pi-daddy 0.48.2 → 0.49.0

package/dist/products/diagnostic-filter.d.ts

@@ -0,0 +1,7 @@
+export interface DiagnosticFilterResult {
+    bytes: Buffer;
+    omissions: Record<string, number>;
+}
+export type DiagnosticFormat = "session" | "json" | "jsonl" | "text";
+export declare function filterDiagnostic(bytes: Uint8Array, format: DiagnosticFormat): DiagnosticFilterResult;
+//# sourceMappingURL=diagnostic-filter.d.ts.map

package/dist/products/diagnostic-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-filter.d.ts","sourceRoot":"","sources":["../../src/products/diagnostic-filter.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AACD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAErE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,sBAAsB,CA0HpG"}

package/dist/products/diagnostic-filter.js

@@ -0,0 +1,135 @@
+/** Local diagnostic projection. Known private fields are omitted; free-text secret detection is heuristic. */
+import { parseRetentionJson } from "../governance/retention-json.js";
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+const privateKey = new RegExp("^(?:thinking|reasoning|reasoning_content|reasoning_details|encrypted_content|thoughtSignature|thinkingSignature|signature|" +
+    "env|environment|environ|credentials?|authorization|api[-_]?key|token|access[-_]?token|refresh[-_]?token|password|secret)$", "i");
+const privateType = /^(?:thinking|reasoning|redacted_thinking|reasoning_content|reasoning_details)$/i;
+export function filterDiagnostic(bytes, format) {
+    const omissions = {};
+    const note = (reason) => (omissions[reason] = (omissions[reason] ?? 0) + 1);
+    const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    const redact = (input) => {
+        let output = input.replace(/\b(?:sk-(?:or-v1-)?[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,})\b/g, () => {
+            note("credential-pattern");
+            return "[REDACTED]";
+        });
+        output = output.replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/<>"']+@/gi, (_match, scheme) => {
+            note("credential-url-userinfo");
+            return `${scheme}[REDACTED]@`;
+        });
+        output = output.replace(/\bBearer\s+[A-Za-z0-9._~+/=-]+/gi, () => {
+            note("credential-pattern");
+            return "Bearer [REDACTED]";
+        });
+        output = output.replace(/\b([A-Z][A-Z0-9_]*(?:API_KEY|TOKEN|PASSWORD|SECRET)|API_KEY|TOKEN|PASSWORD|SECRET)(\s*[=:]\s*)(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s,;]+)/gi, (_match, key, separator) => {
+            note("credential-assignment");
+            return `${key}${separator}[REDACTED]`;
+        });
+        return output;
+    };
+    const clean = (value, depth = 0) => {
+        if (depth > 64)
+            throw new Error("diagnostic nesting exceeds bounds");
+        if (typeof value === "string") {
+            // JSON embedded in a packet is a byte-bearing string. Keep it exactly when no redaction is needed.
+            if (/^\s*[\[{]/.test(value)) {
+                let parsed;
+                try {
+                    parsed = parseRetentionJson(value, 16 * 1024 * 1024);
+                }
+                catch {
+                    return redact(value);
+                }
+                const filtered = clean(parsed, depth + 1);
+                return JSON.stringify(filtered) === JSON.stringify(parsed) ? value : JSON.stringify(filtered);
+            }
+            return redact(value);
+        }
+        if (Array.isArray(value))
+            return value.flatMap((item) => {
+                if (object(item) && typeof item.type === "string" && privateType.test(item.type)) {
+                    note("private-reasoning");
+                    return [];
+                }
+                return [clean(item, depth + 1)];
+            });
+        if (!object(value))
+            return value;
