@xingjisoft/neutrino 0.2.1 → 0.4.0

package/dist/web/settings.js

@@ -1,52 +1,109 @@
-import { DEFAULT_CONFIG, INTENSITY_LEVELS, contextWindow, isContextWindow, loadConfig, loadModels, resolveModelSelection, saveConfig, saveModels, } from "../config.js";
+import { DEFAULT_CONFIG, INTENSITY_LEVELS, WEB_LANGUAGES, contextWindow, intensityForModel, isContextWindow, loadConfig, loadModels, modelContextWindow, modelContextWindowKey, modelIntensities, normalizeApprovalMode, normalizeIntensity, normalizeWebLanguage, resolveModelSelection, saveConfig, saveModels, } from "../config.js";
 import { hashWebPassword, validateWebPassword } from "./auth.js";
-/** Public settings use a whitelist: API keys and cached credentials stay on disk. */
-export function getWebSettings() {
-    const config = { ...DEFAULT_CONFIG, ...loadConfig() };
-    const providers = loadModels().providers.map((provider) => ({
+import { defaultProPreset, loadProModels, proMaxRecursionDepth, requireProPreset } from "../pro/config.js";
+/**
+ * Public settings use a whitelist: API keys and cached credentials stay on disk.
+ *
+ * `mode` selects the workspace. The Pro workspace has its own defaults,
+ * language, plan and reviewer settings; the login password and the approval
+ * policy are layered in from the shared config by loadConfig(), so the two
+ * pages cannot drift apart on those.
+ */
+export function getWebSettings(mode = "standard") {
+    const config = { ...DEFAULT_CONFIG, ...loadConfig(mode) };
+    const catalog = loadModels();
+    const providers = catalog.providers.map((provider) => ({
         name: provider.name,
-        models: provider.models.map((model) => ({ name: model.name, configured: Boolean(model.api_key?.trim()), context_window: contextWindow(model.context_window) })),
+        models: provider.models.map((model) => ({
+            name: model.name,
+            configured: Boolean(model.api_key?.trim()),
+            context_window: modelContextWindow(provider.name, model, mode),
+            // The browser only offers these, so it cannot submit a level the model
+            // does not declare. Missing field = every intensity.
+            intensities: modelIntensities(model),
+        })),
     }));
     const preferred = providers.find((p) => p.name === config.selected_provider);
     const provider = preferred ?? providers.find((p) => p.models.some((m) => m.configured)) ?? providers[0];
     const model = provider?.models.find((m) => m.name === config.selected_model) ??
         provider?.models.find((m) => m.configured) ?? provider?.models[0];
-    const intensity = String(config.selected_intensity ?? config.default_intensity);
+    const configuredModel = provider && model
+        ? catalog.providers.find((p) => p.name === provider.name)?.models.find((m) => m.name === model.name) ?? null
+        : null;
+    const intensity = intensityForModel(configuredModel, config.selected_intensity ?? config.default_intensity, config.default_intensity);
     return {
+        ...(mode === "pro" ? { pro: {
+                presets: loadProModels().tier.map((preset) => ({
+                    name: preset.name, chinese_name: preset.chinese_name,
+                    "model-setting": preset["model-setting"].map((setting) => ({
+                        type: setting.type, provider: setting.provider, model: setting.model,
+                        intensity: setting.intensity, context_window: setting.context_window,
+                    })),
+                })),
+                preset: defaultProPreset(),
+                max_recursion_depth: proMaxRecursionDepth(),
+            } } : {}),
         providers,
         intensities: INTENSITY_LEVELS,
+        languages: WEB_LANGUAGES.map((value) => ({ value, label: value === "zh" ? "简体中文" : "English" })),
         selection: {
             provider: provider?.name ?? "",
             model: model?.name ?? "",
-            intensity: INTENSITY_LEVELS.includes(intensity) ? intensity : "High",
+            intensity,
         },
         settings: {
-            default_intensity: String(config.default_intensity),
+            default_intensity: intensityForModel(configuredModel, config.default_intensity, "High"),
             model_context_window: model?.context_window ?? contextWindow(undefined),
             approval_model: String(config.approval_model ?? ""),
             auto_approve_extreme_risk: config.auto_approve_extreme_risk === true,
             sound_alerts: config.sound_alerts !== false,
+            language: normalizeWebLanguage(config.language),
+            plan_first: config.plan_first !== false,
+            approval_mode: normalizeApprovalMode(config.approval_mode),
+            web_console: config.web_console !== false,
+            web_lan: config.web_lan === true,
         },
     };
 }
 /** Validate the complete patch before writing anything, preserving unrelated settings. */
-export function updateWebSettings(value) {
+export function updateWebSettings(value, mode = "standard") {
     if (!value || typeof value !== "object" || Array.isArray(value))
         throw new Error("invalid settings body");
     const body = value;
     if (Object.keys(body).some((key) => key !== "selection" && key !== "settings"))
         throw new Error("unknown settings field");
-    const config = loadConfig();
+    const config = loadConfig(mode);
+    // Resolve the requested model first: its declared intensities decide which
+    // default level can be saved with this patch. Settings that do not touch a
+    // model stay editable even when the catalogue is empty.
