@tekmidian/pai 1.0.5 → 1.0.7

package/dist/cli/index.mjs

@@ -1,69 +1,69 @@
 #!/usr/bin/env node
 import { _ as warn$1, a as fmtDate, c as ok$1, d as scaffoldProjectDirs, f as shortenPath, g as stripAnsi, h as smartDecodeDir, i as err, l as renderTable$1, m as slugify, n as dim$1, o as header, r as encodeDir, s as now, t as bold$1, u as resolvePath } from "../utils-J2b9y8PC.mjs";
-import { _ as resolvePaiFile, a as paiCacheDir, c as PaiFileMigrationError, d as defaultPaiHomeDir, f as legacyConfigDir, g as paiHomePath, h as paiHomeDir, l as claudeHomeDir, m as migratePaiFile, o as paiSocketPath, p as migratePaiDir, r as daemonLogPath, s as schedulerLogPath, u as claudeProjectsDir } from "../runtime-paths-WsO9sJFc.mjs";
-import { a as slugify$1, i as parseSessionFilename } from "../migrate-DrA_OwlZ.mjs";
-import { Et as appendLedger, M as readWorkersSection, R as LOOPBACK_HOST, _t as DEFAULT_CONTEXT_WINDOW, bt as stripModelVariant, c as WorkersConfigError, et as relocateWorkersYaml, f as escalationCloud, m as isLocalProvider, p as getProviderOrNative, rt as workersYamlPath, t as ANTHROPIC_NATIVE, v as nativeAnthropicModels, yt as contextWindowFromModelId } from "../config-CST2uq1v.mjs";
-import { A as DEFAULT_PG_CONNECTION_TIMEOUT_MS, C as migrateMainConfigToYaml, F as quoteIdent, M as isContainerTarget, N as postgresConnectionString, O as readJsonStrict, P as postgresFullTarget, S as MainConfigError, T as resolvedMainConfigPath, c as loadConfig, d as paiConfigYamlFilePath, f as readMainConfigRaw, j as assertPgName, k as writeJsonAtomic, l as migrateConfigFile, n as CONFIG_FILE$2, o as expandHome, p as writeMainConfigRaw, t as CONFIG_DIR, u as paiConfigFilePath } from "../config-DYbyEe4-.mjs";
-import { i as ledgerPath, n as ensureNoMcpConfig, u as workersLogDir } from "../paths-DS5VQKoR.mjs";
-import "../worktree-BY--Rgmy.mjs";
-import { B as loadStatusConfig, G as writeSectionToForge, L as formatStale, U as upsertSection, b as loadStatusesCached, g as isLive, h as isChatPane, y as loadStatuses } from "../status-COtzewKV.mjs";
-import { A as readClaudeJson, N as writeClaudeJson, S as inputSideTokens, h as poolSettings, i as bundleBuildStamp, j as registerMcpScript, k as mcpEntryRunsScript, v as readPoolState, w as expandMcpNames } from "../pool-BZ94nFuq.mjs";
-import { a as unregistrableReason, s as worktreeReason } from "../registrable-CXBBpUcz.mjs";
-import "../pai-marker-DLKJ9Yr5.mjs";
+import { _ as paiHomePath, a as paiCacheDir, c as PaiFileMigrationError, d as defaultPaiHomeDir, f as legacyConfigDir, g as paiHomeDir, h as migratePaiFile, l as claudeHomeDir, m as migratePaiDir, o as paiSocketPath, r as daemonLogPath, s as schedulerLogPath, u as claudeProjectsDir, v as resolvePaiFile } from "../runtime-paths-twfV23YL.mjs";
+import { a as slugify$1, i as parseSessionFilename } from "../migrate-C2z1YmWC.mjs";
+import { Et as appendLedger, M as readWorkersSection, R as LOOPBACK_HOST, _t as DEFAULT_CONTEXT_WINDOW, bt as stripModelVariant, c as WorkersConfigError, et as relocateWorkersYaml, f as escalationCloud, m as isLocalProvider, p as getProviderOrNative, rt as workersYamlPath, t as ANTHROPIC_NATIVE, v as nativeAnthropicModels, yt as contextWindowFromModelId } from "../config-DGV64YJa.mjs";
+import { A as DEFAULT_PG_CONNECTION_TIMEOUT_MS, C as migrateMainConfigToYaml, F as quoteIdent, M as isContainerTarget, N as postgresConnectionString, O as readJsonStrict, P as postgresFullTarget, S as MainConfigError, T as resolvedMainConfigPath, c as loadConfig, d as paiConfigYamlFilePath, f as readMainConfigRaw, h as effectiveMainConfig, j as assertPgName, k as writeJsonAtomic, l as migrateConfigFile, n as CONFIG_FILE$2, o as expandHome, p as writeMainConfigRaw, t as CONFIG_DIR, u as paiConfigFilePath } from "../config-SlZ-Z52i.mjs";
+import { i as ledgerPath, n as ensureNoMcpConfig, r as eventsPath, u as workersLogDir } from "../paths-BwfwHOvN.mjs";
+import "../worktree-7ZS3RBf8.mjs";
+import { K as writeSectionToForge, R as formatStale, V as loadStatusConfig, W as upsertSection, b as loadStatusesCached, g as isLive, h as isChatPane, v as loadStatus, y as loadStatuses } from "../status-DTMT5lyn.mjs";
+import { A as readClaudeJson, N as writeClaudeJson, S as inputSideTokens, h as poolSettings, i as bundleBuildStamp, j as registerMcpScript, k as mcpEntryRunsScript, v as readPoolState, w as expandMcpNames } from "../pool-CFeHGX7q.mjs";
+import { a as unregistrableReason, s as worktreeReason } from "../registrable-D_4qXCnq.mjs";
+import "../pai-marker-kA0iM7rP.mjs";
 import "../helpers-CRuBUas3.mjs";
 import { t as applyRecencyBoost } from "../search-RSyeQqj1.mjs";
 import { t as dropItermBundleId } from "../env-BE8mrsxr.mjs";
-import { a as ownerSessionName, d as terminalHasName } from "../scope-D8HK6vU7.mjs";
-import { At as resolveBindAddress, Bn as setParkConfigSource, Dn as allSetups, Dt as routerPort, E as budgetCache, Et as routerHandler, F as LimitsCache, Gn as appendUsage, Hn as recordDuration, In as setupsPath, Kn as formatSessionStats, Nn as saveSetup, On as downLocalProviders, Ot as defaultV1Guard, Sn as providerHostPort, U as computeInventory, Un as aggregate, Vn as sharedParker, W as currentInventory, Wn as aggregateBySession, Xn as parseSince, Y as inventoryText, Zn as readUsage, at as readInventoryInput, jn as loadSaved, kt as displayHost, m as readRoutingState, pn as readProfiles, pt as isLoopbackProvider, qn as formatStats, qt as sessionStartTarget, un as SESSION_NAME_ENV, vn as localProviderForDelegation, x as SESSION_WORKER_PROVIDER_ENV, xt as routeVerdictLine, zn as parkConfigFrom } from "../routing-BlD_tKjW.mjs";
+import { a as ownerSessionName, d as terminalHasName } from "../scope-BRcaPw5D.mjs";
+import { At as resolveBindAddress, Bn as setParkConfigSource, Dn as allSetups, Dt as routerPort, E as budgetCache, Et as routerHandler, F as LimitsCache, Gn as appendUsage, Hn as recordDuration, In as setupsPath, Kn as formatSessionStats, Nn as saveSetup, On as downLocalProviders, Ot as defaultV1Guard, Sn as providerHostPort, U as computeInventory, Un as aggregate, Vn as sharedParker, W as currentInventory, Wn as aggregateBySession, Xn as parseSince, Y as inventoryText, Zn as readUsage, at as readInventoryInput, jn as loadSaved, kt as displayHost, m as readRoutingState, pn as readProfiles, pt as isLoopbackProvider, qn as formatStats, qt as sessionStartTarget, un as SESSION_NAME_ENV, vn as localProviderForDelegation, x as SESSION_WORKER_PROVIDER_ENV, xt as routeVerdictLine, zn as parkConfigFrom } from "../routing-CF0wlR-_.mjs";
 import { n as minOf } from "../min-max-DrSRUaWQ.mjs";
-import "../tool-errors-DXJ70-sr.mjs";
-import "../wait-ChpHKJZV.mjs";
-import "../local-tiers-BtdEEe5n.mjs";
-import { a as buildsDir, c as listBuilds, f as removeTicket, h as tryStart, i as buildNext, o as enqueue, p as renderBuildQueue, r as buildLogPath, s as getTicket, u as patchTicket, v as poolSlots, y as slotsFor } from "../caller-identity-Bim8JT-D.mjs";
+import "../tool-errors-BOW2n882.mjs";
+import "../wait-BindDA5w.mjs";
+import "../local-tiers-CqwGUcEn.mjs";
+import { a as buildsDir, c as listBuilds, f as removeTicket, h as tryStart, i as buildNext, o as enqueue, p as renderBuildQueue, r as buildLogPath, s as getTicket, u as patchTicket, v as poolSlots, y as slotsFor } from "../caller-identity-DPDSrZE2.mjs";
 import { d as setSchedConfigSource, f as sharedScheduler, i as mirrorTo, s as schedConfigFrom } from "../scheduler-CtUyWJ3O.mjs";
-import { i as effectiveCap, o as providerCap, r as capacityOf } from "../capacity-CsZMkVyg.mjs";
-import "../local-instances-bdCNNSsL.mjs";
-import { n as tierProviderNames, t as isLocalCandidate } from "../local-candidate-Cp_bw4kK.mjs";
+import { i as effectiveCap, o as providerCap, r as capacityOf } from "../capacity-CThSydrd.mjs";
+import "../local-instances-DhF4_sV2.mjs";
+import { n as tierProviderNames, t as isLocalCandidate } from "../local-candidate-C2FGhf54.mjs";
 import { n as OPT, t as CliError } from "../define-CjJsmq-6.mjs";
-import { a as getStorageBackend, c as MergeError, f as humanDuration, i as getRegistryBackend, l as federationDbPath, o as oldRegistryPath, r as createStorageBackend, s as registryDbPath, u as oldFederationPath } from "../factory-BV0MQA3T.mjs";
-import { c as resolveFromModule, i as retryTransient, n as embedChunksWithBackend, r as indexProjectWithBackend, s as packageRoot } from "../postgres-C-T5OWer.mjs";
-import { d as OLLAMA_ID, f as ollamaDefaultUrl, i as measureThroughput, l as provisionOllama, o as createBackend, s as detectBackends, u as OLLAMA_DEFAULT_MODEL } from "../embedding-gate-CTAk8STe.mjs";
+import { a as getStorageBackend, c as MergeError, f as humanDuration, i as getRegistryBackend, l as federationDbPath, o as oldRegistryPath, r as createStorageBackend, s as registryDbPath, u as oldFederationPath } from "../factory-CYwa0jYj.mjs";
+import { c as resolveFromModule, i as retryTransient, n as embedChunksWithBackend, r as indexProjectWithBackend, s as packageRoot } from "../postgres-BL5oBBgY.mjs";
+import { d as OLLAMA_ID, f as ollamaDefaultUrl, i as measureThroughput, l as provisionOllama, o as createBackend, s as detectBackends, u as OLLAMA_DEFAULT_MODEL } from "../embedding-gate-iq0oQEkF.mjs";
 import "../embeddings-BVq3esBF.mjs";
-import "../router-CQSc3lk3.mjs";
-import { t as detectProject } from "../detect-CHuxFrLy.mjs";
-import { n as getProject$1, o as requireProject, r as getProjectAliases, s as resolveIdentifier } from "../helpers-CvbYEKoD.mjs";
-import { a as resolveHome, c as upsertSession, d as scanTranscriptFolders, f as transcriptFiles, l as claudeProjectsDir$1, n as loadScanConfig, o as saveScanConfig, r as migrateScanConfig, s as upsertProject, t as cmdScan, u as findMovedProjects } from "../scan-C3uotg_f.mjs";
-import { A as cmdAdd, B as cmdRebind, F as cmdEdit, H as cmdUnarchive, I as cmdGo, L as cmdInfo$1, M as cmdArchive, N as cmdConsolidate, P as cmdDetect, R as cmdList$1, S as legacy, U as findMovedPath, V as cmdTag$1, _ as cmdList, a as newTop, b as cmdSlug, f as sessionCommand, g as cmdInfo, h as cmdAutoRoute, i as lsCommand, j as cmdAlias, l as renameTop, m as cmdActive, r as collectView, s as openTop, v as cmdRename, x as cmdTag, y as cmdRoute, z as cmdMove } from "../session-BAfypQb9.mjs";
-import { a as detectCurrentProviderName, i as detectCurrentModel, n as buildLaunchPlan, o as launchableProviderNames, r as buildLaunchRows, s as maskLaunchEnv } from "../launch-DpQPZGsT.mjs";
-import { a as colorEnabled, c as renderCommandHelp, d as renderOverview, f as renderTable$2, l as renderMarkdown, m as usageLine, o as makeStyle, p as suggest, s as mdCommand, u as renderMore } from "../health-kufVIf6i.mjs";
-import { a as providerResumePlan, n as launchInDir, o as restoreTopLevel, r as launchPrompt, s as resumeArgvText, t as hasConversation } from "../launch-UPQBoW2q.mjs";
-import { _ as setupsTable, a as lastSetup, m as rootCommand } from "../root-bG48WVpW.mjs";
-import { n as fetchLiveSessions, r as sendToSession, t as callAiBroker } from "../aibroker-client-CQPGqLxL.mjs";
-import { a as resolveSessionByNameOrId, o as scanCacheFilePath, r as migrateSessionScanCache, s as scanSessions, t as fmtAge } from "../session-scan-BmnjSReu.mjs";
-import { A as routerPidFile, B as usageContextTokens, D as routerHandoverFile, E as probeRouter, F as startHandover, I as paneWaiver, L as launchPane, M as routerSwapArgs, P as spawnRouter, R as noTerminalReasons, S as usageJson, T as projectLaunchConfig, b as renderUsage, c as reportOriginWithHost, f as dirtyPaths, g as realRunnerDeps, j as routerRunningPid, k as routerLogFile, l as runMessenger, s as finishDetached, u as startDetached, w as pinNotices, x as transcriptUsage, y as priceTableText } from "../run-AZVwceiU.mjs";
-import { C as readRunLog, D as resumeState, E as requestPlanStop, F as runLogPath, I as PlanTracker, M as dirtyConflicts, O as runExitCode, P as loadPlan, S as planStopPath, T as renderStatus, Y as readRunLock, ht as resolveHostSession, j as PlanError, jt as runPaneExec, k as runPlan, l as PlanReporter, nt as closePaneForWorker, ot as inVisiblePane, q as planLockPath, rt as closeSelfPane, u as QueueReporter, vt as writePaneTitle, w as renderSchedule, x as planStatus, y as blockedMessage, yt as psTable } from "../controls-OiVVbe-f.mjs";
-import "../endreason-BqyyU7BH.mjs";
-import { N as endBuildWait, j as beginBuildWait } from "../render-Cz3BWIBO.mjs";
-import "../operator-DrwWItVt.mjs";
-import "../kill-tree-CcpsRLCZ.mjs";
-import { s as poolReloadLive } from "../pool-cli-B1eKySeN.mjs";
-import "../chain-Dzz6xcKH.mjs";
-import { _ as issueClaims, a as branchDiff, b as workerCommand, c as runQueue, d as loadSettings, f as move, g as issueClaim, h as renderReview, i as projectChecks, l as QueueStore, m as renderList, n as initProject, o as realQueueDeps, p as queueStatePath, r as isGitProject, s as acceptItems, t as formatCheck, u as again, v as issueStale } from "../project-setup-pIPHZaXf.mjs";
-import { m as runInPane, r as closeFinishedPanes } from "../pane-audit-wv9UkyCe.mjs";
-import "../viewer-BgGRqXfD.mjs";
-import "../fallback-Bj2cyVk_.mjs";
-import { g as setWorkersEnabled, s as describeProviders } from "../providers-Dzx5GAUI.mjs";
-import { $ as exportDefaultLayout, B as mergeSettings, G as cachedRows, J as handleCockpit, K as cachedSessionMap, Q as warmCockpit, W as SystemMonitor, X as setEndpointHealth, Y as setActionHooks, Z as setRuntimeSampler, at as withWorkerAttribution, et as loadBuildsConfig, it as sessionDisplayName, lt as providersCommand, n as WORKER_CONFIG_COMMANDS, nt as loadSessionMap, q as cachedWorkerWindows, rt as loadWorkerWindows, t as PROVIDER_EDIT_COMMANDS, tt as createEndpointHealth, z as installWorkers } from "../worker-config-DgdT0iTB.mjs";
-import { a as listConfigOp, i as getConfigValueOp, n as formatConfigGetOutput, o as setConfigValueOp, r as formatConfigSource, s as unsetConfigValueOp, t as MainConfigOpsError } from "../main-config-ops-BYsK3BxM.mjs";
-import { H as acquireRun, U as readRun, V as cockpitProbeSettings, k as readRuntimeCommands } from "../cockpit-actions-BTA1njMO.mjs";
-import { n as PaiClient } from "../ipc-client-CnYEF31R.mjs";
-import { a as EMBED_PASS_BATCH_SIZE, c as liveYieldCheck, n as DEFAULT_EMBED_MAX_LOAD, o as formatEmbedStatus, r as DEFAULT_EMBED_MAX_MINUTES, s as lastRecordedEmbedPass } from "../embed-pass-DtVF2fOV.mjs";
-import { a as liveWorkersConfigShadows, i as totalUsageTokens, r as parseSessionUsage } from "../session-usage-oycSdiD3.mjs";
