@tekmidian/pai 0.61.0 → 0.63.0

package/dist/{program-BTdspOOa.mjs → program-De1GVVM4.mjs}

@@ -3,26 +3,26 @@ import { a as slugify$1, i as parseSessionFilename } from "./migrate-BD7D8EEh.mj
 import { n as ensurePaiMarker } from "./pai-marker-D1MMswkz.mjs";
 import { t as STOP_WORDS } from "./stop-words-ClCwO8mZ.mjs";
 import { t as applyRecencyBoost } from "./search-BaTbyWjK.mjs";
-import { a as getStorageBackend, i as getRegistryBackend, r as createStorageBackend, s as humanDuration } from "./factory-EUUhSSoq.mjs";
-import { a as formatDetectionJson, i as formatDetection, n as migrateIdentityFile, r as detectProject } from "./wakeup-C48hcN6O.mjs";
-import { B as claudeProjectsDir, C as findLatestNote, H as scanTranscriptFolders, I as resolveHome, L as saveScanConfig, M as cmdScan, N as loadScanConfig, P as migrateScanConfig, R as upsertProject, S as applyContinue, T as readBodyFile, U as transcriptFiles, V as findMovedProjects, d as migrateWorkQueue, g as migrateSummaryCooldowns, t as readContextHandoverCache, v as extractAndStoreTriples, w as findNotesDir$1, x as appendCheckpointToNote, z as upsertSession } from "./context-handover-cache-BdtJZpgv.mjs";
+import { a as getStorageBackend, i as getRegistryBackend, r as createStorageBackend, s as humanDuration } from "./factory-BozZa81q.mjs";
+import { a as formatDetectionJson, i as formatDetection, n as migrateIdentityFile, r as detectProject } from "./wakeup-DO1O4udw.mjs";
+import { B as claudeProjectsDir, C as findLatestNote, H as scanTranscriptFolders, I as resolveHome, L as saveScanConfig, M as cmdScan, N as loadScanConfig, P as migrateScanConfig, R as upsertProject, S as applyContinue, T as readBodyFile, U as transcriptFiles, V as findMovedProjects, d as migrateWorkQueue, g as migrateSummaryCooldowns, t as readContextHandoverCache, v as extractAndStoreTriples, w as findNotesDir$1, x as appendCheckpointToNote, z as upsertSession } from "./context-handover-cache-DFNnlWv2.mjs";
 import { a as paiHomePath, i as paiHomeDir, n as migratePaiDir, o as resolvePaiFile, r as migratePaiFile, t as PaiFileMigrationError } from "./pai-home-CeOIYltV.mjs";
 import { b as OWNER_LABEL_PREFIX, c as migrateConfigFile, d as readMainConfigRaw, f as writeMainConfigRaw, h as resolvedMainConfigPath, l as paiConfigFilePath, m as migrateMainConfigToYaml, n as CONFIG_FILE$2, o as expandHome, p as MainConfigError, s as loadConfig, t as CONFIG_DIR, u as paiConfigYamlFilePath, v as readJsonStrict, x as UNROUTED, y as writeJsonAtomic } from "./config-CQCmH_gV.mjs";
 import { a as schedulerLogPath, i as paiSocketPath, n as daemonLogPath, r as daemonPidPath } from "./runtime-paths-BRwDeBEg.mjs";
 import { B as contextWindowFromModelId, C as nativeAnthropicProvider, E as readWorkersSection, F as parseWorkersYamlDocument, I as relocateWorkersYaml, L as workersYamlLegacyNotice, M as inlineWorkersYamlKeys, N as migrateWorkersToYaml, P as needsWorkersYamlRelocation, R as workersYamlPath, S as maskKey, V as stripModelVariant, b as isModelCapability, f as PROVIDER_TAGS, j as initWorkersYaml, m as WorkersConfigError, r as ANTHROPIC_NATIVE, t as buildRunEnv, u as MODEL_CAPABILITIES, v as expandHome$1, y as getProviderOrNative, z as DEFAULT_CONTEXT_WINDOW } from "./run-env-BE5xyCwy.mjs";
-import { A as UNLABELED, E as mergeWorker, G as waitForTerminalStatus, H as ownsPid, I as isChatPane, K as longInlinePromptHint, L as isLive, O as appendLedger, R as loadStatus, U as saveStatus, W as setWorkerLabel, X as expandMcpNames, Y as describeMcp, a as projectLaunchConfig, c as handoffFromInside, f as checkPaneForWorker, g as markControlsHeld, h as clickrControlsArgv, i as usageContextTokens, m as openPaneForWorker, n as runWorker, o as parseWorkerReport, p as openFollowPane, q as parseRunnerArgs, r as testProvider, u as sayToWorker, w as discardWorker, z as loadStatuses } from "./run-CxxZKEZw.mjs";
