projectinator 0.1.5 → 0.3.0

package/src/roles.ts

@@ -5,25 +5,25 @@
 // the orchestrator's feedback loop depends on.
 
 import {
-  AuthStorage,
-  ModelRegistry,
   createAgentSession,
   defineTool,
   type AgentSession,
 } from "@earendil-works/pi-coding-agent";
 import { Type, type Static } from "typebox";
-import type {
-  Backend,
-  Capability,
-  Provider,
-  RegistryEntry,
-  RoleExecutor,
-  RoleResult,
-  Task,
-  Verdict,
+import {
+  TaskLimitError,
+  type Backend,
+  type Capability,
+  type Provider,
+  type RegistryEntry,
+  type RoleExecutor,
+  type RoleResult,
+  type Task,
+  type TaskLimits,
+  type Verdict,
 } from "./types.js";
-import { resolvePiModel } from "./executor.js";
-import { renderCheck } from "./preview.js";
+import { piRuntime, resolvePiModel } from "./executor.js"
+import { renderCheck, chromiumAvailable, CHROMIUM_INSTALL_HINT } from "./preview.js";
 import { estimateCost } from "./cost.js";
 import { getModel } from "./models.js";
 import { addSessionCost } from "./session-cost.js";
@@ -45,6 +45,11 @@ const ROLE_INTRO: Record<Capability, string> = {
     "reuse and extend existing files, follow the file structure the design spec defines, and make sure files reference each other with correct paths " +
     "(imports/requires, <script src> and <link href>, relative paths). Create only the files this task needs; never delete or clobber files unrelated to your task. " +
     "MUST-RUN-ON-DOUBLE-CLICK: for a plain static site with no bundler/build step, the app has to work when the user just opens index.html as a file (file://). Do NOT use `<script type=\"module\">` with relative `import`s, and do not `fetch()` local files — browsers block both on file://, leaving a blank page. Split code with several plain `<script src>` tags in dependency order (globals), not ES modules. If the app genuinely needs a server (a real backend, bundler, or framework), write a short README.md with the exact run command.",
+  review:
+    "You are the REVIEWER. Do NOT edit files and do NOT run the app. Read the task, the design context, and the files in the working directory. " +
+    "Check: every file the design named exists; every <script src> / <link href> / import resolves to a real file; nothing is referenced but never defined " +
+    "(functions, element ids, CSS classes the JS relies on); a plain static site uses no ES modules or fetch() of local files (both break on double-click / file://); " +
+    "and the task's stated deliverable is actually present. Report only real defects a developer must fix — not style. Then call submit_verdict exactly once.",
   test: "You are the TESTER. For a web app, FIRST call check_app to actually run it in a headless browser — it reports how the app renders BOTH served over http AND opened directly as a file (double-click / file://). Confirm it renders, shows the expected content, and has no JavaScript/console errors. The app MUST also work on double-click (file://) UNLESS a README documents how to run it — if check_app says double-click is BROKEN and there is no README with a run command, that is a HIGH-severity bug (report it, describe the file:// failure). Then inspect the files against the task and check multi-file wiring (referenced files exist, paths/imports resolve). Then call submit_verdict with pass/fail and any bugs. A blank render or a JS error is a high-severity bug. Do not fix anything yourself.",
   ops: "You are OPS. Perform the operational task (build, config, deploy prep) using your tools. Report what you did as text.",
 };
@@ -56,7 +61,7 @@ export function buildRolePrompt(task: Task, contextText: string): string {
     `Task ${task.id}: ${task.title}`,
     contextText ? `\n${contextText}` : "",
     "",
-    task.capability === "test"
+    task.capability === "test" || task.capability === "review"
       ? "When finished, call submit_verdict exactly once."
       : "Complete the task, then stop. Do not explain at length.",
   ];
@@ -80,8 +85,10 @@ type VerdictRaw = Static<typeof VerdictSchema>;
 
 // ---- tester "run the app" tool: headless render + error capture ----
 
-function buildCheckTool(workspace: string) {
-  return defineTool({
+/** check_app + a flag telling whether a render actually happened this task. */
+function buildCheckTool(workspace: string, chromium: boolean) {
+  let rendered = false;
+  const tool = defineTool({
     name: "check_app",
     label: "Run the app",
     description:
@@ -93,8 +100,15 @@ function buildCheckTool(workspace: string) {
       { additionalProperties: true },
     ),
     execute: async (_id, params: { file?: string }) => {
+      if (!chromium) {
+        return {
+          content: [{ type: "text", text: `check_app is UNAVAILABLE: headless Chromium is not installed (${CHROMIUM_INSTALL_HINT}). You cannot run the app. Review the files by reading them, say so in your verdict, and do not claim the app was executed.` }],
+          details: {},
+        };
+      }
       try {
         const r = await renderCheck(workspace, params.file || "index.html");
+        rendered = true;
         const doubleClick = r.doubleClickBroken
           ? "BROKEN — renders behind a server but is blank/erroring when opened directly as a file (double-click). "
             + "Most likely ES modules + relative imports (or fetch of local files), which browsers block on file://. "
@@ -119,9 +133,10 @@ function buildCheckTool(workspace: string) {
       }
     },
   });
+  return { tool, rendered: () => rendered };
 }
 
