@bill10/agent-007 0.12.1000 → 0.12.2000

package/VERSION

@@ -1 +1 @@
-0.12.1.0
+0.12.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bill10/agent-007",
-  "version": "0.12.1000",
+  "version": "0.12.2000",
   "description": "From web terminals for your coding agents to a self-running agent company: Claude Code and Codex in parallel git worktrees, a job board they pick work from, and one agent that runs the board from a goal.",
   "license": "MIT",
   "repository": {

package/public/index.html

@@ -239,7 +239,7 @@
     <button data-view="files">Files</button>
     <button data-view="office" aria-current="true">Office</button>
     <button data-view="terminal">Terminal</button>
-    <button data-view="waiting" class="mobile-nav-waiting" aria-label="Waiting on you"><svg width="12" height="12" viewBox="0 0 12 12" fill="none" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round" aria-hidden="true"><path d="M3 8.5V5.5a3 3 0 0 1 6 0v3l1 1H2z"/><path d="M5 11h2"/></svg>Waiting<span class="board-tab-badge" id="mobile-nav-waiting-count" hidden></span></button>
+    <button data-view="waiting" class="mobile-nav-waiting empty" aria-label="Waiting on you" title="Waiting on you"><span class="bell"><svg width="14" height="14" viewBox="0 0 12 12" fill="none" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round" aria-hidden="true"><path d="M3 8.5V5.5a3 3 0 0 1 6 0v3l1 1H2z"/><path d="M5 11h2"/></svg><span class="board-tab-badge bell-badge" id="mobile-nav-waiting-count" hidden></span></span>Waiting</button>
   </nav>
 
   <!-- Reconnecting banner -->

package/public/modules/terminal.js

@@ -368,14 +368,25 @@ export function removeSession(sessionId) {
   if (onSessionChanged) onSessionChanged();
 }
 
-export const BELL_ICON = '<svg class="board-tab-icon" width="12" height="12" viewBox="0 0 12 12" fill="none" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round"><path d="M3 8.5V5.5a3 3 0 0 1 6 0v3l1 1H2z"/><path d="M5 11h2"/></svg>';
+export const BELL_ICON = '<svg class="board-tab-icon" aria-hidden="true" width="14" height="14" viewBox="0 0 12 12" fill="none" stroke="currentColor" stroke-width="1.2" stroke-linejoin="round"><path d="M3 8.5V5.5a3 3 0 0 1 6 0v3l1 1H2z"/><path d="M5 11h2"/></svg>';
 
-// The phone's bottom bar carries the same count.
+// The bell's notification badge: the open count, "9+" above 9, none at zero.
+function bellBadge(badge, open) {
+  badge.textContent = open > 9 ? '9+' : open > 0 ? String(open) : '';
+  badge.hidden = open === 0;
+}
+
+const waitingLabel = (open) => open > 0 ? `Waiting on you, ${open} question${open === 1 ? '' : 's'}` : 'Waiting on you';
+
+// The phone's bottom bar carries the same bell and badge.
 function updateNavBadge(open) {
   const badge = document.getElementById('mobile-nav-waiting-count');
   if (!badge) return;
-  badge.textContent = open > 0 ? String(open) : '';
-  badge.hidden = open === 0;
+  bellBadge(badge, open);
+  const btn = badge.closest('button');
+  btn.classList.toggle('empty', open === 0);
+  btn.setAttribute('aria-label', waitingLabel(open));
+  btn.title = waitingLabel(open);
 }
 