+    const chosen = body.selection !== undefined ? resolveModelSelection(body.selection, false) : undefined;
+    let target = chosen ?? null;
+    const settingsTarget = () => {
+        target ??= resolveModelSelection(getWebSettings(mode).selection, false);
+        return target;
+    };
     if (body.settings !== undefined) {
         if (!body.settings || typeof body.settings !== "object" || Array.isArray(body.settings))
             throw new Error("invalid settings");
         const patch = body.settings;
         for (const [key, val] of Object.entries(patch)) {
-            if (key === "default_intensity") {
-                if (typeof val !== "string" || !INTENSITY_LEVELS.includes(val))
+            if (key === "pro_preset" && mode === "pro") {
+                config.pro_preset = requireProPreset(val);
+            }
+            else if (key === "pro_max_recursion_depth" && mode === "pro") {
+                if (typeof val !== "number" || !Number.isSafeInteger(val) || val < 1 || val > 100) {
+                    throw new Error("Pro recursion depth must be a whole number from 1 to 100");
+                }
+                config.pro_max_recursion_depth = val;
+            }
+            else if (key === "default_intensity") {
+                const level = normalizeIntensity(val);
+                if (!level)
                     throw new Error("invalid default intensity");
-                config.default_intensity = val;
-                config.selected_intensity = val;
+                if (!modelIntensities(settingsTarget().model).includes(level))
+                    throw new Error("this model does not support that thinking intensity");
+                config.default_intensity = level;
+                config.selected_intensity = level;
             }
             else if (key === "model_context_window") {
                 if (!isContextWindow(val))
@@ -67,6 +124,32 @@ export function updateWebSettings(value) {
                     throw new Error("auto-approval must be a boolean");
                 config[key] = val;
             }
+            else if (key === "language") {
+                if (typeof val !== "string" || !WEB_LANGUAGES.includes(val)) {
+                    throw new Error("invalid language");
+                }
+                config.language = val;
+            }
+            else if (key === "plan_first") {
+                if (typeof val !== "boolean")
+                    throw new Error("invalid plan setting");
+                config.plan_first = val;
+            }
+            else if (key === "approval_mode") {
+                if (val !== "request" && val !== "auto")
+                    throw new Error("invalid approval mode");
+                config.approval_mode = val;
+            }
+            else if (key === "web_console") {
+                if (typeof val !== "boolean")
+                    throw new Error("web console must be a boolean");
+                config.web_console = val;
+            }
+            else if (key === "web_lan") {
+                if (typeof val !== "boolean")
+                    throw new Error("LAN access must be a boolean");
+                config.web_lan = val;
+            }
             else if (key === "web_password") {
                 validateWebPassword(val);
             }
@@ -75,8 +158,7 @@ export function updateWebSettings(value) {
             }
         }
     }
-    if (body.selection !== undefined) {
-        const chosen = resolveModelSelection(body.selection, false);
+    if (chosen) {
         config.selected_provider = chosen.provider;
         config.selected_model = chosen.model.name;
         config.selected_model_url = chosen.model.url;
@@ -90,12 +172,23 @@ export function updateWebSettings(value) {
         config.web_password_hash = hashWebPassword(password);
     const window = body.settings?.model_context_window;
     if (window !== undefined) {
-        const selection = body.selection ?? getWebSettings().selection;
-        const chosen = resolveModelSelection(selection, false);
-        const models = loadModels();
-        const model = models.providers.find((p) => p.name === chosen.provider).models.find((m) => m.name === chosen.model.name);
-        model.context_window = window;
-        saveModels(models);
+        const selected = settingsTarget();
+        if (mode === "pro") {
+            // Context capacity is part of a workspace's compression settings. Pro
+            // stores its own copy instead of editing the shared model catalog.
