@leftoff/cli 0.9.18-beta.1 → 0.9.18-beta.11

package/ui/ask.js

@@ -19,7 +19,7 @@ import { glyphState, glyphHtml } from './sglyph.js' // 0.9.14: the status glyph,
 export const projectHref = (token) => '#/project/' + encodeURIComponent(String(token || ''))
 export const threadHref = (id, machine = null) => '#/ask/' + encodeURIComponent(String(id || '')) + (machine ? '?m=' + encodeURIComponent(machine) : '')
 
-const TAG = /\[((?:s|cp)\d{1,3}|c:[0-9a-f]{7}|d:\d{4}-\d{2}-\d{2})\]/g
+const TAG = /\[((?:s|cp)\d{1,3}|c:[0-9a-f]{7}|d:\d{4}-\d{2}-\d{2}|dec:D-[0-9a-f]{4,12})\]/g
 
 // Where a citation chip goes: a session, a checkpoint on its session page,
 // a digest day; a commit has no page here (its sha is copied).
@@ -28,15 +28,17 @@ export function chipHref(c) {
   if (c.kind === 'session' && c.sessionId) return '#/s/' + encodeURIComponent(c.sessionId)
   if (c.kind === 'checkpoint' && c.sessionId) return '#/s/' + encodeURIComponent(c.sessionId) + (c.cpId ? '?cp=' + encodeURIComponent(c.cpId) : '')
   if (c.kind === 'digest' && c.date) return '#/digest/' + encodeURIComponent(c.date)
+  if (c.kind === 'decision' && c.repo && c.id) return '#/decisions/' + String(c.repo).replace(/[^\w:./@-]/g, encodeURIComponent) + '?d=' + encodeURIComponent(c.id) // 2026-11-03
   return null
 }
 export function chipText(c) {
   if (!c) return ''
   if (c.kind === 'commit') return (c.short || String(c.sha || '').slice(0, 7)) + (c.label ? ' ' + c.label : '')
   if (c.kind === 'digest') return 'Digest ' + (c.date || '')
+  if (c.kind === 'decision') return (c.id || 'Decision') + (c.label ? ' ' + c.label : '')
   return c.label || (c.kind === 'checkpoint' ? 'Checkpoint' : 'Session')
 }
-const KIND_ICON = { session: 'history', checkpoint: 'check', commit: 'copy', digest: 'newspaper' }
+const KIND_ICON = { session: 'history', checkpoint: 'check', commit: 'copy', digest: 'newspaper', decision: 'route' }
 
 // One chip. Its words are filled in as text (data-qt).
 export function chipHtml(c, key, { esc, icon = () => '', n = null } = {}) {
@@ -236,7 +238,7 @@ export function projectHeadHtml(p, { esc, icon = () => '', switcher = false, edi
   const sc = (p && p.scope) || {}
   const repos = (sc.repoNames && sc.repoNames.length ? sc.repoNames : sc.repos) || []
   const keys = { 'p-title': (sc.emoji ? sc.emoji + ' ' : '') + scopeName(sc), 'p-sub': [sc.kind === 'project' ? (repos.length ? repos.join(', ') : null) : (sc.sub ? 'folder ' + sc.sub : null), (sc.machines || []).length ? 'on ' + sc.machines.join(', ') : null, p && p.sessionCount != null ? p.sessionCount + (p.sessionCount === 1 ? ' session' : ' sessions') : null].filter(Boolean).join(' · ') }
-  return { html: '<div class="pagehead proj-head"><div class="proj-head-main"><div class="proj-kicker">' + icon('folder') + '<span>Project</span></div>' + (switcher ? '<h1 class="proj-title"><button type="button" class="proj-switch" data-action="project-ask-menu" aria-haspopup="menu" aria-expanded="false" data-tip="Ask about another project or repo"><span data-qt="p-title"></span>' + icon('chevron-down') + '</button></h1>' : '<h1 data-qt="p-title"></h1>') + '<div class="sub" data-qt="p-sub"></div></div>' +
+  return { html: '<div class="pagehead proj-head"><div class="proj-head-main"><div class="proj-kicker">' + icon('folder') + '<span>Project</span></div>' + (switcher ? '<h1 class="proj-title"><button type="button" class="proj-switch" data-action="project-ask-menu" aria-haspopup="menu" aria-expanded="false" data-tip="Ask about another project or repo"><span data-qt="p-title"></span>' + icon('chevron-down') + '</button></h1>' : '<h1 data-qt="p-title"></h1>') + '<div class="sub" data-qt="p-sub"></div><div class="proj-review-slot" id="projDecReview"></div></div>' + // 1k: decisions to review, filled once the log loads
     // 0.9.12: Edit (the project's own menu: Rename…, Edit repos…, Delete project) where projects can change
     (edit && sc.kind === 'project' ? '<button type="button" class="btn proj-edit" data-action="project-manage" data-project="' + esc(edit) + '" aria-haspopup="menu" aria-expanded="false" data-tip="Rename, edit repos, delete">' + icon('pencil') + '<span>Edit</span></button>' : '') + '</div>', keys }
 }

package/ui/chip-fade.js

@@ -18,7 +18,7 @@ export function paintFade(track) {
   return s
 }
 
-const SEL = '.repos .track'
+const SEL = '.repos .track, #tabStrip .tab-scroll' // 0.9.18: the tab strip fades where tabs run off too
 // Keeps every chip row's fade right: on first paint (any re-render adds new
 // tracks), on its own scroll, and when its width or its chips' widths change.
 export function watchChipFades(doc = document) {

package/ui/cp-fold.js

@@ -0,0 +1,22 @@
+// A checkpoint's folded extras, named for what's inside (2026-11-05). The old fixed summary said
+// "Decisions, files, open questions" although that section has been Approach notes since
+// 2026-11-03 (real decisions live under Decided), which made decision memory look broken.
+// Unit-tested in test/unit/cp-fold-1105.test.mjs.
+
+// In the order the summary names them. 'decided' counts only where the Decided lines are shown.
+const FOLD_NAMES = [['decided', 'decisions'], ['recap', 'recap'], ['decisions', 'approach notes'], ['files', 'files'], ['questions', 'open questions'], ['didntWork', 'what didn’t work'], ['nextSteps', 'next steps']]
+
+const present = (cp, k, decided) => {
+  if (!cp) return false
+  if (k === 'decided') return !!decided && Array.isArray(cp.decided) && cp.decided.length > 0
+  const v = cp[k]
+  return Array.isArray(v) ? v.length > 0 : !!v
+}
+
+// "Approach notes, files, open questions": the first three sections present, sentence case. '' when none.
+export function cpFoldSummary(cp, { decided = false } = {}) {
+  const names = FOLD_NAMES.filter(([k]) => present(cp, k, decided)).map(([, n]) => n).slice(0, 3)
+  if (!names.length) return ''
+  const t = names.join(', ')
+  return t.charAt(0).toUpperCase() + t.slice(1)
+}

