@assuredloop/orca-bot-kit 0.26.0 → 0.27.0

package/src/cli.js

@@ -19,14 +19,14 @@ import { checkHealth, orcaSettingFindings } from './health.js';
 import { initBots } from './init.js';
 import { nameSession } from './name.js';
 import { APPROVALS, harnessOf, HARNESSES, ownCli, refuseApprovalArgs, shellWord, workDirOf } from './launch.js';
-import { checkMail, decideLeftNudges, lookUp, noMailboxYet, sendMessage, sessionInTab, stillUnread, WATCH_MS } from './message.js';
+import { checkMail, lookUp, noMailboxYet, sendMessage, sessionInTab } from './message.js';
 import { orcaCli, orcaTrouble, RELOAD_LINE, TERMINAL_ENV } from './orca.js';
 import { allowIn, beyondDefaults, refuseBroad, refuseNoCodexForm, runsOnClaude, runsOnCodex, takeBack, writePermissions } from './permissions.js';
 import { pauseSessions, unpauseSessions } from './pause.js';
 import { recordSession, SHELL_ENV, TAB_ENV } from './record.js';
 import { restartSessions } from './restart.js';
 import { clearSession, compactSession } from './clear.js';
-import { retireBot, retireSession, unreadWords } from './retire.js';
+import { retireBot, retireSession } from './retire.js';
 import { sentWarning } from './sent.js';
 import { readRoster } from './roster.js';
 import { buildAgents, buildRules, CODEX_CAP } from './rules.js';
@@ -109,7 +109,9 @@ Usage:
                             End a session: close its tab and take it off the
                             bot, keeping its conversations in the book, and
                             first do the same for the temporary sessions it
-                            made, and theirs. Or end a bot: close its tabs,
+                            made, and theirs. It stops what the session left
+                            running in its work dir, and names each process.
+                            Or end a bot: close its tabs,
                             remove its Orca project and move its folder to
                             retired/. It will not retire a bot whose Orca
                             project holds a tab your book does not name, and
@@ -207,9 +209,12 @@ Usage:
                             the Orca mailbox. Nothing is sent.
   obk message send --bots <path> --to <bot>[/<session>] [--from <bot>/<session>]
                    --subject <text> [--text <text> | --text-file <path>]
-                   [--thread <id>]
-                            Put a message in that session's Orca mailbox and
-                            tell its tab to look. A message too long to travel
+                   [--thread <id>] [--interrupt]
+                            Put a message in that session's Orca mailbox. Orca
+                            tells it to look once it is idle. --interrupt is
+                            for urgent mail: when the session is busy, the kit
+                            presses Escape once in its tab first, to end its
+                            turn, so it looks now. A message too long to travel
                             as itself is written to a file beside your bots
                             folder and named in the message. A pair the
                             harness's own messaging reaches is not carried:
@@ -305,17 +310,6 @@ Usage:
                             Claude session's native message, it warns the
                             session when the address was none of this bots
                             folder's own. It never stops a message.
-  obk session nudge --bots <path> --bot <bot>
-                            For the kit's own hook, not for typing: after a
-                            Codex session's shell command, it decides the mail
-                            nudges a send there left because it could not
-                            tell from inside Codex's sandbox, and types each
-                            one or says why not.
-  obk session mail --bots <path> --bot <bot>
-                            For the kit's own hook, not for typing: at the end
-                            of a Claude session's turn, it tells the session
-                            once about each fleet mail the kit sent it that is
-                            still unread. It types nothing into the tab.
   obk session name --bots <path> --bot <bot>
                             For the kit's own hook, not for typing: after a
                             Codex session's turn, it names the session's thread
@@ -409,6 +403,7 @@ async function run(argv) {
       'text-file': { type: 'string' },
       thread: { type: 'string' },
       peek: { type: 'boolean' },
+      interrupt: { type: 'boolean' },
       charter: { type: 'string' },
       allow: { type: 'string', multiple: true },
       disallow: { type: 'string', multiple: true },
@@ -476,8 +471,6 @@ async function run(argv) {
   // The send hook is quiet whatever it is given, a bots folder that is not
   // there included, so it goes before anything that can complain (ADR 0032).
   if (command === SENT) return sent(path.resolve(values.bots));
-  if (command === NUDGE) return nudgeLeft();
-  if (command === MAIL) return mailHook(path.resolve(values.bots), values.bot);
   if (command === NAME) return nameThread(path.resolve(values.bots), values.bot);
 
