAAI,KAAK,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAE5C,GAAG,KAAK,GADH,UAAU,SAAS,GAAG,CAAC,MAAM,GAAG;;;;;;;;AAUpD,SAAgB,gBAAgB,QAAoC;AAClE,KAAI;AACF,oBAAkB;EAGlB,MAAM,WAAW,KAAK,aADL,UAAU,OAAO,OAAO,OAAO,UAAU,GAAG,MACjB;AAG5C,MAAI,WAAW,SAAS,CAAE,QAAO;AA+BjC,gBAAc,UA7BM;GAClB;GACA,WAAW,OAAO,MAAM,QAAQ,MAAM,OAAM,CAAC;GAC7C,cAAc,IAAI,KAAK,OAAO,UAAU,CAAC,aAAa;GACtD,WAAW,OAAO;GAClB,iBAAiB,OAAO;GACxB;GACA,GAAG,OAAO,YAAY,KAAK,MAAM,QAAQ,EAAE,GAAG;GAC9C;GACD,CAAC,KAAK,KAAK,GAEC;GACX;GACA,YAAY,OAAO;GACnB;GACA,eAAe,OAAO,OAAO;GAC7B,aAAa,IAAI,KAAK,OAAO,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC;GACrF,gBAAgB,OAAO;GACvB;GACA;GACA;GACA,OAAO;GACP;GACA;GACA;GACA,GAAG,OAAO,YAAY,KAAK,MAAM,OAAO,EAAE,IAAI;GAC9C;GACD,CAAC,KAAK,KAAK,EAEgC,OAAO;AACnD,SAAO;SACD;AAEN,SAAO"}
+{"version":3,"file":"query-feedback-DZfjI34w.mjs","names":[],"sources":["../src/zettelkasten/query-feedback.ts"],"sourcesContent":["/**\n * Query feedback loop — persist search queries and results as markdown files.\n *\n * When memory_search or zettel_converse returns results, the query + result\n * metadata is saved to ~/.config/pai/queries/ as a markdown file with YAML\n * frontmatter. The daemon indexer picks these up on the next cycle and indexes\n * them into federation.db, creating a self-reinforcing feedback loop: past\n * queries become searchable context for future queries.\n */\n\nimport { existsSync, mkdirSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\n\nexport interface QueryRecord {\n  /** The original query string. */\n  query: string;\n  /** Timestamp of the query. */\n  timestamp: number;\n  /** Tool that produced the result: 'memory_search' | 'zettel_converse'. */\n  source: string;\n  /** Slugs of the top result paths (for linking back). */\n  sourceSlugs: string[];\n  /** Preview of the answer/result (first 500 chars). */\n  answerPreview: string;\n  /** Number of results returned. */\n  resultCount: number;\n}\n\nconst QUERIES_DIR = join(homedir(), \".config\", \"pai\", \"queries\");\n\n/**\n * Ensure the queries directory exists.\n */\nfunction ensureQueriesDir(): void {\n  if (!existsSync(QUERIES_DIR)) {\n    mkdirSync(QUERIES_DIR, { recursive: true });\n  }\n}\n\n/**\n * Generate a filename-safe slug from a query string.\n */\nfunction querySlug(query: string, timestamp: number): string {\n  const slug = query\n    .toLowerCase()\n    .replace(/[^a-z0-9\\s]/g, \"\")\n    .replace(/\\s+/g, \"-\")\n    .slice(0, 60);\n  const ts = new Date(timestamp).toISOString().slice(0, 10);\n  const shortHash = timestamp.toString(36).slice(-4);\n  return `${ts}-${slug}-${shortHash}`;\n}\n\n/**\n * Save a query + result record as a markdown file with YAML frontmatter.\n *\n * The file is written to ~/.config/pai/queries/ and will be picked up by\n * the daemon indexer on the next cycle.\n */\nexport function saveQueryResult(record: QueryRecord): string | null {\n  try {\n    ensureQueriesDir();\n\n    const filename = querySlug(record.query, record.timestamp) + \".md\";\n    const filepath = join(QUERIES_DIR, filename);\n\n    // Don't overwrite if the exact file already exists\n    if (existsSync(filepath)) return filepath;\n\n    const frontmatter = [\n      \"---\",\n      `query: \"${record.query.replace(/\"/g, '\\\\\"')}\"`,\n      `timestamp: ${new Date(record.timestamp).toISOString()}`,\n      `source: ${record.source}`,\n      `result_count: ${record.resultCount}`,\n      `source_slugs:`,\n      ...record.sourceSlugs.map((s) => `  - \"${s}\"`),\n      \"---\",\n    ].join(\"\\n\");\n\n    const body = [\n      \"\",\n      `# Query: ${record.query}`,\n      \"\",\n      `**Source:** ${record.source}  `,\n      `**Date:** ${new Date(record.timestamp).toISOString().slice(0, 19).replace(\"T\", \" \")}  `,\n      `**Results:** ${record.resultCount}`,\n      \"\",\n      \"## Answer Preview\",\n      \"\",\n      record.answerPreview,\n      \"\",\n      \"## Source Paths\",\n      \"\",\n      ...record.sourceSlugs.map((s) => `- \\`${s}\\``),\n      \"\",\n    ].join(\"\\n\");\n\n    writeFileSync(filepath, frontmatter + body, \"utf8\");\n    return filepath;\n  } catch {\n    // Non-critical — don't crash the parent tool if query logging fails\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA6BA,MAAM,cAAc,KAAK,SAAS,EAAE,WAAW,OAAO,UAAU;;;;AAKhE,SAAS,mBAAyB;AAChC,KAAI,CAAC,WAAW,YAAY,CAC1B,WAAU,aAAa,EAAE,WAAW,MAAM,CAAC;;;;;AAO/C,SAAS,UAAU,OAAe,WAA2B;CAC3D,MAAM,OAAO,MACV,aAAa,CACb,QAAQ,gBAAgB,GAAG,CAC3B,QAAQ,QAAQ,IAAI,CACpB,MAAM,GAAG,GAAG;AAGf,QAAO,GAFI,IAAI,KAAK,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAE5C,GAAG,KAAK,GADH,UAAU,SAAS,GAAG,CAAC,MAAM,GAAG;;;;;;;;AAUpD,SAAgB,gBAAgB,QAAoC;AAClE,KAAI;AACF,oBAAkB;EAGlB,MAAM,WAAW,KAAK,aADL,UAAU,OAAO,OAAO,OAAO,UAAU,GAAG,MACjB;AAG5C,MAAI,WAAW,SAAS,CAAE,QAAO;AA+BjC,gBAAc,UA7BM;GAClB;GACA,WAAW,OAAO,MAAM,QAAQ,MAAM,OAAM,CAAC;GAC7C,cAAc,IAAI,KAAK,OAAO,UAAU,CAAC,aAAa;GACtD,WAAW,OAAO;GAClB,iBAAiB,OAAO;GACxB;GACA,GAAG,OAAO,YAAY,KAAK,MAAM,QAAQ,EAAE,GAAG;GAC9C;GACD,CAAC,KAAK,KAAK,GAEC;GACX;GACA,YAAY,OAAO;GACnB;GACA,eAAe,OAAO,OAAO;GAC7B,aAAa,IAAI,KAAK,OAAO,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC;GACrF,gBAAgB,OAAO;GACvB;GACA;GACA;GACA,OAAO;GACP;GACA;GACA;GACA,GAAG,OAAO,YAAY,KAAK,MAAM,OAAO,EAAE,IAAI;GAC9C;GACD,CAAC,KAAK,KAAK,EAEgC,OAAO;AACnD,SAAO;SACD;AAEN,SAAO"}

package/dist/router-CAtyVQud.mjs

@@ -0,0 +1,3 @@
+import { t as routeNotification } from "./router-DHracTUC.mjs";
+
+export { routeNotification };

package/dist/{router-DcHKnEPa.mjs → router-DHracTUC.mjs}

@@ -246,4 +246,4 @@ async function routeNotification(payload, config) {
 
 //#endregion
 export { routeNotification as t };
-//# sourceMappingURL=router-DcHKnEPa.mjs.map
+//# sourceMappingURL=router-DHracTUC.mjs.map

package/dist/{router-DcHKnEPa.mjs.map → router-DHracTUC.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"router-DcHKnEPa.mjs","names":[],"sources":["../src/notifications/providers/ntfy.ts","../src/notifications/providers/whatsapp.ts","../src/notifications/providers/macos.ts","../src/notifications/providers/cli.ts","../src/notifications/router.ts"],"sourcesContent":["/**\n * ntfy.ts — ntfy.sh notification provider\n *\n * Sends notifications to a configured ntfy.sh topic via HTTP.\n */\n\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class NtfyProvider implements NotificationProvider {\n  readonly channelId = \"ntfy\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.ntfy;\n    if (!cfg.enabled || !cfg.url) return false;\n\n    try {\n      const headers: Record<string, string> = {\n        \"Content-Type\": \"text/plain; charset=utf-8\",\n      };\n\n      if (payload.title) {\n        headers[\"Title\"] = payload.title;\n      }\n\n      if (cfg.priority && cfg.priority !== \"default\") {\n        headers[\"Priority\"] = cfg.priority;\n      }\n\n      const response = await fetch(cfg.url, {\n        method: \"POST\",\n        headers,\n        body: payload.message,\n      });\n\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n","/**\n * whatsapp.ts — WhatsApp notification provider (via the AIBroker hub)\n *\n * Sends through AIBroker's hub socket, which proxies to the whazaa adapter.\n *\n * It used to dial /tmp/whazaa.sock and call a method named `whatsapp_send`.\n * Both were wrong, and had been since AIBroker became the runtime hub and\n * adapters became thin transports: Whazaa no longer owns an IPC socket of its\n * own (it registers with the hub, currently at /tmp/whazaa-watcher.sock, which\n * is the hub's business and not ours), and `whatsapp_send` is an MCP TOOL name\n * — the adapter itself takes `send` and `tts`.\n *\n * So every WhatsApp notification failed. Silently, because a failed channel\n * writes one line to stderr and the router has no fallback: on 2026-08-04 four\n * task-bus escalations about a job that had not run for nine hours reached\n * /tmp/pai-scheduler.log and nowhere else, while the user had no idea.\n *\n * Routing through the hub rather than at the adapter directly is deliberate:\n * the hub knows where its adapters are, and that is exactly the knowledge whose\n * absence broke this. Connect-per-call, no persistent state.\n */\n\nimport { connect } from \"node:net\";\nimport { randomUUID } from \"node:crypto\";\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\n/**\n * AIBroker's hub socket.\n *\n * Hardcoded rather than imported: PAI must not depend on AIBroker. This is a\n * protocol constant between them, like the agent mark in tasks/poller.ts.\n */\nconst HUB_SOCKET = \"/tmp/aibroker.sock\";\nconst HUB_TIMEOUT_MS = 10_000;\n\n/**\n * Send a single IPC call to the hub.\n * Returns true on success, false if the hub is not available or errors.\n */\nfunction callHub(\n  method: string,\n  params: Record<string, unknown>\n): Promise<boolean> {\n  return new Promise((resolve) => {\n    let done = false;\n    let buffer = \"\";\n    let timer: ReturnType<typeof setTimeout> | null = null;\n\n    function finish(ok: boolean): void {\n      if (done) return;\n      done = true;\n      if (timer) { clearTimeout(timer); timer = null; }\n      try { socket?.destroy(); } catch { /* ignore */ }\n      resolve(ok);\n    }\n\n    const socket = connect(HUB_SOCKET, () => {\n      const request = {\n        jsonrpc: \"2.0\",\n        id: randomUUID(),\n        method,\n        params,\n      };\n      socket.write(JSON.stringify(request) + \"\\n\");\n    });\n\n    socket.on(\"data\", (chunk: Buffer) => {\n      buffer += chunk.toString();\n      const nl = buffer.indexOf(\"\\n\");\n      if (nl === -1) return;\n      try {\n        const resp = JSON.parse(buffer.slice(0, nl)) as { error?: unknown; ok?: boolean };\n        // The hub reports failure as {ok:false,error}; JSON-RPC reports {error}.\n        // Checking only `error` counted an {ok:false} reply as a delivered\n        // notification, which is the one mistake this file must never make.\n        finish(!resp.error && resp.ok !== false);\n      } catch {\n        finish(false);\n      }\n    });\n\n    socket.on(\"error\", () => finish(false));\n    socket.on(\"end\", () => finish(false));\n\n    timer = setTimeout(() => finish(false), HUB_TIMEOUT_MS);\n  });\n}\n\nexport class WhatsAppProvider implements NotificationProvider {\n  readonly channelId = \"whatsapp\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.whatsapp;\n    if (!cfg.enabled) return false;\n\n    const isVoiceMode = config.mode === \"voice\" || config.channels.voice.enabled;\n    const asVoice = isVoiceMode && config.mode === \"voice\";\n\n    // The adapter's own vocabulary is `send` and `tts`, reached through the\n    // hub's `adapter_call`. `whatsapp_send` — what this used to ask for — is the\n    // name of the MCP TOOL that wraps it, and the adapter has never answered to\n    // it. The two vocabularies are easy to confuse because the MCP tool exists\n    // and works; it just is not this interface.