package/ui/decisions.js

@@ -0,0 +1,245 @@
+// Decision memory (2026-11-03): pure builders for the board. A checkpoint's
+// Decided list (the session panel), a repo's or a project's decision log (the
+// timeline), and the decision chips a walkthrough step cites. app.js wires
+// them; unit-tested in test/unit/decisions-ui-1103.test.mjs.
+
+const escD = (s) => String(s == null ? '' : s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;')
+const day = (iso) => String(iso || '').slice(0, 10)
+export const SOURCE_WORDS = { asked: 'You answered', plan: 'Plan approved', correction: 'Your correction', agent: 'Agent chose' }
+// Status as a shape and a word, never color alone.
+export const STATUS_SHAPE = { proposed: '◌', accepted: '●', rejected: '✕', superseded: '↻' }
+export const STATUS_WORD = { proposed: 'Proposed', accepted: 'Accepted', rejected: 'Rejected', superseded: 'Superseded' }
+
+// 2026-11-05: a status Leftoff set on its own (statusAuto), in words beside the source, and why in the tip.
+export const AUTO_WORDS = { asked: 'automatically', plan: 'automatically', reversed: 'you changed it later' }
+export const AUTO_TIPS = {
+  asked: 'Accepted on its own: you picked this answer in the session. Reject keeps it out of new sessions.',
+  plan: 'Accepted on its own: you approved this plan in the session. Reject keeps it out of new sessions.',
+  reversed: 'Rejected on its own: later in the session you answered the same question differently.',
+}
+const autoOf = (d) => (d && ((d.status === 'accepted' && (d.statusAuto === 'asked' || d.statusAuto === 'plan')) || (d.status === 'rejected' && d.statusAuto === 'reversed')) ? d.statusAuto : null)
+const autoBit = (d, esc) => { const a = autoOf(d); return a ? '<span class="dec-auto" data-tip="' + esc(AUTO_TIPS[a]) + '">' + esc(AUTO_WORDS[a]) + '</span>' : '' }
+const normD = (t) => String(t || '').toLowerCase().replace(/[^\p{L}\p{N}]+/gu, ' ').trim()
+const byNewest = (a, b) => String(b.createdAt || '').localeCompare(String(a.createdAt || ''))
+
+// Every decision a session made (2026-11-05), newest first. Each later checkpoint leaves out what an earlier one
+// recorded, so the newest checkpoint alone loses them. entries: the session's rows from its repo's log (GET
+// /v1/decisions, sessionId === this session), or null until the log loads / with no repo. A checkpoint's line the
+// log doesn't have yet (written on another Mac, not folded in) still shows, without a status.
+// -> [{ text, why, alternatives, source, entry }]
+export function sessionDecisions(checkpoints, entries = null) {
+  const out = [], seen = new Set()
+  const log = Array.isArray(entries) ? [...entries].sort(byNewest) : []
+  for (const d of log) {
+    out.push({ text: d.text, why: d.why || '', alternatives: d.alternatives || [], source: d.source, entry: d })
+    seen.add(normD(d.text)); if (d.original && d.original.text) seen.add(normD(d.original.text))
+  }
+  const cps = (Array.isArray(checkpoints) ? checkpoints : []).filter((c) => c && !c.doubt).sort(byNewest)
+  for (const cp of cps) for (const d of Array.isArray(cp.decided) ? cp.decided : []) {
+    const k = normD(d && d.text)
+    if (!k || seen.has(k)) continue
+    seen.add(k); out.push({ text: d.text, why: d.why || '', alternatives: d.alternatives || [], source: d.source, entry: null })
+  }
+  return out
+}
+// The fold's count: the total, and how many wait on you.
+export function sessionDecisionsCount(list) {
+  const n = (list || []).length, rev = (list || []).filter((d) => d.entry && d.entry.status === 'proposed').length
+  return n + (rev ? ' · ' + rev + ' to review' : '')
+}
+// The log's rows for one session, as the decided list reads them ({ <text norm>: row }, the original wording too).
+export function logBySession(decisions, sessionId) {
+  const by = {}
+  for (const d of decisions || []) if (d && d.sessionId === sessionId) { by[normD(d.text)] = d; if (d.original && d.original.text) by[normD(d.original.text)] = d }
+  return by
+}
+
+// A session's decisions, in the session panel's Decided fold.
+// decided: sessionDecisions() rows ({ entry }), or a checkpoint's plain decided list read against log
+// ({ <text norm>: { id, status } }, when loaded).
+// 1k: a proposed one is reviewed right here (Accept / Reject / Edit, the log page's API and gate). trusted: false on a
+// device that may look but not change the log (the buttons show disabled, with the reason). editing: the id being edited.
+// readOnly: an older checkpoint's lines in the Timeline (status only, no buttons, no link).
+export function decidedListHtml(decided, { esc = escD, log = null, repoId = null, trusted = true, editing = null, may = true, readOnly = false } = {}) {
+  const list = Array.isArray(decided) ? decided : []
+  if (!list.length) return ''
+  const rows = list.map((d) => {
+    const hit = d.entry || (log && log[normD(d.text)]) || null
+    const st = hit ? '<span class="dec-st dec-st-' + esc(hit.status) + '"><span aria-hidden="true">' + STATUS_SHAPE[hit.status] + '</span> ' + esc(STATUS_WORD[hit.status]) + '</span>' : ''
+    if (!readOnly && hit && editing === hit.id) return '<li class="dec-row" id="decp-' + esc(hit.id) + '"><span class="dec-id">' + esc(hit.id) + '</span>' + editForm({ ...hit, repo: hit.repo || repoId }, esc) + '</li>'
+    const rp = (hit && (hit.repo || repoId)) || ''
+    const btn = (act, label, cls) => '<button type="button" class="btn' + cls + '" data-action="dec-act" data-act="' + act + '" data-id="' + esc(hit.id) + '" data-repo="' + esc(rp) + '"' + offAttrs(trusted, esc) + '>' + label + '</button>'
+    const acts = !readOnly && hit && hit.status === 'proposed' && may ? '<div class="dec-acts dec-acts-panel">' + btn('accept', 'Accept', ' primary') + btn('reject', 'Reject', '') +
+      '<button type="button" class="btn" data-action="dec-edit" data-id="' + esc(hit.id) + '" data-repo="' + esc(rp) + '"' + offAttrs(trusted, esc) + '>Edit</button></div>'