-function buildVerdictTool() {
+function buildVerdictTool(runtimeChecked: () => boolean) {
   let captured: Verdict | undefined;
   const tool = defineTool({
     name: "submit_verdict",
@@ -129,7 +144,7 @@ function buildVerdictTool() {
     description: "Submit your pass/fail judgement and any bugs found.",
     parameters: VerdictSchema,
     execute: async (_id, params: VerdictRaw) => {
-      captured = { passed: params.passed, bugs: params.bugs };
+      captured = { passed: params.passed, bugs: params.bugs, runtimeChecked: runtimeChecked() };
       return {
         content: [{ type: "text", text: `Verdict: ${params.passed ? "PASS" : "FAIL"} (${params.bugs.length} bugs)` }],
         details: {},
@@ -144,16 +159,17 @@ function buildVerdictTool() {
 // that provider's sensible model, so route() resolves everything to it.
 
 const PROVIDER_MODELS: Record<Provider, { strong: string; mid: string; cheap: string }> = {
-  anthropic: { strong: "claude-opus-4-8", mid: "claude-sonnet-4-6", cheap: "claude-haiku-4-5" },
+  anthropic: { strong: "claude-opus-5", mid: "claude-sonnet-5", cheap: "claude-haiku-4-5" },
   openai: { strong: "gpt-5.6-sol", mid: "gpt-5.6-terra", cheap: "gpt-5.6-luna" },
-  google: { strong: "gemini-3.1-pro-preview", mid: "gemini-3.1-pro-preview", cheap: "gemini-3-flash-preview" },
-  openrouter: { strong: "anthropic/claude-opus-4.8", mid: "anthropic/claude-sonnet-4.6", cheap: "openai/gpt-5.6-luna" },
+  google: { strong: "gemini-3.1-pro-preview", mid: "gemini-3.1-pro-preview", cheap: "gemini-3.8-flash" },
+  openrouter: { strong: "anthropic/claude-opus-5", mid: "anthropic/claude-sonnet-5", cheap: "google/gemini-3.8-flash" },
 };
 
 const CAP_STRENGTH: Record<Capability, "strong" | "mid" | "cheap"> = {
   plan: "mid",
   design: "strong",
   code: "strong",
+  review: "cheap",
   test: "cheap",
   ops: "strong",
 };
@@ -161,7 +177,7 @@ const CAP_STRENGTH: Record<Capability, "strong" | "mid" | "cheap"> = {
 /** A registry where every capability routes to one provider's models. */
 export function lockRegistryToProvider(provider: Provider): RegistryEntry[] {
   const m = PROVIDER_MODELS[provider];
-  const caps: Capability[] = ["plan", "design", "code", "test", "ops"];
+  const caps: Capability[] = ["plan", "design", "code", "review", "test", "ops"];
   const tiers = ["fast", "mid", "high"] as const;
   const out: RegistryEntry[] = [];
   for (const capability of caps) {
@@ -183,7 +199,6 @@ export function lockRegistryToProvider(provider: Provider): RegistryEntry[] {
 export interface PiExecutorOptions {
   workspace: string;
   backend: Backend;
-  authStorage?: AuthStorage;
   thinkingLevel?: "off" | "low" | "medium" | "high";
   onEvent?: Parameters<AgentSession["subscribe"]>[0];
   /** Called when a task falls back from its routed provider to another one. */
@@ -262,8 +277,6 @@ function listFiles(dir: string): string[] {
 /** Build a real RoleExecutor backed by Pi. Each call spends money. Falls back to
  *  another key-holding provider when the routed one errors or returns 0 tokens. */
 export function makePiExecutor(opts: PiExecutorOptions): RoleExecutor {
-  const authStorage = opts.authStorage ?? AuthStorage.create();
-
   // One attempt on a specific provider/model. Returns the result + total tokens
   // (0 tokens = the provider call didn't really happen → treat as a failure).
   const runOnce = async (
@@ -271,31 +284,54 @@ export function makePiExecutor(opts: PiExecutorOptions): RoleExecutor {
     contextText: string,
     provider: Provider,
     modelId: string,
+    limits: TaskLimits,
   ): Promise<{ result: RoleResult; tokensTotal: number }> => {
-    const registry = ModelRegistry.create(authStorage);
-    const model = resolvePiModel(registry, provider, modelId);
+    const runtime = await piRuntime();
+    const model = resolvePiModel(runtime, provider, modelId);
 
