@saadnvd1/agent-os 0.3.631 → 0.3.639

package/app/api/sessions/[id]/pr/route.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from "next/server";
 import { execFile } from "child_process";
 import { promisify } from "util";
-import { getDb, queries, type Session } from "@/lib/db";
+import { getDb, queries, recordPr, type Session } from "@/lib/db";
 import { gitPush } from "@/lib/git-exec";
 
 const execFileAsync = promisify(execFile);
@@ -129,7 +129,7 @@ export async function GET(request: NextRequest, { params }: RouteParams) {
 
     // Update session with PR info if found
     if (pr) {
-      queries.updateSessionPR(db).run(pr.url, pr.number, pr.state, id);
+      recordPr(db, id, pr);
     }
 
     return NextResponse.json({ pr });
@@ -197,7 +197,7 @@ export async function POST(request: NextRequest, { params }: RouteParams) {
     );
 
     // Save PR info to session
-    queries.updateSessionPR(db).run(pr.url, pr.number, pr.state, id);
+    recordPr(db, id, pr);
 
     return NextResponse.json({ pr }, { status: 201 });
   } catch (error) {

package/app/api/sessions/[id]/setup/route.ts

@@ -16,9 +16,9 @@ export async function GET(
   const { id } = await params;
   const live = getSetup(id);
   if (live) return NextResponse.json({ setup: live });
-  const session = db.prepare(`SELECT * FROM sessions WHERE id = ?`).get(id) as
-    | Session
-    | undefined;
+  const session = db
+    .prepare(`SELECT * FROM session_rows WHERE id = ?`)
+    .get(id) as Session | undefined;
   if (!session)
     return NextResponse.json({ error: "Session not found" }, { status: 404 });
   const link = isRemoteHost(session.host_id) ? hostLink(session.host_id) : null;

package/app/api/tasks/[id]/approve-plan/route.ts

@@ -1,3 +1,4 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { approvePlanNow } from "@/lib/models/plan-step";
 
@@ -7,13 +8,16 @@ export async function POST(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const id = (await params).id;
+  const refused = refuse(request, id, "plan");
+  if (refused) return refused;
   try {
     const body = await request.json().catch(() => ({}));
     const message =
       typeof body?.message === "string" && body.message.trim()
         ? body.message.trim().slice(0, 8000)
         : undefined;
-    const out = await approvePlanNow((await params).id, message);
+    const out = await approvePlanNow(id, message);
     return NextResponse.json({ success: true, model: out.ref });
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);

package/app/api/tasks/[id]/arm/route.ts

@@ -1,8 +1,7 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { db, type Session } from "@/lib/db";
 import { armTask, setArmed } from "@/lib/orchestrator/armed";
-import { callingDevice } from "@/lib/security/device-me";
-import { heldRefusal } from "@/lib/tasks/held";
 
 // { armed: true } merges the task's PR by itself once every gate passes;
 // false takes that back.
@@ -11,8 +10,8 @@ export async function POST(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const id = (await params).id;
-  const held = heldRefusal(id, callingDevice(request));
-  if (held) return NextResponse.json({ error: held }, { status: 403 });
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   const { armed } = await request.json().catch(() => ({}));
   if (typeof armed !== "boolean")
     return NextResponse.json(
@@ -20,7 +19,9 @@ export async function POST(
       { status: 400 }
     );
   const task = db
-    .prepare(`SELECT * FROM sessions WHERE id = ? AND task_status IS NOT NULL`)
+    .prepare(
+      `SELECT * FROM session_rows WHERE id = ? AND task_status IS NOT NULL`
+    )
     .get((await params).id) as Session | undefined;
   if (!task)
     return NextResponse.json({ error: "No such task" }, { status: 404 });

package/app/api/tasks/[id]/chat-facts/route.ts

@@ -2,7 +2,7 @@ import { NextRequest } from "next/server";
 import { blockedReason } from "@/lib/tasks/state";
 import { saidSinceLastMessage } from "@/lib/chat/store";
 import { chatStateNow } from "@/lib/chat/runner";
-import { heldRoute } from "@/lib/tasks/held-routes";
+import { taskRoute } from "@/lib/tasks/contract/authorize";
 
