@tekmidian/pai 0.60.1 → 0.62.0

package/dist/{program-BnsjB57Q.mjs → program-BRvCzhjx.mjs}

@@ -3,27 +3,27 @@ import { a as slugify$1, i as parseSessionFilename } from "./migrate-BD7D8EEh.mj
 import { n as ensurePaiMarker } from "./pai-marker-D1MMswkz.mjs";
 import { t as STOP_WORDS } from "./stop-words-ClCwO8mZ.mjs";
 import { t as applyRecencyBoost } from "./search-BaTbyWjK.mjs";
-import { a as getStorageBackend, i as getRegistryBackend, r as createStorageBackend, s as humanDuration } from "./factory-EUUhSSoq.mjs";
-import { a as formatDetectionJson, i as formatDetection, n as migrateIdentityFile, r as detectProject } from "./wakeup-C48hcN6O.mjs";
-import { B as claudeProjectsDir, C as findLatestNote, H as scanTranscriptFolders, I as resolveHome, L as saveScanConfig, M as cmdScan, N as loadScanConfig, P as migrateScanConfig, R as upsertProject, S as applyContinue, T as readBodyFile, U as transcriptFiles, V as findMovedProjects, d as migrateWorkQueue, g as migrateSummaryCooldowns, t as readContextHandoverCache, v as extractAndStoreTriples, w as findNotesDir$1, x as appendCheckpointToNote, z as upsertSession } from "./context-handover-cache-BzM7Qudn.mjs";
+import { a as getStorageBackend, i as getRegistryBackend, r as createStorageBackend, s as humanDuration } from "./factory-BozZa81q.mjs";
+import { a as formatDetectionJson, i as formatDetection, n as migrateIdentityFile, r as detectProject } from "./wakeup-DO1O4udw.mjs";
+import { B as claudeProjectsDir, C as findLatestNote, H as scanTranscriptFolders, I as resolveHome, L as saveScanConfig, M as cmdScan, N as loadScanConfig, P as migrateScanConfig, R as upsertProject, S as applyContinue, T as readBodyFile, U as transcriptFiles, V as findMovedProjects, d as migrateWorkQueue, g as migrateSummaryCooldowns, t as readContextHandoverCache, v as extractAndStoreTriples, w as findNotesDir$1, x as appendCheckpointToNote, z as upsertSession } from "./context-handover-cache-DFNnlWv2.mjs";
 import { a as paiHomePath, i as paiHomeDir, n as migratePaiDir, o as resolvePaiFile, r as migratePaiFile, t as PaiFileMigrationError } from "./pai-home-CeOIYltV.mjs";
 import { b as OWNER_LABEL_PREFIX, c as migrateConfigFile, d as readMainConfigRaw, f as writeMainConfigRaw, h as resolvedMainConfigPath, l as paiConfigFilePath, m as migrateMainConfigToYaml, n as CONFIG_FILE$2, o as expandHome, p as MainConfigError, s as loadConfig, t as CONFIG_DIR, u as paiConfigYamlFilePath, v as readJsonStrict, x as UNROUTED, y as writeJsonAtomic } from "./config-CQCmH_gV.mjs";
 import { a as schedulerLogPath, i as paiSocketPath, n as daemonLogPath, r as daemonPidPath } from "./runtime-paths-BRwDeBEg.mjs";
-import { A as initWorkersYaml, B as stripModelVariant, F as relocateWorkersYaml, I as workersYamlLegacyNotice, L as workersYamlPath, M as migrateWorkersToYaml, N as needsWorkersYamlRelocation, P as parseWorkersYamlDocument, R as DEFAULT_CONTEXT_WINDOW, S as nativeAnthropicProvider, T as readWorkersSection, _ as expandHome$1, d as PROVIDER_TAGS, j as inlineWorkersYamlKeys, p as WorkersConfigError, r as ANTHROPIC_NATIVE, t as buildRunEnv, u as MODEL_CAPABILITIES, v as getProviderOrNative, x as maskKey, y as isModelCapability, z as contextWindowFromModelId } from "./run-env-CEHTeIUM.mjs";
-import { A as UNLABELED, E as mergeWorker, G as waitForTerminalStatus, H as ownsPid, I as isChatPane, K as longInlinePromptHint, L as isLive, O as appendLedger, R as loadStatus, U as saveStatus, W as setWorkerLabel, X as expandMcpNames, Y as describeMcp, a as projectLaunchConfig, c as handoffFromInside, f as checkPaneForWorker, g as markControlsHeld, h as clickrControlsArgv, i as usageContextTokens, m as openPaneForWorker, n as runWorker, o as parseWorkerReport, p as openFollowPane, q as parseRunnerArgs, r as testProvider, u as sayToWorker, w as discardWorker, z as loadStatuses } from "./run-FeM1_UVa.mjs";
+import { B as contextWindowFromModelId, C as nativeAnthropicProvider, E as readWorkersSection, F as parseWorkersYamlDocument, I as relocateWorkersYaml, L as workersYamlLegacyNotice, M as inlineWorkersYamlKeys, N as migrateWorkersToYaml, P as needsWorkersYamlRelocation, R as workersYamlPath, S as maskKey, V as stripModelVariant, b as isModelCapability, f as PROVIDER_TAGS, j as initWorkersYaml, m as WorkersConfigError, r as ANTHROPIC_NATIVE, t as buildRunEnv, u as MODEL_CAPABILITIES, v as expandHome$1, y as getProviderOrNative, z as DEFAULT_CONTEXT_WINDOW } from "./run-env-BE5xyCwy.mjs";
