@gotcos/glasses-server 6.99.33 → 7.0.18

package/server/web-control/panes/settings.js

@@ -16,7 +16,7 @@
   var CATEGORIES = [
     { id: 'general', title: 'General', summary: 'How COS Control opens, its shortcut, Today and the setup guide.', mac: ['App', 'Activity home', 'Setup guide'] },
     { id: 'ai', title: 'AI and accounts', summary: 'The AI apps COS works through, your keys and the models behind Work.', mac: ['Your AI apps', 'Local model', 'Your own key', 'Search'] },
-    { id: 'glasses', title: 'Glasses and iPhone', summary: 'Pair your glasses and phone, and how videos reach this Mac.', mac: ['Devices', 'Video uploads'] },
+    { id: 'glasses', title: 'Glasses, phone and web', summary: 'Pair your glasses and phone, and how videos reach this Mac.', mac: ['Devices', 'Video uploads'] },
     { id: 'meetings', title: 'Meetings', summary: 'Recording, the meeting assistant, live cues and your meeting library.', mac: ['Recording', 'Meeting assistant', 'Library and sync'] },
     { id: 'dictation', title: 'Dictation', summary: 'Type by voice into any Mac app: shortcuts, sounds, text and AI polish.', mac: ['Dictation', 'Microphone', 'Shortcuts', 'Sounds and audio', 'Text', 'AI polish', 'History'] },
     { id: 'voice', title: 'Transcription and voice', summary: 'The engines and models that turn speech into text on this Mac.', mac: ['Voice setup', 'Models', 'Performance'] },
@@ -91,9 +91,10 @@
     Promise.all([
       soft(api('/api/decision-provider')), soft(api('/api/live-cues/v2/settings')), soft(api('/api/morning-brief')),
       soft(api('/api/domains')), soft(api('/api/agent-sessions/fences')), soft(api('/api/meeting-import/fireflies/status')),
-      soft(api('/api/health')), soft(api('/api/drops/settings/p2')), soft(api('/api/today/brief/settings'))
+      soft(api('/api/health')), soft(api('/api/drops/settings/p2')), soft(api('/api/today/brief/settings')),
+      soft(api('/api/session-files/settings')), soft(api('/api/preview-folders/settings'))
     ]).then(function (r) {
-      S.data = { dp: r[0], cues: r[1], mb: r[2], domains: r[3], fences: r[4], ff: r[5], health: r[6], p2: r[7], tb: r[8] };
+      S.data = { dp: r[0], cues: r[1], mb: r[2], domains: r[3], fences: r[4], ff: r[5], health: r[6], p2: r[7], tb: r[8], sf: r[9], pf: r[10] };
       S.state = 'ready';
       render();
     });
@@ -211,22 +212,68 @@
     if (!st) return '';
     var at = function (iso) { var d = new Date(iso); return isNaN(d) ? '' : d.toLocaleTimeString(undefined, { hour: 'numeric', minute: '2-digit' }); };
     if (st.kind === 'paused') return 'Paused after three failed tries. It tries again at ' + at(st.until) + '.';
-    if (st.kind === 'daily_cap') return 'Today\u2019s ' + st.count + ' are used. It writes again tomorrow.';
+    // 7.0.5: the number is the "Summaries per day" setting (an older server sends only the count).
+    if (st.kind === 'daily_cap') { var n = typeof st.cap === 'number' ? st.cap : st.count; return 'Today\u2019s ' + n + (n === 1 ? ' summary is' : ' summaries are') + ' used. It writes again tomorrow.'; }
     if (st.kind === 'failed') return 'The last try failed at ' + at(st.at) + (st.code === 'timeout' ? ' (it took too long).' : st.code === 'unavailable' ? ' (Claude Code was not found on your Mac).' : '.');
     return '';
   }
+  // 6.99.35: "Show files and images your sessions make" (GET/POST /api/session-files/settings, lib/session-files-setting.ts).
+  // On by default. COS_WEB_SESSION_FILES=0 on the Mac forces it off; the row then says so and cannot be changed here.
+  function sessionFilesGroup(d) {
+    var sf = d && d.sf;
+    if (!sf || typeof sf.enabled !== 'boolean') return '';
+    var env = sf.source === 'env';
+    // QA 7.0.0: a saved setting the Mac could not read fails closed (off). The row says so; turning it on saves it again.
+    return group('Session files', '',
+      // 7.0.4: the switch also covers screenshots, images a session opened and images attached to prompts, so it says so.
+      row('Show session files, screenshots and images',
+        env ? 'Turned off on the Mac by the server environment (COS_WEB_SESSION_FILES=0).'
+          : sf.source === 'damaged' ? 'Couldn’t read the saved setting, so previews are off. Turn it on to save it again.'
+          : 'Lets this page show the files and images your sessions send you, the screenshots and images they open, and images attached to your prompts. Files stay on your Mac.',
+        toggle(sf.enabled, 'data-set="session-files"' + (env ? ' disabled' : ''), 'Show session files, screenshots and images')) +
+      previewFoldersRows(d.pf));
+  }
+  // 7.0.5 (preview engine, Miles decision 2b): extra folders a session's linked or sent files may open from, besides its
+  // own project folder (GET/POST /api/preview-folders/settings). Empty by default; each folder is listed by name and
+  // removed one at a time. The server refuses broad folders (home, Documents, Library, /) and says why.
+  function previewFoldersRows(pf) {
+    if (!pf || !Array.isArray(pf.folders)) return '';
+    var list = pf.folders.slice(0, 20);
+    var blurb = pf.source === 'damaged' ? 'Couldn’t read the saved list, so no extra folder counts. Add a folder to save it again.'
