@kingcrab/pi-imessage 1.0.0 → 1.1.0

package/dist/extensions/web.js

@@ -9,6 +9,7 @@ export const WebResults = defineDoc({
     history: "rewindable",
     fork: "asOf",
     initial: () => ({ queries: {} }),
+    checkpointWhen: () => false,
 });
 async function fetchBounded(url, options = {}) {
     const parsed = new URL(url);
@@ -65,7 +66,7 @@ export function webExtension(apiKey = process.env.BRAVE_API_KEY ?? process.env.B
                         for (const key of keys.slice(0, Math.max(0, keys.length - 20)))
                             delete results.queries[key];
                     }, context);
-                    return { content: [{ type: "text", text }] };
+                    return { output: [{ type: "text", text }] };
                 },
             }),
             defineTool({
@@ -81,7 +82,7 @@ export function webExtension(apiKey = process.env.BRAVE_API_KEY ?? process.env.B
                             ? (await Defuddle(result.bytes.toString(), result.url, { markdown: true, useAsync: false }))
                                 .content
                             : result.bytes.toString();
-                    return { content: [{ type: "text", text: text.slice(0, 50000) }] };
+                    return { output: [{ type: "text", text: text.slice(0, 50000) }] };
                 },
             }),
             defineTool({
@@ -91,7 +92,7 @@ export function webExtension(apiKey = process.env.BRAVE_API_KEY ?? process.env.B
                 replay: "safe",
                 async execute(args, api, context) {
                     const data = await api.snapshot(WebResults, api.conversationId, context);
-                    return { content: [{ type: "text", text: data?.queries[args.query] ?? "No saved result" }] };
+                    return { output: [{ type: "text", text: data?.queries[args.query] ?? "No saved result" }] };
                 },
             }),
         ],

package/dist/extensions/workspace.js

@@ -16,7 +16,7 @@ export function workspaceExtension(reload) {
                 parameters: Type.Object({}),
                 async execute() {
                     await reload();
-                    return { content: [{ type: "text", text: "Workspace extensions and configuration reloaded." }] };
+                    return { output: [{ type: "text", text: "Workspace extensions and configuration reloaded." }] };
                 },
             }),
         ],

package/dist/main.js

@@ -19,6 +19,7 @@ import { createBrowser } from "./extensions/browser.js";
 import { memoryExtension } from "./extensions/memory.js";
 import { messageExtension } from "./extensions/message.js";
 import { ImageRead } from "./extensions/read-image.js";
+import { launchInTerminal, restartExtension } from "./extensions/restart.js";
 import { validateSchedules } from "./extensions/schedules.js";
 import { Subagent } from "./extensions/subagent.js";
 import { webExtension } from "./extensions/web.js";
@@ -75,6 +76,14 @@ reloadHttpTransport) {
                     browser.extension,
                     Subagent,
                     workspaceExtension(reload),
+                    // ADR 0052: the service runs from a release directory; the controller starts after the call settles.
+                    restartExtension({
+                        workingDir: options.workingDir,
+                        currentRelease: process.cwd(),
+                        deployRoot: "/tmp",
+                        settled: (taskId) => harness.waitForTask(taskId, BACKGROUND_CONTEXT),
+                        launch: launchInTerminal,
+                    }),
                 ]),
             ...(await loadWorkspaceExtensions(options.workingDir)),
         ];
@@ -271,6 +280,7 @@ reloadHttpTransport) {
                     models: runtime.models,
                     defaults,
                     reload,
+                    workingDir: options.workingDir,
                     chatGuid: snapshot.chatGuid,
                     guid: snapshot.guid,
                     text: snapshot.text,

package/dist/web/app.js

@@ -16,7 +16,8 @@ document.body.classList.add(`page-${page.slice(1)}`);
 if (conversationId) document.body.classList.add("conversation-detail");
 document.getElementById("title").textContent =
 	{
-		"/chat": "Recent Chats",
+		"/chat": "Messages",
+		"/chats": "Chats",
 		"/tasks": "Tasks",
 		"/scheduled": "Scheduled tasks",
 		"/logs": "Logs",
@@ -424,6 +425,80 @@ function renderSettings() {
 	}
 }
 
