@ucsandman/legcli 0.16.0 → 0.16.1

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 0.16.1 (2026-09-19)
+
+Three things that nagged every session, and the sharecard.
+
+- **The terminal no longer claims "no board is reading claude usage" while
+  one is.** A 429 from the usage endpoint backs the board's poller off for up
+  to ten minutes; the terminal read the stale record as "no board", said so,
+  and started its own reads, one more request a minute at an endpoint already
+  refusing. The poller now writes `next_poll_at` on every attempt, a refusal
+  included, and the terminal stands down while that promise is not overdue
+  (`boardIsPolling`, src/usage.mjs). A board that is genuinely gone still
+  gets the old line and the old fallback.
+- **`leg claude` opens the board only when nobody is looking at it.**
+  `/api/health` reports `viewers`, the count of browser tabs on the event
+  stream; a second terminal on a board that is already on screen adds no tab.
+  A guarded board (share on) says no count and opens as before.
+- **A second claude login fits its row on the capacity strip.** The name
+  column was a fixed 7ch, and "claude/work" ran into its own track. The
+  column is now as wide as the longest login on the strip, set by strip.js,
+  so every row's track still starts flush.
+- **The sharecard reaches X.** robots.txt said `Disallow: /og` to keep the
+  card's source page out of the index, and that prefix also blocked
+  `/og.png`, so X drew a bare link for four days. The line is `/og$` with an
+  explicit `Allow: /og.png`; the card's foot no longer overflows the frame
+  and the image URL is `?v=5`.
+
 ## 0.16.0 (2026-09-19)
 
 The board reads as one product: a polish pass inside the 2026-09-15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ucsandman/legcli",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Usage-limit monitor and automatic handoff for Claude Code, Codex, agy and Grok. Type leg claude|codex|agy|grok and get the same interactive agent with a board alongside, auto-approve on by default, usage tracking per agent and account, a live context handoff bundle, and at the limit the next agent continuing in the same terminal. 14-day free trial, then $79 once, 30-day money-back guarantee.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/scripts/build-docs-site.mjs

@@ -199,13 +199,13 @@ function page ({ slug, title, description, body, headings }) {
 <meta property="og:url" content="${url}">
 <meta property="og:site_name" content="Leg">
 <meta property="og:title" content="${escapeHtml(title)}">
-<meta property="og:image" content="${ORIGIN}/og.png?v=4">
-<meta property="og:image:secure_url" content="${ORIGIN}/og.png?v=4">
+<meta property="og:image" content="${ORIGIN}/og.png?v=5">
+<meta property="og:image:secure_url" content="${ORIGIN}/og.png?v=5">
 <meta property="og:image:type" content="image/png">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="${escapeHtml(title)}">
 <meta name="twitter:description" content="${escapeHtml(description)}">
-<meta name="twitter:image" content="${ORIGIN}/og.png?v=4">
+<meta name="twitter:image" content="${ORIGIN}/og.png?v=5">
 <link rel="preload" href="/fonts/atkinson-hyperlegible-next-var.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/azeret-mono-var.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/style.css">

