pitroom 0.22.0 → 0.23.0

package/dist/lib.mjs

@@ -209,7 +209,10 @@ var DENY_BASH = [
   "opencode",
   "claude",
   "codex",
-  "gemini"
+  "gemini",
+  "qwen",
+  "kilo",
+  "kilocode"
 ].map((c) => `Bash(${c}:*)`);
 var SECRETS = ["**/.env", "**/.env.*", "**/*.pem", "**/id_rsa*", "**/id_ed25519*"].map((p) => `Read(${p})`);
 function toolsFor(mode, web2) {
@@ -924,6 +927,10 @@ var gemini = {
   doctor: doctor3
 };
 
+// src/backends/kilo/index.ts
+import { spawnSync as spawnSync5 } from "node:child_process";
+import path7 from "node:path";
+
 // src/backends/opencode/index.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 
@@ -982,9 +989,9 @@ function parseEvents4(ndjson) {
         }
         lastActivity = `${name} ${describe2(st.input)}`.trim();
         if (timeline.length < MAX_STEPS) {
-          const kind = EDIT_TOOLS3.has(name) ? "edit" : /^(bash|shell)$/.test(name) ? "shell" : "tool";
-          const text = kind === "shell" ? String(st.input?.command ?? "") : String(st.input?.filePath ?? st.input?.path ?? st.input?.pattern ?? st.input?.url ?? "") || describe2(st.input);
-          timeline.push({ kind, name, text: clip4(text, 240), ok: st.status === "completed" ? true : st.status === "error" ? false : void 0, at: stamp(e.timestamp) });
+          const kind2 = EDIT_TOOLS3.has(name) ? "edit" : /^(bash|shell)$/.test(name) ? "shell" : "tool";
+          const text = kind2 === "shell" ? String(st.input?.command ?? "") : String(st.input?.filePath ?? st.input?.path ?? st.input?.pattern ?? st.input?.url ?? "") || describe2(st.input);
+          timeline.push({ kind: kind2, name, text: clip4(text, 240), ok: st.status === "completed" ? true : st.status === "error" ? false : void 0, at: stamp(e.timestamp) });
         }
         break;
       }
@@ -1133,17 +1140,19 @@ var FORBIDDEN_BASH = [
   "twine upload*",
   // no recursive delegation
   "opencode*",
+  "kilo *",
+  "kilocode*",
   "pitroom *",
   "*pitroom*"
 ];
-function scratchDirs() {
+function scratchDirs(app) {
   const data = process.env.XDG_DATA_HOME ?? path6.join(os6.homedir(), ".local", "share");
   const rules = {
     "*": "deny",
-    [path6.join(data, "opencode", "tool-output", "*")]: "allow",
-    [path6.join(data, "opencode", "shell", "*", "*")]: "allow"
+    [path6.join(data, app, "tool-output", "*")]: "allow",
+    [path6.join(data, app, "shell", "*", "*")]: "allow"
   };
-  for (const tmp of /* @__PURE__ */ new Set([os6.tmpdir(), realpath(os6.tmpdir())])) rules[path6.join(tmp, "opencode", "*")] = "allow";
+  for (const tmp of /* @__PURE__ */ new Set([os6.tmpdir(), realpath(os6.tmpdir())])) rules[path6.join(tmp, app, "*")] = "allow";
   return rules;
 }
 function realpath(p) {
@@ -1164,7 +1173,7 @@ var COMMON = {
   doom_loop: "deny"
 };
 var web = (on) => ({ webfetch: on ? "allow" : "deny", websearch: on ? "allow" : "deny" });
-function readProfile(allowWeb = false) {
+function readProfile(allowWeb = false, app = "opencode") {
   return {
     "*": "deny",
     read: READ_FILES,
@@ -1180,11 +1189,11 @@ function readProfile(allowWeb = false) {
     bash: READ_ONLY_BASH,
     shell: READ_ONLY_BASH,
     edit: "deny",
-    external_directory: scratchDirs(),
+    external_directory: scratchDirs(app),
     ...COMMON
   };
 }
-function writeProfile(allowWeb = false) {
+function writeProfile(allowWeb = false, app = "opencode") {
   const bash = { "*": "allow" };
   for (const pattern of FORBIDDEN_BASH) bash[pattern] = "deny";
   return {
@@ -1193,25 +1202,26 @@ function writeProfile(allowWeb = false) {
     ...web(allowWeb),
     bash,
     shell: bash,
-    external_directory: scratchDirs(),
+    external_directory: scratchDirs(app),
     ...COMMON
   };
 }
 function agentFor(mode) {
   return mode === "read" ? AGENT.read : AGENT.write;
 }
-function configContent(existing, allowWeb = false) {
+function configContent(existing, allowWeb = false, app = "opencode", extra = {}) {
   const ours = {
+    ...extra,
     agent: {
       [AGENT.read]: {
         mode: "primary",
         description: "pitroom: read-only worker (research, search, review)",
-        permission: readProfile(allowWeb)
+        permission: readProfile(allowWeb, app)
       },
       [AGENT.write]: {
         mode: "primary",
         description: "pitroom: editing worker (no git history changes, no bulk deletes)",
-        permission: writeProfile(allowWeb)
+        permission: writeProfile(allowWeb, app)
       }
     }
   };
@@ -1388,10 +1398,348 @@ var opencode = {
   doctor: doctor4
 };
 
+// src/backends/kilo/index.ts
+var binary5 = () => findBinary("kilo", "PITROOM_KILO_BIN", ["~/.kilo/bin/kilo"]);
+function kilo(args, timeout = 6e4) {
+  const { command, prefix } = resolveCommand(binary5());
+  const r = spawnSync5(command, [...prefix, ...args], { encoding: "utf8", timeout, stdio: ["ignore", "pipe", "pipe"], maxBuffer: 64 * 1024 * 1024 });
+  return { ok: r.status === 0, out: r.stdout ?? "", err: r.stderr ?? "", missing: !!r.error };
+}
+function invocation5(req) {
+  const args = [
+    "run",
+    "--agent",
+    agentFor(req.mode),
+    "--format",
+    "json",
+    "--title",
+    req.title,
+    // Some failure causes only appear in the server logs (Kilo takes the level in capitals only).
+    "--print-logs",
+    "--log-level",
+    "ERROR"
+  ];
+  if (req.model) args.push("--model", req.model);
+  if (req.sessionId) args.push("--session", req.sessionId);
+  for (const f of req.files) args.push("--file", f);
+  args.push(req.prompt);
+  const { command, prefix } = resolveCommand(binary5());
+  return {
+    command,
+    args: [...prefix, ...args],
+    env: {
+      // A worker run must not upgrade Kilo underneath the user.
+      KILO_CONFIG_CONTENT: configContent(process.env.KILO_CONFIG_CONTENT, req.web, "kilo", { autoupdate: false }),
+      // No daemon to attach to: a private server per run (see above).
+      XDG_STATE_HOME: path7.join(home(), "kilo-state")
+    }
+  };
+}
+function failure5(run, stderr, exitCode) {
+  if (exitCode === 0 && !run.error) return void 0;
+  const detail = stderr.match(/error="([^"]+)"/g)?.pop()?.slice(7, -1);
+  const raw = run.error ?? `kilo exited with code ${exitCode}`;
+  const message = detail && !raw.includes(detail) ? `${raw}: ${detail}` : raw;
+  return { kind: classify4(message), message };
+}
+function listModels2() {
+  return kilo(["models"]).out.split("\n").map((s) => s.trim()).filter((s) => /^[\w.-]+\/\S+$/.test(s));
+}
+function defaultModel4() {
+  try {
+    const out = kilo(["debug", "config"], 3e4).out;
+    const model = JSON.parse(out.slice(out.indexOf("{"))).model;
+    return typeof model === "string" ? model : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function catalog5() {
+  return { models: listModels2().map((id) => ({ id })), source: "`kilo models` (reasoning variants are provider-specific: provider/model#variant)" };
+}
+function doctor5({ models, hasFallback }) {
+  const version = kilo(["--version"]);
+  if (version.missing || !version.ok) {
+    return [{ level: "fail", message: `kilo not runnable (${binary5()}). Install Kilo Code's CLI (npm i -g @kilocode/cli), or set PITROOM_KILO_BIN` }];
+  }
+  const checks = [{ level: "ok", message: `Kilo Code ${version.out.trim().split("\n").pop()} at ${binary5()} (beta worker: checked against 7.8)` }];
+  const def = defaultModel4();
+  for (const m of models) {
+    const model = m ?? def;
+    checks.push(model ? { level: "ok", message: `Kilo Code ${m ? "model" : "default model"}: ${model}` } : { level: "warn", message: 'Kilo Code has no default model: pass -W kilo:<provider/model> or set "model" in its config' });
+  }
+  if (!hasFallback) checks.push({ level: "warn", message: "no fallback workers configured for Kilo Code runs" });
+  checks.push({ level: "ok", message: `permission profiles ${AGENT.read}/${AGENT.write} injected per run through KILO_CONFIG_CONTENT` });
+  return checks;
+}
+var kiloBackend = {
+  id: "kilo",
+  name: "Kilo Code",
+  capabilities: { readOnly: "permission-rules", resume: "by-id", reportsCost: true, attachFiles: true },
+  binary: binary5,
+  invocation: invocation5,
+  parse: parseEvents4,
+  failure: failure5,
+  defaultModel: defaultModel4,
+  listModels: listModels2,
+  catalog: catalog5,
+  doctor: doctor5
+};
+
+// src/backends/qwen/index.ts
+import { spawnSync as spawnSync6 } from "node:child_process";
+import fs8 from "node:fs";
+import os7 from "node:os";
+import path8 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+
+// src/backends/qwen/events.ts
+var EDIT_TOOLS4 = /* @__PURE__ */ new Set(["write_file", "edit", "notebook_edit"]);
+var SHELL = "run_shell_command";
+var DENIED4 = /permission was declined|denied by permission rules|requires permission|not allowed/i;
+var API_ERROR = /^\[API Error: /;
+function parseEvents5(jsonl) {
+  const usage = { input: 0, output: 0, reasoning: 0, cacheRead: 0, cacheWrite: 0, total: 0, steps: 0, toolCalls: 0, denied: 0 };
+  const tools = {};
+  const edits = [];
+  const pendingEdits = /* @__PURE__ */ new Map();
+  const timeline = [];
+  const stepOf = /* @__PURE__ */ new Map();
+  let sessionId;
+  let model;
+  let lastText = "";
+  let finalText;
+  let lastActivity;
+  let error;
+  for (const line of jsonl.split("\n")) {
+    if (!line.trim()) continue;
+    let e;
+    try {
+      e = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    sessionId ??= e.session_id;
+    if (e.type === "system" && e.subtype === "init") {
+      model = e.model;
+    } else if (e.type === "system" && e.subtype === "retry") {
+      lastActivity = `waiting to retry (attempt ${e.data?.attempt ?? "?"} of ${e.data?.maxRetries ?? "?"})`;
+    } else if (e.type === "assistant") {
+      const content = e.message?.content ?? [];
+      const text = content.filter((c) => c.type === "text").map((c) => String(c.text ?? "")).join(" ").trim();
+      if (API_ERROR.test(text)) {
+        error = apiError(text);
+        continue;
+      }
+      usage.steps++;
+      for (const c of content) {
+        if (c.type === "text" && String(c.text ?? "").trim()) {
+          lastText = String(c.text).trim();
+          lastActivity = `says: ${oneLine5(lastText)}`;
+          if (timeline.length < MAX_STEPS) timeline.push({ kind: "say", text: clip5(lastText, 600) });
+        } else if (c.type === "tool_use") {
+          usage.toolCalls++;
+          tools[c.name] = (tools[c.name] ?? 0) + 1;
+          const target = c.input?.file_path ?? c.input?.path ?? c.input?.pattern ?? c.input?.command ?? c.input?.url;
+          lastActivity = `${c.name} ${target ? oneLine5(String(target), 60) : ""}`.trim();
+          if (EDIT_TOOLS4.has(c.name) && c.input?.file_path) pendingEdits.set(String(c.id), String(c.input.file_path));
+          if (timeline.length < MAX_STEPS) {
+            const step = { kind: EDIT_TOOLS4.has(c.name) ? "edit" : c.name === SHELL ? "shell" : "tool", name: c.name, text: clip5(String(target ?? ""), 240) };
+            timeline.push(step);
+            stepOf.set(String(c.id), step);
+          }
+        }
+      }
+    } else if (e.type === "user") {
+      for (const c of e.message?.content ?? []) {
+        if (c?.type !== "tool_result") continue;
+        const text = typeof c.content === "string" ? c.content : JSON.stringify(c.content ?? "");
+        const step = stepOf.get(String(c.tool_use_id));
+        if (step) step.ok = !c.is_error;
+        if (c.is_error) {
+          if (DENIED4.test(text)) usage.denied++;
+        } else if (pendingEdits.has(String(c.tool_use_id))) {
+          edits.push(pendingEdits.get(String(c.tool_use_id)));
+        }
+      }
+    } else if (e.type === "result") {
+      const u = e.usage ?? {};
+      usage.input += Math.max(0, num5(u.input_tokens) - num5(u.cache_read_input_tokens));
+      usage.cacheRead += num5(u.cache_read_input_tokens);
+      usage.output += num5(u.output_tokens);
+      usage.total += num5(u.total_tokens) || num5(u.input_tokens) + num5(u.output_tokens);
+      usage.denied = Math.max(usage.denied, Array.isArray(e.permission_denials) ? e.permission_denials.length : 0);
+      if (e.is_error) {
+        error ??= apiError(String(e.error?.message ?? e.result ?? e.subtype ?? "Qwen Code error"));
+      } else if (typeof e.result === "string") {
+        finalText = e.result.trim();
+      }
+    }
+  }
+  return { sessionId, model, finalText: finalText ?? (error ? "" : lastText), usage, tools, edits, lastActivity, timeline, error };
+}
+var apiError = (text) => text.replace(API_ERROR, "").replace(/\](?=\s*(\n|$))/, "").replace(/\s+/g, " ").trim() || text;
+var clip5 = (s, n) => s.length > n ? `${s.slice(0, n - 1)}\u2026` : s;
+var num5 = (v) => typeof v === "number" && Number.isFinite(v) ? v : 0;
+var oneLine5 = (s, max = 80) => {
+  const t = s.replace(/\s+/g, " ").trim();
+  return t.length > max ? `${t.slice(0, max - 1)}\u2026` : t;
+};
+
+// src/backends/qwen/index.ts
+var binary6 = () => findBinary("qwen", "PITROOM_QWEN_BIN", ["~/.local/bin/qwen", "~/.npm-global/bin/qwen"]);
+var policyDir2 = () => path8.resolve(path8.dirname(fileURLToPath2(import.meta.url)), "..", "policies", "qwen");
+var EXCLUDED = [
+  "agent",
+  "send_message",
+  "skill",
+  "manage_memory",
+  "search_memory",
+  "enter_worktree",
+  "exit_worktree",
+  "record_artifact",
+  "cron_create",
+  "cron_list",
+  "cron_delete",
+  "loop_wakeup",
+  "task_stop",
+  "update_goal",
+  "get_goal",
+  "list_agents",
+  "report_findings",
+  "tool_call",
+  "tool_search",
+  "read_mcp_resource"
+];
+var WEB = ["web_fetch", "web_search"];
+var EDITS_HERE = ["Edit(./**)", "write_file(./**)", "notebook_edit(./**)"];
+var DENY_SHELL = [
+  "git commit",
+  "git push",
+  "git pull",
+  "git reset",
+  "git checkout",
+  "git restore",
+  "git clean",
+  "git stash",
+  "git rebase",
+  "git merge",
+  "git switch",
+  "git branch",
+  "git tag",
+  "git rm",
+  "git worktree",
+  "git update-ref",
+  "git config",
+  "git remote",
+  "git cherry-pick",
+  "git revert",
+  "git am",
+  "git add",
+  "rm -rf",
+  "rm -fr",
+  "sudo",
+  "chown",
+  "kill",
+  "pkill",
+  "killall",
+  "gh",
+  "npm publish",
+  "pitroom",
+  "opencode",
+  "claude",
+  "codex",
+  "gemini",
+  "qwen",
+  "kilo",
+  "kilocode"
+].map((c) => `run_shell_command(${c})`);
+function invocation6(req) {
+  const read = req.mode === "read";
+  const exclude = [...EXCLUDED, ...req.web ? [] : WEB, ...read ? [] : DENY_SHELL];
+  const args = [
+    // The prompt is the first word: the list options below take every word that follows them, and Qwen Code reads
+    // no prompt after "--". One that starts with "-" would be read as an option: a leading space keeps it the prompt.
+    req.prompt.startsWith("-") ? ` ${req.prompt}` : req.prompt,
+    "--safe-mode",
+    "--output-format",
+    "stream-json",
+    "--approval-mode",
+    read ? "plan" : "default",
+    "--exclude-tools",
+    ...exclude
+  ];
+  if (!read) args.push("--allowed-tools", ...EDITS_HERE, "run_shell_command");
+  const model = (req.model ?? "").split("#")[0];
+  if (model) args.push("--model", model);
+  if (req.sessionId) args.push("--resume", req.sessionId);
+  const { command, prefix } = resolveCommand(binary6());
+  return {
+    command,
+    args: [...prefix, ...args],
+    env: {
+      QWEN_CODE_SYSTEM_DEFAULTS_PATH: path8.join(policyDir2(), "worker-defaults.json"),
+      QWEN_CODE_DISABLE_CRON: "1",
+      QWEN_DISABLE_AUTO_TITLE: "1"
+    }
+  };
+}
+function classify5(message) {
+  if (/\b40[13]\b|incorrect api key|invalid api key|unauthori[sz]ed|authenticat|not logged in|no auth/i.test(message)) return "auth";
+  if (/\b429\b|rate.?limit|too many requests|quota|capacity|overloaded|\b529\b/i.test(message)) return "rate-limited";
+  if (/model[^.]*(not found|does not exist|not available|not supported)|invalid model|model_not_found|\b404\b/i.test(message)) return "model-unavailable";
+  return "other";
+}
+function failure6(run, stderr, exitCode) {
+  if (exitCode === 0 && !run.error) return void 0;
+  const detail = stderr.trim().split("\n").filter((l) => l.trim() && !/SAFE MODE/.test(l)).pop();
+  const message = run.error ?? detail ?? `qwen exited with code ${exitCode}`;
+  return { kind: classify5(message), message };
+}
+function userSettings() {
+  try {
+    return JSON.parse(fs8.readFileSync(path8.join(process.env.QWEN_HOME ?? path8.join(os7.homedir(), ".qwen"), "settings.json"), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function defaultModel5() {
+  const name = userSettings().model?.name;
+  return typeof name === "string" && name ? name : void 0;
+}
+function doctor6({ models, hasFallback }) {
+  const { command, prefix } = resolveCommand(binary6());
+  const r = spawnSync6(command, [...prefix, "--version"], { encoding: "utf8", timeout: 6e4, stdio: ["ignore", "pipe", "pipe"] });
+  if (r.error || r.status !== 0) return [{ level: "fail", message: `qwen not runnable (${binary6()}). Install Qwen Code (npm i -g @qwen-code/qwen-code), or set PITROOM_QWEN_BIN` }];
+  const checks = [{ level: "ok", message: `Qwen Code ${r.stdout.trim()} at ${binary6()} (beta worker: checked against Qwen Code 0.25)` }];
+  const auth = userSettings().security?.auth?.selectedType;
+  const key = process.env.OPENAI_API_KEY || process.env.DASHSCOPE_API_KEY || process.env.ANTHROPIC_API_KEY || process.env.GEMINI_API_KEY;
+  checks.push(
+    auth || key ? { level: "ok", message: `Qwen Code: sign-in ${auth ?? "from an API key in the environment"}` } : { level: "warn", message: "Qwen Code has no sign-in method set: run `qwen` once to choose one, or set OPENAI_API_KEY (and OPENAI_BASE_URL) for an OpenAI-compatible provider" }
+  );
+  for (const m of models) {
+    const model = m ?? defaultModel5();
+    checks.push({ level: model ? "ok" : "warn", message: model ? `Qwen Code model: ${model}` : "Qwen Code model: none pinned (pass -W qwen:<model> or set model.name in ~/.qwen/settings.json)" });
+  }
+  if (!hasFallback) checks.push({ level: "warn", message: "no fallback workers configured for Qwen Code runs" });
+  return checks;
+}
+var qwen = {
+  id: "qwen",
+  name: "Qwen Code",
+  capabilities: { readOnly: "approval-mode", resume: "by-id", reportsCost: false, attachFiles: false },
+  binary: binary6,
+  invocation: invocation6,
+  parse: parseEvents5,
+  failure: failure6,
+  defaultModel: defaultModel5,
+  doctor: doctor6
+};
+
 // src/backends/index.ts
-var REGISTRY = new Map([opencode, codex, claude, gemini].map((b) => [b.id, b]));
+var REGISTRY = new Map([opencode, codex, claude, gemini, qwen, kiloBackend].map((b) => [b.id, b]));
 var DEFAULT_BACKEND = opencode.id;
-var PLANNED = [];
+var PLANNED = ["hermes"];
 var backendIds = () => [...REGISTRY.keys()];
 var allBackends = () => [...REGISTRY.values()];
 var isBackendId = (id) => REGISTRY.has(id) || PLANNED.includes(id);
@@ -1421,8 +1769,8 @@ var formatTarget = (t) => t.model ? `${t.backend}:${t.model}` : t.backend;
 var describeTarget = (t) => t.model ? formatTarget(t) : `${t.backend} (default model)`;
 
