pitroom 0.24.0 → 0.25.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pitroom",
   "description": "A free pit crew for your expensive coding agent: the superpowers development workflow, run by cheap workers. Delegate research, fixes, tests, reviews and whole plans from Claude Code, Codex or any agent to OpenCode, Codex or Claude Code workers, with receipts that prove the savings.",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "author": {
     "name": "TahaAtas"
   },

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pitroom",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "A free pit crew for your expensive coding agent: delegate research, fixes, tests, reviews and parallel investigations to cheap worker agents running your own models, with verified answers, exact diffs and cost receipts.",
   "author": {
     "name": "TahaAtas"

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.25.0
+
+### Dashboard
+- **"Finished" no longer goes down as you start runs.** It counted the finished runs among the ones on the page (the newest 40), so each new run pushed a finished one off and the number dropped. It now counts every finished run of the period, from the ledger the savings come from (a picked group's from its own runs); audits are left out, as in the savings.
+- **A period on the Finished and Est. saved cards**: 24 hours, 7 days (the default), 30 days, 6 months or all time, picked on each card and remembered in the browser.
+
+## 0.24.1
+
+### Workers
+- **Antigravity: a task that names files outside the project no longer stops halfway.** agy's file tools stay in the workspace, and a headless agy cannot ask for more, so a read outside it ("copy the components from /tmp/ui-source") was refused and ended the turn without an answer. The folders and files a task names by absolute path (or `~/…`) that exist outside the workspace are now granted read-only (the sandbox mounts them read-only too), with every secret-looking file in them denied (found at any depth and in every folder; a folder too big to check, with a link leading out of it or nowhere, or with a folder that cannot be read, is not granted, and a named path counts where its links lead). Never the root or a top-level folder such as `/tmp`, your home itself or a folder above it, a folder holding the workspace or the project, a dot-folder in your home (`~/.config` and the like) or `~/Library`, Pitroom's own state or a secret-looking file, and nothing on Windows (agy compares paths there without their drive letter); the secrets in your home stay denied. In a snapshot or an isolated copy the project's own paths in the task are turned into the copy's (links resolved, so `/tmp/…` and `/private/tmp/…` alike): the worker reads and edits its copy instead of being refused at the project.
+
 ## 0.24.0
 
 ### Workers

package/dist/lib.mjs

@@ -542,10 +542,10 @@ function denyCommandRules() {
     "command(eval)"
   ];
 }
-function workerSettings(workspace, workerHome3) {
+function workerSettings(workspace, workerHome3, reads = []) {
   const real = (p) => {
     try {
-      return fs6.realpathSync(p);
+      return fs6.realpathSync.native(p);
     } catch {
       return p;
     }
@@ -553,6 +553,7 @@ function workerSettings(workspace, workerHome3) {
   const both = (p) => [.../* @__PURE__ */ new Set([p, real(p)])];
   const secrets = [
     ...findSecretFiles(workspace).map((f) => path5.join(workspace, f)),
+    ...reads.flatMap((r) => r.secrets),
     ...HOME_SECRETS.map((f) => path5.join(os3.homedir(), f)).filter((p) => fs6.existsSync(p)),
     // the keychain link of the worker's own home
     path5.join(workerHome3, "Library")
@@ -565,7 +566,9 @@ function workerSettings(workspace, workerHome3) {
       allow: [
         "command(*)",
         ...both(path5.join(dataDir(workerHome3), "brain")).map((p) => `write_file(${rulePath(p)})`),
-        ...toolchains().flatMap(both).map((p) => `read_file(${rulePath(p)})`)
+        ...toolchains().flatMap(both).map((p) => `read_file(${rulePath(p)})`),
+        // what the task names outside the workspace: a headless agy cannot ask, and would end the turn unanswered
+        ...reads.map((r) => r.path).flatMap(both).map((p) => `read_file(${rulePath(p)})`)
       ],
       deny: [
         ...secrets.flatMap(both).map((p) => `read_file(${rulePath(p)})`),
@@ -588,6 +591,96 @@ function toolchains() {
   const install = (d) => path5.basename(d) === "bin" && /[\\/](versions|toolchains)[\\/]/.test(d) ? path5.dirname(d) : d;
   return [...new Set(dirs.map(install))].filter((d) => !inHome(home()) || path5.relative(home(), d).startsWith(".."));
