panopticon-cli 0.4.32 → 0.4.33

package/dist/chunk-AQXETQHW.js

@@ -0,0 +1,113 @@
+import {
+  __esm,
+  init_esm_shims
+} from "./chunk-ZHC57RCV.js";
+
+// src/lib/manifest.ts
+import { createHash } from "crypto";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
+import { join, relative } from "path";
+function hashFile(filePath) {
+  const content = readFileSync(filePath);
+  const hex = createHash("sha256").update(content).digest("hex");
+  return `sha256:${hex}`;
+}
+function createEmptyManifest() {
+  return {
+    version: 1,
+    managed_by: "panopticon",
+    installed: {}
+  };
+}
+function readManifest(manifestPath) {
+  if (!existsSync(manifestPath)) {
+    return createEmptyManifest();
+  }
+  try {
+    const raw = JSON.parse(readFileSync(manifestPath, "utf-8"));
+    if (raw.version === 1 && raw.managed_by === "panopticon" && typeof raw.installed === "object") {
+      return raw;
+    }
+    return createEmptyManifest();
+  } catch {
+    return createEmptyManifest();
+  }
+}
+function writeManifest(manifestPath, manifest) {
+  mkdirSync(join(manifestPath, ".."), { recursive: true });
+  writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + "\n", "utf-8");
+}
+function setManifestEntry(manifest, relativePath, hash, source) {
+  manifest.installed[relativePath] = {
+    hash,
+    source,
+    installed_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function compareFileToManifest(targetFile, relativePath, manifest) {
+  if (!existsSync(targetFile)) {
+    return { action: "new" };
+  }
+  const entry = manifest.installed[relativePath];
+  if (!entry) {
+    return { action: "user-owned" };
+  }
+  const currentHash = hashFile(targetFile);
+  if (currentHash === entry.hash) {
+    return { action: "update", currentHash };
+  }
+  return { action: "modified", currentHash, manifestHash: entry.hash };
+}
+function collectSourceFiles(sourceDir, prefix) {
+  const results = [];
+  if (!existsSync(sourceDir)) {
+    return results;
+  }
+  function walk(dir) {
+    const entries = readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = join(dir, entry.name);
+      if (entry.isDirectory()) {
+        walk(fullPath);
+      } else if (entry.isFile()) {
+        const rel = relative(sourceDir, fullPath);
+        results.push({
+          absolutePath: fullPath,
+          relativePath: `${prefix}${rel}`
+        });
+      }
+    }
+  }
+  walk(sourceDir);
+  return results;
+}
+function buildManifestFromDirectory(baseDir, categories, source) {
+  const manifest = createEmptyManifest();
+  for (const category of categories) {
+    const categoryDir = join(baseDir, category);
+    const files = collectSourceFiles(categoryDir, `${category}/`);
+    for (const file of files) {
+      const hash = hashFile(file.absolutePath);
+      setManifestEntry(manifest, file.relativePath, hash, source);
+    }
+  }
+  return manifest;
+}
+var init_manifest = __esm({
+  "src/lib/manifest.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
+export {
+  hashFile,
+  readManifest,
+  writeManifest,
+  setManifestEntry,
+  compareFileToManifest,
+  collectSourceFiles,
+  buildManifestFromDirectory,
+  init_manifest
+};
+//# sourceMappingURL=chunk-AQXETQHW.js.map

