@manny-est/node-red-flowpilot 0.5.1 → 0.5.2

package/lib/core/apply-review.js

@@ -28,7 +28,21 @@
         // throwing) AND on disk (each string serializes with id
         // undefined -> null, confirmed via a live flows.json). Group
         // membership must only ever change through applyGroupChanges().
-        nodes: 1
+        nodes: 1,
+        // Node appearance/documentation fields and node-type-specific
+        // internal defaults that models hallucinate sentinel placeholders
+        // for during build-loop reviews. None of these are meaningfully
+        // settable via a Modify patch — they're either Appearance-tab
+        // metadata or type-internal runtime flags. Adding them here
+        // prevents false "redaction" blocks with no actionable remediation.
+        // Appearance/docs (all node types):
+        info: 1, inputLabels: 1, outputLabels: 1, icon: 1,
+        // debug node internal display flags:
+        console: 1, tostatus: 1, targetType: 1, statusVal: 1, statusType: 1,
+        // function node internal flags:
+        noerr: 1, initialize: 1, finalize: 1,
+        // mqtt in/out retain handling:
+        rh: 1
     };
 
     // Sentinel strings written by sanitizeNode (and redactDebugValue) for
@@ -113,7 +127,7 @@
     // internally for t:"add" events) and pushes one compound history entry so
     // a single Ctrl+Z removes both the new nodes and their wires together.
     function applyInsertions(newNodes, newWires, contextNodeIds) {
-        if (!newNodes || !newNodes.length) { return; }
+        if ((!newNodes || !newNodes.length) && (!newWires || !newWires.length)) { return; }
 
         // Determine z (flow-tab id) from the active workspace.
         var z = "";
@@ -246,6 +260,57 @@
             });
         });
 