 // GET /api/tasks/:id/chat-facts - what its chat says about being blocked
 // and whether a question is open, for the orchestrator that moved it here.
@@ -11,7 +11,7 @@ export async function GET(
   request: NextRequest,
   ctx: { params: Promise<{ id: string }> }
 ) {
-  return heldRoute(request, ctx, async (task) => {
+  return taskRoute(request, ctx, "holder", async (task) => {
     if (task.view !== "chat") return { blocked: null, turn: null };
     return {
       blocked: blockedReason(saidSinceLastMessage(task.id)),

package/app/api/tasks/[id]/chat-tail/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest } from "next/server";
 import { chatTailText } from "@/lib/orchestrator/read";
-import { heldRoute } from "@/lib/tasks/held-routes";
+import { taskRoute } from "@/lib/tasks/contract/authorize";
 
 // GET /api/tasks/:id/chat-tail?lines= - the last lines of its conversation,
 // for the orchestrator that moved it here to read.
@@ -9,7 +9,7 @@ export async function GET(
   ctx: { params: Promise<{ id: string }> }
 ) {
   const lines = Number(request.nextUrl.searchParams.get("lines")) || 60;
-  return heldRoute(request, ctx, async (task) => ({
+  return taskRoute(request, ctx, "holder", async (task) => ({
     text: task.view === "chat" ? chatTailText(task.id, lines) : "",
   }));
 }

package/app/api/tasks/[id]/checks/route.ts

@@ -2,7 +2,7 @@ import { NextRequest, NextResponse } from "next/server";
 import { db, queries, type Session } from "@/lib/db";
 import { taskChecks } from "@/lib/tasks/checks-view";
 import { LoopError, localTask } from "@/lib/tasks/loop-error";
-import { isMirror } from "@/lib/tasks/remote";
+import { isMirror } from "@/lib/tasks/contract/start";
 
 // GET /api/tasks/:id/checks - the PR head's checks, the tail of a failing
 // job's log, and the review gate's verdict on the head. ?log=0 leaves the

package/app/api/tasks/[id]/diff/route.ts

@@ -2,7 +2,7 @@ import { NextRequest, NextResponse } from "next/server";
 import { db, queries, type Session } from "@/lib/db";
 import { taskDiff } from "@/lib/tasks/diff";
 import { LoopError, localTask } from "@/lib/tasks/loop-error";
-import { isMirror } from "@/lib/tasks/remote";
+import { isMirror } from "@/lib/tasks/contract/start";
 
 // GET /api/tasks/:id/diff - the task's whole change, base to head: a file
 // list with status and line counts; with ?file=<path>, that file's patch.

package/app/api/tasks/[id]/done/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest } from "next/server";
 import { doneSession } from "@/lib/done";
-import { heldRoute } from "@/lib/tasks/held-routes";
+import { taskRoute } from "@/lib/tasks/contract/authorize";
 
 // POST /api/tasks/:id/done - its orchestrator finishes it: the agent stops
 // and the worktree goes. Never a merge (noMerge): an open PR is refused
@@ -9,7 +9,7 @@ export async function POST(
   request: NextRequest,
   ctx: { params: Promise<{ id: string }> }
 ) {
-  return heldRoute(request, ctx, async (task) => ({
+  return taskRoute(request, ctx, "holder", async (task) => ({
     outcome: await doneSession(task.id, { by: "direct", noMerge: true }),
   }));
 }

package/app/api/tasks/[id]/drop/route.ts

@@ -1,12 +1,16 @@
 import { NextRequest, NextResponse } from "next/server";
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { dropTask } from "@/lib/tasks";
 
 export async function POST(
-  _request: NextRequest,
+  request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const id = (await params).id;
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   try {
-    await dropTask((await params).id);
+    await dropTask(id);
     return NextResponse.json({ success: true });
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);

package/app/api/tasks/[id]/export/route.ts

@@ -1,7 +1,6 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { exportOrResume } from "@/lib/tasks/move";
-import { callingDevice } from "@/lib/security/device-me";
-import { heldRefusal } from "@/lib/tasks/held";
 
