panopticon-cli 0.4.33 → 0.5.1

package/dist/{feedback-writer-LVZ5TFYZ.js → feedback-writer-VRMMWWTW.js}

@@ -1,7 +1,7 @@
 import {
   init_projects,
   resolveProjectFromIssue
-} from "./chunk-OMNXYPXC.js";
+} from "./chunk-2V4NF7J2.js";
 import "./chunk-ZTFNYOC7.js";
 import {
   __esm,
@@ -112,4 +112,4 @@ init_feedback_writer();
 export {
   writeFeedbackFile
 };
-//# sourceMappingURL=feedback-writer-LVZ5TFYZ.js.map
+//# sourceMappingURL=feedback-writer-VRMMWWTW.js.map

package/dist/git-utils-I2UDKNZH.js

@@ -0,0 +1,131 @@
+import {
+  init_esm_shims
+} from "./chunk-ZHC57RCV.js";
+
+// src/lib/git-utils.ts
+init_esm_shims();
+import { existsSync, unlinkSync, readdirSync } from "fs";
+import { join } from "path";
+import { exec } from "child_process";
+import { promisify } from "util";
+var execAsync = promisify(exec);
+async function hasRunningGitProcesses(repoPath) {
+  try {
+    try {
+      const gitDir = join(repoPath, ".git");
+      const { stdout } = await execAsync(`fuser "${gitDir}" 2>/dev/null`, {
+        encoding: "utf-8"
+      });
+      return stdout.trim().length > 0;
+    } catch {
+      try {
+        const { stdout } = await execAsync(
+          `ps aux | grep -E "git.*${repoPath.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}" | grep -v grep`,
+          { encoding: "utf-8" }
+        );
+        return stdout.trim().length > 0;
+      } catch {
+        return false;
+      }
+    }
+  } catch {
+    return false;
+  }
+}
+function findGitLockFiles(repoPath) {
+  const lockFiles = [];
+  const indexLock = join(repoPath, ".git", "index.lock");
+  if (existsSync(indexLock)) {
+    lockFiles.push(indexLock);
+  }
+  const refsDir = join(repoPath, ".git", "refs");
+  if (existsSync(refsDir)) {
+    const findLocksRecursive = (dir) => {
+      const entries = readdirSync(dir, { withFileTypes: true });
+      for (const entry of entries) {
+        const fullPath = join(dir, entry.name);
+        if (entry.isDirectory()) {
+          findLocksRecursive(fullPath);
+        } else if (entry.name.endsWith(".lock")) {
+          lockFiles.push(fullPath);
+        }
+      }
+    };
+    try {
+      findLocksRecursive(refsDir);
+    } catch {
+    }
+  }
+  return lockFiles;
+}
+async function cleanupStaleLocks(repoPath) {
+  const result = {
+    found: [],
+    removed: [],
+    errors: []
+  };
+  const lockFiles = findGitLockFiles(repoPath);
+  result.found = lockFiles;
+  if (lockFiles.length === 0) {
+    return result;
+  }
+  const hasGitProcesses = await hasRunningGitProcesses(repoPath);
+  if (hasGitProcesses) {
+    result.errors.push({
+      file: "N/A",
+      error: "Git processes are running - not safe to remove locks"
+    });
+    return result;
+  }
+  for (const lockFile of lockFiles) {
+    try {
+      unlinkSync(lockFile);
+      result.removed.push(lockFile);
+    } catch (error) {
+      const msg = error instanceof Error ? error.message : String(error);
+      result.errors.push({ file: lockFile, error: msg });
+    }
+  }
+  return result;
+}
+async function getWorkspaceCommitHashes(workspacePath) {
+  const result = {};
+  const hasTopLevelGit = existsSync(join(workspacePath, ".git"));
+  if (hasTopLevelGit) {
+    try {
+      const { stdout } = await execAsync("git rev-parse HEAD", { cwd: workspacePath, encoding: "utf-8" });
+      result["."] = stdout.trim();
+    } catch {
+    }
+  } else {
+    try {
+      const entries = readdirSync(workspacePath, { withFileTypes: true });
+      for (const entry of entries) {
+        if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
+        const subPath = join(workspacePath, entry.name);
+        if (!existsSync(join(subPath, ".git"))) continue;
+        try {
+          const { stdout } = await execAsync("git rev-parse HEAD", { cwd: subPath, encoding: "utf-8" });
+          result[entry.name] = stdout.trim();
+        } catch {
+        }
+      }
+    } catch {
+    }
+  }
+  return result;
+}
+async function hasStaleLocks(repoPath) {
+  const lockFiles = findGitLockFiles(repoPath);
+  if (lockFiles.length === 0) {
+    return false;
+  }
+  const hasGitProcesses = await hasRunningGitProcesses(repoPath);
+  return !hasGitProcesses;
+}
+export {
+  cleanupStaleLocks,
+  getWorkspaceCommitHashes,
+  hasStaleLocks
+};
+//# sourceMappingURL=git-utils-I2UDKNZH.js.map

