@tekmidian/pai 1.0.0 → 1.0.2

package/dist/hooks/worker-pool-host.mjs

@@ -10755,7 +10755,7 @@ var init_agentish = __esm({
 });
 
 // src/router/usage.ts
-var usageLogFile, MAX_LINE, MAX_JSON, USAGE_CACHE_WINDOW_MS;
+var usageLogFile, MAX_LINE, MAX_JSON;
 var init_usage = __esm({
   "src/router/usage.ts"() {
     "use strict";
@@ -10763,7 +10763,23 @@ var init_usage = __esm({
     usageLogFile = () => paiHomePath("logs", "router-usage.jsonl");
     MAX_LINE = 256 * 1024;
     MAX_JSON = 4 * 1024 * 1024;
-    USAGE_CACHE_WINDOW_MS = 7 * 864e5;
+  }
+});
+
+// src/utils/min-max.ts
+function minOf(values) {
+  let m = Infinity;
+  for (const v of values) if (v < m) m = v;
+  return m;
+}
+function maxOf(values) {
+  let m = -Infinity;
+  for (const v of values) if (v > m) m = v;
+  return m;
+}
+var init_min_max = __esm({
+  "src/utils/min-max.ts"() {
+    "use strict";
   }
 });
 
@@ -10886,6 +10902,21 @@ function resolveToken() {
   }
   return process.env.FORGE_TOKEN || process.env.AIBROKER_FORGE_TOKEN || void 0;
 }
+function curlQuote(v) {
+  if (/[\r\n]/.test(v)) throw new ForgeError("refusing newline in curl config value");
+  return v.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function buildCurlConfig(method, url, token, timeoutMs) {
+  return [
+    `url = "${curlQuote(url)}"`,
+    `request = "${curlQuote(method)}"`,
+    `header = "Authorization: token ${curlQuote(token)}"`,
+    `header = "Content-Type: application/json"`,
+    `max-time = ${Math.max(0.5, timeoutMs / 1e3)}`,
+    `silent`,
+    `write-out = "\\n%{http_code}"`
+  ].join("\n");
+}
 function forgeClient(cwd, cfg, deps) {
   const token = deps.token ?? resolveToken();
   if (!token) throw new ForgeError("no forge token");
@@ -10970,15 +11001,7 @@ var init_forge_sink = __esm({
     ForgeError = class extends Error {
     };
     curlHttp = (method, url, token, body, timeoutMs) => {
-      const cfg = [
-        `url = "${url}"`,
-        `request = "${method}"`,
-        `header = "Authorization: token ${token}"`,
-        `header = "Content-Type: application/json"`,
-        `max-time = ${Math.max(0.5, timeoutMs / 1e3)}`,
-        `silent`,
-        `write-out = "\\n%{http_code}"`
-      ].join("\n");
+      const cfg = buildCurlConfig(method, url, token, timeoutMs);
       const argv = body !== void 0 ? ["-K", "-", "--data-raw", body] : ["-K", "-"];
       const r = spawnSync("curl", argv, { input: cfg, encoding: "utf8", timeout: timeoutMs + 500, maxBuffer: 16 * 1024 * 1024 });
       if (r.error || r.status !== 0) throw new ForgeError(`curl failed (${r.error?.message ?? `exit ${r.status}`})`);
@@ -11673,6 +11696,7 @@ var TOOL_ERRORS_FILE, CROSS_WORKER_WINDOW_MS, SAME_WORKER_WINDOW_MS, RESEND_MS,
 var init_tool_errors = __esm({
   "src/workers/tool-errors.ts"() {
     "use strict";
+    init_min_max();
     init_heredoc();
     init_render_decision();
     init_wait();
@@ -12054,6 +12078,7 @@ var defaultDeps, ticketsDir, ticketFile;
 var init_queue = __esm({
   "src/builds/queue.ts"() {
     "use strict";
+    init_min_max();
     init_pai_home();
     init_config4();
     defaultDeps = () => ({
@@ -12099,6 +12124,7 @@ var init_parking = __esm({
 var init_scheduler = __esm({
   "src/router/scheduler.ts"() {
     "use strict";
+    init_min_max();
   }
 });
 
@@ -12463,6 +12489,7 @@ var localInstancesPath;
 var init_local_instances = __esm({
   "src/workers/local-instances.ts"() {
     "use strict";
+    init_min_max();
     init_local_tiers();
     localInstancesPath = (logDir2) => join19(logDir2, "local-instances.json");
   }
@@ -12690,10 +12717,11 @@ var init_local_provider = __esm({
 
