@oharness/server 0.5.1 → 0.7.0

package/dist/page.js

@@ -96,6 +96,8 @@ body.inset-titlebar aside header{padding-top:38px;-webkit-app-region:drag}
 .fold .ico-sm{width:16px;height:16px;flex:0 0 auto;opacity:.5}
 .fold.open .ico-sm,.fold:hover .ico-sm{opacity:.9}
 .fold-name{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+/* The routine group's run count, where a project header keeps its actions. */
+.fold .count{flex:0 0 auto;font-size:11px;color:var(--dim);padding-right:4px}
 /* A gap between projects, but not above the first one. The selector names the
    row rather than the button since the header grew a menu control beside it. */
 .fold-row + .fold-row,.session + .fold-row,.show-more + .fold-row{margin-top:6px}
@@ -462,6 +464,18 @@ details.provider>summary .vmark.filled,.pp-item .vmark.filled{padding:0}
   font-size:9.5px;letter-spacing:0;text-transform:none;padding:1px 5px;
   border-radius:4px;background:var(--accent);color:var(--bg);opacity:.85;
 }
+/* The geometry .mk-tag established, which is what a badge looks like here.
+   Quieter than the accent a group header wears: a vendor is marked once at the
+   top of its list, while this can repeat down twenty rows, and twenty accent
+   pills is a column of noise. The two selected states have to move it off
+   var(--sel) — that is what the row under the cursor is painted with, and a
+   pill the same colour as the row it sits on is not a pill. */
+.menu-item .m-tag{
+  flex:0 0 auto;padding:1px 5px;border-radius:4px;background:var(--sel);
+  color:var(--dim);font-size:10px;font-weight:500;letter-spacing:.02em;
+  text-transform:uppercase;
+}
+.menu-item:hover .m-tag,.menu-item.cursor .m-tag{background:var(--field)}
 .menu-more{
   width:100%;padding:8px;border:0;border-radius:7px;background:transparent;
   color:var(--fg);font:inherit;font-size:12.5px;cursor:pointer;text-align:left;
@@ -824,8 +838,13 @@ body.shelf-full #main,body.shelf-full aside,body.shelf-full #top{display:none}
 .q-desc{font-size:12px;line-height:1.45;color:var(--dim);overflow-wrap:anywhere}
 .q-opt.on .q-desc{color:inherit;opacity:.75}
 .q-check{flex:none;width:14px;font-size:12px;line-height:20px}
-.q-other{cursor:text;align-items:center}
-.q-other.on{background:var(--sel)}
+/* The typed answer is a field, so it keeps the plain row fill whether empty,
+   focused or filled; a filled one is marked by its key alone, which takes the
+   accent the picked options wear across the whole row. */
+.q-other{cursor:text;align-items:center;padding-top:12px;padding-bottom:12px}
+.q-other:focus-within,.q-other.on,.q-other.on:focus-visible{background:var(--bg);color:var(--fg);opacity:1}
+.q-other.on .q-key{background:var(--accent);color:var(--bg)}
+.q-other-input::placeholder{color:var(--dim)}
 .q-other-input{flex:1;min-width:0;border:0;outline:none;background:transparent;color:inherit;font:inherit;font-size:13.5px;padding:0}
 .q-preview{
   margin:0;border-radius:9px;background:var(--bg);padding:10px 12px;font-size:12px;line-height:1.55;
@@ -1000,10 +1019,59 @@ details.setting>summary:focus-visible{outline:none;background:var(--hover)}
    box, and the box's hairline goes with it — a list this long framed by a
    rule reads as a field somebody is meant to type in. */
 .audit-controls{display:flex;flex-wrap:wrap;gap:8px;align-items:center}
-.panel.audit .audit-list{margin:6px 0 10px}
-.panel.audit .audit-list .trail-line{padding:3px 0}
+.panel.audit .audit-list{margin:4px 0 12px}
 .setting-body .audit-list{
-  max-height:200px;overflow-y:auto;border-radius:6px;padding:7px 9px;background:var(--field);
+  max-height:220px;overflow-y:auto;border-radius:8px;padding:4px;background:var(--field);
+}
+/* One grid for the whole trail, so time, outcome and tool line up down the
+   page; each row is a subgrid of it so a row can still take a hover fill. */
+.audit-list{
+  display:grid;grid-template-columns:max-content max-content minmax(0,1fr) max-content;
+  column-gap:12px;font-size:12.5px;
+}
+.audit-row{
+  display:grid;grid-column:1/-1;grid-template-columns:subgrid;align-items:center;
+  padding:5px 8px;border-radius:7px;
+}
+.audit-row:hover{background:var(--hover)}
+.audit-row.denied{background:color-mix(in srgb,var(--err) 5%,transparent)}
+.audit-row.denied:hover{background:color-mix(in srgb,var(--err) 9%,transparent)}
+.audit-day{
+  grid-column:1/-1;font-size:11.5px;font-weight:600;color:var(--dim);
+  letter-spacing:.02em;padding:14px 8px 4px;
+}
+.audit-day:first-child{padding-top:2px}
+.audit-time{font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,monospace;font-size:11.5px;color:var(--dim);font-variant-numeric:tabular-nums}
+.audit-pill{
+  display:inline-flex;align-items:center;gap:5px;justify-self:start;
+  font-size:11px;font-weight:600;line-height:1;padding:4px 8px 4px 7px;border-radius:999px;
+}
+.audit-pill::before{content:"";width:6px;height:6px;border-radius:50%;background:currentColor}
+.audit-pill.allowed{color:var(--ok);background:color-mix(in srgb,var(--ok) 12%,transparent)}
+.audit-pill.denied{color:var(--err);background:color-mix(in srgb,var(--err) 12%,transparent)}
+.audit-pill.unanswered{color:var(--warn);background:color-mix(in srgb,var(--warn) 14%,transparent)}
+.audit-what{display:flex;align-items:baseline;gap:6px;min-width:0;white-space:nowrap}
+.audit-tool{font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,monospace;font-weight:600;color:var(--fg);flex:none}
+.audit-arg{
+  font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,monospace;color:var(--dim);
+  overflow:hidden;text-overflow:ellipsis;min-width:0;
+}
+.audit-notes{display:flex;gap:4px;justify-self:end}
+.audit-tag{
+  font-size:10.5px;color:var(--dim);background:var(--field);padding:2px 7px;border-radius:5px;white-space:nowrap;
+}
+.audit-tag.remembered{color:var(--brand-ink);background:var(--brand-tint)}
+.audit-tag.unanswered{color:var(--warn);background:color-mix(in srgb,var(--warn) 12%,transparent)}
+.seg-item .seg-dot{display:inline-block;width:6px;height:6px;border-radius:50%;margin-right:6px;vertical-align:1px}
+.seg-item .seg-count{margin-left:6px;font-size:11px;color:var(--dim);font-variant-numeric:tabular-nums}
+@media (max-width:640px){
+  .audit-list{grid-template-columns:max-content minmax(0,1fr);row-gap:0}
+  .audit-row{grid-template-columns:max-content minmax(0,1fr);row-gap:3px}
+  .audit-time{grid-column:1}
+  .audit-pill{grid-column:2;justify-self:start}
+  .audit-what{grid-column:1/-1}
+  .audit-notes{grid-column:1/-1;justify-self:start}
+  .audit-notes:empty{display:none}
 }
 /* A row of things to do with what is above them. Links styled as the ghost
    buttons beside them, because a download is a link and pretending otherwise
@@ -1027,8 +1095,56 @@ details.setting>summary:focus-visible{outline:none;background:var(--hover)}
 .seg{display:inline-flex;gap:2px;padding:2px;border-radius:9px;background:var(--field);margin:2px 0 12px}
 /* The presets and the calendar on one line, on the same baseline. */
 .usage-window{display:flex;flex-wrap:wrap;align-items:center;gap:8px}
-.perms-card{display:flex;flex-direction:column;gap:8px}
+.perms-card{display:flex;flex-direction:column;gap:10px}
 .perms-card .setting-list{margin:0}
+/* The mode, as the one fact the rest of the page qualifies. */
+.perm-mode{display:flex;align-items:center;gap:12px;flex-wrap:wrap}
+.perm-mode-name{
+  display:inline-flex;align-items:center;gap:7px;font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,monospace;
+  font-size:13px;font-weight:600;padding:6px 12px 6px 10px;border-radius:999px;
+}
+.perm-mode-name::before{content:"";width:7px;height:7px;border-radius:50%;background:currentColor}
+.perm-mode-name.read-only{color:var(--ok);background:color-mix(in srgb,var(--ok) 12%,transparent)}
+.perm-mode-name.workspace-write{color:var(--brand-ink);background:var(--brand-tint)}
+.perm-mode-name.full-access{color:var(--err);background:color-mix(in srgb,var(--err) 12%,transparent)}
+.perm-mode-steps{display:flex;gap:4px;flex-wrap:wrap}
+.perm-mode-step{font-size:11.5px;color:var(--dim);padding:3px 9px;border-radius:6px;background:var(--field)}
+.perm-mode-step.on{color:var(--fg);background:var(--bg);font-weight:600}
+/* Rules, one group per verdict, each rule a chip in that verdict's colour. */
+.perm-group{display:flex;flex-direction:column;gap:6px}
+.perm-group-head{display:flex;align-items:center;gap:8px;font-size:12px;font-weight:600}
+.perm-group-head .n{font-weight:400;color:var(--dim);font-variant-numeric:tabular-nums}
+.perm-group-head.allow{color:var(--ok)} .perm-group-head.ask{color:var(--warn)}
+.perm-group-head.deny{color:var(--err)} .perm-group-head.session{color:var(--brand-ink)}
+.perm-chips{display:flex;flex-wrap:wrap;gap:5px}
+.perm-chip{
+  font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,monospace;font-size:12px;
+  padding:3px 9px;border-radius:6px;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;
+}
+.perm-chip.allow{color:var(--ok);background:color-mix(in srgb,var(--ok) 10%,transparent)}
+.perm-chip.ask{color:var(--warn);background:color-mix(in srgb,var(--warn) 12%,transparent)}
+.perm-chip.deny{color:var(--err);background:color-mix(in srgb,var(--err) 10%,transparent)}
+.perm-chip.session{color:var(--brand-ink);background:var(--brand-tint)}
+.perm-empty{
+  display:flex;align-items:center;gap:8px;font-size:12.5px;color:var(--dim);
+  padding:10px 12px;border-radius:8px;background:var(--field);
+}
+.perm-roots{
+  display:flex;flex-direction:column;max-height:280px;overflow-y:auto;
+  background:var(--field);border-radius:8px;padding:4px;
+}
+.perm-root{
+  display:flex;align-items:baseline;gap:0;min-width:0;padding:4px 8px;border-radius:6px;
+  font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,monospace;font-size:12px;white-space:nowrap;
+}
+.perm-root:hover{background:var(--hover)}
+.perm-root .dir{color:var(--dim);overflow:hidden;text-overflow:ellipsis;min-width:0;direction:rtl;text-align:left}
+.perm-root .dir bdi{direction:ltr}
+.perm-root .base{color:var(--fg);font-weight:600;flex:none}
+.perm-count{
+  display:inline-block;margin-left:6px;font-size:11px;font-weight:600;color:var(--dim);
+  background:var(--field);padding:1px 7px;border-radius:999px;vertical-align:1px;
+}
 /* ---- date range picker ----------------------------------------------------
    The site's own component, class for class. Borderless like everything else
    here: fills for the chosen days, a shadow to lift the panel, and no ring on
@@ -1188,6 +1304,17 @@ details.provider>summary:hover{background:var(--hover)}
 .tag{font-size:10.5px;color:var(--dim);background:var(--field);border-radius:4px;padding:1px 5px}
 .tag.rec{color:var(--bg);background:var(--accent);opacity:.85}
 .row-head .ghost{margin-left:auto;height:26px;font-size:12px}
+/* A second action sits beside the first rather than splitting the free space
+ * with it. */
+.row-head .ghost+.ghost,.row-head .ghost+.switch,.row-head .switch+.ghost{margin-left:0}
+.routine-where{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}
+.routine-history{margin-top:6px}
+.routine-history>summary{cursor:pointer;width:max-content}
+.routine-runs{display:flex;flex-direction:column;gap:2px;margin-top:6px}
+.routine-run{display:flex;gap:10px;align-items:baseline;text-align:left;border:0;background:transparent;color:var(--fg);font:inherit;padding:4px 6px;border-radius:6px}
+button.routine-run{cursor:pointer}
+button.routine-run:hover{background:var(--hover)}
+.routine-run.failed{color:var(--err)}
 .small{font-size:12px;white-space:pre-wrap;word-break:break-all}
 .keyrow{display:flex;gap:6px;margin:8px 0 6px}
 .keyrow input{
@@ -1207,6 +1334,25 @@ details.provider>summary:hover{background:var(--hover)}
    nothing else, and now a subscriber gets a Top up row above it — the thing
    a subscriber does most often here, which had been the fourth entry of a
    menu behind the name. */
+/* The desktop update hint, above the account. A filled row, never an
+   outline: a quiet fill for an ordinary release, the accent for one marked
+   important. The window's menu and the dialogs are the loud path; this is the
+   one that waits to be clicked. */
+#update-hint{flex:0 0 auto;padding:4px 8px 0}
+#update-hint button{
+  width:100%;height:32px;display:flex;align-items:center;gap:8px;
+  padding:0 10px;border:0;border-radius:8px;background:var(--field);color:var(--fg);
+  font:inherit;font-size:12.5px;cursor:pointer;text-align:left;
+}
+#update-hint button:hover{background:var(--field-focus)}
+#update-hint button:disabled{cursor:default}
+#update-hint .dot{width:6px;height:6px;border-radius:50%;background:var(--accent);flex:0 0 auto}
+#update-hint .label{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+#update-hint .pct{font-size:11px;color:var(--dim)}
+#update-hint.important button{background:var(--accent);color:var(--bg)}
+#update-hint.important button:hover{opacity:.9}
+#update-hint.important .dot{background:var(--bg)}
+#update-hint.important .pct{color:inherit;opacity:.8}
 #account{
   display:flex;flex-direction:column;align-items:stretch;gap:2px;
   flex:0 0 auto;padding:8px;
@@ -1545,7 +1691,17 @@ button.pw-plan:disabled{opacity:.4;cursor:default}
 /* A dash rather than a bullet: three list markers down the side of a 200px
  * column read as a form to fill in, which is the thing on the other side. */
 .cn-points li::before{content:"—";position:absolute;left:0;opacity:.55}
-.cn-main{display:flex;flex-direction:column;min-width:0}
+.cn-main{display:flex;flex-direction:column;min-width:0;position:relative}
+/* What the ? explains, as a bubble under it rather than a paragraph in the
+ * body: peeking at a detail must not push the field and the buttons down, or
+ * the button being aimed at moves out from under the pointer. The row menu's
+ * fill and shadow, and no outline, like every other thing that floats here. */
+.cn-tip{
+  position:absolute;top:50px;right:16px;z-index:5;width:min(300px,calc(100% - 32px));
+  padding:10px 12px;border-radius:10px;background:var(--bg);
+  box-shadow:0 1px 2px #0000000f,0 8px 28px #00000024;
+}
+.cn-tip>div+div{margin-top:4px}
 /* Below this the two columns would leave the form narrower than its own
  * labels, which is the width the fields actually need. */
 @media (max-width:620px){
@@ -1594,6 +1750,9 @@ button.pw-plan:disabled{opacity:.4;cursor:default}
    click. */
 .cn-note{font-size:11.5px;color:var(--dim);line-height:1.45}
 .cn-note .mono{white-space:nowrap}
+.cn-local{display:flex;gap:6px;align-items:flex-start}
+.cn-local .ico-sm{width:13px;height:13px;flex:0 0 auto;margin-top:1.5px;color:var(--fg)}
+.cn-local strong{color:var(--fg);font-weight:600}
 /* The dialog ends on its buttons, so it needs the padding the shared rule
    leaves to whatever follows. */
 #connect .dlg-actions{padding:16px 20px 18px}
@@ -1603,10 +1762,15 @@ button.pw-plan:disabled{opacity:.4;cursor:default}
 /* An anchor, not a button, so the shared button.quiet rule does not reach it —
    and it is the one thing here that leaves the app, so it sits apart from the
    two that do not. */
-#connect .dlg-actions a.quiet{
-  margin-left:auto;color:var(--dim);text-decoration:none;font-size:12.5px;
-}
-#connect .dlg-actions a.quiet:hover{color:var(--fg);text-decoration:underline}
+#connect .dlg-actions a.quiet{margin-left:auto;text-decoration:none}
+/* Cancel and Get a key are buttons, and look it: the grey fill the other
+ * dialog buttons have, where Connect carries the colour. Bare text beside a
+ * filled button read as a caption, not as something to press. */
+#connect .dlg-actions button.quiet,#connect .dlg-actions a.quiet{
+  padding:8px 14px;border-radius:9px;background:var(--field);color:var(--fg);
+  font-size:13.5px;line-height:normal;
+}
+#connect .dlg-actions button.quiet:hover,#connect .dlg-actions a.quiet:hover{background:var(--sel)}
 .pp-head{padding:12px 12px 6px}
 .pp-head input{
   width:100%;height:34px;border:0;border-radius:9px;background:var(--field);color:var(--fg);
@@ -1635,6 +1799,18 @@ button.pw-plan:disabled{opacity:.4;cursor:default}
 .chip:hover{background:var(--sel)}
 .chip.on{background:var(--accent);color:var(--bg)}
 .chip .sub{font-size:11px;opacity:.6}
+/* A pill, not a word: .sub beside it is a quieter copy of the name, and this
+   is a different kind of claim about the model rather than more of its name.
+   Same geometry as .mk-tag and the picker's own. Both other chip states repaint
+   the background this sits on — hover takes var(--sel), selected takes the
+   accent — so the pill is moved each time rather than dissolving into it. */
+.chip .free{
+  flex:0 0 auto;padding:1px 5px;border-radius:4px;background:var(--sel);
+  color:var(--dim);font-size:10px;font-weight:500;letter-spacing:.02em;
+  text-transform:uppercase;
+}
+.chip:hover .free{background:var(--field)}
+.chip.on .free{background:var(--bg);color:var(--accent)}
 .panel .row-head h2{margin:0}
 .panel .row-head{margin-bottom:14px}
 .muted{color:var(--dim)}
@@ -1729,15 +1905,25 @@ pre.diff{margin:0;font-size:12px;line-height:1.5;overflow-x:auto}
 .d-del{background:var(--del-bg);color:var(--del)}
 .d-same{color:var(--dim)}
 