-import { Bt as findLatestNote, C as migrateSummaryCooldowns, Dt as nextOccurrence, Et as describeQuiet, Ht as readBodyFile, It as readContextHandoverCache, Mt as LAUNCHD_LABEL, Ot as readQuiet, Pt as resolveDaemonPid, Rt as appendCheckpointToNote, St as loadSessionKeepaliveState, Ut as restartRouter, Vt as findNotesDir$1, bt as reapJob, ht as obsidianEnabled, i as reexecBackground, jt as writeQuiet, mt as OBSIDIAN_DISABLED_MESSAGE, o as backfillKgFromNotes, s as migrateKgBackfillState, v as migrateWorkQueue, vt as migrateIdentityFile, wt as sessionKeepaliveLedgerSummary, yt as jobPaths, zt as applyContinue } from "../indexer-backend-B2vtFl38.mjs";
-import { n as queriesDirPath, t as migrateQueriesDir } from "../query-feedback-DN52N9C5.mjs";
+import "../router-D2476pOp.mjs";
+import { t as detectProject } from "../detect-DLjeYwnt.mjs";
+import { n as getProject$1, o as requireProject, r as getProjectAliases, s as resolveIdentifier } from "../helpers-Dj2nY56t.mjs";
+import { a as resolveHome, c as upsertSession, d as scanTranscriptFolders, f as transcriptFiles, l as claudeProjectsDir$1, n as loadScanConfig, o as saveScanConfig, r as migrateScanConfig, s as upsertProject, t as cmdScan, u as findMovedProjects } from "../scan-ew8M6tTH.mjs";
+import { A as cmdAdd, B as cmdRebind, F as cmdEdit, H as cmdUnarchive, I as cmdGo, L as cmdInfo$1, M as cmdArchive, N as cmdConsolidate, P as cmdDetect, R as cmdList$1, S as legacy, U as findMovedPath, V as cmdTag$1, _ as cmdList, a as newTop, b as cmdSlug, f as sessionCommand, g as cmdInfo, h as cmdAutoRoute, i as lsCommand, j as cmdAlias, l as renameTop, m as cmdActive, r as collectView, s as openTop, v as cmdRename, x as cmdTag, y as cmdRoute, z as cmdMove } from "../session-C1JnDXvP.mjs";
+import { a as detectCurrentProviderName, i as detectCurrentModel, n as buildLaunchPlan, o as launchableProviderNames, r as buildLaunchRows, s as maskLaunchEnv } from "../launch-CV6oPHI2.mjs";
+import { a as colorEnabled, c as renderCommandHelp, d as renderOverview, f as renderTable$2, l as renderMarkdown, m as usageLine, o as makeStyle, p as suggest, s as mdCommand, u as renderMore } from "../health-Bb2U4PNK.mjs";
+import { a as providerResumePlan, n as launchInDir, o as restoreTopLevel, r as launchPrompt, s as resumeArgvText, t as hasConversation } from "../launch-Dy8qQnSD.mjs";
+import { _ as setupsTable, a as lastSetup, m as rootCommand } from "../root-B-ZYiEgi.mjs";
+import { n as fetchLiveSessions, r as sendToSession, t as callAiBroker } from "../aibroker-client-CXsyC7A8.mjs";
+import { a as resolveSessionByNameOrId, o as scanCacheFilePath, r as migrateSessionScanCache, s as scanSessions, t as fmtAge } from "../session-scan-DihMibI-.mjs";
+import { A as routerPidFile, B as usageContextTokens, D as routerHandoverFile, E as probeRouter, F as startHandover, I as paneWaiver, L as launchPane, M as routerSwapArgs, P as spawnRouter, R as noTerminalReasons, S as usageJson, T as projectLaunchConfig, b as renderUsage, c as reportOriginWithHost, f as dirtyPaths, g as realRunnerDeps, j as routerRunningPid, k as routerLogFile, l as runMessenger, s as finishDetached, u as startDetached, w as pinNotices, x as transcriptUsage, y as priceTableText } from "../run-CAjfKBQV.mjs";
+import { C as readRunLog, D as resumeState, E as requestPlanStop, F as runLogPath, I as PlanTracker, M as dirtyConflicts, O as runExitCode, Ot as runPaneExec, P as loadPlan, S as planStopPath, T as renderStatus, Y as readRunLock, ht as resolveHostSession, j as PlanError, k as runPlan, l as PlanReporter, nt as closePaneForWorker, ot as inVisiblePane, q as planLockPath, rt as closeSelfPane, u as QueueReporter, vt as writePaneTitle, w as renderSchedule, x as planStatus, y as blockedMessage } from "../controls-ByrcupcA.mjs";
+import "../endreason-BjPom527.mjs";
+import { B as userRuleDirs, H as maskSecrets, J as psTable, L as listRules, N as endBuildWait, P as claudeSessionTranscript, R as loadRules, U as loadBuildsConfig, V as scanTranscript, j as beginBuildWait, z as projectRuleDirs } from "../render-CbifCwTb.mjs";
+import "../operator-lRGvYr3D.mjs";
+import "../kill-tree-DTmiEb3T.mjs";
+import { s as poolReloadLive } from "../pool-cli-DOLgPgOM.mjs";
+import "../chain-BvdKqRiZ.mjs";
+import { _ as issueClaims, a as branchDiff, b as workerCommand, c as runQueue, d as loadSettings, f as move, g as issueClaim, h as renderReview, i as projectChecks, l as QueueStore, m as renderList, n as initProject, o as realQueueDeps, p as queueStatePath, r as isGitProject, s as acceptItems, t as formatCheck, u as again, v as issueStale } from "../project-setup-i5D0xkTn.mjs";
+import { m as runInPane, r as closeFinishedPanes } from "../pane-audit-DUuilP1V.mjs";
+import "../viewer-4BU8w_gK.mjs";
+import { g as setWorkersEnabled, s as describeProviders } from "../providers-BC2Myo_O.mjs";
+import { $ as exportDefaultLayout, B as mergeSettings, G as cachedRows, J as handleCockpit, K as cachedSessionMap, Q as warmCockpit, W as SystemMonitor, X as setEndpointHealth, Y as setActionHooks, Z as setRuntimeSampler, ct as providersCommand, et as createEndpointHealth, it as withWorkerAttribution, n as WORKER_CONFIG_COMMANDS, nt as loadWorkerWindows, q as cachedWorkerWindows, rt as sessionDisplayName, t as PROVIDER_EDIT_COMMANDS, tt as loadSessionMap, z as installWorkers } from "../worker-config-CdPmb4_2.mjs";
+import { a as listConfigOp, i as getConfigValueOp, n as formatConfigGetOutput, o as setConfigValueOp, r as formatConfigSource, s as unsetConfigValueOp, t as MainConfigOpsError } from "../main-config-ops-C_fkINDv.mjs";
+import { H as acquireRun, U as readRun, V as cockpitProbeSettings, k as readRuntimeCommands } from "../cockpit-actions-BgdKB9G3.mjs";
+import { n as PaiClient } from "../ipc-client-CmagIFLh.mjs";
+import { a as EMBED_PASS_BATCH_SIZE, c as liveYieldCheck, n as DEFAULT_EMBED_MAX_LOAD, o as formatEmbedStatus, r as DEFAULT_EMBED_MAX_MINUTES, s as lastRecordedEmbedPass } from "../embed-pass-DdTMn4DH.mjs";
+import { a as liveWorkersConfigShadows, i as totalUsageTokens, r as parseSessionUsage } from "../session-usage-BRIWFYPS.mjs";
+import "../fallback-CQ8_CuVu.mjs";
+import { $t as readBodyFile, At as jobPaths, Ct as historyDir, D as migrateWorkQueue, Et as obsidianEnabled, Ft as sessionKeepaliveLedgerSummary, Gt as resolveDaemonPid, Ht as writeQuiet, Lt as describeQuiet, M as migrateSummaryCooldowns, Nt as loadSessionKeepaliveState, Qt as findNotesDir$1, Rt as nextOccurrence, Ut as LAUNCHD_LABEL, Xt as applyContinue, Yt as appendCheckpointToNote, Zt as findLatestNote, c as proposeFromTranscript, en as restartRouter, g as migrateKgBackfillState, h as backfillKgFromNotes, i as getLesson, jt as reapJob, kt as migrateIdentityFile, l as setState, n as LESSON_STATES, o as listLessons, p as reexecBackground, qt as readContextHandoverCache, r as addLesson, s as promoteLesson, t as LESSON_KINDS, wt as OBSIDIAN_DISABLED_MESSAGE, zt as readQuiet } from "../lessons-CdmqZD0G.mjs";
+import { n as queriesDirPath, t as migrateQueriesDir } from "../query-feedback-BWl2HRwN.mjs";
 import { appendFileSync, chmodSync, closeSync, copyFileSync, cpSync, createReadStream, createWriteStream, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
-import { basename, dirname, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import chalk from "chalk";
 import { cpus, homedir, platform, userInfo } from "node:os";
 import { execFile, execFileSync, execSync, spawn, spawnSync } from "node:child_process";
@@ -74,8 +74,8 @@ import pg from "pg";
 import BetterSqlite3 from "better-sqlite3";
 import { createInterface } from "node:readline";
 import net$1, { createConnection as createConnection$1 } from "net";
-import { promisify } from "node:util";
 import { getEncoding } from "js-tiktoken";
+import { promisify } from "node:util";
 
 //#region src/cli/lib/exit.ts
 /**
@@ -152,7 +152,7 @@ const GLOBAL_FLAGS = [{
 	type: "boolean",
 	summary: ""
 }];
-function parseArgs(cmd, argv) {
+function parseArgs$1(cmd, argv) {
 	const defs = [...cmd.options ?? [], ...GLOBAL_FLAGS.filter((g) => !(cmd.options ?? []).some((o) => o.name === g.name))];
 	const byLong = new Map(defs.map((o) => [o.name, o]));
 	const byShort = new Map(defs.filter((o) => o.short).map((o) => [o.short, o]));
@@ -326,7 +326,7 @@ async function runCli(groups, argv, io = defaultIo(), root) {
 			rest: argv
 		} : resolve$1(groups, argv);
 		const { cmd, path, rest } = resolved;
-		const parsed = parseArgs(cmd, rest);
+		const parsed = parseArgs$1(cmd, rest);
 		const noArgs = rest.length === 0;
 		if (parsed.help || noArgs && !cmd.run && cmd.subcommands?.length) {
 			if (target) {
@@ -830,7 +830,7 @@ function routerSamplerDeps(sched, engineStatusTimeoutMs = () => DEFAULT_RUNTIME_
 	});
 	return {
 		inventory: async () => {
-			const { currentInventory } = await import("../model-inventory-BuTpi9a6.mjs");
+			const { currentInventory } = await import("../model-inventory-BYNrSTaY.mjs");
 			return currentInventory();
 		},
 		sched,
@@ -845,7 +845,7 @@ function routerSamplerDeps(sched, engineStatusTimeoutMs = () => DEFAULT_RUNTIME_
 			}
 		},
 		async rssMb(port) {
-			const { processTreeRssMb } = await import("../model-inventory-BuTpi9a6.mjs");
+			const { processTreeRssMb } = await import("../model-inventory-BYNrSTaY.mjs");
 			const pid = (await exec("lsof", [
 				"-ti",
 				`tcp:${port}`,
@@ -1214,9 +1214,9 @@ const runCommand = {
 		sampler.start();
 		setRuntimeSampler(sampler);
 		setActionHooks({ runLocalJob: async (kind, tier) => {
-			const { startTier, stopAll } = await import("../worker-config-D1KVAMp4.mjs");
-			const { readLocalConfig } = await import("../local-tiers-OBqAAfOg.mjs");
-			const { workersYamlPath } = await import("../workers-config-BhZBrR-Q.mjs");
+			const { startTier, stopAll } = await import("../worker-config-CfV2dgSb.mjs");
+			const { readLocalConfig } = await import("../local-tiers-X_dQfI4Q.mjs");
+			const { workersYamlPath } = await import("../workers-config-2VipVOYk.mjs");
 			const cfg = readLocalConfig(workersYamlPath());
 			if (kind === "off") return void await stopAll(cfg);
 			const t = cfg.tiers[tier];
@@ -1593,7 +1593,7 @@ const modelsCommand = {
 		if (words[0] === "add") {
 			const source = words[1];
 			if (!source) throw new Error("usage: pai models add <hf-id|path> [--name n] [--download] [--try]");
-			const { addModel } = await import("../models-add-CJx2YAwh.mjs");
+			const { addModel } = await import("../models-add-Dc7VXmcu.mjs");
 			const r = await addModel({
 				source,
 				name: typeof ctx.opts.name === "string" ? ctx.opts.name : void 0,
@@ -1608,7 +1608,7 @@ const modelsCommand = {
 		if (op) {
 			const runtime = words[1];
 			if (!runtime) throw new Error(`usage: pai models ${op} <runtime> (configured: ${Object.keys(readRuntimeCommands()).join(", ") || "none"})`);
-			const { defaultDeps, runtimeStartStop } = await import("../cockpit-actions-BgsiNcUY.mjs");
+			const { defaultDeps, runtimeStartStop } = await import("../cockpit-actions-DNl0rKfW.mjs");
 			const r = await runtimeStartStop(runtime, op, defaultDeps(), { model: typeof ctx.opts.model === "string" ? ctx.opts.model : void 0 });
 			process.stdout.write(r.message + "\n");
 			if (!r.ok) process.exitCode = 1;
@@ -1812,7 +1812,7 @@ const MAX_PROMPT_CHARS = 220;
 /** Newest prompts kept per transcript — headroom over MAX_PROMPTS for the duplicate collapse. */
 const KEEP_PROMPTS = 64;
 /** Cap on listed working-tree entries, so a big refactor cannot flood TODO.md. */
-const MAX_FILES = 20;
+const MAX_FILES$1 = 20;
 /**
 * Text of a JSONL message, or null when the entry carries none.
 * Mirrors the shape handled by slug-generator: content is either a plain
@@ -1998,8 +1998,8 @@ function readWorkingTree(cwd) {
 			"-1",
 			"--pretty=%h %s"
 		]),
-		changes: all.slice(0, MAX_FILES),
-		overflow: Math.max(0, all.length - MAX_FILES)
+		changes: all.slice(0, MAX_FILES$1),
+		overflow: Math.max(0, all.length - MAX_FILES$1)
 	};
 }
 /**
@@ -2923,7 +2923,7 @@ async function cmdPause(opts) {
 		process.exitCode = 1;
 		return;
 	}
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	const cwd = process.cwd();
 	const project = await resolveProjectByCwd(registryBackend, cwd);
@@ -3023,7 +3023,7 @@ function touchSentinel(rootPath) {
 async function cmdAutosave(opts) {
 	const minGap = parseInt(opts.minGap ?? String(DEFAULT_MIN_GAP), 10);
 	const cwd = process.cwd();
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	const project = await resolveProjectByCwd(registryBackend, cwd);
 	if (!project) return;
@@ -3249,7 +3249,7 @@ function finalizeNote(notePath) {
 }
 async function cmdEnd(opts) {
 	await cmdPause(opts);
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	const cwd = process.cwd();
 	const project = await registryBackend.findProjectByCwdPrefix(cwd);
@@ -3430,7 +3430,7 @@ function buildStopBody(project, sessionId) {
 	}
 }
 async function cmdHandover(projectSlug, numberOrLatest, sessionId) {
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	let project;
 	if (projectSlug) {
@@ -4376,8 +4376,8 @@ async function analyzeProject(registryBackend, project) {
 async function countVectorDbPaths(oldPaths) {
 	if (oldPaths.length === 0) return 0;
 	try {
-		const { loadConfig } = await import("../config-Dv3t7xnT.mjs");
-		const { createStorageBackend } = await import("../factory-DeASMV7Z.mjs");
+		const { loadConfig } = await import("../config-DHgPx3ER.mjs");
+		const { createStorageBackend } = await import("../factory-DFwez99M.mjs");
 		const config = loadConfig();
 		if (config.storageBackend !== "postgres") return 0;
 		const backend = await createStorageBackend(config);
@@ -4394,8 +4394,8 @@ async function countVectorDbPaths(oldPaths) {
 async function updateVectorDbPaths(moves) {
 	if (moves.length === 0) return 0;
 	try {
-		const { loadConfig } = await import("../config-Dv3t7xnT.mjs");
-		const { createStorageBackend } = await import("../factory-DeASMV7Z.mjs");
+		const { loadConfig } = await import("../config-DHgPx3ER.mjs");
+		const { createStorageBackend } = await import("../factory-DFwez99M.mjs");
 		const config = loadConfig();
 		if (config.storageBackend !== "postgres") return 0;
 		const backend = await createStorageBackend(config);
@@ -4482,7 +4482,7 @@ async function displayDryRun(plans) {
 	console.log();
 }
 async function executeCleanup(plans, skipReindex) {
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	let deleted = 0;
 	let renamed = 0;
@@ -4682,7 +4682,7 @@ async function executeCleanup(plans, skipReindex) {
 * them into YYYY/MM/ folders and renumber. Dry run unless `execute` is set.