 // src/config/atomic-file.ts
 import { mkdirSync as mkdirSync14, renameSync as renameSync10, rmSync as rmSync4, writeFileSync as writeFileSync13 } from "node:fs";
+import { randomBytes } from "node:crypto";
 import { dirname as dirname13 } from "node:path";
 function writeFileAtomic(path, text) {
   mkdirSync14(dirname13(path), { recursive: true });
-  const tmp = `${path}.${process.pid}.tmp`;
+  const tmp = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
   try {
     writeFileSync13(tmp, text, "utf8");
     renameSync10(tmp, path);
@@ -15102,7 +15130,7 @@ var require_utils_webcrypto = __commonJS({
     var nodeCrypto = __require("crypto");
     module.exports = {
       postgresMd5PasswordHash,
-      randomBytes: randomBytes2,
+      randomBytes: randomBytes3,
       deriveKey,
       sha256: sha2562,
       hashByName,
@@ -15112,7 +15140,7 @@ var require_utils_webcrypto = __commonJS({
     var webCrypto = nodeCrypto.webcrypto || globalThis.crypto;
     var subtleCrypto = webCrypto.subtle;
     var textEncoder = new TextEncoder();
-    function randomBytes2(length) {
+    function randomBytes3(length) {
       return webCrypto.getRandomValues(Buffer.alloc(length));
     }
     async function md5(string) {
@@ -19345,12 +19373,11 @@ function bufferToVector(buf) {
   return floats;
 }
 function buildPgTsQuery(query) {
-  const tokens = query.toLowerCase().split(/[\s\p{P}]+/u).filter(Boolean).filter((t) => t.length >= 2).filter((t) => !STOP_WORDS.has(t)).map((t) => t.replace(/'/g, "''").replace(/[&|!():]/g, "")).filter(Boolean);
-  if (tokens.length === 0) {
-    const raw = query.replace(/[^a-z0-9]/gi, " ").trim().split(/\s+/).filter(Boolean).join(" | ");
-    return raw || "";
-  }
-  return tokens.join(" | ");
+  const words = query.toLowerCase().match(/[\p{L}\p{N}_]+/gu) ?? [];
+  const long = words.filter((t) => t.length >= 2);
+  const tokens = long.filter((t) => !STOP_WORDS.has(t));
+  const chosen = tokens.length > 0 ? tokens : long;
+  return chosen.map((t) => `'${t}'`).join(" | ");
 }
 var init_helpers = __esm({
   "src/storage/postgres/helpers.ts"() {
@@ -19392,6 +19419,7 @@ async function searchKeyword(pool, query, opts) {
   const limitParam = `$${paramIdx}`;
   const sql = `
     SELECT
+      id,
       project_id,
       path,
       start_line,
@@ -19399,6 +19427,8 @@ async function searchKeyword(pool, query, opts) {
       text AS snippet,
       tier,
       source,
+      updated_at,
+      last_accessed_at,
       ts_rank(fts_vector, to_tsquery('simple', $1)) AS rank_score
     FROM pai_chunks
     WHERE ${conditions.join(" AND ")}
@@ -19407,7 +19437,9 @@ async function searchKeyword(pool, query, opts) {
   `;
   try {
     const result = await pool.query(sql, params);
+    const minScore = opts?.minScore ?? 0;
     return result.rows.map((row) => ({
+      chunkId: row.id,
       projectId: row.project_id,
       path: row.path,
       startLine: row.start_line,
@@ -19415,8 +19447,10 @@ async function searchKeyword(pool, query, opts) {
       snippet: row.snippet,
       score: row.rank_score,
       tier: row.tier,
-      source: row.source
-    }));
+      source: row.source,
+      updatedAt: Number(row.updated_at),
+      lastAccessedAt: row.last_accessed_at != null ? Number(row.last_accessed_at) : void 0
+    })).filter((r) => r.score >= minScore);
   } catch (e) {
     process.stderr.write(`[pai-postgres] searchKeyword error: ${e}
 `);
@@ -20060,7 +20094,7 @@ function splitBySections(lines) {
   const splitAt = new Set(headings.filter((h) => h.level <= 3).map((h) => h.line));
   const flush = () => {
     const text = current2.map((l) => l.text).join("\n");
-    sections.push({ lines: current2, tokens: estimateTokens(text), headingPath: currentPath });
+    sections.push({ lines: current2, tokens: sizeOf(text), headingPath: currentPath });
     current2 = [];
   };
   for (const line of lines) {
@@ -20079,7 +20113,7 @@ function splitByParagraphs(block) {
   for (const line of block.lines) {
     if (line.text.trim() === "" && current2.length > 0) {
       const text = current2.map((l) => l.text).join("\n");
-      paragraphs.push({ lines: [...current2], tokens: estimateTokens(text), headingPath: block.headingPath });
+      paragraphs.push({ lines: [...current2], tokens: sizeOf(text), headingPath: block.headingPath });
       current2 = [];
     } else {
       current2.push(line);
@@ -20087,44 +20121,68 @@ function splitByParagraphs(block) {
   }
   if (current2.length > 0) {
     const text = current2.map((l) => l.text).join("\n");
-    paragraphs.push({ lines: current2, tokens: estimateTokens(text), headingPath: block.headingPath });
+    paragraphs.push({ lines: current2, tokens: sizeOf(text), headingPath: block.headingPath });
   }
   return paragraphs.length > 0 ? paragraphs : [block];
 }
-function splitBySentences(block, maxTokens) {
-  const fullText = block.lines.map((l) => l.text).join(" ");
-  const sentenceRe = /(?<=[.!?])\s+(?=[A-Z"'])/g;
-  const sentences = fullText.split(sentenceRe);
+function sizeOf(text) {
+  return Math.max(estimateTokens(text), Math.ceil(text.length / MAX_CHARS_PER_TOKEN));
+}
+function splitLine(text, lineNo, budget) {
+  if (sizeOf(text) <= budget) return [{ text, lineNo, join: "" }];
+  const maxChars = budget * MAX_CHARS_PER_TOKEN;
+  const pieces = [];
+  const push = (t, join58) => {
+    if (t) pieces.push({ text: t, lineNo, join: join58 });
+  };
+  let acc = "";
+  const emit = () => {
+    push(acc, pieces.length > 0 ? " " : "");
+    acc = "";
+  };
+  const addWord = (word) => {
+    if (acc && sizeOf(acc + " " + word) > budget) emit();
+    if (sizeOf(word) > budget) {
+      if (acc) emit();
+      for (let i = 0; i < word.length; i += maxChars) {
+        push(word.slice(i, i + maxChars), i === 0 ? pieces.length > 0 ? " " : "" : "");
+      }
+      return;
+    }
+    acc = acc ? acc + " " + word : word;
+  };
+  for (const sentence of text.split(/(?<=[.!?])\s+(?=[A-Z"'])/)) {
+    if (acc && sizeOf(acc + " " + sentence) > budget) emit();
+    if (sizeOf(sentence) <= budget) {
+      acc = acc ? acc + " " + sentence : sentence;
+    } else {
+      for (const word of sentence.split(/\s+/).filter(Boolean)) addWord(word);
+    }
+  }
+  emit();
+  return pieces;
+}
+function splitOversized(block, budget) {
   const result = [];
-  let accText = "";
-  const startLine = block.lines[0]?.lineNo ?? 1;
-  const endLine = block.lines[block.lines.length - 1]?.lineNo ?? startLine;
-  const totalLines = endLine - startLine + 1;
-  const linesPerSentence = Math.max(1, Math.floor(totalLines / Math.max(1, sentences.length)));
-  let sentenceIdx = 0;
-  let approxLine = startLine;
+  let cur = [];
+  let curText = "";
   const flush = () => {
-    if (!accText.trim()) return;
-    const endApprox = Math.min(approxLine + linesPerSentence - 1, endLine);
-    result.push({
-      lines: [{ text: accText.trim(), lineNo: approxLine }],
-      tokens: estimateTokens(accText),
-      headingPath: block.headingPath
-    });
-    approxLine = endApprox + 1;
-    accText = "";
+    if (cur.length > 0) result.push({ lines: cur, tokens: sizeOf(curText), headingPath: block.headingPath });
+    cur = [];
+    curText = "";
   };
-  for (const sentence of sentences) {
-    sentenceIdx++;
-    const candidateText = accText ? accText + " " + sentence : sentence;
-    if (estimateTokens(candidateText) > maxTokens && accText) {
-      flush();
-      accText = sentence;
-    } else {
-      accText = candidateText;
+  const add = (piece, sep4) => {
+    const last = cur[cur.length - 1];
+    if (last && piece.join && last.lineNo === piece.lineNo) last.text += piece.join + piece.text;
+    else cur.push({ text: piece.text, lineNo: piece.lineNo });
+    curText += (curText ? sep4 : "") + piece.text;
+  };
+  for (const line of block.lines) {
+    for (const piece of splitLine(line.text, line.lineNo, budget)) {
+      if (cur.length > 0 && sizeOf(curText + "\n" + piece.text) > budget) flush();
+      add(piece, piece.join ? piece.join : "\n");
     }
   }
-  void sentenceIdx;
   flush();
   return result.length > 0 ? result : [block];
 }
@@ -20143,7 +20201,8 @@ function buildOverlapPrefix(lastChunk, overlapTokens) {
   return kept.map((text, idx) => ({ text, lineNo: Math.max(lastChunk.startLine, startLine + idx) }));
 }
 function stripPrivateTags(content) {
-  return content.replace(/<private>[\s\S]*?<\/private>/gi, "");
+  const blank = (m) => m.replace(/[^\n]/g, "");
+  return content.replace(/<private>[\s\S]*?<\/private>/gi, blank).replace(/<private>[\s\S]*$/i, blank);
 }
 function breadcrumb(path) {
   return path.length > 0 ? `[${path.join(" > ")}]
@@ -20163,7 +20222,7 @@ function chunkMarkdown(content, opts) {
   const sections = splitBySections(lines);
   const finalBlocks = [];
   for (const section of sections) {
-    const budget = Math.max(1, maxTokens - estimateTokens(breadcrumb(section.headingPath)));
+    const budget = Math.max(1, maxTokens - sizeOf(breadcrumb(section.headingPath)));
     if (section.tokens <= budget) {
       finalBlocks.push(section);
       continue;
@@ -20174,8 +20233,7 @@ function chunkMarkdown(content, opts) {
         finalBlocks.push(para);
         continue;
       }
-      const sentences = splitBySentences(para, budget);
-      finalBlocks.push(...sentences);
+      finalBlocks.push(...splitOversized(para, budget));
     }
   }
   const chunks = [];
@@ -20200,7 +20258,7 @@ function chunkMarkdown(content, opts) {
   }
   return chunks;
 }
-var CHUNKER_VERSION, DEFAULT_MAX_TOKENS, DEFAULT_OVERLAP;
+var CHUNKER_VERSION, DEFAULT_MAX_TOKENS, DEFAULT_OVERLAP, MAX_CHARS_PER_TOKEN;
 var init_chunker = __esm({
   "src/memory/chunker.ts"() {
     "use strict";
@@ -20208,6 +20266,7 @@ var init_chunker = __esm({
     CHUNKER_VERSION = 2;
     DEFAULT_MAX_TOKENS = 400;
     DEFAULT_OVERLAP = 80;
+    MAX_CHARS_PER_TOKEN = 6;
   }
 });
 
