@tekmidian/pai 1.0.3 → 1.0.4

package/dist/{worker-config-CJhEMk19.mjs → worker-config-eY5Qy4vl.mjs}

@@ -7,7 +7,7 @@ import { E as worktreesStatsCached, l as formatWorktreesStats } from "./worktree
 import { T as ownsPidCached, b as loadStatusesCached, g as isLive, v as loadStatus } from "./status-ggJ7lgVg.mjs";
 import { C as describeMcp, _ as readPoolMetrics, f as poolMetricsPath, h as poolSettings, i as bundleBuildStamp, l as poolHostProbe, o as poolCarry, u as poolHostStale, v as readPoolState, x as warmOrCold } from "./pool-Dh-q3iJi.mjs";
 import { a as ownerSessionName } from "./scope-D-h6F6DN.mjs";
-import { $t as findLocal, Bt as routeRows, E as budgetCache, Ft as flowText, Gn as isTimeOrdered, Gt as setRoute, Ht as servingChip, I as buildSpeed, Kn as markTimeOrdered, Kt as setSessionRoute, L as percentile, Mt as clearSessionRoute, Ot as isTailnetOrLocalName, Rt as resolveSessionArg, Tt as duplicateModelIds, Vt as routeText, W as currentInventory, Xn as usageLogFile, Xt as clearPolicy, Yn as splitBySessionKind, Yt as POLICY_MODES, _n as pickLocal, at as readInventoryInput, cn as getProfile, en as onBattery, gn as localTierOrder, in as writePolicy, it as readInventory, jt as applyPolicyToRoutes, kt as loopbackRefusal, mn as currentLocalStatus, nn as readPolicy, rn as routeRun, rt as processTreeRssMb, tn as parseDuration, un as readProfiles, vn as probeLoopback, zt as routeChoices } from "./routing-BAAST9vT.mjs";
+import { $n as splitBySessionKind, $t as POLICY_MODES, E as budgetCache, Ft as applyPolicyToRoutes, Gt as routeText, Ht as resolveSessionArg, I as buildSpeed, It as clearSessionRoute, Kt as servingChip, L as percentile, Mt as isTailnetOrLocalName, Nt as loopbackRefusal, Sn as probeLoopback, Tt as duplicateModelIds, Ut as routeChoices, W as currentInventory, Wt as routeRows, Xn as markTimeOrdered, Xt as setSessionRoute, Yn as isTimeOrdered, Yt as setRoute, an as parseDuration, at as readInventoryInput, bn as localTierOrder, cn as writePolicy, en as clearPolicy, er as usageLogFile, fn as getProfile, in as onBattery, it as readInventory, mn as readProfiles, on as readPolicy, rn as findLocal, rt as processTreeRssMb, sn as routeRun, vn as currentLocalStatus, xn as pickLocal, zt as flowText } from "./routing-DmkheCRH.mjs";
 import { C as stopLines, T as tierButtons, _ as readLocalConfig, a as LocalTierError, c as fetchServedModels, f as listensOnPort, g as planStart, h as parseServers, l as fmtRss, m as parseLocalConfig, u as healthUrl, v as resolveModelPath, x as stopCommandFor } from "./local-tiers-BE4jGaMa.mjs";
 import { _ as buildSlots, a as buildsDir, g as waitReason, l as listBuildsSync, m as ticketKind, n as breakStaleMutex, x as testSlots } from "./caller-identity-yLFb7CKq.mjs";
 import { f as sharedScheduler, o as readSchedFile, u as schedPlain } from "./scheduler-CtUyWJ3O.mjs";
@@ -16,25 +16,28 @@ import { a as instancesFromProcesses, d as reconcileInstances, i as instanceNumb
 import { i as localStatusLine, s as readLocalStatus } from "./local-candidate-DLdwQt0s.mjs";
 import { t as LOCAL_PROBE_TIMEOUT_MS } from "./timeouts-1MLooEBB.mjs";
 import { n as OPT, t as CliError } from "./define-CjJsmq-6.mjs";
-import { c as resolveFromModule } from "./postgres-C6ti4haA.mjs";
-import { c as ensureProxyRunning, l as proxyPort, u as stopProxy } from "./launch-Jh5NVeNe.mjs";
-import { a as colorEnabled, f as renderTable, n as readBudget, o as makeStyle } from "./health-Dnym-qcT.mjs";
-import { H as testProvider, o as sessionWorkersLine } from "./run-CSC7mgPf.mjs";
-import { U as planRows, V as loadPlanStatuses, i as localIdleLine, n as markControlsHeld, s as readLocalIdle, t as clickrControlsArgv, yt as psTable } from "./controls-CPoeudou.mjs";
+import { c as resolveFromModule } from "./postgres-DNIOQijl.mjs";
+import { c as ensureProxyRunning, l as proxyPort, u as stopProxy } from "./launch-Di7N-J5X.mjs";
+import { a as colorEnabled, f as renderTable, n as readBudget, o as makeStyle } from "./health-C4FQmkJn.mjs";
+import { H as testProvider, o as sessionWorkersLine } from "./run-BwZKBJZZ.mjs";
+import { U as planRows, V as loadPlanStatuses, i as localIdleLine, n as markControlsHeld, s as readLocalIdle, t as clickrControlsArgv, yt as psTable } from "./controls-JLm6g0yP.mjs";
+import { w as parseDenialText } from "./render-C84BqQRC.mjs";
 import { n as diskBundleMtime, r as ensurePoolHost } from "./pool-cli-BggU8GRp.mjs";
-import { a as readAudit, d as loadPaneRunStatuses, f as paneRunRows } from "./pane-audit-DKQt71s4.mjs";
-import { b as useProvider, f as setClass, g as setWorkersEnabled, l as removeProvider, m as setProviderEnabled, p as setProviderCap, r as classTargetText, s as describeProviders, t as addProvider, v as unsetClass, y as updateProvider } from "./providers-CblTFrhz.mjs";
-import { A as cockpitMemoryPayload, B as cockpitLayout, N as liveMemoryDeps, O as embeddingRuntimeName, P as memoryJobProgress, S as runtimeJobProgress, V as cockpitProbeSettings, c as defaultDeps, g as readLabels, h as readCockpitJob, k as readRuntimeCommands, t as COCKPIT_ACTION_EVENT, v as runCockpitAction, x as runningRuntimeJobs } from "./cockpit-actions-BBHeyEZI.mjs";
-import { i as fallbackStatusText, n as fallbackOn, r as fallbackStatus, t as fallbackOff } from "./fallback-DFlItw1Z.mjs";
-import { appendFileSync, chmodSync, closeSync, copyFileSync, existsSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { a as readAudit, d as loadPaneRunStatuses, f as paneRunRows } from "./pane-audit-Lqy9N_Ki.mjs";
+import { i as fallbackStatusText, n as fallbackOn, r as fallbackStatus, t as fallbackOff } from "./fallback-CBWpp2F2.mjs";
+import { b as useProvider, f as setClass, g as setWorkersEnabled, l as removeProvider, m as setProviderEnabled, p as setProviderCap, r as classTargetText, s as describeProviders, t as addProvider, v as unsetClass, y as updateProvider } from "./providers-C9QC0TtO.mjs";
+import { A as cockpitMemoryPayload, B as cockpitLayout, N as liveMemoryDeps, O as embeddingRuntimeName, P as memoryJobProgress, S as runtimeJobProgress, V as cockpitProbeSettings, c as defaultDeps, g as readLabels, h as readCockpitJob, k as readRuntimeCommands, t as COCKPIT_ACTION_EVENT, v as runCockpitAction, x as runningRuntimeJobs } from "./cockpit-actions-OodH_vx_.mjs";
+import { n as isRealUserPrompt, t as extractUserPromptText } from "./session-usage-CPvXvSkw.mjs";
+import { appendFileSync, chmodSync, closeSync, copyFileSync, createReadStream, existsSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, normalize, relative, resolve } from "node:path";
 import chalk from "chalk";
 import { homedir, loadavg } from "node:os";
 import { execFile, execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { LineCounter, isMap, isScalar, parse, parseDocument } from "yaml";
 import { connect, createServer } from "node:net";
+import { createInterface } from "node:readline";
 
