claude-code-session-manager 0.112.0 → 0.113.0

package/dist/assets/{settingsSchema-Dh5Kl7VO.js → settingsSchema-Ctf3pZVI.js}

@@ -1 +1 @@
-import{aE as b,ao as n,S as N,aY as O}from"./index-CTBpf-26.js";import{r as K}from"./claude-settings-schema-COigsajx.js";function G({node:e,targetScope:r,onOverride:s,schema:a,rootLabel:m}){const[f,x]=b.useState(""),[u,o]=b.useState(!0),g=[],d=e.kind==="object"&&Object.keys(e.children).length===0,y=((a==null?void 0:a.rootKeys())??[]).length>0;return n.jsxs("div",{className:"h-full flex flex-col",children:[n.jsxs("div",{className:"shrink-0 border-b border-line bg-bg-elev px-3 py-1.5 flex items-center gap-2 text-xs",children:[n.jsxs("span",{className:"text-fg-faint",children:["merged · overrides → ",n.jsx("span",{className:"text-fg-dim",children:N[r].label})]}),y&&n.jsxs("label",{className:"flex items-center gap-1 text-fg-faint cursor-pointer",children:[n.jsx("input",{type:"checkbox",checked:u,onChange:t=>o(t.target.checked),className:"accent-accent"}),"show unset keys"]}),n.jsx("div",{className:"flex-1"}),n.jsx("input",{value:f,onChange:t=>x(t.target.value),placeholder:"filter keys or descriptions…",className:"bg-bg border border-line rounded px-2 py-0.5 text-xs text-fg w-56"})]}),n.jsx("div",{className:"flex-1 overflow-auto px-3 py-2 font-mono text-xs",children:d&&!u?n.jsx("div",{className:"text-fg-faint italic px-2 py-4",children:"no settings resolved — all scope files empty or missing"}):n.jsx(E,{node:e,path:g,label:m??"(root)",targetScope:r,onOverride:s,filter:f,depth:0,schema:a,showGhosts:u,defaultOpen:!0})})]})}function E(e){return e.node.kind==="object"?n.jsx(P,{...e,node:e.node}):e.node.kind==="array"?n.jsx(J,{...e,node:e.node}):n.jsx(R,{...e,node:e.node})}function A(e,r){return r.trim()?e.toLowerCase().includes(r.toLowerCase()):!0}function w(e,r,s){return!!(!s.trim()||e.some(a=>A(a,s))||r!=null&&r.description&&A(r.description,s))}function P({node:e,path:r,label:s,targetScope:a,onOverride:m,filter:f,depth:x,schema:u,showGhosts:o,defaultOpen:g}){const[d,h]=b.useState(g??x<2),y=(u==null?void 0:u.at(r))??null,t=new Set(Object.keys(e.children)),i=o?(y==null?void 0:y.knownChildren)??[]:[],c=Array.from(new Set([...t,...i])).sort(),l=b.useMemo(()=>f.trim()?c.filter(p=>{const v=(u==null?void 0:u.at([...r,p]))??null;return w([...r,p],v,f)?!0:t.has(p)?L(e.children[p],[...r,p],f,u):!1}):c,[c.join(","),f,e,r.join("."),u]);if(f.trim()&&l.length===0&&!w(r,y,f))return null;if(r.length===0)return n.jsx("div",{children:l.map(p=>j(p))});return n.jsxs("div",{children:[n.jsxs("div",{className:"flex items-center gap-1 py-0.5 hover:bg-bg-elev/50 rounded cursor-pointer",style:{paddingLeft:x*14},onClick:()=>h(!d),children:[n.jsx("span",{className:"text-fg-faint w-3 shrink-0",children:d?"▾":"▸"}),n.jsx("span",{className:"text-fg",children:s}),n.jsxs("span",{className:"text-fg-faint",children:[" {",t.size,i.length>t.size?`/${new Set([...t,...i]).size}`:"","}"]}),(y==null?void 0:y.description)&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:y.description,children:["— ",y.description]})]}),d&&l.map(p=>j(p))]});function j(p){if(t.has(p))return n.jsx(E,{node:e.children[p],path:[...r,p],label:p,targetScope:a,onOverride:m,filter:f,depth:x+1,schema:u,showGhosts:o},p);const v=(u==null?void 0:u.at([...r,p]))??null;return v?n.jsx(I,{path:[...r,p],label:p,info:v,targetScope:a,onSet:m,depth:x+1,filter:f},p):null}}function L(e,r,s,a){const m=(a==null?void 0:a.at(r))??null;if(w(r,m,s))return!0;if(e.kind!=="object")return!1;for(const f of Object.keys(e.children))if(L(e.children[f],[...r,f],s,a))return!0;return!1}function J({node:e,path:r,label:s,filter:a,depth:m,schema:f}){const[x,u]=b.useState(!0),o=(f==null?void 0:f.at(r))??null;return w(r,o,a)?n.jsxs("div",{children:[n.jsxs("div",{className:"flex items-center gap-1 py-0.5 hover:bg-bg-elev/50 rounded cursor-pointer",style:{paddingLeft:m*14},onClick:()=>u(!x),children:[n.jsx("span",{className:"text-fg-faint w-3 shrink-0",children:x?"▾":"▸"}),n.jsx("span",{className:"text-fg",children:s}),n.jsxs("span",{className:"text-fg-faint",children:[" [",e.items.length,"]"]}),n.jsx(S,{tone:"warn",children:"accumulated"}),(o==null?void 0:o.description)&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:o.description,children:["— ",o.description]})]}),x&&e.items.map((g,d)=>n.jsxs("div",{className:"flex items-start gap-2 py-0.5",style:{paddingLeft:(m+1)*14},children:[n.jsx("span",{className:"text-fg-faint w-3 shrink-0"}),n.jsxs("span",{className:"text-fg-faint",children:[d,":"]}),n.jsx("span",{className:"text-fg-dim truncate max-w-xl",children:k(g.value)}),n.jsx(C,{scope:g.fromScope})]},d))]}):null}function R({node:e,path:r,label:s,targetScope:a,onOverride:m,filter:f,depth:x,schema:u}){const[o,g]=b.useState(!1),d=(u==null?void 0:u.at(r))??null;if(!w(r,d,f))return null;const h=e.winner!==a,y=e.shadowed.length>0;return n.jsxs("div",{children:[n.jsxs("div",{className:"group flex items-center gap-2 py-0.5 hover:bg-bg-elev/50 rounded",style:{paddingLeft:x*14},children:[n.jsx("span",{className:`w-3 shrink-0 ${y?"text-fg-faint cursor-pointer":""}`,onClick:()=>y&&g(!o),children:y?o?"▾":"▸":""}),n.jsxs("span",{className:"text-fg",children:[s,":"]}),n.jsx("span",{className:"text-fg-dim truncate max-w-md",children:k(e.value)}),n.jsx(C,{scope:e.winner}),(d==null?void 0:d.deprecated)&&n.jsx(S,{tone:"warn",children:"deprecated"}),(d==null?void 0:d.default)!==void 0&&_(e.value,d.default)&&n.jsx(S,{tone:"dim",children:"= default"}),e.typeMismatch&&n.jsx("span",{className:"text-yellow-500/80",title:"shadowed scopes have a different value type",children:"⚠"}),(d==null?void 0:d.description)&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:d.description,children:["— ",d.description]}),n.jsx("div",{className:"flex-1"}),(d==null?void 0:d.enum)&&n.jsx(F,{values:d.enum}),n.jsx("button",{disabled:!h,onClick:()=>m(r,e.value),className:`opacity-0 group-hover:opacity-100 px-1.5 py-0 text-[10px] border rounded transition-opacity ${h?"border-accent/50 text-accent hover:bg-accent hover:text-bg":"border-line text-fg-faint cursor-not-allowed"}`,title:h?`copy into ${N[a].label} draft`:`already winning in ${N[a].label}`,children:"override"})]}),o&&e.shadowed.map((t,i)=>n.jsxs("div",{className:"flex items-center gap-2 py-0.5 text-fg-faint line-through",style:{paddingLeft:(x+1)*14+12},children:[n.jsx("span",{children:"shadowed:"}),n.jsx("span",{className:"truncate max-w-xl",children:k(t.value)}),n.jsx(C,{scope:t.scope,dim:!0})]},i))]})}function I({path:e,label:r,info:s,targetScope:a,onSet:m,depth:f,filter:x}){if(!w(e,s,x))return null;const u=s.default!==void 0?s.default:M(s.type),o=Array.isArray(s.type)?s.type.join("|"):s.type??"?";return n.jsxs("div",{className:"group flex items-center gap-2 py-0.5 hover:bg-bg-elev/50 rounded opacity-60",style:{paddingLeft:f*14},children:[n.jsx("span",{className:"w-3 shrink-0"}),n.jsx("span",{className:"text-fg-dim",children:r}),n.jsx(S,{tone:"dim",children:o}),s.required&&n.jsx(S,{tone:"warn",children:"required"}),s.default!==void 0&&n.jsxs("span",{className:"text-fg-faint",children:["default: ",k(s.default)]}),s.description&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:s.description,children:["— ",s.description]}),n.jsx("div",{className:"flex-1"}),s.enum&&n.jsx(F,{values:s.enum}),n.jsx("button",{onClick:()=>m(e,u),className:"opacity-0 group-hover:opacity-100 px-1.5 py-0 text-[10px] border border-accent/50 rounded text-accent hover:bg-accent hover:text-bg transition-opacity",title:`write to ${N[a].label} draft`,children:"set"})]})}function _(e,r){return e===r?!0:typeof e!