+import { $ as expandMcpNames, B as loadStatuses, C as discardWorker, D as uncommittedPaths, E as mergeWorker, G as setWorkerLabel, J as parseRunnerArgs, K as waitForTerminalStatus, L as isChatPane, Q as describeMcp, R as isLive, T as git, U as ownsPid, W as saveStatus, X as pinNotices, Z as projectLaunchConfig, a as parseWorkerReport, d as checkPaneForWorker, f as openFollowPane, h as markControlsHeld, i as usageContextTokens, j as UNLABELED, k as appendLedger, l as sayToWorker, m as clickrControlsArgv, n as runWorker, p as openPaneForWorker, q as longInlinePromptHint, r as testProvider, s as handoffFromInside, w as gcWorktrees, z as loadStatus } from "./run-CZVCCvXE.mjs";
 import { t as MergeError } from "./merge-xoyfZQ4W.mjs";
 import { n as oldFederationPath, t as federationDbPath } from "./federation-db-w8e-sKjp.mjs";
 import { r as registryDbPath, t as oldRegistryPath } from "./registry-db-Bkpbp7Gf.mjs";
-import { i as indexProjectWithBackend } from "./async-CLvuY7b-.mjs";
+import { i as indexProjectWithBackend } from "./async-DNVWtQl2.mjs";
 import { t as PaiClient } from "./ipc-client-Dasm515c.mjs";
-import { A as getConfigValueOp, C as psOutput, D as resolveSpecPath, E as readSpecPrompt, M as setConfigValueOp, N as unsetConfigValueOp, O as MainConfigOpsError, S as followWorkers, T as statusLineOutput, _ as setWorkersEnabled, a as addProvider, b as updateProvider, c as describeModels, d as removeProvider, f as resolveProviderName, g as setProviderModel, h as setProviderEnabled, i as fallbackStatusText, j as listConfigOp, k as formatConfigGetOutput, l as describeProviders, m as setClass, n as fallbackOn, o as classTargetText, p as setCapabilityPreference, r as fallbackStatus, s as describeCapabilities, t as fallbackOff, u as modelPrefsText, v as unsetCapabilityPreference, w as replayOutput, x as useProvider, y as unsetClass } from "./fallback-DDbJVaR8.mjs";
-import { _ as resolveSessionByNameOrId, a as buildDeduped, c as hasConversation, d as providerResumePlan, f as restoreTopLevel, g as migrateSessionScanCache, h as fmtAge, l as launchInDir, m as printExitDir, o as normalizeName$2, p as resumeArgvText, s as renderDedupedSessions, t as cmdMain, u as launchPrompt, v as scanCacheFilePath, y as scanSessions } from "./main-resolver-DIQ6m_RA.mjs";
+import { A as getConfigValueOp, C as psOutput, D as resolveSpecPath, E as readSpecPrompt, M as setConfigValueOp, N as unsetConfigValueOp, O as MainConfigOpsError, S as followWorkers, T as statusLineOutput, _ as setWorkersEnabled, a as addProvider, b as updateProvider, c as describeModels, d as removeProvider, f as resolveProviderName, g as setProviderModel, h as setProviderEnabled, i as fallbackStatusText, j as listConfigOp, k as formatConfigGetOutput, l as describeProviders, m as setClass, n as fallbackOn, o as classTargetText, p as setCapabilityPreference, r as fallbackStatus, s as describeCapabilities, t as fallbackOff, u as modelPrefsText, v as unsetCapabilityPreference, w as replayOutput, x as useProvider, y as unsetClass } from "./fallback-ktbR0aR7.mjs";
+import { _ as resolveSessionByNameOrId, a as buildDeduped, c as hasConversation, d as providerResumePlan, f as restoreTopLevel, g as migrateSessionScanCache, h as fmtAge$1, l as launchInDir, m as printExitDir, o as normalizeName$2, p as resumeArgvText, s as renderDedupedSessions, t as cmdMain, u as launchPrompt, v as scanCacheFilePath, y as scanSessions } from "./main-resolver-BIft_FVF.mjs";
 import { n as queriesDirPath, t as migrateQueriesDir } from "./query-feedback-xz5axTj3.mjs";
