@yemi33/minions 0.1.2178 → 0.1.2180

package/dashboard/js/render-other.js

@@ -12,7 +12,7 @@ function renderProjects(projects) {
   // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: project name, path, branch metadata)
   list.innerHTML = visible.map(p =>
     '<span data-project="' + escHtml(p.name) + '" title="' + escHtml(p.path || '') + '" style="display:inline-flex;align-items:center;gap:6px;background:var(--surface2);border:1px solid var(--border);border-radius:4px;padding:3px 10px;color:var(--blue);font-weight:500;cursor:help">' +
-      escHtml(p.name) +
+      escHtml(p.displayName || p.name) +
       _renderProjectBranch(p) +
       '<span onclick="event.stopPropagation();projectChipRemove(\'' + escHtml(p.name) + '\')" title="Remove project (cancels pending work, archives data dir)" style="color:var(--muted);font-weight:600;cursor:pointer;padding:0 2px;line-height:1" onmouseover="this.style.color=\'var(--red)\'" onmouseout="this.style.color=\'var(--muted)\'">&times;</span>' +
     '</span>'
@@ -523,7 +523,148 @@ async function _addSelectedProjects() {
   }
 }
 
-window.MinionsOther = { renderProjects, optimisticallyAddProject, projectChipRemove, renderMcpServers, renderMetrics, renderLlmPerf, renderTokenUsage, _aggregateEngineUsageForTokenTile, openScanProjectsModal };
+function _scopeBadge(scope, projectName, pluginName) {
+  // PRD-shaped scope label (user|project:<name>|plugin|agent-skill). The
+  // commands feed today only emits user-roots (per-runtime), plugin, and
+  // project; agent-skill is reserved so when a runtime starts shipping
+  // agent-scoped commands they don't need a new badge style.
+  let label = scope;
+  let color = 'var(--muted)';
+  if (scope === 'project' && projectName) { label = 'project:' + projectName; color = 'var(--blue)'; }
+  else if (scope === 'plugin') { label = pluginName ? 'plugin:' + pluginName : 'plugin'; color = 'var(--purple)'; }
+  else if (scope === 'agent-skill') { color = 'var(--orange)'; }
+  else if (scope === 'claude-code' || scope === 'copilot' || scope === 'codex') {
+    label = 'user:' + scope;
+  }
+  return '<span style="font-size:var(--text-xs);color:' + color + ';margin-left:6px;font-weight:500">[' + escHtml(label) + ']</span>';
+}
+
+function renderCommands(commands) {
+  const el = document.getElementById('commands-list');
+  const countEl = document.getElementById('commands-count');
+  const arr = Array.isArray(commands) ? commands : [];
+  if (countEl) countEl.textContent = arr.length;
+  if (!el) return;
+  if (!arr.length) {
+    el.innerHTML = '<p class="empty">No slash commands found. Drop a <code>.md</code> file into <code>~/.claude/commands/</code>, <code>~/.copilot/commands/</code>, a plugin\'s commands dir, or a registered project\'s <code>.claude/commands/</code> — they\'ll appear here automatically.</p>';
+    return;
+  }
+
+  // Group by scope bucket so the list reads "user roots first, then plugins, then projects".
+  const buckets = new Map();
+  for (const c of arr) {
+    const key = c.scope === 'project' ? 'project:' + (c.projectName || '?')
+              : c.scope === 'plugin' ? 'plugin:' + (c.pluginName || '?')
+              : c.scope; // user-roots use their runtime name
+    if (!buckets.has(key)) buckets.set(key, []);
+    buckets.get(key).push(c);
+  }
+
+  const sections = [];
+  for (const [key, list] of buckets) {
+    const header = '<div style="font-size:var(--text-sm);color:var(--muted);text-transform:uppercase;letter-spacing:0.04em;margin:10px 0 4px">' + escHtml(key) + ' <span style="color:var(--muted);text-transform:none;letter-spacing:0">(' + list.length + ')</span></div>';
+    const rows = list.map(c =>
+      '<div style="font-size:var(--text-base);padding:4px 10px;background:var(--surface2);border:1px solid var(--border);border-radius:6px;color:var(--text);display:inline-flex;align-items:center;gap:6px;margin:2px 4px 2px 0" title="' + escHtml((c.title || '') + (c.rel ? '  •  ' + c.rel : '')) + '">' +
+        '<code style="color:var(--blue);background:transparent;padding:0">/' + escHtml(c.commandName || '') + '</code>' +
+        _scopeBadge(c.scope, c.projectName, c.pluginName) +
+      '</div>'
+    ).join('');
+    sections.push(header + '<div style="display:flex;flex-wrap:wrap;gap:4px">' + rows + '</div>');
+  }
+  // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: scope key, command name, project name, plugin name, title, rel path)
+  el.innerHTML = sections.join('') +
+    '<p style="font-size:var(--text-sm);color:var(--muted);margin:10px 0 0">Mirrors the runtime-native command roots that adapters expose via <code>getCommandRoots()</code>. Projects and plugins are aggregated alongside user-scope dirs.</p>';
+}
+
+function _harnessRowsBlock(label, rows) {
+  if (!rows || !rows.length) {
+    return '<div style="font-size:var(--text-sm);color:var(--muted);margin:4px 0 0 12px">' + escHtml(label) + ': <em>(adapter does not expose this)</em></div>';
+  }
+  const body = rows.map(r => {
+    const marker = r.exists ? '<span style="color:var(--green)">✓</span>' : '<span style="color:var(--orange)">⚠</span>';
+    const missing = r.exists ? '' : ' <span style="color:var(--orange);font-size:var(--text-xs)">(missing on disk)</span>';
+    return '<div style="font-family:monospace;font-size:var(--text-sm);margin-left:18px;display:flex;gap:8px;align-items:baseline">' +
+      marker + ' <span>' + escHtml(r.path) + '</span> <span style="color:var(--muted)">[' + escHtml(r.scope) + ']</span>' + missing +
+    '</div>';
+  }).join('');
+  return '<div style="margin:4px 0 0 12px"><div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:2px">' + escHtml(label) + ':</div>' + body + '</div>';
+}
+
+function renderHarnessDiagnostics(diag) {
