@monoes/monomindcli 2.12.0 → 2.14.0

package/dist/src/ui/dashboard.html

@@ -1646,7 +1646,7 @@ select.pb-cfg-inp { padding: 4px 7px; cursor: pointer; }
         <div class="nav-item" data-view="global-tokens" title="Token usage across all projects">
           <span class="ico">$</span><span class="lbl">Global Tokens</span>
         </div>
-        <div class="nav-item" data-view="humaninput" title="Pending questions from agents across all orgs">
+        <div class="nav-item" data-view="humaninput" title="Questions, approvals and decision gates waiting on you, across all orgs">
           <span class="ico">❓</span><span class="lbl">Human Input</span>
           <span class="bdg" id="bdg-humaninput">—</span>
         </div>
@@ -2094,6 +2094,7 @@ select.pb-cfg-inp { padding: 4px 7px; cursor: pointer; }
           <div id="org-detail-tabs">
             <button class="odt-btn active" data-tab="chart" onclick="v2SwitchOrgTab('chart')">Chart</button>
             <button class="odt-btn" data-tab="chat"         onclick="v2SwitchOrgTab('chat')">Chat</button>
+            <button class="odt-btn" data-tab="runtime"      onclick="v2SwitchOrgTab('runtime')">Runtime</button>
             <div class="odt-tab-sep" title="Secondary tabs"></div>
             <button class="odt-btn secondary" data-tab="config"        onclick="v2SwitchOrgTab('config')">Config</button>
             <button class="odt-btn secondary" data-tab="files"        onclick="v2SwitchOrgTab('files')">Files</button>
@@ -2103,6 +2104,7 @@ select.pb-cfg-inp { padding: 4px 7px; cursor: pointer; }
           <div id="org-detail-body">
             <div class="odt-pane active" id="odt-chart"></div>
             <div class="odt-pane" id="odt-chat" style="flex-direction:column;height:100%;overflow:hidden;"></div>
+            <div class="odt-pane" id="odt-runtime" style="overflow-y:auto"></div>
             <div class="odt-pane" id="odt-config" style="overflow-y:auto"></div>
             <div class="odt-pane" id="odt-files" style="overflow-y:auto"></div>
             <div class="odt-pane" id="odt-approvals"></div>
@@ -2303,11 +2305,11 @@ select.pb-cfg-inp { padding: 4px 7px; cursor: pointer; }
       <div class="vscroll">
         <div style="display:flex;align-items:baseline;gap:10px;margin-bottom:4px">
           <div class="pg-title" style="margin-bottom:0">Human Input</div>
-          <span class="pg-sub" id="hi-sub" style="margin-bottom:0">Pending questions across all projects</span>
+          <span class="pg-sub" id="hi-sub" style="margin-bottom:0">Questions, approvals and decision gates waiting on you</span>
         </div>
         <div class="hi-tab-bar" style="display:flex;gap:4px;margin-top:12px;border-bottom:1px solid var(--border);padding-bottom:6px">
           <button class="odt-btn active" data-hitab="pending" onclick="hiSwitchTab('pending')">Pending <span style="font-size:10px;background:var(--surface-hi);color:var(--text-lo);border-radius:8px;padding:1px 6px;min-width:18px;display:inline-block;text-align:center" id="hi-tab-count-pending">—</span></button>
-          <button class="odt-btn" data-hitab="answered" onclick="hiSwitchTab('answered')">Answered <span style="font-size:10px;background:var(--surface-hi);color:var(--text-lo);border-radius:8px;padding:1px 6px;min-width:18px;display:inline-block;text-align:center" id="hi-tab-count-answered">—</span></button>
+          <button class="odt-btn" data-hitab="answered" onclick="hiSwitchTab('answered')">Resolved <span style="font-size:10px;background:var(--surface-hi);color:var(--text-lo);border-radius:8px;padding:1px 6px;min-width:18px;display:inline-block;text-align:center" id="hi-tab-count-answered">—</span></button>
         </div>
         <div id="hi-content" style="margin-top:16px"><div class="loading-txt">Loading…</div></div>
       </div>
@@ -2446,6 +2448,13 @@ select.pb-cfg-inp { padding: 4px 7px; cursor: pointer; }
 // automatically. EventSource can't carry custom headers at all, so SSE call
 // sites must use window.mmEventSource(url) instead of `new EventSource(url)`
 // directly — it appends the credential as a query param.
+//
+// i-073: the query param is accepted for GET/HEAD ONLY — a POST/PUT/DELETE
+// with only ?token= is a CORS-simple request (no preflight, reachable from a
+// plain <form>), so mutations MUST send the header. Any new call that
+// mutates has to go through fetch() (the wrapper above), never a hand-built
+// URL with the token appended — that would silently reopen the CSRF hole
+// this item closed.
 (() => {
   const AUTH_HEADER_NAME = 'x-monomind-' + 'token';
   const AUTH_QUERY_PARAM = 'to' + 'ken';
@@ -2620,6 +2629,8 @@ async function init() {
     sbProjEl.title = DIR;
     _showNavProjectCtx(DIR);
   } catch (_) {}
+  // Count what is waiting on a human now, not only once the view is opened.
+  _hiScheduleReload();
   // deep-link: ?sess=<id>&proj=<path>
   const params = new URLSearchParams(window.location.search);
   let projParam = params.get('proj');
@@ -4439,38 +4450,57 @@ async function _gdCopyPath(p) {
 // renderDocMarkdown() and gdCopyCode() moved to markdown.js (#124) — loaded via
 // <script src="markdown.js"> above; both remain plain globals.
 
+// Human Input: everything an org is waiting on a human for — ask_human
+// questions, tool/action approvals and decision gates — across projects.
+// Each entry: { kind: 'question'|'approval'|'gate', project, item }.
 let _hiEntries = [];
 let _hiTab = 'pending';
 
+function _hiIsPending(e) {
+  if (e.kind === 'question') return e.item.answer === null || e.item.answer === undefined;
+  return (e.item.status || 'pending') === 'pending';
+}
+function _hiWhen(e) {
+  const i = e.item;
+  return i.answeredAt || i.resolvedAt || i.ts || i.createdAt || 0;
+}
+
 async function renderHumanInputView() {
   const el = document.getElementById('hi-content');
-  el.innerHTML = '<div class="loading-txt">Loading all projects…</div>';
+  if (!_hiEntries.length) el.innerHTML = '<div class="loading-txt">Loading all projects…</div>';
   try {
     const data = await apiFetch('/api/projects');
     const projects = (data?.projects || []).slice(0, 8);
-    if (!projects.length) {
-      el.innerHTML = '<div class="empty"><div class="empty-ico">❓</div><div>No projects found</div></div>';
-      _hiEntries = [];
-      updateHumanInputBadge(0);
-      renderHiCurrentTab(projects.length);
-      return;
-    }
+    // The project this dashboard serves always counts, even when it is not
+    // among the most recently active Claude projects.
+    if (DIR && !projects.some(p => p.path === DIR)) projects.unshift({ path: DIR, name: baseName(DIR) });
     const results = await Promise.allSettled(
-      projects.map(p => apiFetch(`/api/questions?dir=${enc(p.path)}`).then(d => ({ project: p, questions: d.questions || [] })))
+      projects.map(p => apiFetch(`/api/hil?dir=${enc(p.path)}`).then(d => ({ project: p, d: d || {} })))
     );
     const entries = [];
+    const errors = [];
     for (const r of results) {
       if (r.status !== 'fulfilled') continue;
-      const { project, questions } = r.value;
-      for (const q of questions) entries.push({ project, q });
+      const { project, d } = r.value;
+      for (const item of d.questions || []) entries.push({ kind: 'question', project, item });
+      for (const item of d.approvals || []) if (item.id) entries.push({ kind: 'approval', project, item });
+      for (const item of d.gates || []) entries.push({ kind: 'gate', project, item });
+      for (const e of d.errors || []) errors.push(`${project.name || project.path}/${e.org}: ${e.error}`);
     }
-    entries.sort((a, b) => (b.q.answeredAt || b.q.ts || 0) - (a.q.answeredAt || a.q.ts || 0));
+    entries.sort((a, b) => _hiWhen(b) - _hiWhen(a));
     _hiEntries = entries;
-    updateHumanInputBadge(entries.filter(({ q }) => q.answer === null || q.answer === undefined).length);
-    renderHiCurrentTab(projects.length);
+    updateHumanInputBadge(entries.filter(_hiIsPending).length);
+    renderHiCurrentTab(projects.length, errors);
   } catch (e) { el.innerHTML = `<div class="empty">Failed: ${esc(e.message)}</div>`; }
 }
 