 }
+var isDir = (p) => {
+  try {
+    return fs6.statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+};
+var MAX_READS = 20;
+function pathsIn(prompt) {
+  const out = [];
+  for (const m of prompt.matchAll(/(^|[\s"'`(\[<{=])((?:~|[A-Za-z]:)?[\\/][^\s"'`)\]>}]*)/g)) {
+    const raw = m[2].replace(/[.,;:!?]+$/, "");
+    const abs = raw.startsWith("~") ? path5.join(os3.homedir(), raw.slice(1)) : raw;
+    if (raw && path5.isAbsolute(abs)) out.push({ raw, at: m.index + m[1].length, abs });
+  }
+  return out;
+}
+var realOf = (p) => {
+  try {
+    return fs6.realpathSync.native(p);
+  } catch {
+    return void 0;
+  }
+};
+function resolved(p) {
+  let dir = path5.resolve(p);
+  const rest = [];
+  for (; ; ) {
+    const r = realOf(dir);
+    if (r) return path5.join(r, ...rest);
+    const up = path5.dirname(dir);
+    if (up === dir) return path5.resolve(p);
+    rest.unshift(path5.basename(dir));
+    dir = up;
+  }
+}
+var inside = (p, dir) => {
+  const rel = path5.relative(dir, p);
+  return !rel || !rel.startsWith("..") && !path5.isAbsolute(rel);
+};
+var MAX_SCANNED = 2e4;
+function allSecrets(dir) {
+  const root = realOf(dir) ?? dir;
+  const found = [];
+  let seen = 0;
+  const stack = [dir];
+  while (stack.length) {
+    const d = stack.pop();
+    let entries;
+    try {
+      entries = fs6.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return void 0;
+    }
+    for (const e of entries) {
+      if (++seen > MAX_SCANNED) return void 0;
+      const p = path5.join(d, e.name);
+      if (e.isSymbolicLink()) {
+        const target = realOf(p);
+        if (!target || !inside(target, root)) return void 0;
+        if (looksSecret(e.name)) found.push(p);
+      } else if (e.isDirectory()) stack.push(p);
+      else if (looksSecret(e.name)) found.push(p);
+    }
+  }
+  return found;
+}
+function outsideReads(prompt, workspace, project) {
+  if (process.platform === "win32") return [];
+  const homeDir = realOf(os3.homedir()) ?? os3.homedir();
+  const ws = realOf(workspace) ?? path5.resolve(workspace);
+  const proj = project ? resolved(project) : void 0;
+  const own = realOf(home()) ?? home();
+  const found = /* @__PURE__ */ new Map();
+  for (const { abs } of pathsIn(prompt)) {
+    const p = realOf(abs);
+    if (!p || found.has(p) || inside(p, ws) || inside(p, own)) continue;
+    if (inside(homeDir, p) || inside(ws, p) || proj && inside(proj, p)) continue;
+    if (p.split(/[\\/]/).filter(Boolean).length < 2) continue;
+    if (inside(p, homeDir) && /^(\.|Library([\\/]|$))/.test(path5.relative(homeDir, p))) continue;
+    if (!isDir(p)) {
+      if (!looksSecret(path5.basename(p))) found.set(p, { path: p, secrets: [] });
+    } else {
+      const secrets = allSecrets(p);
+      if (secrets) found.set(p, { path: p, secrets });
+    }
+    if (found.size >= MAX_READS) break;
+  }
+  return [...found.values()];
+}
 function baseSettings() {
   return {
     enableTerminalSandbox: true,
@@ -598,12 +691,12 @@ function baseSettings() {
 }
 var rulePath = (p) => p.replace(/^[A-Za-z]:(?=[\\/])/, "").replace(/\\/g, "/");
 var HOMES_KEPT_DAYS = 14;
-function workerHome(workspace) {
+function workerHome(workspace, reads = []) {
   const root = path5.join(home(), "antigravity-home");
   const id2 = crypto3.createHash("sha256").update(path5.resolve(workspace)).digest("hex").slice(0, 16);
   const dir = path5.join(root, id2);
   fs6.mkdirSync(dataDir(dir), { recursive: true });
-  writeIfChanged(path5.join(dataDir(dir), "settings.json"), `${JSON.stringify(workerSettings(workspace, dir), null, 2)}
+  writeIfChanged(path5.join(dataDir(dir), "settings.json"), `${JSON.stringify(workerSettings(workspace, dir, reads), null, 2)}
 `);
   if (process.platform === "darwin") {
     fs6.mkdirSync(path5.join(dir, "Library"), { recursive: true });
@@ -627,11 +720,25 @@ function pruneHomes(root, keep) {
   } catch {
   }
 }
+function inCopy(prompt, project) {
+  if (!project || project.root === project.copy) return prompt;
+  const root = resolved(project.root);
+  let out = "";
+  let from = 0;
+  for (const { raw, at, abs } of pathsIn(prompt)) {
+    const p = resolved(abs);
+    if (!inside(p, root)) continue;
+    out += prompt.slice(from, at) + path5.join(project.copy, path5.relative(root, p));
+    from = at + raw.length;
+  }
+  return out + prompt.slice(from);
+}
 function invocation(req) {
+  const prompt = inCopy(req.prompt, req.project);
   const args = [
     // -p takes the prompt as its value; one that starts with "-" would be read as an option: a leading space keeps it a value.