+        // Collision-avoidance stagger: independent components that happen to
+        // share the same anchor (e.g. several standalone new nodes each
+        // wired from/to the SAME existing node — "add 5 debug taps after
+        // this http request node") compute identical target coordinates
+        // above and land exactly on top of each other. Detect a component
+        // whose origin collides with an earlier one and nudge the WHOLE
+        // component (preserving its own internal layout) into a small grid
+        // offset from the first occupant, so multi-node insertions never
+        // pile invisibly at one point.
+        var occupiedOrigins = [];
+        function collidesWithOccupied(x, y) {
+            return occupiedOrigins.some(function (p) {
+                return Math.abs(p.x - x) < 20 && Math.abs(p.y - y) < 20;
+            });
+        }
+        Object.keys(componentAnchors).forEach(function (c) {
+            var members = laid.filter(function (n) { return componentOf[n.id] === c; });
+            if (!members.length) { return; }
+            var baseX = members.reduce(function (m, n) { return Math.min(m, n.x); }, members[0].x);
+            var baseY = members.reduce(function (m, n) { return Math.min(m, n.y); }, members[0].y);
+            // Walk a single-column grid outward from the natural origin
+            // until we find a slot nothing else already occupies — one
+            // node per row, never two at the same y (CLAUDE-012: Manny's
+            // original spec, which the earlier 2-wide grid still violated
+            // by putting a pair at the same vertical level). After 5 nodes
+            // in a column, wrap to a new column further right than the
+            // first node in the previous one, so wires stay visually
+            // distinguishable instead of stacking on top of each other.
+            var slot = 0;
+            var x = baseX, y = baseY;
+            while (collidesWithOccupied(x, y) && slot < 200) {
+                slot++;
+                x = baseX + Math.floor(slot / 5) * 250;
+                y = baseY + (slot % 5) * 90;
+            }
+            if (slot > 0) {
+                var dx = x - baseX, dy = y - baseY;
+                members.forEach(function (n) { n.x += dx; n.y += dy; });
+            }
+            occupiedOrigins.push({ x: x, y: y });
+        });
+
+        // B3: snapshot placeholder→type before ids are overwritten, so wire
+        // failure messages can name the placeholder id and type rather than the
+        // opaque real hex id the node was never given (node not inserted = id
+        // exists in idMap but never landed in the live graph).
+        var placeholderToType = {};
+        laid.forEach(function (n) {
+            if (placeholderIds[n.id]) { placeholderToType[n.id] = n.type || "?"; }
+        });
+
         // Build placeholder-id → real-id map and assign real ids + z.
         var idMap = {};
         laid.forEach(function (n) {
@@ -338,6 +403,15 @@
                     ? typeDef.outputs
                     : (Array.isArray(n.wires) ? n.wires.length : 0);
             }
+            // The model's "wires" array can disagree with the node type's
+            // real port count (e.g. a hallucinated single empty port on a
+            // 0-output type like http response) — the editor draws one
+            // anchor per n.wires entry regardless of n.outputs, so a
+            // mismatch renders a phantom port. Reconcile the array length
+            // to the authoritative n.outputs count now that it's resolved.
+            if (!Array.isArray(n.wires)) { n.wires = []; }
+            while (n.wires.length < n.outputs) { n.wires.push([]); }
+            if (n.wires.length > n.outputs) { n.wires.length = n.outputs; }
             // Apply type-definition defaults for any property the model omitted.
             // This covers required fields (e.g. statusVal/statusType on debug)
             // that oneditsave would normally set, preventing a spurious triangle.
@@ -396,7 +470,16 @@
             var fromNode = findLiveNode(fromId);
             var toNode = findLiveNode(toId);
             if (!fromNode || !toNode) {
-                addMessage("error", "Cannot wire — node not found: " + (!fromNode ? fromId : toId));
+                var _failRef = !fromNode ? wire.from : wire.to;
+                var _failMsg;
+                if (placeholderIds[_failRef]) {
+                    _failMsg = "Cannot wire — referenced node was not inserted (" +
+                        _failRef + " / type: " + (placeholderToType[_failRef] || "?") + ")";
+                } else {
+                    _failMsg = "Cannot wire — node not found in editor: " +
+                        (!fromNode ? fromId : toId);
+                }
+                addMessage("error", _failMsg);
                 return;
             }
             var fromPort = wire.fromPort || 0;
@@ -524,12 +607,13 @@
         var propertyChanges = [];
         var wiresChanged = false;
         var redactionSkips = 0;
+        var redactedKeys = [];
         Object.keys(modNode).forEach(function (k) {
             if (DIFF_SKIP[k]) { return; }
             var newRaw = modNode[k];
             // If the model echoed a sanitizer sentinel, the field is opaque —
             // we can't meaningfully compare or apply it, so skip entirely.
-            if (isSanitizeSentinel(newRaw)) { redactionSkips++; return; }
+            if (isSanitizeSentinel(newRaw)) { redactionSkips++; redactedKeys.push(k); return; }
             var oldRaw = liveNode ? liveNode[k] : undefined;
             var oldStr, newStr;
             try { oldStr = JSON.stringify(oldRaw); } catch (e) { oldStr = String(oldRaw); }
@@ -538,7 +622,7 @@
             if (k === "wires") { wiresChanged = true; return; }
             propertyChanges.push({ key: k, oldVal: oldRaw, newVal: newRaw });
         });
-        return { propertyChanges: propertyChanges, wiresChanged: wiresChanged, redactionSkips: redactionSkips };
+        return { propertyChanges: propertyChanges, wiresChanged: wiresChanged, redactionSkips: redactionSkips, redactedKeys: redactedKeys };
     }
 
     // Diff outgoing wires for an existing node: compare what's live in the graph
@@ -642,6 +726,7 @@
                 propertyChanges: diff.propertyChanges,
                 wiresChanged: diff.wiresChanged,
                 redactionSkips: diff.redactionSkips,
+                redactedKeys: diff.redactedKeys,
                 wiresDiff: wiresDiff,
                 name: modNode.name || (liveNode && liveNode.name) || "",
                 type: modNode.type || (liveNode && liveNode.type) || ""
@@ -662,7 +747,7 @@
         var hasNewNodes = newNodes.length > 0;
         var hasRemoveNodes = removeNodes.length > 0;
         var hasNewGroups = newGroups.length > 0;
-        var hasAnyChanges = hasPropChanges || hasWireChanges || hasNewNodes || hasRemoveNodes || hasNewGroups;
+        var hasAnyChanges = hasPropChanges || hasWireChanges || hasNewNodes || hasRemoveNodes || hasNewGroups || (newWires && newWires.length > 0);
         var totalRedactionSkips = nodeDiffs.reduce(function (s, d) { return s + (d.redactionSkips || 0); }, 0);
 
