@tekmidian/pai 1.0.2 → 1.0.4

package/dist/hooks/worker-pool-host.mjs

@@ -9985,7 +9985,7 @@ var init_paths = __esm({
 
 // src/config/claude-json.ts
 import { homedir as homedir3 } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join8, resolve as resolve3 } from "node:path";
 function claudeJsonPath() {
   return join8(homedir3(), ".claude.json");
 }
@@ -10260,9 +10260,9 @@ function poolPort(config) {
   return config.pool?.port ?? DEFAULT_POOL_PORT;
 }
 function postTaskToPool(port2, task, timeoutMs, path = "/task", handover, handoverWaitMs = 2e4) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     let connected = false;
-    const fail = (detail) => resolve11({ error: connected ? "claim-error" : "unreachable", detail });
+    const fail = (detail) => resolve12({ error: connected ? "claim-error" : "unreachable", detail });
     const body = JSON.stringify(task);
     const req = httpRequest(
       {
@@ -10279,7 +10279,7 @@ function postTaskToPool(port2, task, timeoutMs, path = "/task", handover, handov
         res.on("end", () => {
           try {
             const resp = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-            resolve11(resp.pooled ? { ok: resp } : { miss: resp.reason ?? "refused" });
+            resolve12(resp.pooled ? { ok: resp } : { miss: resp.reason ?? "refused" });
           } catch (e) {
             fail(`unreadable answer: ${e instanceof Error ? e.message : String(e)}`);
           }
@@ -10289,12 +10289,12 @@ function postTaskToPool(port2, task, timeoutMs, path = "/task", handover, handov
     );
     req.setTimeout(timeoutMs, () => {
       req.destroy();
-      resolve11({ error: "timeout", detail: `no answer within ${timeoutMs} ms` });
+      resolve12({ error: "timeout", detail: `no answer within ${timeoutMs} ms` });
     });
     req.on("socket", (s) => s.on("connect", () => connected = true));
     req.on("error", (e) => {
       if (e.code === "ECONNREFUSED" && handover?.() && handoverWaitMs > 0) {
-        setTimeout(() => void postTaskToPool(port2, task, timeoutMs, path, handover, handoverWaitMs - 300).then(resolve11), 300);
+        setTimeout(() => void postTaskToPool(port2, task, timeoutMs, path, handover, handoverWaitMs - 300).then(resolve12), 300);
         return;
       }
       fail(e.message);
@@ -10303,33 +10303,33 @@ function postTaskToPool(port2, task, timeoutMs, path = "/task", handover, handov
   });
 }
 function poolHostProbe(port2, timeoutMs = 500) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const req = httpRequest({ host: LOOPBACK_HOST, port: port2, path: "/healthz", method: "GET", timeout: timeoutMs }, (res) => {
       res.resume();
-      res.on("end", () => resolve11(res.statusCode === 200 ? "up" : "down"));
-      res.on("error", () => resolve11("down"));
+      res.on("end", () => resolve12(res.statusCode === 200 ? "up" : "down"));
+      res.on("error", () => resolve12("down"));
     });
     req.on("timeout", () => {
       req.destroy();
-      resolve11("timeout");
+      resolve12("timeout");
     });
-    req.on("error", () => resolve11("down"));
+    req.on("error", () => resolve12("down"));
     req.end();
   });
 }
 function poolHostPid(port2, timeoutMs = 500) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const req = httpRequest({ host: LOOPBACK_HOST, port: port2, path: "/healthz", method: "GET", timeout: timeoutMs }, (res) => {
       res.resume();
       const pid = parseInt(String(res.headers["x-pool-host-pid"] ?? ""), 10);
-      res.on("end", () => resolve11(res.statusCode === 200 ? Number.isFinite(pid) ? pid : 0 : null));
-      res.on("error", () => resolve11(null));
+      res.on("end", () => resolve12(res.statusCode === 200 ? Number.isFinite(pid) ? pid : 0 : null));
+      res.on("error", () => resolve12(null));
     });
     req.on("timeout", () => {
       req.destroy();
-      resolve11(null);
+      resolve12(null);
     });
-    req.on("error", () => resolve11(null));
+    req.on("error", () => resolve12(null));
     req.end();
   });
 }
@@ -11283,7 +11283,7 @@ var init_wait_on = __esm({
 // src/workers/report.ts
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { statSync as statSync5 } from "node:fs";
-import { isAbsolute, relative, resolve as resolve3 } from "node:path";
+import { isAbsolute, relative, resolve as resolve4 } from "node:path";
 function ag2ReportBlock() {
   const spec = ag2Spec();
   return [
@@ -11446,7 +11446,7 @@ function verifyReportChanges(changed, cwd, startMs) {
     const raw = (ch.path ?? "").trim();
     if (!raw) continue;
     if (/^delete:/i.test(raw)) continue;
-    const abs = isAbsolute(raw) ? raw : resolve3(cwd, raw);
+    const abs = isAbsolute(raw) ? raw : resolve4(cwd, raw);
     let mtimeMs;
     try {
       mtimeMs = statSync5(abs).mtimeMs;
@@ -12867,14 +12867,14 @@ function anthropicUsageUrl() {
   return new URL("/api/oauth/usage", loadConfig().router.claudeUpstream);
 }
 function getJson(url, headers, timeoutMs = 5e3) {
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const mod = url.protocol === "https:" ? https : http;
     const rq = mod.get(url, { headers, timeout: timeoutMs }, (res) => {
       let t = "";
       res.on("data", (c) => t += c);
       res.on(
         "end",