\n    const inner: Record<string, unknown> = asVoice\n      ? { text: payload.message, voice: config.channels.voice.voiceName ?? \"bm_george\" }\n      : { message: payload.message };\n\n    if (cfg.recipient) {\n      // `send` addresses by `recipient`, `tts` by `jid` — same destination,\n      // different key, per the adapter's interface.\n      inner[asVoice ? \"jid\" : \"recipient\"] = cfg.recipient;\n    }\n\n    return callHub(\"adapter_call\", {\n      adapter: \"whazaa\",\n      method: asVoice ? \"tts\" : \"send\",\n      params: inner,\n    });\n  }\n}\n","/**\n * macos.ts — macOS notification provider\n *\n * Uses the `osascript` command to display a macOS system notification.\n * Non-blocking: spawns the process and returns success without waiting.\n */\n\nimport { spawn } from \"node:child_process\";\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class MacOsProvider implements NotificationProvider {\n  readonly channelId = \"macos\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.macos;\n    if (!cfg.enabled) return false;\n\n    try {\n      const title = payload.title ?? \"PAI\";\n      // Escape single quotes in title and message for AppleScript\n      const safeTitle = title.replace(/'/g, \"\\\\'\");\n      const safeMessage = payload.message.replace(/'/g, \"\\\\'\");\n\n      const script = `display notification \"${safeMessage}\" with title \"${safeTitle}\"`;\n\n      return new Promise((resolve) => {\n        const child = spawn(\"osascript\", [\"-e\", script], {\n          detached: true,\n          stdio: \"ignore\",\n        });\n        child.unref();\n\n        // Give the process a moment to start, then assume success.\n        // osascript is always present on macOS.\n        child.on(\"error\", () => resolve(false));\n\n        // Resolve after a short timeout — osascript exits quickly\n        setTimeout(() => resolve(true), 200);\n      });\n    } catch {\n      return false;\n    }\n  }\n}\n","/**\n * cli.ts — CLI notification provider\n *\n * Writes notifications to the PAI daemon log (stderr).\n * Always succeeds — it's the fallback channel.\n */\n\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class CliProvider implements NotificationProvider {\n  readonly channelId = \"cli\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    _config: NotificationConfig\n  ): Promise<boolean> {\n    const prefix = `[pai-notify:${payload.event}]`;\n    const title = payload.title ? ` ${payload.title}:` : \"\";\n    process.stderr.write(`${prefix}${title} ${payload.message}\\n`);\n    return true;\n  }\n}\n","/**\n * router.ts — Notification router\n *\n * Routes notification events to the appropriate channels based on the\n * current mode and per-event routing config.\n *\n * Channel providers are instantiated lazily and cached.\n */\n\nimport type {\n  NotificationPayload,\n  NotificationConfig,\n  NotificationProvider,\n  ChannelId,\n  SendResult,\n  NotificationMode,\n} from \"./types.js\";\nimport { NtfyProvider } from \"./providers/ntfy.js\";\nimport { WhatsAppProvider } from \"./providers/whatsapp.js\";\nimport { MacOsProvider } from \"./providers/macos.js\";\nimport { CliProvider } from \"./providers/cli.js\";\n\n// ---------------------------------------------------------------------------\n// Provider registry (singletons — stateless, safe to reuse)\n// ---------------------------------------------------------------------------\n\nconst PROVIDERS: Record<ChannelId, NotificationProvider> = {\n  ntfy:      new NtfyProvider(),\n  whatsapp:  new WhatsAppProvider(),\n  macos:     new MacOsProvider(),\n  voice:     new WhatsAppProvider(), // Voice uses WhatsApp TTS; handled in WhatsAppProvider\n  cli:       new CliProvider(),\n};\n\n// ---------------------------------------------------------------------------\n// Channel resolution\n// ---------------------------------------------------------------------------\n\n/**\n * Given the current config, resolve which channels should receive a\n * notification for the given event type.\n *\n * Mode overrides:\n *   \"off\"       → no channels\n *   \"auto\"      → use routing table, filtered by enabled channels\n *   \"voice\"     → whatsapp (TTS enabled in provider)\n *   \"whatsapp\"  → whatsapp\n *   \"ntfy\"      → ntfy\n *   \"macos\"     → macos\n *   \"cli\"       → cli\n */\nfunction resolveChannels(\n  config: NotificationConfig,\n  event: NotificationPayload[\"event\"]\n): ChannelId[] {\n  const { mode, channels, routing } = config;\n\n  if (mode === \"off\") return [];\n\n  // Non-auto modes: force a single channel\n  const modeToChannel: Partial<Record<NotificationMode, ChannelId>> = {\n    voice:     \"whatsapp\",  // WhatsAppProvider checks mode === \"voice\" for TTS\n    whatsapp:  \"whatsapp\",\n    ntfy:      \"ntfy\",\n    macos:     \"macos\",\n    cli:       \"cli\",\n  };\n\n  if (mode !== \"auto\") {\n    const ch = modeToChannel[mode];\n    if (!ch) return [];\n    // Check the channel is enabled\n    const cfg = channels[ch];\n    if (cfg && !cfg.enabled) return [ch]; // Still send — mode override bypasses enabled check\n    return [ch];\n  }\n\n  // Auto mode: use routing table, filter to enabled channels\n  const candidates = routing[event] ?? [];\n  return candidates.filter((ch) => {\n    const cfg = channels[ch];\n    // \"voice\" channel is virtual — it overlaps with whatsapp.\n    // Skip \"voice\" as an independent channel; voice is handled by checking config.mode.\n    if (ch === \"voice\") return false;\n    return cfg?.enabled === true;\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Router\n// ---------------------------------------------------------------------------\n\n/**\n * Route a notification to the appropriate channels.\n *\n * Sends to all resolved channels in parallel.\n * Individual channel failures are non-fatal and logged to stderr.\n *\n * @param payload  The notification to send\n * @param config   The current notification config (from daemon state)\n */\nexport async function routeNotification(\n  payload: NotificationPayload,\n  config: NotificationConfig\n): Promise<SendResult> {\n  const channels = resolveChannels(config, payload.event);\n\n  if (channels.length === 0) {\n    return {\n      channelsAttempted: [],\n      channelsSucceeded: [],\n      channelsFailed: [],\n      mode: config.mode,\n    };\n  }\n\n  const results = await Promise.allSettled(\n    channels.map(async (ch) => {\n      const provider = PROVIDERS[ch];\n      const ok = await provider.send(payload, config);\n      if (!ok) {\n        process.stderr.write(\n          `[pai-notify] Channel ${ch} failed for event ${payload.event}\\n`\n        );\n      }\n      return { ch, ok };\n    })\n  );\n\n  const succeeded: ChannelId[] = [];\n  const failed: ChannelId[] = [];\n\n  for (const r of results) {\n    if (r.status === \"fulfilled\") {\n      if (r.value.ok) {\n        succeeded.push(r.value.ch);\n      } else {\n        failed.push(r.value.ch);\n      }\n    } else {\n      // Provider threw — treat as failure\n      failed.push(channels[results.indexOf(r)]);\n    }\n  }\n\n  return {\n    channelsAttempted: channels,\n    channelsSucceeded: succeeded,\n    channelsFailed: failed,\n    mode: config.mode,\n  };\n}\n"],"mappings":";;;;;AAYA,IAAa,eAAb,MAA0D;CACxD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;EAClB,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,CAAC,IAAI,WAAW,CAAC,IAAI,IAAK,QAAO;AAErC,MAAI;GACF,MAAM,UAAkC,EACtC,gBAAgB,6BACjB;AAED,OAAI,QAAQ,MACV,SAAQ,WAAW,QAAQ;AAG7B,OAAI,IAAI,YAAY,IAAI,aAAa,UACnC,SAAQ,cAAc,IAAI;AAS5B,WANiB,MAAM,MAAM,IAAI,KAAK;IACpC,QAAQ;IACR;IACA,MAAM,QAAQ;IACf,CAAC,EAEc;UACV;AACN,UAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACPb,MAAM,aAAa;AACnB,MAAM,iBAAiB;;;;;AAMvB,SAAS,QACP,QACA,QACkB;AAClB,QAAO,IAAI,SAAS,YAAY;EAC9B,IAAI,OAAO;EACX,IAAI,SAAS;EACb,IAAI,QAA8C;EAElD,SAAS,OAAO,IAAmB;AACjC,OAAI,KAAM;AACV,UAAO;AACP,OAAI,OAAO;AAAE,iBAAa,MAAM;AAAE,YAAQ;;AAC1C,OAAI;AAAE,YAAQ,SAAS;WAAU;AACjC,WAAQ,GAAG;;EAGb,MAAM,SAAS,QAAQ,kBAAkB;GACvC,MAAM,UAAU;IACd,SAAS;IACT,IAAI,YAAY;IAChB;IACA;IACD;AACD,UAAO,MAAM,KAAK,UAAU,QAAQ,GAAG,KAAK;IAC5C;AAEF,SAAO,GAAG,SAAS,UAAkB;AACnC,aAAU,MAAM,UAAU;GAC1B,MAAM,KAAK,OAAO,QAAQ,KAAK;AAC/B,OAAI,OAAO,GAAI;AACf,OAAI;IACF,MAAM,OAAO,KAAK,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC;AAI5C,WAAO,CAAC,KAAK,SAAS,KAAK,OAAO,MAAM;WAClC;AACN,WAAO,MAAM;;IAEf;AAEF,SAAO,GAAG,eAAe,OAAO,MAAM,CAAC;AACvC,SAAO,GAAG,aAAa,OAAO,MAAM,CAAC;AAErC,UAAQ,iBAAiB,OAAO,MAAM,EAAE,eAAe;GACvD;;AAGJ,IAAa,mBAAb,MAA8D;CAC5D,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;EAClB,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,CAAC,IAAI,QAAS,QAAO;EAGzB,MAAM,WADc,OAAO,SAAS,WAAW,OAAO,SAAS,MAAM,YACtC,OAAO,SAAS;EAO/C,MAAM,QAAiC,UACnC;GAAE,MAAM,QAAQ;GAAS,OAAO,OAAO,SAAS,MAAM,aAAa;GAAa,GAChF,EAAE,SAAS,QAAQ,SAAS;AAEhC,MAAI,IAAI,UAGN,OAAM,UAAU,QAAQ,eAAe,IAAI;AAG7C,SAAO,QAAQ,gBAAgB;GAC7B,SAAS;GACT,QAAQ,UAAU,QAAQ;GAC1B,QAAQ;GACT,CAAC;;;;;;;;;;;;AC9GN,IAAa,gBAAb,MAA2D;CACzD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;AAElB,MAAI,CADQ,OAAO,SAAS,MACnB,QAAS,QAAO;AAEzB,MAAI;GAGF,MAAM,aAFQ,QAAQ,SAAS,OAEP,QAAQ,MAAM,MAAM;GAG5C,MAAM,SAAS,yBAFK,QAAQ,QAAQ,QAAQ,MAAM,MAAM,CAEJ,gBAAgB,UAAU;AAE9E,UAAO,IAAI,SAAS,YAAY;IAC9B,MAAM,QAAQ,MAAM,aAAa,CAAC,MAAM,OAAO,EAAE;KAC/C,UAAU;KACV,OAAO;KACR,CAAC;AACF,UAAM,OAAO;AAIb,UAAM,GAAG,eAAe,QAAQ,MAAM,CAAC;AAGvC,qBAAiB,QAAQ,KAAK,EAAE,IAAI;KACpC;UACI;AACN,UAAO;;;;;;;AClCb,IAAa,cAAb,MAAyD;CACvD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,SACkB;EAClB,MAAM,SAAS,eAAe,QAAQ,MAAM;EAC5C,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,MAAM,KAAK;AACrD,UAAQ,OAAO,MAAM,GAAG,SAAS,MAAM,GAAG,QAAQ,QAAQ,IAAI;AAC9D,SAAO;;;;;;ACGX,MAAM,YAAqD;CACzD,MAAW,IAAI,cAAc;CAC7B,UAAW,IAAI,kBAAkB;CACjC,OAAW,IAAI,eAAe;CAC9B,OAAW,IAAI,kBAAkB;CACjC,KAAW,IAAI,aAAa;CAC7B;;;;;;;;;;;;;;AAmBD,SAAS,gBACP,QACA,OACa;CACb,MAAM,EAAE,MAAM,UAAU,YAAY;AAEpC,KAAI,SAAS,MAAO,QAAO,EAAE;CAG7B,MAAM,gBAA8D;EAClE,OAAW;EACX,UAAW;EACX,MAAW;EACX,OAAW;EACX,KAAW;EACZ;AAED,KAAI,SAAS,QAAQ;EACnB,MAAM,KAAK,cAAc;AACzB,MAAI,CAAC,GAAI,QAAO,EAAE;EAElB,MAAM,MAAM,SAAS;AACrB,MAAI,OAAO,CAAC,IAAI,QAAS,QAAO,CAAC,GAAG;AACpC,SAAO,CAAC,GAAG;;AAKb,SADmB,QAAQ,UAAU,EAAE,EACrB,QAAQ,OAAO;EAC/B,MAAM,MAAM,SAAS;AAGrB,MAAI,OAAO,QAAS,QAAO;AAC3B,SAAO,KAAK,YAAY;GACxB;;;;;;;;;;;AAgBJ,eAAsB,kBACpB,SACA,QACqB;CACrB,MAAM,WAAW,gBAAgB,QAAQ,QAAQ,MAAM;AAEvD,KAAI,SAAS,WAAW,EACtB,QAAO;EACL,mBAAmB,EAAE;EACrB,mBAAmB,EAAE;EACrB,gBAAgB,EAAE;EAClB,MAAM,OAAO;EACd;CAGH,MAAM,UAAU,MAAM,QAAQ,WAC5B,SAAS,IAAI,OAAO,OAAO;EAEzB,MAAM,KAAK,MADM,UAAU,IACD,KAAK,SAAS,OAAO;AAC/C,MAAI,CAAC,GACH,SAAQ,OAAO,MACb,wBAAwB,GAAG,oBAAoB,QAAQ,MAAM,IAC9D;AAEH,SAAO;GAAE;GAAI;GAAI;GACjB,CACH;CAED,MAAM,YAAyB,EAAE;CACjC,MAAM,SAAsB,EAAE;AAE9B,MAAK,MAAM,KAAK,QACd,KAAI,EAAE,WAAW,YACf,KAAI,EAAE,MAAM,GACV,WAAU,KAAK,EAAE,MAAM,GAAG;KAE1B,QAAO,KAAK,EAAE,MAAM,GAAG;KAIzB,QAAO,KAAK,SAAS,QAAQ,QAAQ,EAAE,EAAE;AAI7C,QAAO;EACL,mBAAmB;EACnB,mBAAmB;EACnB,gBAAgB;EAChB,MAAM,OAAO;EACd"}