+import { A as appendLedger, B as loadStatus, D as mergeWorker, E as git, G as saveStatus, J as longInlinePromptHint, K as setWorkerLabel, M as UNLABELED, O as uncommittedPaths, Q as expandMcpNames, R as isChatPane, T as gcWorktrees, V as loadStatuses, W as ownsPid, Y as parseRunnerArgs, Z as describeMcp, a as projectLaunchConfig, c as handoffFromInside, f as checkPaneForWorker, g as markControlsHeld, h as clickrControlsArgv, i as usageContextTokens, m as openPaneForWorker, n as runWorker, o as parseWorkerReport, p as openFollowPane, q as waitForTerminalStatus, r as testProvider, u as sayToWorker, w as discardWorker, z as isLive } from "./run-BVQZI79D.mjs";
 import { t as MergeError } from "./merge-xoyfZQ4W.mjs";
 import { n as oldFederationPath, t as federationDbPath } from "./federation-db-w8e-sKjp.mjs";
 import { r as registryDbPath, t as oldRegistryPath } from "./registry-db-Bkpbp7Gf.mjs";
-import { i as indexProjectWithBackend } from "./async-CLvuY7b-.mjs";
+import { i as indexProjectWithBackend } from "./async-DNVWtQl2.mjs";
 import { t as PaiClient } from "./ipc-client-Dasm515c.mjs";
-import { A as getConfigValueOp, C as psOutput, D as resolveSpecPath, E as readSpecPrompt, M as setConfigValueOp, N as unsetConfigValueOp, O as MainConfigOpsError, S as followWorkers, T as statusLineOutput, _ as setWorkersEnabled, a as addProvider, b as updateProvider, c as describeModels, d as removeProvider, f as resolveProviderName, g as setProviderModel, h as setProviderEnabled, i as fallbackStatusText, j as listConfigOp, k as formatConfigGetOutput, l as describeProviders, m as setClass, n as fallbackOn, o as classTargetText, p as setCapabilityPreference, r as fallbackStatus, s as describeCapabilities, t as fallbackOff, u as modelPrefsText, v as unsetCapabilityPreference, w as replayOutput, x as useProvider, y as unsetClass } from "./fallback-CjdakQVu.mjs";
-import { _ as resolveSessionByNameOrId, a as buildDeduped, c as hasConversation, d as providerResumePlan, f as restoreTopLevel, g as migrateSessionScanCache, h as fmtAge, l as launchInDir, m as printExitDir, o as normalizeName$2, p as resumeArgvText, s as renderDedupedSessions, t as cmdMain, u as launchPrompt, v as scanCacheFilePath, y as scanSessions } from "./main-resolver-BFQfU5xo.mjs";
+import { A as getConfigValueOp, C as psOutput, D as resolveSpecPath, E as readSpecPrompt, M as setConfigValueOp, N as unsetConfigValueOp, O as MainConfigOpsError, S as followWorkers, T as statusLineOutput, _ as setWorkersEnabled, a as addProvider, b as updateProvider, c as describeModels, d as removeProvider, f as resolveProviderName, g as setProviderModel, h as setProviderEnabled, i as fallbackStatusText, j as listConfigOp, k as formatConfigGetOutput, l as describeProviders, m as setClass, n as fallbackOn, o as classTargetText, p as setCapabilityPreference, r as fallbackStatus, s as describeCapabilities, t as fallbackOff, u as modelPrefsText, v as unsetCapabilityPreference, w as replayOutput, x as useProvider, y as unsetClass } from "./fallback-F0TWGVM2.mjs";
+import { _ as resolveSessionByNameOrId, a as buildDeduped, c as hasConversation, d as providerResumePlan, f as restoreTopLevel, g as migrateSessionScanCache, h as fmtAge$1, l as launchInDir, m as printExitDir, o as normalizeName$2, p as resumeArgvText, s as renderDedupedSessions, t as cmdMain, u as launchPrompt, v as scanCacheFilePath, y as scanSessions } from "./main-resolver-BIft_FVF.mjs";
 import { n as queriesDirPath, t as migrateQueriesDir } from "./query-feedback-xz5axTj3.mjs";
-import { h as ledgerPath, m as eventsPath, n as ensureProxyRunning, p as ensureNoMcpConfig, r as stopProxy, t as DEFAULT_PROXY_PORT, v as workersLogDir } from "./server-CekGOJcp.mjs";
+import { _ as statusPath, h as ledgerPath, m as eventsPath, n as ensureProxyRunning, p as ensureNoMcpConfig, r as stopProxy, t as DEFAULT_PROXY_PORT, v as workersLogDir } from "./server-BY6AedmC.mjs";
 import { i as sendToSession, n as fetchLiveSessions, r as revealItermSession, t as callAiBroker } from "./aibroker-client-BK1h--W_.mjs";
-import { a as totalUsageTokens, i as parseSessionUsage, r as sessionKeepaliveLedgerSummary, t as loadSessionKeepaliveState } from "./session-keepalive-Bc9aT678.mjs";
-import { t as runChain } from "./chain-CGyAIHo4.mjs";
-import { appendFileSync, chmodSync, copyFileSync, cpSync, createReadStream, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
+import { a as totalUsageTokens, i as parseSessionUsage, r as sessionKeepaliveLedgerSummary, t as loadSessionKeepaliveState } from "./session-keepalive-DJA97K2X.mjs";
+import { t as runChain } from "./chain-CuaDawK9.mjs";
+import { appendFileSync, chmodSync, closeSync, copyFileSync, cpSync, createReadStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, platform, tmpdir, userInfo } from "node:os";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 import chalk from "chalk";
@@ -161,7 +161,7 @@ async function cmdPromote(opts) {
 		console.error(dim$1(`  Pick a durable location for the new project.`));
 		process.exit(1);
 	}
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const encodedDir = encodeDir(targetPath);