+        if (typeof value.type === "string" && privateType.test(value.type)) {
+            note("private-reasoning");
+            return null;
+        }
+        const result = Object.create(null);
+        for (const [key, item] of Object.entries(value)) {
+            if (privateKey.test(key) || /(?:^|_)(?:API_KEY|ACCESS_TOKEN|REFRESH_TOKEN|PASSWORD|SECRET)$/.test(key)) {
+                note("private-field");
+                continue;
+            }
+            result[key] = clean(item, depth + 1);
+        }
+        return result;
+    };
+    const pick = (value, keys) => Object.fromEntries(keys.filter((key) => Object.hasOwn(value, key)).map((key) => [key, value[key]]));
+    const session = (value) => {
+        if (!object(value))
+            throw new Error("invalid native session record");
+        const envelope = pick(value, ["type", "id", "parentId", "timestamp"]);
+        if (value.type === "session")
+            return clean({ ...envelope, ...pick(value, ["version", "cwd", "parentSession"]) });
+        if (value.type === "message" && object(value.message)) {
+            const message = value.message;
+            if (!["user", "assistant", "toolResult"].includes(String(message.role))) {
+                note("unsupported-message");
+                return { ...envelope, omitted: "unsupported-message" };
+            }
+            const content = typeof message.content === "string" ? [{ type: "text", text: message.content }] : message.content;
+            if (!Array.isArray(content))
+                throw new Error("invalid native message content");
+            const visible = content.flatMap((block) => {
+                if (!object(block))
+                    throw new Error("invalid native content block");
+                if (block.type === "text" && typeof block.text === "string")
+                    return [pick(block, ["type", "text"])];
+                if (block.type === "toolCall")
+                    return [pick(block, ["type", "id", "name", "arguments"])];
+                note(typeof block.type === "string" && privateType.test(block.type) ? "private-reasoning" : "non-text-content");
+                return [];
+            });
+            return clean({
+                ...envelope,
+                message: {
+                    ...pick(message, ["role", "toolCallId", "toolName", "isError", "provider", "model", "stopReason", "usage"]),
+                    content: visible,
+                },
+            });
+        }
+        if (["model_change", "thinking_level_change", "session_info"].includes(String(value.type)))
+            return clean({ ...envelope, ...pick(value, ["provider", "modelId", "thinkingLevel", "name"]) });
+        note("unsupported-session-entry");
+        return clean({ ...envelope, omitted: "unsupported-session-entry" });
+    };
+    let output;
+    if (format === "text")
+        output = redact(text);
+    else if (format === "json")
+        output = JSON.stringify(clean(parseRetentionJson(text, 16 * 1024 * 1024))) + "\n";
+    else {
+        const lines = text.split("\n");
+        if (lines.at(-1) === "")
+            lines.pop();
+        if (format === "session") {
+            const header = parseRetentionJson(lines[0] ?? "", 16 * 1024 * 1024);
+            if (!object(header) || header.type !== "session" || header.version !== 3 || typeof header.id !== "string")
+                throw new Error("expected native Pi session v3");
+        }
+        output =
+            lines
+                .map((line) => {
+                const value = parseRetentionJson(line, 16 * 1024 * 1024);
+                return JSON.stringify(format === "session" ? session(value) : clean(value));
+            })
+                .join("\n") + "\n";
+    }
+    return { bytes: Buffer.from(output), omissions };
+}
+//# sourceMappingURL=diagnostic-filter.js.map