     "-p",
-    req.prompt.startsWith("-") ? ` ${req.prompt}` : req.prompt,
+    prompt.startsWith("-") ? ` ${prompt}` : prompt,
     "--output-format",
     "stream-json",
     "--mode",
@@ -646,7 +753,7 @@ function invocation(req) {
   if (model) args.push("--model", model);
   if (effort) args.push("--effort", effort);
   const { command, prefix } = resolveCommand(binary());
-  const workerDir = workerHome(req.cwd);
+  const workerDir = workerHome(req.cwd, outsideReads(prompt, req.cwd, req.project?.root));
   const env = { HOME: workerDir };
   if (process.platform === "win32") env.USERPROFILE = workerDir;
   return { command, args: [...prefix, ...args], env };
@@ -2287,7 +2394,7 @@ function verifyRefs(refs, dirs) {
     if (!files.length) {
       if (!ref.file.includes("/") && !isFileName(ref.file)) continue;
       total++;
-      invalid.push({ ref: ref.text, reason: path12.isAbsolute(ref.file) && !inside(ref.file, roots) ? "outside the project" : "file not found" });
+      invalid.push({ ref: ref.text, reason: path12.isAbsolute(ref.file) && !inside2(ref.file, roots) ? "outside the project" : "file not found" });
       continue;
     }
     total++;
@@ -2337,16 +2444,16 @@ function indexFiles(roots) {
   return index;
 }
 function resolve(ref, roots) {
-  const candidates = path12.isAbsolute(ref) ? inside(ref, roots) ? [ref] : [] : roots.map((r) => path12.join(r, ref));
+  const candidates = path12.isAbsolute(ref) ? inside2(ref, roots) ? [ref] : [] : roots.map((r) => path12.join(r, ref));
   return candidates.find((c) => {
     try {
-      return fs12.statSync(c).isFile() && inside(c, roots);
+      return fs12.statSync(c).isFile() && inside2(c, roots);
     } catch {
       return false;
     }
   });
 }
-function inside(file, roots) {
+function inside2(file, roots) {
   return roots.some((r) => {
     const rel = path12.relative(r, path12.resolve(file));
     return rel !== "" && !rel.startsWith("..") && !path12.isAbsolute(rel);
@@ -2963,7 +3070,7 @@ function answerParts(answer) {
   const summary = s ? s[1] : text.split(/^\s*(?:DETAILS|FILES CHANGED|VERIFICATION|OPEN ISSUES):/m)[0];
   return { summary: summary.trim(), details: (d?.[1] ?? "").trim() };
 }
-function pathsIn(text) {
+function pathsIn2(text) {
   const found = text.replace(/\\/g, "/").match(/[A-Za-z0-9_.@\-/]+\.[A-Za-z0-9]{1,8}(?::\d+)?/g) ?? [];
   return [...new Set(found.map((p) => clean(p.replace(/:\d+$/, ""))))];
 }
@@ -2975,7 +3082,7 @@ function scoreAnswer(q, truth, answer, root) {
   if ("line" in truth) {
     const flat = summary.replace(/\s+/g, " ");
     if (new RegExp(`(^|[^\\w./-])\\.?/?${escape2(truth.path)}:${truth.line}(?!\\d)`).test(flat)) return { score: 1, got: `${truth.path}:${truth.line}` };
-    const named = pathsIn(flat).includes(truth.path);
+    const named = pathsIn2(flat).includes(truth.path);
     return { score: named ? 0.5 : 0, got: flat.slice(0, 120) };
   }
   if ("count" in truth) {
@@ -2983,8 +3090,8 @@ function scoreAnswer(q, truth, answer, root) {
     const got2 = n ? Number(n[0].replace(/,/g, "")) : void 0;
     return { score: got2 === truth.count ? 1 : 0, got: got2 === void 0 ? "(no number)" : String(got2) };
   }
-  let got = pathsIn(summary);
-  if (!got.length) got = pathsIn(details);
+  let got = pathsIn2(summary);
+  if (!got.length) got = pathsIn2(details);