+  const el = document.getElementById('harness-diag');
+  if (!el) return;
+  if (!diag || typeof diag !== 'object') {
+    el.innerHTML = '<p class="empty">Harness diagnostics unavailable.</p>';
+    return;
+  }
+  const parts = [];
+  parts.push('<div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:8px">Fleet-default runtime: <code style="color:var(--blue)">' + escHtml(diag.fleetDefaultCli || '?') + '</code></div>');
+
+  // Per-runtime adapter rows
+  for (const r of diag.runtimes || []) {
+    parts.push('<details style="margin:6px 0;border:1px solid var(--border);border-radius:6px;padding:8px 10px;background:var(--surface2)"><summary style="font-weight:600;cursor:pointer">Runtime: ' + escHtml(r.name) + '</summary>' +
+      _harnessRowsBlock('User asset dirs (--add-dir)', r.userAssetDirs) +
+      _harnessRowsBlock('Skill roots (CLI native discovery)', r.skillRoots) +
+      _harnessRowsBlock('Skill write targets', r.skillWriteTargets) +
+      _harnessRowsBlock('Slash command roots', r.commandRoots) +
+      _harnessRowsBlock('MCP config files', r.mcpConfigPaths) +
+    '</details>');
+  }
+
+  // --add-dir snapshot for fleet default
+  const snap = diag.addDirSnapshot || [];
+  parts.push('<details open style="margin:6px 0;border:1px solid var(--border);border-radius:6px;padding:8px 10px;background:var(--surface2)"><summary style="font-weight:600;cursor:pointer">--add-dir snapshot for ' + escHtml(diag.fleetDefaultCli || 'fleet default') + ' <span style="color:var(--muted);font-weight:400">(' + snap.length + ' dir' + (snap.length === 1 ? '' : 's') + ')</span></summary>' +
+    (snap.length === 0
+      ? '<div style="font-size:var(--text-sm);color:var(--muted);margin:6px 0 0 12px"><em>(no dirs attached — engine/spawn-agent.js unavailable or adapter has no asset dirs)</em></div>'
+      : snap.map(d =>
+          '<div style="font-family:monospace;font-size:var(--text-sm);margin-left:18px;display:flex;gap:8px;align-items:baseline"><span style="color:var(--green)">✓</span> <span>' + escHtml(d.path) + '</span> <span style="color:var(--muted)">[' + escHtml(d.scope) + ']</span></div>'
+        ).join('')
+    ) +
+  '</details>');
+
+  // Suppressed assets
+  const suppressed = diag.suppressed || [];
+  if (suppressed.length > 0) {
+    parts.push('<details open style="margin:6px 0;border:1px solid var(--border);border-radius:6px;padding:8px 10px;background:var(--surface2)"><summary style="font-weight:600;cursor:pointer">Suppressed assets <span style="color:var(--muted);font-weight:400">(' + suppressed.length + ')</span></summary>' +
+      suppressed.map(s =>
+        '<div style="margin:6px 0 0 12px"><code style="color:var(--orange)">' + escHtml(s.flag) + '</code> <span style="color:var(--muted);font-size:var(--text-sm)">(' + escHtml(String(s.value)) + ')</span>' +
+        '<div style="font-size:var(--text-sm);color:var(--muted);margin-left:18px">' + escHtml(s.effect || '') + '</div></div>'
+      ).join('') +
+    '</details>');
+  }
+
+  // Project-local-on-main footgun
+  const footgun = (diag.projectLocalOnMain || []).filter(e => e && e.uncommittedAssets && e.uncommittedAssets.length > 0);
+  if (footgun.length > 0) {
+    parts.push('<details open style="margin:6px 0;border:1px solid var(--orange);border-radius:6px;padding:8px 10px;background:var(--surface2)"><summary style="font-weight:600;cursor:pointer;color:var(--orange)">⚠ Project-local assets on main checkout (won\'t propagate to worktree)</summary>' +
+      footgun.map(entry =>
+        '<div style="margin:8px 0 0 12px">' +
+          '<div style="font-weight:600">' + escHtml(entry.project) + ' <span style="font-family:monospace;color:var(--muted);font-weight:400">' + escHtml(entry.localPath) + '</span></div>' +
+          '<div style="font-size:var(--text-sm);color:var(--muted);margin:4px 0 6px">' + escHtml(entry.footgunWarning || '') + '</div>' +
+          entry.uncommittedAssets.map(a =>
+            '<div style="font-family:monospace;font-size:var(--text-sm);margin-left:12px;display:flex;gap:8px;align-items:baseline"><span style="color:var(--orange)">⚠</span> <span>' + escHtml(a.file) + '</span> <span style="color:var(--muted)">[' + escHtml(a.kind) + ']</span></div>'
+          ).join('') +
+        '</div>'
+      ).join('') +
+    '</details>');
+  }
+
+  // Missing dirs summary (aggregate)
+  const missing = diag.missingDirs || [];
+  if (missing.length > 0) {
+    parts.push('<details style="margin:6px 0;border:1px solid var(--border);border-radius:6px;padding:8px 10px;background:var(--surface2)"><summary style="font-weight:600;cursor:pointer">Missing on-disk dirs <span style="color:var(--muted);font-weight:400">(' + missing.length + ')</span></summary>' +
+      '<div style="font-size:var(--text-sm);color:var(--muted);margin:4px 0 6px 12px">Adapters declare these paths but they do not exist on this host. Warnings, not failures — create them if the runtime should look there.</div>' +
+      missing.map(m =>
+        '<div style="font-family:monospace;font-size:var(--text-sm);margin-left:18px"><span style="color:var(--orange)">⚠</span> ' + escHtml(m.path) + ' <span style="color:var(--muted)">[' + escHtml(m.scope) + ' · ' + escHtml(m.kind) + ' · ' + escHtml(m.runtime) + ']</span></div>'
+      ).join('') +
+    '</details>');
+  }
+
+  // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: runtime name, path, scope, flag, effect, project name, localPath, file, kind)
+  el.innerHTML = parts.join('');
+}
+
+window.MinionsOther = { renderProjects, optimisticallyAddProject, projectChipRemove, renderMcpServers, renderCommands, renderHarnessDiagnostics, renderMetrics, renderLlmPerf, renderTokenUsage, _aggregateEngineUsageForTokenTile, openScanProjectsModal };
 