         var $msg = $("<div>").addClass("fp-message fp-review");
@@ -715,15 +800,27 @@
         });
         if (redactionOnlyDiffs.length > 0) {
             var redSectionTop = hasPropChanges ? "12px" : "0";
-            $("<div>").addClass("fp-review-count").css("margin-top", redSectionTop)
-                .text("Not applied — targets redacted value(s):")
+            var totalRedFields = redactionOnlyDiffs.reduce(function (s, d) {
+                return s + (Array.isArray(d.redactedKeys) && d.redactedKeys.length ? d.redactedKeys.length : 1);
+            }, 0);
+            var $redToggle = $("<div>").addClass("fp-review-count")
+                .css({ "margin-top": redSectionTop, "cursor": "pointer" })
+                .text("▶ Not applied — FlowPilot can’t change these directly (" + totalRedFields + " field(s))")
                 .appendTo($summaryPanel);
+            var $redContent = $("<div>").addClass("fp-hidden").appendTo($summaryPanel);
+            $redToggle.on("click", function () {
+                var collapsed = $redContent.hasClass("fp-hidden");
+                $redContent.toggleClass("fp-hidden", !collapsed);
+                $redToggle.text((collapsed ? "▼" : "▶") + " Not applied — FlowPilot can’t change these directly (" + totalRedFields + " field(s))");
+            });
             redactionOnlyDiffs.forEach(function (d) {
-                var $section = $("<div>").addClass("fp-diff-node").appendTo($summaryPanel);
+                var $section = $("<div>").addClass("fp-diff-node").appendTo($redContent);
                 var title = d.type + (d.name ? " — \"" + d.name + "\"" : "");
                 $("<div>").addClass("fp-diff-node-title").text(title).appendTo($section);
+                var keys = Array.isArray(d.redactedKeys) && d.redactedKeys.length ? d.redactedKeys : [];
+                var fieldList = keys.length ? keys.join(", ") : "one or more fields";
                 $("<div>").addClass("fp-diff-warn")
-                    .text("Proposed change targets a redacted field — edit the value directly in the node editor.")
+                    .text("Cannot change “" + fieldList + "” — FlowPilot cannot read the live value for this field (internal node config). Edit it directly in the node editor if needed.")
                     .appendTo($section);
             });
         }
@@ -845,7 +942,7 @@
         if (!hasAnyChanges) {
             if (totalRedactionSkips > 0) {
                 $("<div>").addClass("fp-warning")
-                    .text("All proposed changes target redacted fields — FlowPilot can only see those values as placeholders. Edit the field(s) directly in the node editor, then retry for any remaining changes.")
+                    .text("None of the proposed changes could be applied — all targeted fields are internal node config that FlowPilot cannot read or modify directly. See the field names above and edit them in the node editor if needed.")
                     .appendTo($actions);
             } else {
                 $("<div>").addClass("fp-review-hint")
@@ -894,34 +991,49 @@
             });
             $msg.attr("data-fp-record-id", _modRecord.id);
 