+      : !readOnly && hit && may && autoOf(hit) && hit.status === 'accepted' ? '<div class="dec-acts dec-acts-panel dec-acts-quiet">' + btn('reject', 'Reject', '') + '</div>' : ''
+    const why = (hit && hit.why) || d.why, alts = (hit && hit.alternatives && hit.alternatives.length ? hit.alternatives : d.alternatives) || []
+    // a quiet line first (status · id · where it came from), then the decision in words, then why / over
+    const src = '<span class="dec-src">' + esc(SOURCE_WORDS[(hit && hit.source) || d.source] || SOURCE_WORDS.agent) + '</span>'
+    const head = [st, hit ? '<span class="dec-id">' + esc(hit.id) + '</span>' : '', src, autoBit(hit, esc)].filter(Boolean).join('<span class="dec-dot" aria-hidden="true"> · </span>')
+    return '<li class="dec-row' + (hit ? ' dec-row-' + esc(hit.status) : '') + '"' + (hit && !readOnly ? ' id="decp-' + esc(hit.id) + '"' : '') + '><div class="dec-row-h">' + head + '</div>' +
+      '<div class="dec-text">' + esc(hit && (hit.edited || d.entry) ? hit.text : d.text) + '</div>' +
+      (why ? '<div class="dec-why">' + esc(why) + '</div>' : '') +
+      (alts.length ? '<div class="dec-alt">Over: ' + alts.map(esc).join(' · ') + '</div>' : '') + acts + '</li>'
+  }).join('')
+  const link = repoId && !readOnly ? '<a class="linkish dec-open" href="' + esc(decisionsHref(repoId)) + '">Decision log →</a>' : ''
+  return '<ul class="dec-list' + (readOnly ? ' dec-list-ro' : '') + '">' + rows + '</ul>' + link
+}
+
+// 1b: one quiet line in the session panel: the session started with its repo's decisions (shape plus
+// words), or wasn't given them because Claude Code skipped Leftoff's SessionStart (the why in the tip).
+export function decisionsGivenHtml(s, { esc = escD, when = (iso) => String(iso || '').slice(0, 16).replace('T', ' ') } = {}) {
+  if (!s) return ''
+  const g = s.decisionsGiven
+  if (g && g.n > 0) {
+    const words = g.via === 'command' ? 'Given ' + g.n + ' decision' + (g.n === 1 ? '' : 's') + ' with /cp-decisions' : 'Started with ' + g.n + ' decision' + (g.n === 1 ? '' : 's')
+    const tip = (g.via === 'command' ? 'You ran /cp-decisions' : 'Leftoff added the repo’s accepted decisions when the session started') + (g.at ? ' · ' + when(g.at) : '') + '. Only accepted decisions are given.'
+    return '<p class="dec-given" data-tip="' + esc(tip) + '"><span class="dec-given-i" aria-hidden="true">●</span> ' + esc(words) + '</p>'
+  }
+  const m = s.decisionsMissed
+  if (m && m.n > 0) return '<p class="dec-given dec-missed" data-tip="' + esc(m.tip || '') + '"><span class="dec-given-i" aria-hidden="true">◌</span> ' + esc(m.label || ('Not given its repo’s ' + m.n + ' decisions')) + ' <span class="dec-given-how">· type <code>/cp-decisions</code></span></p>'
+  return ''
+}
+
+// ------------------------------------------------------------ the decision log (timeline)
+
+// A route's scope: "#/decisions/gh:acme/web" (a repo) or "#/decisions/project:acme" (a project's repos, merged).
+export function decisionScope(arg) {
+  const a = String(arg || '')
+  if (a.startsWith('project:')) return { project: a.slice(8), repo: null, api: 'project=' + encodeURIComponent(a.slice(8)) }
+  return { project: null, repo: a, api: 'repo=' + encodeURIComponent(a) }
+}
+export const decisionsHref = (scope) => '#/decisions/' + encodeURIComponent(scope).replace(/%3A/gi, ':').replace(/%2F/gi, '/')
+
+// What the timeline shows: current decisions (accepted), oldest first, unless you asked for all of them
+// (superseded and rejected too). Proposed ones are always above, to review.
+export function timelineRows(decisions, { all = false } = {}) {
+  const list = Array.isArray(decisions) ? decisions : []
+  return {
+    review: list.filter((d) => d.status === 'proposed'),
+    rows: list.filter((d) => d.status === 'accepted' || (all && (d.status === 'superseded' || d.status === 'rejected'))),
+    hidden: list.filter((d) => d.status === 'superseded' || d.status === 'rejected').length,
+  }
+}
+
+function sessionBit(d, esc) {
+  // testplan Part 3: proposed from a failed check of a test plan: the plan is where it came from
+  const tp = /^testplan:(tp_[0-9a-f]{16})#(c\d+)$/.exec(String(d.checkpointId || ''))
+  if (tp) return '<a class="linkish dec-sess" href="#/testplan/' + esc(tp[1]) + '">From a test plan (check ' + esc(tp[2].slice(1)) + ')</a>'
+  const s = d.session
+  if (!s || !s.id) return ''
+  const title = s.title || 'its session'
+  return '<a class="linkish dec-sess" href="#/s/' + esc(encodeURIComponent(s.id)) + '">From ' + esc(title) + '</a>' +
+    (s.pr && s.pr.url && /^https:\/\//.test(s.pr.url) ? ' · <a class="linkish dec-pr" href="' + esc(s.pr.url) + '" target="_blank" rel="noopener">PR' + (s.pr.number ? ' #' + esc(s.pr.number) : '') + '</a>' : '')
+}
+function chainBit(d, byId, esc) {
+  const out = []
+  for (const id of d.supersedes || []) { const o = byId.get(id); out.push('<span class="dec-chain">Replaces <button type="button" class="dec-chip" data-action="dec-show" data-id="' + esc(id) + '">' + esc(id) + '</button>' + (o ? ' (' + esc(day(o.createdAt)) + ')' : '') + '</span>') }
+  if (d.supersededBy) out.push('<span class="dec-chain">Superseded by <button type="button" class="dec-chip" data-action="dec-show" data-id="' + esc(d.supersededBy) + '">' + esc(d.supersededBy) + '</button> on ' + esc(day(d.supersededAt)) + '</span>')
+  return out.length ? '<div class="dec-chains">' + out.join('') + '</div>' : ''
+}
+function statusBit(d, esc) {
+  return '<span class="dec-st dec-st-' + esc(d.status) + '"><span aria-hidden="true">' + STATUS_SHAPE[d.status] + '</span> ' + esc(STATUS_WORD[d.status]) + '</span>'
+}
+function editForm(d, esc) {
+  return '<form class="dec-edit" data-action="dec-save" data-id="' + esc(d.id) + '" data-repo="' + esc(d.repo) + '">' +
