@tekmidian/pai 0.59.0 → 0.60.1

package/dist/router-C5hPk9YP.mjs

@@ -0,0 +1,3 @@
+import { t as routeNotification } from "./router-DjFZIoDl.mjs";
+
+export { routeNotification };

package/dist/{router-BdxdsAvs.mjs → router-DjFZIoDl.mjs}

@@ -131,6 +131,7 @@ var MacOsProvider = class {
 	channelId = "macos";
 	async send(payload, config) {
 		if (!config.channels.macos.enabled) return false;
+		if (process.platform !== "darwin") return false;
 		try {
 			const safeTitle = (payload.title ?? "PAI").replace(/'/g, "\\'");
 			const script = `display notification "${payload.message.replace(/'/g, "\\'")}" with title "${safeTitle}"`;
@@ -246,4 +247,4 @@ async function routeNotification(payload, config) {
 
 //#endregion
 export { routeNotification as t };
-//# sourceMappingURL=router-BdxdsAvs.mjs.map
+//# sourceMappingURL=router-DjFZIoDl.mjs.map

package/dist/router-DjFZIoDl.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"router-DjFZIoDl.mjs","names":[],"sources":["../src/notifications/providers/ntfy.ts","../src/notifications/providers/whatsapp.ts","../src/notifications/providers/macos.ts","../src/notifications/providers/cli.ts","../src/notifications/router.ts"],"sourcesContent":["/**\n * ntfy.ts — ntfy.sh notification provider\n *\n * Sends notifications to a configured ntfy.sh topic via HTTP.\n */\n\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class NtfyProvider implements NotificationProvider {\n  readonly channelId = \"ntfy\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.ntfy;\n    if (!cfg.enabled || !cfg.url) return false;\n\n    try {\n      const headers: Record<string, string> = {\n        \"Content-Type\": \"text/plain; charset=utf-8\",\n      };\n\n      if (payload.title) {\n        headers[\"Title\"] = payload.title;\n      }\n\n      if (cfg.priority && cfg.priority !== \"default\") {\n        headers[\"Priority\"] = cfg.priority;\n      }\n\n      const response = await fetch(cfg.url, {\n        method: \"POST\",\n        headers,\n        body: payload.message,\n      });\n\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n","/**\n * whatsapp.ts — WhatsApp notification provider (via the AIBroker hub)\n *\n * Sends through AIBroker's hub socket, which proxies to the whazaa adapter.\n *\n * It used to dial /tmp/whazaa.sock and call a method named `whatsapp_send`.\n * Both were wrong, and had been since AIBroker became the runtime hub and\n * adapters became thin transports: Whazaa no longer owns an IPC socket of its\n * own (it registers with the hub, currently at /tmp/whazaa-watcher.sock, which\n * is the hub's business and not ours), and `whatsapp_send` is an MCP TOOL name\n * — the adapter itself takes `send` and `tts`.\n *\n * So every WhatsApp notification failed. Silently, because a failed channel\n * writes one line to stderr and the router has no fallback: on 2026-08-04 four\n * task-bus escalations about a job that had not run for nine hours reached\n * /tmp/pai-scheduler.log and nowhere else, while the user had no idea.\n *\n * Routing through the hub rather than at the adapter directly is deliberate:\n * the hub knows where its adapters are, and that is exactly the knowledge whose\n * absence broke this. Connect-per-call, no persistent state.\n */\n\nimport { connect } from \"node:net\";\nimport { randomUUID } from \"node:crypto\";\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\n/**\n * AIBroker's hub socket.