+// Coalesce bursts of org:question / org:gate / resolution events into one reload.
+let _hiReloadTimer = null;
+function _hiScheduleReload() {
+  clearTimeout(_hiReloadTimer);
+  _hiReloadTimer = setTimeout(renderHumanInputView, 400);
+}
+
 function _hiSwitchTab(tab) {
   _hiTab = tab;
   document.querySelectorAll('.hi-tab-bar .odt-btn').forEach(b =>
@@ -4478,39 +4508,80 @@ function _hiSwitchTab(tab) {
   renderHiCurrentTab();
 }
 
-function renderHiCurrentTab(projectCount) {
+const _HI_KIND_LABEL = { question: 'Question', approval: 'Approval', gate: 'Decision gate' };
+
+function _hiPill(text, color) {
+  return `<span class="ss-pill" style="color:${color};border-color:${color}">${esc(text)}</span>`;
+}
+
+function _hiEntryHtml(e) {
+  const i = e.item;
+  const pending = _hiIsPending(e);
+  const data = `data-kind="${e.kind}" data-dir="${esc(e.project.path)}" data-org="${esc(i.org)}" data-id="${esc(e.kind === 'question' ? i.questionId : i.id)}"`;
+  let badge = '';
+  let body = '';
+  let resolved = '';
+  let actions = '';
+  if (e.kind === 'question') {
+    // Only a pending question can hold a run; once answered the flag is history.
+    if (pending) badge = i.blocking === false
+      ? _hiPill('non-blocking', 'var(--text-lo)')
+      : _hiPill('blocking — run waits', 'var(--amber, #d29922)');
+    body = `<div style="color:var(--text-hi);white-space:pre-wrap;max-height:240px;overflow:auto">${esc(i.question)}</div>`;
+    resolved = `<span style="color:var(--text-xs)">Answer:</span> ${esc(i.answer ?? '')}`;
+    actions = `<input type="text" class="hi-answer-input" placeholder="Your answer…" aria-label="Answer" style="flex:1;padding:4px 8px;font-size:12px" />
+      <button class="btn" style="font-size:11px" ${data} onclick="hiAct(this,'answer')">Answer</button>`;
+  } else if (e.kind === 'approval') {
+    badge = _hiPill(i.action || 'tool', 'var(--accent, #58a6ff)');
+    body = `<div style="color:var(--text-hi)">Wants to run <b>${esc(i.action)}</b></div>` +
+      (i.input ? `<pre style="font-size:11px;white-space:pre-wrap;max-height:160px;overflow:auto;margin:0;color:var(--text-lo)">${esc(JSON.stringify(i.input, null, 2))}</pre>` : '');
+    resolved = `${_hiPill(i.status, i.status === 'approved' ? 'var(--green)' : 'var(--red)')}`;
+    actions = `<button class="btn" style="font-size:11px;color:var(--green);border-color:var(--green)" ${data} onclick="hiAct(this,'approve')">Approve</button>
+      <button class="btn" style="font-size:11px;color:var(--red);border-color:var(--red)" ${data} onclick="hiAct(this,'reject')">Deny</button>`;
+  } else {
+    body = `<div style="color:var(--text-hi);font-weight:600">${esc(i.name || '')}</div>
+      <div style="color:var(--text-lo);white-space:pre-wrap;max-height:240px;overflow:auto">${esc(i.description || '')}</div>`;
+    resolved = `${_hiPill(i.status, i.status === 'approved' ? 'var(--green)' : 'var(--red)')}${i.resolution ? ` ${esc(i.resolution)}` : ''}`;
+    actions = `<input type="text" class="hi-answer-input" placeholder="Resolution note (optional)…" aria-label="Resolution note" style="flex:1;padding:4px 8px;font-size:12px" />
+      <button class="btn" style="font-size:11px;color:var(--green);border-color:var(--green)" ${data} onclick="hiAct(this,'approve')">Approve</button>
+      <button class="btn" style="font-size:11px;color:var(--red);border-color:var(--red)" ${data} onclick="hiAct(this,'reject')">Reject</button>`;
+  }
+  const who = i.resolvedBy ? ` · by ${esc(i.resolvedBy)}` : '';
+  return `<div class="sess-row" style="flex-direction:column;align-items:stretch;gap:6px">
+    <div style="display:flex;justify-content:space-between;gap:8px;align-items:center">
+      <div><span style="color:var(--text-xs)">${_HI_KIND_LABEL[e.kind]}</span> · <b>${esc(i.org)}</b> · ${esc(i.role || i.roleId || '')} ${badge}
+        <span style="color:var(--text-xs)">(${esc(e.project.name || e.project.path)})</span></div>
+      <div style="color:var(--text-xs);font-size:11px;font-family:var(--mono)">${relTime(i.ts || i.createdAt)}</div>
+    </div>
+    ${body}
+    ${pending
+      ? `<div style="display:flex;gap:6px;align-items:center">${actions}</div>`
+      : `<div style="display:flex;justify-content:space-between;gap:8px;padding:6px 8px;background:var(--surface-hi);border-radius:4px">
+          <div style="white-space:pre-wrap;max-height:160px;overflow:auto;min-width:0">${resolved}</div>
+          <div style="color:var(--text-xs);font-size:11px;font-family:var(--mono);flex-shrink:0">${relTime(i.answeredAt || i.resolvedAt)}${who}</div>
+        </div>`}
+  </div>`;
+}
+
+function renderHiCurrentTab(projectCount, errors) {
   const el = document.getElementById('hi-content');
-  const pending = _hiEntries.filter(({ q }) => q.answer === null || q.answer === undefined);
-  const answered = _hiEntries.filter(({ q }) => q.answer !== null && q.answer !== undefined);
+  const pending = _hiEntries.filter(_hiIsPending);
+  const done = _hiEntries.filter(e => !_hiIsPending(e));
   document.getElementById('hi-tab-count-pending').textContent = pending.length || '—';
-  document.getElementById('hi-tab-count-answered').textContent = answered.length || '—';
-  const entries = _hiTab === 'answered' ? answered : pending;
+  document.getElementById('hi-tab-count-answered').textContent = done.length || '—';
+  const entries = _hiTab === 'answered' ? done : pending;
   const projTxt = projectCount != null ? ` across ${projectCount} project${projectCount !== 1 ? 's' : ''}` : '';
+  const blocking = pending.filter(e => e.kind !== 'question' || e.item.blocking !== false).length;
   document.getElementById('hi-sub').textContent = _hiTab === 'answered'
-    ? (answered.length ? `${answered.length} answered question(s)${projTxt}` : `No answered questions${projTxt}`)
-    : (pending.length ? `${pending.length} pending question(s)${projTxt}` : `No pending questions${projTxt}`);
+    ? (done.length ? `${done.length} resolved${projTxt}` : `Nothing resolved yet${projTxt}`)
+    : (pending.length ? `${pending.length} waiting on you (${blocking} holding a run)${projTxt}` : `Nothing waiting on you${projTxt}`);
+  const errHtml = (errors || []).length
+    ? `<div class="empty" style="color:var(--red)">Unreadable: ${errors.map(esc).join('; ')}</div>` : '';
   if (!entries.length) {
-    el.innerHTML = `<div class="empty"><div class="empty-ico">❓</div><div>No ${_hiTab} questions</div></div>`;
+    el.innerHTML = `${errHtml}<div class="empty"><div class="empty-ico">❓</div><div>${_hiTab === 'answered' ? 'Nothing resolved yet' : 'Nothing waiting on you'}</div></div>`;
     return;
   }
-  el.innerHTML = `<div class="sess-list">${entries.map(({ project, q }) => `
-    <div class="sess-row" data-question-id="${esc(q.questionId)}" style="flex-direction:column;align-items:stretch;gap:6px">
-      <div style="display:flex;justify-content:space-between;gap:8px">
-        <div><b>${esc(q.org)}</b> · ${esc(q.role)} <span style="color:var(--text-xs)">(${esc(project.name || project.path)})</span></div>
-        <div style="color:var(--text-xs);font-size:11px;font-family:var(--mono)">${relTime(q.ts)}</div>
-      </div>
-      <div style="color:var(--text-hi)">${esc(q.question)}</div>
-      ${_hiTab === 'answered' ? `
-      <div style="display:flex;justify-content:space-between;gap:8px;padding:6px 8px;background:var(--surface-hi);border-radius:4px">
-        <div><span style="color:var(--text-xs)">Answer:</span> ${esc(q.answer)}</div>
-        <div style="color:var(--text-xs);font-size:11px;font-family:var(--mono);flex-shrink:0">${relTime(q.answeredAt)}</div>
-      </div>` : `
-      <div style="display:flex;gap:6px">
-        <input type="text" class="hi-answer-input" placeholder="Your answer…" style="flex:1;padding:4px 8px;font-size:12px" />
-        <button class="btn" style="font-size:11px" onclick="submitHumanAnswer('${esc(String(project.path).replace(/['\\]/g,'\\$&'))}','${esc(String(q.org).replace(/['\\]/g,'\\$&'))}','${esc(String(q.role).replace(/['\\]/g,'\\$&'))}','${esc(String(q.questionId).replace(/['\\]/g,'\\$&'))}',this)">Answer</button>
-      </div>`}
-    </div>
-  `).join('')}</div>`;
+  el.innerHTML = `${errHtml}<div class="sess-list">${entries.map(_hiEntryHtml).join('')}</div>`;
 }
 