package/src/attach.mjs

@@ -24,7 +24,7 @@ import { ensure as ensureWorktree, remove as removeWorktree } from './worktree.m
 import { canonPath, realPath, writeJsonAtomic } from './fsx.mjs'
 import { whoami, readShare, isOn as shareIsOn } from './share.mjs'
 import { readAccounts, envFor, refreshAccount } from './accounts.mjs'
-import { recordUsage, markLimited, chooseNext, candidates, fmtReset, WARN_PCT, readUsage, usageIsStale, isAvailable, wallActive, rungLabel, skipLine, keepsConversation as keepsConversationRule } from './usage.mjs'
+import { recordUsage, markLimited, chooseNext, candidates, fmtReset, WARN_PCT, readUsage, usageIsStale, boardIsPolling, isAvailable, wallActive, rungLabel, skipLine, keepsConversation as keepsConversationRule } from './usage.mjs'
 import { entitlement, allows, describe as describeLicense } from './license.mjs'
 import { writeSettings, userStatusLine, transcriptTail as claudeTail, modelAlias, modelFromTranscript, printable } from './taps/claude.mjs'
 import { modelFlagFor } from './buckets.mjs'
@@ -118,9 +118,13 @@ export async function ensureBoard({ open = true, wait = true } = {}) {
   const host = shared ? share.bind : '127.0.0.1'
   const url = `http://${host}:${port}`
   if ((process.env.LEG_NO_BOARD || process.env.BATON_NO_BOARD) === '1') return { url: null, started: false, skipped: true }
-  // the board is opened whether or not this terminal is the one that started
-  // it: `leg claude` in a second terminal still means "show me the board"
-  if (await health(port, host)) { if (open) openBoard(url); return { url, started: false } }
+  // A board that is already up is opened only when nobody is looking at it:
+  // `viewers` is the count of browser tabs on its event stream (src/server.mjs
+  // /api/health). Every `leg claude` used to open one more tab of a board that
+  // was already on screen. A guarded board (share on, 401 on health) says no
+  // count, and is opened as before.
+  const h = await health(port, host)
+  if (h) { if (open && !(Number.isFinite(h.viewers) && h.viewers > 0)) openBoard(url); return { url, started: false } }
   // A board that is merely busy misses the health deadline while still owning
   // the port. Treating that as "no board" spawned a second server that could
   // only die of EADDRINUSE, and the poll below then waited the full fifteen
@@ -620,8 +624,10 @@ async function runLeg({ agent, account, args, session, prompt, boardUrl, autoApp
   // record and, when nothing has refreshed it for five minutes, reads the
   // endpoint itself at the old once-a-minute cadence. A board that is polling
   // keeps that record fresh, so with one up this costs a readUsage() a minute
-  // and no request. Said once, so a terminal doing its own reading is never a
-  // mystery.
+  // and no request. A board backed off by a 429 has promised its next read on
+  // the record (`next_poll_at`), and the terminal waits for it: its own read
+  // would only be one more request at an endpoint already refusing. Said
+  // once, so a terminal doing its own reading is never a mystery.
   let fallbackTimer = null
   if ((agent === 'claude' || agent === 'grok') && !NO_USAGE_POLL) {
     const source = agent === 'claude' ? 'claude usage endpoint' : 'grok billing proxy'
@@ -631,7 +637,10 @@ async function runLeg({ agent, account, args, session, prompt, boardUrl, autoApp
     let announced = false
     const pollUsage = async () => {
       if (!isCurrentLeg(readSession(sid), { pid: child.pid, agent, account })) return
-      if (!usageIsStale(readUsage(agent, account))) return // a board is reading this login
+      // a board is reading this login: its last reading is fresh, or it has
+      // promised the next one (a 429 backs it off, which is not its absence)
+      const own = readUsage(agent, account)
+      if (!usageIsStale(own) || boardIsPolling(own)) return
       if (!announced) { announced = true; say(`no board is reading ${agent} usage, so this terminal reads it itself once a minute`) }
       const r = await readOwn()
       const s = readSession(sid)

