agentbox-app 0.1.7 → 0.1.12

package/shared/claude-models.generated.mjs

@@ -11,16 +11,16 @@
 // number typed into a file of ours would look authoritative while being a
 // guess. Running an old model by mistake is the failure being avoided.
 
-export const READ_FROM = "2.1.283";
-export const READ_AT = "2026-09-29";
+export const READ_FROM = "2.1.293";
+export const READ_AT = "2026-10-08";
 
 export const CLAUDE_MODELS = [
   {"alias":"opus","id":"claude-opus-5-5","label":"Opus 5.5","defaultLevel":"medium"},
   {"alias":"claude-opus-5","id":"claude-opus-5","label":"Opus 5","defaultLevel":"high"},
-  {"alias":"sonnet","id":"claude-sonnet-5","label":"Sonnet 5","defaultLevel":"high"},
-  {"alias":"claude-sonnet-4-6","id":"claude-sonnet-4-6","label":"Sonnet 4.6","defaultLevel":null},
-  {"alias":"haiku","id":"claude-haiku-4-5","label":"Haiku 4.5","defaultLevel":null},
-  {"alias":"claude-3-5-haiku","id":"claude-3-5-haiku","label":"Haiku 3.5","defaultLevel":null},
+  {"alias":"sonnet","id":"claude-sonnet-5-5","label":"Sonnet 5.5","defaultLevel":"medium"},
+  {"alias":"claude-sonnet-5","id":"claude-sonnet-5","label":"Sonnet 5","defaultLevel":"high"},
+  {"alias":"haiku","id":"claude-haiku-5-5","label":"Haiku 5.5","defaultLevel":"medium"},
+  {"alias":"claude-haiku-4-5","id":"claude-haiku-4-5","label":"Haiku 4.5","defaultLevel":null},
   {"alias":"fable","id":"claude-fable-5-1","label":"Fable 5.1","defaultLevel":"high"},
   {"alias":"claude-fable-5","id":"claude-fable-5","label":"Fable 5","defaultLevel":"high"},
 ];

package/shared/claude-usage.mjs

@@ -28,11 +28,11 @@ import { instantIn, localZone, sessionLimit, untilReset, wallIn } from './usage.
 // { span, qualifier, name, percent, resetsAt|null, resetsText, resetsOn, zone }
 
 const LINE = /^Current\s+(session|week)(?:\s*\(([^)]+)\))?\s*:\s*(\d+)%\s*used(?:\s*·\s*resets\s+(.+?))?\s*$/i;
-// THE MINUTES ARE OPTIONAL, AND THAT IS WHY HER CORNER WENT QUIET. Claude Code
-// drops the ":00" when a reset lands on the hour, so the stamp on her Mac read
-// "Sep 1 at 4pm" and this refused it. Refusing it took the countdown out of the
-// pill AND out of the tooltip, which left the wordless "41%" she photographed
-// and could not read. It is one hour in every five.
+// THE MINUTES ARE OPTIONAL, AND THAT IS WHY THE CORNER WENT QUIET. Claude Code
+// drops the ":00" when a reset lands on the hour, so a stamp reads "Sep 1 at
+// 4pm" and this refused it. Refusing it took the countdown out of the pill AND
+// out of the tooltip, which left a wordless percentage nobody could read. It
+// is one hour in every five.
 //
 // THE AM/PM HALF STAYS REQUIRED. An hour on its own is ambiguous by twelve
 // hours, and the standing rule in this file is to refuse rather than guess.
@@ -90,7 +90,7 @@ export function resetAt(text, now = Date.now(), zoneNow = localZone()) {
 }
 
