pantheon-opencode 1.3.5 → 1.3.7

package/src/plugins/hook-runner.ts

@@ -22,7 +22,7 @@
  * is returned as a structured HookResult so the opencode session can never be
  * taken down by the security layer.
  */
-import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process'
+import { type ChildProcessWithoutNullStreams, spawn } from 'node:child_process'
 import path from 'node:path'
 import type { Readable } from 'node:stream'
 import { fileURLToPath } from 'node:url'

package/src/plugins/pantheon-hooks.ts

@@ -192,8 +192,8 @@ import {
   enqueueChatReminder,
   pendingChatReminders,
 } from '../pantheon/chat-reminders.ts'
-import { type HookPayload, type HookResult, runHook } from './hook-runner.ts'
 import { pantheonPluginOnce } from '../pantheon/plugin-once.ts'
+import { type HookPayload, type HookResult, runHook } from './hook-runner.ts'
 
 /** Tools that represent a subagent delegation (opencode `task` tool etc.). */
 const DELEGATION_TOOL_RE = /^(task|.*delegate.*|.*subagent.*)$/i

package/src/plugins/tui/dist/tui.d.ts

@@ -11,7 +11,7 @@ type DelegationEntry = {
   taskID?: string;
   /** Agent name, e.g. "apollo". */
   agent: string;
-  state: 'running' | 'completed' | 'error' | 'cancelled';
+  state: 'running' | 'completed' | 'error' | 'startup_failed' | 'startup_unknown' | 'cancelled';
   /** Epoch ms of the `Started` header. */
   startedAt: number;
   /** Epoch ms of the `Finalized` header — null while still running. */