+            var hintParts = [];
+            if (hasPropChanges || hasWireChanges) { hintParts.push("changes mutate live nodes"); }
+            if (hasRemoveNodes) { hintParts.push("removals delete nodes"); }
+            if (hasNewGroups) { hintParts.push("groups are created/updated"); }
+            if (hasNewNodes) { hintParts.push("insertions add new nodes"); }
+            if (!hasNewNodes && newWires && newWires.length > 0) { hintParts.push("connections added"); }
+            var applySub = hintParts.length ? "Review above — " + hintParts.join(", ") + ". Ctrl+Z to undo." : "";
             var $applyBtn = $("<button>")
-                .addClass("red-ui-button red-ui-button-primary")
+                .addClass("fp-chip fp-chip-card")
                 .attr("type", "button")
-                .text(btnLabel)
                 .on("click", function () {
-                    $applyBtn.prop("disabled", true).text("Applying…");
+                    $applyBtn.prop("disabled", true);
+                    $applyTitle.text("Applying…");
                     // Insertions run FIRST so their placeholder→real-id map is
                     // available to applyModifications/applyGroupChanges — an
                     // existing node's rewired "wires" (Tier 3) or a new
                     // group's membership may point at a node being inserted
                     // in this same response.
                     var idMap = {};
-                    if (hasNewNodes) {
+                    var hasNewWires = newWires && newWires.length > 0;
+                    if (hasNewNodes || hasNewWires) {
                         idMap = applyInsertions(newNodes, newWires, nodes.map(function (n) { return n.id; })) || {};
                     }
-                    if (hasMutations && applyCallback) { applyCallback(nodeDiffs, removeNodes, null, idMap); }
+                    // W4 Phase 2: applyCallback also runs the verify read-back,
+                    // so it must fire for insertion-only Modifies too (no
+                    // property/wire change on an EXISTING node), not just when
+                    // hasMutations is true — otherwise "exists"/"wire" checks on
+                    // newly inserted nodes would never run.
+                    if ((hasMutations || hasNewNodes || hasNewWires) && applyCallback) {
+                        applyCallback(nodeDiffs, removeNodes, null, idMap);
+                    }
                     if (hasNewGroups) { applyGroupChanges(newGroups, idMap); }
                     if (_modRecord) { _modRecord.state = "applied"; }
-                    $applyBtn.text("Done ✓");
+                    $applyTitle.text("Done ✓");
                 });
+            $("<span>").addClass("fp-chip-icon")
+                .append($("<i>").addClass(buildFixInfo ? "fa fa-wrench" : "fa fa-check-circle"))
+                .appendTo($applyBtn);
+            var $applyBody = $("<span>").addClass("fp-chip-body").appendTo($applyBtn);
+            var $applyTitle = $("<span>").addClass("fp-chip-title").text(buildFixInfo ? "Apply Fix" : btnLabel).appendTo($applyBody);
+            $("<span>").addClass("fp-chip-sub").text(buildFixInfo && buildFixInfo.capReached ? "Apply final fix and stop the loop" : applySub).appendTo($applyBody);
+            $("<span>").addClass("fp-chip-go").html("&rsaquo;").appendTo($applyBtn);
             $actions.append($applyBtn);
-            var hintParts = [];
-            if (hasPropChanges || hasWireChanges) { hintParts.push("changes mutate live nodes"); }
-            if (hasRemoveNodes) { hintParts.push("removals delete nodes"); }
-            if (hasNewGroups) { hintParts.push("groups are created/updated"); }
-            if (hasNewNodes) { hintParts.push("insertions add new nodes"); }
-            var hintText = "Review above — " + hintParts.join(", ") + ". Ctrl+Z to undo.";
-            $("<span>").addClass("fp-review-hint").text(hintText).appendTo($actions);
         }
 
         $box.append($msg);
@@ -949,7 +1061,17 @@
 
             var oldValues = {};
             d.propertyChanges.forEach(function (c) { oldValues[c.key] = liveNode[c.key]; });
-            d.propertyChanges.forEach(function (c) { liveNode[c.key] = c.newVal; });
+            d.propertyChanges.forEach(function (c) {
+                // Rewrite placeholder ids that point at newly-inserted config
+                // nodes (e.g. an MQTT out node's broker: "fp-new-0" referring
+                // to a new mqtt-broker in the same response's newNodes).
+                // applyInsertions returns idMap and it flows to us via the
+                // applyCallback chain — idMap[placeholder] is the real id.
+                var val = (idMap && typeof c.newVal === "string" && idMap[c.newVal])
+                    ? idMap[c.newVal]
+                    : c.newVal;
+                liveNode[c.key] = val;
+            });
 