+function renderChatSettings() {
+	const chats = data.chats || [];
+	const overrides = chats.filter((chat) => chat.verbose.chat !== undefined).length;
+	view.replaceChildren(
+		element(
+			"p",
+			[
+				`${chats.length} chats`,
+				`default verbose ${data.defaults?.progressMessages ? "on" : "off"}`,
+				`${overrides} ${overrides === 1 ? "override" : "overrides"}`,
+				"read-only: /verbose and /thinking change a chat, settings.json the default",
+			].join(" · "),
+			"muted",
+		),
+	);
+	// A main value with its source or provider underneath keeps each column scannable.
+	function stacked(main, detail) {
+		const cell = element("td", undefined, "c-fix");
+		cell.append(element("div", main));
+		if (detail) cell.append(element("div", detail, "meta"));
+		return cell;
+	}
+	function section(id, title, rows) {
+		const card = element("section", undefined, "card");
+		card.id = `chats-${id}`;
+		const header = element("header", undefined, "card-header");
+		header.append(element("span", title), element("span", String(rows.length), "meta"));
+		card.append(header);
+		const table = element("table", undefined, "chat-table");
+		const heading = table.createTHead().insertRow();
+		for (const label of ["Chat", "Replies", "Verbose", "Model", "Thinking", "Last activity"])
+			heading.append(element("th", label));
+		const body = table.createTBody();
+		for (const chat of rows) {
+			const row = body.insertRow();
+			if (!chat.replies) row.className = "chat-silent";
+			const name = row.insertCell();
+			// Group name, or the handle of a direct chat; the raw GUID stays in the native state only.
+			const handle = chat.chatGuid.includes(";+;") ? "unnamed group" : chat.chatGuid.split(";").at(-1);
+			name.append(link(chat.groupName || handle, `/chat?conversationId=${chat.conversationId}`));
+			const [provider, ...modelId] = (chat.model || "").split("/");
+			const activity =
+				typeof chat.updatedAt === "number"
+					? new Date(chat.updatedAt).toLocaleString("sv-SE").slice(0, 16)
+					: "";
+			row.append(
+				stacked(chat.replies ? "on" : "off"),
+				stacked(
+					chat.verbose.effective ? "on" : "off",
+					chat.verbose.chat === undefined ? "default" : "this chat",
+				),
+				stacked(modelId.join("/") || "-", chat.model ? provider : undefined),
+				stacked(chat.thinking || "-"),
+				stacked(activity || "-"),
+			);
+		}
+		card.append(table);
+		if (!rows.length) card.append(element("p", "None.", "empty chat-empty"));
+		return card;
+	}
+	view.append(
+		section(
+			"groups",
+			"Groups",
+			chats.filter((chat) => chat.chatGuid.includes(";+;")),
+		),
+		section(
+			"direct",
+			"Direct",
+			chats.filter((chat) => !chat.chatGuid.includes(";+;")),
+		),
+	);
+}
+
 function renderLogs() {
 	const scrollPositions = Array.from(view.querySelectorAll(".card-content"), (node) => ({
 		top: node.scrollTop,
@@ -615,9 +690,11 @@ function renderTasks() {
 			item.append(detail);
 		}
 		const descendants = children.get(key) || [];
-		if (descendants.length) {
+		const more = node.type === "conversation" && data.more?.[node.id];
+		if (descendants.length || more) {
 			const list = element("ul", undefined, "task-tree");
 			for (const child of descendants) list.append(renderNode(child));
+			if (more) list.append(element("li", "older tasks not listed", "meta"));
 			item.append(list);
 		}
 		return item;
@@ -643,7 +720,7 @@ function setupToolbar() {
 	if (page === "/chat" || page === "/tasks") {
 		if (conversationId) {
 			toolbar.className = "toolbar";
-			toolbar.append(page === "/chat" ? link("< Recent Chats", "/") : link("< All conversations", "/tasks"));
+			toolbar.append(page === "/chat" ? link("< Messages", "/") : link("< All conversations", "/tasks"));
 		}
 	} else if (page === "/memory") {
 		const records = Array.isArray(data) ? memoryRows() : data.records;
@@ -702,6 +779,7 @@ async function render() {
 	if (page === "/chat") await loadChats();
 	else if (page === "/memory") renderMemory();
 	else if (page === "/settings") renderSettings();
+	else if (page === "/chats") renderChatSettings();
 	else if (page === "/logs") renderLogs();
 	else if (page === "/tasks") renderTasks();
 	else if (page === "/scheduled") renderScheduled();