-        () => res.statusCode === 200 ? resolve11(t) : reject(new HttpError(res.statusCode ?? 0, res.statusCode === 429 ? parseRetryAfter(res.headers["retry-after"]) : void 0))
+        () => res.statusCode === 200 ? resolve12(t) : reject(new HttpError(res.statusCode ?? 0, res.statusCode === 429 ? parseRetryAfter(res.headers["retry-after"]) : void 0))
       );
     });
     rq.on("timeout", () => rq.destroy(new Error("timeout")));
@@ -12882,7 +12882,7 @@ function getJson(url, headers, timeoutMs = 5e3) {
   });
 }
 function sh(cmd, args) {
-  return new Promise((resolve11) => execFile(cmd, args, { timeout: 4e3 }, (_e, out) => resolve11(String(out ?? "").trim())));
+  return new Promise((resolve12) => execFile(cmd, args, { timeout: 4e3 }, (_e, out) => resolve12(String(out ?? "").trim())));
 }
 async function anthropicToken() {
   for (const args of [["-a", process.env.USER ?? ""], []]) {
@@ -16965,7 +16965,7 @@ var require_dist2 = __commonJS({
     function parse4(stream, callback) {
       const parser = new parser_1.Parser();
       stream.on("data", (buffer) => parser.parse(buffer, callback));
-      return new Promise((resolve11) => stream.on("end", () => resolve11()));
+      return new Promise((resolve12) => stream.on("end", () => resolve12()));
     }
     exports.parse = parse4;
   }
@@ -17692,12 +17692,12 @@ var require_client = __commonJS({
           this._connect(callback);
           return;
         }
-        return new this._Promise((resolve11, reject) => {
+        return new this._Promise((resolve12, reject) => {
           this._connect((error) => {
             if (error) {
               reject(error);
             } else {
-              resolve11(this);
+              resolve12(this);
             }
           });
         });
@@ -18039,8 +18039,8 @@ var require_client = __commonJS({
           readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
           query = new Query2(config, values, callback);
           if (!query.callback) {
-            result = new this._Promise((resolve11, reject) => {
-              query.callback = (err, res) => err ? reject(err) : resolve11(res);
+            result = new this._Promise((resolve12, reject) => {
+              query.callback = (err, res) => err ? reject(err) : resolve12(res);
             }).catch((err) => {
               Error.captureStackTrace(err);
               throw err;
@@ -18113,8 +18113,8 @@ var require_client = __commonJS({
         if (cb) {
           this.connection.once("end", cb);
         } else {
-          return new this._Promise((resolve11) => {
-            this.connection.once("end", resolve11);
+          return new this._Promise((resolve12) => {
+            this.connection.once("end", resolve12);
           });
         }
       }
@@ -18163,8 +18163,8 @@ var require_pg_pool = __commonJS({
       const cb = function(err, client) {
         err ? rej(err) : res(client);
       };
-      const result = new Promise2(function(resolve11, reject) {
-        res = resolve11;
+      const result = new Promise2(function(resolve12, reject) {
+        res = resolve12;
         rej = reject;
       }).catch((err) => {
         Error.captureStackTrace(err);
@@ -18585,8 +18585,8 @@ var require_query2 = __commonJS({
     NativeQuery.prototype._getPromise = function() {
       if (this._promise) return this._promise;
       this._promise = new Promise(
-        function(resolve11, reject) {
-          this._once("end", resolve11);
+        function(resolve12, reject) {
+          this._once("end", resolve12);
           this._once("error", reject);
         }.bind(this)
       );
@@ -18758,12 +18758,12 @@ var require_client2 = __commonJS({
         this._connect(callback);
         return;
       }
-      return new this._Promise((resolve11, reject) => {
+      return new this._Promise((resolve12, reject) => {
         this._connect((error) => {
           if (error) {
             reject(error);
           } else {
-            resolve11(this);
+            resolve12(this);
           }
         });
       });
@@ -18787,8 +18787,8 @@ var require_client2 = __commonJS({
         query = new NativeQuery(config, values, callback);
         if (!query.callback) {
           let resolveOut, rejectOut;
-          result = new this._Promise((resolve11, reject) => {
-            resolveOut = resolve11;
+          result = new this._Promise((resolve12, reject) => {
+            resolveOut = resolve12;
             rejectOut = reject;
           }).catch((err) => {
             Error.captureStackTrace(err);
@@ -18844,8 +18844,8 @@ var require_client2 = __commonJS({
       }
       let result;
       if (!cb) {
-        result = new this._Promise(function(resolve11, reject) {
-          cb = (err) => err ? reject(err) : resolve11();
+        result = new this._Promise(function(resolve12, reject) {
+          cb = (err) => err ? reject(err) : resolve12();
         });
       }
       this.native.end(function() {
@@ -20294,7 +20294,7 @@ function chunkId(projectId, path, chunkIndex, startLine, endLine) {
   return createHash4("sha256").update(`${projectId}:${path}:${chunkIndex}:${startLine}:${endLine}`).digest("hex");
 }
 function yieldToEventLoop() {
-  return new Promise((resolve11) => setTimeout(resolve11, 10));
