@tekmidian/pai 1.0.5 → 1.0.7

package/dist/hooks/worker-proxy.mjs

@@ -8179,6 +8179,7 @@ function defaultWorkersConfig() {
     cacheKeepaliveSecs: num(w.cacheKeepaliveSecs, 0),
     defaultMaxMinutes: num(w.defaultMaxMinutes, 60),
     waitAlarmMinutes: num(w.waitAlarmMinutes, 120),
+    scanBudgetMs: num(w.scanBudgetMs, 5e3),
     stagger: {
       enabled: bool(stagger.enabled, true),
       localDefaultSec: num(stagger.localDefaultSec, 20),
@@ -8773,6 +8774,13 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     }
     waitAlarmMinutes = w.waitAlarmMinutes;
   }
+  let scanBudgetMs = d.scanBudgetMs ?? 5e3;
+  if (w.scanBudgetMs !== void 0) {
+    if (typeof w.scanBudgetMs !== "number" || !Number.isInteger(w.scanBudgetMs) || w.scanBudgetMs < 1) {
+      bad(".scanBudgetMs", "must be a positive integer (milliseconds)");
+    }
+    scanBudgetMs = w.scanBudgetMs;
+  }
   const stagger = { ...d.stagger };
   if (w.stagger !== void 0) {
     if (typeof w.stagger !== "object" || w.stagger === null || Array.isArray(w.stagger)) {
@@ -8909,6 +8917,7 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     cacheKeepaliveSecs,
     defaultMaxMinutes,
     waitAlarmMinutes,
+    scanBudgetMs,
     stagger,
     capacity,
     localIdle,

package/dist/hooks/worker-status-line.mjs

@@ -7445,7 +7445,7 @@ var require_public_api = __commonJS({
       }
       return doc;
     }
-    function parse4(src, reviver, options) {
+    function parse5(src, reviver, options) {
       let _reviver = void 0;
       if (typeof reviver === "function") {
         _reviver = reviver;
@@ -7486,7 +7486,7 @@ var require_public_api = __commonJS({
         return value.toString(options);
       return new Document5.Document(value, _replacer, options).toString(options);
     }
-    exports.parse = parse4;
+    exports.parse = parse5;
     exports.parseAllDocuments = parseAllDocuments;
     exports.parseDocument = parseDocument5;
     exports.stringify = stringify2;
@@ -8416,6 +8416,7 @@ function defaultWorkersConfig() {
     cacheKeepaliveSecs: num2(w.cacheKeepaliveSecs, 0),
     defaultMaxMinutes: num2(w.defaultMaxMinutes, 60),
     waitAlarmMinutes: num2(w.waitAlarmMinutes, 120),
+    scanBudgetMs: num2(w.scanBudgetMs, 5e3),
     stagger: {
       enabled: bool(stagger.enabled, true),
       localDefaultSec: num2(stagger.localDefaultSec, 20),
@@ -9008,6 +9009,13 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     }
     waitAlarmMinutes = w.waitAlarmMinutes;
   }
+  let scanBudgetMs = d.scanBudgetMs ?? 5e3;
+  if (w.scanBudgetMs !== void 0) {
+    if (typeof w.scanBudgetMs !== "number" || !Number.isInteger(w.scanBudgetMs) || w.scanBudgetMs < 1) {
+      bad(".scanBudgetMs", "must be a positive integer (milliseconds)");
+    }
+    scanBudgetMs = w.scanBudgetMs;
+  }
   const stagger = { ...d.stagger };
   if (w.stagger !== void 0) {
     if (typeof w.stagger !== "object" || w.stagger === null || Array.isArray(w.stagger)) {
@@ -9144,6 +9152,7 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     cacheKeepaliveSecs,
     defaultMaxMinutes,
     waitAlarmMinutes,
+    scanBudgetMs,
     stagger,
     capacity,
     localIdle,
@@ -9560,7 +9569,7 @@ function ownsPid(status) {
       env: { ...process.env, LC_ALL: "C" }
     }).trim();
     const psStart = Date.parse(out);
-    const started = spawnTimeOf(status) ?? Date.parse(status.started.replace(" ", "T"));
+    const started = status.procStart ?? spawnTimeOf(status) ?? Date.parse(status.started.replace(" ", "T"));
     if (Number.isNaN(psStart) || Number.isNaN(started)) return alive(status.pid);
     return Math.abs(psStart - started) <= 12e4;
   } catch {
@@ -9813,6 +9822,7 @@ var init_worktree = __esm({
     init_paths();
     init_pending();
     init_pool();
+    init_config2();
   }
 });
 
