@worca/app 1.4.0 → 1.5.0-rc.3

package/ui/public/ask-panel.mjs

@@ -2404,6 +2404,61 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
     return { el: rootEl };
   }
 
+  /** The clone card (propose_clone_project): proposed → cloning → applied | failed, or declined. Every value is text. */
+  function buildCloneCard(block) {
+    const card = block.card || {};
+    const summary = card.summary || 'clone a repository';
+    if (block.state === 'declined') return { el: make('div', 'ask-card-stub', `Declined — ${summary}`) };
+    const rootEl = make('div', `ask-card ask-mcard ask-clonecard is-${block.state}`);
+    rootEl.setAttribute('data-ask-clonecard', block.state);
+    const head = make('div', 'ask-mcard-head');
+    const title = block.state === 'applied' ? 'Project cloned' : block.state === 'failed' ? 'Clone failed'
+      : block.state === 'cloning' ? 'Cloning…' : 'Proposed project';
+    head.appendChild(make('span', 'ask-mcard-title', title));
+    head.appendChild(make('span', 'ask-mcard-kind', 'Clone'));
+    rootEl.appendChild(head);
+    const body = make('div', 'ask-mcard-body');
+    const sum = make('div', 'ask-mcard-summary');
+    if (block.state === 'applied') sum.appendChild(svgIcon(WF_ICO.check, 15, 2.4));
+    sum.appendChild(make('span', null, summary));
+    body.appendChild(sum);
+    if (card.note) body.appendChild(make('div', 'ask-mcard-note', card.note));
+    const rows = [['Repository', card.url], ['Branch', card.branch || 'default branch'], ['Folder', card.dir], ['GitHub', card.github]];
+    const ul = make('ul', 'ask-mcard-changes');
+    for (const [label, value] of rows) {
+      if (!value) continue;
+      const li = make('li');
+      li.appendChild(make('span', 'ask-mcard-change-label', label));
+      const val = make('span', 'ask-mcard-change-val');
+      val.appendChild(make('span', 'ask-mcard-after', String(value)));
+      li.appendChild(val);
+      ul.appendChild(li);
+    }
+    body.appendChild(ul);
+    const result = card.result || null;
+    if (block.state === 'failed') body.appendChild(make('div', 'ask-mcard-failed', `Could not clone: ${block.error || (result && result.error) || 'unknown error'}`));
+    else if (block.state === 'applied' && result && result.project && result.project.path) {
+      body.appendChild(make('div', 'ask-mcard-detail', `Registered as ${result.project.name || card.name} at ${result.project.path}`));
+    }
+    rootEl.appendChild(body);
+    rootEl.appendChild(make('div', 'ask-card-err'));
+    if (block.state === 'proposed') {
+      const actions = make('div', 'ask-mcard-actions');
+      const btn = (cls, text, attr, icon) => {
+        const b = make('button', cls, text); b.type = 'button'; b.setAttribute(attr, '');
+        if (icon) b.prepend(svgIcon(icon, 12, 2.2));
+        return b;
+      };
+      const decline = btn('ask-card-not-now', 'Decline', 'data-ask-clone-decline');
+      decline.addEventListener('click', () => postCard(block, rootEl, { state: 'declined' }, decline));
+      const apply = btn('ask-card-start', 'Clone', 'data-ask-clone-apply', WF_ICO.save);
+      apply.addEventListener('click', () => postCard(block, rootEl, { state: 'applied' }, apply));
+      actions.append(make('span', 'ask-card-actions-spacer'), decline, apply);
+      rootEl.appendChild(actions);
+    }
+    return { el: rootEl };
+  }
+
   /** The model · effort picker (mockup §C): the panel's popover chrome, anchored under the chip. Rows are menuitems (PD28). */
   function openChipPicker(chip, nodeId, card, wf, handle) {
     const node = card.nodes && card.nodes[nodeId];
@@ -3067,7 +3122,7 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
   function isProgressBlock(block) {
     const card = block.card || {};
     if (card.type === PROGRESS_CARD_TYPE) return true;
-    if (card.type === 'workflow' || card.type === 'metrics' || card.type === 'policy' || card.type === 'schedule' || card.type === 'model') return false;
+    if (card.type === 'workflow' || card.type === 'metrics' || card.type === 'policy' || card.type === 'schedule' || card.type === 'model' || card.type === 'clone') return false;
     return block.state === 'started' || (block.state === 'failed' && !!block.runId);
   }
   function buildCard(block) {
@@ -3078,13 +3133,15 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
     const isMetrics = !!(block.card && (block.card.type === 'metrics' || block.card.type === 'policy'));
     const isSchedule = !!(block.card && block.card.type === 'schedule');
     const isModel = !!(block.card && block.card.type === 'model');
+    const isClone = !!(block.card && block.card.type === 'clone');
     const isProgress = isProgressBlock(block);
-    if (cached && cached.state === block.state && (isWorkflow || isMetrics || isSchedule || isModel || isProgress || block.state === 'proposed')) return cached.el;
+    if (cached && cached.state === block.state && (isWorkflow || isMetrics || isSchedule || isModel || isClone || isProgress || block.state === 'proposed')) return cached.el;
     if (cached) disposeCardEntry(cached);
     const built = isWorkflow ? buildWorkflowCard(block, cached)
       : isMetrics ? buildMetricsCard(block)
       : isSchedule ? buildScheduleCard(block)
       : isModel ? buildModelCard(block)
+      : isClone ? buildCloneCard(block)
       : isProgress ? buildProgressCard(block)
         : { el: block.state === 'proposed' ? buildCardForm(block) : buildCardTerminal(block) };
     st.cardEls.set(block.id, { el: built.el, state: block.state, handle: built.handle || null, dispose: built.dispose || null, animate: !!built.animate, cancelAnim: null, lastW: -1 });
@@ -3704,7 +3761,12 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
 