package/dist/products/diagnostic-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-filter.js","sourceRoot":"","sources":["../../src/products/diagnostic-filter.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,4HAA4H;IAC1H,2HAA2H,EAC7H,GAAG,CACJ,CAAC;AACF,MAAM,WAAW,GAAG,iFAAiF,CAAC;AAOtG,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,MAAwB;IAC1E,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE;QACvC,IAAI,MAAM,GAAG,KAAK,CAAC,OAAO,CACxB,mGAAmG,EACnG,GAAG,EAAE;YACH,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3B,OAAO,YAAY,CAAC;QACtB,CAAC,CACF,CAAC;QACF,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,0CAA0C,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,EAAE;YAC7F,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAChC,OAAO,GAAG,MAAM,aAAa,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC/D,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3B,OAAO,mBAAmB,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,sIAAsI,EACtI,CAAC,MAAM,EAAE,GAAW,EAAE,SAAiB,EAAE,EAAE;YACzC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC9B,OAAO,GAAG,GAAG,GAAG,SAAS,YAAY,CAAC;QACxC,CAAC,CACF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;QACnD,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,mGAAmG;YACnG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACtB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjF,IAAI,CAAC,mBAAmB,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gEAAgE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvG,IAAI,CAAC,eAAe,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAA8B,EAAE,IAAc,EAAE,EAAE,CAC9D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QACjH,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBAC5B,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;YACzD,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAClH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBACpE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpG,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAChH,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;gBACX,GAAG,QAAQ;gBACX,OAAO,EAAE;oBACP,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;oBAC3G,OAAO,EAAE,OAAO;iBACjB;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,uBAAuB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxF,OAAO,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,IAAI,MAAc,CAAC;IACnB,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;SACxC,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;SACzG,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;gBACvG,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC;QACD,MAAM;YACJ,KAAK;iBACF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACZ,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC"}