+    '<label>Decision<input class="dec-in" name="text" maxlength="240" value="' + esc(d.text) + '" autocomplete="off"></label>' +
+    '<label>Why<input class="dec-in" name="why" maxlength="240" value="' + esc(d.why || '') + '" autocomplete="off"></label>' +
+    '<div class="dec-acts"><button type="submit" class="btn primary">Save</button><button type="button" class="btn" data-action="dec-cancel" data-id="' + esc(d.id) + '">Cancel</button></div></form>'
+}
+
+// 1h: POST /v1/decisions/action is trustedOnly: on a paired device without Trust my paired devices the
+// buttons show, disabled, with this tip, rather than failing on a click.
+export const DEC_TRUST_TIP = 'Changing the decision log from another device is off. On a Mac, turn on Settings → Privacy & security → Trust my paired devices.'
+const offAttrs = (trusted, esc) => (trusted === false ? ' disabled aria-disabled="true" data-tip="' + esc(DEC_TRUST_TIP) + '"' : '')
+
+// One decision. may: you can change it (the board's usual gate); editing: its id is being edited.
+// trusted (1h): false on a device that may look but not change the log. edit: false hides Edit (the viewer).
+// replaces (1g): an id this one may be confirmed to replace (a walkthrough step departs from it).
+export function decisionItemHtml(d, { esc = escD, byId = new Map(), may = true, editing = null, multi = false, review = false, trusted = true, edit = true, replaces = null } = {}) {
+  const repo = multi && d.repoLabel ? '<span class="dec-repo">' + esc(d.repoLabel) + '</span>' : ''
+  const head = '<div class="dec-h"><span class="dec-date">' + esc(day(d.createdAt)) + '</span><span class="dec-id">' + esc(d.id) + '</span>' + repo + statusBit(d, esc) + '</div>'
+  if (editing === d.id) return '<li class="dec-item" id="dec-' + esc(d.id) + '">' + head + editForm(d, esc) + '</li>'
+  const sug = (d.suggests || []).map((id) => { const o = byId.get(id); return o ? '<div class="dec-sug"><span>Changes <button type="button" class="dec-chip" data-action="dec-show" data-id="' + esc(id) + '">' + esc(id) + '</button>: ' + esc(o.text) + '</span>' +
+    (may ? '<span class="dec-acts"><button type="button" class="btn" data-action="dec-link" data-id="' + esc(d.id) + '" data-to="' + esc(id) + '" data-repo="' + esc(d.repo) + '"' + offAttrs(trusted, esc) + '>Confirm it replaces ' + esc(id) + '</button><button type="button" class="btn" data-action="dec-act" data-act="dismiss" data-id="' + esc(d.id) + '" data-repo="' + esc(d.repo) + '"' + offAttrs(trusted, esc) + '>Not related</button></span>' : '') + '</div>' : '' }).join('')
+  const btn = (act, label, cls = '') => '<button type="button" class="btn' + cls + '" data-action="dec-act" data-act="' + act + '" data-id="' + esc(d.id) + '" data-repo="' + esc(d.repo) + '"' + offAttrs(trusted, esc) + '>' + label + '</button>'
+  const editBtn = (cls) => edit ? '<button type="button" class="' + cls + '" data-action="dec-edit" data-id="' + esc(d.id) + '" data-repo="' + esc(d.repo) + '"' + offAttrs(trusted, esc) + '>Edit</button>' : ''
+  const link = replaces && !(d.supersedes || []).includes(replaces) ? '<button type="button" class="btn" data-action="dec-link" data-id="' + esc(d.id) + '" data-to="' + esc(replaces) + '" data-repo="' + esc(d.repo) + '"' + offAttrs(trusted, esc) + '>Confirm it replaces ' + esc(replaces) + '</button>' : ''
+  const acts = !may && !link ? '' : !may ? '<div class="dec-acts">' + link + '</div>' : review ? '<div class="dec-acts">' + btn('accept', 'Accept', ' primary') + btn('reject', 'Reject') + editBtn('btn') + link + '</div>'
+    : '<div class="dec-acts dec-acts-quiet">' + (d.status === 'rejected' ? btn('reopen', 'Review again') : (autoOf(d) && d.status === 'accepted' ? btn('reject', 'Reject') : '') + editBtn('linkish')) + link + '</div>'
+  return '<li class="dec-item dec-' + esc(d.status) + '" id="dec-' + esc(d.id) + '">' + head +
+    '<div class="dec-text">' + esc(d.text) + (d.edited ? ' <span class="faint" data-tip="' + esc('Edited · was: ' + ((d.original && d.original.text) || '')) + '">(edited)</span>' : '') + '</div>' +
+    (d.why ? '<div class="dec-why">' + esc(d.why) + '</div>' : '') +
+    (d.alternatives && d.alternatives.length ? '<div class="dec-alt">Over: ' + d.alternatives.map(esc).join(' · ') + '</div>' : '') +
+    chainBit(d, byId, esc) + sug +
+    '<div class="dec-meta"><span class="dec-src">' + esc(SOURCE_WORDS[d.source] || SOURCE_WORDS.agent) + '</span>' + (autoBit(d, esc) ? ' · ' + autoBit(d, esc) : '') + (sessionBit(d, esc) ? ' · ' + sessionBit(d, esc) : '') + '</div>' + acts + '</li>'
+}
+
+// The storage choice (one per project). Off by default: the log stays in Leftoff's folder.
+export function storageChoiceHtml(project, { esc = escD, may = true, trusted = true } = {}) {
+  if (!project) return '<p class="faint dec-local">This repo isn’t in a project, so its log stays in Leftoff only.</p>'
+  const on = !!project.inRepo
+  const opt = (v, label) => '<button type="button" class="sask-opt" data-action="dec-store" data-project="' + esc(project.id) + '" data-on="' + v + '" aria-pressed="' + (on === v) + '"' + (trusted === false ? offAttrs(false, esc) : may ? '' : ' disabled') + '>' + label + '</button>'
+  return '<div class="dec-store"><div class="dec-store-h">Keep decision log in this repo</div>' +
+    '<div class="sask-scope dec-store-opts" role="group" aria-label="Keep decision log in this repo">' + opt(false, 'Leftoff only') + opt(true, 'Also in each repo') + '</div>' +
+    '<p class="faint">' + (on ? 'Accepted decisions are written to ' + esc(project.file || 'docs/DECISIONS.md') + ' in each repo of ' + esc(project.name) + ', between Leftoff’s markers, on a Mac with a checkout. Never staged or committed: you commit it or not.'
+      : 'The log stays in Leftoff’s folder, shared by your Macs. Turn this on to also write accepted decisions into each repo’s ' + esc(project.file || 'docs/DECISIONS.md') + '.') + '</p></div>'
+}
+