   function pushServerFrame(frame) {
     if (st.destroyed || !frame) return;
-    if (frame.type === 'ask-history-cleared') { onHistoryCleared(); return; }
+    if (frame.type === 'ask-history-cleared') {
+      // A shared deployment's clear names the threads it removed: only a tab showing one of them resets.
+      if (Array.isArray(frame.threadIds) && !frame.threadIds.includes(st.threadId)) { scheduleThreadsRefresh(); return; }
+      onHistoryCleared();
+      return;
+    }
     if (THREADS_REFRESH_FRAMES.has(frame.type)) scheduleThreadsRefresh();
     // Defence-in-depth: the model's own threadId filter is the real router — this early return only saves an apply() call and cannot be observed from tests (the model would drop the frame identically).
     if (!st.model || frame.threadId !== st.threadId) return;

package/ui/public/bridge-view.mjs

@@ -15,9 +15,43 @@ function h(doc, tag, cls, text) {
 }
 
 /** Mirrors model-env.mjs PROVIDER_APIS — the server validates; this is the form. */
-export const PROVIDER_APIS = { copilot: ['anthropic', 'openai-chat'], openai: ['openai-chat'], anthropic: ['anthropic'] };
+export const PROVIDER_APIS = { copilot: ['anthropic', 'openai-chat', 'openai-responses'], openai: ['openai-chat', 'openai-responses'], anthropic: ['anthropic'] };
+/** Mirrors model-env.mjs TRANSLATED_APIS: the apis the bridge translates (no passthrough). */
+export const TRANSLATED_APIS = ['openai-chat', 'openai-responses'];
 export const PROVIDER_LABELS = { copilot: 'GitHub Copilot', openai: 'OpenAI-compatible', anthropic: 'Anthropic-compatible' };
-export const API_LABELS = { anthropic: 'Anthropic Messages', 'openai-chat': 'OpenAI chat completions' };
+export const API_LABELS = { anthropic: 'Anthropic Messages', 'openai-chat': 'OpenAI chat completions', 'openai-responses': 'OpenAI Responses' };
+/** The import sheet's short API column. */
+const API_SHORT = { anthropic: 'Messages', 'openai-chat': 'chat', 'openai-responses': 'Responses' };
+
+/**
+ * The effort levels an imported model listed, stashed on the Connection block
+ * (spec §6.3) — only while the provider and the upstream model id are still the
+ * ones they came from — or null.
+ */
+function storedReasoningEfforts(conn, provider) {
+  const raw = conn && conn.dataset ? conn.dataset.reasoningEfforts : '';
+  if (!raw || conn.dataset.reasoningEffortsProvider !== provider) return null;
+  const modelIn = conn.querySelector('.mv-conn-model');
+  if ((modelIn ? modelIn.value.trim() : '') !== (conn.dataset.reasoningEffortsModel || '')) return null;
+  try {
+    const list = JSON.parse(raw);
+    return Array.isArray(list) && list.length ? list : null;
+  } catch { return null; }
+}
+
+/** Stash (or clear) an upstream's effort levels on the Connection block: no form field edits them. */
+function stashReasoningEfforts(conn, upstream) {
+  const list = upstream && upstream.capabilities && upstream.capabilities.reasoningEfforts;
+  if (Array.isArray(list) && list.length) {
+    conn.dataset.reasoningEfforts = JSON.stringify(list);
+    conn.dataset.reasoningEffortsProvider = upstream.provider;
+    conn.dataset.reasoningEffortsModel = String(upstream.model || '').trim();
+  } else {
+    delete conn.dataset.reasoningEfforts;
+    delete conn.dataset.reasoningEffortsProvider;
+    delete conn.dataset.reasoningEffortsModel;
+  }
+}
 export const CAPABILITY_FLAGS = [['toolCalls', 'Tool calls'], ['vision', 'Vision'], ['reasoning', 'Reasoning']];
 
