pitroom 0.11.0 → 0.13.0

package/dist/pitroom.mjs

@@ -522,9 +522,9 @@ function doctor2({ models, hasFallback }) {
   return checks;
 }
 function catalog2() {
-  const file = path3.join(codexHome(), "models_cache.json");
+  const file2 = path3.join(codexHome(), "models_cache.json");
   try {
-    const raw = JSON.parse(fs3.readFileSync(file, "utf8"));
+    const raw = JSON.parse(fs3.readFileSync(file2, "utf8"));
     const models = (raw.models ?? []).filter((m) => m.visibility !== "hide" && typeof m.slug === "string").map((m) => ({
       id: m.slug,
       efforts: (m.supported_reasoning_levels ?? []).map(
@@ -589,10 +589,10 @@ function useArchive(hooks) {
 }
 function writeMeta(meta) {
   fs4.mkdirSync(runDir(meta.id), { recursive: true });
-  const file = runFile(meta.id, "meta.json");
-  const tmp = `${file}.${process.pid}.tmp`;
+  const file2 = runFile(meta.id, "meta.json");
+  const tmp = `${file2}.${process.pid}.tmp`;
   fs4.writeFileSync(tmp, JSON.stringify(meta, null, 2));
-  fs4.renameSync(tmp, file);
+  fs4.renameSync(tmp, file2);
   if (TERMINAL.includes(meta.state)) {
     try {
       onFinished?.(meta);
@@ -601,12 +601,12 @@ function writeMeta(meta) {
   }
 }
 function readMeta(id) {
-  const file = runFile(id, "meta.json");
-  if (!fs4.existsSync(file)) {
+  const file2 = runFile(id, "meta.json");
+  if (!fs4.existsSync(file2)) {
     const kept = archive?.meta(id);
     if (kept) return upgrade(kept);
   }
-  return upgrade(JSON.parse(fs4.readFileSync(file, "utf8")));
+  return upgrade(JSON.parse(fs4.readFileSync(file2, "utf8")));
 }
 function upgrade(raw) {
   if (!raw.worker) raw.worker = raw.model ? { backend: "opencode", model: raw.model } : { backend: "opencode" };
@@ -727,8 +727,8 @@ function parseEvents3(jsonl) {
       tools[name] = (tools[name] ?? 0) + 1;
       const target = p.file_path ?? p.absolute_path ?? p.path ?? p.dir_path ?? p.pattern ?? p.command ?? p.query ?? p.url ?? p.prompt;
       lastActivity = `${name} ${target ? oneLine3(String(target), 60) : ""}`.trim();
-      const file = p.file_path ?? p.absolute_path ?? p.path;
-      if (EDIT_TOOLS2.has(name) && file) pendingEdits.set(String(e.tool_id), String(file));
+      const file2 = p.file_path ?? p.absolute_path ?? p.path;
+      if (EDIT_TOOLS2.has(name) && file2) pendingEdits.set(String(e.tool_id), String(file2));
       if (timeline.length < MAX_STEPS) {
         const step = { kind: EDIT_TOOLS2.has(name) ? "edit" : name === "run_shell_command" ? "shell" : "tool", name, text: clip3(String(target ?? ""), 240) };
         timeline.push(step);
@@ -788,13 +788,13 @@ function workerHome() {
   const auth = settings().security?.auth;
   const body = `${JSON.stringify(auth ? { ...base2, security: { ...base2.security, auth } } : base2, null, 2)}
 `;
-  const file = path5.join(dir, "settings.json");
+  const file2 = path5.join(dir, "settings.json");
   try {
-    if (fs5.readFileSync(file, "utf8") === body) return root;
+    if (fs5.readFileSync(file2, "utf8") === body) return root;
   } catch {
   }
   fs5.mkdirSync(dir, { recursive: true });
-  fs5.writeFileSync(file, body);
+  fs5.writeFileSync(file2, body);
   for (const name of ["oauth_creds.json", "google_accounts.json"]) {
     const from = path5.join(geminiHome(), name);
     const to = path5.join(dir, name);
@@ -1416,7 +1416,8 @@ var SCHEMA = {
   models: "record",
   tiers: "record",
   costs: "numbers",
-  audit: "number"
+  audit: "number",
+  readIn: "string"
 };
 function configPath() {
   if (process.env.PITROOM_CONFIG) return path7.resolve(process.env.PITROOM_CONFIG);
@@ -1426,25 +1427,25 @@ function configPath() {
 var cached;
 function loadConfig() {
   if (cached) return cached;
-  const file = configPath();
+  const file2 = configPath();
   const config = {};
   const warnings = [];
-  if (fs7.existsSync(file)) {
+  if (fs7.existsSync(file2)) {
     let raw;
     try {
-      raw = JSON.parse(fs7.readFileSync(file, "utf8"));
+      raw = JSON.parse(fs7.readFileSync(file2, "utf8"));
     } catch (e) {
-      warnings.push(`${file}: invalid JSON (${e.message}); ignored`);
+      warnings.push(`${file2}: invalid JSON (${e.message}); ignored`);
     }
     if (raw && typeof raw === "object" && !Array.isArray(raw)) {
       for (const [key, value] of Object.entries(raw)) {
         const type = SCHEMA[key];
         if (!type) {
-          warnings.push(`${file}: unknown key "${key}" ignored`);
+          warnings.push(`${file2}: unknown key "${key}" ignored`);
         } else if (matches(value, type)) {
           config[key] = value;
         } else {
-          warnings.push(`${file}: "${key}" must be ${type}; ignored`);
+          warnings.push(`${file2}: "${key}" must be ${type}; ignored`);
         }
       }
     }
@@ -1474,6 +1475,7 @@ var rate = (v) => {
   const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
   return typeof n === "number" && Number.isFinite(n) && n >= 0 ? Math.min(n, 1) : void 0;
 };
+var readIn = (v) => v === "auto" || v === "snapshot" || v === "project" ? v : void 0;
 var list = (s) => s?.split(",").map((x) => x.trim()).filter(Boolean);
 function setting(flag2, env, conf, fallback) {
   if (flag2 !== void 0) return { value: flag2, source: "flag" };
@@ -1498,7 +1500,8 @@ function effective(flags = {}) {
     models: setting(void 0, void 0, c.models, {}),
     tiers: setting(void 0, void 0, c.tiers, {}),
     costs: setting(void 0, void 0, c.costs, {}),
-    audit: setting(void 0, rate(e.PITROOM_AUDIT), rate(c.audit), 0)
+    audit: setting(void 0, rate(e.PITROOM_AUDIT), rate(c.audit), 0),
+    readIn: setting(void 0, readIn(e.PITROOM_READ_IN), readIn(c.readIn), "auto")
   };
 }
 
@@ -1545,6 +1548,7 @@ var BOOL_FLAGS = {
   "-i": "isolate",
   "--isolate": "isolate",
   "--bg": "bg",
+  "--in-place": "in-place",
   "--audit": "audit",
   "--no-audit": "no-audit",
   "--web": "web",
@@ -1556,6 +1560,7 @@ var BOOL_FLAGS = {
   "--full": "full",
   "--badge": "badge",
   "--probe": "probe",
+  "--clear": "clear",
   "--copy": "copy",
   "--all": "all",
   "--models": "models",
@@ -1623,8 +1628,8 @@ function exitCodeFor(meta) {
   }
 }
 function readTask(p) {
-  const file = flag(p, "task-file");
-  if (file) return fs8.readFileSync(file, "utf8");
+  const file2 = flag(p, "task-file");
+  if (file2) return fs8.readFileSync(file2, "utf8");
   const words = p.positional;
   if (words.length === 1 && words[0] === "-") return fs8.readFileSync(0, "utf8");
   return words.join(" ");
@@ -1638,6 +1643,7 @@ function runOptions(p, task) {
   return {
     mode: modes[0] ?? "read",
     auditRate: has(p, "no-audit") ? 0 : has(p, "audit") ? 1 : void 0,
+    inPlace: has(p, "in-place"),
     task,
     dir: flag(p, "dir") ?? process.cwd(),
     files: p.flags.get("file") ?? [],
@@ -1656,12 +1662,12 @@ function runOptions(p, task) {
   };
 }
 function planStep(p) {
-  const file = flag(p, "plan");
+  const file2 = flag(p, "plan");
   const step = flag(p, "step");
-  if (!file && !step) return void 0;
-  if (!file || !step) throw new UserError("--plan and --step go together: pitroom run -i --plan PLAN.md --step N");
+  if (!file2 && !step) return void 0;
+  if (!file2 || !step) throw new UserError("--plan and --step go together: pitroom run -i --plan PLAN.md --step N");
   if (!/^\d+$/.test(step)) throw new UserError(`--step takes a task number, not "${step}"`);
-  return { file, step: Number(step) };
+  return { file: file2, step: Number(step) };
 }
 function effortFlag(p) {
   const v = flag(p, "effort");
@@ -1671,8 +1677,8 @@ function effortFlag(p) {
 
 // src/cli/commands.ts
 import { spawnSync as spawnSync7 } from "node:child_process";
-import fs27 from "node:fs";
-import path23 from "node:path";
+import fs29 from "node:fs";
+import path25 from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/core/init.ts
@@ -1725,7 +1731,7 @@ var FREE = /-free$/;
 var TIER_ORDER = [["cheap", "opencode"], ["standard", "codex"], ["capable", "claude"]];
 var isFound = (binary5) => path8.isAbsolute(binary5) && fs9.existsSync(binary5);
 function planInit(opts = {}) {
-  const file = configPath();
+  const file2 = configPath();
   const workers = backendIds().map((id) => {
     const b = getBackend(id);
     const binary5 = b.binary();
@@ -1769,7 +1775,7 @@ function planInit(opts = {}) {
   if (Object.keys(tiers).length > 1) config.tiers = tiers;
   if (!workers.some((w) => w.found)) blocked = "no worker CLI found: install OpenCode (https://opencode.ai), Codex CLI, Claude Code or Gemini CLI first";
   else if (!blocked && !Object.keys(config).length) notes.push("nothing to propose: the default model and the single worker need no config");
-  return { path: file, exists: fs9.existsSync(file), workers, opencode: opencode2, config, blocked, notes };
+  return { path: file2, exists: fs9.existsSync(file2), workers, opencode: opencode2, config, blocked, notes };
 }
 function writeInit(plan, force) {
   if (plan.blocked) throw new UserError(plan.blocked);
@@ -2139,8 +2145,8 @@ var ANSWER_MAX2 = 2e5;
 var cached2;
 var historyFile = () => path10.join(home(), "history.db");
 function openDb() {
-  const file = historyFile();
-  if (cached2?.file === file) return cached2.db;
+  const file2 = historyFile();
+  if (cached2?.file === file2) return cached2.db;
   let db;
   try {
     const emit = process.emitWarning;
@@ -2151,14 +2157,14 @@ function openDb() {
     } finally {
       process.emitWarning = emit;
     }
-    fs12.mkdirSync(path10.dirname(file), { recursive: true });
-    db = new DatabaseSync(file);
+    fs12.mkdirSync(path10.dirname(file2), { recursive: true });
+    db = new DatabaseSync(file2);
     db.exec("PRAGMA journal_mode=WAL; PRAGMA busy_timeout=5000; PRAGMA synchronous=NORMAL;");
     migrate(db);
   } catch {
     db = void 0;
   }
-  cached2 = { file, db };
+  cached2 = { file: file2, db };
   return db;
 }
 function migrate(db) {
@@ -2490,7 +2496,7 @@ function structure(lines) {
   });
   return { headings, rules, fenced };
 }
-function parsePlan(text, file = "") {
+function parsePlan(text, file2 = "") {
   const lines = text.replace(/\r\n?/g, "\n").split("\n");
   const { headings, rules, fenced } = structure(lines);
   const after = (line) => Math.min(headings.find((h) => h.line > line)?.line ?? lines.length, rules.find((r) => r > line) ?? lines.length);
@@ -2509,13 +2515,13 @@ function parsePlan(text, file = "") {
     const tier = /^\s*[-*]?\s*\*\*Worker:\*\*\s*`?([\w-]+)`?/m.exec(unfenced)?.[1]?.toLowerCase();
     tasks.push({ step: Number(m[1]), title: m[2].trim(), text: body, ...tier ? { tier } : {} });
   }
-  return { file, title: titleHeading?.text ?? "", header, constraints, tasks };
+  return { file: file2, title: titleHeading?.text ?? "", header, constraints, tasks };
 }
-function loadPlan(file) {
-  const abs = path11.resolve(file);
-  if (!fs13.existsSync(abs) || !fs13.statSync(abs).isFile()) throw new UserError(`plan not found: ${file}`);
+function loadPlan(file2) {
+  const abs = path11.resolve(file2);
+  if (!fs13.existsSync(abs) || !fs13.statSync(abs).isFile()) throw new UserError(`plan not found: ${file2}`);
   const plan = parsePlan(fs13.readFileSync(abs, "utf8"), fs13.realpathSync(abs));
-  if (!plan.tasks.length) throw new UserError(`${file} has no "Task N" headings (see pitroom-writing-plans)`);
+  if (!plan.tasks.length) throw new UserError(`${file2} has no "Task N" headings (see pitroom-writing-plans)`);
   return plan;
 }
 function planTask(plan, step) {
@@ -2533,7 +2539,7 @@ function brief(plan, task) {
   ].filter(Boolean).join("\n\n")}
 `;
 }
-var planName = (file) => path11.basename(file).replace(/\.md$/i, "");
+var planName = (file2) => path11.basename(file2).replace(/\.md$/i, "");
 