 //#region src/cli/commands/providers.ts
 /**
@@ -1469,6 +1472,7 @@ main.win .cbody>.tw{padding:6px 10px}.wt-auto>.sp{padding:6px 10px}
 .wc-svg{overflow:hidden}.wc-svg svg{display:block}.wc-leg{overflow:hidden;padding:0 10px}main.win .cbody:has(.wt-svg,.wc-svg){overflow:hidden}
 .wr{padding:6px 10px;min-width:0}.wr-top{display:flex;flex-wrap:wrap;gap:6px 10px;align-items:center}.wr-sel{flex:none}.wr .rtcls{font-size:11px}.wr-sess{margin-top:4px}.wr-sess .rtsess{display:flex;flex-wrap:wrap;gap:4px 8px;align-items:center;margin-left:12px}
 .wmd{padding:6px 10px;min-width:0}.wmd-top{display:flex;flex-wrap:wrap;gap:6px;align-items:center}.wmd-g{display:grid;grid-template-columns:repeat(auto-fit,minmax(130px,1fr));gap:6px 10px;margin-top:6px}.wmdt{font-size:11px;color:var(--dim)}.wmdv{font-size:18px}.wmds{font-size:11px}.wmd-n{margin-top:4px}.wmd-i .linst{margin-top:3px}.wmd-in{font:inherit;min-width:120px}.wmd-e .eprow{padding:2px 0}
+.wr-row[data-sess]{cursor:pointer}.sd{margin-top:8px;border-top:1px solid var(--bd,rgba(128,128,128,.3));padding-top:6px}.sd-h{display:flex;flex-wrap:wrap;gap:4px 10px;align-items:center}.sd-h a{text-decoration:none}.sd-h a.on{font-weight:600;text-decoration:underline}.sd-x{margin-left:auto}
 ${winSelectCss()}
 ${winGridCss()}
 `;
@@ -5147,12 +5151,16 @@ WCHX.speed={
  resize:function(){}
 };
 function wtFit(ctx){fitTables(ctx.body)}
-/** Row-level disclosures: a click on a fold or "+N more" row stores its state and re-feeds the page's data. */
+/** Row-level disclosures: a click on a fold or "+N more" row stores its state and re-feeds the page's data; a click on a session row opens its detail panel (SESS_OPEN), a tab or close button changes it. */
 function wtWire(ctx){
  ctx.body.addEventListener("click",function(e){
-  var t=e.target&&e.target.closest?e.target.closest("[data-wrfold],[data-sessmore]"):null;
+  var t=e.target&&e.target.closest?e.target.closest("[data-wrfold],[data-sessmore],[data-sess],[data-sesstab],[data-sessclose]"):null;
   if(!t||!ctx.body.contains(t))return;
   e.preventDefault();
+  var redraw=function(){Win.update("data",data)};
+  if(t.hasAttribute("data-sess"))return sessDetailOpen(t.getAttribute("data-sess"),redraw);
+  if(t.hasAttribute("data-sesstab")){SESS_TAB=t.getAttribute("data-sesstab");return redraw()}
+  if(t.hasAttribute("data-sessclose")){SESS_OPEN=null;return redraw()}
   if(t.hasAttribute("data-wrfold")){var f=wrFolded(),k=t.getAttribute("data-wrfold");if(f[k])delete f[k];else f[k]=1;try{localStorage.setItem(WR_FOLD_KEY,JSON.stringify(f))}catch(x){}}
   else{try{localStorage.setItem(SESS_MORE_KEY,t.getAttribute("data-sessmore"))}catch(x){}}
   Win.update("data",data);
@@ -5493,7 +5501,7 @@ function runHead(timeLab){
 }
 function runRow(o){
  var pc=o.w>0?Math.max(2,Math.round(o.w/o.max*100)):0;
- return'<div class="wr-row" title="'+esc(o.full)+'"><i class="wr-dot wr-'+o.st+'" title="'+esc(o.dotTitle)+'"></i><span class="wr-lab">'+esc(o.lab)+'</span><span class="badge" title="'+esc((o.models||[]).join(", ")||"no model")+'">'+esc(o.model)+'</span><span class="wr-bar" title="tokens: '+fmt(o.w)+'"><i style="width:'+pc+'%"></i></span><span class="wr-n">'+(o.w?fmt(o.w):"–")+'</span><span class="wr-du">'+o.du+'</span><span class="wr-hit '+hitCls(o.hit)+'" title="cache hit">'+(o.hit==null?"–":pct(o.hit))+'</span><span class="wr-fl">'+(o.extra||"")+'</span></div>'
+ return'<div class="wr-row"'+(o.sid?' data-sess="'+esc(o.sid)+'"':'')+' title="'+esc(o.full)+'"><i class="wr-dot wr-'+o.st+'" title="'+esc(o.dotTitle)+'"></i><span class="wr-lab">'+esc(o.lab)+'</span><span class="badge" title="'+esc((o.models||[]).join(", ")||"no model")+'">'+esc(o.model)+'</span><span class="wr-bar" title="tokens: '+fmt(o.w)+'"><i style="width:'+pc+'%"></i></span><span class="wr-n">'+(o.w?fmt(o.w):"–")+'</span><span class="wr-du">'+o.du+'</span><span class="wr-hit '+hitCls(o.hit)+'" title="cache hit">'+(o.hit==null?"–":pct(o.hit))+'</span><span class="wr-fl">'+(o.extra||"")+'</span></div>'
 }
 /** Sessions by tokens: one runRow per session (dot: error red, worker verdict colour, active in the last 5 min blue, else dim), rows past the top N folded into one expandable row (state in localStorage like folds). */
 var SESS_MORE_KEY="pai.cockpit.sessmore";
@@ -5506,14 +5514,38 @@ function sessionsHtml(d){
   var lab=s.name||s.session.slice(0,8);