             // Switch nodes derive their port count from rules.length (the edit
             // dialog's "outputCount" map assigns each rule its own output and
@@ -1652,19 +1774,72 @@
                 state: "pending"
             });
             $msg.attr("data-fp-record-id", _genRecord.id);
-            var $addBtn = $("<button>")
-                .addClass("red-ui-button red-ui-button-primary")
-                .attr("type", "button")
-                .text("Add to workspace")
-                .on("click", function () {
-                    $addBtn.prop("disabled", true).text("Click the canvas to place…");
-                    if (_genRecord) { _genRecord.state = "applied"; }
-                    importGeneratedFlow(nodes, onImported);
-                });
-            $actions.append($addBtn);
-            $("<span>").addClass("fp-review-hint")
-                .text("Opens Node-RED's normal place-at-cursor import — click the canvas to drop the nodes.")
-                .appendTo($actions);
+            if (onImported && buildGoal) {
+                // B1: primary deploy-and-verify chip (accent, full-width) + secondary
+                // plain escape hatch. Only when buildGoal is set — that signals this
+                // is a build-loop context, not just a plain post-import callback.
+                var $primaryChip = $("<button>")
+                    .addClass("fp-chip fp-chip-card")
+                    .attr("type", "button")
+                    .on("click", function () {
+                        $primaryChip.prop("disabled", true);
+                        $secondaryAddBtn.prop("disabled", true);
+                        if (_genRecord) { _genRecord.state = "applied"; }
+                        importGeneratedFlow(nodes, onImported);
+                    });
+                $("<span>").addClass("fp-chip-icon")
+                    .append($("<i>").addClass("fa fa-check-circle"))
+                    .appendTo($primaryChip);
+                var $chipBody = $("<span>").addClass("fp-chip-body").appendTo($primaryChip);
+                $("<span>").addClass("fp-chip-title").text("Deploy & verify this works →").appendTo($chipBody);
+                $("<span>").addClass("fp-chip-sub").text("Add to canvas, deploy, then run the verification loop").appendTo($chipBody);
+                $("<span>").addClass("fp-chip-go").html("&rsaquo;").appendTo($primaryChip);
+                $actions.append($primaryChip);
+                var $secondaryAddBtn = $("<button>")
+                    .addClass("fp-chip fp-chip-card fp-chip-card-alt")
+                    .attr("type", "button")
+                    .on("click", function () {
+                        $secondaryAddBtn.prop("disabled", true);
+                        $primaryChip.prop("disabled", true);
+                        if (_genRecord) { _genRecord.state = "applied"; }
+                        importGeneratedFlow(nodes, null);
+                    });
+                var $altBody = $("<span>").addClass("fp-chip-body").appendTo($secondaryAddBtn);
+                $("<span>").addClass("fp-chip-title").text("Just add to canvas").appendTo($altBody);
+                $("<span>").addClass("fp-chip-sub").text("Skips deploy & verification").appendTo($altBody);
+                $("<span>").addClass("fp-chip-go").html("&rsaquo;").appendTo($secondaryAddBtn);
+                $actions.append($secondaryAddBtn);
+            } else if (onImported) {
+                // Has a post-import callback (e.g. verifyImportedNodes) but no build
+                // loop — chip button that still fires the callback on import.
+                var $addBtn = $("<button>")
+                    .addClass("fp-chip fp-chip-card")
+                    .attr("type", "button")
+                    .on("click", function () {
+                        $addBtn.prop("disabled", true);
+                        if (_genRecord) { _genRecord.state = "applied"; }
+                        importGeneratedFlow(nodes, onImported);
+                    });
+                var $addBody = $("<span>").addClass("fp-chip-body").appendTo($addBtn);
+                $("<span>").addClass("fp-chip-title").text("Add to canvas").appendTo($addBody);
+                $("<span>").addClass("fp-chip-sub").text("Click the canvas to place the nodes").appendTo($addBody);
+                $("<span>").addClass("fp-chip-go").html("&rsaquo;").appendTo($addBtn);
+                $actions.append($addBtn);
+            } else {
+                var $addBtn = $("<button>")
+                    .addClass("fp-chip fp-chip-card")
+                    .attr("type", "button")
+                    .on("click", function () {
+                        $addBtn.prop("disabled", true);
+                        if (_genRecord) { _genRecord.state = "applied"; }
+                        importGeneratedFlow(nodes, null);
+                    });
+                var $addBody = $("<span>").addClass("fp-chip-body").appendTo($addBtn);
+                $("<span>").addClass("fp-chip-title").text("Add to canvas").appendTo($addBody);
+                $("<span>").addClass("fp-chip-sub").text("Click the canvas to place the nodes").appendTo($addBody);
+                $("<span>").addClass("fp-chip-go").html("&rsaquo;").appendTo($addBtn);
+                $actions.append($addBtn);
+            }
         }
 