=typeof r?!1:e&&r&&typeof e=="object"?JSON.stringify(e)===JSON.stringify(r):!1}function M(e){switch(Array.isArray(e)?e[0]:e){case"boolean":return!1;case"integer":case"number":return 0;case"string":return"";case"array":return[];case"object":return{};case"null":return null;default:return null}}function k(e){if(typeof e=="string")return JSON.stringify(e);if(e===null)return"null";if(typeof e=="object"){const r=JSON.stringify(e);return r.length>100?r.slice(0,100)+"…":r}return String(e)}function C({scope:e,dim:r}){const s=e==="user"?"bg-bg-hi text-fg-dim border-line":e==="project"?"bg-blue-950/30 text-blue-400/80 border-blue-900/40":"bg-purple-950/30 text-purple-400/80 border-purple-900/40";return n.jsx("span",{className:`text-[10px] px-1 py-0 rounded border uppercase tracking-wide shrink-0 ${s} ${r?"opacity-60":""}`,children:N[e].label})}function S({children:e,tone:r="default"}){const s={default:"bg-bg-hi text-fg-dim border-line",warn:"bg-yellow-950/30 text-yellow-500/80 border-yellow-900/40",dim:"bg-bg-elev text-fg-faint border-line"}[r];return n.jsx("span",{className:`text-[10px] px-1 py-0 rounded border uppercase tracking-wide shrink-0 ${s}`,children:e})}function F({values:e}){const r=e.map(s=>String(s)).join(" | ");return n.jsxs("span",{className:"text-[10px] text-fg-faint truncate max-w-xs",title:`allowed: ${r}`,children:["∈ ",r.length>30?r.slice(0,30)+"…":r]})}function V(e,r,s){const a=O(o=>o.files),m=O(o=>o.loadJson),f=O(o=>o.watchFile),x=O(o=>o.unwatchFile),u=b.useMemo(()=>{const o={};for(const g of e.scopes){const d=e.resolve(g,r??"",s);d&&(o[g]=d)}return o},[e,r,s]);return b.useEffect(()=>{const o=Object.values(u).filter(Boolean);return o.forEach(g=>{a[g]||m(g),f(g)}),()=>{o.forEach(g=>x(g))}},[JSON.stringify(u)]),u}function B(e){const r=e??{},s={...r.$defs??{},...r.definitions??{}},a=t=>{if(!t)return{};if(!t.$ref)return x(t);const i=/^#\/(\$defs|definitions)\/(.+)$/.exec(t.$ref);if(!i)return x(t);const c=s[i[2]];return c?a({...c,...u(t)}):x(t)},m=new Set(["__proto__","constructor","prototype"]),f=t=>{if(!t)return{};const i={};for(const[c,l]of Object.entries(t))m.has(c)||(i[c]=l);return i},x=t=>{if(!t.allOf||t.allOf.length===0)return t;const i={...t};delete i.allOf;for(const c of t.allOf){const l=a(c);Object.assign(i,{properties:{...f(i.properties),...f(l.properties)},required:q([...i.required??[],...l.required??[]])}),!i.description&&l.description&&(i.description=l.description),i.default===void 0&&l.default!==void 0&&(i.default=l.default),!i.type&&l.type&&(i.type=l.type)}return i},u=t=>{const{$ref:i,...c}=t;return c},o=(t,i)=>{let c=a(t);for(const l of i){if(!c)return null;if(/^\d+$/.test(l)){const v=Array.isArray(c.items)?c.items[Number(l)]:c.items;c=v?a(v):null;continue}const j=c.properties;if(j&&!m.has(l)&&l in j){c=a(j[l]);continue}const p=c.additionalProperties;if(p&&typeof p=="object"){c=a(p);continue}return null}return c},g=(t,i,c)=>{if(!t)return null;const l={};if(t.description&&(l.description=t.description),t.type&&(l.type=t.type),t.default!==void 0&&(l.default=t.default),t.enum&&(l.enum=t.enum),t.const!==void 0&&(l.const=t.const),t.deprecated&&(l.deprecated=!0),t.examples&&(l.examples=t.examples),t.properties&&(l.knownChildren=Object.keys(t.properties)),c&&(i!=null&&i.includes(c))&&(l.required=!0),t.items&&!Array.isArray(t.items)){const j=a(t.items),p=g(j,void 0,null);p&&(l.itemsInfo=p)}return(t.additionalProperties===!0||typeof t.additionalProperties=="object")&&(l.open=!0),l},d=t=>i=>{if(i.length===0)return g(a(t),void 0,null);const c=o(t,i.slice(0,-1));if(!c)return null;const l=i[i.length-1],j=o(c,[l]);return g(j,c.required,l)},h=t=>{const i=a(t);return Object.keys(i.properties??{})},y=t=>({at:d(t),rootKeys:()=>h(t),rootedAt:i=>{const c=o(t,i);return y(c??{})}});return y(r)}function q(e){return Array.from(new Set(e))}let $=null;function Y(){return $||($=B(K)),$}export{G as E,Y as s,V as u};
+import{aF as b,ap as n,S as N,aZ as O}from"./index-Ci1u018F.js";import{r as K}from"./claude-settings-schema-COigsajx.js";function G({node:e,targetScope:r,onOverride:s,schema:a,rootLabel:m}){const[f,x]=b.useState(""),[u,o]=b.useState(!0),g=[],d=e.kind==="object"&&Object.keys(e.children).length===0,y=((a==null?void 0:a.rootKeys())??[]).length>0;return n.jsxs("div",{className:"h-full flex flex-col",children:[n.jsxs("div",{className:"shrink-0 border-b border-line bg-bg-elev px-3 py-1.5 flex items-center gap-2 text-xs",children:[n.jsxs("span",{className:"text-fg-faint",children:["merged · overrides → ",n.jsx("span",{className:"text-fg-dim",children:N[r].label})]}),y&&n.jsxs("label",{className:"flex items-center gap-1 text-fg-faint cursor-pointer",children:[n.jsx("input",{type:"checkbox",checked:u,onChange:t=>o(t.target.checked),className:"accent-accent"}),"show unset keys"]}),n.jsx("div",{className:"flex-1"}),n.jsx("input",{value:f,onChange:t=>x(t.target.value),placeholder:"filter keys or descriptions…",className:"bg-bg border border-line rounded px-2 py-0.5 text-xs text-fg w-56"})]}),n.jsx("div",{className:"flex-1 overflow-auto px-3 py-2 font-mono text-xs",children:d&&!u?n.jsx("div",{className:"text-fg-faint italic px-2 py-4",children:"no settings resolved — all scope files empty or missing"}):n.jsx(E,{node:e,path:g,label:m??"(root)",targetScope:r,onOverride:s,filter:f,depth:0,schema:a,showGhosts:u,defaultOpen:!0})})]})}function E(e){return e.node.kind==="object"?n.jsx(P,{...e,node:e.node}):e.node.kind==="array"?n.jsx(J,{...e,node:e.node}):n.jsx(R,{...e,node:e.node})}function A(e,r){return r.trim()?e.toLowerCase().includes(r.toLowerCase()):!0}function w(e,r,s){return!!(!s.trim()||e.some(a=>A(a,s))||r!=null&&r.description&&A(r.description,s))}function P({node:e,path:r,label:s,targetScope:a,onOverride:m,filter:f,depth:x,schema:u,showGhosts:o,defaultOpen:g}){const[d,h]=b.useState(g??x<2),y=(u==null?void 0:u.at(r))??null,t=new Set(Object.keys(e.children)),i=o?(y==null?void 0:y.knownChildren)??[]:[],c=Array.from(new Set([...t,...i])).sort(),l=b.useMemo(()=>f.trim()?c.filter(p=>{const v=(u==null?void 0:u.at([...r,p]))??null;return w([...r,p],v,f)?!0:t.has(p)?L(e.children[p],[...r,p],f,u):!1}):c,[c.join(","),f,e,r.join("."),u]);if(f.trim()&&l.length===0&&!w(r,y,f))return null;if(r.length===0)return n.jsx("div",{children:l.map(p=>j(p))});return n.jsxs("div",{children:[n.jsxs("div",{className:"flex items-center gap-1 py-0.5 hover:bg-bg-elev/50 rounded cursor-pointer",style:{paddingLeft:x*14},onClick:()=>h(!d),children:[n.jsx("span",{className:"text-fg-faint w-3 shrink-0",children:d?"▾":"▸"}),n.jsx("span",{className:"text-fg",children:s}),n.jsxs("span",{className:"text-fg-faint",children:[" {",t.size,i.length>t.size?`/${new Set([...t,...i]).size}`:"","}"]}),(y==null?void 0:y.description)&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:y.description,children:["— ",y.description]})]}),d&&l.map(p=>j(p))]});function j(p){if(t.has(p))return n.jsx(E,{node:e.children[p],path:[...r,p],label:p,targetScope:a,onOverride:m,filter:f,depth:x+1,schema:u,showGhosts:o},p);const v=(u==null?void 0:u.at([...r,p]))??null;return v?n.jsx(I,{path:[...r,p],label:p,info:v,targetScope:a,onSet:m,depth:x+1,filter:f},p):null}}function L(e,r,s,a){const m=(a==null?void 0:a.at(r))??null;if(w(r,m,s))return!0;if(e.kind!=="object")return!1;for(const f of Object.keys(e.children))if(L(e.children[f],[...r,f],s,a))return!0;return!1}function J({node:e,path:r,label:s,filter:a,depth:m,schema:f}){const[x,u]=b.useState(!0),o=(f==null?void 0:f.at(r))??null;return w(r,o,a)?n.jsxs("div",{children:[n.jsxs("div",{className:"flex items-center gap-1 py-0.5 hover:bg-bg-elev/50 rounded cursor-pointer",style:{paddingLeft:m*14},onClick:()=>u(!x),children:[n.jsx("span",{className:"text-fg-faint w-3 shrink-0",children:x?"