package/src/plugins/tui/dist/tui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tui.d.ts","names":[],"sources":["../src/index.tsx"],"mappings":";;KAq6BY;;EAEV;;EAEA;;;;EAIA;;EAEA;EACA;;EAEA;;EAEA;EACA;EACA;;EAEA;;;;EAIA;;;;;;;;;;;iBAsBc,wBACd,aACA,oBACA,qBACC;;;;;;iBA8GmB,sBAAsB,cAAc,QAAQ;;;;;;;;iBAwC5C,yBAAyB,eAAe,QAAQ;;;;;;;;iBAWtD,sBACd;EAAS;EAAoB;eAC7B;;;;;;iBAYc,YAAY;;;iBAMZ,WAAW;;;;iBAOX,yBAAyB,GAAG,iBAAiB,GAAG;;;;;iBAWhD,sBACd,cAAc,mBACd,uBACC;;;iBAQa,WAAW;;;iBAcX,kBAAkB,OAAO,iBAAiB;;;KAO9C;iBAQI,mBAAmB,OAAO,kBAAkB;iBAS5C,wBAAwB,OAAO;;iBAoB/B,uBAAuB;;;;;;;iBAWvB,4BACd,mBAAmB,mBACnB,eAAe,wBACd;;KA4DS;EACV;EACA;EACA;EACA;EACA;EACA;IACE;IACA,QAAQ;IACR;IACA;IACA;MAAS;MAAgB;;;;;KAKjB;;EAEV;;EAEA;;EAEA;EACA;;EAEA;EACA;;EAEA;;EAEA;EACA;EACA;EACA;;EAEA;;;KAIU;EACV;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;iBAac,wBACd,MAAM,oBACN,eACC;;;iBA+Ea,yBACd,KAAK,YAAY,sBACjB,MAAM,oBACN;;;iBA+Fc,sBACd,KAAK,YAAY,sBACjB;;;;;;iBAiBc,2BACd;EAAqB;EAAa;iBAClC,YAAY,uDACX;;;;;iBA2Ba,sBACd,KAAK,YAAY,sBACjB,gBAAgB,sBAChB;;;iBAWc,kBAAkB,MAAM,sBAAsB;;;;;;iBAqB9C,uBACd,eAAe,uBACf,aAAa,oBACZ;;;;;;;;;iBA8Da,iBAAiB,cAAc;;;;KAOnC;;EAEV;EACA;;IAEE;MAAU;;;IAEV;MAAU;QAAY;QAAe,SAAS;;;;;;;;;;iBASlC,wBAAwB,SAAS;;;;;;;;iBAmBjC,gBAAgB;EAAgB;IAAQ;;;;;;;iBASxC,kBAAkB;EAAkC;IAAQ;;;;KAKhE;;EAEV;;EAEA;;;EAGA;;;EAGA;EACA;IACE;IACA;;;;;;;iBAQY,mBAAmB;;;;;iBASnB,cAAc,OAAO;;;;;;;;;;;;;;iBAiBrB,4BACd,mBAAmB,mCACnB,aAAa,mBACb,eACC;;;;;;iBAwCa,4BACd;EAAS,YAAY,cAAc,SAAS;eAC5C;;;;;KA8KU;EACV,KAAK,YAAY;;EAEjB;;EAEA;;cAmcI,QAAQ;EAAoB"}
+{"version":3,"file":"tui.d.ts","names":[],"sources":["../src/index.tsx"],"mappings":";;KAq6BY;;EAEV;;EAEA;;;;EAIA;;EAEA;EACA;;EAEA;;EAEA;EACA;EACA;;EAEA;;;;EAIA;;;;;;;;;;;iBAsBc,wBACd,aACA,oBACA,qBACC;;;;;;iBAgHmB,sBAAsB,cAAc,QAAQ;;;;;;;;iBAwC5C,yBAAyB,eAAe,QAAQ;;;;;;;;iBAWtD,sBACd;EAAS;EAAoB;eAC7B;;;;;;iBAYc,YAAY;;;iBAMZ,WAAW;;;;iBAOX,yBAAyB,GAAG,iBAAiB,GAAG;;;;;iBAWhD,sBACd,cAAc,mBACd,uBACC;;;iBAQa,WAAW;;;iBAcX,kBAAkB,OAAO,iBAAiB;;;KAO9C;iBAQI,mBAAmB,OAAO,kBAAkB;iBAc5C,wBAAwB,OAAO;;iBAoB/B,uBAAuB;;;;;;;iBAWvB,4BACd,mBAAmB,mBACnB,eAAe,wBACd;;KAmFS;EACV;EACA;EACA;EACA;EACA;EACA;IACE;IACA,QAAQ;IACR;IACA;IACA;MAAS;MAAgB;;;;;KAKjB;;EAEV;;EAEA;;EAEA;EACA;;EAEA;EACA;;EAEA;;EAEA;EACA;EACA;EACA;;EAEA;;;KAIU;EACV;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;iBAac,wBACd,MAAM,oBACN,eACC;;;iBA+Ea,yBACd,KAAK,YAAY,sBACjB,MAAM,oBACN;;;iBA+Fc,sBACd,KAAK,YAAY,sBACjB;;;;;;iBAiBc,2BACd;EAAqB;EAAa;iBAClC,YAAY,uDACX;;;;;iBA2Ba,sBACd,KAAK,YAAY,sBACjB,gBAAgB,sBAChB;;;iBAWc,kBAAkB,MAAM,sBAAsB;;;;;;iBAqB9C,uBACd,eAAe,uBACf,aAAa,oBACZ;;;;;;;;;iBA8Da,iBAAiB,cAAc;;;;KAOnC;;EAEV;EACA;;IAEE;MAAU;;;IAEV;MAAU;QAAY;QAAe,SAAS;;;;;;;;;;iBASlC,wBAAwB,SAAS;;;;;;;;iBAmBjC,gBAAgB;EAAgB;IAAQ;;;;;;;iBASxC,kBAAkB;EAAkC;IAAQ;;;;KAKhE;;EAEV;;EAEA;;;EAGA;;;EAGA;EACA;IACE;IACA;;;;;;;iBAQY,mBAAmB;;;;;iBASnB,cAAc,OAAO;;;;;;;;;;;;;;iBAiBrB,4BACd,mBAAmB,mCACnB,aAAa,mBACb,eACC;;;;;;iBAwCa,4BACd;EAAS,YAAY,cAAc,SAAS;eAC5C;;;;;KA8KU;EACV,KAAK,YAAY;;EAEjB;;EAEA;;cAucI,QAAQ;EAAoB"}