 export function updateTabs() {
@@ -407,18 +418,23 @@ export function updateTabs() {
   // Pinned next to it: Billion's questions to the owner, counted like Jobs.
   const waitingTab = document.createElement('div');
   waitingTab.className = `terminal-tab board-tab waiting-tab${waitingActive ? ' active' : ''}`;
-  waitingTab.title = 'Waiting on you: Billion\'s questions';
-  waitingTab.innerHTML = BELL_ICON;
-  waitingTab.appendChild(document.createTextNode('Waiting'));
   const open = openCount();
-  if (open > 0) {
-    const badge = document.createElement('span');
-    badge.className = 'board-tab-badge';
-    badge.textContent = String(open);
-    badge.title = `${open} question${open === 1 ? '' : 's'} waiting on you`;
-    waitingTab.appendChild(badge);
-  }
+  // Icon only: the label lives in aria-label and the tooltip.
+  waitingTab.classList.toggle('empty', open === 0);
+  waitingTab.setAttribute('role', 'button');
+  waitingTab.tabIndex = 0;
+  waitingTab.setAttribute('aria-label', waitingLabel(open));
+  waitingTab.title = waitingLabel(open);
+  const bell = document.createElement('span');
+  bell.className = 'bell';
+  bell.innerHTML = BELL_ICON;
+  const badge = document.createElement('span');
+  badge.className = 'board-tab-badge bell-badge';
+  bellBadge(badge, open);
+  bell.appendChild(badge);
+  waitingTab.appendChild(bell);
   waitingTab.onclick = () => { showWaiting(); updateTabs(); };
+  waitingTab.onkeydown = (e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); waitingTab.onclick(); } };
   container.appendChild(waitingTab);
   updateNavBadge(open);
 

package/public/style.css

@@ -1202,8 +1202,7 @@ body {
     cursor: pointer;
   }
   .mobile-nav button:hover, .mobile-nav button[aria-current="true"] { color: var(--accent); }
-  .mobile-nav-waiting { display: inline-flex; align-items: center; justify-content: center; gap: 5px; }
-  .mobile-nav-waiting .board-tab-badge { letter-spacing: 0; }
+  .mobile-nav-waiting { display: inline-flex; align-items: center; justify-content: center; gap: 12px; }
   .waiting-choice, .waiting-send { min-height: 44px; }
   .waiting-reply input { min-height: 44px; font-size: 16px; }
   /* Overlays sized for desktop */
@@ -1301,6 +1300,25 @@ body {
   text-align: center;
 }
 
+/* The Waiting tab and phone button: a bell alone, with a phone-style count
+   badge on its top-right corner; dimmed when nothing is open. */
+.waiting-tab { padding: 0 14px; }
+.bell { position: relative; display: inline-flex; flex-shrink: 0; }
+.bell-badge {
+  position: absolute;
+  top: -7px;
+  left: 8px;
+  min-width: 14px;
+  padding: 0 3px;
+  line-height: 14px;
+  letter-spacing: 0;
+  box-shadow: 0 0 0 2px var(--bg-tabs);
+}
+.terminal-tab.waiting-tab.active .bell-badge { box-shadow: 0 0 0 2px var(--bg-terminal); }
+.mobile-nav .bell-badge { box-shadow: 0 0 0 2px var(--bg-dark); }
+.terminal-tab.waiting-tab.empty:not(.active) .board-tab-icon,
+.mobile-nav-waiting.empty:not([aria-current="true"]) svg { opacity: 0.45; }
+
 /* ============================================================
    Waiting on you
    Billion's questions to the owner. A pinned tab next to Jobs,