 // ─── keep_processes panel (W-mp68q6ke0010de68) ─────────────────────────────
 // Polls /api/keep-processes every refresh (engine page only) and renders a

package/dashboard/js/render-prs.js

@@ -320,7 +320,8 @@ function openAddPrModal() {
   const projects = (typeof cmdProjects !== 'undefined' ? cmdProjects : []) || [];
   const projOpts = projects.map(p => {
     const name = typeof p === 'object' ? p.name : p;
-    return '<option value="' + escapeHtml(name) + '">' + escapeHtml(name) + '</option>';
+    const label = (typeof p === 'object' && (p.displayName || p.name)) || name;
+    return '<option value="' + escapeHtml(name) + '">' + escapeHtml(label) + '</option>';
   }).join('');
   const inputStyle = 'display:block;width:100%;margin-top:4px;padding:6px 8px;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius-sm);color:var(--text);font-size:var(--text-md);font-family:inherit';
 

package/dashboard/js/render-schedules.js

@@ -422,7 +422,7 @@ function _scheduleFormHtml(sched, isEdit) {
   const priorities = ['high', 'medium', 'low'];
   const typeOpts = types.map(t => '<option value="' + t + '"' + ((sched.type || 'implement') === t ? ' selected' : '') + '>' + t + '</option>').join('');
   const priOpts = priorities.map(p => '<option value="' + p + '"' + ((sched.priority || 'medium') === p ? ' selected' : '') + '>' + p + '</option>').join('');
-  const projOpts = '<option value="">Any</option>' + (cmdProjects || []).map(p => '<option value="' + escHtml(p.name) + '"' + (sched.project === p.name ? ' selected' : '') + '>' + escHtml(p.name) + '</option>').join('');
+  const projOpts = '<option value="">Any</option>' + (cmdProjects || []).map(p => '<option value="' + escHtml(p.name) + '"' + (sched.project === p.name ? ' selected' : '') + '>' + escHtml(p.displayName || p.name) + '</option>').join('');
   const agentOpts = '<option value="">Auto</option>' + (cmdAgents || []).map(a => '<option value="' + escHtml(a.id) + '"' + (sched.agent === a.id ? ' selected' : '') + '>' + escHtml(a.name) + '</option>').join('');
 
   const inputStyle = 'display:block;width:100%;margin-top:4px;padding:6px 8px;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius-sm);color:var(--text);font-size:var(--text-md);font-family:inherit';

package/dashboard/js/render-watches.js

@@ -486,7 +486,7 @@ function _watchFormHtml() {
   }).join('');
 
   var agentOpts = '<option value="">human</option>' + (cmdAgents || []).map(function(a) { return '<option value="' + escHtml(a.id) + '">' + escHtml(a.name) + '</option>'; }).join('');
-  var projOpts = '<option value="">Any</option>' + (cmdProjects || []).map(function(p) { return '<option value="' + escHtml(p.name) + '">' + escHtml(p.name) + '</option>'; }).join('');
+  var projOpts = '<option value="">Any</option>' + (cmdProjects || []).map(function(p) { return '<option value="' + escHtml(p.name) + '">' + escHtml(p.displayName || p.name) + '</option>'; }).join('');
 
   return '<div style="display:flex;flex-direction:column;gap:12px;font-family:inherit">' +
     '<div id="watch-form-error" style="display:none;color:var(--red);font-size:var(--text-md);padding:6px 10px;background:rgba(255,50,50,0.1);border-radius:var(--radius-sm)"></div>' +