+{"version":3,"file":"router-DHracTUC.mjs","names":[],"sources":["../src/notifications/providers/ntfy.ts","../src/notifications/providers/whatsapp.ts","../src/notifications/providers/macos.ts","../src/notifications/providers/cli.ts","../src/notifications/router.ts"],"sourcesContent":["/**\n * ntfy.ts — ntfy.sh notification provider\n *\n * Sends notifications to a configured ntfy.sh topic via HTTP.\n */\n\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class NtfyProvider implements NotificationProvider {\n  readonly channelId = \"ntfy\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.ntfy;\n    if (!cfg.enabled || !cfg.url) return false;\n\n    try {\n      const headers: Record<string, string> = {\n        \"Content-Type\": \"text/plain; charset=utf-8\",\n      };\n\n      if (payload.title) {\n        headers[\"Title\"] = payload.title;\n      }\n\n      if (cfg.priority && cfg.priority !== \"default\") {\n        headers[\"Priority\"] = cfg.priority;\n      }\n\n      const response = await fetch(cfg.url, {\n        method: \"POST\",\n        headers,\n        body: payload.message,\n      });\n\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n","/**\n * whatsapp.ts — WhatsApp notification provider (via the AIBroker hub)\n *\n * Sends through AIBroker's hub socket, which proxies to the whazaa adapter.\n *\n * It used to dial /tmp/whazaa.sock and call a method named `whatsapp_send`.\n * Both were wrong, and had been since AIBroker became the runtime hub and\n * adapters became thin transports: Whazaa no longer owns an IPC socket of its\n * own (it registers with the hub, currently at /tmp/whazaa-watcher.sock, which\n * is the hub's business and not ours), and `whatsapp_send` is an MCP TOOL name\n * — the adapter itself takes `send` and `tts`.\n *\n * So every WhatsApp notification failed. Silently, because a failed channel\n * writes one line to stderr and the router has no fallback: on 2026-08-04 four\n * task-bus escalations about a job that had not run for nine hours reached\n * /tmp/pai-scheduler.log and nowhere else, while the user had no idea.\n *\n * Routing through the hub rather than at the adapter directly is deliberate:\n * the hub knows where its adapters are, and that is exactly the knowledge whose\n * absence broke this. Connect-per-call, no persistent state.\n */\n\nimport { connect } from \"node:net\";\nimport { randomUUID } from \"node:crypto\";\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\n/**\n * AIBroker's hub socket.\n *\n * Hardcoded rather than imported: PAI must not depend on AIBroker. This is a\n * protocol constant between them, like the agent mark in tasks/poller.ts.\n */\nconst HUB_SOCKET = \"/tmp/aibroker.sock\";\nconst HUB_TIMEOUT_MS = 10_000;\n\n/**\n * Send a single IPC call to the hub.\n * Returns true on success, false if the hub is not available or errors.\n */\nfunction callHub(\n  method: string,\n  params: Record<string, unknown>\n): Promise<boolean> {\n  return new Promise((resolve) => {\n    let done = false;\n    let buffer = \"\";\n    let timer: ReturnType<typeof setTimeout> | null = null;\n\n    function finish(ok: boolean): void {\n      if (done) return;\n      done = true;\n      if (timer) { clearTimeout(timer); timer = null; }\n      try { socket?.destroy(); } catch { /* ignore */ }\n      resolve(ok);\n    }\n\n    const socket = connect(HUB_SOCKET, () => {\n      const request = {\n        jsonrpc: \"2.0\",\n        id: randomUUID(),\n        method,\n        params,\n      };\n      socket.write(JSON.stringify(request) + \"\\n\");\n    });\n\n    socket.on(\"data\", (chunk: Buffer) => {\n      buffer += chunk.toString();\n      const nl = buffer.indexOf(\"\\n\");\n      if (nl === -1) return;\n      try {\n        const resp = JSON.parse(buffer.slice(0, nl)) as { error?: unknown; ok?: boolean };\n        // The hub reports failure as {ok:false,error}; JSON-RPC reports {error}.\n        // Checking only `error` counted an {ok:false} reply as a delivered\n        // notification, which is the one mistake this file must never make.\n        finish(!resp.error && resp.ok !== false);\n      } catch {\n        finish(false);\n      }\n    });\n\n    socket.on(\"error\", () => finish(false));\n    socket.on(\"end\", () => finish(false));\n\n    timer = setTimeout(() => finish(false), HUB_TIMEOUT_MS);\n  });\n}\n\nexport class WhatsAppProvider implements NotificationProvider {\n  readonly channelId = \"whatsapp\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.whatsapp;\n    if (!cfg.enabled) return false;\n\n    const isVoiceMode = config.mode === \"voice\" || config.channels.voice.enabled;\n    const asVoice = isVoiceMode && config.mode === \"voice\";\n\n    // The adapter's own vocabulary is `send` and `tts`, reached through the\n    // hub's `adapter_call`. `whatsapp_send` — what this used to ask for — is the\n    // name of the MCP TOOL that wraps it, and the adapter has never answered to\n    // it. The two vocabularies are easy to confuse because the MCP tool exists\n    // and works; it just is not this interface.\n    const inner: Record<string, unknown> = asVoice\n      ? { text: payload.message, voice: config.channels.voice.voiceName ?? \"bm_george\" }\n      : { message: payload.message };\n\n    if (cfg.recipient) {\n      // `send` addresses by `recipient`, `tts` by `jid` — same destination,\n      // different key, per the adapter's interface.\n      inner[asVoice ? \"jid\" : \"recipient\"] = cfg.recipient;\n    }\n\n    return callHub(\"adapter_call\", {\n      adapter: \"whazaa\",\n      method: asVoice ? \"tts\" : \"send\",\n      params: inner,\n    });\n  }\n}\n","/**\n * macos.ts — macOS notification provider\n *\n * Uses the `osascript` command to display a macOS system notification.\n * Non-blocking: spawns the process and returns success without waiting.\n */\n\nimport { spawn } from \"node:child_process\";\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class MacOsProvider implements NotificationProvider {\n  readonly channelId = \"macos\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.macos;\n    if (!cfg.enabled) return false;\n\n    try {\n      const title = payload.title ?? \"PAI\";\n      // Escape single quotes in title and message for AppleScript\n      const safeTitle = title.replace(/'/g, \"\\\\'\");\n      const safeMessage = payload.message.replace(/'/g, \"\\\\'\");\n\n      const script = `display notification \"${safeMessage}\" with title \"${safeTitle}\"`;\n\n      return new Promise((resolve) => {\n        const child = spawn(\"osascript\", [\"-e\", script], {\n          detached: true,\n          stdio: \"ignore\",\n        });\n        child.unref();\n\n        // Give the process a moment to start, then assume success.\n        // osascript is always present on macOS.\n        child.on(\"error\", () => resolve(false));\n\n        // Resolve after a short timeout — osascript exits quickly\n        setTimeout(() => resolve(true), 200);\n      });\n    } catch {\n      return false;\n    }\n  }\n}\n","/**\n * cli.ts — CLI notification provider\n *\n * Writes notifications to the PAI daemon log (stderr).\n * Always succeeds — it's the fallback channel.\n */\n\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class CliProvider implements NotificationProvider {\n  readonly channelId = \"cli\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    _config: NotificationConfig\n  ): Promise<boolean> {\n    const prefix = `[pai-notify:${payload.event}]`;\n    const title = payload.title ? ` ${payload.title}:` : \"\";\n    process.stderr.write(`${prefix}${title} ${payload.message}\\n`);\n    return true;\n  }\n}\n","/**\n * router.ts — Notification router\n *\n * Routes notification events to the appropriate channels based on the\n * current mode and per-event routing config.\n *\n * Channel providers are instantiated lazily and cached.\n */\n\nimport type {\n  NotificationPayload,\n  NotificationConfig,\n  NotificationProvider,\n  ChannelId,\n  SendResult,\n  NotificationMode,\n} from \"./types.js\";\nimport { NtfyProvider } from \"./providers/ntfy.js\";\nimport { WhatsAppProvider } from \"./providers/whatsapp.js\";\nimport { MacOsProvider } from \"./providers/macos.js\";\nimport { CliProvider } from \"./providers/cli.js\";\n\n// ---------------------------------------------------------------------------\n// Provider registry (singletons — stateless, safe to reuse)\n// ---------------------------------------------------------------------------\n\nconst PROVIDERS: Record<ChannelId, NotificationProvider> = {\n  ntfy:      new NtfyProvider(),\n  whatsapp:  new WhatsAppProvider(),\n  macos:     new MacOsProvider(),\n  voice:     new WhatsAppProvider(), // Voice uses WhatsApp TTS; handled in WhatsAppProvider\n  cli:       new CliProvider(),\n};\n\n// ---------------------------------------------------------------------------\n// Channel resolution\n// ---------------------------------------------------------------------------\n\n/**\n * Given the current config, resolve which channels should receive a\n * notification for the given event type.\n *\n * Mode overrides:\n *   \"off\"       → no channels\n *   \"auto\"      → use routing table, filtered by enabled channels\n *   \"voice\"     → whatsapp (TTS enabled in provider)\n *   \"whatsapp\"  → whatsapp\n *   \"ntfy\"      → ntfy\n *   \"macos\"     → macos\n *   \"cli\"       → cli\n */\nfunction resolveChannels(\n  config: NotificationConfig,\n  event: NotificationPayload[\"event\"]\n): ChannelId[] {\n  const { mode, channels, routing } = config;\n\n  if (mode === \"off\") return [];\n\n  // Non-auto modes: force a single channel\n  const modeToChannel: Partial<Record<NotificationMode, ChannelId>> = {\n    voice:     \"whatsapp\",  // WhatsAppProvider checks mode === \"voice\" for TTS\n    whatsapp:  \"whatsapp\",\n    ntfy:      \"ntfy\",\n    macos:     \"macos\",\n    cli:       \"cli\",\n  };\n\n  if (mode !== \"auto\") {\n    const ch = modeToChannel[mode];\n    if (!ch) return [];\n    // Check the channel is enabled\n    const cfg = channels[ch];\n    if (cfg && !cfg.enabled) return [ch]; // Still send — mode override bypasses enabled check\n    return [ch];\n  }\n\n  // Auto mode: use routing table, filter to enabled channels\n  const candidates = routing[event] ?? [];\n  return candidates.filter((ch) => {\n    const cfg = channels[ch];\n    // \"voice\" channel is virtual — it overlaps with whatsapp.\n    // Skip \"voice\" as an independent channel; voice is handled by checking config.mode.\n    if (ch === \"voice\") return false;\n    return cfg?.enabled === true;\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Router\n// ---------------------------------------------------------------------------\n\n/**\n * Route a notification to the appropriate channels.\n *\n * Sends to all resolved channels in parallel.\n * Individual channel failures are non-fatal and logged to stderr.