@ucsandman/legcli 0.7.0 → 0.9.0

package/src/attach.mjs

@@ -1,5 +1,5 @@
-// attach — `baton claude|codex|agy [args…]`: the normal interactive agent in
-// this terminal, with Baton alongside it. Baton (1) makes sure the board is
+// attach — `leg claude|codex|agy [args…]`: the normal interactive agent in
+// this terminal, with Leg alongside it. Leg (1) makes sure the board is
 // up and opens it once, (2) registers the session so it shows on the board,
 // (3) taps the agent for usage (claude: hooks + status line via --settings;
 // codex: its rollout file; agy: its log), (4) polls git for the files the
@@ -15,7 +15,7 @@ import { fileURLToPath } from 'node:url'
 import { sanitizeEnv } from './env.mjs'
 import { home } from './store.mjs'
 import { get as getAdapter } from './adapters/index.mjs'
-import { AGENTS, HANDOFF_ORDER_CAPABILITY, newSessionId, createSession, readSession, updateSession, appendEvent, takeControl, sessionDir, listSessions, reapLost, isActive, workRoot } from './sessions.mjs'
+import { SUPERVISED_AGENTS, HANDOFF_ORDER_CAPABILITY, newSessionId, createSession, readSession, updateSession, appendEvent, takeControl, sessionDir, listSessions, reapLost, isActive, workRoot } from './sessions.mjs'
 import { ensure as ensureWorktree, remove as removeWorktree } from './worktree.mjs'
 import { canonPath, realPath } from './fsx.mjs'
 import { whoami, readShare, isOn as shareIsOn } from './share.mjs'
@@ -26,17 +26,28 @@ import { writeSettings, userStatusLine, transcriptTail as claudeTail } from './t
 import { ensureTrust, trustLine } from './trust.mjs'
 import { findRollout, createTail, parseLines, readCodexUsage, transcriptTail as codexTail } from './taps/codex.mjs'
 import { scanLog, promptsSince, logSize } from './taps/agy.mjs'
+import { fetchGrokUsage, scanLog as scanGrokLog, promptsSince as grokPromptsSince } from './taps/grok.mjs'
 import { fetchClaudeUsage } from './taps/claude-usage.mjs'
-import { saveSessionBundle, resumePrompt } from './bundle.mjs'
+import { saveSessionBundle, resumePrompt, sessionCommitDelta } from './bundle.mjs'
 import { endSessionPointer } from './resume.mjs'
 import { openBoard, pidfile } from './launcher.mjs'
 import { LAYOUT } from './accounts.mjs'
 import { captureLive } from './live-capture.mjs'
 import { waitForReset, fmtCountdown } from './wait.mjs'
-import { readPreferences, normalizeHandoffOrder } from './preferences.mjs'
+import { readPreferences, normalizeHandoffOrder, resolveAutoApprove } from './preferences.mjs'
+import { prepareHarnessForHandoff, harnessLine } from './harness/index.mjs'
 
 const SRC = dirname(fileURLToPath(import.meta.url))
-const SERVER = join(SRC, 'server.mjs')
+function resolveServer() {
+  const wtMatch = /[\\/]\.(?:leg|baton)-worktrees(?:[\\/].*)?$/.exec(SRC)
+  if (wtMatch) {
+    const root = SRC.slice(0, wtMatch.index)
+    const mainServer = join(root, 'src', 'server.mjs')
+    if (existsSync(mainServer)) return mainServer
+  }
+  return join(SRC, 'server.mjs')
+}
+const SERVER = resolveServer()
 const POLL_MS = Number(process.env.LEG_ATTACH_POLL_MS || process.env.BATON_ATTACH_POLL_MS || 2000)
 const GIT_EVERY = 3 // polls
 const USAGE_MS = Number(process.env.LEG_USAGE_POLL_MS || process.env.BATON_USAGE_POLL_MS || 60000)
@@ -56,7 +67,7 @@ export function isCurrentLeg(session, { pid, agent, account }) {
 // ---- board ----
 function health(port, host = '127.0.0.1') {
   return new Promise((res) => {
-    const req = http.get({ host, port, path: '/api/health', timeout: 1500 }, (r) => {
+    const req = http.get({ host, port, path: '/api/health', timeout: 4000 }, (r) => {
       let d = ''
       r.on('data', (c) => { d += c })
       r.on('end', () => {
@@ -80,15 +91,16 @@ export async function ensureBoard({ open = true } = {}) {
   if (await health(port, host)) return { url, started: false }
   mkdirSync(home(), { recursive: true })
   const logFd = (await import('node:fs')).openSync(join(home(), 'board.log'), 'a')
-  const child = spawn(process.execPath, [SERVER], { detached: true, windowsHide: true, stdio: ['ignore', logFd, logFd], env: { ...process.env, BATON_PORT: String(port), BATON_BIND: host, BATON_QUIET: '0' } })
+  const child = spawn(process.execPath, [SERVER], { detached: true, windowsHide: true, stdio: ['ignore', logFd, logFd], env: { ...process.env, LEG_PORT: String(port), LEG_BIND: host, LEG_QUIET: '0', BATON_PORT: String(port), BATON_BIND: host, BATON_QUIET: '0' } })
   child.unref()
   const t0 = Date.now()
   while (Date.now() - t0 < 15000) {
-    if (await health(port, host)) {
+    const h = await health(port, host)
+    if (h) {
       // only claim the pidfile for a child we actually started: under a race,
-      // another `baton` won the port and ours died on EADDRINUSE — writing our
-      // dead pid would make `baton down` kill nothing and report "not running"
-      const ours = child.exitCode === null && Boolean(child.pid)
+      // another `leg` won the port and ours died on EADDRINUSE — writing our
+      // dead pid would make `leg down` kill nothing and report "not running"
+      const ours = h.pid ? h.pid === child.pid : (child.exitCode === null && Boolean(child.pid))
       if (ours) writeFileSync(pidfile(), JSON.stringify({ pid: child.pid, port, bind: host, children: [child.pid], detached: true, started_by: 'attach', started_at: new Date().toISOString() }, null, 2) + '\n')
       if (open) openBoard(url)
       return { url, started: ours }
@@ -138,13 +150,18 @@ export function isolate({ g, cwd, sid, sessions = reapLost(listSessions()) }) {
 // a binary that is not installed (that spawned ENOENT and killed the session
 // with exit 127 instead of waiting for a reset). Resolves each adapter the way
 // the runner would spawn it (native exe, npm entry, or BATON_<AGENT>_BIN).
+async function loadAdapter(name) {
+  if (name === 'grok') return (await import('./adapters/grok.mjs')).default
+  return getAdapter(name)
+}
+
 let installedCache = null
 async function installedAgents() {
   if (installedCache) return installedCache
   const out = {}
-  for (const name of AGENTS) {
+  for (const name of SUPERVISED_AGENTS) {
     try {
-      const { bin, viaNode, entry } = (await getAdapter(name)).resolve()
+      const { bin, viaNode, entry } = (await loadAdapter(name)).resolve()
       const target = viaNode ? (entry ?? bin) : bin
       if (/[\\/]/.test(target)) out[name] = existsSync(target)
       else { const r = spawnSync(target, ['--version'], { windowsHide: true, encoding: 'utf8', timeout: 8000 }); out[name] = !r.error && r.status === 0 }
@@ -182,26 +199,36 @@ function restoreTerminal() {
 }
 