@@ -9958,27 +9968,6 @@ var init_pane_title = __esm({
   }
 });
 
-// src/workers/chatui.ts
-var init_chatui = __esm({
-  "src/workers/chatui.ts"() {
-    "use strict";
-  }
-});
-
-// src/workers/deadline.ts
-var init_deadline = __esm({
-  "src/workers/deadline.ts"() {
-    "use strict";
-  }
-});
-
-// src/workers/active-time.ts
-var init_active_time = __esm({
-  "src/workers/active-time.ts"() {
-    "use strict";
-  }
-});
-
 // src/workers/stagger.ts
 var init_stagger = __esm({
   "src/workers/stagger.ts"() {
@@ -9987,6 +9976,14 @@ var init_stagger = __esm({
   }
 });
 
+// src/workers/waiting.ts
+var init_waiting = __esm({
+  "src/workers/waiting.ts"() {
+    "use strict";
+    init_args();
+  }
+});
+
 // src/workers/capacity.ts
 function resolveCap(maxConcurrent, local, localDefaultCap = DEFAULT_CAPACITY.localDefaultCap) {
   return maxConcurrent ?? (local ? localDefaultCap : void 0);
@@ -9997,23 +9994,37 @@ var init_capacity = __esm({
     "use strict";
     init_stagger();
     init_config3();
+    init_waiting();
     init_status();
     DEFAULT_CAPACITY = { enabled: true, localDefaultCap: 1, uncappedQueueCap: 3, maxTotalWaitMs: 2 * 36e5, heartbeatMs: 6e4, agingMs: 15 * 6e4 };
   }
 });
 
-// src/workers/denials.ts
-var init_denials = __esm({
-  "src/workers/denials.ts"() {
+// src/workers/chatui.ts
+var init_chatui = __esm({
+  "src/workers/chatui.ts"() {
     "use strict";
   }
 });
 
-// src/workers/waiting.ts
-var init_waiting = __esm({
-  "src/workers/waiting.ts"() {
+// src/workers/deadline.ts
+var init_deadline = __esm({
+  "src/workers/deadline.ts"() {
+    "use strict";
+  }
+});
+
+// src/workers/active-time.ts
+var init_active_time = __esm({
+  "src/workers/active-time.ts"() {
+    "use strict";
+  }
+});
+
+// src/workers/denials.ts
+var init_denials = __esm({
+  "src/workers/denials.ts"() {
     "use strict";
-    init_args();
   }
 });
 
@@ -10195,6 +10206,180 @@ var init_endreason = __esm({
   }
 });
 