package/dashboard/js/render-work-items.js

@@ -372,6 +372,10 @@ async function editWorkItem(id, source) {
       '<label style="color:var(--text);font-size:var(--text-md)">Depends On (work-item ids, comma- or newline-separated)' +
         '<textarea id="wi-edit-depends-on" rows="2" placeholder="W-foo, W-bar" style="display:block;width:100%;margin-top:4px;padding:6px 8px;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius-sm);color:var(--text);font-size:var(--text-md);font-family:inherit;resize:vertical">' + escapeHtml((Array.isArray(item.depends_on) ? item.depends_on : []).join(', ')) + '</textarea>' +
       '</label>' +
+      '<label style="color:var(--text);font-size:var(--text-md)">Working directory (subpath, optional)' +
+        '<input id="wi-edit-workdir" placeholder="packages/foo" value="' + escapeHtml((item.meta && item.meta.workdir) || '') + '" style="display:block;width:100%;margin-top:4px;padding:6px 8px;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius-sm);color:var(--text);font-size:var(--text-md);font-family:inherit">' +
+        '<small style="display:block;margin-top:4px;color:var(--muted);font-size:var(--text-sm)">Relative POSIX subpath under the project root (or worktree, for code-mutating types). Leave empty to dispatch at the project root. Examples: <code>packages/foo</code>, <code>apps/dashboard</code>. Absolute paths and <code>..</code> segments are rejected.</small>' +
+      '</label>' +
       '<div style="display:flex;justify-content:flex-end;gap:8px;margin-top:8px">' +
         '<button onclick="closeModal()" class="pr-pager-btn" style="padding:6px 16px;font-size:var(--text-md)">Cancel</button>' +
         '<button onclick="submitWorkItemEdit(\'' + escapeHtml(id) + '\',\'' + escapeHtml(source || '') + '\',event)" class="btn-primary-lg">Save</button>' +
@@ -396,13 +400,14 @@ async function submitWorkItemEdit(id, source, e) {
   const acceptanceCriteria = acRaw.split('\n').filter(function(l) { return l.trim(); });
   const dependsRaw = document.getElementById('wi-edit-depends-on')?.value || '';
   const depends_on = dependsRaw.split(/[\n,]/).map(function(s) { return s.trim(); }).filter(Boolean);
+  const workdirRaw = (document.getElementById('wi-edit-workdir')?.value || '').trim();
   if (!title) { if (btn) { btn.disabled = false; btn.textContent = 'Save'; } alert('Title is required'); return; }
   try { closeModal(); } catch { /* may not be open */ }
   showToast('cmd-toast', 'Work item updated', true);
   try {
     const res = await fetch('/api/work-items/update', {
       method: 'POST', headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ id, source: source || undefined, title, description, type, priority, agent, references, acceptanceCriteria, depends_on })
+      body: JSON.stringify({ id, source: source || undefined, title, description, type, priority, agent, references, acceptanceCriteria, depends_on, workdir: workdirRaw || null })
     });
     if (res.ok) { refresh(); } else { const d = await res.json().catch(() => ({})); alert('Update failed: ' + (d.error || 'unknown')); editWorkItem(id, source); }
   } catch (e) { alert('Update error: ' + e.message); editWorkItem(id, source); }
@@ -592,6 +597,9 @@ function openCreateWorkItemModal() {
       '<label style="color:var(--text);font-size:var(--text-md)">Acceptance Criteria <textarea id="wi-new-ac" rows="2" style="' + inputStyle + ';resize:vertical" placeholder="One criterion per line (optional)"></textarea></label>' +
       '<label style="color:var(--text);font-size:var(--text-md)">Depends On <textarea id="wi-new-depends-on" rows="2" style="' + inputStyle + ';resize:vertical" placeholder="W-foo, W-bar — comma- or newline-separated work-item ids (optional)"></textarea></label>' +
       '<label style="color:var(--text);font-size:var(--text-md)">References <textarea id="wi-new-refs" rows="2" style="' + inputStyle + ';resize:vertical" placeholder="url | title | type — one per line (optional)"></textarea></label>' +
+      '<label style="color:var(--text);font-size:var(--text-md)">Working directory (subpath, optional) <input id="wi-new-workdir" style="' + inputStyle + '" placeholder="packages/foo — leave empty for project root">' +
+        '<small style="display:block;margin-top:4px;color:var(--muted);font-size:var(--text-sm)">Relative subpath under the project root. Use for monorepo subpackage dispatches so the agent\'s cwd lands inside <code>packages/foo</code> instead of the project root.</small>' +
+      '</label>' +
       '<label id="wi-new-skippr-row" style="color:var(--text);font-size:var(--text-md);display:flex;gap:8px;align-items:center;cursor:pointer"><input type="checkbox" id="wi-new-skippr"> Skip PR creation (push branch only)</label>' +
       '<div style="display:flex;justify-content:flex-end;gap:8px;margin-top:4px">' +
         '<button onclick="closeModal()" class="pr-pager-btn">Cancel</button>' +
@@ -629,6 +637,7 @@ async function _submitCreateWorkItem(e) {
     const parts = l.split('|').map(s => s.trim());
     return { url: parts[0] || '', title: parts[1] || parts[0] || '', type: parts[2] || 'link' };
   }).filter(r => r.url);
+  const workdir = (document.getElementById('wi-new-workdir')?.value || '').trim();
 
   try {
     const body = { title, description: desc, type, priority };
@@ -637,6 +646,7 @@ async function _submitCreateWorkItem(e) {
     if (acceptanceCriteria.length) body.acceptanceCriteria = acceptanceCriteria;
     if (references.length && references[0].url) body.references = references;
     if (depends_on.length) body.depends_on = depends_on;
+    if (workdir) body.meta = Object.assign({}, body.meta, { workdir: workdir });
     const skipPr = document.getElementById('wi-new-skippr')?.checked || false;
     if (skipPr) body.skipPr = true;
 