-details.work{border-radius:10px;margin:0 0 12px;background:var(--panel)}
+/* A line of text, not a box: it reads as part of the reply — what was done
+ * between two paragraphs — and the box is kept for what opens under it. The
+ * chevron trails the words, where it points at what a click will show. */
+details.work{margin:0 0 12px}
 details.work>summary{
-  padding:6px 12px;cursor:pointer;font-size:12px;color:var(--dim);list-style:none;
-  display:flex;gap:8px;align-items:center;
+  padding:3px 0;cursor:pointer;font-size:13.5px;color:var(--dim);list-style:none;
+  display:flex;gap:6px;align-items:center;width:max-content;max-width:100%;
 }
+details.work>summary:hover{color:var(--fg)}
 details.work>summary::-webkit-details-marker{display:none}
-details.work>summary::before{content:"▸";display:inline-block;transition:transform .15s}
-details.work[open]>summary::before{transform:rotate(90deg)}
-.work-body{padding:0 8px 8px}
+details.work>summary::after{
+  content:"";width:6px;height:6px;flex:0 0 auto;margin-left:2px;
+  border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;
+  transform:rotate(-45deg);transition:transform .15s;
+}
+details.work[open]>summary::after{transform:rotate(45deg)}
+.work-label{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}
+details.work.failed>summary{color:var(--err)}
+.work-body{padding:8px;margin-top:4px;border-radius:10px;background:var(--panel)}
 .work-body details.tool{margin-bottom:6px}
 /* the working indicator */
 .working{display:flex;align-items:center;gap:9px;color:var(--dim);font-size:13.5px;margin:0 0 10px}
@@ -2119,7 +2305,13 @@ dialog::backdrop{background:rgba(0,0,0,.55)}
 .dlg-actions button.approve kbd{background:#ffffff26}
 /* Only while a "remember" answer is focused, and taking no room otherwise: a
  * reserved empty line under the buttons read as the dialog being unfinished. */
-.ask-scope{padding:8px 20px 4px;font-size:11.5px;line-height:1.6;color:var(--dim)}
+.ask-scope{display:grid;padding:6px 20px 2px;font-size:11.5px;line-height:1.6;color:var(--dim)}
+.ask-scope>span{
+  grid-area:1/1;min-width:0;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;
+  opacity:0;pointer-events:none;transition:opacity .12s ease;
+}
+.ask-scope[data-show="once"]>[data-scope="once"],.ask-scope[data-show="session"]>[data-scope="session"],
+.ask-scope[data-show="project"]>[data-scope="project"]{opacity:1;pointer-events:auto}
 