\n *\n * Hardcoded rather than imported: PAI must not depend on AIBroker. This is a\n * protocol constant between them, like the agent mark in tasks/poller.ts.\n */\nconst HUB_SOCKET = \"/tmp/aibroker.sock\";\nconst HUB_TIMEOUT_MS = 10_000;\n\n/**\n * Send a single IPC call to the hub.\n * Returns true on success, false if the hub is not available or errors.\n */\nfunction callHub(\n  method: string,\n  params: Record<string, unknown>\n): Promise<boolean> {\n  return new Promise((resolve) => {\n    let done = false;\n    let buffer = \"\";\n    let timer: ReturnType<typeof setTimeout> | null = null;\n\n    function finish(ok: boolean): void {\n      if (done) return;\n      done = true;\n      if (timer) { clearTimeout(timer); timer = null; }\n      try { socket?.destroy(); } catch { /* ignore */ }\n      resolve(ok);\n    }\n\n    const socket = connect(HUB_SOCKET, () => {\n      const request = {\n        jsonrpc: \"2.0\",\n        id: randomUUID(),\n        method,\n        params,\n      };\n      socket.write(JSON.stringify(request) + \"\\n\");\n    });\n\n    socket.on(\"data\", (chunk: Buffer) => {\n      buffer += chunk.toString();\n      const nl = buffer.indexOf(\"\\n\");\n      if (nl === -1) return;\n      try {\n        const resp = JSON.parse(buffer.slice(0, nl)) as { error?: unknown; ok?: boolean };\n        // The hub reports failure as {ok:false,error}; JSON-RPC reports {error}.\n        // Checking only `error` counted an {ok:false} reply as a delivered\n        // notification, which is the one mistake this file must never make.\n        finish(!resp.error && resp.ok !== false);\n      } catch {\n        finish(false);\n      }\n    });\n\n    socket.on(\"error\", () => finish(false));\n    socket.on(\"end\", () => finish(false));\n\n    timer = setTimeout(() => finish(false), HUB_TIMEOUT_MS);\n  });\n}\n\nexport class WhatsAppProvider implements NotificationProvider {\n  readonly channelId = \"whatsapp\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.whatsapp;\n    if (!cfg.enabled) return false;\n\n    const isVoiceMode = config.mode === \"voice\" || config.channels.voice.enabled;\n    const asVoice = isVoiceMode && config.mode === \"voice\";\n\n    // The adapter's own vocabulary is `send` and `tts`, reached through the\n    // hub's `adapter_call`. `whatsapp_send` — what this used to ask for — is the\n    // name of the MCP TOOL that wraps it, and the adapter has never answered to\n    // it. The two vocabularies are easy to confuse because the MCP tool exists\n    // and works; it just is not this interface.\n    const inner: Record<string, unknown> = asVoice\n      ? { text: payload.message, voice: config.channels.voice.voiceName ?? \"bm_george\" }\n      : { message: payload.message };\n\n    if (cfg.recipient) {\n      // `send` addresses by `recipient`, `tts` by `jid` — same destination,\n      // different key, per the adapter's interface.\n      inner[asVoice ? \"jid\" : \"recipient\"] = cfg.recipient;\n    }\n\n    return callHub(\"adapter_call\", {\n      adapter: \"whazaa\",\n      method: asVoice ? \"tts\" : \"send\",\n      params: inner,\n    });\n  }\n}\n","/**\n * macos.ts — macOS notification provider\n *\n * Uses the `osascript` command to display a macOS system notification.\n * Non-blocking: spawns the process and returns success without waiting.\n */\n\nimport { spawn } from \"node:child_process\";\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class MacOsProvider implements NotificationProvider {\n  readonly channelId = \"macos\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    config: NotificationConfig\n  ): Promise<boolean> {\n    const cfg = config.channels.macos;\n    if (!cfg.enabled) return false;\n    if (process.platform !