@tekmidian/pai 0.59.0 → 0.60.1

package/src/hooks/ts/lib/sleep-poll-gate.ts

@@ -0,0 +1,77 @@
+/**
+ * sleep-poll-gate.ts — the decision behind the PreToolUse Bash sleep-poll gate.
+ *
+ * Pure: no stdin, no filesystem, no process.env read of its own — the hook
+ * entry (pre-tool-use/block-sleep-poll.ts) does the I/O, this module decides,
+ * same split as lib/agent-gate.ts and lib/edit-gate.ts.
+ *
+ * CLAUDE.md already says "never sleep-poll"; prose does not enforce it, a
+ * PreToolUse deny does. `run_in_background: true` is always allowed — a
+ * backgrounded sleep blocks nothing, it is the harness's own long-command
+ * pattern.
+ */
+
+import { longestSleepSecs } from "../../../workers/status.js";
+
+export interface SleepPollGateInput {
+  tool_name?: string;
+  tool_input?: { command?: string; run_in_background?: boolean };
+}
+
+export type GateDecision = { decision: "allow" } | { decision: "deny"; reason: string };
+
+/**
+ * A headless worker has no owner to deliver a background-exit notification
+ * to — ending its turn ends the process, so the interactive session's advice
+ * ("background it, the harness notifies you") does not apply. Text mirrors
+ * the worker contract's own sleep-poll line (workerContractPrompt in
+ * src/workers/report.ts) so a denied worker sees the same instruction twice.
+ */
+export function denyReason(secs: number, isWorker: boolean): string {
+  const lead = `sleep ${secs}s blocked: do not sleep-poll. `;
+  if (isWorker) {
+    return (
+      lead +
+      "In a worker, run the long command in the FOREGROUND with a Bash timeout up to 600000 ms. " +
+      "If it can run longer, start it in the background and wait with a foreground loop that ends " +
+      "when the job ends: while kill -0 <pid> 2>/dev/null; do sleep 15; done"
+    );
+  }
+  return (
+    lead +
+    "Run the long command itself with run_in_background: true (the harness notifies when it exits), " +
+    "or wait on a specific condition with a bounded loop under 60s per step."
+  );
+}
+
+export function decideSleepPollGate(
+  input: SleepPollGateInput,
+  env: Record<string, string | undefined>
+): GateDecision {
+  if (input.tool_name && input.tool_name !== "Bash") return { decision: "allow" };
+  if (input.tool_input?.run_in_background === true) return { decision: "allow" };
+
+  const command = input.tool_input?.command;
+  if (typeof command !== "string") return { decision: "allow" };
+
+  const secs = longestSleepSecs(command);
+  if (secs === null) return { decision: "allow" };
+
+  return { decision: "deny", reason: denyReason(secs, env.PAI_WORKER === "1") };
+}
+
+/** Render a decision as the JSON the harness reads on the hook's stdout. */
+export function renderDecision(d: GateDecision): string {
+  if (d.decision === "allow") {
+    return JSON.stringify({
+      hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow" },
+    });
+  }
+  return JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "deny",
+      permissionDecisionReason: d.reason,
+    },
+  });
+}

package/src/hooks/ts/post-tool-use/capture-tool-output.ts

@@ -9,7 +9,7 @@
 
 import { appendFileSync, mkdirSync, existsSync } from 'fs';
 import { join } from 'path';
-import { historyDir } from '../lib/pai-paths';
+import { historyDir } from '../lib/pai-paths.js';
 
 interface ToolUseData {
   tool_name: string;

package/src/hooks/ts/post-tool-use/sync-todo-to-md.ts

@@ -19,7 +19,7 @@ import {
   getCurrentNotePath,
   addWorkToSessionNote,
   type WorkItem
-} from '../lib/project-utils';
+} from '../lib/project-utils.js';
 
 interface TodoItem {
   content: string;