\n *\n * @param payload  The notification to send\n * @param config   The current notification config (from daemon state)\n */\nexport async function routeNotification(\n  payload: NotificationPayload,\n  config: NotificationConfig\n): Promise<SendResult> {\n  const channels = resolveChannels(config, payload.event);\n\n  if (channels.length === 0) {\n    return {\n      channelsAttempted: [],\n      channelsSucceeded: [],\n      channelsFailed: [],\n      mode: config.mode,\n    };\n  }\n\n  const results = await Promise.allSettled(\n    channels.map(async (ch) => {\n      const provider = PROVIDERS[ch];\n      const ok = await provider.send(payload, config);\n      if (!ok) {\n        process.stderr.write(\n          `[pai-notify] Channel ${ch} failed for event ${payload.event}\\n`\n        );\n      }\n      return { ch, ok };\n    })\n  );\n\n  const succeeded: ChannelId[] = [];\n  const failed: ChannelId[] = [];\n\n  for (const r of results) {\n    if (r.status === \"fulfilled\") {\n      if (r.value.ok) {\n        succeeded.push(r.value.ch);\n      } else {\n        failed.push(r.value.ch);\n      }\n    } else {\n      // Provider threw — treat as failure\n      failed.push(channels[results.indexOf(r)]);\n    }\n  }\n\n  return {\n    channelsAttempted: channels,\n    channelsSucceeded: succeeded,\n    channelsFailed: failed,\n    mode: config.mode,\n  };\n}\n"],"mappings":";;;;;AAYA,IAAa,eAAb,MAA0D;CACxD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;EAClB,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,CAAC,IAAI,WAAW,CAAC,IAAI,IAAK,QAAO;AAErC,MAAI;GACF,MAAM,UAAkC,EACtC,gBAAgB,6BACjB;AAED,OAAI,QAAQ,MACV,SAAQ,WAAW,QAAQ;AAG7B,OAAI,IAAI,YAAY,IAAI,aAAa,UACnC,SAAQ,cAAc,IAAI;AAS5B,WANiB,MAAM,MAAM,IAAI,KAAK;IACpC,QAAQ;IACR;IACA,MAAM,QAAQ;IACf,CAAC,EAEc;UACV;AACN,UAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACPb,MAAM,aAAa;AACnB,MAAM,iBAAiB;;;;;AAMvB,SAAS,QACP,QACA,QACkB;AAClB,QAAO,IAAI,SAAS,YAAY;EAC9B,IAAI,OAAO;EACX,IAAI,SAAS;EACb,IAAI,QAA8C;EAElD,SAAS,OAAO,IAAmB;AACjC,OAAI,KAAM;AACV,UAAO;AACP,OAAI,OAAO;AAAE,iBAAa,MAAM;AAAE,YAAQ;;AAC1C,OAAI;AAAE,YAAQ,SAAS;WAAU;AACjC,WAAQ,GAAG;;EAGb,MAAM,SAAS,QAAQ,kBAAkB;GACvC,MAAM,UAAU;IACd,SAAS;IACT,IAAI,YAAY;IAChB;IACA;IACD;AACD,UAAO,MAAM,KAAK,UAAU,QAAQ,GAAG,KAAK;IAC5C;AAEF,SAAO,GAAG,SAAS,UAAkB;AACnC,aAAU,MAAM,UAAU;GAC1B,MAAM,KAAK,OAAO,QAAQ,KAAK;AAC/B,OAAI,OAAO,GAAI;AACf,OAAI;IACF,MAAM,OAAO,KAAK,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC;AAI5C,WAAO,CAAC,KAAK,SAAS,KAAK,OAAO,MAAM;WAClC;AACN,WAAO,MAAM;;IAEf;AAEF,SAAO,GAAG,eAAe,OAAO,MAAM,CAAC;AACvC,SAAO,GAAG,aAAa,OAAO,MAAM,CAAC;AAErC,UAAQ,iBAAiB,OAAO,MAAM,EAAE,eAAe;GACvD;;AAGJ,IAAa,mBAAb,MAA8D;CAC5D,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;EAClB,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,CAAC,IAAI,QAAS,QAAO;EAGzB,MAAM,WADc,OAAO,SAAS,WAAW,OAAO,SAAS,MAAM,YACtC,OAAO,SAAS;EAO/C,MAAM,QAAiC,UACnC;GAAE,MAAM,QAAQ;GAAS,OAAO,OAAO,SAAS,MAAM,aAAa;GAAa,GAChF,EAAE,SAAS,QAAQ,SAAS;AAEhC,MAAI,IAAI,UAGN,OAAM,UAAU,QAAQ,eAAe,IAAI;AAG7C,SAAO,QAAQ,gBAAgB;GAC7B,SAAS;GACT,QAAQ,UAAU,QAAQ;GAC1B,QAAQ;GACT,CAAC;;;;;;;;;;;;AC9GN,IAAa,gBAAb,MAA2D;CACzD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;AAElB,MAAI,CADQ,OAAO,SAAS,MACnB,QAAS,QAAO;AAEzB,MAAI;GAGF,MAAM,aAFQ,QAAQ,SAAS,OAEP,QAAQ,MAAM,MAAM;GAG5C,MAAM,SAAS,yBAFK,QAAQ,QAAQ,QAAQ,MAAM,MAAM,CAEJ,gBAAgB,UAAU;AAE9E,UAAO,IAAI,SAAS,YAAY;IAC9B,MAAM,QAAQ,MAAM,aAAa,CAAC,MAAM,OAAO,EAAE;KAC/C,UAAU;KACV,OAAO;KACR,CAAC;AACF,UAAM,OAAO;AAIb,UAAM,GAAG,eAAe,QAAQ,MAAM,CAAC;AAGvC,qBAAiB,QAAQ,KAAK,EAAE,IAAI;KACpC;UACI;AACN,UAAO;;;;;;;AClCb,IAAa,cAAb,MAAyD;CACvD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,SACkB;EAClB,MAAM,SAAS,eAAe,QAAQ,MAAM;EAC5C,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,MAAM,KAAK;AACrD,UAAQ,OAAO,MAAM,GAAG,SAAS,MAAM,GAAG,QAAQ,QAAQ,IAAI;AAC9D,SAAO;;;;;;ACGX,MAAM,YAAqD;CACzD,MAAW,IAAI,cAAc;CAC7B,UAAW,IAAI,kBAAkB;CACjC,OAAW,IAAI,eAAe;CAC9B,OAAW,IAAI,kBAAkB;CACjC,KAAW,IAAI,aAAa;CAC7B;;;;;;;;;;;;;;AAmBD,SAAS,gBACP,QACA,OACa;CACb,MAAM,EAAE,MAAM,UAAU,YAAY;AAEpC,KAAI,SAAS,MAAO,QAAO,EAAE;CAG7B,MAAM,gBAA8D;EAClE,OAAW;EACX,UAAW;EACX,MAAW;EACX,OAAW;EACX,KAAW;EACZ;AAED,KAAI,SAAS,QAAQ;EACnB,MAAM,KAAK,cAAc;AACzB,MAAI,CAAC,GAAI,QAAO,EAAE;EAElB,MAAM,MAAM,SAAS;AACrB,MAAI,OAAO,CAAC,IAAI,QAAS,QAAO,CAAC,GAAG;AACpC,SAAO,CAAC,GAAG;;AAKb,SADmB,QAAQ,UAAU,EAAE,EACrB,QAAQ,OAAO;EAC/B,MAAM,MAAM,SAAS;AAGrB,MAAI,OAAO,QAAS,QAAO;AAC3B,SAAO,KAAK,YAAY;GACxB;;;;;;;;;;;AAgBJ,eAAsB,kBACpB,SACA,QACqB;CACrB,MAAM,WAAW,gBAAgB,QAAQ,QAAQ,MAAM;AAEvD,KAAI,SAAS,WAAW,EACtB,QAAO;EACL,mBAAmB,EAAE;EACrB,mBAAmB,EAAE;EACrB,gBAAgB,EAAE;EAClB,MAAM,OAAO;EACd;CAGH,MAAM,UAAU,MAAM,QAAQ,WAC5B,SAAS,IAAI,OAAO,OAAO;EAEzB,MAAM,KAAK,MADM,UAAU,IACD,KAAK,SAAS,OAAO;AAC/C,MAAI,CAAC,GACH,SAAQ,OAAO,MACb,wBAAwB,GAAG,oBAAoB,QAAQ,MAAM,IAC9D;AAEH,SAAO;GAAE;GAAI;GAAI;GACjB,CACH;CAED,MAAM,YAAyB,EAAE;CACjC,MAAM,SAAsB,EAAE;AAE9B,MAAK,MAAM,KAAK,QACd,KAAI,EAAE,WAAW,YACf,KAAI,EAAE,MAAM,GACV,WAAU,KAAK,EAAE,MAAM,GAAG;KAE1B,QAAO,KAAK,EAAE,MAAM,GAAG;KAIzB,QAAO,KAAK,SAAS,QAAQ,QAAQ,EAAE,EAAE;AAI7C,QAAO;EACL,mBAAmB;EACnB,mBAAmB;EACnB,gBAAgB;EAChB,MAAM,OAAO;EACd"}

package/dist/server-BOuAOj9b.mjs

@@ -0,0 +1,386 @@
+import { a as WorkersConfigError, c as expandHome, f as providerCostTier, h as resolveModelCapability, i as WORKER_CLASSES, p as providerKeyPath } from "./config-Dl8lT4Lu.mjs";
+import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { connect } from "node:net";
+import { execFileSync, spawn } from "node:child_process";
+
+//#region src/workers/paths.ts
+/**
+* paths.ts — where worker run artefacts live.
+*
+* Everything a run writes (event mirror, status file, pane registry, routing
+* state, the empty MCP config) sits under one logDir so the whole tree is
+* disposable and configurable: `workers.logDir`, default ~/.claude/logs/workers.
+*/
+/** Absolute logDir for the given config. */
+function workersLogDir(config) {
+	return expandHome(config.logDir);
+}
+function statusPath(logDir, id) {
+	return join(logDir, `${id}.status`);
+}
+function eventsPath(logDir, id) {
+	return join(logDir, `${id}.jsonl`);
+}
+function ledgerPath(logDir) {
+	return join(logDir, "ledger.log");
+}
+function routingStatePath(logDir) {
+	return join(logDir, "routing-state.json");
+}
+function panesDir(logDir) {
+	return join(logDir, "panes");
+}
+/**
+* The strict empty MCP config handed to headless workers. Written into the
+* logDir on demand (never into the user's vendor config directory — this is
+* PAI state, not vendor state).
+*/
+function noMcpConfigPath(logDir) {
+	return join(logDir, "no-mcp.json");
+}
+
+//#endregion
+//#region src/workers/routing.ts
+/**
+* routing.ts — provider selection: flag > class > active (possibly "auto").
+*
+* Auto-routing walks `workers.routing.order` — or the class's own `order` —
+* and takes the first provider that is enabled, out of cooldown, (when it
+* defines a quotaProbe) under its quotaSkipAt threshold, and — when the class
+* constrains it — within `maxCostTier` and carrying all `requireTags`. A run
+* that dies of a quota/rate error puts its provider in cooldown for
+* cooldownMinutes; when that happens before the first tool call and
+* retryOnQuota is set, the runner restarts the same task on the next provider
+* (ledger: WORKER-REROUTE).
+*
+* An explicit --provider or a class mapping that pins a provider always
+* bypasses all of this.
+*/
+const QUOTA_SKIP_DEFAULT = 95;
+const PROBE_TIMEOUT_MS = 1e4;
+function readRoutingState(logDir) {
+	const path = routingStatePath(logDir);
+	if (!existsSync(path)) return { cooldowns: {} };
+	try {
+		return { cooldowns: JSON.parse(readFileSync(path, "utf8")).cooldowns ?? {} };
+	} catch {
+		return { cooldowns: {} };
+	}
+}
+function writeRoutingState(logDir, state) {
+	const path = routingStatePath(logDir);
+	const dir = dirname(path);
+	if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+	const tmp = `${path}.tmp`;
+	writeFileSync(tmp, JSON.stringify(state, null, 2) + "\n", "utf8");
+	renameSync(tmp, path);
+}
+function cooldownRemaining(state, provider, now = /* @__PURE__ */ new Date()) {
+	const end = state.cooldowns[provider];
+	if (!end) return 0;
+	const ms = Date.parse(end) - now.getTime();
+	return ms > 0 ? ms : 0;
+}
+function setCooldown(logDir, provider, minutes, now = /* @__PURE__ */ new Date()) {
+	const state = readRoutingState(logDir);
+	state.cooldowns[provider] = new Date(now.getTime() + minutes * 6e4).toISOString();
+	writeRoutingState(logDir, state);
+}
+function clearCooldown(logDir, provider) {
+	const state = readRoutingState(logDir);
+	if (!(provider in state.cooldowns)) return;
+	delete state.cooldowns[provider];
+	writeRoutingState(logDir, state);
+}
+/**
+* Run a provider's quotaProbe and return its percentage (0–100), or null when
+* there is no probe or it printed nothing usable. A probe must never break
+* routing: failures read as "unknown", not as "full".
+*/
+function probeQuota(provider) {
+	if (!provider.quotaProbe) return null;
+	try {
+		const m = execFileSync("/bin/sh", ["-c", provider.quotaProbe], {
+			timeout: PROBE_TIMEOUT_MS,
+			encoding: "utf8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}).match(/(\d+(?:\.\d+)?)/);
+		if (!m) return null;
+		return Math.min(100, Math.max(0, Math.round(parseFloat(m[1]))));
+	} catch {
+		return null;
+	}
+}
+function quotaSkipThreshold(provider) {
+	return provider.quotaSkipAt ?? QUOTA_SKIP_DEFAULT;
+}
+/** Does this provider exceed its quota threshold right now? */
+function quotaExceeded(provider) {
+	const used = probeQuota(provider);
+	return used !== null && used >= quotaSkipThreshold(provider);
+}
+var NoProviderError = class extends WorkersConfigError {};
+function mustExist(config, name) {
+	const p = config.providers[name];
+	if (!p) throw new NoProviderError(`no worker provider named "${name}". Configured: ${Object.keys(config.providers).join(", ") || "(none)"}.\nAdd one with: pai worker providers add <name> --base-url <url> --key-file <path> --model <model>`);
+	return p;
+}
+function mustBeRunnable(name, p) {
+	if (!p.enabled) throw new NoProviderError(`provider "${name}" is disabled. Enable it with: pai worker providers enable ${name}`);
+	return p;
+}
+/** Why one provider of a routing order did not qualify (message fragment). */
+function exclusionReason(config, state, name, cls) {
+	const p = config.providers[name];
+	if (!p) return "not configured";
+	if (!p.enabled) return "disabled";
+	if (cooldownRemaining(state, name) > 0) return "cooldown";
+	if (quotaExceeded(p)) return "quota";
+	const tier = providerCostTier(p);
+	if (cls?.maxCostTier !== void 0 && tier > cls.maxCostTier) return `cost tier ${tier} > max ${cls.maxCostTier}`;
+	if (cls?.requireTags?.length) {
+		const have = p.tags ?? [];
+		const missing = cls.requireTags.filter((t) => !have.includes(t));
+		if (missing.length) return `missing tags: ${missing.join(", ")}`;
+	}
+	return null;
+}
+/**
+* Resolve which provider (and model alias) a run uses.