 // src/core/report.ts
 var ICON2 = {
@@ -2568,7 +2574,7 @@ function formatReport(meta, finalText = readSummary(meta), maxLines = 400) {
     const status = meta.taskStatus ? ` \xB7 STATUS ${meta.taskStatus}` : "";
     out.push(`plan: ${planName(meta.plan.file)} \xB7 Task ${meta.plan.step}: ${meta.plan.title}${status}`);
   }
-  for (const a of meta.attempts ?? []) out.push(`fallback: ${a.target} failed (${a.error.slice(0, 160)})`);
+  for (const a of meta.attempts ?? []) out.push(a.skipped ? `skipped: ${a.target} (${a.error.slice(0, 160)})` : `fallback: ${a.target} failed (${a.error.slice(0, 160)})`);
   if (meta.error) out.push(`error: ${meta.error}`);
   for (const w of meta.warnings) out.push(`warning: ${w}`);
   if (meta.state === "timeout") {
@@ -2789,10 +2795,10 @@ echo "pitroom: needs Node.js 22.13 or newer (set PITROOM_NODE to its path)" >&2
 exit 127
 `;
 }
-function isOurLauncher(file, root) {
-  if (linksInto(file, root)) return true;
+function isOurLauncher(file2, root) {
+  if (linksInto(file2, root)) return true;
   try {
-    const s = fs15.readFileSync(file, "utf8");
+    const s = fs15.readFileSync(file2, "utf8");
     return s.includes(LAUNCHER_MARK) && s.includes(root);
   } catch {
     return false;
@@ -2967,10 +2973,10 @@ ${rulings}`,
   ].join("\n");
 }
 
-// src/core/review.ts
+// src/core/snapshot.ts
+import fs19 from "node:fs";
+import path16 from "node:path";
 import crypto5 from "node:crypto";
-import fs18 from "node:fs";
-import path15 from "node:path";
 
 // src/vcs/git.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
@@ -3011,14 +3017,18 @@ function repoRoot(dir) {
   const r = git(dir, ["rev-parse", "--show-toplevel"]);
   return r.code === 0 ? path14.resolve(r.stdout.trim()) : void 0;
 }
-function snapshotTree(root, exclude = []) {
+function snapshotTree(root, exclude = [], drop = []) {
   const tmp = path14.join(os9.tmpdir(), `pitroom-index-${process.pid}-${crypto4.randomBytes(4).toString("hex")}`);
   const real = path14.resolve(root, must(root, ["rev-parse", "--git-path", "index"]).trim());
   const env = { ...process.env, GIT_INDEX_FILE: tmp };
   try {
     if (fs17.existsSync(real)) fs17.copyFileSync(real, tmp);
     else must(root, ["read-tree", "--empty"], env);
-    must(root, ["add", "-A", "--", ":/", ...exclude.map((p) => `:(top,exclude)${p}`)], env);
+    must(root, ["add", "-A", "--", ":/", ...exclude.map((p) => `:(top,exclude)${p}`), ...drop.map((p) => `:(top,literal,exclude)${p}`)], env);
+    if (drop.length) {
+      const r = spawnSync5("git", ["update-index", "--force-remove", "-z", "--stdin"], { cwd: root, env, input: `${drop.join("\0")}\0`, encoding: "utf8" });
+      if (r.status !== 0) throw new Error(`git update-index failed: ${r.stderr.trim()}`);
+    }
     return must(root, ["write-tree"], env).trim();
   } finally {
     fs17.rmSync(tmp, { force: true });
@@ -3103,8 +3113,255 @@ function gitDir(dir) {
   return r.code === 0 ? r.stdout.trim() : void 0;
 }
 
+// src/core/secrets.ts
+import { execFileSync } from "node:child_process";
+import fs18 from "node:fs";
+import path15 from "node:path";
+var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", "out", ".next", "target", "vendor", ".venv", "venv", "__pycache__", "coverage", ".turbo", ".cache"]);
+var MAX_VISITED = 2e4;
+var MAX_DEPTH = 4;
+var TEMPLATE = /\.(example|sample|template|dist|defaults?|tpl)$/i;
+function looksSecret(name) {
+  if (TEMPLATE.test(name)) return false;
+  if (name === ".env" || name.startsWith(".env.") || /\.env$/i.test(name)) return true;
+  return /\.(pem|p12|pfx|key|jks|keystore)$/i.test(name) || /^id_(rsa|dsa|ecdsa|ed25519)$/.test(name) || name === ".netrc" || name === "credentials.json" || /^secrets?\.(json|ya?ml|toml)$/i.test(name);
+}
+function findSecretFiles(dir) {
+  const found = [];
+  let visited = 0;
+  const walk = (d, depth) => {
+    if (depth > MAX_DEPTH || visited > MAX_VISITED) return;
+    let entries;
+    try {
+      entries = fs18.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      visited++;
+      if (e.isDirectory()) {
+        if (!SKIP_DIRS.has(e.name)) walk(path15.join(d, e.name), depth + 1);
+      } else if (e.isFile() && looksSecret(e.name)) {
+        found.push(path15.relative(dir, path15.join(d, e.name)));
+      }
+    }
+  };
+  walk(dir, 0);
+  return found.sort();
+}
+function findSecretFilesInTree(root, dir) {
+  try {
+    const out = execFileSync("git", ["-C", root, "ls-files", "-z", "--cached", "--others", "--exclude-standard"], { encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
+    return out.split("\0").filter((f) => f && looksSecret(path15.basename(f)) && !path15.relative(dir, path15.join(root, f)).startsWith("..")).map((f) => path15.relative(dir, path15.join(root, f))).sort();
+  } catch {
+    return [];
+  }
+}
+function secretWarning(files, mode) {
+  if (!files.length) return void 0;
+  const shown = files.slice(0, 3).join(", ") + (files.length > 3 ? `, +${files.length - 3} more` : "");
+  const where = mode === "isolate" ? "would be copied into the isolated copy" : "sit in the directory the worker runs in";
+  const fix = mode === "isolate" ? "add them to .gitignore, or" : "use an isolated copy (-i, git-ignored files are left out) or a clean checkout, or";
+  return `secret-looking files ${where} (${shown}): the worker is told not to read them, but nothing stops it, and its model may be hosted by a third party; ${fix} set PITROOM_NO_SECRET_WARNING=1 to silence this`;
+}
+
+// src/core/snapshot.ts
+var READ_IN = ["auto", "snapshot", "project"];
+var KEEP_MS = 24 * 36e5;
+var PRUNE_AGE_MS = 3 * 24 * 36e5;
+var KEEP_NEWEST = 6;
+var JUST_USED_MS = 10 * 6e4;
+var snapshotsDir = () => path16.join(home(), "snapshots");
+function wantSnapshot(readIn2, root, dir) {
+  if (!root || readIn2 === "project") return void 0;
+  const secrets = findSecretFiles(dir);
+  return readIn2 === "snapshot" || secrets.length ? { secrets } : void 0;
+}
+function readSnapshot(root) {
+  const drop = findSecretFilesInTree(root, root);
+  const tree = snapshotTree(root, [], drop);
+  const dest = path16.join(snapshotsDir(), tree);
+  if (fs19.existsSync(path16.join(dest, ".git"))) {
+    touch(dest);
+    return { dir: dest, tree, created: false };
+  }
+  const tmp = path16.join(snapshotsDir(), `.tmp-${process.pid}-${crypto5.randomBytes(3).toString("hex")}`);
+  try {
+    createIsolatedCopy(root, tree, tmp);
+    readOnly(tmp);
+    try {
+      fs19.renameSync(tmp, dest);
+    } catch (e) {
+      if (!fs19.existsSync(path16.join(dest, ".git"))) throw e;
+      removeIsolatedCopy(tmp, snapshotsDir());
+    }
+  } catch (e) {
+    try {
+      removeIsolatedCopy(tmp, snapshotsDir());
+    } catch {
+    }
+    throw e;
+  }
+  prune();
+  return { dir: dest, tree, created: true };
+}
+function touch(dir) {
+  try {
+    const now = /* @__PURE__ */ new Date();
+    fs19.utimesSync(dir, now, now);
+  } catch {
+  }
+}
+function readOnly(dir) {
+  const walk = (d) => {
+    for (const e of fs19.readdirSync(d, { withFileTypes: true })) {
+      if (e.name === ".git") continue;
+      const p = path16.join(d, e.name);
+      if (e.isDirectory()) walk(p);
+      else if (e.isFile()) fs19.chmodSync(p, fs19.statSync(p).mode & ~146);
+    }
+  };
+  try {
+    walk(dir);
+  } catch {
+  }
+}
+function prune(now = Date.now(), maxAgeMs = PRUNE_AGE_MS, keepNewest = KEEP_NEWEST) {
+  let names;
+  try {
+    names = fs19.readdirSync(snapshotsDir());
+  } catch {
+    return 0;
+  }
+  const inUse = /* @__PURE__ */ new Set();
+  for (const id of listRunIds()) {
+    try {
+      const m = readMeta(id);
+      if (m.snapshot?.dir && isActive(m.state)) inUse.add(path16.resolve(m.snapshot.dir));
+    } catch {
+    }
+  }
+  const entries = names.map((n) => {
+    const dir = path16.join(snapshotsDir(), n);
+    try {
+      return { n, dir, age: now - fs19.statSync(dir).mtimeMs };
+    } catch {
+      return void 0;
+    }
+  }).filter((e) => !!e).sort((x, y) => x.age - y.age);
+  let removed = 0;
+  let rank = 0;
+  for (const e of entries) {
+    if (inUse.has(path16.resolve(e.dir))) continue;
+    const half = e.n.startsWith(".tmp-");
+    const old = e.age >= (half ? KEEP_MS : maxAgeMs);
+    const surplus = !half && ++rank > keepNewest && e.age >= JUST_USED_MS;
+    if (!old && !surplus) continue;
+    try {
+      makeWritable(e.dir);
+      removeIsolatedCopy(e.dir, snapshotsDir());
+      removed++;
+    } catch {
+    }
+  }
+  return removed;
+}
+function makeWritable(dir) {
+  const walk = (d) => {
+    for (const e of fs19.readdirSync(d, { withFileTypes: true })) {
+      const p = path16.join(d, e.name);
+      if (e.isDirectory()) walk(p);
+      else if (e.isFile()) fs19.chmodSync(p, fs19.statSync(p).mode | 128);
+    }
+  };
+  try {
+    walk(dir);
+  } catch {
+  }
+}
+function backToProject(text, snapshotDir, root) {
+  let real = snapshotDir;
+  try {
+    real = fs19.realpathSync(snapshotDir);
+  } catch {
+  }
+  let out = text;
+  for (const dir of /* @__PURE__ */ new Set([real, snapshotDir])) out = out.split(`${dir}${path16.sep}`).join(`${root}${path16.sep}`).split(dir).join(root);
+  return out;
+}
+
+// src/core/cooldown.ts
+import fs20 from "node:fs";
+import path17 from "node:path";
+var MAX_MS = 24 * 36e5;
+var OVERLOAD_MS = 20 * 6e4;
+var DAILY_MS = 4 * 36e5;
+var file = () => path17.join(home(), "cooldowns.json");
+function cooldownKey(target, backend) {
+  const model = (target.model ?? backend.defaultModel?.() ?? "").split("#")[0];
+  return `${target.backend}:${model}`;
+}
+function retryAfterMs(message) {
+  const compact3 = /(?:retry|try again|resets?|available again)[^0-9]{0,24}((?:\d+(?:\.\d+)?\s*[dhms]\s*)+)/i.exec(message)?.[1];
+  const words = /(?:retry|try again|resets?)[^0-9]{0,24}(\d+(?:\.\d+)?)\s*(second|minute|hour)s?/i.exec(message);
+  let ms = 0;
+  if (compact3) {
+    for (const [, n, unit] of compact3.matchAll(/(\d+(?:\.\d+)?)\s*([dhms])/gi)) ms += Number(n) * { d: 864e5, h: 36e5, m: 6e4, s: 1e3 }[unit.toLowerCase()];
+  } else if (words) {
+    ms = Number(words[1]) * { second: 1e3, minute: 6e4, hour: 36e5 }[words[2].toLowerCase()];
+  }
+  return ms > 0 ? ms : void 0;
+}
+function cooldownMs(message) {
+  const told = retryAfterMs(message);
+  if (told !== void 0) return Math.min(Math.max(told, 6e4), MAX_MS);
+  return /daily|per.?day|per day|exhausted your/i.test(message) ? DAILY_MS : OVERLOAD_MS;
+}
+function read() {
+  try {
+    const raw = JSON.parse(fs20.readFileSync(file(), "utf8"));
+    return raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  } catch {
+    return {};
+  }
+}
+function write(all) {
+  fs20.mkdirSync(path17.dirname(file()), { recursive: true });
+  const tmp = `${file()}.${process.pid}.tmp`;
+  fs20.writeFileSync(tmp, `${JSON.stringify(all, null, 2)}
+`);
+  fs20.renameSync(tmp, file());
+}
+function activeCooldowns(now = Date.now()) {
+  return Object.fromEntries(Object.entries(read()).filter(([, c]) => Date.parse(c.until) > now));
+}
+var activeCooldown = (key, now = Date.now()) => activeCooldowns(now)[key];
+function recordCooldown(key, targetName, message, now = Date.now()) {
+  try {
+    const all = activeCooldowns(now);
+    all[key] = { until: new Date(now + cooldownMs(message)).toISOString(), reason: message.replace(/\s+/g, " ").trim().slice(0, 160), target: targetName };
+    write(all);
+  } catch {
+  }
+}
+function clearCooldowns(key) {
+  const all = read();
+  const keys = key ? Object.keys(all).filter((k) => k === key) : Object.keys(all);
+  for (const k of keys) delete all[k];
+  if (keys.length) write(all);
+  return keys.length;
+}
+function untilText(c, now = Date.now()) {
+  const d = new Date(c.until);
+  const time = `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`;
+  return d.toDateString() === new Date(now).toDateString() ? `until ${time}` : `until ${d.toLocaleDateString()} ${time}`;
+}
+
 // src/core/review.ts
-var TEMPLATE = { task: "task-reviewer", fix: "re-review", range: "code-reviewer" };
+import crypto6 from "node:crypto";
+import fs21 from "node:fs";
+import path18 from "node:path";
+var TEMPLATE2 = { task: "task-reviewer", fix: "re-review", range: "code-reviewer" };
 var section = (title, body) => `## ${title}
 