   // One fleet, one identity, whatever spelling of its path was given (#164).
@@ -548,8 +541,6 @@ const ANSWER_IT = [
 /** The commands a harness runs rather than a person: the kit's hooks. */
 const RECORD = 'session record';
 const SENT = 'session sent';
-const NUDGE = 'session nudge';
-const MAIL = 'session mail';
 const NAME = 'session name';
 
 /**
@@ -569,45 +560,6 @@ function sent(bots) {
   return 0;
 }
 
-/**
- * What the kit's Codex hook does after a shell command: decide the nudges a
- * send in this tab left for it, outside Codex's sandbox, and say to the session
- * what became of each, as Codex's `additionalContext` (#350, ADR 0034). Silent
- * when nothing was left, never a decision, and never anything but exit 0.
- */
-async function nudgeLeft() {
-  try {
-    const said = JSON.parse(readFileSync(0, 'utf8'));
-    if (said?.hook_event_name !== 'PostToolUse') return 0;
-    const decided = await decideLeftNudges(process.env[TAB_ENV]);
-    if (decided.length > 0) {
-      const words = decided.map((one) => `Your mail "${one.subject}" to ${one.to}: ${one.nudged ? "the kit's hook nudged its tab, from outside Codex's sandbox:" : "the kit's hook looked at its tab from outside Codex's sandbox, and"} ${nudgeLine(one, one.to).trim()}`);
-      process.stdout.write(`${JSON.stringify({ hookSpecificOutput: { hookEventName: 'PostToolUse', additionalContext: words.join('\n') } })}\n`);
-    }
-  } catch {
-    // Nothing: a hook does not disturb the session it runs in.
-  }
-  return 0;
-}
-
-/**
- * What the kit's Claude Code Stop hook does at a turn end (#509, ADR 0035): tell
- * the session once about fleet mail still unread, as the Stop event's
- * additional context, which the session goes on with. Not a block: Claude Code
- * 2.1.296 draws a block's reason in red as "Stop hook error", and its additional
- * context as "Stop hook feedback". Nothing typed into the tab; never anything
- * but exit 0; silent whenever it cannot be sure.
- */
-function mailHook(bots, bot) {
-  try {
-    const reason = stillUnread(sameFleet(bots), bot, JSON.parse(readFileSync(0, 'utf8')), process.env[TAB_ENV], process.env[TERMINAL_ENV]);
-    if (reason !== undefined) process.stdout.write(`${JSON.stringify({ hookSpecificOutput: { hookEventName: 'Stop', additionalContext: reason } })}\n`);
-  } catch {
-    // Nothing: a hook does not disturb the session it runs in.
-  }
-  return 0;
-}
-
 /**
  * What the kit's Codex Stop hook does at a turn end: name the session's thread
  * after its bot and session, once it is idle (#480). Silent, never a decision,
@@ -737,7 +689,7 @@ const commands = {
           ...withLines(retired.retiredWith, retired.session),
           ...closedLines(retired.closed),
           `retired    ${retired.bot} ${retired.session}: off ${path.join('bots', retired.bot, 'bot.yaml')}, and its conversations kept in the book under retired`,
-          ...unreadLines(retired.unread),
+          ...processLines(retired.processes),
           ...leftLines(retired.promptsLeft),
         ],
       };
@@ -749,6 +701,7 @@ const commands = {
         answer: { bots, ...retired },
         lines: [
