@timqi/pier 0.0.19 → 0.0.21

package/dist/tasks/definitions.js

@@ -127,11 +127,13 @@ export class TaskDefinitions {
     factory;
     router;
     hub;
-    constructor(store, factory, router, hub) {
+    systemActions;
+    constructor(store, factory, router, hub, systemActions = {}) {
         this.store = store;
         this.factory = factory;
         this.router = router;
         this.hub = hub;
+        this.systemActions = systemActions;
     }
     list() { return this.store.listTasks(); }
     get(id) {
@@ -145,7 +147,7 @@ export class TaskDefinitions {
         // means manual. Update keeps requiring it: replacing a cron task with a
         // draft that forgot its trigger must not silently unschedule it.
         const value = record(raw);
-        const draft = await this.parseDraft(value && value.trigger === undefined ? { ...value, trigger: { type: "manual" } } : raw);
+        const draft = await this.parseDraft(value && value.trigger === undefined ? { ...value, trigger: { type: "manual" } } : raw, creator);
         const now = Date.now();
         const task = {
             id: newId(),
@@ -176,7 +178,7 @@ export class TaskDefinitions {
         this.assertOwner(old, by, "edited");
         if (old.archived)
             throw new Error("archived tasks cannot be edited");
-        const draft = await this.parseDraft(raw);
+        const draft = await this.parseDraft(raw, ownerOf(old) ? by : undefined);
         const now = Date.now();
         const task = {
             ...old,
@@ -252,7 +254,17 @@ export class TaskDefinitions {
             throw new Error(`"${task.name}" is Pier's own ${owner} task: it is reconciled by Pier, not ${what}`);
         }
     }
-    async parseDraft(raw) {
+    /** Checked again at execution: persisted definitions can outlive registration. */
+    systemAction(name, owner) {
+        if (!owner || owner === "http" || owner.startsWith("session:") || owner !== name) {
+            throw new Error(`system action "${name}" requires its trusted owner`);
+        }
+        if (!Object.hasOwn(this.systemActions, name) || typeof this.systemActions[name] !== "function") {
+            throw new Error(`unregistered system action: ${name}`);
+        }
+        return this.systemActions[name];
+    }
+    async parseDraft(raw, owner) {
         const value = record(raw);
         if (!value)
             throw new Error("task definition required");
@@ -279,8 +291,13 @@ export class TaskDefinitions {
             this.get(taskId);
             action = { type: "task", taskId };
         }
+        else if (actionRaw.type === "system") {
+            const name = requiredString(actionRaw.name, "system action name");
+            this.systemAction(name, owner);
+            action = { type: "system", name };
+        }
         else if (actionRaw.type === "agent") {
-            action = await this.parseAgentAction(actionRaw, trigger);
+            action = await this.parseAgentAction(actionRaw);
         }
         else
             throw new Error("unknown action type");
@@ -294,7 +311,7 @@ export class TaskDefinitions {
             timeoutSeconds,
         };
     }
-    async parseAgentAction(raw, trigger) {
+    async parseAgentAction(raw) {
         const prompt = requiredString(raw.prompt, "agent prompt");
         const launch = parseLaunch(raw.launch);
         const input = record(raw.session);
@@ -310,21 +327,13 @@ export class TaskDefinitions {
             await this.assertDirectory(cwd);
             session = { mode: "fresh", cwd };
         }
-        else if (input?.mode === "fork") {
-            if (trigger.type !== "manual")
-                throw new Error("fork Agent tasks must use a manual trigger");
-            const cwd = typeof input.cwd === "string" && input.cwd.trim() ? input.cwd.trim() : undefined;
-            if (cwd)
-                await this.assertDirectory(cwd);
-            session = { mode: "fork", ...(cwd ? { cwd } : {}) };
-        }
         else {
             // Validation never mutates: a dedicated session is created explicitly
             // (POST /api/sessions) and then referenced with mode:"reuse".
-            throw new Error('agent session policy required, e.g. {"mode":"fresh","cwd":"/abs/path"} or {"mode":"fork"} or {"mode":"reuse","sessionId":"..."}');
+            throw new Error('agent session policy required, e.g. {"mode":"fresh","cwd":"/abs/path"} or {"mode":"reuse","sessionId":"..."}');
         }
         if (session.mode === "reuse" && launch)
-            throw new Error("launch policy only applies to fresh or fork sessions");
+            throw new Error("launch policy only applies to fresh sessions");
         return { type: "agent", session, prompt, ...(launch ? { launch } : {}) };
     }
     async parseCallback(raw) {

package/dist/tasks/execution.js

@@ -1,7 +1,7 @@
 // One queued run carried to a result: dispatched by action kind (a bash
-// script, an agent session, another task), abortable while it goes, settled
-// exactly once. What the two action kinds actually do lives in command.ts and
-// agent.ts; this file owns only the lifecycle they share.
+// script, an agent session, another task or an owned system action), abortable
+// while it goes, settled exactly once. Command and agent work lives in
+// command.ts and agent.ts; this file owns the lifecycle they share.
 import { logger } from "../log.js";
 import { AgentTaskRunner } from "./agent.js";
 import { TaskCallbacks } from "./callbacks.js";
@@ -125,6 +125,14 @@ export class TaskExecution {
             }
             return output;
         }
+        if (action.type === "system") {
+            this.markRunning(run);
+            const handler = this.definitions.systemAction(action.name, run.context.definition.creator);
+            signal.throwIfAborted();
+            const text = await handler(signal);
+            signal.throwIfAborted();
+            return { type: "system", text };
+        }
         if (action.type === "task") {
             this.markRunning(run);
             const child = this.host.runChild(action.taskId, run);