 /* Parameters as a reader wants them: names on the left, values as values —
  * text with its line breaks, lists as chips — instead of JSON with line numbers. */
@@ -2307,6 +2499,9 @@ const isPhone = () => PHONE_QUERY.matches;
  * viewBox and one stroke width with the icons in the markup.
  */
 const ICON_PATHS = {
+  // A padlock: the shackle as a path, the body as a rect.
+  lock: ["M5.33 7.33V5.33a2.67 2.67 0 0 1 5.34 0v2"],
+  lockRects: [[3.33, 7.33, 9.34, 6.67, 1.6]],
   // Same drawing as the Settings item in the nav, so the model picker's
   // "manage" link and the place it leads to are recognisably one thing.
   settings: ["M12.67 4.67h-6", "M9.33 11.33H3.33"],
@@ -2627,6 +2822,7 @@ const cacheEl = document.getElementById("cache");
 const ctxBar = document.querySelector("#ctx i");
 const ctxText = document.getElementById("ctxtext");
 const sessionList = document.getElementById("sessions");
+const sidebarEl = document.querySelector("body > aside");
 const ask = document.getElementById("ask");
 
 let pendingId = null;
@@ -2756,7 +2952,7 @@ function shortModel(full) {
   return cut < 0 ? full : full.slice(cut + 1);
 }
 
-function makePicker(id, onPick, extra) {
+function makePicker(id, onPick, extra, opts = {}) {
   const root = document.getElementById(id);
   const button = root.querySelector(".picker-btn");
   const label = root.querySelector(".picker-value");
@@ -2784,18 +2980,25 @@ function makePicker(id, onPick, extra) {
   let cursor = 0;
   /** Groups the user has folded away; survives repainting. */
   const collapsed = new Set();
+  /**
+   * Groups folded while searching. Kept apart from the browsing folds: a
+   * search opens every vendor, because a match behind a closed header looks
+   * like no result — but a header that then refuses to close is a control
+   * that does nothing, and OpenRouter's twenty matches can bury the one vendor
+   * being looked for. Cleared when the query changes, so each search starts
+   * with everything it found on screen.
+   */
+  const searchFolded = new Set();
+  const folded = (group) => (query ? searchFolded.has(group) : collapsed.has(group));
 
   /** The options a keystroke can land on: what is actually on screen. */
-  const visible = () => {
-    const list = matches();
-    if (query) return list;
-    return list.filter((option) => !option.group || !collapsed.has(option.group));
-  };
+  const visible = () => matches().filter((option) => !option.group || !folded(option.group));
 
   const close = () => {
     menu.hidden = true;
     root.classList.remove("open");
     query = "";
+    searchFolded.clear();
   };
 
   const matches = () => options.filter((option) => matchesQuery(option, query));
@@ -2803,12 +3006,7 @@ function makePicker(id, onPick, extra) {
   const paint = () => {
     const list = matches();
 
-    // Searching must reach into every vendor: a match hidden behind a closed
-    // header looks like no result at all.
-    const searching = query.length > 0;
-    const shown = list.filter(
-      (option) => searching || !option.group || !collapsed.has(option.group),
-    );
+    const shown = list.filter((option) => !option.group || !folded(option.group));
     if (cursor >= shown.length) cursor = Math.max(0, shown.length - 1);
 
     // Only the body is rebuilt: replacing the menu itself would take the
@@ -2828,7 +3026,7 @@ function makePicker(id, onPick, extra) {
       if (option.group && option.group !== lastGroup) {
         lastGroup = option.group;
         const group = option.group;
-        const header = el("button", "menu-group" + (collapsed.has(group) && !searching ? "" : " open"));
+        const header = el("button", "menu-group" + (folded(group) ? "" : " open"));
         header.type = "button";
         header.appendChild(el("span", "chev"));
         // The vendor's mark leads its header, so a folded list reads as a
@@ -2844,15 +3042,16 @@ function makePicker(id, onPick, extra) {
         header.appendChild(el("span", "g-count", String(counts.get(group) || 0)));
         header.addEventListener("click", (e) => {
           e.stopPropagation();
-          if (collapsed.has(group)) collapsed.delete(group);
-          else collapsed.add(group);
+          const set = query ? searchFolded : collapsed;
+          if (set.has(group)) set.delete(group);
+          else set.add(group);
           cursor = 0;
           paint();
         });
         body.appendChild(header);
       }
 
-      if (option.group && collapsed.has(option.group) && !searching) continue;
+      if (option.group && folded(option.group)) continue;
       const i = visibleIndex++;
       const item = el(
         "button",
@@ -2865,6 +3064,10 @@ function makePicker(id, onPick, extra) {
       const mark = option.mark && option.mark();
       if (mark) item.appendChild(mark);
       item.appendChild(el("span", "menu-label", option.label));
+      // Beside the name rather than out at the right margin where sub sits:
+      // this qualifies the model it is attached to, and a badge floated away
+      // from its name is a badge the eye has to pair up again on every row.
+      if (option.tag) item.appendChild(el("span", "m-tag", option.tag));
       if (option.sub) item.appendChild(el("span", "sub", option.sub));
       item.addEventListener("click", () => {
         close();
@@ -2888,10 +3091,14 @@ function makePicker(id, onPick, extra) {
 
     // Everything folded except the vendor holding the current model: opening
     // onto a dozen closed headers hides the one answer the user already has.
+    // A picker may name groups that always open as well — the model picker's
+    // own plan, which is where someone looking for a model should land first.
     collapsed.clear();
     const current = options.find((option) => option.value === value);
+    const alwaysOpen = new Set(opts.openGroups || []);
     for (const option of options) {
-      if (option.group && option.group !== (current && current.group)) collapsed.add(option.group);
+      if (!option.group || alwaysOpen.has(option.group)) continue;
+      if (option.group !== (current && current.group)) collapsed.add(option.group);
     }
     cursor = Math.max(0, visible().findIndex((option) => option.value === value));
     // Searching costs a row of chrome and is pointless below a handful of
@@ -2912,6 +3119,7 @@ function makePicker(id, onPick, extra) {
   };
 
   search.addEventListener("input", () => {
+    if (search.value !== query) searchFolded.clear();
     query = search.value;
     cursor = 0;
     paint();
@@ -3035,6 +3243,7 @@ const modelPicker = makePicker(
     });
     return link;
   },
+  { openGroups: ["official"] },
 );
 const modePicker = makePicker("mode-picker", (mode) => void api("/mode", { session: activeId, mode }).then(applyState));
 
@@ -3437,7 +3646,7 @@ function workGroup() {
   if (!group) {
     group = el("details", "work");
     const summary = el("summary");
-    summary.appendChild(el("span", "work-label", "Working"));
+    summary.appendChild(el("span", "work-label", t("work.working")));
     group.appendChild(summary);
     group.appendChild(el("div", "work-body"));
     parent.appendChild(group);
@@ -3445,10 +3654,127 @@ function workGroup() {
   return group;
 }
 