 	if (await registryBackend.getProjectBySlug(slug) ?? await registryBackend.getProjectByRootPath(targetPath) ?? await registryBackend.getProjectByEncodedDir(encodedDir)) {
@@ -2035,7 +2035,7 @@ async function cmdUnregister(slug, opts = {}) {
 //#region src/cli/commands/project/projects-index.ts
 function registerProjectsCommands(projectsCmd) {
 	projectsCmd.command("list", { isDefault: true }).description("Show the unified deduped listing (same as `pai`).\nUse --all to include cold / zero-session / archived projects.").option("--all", "Show all entries including cold / zero-session / archived projects").option("-n, --n <count>", "Max rows to show", "20").action(async (opts) => {
-		const { cmdMain } = await import("./main-resolver-VMBENifT.mjs");
+		const { cmdMain } = await import("./main-resolver-C9-poMdi.mjs");
 		await cmdMain(void 0, void 0, opts);
 	});
 	projectsCmd.command("list-raw").description("Raw registry listing with slug, path, status, last_active columns").option("--all", "Include archived projects (default: active only)").option("--status <status>", "Filter by status: active | archived").option("--tag <tag>", "Filter by tag").option("--type <type>", "Filter by type").action(async (opts) => {
@@ -2630,13 +2630,13 @@ function migrateFederationDbOrphan(dryRun) {
 	if (existsSync(oldPath) && !dryRun) {
 		let heldOpen = false;
 		try {
-			execSync(`lsof "${oldPath}"`, { stdio: "pipe" });
+			execFileSync("lsof", [oldPath], { stdio: "pipe" });
 			heldOpen = true;
 		} catch {}
 		if (heldOpen) {
 			console.log("  federation database (orphan): held open by the daemon — restarting it first");
-			execSync("pai daemon restart", { stdio: "inherit" });
-			execSync("sleep 2");
+			execFileSync("pai", ["daemon", "restart"], { stdio: "inherit" });
+			execFileSync("sleep", ["2"]);
 		}
 	}
 	return migrateOrphanFederationDb({ dryRun });
@@ -2644,12 +2644,12 @@ function migrateFederationDbOrphan(dryRun) {
 function checkpointAndVerify(oldPath, newPath, label) {
 	let hasSqlite3 = true;
 	try {
-		execSync("command -v sqlite3", { stdio: "pipe" });
+		execFileSync("which", ["sqlite3"], { stdio: "pipe" });
 	} catch {
 		hasSqlite3 = false;
 	}
 	if (hasSqlite3) try {
-		execSync(`sqlite3 "${oldPath}" "PRAGMA wal_checkpoint(TRUNCATE);"`, { stdio: "pipe" });
+		execFileSync("sqlite3", [oldPath, "PRAGMA wal_checkpoint(TRUNCATE);"], { stdio: "pipe" });
 	} catch {}
 	const stamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10).replace(/-/g, "");
 	for (const suffix of ["-wal", "-shm"]) {
@@ -2659,7 +2659,7 @@ function checkpointAndVerify(oldPath, newPath, label) {
 		} catch {}
 	}
 	if (hasSqlite3) try {
-		const check = execSync(`sqlite3 "${newPath}" "PRAGMA integrity_check;"`, { stdio: "pipe" }).toString().trim();
+		const check = execFileSync("sqlite3", [newPath, "PRAGMA integrity_check;"], { stdio: "pipe" }).toString().trim();
 		if (check !== "ok") throw new PaiFileMigrationError(`${newPath}: PRAGMA integrity_check reported "${check}" — investigate before trusting this copy`);
 	} catch (e) {
 		if (e instanceof PaiFileMigrationError) throw e;
@@ -2682,13 +2682,13 @@ function migrateRegistryDbFile(dryRun) {
 	if (!existsSync(oldPath) || dryRun) return migratePaiFile(newPath, [oldPath], { dryRun });
 	let heldOpen = false;
 	try {
-		execSync(`lsof "${oldPath}"`, { stdio: "pipe" });
+		execFileSync("lsof", [oldPath], { stdio: "pipe" });
 		heldOpen = true;
 	} catch {}
 	if (heldOpen) {
 		console.log("  registry database: held open by the daemon — restarting it first");
-		execSync("pai daemon restart", { stdio: "inherit" });
-		execSync("sleep 2");
+		execFileSync("pai", ["daemon", "restart"], { stdio: "inherit" });
+		execFileSync("sleep", ["2"]);
 	}
 	const result = migratePaiFile(newPath, [oldPath], { dryRun: false });
 	if (result.fromPath) checkpointAndVerify(oldPath, newPath, "registry database");
@@ -2711,13 +2711,13 @@ function migrateFederationDbFile(dryRun) {
 	if (!existsSync(oldPath) || dryRun) return migratePaiFile(newPath, [oldPath], { dryRun });
 	let heldOpen = false;
 	try {
-		execSync(`lsof "${oldPath}"`, { stdio: "pipe" });
+		execFileSync("lsof", [oldPath], { stdio: "pipe" });
 		heldOpen = true;
 	} catch {}
 	if (heldOpen) {
 		console.log("  federation database (live): held open by the daemon — restarting it first");
-		execSync("pai daemon restart", { stdio: "inherit" });
-		execSync("sleep 2");
+		execFileSync("pai", ["daemon", "restart"], { stdio: "inherit" });
+		execFileSync("sleep", ["2"]);
 	}
 	const result = migratePaiFile(newPath, [oldPath], { dryRun: false });
 	if (result.fromPath) checkpointAndVerify(oldPath, newPath, "federation database");
@@ -3247,7 +3247,7 @@ function registerStatsCommands(memoryCmd) {