 function updateHumanInputBadge(count) {
@@ -4518,26 +4589,38 @@ function updateHumanInputBadge(count) {
   if (b) b.textContent = String(count);
 }
 
-async function _submitHumanAnswer(dir, org, role, questionId, btnEl) {
-  const row = btnEl.closest('[data-question-id]');
-  const input = row.querySelector('.hi-answer-input');
-  const answer = input.value.trim();
-  if (!answer) return;
-  btnEl.disabled = true;
+/** POST a human decision; toasts the outcome. Resolves to the response data, or null on failure. */
+async function _hilPost(url, body) {
   try {
-    const res = await fetch('/api/questions/answer', {
-      method: 'POST', headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ dir, org, role, questionId, answer }),
+    const res = await fetch(url, {
+      method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body),
     });
-    const data = await res.json();
-    if (data.ok) {
-      showToast('Answered', `${org}:${role}`, 'ok');
-      const entry = _hiEntries.find(({ q }) => q.questionId === questionId);
-      if (entry) { entry.q.answer = answer; entry.q.answeredAt = Date.now(); }
-      updateHumanInputBadge(_hiEntries.filter(({ q }) => q.answer === null || q.answer === undefined).length);
-      renderHiCurrentTab();
-    } else { showToast('Error', data.error || 'failed', 'err'); btnEl.disabled = false; }
-  } catch (e) { showToast('Error', e.message, 'err'); btnEl.disabled = false; }
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok || !data.ok) { showToast('Not delivered', data.error || `HTTP ${res.status}`, 'err'); return null; }
+    showToast('Done', data.delivery === 'live'
+      ? 'Delivered to the running org'
+      : 'Recorded — the org picks it up when it next runs', 'ok');
+    return data;
+  } catch (e) { showToast('Error', e.message, 'err'); return null; }
+}
+
+async function _hiAct(btnEl, verb) {
+  const { kind, dir, org, id } = btnEl.dataset;
+  const row = btnEl.closest('.sess-row');
+  const text = row?.querySelector('.hi-answer-input')?.value.trim() || '';
+  const q = `?dir=${enc(dir)}`;
+  let ok = null;
+  row?.querySelectorAll('button').forEach(b => { b.disabled = true; });
+  if (kind === 'question') {
+    if (!text) { row?.querySelectorAll('button').forEach(b => { b.disabled = false; }); return; }
+    ok = await _hilPost('/api/questions/answer', { dir, org, questionId: id, answer: text });
+  } else if (kind === 'approval') {
+    ok = await _hilPost(`/api/org/${enc(org)}/approvals/${enc(id)}${q}`, { action: verb });
+  } else if (kind === 'gate') {
+    ok = await _hilPost(`/api/org/${enc(org)}/gates/${enc(id)}${q}`, { approved: verb === 'approve', resolution: text || undefined });
+  }
+  if (!ok) { row?.querySelectorAll('button').forEach(b => { b.disabled = false; }); return; }
+  renderHumanInputView();
 }
 
 function _cvExcerptText(ev) {
@@ -5902,6 +5985,7 @@ function v2RenderOrgTab(tab) {
     return;
   }
   if (tab === 'chart')          v2RenderOrgChart();
+  else if (tab === 'runtime')    v2RenderOrgRuntime();
   else if (tab === 'roles')      v2RenderOrgRoles();
   else if (tab === 'health')     v2RenderOrgHealth();
   else if (tab === 'heartbeats') v2RenderOrgHeartbeats();
@@ -7114,34 +7198,38 @@ function v2RenderOrgLive() {
 }
 