package/dist/web/page.js

@@ -5,7 +5,8 @@ function escapeHtml(text) {
 export function renderPage(page, state) {
     const active = page === "/" || page === "/chat" ? "/" : page;
     const navigation = [
-        ["/", "Recent Chats"],
+        ["/", "Messages"],
+        ["/chats", "Chats"],
         ["/tasks", "Tasks"],
         ["/scheduled", "Scheduled"],
         ["/logs", "Logs"],
@@ -19,7 +20,7 @@ export function renderPage(page, state) {
 <title>blue — pi-imessage</title><link rel="stylesheet" href="/assets/style.css">
 <script src="/assets/app.js" defer></script></head>
 <body><nav class="app-nav" aria-label="Main navigation">${navigation}</nav>
-<main class="content" id="main"><header class="page-header"><h1 id="title">Recent Chats</h1>
+<main class="content" id="main"><header class="page-header"><h1 id="title">Messages</h1>
 <div class="connection"><button id="refresh" type="button">Refresh</button></div></header>
 <div id="toolbar"></div><p id="notice" role="status" hidden></p><div id="view" aria-busy="true"></div>
 <details class="native-state"><summary>Native state</summary><pre id="state">${escapeHtml(state)}</pre></details></main>

package/dist/web/schedules.js

@@ -11,18 +11,9 @@ export function readSchedules(harness) {
             const task = await tx.task(schedule.taskId);
             const checkpoint = task?.state.checkpoint;
             const state = checkpoint && typeof checkpoint === "object" && !Array.isArray(checkpoint) ? checkpoint : undefined;
-            const executions = [];
-            let cursor;
-            do {
-                const page = await tx.scanTasks({ conversationId: schedule.conversationId, kind: EXECUTION_KIND }, 100, cursor);
-                executions.push(...page.items);
-                cursor = page.next;
-            } while (cursor);
-            // Native scans merge live/terminal records; their order is not execution chronology.
-            const runs = executions
-                .sort((a, b) => b.id - a.id)
-                .slice(0, 10)
-                .map((run) => {
+            // Occurrence IDs grow with admission time; the newest ten are the history shown.
+            const executions = await tx.scanTasks({ conversationId: schedule.conversationId, kind: EXECUTION_KIND, order: "descending" }, 10);
+            const runs = executions.items.map((run) => {
                 const outcome = run.state.outcome;
                 const result = outcome?.status === "completed" &&
                     outcome.result &&
@@ -38,9 +29,7 @@ export function readSchedules(harness) {
                     input: run.input,
                     status: outcome?.status ?? run.state.status,
                     result,
-                    error: outcome?.status === "failed" || outcome?.status === "faulted"
-                        ? outcome.error.message
-                        : undefined,
+                    error: outcome?.status === "failed" || outcome?.status === "faulted" ? outcome.error.message : undefined,
                     delivery: receipt?.textStatus ?? (result?.requestId ? "queued" : undefined),
                 };
             });