package/dist/chunk-AQXETQHW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/manifest.ts"],"sourcesContent":["import { createHash } from 'crypto';\nimport { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from 'fs';\nimport { join, relative } from 'path';\n\n/**\n * Manifest entry for a single distributed file.\n */\nexport interface ManifestEntry {\n  hash: string;           // sha256:<hex>\n  source: string;         // \"panopticon\" | \"project-template\" | custom\n  installed_at: string;   // ISO 8601 timestamp\n}\n\n/**\n * The manifest schema: tracks what Panopticon placed at a target location.\n */\nexport interface Manifest {\n  version: 1;\n  managed_by: 'panopticon';\n  installed: Record<string, ManifestEntry>;\n}\n\n/**\n * Result of comparing a file against the manifest.\n */\nexport type FileStatus =\n  | { action: 'new' }                          // File doesn't exist at target — safe to copy\n  | { action: 'update'; currentHash: string }   // File exists, hash matches manifest — we placed it, user didn't modify\n  | { action: 'modified'; currentHash: string; manifestHash: string }  // File exists, hash differs from manifest — user modified\n  | { action: 'user-owned' }                    // File exists but NOT in manifest — user placed it, never touch\n  ;\n\n/**\n * Compute SHA-256 hash of a file, prefixed with \"sha256:\".\n */\nexport function hashFile(filePath: string): string {\n  const content = readFileSync(filePath);\n  const hex = createHash('sha256').update(content).digest('hex');\n  return `sha256:${hex}`;\n}\n\n/**\n * Create an empty manifest.\n */\nexport function createEmptyManifest(): Manifest {\n  return {\n    version: 1,\n    managed_by: 'panopticon',\n    installed: {},\n  };\n}\n\n/**\n * Read a manifest from disk. Returns empty manifest if file doesn't exist or is invalid.\n */\nexport function readManifest(manifestPath: string): Manifest {\n  if (!existsSync(manifestPath)) {\n    return createEmptyManifest();\n  }\n\n  try {\n    const raw = JSON.parse(readFileSync(manifestPath, 'utf-8'));\n    if (raw.version === 1 && raw.managed_by === 'panopticon' && typeof raw.installed === 'object') {\n      return raw as Manifest;\n    }\n    return createEmptyManifest();\n  } catch {\n    return createEmptyManifest();\n  }\n}\n\n/**\n * Write a manifest to disk (creates parent directories if needed).\n */\nexport function writeManifest(manifestPath: string, manifest: Manifest): void {\n  mkdirSync(join(manifestPath, '..'), { recursive: true });\n  writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\\n', 'utf-8');\n}\n\n/**\n * Add or update an entry in a manifest.\n */\nexport function setManifestEntry(\n  manifest: Manifest,\n  relativePath: string,\n  hash: string,\n  source: string,\n): void {\n  manifest.installed[relativePath] = {\n    hash,\n    source,\n    installed_at: new Date().toISOString(),\n  };\n}\n\n/**\n * Remove an entry from a manifest.\n */\nexport function removeManifestEntry(manifest: Manifest, relativePath: string): void {\n  delete manifest.installed[relativePath];\n}\n\n/**\n * Compare a file on disk against the manifest to determine what action to take.\n *\n * @param targetFile - Absolute path to the file at the target location\n * @param relativePath - Relative path used as key in the manifest (e.g., \"skills/beads/SKILL.md\")\n * @param manifest - The manifest to compare against\n */\nexport function compareFileToManifest(\n  targetFile: string,\n  relativePath: string,\n  manifest: Manifest,\n): FileStatus {\n  if (!existsSync(targetFile)) {\n    return { action: 'new' };\n  }\n\n  const entry = manifest.installed[relativePath];\n  if (!entry) {\n    return { action: 'user-owned' };\n  }\n\n  const currentHash = hashFile(targetFile);\n  if (currentHash === entry.hash) {\n    return { action: 'update', currentHash };\n  }\n\n  return { action: 'modified', currentHash, manifestHash: entry.hash };\n}\n\n/**\n * Walk a source directory and collect all files with their relative paths.\n * Used to build the list of files to distribute.\n *\n * @param sourceDir - Root directory to walk\n * @param prefix - Prefix for relative paths (e.g., \"skills/\" or \"agents/\")\n * @returns Array of { absolutePath, relativePath } for each file found\n */\nexport function collectSourceFiles(\n  sourceDir: string,\n  prefix: string,\n): Array<{ absolutePath: string; relativePath: string }> {\n  const results: Array<{ absolutePath: string; relativePath: string }> = [];\n\n  if (!existsSync(sourceDir)) {\n    return results;\n  }\n\n  function walk(dir: string): void {\n    const entries = readdirSync(dir, { withFileTypes: true });\n    for (const entry of entries) {\n      const fullPath = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        walk(fullPath);\n      } else if (entry.isFile()) {\n        const rel = relative(sourceDir, fullPath);\n        results.push({\n          absolutePath: fullPath,\n          relativePath: `${prefix}${rel}`,\n        });\n      }\n    }\n  }\n\n  walk(sourceDir);\n  return results;\n}\n\n/**\n * Build a manifest from a directory by hashing all files.\n * Useful for generating the initial cache manifest.\n *\n * @param baseDir - The directory to scan (e.g., ~/.panopticon/)\n * @param categories - Which subdirectories to include (e.g., [\"skills\", \"agents\", \"rules\"])\n * @param source - The source label for all entries (e.g., \"panopticon\")\n */\nexport function buildManifestFromDirectory(\n  baseDir: string,\n  categories: string[],\n  source: string,\n): Manifest {\n  const manifest = createEmptyManifest();\n\n  for (const category of categories) {\n    const categoryDir = join(baseDir, category);\n    const files = collectSourceFiles(categoryDir, `${category}/`);\n    for (const file of files) {\n      const hash = hashFile(file.absolutePath);\n      setManifestEntry(manifest, file.relativePath, hash, source);\n    }\n  }\n\n  return manifest;\n}\n"],"mappings":";;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,WAAW,cAAc,aAAuB,qBAAqB;AAC1F,SAAS,MAAM,gBAAgB;AAiCxB,SAAS,SAAS,UAA0B;AACjD,QAAM,UAAU,aAAa,QAAQ;AACrC,QAAM,MAAM,WAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC7D,SAAO,UAAU,GAAG;AACtB;AAKO,SAAS,sBAAgC;AAC9C,SAAO;AAAA,IACL,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,WAAW,CAAC;AAAA,EACd;AACF;AAKO,SAAS,aAAa,cAAgC;AAC3D,MAAI,CAAC,WAAW,YAAY,GAAG;AAC7B,WAAO,oBAAoB;AAAA,EAC7B;AAEA,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,aAAa,cAAc,OAAO,CAAC;AAC1D,QAAI,IAAI,YAAY,KAAK,IAAI,eAAe,gBAAgB,OAAO,IAAI,cAAc,UAAU;AAC7F,aAAO;AAAA,IACT;AACA,WAAO,oBAAoB;AAAA,EAC7B,QAAQ;AACN,WAAO,oBAAoB;AAAA,EAC7B;AACF;AAKO,SAAS,cAAc,cAAsB,UAA0B;AAC5E,YAAU,KAAK,cAAc,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,gBAAc,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,MAAM,OAAO;AAC/E;AAKO,SAAS,iBACd,UACA,cACA,MACA,QACM;AACN,WAAS,UAAU,YAAY,IAAI;AAAA,IACjC;AAAA,IACA;AAAA,IACA,eAAc,oBAAI,KAAK,GAAE,YAAY;AAAA,EACvC;AACF;AAgBO,SAAS,sBACd,YACA,cACA,UACY;AACZ,MAAI,CAAC,WAAW,UAAU,GAAG;AAC3B,WAAO,EAAE,QAAQ,MAAM;AAAA,EACzB;AAEA,QAAM,QAAQ,SAAS,UAAU,YAAY;AAC7C,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,QAAQ,aAAa;AAAA,EAChC;AAEA,QAAM,cAAc,SAAS,UAAU;AACvC,MAAI,gBAAgB,MAAM,MAAM;AAC9B,WAAO,EAAE,QAAQ,UAAU,YAAY;AAAA,EACzC;AAEA,SAAO,EAAE,QAAQ,YAAY,aAAa,cAAc,MAAM,KAAK;AACrE;AAUO,SAAS,mBACd,WACA,QACuD;AACvD,QAAM,UAAiE,CAAC;AAExE,MAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,WAAO;AAAA,EACT;AAEA,WAAS,KAAK,KAAmB;AAC/B,UAAM,UAAU,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AACxD,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,KAAK,KAAK,MAAM,IAAI;AACrC,UAAI,MAAM,YAAY,GAAG;AACvB,aAAK,QAAQ;AAAA,MACf,WAAW,MAAM,OAAO,GAAG;AACzB,cAAM,MAAM,SAAS,WAAW,QAAQ;AACxC,gBAAQ,KAAK;AAAA,UACX,cAAc;AAAA,UACd,cAAc,GAAG,MAAM,GAAG,GAAG;AAAA,QAC/B,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,OAAK,SAAS;AACd,SAAO;AACT;AAUO,SAAS,2BACd,SACA,YACA,QACU;AACV,QAAM,WAAW,oBAAoB;AAErC,aAAW,YAAY,YAAY;AACjC,UAAM,cAAc,KAAK,SAAS,QAAQ;AAC1C,UAAM,QAAQ,mBAAmB,aAAa,GAAG,QAAQ,GAAG;AAC5D,eAAW,QAAQ,OAAO;AACxB,YAAM,OAAO,SAAS,KAAK,YAAY;AACvC,uBAAiB,UAAU,KAAK,cAAc,MAAM,MAAM;AAAA,IAC5D;AAAA,EACF;AAEA,SAAO;AACT;AAlMA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}