 /** The notice every Copilot sign-in must acknowledge (§8.2). One source of truth: the UI modal and the CLI print it. */
@@ -33,12 +67,15 @@ export const COPILOT_TERMS = Object.freeze({
   confirm: 'Continue',
 });
 
-/** One-line degradation copy for a translated (openai-chat) model, '' otherwise (§8.5). */
+/** One-line degradation copy for a translated (openai-chat / openai-responses) model, '' otherwise (§8.5). */
 export function degradationLine(m) {
-  if (!m || !m.upstream || m.upstream.api !== 'openai-chat') return '';
+  if (!m || !m.upstream || !TRANSLATED_APIS.includes(m.upstream.api)) return '';
   const caps = m.upstream.capabilities || {};
   const limit = caps.maxPromptTokens ? `, prompt limit ~${Math.round(caps.maxPromptTokens / 1000)}k tokens` : '';
-  return `translated — no thinking blocks, no WebSearch/WebFetch${limit}`;
+  const lead = m.upstream.api === 'openai-responses'
+    ? 'translated — reasoning summaries only, no WebSearch/WebFetch'
+    : 'translated — no thinking blocks, no WebSearch/WebFetch';
+  return `${lead}${limit}`;
 }
 
 /** The `bridged: <provider>` badge for a catalog card, or null. */
@@ -195,7 +232,7 @@ export function renderProvidersCard(providers, { doc = globalThis.document, sign
         : k.keyOptional ? h(doc, 'span', 'badge green', 'local — no key needed') : h(doc, 'span', 'badge grey', 'no key'));
     main.appendChild(rh);
     main.appendChild(h(doc, 'small', 'hint', name === 'openai'
-      ? 'OpenAI, Azure, Ollama, vLLM, Groq, an in-house gateway — anything with a /chat/completions endpoint. Models run through the translation layer (no thinking blocks, no web tools).'
+      ? 'OpenAI, Azure, Ollama, vLLM, Groq, an in-house gateway — anything with a /chat/completions or /responses endpoint. Models run through the translation layer (no web tools).'
       : 'A gateway that already speaks the Anthropic Messages API but needs a key Worca holds for it. Calls pass through untouched.'));
     if (k.keySource === 'env') main.appendChild(h(doc, 'small', 'hint', `Key read from your shell env (${k.keyRef}).`));
     main.appendChild(h(doc, 'small', 'hint mv-pv-msg'));
@@ -294,7 +331,7 @@ export function renderImportSheet(models, { doc = globalThis.document } = {}) {
   const root = h(doc, 'section', 'card mv-editor mvi');
   root.appendChild(h(doc, 'h3', 'mv-editor-title', 'Import from GitHub Copilot'));
   root.appendChild(h(doc, 'small', 'hint',
-    'These run through your Copilot subscription. Claude models keep extended thinking; other vendors run through a translation layer (no thinking blocks, no web tools). Imported entries are priced free — Copilot bills premium requests, not tokens — and Worca counts requests per run.'));
+    'These run through your Copilot subscription. Claude models keep extended thinking; other vendors run through a translation layer (no web tools; reasoning arrives as summaries on the Responses API). Imported entries are priced free — Copilot bills premium requests, not tokens — and Worca counts requests per run.'));
   const list = Array.isArray(models) ? models : [];
   if (!list.length) {
     root.appendChild(h(doc, 'div', 'hist-empty', 'Copilot returned no chat models for this account.'));
@@ -306,7 +343,7 @@ export function renderImportSheet(models, { doc = globalThis.document } = {}) {
     const all = h(doc, 'input', 'mvi-all'); all.type = 'checkbox'; all.title = 'Select all importable';
     allTh.appendChild(all);
     hr.appendChild(allTh);
-    for (const t of ['Model', 'Vendor', 'Context', 'Tools', 'Vision', 'Reasoning', 'Status']) hr.appendChild(h(doc, 'th', null, t));
+    for (const t of ['Model', 'Vendor', 'Context', 'Tools', 'Vision', 'Reasoning', 'API', 'Status']) hr.appendChild(h(doc, 'th', null, t));
     thead.appendChild(hr);
     tbl.appendChild(thead);
     const tbody = h(doc, 'tbody');
@@ -328,6 +365,7 @@ export function renderImportSheet(models, { doc = globalThis.document } = {}) {
       tr.appendChild(h(doc, 'td', null, yesNo(m.toolCalls)));
       tr.appendChild(h(doc, 'td', null, yesNo(m.vision)));
       tr.appendChild(h(doc, 'td', null, yesNo(m.reasoning)));
+      tr.appendChild(h(doc, 'td', 'mvi-api', API_SHORT[m.api] || '—'));
       const status = [];