 */
 async function runCleanup(projectSlug, opts) {
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	const dryRun = !opts.execute;
 	const skipReindex = opts.reindex === false;
@@ -6664,7 +6664,7 @@ async function runRestore(backupPath, opts) {
 * backup is written first. Any other content, or an unknown previous rendering,
 * counts as user-edited: the new version goes beside it as CLAUDE.md.pai-new.
 */
-function stamp(d) {
+function stamp$1(d) {
 	return d.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
 }
 function writeAtomic(path, content) {
@@ -6683,7 +6683,7 @@ function refreshClaudeMd(claudeMd, newRendered, previousRendered, now = /* @__PU
 			newPath
 		};
 	}
-	const backup = `${claudeMd}.bak-${stamp(now)}`;
+	const backup = `${claudeMd}.bak-${stamp$1(now)}`;
 	copyFileSync(claudeMd, backup);
 	writeAtomic(claudeMd, newRendered);
 	return {
@@ -8258,6 +8258,10 @@ const SETTINGS_HOOKS = [
 		hookType: "UserPromptSubmit",
 		command: "${ADAPTER_DIR}/Hooks/local-model-hint.mjs"
 	},
+	{
+		hookType: "UserPromptSubmit",
+		command: "${ADAPTER_DIR}/Hooks/handoff-link.mjs"
+	},
 	{
 		hookType: "UserPromptSubmit",
 		command: "${ADAPTER_DIR}/Hooks/capture-all-events.mjs --event-type UserPromptSubmit"
@@ -8965,8 +8969,8 @@ function cmdLogs(opts) {
 	return 0;
 }
 async function daemonServeCmd() {
-	const { serve } = await import("../daemon-ieo0lnpq.mjs");
-	const { loadConfig: lc, ensureConfigDir } = await import("../config-Dv3t7xnT.mjs");
+	const { serve } = await import("../daemon-iymy18Ie.mjs");
+	const { loadConfig: lc, ensureConfigDir } = await import("../config-DHgPx3ER.mjs");
 	ensureConfigDir();
 	await serve(lc());
 	return 0;
@@ -11137,6 +11141,232 @@ async function watchTicket(dir, id, deps = {}, intervalMs = 1e3, simctl, reap) {
 	}
 }
 
+//#endregion
+//#region src/audit/tokens.ts
+/**
+* tokens.ts — the one tokenizer every audit section counts through.
+*
+* cl100k_base via js-tiktoken (pure JS, no native build). "all" + [] for the
+* allowed/disallowed-special-token arguments matches Python tiktoken's
+* `disallowed_special=()`: audited text (hook stdout, session transcripts)
+* routinely contains literal "<|...|>"-shaped substrings that are not actual
+* special tokens, and the strict default throws on sight of them.
+*/
+const TOKEN_ENCODING = "cl100k_base";
+let cached = null;
+function encoder() {
+	if (!cached) cached = getEncoding(TOKEN_ENCODING);
+	return cached;
+}
+function countTokens(text) {
+	if (!text) return 0;
+	return encoder().encode(text, "all", []).length;
+}
+
+//#endregion
+//#region src/audit/hooks.ts
+/**
+* `pai audit tokens hooks` — token cost of the hooks that fire before the
+* model ever sees a token: SessionStart and UserPromptSubmit run on every
+* new session / every prompt respectively, and whatever they print to
+* stdout is injected into context.
+*/
+const HOOK_TIMEOUT_MS = 2e4;
+function settingsPaths(cwd) {
+	return [join(claudeHomeDir(), "settings.json"), join(cwd, ".claude", "settings.json")].filter(existsSync);
+}
+function readSettings(path) {
+	try {
+		return JSON.parse(readFileSync(path, "utf8"));
+	} catch {
+		return {};
+	}
+}
+/** Expand ${PAI_DIR} and $HOME/${HOME} the way settings.json's own hooks do. */
+function expandCommand(command, env) {
+	const paiDir = env.PAI_DIR ?? process.env.PAI_DIR ?? claudeHomeDir();
+	return command.replace(/\$\{PAI_DIR\}/g, paiDir).replace(/\$\{HOME\}/g, homedir()).replace(/\$HOME\b/g, homedir());
+}
+function syntheticStdin(cwd, eventName) {
+	const sessionId = randomUUID();
+	return JSON.stringify({
+		session_id: sessionId,
+		cwd,
+		hook_event_name: eventName,
+		prompt: "audit",
+		transcript_path: join(claudeProjectsDir(), "audit", `${sessionId}.jsonl`)
+	});
+}
+function runHook(command, cwd, eventName) {
+	const result = spawnSync(command, {
+		shell: true,
+		cwd,
+		input: syntheticStdin(cwd, eventName),
+		encoding: "utf8",
+		timeout: HOOK_TIMEOUT_MS
+	});
+	if (result.error) return {
+		stdout: "",
+		error: result.error.message
+	};
+	if (result.signal) return {
+		stdout: result.stdout ?? "",
+		error: `killed by ${result.signal} (timeout?)`
+	};
+	return { stdout: result.stdout ?? "" };
+}
+const NOT_RUN = "not run (pass --run to execute hooks)";
+const AUDITED_EVENTS = ["SessionStart", "UserPromptSubmit"];
+/** Hook events the capture hook records, so a configured hook can be checked
+*  against what actually fired. */
+const OBSERVABLE_EVENTS = [
+	"PreToolUse",
+	"PostToolUse",
+	"UserPromptSubmit",
+	"Stop",
+	"SubagentStop",
+	"SessionStart",
+	"PreCompact",
+	"Notification"
+];
+/** Default observation window for `--since`. */
+const DEFAULT_SINCE_HOURS = 24;
+/** Where capture-all-events writes its JSONL: PAI_HOME/History/raw-outputs. */
+function defaultCaptureDir() {
+	return join(paiHomePath("History"), "raw-outputs");
+}
+/**
+* Counts hook events in the raw-capture JSONL files modified since `sinceMs`
+* (capture-all-events lines carry `hook_event_type` and `timestamp`). Files
+* are read line by line; malformed lines are skipped.
+*/
+async function observedHookEvents(captureDir, sinceMs) {
+	const observed = /* @__PURE__ */ new Map();
+	if (!existsSync(captureDir)) return observed;
+	const monthDirs = readdirSync(captureDir, { withFileTypes: true }).filter((d) => d.isDirectory() && /^\d{4}-\d{2}$/.test(d.name)).map((d) => join(captureDir, d.name));
+	for (const monthDir of monthDirs) for (const name of readdirSync(monthDir)) {
+		if (!name.endsWith(".jsonl")) continue;
+		const file = join(monthDir, name);
+		try {
+			if (statSync(file).mtimeMs < sinceMs) continue;
+		} catch {
+			continue;
+		}
+		const rl = createInterface({
+			input: createReadStream(file, "utf8"),
+			crlfDelay: Infinity
+		});
+		for await (const raw of rl) foldObservedLine(raw, observed);
+	}
+	return observed;
+}
+/** True when the command references a file path that does not exist (a hook
+*  script that was moved or deleted — the hook silently never runs). */
+function commandHasMissingFile(command) {
+	for (const token of command.split(/\s+/)) {
+		if (!token.includes("/")) continue;
+		if (token.includes("$") || token.includes("*")) continue;
+		if (!existsSync(token)) return true;
+	}
+	return false;
+}
+function auditHooks(cwd, run, maybeOpts) {
+	const opts = typeof run === "function" ? maybeOpts ?? {} : run ?? {};
+	const runner = typeof run === "function" ? run : void 0;
+	const sinceHours = opts.sinceHours ?? DEFAULT_SINCE_HOURS;
+	const now = opts.now ?? Date.now();
+	const observed = observedHookEventsSync(opts.captureDir ?? defaultCaptureDir(), now - sinceHours * 36e5);
+	const settingsFiles = settingsPaths(cwd);
+	const readings = [];
+	const totalsByEvent = {};
+	const preToolUseHooks = [];
+	let preToolUseRewritesBash = false;
+	for (const settingsPath of settingsFiles) {
+		const settings = readSettings(settingsPath);
+		const env = settings.env ?? {};
+		for (const eventName of AUDITED_EVENTS) {
+			const groups = settings.hooks?.[eventName] ?? [];
+			totalsByEvent[eventName] = totalsByEvent[eventName] ?? 0;
+			for (const group of groups) for (const entry of group.hooks ?? []) {
+				if (!entry.command) continue;
+				const command = expandCommand(entry.command, env);
+				const { stdout, error } = runner ? runner(command, cwd, eventName) : {
+					stdout: "",
+					error: NOT_RUN
+				};
+				const tokens = countTokens(stdout);
+				totalsByEvent[eventName] += tokens;
+				const seen = observed.get(eventName);
+				readings.push({
+					event: eventName,
+					matcher: group.matcher,
+					command,
+					tokens,
+					error,
+					state: commandHasMissingFile(command) ? "missing-script" : seen ? "observed" : "configured",
+					lastSeen: seen?.last
+				});
+			}
+		}
+		for (const group of settings.hooks?.PreToolUse ?? []) for (const entry of group.hooks ?? []) {
+			if (!entry.command) continue;
+			preToolUseHooks.push({
+				matcher: group.matcher,
+				command: expandCommand(entry.command, env)
+			});
+			if (group.matcher === "Bash") preToolUseRewritesBash = true;
+		}
+	}
+	return {
+		encoding: TOKEN_ENCODING,
+		settingsFiles,
+		readings,
+		totalsByEvent,
+		preToolUseHooks,
+		preToolUseRewritesBash
+	};
+}
+/** Sync variant used by auditHooks; same folding as observedHookEvents. */
+function observedHookEventsSync(captureDir, sinceMs) {
+	const observed = /* @__PURE__ */ new Map();
+	if (!existsSync(captureDir)) return observed;
+	const monthDirs = readdirSync(captureDir, { withFileTypes: true }).filter((d) => d.isDirectory() && /^\d{4}-\d{2}$/.test(d.name)).map((d) => join(captureDir, d.name));
+	for (const monthDir of monthDirs) for (const name of readdirSync(monthDir)) {
+		if (!name.endsWith(".jsonl")) continue;
+		const file = join(monthDir, name);
+		let text;
+		try {
+			if (statSync(file).mtimeMs < sinceMs) continue;
+			text = readFileSync(file, "utf8");
+		} catch {
+			continue;
+		}
+		for (const raw of text.split("\n")) foldObservedLine(raw, observed);
+	}
+	return observed;
+}
+function foldObservedLine(raw, observed) {
+	if (!raw.includes("hook_event_type")) return;
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return;
+	}
+	const event = parsed.hook_event_type;
+	if (!event) return;
+	const ts = typeof parsed.timestamp === "number" ? parsed.timestamp : Date.now();
+	const last = new Date(ts).toISOString();
+	const entry = observed.get(event);
+	if (entry) {
+		entry.count += 1;
+		if (last > entry.last) entry.last = last;
+	} else observed.set(event, {
+		count: 1,
+		last
+	});
+}
+
 //#endregion
 //#region src/builds/doctor.ts
 /**
@@ -11173,6 +11403,33 @@ function doctor(cwd) {
 		findings
 	};
 }
+/**
+* One line per hook event: whether it is configured in settings.json and
+* whether a capture proves it actually ran in the last `sinceHours`. A hook
+* that is configured but never observed is the classic silent-failure case.
+*/
+async function hookEventFindings(cwd, opts = {}) {
+	const sinceHours = opts.sinceHours ?? DEFAULT_SINCE_HOURS;
+	const now = opts.now ?? Date.now();
+	const report = auditHooks(cwd, {
+		sinceHours,
+		captureDir: opts.captureDir,
+		now
+	});
+	const observed = await observedHookEvents(opts.captureDir ?? defaultCaptureDir(), now - sinceHours * 36e5);
+	const configuredEvents = new Set(report.readings.map((r) => r.event));
+	const findings = [];
+	for (const event of OBSERVABLE_EVENTS) {
+		const seen = observed.get(event);
+		findings.push({
+			event,
+			configured: configuredEvents.has(event),
+			observed: !!seen,
+			lastSeen: seen?.last
+		});
+	}
+	return findings;
+}
 
 //#endregion
 //#region src/cli/commands/build.ts
@@ -11313,14 +11570,19 @@ const nextCmd = {
 };
 const doctorCmd = {
 	name: "doctor",
-	summary: "Check the project's registered build doors",
-	description: "Reads .pai/builds.yaml above the current directory and flags every door that is missing or never calls `pai build lock`, which would bypass the queue.",
+	summary: "Check the project's registered build doors and hook events",
+	description: "Reads .pai/builds.yaml above the current directory and flags every door that is missing or never calls `pai build lock`, which would bypass the queue. Also prints one line per hook event: observed (a capture proves it ran) or configured-but-never-observed (warning — the hook may silently not be running).",
 	examples: ["pai build doctor"],
-	run: (ctx) => {
+	run: async (ctx) => {
 		const r = doctor(process.cwd());
-		if (!r.root) return out$2("no .pai/builds.yaml here: no doors registered"), 0;
-		for (const f of r.findings) out$2(`${f.ok ? "ok  " : "FAIL"} ${f.door}${f.problem ? ` — ${f.problem}` : ""}`);
-		if (!r.findings.length) out$2("no doors registered");
+		if (!r.root) out$2("no .pai/builds.yaml here: no doors registered");
+		else {
+			for (const f of r.findings) out$2(`${f.ok ? "ok  " : "FAIL"} ${f.door}${f.problem ? ` — ${f.problem}` : ""}`);
+			if (!r.findings.length) out$2("no doors registered");
+		}
+		const sinceHours = 24;
+		for (const h of await hookEventFindings(process.cwd(), { sinceHours })) if (h.observed) out$2(`ok   ${h.event}: observed ${h.lastSeen ?? ""}`.trimEnd());
+		else if (h.configured) out$2(`WARN ${h.event}: configured, never observed in ${sinceHours}h`);
 		return r.findings.every((f) => f.ok) ? 0 : 1;
 	}
 };
@@ -11997,8 +12259,8 @@ async function escalate(task, headline, detail, state, now, opts) {
 	state.alarmedAt[task.id] = now;
 	let delivered = false;
 	try {
-		const { routeNotification } = await import("../router-DwHJRgG9.mjs");
-		const { loadConfig } = await import("../config-Dv3t7xnT.mjs");
+		const { routeNotification } = await import("../router-ghujlEFb.mjs");
+		const { loadConfig } = await import("../config-DHgPx3ER.mjs");
 		delivered = (await routeNotification({
 			event: "error",
 			title: `PAI: ${headline}`,
@@ -14940,7 +15202,7 @@ async function migrateToPostgres(opts = {}) {
 		const dump = pgDump(container, pgConfig, dumpPath);
 		if (!dump.ok) return refused(dump.reason, dryRun);
 	}
-	const { PostgresBackend } = await import("../postgres-CBHY5PIi.mjs");
+	const { PostgresBackend } = await import("../postgres-B1B80bcj.mjs");
 	await PostgresBackend.ensureDatabase(pgConfig);
 	const sqlite = new BetterSqlite3(sqliteFederationPath, { readonly: true });
 	const registrySqlite = sqliteRegistryPath === sqliteFederationPath ? sqlite : new BetterSqlite3(sqliteRegistryPath, { readonly: true });
@@ -16327,7 +16589,7 @@ const out = (s) => process.stdout.write(s + "\n");
 async function repoOf(project) {
 	if (typeof project === "string" && project) {
 		if (existsSync(project)) return resolve(project);
-		const { getProject } = await import("../helpers-WV8tdQHM.mjs");
+		const { getProject } = await import("../helpers-DyHKAwrW.mjs");
 		const row = await getProject(project);
 		if (!row) throw new CliError(`no project ${project}`, "pai projects list");
 		return row.root_path;
@@ -16556,7 +16818,7 @@ const reviewCmd = {
 		return 0;
 	}
 };
-const listCmd = {
+const listCmd$2 = {
 	name: "list",
 	summary: "Every item of the project with its state",
 	description: "States: pending, running, ready, too-big, needs-decision, cloud, accepted, rejected.",
@@ -16650,7 +16912,7 @@ const queueCommand = {
 		addCmd,
 		runCmd,
 		reviewCmd,
-		listCmd,
+		listCmd$2,
 		acceptCmd,
 		rejectCmd,
 		againCmd
@@ -17150,7 +17412,7 @@ async function cmdPromote(opts) {
 		console.error(dim$1(`  Pick a durable location for the new project.`));
 		process.exit(1);
 	}
-	const { getRegistryBackend } = await import("../factory-DeASMV7Z.mjs");
+	const { getRegistryBackend } = await import("../factory-DFwez99M.mjs");
 	const registryBackend = await getRegistryBackend();
 	const encodedDir = encodeDir(targetPath);
 	if (await registryBackend.getProjectBySlug(slug) ?? await registryBackend.getProjectByRootPath(targetPath) ?? await registryBackend.getProjectByEncodedDir(encodedDir)) {
@@ -18394,7 +18656,7 @@ async function cmdUnregister(slug, opts = {}) {
 * deprecated alias that forwards here with a stderr notice.