 // ---- spawn spec per agent ----
-export async function spawnSpec(agent, { account, args, sessionId, prompt, cwd }) {
-  const adapter = await getAdapter(agent)
+export async function spawnSpec(agent, { account, args, sessionId, prompt, cwd, autoApprove = resolveAutoApprove() }) {
+  const adapter = await loadAdapter(agent)
   const { bin, viaNode, entry } = adapter.resolve()
   const argv = []
   // viaNode: either an npm entry (codex bin/codex.js) or a BATON_<AGENT>_BIN that names a .mjs (tests)
   if (viaNode) argv.push(entry ?? bin)
-  // a leg Baton starts on its own (after a hand-off) takes BATON_<AGENT>_ARGS,
+  // a leg Leg starts on its own (after a hand-off) takes BATON_<AGENT>_ARGS,
   // e.g. BATON_CODEX_ARGS="-m gpt-5-mini" to keep a test chain on cheap models
-  if (prompt) args = [...(process.env[`BATON_${agent.toUpperCase()}_ARGS`] ?? '').split(/\s+/).filter(Boolean), ...args]
+  if (prompt) args = [...(process.env[`LEG_${agent.toUpperCase()}_ARGS`] ?? process.env[`BATON_${agent.toUpperCase()}_ARGS`] ?? '').split(/\s+/).filter(Boolean), ...args]
   if (agent === 'claude') {
     const settings = writeSettings(sessionId, { statusLine: userStatusLine(process.env.CLAUDE_CONFIG_DIR || (account !== 'default' ? envFor('claude', account).CLAUDE_CONFIG_DIR : undefined)) })
-    argv.push(...args, '--settings', settings)
+    const autoFlags = autoApprove && !args.includes('--dangerously-skip-permissions') ? ['--dangerously-skip-permissions'] : [] // auto-approve: not forbidden for interactive sessions
+    argv.push(...args, ...autoFlags, '--settings', settings)
     if (prompt) argv.push(prompt)
   } else if (agent === 'codex') {
-    argv.push(...args)
+    const hasApproval = args.includes('--ask-for-approval') || args.includes('-a') || args.some((x) => typeof x === 'string' && x.startsWith('--ask-for-approval='))
+    const autoFlags = autoApprove && !hasApproval ? ['--ask-for-approval', 'never'] : []
+    argv.push(...args, ...autoFlags)
     if (prompt) argv.push(prompt)
   } else if (agent === 'agy') {
     const log = join(sessionDir(sessionId), 'agy.log')
-    argv.push(...args, '--log-file', log)
+    const autoFlags = autoApprove && !args.includes('--dangerously-skip-permissions') ? ['--dangerously-skip-permissions'] : [] // auto-approve: not forbidden for interactive sessions
+    argv.push(...args, ...autoFlags, '--log-file', log)
     if (prompt) argv.push('-i', prompt)
+  } else if (agent === 'grok') {
+    const log = join(sessionDir(sessionId), 'grok.log')
+    const hasApprove = args.includes('--always-approve') || args.includes('--yolo') || args.includes('--approval-mode=yolo') // auto-approve check: not forbidden for interactive sessions
+    const autoFlags = autoApprove && !hasApprove ? ['--always-approve'] : [] // auto-approve: not forbidden for interactive sessions
+    argv.push(...args, ...autoFlags, '--debug-file', log)
+    if (prompt) argv.push(prompt)
   }
   const env = { ...sanitizeEnv(process.env, { interactive: true }), ...envFor(agent, account), LEG_SESSION: sessionId, BATON_SESSION: sessionId }
   return { bin: viaNode ? process.execPath : bin, args: argv, env, cwd }
@@ -209,7 +236,7 @@ export async function spawnSpec(agent, { account, args, sessionId, prompt, cwd }
 