 ${body.trim() || "(empty)"}
@@ -3121,7 +3378,7 @@ function ancestors(m) {
 function briefOf(m) {
   const root = [m, ...ancestors(m)].at(-1);
   const f = runFile(root.id, "brief.md");
-  return fs18.existsSync(f) ? fs18.readFileSync(f, "utf8") : root.task;
+  return fs21.existsSync(f) ? fs21.readFileSync(f, "utf8") : root.task;
 }
 function latestReview(ids) {
   for (const id of listRunIds().reverse()) {
@@ -3135,7 +3392,7 @@ function latestReview(ids) {
 }
 function diffOf(m, from = m.baseTree) {
   const where = m.mode === "isolate" ? m.worktree : m.repoRoot;
-  if (where && fs18.existsSync(where) && from && m.afterTree) return reviewDiff(where, from, m.afterTree);
+  if (where && fs21.existsSync(where) && from && m.afterTree) return reviewDiff(where, from, m.afterTree);
   if (from !== m.baseTree) {
     throw new UserError(`the isolated copy of ${m.id} is gone, so its fix round cannot be shown on its own; review a run that is not applied yet`, 3);
   }
@@ -3149,7 +3406,7 @@ function runReview(id) {
   if (!m.changes?.length) throw new UserError(`run ${m.id} made no changes; nothing to review`);
   const chain = ancestors(m);
   const previous = latestReview(chain.map((a) => a.id));
-  const dir = m.mode === "isolate" && m.worktree && fs18.existsSync(m.worktree) ? m.cwd : m.dir;
+  const dir = m.mode === "isolate" && m.worktree && fs21.existsSync(m.worktree) ? m.cwd : m.dir;
   const job = { of: m.id, dir, implementer: m.ran ?? m.worker, group: m.group, plan: m.plan };
   const title = m.plan ? `Task ${m.plan.step}: ${m.plan.title}` : `run ${m.id}`;
   if (!previous) {
@@ -3223,15 +3480,15 @@ function pickReviewer(job) {
 function writePackage(job) {
   const g = gitDir(job.dir);
   if (!g) throw new UserError(`not a git repository: ${job.dir}`);
-  const file = path15.join(g, "pitroom", `review-${crypto5.randomBytes(4).toString("hex")}.md`);
-  fs18.mkdirSync(path15.dirname(file), { recursive: true });
-  fs18.writeFileSync(file, job.package);
-  return file;
+  const file2 = path18.join(g, "pitroom", `review-${crypto6.randomBytes(4).toString("hex")}.md`);
+  fs21.mkdirSync(path18.dirname(file2), { recursive: true });
+  fs21.writeFileSync(file2, job.package);
+  return file2;
 }
 
 // src/core/templates.ts
-import fs19 from "node:fs";
-import path16 from "node:path";
+import fs22 from "node:fs";
+import path19 from "node:path";
 var FILES = {
   implementer: "pitroom-driven-development/implementer-prompt.md",
   "task-reviewer": "pitroom-driven-development/task-reviewer-prompt.md",
@@ -3239,9 +3496,9 @@ var FILES = {
   "code-reviewer": "pitroom-review/code-reviewer.md"
 };
 function loadTemplate(name, root = packageRoot()) {
-  const file = path16.join(root, "skills", FILES[name]);
-  if (!fs19.existsSync(file)) throw new UserError(`template missing: ${file} (broken install? run pitroom doctor)`, 3);
-  return fs19.readFileSync(file, "utf8").replace(/^\s*<!--[\s\S]*?-->\s*/, "");
+  const file2 = path19.join(root, "skills", FILES[name]);
+  if (!fs22.existsSync(file2)) throw new UserError(`template missing: ${file2} (broken install? run pitroom doctor)`, 3);
+  return fs22.readFileSync(file2, "utf8").replace(/^\s*<!--[\s\S]*?-->\s*/, "");
 }
 function fill(template, values) {
   const missing = [...template.matchAll(/\{\{([A-Z_]+)\}\}/g)].map((m) => m[1]).filter((k) => !(k in values));
@@ -3347,16 +3604,16 @@ function formatModels(t) {
 
