@alphacoder-v0/pi-loops 0.24.1 → 0.24.2

package/src/schedule.ts

@@ -127,6 +127,26 @@ export function formatSchedule(schedule: Schedule): string {
 	}
 }
 
+const DAY_NAMES = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat", "Sun"];
+
+/**
+ * A schedule as the page's Loops pane says it: the common cron shapes in words (`every hour`,
+ * `daily 09:00`, `weekdays 09:00`, `weekly Mon 09:00`), anything else as `formatSchedule` says it.
+ * A person who typed "daily" reads that back, not `0 9 * * *`.
+ */
+export function scheduleWords(schedule: Schedule): string {
+	if (schedule.kind !== "cron") return formatSchedule(schedule);
+	const [m, h, dom, mon, dow, ...rest] = schedule.expr.trim().split(/\s+/);
+	if (rest.length || dom !== "*" || mon !== "*") return schedule.expr;
+	if (m === "0" && h === "*" && dow === "*") return "every hour";
+	if (!/^\d{1,2}$/.test(m) || !/^\d{1,2}$/.test(h)) return schedule.expr;
+	const at = `${h.padStart(2, "0")}:${m.padStart(2, "0")}`;
+	if (dow === "*") return `daily ${at}`;
+	if (dow === "1-5") return `weekdays ${at}`;
+	if (/^[0-7]$/.test(dow)) return `weekly ${DAY_NAMES[Number(dow)]} ${at}`;
+	return schedule.expr;
+}
+
 /**
  * The machine's offset from UTC at that instant, as `+08:00`.
  *

package/src/seen.ts

@@ -5,6 +5,7 @@ import { Inbox, type InboxEntry } from "./inbox.ts";
 import { stamp } from "./schedule.ts";
 import { JobStore, type RunRecord } from "./store.ts";
 import { realpathish, sameProject } from "./paths.ts";
+import { plural } from "./plural.ts";
 
 /**
  * When `/inbox` was last looked at, per project: the terminal's `/inbox`, and the page's Mark all
@@ -232,7 +233,6 @@ export function sinceWords(sinceMs: number, nowMs: number): string {
 	return a.getFullYear() === b.getFullYear() ? `${date} ${time}` : `${date} ${a.getFullYear()} ${time}`;
 }
 
-const plural = (n: number, one: string, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
 
 /** How many findings came from this conversation, worth saying only when that is not all of them. */
 const fromHere = (s: AwaySummary): number => (s.fromThisConversation !== s.findings ? s.fromThisConversation : 0);

package/src/share.ts

@@ -9,7 +9,7 @@
  * taken back, so the summary comes first and the confirmation after it.
  */
 import { redact } from "./redact.ts";
-import { plural } from "./job-lines.ts";
+import { plural } from "./plural.ts";
 import { stamp } from "./schedule.ts";
 
 export interface ShareMessage {

package/src/store.ts

@@ -196,8 +196,17 @@ export function homeLoopsDir(agentDir: string): string {
 
 export function defaultLoopsDir(agentDir?: string): string {
 	if (process.env.PI_LOOPS_DIR) return process.env.PI_LOOPS_DIR;
-	const base = agentDir ?? process.env.PI_CODING_AGENT_DIR ?? path.join(os.homedir(), ".pi", "agent");
-	return path.join(base, "loops");
+	return path.join(agentDir ?? piAgentDir(), "loops");
+}
+
+/**
+ * pi's agent directory, by pi's rule (its `getAgentDir`): `PI_CODING_AGENT_DIR` with a leading `~`
+ * expanded, else `~/.pi/agent`. Here so that `pi-loops` does not load pi's SDK, about a second, for
+ * a path; test/store.test.ts holds it to the SDK's answer.
+ */
+export function piAgentDir(): string {
+	const env = process.env.PI_CODING_AGENT_DIR;
+	return env ? env.replace(/^~(?=$|\/)/, os.homedir()) : path.join(os.homedir(), ".pi", "agent");
 }
 