         $box.append($msg);
@@ -1867,12 +2042,21 @@
                 : hasMutations ? "Apply Changes"
                 : hasNewNodes ? "Insert Nodes"
                 : "Apply Changes";
-            var $applyBtn = $("<button>").addClass("red-ui-button red-ui-button-primary")
-                .attr("type", "button").text(btnLabel)
+            var hintParts = [];
+            if (hasPropChanges || hasWireChanges) { hintParts.push("changes mutate live nodes"); }
+            if (hasRemoveNodes) { hintParts.push("removals delete nodes"); }
+            if (hasNewGroups) { hintParts.push("groups are created/updated"); }
+            if (hasNewNodes) { hintParts.push("insertions add new nodes"); }
+            if (!hasNewNodes && newWires && newWires.length > 0) { hintParts.push("connections added"); }
+            var applySub = hintParts.length ? "Review above — " + hintParts.join(", ") + ". Ctrl+Z to undo." : "";
+            var $applyBtn = $("<button>")
+                .addClass("fp-chip fp-chip-card")
+                .attr("type", "button")
                 .on("click", function () {
-                    $applyBtn.prop("disabled", true).text("Applying…");
+                    $applyBtn.prop("disabled", true);
+                    $applyTitle.text("Applying…");
                     var idMap = {};
-                    if (hasNewNodes) { idMap = applyInsertions(newNodes, newWires, existingIds) || {}; }
+                    if (hasNewNodes || (newWires && newWires.length > 0)) { idMap = applyInsertions(newNodes, newWires, existingIds) || {}; }
                     if (isBuildFix) {
                         applyBuildLoopFix(nodeDiffs, removeNodes, idMap, capReached);
                     } else {
@@ -1880,19 +2064,16 @@
                         if (hasNewGroups) { applyGroupChanges(newGroups, idMap); }
                     }
                     if (_newRec) { _newRec.state = "applied"; }
-                    $applyBtn.text("Done ✓");
+                    $applyTitle.text("Done ✓");
                 });
+            $("<span>").addClass("fp-chip-icon")
+                .append($("<i>").addClass(isBuildFix ? "fa fa-wrench" : "fa fa-check-circle"))
+                .appendTo($applyBtn);
+            var $applyBody = $("<span>").addClass("fp-chip-body").appendTo($applyBtn);
+            var $applyTitle = $("<span>").addClass("fp-chip-title").text(isBuildFix ? "Apply Fix" : btnLabel).appendTo($applyBody);
+            $("<span>").addClass("fp-chip-sub").text(isBuildFix && capReached ? "Apply final fix and stop the loop" : applySub).appendTo($applyBody);
+            $("<span>").addClass("fp-chip-go").html("&rsaquo;").appendTo($applyBtn);
             $actions.append($applyBtn);
-            var hintParts = [];
-            if (hasPropChanges || hasWireChanges) { hintParts.push("changes mutate live nodes"); }
-            if (hasRemoveNodes) { hintParts.push("removals delete nodes"); }
-            if (hasNewGroups) { hintParts.push("groups are created/updated"); }
-            if (hasNewNodes) { hintParts.push("insertions add new nodes"); }
-            if (hintParts.length) {
-                $("<span>").addClass("fp-review-hint")
-                    .text("Review above — " + hintParts.join(", ") + ". Ctrl+Z to undo.")
-                    .appendTo($actions);
-            }
         }
 
         $box.append($msg);

package/lib/core/init.js

@@ -1000,8 +1000,14 @@
                 '      </div>' +
                 '      <label>Provider Name</label>' +
                 '      <input id="fp-provider-name" type="text" placeholder="LocalAI">' +
+                '      <label>Provider type</label>' +
+                '      <select id="fp-provider-type">' +
+                '        <option value="openai-compatible">OpenAI-compatible (LocalAI, Ollama, SGLang, OpenAI, etc.)</option>' +
+                '        <option value="anthropic">Anthropic</option>' +
+                '      </select>' +
                 '      <label>Base URL</label>' +
                 '      <input id="fp-base-url" type="text" placeholder="http://localhost:8080">' +
+                '      <div id="fp-base-url-hint" class="fp-consent-hint fp-hidden">Leave blank to use api.anthropic.com.</div>' +
                 '      <label>API Key</label>' +
                 '      <input id="fp-api-key" type="password" placeholder="Optional">' +
                 '      <label>Model</label>' +
@@ -1173,6 +1179,7 @@
             // Nothing is sent to the backend until the user explicitly
             // attaches a message and sends a request.
             try { RED.comms.subscribe("debug", onDebugMessage); } catch (e) { /* comms unavailable */ }
+            try { RED.comms.subscribe("status/#", onNodeStatus); } catch (e) { /* comms unavailable */ }
 