   var full=lab+" · "+s.session+(s.worker?" · worker "+s.worker+" · "+(s.verdict||"worker"):"")+"\n"+s.requests+" req · fresh in "+fmt(s.input+s.cacheWrite)+" · out "+fmt(s.output)+" · hit "+pct(s.hitRatio)+" · busts "+(s.busts||0)+" · errors "+(s.errors||0)+" · last "+ago(s.lastTs);
   var ex=(s.busts?'<span class="chip warn" title="cache busts">'+s.busts+'</span>':'')+(s.errors?'<span class="chip bad" title="errors">'+s.errors+'</span>':'');
-  return runRow({st:st,lab:lab,full:full,dotTitle:s.verdict||(recent?"active":"idle"),model:ms[0]||"–",models:ms,w:t,max:max,du:ago(s.lastTs),hit:s.requests?s.hitRatio:null,extra:ex});
+  return runRow({sid:s.session,st:st,lab:lab,full:full,dotTitle:s.verdict||(recent?"active":"idle"),model:ms[0]||"–",models:ms,w:t,max:max,du:ago(s.lastTs),hit:s.requests?s.hitRatio:null,extra:ex});
  }
  var shown=open?all:all.slice(0,top),rest=all.slice(top),h=shown.map(row).join("");
  if(rest.length){
   var rt=rest.reduce(function(a,s){return a+tot(s)},0);
   h+='<div class="wr-row wr-span"><a href="#" class="dim" data-sessmore="'+(open?"0":"1")+'">'+(open?"show fewer sessions":"+"+rest.length+" more sessions ("+fmt(rt)+" tokens)")+'</a></div>';
  }
- return'<div class="wr-cq"><div class="wr-tbl">'+runHead("age")+'<div class="wr-group">'+h+'</div></div></div>';
+ return'<div class="wr-cq"><div class="wr-tbl">'+runHead("age")+'<div class="wr-group">'+h+'</div></div></div>'+(typeof sessDetailHtml==="function"?sessDetailHtml():"");
+}
+/** Session drill-down state: the opened id, its tab and the fetched detail (survives the poll redraw; the panel is part of the sessions html). */
+var SESS_OPEN=null,SESS_TAB="timeline",SESS_DET=null;
+/** One tab of the opened session's detail, drawn with table(). */
+function sessDetailBody(d,tab){
+ if(tab==="files")return table(["file","edits .n","~lines .n"],d.filesChanged.map(function(f){return[esc(f.path),f.edits,f.approxLinesChanged]}));
+ if(tab==="skills")return table(["skill","time"],d.skills.map(function(k){return[esc(k.name),esc(ago(k.ts))]}));
+ if(tab==="mcp")return table(["server","calls .n","failures .n"],d.mcp.map(function(m){return[esc(m.server),m.calls,m.failures]}));
+ if(tab==="denials")return table(["time","tool","reason"],d.denials.map(function(x){return[esc(ago(x.ts)),esc(x.tool),esc(x.reason)]}));
+ return table(["#  .n","time","prompt","tools","edits","cmds .n"],d.turns.map(function(t){return[t.idx+1,esc(ago(t.ts)),esc(t.prompt),esc(t.tools.map(function(x){return x.name+"×"+x.count}).join(", ")),esc(t.edits.join(", ")),t.commands]}));
+}
+/** The detail panel under the sessions table: tabs Timeline / Files / Skills / MCP / Denials and a close button; empty when no session is open. */
+function sessDetailHtml(){
+ if(!SESS_OPEN)return"";
+ var d=SESS_DET&&SESS_DET.id===SESS_OPEN?SESS_DET:null,tabs=[["timeline","Timeline"],["files","Files"],["skills","Skills"],["mcp","MCP"],["denials","Denials"]];
+ var head='<div class="sd-h"><b title="'+esc(SESS_OPEN)+'">'+esc(SESS_OPEN.slice(0,8))+'</b>'+tabs.map(function(t){return'<a href="#" data-sesstab="'+t[0]+'"'+(t[0]===SESS_TAB?' class="on"':'')+'>'+t[1]+(d&&t[0]!=="timeline"?" ("+(t[0]==="files"?d.filesChanged:t[0]==="skills"?d.skills:t[0]==="mcp"?d.mcp:d.denials).length+")":"")+'</a>'}).join("")+'<a href="#" class="dim sd-x" data-sessclose="1" title="close">close ✕</a></div>';
+ var meta=d?'<div class="dim">'+esc(d.cwd)+(d.models.length?" · "+esc(d.models.join(", ")):"")+(d.turnCount>d.turns.length?" · last "+d.turns.length+" of "+d.turnCount+" turns":"")+'</div>':"";
+ return'<div class="sd" data-sd="'+esc(SESS_OPEN)+'">'+head+meta+(d?sessDetailBody(d,SESS_TAB):'<span class="dim">'+(SESS_DET&&SESS_DET.error?esc(SESS_DET.error):"loading…")+'</span>')+'</div>';
+}
+/** Opens (or closes, on a second click) a session's detail and fetches it; the panel redraws with the sessions card. */
+function sessDetailOpen(id,redraw){
+ if(SESS_OPEN===id){SESS_OPEN=null;redraw();return}
+ SESS_OPEN=id;SESS_DET=null;redraw();
+ fetch("/api/session/"+encodeURIComponent(id)+"/detail",{cache:"no-store"}).then(function(r){return r.json().then(function(j){if(!r.ok)throw new Error(j.error||"HTTP "+r.status);return j})}).then(function(j){if(SESS_OPEN===id){SESS_DET=j;redraw()}},function(e){if(SESS_OPEN===id){SESS_DET={id:id,error:String(e.message||e)};redraw()}});
 }
 /** Worker runs grouped under the spawning session: newest run first, groups by their newest run; weighted tokens per run on one scale shared by all rows. */
 function workerGroups(ws,W){
@@ -6491,6 +6523,264 @@ function selectorChoices(workers, endpoints) {
 	];
 }
 