 /**

package/src/tools.ts

@@ -3,6 +3,7 @@
  * SetCronJobState and NewTrigger / ListTriggers / RemoveTrigger / SetTriggerState — as pi tool
  * definitions. One factory serves the interactive session (hop 0, registered with pi), every
  * in-process sub-session (hop 1, passed as customTools) and the headless host (hop 1, no UI).
+ * Hop 1 does not get `new_trigger`, `remove_trigger` or `cron_remove`: nobody can approve any of them there.
  */
 import { QUIET_MARK_AFTER, SIGNAL_WINDOW_MS, loopSignal } from "./job-signal.ts";
 import { formatWait, queuedPrompt, type QueuedPrompt } from "./engine.ts";
@@ -16,7 +17,7 @@ import type { LoopScheduler, SessionSnapshot } from "./scheduler.ts";
 import { MAX_PROMPT_BYTES, type LoopJob, newId, owningSessionId, resolveJobRef } from "./store.ts";
 import { asleepNote, ownerSession, runsSomewhere, whereRuns, type OwnerView } from "./job-owner.ts";
 import { inProject } from "./inbox.ts";
-import { plural } from "./job-lines.ts";
+import { plural } from "./plural.ts";
 import type { TriggerRuntime } from "./trigger-runtime.ts";
 import { sameProject, withinProject } from "./paths.ts";
 import { type TriggerStore, cleanCondition, looksLikeFixedScheduleRequest, parseTriggerRule, resolveRuleRef, type DynamicTriggerRule } from "./triggers.ts";
@@ -323,11 +324,16 @@ export interface ToolScope {
 	parentSessionId?: string;
 	parentCwd?: string;
 }
+// Every call of these is a prompt-class operation, denied at hop > 0 (controlPlanePreflight): a
+// tool that can only fail is one an agent tries first.
+const HOP0_ONLY = new Set(["new_trigger", "remove_trigger", "cron_remove"]);
+
 /**
  * The cron/trigger tools are registered in sub-agents too (Prompt-class ones are denied there)
  * and bounds cycles with a hop count. The same definitions serve the interactive session
  * (hop 0, registered with pi) and every in-process sub-session (hop 1, passed as customTools).
  */
+
 export function automationTools(scope: ToolScope, host: ToolHost): ToolDefinition<any, any>[] {
 	const defs: ToolDefinition<any, any>[] = [];
 	// Only where a person's message can arrive: a sub-agent is told nothing about it.
@@ -341,9 +347,9 @@ export function automationTools(scope: ToolScope, host: ToolHost): ToolDefinitio
 			"Create an event/condition-based dynamic trigger rule. Use this for future events such as a browser tab, file, MCP notification, webhook, or other condition becoming true. Do not use this for fixed time, recurring, scheduled, hourly, daily, weekly, cron, crontab, 定时任务, 每小时, or similar time-based jobs; use cron_create instead.",
 		parameters: Type.Object(
 			{
-				condition: Type.String({ description: "The natural-language condition that should be evaluated against future trigger events." }),
+				condition: Type.String({ description: "The natural-language condition that should be evaluated against future trigger events. For 'when <path> exists', keep the person's words: '<path> exists', with nothing added (no aside in parentheses) — a condition like that is checked with a local stat, no model call, while the path is absent." }),
 				action: Type.String({ description: "The action to perform when the condition matches. This may be a shell command or a natural-language instruction." }),
-				spec: Type.Optional(Type.String({ description: "Fallback complete trigger rule text when condition and action cannot be supplied separately." })),
+				spec: Type.Optional(Type.String({ description: "The whole rule as one sentence, only when condition and action cannot be given apart." })),
 				fire_once: Type.Optional(Type.Boolean({ description: "Whether to disable the rule after the first successful match. Defaults to true unless the user explicitly asks for a repeating trigger." })),
 				promote_to_chat: Type.Optional(Type.Boolean({ description: "Whether a match's result goes into this conversation (true) or the inbox (false). With a person present the question starts at this conversation whatever this says; with nobody to ask, the default is false." })),
 			},
@@ -456,14 +462,14 @@ export function automationTools(scope: ToolScope, host: ToolHost): ToolDefinitio
 			"Create a scheduled job. Use when the user asks for a fixed time, recurring, scheduled, hourly, daily, weekly, crontab, 定时任务, 每小时, 每天, or similar time-based job. Jobs persist across pi restarts. A plain job runs its prompt in this chat when due. Set stateful=true for loop mode: a fresh sub-agent runs it, keeps persistent notes across runs (injected each time), and routes findings to the user's /inbox instead of the chat — use that for recurring watch/triage jobs like \"check for new issues and report only what changed\"." + watchSentence,
 		parameters: Type.Object({
 			schedule: Type.String({
-				description: 'Local-time schedule: 5-field cron ("0 9 * * *", "*/30 * * * 1-5"), "@daily", "every 30m", "in 10m", or "at 2026-09-08T18:00".',
+				description: 'Local-time schedule: 5-field cron ("0 9 * * *", "*/30 * * * 1-5"), "hourly", "daily" (09:00), "weekly" (Monday 09:00), "@daily" (midnight), "every 30m", "in 10m", or "at 2026-09-08T18:00".',
 			}),
 			action: Type.String({ description: "Natural-language instruction to run when the schedule is due. For stateful jobs, write it for a fresh agent whose only memory is its own notes." }),
 			stateful: Type.Optional(Type.Boolean({ description: "Loop mode: sub-agent + notes between runs + findings to the inbox. With a person present the question starts at the inbox unless this is false; with nobody to ask, the default is false." })),
 			verify: Type.Optional(Type.Boolean({ description: "Maker/checker: a second adversarial sub-agent verifies each finding before it enters the inbox (stateful jobs only, default false). Use when the user asks for verified, double-checked, or high-precision findings." })),