▾":"▸"}),n.jsx("span",{className:"text-fg",children:s}),n.jsxs("span",{className:"text-fg-faint",children:[" [",e.items.length,"]"]}),n.jsx(S,{tone:"warn",children:"accumulated"}),(o==null?void 0:o.description)&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:o.description,children:["— ",o.description]})]}),x&&e.items.map((g,d)=>n.jsxs("div",{className:"flex items-start gap-2 py-0.5",style:{paddingLeft:(m+1)*14},children:[n.jsx("span",{className:"text-fg-faint w-3 shrink-0"}),n.jsxs("span",{className:"text-fg-faint",children:[d,":"]}),n.jsx("span",{className:"text-fg-dim truncate max-w-xl",children:k(g.value)}),n.jsx(C,{scope:g.fromScope})]},d))]}):null}function R({node:e,path:r,label:s,targetScope:a,onOverride:m,filter:f,depth:x,schema:u}){const[o,g]=b.useState(!1),d=(u==null?void 0:u.at(r))??null;if(!w(r,d,f))return null;const h=e.winner!==a,y=e.shadowed.length>0;return n.jsxs("div",{children:[n.jsxs("div",{className:"group flex items-center gap-2 py-0.5 hover:bg-bg-elev/50 rounded",style:{paddingLeft:x*14},children:[n.jsx("span",{className:`w-3 shrink-0 ${y?"text-fg-faint cursor-pointer":""}`,onClick:()=>y&&g(!o),children:y?o?"▾":"▸":""}),n.jsxs("span",{className:"text-fg",children:[s,":"]}),n.jsx("span",{className:"text-fg-dim truncate max-w-md",children:k(e.value)}),n.jsx(C,{scope:e.winner}),(d==null?void 0:d.deprecated)&&n.jsx(S,{tone:"warn",children:"deprecated"}),(d==null?void 0:d.default)!==void 0&&_(e.value,d.default)&&n.jsx(S,{tone:"dim",children:"= default"}),e.typeMismatch&&n.jsx("span",{className:"text-yellow-500/80",title:"shadowed scopes have a different value type",children:"⚠"}),(d==null?void 0:d.description)&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:d.description,children:["— ",d.description]}),n.jsx("div",{className:"flex-1"}),(d==null?void 0:d.enum)&&n.jsx(F,{values:d.enum}),n.jsx("button",{disabled:!h,onClick:()=>m(r,e.value),className:`opacity-0 group-hover:opacity-100 px-1.5 py-0 text-[10px] border rounded transition-opacity ${h?"border-accent/50 text-accent hover:bg-accent hover:text-bg":"border-line text-fg-faint cursor-not-allowed"}`,title:h?`copy into ${N[a].label} draft`:`already winning in ${N[a].label}`,children:"override"})]}),o&&e.shadowed.map((t,i)=>n.jsxs("div",{className:"flex items-center gap-2 py-0.5 text-fg-faint line-through",style:{paddingLeft:(x+1)*14+12},children:[n.jsx("span",{children:"shadowed:"}),n.jsx("span",{className:"truncate max-w-xl",children:k(t.value)}),n.jsx(C,{scope:t.scope,dim:!0})]},i))]})}function I({path:e,label:r,info:s,targetScope:a,onSet:m,depth:f,filter:x}){if(!w(e,s,x))return null;const u=s.default!==void 0?s.default:M(s.type),o=Array.isArray(s.type)?s.type.join("|"):s.type??"?";return n.jsxs("div",{className:"group flex items-center gap-2 py-0.5 hover:bg-bg-elev/50 rounded opacity-60",style:{paddingLeft:f*14},children:[n.jsx("span",{className:"w-3 shrink-0"}),n.jsx("span",{className:"text-fg-dim",children:r}),n.jsx(S,{tone:"dim",children:o}),s.required&&n.jsx(S,{tone:"warn",children:"required"}),s.default!==void 0&&n.jsxs("span",{className:"text-fg-faint",children:["default: ",k(s.default)]}),s.description&&n.jsxs("span",{className:"text-fg-faint truncate max-w-md",title:s.description,children:["— ",s.description]}),n.jsx("div",{className:"flex-1"}),s.enum&&n.jsx(F,{values:s.enum}),n.jsx("button",{onClick:()=>m(e,u),className:"opacity-0 group-hover:opacity-100 px-1.5 py-0 text-[10px] border border-accent/50 rounded text-accent hover:bg-accent hover:text-bg transition-opacity",title:`write to ${N[a].label} draft`,children:"set"})]})}function _(e,r){return e===r?!0:typeof e!=typeof r?!1:e&&r&&typeof e=="object"?JSON.stringify(e)===JSON.stringify(r):!1}function M(e){switch(Array.isArray(e)?e[0]:e){case"boolean":return!1;case"integer":case"number":return 0;case"string":return"";case"array":return[];case"object":return{};case"null":return null;default:return null}}function k(e){if(typeof e=="string")return JSON.stringify(e);if(e===null)return"null";if(typeof e=="object"){const r=JSON.stringify(e);return r.length>100?r.slice(0,100)+"…":r}return String(e)}function C({scope:e,dim:r}){const s=e==="user"?"bg-bg-hi text-fg-dim border-line":e==="project"?"bg-blue-950/30 text-blue-400/80 border-blue-900/40":"bg-purple-950/30 text-purple-400/80 border-purple-900/40";return n.jsx("span",{className:`text-[10px] px-1 py-0 rounded border uppercase tracking-wide shrink-0 ${s} ${r?"opacity-60":""}`,children:N[e].label})}function S({children:e,tone:r="default"}){const s={default:"bg-bg-hi text-fg-dim border-line",warn:"bg-yellow-950/30 text-yellow-500/80 border-yellow-900/40",dim:"bg-bg-elev text-fg-faint border-line"}[r];return n.jsx("span",{className:`text-[10px] px-1 py-0 rounded border uppercase tracking-wide shrink-0 ${s}`,children:e})}function F({values:e}){const r=e.map(s=>String(s)).join(" | ");return n.jsxs("span",{className:"text-[10px] text-fg-faint truncate max-w-xs",title:`allowed: ${r}`,children:["∈ ",r.length>30?r.slice(0,30)+"…":r]})}function V(e,r,s){const a=O(o=>o.files),m=O(o=>o.loadJson),f=O(o=>o.watchFile),x=O(o=>o.unwatchFile),u=b.useMemo(()=>{const o={};for(const g of e.scopes){const d=e.resolve(g,r??"",s);d&&(o[g]=d)}return o},[e,r,s]);return b.useEffect(()=>{const o=Object.values(u).filter(Boolean);return o.forEach(g=>{a[g]||m(g),f(g)}),()=>{o.forEach(g=>x(g))}},[JSON.stringify(u)]),u}function B(e){const r=e??{},s={...r.$defs??{},...r.definitions??{}},a=t=>{if(!t)return{};if(!t.$ref)return x(t);const i=/^#\/(\$defs|definitions)\/(.+)$/.exec(t.$ref);if(!i)return x(t);const c=s[i[2]];return c?a({...c,...u(t)}):x(t)},m=new Set(["__proto__","constructor","prototype"]),f=t=>{if(!t)return{};const i={};for(const[c,l]of Object.entries(t))m.has(c)||(i[c]=l);return i},x=t=>{if(!t.allOf||t.allOf.length===0)return t;const i={...t};delete i.allOf;for(const c of t.allOf){const l=a(c);Object.assign(i,{properties:{...f(i.properties),...f(l.properties)},required:q([...i.required??[],...l.required??[]])}),!i.description&&l.description&&(i.description=l.description),i.default===void 0&&l.default!==void 0&&(i.default=l.default),!i.type&&l.type&&(i.type=l.type)}return i},u=t=>{const{$ref:i,...c}=t;return c},o=(t,i)=>{let c=a(t);for(const l of i){if(!c)return null;if(/^\d+$/.test(l)){const v=Array.isArray(c.items)?c.items[Number(l)]:c.items;c=v?a(v):null;continue}const j=c.properties;if(j&&!m.has(l)&&l in j){c=a(j[l]);continue}const p=c.additionalProperties;if(p&&typeof p=="object"){c=a(p);continue}return null}return c},g=(t,i,c)=>{if(!t)return null;const l={};if(t.description&&(l.description=t.description),t.type&&(l.type=t.type),t.default!==void 0&&(l.default=t.default),t.enum&&(l.enum=t.enum),t.const!==void 0&&(l.const=t.const),t.deprecated&&(l.deprecated=!0),t.examples&&(l.examples=t.examples),t.properties&&(l.knownChildren=Object.keys(t.properties)),c&&(i!=null&&i.includes(c))&&(l.required=!0),t.items&&!Array.isArray(t.items)){const j=a(t.items),p=g(j,void 0,null);p&&(l.itemsInfo=p)}return(t.additionalProperties===!0||typeof t.additionalProperties=="object")&&(l.open=!0),l},d=t=>i=>{if(i.length===0)return g(a(t),void 0,null);const c=o(t,i.slice(0,-1));if(!c)return null;const l=i[i.length-1],j=o(c,[l]);return g(j,c.required,l)},h=t=>{const i=a(t);return Object.keys(i.properties??{})},y=t=>({at:d(t),rootKeys:()=>h(t),rootedAt:i=>{const c=o(t,i);return y(c??{})}});return y(r)}function q(e){return Array.from(new Set(e))}let $=null;function D(){return $||($=B(K)),$}export{G as E,D as s,V as u};