 // src/core/refs.ts
-import fs8 from "node:fs";
-import path7 from "node:path";
+import fs9 from "node:fs";
+import path9 from "node:path";
 var FILE_EXTENSIONS = new Set(
   "ts tsx mts cts js jsx mjs cjs json jsonc json5 md mdx txt rst py pyi rb go rs java kt kts swift c h cc cpp cxx hpp hh cs fs php lua r jl sh bash zsh fish ps1 bat yml yaml toml ini cfg conf env html htm css scss sass less vue svelte astro sql graphql gql proto lock xml svg csv tsv gradle tf hcl dart ex exs erl hs ml scala clj vim el mk cmake dockerfile gitignore gitattributes editorconfig npmrc nvmrc".split(" ")
 );
@@ -1473,13 +1821,13 @@ function extractRefs(answer) {
   return [...seen.values()];
 }
 function verifyRefs(refs, dirs) {
-  const roots = [...new Set(dirs.filter(Boolean).map((d) => path7.resolve(d)))];
+  const roots = [...new Set(dirs.filter(Boolean).map((d) => path9.resolve(d)))];
   const invalid = [];
   const lineCache = /* @__PURE__ */ new Map();
   const load = (file) => {
     if (!lineCache.has(file)) {
-      const size = fs8.statSync(file).size;
-      const lines = size > MAX_BYTES ? null : fs8.readFileSync(file, "utf8").split("\n");
+      const size = fs9.statSync(file).size;
+      const lines = size > MAX_BYTES ? null : fs9.readFileSync(file, "utf8").split("\n");
       if (lines && lines[lines.length - 1] === "") lines.pop();
       lineCache.set(file, lines);
     }
@@ -1490,9 +1838,9 @@ function verifyRefs(refs, dirs) {
   const candidates = (ref) => {
     const direct = resolve(ref.file, roots);
     if (direct) return [direct];
-    if (path7.isAbsolute(ref.file)) return [];
+    if (path9.isAbsolute(ref.file)) return [];
     const wanted = ref.file.replace(/^(\.{1,2}\/)+/, "");
-    return (byName().get(path7.basename(wanted)) ?? []).filter((f) => f.split(path7.sep).join("/").endsWith(`/${wanted}`) || path7.basename(f) === wanted).slice(0, 20);
+    return (byName().get(path9.basename(wanted)) ?? []).filter((f) => f.split(path9.sep).join("/").endsWith(`/${wanted}`) || path9.basename(f) === wanted).slice(0, 20);
   };
   const check = (file, ref) => {
     const lines = load(file);
@@ -1507,7 +1855,7 @@ function verifyRefs(refs, dirs) {
     if (!files.length) {
       if (!ref.file.includes("/") && !isFileName(ref.file)) continue;
       total++;
-      invalid.push({ ref: ref.text, reason: path7.isAbsolute(ref.file) && !inside(ref.file, roots) ? "outside the project" : "file not found" });
+      invalid.push({ ref: ref.text, reason: path9.isAbsolute(ref.file) && !inside(ref.file, roots) ? "outside the project" : "file not found" });
       continue;
     }
     total++;
@@ -1528,7 +1876,7 @@ function enclosedBy(lines, ref) {
   return lines.slice(Math.max(0, ref.start - 1 - DEFINITION_LOOKBACK), ref.start).some((l) => def.test(l));
 }
 var isFileName = (name) => {
-  const base = path7.basename(name);
+  const base = path9.basename(name);
   return !base.includes(".") || new RegExp(`^(${EXTENSIONLESS})$`).test(base) || FILE_EXTENSIONS.has(base.split(".").pop().toLowerCase());
 };
 function indexFiles(roots) {
@@ -1537,19 +1885,19 @@ function indexFiles(roots) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs8.readdirSync(dir, { withFileTypes: true });
+      entries = fs9.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
       if (count >= MAX_INDEXED) return;
       if (e.isDirectory()) {
-        if (!SKIP_DIRS.has(e.name)) walk(path7.join(dir, e.name));
+        if (!SKIP_DIRS.has(e.name)) walk(path9.join(dir, e.name));
       } else if (e.isFile()) {
         count++;
         const list2 = index.get(e.name);
-        if (list2) list2.push(path7.join(dir, e.name));
-        else index.set(e.name, [path7.join(dir, e.name)]);
+        if (list2) list2.push(path9.join(dir, e.name));
+        else index.set(e.name, [path9.join(dir, e.name)]);
       }
     }
   };
@@ -1557,10 +1905,10 @@ function indexFiles(roots) {
   return index;
 }
 function resolve(ref, roots) {
-  const candidates = path7.isAbsolute(ref) ? inside(ref, roots) ? [ref] : [] : roots.map((r) => path7.join(r, ref));
+  const candidates = path9.isAbsolute(ref) ? inside(ref, roots) ? [ref] : [] : roots.map((r) => path9.join(r, ref));
   return candidates.find((c) => {
     try {
-      return fs8.statSync(c).isFile() && inside(c, roots);
+      return fs9.statSync(c).isFile() && inside(c, roots);
     } catch {
       return false;
     }
@@ -1568,21 +1916,21 @@ function resolve(ref, roots) {
 }
 function inside(file, roots) {
   return roots.some((r) => {
-    const rel = path7.relative(r, path7.resolve(file));
-    return rel !== "" && !rel.startsWith("..") && !path7.isAbsolute(rel);
+    const rel = path9.relative(r, path9.resolve(file));
+    return rel !== "" && !rel.startsWith("..") && !path9.isAbsolute(rel);
   });
 }
 var escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
 // src/core/templates.ts
-import fs9 from "node:fs";
-import path9 from "node:path";
+import fs10 from "node:fs";
+import path11 from "node:path";
 
 // src/core/install.ts
-import path8 from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import path10 from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 function packageRoot() {
-  return path8.resolve(path8.dirname(fileURLToPath2(import.meta.url)), "..");
+  return path10.resolve(path10.dirname(fileURLToPath3(import.meta.url)), "..");
 }
 
 // src/core/templates.ts
@@ -1593,9 +1941,9 @@ var FILES = {
   "code-reviewer": "pitroom-review/code-reviewer.md"
 };
 function loadTemplate(name, root = packageRoot()) {
-  const file = path9.join(root, "skills", FILES[name]);
-  if (!fs9.existsSync(file)) throw new UserError(`template missing: ${file} (broken install? run pitroom doctor)`, 3);
-  return fs9.readFileSync(file, "utf8").replace(/^\s*<!--[\s\S]*?-->\s*/, "");
+  const file = path11.join(root, "skills", FILES[name]);
+  if (!fs10.existsSync(file)) throw new UserError(`template missing: ${file} (broken install? run pitroom doctor)`, 3);
+  return fs10.readFileSync(file, "utf8").replace(/^\s*<!--[\s\S]*?-->\s*/, "");
 }
 function fill(template, values) {
   const missing = [...template.matchAll(/\{\{([A-Z_]+)\}\}/g)].map((m) => m[1]).filter((k) => !(k in values));
@@ -1651,689 +1999,904 @@ function parseAudit(text) {
   return { verdict, disputed };
 }
 