+*
+* @param flagProvider --provider value, highest precedence
+* @param className    --class value (the old --role), looked up in workers.classes
+*/
+function resolveTarget(config, logDir, opts = {}) {
+	if (opts.flagProvider) return {
+		providerName: opts.flagProvider,
+		provider: mustBeRunnable(opts.flagProvider, mustExist(config, opts.flagProvider)),
+		modelAlias: null,
+		classMcp: null,
+		via: "flag"
+	};
+	const clsTarget = opts.className ? config.classes[opts.className] : void 0;
+	const cls = typeof clsTarget === "object" && clsTarget !== null ? clsTarget : void 0;
+	if (opts.className && clsTarget !== void 0 && typeof clsTarget !== "object") {
+		const [name, alias] = clsTarget.split("/");
+		return {
+			providerName: name,
+			provider: mustBeRunnable(name, mustExist(config, name)),
+			modelAlias: alias ?? null,
+			classMcp: null,
+			via: "class"
+		};
+	}
+	if (opts.className && cls?.provider) {
+		const provider = mustBeRunnable(cls.provider, mustExist(config, cls.provider));
+		return {
+			providerName: cls.provider,
+			provider,
+			modelAlias: null,
+			classMcp: cls.mcp ?? null,
+			via: "class"
+		};
+	}
+	if (opts.className && clsTarget === void 0) {
+		if (!WORKER_CLASSES.includes(opts.className)) throw new NoProviderError(`no class named "${opts.className}". Standard classes: ${WORKER_CLASSES.join(", ")}.Defined: ${Object.keys(config.classes).join(", ") || "(none)"}.\nSet one with: pai worker classes set ${opts.className}=<provider[/alias]>`);
+	}
+	if (config.active !== "auto") {
+		const name = config.active;
+		if (!name) throw new NoProviderError("no active worker provider. Add one with: pai worker providers add <name> --base-url <url> --key-file <path> --model <model>\n(or point one that exists at it: pai worker providers use <name>)");
+		return {
+			providerName: name,
+			provider: mustBeRunnable(name, mustExist(config, name)),
+			modelAlias: null,
+			classMcp: null,
+			via: "active"
+		};
+	}
+	const state = readRoutingState(logDir);
+	const order = cls?.order ?? config.routing.order;
+	const excluded = [];
+	for (const name of order) {
+		const p = config.providers[name];
+		const why = exclusionReason(config, state, name, cls);
+		if (why) {
+			excluded.push(`${name}: ${why}`);
+			continue;
+		}
+		return {
+			providerName: name,
+			provider: p,
+			modelAlias: null,
+			classMcp: cls?.mcp ?? null,
+			via: "auto"
+		};
+	}
+	throw new NoProviderError(`auto-routing found no usable provider${opts.className ? ` for class "${opts.className}"` : ""} (order: [${order.join(", ")}]).${excluded.length ? `\nExcluded: ${excluded.join("; ")}.` : ""}\nClear a cooldown with: pai worker providers enable <name>; widen the class with: pai worker classes set ${opts.className ?? "<class>"}=<target>`);
+}
+/**
+* Next provider after `from` in auto order, applying the same filters.
+* Used by rerouting; null when the order is exhausted.
+*/
+function nextAutoProvider(config, logDir, from, now = /* @__PURE__ */ new Date()) {
+	const state = readRoutingState(logDir);
+	const order = config.routing.order;
+	const start = order.indexOf(from);
+	for (let i = start + 1; i < order.length; i++) {
+		const name = order[i];
+		const p = config.providers[name];
+		if (!p || !p.enabled) continue;
+		const end = state.cooldowns[name];
+		if (end && Date.parse(end) > now.getTime()) continue;
+		if (quotaExceeded(p)) continue;
+		return name;
+	}
+	return null;
+}
+/**
+* Was this failure a quota/rate failure? Detected from the result text the
+* endpoint produced (HTTP status is not visible in the stream events).
+*/
+function isQuotaFailure(resultText) {
+	return /usage limit reached|rate limit|quota/i.test(resultText);
+}
+
+//#endregion
+//#region src/workers/run-env.ts
+/**
+* run-env.ts — the provider environment every Claude Code spawn must run with.
+*
+* Extracted from run.ts so daemon-side background spawns (session summaries,
+* context handovers, KG extraction) go through the exact same env the worker
+* runner uses, instead of importing the whole runner into the daemon.
+*/
+/** Environment for a run through `provider`. Caller's env minus the Anthropic key. */
+function buildRunEnv(provider, headless, proxyUrl) {
+	const env = { ...process.env };
+	delete env.ANTHROPIC_API_KEY;
+	let token = "local";
+	if (proxyUrl) env.ANTHROPIC_BASE_URL = proxyUrl;
+	else {
+		const keyPath = providerKeyPath(provider);
+		if (keyPath) {
+			try {
+				token = readFileSync(keyPath, "utf8").trim();
+			} catch {
+				throw new Error(`key file not readable: ${keyPath}`);
+			}
+			if (!token) throw new Error(`key file is empty: ${keyPath}`);
+		}
+		env.ANTHROPIC_BASE_URL = provider.baseUrl;
+	}
+	env.ANTHROPIC_AUTH_TOKEN = token;
+	env.ANTHROPIC_DEFAULT_HAIKU_MODEL = resolveModelCapability(provider, "fast");
+	env.ANTHROPIC_DEFAULT_SONNET_MODEL = provider.models.default;
+	env.ANTHROPIC_DEFAULT_OPUS_MODEL = provider.models.default;
+	for (const [k, v] of Object.entries(provider.env)) env[k] = v;
+	env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC = "1";
+	if (headless) env.PAI_WORKER = "1";
+	else env.ENABLE_TOOL_SEARCH = "true";
+	return env;
+}
+
+//#endregion
+//#region src/workers/proxy/server.ts
+/**
+* server.ts — the PAI worker proxy: Anthropic Messages API on the front,
+* OpenAI Chat Completions on the back, loopback only.
+*
+* One proxy serves every OpenAI-protocol provider: Claude Code points
+* ANTHROPIC_BASE_URL at `http://127.0.0.1:8797/<provider>` and the provider
+* name in the path selects the upstream (`upstreamUrl` + `keyFile` from the
+* workers config, re-read per request so config edits apply without a
+* restart). `run` starts the proxy on demand (detached, pid file under the
+* logDir) and `pai worker proxy stop` stops it again.
+*
+* All translation lives in translate.ts; this file is only HTTP plumbing.
+*/
+const DEFAULT_PROXY_PORT = 8797;
+const HOST = "127.0.0.1";
+function proxyPidPath(logDir) {
+	return join(logDir, "proxy.pid");
+}
+/** True when something already accepts connections on the port. */
+function proxyListening(port = DEFAULT_PROXY_PORT, timeoutMs = 400) {
+	return new Promise((resolve) => {
+		const sock = connect({
+			port,
+			host: HOST
+		});
+		const done = (ok) => {
+			sock.removeAllListeners();
+			sock.destroy();
+			resolve(ok);
+		};
+		sock.setTimeout(timeoutMs, () => done(false));
+		sock.once("connect", () => done(true));
+		sock.once("error", () => done(false));
+	});
+}
+/**
+* Where the standalone proxy artefact lives, found from this module's own
+* location (dist/cli bundle → ../hooks/, dev checkout → <repo>/dist/hooks).
+*/
+function standaloneProxyPath() {
+	let dir = dirname(fileURLToPath(import.meta.url));
+	for (let i = 0; i < 6; i++) {
+		for (const cand of [
+			join(dir, "worker-proxy.mjs"),
+			join(dir, "hooks", "worker-proxy.mjs"),
+			join(dir, "dist", "hooks", "worker-proxy.mjs")
+		]) if (existsSync(cand)) return cand;
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	return null;
+}
+/**
+* Ensure a proxy is listening on the port; start the detached standalone when
+* nothing answers. Returns the base URL (`http://127.0.0.1:<port>`).
+*/
+async function ensureProxyRunning(port, logDir) {
+	if (await proxyListening(port)) return `http://${HOST}:${port}`;
+	const script = standaloneProxyPath();
+	if (!script) throw new Error(`the PAI worker proxy is not running and its build was not found — run \`bun run build\` (or start one with: pai worker proxy --port ${port})`);
+	if (!existsSync(logDir)) mkdirSync(logDir, { recursive: true });
+	const child = spawn(process.execPath, [
+		script,
+		"--port",
+		String(port)
+	], {
+		detached: true,
+		stdio: "ignore"
+	});
+	child.unref();
+	writeFileSync(proxyPidPath(logDir), `${child.pid}\n`, "utf8");
+	for (let i = 0; i < 40; i++) {
+		if (await proxyListening(port)) return `http://${HOST}:${port}`;
+		await new Promise((r) => setTimeout(r, 250));
+	}
+	throw new Error(`the PAI worker proxy did not come up on port ${port} (see ${proxyPidPath(logDir)})`);
+}
+/** `pai worker proxy stop`: SIGTERM the pid from the pid file. */
+function stopProxy(logDir) {
+	const path = proxyPidPath(logDir);
+	if (!existsSync(path)) return "no proxy pid file — nothing to stop";
+	const pid = parseInt(readFileSync(path, "utf8").trim(), 10);
+	unlinkSync(path);
+	if (!Number.isFinite(pid)) return "stale proxy pid file removed";
+	try {
+		process.kill(pid, "SIGTERM");
+	} catch {
+		return `proxy pid ${pid} was not running (pid file removed)`;
+	}
+	return `proxy pid ${pid} stopped`;
+}
+
+//#endregion
+export { workersLogDir as _, clearCooldown as a, probeQuota as c, setCooldown as d, eventsPath as f, statusPath as g, panesDir as h, buildRunEnv as i, quotaSkipThreshold as l, noMcpConfigPath as m, ensureProxyRunning as n, isQuotaFailure as o, ledgerPath as p, stopProxy as r, nextAutoProvider as s, DEFAULT_PROXY_PORT as t, resolveTarget as u };
+//# sourceMappingURL=server-BOuAOj9b.mjs.map

package/dist/server-BOuAOj9b.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-BOuAOj9b.mjs","names":["readKey"],"sources":["../src/workers/paths.ts","../src/workers/routing.ts","../src/workers/run-env.ts","../src/workers/proxy/server.ts"],"sourcesContent":["/**\n * paths.ts — where worker run artefacts live.\n *\n * Everything a run writes (event mirror, status file, pane registry, routing\n * state, the empty MCP config) sits under one logDir so the whole tree is\n * disposable and configurable: `workers.logDir`, default ~/.claude/logs/workers.\n */\n\nimport { join } from \"node:path\";\nimport { expandHome, type WorkersConfig } from \"./config.js\";\n\n/** Absolute logDir for the given config. */\nexport function workersLogDir(config: WorkersConfig): string {\n  return expandHome(config.logDir);\n}\n\nexport function statusPath(logDir: string, id: string): string {\n  return join(logDir, `${id}.status`);\n}\n\nexport function eventsPath(logDir: string, id: string): string {\n  return join(logDir, `${id}.jsonl`);\n}\n\nexport function ledgerPath(logDir: string): string {\n  return join(logDir, \"ledger.log\");\n}\n\nexport function routingStatePath(logDir: string): string {\n  return join(logDir, \"routing-state.json\");\n}\n\nexport function panesDir(logDir: string): string {\n  return join(logDir, \"panes\");\n}\n\n/**\n * The strict empty MCP config handed to headless workers. Written into the\n * logDir on demand (never into the user's vendor config directory — this is\n * PAI state, not vendor state).\n */\nexport function noMcpConfigPath(logDir: string): string {\n  return join(logDir, \"no-mcp.json\");\n}\n","/**\n * routing.ts — provider selection: flag > class > active (possibly \"auto\").