package/dist/web/server.js

@@ -6,12 +6,12 @@ import { promisify } from "node:util";
 import { gzip } from "node:zlib";
 import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import { LiveDoc, } from "@earendil-works/pi-durable";
-import { Chats } from "../agent/chats.js";
+import { Chats, progressEnabled } from "../agent/chats.js";
 import { DirectSends } from "../agent/direct-send.js";
 import { Sessions } from "../agent/health.js";
 import { Deliveries } from "../agent/replies.js";
 import { Schedules } from "../agent/scheduling.js";
-import { readSettings } from "../config/settings.js";
+import { isReplyEnabled, readSettings } from "../config/settings.js";
 import { displayHistory, historyActivity } from "./history.js";
 import { memoryPage, parseMemoryFile } from "./memory.js";
 import { renderPage } from "./page.js";
@@ -113,6 +113,36 @@ export async function startWeb(options) {
             settings: { chatAllowlist: configuration.chatAllowlist },
         };
     }
+    /** One row per chat: reply eligibility, the /verbose choice and the conversation's agent settings. */
+    async function chatSettings() {
+        const [chats, configuration] = await Promise.all([
+            options.agent.harness.snapshot(Chats, BACKGROUND_CONTEXT),
+            settings(),
+        ]);
+        const records = chats?.items ?? [];
+        const rows = await Promise.all(records.map(async (chat) => {
+            const conversation = await options.agent.harness.conversation(chat.conversationId, BACKGROUND_CONTEXT);
+            const [agent, entries] = conversation
+                ? await Promise.all([conversation.agent(BACKGROUND_CONTEXT), history(chat.conversationId)])
+                : [undefined, undefined];
+            return {
+                chatGuid: chat.chatGuid,
+                conversationId: chat.conversationId,
+                groupName: entries ? displayHistory(entries, 15).groupName : undefined,
+                updatedAt: entries ? historyActivity(entries) : undefined,
+                replies: isReplyEnabled(configuration, chat.chatGuid),
+                verbose: { chat: chat.progress, effective: progressEnabled(configuration, records, chat.chatGuid) },
+                model: agent?.model ? `${agent.model.provider}/${agent.model.modelId}` : undefined,
+                thinking: agent?.thinkingLevel,
+            };
+        }));
+        rows.sort((a, b) => (b.updatedAt ?? 0) - (a.updatedAt ?? 0) || Number(b.conversationId) - Number(a.conversationId));
+        return {
+            chats: rows,
+            defaults: { progressMessages: configuration.progressMessages },
+            revision: viewRevision(),
+        };
+    }
     const server = createServer((request, response) => {
         void handle(request, response).catch((error) => {
             if (!response.headersSent)
@@ -241,6 +271,10 @@ export async function startWeb(options) {
             value = await readSchedules(options.agent.harness);
             compact = true;
         }
+        else if (page === "/chats") {
+            value = await chatSettings();
+            compact = true;
+        }
         else if (page === "/tasks") {
             value = {
                 ...(await readTaskTree(options.agent.harness)),
@@ -265,7 +299,7 @@ export async function startWeb(options) {
             value = await settings();
         else if (page === "/logs") {
             const cursor = readCursor(url.searchParams.get("cursor"));
-            const tasks = await options.agent.harness.commit((tx) => tx.scanTasks({}, 100, cursor), BACKGROUND_CONTEXT);
+            const tasks = await options.agent.harness.commit((tx) => tx.scanTasks(cursor ? {} : { order: "descending" }, 100, cursor), BACKGROUND_CONTEXT);
             let hostLog = "";
             try {
                 const file = await open(join(options.workingDir, "service.log"), "r");

package/dist/web/style.css

@@ -541,3 +541,37 @@ body.page-logs .native-state {
 		width: 100px;
 	}
 }
+
+.chat-table th,
+.chat-table td {
+	padding: 8px 16px;
+	border-bottom: 1px solid var(--border);
+}
+
+.chat-table th {
+	opacity: 0.55;
+	white-space: nowrap;
+}
+
+.chat-table td:first-child {
+	width: 100%;
+	word-break: break-all;
+}
+
+.chat-table tbody tr:last-child td {
+	border-bottom: 0;
+}
+
+.chat-silent {
+	opacity: 0.55;
+}
+
+.chat-empty {
+	padding: 12px 16px;
+}
+
+/* The Chats tables grow with their rows; the page itself scrolls. */
+body.page-chats .card {
+	max-height: none;
+	overflow: visible;
+}