@@ -20381,8 +20440,9 @@ var init_retry = __esm({
 // src/memory/indexer/async.ts
 import { readFileSync as readFileSync29, statSync as statSync8, existsSync as existsSync29 } from "node:fs";
 import { join as join26, relative as relative2, basename as basename4 } from "node:path";
-async function indexFileWithBackend(backend, projectId, rootPath, relativePath, source, tier) {
+async function indexFileWithBackend(backend, projectId, rootPath, relativePath, source, tier, pathPrefix = "") {
   const absPath = join26(rootPath, relativePath);
+  const dbPath = pathPrefix + relativePath;
   let content;
   let stat;
   try {
@@ -20394,17 +20454,17 @@ async function indexFileWithBackend(backend, projectId, rootPath, relativePath,
   const hash = fileContentHash(content);
   const mtime = Math.floor(stat.mtimeMs);
   const size = stat.size;
-  const existingHash = await backend.getFileHash(projectId, relativePath);
+  const existingHash = await backend.getFileHash(projectId, dbPath);
   if (existingHash === hash) return false;
-  await backend.deleteChunksForFile(projectId, relativePath);
+  await backend.deleteChunksForFile(projectId, dbPath);
   const rawChunks = chunkMarkdown(content);
   const updatedAt = Date.now();
   const chunks = rawChunks.map((c, i) => ({
-    id: chunkId(projectId, relativePath, i, c.startLine, c.endLine),
+    id: chunkId(projectId, dbPath, i, c.startLine, c.endLine),
     projectId,
     source,
     tier,
-    path: relativePath,
+    path: dbPath,
     startLine: c.startLine,
     endLine: c.endLine,
     hash: c.hash,
@@ -20413,7 +20473,7 @@ async function indexFileWithBackend(backend, projectId, rootPath, relativePath,
     embedding: null
   }));
   await backend.insertChunks(chunks);
-  await backend.upsertFile({ projectId, path: relativePath, source, tier, hash, mtime, size });
+  await backend.upsertFile({ projectId, path: dbPath, source, tier, hash, mtime, size });
   return true;
 }
 async function indexProjectWithBackend(backend, projectId, rootPath, claudeNotesDir) {
@@ -20457,6 +20517,7 @@ async function indexProjectWithBackend(backend, projectId, rootPath, claudeNotes
         embedding: null
       };
       try {
+        if ((await backend.getChunkIds(projectId, syntheticPath)).length > 0) continue;
         await backend.insertChunks([titleChunk]);
       } catch {
       }
@@ -20495,6 +20556,7 @@ async function indexProjectWithBackend(backend, projectId, rootPath, claudeNotes
           embedding: null
         };
         try {
+          if ((await backend.getChunkIds(projectId, syntheticPath)).length > 0) continue;
           await backend.insertChunks([titleChunk]);
         } catch {
         }
@@ -20504,19 +20566,19 @@ async function indexProjectWithBackend(backend, projectId, rootPath, claudeNotes
       const claudeProjectDir = claudeNotesDir.slice(0, -"/Notes".length);
       const claudeMemoryMd = join26(claudeProjectDir, "MEMORY.md");
       if (existsSync29(claudeMemoryMd)) {
-        filesToIndex.push({ absPath: claudeMemoryMd, rootBase: claudeProjectDir, source: "memory", tier: "evergreen" });
+        filesToIndex.push({ absPath: claudeMemoryMd, rootBase: claudeProjectDir, source: "memory", tier: "evergreen", pathPrefix: CLAUDE_MEMORY_PREFIX });
       }
       const claudeMemoryDir = join26(claudeProjectDir, "memory");
       for (const absPath of walkMdFiles(claudeMemoryDir)) {
         const relPath = relative2(claudeProjectDir, absPath);
         const tier = detectTier(relPath);
-        filesToIndex.push({ absPath, rootBase: claudeProjectDir, source: "memory", tier });
+        filesToIndex.push({ absPath, rootBase: claudeProjectDir, source: "memory", tier, pathPrefix: CLAUDE_MEMORY_PREFIX });
       }
     }
   }
   await yieldToEventLoop();
   let filesSinceYield = 0;
-  for (const { absPath, rootBase, source, tier } of filesToIndex) {
+  for (const { absPath, rootBase, source, tier, pathPrefix = "" } of filesToIndex) {
     if (filesSinceYield >= INDEX_YIELD_EVERY) {
       await yieldToEventLoop();
       filesSinceYield = 0;
@@ -20524,9 +20586,9 @@ async function indexProjectWithBackend(backend, projectId, rootPath, claudeNotes
     filesSinceYield++;
     const relPath = relative2(rootBase, absPath);
     try {
-      const changed = await indexFileWithBackend(backend, projectId, rootBase, relPath, source, tier);
+      const changed = await indexFileWithBackend(backend, projectId, rootBase, relPath, source, tier, pathPrefix);
       if (changed) {
-        const ids = await backend.getChunkIds(projectId, relPath);
+        const ids = await backend.getChunkIds(projectId, pathPrefix + relPath);
         result.filesProcessed++;
         result.chunksCreated += ids.length;
       } else {
@@ -20537,8 +20599,8 @@ async function indexProjectWithBackend(backend, projectId, rootPath, claudeNotes
     }
   }
   const livePaths = /* @__PURE__ */ new Set();
-  for (const { absPath, rootBase } of filesToIndex) {
-    livePaths.add(relative2(rootBase, absPath));
+  for (const { absPath, rootBase, pathPrefix = "" } of filesToIndex) {
+    livePaths.add(pathPrefix + relative2(rootBase, absPath));
   }
   const dbChunkPaths = await backend.getDistinctChunkPaths(projectId);
   const stalePaths = [];
@@ -20565,6 +20627,7 @@ async function indexAllWithBackend(backend, registry) {
   }
   return { projects: projects.length, result: totals };
 }
+var CLAUDE_MEMORY_PREFIX;
 var init_async = __esm({
   "src/memory/indexer/async.ts"() {
     "use strict";
@@ -20573,6 +20636,7 @@ var init_async = __esm({
     init_chunker();
     init_helpers2();
     init_retry();
+    CLAUDE_MEMORY_PREFIX = ".claude-memory/";
   }
 });
 