-import { h as ledgerPath, m as eventsPath, n as ensureProxyRunning, p as ensureNoMcpConfig, r as stopProxy, t as DEFAULT_PROXY_PORT, v as workersLogDir } from "./server-BY6AedmC.mjs";
+import { _ as statusPath, h as ledgerPath, m as eventsPath, n as ensureProxyRunning, p as ensureNoMcpConfig, r as stopProxy, t as DEFAULT_PROXY_PORT, v as workersLogDir } from "./server-BY6AedmC.mjs";
 import { i as sendToSession, n as fetchLiveSessions, r as revealItermSession, t as callAiBroker } from "./aibroker-client-BK1h--W_.mjs";
-import { a as totalUsageTokens, i as parseSessionUsage, r as sessionKeepaliveLedgerSummary, t as loadSessionKeepaliveState } from "./session-keepalive-urk--pfa.mjs";
-import { t as runChain } from "./chain-C5oeyUg4.mjs";
+import { a as totalUsageTokens, i as parseSessionUsage, r as sessionKeepaliveLedgerSummary, t as loadSessionKeepaliveState } from "./session-keepalive-CWGzLBVU.mjs";
+import { t as runChain } from "./chain-CUfE6WYK.mjs";
 import { appendFileSync, chmodSync, closeSync, copyFileSync, cpSync, createReadStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, platform, tmpdir, userInfo } from "node:os";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
@@ -161,7 +161,7 @@ async function cmdPromote(opts) {
 		console.error(dim$1(`  Pick a durable location for the new project.`));
 		process.exit(1);
 	}
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const encodedDir = encodeDir(targetPath);
 	if (await registryBackend.getProjectBySlug(slug) ?? await registryBackend.getProjectByRootPath(targetPath) ?? await registryBackend.getProjectByEncodedDir(encodedDir)) {
@@ -1324,7 +1324,7 @@ async function cmdConfig(identifier, opts) {
 	console.log();
 }
 /**
-* `pai project mcp [names...]` — the MCP servers this project's interactive
+* `pai project mcp [--set names | --clear]` — the MCP servers this project's interactive
 * supervisor session loads. Operates on whichever registered project's
 * root_path covers `opts.cwd` (default: process.cwd()) — run it from inside
 * the project, same as `pai projects here`. Unset (the default) means every
@@ -1332,6 +1332,11 @@ async function cmdConfig(identifier, opts) {
 * ~/.claude.json's mcpServers / workers.mcpSets the same way `--mcp` is.
 */
 async function cmdMcp$1(names, opts = {}) {
+	if (names.length) {
+		console.error(err("use --set <names> to change the pin; `pai project mcp` shows it"));
+		process.exitCode = 1;
+		return;
+	}
 	const project = await currentProject(opts.cwd);
 	if (!project) {
 		console.error(err("No registered project matches the current directory."));
@@ -1346,23 +1351,28 @@ async function cmdMcp$1(names, opts = {}) {
 		console.log(ok$1(`MCP servers unset for ${bold$1(project.slug)} — all servers load again.`));
 		return;
 	}
-	if (!names.length) {
+	if (opts.set === void 0) {
 		console.log(config.mcp?.length ? config.mcp.join(",") : "unset (all)");
 		return;
 	}
 	const { workers } = readWorkersSection();
-	config.mcp = expandMcpNames(splitNames(names), workers);
+	config.mcp = expandMcpNames(splitNames([opts.set]), workers);
 	await saveSessionConfig(project, config);
 	console.log(ok$1(`MCP servers set for ${bold$1(project.slug)}: ${config.mcp.join(", ")}`));
 }
 /**
-* `pai project tools [names...]` — the built-in tool schemas this project's
+* `pai project tools [--set names | --clear]` — the built-in tool schemas this project's
 * interactive supervisor session loads (Read, Edit, Bash, …). Same cwd-based
 * project resolution and unset semantics as `cmdMcp`. Unlike MCP names, tool
 * names are not validated against a fixed list — the harness itself rejects
 * an unrecognised one at launch.
