@tekmidian/pai 0.42.0 → 0.42.1

package/dist/{chain-DGXNoTwc.mjs → chain-DsvSHnO9.mjs}

@@ -1,6 +1,6 @@
-import { a as WorkersConfigError, h as resolveModelCapability, l as isModelCapability, m as readWorkersSection, o as assertProviderRunnable, p as providerKeyPath, s as classModelCapability } from "./config-DgzR5sfb.mjs";
-import { _ as workersLogDir, d as setCooldown, f as eventsPath, g as statusPath, h as panesDir, i as buildRunEnv, m as noMcpConfigPath, n as ensureProxyRunning, o as isQuotaFailure, p as ledgerPath, s as nextAutoProvider, t as DEFAULT_PROXY_PORT, u as resolveTarget } from "./server-Cp7tNzNC.mjs";
-import { S as stripPromptValues, _ as newWorkerId, a as resolveSpawnerSession, b as parseRunnerArgs, d as alive, g as loadStatuses, h as loadStatus, i as resolveSession, l as UNLABELED, m as describeTool, o as scopeKey, r as itermUuid, v as nowStamp, x as shortText, y as saveStatus } from "./scope-NIwCGxRI.mjs";
+import { a as WorkersConfigError, g as resolveModelCapability, h as readWorkersSection, m as providerKeyPath, o as assertProviderRunnable, s as classModelCapability, u as isModelCapability } from "./config-Bi_F6lXf.mjs";
+import { _ as workersLogDir, d as setCooldown, f as ensureNoMcpConfig, g as statusPath, h as panesDir, i as buildRunEnv, m as ledgerPath, n as ensureProxyRunning, o as isQuotaFailure, p as eventsPath, s as nextAutoProvider, t as DEFAULT_PROXY_PORT, u as resolveTarget } from "./server-DvN-IFIV.mjs";
+import { C as stripPromptValues, S as shortText, _ as loadStatuses, a as resolveSpawnerSession, b as saveStatus, d as alive, g as loadStatus, i as resolveSession, l as UNLABELED, m as describeTool, o as scopeKey, r as itermUuid, v as newWorkerId, x as parseRunnerArgs, y as nowStamp } from "./scope-CfYnjy5R.mjs";
 import { appendFileSync, closeSync, existsSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -87,10 +87,14 @@ function ledgerSummary(path, scope, lastN = 15, now = /* @__PURE__ */ new Date()
 * one splits the lowest live worker pane horizontally, so panes stack top to
 * bottom. The split never sizes the new session — that would grow the whole
 * window; instead the window's bounds are read before the split and restored
-* right after, so the panes share the space the window already had. A split
-* would also make the new session the tab's active one — the scripts re-select
-* the launching session right after, so a pane opening never steals the
-* keystrokes the operator is typing. Each
+* right after, so the panes share the space the window already had. The follow
+* command is part of the split itself — iTerm creates the new session already
+* running it — so no text is ever typed into any session afterwards; a separate
+* typing step raced the operator's keystrokes (focus briefly sits on the new
+* pane after a split, and in one observed failure the command landed in the
+* operator's own shell). A split still makes the new session the tab's active
+* one — the scripts re-select the launching session right after, so a pane
+* opening never steals the keystrokes the operator is typing. Each
 * pane runs `pai worker follow <id> --auto-exit <n>` under the `pai-worker`
 * dynamic profile (Close Sessions On End), so panes disappear by themselves.