       if (m.inCatalog) status.push('in catalog ✓');
       if (m.preview) status.push('preview');
@@ -450,6 +488,7 @@ export function renderConnectionSection(model, { doc = globalThis.document, prov
   const groupName = `mv-conn-mode-${editing ? model.id : 'new'}`;
   const wrap = h(doc, 'div', 'mv-conn');
   wrap.dataset.provider = upstream ? upstream.provider : '';
+  stashReasoningEfforts(wrap, upstream);
 
   const modes = h(doc, 'div', 'mv-conn-modes');
   const startMode = upstream ? 'provider' : (editing && model.env && Object.keys(model.env).length ? 'env' : 'direct');
@@ -611,28 +650,43 @@ export function applyConnectionMode(connEl) {
   }
   const note = conn.querySelector('.mv-conn-note');
   if (note) {
+    const copilotPricing = provider === 'copilot' ? ' Copilot bills premium requests, so Pricing defaults to Free.' : '';
     note.textContent = mode !== 'provider' ? '' : api === 'openai-chat'
-      ? `Translated: no thinking blocks, WebSearch/WebFetch withheld, prompt limit per the capabilities above.${provider === 'copilot' ? ' Copilot bills premium requests, so Pricing defaults to Free.' : ''}`
-      : provider === 'copilot' ? 'Copilot’s native Anthropic endpoint: thinking blocks and cache accounting arrive intact. Copilot bills premium requests, so Pricing defaults to Free.'
-        : 'Passthrough: the request reaches the endpoint untouched; only auth and headers are added.';
+      ? `Translated: no thinking blocks, WebSearch/WebFetch withheld, prompt limit per the capabilities above.${copilotPricing}`
+      : api === 'openai-responses'
+        ? `Translated to the Responses API: reasoning summaries arrive as thinking, WebSearch/WebFetch withheld, prompt limit per the capabilities above.${copilotPricing}`
+        : provider === 'copilot' ? 'Copilot’s native Anthropic endpoint: thinking blocks and cache accounting arrive intact. Copilot bills premium requests, so Pricing defaults to Free.'
+          : 'Passthrough: the request reaches the endpoint untouched; only auth and headers are added.';
   }
   const reasoning = !!conn.querySelector('.mv-conn-cap-cb[data-cap="reasoning"]')?.checked;
   // Efforts live in the editor grid beside this block.
   const editor = conn.closest ? conn.closest('.mv-editor') : null;
   const effCbs = editor ? [...editor.querySelectorAll('.mv-effort-cb')] : [];
   const effHint = editor ? editor.querySelector('.mv-efforts-hint') : null;
-  const translatedNoReasoning = mode === 'provider' && api === 'openai-chat' && !reasoning;
+  const translated = mode === 'provider' && TRANSLATED_APIS.includes(api);
+  const translatedNoReasoning = translated && !reasoning;
+  // The model's own effort levels (carried from Import): offer only the Worca efforts it lists.
+  const levels = translated && reasoning ? storedReasoningEfforts(conn, provider) : null;
+  const offered = levels ? effCbs.map((cb) => cb.value).filter((v) => levels.includes(v)) : null;
+  const allowed = offered && !offered.length ? ['medium'] : offered;
   for (const cb of effCbs) {
     if (translatedNoReasoning) {
       cb.disabled = cb.value !== 'medium';
       if (cb.value !== 'medium') cb.checked = false; else cb.checked = true;
+    } else if (allowed) {
+      cb.disabled = !allowed.includes(cb.value);
+      if (cb.disabled) cb.checked = false;
     } else cb.disabled = false;
   }
+  // Every stored effort fell outside the model's levels: offer its levels rather than
+  // save an empty list (the server reads empty as every effort, the disabled ones too).
+  if (allowed && !effCbs.some((cb) => cb.checked)) for (const cb of effCbs) if (allowed.includes(cb.value)) cb.checked = true;
   if (effHint) {
     effHint.textContent = translatedNoReasoning
       ? 'This model has no reasoning control; effort would be ignored — only medium is offered.'
-      : mode === 'provider' && api === 'openai-chat' ? 'Maps to reasoning_effort low / medium / high — xhigh and max are not distinct.'
-        : 'All checked = every effort (the default).';
+      : levels ? `Maps to this model's effort levels: ${levels.join(', ')}.`
+        : translated ? 'Maps to reasoning_effort low / medium / high — xhigh and max are not distinct.'
+          : 'All checked = every effort (the default).';
   }
 }
 