 */
 async function cmdTools(names, opts = {}) {
+	if (names.length) {
+		console.error(err("use --set <names> to change the pin; `pai project tools` shows it"));
+		process.exitCode = 1;
+		return;
+	}
 	const project = await currentProject(opts.cwd);
 	if (!project) {
 		console.error(err("No registered project matches the current directory."));
@@ -1377,11 +1387,11 @@ async function cmdTools(names, opts = {}) {
 		console.log(ok$1(`Tools unset for ${bold$1(project.slug)} — all built-in tools load again.`));
 		return;
 	}
-	if (!names.length) {
+	if (opts.set === void 0) {
 		console.log(config.tools?.length ? config.tools.join(",") : "unset (all)");
 		return;
 	}
-	config.tools = splitNames(names);
+	config.tools = splitNames([opts.set]);
 	await saveSessionConfig(project, config);
 	console.log(ok$1(`Tools set for ${bold$1(project.slug)}: ${config.tools.join(", ")}`));
 }
@@ -2035,7 +2045,7 @@ async function cmdUnregister(slug, opts = {}) {
 //#region src/cli/commands/project/projects-index.ts
 function registerProjectsCommands(projectsCmd) {
 	projectsCmd.command("list", { isDefault: true }).description("Show the unified deduped listing (same as `pai`).\nUse --all to include cold / zero-session / archived projects.").option("--all", "Show all entries including cold / zero-session / archived projects").option("-n, --n <count>", "Max rows to show", "20").action(async (opts) => {
-		const { cmdMain } = await import("./main-resolver-CxOsxtOr.mjs");
+		const { cmdMain } = await import("./main-resolver-C9-poMdi.mjs");
 		await cmdMain(void 0, void 0, opts);
 	});
 	projectsCmd.command("list-raw").description("Raw registry listing with slug, path, status, last_active columns").option("--all", "Include archived projects (default: active only)").option("--status <status>", "Filter by status: active | archived").option("--tag <tag>", "Filter by tag").option("--type <type>", "Filter by type").action(async (opts) => {
@@ -2139,10 +2149,13 @@ function registerProjectsCommands(projectsCmd) {
 	projectsCmd.command("config [identifier]").description("View or modify session launch config for a project.\nUse --options to discover available keys and presets.").option("--set <key=value...>", "Set config values (repeatable)", (v, prev) => [...prev, v], []).option("--unset <key...>", "Remove config keys (repeatable, use env.KEY for env vars)", (v, prev) => [...prev, v], []).option("--preset <name>", "Apply a permission preset: full | trusted | default").option("--defaults", "Manage global session defaults instead of a project").option("--options", "List available config keys and presets").option("--json", "Output JSON").option("--reset", "Reset config to empty (inherit global defaults)").action(async (identifier, opts) => {
 		await cmdConfig(identifier, opts);
 	});
-	projectsCmd.command("mcp [names...]").description("View or set the MCP servers this project's interactive supervisor session\nloads (run from inside the project, like `pai projects here`).\nNo names: print the current value. Names (comma-separated or repeated\nargs): set it, validated against ~/.claude.json's mcpServers.\n--clear: unset (all servers load — today's default).").option("--clear", "Unset — all MCP servers load again").action(async (names, opts) => {
+	projectsCmd.command("mcp [names...]").description("View or set the MCP servers this project's interactive supervisor session\nloads (run from inside the project, like `pai projects here`).\nNo args: print the current value. --set <names> (comma-separated): set it,\nvalidated against ~/.claude.json's mcpServers. --clear: unset (all\nservers load — today's default). Positional names are an error.").option("--set <names>", "Set the pin (comma-separated server or set names)").option("--clear", "Unset — all MCP servers load again").action(async (names, opts) => {
 		await cmdMcp$1(names, opts);
 	});
-	projectsCmd.command("tools [names...]").description("View or set the built-in tool schemas this project's interactive\nsupervisor session loads (run from inside the project, like `pai projects\nhere`). No names: print the current value. Names (comma-separated or\nrepeated args): set it. --clear: unset (all tools load — today's default).").option("--clear", "Unset — all built-in tools load again").action(async (names, opts) => {
+	projectsCmd.command("pins").description("Print one line per active MCP/tools pin for the current directory's project (nothing when unpinned)").action(async () => {
+		for (const line of pinNotices(await projectLaunchConfig(process.cwd()))) console.log(line);
+	});