   const hit = got.filter((p) => truth.files.includes(p)).length;
   const precision = got.length ? hit / got.length : 0;
   const recall = truth.files.length ? hit / truth.files.length : got.length ? 0 : 1;
@@ -3355,7 +3462,7 @@ export {
   parseStatus,
   parseTarget,
   parseVerdict,
-  pathsIn,
+  pathsIn2 as pathsIn,
   planName,
   planTask,
   primaryPrice,

package/dist/pitroom.mjs

@@ -558,10 +558,10 @@ function denyCommandRules() {
     "command(eval)"
   ];
 }
-function workerSettings(workspace, workerHome3) {
+function workerSettings(workspace, workerHome3, reads = []) {
   const real = (p) => {
     try {
-      return fs6.realpathSync(p);
+      return fs6.realpathSync.native(p);
     } catch {
       return p;
     }
@@ -569,6 +569,7 @@ function workerSettings(workspace, workerHome3) {
   const both = (p) => [.../* @__PURE__ */ new Set([p, real(p)])];
   const secrets = [
     ...findSecretFiles(workspace).map((f) => path5.join(workspace, f)),
+    ...reads.flatMap((r) => r.secrets),
     ...HOME_SECRETS.map((f) => path5.join(os3.homedir(), f)).filter((p) => fs6.existsSync(p)),
     // the keychain link of the worker's own home
     path5.join(workerHome3, "Library")
@@ -581,7 +582,9 @@ function workerSettings(workspace, workerHome3) {
       allow: [
         "command(*)",
         ...both(path5.join(dataDir(workerHome3), "brain")).map((p) => `write_file(${rulePath(p)})`),
-        ...toolchains().flatMap(both).map((p) => `read_file(${rulePath(p)})`)
+        ...toolchains().flatMap(both).map((p) => `read_file(${rulePath(p)})`),
+        // what the task names outside the workspace: a headless agy cannot ask, and would end the turn unanswered
+        ...reads.map((r) => r.path).flatMap(both).map((p) => `read_file(${rulePath(p)})`)
       ],
       deny: [
         ...secrets.flatMap(both).map((p) => `read_file(${rulePath(p)})`),
@@ -604,6 +607,96 @@ function toolchains() {
   const install2 = (d) => path5.basename(d) === "bin" && /[\\/](versions|toolchains)[\\/]/.test(d) ? path5.dirname(d) : d;
   return [...new Set(dirs.map(install2))].filter((d) => !inHome(home()) || path5.relative(home(), d).startsWith(".."));
 }
+var isDir = (p) => {
+  try {
+    return fs6.statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+};
+var MAX_READS = 20;
+function pathsIn(prompt) {
+  const out = [];
+  for (const m of prompt.matchAll(/(^|[\s"'`(\[<{=])((?:~|[A-Za-z]:)?[\\/][^\s"'`)\]>}]*)/g)) {
+    const raw = m[2].replace(/[.,;:!?]+$/, "");
+    const abs = raw.startsWith("~") ? path5.join(os3.homedir(), raw.slice(1)) : raw;
+    if (raw && path5.isAbsolute(abs)) out.push({ raw, at: m.index + m[1].length, abs });
+  }
+  return out;
+}
+var realOf = (p) => {
+  try {
+    return fs6.realpathSync.native(p);
+  } catch {
+    return void 0;
+  }
+};
+function resolved(p) {
+  let dir = path5.resolve(p);
+  const rest = [];
+  for (; ; ) {
+    const r = realOf(dir);
+    if (r) return path5.join(r, ...rest);
+    const up = path5.dirname(dir);
+    if (up === dir) return path5.resolve(p);
+    rest.unshift(path5.basename(dir));
+    dir = up;
+  }
+}
+var inside = (p, dir) => {
+  const rel = path5.relative(dir, p);
+  return !rel || !rel.startsWith("..") && !path5.isAbsolute(rel);
+};
+var MAX_SCANNED = 2e4;
+function allSecrets(dir) {
+  const root = realOf(dir) ?? dir;
+  const found = [];
+  let seen = 0;