 //#region src/cli/commands/memory/sources-cmd.ts
 function registerSourcesCommand(memoryCmd) {
 	memoryCmd.command("sources").description("Show what the indexer has taken in: composition by source, which roots\ncontent enters from, the heaviest single files, and how many chunks are\nrewritten per day (which distinguishes a finite backlog from a treadmill).").option("--limit <n>", "Rows per section (default 8)", "8").action(async (opts) => {
-		const { createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 		const { loadConfig } = await import("./config-DjXq_W42.mjs");
 		const { cmdMemorySources } = await import("./sources-BBe3AZ-W.mjs");
 		let backend;
@@ -4752,15 +4752,29 @@ function registerBackupCommands(program) {
 			const sqlDest = join(backupDir, "postgres-pai.sql");
 			console.log(dim$1(`  Running pg_dump on ${DOCKER_CONTAINER$1} (this may take a moment)...`));
 			try {
-				execSync(`docker inspect ${DOCKER_CONTAINER$1} --format='{{.State.Status}}'`, { stdio: "pipe" });
-				execSync(`docker exec ${DOCKER_CONTAINER$1} pg_dump -U ${PG_USER$1} ${PG_DATABASE$1} > "${sqlDest}"`, {
-					stdio: [
-						"pipe",
+				execFileSync("docker", [
+					"inspect",
+					DOCKER_CONTAINER$1,
+					"--format={{.State.Status}}"
+				], { stdio: "pipe" });
+				const sqlFd = openSync(sqlDest, "w");
+				try {
+					const dump = spawnSync("docker", [
+						"exec",
+						DOCKER_CONTAINER$1,
+						"pg_dump",
+						"-U",
+						PG_USER$1,
+						PG_DATABASE$1
+					], { stdio: [
 						"pipe",
+						sqlFd,
 						"pipe"
-					],
-					shell: true
-				});
+					] });
+					if (dump.status !== 0) throw new Error(dump.stderr?.toString().trim() || `pg_dump exited with code ${dump.status}`);
+				} finally {
+					closeSync(sqlFd);
+				}
 				results.push({
 					label: "Postgres DB",
 					path: sqlDest,
@@ -5650,7 +5664,7 @@ function cmdOpen(opts) {
 	const url = `obsidian://open?vault=${encodeURIComponent(vaultName)}`;
 	console.log(dim$1(`  Opening: ${url}`));
 	try {
-		execSync(`open "${url}"`, { stdio: "ignore" });
+		execFileSync("open", [url], { stdio: "ignore" });
 		console.log(ok$1(`  Opened vault "${vaultName}" in Obsidian.`));
 	} catch (e) {
 		console.error(err(`  Failed to open Obsidian: ${e}`));
@@ -7038,10 +7052,19 @@ function cmdLogs(opts) {
 		return;
 	}
 	if (opts.follow) try {
-		execSync(`tail -f -n ${lines} "${DAEMON_LOG}"`, { stdio: "inherit" });
+		execFileSync("tail", [
+			"-f",
+			"-n",
+			lines,
+			DAEMON_LOG
+		], { stdio: "inherit" });
 	} catch {}
 	else try {
-		execSync(`tail -n ${lines} "${DAEMON_LOG}"`, { stdio: "inherit" });
+		execFileSync("tail", [
+			"-n",
+			lines,
+			DAEMON_LOG
+		], { stdio: "inherit" });
 	} catch (e) {
 		const msg = e instanceof Error ? e.message : String(e);
 		console.error(err(`Could not read log: ${msg}`));
@@ -7050,7 +7073,7 @@ function cmdLogs(opts) {
 }
 function registerDaemonCommands(daemonCmd) {
 	daemonCmd.command("serve").description("Start the PAI daemon in the foreground").action(async () => {
-		const { serve } = await import("./daemon-jviL3VVJ.mjs");
+		const { serve } = await import("./daemon-bJi1gDkG.mjs");
 		const { loadConfig: lc, ensureConfigDir } = await import("./config-DjXq_W42.mjs");
 		ensureConfigDir();
 		await serve(lc());
@@ -7228,11 +7251,20 @@ function registerRestoreCommands(program) {
 		if (hasSql && opts.postgres) {
 			console.log(dim$1("  Restoring Postgres database (this may take a while)..."));
 			try {
-				execSync(`docker inspect ${DOCKER_CONTAINER} --format='{{.State.Status}}'`, { stdio: "pipe" });
-				execSync(`docker exec ${DOCKER_CONTAINER} psql -U ${PG_USER} -c "DROP DATABASE IF EXISTS ${PG_DATABASE}; CREATE DATABASE ${PG_DATABASE} OWNER ${PG_USER};"`, {
-					stdio: "pipe",
-					shell: true
-				});
+				execFileSync("docker", [
+					"inspect",
+					DOCKER_CONTAINER,
+					"--format={{.State.Status}}"
+				], { stdio: "pipe" });
+				execFileSync("docker", [
+					"exec",
+					DOCKER_CONTAINER,
+					"psql",
+					"-U",
+					PG_USER,
+					"-c",
+					`DROP DATABASE IF EXISTS ${PG_DATABASE}; CREATE DATABASE ${PG_DATABASE} OWNER ${PG_USER};`
+				], { stdio: "pipe" });
 				const sqlContent = readFileSync(join(resolvedDir, "postgres-pai.sql"), "utf8");
 				const psqlResult = spawnSync("docker", [
 					"exec",
@@ -8376,6 +8408,11 @@ async function stepSettings(rl, daName) {
 				matcher: "Bash",
 				command: "${ADAPTER_DIR}/Hooks/security-validator.mjs"
 			},
+			{
+				hookType: "PreToolUse",
+				matcher: "Bash|Edit|Write|MultiEdit|NotebookEdit",
+				command: "${ADAPTER_DIR}/Hooks/worker-guard.mjs"
+			},
 			{
 				hookType: "PreToolUse",
 				matcher: "*",
@@ -9304,7 +9341,7 @@ async function stepTaskBus(rl) {