     const isTest = task.capability === "test";
-    const verdictTool = isTest ? buildVerdictTool() : undefined;
-    const checkTool = isTest ? buildCheckTool(opts.workspace) : undefined;
+    const isReview = task.capability === "review";
+    const checkTool = isTest ? buildCheckTool(opts.workspace, await chromiumAvailable()) : undefined;
+    // A review never runs the app, so its verdict is never "runtime checked".
+    const verdictTool = isTest || isReview ? buildVerdictTool(checkTool ? checkTool.rendered : () => false) : undefined;
 
     const { session } = await createAgentSession({
       model,
       cwd: opts.workspace,
-      authStorage,
-      modelRegistry: registry,
+      modelRuntime: runtime,
       thinkingLevel: opts.thinkingLevel ?? "medium",
       ...(isTest
-        ? { customTools: [verdictTool!.tool, checkTool!], tools: ["read", "bash", "ls", "grep", "find", "check_app", "submit_verdict"] }
-        : { tools: ["read", "write", "edit", "bash", "ls", "grep", "find"] }),
+        ? { customTools: [verdictTool!.tool, checkTool!.tool], tools: ["read", "bash", "ls", "grep", "find", "check_app", "submit_verdict"] }
+        : isReview
+          ? { customTools: [verdictTool!.tool], tools: ["read", "ls", "grep", "find", "submit_verdict"] }
+          : { tools: ["read", "write", "edit", "bash", "ls", "grep", "find"] }),
     });
 
     const unsub = opts.onEvent ? session.subscribe(opts.onEvent) : undefined;
+
+    // Per-task limits. Cost is checked on every session event (Pi updates its stats as
+    // each assistant turn lands); time by a timer. On breach the session is aborted and
+    // the awaited prompt settles; we then throw so the orchestrator halts the build.
+    let breach: TaskLimitError | undefined;
+    const trip = (e: TaskLimitError) => {
+      if (breach) return;
+      breach = e;
+      void session.abort();
+    };
+    const unsubCost = limits.costCapUSD > 0
+      ? session.subscribe(() => {
+          const spent = session.getSessionStats().cost;
+          if (spent > limits.costCapUSD) trip(new TaskLimitError("cost", task.id, round2(spent), `spent $${spent.toFixed(2)} > per-task cap $${limits.costCapUSD}`));
+        })
+      : undefined;
+    const timer = limits.timeoutMs > 0
+      ? setTimeout(() => trip(new TaskLimitError("timeout", task.id, round2(session.getSessionStats().cost), `ran longer than ${Math.round(limits.timeoutMs / 60_000)} min`)), limits.timeoutMs)
+      : undefined;
     try {
-      // Give code/test the WHOLE current file tree (not just direct-dep files), so a
+      // Give code/review/test the WHOLE current file tree (not just direct-dep files), so a
       // dev building one file knows every other file that already exists to wire into.
       let fullContext = contextText;
-      if (task.capability === "code" || task.capability === "test") {
+      if (task.capability === "code" || task.capability === "review" || task.capability === "test") {
         const existing = listFiles(opts.workspace);
         if (existing.length) {
           fullContext = [contextText, `Files already in the working directory:\n${existing.map((f) => `  ${f}`).join("\n")}`]
@@ -303,16 +339,18 @@ export function makePiExecutor(opts: PiExecutorOptions): RoleExecutor {
             .join("\n\n");
         }
       }
-      await session.prompt(buildRolePrompt(task, fullContext));
+      // An aborted prompt may reject with Pi's own error; the breach is the real cause.
+      await session.prompt(buildRolePrompt(task, fullContext)).catch((e: unknown) => { if (!breach) throw e; });
+      if (breach) throw breach;
 
       let verdict = verdictTool?.get();
-      if (isTest && !verdict) {
-        await session.followUp("Call submit_verdict now with your judgement.");
+      if (verdictTool && !verdict) {
+        await session.followUp("Call submit_verdict now with your judgement.").catch((e: unknown) => { if (!breach) throw e; });
         verdict = verdictTool?.get();
       }
+      if (breach) throw breach;
 
       const stats = session.getSessionStats();
-      addSessionCost(stats.cost);
       // Feed real usage back to sharpen estimates — but only for a real run.
       if (stats.tokens.total > 0) {
         const inputTotal = stats.tokens.input + stats.tokens.cacheRead;
@@ -326,24 +364,28 @@ export function makePiExecutor(opts: PiExecutorOptions): RoleExecutor {
       };
       return { result, tokensTotal: stats.tokens.total };
     } finally {
+      clearTimeout(timer);
+      unsubCost?.();
+      addSessionCost(session.getSessionStats().cost); // bill every attempt, aborted or not
       unsub?.();
       session.dispose();
     }
   };
 