@@ -21581,6 +21645,7 @@ var init_backend = __esm({
       async insertChunks(chunks) {
         if (chunks.length === 0) return;
         const client = await this.pool.connect();
+        let releaseErr;
         try {
           await client.query("BEGIN");
           for (const c of chunks) {
@@ -21618,10 +21683,14 @@ var init_backend = __esm({
           }
           await client.query("COMMIT");
         } catch (e) {
-          await client.query("ROLLBACK");
+          try {
+            await client.query("ROLLBACK");
+          } catch (rollbackErr) {
+            releaseErr = rollbackErr instanceof Error ? rollbackErr : new Error(String(rollbackErr));
+          }
           throw e;
         } finally {
-          client.release();
+          client.release(releaseErr);
         }
       }
       async getDistinctChunkPaths(projectId) {
@@ -22090,7 +22159,7 @@ var init_ntfy = __esm({
             "Content-Type": "text/plain; charset=utf-8"
           };
           if (payload.title) {
-            headers["Title"] = payload.title;
+            headers["Title"] = /^[\x20-\x7e]*$/.test(payload.title) ? payload.title : `=?UTF-8?B?${Buffer.from(payload.title, "utf8").toString("base64")}?=`;
           }
           if (cfg.priority && cfg.priority !== "default") {
             headers["Priority"] = cfg.priority;
@@ -22197,11 +22266,19 @@ var init_macos = __esm({
         if (process.platform !== "darwin") return false;
         try {
           const title = payload.title ?? "PAI";
-          const safeTitle = title.replace(/'/g, "\\'");
-          const safeMessage = payload.message.replace(/'/g, "\\'");
-          const script = `display notification "${safeMessage}" with title "${safeTitle}"`;
+          const args = [
+            "-e",
+            "on run argv",
+            "-e",
+            "display notification (item 1 of argv) with title (item 2 of argv)",
+            "-e",
+            "end run",
+            "--",
+            payload.message,
+            title
+          ];
           return new Promise((resolve11) => {
-            const child = spawn("osascript", ["-e", script], {
+            const child = spawn("osascript", args, {
               detached: true,
               stdio: "ignore"
             });
@@ -23538,8 +23615,8 @@ async function findTunnelsForSlugMap2(db, slugMap, opts) {
       const totalOccurrences = rows.reduce((s, r) => s + Number(r.cnt), 0);
       if (totalOccurrences < opts.min_occurrences) continue;
       const projects = rows.map((r) => slugMap[r.project_id] ?? String(r.project_id)).filter(Boolean);
-      const firstSeen = Math.min(...rows.map((r) => r.first_seen));
-      const lastSeen = Math.max(...rows.map((r) => r.last_seen));
+      const firstSeen = minOf(rows.map((r) => r.first_seen));
+      const lastSeen = maxOf(rows.map((r) => r.last_seen));
       tunnels.push({
         concept: term,
         projects,
@@ -23578,6 +23655,7 @@ async function findTunnelsSqlite(db, registry, options) {
 var init_tunnels2 = __esm({
   "src/storage/sqlite/tunnels.ts"() {
     "use strict";
+    init_min_max();
     init_stop_words();
   }
 });
@@ -26044,8 +26122,9 @@ var init_registry_sqlite = __esm({
     `;
         if (where.length) sql += " WHERE " + where.join(" AND ");
         sql += " ORDER BY s.date DESC, s.number DESC";
-        const limit = opts.limit ?? 20;
-        sql += ` LIMIT ${limit}`;
+        const limit = Math.max(1, Math.trunc(Number(opts.limit ?? 20)) || 20);
+        sql += " LIMIT ?";
+        params.push(limit);
         return this.db.prepare(sql).all(...params);
       }
       async findSessionByFilename(projectId, filename) {
@@ -27728,9 +27807,13 @@ function pinWorkersYamlCopy(env, root = WORKER_CONFIG_COPY_ROOT) {
   } catch {
   }
 }
-function buildRunEnv(provider, headless, proxyUrl, providerName, routerEnabled, orchestrate) {
+function nativeLaunchEnv() {
   const env = { ...process.env };
   delete env.ANTHROPIC_API_KEY;
+  return env;
+}
+function buildRunEnv(provider, headless, proxyUrl, providerName, routerEnabled, orchestrate) {
+  const env = nativeLaunchEnv();
   if (headless) {
     for (const k of SESSION_IDENTITY_VARS) delete env[k];
     for (const k of HEADLESS_STRIP_VARS) delete env[k];
@@ -27909,7 +27992,7 @@ var init_supervisor = __esm({
 