+/**
+ * A run of tool calls, said in a line: what was done, not how many steps it
+ * took.
+ *
+ * "3 steps" was true and told nobody anything; the reason to look at a folded
+ * group is to know whether it is the part worth opening. So the line is built
+ * from the calls themselves. A call that says what it is for — a command's
+ * description, a subagent's task — is quoted; the rest are named by what they
+ * do, and neighbours of one kind are counted rather than listed ("Read 3
+ * files"). While a call is running its phrase is in the present ("Running a
+ * command"), and a failure leads, in red, because that is the one thing
+ * nobody should have to open the group to find. Two phrases are shown and the
+ * rest counted, which is how Claude Code's desktop app reads.
+ */
 function bumpWorkLabel(group) {
-  const count = group.querySelector(".work-body").children.length;
-  group.querySelector(".work-label").textContent =
-    count === 1 ? "1 step" : count + " steps";
+  const cards = [...group.querySelectorAll(":scope > .work-body > details.tool")];
+  const phrases = [];
+  let failed = false;
+  let failures = 0;
+  for (const card of cards) {
+    const info = card.toolInfo || {};
+    const state = card.classList.contains("failed") ? "failed" : card.classList.contains("done") ? "done" : "running";
+    const input = info.input && typeof info.input === "object" ? info.input : {};
+    const described = typeof input.description === "string" ? input.description.trim() : "";
+    if (state === "failed") {
+      failed = true;
+      // First, not in sequence: counted into a "+2" it would be the one
+      // phrase the red line is about and the one it does not show.
+      phrases.splice(failures++, 0, { text: failedPhrase(info.name, input, described) });
+      continue;
+    }
+    if (described) {
+      phrases.push({ text: described });
+      continue;
+    }
+    const kind = workKind(info.name);
+    const last = phrases.at(-1);
+    if (last && last.kind === kind && last.state === state) {
+      last.count += 1;
+      continue;
+    }
+    phrases.push({ kind, state, count: 1, name: info.name, input });
+  }
+
+  const texts = phrases.map((phrase) => phrase.text || kindPhrase(phrase));
+  const shown = texts.slice(0, 2).map((text, i) => (i ? lowerFirst(text) : text));
+  let label = shown.join(t("work.sep"));
+  if (texts.length > 2) label += " +" + (texts.length - 2);
+  group.querySelector(".work-label").textContent = label || t("work.working");
+  group.classList.toggle("failed", failed);
+}
+
+/** Which verb a tool gets when it did not say what it was for. */
+function workKind(name) {
+  if (name === "bash") return "command";
+  if (name === "read" || name === "artifact_read" || name === "mcp_read_resource") return "read";
+  if (name === "write" || name === "artifact_write") return "write";
+  if (name === "edit") return "edit";
+  if (name === "list" || name === "mcp_list_resources") return "list";
+  if (name === "glob" || name === "grep") return "search";
+  if (name === "recall" || name === "memory") return "recall";
+  if (name === "todo_write") return "plan";
+  if (name === "skill") return "skill";
+  if (name === "ask_user") return "ask";
+  return "other";
+}
+
+/** The last segment of a path, which is what a person recognises. */
+function baseName(value) {
+  if (typeof value !== "string" || !value) return "";
+  return value.replace(/\/+$/, "").split("/").pop() || value;
+}
+
+function kindPhrase(phrase) {
+  const now = phrase.state === "running";
+  const many = phrase.count > 1;
+  const file = baseName(phrase.input.path);
+  switch (phrase.kind) {
+    case "command":
+      return now ? t("work.commandNow") : many ? t("work.commandN", { n: phrase.count }) : t("work.command");
+    case "read":
+    case "write":
+    case "edit":
+      if (now) return t("work." + phrase.kind + "Now", { file: file || "…" });
+      if (many) return t("work." + phrase.kind + "N", { n: phrase.count });
+      return t("work." + phrase.kind, { file: file || "…" });
+    case "list":
+      // No path is the working directory, and "Listed ." reads as a typo.
+      if (!file || file === ".") return t(now ? "work.listHereNow" : "work.listHere");
+      return t(now ? "work.listNow" : "work.list", { dir: file });
+    case "search":
+      return now ? t("work.searchNow") : many ? t("work.searchN", { n: phrase.count }) : t("work.search");
+    case "recall":
+    case "plan":
+    case "ask":
+      return t("work." + phrase.kind + (now ? "Now" : ""));
+    case "skill":
+      return t(now ? "work.skillNow" : "work.skill", { name: String(phrase.input.name || "") });
+    default:
+      return t(now ? "work.otherNow" : "work.other", { tool: toolTitle(phrase.name, phrase.input) });
+  }
+}
+
+function failedPhrase(name, input, described) {
+  if (name === "bash") {
+    const command = typeof input.command === "string" ? input.command.trim().split("\n")[0] : "";
+    const what = described || (command.length > 32 ? command.slice(0, 32) + "…" : command);
+    return t("work.failedRun", { what: what || t("work.aCommand") });
+  }
+  return t("work.failed", { tool: described || toolTitle(name, input) });
+}
+
+/**
+ * The second phrase continues a sentence, so it starts lower-case — unless it
+ * opens with a name or an acronym, which keeps its capital.
+ */
+function lowerFirst(text) {
+  if (text.length > 1 && text[1] === text[1].toLowerCase() && /^[A-Z]/.test(text)) {
+    return text[0].toLowerCase() + text.slice(1);
+  }
+  return text;
 }
 
 // --- tool presentation -----------------------------------------------------
@@ -3569,15 +3895,61 @@ function catalogSummary(text) {
   return "";
 }
 
-function toolCard(id, title, name, input) {
+/**
+ * A card for a call the model is still writing: the name is known, the
+ * arguments are not. Without it a long file write was a reply that said "now
+ * writing the file" and then showed nothing until the whole file had streamed.
+ */
+function pendingToolCard(id, name) {
+  if (P.tools.has(id)) return;
   const card = el("details", "tool");
   const summary = el("summary");
   summary.appendChild(el("span", "dot"));
-  summary.appendChild(el("span", "name", toolTitle(name, input, title)));
+  summary.appendChild(el("span", "name", toolTitle(name)));
   summary.appendChild(el("span", "ms", ""));
   card.appendChild(summary);
-
   const body = el("div", "tool-body");
+  card.appendChild(body);
+
+  card.toolInfo = { name };
+  const group = workGroup();
+  group.querySelector(".work-body").appendChild(card);
+  bumpWorkLabel(group);
+  P.tools.set(id, { card, body, name, input: undefined, group, pending: true });
+  P.streaming = null;
+  follow();
+}
+
+/**
+ * Drop the cards for calls that were announced and never ran — an unknown tool
+ * or bad input is answered without a tool_start, and a retried request gets
+ * fresh ids. Left alone they would pulse forever.
+ */
+function dropPendingTools() {
+  for (const [id, entry] of P.tools) {
+    if (!entry.pending) continue;
+    entry.card.remove();
+    P.tools.delete(id);
+    const count = entry.group.querySelector(".work-body").children.length;
+    if (count) bumpWorkLabel(entry.group);
+    else entry.group.remove();
+  }
+}
+
+function toolCard(id, title, name, input) {
+  const announced = P.tools.get(id);
+  const card = announced ? announced.card : el("details", "tool");
+  if (announced) {
+    card.querySelector(".name").textContent = toolTitle(name, input, title);
+  } else {
+    const summary = el("summary");
+    summary.appendChild(el("span", "dot"));
+    summary.appendChild(el("span", "name", toolTitle(name, input, title)));
+    summary.appendChild(el("span", "ms", ""));
+    card.appendChild(summary);
+  }
+
+  const body = announced ? announced.body : el("div", "tool-body");
   // An app call is its arguments; the app, tool and version are already the
   // title or plumbing. A call with nothing to show gets no "input" label over
   // an empty {} — which was most of what a catalog lookup used to draw. A
@@ -3594,6 +3966,15 @@ function toolCard(id, title, name, input) {
       body.appendChild(pre);
     }
   }
+  card.toolInfo = { name, input };
+  if (announced) {
+    P.tools.set(id, { card, body, name, input, group: announced.group });
+    // The arguments have arrived, and with them the description or the path
+    // the line was waiting for.
+    bumpWorkLabel(announced.group);
+    follow();
+    return;
+  }
   card.appendChild(body);
 
   const group = workGroup();
@@ -3609,6 +3990,8 @@ function finishTool(id, result, ms, isError) {
   if (!entry) return;
   entry.card.classList.add(isError ? "failed" : "done");
   entry.card.querySelector(".ms").textContent = ms + "ms";
+  // Running becomes ran, or the group turns red.
+  if (entry.group) bumpWorkLabel(entry.group);
 
   const text = (result || []).map((part) => (part.type === "text" ? part.text : "")).join("");
   entry.body.appendChild(el("div", "label", isError ? "error" : "result"));
@@ -3906,6 +4289,24 @@ function toggleProject(cwd, open) {
   paintSessions();
 }
 
+/** The key the routine group's open state is kept under, beside the projects'. */
+const ROUTINE_GROUP = "\u0000routines";
+
+/**
+ * The header over routine runs. A fold like a project's, with the clock the
+ * Routines page uses, and none of a project's actions: there is no new session
+ * to start in it, and deleting runs is done row by row.
+ */
+function routineHead(count, open) {
+  const head = el("button", "fold" + (open ? " open" : ""));
+  head.type = "button";
+  head.appendChild(navIcon("nav-routines"));
+  head.appendChild(el("span", "fold-name", t("session.routines")));
+  head.appendChild(el("span", "count", String(count)));
+  head.addEventListener("click", () => toggleProject(ROUTINE_GROUP, open));
+  return head;
+}
+
 /** A project header: a folder, a name, and how many sessions it holds. */
 function projectHead(cwd, name, count, open) {
   const head = el("button", "fold" + (open ? " open" : ""));
@@ -3949,7 +4350,17 @@ function projectHead(cwd, name, count, open) {
   more.addEventListener("click", (e) => {
     e.stopPropagation();
     if (menuRow === head) return closeRowMenu();
+    openMenu(more);
+  });
+  // The same menu under the pointer: a right-click on a project is asking for
+  // it, and the browser's own (Back, Reload, View Source) is about the page.
+  head.addEventListener("contextmenu", (e) => {
+    e.preventDefault();
+    e.stopPropagation();
+    openMenu(pointAnchor(e));
+  });
 