+// 2026-11-05 an empty log says where decisions come from, so nobody has to guess whether it's working
+export const DECISIONS_EMPTY = ['Decisions come from checkpoints. A question Claude asked that you answered, a plan you approved, or a correction you gave becomes a proposed decision here at the next checkpoint.', 'Checkpoints written before decision memory aren’t read for it.']
+export function decisionsEmptyHtml({ esc = escD } = {}) {
+  return '<div class="dec-empty">' + DECISIONS_EMPTY.map((t) => '<p class="faint">' + esc(t) + '</p>').join('') + '</div>'
+}
+
+// The whole page. v: GET /v1/decisions. ui: { all, editing, may }
+export function decisionsPageHtml(v, ui = {}, { esc = escD } = {}) {
+  const list = (v && v.decisions) || []
+  const byId = new Map(list.map((d) => [d.id, d]))
+  const multi = ((v && v.repos) || []).length > 1
+  const { review, rows, hidden } = timelineRows(list, { all: !!ui.all })
+  const sc = (v && v.scope) || {}
+  const name = sc.kind === 'project' ? sc.name : sc.label
+  const opts = { esc, byId, may: ui.may !== false, editing: ui.editing || null, multi, trusted: ui.trusted !== false }
+  let h = '<a class="back" href="' + (sc.kind === 'project' ? '#/project/' + esc(encodeURIComponent(sc.id)) : '#/') + '">← ' + (sc.kind === 'project' ? esc(name) : 'All sessions') + '</a>'
+  h += '<header class="dec-head"><h1>Decisions <span class="faint">· ' + esc(name || '') + '</span></h1>' +
+    (multi ? '<p class="faint">' + v.repos.map((r) => esc(r.label)).join(' · ') + '</p>' : '') + '</header>'
+  if (ui.trusted === false) h += '<p class="faint dec-trust"><span aria-hidden="true">◌</span> View only on this device. ' + esc(DEC_TRUST_TIP) + '</p>' // 1h: the reason in words too (a phone shows no tips)
+  if (v && (v.project || sc.kind === 'repo')) h += '<section class="proj-sec">' + storageChoiceHtml(v.project, { esc, may: ui.may !== false, trusted: ui.trusted !== false }) + '</section>'
+  if (review.length) h += '<section class="proj-sec dec-review"><h2>To review <span class="count">' + review.length + '</span></h2><p class="faint">Proposed from checkpoints. Questions you answered and plans you approved are accepted on their own. Only accepted decisions reach new sessions, Ask and walkthroughs.</p><ul class="dec-tl">' + review.map((d) => decisionItemHtml(d, { ...opts, review: true })).join('') + '</ul></section>'
+  const ctl = '<div class="dec-ctl"><button type="button" class="sask-opt" data-action="dec-all" aria-pressed="' + !!ui.all + '">' + (ui.all ? 'Showing superseded and rejected' : 'Include superseded and rejected' + (hidden ? ' (' + hidden + ')' : '')) + '</button>' +
+    '<button type="button" class="btn" data-action="dec-copy">Copy as Markdown</button>' + testplanLinkHtml(sc, { esc, cls: 'btn' }) + '</div>'
+  h += '<section class="proj-sec dec-timeline"><h2>Timeline <span class="count">' + rows.length + '</span></h2>' + ctl +
+    (rows.length ? '<ol class="dec-tl">' + rows.map((d) => decisionItemHtml(d, opts)).join('') + '</ol>' : list.length ? '<p class="faint">Nothing accepted yet.</p>' : decisionsEmptyHtml({ esc })) + '</section>'
+  return '<div class="proj dec-page">' + h + '</div>'
+}
+
+// testplan Part 3: the way in to a test plan of the scope's merged PRs (a project, or a repo's log)
+export function testplanLinkHtml(sc, { esc = escD, cls = 'btn' } = {}) {
+  if (!sc) return ''
+  const token = sc.kind === 'project' ? sc.id : sc.label || sc.id
+  if (!token) return ''
+  return '<a class="' + cls + ' tp-open" href="#/testplan/new?scope=' + esc(encodeURIComponent(token)) + '" data-tip="A short manual test plan for the PRs merged lately">Test plan</a>'
+}
+
+// 1k: a quiet count of decisions waiting to be reviewed: a shape plus a number (and the words for a screen reader and the tip), never a colored badge alone.
+export function reviewCountHtml(n, { esc = escD, href = null, cls = '' } = {}) {
+  if (!(n > 0)) return ''
+  const words = n + ' decision' + (n === 1 ? '' : 's') + ' to review'
+  const inner = '<span aria-hidden="true">◌</span> ' + n
+  return href ? '<a class="dec-rc ' + cls + '" href="' + esc(href) + '" data-tip="' + esc(words) + '" aria-label="' + esc(words) + '">' + inner + '<span class="dec-rc-w"> to review</span></a>'
+    : '<span class="dec-rc ' + cls + '" role="img" data-tip="' + esc(words) + '" aria-label="' + esc(words) + '">' + inner + '</span>'
+}
+
+// The project page's short Decisions section: counts, the storage choice, the way in.
+// 2026-11-05 a single repo's page (v.scope.kind 'repo') gets it too, without the storage choice: that stays a project's.
+export function projectDecisionsHtml(v, { esc = escD, may = true, trusted = true, scopeArg = '' } = {}) {
+  if (!v) return ''
+  const isRepo = !!(v.scope && v.scope.kind === 'repo')
+  const list = v.decisions || []
+  const cur = list.filter((d) => d.status === 'accepted').length, rev = list.filter((d) => d.status === 'proposed').length
+  return '<section class="proj-sec dec-proj" id="projDecisions"><h2>Decisions <span class="count">' + cur + '</span></h2>' +
+    '<p>' + (!list.length ? 'None yet' : cur ? cur + ' current' : 'None accepted yet') + (rev ? ' · <strong>' + rev + ' to review</strong>' : '') + ' · <a class="linkish" href="' + esc(decisionsHref(scopeArg)) + '">Open the timeline →</a></p>' +
+    (list.length ? '' : decisionsEmptyHtml({ esc })) +
+    '<div class="dec-acts">' + testplanLinkHtml(v.scope, { esc }) + '</div>' +
+    (isRepo ? '<p class="faint dec-local">' + (v.project ? 'Where its log is kept is set on ' + esc(v.project.name) + '’s page.' : 'Keeping the log in the repo too is a project choice: available once this repo is in a project.') + '</p>' : storageChoiceHtml(v.project, { esc, may, trusted })) + (trusted === false ? '<p class="faint dec-trust"><span aria-hidden="true">◌</span> View only on this device. ' + esc(DEC_TRUST_TIP) + '</p>' : '') + '</section>'
+}