 		if (await promptYesNo(rl, "Found TODOIST_API_KEY in the environment. Use it?", true)) apiKey = envToken;
 	}
 	while (!apiKey) {
-		apiKey = (await prompt$1(rl, "  Paste your Todoist API token: ")).trim();
+		apiKey = (await prompt$1(rl, "  Paste your Todoist API token here: ")).trim();
 		if (!apiKey) console.log(c.warn("  A token is required, or answer no to skip the task bus."));
 	}
 	line$1();
@@ -15574,20 +15611,32 @@ function pgDump(container, pgConfig, destPath) {
 	const database = resolvePgDatabaseName(pgConfig);
 	const user = pgConfig.user ?? "pai";
 	mkdirSync(dirname(destPath), { recursive: true });
+	const fd = openSync(destPath, "w");
 	try {
-		execSync(`docker exec ${container} pg_dump -U ${user} -Fc ${database} > "${destPath}"`, {
-			stdio: [
-				"pipe",
-				"pipe",
-				"pipe"
-			],
-			shell: true
-		});
+		const dump = spawnSync("docker", [
+			"exec",
+			container,
+			"pg_dump",
+			"-U",
+			user,
+			"-Fc",
+			database
+		], { stdio: [
+			"pipe",
+			fd,
+			"pipe"
+		] });
+		if (dump.status !== 0) return {
+			ok: false,
+			reason: `pg_dump failed: ${dump.stderr?.toString().trim() || `pg_dump exited with code ${dump.status}`}`
+		};
 	} catch (e) {
 		return {
 			ok: false,
 			reason: `pg_dump failed: ${e instanceof Error ? e.message.split("\n")[0] : String(e)}`
 		};
+	} finally {
+		closeSync(fd);
 	}
 	if (!existsSync(destPath) || statSync(destPath).size === 0) return {
 		ok: false,
@@ -16042,7 +16091,7 @@ async function migrateToPostgres(opts = {}) {
 		const dump = pgDump(container, pgConfig, dumpPath);
 		if (!dump.ok) return refused(dump.reason, dryRun);
 	}
-	const { PostgresBackend } = await import("./postgres-nvU5pShF.mjs");
+	const { PostgresBackend } = await import("./postgres-CxD6_Dca.mjs");
 	await PostgresBackend.ensureDatabase(pgConfig);
 	const sqlite = new BetterSqlite3(sqliteFederationPath, { readonly: true });
 	const registrySqlite = sqliteRegistryPath === sqliteFederationPath ? sqlite : new BetterSqlite3(sqliteRegistryPath, { readonly: true });
@@ -16613,7 +16662,7 @@ async function getSessionTags(registryBackend, sessionId) {
 * Session CRUD commands: list, info, rename, slug, tag, route, active, auto-route.
 */
 async function cmdList(projectSlug, opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const limit = parseInt(opts.limit ?? "20", 10);
 	let project;
@@ -16678,7 +16727,7 @@ async function cmdList(projectSlug, opts) {
 	console.log(dim$1(`  ${rows.length} session(s) shown (limit: ${limit})`));
 }
 async function cmdInfo(projectSlug, sessionNumber) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16702,7 +16751,7 @@ async function cmdInfo(projectSlug, sessionNumber) {
 	console.log();
 }
 async function cmdRename(projectSlug, numberOrLatest, newSlug) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	await cmdRenameWith(await getRegistryBackend(), projectSlug, numberOrLatest, newSlug);
 }
 async function cmdRenameWith(registryBackend, projectSlug, numberOrLatest, newSlug) {
@@ -16765,7 +16814,7 @@ async function cmdRenameWith(registryBackend, projectSlug, numberOrLatest, newSl
 	console.log();
 }
 async function cmdSlug(projectSlug, numberOrLatest, opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16795,7 +16844,7 @@ async function cmdSlug(projectSlug, numberOrLatest, opts) {
 	}
 }
 async function cmdTag(projectSlug, sessionNumber, rawTags) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16835,7 +16884,7 @@ async function cmdTag(projectSlug, sessionNumber, rawTags) {
 	console.log();
 }
 async function cmdRoute(projectSlug, sessionNumber, targetProjectSlug, opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16877,7 +16926,7 @@ async function cmdRoute(projectSlug, sessionNumber, targetProjectSlug, opts) {
 	console.log();
 }
 async function cmdActive(opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const minutes = parseInt(opts.minutes ?? "60", 10);
 	const cutoff = Date.now() - minutes * 60 * 1e3;
@@ -16965,7 +17014,7 @@ async function cmdActive(opts) {
 }
 async function cmdAutoRoute(opts) {
 	const { autoRoute, formatAutoRouteJson } = await import("./auto-route-CF8WNaoy.mjs");
-	const { getRegistryBackend, createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend, createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 	const { loadConfig } = await import("./config-DjXq_W42.mjs");
 	const config = loadConfig();
 	const registryBackend = await getRegistryBackend();
@@ -17202,7 +17251,7 @@ async function cmdPause(opts) {
 		process.exitCode = 1;
 		return;
 	}
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const cwd = process.cwd();
 	const project = await resolveProjectByCwd(registryBackend, cwd);
@@ -17597,7 +17646,7 @@ function buildStopBody(project, sessionId) {
 	}
 }