-  return async ({ task, decision, contextText }) => {
+  return async ({ task, decision, contextText, limits }) => {
     const chain = fallbackChain(decision.provider, decision.model.id, task.capability);
     let lastErr: unknown;
     for (let i = 0; i < chain.length; i++) {
       const cand = chain[i]!;
       try {
-        const att = await runOnce(task, contextText, cand.provider, cand.model);
+        const att = await runOnce(task, contextText, cand.provider, cand.model, limits);
         if (att.tokensTotal > 0) {
           if (i > 0) opts.onFallback?.({ taskId: task.id, from: decision.provider, to: cand.provider, model: cand.model });
           return att.result;
         }
         lastErr = new Error(`${cand.provider}/${cand.model} returned 0 tokens (invalid key, no account credit/balance, or no access to this model)`);
       } catch (e) {
+        if (e instanceof TaskLimitError) throw e; // a limit breach is final — never retry elsewhere
         lastErr = e;
       }
     }
@@ -356,4 +398,4 @@ function round2(n: number): number {
 }
 
 // exported for tests
-export { buildVerdictTool, VerdictSchema, estimateCost, getModel };
+export { buildCheckTool, buildVerdictTool, VerdictSchema, estimateCost, getModel };

package/src/router.ts

@@ -81,7 +81,7 @@ export function route(task: Task, ctx: RouteContext): RouteDecision {
 
   // 5. Cost.
   const cost = estimateCost(task.estTokens, model);
-  const runningTotal = round2((ctx.runningTotalBefore ?? 0) + cost);
+  const runningTotal = Math.round(((ctx.runningTotalBefore ?? 0) + cost) * 10_000) / 10_000;
   const overCap = runningTotal > policy.budgetCapUSD;
   if (overCap) reasons.push(`OVER CAP: running $${runningTotal} > cap $${policy.budgetCapUSD}`);
 
@@ -110,14 +110,11 @@ export function routeBacklog(tasks: Task[], ctx: RouteContext): RouteDecision[]
   return out;
 }
 
-function round2(n: number): number {
-  return Math.round(n * 100) / 100;
-}
-
 /** A sensible default policy. */
 export const DEFAULT_POLICY: RoutingPolicy = {
   backendMode: "cost-first",
   budgetCapUSD: 15,
   difficultyToTier: { trivial: "fast", low: "mid", medium: "mid", high: "high" },
   maxFeedbackRounds: 3,
+  taskLimits: { timeoutMs: 10 * 60_000, costCapUSD: 3 },
 };

package/src/run-build.ts

@@ -11,7 +11,6 @@
 import { mkdirSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
-import { AuthStorage } from "@earendil-works/pi-coding-agent";
 import type { AgentSessionEvent } from "@earendil-works/pi-coding-agent";
 import type { Provider, Task } from "./types.js";
 import { DEFAULT_POLICY } from "./router.js";
@@ -20,7 +19,7 @@ import { lockRegistryToProvider, makePiExecutor } from "./roles.js";
 import { estimateTokens } from "./estimate.js";
 import { route } from "./router.js";
 import { decomposeIdea } from "./pm.js";
-import { newBuildState, saveState, loadState, type BuildState } from "./build-state.js";
+import { newBuildState, saveState, loadState, completedIds, type BuildState } from "./build-state.js";
 import { initRepo, commitTask } from "./git.js";
 
 const args = process.argv.slice(2);
@@ -32,16 +31,25 @@ const lockIdx = args.indexOf("--lock");
 const lockProvider = (lockIdx >= 0 ? args[lockIdx + 1] : "anthropic") as Provider;
 const concIdx = args.indexOf("--concurrency");
 const concurrency = Math.max(1, parseInt((concIdx >= 0 ? args[concIdx + 1] : "1") ?? "1", 10) || 1);
+const capIdx = args.indexOf("--task-cap");
+const tmoIdx = args.indexOf("--task-timeout");
 const consumed = new Set(
   ["--live", "--mini", "--fan", "--resume", "--lock", lockIdx >= 0 ? args[lockIdx + 1] : "",
-    "--concurrency", concIdx >= 0 ? args[concIdx + 1] : ""].filter(Boolean),
+    "--concurrency", concIdx >= 0 ? args[concIdx + 1] : "",
+    "--task-cap", capIdx >= 0 ? args[capIdx + 1] : "",
+    "--task-timeout", tmoIdx >= 0 ? args[tmoIdx + 1] : ""].filter(Boolean),
 );
 const idea = args.filter((a) => !consumed.has(a)).join(" ").trim() ||
   "A one-page site with a headline and a contact form.";
 
 const money = (n: number) => `$${n.toFixed(2)}`;
 const registry = lockRegistryToProvider(lockProvider);
-const policy = { ...DEFAULT_POLICY, backendMode: "api" as const, budgetCapUSD: mini ? 10 : 25 };
+// --task-cap USD / --task-timeout MIN override the per-task limits (0 = unlimited).
+const taskLimits = {
+  costCapUSD: capIdx >= 0 ? parseFloat(args[capIdx + 1] ?? "") : DEFAULT_POLICY.taskLimits.costCapUSD,
+  timeoutMs: tmoIdx >= 0 ? parseFloat(args[tmoIdx + 1] ?? "") * 60_000 : DEFAULT_POLICY.taskLimits.timeoutMs,
+};
+const policy = { ...DEFAULT_POLICY, backendMode: "api" as const, budgetCapUSD: mini ? 10 : 25, taskLimits };
 