+  function openMenu(anchor) {
     // Armed once before it fires, like the session row it borrows from: this
     // is a modal's worth of consequence reached from a list row, and the
     // consequence is spelled out where a dialog would put it.
@@ -3958,7 +4369,7 @@ function projectHead(cwd, name, count, open) {
         del.classList.add("armed");
         del.querySelector(".menu-label").textContent = t("projects.deleteConfirm");
         rowMenu.replaceChildren(el("div", "menu-note", t("projects.deleteNote")), del);
-        placeRowMenu(more);
+        placeRowMenu(anchor);
         return;
       }
       closeRowMenu();
@@ -3971,6 +4382,20 @@ function projectHead(cwd, name, count, open) {
         closeRowMenu();
         void chooseProject(cwd);
       } }),
+      menuItem(t("projects.rename"), { key: "n", run: () => {
+        closeRowMenu();
+        void renameProjectUi(cwd, name);
+      } }),
+      menuItem(t(IS_MAC ? "projects.revealMac" : IS_WIN ? "projects.revealWin" : "projects.reveal"), { key: "f", run: () => {
+        closeRowMenu();
+        void api("/reveal", { path: cwd }).then((body) => {
+          if (body && body.error) addNotice(body.error, "err");
+        });
+      } }),
+      menuItem(t("projects.export"), { key: "e", run: () => {
+        closeRowMenu();
+        exportProjectUi(cwd);
+      } }),
       menuItem(t(pinned ? "projects.unpin" : "projects.pin"), { key: "p", run: () => {
         closeRowMenu();
         void togglePin("project", cwd, !pinned);
@@ -3992,8 +4417,8 @@ function projectHead(cwd, name, count, open) {
       } }));
     }
     items.push(menuSep(), del);
-    openRowMenu(more, head, items);
-  });
+    openRowMenu(anchor, head, items);
+  }
 
   // The header is a button, so the menu control cannot live inside it.
   const wrap = el("div", "fold-row");
@@ -4147,8 +4572,14 @@ function paintSessions() {
   const active = sessionRows.find((s) => s.current);
   const here = active ? active.cwd : (projects.find((p) => p.current) || {}).path;
 
+  // A routine's runs are kept together rather than mixed into the project's
+  // own work: they arrive on their own, often overnight, and the question
+  // someone opens them with is "what did my routines do", not "what was I
+  // doing in this project". Claude Code's desktop app draws the same line.
+  const scheduled = sessionRows.filter((s) => s.routine);
   const byProject = new Map();
   for (const s of sessionRows) {
+    if (s.routine) continue;
     const key = s.cwd || "";
     if (!byProject.has(key)) byProject.set(key, []);
     byProject.get(key).push(s);
@@ -4172,7 +4603,19 @@ function paintSessions() {
   // Everything here belongs to the project already named at the top of the
   // sidebar: a header repeating it is noise, and the rows do not need
   // indenting under a heading that is not there.
-  const named = !(order.length === 1 && order[0] === here);
+  const named = !(order.length === 1 && order[0] === here) || scheduled.length > 0;
+
+  if (scheduled.length) {
+    const open = ROUTINE_GROUP in projectOpen ? projectOpen[ROUTINE_GROUP] === true : true;
+    sessionList.appendChild(routineHead(scheduled.length, open));
+    if (open) {
+      const all = showingAll.has(ROUTINE_GROUP) || scheduled.length <= PREVIEW + 1;
+      for (const s of all ? scheduled : scheduled.slice(0, PREVIEW)) {
+        sessionList.appendChild(sessionRow(s, true));
+      }
+      if (!all) sessionList.appendChild(showMore(ROUTINE_GROUP, true));
+    }
+  }
 
   for (const cwd of order) {
     const list = arrange(byProject.get(cwd), (s) => s.id, sessionOrder[cwd], (s) => s.pinned);
@@ -4387,6 +4830,15 @@ function menuSep() {
   return el("div", "menu-sep");
 }
 
+/**
+ * Something placeRowMenu can hang a menu from when there is no button: the
+ * point a right-click landed on, as a rectangle with no size.
+ */
+function pointAnchor(e) {
+  const rect = { left: e.clientX, right: e.clientX, top: e.clientY, bottom: e.clientY, width: 0, height: 0 };
+  return { getBoundingClientRect: () => rect };
+}
+
 function openRowMenu(button, row, items) {
   closeRowMenu();
   rowMenu.replaceChildren(...items);
@@ -4415,6 +4867,13 @@ document.addEventListener("keydown", (e) => {
 });
 window.addEventListener("resize", closeRowMenu);
 sessionList.addEventListener("scroll", closeRowMenu);
+// Nowhere in the sidebar is the browser's menu the one meant: a row answers
+// with its own above, and the space between rows answers with nothing rather
+// than with Back, Reload and View Source. Text fields keep theirs — paste.
+sidebarEl.addEventListener("contextmenu", (e) => {
+  if (e.target.closest("input, textarea, [contenteditable]")) return;
+  e.preventDefault();
+});
 
 function sessionRow(s, nested) {
   const item = el("div", "session" + (s.current ? " active" : "") + (nested ? " nested" : ""));
@@ -4469,7 +4928,17 @@ function sessionRow(s, nested) {
   more.addEventListener("click", (e) => {
     e.stopPropagation();
     if (menuRow === item) return closeRowMenu();
+    openMenu(more);
+  });
+  // Right-click opens the row's own menu where the pointer is, instead of the
+  // browser's, which has nothing to say about a session.
+  item.addEventListener("contextmenu", (e) => {
+    e.preventDefault();
+    e.stopPropagation();
+    openMenu(pointAnchor(e));
+  });
 
+  function openMenu(anchor) {
     // A transcript cannot be recovered, so the item asks once rather than
     // deleting on the click that opened the menu — but a modal for something
     // reached from a list row is heavier than what it protects against. The
@@ -4479,14 +4948,14 @@ function sessionRow(s, nested) {
         del.classList.add("armed");
         del.querySelector(".menu-label").textContent = t("session.deleteConfirm");
         rowMenu.replaceChildren(el("div", "menu-note", t("session.deleteNote")), del);
-        placeRowMenu(more);
+        placeRowMenu(anchor);
         return;
       }
       closeRowMenu();
       void deleteSession(s.id);
     } });
 
-    openRowMenu(more, item, [
+    openRowMenu(anchor, item, [
       menuItem(t(s.pinned ? "session.unpin" : "session.pin"), { key: "p", run: () => {
         closeRowMenu();
         void togglePin("session", s.id, !s.pinned);
@@ -4504,7 +4973,7 @@ function sessionRow(s, nested) {
       menuSep(),
       del,
     ]);
-  });
+  }
   item.appendChild(more);
 
   item.addEventListener("click", () => {
@@ -4648,12 +5117,30 @@ async function loadModels() {
   const markFor = (id) =>
     markers.get(id) || ((extra) => providerMark(id, id, extra));
 
+  // No context window here. It is a number you consult when choosing a model
+  // once, not every time you pick one off a list you already know, and printed
+  // down the right of four hundred rows it competes with the only thing the
+  // row is for — the name. The panel and the provider dialog still carry it,
+  // where a model is being chosen rather than switched to.
   const listed = models.map((m) => ({
     value: m.id,
-    label: m.id,
+    // Without the provider: the group header above the row already names it,
+    // and "official/" repeated down every row pushes the part that differs to
+    // the right. An aggregator's own namespace stays — "~anthropic/…" under
+    // OpenRouter is what tells its rows apart. The whole id is still what
+    // search matches, so typing it as /model takes it works here too.
+    label: m.id.indexOf(m.provider + "/") === 0 ? m.id.slice(m.provider.length + 1) : m.id,
+    keywords: m.id,
     group: m.provider,
     mark: markFor(m.provider),
-    sub: m.contextWindow ? Math.round(m.contextWindow / 1000) + "k" : "",
+    // The id is left whole even where it already ends in ":free". That suffix
+    // is OpenRouter's routing variant and part of the string somebody types
+    // into /model, and trimming it to save the repetition would render
+    // minimax-m2.7 and minimax-m2.7:free as the same row — two models that
+    // differ in what they cost, told apart by a badge alone. A vendor whose
+    // free models are not named for it gets the badge and nothing else, which
+    // is the case this exists for.
+    ...(m.free ? { tag: t("models.free") } : {}),
   }));
 
   // A vendor with nothing to list is still an answer. Local servers and the
@@ -4675,10 +5162,14 @@ async function loadModels() {
   // nothing discovered yet landed under four hundred rows of the vendors that
   // had — which put the recommended plan, whose whole roster arrives only
   // after signing in, at the very bottom of the menu meant to sell it.
+  // Within a vendor, the server's order: newest first by family, variants
+  // after their model (model-order.ts). A string sort here put claude-opus-4-5
+  // above claude-opus-5 and scattered :batch rows through the list.
+  const rank = new Map(models.map((m, i) => [m.id, i]));
   modelOptions = listed.concat(stubs).sort(
     (a, b) =>
       (order.get(a.group) ?? 9999) - (order.get(b.group) ?? 9999) ||
-      a.value.localeCompare(b.value),
+      (rank.get(a.value) ?? 0) - (rank.get(b.value) ?? 0),
   );
 
   const current = models.find((m) => m.current);
@@ -4938,6 +5429,12 @@ events.onmessage = (message) => {
     }
 
     case "assistant_message": P.streaming = null; break;
+    case "turn_start": dropPendingTools(); break;
+    case "tool_pending":
+      sealThinking();
+      pendingToolCard(event.toolCallId, event.toolName);
+      startWorking(toolTitle(event.toolName));
+      break;
     case "tool_start":
       sealThinking();
       toolCard(event.toolCallId, event.title, event.toolName, event.input);
@@ -5030,6 +5527,12 @@ events.onmessage = (message) => {
       addNotice(t("memory.extracted", { count: event.notes.length, list: event.notes.map((note) => note.summary).join("; ") }));
       break;
     case "notice": addNotice(event.message); break;
+    // A routine ran: its session is new, and the Routines page, if open, has
+    // a result to show.
+    case "sessions":
+      void loadSessions();
+      if (shownPanel === "nav-routines") void showRoutines();
+      break;
     case "error":
       P.streaming = null;
       // A 402 is not an error to print, it is a screen to open. What the
@@ -5048,6 +5551,7 @@ events.onmessage = (message) => {
     case "done": {
       sealThinking();
       stopWorking();
+      dropPendingTools();
       // The fork point comes from the server: one reply can span several
       // stored messages, and a client-side count would drift the moment tool
       // results land in a message of their own.
@@ -5348,8 +5852,16 @@ function showAsk(event) {
   askState = { request, view, expanded: false, raw: false };
 