+  return new Promise((resolve12) => setTimeout(resolve12, 10));
 }
 function walkMdFiles(dir, acc, cap = MAX_FILES_PER_PROJECT, depth = 0) {
   const results = acc ?? [];
@@ -20935,6 +20935,17 @@ var init_kg_triples = __esm({
 async function ensureObservationTables(pool) {
   if (_tablesEnsured) return;
   await pool.query(SCHEMA_SQL);
+  const colCheck = await pool.query(
+    `SELECT column_name FROM information_schema.columns
+     WHERE table_name = 'pai_observations' AND column_name IN ('source', 'fidelity')`
+  );
+  const existing = new Set(colCheck.rows.map((r) => r.column_name));
+  if (!existing.has("source")) {
+    await pool.query("ALTER TABLE pai_observations ADD COLUMN IF NOT EXISTS source TEXT");
+  }
+  if (!existing.has("fidelity")) {
+    await pool.query("ALTER TABLE pai_observations ADD COLUMN IF NOT EXISTS fidelity TEXT");
+  }
   _tablesEnsured = true;
 }
 async function ensureSkillTelemetryTable(pool) {
@@ -20962,8 +20973,9 @@ async function storeObservation(pool, obs) {
   const result = await pool.query(
     `INSERT INTO pai_observations
        (session_id, project_id, project_slug, type, title, narrative,
-        tool_name, tool_input_summary, files_read, files_modified, concepts, content_hash)
-     VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9::jsonb, $10::jsonb, $11::jsonb, $12)
+        tool_name, tool_input_summary, files_read, files_modified, concepts, content_hash,
+        source, fidelity)
+     VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9::jsonb, $10::jsonb, $11::jsonb, $12, $13, $14)
      RETURNING id`,
     [
       obs.session_id,
@@ -20977,7 +20989,9 @@ async function storeObservation(pool, obs) {
       JSON.stringify(obs.files_read),
       JSON.stringify(obs.files_modified),
       JSON.stringify(obs.concepts),
-      hash
+      hash,
+      obs.source ?? null,
+      obs.fidelity ?? null
     ]
   );
   return result.rows[0]?.id ?? null;
@@ -21019,7 +21033,7 @@ async function queryObservations(pool, opts = {}) {
     `SELECT id, session_id, project_id, project_slug, type, title, narrative,
             tool_name, tool_input_summary,
             files_read, files_modified, concepts,
-            content_hash, created_at
+            content_hash, source, fidelity, created_at
      FROM pai_observations
      ${where}
      ORDER BY created_at DESC
@@ -21034,7 +21048,7 @@ async function queryRecentObservations(pool, projectId, limit) {
     `SELECT id, session_id, project_id, project_slug, type, title, narrative,
             tool_name, tool_input_summary,
             files_read, files_modified, concepts,
-            content_hash, created_at
+            content_hash, source, fidelity, created_at
      FROM pai_observations
      WHERE project_id = $1
      ORDER BY created_at DESC
@@ -21049,7 +21063,7 @@ async function querySessionObservations(pool, sessionId) {
     `SELECT id, session_id, project_id, project_slug, type, title, narrative,
             tool_name, tool_input_summary,
             files_read, files_modified, concepts,
-            content_hash, created_at
+            content_hash, source, fidelity, created_at
      FROM pai_observations
      WHERE session_id = $1
      ORDER BY created_at ASC`,
@@ -21219,6 +21233,8 @@ CREATE TABLE IF NOT EXISTS pai_observations (
   files_modified JSONB DEFAULT '[]'::jsonb,
   concepts JSONB DEFAULT '[]'::jsonb,
   content_hash TEXT,
+  source TEXT,
+  fidelity TEXT,
   created_at TIMESTAMPTZ DEFAULT NOW()
 );
 
@@ -22182,7 +22198,7 @@ var init_ntfy = __esm({
 import { connect } from "node:net";
 import { randomUUID } from "node:crypto";
 function callHub(method, params) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     let done = false;
     let buffer = "";
     let timer = null;
@@ -22197,7 +22213,7 @@ function callHub(method, params) {
         socket?.destroy();
       } catch {
       }
-      resolve11(ok);
+      resolve12(ok);
     }
     const socket = connect(hubSocket(), () => {
       const request = {
@@ -22277,14 +22293,14 @@ var init_macos = __esm({
             payload.message,
             title
           ];
-          return new Promise((resolve11) => {
+          return new Promise((resolve12) => {
             const child = spawn("osascript", args, {
               detached: true,
               stdio: "ignore"
             });
             child.unref();
-            child.on("error", () => resolve11(false));
-            setTimeout(() => resolve11(true), 200);
+            child.on("error", () => resolve12(false));
+            setTimeout(() => resolve12(true), 200);
           });
         } catch {
           return false;
@@ -22802,13 +22818,13 @@ var require_backup = __commonJS({
     var runBackup = (backup, handler) => {
       let rate = 0;
       let useDefault = true;
-      return new Promise((resolve11, reject) => {
+      return new Promise((resolve12, reject) => {
         setImmediate(function step() {
           try {
             const progress = backup.transfer(rate);
             if (!progress.remainingPages) {
               backup.close();
-              resolve11(progress);
+              resolve12(progress);
               return;
             }
             if (useDefault) {
@@ -26553,15 +26569,15 @@ __export(detect_exports, {
