agent-office-studio 0.9.1 → 0.9.2

package/dist/assets/{pdf-a7kwa8Fi.js → pdf-CKZBNrtF.js}

@@ -1 +1 @@
-import{_ as f}from"./index-Y1a-xw5C.js";let h=null;async function v(){if(h)return h;const[a,{default:s}]=await Promise.all([f(()=>import("./pdf-BtCWNl9F.js"),[]),f(()=>import("./pdf.worker.min-D_0FwaWY.js"),[])]);return a.GlobalWorkerOptions.workerPort=new s,h=a}async function y(a,s){const g=await v(),i=await fetch(s);if(!i.ok)throw new Error((await i.json().catch(()=>({}))).error||`Could not open the PDF (${i.status}).`);const r=await g.getDocument({data:new Uint8Array(await i.arrayBuffer())}).promise;let c=!1;const d=new IntersectionObserver(e=>{for(const t of e)t.isIntersecting&&(d.unobserve(t.target),w(t.target))},{root:a,rootMargin:"600px 0px"});async function w(e){const t=await r.getPage(+e.dataset.n);if(c)return;const l=Math.min(devicePixelRatio||1,2),m=Math.min(a.clientWidth-24,980)/t.getViewport({scale:1}).width,o=t.getViewport({scale:m*l}),n=document.createElement("canvas");n.width=Math.floor(o.width),n.height=Math.floor(o.height),n.style.width=`${Math.floor(o.width/l)}px`,n.style.height=`${Math.floor(o.height/l)}px`,e.style.minHeight=n.style.height,await t.render({canvasContext:n.getContext("2d"),viewport:o,canvas:n}).promise,c||e.replaceChildren(n)}a.replaceChildren();const p=(await r.getPage(1)).getViewport({scale:1}),u=Math.round(Math.min(a.clientWidth-24,980)/p.width*p.height);for(let e=1;e<=r.numPages;e++){const t=document.createElement("div");t.className="fe-pdf-page",t.dataset.n=e,t.style.minHeight=`${u}px`,a.append(t),d.observe(t)}return{pages:r.numPages,destroy(){c=!0,d.disconnect(),r.destroy()}}}export{y as mountPdf};
+import{_ as f}from"./index-qdaAZdZT.js";let h=null;async function v(){if(h)return h;const[a,{default:s}]=await Promise.all([f(()=>import("./pdf-BtCWNl9F.js"),[]),f(()=>import("./pdf.worker.min-D_0FwaWY.js"),[])]);return a.GlobalWorkerOptions.workerPort=new s,h=a}async function y(a,s){const g=await v(),i=await fetch(s);if(!i.ok)throw new Error((await i.json().catch(()=>({}))).error||`Could not open the PDF (${i.status}).`);const r=await g.getDocument({data:new Uint8Array(await i.arrayBuffer())}).promise;let c=!1;const d=new IntersectionObserver(e=>{for(const t of e)t.isIntersecting&&(d.unobserve(t.target),w(t.target))},{root:a,rootMargin:"600px 0px"});async function w(e){const t=await r.getPage(+e.dataset.n);if(c)return;const l=Math.min(devicePixelRatio||1,2),m=Math.min(a.clientWidth-24,980)/t.getViewport({scale:1}).width,o=t.getViewport({scale:m*l}),n=document.createElement("canvas");n.width=Math.floor(o.width),n.height=Math.floor(o.height),n.style.width=`${Math.floor(o.width/l)}px`,n.style.height=`${Math.floor(o.height/l)}px`,e.style.minHeight=n.style.height,await t.render({canvasContext:n.getContext("2d"),viewport:o,canvas:n}).promise,c||e.replaceChildren(n)}a.replaceChildren();const p=(await r.getPage(1)).getViewport({scale:1}),u=Math.round(Math.min(a.clientWidth-24,980)/p.width*p.height);for(let e=1;e<=r.numPages;e++){const t=document.createElement("div");t.className="fe-pdf-page",t.dataset.n=e,t.style.minHeight=`${u}px`,a.append(t),d.observe(t)}return{pages:r.numPages,destroy(){c=!0,d.disconnect(),r.destroy()}}}export{y as mountPdf};