 // --- a tiny fixed backlog for cheap end-to-end proof ---
 function miniBacklog(): Task[] {
@@ -51,7 +59,8 @@ function miniBacklog(): Task[] {
   return [
     mk("D-1", "design", "low", "Write a short design spec for a centered card that says 'Hello from Projectinator' on a soft gradient background."),
     mk("C-1", "code", "low", "Create index.html implementing the design spec exactly. Single self-contained file with embedded CSS.", ["D-1"]),
-    mk("T-1", "test", "trivial", "Open/read index.html and verify it is valid HTML and matches the design spec (centered card, the headline text, a gradient).", ["C-1"]),
+    mk("R-1", "review", "trivial", "Review index.html against the design spec: file present, no unresolved references, runs on double-click.", ["C-1"]),
+    mk("T-1", "test", "trivial", "Open/read index.html and verify it is valid HTML and matches the design spec (centered card, the headline text, a gradient).", ["R-1"]),
   ];
 }
 
@@ -66,7 +75,9 @@ function fanBacklog(): Task[] {
     mk("DB", "design", "low", "Design spec for an 'FAQ' accordion (3 questions)."),
     mk("CA", "code", "low", "Create newsletter.html from the newsletter design spec.", ["DA"]),
     mk("CB", "code", "low", "Create faq.html from the FAQ design spec.", ["DB"]),
-    mk("TJ", "test", "trivial", "Verify newsletter.html and faq.html are valid and match their specs.", ["CA", "CB"]),
+    mk("RA", "review", "trivial", "Review newsletter.html against its spec.", ["CA"]),
+    mk("RB", "review", "trivial", "Review faq.html against its spec.", ["CB"]),
+    mk("TJ", "test", "trivial", "Verify newsletter.html and faq.html are valid and match their specs.", ["RA", "RB"]),
   ];
 }
 
@@ -135,7 +146,7 @@ if (prior) {
   state.status = "running";
   tasks = prior.tasks; // authoritative backlog from the interrupted run
   seedOutcomes = prior.outcomes;
-  const doneCount = new Set(prior.outcomes.map((o) => o.taskId)).size;
+  const doneCount = completedIds(prior).size;
   console.log(`  Resuming: ${doneCount} task(s) already done, restored ${money(prior.totalCost)}.`);
 } else {
   if (resume) console.log("  (No prior state found — starting fresh.)");
@@ -159,8 +170,9 @@ const onProgress = (e: OrchestratorEvent) => {
   if (e.type === "task_start") console.log(`  ▶ ${e.task.id} [${e.task.capability}] -> ${e.provider}/${e.modelId} (round ${e.round})`);
   else if (e.type === "task_done") {
     const hash = commitTask(workspace, e.outcome.taskId, titleById.get(e.outcome.taskId) ?? e.outcome.taskId);
-    console.log(`    ✓ ${e.outcome.taskId} ${money(e.outcome.cost)}  running ${money(e.runningTotal)}${e.outcome.verdict ? `  verdict=${e.outcome.verdict.passed ? "PASS" : "FAIL"}` : ""}${hash ? `  [${hash}]` : ""}`);
+    console.log(`    ✓ ${e.outcome.taskId} ${money(e.outcome.cost)}  running ${money(e.runningTotal)}${e.outcome.verdict ? `  verdict=${e.outcome.verdict.passed ? (e.outcome.verdict.runtimeChecked ? "PASS" : "PASS* (app not executed — no Chromium)") : "FAIL"}` : ""}${hash ? `  [${hash}]` : ""}`);
   }
+  else if (e.type === "task_failed") console.log(`    ⛔ ${e.outcome.taskId} ABORTED (${e.outcome.error}) — billed ${money(e.outcome.cost)}, halting`);
   else if (e.type === "task_skipped") console.log(`    · ${e.taskId} skipped (already done)`);
   else if (e.type === "test_failed") console.log(`    ✗ ${e.taskId} FAILED (${e.bugs} bugs) — round ${e.round}`);
   else if (e.type === "retry_dev") console.log(`    ↻ re-running ${e.taskId} to fix ${e.forTest}`);