+// src/workers/ps-table.ts
+var PS_MAX_BUFFER;
+var init_ps_table = __esm({
+  "src/workers/ps-table.ts"() {
+    "use strict";
+    PS_MAX_BUFFER = 64 * 1024 * 1024;
+  }
+});
+
+// src/workers/hang-probe.ts
+var init_hang_probe = __esm({
+  "src/workers/hang-probe.ts"() {
+    "use strict";
+    init_ps_table();
+  }
+});
+
+// src/utils/redact.ts
+var REDACTED, REDACTED_RE, KEY_WORDS, PROSE, VAL, REDACT_RULES, LINE_RULES, LONG_RUN, LONG_RUN_MAX_LINE, KEY_LINE;
+var init_redact = __esm({
+  "src/utils/redact.ts"() {
+    "use strict";
+    REDACTED = "[REDACTED]";
+    REDACTED_RE = String.raw`\[REDACTED\]`;
+    KEY_WORDS = "password|passwd|secret|token|api[_-]?key|credential|auth(?:orization)?|bearer";
+    PROSE = "is|are|was|were|be|to|of|in|on|for|and|or|the|a|an|that|this|it|not|out|here|there|so|as|at|by|with|if|when|which";
+    VAL = String.raw`(?:"[^"]*"|'[^']*'|[^\s'"]+)`;
+    REDACT_RULES = [
+      {
+        // `Authorization: Bearer xxx` / `Authorization: Basic xxx` — keep the scheme
+        id: "authorization",
+        re: /(Authorization\s*:\s*)(Bearer|Basic)\s+([^\s'"]+)/gi,
+        replace: (_m, head, scheme) => `${head}${scheme} ${REDACTED}`
+      },
+      {
+        // `Cookie: a=b; c=d` — keep the cookie names, redact every value
+        id: "cookie",
+        re: /((?:Set-)?Cookie\s*:\s*)([^\n]+)/gi,
+        replace: (_m, head, rest) => `${head}${rest.replace(/([^=;\s'"]+=)[^;'"]*/g, `$1${REDACTED}`)}`
+      },
+      {
+        // `key=value`, `key: value`, `"key": "value"` — key carries a secret-ish word;
+        // the word must be a whole key segment, so `monkeys=` stays untouched.
+        // The separator may start with the key's closing quote (JSON); it is kept.
+        id: "key-value",
+        re: new RegExp(String.raw`(?<![A-Za-z0-9])((?:[A-Za-z0-9]+[_-])?(?:${KEY_WORDS})(?![A-Za-z0-9])[A-Za-z0-9_-]*)(["']?\s*[:=]\s*)(?!(?:Bearer|Basic) ${REDACTED_RE})(?!(?:${PROSE})\b)(${VAL})`, "gi"),
+        replace: (m, key, sep, val) => {
+          if (/[_-](?:count|length|len|size|limit|max|min|budget)$/i.test(key) && /^\d+$/.test(val)) return m;
+          const q = sep[0] === '"' || sep[0] === "'" ? val[0] : "";
+          return q && (q === '"' || q === "'") ? `${key}${sep}${q}${REDACTED}${q}` : `${key}${sep}${REDACTED}`;
+        }
+      },
+      {
+        // npmrc `//registry/:_authToken=xxx`
+        id: "npm-auth-token",
+        re: new RegExp(String.raw`(_authToken\s*=\s*)(${VAL})`, "g"),
+        replace: (_m, head) => `${head}${REDACTED}`
+      },
+      {
+        // `curl -u user:pass` / `--user user:pass` — keep the user
+        id: "curl-user",
+        re: /(\bcurl\b[^\n]{0,500}?\s(?:-u|--user)[\s=]+['"]?[^\s:'"]+:)([^\s'"]+)/g,
+        replace: (_m, head) => `${head}${REDACTED}`
+      },
+      {
+        // `mysql -phunter2` / `mysqldump -p'hunter2'` — attached password only
+        id: "mysql-p",
+        re: /(\bmysql(?:dump)?\b[^\n]{0,300}?\s-p)('[^']*'|"[^"]*"|[^\s'"-][^\s'"]*)/g,
+        replace: (_m, head) => `${head}${REDACTED}`
+      },
+      {
+        // `export FOO_TOKEN=...` / `FOO_KEY=...` — SCREAMING_SNAKE env style
+        id: "env-style",
+        re: new RegExp(String.raw`(?<![A-Za-z0-9])((?:export\s+)?[A-Z][A-Z0-9]*_(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=\s*)(${VAL})`, "g"),
+        replace: (_m, head) => `${head}${REDACTED}`
+      },
+      {
+        // long CLI flags only: `--password X`, `--token X`, `--api-key X`, `--secret X`, `--passwd X`
+        id: "cli-flag",
+        re: new RegExp(String.raw`(--(?:password|token|api-key|secret|passwd)(?:\s*=\s*|\s+))(${VAL})`, "gi"),
+        replace: (_m, head) => `${head}${REDACTED}`