 // ── APPROVALS ──────────────────────────────────────────────
+// Tool/action approvals (<org>/approvals.json): a role asked to run a
+// sensitive tool (Bash, WebFetch, org_complete, policy.approvalTools…).
 async function v2RenderOrgApprovals() {
   const el = document.getElementById('odt-approvals');
   if (!el || !_v2SelOrg) return;
   const _rendOrg = _v2SelOrg;
-  el.innerHTML = '<div class="loading-txt">Loading…</div>';
+  if (!el.querySelector('table')) el.innerHTML = '<div class="loading-txt">Loading…</div>';
   try {
     const _enc = encodeURIComponent(_rendOrg);
-    const data = await fetch(`/api/org/${_enc}/approvals${DIR ? `?dir=${encodeURIComponent(DIR)}` : ''}`).then(r => r.ok ? r.json() : []).catch(() => []);
+    const res = await fetch(`/api/org/${_enc}/approvals${DIR ? `?dir=${encodeURIComponent(DIR)}` : ''}`);
+    const data = await res.json().catch(() => ({}));
     if (_v2SelOrg !== _rendOrg) return;
-    const approvals = Array.isArray(data) ? data : (data.approvals || []);
-    if (!approvals.length) { el.innerHTML = '<div class="empty">No pending approvals</div>'; return; }
+    if (!res.ok) { el.innerHTML = `<div class="empty">Failed: ${esc(data.error || `HTTP ${res.status}`)}</div>`; return; }
+    const approvals = data.approvals || [];
+    if (!approvals.length) { el.innerHTML = '<div class="empty">No approval requests</div>'; return; }
     el.innerHTML = `<table style="width:100%;border-collapse:collapse;font-size:12px">
       <thead><tr style="color:var(--text-xs);text-align:left">
-        <th style="padding:6px 8px">Requester</th><th>Action</th><th>Status</th><th>Date</th><th></th>
+        <th style="padding:6px 8px">Role</th><th>Action</th><th>Input</th><th>Status</th><th>When</th><th></th>
       </tr></thead><tbody>` +
-      approvals.slice(0, 50).map(a => {
-        const cls = a.status === 'approved' ? 'on' : a.status === 'rejected' ? 'warn' : '';
-        const pending = !a.status || a.status === 'pending';
-        const aid = a.id || '';
+      approvals.slice(0, 100).map(a => {
+        const cls = a.status === 'approved' ? 'on' : a.status === 'denied' ? 'warn' : '';
+        const input = a.input ? JSON.stringify(a.input) : '';
         return `<tr style="border-top:1px solid var(--border)">
-          <td style="padding:6px 8px;color:var(--text-hi)">${esc(a.requester || a.agent || '—')}</td>
-          <td style="padding:6px 8px;color:var(--text-lo);max-width:180px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${esc((a.action || a.description || '').slice(0, 80))}</td>
-          <td style="padding:6px 8px"><span class="ss-pill ${cls}">${esc(a.status || 'pending')}</span></td>
-          <td style="padding:6px 8px;color:var(--text-xs);font-size:11px;font-family:var(--mono)">${relTime(a.created_at || a.ts)}</td>
+          <td style="padding:6px 8px;color:var(--text-hi)">${esc(a.roleId || '—')}</td>
+          <td style="padding:6px 8px;color:var(--text-hi);font-family:var(--mono)">${esc(a.action || '—')}</td>
+          <td style="padding:6px 8px;color:var(--text-lo);max-width:260px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-family:var(--mono);font-size:11px" title="${esc(input)}">${esc(input.slice(0, 120) || '—')}</td>
+          <td style="padding:6px 8px"><span class="ss-pill ${cls}">${esc(a.status)}</span>${a.resolvedBy ? `<div style="color:var(--text-xs);font-size:10px">by ${esc(a.resolvedBy)}</div>` : ''}</td>
+          <td style="padding:6px 8px;color:var(--text-xs);font-size:11px;font-family:var(--mono)">${relTime(a.resolvedAt || a.ts)}</td>
           <td style="padding:6px 8px;white-space:nowrap">
-            ${pending
-              ? `<button class="btn" style="font-size:10px;color:var(--green);border-color:var(--green)" title="Approve" aria-label="Approve" data-aid="${esc(aid)}" onclick="orgApprovalAction(this.dataset.aid,'approve')">✓</button>
-                 <button class="btn" style="font-size:10px;color:var(--red);border-color:var(--red);margin-left:3px" title="Reject" aria-label="Reject" data-aid="${esc(aid)}" onclick="orgApprovalAction(this.dataset.aid,'reject')">✕</button>`
+            ${a.status === 'pending' && a.id
+              ? `<button class="btn" style="font-size:10px;color:var(--green);border-color:var(--green)" title="Approve" aria-label="Approve" data-aid="${esc(a.id)}" onclick="orgApprovalAction(this.dataset.aid,'approve')">✓</button>
+                 <button class="btn" style="font-size:10px;color:var(--red);border-color:var(--red);margin-left:3px" title="Deny" aria-label="Deny" data-aid="${esc(a.id)}" onclick="orgApprovalAction(this.dataset.aid,'reject')">✕</button>`
               : ''}
           </td>
         </tr>`;
@@ -7150,15 +7238,10 @@ async function v2RenderOrgApprovals() {
 }
 
 async function _orgApprovalAction(id, action) {
-  if (!confirm(`${action} this request?`)) return;
-  try {
-    const _enc = encodeURIComponent(_v2SelOrg);
-    await fetch(`/api/org/${_enc}/approvals/${encodeURIComponent(id)}${DIR ? `?dir=${encodeURIComponent(DIR)}` : ''}`, {
-      method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ action })
-    });
-    showToast('Done', `${action}d`, 'ok');
-    v2RenderOrgApprovals();
-  } catch (e) { showToast('Error', e.message, 'err'); }
+  if (!confirm(`${action === 'approve' ? 'Approve' : 'Deny'} this request?`)) return;
+  const _enc = encodeURIComponent(_v2SelOrg);
+  const ok = await _hilPost(`/api/org/${_enc}/approvals/${encodeURIComponent(id)}${DIR ? `?dir=${encodeURIComponent(DIR)}` : ''}`, { action });
+  if (ok) v2RenderOrgApprovals();
 }
 
 // ── DECISIONS ──────────────────────────────────────────────
@@ -7203,20 +7286,35 @@ function v2RenderDecisionsTable() {
   if (!filtered.length) { el.innerHTML = `${filterBar}<div class="empty">No decision gates match</div>`; return; }
   el.innerHTML = filterBar + `<table style="width:100%;border-collapse:collapse;font-size:12px">
     <thead><tr style="color:var(--text-xs);text-align:left">
-      <th style="padding:6px 8px">Role</th><th>Gate</th><th>Status</th><th>Resolution</th><th>Date</th>
+      <th style="padding:6px 8px">Role</th><th>Gate</th><th>Status</th><th>Resolution</th><th>Date</th><th></th>
     </tr></thead><tbody>` +
     filtered.slice(0, 100).map(g => {
       const cls = g.status === 'approved' ? 'on' : g.status === 'rejected' ? 'warn' : '';
       return `<tr style="border-top:1px solid var(--border)">
         <td style="padding:6px 8px;color:var(--text-hi)">${esc(g.roleId || '—')}</td>
         <td style="padding:6px 8px;color:var(--text-lo);max-width:200px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap" title="${esc(g.description || '')}">${esc(g.name || '—')}</td>
-        <td style="padding:6px 8px"><span class="ss-pill ${cls}">${esc(g.status || 'pending')}</span></td>
-        <td style="padding:6px 8px;color:var(--text-lo);max-width:180px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${esc(g.resolution || '—')}</td>
+        <td style="padding:6px 8px"><span class="ss-pill ${cls}">${esc(g.status || 'pending')}</span>${g.resolvedBy ? `<div style="color:var(--text-xs);font-size:10px">by ${esc(g.resolvedBy)}</div>` : ''}</td>
+        <td style="padding:6px 8px;color:var(--text-lo);max-width:180px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap" title="${esc(g.resolution || '')}">${esc(g.resolution || '—')}</td>
         <td style="padding:6px 8px;color:var(--text-xs);font-size:11px;font-family:var(--mono)">${relTime(g.resolvedAt || g.createdAt)}</td>
+        <td style="padding:6px 8px;white-space:nowrap">
+          ${(g.status || 'pending') === 'pending'
+            ? `<button class="btn" style="font-size:10px;color:var(--green);border-color:var(--green)" title="Approve" aria-label="Approve gate" data-gid="${esc(g.id)}" onclick="orgGateAction(this.dataset.gid,true)">✓</button>
+               <button class="btn" style="font-size:10px;color:var(--red);border-color:var(--red);margin-left:3px" title="Reject" aria-label="Reject gate" data-gid="${esc(g.id)}" onclick="orgGateAction(this.dataset.gid,false)">✕</button>`
+            : ''}
+        </td>
       </tr>`;
     }).join('') + '</tbody></table>';
 }
 