             // Track whether the user is scrolled to the bottom of the chat,
             // so "Cruising…"/streaming updates only auto-follow when they
@@ -1216,6 +1223,9 @@
             content.find("#fp-provider-select").on("change", function () {
                 switchProvider($(this).val());
             });
+            content.find("#fp-provider-type").on("change", function () {
+                toggleAnthropicHint($(this).val());
+            });
             content.find("#fp-add-provider").on("click", function () { addProvider(); });
             content.find("#fp-remove-provider").on("click", function () { removeProvider(); });
             content.find("#fp-test-provider").on("click", function () { testProvider(); });

package/lib/core/main.js

@@ -81,6 +81,8 @@
             case "question":
                 if (rec.loopCheckpoint) {
                     renderLoopCheckpoint(activeBuildLoop);
+                } else if (rec.buildConsentGate) {
+                    renderBuildConsentGate(rec);
                 } else {
                     renderClarifyingQuestion(rec.options || []);
                 }
@@ -91,6 +93,9 @@
             case "buildStep":
                 rerenderBuildStepRecord(rec);
                 break;
+            case "todo":
+                rerenderTodoRecord(rec);
+                break;
         }
     }
 
@@ -141,6 +146,7 @@
         var entry = {
             id: nextDebugMessageId++,
             timestamp: Date.now(),
+            sourceKind: "debug",
             name: msg.name || msg.id || "(unnamed node)",
             topic: redactedTopic,
             // previewValue: short, for the scannable debug-log list only.
@@ -173,8 +179,14 @@
         // message from one trigger accumulate into attachedDebugMessages
         // before review actually runs, so the model sees the full picture
         // instead of whichever message happened to arrive first.
+        // WS4: a Skip decision at the build consent gate excludes this tap's
+        // real id from skipCheckpointTapIds — its messages still arrive here
+        // (still shown in the debug-log list/updateDebugStatus above) but
+        // don't drive the auto-attach/auto-review transition, so the loop
+        // falls back to manual confirmation or the honest-timeout instead.
         if (activeBuildLoop && activeBuildLoop.waypoint === "attach" &&
-            activeBuildLoop.nodeIds.indexOf(msg.id) !== -1) {
+            activeBuildLoop.nodeIds.indexOf(msg.id) !== -1 &&
+            (activeBuildLoop.skipCheckpointTapIds || []).indexOf(msg.id) === -1) {
             attachedDebugMessages.push(entry);
             updateDebugStatus();
             if (buildLoopNoDebugTimer) { clearTimeout(buildLoopNoDebugTimer); buildLoopNoDebugTimer = null; }
@@ -193,11 +205,76 @@
         }
     }
 