package/extensions/approvals.ts

@@ -233,8 +233,9 @@ export async function obtainApprovals(
   // precisely what spec §6.1 exists to prevent. Options are per-call; the queue is session-long.
   const gate = session.approvalGateFor({
     ui: ctx.ui,
-    hasUI: ctx.hasUI,
-    mode: ctx.mode,
+    // A native child tab is a viewer. Auto and inherited approvals still work; only the root can answer.
+    hasUI: ctx.hasUI && !(session.depth > 0),
+    mode: session.depth > 0 && ctx.mode === "tui" ? "view-only child" : ctx.mode,
     timeoutMs: () => timeoutMsFromEnv(process.env[ENV_APPROVAL_TIMEOUT]),
     autoMode: session.autoMode,
   });

package/extensions/dashboard-session-server.ts

@@ -1,3 +1,4 @@
+import { dashboardSettingsSnapshot, dashboardJev, setDashboardLimit } from "./dashboard-settings.ts";
 import { randomBytes } from "node:crypto";
 import { chmod, rm } from "node:fs/promises";
 import { createServer, type Server } from "node:net";
@@ -69,9 +70,22 @@ async function start(session: GrantsSession): Promise<DashboardSessionEndpoint>
 }
 
 async function respond(session: GrantsSession, token: string, line: string): Promise<Record<string, unknown>> {
-  const request = JSON.parse(line) as { token?: unknown; action?: unknown; edits?: unknown; enabled?: unknown };
+  const request = JSON.parse(line) as {
+    token?: unknown;
+    action?: unknown;
+    edits?: unknown;
+    enabled?: unknown;
+    key?: unknown;
+    seconds?: unknown;
+  };
   if (request.token !== token) return { ok: false, error: "unauthorised dashboard request" };
-  if (request.action === "set-auto") {
+  let jev;
+  if (request.action === "set-limit") {
+    setDashboardLimit(session, request.key, request.seconds);
+  } else if (request.action === "set-jev") {
+    if (typeof request.enabled !== "boolean") return { ok: false, error: "JEV requires an explicit boolean" };
+    jev = await dashboardJev(session, request.enabled ? "enable" : "disable");
+  } else if (request.action === "set-auto") {
     if (typeof request.enabled !== "boolean") return { ok: false, error: "Auto mode requires an explicit boolean" };
     await setAutoApproval(session, request.enabled, "dashboard");
   } else if (request.action === "set") {
@@ -91,6 +105,7 @@ async function respond(session: GrantsSession, token: string, line: string): Pro
     ...(session.activity ? { activity: { ...session.activity } } : {}),
     rows: sessionModelRows(session, [...session.definitions.keys()].sort()),
     versions: versionSnapshot(session),
+    settings: await dashboardSettingsSnapshot(session, jev),
     cost: null, // Live complete episode cost is unavailable; retained usage remains in the episode report.
   };
 }