package/dist/tasks/messages.js

@@ -95,6 +95,30 @@ export class TaskMessenger {
                 this.changed(message);
                 continue;
             }
+            // A reply that resumed a terminal run was never a system input: its text
+            // is the continuation's prompt, so the transcript read below would find
+            // nothing and re-inject a second copy, starting a turn no run owns. The
+            // continuation is the proof instead. `startedAt` is written one statement
+            // before the prompt reaches the session (agent.ts), so `delivered` here
+            // means "handed to the run that reports for it" — a `systemInput` that
+            // then throws fails *that* run, and the failure reaches the replier
+            // through its callback.
+            if (message.kind === "reply" && isTerminal(run.state)) {
+                const resumed = message.resumeRunId ? this.store.getRun(message.resumeRunId) : undefined;
+                if (resumed?.startedAt)
+                    this.confirmed(message.id);
+                else if (!resumed)
+                    this.abandon(message, `continuation ${message.resumeRunId ?? "(none)"} is gone`);
+                else if (isTerminal(resumed.state)) {
+                    // Never started, and never will: say so rather than wait for a
+                    // ceiling that would only report the same thing four minutes later.
+                    // Both ends hear it here; the supervisor may also get the
+                    // continuation's own cancelled callback, and a duplicate beats a
+                    // special case that could suppress the only report either gets.
+                    this.abandon(message, `continuation ${resumed.id} ${resumed.state} before it started`);
+                }
+                continue;
+            }
             if ((message.nextAttemptAt ?? 0) > now)
                 continue;
             const target = message.toSessionId || run.targetSessionId;
@@ -148,9 +172,11 @@ export class TaskMessenger {
             this.deliver(reply, run, run.targetSessionId);
         }
         else if (isTerminal(run.state)) {
-            this.resumeRun(run.id, this.format(reply, run), fromSessionId);
-            reply.state = "delivered";
-            reply.deliveredAt = Date.now();
+            // Creating the continuation is not delivering the reply: the run is
+            // queued, and a restart or a cancel before it starts loses the prompt
+            // that carries the text. So the id is recorded and the sweep below
+            // settles it against the continuation's own `startedAt`.
+            reply.resumeRunId = this.resumeRun(run.id, this.format(reply, run), fromSessionId).id;
             this.store.saveMessage(reply);
             this.changed(reply);
         }
@@ -208,6 +234,17 @@ export class TaskMessenger {
         this.store.saveMessage(message);
         this.changed(message);
     }
+    /** Waiting is not a failed attempt: the message is in flight or the turn it
+     *  has to wait for is still running, so it is tried again shortly and the
+     *  ceiling is left for the deliveries that actually failed (the rule
+     *  outbox.ts keeps for callbacks). */
+    defer(id) {
+        const message = this.store.getMessage(id);
+        if (!message || message.state !== "pending")
+            return;
+        message.nextAttemptAt = Date.now() + 1000;
+        this.store.saveMessage(message);
+    }
     /** Counts one hand-off and says whether it may happen: a recipient that
      *  never records the message must not be re-sent once a second forever.
      *  False means the ceiling was reached and the message is now expired. */
@@ -247,10 +284,12 @@ export class TaskMessenger {
             this.store.saveRun(run);
         }
     }
-    /** A decision steers — a follow-up would land only after the supervisor runs
-     * out of tool calls, leaving the child waiting out the whole turn. */
+    /** Steer whatever someone is blocked on: a decision, and the reply that
+     * answers it — a follow-up lands only once the recipient runs out of tool
+     * calls, so each would wait out a whole turn (the reply waited 3 minutes
+     * behind one on 2026-09-07). Progress is a follow-up because nobody waits. */
     mode(message) {
-        return message.kind === "steer" || message.kind === "decision" ? "steer" : "follow_up";
+        return message.kind === "follow_up" || message.kind === "progress" ? "follow_up" : "steer";
     }
     failed(id, error, spent) {
         const message = this.store.getMessage(id);
@@ -285,14 +324,13 @@ export class TaskMessenger {
             const recorded = async () => (await session.history()).some((turn) => turn.role === "system" && turn.origin?.kind === "task-message" && turn.origin.messageId === message.id);
             if (await recorded())
                 return this.confirmed(message.id);
-            // Accepted and waiting in Pi's queue for the running turn to drain it:
-            // not recorded yet, and sending again would deliver the same steer twice.
-            // Unlike a callback this is not deferred — a steer's whole point is to
-            // reach the turn already running — so the queue is where it sits, and
-            // waiting for it to drain costs no attempt.
-            const queue = await session.pendingQueue();
-            if ([...queue.steering, ...queue.followUp].some((text) => text.includes(message.id)))
-                return;
+            // Accepted and waiting in the recipient's queue for the running turn to
+            // drain it: not recorded yet, and sending again would deliver the same
+            // guidance twice. Unlike a callback this is not deferred on a busy
+            // target — a steer's whole point is to reach the turn already running —
+            // so the queue is where it sits, and waiting for it costs no attempt.
+            if (await this.queued(session, message.id))
+                return this.defer(message.id);
             spent = this.spend(message.id);
             if (!spent)
                 return;
@@ -304,6 +342,11 @@ export class TaskMessenger {
             this.failed(message.id, error, spent);
         }
     }
+    /** In the recipient's queue, by the id its origin carries — the transcript
+     *  read above answers "landed", this answers "handed over and waiting". */
+    async queued(session, id) {
+        return (await session.pendingSystemInputs()).some((origin) => origin.kind === "task-message" && origin.messageId === id);
+    }
     format(message, run) {
         const title = run.context.definition.name;
         if (message.kind === "progress") {