           ...closedLines(retired.closed),
+          ...processLines(retired.processes),
           `${'trouble'.padEnd(9)}  Orca project ${retired.project}`,
           `             ${retired.trouble}`,
           `Retire it again:  ${shellWord(ownCli())} retire --bots ${shellWord(bots)} --bot ${retired.bot}`,
@@ -767,7 +720,7 @@ const commands = {
           retired.windowReloaded ? "reloaded   Orca's window, so its sidebar no longer shows the project" : RELOAD_LINE,
         ]),
         `retired    ${retired.bot}: moved to ${path.relative(bots, retired.moved)}, with its book, charter and memory`,
-        ...(retired.unread ?? []).flatMap((one) => unreadLines(one, `${retired.bot}/${one.session}`)),
+        ...processLines(retired.processes),
         ...leftLines(retired.promptsLeft),
       ],
     };
@@ -824,7 +777,7 @@ const commands = {
         ...withLines(retired.retiredWith, retired.session),
         ...closedLines(retired.closed),
         `retired    ${retired.bot} ${retired.session}, a temporary session of ${retired.maker}'s: off ${path.join('bots', retired.bot, 'bot.yaml')}, and its conversations kept in the book under retired`,
-        ...unreadLines(retired.unread),
+        ...processLines(retired.processes),
         ...leftLines(retired.promptsLeft),
       ],
     };
@@ -909,7 +862,7 @@ const commands = {
       throw new Error(`bot change does not change a bot's harness: its sessions' conversations belong to the harness they ran on. To move to ${values.harness}, give it a session on ${values.harness} with obk session add, or retire the bot with obk retire and create a new one.`);
     }
     // Permission changes have commands of their own, which keep the user's yes
-    // (ADR 0037): the old spelling refuses, and changes nothing.
+    // (ADR 0041): the old spelling refuses, and changes nothing.
     const moved = [['allow', 'permission allow'], ['disallow', 'permission disallow']].filter(([flag]) => values[flag] !== undefined);
     if (moved.length > 0) {
       throw new Error(`bot change no longer takes ${moved.map(([flag]) => `--${flag}`).join(' or ')}: permission rules change through ${moved.map(([, now]) => `${shellWord(ownCli())} ${now} --bots ${shellWord(bots)} --bot ${values.bot} --rule <rule>`).join(' and ')}, after the user's yes. Nothing was changed.`);
@@ -1116,7 +1069,7 @@ const commands = {
       ...(values.effort === undefined ? {} : { effort: values.effort }),
       ...(values['extra-arg'] === undefined ? {} : { extra_args: values['extra-arg'] }),
     };
-    // A run's launch may not widen its approval (ADR 0037).
+    // A run's launch may not widen its approval (ADR 0041).
     if (values['run-on'] === 'codex') refuseApprovalArgs('codex', values['extra-arg']);
     const groom = grooming(bots, { at: values.at, ask, run });
     return { answer: { bots, groom }, lines: groomLines(groom, bots) };
@@ -1189,6 +1142,7 @@ const commands = {
       text: values.text,
       textFile: values['text-file'],
       thread: values.thread,
+      interrupt: values.interrupt === true,
     });
     const where = `${answer.to.bot}/${answer.to.session}`;
 