package/dist/git-utils-I2UDKNZH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/git-utils.ts"],"sourcesContent":["/**\n * Git utilities for handling common git operations and recovery\n */\n\nimport { existsSync, unlinkSync, readdirSync } from 'fs';\nimport { join } from 'path';\nimport { exec } from 'child_process';\nimport { promisify } from 'util';\n\nconst execAsync = promisify(exec);\n\n/**\n * Check if any git processes are currently running in a specific repository\n *\n * This checks if there are git processes with the repository path in their command line.\n * If we can't determine repository-specific processes, we conservatively return false\n * (no processes detected) to allow cleanup to proceed.\n */\nasync function hasRunningGitProcesses(repoPath: string): Promise<boolean> {\n  try {\n    // Try to find git processes that reference this specific repository\n    // Use fuser to check if any process has the .git directory open (more reliable)\n    try {\n      const gitDir = join(repoPath, '.git');\n      const { stdout } = await execAsync(`fuser \"${gitDir}\" 2>/dev/null`, {\n        encoding: 'utf-8',\n      });\n      // fuser returns PIDs if any process has the directory open\n      return stdout.trim().length > 0;\n    } catch {\n      // fuser not available or no processes found\n      // Fall back to checking ps for git processes in this directory\n      try {\n        const { stdout } = await execAsync(\n          `ps aux | grep -E \"git.*${repoPath.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')}\" | grep -v grep`,\n          { encoding: 'utf-8' }\n        );\n        return stdout.trim().length > 0;\n      } catch {\n        // No git processes found for this repo\n        return false;\n      }\n    }\n  } catch {\n    // Error checking - conservatively assume no processes\n    return false;\n  }\n}\n\n/**\n * Find all git lock files in a repository\n */\nfunction findGitLockFiles(repoPath: string): string[] {\n  const lockFiles: string[] = [];\n\n  // Check for index.lock in .git directory\n  const indexLock = join(repoPath, '.git', 'index.lock');\n  if (existsSync(indexLock)) {\n    lockFiles.push(indexLock);\n  }\n\n  // Check for ref locks in .git/refs\n  const refsDir = join(repoPath, '.git', 'refs');\n  if (existsSync(refsDir)) {\n    const findLocksRecursive = (dir: string) => {\n      const entries = readdirSync(dir, { withFileTypes: true });\n      for (const entry of entries) {\n        const fullPath = join(dir, entry.name);\n        if (entry.isDirectory()) {\n          findLocksRecursive(fullPath);\n        } else if (entry.name.endsWith('.lock')) {\n          lockFiles.push(fullPath);\n        }\n      }\n    };\n    try {\n      findLocksRecursive(refsDir);\n    } catch {\n      // Ignore errors reading refs directory\n    }\n  }\n\n  return lockFiles;\n}\n\n/**\n * Check for and clean up stale git lock files\n *\n * A lock file is considered stale if:\n * 1. It exists\n * 2. No git processes are currently running\n *\n * @param repoPath - Path to the git repository\n * @returns Object with cleanup results\n */\nexport async function cleanupStaleLocks(repoPath: string): Promise<{\n  found: string[];\n  removed: string[];\n  errors: Array<{ file: string; error: string }>;\n}> {\n  const result = {\n    found: [] as string[],\n    removed: [] as string[],\n    errors: [] as Array<{ file: string; error: string }>,\n  };\n\n  // Find all lock files\n  const lockFiles = findGitLockFiles(repoPath);\n  result.found = lockFiles;\n\n  if (lockFiles.length === 0) {\n    return result;\n  }\n\n  // Check if git processes are running for this repository\n  const hasGitProcesses = await hasRunningGitProcesses(repoPath);\n\n  if (hasGitProcesses) {\n    // Don't remove locks if git is actively running\n    result.errors.push({\n      file: 'N/A',\n      error: 'Git processes are running - not safe to remove locks',\n    });\n    return result;\n  }\n\n  // Remove stale lock files\n  for (const lockFile of lockFiles) {\n    try {\n      unlinkSync(lockFile);\n      result.removed.push(lockFile);\n    } catch (error: unknown) {\n      const msg = error instanceof Error ? error.message : String(error);\n      result.errors.push({ file: lockFile, error: msg });\n    }\n  }\n\n  return result;\n}\n\n/**\n * Get the HEAD commit SHA for each git repository in a workspace.