package/dist/tasks/routes.js

@@ -3,6 +3,47 @@
 // its body, names the caller and hands the decision to TaskService — policy
 // that lives here would be policy the task tool does not get.
 import { record, requiredString } from "./definitions.js";
+/** Reject malformed filters instead of silently widening a global query. */
+function runQuery(params) {
+    const query = {};
+    const states = ["queued", "running", "succeeded", "failed", "cancelled", "interrupted", "skipped"];
+    const sources = ["manual", "cron", "watch", "agent", "task"];
+    if (params.state) {
+        if (!states.includes(params.state))
+            throw new Error("invalid state");
+        query.state = params.state;
+    }
+    if (params.source) {
+        if (!sources.includes(params.source))
+            throw new Error("invalid source");
+        query.source = params.source;
+    }
+    if (params.taskId)
+        query.taskId = params.taskId;
+    for (const key of ["since", "until", "limit"]) {
+        if (params[key] === undefined)
+            continue;
+        const value = Number(params[key]);
+        if (!params[key] || !Number.isSafeInteger(value) || value < 0 || (key === "limit" && (value < 1 || value > 200)))
+            throw new Error(`invalid ${key}`);
+        query[key] = value;
+    }
+    if (query.since !== undefined && query.until !== undefined && query.since > query.until)
+        throw new Error("since exceeds until");
+    if (params.showUnmatched !== undefined) {
+        if (!["true", "false"].includes(params.showUnmatched))
+            throw new Error("invalid showUnmatched");
+        query.showUnmatched = params.showUnmatched === "true";
+    }
+    if (params.cursor) {
+        const cursor = JSON.parse(params.cursor);
+        const value = record(cursor);
+        if (!value || !Number.isSafeInteger(value.queuedAt) || Number(value.queuedAt) < 0 || typeof value.id !== "string" || !value.id)
+            throw new Error("invalid cursor");
+        query.cursor = { queuedAt: Number(value.queuedAt), id: value.id };
+    }
+    return query;
+}
 const jsonBody = async (req) => req.json().catch(() => null);
 export function registerTaskRoutes(app, tasks, activity) {
     if (activity)
@@ -50,13 +91,21 @@ export function registerTaskRoutes(app, tasks, activity) {
                 messages,
             });
         });
+    app.get("/api/task-runs", (c) => {
+        try {
+            return c.json(tasks.queryRuns(runQuery(c.req.query())));
+        }
+        catch (err) {
+            return c.json({ error: String(err) }, 400);
+        }
+    });
     app.get("/api/tasks", (c) => {
         const trigger = c.req.query("trigger");
         const state = c.req.query("state");
         const kind = c.req.query("kind");
         let rows = tasks.list();
         // Subagent one-shots are hidden unless explicitly requested via ?kind=subagent.
-        rows = kind ? rows.filter((task) => task.kind === kind) : rows.filter((task) => task.kind !== "subagent");
+        rows = rows.filter((task) => task.kind === (kind ?? "task"));
         if (trigger)
             rows = rows.filter((task) => task.trigger.type === trigger);
         if (state === "archived")
@@ -93,10 +142,7 @@ export function registerTaskRoutes(app, tasks, activity) {
     });
     app.get("/api/task-runs/:id", (c) => {
         try {
-            const run = tasks.getRun(c.req.param("id"));
-            // Same view as the task tool: a pending decision is the one run fact that
-            // lives on the messages, and HTTP callers need it too.
-            return c.json({ ...run, pendingDecisionId: tasks.openDecisionId(run.id) });
+            return c.json(tasks.getRunView(c.req.param("id")));
         }
         catch (err) {
             return c.json({ error: String(err) }, 404);
@@ -181,13 +227,15 @@ export function registerTaskRoutes(app, tasks, activity) {
         const body = record(await jsonBody(c.req));
         const input = body && "input" in body ? body.input : null;
         try {
-            const sessionMode = body?.sessionMode === "fresh" || body?.sessionMode === "fork" ? body.sessionMode : undefined;
+            // A caller that names a mode gets an answer about it: dropping an
+            // unsupported override would run the definition's own policy instead —
+            // on a reuse definition, work injected into a live session.
+            if (body?.sessionMode !== undefined && body.sessionMode !== "fresh") {
+                throw new Error(`unsupported sessionMode: ${String(body.sessionMode)}`);
+            }
+            const sessionMode = body?.sessionMode;
             const sourceSessionId = typeof body?.sourceSessionId === "string" && body.sourceSessionId ? body.sourceSessionId : null;
             const task = tasks.get(c.req.param("id"));
-            const effectiveMode = task.action.type === "agent" ? sessionMode ?? task.action.session.mode : null;
-            if (effectiveMode === "fork" && (!sourceSessionId || !(await tasks.sessionExists(sourceSessionId)))) {
-                throw new Error("fork requires a known sourceSessionId");
-            }
             return c.json({ runId: tasks.run(task.id, input, "manual", null, {
                     invokedBySessionId: sourceSessionId,
                     sourceSessionId,

package/dist/tasks/runs.js

@@ -38,11 +38,6 @@ export class TaskRunQueue {
         const sessionMode = definition.action.type === "agent"
             ? provenance.sessionMode ?? definition.action.session.mode
             : null;
-        if (sessionMode === "fork" && !sourceSessionId)
-            throw new Error("fork requires a source session");
-        if (sessionMode === "fork" && (source === "cron" || source === "watch")) {
-            throw new Error("scheduled and watch runs cannot fork a caller session");
-        }
         const targetSessionId = provenance.targetSessionId ?? (definition.action.type === "agent" && sessionMode === "reuse" && definition.action.session.mode === "reuse"
             ? definition.action.session.sessionId
             : null);

package/dist/tasks/service.js

@@ -44,7 +44,7 @@ export class TaskService {
         this.instance = instance;
         const unreachable = (sessionId, what, why) => this.unreachable(sessionId, what, why);
         this.messages = new TaskMessenger(store, router, hub, (runId, prompt, fromSessionId) => this.resume(runId, prompt, { invokedBySessionId: fromSessionId, callbackSessionId: fromSessionId, background: true }), unreachable);
-        this.definitions = new TaskDefinitions(store, factory, router, hub);
+        this.definitions = new TaskDefinitions(store, factory, router, hub, instance?.systemActions);
         this.callbacks = new TaskCallbacks(store, router, (run) => this.changed(run), unreachable);
         this.groups = new TaskGroups(store, router, {
             getRun: (id) => this.getRun(id),
@@ -164,9 +164,6 @@ export class TaskService {
     archive(id, by) {
         return this.definitions.archive(id, by);
     }
-    sessionExists(sessionId) {
-        return this.definitions.sessionExists(sessionId);
-    }
     listRuns(taskId, limit = 50, offset = 0) {
         this.get(taskId);
         return this.store.listRuns(taskId, Math.min(Math.max(limit, 1), 200), Math.max(offset, 0));
@@ -177,6 +174,11 @@ export class TaskService {
             throw new Error(`unknown task run: ${id}`);
         return run;
     }
+    getRunView(id) {
+        const run = this.getRun(id);
+        return { ...run, pendingDecisionId: this.openDecisionId(id),
+            groupCallbackState: run.groupId ? this.store.getGroup(run.groupId)?.callbackState ?? null : null };
+    }
     listMessages(runId) {
         this.getRun(runId);
         return this.messages.list(runId);
@@ -184,6 +186,9 @@ export class TaskService {
     openDecisionId(runId) {
         return this.messages.openDecisionId(runId);
     }
+    queryRuns(query = {}) {
+        return this.store.queryRuns(query);
+    }
     recentRuns(limit = 100) {
         return this.store.listRecentRuns(limit);
     }