package/src/plugins/tui/dist/tui.js

@@ -455,10 +455,10 @@ function parseConfig(raw) {
 	if (!toml?.parse) return defaultConfig();
 	const root = asTable(toml.parse(raw));
 	const cfg = defaultConfig();
-	const ui = asTable(root["ui"]);
-	cfg.showBars = bool(ui["show_bars"], cfg.showBars);
-	cfg.showStatus = bool(ui["show_status"], cfg.showStatus);
-	const rawWidth = ui["bar_width"];
+	const ui = asTable(root.ui);
+	cfg.showBars = bool(ui.show_bars, cfg.showBars);
+	cfg.showStatus = bool(ui.show_status, cfg.showStatus);
+	const rawWidth = ui.bar_width;
 	if (typeof rawWidth === "number" && Number.isFinite(rawWidth) && rawWidth >= 1) cfg.barWidth = Math.min(40, Math.floor(rawWidth));
 	for (const id of [
 		"anthropic",
@@ -467,14 +467,14 @@ function parseConfig(raw) {
 	]) {
 		const t = asTable(root[id]);
 		const p = cfg.providers[id];
-		p.enabled = bool(t["enabled"], p.enabled);
-		p.show["5h"] = bool(t["show_5h"], p.show["5h"]);
-		p.show["7d"] = bool(t["show_7d"], p.show["7d"]);
-		p.show["1m"] = bool(t["show_1m"], p.show["1m"]);
-		p.show.model = bool(t["show_model"], p.show.model);
-		const credentialsPath = str(t["credentials_path"]);
+		p.enabled = bool(t.enabled, p.enabled);
+		p.show["5h"] = bool(t.show_5h, p.show["5h"]);
+		p.show["7d"] = bool(t.show_7d, p.show["7d"]);
+		p.show["1m"] = bool(t.show_1m, p.show["1m"]);
+		p.show.model = bool(t.show_model, p.show.model);
+		const credentialsPath = str(t.credentials_path);
 		if (credentialsPath !== void 0) p.credentialsPath = credentialsPath;
-		const codexAuthPath = str(t["codex_auth_path"]);
+		const codexAuthPath = str(t.codex_auth_path);
 		if (codexAuthPath !== void 0) p.codexAuthPath = codexAuthPath;
 	}
 	return cfg;
@@ -765,7 +765,7 @@ function parseDelegationMarkdown(raw, fileAlias, sessionID = "") {
 	const startedAt = started !== void 0 ? Date.parse(started) : NaN;
 	if (agent === void 0 || state === void 0 || Number.isNaN(startedAt)) return null;
 	const normalized = state.toLowerCase();
-	if (normalized !== "running" && normalized !== "completed" && normalized !== "error" && normalized !== "cancelled") return null;
+	if (normalized !== "running" && normalized !== "completed" && normalized !== "error" && normalized !== "startup_failed" && normalized !== "startup_unknown" && normalized !== "cancelled") return null;
 	const finalizedAt = finalized !== void 0 ? Date.parse(finalized) : NaN;
 	return {
 		alias: title ?? (fileAlias !== void 0 ? stripMdSuffix(fileAlias) : "unknown"),
@@ -898,7 +898,7 @@ function delegationElapsed(entry, now) {
 * state machine testable without booting OpenCode's renderer. */
 function delegationActivity(entry) {
 	if (entry.state === "completed") return "completed";
-	if (entry.state === "error") return "error";
+	if (entry.state === "error" || entry.state === "startup_failed" || entry.state === "startup_unknown") return "error";
 	if (entry.state === "cancelled") return "cancelled";
 	if (entry.read) return "reading";
 	if (entry.alias.startsWith("live-") && entry.taskID === void 0) return "delegating";
@@ -959,7 +959,12 @@ function mergeChildDelegationSources(children, live) {
 		}
 		const existing = result[index];
 		if (existing === void 0) continue;
-		if (existing.source === "md" && existing.state !== "running") continue;
+		if (existing.state !== "running") {
+			if (liveEntry.alias !== null && existing.alias !== incoming.alias) existing.alias = incoming.alias;
+			if (incoming.agent !== "agent" && existing.agent !== incoming.agent) existing.agent = incoming.agent;
+			if (incoming.read && !existing.read) existing.read = true;
+			continue;
+		}
 		result[index] = {
 			...existing,
 			alias: liveEntry.alias !== null ? incoming.alias : existing.alias,

package/src/plugins/tui/dist/tui.tsx

@@ -677,25 +677,25 @@ function parseConfig(raw: string): UsageBarConfig {
   const root = asTable(toml.parse(raw))
   const cfg = defaultConfig()
 
-  const ui = asTable(root['ui'])
-  cfg.showBars = bool(ui['show_bars'], cfg.showBars)
-  cfg.showStatus = bool(ui['show_status'], cfg.showStatus)
-  const rawWidth = ui['bar_width']
+  const ui = asTable(root.ui)
+  cfg.showBars = bool(ui.show_bars, cfg.showBars)
+  cfg.showStatus = bool(ui.show_status, cfg.showStatus)
+  const rawWidth = ui.bar_width
   if (typeof rawWidth === 'number' && Number.isFinite(rawWidth) && rawWidth >= 1)
     cfg.barWidth = Math.min(40, Math.floor(rawWidth))
 