@@ -1207,7 +1161,7 @@ const commands = {
         ...(answer.file === undefined
           ? []
           : [`             it was too long to travel as itself, so it went as a file:  ${answer.file}`]),
-        ...[nudgeLine(answer, where)],
+        ...sentLines(answer, where),
       ],
     };
   },
@@ -1348,46 +1302,23 @@ function toLines(answer, bots, where) {
 }
 
 /**
- * What became of the line that tells the receiver to look. The message is in
- * its mailbox whatever this says, so each of these is about the tab and not
- * about the message.
+ * What the send says after `sent`: the road it took, and what the interrupt
+ * came to when one was asked for (#555).
  */
-function nudgeLine(answer, where) {
-  const seconds = answer.watchedMs === undefined ? '' : ` in ${Math.max(Math.round(answer.watchedMs / 1000), 1)} s`;
-  if (answer.signal === 'orca') return `             Orca's notice reached it${seconds}, so no line was typed: it reads the mail from there.`;
-  if (answer.signal === 'hook') {
-    return answer.because === 'busy'
-      ? "             it is busy with a turn, so nothing was typed into its tab: its own hook tells it about the mail when that turn ends."
-      : `             a turn of other work started in its tab${seconds}, not Orca's notice, so nothing was typed: its own hook tells it about the mail when that turn ends.`;
-  }
-  const why = {
-    'no-turn': `no turn started in its tab in ${WATCH_SECONDS} s, so the kit's line was typed`,
-    busy: "it is busy with a turn, and Codex takes a line into the turn it is having, so the kit's line was typed",
-    'other-turn': "a turn of other work started in its tab, not Orca's notice, so the kit's line was typed",
-  }[answer.because];
-  const head = why === undefined ? '             ' : `             ${why}: `;
-  if (answer.nudged && answer.nudgeWatched === false) {
-    return `${head}its tab was typed into, and Orca could not say whether it was taken: ${answer.nudgeUnseen} The message waits in its mailbox for its next check either way.`;
-  }
-  if (answer.nudged && answer.nudgeUnseen !== undefined) {
-    return `${head}its tab was typed into, but Orca did not see the line start a turn: it may be queued behind the work in hand, or lost. The message waits in its mailbox for its next check either way.`;
-  }
-  if (answer.nudged) return `${head}its tab was told to look; it will read it when it is done with what it is doing.`;
-  if (answer.blocked !== undefined) {
-    return `             its tab has something waiting to be answered (${answer.blocked}), so nothing was typed into it. Settle that, and the mail is there.`;
-  }
-  if (answer.nudgeLeft) {
-    return `             it is queued, and its tab could not be told to look from here: ${answer.nudgeTrouble}. So the nudge is left for this session's hook, which looks at the tab from outside Codex's sandbox when this command is done, and says what it did.`;
+function sentLines(answer, where) {
+  const road = "             it is in its Orca mailbox, and Orca's own notice tells it to look once it is idle.";
+  if (answer.interrupted === true) {
+    return [
+      `${road.replace('once it is idle', 'now')}`,
+      `             it was busy, so the kit pressed Escape once in its tab to end its turn.${answer.to.harness === 'codex' ? ' Codex keeps a command it was running as a background terminal after an Escape.' : ''}`,
+    ];
   }
-  if (answer.nudgeTrouble !== undefined) {
-    return `             it is queued, and its tab could not be told to look: ${answer.nudgeTrouble}`;
+  if (answer.interrupted === false) {
+    return [road, answer.idle ? `             it is idle, so it was not interrupted.` : `             it was not interrupted: ${answer.interruptTrouble}.`];
   }
-  return `             ${where} is not up, so nothing was typed anywhere: the message waits in its mailbox.`;
+  return [road];
 }
 
-/** The watch before the kit's line, as the send says it (#509, ADR 0035). */
-const WATCH_SECONDS = WATCH_MS / 1000;
-
 /**
  * What there is to say about the work dir this command was given: one finding
  * when it leads out of the bot home, through `..` or a link or as a path
@@ -1407,7 +1338,7 @@ function workDirFound(values, bot, home, session) {
 
 /**
  * Refuse what would change a session's approval through `session add` or
- * `session change` (ADR 0037): `--approval`, and an extra argument that sets
+ * `session change` (ADR 0041): `--approval`, and an extra argument that sets
  * it on the session's harness. Only `permission approval` changes it.
  */
 function refuseApproval(bots, values, command) {
@@ -1459,12 +1390,19 @@ const closedLines = (closed) => closed.map((tab) => `closed     ${tab.bot} ${tab
 const withLines = (retiredWith, session) => retiredWith.flatMap((gone) => [
   ...closedLines(gone.closed),
   `retired    ${gone.bot} ${gone.session}, a temporary session of ${gone.maker}'s, along with ${session}: off ${path.join('bots', gone.bot, 'bot.yaml')}, and its conversations kept in the book under retired`,
-  ...unreadLines(gone.unread),
+  ...processLines(gone.processes),
   ...leftLines(gone.promptsLeft),
 ]);
 
-/** The mail a retired session did not read, as far as the kit knows (#509). */
-const unreadLines = (unread, who = 'it') => (unread === undefined ? [] : [`unread     ${unreadWords(unread, who)}`]);
+/** What a retire stopped of what its sessions left running, and what it named and left (#537). */
+function processLines(processes) {
+  if (processes === undefined) return [];
+  if (processes.unreadable !== undefined) return [`processes  the kit cannot tell which processes were left running in the work dir, so it stopped none: ${processes.unreadable}`];
+  return [
+    ...processes.stopped.map((one) => `stopped    pid ${one.pid} of ${one.session}, with ${one.signal}: ${one.command}${one.cwd === null ? '' : `  in ${one.cwd}`}`),
+    ...processes.left.map((one) => `left       pid ${one.pid} in ${one.cwd ?? 'a folder lsof did not name'}: ${one.command}. Not stopped: ${one.why}.`),
+  ];
+}
 