package/extensions/dashboard-settings.ts

@@ -0,0 +1,149 @@
+/** Owner-bound dashboard settings. No provider call, global env edit, or permission inference. */
+import { randomUUID } from "node:crypto";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { GrantsSession } from "./session.ts";
+import type { DashboardJevState, DashboardSettingsSnapshot } from "../src/products/dashboard-settings.ts";
+import { MAX_CHILDREN_PER_CALL } from "../src/kernel/fanout.ts";
+import {
+  ENV_CHILD_TIMEOUT,
+  ENV_CHILD_IDLE_TIMEOUT,
+  timeoutFromEnv,
+  idleTimeoutFromEnv,
+} from "../src/kernel/run-child.ts";
+
+const bridges = new WeakMap<GrantsSession, Pick<ExtensionAPI, "events">>();
+const unavailable = (error?: string): DashboardJevState => ({
+  available: false,
+  enabled: false,
+  pending: false,
+  ...(error ? { error } : {}),
+});
+export function registerDashboardSettings(pi: Pick<ExtensionAPI, "events">, session: GrantsSession): void {
+  bridges.set(session, pi);
+}
+function owner(session: GrantsSession, edit = false) {
+  const current = session.reloadLifecycle?.autoMode;
+  if (!session.ownerBound || !current || current.reader !== session.autoMode)
+    throw new Error("Session settings owner is unavailable");
+  if (edit && !current.authority) throw new Error("Only the owning root session may edit settings");
+  return current;
+}
+export function childExecutionLimits(session: GrantsSession, env: NodeJS.ProcessEnv = process.env) {
+  const configured = session.reloadLifecycle?.executionSettings;
+  const current = session.reloadLifecycle?.autoMode;
+  const selected = configured?.nativeSessionId === current?.nativeSessionId ? configured : undefined;
+  return Object.freeze({
+    wallMs: selected?.wallMs ?? timeoutFromEnv(env[ENV_CHILD_TIMEOUT]),
+    idleMs: selected?.idleMs ?? idleTimeoutFromEnv(env[ENV_CHILD_IDLE_TIMEOUT]),
+    wallSource: selected?.wallMs === undefined ? ("startup" as const) : ("session" as const),
+    idleSource: selected?.idleMs === undefined ? ("startup" as const) : ("session" as const),
+  });
+}
+export function setDashboardLimit(session: GrantsSession, key: unknown, seconds: unknown): void {
+  const current = owner(session, true);
+  if (key !== "wall" && key !== "idle") throw new Error("Only child wall and idle limits are editable in this session");
+  if (
+    typeof seconds !== "number" ||
+    !Number.isSafeInteger(seconds) ||
+    seconds < 0 ||
+    seconds > Math.floor(2_147_483_647 / 1000)
+  )
+    throw new Error("Child limit must be whole seconds from 0 to 2147483; 0 restores the default");
+  const existing = session.reloadLifecycle.executionSettings;
+  const settings =
+    existing?.nativeSessionId === current.nativeSessionId
+      ? { ...existing }
+      : { nativeSessionId: current.nativeSessionId };
+  const ms = key === "wall" ? timeoutFromEnv(String(seconds)) : idleTimeoutFromEnv(String(seconds));
+  session.reloadLifecycle.executionSettings = { ...settings, [key === "wall" ? "wallMs" : "idleMs"]: ms };
+}
+const safeText = (value: unknown) => (typeof value === "string" ? value.slice(0, 120) : undefined);
+export async function dashboardJev(
+  session: GrantsSession,
+  action: "status" | "enable" | "disable",
+): Promise<DashboardJevState> {
+  const current = owner(session, action !== "status");
+  const pi = bridges.get(session);
+  if (!pi?.events?.emit) {
+    if (action !== "status") throw new Error("JEV bridge unavailable; load skill-harness in the owner Pi session");
+    return unavailable();
+  }
+  const requestId = randomUUID();
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(
+      () => (action === "status" ? resolve(unavailable()) : reject(new Error("JEV control was not acknowledged"))),
+      200,
+    );
+    const reply = (input: unknown) => {
+      const value = input as {
+        version?: number;
+        requestId?: string;
+        sessionId?: string;
+        pending?: boolean;
+        error?: string;
+        status?: {
+          enabled?: boolean;
+          mode?: string;
+          storage?: string | null;
+          remaining?: number;
+          availability?: string;
+          providerReadiness?: string;
+        };
+      };
+      if (!value || value.version !== 1 || value.requestId !== requestId || value.sessionId !== current.nativeSessionId)
+        return;
+      clearTimeout(timer);
+      if (session.reloadLifecycle.autoMode !== current || session.autoMode !== current.reader) {
+        reject(new Error("JEV settings owner changed"));
+        return;
+      }
+      if (!value.status || typeof value.status.enabled !== "boolean") {
+        if (action !== "status") reject(new Error("JEV owner could not apply the request"));
+        else resolve(unavailable("JEV owner is not bound to this session"));
+        return;
+      }
+      resolve({
+        available: true,
+        enabled: value.status.enabled,
+        pending: value.pending === true,
+        mode: safeText(value.status.mode),
+        storage: value.status.storage === null ? null : safeText(value.status.storage),
+        remaining: Number.isSafeInteger(value.status.remaining) ? value.status.remaining : undefined,
+        availability: safeText(value.status.availability),
+        providerReadiness: safeText(value.status.providerReadiness),
+        ...(value.error ? { error: "JEV request declined or unavailable; inspect the owner Pi session." } : {}),
+      });
+    };
+    try {
+      pi.events.emit("skill-harness:jev-control-v1", {
+        version: 1,
+        requestId,
+        sessionId: current.nativeSessionId,
+        action,
+        reply,
+      });
+    } catch {
+      clearTimeout(timer);
+      reject(new Error("JEV control bridge failed"));
+    }
+  });
+}
+export async function dashboardSettingsSnapshot(
+  session: GrantsSession,
+  jev?: DashboardJevState,
+): Promise<DashboardSettingsSnapshot> {
+  const current = owner(session);
+  const limits = childExecutionLimits(session);
+  return {
+    editable: Boolean(current.authority),
+    wallSeconds: limits.wallMs / 1000,
+    idleSeconds: limits.idleMs / 1000,
+    wallSource: limits.wallSource,
+    idleSource: limits.idleSource,
+    descendants: session.capacity?.total ?? 0,
+    reserved: session.capacity?.reserved ?? 0,
+    maxDepth: session.maxDepth ?? 0,
+    perCall: MAX_CHILDREN_PER_CALL,
+    jev: jev ?? (await dashboardJev(session, "status")),
+  };
+}