   for (const id of ['anthropic', 'openai', 'opencodego'] as ProviderId[]) {
     const t = asTable(root[id])
     const p = cfg.providers[id]
-    p.enabled = bool(t['enabled'], p.enabled)
-    p.show['5h'] = bool(t['show_5h'], p.show['5h'])
-    p.show['7d'] = bool(t['show_7d'], p.show['7d'])
-    p.show['1m'] = bool(t['show_1m'], p.show['1m'])
-    p.show.model = bool(t['show_model'], p.show.model)
+    p.enabled = bool(t.enabled, p.enabled)
+    p.show['5h'] = bool(t.show_5h, p.show['5h'])
+    p.show['7d'] = bool(t.show_7d, p.show['7d'])
+    p.show['1m'] = bool(t.show_1m, p.show['1m'])
+    p.show.model = bool(t.show_model, p.show.model)
     // Assign only when present — keeps `exactOptionalPropertyTypes` happy.
-    const credentialsPath = str(t['credentials_path'])
+    const credentialsPath = str(t.credentials_path)
     if (credentialsPath !== undefined) p.credentialsPath = credentialsPath
-    const codexAuthPath = str(t['codex_auth_path'])
+    const codexAuthPath = str(t.codex_auth_path)
     if (codexAuthPath !== undefined) p.codexAuthPath = codexAuthPath
   }
   return cfg
@@ -942,7 +942,7 @@ export type DelegationEntry = {
   taskID?: string
   /** Agent name, e.g. "apollo". */
   agent: string
-  state: 'running' | 'completed' | 'error' | 'cancelled'
+  state: 'running' | 'completed' | 'error' | 'startup_failed' | 'startup_unknown' | 'cancelled'
   /** Epoch ms of the `Started` header. */
   startedAt: number
   /** Epoch ms of the `Finalized` header — null while still running. */
@@ -1052,6 +1052,8 @@ export function parseDelegationMarkdown(
     normalized !== 'running' &&
     normalized !== 'completed' &&
     normalized !== 'error' &&
+    normalized !== 'startup_failed' &&
+    normalized !== 'startup_unknown' &&
     normalized !== 'cancelled'
   ) {
     return null
@@ -1221,7 +1223,12 @@ export type DelegationActivity =
 
 export function delegationActivity(entry: DelegationEntry): DelegationActivity {
   if (entry.state === 'completed') return 'completed'
-  if (entry.state === 'error') return 'error'
+  if (
+    entry.state === 'error' ||
+    entry.state === 'startup_failed' ||
+    entry.state === 'startup_unknown'
+  )
+    return 'error'
   if (entry.state === 'cancelled') return 'cancelled'
   if (entry.read) return 'reading'
   if (entry.alias.startsWith('live-') && entry.taskID === undefined) return 'delegating'
@@ -1274,7 +1281,12 @@ export function mergeChildDelegationSources(
   })
 
   for (const liveEntry of live) {
-    if (liveEntry.alias === null && liveEntry.taskID === null && Date.now() - liveEntry.startedAt > 30_000) continue
+    if (
+      liveEntry.alias === null &&
+      liveEntry.taskID === null &&
+      Date.now() - liveEntry.startedAt > 30_000
+    )
+      continue
     const incoming = toDelegationEntry(liveEntry)
     const index =
       (incoming.taskID !== undefined ? byTask.get(incoming.taskID) : undefined) ??
@@ -1292,8 +1304,26 @@ export function mergeChildDelegationSources(
 
     const existing = result[index]
     if (existing === undefined) continue
-    const finalized = existing.source === 'md' && existing.state !== 'running'
-    if (finalized) continue
+    // Any terminal state is authoritative — a child session that went idle
+    // correctly derives 'completed' via childStatusToState before the MD
+    // report is written. The live tool-part channel stays 'running' until
+    // pantheon_delegation_read fires, so allowing it to overwrite a
+    // terminal state would flip completed → running (the bug this fixes).
+    //
+    // When the existing entry IS terminal, we still absorb live metadata
+    // (alias, agent, read) but preserve the terminal state.
+    if (existing.state !== 'running') {
+      if (liveEntry.alias !== null && existing.alias !== incoming.alias) {
+        existing.alias = incoming.alias
+      }
+      if (incoming.agent !== 'agent' && existing.agent !== incoming.agent) {
+        existing.agent = incoming.agent
+      }
+      if (incoming.read && !existing.read) {
+        existing.read = true
+      }
+      continue
+    }
     result[index] = {
       ...existing,
       alias: liveEntry.alias !== null ? incoming.alias : existing.alias,
@@ -2220,7 +2250,9 @@ function View(props: {
         }
         const withStatus = children.map((c) => ({ ...c, status: resolveStatus(c.id) }))
         const childEntries = childrenToDelegationEntries(withStatus, md, now())
-        for (const [k, v] of props.liveStore.map) if (v.alias === null && v.taskID === null && Date.now() - v.startedAt > 30_000) props.liveStore.map.delete(k)
+        for (const [k, v] of props.liveStore.map)
+          if (v.alias === null && v.taskID === null && Date.now() - v.startedAt > 30_000)
+            props.liveStore.map.delete(k)
         // The event channel is optimistic: it renders a job even while the
         // child session/report is still being created. Filter by parent so a
         // different focused session never leaks rows into this sidebar.
@@ -2488,7 +2520,9 @@ const tui: TuiPlugin = (api, _options, _meta) => {
     order: 900,
     slots: {
       sidebar_content(_ctx, props) {
-        return <View api={api} sessionID={props.session_id} version={version()} liveStore={liveStore} />
+        return (
+          <View api={api} sessionID={props.session_id} version={version()} liveStore={liveStore} />
+        )
       },
     },
   })