 // ---- one agent leg ----
 // Returns { reason: 'exit'|'limit'|'handoff', code }
-async function runLeg({ agent, account, args, session, prompt, boardUrl }) {
+async function runLeg({ agent, account, args, session, prompt, boardUrl, autoApprove = resolveAutoApprove() }) {
   const sid = session.session_id
   refreshAccount(agent, account)
   // A handoff happens when the limit hits, which is usually when nobody is
@@ -219,7 +246,7 @@ async function runLeg({ agent, account, args, session, prompt, boardUrl }) {
   const trust = ensureTrust(agent, session.cwd, { cwd: session.cwd })
   const trusted = trustLine(trust)
   if (trusted) { say(trusted); appendEvent(sid, { type: 'trust', summary: trusted }) }
-  const spec = await spawnSpec(agent, { account, args, sessionId: sid, prompt, cwd: session.cwd })
+  const spec = await spawnSpec(agent, { account, args, sessionId: sid, prompt, cwd: session.cwd, autoApprove })
   appendEvent(sid, { type: 'leg', summary: `${agent} (${account}) starting${prompt ? ' from the handoff bundle' : ''}` })
   const startedMs = Date.now()
   const turnsAtLegStart = session.turns ?? 0
@@ -227,6 +254,8 @@ async function runLeg({ agent, account, args, session, prompt, boardUrl }) {
   // the end of what the first one wrote, or it walls itself on that leg's line
   const agyLog = agent === 'agy' ? join(sessionDir(sid), 'agy.log') : null
   const agyTail = agyLog ? createTail(agyLog, { from: logSize(agyLog) }) : null
+  const grokLog = agent === 'grok' ? join(sessionDir(sid), 'grok.log') : null
+  const grokTail = grokLog ? createTail(grokLog, { from: logSize(grokLog) }) : null
   let child
   try {
     child = spawn(spec.bin, spec.args, { cwd: spec.cwd, env: spec.env, stdio: 'inherit', windowsHide: false })
@@ -289,6 +318,24 @@ async function runLeg({ agent, account, args, session, prompt, boardUrl }) {
     pollUsage().catch(() => {})
     usageTimer = setInterval(() => pollUsage().catch(() => {}), USAGE_MS)
     usageTimer.unref?.()
+  } else if (agent === 'grok') {
+    const pollUsage = async () => {
+      const configDir = spec.env.GROK_HOME || LAYOUT.grok.home()
+      const r = await fetchGrokUsage({ configDir })
+      const s = readSession(sid)
+      if (!isCurrentLeg(s, { pid: child.pid, agent, account })) return
+      const usable = r.ok && r.limits && (r.limits.five_hour || r.limits.seven_day)
+      if (usable) {
+        recordUsage('grok', account, r.limits, 'grok billing proxy')
+        updateSession(sid, { limits: r.limits, usage_source: 'grok billing proxy', usage_error: null })
+      } else if (!s.usage_error) {
+        const why = r.error ?? 'the usage endpoint answered with no window'
+        updateSession(sid, { usage_error: why }, { event: { type: 'status', summary: `grok usage unavailable: ${why}` } })
+      }
+    }
+    pollUsage().catch(() => {})
+    usageTimer = setInterval(() => pollUsage().catch(() => {}), USAGE_MS)
+    usageTimer.unref?.()
   }
 
   const timer = setInterval(() => {
@@ -351,6 +398,25 @@ async function runLeg({ agent, account, args, session, prompt, boardUrl }) {
           if (s.status === 'starting') patch.status = 'running'
         }
       }
+      // grok: log text + prompts
+      if (agent === 'grok') {
+        const text = grokTail ? grokTail.read().join('\n') : ''
+        const hit = text ? scanGrokLog(text) : null
+        if (hit && s.status !== 'limit') {
+          const u = markLimited('grok', account, { resets_at: hit.resets_at, reason: hit.signal, source: 'grok log' })
+          patch.status = 'limit'; patch.limit = { reason: hit.signal, detail: hit.detail, resets_at: hit.resets_at ?? u.limited_until, at: new Date().toISOString() }
+          appendEvent(sid, { type: 'limit', summary: `grok limit (${hit.signal}): ${hit.detail.slice(0, 160)}` })
+          try { captureLive('grok', hit.signal, { log_excerpt: hit.detail, resets_at: hit.resets_at }, { sessionId: sid }) } catch {}
+        }
+        const prompts = grokPromptsSince({ grokHome: spec.env.GROK_HOME || LAYOUT.grok.home(), cwd: s.cwd, sinceMs: startedMs })
+        const turns = turnsAtLegStart + prompts.length
+        if (prompts.length && turns !== (s.turns ?? 0)) {
+          patch.turns = turns; patch.last_activity = new Date().toISOString()
+          if (!s.task) patch.task = prompts[0].text.slice(0, 500)
+          if (!s.agent_session_id && prompts[0].sessionId) patch.agent_session_id = prompts[0].sessionId
+          if (s.status === 'starting') patch.status = 'running'
+        }
+      }
       // warning threshold (every agent; claude's limits arrive via the usage poller)
       {
         const lim = patch.limits ?? s.limits
@@ -428,14 +494,14 @@ function messagesFor(agent, s) {
 // an order save is consumed here, or the editor sees handing_off and refuses.
 // No eligible choice leaves the session unclaimed so all-out waiting can keep
 // accepting order edits.
-export function claimHandoffChoice({ sid, agent, account, installed, bundle = null, reason = 'limit', nowS = Math.floor(Date.now() / 1000) }) {
+export function claimHandoffChoice({ sid, agent, account, installed, bundle = null, reason = 'limit', nowS = Math.floor(Date.now() / 1000), exclude = [] }) {
   let choice = { next: null, out: [] }
   let claimed = false
   const session = updateSession(sid, (current) => {
     const accounts = readAccounts()
     const order = normalizeHandoffOrder(current.handoff_order)
-    choice = chooseNext({ agent, account, accounts, installed, order, nowS })
-    if (!choice.next && isAvailable(readUsage(agent, account), nowS)) choice = { next: { agent, account }, out: [] }
+    choice = chooseNext({ agent, account, accounts, installed, order, nowS, exclude })
+    if (!choice.next && isAvailable(readUsage(agent, account), nowS) && !exclude.some((x) => x.agent === agent && x.account === account)) choice = { next: { agent, account }, out: [] }
     if (!choice.next) return {}
     claimed = true
     return {
@@ -454,23 +520,47 @@ export function claimHandoffChoice({ sid, agent, account, installed, bundle = nu
   return { choice, claimed, session }
 }
 