package/extensions/delegation-operations.ts

@@ -4,7 +4,7 @@ import { realpath } from "node:fs/promises";
 import { Type } from "typebox";
 import { shouldSeekApproval } from "../src/kernel/approval.ts";
 import { planDelegation } from "../src/kernel/delegate.ts";
-import type { OperationClaim } from "../src/kernel/dispatch-operation.ts";
+import type { OperationClaim, OperationReference } from "../src/kernel/dispatch-operation.ts";
 import { validOperationId } from "../src/kernel/dispatch-operation.ts";
 import { GovernanceRefusal } from "../src/kernel/refusals.ts";
 import { assertDefinitionIdentity } from "./definition-describe.ts";
@@ -15,6 +15,79 @@ import type { ChildSpec, DelegationToolContext } from "./run-delegation.ts";
 import type { ExecutionOccurrenceIds } from "./execution-occurrence.ts";
 import type { DelegationOutcome } from "./execute-child.ts";
 
+// Short-lived exact finals for explicit workflow retention. The operation registry/socket
+// remains identity-only; losing this observation never changes the original child result.
+// The native-owner lifecycle survives extension reloads, which create a new GrantsSession.
+const FINAL_BYTES = 4 * 1024 * 1024,
+  FINAL_ENTRIES = 128;
+type Final = Extract<NonNullable<DelegationOutcome["final"]>, { state: "complete" }>;
+export interface OperationFinalStore {
+  lifecycle: object;
+  owner: string;
+  bytes: number;
+  entries: Map<string, { executionId: string; final: Final }>;
+}
+export function bindOperationFinals(session: GrantsSession, sessionId: string, cwd: string) {
+  const owner = JSON.stringify([sessionId, cwd]),
+    old = session.reloadLifecycle.operationFinals;
+  if (!old || old.lifecycle !== session.reloadLifecycle || old.owner !== owner)
+    session.reloadLifecycle.operationFinals = {
+      lifecycle: session.reloadLifecycle,
+      owner,
+      bytes: 0,
+      entries: new Map(),
+    };
+}
+/** Capture before admitting work; a late child cannot write a replacement session's store. */
+export function operationFinalScope(session: GrantsSession): object | undefined {
+  return session.reloadLifecycle?.operationFinals;
+}
+export function operationFinal(session: GrantsSession, operation: OperationReference) {
+  const store = session.reloadLifecycle?.operationFinals,
+    item = store?.entries.get(operation.operationId);
+  if (!store || store.lifecycle !== session.reloadLifecycle || !item || item.executionId !== operation.executionId)
+    return {
+      state: "unavailable" as const,
+      reason:
+        "exact native final was not retained, expired from the 4 MiB session buffer, or belongs to an earlier session",
+    };
+  const observed = operation.runtime?.final,
+    final = item.final;
+  if (
+    operation.state !== "settled" ||
+    observed?.state !== "complete" ||
+    ["sessionId", "messageId", "leafId", "sha256"].some(
+      (key) => observed[key as keyof typeof observed] !== final[key as keyof Final],
+    )
+  )
+    return { state: "unavailable" as const, reason: "native final identity no longer matches the operation" };
+  return { ...final };
+}
+function retainOperationFinal(
+  session: GrantsSession,
+  claim: OperationClaim,
+  result: DelegationOutcome,
+  scope: object | undefined,
+) {
+  const store = session.reloadLifecycle?.operationFinals,
+    final = result.final;
+  if (!store || store !== scope || store.lifecycle !== session.reloadLifecycle || final?.state !== "complete") return;
+  const bytes = Buffer.byteLength(final.text);
+  if (!bytes || bytes > FINAL_BYTES || createHash("sha256").update(final.text).digest("hex") !== final.sha256) return;
+  const old = store.entries.get(claim.operation.operationId);
+  if (old) {
+    store.bytes -= Buffer.byteLength(old.final.text);
+    store.entries.delete(claim.operation.operationId);
+  }
+  while (store.bytes + bytes > FINAL_BYTES || store.entries.size >= FINAL_ENTRIES) {
+    const first = store.entries.entries().next().value!;
+    store.bytes -= Buffer.byteLength(first[1].final.text);
+    store.entries.delete(first[0]);
+  }
+  store.entries.set(claim.operation.operationId, { executionId: claim.operation.executionId, final: { ...final } });
+  store.bytes += bytes;
+}
+
 export const operationIdShape = () =>
   Type.Optional(
     Type.String({
@@ -121,7 +194,12 @@ export function existingOperationOutcome(claim: OperationClaim, depth: number):
     operation: { ...claim.operation, reused: true },
   };
 }
-export async function finishDelegationOperation(claim: OperationClaim, result: DelegationOutcome) {
+export async function finishDelegationOperation(
+  claim: OperationClaim,
+  result: DelegationOutcome,
+  session: GrantsSession,
+  finalScope: object | undefined,
+) {
   const cleanup = result.cleanup;
   const state =
     cleanup?.state === "settled"
@@ -161,6 +239,7 @@ export async function finishDelegationOperation(claim: OperationClaim, result: D
         }
       : {}),
   });
+  retainOperationFinal(session, claim, result, finalScope);
   result.operation = {
     ...claim.operation,
     state,