package/dist/tasks/store.js

@@ -5,9 +5,11 @@
 import { pierDb, statements } from "../db.js";
 const clamp = (limit, cap) => Math.min(Math.max(limit, 1), cap);
 export class TaskStore {
+    db;
     /** Every query below is a fixed string, so each is compiled once. */
     sql;
     constructor(db = pierDb()) {
+        this.db = db;
         this.sql = statements(db);
     }
     // Every table is one JSON column plus query columns; these two are the only
@@ -56,6 +58,49 @@ export class TaskStore {
         state=excluded.state, callback_state=excluded.callback_state, json=excluded.json
     `).run(run.id, run.taskId, run.queuedAt, run.state, run.callbackState, JSON.stringify(run));
     }
+    /** The global list: filters precede the limit, and the id breaks timestamp
+     *  ties so a page boundary never repeats or skips a row. The statement is
+     *  built per call and not cached — the filter set makes it. */
+    queryRuns(query = {}) {
+        const where = [];
+        const params = [];
+        const add = (sql, value) => {
+            if (value !== undefined) {
+                where.push(sql);
+                params.push(value);
+            }
+        };
+        add("r.state = ?", query.state);
+        add("r.task_id = ?", query.taskId);
+        add("json_extract(r.json, '$.triggerSource') = ?", query.source);
+        add("r.queued_at >= ?", query.since);
+        add("r.queued_at <= ?", query.until);
+        // Keep this predicate identical to migration 17's partial index.
+        if (!query.showUnmatched)
+            where.push("NOT (r.state = 'succeeded' AND json_extract(r.json, '$.matched') IS 0)");
+        if (query.cursor) {
+            where.push("(r.queued_at, r.id) < (?, ?)");
+            params.push(query.cursor.queuedAt, query.cursor.id);
+        }
+        const limit = clamp(query.limit ?? 50, 200);
+        const rows = this.db.prepare(`
+      SELECT r.json, g.callback_state AS group_callback_state,
+        (SELECT m.id FROM task_messages m WHERE m.run_id = r.id
+          AND m.state IN ('pending', 'delivered') AND json_extract(m.json, '$.kind') = 'decision'
+          ORDER BY m.created_at, m.id LIMIT 1) AS decision_id
+      FROM task_runs r LEFT JOIN task_groups g ON g.id = json_extract(r.json, '$.groupId')
+      ${where.length ? `WHERE ${where.join(" AND ")}` : ""}
+      ORDER BY r.queued_at DESC, r.id DESC LIMIT ?
+    `).all(...params, limit + 1);
+        const runs = rows.slice(0, limit).map((row) => ({
+            ...JSON.parse(row.json), pendingDecisionId: row.decision_id, groupCallbackState: row.group_callback_state,
+        }));
+        const last = runs.at(-1);
+        return {
+            runs,
+            nextCursor: rows.length > limit && last ? { queuedAt: last.queuedAt, id: last.id } : null,
+        };
+    }
     listRecentRuns(limit = 100) {
         return this.#many("SELECT json FROM task_runs ORDER BY queued_at DESC LIMIT ?", clamp(limit, 500));
     }

package/dist/tasks/tool.js

@@ -78,7 +78,6 @@ const DraftSchema = Type.Object({
             type: Type.Literal("agent"),
             session: Type.Union([
                 Type.Object({ mode: Type.Literal("fresh"), cwd: Type.String() }),
-                Type.Object({ mode: Type.Literal("fork"), cwd: Type.Optional(Type.String()) }),
                 Type.Object({ mode: Type.Literal("reuse"), sessionId: Type.String() }),
             ]),
             prompt: Type.String(),
@@ -102,7 +101,7 @@ export function taskToolSpec(execute) {
     return {
         name: "task",
         label: "Pier Task",
-        description: "Manage durable Pier tasks and subagents. Agent tasks support reused, fresh, or forked sessions. Run executes a stored task by task_id, a one-shot subagent from an inline task draft, or a core-joined fan-out via tasks[] with join all|first. Get accepts run_id, group_id, or task_id for that task's recent runs. Every operation returns immediately: results, group joins, and decision replies arrive as callback messages. Use steer/follow_up/resume for child control and contact/reply for supervisor decisions. models lists the deployment's model menu (operator pins with intent notes, else the live catalog).",
+        description: "Manage durable Pier tasks and subagents. Agent tasks run in a fresh session or a reused one. Run executes a stored task by task_id, a one-shot subagent from an inline task draft, or a core-joined fan-out via tasks[] with join all|first. Get accepts run_id, group_id, or task_id for that task's recent runs. Every operation returns immediately: results, group joins, and decision replies arrive as callback messages. Use steer/follow_up/resume for child control and contact/reply for supervisor decisions. models lists the deployment's model menu (operator pins with intent notes, else the live catalog).",
         parameters: Type.Object({
             operation: strEnum("list", "create", "update", "run", "get", "cancel", "steer", "follow_up", "resume", "contact", "reply", "models"),
             task_id: Type.Optional(Type.String()),
@@ -111,7 +110,7 @@ export function taskToolSpec(execute) {
             message_id: Type.Optional(Type.String()),
             message: Type.Optional(Type.String()),
             reason: Type.Optional(strEnum("progress", "decision")),
-            session_mode: Type.Optional(strEnum("fresh", "fork")),
+            session_mode: Type.Optional(strEnum("fresh")),
             task: Type.Optional(DraftSchema),
             // The same draft again, spelled out, cost more tokens in every session
             // than the whole rest of this contract. One copy is the guidance; this
@@ -173,7 +172,12 @@ export async function handleTaskTool(host, definitions, store, messages, raw, ca
         const task = draft
             ? await resolveDraft(definitions, draft, active, callerSessionId)
             : resolveStored(definitions, input.task_id, active);
-        const sessionMode = input.session_mode === "fresh" || input.session_mode === "fork" ? input.session_mode : undefined;
+        // Same as the HTTP route: a named mode the schema no longer offers is
+        // answered, not quietly swapped for the definition's own policy.
+        if (input.session_mode !== undefined && input.session_mode !== "fresh") {
+            throw new Error(`unsupported session_mode: ${String(input.session_mode)}`);
+        }
+        const sessionMode = input.session_mode;
         let callbackSessionId = input.callback === "none" ? null : callerSessionId;
         if (!active && callbackSessionId && typeof input.callback_session_id === "string") {
             callbackSessionId = requiredString(input.callback_session_id, "callback_session_id");