== \"darwin\") return false;\n\n    try {\n      const title = payload.title ?? \"PAI\";\n      // Escape single quotes in title and message for AppleScript\n      const safeTitle = title.replace(/'/g, \"\\\\'\");\n      const safeMessage = payload.message.replace(/'/g, \"\\\\'\");\n\n      const script = `display notification \"${safeMessage}\" with title \"${safeTitle}\"`;\n\n      return new Promise((resolve) => {\n        const child = spawn(\"osascript\", [\"-e\", script], {\n          detached: true,\n          stdio: \"ignore\",\n        });\n        child.unref();\n\n        // Give the process a moment to start, then assume success.\n        // osascript is always present on macOS.\n        child.on(\"error\", () => resolve(false));\n\n        // Resolve after a short timeout — osascript exits quickly\n        setTimeout(() => resolve(true), 200);\n      });\n    } catch {\n      return false;\n    }\n  }\n}\n","/**\n * cli.ts — CLI notification provider\n *\n * Writes notifications to the PAI daemon log (stderr).\n * Always succeeds — it's the fallback channel.\n */\n\nimport type {\n  NotificationProvider,\n  NotificationPayload,\n  NotificationConfig,\n} from \"../types.js\";\n\nexport class CliProvider implements NotificationProvider {\n  readonly channelId = \"cli\" as const;\n\n  async send(\n    payload: NotificationPayload,\n    _config: NotificationConfig\n  ): Promise<boolean> {\n    const prefix = `[pai-notify:${payload.event}]`;\n    const title = payload.title ? ` ${payload.title}:` : \"\";\n    process.stderr.write(`${prefix}${title} ${payload.message}\\n`);\n    return true;\n  }\n}\n","/**\n * router.ts — Notification router\n *\n * Routes notification events to the appropriate channels based on the\n * current mode and per-event routing config.\n *\n * Channel providers are instantiated lazily and cached.\n */\n\nimport type {\n  NotificationPayload,\n  NotificationConfig,\n  NotificationProvider,\n  ChannelId,\n  SendResult,\n  NotificationMode,\n} from \"./types.js\";\nimport { NtfyProvider } from \"./providers/ntfy.js\";\nimport { WhatsAppProvider } from \"./providers/whatsapp.js\";\nimport { MacOsProvider } from \"./providers/macos.js\";\nimport { CliProvider } from \"./providers/cli.js\";\n\n// ---------------------------------------------------------------------------\n// Provider registry (singletons — stateless, safe to reuse)\n// ---------------------------------------------------------------------------\n\nconst PROVIDERS: Record<ChannelId, NotificationProvider> = {\n  ntfy:      new NtfyProvider(),\n  whatsapp:  new WhatsAppProvider(),\n  macos:     new MacOsProvider(),\n  voice:     new WhatsAppProvider(), // Voice uses WhatsApp TTS; handled in WhatsAppProvider\n  cli:       new CliProvider(),\n};\n\n// ---------------------------------------------------------------------------\n// Channel resolution\n// ---------------------------------------------------------------------------\n\n/**\n * Given the current config, resolve which channels should receive a\n * notification for the given event type.