\n *\n * Auto-routing walks `workers.routing.order` — or the class's own `order` —\n * and takes the first provider that is enabled, out of cooldown, (when it\n * defines a quotaProbe) under its quotaSkipAt threshold, and — when the class\n * constrains it — within `maxCostTier` and carrying all `requireTags`. A run\n * that dies of a quota/rate error puts its provider in cooldown for\n * cooldownMinutes; when that happens before the first tool call and\n * retryOnQuota is set, the runner restarts the same task on the next provider\n * (ledger: WORKER-REROUTE).\n *\n * An explicit --provider or a class mapping that pins a provider always\n * bypasses all of this.\n */\n\nimport { execFileSync } from \"node:child_process\";\nimport { existsSync, readFileSync, writeFileSync, renameSync, mkdirSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport {\n  type WorkerProvider,\n  type WorkersConfig,\n  type ProviderTag,\n  WORKER_CLASSES,\n  WorkersConfigError,\n  providerCostTier,\n} from \"./config.js\";\nimport { routingStatePath } from \"./paths.js\";\n\nconst QUOTA_SKIP_DEFAULT = 95;\nconst PROBE_TIMEOUT_MS = 10_000;\n\nexport interface RoutingState {\n  /** provider name → ISO timestamp when its cooldown ends */\n  cooldowns: Record<string, string>;\n}\n\nexport function readRoutingState(logDir: string): RoutingState {\n  const path = routingStatePath(logDir);\n  if (!existsSync(path)) return { cooldowns: {} };\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as RoutingState;\n    return { cooldowns: parsed.cooldowns ?? {} };\n  } catch {\n    return { cooldowns: {} };\n  }\n}\n\nexport function writeRoutingState(logDir: string, state: RoutingState): void {\n  const path = routingStatePath(logDir);\n  const dir = dirname(path);\n  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });\n  const tmp = `${path}.tmp`;\n  writeFileSync(tmp, JSON.stringify(state, null, 2) + \"\\n\", \"utf8\");\n  renameSync(tmp, path);\n}\n\nexport function cooldownRemaining(\n  state: RoutingState,\n  provider: string,\n  now: Date = new Date()\n): number {\n  const end = state.cooldowns[provider];\n  if (!end) return 0;\n  const ms = Date.parse(end) - now.getTime();\n  return ms > 0 ? ms : 0;\n}\n\nexport function setCooldown(\n  logDir: string,\n  provider: string,\n  minutes: number,\n  now: Date = new Date()\n): void {\n  const state = readRoutingState(logDir);\n  state.cooldowns[provider] = new Date(now.getTime() + minutes * 60_000).toISOString();\n  writeRoutingState(logDir, state);\n}\n\nexport function clearCooldown(logDir: string, provider: string): void {\n  const state = readRoutingState(logDir);\n  if (!(provider in state.cooldowns)) return;\n  delete state.cooldowns[provider];\n  writeRoutingState(logDir, state);\n}\n\n/**\n * Run a provider's quotaProbe and return its percentage (0–100), or null when\n * there is no probe or it printed nothing usable. A probe must never break\n * routing: failures read as \"unknown\", not as \"full\".\n */\nexport function probeQuota(provider: WorkerProvider): number | null {\n  if (!provider.quotaProbe) return null;\n  try {\n    const out = execFileSync(\"/bin/sh\", [\"-c\", provider.quotaProbe], {\n      timeout: PROBE_TIMEOUT_MS,\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    });\n    const m = out.match(/(\\d+(?:\\.\\d+)?)/);\n    if (!m) return null;\n    return Math.min(100, Math.max(0, Math.round(parseFloat(m[1]))));\n  } catch {\n    return null;\n  }\n}\n\nexport function quotaSkipThreshold(provider: WorkerProvider): number {\n  return provider.quotaSkipAt ?? QUOTA_SKIP_DEFAULT;\n}\n\n/** Does this provider exceed its quota threshold right now? */\nexport function quotaExceeded(provider: WorkerProvider): boolean {\n  const used = probeQuota(provider);\n  return used !== null && used >= quotaSkipThreshold(provider);\n}\n\nexport interface ResolvedTarget {\n  providerName: string;\n  provider: WorkerProvider;\n  /** Model alias from the class (\"glm/fast\" → \"fast\"), null = provider default. */\n  modelAlias: string | null;\n  /** MCP servers (or set names) from the class target, null when it sets none. */\n  classMcp: string[] | null;\n  /** How the provider was chosen — names the bypass rule for rerouting. */\n  via: \"flag\" | \"class\" | \"active\" | \"auto\";\n}\n\nexport class NoProviderError extends WorkersConfigError {}\n\nfunction mustExist(config: WorkersConfig, name: string): WorkerProvider {\n  const p = config.providers[name];\n  if (!p) {\n    throw new NoProviderError(\n      `no worker provider named \"${name}\". Configured: ` +\n        `${Object.keys(config.providers).join(\", \") || \"(none)\"}.` +\n        `\\nAdd one with: pai worker providers add <name> --base-url <url> --key-file <path> --model <model>`\n    );\n  }\n  return p;\n}\n\nfunction mustBeRunnable(name: string, p: WorkerProvider): WorkerProvider {\n  if (!p.enabled) {\n    throw new NoProviderError(\n      `provider \"${name}\" is disabled. Enable it with: pai worker providers enable ${name}`\n    );\n  }\n  return p;\n}\n\n/** Why one provider of a routing order did not qualify (message fragment). */\nfunction exclusionReason(\n  config: WorkersConfig,\n  state: RoutingState,\n  name: string,\n  cls?: { maxCostTier?: number; requireTags?: string[] }\n): string | null {\n  const p = config.providers[name];\n  if (!p) return \"not configured\";\n  if (!p.enabled) return \"disabled\";\n  if (cooldownRemaining(state, name) > 0) return \"cooldown\";\n  if (quotaExceeded(p)) return \"quota\";\n  const tier = providerCostTier(p);\n  if (cls?.maxCostTier !== undefined && tier > cls.maxCostTier) {\n    return `cost tier ${tier} > max ${cls.maxCostTier}`;\n  }\n  if (cls?.requireTags?.length) {\n    const have = p.tags ?? [];\n    const missing = cls.requireTags.filter((t) => !have.includes(t as ProviderTag));\n    if (missing.length) return `missing tags: ${missing.join(\", \")}`;\n  }\n  return null;\n}\n\n/**\n * Resolve which provider (and model alias) a run uses.\n *\n * @param flagProvider --provider value, highest precedence\n * @param className    --class value (the old --role), looked up in workers.classes\n */\nexport function resolveTarget(\n  config: WorkersConfig,\n  logDir: string,\n  opts: { flagProvider?: string; className?: string } = {}\n): ResolvedTarget {\n  if (opts.flagProvider) {\n    return {\n      providerName: opts.flagProvider,\n      provider: mustBeRunnable(opts.flagProvider, mustExist(config, opts.flagProvider)),\n      modelAlias: null,\n      classMcp: null,\n      via: \"flag\",\n    };\n  }\n\n  // class constraints (present whether or not the target pins a provider)\n  const clsTarget = opts.className ? config.classes[opts.className] : undefined;\n  const cls =\n    typeof clsTarget === \"object\" && clsTarget !== null ? clsTarget : undefined;\n\n  if (opts.className && clsTarget !== undefined && typeof clsTarget !== \"object\") {\n    const [name, alias] = clsTarget.split(\"/\");\n    return {\n      providerName: name,\n      provider: mustBeRunnable(name, mustExist(config, name)),\n      modelAlias: alias ?? null,\n      classMcp: null,\n      via: \"class\",\n    };\n  }\n  if (opts.className && cls?.provider) {\n    const provider = mustBeRunnable(cls.provider, mustExist(config, cls.provider));\n    return {\n      providerName: cls.provider,\n      provider,\n      modelAlias: null,\n      classMcp: cls.mcp ?? null,\n      via: \"class\",\n    };\n  }\n  if (opts.className && clsTarget === undefined) {\n    // a standard class may simply be unconfigured (it then routes like a run\n    // without a class); anything else is a typo and must not pass silently\n    if (!(WORKER_CLASSES as readonly string[]).includes(opts.className)) {\n      throw new NoProviderError(\n        `no class named \"${opts.className}\". Standard classes: ${WORKER_CLASSES.join(\", \")}.` +\n          `Defined: ${Object.keys(config.classes).join(\", \") || \"(none)\"}.` +\n          `\\nSet one with: pai worker classes set ${opts.className}=<provider[/alias]>`\n      );\n    }\n  }\n\n  if (config.active !== \"auto\") {\n    const name = config.active;\n    if (!name) {\n      throw new NoProviderError(\n        `no active worker provider. Add one with: ` +\n          `pai worker providers add <name> --base-url <url> --key-file <path> --model <model>` +\n          `\\n(or point one that exists at it: pai worker providers use <name>)`\n      );\n    }\n    return {\n      providerName: name,\n      provider: mustBeRunnable(name, mustExist(config, name)),\n      modelAlias: null,\n      classMcp: null,\n      via: \"active\",\n    };\n  }\n\n  // auto: first provider in (class or global) order that is enabled,\n  // cooled-down-free, under quota and within the class constraints\n  const state = readRoutingState(logDir);\n  const order = cls?.order ?? config.routing.order;\n  const excluded: string[] = [];\n  for (const name of order) {\n    const p = config.providers[name];\n    const why = exclusionReason(config, state, name, cls);\n    if (why) {\n      excluded.push(`${name}: ${why}`);\n      continue;\n    }\n    return { providerName: name, provider: p, modelAlias: null, classMcp: cls?.mcp ?? null, via: \"auto\" };\n  }\n  throw new NoProviderError(\n    `auto-routing found no usable provider${opts.className ? ` for class \"${opts.className}\"` : \"\"} ` +\n      `(order: [${order.join(\", \")}]).` +\n      `${excluded.length ? `\\nExcluded: ${excluded.join(\"; \")}.` : \"\"}` +\n      `\\nClear a cooldown with: pai worker providers enable <name>; widen the class with: pai worker classes set ${opts.className ?? \"<class>\"}=<target>`\n  );\n}\n\n/**\n * Next provider after `from` in auto order, applying the same filters.\n * Used by rerouting; null when the order is exhausted.\n */\nexport function nextAutoProvider(\n  config: WorkersConfig,\n  logDir: string,\n  from: string,\n  now: Date = new Date()\n): string | null {\n  const state = readRoutingState(logDir);\n  const order = config.routing.order;\n  const start = order.indexOf(from);\n  for (let i = start + 1; i < order.length; i++) {\n    const name = order[i];\n    const p = config.providers[name];\n    if (!p || !p.enabled) continue;\n    const end = state.cooldowns[name];\n    if (end && Date.parse(end) > now.getTime()) continue;\n    if (quotaExceeded(p)) continue;\n    return name;\n  }\n  return null;\n}\n\n/**\n * Was this failure a quota/rate failure? Detected from the result text the\n * endpoint produced (HTTP status is not visible in the stream events).