package/src/plugins/tui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pantheon-tui",
   "type": "module",
-  "version": "1.3.5",
+  "version": "1.3.7",
   "description": "Pantheon TUI plugin — sidebar (version, preset, sessions, real-time delegations) + AI subscription usage gauges incl. OpenCode Go/Zen dollar limits (vendored, MIT)",
   "license": "MIT",
   "exports": {

package/src/plugins/tui/src/index.tsx

@@ -677,25 +677,25 @@ function parseConfig(raw: string): UsageBarConfig {
   const root = asTable(toml.parse(raw))
   const cfg = defaultConfig()
 
-  const ui = asTable(root['ui'])
-  cfg.showBars = bool(ui['show_bars'], cfg.showBars)
-  cfg.showStatus = bool(ui['show_status'], cfg.showStatus)
-  const rawWidth = ui['bar_width']
+  const ui = asTable(root.ui)
+  cfg.showBars = bool(ui.show_bars, cfg.showBars)
+  cfg.showStatus = bool(ui.show_status, cfg.showStatus)
+  const rawWidth = ui.bar_width
   if (typeof rawWidth === 'number' && Number.isFinite(rawWidth) && rawWidth >= 1)
     cfg.barWidth = Math.min(40, Math.floor(rawWidth))
 
   for (const id of ['anthropic', 'openai', 'opencodego'] as ProviderId[]) {
     const t = asTable(root[id])
     const p = cfg.providers[id]
-    p.enabled = bool(t['enabled'], p.enabled)
-    p.show['5h'] = bool(t['show_5h'], p.show['5h'])
-    p.show['7d'] = bool(t['show_7d'], p.show['7d'])
-    p.show['1m'] = bool(t['show_1m'], p.show['1m'])
-    p.show.model = bool(t['show_model'], p.show.model)
+    p.enabled = bool(t.enabled, p.enabled)
+    p.show['5h'] = bool(t.show_5h, p.show['5h'])
+    p.show['7d'] = bool(t.show_7d, p.show['7d'])
+    p.show['1m'] = bool(t.show_1m, p.show['1m'])
+    p.show.model = bool(t.show_model, p.show.model)
     // Assign only when present — keeps `exactOptionalPropertyTypes` happy.
-    const credentialsPath = str(t['credentials_path'])
+    const credentialsPath = str(t.credentials_path)
     if (credentialsPath !== undefined) p.credentialsPath = credentialsPath
-    const codexAuthPath = str(t['codex_auth_path'])
+    const codexAuthPath = str(t.codex_auth_path)
     if (codexAuthPath !== undefined) p.codexAuthPath = codexAuthPath
   }
   return cfg
@@ -942,7 +942,14 @@ export type DelegationEntry = {
   taskID?: string
   /** Agent name, e.g. "apollo". */
   agent: string
-  state: 'running' | 'completed' | 'error' | 'cancelled'
+  state:
+    | 'running'
+    | 'completed'
+    | 'error'
+    | 'startup_failed'
+    | 'startup_unknown'
+    | 'cancelled'
+    | 'stale-running'
   /** Epoch ms of the `Started` header. */
   startedAt: number
   /** Epoch ms of the `Finalized` header — null while still running. */
@@ -1048,10 +1055,14 @@ export function parseDelegationMarkdown(
   const startedAt = started !== undefined ? Date.parse(started) : NaN
   if (agent === undefined || state === undefined || Number.isNaN(startedAt)) return null
   const normalized = state.toLowerCase()
+  // Running state should only come from live channels, never from persisted
+  // reports. A stale "running" MD artifact contaminates the panel — skip it.
+  if (normalized === 'running') return null
   if (
-    normalized !== 'running' &&
     normalized !== 'completed' &&
     normalized !== 'error' &&
+    normalized !== 'startup_failed' &&
+    normalized !== 'startup_unknown' &&
     normalized !== 'cancelled'
   ) {
     return null
@@ -1169,8 +1180,8 @@ export function tuiLogPath(projectRoot: string): string {
  *  falling back to startedAt, descending). Shared by the md reader and
  *  mergeDelegationSources. */
 export function compareDelegationEntries(a: DelegationEntry, b: DelegationEntry): number {
-  const aRun = a.state === 'running' ? 1 : 0
-  const bRun = b.state === 'running' ? 1 : 0
+  const aRun = a.state === 'running' || a.state === 'stale-running' ? 1 : 0
+  const bRun = b.state === 'running' || b.state === 'stale-running' ? 1 : 0
   if (aRun !== bRun) return bRun - aRun
   return (b.updatedAt ?? b.startedAt) - (a.updatedAt ?? a.startedAt)
 }
@@ -1182,12 +1193,45 @@ export function compareDelegationEntries(a: DelegationEntry, b: DelegationEntry)
 export function visibleDelegationList(
   all: readonly DelegationEntry[],
   maxTerminal = 8,
+  now = Date.now(),
+  staleThresholdMs = 30 * 60 * 1000, // 30 minutes
 ): DelegationEntry[] {
-  const running = all.filter((d) => d.state === 'running')
+  const running = all
+    .filter((d) => d.state === 'running')
+    .map((d) => markStaleIfRunning(d, now, staleThresholdMs))
   const terminal = all.filter((d) => d.state !== 'running').slice(0, maxTerminal)
   return [...running, ...terminal]
 }
 