package/src/run-dev.ts

@@ -8,11 +8,10 @@
 import { mkdirSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
-import { AuthStorage, ModelRegistry } from "@earendil-works/pi-coding-agent";
 import type { AgentSessionEvent } from "@earendil-works/pi-coding-agent";
 import type { Task } from "./types.js";
 import { DEFAULT_POLICY, route } from "./router.js";
-import { buildDeveloperPrompt, executeTask, resolvePiModel } from "./executor.js";
+import { buildDeveloperPrompt, executeTask, piRuntime, resolvePiModel } from "./executor.js";
 
 const TASK: Task = {
   id: "T-DEV1",
@@ -29,9 +28,7 @@ const live = process.argv.includes("--live");
 const policy = { ...DEFAULT_POLICY, backendMode: "api" as const };
 const decision = route(TASK, { policy });
 
-const auth = AuthStorage.create();
-const registry = ModelRegistry.create(auth);
-const piModel = resolvePiModel(registry, decision.provider, decision.model.id); // offline, free
+const piModel = resolvePiModel(await piRuntime(), decision.provider, decision.model.id); // offline, free
 
 const money = (n: number) => `$${n.toFixed(2)}`;
 

package/src/run-pm.ts

@@ -5,11 +5,10 @@
 //
 // Live decomposition needs an API key (PM routes to an OpenAI model by default).
 
-import { AuthStorage, ModelRegistry } from "@earendil-works/pi-coding-agent";
 import type { AgentSessionEvent } from "@earendil-works/pi-coding-agent";
 import { DEFAULT_POLICY, routeBacklog } from "./router.js";
 import { findEntry } from "./registry.js";
-import { resolvePiModel } from "./executor.js";
+import { piRuntime, resolvePiModel } from "./executor.js"
 import { decomposeIdea, pmSystemPrompt } from "./pm.js";
 
 const args = process.argv.slice(2);
@@ -26,13 +25,12 @@ const idea = args.filter((a) => !consumed.has(a)).join(" ").trim() ||
 const backend = "api" as const; // web-login backend not built yet
 const money = (n: number) => `$${n.toFixed(2)}`;
 
-const auth = AuthStorage.create();
-const registry = ModelRegistry.create(auth);
+const runtime = await piRuntime();
 const { entry } = findEntry("plan", "mid");
 const pick = pmOverride
   ? { provider: pmOverride.split("/")[0] as typeof entry.byBackend[typeof backend]["provider"], model: pmOverride.split("/").slice(1).join("/") }
   : entry.byBackend[backend];
-const pm = resolvePiModel(registry, pick.provider, pick.model); // offline
+const pm = resolvePiModel(runtime, pick.provider, pick.model); // offline
 
 console.log(`\n  Projectinator — Phase 3 PM decomposer   [${live ? "LIVE" : "DRY"}]\n`);
 console.log(`  Idea:    ${idea}`);

package/src/tui/App.tsx

@@ -57,8 +57,15 @@ import {
   type ProjectInfo,
 } from "./engine.js";
 import { deploy, DEPLOY_META, type DeployTarget } from "./deploy.js";
-import { startStaticServer, type StaticServer } from "../preview.js";
-import type { Task, TaskOutcome } from "../types.js";
+import { startStaticServer, CHROMIUM_INSTALL_HINT, type StaticServer } from "../preview.js";
+import type { Capability, Task, TaskOutcome } from "../types.js";
+import { completedIds } from "../build-state.js";
+import type { Verdict } from "../types.js";
+
+/** Board label: PASS* = a TEST that passed without ever running the app (Chromium missing).
+ *  Reviews never run anything, so they are plain PASS/FAIL. */
+const verdictLabel = (v: Verdict, capability: Capability): "PASS" | "PASS*" | "FAIL" =>
+  !v.passed ? "FAIL" : v.runtimeChecked || capability !== "test" ? "PASS" : "PASS*";
 
 type Phase =
   | "setup" | "home" | "settings" | "projects" | "projectActions" | "addAsset" | "rename" | "confirmDelete" | "filterEpic" | "editBoard" | "kanban" | "templates" | "exportMenu" | "deployMenu" | "deploying" | "preview" | "bakeoff" | "history" | "retro" | "burndown" | "saveTemplate" | "importTemplate" | "myTemplates" | "tplActions"
@@ -77,7 +84,7 @@ export default function App(): React.ReactElement {
   const [tasks, setTasks] = useState<TaskView[]>([]);
   const [spent, setSpent] = useState(0);
   const [gate, setGate] = useState<{ resolve: (d: "continue" | "stop") => void } | null>(null);
-  const [buildResult, setBuildResult] = useState<{ halted: boolean; files: string[]; workspace: string } | null>(null);
+  const [buildResult, setBuildResult] = useState<{ halted: boolean; haltReason?: string; files: string[]; workspace: string } | null>(null);
 