+	projectsCmd.command("tools [names...]").description("View or set the built-in tool schemas this project's interactive\nsupervisor session loads (run from inside the project, like `pai projects\nhere`). No args: print the current value. --set <names> (comma-separated):\nset it. --clear: unset (all tools load — today's default). Positional\nnames are an error.").option("--set <names>", "Set the pin (comma-separated tool names)").option("--clear", "Unset — all built-in tools load again").action(async (names, opts) => {
 		await cmdTools(names, opts);
 	});
 }
@@ -3247,7 +3260,7 @@ function registerStatsCommands(memoryCmd) {
 //#region src/cli/commands/memory/sources-cmd.ts
 function registerSourcesCommand(memoryCmd) {
 	memoryCmd.command("sources").description("Show what the indexer has taken in: composition by source, which roots\ncontent enters from, the heaviest single files, and how many chunks are\nrewritten per day (which distinguishes a finite backlog from a treadmill).").option("--limit <n>", "Rows per section (default 8)", "8").action(async (opts) => {
-		const { createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 		const { loadConfig } = await import("./config-DjXq_W42.mjs");
 		const { cmdMemorySources } = await import("./sources-BBe3AZ-W.mjs");
 		let backend;
@@ -7073,7 +7086,7 @@ function cmdLogs(opts) {
 }
 function registerDaemonCommands(daemonCmd) {
 	daemonCmd.command("serve").description("Start the PAI daemon in the foreground").action(async () => {
-		const { serve } = await import("./daemon-MoFF4oeg.mjs");
+		const { serve } = await import("./daemon-C8-uzOuV.mjs");
 		const { loadConfig: lc, ensureConfigDir } = await import("./config-DjXq_W42.mjs");
 		ensureConfigDir();
 		await serve(lc());
@@ -8408,6 +8421,11 @@ async function stepSettings(rl, daName) {
 				matcher: "Bash",
 				command: "${ADAPTER_DIR}/Hooks/security-validator.mjs"
 			},
+			{
+				hookType: "PreToolUse",
+				matcher: "Bash|Edit|Write|MultiEdit|NotebookEdit",
+				command: "${ADAPTER_DIR}/Hooks/worker-guard.mjs"
+			},
 			{
 				hookType: "PreToolUse",
 				matcher: "*",
@@ -16086,7 +16104,7 @@ async function migrateToPostgres(opts = {}) {
 		const dump = pgDump(container, pgConfig, dumpPath);
 		if (!dump.ok) return refused(dump.reason, dryRun);
 	}
-	const { PostgresBackend } = await import("./postgres-nvU5pShF.mjs");
+	const { PostgresBackend } = await import("./postgres-CxD6_Dca.mjs");
 	await PostgresBackend.ensureDatabase(pgConfig);
 	const sqlite = new BetterSqlite3(sqliteFederationPath, { readonly: true });
 	const registrySqlite = sqliteRegistryPath === sqliteFederationPath ? sqlite : new BetterSqlite3(sqliteRegistryPath, { readonly: true });
@@ -16657,7 +16675,7 @@ async function getSessionTags(registryBackend, sessionId) {
 * Session CRUD commands: list, info, rename, slug, tag, route, active, auto-route.
 */
 async function cmdList(projectSlug, opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const limit = parseInt(opts.limit ?? "20", 10);
 	let project;
@@ -16722,7 +16740,7 @@ async function cmdList(projectSlug, opts) {
 	console.log(dim$1(`  ${rows.length} session(s) shown (limit: ${limit})`));
 }
 async function cmdInfo(projectSlug, sessionNumber) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16746,7 +16764,7 @@ async function cmdInfo(projectSlug, sessionNumber) {
 	console.log();
 }
 async function cmdRename(projectSlug, numberOrLatest, newSlug) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	await cmdRenameWith(await getRegistryBackend(), projectSlug, numberOrLatest, newSlug);
 }
 async function cmdRenameWith(registryBackend, projectSlug, numberOrLatest, newSlug) {
@@ -16809,7 +16827,7 @@ async function cmdRenameWith(registryBackend, projectSlug, numberOrLatest, newSl
 	console.log();
 }
 async function cmdSlug(projectSlug, numberOrLatest, opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16839,7 +16857,7 @@ async function cmdSlug(projectSlug, numberOrLatest, opts) {
 	}
 }
 async function cmdTag(projectSlug, sessionNumber, rawTags) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16879,7 +16897,7 @@ async function cmdTag(projectSlug, sessionNumber, rawTags) {
 	console.log();
 }
 async function cmdRoute(projectSlug, sessionNumber, targetProjectSlug, opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await getProject$1(registryBackend, projectSlug);
 	if (!project) {
@@ -16921,7 +16939,7 @@ async function cmdRoute(projectSlug, sessionNumber, targetProjectSlug, opts) {
 	console.log();
 }
 async function cmdActive(opts) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const minutes = parseInt(opts.minutes ?? "60", 10);
 	const cutoff = Date.now() - minutes * 60 * 1e3;
@@ -17009,7 +17027,7 @@ async function cmdActive(opts) {
 }
 async function cmdAutoRoute(opts) {
 	const { autoRoute, formatAutoRouteJson } = await import("./auto-route-CF8WNaoy.mjs");