+      : list.length ? 'Sessions can also open files from these folders.' : 'None. Sessions open files only from their own project folder.';
+    return '<div class="cx-set-row cx-set-folders"><div class="cx-set-text"><span class="cx-set-name">Extra folders</span><span class="cx-set-desc" id="pf-blurb">' + esc(blurb) + '</span></div></div>' +
+      list.map(function (f, i) {
+        return '<div class="cx-set-row cx-set-folder"><div class="cx-set-text"><span class="cx-set-name pf-name">' + esc(f) + '</span></div>' +
+          '<button type="button" class="cx-btn quiet" data-set="pf-remove" data-index="' + i + '" aria-label="' + esc('Remove ' + f) + '">Remove</button></div>';
+      }).join('') +
+      (list.length < 20 ? '<form class="cx-set-row pf-add" id="pf-add"><label class="cx-set-text" for="pf-input"><span class="cx-set-desc">Add a project folder, like ~/cos-worktrees. Not your whole home or Documents folder.</span></label>' +
+        '<span class="pf-add-line"><input id="pf-input" type="text" inputmode="url" autocapitalize="off" autocorrect="off" spellcheck="false" placeholder="~/cos-worktrees" aria-label="Folder to add">' +
+        '<button type="submit" class="cx-btn" data-set="pf-add">Add</button></span></form>' : '');
+  }
+  function savePreviewFolders(next, done) {
+    api('/api/preview-folders/settings', { method: 'POST', body: { folders: next } }).then(function (v) {
+      if (S.data && v && Array.isArray(v.folders)) S.data.pf = v;
+      W.toast('Saved');
+      render();
+      if (done) done(true);
+    }, function (err) { say((err && err.message) || 'That folder was not saved.', true); if (done) done(false); });
+  }
   function categoryBody(cat) {
     var d = S.data || {};
     var out = '';
     if (cat.id === 'reach') return reachBody();
     if (cat.id === 'pet') return petBody() + onMac(cat.mac);
-    // The Today summary (routes/today-brief.ts): Haiku on the Mac writes Today's top lines. Off unless switched on here or
+    if (cat.id === 'privacy') out += sessionFilesGroup(d);
+    // The Today summary (routes/today-brief.ts): Sonnet on the Mac writes Today's top lines (7.0.1; Haiku before). Off unless switched on here or
     // by COS_TODAY_BRIEF_LLM on the Mac, which wins when set.
     if (cat.id === 'general' && d.tb && typeof d.tb.enabled === 'boolean') {
       out += group('Today summary', '',
         row('Write the Today summary with a model', d.tb.source === 'env' ? 'Set on the Mac by the server environment.' :
-          'Haiku writes two or three sentences after the count of what needs you. It reads what Today shows (session titles and states, each session\u2019s latest reply, the questions sessions ask you, what needs you) and, on your Mac, each session\u2019s sub-agents and the Work cards in progress. It runs only while Today is open, only when something changed, never during a recording, at most every 10 minutes and 60 times a day.',
+          'Sonnet writes two or three sentences after the count of what needs you. It reads what Today shows (session titles and states, each session\u2019s latest reply, the questions sessions ask you, what needs you) and, on your Mac, each session\u2019s sub-agents and the Work cards in progress. It runs only while Today is open, only when something changed, never during a recording, at most every 10 minutes and no more than Summaries per day allows. Refresh on Today asks for a new one at once, at most every 30 seconds.',
           toggle(d.tb.enabled, 'data-set="today-brief"' + (d.tb.source === 'env' ? ' disabled' : ''), 'Write the Today summary with a model')) +
+        // 7.0.5 "Summaries per day" (GET/PUT /api/today/brief/settings/cap), 1 to 100, default 100. Shown when the server has it.
+        (typeof d.tb.dailyCap === 'number' ? row('Summaries per day', 'At most this many new summaries a day, Refresh included. 1 to 100.',
+          '<input type="number" class="cx-set-num" id="today-brief-cap" data-set="today-brief-cap" min="1" max="100" step="1" inputmode="numeric" value="' + esc(String(d.tb.dailyCap)) + '" aria-label="Summaries per day">') : '') +
         (briefStatus(d.tb) ? '<p class="cx-set-blurb" id="today-brief-status">' + esc(briefStatus(d.tb)) + '</p>' : ''));
     }
     if (cat.id === 'ai' && d.dp) {
@@ -346,6 +393,25 @@
         .then(function () { W.toast(!on ? 'Live cues on' : 'Live cues off'); }, function (err) { t.setAttribute('aria-checked', String(on)); say(err.message, true); });
       return;
     }
+    if (act === 'session-files') {
+      var son = t.getAttribute('aria-checked') === 'true';
+      t.setAttribute('aria-checked', String(!son));
+      api('/api/session-files/settings', { method: 'POST', body: { enabled: !son } })
+        .then(function (v) {
+          if (S.data && v) S.data.sf = v;
+          W.toast(!son ? 'Session files and images on' : 'Session files and images off');
+          render();
+        }, function (err) { t.setAttribute('aria-checked', String(son)); say(err.message, true); });
+      return;
+    }
+    if (act === 'pf-remove') {
+      var cur = (S.data && S.data.pf && S.data.pf.folders) || [], idx = Number(t.getAttribute('data-index'));
+      if (!(idx >= 0 && idx < cur.length)) return;
+      t.disabled = true;
+      savePreviewFolders(cur.filter(function (_f, i) { return i !== idx; }), function (ok) { if (!ok) t.disabled = false; });
+      return;
+    }
+    if (act === 'pf-add') return; // the form's submit handler saves
     if (act === 'today-brief') {
       var ton = t.getAttribute('aria-checked') === 'true';
       t.setAttribute('aria-checked', String(!ton));
@@ -380,6 +446,15 @@
     }
   });
 
+  pane.addEventListener('submit', function (e) {
+    if (!e.target || e.target.id !== 'pf-add') return;
+    e.preventDefault();
+    var input = $('pf-input'), v = input ? input.value.trim() : '';
+    if (!v) { say('Type a folder, like ~/cos-worktrees.', true); return; }
+    var cur = (S.data && S.data.pf && S.data.pf.folders) || [];
+    savePreviewFolders(cur.concat([v]));
+  });
+
   // A gallery picture that will not load shows the pet's name alone, never a broken image.