package/dist/{chunk-2NIAOCIC.js → chunk-ASY7T35E.js}

@@ -7,17 +7,29 @@ import {
   popFromHook,
   pushToHook,
   sendKeysAsync
-} from "./chunk-VIWUCJ4V.js";
+} from "./chunk-KJ2TRXNK.js";
+import {
+  init_pipeline_notifier,
+  notifyPipeline
+} from "./chunk-JQBV3Q2W.js";
+import {
+  getProviderEnv,
+  getProviderForModel,
+  init_providers,
+  init_settings,
+  loadSettings,
+  setupCredentialFileAuth
+} from "./chunk-7XNJJBH6.js";
 import {
   init_projects,
   projects_exports
-} from "./chunk-JY7R7V4G.js";
+} from "./chunk-OMNXYPXC.js";
 import {
   COSTS_DIR,
   PANOPTICON_HOME,
   getPanopticonHome,
   init_paths
-} from "./chunk-6HXKTOD7.js";
+} from "./chunk-ZTFNYOC7.js";
 import {
   __esm,
   __export,
@@ -380,6 +392,25 @@ import { join as join4, basename as basename2 } from "path";
 import { homedir as homedir2 } from "os";
 import { exec } from "child_process";
 import { promisify } from "util";
+import { randomUUID } from "crypto";
+function getProviderEnvForModel(model) {
+  const provider = getProviderForModel(model);
+  if (provider.name === "anthropic") return {};
+  const settings = loadSettings();
+  const apiKey = settings.api_keys?.[provider.name];
+  if (apiKey) {
+    return getProviderEnv(provider, apiKey);
+  }
+  console.warn(`[specialist] No API key for ${provider.displayName}, falling back to Anthropic`);
+  return {};
+}
+function buildTmuxEnvFlags(env) {
+  let flags = "";
+  for (const [key, value] of Object.entries(env)) {
+    flags += ` -e ${key}="${value.replace(/"/g, '\\"')}"`;
+  }
+  return flags;
+}
 function initSpecialistsDirectory() {
   if (!existsSync3(SPECIALISTS_DIR)) {
     mkdirSync2(SPECIALISTS_DIR, { recursive: true });
@@ -553,9 +584,9 @@ function recordWake(name, sessionId) {
 }
 async function spawnEphemeralSpecialist(projectKey, specialistType, task) {
   ensureProjectSpecialistDir(projectKey, specialistType);
-  const { loadContextDigest } = await import("./specialist-context-N32QBNNQ.js");
+  const { loadContextDigest } = await import("./specialist-context-T3NBMCIE.js");
   const contextDigest = loadContextDigest(projectKey, specialistType);
-  const { createRunLog: createRunLog2 } = await import("./specialist-logs-GF3YV4KL.js");
+  const { createRunLog: createRunLog2 } = await import("./specialist-logs-CVKD3YJ3.js");
   const { runId, filePath: logFilePath } = createRunLog2(
     projectKey,
     specialistType,
@@ -568,13 +599,19 @@ async function spawnEphemeralSpecialist(projectKey, specialistType, task) {
   const tmuxSession = getTmuxSessionName(specialistType, projectKey);
   const cwd = process.env.HOME || "/home/exedev";
   try {
-    let model = "claude-sonnet-4-5";
+    let model = "claude-sonnet-4-6";
     try {
       const workTypeId = `specialist-${specialistType}`;
       model = getModelId(workTypeId);
     } catch (error) {
       console.warn(`Warning: Could not resolve model for ${specialistType}, using default`);
     }
+    const providerEnv = getProviderEnvForModel(model);
+    const envFlags = buildTmuxEnvFlags(providerEnv);
+    const providerConfig = getProviderForModel(model);
+    if (providerConfig.authType === "credential-file") {
+      setupCredentialFileAuth(providerConfig, cwd);
+    }
     const permissionFlags = specialistType === "merge-agent" ? "--dangerously-skip-permissions --permission-mode bypassPermissions" : "--dangerously-skip-permissions";
     const agentDir = join4(homedir2(), ".panopticon", "agents", tmuxSession);
     await execAsync(`mkdir -p "${agentDir}"`, { encoding: "utf-8" });
@@ -593,10 +630,10 @@ echo ""
 echo "## Specialist completed task"
 `, { mode: 493 });
     await execAsync(
-      `tmux new-session -d -s "${tmuxSession}" "bash '${launcherScript}'"`,
+      `tmux new-session -d -s "${tmuxSession}"${envFlags} "bash '${launcherScript}'"`,
       { encoding: "utf-8" }
     );
-    const { saveAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+    const { saveAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
     saveAgentRuntimeState(tmuxSession, {
       state: "active",
       lastActivity: (/* @__PURE__ */ new Date()).toISOString(),
@@ -620,7 +657,7 @@ echo "## Specialist completed task"
   }
 }
 async function buildTaskPrompt(projectKey, specialistType, task, contextDigest) {
-  const { getSpecialistPromptOverride } = await import("./projects-VXRUCMLM.js");
+  const { getSpecialistPromptOverride } = await import("./projects-JEIVIYC6.js");
   const customPrompt = getSpecialistPromptOverride(projectKey, specialistType);
   let prompt = `# ${specialistType} Task - ${task.issueId}
 