 			name: Type.Optional(Type.String({ description: "Short unique label (letters, digits, . _ -)." })),
 			cwd: Type.Optional(Type.String({ description: "Directory a stateful job's sub-agent runs in. Default: current project." })),
-			catch_up: Type.Optional(Type.Boolean({ description: "Run once for a tick that was missed while nothing could run the job: a loop when pi-loops next starts, a plain job when its conversation is next opened or pi-loops next starts (default: true for stateful jobs, false for plain jobs)." })),
+			catch_up: Type.Optional(Type.Boolean({ description: "Run once for a missed tick (default: true for stateful jobs, false for plain jobs)." })),
 		}),
 		async execute(_id, params, signal, _onUpdate, ctx) {
 			let schedule: LoopJob["schedule"];
@@ -521,29 +527,22 @@ export function automationTools(scope: ToolScope, host: ToolHost): ToolDefinitio
 		name: "cron_remove",
 		label: "Remove cron job",
 		description:
-			"Preview or confirm removal of a scheduled job by id or name. Use confirm=false first when the user asks to delete, remove, or clear a scheduled job, cron job, crontab entry, or 定时任务. Call confirm=true only after the user explicitly confirms removal. Removal deletes the job itself; a loop's saved notes and run transcripts are kept on disk, and `/cron gc --purge` is what clears them.",
+			"Remove a scheduled job by id or name. Use when the user asks to delete, remove, or clear a scheduled job, cron job, crontab entry, or 定时任务; the user is asked to confirm in the same call. Removal deletes the job itself; a loop's saved notes and run transcripts are kept on disk, and `/cron gc --purge` is what clears them.",
 		parameters: Type.Object({
 			ref: Type.String({ description: "Job id (for example cron-abc123), unique id prefix, or name." }),
-			confirm: Type.Optional(Type.Boolean({ description: "false to preview the removal; true only after explicit user confirmation." })),
 		}),
 		async execute(_id, params, _signal, _onUpdate, ctx) {
 			const job = resolveJobRefScoped(host.scheduler.store.load(), params.ref, host.session().cwd);
-			if (!job) return { content: [{ type: "text", text: `no cron job matching '${params.ref}' in this project; cron_list shows the ids and names` }], isError: true, details: { id: undefined as string | undefined, removed_count: 0, confirmation_required: false, audit_entry_id: undefined as string | undefined } };
+			if (!job) return { content: [{ type: "text", text: `no cron job matching '${params.ref}' in this project; cron_list shows the ids and names` }], isError: true, details: { id: undefined as string | undefined, removed_count: 0, audit_entry_id: undefined as string | undefined } };
 			const label = `${job.id}${job.name ? ` "${job.name}"` : ""}`;
-			if (!params.confirm) {
-				return {
-					content: [{ type: "text", text: `remove cron job ${label} requires confirmation\nschedule: ${formatSchedule(job.schedule)}\naction: ${previewRedacted(job.prompt, 120)}\ncall cron_remove again with confirm=true only after the user confirms` }],
-					details: { id: job.id as string | undefined, removed_count: 0, confirmation_required: true, audit_entry_id: undefined as string | undefined },
-				};
-			}
 			// The only control-plane tool that used to skip this gate, so a sub-agent (hop > 0) could
 			// delete any project's job unapproved — and what that costs is the automation itself: the
 			// loop stops running and its id is gone from jobs.json. Its notes and transcripts stay
 			// behind (under an id nothing schedules any more; `/cron gc --purge` clears those), which
-			// is why the gate is about what stops, not about data destroyed. The preview above stays
-			// free: it is what the user is shown before deciding.
+			// is why the gate is about what stops, not about data destroyed. The dialog shows the
+			// schedule and the action: one question, where a preview call used to make it two.
 			const denied = await host.confirmTool(ctx, { label: `remove cron job ${label}`, tool: "cron_remove", reason: "remove a scheduled job", preview: `${formatSchedule(job.schedule)} · ${previewRedacted(job.prompt, 120)}`, args: params }, scope.hop);
-			if (denied) return { content: [{ type: "text", text: denied }], isError: true, details: { id: undefined as string | undefined, removed_count: 0, confirmation_required: false, audit_entry_id: undefined as string | undefined } };
+			if (denied) return { content: [{ type: "text", text: denied }], isError: true, details: { id: undefined as string | undefined, removed_count: 0, audit_entry_id: undefined as string | undefined } };
 			const { aborted } = await host.scheduler.removeJob(job.id);
 			const auditEntryId = host.cronControlAudit("remove", scope.actor, job, undefined);
 			// The slash command says where a loop's notes went; a tool-driven removal has to say it too,
@@ -553,7 +552,7 @@ export function automationTools(scope: ToolScope, host: ToolHost): ToolDefinitio
 			const kept = job.stateful ? "\nits loop state and run transcripts are kept; /cron gc --purge clears them" : "";
 			const abortedNote = aborted > 0 ? "\naborted its running run" : "";
 			const statePath = job.stateful ? host.scheduler.store.statePath(job.id) : undefined;
-			return { content: [{ type: "text", text: `removed cron job ${label}\nschedule: ${formatSchedule(job.schedule)}\naction: ${previewRedacted(job.prompt, 120)}${kept}${abortedNote}` }], details: { id: job.id as string | undefined, removed_count: 1, confirmation_required: false, audit_entry_id: auditEntryId, state_path: statePath } };
+			return { content: [{ type: "text", text: `removed cron job ${label}\nschedule: ${formatSchedule(job.schedule)}\naction: ${previewRedacted(job.prompt, 120)}${kept}${abortedNote}` }], details: { id: job.id as string | undefined, removed_count: 1, audit_entry_id: auditEntryId, state_path: statePath } };
 		},
 	});
 