   pane.addEventListener('error', function (e) {
     var img = e.target;
@@ -391,6 +466,22 @@
 
   // Number, time, day and steer fields save when they change (a number is clamped by the server, then shown as saved).
   pane.addEventListener('change', function (e) {
+    // 7.0.5 "Summaries per day": the server clamps to 1 to 100 and answers what it saved; the field shows that.
+    if (e.target && e.target.id === 'today-brief-cap') {
+      // QA 7.0.5: an emptied field (or letters, which a number field reads as '') is Number('') = 0, which the server
+      // clamps to 1. So an empty, non-numeric or below-1 value sends nothing, keeps the saved number and says why.
+      var capField = e.target, capRaw = String(capField.value == null ? '' : capField.value).trim(), wanted = Number(capRaw);
+      if (capRaw === '' || !isFinite(wanted) || wanted < 1) {
+        if (S.data && S.data.tb && typeof S.data.tb.dailyCap === 'number') capField.value = String(S.data.tb.dailyCap);
+        say('Type a number from 1 to 100.', true);
+        return;
+      }
+      api('/api/today/brief/settings/cap', { method: 'PUT', body: { dailyCap: wanted } }).then(function (v) {
+        if (v && typeof v.dailyCap === 'number') { capField.value = String(v.dailyCap); if (S.data && S.data.tb) S.data.tb.dailyCap = v.dailyCap; }
+        W.toast('Saved');
+      }, function (err) { say((err && err.message) || 'That did not save.', true); });
+      return;
+    }
     var f = e.target && e.target.closest ? e.target.closest('[data-p2]') : null;
     if (!f || f.getAttribute('data-set') === 'p2' || !S.data || !S.data.p2) return;
     var path = f.getAttribute('data-p2'), raw = f.value;

package/server/web-control/panes/today-actions.css

@@ -162,6 +162,41 @@ html.ta-open #sq-host { display: none; }
 .next-actions { display: flex; flex-wrap: wrap; align-items: center; gap: 4px 18px; padding: 0 16px 14px; }
 .next-actions:empty { display: none; }
 .next-actions .btn.small { min-height: 44px; }
+/* Prep on every Next up row (Miles 11/09, app.js paintCalendarLater and nextPrepPanelHtml): a quiet Prep at the end of
+   each later row, and one small panel under the row it opens (the COS chat's field and buttons, laid flat in the card).
+   Spacing (Miles 14:15, from the 382 px render): every later row is one height, with or without Prep (the hold row
+   too), and its padding is inside that height, so the Prep link never makes a row taller. The open row and its panel
+   read as ONE block: no rules, the panel attached under its row, and the space under the block equals the space
+   between rows. The gap after Prep me, and the gap above "+N more today", are the same as between rows. One pitch per
+   width: --np-row is the row height, --np-gap the space the rows' own height leaves above and below a line of text,
+   --np-after the space under a button row (a button's box is 2 px taller than its line), measured equal to the row gap. */
+#next-card { --np-row: 36px; --np-gap: 8px; --np-after: calc(var(--np-gap) + 2px); }
+#next-card:has(.next-later:not(.hidden)) .next-actions { padding-bottom: var(--np-after); }
+.next-later .later-row { align-items: center; min-height: var(--np-row); padding: 0; }
+.next-later .later-what { flex: 1; min-width: 0; }
+.next-later .later-prep { flex: none; min-height: var(--np-row); font-size: 14px; font-weight: 500; padding: 0 2px; }
+.next-later .later-more { margin-top: 0; padding: 0; min-height: var(--np-row); }
+.next-first-prep { padding: 0 16px var(--np-after); }
+.next-first-prep.hidden { display: none; }
+.next-prep { display: grid; gap: 8px; margin: 0 0 var(--np-after); padding: 2px 0 0; }
+.next-first-prep .next-prep { margin: 0; padding: 0; }
+.next-prep .field { width: 100%; min-height: 64px; max-height: 140px; font-size: 15px; resize: none; }
+.next-prep-files { list-style: none; margin: 0; padding: 0; display: grid; gap: 2px; }
+.next-prep-files li { display: flex; align-items: center; gap: 10px; min-width: 0; font-size: 14px; }
+.next-prep-file { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--sub); }
+.next-prep-files .link-btn { min-height: 32px; font-size: 14px; font-weight: 500; }
+.next-prep-acts { display: flex; align-items: center; gap: 8px 14px; flex-wrap: wrap; }
+.next-prep-gap { flex: 1; }
+.next-prep-add { position: relative; cursor: pointer; }
+.next-prep-add:focus-within { outline: 2px solid var(--accent); outline-offset: 2px; }
+.next-prep-acts .cx-btn { height: 40px; }
+.next-prep-acts .link-btn { min-height: 40px; font-size: 14px; }
+/* Phones and short touch screens: 44 px touch rows, on the same query as app.css's 44 px floor for .cx-btn and .field,
+   so the panel's buttons and the rows change height together. */