package/src/hooks/ts/pre-compact/context-compression-hook.ts

@@ -31,7 +31,7 @@ import {
   updateTodoContinue,
   isProbeSession,
   WorkItem,
-} from '../lib/project-utils';
+} from '../lib/project-utils.js';
 import { getContextFill, formatContextFill } from '../lib/context-fill.js';
 import { contentToText, isNoiseFilePath, preferCwdFiles } from '../lib/transcript-text.js';
 import { readContextHandoverCache } from '../lib/context-handover-cache.js';

package/src/hooks/ts/pre-tool-use/block-sleep-poll.test.ts

@@ -0,0 +1,44 @@
+import { describe, it, expect } from "vitest";
+import { execFileSync } from "node:child_process";
+
+// The entry does its own stdin read and calls main() unconditionally at
+// module scope — run it as a real subprocess with its own piped stdin,
+// exactly like route-edits-to-worker.test.ts.
+describe("block-sleep-poll", () => {
+  const ENTRYPOINT = "src/hooks/ts/pre-tool-use/block-sleep-poll.ts";
+
+  function runHook(command: string, extra: Record<string, unknown> = {}, env: NodeJS.ProcessEnv = {}): string {
+    // This test may itself run as a worker (PAI_WORKER=1 in its own env),
+    // which must not leak into the child and mask the case under test.
+    const { PAI_WORKER: _drop, ...baseEnv } = process.env;
+    return execFileSync("bun", [ENTRYPOINT], {
+      input: JSON.stringify({ tool_name: "Bash", tool_input: { command, ...extra } }),
+      encoding: "utf8",
+      timeout: 15_000,
+      env: { ...baseEnv, ...env },
+    });
+  }
+
+  it("denies a long sleep (interactive session)", () => {
+    const out = runHook("sleep 590");
+    const parsed = JSON.parse(out).hookSpecificOutput;
+    expect(parsed.permissionDecision).toBe("deny");
+    expect(parsed.permissionDecisionReason).toContain("sleep 590s blocked");
+    expect(parsed.permissionDecisionReason).toContain("run_in_background: true");
+  });
+
+  it("denies a long sleep with the worker-specific reason when PAI_WORKER=1", () => {
+    const out = runHook("sleep 590", {}, { PAI_WORKER: "1" });
+    const parsed = JSON.parse(out).hookSpecificOutput;
+    expect(parsed.permissionDecision).toBe("deny");
+    expect(parsed.permissionDecisionReason).toContain("FOREGROUND with a Bash timeout up to 600000 ms");
+  });
+
+  it("allows a short sleep (prints nothing)", () => {
+    expect(runHook("sleep 30")).toBe("");
+  });
+
+  it("allows a long sleep in the background (prints nothing)", () => {
+    expect(runHook("sleep 590", { run_in_background: true })).toBe("");
+  });
+});

package/src/hooks/ts/pre-tool-use/block-sleep-poll.ts

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+
+/**
+ * block-sleep-poll.ts — PreToolUse (Bash)
+ *
+ * Denies a Bash command that contains a `sleep N` of SLEEP_FLOOR_SECS or more
+ * as its own command segment — anywhere in the command, not only leading it —
+ * unless the call is backgrounded (`run_in_background: true`), which blocks
+ * nothing. CLAUDE.md already says "never sleep-poll"; this hook is the
+ * enforcement, prose alone does not stop it (observed 2026-09-29: sessions and
+ * workers kept running `sleep 590` waits on a background job anyway).
+ *
+ * This file is only I/O: read stdin, ask lib/sleep-poll-gate for the
+ * decision, print it. The decision itself lives in lib/sleep-poll-gate.ts and
+ * is tested there.
+ */
+
+import { decideSleepPollGate, renderDecision, type SleepPollGateInput } from "../lib/sleep-poll-gate.js";
+
+function allow(): void {
+  process.exit(0);
+}
+
+function deny(reason: string): void {
+  process.stdout.write(renderDecision({ decision: "deny", reason }) + "\n");
+  process.exit(0);
+}
+
+async function main(): Promise<void> {
+  let text = "";
+  try {
+    for await (const chunk of process.stdin) text += chunk;
+  } catch {
+    return allow();
+  }
+  if (!text.trim()) return allow();
+
+  let input: SleepPollGateInput;
+  try {
+    input = JSON.parse(text) as SleepPollGateInput;
+  } catch {
+    return allow();
+  }
+
+  const decision = decideSleepPollGate(input, process.env);
+  if (decision.decision === "deny") return deny(decision.reason);
+  return allow();
+}
+
+main().catch(() => process.exit(0));