package/ui/fs-side.js

@@ -80,3 +80,32 @@ export function fsSideHtml({ id, side = '', foot = '', label = '', away = '', cp
   return '<aside class="fs-side' + (collapsed ? ' collapsed' : '') + (sheet ? ' sheet-up' : '') + (scrolled ? ' is-scrolled' : '') + '" id="fsSide" data-sid="' + esc(id) + '" aria-label="This session">' +
     resizeHandleHtml({ width, viewport }, { esc }) + peek + '<div class="fs-side-in">' + side + '</div>' + foot + railHtml({ cpCount, cu, away }, { esc, icon }) + '</aside>'
 }
+
+// 2026-11-06 The phone's sheet follows a finger: drag its peek up to raise it, and drag the raised
+// sheet down to lower it, from the peek or from its content when that's scrolled to the very top.
+// Everywhere else a finger scrolls the sheet's content natively, both ways (a drag never starts
+// once the content has room above it, nor when the finger first heads the way that scrolls it).
+export const SHEET_DRAG_SLOP = 8 // px a finger moves before it's a drag or a scroll
+export const SHEET_DRAG_FLIP = 64 // px of drag that raises or lowers the sheet on letting go
+// up: the sheet is raised; fromPeek: the finger started on the peek; scrollTop: the content's at the touch's start;
+// dy, dx: the finger's travel so far (down and right positive) -> 'drag' | 'scroll' | null (not decided yet)
+export function sheetDragStart({ up = false, fromPeek = false, scrollTop = 0, dy = 0, dx = 0 } = {}) {
+  const ay = Math.abs(dy), ax = Math.abs(dx)
+  if (ay < SHEET_DRAG_SLOP && ax < SHEET_DRAG_SLOP) return null
+  if (ax > ay) return 'scroll' // sideways: a table or code block, never the sheet
+  if (!up) return fromPeek && dy < 0 ? 'drag' : 'scroll' // lowered: only the peek, only upwards
+  if (dy <= 0) return 'scroll' // raised, finger heading up: the content scrolls down
+  return fromPeek || (Number(scrollTop) || 0) <= 0 ? 'drag' : 'scroll'
+}
+// How far the sheet sits from where it rests while dragged (px, down positive; never past either end).
+// travel: the px between raised and lowered.
+export function sheetDragOffset({ up = false, dy = 0, travel = 0 } = {}) {
+  const t = Math.max(0, Number(travel) || 0)
+  return up ? Math.round(Math.max(0, Math.min(t, dy))) : Math.round(Math.max(-t, Math.min(0, dy)))
+}
+// Letting go: true when the sheet should change (raise or lower), from the travel or a quick flick.
+export function sheetDragFlips({ up = false, dy = 0, ms = 1000 } = {}) {
+  const d = up ? dy : -dy
+  if (d >= SHEET_DRAG_FLIP) return true
+  return d >= 24 && ms > 0 && d / ms > 0.5 // a flick: 0.5 px/ms
+}