+@media (max-width: 599px), (pointer: coarse) and (max-height: 720px) {
+  #next-card { --np-row: 44px; --np-gap: 12px; }
+  .next-prep-files .link-btn, .next-prep-acts .link-btn { min-height: 44px; }
+}
 /* The Ask sheet's File to Work inbox result, on its own row (app.js fileNoteHtml). */
 .nav-row .note.file-error { color: var(--hot); white-space: normal; }
 /* Running card when the session list could not be read (app.js renderRunning). */
@@ -185,3 +220,14 @@ html.ta-open #sq-host { display: none; }
 .ta-notsent:empty { display: none; }
 .ta-notsent { margin: 4px 0 8px; }
 .ta-composer.dragging { outline: 2px dashed var(--accent); outline-offset: 4px; }
+/* 7.0.1 live state: Refresh and the line beside it under Today's date (app.js todayRefresh, liveNoteText). The button
+   keeps the 44 px target of every link button; the line says Updating, Reconnecting, "As of 2 min ago" or the server's
+   summary limit, in the date's own size and colour. */
+.today-live { display: flex; align-items: center; flex-wrap: wrap; gap: 0 12px; margin: 2px 0 0; min-height: 44px; }
+.today-refresh { min-height: 44px; min-width: 44px; padding: 0 2px; font-size: 15px; }
+.today-refresh:disabled { opacity: 0.55; cursor: default; }
+.today-live-note { color: var(--sub); font-size: 14px; line-height: 1.3; }
+.today-live-note:empty { display: none; }
+.today-live-note.warn { color: var(--warn, var(--sub)); }
+/* A working row's clock ticks every second: tabular figures so the line does not shimmer. */
+.run-clock { font-variant-numeric: tabular-nums; }

package/server/web-control/panes/today-actions.js

@@ -194,7 +194,7 @@
   var KB_MIN_PX = 120;
   var KB_STRIP_MIN_PX = 24;
   var BODY_MIN_PX = 72;          // about three lines of the conversation (15 px text at 1.5)
-  var KB = { on: false, strip: false, tight: false, frame: 0, listening: false, width: 0, inset: 0 };
+  var KB = { on: false, strip: false, tight: false, frame: 0, listening: false, width: 0, inset: 0, typed: false };
   function tall(el) { return (el && el.offsetHeight) || 0; }
   // What the conversation gets once the compact header and the reply box have theirs.
   function bodyRoom(height) {
@@ -211,10 +211,13 @@
     return !!a.isContentEditable;
   }
   function viewport() { return W.viewportFit ? W.viewportFit() : null; }
+  // 7.0.2: `wide` keeps its 6.99.30 meaning, 600 px wide or more, so old and new reports compare. From 7.0.2 a short
+  // touch screen at that width counts as a phone (app.js isPhone, A8): that is shortTouch.
+  function crumbWide() { return window.matchMedia ? !!window.matchMedia('(min-width: 600px)').matches : !phone(); }
   function crumb(what, v, focus) {
     if (!W.layoutCrumb || !O.open || !v) return;
     W.layoutCrumb(what, { kind: O.open.kind, kb: KB.on, strip: KB.strip, tight: KB.tight, focus: !!focus, inset: v.inset, below: v.below,
-      lh: v.layoutH, top: v.top, h: v.height, zoomed: v.zoomed, wide: !phone() });
+      lh: v.layoutH, top: v.top, h: v.height, zoomed: v.zoomed, wide: crumbWide(), shortTouch: crumbWide() && phone() });
   }
   function applyFit() {
     KB.frame = 0;
@@ -246,7 +249,11 @@
     // again would take the room back and flicker.
     if (on && !KB.tight) KB.tight = bodyRoom(v.height) < BODY_MIN_PX;
     layer.classList.toggle('ta-kb-tight', on && KB.tight);
-    if (was !== KB.on + '|' + KB.strip + '|' + KB.tight) crumb('kb', v, focus);
+    // 7.0.2 (A1): the breadcrumb goes on every keyboard open and close in the sheet (a field typing with KB_MIN_PX or more
+    // covered), not only when a class flips: a keyboard that came while ta-kb was already on used to send nothing.
+    var typed = focus && v.inset >= KB_MIN_PX, opened = typed !== KB.typed;
+    KB.typed = typed;
+    if (opened || was !== KB.on + '|' + KB.strip + '|' + KB.tight) crumb('kb', v, focus);
     return v;
   }
   function revealFocused() {
@@ -274,7 +281,7 @@
   function unfit() {
     listenViewport(false);
     if (KB.frame && window.cancelAnimationFrame) window.cancelAnimationFrame(KB.frame);
-    KB.frame = 0; KB.on = false; KB.strip = false; KB.tight = false; KB.width = 0; KB.inset = 0;
+    KB.frame = 0; KB.on = false; KB.strip = false; KB.tight = false; KB.width = 0; KB.inset = 0; KB.typed = false;
     if (!layer) return;
     layer.classList.remove('ta-kb'); layer.classList.remove('ta-kb-strip'); layer.classList.remove('ta-kb-tight');
   }
@@ -457,8 +464,12 @@
       })();
     });
   }
-  window.addEventListener('popstate', function () {
+  // Back from an enlarged image (panes/reader-media.js pushes one entry over the sheet's) is the image's Back: the
+  // viewer closes and the sheet, its scroll and a half-typed note stay (11/08). The viewer says which pops are its own.