   formatDetection: () => formatDetection,
   formatDetectionJson: () => formatDetectionJson
 });
-import { resolve as resolve4 } from "node:path";
+import { resolve as resolve5 } from "node:path";
 async function detectProject(cwd) {
-  const target = resolve4(cwd ?? process.cwd());
+  const target = resolve5(cwd ?? process.cwd());
   const backend = await getRegistryBackend();
   const projects = await backend.listProjectsByPathLengthDesc({ excludeArchived: true });
   let matched = null;
   let matchType = "exact";
   for (const p of projects) {
-    const root = resolve4(p.root_path);
+    const root = resolve5(p.root_path);
     if (target === root) {
       matched = p;
       matchType = "exact";
@@ -26576,7 +26592,7 @@ async function detectProject(cwd) {
   if (!matched) return null;
   const sessionCount = await backend.countSessionsForProject(matched.id);
   const lastDate = await backend.getMostRecentSessionDate(matched.id);
-  const relative4 = matchType === "parent" ? target.slice(resolve4(matched.root_path).length + 1) : null;
+  const relative4 = matchType === "parent" ? target.slice(resolve5(matched.root_path).length + 1) : null;
   return {
     id: matched.id,
     slug: matched.slug,
@@ -26632,7 +26648,7 @@ var init_detect = __esm({
 });
 
 // src/cli/lib/utils.ts
-import { resolve as resolve5, basename as basename6, join as join30 } from "node:path";
+import { resolve as resolve6, basename as basename6, join as join30 } from "node:path";
 import { mkdirSync as mkdirSync21, existsSync as existsSync31, writeFileSync as writeFileSync18, readdirSync as readdirSync8, statSync as statSync10 } from "node:fs";
 function encIndex(entries) {
   let idx = indexes.get(entries);
@@ -27711,6 +27727,16 @@ var init_route_table = __esm({
   }
 });
 
+// src/router/cockpit-auth.ts
+var init_cockpit_auth = __esm({
+  "src/router/cockpit-auth.ts"() {
+    "use strict";
+    init_pai_home();
+    init_loopback();
+    init_timeouts();
+  }
+});
+
 // src/router/router.ts
 var routerPort;
 var init_router2 = __esm({
@@ -27730,6 +27756,7 @@ var init_router2 = __esm({
     init_local_instances();
     init_route_table();
     init_loopback_guard();
+    init_cockpit_auth();
     routerPort = () => loadConfig().router.port;
   }
 });
@@ -27968,11 +27995,11 @@ var init_run_env = __esm({
 // src/router/supervisor.ts
 import { connect as connect2 } from "node:net";
 function probeRouter(port2 = routerPort(), timeoutMs = LOCAL_PROBE_TIMEOUT_MS) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const sock = connect2({ host: LOOPBACK_HOST, port: port2 });
     const done = (up) => {
       sock.destroy();
-      resolve11(up);
+      resolve12(up);
     };
     sock.setTimeout(timeoutMs, () => done(false));
     sock.once("connect", () => done(true));
@@ -28014,6 +28041,13 @@ function requestKill(logDir2, ledger, id, by = callerDescription(), forced = fal
   writeFileAtomic(killMarkerPath(logDir2, id), JSON.stringify(req));
   appendLedger(ledger, "WORKER-KILL", { id, by, pid: req.pid, ppid: req.ppid, cwd: req.cwd, ...forced ? { forced: 1 } : {}, ...reason ? { reason } : {} });
 }
+function peekMarker(logDir2, id) {
+  try {
+    return JSON.parse(readFileSync36(killMarkerPath(logDir2, id), "utf8"));
+  } catch {
+    return null;
+  }
+}
 function readMarker(logDir2, id) {
   const p = killMarkerPath(logDir2, id);
   if (!existsSync36(p)) return null;
@@ -28047,8 +28081,11 @@ function parentInfo() {
 function decideEndReason(a) {
   if (a.timedOut) return { reason: "deadline" };
   if (a.loopStopped) return { reason: "loop-stopped" };
-  if (!a.signal) return { reason: "exit" };
-  const marker = readMarker(a.logDir, a.id);
+  const marker = a.signal || peekMarker(a.logDir, a.id)?.by === "pane audit" ? readMarker(a.logDir, a.id) : null;
+  if (!a.signal && !marker) return { reason: "exit" };
+  if (!a.signal && marker) {
+    return { reason: "pai-worker-kill", by: marker.by, note: `killed by ${marker.by}${marker.reason ? `: ${marker.reason}` : ""}`, ...marker.reason ? { killReason: marker.reason } : {}, forced: true };
+  }
   if (marker) {
     return {
       reason: "pai-worker-kill",
@@ -28525,7 +28562,7 @@ function sayToWorker(logDir2, id, text, timeoutMs = 4e3) {
       new Error(`worker ${id} has no operator socket (${path}) \u2014 it may predate this PAI version`)
     );
   }
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const sock = connect3(path);
     const fail = (e) => {
       sock.destroy();
@@ -28539,7 +28576,7 @@ function sayToWorker(logDir2, id, text, timeoutMs = 4e3) {
     sock.once("data", (d) => {
       sock.end();
       const reply = d.toString("utf8").trim();
-      if (reply === "ok") resolve11("ok");
+      if (reply === "ok") resolve12("ok");
       else reject(new Error(`worker ${id} did not take the message: ${reply.replace(/^err /, "") || "no acknowledgement"}`));
     });
     sock.once("close", () => fail(new Error("connection closed before the worker acknowledged")));
@@ -28657,10 +28694,10 @@ var init_pending = __esm({
 // src/workers/worktree.ts
 import { execFile as execFile2, execFileSync as execFileSync11, spawnSync as spawnSync3 } from "node:child_process";