\n *\n * Handles both monorepo (single .git at top level) and polyrepo (subdirs with .git).\n * Returns a map of repo identifier → HEAD SHA:\n *   - Monorepo: { '.': 'abc123...' }\n *   - Polyrepo: { 'frontend': 'abc123...', 'api': 'def456...' }\n */\nexport async function getWorkspaceCommitHashes(workspacePath: string): Promise<Record<string, string>> {\n  const result: Record<string, string> = {};\n\n  const hasTopLevelGit = existsSync(join(workspacePath, '.git'));\n\n  if (hasTopLevelGit) {\n    try {\n      const { stdout } = await execAsync('git rev-parse HEAD', { cwd: workspacePath, encoding: 'utf-8' });\n      result['.'] = stdout.trim();\n    } catch { /* skip */ }\n  } else {\n    try {\n      const entries = readdirSync(workspacePath, { withFileTypes: true });\n      for (const entry of entries) {\n        if (!entry.isDirectory() || entry.name.startsWith('.')) continue;\n        const subPath = join(workspacePath, entry.name);\n        if (!existsSync(join(subPath, '.git'))) continue;\n        try {\n          const { stdout } = await execAsync('git rev-parse HEAD', { cwd: subPath, encoding: 'utf-8' });\n          result[entry.name] = stdout.trim();\n        } catch { /* skip this sub-repo */ }\n      }\n    } catch { /* skip */ }\n  }\n\n  return result;\n}\n\n/**\n * Check if a repository has stale lock files\n *\n * @param repoPath - Path to the git repository\n * @returns True if stale locks exist\n */\nexport async function hasStaleLocks(repoPath: string): Promise<boolean> {\n  const lockFiles = findGitLockFiles(repoPath);\n  if (lockFiles.length === 0) {\n    return false;\n  }\n\n  const hasGitProcesses = await hasRunningGitProcesses(repoPath);\n  return !hasGitProcesses;\n}\n"],"mappings":";;;;;AAAA;AAIA,SAAS,YAAY,YAAY,mBAAmB;AACpD,SAAS,YAAY;AACrB,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAE1B,IAAM,YAAY,UAAU,IAAI;AAShC,eAAe,uBAAuB,UAAoC;AACxE,MAAI;AAGF,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,MAAM;AACpC,YAAM,EAAE,OAAO,IAAI,MAAM,UAAU,UAAU,MAAM,iBAAiB;AAAA,QAClE,UAAU;AAAA,MACZ,CAAC;AAED,aAAO,OAAO,KAAK,EAAE,SAAS;AAAA,IAChC,QAAQ;AAGN,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM;AAAA,UACvB,0BAA0B,SAAS,QAAQ,uBAAuB,MAAM,CAAC;AAAA,UACzE,EAAE,UAAU,QAAQ;AAAA,QACtB;AACA,eAAO,OAAO,KAAK,EAAE,SAAS;AAAA,MAChC,QAAQ;AAEN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAKA,SAAS,iBAAiB,UAA4B;AACpD,QAAM,YAAsB,CAAC;AAG7B,QAAM,YAAY,KAAK,UAAU,QAAQ,YAAY;AACrD,MAAI,WAAW,SAAS,GAAG;AACzB,cAAU,KAAK,SAAS;AAAA,EAC1B;AAGA,QAAM,UAAU,KAAK,UAAU,QAAQ,MAAM;AAC7C,MAAI,WAAW,OAAO,GAAG;AACvB,UAAM,qBAAqB,CAAC,QAAgB;AAC1C,YAAM,UAAU,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AACxD,iBAAW,SAAS,SAAS;AAC3B,cAAM,WAAW,KAAK,KAAK,MAAM,IAAI;AACrC,YAAI,MAAM,YAAY,GAAG;AACvB,6BAAmB,QAAQ;AAAA,QAC7B,WAAW,MAAM,KAAK,SAAS,OAAO,GAAG;AACvC,oBAAU,KAAK,QAAQ;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AACA,QAAI;AACF,yBAAmB,OAAO;AAAA,IAC5B,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAYA,eAAsB,kBAAkB,UAIrC;AACD,QAAM,SAAS;AAAA,IACb,OAAO,CAAC;AAAA,IACR,SAAS,CAAC;AAAA,IACV,QAAQ,CAAC;AAAA,EACX;AAGA,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,SAAO,QAAQ;AAEf,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO;AAAA,EACT;AAGA,QAAM,kBAAkB,MAAM,uBAAuB,QAAQ;AAE7D,MAAI,iBAAiB;AAEnB,WAAO,OAAO,KAAK;AAAA,MACjB,MAAM;AAAA,MACN,OAAO;AAAA,IACT,CAAC;AACD,WAAO;AAAA,EACT;AAGA,aAAW,YAAY,WAAW;AAChC,QAAI;AACF,iBAAW,QAAQ;AACnB,aAAO,QAAQ,KAAK,QAAQ;AAAA,IAC9B,SAAS,OAAgB;AACvB,YAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,aAAO,OAAO,KAAK,EAAE,MAAM,UAAU,OAAO,IAAI,CAAC;AAAA,IACnD;AAAA,EACF;AAEA,SAAO;AACT;AAUA,eAAsB,yBAAyB,eAAwD;AACrG,QAAM,SAAiC,CAAC;AAExC,QAAM,iBAAiB,WAAW,KAAK,eAAe,MAAM,CAAC;AAE7D,MAAI,gBAAgB;AAClB,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,UAAU,sBAAsB,EAAE,KAAK,eAAe,UAAU,QAAQ,CAAC;AAClG,aAAO,GAAG,IAAI,OAAO,KAAK;AAAA,IAC5B,QAAQ;AAAA,IAAa;AAAA,EACvB,OAAO;AACL,QAAI;AACF,YAAM,UAAU,YAAY,eAAe,EAAE,eAAe,KAAK,CAAC;AAClE,iBAAW,SAAS,SAAS;AAC3B,YAAI,CAAC,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,GAAG,EAAG;AACxD,cAAM,UAAU,KAAK,eAAe,MAAM,IAAI;AAC9C,YAAI,CAAC,WAAW,KAAK,SAAS,MAAM,CAAC,EAAG;AACxC,YAAI;AACF,gBAAM,EAAE,OAAO,IAAI,MAAM,UAAU,sBAAsB,EAAE,KAAK,SAAS,UAAU,QAAQ,CAAC;AAC5F,iBAAO,MAAM,IAAI,IAAI,OAAO,KAAK;AAAA,QACnC,QAAQ;AAAA,QAA2B;AAAA,MACrC;AAAA,IACF,QAAQ;AAAA,IAAa;AAAA,EACvB;AAEA,SAAO;AACT;AAQA,eAAsB,cAAc,UAAoC;AACtE,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,MAAM,uBAAuB,QAAQ;AAC7D,SAAO,CAAC;AACV;","names":[]}