+            const current = config.model_context_windows;
+            const overrides = current && typeof current === "object" && !Array.isArray(current)
+                ? { ...current }
+                : {};
+            overrides[modelContextWindowKey(selected.provider, selected.model.name)] = window;
+            config.model_context_windows = overrides;
+        }
+        else {
+            const models = loadModels();
+            const model = models.providers.find((p) => p.name === selected.provider).models.find((m) => m.name === selected.model.name);
+            model.context_window = window;
+            saveModels(models);
+        }
     }
-    saveConfig(config);
+    saveConfig(config, mode);
 }

package/package.json

@@ -1,37 +1,37 @@
-{
-  "name": "@xingjisoft/neutrino",
-  "version": "0.2.1",
-  "description": "XINGJI Neutrino - a CLI coding agent in the terminal.",
-  "type": "module",
-  "license": "Apache-2.0",
-  "bin": {
-    "neutrino": "dist/bin.js"
-  },
-  "main": "dist/app.js",
-  "files": [
-    "dist",
-    "assets",
-    "web"
-  ],
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "test": "npm run build && node scripts/test-paste.mjs && node scripts/test-mouse.mjs && node scripts/test-cursor.mjs && node scripts/test-selection.mjs && node scripts/test-drag-scroll.mjs && node scripts/test-selection-performance.mjs && node scripts/test-copy.mjs && node scripts/test-scrollbar.mjs && node scripts/test-render.mjs && node scripts/test-drift.mjs && node scripts/test-sanitize.mjs && node scripts/test-markdown.mjs && node scripts/test-wrap.mjs && node scripts/test-fetch.mjs && node scripts/test-compact.mjs && node scripts/test-history-fold.mjs && node scripts/test-web-history.mjs && node scripts/test-web-default.mjs && node scripts/test-turn-fold.mjs && node scripts/test-plan.mjs && node scripts/test-subagent.mjs && node scripts/test-web-settings.mjs && node scripts/test-tools.mjs && node scripts/test-approval.mjs && node scripts/test-approval-review.mjs && node scripts/test-approval-ui.mjs && node scripts/test-web-approval-details.mjs && node scripts/test-approval-mode.mjs && node scripts/test-approval-context.mjs && node scripts/test-settings-render.mjs && node scripts/test-approval-flow.mjs && node scripts/test-web.mjs && node scripts/test-web-settings-http.mjs && node scripts/test-web-auth.mjs && node scripts/test-web-auth-ui.mjs && node scripts/test-interrupt.mjs && node scripts/test-terminal-lifecycle.mjs && node scripts/test-persistence.mjs && node scripts/test-resilience.mjs && node scripts/test-approval-timeout.mjs && node scripts/test-approval-hardening.mjs && node scripts/test-approval-extreme.mjs && node scripts/test-approval-reason.mjs",
-    "prepare": "npm run build",
-    "web": "node dist/bin.js web"
-  },
-  "keywords": [
-    "cli",
-    "agent",
-    "ai",
-    "terminal",
-    "llm",
-    "coding"
-  ],
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "typescript": "^5.5.0"
-  }
-}
+{
+  "name": "@xingjisoft/neutrino",
+  "version": "0.4.0",
+  "description": "XINGJI Neutrino - a CLI coding agent in the terminal.",
+  "type": "module",
+  "license": "Apache-2.0",
+  "bin": {
+    "neutrino": "dist/bin.js"
+  },
+  "main": "dist/app.js",
+  "files": [
+    "dist",
+    "assets",