 // src/workers/endreason.ts
 import { execFileSync as execFileSync10 } from "node:child_process";
-import { existsSync as existsSync36, readFileSync as readFileSync36, unlinkSync as unlinkSync6, writeFileSync as writeFileSync23 } from "node:fs";
+import { existsSync as existsSync36, readFileSync as readFileSync36, unlinkSync as unlinkSync6 } from "node:fs";
 import { appendFileSync as appendFileSync4 } from "node:fs";
 import { join as join36 } from "node:path";
 function callerDescription(env = process.env) {
@@ -27928,7 +28011,7 @@ function requestKill(logDir2, ledger, id, by = callerDescription(), forced = fal
     ...forced ? { forced } : {},
     ...reason ? { reason } : {}
   };
-  writeFileSync23(killMarkerPath(logDir2, id), JSON.stringify(req));
+  writeFileAtomic(killMarkerPath(logDir2, id), JSON.stringify(req));
   appendLedger(ledger, "WORKER-KILL", { id, by, pid: req.pid, ppid: req.ppid, cwd: req.cwd, ...forced ? { forced: 1 } : {}, ...reason ? { reason } : {} });
 }
 function readMarker(logDir2, id) {
@@ -27996,6 +28079,7 @@ var killMarkerPath;
 var init_endreason = __esm({
   "src/workers/endreason.ts"() {
     "use strict";
+    init_atomic_file();
     init_paths();
     init_ledger();
     init_status();
@@ -28004,7 +28088,7 @@ var init_endreason = __esm({
 });
 
 // src/workers/loop-stop.ts
-import { existsSync as existsSync37, readFileSync as readFileSync37, unlinkSync as unlinkSync7, writeFileSync as writeFileSync24 } from "node:fs";
+import { existsSync as existsSync37, readFileSync as readFileSync37, unlinkSync as unlinkSync7 } from "node:fs";
 import { join as join37 } from "node:path";
 function takeLoopStop(logDir2, id) {
   const p = loopStopMarkerPath(logDir2, id);
@@ -28033,6 +28117,7 @@ var loopStopMarkerPath;
 var init_loop_stop = __esm({
   "src/workers/loop-stop.ts"() {
     "use strict";
+    init_atomic_file();
     init_endreason();
     init_status();
     init_queue();
@@ -28534,7 +28619,7 @@ var init_scratch = __esm({
 });
 