package/dist/index.d.ts

@@ -523,6 +523,8 @@ declare class GitHubTracker implements IssueTracker {
     getComments(issueId: string): Promise<Comment[]>;
     addComment(issueId: string, body: string): Promise<Comment>;
     transitionIssue(id: string, state: IssueState): Promise<void>;
+    /** Ensure a label exists in the repo, creating it if needed. */
+    private ensureLabelExists;
     linkPR(issueId: string, prUrl: string): Promise<void>;
     private normalizeIssue;
     private mapStateFromGitHub;
@@ -829,5 +831,14 @@ declare function getProviderEnv(provider: ProviderConfig, apiKey: string): Recor
  * Must be called before spawning the agent.
  */
 declare function setupCredentialFileAuth(provider: ProviderConfig, workspacePath: string): void;
+/**
+ * Clear credential-file auth from workspace settings.
+ *
+ * When switching from a credential-file provider (e.g. Kimi) to a static/plan-based
+ * provider (e.g. Anthropic), the apiKeyHelper must be removed from
+ * .claude/settings.local.json. Otherwise Claude Code will keep using the stale
+ * token helper and fail with "Invalid API key".
+ */
+declare function clearCredentialFileAuth(workspacePath: string): void;
 
-export { AGENTS_DIR, ARCHIVES_DIR, type AnthropicModel, type ApiKeysConfig, BACKUPS_DIR, BIN_DIR, type BackupInfo, CACHE_AGENTS_DIR, CACHE_MANIFEST, CACHE_RULES_DIR, CACHE_SKILLS_DIR, CERTS_DIR, CLAUDE_DIR, CLAUDE_MD_TEMPLATES, COMMANDS_DIR, CONFIG_DIR, CONFIG_FILE, COSTS_DIR, type Comment, type ComplexityLevel, type ComplexityModels, DOCS_DIR, type DevrootSyncItem, type GitHubConfig, GitHubTracker, type GitLabConfig, GitLabTracker, type GoogleModel, HEARTBEATS_DIR, type HookItem, INIT_DIRS, type Issue, type IssueFilters, IssueNotFoundError, type IssueState, type IssueTracker, type IssueUpdate, type KimiModel, LEGACY_RUNTIME_DIRS, type LinearConfig, LinearTracker, type LinkDirection, LinkManager, type MigrationResult, type ModelId, type ModelsConfig, type NewIssue, NotImplementedError, type OpenAIModel, PANOPTICON_HOME, PRDS_DIR, PRD_DRAFTS_DIR, PRD_PUBLISHED_DIR, PROJECT_DOCS_SUBDIR, PROJECT_PRDS_ACTIVE_SUBDIR, PROJECT_PRDS_COMPLETED_SUBDIR, PROJECT_PRDS_PLANNED_SUBDIR, PROJECT_PRDS_SUBDIR, PROVIDERS, type PanopticonConfig, type ProviderAuthType, type ProviderCompatibility, type ProviderConfig, type ProviderName, type RallyConfig, type RefreshCacheResult, type RemoteConfig, type RemoteExeConfig, SETTINGS_FILE, SKILLS_DIR, SOURCE_AGENTS_DIR, SOURCE_DEV_SKILLS_DIR, SOURCE_RULES_DIR, SOURCE_SCRIPTS_DIR, SOURCE_SKILLS_DIR, SOURCE_TEMPLATES_DIR, SOURCE_TRAEFIK_TEMPLATES, SYNC_TARGET, type SettingsConfig, type ShadowConfig, type Shell, type SpecialistModels, type SyncItem, type SyncOptions, type SyncPlan, type SyncResult, TEMPLATES_DIR, TRAEFIK_CERTS_DIR, TRAEFIK_DIR, TRAEFIK_DYNAMIC_DIR, TrackerAuthError, type TrackerConfig, type TrackerConfigItem, type TrackerLink, type TrackerType, type TrackersConfig, type ZAIModel, addAlias, cleanOldBackups, createBackup, createBackupTimestamp, createTracker, createTrackerFromConfig, detectShell, executeSync, findDevrootForProject, formatIssueRef, getAgentCommand, getAliasInstructions, getAllTrackers, getAvailableModels, getClaudeModelFlag, getDashboardApiUrl, getDefaultConfig, getDefaultSettings, getDevrootPath, getDirectProviders, getLinkManager, getPanopticonHome, getPrimaryTracker, getProviderEnv, getProviderForModel, getRouterProviders, getSecondaryTracker, getShellRcFile, hasAlias, isAnthropicModel, isDevMode, isPanopticonSymlink, listBackups, loadConfig, loadSettings, migrateFromPersonalSymlinks, needsRouter, parseIssueRef, planHooksSync, planSync, refreshCache, requiresRouter, restoreBackup, saveConfig, saveSettings, setupCredentialFileAuth, syncHooks, syncStatusline, validateSettings };
+export { AGENTS_DIR, ARCHIVES_DIR, type AnthropicModel, type ApiKeysConfig, BACKUPS_DIR, BIN_DIR, type BackupInfo, CACHE_AGENTS_DIR, CACHE_MANIFEST, CACHE_RULES_DIR, CACHE_SKILLS_DIR, CERTS_DIR, CLAUDE_DIR, CLAUDE_MD_TEMPLATES, COMMANDS_DIR, CONFIG_DIR, CONFIG_FILE, COSTS_DIR, type Comment, type ComplexityLevel, type ComplexityModels, DOCS_DIR, type DevrootSyncItem, type GitHubConfig, GitHubTracker, type GitLabConfig, GitLabTracker, type GoogleModel, HEARTBEATS_DIR, type HookItem, INIT_DIRS, type Issue, type IssueFilters, IssueNotFoundError, type IssueState, type IssueTracker, type IssueUpdate, type KimiModel, LEGACY_RUNTIME_DIRS, type LinearConfig, LinearTracker, type LinkDirection, LinkManager, type MigrationResult, type ModelId, type ModelsConfig, type NewIssue, NotImplementedError, type OpenAIModel, PANOPTICON_HOME, PRDS_DIR, PRD_DRAFTS_DIR, PRD_PUBLISHED_DIR, PROJECT_DOCS_SUBDIR, PROJECT_PRDS_ACTIVE_SUBDIR, PROJECT_PRDS_COMPLETED_SUBDIR, PROJECT_PRDS_PLANNED_SUBDIR, PROJECT_PRDS_SUBDIR, PROVIDERS, type PanopticonConfig, type ProviderAuthType, type ProviderCompatibility, type ProviderConfig, type ProviderName, type RallyConfig, type RefreshCacheResult, type RemoteConfig, type RemoteExeConfig, SETTINGS_FILE, SKILLS_DIR, SOURCE_AGENTS_DIR, SOURCE_DEV_SKILLS_DIR, SOURCE_RULES_DIR, SOURCE_SCRIPTS_DIR, SOURCE_SKILLS_DIR, SOURCE_TEMPLATES_DIR, SOURCE_TRAEFIK_TEMPLATES, SYNC_TARGET, type SettingsConfig, type ShadowConfig, type Shell, type SpecialistModels, type SyncItem, type SyncOptions, type SyncPlan, type SyncResult, TEMPLATES_DIR, TRAEFIK_CERTS_DIR, TRAEFIK_DIR, TRAEFIK_DYNAMIC_DIR, TrackerAuthError, type TrackerConfig, type TrackerConfigItem, type TrackerLink, type TrackerType, type TrackersConfig, type ZAIModel, addAlias, cleanOldBackups, clearCredentialFileAuth, createBackup, createBackupTimestamp, createTracker, createTrackerFromConfig, detectShell, executeSync, findDevrootForProject, formatIssueRef, getAgentCommand, getAliasInstructions, getAllTrackers, getAvailableModels, getClaudeModelFlag, getDashboardApiUrl, getDefaultConfig, getDefaultSettings, getDevrootPath, getDirectProviders, getLinkManager, getPanopticonHome, getPrimaryTracker, getProviderEnv, getProviderForModel, getRouterProviders, getSecondaryTracker, getShellRcFile, hasAlias, isAnthropicModel, isDevMode, isPanopticonSymlink, listBackups, loadConfig, loadSettings, migrateFromPersonalSymlinks, needsRouter, parseIssueRef, planHooksSync, planSync, refreshCache, requiresRouter, restoreBackup, saveConfig, saveSettings, setupCredentialFileAuth, syncHooks, syncStatusline, validateSettings };