   // Existing-project context (open/resume/make-changes).
   const [projects, setProjects] = useState<ProjectInfo[]>([]);
@@ -295,11 +302,14 @@ export default function App(): React.ReactElement {
                   ...t,
                   status: "done",
                   cost: (t.cost ?? 0) + e.outcome.cost,
-                  verdict: e.outcome.verdict ? (e.outcome.verdict.passed ? "PASS" : "FAIL") : t.verdict,
+                  verdict: e.outcome.verdict ? verdictLabel(e.outcome.verdict, e.outcome.capability) : t.verdict,
                 }
               : t,
           ),
         );
+      } else if (e.type === "task_failed") {
+        setSpent(e.runningTotal);
+        setTasks((ts) => ts.map((t) => (t.id === e.outcome.taskId ? { ...t, status: "failed", cost: (t.cost ?? 0) + e.outcome.cost } : t)));
       } else if (e.type === "task_skipped") {
         setTasks((ts) => ts.map((t) => (t.id === e.taskId ? { ...t, status: "skipped" } : t)));
       } else if (e.type === "test_failed") {
@@ -318,6 +328,7 @@ export default function App(): React.ReactElement {
     const handle = startBuild(idea, plan, {
       concurrency: prefs.concurrency,
       budgetCapUSD: projectCap ?? prefs.budgetCapUSD,
+      taskLimits: { timeoutMs: prefs.taskTimeoutMin * 60_000, costCapUSD: prefs.taskCostCapUSD },
       onEvent,
       workspace: targetWorkspace,
       seedOutcomes: seed,
@@ -329,7 +340,7 @@ export default function App(): React.ReactElement {
       .then((r) => {
         if (!alive) return;
         setSpent(r.totalCost);
-        setBuildResult({ halted: r.halted, files: r.files, workspace: handle.workspace });
+        setBuildResult({ halted: r.halted, haltReason: r.haltReason, files: r.files, workspace: handle.workspace });
         setPhase("done");
         if (getNotify()) {
           notifyBuildDone(
@@ -496,7 +507,7 @@ export default function App(): React.ReactElement {
   }
 
   if (phase === "projectActions" && selected) {
-    const doneIds = new Set(selected.state.outcomes.map((o) => o.taskId));
+    const doneIds = completedIds(selected.state);
     // Buildable if it was halted OR the backlog has tasks that were never built.
     const hasUnbuilt = selected.state.tasks.some((t) => !doneIds.has(t.id));
     const canResume = selected.status === "halted" || hasUnbuilt;
@@ -512,6 +523,7 @@ export default function App(): React.ReactElement {
       title: t.title,
       epic: t.epic,
       dependsOn: t.dependsOn,
+      notes: t.notes,
       status: doneIds.has(t.id) ? "done" : "pending",
       cost: costById.get(t.id),
       assignee: modelById.has(t.id) ? modelLabel(modelById.get(t.id)!) : undefined,
@@ -612,7 +624,7 @@ export default function App(): React.ReactElement {
                 setPhase("change");
               } else if (i.value === "resume") {
                 const { registry, lock } = chooseRegistry(providers);
-                const done = new Set(selected.state.outcomes.map((o) => o.taskId));
+                const done = completedIds(selected.state);
                 setPlan({
                   tasks: selected.state.tasks,
                   provider: lock ?? providers[0]!,
@@ -641,7 +653,7 @@ export default function App(): React.ReactElement {
   }
 
   if (phase === "editBoard" && selected) {
-    const doneIds = new Set(selected.state.outcomes.map((o) => o.taskId));
+    const doneIds = completedIds(selected.state);
     return (
       <Box flexDirection="column">
         <EditableBoard
@@ -817,7 +829,7 @@ export default function App(): React.ReactElement {
   }
 
   if (phase === "kanban" && selected) {
-    const done = new Set(selected.state.outcomes.map((o) => o.taskId));
+    const done = completedIds(selected.state);
     const costBy = new Map<string, number>();
     const modelBy = new Map<string, string>();
     for (const o of selected.state.outcomes) {
@@ -830,6 +842,7 @@ export default function App(): React.ReactElement {
       title: t.title,
       epic: t.epic,
       dependsOn: t.dependsOn,
+      notes: t.notes,
       status: done.has(t.id) ? "done" : "pending",
       cost: costBy.get(t.id),
       assignee: modelBy.has(t.id) ? modelLabel(modelBy.get(t.id)!) : undefined,
@@ -1572,13 +1585,14 @@ export default function App(): React.ReactElement {
 