@@ -640,6 +694,7 @@ export function applyConnectionMode(connEl) {
 export function setModelUpstream(connEl, upstream) {
   const conn = connEl.classList && connEl.classList.contains('mv-conn') ? connEl : connEl.querySelector('.mv-conn');
   if (!conn) return;
+  stashReasoningEfforts(conn, upstream);
   const mode = upstream ? 'provider' : 'direct';
   for (const rb of conn.querySelectorAll('.mv-conn-mode-rb')) rb.checked = rb.value === mode;
   if (upstream) {
@@ -689,6 +744,9 @@ export function collectConnection(connEl) {
     const v = (inp.value || '').trim();
     if (v !== '') capabilities[inp.dataset.limit] = Number(v);
   }
+  // The model's effort levels ride along unedited while it stays a translated reasoning model on the same provider.
+  const levels = storedReasoningEfforts(conn, provider);
+  if (levels && capabilities.reasoning && TRANSLATED_APIS.includes(api)) capabilities.reasoningEfforts = levels;
   upstream.capabilities = capabilities;
   return { upstream };
 }

package/ui/public/index.html

@@ -110,6 +110,9 @@
         </nav>
 
         <div class="side-foot">
+          <!-- Who this browser is signed in as (GET /api/whoami). Filled only behind an
+               identity proxy or an operator-set name; a local install never shows it. -->
+          <div class="side-who" id="side-who" hidden><span class="side-who-label">Signed in as</span> <span class="side-who-name"></span></div>
           <div id="side-spend"></div>
           <button type="button" class="side-toggle" id="side-toggle"
                   aria-expanded="true" aria-controls="side-rail"
@@ -509,6 +512,7 @@
                   <div class="rc-meta">
                     <span class="rc-status-word"></span>
                     <span class="rc-seg"><span class="rc-dot">·</span><span class="rm-text"></span></span>
+                    <span class="rc-seg rc-by" hidden><span class="rc-dot">·</span><span class="person-ini" aria-hidden="true"></span><span class="rc-by-text"></span></span>
                     <span class="rc-seg rc-prog" hidden data-min-level="advanced"><span class="rc-dot">·</span><span class="rc-prog-text"></span></span>
                     <span class="rc-seg"><span class="rc-dot">·</span><span class="run-time mono"></span></span>
                     <span class="rc-seg"><span class="rc-dot">·</span><span class="run-cost mono"></span></span>
@@ -665,6 +669,7 @@
                         <span class="hm-seg hist-clock-seg"><span class="hm-dot">·</span><span class="hist-clock"></span></span>
                         <span class="hm-seg hist-time-seg"><span class="hm-dot">·</span><span class="hist-time mono"></span></span>
                         <span class="hm-seg hist-total-seg"><span class="hm-dot">·</span><span class="hist-total mono"></span></span>
+                        <span class="hm-seg hist-by-seg"><span class="hm-dot">·</span><span class="hist-by"></span></span>
                         <span class="hist-diff-pill" hidden data-min-level="advanced">
                           <svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7"><path d="M6 3h8l4 4v14H6z" stroke-linejoin="round"></path><path d="M14 3v4h4" stroke-linejoin="round"></path></svg>
                           <span class="hist-diff mono" aria-label="lines changed"></span>
@@ -857,6 +862,10 @@
           </div>
           <div class="tm-filter">
             <div class="select-wrap tm-scope-wrap"><select id="tm-scope" class="select" aria-label="Scope"></select></div>
+            <div class="seg tm-tabs" id="tm-tabs" role="tablist" aria-label="Team metrics view">
+              <button type="button" role="tab" data-tm-tab="overview" aria-selected="true" class="on">Overview</button>
+              <button type="button" role="tab" data-tm-tab="timeline" aria-selected="false">Timeline</button>
+            </div>
             <div class="seg" id="tm-range" role="group" aria-label="Time range">
               <button type="button" data-range="this-month">This month</button>