 // src/core/dash.ts
 import { spawn } from "node:child_process";
-import crypto6 from "node:crypto";
-import fs20 from "node:fs";
+import crypto7 from "node:crypto";
+import fs23 from "node:fs";
 import http from "node:http";
-import path17 from "node:path";
+import path20 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/core/file-diff.ts
 var PREVIEW_LINES = 300;
 function gitPath(value, prefix = true) {
-  let path25 = value;
+  let path27 = value;
   if (value.startsWith('"') && value.endsWith('"')) {
     const bytes = [];
     const escapes = { t: "	", n: "\n", r: "\r", b: "\b", f: "\f", v: "\v" };
@@ -3364,9 +3621,9 @@ function gitPath(value, prefix = true) {
       if (match[1] && /^[0-7]+$/.test(match[1])) bytes.push(parseInt(match[1], 8));
       else bytes.push(...new TextEncoder().encode(match[2] ?? escapes[match[1]] ?? match[1]));
     }
-    path25 = new TextDecoder().decode(new Uint8Array(bytes));
+    path27 = new TextDecoder().decode(new Uint8Array(bytes));
   }
-  return prefix ? path25.replace(/^[ab]\//, "") : path25;
+  return prefix ? path27.replace(/^[ab]\//, "") : path27;
 }
 function headerPath(header) {
   const quoted = header.match(/^diff --git ("(?:[^"\\]|\\.)*"|\S+) ("(?:[^"\\]|\\.)*"|\S+)$/);
@@ -3375,7 +3632,7 @@ function headerPath(header) {
 }
 function fileDiffs(patch, changes, sourceTruncated = false) {
   const files = [];
-  let file;
+  let file2;
   let oldLine = 0;
   let newLine = 0;
   let oldLeft = 0;
@@ -3383,25 +3640,25 @@ function fileDiffs(patch, changes, sourceTruncated = false) {
   let inHunk = false;
   let row = 0;
   const finishHunk = () => {
-    if (file && (oldLeft > 0 || newLeft > 0)) file.incomplete = true;
+    if (file2 && (oldLeft > 0 || newLeft > 0)) file2.incomplete = true;
     oldLeft = newLeft = 0;
     inHunk = false;
   };
   const add = (line) => {
-    if (!file) return;
-    if (file.lines.length < PREVIEW_LINES) file.lines.push({ ...line, id: String(row) });
-    else file.omittedLines++;
+    if (!file2) return;
+    if (file2.lines.length < PREVIEW_LINES) file2.lines.push({ ...line, id: String(row) });
+    else file2.omittedLines++;
     row++;
   };
   for (const line of patch.split("\n")) {
     if (line.startsWith("diff --git ")) {
       finishHunk();
-      file = { path: headerPath(line), status: "M", lines: [], additions: 0, deletions: 0, omittedLines: 0, binary: false, incomplete: false };
-      files.push(file);
+      file2 = { path: headerPath(line), status: "M", lines: [], additions: 0, deletions: 0, omittedLines: 0, binary: false, incomplete: false };
+      files.push(file2);
       row = 0;
       continue;
     }
-    if (!file) continue;
+    if (!file2) continue;
     const hunk = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/.exec(line);
     if (hunk) {
       finishHunk();
@@ -3415,11 +3672,11 @@ function fileDiffs(patch, changes, sourceTruncated = false) {
       add({ type: "meta", content: line });
     } else if (inHunk && (oldLeft > 0 || newLeft > 0)) {
       if (line.startsWith("+") && newLeft > 0) {
-        file.additions++;
+        file2.additions++;
         newLeft--;
         add({ type: "added", newLine: newLine++, content: line.slice(1) });
       } else if (line.startsWith("-") && oldLeft > 0) {
-        file.deletions++;
+        file2.deletions++;
         oldLeft--;
         add({ type: "removed", oldLine: oldLine++, content: line.slice(1) });
       } else if (line.startsWith(" ") && oldLeft > 0 && newLeft > 0) {
@@ -3427,25 +3684,25 @@ function fileDiffs(patch, changes, sourceTruncated = false) {
         newLeft--;
         add({ type: "context", oldLine: oldLine++, newLine: newLine++, content: line.slice(1) });
       } else {
-        file.incomplete = true;
+        file2.incomplete = true;
       }
     } else if (!inHunk) {
-      if (line.startsWith("+++ ") && line !== "+++ /dev/null") file.path = gitPath(line.slice(4).replace(/\t$/, ""));
-      else if (line.startsWith("--- ") && line !== "--- /dev/null") file.path = gitPath(line.slice(4).replace(/\t$/, ""));
-      else if (/^(GIT binary patch|Binary files .* differ)$/.test(line)) file.binary = true;
+      if (line.startsWith("+++ ") && line !== "+++ /dev/null") file2.path = gitPath(line.slice(4).replace(/\t$/, ""));
+      else if (line.startsWith("--- ") && line !== "--- /dev/null") file2.path = gitPath(line.slice(4).replace(/\t$/, ""));
+      else if (/^(GIT binary patch|Binary files .* differ)$/.test(line)) file2.binary = true;
       else if (/^(new file mode|deleted file mode|old mode|new mode|rename from|rename to|similarity index) /.test(line)) {
-        if (line.startsWith("new file mode ")) file.status = "A";
-        if (line.startsWith("deleted file mode ")) file.status = "D";
+        if (line.startsWith("new file mode ")) file2.status = "A";
+        if (line.startsWith("deleted file mode ")) file2.status = "D";
         if (line.startsWith("rename to ")) {
-          file.path = gitPath(line.slice(10), false);
-          file.status = "R";
+          file2.path = gitPath(line.slice(10), false);
+          file2.status = "R";
         }
         add({ type: "meta", content: line });
       }
     }
   }
   finishHunk();
-  if (sourceTruncated && file) file.incomplete = true;
+  if (sourceTruncated && file2) file2.incomplete = true;
   for (const f of files) {
     if (f.incomplete || f.binary) f.additions = f.deletions = void 0;
   }
@@ -3607,32 +3864,32 @@ var HEADERS = {
   "x-content-type-options": "nosniff",
   "referrer-policy": "no-referrer",
   // Own files only, plus the hash of the one inline theme script; styles may be inline (the components position popups with them).
-  "content-security-policy": `default-src 'none'; script-src 'self' 'sha256-${crypto6.createHash("sha256").update(THEME_SCRIPT).digest("base64")}'; style-src 'self' 'unsafe-inline'; img-src data:; connect-src 'self'; base-uri 'none'; form-action 'none'`
+  "content-security-policy": `default-src 'none'; script-src 'self' 'sha256-${crypto7.createHash("sha256").update(THEME_SCRIPT).digest("base64")}'; style-src 'self' 'unsafe-inline'; img-src data:; connect-src 'self'; base-uri 'none'; form-action 'none'`
 };
 var ASSETS = { "/assets/app.js": "text/javascript; charset=utf-8", "/assets/app.css": "text/css; charset=utf-8" };
 var assetsDir = () => fileURLToPath3(new URL("./ui/", import.meta.url));
 var assetCache = /* @__PURE__ */ new Map();
 function readAsset(route) {
   try {
-    const file = path17.join(assetsDir(), path17.basename(route));
-    const { mtimeMs } = fs20.statSync(file);
+    const file2 = path20.join(assetsDir(), path20.basename(route));
+    const { mtimeMs } = fs23.statSync(file2);
     const hit = assetCache.get(route);
     if (hit && hit.mtimeMs === mtimeMs) return hit.data;
-    const data = fs20.readFileSync(file);
+    const data = fs23.readFileSync(file2);
     assetCache.set(route, { mtimeMs, data });
     return data;
   } catch {
     return void 0;
   }
 }
-function handler(touch) {
+function handler(touch2) {
   const send = (res, code, type, body) => {
     res.writeHead(code, { ...HEADERS, "content-type": type });
     res.end(body);
   };
   const json = (res, code, value) => send(res, code, "application/json; charset=utf-8", JSON.stringify(value));
   return (req, res) => {
-    touch();
+    touch2();
     if (!LOCAL_HOST.test(req.headers.host ?? "")) return json(res, 403, { error: "forbidden host" });
     if (req.method !== "GET" && req.method !== "HEAD") return json(res, 405, { error: "read-only" });
     const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -3698,7 +3955,7 @@ function startDash(opts) {
     });
   });
 }
-var registryFile = () => path17.join(home(), "dash.json");
+var registryFile = () => path20.join(home(), "dash.json");
 async function ping(port) {
   try {
     const r = await fetch(`http://127.0.0.1:${port}/api/state?limit=1`, { signal: AbortSignal.timeout(1500) });
@@ -3709,11 +3966,11 @@ async function ping(port) {
 }
 async function runningDash() {
   try {
-    const r = JSON.parse(fs20.readFileSync(registryFile(), "utf8"));
+    const r = JSON.parse(fs23.readFileSync(registryFile(), "utf8"));
     if (isAlive(r.pid) && await ping(r.port)) return { ...r, url: `http://127.0.0.1:${r.port}/` };
   } catch {
   }
-  fs20.rmSync(registryFile(), { force: true });
+  fs23.rmSync(registryFile(), { force: true });
   return void 0;
 }
 function openBrowser(url) {
@@ -3728,7 +3985,7 @@ async function dashCommand(o) {
   if (o.stop) {
     if (!existing) throw new UserError("pitroom dash is not running");
     process.kill(existing.pid, "SIGTERM");
-    fs20.rmSync(registryFile(), { force: true });
+    fs23.rmSync(registryFile(), { force: true });
     o.log(`stopped pitroom dash (${existing.url})`);
     return 0;
   }
@@ -3765,8 +4022,8 @@ async function dashCommand(o) {
     if (explicit || e.code !== "EADDRINUSE") throw new UserError(`pitroom dash: ${e.message}`);
     dash = await startDash({ port: 0, idleMs: o.idleMs });
   }
-  fs20.mkdirSync(home(), { recursive: true });
-  fs20.writeFileSync(registryFile(), JSON.stringify({ pid: process.pid, port: dash.port }));
+  fs23.mkdirSync(home(), { recursive: true });
+  fs23.writeFileSync(registryFile(), JSON.stringify({ pid: process.pid, port: dash.port }));
   const stop = () => void dash.close();
   process.once("SIGINT", stop);
   process.once("SIGTERM", stop);
@@ -3775,7 +4032,7 @@ async function dashCommand(o) {
   if (o.open) openBrowser(dash.url);
   await dash.closed;
   try {
-    if (JSON.parse(fs20.readFileSync(registryFile(), "utf8")).pid === process.pid) fs20.rmSync(registryFile(), { force: true });
+    if (JSON.parse(fs23.readFileSync(registryFile(), "utf8")).pid === process.pid) fs23.rmSync(registryFile(), { force: true });
   } catch {
   }
   return 0;
@@ -3783,8 +4040,8 @@ async function dashCommand(o) {
 
 // src/core/run.ts
 import { spawn as spawn3, spawnSync as spawnSync6 } from "node:child_process";
-import fs26 from "node:fs";
-import path22 from "node:path";
+import fs28 from "node:fs";
+import path24 from "node:path";
 
 // src/core/chain.ts
 function resolveChain(flags = {}) {
@@ -3834,11 +4091,11 @@ function resolveChain(flags = {}) {
 
 // src/core/process.ts
 import { spawn as spawn2 } from "node:child_process";
-import fs22 from "node:fs";
+import fs25 from "node:fs";
 
 // src/vcs/guard.ts
-import fs21 from "node:fs";
-import path18 from "node:path";
+import fs24 from "node:fs";
+import path21 from "node:path";
 var VERSION = 1;
 var SHIM = `#!/bin/sh
 # pitroom git guard v${VERSION}. Blocks git commands that change history, refs, the
@@ -3913,15 +4170,15 @@ esac
 exec "$real" "$@"
 `;
 function shimDir() {
-  return path18.join(home(), "shim", `v${VERSION}`);
+  return path21.join(home(), "shim", `v${VERSION}`);
 }
 function findRealGit(skip) {
-  for (const dir of (process.env.PATH ?? "").split(path18.delimiter).filter(Boolean)) {
-    if (path18.resolve(dir) === skip) continue;
-    const p = path18.join(dir, "git");
+  for (const dir of (process.env.PATH ?? "").split(path21.delimiter).filter(Boolean)) {
+    if (path21.resolve(dir) === skip) continue;
+    const p = path21.join(dir, "git");
     try {
-      fs21.accessSync(p, fs21.constants.X_OK);
-      if (fs21.statSync(p).isFile()) return p;
+      fs24.accessSync(p, fs24.constants.X_OK);
+      if (fs24.statSync(p).isFile()) return p;
     } catch {
     }
   }
@@ -3934,13 +4191,13 @@ var REF_HOOK = `#!/bin/sh
 echo "pitroom: git ref updates (commit, reset, branch, tag, stash, rebase, merge) are blocked for workers" >&2
 exit 1
 `;
-var hooksDir = () => path18.join(home(), "git-hooks", `v${HOOK_VERSION}`);
-function writeIfChanged(file, content) {
-  if (fs21.existsSync(file) && fs21.readFileSync(file, "utf8") === content) return;
-  fs21.mkdirSync(path18.dirname(file), { recursive: true });
-  const tmp = `${file}.${process.pid}.tmp`;
-  fs21.writeFileSync(tmp, content, { mode: 493 });
-  fs21.renameSync(tmp, file);
+var hooksDir = () => path21.join(home(), "git-hooks", `v${HOOK_VERSION}`);
+function writeIfChanged(file2, content) {
+  if (fs24.existsSync(file2) && fs24.readFileSync(file2, "utf8") === content) return;
+  fs24.mkdirSync(path21.dirname(file2), { recursive: true });
+  const tmp = `${file2}.${process.pid}.tmp`;
+  fs24.writeFileSync(tmp, content, { mode: 493 });
+  fs24.renameSync(tmp, file2);
 }
 function withGitConfig(env, entries) {
   const out = { ...env };
@@ -3962,7 +4219,7 @@ function guardEnv(env) {
     PAGER: "cat"
   };
   if (process.platform === "win32") return { ...env, ...quiet };
-  writeIfChanged(path18.join(hooksDir(), "reference-transaction"), REF_HOOK);
+  writeIfChanged(path21.join(hooksDir(), "reference-transaction"), REF_HOOK);
   env = withGitConfig(env, [
     ["core.hooksPath", hooksDir()],
     ["url.pitroom-push-blocked://.pushInsteadOf", ""]
@@ -3970,14 +4227,14 @@ function guardEnv(env) {
   const dir = shimDir();
   const real = findRealGit(dir);
   if (!real) return { ...env, ...quiet };
-  writeIfChanged(path18.join(dir, "git"), SHIM);
-  return { ...env, ...quiet, PITROOM_REAL_GIT: real, PATH: `${dir}${path18.delimiter}${env.PATH ?? ""}` };
+  writeIfChanged(path21.join(dir, "git"), SHIM);
+  return { ...env, ...quiet, PITROOM_REAL_GIT: real, PATH: `${dir}${path21.delimiter}${env.PATH ?? ""}` };
 }
 