 *
@@ -145,34 +149,35 @@ const WORKER_SPLIT_SCRIPT = `on run(argv)
                                 end if
                             end if
                         end repeat
+                        -- the follow command is part of the split itself: the
+                        -- pane is born already running it, so no text is ever
+                        -- typed into any session — a typing step raced the
+                        -- operator's keystrokes and could even land in the
+                        -- operator's own session
                         if profileName is "" then
                             if splitS is missing value then
                                 tell s
-                                    set newS to split vertically with default profile
+                                    set newS to split vertically with default profile command followCmd
                                 end tell
                             else
                                 tell splitS
-                                    set newS to split horizontally with default profile
+                                    set newS to split horizontally with default profile command followCmd
                                 end tell
                             end if
                         else
                             if splitS is missing value then
                                 tell s
-                                    set newS to split vertically with profile profileName
+                                    set newS to split vertically with profile profileName command followCmd
                                 end tell
                             else
                                 tell splitS
-                                    set newS to split horizontally with profile profileName
+                                    set newS to split horizontally with profile profileName command followCmd
                                 end tell
                             end if
                         end if
-                        tell newS
-                            write text followCmd
-                        end tell
                         -- a split makes the new session the tab's active one:
-                        -- re-select the launching session so keystrokes keep
-                        -- going where the operator was typing, not into the
-                        -- pane's chat prompt
+                        -- re-select the launching session so focus returns to
+                        -- where the operator was typing, never the new pane
                         try
                             select s
                         end try
@@ -253,11 +258,11 @@ const SPLIT_SCRIPT = `on run(argv)
             repeat with t in tabs of w
                 repeat with s in sessions of t
                     if id of s is targetID then
+                        -- the follow command is part of the split itself (see
+                        -- WORKER_SPLIT_SCRIPT): nothing is ever typed into a
+                        -- session afterwards
                         tell s
-                            set newS to split vertically with default profile
-                        end tell
-                        tell newS
-                            write text followCmd
+                            set newS to split vertically with default profile command followCmd
                         end tell
                         -- keep the tab's active session where it was (see
                         -- WORKER_SPLIT_SCRIPT)
@@ -490,6 +495,23 @@ function saveRegistry(path, reg) {
 	writeFileSync(tmp, JSON.stringify(reg, null, 1), "utf8");
 	renameSync(tmp, path);
 }
+/**
+* The command a worker pane runs: one exec-able line with no shell syntax —
+* iTerm's split command parameter execs without a shell (proven live: panes
+* survive `sleep 30` and a single-quoted `/bin/sh -c`, die instantly on
+* `export …; …` or a redirect), so the command must be one exec-able line.
+* Absolute node on the CLI entry file also sidesteps the panes' bare launchd
+* PATH (no pai, no node) and the `#!/usr/bin/env node` shebang.
+*/
+function followCommand(wid, autoExitSecs) {
+	return `${process.execPath} ${absoluteCliPath()} worker follow ${wid} --auto-exit ${autoExitSecs}`;
+}
+/** Absolute path of the running pai CLI; falls back to PATH lookup at spawn. */
+function absoluteCliPath() {
+	const argv1 = process.argv[1] ?? "";
+	if (argv1.endsWith("pai")) return argv1;
+	return "pai";
+}
 /** Open (or only report on) the stacked follow pane of one worker. */
 async function openPaneForWorker(logDir, config, wid, term) {
 	if (workerPaneOpen(wid)) return `pane for ${wid} already open`;
@@ -497,7 +519,7 @@ async function openPaneForWorker(logDir, config, wid, term) {
 	const regPath = join(panesDir(logDir), `${scopeKey(term)}.json`);
 	const reg = loadRegistry(regPath);
 	const profile = await followProfile(config.pane.fontSize);
-	const cmd = ` exec pai worker follow ${JSON.stringify(wid)} --auto-exit ${config.pane.autoExitSecs}`;
+	const cmd = followCommand(wid, config.pane.autoExitSecs);
 	const p = await osascript(WORKER_SPLIT_SCRIPT, [
 		uid,
 		[...reg].reverse().map((e) => e.session).join(","),
@@ -571,7 +593,7 @@ async function openFollowPane(logDir, _config, term, checkOnly) {
 	if (out === "notrunning") throw new Error("pai worker pane: iTerm2 is not running");
 	if ([...new Set(out.split(",").map((t) => t.trim()).filter(Boolean))].filter((t) => followTtys().has(t)).length > 0) return "follow pane already open";
 	if (checkOnly) return "no follow pane";
-	const s = await osascript(SPLIT_SCRIPT, [uid, " exec pai worker follow"]);
+	const s = await osascript(SPLIT_SCRIPT, [uid, `${process.execPath} ${absoluteCliPath()} worker follow`]);
 	const sout = s.stdout.trim();
 	if (sout === "opened") return "follow pane opened";
 	if (sout === "notfound") throw new Error("pai worker pane: no open iTerm2 session matches ITERM_SESSION_ID");
@@ -1627,8 +1649,12 @@ function codexInstalled() {
 *     demand, the provider name in the URL path); codex-engine providers run
 *     the Codex CLI.