+  const stack = [dir];
+  while (stack.length) {
+    const d = stack.pop();
+    let entries;
+    try {
+      entries = fs6.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return void 0;
+    }
+    for (const e of entries) {
+      if (++seen > MAX_SCANNED) return void 0;
+      const p = path5.join(d, e.name);
+      if (e.isSymbolicLink()) {
+        const target = realOf(p);
+        if (!target || !inside(target, root)) return void 0;
+        if (looksSecret(e.name)) found.push(p);
+      } else if (e.isDirectory()) stack.push(p);
+      else if (looksSecret(e.name)) found.push(p);
+    }
+  }
+  return found;
+}
+function outsideReads(prompt, workspace, project) {
+  if (process.platform === "win32") return [];
+  const homeDir = realOf(os3.homedir()) ?? os3.homedir();
+  const ws = realOf(workspace) ?? path5.resolve(workspace);
+  const proj = project ? resolved(project) : void 0;
+  const own = realOf(home()) ?? home();
+  const found = /* @__PURE__ */ new Map();
+  for (const { abs } of pathsIn(prompt)) {
+    const p = realOf(abs);
+    if (!p || found.has(p) || inside(p, ws) || inside(p, own)) continue;
+    if (inside(homeDir, p) || inside(ws, p) || proj && inside(proj, p)) continue;
+    if (p.split(/[\\/]/).filter(Boolean).length < 2) continue;
+    if (inside(p, homeDir) && /^(\.|Library([\\/]|$))/.test(path5.relative(homeDir, p))) continue;
+    if (!isDir(p)) {
+      if (!looksSecret(path5.basename(p))) found.set(p, { path: p, secrets: [] });
+    } else {
+      const secrets = allSecrets(p);
+      if (secrets) found.set(p, { path: p, secrets });
+    }
+    if (found.size >= MAX_READS) break;
+  }
+  return [...found.values()];
+}
 function baseSettings() {
   return {
     enableTerminalSandbox: true,
@@ -614,12 +707,12 @@ function baseSettings() {
 }
 var rulePath = (p) => p.replace(/^[A-Za-z]:(?=[\\/])/, "").replace(/\\/g, "/");
 var HOMES_KEPT_DAYS = 14;
-function workerHome(workspace) {
+function workerHome(workspace, reads = []) {
   const root = path5.join(home(), "antigravity-home");
   const id2 = crypto3.createHash("sha256").update(path5.resolve(workspace)).digest("hex").slice(0, 16);
   const dir = path5.join(root, id2);
   fs6.mkdirSync(dataDir(dir), { recursive: true });
-  writeIfChanged(path5.join(dataDir(dir), "settings.json"), `${JSON.stringify(workerSettings(workspace, dir), null, 2)}
+  writeIfChanged(path5.join(dataDir(dir), "settings.json"), `${JSON.stringify(workerSettings(workspace, dir, reads), null, 2)}
 `);
   if (process.platform === "darwin") {
     fs6.mkdirSync(path5.join(dir, "Library"), { recursive: true });
@@ -643,11 +736,25 @@ function pruneHomes(root, keep) {
   } catch {
   }
 }
+function inCopy(prompt, project) {
+  if (!project || project.root === project.copy) return prompt;
+  const root = resolved(project.root);
+  let out = "";
+  let from = 0;
+  for (const { raw, at, abs } of pathsIn(prompt)) {
+    const p = resolved(abs);
+    if (!inside(p, root)) continue;
+    out += prompt.slice(from, at) + path5.join(project.copy, path5.relative(root, p));
+    from = at + raw.length;
+  }
+  return out + prompt.slice(from);
+}
 function invocation(req) {
+  const prompt = inCopy(req.prompt, req.project);
   const args = [
     // -p takes the prompt as its value; one that starts with "-" would be read as an option: a leading space keeps it a value.