\n *\n * Mode overrides:\n *   \"off\"       → no channels\n *   \"auto\"      → use routing table, filtered by enabled channels\n *   \"voice\"     → whatsapp (TTS enabled in provider)\n *   \"whatsapp\"  → whatsapp\n *   \"ntfy\"      → ntfy\n *   \"macos\"     → macos\n *   \"cli\"       → cli\n */\nfunction resolveChannels(\n  config: NotificationConfig,\n  event: NotificationPayload[\"event\"]\n): ChannelId[] {\n  const { mode, channels, routing } = config;\n\n  if (mode === \"off\") return [];\n\n  // Non-auto modes: force a single channel\n  const modeToChannel: Partial<Record<NotificationMode, ChannelId>> = {\n    voice:     \"whatsapp\",  // WhatsAppProvider checks mode === \"voice\" for TTS\n    whatsapp:  \"whatsapp\",\n    ntfy:      \"ntfy\",\n    macos:     \"macos\",\n    cli:       \"cli\",\n  };\n\n  if (mode !== \"auto\") {\n    const ch = modeToChannel[mode];\n    if (!ch) return [];\n    // Check the channel is enabled\n    const cfg = channels[ch];\n    if (cfg && !cfg.enabled) return [ch]; // Still send — mode override bypasses enabled check\n    return [ch];\n  }\n\n  // Auto mode: use routing table, filter to enabled channels\n  const candidates = routing[event] ?? [];\n  return candidates.filter((ch) => {\n    const cfg = channels[ch];\n    // \"voice\" channel is virtual — it overlaps with whatsapp.\n    // Skip \"voice\" as an independent channel; voice is handled by checking config.mode.\n    if (ch === \"voice\") return false;\n    return cfg?.enabled === true;\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Router\n// ---------------------------------------------------------------------------\n\n/**\n * Route a notification to the appropriate channels.\n *\n * Sends to all resolved channels in parallel.\n * Individual channel failures are non-fatal and logged to stderr.\n *\n * @param payload  The notification to send\n * @param config   The current notification config (from daemon state)\n */\nexport async function routeNotification(\n  payload: NotificationPayload,\n  config: NotificationConfig\n): Promise<SendResult> {\n  const channels = resolveChannels(config, payload.event);\n\n  if (channels.length === 0) {\n    return {\n      channelsAttempted: [],\n      channelsSucceeded: [],\n      channelsFailed: [],\n      mode: config.mode,\n    };\n  }\n\n  const results = await Promise.allSettled(\n    channels.map(async (ch) => {\n      const provider = PROVIDERS[ch];\n      const ok = await provider.send(payload, config);\n      if (!ok) {\n        process.stderr.write(\n          `[pai-notify] Channel ${ch} failed for event ${payload.event}\\n`\n        );\n      }\n      return { ch, ok };\n    })\n  );\n\n  const succeeded: ChannelId[] = [];\n  const failed: ChannelId[] = [];\n\n  for (const r of results) {\n    if (r.status === \"fulfilled\") {\n      if (r.value.ok) {\n        succeeded.push(r.value.ch);\n      } else {\n        failed.push(r.value.ch);\n      }\n    } else {\n      // Provider threw — treat as failure\n      failed.push(channels[results.indexOf(r)]);\n    }\n  }\n\n  return {\n    channelsAttempted: channels,\n    channelsSucceeded: succeeded,\n    channelsFailed: failed,\n    mode: config.mode,\n  };\n}\n"],"mappings":";;;;;AAYA,IAAa,eAAb,MAA0D;CACxD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;EAClB,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,CAAC,IAAI,WAAW,CAAC,IAAI,IAAK,QAAO;AAErC,MAAI;GACF,MAAM,UAAkC,EACtC,gBAAgB,6BACjB;AAED,OAAI,QAAQ,MACV,SAAQ,WAAW,QAAQ;AAG7B,OAAI,IAAI,YAAY,IAAI,aAAa,UACnC,SAAQ,cAAc,IAAI;AAS5B,WANiB,MAAM,MAAM,IAAI,KAAK;IACpC,QAAQ;IACR;IACA,MAAM,QAAQ;IACf,CAAC,EAEc;UACV;AACN,UAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACPb,MAAM,aAAa;AACnB,MAAM,iBAAiB;;;;;AAMvB,SAAS,QACP,QACA,QACkB;AAClB,QAAO,IAAI,SAAS,YAAY;EAC9B,IAAI,OAAO;EACX,IAAI,SAAS;EACb,IAAI,QAA8C;EAElD,SAAS,OAAO,IAAmB;AACjC,OAAI,KAAM;AACV,UAAO;AACP,OAAI,OAAO;AAAE,iBAAa,MAAM;AAAE,YAAQ;;AAC1C,OAAI;AAAE,YAAQ,SAAS;WAAU;AACjC,WAAQ,GAAG;;EAGb,MAAM,SAAS,QAAQ,kBAAkB;GACvC,MAAM,UAAU;IACd,SAAS;IACT,IAAI,YAAY;IAChB;IACA;IACD;AACD,UAAO,MAAM,KAAK,UAAU,QAAQ,GAAG,KAAK;IAC5C;AAEF,SAAO,GAAG,SAAS,UAAkB;AACnC,aAAU,MAAM,UAAU;GAC1B,MAAM,KAAK,OAAO,QAAQ,KAAK;AAC/B,OAAI,OAAO,GAAI;AACf,OAAI;IACF,MAAM,OAAO,KAAK,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC;AAI5C,WAAO,CAAC,KAAK,SAAS,KAAK,OAAO,MAAM;WAClC;AACN,WAAO,MAAM;;IAEf;AAEF,SAAO,GAAG,eAAe,OAAO,MAAM,CAAC;AACvC,SAAO,GAAG,aAAa,OAAO,MAAM,CAAC;AAErC,UAAQ,iBAAiB,OAAO,MAAM,EAAE,eAAe;GACvD;;AAGJ,IAAa,mBAAb,MAA8D;CAC5D,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;EAClB,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,CAAC,IAAI,QAAS,QAAO;EAGzB,MAAM,WADc,OAAO,SAAS,WAAW,OAAO,SAAS,MAAM,YACtC,OAAO,SAAS;EAO/C,MAAM,QAAiC,UACnC;GAAE,MAAM,QAAQ;GAAS,OAAO,OAAO,SAAS,MAAM,aAAa;GAAa,GAChF,EAAE,SAAS,QAAQ,SAAS;AAEhC,MAAI,IAAI,UAGN,OAAM,UAAU,QAAQ,eAAe,IAAI;AAG7C,SAAO,QAAQ,gBAAgB;GAC7B,SAAS;GACT,QAAQ,UAAU,QAAQ;GAC1B,QAAQ;GACT,CAAC;;;;;;;;;;;;AC9GN,IAAa,gBAAb,MAA2D;CACzD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,QACkB;AAElB,MAAI,CADQ,OAAO,SAAS,MACnB,QAAS,QAAO;AACzB,MAAI,QAAQ,aAAa,SAAU,QAAO;AAE1C,MAAI;GAGF,MAAM,aAFQ,QAAQ,SAAS,OAEP,QAAQ,MAAM,MAAM;GAG5C,MAAM,SAAS,yBAFK,QAAQ,QAAQ,QAAQ,MAAM,MAAM,CAEJ,gBAAgB,UAAU;AAE9E,UAAO,IAAI,SAAS,YAAY;IAC9B,MAAM,QAAQ,MAAM,aAAa,CAAC,MAAM,OAAO,EAAE;KAC/C,UAAU;KACV,OAAO;KACR,CAAC;AACF,UAAM,OAAO;AAIb,UAAM,GAAG,eAAe,QAAQ,MAAM,CAAC;AAGvC,qBAAiB,QAAQ,KAAK,EAAE,IAAI;KACpC;UACI;AACN,UAAO;;;;;;;ACnCb,IAAa,cAAb,MAAyD;CACvD,AAAS,YAAY;CAErB,MAAM,KACJ,SACA,SACkB;EAClB,MAAM,SAAS,eAAe,QAAQ,MAAM;EAC5C,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,MAAM,KAAK;AACrD,UAAQ,OAAO,MAAM,GAAG,SAAS,MAAM,GAAG,QAAQ,QAAQ,IAAI;AAC9D,SAAO;;;;;;ACGX,MAAM,YAAqD;CACzD,MAAW,IAAI,cAAc;CAC7B,UAAW,IAAI,kBAAkB;CACjC,OAAW,IAAI,eAAe;CAC9B,OAAW,IAAI,kBAAkB;CACjC,KAAW,IAAI,aAAa;CAC7B;;;;;;;;;;;;;;AAmBD,SAAS,gBACP,QACA,OACa;CACb,MAAM,EAAE,MAAM,UAAU,YAAY;AAEpC,KAAI,SAAS,MAAO,QAAO,EAAE;CAG7B,MAAM,gBAA8D;EAClE,OAAW;EACX,UAAW;EACX,MAAW;EACX,OAAW;EACX,KAAW;EACZ;AAED,KAAI,SAAS,QAAQ;EACnB,MAAM,KAAK,cAAc;AACzB,MAAI,CAAC,GAAI,QAAO,EAAE;EAElB,MAAM,MAAM,SAAS;AACrB,MAAI,OAAO,CAAC,IAAI,QAAS,QAAO,CAAC,GAAG;AACpC,SAAO,CAAC,GAAG;;AAKb,SADmB,QAAQ,UAAU,EAAE,EACrB,QAAQ,OAAO;EAC/B,MAAM,MAAM,SAAS;AAGrB,MAAI,OAAO,QAAS,QAAO;AAC3B,SAAO,KAAK,YAAY;GACxB;;;;;;;;;;;AAgBJ,eAAsB,kBACpB,SACA,QACqB;CACrB,MAAM,WAAW,gBAAgB,QAAQ,QAAQ,MAAM;AAEvD,KAAI,SAAS,WAAW,EACtB,QAAO;EACL,mBAAmB,EAAE;EACrB,mBAAmB,EAAE;EACrB,gBAAgB,EAAE;EAClB,MAAM,OAAO;EACd;CAGH,MAAM,UAAU,MAAM,QAAQ,WAC5B,SAAS,IAAI,OAAO,OAAO;EAEzB,MAAM,KAAK,MADM,UAAU,IACD,KAAK,SAAS,OAAO;AAC/C,MAAI,CAAC,GACH,SAAQ,OAAO,MACb,wBAAwB,GAAG,oBAAoB,QAAQ,MAAM,IAC9D;AAEH,SAAO;GAAE;GAAI;GAAI;GACjB,CACH;CAED,MAAM,YAAyB,EAAE;CACjC,MAAM,SAAsB,EAAE;AAE9B,MAAK,MAAM,KAAK,QACd,KAAI,EAAE,WAAW,YACf,KAAI,EAAE,MAAM,GACV,WAAU,KAAK,EAAE,MAAM,GAAG;KAE1B,QAAO,KAAK,EAAE,MAAM,GAAG;KAIzB,QAAO,KAAK,SAAS,QAAQ,QAAQ,EAAE,EAAE;AAI7C,QAAO;EACL,mBAAmB;EACnB,mBAAmB;EACnB,gBAAgB;EAChB,MAAM,OAAO;EACd"}

package/dist/{run-XaA-UPdW.mjs → run-FeM1_UVa.mjs}

@@ -1,6 +1,6 @@
-import { i as getRegistryBackend } from "./factory-DiuntvwG.mjs";
-import { D as resolveModelCapability, O as resolveProviderKey, T as readWorkersSection, h as classModelCapability, m as assertProviderRunnable, n as claudeCommand, p as WorkersConfigError, t as buildRunEnv, w as providerKeyPath, y as isModelCapability } from "./run-env-DyTWgZC9.mjs";