 async function cmdHandover(projectSlug, numberOrLatest, sessionId) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	let project;
 	if (projectSlug) {
@@ -17893,7 +17942,7 @@ function touchSentinel(rootPath) {
 async function cmdAutosave(opts) {
 	const minGap = parseInt(opts.minGap ?? String(DEFAULT_MIN_GAP), 10);
 	const cwd = process.cwd();
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await resolveProjectByCwd(registryBackend, cwd);
 	if (!project) return;
@@ -18018,7 +18067,7 @@ async function cmdRecent(opts) {
 				shortId: s.shortId,
 				resumable: s.resumable,
 				sessionStatus: s.sessionStatus,
-				age: fmtAge(s.mtime),
+				age: fmtAge$1(s.mtime),
 				mtime: s.mtime,
 				name: s.friendlyName,
 				lastUserPrompt: s.lastUserPrompt,
@@ -18056,7 +18105,7 @@ async function cmdRecent(opts) {
 		return [
 			chalk.dim(String(idx + 1)),
 			chalk.cyan(s.shortId),
-			dim$1(fmtAge(s.mtime)),
+			dim$1(fmtAge$1(s.mtime)),
 			name.length > 26 ? name.slice(0, 25) + "…" : name,
 			prompt,
 			s.userLines > 0 ? String(s.userLines) : dim$1("—"),
@@ -18156,7 +18205,7 @@ async function cmdGoto(query, opts) {
 			console.log(`  fallback: ${chalk.yellow(argvFresh)}`);
 			if (resumableSession) {
 				console.log(`\n  uuid:     ${resumableSession.uuid}`);
-				console.log(`  age:      ${fmtAge(resumableSession.mtime)}`);
+				console.log(`  age:      ${fmtAge$1(resumableSession.mtime)}`);
 				console.log(`  status:   ${resumableSession.sessionStatus}`);
 				console.log(`  sys:      ${resumableSession.topLevelSystemLines} system lines`);
 			}
@@ -18802,9 +18851,15 @@ function fail$3(e) {
 	process.exitCode = 1;
 }
 function registerWorkerModelCommand(workerCmd) {
-	workerCmd.command("model [what] [model]").description("Model ids per provider: no args lists them,\n`model <model-id>` sets the active provider's default model (back-compat),\n`model <capability>` shows one capability, `model <capability> <model-id>` sets it.\nCapability names are open (default, fast, image, … — any ^[a-z][a-z0-9-]*$ name);\n`pai worker capability` picks which provider serves one across the whole config.\n--provider targets another provider.").option("--provider <name>", "Provider to read or change (default: the active one)").action((what, model, opts) => {
+	workerCmd.command("model [what] [model]").description("Model ids per provider: no args lists them,\n`model <model-id>` sets the active provider's default model (back-compat),\n`model <capability>` shows one capability, `model <capability> <model-id>` sets it.\nCapability names are open (default, fast, image, … — any ^[a-z][a-z0-9-]*$ name);\n`pai worker capability` picks which provider serves one across the whole config.\n--provider targets another provider.").option("--provider <name>", "Provider to read or change (default: the active one)").option("--capability <name>", "Capability to set/show, with a model id as the only argument (same as the MCP tool)").action((what, model, opts) => {
 		try {
 			const { workers } = readWorkersSection();
+			if (opts.capability !== void 0) {
+				if (!isModelCapability(opts.capability)) throw new WorkersConfigError(`"${opts.capability}" is not a valid capability name`);
+				if (model !== void 0) throw new WorkersConfigError("with --capability pass only a model id");
+				model = what;
+				what = opts.capability;
+			}
 			if (what === void 0) {
 				for (const line of describeModels(workers)) console.log(`  ${line}`);
 				return;
@@ -18815,14 +18870,14 @@ function registerWorkerModelCommand(workerCmd) {
 				capability = what;
 				if (model === void 0) {
 					const name = resolveProviderName(workers, opts.provider);
-					const p = workers.providers[name];
+					const p = getProviderOrNative(workers, name);
 					if (p) console.log(`  ${name} ${capability} ${p.models[capability] ?? "(none)"}`);
 					return;
 				}
 				id = model;
 			} else if (model !== void 0) throw new WorkersConfigError(`unexpected second argument "${model}" — usage: model [<capability>] <model-id>`);
 			const name = resolveProviderName(workers, opts.provider);
-			const p = setProviderModel(name, capability, id).providers[name];
+			const p = getProviderOrNative(setProviderModel(name, capability, id), name);
 			if (p) {
 				console.log(ok$1(`${name} ${capability} model: ${p.models[capability]}`));
 				console.log(dim$1(`  ${modelPrefsText(p)}`));
@@ -18960,6 +19015,89 @@ function registerWorkerConfigCommands(workerCmd) {
 	});
 }
 
+//#endregion
+//#region src/workers/pending.ts
+/**
+* Pending worker results: finished workers whose worktree branch still holds
+* work that never reached the repo (commits not in HEAD, or uncommitted
+* files). Surfaced by `pai worker ps/pending`, the SessionStart hook, the
+* status line and the prepublish gate so an unmerged fix cannot be forgotten.