@@ -781,7 +818,7 @@ async function terminateSpecialist(projectKey, specialistType) {
     console.error(`[specialist] Failed to kill tmux session ${tmuxSession}:`, error);
   }
   if (metadata.currentRun) {
-    const { finalizeRunLog: finalizeRunLog2 } = await import("./specialist-logs-GF3YV4KL.js");
+    const { finalizeRunLog: finalizeRunLog2 } = await import("./specialist-logs-CVKD3YJ3.js");
     try {
       finalizeRunLog2(projectKey, specialistType, metadata.currentRun, {
         status: metadata.lastRunStatus || "incomplete",
@@ -794,20 +831,20 @@ async function terminateSpecialist(projectKey, specialistType) {
   }
   const key = `${projectKey}-${specialistType}`;
   gracePeriodStates.delete(key);
-  const { saveAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+  const { saveAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
   saveAgentRuntimeState(tmuxSession, {
     state: "suspended",
     lastActivity: (/* @__PURE__ */ new Date()).toISOString()
   });
-  const { scheduleDigestGeneration } = await import("./specialist-context-N32QBNNQ.js");
+  const { scheduleDigestGeneration } = await import("./specialist-context-T3NBMCIE.js");
   scheduleDigestGeneration(projectKey, specialistType);
   scheduleLogCleanup(projectKey, specialistType);
 }
 function scheduleLogCleanup(projectKey, specialistType) {
   Promise.resolve().then(async () => {
     try {
-      const { cleanupOldLogs: cleanupOldLogs2 } = await import("./specialist-logs-GF3YV4KL.js");
-      const { getSpecialistRetention } = await import("./projects-VXRUCMLM.js");
+      const { cleanupOldLogs: cleanupOldLogs2 } = await import("./specialist-logs-CVKD3YJ3.js");
+      const { getSpecialistRetention } = await import("./projects-JEIVIYC6.js");
       const retention = getSpecialistRetention(projectKey);
       const deleted = cleanupOldLogs2(projectKey, specialistType, { maxDays: retention.max_days, maxRuns: retention.max_runs });
       if (deleted > 0) {
@@ -985,7 +1022,7 @@ async function getSpecialistStatus(name, projectKey) {
   const sessionId = getSessionId(name);
   const running = await isRunning(name, projectKey);
   const contextTokens = countContextTokens(name);
-  const { getAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+  const { getAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
   const tmuxSession = getTmuxSessionName(name, projectKey);
   const runtimeState = getAgentRuntimeState(tmuxSession);
   let state;
@@ -1045,7 +1082,7 @@ async function initializeSpecialist(name) {
   }
   const tmuxSession = getTmuxSessionName(name);
   const cwd = process.env.HOME || "/home/eltmon";
-  let model = "claude-sonnet-4-5";
+  let model = "claude-sonnet-4-6";
   try {
     const workTypeId = `specialist-${name}`;
     model = getModelId(workTypeId);
@@ -1058,18 +1095,26 @@ Your role: ${name === "merge-agent" ? "Resolve merge conflicts and ensure clean
 You will be woken up when your services are needed. For now, acknowledge your initialization and wait.
 Say: "I am the ${name} specialist, ready and waiting for tasks."`;
   try {
+    const providerEnv = getProviderEnvForModel(model);
+    const envFlags = buildTmuxEnvFlags(providerEnv);
+    const providerCfg = getProviderForModel(model);
+    if (providerCfg.authType === "credential-file") {
+      setupCredentialFileAuth(providerCfg, cwd);
+    }
     const agentDir = join4(homedir2(), ".panopticon", "agents", tmuxSession);
     await execAsync(`mkdir -p "${agentDir}"`, { encoding: "utf-8" });
     const promptFile = join4(agentDir, "identity-prompt.md");
     const launcherScript = join4(agentDir, "launcher.sh");
     writeFileSync(promptFile, identityPrompt);
+    const newSessionId = randomUUID();
     writeFileSync(launcherScript, `#!/bin/bash
 cd "${cwd}"
 prompt=$(cat "${promptFile}")
-exec claude --dangerously-skip-permissions --model ${model} "$prompt"
+exec claude --dangerously-skip-permissions --session-id "${newSessionId}" --model ${model} "$prompt"
 `, { mode: 493 });
+    setSessionId(name, newSessionId);
     await execAsync(
-      `tmux new-session -d -s "${tmuxSession}" "bash '${launcherScript}'"`,
+      `tmux new-session -d -s "${tmuxSession}"${envFlags} "bash '${launcherScript}'"`,
       { encoding: "utf-8" }
     );
     recordWake(name);
@@ -1142,11 +1187,31 @@ async function wakeSpecialist(name, taskPrompt, options = {}) {
     }
     const cwd = process.env.HOME || "/home/eltmon";
     try {
-      const modelFlag = name === "merge-agent" ? "--model opus" : "";
+      let model = "claude-sonnet-4-6";
+      try {
+        const workTypeId = `specialist-${name}`;
+        model = getModelId(workTypeId);
+      } catch (error) {
+        console.warn(`[specialist] Could not resolve model for ${name}, using default`);
+      }
+      const modelFlag = `--model ${model}`;
+      const providerEnv = getProviderEnvForModel(model);
+      const envFlags = buildTmuxEnvFlags(providerEnv);
+      const provCfg = getProviderForModel(model);