+//#endregion
+//#region src/hooks/ts/lib/build-gate.ts
+/** Tiny reader for the two keys of builds.yaml: flow `[a, b]` or block `- a` lists. */
+function parseBuildsYaml(text) {
+	const res = {
+		doors: [],
+		patterns: []
+	};
+	let key = null;
+	const unq = (s) => s.trim().replace(/^(['"])(.*)\1$/, "$2");
+	for (const raw of text.split("\n")) {
+		const line = raw.replace(/(^|\s)#.*$/, "");
+		if (!line.trim()) continue;
+		const m = /^(doors|patterns)\s*:\s*(.*)$/.exec(line);
+		if (m) {
+			key = m[1];
+			const rest = m[2].trim();
+			if (rest.startsWith("[")) {
+				res[key].push(...rest.replace(/^\[|\]$/g, "").split(",").map(unq).filter(Boolean));
+				key = null;
+			}
+			continue;
+		}
+		const li = /^\s*-\s+(.*)$/.exec(line);
+		if (li && key) res[key].push(unq(li[1]));
+		else if (!/^\s/.test(line)) key = null;
+	}
+	return res;
+}
+/** The nearest `.pai/builds.yaml` at or above `cwd`. */
+function loadBuildsConfig(cwd) {
+	let dir = resolve(cwd);
+	for (;;) {
+		const f = join(dir, ".pai", "builds.yaml");
+		if (existsSync(f)) try {
+			return {
+				root: dir,
+				...parseBuildsYaml(readFileSync(f, "utf8"))
+			};
+		} catch {
+			return null;
+		}
+		const up = dirname(dir);
+		if (up === dir) return null;
+		dir = up;
+	}
+}
+
+//#endregion
+//#region src/hooks/ts/lib/loop-guard.ts
+const LOOP_MAX_REPEATS = 4;
+/** Consecutive same-template read-only Bash calls without a worktree change after which the next one is denied (env PAI_LOOP_READ_STREAK overrides). */
+const LOOP_READ_STREAK = Number(process.env.PAI_LOOP_READ_STREAK) > 0 ? Number(process.env.PAI_LOOP_READ_STREAK) : 15;
+const SELF = "If your part is done, commit and write your R report. If you are stuck, report the blocker in R x= (or use pai worker help if available).";
+const LOOP_DENY_REASON = `loop guard: you ran this command ${LOOP_MAX_REPEATS} times with the same result and nothing changed. Stop repeating it. ${SELF}`;
+/** Total polling time per command key after which a "still running" helper is treated as an ordinary repeat again. */
+const WAIT_CAP_MS = 45 * 6e4;
+/** Untracked files up to this size are hashed by content; larger ones by size + mtime. */
+const FP_FULL_READ_BYTES = 256 * 1024;
+/** Content bytes read per fingerprint across all untracked files; past it files are hashed by size + mtime. */
+const FP_TOTAL_BYTES = 4 * 1024 * 1024;
+const SECRET_LINE = /pass(?:word|wd)|secret|token|api[_-]?key|credential|authorization|bearer|private key|^\s*(?:export\s+)?[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=|\b(?:sk|ghp|gho|xox[bap])[-_][A-Za-z0-9_-]{16,}|\b[A-Za-z0-9+]{40,}={0,2}(?![\w/])|\b[a-z][a-z0-9+.-]*:\/\/[^\s\/:@]+:[^\s\/@]+@|\b(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}\b|\bgh[pousr]_[A-Za-z0-9]{20,}/i;
+const MASKED_LINE = "[line masked: looks like a secret]";
+/** Result text with lines that look like secrets replaced by a marker. */
+function maskSecrets(text) {
+	return text.split("\n").map((l) => SECRET_LINE.test(l) ? MASKED_LINE : l).join("\n");
+}
+
+//#endregion
+//#region src/router/session-detail.ts
+/**
+* session-detail.ts — one session's drill-down for the cockpit: turns, files
+* changed, skills, MCP calls and hook denials, read from the Claude Code
+* transcript (<projects dir>/<encoded cwd>/<session id>.jsonl) by streaming it
+* line by line. Prompt text is secret-masked.
+*/
+/** Session ids the endpoint accepts: no path separators, no dots. */
+const SESSION_ID_RE = /^[A-Za-z0-9-]{8,64}$/;
+const PROMPT_CHARS = 300;
+/** The transcript file of a session id, or null. */
+function findTranscript(id, projectsDir = claudeProjectsDir()) {
+	if (!SESSION_ID_RE.test(id) || !existsSync(projectsDir)) return null;
+	let dirs = [];
+	try {
+		dirs = readdirSync(projectsDir);
+	} catch {
+		return null;
+	}
+	for (const d of dirs) {
+		const f = join(projectsDir, d, `${id}.jsonl`);
+		if (existsSync(f)) return f;
+	}
+	return null;
+}
+const lineCount = (s) => typeof s === "string" && s ? s.split("\n").length : 0;
+/** Text of a tool_result's content: a string or the text blocks joined. */
+function resultText(c) {
+	if (typeof c === "string") return c;
+	if (Array.isArray(c)) return c.map((b) => b && typeof b === "object" && typeof b.text === "string" ? b.text : "").join("\n");
+	return "";
+}
+/** Lines written by one Edit / Write / MultiEdit input. */
+function changedLines(name, input) {
+	if (name === "Write") return lineCount(input.content);
+	if (name === "Edit") return lineCount(input.new_string);
+	if (name === "MultiEdit" && Array.isArray(input.edits)) return input.edits.reduce((a, e) => a + lineCount(e?.new_string), 0);
+	return 0;
+}
+/** Skill name a user line announces ("/name" command tag or "Launching skill: name"), or null. */
+function loadedSkill(text) {
+	const cmd = text.match(/<command-name>\/?([^<\s]+)<\/command-name>/);
+	if (cmd) return cmd[1];
+	const l = text.match(/^Launching skill: (\S+)/);
+	return l ? l[1] : null;
+}
+/** Streams the session's transcript into a SessionDetail; null when the id has no transcript. */
+async function sessionDetail(id, opts = {}) {
+	const file = findTranscript(id, opts.projectsDir);
+	if (!file) return null;
+	const maxTurns = Math.max(1, opts.maxTurns ?? cockpitLayout().sessionDetailTurns);
+	const out = {
+		id,
+		cwd: "",
+		models: [],
+		turns: [],
+		turnCount: 0,
+		filesChanged: [],
+		skills: [],
+		mcp: [],
+		denials: []
+	};
+	const models = /* @__PURE__ */ new Set();
+	const files = /* @__PURE__ */ new Map();
+	const mcp = /* @__PURE__ */ new Map();
+	const toolOf = /* @__PURE__ */ new Map();
+	const mcpOf = /* @__PURE__ */ new Map();