+      },
+      {
+        // `scheme://user:pass@host` — redact the password, keep user and host
+        id: "url-credentials",
+        re: /((?<![a-z0-9+.-])[a-z][a-z0-9+.-]*:\/\/[^\s/@:]+:)([^\s/@]+)(@)/gi,
+        replace: (_m, head, _pass, at) => `${head}${REDACTED}${at}`
+      },
+      {
+        // provider token prefixes: sk-ant-, sk-, ghp_/gho_/ghu_/ghs_/ghr_, github_pat_,
+        // glpat-, xoxb-/xoxp-/xoxa-, AKIA/ASIA + 16 chars, AIza + 35 chars, JWT (eyJ… three segments)
+        id: "token-prefix",
+        re: /\b(?:sk-ant-[A-Za-z0-9_-]{20,}|sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9]{30,}|github_pat_[A-Za-z0-9_]{22,}|glpat-[A-Za-z0-9_-]{20,}|xox[bap]-[A-Za-z0-9-]{10,}|(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}|[sr]k_(?:live|test)_[A-Za-z0-9]{20,}|npm_[A-Za-z0-9]{36}|hf_[A-Za-z0-9]{30,}|AIza[A-Za-z0-9_-]{35}(?![A-Za-z0-9_-])|eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)(?![A-Za-z0-9_-])/g,
+        replace: REDACTED
+      },
+      {
+        // 40+ char opaque base64/hex run, only on a line that also has a secret-ish key word
+        id: "long-run",
+        re: /(?<![A-Za-z0-9+/])[A-Za-z0-9+/]{40,4096}={0,2}(?![\w/])/g,
+        // a bare 40-hex git SHA stays; it is only redacted as the value of a secret key
+        replace: (m) => /^[0-9a-f]{40}$/i.test(m) ? m : REDACTED
+      }
+    ];
+    LINE_RULES = REDACT_RULES.filter((r) => r.id !== "long-run");
+    LONG_RUN = REDACT_RULES.find((r) => r.id === "long-run");
+    LONG_RUN_MAX_LINE = 64 * 1024;
+    KEY_LINE = new RegExp(`(?:${KEY_WORDS})`, "i");
+  }
+});
+
+// src/hooks/ts/lib/build-gate.ts
+var init_build_gate = __esm({
+  "src/hooks/ts/lib/build-gate.ts"() {
+    "use strict";
+  }
+});
+
+// src/hooks/ts/lib/loop-guard.ts
+var LOOP_MAX_REPEATS, LOOP_READ_STREAK, SELF, LOOP_DENY_REASON, WAIT_CAP_MS, FP_FULL_READ_BYTES, FP_TOTAL_BYTES;
+var init_loop_guard = __esm({
+  "src/hooks/ts/lib/loop-guard.ts"() {
+    "use strict";
+    init_hang_probe();
+    init_redact();
+    init_build_gate();
+    LOOP_MAX_REPEATS = 4;
+    LOOP_READ_STREAK = Number(process.env.PAI_LOOP_READ_STREAK) > 0 ? Number(process.env.PAI_LOOP_READ_STREAK) : 15;
+    SELF = "If your part is done, commit and write your R report. If you are stuck, report the blocker in R x= (or use pai worker help if available).";
+    LOOP_DENY_REASON = `loop guard: you ran this command ${LOOP_MAX_REPEATS} times with the same result and nothing changed. Stop repeating it. ${SELF}`;
+    WAIT_CAP_MS = 45 * 6e4;
+    FP_FULL_READ_BYTES = 256 * 1024;
+    FP_TOTAL_BYTES = 4 * 1024 * 1024;
+  }
+});
+
+// src/audit/scan.ts
+var MAX_TEXT_BYTES;
+var init_scan = __esm({
+  "src/audit/scan.ts"() {
+    "use strict";
+    init_loop_guard();
+    MAX_TEXT_BYTES = 256 * 1024;
+  }
+});
+
+// src/hooks/ts/lib/rules/builtin.generated.ts
+var init_builtin_generated = __esm({
+  "src/hooks/ts/lib/rules/builtin.generated.ts"() {
+    "use strict";
+  }
+});
+
+// src/hooks/ts/lib/rules/load.ts
+var import_yaml6;
+var init_load = __esm({
+  "src/hooks/ts/lib/rules/load.ts"() {
+    "use strict";
+    import_yaml6 = __toESM(require_dist(), 1);
+    init_pai_home();
+    init_builtin_generated();
+  }
+});
+
+// src/workers/scan.ts
+var init_scan2 = __esm({
+  "src/workers/scan.ts"() {
+    "use strict";
+    init_scan();
+    init_load();
+    init_paths();
+    init_status();
+  }
+});
+
 // src/workers/render.ts
 function shortModel(model) {
   const raw = String(model ?? "").trim();
@@ -10257,6 +10442,7 @@ var init_render = __esm({
     init_scope();
     init_endreason();
     init_report();
+    init_scan2();
   }
 });
 