@@ -587,5 +586,5 @@ export function automationTools(scope: ToolScope, host: ToolHost): ToolDefinitio
 			};
 		},
 	});
-	return defs;
+	return scope.hop === 0 ? defs : defs.filter((d) => !HOP0_ONLY.has(d.name));
 }

package/src/triggers.ts

@@ -463,9 +463,8 @@ export function auditArgs(rest: string): { limit: number; all: boolean } | { usa
 /**
  * The control-plane prompt gate, pre-flight part. Prompt-class tool calls (create or remove
  * a trigger, re-enable a trigger or a cron job) need a human. Sub-agents have no prompt channel
- * and are denied fail-closed ("control-plane prompt required but no
- * on_control_plane_prompt hook configured"); a UI-less interactive process is refused; an
- * interactive UI gets to ask. Returns the denial text, or undefined when the caller should ask.
+ * and are denied fail-closed; a UI-less interactive process is refused; an interactive UI gets
+ * to ask. Returns the denial text, or undefined when the caller should ask.
  */
 export function controlPlanePreflight(proc: { hop: number; hasUI: boolean; held?: boolean }, reason: string): string | undefined {
 	// A plain job's turn in a closed conversation: the person's own turn, run where they were not.

package/src/trust.ts

@@ -10,17 +10,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "@earendil-works/pi-coding-agent";
-import { withinProject } from "./paths.ts";
-
-/** pi's own normalisation: resolved, then through symlinks where the path exists. */
-export function canonicalDir(dir: string): string {
-	const resolved = path.resolve(dir);
-	try {
-		return fs.realpathSync(resolved);
-	} catch {
-		return resolved;
-	}
-}
+import { canonicalDir, withinProject } from "./paths.ts";
 
 /**
  * pi's own saved decision for `cwd`: the nearest entry, this directory's or a parent's, so a