               <button type="button" data-range="last-month">Last month</button>
@@ -871,6 +880,7 @@
           </div>
           <div class="tm-active-filters" id="tm-filters" hidden></div>
           <div id="tm-body"><small class="hint">Loading…</small></div>
+          <div id="tm-timeline" hidden></div>
           <div id="tm-tip" class="chart-tip" hidden></div>
         </section>
         <!-- /view team-metrics -->
@@ -2269,18 +2279,41 @@
           <h2 id="proj-add-title">Add project</h2>
           <button type="button" id="proj-add-cancel" class="btn btn-mini">Close</button>
         </div>
-        <div class="field">
-          <label for="proj-add-name">Name</label>
-          <input id="proj-add-name" class="input" type="text" spellcheck="false" placeholder="Project name" />
+        <!-- Two ways in: a folder already on this machine, or a repository cloned into the
+             projects folder by the server (POST /api/projects/clone). Clone is the default
+             where no folder picker exists (a container or hosted worca). -->
+        <div class="md-tabs proj-add-tabs" id="proj-add-tabs" role="tablist" aria-label="How to add the project">
+          <button type="button" class="md-tab" role="tab" id="proj-add-tab-folder" data-mode="folder" aria-selected="true" aria-controls="proj-add-folder-pane">Folder</button>
+          <button type="button" class="md-tab" role="tab" id="proj-add-tab-clone" data-mode="clone" aria-selected="false" aria-controls="proj-add-clone-pane">Clone from URL</button>
         </div>
-        <div class="field">
-          <label for="proj-add-path">Folder</label>
-          <div class="path-row">
-            <input id="proj-add-path" class="input" type="text" spellcheck="false" placeholder="/absolute/path/to/project" />
-            <button type="button" id="proj-add-browse" class="btn btn-ghost btn-mini" title="Pick the project folder">Choose folder&hellip;</button>
+        <div id="proj-add-folder-pane" role="tabpanel" aria-labelledby="proj-add-tab-folder">
+          <div class="field">
+            <label for="proj-add-name">Name</label>
+            <input id="proj-add-name" class="input" type="text" spellcheck="false" placeholder="Project name" />
+          </div>
+          <div class="field">
+            <label for="proj-add-path">Folder</label>
+            <div class="path-row">
+              <input id="proj-add-path" class="input" type="text" spellcheck="false" placeholder="/absolute/path/to/project" />
+              <button type="button" id="proj-add-browse" class="btn btn-ghost btn-mini" title="Pick the project folder">Choose folder&hellip;</button>
+            </div>
+          </div>
+        </div>
+        <div id="proj-add-clone-pane" role="tabpanel" aria-labelledby="proj-add-tab-clone" hidden>
+          <div class="field">
+            <label for="proj-clone-url">Repository URL</label>
+            <input id="proj-clone-url" class="input" type="url" spellcheck="false" autocomplete="off" placeholder="https://github.com/owner/repo" />
+          </div>
+          <div class="field">
+            <label for="proj-clone-branch">Branch <span class="opt">(optional)</span></label>
+            <input id="proj-clone-branch" class="input" type="text" spellcheck="false" autocomplete="off" placeholder="the repository's default branch" />
+          </div>
+          <div class="field">
+            <label for="proj-clone-name">Folder name <span class="opt">(optional)</span></label>
+            <input id="proj-clone-name" class="input" type="text" spellcheck="false" autocomplete="off" placeholder="the repository name" />
           </div>
         </div>
-        <small class="hint" id="proj-add-msg"></small>
+        <small class="hint" id="proj-add-msg" aria-live="polite"></small>
         <div class="confirm-actions">
           <button type="button" id="proj-add-save" class="btn btn-primary btn-mini">Add project</button>
         </div>