-	const { getRegistryBackend, createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend, createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 	const { loadConfig } = await import("./config-DjXq_W42.mjs");
 	const config = loadConfig();
 	const registryBackend = await getRegistryBackend();
@@ -17246,7 +17264,7 @@ async function cmdPause(opts) {
 		process.exitCode = 1;
 		return;
 	}
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const cwd = process.cwd();
 	const project = await resolveProjectByCwd(registryBackend, cwd);
@@ -17641,7 +17659,7 @@ function buildStopBody(project, sessionId) {
 	}
 }
 async function cmdHandover(projectSlug, numberOrLatest, sessionId) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	let project;
 	if (projectSlug) {
@@ -17937,7 +17955,7 @@ function touchSentinel(rootPath) {
 async function cmdAutosave(opts) {
 	const minGap = parseInt(opts.minGap ?? String(DEFAULT_MIN_GAP), 10);
 	const cwd = process.cwd();
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await resolveProjectByCwd(registryBackend, cwd);
 	if (!project) return;
@@ -18062,7 +18080,7 @@ async function cmdRecent(opts) {
 				shortId: s.shortId,
 				resumable: s.resumable,
 				sessionStatus: s.sessionStatus,
-				age: fmtAge(s.mtime),
+				age: fmtAge$1(s.mtime),
 				mtime: s.mtime,
 				name: s.friendlyName,
 				lastUserPrompt: s.lastUserPrompt,
@@ -18100,7 +18118,7 @@ async function cmdRecent(opts) {
 		return [
 			chalk.dim(String(idx + 1)),
 			chalk.cyan(s.shortId),
-			dim$1(fmtAge(s.mtime)),
+			dim$1(fmtAge$1(s.mtime)),
 			name.length > 26 ? name.slice(0, 25) + "…" : name,
 			prompt,
 			s.userLines > 0 ? String(s.userLines) : dim$1("—"),
@@ -18200,7 +18218,7 @@ async function cmdGoto(query, opts) {
 			console.log(`  fallback: ${chalk.yellow(argvFresh)}`);
 			if (resumableSession) {
 				console.log(`\n  uuid:     ${resumableSession.uuid}`);
-				console.log(`  age:      ${fmtAge(resumableSession.mtime)}`);
+				console.log(`  age:      ${fmtAge$1(resumableSession.mtime)}`);
 				console.log(`  status:   ${resumableSession.sessionStatus}`);
 				console.log(`  sys:      ${resumableSession.topLevelSystemLines} system lines`);
 			}
@@ -19010,6 +19028,89 @@ function registerWorkerConfigCommands(workerCmd) {
 	});
 }
 
+//#endregion
+//#region src/workers/pending.ts
+/**
+* Pending worker results: finished workers whose worktree branch still holds
+* work that never reached the repo (commits not in HEAD, or uncommitted
+* files). Surfaced by `pai worker ps/pending`, the SessionStart hook, the
+* status line and the prepublish gate so an unmerged fix cannot be forgotten.
+*/
+/** Stale after this long: `pai worker gc` (archive) instead of merge. */
+const STALE_HOURS = 24;
+function toplevel(dir) {
+	try {
+		return git(dir, ["rev-parse", "--show-toplevel"]);
+	} catch {
+		return null;
+	}
+}
+function fmtAge(ms) {
+	const h = Math.floor(ms / 36e5);
+	return h >= 48 ? `${Math.floor(h / 24)}d` : h >= 1 ? `${h}h` : `${Math.floor(ms / 6e4)}m`;
+}
+/** Finished workers with unmerged work; `repoRoot` limits to one repo, else every repo. */
+function pendingResults(logDir, repoRoot, now = Date.now()) {
+	const want = repoRoot ? toplevel(repoRoot) : null;
+	if (repoRoot && !want) return [];
+	const out = [];
+	for (const st of loadStatuses(logDir)) {
+		if (st.archived || st.merged || isLive(st)) continue;
+		if (!st.worktreeDir || !existsSync(st.worktreeDir)) continue;
+		const repo = toplevel(st.cwd);
+		if (!repo || want && repo !== want) continue;
+		let commits = 0;
+		let dirty = 0;
+		try {
+			if (st.branch) commits = git(repo, [
+				"cherry",
+				"HEAD",
+				`refs/heads/${st.branch}`
+			]).split("\n").filter((l) => l.startsWith("+")).length;
+			dirty = uncommittedPaths(st.worktreeDir).filter((p) => !/(^|\/)node_modules(\/|$)/.test(p)).length;
+		} catch {
+			continue;
+		}
+		if (!commits && !dirty) continue;
+		let ageMs = 0;
+		try {
+			ageMs = Math.max(0, now - statSync(statusPath(logDir, st.id)).mtimeMs);
+		} catch {}
+		out.push({
+			id: st.id,
+			label: st.label,
+			repo,
+			ageMs,
+			age: fmtAge(ageMs),
+			commits,
+			dirty
+		});
+	}
+	return out;
+}
+/** One human line per result, with the exact next command. */
+function formatPending(results, showRepo = false) {
+	return results.map((r) => {
+		const next = r.ageMs > STALE_HOURS * 36e5 ? "pai worker gc" : `pai worker merge ${r.id}`;
+		const repo = showRepo ? `  ${r.repo}` : "";
+		return `${r.id}  ${r.age}  ${r.commits} commit(s), ${r.dirty} dirty  ${r.label}${repo}  -> ${next}`;
+	}).join("\n");
+}
+/**
+* Release gate: exit code and message for `pai worker pending --gate`.