 /**
- * WHAT EACH LIMIT IS CALLED, IN HER WORDS. One copy, because the sentence the
+ * WHAT EACH LIMIT IS CALLED, IN PLAIN WORDS. One copy, because the sentence the
  *  corner reads aloud and the panel's rows have to agree word for word: they are
  *  on the screen at the same moment, one of them read aloud and one of them read.
  *

package/shared/codex-import.mjs

@@ -13,9 +13,9 @@
 // now, so opening the row draws the strip and a 1 or a 2 answers it exactly as
 // Y and N do on the row.
 //
-//   NOTHING IS RESUMED. She chose that on 08-29 for Claude Code threads and it
-//   holds here: a yes makes a row she can READ, with her prompt and Codex's
-//   last message, and replies still happen in Codex.
+//   NOTHING IS RESUMED. That is the rule for Claude Code threads and it
+//   holds here: a yes makes a row the user can READ, with their prompt and
+//   Codex's last message, and replies still happen in Codex.
 //
 // A NO NEVER LOSES ONE.So a no closes the row under its own label, Closed shows
 // it under "Not imported" with an Import key, and the ⌘K import card lists it
@@ -29,7 +29,7 @@ import { Name } from '../shared/product-name.mjs';
 export const CODEX_IMPORT_LABEL = 'codex-import';
 /** On the row once it is hers to read. */
 export const CODEX_MIRROR_LABEL = 'codex';
-/** On a row she said not now to. */
+/** On a row the user said not now to. */
 export const NOT_IMPORTED_LABEL = 'not-imported';
 /** And which conversation, on all three. Codex's own thread id. */
 export const codexLabel = (id) => `codex:${String(id ?? '').trim()}`;
@@ -68,7 +68,7 @@ export function whenPhrase(when, now = Date.now()) {
  * to a notes file in its worktree.
  *
  *  So: pictures are left out. A link to the open web stays a link, because it
- *  works from anywhere (her own cofounder.co link does). A link to this Mac, a
+ *  works from anywhere. A link to this Mac, a
  *  file path or a localhost address, keeps its words and loses its target, and
  *  a line that was nothing but such a link goes entirely, since "Open the
  *  interactive preview." with nothing to open is the confusing part. */
@@ -173,7 +173,7 @@ export function codexImportRow(thread, { projectName, now = Date.now() } = {}) {
 }
 
 /**
- * THE ROW ONCE SHE SAID YES. Her prompt is the body and Codex's last message
+ * THE ROW ONCE THE USER SAID YES. Their prompt is the body and Codex's last message
  *  is the result, so the thread reads You, then Codex, the way it did over
  *  there. The result carries the one line that says where replies go. */
 export function codexMirrorPatch(thread) {
@@ -201,7 +201,7 @@ export function importChoice(answer) {
 
 /**
  * WHICH PROJECT A CONVERSATION BELONGS TO: the one whose folder it ran in,
- * her rule from 08-25. Null when nobody points at that folder. */
+ * the same rule every import follows. Null when nobody points at that folder. */
 export function productsForThread(thread, products = []) {
   const key = String(thread?.folder ?? '').replace(/\/+$/, '');
   if (!key) return [];