 */
 async function projectListCmd(opts) {
-	const { cmdMain } = await import("../main-resolver-CAC3xfZM.mjs");
+	const { cmdMain } = await import("../main-resolver-CN_sfG1R.mjs");
 	await cmdMain(void 0, void 0, opts);
 	return 0;
 }
@@ -19817,7 +20079,7 @@ async function registryScanCmd(opts) {
 		return 0;
 	}
 	if (opts.filterReport) {
-		const { reportUnregistrable } = await import("../registrable-Drn8wIDO.mjs");
+		const { reportUnregistrable } = await import("../registrable-Ct0DKNKS.mjs");
 		const r = await reportUnregistrable(await getRegistryBackend());
 		console.log(`Registry rows: ${r.total}`);
 		console.log(`  matching the registration filter: ${r.matching} (${r.matchingMissing} with a missing path)`);
@@ -21660,7 +21922,7 @@ async function runEmbed(backend, projectId, projectSlug, batchSize = 50, pageSiz
 	const label = projectSlug ? `project ${projectSlug}` : "all projects";
 	console.log(dim$1(`Generating embeddings for ${label} (this may take a while on first run)...`));
 	const { serializeEmbedding } = await import("../embeddings-CIkJBKd-.mjs");
-	const { gateBackend } = await import("../embedding-gate-B98PK_wz.mjs");
+	const { gateBackend } = await import("../embedding-gate-BVQvUmox.mjs");
 	const gate = await gateBackend(backend, { record: true });
 	if (!gate.ok) {
 		console.error(err(gate.reason));
@@ -21989,7 +22251,7 @@ async function memorySearchCmd(query, opts) {
 	let results;
 	if (mode === "keyword") results = await backend.searchKeyword(query, searchOpts);
 	else {
-		const { embedQuery } = await import("../embedding-gate-B98PK_wz.mjs");
+		const { embedQuery } = await import("../embedding-gate-BVQvUmox.mjs");
 		console.log(dim$1("Generating query embedding..."));
 		const q = await embedQuery(backend, query);
 		const queryEmbedding = q.vec;
@@ -22069,8 +22331,8 @@ async function memorySearchCmd(query, opts) {
 //#region src/cli/commands/memory/sources-cmd.ts
 /** `pai memory sources` — what the indexer has taken in. */
 async function memorySourcesCmd(opts) {
-	const { createStorageBackend } = await import("../factory-DeASMV7Z.mjs");
-	const { loadConfig } = await import("../config-Dv3t7xnT.mjs");
+	const { createStorageBackend } = await import("../factory-DFwez99M.mjs");
+	const { loadConfig } = await import("../config-DHgPx3ER.mjs");
 	const { cmdMemorySources } = await import("../sources-CiE3rZek.mjs");
 	let backend;
 	try {
@@ -22830,7 +23092,7 @@ async function zettelExploreCmd(note, opts) {
 	const depth = opts.depth ?? 3;
 	const direction = opts.direction ?? "both";
 	const mode = opts.mode ?? "all";
-	const { zettelExplore } = await import("../zettelkasten-BHVx5zj-.mjs");
+	const { zettelExplore } = await import("../zettelkasten-BH8AdNh8.mjs");
 	const result = await zettelExplore(await getFedBackend(), {
 		startNote: note,
 		depth,
@@ -22886,7 +23148,7 @@ async function zettelHealthCmd(opts) {
 	const projectPath = opts.project;
 	const recentDays = opts.days ?? 30;
 	const includeTypes = opts.include ? opts.include.split(",").map((s) => s.trim()) : void 0;
-	const { zettelHealth } = await import("../zettelkasten-BHVx5zj-.mjs");
+	const { zettelHealth } = await import("../zettelkasten-BH8AdNh8.mjs");
 	const result = await zettelHealth(await getFedBackend(), {
 		scope,
 		projectPath,
@@ -22944,7 +23206,7 @@ async function zettelSurpriseCmd(note, opts) {
 	const limit = opts.limit ?? 10;
 	const minSimilarity = opts.minSimilarity ?? .3;
 	const minGraphDistance = opts.minDistance ?? 3;
-	const { zettelSurprise } = await import("../zettelkasten-BHVx5zj-.mjs");
+	const { zettelSurprise } = await import("../zettelkasten-BH8AdNh8.mjs");
 	const backend = await getFedBackend();
 	console.log();
 	console.log(header("  PAI Zettel Surprise"));
@@ -22986,7 +23248,7 @@ async function zettelConverseCmd(question, opts) {
 	const vaultProjectId = Number(opts.vaultProjectId);
 	const depth = opts.depth ?? 2;
 	const limit = opts.limit ?? 15;
-	const { zettelConverse } = await import("../zettelkasten-BHVx5zj-.mjs");
+	const { zettelConverse } = await import("../zettelkasten-BH8AdNh8.mjs");
 	const backend = await getFedBackend();
 	console.log();
 	console.log(header("  PAI Zettel Converse"));
@@ -23036,7 +23298,7 @@ async function zettelThemesCmd(opts) {
 	const minClusterSize = opts.minSize ?? 3;
 	const maxThemes = opts.maxThemes ?? 10;
 	const similarityThreshold = opts.threshold ?? .65;
-	const { zettelThemes } = await import("../zettelkasten-BHVx5zj-.mjs");
+	const { zettelThemes } = await import("../zettelkasten-BH8AdNh8.mjs");
 	const backend = await getFedBackend();
 	console.log();
 	console.log(header("  PAI Zettel Themes"));
@@ -23084,7 +23346,7 @@ async function zettelSuggestCmd(note, opts) {
 	const vaultProjectId = Number(opts.vaultProjectId);
 	const limit = opts.limit ?? 5;
 	const excludeLinked = opts.excludeLinked !== true;
-	const { zettelSuggest } = await import("../zettelkasten-BHVx5zj-.mjs");
+	const { zettelSuggest } = await import("../zettelkasten-BH8AdNh8.mjs");
 	const backend = await getFedBackend();
 	console.log();
 	console.log(header("  PAI Zettel Suggest"));
@@ -24083,28 +24345,6 @@ const reloadCommand = {
 	}
 };
 
-//#endregion
-//#region src/audit/tokens.ts
-/**
-* tokens.ts — the one tokenizer every audit section counts through.
-*
-* cl100k_base via js-tiktoken (pure JS, no native build). "all" + [] for the
-* allowed/disallowed-special-token arguments matches Python tiktoken's
-* `disallowed_special=()`: audited text (hook stdout, session transcripts)
-* routinely contains literal "<|...|>"-shaped substrings that are not actual
-* special tokens, and the strict default throws on sight of them.
-*/
-const TOKEN_ENCODING = "cl100k_base";
-let cached = null;
-function encoder() {
-	if (!cached) cached = getEncoding(TOKEN_ENCODING);
-	return cached;
-}
-function countTokens(text) {
-	if (!text) return 0;
-	return encoder().encode(text, "all", []).length;
-}
-
 //#endregion
 //#region src/audit/files.ts
 /**
@@ -24198,149 +24438,41 @@ function auditFiles(paths) {
 }
 
 //#endregion
-//#region src/audit/hooks.ts
+//#region src/audit/first-turn.ts
 /**
-* `pai audit tokens hooks` — token cost of the hooks that fire before the
-* model ever sees a token: SessionStart and UserPromptSubmit run on every
-* new session / every prompt respectively, and whatever they print to
-* stdout is injected into context.
+* first-turn.ts — where a turn's context actually comes from, attributed
+* line by line from the transcript.
+*
+* The API reports one number per assistant turn (cache_read + cache_creation
+* + input). The transcript holds the pieces Claude Code injected since the
+* previous turn: SessionStart / UserPromptSubmit hook output, the skill
+* listing, the deferred-tool name list, MCP server instructions, the human
+* prompt, any isMeta expansion (a skill body, a pasted slash-command result),
+* tool results, and the previous turn's own visible output (re-sent as
+* context on every later turn). Each of those is counted in cl100k here;
+* what is left over is the system prompt, the built-in tool schemas, agents
+* and memory files, which never appear in the transcript.
+*
+* Only the live lineage counts. Lines chain by parentUuid, and a prompt the
+* user abandoned before a reply (Escape, re-submit) leaves a dead branch
+* whose lines were never sent — run 9 measured a session whose first
+* /Name was abandoned and read 24k where the true baseline is 30k, because
+* the 3.5k-token skill listing sat on the dead branch.
+*
+* `type:"system"` lines with subtype local_command hold a slash command's
+* raw stdout, and the model receives it verbatim in addition to the isMeta
+* markdown copy — run 11 measured both present on the same turn, so both are
+* counted.
 */
-const HOOK_TIMEOUT_MS = 2e4;
-function settingsPaths(cwd) {
-	return [join(claudeHomeDir(), "settings.json"), join(cwd, ".claude", "settings.json")].filter(existsSync);
-}
-function readSettings(path) {
-	try {
-		return JSON.parse(readFileSync(path, "utf8"));
-	} catch {
-		return {};
+function parseLines$1(path) {
+	const lines = [];
+	for (const raw of readFileSync(path, "utf8").split("\n")) {
+		if (!raw.trim()) continue;
+		try {
+			lines.push(JSON.parse(raw));
+		} catch {}
 	}
-}
-/** Expand ${PAI_DIR} and $HOME/${HOME} the way settings.json's own hooks do. */
-function expandCommand(command, env) {
-	const paiDir = env.PAI_DIR ?? process.env.PAI_DIR ?? claudeHomeDir();
-	return command.replace(/\$\{PAI_DIR\}/g, paiDir).replace(/\$\{HOME\}/g, homedir()).replace(/\$HOME\b/g, homedir());
-}
-function syntheticStdin(cwd, eventName) {
-	const sessionId = randomUUID();
-	return JSON.stringify({
-		session_id: sessionId,
-		cwd,
-		hook_event_name: eventName,
-		prompt: "audit",
-		transcript_path: join(claudeProjectsDir(), "audit", `${sessionId}.jsonl`)
-	});
-}
-function runHook(command, cwd, eventName) {
-	const result = spawnSync(command, {
-		shell: true,
-		cwd,
-		input: syntheticStdin(cwd, eventName),
-		encoding: "utf8",
-		timeout: HOOK_TIMEOUT_MS
-	});
-	if (result.error) return {
-		stdout: "",
-		error: result.error.message
-	};
-	if (result.signal) return {
-		stdout: result.stdout ?? "",
-		error: `killed by ${result.signal} (timeout?)`
-	};
-	return { stdout: result.stdout ?? "" };
-}
-const NOT_RUN = "not run (pass --run to execute hooks)";
-const AUDITED_EVENTS = ["SessionStart", "UserPromptSubmit"];
-/**
-* Lists every SessionStart / UserPromptSubmit hook. Without `run` the hooks are only
-* listed (tokens 0, marked not run): a project's settings.json is untrusted input and
-* its hooks execute with shell:true. Pass `runHook` (CLI `--run`) to measure them.
-*/
-function auditHooks(cwd, run) {
-	const settingsFiles = settingsPaths(cwd);
-	const readings = [];
-	const totalsByEvent = {};
-	const preToolUseHooks = [];
-	let preToolUseRewritesBash = false;
-	for (const settingsPath of settingsFiles) {
-		const settings = readSettings(settingsPath);
-		const env = settings.env ?? {};
-		for (const eventName of AUDITED_EVENTS) {
-			const groups = settings.hooks?.[eventName] ?? [];
-			totalsByEvent[eventName] = totalsByEvent[eventName] ?? 0;
-			for (const group of groups) for (const entry of group.hooks ?? []) {
-				if (!entry.command) continue;
-				const command = expandCommand(entry.command, env);
-				const { stdout, error } = run ? run(command, cwd, eventName) : {
-					stdout: "",
-					error: NOT_RUN
-				};
-				const tokens = countTokens(stdout);
-				totalsByEvent[eventName] += tokens;
-				readings.push({
-					event: eventName,
-					matcher: group.matcher,
-					command,
-					tokens,
-					error
-				});
-			}
-		}
-		for (const group of settings.hooks?.PreToolUse ?? []) for (const entry of group.hooks ?? []) {
-			if (!entry.command) continue;
-			preToolUseHooks.push({
-				matcher: group.matcher,
-				command: expandCommand(entry.command, env)
-			});
-			if (group.matcher === "Bash") preToolUseRewritesBash = true;
-		}
-	}
-	return {
-		encoding: TOKEN_ENCODING,
-		settingsFiles,
-		readings,
-		totalsByEvent,
-		preToolUseHooks,
-		preToolUseRewritesBash
-	};
-}
-
-//#endregion
-//#region src/audit/first-turn.ts
-/**
-* first-turn.ts — where a turn's context actually comes from, attributed
-* line by line from the transcript.
-*
-* The API reports one number per assistant turn (cache_read + cache_creation
-* + input). The transcript holds the pieces Claude Code injected since the
-* previous turn: SessionStart / UserPromptSubmit hook output, the skill
-* listing, the deferred-tool name list, MCP server instructions, the human
-* prompt, any isMeta expansion (a skill body, a pasted slash-command result),
-* tool results, and the previous turn's own visible output (re-sent as
-* context on every later turn). Each of those is counted in cl100k here;
-* what is left over is the system prompt, the built-in tool schemas, agents
-* and memory files, which never appear in the transcript.
-*
-* Only the live lineage counts. Lines chain by parentUuid, and a prompt the
-* user abandoned before a reply (Escape, re-submit) leaves a dead branch
-* whose lines were never sent — run 9 measured a session whose first
-* /Name was abandoned and read 24k where the true baseline is 30k, because
-* the 3.5k-token skill listing sat on the dead branch.
-*
-* `type:"system"` lines with subtype local_command hold a slash command's
-* raw stdout, and the model receives it verbatim in addition to the isMeta
-* markdown copy — run 11 measured both present on the same turn, so both are
-* counted.
-*/
-function parseLines(path) {
-	const lines = [];
-	for (const raw of readFileSync(path, "utf8").split("\n")) {
-		if (!raw.trim()) continue;
-		try {
-			lines.push(JSON.parse(raw));
-		} catch {}
-	}
-	return lines;
+	return lines;
 }
 function classify(line) {
 	if (line.type === "attachment") {
@@ -24406,7 +24538,7 @@ function apiContextOf(usage) {
 */
 function turnBreakdown(path, turn) {
 	if (!existsSync(path)) return null;
-	const lines = parseLines(path);
+	const lines = parseLines$1(path);
 	const byUuid = /* @__PURE__ */ new Map();
 	for (const l of lines) if (l.uuid) byUuid.set(l.uuid, l);
 	const seen = /* @__PURE__ */ new Set();
@@ -24512,7 +24644,7 @@ function firstTurnBreakdown(path) {
 	if (!existsSync(path)) return empty;
 	const tb = turnBreakdown(path, 1);
 	if (!tb) return empty;
-	const lines = parseLines(path);
+	const lines = parseLines$1(path);
 	const byUuid = /* @__PURE__ */ new Map();
 	let firstIndex = -1;
 	for (let i = 0; i < lines.length; i++) {
@@ -24759,8 +24891,8 @@ function deriveSessionTrigger(transcriptPath, env = process.env, now = Date.now(
 * and the cache-TTL split (ephemeral 5m vs 1h) that says which cache the
 * session is riding.
 */
-/** Newest *.jsonl under ~/.claude/projects, excluding subagents/. */
-function newestSessionLog() {
+/** Newest *.jsonl under ~/.claude/projects, excluding subagents/. With a session id, that session's file instead. */
+function newestSessionLog(sessionId) {
 	const projectsDir = claudeProjectsDir();
 	let best = null;
 	let projectDirs;
@@ -24779,6 +24911,7 @@ function newestSessionLog() {
 		}
 		for (const entry of entries) {
 			if (!entry.endsWith(".jsonl")) continue;
+			if (sessionId && entry !== `${sessionId}.jsonl`) continue;
 			const filePath = join(dirPath, entry);
 			let mtime;
 			try {
@@ -26360,12 +26493,14 @@ function hookRunner(run) {
 	console.error(warn$1("--run executes every SessionStart/UserPromptSubmit hook in ~/.claude/settings.json and ./.claude/settings.json with a shell. Do not use it on a repository you do not trust."));
 	return runHook;
 }
-function printHooks(report) {
+function printHooks(report, sinceHours) {
 	console.log(header(`Hook output (encoding: ${report.encoding})`));
 	console.log(dim$1(`settings.json: ${report.settingsFiles.join(", ") || "none found"}`));
 	const rows = report.readings.map((r) => [
 		r.event,
 		r.matcher ?? "",
+		r.state,
+		r.lastSeen ?? "",
 		String(r.tokens),
 		r.error ? err(r.error) : "",
 		r.command
@@ -26373,10 +26508,14 @@ function printHooks(report) {
 	console.log(renderTable$1([
 		"event",
 		"matcher",
+		"state",
+		"last seen",
 		"tokens",
 		"error",
 		"command"
 	], rows));
+	for (const r of report.readings) if (r.state === "missing-script") console.log(err(`  RED: ${r.event} hook script does not exist: ${r.command}`));
+	else if (r.state === "configured") console.log(warn$1(`  AMBER: ${r.event} hook configured, never observed in ${sinceHours}h — it may not be running`));
 	for (const [event, total] of Object.entries(report.totalsByEvent)) console.log(bold$1(`${event} total: ${total} tokens`));
 	console.log(dim$1(`PreToolUse hooks: ${report.preToolUseHooks.length}` + (report.preToolUseRewritesBash ? ", including a Bash-matcher rewrite hook" : "")));
 }
@@ -26702,7 +26841,7 @@ const DEFAULT_CTX_THRESHOLD = 2e5;
 async function gatherCombined() {
 	const cwd = process.cwd();
 	const files = auditFiles(defaultFileSet(cwd));
-	const hooks = auditHooks(cwd);
+	const hooks = auditHooks(cwd, { sinceHours: DEFAULT_SINCE_HOURS });
 	const session = await auditSession(newestSessionLog() ?? void 0).catch(() => null);
 	const daemon = auditDaemon();
 	const env = auditEnv();
@@ -26761,7 +26900,7 @@ function combinedSectionOutputs(data) {
 	});
 	sections.push({
 		name: "hooks",
-		text: captureOutput(() => printHooks(data.hooks))
+		text: captureOutput(() => printHooks(data.hooks, DEFAULT_SINCE_HOURS))
 	});
 	if (data.session) sections.push({
 		name: "session",
@@ -26844,6 +26983,71 @@ function recordCombinedReport(dir, data) {
 	for (const f of data.findings) counts[f.severity]++;
 	appendFileSync(runsPath, `- ${date} run${runNumber}: ${counts.RED} RED, ${counts.AMBER} AMBER, ${counts.GREEN} GREEN — ${baseName}.md\n`, "utf8");
 }
+const SCAN_SEVERITIES = [
+	"block",
+	"confirm",
+	"warn"
+];
+/**
+* `pai audit scan`: run the rule set over a transcript after the fact —
+* single-step rules per tool call, sequence rules correlated across the run.