package/dist/assets/{useAgentsDirWatch-CMpx0d04.js → useAgentsDirWatch-B1NBmOAe.js}

@@ -1 +1 @@
-import{V as e,b2 as a,aZ as n}from"./index-CTBpf-26.js";const c=new Set(e.map(t=>t.tag));function l(t){return t.filter(o=>c.has(o))}function s(t,o={}){return{name:t.name,originalName:t.name,description:t.description??"",tools:t.tools,model:t.model??"inherit",effort:t.effort??void 0,color:t.color??"",tags:l(t.tags),projects:t.projects,action:t.action??void 0,actionLabel:t.actionLabel??void 0,title:t.title??void 0,body:t.body,...o}}function d(t,o){const i=a();n([i?`${i}/.claude/agents`:null,t?`${t}/.claude/agents`:null],o)}export{s as a,l as t,d as u};
+import{V as e,b3 as a,a_ as n}from"./index-Ci1u018F.js";const c=new Set(e.map(t=>t.tag));function l(t){return t.filter(o=>c.has(o))}function s(t,o={}){return{name:t.name,originalName:t.name,description:t.description??"",tools:t.tools,model:t.model??"inherit",effort:t.effort??void 0,color:t.color??"",tags:l(t.tags),projects:t.projects,action:t.action??void 0,actionLabel:t.actionLabel??void 0,title:t.title??void 0,body:t.body,...o}}function d(t,o){const i=a();n([i?`${i}/.claude/agents`:null,t?`${t}/.claude/agents`:null],o)}export{s as a,l as t,d as u};