+/** Default stale-running threshold: 30 minutes. */
+export const STALE_RUNNING_THRESHOLD_MS = 30 * 60 * 1000
+
+/** Idle silence window: if no updatedAt change in this window, the entry is
+ *  considered stale. Combined with the stale-running threshold to produce the
+ *  display-only `stale-running` state. */
+export const IDLE_SILENCE_MS = 60 * 1000
+
+/**
+ * Mark a running entry as `stale-running` if it has been running longer than
+ * the threshold AND has no recent activity (no `updatedAt` change in the last
+ * `IDLE_SILENCE_MS`). This is DISPLAY-ONLY — the board state is unchanged.
+ *
+ * A `stale-running` entry renders with a warning indicator but the underlying
+ * delegation is still treated as running by the backend.
+ */
+export function markStaleIfRunning(
+  entry: DelegationEntry,
+  now: number,
+  thresholdMs = STALE_RUNNING_THRESHOLD_MS,
+): DelegationEntry {
+  if (entry.state !== 'running') return entry
+  const elapsed = now - entry.startedAt
+  if (elapsed < thresholdMs) return entry
+  // If updatedAt exists and is recent, entry is still active — not stale.
+  if (entry.updatedAt !== null && now - entry.updatedAt < IDLE_SILENCE_MS) return entry
+  return { ...entry, state: 'stale-running' as const }
+}
+
 /** Compact elapsed-time label: "5m 12s", "1h 30m", "2d 4h" — ticks every
  *  second for running jobs. */
 export function fmtElapsed(ms: number): string {
@@ -1205,7 +1249,8 @@ export function fmtElapsed(ms: number): string {
 /** Elapsed label for one entry: running → ticks `now - startedAt`, terminal
  *  → fixed `updatedAt - startedAt` (em dash when no finalized timestamp). */
 export function delegationElapsed(entry: DelegationEntry, now: number): string {
-  if (entry.state === 'running') return fmtElapsed(now - entry.startedAt)
+  if (entry.state === 'running' || entry.state === 'stale-running')
+    return fmtElapsed(now - entry.startedAt)
   return entry.updatedAt !== null ? fmtElapsed(entry.updatedAt - entry.startedAt) : '\u2014'
 }
 