+* Exit 0 when nothing hit, 1 when any block-severity finding did.
+*/
+async function auditScanCmd(opts) {
+	let target = null;
+	if (opts.worker) {
+		const { workers } = readWorkersSection();
+		const logDir = workersLogDir(workers);
+		const st = loadStatus(logDir, opts.worker);
+		if (!st) {
+			console.error(err(`  No worker named ${opts.worker}.`));
+			return 1;
+		}
+		target = st.claudeSession ? claudeSessionTranscript(st.claudeSession, st.cwd) : eventsPath(logDir, opts.worker);
+		if (target && !existsSync(target)) target = null;
+	} else if (opts.session) target = newestSessionLog(opts.session);
+	else if (opts.path) target = existsSync(opts.path) ? opts.path : null;
+	else target = newestSessionLog();
+	if (!target) {
+		console.error(err("  No transcript found."));
+		return 1;
+	}
+	const { rules, errors } = loadRules(userRuleDirs(process.cwd()), { projectDirs: projectRuleDirs(process.cwd()) });
+	for (const e of errors) console.error(dim$1(`rule: ${e}`));
+	const findings = await scanTranscript(target, rules);
+	if (opts.json) {
+		printJson({
+			path: target,
+			findings
+		});
+		return findings.some((f) => f.severity === "block") ? 1 : 0;
+	}
+	console.log(header(`Security scan: ${target}`));
+	console.log(dim$1(`${rules.length} rules, ${findings.length} findings`));
+	for (const sev of SCAN_SEVERITIES) {
+		const hits = findings.filter((f) => f.severity === sev);
+		if (!hits.length) continue;
+		console.log(header(sev));
+		const rows = hits.map((f) => [
+			severityColor(sev === "block" ? "RED" : "AMBER", sev),
+			f.ruleId,
+			f.tool,
+			String(f.line),
+			f.ts ? f.ts.slice(11, 19) : "",
+			f.evidence.replace(/\s+/g, " ").slice(0, 100)
+		]);
+		console.log(renderTable$1([
+			"severity",
+			"rule",
+			"tool",
+			"line",
+			"time",
+			"evidence"
+		], rows));
+	}
+	if (!findings.length) console.log(ok$1("no findings"));
+	return findings.some((f) => f.severity === "block") ? 1 : 0;
+}
 /**
 * `--json` is declared once, on `tokensCmd` itself, and read back from there
 * in every subcommand action below — not redeclared per subcommand. The parser
@@ -26864,12 +27068,16 @@ async function auditFilesCmd(paths, opts) {
 }
 /** Exported function for audit tokens hooks command */
 function auditHooksCmd(opts) {
-	const report = auditHooks(process.cwd(), hookRunner(opts.run));
+	const sinceHours = opts.since ? parseInt(opts.since, 10) : DEFAULT_SINCE_HOURS;
+	const report = auditHooks(process.cwd(), {
+		run: hookRunner(opts.run),
+		sinceHours
+	});
 	if (opts.json) {
 		printJson(report);
 		return 0;
 	}
-	printHooks(report);
+	printHooks(report, sinceHours);
 	return 0;
 }
 /** Exported function for audit tokens session command */
@@ -27057,7 +27265,8 @@ const t = (name, summary, description, extra = {}) => a({
 	if (name === "files") return auditFilesCmd(ctx.args.PATHS ?? [], { json: ctx.opts.json === true });
 	if (name === "hooks") return auditHooksCmd({
 		json: ctx.opts.json === true,
-		run: ctx.opts.run === true
+		run: ctx.opts.run === true,
+		since: ctx.opts.since
 	});
 	if (name === "session") return auditSessionCmd(ctx.args.PATH, {
 		json: ctx.opts.json === true,
@@ -27130,13 +27339,22 @@ const auditCommand = {
 				}],
 				examples: ["pai audit tokens files", "pai audit tokens files ./CLAUDE.md --json"]
 			}),
-			t("hooks", "Token cost of every start-up and prompt hook", "Lists each SessionStart and UserPromptSubmit hook. With --run it executes them and measures what each adds to the context; without it nothing is executed.", {
+			t("hooks", "Token cost and observed state of every start-up and prompt hook", "Lists each SessionStart and UserPromptSubmit hook with its state: observed (a capture for that event exists in the window), configured (never observed — the hook may silently not be running), or missing-script. With --run it executes them and measures what each adds to the context; without it nothing is executed.", {
 				options: [{
 					name: "run",
 					type: "boolean",
 					summary: "Execute the hooks to measure their output (runs the repository's own hook commands; trusted repositories only)"
+				}, {
+					name: "since",
+					type: "number",
+					value: "HOURS",
+					summary: "Observation window for the state column (default 24h)"
 				}],
-				examples: ["pai audit tokens hooks", "pai audit tokens hooks --run"]
+				examples: [
+					"pai audit tokens hooks",
+					"pai audit tokens hooks --run",
+					"pai audit tokens hooks --since 48"
+				]
 			}),
 			t("session", "Token split for one session transcript", "Shows cache, input and output tokens of a session (default: the newest).", {
 				args: [{
@@ -27243,6 +27461,1677 @@ const auditCommand = {
 				examples: ["pai audit tokens ladder", "pai audit tokens ladder --live --model haiku"]
 			})
 		]
+	}, a({
+		name: "scan",
+		summary: "After-the-fact security scan of a session or worker transcript",
+		description: "Runs the rule set (the same rules the PreToolUse hook enforces, plus two-step sequence rules that only make sense after the fact) over a transcript: single-step rules against every tool call, sequence rules correlated across the run — credential read followed by an outbound call, download followed by execute, injected text followed by a shell call. Findings are grouped by severity; evidence is masked. Exit 1 when a block-severity finding hit.",
+		args: [{
+			name: "PATH",
+			summary: "Transcript .jsonl (default: newest session under ~/.claude/projects)"
+		}],
+		options: [{
+			name: "session",
+			type: "string",
+			value: "ID",
+			summary: "Scan this Claude Code session's transcript"
+		}, {
+			name: "worker",
+			type: "string",
+			value: "ID",
+			summary: "Scan a worker's transcript (its Claude session, else its event log)"
+		}],
+		examples: [
+			"pai audit scan",
+			"pai audit scan --worker w-20260101-abc",
+			"pai audit scan ./session.jsonl --json"
+		],
+		seeAlso: ["pai rules list", "pai audit tokens session"]
+	}, (ctx) => auditScanCmd({
+		json: ctx.opts.json === true,
+		session: ctx.opts.session,
+		worker: ctx.opts.worker,
+		path: ctx.args.PATH
+	}))]
+};
+
+//#endregion
+//#region src/session/git-notes.ts
+/** Link commits to the session/worker that wrote them via `git notes --ref=pai`. */
+const EDIT_TOOLS = new Set([
+	"Edit",
+	"Write",
+	"MultiEdit",
+	"NotebookEdit"
+]);
+const HOOK_MARKER = "# PAI-GIT-NOTES: managed by `pai git setup`";
+const NOTES_REF = "refs/notes/pai";
+const LOOKBACK_MS = 6 * 3600 * 1e3;
+const MAX_CAPTURE_BYTES = 8 * 1024 * 1024;
+const HOOK_BUDGET_MS = 500;
+/** A refusal `pai git setup` reports to the user as-is. */
+var GitNotesError = class extends Error {};
+/** Call `onLine` for each line of `file`, reading in chunks; stops early when it returns false. */
+function eachLine(file, onLine) {
+	const fd = openSync(file, "r");
+	try {
+		const buf = Buffer.alloc(64 * 1024);
+		let rest = "";
+		for (let n = readSync(fd, buf, 0, buf.length, null); n > 0; n = readSync(fd, buf, 0, buf.length, null)) {
+			const parts = (rest + buf.toString("utf8", 0, n)).split("\n");
+			rest = parts.pop() ?? "";
+			for (const l of parts) if (!onLine(l)) return;
+		}
+		if (rest) onLine(rest);
+	} finally {
+		closeSync(fd);
+	}
+}
+const real = (p) => {
+	try {
+		return realpathSync(p);
+	} catch {
+		return resolve(p);
+	}
+};
+function jsonlFiles(dir, sinceMs, out = []) {
+	let names;
+	try {
+		names = readdirSync(dir);
+	} catch {
+		return out;
+	}
+	for (const n of names) {
+		const p = join(dir, n);
+		try {
+			const st = statSync(p);
+			if (st.isDirectory()) jsonlFiles(p, sinceMs, out);
+			else if (/\.jsonl(\.1)?$/.test(n) && st.mtimeMs >= sinceMs) out.push(p);
+		} catch {}
+	}
+	return out;
+}
+/** Sessions whose Edit/Write-style tool events (after `sinceMs`) touched any of `paths`. */
+function sessionsTouching(paths, sinceMs, captureDir, deadline = Infinity) {
+	const wanted = new Map(paths.map((p) => [real(p), p]));
+	const bySession = /* @__PURE__ */ new Map();
+	for (const file of jsonlFiles(captureDir, sinceMs)) {
+		if (Date.now() > deadline) break;
+		try {
+			if (statSync(file).size > MAX_CAPTURE_BYTES) continue;
+		} catch {
+			continue;
+		}
+		try {
+			eachLine(file, (line) => {
+				if (Date.now() > deadline) return false;
+				if (!line.includes("file_path") && !line.includes("notebook_path")) return true;
+				let e;
+				try {
+					e = JSON.parse(line);
+				} catch {
+					return true;
+				}
+				const tool = e.tool ?? e.payload?.tool_name;
+				if (!EDIT_TOOLS.has(tool)) return true;
+				const ts = typeof e.timestamp === "number" ? e.timestamp : Date.parse(e.timestamp);
+				if (Number.isFinite(ts) && ts < sinceMs) return true;
+				const input = e.input ?? e.payload?.tool_input ?? {};
+				const fp = input.file_path ?? input.notebook_path;
+				const sessionId = e.session ?? e.session_id;
+				if (typeof fp !== "string" || typeof sessionId !== "string") return true;
+				const orig = wanted.get(real(fp));
+				if (!orig) return true;
+				const workerId = e.workerId ?? e.worker_id ?? e.env?.PAI_WORKER_ID ?? e.payload?.env?.PAI_WORKER_ID;
+				const cur = bySession.get(sessionId) ?? {
+					sessionId,
+					files: []
+				};
+				if (typeof workerId === "string" && !cur.workerId) cur.workerId = workerId;
+				if (!cur.files.includes(orig)) cur.files.push(orig);
+				bySession.set(sessionId, cur);
+				return true;
+			});
+		} catch {}
+	}
+	return [...bySession.values()];
+}
+/** Note body: one `pai-session` line per session, plus `pai-worker` where known. */
+function noteText(entries) {
+	const lines = [];
+	for (const e of entries) {
+		lines.push(`pai-session: ${e.sessionId}`);
+		if (e.workerId) lines.push(`pai-worker: ${e.workerId}`);
+	}
+	return lines.join("\n");
+}
+/** Attach `text` to `commit` under refs/notes/pai; false on any error. */
+function writeNote(repo, commit, text) {
+	try {
+		execFileSync("git", [
+			"notes",
+			"--ref=pai",
+			"add",
+			"-f",
+			"-m",
+			text,
+			commit
+		], {
+			cwd: repo,
+			timeout: 3e3,
+			stdio: "ignore"
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+const git = (repo, args, timeout = 1e3) => execFileSync("git", args, {
+	cwd: repo,
+	timeout,
+	encoding: "utf8",
+	stdio: [
+		"ignore",
+		"pipe",
+		"ignore"
+	]
+}).trim();
+const gitOk = (repo, args) => {
+	try {
+		git(repo, args);
+		return true;
+	} catch {
+		return false;
+	}
+};
+/** The post-commit work: note the sessions that edited the files of HEAD. Never throws. */
+function postCommitHook(repo, captureDir, env = process.env, now = Date.now()) {
+	const deadline = now + HOOK_BUDGET_MS;
+	try {
+		if (/rebase/.test(env.GIT_REFLOG_ACTION ?? "")) return false;
+		if (gitOk(repo, [
+			"rev-parse",
+			"-q",
+			"--verify",
+			"REBASE_HEAD"
+		]) || gitOk(repo, [
+			"rev-parse",
+			"-q",
+			"--verify",
+			"CHERRY_PICK_HEAD"
+		])) return false;
+		const top = git(repo, ["rev-parse", "--show-toplevel"]);
+		const text = noteText(sessionsTouching(git(repo, [
+			"diff-tree",
+			"--root",
+			"--no-commit-id",
+			"--name-only",
+			"-r",
+			"HEAD"
+		]).split("\n").filter(Boolean).map((f) => join(top, f)), now - LOOKBACK_MS, captureDir, deadline));
+		if (Date.now() > deadline) return false;
+		return text ? writeNote(repo, "HEAD", text) : false;
+	} catch {
+		return false;
+	}
+}
+function hookPath(repo) {
+	const p = git(repo, [
+		"rev-parse",
+		"--git-path",
+		"hooks/post-commit"
+	]);
+	return isAbsolute(p) ? p : resolve(repo, p);
+}
+/** Install the post-commit hook, chaining an existing foreign hook as post-commit.pre-pai. */
+function setupGitNotes(repo) {
+	const hook = hookPath(repo);
+	const gitDirs = ["--git-dir", "--git-common-dir"].map((a) => real(resolve(repo, git(repo, ["rev-parse", a]))));
+	const hookDir = real(dirname(hook));
+	if (!gitDirs.some((d) => hookDir === d || hookDir.startsWith(d + sep))) throw new GitNotesError(`core.hooksPath points outside .git (${hook}); refusing to write a hook there. Unset it or install the hook yourself`);
+	const old = `${hook}.pre-pai`;
+	let chained = existsSync(old);
+	if (existsSync(hook) && !readFileSync(hook, "utf8").includes(HOOK_MARKER)) {
+		if (existsSync(old)) throw new GitNotesError(`${old} already exists; refusing to overwrite it. Move it away and re-run`);
+		renameSync(hook, old);
+		chained = true;
+	}
+	writeFileSync(hook, `#!/bin/sh\n${HOOK_MARKER}\n${chained ? "d=$(dirname \"$0\")\n[ -x \"$d/post-commit.pre-pai\" ] && \"$d/post-commit.pre-pai\" \"$@\"\n" : ""}( pai git hook post-commit >/dev/null 2>&1 & )\n`);
+	chmodSync(hook, 493);
+	git(repo, [
+		"config",
+		"notes.rewriteRef",
+		NOTES_REF
+	]);
+	return {
+		hook,
+		chained
+	};
+}
+/** Remove the PAI hook and restore the chained one; false when PAI had no hook here. */
+function removeGitNotes(repo) {
+	const hook = hookPath(repo);
+	const old = `${hook}.pre-pai`;
+	if (!existsSync(hook) || !readFileSync(hook, "utf8").includes(HOOK_MARKER)) return false;
+	unlinkSync(hook);
+	if (existsSync(old)) renameSync(old, hook);
+	try {
+		if (git(repo, ["config", "notes.rewriteRef"]) === NOTES_REF) git(repo, [
+			"config",
+			"--unset",
+			"notes.rewriteRef"
+		]);
+	} catch {}
+	return true;
+}
+/** The PAI note of `rev`, or undefined. */
+function showNote(repo, rev = "HEAD") {
+	try {
+		return git(repo, [
+			"notes",
+			"--ref=pai",
+			"show",
+			rev
+		]) || void 0;
+	} catch {
+		return;
+	}
+}
+
+//#endregion
+//#region src/cli/commands/git.ts
+/** `pai git ...`: link commits to the session/worker that wrote them (git notes, ref pai). */
+const repoOrFail = () => process.cwd();
+const gitCommand = {
+	name: "git",
+	summary: "Link commits to the session that wrote them",
+	description: "Installs a post-commit hook that records the session and worker that edited a commit's files as a git note (ref pai).",
+	examples: [
+		"pai git setup",
+		"pai git notes",
+		"pai git remove"
+	],
+	seeAlso: ["pai worker ps"],
+	subcommands: [
+		{
+			name: "setup",
+			summary: "Install the post-commit hook in the current repository",
+			description: "Writes .git/hooks/post-commit, keeping an existing hook as post-commit.pre-pai and calling it first, and sets notes.rewriteRef so notes follow amends and rebases.",
+			examples: ["pai git setup"],
+			run: () => {
+				try {
+					const r = setupGitNotes(repoOrFail());
+					process.stdout.write(`Installed ${r.hook}${r.chained ? " (existing hook chained)" : ""}\n`);
+					return 0;
+				} catch (e) {
+					if (e instanceof GitNotesError) throw new CliError(e.message, "Fix it and re-run pai git setup");
+					throw new CliError("Not a git repository", "Run it inside a repository");
+				}
+			}
+		},
+		{
+			name: "remove",
+			summary: "Remove the hook and restore the previous one",
+			description: "Deletes the PAI post-commit hook, puts a chained hook back and unsets notes.rewriteRef.",