@@ -10266,6 +10452,8 @@ var init_pane_bar = __esm({
     "use strict";
     init_chatui();
     init_render();
+    init_capacity();
+    init_pane_exec();
     init_pane_policy();
   }
 });
@@ -10275,20 +10463,12 @@ var init_pane_exec = __esm({
   "src/workers/pane-exec.ts"() {
     "use strict";
     init_pai_home();
+    init_capacity();
     init_pane_bar();
     init_pane_policy();
   }
 });
 
-// src/workers/ps-table.ts
-var PS_MAX_BUFFER;
-var init_ps_table = __esm({
-  "src/workers/ps-table.ts"() {
-    "use strict";
-    PS_MAX_BUFFER = 64 * 1024 * 1024;
-  }
-});
-
 // src/workers/pane.ts
 var FIND_SESSION, CAPTURE_ACTIVE, RESTORE_ACTIVE, REBALANCE, TAB_SIZES_SCRIPT, WORKER_SPLIT_SCRIPT, TAB_TTYS_SCRIPT, WINDOW_BOUNDS_SCRIPT, SPLIT_SCRIPT, SESSION_TTY_SCRIPT, END_SESSION_SCRIPT, REBALANCE_SCRIPT, VERIFY_PANE_SCRIPT, HOST_TAB_SCRIPT;
 var init_pane = __esm({
@@ -10591,11 +10771,11 @@ var init_run_lock = __esm({
 });
 
 // src/workers/plan.ts
-var import_yaml6;
+var import_yaml7;
 var init_plan = __esm({
   "src/workers/plan.ts"() {
     "use strict";
-    import_yaml6 = __toESM(require_dist(), 1);
+    import_yaml7 = __toESM(require_dist(), 1);
   }
 });
 
@@ -10653,11 +10833,11 @@ var init_run_events = __esm({
 });
 
 // src/workers/local-tiers.ts
-var import_yaml7, VLLM_READY_MS, STRATA_READY_MS;
+var import_yaml8, VLLM_READY_MS, STRATA_READY_MS;
 var init_local_tiers = __esm({
   "src/workers/local-tiers.ts"() {
     "use strict";
-    import_yaml7 = __toESM(require_dist(), 1);
+    import_yaml8 = __toESM(require_dist(), 1);
     init_pai_home();
     init_config3();
     VLLM_READY_MS = 10 * 60 * 1e3;
@@ -10816,6 +10996,7 @@ var init_viewer = __esm({
     init_render();
     init_waiting();
     init_denials();
+    init_scan2();
     init_tool_errors();
     init_wait();
     init_ps_table();
@@ -10904,11 +11085,11 @@ var init_timeouts = __esm({
 });
 