 import { existsSync as existsSync44, lstatSync, mkdirSync as mkdirSync28, readFileSync as readFileSync43, mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync23, readdirSync as readdirSync13, readlinkSync, realpathSync as realpathSync2, rmSync as rmSync9, statSync as statSync15 } from "node:fs";
-import { basename as basename8, dirname as dirname22, isAbsolute as isAbsolute2, join as join43, resolve as resolve6, sep as sep2 } from "node:path";
+import { basename as basename8, dirname as dirname22, isAbsolute as isAbsolute2, join as join43, resolve as resolve7, sep as sep2 } from "node:path";
 import { tmpdir as tmpdir3, platform } from "node:os";
 function isSlotWorktree(dir) {
-  return basename8(dirname22(resolve6(dir))) === "slots";
+  return basename8(dirname22(resolve7(dir))) === "slots";
 }
 function worktreesDir(logDir2) {
   return join43(logDir2, "worktrees");
@@ -28783,7 +28820,7 @@ function isPaiBookkeepingPath(path) {
 function ensureScratchExcluded(cwd) {
   try {
     const rel = git(cwd, ["rev-parse", "--git-path", "info/exclude"]);
-    const file = isAbsolute2(rel) ? rel : resolve6(cwd, rel);
+    const file = isAbsolute2(rel) ? rel : resolve7(cwd, rel);
     const cur = existsSync44(file) ? readFileSync43(file, "utf8") : "";
     if (cur.split("\n").some((l) => l.trim() === ".pai-scratch/")) return;
     mkdirSync28(dirname22(file), { recursive: true });
@@ -28981,7 +29018,7 @@ function transcriptWrites(logDir2, id, dir) {
   } catch {
     return [];
   }
-  const roots = [resolve6(dir)];
+  const roots = [resolve7(dir)];
   try {
     roots.push(realpathSync2(dir));
   } catch {
@@ -28996,7 +29033,7 @@ function transcriptWrites(logDir2, id, dir) {
         if (b?.type !== "tool_use" || !["Write", "Edit", "MultiEdit", "NotebookEdit"].includes(b.name ?? "")) continue;
         const fp = b.input?.file_path;
         if (typeof fp !== "string") continue;
-        const abs = resolve6(fp);
+        const abs = resolve7(fp);
         if (roots.some((r) => abs.startsWith(r + sep2))) out.add(abs);
       }
     } catch {
@@ -29025,7 +29062,7 @@ function worktreeKnowledge(logDir2, id, dir, base) {
   } catch {
   }
   k.ignored = ignoredKnowledge(dir);
-  const root = resolve6(dir);
+  const root = resolve7(dir);
   for (const abs of transcriptWrites(logDir2, id, dir)) {
     if (existsSync44(abs)) continue;
     const rel = abs.startsWith(root + sep2) ? abs.slice(root.length + 1) : abs;
@@ -29066,7 +29103,7 @@ function symlinkEscapesWorktree(wtDir, relPath) {
   }
   if (!stat.isSymbolicLink()) return false;
   const target = readlinkSync(full);
-  const resolvedTarget = isAbsolute2(target) ? target : resolve6(dirname22(full), target);
+  const resolvedTarget = isAbsolute2(target) ? target : resolve7(dirname22(full), target);
   const realTarget = existsSync44(resolvedTarget) ? realpathSync2(resolvedTarget) : resolvedTarget;
   const realWtDir = realpathSync2(wtDir);
   return realTarget !== realWtDir && !realTarget.startsWith(realWtDir + sep2);
@@ -29321,7 +29358,7 @@ function mergeWorker(logDir2, id, opts = {}) {
     let files = [];
     let inProgress = false;
     try {
-      inProgress = existsSync44(resolve6(st.cwd, git(st.cwd, ["rev-parse", "--git-path", "MERGE_HEAD"])));
+      inProgress = existsSync44(resolve7(st.cwd, git(st.cwd, ["rev-parse", "--git-path", "MERGE_HEAD"])));
       if (inProgress) files = git(st.cwd, ["diff", "--name-only", "--diff-filter=U"]).split("\n").filter(Boolean);
     } catch {
     }
@@ -29521,7 +29558,7 @@ function branchArchived(repo, branchRef, refs) {
 function commonDir(dir) {
   try {
     const raw = git(dir, ["rev-parse", "--git-common-dir"]);
-    return isAbsolute2(raw) ? raw : resolve6(dir, raw);
+    return isAbsolute2(raw) ? raw : resolve7(dir, raw);
   } catch {
     return null;
   }
@@ -29613,7 +29650,7 @@ function archiveWorktree(logDir2, id, dir, branch) {
   let repo;
   try {
     const raw = git(dir, ["rev-parse", "--git-common-dir"]);
-    repo = isAbsolute2(raw) ? raw : resolve6(dir, raw);
+    repo = isAbsolute2(raw) ? raw : resolve7(dir, raw);
   } catch {
     throw new Error("not a git worktree");
   }
@@ -29713,7 +29750,7 @@ function archiveSlotBranch(logDir2, st, tree, dryRun, report, out) {
   let repo;
   try {
     const raw = git(st.cwd, ["rev-parse", "--git-common-dir"]);
-    repo = isAbsolute2(raw) ? raw : resolve6(st.cwd, raw);
+    repo = isAbsolute2(raw) ? raw : resolve7(st.cwd, raw);
     git(repo, ["rev-parse", "--verify", "-q", `refs/heads/${tree.branch}`]);
   } catch {
     return;
@@ -29762,13 +29799,13 @@ function gcForeign(logDir2, repo, owned, dryRun, report, out, archive) {
   } catch {
     return;
   }
-  const pai2 = resolve6(logDir2);
+  const pai2 = resolve7(logDir2);
   const blocks = raw.split("\n\n").map((b) => b.trim()).filter(Boolean);
   blocks.slice(1).forEach((block) => {
     const field = (k) => block.split("\n").find((l) => l.startsWith(k + " "))?.slice(k.length + 1);
     const dir = field("worktree");
     if (!dir || !existsSync44(dir) || block.includes("\nprunable")) return;
-    const real = resolve6(dir);
+    const real = resolve7(dir);
     if (owned.has(real) || real === pai2 || real.startsWith(pai2 + sep2) || isSlotWorktree(real)) return;
     const ref = field("branch");