package/dist/web/config-sync.js

@@ -0,0 +1,91 @@
+// HTTP presentation of the injected configuration subscription. The sole
+// public route is registered before auth; every management action is after it.
+import { logger } from "../log.js";
+const log = logger("config-sync");
+export function registerConfigShareRoute(app, sync) {
+    app.get("/config-sync/:token", async (c) => {
+        c.header("cache-control", "no-store");
+        c.header("x-frame-options", "DENY");
+        c.header("referrer-policy", "no-referrer");
+        if (c.req.method !== "GET") {
+            c.header("allow", "GET");
+            return c.body(null, 405);
+        }
+        const token = c.req.param("token");
+        if (!/^[a-f0-9]{64}$/.test(token))
+            return c.json({ error: "not found" }, 404);
+        try {
+            const published = await sync.published(token);
+            if (!published)
+                return c.json({ error: "not found" }, 404);
+            c.header("etag", published.etag);
+            c.header("x-content-type-options", "nosniff");
+            const tags = c.req.header("if-none-match")?.split(",").map((value) => value.trim().replace(/^W\//, ""));
+            if (tags?.includes(published.etag) || tags?.includes("*"))
+                return c.body(null, 304);
+            c.header("content-type", "application/json; charset=utf-8");
+            return c.body(published.body);
+        }
+        catch {
+            // Never let the app's path logger print a capability URL.
+            log.error("Could not export shared configuration");
+            return c.json({ error: "Could not export configuration" }, 500);
+        }
+    });
+    // Reject other verbs here so neither auth redirects nor request-path logs
+    // can carry this capability to another surface.
+    app.all("/config-sync/:token", (c) => {
+        c.header("cache-control", "no-store");
+        c.header("allow", "GET");
+        return c.body(null, 405);
+    });
+}
+export function registerConfigSyncRoutes(app, deps) {
+    app.get("/api/config-sync", (c) => {
+        c.header("cache-control", "no-store");
+        return c.json(deps.status());
+    });
+    app.post("/api/config-sync", async (c) => {
+        c.header("cache-control", "no-store");
+        const body = await c.req.json().catch(() => null);
+        if (!body || typeof body.action !== "string")
+            return c.json({ error: "action required" }, 400);
+        try {
+            let result;
+            switch (body.action) {
+                case "publish":
+                    await deps.sync.publish();
+                    break;
+                case "revoke":
+                    await deps.sync.revoke();
+                    break;
+                case "subscribe": {
+                    if (typeof body.url !== "string")
+                        throw new Error("Source URL required");
+                    result = await deps.sync.subscribe(body.url);
+                    break;
+                }
+                case "pause":
+                    await deps.sync.pause();
+                    break;
+                case "sync":
+                    result = await deps.run();
+                    break;
+                default: return c.json({ error: "Unknown configuration sync action" }, 400);
+            }
+            await deps.reconcile();
+            return c.json({ ...deps.status(), ...(result ? { result } : {}) });
+        }
+        catch (err) {
+            // Application can succeed while reload fails; still reconcile the owned
+            // task to the persisted subscription switch in that case.
+            try {
+                await deps.reconcile();
+            }
+            catch {
+                log.error("Could not reconcile configuration sync task");
+            }
+            return c.json({ error: err instanceof Error ? err.message : "Configuration sync failed", status: deps.status() }, 409);
+        }
+    });
+}