@@ -1221,7 +1266,12 @@ export type DelegationActivity =
 
 export function delegationActivity(entry: DelegationEntry): DelegationActivity {
   if (entry.state === 'completed') return 'completed'
-  if (entry.state === 'error') return 'error'
+  if (
+    entry.state === 'error' ||
+    entry.state === 'startup_failed' ||
+    entry.state === 'startup_unknown'
+  )
+    return 'error'
   if (entry.state === 'cancelled') return 'cancelled'
   if (entry.read) return 'reading'
   if (entry.alias.startsWith('live-') && entry.taskID === undefined) return 'delegating'
@@ -1274,7 +1324,12 @@ export function mergeChildDelegationSources(
   })
 
   for (const liveEntry of live) {
-    if (liveEntry.alias === null && liveEntry.taskID === null && Date.now() - liveEntry.startedAt > 30_000) continue
+    if (
+      liveEntry.alias === null &&
+      liveEntry.taskID === null &&
+      Date.now() - liveEntry.startedAt > 30_000
+    )
+      continue
     const incoming = toDelegationEntry(liveEntry)
     const index =
       (incoming.taskID !== undefined ? byTask.get(incoming.taskID) : undefined) ??
@@ -1292,8 +1347,26 @@ export function mergeChildDelegationSources(
 
     const existing = result[index]
     if (existing === undefined) continue
-    const finalized = existing.source === 'md' && existing.state !== 'running'
-    if (finalized) continue
+    // Any terminal state is authoritative — a child session that went idle
+    // correctly derives 'completed' via childStatusToState before the MD
+    // report is written. The live tool-part channel stays 'running' until
+    // pantheon_delegation_read fires, so allowing it to overwrite a
+    // terminal state would flip completed → running (the bug this fixes).
+    //
+    // When the existing entry IS terminal, we still absorb live metadata
+    // (alias, agent, read) but preserve the terminal state.
+    if (existing.state !== 'running') {
+      if (liveEntry.alias !== null && existing.alias !== incoming.alias) {
+        existing.alias = incoming.alias
+      }
+      if (incoming.agent !== 'agent' && existing.agent !== incoming.agent) {
+        existing.agent = incoming.agent
+      }
+      if (incoming.read && !existing.read) {
+        existing.read = true
+      }
+      continue
+    }
     result[index] = {
       ...existing,
       alias: liveEntry.alias !== null ? incoming.alias : existing.alias,
@@ -1844,7 +1917,9 @@ export function childrenToDelegationEntries(
       agent: mdEntry?.agent ?? child.agent ?? 'agent',
       state,
       startedAt: mdEntry?.startedAt ?? child.time?.created ?? now,
-      updatedAt: mdEntry?.updatedAt ?? (state === 'running' ? null : (child.time?.updated ?? null)),
+      updatedAt:
+        mdEntry?.updatedAt ??
+        (state === 'running' || state === 'stale-running' ? null : (child.time?.updated ?? null)),
       timedOut: mdEntry?.timedOut ?? false,
       description:
         mdEntry !== undefined && mdEntry.description !== ''
@@ -1978,6 +2053,8 @@ function DelegationRow(props: {
     switch (props.job.state) {
       case 'running':
         return t.warning
+      case 'stale-running':
+        return t.error // warning color for stale delegations
       case 'completed':
         return t.success
       case 'error':
@@ -1989,6 +2066,7 @@ function DelegationRow(props: {
 
   const marker = createMemo(() => {
     if (props.job.state === 'running') return `${delegationSpinnerFrame(props.animationNow)} `
+    if (props.job.state === 'stale-running') return '\u26a0 ' // warning triangle
     switch (props.job.state) {
       case 'completed':
         return '\u2713 '
@@ -2220,7 +2298,9 @@ function View(props: {
         }
         const withStatus = children.map((c) => ({ ...c, status: resolveStatus(c.id) }))
         const childEntries = childrenToDelegationEntries(withStatus, md, now())
-        for (const [k, v] of props.liveStore.map) if (v.alias === null && v.taskID === null && Date.now() - v.startedAt > 30_000) props.liveStore.map.delete(k)
+        for (const [k, v] of props.liveStore.map)
+          if (v.alias === null && v.taskID === null && Date.now() - v.startedAt > 30_000)
+            props.liveStore.map.delete(k)
         // The event channel is optimistic: it renders a job even while the
         // child session/report is still being created. Filter by parent so a
         // different focused session never leaks rows into this sidebar.
@@ -2488,7 +2568,9 @@ const tui: TuiPlugin = (api, _options, _meta) => {
     order: 900,
     slots: {
       sidebar_content(_ctx, props) {
-        return <View api={api} sessionID={props.session_id} version={version()} liveStore={liveStore} />
+        return (
+          <View api={api} sessionID={props.session_id} version={version()} liveStore={liveStore} />
+        )
       },
     },
   })

package/src/plugins/tui/tsdown.config.ts

@@ -1,5 +1,5 @@
-import { defineConfig } from 'tsdown'
 import solid from 'rolldown-plugin-solid'
+import { defineConfig } from 'tsdown'
 