-import { _ as statusPath, d as resolveTarget, f as setCooldown, g as panesDir, h as ledgerPath, i as capabilityForRun, m as eventsPath, n as ensureProxyRunning, o as isQuotaFailure, p as ensureNoMcpConfig, s as nextAutoProvider, t as DEFAULT_PROXY_PORT, u as resolveCapabilityRun, v as workersLogDir } from "./server-CzqHGbKt.mjs";
+import { i as getRegistryBackend } from "./factory-EUUhSSoq.mjs";
+import { D as resolveModelCapability, O as resolveProviderKey, T as readWorkersSection, h as classModelCapability, m as assertProviderRunnable, n as claudeCommand, p as WorkersConfigError, t as buildRunEnv, w as providerKeyPath, y as isModelCapability } from "./run-env-CEHTeIUM.mjs";
+import { _ as statusPath, d as resolveTarget, f as setCooldown, g as panesDir, h as ledgerPath, i as capabilityForRun, m as eventsPath, n as ensureProxyRunning, o as isQuotaFailure, p as ensureNoMcpConfig, s as nextAutoProvider, t as DEFAULT_PROXY_PORT, u as resolveCapabilityRun, v as workersLogDir } from "./server-CekGOJcp.mjs";
 import { appendFileSync, closeSync, existsSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -469,6 +469,10 @@ function elapsedOf(ts, now = /* @__PURE__ */ new Date()) {
 /** Shorter sleeps are legitimate polling — not worth a supervision event. */
 const SLEEP_FLOOR_SECS = 60;
 const SLEEP_RE = /^\s*sleep\s+([0-9]+(?:\.[0-9]+)?)([smhd]?)\s*(?:$|[;&|])/;
+/** s/m/h/d suffix to seconds multiplier, shared by every `sleep N<unit>` parse below. */
+function sleepUnitMultiplier(unit) {
+	return unit === "m" ? 60 : unit === "h" ? 3600 : unit === "d" ? 86400 : 1;
+}
 /**
 * Seconds of a `sleep N` (N plain or with an s/m/h/d suffix) that stands alone
 * or leads a compound command (`sleep 150; cat f`, `sleep 2m && tail f`,
@@ -480,8 +484,7 @@ const SLEEP_RE = /^\s*sleep\s+([0-9]+(?:\.[0-9]+)?)([smhd]?)\s*(?:$|[;&|])/;
 function parseSleepSecs(command) {
 	const m = command.match(SLEEP_RE);
 	if (!m) return null;
-	const mult = m[2] === "m" ? 60 : m[2] === "h" ? 3600 : m[2] === "d" ? 86400 : 1;
-	const secs = Number(m[1]) * mult;
+	const secs = Number(m[1]) * sleepUnitMultiplier(m[2]);
 	return Number.isFinite(secs) && secs >= SLEEP_FLOOR_SECS ? secs : null;
 }
 /** One-line description of a tool call, e.g. "Bash: npm test". */
@@ -636,7 +639,8 @@ function isGitRepo(cwd) {
 function promptLooksReadonly(prompt) {
 	const p = prompt.trim();
 	if (!p) return true;
-	if (/\b(read[- ]only|do not (modify|change|edit|write)|don'?t (modify|change|edit|write)|no changes)\b/i.test(p)) return true;
+	const firstLine = p.split("\n", 1)[0];
+	if (/\b(read[- ]only|do not (modify|change|edit|write)|don'?t (modify|change|edit|write)|no changes)\b/i.test(firstLine)) return true;
 	return /^(review|read|analy[sz]e|research|summar[iy]|inspect|investigate|spotcheck|report|find|list|check|verify|describe|explain|show)\b/i.test(p);
 }
 /** The classes whose runs write files and therefore default to a worktree. */
@@ -1294,6 +1298,75 @@ function itermForClaudeSession(logDir, claudeSession, now = Date.now()) {
 	return term ? itermUuid(term) : null;
 }
 
+//#endregion
+//#region src/workers/controls.ts
+/**
+* controls.ts — the clickr argv for handing desktop control to a worker or
+* taking it back, shared by `pai worker controls` and the follow pane's
+* "your controls" / "my controls" chat action, so both go through clickr the
+* same way.