package/dist/web/tasks.js

@@ -1,9 +1,17 @@
 import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import { displayHistory, historyActivity } from "./history.js";
-/** Read one consistent tree, including terminal receipts and task-owned conversations. */
+/** Newest tasks listed per conversation; older finished ones are only flagged. */
+export const RECENT_TASKS_PER_CONVERSATION = 20;
+/**
+ * Read one consistent tree, newest first: all conversations, every unfinished task, every task that owns a
+ * conversation, their parent chains and the newest tasks of each conversation. Descending scans stop at the
+ * window instead of reading the whole task history (earendil-works/pi#10546).
+ */
 export function readTaskTree(harness) {
     return harness.commit(async (tx) => {
         const conversations = [];
+        const kept = new Map();
+        const more = {};
         let cursor;
         do {
             const page = await tx.scanConversations({}, 100, cursor);
@@ -15,49 +23,75 @@ export function readTaskTree(harness) {
                     updatedAt: historyActivity(history),
                     groupName: typeof groupName === "string" ? groupName : undefined,
                 });
+                const newest = await tx.scanTasks({ conversationId: conversation.id, order: "descending" }, RECENT_TASKS_PER_CONVERSATION + 1);
+                for (const task of newest.items.slice(0, RECENT_TASKS_PER_CONVERSATION))
+                    kept.set(task.id, task);
+                if (newest.items.length > RECENT_TASKS_PER_CONVERSATION)
+                    more[conversation.id] = true;
+                if (conversation.owner && !kept.has(conversation.owner.taskId)) {
+                    const owner = await tx.task(conversation.owner.taskId);
+                    if (owner)
+                        kept.set(owner.id, owner);
+                }
             }
             cursor = page.next;
         } while (cursor);
-        const tasks = [];
+        // Unfinished tasks can be old (sleeping schedulers); status scans are small.
+        for (const status of ["pending", "running", "waiting", "sleeping"]) {
+            cursor = undefined;
+            do {
+                const page = await tx.scanTasks({ status, order: "descending" }, 100, cursor);
+                for (const task of page.items)
+                    kept.set(task.id, task);
+                cursor = page.next;
+            } while (cursor);
+        }
+        // A kept child needs its parent chain so the tree can place it.
+        for (const task of [...kept.values()]) {
+            for (let owner = task.owner; owner !== undefined && !kept.has(owner); owner = kept.get(owner)?.owner) {
+                const parent = await tx.task(owner);
+                if (!parent)
+                    break;
+                kept.set(parent.id, parent);
+            }
+        }
         const assistants = new Map();
-        do {
-            const page = await tx.scanTasks({}, 100, cursor);
-            for (const task of page.items) {
-                let name;
-                const input = task.input;
-                if (task.kind === "pi.tool" && input && typeof input === "object" && !Array.isArray(input)) {
-                    if (typeof input.assistant === "number" && typeof input.callId === "string") {
-                        const id = input.assistant;
-                        if (!assistants.has(id))
-                            assistants.set(id, await tx.entry(id));
-                        for (const message of assistants.get(id)?.model ?? []) {
-                            if (message.role !== "assistant")
-                                continue;
-                            const call = message.content.find((block) => block.type === "toolCall" && block.id === input.callId);
-                            if (call?.type === "toolCall")
-                                name = call.name;
-                        }
+        const tasks = [];
+        for (const task of [...kept.values()].sort((a, b) => Number(b.id) - Number(a.id))) {
+            let name;
+            const input = task.input;
+            if (task.kind === "pi.tool" && input && typeof input === "object" && !Array.isArray(input)) {
+                const call = input;
+                if (typeof call.assistant === "number" && typeof call.callId === "string") {
+                    const id = call.assistant;
+                    if (!assistants.has(id))
+                        assistants.set(id, await tx.entry(id));
+                    for (const message of assistants.get(id)?.model ?? []) {
+                        if (message.role !== "assistant")
+                            continue;
+                        const block = message.content.find((item) => item.type === "toolCall" && item.id === call.callId);
+                        if (block?.type === "toolCall")
+                            name = block.name;
                     }
                 }
-                const state = task.state;
-                tasks.push({
-                    id: task.id,
-                    conversationId: task.conversationId,
-                    owner: task.owner,
-                    kind: task.kind,
-                    name,
-                    background: task.background,
-                    abortRequested: task.abortRequested,
-                    status: state.status,
-                    phase: state.checkpoint && typeof state.checkpoint === "object" && !Array.isArray(state.checkpoint)
-                        ? state.checkpoint.phase
-                        : undefined,
-                    on: state.status === "waiting" ? state.on : undefined,
-                    outcome: state.outcome?.status,
-                });
             }
-            cursor = page.next;
-        } while (cursor);
-        return { conversations, tasks };
+            const state = task.state;
+            tasks.push({
+                id: task.id,
+                conversationId: task.conversationId,
+                owner: task.owner,
+                kind: task.kind,
+                name,
+                background: task.background,
+                abortRequested: task.abortRequested,
+                status: state.status,
+                phase: state.checkpoint && typeof state.checkpoint === "object" && !Array.isArray(state.checkpoint)
+                    ? state.checkpoint.phase
+                    : undefined,
+                on: state.status === "waiting" ? state.on : undefined,
+                outcome: state.outcome?.status,
+            });
+        }
+        return { conversations, tasks, more };
     }, BACKGROUND_CONTEXT);
 }