     const branch = ref?.replace(/^refs\/heads\//, "");
@@ -29788,7 +29825,7 @@ function realpathOr(p) {
   try {
     return realpathSync2(p);
   } catch {
-    return resolve6(p);
+    return resolve7(p);
   }
 }
 function gcScratchTrees(statuses, owned, extraRepos, out, archive) {
@@ -29894,7 +29931,7 @@ function gcWorktrees(logDir2, olderThanHours = 24, dryRun = false, now = Date.no
   const out = [];
   const root = worktreesDir(logDir2);
   const statuses = loadStatuses(logDir2);
-  const owned = new Set(statuses.map((s) => ownedTree(s)?.dir).filter((d) => !!d).map((d) => resolve6(d)));
+  const owned = new Set(statuses.map((s) => ownedTree(s)?.dir).filter((d) => !!d).map((d) => resolve7(d)));
   const archive = (id, dir, branch, st) => {
     const target = `refs/pai-archive/${id}`;
     if (!isRealWorktree(dir)) return void out.push({ id, skipped: "not a worktree" });
@@ -29968,7 +30005,7 @@ function gcWorktrees(logDir2, olderThanHours = 24, dryRun = false, now = Date.no
   if (existsSync44(root)) {
     for (const ent of readdirSync13(root, { withFileTypes: true })) {
       const dir = join43(root, ent.name);
-      if (!ent.isDirectory() || owned.has(resolve6(dir)) || isSlotWorktree(dir) || ent.name.startsWith("spare-") || landed.has(realpathOr(dir))) continue;
+      if (!ent.isDirectory() || owned.has(resolve7(dir)) || isSlotWorktree(dir) || ent.name.startsWith("spare-") || landed.has(realpathOr(dir))) continue;
       try {
         if (Math.floor(statSync15(dir).mtimeMs) > cutoff) continue;
       } catch {
@@ -30050,7 +30087,7 @@ __export(aibroker_client_exports, {
 import { connect as connect4 } from "node:net";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function callAiBroker(method, params = {}, timeoutMs = 8e3, caller = {}) {
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const socketPath = brokerSocket();
     let done = false;
     let buffer = "";
@@ -30067,7 +30104,7 @@ function callAiBroker(method, params = {}, timeoutMs = 8e3, caller = {}) {
       } catch {
       }
       if (err) reject(err);
-      else resolve11(value);
+      else resolve12(value);
     }
     const socket = connect4(socketPath, () => {
       const request = {
@@ -30443,7 +30480,7 @@ var init_kill_tree = __esm({
 // src/workers/reap.ts
 import { execFileSync as execFileSync13 } from "node:child_process";
 import { existsSync as existsSync45, readdirSync as readdirSync14, realpathSync as realpathSync3 } from "node:fs";
-import { join as join45, resolve as resolve7, sep as sep3 } from "node:path";
+import { join as join45, resolve as resolve8, sep as sep3 } from "node:path";
 function commandOf(pid) {
   try {
     return execFileSync13("ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
@@ -30775,12 +30812,12 @@ function proxyPidPath(logDir2) {
   return join47(logDir2, "proxy.pid");
 }
 function proxyListening(port2 = proxyPort(), timeoutMs = 400) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const sock = connect5({ port: port2, host: HOST });
     const done = (ok) => {
       sock.removeAllListeners();
       sock.destroy();
-      resolve11(ok);
+      resolve12(ok);
     };
     sock.setTimeout(timeoutMs, () => done(false));
     sock.once("connect", () => done(true));
@@ -30957,6 +30994,7 @@ function fireDeadline(logDir2, status, ledger, limit) {
   status.last = what;
   saveStatus(logDir2, status);
   appendLedger(ledger, "WORKER-DEADLINE", { id: status.id, minutes: limit.minutes, waitedMin: waited });
+  appendStopEvent(logDir2, status.id, { killed_by: "deadline", forced: false, reason: `${what} (timer: --max-minutes/--deadline, armed at spawn)` });
   void killTree(logDir2, status.id, { skipRoot: true, by: "deadline", reason: `parent worker ${what}` }).catch(() => void 0);
 }
 function trackBlocked(logDir2, status, limit) {
@@ -31032,6 +31070,10 @@ async function finaliseRun(f) {
   }
   const end = decideEndReason({ logDir: logDir2, id: wid, timedOut: f.timedOut !== void 0, loopStopped: !!loopStop });
   status.endReason = end.reason;
+  if (end.reason === "pai-worker-kill" && !f.timedOut && end.killReason && !succeeded) {
+    status.last = shortText(end.killReason, 90);
+    report = { ...report ?? {}, result: report?.result ?? "-", why: end.killReason, notes: [end.killReason, report?.notes ?? f.fallbackText].filter(Boolean).join("\n") };
+  }
   status.claimsContinue = report?.result === "~";
   saveStatus(logDir2, status);
   appendLedger(ledger, "WORKER-END", { id: wid, ...f.end, rc, secs: f.secs, ...endFields(end) });
@@ -31092,9 +31134,9 @@ async function reaskAg2Report(a) {
   proc.stdout.on("data", (chunk) => {
     out += chunk.toString("utf8");
   });
-  await new Promise((resolve11) => {
-    proc.on("error", () => resolve11());
-    proc.on("close", () => resolve11());
+  await new Promise((resolve12) => {
+    proc.on("error", () => resolve12());
+    proc.on("close", () => resolve12());
   });
   clearTimeout(timer);
   return resultFromOutput(out);
@@ -31623,16 +31665,16 @@ async function openOwnedPane(o) {
   let session;
   let sock = null;
   let server;
-  const connected = new Promise((resolve11) => {
+  const connected = new Promise((resolve12) => {
     server = createServer2((s2) => {
       sock = s2;
       server.close();