+    "web"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "npm run build && node scripts/test-paste.mjs && node scripts/test-mouse.mjs && node scripts/test-cursor.mjs && node scripts/test-selection.mjs && node scripts/test-drag-scroll.mjs && node scripts/test-selection-performance.mjs && node scripts/test-copy.mjs && node scripts/test-scrollbar.mjs && node scripts/test-render.mjs && node scripts/test-drift.mjs && node scripts/test-sanitize.mjs && node scripts/test-markdown.mjs && node scripts/test-wrap.mjs && node scripts/test-fetch.mjs && node scripts/test-compact.mjs && node scripts/test-history-fold.mjs && node scripts/test-web-history.mjs && node scripts/test-web-default.mjs && node scripts/test-turn-fold.mjs && node scripts/test-plan.mjs && node scripts/test-subagent.mjs && node scripts/test-web-settings.mjs && node scripts/test-model-intensity.mjs && node scripts/test-web-markdown.mjs && node scripts/test-web-i18n.mjs && node scripts/test-web-workspaces.mjs && node scripts/test-tools.mjs && node scripts/test-approval.mjs && node scripts/test-approval-review.mjs && node scripts/test-approval-ui.mjs && node scripts/test-web-approval-details.mjs && node scripts/test-approval-mode.mjs && node scripts/test-approval-context.mjs && node scripts/test-settings-render.mjs && node scripts/test-approval-flow.mjs && node scripts/test-web.mjs && node scripts/test-web-settings-http.mjs && node scripts/test-web-lan.mjs && node scripts/test-web-auth.mjs && node scripts/test-web-auth-ui.mjs && node scripts/test-web-pro.mjs && node scripts/test-pro-preflight.mjs && node scripts/test-pro-runtime.mjs && node scripts/test-pro-team.mjs && node scripts/test-pro-ui.mjs && node scripts/test-interrupt.mjs && node scripts/test-terminal-lifecycle.mjs && node scripts/test-persistence.mjs && node scripts/test-resilience.mjs && node scripts/test-approval-timeout.mjs && node scripts/test-approval-hardening.mjs && node scripts/test-approval-extreme.mjs && node scripts/test-approval-reason.mjs",
+    "prepare": "npm run build",
+    "web": "node dist/bin.js web"
+  },
+  "keywords": [
+    "cli",
+    "agent",
+    "ai",
+    "terminal",
+    "llm",
+    "coding"
+  ],
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.5.0"
+  }
+}

package/web/README.md

@@ -8,8 +8,18 @@ A small, dependency-free single page app that is served by the Neutrino CLI at
 - watch a running terminal conversation stream in real time: the work behind every
   finished turn folds into one line that opens on a click, while the reply itself
   stays on screen (the turn being answered is open, and a pause is not a fold);
+- read replies as rendered markdown: headings, nested/task lists, tables, block
+  quotes, code fences, emphasis, safe links and images; raw HTML is escaped;
+- start a new conversation in a working directory you choose, including a folder
+  created from the built-in folder picker;
+- switch the workspace between every known folder and **All directories**;
 - switch the provider, model and intensity for the next turn;
-- edit defaults, context compression and approval settings in a Settings dialog;
+- edit every terminal setting — defaults, interface language, plan-first turns,
+  default approval mode, context compression, reviewer, Web password, and LAN
+  access;
+- switch the interface between English and 简体中文, instantly and persistently;
+- open the same plan / token card as the terminal's `ⓘ`, clear a conversation,
+  delete a saved transcript, and review other agents' read-only history;
 - drive the running conversation: pause / resume the current turn and send new
   messages (they queue while the agent is busy);
 - pick up a saved conversation in the browser and keep chatting, even when no
@@ -26,7 +36,9 @@ neutrino
 ```
 
 Use `--port` to move it, `--no-web` to skip it for that run, or turn it off
-permanently in the terminal's **Settings → Web console**.
+permanently in the terminal's **Settings → Web console**. LAN access can be
+switched on and off at any time in the browser's **Settings → Web access**
+without restarting anything.