@@ -707,6 +717,13 @@ function _wiRenderDetail(item) {
   html += field('Description', '<div id="wi-detail-desc" style="font-size:var(--text-md);max-height:320px;overflow-y:auto;padding:8px 10px;background:var(--surface2);border:1px solid var(--border);border-radius:var(--radius-sm)">' + _descHtml + '</div>');
   html += field('Agent', escapeHtml(item.dispatched_to || item.agent || 'Auto'));
   html += field('Source', escapeHtml(item._source || 'central'));
+  // P-714ef144 — surface meta.workdir in the detail modal so operators can
+  // confirm the agent's actual cwd. Renders nothing when unset (which is
+  // the back-compat default = project root). Code-tagged so the path is
+  // visually clearly distinct from prose fields.
+  if (item.meta && typeof item.meta.workdir === 'string' && item.meta.workdir) {
+    html += field('Working directory', '<code style="font-size:var(--text-sm);background:var(--surface2);padding:2px 6px;border-radius:var(--radius-sm)">' + escapeHtml(item.meta.workdir) + '</code>');
+  }
   if (item.created) html += field('Created', escapeHtml(formatLocalDateTime(item.created)));
   if (item.dispatched_at) html += field('Dispatched', escapeHtml(formatLocalDateTime(item.dispatched_at)) + ' to ' + escapeHtml(item.dispatched_to || '?'));
   if (item.completedAt) html += field('Completed', escapeHtml(formatLocalDateTime(item.completedAt)));

package/dashboard/js/settings.js

@@ -422,6 +422,22 @@ async function openSettings() {
       'Permission bypass is runtime-owned: Claude agents use <code>--dangerously-skip-permissions</code>; Copilot agents use <code>--autopilot --allow-all --no-ask-user</code>. There is no dashboard permission-mode setting.' +
     '</div>';
 
+  // Harness propagation knobs (PL-seamless-harness-invocation, P-2bd84e91).
+  // All three flags govern what the spawned agent inherits from the operator's
+  // local CLI harness (user-scope skills/commands/MCPs, project-local-on-main
+  // assets, Claude workspace .mcp.json pre-approval). See docs/harness-propagation.md.
+  const paneHarness =
+    '<h3>Harness Propagation</h3>' +
+    '<div class="settings-pane-sub">Controls what the spawned agent sees from your local CLI harness (skills, commands, MCPs). Defaults match the docs/harness-propagation.md contract — flip these only if you understand the tradeoff. The Tools tab\'s Harness diagnostics view shows the live propagated surface.</div>' +
+    '<div class="settings-stack" style="margin-bottom:12px">' +
+      settingsToggle('Propagate project-local harness on main', 'set-harnessPropagateProjectLocal', e.harnessPropagateProjectLocal !== false,
+        'P-08b62d49: surface uncommitted <repo>/.claude/skills, <repo>/.copilot/commands, etc. into the worktree dispatch via extra --add-dir entries. Default ON closes the worktree-uncommitted footgun. Turn OFF to fall back to the legacy "only committed assets are visible" behavior.') +
+      settingsToggle('Claude: pre-approve workspace .mcp.json', 'set-claudePreApproveWorkspaceMcps', e.claudePreApproveWorkspaceMcps !== false,
+        'P-7d31a06b: pre-warms ~/.claude.json projects.<worktree>.enabledMcpjsonServers on every Claude spawn so the first invocation in a brand-new worktree skips the "trust this server?" prompt — which would otherwise be invisible behind --dangerously-skip-permissions and silently drop workspace MCPs. Claude-only (no-op on Copilot/Codex). Best-effort: failures never block dispatch.') +
+      settingsToggle('Hermetic harness (drop user-scope assets)', 'set-hermeticHarness', !!e.hermeticHarness,
+        '⚠ P-49e1c8b7 fleet-wide opt-out: when ON, --add-dir is exactly [minionsDir] (user-scope skill/command/MCP roots dropped), project-local propagation skipped, and Claude workspace .mcp.json pre-approval skipped. Use when you want a known-empty harness surface (reproducible CI runs, debugging "works in my CLI" bugs). Per-agent override available via agent.hermeticHarness. Default OFF.') +
+    '</div>';
+
   const paneBudget =
     '<h3>Budget</h3>' +
     '<div class="settings-pane-sub">Fleet-wide spend ceiling. Per-agent monthly caps live in the Agents table on the Runtime &amp; Models tab.</div>' +
@@ -522,6 +538,7 @@ async function openSettings() {
     { id: 'worktree', label: 'Worker Pool & Worktrees', html: paneWorktree },
     { id: 'copilot', label: 'Copilot Tuning', html: paneCopilot },
     { id: 'claude', label: 'Claude Tuning', html: paneClaude },
+    { id: 'harness', label: 'Harness Propagation', html: paneHarness },
     { id: 'budget', label: 'Budget', html: paneBudget },
     { id: 'maxturns', label: 'Max Turns', html: paneMaxTurns },
     { id: 'features', label: 'Feature Flags', html: paneFeatures },
@@ -1025,6 +1042,12 @@ async function saveSettings() {
       copilotSuppressAgentsMd: !!document.getElementById('set-copilotSuppressAgentsMd')?.checked,
       copilotStreamMode: document.getElementById('set-copilotStreamMode')?.value || 'on',
       copilotReasoningSummaries: !!document.getElementById('set-copilotReasoningSummaries')?.checked,
+      // Harness propagation knobs (P-2bd84e91). Booleans round-trip through
+      // handleSettingsUpdate's auto boolean-fields loop because all three live
+      // in ENGINE_DEFAULTS as booleans.
+      harnessPropagateProjectLocal: !!document.getElementById('set-harnessPropagateProjectLocal')?.checked,
+      claudePreApproveWorkspaceMcps: !!document.getElementById('set-claudePreApproveWorkspaceMcps')?.checked,
+      hermeticHarness: !!document.getElementById('set-hermeticHarness')?.checked,
       maxBudgetUsd: (document.getElementById('set-maxBudgetUsd')?.value ?? '').trim(),
       disableModelDiscovery: !!document.getElementById('set-disableModelDiscovery')?.checked,
       qaDualWriteJson: !!document.getElementById('set-qaDualWriteJson')?.checked,