package/dist/web/public/assets/activity-Cw0LRVNI.js

@@ -0,0 +1,5 @@
+import{F as e,I as t,K as n,M as r,R as i,T as a,V as o,z as s}from"./index-DHxoYoeq.js";var c=(e,t={})=>{let n=document.createElementNS(`http://www.w3.org/2000/svg`,e);for(let[e,r]of Object.entries(t))n.setAttribute(e,r);return n},l=t=>t===null?`-`:e(Date.now()-t),u={light:{edge:`#a3a3a3`,callback:`#0891b2`,message:`#d97706`,scheduler:{fill:`#f5f3ff`,stroke:`#a78bfa`,text:`#5b21b6`},console:{fill:`#eff6ff`,stroke:`#93c5fd`,text:`#1d4ed8`},task:{fill:`#fffbeb`,stroke:`#fbbf24`,text:`#92400e`},process:{fill:`#f5f5f5`,stroke:`#a3a3a3`,text:`#525252`,dash:`4 3`},streaming:{fill:`#ffffff`,stroke:`#10b981`,text:`#262626`},idle:{fill:`#fafafa`,stroke:`#d4d4d4`,text:`#737373`}},dark:{edge:`#7a7a7a`,callback:`#3fc3dd`,message:`#e0a13a`,scheduler:{fill:`#2b2440`,stroke:`#7d63c9`,text:`#c9b8f5`},console:{fill:`#1f2a3d`,stroke:`#4a7fbf`,text:`#a8c8f0`},task:{fill:`#3a2f1c`,stroke:`#b8862a`,text:`#f0d49a`},process:{fill:`#262626`,stroke:`#5c5c5c`,text:`#a3a3a3`,dash:`4 3`},streaming:{fill:`#22302a`,stroke:`#10b981`,text:`#e5e5e5`},idle:{fill:`#212121`,stroke:`#4a4a4a`,text:`#9a9a9a`}}},d=()=>u[document.documentElement.dataset.theme===`dark`?`dark`:`light`];function f(e,u,f){let p=`sessions`,m=`active`,h={sessions:[],runs:[],messages:[]},g=``,_=s(async()=>{let r=m,i=await o(`/api/activity?scope=${r}`,`Failed to load activity`);if(!i.ok){g=``,e.replaceChildren(t(`p`,`p-4 text-[13px] text-red-600`,i.error));return}if(r!==m)return;let a=JSON.stringify(i.value);if(`${r}:${a}`===g)return;g=`${r}:${a}`;let s=i.value;h={...s,sessions:s.sessions.map(e=>({...e,title:n(e.title)}))},v()});function v(){let n=t(`header`,`flex h-10 flex-none items-center gap-2 border-b border-neutral-200 px-4 max-md:hidden`,t(`span`,`font-medium`,`Activity`)),r=t(`div`,`tabstrip`);r.append(a(`Sessions`,p===`sessions`,()=>{p=`sessions`,v()}),a(`Relationships`,p===`dependencies`,()=>{p=`dependencies`,v()}));let i=t(`div`,`flex flex-none gap-1 border-b border-neutral-200 px-4 py-2`),o=e=>()=>{m=e,v(),_()};i.append(a(`Current`,m===`active`,o(`active`)),a(`Last 24h`,m===`recent`,o(`recent`)));let s=t(`div`,`min-h-0 flex-1 overflow-auto`);p===`sessions`?y(s):b(s),e.replaceChildren(n,r,i,s)}function y(e){let n=document.createElement(`table`);n.className=`w-full table-fixed text-left text-[12.5px]`,n.innerHTML=`<thead class="bg-neutral-50 text-[10.5px] uppercase text-neutral-400"><tr>
+      <th class="w-[50%] px-4 py-2 font-semibold md:w-[34%]">Session</th>
+      <th class="hidden w-[38%] px-2 py-2 font-semibold md:table-cell">Project</th>
+      <th class="px-2 py-2 font-semibold md:w-[14%]">State</th>
+      <th class="px-2 py-2 font-semibold">In state</th></tr></thead>`;let r=document.createElement(`tbody`);for(let e of h.sessions){let n=document.createElement(`tr`);n.className=`cursor-pointer border-b border-neutral-100 hover:bg-neutral-50`,n.onclick=()=>u(e.id);let a=t(`button`,`block w-full cursor-pointer truncate text-left font-medium`,e.title??i(e.cwd));a.setAttribute(`type`,`button`),a.title=`${e.id}\n${e.cwd}`,a.onclick=t=>{t.stopPropagation(),u(e.id)},n.append(t(`td`,`px-4 py-2.5`,a,t(`div`,`truncate font-mono text-[11px] text-neutral-400 md:hidden`,e.cwd||`-`)),t(`td`,`hidden truncate px-2 py-2.5 font-mono text-[11.5px] md:table-cell`,e.cwd||`-`),t(`td`,`px-2 py-2.5`,t(`span`,`inline-flex items-center gap-1.5 whitespace-nowrap`,t(`span`,`inline-block h-2 w-2 flex-none rounded-full ${e.state===`streaming`?`animate-pulse bg-green-500`:`bg-neutral-300`}`),e.state)),t(`td`,`px-2 py-2.5 text-neutral-500`,l(e.stateSince))),r.append(n)}n.append(r),e.append(n),h.sessions.length||e.append(t(`p`,`p-4 text-[13px] text-neutral-400`,m===`active`?`No active sessions.`:`No sessions in the last 24 hours.`))}function b(e){let n=new Map,r=[],i=(e,t,r,i)=>{n.has(e)||n.set(e,{id:e,label:t,kind:r,state:i})};for(let e of h.sessions)i(e.id,e.title??e.id.slice(0,10),`session`,e.state);for(let e of h.runs){let t=e.invokedBySessionId??`scheduler`,n=e.targetSessionId??(e.context.definition.action.type===`bash`?`process:${e.id}`:`task:${e.id}`);i(t,t===`scheduler`?`Scheduler`:t.slice(0,10),t===`scheduler`?`scheduler`:`session`),i(n,e.targetSessionId?e.targetSessionId.slice(0,10):e.context.definition.action.type===`bash`?`Bash process`:`Task`,e.targetSessionId?`session`:e.context.definition.action.type===`bash`?