 
 Or serve only the saved history, without a terminal:
 
@@ -49,6 +61,17 @@ neutrino --host 100.64.0.7                   # TUI + web UI, one specific addres
 neutrino web --port 8765 --lan               # headless web UI, every interface
 ```
 
+You can also switch this at runtime from the browser: **Settings → Web access →
+Allow access from other devices (LAN, 0.0.0.0)**. The server re-binds the same
+port to `0.0.0.0` immediately — no restart, and the tab you are using keeps its
+open connections — and saves the choice in `config.json`, so the next launch
+starts on the LAN too. Turning the switch off returns the console to
+`127.0.0.1`. An explicit `--host`/`--lan` decides the interface at startup; the
+in-page switch takes over from there for the running process.
+
+The console can read every transcript and drive an agent with shell access, so
+keep the Web password on: anyone who can reach the port can use it.
+
 Startup prints the addresses to open:
 
 ```
@@ -99,6 +122,61 @@ headers, token URLs, `--token` and `NEUTRINO_WEB_TOKEN` are no longer used.
 Static files and the login/logout routes stay public. `--no-auth` explicitly
 disables password login.
 
+## Pro workspace
+
+The composer has a preset card at its bottom-right. Open it and drag the slider
+to select a team. There are eight roles: main, reasoning, frontend, backend,
+approval, planning, modeling and reserved image generation. Presets are copied
+unchanged from the supplied example into `~/.neutrino/pro/model.json` on first
+use. Edit role assignments there; **Settings** controls the default preset and
+maximum delegation depth (10 by default).
+
+Every task checks all active models with a small completion request. Unavailable
+roles recurse down to lower presets independently, and a popup shows the
+replacements. These changes are task-local. The planner then writes the plan
+before main execution; nested specialist calls and commands use the same
+approval gate, with the approval role providing automated reviews.
+
+Pro API additions: settings return `pro.presets`, `pro.preset` and
+`pro.max_recursion_depth`; settings patches accept `pro_preset` and
+`pro_max_recursion_depth`. New and resumed conversations accept `pro_preset`.
+`POST /pro/api/live/:key/pro-preset` with `{"preset":"medium"}` changes an idle
+or paused conversation. Snapshots include `pro.checking`, effective `pro.models`,
+`pro.fallbacks`, `pro.checkId` and any `pro.error`.
+
+The console has two workspaces. The regular one lives at `/`; the isolated **Pro** workspace lives at `/pro`. Both use the same page, the
+same login cookie and the same model catalog, but nothing else is shared:
+
+- **Conversations** — Pro transcripts are saved under
+  `~/.neutrino/pro/session/`, so neither sidebar ever lists the other
+  workspace's history. Live sessions are separated too: a Pro tab cannot read,
+  stream, drive or close a regular session, and vice versa.
+- **Settings** — Pro has its own `~/.neutrino/pro/config.json` with its own
+  language, sound alerts, default preset, delegation depth and recent folders.
+  `~/.neutrino/pro/model.json` records role models, effort and context capacities;
+  provider credentials stay in the shared ordinary model catalog.
+- **Shared on purpose** — the Web password, the approval policy (default
+  approval mode, extreme-risk auto-approval) and the console's LAN access. They
+  protect or configure the whole machine, so both workspaces, the terminal and
+  every browser read and write the same values.
+
+In the regular console, click the orbit badge to the left of the **Neutrino**
+title (or the blue hint pointing at it). A `#151515` curtain fades in and plays
+the `neutrino-pro.gif` wordmark in the centre; after three seconds it fades out
+onto `/pro`. The X on the blue hint dismisses it permanently for this browser.
+In the terminal, the **启用Pro模式** box below the status bar starts the Web
+console if necessary and opens `/pro` in the default browser. Pro mode uses the
+static `web/neutrino.png` wordmark as its top-left logo, renames the sidebar
+brand to **Neutrino Pro**, and puts an **Exit Pro mode / 返回普通模式** button
+at the top-right of the workspace, which returns to the regular console at
+`/`. The rest of the workspace is identical to the regular one. The interface
+is available in English and 简体中文 in both workspaces (each remembers its own
+choice).
+
+Every API route below has an isolated twin under `/pro/api/` — for example,
+`/pro/api/overview`, `/pro/api/settings` and `/pro/api/live/:key/stream`. The
+login/logout routes are shared and stay unprefixed.