 // POST /api/tasks/:id/export - stop the agent, push, hand over the task.
 // The caller confirms with /moved, or restarts it here with /resume; if it
@@ -11,8 +10,8 @@ export async function POST(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const id = (await params).id;
-  const held = heldRefusal(id, callingDevice(request));
-  if (held) return NextResponse.json({ error: held }, { status: 403 });
+  const refused = refuse(request, id, "plan");
+  if (refused) return refused;
   try {
     const { to } = await request.json().catch(() => ({}));
     const bundle = await exportOrResume(

package/app/api/tasks/[id]/merge/route.ts

@@ -1,8 +1,8 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { signOffTask } from "@/lib/tasks";
 import { callingDevice } from "@/lib/security/device-me";
 import { isBranchName } from "@/lib/git";
-import { heldRefusal } from "@/lib/tasks/held";
 
 // head: merge only if the PR is still at this commit; the answer names the
 // commit it was pinned to, so another machine forwarding a merge can check.
@@ -11,8 +11,8 @@ export async function POST(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const id = (await params).id;
-  const held = heldRefusal(id, callingDevice(request));
-  if (held) return NextResponse.json({ error: held }, { status: 403 });
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   const { head, base } = await request.json().catch(() => ({}));
   if (
     head !== undefined &&

package/app/api/tasks/[id]/message/route.ts

@@ -3,7 +3,7 @@ import { statusDetector } from "@/lib/status-detector";
 import { deliver } from "@/lib/bus";
 import { sendChatConfirmed } from "@/lib/chat/runner";
 import { cleanRemoteText } from "@/lib/hosts/remote-api";
-import { heldRoute } from "@/lib/tasks/held-routes";
+import { taskRoute } from "@/lib/tasks/contract/authorize";
 
 const MAX_LINE = 40_000;
 
@@ -15,7 +15,7 @@ export async function POST(
   ctx: { params: Promise<{ id: string }> }
 ) {
   const body = await request.json().catch(() => ({}));
-  return heldRoute(request, ctx, async (task) => {
+  return taskRoute(request, ctx, "holder", async (task) => {
     const line = typeof body.line === "string" ? body.line.trim() : "";
     if (!line || line.length > MAX_LINE) throw new Error("Bad message");
     const id = typeof body.id === "string" ? body.id.slice(0, 100) : undefined;

package/app/api/tasks/[id]/model/route.ts

@@ -1,3 +1,4 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { resumeOnModel } from "@/lib/models/resume";
 
@@ -8,10 +9,13 @@ export async function POST(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const id = (await params).id;
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   const { model, message } = await request.json().catch(() => ({}));
   try {
     const result = await resumeOnModel(
-      (await params).id,
+      id,
       model,
       typeof message === "string" && message.trim() ? message : undefined
     );

package/app/api/tasks/[id]/move/route.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { moveTask } from "@/lib/tasks";
 import { getProgress } from "@/lib/tasks/move-progress";
 
@@ -7,9 +8,12 @@ export async function POST(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const id = (await params).id;
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   try {
     const { hostId } = await request.json();
-    const session = await moveTask((await params).id, String(hostId || ""));
+    const session = await moveTask(id, String(hostId || ""));
     return NextResponse.json({ session });
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);

package/app/api/tasks/[id]/moved/route.ts

@@ -1,7 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { markMoved } from "@/lib/tasks/move";
-import { callingDevice } from "@/lib/security/device-me";
-import { heldRefusal } from "@/lib/tasks/held";
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { cleanUpMovedAway } from "@/lib/tasks/moved-away";
 import { runInBackground } from "@/lib/async-operations";
 