+*
+* The grant is exclusive to one worker at a time: clickr's MCP server checks
+* PAI_WORKER_ID/pid against the `--agent <id> --pid <pid>` it was handed
+* control for. Crash paths are covered by clickr's own pid check; a clean
+* exit is covered by returnControlsIfHeld below, called from every exit path
+* of run.ts's runWorker.
+*/
+/** clickr argv for `who`: `you` binds the grant to `id` (and its runner pid, when known); `me` has no target. */
+function clickrControlsArgv(id, who, pid) {
+	if (who === "me") return ["controls", "me"];
+	const argv = [
+		"controls",
+		"you",
+		"--agent",
+		id
+	];
+	if (pid !== void 0) argv.push("--pid", String(pid));
+	return argv;
+}
+/** clickr argv to hand a worker's grant back on its exit. */
+function clickrControlsReturnArgv(id) {
+	return [
+		"controls",
+		"return",
+		"--agent",
+		id
+	];
+}
+/** Record that `id` was granted clickr desktop controls (`who: "you"` succeeded). */
+function markControlsHeld(logDir, id) {
+	const status = loadStatus(logDir, id);
+	if (!status) return;
+	status.controlsHeld = true;
+	saveStatus(logDir, status);
+}
+/**
+* Best-effort hand desktop controls back on a worker's exit, when it ever
+* held them. Never throws and never hangs past clickr's own exit or a 3s
+* cap — a missing clickr binary or a stuck process must not hold up the
+* worker's own exit.
+*/
+async function returnControlsIfHeld(logDir, id) {
+	if (!id) return;
+	if (!loadStatus(logDir, id)?.controlsHeld) return;
+	await new Promise((resolve) => {
+		let done = false;
+		const finish = () => {
+			if (done) return;
+			done = true;
+			resolve();
+		};
+		try {
+			const proc = spawn("clickr", clickrControlsReturnArgv(id), { stdio: "ignore" });
+			proc.on("close", finish);
+			proc.on("error", finish);
+		} catch {
+			finish();
+		}
+		setTimeout(finish, 3e3).unref();
+	});
+}
+
 //#endregion
 //#region src/workers/engines/image.ts
 /**
@@ -2428,9 +2501,11 @@ function fullContractPrompt(format) {
 		"will pick something up later, never leave a background command as your final action. Finish, then",
 		"report.",
 		"No narration, no timestamps, no greetings, no summaries of what you read; act, verify, then stop.",
-		"Never sleep-poll: no `sleep N` over 60 seconds, standalone or leading a compound command.",
-		"Long builds and tests run in background with no arbitrary `timeout` — the task notification",
-		"wakes you; read the output then. Wait on a bounded timeout or event instead.",
+		"Never sleep-poll: no `sleep N` over 60 seconds, anywhere in a command — standalone, after `&&`/`||`/",
+		"`;`/`|`, or inside a loop or subshell. Ending your turn ends this process, so a background job gets",
+		"no later wake-up here: run the long command in the FOREGROUND with a Bash timeout up to 600000 ms;",
+		"if it can run longer than that, start it in the background and wait with a foreground loop that ends",
+		"when the job ends: `while kill -0 <pid> 2>/dev/null; do sleep 15; done`.",
 		...fileNotInlineBlock(),
 		"",
 		`Operator messages: a user turn starting with ${OPERATOR_MARK} was typed by the operator while you`,
@@ -3041,7 +3116,7 @@ async function runWorker(opts) {
 	const logDir = workersLogDir(config);
 	mkdirSync(logDir, { recursive: true });
 	if (opts.className === "plan" && !opts._planner) {
-		const { runPlanner } = await import("./planner-DsZZEZCA.mjs");
+		const { runPlanner } = await import("./planner-DN967Lvm.mjs");
 		return runPlanner(opts);
 	}
 	const parent = launchParent(opts.parent);
@@ -3066,8 +3141,14 @@ async function runWorker(opts) {
 	const label = opts.label ?? shortText(parsed.prompt ?? UNLABELED, 70);
 	const model = capabilityResolution ? capabilityResolution.model : resolveRunModel(target, opts.className, opts.modelFlag);
 	const reportFormat = resolveReportFormat(opts.reportFormatFlag);
+	let workerId = opts.id;
+	const trackStart = (wid) => {
+		workerId = wid;