package/ui/hook-fix.js

@@ -0,0 +1,109 @@
+// 2026-11-03 "Let me answer prompts here": the hooks-skipped note's way out.
+// Claude Code's Security default runs ahead of the plugins you install (Team or
+// Enterprise, managed settings, a managed MCP file) and sends Stop and
+// permission prompts on past Leftoff. Claude Code ignores appendPlugins in
+// your own ~/.claude/settings.json while it's seated (2.1.317), so the sheet
+// shows the managed-settings lines and where they go, with Copy; Leftoff
+// writes none of it. The one change it can make: take Leftoff's own entry
+// back out of your settings when Claude Code ignores it there (an explicit
+// Remove, this Mac's own browser or a trusted paired device, never on a
+// managed Mac). Another Mac's session: run leftoff doctor --fix there.
+// Centered on a desktop, a bottom sheet on a phone.
+
+export function hooksFixButtonHtml(s, { esc }) {
+  const k = s && s.hooksSkipped
+  if (!k || !k.label || k.applied || s.endedAt) return ''
+  return '<button type="button" class="s-hooks-fix" data-hookfix="' + esc(s.id) + '" data-tip="Why Leftoff can’t answer this session’s prompts from the board, and the settings line that lets it">Let me answer prompts here</button>'
+}
+
+let open = null
+
+export function closeHookFix() {
+  if (!open) return
+  const { back, from, onKey, sid } = open
+  open = null
+  document.removeEventListener('keydown', onKey, true)
+  back.remove()
+  document.documentElement.classList.remove('hf-open')
+  // the header may have been redrawn while the sheet was up: its button for this session now
+  const to = from && from.isConnected ? from : sid ? document.querySelector('[data-hookfix="' + CSS.escape(sid) + '"]') : null
+  if (to) try { to.focus({ preventScroll: true }) } catch {}
+}
+
+const copyText = async (t) => { try { await navigator.clipboard.writeText(t); return true } catch { return false } }
+
+// st: GET /v1/hook-order. -> the sheet's body
+export function hookFixBodyHtml(st, { esc, session = null, thisMachine = null } = {}) {
+  if (session && session.isLocal === false) {
+    const mac = session.machine || 'that Mac'
+    return '<p class="hf-p">This session runs on <b>' + esc(mac) + '</b>, and the settings that decide the plugin order are that Mac’s. Run this there; it says what to add, and why:</p>' +
+      '<div class="hf-code-row"><pre class="hf-code hf-cmd">leftoff doctor --fix</pre></div>' +
+      '<div class="hf-acts"><button type="button" class="btn hf-copy" data-copy="leftoff doctor --fix">Copy</button><button type="button" class="btn primary hf-close">Close</button></div>'
+  }
+  if (!st || st.error) return '<p class="hf-p">Couldn’t read this Mac’s Claude Code settings' + (st && st.error ? ' (' + esc(st.error) + ')' : '') + '. <code>leftoff doctor --fix</code> in a terminal says the same.</p><div class="hf-acts"><button type="button" class="btn primary hf-close">Close</button></div>'
+  let h = ''
+  if (!st.seated) {
+    h += '<p class="hf-p"><span class="hf-mark hf-mark-ok" aria-hidden="true"></span>Nothing here puts a plugin ahead of Leftoff’s hooks' + (thisMachine ? ' on ' + esc(thisMachine) : '') + ' right now. A session that started before a change may still show the note; restart Claude Code there.</p>'
+  } else if (st.placed) {
+    h += '<p class="hf-p"><span class="hf-mark hf-mark-ok" aria-hidden="true"></span><b>Managed settings already seat Leftoff</b> right after Claude Code’s Security default. Restart Claude Code sessions that started before that, and their prompts come here.</p>'
+  } else {
+    h += '<p class="hf-p">' + esc(st.words) + '</p>'
+    h += '<p class="hf-p hf-who"><span class="hf-mark hf-mark-admin" aria-hidden="true"></span>' + (st.managed ? 'Ask whoever manages Claude Code here to ' : 'An admin (on your own Mac, that’s you, with sudo) can ') + (st.snippet.merge ? 'merge this into' : 'put this in') + ':</p>'
+    h += '<div class="hf-file"><code>' + esc(st.snippet.file) + '</code></div>'
+    h += '<pre class="hf-code">' + esc(st.snippet.json) + '</pre>'
+    h += '<p class="hf-p hf-quiet">' + esc(st.snippet.note) + '. Then restart Claude Code. Leftoff never writes managed settings.</p>'
+  }
+  if (st.ignoredEntry) {
+    h += '<div class="hf-ign"><p class="hf-p"><span class="hf-mark hf-mark-off" aria-hidden="true"></span>Your <code>' + esc(st.ignoredEntry.file) + '</code> lists Leftoff in ' + esc(st.ignoredEntry.keys.join(' and ')) + ', which Claude Code ignores here. Removing it changes nothing in Claude Code.</p>' +
+      (st.canUnfix ? '<p class="hf-p hf-quiet">Remove takes out only Leftoff’s entry and keeps a backup in ~/.config/checkpoints/backups.</p>' : '<p class="hf-p hf-quiet">This Mac has managed settings, so Leftoff changes nothing in ~/.claude; delete the entry by hand if you like.</p>') + '</div>'
+  }
+  h += '<div class="hf-acts">' +
+    (st.ignoredEntry && st.canUnfix ? '<button type="button" class="btn hf-unfix">Remove the ignored entry</button>' : '') +
+    (st.seated && !st.placed ? '<button type="button" class="btn hf-copy" data-copy="' + esc(st.snippet.json) + '">Copy</button>' : '') +
+    '<button type="button" class="btn primary hf-close">' + (st.seated && !st.placed ? 'Done' : 'Close') + '</button></div>'
+  return h
+}
+
+export async function openHookFix({ session, from = null, api, esc, toast = () => {}, thisMachine = null } = {}) {
+  closeHookFix()
+  const back = document.createElement('div')
+  back.className = 'hf-back'
+  back.innerHTML = '<div class="hf-modal" role="dialog" aria-modal="true" aria-labelledby="hfTitle"><div class="hf-grab" aria-hidden="true"></div>' +
+    '<div class="hf-head"><h2 id="hfTitle">Let Leftoff answer prompts here</h2><button type="button" class="btn x hf-x" aria-label="Close">✕</button></div>' +
+    '<div class="hf-body"><p class="hf-p hf-quiet">Reading this Mac’s Claude Code settings…</p></div></div>'
+  document.body.appendChild(back)
+  document.documentElement.classList.add('hf-open')
+  const onKey = (e) => {
+    if (e.key === 'Escape') { e.preventDefault(); e.stopPropagation(); closeHookFix(); return }
+    if (e.key === 'Tab') { // keep focus inside
+      const f = [...back.querySelectorAll('button:not([disabled])')]
+      if (!f.length) return
+      const i = f.indexOf(document.activeElement)
+      if (e.shiftKey && i <= 0) { e.preventDefault(); f[f.length - 1].focus() } else if (!e.shiftKey && i === f.length - 1) { e.preventDefault(); f[0].focus() }
+    }
+  }
+  open = { back, from, onKey, sid: session && session.id }
+  document.addEventListener('keydown', onKey, true)
+  const body = back.querySelector('.hf-body')
+  const paint = (st) => {
+    body.innerHTML = hookFixBodyHtml(st, { esc, session, thisMachine })
+    const first = back.querySelector('.hf-copy, .hf-close')
+    if (first) try { first.focus({ preventScroll: true }) } catch {}
+  }
+  back.addEventListener('click', async (e) => {
+    if (e.target === back || e.target.closest('.hf-x, .hf-close')) { closeHookFix(); return }
+    const c = e.target.closest('.hf-copy')
+    if (c) { const ok = await copyText(c.dataset.copy || ''); c.textContent = ok ? 'Copied' : 'Select and copy'; setTimeout(() => { if (c.isConnected) c.textContent = 'Copy' }, 1800); return }
+    const u = e.target.closest('.hf-unfix')
+    if (u) {
+      u.disabled = true; u.textContent = 'Removing…'
+      try {
+        const r = await api('POST', '/v1/hook-order/unfix', { yes: true })
+        paint(r.state)
+        toast(r.wrote ? 'Removed Leftoff’s entry from ' + r.file + (r.backup ? ' (backup kept)' : '') + '. Restart open Claude Code sessions.' : 'Nothing to remove.', 5000)
+      } catch (err) { u.disabled = false; u.textContent = 'Remove the ignored entry'; toast((err && err.message) || 'Couldn’t change it.', 5000) }
+    }
+  })
+  if (session && session.isLocal === false) { paint(null); return }
+  try { paint(await api('GET', '/v1/hook-order?fresh=1')) } catch (err) { paint({ error: (err && err.message) || 'no answer' }) }
+}