-      resolve11(s2);
+      resolve12(s2);
     });
   });
-  await new Promise((resolve11, reject) => {
+  await new Promise((resolve12, reject) => {
     server.once("error", reject);
-    server.listen(sockPath(o.id), resolve11);
+    server.listen(sockPath(o.id), resolve12);
   });
   const fail = async (e) => {
     server.close();
@@ -31658,7 +31700,8 @@ async function openOwnedPane(o) {
   let pidWaiter = null;
   let ended = false;
   let startedAt = 0;
-  const record = (extra = {}) => writeJson(recordPath(o.id), { id: o.id, kind: o.kind, caller: process.pid, wrapper: wrapper || void 0, session, startedMs: startedAt || Date.now(), ...extra });
+  const openedAt = Date.now();
+  const record = (extra = {}) => writeJson(recordPath(o.id), { id: o.id, kind: o.kind, caller: process.pid, wrapper: wrapper || void 0, session, openedMs: openedAt, startedMs: startedAt || openedAt, ...extra });
   const settle = (code, signal) => {
     if (ended) return;
     ended = true;
@@ -31911,14 +31954,14 @@ function pickSplit(panes, hostId) {
   return best ? { id: best.id, dir: best.dir, cols: best.cols, rows: best.rows, small: true } : null;
 }
 function osascript(script, args) {
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const proc = spawn4("osascript", ["-l", "JavaScript", "-", ...args], { stdio: ["pipe", "pipe", "pipe"] });
     let out = "";
     let err = "";
     proc.stdout.on("data", (c) => out += c.toString("utf8"));
     proc.stderr.on("data", (c) => err += c.toString("utf8"));
     proc.on("error", reject);
-    proc.on("close", () => resolve11({ stdout: out, stderr: err }));
+    proc.on("close", () => resolve12({ stdout: out, stderr: err }));
     proc.stdin.write(script);
     proc.stdin.end();
   });
@@ -33155,18 +33198,18 @@ var init_browser_tools = __esm({
 });
 
 // src/workers/project-config.ts
-import { resolve as resolve8 } from "node:path";
+import { resolve as resolve9 } from "node:path";
 function asStringArray(v) {
   if (!Array.isArray(v)) return void 0;
   const out = v.filter((x) => typeof x === "string");
   return out.length ? out : void 0;
 }
 async function projectLaunchConfig(cwd, registry) {
-  const target = resolve8(cwd);
+  const target = resolve9(cwd);
   const backend = registry ?? await getRegistryBackend();
   const rows = await backend.listProjectsByPathLengthDesc({ excludeArchived: true });
   for (const row of rows) {
-    const root = resolve8(row.root_path);
+    const root = resolve9(row.root_path);
     if (target !== root && !target.startsWith(root + "/")) continue;
     if (!row.session_config) return null;
     let parsed;
@@ -33441,7 +33484,7 @@ var init_execute_prepare = __esm({
 
 // src/workers/edit-assist.ts
 import { readFileSync as readFileSync49 } from "node:fs";
-import { resolve as resolve9 } from "node:path";
+import { resolve as resolve10 } from "node:path";
 function editAssist(i) {
   if (i.errorText.includes("No changes to make: old_string and new_string are exactly the same")) {
     return "old_string and new_string are identical: the file already contains your intended text; check whether this step is done (grep for it) before editing again.";
@@ -33549,7 +33592,7 @@ function editHintFor(input, errorText, cwd) {
   let fileText = null;
   if (typeof i.file_path === "string") {
     try {
-      fileText = readFileSync49(resolve9(cwd, i.file_path), "utf8");
+      fileText = readFileSync49(resolve10(cwd, i.file_path), "utf8");
     } catch {
       fileText = null;
     }
@@ -34811,14 +34854,14 @@ async function foldRun(a, p) {
       state.closeTimer = null;
     }
     writeEvent({ type: "operator", text, handoff: isHandoffMessage(text) });
-    return new Promise((resolve11) => {
+    return new Promise((resolve12) => {
       try {
         stdin.write(
           stdinUserMessage(operatorUserText(text)) + "\n",
-          (e) => resolve11(e ? `write to the worker failed: ${e.message}` : void 0)
+          (e) => resolve12(e ? `write to the worker failed: ${e.message}` : void 0)
         );
       } catch (e) {
-        resolve11(`write to the worker failed: ${e.message}`);
+        resolve12(`write to the worker failed: ${e.message}`);
       }
     });
   }) : null;
@@ -34942,11 +34985,11 @@ async function foldRun(a, p) {
       }
     });
   }
-  let rc = await new Promise((resolve11, reject) => {
+  let rc = await new Promise((resolve12, reject) => {
     const onError = (e) => void failRun(e).then(() => reject(e), () => reject(e));
     if (earlyError) onError(earlyError);
     else proc.on("error", onError);
-    proc.on("close", (code) => resolve11(code ?? (state.killed ? 143 : 1)));
+    proc.on("close", (code) => resolve12(code ?? (state.killed ? 143 : 1)));
   });
   if (state.troubleTimer) clearInterval(state.troubleTimer);
   if (state.trouble) {
@@ -35475,11 +35518,11 @@ async function executeCodexRun(a) {
     saveStatus(logDir2, status);
     for (const ev of fold.events.splice(0)) writeEvent(ev);
   });
-  const rc = await new Promise((resolve11, reject) => {
+  const rc = await new Promise((resolve12, reject) => {
     const onError = (e) => void failRun(e).then(() => reject(e), () => reject(e));
     if (earlyError) onError(earlyError);
     else proc.on("error", onError);