+*/
+/** Stale after this long: `pai worker gc` (archive) instead of merge. */
+const STALE_HOURS = 24;
+function toplevel(dir) {
+	try {
+		return git(dir, ["rev-parse", "--show-toplevel"]);
+	} catch {
+		return null;
+	}
+}
+function fmtAge(ms) {
+	const h = Math.floor(ms / 36e5);
+	return h >= 48 ? `${Math.floor(h / 24)}d` : h >= 1 ? `${h}h` : `${Math.floor(ms / 6e4)}m`;
+}
+/** Finished workers with unmerged work; `repoRoot` limits to one repo, else every repo. */
+function pendingResults(logDir, repoRoot, now = Date.now()) {
+	const want = repoRoot ? toplevel(repoRoot) : null;
+	if (repoRoot && !want) return [];
+	const out = [];
+	for (const st of loadStatuses(logDir)) {
+		if (st.archived || st.merged || isLive(st)) continue;
+		if (!st.worktreeDir || !existsSync(st.worktreeDir)) continue;
+		const repo = toplevel(st.cwd);
+		if (!repo || want && repo !== want) continue;
+		let commits = 0;
+		let dirty = 0;
+		try {
+			if (st.branch) commits = git(repo, [
+				"cherry",
+				"HEAD",
+				`refs/heads/${st.branch}`
+			]).split("\n").filter((l) => l.startsWith("+")).length;
+			dirty = uncommittedPaths(st.worktreeDir).filter((p) => !/(^|\/)node_modules(\/|$)/.test(p)).length;
+		} catch {
+			continue;
+		}
+		if (!commits && !dirty) continue;
+		let ageMs = 0;
+		try {
+			ageMs = Math.max(0, now - statSync(statusPath(logDir, st.id)).mtimeMs);
+		} catch {}
+		out.push({
+			id: st.id,
+			label: st.label,
+			repo,
+			ageMs,
+			age: fmtAge(ageMs),
+			commits,
+			dirty
+		});
+	}
+	return out;
+}
+/** One human line per result, with the exact next command. */
+function formatPending(results, showRepo = false) {
+	return results.map((r) => {
+		const next = r.ageMs > STALE_HOURS * 36e5 ? "pai worker gc" : `pai worker merge ${r.id}`;
+		const repo = showRepo ? `  ${r.repo}` : "";
+		return `${r.id}  ${r.age}  ${r.commits} commit(s), ${r.dirty} dirty  ${r.label}${repo}  -> ${next}`;
+	}).join("\n");
+}
+/**
+* Release gate: exit code and message for `pai worker pending --gate`.
+* PAI_ALLOW_PENDING=1 overrides.
+*/
+function pendingGate(results, env = process.env) {
+	if (!results.length || env.PAI_ALLOW_PENDING === "1") return {
+		code: 0,
+		message: ""
+	};
+	return {
+		code: 1,
+		message: `${results.length} unmerged worker result(s) in this repo — merge or discard before publishing:\n${formatPending(results)}\nOverride deliberately with PAI_ALLOW_PENDING=1.`
+	};
+}
+
 //#endregion
 //#region src/workers/wait.ts
 /**
@@ -19141,7 +19279,24 @@ function registerWorkerCommands(workerCmd) {
 	});
 	workerCmd.command("ps").description("List workers of this session (RUNNING + FINISHED); --all for every worker").option("--all", "Show workers of all sessions, not just this terminal's").action((opts) => {
 		try {
-			console.log(psOutput(currentLogDir(), opts.all === true));
+			const logDir = currentLogDir();
+			const pending = pendingResults(logDir, process.cwd()).length;
+			if (pending) console.log(`${pending} unmerged result(s) — pai worker pending`);
+			console.log(psOutput(logDir, opts.all === true));
+		} catch (e) {
+			fail(e);
+		}
+	});
+	workerCmd.command("pending").description("Finished workers whose branch or worktree holds work not yet merged into this repo").option("--all", "Every repo in the log dir, not just the current one").option("--json", "Machine-readable output").option("--gate", "Release gate: exit 1 with the list unless PAI_ALLOW_PENDING=1").action((opts) => {
+		try {
+			const res = pendingResults(currentLogDir(), opts.all ? void 0 : process.cwd());
+			if (opts.gate) {
+				const g = pendingGate(res);
+				if (g.message) console.error(g.message);
+				process.exit(g.code);
+			}
+			if (opts.json) console.log(JSON.stringify(res, null, 2));
+			else console.log(res.length ? formatPending(res, opts.all === true) : "no pending worker results");
 		} catch (e) {
 			fail(e);
 		}
@@ -19179,7 +19334,7 @@ function registerWorkerCommands(workerCmd) {
 			const logDir = currentLogDir();
 			const term = process.env.ITERM_SESSION_ID ?? "";
 			if (id) {
-				const msg = opts.check ? await checkPaneForWorker(id, workers.pane.fontSize, term) : await openPaneForWorker(logDir, workers, id, term);
+				const msg = opts.check ? await checkPaneForWorker(id, workers.pane.fontSize, term) : (await openPaneForWorker(logDir, workers, id, term)).message;
 				console.log(msg);
 			} else console.log(await openFollowPane(logDir, workers, term, opts.check === true));
 		} catch (e) {
@@ -19290,6 +19445,18 @@ function registerWorkerCommands(workerCmd) {
 			fail(e);
 		}
 	});
+	workerCmd.command("gc").description("Archive leftover worker worktrees (state kept under refs/pai-archive/<id>; gitignored files are not kept)").option("--older-than <hours>", "minimum age of a finished worker", "24").option("--dry-run", "print what would be archived, change nothing").action((opts) => {
+		try {