@@ -11,14 +10,13 @@ export async function POST(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const id = (await params).id;
-  const held = heldRefusal(id, callingDevice(request));
-  if (held) return NextResponse.json({ error: held }, { status: 403 });
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   const { to } = await request.json().catch(() => ({}));
   markMoved(id, String(to || "another machine").slice(0, 100));
   // A task its orchestrator took back: its agent and worktree here go.
-  if (held === null)
-    runInBackground(async () => {
-      await cleanUpMovedAway(id);
-    }, `moved-away-${id}`);
+  runInBackground(async () => {
+    await cleanUpMovedAway(id);
+  }, `moved-away-${id}`);
   return NextResponse.json({ success: true });
 }

package/app/api/tasks/[id]/plan/route.ts

@@ -0,0 +1,35 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
+import fs from "fs/promises";
+import path from "path";
+import { NextRequest, NextResponse } from "next/server";
+import { db, type Session } from "@/lib/db";
+import { MAX_PLAN_BYTES } from "@/lib/tasks/move-bundle";
+import { PLAN_FILE } from "@/lib/models/plan-step";
+import { expandHome } from "@/lib/tasks/session";
+
+// GET /api/tasks/:id/plan - the plan file of a task whose plan is written, for
+// the machine that placed the plan here and decides what follows it.
+export async function GET(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const id = (await params).id;
+  const refused = refuse(request, id, "plan");
+  if (refused) return refused;
+  const s = db
+    .prepare(`SELECT plan_phase, worktree_path FROM session_rows WHERE id = ?`)
+    .get(id) as Pick<Session, "plan_phase" | "worktree_path"> | undefined;
+  if (!s?.worktree_path)
+    return NextResponse.json({ error: "No such task" }, { status: 404 });
+  let text: string | null = null;
+  try {
+    const read = await fs.readFile(
+      path.join(expandHome(s.worktree_path), PLAN_FILE),
+      "utf8"
+    );
+    text = read.length > MAX_PLAN_BYTES ? read.slice(0, MAX_PLAN_BYTES) : read;
+  } catch {
+    // No plan file was written.
+  }
+  return NextResponse.json({ text, phase: s.plan_phase ?? null });
+}

package/app/api/tasks/[id]/plan-edits/route.ts

@@ -1,6 +1,8 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { db, type Session } from "@/lib/db";
 import { notifyStatusChanged } from "@/lib/status/hub";
+import { setPlan } from "@/lib/db/session-parts";
 
 // Saad's edits to a waiting plan's pieces: which to fold into the one before
 // and which to leave out. Kept on the task and applied when the plan is
@@ -10,6 +12,8 @@ export async function PUT(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const { id } = await params;
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   const body = await request.json().catch(() => ({}));
   const ints = (v: unknown) =>
     Array.isArray(v)
@@ -18,17 +22,14 @@ export async function PUT(
   const merge = ints(body?.merge);
   const drop = ints(body?.drop).filter((n) => !merge.includes(n));
   const session = db
-    .prepare(`SELECT plan_phase FROM sessions WHERE id = ?`)
+    .prepare(`SELECT plan_phase FROM session_rows WHERE id = ?`)
     .get(id) as Pick<Session, "plan_phase"> | undefined;
   if (session?.plan_phase !== "awaiting")
     return NextResponse.json(
       { error: "That task isn't waiting for plan approval" },
       { status: 409 }
     );
-  db.prepare(`UPDATE sessions SET plan_edits = ? WHERE id = ?`).run(
-    JSON.stringify({ merge, drop }),
-    id
-  );
+  setPlan(db, id, { plan_edits: JSON.stringify({ merge, drop }) });
   notifyStatusChanged();
   return NextResponse.json({ success: true, merge, drop });
 }

package/app/api/tasks/[id]/priority/route.ts

@@ -1,4 +1,5 @@
-import { NextResponse } from "next/server";
+import { refuse } from "@/lib/tasks/contract/authorize";
+import { NextRequest, NextResponse } from "next/server";
 import { setPriority } from "@/lib/tasks/queue";
 import { isPriority } from "@/lib/tasks/schedule-types";
 
@@ -9,6 +10,8 @@ export async function PATCH(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const { id } = await params;
+  const refused = refuse(request as NextRequest, id, "open");
+  if (refused) return refused;
   const body = (await request.json().catch(() => null)) as {
     priority?: unknown;
   } | null;

package/app/api/tasks/[id]/resume/route.ts

@@ -1,7 +1,6 @@
+import { refuse } from "@/lib/tasks/contract/authorize";
 import { NextRequest, NextResponse } from "next/server";
 import { resumeHere } from "@/lib/tasks/move-recover";
-import { callingDevice } from "@/lib/security/device-me";
-import { heldRefusal } from "@/lib/tasks/held";
 