+	let cur = null;
+	const close = () => {
+		if (!cur) return;
+		cur.turn.tools = [...cur.tools].map(([name, count]) => ({
+			name,
+			count
+		}));
+		cur.turn.edits = [...cur.edits];
+		out.turns.push(cur.turn);
+		if (out.turns.length > maxTurns) out.turns.shift();
+		cur = null;
+	};
+	const rl = createInterface({
+		input: createReadStream(file, { encoding: "utf8" }),
+		crlfDelay: Infinity
+	});
+	for await (const raw of rl) {
+		if (!raw) continue;
+		let obj;
+		try {
+			obj = JSON.parse(raw);
+		} catch {
+			continue;
+		}
+		const ts = obj.timestamp ?? "";
+		if (!out.cwd && typeof obj.cwd === "string") out.cwd = obj.cwd;
+		const content = obj.message?.content;
+		if (obj.type === "user") {
+			if (isRealUserPrompt(obj)) {
+				close();
+				const text = extractUserPromptText(obj);
+				const skill = loadedSkill(text);
+				if (skill) out.skills.push({
+					name: skill,
+					ts
+				});
+				cur = {
+					turn: {
+						idx: out.turnCount++,
+						ts,
+						prompt: maskSecrets(text).slice(0, PROMPT_CHARS),
+						tools: [],
+						edits: [],
+						commands: 0
+					},
+					tools: /* @__PURE__ */ new Map(),
+					edits: /* @__PURE__ */ new Set()
+				};
+				continue;
+			}
+			const blocks = Array.isArray(content) ? content : [];
+			for (const b of blocks) {
+				if (b.type === "text" && typeof b.text === "string" && obj.isMeta) {
+					const skill = loadedSkill(b.text);
+					if (skill) out.skills.push({
+						name: skill,
+						ts
+					});
+				}
+				if (b.type !== "tool_result") continue;
+				const text = resultText(b.content);
+				const server = b.tool_use_id ? mcpOf.get(b.tool_use_id) : void 0;
+				if (server && b.is_error) mcp.get(server).failures++;
+				const d = parseDenialText(text, b.tool_use_id && toolOf.get(b.tool_use_id) || "?");
+				if (d) out.denials.push({
+					ts,
+					tool: d.tool,
+					reason: maskSecrets(d.reason).slice(0, 200)
+				});
+			}
+			continue;
+		}
+		if (obj.type !== "assistant") continue;
+		if (obj.message?.model) models.add(obj.message.model);
+		if (!Array.isArray(content)) continue;
+		for (const b of content) {
+			if (b.type !== "tool_use" || !b.name) continue;
+			const input = b.input ?? {};
+			if (b.id) toolOf.set(b.id, b.name);
+			if (cur) cur.tools.set(b.name, (cur.tools.get(b.name) ?? 0) + 1);
+			if (b.name === "Bash" && cur) cur.turn.commands++;
+			if (b.name === "Skill" && typeof input.skill === "string") out.skills.push({
+				name: input.skill,
+				ts
+			});
+			if (b.name.startsWith("mcp__")) {
+				const server = b.name.split("__")[1];
+				if (server) {
+					const m = mcp.get(server) ?? {
+						calls: 0,
+						failures: 0
+					};
+					m.calls++;
+					mcp.set(server, m);
+					if (b.id) mcpOf.set(b.id, server);
+				}
+			}
+			if ((b.name === "Edit" || b.name === "Write" || b.name === "MultiEdit") && typeof input.file_path === "string") {
+				const f = files.get(input.file_path) ?? {
+					edits: 0,
+					approxLinesChanged: 0
+				};
+				f.edits++;
+				f.approxLinesChanged += changedLines(b.name, input);
+				files.set(input.file_path, f);
+				cur?.edits.add(input.file_path);
+			}
+		}
+	}
+	close();
+	out.models = [...models];
+	out.filesChanged = [...files].map(([path, f]) => ({
+		path,
+		...f
+	})).sort((a, b) => b.approxLinesChanged - a.approxLinesChanged);
+	out.mcp = [...mcp].map(([server, m]) => ({
+		server,
+		...m
+	})).sort((a, b) => b.calls - a.calls);
+	return out;
+}
+
 //#endregion
 //#region src/router/cockpit-layout-default.ts
 /**
@@ -7855,7 +8145,8 @@ function cockpitBuildId() {
 */
 function handleCockpit(req, res, limits, readRows = cachedRows(), sessionMap = loadSessionMap, system, workerWindows = loadWorkerWindows, readPool = cachedPoolCarry(), readPoolPanel = sharedPoolPanel, queueLogDir = workersLogDir) {
 	const url = new URL(req.url ?? "/", "http://localhost");
-	if (url.pathname !== "/cockpit" && !url.pathname.startsWith("/cockpit/")) return false;
+	const detail = url.pathname.match(/^\/api\/session\/([^/]*)\/detail$/);
+	if (!detail && url.pathname !== "/cockpit" && !url.pathname.startsWith("/cockpit/")) return false;
 	const send = (status, type, body) => {
 		res.writeHead(status, {
 			"content-type": type,
@@ -7864,6 +8155,12 @@ function handleCockpit(req, res, limits, readRows = cachedRows(), sessionMap = l
 		});
 		res.end(body);
 	};
+	if (detail) {
+		if (req.method !== "GET") return send(405, "text/plain", "GET only"), true;
+		if (!SESSION_ID_RE.test(detail[1])) return send(400, "application/json", "{\"error\":\"invalid session id\"}"), true;
+		sessionDetail(detail[1]).then((d) => d ? send(200, "application/json", JSON.stringify(d)) : send(404, "application/json", "{\"error\":\"no such session\"}"), (e) => send(500, "application/json", JSON.stringify({ error: e.message })));
+		return true;
+	}
 	if (req.method === "POST" && (url.pathname === "/cockpit/queue/next" || url.pathname === "/cockpit/queue/front" || url.pathname === "/cockpit/queue/up" || url.pathname === "/cockpit/queue/move")) {
 		if (!sameOriginAction(req)) return send(403, "application/json", JSON.stringify({
 			ok: false,
@@ -10271,7 +10568,7 @@ async function stopInstance(cfg, target, opts = {}, deps = {}) {
 */
 async function cliInflight(cfg, deps = {}) {
 	const [{ engineInflight }, { readSchedFile }, { instanceEngineKey }] = await Promise.all([
-		import("./cockpit-actions-DR9X514g.mjs"),
+		import("./cockpit-actions-BfRMr2sm.mjs"),
 		import("./scheduler-dmHXoRvm.mjs"),
 		import("./local-instances-ZeRkkuS5.mjs")
 	]);
@@ -10867,5 +11164,5 @@ const WORKER_CONFIG_COMMANDS = [
 ];
 