+		opts.onWorkerStart?.(wid);
+	};
 	try {
-		if (target.provider.engine === "image") return await executeImageRun({
+		let rc;
+		if (target.provider.engine === "image") rc = await executeImageRun({
 			config,
 			logDir,
 			target,
@@ -3083,10 +3164,10 @@ async function runWorker(opts) {
 			parent: parent ?? void 0,
 			stage: opts.stage,
 			quiet: opts.quiet,
-			onWorkerStart: opts.onWorkerStart,
+			onWorkerStart: trackStart,
 			id: opts.id
 		});
-		if (target.provider.engine === "codex") return await executeCodexRun({
+		else if (target.provider.engine === "codex") rc = await executeCodexRun({
 			config,
 			logDir,
 			target,
@@ -3100,14 +3181,14 @@ async function runWorker(opts) {
 			parent: parent ?? void 0,
 			stage: opts.stage,
 			quiet: opts.quiet,
-			onWorkerStart: opts.onWorkerStart,
+			onWorkerStart: trackStart,
 			id: opts.id,
 			worktreeFlag: opts.worktreeFlag,
 			className: opts.className,
 			reportFormat,
 			capability: capability ?? void 0
 		});
-		return await executeRun({
+		else rc = await executeRun({
 			config,
 			logDir,
 			target,
@@ -3122,7 +3203,7 @@ async function runWorker(opts) {
 			parent: parent ?? void 0,
 			stage: opts.stage,
 			quiet: opts.quiet,
-			onWorkerStart: opts.onWorkerStart,
+			onWorkerStart: trackStart,
 			id: opts.id,
 			capability: capability ?? void 0,
 			worktreeFlag: opts.worktreeFlag,
@@ -3132,7 +3213,10 @@ async function runWorker(opts) {
 			reportFormat,
 			noReportRetry: opts.noReportRetry ?? false
 		});
+		await returnControlsIfHeld(logDir, workerId);
+		return rc;
 	} catch (e) {
+		await returnControlsIfHeld(logDir, workerId);
 		if (e instanceof Error && e.message.startsWith("key file")) throw new Error(`provider "${target.providerName}": ${e.message}\nPut the token in that file (chmod 600) or point keyFile elsewhere.`);
 		throw e;
 	}
@@ -4129,5 +4213,5 @@ function resultFromOutput(out) {
 }
 
 //#endregion
-export { contextLabel as A, saveStatus as B, mergeWorker as C, UNLABELED as D, ledgerSummary as E, loadStatus as F, shortText as G, waitForTerminalStatus as H, loadStatuses as I, describeMcp as K, newWorkerId as L, elapsedOf as M, isChatPane as N, ageOf as O, isLive as P, nowStamp as R, discardWorker as S, appendLedger as T, longInlinePromptHint as U, setWorkerLabel as V, parseRunnerArgs as W, itermUuid as _, projectLaunchConfig as a, sessionTag as b, handoffFromInside as c, workerDepth as d, checkPaneForWorker as f, itermForClaudeSession as g, currentTabKey as h, usageContextTokens as i, contextPercent as j, alive as k, readInbox as l, openPaneForWorker as m, runWorker as n, parseWorkerReport as o, openFollowPane as p, expandMcpNames as q, testProvider as r, renderReport as s, printResult as t, sayToWorker as u, resolveSession as v, worktreesDir as w, workerInScope as x, sessionMapPath as y, ownsPid as z };
-//# sourceMappingURL=run-XaA-UPdW.mjs.map
+export { UNLABELED as A, newWorkerId as B, workerInScope as C, worktreesDir as D, mergeWorker as E, elapsedOf as F, waitForTerminalStatus as G, ownsPid as H, isChatPane as I, shortText as J, longInlinePromptHint as K, isLive as L, alive as M, contextLabel as N, appendLedger as O, contextPercent as P, loadStatus as R, sessionTag as S, git as T, saveStatus as U, nowStamp as V, setWorkerLabel as W, expandMcpNames as X, describeMcp as Y, currentTabKey as _, projectLaunchConfig as a, resolveSession as b, handoffFromInside as c, workerDepth as d, checkPaneForWorker as f, markControlsHeld as g, clickrControlsArgv as h, usageContextTokens as i, ageOf as j, ledgerSummary as k, readInbox as l, openPaneForWorker as m, runWorker as n, parseWorkerReport as o, openFollowPane as p, parseRunnerArgs as q, testProvider as r, renderReport as s, printResult as t, sayToWorker as u, itermForClaudeSession as v, discardWorker as w, sessionMapPath as x, itermUuid as y, loadStatuses as z };
+//# sourceMappingURL=run-FeM1_UVa.mjs.map