package/docs/adr/0048-quiet-attachment-reads.md

@@ -0,0 +1,11 @@
+# 0048. Quiet attachment reads
+
+Status: proposed (owner-requested behavior in #38, 2026-10-07)
+
+**Problem.** Reading an archived attachment adds noisy tool notices containing long private archive paths.
+
+**Example.** A native `read` of `WORKING_DIR/attachments/<chat>/<file>` produces no request or completion notice. An ordinary file read still shows the existing progress pair.
+
+**Decision.** Add a narrow exception to ADR 0040's all-tool progress rule: suppress both admission and settlement notices for native `read` calls under the active workspace attachment root, including owned child calls and failed reads. Normalize relative, home, @ and file-URL paths and resolve filesystem aliases using metadata only. Match directory boundaries, not a generic attachment substring. Other reads, tools, task progress, manual compaction and final replies remain unchanged.
+
+The existing native observer filters before assigning notice routing or making direct-send receipts. Execution, result/error history, receipt/no-replay rules and the single pipeline are unchanged. No new poller, sender, permission boundary, data removal or credential policy is introduced.

package/docs/adr/0049-per-chat-progress-notices.md

@@ -0,0 +1,21 @@
+# 0049. Per-chat progress notices
+
+Status: proposed (owner-requested implementation, 2026-10-24)
+
+**Problem.** `progressMessages` in `settings.json` turns tool progress notices on or off for every chat at once. A busy group wants only the final messages while an admin chat wants to watch the tools.
+
+**Example.**
+
+```text
+/verbose            -> Verbose: on (default)
+/verbose off        -> Verbose: off (this chat only)
+/verbose default    -> Verbose: on (default)
+```
+
+**Decision.**
+
+- Each chat record in the native `imessage.chats` document gets an optional `progress` boolean. `/verbose on|off` sets it and `/verbose default` removes it; `/verbose` alone reports the effective state. The record version is unchanged; old records have no field.
+- The progress observer (ADR 0040) resolves the owning chat first and then gates both the admission and the settlement notice by `chat.progress ?? settings.progressMessages`. Reply-enabled allowlisting, formatting, screening, receipts and no-replay rules are unchanged.
+- `settings.json` stays the default and is never rewritten by a command; the per-chat choice lives only in Durable.
+
+**Consequences.** A `/verbose off` chat still runs tools and records their results; it only stops seeing the two notice lines. Child notices follow the owning chat's choice. Changing the global default does not touch chats with an explicit choice.