+async function _orgGateAction(id, approved) {
+  const gate = _v2DecisionsCache.find(g => g.id === id);
+  const resolution = prompt(`${approved ? 'Approve' : 'Reject'} "${gate?.name || id}"?\nOptional note for the role:`, '');
+  if (resolution === null) return;
+  const _enc = encodeURIComponent(_v2SelOrg);
+  const ok = await _hilPost(`/api/org/${_enc}/gates/${encodeURIComponent(id)}${DIR ? `?dir=${encodeURIComponent(DIR)}` : ''}`, { approved, resolution: resolution.trim() || undefined });
+  if (ok) v2RenderOrgDecisions();
+}
+
 // ── SECRETS ────────────────────────────────────────────────
 async function v2RenderOrgSecrets() {
   const el = document.getElementById('odt-secrets');
@@ -7934,7 +8032,10 @@ window.odtSendChatMessage = async () => {
     const _sendQ = DIR ? `?dir=${encodeURIComponent(DIR)}` : '';
     const res = await fetch(`/api/orgs/${encodeURIComponent(_v2SelOrg)}/chat${_sendQ}`, { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify({ text, role: role || undefined, runId: _odtChatCurrentId || null }) });
     const data = await res.json().catch(() => ({}));
-    if (!data.delivered) {
+    if (!res.ok || !data.ok) {
+      inp.value = text;
+      showToast('Not delivered', data.error || `HTTP ${res.status}`, 'err');
+    } else if (data.delivery !== 'live') {
       const lbl = document.getElementById('odt-chat-live-lbl');
       if (lbl) { const prev = lbl.textContent; lbl.textContent = 'QUEUED (org offline)'; setTimeout(() => { lbl.textContent = prev; }, 4000); }
     }
@@ -8484,8 +8585,16 @@ function _odtHandleLiveEvent(ev) {
   }
   if (ev?.type === 'org:question' && ev.from) {
     if (ev.org === _v2SelOrg) v2ShowQuestionBubble(ev.from, ev.question || '');
-    if (viewRendered.humaninput) renderHumanInputView();
-    else updateHumanInputBadge((parseInt(document.getElementById('bdg-humaninput')?.textContent, 10) || 0) + 1);
+  }
+  _v2RuntimeNudge(ev);
+  // Anything a human must act on, or just did: refresh the Human Input list,
+  // its badge, and the selected org's approvals/decisions panes.
+  if (['org:question', 'org:gate', 'org:question-answered', 'org:approval:resolved', 'org:gate:resolved'].includes(ev?.type)) {
+    _hiScheduleReload();
+    if (ev.org === _v2SelOrg) {
+      if (document.getElementById('odt-approvals')?.offsetParent) v2RenderOrgApprovals();
+      if (document.getElementById('odt-decisions')?.offsetParent) v2RenderOrgDecisions();
+    }
   }
   if (ev?.type === 'org:question-answered' && ev.role) {
     if (ev.org === _v2SelOrg) v2ClearQuestionBubble(ev.role);
@@ -8596,90 +8705,273 @@ function _odtHandleLiveEvent(ev) {
   }
 }
 