 // src/workers/local-provider.ts
-var import_yaml8;
+var import_yaml9;
 var init_local_provider = __esm({
   "src/workers/local-provider.ts"() {
     "use strict";
-    import_yaml8 = __toESM(require_dist(), 1);
+    import_yaml9 = __toESM(require_dist(), 1);
     init_config3();
     init_run_env();
     init_status();
@@ -10964,7 +11145,7 @@ function cleanProfile(v) {
 function writeAtomic(path, profiles) {
   mkdirSync8(dirname7(path), { recursive: true });
   const tmp = `${path}.tmp-${process.pid}`;
-  writeFileSync8(tmp, (0, import_yaml9.stringify)(profiles));
+  writeFileSync8(tmp, (0, import_yaml10.stringify)(profiles));
   renameSync7(tmp, path);
 }
 function migrateLegacy(path, profiles) {
@@ -10989,7 +11170,7 @@ function readProfiles(path = profilesPath()) {
   const profiles = {};
   if (existsSync13(path)) {
     try {
-      const raw = (0, import_yaml9.parse)(readFileSync14(path, "utf8"));
+      const raw = (0, import_yaml10.parse)(readFileSync14(path, "utf8"));
       for (const [name, v] of Object.entries(raw ?? {})) profiles[name] = cleanProfile(v);
     } catch {
       return {};
@@ -11008,11 +11189,11 @@ function getProfile(name, path = profilesPath()) {
 function currentSessionName(env = process.env) {
   return env[SESSION_NAME_ENV]?.trim() || void 0;
 }
-var import_yaml9, SESSION_NAME_ENV, profilesPath, legacyWorkersPath;
+var import_yaml10, SESSION_NAME_ENV, profilesPath, legacyWorkersPath;
 var init_session_profile_store = __esm({
   "src/workers/session-profile-store.ts"() {
     "use strict";
-    import_yaml9 = __toESM(require_dist(), 1);
+    import_yaml10 = __toESM(require_dist(), 1);
     init_pai_home();
     init_route_lists();
     SESSION_NAME_ENV = "PAI_SESSION_NAME";
@@ -11262,7 +11443,7 @@ var require_postgres_interval = __commonJS({
       if (!(this instanceof PostgresInterval)) {
         return new PostgresInterval(raw);
       }
-      extend(this, parse4(raw));
+      extend(this, parse5(raw));
     }
     var properties = ["seconds", "minutes", "hours", "days", "months", "years"];
     PostgresInterval.prototype.toPostgres = function() {
@@ -11323,7 +11504,7 @@ var require_postgres_interval = __commonJS({
       var microseconds = fraction + "000000".slice(fraction.length);
       return parseInt(microseconds, 10) / 1e3;
     }
-    function parse4(interval) {
+    function parse5(interval) {
       if (!interval) return {};
       var matches = INTERVAL.exec(interval);
       var isNegative = matches[8] === "-";
@@ -11810,13 +11991,13 @@ var require_binaryParsers = __commonJS({
           console.log("ERROR: ElementType not implemented: " + elementType2);
         }
       };
-      var parse4 = function(dimension, elementType2) {
+      var parse5 = function(dimension, elementType2) {
         var array = [];
         var i2;
         if (dimension.length > 1) {
           var count = dimension.shift();
           for (i2 = 0; i2 < count; i2++) {
-            array[i2] = parse4(dimension, elementType2);
+            array[i2] = parse5(dimension, elementType2);
           }
           dimension.unshift(count);
         } else {
@@ -11826,7 +12007,7 @@ var require_binaryParsers = __commonJS({
         }
         return array;
       };
-      return parse4(dims, elementType);
+      return parse5(dims, elementType);
     };
     var parseText = function(value) {
       return value.toString("utf8");
@@ -12614,7 +12795,7 @@ var require_type_overrides = __commonJS({
 var require_pg_connection_string = __commonJS({
   "node_modules/pg-connection-string/index.js"(exports, module) {
     "use strict";
-    function parse4(str2, options = {}) {
+    function parse5(str2, options = {}) {
       if (str2.charAt(0) === "/") {
         const config2 = str2.split(" ");
         return { host: config2[0], database: config2[1] };
@@ -12773,7 +12954,7 @@ var require_pg_connection_string = __commonJS({
       return poolConfig;
     }
     function parseIntoClientConfig(str2) {
-      return toClientConfig(parse4(str2));
+      return toClientConfig(parse5(str2));
     }
     function deprecatedSslModeWarning(sslmode) {
       if (!deprecatedSslModeWarning.warned && typeof process !== "undefined" && process.emitWarning) {
@@ -12788,10 +12969,10 @@ To prepare for this change:
 See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode definitions.`);
       }
     }
-    module.exports = parse4;
-    parse4.parse = parse4;
-    parse4.toClientConfig = toClientConfig;
-    parse4.parseIntoClientConfig = parseIntoClientConfig;
+    module.exports = parse5;
+    parse5.parse = parse5;
+    parse5.toClientConfig = toClientConfig;
+    parse5.parseIntoClientConfig = parseIntoClientConfig;
   }
 });
 
@@ -12801,7 +12982,7 @@ var require_connection_parameters = __commonJS({
     "use strict";
     var dns = __require("dns");
     var defaults3 = require_defaults();
-    var parse4 = require_pg_connection_string().parse;
+    var parse5 = require_pg_connection_string().parse;
     var val = function(key, config, envVar) {
       if (config[key]) {
         return config[key];
@@ -12839,9 +13020,9 @@ var require_connection_parameters = __commonJS({
     };
     var ConnectionParameters = class {
       constructor(config) {
-        config = typeof config === "string" ? parse4(config) : config || {};
+        config = typeof config === "string" ? parse5(config) : config || {};
         if (config.connectionString) {
-          config = Object.assign({}, config, parse4(config.connectionString));
+          config = Object.assign({}, config, parse5(config.connectionString));
         }
         this.user = val("user", config);
         this.database = val("database", config);
@@ -13520,7 +13701,7 @@ var require_serializer = __commonJS({
       );
     };
     var emptyArray = [];
-    var parse4 = (query2) => {
+    var parse5 = (query2) => {
       const name = query2.name || "";
       if (name.length > 63) {
         console.error("Warning! Postgres only supports 63 characters for query names.");
@@ -13670,7 +13851,7 @@ var require_serializer = __commonJS({
       sendSASLInitialResponseMessage,
       sendSCRAMClientFinalMessage,
       query,
-      parse: parse4,
+      parse: parse5,
       bind,
       execute,
       describe,
@@ -14069,12 +14250,12 @@ var require_dist2 = __commonJS({
       return serializer_1.serialize;
     } });
     var parser_1 = require_parser2();
-    function parse4(stream, callback) {
+    function parse5(stream, callback) {
       const parser = new parser_1.Parser();
       stream.on("data", (buffer) => parser.parse(buffer, callback));
       return new Promise((resolve4) => stream.on("end", () => resolve4()));
     }
-    exports.parse = parse4;
+    exports.parse = parse5;
   }
 });
 