-    proc.on("close", (code) => resolve11(code ?? (killed ? 143 : 1)));
+    proc.on("close", (code) => resolve12(code ?? (killed ? 143 : 1)));
   });
   const secs = Math.floor((Date.now() - t0) / 1e3);
   const finalText = fold.finalText ?? "";
@@ -35577,12 +35620,12 @@ async function returnControlsIfHeld(logDir2, id) {
   if (!id) return;
   const status = loadStatus(logDir2, id);
   if (!status?.controlsHeld) return;
-  await new Promise((resolve11) => {
+  await new Promise((resolve12) => {
     let done = false;
     const finish = () => {
       if (done) return;
       done = true;
-      resolve11();
+      resolve12();
     };
     try {
       const proc = spawn8("clickr", clickrControlsReturnArgv(id), { stdio: "ignore" });
@@ -36283,7 +36326,7 @@ import { openSync as openSync8, closeSync as closeSync7, writeSync as writeSync3
 init_pai_home();
 init_worktree();
 import { existsSync as existsSync55, mkdirSync as mkdirSync40, writeFileSync as writeFileSync32, realpathSync as realpathSync4 } from "node:fs";
-import { dirname as dirname27, join as join56, resolve as resolve10, isAbsolute as isAbsolute3 } from "node:path";
+import { dirname as dirname27, join as join56, resolve as resolve11, isAbsolute as isAbsolute3 } from "node:path";
 function slotsDir(logDir2) {
   return join56(logDir2, "slots");
 }
@@ -36293,7 +36336,7 @@ function slotPath(logDir2, provider, n) {
 function slotRepo(dir) {
   try {
     const raw = git(dir, ["rev-parse", "--git-common-dir"]);
-    const resolved = isAbsolute3(raw) ? raw : resolve10(dir, raw);
+    const resolved = isAbsolute3(raw) ? raw : resolve11(dir, raw);
     return realpathSync4(resolved);
   } catch {
     return null;
@@ -36306,7 +36349,7 @@ function slotServesRepo(logDir2, provider, n, repo) {
   if (!slotRepoPath) return false;
   try {
     const repoCommon = git(repo, ["rev-parse", "--git-common-dir"]);
-    const resolvedRepo = isAbsolute3(repoCommon) ? repoCommon : resolve10(repo, repoCommon);
+    const resolvedRepo = isAbsolute3(repoCommon) ? repoCommon : resolve11(repo, repoCommon);
     return slotRepoPath === realpathSync4(resolvedRepo);
   } catch {
     return false;
@@ -36477,8 +36520,8 @@ var PoolSlotSession = class {
     this.feeding = true;
     let result = null;
     let resolveFeed = null;
-    const done = new Promise((resolve11) => {
-      resolveFeed = () => resolve11(result);
+    const done = new Promise((resolve12) => {
+      resolveFeed = () => resolve12(result);
     });
     const listener = (e) => {
       if (e.type === "slot-exit") {
@@ -36513,7 +36556,7 @@ var PoolSlotSession = class {
   /** Resolves when the process exits (immediately when it already has). */
   waitExit() {
     if (this.exited) return Promise.resolve(this.exitCode);
-    return new Promise((resolve11) => this.exitWaiters.push(resolve11));
+    return new Promise((resolve12) => this.exitWaiters.push(resolve12));
   }
   /**
    * Resolves on the slot's init event (or its exit, or the timeout). The
@@ -36522,7 +36565,7 @@ var PoolSlotSession = class {
    */
   waitInit(timeoutMs) {
     if (this.exited) return Promise.resolve(null);
-    return new Promise((resolve11) => {
+    return new Promise((resolve12) => {
       let timer = setTimeout(done, timeoutMs);
       const listener = (e) => {
         if (e.type === "system" && e.subtype === "init") {
@@ -36536,7 +36579,7 @@ var PoolSlotSession = class {
         if (!timer) return;
         clearTimeout(timer);
         timer = null;
-        resolve11(e ?? null);
+        resolve12(e ?? null);
       }
       this.listeners.add(listener);
     });
@@ -36565,20 +36608,20 @@ function routerUsageTail(file) {
   }
 }
 function readBody(req, max = 8 * 1024 * 1024) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const chunks = [];
     let size = 0;
     req.on("data", (c) => {
       size += c.length;
       if (size > max) {
-        resolve11(null);
+        resolve12(null);
         req.destroy();
         return;
       }
       chunks.push(c);
     });
-    req.on("end", () => resolve11(Buffer.concat(chunks).toString("utf8")));
-    req.on("error", () => resolve11(null));
+    req.on("end", () => resolve12(Buffer.concat(chunks).toString("utf8")));
+    req.on("error", () => resolve12(null));
   });
 }
 function sendJson(res, status, body) {
@@ -37347,7 +37390,7 @@ function createPoolHost(opts = {}) {
     }
     for (const list of [...spares.values()]) for (const e of [...list]) discardSpare(e, "host shutdown");
     persist();
-    await new Promise((resolve11) => server.close(() => resolve11()));
+    await new Promise((resolve12) => server.close(() => resolve12()));
   };
   const reapSlots = () => {
     let n = 0;
@@ -37411,9 +37454,9 @@ function createPoolHost(opts = {}) {
       return true;
     }
     clearReloadMarker(logDir2);
-    await new Promise((resolve11) => {
-      server.once("error", () => resolve11());
-      server.listen(port2, LOOPBACK_HOST, () => resolve11());
+    await new Promise((resolve12) => {
+      server.once("error", () => resolve12());
+      server.listen(port2, LOOPBACK_HOST, () => resolve12());
     });
     appendLedger(ledger, "POOL-HOST-RELOAD-FAILED", { pid: process.pid, bundle: opts.bundlePath, note: why });
     reloading = false;