 /** What a retire could not remove, and how to: nothing reads these files now (#393). */
 const leftLines = (left = []) => left.flatMap(({ file, reason }) => [
@@ -1787,17 +1725,22 @@ function charterRulesLines(bots, bot, rules) {
 
 /**
  * What became of each bot's permission rules: each of the kit's default rules
- * the run added to the bot, word for word (ADR 0036), and the file the allowed
- * ones were written into. Nothing for a bot with nothing added or written.
+ * the run added to the bot, word for word (ADR 0036), each rule of a command no
+ * longer in the set that the bot still holds, with the command that takes it
+ * back (ADR 0041), and the file the allowed ones were written into. Nothing for
+ * a bot with nothing added, held or written.
  */
 function permissionsLines(permissions, bots) {
   // A bot on both harnesses has an entry for each file, with the same
-  // defaults: they are listed once, with the first.
+  // defaults and held rules: they are listed once, with the first.
   const listed = new Set();
+  const disallow = (bot, rule) => `${shellWord(ownCli())} permission disallow --bots ${shellWord(bots)} --bot ${shellWord(bot)} --rule ${shellWord(rule)}`;
   return permissions.flatMap((entry) => [
     ...(entry.trouble === undefined ? [] : [`${'refused'.padEnd(9)}  ${entry.trouble}`]),
-    ...((entry.defaults ?? []).length === 0 || listed.has(entry.bot) || !listed.add(entry.bot) ? []
-      : entry.defaults.map((rule) => `${'allowed'.padEnd(9)}  ${entry.bot}  ${rule}`)),
+    ...(listed.has(entry.bot) || !listed.add(entry.bot) ? [] : [
+      ...(entry.defaults ?? []).map((rule) => `${'allowed'.padEnd(9)}  ${entry.bot}  ${rule}`),
+      ...(entry.held ?? []).map((rule) => `${'holds'.padEnd(9)}  ${entry.bot}  ${rule}, which is no longer one of the kit's defaults. To take it back:  ${disallow(entry.bot, rule)}`),
+    ]),
     ...(entry.written.length === 0
       ? []
       : [`${'wrote'.padEnd(9)}  ${path.relative(bots, entry.file)}  ${entry.written.length} permission rule${entry.written.length === 1 ? '' : 's'} from its allow list`]),

package/src/commands.js

@@ -1,7 +1,7 @@
 // The kit's commands, each with the flags it cannot do without, which `obk`
 // reads to parse a command line; and the two lists every command is on one of:
 // those every bot is allowed by default (#527, ADR 0036), and those kept back
-// for the user's yes (ADR 0037). A new command is on neither until someone
+// for the user's yes (ADR 0041). A new command is on neither until someone
 // puts it on one, and a test holds every command to that choice.
 
 /** The commands, and the flags each one cannot do without. */
@@ -37,8 +37,6 @@ export const COMMANDS = {
   'message check': ['bots'],
   'session record': ['bots', 'bot'],
   'session sent': ['bots', 'bot'],
-  'session nudge': ['bots', 'bot'],
-  'session mail': ['bots', 'bot'],
   'session name': ['bots', 'bot'],
   'session mailbox': ['bots', 'bot', 'session'],
   'session trust-hooks': ['bots', 'bot', 'session'],
@@ -56,19 +54,29 @@ export const COMMANDS = {
  * runs whatever its arguments say never is.
  */
 export const DEFAULT_COMMANDS = [
-  'up', 'restart', 'unpause', 'health', 'groom', 'roster', 'usage',
-  'bot create', 'bot change', 'rules build',
+  'up', 'unpause', 'health', 'groom', 'roster', 'usage',
+  'bot change', 'rules build',
   'skills add', 'skills remove', 'skills build', 'skills fetch', 'skills update', 'source add',
   'session add', 'session change', 'session clear', 'session compact',
   'message to', 'message send', 'message check',
-  'session record', 'session sent', 'session nudge', 'session mail', 'session name', 'session mailbox',
+  'session record', 'session sent', 'session name', 'session mailbox',
   'session trust-hooks', 'session answer',
   'temp make', 'temp roles', 'temp retire', 'temp trust-hooks', 'temp answer',
 ];
 