`process`:`task`),r.push({from:t,to:n,run:e,kind:`invocation`}),e.callbackSessionId&&(i(e.callbackSessionId,e.callbackSessionId.slice(0,10),`session`),r.push({from:n,to:e.callbackSessionId,run:e,kind:`callback`}))}for(let e of h.messages){if(!e.fromSessionId||!e.toSessionId||e.fromSessionId===e.toSessionId)continue;let t=h.runs.find(t=>t.id===e.runId);if(t){for(let t of[e.fromSessionId,e.toSessionId])i(t,t===`console`?`Console`:t.slice(0,10),t===`console`?`console`:`session`);r.push({from:e.fromSessionId,to:e.toSessionId,run:t,kind:`message`})}}if(!n.size){e.append(t(`p`,`p-4 text-[13px] text-neutral-400`,m===`active`?`No active dependencies.`:`No dependencies in the last 24 hours.`));return}let a=[...n.values()],o=new Set(r.map(e=>e.to)),s=new Map,l=a.filter(e=>!o.has(e.id)).map(e=>e.id);l.length||l.push(a[0].id);for(let e of l)s.set(e,0);for(;l.length;){let e=l.shift();for(let t of r)t.from!==e||s.has(t.to)||(s.set(t.to,s.get(e)+1),l.push(t.to))}for(let e of a)s.has(e.id)||s.set(e.id,0);let p=new Map;for(let e of a){let t=s.get(e.id);p.set(t,[...p.get(t)??[],e])}let g=Math.max(...p.keys())+1,_=Math.max(...[...p.values()].map(e=>e.length)),v=r.some(e=>e.from!==e.to&&s.get(e.from)===s.get(e.to))?40:0,y=56+g*180+(g-1)*110+v,b=56+_*46+(_-1)*30,x=new Map;for(let[e,t]of p)t.forEach((t,n)=>x.set(t.id,{x:28+e*290+90,y:28+n*76+23}));let S=c(`svg`,{width:String(y),height:String(b),viewBox:`0 0 ${y} ${b}`,class:`block`}),C=c(`defs`),w=d();for(let[e,t]of[[`activity-arrow`,w.edge],[`activity-arrow-cb`,w.callback],[`activity-arrow-msg`,w.message]]){let n=c(`marker`,{id:e,viewBox:`0 0 10 10`,refX:`9`,refY:`5`,markerWidth:`6`,markerHeight:`6`,orient:`auto-start-reverse`});n.append(c(`path`,{d:`M 0 0 L 10 5 L 0 10 z`,fill:t})),C.append(n)}S.append(C);let T=new Set;for(let e of r){let t=`${e.from}→${e.to}:${e.kind}`;if(T.has(t))continue;T.add(t);let n=x.get(e.from),r=x.get(e.to),i=c(`path`,{d:n.x===r.x?`M ${n.x+90} ${n.y} C ${n.x+90+46} ${n.y}, ${r.x+90+46} ${r.y}, ${r.x+90} ${r.y}`:(()=>{let e=r.x>n.x,t=n.x+(e?90:-90),i=r.x+(e?-90:90),a=Math.max(36,Math.abs(i-t)*.45)*(e?1:-1);return`M ${t} ${n.y} C ${t+a} ${n.y}, ${i-a} ${r.y}, ${i} ${r.y}`})(),fill:`none`,stroke:e.kind===`callback`?w.callback:e.kind===`message`?w.message:w.edge,"stroke-width":`1.5`,"marker-end":e.kind===`callback`?`url(#activity-arrow-cb)`:e.kind===`message`?`url(#activity-arrow-msg)`:`url(#activity-arrow)`});e.kind===`callback`&&i.setAttribute(`stroke-dasharray`,`6 5`),e.kind===`message`&&i.setAttribute(`stroke-dasharray`,`2 5`),i.classList.add(`cursor-pointer`),i.onclick=()=>f(e.run.id),S.append(i)}let E=/[\u1100-\u11FF\u2E80-\uA4CF\uAC00-\uD7A3\uF900-\uFAFF\uFE30-\uFE4F\uFF00-\uFF60\uFFE0-\uFFE6]/,D=(e,t)=>{let n=0;for(let r=0;r<e.length;r++)if(n+=E.test(e[r])?2:1,n>t)return`${e.slice(0,r)}…`;return e};for(let e of a){let t=x.get(e.id),n=e.kind===`session`?e.state===`streaming`?w.streaming:w.idle:w[e.kind],r=c(`g`,{transform:`translate(${t.x},${t.y})`});e.kind===`session`&&r.classList.add(`cursor-pointer`),r.onclick=()=>{e.kind===`session`&&u(e.id)};let i=c(`rect`,{x:`-90`,y:`-23`,width:`180`,height:`46`,rx:`8`,fill:n.fill,stroke:n.stroke,"stroke-width":e.kind===`session`&&e.state===`streaming`?`1.5`:`1`});n.dash&&i.setAttribute(`stroke-dasharray`,n.dash),r.append(i);let a=-78;if(e.kind===`session`){let t=c(`circle`,{cx:`-75`,cy:`0`,r:`3.5`,fill:n.stroke});if(e.state===`streaming`){let e=c(`animate`,{attributeName:`opacity`,values:`1;0.3;1`,dur:`1.6s`,repeatCount:`indefinite`});t.append(e)}r.append(t),a=-64}let o=c(`text`,{x:String(a),"text-anchor":`start`,"dominant-baseline":`middle`,"font-size":`11.5`,"font-weight":e.kind===`session`?`500`:`400`,fill:n.text});o.textContent=D(e.label,e.kind===`session`?22:25);let s=c(`title`);s.textContent=e.label===e.id?e.id:`${e.label}\n${e.id}`,r.append(o,s),S.append(r)}let O=e=>t(`span`,`inline-block h-2 w-2 rounded-full ${e}`);e.append(t(`div`,`w-max p-4`,S),t(`div`,`flex flex-wrap gap-x-5 gap-y-1 border-t border-neutral-200 px-4 py-2 text-[11px] text-neutral-500`,t(`span`,``,`Solid: task invocation`),t(`span`,`text-cyan-700`,`Dashed: callback`),t(`span`,`text-amber-700`,`Dotted: supervisor/control`),t(`span`,`inline-flex items-center gap-1.5`,O(`bg-emerald-500`),`streaming`),t(`span`,`inline-flex items-center gap-1.5`,O(`bg-neutral-300`),`idle`)))}let x=r(e,e=>{e===`dependencies`?p=`dependencies`:e===`sessions`&&(p=`sessions`),_()},()=>{e.replaceChildren(),h={sessions:[],runs:[],messages:[]},g=``});return window.addEventListener(`pier:theme`,()=>{x.visible&&v()}),Object.assign(x,{refresh(){x.visible&&_()}})}export{f as createActivityView};