+// The portable harness, decided before a leg starts (src/harness/index.mjs).
+// Off by default: then this records nothing and changes nothing. On, it
+// carries the source agent's working environment to the agent about to run,
+// per the saved policy, and the session keeps the outcome so the board can say
+// what transferred and what did not. Never throws into the session.
+function prepareLegHarness({ sid, from, to }) {
+  let outcome
+  try { outcome = prepareHarnessForHandoff({ from, to, sessionId: sid }) } catch (err) { outcome = { state: 'error', policy: 'unknown', proceed: true, to, target: to, reason: String(err.message).slice(0, 200), summary: `harness error: ${String(err.message).slice(0, 120)}` } }
+  if (outcome.state === 'off') return outcome
+  updateSession(sid, { harness: outcome })
+  const line = harnessLine(outcome)
+  if (line) { say(line); appendEvent(sid, { type: outcome.proceed ? 'harness' : 'harness_blocked', summary: line, body: outcome.dropped?.length || outcome.attention?.length ? [...(outcome.attention ?? []).map((a) => `attention ${a.component}: ${a.reason}`), ...(outcome.dropped ?? []).map((d) => `dropped ${d.component}: ${d.item}: ${d.reason}`)].join('\n') : undefined }) }
+  return outcome
+}
+
 // ---- the command ----
 export async function attach(agent, args = [], { open = true } = {}) {
-  if (!AGENTS.includes(agent)) throw new Error(`unknown agent "${agent}" (claude|codex|agy)`)
+  if (!SUPERVISED_AGENTS.includes(agent)) throw new Error(`unknown agent "${agent}" (claude|codex|agy|grok)`)
   // the paid gate: a valid key, or no session (exit 4). The bare agent is never
-  // affected; only what Baton adds is licensed.
+  // affected; only what Leg adds is licensed.
   const ent = entitlement()
   if (!allows(ent, 'run')) { say(describeLicense(ent)); return 4 }
-  // --no-worktree is Baton's flag, not the agent's: it never passes through
+  // --no-worktree is Leg's flag, not the agent's: it never passes through
   const shareCheckout = args.includes('--no-worktree')
   args = args.filter((a) => a !== '--no-worktree')
+  let autoApproveCli = null
+  if (args.includes('--no-auto-approve')) {
+    autoApproveCli = false
+    args = args.filter((a) => a !== '--no-auto-approve')
+  } else if (args.includes('--auto-approve')) {
+    autoApproveCli = true
+    args = args.filter((a) => a !== '--auto-approve')
+  }
+  const autoApprove = resolveAutoApprove({ cliFlag: autoApproveCli })
   const cwd = process.cwd()
   const board = await ensureBoard({ open })
   let accounts = readAccounts()
   const installed = await installedAgents()
   const handoffOrder = readPreferences().handoff_order
   let account = process.env.LEG_ACCOUNT || process.env.BATON_ACCOUNT || 'default'
-  if (!accounts[agent].includes(account)) { say(`no ${agent} account "${account}"; using default`); account = 'default' }
+  if (!(accounts[agent] ?? ['default']).includes(account)) { say(`no ${agent} account "${account}"; using default`); account = 'default' }
   // A persisted wall is only a cache. Ask Codex's read-only account endpoint
   // before using it to skip this login; an explicit true can clear an older
   // wall, false refreshes it, and unknown preserves it.
@@ -478,6 +568,10 @@ export async function attach(agent, args = [], { open = true } = {}) {
     const codexHome = envFor('codex', account).CODEX_HOME || LAYOUT.codex.home()
     await refreshCodexUsage(account, codexHome).catch(() => {})
   }
+  if (agent === 'grok' && installed.grok && !process.env.BATON_GROK_BIN) {
+    const grokHome = envFor('grok', account).GROK_HOME || LAYOUT.grok.home()
+    await fetchGrokUsage({ configDir: grokHome }).catch(() => {})
+  }
   // Start on an account that is not at its wall, if we already know one is.
   const nowS = Math.floor(Date.now() / 1000)
   const u0 = readUsage(agent, account)
@@ -509,11 +603,14 @@ export async function attach(agent, args = [], { open = true } = {}) {
   let prompt = null
   let legArgs = args
   let exit = 0
+  // the first leg is the agent the human chose: its harness is prepared per
+  // policy and recorded, never refused (strict applies to hand-offs)
+  prepareLegHarness({ sid, from: null, to: agent })
   // unbounded: the 12-leg cap below stops a runaway chain, and the all-out wait
   // bounds a wait; a normal session runs one leg and exits
   for (let leg = 0; ; leg++) {
     const s = readSession(sid)
-    const r = await runLeg({ agent, account, args: legArgs, session: s, prompt, boardUrl: board.url })
+    const r = await runLeg({ agent, account, args: legArgs, session: s, prompt, boardUrl: board.url, autoApprove })
     if (r.reason === 'exit') { exit = r.code ?? 0; break }
     // limit or handoff: bundle, choose next, go again in this terminal
     const cur = readSession(sid)
@@ -524,10 +621,14 @@ export async function attach(agent, args = [], { open = true } = {}) {
     // saveSessionBundle writes the notes file before it shells out to chb, so
     // even when chb is missing and the save throws, the context is on disk
     const notesFile = join(workRoot(cur) ?? cur.cwd, '.leg', `session-${sid}.md`)
-    let claim = claimHandoffChoice({ sid, agent, account, installed, bundle, reason: r.reason })
+    // destinations the strict harness policy refused during this hand-off
+    const excluded = []
+    let claim = claimHandoffChoice({ sid, agent, account, installed, bundle, reason: r.reason, exclude: excluded })
     let choice = claim.choice
     let cancelled = false