package/shared/codex-modes.d.mts

@@ -0,0 +1,50 @@
+// Types for shared/codex-modes.mjs, for the window side.
+//
+// The three ids are `CodexModeId` in renderer/src/types.ts, which is where that
+// union already lives; this file states the shape around them rather than a
+// second copy of the list. renderer/src/codex-modes.ts is the screen's own
+// narrowed view of the same table and reads these through it.
+import type { CodexModeId } from '../renderer/src/types';
+
+/**
+ * THE PAIR A MODE REALLY IS. `sandbox` and `approvalPolicy` go straight into
+ *  Codex's `thread/start`; `approvalsReviewer` is set on `auto` alone, which is
+ *  the only row with asks left to answer. They are plain strings rather than
+ *  unions on purpose: the authority for what Codex accepts is Codex's own
+ *  schema, quoted in the .mjs, and a union here would be a third copy of it
+ *  that nothing checks.
+ */
+export interface CodexMode {
+  label: string;
+  sandbox: string;
+  approvalPolicy: string;
+  approvalsReviewer?: string;
+  what: string;
+}
+
+export declare const CODEX_MODE_ORDER: CodexModeId[];
+export declare const CODEX_DEFAULT_MODE: CodexModeId;
+export declare const CODEX_MODES: Record<CodexModeId, CodexMode>;
+export declare const CODEX_MODE_COMMAND: Record<CodexModeId, string>;
+export declare const CODEX_MODE_HINT: Record<CodexModeId, string>;
+export declare const CODEX_MODE_STATUS: Record<CodexModeId, string>;
+
+export declare function isCodexMode(word: unknown): boolean;
+/** The pair, falling back to the default's pair when the word is not one of ours. */
+export declare function codexPosture(mode: string | null | undefined): {
+  sandbox: string;
+  approvalPolicy: string;
+  approvalsReviewer?: string;
+};
+export declare function codexModeWords(mode: string | null | undefined): string;
+/**
+ * The rows the menu draws for what has been typed. `null` is the way back to
+ *  the project's own setting and is a row like the others.
+ */
+export declare function codexMenuRowsFor(
+  query: string | null,
+  set?: unknown,
+): (CodexModeId | null)[];
+export declare function nextCodexMode(mode: CodexModeId): CodexModeId;
+/** The mode a typed `/word ` means, or null when it means nothing. */
+export declare function exactCodexMode(word: string | null | undefined): CodexModeId | null;

package/shared/codex-modes.mjs

@@ -71,7 +71,7 @@ export const CODEX_MODES = {
     label: 'Full access',
     sandbox: 'danger-full-access',
     approvalPolicy: 'never',
-    what: 'Anything, anywhere on this Mac, without asking.',
+    what: 'Anything, anywhere on this computer, without asking.',
   },
 };
 

package/shared/codex-usage.mjs

@@ -58,17 +58,16 @@
 // ---------------------------------------------------------------------------
 // AND `primary` IS NOT ALWAYS THE FIVE HOUR WINDOW. The block above read one
 // scratch account on 2026-09-05 and took the pairing it happened to see as the
-// shape. Measured again on HER OWN account, 2026-09-18, across the 1,140
-// rate-limit records in her twenty-five most recent Codex sessions: EVERY ONE of
-// them had `secondary: null` and a `primary` whose window was 10080 minutes. Not
-// one five hour window exists on her plan.
+// shape. On some Codex plans the rate-limit records look different: EVERY ONE
+// of them has `secondary: null` and a `primary` whose window is 10080 minutes.
+// Not one five hour window exists on such a plan.
 //
-// So the old table would have drawn her SEVEN DAY limit under the words "This
-// session", which is a confident wrong number about her own subscription, and
-// the corner would have counted a week down as though it were an afternoon.
+// So the old table would have drawn a SEVEN DAY limit under the words "This
+// session", which is a confident wrong number about the user's subscription,
+// and the corner would have counted a week down as though it were an afternoon.
 //
 // THE WINDOW'S OWN LENGTH DECIDES WHAT IT IS CALLED, and the slot it arrived in
-// decides nothing. 300 minutes is her session, 10080 is her week, and an account
+// decides nothing. 300 minutes is a session, 10080 is a week, and an account
 // reporting only one of them gets only that one row. The slot order is still the
 // tie-breaker when a payload names no duration at all, because that is the one
 // case where there is nothing better to go on.

package/shared/demo-world.mjs

@@ -12,10 +12,10 @@
 // shape of every row here is checked by the same rules the real ones are, which
 // only works while this stays importable by a test with no app around it.
 //
-// NOTHING HERE IS HERS AND NOTHING HERE IS REAL. Three invented products, one
-// invented week of work. No path on this Mac, no name of anyone she knows, no
-// product she actually ships. That is the whole point of the row: what goes on
-// the screen in front of a room is invented, and her own inbox stays shut.
+// NOTHING HERE IS THE USER'S AND NOTHING HERE IS REAL. Three invented products,
+// one invented week of work. No path on this Mac, no name of anyone real, no
+// product anyone actually ships. That is the whole point of the row: what goes
+// on the screen in front of a room is invented, and the real inbox stays shut.
 