package/ui/public/schedules-view.mjs

@@ -100,6 +100,19 @@ export function createSchedulesView({ tabsHost = null, feedHost, onceHost, repea
   }
 
   // ── rows ───────────────────────────────────────────────────────────────────
+  // Who made / last changed it (step 2's display rule lives in app.js: deps.personLabel/personShown
+  // return '' unless the deployment has per-person sign-ins; 'you' for the viewer).
+  const label = (v) => (typeof deps.personLabel === 'function' ? deps.personLabel(v) : '');
+  const shown = (v) => (typeof deps.personShown === 'function' ? deps.personShown(v) : '');
+  /** The card's meta segment: "· (AL) by ada@…" / "by you" for the creator; null when nobody is shown. */
+  function bySeg(item) {
+    const who = label(item.createdBy);
+    if (!who) return null;
+    const full = shown(item.createdBy);
+    const ini = typeof deps.personIni === 'function' ? deps.personIni(full, `Created by ${full}`) : null;
+    return h('span', { class: 'rc-seg sched-by', title: `Created by ${full}` }, h('span', { class: 'rc-dot', text: '·' }), ini, h('span', { class: 'sched-by-text', text: `by ${who}` }));
+  }
+
   function metaLine(item) {
     const bits = [deps.targetLabel(item), deps.workflowLabel(item.summary.workflowId)];
     if (item.summary.sourceBranch) bits.push(`from ${item.summary.sourceBranch}`);
@@ -114,6 +127,8 @@ export function createSchedulesView({ tabsHost = null, feedHost, onceHost, repea
     const src = item.summary.source && item.summary.source.type === 'plugin' ? item.summary.source : null;
     body.append(...[
       row('Task', src ? `${src.plugin} · ${src.taskId} — fetched when the run starts` : (item.summary.prompt || '—')),
+      row('Created by', shown(item.createdBy)),
+      shown(item.updatedBy) && shown(item.updatedBy) !== shown(item.createdBy) ? row('Changed by', shown(item.updatedBy)) : null,
       item.after ? row('After', `${(item.after.title || item.after.id.slice(0, 8))} · ${afterWord(item.after)}`) : null,
       item.after ? row('If it fails', item.after.policy === 'any' ? 'Start anyway' : 'Do not start') : null,
       item.sourceFromPrevious ? row('Source branch', 'the run before it') : null,
@@ -206,7 +221,8 @@ export function createSchedulesView({ tabsHost = null, feedHost, onceHost, repea
           h('div', { class: 'rc-title', text: t.title || 'Scheduled run' }),
           h('div', { class: 'rc-meta' },
             h('span', { class: `rc-status-word st-${family}`, text: statusWord }),
-            h('span', { class: 'rc-seg' }, h('span', { class: 'rc-dot', text: '·' }), h('span', { class: 'sched-when', 'data-at': missed || chained ? '' : t.runAt, text: timeText }))),
+            h('span', { class: 'rc-seg' }, h('span', { class: 'rc-dot', text: '·' }), h('span', { class: 'sched-when', 'data-at': missed || chained ? '' : t.runAt, text: timeText })),
+            bySeg(t)),
           h('div', { class: 'sched-target', text: `${t.scheduleId ? 'Repeating' : 'Once'} · ${metaLine(t)}` }),
           missed && t.failReason ? h('div', { class: 'sched-reason', text: t.failReason }) : null)),
       footer(t, acts, details), details);
@@ -257,7 +273,8 @@ export function createSchedulesView({ tabsHost = null, feedHost, onceHost, repea
           h('div', { class: 'rc-title', text: s.title || 'Repeating schedule' }),
           h('div', { class: 'rc-meta' },
             h('span', { class: `rc-status-word st-${family}`, text: statusWord }),
-            h('span', { class: 'rc-seg' }, h('span', { class: 'rc-dot', text: '·' }), h('span', { class: 'sched-rule', text: s.sentence }))),
+            h('span', { class: 'rc-seg' }, h('span', { class: 'rc-dot', text: '·' }), h('span', { class: 'sched-rule', text: s.sentence })),
+            bySeg(s)),
           h('div', { class: 'sched-target', text: metaLine(s) }),
           (next || last) ? h('div', { class: 'sched-sub' }, next, last) : null),
         ended ? null : sw),
@@ -416,6 +433,8 @@ export function createSchedulesView({ tabsHost = null, feedHost, onceHost, repea
 