package/dashboard/pages/engine-memory-panel.html

@@ -0,0 +1,56 @@
+<!--
+  dashboard/pages/engine-memory-panel.html — Memory panel fragment (P-d4e5f6a7).
+
+  Side-by-side cards for the engine and dashboard processes. Live values are
+  refreshed every 10 s by dashboard/js/memory-panel.js (GET /api/diagnostics/memory);
+  the inline SVG sparkline is refreshed every 60 s
+  (GET /api/diagnostics/memory/history?process=...). The yellow
+  "engine sample stale" badge is unhidden by the JS module when
+  engineStale === true.
+
+  dashboard-build.js substitutes this fragment into dashboard/pages/engine.html
+  at assembly time (see pageSubFragments).
+-->
+      <section id="memory-panel-section">
+        <h2>Memory <span style="font-size:var(--text-sm);color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">RSS / heap / event-loop / GC for engine + dashboard processes</span></h2>
+        <div id="memory-panel-content" style="display:grid;grid-template-columns:repeat(auto-fit,minmax(320px,1fr));gap:12px">
+          <div id="memory-card-engine" class="memory-card" style="border:1px solid var(--border);border-radius:4px;padding:10px;background:var(--surface2)">
+            <div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:6px">
+              <div style="font-weight:600;font-size:var(--text-md);font-family:monospace">engine</div>
+              <span id="memory-engine-stale-badge" style="display:none;background:var(--yellow);color:#000;padding:2px 8px;border-radius:3px;font-size:var(--text-sm);font-weight:600">engine sample stale</span>
+            </div>
+            <dl style="display:grid;grid-template-columns:max-content 1fr;gap:3px 12px;margin:0 0 8px 0;font-size:var(--text-base)">
+              <dt style="color:var(--muted);margin:0">RSS</dt><dd id="memory-engine-rss" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Heap used / total</dt><dd id="memory-engine-heap" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">External</dt><dd id="memory-engine-external" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Event-loop lag p50 / p99</dt><dd id="memory-engine-lag" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Last GC pause</dt><dd id="memory-engine-gc" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Uptime</dt><dd id="memory-engine-uptime" style="margin:0;font-family:monospace">—</dd>
+            </dl>
+            <div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:2px"><span style="color:var(--blue,#4ea1ff)">●</span> RSS &nbsp; <span style="color:var(--green,#4caf50)">●</span> heapUsed &nbsp;<span style="opacity:0.7">(last hour)</span></div>
+            <div id="memory-engine-sparkline" style="height:60px;width:100%;color:var(--fg)"></div>
+          </div>
+          <div id="memory-card-dashboard" class="memory-card" style="border:1px solid var(--border);border-radius:4px;padding:10px;background:var(--surface2)">
+            <div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:6px">
+              <div style="font-weight:600;font-size:var(--text-md);font-family:monospace">dashboard</div>
+            </div>
+            <dl style="display:grid;grid-template-columns:max-content 1fr;gap:3px 12px;margin:0 0 8px 0;font-size:var(--text-base)">
+              <dt style="color:var(--muted);margin:0">RSS</dt><dd id="memory-dashboard-rss" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Heap used / total</dt><dd id="memory-dashboard-heap" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">External</dt><dd id="memory-dashboard-external" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Event-loop lag p50 / p99</dt><dd id="memory-dashboard-lag" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Last GC pause</dt><dd id="memory-dashboard-gc" style="margin:0;font-family:monospace">—</dd>
+              <dt style="color:var(--muted);margin:0">Uptime</dt><dd id="memory-dashboard-uptime" style="margin:0;font-family:monospace">—</dd>
+            </dl>
+            <div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:2px"><span style="color:var(--blue,#4ea1ff)">●</span> RSS &nbsp; <span style="color:var(--green,#4caf50)">●</span> heapUsed &nbsp;<span style="opacity:0.7">(last hour)</span></div>
+            <div id="memory-dashboard-sparkline" style="height:60px;width:100%;color:var(--fg)"></div>
+          </div>
+        </div>
+        <div id="memory-heap-snapshot-panel" style="margin-top:12px;padding:10px;border:1px solid var(--border);border-radius:4px;background:var(--surface2)">
+          <div style="display:flex;align-items:center;gap:10px;flex-wrap:wrap">
+            <button type="button" id="memory-heap-snapshot-btn" class="btn" style="cursor:pointer">Capture heap snapshot</button>
+            <span style="font-size:var(--text-sm);color:var(--muted)">Stalls engine + dashboard for several seconds, writes a 50–200 MB <code>.heapsnapshot</code> per process under <code>engine/diagnostics/</code> (load in Chrome DevTools → Memory → Load). Rate-limited to 1 / 60 s; only the 5 most-recent per process are kept.</span>
+          </div>
+          <div id="memory-heap-snapshot-result" style="margin-top:8px;font-family:monospace;font-size:var(--text-sm);color:var(--muted);white-space:pre-wrap"></div>
+        </div>
+      </section>

package/dashboard/pages/engine.html

@@ -3,6 +3,7 @@
       <section>
         <div id="engine-quick-stats" style="display:flex;gap:16px;margin-bottom:12px;font-size:var(--text-base);color:var(--muted)"></div>
       </section>
+      <!-- __ENGINE_MEMORY_PANEL__ -->
       <section>
         <h2>Engine Log <span style="font-size:var(--text-sm);color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">tick-by-tick audit trail of engine operations</span></h2>
         <div class="log-list" id="engine-log">No log entries yet.</div>