+      if (provCfg.authType === "credential-file") {
+        setupCredentialFileAuth(provCfg, cwd);
+      }
       const permissionFlags = name === "merge-agent" ? "--dangerously-skip-permissions --permission-mode bypassPermissions" : "--dangerously-skip-permissions";
-      const claudeCmd = sessionId ? `claude --resume "${sessionId}" ${modelFlag} ${permissionFlags}` : `claude ${modelFlag} ${permissionFlags}`;
+      let claudeCmd;
+      if (sessionId) {
+        claudeCmd = `claude --resume "${sessionId}" ${modelFlag} ${permissionFlags}`;
+      } else {
+        const newSessionId = randomUUID();
+        claudeCmd = `claude --session-id "${newSessionId}" ${modelFlag} ${permissionFlags}`;
+        setSessionId(name, newSessionId);
+      }
       await execAsync(
-        `tmux new-session -d -s "${tmuxSession}" -c "${cwd}" "${claudeCmd}"`,
+        `tmux new-session -d -s "${tmuxSession}" -c "${cwd}"${envFlags} "${claudeCmd}"`,
         { encoding: "utf-8" }
       );
       if (waitForReady) {
@@ -1177,7 +1242,7 @@ async function wakeSpecialist(name, taskPrompt, options = {}) {
       await sendKeysAsync(tmuxSession, taskPrompt);
     }
     recordWake(name, sessionId || void 0);
-    const { saveAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+    const { saveAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
     saveAgentRuntimeState(tmuxSession, {
       state: "active",
       lastActivity: (/* @__PURE__ */ new Date()).toISOString(),
@@ -1229,25 +1294,45 @@ Use the send-feedback-to-agent skill to report findings back to the issue agent.
       break;
     case "review-agent": {
       const workspace = task.workspace || "unknown";
-      let staleBranch = false;
+      let gitDirs = [];
       if (workspace !== "unknown") {
+        if (existsSync3(join4(workspace, ".git"))) {
+          gitDirs = [workspace];
+        } else {
+          try {
+            const entries = readdirSync2(workspace, { withFileTypes: true });
+            for (const entry of entries) {
+              if (entry.isDirectory() && existsSync3(join4(workspace, entry.name, ".git"))) {
+                gitDirs.push(join4(workspace, entry.name));
+              }
+            }
+          } catch {
+          }
+        }
+      }
+      const gitDir = gitDirs[0] || workspace;
+      let staleBranch = false;
+      if (workspace !== "unknown" && gitDirs.length > 0) {
         try {
-          const { stdout: diffOutput } = await execAsync(
-            `cd "${workspace}" && git fetch origin main 2>/dev/null; git diff --name-only main...HEAD 2>/dev/null`,
-            { encoding: "utf-8", timeout: 15e3 }
-          );
-          const changedFiles = diffOutput.trim().split("\n").filter((f) => f.length > 0);
-          if (changedFiles.length === 0) {
+          let totalChangedFiles = 0;
+          for (const dir of gitDirs) {
+            const { stdout: dirDiff } = await execAsync(
+              `cd "${dir}" && git fetch origin main 2>/dev/null; git diff --name-only main...HEAD 2>/dev/null`,
+              { encoding: "utf-8", timeout: 15e3 }
+            );
+            totalChangedFiles += dirDiff.trim().split("\n").filter((f) => f.length > 0).length;
+          }
+          if (totalChangedFiles === 0) {
             staleBranch = true;
             console.log(`[specialist] review-agent: stale branch detected for ${task.issueId} \u2014 0 files changed vs main`);
-            const { setReviewStatus } = await import("./review-status-GWQYY77L.js");
+            const { setReviewStatus } = await import("./review-status-EPFG4XM7.js");
             setReviewStatus(task.issueId.toUpperCase(), {
               reviewStatus: "passed",
               reviewNotes: "No changes to review \u2014 branch identical to main (already merged or stale)"
             });
             console.log(`[specialist] review-agent: auto-passed ${task.issueId} (stale branch)`);
             const tmuxSession = getTmuxSessionName("review-agent");
-            const { saveAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+            const { saveAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
             saveAgentRuntimeState(tmuxSession, {
               state: "idle",
               lastActivity: (/* @__PURE__ */ new Date()).toISOString()
@@ -1258,10 +1343,14 @@ Use the send-feedback-to-agent skill to report findings back to the issue agent.
           console.warn(`[specialist] review-agent: stale branch pre-check failed for ${task.issueId}:`, err);
         }
       }
+      const isPolyrepo = gitDirs.length > 1;
+      const gitDiffCommands = gitDirs.length > 0 ? gitDirs.map((d) => `cd "${d}" && git diff --name-only main...HEAD`).join("\n") : `cd "${workspace}" && git diff --name-only main...HEAD`;
+      const gitDiffFileCmd = gitDirs.length > 0 ? `cd "${gitDir}" && git diff main...HEAD -- <file>` : `cd "${workspace}" && git diff main...HEAD -- <file>`;
       prompt = `New review task for ${task.issueId}:
 