+  function imagePop(e) { return !!(W.readerMedia && typeof W.readerMedia.popIsMine === 'function' && W.readerMedia.popIsMine(e)); }
+  window.addEventListener('popstate', function (e) {
     if (O.pops.length) { var w = O.pops.shift(); clearTimeout(w.timer); O.ignorePops = O.pops.length; if (w.then) w.then(); return; }
+    if (imagePop(e)) return;
     // The phone's Back from a session opened off the pet's list goes back to that list, as Back to sessions does.
     if (O.open && O.back) { backToList(); return; }
     if (O.open) close('pop');
@@ -518,6 +529,7 @@
     if (what === 'open-card') return leaveTo('work', id ? [id] : []);
     if (what === 'open-session') return O.r ? leaveTo('sessions', [O.r.provider, O.r.id]) : null;
     if (what === 'open-sessions') return leaveTo('sessions', []);
+    if (what === 'q-retry') { if (W.sessionQuestions && W.sessionQuestions.retry) W.sessionQuestions.retry(); return; }
     // A row of the pet's list opens that session's own sheet in its place, with Back to sessions (and the phone's Back)
     // returning to the list where it was scrolled; X still closes the overlay.
     if (what === 'pet-open') {
@@ -525,6 +537,8 @@
       return open(pk === 'wait' ? 'wait' : 'run', id, O.opener, { from: { scroll: lb ? lb.scrollTop || 0 : 0 } });
     }
     if (what === 'send') return sendReply();
+    if (what === 'turnend') return sendChoice(Number(id));
+    if (what === 'approve-phone' && K.approvePhone && O.r) return K.approvePhone(phoneApprovalOptions(O.r));
     if (what === 'att-remove' || what === 'att-retry') {
       var fb = filesBox(); if (!fb) return;
       O.note = { text: '', kind: '' }; paintNote();
@@ -760,7 +774,7 @@
     }, function (err) {
       row.undoing = false;
       if (err && err.status === 404) O.loop = false;
-      row.undoNote = err && err.status === 404 ? 'Undo needs a newer COS server. Change it in Work.' : (err && err.message) || 'Undo did not go through.';
+      row.undoNote = err && err.status === 404 ? 'Undo did not go through. Change it in Work.' : (err && err.message) || 'Undo did not go through.';
       if (row.state === 'dismissed') { row.until = Date.now() + UNDO_SECONDS * 1000; expireLater(); }
     }).then(paintIntake);
   }
@@ -817,7 +831,8 @@
       paintFiles();
       // The Mac's answer about files may not be in yet: ask once, then draw the clip.
       var kit = KIT(), r0 = O.r;
-      if (kit && !kit.turnFiles()) kit.ensureCaps().then(function () { if (O.r === r0) paintFiles(); }, function () {});
+      paintPhoneOffer(r0);
+      if (kit && !kit.turnFiles()) kit.ensureCaps().then(function () { if (O.r === r0) { paintFiles(); paintPhoneOffer(r0); } }, function () {});
       // Files of a send a reload cut off go again with the same words; say so, since their chips are gone.
       if (O.r.draft && O.r.draft.restored) {
         var nf = O.r.draft.ids.length;
@@ -899,6 +914,14 @@
       '<p class="status-line" id="ta-status" role="status" aria-live="polite"></p>';
   }
 
+  // The same exact packet picker and handoff as Sessions. This does not upgrade an ordinary Send.
+  function phoneApprovalOptions(r) {
+    return { r: r, prefix: 'ta', live: function () { return O.r === r && !!O.open; },
+      status: function (text, kind) { if (O.r === r) { O.note = { text: text, kind: kind || '' }; paintNote(); } },
+      files: function () { return filesState(filesBox(r)); } };
+  }
+  function paintPhoneOffer(r) { if (K.phoneOffer) K.phoneOffer(r, phoneApprovalOptions(r)); }
+
   // ── files with a reply or a note (the COS chat's attach kit) ──
   // One box per session, kept while this tab is open, so closing and reopening the sheet keeps what was attached.
   var FILES = {};
@@ -942,6 +965,8 @@
       el.classList.toggle('hidden', !box.atts.length);
     }
     paintClip(); paintSendButton();
+    // QA 7.0.0: the "Working right now" note says whether files go with the message.
+    if (O.r && O.r.verdict) paintVerdict();
   }
   // Send waits while a file uploads. A failed file never greys it out (QA 6.99.27): a tap says why, as the question
   // card does.
@@ -1006,12 +1031,22 @@
       // A session waiting on you: what it waits on, its question to answer here when the Mac holds one for this page;
       // when the Mac's own prompt has it, that, read-only; else (a reply is the answer) the reply box below. No live
       // peek and no Stop: it is not at work (W4-r2).
-      html += '<p class="ta-sub">' + T.badge(O.r ? O.r.provider : 'claude') + ' <span>' + esc(O.wait ? O.wait.why : 'Waiting for you') + '</span></p>';
       var where = waitWhere();
+      html += '<p class="ta-sub">' + T.badge(O.r ? O.r.provider : 'claude') + ' <span>' + esc(waitWhy(where)) + '</span></p>';
+      // W13 (QA week of 11/01-11/08): the words Today's row showed for it (its `ask`) stay here, read-only, when no card
+      // draws them: the Mac line and a failed read alike. Never twice: not when the line above already says them.