 // POST /api/tasks/:id/resume {force?} - start its agent again here, on its
 // conversation. A task left moving asks its target first unless forced.
@@ -10,8 +9,8 @@ export async function POST(
   { params }: { params: Promise<{ id: string }> }
 ) {
   const id = (await params).id;
-  const held = heldRefusal(id, callingDevice(request));
-  if (held) return NextResponse.json({ error: held }, { status: 403 });
+  const refused = refuse(request, id, "open");
+  if (refused) return refused;
   const { force } = await request.json().catch(() => ({}));
   try {
     const result = await resumeHere(id, force === true);

package/app/api/tasks/[id]/stop/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest } from "next/server";
 import { stopSession } from "@/lib/sessions/stop";
-import { heldRoute } from "@/lib/tasks/held-routes";
+import { taskRoute } from "@/lib/tasks/contract/authorize";
 
 // POST /api/tasks/:id/stop - its orchestrator stops the agent; the
 // conversation and worktree are kept.
@@ -8,7 +8,7 @@ export async function POST(
   request: NextRequest,
   ctx: { params: Promise<{ id: string }> }
 ) {
-  return heldRoute(request, ctx, async (task) => ({
+  return taskRoute(request, ctx, "holder", async (task) => ({
     text: await stopSession(task),
   }));
 }

package/app/api/tasks/route.ts

@@ -3,7 +3,7 @@ import { NextRequest, NextResponse } from "next/server";
 import { createTask, listTasks, movedTasks } from "@/lib/tasks";
 import { stampPriority, startOrQueue } from "@/lib/tasks/queue";
 import { isPriority } from "@/lib/tasks/schedule-types";
-import { TASK_CAPABILITIES } from "@/lib/tasks/remote";
+import { TASK_CAPABILITIES } from "@/lib/tasks/contract/types";
 import { ensureProject, type ProjectRef } from "@/lib/tasks/project-ref";
 import { callingDevice } from "@/lib/security/device-me";
 import {
@@ -46,6 +46,7 @@ export async function POST(request: NextRequest) {
       plan,
       plan_reason,
       plan_only,
+      plan_waits,
       priority,
       machine,
       orchestrated,
@@ -76,7 +77,7 @@ export async function POST(request: NextRequest) {
           ? model
           : (parseOverride(model) ?? undefined),
       plan: typeof plan === "boolean" ? plan : undefined,
-      planOnly: plan_only === true ? true : undefined,
+      planOnly: plan_only === true || plan_waits === true ? true : undefined,
       planReason:
         typeof plan_reason === "string" && plan_reason.trim()
           ? plan_reason.trim().slice(0, 200)
@@ -107,6 +108,8 @@ export async function POST(request: NextRequest) {
         id,
         ...opts,
         held,
+        // Another machine's plan stops for it to decide what follows.
+        planWaits: plan_waits === true && !!device ? true : undefined,
         startedVia: "remote",
         startedByDevice: device ?? undefined,
       });

package/app/globals.css

@@ -110,6 +110,34 @@
     0 0 0 4px hsl(var(--primary) / 0.15);
 }
 
+/* One look for every link in the chat feed: it reacts to hover, keyboard focus
+   and touch (:active), since a phone has no hover. */
+@utility chat-link {
+  cursor: pointer;
+  overflow-wrap: anywhere;
+  border-radius: 0.125rem;
+  text-decoration-line: underline;
+  text-decoration-thickness: 1px;
+  text-underline-offset: 2px;
+  transition:
+    color 120ms,
+    background-color 120ms,
+    text-decoration-thickness 120ms;
+  &:hover {
+    color: hsl(var(--primary));
+    background-color: hsl(var(--primary) / 0.1);
+    text-decoration-thickness: 2px;
+  }
+  &:active {
+    color: hsl(var(--primary));
+    background-color: hsl(var(--primary) / 0.2);
+  }
+  &:focus-visible {
+    outline: 2px solid hsl(var(--ring));
+    outline-offset: 2px;
+  }
+}
+
 @utility label-mono {
   font-family: var(--font-geist-mono);
   font-size: 0.6875rem;