 /**
  * The commands kept out of the default permission set, which keep the user's
- * yes (ADR 0037): the ones that change permissions, close a long-lived
- * session, or make the bots folder.
+ * yes (ADR 0041): the ones that change permissions, close a long-lived
+ * session, make the bots folder, or make a bot, which the owner leaves to Bot
+ * Father (#548).
  */
-export const KEPT_BACK = ['init', 'retire', 'pause', 'permission allow', 'permission disallow', 'permission approval'];
+export const KEPT_BACK = [
+  'init', 'retire', 'pause', 'restart', 'bot create',
+  'permission allow', 'permission disallow', 'permission approval',
+];
+
+/**
+ * The commands kit 0.26.0 gave every bot by default and that are kept back now
+ * (#548). A bot may still hold their rules, which the kit names and leaves.
+ */
+export const NO_LONGER_DEFAULT = ['restart', 'bot create'];

package/src/conversations.js

@@ -159,43 +159,6 @@ export function heldAsUserTurn(harness, file, text) {
   return held;
 }
 
-/**
- * Where the harness keeps the conversation `id` of this bot home, and how long
- * that record is now: `{ harness, file, size }`, so a later look reads only
- * what was written after this moment. Undefined when there is no id, no
- * record, or it cannot be read (#509).
- */
-export function recordMark(harness, home, id) {
-  if (typeof id !== 'string' || id === '') return undefined;
-  try {
-    const file = harness === 'codex' ? codexRollout(id) : claudeTranscript(home, id);
-    if (file === undefined) return undefined;
-    const found = statSync(file);
-    return found.isFile() ? { harness, file, size: found.size } : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-/**
- * Whether a turn of the user's written after `mark` holds `text` anywhere in
- * it (#509). A record that cannot be read says no: not seeing a thing is not
- * seeing it.
- */
-export function userTurnSince(mark, text) {
-  if (mark === undefined || mark === null) return false;
-  let held = false;
-  try {
-    eachLine(mark.file, (line) => {
-      held = line !== undefined && userTexts(mark.harness, line).some((said) => said.includes(text));
-      return held;
-    }, { from: mark.size });
-  } catch {
-    return false;
-  }
-  return held;
-}
-
 /** The texts of one record line, when it is a turn of the user's. */
 function userTexts(harness, line) {
   let parsed;

package/src/health.js

@@ -18,22 +18,23 @@
 // is, the one thing to go and look at, and a sentence naming it — so that
 // somebody who cannot read code knows what was found and where.
 
-import { existsSync, readdirSync, realpathSync } from 'node:fs';
+import { existsSync, readdirSync, realpathSync, statSync } from 'node:fs';
 import path from 'node:path';
 
 import { bookFile, readBook, sessionIdsIn, tabIdsIn } from './book.js';
 import { botDir, botNames, botsDir, readBot, tempRoles, unknownKeys } from './bot.js';
 import { transcriptsIn } from './conversations.js';
 import { hookTrouble } from './hooks.js';
-import { APPROVALS, bypassFlags, harnessOf, HARNESSES, isAddressOf, ownCli, sessionTrouble, SHELL_ENV, shellWord } from './launch.js';
+import { APPROVALS, bypassFlags, harnessOf, HARNESSES, isAddressOf, ownCli, sessionTrouble, SHELL_ENV, shellWord, workDirOf } from './launch.js';
 import { frontOfTab, orcaDefaultArgs, projects, runMissing, tabs, wordsOfProcess } from './orca.js';
 import { permissionsTrouble } from './permissions.js';
+import { processesIn } from './processes.js';
 import { TAB_ENV } from './record.js';
 import { agentsTrouble, rulesStamp } from './rules.js';
 import { settingsInUse } from './settings.js';
 import { skillsTrouble } from './skills.js';
 import { readSources, sourcesDir } from './sources.js';
-import { BOT_FATHER, botsNamed, promptPath } from './up.js';
+import { BOT_FATHER, botsNamed, oldPromptPath, promptPath } from './up.js';
 