package/dist/index.js

@@ -21,7 +21,7 @@ import {
   restoreBackup,
   syncHooks,
   syncStatusline
-} from "./chunk-XKT5MHPT.js";
+} from "./chunk-4YSYJ4HM.js";
 import "./chunk-AQXETQHW.js";
 import {
   GitHubTracker,
@@ -32,9 +32,10 @@ import {
   getAllTrackers,
   getPrimaryTracker,
   getSecondaryTracker
-} from "./chunk-XFR2DLMR.js";
+} from "./chunk-76F6DSVS.js";
 import {
   PROVIDERS,
+  clearCredentialFileAuth,
   getAgentCommand,
   getAvailableModels,
   getClaudeModelFlag,
@@ -52,7 +53,7 @@ import {
   saveSettings,
   setupCredentialFileAuth,
   validateSettings
-} from "./chunk-7XNJJBH6.js";
+} from "./chunk-HJSM6E6U.js";
 import {
   findDevrootForProject,
   getDashboardApiUrl,
@@ -177,6 +178,7 @@ export {
   TrackerAuthError,
   addAlias,
   cleanOldBackups,
+  clearCredentialFileAuth,
   createBackup,
   createBackupTimestamp,
   createTracker,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Panopticon CLI - Main exports for library usage\nexport * from './lib/paths.js';\nexport * from './lib/config.js';\nexport * from './lib/shell.js';\nexport * from './lib/backup.js';\nexport * from './lib/sync.js';\nexport * from './lib/tracker/index.js';\nexport * from './lib/providers.js';\nexport * from './lib/settings.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AAKA;AACA;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Panopticon CLI - Main exports for library usage\nexport * from './lib/paths.js';\nexport * from './lib/config.js';\nexport * from './lib/shell.js';\nexport * from './lib/backup.js';\nexport * from './lib/sync.js';\nexport * from './lib/tracker/index.js';\nexport * from './lib/providers.js';\nexport * from './lib/settings.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AAKA;AACA;","names":[]}

package/dist/{projects-JEIVIYC6.js → projects-CFX3RTDL.js}

@@ -2,6 +2,7 @@ import {
   PROJECTS_CONFIG_FILE,
   createDefaultProjectsConfig,
   extractTeamPrefix,
+  findProjectByPath,
   findProjectByTeam,
   findProjectsByRallyProject,
   getProject,
@@ -18,7 +19,7 @@ import {
   resolveProjectPath,
   saveProjectsConfig,
   unregisterProject
-} from "./chunk-OMNXYPXC.js";
+} from "./chunk-2V4NF7J2.js";
 import "./chunk-ZTFNYOC7.js";
 import "./chunk-ZHC57RCV.js";
 init_projects();
@@ -26,6 +27,7 @@ export {
   PROJECTS_CONFIG_FILE,
   createDefaultProjectsConfig,
   extractTeamPrefix,
+  findProjectByPath,
   findProjectByTeam,
   findProjectsByRallyProject,
   getProject,
@@ -42,4 +44,4 @@ export {
   saveProjectsConfig,
   unregisterProject
 };
-//# sourceMappingURL=projects-JEIVIYC6.js.map
+//# sourceMappingURL=projects-CFX3RTDL.js.map

package/dist/{remote-workspace-AHVHQEES.js → remote-workspace-7FPGF2RM.js}

@@ -13,7 +13,7 @@ import {
   extractTeamPrefix,
   findProjectByTeam,
   init_projects
-} from "./chunk-OMNXYPXC.js";
+} from "./chunk-2V4NF7J2.js";
 import "./chunk-ZTFNYOC7.js";
 import {
   init_esm_shims
@@ -178,4 +178,4 @@ EOF`);
 export {
   createRemoteWorkspace
 };
-//# sourceMappingURL=remote-workspace-AHVHQEES.js.map
+//# sourceMappingURL=remote-workspace-7FPGF2RM.js.map