+* PAI_ALLOW_PENDING=1 overrides.
+*/
+function pendingGate(results, env = process.env) {
+	if (!results.length || env.PAI_ALLOW_PENDING === "1") return {
+		code: 0,
+		message: ""
+	};
+	return {
+		code: 1,
+		message: `${results.length} unmerged worker result(s) in this repo — merge or discard before publishing:\n${formatPending(results)}\nOverride deliberately with PAI_ALLOW_PENDING=1.`
+	};
+}
+
 //#endregion
 //#region src/workers/wait.ts
 /**
@@ -19191,7 +19292,24 @@ function registerWorkerCommands(workerCmd) {
 	});
 	workerCmd.command("ps").description("List workers of this session (RUNNING + FINISHED); --all for every worker").option("--all", "Show workers of all sessions, not just this terminal's").action((opts) => {
 		try {
-			console.log(psOutput(currentLogDir(), opts.all === true));
+			const logDir = currentLogDir();
+			const pending = pendingResults(logDir, process.cwd()).length;
+			if (pending) console.log(`${pending} unmerged result(s) — pai worker pending`);
+			console.log(psOutput(logDir, opts.all === true));
+		} catch (e) {
+			fail(e);
+		}
+	});
+	workerCmd.command("pending").description("Finished workers whose branch or worktree holds work not yet merged into this repo").option("--all", "Every repo in the log dir, not just the current one").option("--json", "Machine-readable output").option("--gate", "Release gate: exit 1 with the list unless PAI_ALLOW_PENDING=1").action((opts) => {
+		try {
+			const res = pendingResults(currentLogDir(), opts.all ? void 0 : process.cwd());
+			if (opts.gate) {
+				const g = pendingGate(res);
+				if (g.message) console.error(g.message);
+				process.exit(g.code);
+			}
+			if (opts.json) console.log(JSON.stringify(res, null, 2));
+			else console.log(res.length ? formatPending(res, opts.all === true) : "no pending worker results");
 		} catch (e) {
 			fail(e);
 		}
@@ -19340,6 +19458,18 @@ function registerWorkerCommands(workerCmd) {
 			fail(e);
 		}
 	});
+	workerCmd.command("gc").description("Archive leftover worker worktrees (state kept under refs/pai-archive/<id>; gitignored files are not kept)").option("--older-than <hours>", "minimum age of a finished worker", "24").option("--dry-run", "print what would be archived, change nothing").action((opts) => {
+		try {
+			const hours = Number(opts.olderThan);
+			if (!Number.isFinite(hours) || hours < 0) throw new Error(`bad --older-than "${opts.olderThan}"`);
+			const res = gcWorktrees(currentLogDir(), hours, opts.dryRun === true);
+			const verb = opts.dryRun ? "would archive" : "archived";
+			for (const r of res) console.log(r.skipped ? `skipped ${r.id}: ${r.skipped}` : `${verb} ${r.id} -> ${r.archive}`);
+			console.log(`${res.filter((r) => r.archive).length} ${opts.dryRun ? "would be archived" : "archived"}`);
+		} catch (e) {
+			fail(e);
+		}
+	});
 	workerCmd.command("kill <id>").description("Send SIGTERM to a running worker process").action(async (id) => {
 		try {
 			const logDir = currentLogDir();
@@ -20220,7 +20350,7 @@ async function countVectorDbPaths(oldPaths) {
 	if (oldPaths.length === 0) return 0;
 	try {
 		const { loadConfig } = await import("./config-DjXq_W42.mjs");
-		const { createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 		const config = loadConfig();
 		if (config.storageBackend !== "postgres") return 0;
 		const backend = await createStorageBackend(config);
@@ -20238,7 +20368,7 @@ async function updateVectorDbPaths(moves) {
 	if (moves.length === 0) return 0;
 	try {
 		const { loadConfig } = await import("./config-DjXq_W42.mjs");
-		const { createStorageBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { createStorageBackend } = await import("./factory-UO9_DFMN.mjs");
 		const config = loadConfig();