package/dashboard/pages/tools.html

@@ -2,7 +2,15 @@
         <h2>Minions Skills <span class="count" id="skills-count">0</span> <span style="font-size:var(--text-sm);color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">discovered from runtime native dirs, plugin installs, and configured project repos</span></h2>
         <div id="skills-list"><p class="empty">No skills yet. Agents create these when they discover repeatable workflows.</p></div>
       </section>
+      <section>
+        <h2>Slash Commands <span class="count" id="commands-count">0</span> <span style="font-size:var(--text-sm);color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">discovered from runtime native command dirs, plugin installs, and configured project repos</span></h2>
+        <div id="commands-list"><p class="empty">No slash commands discovered.</p></div>
+      </section>
       <section>
         <h2>MCP Servers <span class="count" id="mcp-count">0</span></h2>
         <div id="mcp-list"><p class="empty">No MCP servers synced.</p></div>
       </section>
+      <section>
+        <h2>Harness Propagation <span style="font-size:var(--text-sm);color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">what each runtime sees, what's attached via --add-dir, and which assets won't propagate to a fresh worktree</span></h2>
+        <div id="harness-diag"><p class="empty">Loading harness diagnostics…</p></div>
+      </section>

package/dashboard/slim/js/link-pr.js

@@ -6,18 +6,18 @@
     var modal = document.getElementById('slim-linkpr-modal');
     if (!modal) return;
     var projects = (lastStatusData && Array.isArray(lastStatusData.projects) ? lastStatusData.projects : [])
-      .map(function(p) { return p && p.name ? String(p.name) : null; })
-      .filter(Boolean);
+      .filter(function(p) { return p && p.name; })
+      .map(function(p) { return { name: String(p.name), label: String(p.displayName || p.name) }; });
     var sel = document.getElementById('slim-linkpr-project');
     sel.textContent = '';
     var auto = document.createElement('option');
     auto.value = '';
     auto.textContent = 'Auto-detect from URL (central if no unique match)';
     sel.appendChild(auto);
-    projects.forEach(function(name) {
+    projects.forEach(function(proj) {
       var o = document.createElement('option');
-      o.value = name;
-      o.textContent = name;
+      o.value = proj.name;
+      o.textContent = proj.label;
       sel.appendChild(o);
     });
     var warn = document.getElementById('slim-linkpr-noproj');

package/dashboard/slim/js/modals-tiles.js

@@ -159,7 +159,7 @@
     }
     var prs = Array.isArray(data.pullRequests) ? data.pullRequests : [];
     if (!prs.length) { tileEmpty(body, 'No tracked pull requests.'); return; }
-    prs.forEach(function(p) {
+    function prCard(p) {
       var num = p.prNumber || p.number || p.id;
       var build = p.buildStatus || '';
       var review = p.reviewStatus || '';
@@ -168,7 +168,7 @@
               : ((p.status === 'active' || p.status === 'linked') ? 'blue' : ''));
       var statusText = document.createElement('span');
       statusText.textContent = p.status || 'unknown';
-      body.appendChild(tileCard({
+      return tileCard({
         title: (num ? '#' + num + ' ' : '') + (p.title || '(untitled PR)'),
         // Project slug first (under title), then build/review row below — the
         // project is the strongest disambiguator across PRs and benefits from
@@ -178,7 +178,48 @@
         metaNodes: [statusText, statusSpan('build', build, BUILD_STATUS), statusSpan('review', review, REVIEW_STATUS)],
         chip: { text: p.status || '—', cls: cls },
         href: p.url || null,
-      }));
+      });
+    }
+    // Partition once into three fixed buckets (status normalized to lowercase),
+    // preserving each PR's relative order within its bucket. Mirrors shared
+    // PR_STATUS (active/merged/abandoned/closed/linked); anything that does not
+    // match the merged/abandoned buckets defaults to Active so a PR with an
+    // unexpected status never silently disappears.
+    var buckets = { active: [], merged: [], abandoned: [] };
+    prs.forEach(function(p) {
+      var s = String(p.status || '').toLowerCase();
+      if (s === 'abandoned') buckets.abandoned.push(p);
+      else if (s === 'merged' || s === 'completed' || s === 'closed') buckets.merged.push(p);
+      else buckets.active.push(p);
+    });
+    // Fixed section order: Active (open) → Merged / Completed → Abandoned.
+    // Empty sections are omitted entirely.
+    var sections = [
+      { label: 'Active', prs: buckets.active, open: true },
+      { label: 'Merged / Completed', prs: buckets.merged, open: false },
+      { label: 'Abandoned', prs: buckets.abandoned, open: false },
+    ];
+    sections.forEach(function(section) {
+      if (!section.prs.length) return;
+      var details = document.createElement('details');
+      details.className = 'tile-section';
+      if (section.open) details.open = true;
+      var summary = document.createElement('summary');
+      summary.className = 'tile-section-summary';
+      var label = document.createElement('span');
+      label.className = 'tile-section-label';
+      label.textContent = section.label;
+      var count = document.createElement('span');
+      count.className = 'tile-section-count';
+      count.textContent = '(' + section.prs.length + ')';
+      summary.appendChild(label);
+      summary.appendChild(count);
+      details.appendChild(summary);
+      var sectionBody = document.createElement('div');
+      sectionBody.className = 'tile-section-body';
+      section.prs.forEach(function(p) { sectionBody.appendChild(prCard(p)); });
+      details.appendChild(sectionBody);
+      body.appendChild(details);
     });
   }
 