+// ── RUNTIME ────────────────────────────────────────────────
+// What the org is doing, from the runtime's own sources (GET /api/org/:n/runtime):
+// live status, idle watchdog + hold deadline, budget on its enforcement basis,
+// per-role model/effort/tier and usage (cache tokens included), the task DAG
+// with evidence-gate failures, gate/watchdog audit events, and how runs ended.
+let _v2RuntimeTimer = null;
+let _v2RuntimeReload = null;
+
+function _rtTok(n) {
+  if (n === null || n === undefined) return '?';
+  n = Number(n) || 0;
+  if (n >= 1e9) return `${(n / 1e9).toFixed(2)}B`;
+  if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
+  if (n >= 1e3) return `${(n / 1e3).toFixed(1)}k`;
+  return String(n);
+}
+function _rtClock(iso) {
+  const t = typeof iso === 'number' ? iso : Date.parse(iso || '');
+  return t ? new Date(t).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) : '—';
+}
+function _rtIn(iso) {
+  const ms = (typeof iso === 'number' ? iso : Date.parse(iso || '')) - Date.now();
+  if (!Number.isFinite(ms)) return '';
+  return ms <= 0 ? 'now' : `in ${fmtDur(ms)}`;
+}
+const _RT_CLOSED_BY = {
+  'org-complete': 'boss called org_complete',
+  'idle-stop': 'idle watchdog stopped it',
+  'failed-start': 'failed to start',
+  'scheduled-deadline': 'scheduled deadline',
+  'boss-restart': 'boss restarted',
+  'boss-restart-exhausted': 'boss restarts exhausted',
+  'mark-complete': 'marked complete by hand',
+};
+const _RT_AUDIT_COLOR = {
+  'task-evidence-refused': 'var(--amber, #d29922)',
+  'task-evidence-escalated': 'var(--red)',
+  'org-complete-refused': 'var(--amber, #d29922)',
+  'hold-expired': 'var(--amber, #d29922)',
+  'no-progress': 'var(--amber, #d29922)',
+  'idle-nudge': 'var(--text-lo)',
+  'idle-stop': 'var(--red)',
+};
+
+function _rtCard(label, value, sub) {
+  return `<div style="border:1px solid var(--border);border-radius:6px;padding:10px 12px;min-width:0">
+    <div style="font-size:9px;letter-spacing:1.5px;color:var(--text-xs)">${label}</div>
+    <div style="font-size:14px;color:var(--text-hi);margin-top:4px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${value}</div>
+    ${sub ? `<div style="font-size:11px;color:var(--text-lo);margin-top:2px">${sub}</div>` : ''}
+  </div>`;
+}
+function _rtTable(title, head, rows, empty) {
+  const h = `<div style="font-size:9px;letter-spacing:2px;color:var(--text-xs);margin:18px 0 6px">${title}</div>`;
+  if (!rows.length) return `${h}<div class="empty" style="padding:8px 0">${empty}</div>`;
+  return `${h}<div style="overflow-x:auto"><table style="width:100%;border-collapse:collapse;font-size:12px">
+    <thead><tr style="color:var(--text-xs);text-align:left">${head.map(c => `<th style="padding:4px 8px;font-weight:500;white-space:nowrap">${c}</th>`).join('')}</tr></thead>
+    <tbody>${rows.map(r => `<tr style="border-top:1px solid var(--border)">${r.map(c => `<td style="padding:5px 8px;vertical-align:top">${c}</td>`).join('')}</tr>`).join('')}</tbody></table></div>`;
+}
+
+async function v2RenderOrgRuntime() {
+  const el = document.getElementById('odt-runtime');
+  if (!el || !_v2SelOrg) return;
+  clearTimeout(_v2RuntimeTimer);
+  const _rendOrg = _v2SelOrg;
+  if (!el.dataset.org || el.dataset.org !== _rendOrg) el.innerHTML = '<div class="loading-txt">Loading…</div>';
+  let v;
+  try {
+    const res = await fetch(`/api/org/${enc(_rendOrg)}/runtime${DIR ? `?dir=${enc(DIR)}` : ''}`);
+    v = await res.json().catch(() => ({}));
+    if (!res.ok) throw new Error(v.error || `HTTP ${res.status}`);
+  } catch (e) {
+    if (_v2SelOrg === _rendOrg) el.innerHTML = `<div class="empty">Failed: ${esc(e.message)}</div>`;
+    return;
+  }
+  if (_v2SelOrg !== _rendOrg || _v2OrgTab !== 'runtime') return;
+  el.dataset.org = _rendOrg;
+  const s = v.settings || {};
+  const mono = t => `<span style="font-family:var(--mono)">${t}</span>`;
+
+  // Status strip
+  const statusSub = v.live
+    ? `${esc(v.run || '')}${v.startedAt ? ` · up ${fmtDur(Date.now() - v.startedAt)}` : ''}`
+    : `${esc(v.run || 'no run yet')}${v.closedBy ? ` · ${esc(_RT_CLOSED_BY[v.closedBy] || v.closedBy)}` : ''}`;
+  let idle = '—', idleSub = s.idle_minutes === 0 ? 'watchdog disabled' : `window ${s.idle_minutes}m`;
+  if (v.idle) {
+    if (v.idle.idle_hold && v.idle.idle_hold !== 'unknown') {
+      idle = `held: ${esc(v.idle.idle_hold)}`;
+      idleSub = v.idle.idle_hold_until ? `hold ends ${_rtClock(v.idle.idle_hold_until)} (${_rtIn(v.idle.idle_hold_until)})` : 'hold has no deadline';
+    } else if (v.idle.idle_stop_at) {
+      idle = `stops ${_rtIn(v.idle.idle_stop_at)}`;
+      idleSub = `if idle until ${_rtClock(v.idle.idle_stop_at)}`;
+    } else idle = 'not reported yet';
+  }
+  const b = v.budget || {};
+  const pct = b.tokens && b.used !== null ? Math.min(100, (b.used / b.tokens) * 100) : null;
+  const budget = b.used === null ? 'unknown' : `${_rtTok(b.used)} / ${_rtTok(b.tokens)}`;
+  const budgetWhy = b.used === null ? ' · run predates cache metering' : '';
+  const budgetSub = `${esc(b.basis)} basis${pct !== null ? ` · ${pct.toFixed(1)}%` : ''}${budgetWhy} · ${fmtCost(v.totals?.cost_usd)}`;
+  const gate = s.completion_evidence ? 'evidence required' : 'off';
+  const gateSub = s.completion_evidence
+    ? `escalate after ${s.max_evidence_attempts} refusals · org_complete: ${esc(s.completion)}`
+    : `org_complete gate: ${esc(s.completion)}`;
+
+  let html = '<div style="padding:16px">';
+  if (!v.valid) html += `<div class="empty" style="color:var(--red);text-align:left;margin-bottom:10px">Definition does not parse — <code>org run</code> will refuse it:<br>${v.problems.map(esc).join('<br>')}</div>`;
+  if (v.liveError) html += `<div class="empty" style="color:var(--amber, #d29922);text-align:left;margin-bottom:10px">A daemon is registered for this org but did not answer: ${esc(v.liveError)}</div>`;
+  html += `<div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(170px,1fr));gap:10px">
+    ${_rtCard('STATUS', `<span class="ss-pill ${v.live ? 'on' : ''}">${esc(v.status)}</span>`, statusSub)}
+    ${_rtCard('IDLE WATCHDOG', idle, idleSub)}
+    ${_rtCard('BUDGET (THIS RUN)', budget, budgetSub)}
+    ${_rtCard('COMPLETION GATE', gate, gateSub)}
+    ${_rtCard('SESSIONS', `per ${esc(s.session_scope)}`, `workspace: ${esc(s.workspace)} · max ${s.max_concurrent_agents} agents`)}
+  </div>`;
+
+  // Roles
+  html += _rtTable(`ROLES${v.run ? ` — USAGE IN ${esc(v.run)}` : ''}`,
+    ['Role', 'Runtime', 'Model', 'Effort', 'Tier', 'Status', 'In', 'Out', 'Cache read', 'Cache write', 'Cost', 'Last active'],
+    (v.roles || []).map(r => [
+      `<span style="color:var(--text-hi)">${esc(r.title)}</span>${r.title !== r.id ? `<div style="font-size:10px;color:var(--text-xs)">${esc(r.id)}</div>` : ''}`,
+      esc(r.runtime),
+      r.tierError
+        ? `<span style="color:var(--red)" title="${esc(r.tierError)}">tier error</span>`
+        : `<span style="white-space:nowrap">${mono(esc(r.model || 'default'))}</span><div style="font-size:10px;color:var(--text-xs)">${esc(r.modelSource)}</div>`,
+      esc(r.effort || '—'),
+      esc(r.tier || '—'),
+      `<span class="ss-pill ${r.status === 'running' || r.status === 'working' ? 'on' : ''}">${esc(r.status)}</span>`,
+      // A run recorded before the four-way meter only has an input+output total.
+      ...(r.usage.legacy_tokens && !r.usage.tokens
+        ? [`<span title="Recorded before the meter split input, output and cache tokens">${mono(_rtTok(r.usage.legacy_tokens))} in+out</span>`, '—', '—', '—']
+        : [mono(_rtTok(r.usage.tokens_in)), mono(_rtTok(r.usage.tokens_out)),
+           mono(_rtTok(r.usage.cache_read)), mono(_rtTok(r.usage.cache_creation))]),
+      mono(fmtCost(r.usage.cost_usd)),
+      `<span style="color:var(--text-xs)">${r.lastActivity ? relTime(r.lastActivity) : '—'}</span>`,
+    ]), 'No roles');
+
+  // Tasks
+  const open = (v.tasks || []).filter(t => !['done', 'cancelled', 'merged', 'split'].includes(t.status));
+  html += _rtTable(`TASKS (${open.length} open of ${(v.tasks || []).length})`,
+    ['Task', 'Assignee', 'Status', 'Evidence refusals', 'Loadout', 'Blocked'],
+    [...open, ...(v.tasks || []).filter(t => !open.includes(t))].slice(0, 60).map(t => [
+      `<span style="color:var(--text-hi)">${esc(t.title || t.id)}</span><div style="font-size:10px;color:var(--text-xs)">${esc(t.id)}</div>`,
+      esc(t.assignee || '—'),
+      `<span class="ss-pill ${t.status === 'done' ? 'on' : t.status === 'failed' || t.status === 'blocked' ? 'warn' : ''}">${esc(t.status)}</span>`,
+      t.evidenceFailures ? `<span style="color:${t.evidenceFailures >= s.max_evidence_attempts ? 'var(--red)' : 'var(--amber, #d29922)'}">${t.evidenceFailures} / ${s.max_evidence_attempts}</span>` : '—',
+      esc(t.loadout || '—'),
+      t.blockedUntil ? `until ${_rtClock(t.blockedUntil)}${t.blockedReason ? ` — ${esc(t.blockedReason)}` : ''}` : '—',
+    ]), 'No task graph for this run (the boss has not used org_task)');
+
+  // Audit trail
+  html += _rtTable('EVIDENCE GATE & WATCHDOG EVENTS', ['When', 'Event', 'Role', 'Detail'],
+    (v.audit || []).map(a => [
+      `<span style="color:var(--text-xs);white-space:nowrap">${_rtClock(a.ts)}</span>`,
+      `<span class="ss-pill" style="color:${_RT_AUDIT_COLOR[a.reason] || 'var(--text-lo)'};border-color:currentColor;white-space:nowrap">${esc(a.reason)}</span>`,
+      esc(a.from || '—'),
+      `<div style="white-space:pre-wrap;max-height:120px;overflow:auto">${esc(a.msg)}${a.data?.refusal ? `\n<span style="color:var(--text-lo)">${esc(a.data.refusal)}</span>` : ''}</div>`,
+    ]), 'None in this run');
+
+  // History
+  html += _rtTable('RECENT RUNS', ['Run', 'Ended', 'Duration', 'How it ended', 'Outcome', 'Open tasks at stop', 'Tokens', 'Cost'],
+    (v.history || []).map(h => [
+      mono(esc(h.run)),
+      `<span style="color:var(--text-xs)">${relTime(h.endedAt)}</span>`,
+      h.durationMs ? fmtDur(h.durationMs) : '—',