 Branch: ${task.branch || "unknown"}
 Workspace: ${workspace}
+${isPolyrepo ? `Polyrepo: git repos in subdirectories: ${gitDirs.map((d) => basename2(d)).join(", ")}` : ""}
 ${task.prUrl ? `PR URL: ${task.prUrl}` : ""}
 
 Your task:
@@ -1276,11 +1365,12 @@ The TEST agent will run tests in the next step.
 ## How to Review Changes
 
 **Step 0 (CRITICAL):** First check if there are ANY changes to review:
+${isPolyrepo ? `This is a polyrepo \u2014 run git diff in each repo subdirectory:` : ""}
 \`\`\`bash
-cd ${workspace} && git diff --name-only main...HEAD
+${gitDiffCommands}
 \`\`\`
 
-**If the diff is EMPTY (0 files changed):** The branch is stale or already merged into main. In this case:
+**If the diff is EMPTY (0 files changed across all repos):** The branch is stale or already merged into main. In this case:
 1. Do NOT attempt a full review
 2. Update status as passed immediately:
 \`\`\`bash
@@ -1294,7 +1384,7 @@ pan work tell ${task.issueId} "Review complete: branch has 0 diff from main \u20
 
 **Step 1:** Get the list of changed files:
 \`\`\`bash
-cd ${workspace} && git diff --name-only main...HEAD
+${gitDiffCommands}
 \`\`\`
 
 **Step 2:** Read the CURRENT version of each changed file using the Read tool.
@@ -1302,7 +1392,7 @@ Review the actual file contents \u2014 do NOT rely solely on diff output.
 