+    let blocked = false
     while (!choice.next) {
+      if (excluded.length && !choice.out.length) { blocked = true; break }
       // every option is out: keep the terminal, count down to the SOONEST reset
       // (the current agent's own wall included — it may be the first back), then
       // start that option from the bundle. Ctrl-C (or End) quits with exit 3.
@@ -543,7 +644,7 @@ export async function attach(agent, args = [], { open = true } = {}) {
       updateSession(sid, { status: 'waiting', all_out: all, waiting: first ? { agent: first.agent, account: first.account, resets_at: first.resets_at, since: new Date().toISOString() } : null }, { event: { type: 'all_out', summary: `every option is out; waiting for ${label} at ${first ? fmtReset(first.resets_at) : 'unknown'}` } })
       const r2 = await waitInTerminal({ sid, label, resetsAt: first?.resets_at ?? null })
       if (r2 === 'cancelled') { cancelled = true; break }
-      claim = claimHandoffChoice({ sid, agent, account, installed, bundle, reason: r.reason })
+      claim = claimHandoffChoice({ sid, agent, account, installed, bundle, reason: r.reason, exclude: excluded })
       choice = claim.choice
     }
     if (cancelled) {
@@ -551,6 +652,24 @@ export async function attach(agent, args = [], { open = true } = {}) {
       exit = 3
       break
     }
+    // strict harness policy: a destination whose harness cannot be made safe is
+    // refused and the next option is tried; when none is left the session ends
+    // with exit 5 rather than launching an agent without its environment
+    while (!blocked && choice.next) {
+      const prepared = prepareLegHarness({ sid, from: agent, to: choice.next.agent })
+      if (prepared.proceed) break
+      excluded.push(choice.next)
+      say(`${choice.next.agent} refused by the strict harness policy: ${prepared.reason ?? prepared.state}`)
+      claim = claimHandoffChoice({ sid, agent, account, installed, bundle, reason: r.reason, exclude: excluded })
+      choice = claim.choice
+      if (!choice.next) blocked = true
+    }
+    if (blocked) {
+      say('every remaining option was refused by the strict harness policy; stopping (exit 5). Fix what needs attention (leg harness status) or relax the policy (leg harness policy sync), then run leg again in this directory.')
+      updateSession(sid, { status: 'ended', ended_at: new Date().toISOString(), exit_code: 5, waiting: null }, { event: { type: 'ended', summary: 'strict harness policy refused every destination; stopped (exit 5)' } })
+      exit = 5
+      break
+    }
     const next = choice.next
     // bound the number of hand-offs in one terminal so a chain that limits
     // instantly can never loop forever; stopping is explicit, not a silent exit 0
@@ -561,9 +680,15 @@ export async function attach(agent, args = [], { open = true } = {}) {
       break
     }
     appendEvent(sid, { type: 'handoff', summary: `${agent}${account !== 'default' ? '/' + account : ''} → ${next.agent}${next.account !== 'default' ? '/' + next.account : ''}${bundle ? ` (bundle ${bundle.id})` : ''}` })
-    prompt = bundle
-      ? resumePrompt(cur, bundle, next)
-      : `You are taking over an interactive coding session from ${agent}.${existsSync(notesFile) ? ` Read ${notesFile} in this directory first (the previous agent's notes: task, last messages, dirty files).` : ''} Check git status and git diff, then continue the work. The task: ${cur.task ?? 'see the recent changes'}`
+    if (bundle) {
+      prompt = resumePrompt(cur, bundle, next)
+    } else {
+      const delta = sessionCommitDelta(workRoot(cur) ?? cur.cwd, cur)
+      const fallbackAction = delta.isClean && delta.newCommits.length > 0
+        ? `The previous agent committed changes (${delta.newCommits.length} commit(s)) and left a clean working tree. Check git log and verify whether the task is already complete before doing redundant work; continue only if work remains.`
+        : 'Check git status and git diff, then continue the work.'
+      prompt = `You are taking over an interactive coding session from ${agent}.${existsSync(notesFile) ? ` Read ${notesFile} in this directory first (the previous agent's notes: task, last messages, dirty files).` : ''} ${fallbackAction} The task: ${cur.task ?? 'see the recent changes'}`
+    }
     say(`starting ${next.agent}${next.account !== 'default' ? '/' + next.account : ''} in this terminal from the bundle`)
     agent = next.agent; account = next.account; legArgs = []
     // the chain is what comes after the agent now taking over, not after the
@@ -577,7 +702,7 @@ export async function attach(agent, args = [], { open = true } = {}) {
   if (fin && fin.status !== 'ended') updateSession(sid, { status: 'ended', ended_at: new Date().toISOString(), exit_code: exit }, { event: { type: 'ended', summary: `session ended (exit ${exit})` } })
   // Every way out of the loop arrives here: a clean exit, a cancelled wait, the
   // 12-leg cap, an agent that never started. The terminal is gone, so RESUME.md
-  // must stop describing it as live — Baton owns that file, and leaving the last
+  // must stop describing it as live — Leg owns that file, and leaving the last
   // hand-off sitting there is exactly the lie this rewrite exists to stop.
   try { endSessionPointer(readSession(sid)) } catch (err) { appendEvent(sid, { type: 'error', summary: `resume pointer not rewritten: ${err.message.slice(0, 160)}` }) }
   try { rmSync(join(sessionDir(sid), 'control.json'), { force: true }) } catch {}