 // src/workers/pending.ts
-import { existsSync as existsSync43, readFileSync as readFileSync42, statSync as statSync14, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync43, readFileSync as readFileSync42, statSync as statSync14 } from "node:fs";
 import { join as join42 } from "node:path";
 function invalidatePendingCache(logDir2, repoRoot) {
   const file = join42(logDir2, "pending-cache.json");
@@ -28554,13 +28639,14 @@ function invalidatePendingCache(logDir2, repoRoot) {
   }
   if (!changed) return;
   try {
-    writeFileSync25(file, JSON.stringify(cache));
+    writeFileAtomic(file, JSON.stringify(cache));
   } catch {
   }
 }
 var init_pending = __esm({
   "src/workers/pending.ts"() {
     "use strict";
+    init_atomic_file();
     init_status();
     init_paths();
     init_worktree();
@@ -28570,7 +28656,7 @@ var init_pending = __esm({
 
 // src/workers/worktree.ts
 import { execFile as execFile2, execFileSync as execFileSync11, spawnSync as spawnSync3 } from "node:child_process";
-import { existsSync as existsSync44, lstatSync, mkdirSync as mkdirSync28, readFileSync as readFileSync43, mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync26, readdirSync as readdirSync13, readlinkSync, realpathSync as realpathSync2, rmSync as rmSync9, statSync as statSync15 } from "node:fs";
+import { existsSync as existsSync44, lstatSync, mkdirSync as mkdirSync28, readFileSync as readFileSync43, mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync23, readdirSync as readdirSync13, readlinkSync, realpathSync as realpathSync2, rmSync as rmSync9, statSync as statSync15 } from "node:fs";
 import { basename as basename8, dirname as dirname22, isAbsolute as isAbsolute2, join as join43, resolve as resolve6, sep as sep2 } from "node:path";
 import { tmpdir as tmpdir3, platform } from "node:os";
 function isSlotWorktree(dir) {
@@ -28701,7 +28787,7 @@ function ensureScratchExcluded(cwd) {
     const cur = existsSync44(file) ? readFileSync43(file, "utf8") : "";
     if (cur.split("\n").some((l) => l.trim() === ".pai-scratch/")) return;
     mkdirSync28(dirname22(file), { recursive: true });
-    writeFileSync26(file, `${cur}${cur === "" || cur.endsWith("\n") ? "" : "\n"}.pai-scratch/
+    writeFileSync23(file, `${cur}${cur === "" || cur.endsWith("\n") ? "" : "\n"}.pai-scratch/
 `, "utf8");
   } catch {
   }
@@ -28876,7 +28962,7 @@ function salvageIgnored(cwd, wtDir, id) {
         lines.push(`salvaged ${rel} from worker ${id}`);
       }
       mkdirSync28(dirname22(dest), { recursive: true });
-      writeFileSync26(dest, data);
+      writeFileSync23(dest, data);
     } catch {
       lines.pop();
       failed.push(rel);
@@ -29589,6 +29675,15 @@ function dirBytes(dir) {
   const r = spawnSync3("du", ["-sk", dir], { encoding: "utf8" });
   return (parseInt(String(r.stdout).split("	")[0] ?? "", 10) || 0) * 1024;
 }
+function isRealWorktree(dir) {
+  try {
+    const real = realpathSync2(dir);
+    if (realpathSync2(git(dir, ["rev-parse", "--show-toplevel"])) !== real) return false;
+    return git(dir, ["worktree", "list", "--porcelain"]).split("\n").some((l) => l.startsWith("worktree ") && realpathOr(l.slice(9)) === real);
+  } catch {
+    return false;
+  }
+}
 function busyPid(dir) {
   let real = dir;
   try {
@@ -29802,6 +29897,7 @@ function gcWorktrees(logDir2, olderThanHours = 24, dryRun = false, now = Date.no
   const owned = new Set(statuses.map((s) => ownedTree(s)?.dir).filter((d) => !!d).map((d) => resolve6(d)));
   const archive = (id, dir, branch, st) => {
     const target = `refs/pai-archive/${id}`;
+    if (!isRealWorktree(dir)) return void out.push({ id, skipped: "not a worktree" });
     const pid = busyPid(dir);
     if (pid) {
       if (!dryRun) appendLedger(ledgerPath(logDir2), "WORKER-GC-SKIP", { id, reason: "busy", pid: String(pid) });
@@ -29907,7 +30003,7 @@ function gcWorktreesThrottled(logDir2, everyMin = 60, now = Date.now(), opts = {
   } catch {
   }
   mkdirSync28(logDir2, { recursive: true });
-  writeFileSync26(stamp, String(now), "utf8");
+  writeFileSync23(stamp, String(now), "utf8");
   return gcWorktrees(logDir2, opts.olderThanHours ?? 24, false, now, false, opts.maxGb);
 }
 var WRITING_TOOLS, KNOWLEDGE_IGNORE_NAMES, KNOWLEDGE_IGNORE_SUFFIXES, MAX_SALVAGE_DELETES, MergeConflictError, withGate, GATE_MARK, STUB_PATTERN, TEST_CASE, OWNED_PREFIXES, GC_STAMP;
@@ -30475,7 +30571,7 @@ var init_reap = __esm({
 });
 
 // src/workers/active-time.ts
-import { mkdirSync as mkdirSync29, readFileSync as readFileSync45, statSync as statSync16, writeFileSync as writeFileSync27 } from "node:fs";
+import { mkdirSync as mkdirSync29, readFileSync as readFileSync45, statSync as statSync16, writeFileSync as writeFileSync24 } from "node:fs";
 import { join as join46 } from "node:path";
 function read(logDir2, id) {
   try {
@@ -30668,7 +30764,7 @@ var init_translate = __esm({
 