package/dist/index.html

@@ -13,8 +13,8 @@
     <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
     <script src="/theme-boot.js"></script>
     <title>Office</title>
-    <script type="module" crossorigin src="/assets/index-Y1a-xw5C.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DxWppRAd.css">
+    <script type="module" crossorigin src="/assets/index-qdaAZdZT.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-BcqWv4NW.css">
   </head>
   <body>
     <div class="app" id="app" data-m="office">
@@ -92,13 +92,14 @@
           <button type="button" data-tab="chat" class="on">Chat</button>
           <button type="button" data-tab="jobs">Jobs <span id="jobCount"></span></button>
           <button type="button" data-tab="projects">Projects</button>
+          <button type="button" data-tab="apps">Apps</button>
           <button type="button" data-tab="team">Team</button>
           <button type="button" data-tab="needs">Needs you <span id="needsCount"></span></button>
         </nav>
         <section class="pane" id="chatPane">
-          <div class="channels" id="channels" role="tablist" aria-label="Channels"></div>
-          <div class="msgs" id="msgs"></div>
-          <div class="typing" id="typing" hidden><span></span><span></span><span></span> Chief is reading</div>
+          <div class="d-fold d-top"><div class="d-fold-in"><div class="channels" id="channels" role="tablist" aria-label="Channels"></div>
+</div></div>          <div class="msgs" id="msgs"></div>
+          <div class="d-fold d-foot-fold"><div class="d-fold-in"><div class="typing" id="typing" hidden><span></span><span></span><span></span> Chief is reading</div>
           <form class="composer" id="composer">
             <div class="ac" id="ac" hidden></div>
             <div class="tray" id="tray" hidden></div>
@@ -143,20 +144,20 @@
               </select>
               <button class="primary small" type="submit">Send</button>
             </div>
-          </form>
+          </form></div></div>
         </section>
         <section class="pane" id="threadPane" hidden>
-          <header class="thread-head">
+          <div class="d-fold d-top"><div class="d-fold-in"><header class="thread-head">
             <button type="button" class="link" id="threadBack">← Chat</button>
             <b id="threadWhere">Thread</b>
-          </header>
+          </header></div></div>
           <div class="msgs" id="threadMsgs"></div>
-          <form class="composer" id="threadComposer">
+          <div class="d-fold d-foot-fold"><div class="d-fold-in"><form class="composer" id="threadComposer">
             <textarea id="threadInput" rows="1" placeholder="Reply in thread" aria-label="Reply in thread"></textarea>
             <div class="controls">
               <button class="primary small" type="submit">Reply</button>
             </div>
-          </form>
+          </form></div></div>
         </section>
         <section class="pane" id="teamPane" hidden>
           <div class="viewbar" role="group" aria-label="View as">
@@ -172,6 +173,9 @@
           </div>
           <div class="projects" id="projects"></div>
         </section>
+        <section class="pane" id="appsPane" hidden>
+          <div class="home" id="home" aria-label="Apps"></div>
+        </section>
         <section class="pane" id="needsPane" hidden>
           <div class="jobs needs" id="needs"></div>
         </section>
@@ -233,6 +237,9 @@
         <button type="button" data-m="projects" title="Projects" aria-label="Projects">
           <svg viewBox="0 0 24 24"><path d="M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/></svg><span class="lbl">Projects</span>
         </button>
+        <button type="button" data-m="apps" title="Apps" aria-label="Apps">
+          <svg viewBox="0 0 24 24"><rect x="4" y="4" width="6" height="6" rx="1.5"/><rect x="14" y="4" width="6" height="6" rx="1.5"/><rect x="4" y="14" width="6" height="6" rx="1.5"/><rect x="14" y="14" width="6" height="6" rx="1.5"/></svg><span class="lbl">Apps</span>
+        </button>
         <button type="button" data-m="team" title="Team" aria-label="Team">
           <svg viewBox="0 0 24 24"><circle cx="9" cy="8" r="3.2"/><path d="M3 20a6 6 0 0 1 12 0"/><circle cx="17" cy="9" r="2.4"/><path d="M17 14.5a4.6 4.6 0 0 1 4 5.5"/></svg><span class="lbl">Team</span>
         </button>