\n */\nexport function isQuotaFailure(resultText: string): boolean {\n  return /usage limit reached|rate limit|quota/i.test(resultText);\n}\n","/**\n * run-env.ts — the provider environment every Claude Code spawn must run with.\n *\n * Extracted from run.ts so daemon-side background spawns (session summaries,\n * context handovers, KG extraction) go through the exact same env the worker\n * runner uses, instead of importing the whole runner into the daemon.\n */\n\nimport { readFileSync as readKey } from \"node:fs\";\nimport { providerKeyPath, resolveModelCapability, type WorkerProvider } from \"./config.js\";\n\n/** Environment for a run through `provider`. Caller's env minus the Anthropic key. */\nexport function buildRunEnv(\n  provider: WorkerProvider,\n  headless: boolean,\n  proxyUrl?: string\n): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = { ...process.env };\n  delete env.ANTHROPIC_API_KEY;\n\n  let token = \"local\";\n  if (proxyUrl) {\n    // openai-protocol provider: the proxy holds the real key; the runner only\n    // needs a placeholder so Claude Code sends an auth header at all\n    env.ANTHROPIC_BASE_URL = proxyUrl;\n  } else {\n    const keyPath = providerKeyPath(provider);\n    if (keyPath) {\n      try {\n        token = readKey(keyPath, \"utf8\").trim();\n      } catch {\n        // the caller turns this into a clear error before spawning\n        throw new Error(`key file not readable: ${keyPath}`);\n      }\n      if (!token) throw new Error(`key file is empty: ${keyPath}`);\n    }\n    env.ANTHROPIC_BASE_URL = provider.baseUrl;\n  }\n\n  env.ANTHROPIC_AUTH_TOKEN = token;\n  env.ANTHROPIC_DEFAULT_HAIKU_MODEL = resolveModelCapability(provider, \"fast\");\n  env.ANTHROPIC_DEFAULT_SONNET_MODEL = provider.models.default;\n  env.ANTHROPIC_DEFAULT_OPUS_MODEL = provider.models.default;\n  for (const [k, v] of Object.entries(provider.env)) env[k] = v;\n  env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC = \"1\";\n  if (headless) {\n    env.PAI_WORKER = \"1\";\n  } else {\n    env.ENABLE_TOOL_SEARCH = \"true\";\n  }\n  return env;\n}\n","/**\n * server.ts — the PAI worker proxy: Anthropic Messages API on the front,\n * OpenAI Chat Completions on the back, loopback only.\n *\n * One proxy serves every OpenAI-protocol provider: Claude Code points\n * ANTHROPIC_BASE_URL at `http://127.0.0.1:8797/<provider>` and the provider\n * name in the path selects the upstream (`upstreamUrl` + `keyFile` from the\n * workers config, re-read per request so config edits apply without a\n * restart). `run` starts the proxy on demand (detached, pid file under the\n * logDir) and `pai worker proxy stop` stops it again.\n *\n * All translation lives in translate.ts; this file is only HTTP plumbing.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { createServer, type Server } from \"node:http\";\nimport { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync } from \"node:fs\";\nimport { connect } from \"node:net\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { readWorkersSection, providerKeyPath, type WorkerProvider } from \"../config.js\";\nimport { workersLogDir } from \"../paths.js\";\nimport {\n  anthropicError,\n  anthropicToOpenAi,\n  openAiToAnthropic,\n  OpenAiStreamTranslator,\n  type AnthropicRequest,\n} from \"./translate.js\";\n\nexport const DEFAULT_PROXY_PORT = 8797;\nconst HOST = \"127.0.0.1\";\n\n/** How providers are looked up — swapped out by the tests. */\nexport type ProviderResolver = () => Record<string, WorkerProvider>;\n\nconst configProviders: ProviderResolver = () => readWorkersSection().workers.providers;\n\nexport function proxyPidPath(logDir: string): string {\n  return join(logDir, \"proxy.pid\");\n}\n\n// ---------------------------------------------------------------------------\n// HTTP server\n// ---------------------------------------------------------------------------\n\ninterface ProxyServerOptions {\n  port?: number;\n  resolveProvider?: ProviderResolver;\n  /** Test hook: called with every (translated) upstream request body. */\n  onUpstreamRequest?: (url: string, body: unknown) => void;\n}\n\n/**\n * Create (but not start) the proxy server. Routes:\n *   GET  /healthz              → 200 ok\n *   POST /<provider>/v1/messages (and /<provider>/messages) → translated call\n */\nexport function createProxyServer(opts: ProxyServerOptions = {}): Server {\n  const resolveProvider = opts.resolveProvider ?? configProviders;\n  return createServer((req, res) => {\n    const url = new URL(req.url ?? \"/\", `http://${HOST}`);\n    if (req.method === \"GET\" && url.pathname === \"/healthz\") {\n      res.writeHead(200, { \"content-type\": \"text/plain\" });\n      res.end(\"ok\");\n      return;\n    }\n    const m = url.pathname.match(/^\\/([a-zA-Z0-9_-]+)\\/(v1\\/)?messages$/);\n    if (req.method !== \"POST\" || !m) {\n      res.writeHead(404, { \"content-type\": \"application/json\" });\n      res.end(JSON.stringify(anthropicError(404, `no such route: ${req.method} ${url.pathname}`)));\n      return;\n    }\n    const providerName = m[1];\n    const chunks: Buffer[] = [];\n    req.on(\"data\", (c: Buffer) => chunks.push(c));\n    req.on(\"end\", () => {\n      void handleMessages(providerName, Buffer.concat(chunks).toString(\"utf8\"), resolveProvider, res, opts);\n    });\n    req.on(\"error\", () => {\n      res.writeHead(400, { \"content-type\": \"application/json\" });\n      res.end(JSON.stringify(anthropicError(400, \"request body read failed\")));\n    });\n  });\n}\n\nasync function handleMessages(\n  providerName: string,\n  bodyText: string,\n  resolveProvider: ProviderResolver,\n  res: import(\"node:http\").ServerResponse,\n  opts: ProxyServerOptions\n): Promise<void> {\n  const fail = (status: number, message: string) => {\n    res.writeHead(status, { \"content-type\": \"application/json\" });\n    res.end(JSON.stringify(anthropicError(status, JSON.stringify({ message }))));\n  };\n  let reqBody: AnthropicRequest;\n  try {\n    reqBody = JSON.parse(bodyText) as AnthropicRequest;\n  } catch {\n    fail(400, \"request body is not valid JSON\");\n    return;\n  }\n  const provider = resolveProvider()[providerName];\n  if (!provider) {\n    fail(404, `no worker provider named \"${providerName}\"`);\n    return;\n  }\n  if (provider.protocol !== \"openai\" || !provider.upstreamUrl) {\n    fail(400, `provider \"${providerName}\" is not an openai-protocol provider`);\n    return;\n  }\n\n  const model = provider.models.default;\n  const openaiBody = anthropicToOpenAi(reqBody, model);\n  opts.onUpstreamRequest?.(`${provider.upstreamUrl}/chat/completions`, openaiBody);\n\n  let upstream: Response;\n  try {\n    const headers: Record<string, string> = { \"content-type\": \"application/json\" };\n    const keyPath = providerKeyPath(provider);\n    if (keyPath) {\n      try {\n        headers.authorization = `Bearer ${readFileSync(keyPath, \"utf8\").trim()}`;\n      } catch {\n        fail(500, `key file not readable: ${keyPath}`);\n        return;\n      }\n    }\n    upstream = await fetch(`${provider.upstreamUrl}/chat/completions`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(openaiBody),\n    });\n  } catch (e) {\n    fail(502, `upstream unreachable: ${e instanceof Error ? e.message : String(e)}`);\n    return;\n  }\n\n  if (!upstream.ok) {\n    const text = await upstream.text().catch(() => \"\");\n    res.writeHead(upstream.status, { \"content-type\": \"application/json\" });\n    res.end(JSON.stringify(anthropicError(upstream.status, text)));\n    return;\n  }\n\n  if (reqBody.stream) {\n    res.writeHead(200, {\n      \"content-type\": \"text/event-stream\",\n      \"cache-control\": \"no-cache\",\n      connection: \"keep-alive\",\n    });\n    const translator = new OpenAiStreamTranslator(model);\n    let buf = \"\";\n    if (!upstream.body) {\n      res.end(translator.finish());\n      return;\n    }\n    const reader = upstream.body.getReader();\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        buf += new TextDecoder().decode(value, { stream: true });\n        let nl: number;\n        while ((nl = buf.indexOf(\"\\n\")) >= 0) {\n          const line = buf.slice(0, nl).trim();\n          buf = buf.slice(nl + 1);\n          if (!line.startsWith(\"data:\")) continue;\n          const payload = line.slice(5).trim();\n          if (payload === \"[DONE]\") {\n            res.write(translator.finish());\n          } else {\n            try {\n              res.write(translator.feed(JSON.parse(payload) as Parameters<typeof translator.feed>[0]));\n            } catch {\n              // skip a malformed chunk rather than kill the stream\n            }\n          }\n        }\n      }\n    } finally {\n      res.write(translator.finish()); // no-op when [DONE] already finished it\n      res.end();\n    }\n    return;\n  }\n\n  const json = (await upstream.json().catch(() => null)) as unknown;\n  if (!json) {\n    fail(502, \"upstream returned a non-JSON body\");\n    return;\n  }\n  res.writeHead(200, { \"content-type\": \"application/json\" });\n  res.end(JSON.stringify(openAiToAnthropic(json as Parameters<typeof openAiToAnthropic>[0], model)));\n}\n\n// ---------------------------------------------------------------------------\n// Start / stop\n// ---------------------------------------------------------------------------\n\n/** Listen on host:port (loopback). Resolves with the bound port. */\nexport function listenProxy(server: Server, port = DEFAULT_PROXY_PORT): Promise<number> {\n  return new Promise((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(port, HOST, () => {\n      const addr = server.address();\n      resolve(typeof addr === \"object\" && addr ? addr.port : port);\n    });\n  });\n}\n\n/** True when something already accepts connections on the port. */\nexport function proxyListening(port = DEFAULT_PROXY_PORT, timeoutMs = 400): Promise<boolean> {\n  return new Promise((resolve) => {\n    const sock = connect({ port, host: HOST });\n    const done = (ok: boolean) => {\n      sock.removeAllListeners();\n      sock.destroy();\n      resolve(ok);\n    };\n    sock.setTimeout(timeoutMs, () => done(false));\n    sock.once(\"connect\", () => done(true));\n    sock.once(\"error\", () => done(false));\n  });\n}\n\n/**\n * Where the standalone proxy artefact lives, found from this module's own\n * location (dist/cli bundle → ../hooks/, dev checkout → <repo>/dist/hooks).\n */\nexport function standaloneProxyPath(): string | null {\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (let i = 0; i < 6; i++) {\n    for (const cand of [\n      join(dir, \"worker-proxy.mjs\"),\n      join(dir, \"hooks\", \"worker-proxy.mjs\"),\n      join(dir, \"dist\", \"hooks\", \"worker-proxy.mjs\"),\n    ]) {\n      if (existsSync(cand)) return cand;\n    }\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/**\n * Ensure a proxy is listening on the port; start the detached standalone when\n * nothing answers. Returns the base URL (`http://127.0.0.1:<port>`).