 // src/workers/proxy/server.ts
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync47, readFileSync as readFileSync46, writeFileSync as writeFileSync28, mkdirSync as mkdirSync30, unlinkSync as unlinkSync9 } from "node:fs";
+import { existsSync as existsSync47, readFileSync as readFileSync46, writeFileSync as writeFileSync25, mkdirSync as mkdirSync30, unlinkSync as unlinkSync9 } from "node:fs";
 import { connect as connect5 } from "node:net";
 import { dirname as dirname23, join as join47 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
@@ -30721,7 +30817,7 @@ async function ensureProxyRunning(port2, logDir2) {
     stdio: "ignore"
   });
   child.unref();
-  writeFileSync28(proxyPidPath(logDir2), `${child.pid}
+  writeFileSync25(proxyPidPath(logDir2), `${child.pid}
 `, "utf8");
   for (let i = 0; i < 40; i++) {
     if (await proxyListening(port2)) return `http://${HOST}:${port2}`;
@@ -31180,7 +31276,7 @@ var init_escalate = __esm({
 });
 
 // src/workers/engines/image.ts
-import { mkdirSync as mkdirSync31, writeFileSync as writeFileSync29 } from "node:fs";
+import { mkdirSync as mkdirSync31, writeFileSync as writeFileSync26 } from "node:fs";
 import { dirname as dirname24 } from "node:path";
 async function runImageCapability(opts) {
   if (!opts.provider.baseUrl) {
@@ -31242,7 +31338,7 @@ async function runImageCapability(opts) {
   }
   const bytes = Buffer.from(b64, "base64");
   mkdirSync31(dirname24(opts.outPath), { recursive: true });
-  writeFileSync29(opts.outPath, bytes);
+  writeFileSync26(opts.outPath, bytes);
   return {
     ok: true,
     path: opts.outPath,
@@ -31481,7 +31577,7 @@ var init_pane_bar = __esm({
 // src/workers/pane-exec.ts
 import { EventEmitter } from "node:events";
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync48, mkdirSync as mkdirSync32, readFileSync as readFileSync47, readdirSync as readdirSync15, renameSync as renameSync16, unlinkSync as unlinkSync10, writeFileSync as writeFileSync30 } from "node:fs";
+import { existsSync as existsSync48, mkdirSync as mkdirSync32, readFileSync as readFileSync47, readdirSync as readdirSync15, renameSync as renameSync16, unlinkSync as unlinkSync10, writeFileSync as writeFileSync27 } from "node:fs";
 import { createConnection, createServer as createServer2 } from "node:net";
 import { tmpdir as tmpdir4 } from "node:os";
 import { join as join48 } from "node:path";
@@ -31496,7 +31592,7 @@ function paneExecCommand(id, node = process.execPath, cli = process.argv[1] ?? "
 function writeJson(path, v) {
   mkdirSync32(paneExecDir(), { recursive: true });
   const tmp = `${path}.${process.pid}.tmp`;
-  writeFileSync30(tmp, JSON.stringify(v), "utf8");
+  writeFileSync27(tmp, JSON.stringify(v), "utf8");
   renameSync16(tmp, path);
 }
 function readExit(id) {
@@ -31776,7 +31872,7 @@ import {
   readFileSync as readFileSync48,
   renameSync as renameSync17,
   rmSync as rmSync10,
-  writeFileSync as writeFileSync31
+  writeFileSync as writeFileSync28
 } from "node:fs";
 import { homedir as homedir9, tmpdir as tmpdir5 } from "node:os";
 import { dirname as dirname25, join as join49 } from "node:path";
@@ -31917,7 +32013,7 @@ function writeDynamicProfile(parent, fontSize, read2 = itermPrefs) {
   const dir = dirname25(path);
   if (!existsSync49(dir)) mkdirSync33(dir, { recursive: true });
   const tmp = `${path}.tmp`;
-  writeFileSync31(tmp, JSON.stringify({ Profiles: [profile] }, null, 2) + "\n", "utf8");
+  writeFileSync28(tmp, JSON.stringify({ Profiles: [profile] }, null, 2) + "\n", "utf8");
   renameSync17(tmp, path);
 }
 async function followProfile(fontSize, read2 = itermPrefs) {
@@ -31984,7 +32080,7 @@ function saveEntry(logDir2, e) {
   const path = entryPath(logDir2, e);
   mkdirSync33(dirname25(path), { recursive: true });
   const tmp = `${path}.${process.pid}.tmp`;
-  writeFileSync31(tmp, JSON.stringify({ session: e.session, worker: e.worker, opened: e.opened, ...e.host ? { host: e.host } : {} }, null, 1), "utf8");
+  writeFileSync28(tmp, JSON.stringify({ session: e.session, worker: e.worker, opened: e.opened, ...e.host ? { host: e.host } : {} }, null, 1), "utf8");
   renameSync17(tmp, path);
 }
 function dropEntry(logDir2, e, caller, reason) {
@@ -31994,7 +32090,7 @@ function dropEntry(logDir2, e, caller, reason) {
   rmSync10(entryPath(logDir2, e), { force: true });
   if (existsSync49(legacy)) {
     const rest = readEntry2(legacy, e.scope ?? "").filter((x) => x.session !== e.session);
-    writeFileSync31(legacy, JSON.stringify(rest.map(({ scope: _s, ...x }) => x), null, 1), "utf8");
+    writeFileSync28(legacy, JSON.stringify(rest.map(({ scope: _s, ...x }) => x), null, 1), "utf8");
   }
 }
 async function listItermSessions(run = osascript) {
@@ -33013,9 +33109,9 @@ var init_lifecycle = __esm({
 });
 
 // src/workers/note-delivery.ts
-import { randomBytes } from "node:crypto";
+import { randomBytes as randomBytes2 } from "node:crypto";
 function newNoteToken() {
-  return randomBytes(4).toString("hex");
+  return randomBytes2(4).toString("hex");
 }
 var NOTE_TOKEN_ENV;
 var init_note_delivery = __esm({
@@ -33438,8 +33534,9 @@ function computeSimilarity(s1, s2) {
       break;
     }
   }
+  const overlapCap = minLength - prefixLength;
   const totalLength = Math.max(s1.length, s2.length);
-  return totalLength > 0 ? (prefixLength + suffixLength) / totalLength : 0;
+  return (prefixLength + Math.min(suffixLength, overlapCap)) / totalLength;
 }
 function isEditAssistError(errorText) {
   return errorText.includes("No changes to make: old_string and new_string are exactly the same") || errorText.includes("String to replace not found in file");
@@ -33556,7 +33653,7 @@ var init_notice_policy = __esm({
 