package/docs/features.md

@@ -0,0 +1,96 @@
+# Agent Office: every feature
+
+Compiled 2026-10-18 from the code, the docs and the changelog (as of 0.9.2).
+
+## 1. The office itself (3D)
+- A 3D office (three.js) with desks, library, server room, research window, whiteboard, break room, pool table, reception, a guest wing.
+- Agents walk to where their work happens: Read/Grep/Glob → library, Bash → server room, web/MCP → research window, plans/todos → whiteboard, edits → their desk.
+- Camera: drag, right-drag or Q/E to turn, scroll to zoom, double-click to glide, WASD pan, R recenter; nearest walls drop so you can see in.
+- Themes (Paper, Ocean, Forest, Sunset, Lavender), light/dark/auto.
+- Lite rendering on phones (override with `?lite=0/1`).
+- Build mode: pick up desks, the table, pool table or bought items, move on a snapped grid, saved per layout. Free layouts to switch between.
+- Windows: Chat, Jobs, Projects, Team in draggable, resizable windows on wide screens (remembered); sidebar on phones. Dock mode with draggable job card.
+- Right-click menu on the floor: tidy windows, open/close, recenter, appearance, settings.
+- Header/footer fold away while scrolling lists.
+- Header shows owner, level ring, usage gauges.
+
+## 2. Chat and the chief of staff
+- Chat with `@agent` and `#project` tagging. Untagged messages go to the chief of staff.
+- The chief: picks project and agent, hands follow-ups live to a running agent, resumes finished sessions, asks when unsure, can hand out several jobs from one message (one per person), reads screenshots.
+- Chief picks the model (Haiku/Sonnet/Opus) to fit the work; moves a failed job up a rung.
+- Attachments: paperclip, paste, drag-drop. Voice notes.
+- Channels (Slack style): `#general`, `#chill-room`, your own; each message belongs to one channel; unread counts.
+- Threads: job updates collect under the message that started the job.
+- Slash commands: `/standup`, `/restart`, `/telegram`, "clear context".
+- "Needs you" strip and pane: jobs waiting on you; dismiss one or all; answering clears it.
+- Avatars drawn from each agent's look.
+
+## 3. Jobs
+- Each job is a real `claude -p` process in a project folder, stdin open so messages reach it mid-task.
+- Clearance per job: Plan only / Edit files / Full autonomy; grant more when blocked; approve a finished plan to build it.
+- Model picker per job, switchable mid-job (resumes the same session).
+- Auto-escalation on failure (Haiku → Sonnet → Opus) with a fresh session and summary.
+- "What changed": git-tree snapshots before/after, files, lines +/-, per-file patch, Edit button per file; "Files edited" where git can't say.
+- Job drawer: log, model, context size, cost and time (folded under Details).
+- Context management: agents' `clear_context` with notes to self; auto-nudge past 150k tokens; the boss can say "clear context"; notes survive clears.
+- Jobs survive server restarts (sessions resume).
+- Machine care: limit on agents working at once (default 4), hold when memory/CPU struggles ("On hold" notice), turn-taking for heavy builds (`heavy_work`), leftover processes killed at job end, `keep_running` to keep one.
+- Quality badges and XP; levels hire more agents (3 at level 1 up to 8).
+
+## 4. Agents and the team
+- Roster of named agents with roles, personalities, looks and voices; rename them (one word); Team tab with list/icons toggle; "Meet your team" onboarding.
+- Agent office tools (MCP): `office_roster`, `message_colleague` (optionally wait for reply), `hand_off`, `flag_for_boss`, `attach_files` (6 files, 25 MB each), `restart_office`, `clear_context`, `heavy_work`, `keep_running`, `add_app`, `office_shop`, `buy_item`, `bets`, `place_bet`, `take_bet`, `cancel_bet`, channel tools (`list_channels`, `create_channel`, `invite_to_channel`, `post_to_channel`).
+- Hand-offs only to free colleagues, max depth two; shown as "Ada → Tunde".
+- Daily standup at 9:30 on weekdays (or on demand): done / today / blockers, chief's wrap-up.
+- Break room: small-talk written by a small model, eight-ball pool played shot by shot; results to `#chill-room`; can be turned off.
+- Economy: agents are paid for finished work (more on lighter models), a shop for desk items, and bets between colleagues on jobs (stakes, take, cancel, voided if a party hands the job over).
+
+## 5. Projects and files
+- Projects are the subfolders of the root folder; Projects tab (list/icons).
+- Edit files in the office: folder tree and CodeMirror editor (syntax highlighting, line numbers, folding, bracket matching, find, undo, themed); Cmd/Ctrl+S saves; refuses to save if the file changed on disk.
+- PDF viewer (pdf.js), served only if truly a PDF.
+- Image/file attachments from agents shown in chat.
+
+## 6. Apps on the home screen
+- Agents build self-contained HTML apps and register them with `add_app`; each gets an icon and opens in a sandboxed window (`data/apps.json`, `/api/apps`).
+
+## 7. Telegram
+- Talk to the office from your phone through your own bot (made with @BotFather). The office long-polls, so no tunnel or webhook is needed.
+- Setup: `/telegram <token>` in the office, then `/telegram pair` for a one-time code (valid 15 minutes, 5 tries), then `/pair 123456` to the bot. `/telegram off` forgets the bot; `/telegram` shows status.