package/dist/{review-status-EPFG4XM7.js → review-status-TDPSOU5J.js}

@@ -5,7 +5,7 @@ import {
   loadReviewStatuses,
   saveReviewStatuses,
   setReviewStatus
-} from "./chunk-GFP3PIPB.js";
+} from "./chunk-YGJ54GW2.js";
 import "./chunk-JQBV3Q2W.js";
 import "./chunk-ZHC57RCV.js";
 init_review_status();
@@ -16,4 +16,4 @@ export {
   saveReviewStatuses,
   setReviewStatus
 };
-//# sourceMappingURL=review-status-EPFG4XM7.js.map
+//# sourceMappingURL=review-status-TDPSOU5J.js.map

package/dist/{specialist-context-T3NBMCIE.js → specialist-context-WGUUYDWY.js}

@@ -1,17 +1,17 @@
 import {
   getRecentRunLogs,
   init_specialist_logs
-} from "./chunk-ASY7T35E.js";
+} from "./chunk-OWHXCGVO.js";
 import {
   getModelId,
   init_work_type_router
-} from "./chunk-KJ2TRXNK.js";
+} from "./chunk-FTCPTHIJ.js";
 import "./chunk-JQBV3Q2W.js";
-import "./chunk-7XNJJBH6.js";
+import "./chunk-HJSM6E6U.js";
 import {
   getProject,
   init_projects
-} from "./chunk-OMNXYPXC.js";
+} from "./chunk-2V4NF7J2.js";
 import {
   getPanopticonHome,
   init_paths
@@ -254,4 +254,4 @@ export {
   regenerateContextDigest,
   scheduleDigestGeneration
 };
-//# sourceMappingURL=specialist-context-T3NBMCIE.js.map
+//# sourceMappingURL=specialist-context-WGUUYDWY.js.map

package/dist/{specialist-logs-CVKD3YJ3.js → specialist-logs-XJB5TCKJ.js}

@@ -16,11 +16,11 @@ import {
   isRunLogActive,
   listRunLogs,
   parseLogMetadata
-} from "./chunk-ASY7T35E.js";
-import "./chunk-KJ2TRXNK.js";
+} from "./chunk-OWHXCGVO.js";
+import "./chunk-FTCPTHIJ.js";
 import "./chunk-JQBV3Q2W.js";
-import "./chunk-7XNJJBH6.js";
-import "./chunk-OMNXYPXC.js";
+import "./chunk-HJSM6E6U.js";
+import "./chunk-2V4NF7J2.js";
 import "./chunk-ZTFNYOC7.js";
 import "./chunk-ZHC57RCV.js";
 init_specialist_logs();
@@ -42,4 +42,4 @@ export {
   listRunLogs,
   parseLogMetadata
 };
-//# sourceMappingURL=specialist-logs-CVKD3YJ3.js.map
+//# sourceMappingURL=specialist-logs-XJB5TCKJ.js.map

package/dist/{specialists-TKAP6T6Z.js → specialists-5LBRHYFA.js}

@@ -55,11 +55,11 @@ import {
   wakeSpecialist,
   wakeSpecialistOrQueue,
   wakeSpecialistWithTask
-} from "./chunk-ASY7T35E.js";
-import "./chunk-KJ2TRXNK.js";
+} from "./chunk-OWHXCGVO.js";
+import "./chunk-FTCPTHIJ.js";
 import "./chunk-JQBV3Q2W.js";
-import "./chunk-7XNJJBH6.js";
-import "./chunk-OMNXYPXC.js";
+import "./chunk-HJSM6E6U.js";
+import "./chunk-2V4NF7J2.js";
 import "./chunk-ZTFNYOC7.js";
 import "./chunk-ZHC57RCV.js";
 init_specialists();
@@ -120,4 +120,4 @@ export {
   wakeSpecialistOrQueue,
   wakeSpecialistWithTask
 };
-//# sourceMappingURL=specialists-TKAP6T6Z.js.map
+//# sourceMappingURL=specialists-5LBRHYFA.js.map

package/dist/{traefik-QX4ZV4YG.js → traefik-WFMQX2LY.js}

@@ -4,9 +4,9 @@ import {
   ensureProjectCerts,
   generatePanopticonTraefikConfig,
   generateTlsConfig
-} from "./chunk-RBUO57TC.js";
+} from "./chunk-NLQRED36.js";
 import "./chunk-FQ66DECN.js";
-import "./chunk-OMNXYPXC.js";
+import "./chunk-2V4NF7J2.js";
 import "./chunk-ZTFNYOC7.js";
 import "./chunk-ZHC57RCV.js";
 export {
@@ -16,4 +16,4 @@ export {
   generatePanopticonTraefikConfig,
   generateTlsConfig
 };
-//# sourceMappingURL=traefik-QX4ZV4YG.js.map
+//# sourceMappingURL=traefik-WFMQX2LY.js.map

package/dist/{workspace-manager-KLHUCIZV.js → workspace-manager-E434Z45T.js}

@@ -4,7 +4,7 @@ import {
   preTrustDirectory,
   removeWorkspace,
   stopWorkspaceDocker
-} from "./chunk-PI7Y3PSN.js";
+} from "./chunk-F5555J3A.js";
 import "./chunk-7SN4L4PH.js";
 import "./chunk-AQXETQHW.js";
 import "./chunk-ZTFNYOC7.js";
@@ -19,4 +19,4 @@ export {
   removeWorkspace,
   stopWorkspaceDocker
 };
-//# sourceMappingURL=workspace-manager-KLHUCIZV.js.map
+//# sourceMappingURL=workspace-manager-E434Z45T.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "panopticon-cli",
-  "version": "0.4.33",
+  "version": "0.5.1",
   "description": "Multi-agent orchestration for AI coding assistants (Claude Code, Codex, Cursor, Gemini CLI)",
   "keywords": [
     "ai-agents",

package/scripts/record-cost-event.js

@@ -69,10 +69,10 @@ var PRD_PUBLISHED_DIR = join(PRDS_DIR, "published");
 