   paintAskHead(view, request);
-  askScope.textContent = "";
-  askScope.hidden = true;
+  // Every description is laid out up front, one line each and stacked in one
+  // cell, so hovering swaps the text without resizing the dialog. The rule key
+  // closes each line: a long path is what gets cut, and the tooltip has it all.
+  const ruleKey = askRuleKey(request);
+  for (const line of askScope.children) {
+    const scope = line.dataset.scope;
+    line.textContent = t(scope === "once" ? "ask.scopeOnce" : scope === "session" ? "ask.scopeSession" : "ask.scopeProject", { key: ruleKey });
+    line.title = line.textContent;
+  }
+  askScope.dataset.show = "once";
   renderAskBody();
   // The palette is a convenience; this is a turn waiting on an answer. Two
   // stacked modals would leave the deeper one unreachable behind the newer.
@@ -5412,15 +5924,10 @@ for (const button of ask.querySelectorAll("[data-answer]")) {
   const scope = button.dataset.scope;
   if (!scope) continue;
   const describe = () => {
-    if (!askState) return;
-    askScope.textContent = t(scope === "session" ? "ask.scopeSession" : "ask.scopeProject", {
-      key: askRuleKey(askState.request),
-    });
-    askScope.hidden = false;
+    askScope.dataset.show = scope;
   };
   const hide = () => {
-    askScope.textContent = "";
-    askScope.hidden = true;
+    askScope.dataset.show = "once";
   };
   button.addEventListener("mouseenter", describe);
   button.addEventListener("focus", describe);
@@ -6975,6 +7482,17 @@ const COMMANDS = [
       return void api("/model", { model: arg }).then(pushNotice);
     },
   },
+  {
+    name: "login",
+    arg: "",
+    hint: () => t("cmd.login"),
+    // The same dialog the sidebar's sign-in row opens, so every way in — the
+    // website and the emailed code — is on screen.
+    run: async () => {
+      const account = await getJson("/account");
+      openConnect((account && account.provider) || "official");
+    },
+  },
   {
     name: "mode",
     arg: "mode",
@@ -7193,7 +7711,8 @@ document.getElementById("composer").addEventListener("submit", (e) => {
   if (runCommand(text)) {
     input.value = "";
     input.style.height = "auto";
-      closeAttachMenu();
+    paintMirror();
+    closeAttachMenu();
     return;
   }
   // A question waiting in this tab takes what is typed as its answer. People
@@ -8370,6 +8889,11 @@ async function showModels() {
         if (model.contextWindow) {
           chip.appendChild(el("span", "sub", Math.round(model.contextWindow / 1000) + "k"));
         }
+        // Only ever on a model whose vendor quoted zero for both halves.
+        // The server's isFree is the whole of the decision, so a chip without
+        // this is a model nobody has said is free, not one that is known to
+        // cost something.
+        if (model.free) chip.appendChild(el("span", "free", t("models.free")));
         chip.addEventListener("click", () => {
           track("model_switched", { model: model.id, via: "panel" });
           void api("/model", { session: activeId, id: model.id }).then(async (state) => {
@@ -8551,9 +9075,33 @@ function openConnect(providerId, thenModel) {
   field.autocomplete = "off";
   field.spellcheck = false;
 
-  const hint = el("div", "cn-note");
+  const hint = el("div", "cn-note cn-tip");
   hint.hidden = true;
+  hint.setAttribute("role", "tooltip");
   const why = document.getElementById("cn-why");
+  // In the dialog's column rather than its body, so it floats over the body
+  // instead of taking a place in it. Left from the last opening otherwise.
+  const main = why.closest(".cn-main");
+  for (const old of main.querySelectorAll(":scope > .cn-tip")) old.remove();
+  main.appendChild(hint);
+
+  // A third-party key is the one people hesitate over pasting into a new app,
+  // so the dialog says, in plain sight, where it goes and what does not happen
+  // to it. Not for OHarness's own key, which is ours to issue. And not
+  // "secure": it is a plain file only this account can read, and claiming
+  // more would promise something the file does not do.
+  const thirdParty = provider.id !== "official";
+  // One line, the fact in bold. The path and the file mode are behind the
+  // mark with the rest of the detail, for whoever wants to check.
+  // Who the key goes to, by name: "sent only to Together AI" is a claim a
+  // person can check against the address the request goes to, where "stays
+  // on this computer" alone is not quite true — the provider has to see it.
+  const keptLocal = el("div", "cn-note cn-local");
+  keptLocal.appendChild(svgIcon("lock"));
+  const words = el("span");
+  words.appendChild(el("strong", null, t("models.keyLocalLead")));
+  words.appendChild(document.createTextNode(t("models.keyLocalRest", { provider: provider.label || provider.id })));
+  keptLocal.appendChild(words);
 
   // Hovering shows it, clicking keeps it. Peeking is the common case and a
   // click to see two lines and another to put them away is two clicks more
@@ -8659,6 +9207,7 @@ function openConnect(providerId, thenModel) {
       docs.hidden = true;
     }
     why.hidden = mode !== "key";
+    keptLocal.hidden = !(mode === "key" && thirdParty);
     // Hidden rather than left out, so switching modes does not rebuild a
     // button whose click may already have a sign-in running behind it.
     site.hidden = mode !== "account";
@@ -8827,7 +9376,7 @@ function openConnect(providerId, thenModel) {
     site,
     orCode,
     field,
-    hint,
+    keptLocal,
   );
   // Re-attached on every open: the actions row is markup, so a link left from
   // the last vendor would otherwise point at their key page. The link is built
@@ -9836,6 +10385,7 @@ function openProviderPicker(rest, byProvider) {
           if (model.contextWindow) {
             chip.appendChild(el("span", "sub", Math.round(model.contextWindow / 1000) + "k"));
           }
+          if (model.free) chip.appendChild(el("span", "free", t("models.free")));
           chip.addEventListener("click", (e) => {
             e.preventDefault();
             e.stopPropagation();
@@ -9903,6 +10453,71 @@ document.getElementById("nav-models").addEventListener("click", () => {
 
 // --- routines and settings -------------------------------------------------
 
+/**
+ * Start a routine by describing it.
+ *
+ * A fresh session with the sentence begun, rather than a form: "every weekday
+ * morning, summarise yesterday's commits" is how people say it, and the agent
+ * turns that into a cron and a prompt that stands on its own. A form asked for
+ * five cron fields to express the same thing.
+ */
+async function newRoutine() {
+  await switchTo({ action: "new" });
+  input.value = t("routines.starter");
+  paintMirror();
+  input.focus();
+  input.setSelectionRange(input.value.length, input.value.length);
+}
+
+/** One run as a line: when, how it went, and what it cost. */
+function runSummary(run) {
+  const when = new Date(run.startedAt).toLocaleString();
+  if (run.skipped) return t("routines.skipped", { when });
+  const parts = [t(run.ok ? "routines.lastOk" : "routines.lastFailed", { when })];
+  if (run.catchUp) parts.push(t("routines.catchUp"));
+  parts.push(t("routines.turns", { n: run.turns }));
+  if (run.costUsd) parts.push("$" + run.costUsd.toFixed(4));
+  return parts.join(" · ");
+}
+
+/**
+ * A routine's past runs, fetched when opened.
+ *
+ * Skipped times are listed with the runs, with why: a routine that "didn't
+ * run" is the question this answers, and the answer is usually that the
+ * previous run was still going. A run opens its session — the whole of what
+ * the agent did, not the last paragraph of it.
+ */
+function routineHistory(routine) {
+  const box = el("details", "routine-history");
+  box.appendChild(el("summary", "muted small", t("routines.history")));
+  const list = el("div", "routine-runs");
+  box.appendChild(list);
+  box.addEventListener("toggle", () => {
+    if (!box.open || list.dataset.loaded) return;
+    list.dataset.loaded = "1";
+    list.appendChild(el("div", "muted small", t("routines.loading")));
+    void getJson("/routine/history?name=" + encodeURIComponent(routine.name)).then((body) => {
+      list.replaceChildren();
+      const runs = (body && body.runs) || [];
+      if (!runs.length) return void list.appendChild(el("div", "muted small", t("routines.noRuns")));
+      for (const run of runs) {
+        const line = el(run.sessionId ? "button" : "div", "routine-run small" + (run.ok || run.skipped ? "" : " failed"));
+        line.appendChild(el("span", null, runSummary(run)));
+        if (run.skipped && run.reason === "still-running") {
+          line.appendChild(el("span", "muted", t("routines.stillRunning")));
+        }
+        if (run.sessionId) {
+          line.type = "button";
+          line.addEventListener("click", () => void openSession(run.sessionId, routine.cwd));
+        }
+        list.appendChild(line);
+      }
+    });
+  });
+  return box;
+}
+
 /**
  * Scheduled runs, read from the scheduler rather than kept here.
  *
@@ -9917,41 +10532,88 @@ async function showRoutines() {
   const routines = body.routines;
 
   const panel = el("div", "panel");
-  panel.appendChild(el("h2", null, t("routines.title")));
+  const top = el("div", "row-head");
+  top.appendChild(el("h2", null, t("routines.title")));
+  const addButton = el("button", "ghost", t("routines.add"));
+  addButton.type = "button";
+  top.appendChild(addButton);
+  panel.appendChild(top);
+
+  addButton.addEventListener("click", () => void newRoutine());
 