package/docs/adr/0052-host-owned-self-restart.md

@@ -0,0 +1,53 @@
+# 0052. The host owns its own restart
+
+Status: accepted (owner accepted on 2026-10-24)
+
+**Problem.** A chat assistant restarts the service by writing a controller
+script and running it from a `bash` tool call. The host cannot tell that this
+call is about to stop it. When the call is still running at the stop, ADR 0041
+reruns it on the next start, which launches another controller and stops the
+service again (#39: about 70 restarts in eleven minutes). A host-side stop
+heuristic that aborts a tool interrupted twice in a row was tried the same
+day; it limits the damage after the fact, does not remove the cause, and
+aborts any long tool that two deployments happen to interrupt in a row.
+
+**Example.**
+
+```text
+restart_service({ release: "d627232…" })
+-> Restart into /Users/clawbot/pi-imessage-releases/d627232… is scheduled;
+   the service stops after this call settles. Controller directory:
+   /tmp/pi-imessage-restart.Xy12ab. Verify in a later call.
+```
+
+The call settles, the host opens the controller in Terminal, the controller
+stops the old process and becomes the new one. The next turn verifies the
+listener, the log and the running release directory.
+
+**Decision.**
+
+- A built-in `restart_service` tool takes the full commit hash of a prepared
+  release directory, a sibling of the running one. It refuses a hash that is not
+  a directory with `src/cli.ts`, `node_modules` and `ops/restart.command`, and
+  a second request while one is scheduled.
+- The tool writes the private controller directory of ops/README.md step 3
+  itself: `environment.sh` from the process environment, `control.sh` from the
+  process's own PID, start time and command line, and a copy of
+  `ops/restart.command` from the target release. The controller deletes
+  `environment.sh` after sourcing it.
+- The tool returns at once. The host launches the controller only after the
+  tool task has settled, so the stop can never interrupt the call that asked
+  for it.
+- The tool is `replay: "unsafe"`. If it is interrupted anyway, the model gets
+  an interrupted result and checks what is running instead of a rerun
+  launching a second controller.
+- Ordinary tools keep the rerun default of ADR 0041. Operators keep the manual
+  procedure for a cold start when no service is running.
+
+**Consequences.** A self-restart costs one restart and no extra model turn.
+The stop still happens at a tool boundary of the requesting chat, so that chat's
+next model request is repeated after the restart, as ADR 0041 accepts. The
+restart loop of #39 cannot recur through this tool, so the stop heuristic is
+removed and ADR 0041 applies unchanged to every other tool. A chat that writes
+its own controller through `bash` is still subject to the ops rule of ending
+the call right after `open`.

package/docs/adr/README.md

@@ -23,7 +23,7 @@ Accepted ADR files are never edited; this index records which ones are current.
 | [0018](0018-tasks-without-prompt-api.md) | Ordinary `/stop`; no HTTP `/prompt` or `/send` | Active |
 | [0036](0036-workspace-policy-and-neutral-service-id.md) | Workspace policy and neutral service ID | Active |
 | [0040](0040-chat-progress-notices.md) | Chat progress notices | Active; consolidates 0020–0028, 0031 |
-| [0041](0041-restart-and-recovery.md) | Restart and recovery | Active; consolidates 0037–0039 |
+| [0041](0041-restart-and-recovery.md) | Restart and recovery | Active; consolidates 0037–0039; self-restart path added by 0052 |
 | [0042](0042-background-schedules-and-workspace-extensions.md) | Background schedules and workspace extensions | Active; operator-run clause replaced by 0047 |
 | [0043](0043-remove-legacy-migration.md) | Remove the legacy migration code | Active; archived at tag `archive/legacy-migration` |
 | [0044](0044-message-channels.md) | Organize message sources as channels | Proposed |
@@ -31,6 +31,9 @@ Accepted ADR files are never edited; this index records which ones are current.
 