package/src/auth.mjs

@@ -1,6 +1,6 @@
 // auth — who is allowed in. Loopback with no token is open; any other bind
 // address refuses to start without a token, and with a token every /api
-// request needs `Authorization: Bearer <token>` (timing-safe). With `baton
+// request needs `Authorization: Bearer <token>` (timing-safe). With `leg
 // share` on, each human has their own token and the board knows their name
 // and role (src/share.mjs); a loopback request is still the owner, so the
 // machine's own browser needs nothing.
@@ -75,7 +75,7 @@ export function authorize({ token, req, url, share = null, bind = null, loopback
     return { ok: false, subject: null, person: null }
   }
   // checkBind's invariant, re-applied per request: share.json stops reading as
-  // on (`baton share off`, a truncated file) while the shared address is still
+  // on (`leg share off`, a truncated file) while the shared address is still
   // bound, and nobody but this machine may be the local owner in that window
   if (!token && loopbackOwner === false) return { ok: false, subject: null, person: null }
   if (!token && bind && !isLoopback(bind) && !isLoopback(remoteAddress(req))) return { ok: false, subject: null, person: null }

package/src/board/board.css

@@ -129,6 +129,7 @@
   --id-claude: #FCA169;  /* oklch(0.790 0.130 52) warm */
   --id-codex: #69DBBA;   /* oklch(0.815 0.115 172) cool green */
   --id-agy: #CC97F3;     /* oklch(0.760 0.140 310) violet, 46 degrees clear of the accent */
+  --id-grok: #70B8FF;    /* oklch(0.750 0.130 240) azure blue */
   --id-fake: #A0A6AE;    /* oklch(0.720 0.010 258) the scripted adapter, neutral in hue */
 
   /* type scale. Fixed rem, range 13 to 52. The old board ran 13 to 21, which
@@ -188,10 +189,10 @@ code { font-family: var(--mono); font-size: 0.94em; }
 
 .banner { background: var(--e1); border-bottom: 1px solid var(--edge); color: var(--text-2); font-size: var(--t-0); padding: 10px clamp(20px, 4vw, 40px); padding-top: calc(10px + env(safe-area-inset-top, 0px)); }
 
-.masthead { display: flex; align-items: baseline; justify-content: space-between; gap: 16px; flex-wrap: wrap; padding-block: 28px 0; }
+.masthead { position: relative; z-index: 10; display: flex; align-items: center; justify-content: space-between; gap: 16px; flex-wrap: wrap; padding-block: 28px 24px; }
 .brand { font-size: var(--t-1); font-weight: var(--w-head); letter-spacing: -.01em; }
 .brand-glyph { display: inline-block; margin-right: 4px; }
-.masthead-right { display: flex; align-items: baseline; gap: 18px; flex-wrap: wrap; font-size: var(--t-0); color: var(--text-3); }
+.masthead-right { display: flex; align-items: center; gap: 18px; flex-wrap: wrap; font-size: var(--t-0); color: var(--text-3); }
 .floor-link { color: var(--text-2); text-decoration: none; border-bottom: 1px solid var(--line-strong); padding-bottom: 1px; }
 .floor-link:hover { color: var(--text); border-bottom-color: var(--text-2); }
 
@@ -220,6 +221,7 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .dot.id-claude { background: var(--id-claude); }
 .dot.id-codex { background: var(--id-codex); }
 .dot.id-agy { background: var(--id-agy); }
+.dot.id-grok { background: var(--id-grok); }
 
 /* ---- logins ------------------------------------------------------------- */
 .logins { display: grid; gap: 20px; }
@@ -304,6 +306,14 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .file.is-overlap { color: var(--warn-text); }
 .blocker { margin-top: 10px; font-size: var(--t-0); color: var(--text-3); max-width: 64ch; }
 .blocker.is-hoisted { position: absolute; width: 1px; height: 1px; overflow: hidden; clip-path: inset(50%); white-space: nowrap; }
+.why-cant-land { margin-top: 10px; font-size: var(--t-0); color: var(--text-3); max-width: 64ch; }
+.why-cant-land-summary { cursor: pointer; color: var(--text-2); font-weight: var(--w-head); user-select: none; }
+.why-cant-land-summary:hover { color: var(--text-1); }
+.blocker-list { list-style: none; margin: 8px 0 0 0; padding: 0; display: flex; flex-direction: column; gap: 8px; }
+.blocker-item { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 8px; padding: 6px 10px; background: var(--surface-2); border-radius: var(--r-control); font-size: var(--t--1); }
+.blocker-msg { color: var(--text-2); flex: 1 1 auto; }
+.blocker-fixes { display: inline-flex; gap: 6px; }
+.btn-sm { min-height: 26px; padding: 0 10px; font-size: var(--t--1); }
 