 /**
  * Everything wrong with the setup at `bots`, in one list: what Orca's own
@@ -141,6 +142,9 @@ function leftBeside(bots) {
     try {
       for (const session of readBot(botDir(bots, name), name).sessions) {
         owned.add(promptPath(bots, name, session.name));
+        // Where a live session's prompt was before #534: nothing reads it once
+        // the session starts again, and its retire removes it.
+        owned.add(oldPromptPath(bots, name, session.name));
       }
     } catch {
       known = false;
@@ -148,8 +152,7 @@ function leftBeside(bots) {
   }
 
   if (known) {
-    for (const file of namesIn(`${bots}.prompts`)) {
-      const at = path.join(`${bots}.prompts`, file);
+    for (const at of promptFilesIn(`${bots}.prompts`)) {
       if (owned.has(at)) continue;
       found.push(finding('leftover', at, `${at} is a start prompt the kit wrote beside your bots folder, and no session of any bot answers to it now. Nothing reads it.`));
     }
@@ -196,9 +199,48 @@ function aboutBot(bots, name, setups, sessions) {
     ...permissionsTrouble(home, bot).map(said('config')),
     ...skillsTrouble(bots, home, bot).map(said('skill')),
     ...inOrca(bots, home, bot, setups, sessions),
+    ...leftRunning(home, bot),
   ];
 }
 
+/**
+ * What still runs in the work dir of a retired session (#537): a retire stops
+ * it, so this is one from before that, or one a retire could not stop. The
+ * book keeps a retired session's work dir; a temporary session retired before
+ * it did worked in `work/<name>`, where `obk temp make` puts it. A work dir a
+ * session in bot.yaml still uses is that session's, and not looked at, by its
+ * real path, so a link to it is not taken for a retired one (review of PR #543).
+ */
+function leftRunning(home, bot) {
+  let book;
+  try {
+    book = readBook(home);
+  } catch {
+    // A book that cannot be read is said where the book is read.
+    return [];
+  }
+  const real = (dir) => (dir === undefined ? undefined : realpathOf(dir));
+  const live = new Set(bot.sessions.map((session) => real(workDirOf(session, home))));
+  const dirs = [];
+  const seen = new Set();
+  for (const entry of Array.isArray(book.retired) ? book.retired : []) {
+    const named = typeof entry?.work_dir === 'string' && entry.work_dir !== '' ? entry.work_dir : undefined;
+    const dir = workDirOf({ work_dir: named ?? (entry?.temporary === undefined ? undefined : `work/${entry.name}`) }, home);
+    // One that is not there holds nothing.
+    const at = real(dir);
+    if (at === undefined || live.has(at) || seen.has(at)) continue;
+    seen.add(at);
+    dirs.push({ session: entry.name, dir });
+  }
+  if (dirs.length === 0) return [];
+
+  const read = processesIn(dirs);
+  if (read.unreadable !== undefined) {
+    return [finding('process', bookFile(home), `The kit cannot tell whether anything still runs in the work dirs of ${bot.name}'s retired sessions: ${read.unreadable}.`, bot.name)];
+  }
+  return read.running.map((one) => finding('process', one.dir, `pid ${one.pid} still runs in the work dir of ${bot.name}/${one.session}, which was retired: ${one.command}. Nothing of the kit's stops it now. If it is not wanted, stop it yourself:  kill ${one.pid}`, bot.name));
+}
+
 /** A session the kit would refuse to start, in the words `up` refuses it with. */
 function sessionSettings(home, bot) {
   const file = path.join(home, 'bot.yaml');
@@ -213,7 +255,7 @@ function sessionSettings(home, bot) {
 /** What is wrong with the roles the bot's temporary sessions are made in (#465). */
 function rolesTrouble(home, bot) {
   const where = path.join(home, 'bot.yaml');
-  // The widest approval they may be made at, the user's yes (ADR 0037).
+  // The widest approval they may be made at, the user's yes (ADR 0041).
   const level = bot.temp_approval;
   const approval = level === undefined || APPROVALS.includes(level) ? [] : [{
     where,
@@ -461,6 +503,21 @@ function recordIn(home, bot) {
 }
 
 /** What a directory holds, and nothing at all when there is no directory. */
+/**
+ * The files in the kit's folder of start prompts: in each bot's own folder
+ * there (#534), and flat in the folder itself, where they were before.
+ */
+function promptFilesIn(dir) {
+  return namesIn(dir).flatMap((name) => {
+    const at = path.join(dir, name);
+    try {
+      return statSync(at).isDirectory() ? namesIn(at).map((file) => path.join(at, file)) : [at];
+    } catch {
+      return [];
+    }
+  });
+}
+
 function namesIn(dir) {
   try {
     return readdirSync(dir);