-// src/core/plan.ts
-import fs10 from "node:fs";
-import path10 from "node:path";
-var FENCE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
-var RULE = /^ {0,3}([-*_])(\s*\1){2,}\s*$/;
-function structure(lines) {
-  const headings = [];
-  const rules = [];
-  const fenced = [];
-  let open;
-  lines.forEach((l, i) => {
-    const f = FENCE.exec(l);
-    if (f) {
-      fenced[i] = true;
-      const mark = f[1];
-      if (!open) open = mark;
-      else if (mark[0] === open[0] && mark.length >= open.length && !f[2].trim()) open = void 0;
-      return;
-    }
-    fenced[i] = !!open;
-    if (open) return;
-    const h = /^ {0,3}(#{1,6})\s+(.*?)\s*#*\s*$/.exec(l);
-    if (h) headings.push({ line: i, level: h[1].length, text: h[2] });
-    else if (RULE.test(l)) rules.push(i);
-  });
-  return { headings, rules, fenced };
+// src/core/config.ts
+import fs11 from "node:fs";
+import os8 from "node:os";
+import path12 from "node:path";
+var SCHEMA = {
+  worker: "string",
+  fallback: "string[]",
+  timeout: "string",
+  primary: "string",
+  price: "string",
+  link: "string[]",
+  web: "boolean",
+  maxParallel: "number",
+  models: "record",
+  tiers: "record",
+  costs: "numbers",
+  audit: "number",
+  auditFix: "boolean",
+  auditFocus: "boolean",
+  readIn: "string",
+  cacheDays: "number",
+  countRateLimits: "boolean",
+  mcpDash: "boolean",
+  notify: "boolean",
+  notifyCommand: "string",
+  notifyAfter: "number",
+  workerPrices: "record",
+  priceFeed: "boolean",
+  priceFeedUrl: "string",
+  priceFeedHours: "number",
+  budgetDaily: "number",
+  rankWorkers: "boolean"
+};
+function configPath() {
+  if (process.env.PITROOM_CONFIG) return path12.resolve(process.env.PITROOM_CONFIG);
+  const base = process.platform === "win32" ? process.env.APPDATA ?? path12.join(os8.homedir(), "AppData", "Roaming") : process.env.XDG_CONFIG_HOME ?? path12.join(os8.homedir(), ".config");
+  return path12.join(base, "pitroom", "config.json");
 }
-function parsePlan(text, file = "") {
-  const lines = text.replace(/\r\n?/g, "\n").split("\n");
-  const { headings, rules, fenced } = structure(lines);
-  const after = (line) => Math.min(headings.find((h) => h.line > line)?.line ?? lines.length, rules.find((r) => r > line) ?? lines.length);
-  const titleHeading = headings.find((h) => h.level === 1);
-  const start = titleHeading ? titleHeading.line + 1 : 0;
-  const header = lines.slice(start, after(start - 1)).filter((l) => !/^\s*>/.test(l)).join("\n").trim();
-  const gc = headings.find((h) => /^global constraints\b/i.test(h.text));
-  const constraints = gc ? lines.slice(gc.line + 1, after(gc.line)).join("\n").trim() : "";
-  const tasks = [];
-  for (const h of headings) {
-    const m = /^Task\s+(\d+)\b\s*[:.)\-–—]?\s*(.*)$/i.exec(h.text);
-    if (!m) continue;
-    const end = headings.find((o) => o.line > h.line && o.level <= h.level)?.line ?? lines.length;
-    const body = lines.slice(h.line, end).join("\n").replace(/(\n\s*(?:---|\*\*\*|___)\s*)+$/, "").trimEnd();
-    const unfenced = lines.slice(h.line, end).filter((_, j) => !fenced[h.line + j]).join("\n");
-    const tier = /^\s*[-*]?\s*\*\*Worker:\*\*\s*`?([\w-]+)`?/m.exec(unfenced)?.[1]?.toLowerCase();
-    tasks.push({ step: Number(m[1]), title: m[2].trim(), text: body, ...tier ? { tier } : {} });
+var cached;
+function loadConfig() {
+  if (cached) return cached;
+  const file = configPath();
+  const config = {};
+  const warnings = [];
+  if (fs11.existsSync(file)) {
+    let raw;
+    try {
+      raw = JSON.parse(fs11.readFileSync(file, "utf8"));
+    } catch (e) {
+      warnings.push(`${file}: invalid JSON (${e.message}); ignored`);
+    }
+    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+      for (const [key, value] of Object.entries(raw)) {
+        const type = SCHEMA[key];
+        if (!type) {
+          warnings.push(`${file}: unknown key "${key}" ignored`);
+        } else if (matches(value, type)) {
+          config[key] = value;
+        } else {
+          warnings.push(`${file}: "${key}" must be ${type}; ignored`);
+        }
+      }
+    }
   }
-  return { file, title: titleHeading?.text ?? "", header, constraints, tasks };
+  cached = { config, warnings };
+  return cached;
 }
-function loadPlan(file) {
-  const abs = path10.resolve(file);
-  if (!fs10.existsSync(abs) || !fs10.statSync(abs).isFile()) throw new UserError(`plan not found: ${file}`);
-  const plan = parsePlan(fs10.readFileSync(abs, "utf8"), fs10.realpathSync(abs));
-  if (!plan.tasks.length) throw new UserError(`${file} has no "Task N" headings (see pitroom-writing-plans)`);
-  return plan;
+function matches(v, type) {
+  if (type === "string[]") return Array.isArray(v) && v.every((s) => typeof s === "string");
+  if (type === "record") {
+    return typeof v === "object" && v !== null && !Array.isArray(v) && Object.values(v).every((s) => typeof s === "string");
+  }
+  if (type === "numbers") {
+    return typeof v === "object" && v !== null && !Array.isArray(v) && Object.values(v).every((n) => typeof n === "number" && Number.isFinite(n) && n >= 0);
+  }
+  if (type === "number") return typeof v === "number" && Number.isFinite(v) && v >= 0;
+  return typeof v === type;
 }
-function planTask(plan, step) {
-  const t = plan.tasks.find((x) => x.step === step);
-  if (!t) throw new UserError(`no Task ${step} in ${plan.file}; it has ${plan.tasks.map((x) => `Task ${x.step}`).join(", ")}`);
-  return t;
+var DEFAULT_PARALLEL = 20;
+var MAX_PARALLEL_LIMIT = 30;
+var clampParallel = (s) => ({ ...s, value: Math.min(s.value, MAX_PARALLEL_LIMIT) });
+var positiveInt = (v) => {
+  const n = Number(v);
+  return v !== void 0 && v !== "" && Number.isInteger(n) && n > 0 ? n : void 0;
+};
+var rate = (v) => {
+  const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
+  return typeof n === "number" && Number.isFinite(n) && n >= 0 ? Math.min(n, 1) : void 0;
+};
+var amount = (v) => {
+  const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
+  return typeof n === "number" && Number.isFinite(n) && n >= 0 ? n : void 0;
+};
+var days = (v) => {
+  const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
+  return typeof n === "number" && Number.isInteger(n) && n >= 0 ? n : void 0;
+};
+var flag01 = (v) => {
+  const t = v?.trim().toLowerCase();
+  return t === void 0 || t === "" ? void 0 : ["1", "true", "on", "yes"].includes(t) ? true : ["0", "false", "off", "no"].includes(t) ? false : void 0;
+};
+var readIn = (v) => v === "auto" || v === "snapshot" || v === "project" ? v : void 0;
+var list = (s) => s?.split(",").map((x) => x.trim()).filter(Boolean);
+function setting(flag, env, conf, fallback) {
+  if (flag !== void 0) return { value: flag, source: "flag" };
+  if (env !== void 0) return { value: env, source: "env" };
+  if (conf !== void 0) return { value: conf, source: "config" };
+  return { value: fallback, source: "default" };
 }
-function brief(plan, task) {
-  return `${[
-    `# ${plan.title || planName(plan.file)}`,
-    plan.header,
-    "## Global Constraints",
-    plan.constraints || "(none stated in the plan)",
-    task.text
-  ].filter(Boolean).join("\n\n")}
-`;
+function effective(flags = {}) {
+  const c = loadConfig().config;
+  const e = process.env;
+  return {
+    worker: setting(flags.worker, e.PITROOM_WORKER, c.worker, DEFAULT_BACKEND),
+    /** Overrides the model of the preferred worker only. */
+    model: setting(flags.model, e.PITROOM_MODEL, void 0, void 0),
+    fallback: setting(void 0, list(e.PITROOM_FALLBACK), c.fallback, []),
+    timeout: setting(flags.timeout, e.PITROOM_TIMEOUT, c.timeout, "30m"),
+    primary: setting(void 0, e.PITROOM_PRIMARY, c.primary, "sonnet"),
+    price: setting(void 0, e.PITROOM_PRICE, c.price, void 0),
+    link: setting(void 0, void 0, c.link, []),
+    web: setting(void 0, void 0, c.web, false),
+    maxParallel: clampParallel(setting(void 0, positiveInt(e.PITROOM_MAX_PARALLEL), positiveInt(c.maxParallel), DEFAULT_PARALLEL)),
+    models: setting(void 0, void 0, c.models, {}),
+    tiers: setting(void 0, void 0, c.tiers, {}),
+    costs: setting(void 0, void 0, c.costs, {}),
+    audit: setting(void 0, rate(e.PITROOM_AUDIT), rate(c.audit), 0),
+    auditFix: setting(void 0, flag01(e.PITROOM_AUDIT_FIX), c.auditFix, false),
+    auditFocus: setting(void 0, flag01(e.PITROOM_AUDIT_FOCUS), c.auditFocus, false),
+    readIn: setting(void 0, readIn(e.PITROOM_READ_IN), readIn(c.readIn), "auto"),
+    cacheDays: setting(void 0, days(e.PITROOM_CACHE_DAYS), days(c.cacheDays), 7),
+    countRateLimits: setting(void 0, void 0, c.countRateLimits, false),
+    mcpDash: setting(void 0, flag01(e.PITROOM_MCP_DASH), c.mcpDash, true),
+    notify: setting(void 0, flag01(e.PITROOM_NOTIFY), c.notify, false),
+    notifyCommand: setting(void 0, e.PITROOM_NOTIFY_COMMAND?.trim() || void 0, c.notifyCommand?.trim() || void 0, void 0),
+    notifyAfter: setting(void 0, days(e.PITROOM_NOTIFY_AFTER), days(c.notifyAfter), 15),
+    workerPrices: setting(void 0, void 0, c.workerPrices, {}),
+    priceFeed: setting(void 0, flag01(e.PITROOM_PRICE_FEED), c.priceFeed, false),
+    priceFeedUrl: setting(void 0, e.PITROOM_PRICE_FEED_URL?.trim() || void 0, c.priceFeedUrl?.trim() || void 0, "https://models.dev/api.json"),
+    priceFeedHours: setting(void 0, positiveInt(e.PITROOM_PRICE_FEED_HOURS), positiveInt(c.priceFeedHours), 24),
+    rankWorkers: setting(void 0, flag01(e.PITROOM_RANK_WORKERS), c.rankWorkers, false),
+    budgetDaily: setting(void 0, amount(e.PITROOM_BUDGET_DAILY), amount(c.budgetDaily), void 0)
+  };
 }
-var planName = (file) => path10.basename(file).replace(/\.md$/i, "");
 
-// src/vcs/guard.ts
-import fs11 from "node:fs";
-import path11 from "node:path";
-var VERSION = 2;
-var WINDOWS = process.platform === "win32";
-var fwd = (p) => WINDOWS ? p.replace(/\\/g, "/") : p;
-var SHIM = `#!/bin/sh
-# pitroom git guard v${VERSION}. Blocks git commands that change history, refs, the
-# index or discard work. The primary agent reviews and commits, not the worker.
-set -f
-real="\${PITROOM_REAL_GIT:-}"
-if [ -z "$real" ] || [ ! -x "$real" ]; then
-  echo "pitroom: git guard cannot find the real git" >&2
-  exit 127
-fi
-block() {
-  echo "pitroom: 'git $1' is blocked for workers (the primary agent reviews and commits)" >&2
-  exit 1
+// src/core/audit.ts
+var ASKS_FOR_LIST = /\b(all|every|each|list|lists|enumerate|how many|count|which)\b/i;
+function focusedRate(base, task, record) {
+  if (base <= 0 || base >= 1) return { rate: base, why: [] };
+  let rate2 = base;
+  const why = [];
+  if (ASKS_FOR_LIST.test(task)) {
+    rate2 *= 2;
+    why.push("asks for a list or a count");
+  }
+  if (record && record.audited >= 3 && record.agreed / record.audited < 0.5) {
+    rate2 *= 2;
+    why.push(`the worker's audited answers were confirmed ${record.agreed} of ${record.audited} times`);
+  } else if (record && record.audited >= 5 && record.agreed === record.audited) {
+    rate2 /= 2;
+    why.push(`the worker's ${record.audited} audited answers were all confirmed`);
+  }
+  return { rate: Math.min(rate2, 1), why };
+}
+function fixTask(disputed) {
+  return [
+    "Another worker audited your answer above and disputed these claims:",
+    ...disputed.map((d) => `- ${d}`),
+    "",
+    "Check each one yourself against the files (the auditor can be wrong too). Then give your whole answer again,",
+    "corrected, in the same answer format: keep what holds, fix what does not, and add what was missing.",
+    "Under OPEN ISSUES, say which disputed claims you accepted and which you kept, and why."
+  ].join("\n");
 }
-sub=""; skip=""; after=""
-for a do
-  if [ -n "$sub" ]; then after="$after $a"; continue; fi
-  case "$skip" in
-    c) skip=""; case "$a" in [Aa][Ll][Ii][Aa][Ss].*) block "-c $a" ;; esac; continue ;;
-    v) skip=""; continue ;;
-  esac
-  case "$a" in
-    -c|--config-env) skip=c ;;
-    -C|--git-dir|--work-tree|--namespace|--super-prefix|--exec-path) skip=v ;;
-    -*) ;;
-    *) sub="$a" ;;
-  esac
-done
-[ -z "$sub" ] && exec "$real" "$@"
 