+			examples: ["pai git remove"],
+			run: () => {
+				process.stdout.write(removeGitNotes(repoOrFail()) ? "Removed the PAI post-commit hook\n" : "No PAI hook installed\n");
+				return 0;
+			}
+		},
+		{
+			name: "notes",
+			summary: "Show the PAI note of a commit",
+			description: "Prints the session and worker recorded for a commit (default HEAD), or 'no PAI note'.",
+			args: [{
+				name: "REV",
+				summary: "Commit to show (default HEAD)"
+			}],
+			examples: ["pai git notes", "pai git notes HEAD~1"],
+			run: (ctx) => {
+				process.stdout.write((showNote(repoOrFail(), ctx.args.REV) ?? "no PAI note") + "\n");
+				return 0;
+			}
+		},
+		{
+			name: "hook",
+			summary: "Git hook entry points (called by git)",
+			description: "Internal: `pai git hook post-commit` is what the installed hook runs. Always exits 0.",
+			examples: ["pai git hook post-commit"],
+			hidden: true,
+			subcommands: [{
+				name: "post-commit",
+				summary: "Record the sessions that edited the last commit's files",
+				description: "Skips during rebase and cherry-pick; looks back 6 hours in the raw captures. Always exits 0.",
+				examples: ["pai git hook post-commit"],
+				run: () => {
+					postCommitHook(process.cwd(), join(historyDir(), "raw-outputs"));
+					return 0;
+				}
+			}]
+		}
+	]
+};
+
+//#endregion
+//#region src/cli/commands/lessons.ts
+/** `pai lessons ...`: review-gated lessons (candidate, approved, rejected, superseded). */
+const ID = {
+	name: "ID",
+	required: true,
+	summary: "Lesson id (its file name without .md)"
+};
+function state(v) {
+	if (v === void 0) return void 0;
+	if (!LESSON_STATES.includes(v)) throw new CliError(`unknown state "${v}" (${LESSON_STATES.join("|")})`);
+	return v;
+}
+function row(l) {
+	return `${l.id}  [${l.state}] ${l.kind}  ${l.project}  ${l.title}`;
+}
+function wrap(f) {
+	try {
+		return f();
+	} catch (e) {
+		throw new CliError(e instanceof Error ? e.message : String(e));
+	}
+}
+/** Newest transcript of the current directory under ~/.claude/projects. */
+function newestTranscriptOfCwd() {
+	const dir = join(claudeProjectsDir(), process.cwd().replace(/[^a-zA-Z0-9]/g, "-"));
+	if (!existsSync(dir)) return null;
+	const files = readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => ({
+		f: join(dir, f),
+		m: statSync(join(dir, f)).mtimeMs
+	}));
+	files.sort((a, b) => b.m - a.m);
+	return files[0]?.f ?? null;
+}
+const transition = (name, to, summary) => ({
+	name,
+	summary,
+	description: `${summary}. Only candidates can be ${name}d.`,
+	args: [ID],
+	examples: [`pai lessons ${name} my-lesson`],
+	run: (ctx) => {
+		const l = wrap(() => setState(ctx.args.ID, to));
+		console.log(`${l.id}: ${l.state}`);
+		return 0;
+	}
+});
+const lessonsCommand = {
+	name: "lessons",
+	summary: "Review-gated lessons for agents",
+	description: "A short curated memory layer, one Markdown file per lesson in the PAI home. Candidates only reach agents once approved.",
+	examples: [
+		"pai lessons list --state candidate",
+		"pai lessons propose",
+		"pai lessons approve my-lesson"
+	],
+	seeAlso: ["pai memory"],
+	subcommands: [
+		{
+			name: "list",
+			summary: "List lessons",
+			description: "Lists lessons, optionally filtered by state or project.",
+			options: [
+				{
+					name: "state",
+					type: "string",
+					value: "S",
+					summary: "candidate, approved, rejected or superseded"
+				},
+				{
+					name: "project",
+					type: "string",
+					value: "P",
+					summary: "Project slug or global"
+				},
+				{
+					...OPT.json,
+					summary: "Print JSON"
+				}
+			],
+			examples: ["pai lessons list", "pai lessons list --state approved --project global"],
+			run: (ctx) => {
+				const ls = wrap(() => listLessons({
+					state: state(ctx.opts.state),
+					project: ctx.opts.project
+				}));
+				if (ctx.opts.json === true) console.log(JSON.stringify(ls, null, 2));
+				else if (ls.length === 0) console.log("No lessons.");
+				else for (const l of ls) console.log(row(l));
+				return 0;
+			}
+		},
+		{
+			name: "show",
+			summary: "Show one lesson",
+			description: "Prints a lesson with its frontmatter fields and body.",
+			args: [ID],
+			examples: ["pai lessons show my-lesson"],
+			run: (ctx) => {
+				const l = getLesson(ctx.args.ID);
+				if (!l) throw new CliError(`lesson not found: ${ctx.args.ID}`);
+				console.log(row(l));
+				console.log(`applies when: ${l.applies_when || "(not set)"}`);
+				console.log(`evidence: ${l.evidence.join(", ") || "(none)"}`);
+				if (l.superseded_by) console.log(`superseded by: ${l.superseded_by}`);
+				console.log(`\n${l.body}`);
+				return 0;
+			}
+		},
+		{
+			name: "add",
+			summary: "Add a candidate lesson",
+			description: "Creates a lesson in the candidate state; approve it after review.",
+			options: [
+				{
+					name: "title",
+					type: "string",
+					value: "T",
+					summary: "Short title"
+				},
+				{
+					name: "kind",
+					type: "string",
+					value: "K",
+					summary: LESSON_KINDS.join(", ")
+				},
+				{
+					name: "applies-when",
+					type: "string",
+					value: "W",
+					summary: "One sentence: when the lesson applies"
+				},
+				{
+					name: "project",
+					type: "string",
+					value: "P",
+					summary: "Project slug (default: global)"
+				},
+				{
+					name: "body",
+					type: "string",
+					value: "B",
+					summary: "The lesson in 1-5 sentences"
+				}
+			],
+			examples: ["pai lessons add --title \"Run tsc first\" --kind workflow --applies-when \"before committing\""],
+			run: (ctx) => {
+				const { title, kind } = ctx.opts;
+				const when = ctx.opts["applies-when"];
+				if (!title || !kind || !when) throw new CliError("--title, --kind and --applies-when are required");
+				const l = wrap(() => addLesson({
+					title: String(title),
+					kind,
+					applies_when: String(when),
+					project: ctx.opts.project,
+					body: ctx.opts.body
+				}));
+				console.log(`added ${l.id} [candidate]`);
+				return 0;
+			}
+		},
+		transition("approve", "approved", "Approve a candidate"),
+		transition("reject", "rejected", "Reject a candidate"),
+		{
+			name: "promote",
+			summary: "Promote an approved lesson to a project skill",
+			description: "Writes the lesson as a SKILL.md under <project>/.claude/skills/<slug>/ (and with --agents also <project>/.agents/skills/<slug>/). Refuses to overwrite an existing skill unless --force.",
+			args: [ID],
+			options: [
+				{
+					name: "project",
+					type: "string",
+					value: "DIR",
+					summary: "Project directory (default: this directory)"
+				},
+				{
+					name: "force",
+					type: "boolean",
+					summary: "Overwrite an existing SKILL.md"
+				},
+				{
+					name: "agents",
+					type: "boolean",
+					summary: "Also write under .agents/skills"
+				}
+			],
+			examples: ["pai lessons promote my-lesson --project ~/code/app --agents"],
+			run: (ctx) => {
+				const paths = wrap(() => promoteLesson(ctx.args.ID, {
+					projectDir: ctx.opts.project ?? process.cwd(),
+					force: ctx.opts.force === true,
+					agentsDir: ctx.opts.agents === true
+				}));
+				for (const p of paths) console.log(`promoted ${p}`);
+				return 0;
+			}
+		},
+		{
+			name: "supersede",
+			summary: "Replace an approved lesson by another approved one",
+			description: "Marks ID superseded; the replacement given with --by must exist and be approved.",
+			args: [ID],
+			options: [{
+				name: "by",
+				type: "string",
+				value: "ID2",
+				summary: "The approved lesson that replaces it"
+			}],
+			examples: ["pai lessons supersede old-lesson --by new-lesson"],
+			run: (ctx) => {
+				const by = ctx.opts.by;
+				if (!by) throw new CliError("--by is required");
+				const l = wrap(() => setState(ctx.args.ID, "superseded", { supersededBy: by }));
+				console.log(`${l.id}: superseded by ${by}`);
+				return 0;
+			}
+		},
+		{
+			name: "propose",
+			summary: "Add candidates from a transcript",
+			description: "Finds user messages that correct the assistant (no model call) and adds each as a candidate to review.",
+			args: [{
+				name: "TRANSCRIPT",
+				summary: "Transcript file (default: newest of this directory)"
+			}],
+			examples: ["pai lessons propose", "pai lessons propose ./session.jsonl"],
+			run: (ctx) => {
+				const path = ctx.args.TRANSCRIPT ?? newestTranscriptOfCwd();
+				if (!path) throw new CliError("no transcript found for this directory");
+				const added = wrap(() => proposeFromTranscript(path).map(addLesson));
+				if (added.length === 0) console.log("No corrections found.");
+				for (const l of added) console.log(`added ${l.id} [candidate]  ${l.title}`);
+				return 0;
+			}
+		}
+	]
+};
+
+//#endregion
+//#region src/harness/claude-code.ts
+/**
+* claude-code.ts — adapter over Claude Code's JSONL transcripts:
+* `<claude home>/projects/<encoded cwd>/<session id>.jsonl`. The encoded-cwd
+* spelling is the one PAI already uses everywhere (encodeDir, src/cli/lib/utils.ts).
+*/
+/** Text of a tool_result's content: a string or its text blocks joined. */
+function resultText(c) {
+	if (typeof c === "string") return c;
+	if (Array.isArray(c)) return c.map((b) => b && typeof b === "object" && typeof b.text === "string" ? b.text : "").join("\n");
+	return "";
+}
+/** Exit code a Bash result shows ("Exit code N" header or an exitCode field); else undefined. */
+function exitCodeOf(content) {
+	if (typeof content === "string") {
+		const m = /^Exit code (\d+)/m.exec(content);
+		return m ? Number(m[1]) : void 0;
+	}
+	if (content && typeof content === "object" && !Array.isArray(content)) {
+		const v = content.exitCode;
+		if (typeof v === "number") return v;
+	}
+}
+/** Events of one parsed transcript line; nothing for lines that carry no event. */
+function eventsOfLine(harness, sessionId, obj) {
+	const ts = obj.timestamp ?? "";
+	const content = obj.message?.content;
+	const out = [];
+	const blocks = Array.isArray(content) ? content : [];
+	if (obj.type === "user") {
+		for (const b of blocks) if (b.type === "tool_result") out.push({
+			harness,
+			sessionId,
+			ts,
+			kind: "tool_result",
+			text: resultText(b.content),
+			exitCode: exitCodeOf(b.content),
+			source: "transcript",
+			fidelity: "observed"
+		});
+		if (!obj.isMeta) {
+			const text = typeof content === "string" ? content : blocks.filter((b) => b.type === "text").map((b) => b.text ?? "").join("\n");
+			if (text) out.push({
+				harness,
+				sessionId,
+				ts,
+				kind: "user",
+				text,
+				source: "transcript",
+				fidelity: "observed"
+			});
+		}
+		return out;
+	}
+	if (obj.type === "assistant" && Array.isArray(content)) {
+		for (const b of content) if (b.type === "text" && b.text) out.push({
+			harness,
+			sessionId,
+			ts,
+			kind: "assistant",
+			text: b.text,
+			source: "transcript",
+			fidelity: "observed"
+		});
+		else if (b.type === "tool_use" && b.name) out.push({
+			harness,
+			sessionId,
+			ts,
+			kind: "tool_call",
+			tool: b.name,
+			input: b.input,
+			source: "transcript",
+			fidelity: "observed"
+		});
+	}
+	return out;
+}
+/** Session files under a project dir: top-level `<id>.jsonl` only — the
+*  `sessions/` archive holds hardlinks of the same files, and subagent logs
+*  live in their own subdirs. */
+function sessionFiles(dir) {
+	try {
+		return readdirSync(dir).filter((f) => f.endsWith(".jsonl"));
+	} catch {
+		return [];
+	}
+}
+const CHUNK = 64 * 1024;
+/** Parsed lines of `text`; the first and last may be cut by the chunk edge, so `partialFirst`/`partialLast` drop them. */
+function parseLines(text, partialFirst, partialLast) {
+	const lines = text.split("\n");
+	if (partialFirst) lines.shift();
+	if (partialLast) lines.pop();
+	const out = [];
+	for (const raw of lines) {
+		if (!raw.trim()) continue;
+		try {
+			out.push(JSON.parse(raw));
+		} catch {}
+	}
+	return out;
+}
+/** The session of one transcript, reading only its first and last 64 KB; null when the file vanished. */
+function toSession$1(harness, file, dir) {
+	const id = file.slice(0, -6);
+	const path = join(dir, file);
+	let startedAt;
+	let updatedAt;
+	let cwd;
+	let mtime;
+	try {
+		const size = statSync(path).size;
+		mtime = new Date(statSync(path).mtimeMs).toISOString();
+		try {
+			const fd = openSync(path, "r");
+			try {
+				const read = (pos, len) => {
+					const buf = Buffer.alloc(len);
+					return buf.toString("utf8", 0, readSync(fd, buf, 0, len, pos));
+				};
+				const head = parseLines(read(0, Math.min(size, CHUNK)), false, size > CHUNK);
+				for (const obj of head) {
+					if (typeof obj.cwd === "string" && obj.cwd) cwd ??= obj.cwd;
+					if (typeof obj.timestamp === "string" && obj.timestamp) startedAt ??= obj.timestamp;
+					if (cwd && startedAt) break;
+				}
+				const from = Math.max(0, size - CHUNK);
+				const tail = parseLines(read(from, size - from), from > 0, false);
+				for (const obj of tail) if (typeof obj.timestamp === "string" && obj.timestamp) updatedAt = obj.timestamp;
+			} finally {
+				closeSync(fd);
+			}
+		} catch {}
+	} catch {
+		return null;
+	}
+	return {
+		harness,
+		id,
+		cwd,
+		path,
+		startedAt,
+		updatedAt: updatedAt ?? mtime
+	};
+}
+const claudeCodeAdapter = {
+	name: "claude-code",
+	detect() {
+		return existsSync(claudeProjectsDir());
+	},
+	listSessions(opts = {}) {
+		const projectsDir = claudeProjectsDir();
+		if (!existsSync(projectsDir)) return [];
+		const dirs = opts.cwd ? [encodeDir(opts.cwd)] : readdirSafe(projectsDir);
+		const out = [];
+		for (const d of dirs) {
+			const dir = join(projectsDir, d);
+			if (!existsSync(dir)) continue;
+			for (const f of sessionFiles(dir)) {
+				const sess = toSession$1(this.name, f, dir);
+				if (sess) out.push(sess);
+			}
+		}
+		const since = opts.sinceMs !== void 0 ? Date.now() - opts.sinceMs : void 0;
+		return out.filter((s) => since === void 0 || Date.parse(s.updatedAt) >= since).sort((a, b) => Date.parse(b.updatedAt) - Date.parse(a.updatedAt));
+	},
+	*readEvents(session) {
+		let text;
+		try {
+			text = readFileSync(session.path, "utf8");
+		} catch {
+			return;
+		}
+		for (const raw of text.split("\n")) {
+			if (!raw.trim()) continue;
+			let obj;
+			try {
+				obj = JSON.parse(raw);
+			} catch {
+				continue;
+			}
+			yield* eventsOfLine(this.name, session.id, obj);
+		}
+	}
+};
+function readdirSafe(dir) {
+	try {
+		return readdirSync(dir);
+	} catch {
+		return [];
+	}
+}
+
+//#endregion
+//#region src/harness/codex.ts
+/**
+* codex.ts — adapter over Codex CLI session logs:
+* `<codex home>/sessions/**\/rollout-*.jsonl`. Implemented against the
+* documented rollout shape (JSON lines; `type:"message"` with role
+* user/assistant, `function_call` / `function_call_output`); unknown entry
+* types and malformed lines are skipped rather than failing the session.