 import { envName, nameSlug } from './product-name.mjs';
 
@@ -80,7 +80,7 @@ export const DEMO_PRODUCTS = [
 //   work built and waiting     the "merge it" she should not have to type
 //   something blocked on her   the app saying it is stuck, out loud
 //   a finished row             a result, and what the inbox looks like empty
-//   one row she wrote herself  her own words on a card, answered
+//   one row the user wrote     the user's own words on a card, answered
 //
 // THE BODIES ARE WRITTEN THE WAY THE WORKER BRIEF SAYS TO WRITE THEM: the ask
 // in bold on the first line, under fifteen words, then the context, then an
@@ -214,7 +214,7 @@ function lines(now) {
     result: [
       'The clause summariser is merged and running. It read all ten contracts in the test folder and named every termination, auto renewal and liability clause in all ten, with two false positives on the longest one.',
       '',
-      'Ninety three seconds for the longest contract, four seconds for the shortest. Measured on this Mac, not estimated.',
+      'Ninety three seconds for the longest contract, four seconds for the shortest. Measured on this computer, not estimated.',
     ].join('\n'),
   });
 

package/shared/engines.mjs

@@ -25,15 +25,15 @@
 // :494). Nothing has ever been written to clear it on purpose, so the honest
 // statement is "probably still there", not "always will be".
 //
-// HOW MANY SUCH ROWS SHE ACTUALLY HAS IS AN OPEN QUESTION, AND IT IS NOT ZERO
-// UNTIL SOMEBODY LOOKS. It could not be measured from the machine this was
-// written on: there is no ~/Zero there at all. On her Mac it is one command,
+// HOW MANY SUCH ROWS A STORE ACTUALLY HAS IS AN OPEN QUESTION, AND IT IS NOT
+// ZERO UNTIL SOMEBODY LOOKS. It could not be measured from the machine this was
+// written on: there is no ~/Zero there at all. On a real store it is one command,
 // `grep -rho '"engine":"[a-z]*"' ~/Zero | sort | uniq -c`, and the answer
 // belongs in this paragraph when someone runs it. The gate below costs nothing
 // if the count turns out to be zero, and is the whole story if it is not.
 //
 // So the 08-25 resolver, restored unchanged, would have been a silent reversal
-// of her decision: those rows would start choosing Codex again the moment this
+// of the decision to withhold Codex: those rows would start choosing Codex again the moment this
 // module landed, with no picker, nothing in Settings, and no approval path
 // built. The resolver is therefore CLOSED unless the caller hands it
 // `ENGINE_CHOICE_ENABLED` below. A caller that passes nothing gets Claude
@@ -143,7 +143,7 @@ export const ENGINE_CHOICE_ENABLED = Symbol('the second engine is wired up in th
  * in the app's own state rather than in her file: a fresh install, a state file
  * she deleted, or a second Mac would each invent a different moment, and the
  * one thing this value must be is the same on every machine reading the same
- * store. A date she typed is a fact about her decision; a date we noticed is a
+ * store. A date the user typed is a fact about their decision; a date we noticed is a
  * fact about a process.
  *
  * THE WORKSPACE DEFAULT (`config.engine`) IS TIME-SCOPED TOO, SINCE 2026-09-05,
@@ -210,7 +210,7 @@ export function engineDefaultSince(config = {}) {
  * gate withholds — the same rule `engineChoiceOnRowIsStale` follows below, and
  * for the same reason: discarding it could only ever move work TO the second
  * engine, which is the one direction the gate exists to prevent. False when
- * there is no stamp, which is a default she typed beside the moment itself.
+ * there is no stamp, which is a default typed beside the moment itself.
  */
 export function engineDefaultIsStale(config = {}) {
   const since = engineChoiceSince(config);
@@ -271,9 +271,9 @@ export function engineLabel(id) {
  * `found` is a map of id to boolean. An engine whose binary is not on the
  * machine is not offered, because a picker that offers something that cannot
  * run is a picker that hands her a session that dies on arrival. Claude Code
- * is always in the list even when it was not found: the app already refuses to
- * open an inbox without it and says so in its own words (main/claude-bin.mjs),
- * and a second sentence here saying the same thing differently is noise.
+ * is in the list even when it was not found, UNLESS Codex was: a Mac with only
+ * Codex is offered only Codex (`homeEngine` below). With neither, the app
+ * refuses to open an inbox and says so in its own words.
  *
  * UNGATED, AND THE INVARIANT IS THEREFORE SCOPED TO ROUTING. Say it plainly,
  * because the file must not claim more than the code delivers: this function,
@@ -296,7 +296,21 @@ export function engineLabel(id) {
  * holds the caller list exactly, so the next one has to argue for itself here.
  */
 export function availableEngines(found = {}) {
-  return ENGINES.filter((e) => e.id === DEFAULT_ENGINE || found[e.id]);
+  const home = homeEngine(found);
+  return ENGINES.filter((e) => e.id === home || (e.id !== DEFAULT_ENGINE && found[e.id]));
+}
+
+/**
+ * WHAT RUNS WHEN NOBODY HAS CHOSEN, ON THIS MAC. Claude Code, unless this Mac
+ * has said for certain that Claude Code is not here and Codex is. The app needs
+ * one of the two, not both, so a Mac with only Codex runs everything on Codex.
+ *
+ * `found.claude` has to be an explicit `false`. A caller that never asked
+ * (every call written before this, and every test config) leaves it undefined,
+ * and that reads as Claude Code being here, which is what it always meant.
+ */
+export function homeEngine(found = {}) {
+  return found.claude === false && found.codex ? 'codex' : DEFAULT_ENGINE;
 }
 