 // src/workers/pailot-guard.ts
 import { createHash as createHash9 } from "node:crypto";
-import { mkdirSync as mkdirSync34, readFileSync as readFileSync50, renameSync as renameSync18, writeFileSync as writeFileSync32 } from "node:fs";
+import { mkdirSync as mkdirSync34, readFileSync as readFileSync50, renameSync as renameSync18, writeFileSync as writeFileSync29 } from "node:fs";
 import { join as join50 } from "node:path";
 function load(logDir2) {
   try {
@@ -33570,7 +33667,7 @@ function save(logDir2, s) {
   try {
     mkdirSync34(logDir2, { recursive: true });
     const tmp = `${stateFile(logDir2)}.${process.pid}.tmp`;
-    writeFileSync32(tmp, JSON.stringify(s), "utf8");
+    writeFileSync29(tmp, JSON.stringify(s), "utf8");
     renameSync18(tmp, stateFile(logDir2));
   } catch {
   }
@@ -33622,7 +33719,7 @@ var init_pailot_guard = __esm({
 
 // src/workers/run-events.ts
 import { spawn as spawn6 } from "node:child_process";
-import { existsSync as existsSync50, mkdirSync as mkdirSync35, openSync as openSync4, readdirSync as readdirSync17, readFileSync as readFileSync51, writeFileSync as writeFileSync33 } from "node:fs";
+import { existsSync as existsSync50, mkdirSync as mkdirSync35, openSync as openSync4, readdirSync as readdirSync17, readFileSync as readFileSync51, writeFileSync as writeFileSync30 } from "node:fs";
 function originFromEnv(env = process.env) {
   if (env.PAI_RUN_ORIGIN) {
     try {
@@ -33772,6 +33869,7 @@ var init_worker_trouble = __esm({
 var init_usage2 = __esm({
   "src/workers/usage.ts"() {
     "use strict";
+    init_min_max();
     init_paths();
     init_status();
     init_config3();
@@ -34045,7 +34143,7 @@ var init_pool_host_run = __esm({
 
 // src/workers/pool-cli.ts
 import { spawn as spawn7 } from "node:child_process";
-import { closeSync as closeSync4, existsSync as existsSync52, mkdirSync as mkdirSync37, statSync as statSync18, unlinkSync as unlinkSync11, writeFileSync as writeFileSync34, readFileSync as readFileSync52 } from "node:fs";
+import { closeSync as closeSync4, existsSync as existsSync52, mkdirSync as mkdirSync37, statSync as statSync18, unlinkSync as unlinkSync11, writeFileSync as writeFileSync31, readFileSync as readFileSync52 } from "node:fs";
 import { dirname as dirname26, join as join52 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 function standalonePoolHostPath() {
@@ -34081,7 +34179,7 @@ async function startPoolHost(logDir2, port2, waitMs) {
   });
   child.unref();
   closeSync4(logFd);
-  writeFileSync34(poolPidPath(logDir2), `${child.pid}
+  writeFileSync31(poolPidPath(logDir2), `${child.pid}
 `, "utf8");
   appendLedger(ledgerPath(logDir2), "POOL-HOST-START", { pid: child.pid ?? 0, port: port2, note: "spawned by a client" });
   for (let i = 0; i < waitMs / 250; i++) {
@@ -36154,7 +36252,7 @@ init_config3();
 init_paths();
 init_pool();
 import { spawn as spawn10 } from "node:child_process";
-import { mkdirSync as mkdirSync42, writeFileSync as writeFileSync36 } from "node:fs";
+import { mkdirSync as mkdirSync42, writeFileSync as writeFileSync33 } from "node:fs";
 
 // src/workers/pool-host.ts
 init_loopback_guard();
@@ -36184,7 +36282,7 @@ import { openSync as openSync8, closeSync as closeSync7, writeSync as writeSync3
 // src/workers/slots.ts
 init_pai_home();
 init_worktree();
-import { existsSync as existsSync55, mkdirSync as mkdirSync40, writeFileSync as writeFileSync35, realpathSync as realpathSync4 } from "node:fs";
+import { existsSync as existsSync55, mkdirSync as mkdirSync40, writeFileSync as writeFileSync32, realpathSync as realpathSync4 } from "node:fs";
 import { dirname as dirname27, join as join56, resolve as resolve10, isAbsolute as isAbsolute3 } from "node:path";
 function slotsDir(logDir2) {
   return join56(logDir2, "slots");
@@ -36234,7 +36332,7 @@ function prepareSlot(logDir2, provider, n, repo, taskId, baseRef) {
     const uncommitted = uncommittedPaths(dir);
     const untracked = uncommitted.filter((p) => !p.startsWith(".git/"));
     mkdirSync40(dirname27(patchPath), { recursive: true });
-    writeFileSync35(patchPath, `${diff}
+    writeFileSync32(patchPath, `${diff}
 untracked/other: ${untracked.join(" ")}
 `);
     salvagePatch = patchPath;
@@ -37445,7 +37543,7 @@ var listen = () => {
     host.listening();
     if (logDir) {
       mkdirSync42(logDir, { recursive: true });
-      writeFileSync36(poolPidPath(logDir), `${process.pid}
+      writeFileSync33(poolPidPath(logDir), `${process.pid}
 `, "utf8");
     }
     process.stderr.write(`pai worker pool host listening on ${loopbackUrl(host.port)} (cwd ${host.logDir})