package/dist/web/public/assets/{boards-DEMQ51m1.js → boards-DMVbV84c.js}

@@ -1 +1 @@
-import{B as e,G as t,I as n,L as r,M as i,N as a,O as o,V as s,W as c,h as l}from"./index-BFzmvpGX.js";var u=e=>e.public&&e.token?`/p/${e.slug}-${e.token}/`:`/boards/${e.slug}/`;function d(d,f){let p=[],m=``,h=n(`header`,`sticky top-0 z-30 flex h-10 items-center gap-3 border-b border-neutral-200 bg-white px-4`,n(`span`,`font-medium max-md:hidden`,`Boards`)),g=n(`div`,`px-4 py-5`);d.append(n(`div`,`min-h-0 flex-1 overflow-y-auto`,h,g));async function _(n,r){let i=await t(`/api/boards/${n.slug}`,{public:r},`PATCH`);if(i.ok)return n.token=(await i.json().catch(()=>({}))).token??``,x();m=await e(i,`Could not change ${n.slug}`),await S()}async function v(e){m=await c(`/api/boards/${e}`,`DELETE`,`Could not delete ${e}`)??``,await S()}function y(e){let t=n(`div`,`group flex flex-col gap-1 border-b border-neutral-200/70 px-1 py-2.5 last:border-b-0`),i=document.createElement(`a`);i.className=`truncate font-medium text-neutral-800 hover:text-indigo-700`,i.href=u(e),i.target=`_blank`,i.rel=`noreferrer`,i.textContent=e.title;let s=n(`div`,`flex items-center gap-2`,i,n(`span`,`flex-none font-mono text-[11.5px] text-neutral-400`,e.slug)),c=o(``,``,e.public,t=>{e.public=t,_(e,t)});c.className=`ml-auto flex flex-none cursor-pointer items-center gap-1.5 text-[11.5px] text-neutral-500`,c.append(n(`span`,``,`Public`));let d=l(`Delete`,`flex-none cursor-pointer text-[11.5px] text-neutral-400 opacity-0 transition-opacity hover:text-red-600 group-hover:opacity-100`);d.title=`Renames the folder on disk; nothing is erased`,d.onclick=()=>void v(e.slug);let p=a(`flex-none cursor-pointer text-[11.5px] text-neutral-400 opacity-0 transition-opacity hover:text-indigo-600 group-hover:opacity-100`,()=>`${location.origin}${u(e)}`);p.title=`Copy the board's link`,s.append(c,p,d),t.append(s);let m=n(`div`,`flex flex-wrap items-center gap-x-3 gap-y-1 text-[11.5px] text-neutral-500`);e.description&&m.append(n(`span`,`min-w-0 truncate`,e.description)),m.append(n(`span`,`flex-none text-neutral-400`,r(Date.parse(e.updatedAt))));for(let t of e.sessions){let e=l(t.slice(0,8),`flex-none cursor-pointer font-mono text-indigo-600 hover:underline`);e.title=`Open session ${t}`,e.onclick=()=>f(t),m.append(e)}if(e.public&&e.token){let t=n(`span`,`flex-none font-mono text-neutral-400`,u(e));t.title=`Public URL — anyone holding this link can read the board, no password`,m.append(t)}return t.append(m),t}let b=[{title:`Public`,hint:`Readable at /p/<slug>-<token>/ by anyone holding the link.`,wanted:!0},{title:`Private`,hint:`Reachable from the Console only.`,wanted:!1}];function x(){let e=n(`div`,`mx-auto flex max-w-3xl flex-col`);p.length===0&&e.append(n(`p`,`rounded-xl border border-dashed border-neutral-300 px-4 py-6 text-center text-[12.5px] text-neutral-500`,`No boards yet. Ask an agent to build one — it writes a folder under ~/.pier/boards.`));for(let{title:t,hint:r,wanted:i}of b){let a=p.filter(e=>e.public===i);if(a.length===0)continue;let o=n(`section`,`mb-6`);o.append(n(`h2`,`text-[13px] font-semibold text-neutral-700`,t)),o.append(n(`p`,`mb-1 text-[11.5px] leading-snug text-neutral-500`,r));let s=n(`div`,`rounded-xl border border-neutral-200 bg-white px-3`);s.append(...a.map(y)),o.append(s),e.append(o)}g.replaceChildren(...m?[n(`p`,`mb-3 text-[13px] text-red-600`,m)]:[],e)}async function S(){let e=await s(`/api/boards`,`Could not load boards`);if(!e.ok)return m=e.error,x();p=e.value,x(),m=``}let C=i(d,()=>void S());return window.addEventListener(`focus`,()=>{C.visible&&S()}),C}export{d as createBoardsView};
+import{B as e,G as t,I as n,L as r,M as i,N as a,O as o,V as s,W as c,h as l}from"./index-DHxoYoeq.js";var u=e=>e.public&&e.token?`/p/${e.slug}-${e.token}/`:`/boards/${e.slug}/`;function d(d,f){let p=[],m=``,h=n(`header`,`sticky top-0 z-30 flex h-10 items-center gap-3 border-b border-neutral-200 bg-white px-4`,n(`span`,`font-medium max-md:hidden`,`Boards`)),g=n(`div`,`px-4 py-5`);d.append(n(`div`,`min-h-0 flex-1 overflow-y-auto`,h,g));async function _(n,r){let i=await t(`/api/boards/${n.slug}`,{public:r},`PATCH`);if(i.ok)return n.token=(await i.json().catch(()=>({}))).token??``,x();m=await e(i,`Could not change ${n.slug}`),await S()}async function v(e){m=await c(`/api/boards/${e}`,`DELETE`,`Could not delete ${e}`)??``,await S()}function y(e){let t=n(`div`,`group flex flex-col gap-1 border-b border-neutral-200/70 px-1 py-2.5 last:border-b-0`),i=document.createElement(`a`);i.className=`truncate font-medium text-neutral-800 hover:text-indigo-700`,i.href=u(e),i.target=`_blank`,i.rel=`noreferrer`,i.textContent=e.title;let s=n(`div`,`flex items-center gap-2`,i,n(`span`,`flex-none font-mono text-[11.5px] text-neutral-400`,e.slug)),c=o(``,``,e.public,t=>{e.public=t,_(e,t)});c.className=`ml-auto flex flex-none cursor-pointer items-center gap-1.5 text-[11.5px] text-neutral-500`,c.append(n(`span`,``,`Public`));let d=l(`Delete`,`flex-none cursor-pointer text-[11.5px] text-neutral-400 opacity-0 transition-opacity hover:text-red-600 group-hover:opacity-100`);d.title=`Renames the folder on disk; nothing is erased`,d.onclick=()=>void v(e.slug);let p=a(`flex-none cursor-pointer text-[11.5px] text-neutral-400 opacity-0 transition-opacity hover:text-indigo-600 group-hover:opacity-100`,()=>`${location.origin}${u(e)}`);p.title=`Copy the board's link`,s.append(c,p,d),t.append(s);let m=n(`div`,`flex flex-wrap items-center gap-x-3 gap-y-1 text-[11.5px] text-neutral-500`);e.description&&m.append(n(`span`,`min-w-0 truncate`,e.description)),m.append(n(`span`,`flex-none text-neutral-400`,r(Date.parse(e.updatedAt))));for(let t of e.sessions){let e=l(t.slice(0,8),`flex-none cursor-pointer font-mono text-indigo-600 hover:underline`);e.title=`Open session ${t}`,e.onclick=()=>f(t),m.append(e)}if(e.public&&e.token){let t=n(`span`,`flex-none font-mono text-neutral-400`,u(e));t.title=`Public URL — anyone holding this link can read the board, no password`,m.append(t)}return t.append(m),t}let b=[{title:`Public`,hint:`Readable at /p/<slug>-<token>/ by anyone holding the link.`,wanted:!0},{title:`Private`,hint:`Reachable from the Console only.`,wanted:!1}];function x(){let e=n(`div`,`mx-auto flex max-w-3xl flex-col`);p.length===0&&e.append(n(`p`,`rounded-xl border border-dashed border-neutral-300 px-4 py-6 text-center text-[12.5px] text-neutral-500`,`No boards yet. Ask an agent to build one — it writes a folder under ~/.pier/boards.`));for(let{title:t,hint:r,wanted:i}of b){let a=p.filter(e=>e.public===i);if(a.length===0)continue;let o=n(`section`,`mb-6`);o.append(n(`h2`,`text-[13px] font-semibold text-neutral-700`,t)),o.append(n(`p`,`mb-1 text-[11.5px] leading-snug text-neutral-500`,r));let s=n(`div`,`rounded-xl border border-neutral-200 bg-white px-3`);s.append(...a.map(y)),o.append(s),e.append(o)}g.replaceChildren(...m?[n(`p`,`mb-3 text-[13px] text-red-600`,m)]:[],e)}async function S(){let e=await s(`/api/boards`,`Could not load boards`);if(!e.ok)return m=e.error,x();p=e.value,x(),m=``}let C=i(d,()=>void S());return window.addEventListener(`focus`,()=>{C.visible&&S()}),C}export{d as createBoardsView};