 /** Whether there is a choice to make at all. One engine is not a choice. */
@@ -334,6 +348,9 @@ export function engineChoiceExists(found = {}) {
  * token FROM that same value, so in her app the two cannot come apart.
  */
 export function engineFor(item, { config = {}, found = {}, enabled } = {}) {
+  // ONE ENGINE ON THE MAC IS NOT A CHOICE, so the gate has nothing to guard.
+  // Without Claude Code, a row marked `claude` would only die on arrival.
+  if (homeEngine(found) !== DEFAULT_ENGINE) return homeEngine(found);
   if (enabled !== ENGINE_CHOICE_ENABLED) return DEFAULT_ENGINE;
   const wanted = isEngine(item?.engine) && !engineChoiceOnRowIsStale(item, config) ? item.engine : null;
   const fallback = isEngine(config?.engine) && !engineDefaultIsStale(config) ? config.engine : DEFAULT_ENGINE;

package/shared/feedback.d.mts

@@ -0,0 +1,14 @@
+// Types for shared/feedback.mjs, which is plain ESM so the Feedback card and
+// the main process read one copy of the limits.
+
+export const FEEDBACK_LIMITS: Readonly<{ text: number; files: number; bytes: number }>;
+
+export function totalBytes(files?: { size?: number }[]): number;
+
+export function checkFeedback(p?: { text?: string; files?: { size?: number }[] }): { ok: true } | { ok: false; reason: string };
+
+export function feedbackPayload(p?: {
+  text?: string;
+  files?: { name: string; type: string; data: string }[];
+  app?: { version?: string; os?: string };
+}): { text: string; files: { name: string; type: string; data: string }[]; app: { version: string; os: string } };