package/components/Chat/ChatPanel.tsx

@@ -62,7 +62,7 @@ import { NeedsYouStrip } from "@/components/Orchestrator/NeedsYouStrip";
 import { useResolveQuestion } from "@/data/orchestrators";
 import { needsYouFocus, needsYouFocusActions } from "@/stores/needsYouFocus";
 import { hrefWithSession } from "@/lib/session-url";
-import { isQuestionTool } from "@/lib/chat/turns";
+import { questionSource } from "@/lib/chat/turns";
 import { useViewport } from "@/hooks/useViewport";
 import { useChatCommands } from "./useChatCommands";
 import { copySelection } from "./copy-selection";
@@ -751,16 +751,7 @@ export function ChatPanel({
                   )
                 );
                 window.dispatchEvent(new PopStateEvent("popstate"));
-              } else
-                goTo((all) => {
-                  const asked = all.findLast(
-                    (i) =>
-                      isQuestionTool(i) &&
-                      (i as { input?: { text?: string } }).input?.text ===
-                        item.question.text
-                  );
-                  return asked?.id ?? null;
-                });
+              } else goTo((all) => questionSource(all, item.question.text));
             }}
             onReply={(item) => {
               setReplyTo({ id: item.question.id, text: item.question.text });

package/components/Chat/EventTurns.tsx

@@ -1,7 +1,7 @@
 "use client";
 
 import type { ReactNode } from "react";
-import { ChevronRight, Loader2, MessageCircleQuestion } from "lucide-react";
+import { ChevronRight, Loader2 } from "lucide-react";
 import type { ChatItem } from "@/lib/chat/events";
 import type { EventTurn } from "@/lib/chat/turns";
 import { cn } from "@/lib/utils";
@@ -60,12 +60,6 @@ export function EventTurnRow({
         <span className="text-foreground/80 max-w-[40%] min-w-0 shrink-0 truncate font-medium">
           {turn.task}
         </span>
-        {turn.hasQuestion && (
-          <MessageCircleQuestion
-            className="h-3.5 w-3.5 shrink-0 text-amber-600 dark:text-amber-400"
-            aria-label="Asked a question"
-          />
-        )}
         <span className="min-w-0 flex-1 truncate">{turn.summary}</span>
         {turn.live && (
           <Loader2

package/components/Chat/Markdown.tsx

@@ -49,6 +49,7 @@ const components: Components = {
           href={local ? imageUrl(href) : href}
           target="_blank"
           rel="noreferrer"
+          className="chat-link"
         >
           {children}
         </a>

package/components/Chat/Messages.tsx

@@ -42,7 +42,7 @@ function UserLink({ href }: { href: string }) {
       target={id ? undefined : "_blank"}
       rel={id ? undefined : "noopener noreferrer"}
       onClick={id ? (e) => openSessionLink(e, id) : undefined}
-      className="font-medium [overflow-wrap:anywhere] underline underline-offset-2"
+      className="chat-link font-medium"
     >
       {href}
     </a>

package/lib/approvals/enable.ts

@@ -2,6 +2,7 @@
 // brings what already exists in line with it.
 
 import { db } from "../db";
+import { isRemoteHost } from "../hosts";
 import { reapplyChatModes } from "../chat/settings";
 import { approvePlanNow } from "../models/plan-step";
 import { autoApproveAsk, type AskRow } from "../orchestrator/asks";
@@ -28,10 +29,16 @@ async function sweep(): Promise<void> {
   }
   const plans = db
     .prepare(
-      `SELECT id FROM sessions WHERE plan_phase = 'awaiting' AND task_status = 'running'`
+      `SELECT id, host_id, plan_waits_for_caller FROM session_rows WHERE plan_phase = 'awaiting' AND task_status = 'running'`
     )
-    .all() as { id: string }[];
+    .all() as {
+    id: string;
+    host_id: string;
+    plan_waits_for_caller: number | null;
+  }[];
   for (const p of plans) {
+    // A plan placed here by another machine is that machine's to decide.
+    if (p.plan_waits_for_caller && !isRemoteHost(p.host_id)) continue;
     try {
       await approvePlanNow(p.id, undefined, "no-approvals");
     } catch (e) {