package/src/hooks/ts/session-end/capture-session-summary.ts

@@ -9,7 +9,7 @@
 
 import { writeFileSync, mkdirSync, existsSync, readFileSync, readdirSync } from 'fs';
 import { join } from 'path';
-import { historyDir } from '../lib/pai-paths';
+import { historyDir } from '../lib/pai-paths.js';
 
 interface SessionData {
   conversation_id: string;

package/src/hooks/ts/session-start/initialize-session.ts

@@ -24,8 +24,8 @@ import { isWorkerSession } from "../lib/worker-session.js";
 import { existsSync, statSync, readFileSync, writeFileSync } from 'fs';
 import { join } from 'path';
 import { tmpdir } from 'os';
-import { ADAPTER_DIR } from '../lib/pai-paths';
-import { sendNtfyNotification, isWhatsAppEnabled, isProbeSession } from '../lib/project-utils';
+import { ADAPTER_DIR } from '../lib/pai-paths.js';
+import { sendNtfyNotification, isWhatsAppEnabled, isProbeSession } from '../lib/project-utils.js';
 
 // Debounce duration in milliseconds (prevents duplicate SessionStart events)
 const DEBOUNCE_MS = 2000;

package/src/hooks/ts/session-start/load-core-context.ts

@@ -28,8 +28,8 @@
 import { isWorkerSession } from "../lib/worker-session.js";
 import { readFileSync, existsSync } from 'fs';
 import { join } from 'path';
-import { SKILLS_DIR } from '../lib/pai-paths';
-import { isProbeSession } from '../lib/project-utils';
+import { SKILLS_DIR } from '../lib/pai-paths.js';
+import { isProbeSession } from '../lib/project-utils.js';
 import { stripFrontmatter } from '../lib/frontmatter.js';
 
 async function main() {

package/src/hooks/ts/session-start/load-project-context.ts

@@ -35,7 +35,7 @@ import {
   sendNtfyNotification,
   isProbeSession,
   archiveSessionFilesToSessionsDir
-} from '../lib/project-utils';
+} from '../lib/project-utils.js';
 
 /**
  * Find the pai CLI binary path dynamically.

package/src/hooks/ts/stop/stop-hook.ts

@@ -15,7 +15,7 @@ import {
   isProbeSession,
   updateTodoContinue, sessionIdFromTranscript,
   WorkItem
-} from '../lib/project-utils';
+} from '../lib/project-utils.js';
 import { paiHomePath, sessionStateDir } from '../../../config/pai-files.js';
 
 // ---------------------------------------------------------------------------

package/src/hooks/ts/user-prompt/cleanup-session-files.ts

@@ -9,7 +9,7 @@
  */
 
 import { dirname, basename } from 'path';
-import { archiveSessionFilesToSessionsDir } from '../lib/project-utils';
+import { archiveSessionFilesToSessionsDir } from '../lib/project-utils.js';
 
 interface HookInput {
   session_id: string;

package/statusline-command.sh

@@ -28,6 +28,21 @@ claude_env="${PAI_DIR:-$HOME/.claude}/.env"
 # Read JSON input from stdin
 input=$(cat)
 