 //#endregion
-export { exportDefaultLayout as $, workerMcpCommand as A, mergeSettings as B, workerBenchCommand as C, workerFallbackCommand as D, workerControlsCommand as E, workerProvidersCommand as F, cachedRows as G, canBind as H, workerProxyCommand as I, handleCockpit as J, cachedSessionMap as K, workerRolesCommand as L, workerOnCommand as M, workerPolicyCommand as N, workerInstallCommand as O, workerPoolCommand as P, warmCockpit as Q, workerRouteCommand as R, stopInstance as S, workerConfigCommand as T, sizeOnDiskGb as U, allocatePort as V, SystemMonitor as W, setEndpointHealth as X, setActionHooks as Y, setRuntimeSampler as Z, portOpen as _, collectEnv as a, defaultRegistryCtx as at, startTier as b, currentInstances as c, providersCommand as ct, isUp as d, createEndpointHealth as et, killInstance as f, portListeners as g, parseCostTier as h, cliInflight as i, withWorkerAttribution as it, workerOffCommand as j, workerLocalCommand as k, fail as l, listServers as m, WORKER_CONFIG_COMMANDS as n, loadWorkerWindows as nt, collectTags as o, hashText as ot, launchDetached as p, cachedWorkerWindows as q, buildClassTarget as r, sessionDisplayName as rt, controlsArgv as s, saveRegistry as st, PROVIDER_EDIT_COMMANDS as t, loadSessionMap as tt, healthOk as u, serverLine as v, workerClassesCommand as w, stopAll as x, startInstance as y, installWorkers as z };
-//# sourceMappingURL=worker-config-CJhEMk19.mjs.map
+export { exportDefaultLayout as $, workerMcpCommand as A, mergeSettings as B, workerBenchCommand as C, workerFallbackCommand as D, workerControlsCommand as E, workerProvidersCommand as F, cachedRows as G, canBind as H, workerProxyCommand as I, handleCockpit as J, cachedSessionMap as K, workerRolesCommand as L, workerOnCommand as M, workerPolicyCommand as N, workerInstallCommand as O, workerPoolCommand as P, warmCockpit as Q, workerRouteCommand as R, stopInstance as S, workerConfigCommand as T, sizeOnDiskGb as U, allocatePort as V, SystemMonitor as W, setEndpointHealth as X, setActionHooks as Y, setRuntimeSampler as Z, portOpen as _, collectEnv as a, withWorkerAttribution as at, startTier as b, currentInstances as c, saveRegistry as ct, isUp as d, loadBuildsConfig as et, killInstance as f, portListeners as g, parseCostTier as h, cliInflight as i, sessionDisplayName as it, workerOffCommand as j, workerLocalCommand as k, fail as l, providersCommand as lt, listServers as m, WORKER_CONFIG_COMMANDS as n, loadSessionMap as nt, collectTags as o, defaultRegistryCtx as ot, launchDetached as p, cachedWorkerWindows as q, buildClassTarget as r, loadWorkerWindows as rt, controlsArgv as s, hashText as st, PROVIDER_EDIT_COMMANDS as t, createEndpointHealth as tt, healthOk as u, serverLine as v, workerClassesCommand as w, stopAll as x, startInstance as y, installWorkers as z };
+//# sourceMappingURL=worker-config-eY5Qy4vl.mjs.map