-# Resolve aliases (also those injected via GIT_CONFIG_* env); shell aliases are refused.
-depth=0
-while def=$("$real" config --get "alias.$sub" 2>/dev/null) && [ -n "$def" ]; do
-  depth=$((depth+1)); [ "$depth" -gt 5 ] && block "$sub (alias loop)"
-  case "$def" in '!'*) block "$sub (shell alias)" ;; -*) block "$sub (alias with options)" ;; esac
-  next=\${def%% *}
-  [ "$next" != "$def" ] && after=" \${def#* }$after"
-  sub="$next"
-done
+// src/core/rank.ts
+var MIN_RUNS = 5;
+var MIN_AUDITS = 3;
+function scoreOf(r) {
+  if (!r || r.runs < MIN_RUNS) return void 0;
+  const ok = Math.min(r.ok, r.runs) / r.runs;
+  return r.audited >= MIN_AUDITS ? ok * (r.agreed / r.audited) : ok;
+}
+var pct = (x) => `${Math.round(x * 100)}%`;
+function rankChain(chain, recordOf) {
+  const scored = chain.map((t, i) => ({ t, i, score: scoreOf(recordOf(t)) }));
+  const slots = scored.filter((s) => s.score !== void 0);
+  if (slots.length < 2) return { chain };
+  const ranked = [...slots].sort((a, b) => Math.round(b.score * 10) - Math.round(a.score * 10) || a.i - b.i);
+  const out = [...chain];
+  slots.forEach((slot, k) => out[slot.i] = ranked[k].t);
+  if (out[0] === chain[0]) return { chain: out };
+  const by = (t) => scored.find((s) => s.t === t).score;
+  return {
+    chain: out,
+    note: `ranked by record ("rankWorkers"): ${describeTarget(out[0])} (${pct(by(out[0]))}) goes before ${describeTarget(chain[0])} (${pct(by(chain[0]))})`
+  };
+}
 
-has() { for f in "$@"; do case " $after " in *" $f "*|*" $f="*) return 0 ;; esac; done; return 1; }
-count() { n=0; for w in $after; do case "$w" in -*) ;; *) n=$((n+1)) ;; esac; done; echo "$n"; }
+// src/core/receipt.ts
+import fs13 from "node:fs";
 
-case "$sub" in
-  commit|push|pull|reset|checkout|restore|clean|stash|rebase|merge|switch|cherry-pick|revert|am|\\
-  worktree|update-ref|update-index|filter-branch|filter-repo|gc|prune|replace|notes|add|rm|mv|\\
-  sparse-checkout|read-tree|commit-tree|write-tree|fast-import|bisect)
-    block "$sub" ;;
-  branch)
-    has -d -D --delete -m -M --move -c -C --copy -f --force -u --set-upstream-to --unset-upstream --edit-description && block "branch$after"
-    [ "$(count)" -gt 0 ] && ! has -l --list --contains --no-contains --merged --no-merged --points-at && block "branch$after" ;;
-  tag)
-    has -d --delete -a --annotate -s --sign -u --local-user -f --force -m --message -F --file && block "tag$after"
-    [ "$(count)" -gt 0 ] && ! has -l --list --contains --no-contains --merged --no-merged --points-at && block "tag$after" ;;
-  config)
-    has --unset --unset-all --add --replace-all --rename-section --remove-section -e --edit set unset rename-section remove-section edit && block "config$after"
-    [ "$(count)" -ge 2 ] && ! has get --get --get-all --get-regexp --get-urlmatch && block "config$after" ;;
-  remote)
-    for w in $after; do case "$w" in add|remove|rm|rename|set-url|set-head|set-branches|prune|update) block "remote $w" ;; esac; done ;;
-  fetch)
-    for w in $after; do case "$w" in -*) ;; *:*) block "fetch $w (writes a local ref)" ;; esac; done ;;
-  apply)
-    has --index --cached -3 --3way && block "apply$after" ;;
-  reflog)
-    has expire delete && block "reflog$after" ;;
-  symbolic-ref)
-    has -d --delete && block "symbolic-ref$after"
-    [ "$(count)" -ge 2 ] && block "symbolic-ref$after" ;;
-  submodule)
-    for w in $after; do case "$w" in -*) ;; status|summary) break ;; *) block "submodule $w" ;; esac; done ;;
-esac
-exec "$real" "$@"
-`;
-function shimDir() {
-  return path11.join(home(), "shim", `v${VERSION}`);
-}
-function findRealGit(skip) {
-  const same = (a, b) => WINDOWS ? a.toLowerCase() === b.toLowerCase() : a === b;
-  for (const dir of (process.env.PATH ?? "").split(path11.delimiter).filter(Boolean)) {
-    if (same(path11.resolve(dir), skip)) continue;
-    const p = path11.join(dir, WINDOWS ? "git.exe" : "git");
-    try {
-      fs11.accessSync(p, fs11.constants.X_OK);
-      if (fs11.statSync(p).isFile()) return p;
-    } catch {
+// src/core/prices.ts
+import fs12 from "node:fs";
+import path13 from "node:path";
+var RETRY_AFTER_FAILURE_MS = 60 * 6e4;
+var catalogFile = () => path13.join(home(), "prices.json");
+function trim(raw) {
+  const out = {};
+  if (!raw || typeof raw !== "object") return out;
+  for (const [provider, p] of Object.entries(raw)) {
+    for (const [id, m] of Object.entries(p?.models ?? {})) {
+      const c = m?.cost;
+      const ok = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0;
+      if (!c || !ok(c.input) || !ok(c.output)) continue;
+      out[`${provider}/${id}`] = [c.input, c.output, ok(c.cache_read) ? c.cache_read : c.input / 10];
     }
   }
-  return void 0;
+  return out;
 }
-function findGitSh(realGit) {
-  let dir = path11.dirname(realGit);
-  for (let i = 0; i < 4; i++) {
-    for (const rel of ["bin/sh.exe", "usr/bin/sh.exe"]) {
-      const p = path11.join(dir, rel);
-      if (fs11.existsSync(p)) return p;
+var cached2;
+function readCatalog() {
+  const file = catalogFile();
+  try {
+    const { mtimeMs } = fs12.statSync(file);
+    if (cached2?.file === file && cached2.mtimeMs === mtimeMs) return cached2.catalog;
+    const parsed = JSON.parse(fs12.readFileSync(file, "utf8"));
+    const catalog6 = parsed && typeof parsed.models === "object" && parsed.models && Number.isFinite(Date.parse(parsed.fetchedAt)) ? parsed : void 0;
+    cached2 = { file, mtimeMs, catalog: catalog6 };
+    return catalog6;
+  } catch {
+    return void 0;
+  }
+}
+var OWN = { codex: ["openai"], claude: ["anthropic"], gemini: ["google"] };
+function catalogPrice(backend, ...models) {
+  const catalog6 = readCatalog();
+  if (!catalog6) return void 0;
+  for (const raw of models) {
+    const id = raw?.split("#")[0];
+    if (!id) continue;
+    const keys = [id, ...[...OWN[backend] ?? [], "anthropic", "openai", "google"].map((p) => `${p}/${id}`)];
+    const any = keys.find((k) => catalog6.models[k]) ?? Object.keys(catalog6.models).filter((k) => k.endsWith(`/${id}`)).sort()[0];
+    const triple = any ? catalog6.models[any] : void 0;
+    if (any && triple && triple.length === 3 && triple.every((n) => Number.isFinite(n) && n >= 0)) {
+      const [input, output, cachedInput] = triple;
+      return { input, output, cachedInput, key: any };
     }
-    const up = path11.dirname(dir);
-    if (up === dir) break;
-    dir = up;
   }
   return void 0;
 }
-var cmdShim = (sh) => `@echo off\r
-set "MSYS2_ARG_CONV_EXCL=*"\r
-"${sh}" "%~dp0git" %*\r
-exit /b %errorlevel%\r
-`;
-var HOOK_VERSION = 1;
-var REF_HOOK = `#!/bin/sh
-# pitroom git guard (layer 2, v${HOOK_VERSION}): refuse ref updates made by workers.
-[ "$1" = prepared ] || exit 0
-echo "pitroom: git ref updates (commit, reset, branch, tag, stash, rebase, merge) are blocked for workers" >&2
-exit 1
-`;
-var hooksDir = () => path11.join(home(), "git-hooks", `v${HOOK_VERSION}`);
-function writeIfChanged(file, content) {
-  if (fs11.existsSync(file) && fs11.readFileSync(file, "utf8") === content) return;
-  fs11.mkdirSync(path11.dirname(file), { recursive: true });
-  const tmp = `${file}.${process.pid}.tmp`;
-  fs11.writeFileSync(tmp, content, { mode: 493 });
-  renameOver(tmp, file);
-}
-function pathKey(env) {
-  const keys = Object.keys(env).filter((k) => k.toLowerCase() === "path");
-  return keys.includes("PATH") ? "PATH" : keys[0] ?? "PATH";
-}
-function onePath(env) {
-  const key = pathKey(env);
-  const out = { ...env };
-  for (const k of Object.keys(out)) if (k !== key && k.toLowerCase() === "path") delete out[k];
-  return out;
-}
-function withGitConfig(env, entries) {
-  const out = { ...env };
-  let n = Number(env.GIT_CONFIG_COUNT) || 0;
-  for (const [key, value] of entries) {
-    out[`GIT_CONFIG_KEY_${n}`] = key;
-    out[`GIT_CONFIG_VALUE_${n}`] = value;
-    n++;
-  }
-  out.GIT_CONFIG_COUNT = String(n);
-  return out;
-}
-function guardEnv(env) {
-  const quiet = {
-    GIT_TERMINAL_PROMPT: "0",
-    GIT_EDITOR: "true",
-    GIT_SEQUENCE_EDITOR: "true",
-    GIT_PAGER: "cat",
-    PAGER: "cat"
-  };
-  writeIfChanged(path11.join(hooksDir(), "reference-transaction"), REF_HOOK);
-  env = withGitConfig(onePath(env), [
-    ["core.hooksPath", fwd(hooksDir())],
-    ["url.pitroom-push-blocked://.pushInsteadOf", ""]
-  ]);
-  const dir = shimDir();
-  const real = findRealGit(dir);
-  if (!real) return { ...env, ...quiet };
-  let sh;
-  if (WINDOWS) {
-    sh = findGitSh(real);
-    if (!sh) return { ...env, ...quiet };
-    writeIfChanged(path11.join(dir, "git.cmd"), cmdShim(sh));
-  }
-  writeIfChanged(path11.join(dir, "git"), SHIM);
-  const key = pathKey(env);
-  return { ...env, ...quiet, PITROOM_REAL_GIT: fwd(real), [key]: `${dir}${path11.delimiter}${env[key] ?? ""}` };
-}
-function shimReady() {
-  const env = guardEnv({ ...process.env });
-  return Boolean(env[pathKey(env)]?.startsWith(shimDir()));
-}
 