+      var ask = waitAsk();
+      if (ask && (where === 'mac' || where === 'failed') && !O.macCount) html += '<blockquote class="ta-quote ta-mac-ask">' + esc(ask) + '</blockquote>';
+      // W1 A5: no words anywhere (a question that went straight to the Mac): say that, rather than a card with nothing in it.
+      if (!ask && where === 'mac' && !O.macCount && !askInWhy()) html += '<p class="ta-sub ta-mac-nowords">' + esc(macNoWords()) + '</p>';
       // The Mac card says it itself when there is one; say it here only when there is none.
       if (where === 'mac' && !O.macCount) html += '<p class="ta-sub ta-mac-line">' + esc(macLine()) + '</p>';
+      // W13: the questions could not be read, so whether one waits here is unknown. Say so, never "at the Mac", and read again.
+      if (where === 'failed') html += '<p class="ta-note ta-q-failed" role="status">' + esc('Couldn\u2019t load this session\u2019s questions, so one may be waiting here.') +
+        ' <button type="button" class="link-btn" data-ta="q-retry">Retry</button></p>';
       if (where === 'answered') html += '<p class="ta-sub ta-mac-line">' + esc((W.sessionQuestions && W.sessionQuestions.answeredLine) || 'Answered. The session carries on.') + '</p>';
       if (where === 'reply') html += '<p class="ta-sub">' + esc('Answer it in a reply below, or open the session.') + '</p>';
+      if (where === 'turnend') html += turnEndHtml();
     } else if (O.row || O.r) {
       // Once the live feed speaks, the line says what it says, so the header and the peek never disagree (qa2-user N3).
       html += '<p class="ta-sub">' + T.badge(O.r ? O.r.provider : O.row.provider) + ' <span id="ta-run-state">' + esc(runWords()) + '</span></p>';
@@ -1026,18 +1061,78 @@
     box.innerHTML = html;
     // The reply box shows only where a reply can be the answer; what was typed stays in it, hidden.
     var foot = $('ta-foot');
-    if (foot && O.open.kind === 'wait') foot.hidden = waitWhere() !== 'reply';
+    if (foot && O.open.kind === 'wait') { var w = waitWhere(); foot.hidden = w === 'failed' ? !!(O.r && O.r.provider === 'claude') : w !== 'reply' && w !== 'turnend'; }
   }
   // Where a waiting session's question is answered: 'here' (its cards in this sheet), 'answered' (on some screen just
   // now), 'mac' (a Claude session's own prompt, or a held question that went back to the Mac), or 'reply' (a Codex or
   // Cursor session asking in words).
+  // W13: 'failed' when the last questions read failed and no card is drawn: a Claude reply still answers nothing, so the
+  // reply box stays a Codex or Cursor one.
   function waitWhere() {
     if (O.qCount) return 'here';
+    // 7.0.18: a turn that ended asking him is answered by a reply (a choice or his own words), so the reply box shows.
+    if (O.wait && O.wait.where === 'turnend') return 'turnend';
     if (O.r && W.sessionQuestions && W.sessionQuestions.answeredFor && W.sessionQuestions.answeredFor(O.r.id)) return 'answered';
+    if (!O.macCount && W.sessionQuestions && W.sessionQuestions.loadState && W.sessionQuestions.loadState() === 'failed') return 'failed';
     if (O.macCount || (O.r && O.r.provider === 'claude') || (O.wait && O.wait.where === 'mac')) return 'mac';
     return 'reply';
   }
-  function macLine() { return (W.sessionQuestions && W.sessionQuestions.macLine) || "Waiting on your Mac's prompt. Answer it on the Mac (or through Screens)."; }
+  // The question in Today's own words (its Needs you row), unless the line above the sheet already reads exactly that.
+  function waitAsk() {
+    var a = O.wait && O.wait.ask ? String(O.wait.ask).trim() : '';
+    return a && !(O.wait.why && String(O.wait.why).trim() === a) ? a : '';
+  }
+  // 7.0.18: a turn that ended asking him (X1 contract v1). The question as the row has it, a button per choice, and the
+  // required honest line. A tap sends the contract's exact text through the reader's Continue (K.send); his own words
+  // in the box below are sent the same way.