@@ -14158,7 +14339,7 @@ var require_connection = __commonJS({
   "node_modules/pg/lib/connection.js"(exports, module) {
     "use strict";
     var EventEmitter = __require("events").EventEmitter;
-    var { parse: parse4, serialize } = require_dist2();
+    var { parse: parse5, serialize } = require_dist2();
     var { getStream, getSecureStream } = require_stream();
     var flushBuffer = serialize.flush();
     var syncBuffer = serialize.sync();
@@ -14244,7 +14425,7 @@ var require_connection = __commonJS({
         });
       }
       attachListeners(stream) {
-        parse4(stream, (msg) => {
+        parse5(stream, (msg) => {
           const eventName = msg.name === "error" ? "errorMessage" : msg.name;
           if (this._emitMessage) {
             this.emit("message", msg);

package/dist/hooks/worker-supervision.mjs

@@ -8183,6 +8183,7 @@ function defaultWorkersConfig() {
     cacheKeepaliveSecs: num(w.cacheKeepaliveSecs, 0),
     defaultMaxMinutes: num(w.defaultMaxMinutes, 60),
     waitAlarmMinutes: num(w.waitAlarmMinutes, 120),
+    scanBudgetMs: num(w.scanBudgetMs, 5e3),
     stagger: {
       enabled: bool(stagger.enabled, true),
       localDefaultSec: num(stagger.localDefaultSec, 20),
@@ -8777,6 +8778,13 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     }
     waitAlarmMinutes = w.waitAlarmMinutes;
   }
+  let scanBudgetMs = d.scanBudgetMs ?? 5e3;
+  if (w.scanBudgetMs !== void 0) {
+    if (typeof w.scanBudgetMs !== "number" || !Number.isInteger(w.scanBudgetMs) || w.scanBudgetMs < 1) {
+      bad(".scanBudgetMs", "must be a positive integer (milliseconds)");
+    }
+    scanBudgetMs = w.scanBudgetMs;
+  }
   const stagger = { ...d.stagger };
   if (w.stagger !== void 0) {
     if (typeof w.stagger !== "object" || w.stagger === null || Array.isArray(w.stagger)) {
@@ -8913,6 +8921,7 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     cacheKeepaliveSecs,
     defaultMaxMinutes,
     waitAlarmMinutes,
+    scanBudgetMs,
     stagger,
     capacity,
     localIdle,

package/dist/hooks/worker-tool-name-repair.mjs

@@ -8177,6 +8177,7 @@ function defaultWorkersConfig() {
     cacheKeepaliveSecs: num(w.cacheKeepaliveSecs, 0),
     defaultMaxMinutes: num(w.defaultMaxMinutes, 60),
     waitAlarmMinutes: num(w.waitAlarmMinutes, 120),
+    scanBudgetMs: num(w.scanBudgetMs, 5e3),
     stagger: {
       enabled: bool(stagger.enabled, true),
       localDefaultSec: num(stagger.localDefaultSec, 20),
@@ -8771,6 +8772,13 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     }
     waitAlarmMinutes = w.waitAlarmMinutes;
   }
+  let scanBudgetMs = d.scanBudgetMs ?? 5e3;
+  if (w.scanBudgetMs !== void 0) {
+    if (typeof w.scanBudgetMs !== "number" || !Number.isInteger(w.scanBudgetMs) || w.scanBudgetMs < 1) {
+      bad(".scanBudgetMs", "must be a positive integer (milliseconds)");
+    }
+    scanBudgetMs = w.scanBudgetMs;
+  }
   const stagger = { ...d.stagger };
   if (w.stagger !== void 0) {
     if (typeof w.stagger !== "object" || w.stagger === null || Array.isArray(w.stagger)) {
@@ -8907,6 +8915,7 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     cacheKeepaliveSecs,
     defaultMaxMinutes,
     waitAlarmMinutes,
+    scanBudgetMs,
     stagger,
     capacity,
     localIdle,