   if (!routines || !routines.length) {
     panel.appendChild(el("p", "muted", t("routines.none")));
-    panel.appendChild(el("p", "muted",
-      "Add them under \"schedules\" in oharness.config.json — a name, a five-field cron, and the prompt each firing runs."));
+    panel.appendChild(el("p", "muted", t("routines.empty")));
   } else {
     for (const routine of routines) {
       const row = el("div", "row-card");
       const head = el("div", "row-head");
       head.appendChild(el("span", "row-title", routine.name));
       head.appendChild(el("span", "mono row-cron", routine.cron));
-      if (!routine.enabled) head.appendChild(el("span", "tag", "disabled"));
+      if (!routine.enabled) head.appendChild(el("span", "tag", t("routines.paused")));
+      // Where it runs. A routine is made in one project and runs there, from
+      // whichever project is open when its time comes, so the card says which.
+      if (routine.cwd) {
+        const where = el("span", "muted small routine-where", projectName(routine.cwd));
+        where.title = routine.cwd;
+        head.appendChild(where);
+      }
 
       const run = el("button", "ghost", t("routines.run"));
       run.type = "button";
       run.addEventListener("click", () => {
         run.disabled = true;
         run.textContent = t("routines.running");
-        void api("/routine", { name: routine.name }).then(() => showRoutines());
+        void api("/routine", { name: routine.name }).then((result) => {
+          pushNotice(result);
+          void showRoutines();
+        });
       });
       head.appendChild(run);
+      if (routine.removable) {
+        // Paused rather than deleted: the prompt someone got right is kept,
+        // and a routine that should not run this week is one switch away from
+        // running again.
+        const toggle = el("button", "switch");
+        toggle.type = "button";
+        toggle.setAttribute("role", "switch");
+        toggle.setAttribute("aria-checked", routine.enabled ? "true" : "false");
+        const label = routine.enabled ? t("routines.pause") : t("routines.resume");
+        toggle.setAttribute("aria-label", label);
+        toggle.title = label;
+        toggle.addEventListener("click", () => {
+          toggle.disabled = true;
+          void api("/routine/enabled", { name: routine.name, enabled: !routine.enabled }).then((result) => {
+            pushNotice(result);
+            void showRoutines();
+          });
+        });
+        head.appendChild(toggle);
+
+        const remove = el("button", "ghost", t("routines.remove"));
+        remove.type = "button";
+        remove.addEventListener("click", () => {
+          if (!confirm(t("routines.removeConfirm", { name: routine.name }))) return;
+          remove.disabled = true;
+          void api("/routine/remove", { name: routine.name }).then((result) => {
+            pushNotice(result);
+            void showRoutines();
+          });
+        });
+        head.appendChild(remove);
+      }
       row.appendChild(head);
 
       const bits = [];
-      if (routine.nextRunAt) bits.push("next " + new Date(routine.nextRunAt).toLocaleString());
-      if (routine.lastRun) {
-        bits.push((routine.lastRun.ok ? "last ok" : "last failed") +
-          " · " + routine.lastRun.turns + " turns" +
-          (routine.lastRun.costUsd ? " · $" + routine.lastRun.costUsd.toFixed(4) : ""));
+      if (routine.enabled && routine.nextRunAt) {
+        bits.push(t("routines.next", { when: new Date(routine.nextRunAt).toLocaleString() }));
       }
+      if (routine.lastRun) bits.push(runSummary(routine.lastRun));
       if (bits.length) row.appendChild(el("div", "muted small", bits.join("   ·   ")));
       if (routine.lastRun && routine.lastRun.error) {
         row.appendChild(el("div", "err small", routine.lastRun.error));
       }
+      row.appendChild(routineHistory(routine));
       panel.appendChild(row);
     }
   }
@@ -10445,6 +11107,20 @@ async function showSettings() {
       }),
     );
   }
+  // Only in the desktop app: keeping a computer awake is an Electron call, and
+  // a switch a browser tab cannot honour would be one that lies.
+  const keepAwake = await getJson("/keep-awake");
+  if (keepAwake && !keepAwake.error && keepAwake.available) {
+    target = groups.workspace;
+    field(
+      t("settings.keepAwake"),
+      t(keepAwake.enabled ? "settings.keepAwakeOn" : "settings.keepAwakeOff"),
+      t("settings.keepAwakeHint"),
+      toggle(keepAwake.enabled, t("settings.keepAwake"), (next) => {
+        void api("/keep-awake", { enabled: next }).then(showSettings);
+      }),
+    );
+  }
   const sections = [
     ["settings.section.workspace", [groups.workspace]],
     ["settings.section.sync", [groups.sync, groups.memory]],
@@ -10522,25 +11198,49 @@ async function showPermissions() {
   };
 
   // The mode first, because it decides what the rules below are exceptions to.
+  // Drawn on the scale it sits on, so "workspace-write" reads as the middle
+  // of three rather than as a word to look up.
+  const modes = ["read-only", "workspace-write", "full-access"];
   const modeCard = card(t("perms.mode"));
-  modeCard.appendChild(el("div", "mono", workspace.mode || "—"));
+  const modeRow = el("div", "perm-mode");
+  const current = workspace.mode || "";
+  modeRow.appendChild(el("span", "perm-mode-name " + current, current || "—"));
+  if (modes.indexOf(current) >= 0) {
+    const steps = el("div", "perm-mode-steps");
+    for (const mode of modes) steps.appendChild(el("span", "perm-mode-step" + (mode === current ? " on" : ""), mode));
+    modeRow.appendChild(steps);
+  }
+  modeCard.appendChild(modeRow);
+  if (modes.indexOf(current) >= 0) modeCard.appendChild(el("div", "muted small", t("perms.modeHint." + current)));
 
   const rulesCard = card(t("settings.rules"));
   rulesCard.appendChild(el("div", "muted small", t("settings.rulesHint")));
+  const group = (kind, title, items) => {
+    const box = el("div", "perm-group");
+    const head = el("div", "perm-group-head " + kind, title);
+    head.appendChild(el("span", "n", String(items.length)));
+    box.appendChild(head);
+    const chips = el("div", "perm-chips");
+    for (const item of items) {
+      const chip = el("span", "perm-chip " + kind, item);
+      chip.title = item;
+      chips.appendChild(chip);
+    }
+    box.appendChild(chips);
+    rulesCard.appendChild(box);
+  };
   let any = false;
   for (const kind of ["allow", "ask", "deny"]) {
     if (!rules[kind] || !rules[kind].length) continue;
     any = true;
-    rulesCard.appendChild(listing(kind + "  ·  " + rules[kind].length, rules[kind].join("\n")));
+    group(kind, t("perms.kind." + kind), rules[kind]);
   }
   const session = rules.sessionAllow || [];
   if (session.length) {
     any = true;
-    rulesCard.appendChild(listing(
-      t("settings.sessionApproved") + " — " + t("settings.notPersisted"),
-      session.join("\n")));
+    group("session", t("settings.sessionApproved") + " — " + t("settings.notPersisted"), session);
   }
-  if (!any) rulesCard.appendChild(el("div", "muted small", t("perms.noRules")));
+  if (!any) rulesCard.appendChild(el("div", "perm-empty", t("perms.noRules")));
 
   // The roots, and only where they mean anything: in every other mode the
   // list is not consulted, and an editor for it would be a control that does
@@ -10551,6 +11251,7 @@ async function showPermissions() {
     const derived = all.filter((root) => chosen.indexOf(root) < 0);
 
     const writes = card(t("perms.writes"));
+    writes.previousSibling.appendChild(el("span", "perm-count", String(all.length)));
     writes.appendChild(el("div", "muted small", t("perms.writesHint", { n: all.length })));
 