+- Only the paired account works; everyone else and any group chat is dropped unread. The token is kept in `data/telegram.json` (0600), not in state or chat.
+- Messages go to the office as chat; replies, finished jobs and flags come back. Reply to a message to answer in its thread.
+- `/grant` (reply to a blocked job) gives full autonomy; `/grant all` for every blocked job; `/auto <request>` starts a job at full autonomy.
+- Photos, videos, voice notes, audio and documents come in (up to 20 MB); agent attachments go out as photos, video, audio or files (up to 50 MB).
+- Long messages are clipped with a pointer to the office; sending retries on rate limits and keeps order. Break-room chatter is never sent.
+
+## 8. Talking and hearing
+- Dictation with whisper.cpp and a different Piper voice per agent, all local; mute and chime controls; desktop notifications when a job ships.
+
+## 9. Linked offices
+- Pair two offices with a one-time code; agents appear as visitors in a guest wing (12 hot desks, coffee bar, meeting table, up to 10 visitors).
+- Invite guests to use your agents (pick which agents, projects, clearance, daily token limit), or let their agents work in your projects (read only, or edit a copy you review and apply or discard).
+- Tag a host's agents from your chat (`@Ada@host`) and send yours to their project (`#repo@host`). Job titles shared only if you allow it.
+
+## 10. Leaderboard
+- Optional board of jobs, tokens and agent time; a handle is separate from sharing; nothing shared until you join.
+
+## 11. Claude access and usage
+- Claude Code login or API key; plan usage meters; token limit and compaction point; context limit settable in the office.
+
+## 12. Settings
+- Settings page: owner, token limit, compaction point, chief model, standup time and weekends, job-title sharing, break-room talk, agents working at once. Saved values beat environment variables; "Use the default" reverts.
+- Environment options include `OFFICE_ROOT`, `OFFICE_DATA`, `PORT`, `CLAUDE_BIN`, `STANDUP_AT`, `BANTER*`, `WHISPER_*`, `PIPER_BIN`, `FFMPEG_BIN`, `OFFICE_LEADERBOARD_URL`, `OFFICE_MAX_AGENTS`.
+
+## 13. Phone, desktop and install
+- `agentoffice --phone` listens on the LAN and prints a QR code; or "Make a public address" starts a Cloudflare quick tunnel with a QR code (off until pressed; the key stays the only way in).
+- Installable as a PWA.
+- Desktop app (Tauri, macOS) with a designed DMG; starts the office on a free port.
+- `npm install -g agent-office-studio`, then `agentoffice` or `agentstudio`; picks a free port; `--link` reprints the key link.
+
+## 14. Security
+- Listens on localhost only by default; page, API and socket need a key (`data/office-key`, 0600), the key cookie holds a MAC, and a CSP limits images and forms.
+- Only the office's own page may call the API; malformed URLs don't crash it.
+- Guests' jobs don't get your MCP servers, settings, hooks or memory; their tokens are counted per call; unlinked guests' jobs are stopped.
+- Git runs with fsmonitor and external diff drivers off; snapshots never run clean/smudge filters.
+- Below Full autonomy, `attach_files` takes only files from the job's own project; job tokens stay out of the projects folder.
+- Dependencies pinned and patched (ws, Vite/esbuild); CI plus npm publish on `v*` tags.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-office-studio",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "A 3D office where the staff are Claude Code agents.",
   "license": "MIT",
   "files": [
@@ -42,10 +42,11 @@
   "scripts": {
     "dev": "concurrently -k -n server,web -c blue,magenta \"node --watch server/index.js\" \"vite\"",
     "build": "vite build",
+    "watch": "vite build --watch",
     "start": "vite build && node server/supervise.js",
     "voice:model": "mkdir -p data/whisper && curl -L --progress-bar -o data/whisper/ggml-base.en.bin https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-base.en.bin",
     "voice:piper": "python3 -m venv data/piper/venv && data/piper/venv/bin/pip install -q piper-tts && data/piper/venv/bin/python -m piper.download_voices --data-dir data/piper/voices en_GB-cori-high en_US-amy-medium en_GB-alan-medium en_US-kristin-medium en_US-ryan-high en_GB-alba-medium en_GB-aru-medium en_US-john-medium en_US-hfc_female-medium",
-    "test": "node scripts/economy.mjs && node scripts/wagers.mjs && node scripts/smoke.mjs && node scripts/machine.mjs && node scripts/talk.mjs && node scripts/guests.mjs && node scripts/remote.mjs && node scripts/lent-home.mjs && node scripts/visits.mjs && node scripts/phone.mjs && node scripts/desktop-gate.mjs && node scripts/hardening-gate.mjs && node scripts/guest-gate.mjs && node scripts/wagers-server.mjs && node scripts/chief-gate.mjs && node scripts/files.mjs",
+    "test": "node scripts/economy.mjs && node scripts/wagers.mjs && node scripts/smoke.mjs && node scripts/machine.mjs && node scripts/talk.mjs && node scripts/guests.mjs && node scripts/remote.mjs && node scripts/lent-home.mjs && node scripts/visits.mjs && node scripts/phone.mjs && node scripts/desktop-gate.mjs && node scripts/hardening-gate.mjs && node scripts/guest-gate.mjs && node scripts/wagers-server.mjs && node scripts/chief-gate.mjs && node scripts/files.mjs && node scripts/apps.mjs && node scripts/telegram.mjs",
     "prepack": "vite build"
   },
   "dependencies": {