   return {
     load, loadFeed, tickCountdowns, showTab,
+    /** Repaint from the loaded model (the viewer arrived after the first paint). */
+    repaint() { if (model.loaded) paintList(); },
     get tab() { return model.tab; },
     get defaults() { return model.defaults; },
     get counts() { return model.counts; },

package/ui/public/session-guard.mjs

@@ -0,0 +1,77 @@
+// Session expiry behind an identity proxy (docs/remote-access.md). When the
+// Cloudflare Access session runs out, every same-origin request is redirected
+// to the proxy's sign-in page on another origin: fetch() fails with a bare
+// TypeError (CORS) and the WebSocket cannot reconnect, so the UI would just look
+// broken. This module tells that case apart from "server down" and shows one
+// banner with a reload button. Locally (no proxy) it never fires: a down
+// server fails the probe too, and worca itself never redirects /api/health.
+
+const PROBE_MIN_MS = 10_000;
+
+/**
+ * Wraps `win.fetch` once. Returns `{ check }`: call it when something failed in
+ * a way that could be an expired session (e.g. the WebSocket closed).
+ */
+export function installSessionGuard({ win = window, doc = document, reload = () => win.location.reload() } = {}) {
+  if (win.__worcaSessionGuard) return win.__worcaSessionGuard;
+  const origFetch = win.fetch.bind(win);
+  let lastProbe = 0;
+  let probing = null;
+  let shown = false;
+
+  const sameOrigin = (input) => {
+    try {
+      const url = new URL(typeof input === 'string' ? input : input?.url ?? String(input), win.location.href);
+      return url.origin === win.location.origin;
+    } catch { return false; }
+  };
+
+  function showBanner(reason) {
+    if (shown) return;
+    shown = true;
+    const bar = doc.createElement('div');
+    bar.className = 'session-expired';
+    bar.setAttribute('role', 'alert');
+    bar.dataset.reason = reason;
+    const text = doc.createElement('span');
+    text.className = 'se-text';
+    text.textContent = reason === 'unauthorized'
+      ? 'Worca could not confirm your sign-in.'
+      : 'Your sign-in has expired.';
+    const btn = doc.createElement('button');
+    btn.type = 'button';
+    btn.className = 'se-reload';
+    btn.textContent = 'Sign in again';
+    btn.addEventListener('click', () => reload());
+    bar.append(text, btn);
+    doc.body.prepend(bar);
+  }
+
+  // A manual-redirect probe of an unauthenticated route: an opaque redirect
+  // can only come from a proxy in front of worca asking for a new sign-in.
+  function check() {
+    if (shown || probing) return probing || Promise.resolve();
+    const now = Date.now();
+    if (now - lastProbe < PROBE_MIN_MS) return Promise.resolve();
+    lastProbe = now;
+    probing = origFetch('/api/health', { redirect: 'manual', cache: 'no-store', credentials: 'same-origin' })
+      .then((r) => { if (r.type === 'opaqueredirect' || r.status === 401) showBanner('expired'); })
+      .catch(() => { /* server unreachable: not a session problem */ })
+      .finally(() => { probing = null; });
+    return probing;
+  }
+
+  win.fetch = async (input, init) => {
+    try {
+      const res = await origFetch(input, init);
+      if (res.status === 401 && sameOrigin(input)) showBanner('unauthorized');
+      return res;
+    } catch (err) {
+      if (sameOrigin(input) && err?.name !== 'AbortError') check();
+      throw err;
+    }
+  };
+
+  win.__worcaSessionGuard = { check };
+  return win.__worcaSessionGuard;
+}