package/src/web.mjs

@@ -508,6 +508,7 @@ dialog menu{display:flex;gap:8px;justify-content:flex-end;padding:0;margin:14px
   header .grow *{flex-shrink:0}
   header .grow button{padding:5px 7px}
   #cost{flex-shrink:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+  #cost:empty{display:none}
 }}
 /* The loops rail is not dropped when the window narrows, it is put behind the rail's Loops button: it
    slides over the conversation rather than taking a third of it, the way a drawer does elsewhere. */
@@ -597,22 +598,21 @@ dialog menu{display:flex;gap:8px;justify-content:flex-end;padding:0;margin:14px
       <button id="expand">▸ steps</button>
       <span id="actions">
         <button id="reload">reload</button>
-        <button id="find" aria-label="Search this session">find</button>
+        <button id="find" aria-label="Search this conversation">find</button>
         <button id="undo">undo</button>
-        <button id="save" title="Export this session as HTML">save</button>
+        <button id="save" title="Export this conversation as HTML">save</button>
         <button id="share">share</button>
         <button id="compact">compact</button>
-        <button id="clear">clear</button>
         <button id="resume">resume</button>
         <button id="adddev" aria-label="Add a device">add device</button>
-        <button id="theme" aria-label="Change theme">theme: system</button>
+        <button id="theme">theme: system</button>
         <button id="notifyMe">notifications</button>
       </span>
       <span class="badge" id="status">connecting</span>
-      <button id="more" title="Session actions" aria-label="Session actions">⋯</button>
+      <button id="more" title="Conversation actions" aria-label="Conversation actions">⋯</button>
     </span>
   </header>
-  <div id="findbar" hidden><input id="findq" placeholder="search this session…" ><span id="findn" class="notice"></span></div>
+  <div id="findbar" hidden><input id="findq" placeholder="search this conversation…" ><span id="findn" class="notice"></span></div>
   <button id="stale" hidden></button>
   <div id="feed" role="log" aria-live="polite" aria-label="Conversation"></div>
   <div id="activitySlot"></div>
@@ -623,7 +623,7 @@ dialog menu{display:flex;gap:8px;justify-content:flex-end;padding:0;margin:14px
     <div id="pop"></div>
     <div id="thumbs"></div>
     <div class="composer-row">
-      <textarea id="input" placeholder="Message pi — / for commands, @ for files, Enter sends"></textarea>
+      <textarea id="input" placeholder="Message pi"></textarea>
       <button type="button" id="attach">attach</button>
       <button type="submit" class="primary">send</button>
       <button type="button" id="stop">stop</button>
@@ -643,8 +643,8 @@ dialog menu{display:flex;gap:8px;justify-content:flex-end;padding:0;margin:14px
   <a href="#loops" id="tabLoops"><svg class="i" viewBox="0 0 24 24" aria-hidden="true"><path d="M17 2l3 3-3 3"/><path d="M4 11V9a4 4 0 0 1 4-4h12"/><path d="M7 22l-3-3 3-3"/><path d="M20 13v2a4 4 0 0 1-4 4H4"/></svg><span>Loops</span></a>
 </nav>
 <div id="scrim" hidden></div>
-<dialog id="menu" aria-label="Session actions" role="dialog">
-  <h3>Session</h3><div id="menuBody"></div><div id="sid" class="sid"></div>
+<dialog id="menu" aria-label="Conversation actions" role="dialog">
+  <h3>Conversation</h3><div id="menuBody"></div><div id="sid" class="sid"></div>
   <menu><button id="menuClose" value="close">close</button></menu>
 </dialog>
 <dialog id="pairdlg" aria-labelledby="pairTitle" role="dialog">
@@ -2003,7 +2003,8 @@ function drawLoopRow(slot, j) {
     num(g.findings30d) ? num(g.findings30d) + " finding" + (num(g.findings30d) === 1 ? "" : "s") + " in 30 days" : "",
     num(g.claimed30d) ? num(g.claimed30d) + " claimed" : "",
     num(g.dismissed30d) ? num(g.dismissed30d) + " dismissed" : "",
-    num(g.quietStreak) >= 3 ? "quiet ×" + num(g.quietStreak) : "",
+    // A failing loop's empty runs are its errors, which the red line already says.
+    num(g.quietStreak) >= 3 && !j.lastError ? "quiet ×" + num(g.quietStreak) : "",
   ].filter(Boolean).join(" · ") : "";
   if (said) slot.append(textEl("span", "signal", said));
   const told = tuneNote.get(j.id);
@@ -2029,15 +2030,16 @@ function renderSidebar(s) {
   else {
     let html = "";
     for (const j of a.jobs) {
-      // The prompt is shown twice — a two-line peek in the summary, the whole of it in the body —
-      // rather than once and cut, which is what the 90-character slice was: a preview that hid the
-      // rest with no way to see it. Both copies go through safeText; neither is sliced here.
+      // An unnamed loop is told apart by its prompt: a two-line peek in the summary, the whole of it
+      // in the body, rather than once and cut. A named loop's name says what it is, so no peek.
       const prompt = safeText(j.prompt);
+      const named = typeof j.name === "string" && j.name !== "";
+      const fired = [j.lastFiredAt ? "last fired " + safeText(clock(j.lastFiredAt)) : "", j.skippedOverlap ? "skipped overlaps " + num(j.skippedOverlap) : ""].filter(Boolean).join(" · ");
       html += '<details class="card job' + (j.enabled ? "" : " off") + '" data-key="job:' + safeText(j.id) + '">' +
         '<summary><span class="t"><span class="nm"><b>' + safeText(j.label || j.name || j.id) + "</b>" +
         '<span class="m">' + safeText(j.schedule) + (j.stateful ? "" : " · in its conversation") + (j.enabled ? "" : " · disabled") + "</span></span>" +
         '<button data-run="' + safeText(j.id) + '">run</button></span>' +
-        '<span class="m peek">' + prompt + "</span>" +
+        (named ? "" : '<span class="m peek">' + prompt + "</span>") +
         // A run pi-loops holds has its own line, with Stop this run, under the card's name.
         runsLine(j) +
         // A one-line hint so a job that is failing says so before it is opened; the whole error is in
@@ -2051,20 +2053,22 @@ function renderSidebar(s) {
         '<div class="body">' +
         '<pre class="full">' + prompt + "</pre>" +
         '<button class="copy" data-copy="' + safeText(j.id) + '">copy</button>' +
-        '<div class="m">id ' + safeText(j.id) + " · cwd " + safeText(j.cwd) + (j.lastFiredAt ? " · last fired " + safeText(clock(j.lastFiredAt)) : "") + (j.skippedOverlap ? " · skipped overlaps " + num(j.skippedOverlap) : "") + "</div>" +
+        (fired ? '<div class="m">' + fired + "</div>" : "") +
         // A job belonging to a hostname this machine no longer has: it is listed, because it exists,
         // and it says why nothing is happening rather than leaving you to find out from the silence.
         (j.lastError ? '<div class="m bad">' + safeText(j.lastError) + "</div>" : "") +
         "</div></details>";
     }
     for (const r of a.rules) {
+      // The condition is the rule's name: what it waits for. Cut in the title, whole in the body.
+      const when = str(r.condition);
+      const cut = clipChars(when, 80);
       html += '<details class="card rule' + (r.enabled ? "" : " off") + '" data-key="rule:' + safeText(r.id) + '">' +
-        '<summary><span class="t"><b>rule</b><span class="m">' + (r.enabled ? "" : "disabled · ") + (r.fireOnce ? "once" : "repeat") + "</span></span>" +
-        '<span class="m peek">when ' + safeText(r.condition) + "</span>" +
+        '<summary><span class="t"><b>' + safeText(cut) + '</b><span class="m">' + (r.enabled ? "" : "disabled · ") + (r.fireOnce ? "once" : "repeat") + "</span></span>" +
         (r.look ? '<span class="m looks" data-rulelook="' + safeText(r.id) + '"></span>' : "") +
         "</summary>" +
         '<div class="body">' +
-        '<pre class="full">when ' + safeText(r.condition) + "</pre>" +
+        (cut !== when ? '<pre class="full">when ' + safeText(when) + "</pre>" : "") +
         '<pre class="full">→ ' + safeText(r.action) + "</pre>" +
         "</div></details>";
     }
@@ -2334,7 +2338,8 @@ async function refresh() {
   api("/stats").then((st) => {
     if (!st || st.error) return;
     const pct = st.contextUsage?.percent;
-    $("cost").textContent = "$" + (st.cost ?? 0).toFixed(3) + " · " + Math.round((st.tokens?.total ?? 0) / 1000) + "k" + (pct == null ? "" : " · ctx " + Math.round(pct) + "%");
+    // Nothing spent yet: no badge, rather than "$0.000 · 0k · ctx 0%".
+    $("cost").textContent = !st.tokens?.total ? "" : "$" + (st.cost ?? 0).toFixed(3) + " · " + Math.round(st.tokens.total / 1000) + "k" + (pct == null ? "" : " · ctx " + Math.round(pct) + "%");
   });
   for (const ask of state.pendingAsks || []) onAsk(ask);
 }
@@ -2592,6 +2597,13 @@ async function compactNow(instructions) {
 