 *   - headless (-p): strict empty MCP config unless the caller brings one or
-*     names servers via --mcp / a role (then a filtered <id>.mcp.json),
-*     PAI_WORKER=1 so PAI's per-session hooks leave it alone, the worker
+*     names servers via --mcp / a role (then a filtered <id>.mcp.json), the
+*     core tool grants the caller did not bring (a headless run cannot
+*     approve a permission-gated tool mid-flight — with no grant at all,
+*     claude drops the file/shell tools entirely and the worker is
+*     tool-blind), PAI_WORKER=1 so PAI's per-session hooks leave it alone,
+*     the worker
 *     contract appended to the system prompt, `--input-format stream-json`
 *     with the prompt as the first stdin user message (the operator socket
 *     can add more mid-run), stream-json mirroring (every line stamped `_ts`)
@@ -1641,15 +1667,6 @@ function codexInstalled() {
 * Auto-routed runs that die of a quota error before the first tool call are
 * restarted on the next provider in routing order (WORKER-REROUTE ledger line).
 */
-/** The strict empty MCP config for headless workers, written on demand. */
-function ensureNoMcpConfig(logDir) {
-	const path = noMcpConfigPath(logDir);
-	if (!existsSync(path)) {
-		mkdirSync(logDir, { recursive: true });
-		writeFileSync(path, "{ \"mcpServers\": {} }\n", "utf8");
-	}
-	return path;
-}
 /** A stream-json user message for the child's stdin. */
 function stdinUserMessage(text) {
 	return JSON.stringify({
@@ -1725,7 +1742,7 @@ async function runWorker(opts) {
 	const logDir = workersLogDir(config);
 	mkdirSync(logDir, { recursive: true });
 	if (opts.className === "plan" && !opts._planner) {
-		const { runPlanner } = await import("./planner-BLDJt3ZS.mjs");
+		const { runPlanner } = await import("./planner-ogy-Zy4O.mjs");
 		return runPlanner(opts);
 	}
 	const parent = launchParent(opts.parent);
@@ -1784,6 +1801,19 @@ async function runWorker(opts) {
 		throw e;
 	}
 }
+/**
+* The core tools a headless run grants when the caller brings none of its
+* own. Permission-gated tools (Bash, Read, Write, …) are never offered to a
+* headless session that has no allow rule for them — the child starts with
+* only the tools that never ask (tool search, web, cron, tasks) and cannot
+* touch a file or shell (2026-09-18). A caller's own --allowedTools is a
+* deliberate restriction and passes through untouched.
+*/
+const DEFAULT_WORKER_TOOLS = "Read,Edit,Write,Bash,Grep,Glob";
+/** The --allowedTools args a headless run needs; [] when the caller granted. */
+function headlessToolGrants(allowedTools) {
+	return allowedTools.length ? [] : ["--allowedTools", DEFAULT_WORKER_TOOLS];
+}
 async function executeRun(a) {
 	const { config, logDir, target, model, label, parsed, noPane } = a;
 	const headless = parsed.headless;
@@ -1872,9 +1902,10 @@ async function executeRun(a) {
 		];
 	}
 	const restArgs = headless ? stripPromptValues(parsed.rest) : parsed.rest;
+	const toolArgs = headless ? headlessToolGrants(parsed.allowedTools) : [];
 	const cmd = ["claude"];
 	if (!parsed.callerModel) cmd.push("--model", model);
-	cmd.push(...mcpArgs, ...restArgs);
+	cmd.push(...mcpArgs, ...toolArgs, ...restArgs);
 	if (headless) {
 		cmd.push("--output-format", "stream-json", "--verbose", "--input-format", "stream-json");
 		if (!parsed.callerSystemPrompt) cmd.push("--append-system-prompt", WORKER_CONTRACT_PROMPT);
@@ -2567,4 +2598,4 @@ async function runChain(opts, deps = {}) {
 
 //#endregion
 export { openPaneForWorker as _, testProvider as a, renderReport as c, handoffFromInside as d, readInbox as f, openFollowPane as g, checkPaneForWorker as h, runWorker as i, discardWorker as l, workerDepth as m, swapPromptArg as n, describeMcp as o, sayToWorker as p, printResult as r, parseWorkerReport as s, runChain as t, mergeWorker as u, appendLedger as v, ledgerSummary as y };
-//# sourceMappingURL=chain-DGXNoTwc.mjs.map
+//# sourceMappingURL=chain-DsvSHnO9.mjs.map