-// src/core/slots.ts
-import crypto2 from "node:crypto";
-import fs12 from "node:fs";
-import path12 from "node:path";
-var slotsDir = () => path12.join(home(), "slots");
-var locksDir = () => path12.join(home(), "locks");
-var STARTUP_GRACE_MS = 3e4;
-function holderActive(runId, self) {
-  if (!runId || runId === self) return false;
-  try {
-    const m = freshMeta(runId);
-    if (!isActive(m.state)) return false;
-    if (m.pid) return isAlive(m.pid);
-    return Date.now() - Date.parse(m.startedAt) < STARTUP_GRACE_MS;
-  } catch {
-    return false;
-  }
-}
-function tryClaim(file, runId) {
-  fs12.mkdirSync(path12.dirname(file), { recursive: true });
-  try {
-    fs12.writeFileSync(file, runId, { flag: "wx" });
-    return true;
-  } catch (e) {
-    if (e.code !== "EEXIST") throw e;
-  }
-  let owner = "";
-  try {
-    owner = fs12.readFileSync(file, "utf8").trim();
-  } catch {
-  }
-  if (owner === runId) return true;
-  if (holderActive(owner, runId)) return false;
-  fs12.rmSync(file, { force: true });
-  try {
-    fs12.writeFileSync(file, runId, { flag: "wx" });
-    return true;
-  } catch {
-    return false;
+// src/core/receipt.ts
+var PRESETS = {
+  sonnet: { name: "Claude Sonnet", input: 3, output: 15, cachedInput: 0.3 },
+  opus: { name: "Claude Opus", input: 5, output: 25, cachedInput: 0.5 },
+  haiku: { name: "Claude Haiku", input: 1, output: 5, cachedInput: 0.1 },
+  "gpt-5": { name: "GPT-5", input: 1.25, output: 10, cachedInput: 0.125 }
+};
+function primaryPrice() {
+  const eff = effective();
+  const custom = eff.price.value?.split(",").map(Number);
+  if (custom && custom.length >= 2 && custom.every((n) => Number.isFinite(n) && n >= 0)) {
+    return { name: "custom", input: custom[0], output: custom[1], cachedInput: custom[2] ?? custom[0] / 10 };
   }
+  const named = eff.primary.value;
+  const preset = PRESETS[named.toLowerCase()];
+  if (preset) return preset;
+  const c = eff.priceFeed.value ? catalogPrice("", named) : void 0;
+  return c ? { name: named, source: "catalog", input: c.input, output: c.output, cachedInput: c.cachedInput } : PRESETS.sonnet;
 }
-function releaseIfOwner(file, runId) {
-  if (!file) return;
-  try {
-    if (fs12.readFileSync(file, "utf8").trim() === runId) fs12.rmSync(file, { force: true });
-  } catch {
-  }
+var estimateTokens = (text) => Math.ceil(text.length / 4);
+function parsePriceSpec(spec, name = "worker") {
+  const parts = typeof spec === "string" ? spec.split(",").map((x) => Number(x.trim())) : [];
+  if (parts.length < 2 || parts.length > 3 || !parts.every((n) => Number.isFinite(n) && n >= 0)) return void 0;
+  return { name, source: "config", input: parts[0], output: parts[1], cachedInput: parts[2] ?? parts[0] / 10 };
 }
-function tryAcquireSlot(runId, maxParallel) {
-  for (let n = 0; n < Math.max(1, maxParallel); n++) {
-    const file = path12.join(slotsDir(), `slot-${n}`);
-    if (tryClaim(file, runId)) return file;
-  }
-  return void 0;
+var costAt = (usage, price) => (usage.input * price.input + usage.cacheRead * price.cachedInput + (usage.output + usage.reasoning) * price.output) / 1e6;
+var workerCostOf = (usage) => usage?.cost ?? usage?.costEstimate;
+function savedUsd(usage, returnedTokens, price = primaryPrice()) {
+  const readingTheReport = returnedTokens * price.input / 1e6;
+  return Math.max(0, costAt(usage, price) - (workerCostOf(usage) ?? 0) - readingTheReport);
 }
-var releaseSlot = (file, runId) => releaseIfOwner(file, runId);
-function slotHolders() {
-  if (!fs12.existsSync(slotsDir())) return [];
-  return fs12.readdirSync(slotsDir()).map((f) => {
+function readLedger(sinceMs) {
+  if (!fs13.existsSync(ledgerFile())) return [];
+  return fs13.readFileSync(ledgerFile(), "utf8").split("\n").filter(Boolean).flatMap((l) => {
     try {
-      return fs12.readFileSync(path12.join(slotsDir(), f), "utf8").trim();
+      return [JSON.parse(l)];
     } catch {
-      return "";
+      return [];
     }
-  }).filter((id) => holderActive(id, ""));
-}
-var lockFile = (repoRoot) => path12.join(locksDir(), `write-${crypto2.createHash("sha1").update(path12.resolve(repoRoot)).digest("hex").slice(0, 16)}`);
-function acquireWriteLock(repoRoot, runId) {
-  const file = lockFile(repoRoot);
-  if (tryClaim(file, runId)) return;
-  let owner = "";
-  try {
-    owner = fs12.readFileSync(file, "utf8").trim();
-  } catch {
-  }
-  throw new UserError(`another --write run (${owner}) is active in this repo; use --isolate for parallel changes`, 3);
+  }).filter((e) => !sinceMs || Date.parse(e.at) >= sinceMs);
 }
-var releaseWriteLock = (repoRoot, runId) => releaseIfOwner(lockFile(repoRoot), runId);
-
-// src/core/secrets.ts
-import { execFileSync } from "node:child_process";
-import fs13 from "node:fs";
-import path13 from "node:path";
-var SKIP_DIRS2 = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", "out", ".next", "target", "vendor", ".venv", "venv", "__pycache__", "coverage", ".turbo", ".cache"]);
-var MAX_VISITED = 2e4;
-var MAX_DEPTH = 4;
-var TEMPLATE = /\.(example|sample|template|dist|defaults?|tpl)$/i;
-function looksSecret(file) {
-  const name = file.toLowerCase();
-  if (TEMPLATE.test(name)) return false;
-  if (name === ".env" || name.startsWith(".env.") || name.endsWith(".env")) return true;
-  return /\.(pem|p12|pfx|key|jks|keystore)$/.test(name) || /^id_(rsa|dsa|ecdsa|ed25519)$/.test(name) || name === ".netrc" || name === "credentials.json" || /^secrets?\.(json|ya?ml|toml)$/.test(name);
+function totals(entries) {
+  const t = entries.reduce(
+    (a, e) => ({
+      runs: a.runs + 1,
+      tokens: a.tokens + e.tokens,
+      returned: a.returned + e.returned,
+      workerCost: a.workerCost + e.workerCost,
+      saved: a.saved + e.saved
+    }),
+    { runs: 0, tokens: 0, returned: 0, workerCost: 0, saved: 0 }
+  );
+  return { ...t, ratio: t.returned ? t.tokens / t.returned : 0 };
 }
-function findSecretFiles(dir) {
-  const found = [];
-  let visited = 0;
-  const walk = (d, depth) => {
-    if (depth > MAX_DEPTH || visited > MAX_VISITED) return;
-    let entries;
-    try {
-      entries = fs13.readdirSync(d, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    for (const e of entries) {
-      visited++;
-      if (e.isDirectory()) {
-        if (!SKIP_DIRS2.has(e.name)) walk(path13.join(d, e.name), depth + 1);
-      } else if (e.isFile() && looksSecret(e.name)) {
-        found.push(slash(path13.relative(dir, path13.join(d, e.name))));
-      }
-    }
-  };
-  walk(dir, 0);
-  return found.sort();
+var usd = (n) => n >= 100 ? `$${n.toFixed(0)}` : n >= 1 ? `$${n.toFixed(2)}` : `$${n.toFixed(3)}`;
+function compact(n) {
+  const fmt = (v) => v.toFixed(v >= 100 ? 0 : 1).replace(/\.0$/, "");
+  if (n >= 1e6) return `${fmt(n / 1e6)}M`;
+  if (n >= 1e3) return `${fmt(n / 1e3)}k`;
+  return String(Math.round(n));
 }
-function findSecretFilesInTree(root, dir) {
-  try {
-    const out = execFileSync("git", ["-C", root, "ls-files", "-z", "--cached", "--others", "--exclude-standard"], { encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
-    return out.split("\0").filter((f) => f && looksSecret(path13.basename(f)) && !path13.relative(dir, path13.join(root, f)).startsWith("..")).map((f) => slash(path13.relative(dir, path13.join(root, f)))).sort();
-  } catch {
-    return [];
-  }
+function badgeUrl(t) {
+  const msg = encodeURIComponent(`saved ${usd(t.saved)} \xB7 ${compact(t.tokens)} tokens offloaded`).replace(/-/g, "--");
+  return `https://img.shields.io/badge/pitroom-${msg}-7c3aed`;
 }
-function secretWarning(files, mode) {
-  if (!files.length) return void 0;
-  const shown = files.slice(0, 3).join(", ") + (files.length > 3 ? `, +${files.length - 3} more` : "");
-  const where = mode === "isolate" ? "would be copied into the isolated copy" : "sit in the directory the worker runs in";
-  const fix = mode === "isolate" ? "add them to .gitignore, or" : "use an isolated copy (-i, git-ignored files are left out) or a clean checkout, or";
-  return `secret-looking files ${where} (${shown}): the worker is told not to read them, but nothing stops it, and its model may be hosted by a third party; ${fix} set PITROOM_NO_SECRET_WARNING=1 to silence this`;
+var esc = (s) => s.replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
+function card(t, period) {
+  const W = 720, H = 316, M = 32, GAP = 12;
+  const tile = (i, value, label) => {
+    const w = (W - 2 * M - 2 * GAP) / 3, x = M + i * (w + GAP);
+    return `<rect x="${x}" y="196" width="${w}" height="72" rx="14" fill="#fff" fill-opacity=".035" stroke="#fff" stroke-opacity=".1"/>
+<text x="${x + 18}" y="224" class="lab">${esc(label.toUpperCase())}</text><text x="${x + 18}" y="254" class="val">${esc(value)}</text>`;
+  };
+  const when = period.toUpperCase();
+  const pill = 22 + when.length * 7.4;
+  return `<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" viewBox="0 0 ${W} ${H}" role="img" aria-label="pitroom saved ${esc(usd(t.saved))}">
+<style>
+text{font-family:ui-sans-serif,-apple-system,"Segoe UI",Inter,Helvetica,Arial,sans-serif;fill:#f4f4f5}
+.name{font-size:20px;font-weight:650;letter-spacing:-.01em}
+.sub{font-size:12.5px;fill:#a1a1aa}
+.pill{font-size:11px;font-weight:600;letter-spacing:.1em;fill:#a1a1aa}
+.lab{font-size:11px;font-weight:500;letter-spacing:.09em;fill:#a1a1aa}
+.big{font-size:60px;font-weight:700;letter-spacing:-.03em;fill:#3ddc97}
+.val{font-size:26px;font-weight:650;letter-spacing:-.02em}
+.foot{font-size:11.5px;fill:#71717a}
+</style>
+<defs>
+<radialGradient id="o" cx="1" cy="0" r=".7"><stop offset="0" stop-color="#ff6a2b" stop-opacity=".24"/><stop offset="1" stop-color="#ff6a2b" stop-opacity="0"/></radialGradient>
+<radialGradient id="b" cx="0" cy="0" r=".7"><stop offset="0" stop-color="#38bdf8" stop-opacity=".16"/><stop offset="1" stop-color="#38bdf8" stop-opacity="0"/></radialGradient>
+<linearGradient id="m" x1="0" y1="0" x2="1" y2="1"><stop offset="0" stop-color="#ff6a2b"/><stop offset="1" stop-color="#ffa86b"/></linearGradient>
+<clipPath id="c"><rect width="${W}" height="${H}" rx="20"/></clipPath>
+</defs>
+<g clip-path="url(#c)"><rect width="${W}" height="${H}" fill="#0b0b0f"/><rect width="${W}" height="${H}" fill="url(#o)"/><rect width="${W}" height="${H}" fill="url(#b)"/></g>
+<rect x=".5" y=".5" width="${W - 1}" height="${H - 1}" rx="19.5" fill="none" stroke="#fff" stroke-opacity=".1"/>
+<rect x="${M}" y="28" width="38" height="38" rx="11" fill="url(#m)"/>
+<path d="M4 4h4v4H4zm8 0h4v4h-4zM8 8h4v4H8zm8 0h4v4h-4zM4 12h4v4H4zm8 0h4v4h-4zm-4 4h4v4H8zm8 0h4v4h-4z" fill="#fff" transform="translate(${M + 7} 35) scale(1)"/>
+<text x="${M + 52}" y="45" class="name">Pitroom</text><text x="${M + 52}" y="63" class="sub">Your agent's pit crew</text>
+<rect x="${W - M - pill}" y="34" width="${pill}" height="26" rx="13" fill="#fff" fill-opacity=".04" stroke="#fff" stroke-opacity=".14"/>
+<text x="${W - M - pill / 2}" y="51" class="pill" text-anchor="middle">${esc(when)}</text>
+<text x="${M}" y="112" class="lab">SAVED ON YOUR MAIN CODING AGENT</text>
+<text x="${M}" y="168" class="big">${esc(usd(t.saved))}</text>
+${tile(0, compact(t.tokens), "Tokens offloaded")}${tile(1, t.ratio ? `${Math.round(t.ratio)}\xD7` : "\u2014", "Context compression")}${tile(2, String(t.runs), "Delegated tasks")}
+<text x="${M}" y="296" class="foot">Estimated against ${esc(primaryPrice().name)} pricing \xB7 npx pitroom</text>
+</svg>
+`;
 }
-var slash = (p) => p.split(path13.sep).join("/");
 
-// src/core/receipt.ts
-import fs16 from "node:fs";
+// src/core/ui.ts
+var WEEK_MS = 7 * 24 * 3600 * 1e3;
 