 /** Why the next reload is happening, when it is happening because somebody asked for it. */
 let swapWhy = "";
+/**
+ * A swap is waiting for its answer. The new session's events can arrive before the event that moves
+ * this page to its id: reloaded on the first of them, the page read the old id's history, which the
+ * server opens as that conversation in a pi of its own, and reloaded again on every event after,
+ * each time without the reason. Events wait for the answer, which carries the new id.
+ */
+let swapPending = false;
 
 /**
  * Start a new session, or go back to one.
@@ -2607,7 +2619,18 @@ async function swap(call, body, why) {
   // for a session you had just asked to start.
   swapWhy = why;
   const note = row("notice", "", "switching…");
+  swapPending = true;
   const r = await api(call, body);
+  swapPending = false;
+  const held = waiting.splice(0, waiting.length);
+  if (r.success && !r.data?.cancelled && typeof r.sessionId === "string" && r.sessionId && r.sessionId !== SESSION) {
+    // Moved first, then one reload, for the reason given; what waited is applied after it.
+    moveTo(r.sessionId);
+    waiting.push(...held);
+    await resync(reloadReason());
+    return;
+  }
+  for (const ev of held) applyEvent(ev);
   // Mid-turn the server refuses rather than asking, and its refusal says what to do about it. A
   // dialog here would be a second way to answer the same question, on the one screen where the
   // turn it is about is already visible.
@@ -2639,7 +2662,7 @@ function pageCommand(text) {
   else if (name === "resume") openSessions();
   else if (name === "sessions") listSessionsHere();
   else if (name === "session") row("system", "session", "usage: /session export [path] [--exclude-triggers] | /session import <path>\n/sessions lists this project's sessions; the header shows this one's model, cost and context.");
-  else swap("/session/new", {}, "new session — the one you left is under resume");
+  else newHere();
   return true;
 }
 