+    // W3: node-status stream evidence path.
+    // Fires for every deployed node that sets a status (fill/text via
+    // node.status() in user function code, or core nodes like http-request
+    // reporting "200 OK" / error text). Topic is "status/<nodeId>".
+    // Used as fallback evidence when the loop is waiting at "attach" but no
+    // debug node exists (HTTP endpoints, background workers, etc.) — gives
+    // the model something real to review instead of the loop hanging until
+    // the 20-second honest-timeout fires.
+    // Only used when no debug payload has arrived yet; if debug output is
+    // coming the richer payload data wins — let that path take over.
+    function onNodeStatus(topic, msg) {
+        if (!activeBuildLoop || activeBuildLoop.waypoint !== "attach") { return; }
+        var nodeId = topic.split("/")[1];
+        if (!nodeId || activeBuildLoop.nodeIds.indexOf(nodeId) === -1) { return; }
+        // WS4: same Skip-decision gate as onDebugMessage, keyed on the
+        // side-effecting node's own real id here (status events report the
+        // node itself, not a debug tap wired to it).
+        if ((activeBuildLoop.skipCheckpointNodeIds || []).indexOf(nodeId) !== -1) { return; }
+        if (attachedDebugMessages.length > 0) { return; }
+
+        // Skip in-progress ("blue") statuses — e.g. http-request emits
+        // fill:"blue" text:"requesting" before any response arrives. Locking
+        // in this early status starts the debounce before the actual error or
+        // response has a chance to land, so the model reviews a placeholder
+        // rather than the real result. Only terminal states (red=error,
+        // green=success, or no fill) are useful evidence.
+        if (msg && msg.fill === "blue") { return; }
+
+        var statusText = [msg && msg.fill, msg && msg.text].filter(Boolean).join(" — ");
+        if (!statusText) { return; }
+
+        var entry = {
+            id: nextDebugMessageId++,
+            timestamp: Date.now(),
+            sourceKind: "status",
+            name: nodeId + " (node status)",
+            topic: "node-status",
+            previewValue: statusText,
+            value: "Node " + nodeId + " reported status: " + statusText
+        };
+        attachedDebugMessages.push(entry);
+        updateDebugStatus();
+
+        if (buildLoopNoDebugTimer) { clearTimeout(buildLoopNoDebugTimer); buildLoopNoDebugTimer = null; }
+        if (buildLoopAttachTimer) { clearTimeout(buildLoopAttachTimer); }
+        buildLoopAttachTimer = setTimeout(function () {
+            buildLoopAttachTimer = null;
+            if (!activeBuildLoop || activeBuildLoop.waypoint !== "attach") { return; }
+            activeBuildLoop.waypoint = "review";
+            renderLoopStepper(activeBuildLoop);
+            if (currentSettings.loopHoldStep) {
+                renderLoopCheckpoint(activeBuildLoop);
+            } else {
+                runBuildReview(activeBuildLoop);
+            }
+        }, BUILD_LOOP_ATTACH_DEBOUNCE_MS);
+    }
+
     // The exact shape sent to the backend (and shown by "Preview debug") —
     // excludes previewValue, which exists only for the debug-log list.
     function buildDebugMessagesForSend() {
         return attachedDebugMessages.map(function (m) {
-            return { id: m.id, timestamp: m.timestamp, name: m.name, topic: m.topic, value: m.value };
+            return {
+                id: m.id,
+                timestamp: m.timestamp,
+                sourceKind: m.sourceKind,
+                name: m.name,
+                topic: m.topic,
+                value: m.value
+            };
         });
     }
 
@@ -1042,10 +1119,19 @@
         if (active) { $sel.val(active.id); }
     }
 
+    function toggleAnthropicHint(type) {
+        var isAnthropic = type === "anthropic";
+        el("#fp-base-url-hint").toggleClass("fp-hidden", !isAnthropic);
+        el("#fp-base-url").attr("placeholder", isAnthropic ? "Leave blank for api.anthropic.com" : "http://localhost:8080");
+    }
+
     // Write the form fields from a given provider profile.
     function fillProviderFields(p) {
         p = p || {};
         el("#fp-provider-name").val(p.providerName || "");
+        var type = p.type || "openai-compatible";
+        el("#fp-provider-type").val(type);
+        toggleAnthropicHint(type);
         el("#fp-base-url").val(p.baseUrl || "");
         el("#fp-api-key").val(p.apiKey || "");
         el("#fp-model").val(p.model || "");
@@ -1134,6 +1220,7 @@
         var ap = activeProvider();
         if (!ap) { return; }
         ap.providerName = el("#fp-provider-name").val() || "Provider";
+        ap.type = el("#fp-provider-type").val() || "openai-compatible";
         ap.baseUrl = el("#fp-base-url").val() || "";
         ap.apiKey = el("#fp-api-key").val() || "";
         ap.model = el("#fp-model").val() || "";
@@ -1330,10 +1417,10 @@
         var payload = collectSettings();
         var list = payload.providers || [];
 
-        // Validation 1: every provider needs a base URL (the one field a
-        // provider cannot function without).
+        // Validation 1: every non-Anthropic provider needs a base URL.
+        // Anthropic providers default to api.anthropic.com when baseUrl is blank.
         var noUrl = list.filter(function (p) {
-            return !p.baseUrl || !String(p.baseUrl).trim();
+            return p.type !== "anthropic" && (!p.baseUrl || !String(p.baseUrl).trim());
         });
         if (noUrl.length) {
             var urlNames = noUrl.map(function (p) { return p.providerName || "(unnamed)"; }).join(", ");
@@ -1774,4 +1861,3 @@
 
         renderChip("Open Settings", "fa fa-cog", showSettings);
     }
-