     "-p",
-    req.prompt.startsWith("-") ? ` ${req.prompt}` : req.prompt,
+    prompt.startsWith("-") ? ` ${prompt}` : prompt,
     "--output-format",
     "stream-json",
     "--mode",
@@ -662,7 +769,7 @@ function invocation(req) {
   if (model) args.push("--model", model);
   if (effort) args.push("--effort", effort);
   const { command, prefix } = resolveCommand(binary());
-  const workerDir = workerHome(req.cwd);
+  const workerDir = workerHome(req.cwd, outsideReads(prompt, req.cwd, req.project?.root));
   const env = { HOME: workerDir };
   if (process.platform === "win32") env.USERPROFILE = workerDir;
   return { command, args: [...prefix, ...args], env };
@@ -4986,7 +5093,7 @@ function verifyRefs(refs, dirs) {
     if (!files.length) {
       if (!ref.file.includes("/") && !isFileName(ref.file)) continue;
       total++;
-      invalid.push({ ref: ref.text, reason: path26.isAbsolute(ref.file) && !inside(ref.file, roots) ? "outside the project" : "file not found" });
+      invalid.push({ ref: ref.text, reason: path26.isAbsolute(ref.file) && !inside2(ref.file, roots) ? "outside the project" : "file not found" });
       continue;
     }
     total++;
@@ -5036,16 +5143,16 @@ function indexFiles(roots) {
   return index;
 }
 function resolve(ref, roots) {
-  const candidates = path26.isAbsolute(ref) ? inside(ref, roots) ? [ref] : [] : roots.map((r) => path26.join(r, ref));
+  const candidates = path26.isAbsolute(ref) ? inside2(ref, roots) ? [ref] : [] : roots.map((r) => path26.join(r, ref));
   return candidates.find((c) => {
     try {
-      return fs30.statSync(c).isFile() && inside(c, roots);
+      return fs30.statSync(c).isFile() && inside2(c, roots);
     } catch {
       return false;
     }
   });
 }
-function inside(file2, roots) {
+function inside2(file2, roots) {
   return roots.some((r) => {
     const rel = path26.relative(r, path26.resolve(file2));
     return rel !== "" && !rel.startsWith("..") && !path26.isAbsolute(rel);
@@ -5054,7 +5161,7 @@ function inside(file2, roots) {
 var escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
 // src/core/run.ts
-var VERSION2 = true ? "0.24.0" : "0.0.0-dev";
+var VERSION2 = true ? "0.25.0" : "0.0.0-dev";
 function planWork(o) {
   if (!o.plan) return { task: o.task.trim(), tier: o.tier };
   if (o.continueFrom) throw new UserError("a follow-up continues its parent's task; drop --plan/--step");
@@ -5471,7 +5578,8 @@ function attempt(meta, backend, target) {
     sessionId: meta.sessionId,
     files: meta.files,
     web: !!meta.web,
-    title: `pitroom ${meta.mode}: ${meta.task.replace(/\s+/g, " ").slice(0, 60)}`
+    title: `pitroom ${meta.mode}: ${meta.task.replace(/\s+/g, " ").slice(0, 60)}`,
+    project: meta.repoRoot && (meta.snapshot?.dir ?? meta.worktree) && meta.cwd !== meta.dir ? { root: meta.repoRoot, copy: meta.snapshot?.dir ?? meta.worktree } : void 0
   });
   return spawnWorker(inv, {
     cwd: meta.cwd,
@@ -6587,7 +6695,8 @@ var MISSING = `<!doctype html><meta charset="utf-8"><title>Pitroom</title><body
 
 // src/core/dash.ts
 var DEFAULT_PORT = 7878;
-var WEEK_MS2 = 7 * 24 * 3600 * 1e3;
+var DAY_MS = 24 * 3600 * 1e3;
+var PERIODS = { day: 1, week: 7, month: 30, half: 182, all: Infinity };
 var SCAN = 400;
 var RUN_ID3 = /^\d{8}-\d{6}-[0-9a-f]{4}$/;
 var LOCAL_HOST = /^(127\.0\.0\.1|localhost|\[::1\]):\d+$/i;
@@ -6659,10 +6768,17 @@ function dashState(opts = {}) {
   }
   const whole = new Set(metas.slice(0, limit).flatMap((m) => m.group ? [m.group] : []));
   const runs = metas.filter((m, i) => i < limit || m.group && whole.has(m.group)).map(toRun);
+  const now = Date.now();
+  const ledger = readLedger();