 		if (config.storageBackend !== "postgres") return 0;
 		const backend = await createStorageBackend(config);
@@ -20325,7 +20455,7 @@ async function displayDryRun(plans) {
 	console.log();
 }
 async function executeCleanup(plans, skipReindex) {
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	let deleted = 0;
 	let renamed = 0;
@@ -20522,7 +20652,7 @@ async function executeCleanup(plans, skipReindex) {
 //#region src/cli/commands/session-cleanup/index.ts
 function registerSessionCleanupCommand(sessionCmd) {
 	sessionCmd.command("cleanup [project-slug]").description("Clean up session notes: delete empties, auto-name unnamed, move into YYYY/MM/ hierarchy, renumber").option("--execute", "Actually perform the cleanup (default is dry-run)").option("--no-renumber", "Skip renumbering sessions after deletions").option("--no-reindex", "Skip triggering memory re-index after moves").action(async (projectSlug, opts) => {
-		const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 		const registryBackend = await getRegistryBackend();
 		const dryRun = !opts.execute;
 		const skipReindex = opts.reindex === false;
@@ -20592,7 +20722,7 @@ function finalizeNote(notePath) {
 }
 async function cmdEnd(opts) {
 	await cmdPause(opts);
-	const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+	const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 	const registryBackend = await getRegistryBackend();
 	const cwd = process.cwd();
 	const project = await registryBackend.findProjectByCwdPrefix(cwd);
@@ -21040,7 +21170,7 @@ async function cmdFind(query, opts) {
 */
 async function getProjects(includeArchived) {
 	try {
-		const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+		const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 		const rows = await (await getRegistryBackend()).listProjectsWithSessionStats();
 		return includeArchived ? rows : rows.filter((p) => p.status === "active");
 	} catch {
@@ -21181,7 +21311,7 @@ function buildFeedFrom(allSessions, projects, liveSessions, allProjects) {
 		const tag = tagFor(e.status);
 		const name = chalk.white(pad(e.name, 22));
 		const where = dir ? dim$1(shorten(dir, 40)) : chalk.green("(running in another tab)");
-		const age = e.status === "live" ? chalk.green("now") : e.lastActivity > 0 ? dim$1(fmtAge(e.lastActivity)) : dim$1("—");
+		const age = e.status === "live" ? chalk.green("now") : e.lastActivity > 0 ? dim$1(fmtAge$1(e.lastActivity)) : dim$1("—");
 		const kwDisp = kw ? dim$1("  " + kw) : "";
 		const display = `${tag}  ${name} ${pad(age, 5)} ${where}${kwDisp}`;
 		const search = `${e.name} ${dir ?? ""} ${kw}`.toLowerCase();
@@ -21247,7 +21377,7 @@ function contextFor(rec) {
 	const notes = recentMarkdown(rec.dir, 4);
 	if (notes.length) {
 		lines.push(dim$1("recent notes:"));
-		for (const n of notes) lines.push("  " + dim$1(n.rel.slice(0, 60)) + "  " + dim$1(fmtAge(n.mtime)));
+		for (const n of notes) lines.push("  " + dim$1(n.rel.slice(0, 60)) + "  " + dim$1(fmtAge$1(n.mtime)));
 	} else lines.push(dim$1("(no notes here yet)"));
 	ctxCache.set(rec.dir, lines);
 	return lines;
@@ -21514,7 +21644,7 @@ async function cmdPick(opts = {}) {
 	const onRemove = async (rec) => {
 		if (!rec.slug) return false;
 		try {
-			const { getRegistryBackend } = await import("./factory-DW7BCJJT.mjs");
+			const { getRegistryBackend } = await import("./factory-UO9_DFMN.mjs");
 			const registryBackend = await getRegistryBackend();
 			const project = await registryBackend.getProjectBySlug(rec.slug);
 			if (!project || project.status !== "active") return false;
@@ -21799,4 +21929,4 @@ claude() {
 
 //#endregion
 export { drainStdio as n, buildProgram as t };
-//# sourceMappingURL=program-BTdspOOa.mjs.map
+//# sourceMappingURL=program-De1GVVM4.mjs.map