 /* the flat inline data token. Not a capsule: a chip here is a word set in the
    meta colour beside the thing it qualifies */
@@ -312,6 +322,7 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .chip-id-claude { color: var(--id-claude); }
 .chip-id-codex { color: var(--id-codex); }
 .chip-id-agy { color: var(--id-agy); }
+.chip-id-grok { color: var(--id-grok); }
 .chip-id-fake { color: var(--id-fake); }
 .chip-state-ok { color: var(--ok-text); }
 .chip-state-warn { color: var(--warn-text); }
@@ -320,6 +331,7 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .acct-name.id-claude { color: var(--id-claude); }
 .acct-name.id-codex { color: var(--id-codex); }
 .acct-name.id-agy { color: var(--id-agy); }
+.acct-name.id-grok { color: var(--id-grok); }
 .acct-name.id-fake { color: var(--id-fake); }
 
 /* ---- controls ----------------------------------------------------------- */
@@ -345,14 +357,17 @@ code { font-family: var(--mono); font-size: 0.94em; }
 /* the four scroll boxes board-drawer.test.mjs scans for by line prefix. Each
    class is the first token on its line, in this order, and no earlier line in
    this file begins with any of the four */
-.drawer-task { max-height: 22rem; overflow: auto; font-size: var(--t-0); color: var(--text-2); }
-.drawer-msg p { max-height: 18rem; overflow-y: auto; font-size: var(--t-0); color: var(--text-2); }
-.drawer-timeline { max-height: 22rem; overflow: auto; font-size: var(--t-0); }
-.drawer-diff { max-height: 26rem; overflow: auto; font-family: var(--mono); font-size: var(--t--1); }
-
-.drawer-msg { margin-top: 14px; }
-.drawer-msg-role { font-size: var(--t--1); color: var(--text-3); font-weight: var(--w-head); }
-.drawer-msg-when { font-size: var(--t--1); color: var(--text-3); }
+.drawer-task { max-height: 22rem; overflow: auto; font-size: var(--t-0); color: var(--text); background: var(--e0); border: 1px solid var(--edge); border-radius: var(--r-control); padding: 14px 18px; line-height: 1.55; }
+.drawer-msg p { max-height: 18rem; overflow-y: auto; font-size: var(--t-0); color: var(--text); line-height: 1.55; margin: 0; }
+.drawer-timeline { max-height: 22rem; overflow: auto; font-size: var(--t-0); background: var(--e0); border: 1px solid var(--edge); border-radius: var(--r-control); padding: 8px 16px; }
+.drawer-diff { max-height: 26rem; overflow: auto; font-family: var(--mono); font-size: var(--t--1); background: var(--e0); border-top: 1px solid var(--line); margin-top: 10px; padding-top: 10px; }
+
+.drawer-msg { margin-top: 12px; background: var(--e0); border: 1px solid var(--edge); border-radius: var(--r-control); padding: 14px 18px; }
+.drawer-msg.is-human { border-left: 3px solid var(--accent); }
+.drawer-msg.is-agent { border-left: 3px solid var(--ok-text); }
+.drawer-msg-head { display: flex; align-items: center; justify-content: space-between; gap: 8px; margin-bottom: 8px; }
+.drawer-msg-role { font-size: var(--t--1); color: var(--text-2); font-weight: var(--w-head); text-transform: uppercase; letter-spacing: 0.04em; }
+.drawer-msg-when { font-size: var(--t--1); color: var(--text-3); font-family: var(--mono); }
 
 /* ---- ledger: on the ground, unpanelled --------------------------------- */
 .ledger { margin-top: 56px; display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 40px; padding-top: 32px; border-top: 1px solid var(--edge); }
@@ -418,20 +433,32 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .worktree { color: var(--text-3); }
 