+  var TURN_END_LINE = 'A choice or a reply here reaches the session as a message from COS, not typed in the session, and the session may ask you to confirm.';
+  var TURN_END_PREFIX = 'Answer sent from COS Control Web through COS, not typed in this session: ';
+  function turnEndAnswer(text) { var t = String(text || '').trim(); return TURN_END_PREFIX + (t.indexOf(TURN_END_PREFIX) === 0 ? t.slice(TURN_END_PREFIX.length).trim() : t); }
+  function turnEndHtml() {
+    var w = O.wait || {}, choices = Array.isArray(w.choices) ? w.choices : [], busy = !!(O.r && O.r.sending);
+    return (w.ask ? '<blockquote class="ta-quote ta-te-ask">' + esc(w.ask) + '</blockquote>' : '') +
+      (choices.length ? '<div class="ta-te-choices">' + choices.map(function (c, i) {
+        return '<button type="button" class="cx-btn' + (i === 0 ? ' primary' : '') + '" data-ta="turnend" data-id="' + i + '"' + (busy ? ' disabled' : '') + '>' + esc(c) + '</button>';
+      }).join('') + '</div>' : '') +
+      '<p class="ta-sub ta-te-line">' + esc(TURN_END_LINE) + '</p>';
+  }
+  /** Still waiting on this answer? The latest session list decides; a reply from anywhere clears it on the server. */
+  function turnEndStill() {
+    var nm = T.needs ? T.needs() : null, key = O.wait && O.wait.key;
+    return !!(nm && key && nm.rows.some(function (x) { return x.kind === 'session' && x.key === key && x.where === 'turnend'; }));
+  }
+  function sendChoice(i) {
+    var r = O.r, w = O.wait; if (!r || !w || r.sending) return;
+    var label = (Array.isArray(w.choices) ? w.choices : [])[i];
+    if (!label) return;
+    if (!turnEndStill()) { O.note = { text: 'Already answered on another screen, or the session moved on. Nothing was sent.', kind: '' }; paintNote(); return; }
+    r.sending = true; setSending(true); paintMeta();
+    var done = function () { r.sending = false; if (O.r === r) { setSending(false); paintMeta(); } };
+    return K.send(r, turnEndAnswer(label), {}).then(function (how) {
+      done();
+      if (O.r !== r) return;
+      if (how === 'sent') O.note = { text: 'Sent \u201c' + label + '\u201d. It reaches the session as a message from COS; it may ask you to confirm.', kind: '' };
+      else if (how === 'changed') { r.refusal = null; r.sendAnyway = null; paintVerdict(); O.note = { text: 'The session moved on before this reached it. \u201c' + label + '\u201d was not sent.', kind: 'error' }; }
+      else if (how === 'refused') O.note = { text: 'The session did not take \u201c' + label + '\u201d. Try again, or answer it on your Mac.', kind: 'error' };
+      paintNote();
+    }, function (err) {
+      done();
+      if (O.r !== r) return;
+      O.note = { text: 'Not sent: ' + (err && err.name === 'AbortError' ? 'no answer from your Mac yet. It may still land; tapping again is safe, it will not post twice.' : (err && err.message) || 'could not reach your Mac.'), kind: 'error' };
+      paintNote();
+    });
+  }
+  function macLine() { return (W.sessionQuestions && W.sessionQuestions.macLine) || "Answer this at your Mac's prompt. A message sent from here does not answer it; it waits until the question is answered at the Mac."; }
+  function macNoWords() { return (W.sessionQuestions && W.sessionQuestions.macNoWords) || "COS cannot read this question's words from here. They show at the Mac's prompt."; }
+  // W1 A5: the head line says the state once. At the Mac's prompt the line below says where; the head does not repeat it.
+  var GENERIC_WAIT = /^Waiting for (you|your answer)(\. Paused until you answer\.)?$/;
+  function waitWhy(where) {
+    var why = O.wait ? String(O.wait.why || '') : '';
+    if (!why) return 'Waiting for you';
+    return where === 'mac' && GENERIC_WAIT.test(why) ? 'Waiting for your answer' : why;
+  }
+  // The head line already carries the question's words (the server named them in the waiting line).
+  function askInWhy() { return !!(O.wait && O.wait.why && !GENERIC_WAIT.test(String(O.wait.why))); }
 
   // ═════════════ The pet's sessions ═════════════
   // The same sessions the pet's caption counts (app.js petPlay): waiting on you, running, then done today. Each row
@@ -1098,7 +1193,7 @@
   function loadLast(r) {
     var request = r.lastRead = {};
     O.lastState = 'loading'; O.lastWhy = ''; paintLast();
-    return K.answer(K.path(r.provider, r.id, '?turns=6'), { timeoutMs: 20000 }).then(function (a) {
+    return K.answer(K.path(r.provider, r.id, '?turns=6&cards=1'), { timeoutMs: 20000 }).then(function (a) {
       if (O.r !== r || r.lastRead !== request) return;
       if (a.status === 404) { O.lastState = 'none'; O.lastWhy = 'This session is not on your Mac any more.'; paintLast(); return; }
       if (a.status !== 200) { O.lastState = 'error'; paintLast(); return; }
@@ -1106,7 +1201,8 @@
       if (!O.row) { O.row = d; paintMeta(); if (O.open && O.open.kind === 'run') setHead(K.title(d)); }
       var turns = Array.isArray(d.recent_turns) ? d.recent_turns : [];
       var lastA = turns.filter(function (t) { return lower(t.role) !== 'user' && (String(t.text || t.content || '').trim() || (K.imageHtml && K.imageHtml(t))); }).pop();
-      O.last = lastA ? { text: String(lastA.text || lastA.content || '').trim(), at: lastA.at, outputImages: lastA.outputImages } : null;
+      O.last = lastA ? { text: String(lastA.text || lastA.content || '').trim(), at: lastA.at, toolImages: lastA.toolImages, toolImagesMore: lastA.toolImagesMore, outputLinks: lastA.outputLinks,
+        outputImages: lastA.outputImages, outputFiles: lastA.outputFiles, previewsOff: lastA.previewsOff } : null;
       O.lastState = O.last ? 'ready' : 'none';
       O.lastWhy = '';
       paintLast();
@@ -1116,7 +1212,7 @@
     var box = $('ta-last'); if (!box) return;
     // Retain the actual reply nodes (and its open image) during refreshes and transient errors.
     // Only a successful changed reply replaces them. Metadata changes count as changed too.