@@ -2658,7 +2681,8 @@ async function listSessionsHere() {
 }
 
 $("compact").onclick = () => compactNow("");
-$("clear").onclick = () => swap("/session/new", {}, "new session — the one you left is under resume");
+/** A new conversation in this page's pi: + New in this project, and /clear or /new typed. */
+function newHere() { swap("/session/new", {}, "new conversation — the one you left is under resume"); }
 
 /** The sessions of this project, newest first — the conversation, not the filename. */
 async function openSessions() {
@@ -2738,7 +2762,6 @@ function qrSvg(q) {
 $("adddev").onclick = async () => {
   const r = await api("/pair", {});
   if (!r.success) { row("err", "error", r.error || "could not make a pairing code"); return; }
-  $("pairCode").textContent = r.code;
 
   // The address this browser reached, first: under tailscale serve that is the tailnet name, and
   // it is the only one anybody had to configure. Then whatever else the machine can see — which is
@@ -2746,6 +2769,10 @@ $("adddev").onclick = async () => {
   const thisWindow = location.origin + "/";
   const loopback = /^https?:\/\/(127\.0\.0\.1|localhost|\[::1\])(:|\/)/.test(thisWindow);
   const candidates = (loopback ? [] : [{ url: thisWindow, via: "this window" }]).concat(r.addresses || []);
+  // No device but this one can reach the page: a code would be a grant nobody can use, so it is
+  // retired at once and the dialog says only how to make the page reachable.
+  if (candidates.length) $("pairCode").textContent = r.code;
+  else { $("pairCode").textContent = ""; api("/pair", { cancel: true }); }
 
   const pick = $("pairPick");
   pick.innerHTML = "";
@@ -3163,10 +3190,19 @@ async function resync(why) {
   // Whatever happened while we were reading: anything the transcript already covers is dropped by
   // the same rule as always.
   const held = waiting.splice(0, waiting.length);
-  for (const ev of held) applyEvent(ev);
+  // An event of an earlier epoch numbered at or before the transcript is the session that was left
+  // (the server's numbering runs on across a swap): drawn, it would reload the page again.
+  for (const ev of held) if (!(ev.seq && ev.epoch && ev.epoch !== epoch && ev.seq <= seen)) applyEvent(ev);
   refresh();
 }
 
+/** Point the page's routes and address at another conversation; the list marks it at the next poll. */
+function moveTo(id) {
+  SESSION = id;
+  history.replaceState(null, "", "/c/" + SESSION + "/");
+  listAt = 0;
+}
+
 /**
  * One event, against the numbering this page is counting on: already covered by the transcript, the
  * next one in sequence, or evidence that something in between never arrived.
@@ -3175,14 +3211,9 @@ function applyEvent(ev) {
   // While a reload runs, every event waits for it, a replayed one too: a reload started by the replay
   // clears the feed, and the replay must not go on drawing into what it cleared (the history it reads
   // has those events already). Applied once the transcript is back.
-  if (resyncing) return void waiting.push(ev);
-  if (ev.type === "page_moved" && ev.sessionId) {
-    // pi is in another conversation now (a new session, a resume): its routes and its address move.
-    SESSION = ev.sessionId;
-    history.replaceState(null, "", "/c/" + SESSION + "/");
-    // And the list marks it at the next poll, not fifteen seconds later.
-    listAt = 0;
-  }
+  if (resyncing || swapPending) return void waiting.push(ev);
+  // pi is in another conversation now (a new session, a resume).
+  if (ev.type === "page_moved" && ev.sessionId) moveTo(ev.sessionId);
   if (!ev.seq) return handle(ev); // not numbered: nothing to reason about
   if (epoch && ev.epoch && ev.epoch !== epoch) {
     // A different run of the server: its numbers mean nothing next to the ones we were counting.
@@ -3220,7 +3251,7 @@ const convRows = [];
 let focusAt = 0;
 const HELD_LINE = "Your terminal has this conversation. What you send here is answered there.";
 const BESIDE_LINE = "A terminal has this conversation open, and this page's pi has no pi-loops: what you send here is answered here, beside the terminal.";
-const PLACEHOLDER = $("input").placeholder || "Message pi — / for commands, @ for files, Enter sends";
+const PLACEHOLDER = $("input").placeholder || "Message pi";
 const phone = () => !!(window.matchMedia && window.matchMedia("(max-width:760px)").matches);
 const spanOf = (cls, text) => {
   const el = document.createElement("span");
@@ -3981,7 +4012,7 @@ async function startConversationIn(project) {
 /** + New: in the project the list shows. The open conversation's starts a new session in this page's pi, as it always did. */
 $("newConv").onclick = () => {
   const project = listedProject();
-  if (!otherProject(project)) return $("clear").onclick();
+  if (!otherProject(project)) return newHere();
   const note = row("notice", "", "starting a new conversation in " + projectName(project) + "…");
   startConversationIn(project)
     .then((r) => (r.url ? location.assign(r.url) : void (note.textContent = "No new conversation in " + projectName(project) + ": " + r.error)))
@@ -4089,8 +4120,8 @@ function activityLine(i) {
   else bits.push(num(i.findings) + " finding" + (num(i.findings) === 1 ? "" : "s"));
   if (num(i.seconds)) bits.push(num(i.seconds) + "s");
   if (num(i.costUsd)) bits.push("$" + num(i.costUsd).toFixed(3));
-  // Only a card this conversation got is in the chat on the screen.
-  if (i.carded && i.fromThisConversation === true) bits.push("in chat");
+  // Only a card this conversation got is in the chat on the screen (src/run-card.ts runCardsHere).
+  if (i.inChat === true) bits.push("in chat");
   return { mark: i.stopped ? "■" : i.ok === false ? "✗" : "✓", text: name + " · " + bits.join(" · ") };
 }
 