+
 ## Models and settings
 
 Open a conversation to see the **Provider**, **Model** and **Thinking**
@@ -112,13 +190,47 @@ selection. Changing the selectors and then using **Continue here** or sending a
 message also uses the draft selection, so a transcript whose old model was
 removed can still be continued.
 
-The **Settings** (gear) button in the sidebar opens defaults for new conversations,
-the context compression threshold, the approval reviewer model, and the
-extreme-risk automatic approval option. Save settings explicitly; cancelling
-leaves the saved values intact. Conversation model changes are separate from
-these defaults. Models come from the same catalog as the terminal, and API keys
-stay on the server. Configure missing keys in the terminal model screen first.
-Intensity uses the same Low–Ultra sampling settings as the terminal.
+The **Settings** (gear) button in the sidebar opens the interface language,
+plan-first turns, the default approval mode, defaults for new conversations, the
+context compression threshold, the approval reviewer model, sound alerts, the
+extreme-risk automatic approval option, LAN access, and the Web password. Save
+settings explicitly; cancelling leaves the saved values intact. Conversation
+model changes are separate from these defaults. Models come from the same
+catalog as the terminal, and API keys stay on the server. Configure missing keys
+in the terminal model screen first. Intensity uses the same Low–Ultra sampling
+settings as the terminal, and both only offer the levels the selected model
+declares in `model.json`. The regular and [Pro](#pro-workspace) workspaces keep
+their own copy of every setting here except the approval policy, the Web password
+and LAN access, which belong to the whole process.
+
+## New conversations and working directories
+
+**New conversation** starts a chat that has no transcript yet. The dialog takes a
+working directory plus provider, model, thinking level and approval mode. The
+conversation is browser-owned from that moment: it appears in the sidebar under
+its folder and is written to its own session file once the first message exists.
+
+**Browse…** opens the server-side folder picker. It lists folders only, offers
+the existing drive roots (on Windows) or `/`, moves up through the directory
+tree, and can create a folder in place. **Use this folder** fills the working
+directory of the new conversation.
+
+**Working directories** (the folder button under New conversation) shows every
+folder the console has opened or that already holds conversations. Choosing one
+scopes the sidebar to that folder and shows a landing page where typing starts a
+conversation there. **All directories** returns to the grouped view. Opened
+folders are stored in `config.json` under `web_workspaces`, so an empty folder
+that has no conversations yet is still listed after a restart.
+
+## Interface language
+
+The sidebar footer and **Settings → Interface** both offer English and 简体中文.
+The change is applied to the already-open page (labels, messages, status line,
+plan card and dialogs) without a reload, is stored in the workspace's
+`config.json`, and is shared by every browser showing that workspace. The
+regular and Pro workspaces remember their own choice. The terminal UI stays in
+English. New conversation content, of course, remains in the language the model
+writes.
 
 ## History vs. live sessions
 
@@ -144,6 +256,22 @@ Browser-owned sessions are dropped after 30 idle minutes, or immediately through
 `POST /api/live/:key/close`. Sessions owned by the terminal cannot be closed from
 the web.
 
+**Clear** empties the running conversation in place (the previous transcript is
+checkpointed first and stays on disk), mirroring `Ctrl+L` in the terminal. A
+read-only transcript gets **Delete** instead, which removes the saved JSON file
+after confirmation; a conversation that is currently live cannot be deleted.
+Sessions from the terminal's `Ctrl+L` also appear as fresh live conversations in
+the sidebar.
+
+## Other agents' history
+
+**Other agents** in the sidebar lists read-only sessions recorded by Claude Code,
+Codex and OpenCode for the current working directory (the scoped workspace, the
+open conversation's folder, or the server's launch directory). Clicking one shows
+the complete transcript in the conversation pane with a `read-only` badge. The
+sources are the same as the terminal's history browser; OpenCode requires Node.js
+22.13+ because it reads its SQLite database through `node:sqlite`.
+
 ## Plan-first turns
 
 A browser-owned turn is planned before it runs, exactly like a turn in the
@@ -169,8 +297,10 @@ needed by a client:
 
 `status` is `pending`, `active`, `done` or `failed`; `stopped: true` marks a plan
 whose turn was paused before the last step. The terminal draws this in its `ⓘ`
-card; a browser client can render the same timeline from the snapshot. The page
-itself currently shows the plan as the message it already is.