 | [0046](0046-selective-command-redaction.md) | Selective command-preview redaction | Proposed; owner-requested implementation in #36 |
 | [0047](0047-one-scheduling-path.md) | One scheduling path for recurring and one-off work | Active |
+| [0048](0048-quiet-attachment-reads.md) | Quiet attachment reads | Proposed; owner-requested implementation in #38 |
+| [0049](0049-per-chat-progress-notices.md) | Per-chat progress notices via `/verbose` | Proposed; owner-requested implementation |
+| [0052](0052-host-owned-self-restart.md) | The host owns its own restart (`restart_service`) | Active; owner accepted on 2026-10-24 (#39) |
 
 ## Replaced or rejected
 
@@ -47,4 +50,5 @@ Accepted ADR files are never edited; this index records which ones are current.
 | [0032](0032-native-background-schedules.md)–[0035](0035-external-business-task-extensions.md) | Native schedules, operator run, local time, workspace extensions | 0042 |
 | [0037](0037-restart-during-in-flight-work.md)–[0039](0039-rerun-interrupted-tools.md) | Restart and tool rerun | 0041 |
 
-Number 0029 was never used.
+Numbers 0029, 0050 and 0051 are not used: 0050 and 0051 were interim stop
+heuristics for #39 that the owner did not accept; 0052 replaced them.

package/docs/api.md

@@ -5,17 +5,27 @@
 Default address: `http://localhost:7750` (configured by `WEB_HOST` and `WEB_PORT`).
 The server has no authentication; do not expose it to untrusted networks.
 
-The pages `/`, `/chat`, `/tasks`, `/scheduled`, `/settings`, `/memory` and `/logs` are read-only.
+The pages `/`, `/chat`, `/chats`, `/tasks`, `/scheduled`, `/settings`, `/memory` and `/logs` are read-only.
+The Chats tab (`/chats`, `/chats/data`) lists groups and direct chats, one row
+each: reply eligibility, the `/verbose` choice with its effective value, the
+conversation's model and thinking level, and last activity. Chats that do not
+reply are dimmed. It never shows message text. The message history page in the
+navigation is labelled Messages.
 The Tasks tab shows real chat and native schedule ownership trees, including
 subagent child conversations and terminal tasks. Internal-only conversations such as model-health
 are hidden, including when selected by URL; their stored data is not deleted.
 `/tasks/data` retains all conversation records for native diagnostics
-and lightweight task summaries, reading every native scan page. Input and payloads
+and lightweight task summaries, newest first. It lists every unfinished task,
+every task that owns a conversation, their parent chains and the 20 newest
+tasks per conversation, read with descending scans so the full task history is
+not scanned; a conversation with older tasks is flagged in `more` and shows one
+line. The Scheduled history and the Logs task list use the same descending
+order, so "Older tasks" pages go back in time. Input and payloads
 are fetched only when a task is expanded, through `/tasks/task/data?taskId=ID`.
 `/tasks?conversationId=ID` focuses one conversation and its descendants. The tree
 and expanded tasks update only on manual refresh. Conversation lists and sidebars
 use newest message activity first, with conversation ID as a descending tie-break;
-Tasks uses the same activity clock as Recent Chats, not conversation creation order.
+Tasks uses the same activity clock as Messages, not conversation creation order.
 Conversation windows have a maximum height of `min(560px, 70dvh)` and scroll inside. These are latest task states,
 not checkpoint history: terminal tasks retain input and outcome, but no checkpoint.
 Existing redaction and large-string truncation apply to task details too.
@@ -89,4 +99,6 @@ previews. Raw outputs, commands, prompts and document contents stay local.
 Known credential indicators are redacted; arbitrary user-authored secrets cannot
 be guaranteed detectable. Missing or false keeps final-only delivery. The setting
 is reread for each notice; old tasks and unknown sends are not replayed
-([ADR 0020](adr/0020-chat-task-progress.md)).
+([ADR 0040](adr/0040-chat-progress-notices.md)). `/verbose on|off` in a chat
+overrides this default for that chat only and `/verbose default` removes the
+override ([ADR 0049](adr/0049-per-chat-progress-notices.md)).