package/dist/{zettelkasten-BzMm8REH.mjs → zettelkasten-_h_tUm2T.mjs}

@@ -1213,4 +1213,4 @@ async function zettelCommunities(backend, opts) {
 
 //#endregion
 export { zettelThemes as a, zettelExplore as c, zettelHealth as i, zettelGodNotes as n, zettelConverse as o, zettelSuggest as r, zettelSurprise as s, zettelCommunities as t };
-//# sourceMappingURL=zettelkasten-BzMm8REH.mjs.map
+//# sourceMappingURL=zettelkasten-_h_tUm2T.mjs.map

package/dist/{zettelkasten-B_rRRRvD.mjs → zettelkasten-tpCRBYvH.mjs}

@@ -1,7 +1,7 @@
 import "./config-Bu1_vbY8.mjs";
 import "./embedding-gate-6rZrWRXa.mjs";
 import "./embeddings-BVq3esBF.mjs";
-import { r as saveQueryResult } from "./query-feedback-BRfPtqki.mjs";
-import { a as zettelThemes, c as zettelExplore, i as zettelHealth, n as zettelGodNotes, o as zettelConverse, r as zettelSuggest, s as zettelSurprise, t as zettelCommunities } from "./zettelkasten-BzMm8REH.mjs";
+import { r as saveQueryResult } from "./query-feedback-DN52N9C5.mjs";
+import { a as zettelThemes, c as zettelExplore, i as zettelHealth, n as zettelGodNotes, o as zettelConverse, r as zettelSuggest, s as zettelSurprise, t as zettelCommunities } from "./zettelkasten-_h_tUm2T.mjs";
 
 export { zettelConverse, zettelExplore, zettelHealth, zettelSuggest, zettelSurprise, zettelThemes };

package/docs/cockpit.md

@@ -169,6 +169,7 @@ An empty list shows every section. Unknown ids are ignored, and if all are unkno
 | `dailyDays` | 14 | Days in Tokens per day per model |
 | `sessionsRows` | 20 | Rows in Sessions by tokens |
 | `sessionsTopRows` | 10 | Sessions shown before the rest collapse into one "+N more sessions" row |
+| `sessionDetailTurns` | 200 | Turns kept in the per-session drill-down (click a session row) |
 | `sessionNameMaxPct` | 35 | Session-name column cap, percent of the table width |
 | `workerRows` | 15 | Rows in Worker runs |
 | `lowRequestMin` | 5 | Models under this many requests become chips, not rings |

package/gemini-extension.json

@@ -2,7 +2,7 @@
   "name": "@tekmidian/pai",
   "displayName": "PAI Knowledge OS",
   "description": "Personal AI Infrastructure — persistent memory and session continuity for AI coding assistants",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "author": "Matthias Nott",
   "license": "MIT",
   "homepage": "https://github.com/mnott/PAI",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tekmidian/pai",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "PAI Knowledge OS — Personal AI Infrastructure with federated memory and project management",
   "type": "module",
   "main": "dist/index.mjs",