package/ui/live-status.js

@@ -44,17 +44,83 @@ function resetWords(raw) {
   const m = raw.match(/\bresets?\s+(?:at\s+)?([^·|\n.]{1,40})/i) // "You've hit your limit · resets 7am (America/Chicago)"
   return m ? 'resets ' + ago(m[1]).replace(/\s*\(.*$/, '') : ''
 }
+// Claude Code 2.1.318 prints one stderr line from 10 days before a stored
+// claude.ai sign-in ends (text output only; read from its own code). It is a
+// notice, not why anything failed, and its "claude auth login" would read as
+// "signed out": every classifier drops it first. Its three wordings, exactly:
+//   Warning: this sign-in ends between <d> and <d> (in N day(s) at the earliest). Renewing it does not move those dates. Run claude auth login before then, or use claude setup-token for unattended jobs.
+//   Warning: this sign-in can end at any time from now until <d>. Renewing it does not move that date. Run claude auth login now, or use claude setup-token for unattended jobs.
+//   Warning: this sign-in may have ended between <d> and <d>. If requests are refused, run claude auth login, or use claude setup-token for unattended jobs.
+const SIGNIN_WARNING_RE = /^[ \t]*Warning: this sign-in (?:ends between [^\n]*? at the earliest\)\. Renewing it does not move those dates\.|can end at any time from now until [^\n]*?\. Renewing it does not move that date\.|may have ended between [^\n]*?\. If requests are refused,) run claude auth login[^\n]*? or use claude setup-token for unattended jobs\.[ \t]*(?:\r?\n|$)/gim
+export function dropSignInWarning(text) { return String(text == null ? '' : text).replace(SIGNIN_WARNING_RE, '') }
+
+// Claude Code's own "signed out" lines, matched specifically, so an MCP server's
+// or another tool's "failed to authenticate", or a 10-day warning whose words
+// drifted from the three above, never reads as signed out. 2.1.318 (read from
+// its package; test/fixtures/cc-2.1.318/from-package.json signedOut):
+//   Failed to authenticate: this login reached its time limit … / OAuth session expired …
+//   Login reached its time limit · Please run /login
+// plus the API's own authentication_error. Each line is checked on its own, past
+// a "claude -p exited N:" / "claude -p:" prefix (how Ask and the summarizer
+// report it), and a line starting "Warning: this sign-in" is never one.
+export function signInLines(text) {
+  return String(text == null ? '' : text).split('\n').filter((l) => !/^\s*Warning: this sign-in\b/i.test(l)).map((l) => l.replace(/^\s*claude -p\b[^:\n]{0,40}:\s*/i, '')).join('\n')
+}
+// 2026-11-05: a line that names an MCP server or another tool is that tool's failure, never Claude signed
+// out, whatever its words ('MCP server "github": HTTP 401 Unauthorized', 'gh: HTTP 401: Requires authentication').
+export const OTHER_TOOL_RE = /\bMCP\b|\bmcp__|\bgh\b|\bgithub\b|\bgitlab\b|\bbitbucket\b|\bjira\b|\bslack\b|\bnpm\b|\bdocker\b|\bcurl\b|\bgit\b|\bplugin\b/i
+const claudeLines = (text) => signInLines(text).split('\n').filter((l) => l.trim() && !OTHER_TOOL_RE.test(l))
+export function claudeAuthFailed(text) {
+  return claudeLines(text).some((l) => /^[ \t]*Failed to authenticate:|login reached its time limit|\bauthentication_error\b/i.test(l))
+}
+// Claude's own API refusing the login: an "API Error: 401 …" / "API Error: 403 …" line, or the API's
+// authentication_error / permission_error JSON, on a line that names no other tool. -> 401 | 403 | null.
+// A bare 401, 403, "unauthorized", "forbidden" or "credentials" anywhere else is someone else's.
+export function claudeApiAuthStatus(text) {
+  for (const l of claudeLines(text)) {
+    if (/\bAPI Error:?\s*401\b|\bauthentication_error\b/i.test(l)) return 401
+    if (/\bAPI Error:?\s*403\b|\bpermission_error\b/i.test(l)) return 403
+  }
+  return null
+}
+// Claude Code's own signed-out words (not tied to a status), line by line, past other tools' lines.
+const CLAUDE_SIGNED_OUT_RE = /invalid api key|run \/login|please (?:log|sign) ?in|not (?:logged|signed) in|log ?in again|login required|oauth token|token (?:has )?expired/i
+export function claudeSignedOut(text) {
+  return claudeAuthFailed(text) || claudeApiAuthStatus(text) === 401 || claudeLines(text).some((l) => CLAUDE_SIGNED_OUT_RE.test(l))
+}
+
+// 2.1.318: claude -p refuses to start on an invalid config file (it no longer
+// resets it): "Configuration error in <file>: <why>" / "Claude configuration
+// file at <file> is corrupted" / "Fix the JSON in <file>, or move the file aside".
+// -> the file (home shown as ~ when given), or '' when named nowhere, or null.
+// The path runs to the ".json" that ends it (":", ",", ";", ")", " is corrupted", a
+// sentence's "." , " (" or the line's end), so a folder with a space ("/Users/a b/.claude.json")
+// is kept whole and drifted wording ("….json.", "….json (line 3)", "….json; fix it") still reads.
+const CONFIG_BAD_RE = /(?:Configuration error in|Claude configuration file at|Fix the JSON in) ([^\n]*?\.json)(?=[:,;)]| is corrupted|\.(?:[ \t]|$)|[ \t]+\(|[ \t]*$)/im
+export function claudeConfigError(text, home = '') {
+  const m = CONFIG_BAD_RE.exec(String(text == null ? '' : text))
+  if (!m) return null
+  const f = m[1]
+  return home && f.startsWith(home + '/') ? '~' + f.slice(home.length) : f
+}
+
 export function turnErrorWhy(raw0, { subtype = null, code = null, signal = null, endReason = null } = {}) {
-  const raw = ago(raw0).slice(0, WHY_RAW_MAX)
+  const raw = ago(dropSignInWarning(raw0)).slice(0, WHY_RAW_MAX)
   const w = (label) => ({ label, raw: raw || null })
   if (raw && /^\[?Request interrupted by user/i.test(raw)) return null
   if (!raw && endReason === 'aborted') return null
+  const cfg = claudeConfigError(raw)
+  if (cfg != null) return w('Claude Code’s config file is invalid · fix the JSON in ' + (cfg || '~/.claude.json') + ', or move it aside')
   if (/usage limit|hit your (usage )?limit|limit reached|out of (extra )?usage|weekly limit|session limit/i.test(raw)) { const r = resetWords(raw); return w('Claude’s usage limit is reached' + (r ? ' · ' + r : '')) }
   if (/rate[ _-]?limit|\b429\b|too many requests/i.test(raw)) return w('Claude is rate limited right now · try again in a minute')
   if (/prompt is too long|context (length|window)|too many tokens|maximum context|input is too long/i.test(raw)) return w('The conversation is too long for Claude · run /compact in its terminal, then retry')
   if (/overloaded|\b529\b/i.test(raw)) return w('Claude’s servers are overloaded · try again in a minute')
   if (/credit balance|billing|payment required|\b402\b/i.test(raw)) return w('Claude’s account is out of credit')
-  if (/invalid api key|run \/login|please (log|sign) ?in|not logged in|oauth token|token (has )?expired|authentication|\b401\b|\b403\b|unauthori[sz]ed|forbidden/i.test(raw)) return w(SIGNED_OUT_LABEL)
+  // 2.1.318's own signed-out lines (claudeAuthFailed), never a bare "authenticat" or
+  // "claude auth login": an MCP server's auth failure or the 10-day warning isn't a sign-out
+  const auth = signInLines(dropSignInWarning(raw0)) // by line, before raw's newlines are folded
+  // 2026-11-05: a 401 / 403 counts only from Claude's own API error, never another tool's line (claudeApiAuthStatus)
+  if (claudeSignedOut(auth) || claudeApiAuthStatus(auth) === 403) return w(SIGNED_OUT_LABEL)
   if (/timed? ?out|ECONNRESET|ECONNREFUSED|ENOTFOUND|EAI_AGAIN|fetch failed|network|socket hang up|connection (error|refused|reset)/i.test(raw)) return w('Claude couldn’t reach its servers · check this Mac’s connection')
   if (/no conversation found|session .*not found/i.test(raw)) return w('Claude Code couldn’t reopen this conversation')
   const api = raw.match(/API Error:?\s*(\d{3})?/i)