+# GNU coreutils first, BSD/macOS fallback: `stat -f %m` on GNU is filesystem
+# status (not "file", -f means "filesystem"), so it silently parses the path
+# as a file operand and prints filesystem info instead of failing — a cache
+# never reads as fresh. `stat -c` errors cleanly on BSD, so GNU-first is safe
+# on both.
+file_mtime() {
+    stat -c %Y "$1" 2>/dev/null || stat -f %m "$1" 2>/dev/null || printf '%s\n' "${2:-0}"
+}
+
+# Same GNU-first/BSD-fallback rule for formatting an epoch: `date -d @epoch`
+# on GNU, `date -r epoch` on BSD/macOS.
+fmt_epoch() {
+    date -d "@$1" "+$2" 2>/dev/null || date -r "$1" "+$2" 2>/dev/null || printf ''
+}
+
 # Get Digital Assistant configuration from environment
 DA_NAME="${DA:-Assistant}"  # Assistant name
 DA_COLOR="${DA_COLOR:-purple}"  # Color for the assistant name
@@ -81,7 +96,7 @@ model_id=$(echo "$input" | jq -r '.model.id // .model.display_name // empty' 2>/
 cc_version=$(echo "$input" | jq -r '.version // empty' 2>/dev/null)
 if [ -z "$cc_version" ]; then
     _ccv_cache="${pai_cache_dir}/cc-version"
-    _ccv_age=$(( $(date +%s) - $(stat -f %m "$_ccv_cache" 2>/dev/null || echo 0) ))
+    _ccv_age=$(( $(date +%s) - $(file_mtime "$_ccv_cache" 0) ))
     if [ -s "$_ccv_cache" ] && [ "$_ccv_age" -lt 86400 ] 2>/dev/null; then
         read -r cc_version < "$_ccv_cache"
     elif command -v claude >/dev/null 2>&1; then
@@ -133,8 +148,8 @@ if [ -f "$_workers_yaml" ] && command -v node >/dev/null 2>&1; then
     _sl_script="$(readlink -f "$0" 2>/dev/null || echo "$0")"
     _sl_script_dir="$(dirname "$_sl_script")"
     _providers_cache="${pai_cache_dir}/statusline-providers.json"
-    _yaml_mtime=$(stat -f %m "$_workers_yaml" 2>/dev/null || echo 0)
-    _cache_mtime=$(stat -f %m "$_providers_cache" 2>/dev/null || echo -1)
+    _yaml_mtime=$(file_mtime "$_workers_yaml" 0)
+    _cache_mtime=$(file_mtime "$_providers_cache" -1)
     if [ ! -s "$_providers_cache" ] || [ "$_cache_mtime" -lt "$_yaml_mtime" ] 2>/dev/null; then
         mkdir -p "$pai_cache_dir" 2>/dev/null
         # umask 077 so the temp file is born 0600 — it must never exist at a
@@ -209,7 +224,7 @@ dir_name=$(basename "$current_dir" 2>/dev/null)
 
 # Read Whazaa session name from iTerm2 user variable
 pai_session_name=""
-if [ -n "$ITERM_SESSION_ID" ]; then
+if [ -n "$ITERM_SESSION_ID" ] && command -v osascript >/dev/null 2>&1; then
     ITERM_UUID="${ITERM_SESSION_ID##*:}"
     pai_session_name=$(osascript << APPLESCRIPT 2>/dev/null
 tell application "iTerm2"
@@ -634,7 +649,7 @@ fi
 # buys nothing when the live numbers arrived on stdin.
 if [ "$session_provider" = "anthropic" ] && [ -z "$usage_source" ]; then
     if [ -f "$usage_cache" ]; then
-        cache_age=$(( $(date +%s) - $(stat -f %m "$usage_cache" 2>/dev/null || echo 0) ))
+        cache_age=$(( $(date +%s) - $(file_mtime "$usage_cache" 0) ))
         [ "$cache_age" -gt "$usage_cache_ttl" ] && _fetch_usage &
     else
         _fetch_usage &
@@ -643,7 +658,7 @@ fi
 