package/dist/assets/{useRemotePeers-CI2axd-L.js → useRemotePeers-BHjSJs9D.js}

@@ -1 +1 @@
-import{ao as t,A as f,bd as g,aE as d}from"./index-CTBpf-26.js";function j({children:s,right:e}){return t.jsxs("div",{className:"flex items-baseline justify-between mb-2.5",children:[t.jsx("span",{className:"text-[11.5px] font-bold uppercase tracking-[0.8px] text-fg-faint",children:s}),e]})}function y({kind:s="soft",icon:e,children:c,onClick:i,disabled:o,testId:n}){return t.jsxs("button",{type:"button","data-testid":n,onClick:i,disabled:o,className:`shrink-0 inline-flex items-center gap-2 rounded-lg px-3.5 py-2 text-[13px] font-semibold transition-colors disabled:opacity-50 ${s==="soft"?"bg-bg-hi border border-line text-fg hover:bg-bg":"text-fg-dim hover:text-fg"}`,children:[e&&t.jsx(f,{name:e,size:15}),c]})}function N({icon:s,title:e,subtitle:c,badge:i,action:o,testId:n}){return t.jsxs("div",{"data-testid":n,className:"flex items-center gap-3.5 bg-bg-hi border border-line rounded-xl px-[18px] py-3.5",children:[t.jsx("span",{className:"w-[34px] h-[34px] rounded-lg bg-bg border border-line grid place-items-center text-fg-dim shrink-0",children:t.jsx(f,{name:s,size:17})}),t.jsxs("div",{className:"flex-1 min-w-0",children:[t.jsxs("div",{className:"flex items-center gap-2.5 mb-0.5",children:[t.jsx("span",{className:"text-sm font-semibold text-fg truncate",children:e}),i]}),t.jsx("div",{className:"font-mono text-[11.5px] text-fg-faint truncate",children:c})]}),o]})}function v({onClick:s,disabled:e,testId:c,children:i="Revoke"}){return t.jsx("button",{"data-testid":c,onClick:s,disabled:e,className:"shrink-0 rounded-lg border border-line bg-bg text-accent px-3.5 py-1.5 text-[12.5px] font-semibold hover:bg-bg-hi disabled:opacity-50 transition-colors",children:i})}function k({code:s,onConfirm:e,testId:c,codeTestId:i,confirmTestId:o,peer:n="browser"}){return t.jsxs("div",{"data-testid":c,className:"flex items-start gap-3.5 px-5 py-4 rounded-2xl border border-accent/40 bg-accent/[0.06]",children:[t.jsx("span",{className:"w-[38px] h-[38px] rounded-[11px] shrink-0 grid place-items-center bg-bg-hi text-accent",children:t.jsx(f,{name:"shield",size:20})}),t.jsxs("div",{className:"flex-1 min-w-0 text-sm text-fg",children:[t.jsx("strong",{className:"font-semibold",children:"Verify E2E session."})," Compare this code with the ",n," — they must match.",t.jsx("div",{"data-testid":i,className:"my-2 text-3xl font-mono tracking-[0.3em] text-center text-accent select-all",children:s}),t.jsx("p",{className:"text-[12.5px] text-fg-faint mb-3",children:"If the codes match, confirm below. Mutating commands are blocked until confirmed."}),t.jsx("button",{"data-testid":o,onClick:e,className:"rounded-lg bg-accent text-white px-4 py-2 text-[13px] font-semibold hover:opacity-90 transition-opacity",children:"Codes match — confirm"})]})]})}function C({children:s,testId:e}){return t.jsx("div",{"data-testid":e,className:"bg-bg-hi border border-line rounded-xl p-5 text-center text-[13.5px] text-fg-faint italic font-serif",children:s})}const m=s=>(s==null?void 0:s.message)||String(s);function S(s){const e=g(r=>r.show),[c,i]=d.useState([]),o=d.useRef(s);o.current=s;const n=d.useCallback(async()=>{try{i(await window.api.remoteClient.list())}catch(r){e("error",m(r))}},[e]);d.useEffect(()=>{n();const r=window.api.remoteClient.onStatus(a=>{var x;(x=o.current)==null||x.call(o,a),i(l=>l.map(b=>b.peerId===a.peerId?{...b,status:a.status,reason:a.reason,sas:a.sas}:b))});return()=>{r()}},[n]);const p=d.useCallback(async r=>{try{const a=await window.api.remoteClient.connect(r);i(x=>x.map(l=>l.peerId===r?{...l,status:a.status,reason:a.reason,sas:a.sas}:l))}catch(a){e("error",m(a))}},[e]),u=d.useCallback(async r=>{try{const a=await window.api.remoteClient.confirmSas(r);a.ok||e("error",a.reason??"SAS confirmation failed"),await n()}catch(a){e("error",m(a))}},[e,n]),h=d.useCallback(async r=>{try{await window.api.remoteClient.remove(r),await n()}catch(a){e("error",m(a))}},[e,n]);return{peers:c,refresh:n,connect:p,confirmSas:u,revoke:h}}export{C as E,y as P,N as R,k as S,v as a,j as b,S as u};
+import{ap as t,A as f,be as g,aF as d}from"./index-Ci1u018F.js";function j({children:s,right:e}){return t.jsxs("div",{className:"flex items-baseline justify-between mb-2.5",children:[t.jsx("span",{className:"text-[11.5px] font-bold uppercase tracking-[0.8px] text-fg-faint",children:s}),e]})}function y({kind:s="soft",icon:e,children:c,onClick:i,disabled:o,testId:n}){return t.jsxs("button",{type:"button","data-testid":n,onClick:i,disabled:o,className:`shrink-0 inline-flex items-center gap-2 rounded-lg px-3.5 py-2 text-[13px] font-semibold transition-colors disabled:opacity-50 ${s==="soft"?"bg-bg-hi border border-line text-fg hover:bg-bg":"text-fg-dim hover:text-fg"}`,children:[e&&t.jsx(f,{name:e,size:15}),c]})}function N({icon:s,title:e,subtitle:c,badge:i,action:o,testId:n}){return t.jsxs("div",{"data-testid":n,className:"flex items-center gap-3.5 bg-bg-hi border border-line rounded-xl px-[18px] py-3.5",children:[t.jsx("span",{className:"w-[34px] h-[34px] rounded-lg bg-bg border border-line grid place-items-center text-fg-dim shrink-0",children:t.jsx(f,{name:s,size:17})}),t.jsxs("div",{className:"flex-1 min-w-0",children:[t.jsxs("div",{className:"flex items-center gap-2.5 mb-0.5",children:[t.jsx("span",{className:"text-sm font-semibold text-fg truncate",children:e}),i]}),t.jsx("div",{className:"font-mono text-[11.5px] text-fg-faint truncate",children:c})]}),o]})}function v({onClick:s,disabled:e,testId:c,children:i="Revoke"}){return t.jsx("button",{"data-testid":c,onClick:s,disabled:e,className:"shrink-0 rounded-lg border border-line bg-bg text-accent px-3.5 py-1.5 text-[12.5px] font-semibold hover:bg-bg-hi disabled:opacity-50 transition-colors",children:i})}function k({code:s,onConfirm:e,testId:c,codeTestId:i,confirmTestId:o,peer:n="browser"}){return t.jsxs("div",{"data-testid":c,className:"flex items-start gap-3.5 px-5 py-4 rounded-2xl border border-accent/40 bg-accent/[0.06]",children:[t.jsx("span",{className:"w-[38px] h-[38px] rounded-[11px] shrink-0 grid place-items-center bg-bg-hi text-accent",children:t.jsx(f,{name:"shield",size:20})}),t.jsxs("div",{className:"flex-1 min-w-0 text-sm text-fg",children:[t.jsx("strong",{className:"font-semibold",children:"Verify E2E session."})," Compare this code with the ",n," — they must match.",t.jsx("div",{"data-testid":i,className:"my-2 text-3xl font-mono tracking-[0.3em] text-center text-accent select-all",children:s}),t.jsx("p",{className:"text-[12.5px] text-fg-faint mb-3",children:"If the codes match, confirm below. Mutating commands are blocked until confirmed."}),t.jsx("button",{"data-testid":o,onClick:e,className:"rounded-lg bg-accent text-white px-4 py-2 text-[13px] font-semibold hover:opacity-90 transition-opacity",children:"Codes match — confirm"})]})]})}function C({children:s,testId:e}){return t.jsx("div",{"data-testid":e,className:"bg-bg-hi border border-line rounded-xl p-5 text-center text-[13.5px] text-fg-faint italic font-serif",children:s})}const m=s=>(s==null?void 0:s.message)||String(s);function S(s){const e=g(r=>r.show),[c,i]=d.useState([]),o=d.useRef(s);o.current=s;const n=d.useCallback(async()=>{try{i(await window.api.remoteClient.list())}catch(r){e("error",m(r))}},[e]);d.useEffect(()=>{n();const r=window.api.remoteClient.onStatus(a=>{var x;(x=o.current)==null||x.call(o,a),i(l=>l.map(b=>b.peerId===a.peerId?{...b,status:a.status,reason:a.reason,sas:a.sas}:b))});return()=>{r()}},[n]);const p=d.useCallback(async r=>{try{const a=await window.api.remoteClient.connect(r);i(x=>x.map(l=>l.peerId===r?{...l,status:a.status,reason:a.reason,sas:a.sas}:l))}catch(a){e("error",m(a))}},[e]),u=d.useCallback(async r=>{try{const a=await window.api.remoteClient.confirmSas(r);a.ok||e("error",a.reason??"SAS confirmation failed"),await n()}catch(a){e("error",m(a))}},[e,n]),h=d.useCallback(async r=>{try{await window.api.remoteClient.remove(r),await n()}catch(a){e("error",m(a))}},[e,n]);return{peers:c,refresh:n,connect:p,confirmSas:u,revoke:h}}export{C as E,y as P,N as R,k as S,v as a,j as b,S as u};

package/dist/index.html

@@ -7,7 +7,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Newsreader:ital,opsz,wght@0,6..72,400;0,6..72,500;0,6..72,600;0,6..72,700;1,6..72,400&family=Geist:wght@300;400;500;600;700&family=IBM+Plex+Mono:wght@400;500;600&display=swap" rel="stylesheet">
-    <script type="module" crossorigin src="./assets/index-CTBpf-26.js"></script>
+    <script type="module" crossorigin src="./assets/index-Ci1u018F.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/monaco-editor-BsIlgG7c.js">
     <link rel="stylesheet" crossorigin href="./assets/monaco-editor-Cu5D__1H.css">
     <link rel="stylesheet" crossorigin href="./assets/index-Dutcsly-.css">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-session-manager",
-  "version": "0.112.0",
+  "version": "0.113.0",
   "description": "Local cockpit for the Claude Code CLI — multi-tab terminal, full config surface, scheduler, voice dictation, and live observability.",
   "type": "module",
   "main": "src/main/index.cjs",

package/plugins/session-manager-dev/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "session-manager-dev",
   "description": "The default end-to-end development skillset for the Claude Code Session Manager: decompose work into scheduler PRDs and track them to a validated finish (/develop), publish releases to npm (/builder), and hand a finding to another project on this machine (/send-feedback). Together with the session-manager scheduler these form a develop → queue → validate → release loop.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": {
     "name": "Stanislav Georgiev",
     "url": "https://github.com/StanislavBG"

package/plugins/session-manager-dev/skills/send-feedback/SKILL.md

@@ -139,6 +139,15 @@ project has not yet agreed with. Use `bug` or `feature` only when the finding is
 unambiguous and you'd expect them to start decomposing it on sight (those two
 treat PRD decomposition as the expected next step).
 