-    var signature = O.last ? JSON.stringify([O.last.text, O.last.at, K.imageHtml ? K.imageHtml(O.last) : '']) : '';
+    var signature = O.last ? JSON.stringify([O.last.text, O.last.at, K.imageHtml ? K.imageHtml(O.last) : '', K.linksAttr ? K.linksAttr(O.last) : '']) : '';
     if (signature && box.__taLastSignature === signature) {
       var refresh = $('ta-last-refresh');
       if (refresh) refresh.textContent = O.lastState === 'loading' ? 'Checking for a newer reply…'
@@ -1132,8 +1228,10 @@
     if (!O.last) { box.innerHTML = ''; return; }
     var at = W.toDate(O.last.at), long = O.last.text.length > 700;
     box.innerHTML = '<section class="ta-last" aria-label="Last reply"><p class="ta-last-head">' + esc('Last reply' + (at ? ', ' + W.clock(at) : '')) + '</p>' +
-      '<div class="sx-md ta-last-text' + (long ? ' clamped' : '') + '" id="ta-last-text">' + K.markdown(O.last.text.slice(0, 12000)) + '</div>' +
-      (long ? '<button type="button" class="link-btn" data-ta="more">Show all of it</button>' : '') + (K.imageHtml ? K.imageHtml(O.last) : '') + '<p id="ta-last-refresh" class="ta-sub" role="status"></p></section>';
+      (K.imageHtml ? K.imageHtml(O.last, { part: 'before' }) : '') +
+      // Preview engine phase 1: the reply's link cards, as in the reader.
+      '<div class="sx-md ta-last-text' + (long ? ' clamped' : '') + '" id="ta-last-text"' + (K.linksAttr ? K.linksAttr(O.last) : '') + '>' + K.markdown(O.last.text.slice(0, 12000), O.last.outputLinks) + '</div>' +
+      (long ? '<button type="button" class="link-btn" data-ta="more">Show all of it</button>' : '') + (K.imageHtml ? K.imageHtml(O.last, { part: 'after' }) : '') + '<p id="ta-last-refresh" class="ta-sub" role="status"></p></section>';
     if (K.imagesMount) K.imagesMount(box, O.r);
   }
 
@@ -1234,7 +1332,8 @@
       var fb = sent.length ? filesBox(r) : null, kit = KIT();
       if (fb && kit) fb.atts.filter(function (t) { return sent.indexOf(t.mediaId) >= 0; }).forEach(function (t) { kit.remove(fb, t.id); });
       var box = r === O.r ? $('ta-input') : null;
-      var left = box ? (box.value.trim() === String(text).trim() ? '' : box.value) : '';
+      // 7.0.18: his answer to a turn-end ask went with the attribution in front; the box holds his words without it.
+      var left = box ? (box.value.trim() === String(text).trim() || (box.value.trim() && turnEndAnswer(box.value) === String(text).trim()) ? '' : box.value) : '';
       if (box && !left) { box.value = ''; W.autoGrow(box); }
       keepDraft(r, left, null);
     },
@@ -1275,7 +1374,8 @@
         '</div></div>';
     } else if (v && v.attachable === false && /^(native_thread_working|native_target_busy)$/.test(v.reason)) {
       // 6.99.29: "Working right now" only while the card's one state says so.
-      if (K.feed.parkNoteShows(r)) html = '<p class="sx-park">' + esc(K.parkCopy(r.provider)) + '</p>';
+      // QA 7.0.0: files in this sheet's box wait for the turn end, so the note says so (app.js sxParkLine).
+      if (K.feed.parkNoteShows(r)) html = '<p class="sx-park">' + esc(K.parkCopy(r.provider, r, !!(filesOn() && filesState(filesBox(r)) !== 'none'))) + '</p>';
     } else if (v && v.attachable === false && v.reasonCopy) {
       html = '<div class="sx-box refusal" role="status"><p>' + esc(v.reasonCopy) + '</p></div>';
     } else if (v && v.caution) {
@@ -1309,6 +1409,8 @@
     if (r.refusal || O.cautionAsk) { r.refusal = null; O.cautionAsk = false; paintVerdict(); }
     r.sending = true; setSending(true);
     var done = function () { r.sending = false; if (O.r === r) setSending(false); };
+    // 7.0.18: his own words in answer to a turn-end ask carry the same attribution as a choice ('Other' in the contract).
+    if (O.open && O.open.kind === 'wait' && waitWhere() === 'turnend' && turnEndStill()) text = turnEndAnswer(text);
     var sending = K.send(r, text, opts || {});
     // continueSession picks the key at once (draftFor): keep it until the Mac takes the words.
     if (r.draft) keepDraft(r, text, r.draft);

package/server/web-control/panes/work.css

@@ -313,3 +313,16 @@
 .wk-pick-row { display: flex; align-items: center; gap: 10px; padding: 8px 2px; border-top: 1px solid var(--hairline); }
 .wk-pick-row > div { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
 .wk-pick-row strong { font-size: 13.5px; }
+
+/* Duo tables: the divider between a card and its side panel (app.js splitKit, styled in app.css; work.js DIVIDER). From
+   900 px only, where both show. Its 22 px column is the old gap, so the default layout is unchanged; a dragged width
+   sizes the side panel, clamped so it keeps 320 px and the card 380 px. */
+@media (min-width: 900px) {
+  .wk-detail.split-side { grid-template-columns: minmax(0, 1fr) 22px minmax(320px, 400px); column-gap: 0; }
+  .wk-detail.split-side.split-sized { grid-template-columns: minmax(0, 1fr) 22px clamp(320px, var(--split-side-share, 30%), calc(100% - 402px)); }
+  .wk-detail.split-side > .split-handle { display: flex; }
+}
+@media (min-width: 1300px) { .wk-detail.split-side { grid-template-columns: minmax(0, 1fr) 22px 452px; } }
+
+/* W1 (0.5.386 parity): the empty card's one-tap New session button wraps on a folded phone instead of running off the card. */
+.wk-start-new { white-space: normal; max-width: 100%; height: auto; min-height: 40px; text-align: center; line-height: 1.3; padding-top: 8px; padding-bottom: 8px; }