package/server/agent-mcp.js

@@ -91,6 +91,10 @@ export function writeMcpConfig(sessionId, agentToken) {
 // server/permission-hook.js with this session's MCP config. Claude Code only;
 // Codex takes its hook differently and is not wired yet (docs/BILLION.md).
 const PERMISSION_HOOK = fileURLToPath(new URL('./permission-hook.js', import.meta.url));
+// The two board tools the job prompt tells a worker on Billion's card to use:
+// finishing its card, and asking Billion. Asking permission for those would
+// only send Billion (or the owner) a request to approve its own instructions.
+export const WORKER_BOARD_TOOLS = ['finish_job', 'send_message'];
 const shellQuote = (s) => `"${String(s).replace(/(["\\$`])/g, '\\$1')}"`;
 // Forward slashes on Windows, which node takes as well: a backslash means
 // something different to each shell a hook might run under (doubled by the
@@ -99,10 +103,7 @@ export const hookPath = (p, platform = process.platform) => (platform === 'win32
 export function withApprovalHook(file, args, configPath) {
   if (!configPath || agentName(file) !== 'claude' || args.includes('--settings')) return args;
   const settings = {
-    // The two board tools the job prompt tells the worker to use: finishing
-    // its card, and asking Billion. Asking permission for those would only
-    // send Billion a request to approve its own instructions.
-    permissions: { allow: ['finish_job', 'send_message'].map(tool => `mcp__${MCP_SERVER_NAME}__${tool}`) },
+    permissions: { allow: WORKER_BOARD_TOOLS.map(tool => `mcp__${MCP_SERVER_NAME}__${tool}`) },
     hooks: {
       PermissionRequest: [{
         matcher: '*',
@@ -113,6 +114,18 @@ export function withApprovalHook(file, args, configPath) {
   return ['--settings', JSON.stringify(settings), ...args];
 }
 
+// The Codex side of the same pre-allow: per-run -c overrides, one separate argv
+// element each, so ~/.codex/config.toml is never touched. Only these tools;
+// everything else on the server keeps Codex's default (ask). Must come after
+// withMcpConfig's server table on the command line, which replaces the table.
+export function withCodexWorkerTools(file, args, configPath) {
+  if (!configPath || agentName(file) !== 'codex') return args;
+  return [
+    ...WORKER_BOARD_TOOLS.flatMap(tool => ['-c', `mcp_servers.${MCP_SERVER_NAME}.tools.${tool}.approval_mode="approve"`]),
+    ...args,
+  ];
+}
+
 export function removeMcpConfig(sessionId) {
   try {
     rmSync(mcpConfigPath(sessionId), { force: true });

package/server/pty.js

@@ -10,7 +10,7 @@ export { trackSyncFrames } from '../lib/helpers.js';
 import { resolveExecutable, isUsableCwd, commandExists, missingCommandMessage } from './command-path.js';
 import { RING_BUFFER_MAX } from './state.js';
 import { mintAgentToken, authEnabled } from './auth.js';
-import { writeMcpConfig, removeMcpConfig, withMcpConfig, takesMcpConfig, withApprovalHook } from './agent-mcp.js';
+import { writeMcpConfig, removeMcpConfig, withMcpConfig, takesMcpConfig, withApprovalHook, withCodexWorkerTools } from './agent-mcp.js';
 import { broadcastJobs, requestDispatch } from './jobs.js';
 import { flushMessages, dropMessages } from './messages.js';
 import { sessionAgentFromCommand, permissionFlagsFromCommand } from '../lib/jobs.js';
@@ -244,7 +244,11 @@ export function createSessionFromConfig({ sessionId, name, color, command, repoP
   // use it — a plain `bash` tab does not need one.
   const mcpConfigPath = takesMcpConfig(file) ? writeMcpConfig(sessionId, agentToken) : null;
   const codexTrust = autoTrust && sessionAgentFromCommand(command) === 'codex';
-  const mcpArgs = withMcpConfig(file, codexTrust ? [...codexTrustArgs(worktreePath), ...args] : args, mcpConfigPath);
+  const ownArgs = codexTrust ? [...codexTrustArgs(worktreePath), ...args] : args;
+  // Codex has no hook yet, but its worker on Billion's card still gets the
+  // same board tools pre-allowed. Inside withMcpConfig, whose server table
+  // override would otherwise replace them.
+  const mcpArgs = withMcpConfig(file, approvalsToBillion ? withCodexWorkerTools(file, ownArgs, mcpConfigPath) : ownArgs, mcpConfigPath);
   // A worker on one of Billion's cards asks Billion before it asks a person
   // (server/approvals.js) — where the CLI can be hooked, which today is
   // Claude Code only. Recorded as whether the hook actually went in.