@@ -4279,7 +4310,7 @@ const WATCH_EXAMPLES = [
 ];
 /** How long the modal waits for a plan or the end of the turn before it says pi did not answer. */
 const WATCH_ANSWER_MS = 90000;
-const WATCH_TIME = /\d\s*(?:am|pm|m|min|minutes?|h|hours?|s|secs?|seconds?|d|days?|分钟|小时|秒|天|点)\b|\b(?:every|each|daily|nightly|hourly|weekly|monthly|morning|evening|night|noon|midnight|tomorrow|tonight|today|at\s+\d|@(?:hourly|daily|weekly|monthly)|in\s+(?:\d|an?\s+(?:hour|minute|day|week))|(?:once|twice)\s+a\s+(?:day|week|month)|mon|tue|wed|thu|fri|sat|sun|(?:monday|tuesday|wednesday|thursday|friday|saturday|sunday)s?|weekdays?|weeknights?|weekends?)|每|天|点|小时|分钟|周|明天|晚上|早上|(?:^|\s)(?:[\d*\/,-]+\s+){4}[\d*\/,-]+(?:\s|$)/i;
+const WATCH_TIME = /\d\s*(?:am|pm|m|min|minutes?|h|hours?|s|secs?|seconds?|d|days?|分钟|小时|秒|天|点)\b|\b(?:every|each|daily|nightly|hourly|weekly|biweekly|fortnightly|monthly|quarterly|yearly|annually|(?:morning|afternoon|evening|night)s?|noon|midnight|tomorrow|tonight|today|at\s+(?:\d|one|two|three|four|five|six|seven|eight|nine|ten|eleven|twelve|noon|midnight)|@(?:hourly|daily|weekly|monthly)|in\s+(?:\d|an?\s+(?:hour|minute|day|week)|a\s+(?:few|couple\s+of)\s+(?:minutes|hours|days|weeks))|(?:next|this)\s+(?:week|month|quarter|year|weekend|morning|afternoon|evening|monday|tuesday|wednesday|thursday|friday|saturday|sunday)|(?:once|twice)\s+a\s+(?:day|week|month)|(?:mon|tue|wed|thu|fri|sat|sun)s?|(?:monday|tuesday|wednesday|thursday|friday|saturday|sunday)s?|weekdays?|weeknights?|weekends?)\b|每|天|点|小时|分钟|周|明天|今晚|晚上|早上|下午|中午|凌晨|季度|(?:^|\s)(?:[\d*\/,-]+\s+){4}[\d*\/,-]+(?:\s|$)/i;
 const WATCH_WAIT = /\b(?:when|whenever|if|once|until|as soon as|after|appears?|exists?|changes?|fails?|gets?|arrives?|merge[sd]?|finish(?:es|ed)?|lands?)\b|当|如果|一旦|等|出现|存在|变|红|失败|完成|合并/i;
 /** No time word and no wait word: a thing to do now, not a watch. Generous on purpose: a doubt goes to the model. */
 function readsLikeNow(sentence) {
@@ -4644,7 +4675,7 @@ $("watchText").addEventListener("keydown", (e) => { if (e.key === "Enter" && (e.
    */
   checkStream = (s) => {
     // A reload ends by refreshing, and a refresh polls: without this the two call each other.
-    if (resyncing || !s || !s.epoch) return;
+    if (resyncing || swapPending || !s || !s.epoch) return;
     if (s.epoch !== epoch) {
       epoch = s.epoch;
       seen = s.seq ?? seen;