-// src/core/config.ts
+// src/core/plan.ts
 import fs14 from "node:fs";
-import os7 from "node:os";
 import path14 from "node:path";
-var SCHEMA = {
-  worker: "string",
-  fallback: "string[]",
-  timeout: "string",
-  primary: "string",
-  price: "string",
-  link: "string[]",
-  web: "boolean",
-  maxParallel: "number",
-  models: "record",
-  tiers: "record",
-  costs: "numbers",
-  audit: "number",
-  readIn: "string",
-  cacheDays: "number",
-  countRateLimits: "boolean",
-  mcpDash: "boolean",
-  notify: "boolean",
-  notifyCommand: "string",
-  notifyAfter: "number",
-  workerPrices: "record",
-  priceFeed: "boolean",
-  priceFeedUrl: "string",
-  priceFeedHours: "number"
+var FENCE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
+var RULE = /^ {0,3}([-*_])(\s*\1){2,}\s*$/;
+function structure(lines) {
+  const headings = [];
+  const rules = [];
+  const fenced = [];
+  let open;
+  lines.forEach((l, i) => {
+    const f = FENCE.exec(l);
+    if (f) {
+      fenced[i] = true;
+      const mark = f[1];
+      if (!open) open = mark;
+      else if (mark[0] === open[0] && mark.length >= open.length && !f[2].trim()) open = void 0;
+      return;
+    }
+    fenced[i] = !!open;
+    if (open) return;
+    const h = /^ {0,3}(#{1,6})\s+(.*?)\s*#*\s*$/.exec(l);
+    if (h) headings.push({ line: i, level: h[1].length, text: h[2] });
+    else if (RULE.test(l)) rules.push(i);
+  });
+  return { headings, rules, fenced };
+}
+function parsePlan(text, file = "") {
+  const lines = text.replace(/\r\n?/g, "\n").split("\n");
+  const { headings, rules, fenced } = structure(lines);
+  const after = (line) => Math.min(headings.find((h) => h.line > line)?.line ?? lines.length, rules.find((r) => r > line) ?? lines.length);
+  const titleHeading = headings.find((h) => h.level === 1);
+  const start = titleHeading ? titleHeading.line + 1 : 0;
+  const header = lines.slice(start, after(start - 1)).filter((l) => !/^\s*>/.test(l)).join("\n").trim();
+  const gc = headings.find((h) => /^global constraints\b/i.test(h.text));
+  const constraints = gc ? lines.slice(gc.line + 1, after(gc.line)).join("\n").trim() : "";
+  const tasks = [];
+  for (const h of headings) {
+    const m = /^Task\s+(\d+)\b\s*[:.)\-–—]?\s*(.*)$/i.exec(h.text);
+    if (!m) continue;
+    const end = headings.find((o) => o.line > h.line && o.level <= h.level)?.line ?? lines.length;
+    const body = lines.slice(h.line, end).join("\n").replace(/(\n\s*(?:---|\*\*\*|___)\s*)+$/, "").trimEnd();
+    const unfenced = lines.slice(h.line, end).filter((_, j) => !fenced[h.line + j]).join("\n");
+    const tier = /^\s*[-*]?\s*\*\*Worker:\*\*\s*`?([\w-]+)`?/m.exec(unfenced)?.[1]?.toLowerCase();
+    tasks.push({ step: Number(m[1]), title: m[2].trim(), text: body, ...tier ? { tier } : {} });
+  }
+  return { file, title: titleHeading?.text ?? "", header, constraints, tasks };
+}
+function loadPlan(file) {
+  const abs = path14.resolve(file);
+  if (!fs14.existsSync(abs) || !fs14.statSync(abs).isFile()) throw new UserError(`plan not found: ${file}`);
+  const plan = parsePlan(fs14.readFileSync(abs, "utf8"), fs14.realpathSync(abs));
+  if (!plan.tasks.length) throw new UserError(`${file} has no "Task N" headings (see pitroom-writing-plans)`);
+  return plan;
+}
+function planTask(plan, step) {
+  const t = plan.tasks.find((x) => x.step === step);
+  if (!t) throw new UserError(`no Task ${step} in ${plan.file}; it has ${plan.tasks.map((x) => `Task ${x.step}`).join(", ")}`);
+  return t;
+}
+function brief(plan, task) {
+  return `${[
+    `# ${plan.title || planName(plan.file)}`,
+    plan.header,
+    "## Global Constraints",
+    plan.constraints || "(none stated in the plan)",
+    task.text
+  ].filter(Boolean).join("\n\n")}
+`;
+}
+var planName = (file) => path14.basename(file).replace(/\.md$/i, "");
+
+// src/core/style.ts
+var enabled = () => {
+  if (process.env.NO_COLOR) return false;
+  if (process.env.FORCE_COLOR && process.env.FORCE_COLOR !== "0") return true;
+  return !!process.stdout.isTTY && process.env.TERM !== "dumb";
 };
-function configPath() {
-  if (process.env.PITROOM_CONFIG) return path14.resolve(process.env.PITROOM_CONFIG);
-  const base = process.platform === "win32" ? process.env.APPDATA ?? path14.join(os7.homedir(), "AppData", "Roaming") : process.env.XDG_CONFIG_HOME ?? path14.join(os7.homedir(), ".config");
-  return path14.join(base, "pitroom", "config.json");
+var wrap = (open, close) => (text) => enabled() ? `\x1B[${open}m${text}\x1B[${close}m` : text;
+var bold = wrap(1, 22);
+var dim = wrap(2, 22);
+var red = wrap(31, 39);
+var green = wrap(32, 39);
+var yellow = wrap(33, 39);
+var blue = wrap(34, 39);
+var cyan = wrap(36, 39);
+
+// src/core/group.ts
+var retryShell = (platform = process.platform) => platform === "win32" ? "powershell" : "sh";
+var quoteFor = (shell) => (s) => /^[\w./:@=\\-]+$/.test(s) && !(shell === "sh" && s.includes("\\")) ? s : shell === "sh" ? `'${s.replace(/'/g, `'\\''`)}'` : `'${s.replace(/'/g, "''")}'`;
+function retryCommands(metas, shell = retryShell()) {
+  const quote = quoteFor(shell);
+  return metas.filter((m) => ["failed", "timeout", "stopped"].includes(m.state) && !m.auditOf && !m.reviewOf && !m.parent && !m.fixOf).map((m) => {
+    const where = ["-d", quote(m.dir), ...m.group ? ["-g", quote(m.group)] : []];
+    if (m.plan) return ["pitroom run", m.mode === "write" ? "-w" : "-i", "--plan", quote(m.plan.file), "--step", String(m.plan.step), ...where, "--bg"].join(" ");
+    const mode = m.mode === "isolate" ? ["-i"] : m.mode === "write" ? ["-w"] : [];
+    const end = shell === "sh" || m.task.startsWith("-") ? ["--"] : [];
+    return ["pitroom run", ...mode, ...where, "--bg", ...end, quote(m.task)].join(" ");
+  });
 }
-var cached;
-function loadConfig() {
-  if (cached) return cached;
-  const file = configPath();
-  const config = {};
-  const warnings = [];
-  if (fs14.existsSync(file)) {
-    let raw;
-    try {
-      raw = JSON.parse(fs14.readFileSync(file, "utf8"));
-    } catch (e) {
-      warnings.push(`${file}: invalid JSON (${e.message}); ignored`);
+
+// src/core/eval.ts
+import { spawnSync as spawnSync7 } from "node:child_process";
+import fs15 from "node:fs";
+var KINDS = ["definition", "count", "set"];
+function loadEval(file) {
+  let raw;
+  try {
+    raw = JSON.parse(fs15.readFileSync(file, "utf8"));
+  } catch (e) {
+    throw new UserError(`cannot read ${file}: ${e.message}`);
+  }
+  const list2 = raw?.questions;
+  if (!Array.isArray(list2) || !list2.length) throw new UserError(`${file}: expected {"questions": [{"id", "task", "kind", "truth"}, \u2026]}`);
+  const ids = /* @__PURE__ */ new Set();
+  return list2.map((q, i) => {
+    const where = `${file}: question ${i + 1}`;
+    if (!q || typeof q !== "object") throw new UserError(`${where} is not an object`);
+    const id = typeof q.id === "string" && q.id.trim() ? q.id.trim() : `q${i + 1}`;
+    if (ids.has(id)) throw new UserError(`${where}: the id "${id}" is used twice`);
+    ids.add(id);
+    if (typeof q.task !== "string" || !q.task.trim()) throw new UserError(`${where} (${id}) has no task`);
+    if (!KINDS.includes(q.kind)) throw new UserError(`${where} (${id}): kind must be one of ${KINDS.join(", ")}`);
+    const t = q.truth;
+    const grep = t && typeof t === "object" && !Array.isArray(t) && typeof t.grep === "string" && t.grep;
+    const literal = q.kind === "definition" && typeof t === "string" && /:\d+$/.test(t) || q.kind === "count" && typeof t === "number" && Number.isInteger(t) && t >= 0 || q.kind === "set" && Array.isArray(t) && t.every((s) => typeof s === "string");
+    if (!grep && !literal) {
+      const want = { definition: '"path:line"', count: "a whole number", set: "a list of paths" }[q.kind];
+      throw new UserError(`${where} (${id}): truth must be ${want} or {"grep": "pattern", \u2026}`);
     }
-    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
-      for (const [key, value] of Object.entries(raw)) {
-        const type = SCHEMA[key];
-        if (!type) {
-          warnings.push(`${file}: unknown key "${key}" ignored`);
-        } else if (matches(value, type)) {
-          config[key] = value;
-        } else {
-          warnings.push(`${file}: "${key}" must be ${type}; ignored`);
-        }
-      }
+    return { id, task: q.task.trim(), kind: q.kind, truth: t };
+  });
+}
+var clean = (p) => p.replace(/\\/g, "/").replace(/^\.?\//, "");
+function gitGrep(root, flags, t) {
+  const r = spawnSync7("git", ["-C", root, "grep", ...flags, t.regex ? "-E" : "-F", ...t.word ? ["-w"] : [], "-e", t.grep, "--", t.dir ?? "."], {
+    encoding: "utf8",
+    maxBuffer: 64 * 1024 * 1024
+  });
+  if (r.status === 1) return [];
+  if (r.status !== 0) throw new UserError(`git grep "${t.grep}" failed: ${(r.stderr || r.error?.message || "").trim()}`);
+  const exclude = t.exclude ? new RegExp(t.exclude) : void 0;
+  return r.stdout.split("\n").filter(Boolean).filter((l) => !exclude?.test(l.split(":")[0]));
+}
+function truthOf(q, root) {
+  const t = q.truth;
+  if (t && typeof t === "object" && !Array.isArray(t)) {
+    if (!root) throw new UserError(`question ${q.id}: a "grep" truth needs a git repository`);
+    if (q.kind === "definition") {
+      const hit = gitGrep(root, ["-n"], t).map((l) => /^(.*?):(\d+):/.exec(l)).find(Boolean);
+      if (!hit) throw new UserError(`question ${q.id}: git grep found no definition for "${t.grep}"`);
+      return { path: clean(hit[1]), line: Number(hit[2]) };
     }
-  }
-  cached = { config, warnings };
-  return cached;
+    const files = [...new Set(gitGrep(root, ["-l"], t).map(clean))];
+    return q.kind === "count" ? { count: files.length } : { files };
+  }
+  if (q.kind === "definition") {
+    const m = /^(.*):(\d+)$/.exec(t);
+    return { path: clean(m[1]), line: Number(m[2]) };
+  }
+  if (q.kind === "count") return { count: t };
+  return { files: [...new Set(t.map(clean))] };
+}
+function answerParts(answer) {
+  const text = answer.replace(/`/g, "");
+  const s = /SUMMARY:\s*([\s\S]*?)(?=^\s*(?:DETAILS|FILES CHANGED|VERIFICATION|OPEN ISSUES):|$(?![\s\S]))/m.exec(text);
+  const d = /^\s*DETAILS:\s*([\s\S]*?)(?=^\s*(?:FILES CHANGED|VERIFICATION|OPEN ISSUES):|$(?![\s\S]))/m.exec(text);
+  const summary = s ? s[1] : text.split(/^\s*(?:DETAILS|FILES CHANGED|VERIFICATION|OPEN ISSUES):/m)[0];
+  return { summary: summary.trim(), details: (d?.[1] ?? "").trim() };
+}
+function pathsIn(text) {
+  const found = text.replace(/\\/g, "/").match(/[A-Za-z0-9_.@\-/]+\.[A-Za-z0-9]{1,8}(?::\d+)?/g) ?? [];
+  return [...new Set(found.map((p) => clean(p.replace(/:\d+$/, ""))))];
+}
+function scoreAnswer(q, truth, answer, root) {
+  const prefix = root ? `${clean(root).replace(/\/$/, "")}/` : "";
+  const text = prefix ? answer.replace(/\\/g, "/").split(prefix).join("") : answer;
+  const { summary, details } = answerParts(text);
+  if (!summary && !details) return { score: 0, got: "(no answer)" };
+  if ("line" in truth) {
+    const flat = summary.replace(/\s+/g, " ");
+    if (new RegExp(`(^|[^\\w./-])\\.?/?${escape2(truth.path)}:${truth.line}(?!\\d)`).test(flat)) return { score: 1, got: `${truth.path}:${truth.line}` };
+    const named = pathsIn(flat).includes(truth.path);
+    return { score: named ? 0.5 : 0, got: flat.slice(0, 120) };
+  }
+  if ("count" in truth) {
+    const n = /\d[\d,]*/.exec(summary);
+    const got2 = n ? Number(n[0].replace(/,/g, "")) : void 0;
+    return { score: got2 === truth.count ? 1 : 0, got: got2 === void 0 ? "(no number)" : String(got2) };
+  }
+  let got = pathsIn(summary);
+  if (!got.length) got = pathsIn(details);
+  const hit = got.filter((p) => truth.files.includes(p)).length;
+  const precision = got.length ? hit / got.length : 0;
+  const recall = truth.files.length ? hit / truth.files.length : got.length ? 0 : 1;
+  const f1 = precision + recall ? 2 * precision * recall / (precision + recall) : 0;
+  return { score: !truth.files.length && !got.length ? 1 : f1, got: `${hit}/${truth.files.length} found, ${got.length - hit} extra` };
+}
+var escape2 = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+var mean = (a) => a.length ? a.reduce((x, y) => x + y, 0) / a.length : 0;
+var median = (a) => {
+  const s = a.filter((x) => x !== void 0).sort((x, y) => x - y);
+  return s.length ? s[Math.floor(s.length / 2)] : void 0;
+};
+function summarize(rows) {
+  const by = /* @__PURE__ */ new Map();
+  for (const r of rows) by.set(r.worker, [...by.get(r.worker) ?? [], r]);
+  return [...by.entries()].map(([worker, rs]) => ({
+    worker,
+    questions: rs.length,
+    failed: rs.filter((r) => r.state !== "done").length,
+    score: mean(rs.map((r) => r.score)),
+    byKind: Object.fromEntries(KINDS.filter((k) => rs.some((r) => r.kind === k)).map((k) => [k, mean(rs.filter((r) => r.kind === k).map((r) => r.score))])),
+    medianSeconds: median(rs.map((r) => r.seconds)),
+    medianTokens: median(rs.map((r) => r.tokens))
+  })).sort((a, b) => b.score - a.score || (a.medianSeconds ?? 1e9) - (b.medianSeconds ?? 1e9));
 }
-function matches(v, type) {
-  if (type === "string[]") return Array.isArray(v) && v.every((s) => typeof s === "string");
-  if (type === "record") {
-    return typeof v === "object" && v !== null && !Array.isArray(v) && Object.values(v).every((s) => typeof s === "string");
+
+// src/vcs/guard.ts
+import fs16 from "node:fs";
+import path15 from "node:path";
+var VERSION = 2;
+var WINDOWS = process.platform === "win32";
+var fwd = (p) => WINDOWS ? p.replace(/\\/g, "/") : p;
+var SHIM = `#!/bin/sh
+# pitroom git guard v${VERSION}. Blocks git commands that change history, refs, the
+# index or discard work. The primary agent reviews and commits, not the worker.
+set -f
+real="\${PITROOM_REAL_GIT:-}"
+if [ -z "$real" ] || [ ! -x "$real" ]; then
+  echo "pitroom: git guard cannot find the real git" >&2
+  exit 127
+fi
+block() {
+  echo "pitroom: 'git $1' is blocked for workers (the primary agent reviews and commits)" >&2
+  exit 1
+}
+sub=""; skip=""; after=""
+for a do
+  if [ -n "$sub" ]; then after="$after $a"; continue; fi
+  case "$skip" in
+    c) skip=""; case "$a" in [Aa][Ll][Ii][Aa][Ss].*) block "-c $a" ;; esac; continue ;;
+    v) skip=""; continue ;;
+  esac
+  case "$a" in
+    -c|--config-env) skip=c ;;
+    -C|--git-dir|--work-tree|--namespace|--super-prefix|--exec-path) skip=v ;;
+    -*) ;;
+    *) sub="$a" ;;
+  esac
+done
+[ -z "$sub" ] && exec "$real" "$@"
+
+# Resolve aliases (also those injected via GIT_CONFIG_* env); shell aliases are refused.
+depth=0
+while def=$("$real" config --get "alias.$sub" 2>/dev/null) && [ -n "$def" ]; do
+  depth=$((depth+1)); [ "$depth" -gt 5 ] && block "$sub (alias loop)"
+  case "$def" in '!'*) block "$sub (shell alias)" ;; -*) block "$sub (alias with options)" ;; esac
+  next=\${def%% *}
+  [ "$next" != "$def" ] && after=" \${def#* }$after"
+  sub="$next"
+done
+
+has() { for f in "$@"; do case " $after " in *" $f "*|*" $f="*) return 0 ;; esac; done; return 1; }
+count() { n=0; for w in $after; do case "$w" in -*) ;; *) n=$((n+1)) ;; esac; done; echo "$n"; }
+
+case "$sub" in
+  commit|push|pull|reset|checkout|restore|clean|stash|rebase|merge|switch|cherry-pick|revert|am|\\
+  worktree|update-ref|update-index|filter-branch|filter-repo|gc|prune|replace|notes|add|rm|mv|\\
+  sparse-checkout|read-tree|commit-tree|write-tree|fast-import|bisect)
+    block "$sub" ;;
+  branch)
+    has -d -D --delete -m -M --move -c -C --copy -f --force -u --set-upstream-to --unset-upstream --edit-description && block "branch$after"
+    [ "$(count)" -gt 0 ] && ! has -l --list --contains --no-contains --merged --no-merged --points-at && block "branch$after" ;;
+  tag)
+    has -d --delete -a --annotate -s --sign -u --local-user -f --force -m --message -F --file && block "tag$after"
+    [ "$(count)" -gt 0 ] && ! has -l --list --contains --no-contains --merged --no-merged --points-at && block "tag$after" ;;
+  config)
+    has --unset --unset-all --add --replace-all --rename-section --remove-section -e --edit set unset rename-section remove-section edit && block "config$after"
+    [ "$(count)" -ge 2 ] && ! has get --get --get-all --get-regexp --get-urlmatch && block "config$after" ;;
+  remote)
+    for w in $after; do case "$w" in add|remove|rm|rename|set-url|set-head|set-branches|prune|update) block "remote $w" ;; esac; done ;;
+  fetch)
+    for w in $after; do case "$w" in -*) ;; *:*) block "fetch $w (writes a local ref)" ;; esac; done ;;
+  apply)
+    has --index --cached -3 --3way && block "apply$after" ;;
+  reflog)
+    has expire delete && block "reflog$after" ;;
+  symbolic-ref)
+    has -d --delete && block "symbolic-ref$after"
+    [ "$(count)" -ge 2 ] && block "symbolic-ref$after" ;;
+  submodule)
+    for w in $after; do case "$w" in -*) ;; status|summary) break ;; *) block "submodule $w" ;; esac; done ;;
+esac
+exec "$real" "$@"
+`;
+function shimDir() {
+  return path15.join(home(), "shim", `v${VERSION}`);
+}
+function findRealGit(skip) {
+  const same = (a, b) => WINDOWS ? a.toLowerCase() === b.toLowerCase() : a === b;
+  for (const dir of (process.env.PATH ?? "").split(path15.delimiter).filter(Boolean)) {
+    if (same(path15.resolve(dir), skip)) continue;
+    const p = path15.join(dir, WINDOWS ? "git.exe" : "git");
+    try {
+      fs16.accessSync(p, fs16.constants.X_OK);
+      if (fs16.statSync(p).isFile()) return p;
+    } catch {
+    }
   }
-  if (type === "numbers") {
-    return typeof v === "object" && v !== null && !Array.isArray(v) && Object.values(v).every((n) => typeof n === "number" && Number.isFinite(n) && n >= 0);
+  return void 0;
+}
+function findGitSh(realGit) {
+  let dir = path15.dirname(realGit);
+  for (let i = 0; i < 4; i++) {
+    for (const rel of ["bin/sh.exe", "usr/bin/sh.exe"]) {
+      const p = path15.join(dir, rel);
+      if (fs16.existsSync(p)) return p;
+    }
+    const up = path15.dirname(dir);
+    if (up === dir) break;
+    dir = up;
   }
-  if (type === "number") return typeof v === "number" && Number.isFinite(v) && v >= 0;
-  return typeof v === type;
+  return void 0;
 }
-var DEFAULT_PARALLEL = 20;
-var MAX_PARALLEL_LIMIT = 30;
-var clampParallel = (s) => ({ ...s, value: Math.min(s.value, MAX_PARALLEL_LIMIT) });
-var positiveInt = (v) => {
-  const n = Number(v);
-  return v !== void 0 && v !== "" && Number.isInteger(n) && n > 0 ? n : void 0;
-};
-var rate = (v) => {
-  const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
-  return typeof n === "number" && Number.isFinite(n) && n >= 0 ? Math.min(n, 1) : void 0;
-};
-var days = (v) => {
-  const n = typeof v === "string" && v.trim() !== "" ? Number(v) : v;