 **Step 3:** If you need to see what specifically changed, use:
 \`\`\`bash
-cd ${workspace} && git diff main...HEAD -- <file>
+${gitDiffFileCmd}
 \`\`\`
 
 ## Avoiding False Positives
@@ -1350,40 +1440,52 @@ Branch: ${task.branch || "unknown"}
 Workspace: ${task.workspace || "unknown"}
 
 Your task:
-1. Run the full test suite on the feature branch
-2. Run the same test suite on the main branch (baseline)
-3. Compare results: identify which failures are NEW vs pre-existing
-4. Only fail the feature branch for NEW regressions
+1. Run the full test suite \u2014 redirect output to file, read only summaries
+2. If ALL pass, skip baseline and report PASS
+3. If failures, run baseline on main and compare
+4. Only fail for NEW regressions (not pre-existing)
 5. Update status via API when done
 
+## CRITICAL: Context Management \u2014 Output Redirection
+
+**NEVER let full test output flow into your context.** Always redirect to file and read only summaries.
+Raw test output from large suites (1000+ tests) WILL fill your context and cause compaction, losing your task.
+
 ## CRITICAL: Bash Timeout for Test Commands
 
 **ALWAYS use timeout: 300000 (5 minutes) when running test commands.**
-Test suites commonly take 2-5 minutes. The default bash timeout is only 2 minutes and WILL cause premature failures.
-Do NOT run test commands in background mode \u2014 run them directly with a 5-minute timeout.
 
-Example:
+## Step 1: Run Feature Branch Tests
+
 \`\`\`bash
-cd ${task.workspace || "unknown"} && npm test 2>&1 | tail -30
+cd ${task.workspace || "unknown"} && npm test 2>&1 > /tmp/test-feature.txt; echo "EXIT_CODE: $?"
 # Use timeout: 300000 for this command
+tail -20 /tmp/test-feature.txt
 \`\`\`
 
-## CRITICAL: Baseline Comparison
+## Step 2: Check Results
+
+- If ALL tests pass (exit code 0) \u2192 skip baseline, go to "Update Status"
+- If failures exist \u2192 continue to Step 3
 
-**You MUST compare test results against the main branch baseline.**
+## Step 3: Baseline Comparison (ONLY if failures found)
 
-Pre-existing failures that also occur on main branch should NOT block the feature branch.
+\`\`\`bash
+cd ${task.context?.workspace ? task.context.workspace.replace(/workspaces\/feature-[^/]+/, "") : "unknown"} && npm test 2>&1 > /tmp/test-main.txt; echo "EXIT_CODE: $?"
+# Use timeout: 300000 for this command
+tail -20 /tmp/test-main.txt
+\`\`\`
 
-Steps:
-1. Run \`npm test\` (or detected command) on the feature branch - record results (timeout: 300000)
-2. Run tests on main branch baseline (timeout: 300000): \`cd ${task.context?.workspace ? task.context.workspace.replace(/workspaces\/feature-[^/]+/, "") : "unknown"} && npm test 2>&1 | tail -30\`
-3. Compare: any test that fails on BOTH branches is pre-existing
-4. Only NEW failures (pass on main, fail on feature) should block
+Then compare failures (targeted, NOT full output):
+\`\`\`bash
+grep -E "FAIL|\u2717|Error|failed" /tmp/test-feature.txt | head -30
+grep -E "FAIL|\u2717|Error|failed" /tmp/test-main.txt | head -30
+\`\`\`
 
-**Pass criteria:** The feature branch introduces ZERO new test failures compared to main.
-**Fail criteria:** The feature branch introduces one or more NEW test failures not present on main.
+Tests that fail on BOTH = pre-existing (don't block). Tests that fail ONLY on feature = NEW regression (block).
 
-Report pre-existing failures as informational notes, but do NOT block the feature for them.
+**Pass criteria:** Feature branch introduces ZERO new test failures vs main.
+**Fail criteria:** Feature branch introduces NEW failures not present on main.
 