package/shared/feedback.mjs

@@ -0,0 +1,44 @@
+// WHAT A PIECE OF FEEDBACK MAY BE, in one place, read by the card before it
+// lets you press Send and by the main process again before anything leaves the
+// machine (w-1b574413db). The server function checks the same limits a third
+// time, because it is the only one of the three a stranger can reach directly.
+//
+// Words, files, or both, and never nothing. The size limit keeps one request
+// well inside what the mail provider takes as attachments.
+
+export const FEEDBACK_LIMITS = Object.freeze({
+  text: 20_000,
+  files: 10,
+  bytes: 8 * 1024 * 1024,
+});
+
+export function totalBytes(files = []) {
+  return files.reduce((sum, f) => sum + (Number.isFinite(f?.size) ? f.size : 0), 0);
+}
+
+// { ok: true } or { ok: false, reason } where the reason is a sentence the
+// card can show as it is.
+export function checkFeedback({ text = '', files = [] } = {}) {
+  const words = String(text ?? '').trim();
+  const list = Array.isArray(files) ? files : [];
+  if (!words && list.length === 0) return { ok: false, reason: 'Write something or attach a file first.' };
+  if (words.length > FEEDBACK_LIMITS.text) {
+    return { ok: false, reason: `Keep it under ${FEEDBACK_LIMITS.text.toLocaleString('en-US')} characters.` };
+  }
+  if (list.length > FEEDBACK_LIMITS.files) return { ok: false, reason: `Attach up to ${FEEDBACK_LIMITS.files} files.` };
+  if (totalBytes(list) > FEEDBACK_LIMITS.bytes) {
+    return { ok: false, reason: `Files can add up to ${FEEDBACK_LIMITS.bytes / 1024 / 1024} MB.` };
+  }
+  return { ok: true };
+}
+
+// Exactly what travels: the words trimmed, each file as name, type and its
+// base64, and the app's version so a report can be matched to a release.
+// Nothing else the card happened to hold rides along.
+export function feedbackPayload({ text = '', files = [], app = {} } = {}) {
+  return {
+    text: String(text ?? '').trim(),
+    files: (files ?? []).map(({ name, type, data }) => ({ name: String(name ?? 'file'), type: String(type || 'application/octet-stream'), data: String(data ?? '') })),
+    app: { version: String(app.version ?? ''), os: String(app.os ?? '') },
+  };
+}

package/shared/first-run-examples.mjs

@@ -21,19 +21,19 @@
 export const EXAMPLES = [
   {
     kind: 'question',
-    title: 'Example: which of these two names should the project use?',
-    result: 'Example. Both are free. Say either one and I will rename everything to match.',
+    title: 'Example: which of these two dates should the offsite use?',
+    result: 'Example. Both are free. Say either one and I will book it.',
     agoMs: 4 * 60_000,
   },
   {
     kind: 'task',
-    title: 'Example: the sign in page is built and the tests are green.',
+    title: 'Example: the meeting notes are summarised and shared.',
     result: 'Example. Nothing here needs you. Close it and it is gone.',
     agoMs: 11 * 60_000,
   },
   {
     kind: 'review',
-    title: 'Example: I took the smaller library, say if you disagree.',
+    title: 'Example: I picked the cheaper venue, say if you disagree.',
     result: 'Example. This is what an agent looks like when it made a call without you.',
     agoMs: 26 * 60_000,
   },

package/shared/first-run-practice.d.mts

@@ -7,10 +7,26 @@ export const PRACTICE_SLUG: string;
 export const PRACTICE_FLAG: string;
 export const PRACTICE_TASK: { title: string; body: string };
 export const PRACTICE_ANSWER: string;
+export const PRACTICE_REPLY: string;
+export const PRACTICE_REPLY_ANSWER: string;
 export const PRACTICE_TASK_TRACE: string[];
 /** The practice project's sidebar note, written to its `pinned.md` and drawn
  *  beside the third introduction slab. */
 export const PRACTICE_NOTE: string;
+/** The rest of the practice team's work, drawn from the tab tour onward so
+ *  the list and the board are not empty. `state` is the column it lands in. */
+export const PRACTICE_BACKDROP: {
+  state: 'needs' | 'working' | 'scheduled';
+  kind: string;
+  title: string;
+  body: string;
+  trace: string[];
+  /** Only on the `needs` rows: what the agent handed back. */
+  result?: string;
+  agoMs: number;
+  /** Only on the `scheduled` row: how long after staging it is set to run. */
+  inMs?: number;
+}[];
 export const PRACTICE_ROWS: {
   kind: string;
   title: string;