   if (phase === "building") {
     const running = tasks.filter((t) => t.status === "running").length;
-    const metaById = new Map((plan?.tasks ?? []).map((t) => [t.id, { deps: t.dependsOn ?? [], epic: t.epic }]));
+    const metaById = new Map((plan?.tasks ?? []).map((t) => [t.id, { deps: t.dependsOn ?? [], epic: t.epic, notes: t.notes }]));
     const board: BoardTask[] = tasks.map((t) => ({
       id: t.id,
       capability: t.capability,
       title: t.title,
       epic: metaById.get(t.id)?.epic,
       dependsOn: metaById.get(t.id)?.deps,
+      notes: metaById.get(t.id)?.notes,
       status: t.status,
       cost: t.cost,
       verdict: t.verdict,
@@ -1630,6 +1644,9 @@ export default function App(): React.ReactElement {
               {alerting ? (
                 <Text color={C.warn}>⚠ {Math.round((spent / cap) * 100)}% of the ${cap} cap spent — nearing the limit.</Text>
               ) : null}
+              {board.some((t) => t.verdict === "PASS*") ? (
+                <Text color={C.warn}>⚠ Tester could not run the app (no headless Chromium) — PASS* verdicts are code-reading only. {CHROMIUM_INSTALL_HINT}.</Text>
+              ) : null}
             </Box>
           );
         })()}
@@ -1641,8 +1658,11 @@ export default function App(): React.ReactElement {
     return (
       <Box flexDirection="column">
         <Text bold color={buildResult.halted ? C.warn : C.good}>
-          {buildResult.halted ? "⚠ Build halted (budget cap)" : "✓ Build complete"}
+          {buildResult.halted ? `⚠ Build halted (${buildResult.haltReason ?? "budget cap"})` : "✓ Build complete"}
         </Text>
+        {tasks.some((t) => t.verdict === "PASS*") ? (
+          <Text color={C.warn}>⚠ Tests marked PASS* were never executed in a browser — {CHROMIUM_INSTALL_HINT}.</Text>
+        ) : null}
         <Box marginTop={1}>
           <Standup
             tasks={tasks.map((t) => ({ id: t.id, capability: t.capability, title: t.title, status: t.status, cost: t.cost, verdict: t.verdict }))}

package/src/tui/BoardEditor.tsx

@@ -11,7 +11,7 @@ import { cleanDeps } from "./engine.js";
 import { estimateTokens } from "../estimate.js";
 import { groupByEpic } from "./Kanban.js";
 
-const CAPS: Capability[] = ["plan", "design", "code", "test", "ops"];
+const CAPS: Capability[] = ["plan", "design", "code", "review", "test", "ops"]
 const DIFFS: Difficulty[] = ["trivial", "low", "medium", "high"];
 
 interface Card extends Task {
@@ -34,7 +34,7 @@ export function BoardEditor({
   const [items, setItems] = useState<Card[]>(() => tasks.map((t) => ({ ...t, parked: true })));
   const [cursor, setCursor] = useState(0);
   const [editing, setEditing] = useState(false);
-  const [editField, setEditField] = useState<"title" | "epic" | "deps">("title");
+  const [editField, setEditField] = useState<"title" | "epic" | "deps" | "notes">("title");
   const [draft, setDraft] = useState("");
   const [warn, setWarn] = useState("");
   const [busy, setBusy] = useState<string>(""); // epic being broken down
@@ -134,6 +134,10 @@ export function BoardEditor({
       setEditField("deps");
       setDraft((selected.dependsOn ?? []).join(" "));
       setEditing(true);
+    } else if (input === "n") {
+      setEditField("notes");
+      setDraft(selected.notes ?? "");
+      setEditing(true);
     } else if (input === "c") {
       const cap = CAPS[(CAPS.indexOf(selected.capability) + 1) % CAPS.length]!;
       update(selected.id, { capability: cap, estTokens: estimateTokens(cap, selected.difficulty) });
@@ -170,6 +174,7 @@ export function BoardEditor({
               )}
             </Box>
             {(c.dependsOn ?? []).length ? <Text color={C.dim}>  ↖ {(c.dependsOn ?? []).join(", ")}</Text> : null}
+            {c.notes ? <Text color={C.dim} wrap="truncate-end">  ✎ {c.notes}</Text> : null}
           </Box>
         );
       })}
@@ -202,6 +207,12 @@ export function BoardEditor({
           />
         </Box>
       ) : null}
+      {editing && editField === "notes" && selected ? (
+        <Box>
+          <Text color={C.accent}>Note for {selected.id} (yours only, never sent to the model): </Text>
+          <TextInput value={draft} onChange={setDraft} onSubmit={() => { update(selected.id, { notes: draft.trim() || undefined }); setEditing(false); }} />
+        </Box>
+      ) : null}
 
       {/* column headers */}
       <Box marginTop={1}>
@@ -233,6 +244,7 @@ export function BoardEditor({
           { keys: "e", label: "edit" },
           { keys: "g", label: "epic" },
           { keys: "D", label: "deps" },
+          { keys: "n", label: "note" },
           { keys: "c", label: "cap" },
           { keys: "f", label: "diff" },
           { keys: "b", label: "break" },