 // src/core/process.ts
 async function spawnWorker(inv, opts) {
-  const out = fs22.openSync(opts.stdoutFile, "w");
-  const err = fs22.openSync(opts.stderrFile, "w");
+  const out = fs25.openSync(opts.stdoutFile, "w");
+  const err = fs25.openSync(opts.stderrFile, "w");
   const res = { code: null, timedOut: false, stopped: false };
   const child = spawn2(inv.command, inv.args, {
     cwd: opts.cwd,
@@ -4009,8 +4266,8 @@ async function spawnWorker(inv, opts) {
   if (killer) clearTimeout(killer);
   process.off("SIGINT", stop);
   process.off("SIGTERM", stop);
-  fs22.closeSync(out);
-  fs22.closeSync(err);
+  fs25.closeSync(out);
+  fs25.closeSync(err);
   return res;
 }
 
@@ -4042,11 +4299,11 @@ function parseAudit(text) {
 }
 
 // src/core/slots.ts
-import crypto7 from "node:crypto";
-import fs23 from "node:fs";
-import path19 from "node:path";
-var slotsDir = () => path19.join(home(), "slots");
-var locksDir = () => path19.join(home(), "locks");
+import crypto8 from "node:crypto";
+import fs26 from "node:fs";
+import path22 from "node:path";
+var slotsDir = () => path22.join(home(), "slots");
+var locksDir = () => path22.join(home(), "locks");
 var STARTUP_GRACE_MS = 3e4;
 function holderActive(runId, self) {
   if (!runId || runId === self) return false;
@@ -4059,51 +4316,51 @@ function holderActive(runId, self) {
     return false;
   }
 }
-function tryClaim(file, runId) {
-  fs23.mkdirSync(path19.dirname(file), { recursive: true });
+function tryClaim(file2, runId) {
+  fs26.mkdirSync(path22.dirname(file2), { recursive: true });
   try {
-    fs23.writeFileSync(file, runId, { flag: "wx" });
+    fs26.writeFileSync(file2, runId, { flag: "wx" });
     return true;
   } catch (e) {
     if (e.code !== "EEXIST") throw e;
   }
   let owner = "";
   try {
-    owner = fs23.readFileSync(file, "utf8").trim();
+    owner = fs26.readFileSync(file2, "utf8").trim();
   } catch {
   }
   if (owner === runId) return true;
   if (holderActive(owner, runId)) return false;
-  fs23.rmSync(file, { force: true });
+  fs26.rmSync(file2, { force: true });
   try {
-    fs23.writeFileSync(file, runId, { flag: "wx" });
+    fs26.writeFileSync(file2, runId, { flag: "wx" });
     return true;
   } catch {
     return false;
   }
 }
-function releaseIfOwner(file, runId) {
-  if (!file) return;
+function releaseIfOwner(file2, runId) {
+  if (!file2) return;
   try {
-    if (fs23.readFileSync(file, "utf8").trim() === runId) fs23.rmSync(file, { force: true });
+    if (fs26.readFileSync(file2, "utf8").trim() === runId) fs26.rmSync(file2, { force: true });
   } catch {
   }
 }
 function tryAcquireSlot(runId, maxParallel) {
   for (let n = 0; n < Math.max(1, maxParallel); n++) {
-    const file = path19.join(slotsDir(), `slot-${n}`);
-    if (tryClaim(file, runId)) return file;
+    const file2 = path22.join(slotsDir(), `slot-${n}`);
+    if (tryClaim(file2, runId)) return file2;
   }
   return void 0;
 }
-var releaseSlot = (file, runId) => releaseIfOwner(file, runId);
-var lockFile = (repoRoot2) => path19.join(locksDir(), `write-${crypto7.createHash("sha1").update(path19.resolve(repoRoot2)).digest("hex").slice(0, 16)}`);
+var releaseSlot = (file2, runId) => releaseIfOwner(file2, runId);
+var lockFile = (repoRoot2) => path22.join(locksDir(), `write-${crypto8.createHash("sha1").update(path22.resolve(repoRoot2)).digest("hex").slice(0, 16)}`);
 function acquireWriteLock(repoRoot2, runId) {
-  const file = lockFile(repoRoot2);
-  if (tryClaim(file, runId)) return;
+  const file2 = lockFile(repoRoot2);
+  if (tryClaim(file2, runId)) return;
   let owner = "";
   try {
-    owner = fs23.readFileSync(file, "utf8").trim();
+    owner = fs26.readFileSync(file2, "utf8").trim();
   } catch {
   }
   throw new UserError(`another --write run (${owner}) is active in this repo; use --isolate for parallel changes`, 3);
@@ -4150,12 +4407,12 @@ ${task}`;
 }
 