 // src/lib/cost.ts
 var DEFAULT_PRICING = [
-  // Anthropic - 4.6 series
-  { provider: "anthropic", model: "claude-opus-4.6", inputPer1k: 5e-3, outputPer1k: 0.025, cacheReadPer1k: 5e-4, cacheWrite5mPer1k: 625e-5, cacheWrite1hPer1k: 0.01, currency: "USD" },
-  { provider: "anthropic", model: "claude-sonnet-4.5", inputPer1k: 3e-3, outputPer1k: 0.015, cacheReadPer1k: 3e-4, cacheWrite5mPer1k: 375e-5, cacheWrite1hPer1k: 6e-3, currency: "USD" },
-  { provider: "anthropic", model: "claude-haiku-4.5", inputPer1k: 1e-3, outputPer1k: 5e-3, cacheReadPer1k: 1e-4, cacheWrite5mPer1k: 125e-5, cacheWrite1hPer1k: 2e-3, currency: "USD" },
+  // Anthropic - 4.6 series (API IDs use dashes: claude-opus-4-6, claude-sonnet-4-6, claude-haiku-4-5)
+  { provider: "anthropic", model: "claude-opus-4-6", inputPer1k: 5e-3, outputPer1k: 0.025, cacheReadPer1k: 5e-4, cacheWrite5mPer1k: 625e-5, cacheWrite1hPer1k: 0.01, currency: "USD" },
+  { provider: "anthropic", model: "claude-sonnet-4-6", inputPer1k: 3e-3, outputPer1k: 0.015, cacheReadPer1k: 3e-4, cacheWrite5mPer1k: 375e-5, cacheWrite1hPer1k: 6e-3, currency: "USD" },
+  { provider: "anthropic", model: "claude-haiku-4-5", inputPer1k: 1e-3, outputPer1k: 5e-3, cacheReadPer1k: 1e-4, cacheWrite5mPer1k: 125e-5, cacheWrite1hPer1k: 2e-3, currency: "USD" },
   // Anthropic - 4.x series
   { provider: "anthropic", model: "claude-opus-4-1", inputPer1k: 0.015, outputPer1k: 0.075, cacheReadPer1k: 15e-4, cacheWrite5mPer1k: 0.01875, cacheWrite1hPer1k: 0.03, currency: "USD" },
   { provider: "anthropic", model: "claude-opus-4", inputPer1k: 0.015, outputPer1k: 0.075, cacheReadPer1k: 15e-4, cacheWrite5mPer1k: 0.01875, cacheWrite1hPer1k: 0.03, currency: "USD" },
@@ -95,7 +95,7 @@ function calculateCost(usage, pricing) {
   let inputMultiplier = 1;
   let outputMultiplier = 1;
   const totalInputTokens = usage.inputTokens + (usage.cacheReadTokens || 0) + (usage.cacheWriteTokens || 0);
-  if ((pricing.model === "claude-sonnet-4" || pricing.model === "claude-sonnet-4.5") && totalInputTokens > 2e5) {
+  if ((pricing.model === "claude-sonnet-4" || pricing.model === "claude-sonnet-4-6") && totalInputTokens > 2e5) {
     inputMultiplier = 2;
     outputMultiplier = 1.5;
   }

package/scripts/stop-hook

@@ -57,5 +57,12 @@ if [ -x "$SPECIALIST_HOOK" ]; then
   "$SPECIALIST_HOOK" &
 fi
 
+# Chain to work-agent completion detection hook
+# Detects when a work agent forgot to call "pan work done" and nudges it
+WORK_AGENT_HOOK="$HOME/.panopticon/bin/work-agent-stop-hook"
+if [ -x "$WORK_AGENT_HOOK" ]; then
+  "$WORK_AGENT_HOOK" &
+fi
+
 # Always exit successfully
 exit 0