 ## REQUIRED: Update Status via API
 
@@ -1391,19 +1493,19 @@ You MUST execute the appropriate curl command and verify it succeeds. Do NOT jus
 
 If NO new regressions (tests PASS):
 \`\`\`bash
-# EXECUTE THIS - verify you see JSON response with testStatus:"passed"
 curl -s -X POST ${apiUrl}/api/workspaces/${task.issueId}/review-status -H "Content-Type: application/json" -d '{"testStatus":"passed","testNotes":"[summary including pre-existing failures if any]"}' | jq .
 \`\`\`
 
 If NEW regressions found (tests FAIL):
 \`\`\`bash
-# EXECUTE THIS - verify you see JSON response with testStatus:"failed"
 curl -s -X POST ${apiUrl}/api/workspaces/${task.issueId}/review-status -H "Content-Type: application/json" -d '{"testStatus":"failed","testNotes":"[describe NEW failures only]"}' | jq .
 \`\`\`
 Then use send-feedback-to-agent skill to notify issue agent of NEW failures only.
 
 \u26A0\uFE0F VERIFICATION: After running curl, confirm you see valid JSON output with the updated status. If you get an error or empty response, the update FAILED - report this.
 
+**NEVER run test commands without redirecting to a file.** This is not optional.
+
 IMPORTANT: Do NOT hand off to merge-agent. Human clicks Merge button when ready.`;
       break;
     default:
@@ -1414,7 +1516,7 @@ IMPORTANT: Do NOT hand off to merge-agent. Human clicks Merge button when ready.
 async function wakeSpecialistOrQueue(name, task, options = {}) {
   const { priority = "normal", source = "handoff" } = options;
   const running = await isRunning(name);
-  const { getAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+  const { getAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
   const tmuxSession = getTmuxSessionName(name);
   const runtimeState = getAgentRuntimeState(tmuxSession);
   const idle = runtimeState?.state === "idle" || runtimeState?.state === "suspended";
@@ -1445,7 +1547,7 @@ async function wakeSpecialistOrQueue(name, task, options = {}) {
       };
     }
   }
-  const { saveAgentRuntimeState } = await import("./agents-BDFHF4T3.js");
+  const { saveAgentRuntimeState } = await import("./agents-VLK4BMVA.js");
   saveAgentRuntimeState(tmuxSession, {
     state: "active",
     lastActivity: (/* @__PURE__ */ new Date()).toISOString(),
@@ -1499,6 +1601,7 @@ function submitToSpecialistQueue(specialistName, task) {
     }
   };
   const queueItem = pushToHook(specialistName, item);
+  notifyPipeline({ type: "task_queued", specialist: specialistName, issueId: task.issueId });
   const handoffEvent = createSpecialistHandoff(
     task.source,
     // From (e.g., 'review-agent' or 'issue-agent')
@@ -1544,7 +1647,7 @@ async function sendFeedbackToAgent(feedback) {
   }
   const agentSession = `agent-${toIssueId.toLowerCase()}`;
   const feedbackMessage = formatFeedbackForAgent(fullFeedback);
-  const { writeFeedbackFile } = await import("./feedback-writer-AAKF5BTK.js");
+  const { writeFeedbackFile } = await import("./feedback-writer-LVZ5TFYZ.js");
   const specialistMap = {
     "review-agent": "review-agent",
     "test-agent": "test-agent",
@@ -1564,7 +1667,7 @@ async function sendFeedbackToAgent(feedback) {
     return false;
   }
   try {
-    const { messageAgent } = await import("./agents-BDFHF4T3.js");
+    const { messageAgent } = await import("./agents-VLK4BMVA.js");
     const msg = `SPECIALIST FEEDBACK: ${fromSpecialist} reported ${feedback.feedbackType.toUpperCase()} for ${toIssueId}.
 Read and address: ${fileResult.relativePath}`;
     await messageAgent(agentSession, msg);
@@ -1670,8 +1773,11 @@ var init_specialists = __esm({
     init_paths();
     init_jsonl_parser();
     init_specialist_handoff_logger();
+    init_settings();
     init_work_type_router();
+    init_providers();
     init_tmux();
+    init_pipeline_notifier();
     init_hooks();
     execAsync = promisify(exec);
     SPECIALISTS_DIR = join4(PANOPTICON_HOME, "specialists");
@@ -1887,18 +1993,18 @@ function getRecentRunLogs(projectKey, specialistType, count) {
 }
 function cleanupOldLogs(projectKey, specialistType, retention) {
   const { maxDays, maxRuns } = retention;
+  const now = /* @__PURE__ */ new Date();
+  const cutoffDate = new Date(now.getTime() - maxDays * 24 * 60 * 60 * 1e3);
   const allLogs = listRunLogs(projectKey, specialistType);
   if (allLogs.length === 0) {
     return 0;
   }
-  const now = /* @__PURE__ */ new Date();
-  const cutoffDate = new Date(now.getTime() - maxDays * 24 * 60 * 60 * 1e3);
   let deletedCount = 0;
   allLogs.forEach((log, index) => {
     if (index < maxRuns) {
       return;
     }
-    if (log.createdAt >= cutoffDate) {
+    if (maxDays > 0 && log.createdAt >= cutoffDate) {
       return;
     }
     try {
@@ -2055,4 +2161,4 @@ export {
   getFeedbackStats,
   init_specialists
 };
-//# sourceMappingURL=chunk-2NIAOCIC.js.map
+//# sourceMappingURL=chunk-ASY7T35E.js.map