+**Auto-start (only when the human asked).** If the human in THIS conversation
+explicitly asked you to do the work in the other project, also pass
+`autoStart: true` and `humanRequestQuote` — copied VERBATIM from their own
+message, which must name the target project. Never write or paraphrase the
+quote, and never pass `autoStart` for something you decided on your own: that
+stays a plain proposal. If the quote cannot be verified, the call silently falls
+back to a normal `proposed` session (the result note gives the reason), so
+report it as a proposal in that case.
+
 `fromEpicId` is filled in automatically from your running session; pass it
 explicitly only if you know it and the auto-fill failed. When it resolves, a
 receipt is chained onto your own session's event log so your transcript records
@@ -151,6 +160,10 @@ Say exactly this much: the proposal was **delivered as a proposed session** in
 human sees the motivation, plan and acceptance criteria on the proposal before
 approving.
 
+If the result status is `auto-approved`, say instead that the session was
+auto-approved on the human's request and is starting in `<toCwd>` — not that it
+is done.
+
 Do **not** say the other project has been notified-and-is-working-on-it, that
 the bug is filed/fixed/assigned, or that you'll follow up when they respond.
 **There is no reply channel and no callback.** If the user needs an answer, the

package/scripts/scheduler-mcp-server.cjs

@@ -410,6 +410,14 @@ const TOOLS = [
           type: 'array', items: { type: 'string' },
           description: 'Optional absolute paths worth reading, appended as Reference lines',
         },
+        autoStart: {
+          type: 'boolean',
+          description: 'Set true ONLY when the human in THIS conversation explicitly asked for this work in the other project. Requires humanRequestQuote. Never set it for work you decided on your own initiative. An unverified request silently falls back to a plain PROPOSED session.',
+        },
+        humanRequestQuote: {
+          type: 'string',
+          description: "Required with autoStart. Copy VERBATIM from the human's own message in this conversation; that message must name the target project. Do not paraphrase or write it yourself.",
+        },
       },
       required: ['toCwd', 'fromCwd', 'title', 'motivation', 'acceptanceCriteria', 'body'],
     },
@@ -699,11 +707,21 @@ async function handleCallTool(request) {
         payload.originProjectRoot = process.env.SM_PROJECT_ROOT;
       }
       const result = await adminRequest('POST', '/admin/feedback/open-session', payload);
-      // Never say "sent", "filed" or "fixed" — this call delivers a PROPOSAL
-      // that a human in the other project must still approve.
-      const note = result?.ok !== false
-        ? ' — delivered as a PROPOSED session in the receiving project; it runs only if a human there presses Approve & start. No reply channel.'
-        : '';
+      // Never say "sent", "filed" or "fixed" — this call delivers a session
+      // that is either a PROPOSAL a human must approve or, when the human's own
+      // request was verified, one that is auto-approved and starting. It never
+      // reports the work as done.
+      let note = '';
+      if (result?.ok !== false) {
+        if (result?.status === 'auto-approved') {
+          note = ' — auto-approved on the human\'s explicit request; the session is starting in the receiving project. No reply channel; the work is not done yet.';
+        } else {
+          note = ' — delivered as a PROPOSED session in the receiving project; it runs only if a human there presses Approve & start. No reply channel.';
+          if (args.autoStart && result?.autoStart && result.autoStart.granted !== true && result.autoStart.reason) {
+            note += ` Auto-start was requested but not granted: ${result.autoStart.reason}`;
+          }
+        }
+      }
       return { content: [{ type: 'text', text: JSON.stringify(result) + note }] };
     }
     if (name === 'chat_send_prompt') {

package/src/main/build-info.json

@@ -1,8 +1,8 @@
 {
-  "version": "0.112.0",
-  "gitSha": "766f7a3483a11060c0fad4f64ce760da47af9905",
-  "gitShortSha": "766f7a34",
+  "version": "0.113.0",
+  "gitSha": "07baa2cc0601e109b6591f57bfb2ced8f34884dd",
+  "gitShortSha": "07baa2cc",
   "gitBranch": "HEAD",
-  "builtAt": "2026-10-11T20:38:06.016Z",
+  "builtAt": "2026-10-12T19:15:00.757Z",
   "dirty": false
 }

package/src/main/chatRunner.cjs

@@ -1008,10 +1008,26 @@ function registerAdminRoute(adminHttp) {
 
 // ─── IPC handler registration ─────────────────────────────────────────────
 
+/**
+ * Record a chat prompt into the human prompt ledger, only when the renderer
+ * explicitly declared origin === 'human'. Absent/other origins are not-human
+ * (fail-closed). Never throws.
+ * @param {{ sessionId: string, prompt: string, origin?: string }} args
+ */
+function noteChatRunOrigin({ sessionId, prompt, origin }) {
+  try {
+    if (origin !== 'human') return;
+    require('./lib/feedback-remote/humanPromptLedger.cjs').recordHumanPrompt(sessionId, prompt);
+  } catch {
+    /* never throws */
+  }
+}
+
 function registerChatHandlers() {
   const { schemas, validated } = require('./ipcSchemas.cjs');
 
-  ipcMain.handle('chat:run', validated(schemas.chatRun, async ({ tabId, sessionId, prompt, cwd, resume, promptId }) => {
+  ipcMain.handle('chat:run', validated(schemas.chatRun, async ({ tabId, sessionId, prompt, cwd, resume, promptId, origin }) => {
+    noteChatRunOrigin({ sessionId, prompt, origin });
     // Report what actually happened instead of an unconditional { ok: true }.
     // A user send is always accepted now (queued behind the tab's live run if
     // one holds it), but the renderer gets the truth either way rather than a
@@ -1042,6 +1058,7 @@ module.exports = {
   __liveSessionCount: () => liveSessions.size,
   attachWindow,
   registerChatHandlers,
+  noteChatRunOrigin,
   parseStopSignal,
   splitStopSignal,
   parseContextUsageMarkdown,

package/src/main/config.cjs

@@ -392,8 +392,21 @@ function watchKeyOf(key, depth) {
  */
 function watch(paths, senderId, opts) {
   const depth = opts?.depth;
+  const watched = [];
+  const rejected = [];
   for (const rawPath of paths) {
-    validatePath(expandHome(rawPath)); // security check — throws if out of bounds
+    try {
+      validatePath(expandHome(rawPath)); // security check — throws if out of bounds
+    } catch (err) {
+      // Per-path: one bad path must not abort the rest of the batch.
+      rejected.push(rawPath);
+      if (!warnedRejectedPaths.has(rawPath)) {
+        warnedRejectedPaths.add(rawPath);
+        logs.writeLine({ level: 'warn', scope: 'config', message: 'config:watch path reject', meta: { path: rawPath, error: err?.message } });
+      }
+      continue;
+    }
+    watched.push(rawPath);
     const key = normalizePathKey(rawPath);
     const mapKey = watchKeyOf(key, depth);
     if (senderId != null) {
@@ -430,8 +443,12 @@ function watch(paths, senderId, opts) {
     });
     watchers.set(mapKey, { watcher: w, refCount: 1 });
   }
+  return { watched, rejected };
 }
 
+// Distinct rejected watch paths already warned about (once per process).
+const warnedRejectedPaths = new Set();
+
 function unwatch(paths, senderId, opts) {
   for (const rawPath of paths) {
     const key = watchKeyOf(normalizePathKey(rawPath), opts?.depth);

package/src/main/index.cjs

@@ -1402,6 +1402,12 @@ app.whenReady().then(async () => {
     console.log(`[main] scheduler ownership held by pid ${ownership.holderPid} — running scheduler-passive (no reconciliation, no admin server)`);
     logs.writeLine({ scope: 'scheduler', level: 'info', message: 'scheduler-passive: ownership held by another instance', meta: { holderPid: ownership.holderPid } });
   }
+  // Sweep orphaned `<file>.tmp-<pid>-…` files from crashed atomic writers in the
+  // machine-global state dir (per-project dirs belong to reconcile).
+  try {
+    const { removed } = require('./lib/util/atomicFs.cjs').sweepStaleTmpFiles(path.join(os.homedir(), '.claude', 'session-manager'));
+    logs.writeLine({ scope: 'main', level: 'info', message: 'stale tmp sweep', meta: { removed: removed.length } });
+  } catch { /* sweep is best-effort */ }
   // First-boot default: install the bundled session-manager-dev plugin (its 3
   // dev skills) from the app's own marketplace. One-shot + idempotent; never
   // throws. SM_SEED_DEV_PLUGIN_DISABLE=1 to opt out.