+card, and the web console renders the same timeline in its `ⓘ` plan card: the
+active step is highlighted, finished steps are ticked, failed steps are red, and
+the footer counts the steps completed. The card also shows token usage when no
+plan is running.
 
 Planning is the default for both loops. It can be turned off with
 `"plan_first": false` in `~/.neutrino/config.json` or `NEUTRINO_PLAN=off`; a
@@ -193,21 +323,31 @@ to know whether a conversation is driven by the terminal or by the server.
 | --- | --- | --- |
 | GET | `/api/overview` | Sessions grouped by cwd + live sessions |
 | GET | `/api/sessions` | Flat list of saved sessions |
-| GET | `/api/settings` | Model catalog and public settings; no credentials |
-| POST | `/api/settings` | Save validated `{ selection?, settings? }` defaults |
+| GET | `/api/workspaces` | Recent working directories, launch cwd and home |
+| POST | `/api/workspaces` | Validate and remember `{ "path": "…" }` |
+| GET | `/api/fs?path=…` | Folder listing for the picker (folders only, roots, parent) |
+| POST | `/api/fs/mkdir` | Create `{ "path": "…" }` and return the new path |
+| POST | `/api/conversations` | Start `{ cwd, selection?, approval_mode? }`, returns `{ key, snapshot }` |
+| GET | `/api/settings` | Model catalog (each model lists its supported intensities), languages, public settings, and the live bind address (`web_host`, `web_urls`); no credentials |
+| POST | `/api/settings` | Save validated `{ selection?, settings? }`, including `language`, `plan_first`, `approval_mode`, `web_lan` and `web_password` |
 | GET | `/api/session/:id` | One saved transcript |
 | POST | `/api/session/:id/continue` | Resume a transcript with optional `{ selection }`, returns `{ key }` |
+| POST | `/api/session/:id/delete` | Delete a saved, non-running transcript |
+| GET | `/api/agents/:agent/sessions?cwd=…` | Read-only sessions from Claude Code / Codex / OpenCode |
+| GET | `/api/agents/:agent/sessions/:id` | Read-only messages of one other-agent session |
 | GET | `/api/live/:key` | Snapshot of a live session |
 | GET | `/api/live/:key/stream` | SSE stream of a live session |
 | POST | `/api/live/:key/pause` | Pause the running turn |
 | POST | `/api/live/:key/resume` | Resume a paused conversation |
 | POST | `/api/live/:key/message` | Send `{ "text": "…" }` |
 | POST | `/api/live/:key/model` | Apply `{ provider, model, intensity }` while idle or paused |
+| POST | `/api/live/:key/clear` | Empty the conversation in place; keeps the old transcript |
+| POST | `/api/live/:key/approve` | Answer `{ "approved": true|false }` |
+| POST | `/api/live/:key/approval-mode` | Set `{ "mode": "request"|"auto" }` |
 | POST | `/api/live/:key/close` | Dispose a browser-owned session |
 | GET | `/api/health` | Liveness probe |
 | POST | `/api/auth/login` | Sign in with `{ "password": "…" }` |
 | POST | `/api/auth/logout` | Clear the login cookie |
-| GET / POST | `/api/settings` | Read settings or update them, including `settings.web_password` |
 
 Conversation and settings routes require the login cookie; see
 [Authentication](#authentication). `OPTIONS` is answered unauthenticated so
@@ -219,8 +359,10 @@ When a running agent wants to do something risky (a delete-class command, an
 install, a path outside the working directory) the browser shows an orange
 **Request Approval** banner above the composer, showing the full command (or
 formatted tool arguments), working directory and risk reasons, plus two buttons.
-Long proposals remain complete and scroll inside the card. Automatic reviews
-show the same proposal details while they run.
+The banner only appears when a human decision is actually waiting. Long proposals
+remain complete and scroll inside the card.
+Automatic reviews are reported in the conversation's status badge instead
+(`reviewing round 2/3`), so auto approval never looks like a request for approval.
 `Approve` runs the call, `Deny` returns a note to the agent.
 The reviewer uses the current turn's captured user request and earlier user
 messages; queued input belongs to the next turn. Expand a denied tool result