 # Source 2 (fallback): the OAuth endpoint cache, and only while it is fresh.
 if [ "$session_provider" = "anthropic" ] && [ -z "$usage_source" ] && [ -f "$usage_cache" ]; then
-    _usage_cache_age=$(( $(date +%s) - $(stat -f %m "$usage_cache" 2>/dev/null || echo 0) ))
+    _usage_cache_age=$(( $(date +%s) - $(file_mtime "$usage_cache" 0) ))
     if [ "$_usage_cache_age" -le "$usage_cache_max_age" ] 2>/dev/null; then
         usage_source="oauth"
         five_hour=$(jq -r '.five_hour.utilization // empty' "$usage_cache" 2>/dev/null)
@@ -686,8 +701,8 @@ if [ "$session_provider" = "anthropic" ]; then
     # Format reset times in local time
     five_reset_fmt=""
     seven_reset_fmt=""
-    [ "$five_reset_epoch" -gt 0 ] 2>/dev/null && five_reset_fmt=$(date -r "$five_reset_epoch" "+%H:%M" 2>/dev/null || echo "")
-    [ "$seven_reset_epoch" -gt 0 ] 2>/dev/null && seven_reset_fmt=$(date -r "$seven_reset_epoch" "+%a %H:%M" 2>/dev/null || echo "")
+    [ "$five_reset_epoch" -gt 0 ] 2>/dev/null && five_reset_fmt=$(fmt_epoch "$five_reset_epoch" "%H:%M")
+    [ "$seven_reset_epoch" -gt 0 ] 2>/dev/null && seven_reset_fmt=$(fmt_epoch "$seven_reset_epoch" "%a %H:%M")
 
     five_color=$(_usage_color "$five_hour_int")
     seven_color=$(_usage_color "$seven_day_int")
@@ -834,7 +849,7 @@ if [ "$session_provider" != "anthropic" ]; then
         # Use cache if fresh, otherwise refresh in the background
         if [ -n "$usage_url" ]; then
             if [ -f "$provider_cache" ]; then
-                cache_age=$(( $(date +%s) - $(stat -f %m "$provider_cache" 2>/dev/null || echo 0) ))
+                cache_age=$(( $(date +%s) - $(file_mtime "$provider_cache" 0) ))
                 if [ "$cache_age" -gt "$usage_ttl" ]; then
                     _fetch_provider_usage "$usage_url" "$usage_auth" "$provider_keyfile" "$provider_cache" "$usage_probe" &
                 fi
@@ -879,9 +894,9 @@ if [ "$session_provider" != "anthropic" ]; then
                         # Within the next 24h the weekday carries no information;
                         # beyond it, the bare time would be ambiguous.
                         if [ $(( w_epoch - $(date +%s) )) -lt 86400 ]; then
-                            w_reset_fmt=$(date -r "$w_epoch" "+%H:%M" 2>/dev/null || echo "")
+                            w_reset_fmt=$(fmt_epoch "$w_epoch" "%H:%M")
                         else
-                            w_reset_fmt=$(date -r "$w_epoch" "+%a %H:%M" 2>/dev/null || echo "")
+                            w_reset_fmt=$(fmt_epoch "$w_epoch" "%a %H:%M")
                         fi
                     fi
                 fi

package/dist/daemon-B6hx1Ysz.mjs

@@ -1,19 +0,0 @@
-import "./utils-C9HsYDpO.mjs";
-import "./migrate-BD7D8EEh.mjs";
-import "./factory-DiuntvwG.mjs";
-import "./wakeup-D0uvqLsE.mjs";
-import "./context-handover-cache-Dt4HW1Ro.mjs";
-import "./config-D1omG_UU.mjs";
-import "./run-env-DyTWgZC9.mjs";
-import "./run-XaA-UPdW.mjs";
-import "./server-CzqHGbKt.mjs";
-import "./state-n13uPK5B.mjs";
-import "./aibroker-client-BK1h--W_.mjs";
-import "./session-keepalive-DDsEo81Q.mjs";
-import "./embeddings-DfrYNIng.mjs";
-import { t as serve } from "./daemon-CmqJfeb9.mjs";
-import "./router-BdxdsAvs.mjs";
-import "./tools-Diro2s8J.mjs";
-import "./work-queue-worker-DL9lu8sN.mjs";
-
-export { serve };