+      esc(h.closedBy ? (_RT_CLOSED_BY[h.closedBy] || h.closedBy) : 'stopped (manual or shutdown)') + (h.crashes?.length ? `<div style="color:var(--red);font-size:10px">crashed: ${h.crashes.map(esc).join(', ')}</div>` : ''),
+      h.outcome
+        ? `<span class="ss-pill ${h.outcome.status === 'achieved' ? 'on' : 'warn'}">${esc(h.outcome.status)}</span>${h.blocker ? ` blocker: ${esc(h.blocker)}` : ''}<div style="font-size:11px;color:var(--text-lo);max-width:320px;white-space:pre-wrap;max-height:80px;overflow:auto">${esc(h.blockerDetail || h.outcome.summary || '')}</div>`
+        : '<span style="color:var(--text-xs)">none claimed</span>',
+      h.runnableTasksAtStop ? `<span style="color:var(--amber, #d29922)">${h.runnableTasksAtStop}</span>` : '0',
+      mono(_rtTok(h.totalTokens)),
+      mono(fmtCost(h.totalCostUsd)),
+    ]), 'No finished runs yet');
+  html += '</div>';
+  el.innerHTML = html;
+  // A live run changes by the second; poll lightly on top of the SSE nudges.
+  if (v.live) _v2RuntimeTimer = setTimeout(() => { if (_v2OrgTab === 'runtime') v2RenderOrgRuntime(); }, 15000);
+}
+
+/** SSE nudge: refresh the Runtime pane shortly after an event for its org. */
+function _v2RuntimeNudge(ev) {
+  if (_v2OrgTab !== 'runtime' || !ev?.org || ev.org !== _v2SelOrg) return;
+  clearTimeout(_v2RuntimeReload);
+  _v2RuntimeReload = setTimeout(v2RenderOrgRuntime, 2000);
+}
+
 // ── ORG CONFIG ─────────────────────────────────────────────
+// Edits the Org Runtime v2 definition (goal, schedule, run_config, default
+// cost tier). Saved through POST /api/org/:n/config, which merges into the file
+// on disk and refuses anything `org run` would refuse. Roles, policies and
+// providers stay in the JSON (Files tab / `monomind org edit`).
 function v2RenderOrgConfig() {
   const el = document.getElementById('odt-config');
   if (!el || !_v2OrgData || !_v2SelOrg) return;
-  const d = _v2OrgData;
+  const d = _v2OrgData.config || _v2OrgData;
   const rc = d.run_config || {};
-  const gov = (d.governance && typeof d.governance === 'object') ? d.governance : { policy: d.governance || 'auto' };
-  const topos = ['hierarchical','hierarchical-mesh','mesh','star','ring','adaptive','hybrid'];
-  const modes = [{ v: 'daemon', l: 'persistent (daemon)' }, { v: 'once', l: 'once' }, { v: 'scheduled', l: 'scheduled' }];
-  const statuses = ['active','paused','archived'];
-  const govPolicies = ['auto','board','strict'];
-  const inp = (id,val,type,extra) => `<input class="filter-input" id="${id}" type="${type||'text'}" value="${esc(String(val??''))}" ${extra||''} style="width:100%;box-sizing:border-box">`;
-  const sel = (id,opts,cur) => `<select class="filter-input" id="${id}" style="width:100%;box-sizing:border-box;cursor:pointer">${opts.map(o=>`<option${cur===o?' selected':''}>${esc(o)}</option>`).join('')}</select>`;
-  const fld = (lbl,html) => `<div style="display:flex;flex-direction:column;gap:4px"><div style="font-size:10px;color:var(--text-lo)">${lbl}</div>${html}</div>`;
-  const sec = (title,inner) => `<div style="margin-bottom:22px"><div style="font-size:9px;letter-spacing:2px;color:var(--text-xs);margin-bottom:10px;padding-bottom:5px;border-bottom:1px solid var(--border)">${title}</div><div style="display:grid;grid-template-columns:1fr 1fr;gap:11px">${inner}</div></div>`;
-  el.innerHTML = '<div style="padding:18px;overflow-y:auto;max-width:660px">'
-    +sec('GENERAL',
-      fld('Name', inp('oc-name', d.name||'','text','readonly style="opacity:0.5"'))
-      +fld('Status', sel('oc-status', statuses, d.status||'active'))
-      +'<div style="grid-column:1/-1">'+fld('Goal', `<textarea id="oc-goal" class="filter-input" rows="3" style="width:100%;box-sizing:border-box;resize:vertical;line-height:1.5">${esc(d.goal||'')}</textarea>`)+'</div>'
-      +fld('Mode', `<select class="filter-input" id="oc-mode" style="width:100%;box-sizing:border-box;cursor:pointer">${modes.map(o=>`<option value="${esc(o.v)}"${(d.mode||'daemon')===o.v?' selected':''}>${esc(o.l)}</option>`).join('')}</select>`)
-      +fld('Topology', sel('oc-topology', topos, d.topology||'hierarchical'))
-      +'<div style="grid-column:1/-1">'+fld('Schedule', inp('oc-schedule', d.schedule||''))+'</div>'
-    )
-    +sec('RUN CONFIG',
-      fld('Max Concurrent Agents', inp('oc-max-agents', rc.max_concurrent_agents??6,'number','min="1" max="32"'))
-      +fld('Checkpoint Interval (min)', inp('oc-checkpoint', rc.checkpoint_interval_min??30,'number','min="5"'))
-      +fld('Budget Tokens (0=unlimited)', inp('oc-budget', rc.budget_tokens??0,'number','min="0"'))
-      +fld('Alert Threshold (0-1)', inp('oc-alert', rc.alert_threshold??0.8,'number','step="0.05" min="0" max="1"'))
-      +fld('Boss Role ID', inp('oc-boss', rc.boss_role||''))
-      +fld('Memory Namespace', inp('oc-namespace', rc.memory_namespace||(`org:${d.name}`)))
-      +'<div style="grid-column:1/-1;display:flex;align-items:center;gap:8px;margin-top:4px"><input type="checkbox" id="oc-spawn-all" '+(rc.spawn_all_roles?'checked':'')+' style="accent-color:var(--accent);width:14px;height:14px;cursor:pointer"><label for="oc-spawn-all" style="font-size:12px;color:var(--text-mid);cursor:pointer">Spawn all roles as separate agents</label></div>'
-    )
-    +sec('GOVERNANCE',
-      fld('Approval Policy', sel('oc-gov-policy', govPolicies, gov.policy||'auto'))
-      +fld('Approvals File', inp('oc-gov-file', gov.approvals_file||(`.monomind/orgs/${d.name}-approvals.json`)))
-    )
-    +'<div style="display:flex;align-items:center;gap:10px"><button class="btn" style="border-color:var(--accent);color:var(--accent)" onclick="v2SaveOrgConfig()">Save Config</button><span id="oc-status-msg" style="font-size:11px;color:var(--text-lo)"></span></div>'
-    +'</div>';
+  const inp = (id, val, type, extra) => `<input class="filter-input" id="${id}" type="${type || 'text'}" value="${esc(String(val ?? ''))}" ${extra || ''} style="width:100%;box-sizing:border-box">`;
+  const sel = (id, opts, cur) => `<select class="filter-input" id="${id}" style="width:100%;box-sizing:border-box;cursor:pointer">${opts.map(([v, l]) => `<option value="${esc(v)}"${String(cur ?? '') === v ? ' selected' : ''}>${esc(l)}</option>`).join('')}</select>`;
+  const fld = (lbl, html, hint) => `<div style="display:flex;flex-direction:column;gap:4px"><div style="font-size:10px;color:var(--text-lo)">${lbl}</div>${html}${hint ? `<div style="font-size:10px;color:var(--text-xs)">${hint}</div>` : ''}</div>`;
+  const sec = (title, inner) => `<div style="margin-bottom:22px"><div style="font-size:9px;letter-spacing:2px;color:var(--text-xs);margin-bottom:10px;padding-bottom:5px;border-bottom:1px solid var(--border)">${title}</div><div style="display:grid;grid-template-columns:1fr 1fr;gap:11px">${inner}</div></div>`;
+  const tiers = ['standard', 'economy', 'budget', ...Object.keys(d.cost_tiers?.tiers || {})];
+  el.innerHTML = '<div style="padding:18px;overflow-y:auto;max-width:720px">'
+    + sec('GENERAL',
+      fld('Name', inp('oc-name', d.name || '', 'text', 'readonly style="opacity:0.5"'))
+      + fld('Schedule', inp('oc-schedule', d.schedule ?? '', 'text', 'placeholder="cron, or empty for none"'))
+      + `<div style="grid-column:1/-1">${fld('Goal', `<textarea id="oc-goal" class="filter-input" rows="4" style="width:100%;box-sizing:border-box;resize:vertical;line-height:1.5">${esc(d.goal || '')}</textarea>`)}</div>`)
+    + sec('BUDGET & CONCURRENCY',
+      fld('Budget tokens (per run)', inp('oc-budget', rc.budget_tokens ?? '', 'number', 'min="1" placeholder="1000000"'), 'Must be positive.')
+      + fld('Budget basis', sel('oc-basis', [['', 'uncached (default)'], ['uncached', 'uncached — input + output'], ['billable', 'billable — includes cache tokens']], rc.budget_tokens_basis ?? ''), 'billable is ~100x larger on a cached run; resize the budget with it.')
+      + fld('Max concurrent agents', inp('oc-max-agents', rc.max_concurrent_agents ?? '', 'number', 'min="1" placeholder="4"'))
+      + fld('Max turns per message', inp('oc-max-turns', rc.max_turns_per_message ?? '', 'number', 'min="1"')))
+    + sec('COMPLETION',
+      fld('org_complete gate', sel('oc-completion', [['', 'boss (default)'], ['boss', 'boss — partial needs a real blocker'], ['dag', 'dag — also refuse while tasks are runnable']], rc.completion ?? ''))
+      + fld('Evidence gate on org_task_done', sel('oc-evidence', [['false', 'off'], ['true', 'on — commands + exit codes pinned to HEAD']], String(!!rc.completion_evidence)))
+      + fld('Escalate after N evidence refusals', inp('oc-evidence-max', rc.max_evidence_attempts ?? '', 'number', 'min="1" placeholder="3"'), 'Then the task is failed and handed to the boss.'))
+    + sec('SESSIONS & WATCHDOG',
+      fld('Idle minutes (0 disables)', inp('oc-idle', rc.idle_minutes ?? '', 'number', 'min="0" step="any" placeholder="10"'), 'Every hold on the idle clock expires after an hour.')
+      + fld('Session scope', sel('oc-scope', [['', 'role (default)'], ['role', 'role — one session per role'], ['task', 'task — one session per task']], rc.session_scope ?? ''))
+      + fld('Workspace', inp('oc-workspace', rc.workspace ?? '', 'text', 'placeholder="repo | isolated | worktree | worktree-per-role | /abs/path"'))
+      + fld('Memory namespace', inp('oc-namespace', rc.memory_namespace ?? '', 'text', `placeholder="org:${esc(d.name || '')}"`)))
+    + sec('COST TIERS',
+      fld('Default tier', sel('oc-tier', [['', 'none — models as configured'], ...[...new Set(tiers)].map(t => [t, t])], d.cost_tiers?.default ?? ''), 'Per-role tiers and exemptions: edit cost_tiers.roles in the JSON.'))
+    + '<div style="display:flex;align-items:flex-start;gap:10px"><button class="btn" style="border-color:var(--accent);color:var(--accent)" onclick="v2SaveOrgConfig()">Save Config</button><span id="oc-status-msg" style="font-size:11px;color:var(--text-lo);white-space:pre-wrap"></span></div>'
+    + '</div>';
 }
 