package/src/board/board.css

@@ -237,7 +237,10 @@ code { font-family: var(--mono); font-size: 0.94em; }
    name is text: identity is the dot and the fill, never the colour of a word */
 .capacity-strip { display: flex; align-items: flex-start; gap: 12px 32px; flex-wrap: nowrap; min-height: 44px; font-size: var(--t-0); }
 .cap-tokens { display: grid; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); gap: 10px 40px; flex: 1 1 auto; min-width: 0; }
-.cap-token { display: grid; grid-template-columns: 8px 7ch 120px minmax(0, 1fr); align-items: center; gap: 10px; min-height: 28px; }
+/* the name column is as wide as the longest login on the strip (strip.js sets
+   --cap-name on the container): a second claude login reads "claude/work",
+   and a fixed 7ch put the slash over the track */
+.cap-token { display: grid; grid-template-columns: 8px var(--cap-name, 7ch) 120px minmax(0, 1fr); align-items: center; gap: 10px; min-height: 28px; }
 .cap-name { font-weight: var(--w-head); color: var(--text-2); }
 .cap-track { position: relative; flex: none; width: 120px; height: 6px; background: var(--track); border-radius: 999px; box-shadow: var(--sink); overflow: hidden; }
 .cap-fill { position: absolute; inset: 0 auto 0 0; border-radius: 999px; background: var(--calm); }
@@ -704,7 +707,7 @@ dialog::backdrop { background: rgba(0,0,0,.6); }
      with its state word carries the whole fact on its own */
   .capacity-strip { display: block; }
   .cap-tokens { grid-template-columns: 1fr; }
-  .cap-token { grid-template-columns: 8px 7ch minmax(0, 1fr); }
+  .cap-token { grid-template-columns: 8px var(--cap-name, 7ch) minmax(0, 1fr); }
   .cap-track { display: none; }
   .cap-figure { grid-column: 3; text-align: right; }
   .cap-open { margin-left: 0; margin-top: 12px; }

package/src/board/board.js

@@ -68,7 +68,7 @@
   // release lands on disk under a board that was started before it: the page
   // then draws controls the process has no routes for (an empty agent select,
   // no buckets). test/files-version.test.mjs pins this to package.json.
-  const FILES_VERSION = '0.16.0'
+  const FILES_VERSION = '0.16.1'
   const TIMELINE_CAP = 12
   // mirrors LOOPBACK in src/auth.mjs; state.bind is "<host>:<port>" and an IPv6
   // host arrives bracketed

package/src/board/floor.js

@@ -50,7 +50,7 @@
   // name. test/board-updates.test.mjs pins `state.stopped` in this file by
   // source text, which is why the module object keeps the name.
   // pinned to package.json by test/files-version.test.mjs; see board.js FILES_VERSION
-  const FILES_VERSION = '0.16.0'
+  const FILES_VERSION = '0.16.1'
   const state = { es: null, retryMs: 1000, timers: [], stopped: false, sseRequest: 0, floorRequest: 0, trunkRequest: 0, headRequest: 0, cardsRequest: 0, lastReadingAt: null, bind: (typeof location !== 'undefined' && location.host) || '127.0.0.1:4747', pendingFloor: null, pendingCards: null, cards: new Map(), blockers: new Map(), doneOpen: false, ringId: null, scheduler: {}, trunkOff: false }
 
   // What the entry row reads on every render: the terminals (for the repo it

package/src/board/strip.js

@@ -125,6 +125,10 @@
     const box = document.getElementById('capacity-tokens')
     if (!box) return
     box.textContent = ''
+    // the name column fits the longest login on the strip, so "claude/work"
+    // never runs into its own track and every row's track still starts flush
+    const widest = Math.max(7, ...(list || []).map((a) => String(H.accountLabel(a)).length))
+    box.style.setProperty('--cap-name', `${widest}ch`)
     for (const a of list || []) box.appendChild(capToken(a))
   }
 

package/src/server.mjs

@@ -1209,7 +1209,7 @@ export function createBoardServer({ bind, port, token = process.env.LEG_TOKEN ||
         const you = { ...viewer, share: { on: shared, people: shared ? share.people.length : 0 } }
         if (!canCards) return send(res, 200, { ok: true, version: VERSION, you })
         const cards = listCards()
-        return send(res, 200, { ok: true, pid: process.pid, version: VERSION, bind, port, home: canMachine ? home() : null, you, scheduler: { ...schedulerStatus(), in_process: Boolean(sched), max_concurrent: MAX_CONCURRENT }, tools: await detectTools(), columns: columnsFor(cards), cards: cards.length })
+        return send(res, 200, { ok: true, pid: process.pid, version: VERSION, bind, port, home: canMachine ? home() : null, you, viewers: sse.clients.size, scheduler: { ...schedulerStatus(), in_process: Boolean(sched), max_concurrent: MAX_CONCURRENT }, tools: await detectTools(), columns: columnsFor(cards), cards: cards.length })
       }
       if (req.method === 'GET' && path === '/api/adapters') return send(res, 200, { adapters: await adaptersInfo() })
       if (req.method === 'GET' && path === '/api/presets') return send(res, 200, { presets: PRESETS })