+*/
+/** Codex CLI's config dir: CODEX_HOME if set, else ~/.codex. */
+function codexHomeDir() {
+	return process.env.CODEX_HOME || join(homedir(), ".codex");
+}
+/** Plain text of a message payload's content: a string, or text parts joined. */
+function contentText(c) {
+	if (typeof c === "string") return c;
+	if (Array.isArray(c)) return c.map((p) => {
+		if (typeof p === "string") return p;
+		if (p && typeof p === "object") {
+			const o = p;
+			if (typeof o.text === "string") return o.text;
+		}
+		return "";
+	}).filter(Boolean).join("\n");
+	return "";
+}
+/** function_call arguments: parsed as JSON when they are a JSON string. */
+function parseArgs(a) {
+	if (typeof a !== "string") return a;
+	try {
+		return JSON.parse(a);
+	} catch {
+		return a;
+	}
+}
+/** Events of one parsed rollout entry; nothing for entries that carry none. */
+function eventsOfEntry(sessionId, e) {
+	const ts = e.timestamp ?? "";
+	const p = e.payload;
+	if (!p || !p.type) return [];
+	if (p.type === "message" && (p.role === "user" || p.role === "assistant")) {
+		const text = contentText(p.content);
+		if (!text) return [];
+		return [{
+			harness: NAME,
+			sessionId,
+			ts,
+			kind: p.role,
+			text,
+			source: "transcript",
+			fidelity: "observed"
+		}];
+	}
+	if (p.type === "function_call" && p.name) return [{
+		harness: NAME,
+		sessionId,
+		ts,
+		kind: "tool_call",
+		tool: p.name,
+		input: parseArgs(p.arguments),
+		source: "transcript",
+		fidelity: "observed"
+	}];
+	if (p.type === "function_call_output") return [{
+		harness: NAME,
+		sessionId,
+		ts,
+		kind: "tool_result",
+		text: contentText(p.output),
+		source: "transcript",
+		fidelity: "observed"
+	}];
+	return [];
+}
+const NAME = "codex";
+/** rollout-*.jsonl under `dir`, recursing into subdirectories. */
+function rolloutFiles(dir) {
+	const out = [];
+	let entries;
+	try {
+		entries = readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return out;
+	}
+	for (const ent of entries) {
+		const p = join(dir, ent.name);
+		if (ent.isDirectory()) out.push(...rolloutFiles(p));
+		else if (ent.name.startsWith("rollout-") && ent.name.endsWith(".jsonl")) out.push(p);
+	}
+	return out;
+}
+function toSession(file) {
+	const id = file.slice(0, -6).split("/").pop() ?? file;
+	let startedAt;
+	let updatedAt;
+	try {
+		for (const raw of readFileSync(file, "utf8").split("\n")) {
+			if (!raw.trim()) continue;
+			let e;
+			try {
+				e = JSON.parse(raw);
+			} catch {
+				continue;
+			}
+			if (typeof e.timestamp === "string" && e.timestamp) {
+				startedAt ??= e.timestamp;
+				updatedAt = e.timestamp;
+			}
+		}
+	} catch {}
+	const mtime = new Date(statSync(file).mtimeMs).toISOString();
+	return {
+		harness: NAME,
+		id,
+		path: file,
+		startedAt,
+		updatedAt: updatedAt ?? mtime
+	};
+}
+const codexAdapter = {
+	name: NAME,
+	detect() {
+		return existsSync(join(codexHomeDir(), "sessions"));
+	},
+	listSessions(opts = {}) {
+		const root = join(codexHomeDir(), "sessions");
+		if (!existsSync(root)) return [];
+		const out = rolloutFiles(root).map(toSession);
+		const since = opts.sinceMs !== void 0 ? Date.now() - opts.sinceMs : void 0;
+		return out.filter((s) => since === void 0 || Date.parse(s.updatedAt) >= since).sort((a, b) => Date.parse(b.updatedAt) - Date.parse(a.updatedAt));
+	},
+	*readEvents(session) {
+		let text;
+		try {
+			text = readFileSync(session.path, "utf8");
+		} catch {
+			return;
+		}
+		for (const raw of text.split("\n")) {
+			if (!raw.trim()) continue;
+			let e;
+			try {
+				e = JSON.parse(raw);
+			} catch {
+				continue;
+			}
+			yield* eventsOfEntry(session.id, e);
+		}
+	}
+};
+
+//#endregion
+//#region src/harness/index.ts
+/**
+* index.ts — the adapter registry and the enabled set. Implementations are
+* listed here; which of them run is config (`harness.adapters` in the main
+* config, default ["claude-code"]), never a hardcoded enable list.
+*/
+/** Every implementation PAI knows, in display order. */
+const ADAPTERS = [claudeCodeAdapter, codexAdapter];
+/** Names enabled by config: `harness.adapters`, default ["claude-code"]. */
+function enabledHarnessNames(path = paiConfigFilePath()) {
+	const list = effectiveMainConfig(path).harness?.adapters;
+	if (!Array.isArray(list)) return ["claude-code"];
+	return list.filter((n) => typeof n === "string");
+}
+
+//#endregion
+//#region src/cli/commands/harness.ts
+/** `pai harness ...`: sessions PAI can read from agent harnesses (read-only). */
+const fmt = (iso) => Number.isFinite(Date.parse(iso)) ? new Date(iso).toISOString().slice(0, 16).replace("T", " ") : "—";
+function sessionsFor(harness, cwd) {
+	const a = ADAPTERS.find((x) => x.name === harness);
+	if (!a || !a.detect()) return [];
+	return a.listSessions(cwd ? { cwd } : void 0);
+}
+function listCmd$1(opts) {
+	const enabled = new Set(enabledHarnessNames());
+	const rows = ADAPTERS.map((a) => {
+		const detected = a.detect();
+		return [
+			a.name,
+			detected ? ok$1("yes") : dim$1("no"),
+			enabled.has(a.name) ? ok$1("yes") : dim$1("no"),
+			detected ? String(sessionsFor(a.name).length) : dim$1("—")
+		];
+	});
+	if (opts.json) {
+		console.log(JSON.stringify(ADAPTERS.map((a) => ({
+			adapter: a.name,
+			detected: a.detect(),
+			enabled: enabled.has(a.name),
+			sessions: a.detect() ? sessionsFor(a.name).length : void 0
+		})), null, 2));
+		return 0;
+	}
+	console.log(renderTable$1([
+		"adapter",
+		"detected",
+		"enabled",
+		"sessions"
+	], rows));
+	console.log(dim$1(`  enabled set comes from config key harness.adapters (pai config get harness.adapters)`));
+	return 0;
+}
+function sessionsCmd(opts) {
+	const names = opts.harness ? [opts.harness] : enabledHarnessNames();
+	const out = [];
+	for (const name of names) out.push(...sessionsFor(name, opts.cwd));
+	out.sort((a, b) => Date.parse(b.updatedAt) - Date.parse(a.updatedAt));
+	if (opts.json) {
+		console.log(JSON.stringify(out, null, 2));
+		return 0;
+	}
+	if (!out.length) {
+		console.log(dim$1(`  no sessions${opts.cwd ? ` under ${opts.cwd}` : ""} (${names.join(", ")})`));
+		return 0;
+	}
+	console.log(renderTable$1([
+		"harness",
+		"id",
+		"updated",
+		"cwd"
+	], out.map((s) => [
+		s.harness,
+		s.id,
+		fmt(s.updatedAt),
+		s.cwd ? maskSecrets(shortenPath(s.cwd, 48)) : dim$1("—")
+	])));
+	return 0;
+}
+const harnessCommand = {
+	name: "harness",
+	summary: "Sessions PAI can read from agent harnesses (Claude Code, Codex, ...)",
+	description: "Read-only ingestion of other harnesses' session logs. `list` shows each adapter: detected (its store exists), enabled (config key harness.adapters), and its session count. `sessions` lists the sessions themselves.",
+	examples: [
+		"pai harness list",
+		"pai harness sessions",
+		"pai harness sessions --harness codex --cwd ~/proj"
+	],
+	seeAlso: ["pai config get harness.adapters"],
+	subcommands: [{
+		name: "list",
+		summary: "Each adapter: detected, enabled, session count",
+		description: "One row per adapter PAI knows. Only enabled adapters whose store exists are ever read.",
+		options: [{
+			name: "json",
+			type: "boolean",
+			default: false,
+			summary: "Print JSON instead of a table"
+		}],
+		examples: ["pai harness list", "pai harness list --json"],
+		run: (ctx) => listCmd$1({ json: ctx.opts.json === true })
+	}, {
+		name: "sessions",
+		summary: "List sessions, newest first",
+		description: "Sessions of the enabled adapters (or one harness with --harness), optionally limited to one working directory.",
+		options: [
+			{
+				name: "harness",
+				type: "string",
+				value: "NAME",
+				summary: "Only this adapter (default: the enabled set)"
+			},
+			{
+				name: "cwd",
+				type: "string",
+				value: "DIR",
+				summary: "Only sessions of this working directory"
+			},
+			{
+				name: "json",
+				type: "boolean",
+				default: false,
+				summary: "Print JSON instead of a table"
+			}
+		],
+		examples: [
+			"pai harness sessions",
+			"pai harness sessions --harness codex",
+			"pai harness sessions --cwd ~/proj"
+		],
+		run: (ctx) => {
+			const cwd = ctx.opts.cwd;
+			if (cwd && !existsSync(cwd)) {
+				console.log(dim$1(`  no such directory: ${cwd}`));
+				return 0;
+			}
+			return sessionsCmd({
+				harness: ctx.opts.harness,
+				cwd,
+				json: ctx.opts.json === true
+			});
+		}
+	}]
+};
+
+//#endregion
+//#region src/hooks/ts/lib/worker-git-guard.ts
+/** Splits on &&, ||, ;, | and newlines outside quotes. */
+function splitSegments(command) {
+	const out = [];
+	let cur = "";
+	let quote = "";
+	for (let i = 0; i < command.length; i++) {
+		const c = command[i];
+		if (quote) {
+			if (c === quote) quote = "";
+			cur += c;
+		} else if (c === "\"" || c === "'") {
+			quote = c;
+			cur += c;
+		} else if (c === "&" || c === "|" || c === ";" || c === "\n") {
+			out.push(cur);
+			cur = "";
+		} else cur += c;
+	}
+	out.push(cur);
+	return out.map((s) => s.trim()).filter(Boolean);
+}
+
+//#endregion
+//#region src/hooks/ts/lib/rules/eval.ts
+/**
+* eval.ts — run rules against a tool call.
+*
+* Order is fixed: the first block hit wins, else the first confirm hit, else
+* the first warn hit. Text inside quotes is not a command, so rules test the
+* content with quoted strings removed; rules marked `quoted: true` also test
+* it as written and with only the quote marks removed — every builtin block
+* rule whose payload can sit inside `bash -c "..."` is marked, and anchors on
+* command position so a message that merely mentions the payload stays
+* allowed. Confirm rules test per-segment, so a quoted `git push -f` in a commit
+* message stays inert while a quoted `+main` refspec still counts.
+*/
+/** Quoted strings removed: text inside a commit message or echo is not a command. */
+function dropQuoted(segment) {
+	return segment.replace(/"(?:\\.|[^"\\])*"|'[^']*'/g, "\"\"");
+}
+/** A quoted +refspec is still a forced push, so push segments also test with only the quote marks removed. */
+function gitPatternHit(pattern, segment) {
+	const bare = dropQuoted(segment);
+	if (pattern.test(bare)) return true;
+	return /\bgit\b.*\spush\b/.test(bare) && pattern.test(segment.replace(/["']/g, ""));
+}
+const regexCache = /* @__PURE__ */ new Map();
+function ruleRegex(rule) {
+	if (!rule.match) return null;
+	const key = `${rule.match} ${rule.flags ?? ""}`;
+	const cached = regexCache.get(key);
+	if (cached) return cached;
+	try {
+		const re = new RegExp(rule.match, (rule.flags ?? "").replace(/[gy]/g, ""));
+		regexCache.set(key, re);
+		return re;
+	} catch {
+		return null;
+	}
+}
+function toolMatches(rule, toolName) {
+	if (!rule.tool) return toolName === "Bash";
+	try {
+		return new RegExp(rule.tool).test(toolName);
+	} catch {
+		return false;
+	}
+}
+/** First block hit, else first confirm hit, else first warn hit; null when none. */
+function evaluateRules(rules, toolName, content) {
+	const unquoted = content.replace(/["']/g, "");
+	const bare = dropQuoted(content);
+	const segments = splitSegments(content);
+	for (const severity of [
+		"block",
+		"confirm",
+		"warn"
+	]) for (const rule of rules) {
+		if (rule.severity !== severity || !toolMatches(rule, toolName)) continue;
+		const re = ruleRegex(rule);
+		if (!re) continue;
+		if (severity === "confirm" ? segments.some((seg) => gitPatternHit(re, seg)) : re.test(bare) || rule.quoted === true && (re.test(content) || re.test(unquoted))) return { rule };
+	}
+	return null;
+}
+
+//#endregion
+//#region src/hooks/ts/lib/rules/lint.ts
+/**
+* lint.ts — run each rule's own fixtures.
+*
+* Every `tests.match` must hit the rule, every `tests.no_match` must not.
+* A single-step rule's fixtures are plain strings tested as Bash commands; a
+* sequence rule's are lists of step contents, checked step by step (the
+* window and ordering are the scan's business, not the fixtures'). A rule
+* with no fixtures is ok (nothing to check).
+*/
+function stepRegex(step) {
+	try {
+		return new RegExp(step.match, step.flags ?? "");
+	} catch {
+		return null;
+	}
+}
+/**
+* A fixture sequence hits when every step's regex matches its content and its
+* tool pin, when set. A plain string is a Bash-shaped step; an object names
+* the tool, so a rule whose step is pinned to a fetched result (WebFetch,
+* Read) can still carry a fixture that hits. A step whose source
+* backreferences an earlier step's group (`\1`) is checked with that group's
+* capture substituted in — the same resolution the transcript scan applies —
+* so a fixture like download-then-execute's "same file twice" checks the way
+* the scan does.
+*/
+function sequenceHit(rule, steps) {
+	const seqSteps = rule.sequence?.steps ?? [];
+	if (steps.length !== seqSteps.length) return false;
+	const prior = [];
+	for (let i = 0; i < seqSteps.length; i++) {
+		const step = seqSteps[i];
+		const { tool, content } = steps[i];
+		if (step.tool && !new RegExp(step.tool).test(tool ?? "Bash")) return false;
+		if (step.match.includes("\\1") && prior.length) {
+			const cap = prior[0][1];
+			if (!cap) return false;
+			const lit = cap.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+			try {
+				if (!new RegExp(step.match.replace(/\\1/g, () => lit), step.flags ?? "").test(content)) return false;
+			} catch {
+				return false;
+			}
+			continue;
+		}
+		const re = stepRegex(step);
+		if (!re) return false;
+		const m = content.match(re);
+		if (!m) return false;
+		prior.push(m);
+	}
+	return true;
+}
+function asFixtureSteps(t) {
+	if (!Array.isArray(t)) return null;
+	return t.map((s) => typeof s === "string" ? { content: s } : {
+		tool: s.tool,
+		content: s.content
+	});
+}
+function lintRules(rules) {
+	return rules.map((rule) => {
+		const failures = [];
+		const show = (t) => Array.isArray(t) ? t.map((s) => typeof s === "string" ? s : `${s.tool ?? "Bash"}: ${s.content}`).join(" | ") : t;
+		if (rule.sequence) {
+			for (const t of rule.tests?.match ?? []) {
+				const steps = asFixtureSteps(t);
+				if (!steps || !sequenceHit(rule, steps)) failures.push(`tests.match did not hit: ${show(t)}`);
+			}
+			for (const t of rule.tests?.no_match ?? []) {
+				const steps = asFixtureSteps(t);
+				if (steps && sequenceHit(rule, steps)) failures.push(`tests.no_match hit: ${show(t)}`);
+			}
+			return {
+				id: rule.id,
+				ok: failures.length === 0,
+				failures
+			};
+		}
+		for (const text of rule.tests?.match ?? []) {
+			const hit = evaluateRules([rule], "Bash", text);
+			if (!hit || hit.rule.id !== rule.id) failures.push(`tests.match did not hit: ${text}`);
+		}
+		for (const text of rule.tests?.no_match ?? []) {
+			const hit = evaluateRules([rule], "Bash", text);
+			if (hit && hit.rule.id === rule.id) failures.push(`tests.no_match hit: ${text}`);
+		}
+		return {
+			id: rule.id,
+			ok: failures.length === 0,
+			failures
+		};
+	});
+}
+
+//#endregion
+//#region src/cli/commands/rules.ts
+function listCmd(json) {
+	const { rules, errors, ignored } = listRules(userRuleDirs(process.cwd()), { projectDirs: projectRuleDirs(process.cwd()) });
+	if (json) {
+		console.log(JSON.stringify({
+			rules,
+			errors,
+			ignored
+		}, null, 2));
+		return 0;
+	}
+	console.log(renderTable$1([
+		"id",
+		"severity",
+		"source",
+		"enabled"
+	], rules.map((r) => [
+		r.id,
+		r.severity,
+		r.source,
+		r.severity === "off" ? "off" : "on"
+	])));
+	for (const e of errors) console.log(err(`load error: ${e}`));
+	for (const i of ignored) console.log(warn$1(`ignored: ${i}`));
+	return 0;
+}
+function lintCmd(json) {
+	const { rules, errors } = listRules(userRuleDirs(process.cwd()), { projectDirs: projectRuleDirs(process.cwd()) });
+	const enabled = rules.filter((r) => r.severity !== "off");
+	const lints = lintRules(enabled);
+	const failed = lints.filter((l) => !l.ok);
+	if (json) {
+		console.log(JSON.stringify({
+			lints,
+			errors
+		}, null, 2));
+		return failed.length || errors.length ? 1 : 0;
+	}
+	for (const l of lints) {
+		if (l.ok) continue;
+		console.log(err(`✖ ${l.id}`));
+		for (const f of l.failures) console.log(`  ${f}`);
+	}
+	for (const e of errors) console.log(err(`load error: ${e}`));
+	if (!failed.length && !errors.length) {
+		console.log(ok$1(`✔ ${enabled.length} rules, fixtures pass`));
+		return 0;
+	}
+	return 1;
+}
+const rulesCommand = {
+	name: "rules",
+	summary: "Security rules: list them, lint their fixtures",
+	description: "The PreToolUse security rules. Built-ins ship with the package; user rules live in PAI_HOME/rules or .pai/rules as *.rule.yaml files — a user rule with a built-in's id replaces it, severity: off disables it.",
+	examples: ["pai rules list", "pai rules lint"],
+	seeAlso: ["pai audit tokens hooks"],
+	subcommands: [{
+		name: "list",
+		summary: "Every rule with severity, source and enabled state",
+		description: "One row per rule id; a disabled (severity: off) rule shows as off.",
+		options: [{
+			name: "json",
+			type: "boolean",
+			default: false,
+			summary: "Machine-readable JSON output"
+		}],
+		examples: ["pai rules list", "pai rules list --json"],
+		run: (ctx) => listCmd(ctx.opts.json === true)
+	}, {
+		name: "lint",
+		summary: "Run every rule's fixtures; exit 1 on a failure or load error",
+		description: "Each rule's tests.match strings must hit and tests.no_match strings must not. Load errors count as failures.",
+		options: [{
+			name: "json",
+			type: "boolean",
+			default: false,
+			summary: "Machine-readable JSON output"
+		}],
+		examples: ["pai rules lint", "pai rules lint --json"],
+		run: (ctx) => lintCmd(ctx.opts.json === true)
+	}]
+};
+
+//#endregion
+//#region src/hooks/ts/lib/transcript-text.ts
+/**
+* transcript-text.ts — small, pure pieces of transcript parsing that are
+* worth testing in isolation.