package/pai-plugin.json

@@ -3,7 +3,7 @@
   "name": "@tekmidian/pai",
   "displayName": "PAI Knowledge OS",
   "description": "Personal AI Infrastructure — persistent memory, session continuity, and knowledge graph",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "author": "Matthias Nott",
   "license": "MIT",
   "homepage": "https://github.com/mnott/PAI",

package/plugins/context-preservation/plugin.json

@@ -2,6 +2,6 @@
   "name": "pai-context-preservation",
   "displayName": "PAI Context Preservation",
   "description": "Context compression and relay across compaction cycles",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "hooks": "./hooks/hooks.json"
 }

package/plugins/core/plugin.json

@@ -2,6 +2,6 @@
   "name": "pai-core",
   "displayName": "PAI Core",
   "description": "Core memory engine, session management, and project registry",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "hooks": "./hooks/hooks.json"
 }

package/plugins/creative/plugin.json

@@ -2,5 +2,5 @@
   "name": "pai-creative",
   "displayName": "PAI Creative Studio",
   "description": "Art direction, story explanation, voice/prosody configuration",
-  "version": "1.0.3"
+  "version": "1.0.4"
 }

package/plugins/observability/plugin.json

@@ -2,6 +2,6 @@
   "name": "pai-observability",
   "displayName": "PAI Observability Suite",
   "description": "Automatic observation capture, classification, session summaries, and search history",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "hooks": "./hooks/hooks.json"
 }

package/plugins/productivity/plugin.json

@@ -2,7 +2,7 @@
   "name": "pai-productivity",
   "displayName": "PAI Productivity",
   "description": "Planning, journaling, reviewing, research, sharing, and cross-session task routing",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "hooks": "./hooks/hooks.json",
   "skills": ["./skills/"]
 }

package/plugins/semantic-search/plugin.json

@@ -2,5 +2,5 @@
   "name": "pai-semantic-search",
   "displayName": "PAI Semantic Search",
   "description": "Vector search with pgvector, cross-encoder reranking, hybrid mode, recency boost",
-  "version": "1.0.3"
+  "version": "1.0.4"
 }

package/plugins/ui/plugin.json

@@ -2,6 +2,6 @@
   "name": "pai-ui",
   "displayName": "PAI UI Customization",
   "description": "Terminal tab titles, statusline, tab coloring, and visual customization",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "hooks": "./hooks/hooks.json"
 }

package/plugins/zettelkasten/plugin.json

@@ -2,5 +2,5 @@
   "name": "pai-zettelkasten",
   "displayName": "PAI Zettelkasten Intelligence",
   "description": "Luhmann-inspired vault intelligence with graph operations and Obsidian integration",
-  "version": "1.0.3"
+  "version": "1.0.4"
 }

package/src/hooks/ts/capture-all-events.ts

@@ -11,7 +11,7 @@ import { join } from 'path';
 import { historyDir, agentSessionsPath } from './lib/pai-paths.js';
 import { enrichEventWithAgentMetadata, isAgentSpawningCall } from './lib/metadata-extraction.js';
 import { isProbeSession } from './lib/project-utils.js';
-import { appendRawCapture, redactDeep } from './lib/raw-capture.js';
+import { appendRawCapture, captureEventId, redactDeep } from './lib/raw-capture.js';
 import { writeJsonAtomic } from '../../config/json-store.js';
 
 interface HookEvent {
@@ -21,6 +21,9 @@ interface HookEvent {
   payload: Record<string, any>;
   timestamp: number;
   timestamp_local: string;
+  source: string;
+  fidelity: string;
+  eventId: string;
 }
 
 // Get local timestamp using system timezone
@@ -154,13 +157,22 @@ async function main() {
     }
 
     // Create base event object
+    const timestamp = Date.now();
     let event: HookEvent = {
       source_app: agentName,
       session_id: hookData.session_id || 'main',
       hook_event_type: eventType,
       payload: redactDeep(hookData),
-      timestamp: Date.now(),
-      timestamp_local: getLocalTimestamp()
+      timestamp,
+      timestamp_local: getLocalTimestamp(),
+      source: 'hook',
+      fidelity: 'observed',
+      eventId: captureEventId({
+        sessionId: hookData.session_id,
+        toolUseId: hookData.tool_use_id,
+        event: eventType,
+        ts: String(timestamp)
+      })
     };
 
     // Enrich with agent instance metadata if this is a Task tool call

package/src/hooks/ts/lib/raw-capture.ts

@@ -5,9 +5,16 @@
 
 import { appendFileSync, chmodSync, existsSync, mkdirSync, renameSync, statSync } from 'fs';
 import { maskSecrets } from './loop-guard.js';
+import { sha256 } from '../../../utils/hash.js';
 
 export const RAW_CAPTURE_MAX_BYTES = 10 * 1024 * 1024;
 
+/** Deterministic 16-hex id for a captured event: sha256 of the joined parts. */
+export function captureEventId(parts: { sessionId?: string; toolUseId?: string; event?: string; ts?: string }): string {
+  const joined = `${parts.sessionId ?? ""}|${parts.toolUseId ?? ""}|${parts.event ?? ""}|${parts.ts ?? ""}`;
+  return sha256(joined).slice(0, 16);
+}
+
 /** Deep copy with every string value passed through the loop guard's secret-line masking. */
 export function redactDeep<T>(value: T): T {
   if (typeof value === 'string') return maskSecrets(value) as unknown as T;