package/src/usage-poll.mjs

@@ -19,7 +19,7 @@
 // endpoint reads moved here.
 import { LAYOUT, readAccounts, envFor } from './accounts.mjs'
 import { listSessions, isActive, updateSession, appendEvent } from './sessions.mjs'
-import { recordUsage, noteUsageError } from './usage.mjs'
+import { recordUsage, noteUsageError, notePoll } from './usage.mjs'
 import { fetchClaudeUsage } from './taps/claude-usage.mjs'
 import { fetchGrokUsage } from './taps/grok.mjs'
 import { readCodexUsage } from './taps/codex.mjs'
@@ -202,6 +202,9 @@ export function createUsagePollers({
         if (noted.changed) onLog(`${agent}/${account} usage: ${r.error}`)
       }
       st.delay = r.ok ? intervalMs : Math.min(maxMs, Math.max(intervalMs, st.delay) * 2)
+      // the promise the terminals read (src/usage.mjs boardIsPolling): a backed
+      // off poller is still a poller, and no terminal should read past it
+      try { notePoll(agent, account, Date.now() + st.delay) } catch {}
       return { ...r, changed }
     })()
     st.inFlight = run.finally(() => { st.inFlight = null })

package/src/usage.mjs

@@ -47,7 +47,7 @@ export function readUsage(agent, account = 'default') {
 }
 
 function emptyUsage(agent, account) {
-  return { agent, account, five_hour: null, seven_day: null, limited_until: null, limited_reason: null, limited_at: null, source: null, observed_at: null, available_at: null, updated_at: null, buckets: [], walls: {}, history: {}, extra_usage: null, facts: null, error: null, error_since: null }
+  return { agent, account, five_hour: null, seven_day: null, limited_until: null, limited_reason: null, limited_at: null, source: null, observed_at: null, available_at: null, updated_at: null, buckets: [], walls: {}, history: {}, extra_usage: null, facts: null, error: null, error_since: null, next_poll_at: null }
 }
 
 // The READING's health, which is not the login's health: a 429 from the usage
@@ -82,6 +82,24 @@ export function noteUsageError(agent, account, error, { at = new Date().toISOStr
   return { error: value.error ?? null, error_since: value.error_since ?? null, changed }
 }
 
+// The board's poller says when it will read this login next, on every attempt
+// it makes, a refusal included. A terminal deciding whether to read the login
+// itself (src/attach.mjs) asks this, not the age of the last good reading: a
+// 429 backs the poller off up to ten minutes, and in that window the last
+// reading is stale while a board is still very much on the login. The old
+// test read that as "no board", printed as much, and added a request a minute
+// to an endpoint that was already refusing.
+export function notePoll(agent, account, nextAtMs) {
+  return mutate(agent, account, (u) => { u.next_poll_at = new Date(nextAtMs).toISOString(); return u })
+}
+
+// → true while a poller has promised a next reading that is not yet overdue.
+// The grace covers the endpoint's own timeout on top of the promised moment.
+export function boardIsPolling(u, nowMs = Date.now(), graceMs = 90 * 1000) {
+  const nextMs = Date.parse(u?.next_poll_at ?? '')
+  return Number.isFinite(nextMs) && nowMs <= nextMs + graceMs
+}
+
 // The ring key for a bucket: the kind alone when it is account-wide, the kind
 // and the model when it is scoped ('weekly_scoped:fable').
 export function bucketKey(b) {