 // src/core/refs.ts
-import fs24 from "node:fs";
-import path20 from "node:path";
+import fs27 from "node:fs";
+import path23 from "node:path";
 var FILE_EXTENSIONS = new Set(
   "ts tsx mts cts js jsx mjs cjs json jsonc json5 md mdx txt rst py pyi rb go rs java kt kts swift c h cc cpp cxx hpp hh cs fs php lua r jl sh bash zsh fish ps1 bat yml yaml toml ini cfg conf env html htm css scss sass less vue svelte astro sql graphql gql proto lock xml svg csv tsv gradle tf hcl dart ex exs erl hs ml scala clj vim el mk cmake dockerfile gitignore gitattributes editorconfig npmrc nvmrc".split(" ")
 );
-var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", "out", ".next", ".nuxt", "target", "vendor", ".venv", "venv", "__pycache__", "coverage", ".turbo", ".cache"]);
+var SKIP_DIRS2 = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", "out", ".next", ".nuxt", "target", "vendor", ".venv", "venv", "__pycache__", "coverage", ".turbo", ".cache"]);
 var MAX_INDEXED = 6e4;
 var EXTENSIONLESS = "Makefile|Dockerfile|Containerfile|Gemfile|Rakefile|Procfile|Justfile|Vagrantfile|BUILD|WORKSPACE";
 var REF = new RegExp(
@@ -4202,29 +4459,29 @@ function extractRefs(answer) {
   return [...seen.values()];
 }
 function verifyRefs(refs, dirs) {
-  const roots = [...new Set(dirs.filter(Boolean).map((d) => path20.resolve(d)))];
+  const roots = [...new Set(dirs.filter(Boolean).map((d) => path23.resolve(d)))];
   const invalid = [];
   const lineCache = /* @__PURE__ */ new Map();
-  const load = (file) => {
-    if (!lineCache.has(file)) {
-      const size = fs24.statSync(file).size;
-      const lines = size > MAX_BYTES ? null : fs24.readFileSync(file, "utf8").split("\n");
+  const load = (file2) => {
+    if (!lineCache.has(file2)) {
+      const size = fs27.statSync(file2).size;
+      const lines = size > MAX_BYTES ? null : fs27.readFileSync(file2, "utf8").split("\n");
       if (lines && lines[lines.length - 1] === "") lines.pop();
-      lineCache.set(file, lines);
+      lineCache.set(file2, lines);
     }
-    return lineCache.get(file);
+    return lineCache.get(file2);
   };
   let index;
   const byName = () => index ??= indexFiles(roots);
   const candidates = (ref) => {
     const direct = resolve(ref.file, roots);
     if (direct) return [direct];
-    if (path20.isAbsolute(ref.file)) return [];
+    if (path23.isAbsolute(ref.file)) return [];
     const wanted = ref.file.replace(/^(\.{1,2}\/)+/, "");
-    return (byName().get(path20.basename(wanted)) ?? []).filter((f) => f.endsWith(`/${wanted}`) || path20.basename(f) === wanted).slice(0, 20);
+    return (byName().get(path23.basename(wanted)) ?? []).filter((f) => f.endsWith(`/${wanted}`) || path23.basename(f) === wanted).slice(0, 20);
   };
-  const check = (file, ref) => {
-    const lines = load(file);
+  const check = (file2, ref) => {
+    const lines = load(file2);
     if (!lines) return void 0;
     if (ref.end > lines.length) return `file has ${lines.length} lines`;
     if (ref.symbol && !mentions(lines, ref) && !enclosedBy(lines, ref)) return `\`${ref.symbol}\` not near line ${ref.start}`;
@@ -4236,7 +4493,7 @@ function verifyRefs(refs, dirs) {
     if (!files.length) {
       if (!ref.file.includes("/") && !isFileName(ref.file)) continue;
       total++;
-      invalid.push({ ref: ref.text, reason: path20.isAbsolute(ref.file) && !inside(ref.file, roots) ? "outside the project" : "file not found" });
+      invalid.push({ ref: ref.text, reason: path23.isAbsolute(ref.file) && !inside(ref.file, roots) ? "outside the project" : "file not found" });
       continue;
     }
     total++;
@@ -4257,7 +4514,7 @@ function enclosedBy(lines, ref) {
   return lines.slice(Math.max(0, ref.start - 1 - DEFINITION_LOOKBACK), ref.start).some((l) => def.test(l));
 }
 var isFileName = (name) => {
-  const base2 = path20.basename(name);
+  const base2 = path23.basename(name);
   return !base2.includes(".") || new RegExp(`^(${EXTENSIONLESS})$`).test(base2) || FILE_EXTENSIONS.has(base2.split(".").pop().toLowerCase());
 };
 function indexFiles(roots) {
@@ -4266,19 +4523,19 @@ function indexFiles(roots) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs24.readdirSync(dir, { withFileTypes: true });
+      entries = fs27.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
       if (count >= MAX_INDEXED) return;
       if (e.isDirectory()) {
-        if (!SKIP_DIRS.has(e.name)) walk(path20.join(dir, e.name));
+        if (!SKIP_DIRS2.has(e.name)) walk(path23.join(dir, e.name));
       } else if (e.isFile()) {
         count++;
         const list2 = index.get(e.name);
-        if (list2) list2.push(path20.join(dir, e.name));
-        else index.set(e.name, [path20.join(dir, e.name)]);
+        if (list2) list2.push(path23.join(dir, e.name));
+        else index.set(e.name, [path23.join(dir, e.name)]);
       }
     }
   };
@@ -4286,76 +4543,25 @@ function indexFiles(roots) {
   return index;
 }
 function resolve(ref, roots) {
-  const candidates = path20.isAbsolute(ref) ? inside(ref, roots) ? [ref] : [] : roots.map((r) => path20.join(r, ref));
+  const candidates = path23.isAbsolute(ref) ? inside(ref, roots) ? [ref] : [] : roots.map((r) => path23.join(r, ref));
   return candidates.find((c) => {
     try {
-      return fs24.statSync(c).isFile() && inside(c, roots);
+      return fs27.statSync(c).isFile() && inside(c, roots);
     } catch {
       return false;
     }
   });
 }
-function inside(file, roots) {
+function inside(file2, roots) {
   return roots.some((r) => {
-    const rel = path20.relative(r, path20.resolve(file));
-    return rel !== "" && !rel.startsWith("..") && !path20.isAbsolute(rel);
+    const rel = path23.relative(r, path23.resolve(file2));
+    return rel !== "" && !rel.startsWith("..") && !path23.isAbsolute(rel);
   });
 }
 var escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
-// src/core/secrets.ts
-import { execFileSync } from "node:child_process";
-import fs25 from "node:fs";
-import path21 from "node:path";
-var SKIP_DIRS2 = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", "out", ".next", "target", "vendor", ".venv", "venv", "__pycache__", "coverage", ".turbo", ".cache"]);
-var MAX_VISITED = 2e4;
-var MAX_DEPTH = 4;
-var TEMPLATE2 = /\.(example|sample|template|dist|defaults?|tpl)$/i;
-function looksSecret(name) {
-  if (name === ".env" || name.startsWith(".env.") && !TEMPLATE2.test(name)) return true;
-  return /\.(pem|p12|pfx)$/i.test(name) || /^id_(rsa|dsa|ecdsa|ed25519)$/.test(name) || name === ".netrc" || name === "credentials.json";
-}
-function findSecretFiles(dir) {
-  const found = [];
-  let visited = 0;
-  const walk = (d, depth) => {
-    if (depth > MAX_DEPTH || visited > MAX_VISITED) return;
-    let entries;
-    try {
-      entries = fs25.readdirSync(d, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    for (const e of entries) {
-      visited++;
-      if (e.isDirectory()) {
-        if (!SKIP_DIRS2.has(e.name)) walk(path21.join(d, e.name), depth + 1);
-      } else if (e.isFile() && looksSecret(e.name)) {
-        found.push(path21.relative(dir, path21.join(d, e.name)));
-      }
-    }
-  };
-  walk(dir, 0);
-  return found.sort();
-}
-function findSecretFilesInTree(root, dir) {
-  try {
-    const out = execFileSync("git", ["-C", root, "ls-files", "-z", "--cached", "--others", "--exclude-standard"], { encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
-    return out.split("\0").filter((f) => f && looksSecret(path21.basename(f)) && !path21.relative(dir, path21.join(root, f)).startsWith("..")).map((f) => path21.relative(dir, path21.join(root, f))).sort();
-  } catch {
-    return [];
-  }
-}
-function secretWarning(files, mode) {
-  if (!files.length) return void 0;
-  const shown = files.slice(0, 3).join(", ") + (files.length > 3 ? `, +${files.length - 3} more` : "");
-  const where = mode === "isolate" ? "would be copied into the isolated copy" : "sit in the directory the worker runs in";
-  const fix = mode === "isolate" ? "add them to .gitignore, or" : "use an isolated copy (-i, git-ignored files are left out) or a clean checkout, or";
-  return `secret-looking files ${where} (${shown}): the worker is told not to read them, but nothing stops it, and its model may be hosted by a third party; ${fix} set PITROOM_NO_SECRET_WARNING=1 to silence this`;
-}
-
 // src/core/run.ts
-var VERSION2 = true ? "0.11.0" : "0.0.0-dev";
+var VERSION2 = true ? "0.13.0" : "0.0.0-dev";
 function planWork(o) {
   if (!o.plan) return { task: o.task.trim(), tier: o.tier };
   if (o.continueFrom) throw new UserError("a follow-up continues its parent's task; drop --plan/--step");
@@ -4387,7 +4593,7 @@ function prepareRun(o) {
     parent = readMeta(o.continueFrom);
     if (o.worker || o.tier || o.effort) throw new UserError("a follow-up runs on the same worker as its parent; drop --worker/--tier/--effort");
     if (!parent.sessionId) throw new UserError(`run ${parent.id} has no worker session to continue`, 3);
-    if (parent.mode === "isolate" && (!parent.worktree || !fs26.existsSync(parent.worktree))) {
+    if (parent.mode === "isolate" && (!parent.worktree || !fs28.existsSync(parent.worktree))) {
       throw new UserError(`the isolated copy of run ${parent.id} is gone (applied or discarded)`, 3);
     }
     const ran = parent.ran ?? parent.worker;
@@ -4406,16 +4612,21 @@ function prepareRun(o) {
     throw new UserError(`the ${backend.name} worker cannot attach files; put the content in the task`);
   }
   const mode = parent?.mode ?? o.mode;
-  const dir = path22.resolve(parent?.dir ?? o.dir);
-  if (!fs26.existsSync(dir) || !fs26.statSync(dir).isDirectory()) throw new UserError(`not a directory: ${dir}`);
+  const dir = path24.resolve(parent?.dir ?? o.dir);
+  if (!fs28.existsSync(dir) || !fs28.statSync(dir).isDirectory()) throw new UserError(`not a directory: ${dir}`);
   const root = repoRoot(dir);
   if (mode === "isolate" && !root) throw new UserError("--isolate needs a git repository", 3);
   if (mode === "write" && !root && !o.allowNonGit) {
     throw new UserError("--write outside a git repo cannot be tracked or reverted; pass --allow-non-git to accept that", 3);
   }
-  const files = o.files.map((f) => path22.resolve(f));
-  for (const f of files) if (!fs26.existsSync(f)) throw new UserError(`file not found: ${f}`);
-  if (!parent && !process.env.PITROOM_NO_SECRET_WARNING) {
+  const files = o.files.map((f) => path24.resolve(f));
+  for (const f of files) if (!fs28.existsSync(f)) throw new UserError(`file not found: ${f}`);
+  const readIn2 = READ_IN.includes(effective().readIn.value) ? effective().readIn.value : "auto";
+  const snap = mode === "read" && !o.review && !o.inPlace && !parent ? wantSnapshot(readIn2, root, dir) : void 0;
+  if (parent?.snapshot?.dir && !fs28.existsSync(parent.snapshot.dir)) {
+    throw new UserError(`the read snapshot of run ${parent.id} is gone (cleaned up); ask the question again as a new run`, 3);
+  }
+  if (!parent && !snap && !process.env.PITROOM_NO_SECRET_WARNING) {
     const secrets = mode === "isolate" && root ? findSecretFilesInTree(root, dir) : findSecretFiles(dir);
     const note = secretWarning(secrets, mode);
     if (note) warnings.push(note);
@@ -4447,6 +4658,8 @@ function prepareRun(o) {
     reviewOf: o.review?.of,
     auditOf: o.audit?.of,
     auditRate: o.auditRate,
+    inPlace: o.inPlace || void 0,
+    snapshot: parent?.snapshot ?? (snap ? { dir: "", tree: "", left: snap.secrets } : void 0),
     plan: work.plan ?? o.review?.plan ?? parent?.plan,
     reviewKind: o.review?.kind,
     packageFile: o.review?.packageFile
@@ -4456,13 +4669,13 @@ function prepareRun(o) {
     try {
       acquireWriteLock(root, meta.id);
     } catch (e) {
-      fs26.rmSync(runDir(meta.id), { recursive: true, force: true });
+      fs28.rmSync(runDir(meta.id), { recursive: true, force: true });
       throw e;
     }
   }
-  fs26.writeFileSync(runFile(meta.id, "task.md"), `${meta.task}
+  fs28.writeFileSync(runFile(meta.id, "task.md"), `${meta.task}
 `);
-  if (work.brief) fs26.writeFileSync(runFile(meta.id, "brief.md"), work.brief);
+  if (work.brief) fs28.writeFileSync(runFile(meta.id, "brief.md"), work.brief);
   return meta;
 }
 var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -4519,12 +4732,19 @@ async function execute(meta) {
     for (let i = 0; i < chain.length; i++) {
       const target = chain[i];
       const backend = getBackend(target.backend);
+      const cooling = activeCooldown(cooldownKey(target, backend));
+      if (cooling && chain.slice(i + 1).some((t) => !activeCooldown(cooldownKey(t, getBackend(t.backend))))) {
+        (meta.attempts ??= []).push({ target: describeTarget(target), error: `cooling down ${untilText(cooling)}: ${cooling.reason}`, skipped: true });
+        writeMeta(meta);
+        continue;
+      }
       meta.ran = target;
       writeMeta(meta);
       result = await attempt(meta, backend, target);
       if (result.timedOut || result.stopped || result.spawnError) break;
       const why = retryableFailure(meta, backend, result);
       if (!why) break;
+      if (why.kind === "rate-limited") recordCooldown(cooldownKey(target, backend), describeTarget(target), why.message);
       if (!target.model && backend.defaultModel) {
         const failed = backend.defaultModel();
         for (let j = chain.length - 1; j > i; j--) {
@@ -4535,7 +4755,7 @@ async function execute(meta) {
       (meta.attempts ??= []).push({ target: describeTarget(target), error: why.message });
       for (const f of ["events.jsonl", "stderr.log"]) {
         const from = runFile(meta.id, f);
-        if (fs26.existsSync(from)) fs26.renameSync(from, runFile(meta.id, f.replace(".", `.attempt-${i + 1}.`)));
+        if (fs28.existsSync(from)) fs28.renameSync(from, runFile(meta.id, f.replace(".", `.attempt-${i + 1}.`)));
       }
       writeMeta(meta);
     }
@@ -4554,13 +4774,13 @@ async function execute(meta) {
 }
 function autoAudit(meta) {
   try {
-    if (!auditable(meta, read(runFile(meta.id, "summary.md"))) || !sampled(meta)) return;
+    if (!auditable(meta, read2(runFile(meta.id, "summary.md"))) || !sampled(meta)) return;
     startAudit(meta);
   } catch {
   }
 }
 function startAudit(meta, worker) {
-  const answer = read(runFile(meta.id, "summary.md"));
+  const answer = read2(runFile(meta.id, "summary.md"));
   const auditor = worker ?? pickAuditor(meta);
   if (!auditor) return void 0;
   const a = prepareRun({
@@ -4593,12 +4813,26 @@ function settleAudit(a) {
 }
 function prepareTree(meta) {
   const root = meta.repoRoot;
+  if (root && meta.mode === "read" && meta.snapshot && !meta.snapshot.dir) {
+    const shown = meta.snapshot.left.slice(0, 3).join(", ") + (meta.snapshot.left.length > 3 ? `, +${meta.snapshot.left.length - 3} more` : "");
+    try {
+      const s = readSnapshot(root);
+      meta.snapshot.dir = s.dir;
+      meta.snapshot.tree = s.tree;
+      meta.cwd = path24.join(s.dir, path24.relative(root, meta.dir));
+      if (!fs28.existsSync(meta.cwd)) meta.cwd = s.dir;
+      if (shown) meta.warnings.push(`read in a clean snapshot of your project: the secret-looking files (${shown}) and git-ignored files are not in it; --in-place reads the directory itself`);
+    } catch (e) {
+      meta.snapshot = void 0;
+      meta.warnings.push(`could not make a clean snapshot (${e.message.slice(0, 120)}): the worker reads the directory itself${shown ? `, where secret-looking files sit (${shown})` : ""}`);
+    }
+  }
   if (root && meta.mode === "write") meta.baseTree = snapshotTree(root);
   if (root && meta.mode === "isolate" && !meta.worktree) {
     meta.baseTree = snapshotTree(root);
-    meta.worktree = path22.join(worktreesDir(), meta.id);
+    meta.worktree = path24.join(worktreesDir(), meta.id);
     createIsolatedCopy(root, meta.baseTree, meta.worktree);
-    meta.cwd = path22.join(meta.worktree, path22.relative(root, meta.dir));
+    meta.cwd = path24.join(meta.worktree, path24.relative(root, meta.dir));
     const linked = linkIntoWorktree(root, meta.worktree, meta.link);
     if (linked.length) meta.warnings.push(`linked into the isolated copy (shared with your tree): ${linked.join(", ")}`);
   }
@@ -4621,11 +4855,11 @@ function attempt(meta, backend, target) {
     timeoutSec: meta.timeoutSec
   });
 }
-var read = (f) => fs26.existsSync(f) ? fs26.readFileSync(f, "utf8") : "";
+var read2 = (f) => fs28.existsSync(f) ? fs28.readFileSync(f, "utf8") : "";
 function retryableFailure(meta, backend, res) {
-  const run = backend.parse(read(runFile(meta.id, "events.jsonl")));
+  const run = backend.parse(read2(runFile(meta.id, "events.jsonl")));
   if (run.usage.steps > 0) return void 0;
-  const f = backend.failure(run, read(runFile(meta.id, "stderr.log")), res.code);
+  const f = backend.failure(run, read2(runFile(meta.id, "stderr.log")), res.code);
   return f && f.kind !== "other" ? f : void 0;
 }
 var HINTS = {
@@ -4637,18 +4871,19 @@ var HINTS = {
 function finalize(meta, res) {
   const ran = meta.ran ?? meta.worker;
   const backend = getBackend(ran.backend);
-  const run = backend.parse(read(runFile(meta.id, "events.jsonl")));
+  const run = backend.parse(read2(runFile(meta.id, "events.jsonl")));
+  if (meta.snapshot?.dir && meta.repoRoot) run.finalText = backToProject(run.finalText, meta.snapshot.dir, meta.repoRoot);
   meta.sessionId = run.sessionId ?? meta.sessionId;
   meta.usage = run.usage;
-  fs26.writeFileSync(runFile(meta.id, "summary.md"), `${run.finalText}
+  fs28.writeFileSync(runFile(meta.id, "summary.md"), `${run.finalText}
 `);
   if (meta.plan && !meta.reviewOf) meta.taskStatus = parseStatus(run.finalText);
   if (meta.reviewOf) {
     meta.verdict = parseVerdict(run.finalText);
-    if (meta.packageFile) fs26.rmSync(meta.packageFile, { force: true });
+    if (meta.packageFile) fs28.rmSync(meta.packageFile, { force: true });
   }
   if (!res.timedOut && !res.stopped && !meta.error) {
-    const f = backend.failure(run, read(runFile(meta.id, "stderr.log")), res.code);
+    const f = backend.failure(run, read2(runFile(meta.id, "stderr.log")), res.code);
     if (f) meta.error = HINTS[f.kind] ? `${f.message} (${HINTS[f.kind]})` : f.message;
   }
   try {
@@ -4693,7 +4928,7 @@ function captureChanges(meta) {
   const d = diffTrees(target, meta.baseTree, meta.afterTree);
   meta.changes = d.changes;
   meta.stats = d.stats;
-  fs26.writeFileSync(runFile(meta.id, "changes.patch"), d.patch);
+  fs28.writeFileSync(runFile(meta.id, "changes.patch"), d.patch);
 }
 function runVerify(meta) {
   const r = spawnSync6(meta.verify, {
@@ -4706,7 +4941,7 @@ function runVerify(meta) {
     env: { ...process.env, PWD: meta.cwd, PITROOM_ACTIVE: "1" }
   });
   const output = `${r.stdout ?? ""}${r.stderr ?? ""}`;
-  fs26.writeFileSync(runFile(meta.id, "verify.log"), output);
+  fs28.writeFileSync(runFile(meta.id, "verify.log"), output);
   return { ok: r.status === 0, code: r.status, tail: output.trimEnd().split("\n").slice(-25).join("\n") };
 }
 function applyRun(meta, allowDelete = false) {
@@ -4751,7 +4986,7 @@ function discardRun(meta) {
   return `discarded the isolated copy of ${meta.id}; the patch stays in ${runFile(meta.id, "changes.patch")}`;
 }
 function cleanupWorktree(meta) {
-  if (meta.worktree && fs26.existsSync(meta.worktree)) removeIsolatedCopy(meta.worktree, worktreesDir());
+  if (meta.worktree && fs28.existsSync(meta.worktree)) removeIsolatedCopy(meta.worktree, worktreesDir());
 }
 