package/server/apps.js

@@ -0,0 +1,146 @@
+// The office's apps: what the home screen shows. Each app is one manifest
+// entry in data/apps.json. The boss asks for an app, an agent builds it and
+// registers it with the add_app tool (or POST /api/apps), and it gets an icon.
+//
+// `kind` says how an app opens. KINDS checks what each kind needs; the web
+// side (web/src/apps.js) has the matching opener. To add a kind, add it in
+// both places.
+//
+// A manifest entry:
+//   id           slug, unique; made from the name if not given
+//   name         what the icon says
+//   icon         an emoji (or a few characters)
+//   color        the icon's tile, #rgb or #rrggbb (optional)
+//   description  one line, shown on hover (optional)
+//   kind         'page': a self-contained HTML file in a project, run sandboxed
+//   repo, path   for 'page': the project folder and the file inside it
+//   w, h         the window's starting size (optional)
+//   addedBy, addedAt
+
+import fs from 'node:fs';
+import path from 'node:path';
+import * as files from './files.js';
+
+const fail = (code, msg) => Object.assign(new Error(msg), { code });
+const MAX_APPS = 200;
+const DATA_MAX = 1e6;
+const ID_RE = /^[a-z0-9][a-z0-9-]{0,39}$/;
+
+export const slug = (s) => String(s || '').toLowerCase().normalize('NFKD').replace(/[^\w\s-]/g, '').trim().replace(/[\s_-]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 40);
+
+const text = (v, label, max, need = false) => {
+  if (v == null || v === '') { if (need) throw fail(400, `An app needs a ${label}.`); return ''; }
+  if (typeof v !== 'string') throw fail(400, `The ${label} must be text.`);
+  v = v.trim().replace(/\s+/g, ' ');
+  if (need && !v) throw fail(400, `An app needs a ${label}.`);
+  if (v.length > max) throw fail(400, `The ${label} is limited to ${max} characters.`);
+  return v;
+};
+
+// What each kind needs, checked when an app is added. `repoPath` turns a
+// project name into its folder, or null.
+export const KINDS = {
+  page: {
+    clean(a, { repoPath }) {
+      const repo = text(a.repo, 'project folder', 200, true);
+      const dir = repoPath(repo);
+      if (!dir) throw fail(400, `There is no project folder called "${repo}".`);
+      const rel = text(a.path, 'file path', 500, true).replace(/^\/+/, '');
+      files.page(dir, rel); // throws if it is missing, not HTML or too big
+      return { repo, path: rel };
+    },
+  },
+};
+
+export class Apps {
+  constructor(dataDir, { repoPath, onChange = () => {} }) {
+    this.file = path.join(dataDir, 'apps.json');
+    this.repoPath = repoPath;
+    this.onChange = onChange;
+    this.apps = [];
+    try {
+      const saved = JSON.parse(fs.readFileSync(this.file, 'utf8'));
+      if (Array.isArray(saved.apps)) this.apps = saved.apps.filter((a) => a && ID_RE.test(a.id) && KINDS[a.kind]);
+    } catch {}
+  }
+
+  list() { return this.apps.map((a) => ({ ...a })); }
+
+  get(id) { return this.apps.find((a) => a.id === id) || null; }
+
+  // Adds an app, or replaces the one with the same id (so re-registering an
+  // app after a rebuild updates it). Returns the stored entry.
+  add(input, by = 'boss') {
+    if (!input || typeof input !== 'object') throw fail(400, 'Nothing to add.');