package/extensions/execute-child.ts

@@ -1,3 +1,4 @@
+import { childExecutionLimits } from "./dashboard-settings.ts";
 import { realpath } from "node:fs/promises";
 import { BoundedReadCleanupError } from "../src/kernel/bounded-read.ts";
 import { retainDiscoveryCleanupFailure } from "./session.ts";
@@ -16,13 +17,7 @@ import { appendLedgerEvent, buildChildLifecycleEvent } from "../src/governance/l
 import { hasFinalizerError } from "../src/governance/finalization.ts";
 import { mergeChildEnv } from "../src/kernel/propagation.ts";
 import type { Capability } from "../src/kernel/resolve.ts";
-import {
-  DEFAULT_KILL_GRACE_MS,
-  ENV_CHILD_IDLE_TIMEOUT,
-  ENV_CHILD_TIMEOUT,
-  idleTimeoutFromEnv,
-  timeoutFromEnv,
-} from "../src/kernel/run-child.ts";
+import { DEFAULT_KILL_GRACE_MS, ENV_CHILD_IDLE_TIMEOUT, ENV_CHILD_TIMEOUT } from "../src/kernel/run-child.ts";
 import { activitySessionFor } from "../src/executors/activity-session.ts";
 import { processTreeActivity } from "../src/executors/process-activity.ts";
 import { resolveWorkspace } from "../src/executors/herdr-cli.ts";
@@ -147,6 +142,7 @@ export async function executePlannedChild(input: ChildExecutionInput): Promise<D
   const runtime = input.session.reloadLifecycle?.runtimeSettlement;
   let registered = false;
   try {
+    const limits = childExecutionLimits(input.session);
     input = { ...input, cwd: await realpath(input.preparedWorkspace?.workspace.root ?? input.cwd) };
     runtime?.begin(input.executionId);
     registered = Boolean(runtime);
@@ -157,6 +153,7 @@ export async function executePlannedChild(input: ChildExecutionInput): Promise<D
         input.onExecutorEntry?.();
       },
       runtime,
+      limits,
     );
     try {
       await runtime?.finish(
@@ -220,7 +217,8 @@ export async function executePlannedChild(input: ChildExecutionInput): Promise<D
 async function executePreparedChild(
   input: ChildExecutionInput,
   onExecutorEntry: () => void,
-  runtime?: import("../src/governance/runtime-settlement.ts").RuntimeSettlement,
+  runtime: import("../src/governance/runtime-settlement.ts").RuntimeSettlement | undefined,
+  limits: ReturnType<typeof childExecutionLimits>,
 ): Promise<DelegationOutcome> {
   const { session, plan, childId, executionId, parentExecutionId, preparedWorkspace, signal, onProgress } = input;
   const ledgerPath = session.ledgerPath;
@@ -269,10 +267,10 @@ async function executePreparedChild(
     );
     activityStarted = true;
   } catch {}
-  const configuredTimeoutMs = timeoutFromEnv(process.env[ENV_CHILD_TIMEOUT]);
+  const configuredTimeoutMs = limits.wallMs;
   // PR 3e: the working bound is inactivity; `deadlineAt` below is the runaway ceiling. Every child gets a pi session
   // file so the parent can see it working when its stdout is quiet (pi appends each message and tool result to it).
-  const configuredIdleMs = idleTimeoutFromEnv(process.env[ENV_CHILD_IDLE_TIMEOUT]);
+  const configuredIdleMs = limits.idleMs;
   const activitySession = await activitySessionFor(plan.args, executionId);
   // Disposed on every path (review finding: it leaked on every throw), except when the operator keeps a Herdr pane,
   // where the interactive pi in that pane is still alive and still appending to this file.
@@ -378,7 +376,7 @@ async function executePreparedChild(
       workspaceId: preparedWorkspace?.workspace.workspaceId ?? null,
     });
     const sessionFlag = plan.args.indexOf("--session");
-    if (sessionFlag >= 0) retention.observeSession({ source: "pi-session-file", value: plan.args[sessionFlag + 1] });
+    // Pi creates the file during execution; observe its exact final below, not a guaranteed pre-spawn miss.
     let releaseReason = "failed";
     let retainWriterLease = false;
     let terminalAttempted = false;
@@ -424,6 +422,7 @@ async function executePreparedChild(
       const output = await runCapturedExecution(
         {
           executionId,
+          terminalUi: session.executor.kind === "herdr",
           sessionPath: activitySession.path,
           onReadCleanup,
           onOwnership: async (identity) => {

package/extensions/execution-controls.ts

@@ -1,3 +1,4 @@
+import type { childExecutionLimits } from "./dashboard-settings.ts";
 /** Operator-facing execution settings; display never changes admission, deadlines or retention. */
 import { timeoutFromEnv, idleTimeoutFromEnv } from "../src/kernel/run-child.ts";
 import { timeoutMsFromEnv } from "../src/governance/approval-prompt.ts";
@@ -11,6 +12,7 @@ import {
 export function renderExecutionControls(
   nativeSessionRoot: string | undefined,
   env: NodeJS.ProcessEnv = process.env,
+  limits?: ReturnType<typeof childExecutionLimits>,
 ): string[] {
   let approval: string;
   try {
@@ -20,9 +22,12 @@ export function renderExecutionControls(
     approval = `${ENV_APPROVAL_TIMEOUT} invalid; a needed new prompt will refuse`;
   }
   const source = (key: string) => (env[key] === undefined ? "default" : `from ${key}; zero/invalid uses default`);
+  const wallSource = limits?.wallSource === "session" ? "session override; future children" : source(ENV_CHILD_TIMEOUT);
+  const idleSource =
+    limits?.idleSource === "session" ? "session override; future children" : source(ENV_CHILD_IDLE_TIMEOUT);
   return [
-    `  child wall ${timeoutFromEnv(env[ENV_CHILD_TIMEOUT]) / 1000}s (${source(ENV_CHILD_TIMEOUT)})`,
-    `  child idle ${idleTimeoutFromEnv(env[ENV_CHILD_IDLE_TIMEOUT]) / 1000}s (${source(ENV_CHILD_IDLE_TIMEOUT)})`,
+    `  child wall ${(limits?.wallMs ?? timeoutFromEnv(env[ENV_CHILD_TIMEOUT])) / 1000}s (${wallSource})`,
+    `  child idle ${(limits?.idleMs ?? idleTimeoutFromEnv(env[ENV_CHILD_IDLE_TIMEOUT])) / 1000}s (${idleSource})`,
     "             process safety controls; no time/token budget is added to the model prompt",
     `  approval   ${approval}`,
     `  transcripts ${