package/src/main/ipcSchemas.cjs

@@ -919,6 +919,9 @@ const chatRun = z.object({
   // Originating PromptTicket.id (PRD 748) when this run was dequeued from a
   // tab's prompt queue — absent for a fresh manual send with no ticket.
   promptId: z.string().min(1).max(128).optional(),
+  // Who authored this send. Only 'human' is auto-approve evidence for
+  // crossProjectFeedback; absent or any other value is treated as not-human.
+  origin: z.enum(['human', 'external', 'inbound-proposal']).optional(),
 });
 
 const chatCancel = z.object({

package/src/main/lib/activeSessions.cjs

@@ -37,6 +37,17 @@ const TMP_DROP_ROOTS = {
   get prefixDropRoots() { return [WORKTREE_KIND_CONFIG.job.root, WORKTREE_KIND_CONFIG.epic.root]; },
 };
 
+// Test-harness project cwds live at <tmpdir>/sst-*/…. They are never real
+// projects, and leaking them into the active list made the renderer's batched
+// config:watch hit 618 "Path outside allowed boundaries" rejects. Only the
+// `sst-` first segment is matched, so test-stubbed HOMEs that are not sst-*
+// dirs (see the exactDropCwds note above) are still kept.
+function isSstHarnessCwd(cwd) {
+  const rel = path.relative(TMPDIR, cwd);
+  if (rel === '' || rel.startsWith('..') || path.isAbsolute(rel)) return false;
+  return rel.split(path.sep)[0].startsWith('sst-');
+}
+
 // Transcript reads only need the last line with a `cwd` field — a few dozen
 // lines is always enough. 64 KB keeps peak RSS proportionate.
 const TAIL_BYTES = 64 * 1024;
@@ -389,6 +400,7 @@ function deriveCwds(records, maxAgeMin, maxCwds, tmpDropRoots) {
       return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel);
     });
     if (isUnderPrefixDropRoot) return;
+    if (isSstHarnessCwd(cwd)) return;
     if (seen.has(cwd) || result.length >= maxCwds) return;
     // Must exist AND be a directory — a transcript naming a since-deleted
     // path, or a file, is not a project.
@@ -456,6 +468,7 @@ module.exports = {
   allProjectCwds,
   projectRootOf,
   worktreeMainRootOf,
+  isSstHarnessCwd,
   bustProjectCwdCache,
   __waitForPendingRefresh,
 };

package/src/main/lib/claude/rateLimitDetect.cjs

@@ -13,20 +13,39 @@
 
 const { readTail } = require('../util/fileTail.cjs');
 
-/** Scan the tail of a job's log for the canonical rate-limit signal. We look
- *  at the last 16 KB — final result event always lands at the end. Covers
- *  both unified-window rate-limit types (five_hour, seven_day), the raw
- *  429 status, and the two human-readable limit-message phrasings the CLI
- *  emits ("You've hit your limit" / "You've reached your <model> limit"). */
+/** Scan the tail of a job's log for a GENUINE rate-limit rejection. Parses the
+ *  last 16 KB line by line as JSON (non-JSON / partial lines are skipped) and
+ *  returns true only for: (a) a rate_limit_event whose rate_limit_info.status
+ *  is 'rejected'; (b) a result event with api_error_status 429; (c) an
+ *  is_error result event whose `result` text is the CLI's limit message
+ *  ("You've hit your ... limit" / "You've reached your ... limit").
+ *
+ *  Never substring-match the raw text: informational rate_limit_event lines
+ *  (status 'allowed' / 'allowed_warning') carry rateLimitType on every run, so
+ *  the old substring match turned any non-zero exit (e.g. a watchdog SIGTERM,
+ *  exit 143) into a machine-wide rate_limit pause (2026-10-11 incident: 4-day
+ *  pause at 58% weekly). Tool output may also mention 429 or "rate limit". */
 function detectRateLimitInLog(logPath) {
   try {
     const text = readTail(logPath, 16384);
     if (!text) return false;
-    return /"rateLimitType":"five_hour"/.test(text)
-      || /"rateLimitType":"seven_day"/.test(text)
-      || /"api_error_status":429/.test(text)
-      || /You'?ve hit your limit/.test(text)
-      || /You'?ve reached your .* limit/.test(text);
+    for (const line of text.split('\n')) {
+      const t = line.trim();
+      if (!t || t[0] !== '{') continue;
+      let ev;
+      try { ev = JSON.parse(t); } catch { continue; }
+      if (!ev || typeof ev !== 'object') continue;
+      if (ev.type === 'rate_limit_event') {
+        if (ev.rate_limit_info && ev.rate_limit_info.status === 'rejected') return true;
+      } else if (ev.type === 'result') {
+        if (ev.api_error_status === 429) return true;
+        if (ev.is_error === true && typeof ev.result === 'string'
+          && (/You'?ve hit your .*limit/.test(ev.result) || /You'?ve reached your .* limit/.test(ev.result))) {
+          return true;
+        }
+      }
+    }
+    return false;
   } catch {
     return false;
   }

package/src/main/lib/claude/rateLimitWindow.cjs

@@ -21,17 +21,21 @@ const { readTail } = require('../util/fileTail.cjs');
 const TAIL_BYTES = 64 * 1024;
 
 /**
- * Scans a run log's tail for rate_limit_event entries and returns the
- * UNIX-seconds resetsAt of the window that actually bound (utilization >= 1.0)
- * in the LAST such event. When multiple windows bind in that event, the
- * latest resetsAt wins. Returns null when no rate_limit_event is found, or
- * none of its windows are at/above 1.0 utilization.
+ * Scans a run log's tail for rate_limit_event entries. The REJECTED event is
+ * authoritative (2026-10-11 incident: an allowed-only log with a seven_day
+ * window pause landed on the seven_day reset 4 days out): if any event has
+ * status 'rejected', the LAST one's reset wins — rate_limit_info.resetsAt, else
+ * unifiedWindows[rateLimitType].resetsAt. Otherwise, a last event carrying a
+ * status (allowed / allowed_warning) yields null, even if a window shows
+ * utilization >= 1.0 (overage is not a rejection). Legacy: a last event with
+ * no status falls back to the latest resetsAt among windows at utilization >= 1.0.
  */
 function resolveBindingRateLimitReset(logPath) {
   const text = readTail(logPath, TAIL_BYTES);
   if (!text) return null;
 
-  let lastWindows = null;
+  let lastRejected = null;
+  let lastEvent = null;
   for (const line of text.split('\n')) {
     const trimmed = line.trim();
     if (!trimmed || trimmed[0] !== '{') continue;
@@ -41,12 +45,20 @@ function resolveBindingRateLimitReset(logPath) {
     } catch {
       continue;
     }
-    const windows = event?.rate_limit_info?.unifiedWindows;
-    if (event?.type === 'rate_limit_event' && windows && typeof windows === 'object') {
-      lastWindows = windows;
-    }
+    if (event?.type !== 'rate_limit_event' || !event.rate_limit_info) continue;
+    lastEvent = event.rate_limit_info;
+    if (lastEvent.status === 'rejected') lastRejected = lastEvent;
+  }
+
+  if (lastRejected) {
+    if (typeof lastRejected.resetsAt === 'number') return lastRejected.resetsAt;
+    const typed = lastRejected.unifiedWindows?.[lastRejected.rateLimitType]?.resetsAt;
+    return typeof typed === 'number' ? typed : null;
   }
-  if (!lastWindows) return null;
+  if (!lastEvent || lastEvent.status !== undefined) return null;
+
+  const lastWindows = lastEvent.unifiedWindows;
+  if (!lastWindows || typeof lastWindows !== 'object') return null;
 
   let latestBoundReset = null;
   for (const window of Object.values(lastWindows)) {

package/src/main/lib/credentials.cjs

@@ -6,7 +6,6 @@ const path = require('node:path');
 const os = require('node:os');
 const { spawn, execFileSync } = require('node:child_process');
 const { cleanChildEnv, pathWithUserBins } = require('./process/cleanEnv.cjs');
-const atomicFs = require('./util/atomicFs.cjs');
 const { resolveClaudeBin, claudeSpawnTarget } = require('./claude/claudeBin.cjs');
 
 const CREDS_PATH = path.join(os.homedir(), '.claude', '.credentials.json');
@@ -47,22 +46,9 @@ function keychainAccount() {
   return os.userInfo().username;
 }
 
-/** Write the credential JSON back into the Keychain (-U upserts in place). */
-function writeKeychainRaw(value) {
-  execFileSync(
-    'security',
-    ['add-generic-password', '-U', '-s', KEYCHAIN_SERVICE, '-a', keychainAccount(), '-w', value],
-    { timeout: 10_000, stdio: 'ignore' },
-  );
-}
 const REFRESH_LOG_PATH = path.join(os.homedir(), '.claude', 'session-manager', 'credential-refresh.log');
 const REFRESH_LOG_MAX_BYTES = 100 * 1024;
 