 // src/cli/commands.ts
@@ -4786,7 +5021,7 @@ async function cmdReview(p) {
   let meta;
   try {
     meta = prepareRun({
-      ...runOptions(p, fill(loadTemplate(TEMPLATE[job.kind]), { PACKAGE_FILE: packageFile })),
+      ...runOptions(p, fill(loadTemplate(TEMPLATE2[job.kind]), { PACKAGE_FILE: packageFile })),
       mode: "read",
       dir: job.dir,
       worker: flag(p, "worker") ?? (flag(p, "tier") ? void 0 : pickReviewer(job)),
@@ -4801,10 +5036,10 @@ async function cmdReview(p) {
       writeMeta(meta);
     }
   } catch (e) {
-    fs27.rmSync(packageFile, { force: true });
+    fs29.rmSync(packageFile, { force: true });
     throw e;
   }
-  fs27.writeFileSync(runFile(meta.id, "package.md"), job.package);
+  fs29.writeFileSync(runFile(meta.id, "package.md"), job.package);
   return launch(p, meta);
 }
 async function cmdAudit(p) {
@@ -4834,24 +5069,45 @@ async function cmdAudit(p) {
   writeMeta(m);
   return launch(p, a);
 }
+function cmdCooldown(p) {
+  if (has(p, "clear")) {
+    const n = clearCooldowns();
+    console.log(n ? `cleared ${n} cooldown${n === 1 ? "" : "s"}: those models are tried again` : "no cooldowns");
+    return 0;
+  }
+  const all = activeCooldowns();
+  if (has(p, "json")) {
+    console.log(JSON.stringify(all, null, 2));
+    return 0;
+  }
+  const rows = Object.values(all);
+  if (!rows.length) {
+    console.log("no model is cooling down");
+    return 0;
+  }
+  console.log("Models left alone for now (runs go to the next worker; they are tried again after the time shown):");
+  for (const c of rows) console.log(`  ${c.target.padEnd(52)} ${untilText(c)} \xB7 ${c.reason.slice(0, 90)}`);
+  console.log("\npitroom cooldown --clear   try them again now");
+  return 0;
+}
 function cmdPlan(p) {
-  const [sub, file, ...rest] = p.positional;
-  if (sub === "status" && file) {
-    const s = planStatus(file);
+  const [sub, file2, ...rest] = p.positional;
+  if (sub === "status" && file2) {
+    const s = planStatus(file2);
     console.log(
       has(p, "json") ? JSON.stringify({ plan: s.plan.file, title: s.plan.title, tasks: s.tasks, rulings: s.rulings, notesFile: s.notesFile }, null, 2) : formatPlanStatus(s)
     );
     return 0;
   }
-  if (sub === "note" && file && rest.length) {
-    console.log(`noted in ${addNote(file, rest.join(" "))}`);
+  if (sub === "note" && file2 && rest.length) {
+    console.log(`noted in ${addNote(file2, rest.join(" "))}`);
     return 0;
   }
   throw new UserError('usage: pitroom plan status PLAN.md [--json] | pitroom plan note PLAN.md "Task N: \u2026"');
 }
 function cmdCrew(p) {
-  const file = flag(p, "task-file");
-  const tasks = (file ? fs27.readFileSync(file, "utf8").split(/^\s*---\s*$/m) : p.positional).map((t) => t.trim()).filter(Boolean);
+  const file2 = flag(p, "task-file");
+  const tasks = (file2 ? fs29.readFileSync(file2, "utf8").split(/^\s*---\s*$/m) : p.positional).map((t) => t.trim()).filter(Boolean);
   if (!tasks.length) throw new UserError('crew needs tasks: pitroom crew -g NAME "task 1" "task 2" (or --task-file with --- separators)');
   if (has(p, "write") && tasks.length > 1) {
     throw new UserError("parallel --write runs would edit the same tree; use --isolate (each worker gets its own isolated copy)");
@@ -5052,7 +5308,7 @@ function sinceMs(s) {
   if (!m) throw new UserError("--since takes 7d, 30d, \u2026 or all");
   return Date.now() - Number(m[1]) * 864e5;
 }
-var readStdin = () => process.stdin.isTTY ? "" : fs27.readFileSync(0, "utf8");
+var readStdin = () => process.stdin.isTTY ? "" : fs29.readFileSync(0, "utf8");
 function cmdStatusline(p) {
   const input = readStdin();
   const lines = [];
@@ -5092,8 +5348,8 @@ function cmdModels(p) {
   return 0;
 }
 function cmdHookStart() {
-  const script = path23.join(path23.dirname(path23.dirname(fileURLToPath4(import.meta.url))), "hooks", "session-start.mjs");
-  if (fs27.existsSync(script)) spawnSync7(process.execPath, [script], { stdio: ["ignore", "inherit", "ignore"], env: process.env });
+  const script = path25.join(path25.dirname(path25.dirname(fileURLToPath4(import.meta.url))), "hooks", "session-start.mjs");
+  if (fs29.existsSync(script)) spawnSync7(process.execPath, [script], { stdio: ["ignore", "inherit", "ignore"], env: process.env });
   return 0;
 }
 function cmdInit(p) {
@@ -5133,8 +5389,8 @@ function cmdSavings(p) {
   est. saved          ${usd(t.saved)}  (vs ${primaryPrice().name} list prices)`);
   const out = flag(p, "card");
   if (out) {
-    fs27.writeFileSync(out, card(t, period));
-    console.log(`card written to ${path23.resolve(out)}`);
+    fs29.writeFileSync(out, card(t, period));
+    console.log(`card written to ${path25.resolve(out)}`);
   }
   if (has(p, "badge")) console.log(`![pitroom](${badgeUrl(t)})`);
   return 0;
@@ -5154,7 +5410,7 @@ function cmdConfig(p) {
     console.log(JSON.stringify({ path: configPath(), settings: eff, warnings }, null, 2));
     return 0;
   }
-  console.log(`config file: ${configPath()}${fs27.existsSync(configPath()) ? "" : " (not present)"}`);
+  console.log(`config file: ${configPath()}${fs29.existsSync(configPath()) ? "" : " (not present)"}`);
   for (const [key, s] of Object.entries(eff)) {
     const v = Array.isArray(s.value) ? s.value.join(", ") || "\u2014" : s.value && typeof s.value === "object" ? Object.entries(s.value).map(([k, m]) => `${k}=${m}`).join(", ") || "\u2014" : s.value === void 0 ? key === "model" ? "the worker's default" : "\u2014" : String(s.value);
     console.log(`  ${key.padEnd(15)} ${v}  (${s.source})`);
@@ -5178,9 +5434,10 @@ function cmdClean(p) {
     const m = readMeta(id);
     if (m.mode === "isolate" && !m.discarded && !m.applied) discardRun(m);
     recordRun(m);
-    fs27.rmSync(runDir(id), { recursive: true, force: true });
+    fs29.rmSync(runDir(id), { recursive: true, force: true });
   }
-  console.log(`removed ${old.length} run(s); the history and the savings ledger are kept`);
+  const snapshots = prune(Date.now(), 0);
+  console.log(`removed ${old.length} run(s)${snapshots ? ` and ${snapshots} read snapshot${snapshots === 1 ? "" : "s"}` : ""}; the history and the savings ledger are kept`);
   return 0;
 }
 var cmdRevert = (p) => (console.log(revertRun(freshMeta(resolveRun(p.positional[0])))), 0);
@@ -5188,9 +5445,9 @@ var cmdDiscard = (p) => (console.log(discardRun(freshMeta(resolveRun(p.positiona
 