 export default defineConfig({
   entry: { tui: 'src/index.tsx', server: 'src/server.ts' },

package/src/routing.yml

@@ -151,6 +151,7 @@ presets:
 agents:
   zeus:
     role: Central orchestrator
+    max_steps: 40   # R4: step budget — at max_steps the agent is forced to summarize-and-stop. Tracker is permanent-per-process (no reset wiring).
     reasoning_effort: medium
     user_invocable: true
     can_delegate: true
@@ -189,6 +190,7 @@ agents:
     - incremental-implementation
   athena:
     role: Strategic planner
+    max_steps: 15   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: high
     user_invocable: true
     can_delegate: true
@@ -208,6 +210,7 @@ agents:
     - memory-bank
   apollo:
     role: Investigation scout
+    max_steps: 25   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: low
     user_invocable: false
     can_delegate: false
@@ -225,6 +228,7 @@ agents:
     - auto-continue
   hermes:
     role: Backend specialist
+    max_steps: 60   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: medium
     user_invocable: true
     can_delegate: true
@@ -247,6 +251,7 @@ agents:
     - incremental-implementation
   aphrodite:
     role: Frontend specialist
+    max_steps: 60   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: medium
     user_invocable: true
     can_delegate: false
@@ -267,6 +272,7 @@ agents:
     - file-prompts
   demeter:
     role: Database specialist
+    max_steps: 50   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: medium
     user_invocable: true
     can_delegate: false
@@ -286,6 +292,7 @@ agents:
     - incremental-implementation
   themis:
     role: Quality gate
+    max_steps: 25   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: high
     user_invocable: true
     can_delegate: false
@@ -307,6 +314,7 @@ agents:
     - context-compression
   prometheus:
     role: Infrastructure specialist
+    max_steps: 30   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: medium
     user_invocable: true
     can_delegate: false
@@ -325,6 +333,7 @@ agents:
     - incremental-implementation
   hephaestus:
     role: AI pipelines
+    max_steps: 50   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: medium
     user_invocable: true
     can_delegate: false
@@ -343,6 +352,7 @@ agents:
     - auto-continue
   nyx:
     role: Observability
+    max_steps: 25   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: low
     user_invocable: true
     can_delegate: false
@@ -361,6 +371,7 @@ agents:
     - auto-continue
   gaia:
     role: Remote sensing domain specialist
+    max_steps: 25   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: low
     user_invocable: false
     can_delegate: false
@@ -375,6 +386,7 @@ agents:
     - auto-continue
   iris:
     role: GitHub operations
+    max_steps: 20   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: low
     user_invocable: true
     can_delegate: false
@@ -392,6 +404,7 @@ agents:
     - artifact-management
   mnemosyne:
     role: Memory bank
+    max_steps: 20   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: low
     user_invocable: true
     can_delegate: false
@@ -415,6 +428,7 @@ agents:
     - session-goal
   talos:
     role: Hotfix agent
+    max_steps: 15   # R4: step budget — at max_steps the agent is forced to summarize-and-stop
     reasoning_effort: low
     user_invocable: true
     can_delegate: false
@@ -573,6 +587,34 @@ background_delegation:
   read_only_agents: [apollo, gaia]
   session_max: 3
   retry_count: 1
+# ── R1: Per-error-type retry + provider cooldown (LiteLLM pattern) ──────
+# retry_policy: max retries per error class before escalating. Exponential
+# backoff (base 1s, doubling, capped 30s) applies between retries. auth
+# errors are NEVER retried (0) — a credential problem will not fix itself.
+# Enforcement: zeus-delegate-with-retry (manual waves) + RetryPolicyEngine.
+retry_policy:
+  auth: 0
+  rate_limit: 3
+  timeout: 2
+  other: 1
+# cooldown: after `allowed_fails` consecutive failures for a provider, skip
+# that provider for `cooldown_time_seconds`. A success resets the counter.
+# In-memory tracker (no Redis) — process-wide, shared across retry helpers.
+cooldown:
+  allowed_fails: 3
+  cooldown_time_seconds: 60
+# ── O5: permission.task — glob rules for which subagents an agent may
+# invoke (last matching rule wins; deny removes the agent from the delegate
+# tool description entirely — prevents circular delegation at the
+# permission layer). Default "*": allow keeps the existing runtime matrix
+# (zeus → anyone; athena/hermes → apollo only). Example deny-first config:
+#   permission:
+#     task:
+#       "*": deny
+#       "orchestrator-*": allow
+permission:
+  task:
+    "*": allow
 todo_enforcer:
   enabled: true
   cooldown_base_ms: 5000            # base backoff between injections