-// Standard OAuth 2.0 refresh grant — endpoint discovered from Claude Code CLI behavior.
-// Returns { kind: 'unsupported' } if the endpoint returns 404 or cannot be reached,
-// allowing the caller to fall back gracefully.
-const OAUTH_TOKEN_URL = 'https://claude.ai/api/auth/oauth/token';
-
 /** Parse a raw credential JSON blob (from file or Keychain) into a result. */
 function parseCredsRaw(raw, source) {
   let data;
@@ -125,14 +111,13 @@ function isExpiringSoon(creds, withinMs = 5 * 60_000) {
  * isRefreshFutile(creds) → boolean
  *
  * True when the token is already expired AND there is no refresh token to
- * present. In that state every refresh avenue is a dead end: tryOAuthRefresh
- * short-circuits to 'unsupported' (it needs `creds.refreshToken`), and the
+ * present. In that state the refresh avenue is a dead end: the
  * `claude --version` CLI fallback performs its own silent OAuth refresh from
  * that SAME missing refresh token, so it cannot help either. The only recovery
  * is an out-of-band `claude login` — which refreshIfNeeded picks up on its very
  * next call via the isExpiringSoon early-return, since fresh creds never reach
  * this path. Left ungated, this state made pollLoop spawn a `claude --version`
- * process and write the oauth_refresh_unsupported → cli_fallback_ok →
+ * process and write the cli_fallback_ok →
  * auth_failed_expired triple on EVERY 15 s poll, forever (observed 2026-09-23:
  * expiredAtMs 1775277875159, identical triple every ~15 min across the log).
  */
@@ -153,17 +138,6 @@ function __resetFutileRefreshThrottle() {
   lastFutileRefreshLoggedAt = null;
 }
 
-async function writeCredentials(rawData, freshOauth, source = 'file') {
-  const next = { ...rawData, claudeAiOauth: { ...rawData.claudeAiOauth, ...freshOauth } };
-  if (source === 'keychain') {
-    // macOS: upsert back into the Keychain. Sync + may throw — caller catches
-    // and falls back to the `claude --version` CLI refresh path.
-    writeKeychainRaw(JSON.stringify(next));
-    return;
-  }
-  await atomicFs.writeJsonAtomic(CREDS_PATH, next, { mode: 0o600, newline: false });
-}
-
 function appendRefreshLog(entry) {
   try {
     const line = JSON.stringify({ ...entry, ts: new Date().toISOString() }) + '\n';
@@ -179,36 +153,7 @@ function appendRefreshLog(entry) {
   } catch { /* non-fatal; telemetry must not break the main flow */ }
 }
 
-// Stretch: attempt standard OAuth 2.0 refresh token grant.
-async function tryOAuthRefresh(creds) {
-  if (!creds.refreshToken) return { kind: 'unsupported', message: 'no refresh token in credentials' };
-  try {
-    const r = await fetch(OAUTH_TOKEN_URL, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ grant_type: 'refresh_token', refresh_token: creds.refreshToken }),
-      signal: AbortSignal.timeout(10_000),
-    });
-    if (r.status === 404) return { kind: 'unsupported', message: 'refresh endpoint not found (HTTP 404)' };
-    if (r.status === 401 || r.status === 403) return { kind: 'auth', message: `refresh rejected: HTTP ${r.status}` };
-    if (!r.ok) return { kind: 'transient', message: `HTTP ${r.status}` };
-    const j = await r.json();
-    if (!j.access_token) return { kind: 'auth', message: 'no access_token in refresh response' };
-    return {
-      kind: 'ok',
-      fresh: {
-        accessToken: j.access_token,
-        refreshToken: j.refresh_token ?? creds.refreshToken,
-        expiresAt: j.expires_at ?? (Date.now() + (j.expires_in ?? 3600) * 1000),
-      },
-    };
-  } catch (e) {
-    if (e?.name === 'TimeoutError') return { kind: 'transient', message: 'refresh request timed out' };
-    return { kind: 'unsupported', message: `refresh error: ${e?.message}` };
-  }
-}
-
-// Stretch fallback: spawning `claude --version` triggers silent token refresh in the CLI binary.
+// Sole refresh avenue: spawning `claude --version` triggers silent token refresh in the CLI binary.
 function tryCliFallback() {
   return new Promise((resolve) => {
     let settled = false;
@@ -244,7 +189,7 @@ function tryCliFallback() {
 async function refreshIfNeeded(forceRefresh = false) {
   const cr = await readCredentials();
   if (cr.kind !== 'ok') return cr;
-  const { creds, raw, source } = cr;
+  const { creds } = cr;
 
   if (!forceRefresh && !isExpiringSoon(creds)) {
     return { kind: 'ok', creds };
@@ -253,12 +198,12 @@ async function refreshIfNeeded(forceRefresh = false) {
   const alreadyExpired = isExpired(creds);
 
   // Futile-refresh short-circuit: token already expired AND no refresh token
-  // to present. Every downstream avenue (OAuth grant, `claude --version` CLI
-  // fallback) is a guaranteed dead end from the same missing token, so running
-  // them on every 15 s poll only spawns a doomed child process and re-logs the
+  // to present. The `claude --version` CLI fallback is a guaranteed dead end
+  // from the same missing token, so running it on every 15 s poll only spawns
+  // a doomed child process and re-logs the
   // same triple forever (2026-09-23 storm). Re-read once — cheap, and the ONE
   // real recovery (`claude login`) lands here — then, if still futile, return
-  // the auth verdict WITHOUT the OAuth call or the CLI-fallback spawn, logging
+  // the auth verdict WITHOUT the CLI-fallback spawn, logging
   // at most once per FUTILE_REFRESH_COOLDOWN_MS instead of every poll.
   if (isRefreshFutile(creds)) {
     const recheckCr = await readCredentials();
@@ -279,38 +224,19 @@ async function refreshIfNeeded(forceRefresh = false) {
     };
   }
 
-  // Stretch: try OAuth refresh endpoint first.
-  const oauthResult = await tryOAuthRefresh(creds);
-  appendRefreshLog({ event: `oauth_refresh_${oauthResult.kind}`, message: oauthResult.message ?? null });
-
-  if (oauthResult.kind === 'ok') {
-    try {
-      await writeCredentials(raw, oauthResult.fresh, source);
-      const freshCr = await readCredentials();
-      if (freshCr.kind === 'ok') {
-        appendRefreshLog({ event: 'oauth_refresh_written_ok' });
-        return { kind: 'ok', creds: freshCr.creds };
-      }
-    } catch (e) {
-      appendRefreshLog({ event: 'oauth_refresh_write_failed', error: e?.message });
-    }
-  }
-
-  // Stretch: if OAuth didn't explicitly reject the token, try `claude --version` fallback.
-  if (oauthResult.kind !== 'auth') {
-    const cliResult = await tryCliFallback();
-    appendRefreshLog({ event: cliResult.ok ? 'cli_fallback_ok' : 'cli_fallback_failed', reason: cliResult.reason ?? null });
-    if (cliResult.ok) {
-      const freshCr = await readCredentials();
-      if (freshCr.kind === 'ok' && !isExpired(freshCr.creds)) {
-        return { kind: 'ok', creds: freshCr.creds };
-      }
+  // The CLI owns the real refresh contract: `claude --version` refreshes silently.
+  const cliResult = await tryCliFallback();
+  appendRefreshLog({ event: cliResult.ok ? 'cli_fallback_ok' : 'cli_fallback_failed', reason: cliResult.reason ?? null });
+  if (cliResult.ok) {
+    const freshCr = await readCredentials();
+    if (freshCr.kind === 'ok' && !isExpired(freshCr.creds)) {
+      return { kind: 'ok', creds: freshCr.creds };
     }
   }
 
   if (alreadyExpired) {
     // Re-read from disk in case credentials were externally refreshed (e.g. via
-    // `claude login`) between our initial read and the failed OAuth attempt.
+    // `claude login`) between our initial read and the failed CLI fallback.
     const recheckCr = await readCredentials();
     if (recheckCr.kind === 'ok' && !isExpired(recheckCr.creds)) {
       appendRefreshLog({ event: 'externally_refreshed_ok', recheckExpiresAt: recheckCr.creds.expiresAt ?? null });