package/dashboard/slim/js/projects.js

@@ -31,7 +31,7 @@
   // chosen, so the indicator never auto-defaults and the user can always clear
   // their choice back to it. Returns the select so the caller can attach a
   // change listener.
-  function makeContextSelect(projects, selected) {
+  function makeContextSelect(projects, selected, displayByName) {
     var sel = document.createElement('select');
     sel.id = 'chat-context-select';
     sel.setAttribute('aria-label', 'Working in project');
@@ -44,7 +44,7 @@
       var p = projects[i];
       var opt = document.createElement('option');
       opt.value = p;
-      opt.textContent = p;
+      opt.textContent = (displayByName && displayByName[p]) || p;
       if (p === selected) opt.selected = true;
       sel.appendChild(opt);
     }
@@ -59,9 +59,11 @@
       var res = await fetch('/api/status');
       if (!res.ok) throw new Error('HTTP ' + res.status);
       var data = await res.json();
-      var projects = (data && Array.isArray(data.projects) ? data.projects : [])
-        .map(function(p) { return p && p.name ? String(p.name) : null; })
-        .filter(Boolean);
+      var projectList = (data && Array.isArray(data.projects) ? data.projects : [])
+        .filter(function(p) { return p && p.name; });
+      var projects = projectList.map(function(p) { return String(p.name); });
+      var displayByName = {};
+      projectList.forEach(function(p) { displayByName[String(p.name)] = String(p.displayName || p.name); });
       if (projects.length === 0) {
         stripEl.style.display = '';
         controlsEl.replaceChildren(makeContextEmptyNode(), makeContextAddBtn());
@@ -79,7 +81,7 @@
         // (italicized via CSS). We deliberately do NOT fall back to projects[0]
         // here (W-mqayzsj3) so CC turns and project-scoped actions don't
         // silently target the wrong project.
-        var sel = makeContextSelect(projects, currentProject);
+        var sel = makeContextSelect(projects, currentProject, displayByName);
         stripEl.style.display = '';
         controlsEl.replaceChildren(sel, makeContextAddBtn());
         sel.addEventListener('change', function(ev) {

package/dashboard/slim/styles.css

@@ -681,6 +681,26 @@
     .tile-chip.blue  { background: rgba(88, 166, 255, 0.12); color: var(--blue);  border-color: var(--blue); }
     .tile-empty { color: var(--muted); font-style: italic; font-size: var(--text-md); }
 
+    /* Collapsible PR sections (Active / Merged-Completed / Abandoned). Uses
+       native <details>/<summary> — no JS wiring needed for the toggle. */
+    .tile-section { margin-bottom: 10px; }
+    .tile-section:last-child { margin-bottom: 0; }
+    .tile-section-summary {
+      display: flex; align-items: center; gap: 6px;
+      cursor: pointer; user-select: none;
+      padding: 4px 2px; margin-bottom: 6px;
+      list-style: none;
+      font-size: var(--text-base); color: var(--muted);
+    }
+    .tile-section-summary::-webkit-details-marker { display: none; }
+    .tile-section-summary::before {
+      content: "▸"; color: var(--muted); font-size: var(--text-sm);
+      transition: transform 0.15s ease;
+    }
+    .tile-section[open] > .tile-section-summary::before { content: "▾"; }
+    .tile-section-label { font-weight: 700; letter-spacing: 0.3px; text-transform: uppercase; color: var(--text); }
+    .tile-section-count { color: var(--muted); }
+
     /* Pinned-context list rows (slim-pinned-modal). */
     .pinned-row {
       border: 1px solid var(--border);

package/dashboard-build.js

@@ -21,9 +21,24 @@ function buildDashboardHtml() {
   const css = safeRead(path.join(dashDir, 'styles.css'));
 
   const pages = ['home', 'work', 'prs', 'plans', 'inbox', 'tools', 'schedule', 'watches', 'pipelines', 'meetings', 'qa', 'engine'];
+  // Sub-fragments substituted into a parent page at assembly time via
+  // <!-- __MARKER__ --> tokens. Lets large panels live in their own
+  // fragment file without inflating the parent page. P-d4e5f6a7 introduced
+  // engine-memory-panel.html as the first such sub-fragment; add more here
+  // by mapping marker -> fragment basename.
+  const pageSubFragments = {
+    engine: { '<!-- __ENGINE_MEMORY_PANEL__ -->': 'engine-memory-panel' },
+  };
   let pageHtml = '';
   for (const p of pages) {
-    const content = safeRead(path.join(dashDir, 'pages', p + '.html'));
+    let content = safeRead(path.join(dashDir, 'pages', p + '.html'));
+    const subs = pageSubFragments[p];
+    if (subs) {
+      for (const [marker, basename] of Object.entries(subs)) {
+        const fragment = safeRead(path.join(dashDir, 'pages', basename + '.html'));
+        content = content.replace(marker, () => fragment);
+      }
+    }
     const activeClass = p === 'home' ? ' active' : '';
     pageHtml += `    <div class="page${activeClass}" id="page-${p}">\n${content}\n    </div>\n\n`;
   }
@@ -32,7 +47,7 @@ function buildDashboardHtml() {
     'utils', 'state', 'features-client', 'render-utils', 'detail-panel', 'live-stream',
     'render-agents', 'render-dispatch', 'render-work-items', 'render-prd',
     'render-prs', 'render-plans', 'render-inbox', 'render-kb', 'render-skills',
-    'render-other', 'render-managed', 'render-schedules', 'render-watches', 'render-pipelines', 'render-meetings', 'render-pinned',
+    'render-other', 'render-managed', 'memory-panel', 'render-schedules', 'render-watches', 'render-pipelines', 'render-meetings', 'render-pinned',
     'command-parser', 'command-input', 'command-center', 'command-history',
     'confirm-dialog', 'modal', 'modal-qa', 'settings', 'qa', 'fre', 'refresh'
   ];