+  const within = (at, days2) => !!at && Date.parse(at) >= now - days2 * DAY_MS;
+  const per = (f) => Object.fromEntries(Object.entries(PERIODS).map(([p, days2]) => [p, f(days2)]));
   return {
     price: primaryPrice().name,
     running: runs.filter((r) => r.state === "running" || r.state === "queued").length,
-    saved: totals(readLedger(Date.now() - WEEK_MS2)).saved,
+    finished: per(
+      (days2) => opts.group ? metas.filter((m) => m.state === "done" && !m.auditOf && within(m.endedAt, days2)).length : ledger.filter((e) => e.state === "done" && within(e.at, days2)).length
+    ),
+    saved: per((days2) => totals(ledger.filter((e) => within(e.at, days2))).saved),
     groups: [...groups].sort(),
     runs
   };
@@ -7696,7 +7812,7 @@ function answerParts(answer) {
   const summary = s ? s[1] : text.split(/^\s*(?:DETAILS|FILES CHANGED|VERIFICATION|OPEN ISSUES):/m)[0];
   return { summary: summary.trim(), details: (d?.[1] ?? "").trim() };
 }
-function pathsIn(text) {
+function pathsIn2(text) {
   const found = text.replace(/\\/g, "/").match(/[A-Za-z0-9_.@\-/]+\.[A-Za-z0-9]{1,8}(?::\d+)?/g) ?? [];
   return [...new Set(found.map((p) => clean(p.replace(/:\d+$/, ""))))];
 }
@@ -7708,7 +7824,7 @@ function scoreAnswer(q, truth, answer, root) {
   if ("line" in truth) {
     const flat = summary.replace(/\s+/g, " ");
     if (new RegExp(`(^|[^\\w./-])\\.?/?${escape2(truth.path)}:${truth.line}(?!\\d)`).test(flat)) return { score: 1, got: `${truth.path}:${truth.line}` };
-    const named = pathsIn(flat).includes(truth.path);
+    const named = pathsIn2(flat).includes(truth.path);
     return { score: named ? 0.5 : 0, got: flat.slice(0, 120) };
   }
   if ("count" in truth) {
@@ -7716,8 +7832,8 @@ function scoreAnswer(q, truth, answer, root) {
     const got2 = n ? Number(n[0].replace(/,/g, "")) : void 0;
     return { score: got2 === truth.count ? 1 : 0, got: got2 === void 0 ? "(no number)" : String(got2) };
   }
-  let got = pathsIn(summary);
-  if (!got.length) got = pathsIn(details);
+  let got = pathsIn2(summary);
+  if (!got.length) got = pathsIn2(details);
   const hit = got.filter((p) => truth.files.includes(p)).length;
   const precision = got.length ? hit / got.length : 0;
   const recall = truth.files.length ? hit / truth.files.length : got.length ? 0 : 1;
@@ -7880,9 +7996,9 @@ function writePackage(job) {
   const root = repoRoot(job.dir);
   if (!g || !root) throw new UserError(`not a git repository: ${job.dir}`);
   const name = `review-${crypto13.randomBytes(4).toString("hex")}.md`;
-  const inside2 = !path35.relative(fs40.realpathSync(root), fs40.realpathSync(g)).startsWith("..");
-  const file2 = inside2 ? path35.join(g, "pitroom", name) : path35.join(root, ".pitroom", name);
-  if (!inside2) ignoreInGit(root, "/.pitroom/");
+  const inside3 = !path35.relative(fs40.realpathSync(root), fs40.realpathSync(g)).startsWith("..");
+  const file2 = inside3 ? path35.join(g, "pitroom", name) : path35.join(root, ".pitroom", name);
+  if (!inside3) ignoreInGit(root, "/.pitroom/");
   fs40.mkdirSync(path35.dirname(file2), { recursive: true });
   fs40.writeFileSync(file2, job.package);
   return file2;
@@ -8615,9 +8731,9 @@ function doctor8(probe2) {
   section2("Worker chain");
   const chain = [];
   try {
-    const resolved = resolveChain();
-    chain.push(resolved.worker, ...resolved.fallback);
-    for (const w of resolved.warnings) add2("warn", w);
+    const resolved2 = resolveChain();
+    chain.push(resolved2.worker, ...resolved2.fallback);
+    for (const w of resolved2.warnings) add2("warn", w);
   } catch (e) {
     add2("fail", e.message);
   }