\n */\nexport async function ensureProxyRunning(port: number, logDir: string): Promise<string> {\n  if (await proxyListening(port)) return `http://${HOST}:${port}`;\n  const script = standaloneProxyPath();\n  if (!script) {\n    throw new Error(\n      `the PAI worker proxy is not running and its build was not found — ` +\n        `run \\`bun run build\\` (or start one with: pai worker proxy --port ${port})`\n    );\n  }\n  if (!existsSync(logDir)) mkdirSync(logDir, { recursive: true });\n  const child = spawn(process.execPath, [script, \"--port\", String(port)], {\n    detached: true,\n    stdio: \"ignore\",\n  });\n  child.unref();\n  writeFileSync(proxyPidPath(logDir), `${child.pid}\\n`, \"utf8\");\n  for (let i = 0; i < 40; i++) {\n    if (await proxyListening(port)) return `http://${HOST}:${port}`;\n    await new Promise((r) => setTimeout(r, 250));\n  }\n  throw new Error(`the PAI worker proxy did not come up on port ${port} (see ${proxyPidPath(logDir)})`);\n}\n\n/** `pai worker proxy stop`: SIGTERM the pid from the pid file. */\nexport function stopProxy(logDir: string): string {\n  const path = proxyPidPath(logDir);\n  if (!existsSync(path)) return \"no proxy pid file — nothing to stop\";\n  const pid = parseInt(readFileSync(path, \"utf8\").trim(), 10);\n  unlinkSync(path);\n  if (!Number.isFinite(pid)) return \"stale proxy pid file removed\";\n  try {\n    process.kill(pid, \"SIGTERM\");\n  } catch {\n    return `proxy pid ${pid} was not running (pid file removed)`;\n  }\n  return `proxy pid ${pid} stopped`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAYA,SAAgB,cAAc,QAA+B;AAC3D,QAAO,WAAW,OAAO,OAAO;;AAGlC,SAAgB,WAAW,QAAgB,IAAoB;AAC7D,QAAO,KAAK,QAAQ,GAAG,GAAG,SAAS;;AAGrC,SAAgB,WAAW,QAAgB,IAAoB;AAC7D,QAAO,KAAK,QAAQ,GAAG,GAAG,QAAQ;;AAGpC,SAAgB,WAAW,QAAwB;AACjD,QAAO,KAAK,QAAQ,aAAa;;AAGnC,SAAgB,iBAAiB,QAAwB;AACvD,QAAO,KAAK,QAAQ,qBAAqB;;AAG3C,SAAgB,SAAS,QAAwB;AAC/C,QAAO,KAAK,QAAQ,QAAQ;;;;;;;AAQ9B,SAAgB,gBAAgB,QAAwB;AACtD,QAAO,KAAK,QAAQ,cAAc;;;;;;;;;;;;;;;;;;;;ACbpC,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AAOzB,SAAgB,iBAAiB,QAA8B;CAC7D,MAAM,OAAO,iBAAiB,OAAO;AACrC,KAAI,CAAC,WAAW,KAAK,CAAE,QAAO,EAAE,WAAW,EAAE,EAAE;AAC/C,KAAI;AAEF,SAAO,EAAE,WADM,KAAK,MAAM,aAAa,MAAM,OAAO,CAAC,CAC1B,aAAa,EAAE,EAAE;SACtC;AACN,SAAO,EAAE,WAAW,EAAE,EAAE;;;AAI5B,SAAgB,kBAAkB,QAAgB,OAA2B;CAC3E,MAAM,OAAO,iBAAiB,OAAO;CACrC,MAAM,MAAM,QAAQ,KAAK;AACzB,KAAI,CAAC,WAAW,IAAI,CAAE,WAAU,KAAK,EAAE,WAAW,MAAM,CAAC;CACzD,MAAM,MAAM,GAAG,KAAK;AACpB,eAAc,KAAK,KAAK,UAAU,OAAO,MAAM,EAAE,GAAG,MAAM,OAAO;AACjE,YAAW,KAAK,KAAK;;AAGvB,SAAgB,kBACd,OACA,UACA,sBAAY,IAAI,MAAM,EACd;CACR,MAAM,MAAM,MAAM,UAAU;AAC5B,KAAI,CAAC,IAAK,QAAO;CACjB,MAAM,KAAK,KAAK,MAAM,IAAI,GAAG,IAAI,SAAS;AAC1C,QAAO,KAAK,IAAI,KAAK;;AAGvB,SAAgB,YACd,QACA,UACA,SACA,sBAAY,IAAI,MAAM,EAChB;CACN,MAAM,QAAQ,iBAAiB,OAAO;AACtC,OAAM,UAAU,YAAY,IAAI,KAAK,IAAI,SAAS,GAAG,UAAU,IAAO,CAAC,aAAa;AACpF,mBAAkB,QAAQ,MAAM;;AAGlC,SAAgB,cAAc,QAAgB,UAAwB;CACpE,MAAM,QAAQ,iBAAiB,OAAO;AACtC,KAAI,EAAE,YAAY,MAAM,WAAY;AACpC,QAAO,MAAM,UAAU;AACvB,mBAAkB,QAAQ,MAAM;;;;;;;AAQlC,SAAgB,WAAW,UAAyC;AAClE,KAAI,CAAC,SAAS,WAAY,QAAO;AACjC,KAAI;EAMF,MAAM,IALM,aAAa,WAAW,CAAC,MAAM,SAAS,WAAW,EAAE;GAC/D,SAAS;GACT,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;IAAS;GACpC,CAAC,CACY,MAAM,kBAAkB;AACtC,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;SACzD;AACN,SAAO;;;AAIX,SAAgB,mBAAmB,UAAkC;AACnE,QAAO,SAAS,eAAe;;;AAIjC,SAAgB,cAAc,UAAmC;CAC/D,MAAM,OAAO,WAAW,SAAS;AACjC,QAAO,SAAS,QAAQ,QAAQ,mBAAmB,SAAS;;AAc9D,IAAa,kBAAb,cAAqC,mBAAmB;AAExD,SAAS,UAAU,QAAuB,MAA8B;CACtE,MAAM,IAAI,OAAO,UAAU;AAC3B,KAAI,CAAC,EACH,OAAM,IAAI,gBACR,6BAA6B,KAAK,iBAC7B,OAAO,KAAK,OAAO,UAAU,CAAC,KAAK,KAAK,IAAI,SAAS,qGAE3D;AAEH,QAAO;;AAGT,SAAS,eAAe,MAAc,GAAmC;AACvE,KAAI,CAAC,EAAE,QACL,OAAM,IAAI,gBACR,aAAa,KAAK,6DAA6D,OAChF;AAEH,QAAO;;;AAIT,SAAS,gBACP,QACA,OACA,MACA,KACe;CACf,MAAM,IAAI,OAAO,UAAU;AAC3B,KAAI,CAAC,EAAG,QAAO;AACf,KAAI,CAAC,EAAE,QAAS,QAAO;AACvB,KAAI,kBAAkB,OAAO,KAAK,GAAG,EAAG,QAAO;AAC/C,KAAI,cAAc,EAAE,CAAE,QAAO;CAC7B,MAAM,OAAO,iBAAiB,EAAE;AAChC,KAAI,KAAK,gBAAgB,UAAa,OAAO,IAAI,YAC/C,QAAO,aAAa,KAAK,SAAS,IAAI;AAExC,KAAI,KAAK,aAAa,QAAQ;EAC5B,MAAM,OAAO,EAAE,QAAQ,EAAE;EACzB,MAAM,UAAU,IAAI,YAAY,QAAQ,MAAM,CAAC,KAAK,SAAS,EAAiB,CAAC;AAC/E,MAAI,QAAQ,OAAQ,QAAO,iBAAiB,QAAQ,KAAK,KAAK;;AAEhE,QAAO;;;;;;;;AAST,SAAgB,cACd,QACA,QACA,OAAsD,EAAE,EACxC;AAChB,KAAI,KAAK,aACP,QAAO;EACL,cAAc,KAAK;EACnB,UAAU,eAAe,KAAK,cAAc,UAAU,QAAQ,KAAK,aAAa,CAAC;EACjF,YAAY;EACZ,UAAU;EACV,KAAK;EACN;CAIH,MAAM,YAAY,KAAK,YAAY,OAAO,QAAQ,KAAK,aAAa;CACpE,MAAM,MACJ,OAAO,cAAc,YAAY,cAAc,OAAO,YAAY;AAEpE,KAAI,KAAK,aAAa,cAAc,UAAa,OAAO,cAAc,UAAU;EAC9E,MAAM,CAAC,MAAM,SAAS,UAAU,MAAM,IAAI;AAC1C,SAAO;GACL,cAAc;GACd,UAAU,eAAe,MAAM,UAAU,QAAQ,KAAK,CAAC;GACvD,YAAY,SAAS;GACrB,UAAU;GACV,KAAK;GACN;;AAEH,KAAI,KAAK,aAAa,KAAK,UAAU;EACnC,MAAM,WAAW,eAAe,IAAI,UAAU,UAAU,QAAQ,IAAI,SAAS,CAAC;AAC9E,SAAO;GACL,cAAc,IAAI;GAClB;GACA,YAAY;GACZ,UAAU,IAAI,OAAO;GACrB,KAAK;GACN;;AAEH,KAAI,KAAK,aAAa,cAAc,QAGlC;MAAI,CAAE,eAAqC,SAAS,KAAK,UAAU,CACjE,OAAM,IAAI,gBACR,mBAAmB,KAAK,UAAU,uBAAuB,eAAe,KAAK,KAAK,CAAC,YACrE,OAAO,KAAK,OAAO,QAAQ,CAAC,KAAK,KAAK,IAAI,SAAS,0CACrB,KAAK,UAAU,qBAC5D;;AAIL,KAAI,OAAO,WAAW,QAAQ;EAC5B,MAAM,OAAO,OAAO;AACpB,MAAI,CAAC,KACH,OAAM,IAAI,gBACR,iMAGD;AAEH,SAAO;GACL,cAAc;GACd,UAAU,eAAe,MAAM,UAAU,QAAQ,KAAK,CAAC;GACvD,YAAY;GACZ,UAAU;GACV,KAAK;GACN;;CAKH,MAAM,QAAQ,iBAAiB,OAAO;CACtC,MAAM,QAAQ,KAAK,SAAS,OAAO,QAAQ;CAC3C,MAAM,WAAqB,EAAE;AAC7B,MAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,IAAI,OAAO,UAAU;EAC3B,MAAM,MAAM,gBAAgB,QAAQ,OAAO,MAAM,IAAI;AACrD,MAAI,KAAK;AACP,YAAS,KAAK,GAAG,KAAK,IAAI,MAAM;AAChC;;AAEF,SAAO;GAAE,cAAc;GAAM,UAAU;GAAG,YAAY;GAAM,UAAU,KAAK,OAAO;GAAM,KAAK;GAAQ;;AAEvG,OAAM,IAAI,gBACR,wCAAwC,KAAK,YAAY,eAAe,KAAK,UAAU,KAAK,GAAG,YACjF,MAAM,KAAK,KAAK,CAAC,KAC1B,SAAS,SAAS,eAAe,SAAS,KAAK,KAAK,CAAC,KAAK,+GACgD,KAAK,aAAa,UAAU,WAC5I;;;;;;AAOH,SAAgB,iBACd,QACA,QACA,MACA,sBAAY,IAAI,MAAM,EACP;CACf,MAAM,QAAQ,iBAAiB,OAAO;CACtC,MAAM,QAAQ,OAAO,QAAQ;CAC7B,MAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,MAAK,IAAI,IAAI,QAAQ,GAAG,IAAI,MAAM,QAAQ,KAAK;EAC7C,MAAM,OAAO,MAAM;EACnB,MAAM,IAAI,OAAO,UAAU;AAC3B,MAAI,CAAC,KAAK,CAAC,EAAE,QAAS;EACtB,MAAM,MAAM,MAAM,UAAU;AAC5B,MAAI,OAAO,KAAK,MAAM,IAAI,GAAG,IAAI,SAAS,CAAE;AAC5C,MAAI,cAAc,EAAE,CAAE;AACtB,SAAO;;AAET,QAAO;;;;;;AAOT,SAAgB,eAAe,YAA6B;AAC1D,QAAO,wCAAwC,KAAK,WAAW;;;;;;;;;;;;;ACnSjE,SAAgB,YACd,UACA,UACA,UACmB;CACnB,MAAM,MAAyB,EAAE,GAAG,QAAQ,KAAK;AACjD,QAAO,IAAI;CAEX,IAAI,QAAQ;AACZ,KAAI,SAGF,KAAI,qBAAqB;MACpB;EACL,MAAM,UAAU,gBAAgB,SAAS;AACzC,MAAI,SAAS;AACX,OAAI;AACF,YAAQA,aAAQ,SAAS,OAAO,CAAC,MAAM;WACjC;AAEN,UAAM,IAAI,MAAM,0BAA0B,UAAU;;AAEtD,OAAI,CAAC,MAAO,OAAM,IAAI,MAAM,sBAAsB,UAAU;;AAE9D,MAAI,qBAAqB,SAAS;;AAGpC,KAAI,uBAAuB;AAC3B,KAAI,gCAAgC,uBAAuB,UAAU,OAAO;AAC5E,KAAI,iCAAiC,SAAS,OAAO;AACrD,KAAI,+BAA+B,SAAS,OAAO;AACnD,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,SAAS,IAAI,CAAE,KAAI,KAAK;AAC5D,KAAI,2CAA2C;AAC/C,KAAI,SACF,KAAI,aAAa;KAEjB,KAAI,qBAAqB;AAE3B,QAAO;;;;;;;;;;;;;;;;;;ACpBT,MAAa,qBAAqB;AAClC,MAAM,OAAO;AAOb,SAAgB,aAAa,QAAwB;AACnD,QAAO,KAAK,QAAQ,YAAY;;;AA+KlC,SAAgB,eAAe,OAAO,oBAAoB,YAAY,KAAuB;AAC3F,QAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,OAAO,QAAQ;GAAE;GAAM,MAAM;GAAM,CAAC;EAC1C,MAAM,QAAQ,OAAgB;AAC5B,QAAK,oBAAoB;AACzB,QAAK,SAAS;AACd,WAAQ,GAAG;;AAEb,OAAK,WAAW,iBAAiB,KAAK,MAAM,CAAC;AAC7C,OAAK,KAAK,iBAAiB,KAAK,KAAK,CAAC;AACtC,OAAK,KAAK,eAAe,KAAK,MAAM,CAAC;GACrC;;;;;;AAOJ,SAAgB,sBAAqC;CACnD,IAAI,MAAM,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;AACjD,MAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,OAAK,MAAM,QAAQ;GACjB,KAAK,KAAK,mBAAmB;GAC7B,KAAK,KAAK,SAAS,mBAAmB;GACtC,KAAK,KAAK,QAAQ,SAAS,mBAAmB;GAC/C,CACC,KAAI,WAAW,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK;AACpB,QAAM;;AAER,QAAO;;;;;;AAOT,eAAsB,mBAAmB,MAAc,QAAiC;AACtF,KAAI,MAAM,eAAe,KAAK,CAAE,QAAO,UAAU,KAAK,GAAG;CACzD,MAAM,SAAS,qBAAqB;AACpC,KAAI,CAAC,OACH,OAAM,IAAI,MACR,uIACuE,KAAK,GAC7E;AAEH,KAAI,CAAC,WAAW,OAAO,CAAE,WAAU,QAAQ,EAAE,WAAW,MAAM,CAAC;CAC/D,MAAM,QAAQ,MAAM,QAAQ,UAAU;EAAC;EAAQ;EAAU,OAAO,KAAK;EAAC,EAAE;EACtE,UAAU;EACV,OAAO;EACR,CAAC;AACF,OAAM,OAAO;AACb,eAAc,aAAa,OAAO,EAAE,GAAG,MAAM,IAAI,KAAK,OAAO;AAC7D,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,MAAI,MAAM,eAAe,KAAK,CAAE,QAAO,UAAU,KAAK,GAAG;AACzD,QAAM,IAAI,SAAS,MAAM,WAAW,GAAG,IAAI,CAAC;;AAE9C,OAAM,IAAI,MAAM,gDAAgD,KAAK,QAAQ,aAAa,OAAO,CAAC,GAAG;;;AAIvG,SAAgB,UAAU,QAAwB;CAChD,MAAM,OAAO,aAAa,OAAO;AACjC,KAAI,CAAC,WAAW,KAAK,CAAE,QAAO;CAC9B,MAAM,MAAM,SAAS,aAAa,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG;AAC3D,YAAW,KAAK;AAChB,KAAI,CAAC,OAAO,SAAS,IAAI,CAAE,QAAO;AAClC,KAAI;AACF,UAAQ,KAAK,KAAK,UAAU;SACtB;AACN,SAAO,aAAa,IAAI;;AAE1B,QAAO,aAAa,IAAI"}

package/dist/skills/Worker/SKILL.md

@@ -45,8 +45,10 @@ pai worker run --label "short task label" --class research \\
   parked in ~/.config/pai/keys/<name>, mode 0600). update changes cost_tier
   (1 cheapest … 5 most expensive) and tags (code, vision, image-gen,
   long-context, fast, reasoning).
-- `worker_classes` — list/set/unset class → provider[/fast], or constraints
+- `worker_classes` — list/set/unset class → provider[/<capability>], or constraints
   only (max_cost_tier, require_tags) so auto-routing picks a qualifying provider.
+- `worker_model` — show or set a provider's model ids per capability:
+  default, fast, image (get without provider lists every provider's ids).
 - `worker_run` — start a worker or chain from chat; returns the id immediately.
 - `worker_toggle` — off makes Agent subagents run on Anthropic again.
 - `worker_fallback` — machine-wide switch: every NEW Claude Code process
@@ -61,6 +63,9 @@ pai worker run --label "short task label" --class research \\
   worker_classes set <class>=<provider>. One line back.
 - "prefer the flash model for simple tasks" / "cheap only for drafts" →
   worker_classes set simple|draft=<provider>/fast (or a max_cost_tier). One line.
+- "run everything on <model>" / "make <model> the fast model" / "<model> is
+  the image model" → worker_model set model=<model> (capability=fast|image for
+  the latter two). One line back.
 - "reviews should use a reasoning model" → worker_classes set review with
   require_tags ["reasoning"] (drop the pin if one exists). One line.
 - "what handles reviews" / "show the routing table" → worker_classes list

package/dist/{sources-kLnQsNrW.mjs → sources-ju6AA7lL.mjs}

@@ -133,4 +133,4 @@ function tail(s, n) {
 
 //#endregion
 export { cmdMemorySources };
-//# sourceMappingURL=sources-kLnQsNrW.mjs.map
+//# sourceMappingURL=sources-ju6AA7lL.mjs.map