 /* ---- detail panes ------------------------------------------------------- */
-.detail { margin-top: 22px; background: var(--e1); border-radius: var(--r-well); box-shadow: var(--sink); }
+.detail { margin-top: 22px; background: var(--e1); border-radius: var(--r-well); box-shadow: var(--sink); border: 1px solid var(--edge); }
 .detail-inner { padding: 24px; }
-.detail-heading { display: flex; align-items: baseline; flex-wrap: wrap; gap: 8px; font-size: var(--t-1); font-weight: var(--w-head); margin-bottom: 12px; }
-.detail-section { margin-top: 20px; }
-.detail-sub { font-size: var(--t-0); color: var(--text-3); margin-bottom: 8px; }
+.detail-masthead { display: flex; align-items: center; justify-content: space-between; gap: 16px; flex-wrap: wrap; padding-bottom: 18px; border-bottom: 1px solid var(--line); margin-bottom: 22px; }
+.detail-brand { display: flex; align-items: center; gap: 10px; font-size: var(--t-1); }
+.detail-ctrls { display: flex; align-items: center; gap: 10px; }
+.detail-heading { display: flex; align-items: baseline; justify-content: space-between; flex-wrap: wrap; gap: 12px; font-size: var(--t-1); font-weight: var(--w-head); margin-bottom: 14px; letter-spacing: -.01em; }
+.detail-section { margin-top: 26px; padding-top: 22px; border-top: 1px solid var(--line); }
+.detail-section:first-of-type { margin-top: 0; padding-top: 0; border-top: 0; }
+.detail-sub { font-size: var(--t-0); color: var(--text-3); font-weight: var(--w-text); }
 .kv { display: grid; grid-template-columns: 148px 1fr; gap: 10px 20px; font-size: var(--t-0); }
 .kv-key { color: var(--text-3); }
 .kv-val { color: var(--text); }
-.well { background: var(--e0); border-radius: var(--r-control); padding: 14px; }
+.detail .kv { margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--line); }
+.well { background: var(--e0); border-radius: var(--r-control); padding: 14px 18px; border: 1px solid var(--edge); }
 .log-pre { font-family: var(--mono); font-size: var(--t--1); white-space: pre-wrap; color: var(--text-2); max-height: 26rem; overflow: auto; }
 .hunk { font-family: var(--mono); font-size: var(--t--1); white-space: pre-wrap; }
-.file-row { display: inline-flex; align-items: baseline; flex-wrap: wrap; gap: 8px; text-align: left; }
+.drawer-file-item { background: var(--e0); border: 1px solid var(--edge); border-radius: var(--r-control); padding: 10px 14px; margin-bottom: 8px; }
+.drawer-file-item:hover { border-color: var(--line-strong); }
+.file-row { display: flex; align-items: center; justify-content: space-between; width: 100%; gap: 10px; text-align: left; }
 .turn { padding: 12px 0; }
 .turn + .turn { border-top: 1px solid var(--line); }
+.timeline-item { padding: 10px 0; display: grid; grid-template-columns: 80px 140px 1fr; gap: 12px; align-items: baseline; }
+.timeline-item + .timeline-item { border-top: 1px solid var(--line); }
+.timeline-item .turn-when { color: var(--text-3); font-size: var(--t--1); }
+.timeline-item .turn-role { color: var(--accent); font-size: var(--t--1); font-weight: var(--w-head); }
+.timeline-summary { color: var(--text-2); margin: 0; font-size: var(--t-0); }
 .turn-role { font-size: var(--t--1); color: var(--text-3); font-weight: var(--w-head); }
 .turn-when { font-size: var(--t--1); color: var(--text-3); }
 /* the kind word sits beside the clock, not welded to it: `10:40 AMstarted` */
@@ -448,9 +475,10 @@ code { font-family: var(--mono); font-size: 0.94em; }
 .actions { display: flex; gap: 10px; flex-wrap: wrap; }
 
 /* ---- the floor: the scheduler's view, tables on the same ground --------- */
-.masthead-left { display: flex; align-items: baseline; gap: 18px; flex-wrap: wrap; }
+.masthead-left { display: flex; align-items: center; gap: 18px; flex-wrap: wrap; }
 .repos-status, .counts-status { color: var(--text-3); }
 .counts-status span { color: var(--text-2); font-weight: var(--w-head); margin-left: 2px; }
+#floor-accounts { margin-top: 16px; }
 .region-floor { margin-top: 12px; }
 .ftable { width: 100%; border-collapse: collapse; background: var(--e2); border: 1px solid var(--edge); border-radius: var(--r-panel); box-shadow: var(--lift); overflow: hidden; font-size: var(--t-0); }
 .ftable th, .ftable td { text-align: left; vertical-align: top; padding: 14px 18px; }

package/src/board/board.js

@@ -56,7 +56,7 @@
     'read-only': 'read only',
     plan: 'plan only',
   }
-  const AGENT_IDS = ['claude', 'codex', 'agy']
+  const AGENT_IDS = ['claude', 'codex', 'agy', 'grok']
   const DEFAULT_BIND = '127.0.0.1:4747'
   const TIMELINE_CAP = 12
   // mirrors LOOPBACK in src/auth.mjs; state.bind is "<host>:<port>" and an IPv6
@@ -253,10 +253,10 @@
   }
 
   function formatActor(actor) {
-    if (!actor) return 'baton'
+    if (!actor) return 'leg'
     if (actor.type === 'human') return `human:${actor.id || 'local'}`
     if (actor.type === 'agent') return `agent:${actor.adapter || '?'}`
-    return 'baton'
+    return 'leg'
   }
 
   function baseAdapterName(name) { return String(name || '').replace(/^fake-/, '') }
@@ -1042,7 +1042,7 @@
     for (const a of adapters) adapterSelect.appendChild(el('option', { value: a.name }, [adapterLabel(a)]))
     // Add fallback agent used to default to the first option in the list, which
     // is normally the agent already chosen as First agent: the summary line then
-    // read "Baton tries claude, then agy, then claude", a fallback that cannot
+    // read "Leg tries claude, then agy, then claude", a fallback that cannot
     // fire. rebuildDefaultFallbacks already applies this filter.
     if (!preferred && !first) {
       const used = chosenAdapters(ui)

package/src/board/floor.js

@@ -130,7 +130,7 @@
   // the same commit.
 
   const WIN_WORDS = { '5h': '5 hour', '7d': '7 day' }
-  const IDS = ['claude', 'codex', 'agy', 'fake']
+  const IDS = ['claude', 'codex', 'agy', 'grok', 'fake']
 
   // ---- times. The head prints `Times are local.` once, so no row repeats it ----
   // THIS FILE OWNS THE TIME GRAMMAR FOR THE WHOLE BOARD. ago(), clockAt(),
@@ -600,7 +600,7 @@
     if (s === 'reconnecting') {
       banner.textContent = state.lastReadingAt ? `Reconnecting to Leg. Last reading ${clockAt(state.lastReadingAt.getTime())}.` : `Reconnecting to Leg on ${state.bind}.`
     } else if (s === 'connecting') {
-      banner.textContent = `Connecting to Baton on ${state.bind}.`
+      banner.textContent = `Connecting to Leg on ${state.bind}.`
     }
   }