+			const hours = Number(opts.olderThan);
+			if (!Number.isFinite(hours) || hours < 0) throw new Error(`bad --older-than "${opts.olderThan}"`);
+			const res = gcWorktrees(currentLogDir(), hours, opts.dryRun === true);
+			const verb = opts.dryRun ? "would archive" : "archived";
+			for (const r of res) console.log(r.skipped ? `skipped ${r.id}: ${r.skipped}` : `${verb} ${r.id} -> ${r.archive}`);
+			console.log(`${res.filter((r) => r.archive).length} ${opts.dryRun ? "would be archived" : "archived"}`);
+		} catch (e) {
+			fail(e);
+		}
+	});
 	workerCmd.command("kill <id>").description("Send SIGTERM to a running worker process").action(async (id) => {
 		try {
 			const logDir = currentLogDir();
@@ -20170,7 +20337,7 @@ async function countVectorDbPaths(oldPaths) {
 	if (oldPaths.length === 0) return 0;
 	try {
 		const { loadConfig } = await import("./config-DjXq_W42.mjs");
-		const { createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 		const config = loadConfig();
 		if (config.storageBackend !== "postgres") return 0;
 		const backend = await createStorageBackend(config);
@@ -20188,7 +20355,7 @@ async function updateVectorDbPaths(moves) {
 	if (moves.length === 0) return 0;
 	try {
 		const { loadConfig } = await import("./config-DjXq_W42.mjs");
-		const { createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 		const config = loadConfig();
 		if (config.storageBackend !== "postgres") return 0;
 		const backend = await createStorageBackend(config);
@@ -20275,7 +20442,7 @@ async function displayDryRun(plans) {
 	console.log();
 }
 async function executeCleanup(plans, skipReindex) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	let deleted = 0;
 	let renamed = 0;
@@ -20472,7 +20639,7 @@ async function executeCleanup(plans, skipReindex) {
 //#region src/cli/commands/session-cleanup/index.ts
 function registerSessionCleanupCommand(sessionCmd) {
 	sessionCmd.command("cleanup [project-slug]").description("Clean up session notes: delete empties, auto-name unnamed, move into YYYY/MM/ hierarchy, renumber").option("--execute", "Actually perform the cleanup (default is dry-run)").option("--no-renumber", "Skip renumbering sessions after deletions").option("--no-reindex", "Skip triggering memory re-index after moves").action(async (projectSlug, opts) => {
-		const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 		const registryBackend = await getRegistryBackend();
 		const dryRun = !opts.execute;
 		const skipReindex = opts.reindex === false;
@@ -20542,7 +20709,7 @@ function finalizeNote(notePath) {
 }
 async function cmdEnd(opts) {
 	await cmdPause(opts);
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const cwd = process.cwd();
 	const project = await registryBackend.findProjectByCwdPrefix(cwd);
@@ -20990,7 +21157,7 @@ async function cmdFind(query, opts) {
 */
 async function getProjects(includeArchived) {
 	try {
-		const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 		const rows = await (await getRegistryBackend()).listProjectsWithSessionStats();
 		return includeArchived ? rows : rows.filter((p) => p.status === "active");
 	} catch {
@@ -21131,7 +21298,7 @@ function buildFeedFrom(allSessions, projects, liveSessions, allProjects) {
 		const tag = tagFor(e.status);
 		const name = chalk.white(pad(e.name, 22));
 		const where = dir ? dim$1(shorten(dir, 40)) : chalk.green("(running in another tab)");
-		const age = e.status === "live" ? chalk.green("now") : e.lastActivity > 0 ? dim$1(fmtAge(e.lastActivity)) : dim$1("—");
+		const age = e.status === "live" ? chalk.green("now") : e.lastActivity > 0 ? dim$1(fmtAge$1(e.lastActivity)) : dim$1("—");
 		const kwDisp = kw ? dim$1("  " + kw) : "";
 		const display = `${tag}  ${name} ${pad(age, 5)} ${where}${kwDisp}`;
 		const search = `${e.name} ${dir ?? ""} ${kw}`.toLowerCase();
@@ -21197,7 +21364,7 @@ function contextFor(rec) {
 	const notes = recentMarkdown(rec.dir, 4);
 	if (notes.length) {
 		lines.push(dim$1("recent notes:"));
-		for (const n of notes) lines.push("  " + dim$1(n.rel.slice(0, 60)) + "  " + dim$1(fmtAge(n.mtime)));
+		for (const n of notes) lines.push("  " + dim$1(n.rel.slice(0, 60)) + "  " + dim$1(fmtAge$1(n.mtime)));
 	} else lines.push(dim$1("(no notes here yet)"));
 	ctxCache.set(rec.dir, lines);
 	return lines;
@@ -21464,7 +21631,7 @@ async function cmdPick(opts = {}) {
 	const onRemove = async (rec) => {
 		if (!rec.slug) return false;
 		try {
-			const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+			const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 			const registryBackend = await getRegistryBackend();
 			const project = await registryBackend.getProjectBySlug(rec.slug);
 			if (!project || project.status !== "active") return false;
@@ -21749,4 +21916,4 @@ claude() {
 
 //#endregion
 export { drainStdio as n, buildProgram as t };
-//# sourceMappingURL=program-BnsjB57Q.mjs.map
+//# sourceMappingURL=program-BRvCzhjx.mjs.map