+    const name = text(input.name, 'name', 40, true);
+    const kind = text(input.kind || 'page', 'kind', 20);
+    if (!KINDS[kind]) throw fail(400, `Unknown kind of app "${kind}". Known: ${Object.keys(KINDS).join(', ')}.`);
+    const id = input.id ? text(input.id, 'id', 40) : slug(name);
+    if (!ID_RE.test(id)) throw fail(400, 'The id must be lowercase letters, numbers and dashes.');
+    const icon = text(input.icon, 'icon', 8) || name.slice(0, 1).toUpperCase();
+    const color = text(input.color, 'colour', 7);
+    if (color && !/^#([0-9a-f]{3}|[0-9a-f]{6})$/i.test(color)) throw fail(400, 'The colour must be a hex colour like #1d4ed8.');
+    for (const v of [input.w, input.h]) if (v != null && !(Number.isInteger(v) && v >= 300 && v <= 4000)) throw fail(400, 'Window sizes are whole pixels from 300 to 4000.');
+    const description = text(input.description, 'description', 200);
+    const was = this.get(id);
+    if (!was && this.apps.length >= MAX_APPS) throw fail(400, `The home screen holds ${MAX_APPS} apps; remove one first.`);
+    const app = {
+      id, name, icon, kind,
+      ...(color && { color }),
+      ...(description && { description }),
+      ...KINDS[kind].clean(input, { repoPath: this.repoPath }),
+      ...(input.w && { w: input.w }), ...(input.h && { h: input.h }),
+      addedBy: was?.addedBy || by, addedAt: was?.addedAt || Date.now(),
+      ...(was && { updatedAt: Date.now() }),
+    };
+    this.apps = was ? this.apps.map((a) => (a.id === id ? app : a)) : [...this.apps, app];
+    this.save();
+    return app;
+  }
+
+  remove(id) {
+    if (!this.get(id)) throw fail(404, 'No app with that id.');
+    this.apps = this.apps.filter((a) => a.id !== id);
+    this.save();
+  }
+
+  // The order the icons sit in. Ids not given keep their place at the end.
+  reorder(ids) {
+    if (!Array.isArray(ids)) throw fail(400, 'Give the app ids in order.');
+    const rank = new Map(ids.map((id, i) => [id, i]));
+    this.apps = [...this.apps].sort((a, b) => (rank.get(a.id) ?? 1e9) - (rank.get(b.id) ?? 1e9));
+    this.save();
+  }
+
+  // What an app keeps for itself (its page has no storage of its own): one
+  // JSON value per app in app-data/<id>.json, so every window onto this
+  // office (a browser tab, the desktop app on whatever port) sees the same.
+  dataFile(id) {
+    if (!ID_RE.test(id || '')) throw fail(400, 'No app with that id.');
+    return path.join(path.dirname(this.file), 'app-data', `${id}.json`);
+  }
+
+  readData(id) {
+    try { return JSON.parse(fs.readFileSync(this.dataFile(id), 'utf8')); } catch (err) {
+      if (err.code === 400) throw err;
+      return null;
+    }
+  }
+
+  writeData(id, value) {
+    const file = this.dataFile(id);
+    const text = JSON.stringify(value ?? null);
+    if (text.length > DATA_MAX) throw fail(413, 'That is more than an app can keep (1 MB).');
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file + '.tmp', text);
+    fs.renameSync(file + '.tmp', file);
+  }
+
+  save() {
+    fs.mkdirSync(path.dirname(this.file), { recursive: true });
+    const tmp = this.file + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify({ apps: this.apps }, null, 2));
+    fs.renameSync(tmp, this.file);
+    this.onChange(this.list());
+  }
+}