+*
+* Split out of context-compression-hook.ts (a hook entrypoint that calls
+* `main()` and `process.exit()` at import time, which makes it unsafe to
+* import directly from a test) so the two bug fixes that live here can be
+* covered by a real regression test rather than only a manual before/after
+* digest.
+*/
+/**
+* Turn Claude content (string or content block array) into plain text.
+*
+* BUG (found in ~1 in 4 injected digests on this machine): a "user" turn is
+* not always something the user typed — a tool_result is also delivered as a
+* user-role message, and its `content` block looks like
+* `{ type: "tool_result", content: [...] }` where the inner `content` is
+* itself an array of blocks, not a string. The old code fell back to
+* `String(c.content)` for anything without a `.text` field, and `String()`
+* on an array of objects produces literal `"[object Object],[object
+* Object]"` — which is exactly what showed up under "Recent user requests".
+* Only ever take the `.text` of a `type: "text"` block; everything else
+* (tool_use, tool_result, image, and any nested content) is ignored rather
+* than stringified.
+*/
+function contentToText(content) {
+	if (typeof content === "string") return content;
+	if (Array.isArray(content)) return content.map((c) => {
+		if (typeof c === "string") return c;
+		if (c && typeof c === "object" && c.type === "text" && typeof c.text === "string") return c.text;
+		return "";
+	}).join(" ").trim();
+	return "";
+}
+
+//#endregion
+//#region src/session/handoff.ts
+/**
+* handoff.ts — a portable, bounded, redacted handoff brief for one session.
+*
+* `pai handoff export` scrapes a Claude Code transcript into a short Markdown
+* brief a successor session can continue from: what was asked, what changed,
+* what ran, and where it stopped. Unlike the model-written context handover
+* this is mechanical — no model call, no prose to hallucinate — and it is
+* redacted (secrets replaced by [REDACTED]) before it is bounded, so a brief
+* can be pasted, mailed or committed without leaking a token.
+*
+* The brief is assembled as sections, masked, then cut to `maxBytes` from the
+* oldest end (Recent commands first, then Last steps) with a marker line, so
+* the parts a successor needs most (Session, requests, files) survive first.
+*/
+/** Default brief size: comfortably under what a successor can read in one turn. */
+const HANDOFF_MAX_BYTES = 49152;
+/** Most distinct files listed under "Files changed". */
+const MAX_FILES = 50;
+/** Most Bash commands listed under "Recent commands". */
+const MAX_COMMANDS = 20;
+/** Most assistant text messages listed under "Last steps". */
+const MAX_STEPS = 10;
+/** Each "Last steps" entry is truncated to this many characters. */
+const STEP_CHARS = 400;
+/** Tools whose input carries a changed file. */
+const FILE_TOOLS = new Set([
+	"Edit",
+	"Write",
+	"MultiEdit"
+]);
+/** The last assistant text message of a transcript, or null when there is none. */
+function lastAssistantText(entries) {
+	for (let i = entries.length - 1; i >= 0; i--) {
+		const entry = entries[i];
+		if (entry.type !== "assistant" || !Array.isArray(entry.message?.content)) continue;
+		const text = entry.message.content.filter((p) => p?.type === "text" && typeof p.text === "string").map((p) => p.text).join("\n").trim();
+		if (text) return text;
+	}
+	return null;
+}
+/** First user text message that looks like something typed, not an injected block. */
+function firstUserText(entries) {
+	for (const entry of entries) {
+		if (entry.type !== "user") continue;
+		const content = entry.message?.content;
+		const text = typeof content === "string" ? content : contentToText(content);
+		if (text.trim()) return text.trim();
+	}
+	return null;
+}
+/** Last user text message — the request the session was working on. */
+function lastUserText(entries) {
+	for (let i = entries.length - 1; i >= 0; i--) {
+		const entry = entries[i];
+		if (entry.type !== "user") continue;
+		const content = entry.message?.content;
+		const text = typeof content === "string" ? content : contentToText(content);
+		if (text.trim()) return text.trim();
+	}
+	return null;
+}
+/**
+* Exit code of a Bash tool_result, when the transcript records one.
+* Claude Code serialises Bash results as plain text; an interrupted command
+* reads "Exit code N", and a JSON payload carries `interrupted`/`success`.
+*/
+function bashExitCode(result) {
+	if (result.is_error === true) return null;
+	const text = contentToText(result.content);
+	const m = text.match(/Exit code (\d+)/);
+	if (m) return Number(m[1]);
+	try {
+		const parsed = JSON.parse(text);
+		if (parsed.interrupted === true) return null;
+		if (parsed.success === false) return null;
+	} catch {}
+	return 0;
+}
+/**
+* Build the handoff brief for one transcript: Markdown, secrets masked,
+* cut to `maxBytes` whole sections from the oldest end with a marker line.
+*
+* @param transcriptPath  a Claude Code session transcript (.jsonl)
+*/
+function buildHandoffBrief(transcriptPath, opts = {}) {
+	const maxBytes = opts.maxBytes ?? HANDOFF_MAX_BYTES;
+	const raw = readFileSync(transcriptPath, "utf8");
+	const entries = [];
+	for (const line of raw.split("\n")) {
+		if (!line.trim()) continue;
+		try {
+			entries.push(JSON.parse(line));
+		} catch {}
+	}
+	const sessionId = basename(transcriptPath).replace(/\.jsonl$/, "") || "unknown";
+	const cwd = entries.find((e) => e.cwd)?.cwd ?? "";
+	const first = entries.find((e) => e.timestamp)?.timestamp ?? "";
+	const last = [...entries].reverse().find((e) => e.timestamp)?.timestamp ?? "";
+	const files = [];
+	const seen = /* @__PURE__ */ new Set();
+	const commands = [];
+	const steps = [];
+	const results = /* @__PURE__ */ new Map();
+	for (const entry of entries) {
+		const content = entry.message?.content;
+		if (!Array.isArray(content)) continue;
+		for (const part of content) if (part?.type === "tool_result" && typeof part.tool_use_id === "string") results.set(part.tool_use_id, part);
+	}
+	for (const entry of entries) {
+		const content = entry.message?.content;
+		if (!Array.isArray(content)) continue;
+		for (const part of content) if (part?.type === "tool_use" && part.name && FILE_TOOLS.has(part.name)) {
+			const path = part.input?.file_path;
+			if (typeof path === "string" && !seen.has(path)) {
+				seen.add(path);
+				files.push(path);
+			}
+		} else if (part?.type === "tool_use" && part.name === "Bash") {
+			const command = typeof part.input?.command === "string" ? part.input.command : "";
+			if (command) {
+				const code = part.id ? results.get(part.id) : void 0;
+				const exit = code ? bashExitCode(code) : null;
+				commands.push(exit === null ? command : `${command}  [exit ${exit}]`);
+			}
+		} else if (part?.type === "text" && typeof part.text === "string" && entry.type === "assistant") {
+			const text = part.text.trim();
+			if (text) steps.push(text.length > STEP_CHARS ? `${text.slice(0, STEP_CHARS)}…` : text);
+		}
+	}
+	const sections = {
+		Session: [
+			`- id: ${sessionId}`,
+			`- cwd: ${cwd}`,
+			`- start: ${first}`,
+			`- end: ${last}`
+		].join("\n"),
+		"First request": firstUserText(entries) ?? "(none)",
+		"Latest request": lastUserText(entries) ?? "(none)",
+		"Files changed": files.slice(0, MAX_FILES).map((f) => `- ${f}`).join("\n") || "(none)",
+		"Recent commands": commands.slice(-MAX_COMMANDS).map((c) => `- ${c}`).join("\n") || "(none)",
+		"Last steps": steps.slice(-MAX_STEPS).map((s) => `- ${s}`).join("\n") || "(none)",
+		"Where it stopped": lastAssistantText(entries) ?? "(no assistant message)"
+	};
+	const masked = maskSecrets(Object.entries(sections).map(([title, body]) => `## ${title}\n${body}`).join("\n\n"));
+	if (Buffer.byteLength(masked, "utf8") <= maxBytes) return masked;
+	const note = `\n\n[truncated to ${maxBytes} bytes]`;
+	const budget = maxBytes - Buffer.byteLength(note, "utf8");
+	const render = (parts) => Object.entries(parts).map(([title, body]) => `## ${title}\n${body}`).join("\n\n");
+	const order = ["Recent commands", "Last steps"];
+	const kept = { ...sections };
+	for (const name of order) {
+		delete kept[name];
+		const text = render(kept);
+		if (Buffer.byteLength(text, "utf8") <= budget) return text + note;
+	}
+	kept["Where it stopped"] = (kept["Where it stopped"] ?? "").split("\n")[0].slice(0, 200);
+	const text = render(kept);
+	if (Buffer.byteLength(text, "utf8") <= budget) return text + note;
+	return Buffer.from(text, "utf8").subarray(0, Math.max(0, budget)).toString("utf8") + note;
+}
+/** `yyyymmdd-hhmm` in local time, for the handoff file name. */
+function stamp(d = /* @__PURE__ */ new Date()) {
+	const p = (n) => String(n).padStart(2, "0");
+	return `${d.getFullYear()}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}`;
+}
+/** The handoffs directory under PAI_HOME. */
+function handoffsDir() {
+	return paiHomePath("handoffs");
+}
+/**
+* Write a handoff brief into <PAI_HOME>/handoffs/<sessionId>-<yyyymmdd-hhmm>.md
+* (dir 0700, file 0600) and return its path.
+*/
+function writeHandoff(brief, sessionId) {
+	const dir = handoffsDir();
+	mkdirSync(dir, {
+		recursive: true,
+		mode: 448
+	});
+	const path = join(dir, `${sessionId}-${stamp()}.md`);
+	writeFileSync(path, brief, { mode: 384 });
+	return path;
+}
+/** Newest transcript of a cwd, newest first; null when the project has none. */
+function sessionTranscripts(cwd) {
+	const dir = join(claudeProjectsDir(), encodeDir(cwd));
+	let names;
+	try {
+		names = readdirSync(dir);
+	} catch {
+		return [];
+	}
+	return names.filter((n) => n.endsWith(".jsonl")).map((n) => join(dir, n)).map((path) => ({
+		path,
+		mtime: safeMtime(path)
+	})).filter((f) => f.mtime !== null).sort((a, b) => b.mtime - a.mtime).map((f) => f.path);
+}
+function safeMtime(path) {
+	try {
+		return statSync(path).mtimeMs;
+	} catch {
+		return null;
+	}
+}
+/** Resolve a session id (or transcript path) in a cwd to its transcript path. */
+function resolveTranscript(session, cwd) {
+	if (session && session.endsWith(".jsonl")) return session;
+	const dir = join(claudeProjectsDir(), encodeDir(cwd));
+	if (session) {
+		const direct = join(dir, `${session}.jsonl`);
+		try {
+			statSync(direct);
+			return direct;
+		} catch {
+			const archived = join(dir, "sessions", `${session}.jsonl`);
+			try {
+				statSync(archived);
+				return archived;
+			} catch {
+				return null;
+			}
+		}
+	}
+	return sessionTranscripts(cwd)[0] ?? null;
+}
+/** The session id a transcript path carries (its file name). */
+function sessionIdOf(transcriptPath) {
+	return basename(transcriptPath).replace(/\.jsonl$/, "");
+}
+
+//#endregion
+//#region src/cli/commands/handoff.ts
+/** `pai handoff ...`: export a session's work as a portable, redacted brief. */
+function exportCmd(ctx) {
+	const cwd = process.cwd();
+	const session = ctx.args.SESSION;
+	const transcript = resolveTranscript(session, cwd);
+	if (!transcript) throw new CliError(session ? `no transcript for session ${session} in ${cwd}` : `no session transcripts in ${cwd}`, "pai handoff export <SESSION> — or run it inside the project the session worked in");
+	const sessionId = sessionIdOf(transcript);
+	const path = writeHandoff(buildHandoffBrief(transcript), sessionId);
+	console.log(path);
+	console.log(`Continue with: claude "Read ${path} and continue. [pai-handoff from=${sessionId}]"`);
+	return 0;
+}
+function showCmd(ctx) {
+	const path = ctx.args.PATH;
+	try {
+		process.stdout.write(readFileSync(path, "utf8"));
+	} catch {
+		throw new CliError(`cannot read ${path}`, "pai handoff export first, then pai handoff show <PATH>");
+	}
+	return 0;
+}
+const handoffCommand = {
+	name: "handoff",
+	summary: "Carry a session's work to a new one",
+	description: "Exports a session transcript as a short, redacted Markdown brief (requests, files changed, recent commands, where it stopped) and prints the line to continue with. The brief never goes on the command line — only its path does. A `[pai-handoff from=<id>]` marker in the next session's first prompt is recorded in the handoff link log.",
+	examples: [
+		"pai handoff export",
+		"pai handoff export 2026-10-22-session-id",
+		"pai handoff show ~/.pai/handoffs/abc-20261022-1430.md"
+	],
+	seeAlso: ["pai audit tokens session"],
+	subcommands: [{
+		name: "export",
+		summary: "Write the brief for a session (default: newest here)",
+		description: "Prints the brief's path and the one-line continue hint. Secrets in the transcript are replaced with [REDACTED]; the brief is bounded to 48 KB.",
+		args: [{
+			name: "SESSION",
+			summary: "Session id or transcript path (default: newest transcript of the current directory)"
+		}],
+		examples: ["pai handoff export", "pai handoff export 2026-10-22-session-id"],
+		run: exportCmd
+	}, {
+		name: "show",
+		summary: "Print a handoff brief",
+		description: "Prints a brief written by `pai handoff export`.",
+		args: [{
+			name: "PATH",
+			required: true,
+			summary: "Brief file"
+		}],
+		examples: ["pai handoff show ~/.pai/handoffs/abc-20261022-1430.md"],
+		run: showCmd
 	}]
 };
 
@@ -27306,7 +29195,8 @@ const GROUPS = [
 			endTop,
 			resumeTop,
 			clearNamesCmd,
-			sessionsCommand
+			sessionsCommand,
+			handoffCommand
 		]
 	},
 	{
@@ -27344,9 +29234,10 @@ const GROUPS = [
 		]
 	}))
 ];
-GROUPS.find((g) => g.id === "memory").commands.push(memoryCommand, kgCommand, zettelCommand, observationCommand, obsidianCommand, skillCommand);
+GROUPS.find((g) => g.id === "memory").commands.push(memoryCommand, kgCommand, zettelCommand, observationCommand, obsidianCommand, skillCommand, lessonsCommand);
 GROUPS.find((g) => g.id === "workers").commands.push(modelsCommand);
-GROUPS.find((g) => g.id === "daemon").commands.push(auditCommand, reloadCommand);
+GROUPS.find((g) => g.id === "daemon").commands.push(auditCommand, harnessCommand, reloadCommand, rulesCommand);
+GROUPS.find((g) => g.id === "memory").commands.push(gitCommand);
 
 //#endregion
 //#region src/cli/index.ts