 async function _v2SaveOrgConfig() {
   if (!_v2SelOrg || !_v2OrgData) return;
   const g = id => document.getElementById(id);
-  // Only include org config fields — exclude runtime data (state, goals, routines, approvals,
-  // running, tasks, config nested copy) that would corrupt the org .json file.
-  const _RUNTIME_KEYS = new Set(['config','state','goals','routines','approvals','running','tasks']);
-  const _baseConfig = Object.fromEntries(
-    Object.entries(_v2OrgData).filter(([k]) => !k.startsWith('_') && !_RUNTIME_KEYS.has(k))
-  );
-  const cfg = {
-    ..._baseConfig,
-    status:   (g('oc-status')?.value)   || _v2OrgData.status,
-    goal:     (g('oc-goal')?.value)     || _v2OrgData.goal,
-    mode:     (g('oc-mode')?.value)     || _v2OrgData.mode,
-    topology: (g('oc-topology')?.value) || _v2OrgData.topology,
-    schedule: (g('oc-schedule')?.value||'').trim() || null,
-    run_config: { ...(_v2OrgData.run_config||{}),
-      max_concurrent_agents:   parseInt(g('oc-max-agents')?.value, 10)||6,
-      checkpoint_interval_min: parseInt(g('oc-checkpoint')?.value, 10)||30,
-      budget_tokens:           parseInt(g('oc-budget')?.value, 10)||0,
-      alert_threshold:         parseFloat(g('oc-alert')?.value)||0.8,
-      boss_role:               (g('oc-boss')?.value||'').trim(),
-      memory_namespace:        (g('oc-namespace')?.value||'').trim()||(`org:${_v2SelOrg}`),
-      spawn_all_roles:         !!(g('oc-spawn-all')?.checked),
-    },
-    governance: {
-      policy:         (g('oc-gov-policy')?.value)||'auto',
-      approvals_file: (g('oc-gov-file')?.value||'').trim()||(`.monomind/orgs/${_v2SelOrg}-approvals.json`),
+  // '' = not set → null removes the key so the runtime default applies.
+  const num = id => { const v = (g(id)?.value || '').trim(); return v === '' ? null : Number(v); };
+  const str = id => { const v = (g(id)?.value || '').trim(); return v === '' ? null : v; };
+  const patch = {
+    goal: g('oc-goal')?.value ?? '',
+    // A numeric schedule (an interval) stays a number; a cron stays a string.
+    schedule: (() => {
+      const v = str('oc-schedule');
+      const was = (_v2OrgData.config || _v2OrgData).schedule;
+      return v !== null && typeof was === 'number' && /^\d+$/.test(v) ? Number(v) : v;
+    })(),
+    run_config: {
+      budget_tokens: num('oc-budget'),
+      budget_tokens_basis: str('oc-basis'),
+      max_concurrent_agents: num('oc-max-agents'),
+      max_turns_per_message: num('oc-max-turns'),
+      completion: str('oc-completion'),
+      completion_evidence: g('oc-evidence')?.value === 'true' ? true : null,
+      max_evidence_attempts: num('oc-evidence-max'),
+      idle_minutes: num('oc-idle'),
+      session_scope: str('oc-scope'),
+      workspace: str('oc-workspace'),
+      memory_namespace: str('oc-namespace'),
     },
+    cost_tiers_default: str('oc-tier') || '',
   };
-  const msg = document.getElementById('oc-status-msg');
-  if (msg) { msg.style.color='var(--text-lo)'; msg.textContent='Saving...'; }
+  const msg = g('oc-status-msg');
+  if (msg) { msg.style.color = 'var(--text-lo)'; msg.textContent = 'Saving…'; }
   try {
-    const qs = (typeof DIR !== 'undefined' && DIR) ? `?dir=${encodeURIComponent(DIR)}` : '';
-    const r = await fetch(`/api/orgs${qs}`, { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(cfg) });
-    const json = await r.json();
-    if (json.ok) {
-      _v2OrgData = Object.assign({}, _v2OrgData, cfg);
-      if (msg) { msg.style.color='oklch(68% 0.20 150)'; msg.textContent='Saved'; setTimeout(()=>{ if(msg) msg.textContent=''; }, 2500); }
-      if (typeof showToast === 'function') showToast('Config saved','','ok');
-    } else { throw new Error(json.error||'Save failed'); }
-  } catch(e) {
-    if (msg) { msg.style.color='oklch(60% 0.22 25)'; msg.textContent=`Error: ${e.message}`; }
+    const r = await fetch(`/api/org/${enc(_v2SelOrg)}/config${DIR ? `?dir=${enc(DIR)}` : ''}`, {
+      method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(patch),
+    });
+    const json = await r.json().catch(() => ({}));
+    if (!r.ok || !json.ok) throw new Error((json.error || `HTTP ${r.status}`).split('; ').join('\n'));
+    if (_v2OrgData.config) _v2OrgData.config = json.def;
+    Object.assign(_v2OrgData, { goal: json.def.goal, schedule: json.def.schedule, run_config: json.def.run_config, cost_tiers: json.def.cost_tiers });
+    if (msg) { msg.style.color = 'oklch(68% 0.20 150)'; msg.textContent = 'Saved — applies from the next run'; setTimeout(() => { if (msg) msg.textContent = ''; }, 4000); }
+    showToast('Config saved', 'Validated against the org schema', 'ok');
+  } catch (e) {
+    if (msg) { msg.style.color = 'oklch(60% 0.22 25)'; msg.textContent = `Not saved:\n${e.message}`; }
   }
 }
 
@@ -14211,7 +14503,7 @@ Object.assign(window, {
   gdOpen: _gdOpen,
   gdRevealPath: _gdRevealPath,
   gdCopyPath: _gdCopyPath,
-  submitHumanAnswer: _submitHumanAnswer,
+  hiAct: _hiAct,
   v2ViewOrgFile: _v2ViewOrgFile,
   minimapJump: _minimapJump,
   stopLoop: _stopLoop,
@@ -14220,6 +14512,7 @@ Object.assign(window, {
   v2TriggerAvatarUpload: _v2TriggerAvatarUpload,
   v2HandleAvatarFile: _v2HandleAvatarFile,
   orgApprovalAction: _orgApprovalAction,
+  orgGateAction: _orgGateAction,
   generateOrgSettingsCmd: _generateOrgSettingsCmd,
   setOdtChatMode: _setOdtChatMode,
   v2SaveOrgConfig: _v2SaveOrgConfig,