-  return typeof n === "number" && Number.isInteger(n) && n >= 0 ? n : void 0;
-};
-var flag01 = (v) => {
-  const t = v?.trim().toLowerCase();
-  return t === void 0 || t === "" ? void 0 : ["1", "true", "on", "yes"].includes(t) ? true : ["0", "false", "off", "no"].includes(t) ? false : void 0;
-};
-var readIn = (v) => v === "auto" || v === "snapshot" || v === "project" ? v : void 0;
-var list = (s) => s?.split(",").map((x) => x.trim()).filter(Boolean);
-function setting(flag, env, conf, fallback) {
-  if (flag !== void 0) return { value: flag, source: "flag" };
-  if (env !== void 0) return { value: env, source: "env" };
-  if (conf !== void 0) return { value: conf, source: "config" };
-  return { value: fallback, source: "default" };
+var cmdShim = (sh) => `@echo off\r
+set "MSYS2_ARG_CONV_EXCL=*"\r
+"${sh}" "%~dp0git" %*\r
+exit /b %errorlevel%\r
+`;
+var HOOK_VERSION = 1;
+var REF_HOOK = `#!/bin/sh
+# pitroom git guard (layer 2, v${HOOK_VERSION}): refuse ref updates made by workers.
+[ "$1" = prepared ] || exit 0
+echo "pitroom: git ref updates (commit, reset, branch, tag, stash, rebase, merge) are blocked for workers" >&2
+exit 1
+`;
+var hooksDir = () => path15.join(home(), "git-hooks", `v${HOOK_VERSION}`);
+function writeIfChanged(file, content) {
+  if (fs16.existsSync(file) && fs16.readFileSync(file, "utf8") === content) return;
+  fs16.mkdirSync(path15.dirname(file), { recursive: true });
+  const tmp = `${file}.${process.pid}.tmp`;
+  fs16.writeFileSync(tmp, content, { mode: 493 });
+  renameOver(tmp, file);
 }
-function effective(flags = {}) {
-  const c = loadConfig().config;
-  const e = process.env;
-  return {
-    worker: setting(flags.worker, e.PITROOM_WORKER, c.worker, DEFAULT_BACKEND),
-    /** Overrides the model of the preferred worker only. */
-    model: setting(flags.model, e.PITROOM_MODEL, void 0, void 0),
-    fallback: setting(void 0, list(e.PITROOM_FALLBACK), c.fallback, []),
-    timeout: setting(flags.timeout, e.PITROOM_TIMEOUT, c.timeout, "30m"),
-    primary: setting(void 0, e.PITROOM_PRIMARY, c.primary, "sonnet"),
-    price: setting(void 0, e.PITROOM_PRICE, c.price, void 0),
-    link: setting(void 0, void 0, c.link, []),
-    web: setting(void 0, void 0, c.web, false),
-    maxParallel: clampParallel(setting(void 0, positiveInt(e.PITROOM_MAX_PARALLEL), positiveInt(c.maxParallel), DEFAULT_PARALLEL)),
-    models: setting(void 0, void 0, c.models, {}),
-    tiers: setting(void 0, void 0, c.tiers, {}),
-    costs: setting(void 0, void 0, c.costs, {}),
-    audit: setting(void 0, rate(e.PITROOM_AUDIT), rate(c.audit), 0),
-    readIn: setting(void 0, readIn(e.PITROOM_READ_IN), readIn(c.readIn), "auto"),
-    cacheDays: setting(void 0, days(e.PITROOM_CACHE_DAYS), days(c.cacheDays), 7),
-    countRateLimits: setting(void 0, void 0, c.countRateLimits, false),
-    mcpDash: setting(void 0, flag01(e.PITROOM_MCP_DASH), c.mcpDash, true),
-    notify: setting(void 0, flag01(e.PITROOM_NOTIFY), c.notify, false),
-    notifyCommand: setting(void 0, e.PITROOM_NOTIFY_COMMAND?.trim() || void 0, c.notifyCommand?.trim() || void 0, void 0),
-    notifyAfter: setting(void 0, days(e.PITROOM_NOTIFY_AFTER), days(c.notifyAfter), 15),
-    workerPrices: setting(void 0, void 0, c.workerPrices, {}),
-    priceFeed: setting(void 0, flag01(e.PITROOM_PRICE_FEED), c.priceFeed, false),
-    priceFeedUrl: setting(void 0, e.PITROOM_PRICE_FEED_URL?.trim() || void 0, c.priceFeedUrl?.trim() || void 0, "https://models.dev/api.json"),
-    priceFeedHours: setting(void 0, positiveInt(e.PITROOM_PRICE_FEED_HOURS), positiveInt(c.priceFeedHours), 24)
-  };
+function pathKey(env) {
+  const keys = Object.keys(env).filter((k) => k.toLowerCase() === "path");
+  return keys.includes("PATH") ? "PATH" : keys[0] ?? "PATH";
+}
+function onePath(env) {
+  const key = pathKey(env);
+  const out = { ...env };
+  for (const k of Object.keys(out)) if (k !== key && k.toLowerCase() === "path") delete out[k];
+  return out;
 }
-
-// src/core/prices.ts
-import fs15 from "node:fs";
-import path15 from "node:path";
-var RETRY_AFTER_FAILURE_MS = 60 * 6e4;
-var catalogFile = () => path15.join(home(), "prices.json");
-function trim(raw) {
-  const out = {};
-  if (!raw || typeof raw !== "object") return out;
-  for (const [provider, p] of Object.entries(raw)) {
-    for (const [id, m] of Object.entries(p?.models ?? {})) {
-      const c = m?.cost;
-      const ok = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0;
-      if (!c || !ok(c.input) || !ok(c.output)) continue;
-      out[`${provider}/${id}`] = [c.input, c.output, ok(c.cache_read) ? c.cache_read : c.input / 10];
-    }
+function withGitConfig(env, entries) {
+  const out = { ...env };
+  let n = Number(env.GIT_CONFIG_COUNT) || 0;
+  for (const [key, value] of entries) {
+    out[`GIT_CONFIG_KEY_${n}`] = key;
+    out[`GIT_CONFIG_VALUE_${n}`] = value;
+    n++;
   }
+  out.GIT_CONFIG_COUNT = String(n);
   return out;
 }
-var cached2;
-function readCatalog() {
-  const file = catalogFile();
+function guardEnv(env) {
+  const quiet = {
+    GIT_TERMINAL_PROMPT: "0",
+    GIT_EDITOR: "true",
+    GIT_SEQUENCE_EDITOR: "true",
+    GIT_PAGER: "cat",
+    PAGER: "cat"
+  };
+  writeIfChanged(path15.join(hooksDir(), "reference-transaction"), REF_HOOK);
+  env = withGitConfig(onePath(env), [
+    ["core.hooksPath", fwd(hooksDir())],
+    ["url.pitroom-push-blocked://.pushInsteadOf", ""]
+  ]);
+  const dir = shimDir();
+  const real = findRealGit(dir);
+  if (!real) return { ...env, ...quiet };
+  let sh;
+  if (WINDOWS) {
+    sh = findGitSh(real);
+    if (!sh) return { ...env, ...quiet };
+    writeIfChanged(path15.join(dir, "git.cmd"), cmdShim(sh));
+  }
+  writeIfChanged(path15.join(dir, "git"), SHIM);
+  const key = pathKey(env);
+  return { ...env, ...quiet, PITROOM_REAL_GIT: fwd(real), [key]: `${dir}${path15.delimiter}${env[key] ?? ""}` };
+}
+function shimReady() {
+  const env = guardEnv({ ...process.env });
+  return Boolean(env[pathKey(env)]?.startsWith(shimDir()));
+}
+
+// src/core/slots.ts
+import crypto2 from "node:crypto";
+import fs17 from "node:fs";
+import path16 from "node:path";
+var slotsDir = () => path16.join(home(), "slots");
+var locksDir = () => path16.join(home(), "locks");
+var STARTUP_GRACE_MS = 3e4;
+function holderActive(runId, self) {
+  if (!runId || runId === self) return false;
   try {
-    const { mtimeMs } = fs15.statSync(file);
-    if (cached2?.file === file && cached2.mtimeMs === mtimeMs) return cached2.catalog;
-    const parsed = JSON.parse(fs15.readFileSync(file, "utf8"));
-    const catalog5 = parsed && typeof parsed.models === "object" && parsed.models && Number.isFinite(Date.parse(parsed.fetchedAt)) ? parsed : void 0;
-    cached2 = { file, mtimeMs, catalog: catalog5 };
-    return catalog5;
+    const m = freshMeta(runId);
+    if (!isActive(m.state)) return false;
+    if (m.pid) return isAlive(m.pid);
+    return Date.now() - Date.parse(m.startedAt) < STARTUP_GRACE_MS;
   } catch {
-    return void 0;
+    return false;
   }
 }
-var OWN = { codex: ["openai"], claude: ["anthropic"], gemini: ["google"] };
-function catalogPrice(backend, ...models) {
-  const catalog5 = readCatalog();
-  if (!catalog5) return void 0;
-  for (const raw of models) {
-    const id = raw?.split("#")[0];
-    if (!id) continue;
-    const keys = [id, ...[...OWN[backend] ?? [], "anthropic", "openai", "google"].map((p) => `${p}/${id}`)];
-    const any = keys.find((k) => catalog5.models[k]) ?? Object.keys(catalog5.models).filter((k) => k.endsWith(`/${id}`)).sort()[0];
-    const triple = any ? catalog5.models[any] : void 0;
-    if (any && triple && triple.length === 3 && triple.every((n) => Number.isFinite(n) && n >= 0)) {
-      const [input, output, cachedInput] = triple;
-      return { input, output, cachedInput, key: any };
-    }
+function tryClaim(file, runId) {
+  fs17.mkdirSync(path16.dirname(file), { recursive: true });
+  try {
+    fs17.writeFileSync(file, runId, { flag: "wx" });
+    return true;
+  } catch (e) {
+    if (e.code !== "EEXIST") throw e;
   }
-  return void 0;
-}
-
-// src/core/receipt.ts
-var PRESETS = {
-  sonnet: { name: "Claude Sonnet", input: 3, output: 15, cachedInput: 0.3 },
-  opus: { name: "Claude Opus", input: 5, output: 25, cachedInput: 0.5 },
-  haiku: { name: "Claude Haiku", input: 1, output: 5, cachedInput: 0.1 },
-  "gpt-5": { name: "GPT-5", input: 1.25, output: 10, cachedInput: 0.125 }
-};
-function primaryPrice() {
-  const eff = effective();
-  const custom = eff.price.value?.split(",").map(Number);
-  if (custom && custom.length >= 2 && custom.every((n) => Number.isFinite(n) && n >= 0)) {
-    return { name: "custom", input: custom[0], output: custom[1], cachedInput: custom[2] ?? custom[0] / 10 };
+  let owner = "";
+  try {
+    owner = fs17.readFileSync(file, "utf8").trim();
+  } catch {
+  }
+  if (owner === runId) return true;
+  if (holderActive(owner, runId)) return false;
+  fs17.rmSync(file, { force: true });
+  try {
+    fs17.writeFileSync(file, runId, { flag: "wx" });
+    return true;
+  } catch {
+    return false;
   }
-  const named = eff.primary.value;
-  const preset = PRESETS[named.toLowerCase()];
-  if (preset) return preset;
-  const c = eff.priceFeed.value ? catalogPrice("", named) : void 0;
-  return c ? { name: named, source: "catalog", input: c.input, output: c.output, cachedInput: c.cachedInput } : PRESETS.sonnet;
 }
-var estimateTokens = (text) => Math.ceil(text.length / 4);
-function parsePriceSpec(spec, name = "worker") {
-  const parts = typeof spec === "string" ? spec.split(",").map((x) => Number(x.trim())) : [];
-  if (parts.length < 2 || parts.length > 3 || !parts.every((n) => Number.isFinite(n) && n >= 0)) return void 0;
-  return { name, source: "config", input: parts[0], output: parts[1], cachedInput: parts[2] ?? parts[0] / 10 };
+function releaseIfOwner(file, runId) {
+  if (!file) return;
+  try {
+    if (fs17.readFileSync(file, "utf8").trim() === runId) fs17.rmSync(file, { force: true });
+  } catch {
+  }
 }
-var costAt = (usage, price) => (usage.input * price.input + usage.cacheRead * price.cachedInput + (usage.output + usage.reasoning) * price.output) / 1e6;
-var workerCostOf = (usage) => usage?.cost ?? usage?.costEstimate;
-function savedUsd(usage, returnedTokens, price = primaryPrice()) {
-  const readingTheReport = returnedTokens * price.input / 1e6;
-  return Math.max(0, costAt(usage, price) - (workerCostOf(usage) ?? 0) - readingTheReport);
+function tryAcquireSlot(runId, maxParallel) {
+  for (let n = 0; n < Math.max(1, maxParallel); n++) {
+    const file = path16.join(slotsDir(), `slot-${n}`);
+    if (tryClaim(file, runId)) return file;
+  }
+  return void 0;
 }
-function readLedger(sinceMs) {
-  if (!fs16.existsSync(ledgerFile())) return [];
-  return fs16.readFileSync(ledgerFile(), "utf8").split("\n").filter(Boolean).flatMap((l) => {
+var releaseSlot = (file, runId) => releaseIfOwner(file, runId);
+function slotHolders() {
+  if (!fs17.existsSync(slotsDir())) return [];
+  return fs17.readdirSync(slotsDir()).map((f) => {
     try {
-      return [JSON.parse(l)];
+      return fs17.readFileSync(path16.join(slotsDir(), f), "utf8").trim();
     } catch {
-      return [];
+      return "";
     }
-  }).filter((e) => !sinceMs || Date.parse(e.at) >= sinceMs);
-}
-function totals(entries) {
-  const t = entries.reduce(
-    (a, e) => ({
-      runs: a.runs + 1,
-      tokens: a.tokens + e.tokens,
-      returned: a.returned + e.returned,
-      workerCost: a.workerCost + e.workerCost,
-      saved: a.saved + e.saved
-    }),
-    { runs: 0, tokens: 0, returned: 0, workerCost: 0, saved: 0 }
-  );
-  return { ...t, ratio: t.returned ? t.tokens / t.returned : 0 };
+  }).filter((id) => holderActive(id, ""));
 }
-var usd = (n) => n >= 100 ? `$${n.toFixed(0)}` : n >= 1 ? `$${n.toFixed(2)}` : `$${n.toFixed(3)}`;
-function compact(n) {
-  const fmt = (v) => v.toFixed(v >= 100 ? 0 : 1).replace(/\.0$/, "");
-  if (n >= 1e6) return `${fmt(n / 1e6)}M`;
-  if (n >= 1e3) return `${fmt(n / 1e3)}k`;
-  return String(Math.round(n));
+var lockFile = (repoRoot) => path16.join(locksDir(), `write-${crypto2.createHash("sha1").update(path16.resolve(repoRoot)).digest("hex").slice(0, 16)}`);
+function acquireWriteLock(repoRoot, runId) {
+  const file = lockFile(repoRoot);
+  if (tryClaim(file, runId)) return;
+  let owner = "";
+  try {
+    owner = fs17.readFileSync(file, "utf8").trim();
+  } catch {
+  }
+  throw new UserError(`another --write run (${owner}) is active in this repo; use --isolate for parallel changes`, 3);
 }
-function badgeUrl(t) {
-  const msg = encodeURIComponent(`saved ${usd(t.saved)} \xB7 ${compact(t.tokens)} tokens offloaded`).replace(/-/g, "--");
-  return `https://img.shields.io/badge/pitroom-${msg}-7c3aed`;
+var releaseWriteLock = (repoRoot, runId) => releaseIfOwner(lockFile(repoRoot), runId);
+
+// src/core/secrets.ts
+import { execFileSync } from "node:child_process";
+import fs18 from "node:fs";
+import path17 from "node:path";
+var SKIP_DIRS2 = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", "out", ".next", "target", "vendor", ".venv", "venv", "__pycache__", "coverage", ".turbo", ".cache"]);
+var MAX_VISITED = 2e4;
+var MAX_DEPTH = 4;
+var TEMPLATE = /\.(example|sample|template|dist|defaults?|tpl)$/i;
+function looksSecret(file) {
+  const name = file.toLowerCase();
+  if (TEMPLATE.test(name)) return false;
+  if (name === ".env" || name.startsWith(".env.") || name.endsWith(".env")) return true;
+  return /\.(pem|p12|pfx|key|jks|keystore)$/.test(name) || /^id_(rsa|dsa|ecdsa|ed25519)$/.test(name) || name === ".netrc" || name === "credentials.json" || /^secrets?\.(json|ya?ml|toml)$/.test(name);
 }
-var esc = (s) => s.replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
-function card(t, period) {
-  const W = 720, H = 316, M = 32, GAP = 12;
-  const tile = (i, value, label) => {
-    const w = (W - 2 * M - 2 * GAP) / 3, x = M + i * (w + GAP);
-    return `<rect x="${x}" y="196" width="${w}" height="72" rx="14" fill="#fff" fill-opacity=".035" stroke="#fff" stroke-opacity=".1"/>
-<text x="${x + 18}" y="224" class="lab">${esc(label.toUpperCase())}</text><text x="${x + 18}" y="254" class="val">${esc(value)}</text>`;
+function findSecretFiles(dir) {
+  const found = [];
+  let visited = 0;
+  const walk = (d, depth) => {
+    if (depth > MAX_DEPTH || visited > MAX_VISITED) return;
+    let entries;
+    try {
+      entries = fs18.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      visited++;
+      if (e.isDirectory()) {
+        if (!SKIP_DIRS2.has(e.name)) walk(path17.join(d, e.name), depth + 1);
+      } else if (e.isFile() && looksSecret(e.name)) {
+        found.push(slash(path17.relative(dir, path17.join(d, e.name))));
+      }
+    }
   };
-  const when = period.toUpperCase();
-  const pill = 22 + when.length * 7.4;
-  return `<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" viewBox="0 0 ${W} ${H}" role="img" aria-label="pitroom saved ${esc(usd(t.saved))}">
-<style>
-text{font-family:ui-sans-serif,-apple-system,"Segoe UI",Inter,Helvetica,Arial,sans-serif;fill:#f4f4f5}
-.name{font-size:20px;font-weight:650;letter-spacing:-.01em}
-.sub{font-size:12.5px;fill:#a1a1aa}
-.pill{font-size:11px;font-weight:600;letter-spacing:.1em;fill:#a1a1aa}
-.lab{font-size:11px;font-weight:500;letter-spacing:.09em;fill:#a1a1aa}
-.big{font-size:60px;font-weight:700;letter-spacing:-.03em;fill:#3ddc97}
-.val{font-size:26px;font-weight:650;letter-spacing:-.02em}
-.foot{font-size:11.5px;fill:#71717a}
-</style>
-<defs>
-<radialGradient id="o" cx="1" cy="0" r=".7"><stop offset="0" stop-color="#ff6a2b" stop-opacity=".24"/><stop offset="1" stop-color="#ff6a2b" stop-opacity="0"/></radialGradient>
-<radialGradient id="b" cx="0" cy="0" r=".7"><stop offset="0" stop-color="#38bdf8" stop-opacity=".16"/><stop offset="1" stop-color="#38bdf8" stop-opacity="0"/></radialGradient>
-<linearGradient id="m" x1="0" y1="0" x2="1" y2="1"><stop offset="0" stop-color="#ff6a2b"/><stop offset="1" stop-color="#ffa86b"/></linearGradient>
-<clipPath id="c"><rect width="${W}" height="${H}" rx="20"/></clipPath>
-</defs>
-<g clip-path="url(#c)"><rect width="${W}" height="${H}" fill="#0b0b0f"/><rect width="${W}" height="${H}" fill="url(#o)"/><rect width="${W}" height="${H}" fill="url(#b)"/></g>
-<rect x=".5" y=".5" width="${W - 1}" height="${H - 1}" rx="19.5" fill="none" stroke="#fff" stroke-opacity=".1"/>
-<rect x="${M}" y="28" width="38" height="38" rx="11" fill="url(#m)"/>
-<path d="M4 4h4v4H4zm8 0h4v4h-4zM8 8h4v4H8zm8 0h4v4h-4zM4 12h4v4H4zm8 0h4v4h-4zm-4 4h4v4H8zm8 0h4v4h-4z" fill="#fff" transform="translate(${M + 7} 35) scale(1)"/>
-<text x="${M + 52}" y="45" class="name">Pitroom</text><text x="${M + 52}" y="63" class="sub">Your agent's pit crew</text>
-<rect x="${W - M - pill}" y="34" width="${pill}" height="26" rx="13" fill="#fff" fill-opacity=".04" stroke="#fff" stroke-opacity=".14"/>
-<text x="${W - M - pill / 2}" y="51" class="pill" text-anchor="middle">${esc(when)}</text>
-<text x="${M}" y="112" class="lab">SAVED ON YOUR MAIN CODING AGENT</text>
-<text x="${M}" y="168" class="big">${esc(usd(t.saved))}</text>
-${tile(0, compact(t.tokens), "Tokens offloaded")}${tile(1, t.ratio ? `${Math.round(t.ratio)}\xD7` : "\u2014", "Context compression")}${tile(2, String(t.runs), "Delegated tasks")}
-<text x="${M}" y="296" class="foot">Estimated against ${esc(primaryPrice().name)} pricing \xB7 npx pitroom</text>
-</svg>
-`;
+  walk(dir, 0);
+  return found.sort();
+}
+function findSecretFilesInTree(root, dir) {
+  try {
+    const out = execFileSync("git", ["-C", root, "ls-files", "-z", "--cached", "--others", "--exclude-standard"], { encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
+    return out.split("\0").filter((f) => f && looksSecret(path17.basename(f)) && !path17.relative(dir, path17.join(root, f)).startsWith("..")).map((f) => slash(path17.relative(dir, path17.join(root, f)))).sort();
+  } catch {
+    return [];
+  }
 }
+function secretWarning(files, mode) {
+  if (!files.length) return void 0;
+  const shown = files.slice(0, 3).join(", ") + (files.length > 3 ? `, +${files.length - 3} more` : "");
+  const where = mode === "isolate" ? "would be copied into the isolated copy" : "sit in the directory the worker runs in";
+  const fix = mode === "isolate" ? "add them to .gitignore, or" : "use an isolated copy (-i, git-ignored files are left out) or a clean checkout, or";
+  return `secret-looking files ${where} (${shown}): the worker is told not to read them, but nothing stops it, and its model may be hosted by a third party; ${fix} set PITROOM_NO_SECRET_WARNING=1 to silence this`;
+}
+var slash = (p) => p.split(path17.sep).join("/");
 