package/extensions/grants-command.ts

@@ -1,3 +1,4 @@
+import type { childExecutionLimits } from "./dashboard-settings.ts";
 /**
  * The `/grants` command — session status, approvals, and ledger integrity.
  *
@@ -28,6 +29,7 @@ export interface GrantsCommandContext {
   governed: boolean;
   /** Host opt-in captured by this session, not a later environment reread. */
   nativeSessionRoot?: string;
+  executionLimits?: ReturnType<typeof childExecutionLimits>;
   autoModeStatus?: string;
   /** Explicit owner mutation; the command parser itself holds no permission authority. */
   changeAutoMode?: (enabled: boolean) => Promise<string>;
@@ -439,7 +441,7 @@ export const grantsCommand = {
       // ADR-0031, and its probe is only defensible because this line exists. Placed next to `holding` so the
       // two facts about what a spawn will be sit together.
       `  executor   ${executor.disclosure}`,
-      ...renderExecutionControls(ctx.grants.nativeSessionRoot),
+      ...renderExecutionControls(ctx.grants.nativeSessionRoot, process.env, ctx.grants.executionLimits),
       `  Auto       ${ctx.grants.autoModeStatus ?? "OFF (default)"}`,
       `  depth      ${depth} of max ${maxDepth}${maxDepth <= 0 ? " (spawning disabled)" : ""}`,
       `  ledger     ${ledgerPath || "(not recording — set PI_DADDY_LEDGER)"}`,

package/extensions/grants.ts

@@ -1,3 +1,4 @@
+import { registerDashboardSettings, childExecutionLimits } from "./dashboard-settings.ts";
 import { bindEcosystemVersions } from "./ecosystem-versions.ts";
 import {
   initializeSessionAutoMode,
@@ -90,6 +91,7 @@ export default function (pi: ExtensionAPI, trustedSession?: GrantsSession) {
   session.currentThinking = typeof pi.getThinkingLevel === "function" ? () => pi.getThinkingLevel() : undefined;
   registerActivityTimeline(pi, session);
   const runtimeSnapshot = registerRuntimeSnapshot(pi, session);
+  registerDashboardSettings(pi, session);
   const dashboardPluginRoot = fileURLToPath(new URL("../herdr-plugin/", import.meta.url));
   const dashboardPaths = defaultDashboardPaths(agentDir());
   // Definitions are registered only after owner-bound session_start. Until then there is no delegation
@@ -481,6 +483,7 @@ export default function (pi: ExtensionAPI, trustedSession?: GrantsSession) {
               }
             : {}),
           nativeSessionRoot: session.nativeSessionRoot,
+          executionLimits: childExecutionLimits(session),
           changeAutoMode: async (enabled: boolean) => {
             const { auto } = await setAutoApproval(session, enabled, "command");
             return `${auto.enabled ? "ON" : "OFF"} (${auto.source}; current session permissions)`;

package/extensions/reload-environment.ts

@@ -5,6 +5,8 @@ import type { BoundedReadCleanupError } from "../src/kernel/bounded-read.ts";
 
 /** The root baseline and latest child publication for one real Pi session owner. */
 export interface ReloadLifecycle {
+  operationFinals?: import("./delegation-operations.ts").OperationFinalStore;
+  executionSettings?: { nativeSessionId: string; wallMs?: number; idleMs?: number };
   autoMode?: import("./session-auto-mode.ts").SessionAutoLifecycle;
   runtimeSnapshotUnsubscribe?: () => void;
   runtimeSnapshotGeneration?: object;
@@ -115,6 +117,7 @@ export function bindReloadLifecycle(
       existing = {
         root: current,
         autoMode: existing.autoMode,
+        executionSettings: existing.executionSettings,
         activityRootId: existing.activityRootId,
         episodeId: existing.episodeId,
         capacity: existing.capacity,