     // Yours, and editable. A textarea rather than a list with buttons because
@@ -10586,12 +11287,25 @@ async function showPermissions() {
     if (derived.length) {
       // "more" only reads right when there were some above it. With nothing
       // configured — the common case — every one of them is derived.
-      writes.appendChild(listing(
-        chosen.length
-          ? t("perms.derivedMore", { n: derived.length })
-          : t("perms.derivedAll", { n: derived.length }),
-        derived.join("\n"),
-        true));
+      const group = el("div", "setting-list");
+      group.appendChild(el("div", "muted small", chosen.length
+        ? t("perms.derivedMore", { n: derived.length })
+        : t("perms.derivedAll", { n: derived.length })));
+      // The last segment is what tells fifty plugin paths apart; the long
+      // shared prefix is dimmed and gives way first when the line is short.
+      const list = el("div", "perm-roots");
+      for (const root of derived) {
+        const cut = root.replace(/[\\/]+$/, "").search(/[^\\/]+$/);
+        const line = el("div", "perm-root");
+        line.title = root;
+        const dir = el("span", "dir");
+        dir.appendChild(el("bdi", null, cut > 0 ? root.slice(0, cut) : ""));
+        line.appendChild(dir);
+        line.appendChild(el("span", "base", cut > 0 ? root.slice(cut) : root));
+        list.appendChild(line);
+      }
+      group.appendChild(list);
+      writes.appendChild(group);
     }
   }
 }
@@ -10657,25 +11371,48 @@ function auditKind(row) {
  * it does not place anything at all.
  */
 function auditList(rows, withDate) {
-  const list = el("div", "mono small audit-list");
+  const list = el("div", "audit-list");
+  let day = "";
   for (const row of rows) {
     const entry = row.entry;
-    const line = el("div", "trail-line");
     const at = new Date(entry.at);
-    const when = withDate
-      ? at.toLocaleDateString(undefined, { month: "short", day: "numeric" }) + " " + at.toLocaleTimeString()
-      : at.toLocaleTimeString();
-    const outcome = auditOutcome(row);
-    const mark = el("span", auditKind(row) === "denied" ? "err" : null, outcome);
-    line.appendChild(el("span", "muted", when + "  "));
-    line.appendChild(mark);
-    line.appendChild(document.createTextNode("  " + (entry.principal || entry.tool)));
-    const notes = [];
-    if (entry.rule) notes.push(entry.rule);
-    if (row.answer && row.answer.remembered) notes.push("remembered " + row.answer.remembered);
+    // Across sessions the date is a heading rather than a column: the same
+    // "Sep 15" forty times over is noise that pushes the tool off the line.
+    if (withDate) {
+      const label = at.toLocaleDateString(undefined, { weekday: "short", month: "short", day: "numeric" });
+      if (label !== day) {
+        day = label;
+        list.appendChild(el("div", "audit-day", label));
+      }
+    }
+    const kind = auditKind(row);
+    const line = el("div", "trail-line audit-row " + kind);
+    line.appendChild(el("span", "audit-time", at.toLocaleTimeString()));
+    line.appendChild(el("span", "audit-pill " + kind, auditOutcome(row)));
+
+    // "Edit(/a/b/c.md)" reads as a tool and what it touched; drawn as one
+    // string the path is as loud as the verb.
+    const label = entry.principal || entry.tool;
+    const what = el("span", "audit-what");
+    const open = label.indexOf("(");
+    if (open > 0 && label.endsWith(")")) {
+      what.appendChild(el("span", "audit-tool", label.slice(0, open)));
+      const arg = el("span", "audit-arg", label.slice(open + 1, -1));
+      arg.title = label.slice(open + 1, -1);
+      what.appendChild(arg);
+    } else {
+      what.appendChild(el("span", "audit-tool", label));
+    }
+    line.appendChild(what);
+
+    const notes = el("span", "audit-notes");
+    if (entry.rule) notes.appendChild(el("span", "audit-tag", entry.rule));
+    if (row.answer && row.answer.remembered) {
+      notes.appendChild(el("span", "audit-tag remembered", "remembered " + row.answer.remembered));
+    }
     // An ask with no answer: the process stopped while the question was up.
-    if (entry.behavior === "ask" && !row.answer) notes.push("unanswered");
-    if (notes.length) line.appendChild(el("span", "muted", "  " + notes.join(" · ")));
+    if (entry.behavior === "ask" && !row.answer) notes.appendChild(el("span", "audit-tag unanswered", "unanswered"));
+    line.appendChild(notes);
     list.appendChild(line);
   }
   return list;
@@ -10754,7 +11491,14 @@ async function showAudit() {
   const seg = (options, chosen, onPick) => {
     const box = el("div", "seg");
     for (const option of options) {
-      const button = el("button", "seg-item" + (option.id === chosen() ? " on" : ""), option.label);
+      const button = el("button", "seg-item" + (option.id === chosen() ? " on" : ""));
+      if (option.color) {
+        const dot = el("span", "seg-dot");
+        dot.style.background = option.color;
+        button.appendChild(dot);
+      }
+      button.appendChild(document.createTextNode(option.label));
+      if (option.count !== undefined) button.appendChild(el("span", "seg-count", String(option.count)));
       button.type = "button";
       button.addEventListener("click", () => {
         if (option.id === chosen()) return;
@@ -10773,8 +11517,15 @@ async function showAudit() {
     (id) => { auditScope = id; void showAudit(); },
   ));
   const filters = ["all", "allowed", "denied", "unanswered"];
+  const rows = auditRows(body.entries);
+  const tally = { all: rows.length, allowed: 0, denied: 0, unanswered: 0 };
+  for (const row of rows) tally[auditKind(row)] += 1;
+  const dots = { allowed: "var(--ok)", denied: "var(--err)", unanswered: "var(--warn)" };
   const filterSeg = seg(
-    filters.map((id) => ({ id, label: t("audit.filter." + id) })),
+    filters.map((id) => ({
+      id, label: t("audit.filter." + id), count: tally[id],
+      ...(dots[id] ? { color: dots[id] } : {}),
+    })),
     () => auditFilter,
     (id) => {
       auditFilter = id;
@@ -10787,7 +11538,6 @@ async function showAudit() {
   controls.appendChild(filterSeg);
   panel.appendChild(controls);
 
-  const rows = auditRows(body.entries);
   const count = el("div", "muted small");
   panel.appendChild(count);
   const listBox = el("div");
@@ -12221,6 +12971,24 @@ async function loadProjects() {
   if (sessionRows.length) paintSessions();
 }
 
+async function renameProjectUi(cwd, name) {
+  const next = window.prompt(t("projects.renamePrompt"), name);
+  if (!next || next.trim() === name) return;
+  const body = await api("/project", { path: cwd, rename: next.trim() });
+  if (body && body.error) return void addNotice(body.error, "err");
+  addNotice(t("projects.renamed", { name: body.project.name }));
+  // Paths key tabs, local open/closed state and drag order. Reloading after
+  // the server has rebuilt the renamed harness drops every stale path at once.
+  window.location.reload();
+}
+
+function exportProjectUi(cwd) {
+  const link = document.createElement("a");
+  link.href = q("/project/export?path=" + encodeURIComponent(cwd));
+  link.download = "";
+  link.click();
+}
+
 function openProjectPicker() {
   const dialog = document.getElementById("project-picker");
   const field = document.getElementById("proj-search");
@@ -12247,6 +13015,25 @@ function openProjectPicker() {
 
       const line = el("div", "proj-row");
       line.appendChild(row);
+      const rename = el("button", "proj-forget", "✎");
+      rename.type = "button";
+      rename.title = t("projects.rename");
+      rename.setAttribute("aria-label", t("projects.rename") + ": " + project.name);
+      rename.addEventListener("click", (e) => {
+        e.stopPropagation();
+        dialog.close();
+        void renameProjectUi(project.path, project.name);
+      });
+      line.appendChild(rename);
+      const archive = el("button", "proj-forget", "↓");
+      archive.type = "button";
+      archive.title = t("projects.export");
+      archive.setAttribute("aria-label", t("projects.export") + ": " + project.name);
+      archive.addEventListener("click", (e) => {
+        e.stopPropagation();
+        exportProjectUi(project.path);
+      });
+      line.appendChild(archive);
       // Not offered for the project this window is standing in: the next
       // switch calls addProject and puts it straight back, so the control
       // would appear to do nothing. Nothing recorded is lost either way —
@@ -12415,6 +13202,7 @@ const paletteListEl = document.getElementById("cmdk-list");
  * the same keyboard already has.
  */
 const IS_MAC = /mac/i.test(navigator.platform || navigator.userAgent || "");
+const IS_WIN = /win/i.test(navigator.platform || navigator.userAgent || "");
 
 /** The rows the current query left on screen, in the order they are drawn. */
 let paletteRows = [];
@@ -12700,6 +13488,53 @@ function paintStarters() {
   }
 }
 
+/**
+ * The desktop shell's update hint. The state lives in the main process, which
+ * decides whether a release gets a dialog or only this row; the page draws it
+ * and passes the click back, where the right question is asked.
+ */
+function paintUpdateHint(state) {
+  const box = document.getElementById("update-hint");
+  if (!box) return;
+  const status = state && state.status;
+  if (status !== "available" && status !== "downloading" && status !== "ready") {
+    box.hidden = true;
+    box.textContent = "";
+    return;
+  }
+  box.hidden = false;
+  box.classList.toggle("important", Boolean(state.important));
+  const button = document.createElement("button");
+  button.type = "button";
+  button.disabled = status === "downloading";
+  if (state.important) button.title = t("update.important");
+  const dot = document.createElement("span");
+  dot.className = "dot";
+  const label = document.createElement("span");
+  label.className = "label";
+  label.textContent =
+    status === "ready"
+      ? t("update.ready")
+      : status === "downloading"
+        ? t("update.downloading", { version: state.version })
+        : t("update.available", { version: state.version });
+  button.append(dot, label);
+  if (status === "downloading") {
+    const pct = document.createElement("span");
+    pct.className = "pct";
+    pct.textContent = (state.percent || 0) + "%";
+    button.append(pct);
+  }
+  button.addEventListener("click", () => window.oharness.updates.act());
+  box.replaceChildren(button);
+}
+if (IS_DESKTOP && window.oharness.updates) {
+  window.oharness.updates.onState(paintUpdateHint);
+  // Asked once as well: a release found before this page loaded (or before a
+  // reopened window) was announced to nobody.
+  window.oharness.updates.state().then(paintUpdateHint, () => {});
+}
+
 void (async () => {
   applyStrings();
   paintStarters();
@@ -12834,6 +13669,7 @@ ${ANALYTICS_STUB}
        people look for one. Signing in is what turns on sync and what lets an
        artifact be published, and until now the only door to it was inside the
        model-provider setup — a place nobody goes to find their account. -->
+  <div id="update-hint" hidden></div>
   <div id="account"></div>
 </aside>
 <div id="scrim"></div>
@@ -13070,11 +13906,11 @@ ${ANALYTICS_STUB}
   </div>
   <div class="dlg-actions">
     <button data-answer="no" class="quiet"><span data-t="ask.no"></span><kbd>esc</kbd></button>
-    <button data-answer="once" class="approve"><span data-t="ask.allow"></span><kbd>↵</kbd></button>
+    <button data-answer="once" data-scope="once" class="approve"><span data-t="ask.allow"></span><kbd>↵</kbd></button>
     <button data-answer="session" data-scope="session"><span data-t="ask.session"></span></button>
     <button data-answer="project" data-scope="project"><span data-t="ask.project"></span></button>
   </div>
-  <div id="ask-scope" class="ask-scope" hidden></div>
+  <div id="ask-scope" class="ask-scope" data-show="once"><span data-scope="once"></span><span data-scope="session"></span><span data-scope="project"></span></div>
 </dialog>
 
 <script>