 // src/core/process.ts
 import { spawn } from "node:child_process";
-import fs17 from "node:fs";
+import fs19 from "node:fs";
 async function spawnWorker(inv, opts) {
-  const out = fs17.openSync(opts.stdoutFile, "w");
-  const err = fs17.openSync(opts.stderrFile, "w");
+  const out = fs19.openSync(opts.stdoutFile, "w");
+  const err = fs19.openSync(opts.stderrFile, "w");
   const res = { code: null, timedOut: false, stopped: false };
   const child = spawn(inv.command, inv.args, {
     cwd: opts.cwd,
@@ -2356,7 +2919,7 @@ async function spawnWorker(inv, opts) {
   }, opts.timeoutSec * 1e3);
   res.code = await new Promise((resolve2) => {
     child.on("error", (e) => {
-      res.spawnError = e.code === "ENOENT" ? fs17.existsSync(opts.cwd) ? `${inv.command} not found` : `the working directory ${opts.cwd} does not exist` : e.message;
+      res.spawnError = e.code === "ENOENT" ? fs19.existsSync(opts.cwd) ? `${inv.command} not found` : `the working directory ${opts.cwd} does not exist` : e.message;
       resolve2(127);
     });
     child.on("close", (c) => resolve2(c));
@@ -2365,16 +2928,18 @@ async function spawnWorker(inv, opts) {
   if (killer) clearTimeout(killer);
   process.off("SIGINT", stop);
   process.off("SIGTERM", stop);
-  fs17.closeSync(out);
-  fs17.closeSync(err);
+  fs19.closeSync(out);
+  fs19.closeSync(err);
   return res;
 }
 export {
+  ASKS_FOR_LIST,
   DEFAULT_BACKEND,
   STOP_FILE,
   TERMINAL,
   acquireWriteLock,
   allBackends,
+  answerParts,
   backendIds,
   badgeUrl,
   brief,
@@ -2389,6 +2954,8 @@ export {
   fill,
   findSecretFiles,
   findSecretFilesInTree,
+  fixTask,
+  focusedRate,
   formatTarget,
   freshMeta,
   getBackend,
@@ -2397,6 +2964,7 @@ export {
   isActive,
   isAlive,
   listRunIds,
+  loadEval,
   loadPlan,
   loadTemplate,
   looksSecret,
@@ -2407,9 +2975,11 @@ export {
   parseStatus,
   parseTarget,
   parseVerdict,
+  pathsIn,
   planName,
   planTask,
   primaryPrice,
+  rankChain,
   readCatalog,
   readLedger,
   readMeta,
@@ -2418,17 +2988,22 @@ export {
   requestStop,
   resolveRun,
   retryAfterMs,
+  retryCommands,
   runDir,
   runFile,
   runsDir,
   savedUsd,
+  scoreAnswer,
+  scoreOf,
   secretWarning,
   shimDir,
   shimReady,
   slotHolders,
   spawnWorker,
+  summarize,
   totals,
   trim,
+  truthOf,
   tryAcquireSlot,
   usd,
   verifyRefs,