package/server/chief.js

@@ -24,7 +24,7 @@ export function canSee(files) {
 const SCHEMA = {
   type: 'object',
   properties: {
-    action: { type: 'string', enum: ['followup', 'new', 'dismiss', 'recall', 'clear', 'standup', 'ask', 'chat'] },
+    action: { type: 'string', enum: ['followup', 'new', 'dismiss', 'recall', 'clear', 'standup', 'restart', 'takeover', 'ask', 'chat'] },
     jobId: { type: 'string' },
     agentId: { type: 'string' },
     agentIds: { type: 'array', items: { type: 'string' } },
@@ -63,6 +63,8 @@ Actions:
 - "dismiss": the boss wants agents sent home (dismissed, let go for now, off the floor). Give "agentIds": the ids of exactly who they mean, worked out from Staff (e.g. "everyone who's free except Mira" means every free agent but Mira). Only free agents can go; leave out anyone working.
 - "recall": the boss wants dismissed agents back in. Give "agentIds" (every dismissed agent if they say "everyone").
 - "clear": the boss wants agents to clear their context (start fresh, forget the conversation so far). Do it yourself; never hand it out as a job. Give "agentIds" for the agents they name, or leave it empty when they mean everyone.
+- "restart": the boss says an agent is stuck, frozen or not responding and wants it nudged, unstuck or restarted. Give the jobId of that agent's working job. Do it yourself: a stuck session can't read messages, so never send it a followup.
+- "takeover": the boss wants someone else to help with, take over or finish a working agent's job (often because it is stuck). Give its jobId, and "agentId" if they named who should take it (otherwise "" for whoever is free). Never pick the agent who was on it.
 - "standup": the boss wants the team to hold a standup now (e.g. "standup time", "let's do standup", "gather everyone for a status update").
 - "ask": you can't tell which project new work belongs to, or the request is too unclear to start. Ask one short question.
 - "chat": greetings, thanks, or questions about the office itself (who is doing what). Answer from the context given. If your answer is about one particular job, give its jobId too, so the boss gets a link to where that job's updates are collecting.

package/server/files.js

@@ -77,6 +77,17 @@ export function pdf(root, rel) {
   return { abs, size: st.size };
 }
 
+// An HTML page to show in the preview: its real path and size, or an error.
+export const MAX_PAGE = 8 * 1024 * 1024;
+export function page(root, rel) {
+  const { abs } = resolve(root, rel);
+  const st = fs.statSync(abs);
+  if (!st.isFile()) throw fail(400, 'That is a folder, not a file.');
+  if (!/\.html?$/i.test(abs)) throw fail(415, 'That is not an HTML page.');
+  if (st.size > MAX_PAGE) throw fail(413, `Too big to preview (${Math.round(st.size / 1048576)} MB; the limit is ${MAX_PAGE / 1048576} MB).`);
+  return { abs, size: st.size };
+}
+
 // `mtime` is what read() gave; null means the file must not exist yet.
 export function write(root, rel, text, mtime) {
   if (typeof text !== 'string') throw fail(400, 'Nothing to save.');