 // src/core/doctor.ts
 import { spawnSync as spawnSync8 } from "node:child_process";
-import fs28 from "node:fs";
+import fs30 from "node:fs";
 import os10 from "node:os";
-import path24 from "node:path";
+import path26 from "node:path";
 var MARK = { ok: () => green("\u2714"), warn: () => yellow("!"), fail: () => red("\u2718") };
 var NEXT = [
   { when: /no default model|no fallback workers/, command: "pitroom init", why: "propose a starter config (fallback models from your catalogue)" },
@@ -5200,15 +5457,15 @@ var NEXT = [
   { when: /Gemini CLI is not signed in|IneligibleTierError/, command: "export GEMINI_API_KEY=\u2026", why: "a Google AI Studio key for the Gemini worker" }
 ];
 function firstNodeOnPath() {
-  for (const dir of (process.env.PATH ?? "").split(path24.delimiter).filter(Boolean)) {
-    const file = path24.join(dir, process.platform === "win32" ? "node.exe" : "node");
+  for (const dir of (process.env.PATH ?? "").split(path26.delimiter).filter(Boolean)) {
+    const file2 = path26.join(dir, process.platform === "win32" ? "node.exe" : "node");
     try {
-      if (!fs28.statSync(file).isFile()) continue;
+      if (!fs30.statSync(file2).isFile()) continue;
     } catch {
       continue;
     }
-    const r = spawnSync8(file, ["-p", "process.versions.node"], { encoding: "utf8", timeout: 5e3 });
-    return r.status === 0 ? { path: file, version: r.stdout.trim() } : { path: file, version: "" };
+    const r = spawnSync8(file2, ["-p", "process.versions.node"], { encoding: "utf8", timeout: 5e3 });
+    return r.status === 0 ? { path: file2, version: r.stdout.trim() } : { path: file2, version: "" };
   }
   return void 0;
 }
@@ -5230,12 +5487,12 @@ function doctor5(probe) {
   const addAll = (list2) => list2.forEach((c) => add(c.level, c.message));
   add("ok", `pitroom ${VERSION2} \xB7 node ${process.versions.node} \xB7 state in ${home()}`);
   const onPath = firstNodeOnPath();
-  if (onPath && onPath.version && tooOld(onPath.version) && path24.resolve(onPath.path) !== path24.resolve(process.execPath)) {
+  if (onPath && onPath.version && tooOld(onPath.version) && path26.resolve(onPath.path) !== path26.resolve(process.execPath)) {
     add("warn", `the first \`node\` on PATH is v${onPath.version} (${onPath.path}), older than the 22.13 Pitroom needs: shells that agent apps start may use it (the pitroom command finds a newer Node itself; other tools may not)`);
   }
   add(gitAvailable() ? "ok" : "warn", gitAvailable() ? "git available" : "git not found: --write/--isolate tracking disabled");
   const cfg = loadConfig();
-  add(cfg.warnings.length ? "warn" : "ok", `config: ${configPath()}${fs28.existsSync(configPath()) ? "" : " (not present, defaults in use)"}`);
+  add(cfg.warnings.length ? "warn" : "ok", `config: ${configPath()}${fs30.existsSync(configPath()) ? "" : " (not present, defaults in use)"}`);
   for (const w of cfg.warnings) add("warn", w);
   if (process.platform !== "win32") {
     const guarded = guardEnv(process.env).PATH?.startsWith(shimDir());
@@ -5277,6 +5534,9 @@ function doctor5(probe) {
       add("ok", `cost: ${key} = ${mine}${cheaper ? `; you priced ${cheaper[0]} cheaper (${cheaper[1]}): is the dearer one needed?` : ""}`);
     }
   }
+  for (const c of Object.values(activeCooldowns())) {
+    add("warn", `${c.target} is cooling down ${untilText(c)} (${c.reason.slice(0, 80)}): runs skip it while a fallback is left; \`pitroom cooldown --clear\` tries it again`);
+  }
   const byBackend = /* @__PURE__ */ new Map();
   for (const t of [...chain, ...tierTargets]) byBackend.set(t.backend, [...byBackend.get(t.backend) ?? [], t.model]);
   for (const [id, models] of byBackend) {
@@ -5380,19 +5640,19 @@ function skillChecks() {
     else if (!viaPlugin) checks.push({ level: "warn", message: `no Pitroom skills in ${base2}; run \`pitroom install\`` });
   }
   if (geminiExtensionInstalled()) {
-    const linked = installedSkills().some((i) => i.base.includes(`${path24.sep}.agents${path24.sep}`) && i.names.length);
+    const linked = installedSkills().some((i) => i.base.includes(`${path26.sep}.agents${path26.sep}`) && i.names.length);
     checks.push(
       linked ? { level: "warn", message: "Pitroom is installed as a Gemini CLI extension and linked into ~/.agents/skills: Gemini loads the skills twice; run `pitroom uninstall` or `gemini extensions uninstall pitroom`" } : { level: "ok", message: "Gemini CLI extension installed (skills + context)" }
     );
   }
   if (viaPlugin) {
-    const linked = installedSkills().some((i) => i.base.includes(`${path24.sep}.claude${path24.sep}`) && i.names.length);
+    const linked = installedSkills().some((i) => i.base.includes(`${path26.sep}.claude${path26.sep}`) && i.names.length);
     checks.push(
       linked ? { level: "warn", message: "Pitroom is installed as a Claude Code plugin and linked into ~/.claude/skills: skills load twice; run `pitroom uninstall` or remove the plugin" } : { level: "ok", message: "Claude Code plugin installed (skills + session-start hook)" }
     );
   }
   const launcher = launcherPath();
-  if (fs28.existsSync(launcher)) {
+  if (fs30.existsSync(launcher)) {
     const r = spawnSync8(launcher, ["--version"], { encoding: "utf8", timeout: 3e4, stdio: ["ignore", "pipe", "pipe"] });
     checks.push(
       r.status === 0 ? { level: "ok", message: `launcher ${launcher} \u2192 pitroom ${r.stdout.trim()}` } : { level: "fail", message: `launcher ${launcher} does not start: ${(r.stderr || r.stdout).trim().slice(0, 200)}` }
@@ -5404,12 +5664,12 @@ function skillChecks() {
 }
 function geminiExtensionInstalled() {
   const home2 = process.env.GEMINI_CLI_HOME ?? os10.homedir();
-  return fs28.existsSync(path24.join(home2, ".gemini", "extensions", "pitroom"));
+  return fs30.existsSync(path26.join(home2, ".gemini", "extensions", "pitroom"));
 }
 function pluginInstalled() {
   try {
-    const f = path24.join(os10.homedir(), ".claude", "plugins", "installed_plugins.json");
-    const plugins = JSON.parse(fs28.readFileSync(f, "utf8")).plugins ?? {};
+    const f = path26.join(os10.homedir(), ".claude", "plugins", "installed_plugins.json");
+    const plugins = JSON.parse(fs30.readFileSync(f, "utf8")).plugins ?? {};
     return Object.keys(plugins).some((k) => k.startsWith("pitroom@"));
   } catch {
     return false;
@@ -5426,24 +5686,24 @@ function superpowersActive() {
   for (const p of openCodePlugins()) {
     if (/superpowers/i.test(p)) found.push(`OpenCode plugin ${p}`);
   }
-  for (const base2 of [path24.join(os10.homedir(), ".agents", "skills"), path24.join(os10.homedir(), ".claude", "skills")]) {
-    const dir = path24.join(base2, "using-superpowers");
-    if (fs28.existsSync(path24.join(dir, "SKILL.md"))) found.push(dir);
+  for (const base2 of [path26.join(os10.homedir(), ".agents", "skills"), path26.join(os10.homedir(), ".claude", "skills")]) {
+    const dir = path26.join(base2, "using-superpowers");
+    if (fs30.existsSync(path26.join(dir, "SKILL.md"))) found.push(dir);
   }
   return found;
 }
 function claudePlugins() {
   try {
-    const f = path24.join(os10.homedir(), ".claude", "plugins", "installed_plugins.json");
-    return Object.keys(JSON.parse(fs28.readFileSync(f, "utf8")).plugins ?? {});
+    const f = path26.join(os10.homedir(), ".claude", "plugins", "installed_plugins.json");
+    return Object.keys(JSON.parse(fs30.readFileSync(f, "utf8")).plugins ?? {});
   } catch {
     return [];
   }
 }
 function claudePluginEnabled(key) {
   try {
-    const f = path24.join(os10.homedir(), ".claude", "settings.json");
-    return JSON.parse(fs28.readFileSync(f, "utf8")).enabledPlugins?.[key] !== false;
+    const f = path26.join(os10.homedir(), ".claude", "settings.json");
+    return JSON.parse(fs30.readFileSync(f, "utf8")).enabledPlugins?.[key] !== false;
   } catch {
     return true;
   }
@@ -5452,7 +5712,7 @@ function codexPlugins() {
   const plugins = /* @__PURE__ */ new Map();
   let text;
   try {
-    text = fs28.readFileSync(path24.join(process.env.CODEX_HOME ?? path24.join(os10.homedir(), ".codex"), "config.toml"), "utf8");
+    text = fs30.readFileSync(path26.join(process.env.CODEX_HOME ?? path26.join(os10.homedir(), ".codex"), "config.toml"), "utf8");
   } catch {
     return plugins;
   }
@@ -5470,11 +5730,11 @@ function codexPlugins() {
   return plugins;
 }
 function openCodePlugins() {
-  const dir = path24.join(process.env.XDG_CONFIG_HOME ?? path24.join(os10.homedir(), ".config"), "opencode");
+  const dir = path26.join(process.env.XDG_CONFIG_HOME ?? path26.join(os10.homedir(), ".config"), "opencode");
   const plugins = [];
   for (const name of ["opencode.json", "opencode.jsonc"]) {
     try {
-      const text = fs28.readFileSync(path24.join(dir, name), "utf8").replace(/\/\*[\s\S]*?\*\/|^\s*\/\/.*$/gm, "");
+      const text = fs30.readFileSync(path26.join(dir, name), "utf8").replace(/\/\*[\s\S]*?\*\/|^\s*\/\/.*$/gm, "");
       const list2 = JSON.parse(text).plugin;
       if (Array.isArray(list2)) plugins.push(...list2.filter((p) => typeof p === "string"));
     } catch {
@@ -5482,7 +5742,7 @@ function openCodePlugins() {
   }
   for (const folder of ["plugin", "plugins"]) {
     try {
-      for (const f of fs28.readdirSync(path24.join(dir, folder))) plugins.push(path24.join(dir, folder, f));
+      for (const f of fs30.readdirSync(path26.join(dir, folder))) plugins.push(path26.join(dir, folder, f));
     } catch {
     }
   }
@@ -5532,6 +5792,8 @@ Usage
   pitroom statusline [--then CMD]       status-bar line: running workers, savings this week (after CMD's)
   pitroom hook-card                     PostToolUse hook: a card after each Bash \`pitroom\` command
   pitroom hook-start                    SessionStart hook: introduces Pitroom to the agent (Codex; Claude Code uses its plugin)
+  pitroom cooldown [--clear]            models that said "rate limited" and are skipped for a while (a quota used up);
+                                        --clear tries them again
   pitroom doctor [--probe]              check workers, models, permissions, skills
   pitroom config                        effective settings, where each comes from, config file path
   pitroom init [--model ID] [--fallback A,B] [--yes] [--force]
@@ -5551,6 +5813,8 @@ Run options
   -W, --worker T        worker target "backend[:model]" (default: config "worker", else opencode)
   -m, --model M         model for that worker (default: the worker CLI's own default)
       --tier NAME       a worker from the config's "tiers" (e.g. cheap, standard, capable); -W wins
+      --in-place        a read run reads the directory itself, not a clean snapshot (default: a snapshot without secret-looking
+                        files when the directory has any; config "readIn": auto | snapshot | project)
       --audit           have another worker re-check this read run's answer; --no-audit skips it (default: the config's "audit")
       --effort LEVEL    reasoning effort for the worker: low, medium, high, xhigh, \u2026 (model#level)
       --plan PLAN       with --step N: implement Task N of a plan (-i or -w); the task text is your notes
@@ -5581,6 +5845,7 @@ var COMMANDS = {
   crew: cmdCrew,
   review: cmdReview,
   audit: cmdAudit,
+  cooldown: cmdCooldown,
   plan: cmdPlan,
   status: cmdStatus,
   wait: cmdWait,