package/scripts/work-agent-stop-hook

@@ -0,0 +1,137 @@
+#!/bin/bash
+# ~/.panopticon/bin/work-agent-stop-hook
+# Called when any agent goes idle — detects work agents that forgot "pan work done"
+#
+# Uses a lightweight AI model to analyze the last N lines of terminal output
+# and determine if the agent completed its work but failed to signal completion.
+# If so, sends a nudge message to the agent via tmux.
+#
+# The model used is configurable via PANOPTICON_COMPLETION_CHECK_MODEL env var
+# or defaults to the models.overrides.completion-check-hook setting in config.yaml,
+# falling back to claude-haiku-4-5.
+
+# Don't use set -e - resilient to failures, never break Claude Code execution
+
+# Get agent ID
+if [ -n "$PANOPTICON_AGENT_ID" ]; then
+  AGENT_ID="$PANOPTICON_AGENT_ID"
+elif [ -n "$TMUX" ]; then
+  AGENT_ID=$(tmux display-message -p '#S' 2>/dev/null)
+else
+  exit 0
+fi
+
+# Only run for work agents (agent-min-XXX, agent-pan-XXX, etc.)
+case "$AGENT_ID" in
+  agent-*)
+    # Check it's not a specialist
+    case "$AGENT_ID" in
+      specialist-*) exit 0 ;;
+    esac
+    ;;
+  *)
+    exit 0  # Not a work agent
+    ;;
+esac
+
+# Extract issue ID from agent ID (e.g., "agent-min-725" -> "MIN-725")
+ISSUE_ID=$(echo "$AGENT_ID" | sed 's/^agent-//' | tr '[:lower:]' '[:upper:]')
+
+# Skip if completion marker already exists (agent already called pan work done)
+COMPLETED_FILE="$HOME/.panopticon/agents/$AGENT_ID/completed"
+if [ -f "$COMPLETED_FILE" ]; then
+  exit 0
+fi
+
+# Cooldown: don't nudge more than once per 10 minutes
+NUDGE_FILE="$HOME/.panopticon/agents/$AGENT_ID/.last-completion-nudge"
+if [ -f "$NUDGE_FILE" ]; then
+  LAST_NUDGE=$(cat "$NUDGE_FILE" 2>/dev/null || echo "0")
+  NOW=$(date +%s)
+  ELAPSED=$(( NOW - LAST_NUDGE ))
+  if [ "$ELAPSED" -lt 600 ]; then
+    exit 0  # Too soon since last nudge
+  fi
+fi
+
+# Capture the last 80 lines of terminal output
+OUTPUT=$(tmux capture-pane -t "$AGENT_ID" -p -S -80 2>/dev/null || echo "")
+if [ -z "$OUTPUT" ]; then
+  exit 0
+fi
+
+# Quick heuristic pre-check: skip the expensive AI call if the output clearly
+# shows the agent is mid-work (e.g., running tests, editing files, reading)
+if echo "$OUTPUT" | grep -qE '(Reading|Editing|Searching|Running|Compiling|Building|Installing|●.*Bash|●.*Read|●.*Edit|●.*Grep|●.*Write|●.*Glob)' | tail -5 | grep -qE '●'; then
+  exit 0
+fi
+
+# Check if the agent appears to be at an idle prompt (not mid-response)
+if ! echo "$OUTPUT" | tail -10 | grep -qE '(^❯|Worked for)'; then
+  exit 0  # Agent doesn't appear to be at an idle prompt
+fi
+
+# Determine model to use for completion check
+# Priority: env var > config.yaml override > default
+COMPLETION_MODEL="${PANOPTICON_COMPLETION_CHECK_MODEL:-}"
+if [ -z "$COMPLETION_MODEL" ]; then
+  CONFIG_FILE="$HOME/.panopticon/config.yaml"
+  if [ -f "$CONFIG_FILE" ] && command -v grep &> /dev/null; then
+    COMPLETION_MODEL=$(grep 'completion-check-hook:' "$CONFIG_FILE" 2>/dev/null | awk '{print $2}' | tr -d '"' || echo "")
+  fi
+fi
+COMPLETION_MODEL="${COMPLETION_MODEL:-claude-haiku-4-5}"
+
+# Build the analysis prompt
+ANALYSIS_PROMPT="You are analyzing a work agent's terminal output to determine if it finished its work but forgot to call 'pan work done'.
+
+The agent was working on issue $ISSUE_ID. Here is the last 80 lines of its terminal output:
+
+<terminal_output>
+$OUTPUT
+</terminal_output>
+
+Respond with EXACTLY one of these words (nothing else):
+- FORGOT_COMPLETION — if the agent clearly finished its implementation work (closed beads, committed code, ran tests) but stopped without calling 'pan work done'
+- STILL_WORKING — if the agent appears to have more work to do (mentioned next steps, was mid-task)
+- STOPPED_FOR_INPUT — if the agent stopped because it needs human input or hit a blocker
+- UNCLEAR — if you cannot determine the state"
+
+# Run the analysis using claude CLI (headless, no interactive session)
+RESULT=$(echo "$ANALYSIS_PROMPT" | claude -p --model "$COMPLETION_MODEL" --max-tokens 20 2>/dev/null || echo "UNCLEAR")
+
+# Extract just the verdict (first word of output, strip whitespace)
+VERDICT=$(echo "$RESULT" | tr -d '[:space:]' | head -c 30)
+
+# Log the check
+LOG_DIR="$HOME/.panopticon/logs"
+mkdir -p "$LOG_DIR"
+echo "[$(date -Iseconds)] work-agent-stop-hook: $AGENT_ID ($ISSUE_ID) -> $VERDICT (model: $COMPLETION_MODEL)" \
+  >> "$LOG_DIR/hooks.log" 2>/dev/null || true
+
+if [ "$VERDICT" = "FORGOT_COMPLETION" ]; then
+  # Record nudge timestamp for cooldown
+  mkdir -p "$(dirname "$NUDGE_FILE")"
+  date +%s > "$NUDGE_FILE" 2>/dev/null || true
+
+  # Write the nudge message to a temp file and use load-buffer + paste-buffer
+  # (the reliable tmux message delivery pattern from CLAUDE.md)
+  NUDGE_MSG="You stopped without calling pan work done. If your implementation is complete, you MUST run this command now:
+
+pan work done $ISSUE_ID -c \"Implementation complete\"
+
+If you still have remaining tasks, continue working on them. Do NOT stop until all work is done AND you have called pan work done."
+
+  TMPFILE=$(mktemp)
+  echo "$NUDGE_MSG" > "$TMPFILE"
+  tmux load-buffer "$TMPFILE" 2>/dev/null
+  tmux paste-buffer -t "$AGENT_ID" 2>/dev/null
+  sleep 0.3
+  tmux send-keys -t "$AGENT_ID" C-m 2>/dev/null
+  rm -f "$TMPFILE"
+
+  echo "[$(date -Iseconds)] work-agent-stop-hook: Sent completion nudge to $AGENT_ID" \
+    >> "$LOG_DIR/hooks.log" 2>/dev/null || true
+fi
+
+exit 0